Asus GigaX manual

1 GigaX Series Layer 3 Managed Switch User Guide[...]

2 Exxxx First Edition V1 March 2005 Copyright © 2005 A SUSTeK COMPUTER INC. A ll Rights Reserved. No part of this manual, includin g the product s and softw are describe d in it, may be reprodu ced, transmitted, transcribed, stored in a retrieval sy stem, or translated in to any language in a ny form or by any means, except do cumentation kept by [...]

GigaX Series L3 Managed Switch User Guide 3 Federal Communications Commission Statement This device complies with Part 15 of the FCC Rules. Op eration is subject to the following two conditions: • This device may no t cause harmful interference, and • This device must accept any interf erence received including in terference that may c ause und[...]

4 ASUS contact information ASUSTeK COMPUTER I NC. (Asia-Pacific) Address: 150 Li-Te Road, Peitou, Taipei, Taiwan 112 General Tel: +886-2-2894-3447 General Fax: +886-2-2894-7798 Web Site: www.asus.com.tw Technical Support MB/Others (Tel): +886- 2-2890-7121 (English) Notebook (Tel): +886-2-2890-7122 (English) Desktop/Server (Tel): +886-2-2890-7123 (E[...]

GigaX Series L3 Managed Switch User Guide 5 Table of Contents 1 Introduction ............................................................................... 12 1.1 L3 managed f eatures ..................................................... 12 1.2 Conventions used in this docu ment ............................... 14 1.2.1 Notations ..................[...]

6 4.2.2 Commonly used buttons and icons ................. 31 4.3 System Pages ................................................................ 32 4.3.1 Management ................................................... 32 4.3.2 IP Setup .......................................................... 33 4.3.3 Administration ..................................[...]

GigaX Series L3 Managed Switch User Guide 7 4.8.2 Filter Attach ..................................................... 68 4.9 Security .......................................................................... 70 4.9.1 Port Access Control ........................................ 70 4.9.2 Dial-In User .................................................[...]

8 7.1.2 nslookup ........................................................ 120 7.2 Replacing defec tive fans .............................................. 121 7.3 Simple fixes .................................................................. 123 8 Glossa ry.................................................................................. 125 9 Ind[...]

GigaX Series L3 Managed Switch User Guide 9 List of Figures Figure 1. GigaX L3 managed switch package contents ................ 15 Figure 2. Front pa nel ..................................................................... 16 Figure 3. Rear pan el ...................................................................... 18 Figure 4. Overview of Hardw[...]

10 Figure 26. Dynamic Address ........................................................... 51 Figure 27. Static Address ................................................................ 53 Figure 28. Tagged VLAN ................................................................. 54 Figure 29. Default Port VL AN and Co S ................................[...]

GigaX Series L3 Managed Switch User Guide 11 Figure 55. Removing the fan modul e ............................................ 121 Figure 56. Detaching the fan fr om the m odule .............................. 122 List of Tables Table 1. Front panel label s and LEDs .......................................... 17 Table 2. Rear panel labels ............[...]

12 1 Introduction Congratulations on becomi ng the owner of the ASUS GigaX L3 managed switch! You may now manage you r LA N (local area network) through a friendly and powerful user interface. This user guide tells you how to set up t he GigaX L3 managed switch, and how to customize its configuration to get the most out of this produ ct. 1.1 L3 man[...]

GigaX Series L3 Managed Switch User Guide 13 • MIB -II • Enterprise MIB fo r PSU, fan , and sy stem tem perature, v oltage • Telnet or SSH remote login • FTP for firmware update an d configuratio n backup • DHCP snoopin g support • Syslog support • Command Line Int erpreter t hrough con sole , teln et and SSH • Web GUI • LEDs for [...]

14 1.2 Conventions used in this document 1.2.1 Notations • Acronyms are defined the first time they appear in text and in the glossary. • For brevity, the GigaX swit ch is referred to as “the sw itch.” • Th e term s LAN and network ar e used interchangeably to re fer to a group of Ethernet-conne cted computer s at one site. 1.2.2 Typograp[...]

GigaX Series L3 Managed Switch User Guide 15 2 Getting to know the GigaX 2.1 Package content s The GigaX switch package come s with the following items: • 24-port L3 managed switch • AC Power cord • Null modem cable for console in terface (DB9) • Rack installation kit ( two brackets with six #6-32 screws) • USB cable for con sole int erfa[...]

16 2.2 Front Panel The front panel includes LED indicators that show the system, RP S, fan, and port status. Figure 2. Front panel[...]

GigaX Series L3 Managed Switch User Guide 17 Table 1. Front panel labels and LEDs Label Color Status Description On Unit is powered on Green Flashing Self-test, INIT, or downloading Amber On Abnormal temperature or voltage SYSTEM Off No power Green On The PSU is working properly and the switch has a good redundant power supply Amber On The PSU is a[...]

18 2.3 Rear Panel The switch rear panel contains the p orts for the data and power connectio ns. Figure 3. Rear panel Table 2. Rear panel labels No. Label Description 1 Power Connector Connects to the supplied power cord 2 RPS Redundant Power Supply connector 3 FAN1 – FAN2 Replaceable system fans 2.4 T echnical specifications Table 3. Technical s[...]

GigaX Series L3 Managed Switch User Guide 19 3 Quick st art guide This sec tion provides the basic instructions to set up the GigaX environment. Refe r also to the Gi gaX Series Installation Guide. Part 1 shows you how to install the Gig aX on a flat surface or on a rack. Part 2 provides ins tructions to set up the hardwar e. Part 3 shows you how t[...]

