Black Box SFP Managed Switch Eco - Manuals

v Table of Contents INTRODUCTION ................................................................................................................................................... 1 CHAPTER 1 OPERATION OF WEB-BASED MANAGEMENT .............................................................. 2 CHAPTER ...

LGB5128A User Manual vi 3-5.1 Instance .............................................................................................................................................. 63 3-5.2 Port Configuration .............................................................................................

vii 3-16.9 DSCP Classification ....................................................................................................................... 145 3-16.10 QoS Control List Configuration ................................................................................................... 146 3-...

LGB5128A User Manual viii 5-3.3 Save User .......................................................................................................................................... 228 5-3.4 Restore User ...................................................................................................

LGB5128A User Manual 1 INTRODUCTION Overview This user’s manual explains how to install and connect your network system to configure and monitor the LGB5128A through its built-in CLI and Web via the RS-232 serial interface and Ethernet ports. Examples of hardware and software functions are shown as ...

LGB5128A User Manual 2 Chapter 1 Operation of Web-based Management Initial Configuration This chapter instructs you how to configure and manage the LGB5128A through the Web user interface. With this facility, you can easily access and monitor status of all switches through any one port of the switch...

3 N OTE : DHCP is enabled on the LGB5128A, but if you do not have a DHCP server to provide IP addresses to the switch, use the switch default ip 192.168.1.1 Figure 1 The login page

LGB5128A User Manual 4 Chapter 2 System Configuration This chapter describes all of the basic configuration tasks, including the switch’s system information and management (for example, Time, Account, IP, Syslog, and SNMP.) 2-1 System Information After you login, the switch shows you the system info...

5 Parameter description:  Model name: The model name of this device.  System description: 8-port 10/100/1000BASE-T + 2-Port TP/(100/1G) SFP Combo L2 Plus Managed Switch .  Location: Where this switch is located. User-defined.  Contact: Write down the contact person and phone here for help managi...

LGB5128A User Manual 6 2-1.2 Configuration You can identify the system by configuring the contact information, name, and location of the switch. Web interface To configure System Information in the Web interface: 1. Click System, System Information, Configuration. 2. Write System Contact , System Na...

LGB5128A User Manual 8  Time Set Offset: Provides the Daylight saving time set offset. The offset is given in minutes east of GMT. The valid range is from 1 to 1440 minutes . default is 60 minutes.  Daylight Savings Type: Provide the Daylight savings type selection. You can select “By Dates” or “R...

LGB5128A User Manual 9 2-2.2 NTP NTP is Network Time Protocol and is used to sync the network time based on Greenwich Mean Time (GMT). If you use the NTP mode and select a built-in NTP time server or manually specify an user-defined NTP server as well as Time Zone, the switch will sync the time in s...

11  Privilege Level : The privilege level of the user. The allowed range is 1 to 15. If the privilege level value is 15, the user can access all groups, i.e. he is granted the full control of the device. Other values need to refer to each group privilege level. A user’s privilege should be same or ...

LGB5128A User Manual 12 Figure 2-3.2: The Privilege Level configuration Parameter description:  Group Name The name identifying the privilege group. In most cases, a privilege level group consists of a single module (e.g. LACP, RSTP or QoS), but a few groups contain more than one. The following def...

13 Maintenance: CLI: System Reboot, System Restore Default, System Password, Configuration Save, Configuration Load, and Firmware Load. Web: Users, Privilege Levels, and everything in Maintenance. Debug: Only present in CLI.  Privilege Levels Every group has an authorization Privilege level for the...

15 2-4.2 IPV6 This section describes how to configure the switch-managed IPv6 information. The Configured column is used to view or change the IPv6 configuration. The Current column is used to show the active IPv6 configuration. Configure the switch-managed IPv6 information on this page. The Configu...

LGB5128A User Manual 16 2-5 Syslog The Syslog is a standard for logging program messages. It allows separation of the software that generates messages from the system that stores them and the software that reports and analyzes them. It can be used as well a generalized informational, analysis, and d...

17 2-5.2 Log This section how to display the system log information of the switch Web Interface To display the log configuration in the Web interface: 1. Click Syslog, Log. 2. Display the log information. Figure 2-5.2: The System Log configuration Parameter description:  Auto-refresh When you click...

