Quick Setup GuideTable of ContentsChapter 1: Introduction21Overview21Switch Architecture22Network Management Options22Description of Hardware2210/100/1000BASE-T Ports22SFP Slots23Status LEDs24Setting Stacking/Standalone Modes26Optional Backup Power Supply27Power Supply Receptacles27Features and Benefits28Connectivity28Expandability28Performance28Management28Chapter 2: Installing the Switch29Selecting a Site29Ethernet Cabling29Equipment Checklist30Package Contents30Optional Rack-Mounting Equipment30Mounting31Rack Mounting31Desktop or Shelf Mounting32Installing an Optional SFP Transceiver into the Switch33Connecting to a Power Source33Connecting the BPS to the Switch34Installation Instructions in German34Eine Site Auswählen34Montage35Rack-Montage35Chapter 3: Making Network Connections37Connecting Network Devices37Twisted-Pair Devices37Cabling Guidelines37Connecting to PCs, Servers, Hubs and Switches37Network Wiring Connections38Fiber Optic SFP Devices39Connectivity Rules401000BASE-T Cable Requirements401000 Mbps Gigabit Ethernet Collision Domain40100 Mbps Fast Ethernet Collision Domain4110 Mbps Ethernet Collision Domain41Cable Labeling and Connection Records42Appendix A: Troubleshooting43Diagnosing Switch Indicators43Power and Cooling Problems43Installation43In-Band Access43Appendix B: Cables45Twisted-Pair Cable and Pin Assignments4510BASE-T/100BASE-TX Pin Assignments451000BASE-T Pin Assignments46Cable Testing for Existing Category 5 Cable46Adjusting Existing Category 5 Cabling to Run 1000BASE-T47Fiber Standards47Appendix C: Specifications49Physical Characteristics49Compliances51Glossary53Index57Size: 467 KBPages: 60Language: EnglishOpen manual
User GuideTable of ContentsChapter 1: Introduction25Key Features25Description of Software Features27System Defaults33Chapter 2: Initial Configuration37General Configuration Information38Auto-Negotiation39Device Port Default Settings39Booting the Switch40Configuration Overview42Initial Configuration42Static IP Address and Subnet Mask42User Name43SNMP Community Strings43Advanced Configuration45Retrieving an IP Address From a DHCP Server45Receiving an IP Address From a BOOTP Server46Security Management and Password Configuration47Configuring Security Passwords Introduction47Configuring an Initial Console Password48Configuring an Initial Telnet Password48Configuring an Initial SSH password48Configuring an Initial HTTP Password49Configuring an initial HTTPS Password49Software Download and Reboot49Software Download through XModem49Software Download Through TFTP Server50Boot Image Download51Startup Menu Functions52Chapter 3: Configuring the Switch57Using the Web Interface57Navigating the Web Browser Interface57Home Page57Configuration Options58Panel Display59Main Menu59Managing Device Information60Managing Stacking61Understanding the Stack Topology62Stacking Failover Topology62Stacking Members and Unit ID62Removing and Replacing Stacking Members63Exchanging Stacking Members64Switching between the Stacking Master and the Secondary Master64Configuring Stacking65Resetting the Stack66Managing System Logs67Enabling System Logs67Viewing Memory Logs69Viewing the Device FLASH Logs71Remote Log Configuration72Configuring SNTP75Polling for Unicast Time Information75Polling for Anycast Time Information75Polling For Broadcast Time Information76Defining SNTP Global Settings76Defining SNTP Authentication77Defining SNTP Servers78Defining SNTP Interface Settings80Configuring System Time81Configuring Daylight Savings Time81Managing System Files85Downloading System Files86Uploading System Files88Copying Files89Active Image90TCAM Resources91Configuring Interfaces93Configuring Interface Connections93Creating Trunks (LAGs)96Configuring LACP97Displaying Port Statistics99Interface Statistics100Etherlike Statistics101Configuring IP Information104Defining IP Addresses104Defining Default Gateways105Configuring DHCP106Configuring ARP107Configuring Domain Name Service109Configuring General DNS Server Parameters110Configuring Static DNS Host to Address Entries111Configuring SNMP112Enabling SNMP113Defining SNMP Users114Defining SNMP Group Profiles116Defining SNMP Views117Defining SNMP Communities119Defining SNMP Notification Recipients120Defining SNMP Notification Global Parameters122Defining SNMP Notification Filters124Configuring User Authentication125Defining Local Users Passwords125Defining Line Passwords126Defining Enable Passwords127Configuring Authentication Methods128Defining Access Profiles128Defining Profile Rules131Defining Authentication Profiles133Mapping Authentication Methods136Defining TACACS+ Methods138Defining RADIUS Settings139Managing RMON Statistics142Viewing RMON Statistics142Defining RMON History Control144Viewing the RMON History Table145Defining RMON Events Control148Viewing