Linksys SFE2000 manuale d’uso

LINKSYS ONE COMMUNICATIONS SOLUTION SFE2000/SFE2000P Fast Ethernet Switch Reference Guide December 2007[...]

© 2006-2007 Copyright 2006-2007 Cisco Systems, Inc. Specifications are subject to change without notice. Linksys, the Cisco Systems logo, the Linksys Logo, and the Linksys One logo are registered trademarks of Cisco Systems, Inc. All other trademarks mentio ned in this docum ent are the property of their respective owners. Document Revision Histor[...]

1 Contents SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Contents Contents Chapter 1: Getting Started . . . . . . . . . . . . . . . . . . . 1 Starting the Application 1 Understanding the Interface 4 Device Representation 5 Using the Linksys Management But tons 6 Using Screen and Table Options 7 Adding Device Information 7 Modifying Devi[...]

2 Contents SFE2000/SFE2000P Gigabit Ethern et Switch Refer ence Guide Contents Splitting a Stack 24 The Stack Master and Backup Master Units Remain in a Group 24 The Stack Master or the Backup Master Un it Remains in a Group 24 Neither the Stack Master Unit or the Backup Master Unit Remains in the Group 25 Merging Two Stacks 26 Understanding Stacki[...]

3 Contents SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Contents Chapter 6: Configuring VLANs . . . . . . . . . . . . . . . . 103 Defining VLAN Properties 104 Defining VLAN Membership 106 Defining Interface Settings 108 Configuring GVRP Settings 111 Protocol Group 114 Protocol Port 116 Chapter 7: Configuring IP Information . . . . . . [...]

4 Contents SFE2000/SFE2000P Gigabit Ethern et Switch Refer ence Guide Contents SNMP v3 177 Configuring SNMP Security 178 Defining Engine ID 178 Defining SNMP Views 179 Defining SNMP Users 181 Define SNMP Groups 183 Defining SNMP Communities 185 Defining Trap Management 189 Defining Trap Settings 189 Configuring Stati on Management 190 Defining SNMP[...]

5 Contents SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Contents Chapter 16: Viewing Statistics . . . . . . . . . . . . . . . . . 243 Viewing Ethernet Statistics 243 Defining Ethernet Interface 243 Resetting Interface Statistics Count ers 245 Viewing Etherlike Statistics 245 Resetting Etherlike Statist ics Counters 247 Viewing GVRP Sta[...]

6 Contents SFE2000/SFE2000P Gigabit Ethern et Switch Refer ence Guide Contents[...]

1 Chapter 1: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 1 Getting S tarted This section provides an introducti on to the user interface, and includes the following topics: • Starting the Application • Understanding the Interface • Using the Linksys Manageme nt Buttons • Using Screen and T able Options • Resetting th[...]

2 Chapter 1: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 1 Enter Network Passwo rd Page 3. Enter a user name and password . The default user name is “admin.” The device is not configured with a default password, and can be configured without entering a password. Passwords are both case sensitive and alpha-numeric. 4. Click[...]

3 Chapter 1: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 1 Embedded W eb System H ome Page[...]

4 Chapter 1: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 1 Understanding the Interface The following table lists the interface com ponents with their co rresponding numbers: Interface Components Linksys User Inte rface Components Component Description 1 Tr e e V i e w The T ree V iew provides easy navigati on through the confi[...]

5 Chapter 1: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 1 This section provides the following additio nal information: • Device Representation — Provides an explanatio n of the Linksy s user interface buttons, including both management buttons and task icons. • Using the Linksys Ma nagement Buttons — Provides instruct[...]

6 Chapter 1: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 1 Using the Linksys Management Buttons Device Management buttons and icons provide an easy me thod of configuring device info rmation, and include the following: Device Management Buttons Button Name Button Description Apply Applies changes to the device. Clear All Count[...]

7 Chapter 1: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 1 Using Scr een and T able Options Linksys contains screens and tables for configuri ng devices. This section contains the followin g topics: • Appendix 1, "Adding Device Info rmation" • Appendix 1, "Modifying Device Informati on" • Appendix 1, [...]

8 Chapter 1: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 1 Edit Interface Priority 4. Define the fields. 5. Click Apply . The fields are modified, and the information is saved to the devi ce. Deleting Device Information 1. Open the EWS page. 2. Select a table row . 3. Check the Remove checkbox. 4. Click the Delete button. The [...]

9 Chapter 1: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 1 Resetting the Device The Reset page enables the device to be reset from a remo te location. Save all changes to the Running Configuration file before resettin g the device. This prevents the current devi ce configurati on from being lost. T o reset the device: 1. Click[...]

10 Chapter 1: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 1[...]

11 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 Managing Device Information This section provides information for d efining both ba sic and advanced system in formation. This sectio n contains the following topics: • Understanding the Device Zoom V iew • Defining General System Information • Managing Stacks U[...]

12 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 Defining General System Information SFE 2000P System Information The System Informat ion page contai ns parameters for configuring general device informat ion. SFE 2000P System Informat ion Page The System Informat ion page contai ns the following fields: • Model Na[...]

13 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 • Base MAC Address — Displays the device MAC address. If the system is in stack mode, the Base MAC Address of the master unit is displayed. • Hardware V ersion — Disp lays the hardware version number . If the system is in stack mode, the hardware version of th[...]

14 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 Building Automatically-Configur ed S tacks Building a New S tack The easiest way to build a stack is to use a group of switches, each of which is in factory default mode: 1. Connect the units physically through the stackin g ports, using standard Ethernet cables. 2. P[...]

15 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 3. Power the units on. After a short interv al, they will become stack members, bu t will have automatically-assigned Unit IDs. Assign each su ch unit its desired Unit ID (using the St ack Management Interface through the console port, by T elnet, or by using the grap[...]

16 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 The Stack Master stores a copy of the active config uration on the Backup Master . This copy is used only if the Backup Master assumes the role of S tack Master . S tack Members The units assigned the Un it IDs 3 th rough 8 are called stack members. A stack member ope[...]

17 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 S tack Unit S tartup Pr ocess When a unit in stack mode is initialized (powered up or rebooted), it goes through t he following steps: 1. The Master Discovery and Master Elect ion processes. 2. Unit ID allocation by the Stack Master (including duplicate Unit ID confli[...]

18 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 If the stack contains one or more units without a current Unit ID (the units are in factory default mode), then one of these units will be the Stack Master . The unit selected to be the Stack Master is the one running for the longest time (in intervals of 10 m inutes)[...]

19 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 Occasionally , due to a race condition during the boot pr ocess, some of th e units might be connected and join the stack. If the incoming units already have a unit ID, then none of them w ill join the stack and all are left in shutdown mode because there is no wa y f[...]

20 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 S tack Management Page The S tack Management Page contains t he following fields: • Master Election — Indicates the method of electing the S t ack Master device. The possible values are: – Automatically — The master is selected automatically by software. – F[...]

21 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 Resetting the Unit to Factory Default Mode T o reset the unit to the factory default settings, pr ess the front panel RESET button (see Figure 3.) The unit is set to Stack mode with a Unit ID of 0. Understanding LED Indicators Each unit contains a Master LED i ndicato[...]

22 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 When a new unit is inserted in the stack and powered on, the following occurs: 1. The incoming un it, which is in stack mode, pe rforms the Master Discovery process, and may participate in the Master Election process. • If the incoming unit h as a Unit ID of 1 or 2 [...]

23 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 • If a 48-port unit replaces a 24-por t unit, then the first 24 po rts of the incoming unit are configured according to configurat ion of the ports of the failed unit. The remaining ports of the incoming are configured according to the default settings. • If the u[...]

24 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 3. The Stack Master performs unit and po rt configuration for the incoming unit. • Any configuration inform ation that is relevant to the number assigned to the inco ming unit is applied by the Stack Master . For example, if the incoming unit is assigned the same Un[...]

25 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 The Master Discovery , Master Elect ion and Unit ID Al location & Duplicate U nit ID Conflict Resolution processes occur with the following results: • If the Stack Master unit remains in the split stac k, the Stack Master disc overs (using the Master Discovery p[...]

26 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 Merging T wo S tacks T o merge two working stacks and cr eate one stack, first deci de if you will merge the stacks while the incoming units are powered off during insertion, or if both stacks will be running when merged. If the incoming unit s are powered off, follow[...]

27 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 W e recommend that when combining two stacks, you re set the switches in one stack to factory default mode and then add the switches as described in “Adding Units to a Running Stack” in the “Building Automatically-Confi gur ed Stacks” section. • If one of th[...]

28 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 Inserting a S tandalone Unit into a Running S tack If a unit is in standalone mode, it will n ot participat e in the Master Discovery process (it will not lo ok for a Stack Master and will not respond to master queries). As a result, it will not join the stack but wil[...]