LGB5128A User Manual 18 2-5.3 Detailed Log This section describes that display the detailed log information of the switch Web Interface To display the detailed log configuration in the Web interface: 1. Click Syslog, Detailed Log. 2. Display the log information. Figure 2-5.3: The Detailed System Log...

LGB5128A User Manual 20 2-6.2 Communities The function is used to configure SNMPv3 communities. The Community and User Name is unique. To create a new community account, please check <Add new community> button, and enter the account information, then check <Save>. Max Group Number : 4. W...

21 2-6.3 Users The function is used to configure SNMPv3 user. The Entry index key is UserName. To create a new UserName account, click on the <Add new user> button, and enter the user information then check <Save>. Max Group Number : 10. Web Interface To display the configure SNMP Users ...

LGB5128A User Manual 22 MD5: An optional flag to indicate that this user uses MD5 authentication protocol. SHA: An optional flag to indicate that this user uses SHA authentication protocol. The value of security level cannot be modified if entry already exists. That means must first ensure that the ...

23 2-6.4 Groups The function is used to configure SNMPv3 group. The Entry index key are Security Model and Security Name. To create a new group account, please check <Add new group> button, and enter the group information then check <Save>. Max Group Number : v1: 2, v2: 2, v3:10. Web Int...

LGB5128A User Manual 24 2-6.5 Views The function is used to configure SNMPv3 view. The Entry index keys are OID Subtree and View Name. To create a new view account, please click on the <Add new view> button, and enter the view information then click on <Save>. Max Group Number : 28. Conf...

25  OID Subtree The OID defining the root of the subtree to add to the named view. The allowed OID length is 1 to 128. The allowed string content is digital number or asterisk(*).  Save Click the Save icon to save the configuration to ROM. 2-6.6 Access The function is used to configure SNMPv3 acce...

LGB5128A User Manual 26 v2c: Reserved for SNMPv2c. usm: User-based Security Model (USM).  Security Level Indicates the security model that this entry should belong to. Possible security models are: NoAuth, NoPriv: No authentication and no privacy. Auth, NoPriv: Authentication and no privacy. Auth, ...

27 Parameters description:  Delete: Check <Delete> entry then click on the <Save> button, and the entry will be deleted.  Trap Version: You may choose v1, v2c, or v3 trap.  Server IP: Assign the SNMP Host IP address.  UDP Port: Assign the Port number. Default: 162  Community/Securit...

29 Chapter 3. Configuration This chapter describes all of the basic network configuration tasks, including the Ports, Layer 2 network protocol (e.g., VLANs, QoS, IGMP, ACLs, and PoE, etc.), and any setting of the switch. 3-1 Port The section describes how to configure the Port detail parameters of t...

31 3-1.2 Port Description The section describes how to configure the Port’s alias or any description for the Port Identity. The user can write down an alphanumeric string describing the full name and version identification for the system’s hardware type, software version, and networking application....

LGB5128A User Manual 32 3-1.3 Traffic Overview The section describes the Port statistics information and provides an overview of general traffic statistics for all switch ports. The ports belong to the currently selected stack unit, as reflected by the page header. Web Interface To Display the Port ...

33 3-1.4 Detailed Statistics The section describes how to provide detailed traffic statistics for a specific switch port. Use the port select box to select which switch port details to display. The selected port belongs to the currently selected stack unit, as reflected by the page header. The displ...

LGB5128A User Manual 34  Rx and Tx Multicast : The number of received and transmitted (good and bad) multicast packets.  Rx and Tx Broadcast : The number of received and transmitted (good and bad) broadcast packets.  Rx and Tx Pause : A count of the MAC Control frames received or transmitted on t...

LGB5128A User Manual 36 3-1.6 SFP Information The section describes how a switch displays the SFP module detail information that you use to connect it to the switch. The information includes: Connector type, Fiber type, wavelength, baud rate, and Vendor OUI etc. Web Interface To Display the SFP info...

