SMC Networks TigerSwitch Manuel de programmation

TigerSwitch 10/100

24-Port 10/100Mbps

Stackable Managed Switch

Management Guide

◆24 auto-MDI/MDI-X 10BASE-T/100BASE-TX ports

◆2 Gigabit RJ-45 ports shared with 2 SFP transceiver slots

◆2 Gigabit stacking ports that act as Ethernet ports in

standalone mode

◆Stacks up to 8 units

◆12.8 Gbps of aggregate bandwidth

◆Non-blocking switching architecture

◆Spanning Tree Protocol and Rapid STP

◆Up to four LACP or static 4-port trunks

◆RADIUS and TACACS+ authentication

◆Rate limiting for bandwidth management

◆CoS support for four-level priority

◆Full support for VLANs with GVRP

◆IP Multicasting with IGMP Snooping

Management Guide

SMC6224M

38 Tesla

Irvine, CA 92618

Phone: (949) 679-8000

TigerSwitch 10/100

Management Guide

From SMC’s Tiger line of feature-rich workgroup LAN solutions

November 2004

Pub. # 149100005000H

Information furnished by SMC Networks, Inc. (SMC) is believed to be accu-

rate and reliable. However, no responsibility is assumed by SMC for its use,

nor for any infringements of patents or other rights of third parties which

may result from its use. No license is granted by implication or otherwise

under any patent or patent rights of SMC. SMC reserves the right to change

specifications at any time without notice.

SMC Networks, Inc.

38 Tesla

Irvine, CA 92618

Trademarks:

SMC is a registered trademark; and EZ Switch, TigerStack and TigerSwitch are trademarks of SMC Networks,

Inc. Other product and company names are trademarks or registered trademarks of their respective holders.

IMITED

ARRANTY

Limited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products to be free

from defects in workmanship and materials, under normal use and service, for the applicable

warranty term. All SMC products carry a standard 90-day limited warranty from the date of

purchase from SMC or its Authorized Reseller. SMC may, at its own discretion, repair or replace

any product not operating as warranted with a similar or functionally equivalent product, during

the applicable warranty term. SMC will endeavor to repair or replace any product returned under

warranty within 30 days of receipt of the product.

The standard limited warranty can be upgraded to a Limited Lifetime* warranty by registering

new products within 30 days of purchase from SMC or its Authorized Reseller. Registration can

be accomplished via the enclosed product registration card or online via the SMC web site.

Failure to register will not affect the standard limited warranty. The Limited Lifetime warranty

covers a product during the Life of that Product, which is defined as the period of time during

which the product is an “Active” SMC product. A product is considered to be “Active” while it is

listed on the current SMC price list. As new technologies emerge, older technologies become

obsolete and SMC will, at its discretion, replace an older product in its product line with one that

incorporates these newer technologies. At that point, the obsolete product is discontinued and is

no longer an “Active” SMC product. A list of discontinued products with their respective dates

of discontinuance can be found at:

http://www.smc.com/index.cfm?action=customer_service_warranty.

All products that are replaced become the property of SMC. Replacement products may be

either new or reconditioned. Any replaced or repaired product carries either a 30-day limited

warranty or the remainder of the initial warranty, whichever is longer. SMC is not responsible for

any custom software or firmware, configuration information, or memory data of Customer

contained in, stored on, or integrated with any products returned to SMC pursuant to any

warranty. Products returned to SMC should have any customer-installed accessory or add-on

components, such as expansion modules, removed prior to returning the product for

replacement. SMC is not responsible for these items if they are returned with the product.

Customers must contact SMC for a Return Material Authorization number prior to returning

any product to SMC. Proof of purchase may be required. Any product returned to SMC without

a valid Return Material Authorization (RMA) number clearly marked on the outside of the

package will be returned to customer at customer’s expense. For warranty claims within North

America, please call our toll-free customer support number at (800) 762-4968. Customers are

responsible for all shipping charges from their facility to SMC. SMC is responsible for return

shipping charges from SMC to customer.