the RMON Events Logs149Defining RMON Alarms150Alcatel Mapping Adjacency Protocol (AMAP)152Configuring AMAP152Viewing Adjacent Devices154Configuring LLDP155Defining LLDP Port Settings156Defining Media Endpoint Discovery Network Policy157Defining LLDP MED Port Settings158Viewing the LLDP Neighbor Information159Viewing Neighbor Information Details160Managing Power-over-Ethernet Devices163Defining PoE System Information163Defining PoE Interfaces164Device Diagnostic Tests166Configuring Port Mirroring166Viewing Integrated Cable Tests168Viewing Optical Transceivers169Viewing Device Health171Configuring Traffic Control173Enabling Storm Control173Configuring Port Security175802.1X Port-Based Authentication177Advanced Port-Based Authentication178Defining Network Authentication Properties179Defining Port Authentication181Modify Port Authentication Page182Configuring Multiple Hosts184Defining Authentication Hosts186Viewing EAP Statistics188Defining Access Control Lists191Configuring Access Control Lists191Binding Device Security ACLs192Defining IP Based Access Control Lists193Defining MAC Based Access Control Lists195DHCP Snooping197DHCP Snooping Properties198Defining DHCP Snooping on VLANs199Defining Trusted Interfaces200Binding Addresses to the DHCP Snooping Database201Configuring Option 82202Dynamic ARP Inspection203ARP Inspection Properties204ARP Inspection Trusted Interface Settings205Defining ARP Inspection List206Assigning ARP Inspection VLAN Settings207IP Source Guard208Configuring IP Source Guard Properties209Defining IP Source Guard Interface Settings209Adding Interfaces to the IP Source Guard Database210Defining the Forwarding Database212Defining Static Forwarding Database Entries212Defining Dynamic Forwarding Database Entries213Configuring Spanning Tree215Defining Spanning Tree216Defining STP on Interfaces218Defining Rapid Spanning Tree221Defining Multiple Spanning Tree223Defining MSTP Instance Settings224Defining MSTP Interface Settings225Configuring VLANs228Assigning Ports to VLANs228Tagged/Untagged VLANs230Displaying Basic VLAN Information230Defining VLAN Membership231Defining VLAN Interface Settings234Defining Customer Mapping for Multicast TV235Mapping CPE VLANs236Defining VLAN Groups237Configuring MAC Based VLAN Groups237Configuring Subnet Based VLAN Groups238Configuring Protocol Based VLAN Groups239Mapping Groups to VLANs240Defining GARP241Defining GVRP243Viewing GVRP Statistics244Multicast Filtering247Defining IGMP Snooping247Specifying Static Interfaces for a Multicast Group249Displaying Interfaces Attached to a Multicast Router251Configuring Multicast TV252Defining Multicast TV Membership253Configuring Triple Play254Configuring Quality of Service255Access Control Lists256Mapping to Queues257QoS Modes258Enabling QoS259Defining Global Queue Settings260Defining Bandwidth Settings261Configuring VLAN Rate Limit263Mapping CoS Values to Queues264Mapping DSCP Values to Queues265Defining Basic QoS Settings266Defining QoS DSCP Rewriting Settings267Defining QoS DSCP Mapping Settings268Defining QoS Class Maps269Defining Policies270Defining Tail Drop272Viewing the Policy Table272Viewing Policy Bindings274Chapter 4: Command Line Interface277Using the Command Line Interface277Accessing the CLI277Console Connection277Telnet Connection277Entering Commands279Keywords and Arguments279Minimum Abbreviation279Command Completion279Getting Help on Commands279Partial Keyword Lookup281Negating the Effect of Commands281Using Command History281Understanding Command Modes281Exec Commands282Configuration Commands282Command Line Processing283Command Groups285802.1x Commands287aaa authentication dot1x288dot1x system-auth-control289dot1x port-control290dot1x re-authentication291dot1x timeout re-authperiod292dot1x re-authenticate293dot1x timeout quiet-period293dot1x timeout tx-period294dot1x max-req295dot1x timeout supp-timeout296dot1x timeout server-timeout297show dot1x298show dot1x users301show dot1x statistics303ADVANCED FEATURES305dot1x auth-not-req305dot1x multiple-hosts306dot1x single-host-violation307dot1x guest-vlan308dot1x guest-vlan enable309dot1x mac-authentication309show dot1x advanced310AAA Commands312aaa authentication login312aaa authentication enable314login authentication315enable authentication316ip http authentication317ip https authentication318show authentication methods318password320enable password320username321show users accounts322ACL Commands324ip-access-list324permit (ip)325deny (IP)328mac access-list330permit (MAC)331deny (MAC)332service-acl334show access-lists334show interfaces access-lists335Address Table Commands337bridge address338bridge multicast filtering339bridge multicast address340bridge multicast forbidden address341bridge multicast forward-all342bridge multicast forbidden