37  Vendor Rev (Revision): Display the module revision.  Vendor SN (Serial Number): Show the serial number assigned by the manufacturer.  Date Code: Show the date this SFP module was made.  Temperature: Show the current temperature of SFP module.  Vcc: Show the working DC voltage of SFP module....

LGB5128A User Manual 38 Figure 3-1.7: The EEE Configuration Parameter description:  EEE Port Configuration: The EEE port settings relate to the currently selected stack unit, as reflected by the page header.  Port : The switch port number of the logical EEE port.  EEE Enabled : Controls whether E...

39 3-2.1 Ports The section describes how to configure the ACL parameters (ACE) of each switch port. These parameters will affect frames received on a port unless the frame matches a specific ACE. Web Interface To configure the ACL Ports Configuration in the Web interface: 1. Click Configuration, ACL...

LGB5128A User Manual 40  Mirror : Specify the mirror operation of this port. The allowed values are: Enabled: Frames received on the port are mirrored. Disabled: Frames received on the port are not mirrored. The default value is “Disabled.”  Logging : Specify the logging operation of this port. Th...

41 Figure 3-2.2: The ACL Rate Limiter Configuration Parameter description:  Rate Limiter ID : The rate limiter ID for the settings contained in the same row.  Rate The allowed values are: 0-3276700 in pps or 0, 100, 200, 300, ..., 1000000 in kbps.  Unit : Specify the rate unit. The allowed values...

LGB5128A User Manual 42 Web Interface To configure Access Control List in the Web interface: 1. Click Configuration, ACL, then Configuration. 2. Click the “+” button to add a new ACL, or use the other ACL modification buttons to specify the editing action (i.e., edit, delete, or moving the relative ...

LGB5128A User Manual 46 Web Interface To configure the Trunk Aggregation Hash mode and Aggregation Group in the Web interface: 1. Click Configuration, Static Trunk, and then Aggregation Mode Configuration. 2. Evoke to enable or disable the aggregation mode function. Evoke Aggregation Group ID and Po...

47 Aggregation Group Configuration  Locality : Indicates the aggregation group type. This field is only valid for stackable switches. Global: The group members may reside on different units in the stack. The device supports two 8-port global aggregations. Local: The group members reside on the same...

49 3-3.2.2 System Status This section describes how to set LACP function on the switch to provide a status overview for all LACP instances. Web Interface To display the LACP System status in the Web interface: 1. Click Configuration, LACP, System Status. 2. If you want to auto-refresh the informatio...

51 3-3.2.4 Port Statistics This section describes how to set LACP function on the switch to provide a Port Statistics overview for all LACP instances. Web Interface To display the LACP Port status in the Web interface: 1. Click Configuration, LACP, Port Statistics. 2. If you want to auto-refresh the...

LGB5128A User Manual 52 3-4 Spanning Tree The Spanning Tree Protocol (STP) can be used to detect and disable network loops, and to provide backup links between switches, bridges, or routers. This allows the switch to interact with other bridging devices (that is, an STP-compliant switch, bridge, or ...

53 Figure 3-4.1: The STP Bridge Configuration Parameter description: Basic Settings  Protocol Version : The STP protocol version setting. Valid values are STP, RSTP, and MSTP.  Bridge Priority : Controls the bridge priority. Lower numeric values have better priority. The bridge priority plus the M...

LGB5128A User Manual 54 Advanced Settings  Edge Port BPDU Filtering : Control whether a port explicitly configured as Edge will transmit and receive BPDUs.  Edge Port BPDU Guard : Control whether a port explicitly configured as Edge will disable itself upon reception of a BPDU. The port will enter...

55 Figure 3-4.2: The MSTI Configuration Parameter description: Configuration Identification  Configuration Name : The name identifying the VLAN to MSTI mapping. Bridges must share the name and revision (see below), as well as the VLAN-to-MSTI mapping configuration in order to share spanning trees f...

LGB5128A User Manual 56 Web Interface To configure the Spanning Tree MSTI Priorities parameters in the Web interface: 1. Click Configuration, Spanning Tree, MSTI Priorities. 2. Scroll the Priority. The maximum is 240. Default is 128. 3. Click the save button to save the setting 4. If you want to can...