20 3.2 Part 2 — Setting up the switch Connect the de vice to the power outle t, and your computer or netwo rk. See Figure 4. 3.2.1 Connect the console port For console management, use an RS23 2 (DB9) or a USB cable to connect the switch. If you want to us e WEB interface, connect your PC to the switch using the Ethernet cable. 3.2.2 Connect to th[...]

GigaX Series L3 Managed Switch User Guide 21 Figure 4. Overview of Hardware Connec tions Console Management Expansion hub/switch LAN computers RPS RS-232 USB Cat 5 Ethernet cables[...]

22 Table 4. LED Indicators No. LED Description 1 System Solid green indicates that the device is turned on. If this light is off, check if the power adapter if attached to the switch and plugged into a power source. 2 Switch ports [1] to [26] Solid green indicates that the device can communicate with the LAN, or flashing when the device is sending [...]

GigaX Series L3 Managed Switch User Guide 23 3. Make sure the settings of your termin al emulation software as follows: a) Choose the appropriate serial port numb er b) Set the data baud rate to 9600 c) Set the data format to no parity, 8 data bits and 1 stop bit d) No flow control e) Set VT1000 for emulation mode 4. After setting up the terminal, [...]

24 Figure 5. Login and IP setup Screen[...]

GigaX Series L3 Managed Switch User Guide 25 3.3.2 Setting up through the Web interface To successfully connec t your PC to the switch, yo ur PC must a valid IP in your network . Contact your network admin istrator to ob tain a valid IP for the switch. If you wi sh to ch ange the def ault IP ad dress of t he swit ch, follo w section 3.3.1 t o cha n[...]

26 Enter your user name and password, and then click to enter the Configurat ion Mana ger. Use the foll owing def aults the first ti me you log into thi s interface: Default User Name: admin Default Password: (no pass word) You can change the pass word at an y time (see section 5.3.1 System Commands). 3. To setup a new IP address, click “ Sy stem[...]

GigaX Series L3 Managed Switch User Guide 27 4 Management with the Web Interface The switch provides Web pa ges that a llow switch mana gement throu gh the Internet. The program is desi gned to work best with Mi crosoft Internet Explorer® 5.5, or later ve rsions. NOTE: Netscape is not suppor ted. 4.1 Log into W eb user interface 1. From a PC, open[...]

28 The home page appears each time you log into the program. (See Figure 9.) Figure 9. Home page 4.2 Functional layout Typical web page consis ts of three separate frames. The top frame has a switch logo and front pa nel as shown in Figures 10 . This frame remains on the top of th e browse r wind ow all the t ime s and up dates the LE D st atus per[...]

GigaX Series L3 Managed Switch User Guide 29 Figure 10. Top Frame Table 5. Port color description Port Color Description Green port Ethernet link is established Black No Ethernet link Amber port Link is present but port is disabled manually or by spanning tree Clicking o n the port icon of the switch disp lays the port conf iguration in the lower r[...]

30 Figure 11. Expanded Menu List[...]

GigaX Series L3 Managed Switch User Guide 31 The above frame displays configuration pages or g raphics for the statistics. See section 4.3 for details. 4.2.1 Menu navigation tips • To expand a group of relate d menus, click on the corre sponding group name. The sign will change to after expa nsion. • To contrac t a group of related menus : clic[...]

32 4.3 System Pages System pages inc lude management, IP setu p, administration , reboot, and firmware update func tion. 4.3.1 Management The Manage ment page co ntains th e followi ng informat ion: Model Name: produc t name MAC Address: switch MAC address System Name: user assig ned name to iden tify the system (editable) System Contact (editabl e[...]

GigaX Series L3 Managed Switch User Guide 33 4.3.2 IP Setup The switch sup ports only s tatic IP assignment. The IP Setup page co ntains the following e ditable inf ormation: VLAN ID : Specify a VLAN ID to system manag ement in terface. It is necessary to be within the same VLAN for manage ment usages. IP Address: Assign a static IP address to the [...]

34 4.3.3 Administration The Admi nistrati on page allows you e nable or disabl e the authenti cation for web user by password protection . The default setting for web acce ss does no t require an y authentication . To save an y changes and mak e it effect ive immediately, click . Use to refresh the setting, as s hown in Figure 14. When you enable t[...]

GigaX Series L3 Managed Switch User Guide 35 4.3.5 Firmware Upgrade The Firm ware page contain s the follo wing informat ion: Hardware Vers ion: shows the hardware revision number. Boot ROM Ve rsion: sho ws the v ersion of t he boot code Firmware Version: shows the current running firmware version. This number will be updated af ter the firmware up[...]

36 4.4 Physical Interface The Physical Inte rface disp lays the Ethernet p ort status in real time. You can configure the port in following f ields: Port: select the port to configure Admin: disabl e/enable t he port Mode: set the speed and duplex mode Flow Control: e nable/disable 802.3x flow co ntrol mechanism Port Status Wind ow: displ ays the f[...]

GigaX Series L3 Managed Switch User Guide 37 Figure 16. Physical Interface[...]

38 4.5 Route This command group offers L3 interfa ce and route e ntry configuration 4.5.1 Interfaces Generally, Layer 3/routed interfaces are use d to route traffic between the VLAN, this is so-called inter-VLA N routing. That is, different VLANs exchange data with going through Laye r 3 interface s and need not an external router. This switch perf[...]