forward-all343bridge aging-time344clear bridge344port security345port security mode345port security max346port security routed secure-address347show bridge address-table348show bridge address-table static349show bridge address-table count350show bridge multicast address-table351show bridge multicast address-table static352show bridge multicast filtering353show ports security354show ports security addresses355LLDP Commands357lldp optional-tlv357lldp med enable358lldp med network-policy (global)358lldp med network-policy (interface)359lldp med location359clear lldp rx360show lldp configuration361show lldp med configuration361show lldp local362show lldp neighbors364AMAP Commands369amap enable369amap discovery time370amap common time370show amap370Clock Commands372clock set373clock source374clock timezone374clock summer-time375sntp authentication-key377sntp authenticate377sntp trusted-key378sntp client poll timer379sntp broadcast client enable380sntp anycast client enable381sntp client enable (Interface)381sntp unicast client enable382sntp unicast client poll383sntp server384show clock385show sntp configuration386show sntp status387Configuration and Image File Commands389copy389delete392dir393more394rename395boot system396show running-config397show startup-config397show bootvar398Ethernet Configuration Commands400interface ethernet400interface range ethernet401shutdown402description403speed404duplex405negotiation406flowcontrol407mdix407back-pressure408clear counters409set interface active410show interfaces advertise410show interfaces configuration412show interfaces status414show interfaces description416show interfaces counters416port storm-control broadcast enable419port storm-control broadcast rate420show ports storm-control421GVRP Commands423gvrp enable (Global)423gvrp enable (Interface)424garp timer425gvrp vlan-creation-forbid426gvrp registration-forbid426clear gvrp statistics427show gvrp configuration428show gvrp statistics429show gvrp error-statistics430IGMP Snooping Commands432ip igmp snooping (Global)432ip igmp snooping (Interface)433ip igmp snooping host-time-out434ip igmp snooping mrouter-time-out434ip igmp snooping leave-time-out435ip igmp snooping multicast-tv436ip igmp snooping querier enable437ip igmp snooping querier address437ip igmp snooping querier version438show ip igmp snooping mrouter438show ip igmp snooping interface439show ip igmp snooping groups440IP Addressing Commands442ip address442ip address dhcp443ip default-gateway444show ip interface445arp446arp timeout447clear arp-cache448show arp448ip domain-lookup449ip domain-name450ip name-server450ip host451clear host452clear host dhcp453show hosts453LACP Commands455lacp system-priority455lacp port-priority456lacp timeout456show lacp ethernet457show lacp port-channel459Line Commands461line461speed462autobaud463exec-timeout463history464history size464terminal history465terminal history size466show line467Management ACL Commands469management access-list469permit (Management)470deny (Management)471management access-class472show management access-list473show management access-class474PHY Diagnostics Commands475test copper-port tdr475show copper-ports tdr476show copper-ports cable-length476show fiber-ports optical-transceiver477Port Channel Commands479interface port-channel479interface range port-channel479channel-group480show interfaces port-channel481Port Monitor Commands482port monitor482show ports monitor483Power over Ethernet Commands484power inline484power inline powered-device485power inline priority486power inline usage-threshold486power inline traps enable487show power inline488QoS Commands491qos492show qos493class-map493show class-map494match495policy-map496class496rate-limit497rate-limit (VLAN)498show policy-map498trust cos-dscp499set500police501service-policy502qos aggregate-policer502show qos aggregate-policer504police aggregate505wrr-queue cos-map505priority-queue out num-of-queues506traffic-shape507show qos interface508qos wrr-queue threshold510qos map dscp-dp511qos map policed-dscp511qos map dscp-queue512qos trust (Global)513qos trust (Interface)514qos cos514qos dscp-mutation515qos map dscp-mutation516show qos map517RADIUS Commands519radius-server host519radius-server key521radius-server retransmit521radius-server source-ip522radius-server timeout523radius-server deadtime524show radius-servers525RMON Commands527show rmon statistics527rmon collection history529show rmon collection history530show rmon history531rmon alarm534show rmon alarm-table535show rmon alarm536rmon event538show rmon events538show rmon log539rmon table-size541SNMP Commands542snmp-server community543snmp-server view544snmp-server group545snmp-server user546snmp-server engineID local547snmp-server enable traps549snmp-server filter549snmp-server