Administrator's GuideTable of ContentsProSafe 7000 Managed Switch Release 8.0.31Table of Contents31. Documentation Resources82. VLANs9Create Two VLANs10CLI: Create Two VLANS10Web Interface: Create Two VLANS10Assign Ports to VLAN212CLI: Assign Ports to VLAN212Web Interface: Assign Ports to VLAN212Assign Ports to VLAN313CLI: Assign Ports to VLAN313Web Interface: Assign Ports to VLAN314Assign VLAN3 as the Default VLAN for Port 1/0/215CLI: Assign VLAN3 as the Default VLAN for Port 1/0/215Web Interface: Assign VLAN3 as the Default VLAN for Port 1/0/215Create a MAC-Based VLAN16CLI: Create a MAC-Based VLAN16Web Interface: Assign a MAC-Based VLAN17Create a Protocol-Based VLAN19CLI: Create a Protocol-Based VLAN19Web Interface: Create a Protocol-Based VLAN20Virtual VLANs: Create an IP Subnet–Based VLAN21CLI: Create an IP Subnet–Based VLAN22Web Interface: Create an IP Subnet–Based VLAN23Voice VLANs24CLI: Configure Voice VLAN and Prioritize Voice Traffic25Web Interface: Configure Voice VLAN and Prioritize Voice Traffic273. LAG s34Create Two LAGs35CLI: Create Two LAGs35Web Interface: Create Two LAGs35Add Ports to LAGs36CLI: Add Ports to the LAGs36Web Interface: Add Ports to LAGs37Enable Both LAGs38CLI: Enable Both LAGs38Web Interface: Enable Both LAGs384. Port Routing39Port Routing Configuration40Enable Routing for the Switch41CLI: Enable Routing for the Switch41Web Interface: Enable Routing for the Switch41Enable Routing for Ports on the Switch41CLI: Enable Routing for Ports on the Switch42Web Interface: Enable Routing for Ports on the Switch42Add a Default Route44CLI: Add a Default Route44Web Interface: Add a Default Route44Add a Static Route45CLI: Add a Static Route45Web Interface: Add a Static Route465. VLAN Routing47Create Two VLANs47CLI: Create Two VLANs48Web Interface: Create Two VLANs49Set Up VLAN Routing for the VLANs and the Switch52CLI: Set Up VLAN Routing for the VLANs and the Switch52Web Interface: Set Up VLAN Routing for the VLANs and the Switch536. RIP54Routing for the Switch55CLI: Enable Routing for the Switch55Web Interface: Enable Routing for the Switch55Routing for Ports56CLI: Enable Routing and Assigning IP Addresses for Ports 1/0/2 and 1/0/356Web Interface: Enable Routing for the Ports56RIP for the Switch57CLI: Enable RIP on the Switch57Web Interface: Enableg RIP on the Switch58RIP for Ports 1/0/2 and 1/0/358CLI: Enable RIP for Ports 1/0/2 and 1/0/358Web Interface: Enable RIP for Ports 1/0/2 and 1/0/359VLAN Routing with RIP60CLI: Configure VLAN Routing with RIP Support60Web Interface: Configure VLAN Routing with RIP Support627. OSPF64Inter-area Router65CLI: Configure an Inter-area Router65Web Interface: Configure an Inter-area Router67OSPF on a Border Router70CLI: Configure OSPF on a Border Router70Web Interface: Configure OSPF on a Border Router71Stub Areas75CLI: Configure Area 1 as a Stub Area on A176Web Interface: Configure Area 1 as a Stub Area on A177CLI: Configure Area 1 as a Stub Area on A280Web Interface: Configure Area 1 as a Stub Area on A281nssa Areas84CLI: Configure Area 1 as an nssa Area84Web Interface: Configure Area 1 as an nssa Area on A185CLI: Configure Area 1 as an nssa Area on A288Web Interface: Configure Area 1 as an nssa Area on A290VLAN Routing OSPF93CLI: Configure VLAN Routing OSPF94Web Interface: Configure VLAN Routing OSPF95OSPFv398CLI: Configure OSPFv398Web Interface: Configure OSPFv31008. ARP103Proxy ARP Examples103CLI: show ip interface103CLI: ip proxy-arp104Web Interface: Configure Proxy ARP on a Port1049. VRRP105VRRP on a Master Router106CLI: Configure VRRP on a Master Router106Web Interface: Configure VRRP on a Master Router107VRRP on a Backup Router108CLI: Configure VRRP on a Backup Router108Web Interface: Configure VRRP on a Backup Router10910. ACLs111MAC