Owner's manual

ManualsBrandsAsus ManualsCommunicationGigaX2048

GigaX Series L2 Managed Switch User Guide

GigaX Series

Layer 2 Managed Switch

User Guide

Summary of content (169 pages)

PAGE 1
GigaX Series L2 Managed Switch User Guide GigaX Series Layer 2 Managed Switch User Guide
PAGE 2
E2064 Second Edition V2.2 April 2005 Copyright © 2005 ASUSTeK COMPUTER INC. All Rights Reserved. No part of this manual, including the products and software described in it, may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means, except documentation kept by the purchaser for backup purposes, without the express written permission of ASUSTeK COMPUTER INC. (ASUS).
PAGE 3
GigaX Series L2 Managed Switch User Guide Federal Communications Commission Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: • This device may not cause harmful interference, and • This device must accept any interference received including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules.
PAGE 4
ASUS contact information ASUSTeK COMPUTER INC. (Asia-Pacific) Address: General Tel: General Fax: Web Site: Technical Support MB/Others (Tel): Notebook (Tel): Desktop/Server (Tel): Support Fax: 150 Li-Te Road, Peitou, Taipei, Taiwan 112 +886-2-2894-3447 +886-2-2894-7798 www.asus.com.
PAGE 5
GigaX Series L2 Managed Switch User Guide Table of Contents 1 2 3 4 Introduction............................................................................... 13 1.1 L2 managed features ..................................................... 13 1.2 Conventions used in this document ............................... 14 1.2.1 Notations .......................................................... 14 1.2.2 Typography ...................................................... 14 1.2.3 Symbols ....................
PAGE 6
4.3.1 4.3.2 4.3.3 4.3.4 4.3.5 Management .....................................................35 IP Setup.............................................................37 Administration....................................................39 Reboot...............................................................40 Firmware Upgrade………………………………. 40 4.4 Physical Interface ..........................................................42 4.5 Bridge .....................................................................
PAGE 7
GigaX Series L2 Managed Switch User Guide 4.9.2 4.9.3 4.9.4 4.9.4 4.9.5 Mapping ............................................................ 88 Class Set........................................................... 89 Policy Set .......................................................... 91 Policy Attach ..................................................... 94 CoS ................................................................... 96 4.10 Statistics Chart .....................................................
PAGE 8
7.1.2 nslookup ..........................................................151 7.2 Replacing defective fans ..............................................153 7.3 Simple fixes ..................................................................155 8 Glossary..................................................................................157 9 Index .......................................................................................
PAGE 9
GigaX Series L2 Managed Switch User Guide List of Figures Figure 1. GigaX L2 managed switch package contents................ 16 Figure 2. Front panel (GigaX 2048)............................................... 17 Figure 3. Front panel (GigaX 2024)............................................... 17 Figure 4. Rear panel...................................................................... 19 Figure 5. Overview of Hardware Connections .............................. 23 Figure 6.
PAGE 10
Figure 28. Static Multicast (GigaX 2024).........................................52 Figure 29. IGMP Snooping ..............................................................53 Figure 30. Traffic Control .................................................................54 Figure 31. Dynamic Address ...........................................................55 Figure 32. Static Address ................................................................57 Figure 33. Tagged VLAN (GigaX 2048) ..............
PAGE 11
GigaX Series L2 Managed Switch User Guide Figure 58. Policy Set ....................................................................... 91 Figure 59. Policy Edit ...................................................................... 93 Figure 60. Policy Attach .................................................................. 95 Figure 61. CoS…….. ....................................................................... 97 Figure 62. Traffic comparison (GigaX 2048) ...................................
PAGE 12
List of Tables Table 1. Front panel labels and LEDs ..........................................18 Table 2. Rear panel labels ...........................................................19 Table 3. Technical specifications .................................................20 Table 4. LED Indicators................................................................24 Table 5. Port color description......................................................32 Table 6. Commonly used buttons and icons ..........
PAGE 13
GigaX Series L2 Managed Switch User Guide 1 Introduction Congratulations on becoming the owner of the ASUS GigaX L2 managed switch! You may now manage your LAN (local area network) through a friendly and powerful user interface. This user guide tells you how to set up the GigaX L2 managed switch, and how to customize its configuration to get the most out of this product. 1.
PAGE 14
• Enterprise MIB for PSU, fan, and system temperature, voltage • Telnet or SSH2 remote login • FTP for firmware update and configuration backup • IEEE 802.1x authentication (with dynamic VLAN assignment) • DHCP snooping • Syslog • Command Line Interpreter through console, telnet and SSH • Web GUI • LEDs for port link status • LEDs system, redundant power supply (RPS), and fan status 1.2 1.2.