LGB5128A User Manual 58  Restricted Role : If enabled, this causes the port not to be selected as Root Port for the CIST or any MSTI, even if it has the best spanning tree priority vector. Such a port will be selected as an Alternate Port after the Root Port has been selected. If set, it can cause ...

LGB5128A User Manual 60 3-4.6 Bridge Status After you complete the MSTI Port configuration, you could to ask the switch to display the Bridge Status. The Section provides a status overview of all STP bridge instances. The displayed table contains a row for each STP bridge instance, where the column ...

61 3-4.7 Port Status After you complete the STP configuration, you could to ask the switch to display the STP Port Status. The section explains how to ask the switch to display the STP CIST port status for physical ports of the currently selected switch.: Web Interface To display the STP Port status...

LGB5128A User Manual 62 3-4.8 Port Statistics After you complete the STP configuration, then you can to enable the switch to display the STP Statistics. The section explains how to ask the switch to display the STP Statistics detail counters of bridge ports in the currently selected switch. Web Inte...

63 It means the switch supports the MRSTP. Several spanning trees exist at the same time and these spanning trees won’t affect each other. A switch supports MRSTP and accepts two or more RSTP in signal equipment. These two RSTP group have different ports to join them and between different Hello Time...

LGB5128A User Manual 65 3-5.2 Port Configuration The chapter describes how to configure the MRSTP port. After you configure the MRSTP instance, then you can assign the port to join the instance and set the parameters to implement MRSTP. Web Interface To configure the MRSTP Port configuration in the ...

67 3-5.3 Port Status The section describes how to configure a MRSTP Port status table. You will see the MRSTP configuration result, each port that joins the MRSTP group, and its statistics. Web Interface To view the MRSTP Port status in the Web interface: 1. Click Configuration, MRSTP, Port Status. ...

LGB5128A User Manual 68 Displays the port priority. Priority here means Port Priority. Port Priority and Port Number are mixed to form the Port ID. Port IDs are often compared in order to determine which port of a bridge would become the Root Port. The range is 0–240.  Admin Edge : Displays the por...

69 Figure 3-5.1: The IGMP Snooping Configuration. Parameter description:  Snooping Enabled: Enable the Global IGMP Snooping.  Unregistered IPMCv4 Flooding enabled : Enable unregistered IPMCv4 traffic flooding.  IGMP SSM Range : SSM (Source-Specific Multicast) Range allows the SSM-aware hosts and ...

LGB5128A User Manual 70 3-5.2 VLAN Configuration The section describes the VLAN configuration setting process integrated with the IGMP Snooping function. Each setting page shows up to 99 entries from the VLAN table (the default is 20) selected through the "entries per page" input field. When...

71  QRI : Query Response Interval. The Max. Response Time used to calculate the Max. Resp. Code inserted into the periodic General Queries. The allowed range is 0 to 31744 in tenths of seconds; default query response interval is 100 in tenths of seconds (10 seconds).  LLQI (LMQI for IGMP) : Last M...

73 3-5.4 Status After you complete the IGMP Snooping configuration, the switch can display the IGMP Snooping Status. The section explains how to display the IGMP Snooping detail status. Web Interface To display the IGMP Snooping status in the Web interface: 1. Click Configuration, IGMP Snooping, Sta...

LGB5128A User Manual 74  V2 Leaves Received : The number of Received V2 Leaves.  Auto-refresh Click the box next to auto-refresh and the device will refresh the log automatically.  Upper right icon (Refresh, clear) Click on these icons to refresh the Status or clear manually. 3-5.5 Group Informat...

75 3-5.6 IPv4 SSM information Source Specific Multicast (SSM) is a datagram delivery model that best supports one-to-many applications, also known as broadcast applications. SSM is a core network technology of IP multicast targeted for audio and video broadcast application environments. For the SSM ...

77 3-6.1 Basic Configuration The section explains how to configure the MLD Snooping basic configuration and the parameters. Web Interface To configure the MLD Snooping Configuration in the Web interface: 1. Click Configuration, MLD Snooping, Basic Configuration. 2. Enable or disable the Global confi...

LGB5128A User Manual 78  Port: The Port index to enable or disable the MLD Snooping function.  Fast Leave : Enable the fast leave on the port.  Router Port : Specify which ports act as router ports. A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or ...

