EasyManua.ls Logo

SMC Networks SMCGS10P-Smart User Manual

SMC Networks SMCGS10P-Smart
288 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
Page #1 background imageLoading...
Page #1 background image
MANAGEMENT GUIDE
Web Smart
10-Port GE PoE Switch
SMCGS10P-Smart

Table of Contents

Other manuals for SMC Networks SMCGS10P-Smart

Questions and Answers:

SMC Networks SMCGS10P-Smart Specifications

General IconGeneral
BrandSMC Networks
ModelSMCGS10P-Smart
CategorySwitch
LanguageEnglish

Summary

Warranty and Product Registration

About This Guide

Purpose

Explains the guide's objective: to provide specific information on operating and using the switch's management functions.

Audience

Identifies the guide's target users as network administrators responsible for operating and maintaining network equipment.

Conventions

Details the conventions used throughout the guide to present information, including NOTE, CAUTION, and WARNING.

Related Publications

Refers to the Installation Guide for hardware features and online help for management features.

Revision History

Summarizes the changes made in each revision of the guide, listing specific revisions and their changes.

Section I: Getting Started

Introduction

Provides an overview of the switch's Layer 2 switching features and management agent capabilities.

Initial Switch Configuration

Details the essential procedures for connecting and performing the initial IP configuration of the switch.

Chapter 1: Introduction

Key Features

Summarizes the switch's key features, including configuration, authentication, security, and port functionalities.

Description of Software Features

Details the switch's advanced performance-enhancing features like flow control, storm suppression, and VLANs.

System Defaults

Lists the default system settings for various functions like authentication, port configuration, and IP settings.

Chapter 2: Initial Switch Configuration

Setting an IP Address

Explains how to configure IPv4 and IPv6 interfaces for management access to the switch.

Setting an IPv4 Address

Guides on configuring IPv4 address, subnet mask, and default gateway for the switch.

Setting an IPv6 Address

Details IPv6 configuration, including link-local and global unicast addresses, and auto-configuration.

Configuring NTP Service

Describes how to configure Network Time Protocol (NTP) servers for accurate time synchronization on the switch.

Configuring Remote Log Messages

Explains how to send system log messages to syslog servers and limit message types for monitoring.

Section II: Web Configuration

Using the Web Interface

Introduces the embedded HTTP web agent for switch configuration and monitoring via a web browser.

Configuring the Switch

Covers basic configuration tasks for the switch, including system information and IP settings.

Chapter 3: Using the Web Interface

Navigating the Web Browser Interface

Explains how to access the web interface, including the default administrator login credentials.

Home Page

Describes the switch's home page layout, including the Main Menu and front panel image.

Configuration Options

Details the web page configuration buttons like Save, Reset, and Help, and provides notes on screen refresh.

Panel Display

Explains the panel display feature, which shows a switch's ports, and how to use auto-refresh and refresh functions.

Main Menu

Provides a brief description of the selections available in the switch's web interface main menu.

Chapter 4: Configuring the Switch

Configuring System Information

Guides on identifying the system by configuring contact info, name, location, and timezone offset.

Setting an IP Address

Details how to configure an IP interface for management access, supporting both IPv4 and IPv6.

Setting an IPv4 Address

Guides on configuring IPv4 address, subnet mask, and default gateway for the switch.

Setting an IPv6 Address

Details IPv6 configuration, including link-local and global unicast addresses, and auto-configuration.

Configuring NTP Service

Describes how to configure Network Time Protocol (NTP) servers for accurate time synchronization on the switch.

Configuring Remote Log Messages

Explains how to send system log messages to syslog servers and limit message types for monitoring.

Configuring Power Reduction

Details power saving methods including LED intensity control and powering down idle queue circuits.

Controlling LED Intensity

Explains how to reduce LED intensity during specified hours to save power.

Reducing Power to Idle Queue Circuits

Details the configuration of Energy Efficient Ethernet (EEE) for specified queues and urgent queues.

Configuring Thermal Protection

Guides on setting temperature priority levels for port shut-down when exceeding temperature thresholds.

Configuring Port Connections

Explains how to configure connection parameters for each port, including speed, duplex, and flow control.

Configuring Security

Outlines security measures including management access, general security, and user account configuration.

Management Access Security

Details controlling management access via local authentication, RADIUS, TACACS+, SSH, HTTPS, and static IP.