PAGE 15
GigaX Series L2 Managed Switch User Guide 1.2.3 Symbols This document uses the following icons to call your attention to specific instructions or explanations. Note Definition WARNING Provides clarification or additional information on the current topic. Explains terms or acronyms that may be unfamiliar to many readers. These terms are also included in the Glossary. Provides messages of high importance, including messages relating to personal safety or system integrity.
PAGE 16
2 Getting to know the GigaX 2.1 Package contents The GigaX switch package comes with the following items: • GigaX 2048 (48-port) or GigaX 2024 (24-port) L2 managed switch • AC Power cord • Null modem cable for console interface (DB9) • Rack installation kit (two brackets with six #6-32 screws) • USB cable for console interface • Installation CD-ROM • Quick installation guide Figure 1.
PAGE 17
GigaX Series L2 Managed Switch User Guide 2.2 Front Panel The front panel includes LED indicators that show the system, RPS, fan, and port status. Figure 2. Front panel (GigaX 2048) Figure 3.
PAGE 18
Table 1.
PAGE 19
GigaX Series L2 Managed Switch User Guide 2.3 Rear Panel The switch rear panel contains the ports for the data and power connections. Figure 4. Table 2. Rear panel labels No.
PAGE 20
2.4 Technical specifications Table 3. Technical specifications Physical Dimensions 43.5mm(H) X 444 mm (W) X 265mm(D) Power Input Redundant Power Supply (RPS) 100-240V AC/2.5A 50-60Hz Input 100-240V AC/1.8A 50-60Hz Environmental Ranges Replaceable Fans 20 Consumption < 90 watts Output 12V DC/12.
PAGE 21
GigaX Series L2 Managed Switch User Guide 3 Quick start guide This section provides the basic instructions to set up the GigaX environment. Refer also to the GigaX Series Installation Guide. Part 1 shows you how to install the GigaX on a flat surface or on a rack. Part 2 provides instructions to set up the hardware. Part 3 shows you how to configure basic settings on the GigaX.
PAGE 22
GigaX Series L2 Managed Switch User’s Guide 3.2 Part 2 — Setting up the switch Connect the device to the power outlet, and your computer or network. See Figure 5. 3.2.1 Connect the console port For console management, use an RS232 (DB9) or a USB cable to connect the switch. If you want to use WEB interface, connect your PC to the switch using the Ethernet cable. 3.2.2 Connect to the computers or a LAN You can use Ethernet cable to connect computers directly to the switch ports.
PAGE 23
GigaX Series L2 Managed Switch User Guide RS-232 Console Management RPS USB Cat 5 Ethernet cables Expansion hub/switch LAN computers Figure 5.
PAGE 24
GigaX Series L2 Managed Switch User’s Guide Table 4. LED Indicators No. LED Description 1 System Solid green indicates that the device is turned on. If this light is off, check if the power adapter if attached to the switch and plugged into a power source. 2 Switch ports [1] to [50] (2048) [1] to [26] (2024) Solid green indicates that the device can communicate with the LAN, or flashing when the device is sending or receiving data from your LAN computer.
PAGE 25
GigaX Series L2 Managed Switch User Guide 3. Make sure the settings of your terminal emulation software as follows: a) Choose the appropriate serial port number b) Set the data baud rate to 115200 (or 9600 on some models) c) Set the data format to no parity, 8 data bits and 1 stop bit d) No flow control e) Set VT1000 for emulation mode 4. After setting up the terminal, you can see the prompt “(ASUS)%” on the terminal. 5. Type “login” to access the command line interface. The default user name is “admin”.
PAGE 26
GigaX Series L2 Managed Switch User’s Guide 3.3.2 Setting up through the Web interface To successfully connect your PC to the switch, your PC must a valid IP in your network. Contact your network administrator to obtain a valid IP for the switch. If you wish to change the default IP address of the switch, follow section 3.3.1 to change the IP address. Since the switch does not support DHCP client function, a valid static IP for the switch is necessary to use Web interface. 1.
PAGE 27
GigaX Series L2 Managed Switch User Guide Default User Name: admin Default Password: (no password) You can change the password at any time (see section 5.3.1 System Commands). 3. To setup a new IP address, click “System”, then “IP Setup” (see Figure 8). Fill in the IP address, network mask and default gateway, then click . 4. If your new address is different from the default, the browser can not update the switch status window or retrieve any page. This is normal.
PAGE 28
GigaX Series L2 Managed Switch User’s Guide 28 Figure 8. IP Setup (GigaX 2048) Figure 9.