79  Compatibility : Compatibility is maintained by hosts and routers taking appropriate actions depending on the versions of MLD operating on hosts and routers within a network. The allowed selection is MLD-Auto, Forced MLDv1, Forced MLDv2, default compatibility value is MLD-Auto.  Rv : Robustness...

LGB5128A User Manual 80 Figure 3-7.3: The MLD Snooping Port Group Filtering Configuration Parameter description:  Delete : Check to delete the entry. It will be deleted during the next save.  Port : The logical port for the settings. You can enable the port to join filtering groups.  Filtering Gr...

81 Figure 3-6.4: The MLD Snooping Status Parameter description:  VLAN ID : The VLAN ID of the entry.  Querier Version : The currently working Querier Version.  Host Version : The currently working Host Version.  Querier Status : Show the Querier status is "ACTIVE" or "IDLE."  Qu...

LGB5128A User Manual 82 Web Interface To display the MLD Snooping Group information in the Web interface: 1. Click Configuration, MLD Snooping, Group Information. 2. If you want to auto-refresh the information then you need to check the “Auto-refresh” box. 3. Click “ Refresh“ to refresh an entry of ...

83 3-6.6 IPv6 SSM Information The section describes how to configure the Entries in the MLDv2 Information Table are shown on this page. The MLDv2 Information Table is sorted first by VLAN ID, then by group, and then by Port No. Different source addresses that belong to the same group are treated as ...

85  Immediate Leave : Enable the fast leave on the port.  Buttons: Save – Click to save changes. Reset- Click to undo any changes made locally and revert to previously saved values. 3-7.2 Groups Information The section describes how to display the MVR Groups detail information on the switch. Entri...

LGB5128A User Manual 86 3-7.3 Statistics The section describes how the switch will display the MVR detail Statistics after you configured MVR on the switch. It provides the detail MVR Statistics Information. Web Interface To display the MVR Statistics Information in the Web interface: 1. Click Confi...

87 3-8 LLDP The switch supports the LLDP. For current information on your switch model, the Link Layer Discovery Protocol (LLDP) provides a standards-based method for enabling switches to advertise themselves to adjacent devices and to learn about adjacent LLDP devices. The Link Layer Discovery Prot...

LGB5128A User Manual 88  Tx Hold : Each LLDP frame contains information about how long the information in the LLDP frame will be considered valid. The LLDP information valid period is set to Tx Hold multiplied by Tx Interval seconds. Valid values are restricted to 2–10 times.  Tx Delay : If some c...

89 N OTE : When CDP awareness on a port is disabled, the CDP information isn't removed immediately, but gets when the hold time is exceeded.  Port Descr : Optional TLV: When checked the "port description" is included in LLDP information transmitted.  Sys Name : Optional TLV: When checked t...

LGB5128A User Manual 90 Parameter description:  Local Port : The port on which the LLDP frame was received.  Chassis ID : The Chassis ID is the identification of the neighbor's LLDP frames.  Remote Port ID : The Remote Port ID is the identification of the neighbor port.  System Name : System Nam...

LGB5128A User Manual 92 Parameter description: Fast start repeat count Rapid startup and Emergency Call Service Location Identification Discovery of endpoints is a critically important aspect of VoIP systems in general. In addition, it is best to advertise only those pieces of information that are s...

93 NAD83/MLLW: North American Datum 1983, CRS Code 4269, Prime Meridian Name: Greenwich; The associated vertical datum is Mean Lower Low Water (MLLW). This datum pair is to be used when referencing locations on water/sea/ocean. Civic Address Location IETF Geopriv Civic Address based Location Configu...

LGB5128A User Manual 94  Floor : Floor - Example: 4.  Room no. : Room number - Example: 450F.  Place type : Place type - Example: Office.  Postal community name : Postal community name - Example: Leonia.  P.O. Box : Post office box (P.O. BOX) - Example: 12345.  Additional code : Additional cod...

LGB5128A User Manual 96  L2 Priority : L2 Priority is the Layer 2 priority to be used for the specified application type. L2 Priority may specify one of eight priority levels (0 through 7), as defined by IEEE 802.1D-2004. A value of 0 represents use of the default priority as defined in IEEE 802.1D...

