Black Box LGB1126A manual

B L A C K B O X ® Managed Gigabit S wit ch An aff ord able m an age d swit ch wi th th e po we r t o be a k ey c omp one nt o f yo ur ne twork i nf ra str uct ur e . Gigabit Managed Switches L GB 1 1 08A L G B 112 6 A L GB 1 1 48A Ord er toll -free in th e U.S . : C all 877-8 77-BB OX (ou tsi de U.S . call 724 -7 4 6 -550 0 ) FREE tech nical s upp[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 72 4 - 7 46 -5 50 0 | blac kbo x.c om T rademark s W e ‘ r e he r e t o h e l p! If y o u h a v e a n y q ue st io n s ab ou t yo u r a p p l ic a t i o n or o ur p r odu c t s, c on tact Bl ac k Bo x T ec h Su pport at 7 2 4 -74 6 - 5 5 0 0 or go t o blackbox.com a nd c lic k on “T a l k t o Bl ack[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 3 F CC St at e m e n t Feder al Com mun icat ions Co mmissi on and Ind ustr y Canada Rad io Freq uenc y Int er fer ence S tatements This e quipmen t generates, uses, and c an radiate radio -frequency energy , and if not installed and used properly , that is, in stric [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om NOM Statemen t Instrucc iones de Seguri dad ( Normas Ofic ia les Mexican as E lec tr ical Sa fety Statemen t) 1 . T odas las instrucciones de seguridad y op eración deb erán ser leídas antes de que el apara to elé ctrico sea operado. 2 . L as instrucciones de se[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 5 T able of Co ntent s T able of C ont ents 1 . Over view ............................................................................................................................................................................... 9 1 . 1 Initial C onfiguration ...[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 6 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapte r 1: Over view 3 .4 Sp anning T re e ............................................................................................................................................................... 63 3.4. 1 Bridg e Set tings ..................................[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 7 Chapte r 1: Over view 3 .13 G V R P ......................................................................................................................................................................... 12 9 3. 1 3. 1 C onfigurat ion .............................[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 8 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapte r 1: Over view 4.6 A A A ........................................................................................................................................................................... 18 6 4.6. 1 C onfigu ration ..................................[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 9 Chapte r 1: Over view 1 O ver view This us er’ s manual provides s tep- by-step instructions for configuring and monitori ng your Gigabit Managed Swit ch through the Web via an R J - 45 (serial) interface and Ethernet por t. Detailed explanations of hardware and s[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 0 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapte r 1: Over view 1 . 1 In it i al Co n fi gu r a t i o n This s ec tion details how to confi gure and manage the Gigabit Managed Swit ch through the Web user inte r fac e. This feat ure enables administrators to easily access and mo nit or the enti re status [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 1 Chapte r 1: Over view The log i n pr oces s no w is c om ple ted . In th is log in me nu , yo u mu st in pu t the com plet e use rna me and pa sswo rd re sp ecti ve ly: the Gigabit Managed Switch will not give you a shor tcut to username autom atically . This may [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 2 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on Figure 1 - 2 . Acc essing the on -line help func tion. L G B 110 8 A[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 3 Cha pter 2 : System Con fi gur ati on Con nec ti ng Networ k Dev ic es The sw itch is designed to be connec ted to 1 0 - , 1 0 0 -, or 1 0 0 0 - Mb ps net work cards in P Cs and ser vers, as well as to other switch - es and hubs. It may also be connec ted to remot[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on 1 .3 Net work Wiring Connec ti ons T oday , the punchdown block is an int egral par t of man y of the newer equipment racks. It is ac tually par t of the patch panel. Instruc tions for making connections in the w iring closet [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 5 Cha pter 2 : System Con fi gur ati on 2. System Confi gur ation This chapter d escribes all of the basic configration task s, incl uding the sy stem inf o rmation and any management of the switch (e . g. , Tim e , Ac co un t, IP , S ys log , and SNMP). 2. 1 System[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 6 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on • Contact : Ent er the contac t person’ s name and phone here . Y ou can configur e this parameter through the device’ s user inter - fac e or SN MP . • Device N ame : The name of the s witch. User -d efined. • Sys t[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 7 Cha pter 2 : System Con fi gur ati on 2. 1 . 2 Configuration Y ou c an identif y the s ys tem by config uring the contact informat ion, name, and location of the switch. Web Inter fa ce T o confi gure System Informa tion in the Web int er fac e: 1 . C lick System [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 8 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on 2. 1 . 3 CPU Load This pag e displa ys the C PU load, using an SVG graph. T he load is m easur ed as aver aged over the last 1 00 -ms, 1-second, and 1 0 -second intervals. The last 1 20 samples are graphed, and the last number[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 9 Cha pter 2 : System Con fi gur ati on 2.2 Time This s ec tion describes how to configure the switch time , includ ing T ime Confi guration and NT P Confi guration . 2.2. 1 Manu al The sw itch provides manu al and automatic ways to s et the s ystem time via N TP . [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 20 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on • Daylight Saving s Time Se t Of f se t : Dayligh t savings time is used in some count ries. If you selec t this set ting, the unit will adjust the time, for ward or back ward in incremen ts of one hour , b etween the st ar t[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 2 1 Cha pter 2 : System Con fi gur ati on 2.2 .2 NT P NTP is Netwo rk Tim e Pr ot oc ol and is use d t o sync th e ne twor k tim e ba sed Gr een wi ch Mea n Ti me (GMT). If you use th e NTP mode and selec t a built - in NTP time ser ver or manual ly specif y an user-d[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 22 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on 2.3. 1 Users Th is pag e pr ovi des an ov ervie w o f th e c ur re nt u ser s. C u rr en tly the on ly wa y t o log in as an oth er use r on th e W eb serve r i s to cl ose and reopen the brow ser . Web Inter fa ce T o confi gu[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 23 Cha pter 2 : System Con fi gur ati on 2.3. 2 Priv ilege Levels This s ec tion provides an over view of Privilege Levels. The switch enables administrat ors to set user privileges in a number of different categories, includi ng Acc ount, Aggregation , Diagnostics, E[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on Par ameter Descript ion • Group Name The name identify ing the privilege group. In mos t c ases, a privilege level group consists of a single module (e.g . L AC P , R ST P or QoS) , but a few of them contain mo re than one. [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 2 5 Cha pter 2 : System Con fi gur ati on 2.4 IP ( Intern et Prot ocol) IP is an acr on ym f or In te rne t Pr o to c ol . It is a pro toc ol us ed fo r c om mu nic at i ng da ta ac ross an In te rn et netw or k. IP is a " bes t effor t " sys tem, which means[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 6 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on Par ameter Descript ion • DHCP Client : Enable the D HC P clien t by checking this box. If DHCP fails and the confi gured I P address is zero, DHCP will retry . If DHCP fails and the configured IP addres s is non - zero , DH[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 7 Cha pter 2 : System Con fi gur ati on 2.4.2 IPV 6 This s ec tion describes how to configure the switch- managed I P v6 inform ation. T he Confi gured column is used to view or change the IP v 6 configura tion. A nd the Cu rrent column is used to show the ac tive I[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 28 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on 2.5 Sys log The S ys log (syst em log) i s a sta nda rd f or l ogg ing pr og ra m messa ges . It al lo ws sepa rat ion o f th e softwa re th at gen era tes mes sag es fr om the syste m tha t sto re s the m an d the so ft wa r e[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 9 Cha pter 2 : System Con fi gur ati on 2. 