GigaX Series L3 Managed Switch User Guide 39 Select the corresponding interf ace and configure the interface parameters. To save any changes an d make it effective immediately, click . Use to refresh the setting. The field you changed will update the content in the displ ay window. By default, Layer 3 switching is disabled. You have to create and a[...]

40 4.5.2 Static Route Static routing is the simplest form of network routing. It makes available to a switch/router to forward packe ts from predetermi ned ports through a predictable path into and out of a network. Static routing is solid, but does not address to the fluctuation in the network, th erefo re, it might result in destination net unrea[...]

GigaX Series L3 Managed Switch User Guide 41 Figure 18. Static Route 4.5.3 RIP The Routing Information Protocol (RIP) is documente d in RFC 1058 , RFC 1388 and RFC 1723 . In short, RIP is a distance-vector routing protocol that exchange routing information usi ng UDP packets. RIP configuration includes the following informatio n: RIP process: enabl[...]

42 By default, RIP process is disabled and two of RIP Versio ns are assigned for the switch. All Layer 3 interfaces are cla s sified a s RIP enabled interfaces. Once the RIP process has been enabled, the curre nt state of the active process will be displayed. You can click to refresh the updated status. Click to change the RIP interfaces setting. C[...]

GigaX Series L3 Managed Switch User Guide 43 4.6.1 Spanning Tree/Ra pid Spanning Tree The configu ration page fo r Spanning Tree Protocol can disabl e and enable the feature i n runtim e. This p age consi sts of thre e part s. The first part shows the root inf ormation. It tells user th e STP setting about the root switch. The second part is the ST[...]

44 Point to Point: Auto/Yes/ No. A full duplex link is considere d as a point to point link. Otherwise, it is a shar ed link. Point to point li nk may have less convergence time. Auto is recommended in most cases. Click to effect the settings. Click to refresh the settings to the current value. Figure 20. Spanning Tree 4.6.2 Link Aggregation The pa[...]

GigaX Series L3 Managed Switch User Guide 45 Port Selection Criteri on: the al gorith m to dist ribut e packets among t he ports of the link aggregation group according to source MAC addr ess, destination MAC address, source and destination MAC address, source IP address, destin ation IP address, or sourc e and destination IP address. Name: the gro[...]

46 aggregation could operat e abnormally. • All the ports in the link aggregation gr ou p MUST have the same VLAN setting. • All the ports in the link ag gr egation group are treated as a single logical link. That is, if any member changes an attribute, the others will change too. For example, a trunk group consists of port 1 and 2. If the VLAN[...]

GigaX Series L3 Managed Switch User Guide 47 Monitor Port: Receive s the cop ies of all t he traff ics in the select ed mirrored por ts. GigaX 3024X has o nly one monitor po rt. The port can monitor 24 Fast Ethernet po rts and two Gi gabit ports. The monitor port can not belong to any li nk aggregation group. The monitor port can not operate as a n[...]

48 4.6.4 Static Multicast This page ca n add multic ast addresses into the multicast table. The switch can hold up to 256 m ulticast ent ries. All t he ports in t he group will f orward the specified mu lticast packets to other por ts in the group. Show Group : selects “Add a new Group” to ente r a new e ntry. Or select an exis ting group addre[...]

GigaX Series L3 Managed Switch User Guide 49 Figure 24. IGMP Snooping 4.6.6 Traffic Control Traffic control p revents the switch bandwidth from flooding packets including broadc ast packets, multic ast packets and the unicast packets because of destination address lookup failure. The l imit number is a threshold to l imit the t otal num ber of the [...]

50 Figure 25. Traffic Control 4.6.7 Dynamic Addresses This page displays the result of d ynamic MAC address lookup by port, VLAN ID , or specified MAC address. The dynamic address is th e MAC address learned by switch , it will age out from the ad dress table if the address is no t learned again during the a ge time. User can se t the age time by e[...]

GigaX Series L3 Managed Switch User Guide 51 Figure 26. Dynamic Address[...]

52 4.6.8 Static Addresses You can add a MAC add ress i nto the swi tch addre ss table. T he MAC address added by this way will not age out from the address table. We call it static address . MAC Address: enter the MAC address VLAN ID: en ter the VLAN ID th at the MAC belongs Port Selection: selec t the port which the MAC belongs Discard: you can do[...]

GigaX Series L3 Managed Switch User Guide 53 Figure 27. Static Address 4.6.9 Tagged VLAN You can s et up to 255 VLAN g roups and sh ow VLAN gr oup in this page. There is a def ault VLAN cre ated by the switch. It cann ot be remov ed at all. This feature prev ents the switch from malfunctions. Yo u can remove any existed VLA N except t he def ault V[...]

54 Figure 28. Tagged VLAN[...]

GigaX Series L3 Managed Switch User Guide 55 4.6.10 Default Port VLAN and CoS Some VLAN tag re lated field setti ngs for each po rt are include d in this pag e. It includes: Port: select the port to configure PVID: port-based VLAN ID. Every untagged packet received from this port w ill be tagged w ith th is VLAN group ID CoS (Class of Se rvice) v a[...]