29 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2 • Fan S tatus — The fan status. The device has five fans. Each fan is denoted as fan plus the fan number in the interface. The possible field values are: – OK — The fan is op erating normally . – Fail — The fan is not operating normal ly .[...]

30 Chapter 2: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 2[...]

31 Chapter 3: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 3 Managing Power -over -Ethernet Devices Power-over -Ethernet (PoE) provides power to devi ces over existing LAN cabling, witho ut updating or modifying the network infrastructure. Po wer-over -Ethernet removes the necessity of placing network devices next to power sour[...]

32 Chapter 3: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 3 PoE Settings Page The PoE Settings Page displays the currently configured PoE ports and contains the following information: • Port — Displays the select ed po rt’ s number . • Admin S tatus — Indicates whether PoE is enabled or disabl ed on the port. The pos[...]

33 Chapter 3: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 3 – Sear ching — Indicates that the device is curren tly searching for a powered device. Searching is the default PoE operati onal status. – Fault — Indicates that the device has detected a fault on the powered device. For example, the powered device memory coul[...]

34 Chapter 3: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 3 is running at 99% usage, and port 1 is prioritized as high, bu t port 3 is prioritized as low , port 1 is prioritized to receive power , a nd port 3 may be denied power . The possible field values are: – Low — Defi nes the PoE priority level as low . Thi s is the [...]

35 Chapter 3: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 3 – Sear ching — Indicates that the device is curren tly searching for a powered device. Searching is the default PoE operati onal status. – Fault — Indicates that the device has detected a fault on the powered device. For example, the powered device memory coul[...]

36 Chapter 3: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 3[...]

37 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Configuring Device Security The Security Suite contains the following sections: • Passwords Management • Defining Authenticat ion • Defining Access Method • Defining T raf fic Control • Defining 802.1x • Defining Access Control • Defining DOS Prevention[...]

38 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Passwords Management The Passwords Management section contains the following sc reens: • Defining User Authenti cation Note By default, a single user name is defined, “ad min,” with no password. An additional user name/ password is config ured for us e in the Li[...]

39 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Add Local User Page The Add Local User Page contains the following fields: • User Name — Displays the user nam e. • Password — Specifies the new password. The is not displayed. As it entered an “*” corresponding to each character is displayed in the field.[...]

40 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Defining Authentication The Authentication section c ontains the following pages: • Definin g Profiles • Mapping Profiles • Defining T ACACS+ • Defining RADIUS Defining Profiles 1. Click Security Suite > Authentication > Profiles . The Pr ofiles Page ope[...]

41 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 – None — Indicates that no authentication meth od is used to authenticate the port. 2. Click the Add button. The Add Authentication Pr ofile Page opens: Add Authentication Profile Pa ge The Add Authentication Pr ofile Page contains the following fields: • Profil[...]

42 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • Profile Name — Display s the Authentication profile name. • Authentication Methods — Defines the user authentication me thods. The possible field values are: – Local — Authenticates the user at the device leve l. The device checks the user name and passw[...]

43 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Optional Methods — Lists available au thentication methods. – RADIUS — Remote Authorization D ial-In Us er Service (RADIUS) servers provide additional security for networks. – T ACACS+ — T erminal Access Controller Access Control System (T ACACS+) provides c[...]

44 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 T ACACS+ Page The T ACACS+ Page contains the fo llowing fields: • Source IP Addr ess — Displays the device source IP address used for the T ACA CS+ session between the device and the T ACACS+ server . • Key S tring — Defines the authentication and encrypti o n[...]

45 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Add T ACACS+ Server Page The Add T ACACS+ Server Page contains the following fields: • Host IP Address — Displays the T ACACS+ Server IP address. • Priority — Displays the order in wh ich the T ACA CS+ servers are used. The default is 0. • Source IP Addr ess[...]

46 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 T ACACS+ Settings Page The T ACACS+ Settings Page contains the following fields: • Host IP Address — Displays th e T ACACS + Server IP address. • Priority — Displays the order in which the T ACA CS+ servers are used. The default is 0. • Source IP Addr ess ?[...]

47 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Defining RADIUS Remote Authorization Dial-In User Serv ice (RADIUS) servers provide additio nal security for networks. RADIUS servers provide a centrali zed authentication method for web access. The default parameters are user-de fined, and are applied to newly define[...]

48 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • Number of Retries — Defines the number of transmitted requ ests sent to RADI US server before a failure occurs. The possible field values are 1 - 10. Three is the default value. • Timeout for Reply — D efines the amount of the time in s econds the device wai[...]

49 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • Number of Retries — Defines the number of transmitted requ ests sent to RADIU S server before a failure occurs. The possible field values are 1 - 10. Three is the default value. • Timeout for Reply — D efines the amount of the time in s econds the device wai[...]

50 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Edit RADIUS Settings Page The Edit RADIUS Settings Page contains th e following fields: • IP Address — Displays the RADIUS Server IP address. • Priority — The server priority . The possi ble values are 0-65535, where 1 is the highest value. The RADIUS Server p[...]

51 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Defining Access Method The access method section cont ains the following pages: • Defining Access Profiles • Definin g Profile Rul es Defining Access Profiles Access profiles are profiles and ru les for accessing the device. Access to management functions can be l[...]

52 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Access Profiles Page The Access Pr ofiles Page contains the following fiel ds: • Access Profile Name — Defines the access profile name. The access profile name can contain up to 32 characters. • Current Active Access Pr ofile — Defines the access profile curre[...]

53 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Add Access Profile Page The Add Access Pr ofile Page contains the following fields: • Access Profile Name — Defines the access profile name. The access profile name can contain up to 32 characters. • Rule Priority — Defines the rule priority . When the pack et[...]

54 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 – Port — Specifies the port on whic h the access profile is defined. – LAG — Specifies the LAG on which the access profile is defined. – VLAN — Specifies the VLAN on which the access profile is defined. • Source IP Addr ess — Defines the interface sour[...]

55 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Profile Rules Page The Pr ofile Rules Page contains the following fields: • Access Profile Name — Displays the access profile to which the rule is attached. • Priority — Defines the rule priority . When the packet is matched to a rule, user groups are either g[...]

56 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 – Secur e T e lnet (SSH) — Assigns SSH access to the rule. If selected, users accessing the device using T elnet meeting acce ss profile criteria are permitted or denied access to the device. – HTTP — Assigns HTTP access to the rule. If selected, us ers access[...]

57 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • Priority — Defines the rule priority . When the packet is matched to a rule, user groups are either granted permission or denied device management acces s. The rule number is essential to matching packets to rules, as packets are matched on a first-fi t basis. T[...]

58 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Modifying Pr ofile Rules 1. Click Security Suite > Access Method > Profile Rules . The Pr ofile Rules Page opens: 2. Click the Edit button. The Edit Pr ofile Rule Page opens: Edit Profile Rule Page The Edit Pr ofile Rule Page contains the following fields: • A[...]

59 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 – SNMP — Assigns SNMP access to the rule. If selected, users accessing the device using SNMP meeting access profile criteria are permitted or denied access to the device. • Interface — Defines the interface on which the access prof ile is defined. The possible[...]

60 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Defining T raffic Contr ol The T raffic Control section contains the following pages: • Definin g St orm Control • Defining Port Security Defining S torm Control Storm Control enables limiting the amount of Mul ticast and Broadcast frames accepted and forwarded by[...]

61 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • Copy Fr om Ent ry Number — Indicates the row number from wh ich storm control parameters are copied. • T o Entry Number(s) — Indicates the row number to which st orm control parameters are copied. • Unit Number — Displays the stacking member for which th[...]

62 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • Broadcast Mode — Specifies the Broadcas t mode curren tly enabled on the de vice. The possible field values are: – Multicast & Br oadcast — Counts Broadcast and Multicast traf fic together . – Br oadcast Only — Coun ts only Broadcast traffic. • Bro[...]

63 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 T o define port security: 1. Click Security Suite > T raffic Control > Port Security . The Port Security Page opens: Port Se curity Pa ge The Port Security Page contains the following fields: • Ports — Indicates the port nu mber on which port security is con[...]

64 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 In order to change the Learning Mode, the Lock Interface must be set to Unlocked. Once the mode is changed, the Lock Interface can be reinstated. • Max Entries — Specifies the number of MAC addresses th at can be learned on the port. The Max Entries field is enabl[...]

65 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 – Unchecked — Indicates the port is currently unlocked. This is the default value. – Checked — Indicates the port is currently locked. • Learning Mode — Defines the locked port type. The Learning Mode field is enabl ed only if Locked is selected in the Int[...]

66 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Defining 802.1x Port based authentication enables au thenticating system users on a per- port basis via a external server . Only authenticated and appr oved system users can transmit and r eceive data. Ports are authenticated via the RADIUS server using the Extensible[...]