PAGE 29
GigaX Series L2 Managed Switch User Guide 4 Management with the Web Interface The switch provides Web pages that allow switch management through the Internet. The program is designed to work best with Microsoft Internet Explorer® 5.5, or later versions. NOTE: Netscape is not supported. 4.1 Log into Web user interface 1. From a PC, open your web browser, type the following in the web address (or location) box, and press : http://192.168.1.1 This is the factory default IP address for the switch.
PAGE 30
GigaX Series L2 Managed Switch User’s Guide The home page appears each time you log into the program. (See the following figures.) Figure 11.
PAGE 31
GigaX Series L2 Managed Switch User Guide Figure 12.
PAGE 32
GigaX Series L2 Managed Switch User’s Guide 4.2 Functional layout Typical web page consists of three separate frames. The top frame has a switch logo and front panel as shown in Figure 13 and Figure 14. This frame remains on the top of the browser window all the times and updates the LED status periodically. See Table 4 for the LED definitions. See Table 5 for the color status description. Figure 13. Top frame (GigaX 2048) Figure 14. Top frame (GigaX 2024) Table 5.
PAGE 33
GigaX Series L2 Managed Switch User Guide Figure 15. Expanded Menu List The above frame displays configuration pages or graphics for the statistics. See section 4.3 for details.
PAGE 34
GigaX Series L2 Managed Switch User’s Guide 4.2.1 Menu navigation tips • To expand a group of related menus, click on the corresponding group name. The sign will change to after expansion. • To contract a group of related menus: click on the corresponding group name. The sign will appear next to the group name. • To open a specific configuration page, click on the desired menu item. 4.2.
PAGE 35
GigaX Series L2 Managed Switch User Guide 4.3 System Pages System pages include management, IP setup, administration, reboot, and firmware update function. 4.3.
PAGE 36
GigaX Series L2 Managed Switch User’s Guide Figure 16.
PAGE 37
GigaX Series L2 Managed Switch User Guide 4.3.2 IP Setup The switch supports dynamic IP and static IP assignment. The dynamic IP can be got from a DHCP server within the same VLAN. The IP Setup page contains the following editable information: VLAN ID: Specify a VLAN ID to system management interface. It is necessary to be within the same VLAN for management. IP Address: Assign a static IP address to the switch management interface.
PAGE 38
GigaX Series L2 Managed Switch User’s Guide Figure 17.
PAGE 39
GigaX Series L2 Managed Switch User Guide 4.3.3 Administration The Administration page allows you to enable or disable the authentication for web user by password protection. The default setting for web access does not require any authentication. To save any changes and make it effective immediately, click . Use to refresh the setting, as shown in Figure 18. When you enable the password protection, you have to login again immediately. You can change the password at any time through the CLI interface.
PAGE 40
GigaX Series L2 Managed Switch User’s Guide 4.3.4 Reboot The Reboot page contains a the system. button. Clicking the button to reboot Figure 19. Reboot Rebooting the system stops the network traffic and terminates the Web interface connection. 4.3.5 Firmware Upgrade The Firmware page contains the following information: Hardware Version: shows the hardware revision number.
PAGE 41
GigaX Series L2 Managed Switch User Guide Firmware Version: shows the current running firmware version. This number will be updated after the firmware update. Enter the firmware location into the firmware space directly, or click to choose the file name of the firmware from prompt window. Click to update the switch firmware. See Figure 20 for reference. Clicking the upload button loads the assigned firmware to the switch, then reboot system after a successful firmware update.
PAGE 42
GigaX Series L2 Managed Switch User’s Guide 4.4 Physical Interface The Physical Interface displays the Ethernet port status in real time. You can configure the port in following fields: Port: select the port to configure Admin: disable/enable the port Mode: set the speed and duplex mode Flow Control: enable/disable 802.
PAGE 43
GigaX Series L2 Managed Switch User Guide Figure 21. Physical Interface 4.5 Bridge The Bridge page group contains most layer 2 configurations, like link aggregation, STP....etc.. Spanning Tree The configuration page for Spanning Tree Protocol can disable and enable the feature in runtime. This page consists of three parts. The first part shows the root information. It tells user the STP setting about the root switch. The second part is the STP setting.
PAGE 44
GigaX Series L2 Managed Switch User’s Guide Max Age: a timeout value to be used by all Bridges in the LAN Forward Delay: a timeout value to be used by all bridges in the LAN Bridge Priority: the switch priority in the LAN The third part is the port setting. It contains a display window to show the current configuration for each port. You click to change the port setting for STP/RSTP.