56 4.6.11 CoS Queue Mapping The switch s upports 4 egress queu es for eac h port with a strict pr iority schedule. That is , each CoS value can map in to one of the fou r queues. The queue 4 has the highest priority to transmit the packets . Click to save the configurat ion. To make the co nfiguration eff ective, go to “ Sa ve Configurat ion ” [...]

GigaX Series L3 Managed Switch User Guide 57 Click to make the setting send to the switch. Click to refresh the settings to curr ent value. Figure 31. DHCP Snooping[...]

58 4.7 SNMP This group offers the S NMP conf iguratio n incl uding Co mmunity Table, Host Table, and Tr ap Setting. To prov ide mo re secure ma nagement and access control, SNMPv3 is suppo rted. 4.7.1 Community Table You can type different commu nity names and specify whet her the community has the privilege to do set action (write access) by check[...]

GigaX Series L3 Managed Switch User Guide 59 4.7.2 Host Table This page links host IP address to th e community name that i s entered in Community Table page. Type an IP addr ess and selec t the community name from th e drop-d own list. Click to save the configurati on permanently o r to refresh the p age. Figure 33. Host Table[...]

60 4.7.3 Trap Setting By setting trap dest inatio n IP addre sses and community names, yo u can enable SNMP trap function to sen d trap packets in different vers ions (v1 or v2c). Click to save the configurati on permanently or to re fresh the p age. Figure 34. Trap Setting 4.7.4 VACM Group VACM (View-based Acc ess Control Model) Gr oup is used to [...]

GigaX Series L3 Managed Switch User Guide 61 Security level: ent er the S ecurity level Name that th e Group be longs. Only NoAuth, AuthNopriv, AuthPriv can be chosen. Click on th e when you create a new VA CM grou p entry by the above information. Th en you will see the new added entry shows in the group window. You can remove the existed group by[...]

62 View Name: enter the security group name. View Type: enter the View Type that the View belongs . Included or Excluded when View Subtree matc hes the Oid in the SNMPv3 message. View Subtree: enter the V iew Subtre e that the Vi ew belong s. The Subtree is the Oid to mat ch the Oi d in the SNMPv3 message. The match is go od when the subtree is sho[...]

GigaX Series L3 Managed Switch User Guide 63 4.7.6 USM User USM (User-based Sec urity Model) Use r is used t o conf igure the information of SNMPV 3 USM User. Engine Id: enter th e Engine Id that shou ld match th e ID in the Manager. Name: enter Name com bined with Engin e ID that sho uld mat ch the Name and Engin e ID in the Manager. Auth Protoco [...]

64 Figure 37. USM User[...]

GigaX Series L3 Managed Switch User Guide 65 4.8 Filters The switch can filte r certain traffic ty pes according to pa cket header information from Layer 2 to Layer 4. Each filter set includes a couple of rules. You have to att ach the filter set to cert ain ports to make the filter work. 4.8.1 Filter Set You can create a filter set by giving a nam[...]

66 Figure 38. Filter Set The Filter Rule page provides options for rule mo des, one is MAC rule (Figure 39 ) and the other is IP ru le (Figure 40). If you did not enter the MAC address in the bla nk box, it means the rule doesn’t care th e MAC value. In IP rule setup, you can enter any of the 5 type s, source IP, destinatio n IP, protocol, sou rc[...]

GigaX Series L3 Managed Switch User Guide 67 Figure 39. Filter Rule in MAC mode Figure 40. Filter Rule in IP mode[...]

68 4.8.2 Filter Attach A filter set is i dle if you di d not atta ch it to any ingress o r egress po rt. Use the Filter Attach page to attach a filter set to ingress and egress ports. Click to save the confi guratio n. To make t he configur ation effective, go to the “Save Conf iguration ” page, then click , or cli ck on to refresh the page. To[...]

GigaX Series L3 Managed Switch User Guide 69 Figure 41. Filter Attach[...]

70 4.9 Security The switch has the 802.1x p ort-based security featu re. Only authorized hosts are allowe d to access the switch port. Traffic is blocked for hosts failed to au thenticate themse lves. The auth entication ser vice is pro vided by a RADIUS server or the local database in th e switch. The switch also su pports dyna mic VLAN as signmen[...]

GigaX Series L3 Managed Switch User Guide 71 • Multi-hos t: If enabled, ALL hosts conn ected to the selected po rt are allowed to us e the port if ON E of the hosts passed the authe ntication. If disabled, only ONE h ost among othe r hosts passed the authenti cation is allowed to use the port. • Authentication Control: If 'force_au thoriz [...]

72 4.9.2 Dial-In User Dial-in User is used to define users in the local datab ase of the swi tch. • User Name: New user name. • Password: Pa ssword for the new us er. • Confirm Password: Ent er the password a gain. • Dynamic VLAN: Sp ecify th e VLAN ID assigned to the 802.1x-authenticated clie nts. Click to add the new user. Click when you&[...]

GigaX Series L3 Managed Switch User Guide 73 4.9.3 RADIUS In order to use external RADIUS server, the following para meters a re required to be setup: • Authentication Server IP: The IP address of the RA DIUS server. • Authentication Server Port: The po rt numbe r for th e RADI US serv er is listening to. • Authentication Server Key: The key [...]

74 4.10 S t atistics Chart The Statistics C hart p ages provide network flow in different char ts. You can specify th e period t ime to refresh t he cha rt. You ca n monit or the network tra ffic amount in di fferent graphic char t by these pages. Most MIB-II counters are displayed in these c harts. Click Refresh Rate to set the per iod for retr ie[...]