General Security Measures

Outlines methods for traffic segregation, including Private VLANs, 802.1X, DHCP Snooping, and ARP Inspection.

Configuring User Accounts

Describes controlling management access by configuring user names, passwords, and privilege levels.

Configuring User Privilege Levels

Explains how to set privilege levels for specific software modules or system settings.

Configuring the Authentication Method for Management Access

Specifies authentication methods for management access via console, Telnet, SSH, or HTTP/HTTPS.

Configuring SSH

Details how to configure Secure Shell (SSH) access for secure remote management.

Configuring HTTPS

Guides on enabling Secure Hypertext Transfer Protocol (HTTPS) for secure web interface access.

Filtering IP Addresses for Management Access

Explains how to create a list of allowed IP addresses for management access via web, SNMP, or Telnet.

Using Simple Network Management Protocol

Introduces SNMP, its versions, and access control via community strings and SNMPv3 security models.

Configuring SNMP System and Trap Settings

Covers basic SNMP settings and trap configuration for reporting key events to a management station.

Setting SNMPv3 Community Access Strings

Details setting community access strings for SNMPv1 and v2c clients and managing source IP/mask.

Configuring SNMPv3 Users

Explains how to define unique names, engine IDs, security levels, and protocols for SNMPv3 users.

Configuring SNMPv3 Groups

Guides on configuring SNMPv3 groups to define access policies for users and restrict access to MIB objects.

Configuring SNMPv3 Views

Describes defining views to restrict user access to specific portions of the MIB tree.

Configuring SNMPv3 Group Access Rights

Details assigning MIB tree portions to SNMPv3 groups for read and write access.

Configuring Port Limit Controls

Explains how to limit the number of users (MAC addresses) accessing a port and define responses to violations.

Configuring Authentication Through Network Access Servers

Guides on configuring IEEE 802.1X port-based and MAC-based authentication settings.

Using Port Security

Illustrates how Port Security works with EAPOL and RADIUS for client authentication and access control.

Filtering Traffic with Access Control Lists

Explains Access Control Lists (ACLs) for permit/deny conditions on IP addresses, MAC addresses, and frame types.

Assigning ACL Policies and Responses

Guides on defining ACL policies and responses for a port, including frame copying, logging, and shutdown.

Configuring Rate Limiters

Details defining rate limits applied to ports, configured via ACLs, for ingress traffic.

Configuring Access Control Lists

Explains defining filtering rules for ACL policies, specific ports, or all ports.

ACE Configuration

Details ingress port and frame type criteria for Access Control Entries (ACEs).

Configuring DHCP Snooping

Explains filtering IP traffic on insecure ports by tracking hosts and preventing rogue DHCP servers.

Configuring DHCP Relay and Option 82 Information

Guides on configuring DHCP relay service and using DHCP Option 82 for client identification.

Configuring IP Source Guard

Details filtering IP traffic based on static or dynamic entries to prevent IP address spoofing attacks.

Configuring Global and Port Settings for IP Source Guard

Explains enabling IP Source Guard globally and for specific ports to filter traffic based on IP/MAC binding tables.

Configuring Static Bindings for IP Source Guard

Guides on binding static IP addresses to ports using the IP Source Guard table for security.

Configuring ARP Inspection

Explains validating MAC address bindings for ARP packets to prevent man-in-the-middle attacks.

Configuring Global and Port Settings for ARP Inspection

Guides on enabling ARP inspection globally and for specific ports to validate IP-to-MAC bindings.

Configuring Static Bindings for ARP Inspection

Details binding static IP-to-MAC addresses for ARP Inspection to validate ARP packets.

Specifying Authentication Servers

Guides on configuring RADIUS or TACACS+ servers for management access and 802.1X port authentication.

Creating Trunk Groups

Explains creating virtual aggregate links by grouping multiple physical links for increased bandwidth and fault tolerance.

Configuring Static Trunks

Details configuring aggregation mode and members for static trunk groups, compatible with Cisco EtherChannel.

Configuring LACP

Guides on enabling LACP on selected ports, configuring administrative key, and protocol initiation mode for dynamic trunks.

Configuring the Spanning Tree Algorithm

Explains the Spanning Tree Algorithm (STA) for detecting and disabling network loops and providing backup links.

Configuring Global Settings for STA

Guides on configuring global settings for Spanning Tree Algorithm (STA), including protocol version and bridge priority.

Configuring Multiple Spanning Trees

Details configuring MSTP instances and mapping VLANs to MST instances for improved network resource utilization.

