User manual NETGEAR FS728TS

TABLE OF CONTENTS CHAPTER 1: SWITCH MANAGEMENT OVERVIEW......................................................................................................3 CHAPTER 2: Getting Started..........................................................................................................................................4 Network with DHCP server: ...........................................................................................................................................4 Smart Wizard Discovery > Discover .......................................................................................................................... 4 Smart Wizard Discovery > Web Access .................................................................................................................... 5 Web Management...................................................................................................................................................... 6 Network without DHCP server ................................................................................................................................... 6 Smart Wizard Discovery > Configuration Setting > Default....................................................................................... 7 CHAPTER 3: Software Upgrade Procedure................................................................................................................11 CHAPTER 4: Smart Wizard Discovery Utility Program .............................................................................................13 Main Screen .................................................................................................................................................................13 Main Screen > Device List > Discover..................................................................................................................... 15 Main Screen Switch Setting > Configuration Setting .............................................................................................. 16 Main Screen > Switch Setting > Password Change ................................................................................................ 16 Main Screen > Switch Setting > Web Access.......................................................................................................... 17 Main Screen > Switch Setting > Firmware Upgrade................................................................................................ 18 Main Screen > Switch Setting > Exit........................................................................................................................ 18 CHAPTER 5: Configuring the Device Using YOUR BROWSER................................................................................19 Getting Started......................................................................................................................................................... 20 Opening the NETGEAR Home Page for the FS700TS-Series Switch .................................................................... 20 Understanding the Home Page ............................................................................................................................... 21 Using The NETGEAR Web Management System Buttons ..................................................................................... 22 Device Management Buttons................................................................................................................................... 24 Resetting the System............................................................................................................................................... 25 Defining Device Information.........................................................................................................................................26 Viewing the Device Zoom View ............................................................................................................................... 26 Viewing the Device Status ...........................................................................................................................................27 Managing Stacking.......................................................................................................................................................29 Operation Modes ..................................................................................................................................................... 29 Understanding Stack Topology................................................................................................................................ 29 Stacking Ring Topology ........................................................................................................................................... 29 Stacking Ports.......................................................................................................................................................... 30 Stacking Members and Unit ID ................................................................................................................................ 30 Removing and Replacing Stacking Members.......................................................................................................... 30 Inserting a Stacking Member ................................................................................................................................... 31 Exchanging Stacking Members ............................................................................................................................... 31 Switching the Stacking Master................................................................................................................................. 31 Configuring Stacking................................................................................................................................................ 32 Configuring Device Security.........................................................................................................................................34 Defining Port Authentication Properties .......................................................................................................................34 Defining Port Authentication .................................................................................................................................... 36 Viewing EAP Statistics............................................................................................................................................. 38 Enabling Storm Control............................................................................................................................................ 40 Port Security ............................................................................................................................................................ 42 Configuring Passwords ............................................................................................................................................ 44 Viewing System Logs...................................................................................................................................................45 Logs Configuration................................................................................................................................................... 