5.2 L og This s ec tion describes how to display the System Log Informat ion for the s witch . Web Inter fa ce T o displa y the log confi guration in the Web interface: 1 . C lick Syslog, Lo g. 2 . Display the log inform at[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 30 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on 2.5. 3 Det ailed Log This s ec tion describes how to use the Detailed Log I nf ormation for the switch. Web Inter fa ce T o displa y the detailed log config uration in the Web interface: 1 . C lick Syslog, D etailed L og. 2 . D[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pag e 3 1 Cha pter 2 : System Con fi gur ati on 2.6 SNMP Any N et work M anagement System ( NMS) running the Simple N et work M anagement Protocol ( SNMP ) can manage the managed de vic es eq u ip ped wit h SNMP age nt, pr ov id ed t ha t the Man agem ent In f orm ati on Ba[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 3 2 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on 2.6 .2 Co mmunities This func tion is used to configu re S NMP v 3 commu nities. The C ommunity and User Name are unique. T o create a new commun ity acc ount, check < Add new commun it y> but ton, and ent er the acc oun[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 3 3 Cha pter 2 : System Con fi gur ati on 2.6.3 Users The function is used to configure SNM P v 3 users. The Entry index key is UserName. T o create a new User Name acco unt, check the < Add new user > but ton , ent er the user information , and then check <S [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 34 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on • Authent ic ati on Pass word : A str ing ide n ti fyi ng the au th en tic at io n pa ssw or d ph ra se . For MD 5 aut hen tica tion pr ot oc ol , the string l ength should be 8 to 32 A SCII characters from 33 to 1 26. For SH[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pag e 3 5 Cha pter 2 : System Con fi gur ati on 2.6. 4 Groups This func tion is used to configu re S NMP v 3 group . T he Ent r y index k eys are S ecurity M odel and Security N ame . T o creat e a new group accoun t, please check < Add new group> but ton, and ent er [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 36 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 2 : System Con fi gur ati on 2.6 .5 View s This func tion is used to configu re S NMP v 3 view . T he entr y index keys are OI D Subtr ee and View Name. T o create a new view acc ount, click the < Add new view > but ton , and enter the vi ew informat[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 3 7 Chapter 3 : Co nfigur ation 2.6 .6 Acces s This func tion is used to configu re S NMP v 3 acc ess. The entr y index ke ys are Group Name, S ecurity M odel and S ecurity level. T o cr eat e a new ac c ess ac c ou n t, che ck <Add ne w ac ce ss> b utt on , an d[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 38 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation • Read View Name : The name of the M IB v iew d efinin g the MI B objec ts for which this request may reques t the current values. The str in g len gt h sh oul d be 1 to 32 ch ar act ers , us in g ASC II ch ar acte rs fr om 3 3 to 1 26[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 3 9 Chapter 3 : Co nfigur ation • UDP Por t : T o a ss i g n po rt n u m be r . De f a u lt : 1 6 2 • Communit y / Se curit y Name : The length of “C ommunity / Securit y N ame ” s tring is restric ted to 1–3 2. • Se curit y Leve l : Indicates what kind of[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 4 0 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. Configu rat ion This chapter d escribes all the basic net work configura tion tasks, which include the Por t s, Layer 2 network protocol ( e. g. VL ANs, QoS, I GMP , AC L s and Po E etc.) , and any setting of the s witch. 3. 1 Por t [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 4 1 Chapter 3 : Co nfigur ation Par ameter Descript ion • Por t : This is the logical por t number for this row . • Link : The current link state is displayed graphically . Green indicates the lin k is up and red that it is down. • Current Link Spe ed : Provides[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 42 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 . 2 Por t De scription Th is secti on desc ribe s ho w to c on fig ure the port’ s al ia s and an y desc ri pti on s fo r th e Po rt Iden tity . It pr omp ts th e us er to cr ea te an alphan umeric s tring des cribing the full nam[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 4 3 Chapter 3 : Co nfigur ation 3. 1 . 3 T raffic O ver view Th i s se cti on des cr ib es t h e po rt s ta t i st ic s i n fo rm at io n a nd pr o vi de s a n o ve rvi e w o f ge ne r a l t r a ffi c s ta ti st ics f o r a l l sw it c h p orts . Web Inter fa ce T o D[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 4 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 .4 Detail ed S tat isti cs Th is secti on desc ribe s ho w to fi nd de ta il ed tr aff ic stat isti c s f or a spe ci fi c swit ch port . Use th e port sele ct bo x t o sel ect whi ch switch por t details to display . The display e[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pag e 4 5 Chapter 3 : Co nfigur ation Receive and T ransmit Size Cou nters : The n um ber o f (goo d an d bad) pa ck ets spl it i nt o cat egor ies th at h av e been rec eiv ed an d trans mitted based on their respec tive frame siz es. Receive and T ransmit Q ueue Counte rs[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 4 6 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 .5 Qos Sta tis tic s This s ec tion describes how the switch displa ys the QoS detailed Queuing Co unters for a specific switch por t for the different q u e u es f o r a l l sw it ch po rts. Web Inter fa ce T o Display the Queuein[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 4 7 Chapter 3 : Co nfigur ation 3. 1 .6 SFP I nformation This s ec tion describes the SFP module detail inf ormation , includ ing connec tor t yp e, fiber t ype, wavelength, baud rate, and vendor OU I , etc. Web Inter fa ce T o displa y the SFP information in the Web [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 4 8 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation L G B 110 8 A 3. 1 .7 EEE This s ec tion enables the user to inspect and config ure the current EEE por t s ettings. E EE is a pow er sav ing opt ion th at r ed uc es th e po we r usag e wh en the r e is ve ry low tr aff ic uti li za ti[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 4 9 Chapter 3 : Co nfigur ation L G B 110 8 A Par ameter Descript ion EEE Po r t C onf igura tion : The EEE p or t settings relat e to the currently selec ted item, as shown in the page header . • Por t : The sw itc h por t number of the logical EEE por t. • EEE E[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 50 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation L G B 110 8 A 3 . 2 AC L The Gigabit Managed Switch access contr ol list ( AC L) is probably the most commonly used objec t in the I OS. It is used not only for packet filterin g but also for selec ting t y pes of traf fic to be analyzed[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 5 1 Chapter 3 : Co nfigur ation L G B 110 8 A • Por t Copy : Selec t which p or t fra mes are copied on. The values permitted are “Disabled “ or a specific por t number . The default value is “Disabled. “ • Mirror : Spe cify the mirror op eration of this p[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 52 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation L G B 110 8 A 3. 2. 2 R ate Limite rs This s ec tion describes how to configure the switch’ s AC L Rate Limiter parameters. T he Rate Limiter L evels from 1 to 1 6 permit the user to set rate limiter value and units with pps or kbps. W[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pag e 5 3 Chapter 3 : Co nfigur ation L G B 110 8 A 3.2 .3 A cc ess Co n t r o l Li st This s ec tion describes how to configure Access Con trol L ist rule . An Access Con trol L ist (AC L ) is a sequential list of permit or deny condition s that apply to IP addresses, M AC[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 5 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation L G B 110 8 A Par ameter Descript ion • Ingress Por t : Indicates the ingress por t of the AC E. Pos sible values are: - Any: T he AC E will match any ingress por t. - P ol icy : Th e A C E w il l m a t ch in gr es s p o rts wi t h a [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 5 5 Chapter 3 : Co nfigur ation L G B 110 8 A • But to ns : - Save: Clic k to s ave changes. - R es e t: C li ck t o u n d o a n y c ha ng es ma de lo ca ll y a nd re ve rt t o p r e vi ou s ly sa ve d v al ue s. - Cancel: C lick to cancel changes. • Auto - refre [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 56 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation L G B 110 8 A - Permit: Frames matc hing the AC E may be forwarded and learned. - D eny: Frames matc hing the AC E are dropped. • Rate Limite r : Indicates the rate limiter number of the AC E. The range is 1 to 1 6. When Disabled is di[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pag e 5 7 Chapter 3 : Co nfigur ation L G B 110 8 A 3. 