PAGE 45
GigaX Series L2 Managed Switch User Guide Figure 22. Spanning Tree 4.5.1 Link Aggregation The page configures the link aggregation group (port trunking). The switch can have 6 link aggregation groups. Show Trunk: Select “Add a new Trunk” for a new created group. Or select an existed group to display on the following fields and port icons.
PAGE 46
GigaX Series L2 Managed Switch User’s Guide Trunk ID: a number to identify the trunk group besides the group name. LACP: Enable/Disable LCAP on selected trunk. LACP mode is fixed to be Active. Remove Trunk: Remove the selected trunk. Port Icons: these port icons are listed in a way like the front panel. You have to click on the icon the select the group members. The port can be removed from the group by clicking the selected port again. Click to make the setting send to the switch (HTTP server).
PAGE 47
GigaX Series L2 Managed Switch User Guide attribute, the others will change too. For example, a trunk group consists of port 1 and 2. If the VLAN of port 1 changes, the VLAN of port 2 also changes with port 1. Figure 23.
PAGE 48
GigaX Series L2 Managed Switch User’s Guide Figure 24. Link aggregation (GigaX 2024) 4.5.2 Mirroring Mirroring, together with a network traffic analyzer, helps you monitor network traffics. You can monitor the selected ports for egress or ingress packets. Mirror: Selects the mirror group. Each group consists of 24 Fast Ethernet ports and one Gigabit port. (for GigaX 2048 only) Mirror Mode: Enables or disables the mirror function for the selected group.
PAGE 49
GigaX Series L2 Managed Switch User Guide The monitor port can not belong to any link aggregation group. The monitor port can not operate as a normal switch port. It does not switch packets or do address learning. Click to make the setting send to the switch (HTTP server). Click to refresh the settings to current value. Figure 25.
PAGE 50
GigaX Series L2 Managed Switch User’s Guide Figure 26.
PAGE 51
GigaX Series L2 Managed Switch User Guide 4.5.3 Static Multicast This page can add multicast addresses into the multicast table. The switch can hold up to 256 multicast entries. All the ports in the group will forward the specified multicast packets to other ports in the group.
PAGE 52
GigaX Series L2 Managed Switch User’s Guide Figure 28. Static Multicast (GigaX 2024) 4.5.4 IGMP Snooping IGMP snooping helps reduce the multicast traffics on the network by allowing the IGMP snooping function to be turned on or off. When turned on, the switch snoops the IGMP packets and puts the new group into the multicast table. However, if the static entries occupy all 256 spaces, the IGMP snoop does not work normally. The switch only allows 256-layer 2 multicast group.
PAGE 53
GigaX Series L2 Managed Switch User Guide Figure 29. IGMP Snooping 4.5.5 Traffic Control Traffic control prevents the switch bandwidth from flooding packets including broadcast packets, multicast packets and the unicast packets because of destination address lookup failure. The limit number is a threshold to limit the total number of the checked type packets. For example, if broadcast and multicast are enabled, the total traffic amount for to save the those two types will not exceed the limit value.
PAGE 54
GigaX Series L2 Managed Switch User’s Guide Figure 30. Traffic Control 4.5.6 Dynamic Addresses This page displays the result of dynamic MAC address lookup by port, VLAN ID, or specified MAC address. The dynamic address is the MAC address learned by switch, it will age out from the address table if the address is not learned again during the age time. User can set the age time by entering a valid number from 10 to 1,000,000 in seconds. Then click on to save the new age value.
PAGE 55
GigaX Series L2 Managed Switch User Guide Figure 31.
PAGE 56
GigaX Series L2 Managed Switch User’s Guide 4.5.7 Static Addresses You can add a MAC address into the switch address table. The MAC address added by this way will not age out from the address table. We call it static address. MAC Address: enter the MAC address VLAN ID: enter the VLAN ID that the MAC belongs Port Selection: select the port to which the MAC belongs Discard: you can do packet filtering when the MAC address appears in the packets as destination address, source address, or either of them.
PAGE 57
GigaX Series L2 Managed Switch User Guide Click on the when you create a new static MAC address by the above information. Then you will see the new added entry shows in the address window. You can remove the existed address by selecting the entry with the mouse, then clicking on . The button updates the existed to save effective. Click to refresh MAC address entries. Click the settings to current value. To make the configuration effective, please go to “save configuration” page, then click . Figure 32.
PAGE 58
GigaX Series L2 Managed Switch User’s Guide “T” type: All packets transmitted from this port will be tagged. “blank” type: This port is not a member of the VLAN group. If one untagged port belongs to two or more VLAN groups at the same time, it will confuse the switch and cause flooding traffics. To prevent it, the switch only allows one untagged port belongs to one VLAN at the same time.