ACLs112IP ACLs112ACL Configuration112Set Up an IP ACL with Two Rules113CLI: Set Up an IP ACL with Two Rules113Web Interface: Set Up an IP ACL with Two Rules114One-Way Access Using a TCP Flag in an ACL117CLI:Configure One-Way Access Using a TCP Flag in an ACL117Web Interface: Configure One-Way Access Using a TCP Flag in an ACL121Use ACLs to Configure Isolated VLANs on a Layer 3 Switch132CLI: Configure One-Way Access Using a TCP Flag in ACL Commands133Web Interface: Configure One-Way Access Using a TCP Flag in an ACL135Set up a MAC ACL with Two Rules144CLI: Set up a MAC ACL with Two Rules144Web Interface: Set up a MAC ACL with Two Rules145ACL Mirroring147CLI: Configure ACL Mirroring147Web Interface: Configure ACL Mirroring148ACL Redirect152CLI: Redirect a Traffic Stream152Web Interface: Redirect a Traffic Stream153Configure IPv6 ACLs157CLI: Configure an IPv6 ACL158Web Interface: Configure an IPv6 ACL16011. CoS Queuing164CoS Queue Mapping165Trusted Ports165Untrusted Ports165CoS Queue Configuration166Show classofservice Trust166CLI: Show classofservice Trust166Web Interface: Show classofservice Trust167Set classofservice Trust Mode167CLI: Set classofservice Trust Mode167Web Interface: Set classofservice Trust Mode167Show classofservice IP-Precedence Mapping168CLI: Show classofservice IP-Precedence Mapping168Web Interface: Show classofservice ip-precedence Mapping168Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode169CLI: Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode169Web Interface: Configure CoS-queue Min-bandwidth and Strict Priority Scheduler Mode169Set CoS Trust Mode for an Interface170CLI: Set CoS Trust Mode for an Interface171Web Interface: Set CoS Trust Mode for an Interface171Configure Traffic Shaping171CLI: Configure traffic-shape172Web Interface: Configure Traffic Shaping17212. DiffServ173DiffServ174CLI: Configure DiffServ175Web Interface: Configure DiffServ177DiffServ for VoIP190CLI: Configure DiffServ for VoIP190Web Interface: Diffserv for VoIP192Auto VoIP197CLI: Configure Auto VoIP198Web Interface: Configure Auto-VoIP200DiffServ for IPv6201CLI: Configure DiffServ for IPv6201Web Interface: Configure DiffServ for IPv6202Color Conform Policy208CLI: Configure a Color Conform Policy208Web Interface: Configure a Color Conform Policy20913. IGMP Snooping and Querier216IGMP Snooping216CLI: Enable IGMP Snooping216Web Interface: Enable IGMP Snooping217Show igmpsnooping217CLI: Show igmpsnooping217Web Interface: Show igmpsnooping218Show mac-address-table igmpsnooping218CLI: Show mac-address-table igmpsnooping218Web Interface: Show mac-address-table igmpsnooping219External Multicast Router219CLI: Configure the Switch with an External Multicast Router219Web Interface: Configure the Switch with an External Multicast Router220Multicast Router Using VLAN220CLI: Configure the Switch with a Multicast Router Using VLAN220Web Interface: Configure the Switch with a Multicast Router Using VLAN221IGMP Querier221Enable IGMP Querier222CLI: Enable IGMP Querier222Web Interface: Enable IGMP Querier223Show IGMP Querier Status225CLI: Show IGMP Querier Status225Web Interface: Show IGMP Querier Status22514. Security Management226Port Security226Set the Dynamic and Static Limit on Port 1/0/1227CLI: Set the Dynamic and Static Limit on Port 1/0/1227Web Interface: Set the Dynamic and Static Limit on Port 1/0/1228Convert the Dynamic Address Learned from 1/0/1 to a Static Address229CLI: Convert the Dynamic Address Learned from 1/0/1 to the Static Address229Web Interface: Convert the Dynamic Address Learned from 1/0/1 to the Static Address229Create a Static Address230CLI: Create a Static Address230Web Interface: Create a Static Address230Protected Ports230CLI: Configure a Protected Port to Isolate Ports