46 Viewing the Memory Logs........................................................................................................................................ 48 Viewing Flash Logs.................................................................................................................................................. 49 Defining Server Logs ............................................................................................................................................... 50 Page 1 Configuring Power over Ethernet.................................................................................................................................52 Configuring Interfaces..................................................................................................................................................55 Configuring VLANs .................................................................................................................................................. 62 Defining IP Addresses ............................................................................................................................................. 67 Defining the Forwarding Address Tables................................................................................................................. 70 Defining Dynamic Addresses.......................................................................................................................................71 Configuring the Spanning Tree Protocol.................................................................................................................. 74 Defining STP on Interfaces ...................................................................................................................................... 76 Configuring Quality of Service ................................................................................................................................. 78 Defining QoS Queues .............................................................................................................................................. 81 Configuring Bandwidth Settings............................................................................................................................... 82 Mapping CoS Values to Queues ............................................................................................................................. 84 Mapping DSCP Values to Queues .......................................................................................................................... 85 Configuring SNMP Security .........................................................................................................................................86 Defining SNMP Engine ID........................................................................................................................................ 87 Defining SNMP Users ..................................................................................................................................................88 Defining SNMP Groups................................................................................................................................................90 Defining SNMP Views ..................................................................................................................................................93 Defining SNMP Communities ......................................................................................................................................95 Trap Station Management ...........................................................................................................................................99 SNMPv1, 2c Notification Recipient ........................................................................................................................ 100 SNMPv3 Notification Recipient.............................................................................................................................. 100 Global Trap Settings .............................................................................................................................................. 102 Trap Filter Settings................................................................................................................................................. 103 Managing System Files.......................................................................................................................................... 105 Monitoring the Device ................................................................................................................................................107 Configuring Port Mirroring...................................................................................................................................... 107 Performing Copper Cable Tests ............................................................................................................................ 110 Performing Optical Transceiver Tests ................................................................................................................... 112 Managing RMON Statistics........................................................................................................................................113 Viewing RMON Statistics ....................................................................................................................................... 113 Resetting RMON Statistics Counters..................................................................................................................... 114 Configuring RMON History .................................................................................................................................... 115 Defining RMON Events.......................................................................................................................................... 119 Resetting the Factory Default Values .................................................................................................................... 124 APPENDIX A: DEFAULT SETTINGS ........................................................................................................................125 Page 2 CHAPTER 1: SWITCH MANAGEMENT OVERVIEW This section gives an overview of switch management, including the methods you can use to manage your NETGEAR Prosafe FS700TS family of 10/100 Stackable Smart Switches with Gigabit Ports. Your NETGEAR Prosafe FS700TS family of 10/100 Stackable Smart Switches with Gigabit Ports contains software for viewing, changing, and monitoring the way it works. This management software is not required for the switch to work. You can use the 10/100 Mbps ports and the built-in Gigabit ports without using the management software. However, the management software allows you configure ports, VLAN and Trunking features and also improve the efficiency of the switch and, as a result, improve the overall performance of your network. The Switch gives you the flexibility to access and manage the switch using any of the following methods: · · Smart Wizard Discovery Utility program Web browser interface After you power-up the switch for the first time, you can configure it using the Smart Wizard Discovery Utility or a Web browser. Please refer to the screenshots in following pages for the Smart Wizard Discovery Utility and Web Management GUI. Each of these management methods has advantages. Table 1-1 compares the three management methods. Table 1 ­ 1: Comparing Switch Management Methods Management Method Smart Wizard Discovery Utility program Advantages No IP address or subnet needed Show all switches on the network User-friendly interface Firmware upgradeable Can be accessed from any location via the switch's IP address Password protected Ideal for configuring the switch remotely Compatible with Internet Explorer and Netscape Navigator Web browsers Intuitive browser interface Most visually appealing Extensive switch configuration allowed Configuration backup for duplicating settings to other switches Web browser For a more detailed discussion of the Smart Wizard Discovery Utility Program, see section 4. For a more detailed discussion of the Web Browser Interface, see section 5. Page 3 CHAPTER 2: GETTING STARTED This section will walk you through the steps to start managing your FS700TS-series switch. This section will cover how to get started in a network with a DHCP server (most common) as well as if you do not have a DHCP server. Network with DHCP server: 1. 