3 Aggre gation The Aggregation is used to configure the set tings of Link Aggregation. Y ou can bundle more than one por t with the s ame speed, full-duplex and the same MAC to be a single lo gical por t, thus the logic[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 58 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation L G B 110 8 A Pa rame ter Descr ipti on Hash Code Contri butors • Source MAC Addre ss : The Source MAC address can be used to c alcula te the des tination por t for the frame. Check to enable the use of the Source M AC address or unche[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 5 9 Chapter 3 : Co nfigur ation L G B 110 8 A 3.3. 2 L A CP Por ts using L ink Aggregation Con trol P rot ocol (accor ding to IEEE 8 02 .3ad specification ) as their trunking method can choose their u n iq ue LA C P G r ou pID t o f or m a lo g i c “ tr un k ed po rt[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 60 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation L G B 110 8 A • Key : The K ey va lue inc urr ed by the port, ra ng e 1 - 6 5 53 5. The A ut o setti ng wi ll se t th e ke y as ap pr opri at e by th e ph ysi cal li nk speed, 1 0 Mb = 1 , 1 0 0 Mb = 2, 1 Gb = 3. Using the Sp ecific s [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 6 1 Chapter 3 : Co nfigur ation L G B 110 8 A Po r t St atu s When you set the L AC P function on the s witch , a Por t Status over view for all L AC P inst ances is enabled. Web Inter fa ce T o displa y the L AC P Por t Statu s in the Web inte r fac e: 1 . C l ic k C[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 62 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation L G B 110 8 A Por t Stati s tic s When you complete the L AC P func tion on the s witch, a Por t S tatistics over view for all L AC P instances is enabled. Web Inter fa ce T o displa y the L AC P Por t st atus in the Web interface: 2 . T[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 63 Chapter 3 : Co nfigur ation L G B 110 8 A 3.4 Spann ing T ree The Spanning T ree Protoc ol (S TP ) can be used to d etect and disable network lo ops, and to provide backup links bet ween swi t ch es , br id ge s, or ro ute rs. Thi s al lo ws th e swit ch to in ter [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 6 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation L G B 110 8 A 3.4 . 1 Bridg e Set ting s This s ec tion describes how to configure the Spanni ng T ree Bridg e and S TP System s ettings. It allows you to config ure S TP System settings that are used by all ST P Bridge instances in the[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pag e 6 5 Chapter 3 : Co nfigur ation L G B 110 8 A Adva nce d S et tings • Edge Por t BPDU Filtering : C ontrol whether a por t explicitly configured as Edge will transmit and receive BPD Us. • Edge Por t BPDU Guard : Con trol whether a por t explicitly configu red as [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 66 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation L G B 110 8 A Pa rame ter Descr ipti on Configurat ion I dentification • Configurat ion Name : T he name identif ying the V L A N to MS TI mapping. Bridge s must share the name and revision (s ee bel ow), as wel l as th e VL AN-t o-MST[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 6 7 Chapter 3 : Co nfigur ation L G B 110 8 A Par ameter Descript ion • MST I : The bridge instance. The CIST is the d efa ult instance, always ac tive . • Pr io ri ty: C on tr ol s the bri dg e pr io ri ty . Lo we r n um er ic va l ues ha ve be tte r pri or ity .[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 68 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation L G B 110 8 A • Priori t y : C o n t r o l s t h e po rt p ri or i ty . Th is ca n b e u se d t o c o n tr ol pr io r i ty o f p ort s h av in g i de n ti ca l p ort c o st . ( Se e 3 .4 .3 MST I Pr ior iti es). • op er E dge (sta t [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 6 9 Chapter 3 : Co nfigur ation L G B 110 8 A 3.4 .5 MS TI Por ts This s ec tion enables the user to inspect or adjust the curren t STP MS TI por t configur ation. A n MS TI p or t is a vir tual por t, which is re pr esen ted sep ar at el y f or eac h activ e CI ST (p[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 7 0 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation • Priori t y : C o n t r o l s t h e po rt p ri or i ty . Th is ca n b e u se d t o c o n tr ol pr io r i ty o f p ort s h av in g i de n ti ca l p ort c o st . ( Se e 3 .4 .3 MST I Pr ior iti es). • But to ns : - S ave: C lick to s[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 7 1 Chapter 3 : Co nfigur ation 3.4 .7 Por t Statu s After you complete the S TP configur ation, configu re the s witch display for the STP Por t Status. This sec tion enables you to displa y the STP CIST por t st atus for physical por t s of the currently sele cted s [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 72 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3.4. 8 Por t Stat istics After you complete the S TP configur ation, configu re the s witch to displa y the STP Statistics. This sec tion enables you to adjust the ST P Statistics det ail count ers of bridge por t s in the currently sele[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pag e 7 3 Chapter 3 : Co nfigur ation 3.5 IGMP Snoop ing This func tion is used to est ablish the multicast groups to forward the multicast packet to the member por ts, and, in do ing so, avoids wasting the bandwidth while I P multicast pack et s are running over the net wo[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 7 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Par ameter Descript ion • Snoopin g Enable d : Enable the Global IGMP Sno oping. • Unregis tered I PMCv4 Flooding Enable d : En able unregiste red IPM C v4 traffic flooding. • IGMP SS M Ra nge : SSM ( Source-S pecific Multicast) R[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 7 5 Chapter 3 : Co nfigur ation Par ameter Descript ion • VL A N ID : It displays the V L A N ID of the entry . • Snoopin g Enable d : Enable the per -VL A N IGM P Sno oping. Only up to 32 VL ANs can be selec ted. • IGMP Querier : Sends IG MP Quer y mess ages ont[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 7 6 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Web Inter fa ce T o confi gure the IGM P Snooping Por t Group C onfigur ation in the Web interface: 1 . C lick Con figur ation, IGM P Snooping, Por t Group Filte ring 2. Click Add ne w Filtering Group 3. Scroll the Por t to enable the P[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 7 7 Chapter 3 : Co nfigur ation 3.5.4 Sta tus After completi ng the I GMP Snooping configur ation, the switch will display the IGM P Snooping S tatus. T his se ction enables you to view the IGMP Snoo ping det ail st atus. Web Inter fa ce T o displa y the IGMP Snooping[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 78 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3.5.5 Group Information A fte r se tti ng th e IGMP Sn oop in g fu ncti on, yo u ca n vie w the IGMP S noo pi ng Gr oup Inf orm ati on . En trie s i n th e IGM P Gr oup T ab le are shown on this page. The IG MP Group T able is sor ted fi[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pag e 7 9 Chapter 3 : Co nfigur ation 3.5.6 I P v4 SSM information Source Specific Multicast ( SSM ) is a datagram d elivery mod el that bes t suppor t s one -to- man y applications, also known as broadcast applications. SSM is a core net work technology of I P multicast ta[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 8 0 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation • Mode : Indicates the filtering mod e maintained p er ( VL AN ID, por t number , Group Address) basis. It can be either I nclude or E xc lu d e. • Source Addres s : The IP Ad dr ess o f th e so ur ce . C urr en tly , syste m lim it[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 8 1 Chapter 3 : Co nfigur ation 3.6 MLD Snoop ing C uriously enough, a net work no de that ac t s as a source of I P v6 multicast traffic is only an indirect par ticipant in ML D snooping — it just provides multicast traffic, and MLD d oesn’t inte ract with it. ( [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 82 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Figure 3-3 3. T he MLD Snoo ping Basic C onfigur ation screen. Par ameter Descript ion • Snoopin g Enable d : Enables the Global ML D Snooping. • Unregis tered I PMCv6 Flooding Enabled : En able un reg is te red IPMC v6 tra ffic floo[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 8 3 Chapter 3 : Co nfigur ation 3.6. 