IMITED

ARRANTY

WARRANTIES EXCLUSIVE: IF AN SMC PRODUCT DOES NOT OPERATE AS

WARRANTED ABOVE, CUSTOMER’S SOLE REMEDY SHALL BE REPAIR OR

REPLACEMENT OF THE PRODUCT IN QUESTION, AT SMC’S OPTION. THE

FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU

OF ALL OTHER WARRANTIES OR CONDITIONS, EXPRESS OR IMPLIED, EITHER

IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING

WARRANTIES OR CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A

PARTICULAR PURPOSE. SMC NEITHER ASSUMES NOR AUTHORIZES ANY OTHER

PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH

THE SALE, INSTALLATION, MAINTENANCE OR USE OF ITS PRODUCTS. SMC

SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND

EXAMINATION DISCLOSE THE ALLEGED DEFECT IN THE PRODUCT DOES

NOT EXIST OR WAS CAUSED BY CUSTOMER’S OR ANY THIRD PERSON’S MISUSE,

NEGLECT, IMPROPER INSTALLATION OR TESTING, UNAUTHORIZED

ATTEMPTS TO REPAIR, OR ANY OTHER CAUSE BEYOND THE RANGE OF THE

INTENDED USE, OR BY ACCIDENT, FIRE, LIGHTNING, OR OTHER HAZARD.

LIMITATION OF LIABILITY: IN NO EVENT, WHETHER BASED IN CONTRACT OR

TORT (INCLUDING NEGLIGENCE), SHALL SMC BE LIABLE FOR INCIDENTAL,

CONSEQUENTIAL, INDIRECT, SPECIAL, OR PUNITIVE DAMAGES OF ANY KIND,

OR FOR LOSS OF REVENUE, LOSS OF BUSINESS, OR OTHER FINANCIAL LOSS

ARISING OUT OF OR IN CONNECTION WITH THE SALE, INSTALLATION,

MAINTENANCE, USE, PERFORMANCE, FAILURE, OR INTERRUPTION OF ITS

PRODUCTS, EVEN IF SMC OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED

OF THE POSSIBILITY OF SUCH DAMAGES.

SOME STATES DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES OR

THE LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES FOR

CONSUMER PRODUCTS, SO THE ABOVE LIMITATIONS AND EXCLUSIONS MAY

NOT APPLY TO YOU. THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS,

WHICH MAY VARY FROM STATE TO STATE. NOTHING IN THIS WARRANTY

SHALL BE TAKEN TO AFFECT YOUR STATUTORY RIGHTS.

* SMC will provide warranty service for one year following discontinuance from the active SMC

price list. Under the limited lifetime warranty, internal and external power supplies, fans, and

cables are covered by a standard one-year warranty from date of purchase.

SMC Networks, Inc.

38 Tesla

Irvine, CA 92618

iii

ONTENTS

1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-1

Key Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1

Description of Software Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

System Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7

2 Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1

Connecting to the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1

Configuration Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1

Required Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2

Remote Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-4

Stack Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5

Selecting the Stack Master . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5

Recovering from Stack Failure or Topology Change . . . . . . . . . 2-5

Resilient IP Interface for Management Access . . . . . . . . . . 2-6

Basic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6

Console Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6

Setting Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7

Setting an IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8

Manual Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8

Dynamic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-9

Enabling SNMP Management Access . . . . . . . . . . . . . . . . . . . . 2-10

Community Strings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11

Trap Receivers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12

Saving Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12

Managing System Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13

3 Configuring the Switch . . . . . . . . . . . . . . . . . . . . . . . . 3-1

Using the Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1

Navigating the Web Browser Interface . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3

Home Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3

Configuration Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4

Panel Display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4

Main Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-5

Basic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-11

Displaying System Information . . . . . . . . . . . . . . . . . . . . . . . . . 3-11

ONTENTS

Displaying Switch Hardware/Software Versions . . . . . . . . . . . 3-13

Displaying Bridge Extension Capabilities . . . . . . . . . . . . . . . . . 3-15

Setting the Switch’s IP Address . . . . . . . . . . . . . . . . . . . . . . . . 3-17

Manual Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-18

Using DHCP/BOOTP . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-19

Managing Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-21

Downloading System Software from a Server . . . . . . . . . . 3-22

Saving or Restoring Configuration Settings . . . . . . . . . . . . . . . 3-24

Downloading Configuration Settings from a Server . . . . . 3-26

Console Port Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-28

Telnet Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-30

Configuring Event Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-33

System Log Configuration . . . . . . . . . . . . . . . . . . . . . . . . . 3-33

Remote Log Configuration . . . . . . . . . . . . . . . . . . . . . . . . . 3-35

Displaying Log Messages . . . . . . . . . . . . . . . . . . . . . . . . . . 3-38

Sending Simple Mail Transfer Protocol Alerts . . . . . . . . . 3-39

Resetting the System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-41

Setting the System Clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-42

Configuring SNTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-42

Setting the Time Zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-44

Simple Network Management Protocol . . . . . . . . . . . . . . . . . . . . . . . . 3-45

Setting Community Access Strings . . . . . . . . . . . . . . . . . . . . . . 3-45

