Document Outline

• 1. INTRODUCTION
  • Packet Contents
  • How to Use This Manual
  • Product Feature
  • Product Specification
• 2. INSTALLATION
  • 2.1 Product Description
    • 2.1.1 Product Overview
    • 2.1.2 Switch Front Panel
    • 2.1.3 LED Indications
    • 2.1.4 Switch Rear Panel
  • 2.2 Install the Switch
    • 2.2.1 Desktop Installation
    • 2.2.2 Rack Mounting
    • 2.2.3 Installing the SFP transceiver
• 3. CONFIGURATION
  • 3.1 Management Access Overview
    • 3.1.1 Administration Console
    • 3.1.2 Direct Access
  • 3.2 Web Management
  • 3.3 SNMP-Based Network Management
  • 3.4 Protocols
    • 3.4.1 Virtual Terminal Protocols
    • 3.4.2 SNMP Protocol
    • 3.4.3 Management Architecture
• 4. Web Configuration
  • 4.1 Main Screen
  • 4.2 System
    • 4.2.1 Information
    • 4.2.2 IP Config
    • 4.2.3 SNTP
  • 4.3 Port Configuration
    • 4.3.1 Port Settings
    • 4.3.2 Link Aggregation
    • 4.3.3 LACP Config
  • 4.4 VLAN Configuration
    • 4.4.1 Create VLAN
    • 4.4.2 Port Config
    • 4.4.3 VLAN Group
    • 4.4.4 GVRP Config
  • 4.5. Spanning Tree
    • 4.5.1 STP Config
    • 4.5.2 STP Port Config
    • 4.5.3 RSTP Port Config
    • 4.5.4 MSTP Config
    • 4.5.5 MSTP Instance Config
    • 4.5.6 MSTP Interface Settings
  • 4.6 Multicast
    • 4.6.1 IGMP Snooping
    • 4.6.2 Bridge Multicast
  • 4.7 QoS
    • 4.7.1 Queue Scheduling
    • 4.7.2 802.1p Settings
    • 4.7.3 DSCP Settings
    • 4.7.4 Rate Limit
    • 4.7.5 Port Qos
    • 4.7.6 Policy Qos
  • 4.8 Access Control
    • 4.8.1 Layer3 Based ACL
    • 4.8.2 Layer2 Based ACL
  • 4.9 Security
    • 4.9.1 ACL Binding
    • 4.9.2 Radius Config
    • 4.9.3 TACACS+ Config
    • 4.9.4 802.1x settings
    • 4.9.5 Port Security
    • 4.9.6 Multiple Hosts
    • 4.9.7 Storm control
  • 4.10 SNMP
    • 4.10.1 Parameters
    • 4.10.2 Group Profile
    • 4.10.3 Group Membership
    • 4.10.4 Communities
    • 4.10.5 Notification Recipient
  • 4.11 Manage
    • 4.11.1 User Authentication
    • 4.11.2 Dynamic Address
    • 4.11.3 Mirroring
    • 4.11.4 Firmware Upgrade
    • 4.11.5 Save Configuration
    • 4.11.6 Warm Startup
    • 4.11.7 Factory Default
  • 4.12 Statistics
    • 4.12.1 RMON Statistic
    • 4.12.2 EAP Statistic
    • 4.12.3 GVRP Statistics
• 5. COMMAND STRUCTURE
  • 5.1 Connect to PC’s RS-232 serial port
  • 5.2 Using the CLI
    • 5.2.1 CLI Command Modes
    • 5.2.2 Starting the CLI
    • 5.2.3 Editing Features
      • Entering Commands
      • CLI Command Conventions
  • 5.3 AAA Commands
    • 5.3.1 aaa authentication login
    • 5.3.2 aaa authentication enable
    • 5.3.3 login authentication
    • 5.3.4 enable authentication
    • 5.3.5 ip http authentication
    • 5.3.6 ip https authentication
      • Default Configuration
    • 5.3.7 show authentication methods
    • 5.3.8 password
    • 5.3.9 enable password
    • 5.3.10 username
    • 5.3.11 show users accounts
  • 5.4 Address Table Commands
    • 5.4.1 bridge address
    • 5.4.2 bridge multicast filtering
    • 5.4.3 bridge multicast address
    • 5.4.4 bridge multicast forbidden address