2 V L A N C onfiguration When ML D snooping is enabled on a VL AN, the sw itch ac ts to mini mize unnecessar y multicast traffic. If the switch receives multicast traffic destined for a given multicast address, it forwards that tra[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 8 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation • Icons , upp er right of scree n ( Refres h, << , > > ) : Clic k “Re fresh “ to refresh the IG MP Group Status manual ly; click the arrows to navigaat e to the nex t page or entr y . • But to ns : - S ave: C lick to[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 85 Chapter 3 : Co nfigur ation 3.6.4 Stat us This s ec tion describes how to display the M LD Snooping Stat us. Web Inter fa ce T o displa y the MLD Snoo ping Status in the Web interface: 1 . C lick Con figur ation, M LD Snooping, Status 2 . If you want to auto -refre[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 86 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3.6.5 Group Information This s ec tion describes how to s et M LD Snooping Groups I nf ormation. The “S tar t from V L A N“ , and “ group “ input fields allow the user to sele ct the st arting point in the M LD Group T able. Each[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 8 7 Chapter 3 : Co nfigur ation 3.6.6 IP v 6 SSM Information This s ec tion describes how to configure the entries in the ML Dv 2 Information T able. T he M LD v 2 Informat ion T able is sor ted firs t by VL AN ID , the n by gr oup , an d the n by Po rt No. Diff ere n[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 8 8 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 7 MV R The MVR f ea t ur e ena bles mu lt icast tr affic fo r wa rd ing on th e Mul ti cast VL AN. In a mu lti cas t te levi sio n ap pl icat ion , a PC or a television with a set-t op box c an receive the multicast stream. Multiple [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 89 Chapter 3 : Co nfigur ation 3.7 . 2 Group s Information Th is secti on desc ribe s ho w to d is pl ay th e MVR Gr ou ps deta il i nf orm ati on on th e swit ch . En tri es in t he MVR Gr ou p T able ar e shown on this page. T he MV R Group T able is so rted firs t [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 9 0 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3.7 .3 St ati sti c s This s ec tion describes the sw itc h will display the M VR detail st atistics after you had configured MV R on the switch. It provides the detail M VR st atistics inf ormation. Web Inter fa ce T o displa y the MVR[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 9 1 Chapter 3 : Co nfigur ation 3.8 LLDP The sw itch suppor ts the L LDP . For current informa tion on your s witch mod el, the Link Layer Discove r y Protocol ( L LDP ) provides a standards-based method for enablin g switches to adver tise themselves to adjacent devi[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 9 2 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation • T x Delay: If some configur ation is changed ( e. g. the I P address) a new LL DP frame is trans mitted, but the time bet ween the LL DP frames will always be at leas t the value of T x D elay seconds. T x Delay cannot be larger tha[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 9 3 Chapter 3 : Co nfigur ation 3. 8. 2 LL DP Neighb or s This pag e provides a s tatus over view for all LL DP neighbors. The displayed t able con tains a row for each p ort on w hich an LL DP neighbor is detec ted. The column s hold the following inf ormation: Web I[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 9 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation • Sys tem D es cription : System D escription is the por t description adver tised by the neighbor unit. • Mana gement Address : Ma nage men t Add re ss i s th e nei gh bo r un it’ s add re ss t ha t is u sed fo r h ig he r lay er[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 95 Chapter 3 : Co nfigur ation Figure 3- 44. T he LLD P- MED C onfigu ration screen. Figure 3- 4 5 The LL DP- MED C onfigur ation Po licies screen . Parameter De scription Fast s tar t re peat count The Rapid star tup and Emergency Cal l Ser vice Location Id entificat[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 9 6 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Parameter De scription : Co ordinates Loc ation • Lat it ude: Lat itu de sho u ld be nor mal iz ed to wit hi n 0 -90 deg rees wit h a m axi mu m of 4 dig its. It is po ss ib le to spec ify the direction to either nor th of the equat o[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 9 7 Chapter 3 : Co nfigur ation • Apar tme nt : Unit (A partment, suite) - E xample : Apt 42 . • Flo or : Floor - E xample : 4. • Roo m no. : Room number - Example : 450F . • Place t yp e : Place t ype - E xample: O f fice . • Pos tal communit y name : E x am[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 98 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation • App l ica tio n T ype: In te nded use of the app lica tio n types: 1 . Voice - for use by dedicated IP telephony handsets and similar appliances suppor ting interactive voice ser vices. Thes e devices are t ypic ally deployed on a se[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 99 Chapter 3 : Co nfigur ation 3. 8. 4 LLDP - MED Neighb or s This s ec tion provides a s tatus over view of all L LDP- M ED neighbor s. The table contains a row for each p or t on which an LL DP ne ig hbor is det ect ed . Th is fu nctio n ap pl ies t o V oIP dev ic e[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 0 0 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation • LLDP - MED Gene ric Endpoint ( Class I ) : The LL DP- MED Generic Endpoint ( C lass I ) definition is applicable to all endpoint pr odu cts th at req uir e the bas e LLDP di sc ove r y servic es de fi ned i n TIA- 1 0 5 7 , how ev[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 0 1 Chapter 3 : Co nfigur ation 7 . Stre aming Vid eo - for use by broadcast or multicast-based video conten t distribution and other similar applications suppor ting streaming video s er vices that requir e specific net work p olicy treatment. Vid eo applications r[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 0 2 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 8 .5 EEE By u s i n g E EE , po w e r s av in gs ca n b e a c h i e v e d a t t h e e xp e n se o f t r aff ic la t e n cy . Th is la te ncy oc c u rs be ca u se E E E c ir cu i ts tu rn off t o save p ower , and they n eed time to[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 0 3 Chapter 3 : Co nfigur ation 3.8 .6 Por t Statistics T wo t ypes of coun ters are shown. Global coun ters are counters that refer to the who le s witch, while local count ers refer to per -por t counte rs for the currently s elec ted s witch. Web Inter fa ce T o [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 04 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation • Frames Disc arded : If an L LDP frame is received on a p or t, and the s witch ’s intern al table has run full , the LLD P frame is coun t - ed and di sca rded . Thi s s it uat ion i s kn ow n as “T o o Ma n y Nei gh bors “ i[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 0 5 Chapter 3 : Co nfigur ation 3.9 F ilt eri ng Da ta Base The Filterin g Data Base Con figura tion function gathers many functions, includ ing M AC T able Informa tion, Static M AC Learning, which c annot be categorized to some function t yp e. M A C Ta b l e The [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 06 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Figure 3- 49: The M AC Address T able Confi guration screen. Par ameter Descript ion • Ag ing C on fi gu ra ti on: By def au lt, dy na mic en tr ie s ar e rem ov ed fr om th e MA C tabl e a fte r 300 sec ond s. Thi s rem ov al i s al[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pag e 1 0 7 Chapter 3 : Co nfigur ation Static MAC T able Configuration The st atic entries in the M AC table are shown in this table. T he static MAC t able can contain 6 4 entries. The MAC table is sor ted fir st by V L A N ID and then by MAC address. • Dele te : Check [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 08 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3.9.2 D ynamic MAC T able En tries in the M AC T able are shown on this page. The M A C T able contains up to 8 1 92 entries and is sor ted first by VL AN ID then by M AC address. Web Inter fa ce T o Display MAC Address T able in the W[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 09 Chapter 3 : Co nfigur ation 3. 1 0 VL AN Th is secti on desc ribe s ho w to a ssi gn a sp eci fic VL AN fo r ma nag em en t pur po se . The m an agem en t VL AN is u sed to esta bl ish an IP connection to the s witch from a works tation connected to a por t in th[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 1 0 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3 .1 0 .1 V L A N M e m b e r s h i p The VL AN mem bersh ip c on fig ur at io n f or the sel ecte d swi t ch can be mo ni t or ed an d mod ifi ed h er e . Up to 4094 VL ANs ar e supported. This page allows for adding and d eleting V [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 1 1 Chapter 3 : Co nfigur ation 3. 