67 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Defining 802.1X Properties 1. Click Security Suite > 802.1X > Properties . The 802.1X Pr operties Page opens: 802.1X Properties Page The 802.1X Pr operties Page contains the following fields: • Port Based Authentication S t ate — Indicates if Port Authentica[...]

68 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 – Disable — Disables port-based authentication on the device. This is the default. • Guest VLAN ID — Displays the Guest VLAN ID. 2. Define the relevant fields. 3. Click Apply . The 802.1X properti es are defined, and the device is updated. Defining Port Authen[...]

69 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • Periodic Reauthentication — Permits immediate port reaut hentication. • Reauthentication Period — Specifies the number of second s in which the selected port is reauthenticated (Range: 300-4 294967295). The field default is 3600 seconds. • Authenticator S [...]

70 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Port Authentication Settings Page The Port Authentication Settings Page cont ains the following fields: • Port — Indicates the port name. • User Name — Displays the user nam e. • Current Port Contr ol — Displays the current port authorization state. • Ad[...]

71 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • Quiet Period — Specifies the number of seconds that the switch r emains in the quiet state following a failed authentication exchange (Range: 0-65535). • Resending EAP — Specifies the number of seconds that the switch waits for a response to an EAP - request[...]

72 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • Unit Number — Displays the stacking member for wh ich the Multiple Hosts parameters are displayed. • Port — Displays the port number for which advanced port-based authen tication is enabled. • Multiple Ho sts — Indicates whether multiple hosts are enable[...]

73 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Multiple Host Settings Page The Multiple Host Settings Page cont ains the following fields: • Port — Displays the port number for which advanced port-based authenticati on is enabled. • Enable Multiple Hosts — Indicates whether multiple hosts are enabled. Mult[...]

74 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Defining Authenticated Host 1. Click Security Suite > 802.1X > Authenticated Host . The 802.1X Port Authentication Page opens: 802.1X Authenticated Ho st Page The 802.1X Authenticated H ost Page contains the following fields: • Unit Number — Displays the sta[...]

75 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Defining Access Contr ol The Access Control section contains the follo wing pages: • Defining MAC Based ACL • Defining IP Based ACL • Defining ACL Binding Defining MAC Based ACL The MAC Based ACL Page page allows a MAC- based ACL to be defined. ACEs can be ad de[...]

76 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Add MAC Based ACL Page The Add MAC Based ACL Page contains the followi ng fields: • ACL Name — Displays the user-defined MAC based ACLs. • New Rule Priority — Indicates the ACE priority , which determines which ACE is matched to a packet on a first-match basis[...]

77 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 – Permit — Forwards packets which meet the ACL criteria. – Deny — Drops packets which m eet the ACL criteria. – Shutdown — Drops packet that meet the ACL criteria, and disables the port to which the packet was addressed. 3. Define the relevant fields. 4. C[...]

78 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 IP Based ACL Page The IP Based ACL Page contains the following fields: • ACL Name — Displays the user-defined IP based ACLs. • Remove ACL — Deletes the selected ACL. • Rule Priority — Indicates the rule priority , which determines which rule is matched to [...]

79 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 – L2IP — Matches the packet to Layer 2 Int ernet Protocol (L2IP). – ISIS — Indicates that the Intermed iate System to Interm ediate System (ISIS) protocol is used to classify network flows. • Flag Set — Sets the indicated TC P flag that can be triggered. ?[...]

80 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Add IP Based ACL Page The Add IP Based ACL Page contains the foll owing fields: • ACL Name — Displays the user-defined IP based ACLs. • New Rule Priority — Indicates the rule priority , which determines which rule is matched to a packet on a first-match basis.[...]

81 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • Match IP Precedence — Matches the packet IP Precedence va lue to the ACE. Either the DSCP value or the IP Precedence value is used to match packets to ACLs. The possible field range is 0-7. • Action — Indicates the action assigned to the packet matching the [...]

82 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • ICMP — Indicates if ICMP packets are permitted on the network. The possible field values are as follows: . • ICMP C ode — Indicates and ICMP message co de for fi ltering ICMP packets. ICMP packets that are filtered by ICMP message type can also be filtered b[...]

83 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Add IP Based Rule Page The Add IP Based Rule Page contains the following fields: • ACL Name — Displays the user-defined IP based ACLs. • New Rule Priority — Indicates the rule priority , which determines which rule is matched to a packet on a first-match basis[...]

84 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • Match IP Precedence — Matches the packet IP Precedence va lue to the ACE. Either the DSCP value or the IP Precedence value is used to match packets to ACLs. The poss ible field range is 0-7. • Action — Indicates the action assigned to the packet matching the[...]

85 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 • LAGs — Displays the LAGs bound by the ACL. • Of Unit — Displays the stacking mem ber for which the ACL binding parameters are disp layed. • Interface — Indicates the interface to which the ACL is bound. • ACL Name — Indicates the ACL which is bound t[...]

86 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Global Settings Page The Global Settings Page cont ains the following fields: • Security Suite S tatus — Indica tes if DOS security is enab led on the device. The possible field values are: • Enable — Enables DOS security . • Disable — Disables DOS securit[...]

87 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 Defining Martian Addresses 1. Click Security Suite > Dos Prevention > Martian Addr esses . The Martian Addr ess es Page opens: Martian Addresses Page The Martian Addr esses Page contains the following fields : • IP Address — Displays the IP addresses for whi[...]

88 Chapter 4: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 4 – 192.0.2.0/24, 224.0.0.0/4 – 240.0.0.0/4 (except 255.255.255.25 5/32) • IP Address — Enter the IP addresses for which DOS attack is enabled. • Mask — Enter the Mask for which DOS attack is enabled. • Prefix Length — Defines the IP route prefix for the[...]

89 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 Configuring Device Interfaces This section contains information for config uri ng ports and contains the following topic: • Defining Port Settin gs • Definin g LAG Management • Defining LAG Settings • Configuring LACP Defining Port Settings The Port Settings P[...]

90 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 • Port T ype — Displays the port type. The possible field values are: – Copper/ComboF/ComboC — Indicates the port has a copper port connection. – Fiber — Indicates the port has a fiber optic port connection. • Port S tatus — Displays the port connectio[...]

91 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 Edit Port Settings Page The Edit Port Setti ngs Page contains the following fields: • Port — Displays the port number . • Description — Displays the device port ID. • Port T ype — Displays the port type. The possible field valu es are: – Copper/ComboF/Co[...]

92 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 – Full — Indicates that the interf ace supports transmission betw een the device and the client in both directions simultaneously . – Half — Indicates that the interface supports tran smission between the device and the client in only one direction at a time. [...]

93 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 • MDI/MDIX — Displays the Media Dependent Interf ace (MDI)/Media Dependent Interface with Crossover (MDIX) status on the port. Hubs and swit ches are deliberately wired opposite the way end stations are wired, so that when a hub or switch is connect ed to an end s[...]

94 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 Defining LAG Management Link Aggregation optimizes port usage by li nking a group of ports together to form a singl e LAG . Aggregating ports multiplies the bandwidt h between th e devices, increases port flexib ility , and pro vides link redundancy . The device suppo[...]

95 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 Lag Management Page The Lag Management Page contai ns the following fields. • LAG — Displa ys the LAG number . • Name — Displays the LAG name. • Link S tate — Displays the l ink operational stat us. • Member — Displays the ports configured to the LAG .[...]

96 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 Edit LAG Membership Page The Edit LAG Membership Page contains the following fields. • LAG — Displa ys the LAG number . • LAG Name — Displays the LAG name. • LACP — Indicates that LACP is enable on the LAG . • Unit Number — Displays the stacking member[...]

97 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 Lag Settings Page The Lag Settings Page contain s the following fi elds: • Copy from Entry Number — Copies the LAG informat ion from the selected port. • T o Entry Number(s) — Indicates the po rts to which th e port QoS information is copied. • LAG — Displ[...]

98 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 Lag Configurati on Settings The Lag Configuration Sett ings contains the following fields: • LAG — Displays the LAG Id num ber . • Description — Disp lays the user-defined port name. • LAG T ype — The port types that comprise the LAG . • Admin S tatus ?[...]

99 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 – 10 Full — Indicates that the L AG is advertising a 10 mbps speed and full Duplex mode setting. – 100 Half —Indicates that the LAG is advertis ing a 100 mbps speed and half Duplex mod e setting. – 100 Full — Indicates that the LAG is advertising a 100 mbp[...]

100 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 LACP Page The LACP Page contains fields for c onfiguring LACP LAGs. • LACP System Priority — Indicates the global LACP priori ty value. Th e possible range is 1- 65535. The default value is 1. • Unit Number — Displays the stacking member for wh ich LACP infor[...]

