SMC Networks SMC8724M, SMC8748M NTRODUCTION

1-1

HAPTER

NTRODUCTION

This switch provides a broad range of features for Layer 2 switching. It

includes a management agent that allows you to configure the features

listed in this manual. The default configuration can be used for most of the

features provided by this switch. However, there are many options that you

should configure to maximize the switch’s performance for your particular

network environment.

Key Features

Table 1-1 Key Features

Feature Description

Configuration

Backup and

Restore

Backup to TFTP server

Authentication Console, Telnet, Web – User name / password, RADIUS,

TACACS+

Web – SSL/HTTPS; Telnet – SSH

SNMP v1/2c – Community strings, IP address filtering

SNMP v3 – MD5 or SHA password

Port – IEEE 802.1X, MAC address filtering

Access Control

Lists

Supports up to 32 IP or MAC ACLs

DNS Server Supported

Port Configuration Speed, duplex mode and flow control

Rate Limiting Input and output rate limiting per port

Contents

Main TigerStack 10G Gigabit Ethernet Switch Management Guide Page Page Page Page L W IMITED ii ARRANTY W IMITED ARRANTY Page iii ONTENTS 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 2 Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1 3 Configuring the Switch . . . . . . . . . . . . . . . . . . . . . . . . 3-1 iv v vi vii 4 Command Line Interface . . . . . . . . . . . . . . . . . . . . . . 4-1 viii ix x xi xii xiii xiv xv Page T xvii ABLES xviii xix F xx IGURES xxi xxii 1-1 NTRODUCTION Key Features 1-2 Description of Software Features F S 1-3 1-4 F S 1-5 1-6 D 1-7 System Defaults 1-8 D 1-9 1-10 NITIAL 2-1 ONFIGURATION Connecting to the Switch Configuration Options C 2-2 Required Connections S 2-3 C 2-4 Remote Connections O 2-5 Stack Operations Selecting the Stack Master C 2-6 Master Backup Unit Recovering from Stack Failure or Topology Change Broken Link for Line and Wrap-around Topologies O 2-7 IP Interface for Stack Management C 2-8 Basic Configuration Console Connection C 2-9 Setting Passwords C 2-10 Setting an IP Address Manual Configuration C 2-11 Dynamic Configuration C 2-12 Enabling SNMP Management Access C 2-13 Community Strings (for SNMP version 1 and 2c clients) C 2-14 Trap Receivers Configuring Access for SNMP Version 3 Clients C 2-15 Saving Configuration Settings C 2-16 Managing System Files Page Page ONFIGURING THE 3-1 WITCH Using the Web Interface Page Navigating the Web Browser Interface Page I B W 3-5 S 3-6 I B W 3-7 S 3-8 I B W 3-9 S 3-10 I B W 3-11 Basic Configuration Displaying System Information Page S 3-14 CLI Specify the hostname, location and contact information. Displaying Switch Hardware/Software Versions C 3-15 S 3-16 Displaying Bridge Extension Capabilities C 3-17 S 3-18 Setting the Switchs IP Address C 3-19 Manual Configuration Page C 3-21 S 3-22 Managing Firmware Page Page C 3-25 Saving or Restoring Configuration Settings S 3-26 C 3-27 Downloading Configuration Settings from a Server S 3-28 Console Port Settings C 3-29 S 3-30 C 3-31 Telnet Settings S 3-32 C 3-33 Configuring Event Logging System Log Configuration S 3-34 C 3-35 Remote Log Configuration S 3-36 C 3-37 Displaying Log Messages Sending Simple Mail Transfer Protocol Alerts S 3-38 Page S 3-40 Renumbering the Stack C 3-41 Resetting the System S 3-42 Setting the System Clock Configuring SNTP C 3-43 Setting the Time Zone Page N P M 3-45 Simple Network Management Protocol S 3-46 Table 3-4 SNMPv3 Security Models and Levels Page S 3-48 Specifying Trap Managers and Trap Types N P M 3-49 Page N P M 3-51 Setting an Engine ID S 3-52 Configuring SNMPv3 Users Page S 3-54 Configuring SNMPv3 Groups Page S 3-56 Setting SNMPv3 