GigaX Series L3 Managed Switch User Guide 75 Figure 45. Traffic comparison 4.10.2 Error Group Selecting t he Port and displ ay Color , then clicking Draw , the st atistics window shows you al l the discards or error count s for the specifie d port. The data is updated periodica lly. Figure 46. Error group 4.10.3 Historical Status You can disp lay i[...]

76 Figure 47. Historical Status[...]

GigaX Series L3 Managed Switch User Guide 77 4.11 Save Configuration To save configurati on permane ntly, you have to click . The setting also t akes effe ctiv e after a successful save. Sometimes y ou may wa nt to re set the switch co nfiguration, y ou ca n cli ck on to reset the configuration file to factory default. Of course, a system reboot w [...]

78 5 Console Interface This chap ter describes h ow to use cons ole interface to configure t he swit ch. The switch provides RS23 2 and USB connec tors to c onnect your PC. Use a terminal emul ator on your PC such a s HyperTermi nal and command lin e interpreter to configure t he swit ch. You ha ve to set up t he termina l emulato r with baud rate [...]

GigaX Series L3 Managed Switch User Guide 79 5.1 Power On Self T est POST is executing durin g the system bo oting time. It tests syst em memory, LED and har dware chips on the switchboard. It displays sys tem information as the result of system te st and initi alizatio n. You can igno re the informa tion until the prompt, “ ( ASUS)% ”, appears[...]

80 5.1.1 Boot ROM Command Mode During the POST proc ess, you can enter a “ Boot ROM Command ” mode by pressing <ENT ER> key as sh own in Figur e 50. Figure 50 sho ws dual images i n the swit ch. One firm ware is in Sl ot 0 and t he other firmware is in Slot 1. The late r version will be selected to boot the sy stem automatical ly. Enter t[...]

GigaX Series L3 Managed Switch User Guide 81 5.1.2 Boot ROM Commands Type “?” in the boot mode to dis play the valid commands list. Table 7. Boot ROM commands Command Parameters Usage Notes d Address [,length] Dump memo ry contents by giving address and length. p NONE Display current boot parameters g NONE Execute firmware, enter CLI mode b O o[...]

82 5.2 Login and Logout By typing “ login ” to enter th e CLI mode, you have to giv e a valid user name and password. As the fi rst time login, yo u can enter “ admin ” as the user name and bypass the pa ssword. For security rea son, please chan ge the user name and password afte r login. Once y ou forget the use nam e and pa ssword, you ma[...]

GigaX Series L3 Managed Switch User Guide 83 [System Contact] Displays the detail inf ormation of contact abo ut the switch. This is an RFC-1213 defined MIB ob ject in System Group, and provides contact informatio n on the mana ged node. CLI command : sys inf o conta ct <system contact description> If you put the contact description in th e c[...]

84 [VLAN ID] Displa ys the VLAN ID fo r the sw itch. It is necessary to be within the same VLAN for mana gement usages. CLI command: l3 interface vlan sw0 <VLAN ID> [IP Address] Displays th e static IP address for the switch. This IP address is used for manageable pu rpose, i.e. network applications such as, http ser ver, SNMP server, ftp ser[...]

GigaX Series L3 Managed Switch User Guide 85 password (o ld password, no password by default ): <new password> [Reboot] User can reboot the switch by issuing the rebo ot command. CLI command : sys re boot [Upload] No CLI comma nd for th is function. Re fer to Boo t ROM commands for this function. 5.3.2 Physical Interface Commands [Admin] [Ena[...]

86 CLI command : sys l2 p ort retr ieve 5.3.3 Route Commands [Show L3 Interfaces] Displays all L3 interfaces settings. CLI command : l3 interface show <tru nk i d> [Create L3 Interfaces] User can create a new L3 interface by specify an uniqu e interface name, the interface typ e (VLA N, virtua l interfac e or Port, route d port), and its ty p[...]

GigaX Series L3 Managed Switch User Guide 87 [Add Static Route] Insert a static route entry into the routing table by giving the destination IP, gateway IP address, subnet mask and the metric. CLI command : l3 route sta tic add <dst > <gate way> < mask> <m etri c> [Delete Static Route] Delete a static route entry from the ro[...]

88 [RIP-disabled interfaces] You can specify an L3 interface a s RIP- disabled inte rface if you do not want this interface to deal with any RIP message, either incoming or outgoing. CLI command : l3 rip interf ace remove <interf ace name/* for all> 5.3.4 Bridge Commands [Spanning Tree is] [ STP Enabled/ RST P Enabled/ Disabled ] Allows user [...]

GigaX Series L3 Managed Switch User Guide 89 Port <port number> Path Cost (1 ..20 0000000):[old port Pa th Cost] <new port Path Cos t> Port <port number> EdgePort (yes/no) :[old port Edge Port] <new por t EdgePor t > Port < port number> Poin t-to-Poin t (yes/no /auto):[ old por t Point- to-Point ] <new po rt Point- [...]

90 6: select port by sou rce and destin ation IP CLI command: l2 trunk create <trunk id> <rta g (1-6)> <trunk name> <lacp (ena ble/di sable) > <port li st> [Add/Remove Trunk] Trunk group po rt members can be added to or removed from an exis ting trunk group. CLI command : l2 trunk add <trunk id> <por t list>[...]