host550snmp-server v3-host552snmp-server trap authentication553snmp-server contact553snmp-server location554snmp-server set555show snmp555show snmp engineid557show snmp views558show snmp groups559show snmp filters560show snmp users560Spanning-Tree Commands562spanning-tree563spanning-tree mode564spanning-tree forward-time565spanning-tree hello-time566spanning-tree max-age567spanning-tree priority568spanning-tree disable568spanning-tree cost569spanning-tree port-priority570spanning-tree portfast571spanning-tree link-type572spanning-tree pathcost method573spanning-tree bpdu574clear spanning-tree detected-protocols575spanning-tree mst priority575spanning-tree mst max-hops576spanning-tree mst port-priority577spanning-tree mst cost578spanning-tree mst configuration580instance (mst)580name (mst)582revision (mst)582show (mst)583exit (mst)585abort (mst)585spanning-tree guard root586spanning-tree bpduguard587dot1x bpdu587show dot1x bpdu588show spanning-tree588SSH Commands604ip ssh port604ip ssh server605crypto key generate dsa605crypto key generate rsa606ip ssh pubkey-auth607crypto key pubkey-chain ssh608user-key609key-string610show ip ssh611show crypto key mypubkey612show crypto key pubkey-chain ssh613Syslog Commands615logging on615logging616logging console617logging buffered618logging buffered size619clear logging619logging file620clear logging file621aaa logging621file-system logging622management logging622show logging623show logging file625show syslog-servers627System Management Commands628ping628traceroute630telnet632resume635reload636hostname636stack master637stack reload638stack display-order638show stack639show users641show sessions641show system642show version643service cpu-utilization644show cpu utilization645TACACS+ Commands646tacacs-server host646tacacs-server key647tacacs-server timeout648tacacs-server source-ip649show tacacs649Triple Play Commands651switchport customer vlan651switchport customer multicast-tv vlan651ip igmp snooping map cpe vlan652show ip igmp snooping cpe vlans653show ip igmp snooping interface653DHCP Snooping, IP Source Guard and ARP Inspection Commands655ip dhcp snooping656ip dhcp snooping vlan657ip dhcp snooping trust658ip dhcp information option allowed-untrusted658ip dhcp information option659ip dhcp snooping verify659ip dhcp snooping database660ip dhcp snooping database update-freq660ip dhcp snooping binding661clear ip dhcp snooping database662show ip dhcp snooping662show ip dhcp snooping binding663ip source-guard (global)664ip source-guard (interface)664ip source-guard binding665ip source-guard tcam retries-freq666ip source-guard tcam locate667show ip source-guard667show ip source-guard inactive668ip arp inspection669ip arp inspection vlan670ip arp inspection trust670ip arp inspection validate671ip arp inspection list create672ip mac672ip arp inspection list assign673ip arp inspection logging interval674show ip arp inspection674show ip arp inspection list675User Interface Commands676do676enable677disable678login678configure679exit (Configuration)679exit680end681help681terminal datadump682show history683show privilege683VLAN Commands685vlan database686vlan687default-vlan vlan688interface vlan688interface range vlan689name690map protocol protocols-group690switchport general map protocols-group vlan691switchport mode692switchport access vlan693switchport trunk allowed vlan694switchport trunk native vlan695switchport general allowed vlan696switchport general pvid697switchport general ingress-filtering disable698switchport general acceptable-frame-type tagged-only699switchport forbidden vlan700map mac macs-group701switchport general map macs-group vlan701map subnet subnets-group702switchport general map subnets-group vlan703switchport protected704ip internal-usage-vlan705show vlan706show vlan internal usage707show interfaces switchport708switchport access multicast-tv vlan711show vlan protocols-groups712show vlan macs-groups712show vlan subnets-groups713show vlan multicast-tv714Web Server Commands715ip http server715ip http port716ip http exec-timeout717ip https server717ip https port718ip https exec-timeout719crypto certificate generate719crypto certificate request720crypto certificate import722ip https certificate723show crypto certificate mycertificate723show ip http724show ip https725Appendix A. Configuration Examples727Configuring QinQ728Configuring Customer VLANs using the CLI731Configuring Multicast TV733Configuring Customer VLANs740Configuring Customer VLANs Using the Web Interface740Appendix B. Software Specifications745Software Features745Management Features746Standards746Management Information Bases747Appendix C. Troubleshooting749Problems Accessing the Management Interface749Using System Logs750Appendix D. Glossary751Size: 6.44 MBPages: 762Language: EnglishOpen manual