on the Switch231Web Interface: Configure a Protected Port to Isolate Ports on the Switch233802.1x Port Security237CLI: Authenticating dot1x Users by a RADIUS Server237Web Interface: Authenticating dot1x Users by a RADIUS Server238Create a Guest VLAN243CLI: Create a Guest VLAN244Web Interface: Create a Guest VLAN245Assign VLANs Using RADIUS248CLI: Assign VLANS Using RADIUS249Web Interface: Assign VLANS Using RADIUS251Dynamic ARP Inspection254CLI: Configure Dynamic ARP Inspection255Web Interface: Configure Dynamic ARP Inspection256Static Mapping260CLI: Configure Static Mapping260Web Interface: Configure Static Mapping261DHCP Snooping262CLI: Configure DHCP Snooping262Web Interface: Configure DHCP Snooping263Enter Static Binding into the Binding Database265CLI: Enter Static Binding into the Binding Database265Web Interface: Enter Static Binding into the Binding Database266Maximum Rate of DHCP Messages266CLI: Configure the Maximum Rate of DHCP Messages267Web Interface: Configure the Maximum Rate of DHCP Messages267IP Source Guard268CLI: Configure Dynamic ARP Inspection268Web Interface: Configure Dynamic ARP Inspection26915. SNTP273Show SNTP (CLI Only)273show sntp273show sntp client274show sntp server274Configure SNTP275CLI: Configure SNTP275Web Interface: Configure SNTP276Set the Time Zone (CLI Only)277Set the Named SNTP Server277CLI: Set the Named SNTP Server278Web Interface: Set the Named SNTP Server27816. Tools280Traceroute280CLI: Traceroute281Web Interface: Traceroute282Configuration Scripting282script283script list and script delete283script apply running-config.scr284Create a Configuration Script284Upload a Configuration Script284Pre-Login Banner285Create a Pre-Login Banner (CLI Only)285Port Mirroring286CLI: Specify the Source (Mirrored) Ports and Destination (Probe)286Web Interface: Specify the Source (Mirrored) Ports and Destination (Probe)287Dual Image287CLI: Download a Backup Image and Make It Active288Web Interface: Download a Backup Image and Make It Active289Outbound Telnet290CLI: show network291CLI: show telnet291CLI: transport output telnet292Web Interface: Configure Telnet292CLI: Configure the session-limit and session-timeout293Web Interface: Configure the Session Timeout29317. Syslog294Show Logging295CLI: Show Logging295Web Interface: Show Logging295Show Logging Buffered297CLI: Show Logging Buffered297Web Interface: Show Logging Buffered298Show Logging Traplogs298CLI: Show Logging Traplogs298Web Interface: Show Logging Trap Logs298Show Logging Hosts299CLI: Show Logging Hosts299Web Interface: Show Logging Hosts300Configure Logging for a Port300CLI: Configure Logging for the Port300Web Interface: Configure Logging for the Port30118. Switch Stacks302Switch Stack Management and Connectivity302The Stack Master and Stack Members303Stack Master303Stack Members304Stack Member Numbers304Stack Member Priority Values305Install and Power-up a Stack305Compatible Switch Models305Install a Switch Stack306Switch Firmware306Code Mismatch307Upgrade the Firmware307Migrate Configuration with a Firmware Upgrade307Copy Master Firmware to a Stack Member (Web Interface)308Configure a Stacking Port as an Ethernet Port308CLI: Configure a Stacking Port as an Ethernet Port309Web Interface: Configure a Stacking Port as an Ethernet Port310Stack Switches Using 10G Fiber311CLI: Stack Switches Using 10G Fiber312Web Interface: Stack Switches Using 10G Fiber313Add, Remove, or Replace a Stack Member314Add Switches to an Operating Stack314Remove a Switch from the Stack315Replace a Stack Member315Switch Stack Configuration Files316Preconfigure a Switch317Renumber Stack Members318CLI: Renumber Stack Members318Web Interface: Renumber Stack Members319Move the Stack Master to a Different Unit320CLI: Move the Stack