2. 3. 4. 5. Connect the FS700TS-series switch to a DHCP network. Power on FS700TS-series switch by plugging in power core. Install the Smart Wizard Discovery Utility program on your computer. Start the Smart Wizard Discovery utility. (Section 4 has detailed instructions on the Smart Wizard Discovery utility) Click Discover for the Smart Wizard Discovery to find your FS700TS-series switch. You should see something similar to Figure 2-1. Smart Wizard Discovery > Discover Figure 2 - 1: Smart Wizard Discovery Utility Main Screen 6. Select your switch by clicking on it. Then click on Web Access, as highlighted in Figure 2-2. Page 4 Smart Wizard Discovery > Web Access Figure 2 - 2: Web Access Start managing your switch via your web browser. The default password is `password'. For a detailed description on web management, please refer to Section 5. Page 5 Web Management Figure 2 - 3: Web Management Front page after click "web access" on the Smart Wizard Discovery Utility Network without DHCP server 1. 2. 3. 4. 5. 6. Connect FS700TS-series switch to your existing network. Power on FS700TS-series switch by plugging in power cord (Default IP is 192.168.0.239). Install the Smart Wizard Discovery Utility program on your computer Start the Smart Wizard Discovery utility. (Section 4 has detailed instructions on the Smart Wizard Discovery Utility) Click Discover for the Smart Wizard Discovery Utility to find your FS700TS-series switch. You should see a something similar to Figure 2-1. Click on Configuration Setting (See Figure 2-4). Note: You can always assign a Static IP address to your FS700TS-series switch, even if your network does not have a DHCP server. Page 6 Smart Wizard Discovery > Configuration Setting > Default Figure 2 - 4: Configuration Setting 7. 8. Choose Disable on DHCP. See Figure 2-5. Enter your IP address, Gateway and Subnet, and then type your password and click "Set". Please make sure your PC and FS700TSseries switch are in the same subnet (See Figure 2-6.). Page 7 Smart Wizard Discovery > Configuration Setting > Assign Static IP Figure 2 - 5: Manually Setting IP Address Page 8 NIC Setting on the PC that Accesses the FS700TS-Series Switch Figure 2-6: Setting IP Address and Subnet Mask 1. Select your switch by clicking on it. Then click on Web Access, as highlighted in Figure 2-2. 2. Start managing your switch via your web browser. The default password is `password'. For a detailed description on web management access, please refer to Section 5. Page 9 Web Management Figure 2 - 7: Web Management Front Page after Click "Web Access" on the Smart Wizard Discovery Utility Page 10 CHAPTER 3: SOFTWARE UPGRADE PROCEDURE The application software for the FS700TS-series switch is upgradeable, enabling your switch to take advantage of improvements and additional features as they become available. The upgrade procedure and the required equipment are described in the following section. The upgrade procedure is as follows: 1. 2. 3. Save the new firmware to your computer. Start the Smart Wizard Discovery Utility program. Select your switch by clicking on it. Then click on Firmware Upgrade, as highlighted in Figure 3-1. Figure 3 - 1: Select the Switch you Want to Upgrade and Click Firmware Upgrade Page 11 Figure 3 - 2: Locate New Firmware 4. 5. Enter the location of the new firmware in the Firmware path below Firmware setting. Alternatively, you can click Browse to locate the file. Enter following path, tftp://{tftp address}/{file name}. Click Start to download the new firmware file in non-volatile memory. The system software is automatically loaded to all stacking members. Figure 3 - 3: Enter Password and click Start Note: Once the system finishes firmware upgrade process, the switch will automatically reboot. The Smart Wizard Discovery Utility determines the success of the upgrade process based on the success of the system reboot. Page 12 CHAPTER 4: SMART WIZARD DISCOVERY UTILITY PROGRAM The Smart Wizard Discovery Utility program is a user-friendly, easy to install tool. Using this program, you can view and configure all the FS700TSseries Smart Switches in your network. The installation of the Smart Wizard Discovery Utility is as follows: 1. 2. 3. 4. Insert the disc into your CD-ROM drive. Select the \Software folder or click `install' from Browser auto-executed after inserting the Resource CD. Run the Setup program to install the Smart Wizard Discovery Utility. The Installation Wizard will guide you through. Run the `Smart Wizard Discovery Utility' from the window start bar. 5. Main Screen The main screen displays the available functions. As shown in Figure 4-1, there are six function items to choose from: · · · · · · Discover Configuration Setting Password Change Web Access Firmware Upgrade Exit Page 13 Figure 4 - 1: Smart Wizard Discovery Utility Main Screen Page 14 Main Screen > Device List > Discover The Smart Wizard Discovery Utility can discover all switches currently connected on the network. Click `Discover' to view the following switch information of any listed switch: · · · · · · · · · MAC Address IP Address Protocol Version Product Name System Name Location DHCP Subnet Mask Gateway . Figure 4 - 2: Main Screen: Device List > Discover By double-clicking a listed switch, you can open the Web management for that switch. Alternatively, you can select a switch by clicking on it once, and then clicking Web Access. For more information on Web management, see Section 5. Page 15 Main Screen Switch Setting > Configuration Setting Select a switch by clicking on it. Then click Configuration Setting. The following screen pops up, enabling you modify: · · · · System Name -- This field is to help you keep track of your switches. It can be any combination of letters and/or numbers. Location -- This field is to help you keep track of where this switch is. It can be any combination of letters and/or numbers. Password -- The default password is `password'. You must enter your password for and modifications to take affect. DHCP -- DHCP automatically obtains the IP information for the switch. Figure 4 - 3: Main Screen: Switch Setting > Configuration Setting · · · · System Name -- Any desired description for System Name. Location -- Any desired description for Location. Password -- The default password is `password'. DHCP -- This function is enabled by default. Click `Disable' to abort the function. Main Screen > Device Setting > Configuration Setting > Set Click `Set' to enable new settings. You must enter your password for these settings to be accepted. Main Screen > Device Setting > Configuration Setting > Cancel Click `Cancel' to abort the above settings. Main Screen > Switch Setting > Password Change 6. Click `Password Change' from the Switch Setting section. The following screen pops up as shown in Figure 4-4. Figure 4 - 4: Main Screen: Switch Setting > Password Change · New Password -- Type any desired password. Passwords are case-sensitive and can have a maximum of 20 characters. Page 16 · · Confirm Password-- Re-type the new password to confirm it. Old Password -- The default password is `password'. 