Views Page S 3-58 User Authentication Page Page A 3-61 S 3-62 A 3-63 S 3-64 A 3-65 Configuring HTTPS S 3-66 Replacing the Default Secure-site Certificate A 3-67 Configuring the Secure Shell S 3-68 A 3-69 S 3-70 Generating the Host Key Pair Page S 3-72 Configuring the SSH Server Page S 3-74 Configuring Port Security A 3-75 Page A 3-77 S 3-78 Displaying 802.1X Global Settings Command Attributes A 3-79 Configuring 802.1X Global Settings S 3-80 Configuring Port Settings for 802.1X A 3-81 S 3-82 A 3-83 Displaying 802.1X Statistics This switch can display statistics for dot1x protocol exchanges for any port. Table 3-6 802.1X Statistics Page A 3-85 Filtering IP Addresses for Management Access S 3-86 C L Access Control Lists Configuring Access Control Lists S 3-88 Setting the ACL Name and Type C L 3-89 Configuring a Standard IP ACL S 3-90 Configuring an Extended IP ACL C L 3-91 Page C L 3-93 Configuring a MAC ACL Page C L 3-95 Configuring ACL Masks Specifying the Mask Type S 3-96 Configuring an IP ACL Mask C L 3-97 S 3-98 Configuring a MAC ACL Mask Page S 3-100 Binding a Port to an Access Control List Page S 3-102 Port Configuration Displaying Connection Status Field Attributes (Web) C 3-103 Field Attributes (CLI) Basic information: Configuration: S 3-104 Current status: C 3-105 Configuring Interface Connections S 3-106 C 3-107 Creating Trunk Groups S 3-108 C } 3-109 Statically Configuring a Trunk Page C } ORT 3-111 Enabling LACP on Selected Ports } S 3-112 C 3-113 Configuring LACP Parameters Dynamically Creating a Port Channel S 3-114 Page S Counter Information 3-116 Displaying LACP Port Counters C 3-117 Figure 3-54 LACP - Port Counters Information Table 3-7 LACP Port Counters (Continued) S 3-118 CLI The following example displays LACP counters for port channel 1. Displaying LACP Settings and Status for the Local Side C 3-119 Table 3-8 LACP Internal Configuration Information (Continued) S 3-120 C 3-121 Displaying LACP Settings and Status for the Remote Side Table 3-9 LACP Neighbor Configuration Information S 3-122 C 3-123 Setting Broadcast Storm Thresholds S 3-124 C 3-125 Configuring Port Mirroring Page C 3-127 Showing Port Statistics S 3-128 Table 3-10 Port Statistics C 3-129 S 3-130 C 3-131 Page Page S 3-134 Address Table Settings Setting Static Addresses T S 3-135 Page Page S 3-138 Spanning Tree Algorithm Configuration T C A 3-139 S 3-140 Displaying Global Settings T C A 3-141 S 3-142 T C A 3-143 S 3-144 Configuring Global Settings T C A 3-145 S 3-146 Page S 3-148 T C A 3-149 Displaying Interface Settings x T x C A 3-151 S 3-152 T C A 3-153 Configuring Interface Settings S 3-154 T C A 3-155 S 3-156 Configuring Multiple Spanning Trees T C A 3-157 Page T C LGORITHM A REE Page T C LGORITHM A REE S 3-162 Configuring Interface Settings for MSTP T C A 3-163 VLAN Configuration IEEE 802.1Q VLANs 3-165 Assigning Ports to VLANs S 3-166 3-167 Forwarding Tagged/Untagged Frames S 3-168 Enabling or Disabling GVRP (Global Setting) Displaying Basic VLAN Information 3-169 Displaying Current VLANs S 3-170 Command Attributes (Web) Command Attributes (CLI) 3-171 Creating VLANs S 3-172 3-173 Adding Static Members to VLANs (VLAN Index) S 3-174 3-175 Adding Static Members to VLANs (Port Index) Page 3-177 Configuring VLAN Behavior for Interfaces S 3-178 3-179 x S 3-180 Configuring Private VLANs 3-181 Enabling Private VLANs Configuring Uplink and Downlink Ports S 3-182 Configuring Protocol-Based VLANs 3-183 Configuring Protocol Groups S 3-184 Mapping Protocols to VLANs 3-185 S 3-186 Class of Service Configuration Layer 2 Queue Settings Setting the Default Priority for Interfaces C S 3-187 S 3-188 Mapping CoS Values to Egress Queues C S 3-189 