Master to a Different Unit320Web Interface: Move the Stack Master to a Different Unit32019. SNMP321Add a New Community321CLI: Add a New Community321Web Interface: Add a New Community322Enable SNMP Trap322CLI: Enable SNMP Trap322Web Interface: Enable SNMP Trap323SNMP V3323CLI: Configure SNMP V3324Web Interface: Configure SNMP V3324sFlow325CLI: Configure Statistical Packet-Based Sampling of Packet Flows with sFlow326Web Interface: Configure Statistical Packet-based Sampling with sFlow327Time-Based Sampling of Counters with sFlow329CLI: Configure Time-Based Sampling of Counters with sFlow329Web Interface: Configure Time-Based Sampling of Counters with sFlow32920. DNS330Specify Two DNS Servers330CLI: Specify Two DNS Servers330Web Interface: Specify Two DNS Servers331Manually Add a Host Name and an IP Address331CLI: Manually Add a Host Name and an IP Address331Web Interface: Manually Add a Host Name and an IP Address33221. DHCP Server333Configure a DHCP Server in Dynamic Mode333CLI: Configure a DHCP Server in Dynamic Mode333Web Interface: Configure a DHCP Server in Dynamic Mode334Configure a DHCP Reservation336CLI: Configure a DHCP Reservation337Web Interface: Configure a DHCP Reservation33722. Double VLANs and Private VLAN Groups339Double VLANs339CLI: Enable a Double VLAN340Web Interface: Enable a Double VLAN340Private VLAN Groups343CLI: Create a Private VLAN Group345Web Interface: Create a Private VLAN Group34623. Spanning Tree Protocol350Configure Classic STP (802.1d)350CLI: Configure Classic STP (802.1d)350Web Interface: Configure Classic STP (802.1d)351Configure Rapid STP (802.1w)352CLI: Configure Rapid STP (802.1w)352Web Interface: Configure Rapid STP (802.1w)352Configure Multiple STP (802.1s)353CLI: Configure Multiple STP (802.1s)353Web Interface: Configure Multiple STP (802.1s)35424. Tunnel356CLI: Create a Tunnel357Configure Switch GSM7328S_1357Configure Switch GSM7328S_2358Web Interface: Create a Tunnel359Configure Switch GSM7328S_1359Configure Switch GSM7328S_236125. IPv6 Interface Configuration364Create an IPv6 Routing Interface364CLI: Create an IPv6 Routing Interface364Web Interface: Create an IPv6 Routing Interface365Create an IPv6 Network Interface366CLI: Configure the IPv6 Network Interface367Web Interface: Configure the IPv6 Network Interface367Create an IPv6 Routing VLAN368CLI: Create an IPv6 Routing VLAN368Web Interface: Create an IPv6 VLAN Routing Interface37026. PIM373PIM-DM373CLI: Configure PIM-DM375Web Interface: Configure PIM-DM379PIM-SM397CLI: Configure PIM-SM398Web Interface: Configure PIM-SM40227. DHCP L2 Relay and L3 Relay424DHCP L2 Relay424CLI: Enable DHCP L2 Relay425Web Interface: Enable DHCP L2 Relay426DHCP L3 Relay430CLI: Configure a DHCP Server430Web Interface: Configure a DHCP Server431Confige a DHCP L3 Relay434CLI: Configure a DHCP L3 Relay434Web Interface: Configure a DHCP L3 Relay43528. MLD438Configure MLD439CLI: Configure MLD439Web Interface: Configure MLD441MLD Snooping452CLI: Configure MLD Snooping453Web Interface: Configure MLD Snooping45429. DVMRP457CLI: Configure DVMRP458Web Interface: Configure DVMRP46430. Captive Portal475Captive Portal Configuration476Enable Captive Portal476CLI: Enable Captive Portal476Web Interface: Enable Captive Portal477Client Access, Authentication, and Control478Block a Captive Portal Instance479CLI: Block a Captive Portal Instance479Web Interface: Block a Captive Portal Instance479Local Authorization, Create Users and Groups479CLI: Create Users and Groups480Web Interface: Create Users and Groups480Remote Authorization (RADIUS) User Configuration481CLI: Configure RADIUS as the Verification Mode482Web Interface: Configure RADIUS as the Verification Mode483SSL Certificates483Index484Size: 11.8 MBPages: 486Language: EnglishOpen manual