99  Priority : Priority is the Layer 2 priority to be used for the specified application type. Choose one of the eight priority levels (0 through 7).  DSCP : DSCP is the DSCP value to be used to provide Diffserv node behavior for the specified application type as defined in IETF RFC 2474. Contain ...

101 3-8.6 Port Statistics Two types of counters are shown. Global counters are counters that refer to the whole stack of switches, while local counters refer to per port counters for the currently selected switch. Web Interface To show LLDP Statistics: 1. Click LLDP, than click Port Statistics to sh...

103 3- 9 Filtering Data Base Filtering Data Base Configuration gathers many functions that cannot be categorized to some function type, including MAC Table Information and Static MAC Learning. MAC table Frame switching is based upon the DMAC address contained in the frame. The switch builds up a tab...

LGB5128A User Manual 104 Parameter description:  Aging Configuration : By default, dynamic entries are removed from the MAC table after 300 seconds. This removal is also called aging. Configure aging time by entering a value here in seconds; for example, Age time seconds. The allowed range is 10 to...

105 3- 9.2 Dynamic MAC Table Entries in the MAC Table are shown on this page. The MAC Table contains up to 8192 entries, and is sorted first by VLAN ID, then by MAC address. Web Interface To Display the MAC Address Table in the Web interface: 1. Click Dynamic MAC Table. 2. Specify the VLAN and MAC A...

107  Port Members : A row of check boxes for each port is displayed for each VLAN ID. To include a port in a VLAN, check the box. To remove or exclude the port from the VLAN, make sure the box is unchecked. By default, no ports are members, and all boxes are unchecked.  Adding a New VLAN : Click t...

109 If Specific (the default value) is selected, a Port VLAN ID can be configured (see below). Untagged frames received on the port are classified to the Port VLAN ID. If VLAN awareness is disabled, all frames received on the port are classified to the Port VLAN ID. If the classified VLAN ID of a fr...

LGB5128A User Manual 112 Figure 3-10.5.1: The Private VLAN Membership Configuration Parameter description:  Delete : To delete a private VLAN entry, check this box. The entry will be deleted during the next save.  Private VLAN ID : Indicates the ID of this particular private VLAN.  Port Members :...

LGB5128A User Manual 114 Figure 3-10.6.1: The MAC-based VLAN Membership Configuration Parameter description:  Delete : To delete a MAC-based VLAN entry, check this box and press save. The entry will be deleted on the selected switch in the stack.  MAC Address : Indicates the MAC address.  VLAN ID...

115 3-10.6.2 Status This section shows MAC-based VLAN entries configured by various MAC-based VLAN users. Currently, we support following VLAN User types: NAS : NAS provides port-based authentication, which involves communications between a Supplicant, Authenticator, and an Authentication Server. We...

LGB5128A User Manual 116 3-10.7 Protocol -based VLAN This section describes Protocol -based VLAN, Protocols supported by the switch include Ethernet LLC and SNAP. LLC The Logical Link Control (LLC) data communication protocol layer is the upper sub-layer of the Data Link Layer (which is itself layer...

117 2. LLC 3. SNAP N OTE : On changing the Frame type field, valid value of the following text field will vary depending on the new frame type you selected .  Value : Valid value that can be entered in this text field depends on the option selected from the preceding Frame Type selection menu. List...

119  Buttons: Save – Click to save changes. Reset- Click to undo any changes made locally and revert to previously saved values.  Auto-refresh : Check the box next to auto-refresh and the device will refresh the information automatically.  Upper right icon (Refresh): Click on this icon to refresh...

LGB5128A User Manual 120 Parameter description:  Port : The Port column shows the list of ports for which you can configure GARP settings. There are 2 types configuration settings that can be configured on per port bases. • Timer Values • Applicantion • Attribute Type • GARP Applicant  Timer Value...

121 3-12.2 Statistics The section describes GARP port statistics http://192.0.2.1/help/glossary.htm - qos for all switch ports. The port statistics relate to the currently selected stack unit, as reflected by the page header. Web Interface To display GARP Port statistics in the Web interface: 1. Cli...