7. Click `Set' to enable new password. Main Screen > Switch Setting > Web Access 8. 9. Select a listed switch from the Device List section. Then click Web Access from the Switch Setting (see Figure 4-5). Enter the default password `password' and click Log in. For more on Web management, see Section 5. Figure 4 - 5: Web Management Login Page Page 17 Main Screen > Switch Setting > Firmware Upgrade 10. Click Firmware Upgrade from the Switch Setting section. The following screen will pop up. Figure 4 - 6: Main Screen: Switch Setting > Firmware Upgrade · · · Firmware Path -- The location of the new firmware. If you don't know, you can click Browse to locate file. Password -- The default password is `password'. Upgrade State -- Shows upgrading in progress. 11. Click Start to start upgrading. Main Screen > Switch Setting > Exit · Click Exit from the Switch Setting section to close the Smart Wizard Discovery Utility program. Page 18 CHAPTER 5: CONFIGURING THE DEVICE USING YOUR BROWSER This section contains information for configuring the device using your web browser and includes the following topics: · · · · · · · · · · · · · · · · Getting Started Resetting the System Defining Device Information Managing Stacking Configuring Device Security Viewing System Logs Configuring Power over Ethernet Configuring Interfaces Defining IP Addresses Defining the Forwarding Address Tables Configuring the Spanning Tree Protocol Configuring Quality of Service Configuring SNMP Security Monitoring the Device Managing RMON Statistics Resetting the Factory Default Values Page 19 Getting Started This section describes setting browser interface options and using the home page for the FS700TS-series switch. It includes the following sections: · · · Opening the NETGEAR Home Page for the FS700TS-series switch Understanding the Home Page for the FS700TS-series switch Using the Web Management System Buttons Opening the NETGEAR Home Page for the FS700TS-Series Switch The NETGEAR home page for the FS700TS-series switch can be accessed from any PC with a web browser. To start the application: 1. 2. 3. Open a web browser. Enter the device IP address in the address bar. Press Enter. The Login Page appears. Figure 5 - 1: Login Page 4. 5. Enter a password. Click . The FS700TS home page displays. Page 20 Understanding the Home Page The NETGEAR FS700TS home page contains the following views: · · · Navigation Pane -- Located on the left side of the FS700TS home page. The Navigation Pane provides an expandable Navigation Pane of the features and their component. The Navigation Pane is marked as 1 in Figure 5 - 2. Device View -- Located on the right side of the FS700TS home page. The Device View provides a view of the device, information or table area, and of configuration instructions. Information Buttons -- Located in the upper right corner of the home page, the information buttons provide connections to NETGEAR support and the online manual. See item 3 in Figure 5-2. Figure 5 - 2: Home Page Components Navigation Pane The Navigation Pane contains a list of the different features that can be configured including switching features, ports, spanning tree, VLANs, class of service, link aggregation (aggregating ports), multicast support, and statistics. The Navigation Pane branches can be expanded to view all the components under a specific feature or retracted to hide the feature's components. Device View The following section describes the different aspects of the Device View. The device provides information about FS728TS/F752TPS/FS752TS, the different components, and the Work Desk. The Work Desk in the Device View provides a work area that contains device tables, general device information, and configurable device parameters. Page 21 Using The NETGEAR Web Management System Buttons This section contains information about the different FS700TS browser interface buttons. The FS700TS web browser provides the following buttons: · · Information Buttons -- Provide access to informational services including technical support, online help, device information, and closing the browser. Device Management Buttons -- Provide an explanation of the management buttons in the NETGEAR FS700TS-series Switch, including the Add, Delete, Query, and Apply Changes buttons. Information Buttons The FS700TS Switch web browser contains the following information buttons: Table 1 - 1: Information Buttons Button Description Opens the NETGEAR support page. The NETGEAR technical support page URL is http://kbserver.netgear.com/ Opens the Online Help. Support Button The Support Page contains information for accessing NETGEAR technical support. To access the technical support page: · Click Support on the NETGEAR home page. The NETGEAR Support Page opens: Figure 5 - 3: NETGEAR Support Page Page 22 Page 23 Device Management Buttons The NETGEAR FS700TS Switch web browser GUI management buttons allow network managers to easily configure the device from remote locations. The FS700TS Switch web browser GUI contains the following management buttons: Table 1 - 2: Device Management Buttons Button Description Applies set changes to the device. Adds information to tables or information windows. Refreshes device information. Resets statistics counters. Performs copper cables. Restores the factory defaults. Page 24 Resetting the System The Reboot Page resets the device. Ensure that configuration changes are saved to the device before rebooting. Configuration changes that are not saved are lost. There are two options to reboot. · · Rebooting a particular unit. Rebooting the entire stack. To open the Reboot Page: 1. Click Reboot. The Reboot Page opens. Figure 5 - 4: Reboot Page The Reboot Page contains the following field: · Reset Unit No. -- Choose the port to be reset or select the option Stack to reboot all stacking members. 2. Click . The device is reset. Page 25 Defining Device Information This section contains the following topics: · · Viewing the Device Zoom View Viewing the Device Status Viewing the Device Zoom View The System Zoom Page provides a graphic representation of the device, including the port and LED statuses. Figure 5 - 5: System Zoom Page Page 26 Viewing the Device Status The Switch Status Page contains parameters for configuring general device information, including the system name, location, contact, the system MAC Address, System Object ID, System Up Time and MAC addresses, and both software and hardware versions. 1. Click Switch Status. The Switch Status Page opens. Figure 5 - 6: Switch Status Page The Switch Status Page contains the following fields: · · · · · · · · · · Model Name -- Displays the device model number and name. System Name -- Defines the user-defined device name. The field may contain is 0-160 characters. System Location -- Defines the location where the system is currently running. The field may contain is 0-160 characters. System Contact -- Defines the name of the contact person. The field may contain is 0-160 characters. System Object ID -- Displays the vendor's authoritative identification of the network management subsystem contained in the entity. Date -- Displays the current date. Local Time -- Displays the Local time. System Up Time -- Displays the amount of time since the most recent device reset. The system time is displayed in the following format: Days, Hours, Minutes, and Seconds. For example, 41 days, 2 hours, 22 minutes and 15 seconds. Base MAC Address -- Displays the MAC address for each stacking unit. Unit Mode -- Indicates if the device is currently in stand-alone or stacking mode. Page 27 · · · · 2. 