101 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5 LACP Parameter Settings Page The LACP Parameter Settings Page contains the followi ng fields: • Port — Defines the port number to which timeout and priori ty values are assigned. • LACP Port Priority — Defines the LACP priority value for the port. The field r[...]

102 Chapter 5: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 5[...]

103 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 Configuring VLANs VLANs are logical subgroups with a Local Area Ne twork (LAN) which combine user st ations and network devices into a single unit, regardl ess of th e physical LAN segment to which they are attached. VLANs allow network traffic to flow more efficient[...]

104 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 Defining VLAN Pr operties The VLAN Pr operties Page provides information and global parameters for configuring and working with VLAN s. 1. Click Bridging > VLAN Management > Properties . The Pr operties Page opens. Properties Page The Pr operties Page contains [...]

105 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 Add VLAN Page The Add VLAN Page allows network admin istrators to defin e and configure new VLANs, contains the following fields: • VLAN ID — Displays the VLAN ID. • VLAN Name — Displays the user-defined VLAN name. Modifying VLANs 1. Click Bridging > VLAN [...]

106 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 Defining VLAN Membership The VLAN Membership Page contains a table that maps VLAN parameters to ports. Ports are assigned VLAN membership by t oggling through th e Port Control setting s. 1. Click Bridging > VLAN Management > Membership . The VLAN Membership Pa[...]

107 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 – Untagged — Indicates the interface is an untagge d VLAN member . Pack ets forwarded by the interface are untagged. – T agg ed — Indicates the interface is a tagged memb er of a VLAN. All packets forwa rded by the interface are tagged. The pa ckets contain V[...]

108 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 Defining Interface Settings The VLAN Interface Settin g Page provides parameters for managing ports that are part of a VLAN. The port default VLAN ID (PVID) is configured on the VLAN Port Settin gs page. All unt agged packets arriving to the device are tagged by the [...]

109 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 – T runk — The port belongs to VLANs in which all port s are tagged (except for an optional single native VLAN ). • PVID — Assigns a VLA N ID to untagged packets. The possible values are 2 to 4094. VLAN 40 95 is defined as per standard and indu stry practice [...]

110 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 • PVID — Assigns a VLA N ID to untagged packets. The possible values are 2 to 4094. VLAN 40 95 is defined as per standard and indu stry practice as the discard VLAN. Packets classified to the Discard VLAN are dropped. • Frame T ype — Packet type accepted on t[...]

111 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 Configuring GVRP Settings GARP VLAN Registration Protocol (G VRP) is specifically provided for automat ic distribution of VLAN membership information among VLAN-aware br idges. GVRP allows VLAN-aware b ridges to automatically learn VLANs to brid ge ports mapping, wit[...]

112 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 • Interface — Displays the interface on which GVRP is enabled. • GVRP S tate — Indicates if GVRP is enabled on the in terface. The possible field values are: – Enabled — Enables GVRP on the selected interface. – Disable d — Disables GVRP on the select[...]

113 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 – Enabled — Enables GVRP on the selected interface. – Disable d — Disables GVRP on the selected interface. • Dynamic VLAN Creation — Indicates if Dynamic VLAN creatio n is enabled on the interface. The possible field values are: – Enable — Enables Dyn[...]

114 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 Pr otocol Gr oup The Pr otocol Gr oup Page contains information defining prot ocol names and the VLAN Ethernet type. Interfaces can be classified as a specific protocol based interface. NOTE: This settin g is relevant only in Layer 2 mode. 1. Click Bridging > VLAN[...]

115 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 Add Protocol Group Page The Add Pr otocol Group Page provides information for config uring new VLAN proto col groups. The Add Pr otocol Gr oup Page contai ns the following fields. • Frame T ype — Displays the packet type . Possible fi eld values are Ethern et, RF[...]

116 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 • Frame T ype — Displays the packet type. Possible fi eld values are Ethern et, RFC1042, an d LLC Other . • Pr otocol V alue — Displays the User -defined protocol value. • Group ID (Hex) — Defines the Protocol group ID to which the interface is added. 3. [...]

117 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6 The Add Pr otocol Port to VLAN Page provides information for editing protocol port configurations. Add Protocol Port to VLAN Page The Add Pr otocol Port to VLAN Page contains the following fields. • Interface — Port or LAG number added to a protocol grou p. • G[...]

118 Chapter 6: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 6[...]

119 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 Configuring IP Information This section provides i nformation for de fining device IP addresses, and includes th e following topics: • Domain Name System • Configuring Layer 2 • Configuring Layer 3[...]

120 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 Domain Name System Domain Name System (DNS) converts user-defined domain na mes into IP addresses. Each time a domain name is assign ed, the DNS se rvice translates the name into a numeric IP address. For example, www .ipexample.com is translated into 192.87.56 .2. D[...]

121 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 • Ty p e — Displays the IP address type. The possible field values are: – Dynamic — The IP address is dynamically created. – S tatic — The IP address is a static IP address. • Remove — Removes DNS servers. The po ssible field values are: – Checked ?[...]

122 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 Host Mapping The Host Mapping Page provides informat ion for defining DNS Host Mapping. The DNS Ho st Mapping Page page contains the following fields. 1. Click System > System Management > Domain Name System > Host Mapping . The Host Mapping Page opens: Host[...]

123 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 Add DNS Host Page The Add DNS Host page contains the following fields: • Host Name — Displays a user-defined default domain name. When defined, the default domai n name is applied to all un qualified host names. The Host Name field can contain up to 158 character[...]

124 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 Configuring Layer 2 The IP address and default gateway can be either dynamically or statically configured. In Layer 2, a static IP address is configured on the VLAN Management Properties Page . The Management VLAN is set to VLAN 100 by default, but can be modified. W[...]

125 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 IP Interface Page The IP Interface Page contains the following fields: • Get Dynamic IP from DHCP Server — Retrieves the IP addresses using DHCP . • S tatic IP Addr ess — Displays th e currently confi gured IP address. IP addresses are either configured on th[...]

126 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 corresponding IP address. The ARP table can be filled in statically by the user . W hen a static ARP entry is defined, a permanent ent ry is put in the table, wh ich the system uses to tran slate IP addresses to MAC addresses. T o define ARP: 1. Click System > Sys[...]

127 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 • MAC Address — Indicates the station MAC address, which is associated in the ARP table with the IP address. • S tatus — Indicates the ARP T able entry stat us . Possible field values are: – Dynamic — Indicates the ARP entry was learned dynamically . – [...]

128 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 ARP Settings Page The ARP Settings Page contains the following fi elds: • Interface — Indicates the interface connected to the device. • IP Address — Indicates the station IP address, which is associated with the MA C address filled in below . • MAC Address[...]

129 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 Configuring Layer 3 In Layer 3 mode, multiple IP addresses can be conf igured on ports, LAGs or VLANS. This provides greater network flexibility than Laye r 2 mode where only a single IP address is configu red on ports, LAGs or VLANs. A pr edefined Defau lt Gateway i[...]

130 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 IP Interface Page The IP Interface Page contains the following fields. • IP Address — Defines the system IP address. • Mask — Displays the cu rrently co nfigured IP address mask. • Interface — Indicates the interface connected to the device. • Ty p e ?[...]

131 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 Add IP Interface Page The Add IP Interface Page contains the following fields. • Interface — Defines the system IP address. • Source IP Address — Defines the source IP Address. • S tatic IP Addr ess — Defines the system IP address. • Network Mask — Di[...]

132 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 IP Interface Settings Page IP Interface Setti ngs The IP Interface Settings Page contains the followi ng fields: • IP Address — Defines the system IP address. • Network Mask — Displays the current ly configured IP address mask. • Prefix Length — Specifies[...]

133 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 ARP Proxy Page The ARP Pr oxy Page contains the followi ng field. • ARP Proxy — Enables the device to respond to ARP requ ests for located nodes. If disabled, the device responds with its own MAC address. 2. Enable ARP Proxy . 3. Click Apply . Arp Proxy is enable[...]

134 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 UDP Relay Page The UDP Relay Page contains the following fields: • Source IP Interface — Indicates the input IP in terface that relays UDP packets. If this field is 255.255.255.255, UDP packets from all interfaces are relayed. The following address ranges are –[...]

135 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 • Destination Address — The IP interface that receives UDP packet relays. If this field is 0.0.0.0, UDP packets are discarded. If this field is 25 5.255.255.255, UDP packets are flooded to all IP interfaces. 2. Click the Add button. The Add UDP Relay Page op ens:[...]

136 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 – 127.0.0.0 to 127.255.255.255. • UDP Destination Port — Indicate the destination UDP port ID number of the relayed UDP packets. The following table l ists UDP Port allocations • Destination Address — The IP interface that receives UDP packet relays. If thi[...]