Specifying Trap Managers and Trap Types . . . . . . . . . . . . . . . . 3-46

User Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-48

Configuring User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-48

Configuring Local/Remote Logon Authentication . . . . . . . . . 3-50

Configuring HTTPS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-54

Replacing the Default Secure-site Certificate . . . . . . . . . . 3-56

Configuring the Secure Shell . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-57

Generating the Host Key Pair . . . . . . . . . . . . . . . . . . . . . . 3-60

Configuring the SSH Server . . . . . . . . . . . . . . . . . . . . . . . . 3-62

Configuring Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-64

Configuring 802.1X Port Authentication . . . . . . . . . . . . . . . . . 3-66

Displaying 802.1X Global Settings . . . . . . . . . . . . . . . . . . 3-68

Configuring 802.1X Global Settings . . . . . . . . . . . . . . . . . 3-69

Configuring Port Settings for 802.1X . . . . . . . . . . . . . . . . 3-70

Displaying 802.1X Statistics . . . . . . . . . . . . . . . . . . . . . . . . 3-73

ONTENTS

Filtering Addresses for Management Access . . . . . . . . . . . . . . . 3-75

Access Control Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-77

Configuring Access Control Lists . . . . . . . . . . . . . . . . . . . . . . . 3-77

Setting the ACL Name and Type . . . . . . . . . . . . . . . . . . . . 3-78

Configuring a Standard IP ACL . . . . . . . . . . . . . . . . . . . . . 3-80

Configuring an Extended IP ACL . . . . . . . . . . . . . . . . . . . 3-81

Configuring a MAC ACL . . . . . . . . . . . . . . . . . . . . . . . . . . 3-84

Binding a Port to an Access Control List . . . . . . . . . . . . . . . . . 3-86

Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-88

Displaying Connection Status . . . . . . . . . . . . . . . . . . . . . . . . . . 3-88

Configuring Interface Connections . . . . . . . . . . . . . . . . . . . . . . 3-91

Creating Trunk Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-93

Statically Configuring a Trunk . . . . . . . . . . . . . . . . . . . . . . 3-95

Enabling LACP on Selected Ports . . . . . . . . . . . . . . . . . . . 3-97

Configuring LACP Parameters . . . . . . . . . . . . . . . . . . . . . . 3-99

Displaying LACP Port Counters . . . . . . . . . . . . . . . . . . . 3-103

Displaying LACP Settings and Status for the Local Side 3-104

Displaying LACP Settings and Status for the Remote Side . . .

3-107

Setting Broadcast Storm Thresholds . . . . . . . . . . . . . . . . . . . . 3-109

Configuring Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-111

Configuring Rate Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-113

Rate Limit Granularity . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-113

Rate Limit Configuration . . . . . . . . . . . . . . . . . . . . . . . . . 3-114

Showing Port Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-115

Address Table Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-122

Setting Static Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-122

Displaying the Address Table . . . . . . . . . . . . . . . . . . . . . . . . . . 3-123

Changing the Aging Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-125

Spanning Tree Algorithm Configuration . . . . . . . . . . . . . . . . . . . . . . 3-125

Displaying Global Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-127

Configuring Global Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-131

Displaying Interface Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 3-135

Configuring Interface Settings . . . . . . . . . . . . . . . . . . . . . . . . . 3-139