GigaX Series L3 Managed Switch User Guide 91 CLI command : l2 mirror egress <port list> CLI command : l2 mirror remove <ingress/e gress> <port list> [Reload] Restores the previous s aved settings from configura tion file. CLI command : l2 mirror retrieve [Show Multicast Group] Displays the static multicast groups that are presente[...]

92 vlan id: <vlan id > [Reload] Restores the previous s aved settings from configura tion file. CLI command : l2 mcast retrieve [IGMP] [Enabled/Disabled] Layer 2 IGMP sn ooping can be starte d or terminated by user if necessary. CLI command : l2 igmp <start/st op> [Reload] Restores the previous s aved settings from configura tion file. [...]

GigaX Series L3 Managed Switch User Guide 93 [Aging Time] User can set the ARL (Address Re solution Logi c) entries aging time by setti ng the aging tim e value. CLI command : l2 arl age [aging time value] [Query by Port] ARL entries existe d in ARL tab le can b e querie d according t o port number. CLI command : l2 arl port <port numbe r> [Q[...]

94 [Reload] Restores the previous s aved settings from configura tion file. CLI command : l2 arl retrieve [Show VLAN] Displays the existin g VLAN i nformation of the swit ch. CLI command : l2 vlan show <vlan id> [Name] [VLAN ID] Allows user to config the VLAN setti ngs. User may create a new VLAN by giving a unique VLAN ID, a VLAN descr iptio[...]

GigaX Series L3 Managed Switch User Guide 95 [Retrieve] Restores the previous s aved settings from configura tion file. CLI command : l2 vlan retrieve [PVID] Sets th e defaul t VLAN for a port by gi ving a VL AN ID and i ts associa ted port member list. CLI command : l2 port vlan <vlan id, 4000 to disable t he port-based vlan> <port list&g[...]

96 [Add/Remove Trusted Port] Allows user to add or re move specific ports for DHCP snoop ing. CLI command : l2 dhcpsnoop add <port list> CLI command : l2 dhcpsnoop remo ve <port list> [Retrieve] Restores the previous s aved settings from configura tion file. CLI command : l2 dhcpsnoop retr ieve 5.3.5 SNMP [Community Name] [Set] A commun[...]

GigaX Series L3 Managed Switch User Guide 97 CLI command : snmp community delete Allows user to delete a com munity entry from commu nity table. Community entry (table index): <entry id to delete> This action will delete all ho sts in community string with ' delete com munity '. Are you sure? (y/n):[y] <y for ‘yes’; n fo r ?[...]

98 Entry id (table index): < entry id to delete> [Retrieve] Restores the previous s aved settings from configura tion file. CLI command : snmp host retrieve [Trap Version] [v1/v2c] [Destination] [Community for Trap] A trap entry contains SNMP versi on (currently suppo rt version 1 and version 2c), a destination IP address and the remote commu[...]

GigaX Series L3 Managed Switch User Guide 99 CLI command : snmp trap retrieve [Group Name] [Read View Name] [Write View Name] [N oti fy V iew Nam e] [Security Model] [Security level] A VACM (View-bas ed Access Cont rol Model) Group ent ry contain s a group name, read vi ew name, writ e view name, not ify view na me, security model, security level a[...]

100 Security Level [1/2/3](noa uth/authnopriv/authpriv): (o ld security level) <new security level> Context Match [0/1](inexact /exact): (old cont ext match ) <new context match> Read View Name: (old read view name string) <new read view na me string > Write View Name: (old write view name string ) <new write view name string &[...]

GigaX Series L3 Managed Switch User Guide 101 View Type[1/2](i ncluded/excl uded): <view type> CLI command : snmp snmpv3 view set User can mod ify a VACM View e ntry in the tabl e by reas signing its allo wed view name, vie w type, view subt ree and vi ew mask. View Name: (old view name strin g ) <n ew view name st ring > View Subtree [[...]

102 CLI command : snmp snmpv3 usmuser add EngineId: <eng ine id string > Name: <u ser name string > AuthProtocol [oid]: <auth protocol oi d string > AuthPassword: <auth password stri ng> Priv Protocol [oid ]: <pri v protoc ol oid stri ng > Priv Pass word: <priv password string > CLI command : snmp snmpv3 usmuser [...]

GigaX Series L3 Managed Switch User Guide 103 5.3.5 Filters Commands [New] Creates a new filter se t with spec ifying a unique AC L ID and its descrip tion name. CLI command : filter set new <ac l id> <acl name> [Remove] User can delete a f ilter set by indi cating th e ACL ID. CLI command : filter set delete <acl id> [Edit] [Rule[...]

104 [Rule Mode] [IP Rule ] [Action] [Permit/Deny] [Source IP] [Type/IP, Mask] [Destination IP] [Type/IP, Mask] [Source Port] [Type/Port] [Destination Port] [Type/Port] [Protocol] [ICMP/TCP/UDP/ANY] [Add] User can add a new IP ru le associated to a filter set. Thes e filter ru le works with IC MP, TCP or UDP protocols with permit or deny options. Us[...]

GigaX Series L3 Managed Switch User Guide 105 CLI command : filter rule modify <set id> <rule id> <protocol: ICMP/TCP/UDP/any > <action: permit/ deny> CLI command : filter rule d stmac <set id> <rule id> <type: (any/ [mac address])> CLI command : filter rule srcmac <set id> <rule id> <type: ([...]