PAGE 59
GigaX Series L2 Managed Switch User Guide Figure 33. Tagged VLAN (GigaX 2048) Figure 34.
PAGE 60
GigaX Series L2 Managed Switch User’s Guide 4.5.9 Default Port VLAN and CoS Some VLAN tag related field settings for each port are included in this page. It includes: Port: select the port to configure PVID: port-based VLAN ID. Every untagged packet received from this port will be tagged with this VLAN group ID CoS (Class of Service) value: every untagged packet received from this port will be assigned to this CoS in the VLAN tagged Click on to change the content in the port list window.
PAGE 61
GigaX Series L2 Managed Switch User Guide 4.5.10 DHCP Snooping DHCP snooping is a DHCP security feature that provides security by filtering untrusted DHCP messages and by building and maintaining a DHCP binding table. You can assign some ports to be trusted ports. The selected (trusted) port forwards the DHCP packets as a normal port, but the DHCP ACK packets will be dropped when the unselected (untrusted) port receives the packets. DHCP Snooping: enable or disable DHCP snooping. Figure 36.
PAGE 62
GigaX Series L2 Managed Switch User’s Guide Figure 37. DHCP Snooping (GigaX 2024) 4.6 SNMP This group offers the SNMP configuration including Community Table, Host Table, and Trap Setting. To provide more secure management and access control, SNMPv3 is supported. 4.6.1 Community Table You can type different community names and specify whether the community has the privilege to make setting (write access) by checking the box. Click to refresh the page.
PAGE 63
GigaX Series L2 Managed Switch User Guide Figure 38.
PAGE 64
GigaX Series L2 Managed Switch User’s Guide 4.6.2 Host Table This page links host IP address to the community name that is entered in Community Table page. Type an IP address and select the community name from the drop-down list. Click permanently or to save the configuration to refresh the page. Figure 39.
PAGE 65
GigaX Series L2 Managed Switch User Guide 4.6.3 Trap Setting By setting trap destination IP addresses and community names, you can enable SNMP trap function to send trap packets in different versions (v1 or v2c). Click to refresh the page. to save the configuration permanently or Figure 40. Trap Setting 4.6.4 VACM Group VACM (View-based Access Control Model) Group is used to configure the information of SNMPV3 VACM Group. Group Name: enter the security group name.
PAGE 66
GigaX Series L2 Managed Switch User’s Guide Notify View Name: enter the Notify View Name that the Group belongs. The related SNMP messages are Trap, Report. Security Model: enter the Security Model Name that the Group belongs. Any is suitable for v1, v2, v3. USM is SNMPv3 related. Security level: enter the Security level Name that the Group belongs. Only NoAuth, AuthNopriv, AuthPriv can be chosen. Click on the when you create a new VACM group entry by the above information.
PAGE 67
GigaX Series L2 Managed Switch User Guide 4.6.5 VACM View VACM (View-based Access Control Model) View is used to view the information of SNMPV3 VACM Group. View Name: enter the security group name. View Type: Select the View Type that the view belongs. Included or Excluded when View Subtree matches the Oid in the SNMPv3 message. View Subtree: enter the View Subtree that the View belongs. The Subtree is the Oid to match the Oid in the SNMPv3 message.
PAGE 68
GigaX Series L2 Managed Switch User’s Guide Figure 42. VACM View 4.6.6 USM User USM (User-based Security Model) User is used to configure the information of SNMPV3 USM User. Engine Id: enter the Engine Id that should match the ID in the Manager. Name: enter Name combined with Engine ID that should match the Name and Engine ID in the Manager. Auth Protocol: enter the Auth Protocol that Engine ID and Name belong. Only NoAuth, MD5, SHA1 can be chosen.
PAGE 69
GigaX Series L2 Managed Switch User Guide Priv Protocol: enter the Priv Protocol that Engine ID and Name belong. Only NoPriv, DES can be chosen. If the NoPriv is chosen, there is no need to enter password. Priv Password: enter the password that the Priv Protocol belongs. The password needs at least 8 characters or digits. Click on the when you create a new USM User entry by the above information. Then you will see the new added entry shows in the User window.
PAGE 70
GigaX Series L2 Managed Switch User’s Guide 4.7 Filters The switch can filter certain traffic types according to packet header information from Layer 2 to Layer 4. Each filter set includes a couple of rules. You have to attach the filter set to certain ports to make the filter work. 4.7.1 Filter Set You can create a filter set by giving a name, ID and a mode of rules. The switch defines two modes of rules, one is MAC mode and the other is IP mode.