S 3-190 Selecting the Queue Mode Page S 3-192 Layer 3/4 Priority Settings Mapping Layer 3/4 Priorities to CoS Values Page S 3-194 C S 3-195 Mapping DSCP Priority S 3-196 C S 3-197 Mapping IP Port Priority S 3-198 C S 3-199 Mapping CoS Values to ACLs Page F 3-201 Multicast Filtering S 3-202 Layer 2 IGMP (Snooping and Query) Configuring IGMP Snooping and Query Parameters F 3-203 S 3-204 F 3-205 Displaying Interfaces Attached to a Multicast Router S 3-206 Specifying Static Interfaces for a Multicast Router F 3-207 Displaying Port Members of Multicast Services S 3-208 Assigning Ports to Multicast Services F 3-209 S 3-210 Configuring Domain Name Service Configuring General DNS Server Parameters D S N 3-211 Page D S N 3-213 Configuring Static DNS Host to Address Entries Page D S N 3-215 Displaying the DNS Cache S 3-216 Web Select DNS, Cache. 4-1 4 I INE L OMMAND L I 4-2 Telnet Connection C Entering Commands Keywords and Arguments Page C NTERING 4-5 Showing Commands Page C 4-7 Understanding Command Modes Exec Commands L I 4-8 Configuration Commands C 4-9 L I 4-10 Command Line Processing G Command Groups The system commands can be broken down into the functional groups shown below Table 4-4 Command Group Index L I 4-12 C 4-13 Line Commands Table 4-5 Line Command Syntax L I 4-14 line C 4-15 login L I 4-16 password C 4-17 timeout login response L I 4-18 exec-timeout C 4-19 password-thresh L I 4-20 silent-time databits C 4-21 parity L I 4-22 speed C 4-23 stopbits disconnect Page C General Commands 4-25 Example To show all lines, enter this command: Table 4-6 General Commands L I 4-26 enable C 4-27 disable configure L I 4-28 show history C 4-29 reload end L I 4-30 exit quit System Management Commands L I 4-32 Device Designation Commands prompt M C 4-33 hostname switch renumber L I 4-34 User Access Commands username M C 4-35 L I 4-36 enable password M C 4-37 IP Filter Commands management L I 4-38 show management M C Web Server Commands 4-39 Command Mode Privileged Exec L I 4-40 ip http port ip http server M C 4-41 ip http secure-server L I 4-42 ip http secure-port M C 4-43 Telnet Server Commands ip telnet server L I 4-44 ip telnet server port Secure Shell Commands M C 4-45 L I 4-46 M C 4-47 L I 4-48 ip ssh server M C 4-49 ip ssh timeout L I 4-50 ip ssh authentication-retries ip ssh server-key size M C 4-51 delete public-key ip ssh crypto host-key generate L I 4-52 ip ssh crypto zeroize M C 4-53 ip ssh save host-key L I 4-54 show ip ssh show ssh M C 4-55 show public-key Table 4-16 show ssh - display description (Continued) L I Event Logging Commands 4-56 M C 4-57 logging on L I 4-58 logging history M C 4-59 logging host L I 4-60 logging facility M C 4-61 logging trap L I 4-62 clear log show logging M C 4-63 L I 4-64 show log M C 4-65 The following example shows the event message stored in RAM. SMTP Alert Commands L I 4-66 logging sendmail host M C 4-67 logging sendmail level logging sendmail source-email L I 4-68 logging sendmail destination-email M C 4-69 logging sendmail show logging sendmail L I 4-70 Time Commands sntp client M C 4-71 sntp server L I 4-72 sntp poll M C 4-73 show sntp clock timezone L I 4-74 calendar set M C 4-75 show calendar L I 4-76 System Status Commands show startup-config M C 4-77 show running-config L I 4-78 M C ANAGEMENT YSTEM 4-79 L I 4-80 show system M C 4-81 show users show version L I 4-82 Frame Size Commands jumbo frame M C 4-83 L I Flash/File Commands copy C 4-85 L I 4-86 The following example shows how to copy the running configuration to a startup file. The following example shows how to download a configuration file: C 4-87 delete L I 4-88 dir C 4-89 whichboot L I 4-90 boot system C Authentication