1 0.2 Por ts User can confi gure all paramet ers to each p ort in V L A N Port S etting. T hese parameters involved t wo par t s, I ngress rule and Egress r u l e . T he f un cti on of Po rt T ype , In g r ess Fi l t er in g, Fr a [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 1 2 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation T able 3- 1: Port T yp es. Por t Type Ing re ss Ac t ion Egre ss Ac tion Unaware : T he func tio n of Un aware can be used fo r 802. 1 QinQ (d oubl e tag ) . Whe n the po r t recei ved unt agge d frame s, an unta gge d frame o btains [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 1 3 Chapter 3 : Co nfigur ation 3. 1 0 .3 Switch Status The fu nctio n S wi t ch S ta tu s gat hers the in for mat ion o f al l VL AN stat us an d repo r ts it b y th e orde r of S tat ic NAS MVRP MVP V oic e VL AN MST P GV RP C ombined. Web Inter fa ce T o Display [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 1 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 0 .4 Por t Statu s This func tion, Por t Statu s, gathers the information of all V L A N status and repor t s it by the order of S tatic NA S MV RP M VP Voic e VL AN MST P GV RP C ombined. Web Inter fa ce T o Display VL AN Por t [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 1 5 Chapter 3 : Co nfigur ation 3. 1 0 .5 Private V L A Ns In a private V L A N, commu nication betwe en p or ts is not permitted. A VL AN can be config ured as a private V L A N. A ssigning M embe rs hip in Private VL ANs The Private V L A N membership configu rati[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 1 6 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Port Isolation Por t Isolation provides for an apparat us and method to isolate por t s on Layer 2 switches on the same VL AN to res trict traffic flow . The apparatu s comprises a s witch having s aid plurality of p or ts, each por t[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 1 7 Chapter 3 : Co nfigur ation 3. 1 0 .6 MAC-Bas ed VL AN MAC address -based V L A N decides the V L A N for for wardi ng an untagged frame based on the sourc e MAC addres s of the frame . A most common way of groupin g VL AN members is by por t, hence the name por[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 1 8 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Par ameter Descript ion • Dele te : T o d elete a MAC - based VL AN entry , che ck this box and press Save. The entr y will b e deleted on the sele cted s witch . • MAC Ad dres s : Indicates the M AC address. • VL A N ID : Indic[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 1 9 Chapter 3 : Co nfigur ation Sta tu s Th is secti on sho ws MA C -ba sed VL AN en tri es c onf ig ure d b y v ar io us MA C -ba sed VL AN u sers . C urr en tly we s up po rt fo ll owi ng VL AN User t ypes: N A S : NA S provides por t-based authen tication, which [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 20 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 0.7 Protocol-Base d V L AN This s ec tion describes Protocol-based V L A N. The s witch suppor t s prot ocol incl uding Ethernet L L C SNA P Prot ocol. L LC The Logical Link C ontrol ( L L C) data communications prot ocol layer is[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 2 1 Chapter 3 : Co nfigur ation Par ameter Descript ion • Dele te : T o d elete a Protocol to Group Name map entr y , check this box. The entr y w ill be deleted on the sw itc h during the nex t S av e. • F r a m e Ty p e : Frame T y pe can have one of the follo[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 22 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Group to VL A N This s ec tion has instruc tions on how to map an already- confi gured Group Name to a V L A N for the sele cted s witch . Web Inter fa ce T o Display Group N ame to V L A N mapping table configur ed in the Web interfac[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 23 Chapter 3 : Co nfigur ation 3. 1 1 V oic e VL AN V oice V L A N is V L AN configured spe cial ly for voice traffic. B y ad ding the por t s with voice devices att ached to voice VL AN, we can per form Q oS-related configura tion for voice data, ensuring the transm[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 2 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Par ameter Descript ion • Mode : Indicates the Voice VL AN mode op eration . Disable the MSTP feature before enabling Voice VL AN to avoid the confl ict of ingress filterin g. Po ssible m odes are: Enabled : Ena ble V oice V L A N m[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 2 5 Chapter 3 : Co nfigur ation 3. 1 1 .2 O UI Th is secti on desc ribe s ho w to C on fig ur e the VOIC E VL AN OUI ta bl e . The ma xi mu m ent r y nu mber is 1 6. Mod ifyin g th e OUI tabl e wi l l r est art au to de te cti on of OUI pr oc es s . Web Inter fa ce T[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 26 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 2 GARP The Generic Attribute Registration P rot ocol (GA RP ) provides a generic framework in which devices in a bridged L AN, e. g. end stations and s witches, c an register and de -register at tribute values, such as VL AN Ident[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 2 7 Chapter 3 : Co nfigur ation • Timer Va lues : T o set the GARP joi n ti mer , lea ve ti mer , and lea ve a ll ti me rs, the un it is mi cr osec on ds (ms). T hree dif feren t timers can be configu red o n this page : - J oin T imer: T he defau lt value for J o[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 28 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 2 . 2 St atis ti c s This s ec tion describes the por t st atistics of G ARP for all s witch por t s. The por t st atistics relate to the currently sele cted unit, as shown in the page header . Web Inter fa ce T o displa y GARP Po[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 2 9 Chapter 3 : Co nfigur ation 3. 1 3 GVRP GVRP is an application bas ed on Generic Attribute Registration Protocol ( GAR P) , mainly used to autom atically and dynamically main tain the group membership inf ormation of the VL ANs. T he GV RP offers the function pr[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 30 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 1 . GVRP Mode T his configur ation is to enable / disable GV RP Mode on par ticular por t loc ally . - Dis able: Sele ct to disable GVRP M ode on this p ort. - Enable: Sele ct to enable GV RP Mod e on this por t. T he defau lt value of[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 3 1 Chapter 3 : Co nfigur ation 3. 1 3. 2 Stat istics The sec tion describe s the basic GVR P Por t s tatistics for all s witch por t s. The st atistics relate to the currently sele cted unit, as shown in the page header . Web Inter fa ce T o displa y GVRP Por t st [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 32 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 4 QoS The swit ch s up po rts fo ur QoS qu eu es per po rt, wi th str ict or we ig ht ed f air qu eu ing sch edu li ng . It s up ports QoS C ont rol Lists ( QCL) for advance programmable QoS classification , based on IEEE 8 02 . 1[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 3 3 Chapter 3 : Co nfigur ation • DP level : Con trols the default DP level, i.e ., the DP level for frames not classified in any other way . • PCP : C ontrols the d efa ult P C P for untagged frames. • DEI : C ontrols the defaul t DEI for untagged frames. •[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 34 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 4.2 Por t Polic ing Th i s se cti on pr ov id e s a n o v e rvi ew of Qo S I ng re ss P ort Po li c e rs fo r a l l s wi t ch po rts . B ec au se vo ic e a nd vi deo us u a ll y m ai n ta in a steady rate of traffic, Por t Policin[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 3 5 Chapter 3 : Co nfigur ation 3. 1 4. 3 Por t S ched uler This s ec tion provides an over view of QoS Egress Por t Schedulers for all switch por ts . and the por t s belong to the currently selec ted unit, as st ated in the screen header . Web Inter fa ce T o disp[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 36 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Sel ec ting “ Weighte d“ mod e will di splay thi s scre en inste ad of that sh own in Figure 3 - 65. Figure 3- 7 1 . The Q oS Egress Por t S cheduler front screen in Weigh ted m ode. Par ameter Descript ion • Por t : The logical [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pag e 1 3 7 Chapter 3 : Co nfigur ation 3. 1 4. 4 Por t Shapin g This s ec tion provides an over view of QoS Egress Por t Shapin g for all switch por ts. O thers the user could get all detail information ot the por t s belong to the currently sel ected unit, as shown in the[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 38 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Sel ec ti ng “We ight ed“ mo de wil l disp lay th is sc reen ins tead o f that s how n in Fig ure 3 - 65. Figure 3- 73 . The QoS Egr ess Por t Shapers screen, Weighted mode. Par ameter Descript ion • Por t : The logical por t for[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 39 Chapter 3 : Co nfigur ation 3. 1 4. 