137 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 Add DHCP Server Page The Add DHCP Server Page contains the following field: • DHCP Serve r —Adds a DHCP Server to the DHCP Rela y T able. The DHCP servers act as a DHCP relay if th e parameter is not equal to 0.0. 0.0. DHC P requests are relayed only if their SEC[...]

138 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 ARP Page The ARP Page contains the following fields. • ARP Entry Age Out — Defines the amount of time (secon ds) that pass between ARP requests about an ARP tabl e entry . After t his period, the en try is deleted from the tab le. The range is 1 - 40000000, where[...]

139 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 – S tatic — Indicates the ARP entry is a static entry . 2. Click on th e Add ARP button. The ARP Settings Page opens: ARP Settings Page The ARP Settings Page contains the following fi elds: • Interface — Indicates the interface connected to the device. • IP[...]

140 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 ARP Settings Page The ARP Settings Page contains the following fi elds: • Interface — Indicates the interface connected to the device. • IP Address — Indicates the station IP address, which is associated with the MA C address filled in below . • MAC Address[...]

141 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 IP Routing Page The IP Routing Page contains the following fields: • Dest. IP Address — Defines th e destination IP address. • Prefix Length —Defines the IP route pref ix for the destination IP . The prefix length must be preceded by a forward slash (/). • [...]

142 Chapter 7: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 7 IP S t atic Route Page The IP S tatic Route Page contains the following fields: • Destination IP Address — Defines the destination IP address. • Prefix Length —Defines the IP route pref ix for the destination IP . The prefix length must be preceded by a forwa[...]

143 Chapter 8: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 8 Defining Addr ess T ables MAC addresses are stored in either the S tatic Ad dress or the Dynamic Address databases. A packet addressed to a destination stored in one of the da tabases is forwar ded imme diately to the port. The Dynamic Address T able can be sorted by[...]

144 Chapter 8: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 8 Defining S tatic Addr esses A static address can be assigned to a specific interfa ce on this switch. Static addresses are bound to the assigned interface and cannot be moved. When a static address is seen on another interface, the address will be ignored and will no[...]

145 Chapter 8: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 8 2. Click the Add button. The Add S tatic MAC Addr ess Page opens: Add S t atic MAC Address Page The Add S tatic MAC Addr ess Page contains the following fields: • Unit Number — Indicates the stacking member for wh ich the Static address is defined. • Interface [...]

146 Chapter 8: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 8 Defining Dynamic Addr esses The Dynamic Address T able contains the M AC addresses learned by monitoring the source address for traffic entering the switch. When the destin ation address for inbound traffic is found in the database, the packets intended for that addr[...]

147 Chapter 8: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 8 • MAC Address — Specifies the MAC address for which the table is queried. • VLAN ID — Specifies the VLAN ID for which the table is queried. • Address T able Sort Key — Specifies the means by which the Dynamic MAC Address T able is sorted. The address tabl[...]

148 Chapter 8: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 8[...]

149 Chapter 9: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 9 Configuring Multicast Forwarding The Multicast sect ion contains the following pages: • IGMP Snooping • Defining Multi cast Bridging G roups • Defining Multicast Forwarding IGMP Snooping When IGMP Snooping is enabled globally , all IGMP packets are forwarded to[...]

150 Chapter 9: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 9 IGMP Snooping Page The IGMP Snooping Page contains the following fields: • Enable IGMP Sn ooping S t atus — In dicates if IGMP Snooping is enabled on the device. IGMP Snooping can be enabled only if Bridge Multicast Filt ering is enabled. The possible field value[...]

151 Chapter 9: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 9 occurs, the switch notifies the Multicast device to stop sending traf fic The Leave T imeout value is either user-define d, or an immediate leave value. The default timeout is 10 seconds. 2. Define the relevant fields. 3. Click Apply . The IGMP Global Parameters are [...]

152 Chapter 9: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 9 • Leave Timeout — Indicates the amount of time the host waits, after requesting to leave the IGMP group and not receiving a Join message fr om another station, before timing out. If a Leave T imeout occurs, the switch notifies the Multicast device to stop sending[...]

153 Chapter 9: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 9 – Unchecked — Disables IG MP Snooping on the device. • VLAN ID — Specifies the VLAN ID. • Bridge Multicast Address — Identifies the Multicast gr oup MAC address/IP address. • Ports — Indicates the port nu mber on whic h Multicast service is configured[...]

154 Chapter 9: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 9 Edit Multicast Group Page The Edit Multicast Group Page contains the following fields: • VLAN ID — Displays the VLAN ID. • Bridge Multicast IP Address — Displays the IP address att ached to the Multicast Group. • Bridge Multicast MAC Address — Displays th[...]

155 Chapter 9: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 9 Defining Multicast Forwarding The Multicast Forward Page contains fields for attach ing ports or LAGs to a device that is attached to a neighboring Multicast router/switch. Once IG MP Snoop ing is enabled, Multicast packets are forwarded to the appropriate port or VL[...]

156 Chapter 9: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 9 – Excluded — The port is not part of a Multicast group. – Dynamic — Attaches the port to the Mul ticast group as dynamic member . Modifying Multicast Forwar ding 1. Click Bridging > Multicast > Forward . The Multicast Forwar d Page opens: 2. Click the E[...]

157 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 Configuring Spanning T r ee The Spanning Tree Protocol (STP) provides tree topogr aphy for any arrangement of bridges. STP also provides one pat h between end stations on a network, eliminating loops. Loops occur when alternate routes exist between hosts. Loops in [...]

158 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 Defining STP on Interfaces The STP Pr operties Page contains parameters for enabling STP on the device. The STP Pr operties Page is divided into three areas, Global Set tings, Bridge Settings. and Designat ed Root. 1. Click Bridging > Spanning T ree > Pr oper[...]

159 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 • BPDU Handling — Determines how BPDU packets are managed when STP is disabled on the port/ device. BPDUs are used to transmit spanning tr ee information. The possi ble field values are: – Filtering — Filters BPDU packets when spanning tree is disabled on a[...]

160 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 3. Click Apply . STP is enabled, and the device is updated. Defining Interface Settings Network administrators can assign STP se ttings to specific interfaces using the STP Interface Settings Page . T o assign STP settings to an interface: 1. Click Bridging > Sp[...]

161 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 optimizes the STP protocol convergence. STP convergence can take 30-60 seconds in lar ge networks. • Root Guard — Prevents devices outside the network co re from being assigned the spanning tree root. • Port S tate — Displays the current STP state of a port[...]

162 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 • Designated Cost — Indicates the cost of the port participating in the STP topology . Ports with a lower cost are less likely to be blocked if STP detects loops. • Forward T ransitions — Indicates the number of tim es the port has changed from the Blocking[...]

163 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 optimizes the STP protocol convergence. STP convergence can take 30-60 seconds in lar ge networks. • Enable Root Guard — Enable the prevention of a devices outside the network co re from being assigned the spanning tree root. • Port S tate — Displays the cu[...]

164 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 Defining Rapid Spanning T r ee While the classic spanning tree prevents Layer 2 forwarding loops in a general network topology , convergence can take between 30-60 seconds. This time may delay d etecting possible loops, and propagating status topology chan ges. Rap[...]

165 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 – Alternate — Provides an alternate path to the r oot switch from the root interface. – Backup — Provides a backup path to the designated po rt path toward the Spanning T ree leaves. Backup ports occur only when two ports are connected in a loop by a point-[...]

166 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 Edit Rapid Spanning T ree Page The Edit Rapid Sp anning T r ee Page contains the following fields: • Interface — Displays the port or LAG on which Rap id STP is enabled. • Role — Indicates the port role assigned by the STP algorithm in order to provide to S[...]

167 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 – Disable — Indicates that RSTP is disabled on the port. • Point-to-Point Admin S tatus — Indicates if a point-to-po int link s is established, or permits the device to establish a point-to-point link. The possible fiel d values are: – Enable — Enabl es[...]

168 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 Defining Multiple Spanning T r ee MSTP provides differing load bala ncing scenarios. For example, while port A is blocked in one STP instance, the same port is pl aced in the Forwarding State in another STP instance. The MSTP Pr op erties page contains information [...]

169 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 Defining MSTP Properties The MSTP Pr operties Page contain s information for defining global MSTP settings, including region names, MSTP revisions, and maximum hops. T o defi ne MSTP: 1. Click Bridging > Spanning T ree > MSTP > Pr operties . The MSTP Prope[...]

170 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 Instance to VLAN The VLAN screen enables mapp ing VLANs to MSTP Instances. 1. Click Bridging > Spanning T ree > MSTP > I nstance to VLAN . The Instance to VLAN Page opens: Instance to VLAN Page The Instance to VLAN Page contains the following fields: • V[...]