Configuring Spanning Tree Bridge Priorities

Explains configuring bridge priority for CIST and MSTI instances, crucial for root bridge and port selection.

Configuring STP/RSTP/CIST Interfaces

Guides on configuring STA attributes for interfaces, including path cost, port priority, and edge port settings.

Configuring MIST Interfaces

Explains configuring STA attributes for interfaces within a specific MSTI, covering path cost and port priority.

Multicast VLAN Registration

Describes MVR for controlling access to common multicast streams via a single network-wide VLAN.

IGMP Snooping

Introduces IGMP snooping for filtering multicast traffic by monitoring IGMP messages between hosts and routers.

Configuring Global and Port-Related Settings for IGMP Snooping

Guides on configuring global and port settings to control multicast traffic forwarding based on IGMP query/report messages.

Configuring VLAN Settings for IGMP Snooping and Query

Details configuring IGMP snooping and query settings per VLAN interface.

Configuring IGMP Filtering

Explains filtering specific multicast traffic on ports by denying access to specified multicast services.

MLD Snooping

Introduces MLD snooping for limiting IPv6 multicast traffic forwarding to ports with users requesting it.

Configuring VLAN Settings for MLD Snooping and Query

Details configuring MLD snooping and query settings per VLAN interface.

Configuring MLD Filtering

Explains filtering specific multicast traffic on ports by denying access to specified multicast services.

Link Layer Discovery Protocol

Introduces LLDP for discovering information about neighboring devices on the local broadcast domain.

Configuring LLDP Timing and TLVs

Guides on setting timing attributes and device information for LLDP advertisement transmission.

Configuring LLDP-MED TLVs

Explains setting device information advertised for endpoint devices using LLDP-MED TLVs.

Power Over Ethernet

Details setting maximum PoE power, power budget, operating mode, priority, and allocation for ports.

Reserved Power Determined By

Explains the three modes (Class, Allocation, LLDP-MED) for configuring how ports reserve power.

Power Management Mode

Details the two modes (Actual Consumption, Reserved Power) for configuring when ports shut down to manage power.

Configuring the MAC Address Table

Guides on configuring dynamic address learning or assigning static addresses to specific ports.

IEEE 802.1Q VLANs

Explains using VLANs to organize network nodes into separate broadcast domains for security and efficiency.

Assigning Ports to VLANs

Guides on assigning ports to VLAN groups, differentiating between tagged and untagged ports.

Configuring VLAN Attributes for Port Members

Details configuring VLAN attributes for interfaces, including Ethertype, port type, and ingress filtering.

Configuring Private VLANs

Guides on assigning port members to private VLANs for port-based security and isolation.

Using Port Isolation

Explains preventing communications between customer ports within the same private VLAN.

Configuring MAC-based VLANs

Guides on configuring VLANs based on MAC addresses, assigning VLAN IDs to ingress untagged frames.

Protocol VLANs

Explains configuring VLANs based on protocol types to group devices participating in specific protocols.

Configuring Protocol VLAN Groups

Guides on creating protocol groups and mapping them to VLANs for protocol-based VLAN configuration.

Managing VoIP Traffic

Recommends isolating VoIP traffic in a Voice VLAN for better quality, security, and QoS.

Configuring VoIP Traffic

Guides on enabling VoIP device detection, setting Voice VLAN ID, aging time, and traffic class.

Configuring Telephony OUI

Explains using the Voice VLAN OUI table to identify VoIP devices by their MAC address OUI numbers.

Quality of Service

Explains how to prioritize data packets based on class information for better network performance during congestion.

Configuring Port Classification

Guides on setting basic QoS parameters for a port, including default traffic class, DP level, and tag classification.

QoS Ingress Port Tag Classification

Details setting classification modes for tagged frames and mapping PCP/DEI to QoS class and DP level.

Configuring Egress Port Scheduler

Explains showing overview of QoS Egress Port Schedulers, including queue mode and weight.

Configuring Egress Port Schedulers and Shapers

Guides on configuring scheduler mode, queue shaper, queue scheduler, and port shaper for egress ports.

Configuring Egress Port Shaper

Explains showing overview of QoS Egress Port Shapers, including rate for each queue and port.

Configuring Port Remarking Mode

Guides on showing overview of QoS Egress Port Tag Remarking mode and configuring remarking using PCP/DEI values.