PAGE 71
GigaX Series L2 Managed Switch User Guide Figure 44. Filter Set The Filter Rule page provides options for rule modes, one is MAC rule (Figure 45) and the other is IP rule (Figure 46). If you did not enter the MAC address in the blank box, it means the rule doesn’t care the MAC value. In IP rule setup, you can enter any of the 5 tuples, source IP, destination IP, protocol, source application port and destination application port.
PAGE 72
GigaX Series L2 Managed Switch User’s Guide Figure 45. Filter Rule in MAC mode Figure 46.
PAGE 73
GigaX Series L2 Managed Switch User Guide 4.7.2 Filter Attach A filter set is idle if you did not attach it to any ingress or egress port. Use the Filter Attach page to attach a filter set to ingress and egress ports. Click to save the configuration. To make the configuration effective, go to the “Save Configuration” page, then click , or click to refresh the page. on To attach a filter set to ports: • Attach to all ports: the filter set applies to all the ports of the system.
PAGE 74
GigaX Series L2 Managed Switch User’s Guide Figure 47. Filter Attach (GigaX 2048) Figure 48.
PAGE 75
GigaX Series L2 Managed Switch User Guide 4.8 Security The switch has the 802.1x port-based security feature. Only authorized hosts are allowed to access the switch port. Traffic is blocked for hosts failed to authenticate themselves. The authentication service is provided by a RADIUS server or the local database (support MD5 authentication) in the switch. The switch also supports dynamic VLAN assignment through 802.1x authentication process.
PAGE 76
GigaX Series L2 Managed Switch User’s Guide • Max Reauthentication Attempts: Retry count if the port user failed to respond to authentication requests from the switch. The second part is the port settings. Please click done with the modifications. when you're • Port: Specify which port to configure. • Multi-host: If enabled, ALL hosts connected to the selected port are allowed to use the port if ONE of the hosts passed the authentication.
PAGE 77
GigaX Series L2 Managed Switch User Guide Figure 49.
PAGE 78
GigaX Series L2 Managed Switch User’s Guide 4.8.2 Dial-In User Dial-in User is used to define users in the local database of the switch. • User Name: New user name. • Password: Password for the new user. • Confirm Password: Enter the password again. • Dynamic VLAN: Specify the VLAN ID assigned to the 802.1x-authenticated clients. Click to add the new user. Click with the modifications. Click selected user. Click when you want to remove the to make the settings permanent.
PAGE 79
GigaX Series L2 Managed Switch User Guide 4.8.3 RADIUS In order to use external RADIUS server, the following parameters are required to be setup: • Authentication Server IP: The IP address of the RADIUS server. • Authentication Server Port: The port number for the RADIUS server is listening to. • Authentication Server Key: The key is used for communications between GigaX and the RADIUS server. • Confirm Authentication Key: Re-type the key entered above.
PAGE 80
GigaX Series L2 Managed Switch User’s Guide Figure 51.
PAGE 81
GigaX Series L2 Managed Switch User Guide 4.8.4 Port Security Port security pages include port configuration, port status, and secure MAC addresses function. 4.8.4.1 Port Configuration This page is used to configure various Port Security parameters. The total number of available secure MAC addresses on the switch is 1024. Users can configure the port in the following field: • Port: select the port to make configuration. • Admin: disable/enable port security feature on the port.
PAGE 82
GigaX Series L2 Managed Switch User’s Guide a) Absolute: the secure addresses on the port are deleted after the specified aging time. b) Inactivity: the secure addresses on the port are deleted only if there is no data traffic from the secure source MAC address for the specified time period. Select the corresponding port number and configure the port setting, then button. The content of the display window will click on the update automatically as you make changes. Click on the setting effective.
PAGE 83
GigaX Series L2 Managed Switch User Guide • Port: port number. • Status: a) NoOper: this indicates port security of the port that is configured to be disabled. b) SecureUp: this indicates the port security is operational. c) SecureDown: this indicates the port security is not operational. This happens when the port security is configured to be enabled but can not be operational due to some reasons such as it conflicts with other features.
PAGE 84
GigaX Series L2 Managed Switch User’s Guide Figure 53. Port Status 4.8.4.3 Secure MAC Addresses Users can add a MAC address into the secure MAC address table of one port. The MAC address added in this way will not age out from the secure MAC address table. We call it static secure MAC address. • MAC Address: enter the MAC address. • Port Selection: select the port to which the MAC belongs.
PAGE 85
GigaX Series L2 Managed Switch User Guide Click on after you create a new static MAC address in the above way. Then you will see the newly added entry shown in the address window. . Users can select one port from Port Selection, then click on You will see the current total secure MAC addresses of the port shown in the address window. Users can remove the existed address by selecting the entries with the to remove them.