VLAN Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-142

IEEE 802.1Q VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-142

Enabling or Disabling GVRP (Global Setting) . . . . . . . 3-147

ONTENTS

Displaying Basic VLAN Information . . . . . . . . . . . . . . . 3-147

Displaying Current VLANs . . . . . . . . . . . . . . . . . . . . . . . 3-148

Creating VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-150

Adding Static Members to VLANs (VLAN Index) . . . . 3-152

Adding Static Members to VLANs (Port Index) . . . . . . 3-154

Configuring VLAN Behavior for Interfaces . . . . . . . . . . 3-156

Private VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-159

Displaying Current Private VLANs . . . . . . . . . . . . . . . . . 3-160

Configuring Private VLANs . . . . . . . . . . . . . . . . . . . . . . 3-161

Associating VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-163

Displaying Private VLAN Interface Information . . . . . . 3-164

Configuring Private VLAN Interfaces . . . . . . . . . . . . . . . 3-165

Class of Service Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-168

Layer 2 Queue Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-168

Setting the Default Priority for Interfaces . . . . . . . . . . . . 3-168

Mapping CoS Values to Egress Queues . . . . . . . . . . . . . 3-170

Selecting the Queue Mode . . . . . . . . . . . . . . . . . . . . . . . . 3-172

Setting the Service Weight for Traffic Classes . . . . . . . . . 3-173

Layer 3/4 Priority Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-174

Mapping Layer 3/4 Priorities to CoS Values . . . . . . . . . . 3-174

Selecting IP Precedence/DSCP Priority . . . . . . . . . . . . . 3-175

Mapping IP Precedence . . . . . . . . . . . . . . . . . . . . . . . . . . 3-175

Mapping DSCP Priority . . . . . . . . . . . . . . . . . . . . . . . . . . 3-177

Mapping IP Port Priority . . . . . . . . . . . . . . . . . . . . . . . . . 3-179

Mapping CoS Values to ACLs . . . . . . . . . . . . . . . . . . . . . 3-181

Multicast Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-183

Layer 2 IGMP (Snooping and Query) . . . . . . . . . . . . . . . . . . . 3-184

Configuring IGMP Snooping and Query Parameters . . . 3-184

Displaying Interfaces Attached to a Multicast Router . . 3-187

Specifying Static Interfaces for a Multicast Router . . . . . 3-188

Displaying Port Members of Multicast Services . . . . . . . 3-189

Assigning Ports to Multicast Services . . . . . . . . . . . . . . . 3-191

4 Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . 4-1

Using the Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1

Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1

Console Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels SMC Networks Changer

SMC Networks

SMC Networks ZSE10 Series Manuel utilisateur

SMC Networks

SMC Networks 6900FSC FICHE Manuel utilisateur

SMC Networks

SMC Networks EZ Switch SMC-EZ1016DT Manuel du propriétaire

SMC Networks

SMC Networks TigerSwitch SMC6128L2 Manuel utilisateur

SMC Networks

SMC Networks SMC7724M Manuel utilisateur

SMC Networks

SMC Networks 9712F - FICHE TECHNIQUE Manuel utilisateur

SMC Networks

SMC Networks 6624FMSC - annexe 1 Manuel utilisateur

SMC Networks

SMC Networks 6152PL2 FICHE Manuel de programmation

SMC Networks

SMC Networks PF3W711 Manuel utilisateur

SMC Networks

SMC Networks ZSE20C Series Manuel utilisateur

SMC Networks

SMC Networks ZSE1 Series Manuel utilisateur

SMC Networks

SMC Networks EZ Networking SMC-EZ108FDT Manuel utilisateur

SMC Networks

SMC Networks TigerSwitch SMC6709L2 Manuel utilisateur

SMC Networks

SMC Networks 8024L2 - FICHE TECHNIQUE Guide d'installation

SMC Networks

SMC Networks SMC8516T Manuel utilisateur

SMC Networks

SMC Networks SMCGS805 Manuel utilisateur

SMC Networks

SMC Networks ZSE80 Manuel d'installation

SMC Networks

SMC Networks SMC EZ Stack 10/100 SMC5216 Manuel utilisateur

SMC Networks

SMC Networks 6704FMSC Manuel utilisateur

SMC Networks

SMC Networks 8612T - annexe 1 Manuel utilisateur

SMC Networks

SMC Networks TigerSwitch SMC6128PL2 Manuel utilisateur

SMC Networks

SMC Networks PF2 Series Manuel utilisateur

SMC Networks

SMC Networks ZSE3 Series Manuel utilisateur

SMC Networks

SMC Networks D-G5BA Series Mode d’emploi

Manuels Changer populaires d'autres marques

URC

URC Total Control MFS-8 Manuel utilisateur

Azbil

Azbil HPQ-D11 Manuel utilisateur

Sony

Sony DFS-900M Manuel utilisateur

SICK

SICK i17S Manuel utilisateur

F&F

F&F SZR-277 Manuel utilisateur

Shure

Shure UAMS/BK Manuel utilisateur

Dräger

Dräger X-zone Switch Off Manuel utilisateur

Asco

Asco Joucomatic 349 Series Manuel utilisateur

BT Mini Hub Manuel utilisateur

D-Link

D-Link DES-1226G Manuel utilisateur

Johnson Controls

Johnson Controls FS80-C Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuel utilisateur

MicroNet

MicroNet SP1200A Manuel utilisateur

Ruijie

Ruijie RG-PF2920 Series Manuel d'installation et d'exploitation

Altinex

Altinex DA1914SX Manuel utilisateur

MiLAN

MiLAN MIL-SM2401M Manuel utilisateur

RJM

RJM MASTERMIND PBC/6X Manuel utilisateur

Atlas

Atlas MMK-KVM8 Manuel utilisateur