Configuring Port DSCP Translation and Rewriting

Explains configuring ingress DSCP translation, classification, and egress rewriting of DSCP values.

Configuring DSCP-Based QoS Ingress Classification

Guides on configuring DSCP-based QoS ingress classification settings, including trusting DSCP values.

Configuring DSCP Translation

Details configuring DSCP translation for ingress traffic or DSCP re-mapping for egress traffic.

Configuring DSCP Classification

Guides on mapping DSCP values to QoS class and drop precedence level.

Configuring QoS Control Lists

Explains configuring QoS policies for handling ingress packets based on various criteria like Ethernet type, VLAN ID, and DSCP.

Configuring Storm Control

Guides on setting limits for broadcast, multicast, and unknown unicast traffic to control traffic storms.

Configuring Port Mirroring

Explains mirroring traffic from source ports to a target port for real-time analysis using logic analyzers or RMON probes.

Configuring UPnP

Details configuring Universal Plug and Play (UPnP) for seamless device connectivity and simplified network deployment.

Chapter 5: Monitoring the Switch

Displaying Basic Information About the System

Explains how to use the Monitor/System menu to display switch descriptions, logs, and traffic statistics.

Displaying System Information

Guides on identifying the system by displaying device name, location, contact, hardware, and time information.

Displaying CPU Utilization

Details how to display CPU utilization information, with graphs averaged over different intervals.

Displaying Log Messages

Explains how to scroll through logged system and event messages using the System Log Information page.

Displaying Log Details

Guides on viewing the full text of specific log messages using the Detailed Log page.

Displaying Thermal Protection

Explains how to show the thermal status for each port and the current chip temperature.

Displaying Information About Ports

Describes how to display port status, traffic statistics, and service queue information via the Monitor/Port menu.

Displaying Port Status On the Front Panel

Guides on displaying an image of the switch's ports via the Port State Overview page.

Displaying an Overview of Port Statistics

Explains how to display a summary of basic information on traffic crossing each port using Port Statistics Overview.

Displaying QoS Statistics

Details how to display the number of packets processed by each service queue using Queuing Counters.

Displaying QCL Status

Guides on showing QoS Control List (QCE) entries and checking for conflicts using the QoS Control List Status page.

Displaying Detailed Port Statistics

Explains how to display detailed statistics on network traffic per port to identify potential issues.

Displaying Information About Security Settings

Describes how to display statistics on management traffic, client access controls, and authentication server status.

Displaying Access Management Statistics

Guides on viewing statistics on traffic used for managing the switch via HTTP, HTTPS, SNMP, Telnet, and SSH.

Displaying Information About Switch Settings for Port Security

Explains how to show MAC address learning status, software module requests, and learned address limits per port.

Displaying Information About Learned MAC Addresses

Guides on showing authorized MAC entries per port, including address, VLAN ID, state, and age/hold.

Displaying Port Status for Authentication Services

Explains how to show port status for authentication services, including 802.1X state, last source, and last ID.

Displaying Port Statistics for 802.1X or Remote Authentication Service

Guides on displaying authentication statistics for selected ports, focusing on 802.1X or backend server data.

Displaying ACL Status

Explains how to show ACL status, including ingress port, frame type, and forwarding action for each ACE.

Displaying Statistics for DHCP Snooping

Guides on showing statistics for various types of DHCP protocol packets, including Discover, Offer, and ACK.

Displaying DHCP Relay Statistics

Explains how to display statistics for the DHCP relay service and its clients.

Displaying MAC Address Bindings for ARP Packets

Guides on opening the Dynamic ARP Inspection Table to view sorted address entries by port, VLAN, MAC, and IP.

Displaying Entries in the IP Source Guard Table

Explains opening the Dynamic IP Source Guard Table to display sorted entries by port, VLAN ID, MAC, and IP address.

Displaying Information on Authentication Servers

Guides on displaying RADIUS authentication and accounting server information, including IP address and status.

Displaying a List of Authentication Servers

Explains how to display a list of configured authentication and accounting servers using the RADIUS Overview page.

Displaying Statistics for Configured Authentication Servers

Guides on displaying statistics for configured authentication and accounting servers using RADIUS Details.

Displaying Information on LACP

Explains using monitor pages for LACP to display configuration settings, port status, and control packet statistics.

Displaying an Overview of LACP Groups

Guides on displaying an overview of LACP groups active on the switch using the LACP System Status page.