    • 5.4.5 bridge multicast forward-unregistered
    • 5.4.6 bridge multicast forbidden forward-unregistered
    • 5.4.7 bridge multicast forward-all
    • 5.4.8 bridge multicast forbidden forward-all
    • 5.4.9 bridge aging-time
    • 5.4.10 clear bridge
    • 5.4.11 port security
    • 5.4.12 port security routed secure-address
    • 5.4.13 show bridge address-table
    • 5.4.14 show bridge address-table static
    • 5.4.15 show bridge address-table count
    • 5.4.16 show bridge multicast address-table
    • 5.4.17 show bridge multicast filtering
      • Example
    • 5.4.18 show ports security
  • 5.5 Clock Commands
    • 5.5.1 clock set
    • 5.5.2 clock source
    • 5.5.3 clock timezone
    • 5.5.4 clock summer-time
    • 5.5.5 sntp authentication-key
    • 5.5.6 sntp authenticate
    • 5.5.7 sntp trusted-key
    • 5.5.8 sntp client poll timer
    • 5.5.9 sntp broadcast client enable
    • 5.5.10 sntp anycast client enable
    • 5.5.11 sntp client enable (interface)
    • 5.5.12 sntp unicast client enable
    • 5.5.13 sntp unicast client poll
    • 5.5.14 sntp server
    • 5.5.15 show clock
    • 5.5.16 show sntp configuration
    • 5.5.17 show sntp status
  • 5.6 Configuration and Image Files
    • 5.6.1 copy
    • 5.6.2 show startup-config
  • 5.7 Ethernet Configuration Commands
    • 5.7.1 interface ethernet
    • 5.7.2 interface range ethernet
    • 5.7.3 shutdown
    • 5.7.4 description
    • 5.7.5 speed
    • 5.7.6 duplex
    • 5.7.7 negotiation
    • 5.7.8 flowcontrol
    • 5.7.9 mdix
    • 5.7.10 back-pressure
    • 5.7.11 port jumbo-frame
    • 5.7.12 clear counters
    • 5.7.13 set interface active
    • 5.7.14 show interfaces configuration
    • 5.7.15 show interfaces status
    • 5.7.16 show interfaces description
    • 5.7.17 show interfaces counters
    • 5.7.18 show ports jumbo-frame
    • 5.7.19 port storm-control broadcast enable
    • 5.7.20 port storm-control broadcast rate
    • 5.7.21 show ports storm-control
  • 5.8 GVRP Commands
    • 5.8.1 gvrp enable (global)
    • 5.8.2 gvrp enable (interface)
    • 5.8.3 garp timer
    • 5.8.4 gvrp vlan-creation-forbid
    • 5.8.5 gvrp registration-forbid
    • 5.8.6 clear gvrp statistics
    • 5.8.7 show gvrp configuration
    • 5.8.8 show gvrp statistics
    • 5.8.9 show gvrp error-statistics
  • 5.9 IGMP Snooping Commands
    • 5.9.1 ip igmp snooping (Global)
    • 5.9.2 ip igmp snooping (Interface)
    • 5.9.3 ip igmp snooping mrouter
    • 5.9.4 ip igmp snooping host-time-out
    • 5.9.5 ip igmp snooping mrouter-time-out
    • 5.9.6 ip igmp snooping leave-time-out
    • 5.9.7 show ip igmp snooping mrouter
    • 5.9.8 show ip igmp snooping interface
    • 5.9.9 show ip igmp snooping groups
  • 5.10 IP Addressing Commands
    • 5.10.1 ip address
    • 5.10.2 ip address dhcp
    • 5.10.3 ip default-gateway
    • 5.10.4 show ip interface
    • 5.10.5 arp
    • 5.10.6 arp timeout
    • 5.10.7 clear arp-cache
    • 5.10.8 show arp
  • 5.11 LACP Commands
    • 5.11.1 lacp system-priority
    • 5.11.2 lacp port-priority
    • 5.11.3 lacp timeout