5 Por t T ag Remarking This s ec tion provides an over view of QoS Egress Por t T ag Remarking for all s witch por t s. Other s the p or ts belong to the curren tly selec ted unit, as shown in the s creen header . Web Inter fa c[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 40 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 4 .6 Por t DSC P The secti on desc ribe s ho w to se t the QoS Port D SC P c on fig ura tio n , en abl in g you to co n fi gu re th e bas ic QoS Po rt DS C P C onfiguration set tings for all s witch por t s. Other s the s ettings [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 4 1 Chapter 3 : Co nfigur ation • E gr ess : Por t Egress Rewriting can be one of these paramet ers : - Dis able: N o Egr ess rewrite. - Enable : Rewrite enable w ithout remapped. - Remap : DSCP from analyzer is remapped and frame is remarked with remapped DSC P v[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 4 2 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Figure 3- 7 6. T he DSC P- Bas ed QoS I ngress Classification Con figur ation s creen. Par ameter Descript ion • DSCP : M ax im um n u m be r o f s u p po rte d D SC P va l u es ar e 64 . • Tr u s t : C lick to che ck if the DSC P[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 43 Chapter 3 : Co nfigur ation 3. 1 4. 8 DSC P T rans lation Th is secti on desc ribe s ho w you can co nf igu re th e ba sic QoS DS C P T r an sla tio n se tti ng s for al l swit ches . DSC P T r an sl ati on can be done in Ingress or Egress. Web Inter fa ce T o co[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 4 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation Par ameter Descript ion • DSCP : M ax im um n u m be r o f s u p po rte d D SC P va l u es ar e 64 , a n d v a li d D SC P va l ue r a n g es fr o m 0 t o 6 3 . • Ing ress : T he Ingress side DSCP can be firs t tran slated to new [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 4 5 Chapter 3 : Co nfigur ation 3. 1 4 .9 DSC P Clas sific ation This s ec tion describes how to configure and map DSCP value to a QoS Class and DPL value. Other s the s ettings relat e to the curren tly selec ted unit, as shown in the pag e head er . Web Inter fa ce[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 46 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 4. 10 QoS Control Li st Configuration This s ec tion shows the Q oS Con trol L ist ( QCL), which is made up of the QC Es. Each row de scribes a QC E that is defined. The maximum number of QC Es is 2 56 on each s witch. Cl ick on t[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 4 7 Chapter 3 : Co nfigur ation • SM AC : Displays the OU I fi eld of Source M AC address, i.e . firs t three oc tet (by te) of MAC ad dress. • DM AC : Spe cify the t ype of Des tina tion MAC address es for incoming frame . Po ssible values are: A ny: All ty pes[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 48 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation D MAC T y pe Destination M AC t ype : possible values are unicast ( UC) , multicast ( MC), broadcast ( BC) or ’ Any . ’ Frame T ype can have any of the following values: 1. A n y 2 . Ethernet 3 . L LC 4 . SN AP 5. I P v4 6. I P v6 [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 49 Chapter 3 : Co nfigur ation 3 .1 4 .1 1 Q C L S t a t u s Th is secti on desc ribe s ho w to c on fig ure the QC L stat us b y di f f er ent QC L use rs. Eac h row des cr ib es the QC E tha t is de fin ed . It is a confl ict if a spe cific QCE is not applied to t[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 5 0 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation • Auto - refre sh : Check the auto -refresh box to s et the unit to refresh information automati cally . • Resolve Conflict : C l i c k i t t o r es o lv e c o n fi ct i ss ue s . • Icon, up per right of scre en ( Refre sh ) : C[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 5 1 Chapter 3 : Co nfigur ation 3. 1 5 Therma l Protection Th is secti on desc ribe s ho w to i ns pect an d co nfi gur e cur ren t setti ngs fo r con tr ol li ng th erm al pr ot ectio n . The rma l pr ot ecti on is u sed to protect the chip from becoming overheated.[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 5 2 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation NOTE: The tempe ratu re means the MAC and PH Y chip set’s T A temperature, not the PSU device or environment tempe ratur e. D o not set environmen t temperature limita tion value. • Por t prioritie s : This indicates the priority [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 5 3 Chapter 3 : Co nfigur ation 3. 1 6 sFlo w Agent The sFlow C ollec tor configur ation for the switch can be monitored and modified here. Up to on e Collector is suppor ted. This sec tion contain s instructions on how to configur e sFlow collector IP t ype, sFlow [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 54 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation • Time out : It is the duration during which the collec tor receives samples, Once it is ex pired, the sampler stops sending the sam ples . It is t hr oug h th e man age men t the va lue is se t bef or e it exp ir es. The v al ue ac [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 5 5 Chapter 3 : Co nfigur ation Par ameter Descript ion • sFlow Po r t s : Lis t of the por t numbers on which sFlow is configured. • sFlow In s tan ce : Con figured sFlow instance for the por t number . • Sampler T yp e : Con figured sampler t ype on the por t[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 5 6 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 7 L oop Pro tection Loo p de te ctio n det ects th e pr esen ce o f tr affi c. Whe n a swi t ch bec om es a wa re th at a pa ck et’ s (loop in g det ecti on fr ame) MA C address is the s ame that of its own por t, Lo op Protect[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 5 7 Chapter 3 : Co nfigur ation • Ac tion : Confi gures the ac tion per formed when a loop is detected on a por t. Va lid values are Shutdown Por t, Shutdown Por t and Lo g or L og Only . • T x Mode : C ontrols w hether the por t is ac tively generatin g loop pr[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 58 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 8 Sing le IP Si ngl e IP Ma nag em en t (SIM ) i s a si mpl e an d u sef ul me thod to opt imi ze netwo rk ut il iti es and ma n age men t, des ig ned t o m an age a group of switches as a single entity , c alled a SI M group. T h[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 5 9 Chapter 3 : Co nfigur ation Web Inter fa ce T o show the Single IP in the Web interface: 1 . C lick Con figur ation, Single I P , and then I nf ormation. 2 . C lick refresh, or check auto-refresh to automaticaly update I nf ormation. Figure 3- 89. The Single I P[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 60 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 1 9 Easy Port Easy Por t provides a con venient way to save and share common configur ations. Use it to enable featu res and set tings bas ed on the location of a s witch in the net work and for mass configura tion deployments acros[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 6 1 Chapter 3 : Co nfigur ation • Por t S ecu rit y limit : Set the Por t se curity limit here. The d efa ult is 1 . • Span ning T ree Ad min Edge : Enable or disable the Spannin g T ree Admin Edge function. • Spanning T ree BPDU Guard : Enable or disable the [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 62 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3. 20 Mir rori ng Y ou ca n m ir ro r t ra ff i c f r o m a n y s o u rc e p ort to a t a r ge t po rt f o r r e a l- ti me an a ly si s. Y o u c an th en a tta c h a l og ic an a l yz er or RMO N probe to the target por t and study th[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 63 Chapter 3 : Co nfigur ation 3.2 1 T rap E vent Sev erity This func tion is used to set a Alarm trap and get the Even t log. The T rap Events C onfigur ation func tion is used to enable the switch to send out the trap informat ion while pre - defined trap events o[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 64 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chapter 3 : Co nfigur ation 3.22 SMTP Confi gur ation When the switch perceives an alarm, use this func tion to enable the SM TP ser ver to s end you an alarm e - mail . Web Inter fa ce T o confi gure the SMT P C onfigu ration in the Web interface: 1 . C lick C o[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 6 5 Chapter 3 : Co nfigur ation 3.23 UPnP Un ive rsal Pl ug and Pl ay (UPnP) en abl es devi ces to co nn ect seam less ly an d to si mpl ify t he imp leme nta ti on of n etwo rks in h ome (d at a s ha ri ng , c o m m un ic at io n s, an d e nt ert ai n me n t ) a n [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 66 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity 4. Securi t y Th is ch ap ter des cr ib es all th e swi t ch sec ur ity c onf ig ur at io n ta sks t o enh anc e the sec ur ity o f th e loca l ne twor k inc lud ing IP Sou rc e Guard , ARP Inspec tion, DHCP Snooping, A A A , and others. 