3. Change Mode to Stack -- Switches the device from stand-alone to stacking mode. Hardware Version -- Displays the installed device hardware version number. Software Version -- Displays the installed software version number. Boot Version -- Displays the current boot version running on the device. Define the fields. Click . Page 28 Managing Stacking All stack members are accessed through a single IP address through which the stack is managed. Stacks are managed using: · · Web-based Interface SNMP Management Station The system supports up to six stacking members per stack to a maximum of 192 ports, or devices can operate as stand-alone systems. During the Stacking setup, one device is selected as the Stacking Master. All other devices are named as stack members, and assigned a unique Unit ID. The Stack Master provides a Single point of control and management as well as a single interface in which to control and manage the stack. The device software is downloaded separately for each of the stack members. All units in the stack must be running the same software version. The Stacking Master maintains switch stacking and configuration. The Stacking Master detects and reconfigures the ports with minimal operational impact in the event of: · · · · Unit Failure Inter-unit Stacking Link Failure Unit Insertion Removal of a Stacking Unit Operation Modes A stack can operate in one of the following modes: · · · · Stand-alone Mode -- Indicates the device is operating as a single unit and is not connected in a stack. Stacking Master -- Manages the stacking configuration for all stack members. Secondary Master -- Operates as a backup to the Stacking Master. If the Stacking Master is no longer operating, the Secondary Master takes over the stack management. Stacking Member--Indicates a device within the stacking topology. The stacking member receives its device configuration from the Stacking Master. This section provides an introduction to the user interface and includes the following topics: · · · · · · · · · Understanding Stack Topology Stacking Ring Topology Stacking Ports Stacking Members and Unit ID Removing and Replacing Stacking Members Inserting a Stacking Member Exchanging Stacking Members Switching the Stacking Master Configuring Stacking Understanding Stack Topology Stacked devices operate in a Ring or chain topology. The Ring topology connects all stacked devices in a circle. Each stacked device accepts data and sends it to the device to which it is physically connected. The packet continues through the stack until it reaches the destination port. The system automatically discovers the optimal path by which to send traffic. A chain topology connects stacking members from one to the next. This provides a single data path flow. The stacking members linked in the middle of the chain are connection to the stacking member on either side of them. The members on the ends of the chain only have one connection. Stacking Ring Topology One of the benefits of the Ring topology is that it offers redundancy in case the connections between two units fail, including the case where a unit in the stack fails. If a failure occurs in the stacking topology, the stack reverts to Chain Stacking Topology. In the Chain topology, devices operate in a chain formation. The system automatically switches to a Stacking Failover topology without any system downtime. An SNMP message is automatically generated, but no stack management action is required. However, the stacking link or stacking member must be repaired to return to the Ring topology. After the stacking issues are resolved, the device can be reconnected to the stack without interruption and the Ring topology is restored. Page 29 Stacking Ports The mode type determines the Gigabit Ethernet ports that are configurable by the user. · · In Stand-alone mode all Gigabit Ethernet ports are available. In Stack mode two dedicated Gigabit Ethernet ports are used for stack connection. The factory default of the device is stacking mode. Use the Stack Management screen to configure a unit to operate in stand-alone mode. The ports used for stacking can be either the combo ports or the copper ports. By default, the copper ports are reserved for stacking. The Stack Management screen allows network managers to configure the combo ports as the stacking ports. The factory default of the device is stacking mode. Stacking Members and Unit ID Stacking Unit IDs are essential to the stacking configuration. The stacking operation is determined during the boot process. The Unit ID selected during the initialization process determines the Operation Mode. For example, if the user selected stand-alone mode, the device boots as a standalone device. Unit ID 1 and Unit ID 2 are reserved for Master enabled units. Unit IDs 3 to 6 can be defined for stack members. When the Master unit boots or when inserting or removing a stack member, the Master unit initiates a stacking discovering process. If two members are discovered with the same Unit ID the stack continues to function, however only the unit with the older join time joins the stack. A message is sent to the user, notifying that a unit failed to join the stack. Removing and Replacing Stacking Members Stacking member 1 and stacking member 2 are Stacking Master enabled units. Unit IDs 1 and 2 are either designated as Master Unit or Secondary Master Unit. The Stacking Master assignment is performed during the configuration process. One Master enabled stack member is elected Master, and the other Master enabled stack member is elected Secondary Master, according to the following decision process: · · · · If only one Stacking Master enabled unit is present, this is the stacking Master. If two Stacking Master enabled stacking members are present, and one has been manually configured as the Stacking Master, this is the Stacking Master. If two Master enabled units are present and neither has been manually configured as the Stacking Master, the one with the longer up time is elected Stacking Master. If the two Master enabled stacking members are the same age, Unit 1 is elected Stacking Master. Two stacking member are considered the same age if they joined the stack within the same ten minute interval. For example, Stack member 2 is inserted in the first minute of a ten-minute cycle, and Stack member 1 is inserted in fifth minute of the same cycle, the units are considered the same age. If there are two Master enabled units that are the same age, then Unit 1 is elected master. The Stacking Master and the Secondary Master maintain a Warm Standby. The Warm Standby ensures that the Secondary Master takes over for the Stacking Master if a failure occurs. This guarantees that the stack continues to operate normally. During the Warm Standby, the Master and the Secondary Master are synchronized with the static configuration only. When the Stacking Master is configured, the Stacking Master must synchronize the Stacking Secondary Master. The Dynamic configuration is not saved, for example, dynamically learned MAC addresses are not saved. Each port in the stack has a specific Unit ID, port type, and port number, which is part of both the configuration commands and the configuration files. Configuration files are managed only from the device Stacking Master. This includes: · · · Saving to the FLASH Uploading Configuration files to an external TFTP server Downloading Configuration files from an external TFTP server Whenever a reboot occurs, topology discovery is performed, and the master learns all units in the stack. Unit IDs are saved in the unit and are learned through topology discovery. If a unit attempts to boot without a selected Master, and the unit is not operating in stand-alone mode, the unit does not boot. For example, if a stack member (unit IDs 3 - 6) is separated from the stack due to a topology failure, the stacking member is no longer connected to the stack. The device can be booted, but it cannot be managed through the Stacking Master. The network manager can either reset the device defaults, or correct the topology failure, and reconnect the unit to the stack. Configuration files are changed only through explicit user configuration. Configuration files are not automatically modified when: · · · Units are Added Units are Removed Units are reassigned Unit IDs Page 30 · Units toggle between Stacking Mode and Stand-alone Mode Each time the system reboots, the Startup Configuration file in the Master unit is used to configure the stack. If a stack member is removed from the stack, and then replaced with a unit with the same Unit ID, the stack member is configured with the original device configuration. Only ports that are physically present are displayed in the FS700TS web pages, and can be configured through the web management system. By default, Unit IDs are assigned automatically. However, you can use the browser to assign a specific Unit ID; for example, the same unit ID as the unit which was recently removed." Inserting a Stacking Member When a stacking member is inserted into a running stack, it is automatically assigned a unit number. Note that a unit should not be powered up until it has been connected to the stack. If the user has already configured a Unit ID for the newly joined unit, a new Unit ID is not assigned. Exchanging Stacking Members If a stack member with the same Unit ID replaces an existing Unit ID with the same Unit ID, the previous device configuration is applied to the inserted stack member. If the new inserted device has either more than or less ports than the previous device, the relevant port configuration is applied to the new stack member. · · · · If a 24 port switch replaces a 24 port switch, all port configurations remain the same. IIf a 48 port switch replaces a 48 port switch, all port configurations remain the same. IIf a 48 port switch replaces a 24 port switch, the first 24 ports receive the 24 FE port configuration. The GE port configurations remain the same. The remaining ports receive the default port configuration. IIf a 24 port switch replaces a 48 port switch, the first 24 ports receive the first 24 port configuration. The GE port configurations remain the same. The replaced stacking members receives the previous stacking member's Unit ID. Switching the Stacking Master The Secondary Master replaces the Stacking Master if one of the following events occur: · · · The Stacking Master fails or is removed from the stack. Links from the Stacking Master to the stacking members fails. A soft switchover is performed via the web interface. Switching between the Stacking Master and the Secondary Master results in a limited service loss. Any dynamic tables are relearned if a failure occurs. The running configuration file is synchronized between Stacking Master and the Secondary Master and continues running on the Secondary Master. Page 31 Configuring Stacking The Stack Management page allows network managers to either reset the entire stack or a specific device. Device configuration changes that are not saved before the device is reset are not saved. A unique Unit ID (1-6) identifies a stack member. This unit number determines the interface-level configuration that the stack member uses. (The configuration is saved and managed by the master unit.). The stack management has the following defaults: · · · The stacking mode is set to stackable. The stacking cable is copper. The stacking numbering method is set to auto-numbering. To configure stacking: 1. Click Stack Management. The Stack Management Page opens. Figure 5 - 7: Stack Management Page The Stack Management Page contains the following fields: · Switch Stack Control from Unit 1 to Unit 2 -- Switches the stack control from the Stack Master to the Backup Master. The possible field values are: ­ ­ Checked --Switches the stack control to the Standby Stack Master. Unchecked -- Maintains the current stacking control. · Stacking Ports -- Allows the user to decide what cable type is in use. ­ ­ Combo Ports Indicates that the combo port is used as the stacking port. Copper Ports Indicates that the copper port is used as the stacking port. · · Unit No. -- Indicates the stacking member's current number. Possible values are 1-6. Unit No. After Reset -- Indicates the stacking member's future number after the stack is reset. Possible values are 1-6. Page 32 Switching Between Stack Masters: 1. 2. 3. Open the Stack Management Page. Check the Switch Stack Control from Unit 1 to Unit 2 check box. Click . A confirmation message displays. Page 33 Configuring Device Security This section contains information for managing both storm control and port security and includes the following topics: · · Enabling Storm Control Port Security Defining Port Authentication Properties The Port Authentication Properties Page allows network managers to configure network authentication parameters. In addition, Guest VLANs are enabled from the Properties Page. This section includes the following sections: · · Defining Port Authentication Viewing EAP Statistics (Extensible Authentication Protocol) To define the port authentication properties: 1. Click Security > Port Authentication > Properties. The Port Authentication Properties Page opens. Figure 5 - 8: Port Authentication Properties Page The Port Authentication Properties Page contains the following fields: · Port-based Authentication State -- Indicates if Port Authentication is enabled on the device. The possible field values are: ­ ­ Enable -- Enables port-based authentication on the device. Disable -- Disables port-based authentication on the device. · Authentication Method -- Specifies the authentication method used for port authentication. The possible field values are: ­ None -- Indicates that no authentication method is used to authenticate the port. Page 34 ­ ­ RADIUS -- Provides port authentication using the RADIUS server. RADIUS, None -- Provides port authentication, first using the RADIUS server. If the port is not authenticated, then no authentication method is used, and the session is permitted. · Guest VLAN -- Specifies whether the Guest VLAN is enabled on the device. The possible field values are: ­ Enable -- Enables using a Guest VLAN for unauthorized ports. If a Guest VLAN is enabled, the unauthorized port automatically joins the VLAN selected in the VLAN List field. Disable -- Disables port-based authentication on the device. This is the default. Define the fields. Click The network authentication properties are set and the device is updated. ­ · VLAN List -- Contains a list of VLANs. The Guest VLAN is selected from the VLAN list. 2. 