    • 5.11.4 show lacp ethernet
    • 5.11.5 show lacp port-channel
  • 5.12 Line Commands
    • 5.12.1 line
    • 5.12.2 speed
    • 5.12.3 exec-timeout
    • 5.12.4 show line
  • 5.13 Management ACL Commands
    • 5.13.1 management access-list
    • 5.13.2 permit (management)
    • 5.13.3 deny (management)
    • 5.13.4 management access-class
    • 5.13.5 show management access-list
    • 5.13.6 show management access-class
  • 5.14 PHY Diagnostics Commands
    • 5.14.1 test copper-port tdr
    • 5.14.2 show copper-ports tdr
    • 5.14.3 show copper-ports cable-length
    • 5.14.4 show fiber-ports optical-transceiver
  • 5.15 Port Channel Commands
    • 5.15.1 interface port-channel
    • 5.15.2 interface range port-channel
    • 5.15.3 channel-group
    • 5.15.4 show interfaces port-channel
  • 5.16 Port Monitor Commands
    • 5.16.1 port monitor
    • 5.16.2 show ports monitor
  • 5.17 QoS Commands
    • 5.17.1 qos
    • 5.17.2 show qos
    • 5.17.3 wrr-queue cos-map
    • 5.17.4 wrr-queue bandwidth
    • 5.17.5 priority-queue out num-of-queues
    • 5.17.6 show qos interface
    • 5.17.7 qos map dscp-queue
    • 5.17.8 qos trust (Global)
    • 5.17.9 qos trust (Interface)
    • 5.17.10 qos cos
    • 5.17.11 qos cos override
    • 5.17.12 show qos map
  • 5.18 Radius Commands
    • 5.18.1 radius-server host
    • 5.18.2 radius-server key
    • 5.18.3 radius-server retransmit
    • 5.18.4 radius-server source-ip
    • 5.18.5 radius-server timeout
    • 5.18.6 radius-server deadtime
    • 5.18.7 show radius-servers
  • 5.19 RMON Commands
    • 5.19.1 show rmon statistics
    • 5.19.2 rmon collection history
    • 5.19.3 show rmon collection history
    • 5.19.4 show rmon history
    • 5.19.5 rmon alarm
    • 5.19.6 show rmon alarm-table
    • 5.19.7 show rmon alarm
    • 5.19.8 rmon event
    • 5.19.9 show rmon events
    • 5.19.10 show rmon log
    • 5.19.11 rmon table-size
  • 5.20 SNMP Commands
    • 5.20.1 snmp-server community
    • 5.20.2 snmp-server contact
    • 5.20.3 snmp-server location
    • 5.20.4 snmp-server enable traps
    • 5.20.5 snmp-server trap authentication
    • 5.20.6 snmp-server host
    • 5.20.7 snmp-server set
    • 5.20.8 show snmp
  • 5.21 Spanning-Tree Commands
    • 5.21.1 spanning-tree
    • 5.21.2 spanning-tree mode
    • 5.21.3 spanning-tree forward-time
    • 5.21.4 spanning-tree hello-time
    • 5.21.5 spanning-tree max-age
    • 5.21.6 spanning-tree priority
    • 5.21.7 spanning-tree disable
    • 5.21.8 spanning-tree cost
    • 5.21.9 spanning-tree port-priority
    • 5.21.10 spanning-tree portfast
    • 5.21.11 spanning-tree link-type
    • 5.21.12 spanning-tree pathcost method
    • 5.21.13 spanning-tree bpdu
    • 5.21.14 clear spanning-tree detected-protocols
    • 5.21.15 show spanning-tree
      • Syntax
  • 5.22 SSH and SLOGIN Commands
    • 5.22.1 ip ssh port
    • 5.22.2 ip ssh server
    • 5.22.3 crypto key generate dsa
    • 5.22.4 crypto key generate rsa
    • 5.22.5 ip ssh pubkey-auth
    • 5.22.6 crypto key pubkey-chain ssh
    • 5.22.7 user-key
    • 5.22.8 key-string