171 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 MSTP Instance Settings Page The MSTP Instance Settings Pa ge contains the following fields: • Instance ID — Defines the VLAN group to which the interface is assig ned. • Included VLAN — Maps the selected VLAN to the select ed instance. Each VLAN belongs to [...]

172 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 1. Click Bridging > Spanning T ree > MSTP > Interface Settings . The MSTP Interface Settings Page opens: MSTP Interface Settings Page The MSTP Instance Settings Pa ge contains the following fields: • Instance ID — Lists the MSTP instances configured on[...]

173 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 – Boundary Port — Indicates the port is a boundary port. A Boundary po rt attaches MST bridges to LAN in an outlying regio n. If the port is a boundary port, it also indicates whether the device on the other side of the link is working in RSTP or STP mode – M[...]

174 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 • Interface S t ate — Indicates whether the port is enabled or disabled in the specific instance. 2. Click the Interface T able button. The Interface T able Page opens: Interface T able Page The Interface T able Page contains the following fields: • Instance [...]

175 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10 – Rapid STP — Indicates that Rapid STP is enabled on the device. – Multiple STP — Indicates that Multiple STP is enabled on the device. • Ty p e — Indicates if the port is a poin t-to-point port, or a port connected to a hub. Th e possible field values [...]

176 Chapter 10: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 10[...]

177 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 Configuring SNMP The Simple Network Man agement Protocol (SNMP) provides a method for managing ne twork devices. The device supports the followi ng SNMP versions: SNMP v1 and v2 SNMP agents maintain a list of variables that are us ed to manage the device. The varia[...]

178 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 Configuring SNMP Security The Security section cont ains the following pages: • Definin g Engine ID • Defining SNMP V iews • Defining SNMP Users • Define SNMP Groups • Defining SNMP Communities Defining Engine ID The Engine ID Page provides information fo[...]

179 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 that the Engine ID is unique for the administrative domain . This prevents two devices in a network from having the same Engine ID. • Use Default — Uses the device generated Engine ID. The default Engine ID is based on the device MAC address and is defined per [...]

180 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 – DefaultSuper — Displays the default SNMP view for admi nistrator views. • Object ID Subtree — Indicates the device featur e OID included or excluded in the selected SNMP view . The options to select the Subtree are as follows: – Select fr om List — Se[...]

181 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 3. Define the relevant fields. 4. Click Apply . The SNMP views are defined, and the device is updat ed. Defining SNMP Users The SNMP Users Page provides information fo r creating SNMP groups, and assigning SNMP access control privileges to SNMP grou ps. Groups allo[...]

182 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 Add SNMP Group Membership Page The Add SNMP Group Membership Page provides information for assigning SNMP access control privileges to SNMP groups. Th e Add SNMP Group Membership Page contains the following fields. • User Name — Provides a user -defined local u[...]

183 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 Each byte in hexadecimal character strings is two hexadecimal digits. Each byte can be separated by a period or a colon. • Privacy Key — Defines the Privacy Key (LSB). If only authentication is required, 20 bytes are defined. If both privacy and au thentication[...]

184 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 – SNMPv3 — SNMPv3 is defined for the group. • Security Level — Defines the security level attached to th e group. Security levels apply to SNMPv3 only . The possible field values are: – No Authentication — Indicates that neither the Authen tication nor [...]

185 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 – Default — Defines the default group acces s rights. – DefaultSuper — Defines the default group access rights for administrator . Modifying SNMP Group Pr ofile Settin gs 1. Click System > SNMP > Security > Grou ps . The SNMP Gr oups Pr ofile Page [...]

186 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 SNMP Communities Page The SNMP Communities Pa ge is divided into the following ta bles: • SNMP Communities Basic T able • SNMP Communities Advanced T able The SNMP Communities Basic T able ar ea contains the following fields: • Management S tation — Display[...]

187 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 2. Click the Add button. The Add SNMP Community Page opens. Add SNMP Community Page The Add SNMP Community Page allow s network managers to define and configure new SNMP communities. The Add SNMP Com munity Page contains the following fields: • SNMP Management S [...]

188 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 Edit SNMP Community Page The Edit SNMP Community Page contains the follo wing fields: • SNMP Manag ement — Defines the management station IP address for which th e advanced SNMP community is defined . • Community S tring — Defi nes the password used to auth[...]

189 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 Defining T rap Management The Defining Trap Management section contains the following pages: • Defining Trap Settings • Config uring S tatio n Management • Defining SNMP Filter Settings Defining T rap Settings 1. Click System > SNMP > Security > T ra[...]

190 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 – Enable — Enables t he device to send au thentication failure notifications. – Disable — Disables the device from sending authentication failure notificati ons. Configuring S tati on Management 1. Click System > SNMP > Security > T rap Management [...]

191 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 – SNMP V2 — Indicates SNMP V ersion 2 traps are sent. • UDP Port — Displays the UDP port used to se nd notifications. The defau lt is 162. • Filter Name — Indicates if the SNMP filter for which th e SNMP Notification filter is defined. • Tim eo u t ?[...]

192 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 Add SNMP Notification Recipient Page The Add SNMP Notification Reci pient Page contains inform ation for defi ning filters that determine whether traps are sent to specific users, and the tr ap type sent. SNMP notification filt ers provide the following services: ?[...]

193 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 • Notification V ersion — Determines the trap type. The possible field values are: – SNMP V1 — Indicates SNMP V ersion 1 traps are sent. – SNMP V2 — Indicates SNMP V ersion 2 traps are sent. The SNMPv3 Notification R ecipient area contains the following[...]

194 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 SNMP Notification Receiver Page The SNMP Notification Receiver Page contains the following fields: • Recipients IP — Indicates the IP address to whom the tr aps are sent. • Notification T ype — Defines the notification sent. The possible field values are: ?[...]

195 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 • User Name — Defines the user to whom SNMP notifications are sent. • Security Level — (SNMP v3) Defines the means by which the packet is authenticated. The possible field values are: – No Authentication — Indicates the packet is neit her authenticated [...]

196 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 Defining SNMP Filter Settings The Filter Settings Page permits fi ltering traps based on OID s. Each OID is linked to a device feature or a feature aspect. The Filter Setti ngs Page also allows netw ork managers to filter notifications. 1. Click System > SN MP &[...]

197 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11 – Included — Sends OID traps or informs. 2. Click the Add button. The Add SNMP Notification Filter Page opens: Add SNMP Notification Filter Page The Add SNMP Notificatio n Filter Page contains the fo llowing fields: • Filter Name — Contains a list of user-d[...]

198 Chapter 11: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 11[...]

199 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Configuring Quality of Service Network traffic is usually unpredictable, and the only basic assurance that can be offered is best effort traffic delivery . T o overcome this challenge, Quality of Service (QoS) is applie d throughout the net work. This ensures that [...]

200 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 • Defining General Sett ings • Defining Advanced Mo de • Defining QoS Basic Mode The section also contai ns the following pages: • Configuring Policy T able Defining General Settings The QoS General Settings section contains th e following pages: •D e f i[...]

201 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Defining CoS The CoS Page contains fields for enabling or disabling CoS. In addition, the Trust mode can be selected. The T rust mode relies on predefin ed fields within the packet to determine the egre ss queue settings. 1. Click Quality of Service > General &g[...]

202 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 – Checked — Restores the factory QoS default settings to ports. – Unchecked — Maintains the current QoS settings. Modifying Interface Priorities 1. Click Quality of Service > General > CoS . The CoS Page opens: 2. Click the Edit button. The Edit I nte[...]

203 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Queue Page The Queue Page contains the following fields: • S trict Priority — Indicates that traf fic sc heduling for the selected queue is based strictly on the queue priority . • WRR — Indicates that traffic s cheduling for the se lected queue is based st[...]

204 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Mapping CoS to Queue 1. Click Quality of Service > General > CoS to Queue . The Cos to Queue Page opens: Cos to Queue Page The Cos to Queue Page contains the following fields: • Restore Defaults — Restores all queues to the default CoS settings. • Class[...]

205 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Mapping DSCP to Queue The DSCP to Queue Page enables mapping DSCP values to specific queues. T o map DCSP to Queues: 1. Click Quality of Service > General > DSCP to Queue . The DSCP to Queue Page opens: DSCP to Queue Page The DSCP to Queue Page contains the f[...]

206 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Bandwidth Page The Bandwidth Page contains the follo wing fields: • Port — Indicates the port for which the bandwidth settings are displayed. • LAG — Indicates the LAG for which the b andwidth settings are di splayed. • Of Unit — Displays the stackin g [...]

207 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 2. Click the Edit button. The Edit Bandwidt h Page opens: Edit Bandwidth Page The Edit Bandwid th Page contains the following fields: • Interface — Indicates the interface for which the queu e shaping information is displayed. The possible field values are: –[...]