4.[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 67 Cha pter 4 : Secu rity Par ameter Descript ion • Mod e of I P Source Guard Configuration : E na ble t he Glob al IP So ur ce G ua rd or di sab le the Glo ba l IP Sou rc e Gu ar d. Al l confi gured AC Es will b e lost when the mode is enabled. • Por t Mo de Co[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 68 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity • IP Mask : Used for calculati ng the allowed net work w ith I P address. • MA C address : Val id sourc e MAC addres s. • Adding new entr y : C li ck to add a ne w en try to t he S tat ic IP So ur ce G ua rd tab le . Spe ci f y th e P[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 6 9 Cha pter 4 : Secu rity 4. 2 ARP Inspec tio n The secti on desc ribe s t o c on fig ur e the ARP In specti on pa ra met ers of the swit ch . Use th e ARP In spe ctio n con fig ure to ma n age th e ARP table. 4. 2. 1 Configuration This s ec tion describes how to c[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 7 0 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity 4.2 .2 S tat ic T ab le This s ec tion describes how to configure the S tatic ARP Inspe ction T able parameters of the sw itc h. Web Inter fa ce T o confi gure a Static A RP Inspec tion T able Conf igurat ion in the Web interface: 1 . C li[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 7 1 Cha pter 4 : Secu rity 4. 2. 3 Dy namic T able Th is secti on desc ribe s ho w to c on fig ure the Dyn ami c ARP Ins pectio n T a ble pa ra me te rs. The Dyn am ic ARP In specti on T a bl e contain s up to 1 02 4 entries, and is s or ted firs t by p or t, then b[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 72 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity 4.3 DHCP Snoopi ng The sec tion describe s how to config ure the DHCP Snoo ping parameters of the s witch , for the purpose of preven ting at tacke rs from adding their own DH C P ser vers to the net work. 4. 3. 1 Configurat ion This s ec t[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 7 3 Cha pter 4 : Secu rity 4. 3 . 2 St ati sti c s Th is secti on desc ribe s ho w to d is pl ay th e DHC P sno op in g port stat isti cs. The stat is ti cs sh ow on ly pac ke t cou nt ers whe n DH C P snooping m ode is enabled and relay mod e is disabled. They don?[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 7 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity 4.4 DHCP Rel ay The secti on desc ribe s ho w to f orwar d DHC P req uests t o an oth er spec ifi c DHC P se r ve rs vi a DHC P rel ay . The DH C P serve rs m ay be on another net work. 4.4 . 1 Configurati on Th is secti on desc ribe s ho [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 7 5 Cha pter 4 : Secu rity • Relay Information Polic y : Ind icat es th e DHC P r el ay i n f orm ati on opt ion po li c y . Whe n DHC P re la y in f or ma tio n mod e ope rat ion is enabled, if agent receives a DHCP mess age that already contain s rela y agent inf[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 7 6 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity Clien t St atis ti cs • T ransmit to Client : The number of relayed packets from ser ver to clien t. • Tr a n s m i t E r r o r : T he number of pack ets that result ed in error while being s ent to ser vers. • Receive from Clien t :[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 77 Cha pter 4 : Secu rity 4.5 NA S This s ec tion describes how to configure the NA S parameters of the sw itc h. T he NA S ser ver can be used to connec t users to a variety of resourc es includi ng I nternet access, confer ence calls, printi ng d ocuments on shared[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 78 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity Par ameter Descript ion • Mode : Indicates if N A S is globally enabled or disabled on the s witch. If globally disabled, all por t s are allowed forwarding of fram es. • Reau the ntic atio n Ena ble d : If checked, succ essfully authen[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 7 9 Cha pter 4 : Secu rity • R ADI US -A s signe d VL A N Enabled : R A DI US-assigned V L A N provides a means to central ly contr ol the VL AN on which a suc cessfully authenticated supplicant is placed on the s witch. Incoming traffic will be classified to and [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 80 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity NO TE: Su ppo se two ba ck en d servers are ena bled and th at the serve r ti meou t i s c on fig ur ed to X s ec on ds (us ing the A A A con figurati on page ) , and suppose tha t the fir st ser ver in the list is currently down ( but not [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 8 1 Cha pter 4 : Secu rity T he advantage of M AC -based authentication over p or t -base d 8 02 . 1 X is that several clients can be connected to the s ame por t (e.g . throu gh a thir d par ty s witch or a hub) and still require individual authen tication, and tha[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 82 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity - V alu e of T u nne l- T yp e mu st be se t to " VL AN " (ord in al 1 3 ). - V alu e of T u nne l-Pri va te-Gro up- ID mu st be a str ing of ASC II ch ar act ers in the ra ng e '0 ' - '9' , whi ch is in t er p[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 83 Cha pter 4 : Secu rity Rei nit ial iz e : Fo rc es a r ei n it ia li za ti on of t he cl ie nts on th e port—an d the re b y a re aut hen ti cati on —im med iat ely . The c li ents wil l transf er to the unauthoriz e d s tate while the reauthenti cation is in [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 8 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity 4.5 .3 Por t Status Th is secti on pr ov ide s deta il ed in for mat io no n ho w to d is pl ay NAS sta ti stics fo r a sp ec if ic swit ch po rt run ni ng EAPOL -b as ed IEE E 802. 1 X authentication. Web Inter fa ce T o confi gure a N AS[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 1 85 Cha pter 4 : Secu rity - Multi 802. 1 X - M AC -based Auth. • La st Sup plicant / Client Info : Information about the last supplicant / clien t that attempted to authenticate . This inf ormation is avai lable for the followin g administr ative s tates: - Por t-[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 86 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity 4.6 A A A This s ec tion shows you how to use an A A A (Authentication , Authorization , Acc ounti ng) ser ver to provide access cont rol to your network. The A A A ser ver can be a T ACAC S + or R ADIUS ser ver to create and manage objec t[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 8 7 Cha pter 4 : Secu rity Figure 4 - 1 5. T he T ACA CS+ Authorization and Accou nting C onfigur ation s creen. Figure 4 - 1 6. The R ADIUS Authentication Con figura tion screen. Figure 4 - 1 7 . The R A DIUS Accoun ting Con figur ation s creen. Figure 4 - 1 8. T h[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 88 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity Par ameter Descript ion • Timeout : T he T imeout, which can be set to a number bet ween 3 and 36 0 0 s econds, is the maximum time to wait for a reply from a ser ver . If the ser ver does not reply within this timefr ame, we will conside[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 89 Cha pter 4 : Secu rity • Por t : The TC P por t to use on the T ACAC S + Authen tication Ser ver . I f the p ort is set to 0 (zer o) , the defau lt por t (49 ) is used on the T ACAC S + Authentication Ser ver . • Sec ret : T he secret— up to 29 characters lo[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 90 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity - Dis abled : The ser ver is disable d. - N ot Ready: The ser ver is enabled, but IP communication is not yet up and runni ng. - Ready : The ser ver is enabled, IP communication is up and running, and the R AD IUS module is ready to accept [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pag e 1 9 1 Cha pter 4 : Secu rity 4. 7 Port Se cu rity This s ec tion demonstrates how to configure the Por t Security s ettings of the Switch . Use the Por t Se curity featu re to restric t input to an interface by limit ing and identify ing M AC addresses. 4.7 . 1 Limi t[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 9 2 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity • Aging Enable d : I f check ed, se cured M A C addresses are subject to aging as discussed under Aging Period. • Aging Perio d : I f Agin g Enabled is check ed, then the aging p eriod is controlled w ith this input. If other modules a[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 9 3 Cha pter 4 : Secu rity - Shutdown: Indicates that the por t is shut d own by the Limit C ontrol module. This st ate can only be shown if Action is set to S h ut do wn o r T ra p & Sh ut d o wn . • Re- open But ton : I f a p or t is shutdown by this module,[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 94 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity • Por t Status: The table has one row for each p ort on the sele cted s witch and a number of columns , which are : • Por t: The por t number for which the status applies. C lick the por t number to see the st atus for this par ticula r[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 9 5 Cha pter 4 : Secu rity 4.7 . 