PAGE 86
GigaX Series L2 Managed Switch User’s Guide 4.9 QoS When you configure the QoS feature, you can select specific network traffic to prioritize it according to its importance. It makes the network performance more predictable and the bandwidth utilization more effective. QoS pages include trust state, mapping, class set, policy set, policy attach, and CoS function. 4.9.1 Trust State This page is used to configure packets classification using port trust states.
PAGE 87
GigaX Series L2 Managed Switch User Guide • CosOverride: disable/enable CoS Override on the port. Cos Override only can be enabled when Trust State is 'No' trust. CoS Override will override the previously configured trust state and apply the default port CoS value to all incoming packets. If a port was previously set to trust DSCP, this command overrides the previously configured trust state, and all the incoming CoS values are assigned to default port CoS value.
PAGE 88
GigaX Series L2 Managed Switch User’s Guide 4.9.2 Mapping This page is used to configure CoS (Classification of Service) and DSCP (Differentiated Services Code Point) mapping. • Map CoS to DSCP: each CoS value can map into one of the DSCP value. Users can use the CoS-to-DSCP map to map CoS values in incoming packets to a DSCP value that QoS uses internally to represent the priority of the traffic. • Map DSCP to CoS: each DSCP value can map into one of the CoS value.
PAGE 89
GigaX Series L2 Managed Switch User Guide 4.9.3 Class Set This configuration page is used to create QoS classes. A class set is a mechanism that you use to isolate a specific traffic flow (or class) from all other traffic. The class set defines the criteria (match mode) used to match a specific traffic flow to further classify it. The criteria can include matching ACL rule in a Filter Set ID or DSCP list. Only one match mode and only one ACL rule for each class set are supported.
PAGE 90
GigaX Series L2 Managed Switch User’s Guide Figure 57.
PAGE 91
GigaX Series L2 Managed Switch User Guide 4.9.4 Policy Set A policy set specifies which class set is acted. Policy actions can include setting a specific DSCP value in the traffic class or specifying traffic rate limitation and the action to take when the traffic is out of traffic rate and burst size. Users can create a policy by giving a name. The policy names cannot be duplicate. The switch only can have 56 policies and 256 policy rules.
PAGE 92
GigaX Series L2 Managed Switch User’s Guide The Policy Edit page is used to create policy actions. The classes that are added to a policy must have the same match type. A policy can only have maximum 6 classes. The following fields are available: • Class ID: select an existed Class ID. • DSCP: select a DSCP value. Incoming packets that match the class ID will be specified the DSCP value to the class ID • Traffic Rate: set the traffic rate. The valid value is from 1 to 125.
PAGE 93
GigaX Series L2 Managed Switch User Guide Click on after you create a new policy action by the above information. Then you will see the new added entry shown in the policy action list. Click on to select the policy action that you want to modify. Editing the policy action, then click on entry shown in the policy action list. Click on . You will see the modified to select the policy action to remove it.
PAGE 94
GigaX Series L2 Managed Switch User’s Guide 4.9.4 Policy Attach A policy does nothing if you don't attach it to any ingress port. You can use this page to attach a policy to ingress ports. A port only can attach one policy. to save the configuration. Click on to Click on refresh the settings to current value. To make the configuration effective, please go to "Save Configuration" page, then click on .
PAGE 95
GigaX Series L2 Managed Switch User Guide Figure 60.
PAGE 96
GigaX Series L2 Managed Switch User’s Guide 4.9.5 CoS The switch supports four CoS queues for each egress port. For each queue, you can specify the scheduling types as follows: • Strict priority scheduling: each CoS value can map into one of the four queues. The queue 4 has the highest priority to transmit the packets. And packets in the low-priority queue do not transmit until all the high-priority queues become empty. In strict priority scheduling, weight settings are always zero.
PAGE 97
GigaX Series L2 Managed Switch User Guide Figure 61. CoS 4.10 Statistics Chart The Statistics Chart pages provide network flow in different charts. You can specify the period time to refresh the chart. You can monitor the network traffic amount in different graphic chart by these pages. Most MIB-II counters are displayed in these charts. Click Refresh Rate to set the period for retrieving new data from the switch. You can differentiate the statistics or ports by selecting Color.
PAGE 98
GigaX Series L2 Managed Switch User’s Guide 4.10.1 Traffic Comparison This page shows the one statistics item for all the ports in one graphic chart. Specify the statistics item to display and click Draw, the browser will show you the update data and refresh the graphic periodically. Figure 62.