208 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Defining Advanced Mode Advanced QoS mode provides rules for specifyin g fl ow classification and assi gning rule actions that relate to bandwidth man agement. The r ules are de fined in class ification control lis ts (CCL). CCLs are set according to the classificat[...]

209 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 DSCP Mapping Page The DSCP Mapping Page contains t he following fields: • DSCP In — Indicates the Differentiated Services C ode Point value in th e incoming packet. • DSCP Out — Indicates the Differentiated Services Code Point value in the outgoin g packet.[...]

210 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Class Mapping Page The Class Mapping Page contains the followi ng fields: • Class Map Name — Selects an existing Class Map by name. • ACL1 — Contains a list of the user -defined ACLs. • Match —Criteria used to match IP addresses and /o r MAC addresses w[...]

211 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 • Preferr ed ACL — Indicates if packets are first matched to an IP bas ed ACL or a MAC b ased ACL. The possible field values are: – IP Based ACLs — Matches packets to IP based ACLs first, then matches packets to MAC based ACLs. – MAC Based ACLs — Matche[...]

212 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 • Aggregate Policer Name — Specifies the Aggr egate Policer Name • Ingress Committed Information Rate (CIR) — Defines the CIR in bits per second. Thi s field is only relevant when the Police value is Single. • Ingress Committed Burst Size (CBS) — Define[...]

213 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Modifying QoS Ag gr egate Policer 1. Click Quality of Service > Advanced > Aggregate Policer . The Aggr egate Policer Page opens: 2. Click the Edit Button. The Edit QoS Aggregate Policer Page opens: Edit QoS Aggregate Policer Page The Edit QoS Aggr egate Poli[...]

214 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Configuring Policy T able 1. Click Quality of Service > Advanced > Policy T able . The Policy T able Page open s: Policy T able Page The Policy T able Page contains the following fields: • Policy Name — Displays the user -defined policy name. 2. Click the[...]

215 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 • Action — Defines the action attached to the rule. The poss ible field values are: – T rust CoS-DSCP — Enables T rus t Mode for the class. Th is command is used to distinguish the QoS trust behavior for given traffic. When a given type is trusted, the QoS [...]

216 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Edit QoS Policy Profile Page The Edit QoS Policy Pr ofile Page contains the following fields. • New Policy Name — Displays the user-defined policy name. • Class Map — Displays the user -defined name of the class map. • Action — Defines the action attach[...]

217 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 • Ingress Committed Burst Size (CBS) — Defines the CBS in bytes per second. This field is only relevant when the Police value is Single. • Exceed Action — Action assigned to incoming packets exceeding the CIR. This field is only relevant when the Police val[...]

218 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Add QoS Policy Binding Page The Add QoS Policy Binding Page contains the following fields. • Interface — Displays the interface to which the entry refers. • Policy Name — Displays a Policy name configured to the interface. 3. Define the relevant fields. 4. [...]

219 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 Defining QoS Basic Mode 1. Click Quality of Service > Basic Mode . The Basic Mode P age opens: Basic Mode Page The Basic Mode Page contains the following fiel ds: • T rust Mode — Displays the trust mode. If a packet’ s CoS tag and DSCP tag , and TCP/UDP ma[...]

220 Chapter 12: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 12 DSCP Mapping Page The DSCP Mapping Page enables mapping DSCP values from in coming packets to DSCP values in outgoing packets. The DSCP Mapping Page contains the following fields: • DSCP In — Indicates the Differentiated Services C ode Point value in th e incom[...]

221 Chapter 13: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 13 Managing System Files File Management Overview The configuration file structure consists of the following configuration files: • Startup Configuration File — Cont ains the commands required to r econfigure the device to the same settings as when the device is p[...]

222 Chapter 13: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 13 Firmwar e Upgrade 1. Click Admin > File Management > Firmware Upgrade . The Firmwar e Upgrade Page opens: Firmware Upgrade Page The Firmwar e Upgrade Page contains the following fields: • Upgrade — Specifies the firmware up grade is an upgrad e function. [...]

223 Chapter 13: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 13 Save Configuration 1. Click Admin > File Management > Sa ve Configuration . The Save Configurat ion Page opens: Save Configuration Page The Save Configuration Page contains the foll owing fields: • Upgrade — Specifies the firmware up grade is an upgrade f[...]

224 Chapter 13: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 13 Copy Files All software images on the stack mu st be identical to ensure proper operation of the stack. There are two different ways to update images across the stack: • Image ca n be updat ed prior t o connecting a unit to the stack. (This is the recommended met[...]

225 Chapter 13: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 13 Copy Files Page The Copy Files Page contains the foll owing fields: • Restore Configuration Factory Defaults — Resets the Configuration file to the factory defaults. The factory defaults are reset afte r the device is res et. When not selected, the device maint[...]

226 Chapter 13: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 13 Active Image Page The Active Image Page contains the following fields: • Unit No. — Indicates the unit number for wh ich the Image file is selected. • Active Image — Indicates the Image file which is currently active on the unit. • After Reset — The Ima[...]

227 Chapter 14: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 14 Managing System Logs The System Logs enab le viewing de vice events in real time, and reco rding the events for later usage. System Logs record and manage events a nd report errors or informational messages. Event messages have a unique format, as per the SYSLOG pr[...]

228 Chapter 14: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 14 Log Settings Page The Log Settings Page contains th e following fields: • Enable Logging — Indicates if device global logs for Console, Memory Logs, and Log Flash. • Severity — The following are the available severity logs: – Emer gency —The system is n[...]

229 Chapter 14: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 14 2. Define the relevant fields. 3. Click Apply . The global log parameters are set , and the device is updated. V iewing the Device Memory Logs The Memory Log Page contains all system logs in a chronological order that are saved in RAM (Cache). T o open the Memory P[...]

230 Chapter 14: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 14 2. Click the Clear Logs button. The message logs are cleared. V iewing the Flash Logs The Flash Page contains information about log entries saved to the Log File in FLA SH, including the time the log was generated, the log severity , and a de scription of the log m[...]

231 Chapter 14: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 14 V iewing Remote Logs The Remote Log Servers Page contains information for viewing and con figuring the Remote Log Servers. New log servers can be defined, and the log severity sent to each server . 1. Click Admin > Logs > Remote Log Servers . The Remote Log S[...]

232 Chapter 14: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 14 Add Syslog Server Page The Add Syslog Server Page contains informati on for viewing and configuring the Remote Log Servers. New log servers can be defined, and th e log severity sent to each server . The Add Syslog Server Page contains the following fields: • Log[...]

233 Chapter 14: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 14 Syslog Server Settings P age The Syslog Server Settin gs Page contains the following fi elds: • Server — Specifies the server to which logs can be sent. • UDP Port (1-65535) — Defines the UDP port to which the serv er logs are s ent. The possible range is 1[...]

234 Chapter 14: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 14[...]

235 Chapter 15: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 15 Configuring System T ime The device supports the Sim ple Network Time Prot ocol (SNTP). SNTP assure s accurate network device clock time synchronization up to the millisecond . T ime synchronization is performed b y a network SNTP server . The device operates only [...]

236 Chapter 15: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 15 Defining System T ime The System T ime Page contains fields for defi ning system time parameter s for both the local hardware clock, and the external SNTP clock. If the system time is kept using an external SNTP clock, and the external SNTP clock fails, the system [...]

237 Chapter 15: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 15 • Daylight Savings — Enables the Daylight Savings Time (DST) on the device based on the devices location. The possible field values are: – USA — The device switches to DS T at 2 a.m. on the first Sunday of Ap ril, and reverts to standard time at 2 a.m. on t[...]

238 Chapter 15: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 15 – Ti m e — The time at which DST begins every year . The field format is Hour:Minute, fo r example, 02:10. • To — Indicates the recurring time that DST ends each year . For example, DST ends l ocally every fou rth Friday in October at 5:00 am. The possible [...]

239 Chapter 15: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 15 • Enable SNTP Br oadcast — Enables polling the selected SNTP Se rver for system time information, when enabled. • SNTP Server — Indicates the user -defined SNTP server IP address. Up to ei ght SNTP servers can be defined • Poll Interval — Defines the in[...]

240 Chapter 15: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 15 Add SNTP Server Page The Add SNTP Server Page contains the following fields: • SNTP Server — Defines user-defined SN TP server IP addr ess. • Enable Poll Interval — Indicates whether or not the device polls the se lected SNTP server for system time informat[...]

241 Chapter 15: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 15 SNTP Authentication Page The SNTP Authenticat ion Page contains the followi ng fields: • Enable SNTP Authe ntication — Indicates if authenticating an SNTP session between the device and an SNTP server is enabled on the device. The possible field values are: –[...]