106 [Rule Mode] [MAC Rule] [Action] [Permit/Deny] [Source MAC] [Destination MAC] [Delete] Allows user to delete the M AC filter rul e. CLI command : filter rule delete <set id> <rule id> [Rule Mode] [IP Rule ] [Action] [Permit/Deny] [Source IP] [Type/IP, Mask] [Destination IP] [Type/IP, Mask] [Source Port] [Type/Port] [Destination Port][...]

GigaX Series L3 Managed Switch User Guide 107 [Filter ID] Displays the filter c onfiguratio ns. CLI command : filter show [Ingress Port] Applies a filter set to an ingress port. CLI command : filter apply ingress <filter set id> <any/none/[p ort number]> [Egress Port] Applies a filter set to an egress port. CLI command : filter apply eg[...]

108 CLI command : security dot1x bridge authmeth <type (1:loc al 2:radius)> [Quiet Period] Allows user to set up the quiet period. CLI command : security dot1x bridge quietperiod <quiet p eriod (1 -65535 sec)> [Retransmission Time] Allows user to set up the retransmi ssion time. CLI command : security dot1x bridge retxtime <retra nsm[...]

GigaX Series L3 Managed Switch User Guide 109 CLI command : security dot1x retrieve [User Name] [Password] [Confirm Password] [Dynamic VLAN] Create users i n the local databas e of the swit ch for 802. 1x authenti cation. A user entry contains a user name, password and dynamic VLAN . CLI command : security diali nuser create User Name: <user na [...]

110 [Authentication Server IP] [Authentication Server Port] [Authentication Server Key] [Confirm Authentication Key] Allows user to config th e RADIUS se rver IP, server port an d server ke y . CLI command : security radius set authentication server ip <i p/none>: (old server ip)<new server ip > authentication server port <port/defau[...]

GigaX Series L3 Managed Switch User Guide 111 [Show Generating Status] Show the SSH key generat ing status. It will di splay “success” or “SS H keys generated fail” or “sys tem is generating keys ...”. CLI command : security sshkey show[...]

112 Miscellaneous Commands sys uptime: show the time since the system boot up. sys d ate: show the current date and time sys settime: set the current time sys files config backup: backu p configuration files sys files config default: restore facto ry default configuration files sys baud: set console bau d rate net ping: ping remote host l3 route sh[...]

GigaX Series L3 Managed Switch User Guide 113 6 IP Addresses, Network Masks, and Subnet s 6.1 IP Addresses This section pertains only to IP addr esses for IPv4 (version 4 of the Internet Protocol). IPv6 addresses are not covered. This section assumes basic kno wledge of binary numbers, bits, and bytes. For details on this subject, see Appendi x 6. [...]

114 The first part of every IP address contain s the network ID, and the rest of the address contains the host ID. The length of the netw ork ID depends on the network's class (see following sectio n). Table 7 sho ws the struct ure of an IP address. Table 8. IP address structure Field1 Field2 Field3 Field4 Class A Network ID Host ID Class B Ne[...]

GigaX Series L3 Managed Switch User Guide 115 6.1.2 Network classes The three commonly used network classes are A, B, and C. (There is also a class D but it has a special use beyond the scope of this discu ssion.) These classes have different uses and characteristics. Class A net works are the I nternet' s largest net works, each with room f o[...]

116 6.2 Subnet masks A mask looks like a regular IP addr ess, but contains a pattern of bits that tells what parts of an IP address are th e network ID and what parts are the host ID: bits set to 1 mean "this bit is part of the network ID" and bits set to 0 mean "this bit is part of the host ID." Subnet masks are used to define [...]

GigaX Series L3 Managed Switch User Guide 117 The two ext ra bits in Fiel d 4 can have fou r values (00, 01, 10, 11), so there are four subnets . Each subne t uses the rema in ing six bits in field4 for its host IDs, ranging fr om 0 to 6 3. Sometimes a subnet mask does not specify any additional network ID bits, and thus no subnets. Such a mask is [...]

118 7 T roubleshooting This section gives instru ctions for using several IP utilities to diagnose problems. A list of possible probl em s with suggestion action s is also provided. All the known bugs are listed in the release n ote. Read the release note before you set up the switch. Cont act Custome r Supp ort if these suggestions do not resolv e[...]

GigaX Series L3 Managed Switch User Guide 119 Figure 52. Using the ping utility If the target computer cannot be locat ed, you will receive the me ssage “Request timed out.” Using the pi ng comman d, you can t est wh ether the path to the switch is working (using the pre- configured d efault LAN IP address 19 2.168.1. 1) or another ad dres s yo[...]

120 7.1.2 nslookup You can use the nslookup command to determine the IP address associa ted with a n Internet site name . You specify the common name , and the nslookup command looks up the name on your DNS server (usually located with your ISP). If that name is not an ent ry in your ISP’s DNS table, the request is then referred to another higher[...]

GigaX Series L3 Managed Switch User Guide 121 7.2 Replacing defective fans Turn off the power of the switch when you remove the fan module on the rear side of the switch. When any one of the switch fans (located on the rear panel) becomes defective, you ca n easily replace it following these steps. 1. Unlock the fan module by loosening the thumbscr[...]

122 3. Carefully pull the two power cables from the fan con nectors. 4. Loosen the screws that secure the fan to the module. Remove the defective fan. Figure 56. Detaching the fan from the module 5. Fasten the new fan with the screws that you removed earlier. Make sure that the fan cable is near the bottom of the module. Follow the same st eps to r[...]