PAGE 99
GigaX Series L2 Managed Switch User Guide Figure 63.
PAGE 100
GigaX Series L2 Managed Switch User’s Guide 4.10.2 Error Group Selecting the Port and display Color, then clicking Draw, the statistics window shows you all the discards or error counts for the specified port. The data is updated periodically. Figure 64.
PAGE 101
GigaX Series L2 Managed Switch User Guide 4.10.3 Historical Status You can display information for different ports and statistics items in this chart. Since this shows the history of the statistics information, the line chart keeps the old data even it is refreshed. Figure 65.
PAGE 102
GigaX Series L2 Managed Switch User’s Guide 4.11 Save Configuration To save configuration permanently, you have to click . The setting also takes effective after a successful save. Sometimes you may want to reset the switch configuration, you can click to reset the configuration file to factory default. Of course, a on system reboot will follow this restoration process. You will lose all the configurations when you choose to restore the factory default configurations. Figure 66.
PAGE 103
GigaX Series L2 Managed Switch User Guide 5 Console Interface This chapter describes how to use console interface to configure the switch. The switch provides RS232 and USB connectors to connect your PC. Use a terminal emulator on your PC such as HyperTerminal and command line interpreter to configure the switch. You have to set up the terminal emulator with baud rate 9600, 8 bit data, no parity, and 1 stop bit, and no flow control.
PAGE 104
GigaX Series L2 Managed Switch User’s Guide Figure 67.
PAGE 105
GigaX Series L2 Managed Switch User Guide 5.1.1 Boot ROM Command Mode During the POST process, you can enter a “Boot ROM Command” mode by pressing key as shown in Figure 68. Figure 68 shows dual images in the switch. One firmware is in Slot 0 and the other firmware is in Slot 1. The later version will be selected to boot the system automatically. Enter the “?” key to show the help messages for all available commands.
PAGE 106
GigaX Series L2 Managed Switch User’s Guide Figure 68. Boot ROM Command Mode 5.1.2 Boot ROM Commands Type “?” in the boot mode to display the valid commands list.
PAGE 107
GigaX Series L2 Managed Switch User Guide Table 7. Boot ROM commands Command Parameters Usage Notes d Address [length] Dump memory contents by giving address and length. p NONE Display current boot parameters g NONE Execute firmware, enter CLI mode a NONE Show MAC address b 0 or 1 or a Dual image support. You can choose the firmware to execute by giving a slot ID, or use “a” for auto select. Auto-select will execute the most updated firmware.
PAGE 108
GigaX Series L2 Managed Switch User’s Guide 5.2 Login and Logout By typing “login” to enter the CLI mode, you have to give a valid user name and password. As the first time login, you can enter “admin” as the user name and bypass the password. For security reason, please change the user name and password after login. Once you forget the use name and password, you may contact ASUS support team or erase the whole configuration file in the Boot ROM Command mode.
PAGE 109
GigaX Series L2 Managed Switch User Guide [System Contact] Displays the detail information of contact about the switch. This is an RFC-1213 defined MIB object in System Group, and provides contact information on the managed node. CLI command: sys info contact If you put the contact description in the contact description field, the switch contact will change to the new one. [System Location] Displays the physical location of the switch.
PAGE 110
GigaX Series L2 Managed Switch User’s Guide CLI command: net interface vlan sw0 [DHCP Client] Enable DHCP to get a dynamic IP address, or disable DHCP to specify a static IP address. If you enable DHCP, you can renew or release the IP address for the switch, and use show command to display the dynamic IP address. CLI command: net interface dhcp sw0 [IP Address] Displays the static IP address for the switch. This IP address is used for manageable purpose, i.
PAGE 111
GigaX Series L2 Managed Switch User Guide CLI command: sys web set [New Password] [Verify Password] The default user name is admin. By default, a password is not required. You may set a password by configuring these fields. CLI command: sys users modify user name (old user name, ‘admin’ by default): password (old password ): [Reboot] User can reboot the switch by issuing the reboot command.
PAGE 112
GigaX Series L2 Managed Switch User’s Guide [Flow Control] [Enable/Disable] Displays the IEEE802.3x flow control setting of a port. Note that this flow control is operating only in full duplex mode. CLI command: l2 port flow [Retrieve] Restores the previous port settings from the configuration file. CLI command: sys l2 port retrieve 5.3.
PAGE 113
GigaX Series L2 Managed Switch User Guide Bridge Priority (0..61440):[ old Bridge Priority] [Priority] [Path Cost] [Edge Port] [Point-to-point] Displays the current STP/RSTP ports parameters setting. CLI command: l2 stp port set Port Settings (all,…):[all]