242 Chapter 15: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 15 Add SNTP Authentication Page The Add SNTP Authenti cation Page contains the followi ng fields: • Encryption Key ID — Defines the Key Identification used to authenticate the SNTP server and device. The field value is up to 4294967295 characters. • Authenticati[...]

243 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 V i ewing S tatistics This section provides device statisti cs for RMON, interfaces, GVRP , EAP , and Etherlike statistics. This section contains the following topics: • V iewing Ethernet S tatistics • Managing RMON Statistics V iewing Ethernet S tatistics The [...]

244 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 Interface Page The Interface Page contains the following fields: The General Informatio n area contains the following fields: • Interface — Indicates the device for which statistics are displayed. The possible field values are: – Port — Defines the specific[...]

245 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 • Multicast Packets — Displays the number of good Multicast packets received on the interface since the device was last refreshed. • Broadcast Packets — Displays the number of good broad cast packets received on the interface since the device was last refre[...]

246 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 Etherlike Page The Etherlike Page contains interface statistics. The Etherlike Page contains the followin g fields: • Interface — Indicates the device for which statistics are displayed. The possible field values are: – Port — Defines the specific port for [...]

247 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 • Excessive Collisions — Displays the num ber of excessive collisions received on the selected interface. • Oversize Packets — Displays the number of oversized pack ets (over 1518 octets ) received on the interface since the device was last refreshed. • I[...]

248 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 GVRP Page The GVRP Page contains device statistics for GVRP . The GVRP Page is divided into two areas, GVRP Statistics T able and GVRP Error Statistics T able. The following fields are relev ant for both tables: • Interface —Specifies the interface type for wh [...]

249 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 • Leave Empty — Displays the device GVRP Leave Empty statistics. • Join In — Displays the device GVRP Join In statistics. • Leave In — Displays the device GVRP Leave in statistics. • Leave All — Displays the device GVRP Leave all statistics. The GVR[...]

250 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 EAP Page The EAP Page contains information about EAP packets recei ved on a specific port. The EAP Page page contains the following fields: • Unit Number — Indicates the stacking me mber for which the EAP st atistics are displayed. • Port — Indicates th e p[...]

251 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 • Respond Frames Receive — Indicates the number of EAP Resp/I d frames that have been received on the port. • Request ID Frames T ransmit — Indicates the number of EAP Re q/Id frames transmitted via the port. • Request Frames T ransmit — Indicates the n[...]

252 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 Managing RMON S tatistics The RMON section contains the following pages: • V iewing RMON Statistics • Configuring RMON History • Configuring RMON Events • V iewing th e RMON Events Logs[...]

253 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 V iewing RMON S tatistics The RMON S tatistics Page contains fields for viewing information about device utilization and errors that occurred on the device. T o view the RMON statistics: 1. Click St a t i s t i c s > RMON > St a t i s t i c s . The RMON S tat[...]

254 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 • Received Bytes (Octets) — Displays the number of octets re ceived on the interface since the device was last refreshed. This number includes bad packets and FCS octets, bu t excludes framing bits. • Received Packets — Displays the number of packets r ecei[...]

255 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 Configuring RMON History This section contains the followin g topics: • Defining RMON History Control • V iewing the RMON History T able Defining RMON History Control The RMON History Contr ol Page contains information about samples of data taken from ports. Fo[...]

256 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 • Sampling Interval — Indicates in seconds the time th at samplings are taken from the ports. The field range is 1-3600. The default is 1800 seconds (equal to 30 minu tes). • Sampling Requested — Displays the number of samples to be save d. The field range [...]

257 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 Modify History Control Settings 1. Click S tatistics > RMON > His tory . The RMON History C ontr ol Page opens. 2. Click the Edit button. The History Contr ol Settings Page opens: History Control Settings Pa ge The History Contr ol Settings Page contains the [...]

258 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 V iewing the RMON History T able 1. Click S tatistics > RMON > His tory . The RMON Hi story Contr ol Page opens: 2. Click the History T able button. The RMON History T able Page opens: RMON History T able Page The RMON History T able Page contains the followi[...]

259 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 • CRC Align Errors — Disp lays the number of CRC and A lign errors that ha ve occurred on the interface since the device was last refreshed. • Undersize Packets — Displays the number of undersized p ackets (less than 64 octets) received on the interface sin[...]

260 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 RMON Events Page The RMON Events Page contains fields for defining RMON events. The RMON RMON Events Page page contains the following fields: • Event Entry — Displays the event. • Community — Displays the community to which the event belongs. • Descriptio[...]

261 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 Add RMON Events Page The Add RMON Events Page contains the following fields: • Event Entry — Displays the event. • Community — Displays the community to which the event belongs. • Description — Displays the user -defined event description. • Ty p e ?[...]

262 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 Modify Event Control Settings Page The Modify Event Contr ol Settings Page contains the follo wing fields: • Event Entry — Displays the event. • Community — Displays the community to which the event belongs. • Description — Displays the user -defined ev[...]

263 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 Events Page The Events Page contains the following fields: • Event — Displays the RMON Events Log entry number . • Log No.— Displays the l og number . • Log Time — Displays the time when the log entry was entered. • Description — Displays the log en[...]

264 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 RMON Alarms Page The RMON Alarms Page contains the following fields: • Alarm Entry — Indicates a specific alarm. • Counter Name — Displays the selected MIB variable. • Interface — Displays the interface for which RMON statistics are disp layed. The poss[...]

265 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 • Rising Event — Selects an event which is defined in the Events table that triggers th e rising threshold alarm. The Events T able is displ ayed in the RMON Events page. • Falling Threshold — Displays the falling counter value that triggers the fall ing th[...]

266 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 • Sample T ype — Defin es the sampling method for the selected variable and comparing the value against the thresholds. The possible field values are: – Delta — Subtracts the last sampled value from the current value. The difference in the values is compare[...]

267 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 Edit RMON Alarms Page The Edit RMON Alarms Page contains the following fields: • Alarm Entry — Indicates a specific alarm. • Interface — Displays the interface for which RMON statistics are disp layed. The poss ible field v values are: – Port — Displays[...]

268 Chapter 16: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 16 • Falling Threshold — Displays the falling counter value that triggers the fal ling threshold alarm. The falling threshold is graphically presented on t op of the graph bars. Each monitored vari able is designated a color . • Falling Event — Selects an even[...]

269 Chapter 17: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 17 Managing Device Diagnostics This section contains i nformation for configuri ng por t mirrori ng, running cable tests, and viewi ng device operational information, and includes the fo llowing topics: • V iewing In tegrated Cable T ests • Performing Optical T es[...]

270 Chapter 17: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 17 • Port — Specifies port to which the cable is connected. • T est Result — Displays the cable test results. Possible values are: – No Cable — Indicates that a cable is not connected to the port. – Open Cable — Indicates that a cable is connected on o[...]

271 Chapter 17: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 17 • Cable length — Displays the cable length. • Channel — Displays the cable’ s channel. • Polarity — Autom atic polarity detection and correctio n permits on all RJ-45 ports fo r automatic adjustment of wiring erro rs. • Pair Skew — Reaction or tra[...]

272 Chapter 17: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 17 • Current — Displays the current at which the c able is operating. • Output Power — Indicates the rate at which th e output power is transmitted. • Input Power — Indicates the rate at which the input power is transmitted. • T ransmitter Fault — Indi[...]

273 Chapter 17: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 17 • Destination Port — Defines the port to which traffic is mirrored. • Ty p e — Indicates the port mode conf iguration for port mirroring. The possible field values are: – RxOnly — Defines the port mirroring on recei ving ports. This is the default value[...]

274 Chapter 17: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 17 Edit Port Mirroring Page The Edit Port Mirroring Page contains the following fields: • Source Port — Defines the port to which traf fic is mirrored. • Ty p e — Indicates the port mode configuration for po rt mirroring. The possi ble field values are: – Rx[...]

275 Chapter 17: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 17 Defining CPU Utilization The CPU Utilizatio n Page contains information about the sy stem’ s CPU utilization. CPU Utilization Page The CPU Utilizatio n Page contains the followi ng fields: • CPU Utilization — Displays CPU resource utilization information. The[...]

276 Chapter 17: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Chapter 17[...]

277 Chapter A: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Appendix A Linksys One Contact Information Need to contact Linksys One? V isit u s online for informat ion on the latest produ cts and updates to your existing pro ducts at: http://www .linksys.com/international If you experience problems w ith any Linksys product , you can e-[...]

278 Chapter A: SFE2000/SFE2000P Gigabit Ethern et Switch Reference Guide Appendix A United Kingdom support.uk@linksys.com Outside of Europe E-mail Address Asia Pacific asiasupport@linksys.com (En glish only) Latin America support.portuguese@link sys.com or support.spanish@linksy s.com Middle East & Africa support.mea@linksys.com (English only) [...]