3. Page 35 Defining Port Authentication The Port Authentication Page allows network managers to configure port-based authentication global parameters. To define the port-based authentication global properties: 1. Click Security > Port Authentication > Port Authentication. The Port Authentication Page opens. Figure 5 - 9: Port Authentication Page The Port Authentication Page contains the following fields: · · · · · Unit No. -- Indicates the stacking number ID -- Displays a list of interfaces on which port-based authentication is enabled. User Name -- Displays the supplicant user name. Current Port Control -- Displays the current port authorization state. Enable Periodic Reauthentication -- Permits immediate port reauthentication. The possible field values are: ­ ­ Enable -- Enables immediate port reauthentication. This is the default value. Disable -- Disables port reauthentication. · · · · · Reauthentication Period -- Displays the time span (in seconds) in which the selected port is reauthenticated. The field default is 3600 seconds. Authenticator State -- Displays the current authenticator state. Quiet Period -- Displays the number of seconds that the device remains in the quiet state following a failed authentication exchanges. The possible field range is 0-65535. The field default is 60 seconds. Resending EAP -- Defines the amount of time (in seconds) that lapses before EAP requests are resent. The field default is 30 seconds. Max EAP Requests -- Displays the total amount of EAP requests sent. If a response is not received after the defined period, the authentication process is restarted. The field default is 2 retries. Page 36 · · · Supplicant Timeout -- Displays the amount of time (in seconds) that lapses before EAP requests are resent to the supplicant. The field default is 30 seconds. Server Timeout -- Displays the amount of time (in seconds) that lapses before the device re-sends a request to the authentication server. The field default is 30 seconds. Termination Cause -- Indicates the reason for which the port authentication was terminated. 2. Click an ID. The Modify Port Security Page opens: Figure 5 - 10: Modify Port Security Page 3. 4. Modify the fields. Click . The port authentication settings are defined and the device is updated. Page 37 Viewing EAP Statistics The EAP Statistics Page contains information about EAP packets received on a specific port. To view EAP Statistics: · Click Security > Port Authentication > EAP Statistics. The EAP Statistics Page opens. Figure 5 - 11: EAP Statistics Page The EAP Statistics Page contains the following fields: · · · Unit No -- Indicates the stacking number Port -- Indicates the port, which is polled for statistics. Refresh Rate -- Indicates the amount of time that passes before the EAP statistics are refreshed. The possible field values are: ­ ­ ­ ­ 15 Seconds. 30 Seconds. 60 Seconds. No Refresh -- Indicates that the EAP statistics are not refreshed. · · · · · Frames Receive -- Indicates the number of valid EAPOL frames received on the port. Frames Transmit -- Indicates the number of EAPOL frames transmitted via the port. Start Frames Receive -- Indicates the number of EAPOL Start frames received on the port. Log off Frames Receive -- Indicates the number of EAPOL Logoff frames that have been received on the port. Respond ID Frames Receive -- Indicates the number of EAP Resp/Id frames that have been received on the port. Page 38 · · · · · · · Respond Frames Receive -- Indicates the number of valid EAP Response frames received on the port. Request ID Frames Transmit -- Indicates the number of EAP Req/Id frames transmitted via the port. Request Frames Transmit -- Indicates the number of EAP Request frames transmitted via the port. Invalid Frames Receive -- Indicates the number of unrecognized EAPOL frames that have been received by on this port. Length Error Frames Receive -- Indicates the number of EAPOL frames with an invalid Packet Body Length received on this port. Last Frame Version -- Indicates the protocol version number attached to the most recently received EAPOL frame. Last Frame Source -- Indicates the source MAC address attached to the most recently received EAPOL frame. Page 39 Enabling Storm Control Storm control limits the amount of Multicast and Broadcast frames accepted and forwarded by the device. When Layer 2 frames are forwarded, Broadcast, and Multicast frames are flooded to all ports on the relevant VLAN. This occupies bandwidth and loads all nodes on all ports. A Broadcast Storm is a result of an excessive amount of broadcast messages simultaneously transmitted across a network by a single port. Forwarded message responses are heaped onto the network, straining network resources or causing the network to time out. Storm control is enabled for all ports by defining the packet type and the rate the packets are transmitted. The system measures the incoming Broadcast and Multicast frame rates separately on each port, and discards the frames when the rate exceeds a user-defined rate. By default, storm control is enabled on all ports - broadcast only - with threshold of 200 kbps. Storm Control is enabled by default. The Storm Control Page provides fields for configuring broadcast storm control. To enable storm control: 1. Click Security > Traffic Control > Storm Control. The Storm Control Page opens. Figure 5 - 12: Storm Control Page The Storm Control Page contains the following fields: · · · Unit -- Indicates the stacking number. Interface -- Displays the port number for which the storm control information is displayed. Enable Broadcast Control -- Indicates if forwarding Broadcast packet types is enabled on the interface for which the storm control information is displayed. The possible field values are: ­ ­ Enable -- Enables storm control on all broadcast only ports with threshold of 200 kbps. Enabled is the default. Disable -- Disables storm control on the interface. · Broadcast Mode -- Specifies the Broadcast mode currently enabled on the device. The possible field values are: ­ Unknown Unicast, Multicast & Broadcast -- Counts Unicast, Multicast, and Broadcast traffic. Page 40 ­ ­ Multicast & Broadcast -- Counts Broadcast and Multicast traffic together. Broadcast Only -- Counts only Broadcast traffic. · Broadcast Rate Threshold -- Indicates the maximum rate (kilobits per second) at which unknown packets are forwarded. The range is 70250,000. The default value is 200. 2. Click an interface. The Storm Control Modify Page opens: Figure 5 - 13: Storm Control Modify Page 3. 4. Modify the fields. Click . Storm control is enabled on the device. Page 41 Port Security Network security can be increased by limiting access on a specific port only to users with specific MAC addresses. The MAC addresses can be dynamically learned or statically configured. Locked port security monitors both received and learned packets that are received on specific ports. Access to the locked port is limited to users with specific MAC addresses. These addresses are either manually defined on the port, or learned on that port up to the point when it is locked. When a packet is received on a locked port and the packet source MAC address is not tied to that port (either it was learned on a different port, or it is unknown to the system), the protection mechanism is invoked. It provides the following options for unauthorized packets arriving at a locked port: · · · · Forwarded Discarded with no trap Discarded with a trap Shuts down the port Locked port security also enables storing a list of MAC addresses in the configuration file. The MAC address list can be restored after the device has been reset. Disabled ports are activated from the Port Security Page. To define port security: 1. Click Security > Traffic Control > Port Security. The Port Security Page opens. Figure 5 - 14: Port Security Page The Port Security Page contains the following fields: · · · Interface -- Displays the port or LAG name. Interface Status -- Indicates the host status. Learning Mode -- Defines the locked port type. The Learning Mode field is enabled only if Locked is selected in the Set Port field. The possible field values are: Page 42 ­ Classic Lock - Locks the port, and only forwards packets that have been learned statically or dynamically, prior to locking the port. The lock is effective immediately. Limited Dynamic Lock -- Locks the port after a user-defined number of MAC addresses have been dynamically learned on the port. After the port is locked, packets are forwarded only from MAC addressees that have been learned prior to locking the port. ­ · · Max Entries -- Specifies the number of MAC address that can be learned on the port. The Max Entries field is enabled only if Locked is selected in the Set Port field. In addition, the Limited Dynamic Lock mode is selected. The default is 1. Action -- Indicates the action to be applied to packets arriving on a locked port. The possible field values are: ­ ­ ­ Forward -- Forwards packets from an unknown source without learning the MAC address. Discard -- Discards packets from any unlearned source. This is the default value. Shutdown -- Discards packets from any unlearned source and shuts down the port. The port remains shut down until reactivated or until the device is reset. · Trap -- Enables traps when a packet is received on a locked port. The possible field values are: ­ ­ Checked -- Enables traps. Unchecked -- Disables traps. Click an interface you want to modify. The Modify Port Security Page opens: · 2. Trap Frequency (Sec) -- The amount of time (in seconds) between traps. The default value is 10 seconds. Figure 5 - 15: Modify Port Security Page 3. 