Commands Authentication Sequence L I 4-92 authentication login C 4-93 authentication enable L I 4-94 RADIUS Client C 4-95 radius-server host L I 4-96 radius-server port radius-server key C 4-97 radius-server retransmit radius-server timeout L I 4-98 show radius-server TACACS+ Client C 4-99 tacacs-server host L I 4-100 tacacs-server port tacacs-server key C 4-101 show tacacs-server Port Security Commands L I 4-102 port security C 4-103 L I 4-104 802.1X Port Authentication Table 4-32 802.1X Port Authentication Commands C 4-105 dot1x system-auth-control dot1x default L I 4-106 dot1x max-req dot1x port-control C 4-107 dot1x operation-mode L I 4-108 dot1x re-authenticate dot1x re-authentication C 4-109 dot1x timeout quiet-period dot1x timeout re-authperiod L I 4-110 dot1x timeout tx-period show dot1x C 4-111 L I 4-112 C UTHENTICATION 4-113 L I Access Control List Commands C L 4-115 L I IP ACLs 4-116 Table 4-33 Access Control List Commands C L 4-117 access-list ip Table 4-34 IP ACL Commands (Continued) L I 4-118 permit, deny (Standard ACL) C L 4-119 L I 4-120 permit, deny (Extended ACL) C L 4-121 L I 4-122 show ip access-list C L 4-123 access-list ip mask-precedence L I 4-124 mask (IP ACL) C L 4-125 L I 4-126 C L 4-127 show access-list ip mask-precedence L I 4-128 ip access-group C L 4-129 show ip access-group map access-list ip L I 4-130 show map access-list ip C L 4-131 match access-list ip L I 4-132 show marking C L 4-133 MAC ACLs Table 4-36 MAC ACL Commands L I 4-134 access-list mac C L 4-135 permit, deny (MAC ACL) L I 4-136 C L 4-137 show mac access-list access-list mac mask-precedence L I 4-138 mask (MAC ACL) C L 4-139 L I 4-140 show access-list mac mask-precedence C L 4-141 mac access-group show mac access-group L I 4-142 map access-list mac C L 4-143 show map access-list mac L I ACL Information 4-144 match access-list mac C L 4-145 show access-list show access-group SNMP Commands 4-147 L I 4-148 4-149 L I 4-150 4-151 L I 4-152 4-153 L I 4-154 4-155 L I 4-156 4-157 L I 4-158 Page L I 4-160 Table 4-42 show snmp group - display description groupname Name of an SNMP group. security model The SNMP version. readview The associated read view. 4-161 L I 4-162 4-163 DNS Commands Table 4-44 DNS Commands Table 4-43 show snmp user - display description L I 4-164 ip host 4-165 clear host L I 4-166 ip domain-name 4-167 ip domain-list L I 4-168 ip name-server 4-169 ip domain-lookup L I 4-170 show hosts 4-171 show dns show dns cache Page C 4-173 Interface Commands Table 4-45 Interface Commands L I 4-174 interface description C 4-175 speed-duplex L I 4-176 negotiation C 4-177 capabilities L I 4-178 flowcontrol C 4-179 media-type L I 4-180 shutdown C 4-181 switchport broadcast packet-rate L I 4-182 clear counters Page L I 4-184 show interfaces counters C 4-185 L I 4-186 show interfaces switchport C 4-187 Table 4-46 show interfaces switchport - display description L I Mirror Port Commands port monitor P C 4-189 show port monitor L Rate Limit Commands Page L I 4-192 Link Aggregation Commands A C 4-193 L I 4-194 channel-group lacp Page L I 4-196 A C 4-197 lacp system-priority L I 4-198 lacp admin-key (Ethernet Interface) A C 4-199 lacp admin-key (Port Channel) L I 4-200 lacp port-priority A C 4-201 show lacp L I 4-202 Table 4-50 show lacp counters - display description Table 4-51 show lacp internal - display description A C 4-203 Table 4-51 show lacp internal - display description (Continued) L I 4-204 Table 4-52 show lacp neighbors - display description A C GGREGATION INK 4-205 Address Table Commands mac-address-table static T C 4-207 clear mac-address-table dynamic L I 4-208 show mac-address-table T C 4-209 mac-address-table