    • 5.22.9 show ip ssh
    • 5.22.10 show crypto key mypubkey
    • 5.22.11 show crypto key pubkey-chain ssh
  • 5.23 System Management
    • 5.23.1 ping
    • 5.23.2 traceroute
    • 5.23.3 telnet
    • 5.23.4 resume
    • 5.23.5 reload
    • 5.23.6 hostname
    • 5.23.7 show users
    • 5.23.8 show sessions
    • 5.23.9 show system
    • 5.23.10 show version
  • 5.24 Syslog Commands
    • 5.24.1 logging on
    • 5.24.2 logging
    • 5.24.3 logging console
    • 5.24.4 logging buffered
    • 5.24.5 logging buffered size
    • 5.24.6 clear logging
    • 5.24.7 logging file
    • 5.24.8 clear logging file
    • 5.24.9 show logging
    • 5.24.10 show logging file
    • 5.24.11 show syslog-servers
  • 5.25 TACACS Commands
    • 5.25.1 tacacs-server host
    • 5.25.2 tacacs-server key
    • 5.25.3 tacacs-server timeout
    • 5.25.4 tacacs-server source-ip
    • 5.25.5 show tacacs
  • 5.26 User Interface Commands
    • 5.26.1 enable
    • 5.26.2 disable
    • 5.26.3 configure
    • 5.26.4 login
    • 5.26.5 exit(configuration)
    • 5.26.6 exit(EXEC)
    • 5.26.7 end
    • 5.26.8 help
    • 5.26.9 history
    • 5.26.10 history size
    • 5.26.11show history
    • 5.26.12 show privilege
      • Example
  • 5.27 VLAN Commands
    • 5.27.1 vlan database
    • 5.27.2 vlan
    • 5.27.3 default-vlan disable
    • 5.27.4 interface vlan
    • 5.27.5 interface range vlan
    • 5.27.6 name
    • 5.27.7 switchport mode
    • 5.27.8 switchport access vlan
    • 5.27.9 switchport trunk allowed vlan
    • 5.27.10 switchport trunk native vlan
    • 5.27.11 switchport general allowed vlan
    • 5.27.12 switchport general pvid
    • 5.27.13 switchport general ingress-filtering disable
    • 5.27.14 switchport general acceptable-frame-type taggedonly
    • 5.27.15 switchport forbidden vlan
    • 5.27.16 map protocol protocols-group
    • 5.27.17 switchport general map protocols-group vlan
    • 5.27.18 ip internal-usage-vlan
    • 5.27.19 show vlan
    • 5.27.20 show vlan internal usage
    • 5.27.21 show interfaces switchport
  • 5.28 Web Server Commands
    • 5.28.1 ip http server
    • 5.28.2 ip http port
    • 5.28.3 ip https server
    • 5.28.4 ip https port
    • 5.28.5 crypto certificate generate
    • 5.28.6 show ip http
    • 5.28.7 show ip https
  • 5.29 802.1x Commands
    • 5.29.1 aaa authentication dot1x
    • 5.29.2 dot1x system-auth-control
    • 5.29.3 dot1x port-control
    • 5.29.4 dot1x re-authentication
    • 5.29.5 dot1x timeout re-authperiod
    • 5.29.6 dot1x re-authenticate
    • 5.29.7 dot1x timeout quiet-period
    • 5.29.8 dot1x timeout tx-period
    • 5.29.9 dot1x max-req
    • 5.29.10 dot1x timeout supp-timeout
    • 5.29.11 dot1x timeout server-timeout
    • 5.29.12 show dot1x
    • 5.29.13 show dot1x users
    • 5.29.14 show dot1x statistics
    • 5.29.15 dot1x auth-not-req
    • 5.29.16 dot1x multiple-hosts
    • 5.29.17 dot1x single-host-violation
    • 5.29.18 show dot1x advanced
• TROUBLE SHOOTING
• APPENDEX A
  • A.1 Switch's RJ-45 Pin Assignments
  • A.2 RJ-45 cable pin assignment
  • A.3 Available Modules