3 Por t Statu s Th is secti on sho ws the MA C ad dr esses sec ur ed by the Port Se cu rity mod ule . Port Secu rity is a mod ule wit h no di re ct config uration . C onfiguration comes indirectly from other modules, includi ng the u[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 96 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity 4.8 Access Man agement Th is secti on sho ws how to co n fi gu re ac ces s ma nag em en t tabl e of th e S wit ch in cl udi ng HT TP/ HT TPS, SNMP , an d TELNET/SS H. Y o u can manage the Switch over an Ethernet L AN, or over the Internet. [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 9 7 Cha pter 4 : Secu rity • TELNET/ SSH : Indicates that the host can access the s witch from TELN E T/ SSH interface if the host I P address matc hes the IP address range provided in the entry . • But to ns : - S ave: C lick to save changes. - R e se t: C l ic [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 1 98 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity 4.9 SS H This s ec tion shows how to use SSH ( Secure SHell) to securely access the Swit ch. SSH is a s ecure communication protocol that combines authentication and data encr yption to provide s ecure encr ypted communication. Web Inter fa[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 1 99 Cha pter 4 : Secu rity 4. 1 0 HT TP S This s ec tion shows how to use HT TPS to securely access the Switch . HT TPS is a secure communication protocol that combines authentication and data encr yption to provide s ecure encr ypted communication via the browser . W[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 200 72 4 - 7 46 -5 50 0 | blac kbo x.c om Cha pter 4 : Secu rity 4. 1 1 Auth ent icat ion Meth od This s ec tion shows how to configu re a user with authentication w hen lo gging in to the s witch via one of the management client int er face s. Web Inter fa ce T o confi gure a Authentication M ethod C onf[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 2 0 1 Chap ter 5 : M ainte nance 5. Mainte nan ce This chapter d escribes all the s witch Mainten ance configur ation t asks to enha nce the per formance of local net work inclu ding Restar t Device, Firmware upgrade, Save / Res tore , Impor t / Expor t, and Diagnosti[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 20 2 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chap ter 5 : M ainte nance 5. 2 Firmware This s ec tion describes how to upgrade firmware . T he switch c an b e enha nced w ith m ore value -added functions by installi ng firmware upgrad es . 5. 2. 1 Firmware Upgrade This pag e fac ilitates an update of the fir[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 03 Chap ter 5 : M ainte nance 5. 2.2 Fi rm wa re Se le cti on Th e s wi t c h s up po rts d u al im ag es f or fi rm wa re r ed u n d a n cy . Y o u c an se l ect th e f ir mw a r e i ma ge f or yo ur de v i c e: S ta rt fi r m w a r e o r Operating firmware . T his[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 204 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chap ter 5 : M ainte nance 5.3 Sav e / Restore This s ec tion describes how to s ave and restore the s witch configur ation including reset to Factor y Defaults, S ave Start, Save Users, Restore Us ers for any main tena nce ne eds. 5.3. 1 F ac tory Defau lts Th is[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 2 05 Chap ter 5 : M ainte nance 5. 3. 2 S av e S ta r t This s ec tion describes how to s ave the Switch Start configu ration. Any curren t configura tion files will be s aved as XM L format. Web Inter fa ce T o confi gure a Save Start C onfigur ation in the Web inter[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 206 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chap ter 5 : M ainte nance 5. 3.4 Re s tore Us er This s ec tion describes how to res tore user inf ormation back to the s witch. Any curren t conf igurat ion files will be res tored via XM L format. Web Inter fa ce T o confi gure a Res tore User C onfigu ration i[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Page 2 0 7 Chap ter 5 : M ainte nance 5.4 Expor t / Impor t Th i s se cti on des cr ib es h o w t o e xp ort an d i mp ort t h e sw i t ch co n f i g u ra ti on . A ny cu rr e n t c on fi gu r a ti o n f i l es wi l l b e e xpo rte d a s X ML format. 5.4 . 1 E xpo r t Confi[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 208 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chap ter 5 : M ainte nance 5.4 . 2 Impor t Config This s ec tion describes how to impor t the sw itch configu ration for main tena nce ne eds. Any current configur ation files will be i mp ort e d a s X ML f o rm a t . Web Inter fa ce T o confi gure an Impor t Con[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 209 Chap ter 5 : M ainte nance 5.5 Diagnos tics This s ec tion provides a set of basic sys tem diagnotsics . I t lets users know that w hether the s ystem is health y or needs to be fixed. The basic sys tem check includes I CMP Ping, ICMP v6, and V eriPH Y Cable Diagn[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 1 0 72 4 - 7 46 -5 50 0 | blac kbo x.c om Chap ter 5 : M ainte nance 5.5. 2 Ping6 This s ec tion enables you to is sue I C MP v 6 PIN G pack ets to troubleshoot I P v6 connectiv ity issues. Web Inter fa ce T o confi gure an ICMP v6 P IN G Confi guration in the web interface: 1 .Specify I C MP v 6 PI NG [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 2 1 1 Chap ter 5 : M ainte nance 5.5. 3 V eriPHY This s ec tion describes how to run the V eriPHY Cable D iagnostics. Press to run the diagnostic s. It takes approxima tely fi ve seconds to run. I f all por t s are s elec ted, it can take approxima tely 1 5 s econds. [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 1 2 72 4 - 7 46 -5 50 0 | blac kbo x.c om Appendix Appendix: Glossar y of W eb - Based Man agement T erms AC E : AC E is an a cron ym for Access C ontrol En tr y . It des cribes acc ess permission asso ciat ed with a par ticul ar AC E ID. There are th ree AC E f ra me types ( E th er ne t T yp e , ARP ,[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 1 3 Appendix CCM : C CM is an acronym for C ontinuity C heck Mes sage. It is a OAM frame transmi tted from a MEP to it s peer MEP and use d to implement C C functionalit y . CDP : CDP is an acronym for Cisc o Discovery Protocol . DEI : DEI is an acronym for Drop Eli[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 1 4 72 4 - 7 46 -5 50 0 | blac kbo x.c om Appendix DSCP : DSC P i s an acr on ym f or Di ffe ren tia ted Servi ce s C ode Poi nt. It i s a fi el d i n th e he ader of IP pac ke t s f or pac ke t cla ssif icat ion purposes. EEE : EEE is an abbreviation for Energy Efficient Et hernet defined in I EEE 802.[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 2 1 5 Appendix I MA P is the protocol that I MA P clien ts use to commun icate w ith the ser ver s, and SMT P is the protocol used to transport mail to an IM AP ser ver . T he curren t version of the Internet M ess age Acc ess Protocol is IM AP4. It is simila r to Pos[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 1 6 72 4 - 7 46 -5 50 0 | blac kbo x.c om Appendix MEP : M EP is an acron ym for Maintenan ce Entity Endpoint and is an endpo int in a M ain tenanc e Entity Group ( I TU - T Y . 1 7 3 1). Mirrorin g : F or debugging net work problems or monitoring net work traffic, the switch sys tem can be configured t[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 1 7 Appendix Poli cer : A p olicer can limit the bandwidth of received frames. It is located in front of the ingress queue. PO P3 : P OP3 is an a cron ym for Pos t O f fice Protocol version 3. It is a protocol for e -mail clients to retrieve e -mail mess ages from a[...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om Pa ge 2 1 8 72 4 - 7 46 -5 50 0 | blac kbo x.c om SNAP : The S ub Netwo rk Ac cess Pr ot oco l (SNAP) is a mec ha nis m fo r mu lti plex in g, on netw or ks us i ng IEE E 802 .2 LL C , mo re prot ocols than can be distinguished by the 8 - bit 802.2 Ser v ice Access Po int (SA P) fields. SN AP suppor ts identif [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om 72 4 - 7 46 -5 50 0 | blac kbo x.c om P age 2 1 9 Appendix L G B 110 8 A U DP provides t wo s er vices not provided by the I P layer . I t provides por t numbers to help distingu ish dif feren t user reques ts and, op ti on all y , a che cks um cap abi l ity t o ve rify th at th e dat a ar ri ve d i nt act . C [...]

72 4 - 7 46 -5 50 0 | blac kbo x.c om About Bl ack B ox Black Box provides an ex tensive range of net working and infrastructure produc ts . Y ou’l l find ever y thing from cabinets and racks a n d po w e r a n d s u rg e p r ot ect io n p ro d ucts t o me di a c o n ve rte rs a n d E th er ne t sw it c h es al l s up po rt ed b y f r e e , l iv [...]