aging-time L Spanning Tree Commands T C 4-211 Table 4-55 Spanning Tree Commands (Continued) L I 4-212 spanning-tree T C 4-213 spanning-tree mode L I 4-214 spanning-tree forward-time T C 4-215 spanning-tree hello-time L I 4-216 spanning-tree max-age T C 4-217 spanning-tree priority spanning-tree pathcost method L I 4-218 spanning-tree transmission-limit T C 4-219 spanning-tree mst configuration mst vlan L I 4-220 T C 4-221 mst priority L I 4-222 name revision T C 4-223 max-hops L I 4-224 spanning-tree spanning-disabled T C 4-225 spanning-tree cost L I 4-226 spanning-tree port-priority spanning-tree edge-port T C 4-227 spanning-tree portfast L I 4-228 spanning-tree link-type T C 4-229 spanning-tree mst cost L I 4-230 T C 4-231 spanning-tree mst port-priority Page T C 4-233 show spanning-tree L I 4-234 4-235 show spanning-tree mst configuration VLAN Commands L I 4-236 Editing VLAN Groups vlan database 4-237 vlan L I Configuring VLAN Interfaces 4-238 Table 4-58 Configuring VLAN Interfaces 4-239 interface vlan L I 4-240 switchport mode 4-241 switchport acceptable-frame-types L I 4-242 switchport ingress-filtering 4-243 switchport native vlan L I 4-244 switchport allowed vlan 4-245 switchport forbidden vlan L I 4-246 Displaying VLAN Information show vlan 4-247 Configuring Private VLANs pvlan L I 4-248 show pvlan 4-249 Configuring Protocol-based VLANs L I 4-250 protocol-vlan protocol-group (Configuring Groups) 4-251 protocol-vlan protocol-group (Configuring Interfaces) L I 4-252 show protocol-vlan protocol-group 4-253 show interfaces protocol-vlan protocol-group L I 4-254 GVRP and Bridge Extension Commands bridge-ext gvrp GVRP C E B 4-255 L I 4-256 switchport gvrp show gvrp configuration GVRP C E B 4-257 L I 4-258 show garp timer C Priority Commands L I 4-260 Priority Commands (Layer 2) queue mode C 4-261 switchport priority default L I 4-262 queue bandwidth C 4-263 queue cos-map L I 4-264 C 4-265 show queue mode show queue bandwidth L I 4-266 show queue cos-map C 4-267 Priority Commands (Layer 3 and 4) Table 4-66 Priority Commands (Layer 3 and 4) L I 4-268 map ip port (Global Configuration) map ip port (Interface Configuration) C 4-269 map ip precedence (Global Configuration) L I 4-270 map ip precedence (Interface Configuration) C 4-271 map ip dscp (Global Configuration) L I 4-272 map ip dscp (Interface Configuration) C 4-273 show map ip port L I 4-274 show map ip precedence C 4-275 show map ip dscp L I Multicast Filtering Commands Table 4-69 Multicast Filtering Commands Table 4-70 IGMP Snooping Commands F C 4-277 ip igmp snooping ip igmp snooping vlan static L I 4-278 ip igmp snooping version F C 4-279 show ip igmp snooping show mac-address-table multicast L I IGMP Query Commands (Layer 2) 4-280 F C 4-281 ip igmp snooping querier ip igmp snooping query-count L I 4-282 ip igmp snooping query-interval F C 4-283 ip igmp snooping query-max-response-time L I 4-284 ip igmp snooping router-port-expire-time F C 4-285 Static Multicast Routing Commands ip igmp snooping vlan mrouter L I 4-286 show ip igmp snooping mrouter C IP Interface Commands Basic IP Configuration L I 4-288 ip address C 4-289 ip dhcp restart L I 4-290 ip default-gateway C 4-291 show ip interface show ip redirects L I 4-292 ping C 4-293 Related Commands interface (4 -174) Page PPENDIX OFTWARE A-1 PECIFICATIONS Software Features Management Features S A-3 Standards S A-4 Management Information Bases Page Page PPENDIX B-1 B T Problems Accessing the Management Interface ROUBLESHOOTING B-2 S L B-3 Using System Logs Page G Glossary-1 LOSSARY Glossary-2 Glossary-3 Glossary-4 Glossary-5 Glossary-6 Glossary-7 Glossary-8 NDEX Numerics A B C E F G H I P Q R S T U V W