Displaying LACP Port Status

Explains displaying information on LACP groups active on each port using the LACP Port Status page.

Displaying LACP Port Statistics

Guides on displaying statistics on LACP control packets crossing each port using the LACP Port Statistics page.

Displaying Information on the Spanning Tree

Explains using monitor pages for Spanning Tree to display bridge status, port status, and protocol packet statistics.

Displaying Bridge Status for STA

Guides on displaying STA information on the global bridge and individual ports using the Bridge Status page.

Displaying Port Status for STA

Explains displaying STA functional status of participating ports using the Port Status page.

Displaying Port Statistics for STA

Guides on displaying statistics on spanning tree protocol packets crossing each port using the Port Statistics page.

Displaying MVR Information

Explains using monitor pages for MVR to display MVR statistics and active multicast groups.

Displaying MVR Statistics

Guides on displaying statistics for IGMP protocol messages used by MVR, including VLAN ID and reports received.

Displaying MVR Group Information

Explains displaying statistics for IGMP messages used by MVR and interfaces associated with multicast groups.

Showing IGMP Snooping Information

Guides on displaying IGMP snooping statistics, port members, and source-specific group information.

Showing IGMP Snooping Status

Explains displaying IGMP querier status, snooping stats per VLAN, and ports connected to multicast routers.

Showing IGMP Snooping Group Information

Guides on displaying port members of each service group in IGMP snooping.

Showing IPv4 SSM Information

Explains displaying IGMP Source-Specific Information, including group, filtering mode, source address, and type.

Showing MLD Snooping Information

Guides on displaying MLD snooping statistics, port members, and source-specific group information.

Showing MLD Snooping Status

Explains displaying MLD querier status and snooping statistics per VLAN carrying multicast traffic.

Showing MLD Snooping Group Information

Guides on displaying port members of each service group in MLD snooping.

Showing IPv6 SSM Information

Explains displaying MLD Source-Specific Information, including group, filtering mode, source address, and type.

Displaying LLDP Information

Explains using monitor pages for LLDP to display advertised information from neighbors and control frame statistics.

Displaying LLDP Neighbor Information

Guides on displaying information about devices connected directly to switch ports advertising LLDP information.

Displaying LLDP-MED Neighbor Information

Explains displaying information about remote devices advertising LLDP-MED TLVs, including capabilities and policy.

Displaying LLDP Neighbor EEE Information

Guides on displaying Energy Efficient Ethernet information advertised through LLDP messages.

Displaying LLDP Port Statistics

Explains displaying statistics on LLDP global counters and control frames.

Displaying LLDP Neighbor PoE Information

Guides on displaying status of LLDP PoE neighbors, including power device type, source, priority, and required power.

Displaying PoE Status

Explains displaying status for all PoE ports, including PD class, requested, allocated, used power, and priority.

Displaying the MAC Address Table

Guides on displaying dynamic and static address entries associated with the CPU and each port.

Displaying Information About VLANs

Explains using monitor pages for VLANs to display port members and attributes assigned to each port.

VLAN Membership

Guides on displaying current port members for all VLANs configured by a selected software module.

VLAN Port Status

Explains displaying VLAN attributes of port members, including PVID, ingress filtering, and frame type.

Displaying Information About MAC-based VLANs

Guides on displaying MAC address to VLAN map entries using the MAC-based VLAN Membership Configuration page.

Chapter 6: Performing Basic Diagnostics

Pinging an IPv4 or IPv6 Address

Explains using the Ping page to send ICMP echo request packets to test network connectivity.

Running Cable Diagnostics

Guides on performing cable diagnostics for ports to diagnose faults like shorts or opens and report cable length.

Chapter 7: Performing System Maintenance

Restarting the Switch

Details the procedure to restart the switch using the Restart Device page.

Restoring Factory Defaults

Explains restoring the original factory settings, including LAN IP, Subnet Mask, and Gateway IP.

Upgrading Firmware

Guides on upgrading the switch's system firmware by specifying a file provided by SMC/Edge-Core.

Managing Configuration Files

Covers saving current configuration to a file or restoring previously saved settings.

Section III: Appendices

Software Specifications

Lists software features related to management, client access, port configuration, quality of service, and VLANs.

Troubleshooting

Provides a troubleshooting chart for common problems, particularly those related to accessing the management interface.

License Information

Contains license information, specifically detailing the GNU General Public License terms.

Related product manuals