GigaX Series L3 Managed Switch User Guide 123 7.3 Simple fixes The following tab le lists some co mmon proble ms that you may encounte r when installing or using the switch, and the suggested ac tions to solve the problems . Table 9. Troubleshooting Problem Suggested Action LEDs SYSTEM LED does not light up after the switch is turned on. Verify if [...]

124 Problem Suggested Action Web Configuration Interface You forgot/lost your WEB Configuration Interface user ID or password. 1. If you have not changed the password from the de fault, try using “admin” as the user ID and bypassing password. 2. Login to console mode through R S232 or USB, use “sys user show” to display the lost information[...]

GigaX Series L3 Managed Switch User Guide 125 8 Glossary 10BASE-T A designation for the ty pe of w iring used by Eth ernet netw orks with a data rate of 10 Mbps. Also know n as Category 3 (CAT 3) wiring. See also data rate, Ethernet . 100BASE-T A designation for the ty pe of w iring used by Ethe rnet netw orks with a data rate of 100 Mbps. Al so kn[...]

126 broadcast To send data to all computers on a ne twork. downloa d To transfer data in the downst ream direction, i .e., from the Internet to the user. Ethernet The most commonly installed computer netw ork technology, usually using twisted pair w iring. Ethernet data rates are 10 Mbp s and 100 Mbps. See also 10BASE-T, 100BASE-T, twisted pair . f[...]

GigaX Series L3 Managed Switch User Guide 127 ICMP Inte rnet Control Message Protocol An Internet protocol used to rep ort errors and o ther network-related information. The ping co mmand makes use o f ICMP. IGMP Internet Group Management Protocol An Internet protocol that enables a computer to share information about its membership in multicas t g[...]

128 IP address Internet Protocol address The address of a host (computer) on the Internet, consi sting of four numbers, each from 0 to 2 55, separated by periods, e.g., 209.191.4.240. An IP add ress consists of a network ID tha t identifies the particular network the host belong s to, and a host ID uniquely identifying the host itself on that netw [...]

GigaX Series L3 Managed Switch User Guide 129 Mbps Abbreviation fo r Megabits per second, or one million bits per second. Network data rates ar e often expressed in Mbps. Monitor Also called “ Roving Analysis” , allow you to attach a network analyzer to one port and use it to monito r the traffi cs of other ports on the switch. network A group [...]

130 ping Packet Internet (or Inter-Netw ork) Groper A program used to ve rify w hether the host asso ciated with an IP address is online. It can also be used to reveal the IP address for a given domain name. port A physical access point to a device such as a computer or router, through which data flow s into and out of the device. protocol A set of[...]

GigaX Series L3 Managed Switch User Guide 131 STP Spanning Tree Protocol The bridge protocol to avoid packet looping in a complicate network. subnet A subnet is a portion of a netw ork. The subnet is distinguished from the larger network by a subnet mask which selects some of the computers of the networ k and excludes all others. The subnet's [...]

132 TFTP Trivial File Transfer Protocol A protocol for file transfe rs, TFTP is easier to use than File Transfer Protocol (FTP) but not as capable or secure. Trunk Two or more ports are co mbined as one vi rtual port, also called as Link Aggregation. TTL Time To Live A field in an IP packet tha t limit s the life span of that packet. Originally mea[...]

GigaX Series L3 Managed Switch User Guide 133 Web bro wser A software program that use s Hyper-Text Transfer Protocol (HTTP) to download information from (and upload to) w eb sites, and displays the information, wh ich may consist o f text, graphic images, audio, or video, to the user. Web browsers use Hyper-Text Transfer Protocol (HTTP). Popular w[...]

134 9 Index 100BASE-T, 136 10BASE-T, 136 Administration page, 39 Attach page, 77 Binary numbers, 136 Bits, 136 Boot Rom Command Mode, 90 Boot Rom Commmands, 91 Bridge Commands, 96 Bridge page, 47 Broadcast, 137 CLI Commands, 92 Community Commands, 106 Community Table page, 67 Configuration Manager troubleshooting, 135 Console Interface, 88 CoS Queu[...]

GigaX Series L3 Managed Switch User Guide 135 Host, 137 Host ID, 123 Host Table Commands, 10 7, 109 Host Table page, 68 HTTP, 138 ICMP, 138 IGMP, 138 IGMP Snooping, 138 IGMP Snooping page, 57 Internet, 138 troubleshooting access to, 134 Intranet, 138 IP addresses, 139 explained, 123 IP Setup page, 37 ISP, 139 LAN, 139 LAN IP Address Configuration, [...]

136 recovering, 135 Physical Interface Commands, 95 Physical Interface page, 42 Ping, 128, 141 Port, 141 POST, 89 Power adapter, 23 Power On Self Test, 89 Protocol, 141 Quick Configuration console logging in, 25 Reboot page, 40 Remote, 141 RJ-45, 141 Routing, 142 RPS module, 23 Save Configuration page, 87 Set page, 74 SNMP, 142 SNMP Commands, 106 S[...]

GigaX Series L3 Managed Switch User Guide 137 Trap Setting page, 69 Troubleshooting, 128 Trunk, 143 Trunk Commands, 97 TTL, 143 Twisted pair, 143 Upstream, 144 Username default, 28, 31 WAN, 144 Web browser, 144 Web function layout, 33 Web Interface, 27 Web page, 144 Web site, 144 Web top frame, 33 World Wide Web, 145[...]