4. Modify the fields. Click . The port security settings are defined and the device is updated. Page 43 Configuring Passwords The Passwords Page contains parameters for configuring device passwords. To define device passwords: 1. Click System > Password. The Password Page opens: Figure 5 - 16: Password Page The Password Page contains the following fields: · · · Old Password -- Indicates the current password used to access the system. New Password -- Defines a new password for accessing the system. Re-type New Word -- Verifies the new password used to access the system. 2. 3. Define the fields. Click . The password is defined and the device is updated. Page 44 Viewing System Logs Event messages have a unique format, as per the SYSLOG RFC recommended message format for all error reporting, for example, Syslog+ local device reporting. Messages are assigned a severity code, and include a message mnemonic, which identifies the source application generating the message. Messages are filtered based on their urgency or relevancy. The following table contains the Log Severity Levels: Table 5-3: Severity Levels Severity Type Emergency Alert Critical Error Warning Notice Informational Debug Severity Level 0 1 2 3 4 5 6 7 Description Indicates that the system is not functioning. Indicates that the system needs immediate attention. Indicates that the system is in a critical state. Indicates that a system error has occurred. Indicates that a system warning is logged. Indicates that the system is functioning properly, but system notice is logged. Provides device information. Provides detailed log information. This section provides information for managing logs. The logs enable viewing device events in real time, and recording the events for later usage. Logs record and manage events and report errors and informational messages. This section includes the following topics: · · · · Logs Configuration Memory Logs Flash Logs Server Logs Page 45 Logs Configuration The Logs Configuration Page contains fields for defining which events are recorded to which logs. It contains fields for enabling logs globally, and parameters for defining logs. Log messages are listed from the highest severity to the lowest severity level. When a severity level is selected, all severity level choices above the selection are selected automatically. To enable event logging: 1. Click Logs > Logs Configuration. The Logs Configuration Page opens. Figure 5 - 17: Logs Configuration Page The Logs Configuration Page contains the following fields: · Enable Logging -- Indicates if device global logs for Cache, File, and Server Logs are enabled. Console logs are enabled by default. The possible field values are: ­ ­ Checked -- Enables device logs. Unchecked -- Disables device logs. · Severity -- The following are the available log severity levels: ­ Emergency -- The highest warning level. If the device is down or not functioning properly, an emergency log message is saved to the specified logging location. Alert -- The second highest warning level. An alert log is saved, if there is a serious device malfunction; for example, all device features are down. Critical -- The third highest warning level. A critical log is saved if a critical device malfunction occurs; for example, two device ports are not functioning, while the rest of the device ports remain functional. ­ ­ Page 46 ­ ­ ­ ­ ­ Error -- A device error has occurred; for example, if a single port is offline. Warning -- The lowest level of a device warning. The device is functioning, but an operational problem has occurred. Notice -- Provides device information. Informational -- Provides device information. Debug -- Provides debugging messages. · · RAM Logs -- Defines the minimum severity level from which logs are sent to the RAM Log kept in RAM (Cache). Log File -- Defines the minimum severity level from which logs are sent to the log file kept in FLASH memory. 2. 3. Define the Enable Logging and Severity fields. Click . The log parameters are set and the device is updated. Page 47 Viewing the Memory Logs The Memory Logs Page contains all system logs in a chronological order that are saved in RAM (Cache). To view the Memory Logs: · Click Logs > Memory Logs. The Memory Logs Page opens. Figure 5 - 18: Memory Logs Page The Memory Logs Page contains the following fields: · · · · · ID ­ Displays the table entry number. Log Index -- Displays the log number. Log Time -- Displays the time at which the log was generated. Severity -- Displays the log severity. Description -- Displays the log message text. Page 48 Viewing Flash Logs The Flash Logs Page contains information about log entries saved to the log file in Flash, including the time the log was generated, the log severity, and a description of the log message. The message log is available after reboot. To view the message logs: · Click Logs > Flash Logs. The Flash Logs Page opens: Figure 5 - 19: Flash Logs Page The Flash Logs Page contains the following fields: · · · · · ID-- Displays the table entry number. Log Index -- Displays the log number. Log Time -- Displays the time at which the log was generated. Severity -- Displays the log severity. Description -- Displays the log message text. Page 49 Defining Server Logs The Server Logs Page contains information for viewing and configuring the remote log servers. New log servers can be defined and the log severity sent to each server. To configure server logs: 1. Click Logs > Server Logs. The Server Logs Page opens. Figure 5 - 20: Server Logs Page The Server Logs Page contains the following fields: · · · · ID -- Displays the table entry number. Server -- Specifies the server's IP address to which logs can be sent. UDP Port -- Defines the UDP port to which the server logs are sent. The possible range is 1 - 65535. The default value is 514. Facility -- Defines an application from which system logs are sent to the remote server. Only one facility can be assigned to a single server. If a second facility level is assigned, the first facility is overridden. All applications defined for a device utilize the same facility on a server. The field default is Local 7. The possible field values are Local 0 - Local 7. Description -- A user-defined server description. Minimum Severity -- Indicates the minimum severity from which logs are sent to the server. For example, if Notice is selected, all logs with a severity level of Notice and higher are sent to the remote server. Delete -- Deletes the currently selected servers from the Servers list. The possible field values are: ­ · · · Checked -- Removes the selected server from the Servers Log Parameters Page. Once removed, logs are no longer sent to the removed server. Page 50