LGB5128A User Manual 130 3-15.2 Statistics This page shows the basic MVRP Port statistics for all switch ports. The statistics relate to the currently selected stack unit, as reflected by the page header. Web Interface To display MVRP Port statistics in the Web interface: 1. Click MVRP statistics. 2...

133 3-16.2 Port Policing This section provides an overview of QoS Ingress Port Policers for all switch ports The Port Policing is useful in constraining traffic flows and marking frames above specific rates. Policing is primarily useful for data flows and voice or video flows because voice and video...

135 Parameter description:  Port : The logical port for the settings contained in the same row. Click on the port number in order to configure the schedulers.  Mode : Shows the scheduling mode for this port.  Weight (Qn) : Shows the weight for this queue and port.  Scheduler Mode : Controls whet...

LGB5128A User Manual 136  Queue Scheduler Percent : Shows the weight in percent for this queue. This parameter is only shown if "Scheduler Mode" is set to "Weighted."  Port Shaper Enable : Controls whether the port shaper is enabled for this switch port.  Port Shaper Rate : Contro...

139 3-16.5 Port Tag Remarking The Section provides user to get an overview of QoS Egress Port Tag Remarking for all switch ports. Others the ports belong to the currently selected stack unit, as reflected by the page header. Web Interface To display the QoS Port Tag Remarking in the Web interface: 1...

147 Ethernet: Only Ethernet frames (with Ether Type 0x600-0xFFFF) are allowed. LLC: Only (LLC) frames are allowed. SNAP: Only (SNAP) frames are allowed IPv4: The QCE will match only IPV4 frames. IPv6: The QCE will match only IPV6 frames.  SMAC : Displays the OUI field of Source MAC address, i.e. fi...

151 Parameter description:  Frame Type : The settings in a particular row apply to the frame type listed here: Unicast, Multicast, or Broadcast.  Enable : Enable or disable the storm control status for the given frame type.  Rate : The rate unit is packets per second (pps). Valid values are: 1, 2...

LGB5128A User Manual 154  Max Hdr Size : Configured size of the header of the sampled frame.  Polling Interval : Configured polling interval for the counter sampling.  Buttons: Circle-E button — Edits the Data source sampler configuration. Save – Click to save changes. Reset- Click to undo any ch...

155 Figure 3-20.1: The Mirror Configuration Parameter description:  Port to mirror on : Port to mirror is also known as the mirror port. Frames from ports that have either source (rx) or destination (tx) mirroring enabled are mirrored on this port. Disabled disables mirroring. Mirror Port Configura...

LGB5128A User Manual 156  Buttons: Save – Click to save changes. Reset- Click to undo any changes made locally and revert to previously saved values. 3-20 Trap Event Severity Use this function to set a Alarm trap and get the Event log. The Trap Events Configuration function enables the switch to se...

157 3-21 SMTP Configuration Use this function to set a Alarm trap. When the switch alarm goes off, you can set the SMTP server to send you the alarm mail. Web Interface To configure the SMTP Configuration in the Web interface: 1. Click Configuration, SMTP Configuration. 2. Scroll to select the Sever...

LGB5128A User Manual 158 3-22 802.3ah OAM For Carrier Ethernet applications, you can reduce operating costs and increase the remote access for maintenance. Using Ethernet as a metropolitan and wide-area networking technology requires a new set of OAM protocols. Service provider networks are large an...

159 Parameter description:  Port Members : The switch port number and index for port configuration IEEE 802.3ah OAM.  OAM Enabled : You can set OAM enable or disable on the Port. Controls whether Link OAM is enabled on this switch port. Enabling Link OAM enables the network operators to monitor th...

LGB5128A User Manual 160 3-22.2 Event Config This chapter explains how to inspect and change the current Link OAM Event configurations. It allows you to set what kind of event triggers the 802.3ah OAM monitor and management function. Web Interface To configure the Link event configuration in the Web...

161 Frame Period Error Event: The Errored Frame Period Event TLV counts the number of errored frames detected during the specified period. The period is specified by a number of received frames. This event is generated if the errored frame count is greater than or equal to the specified threshold fo...

LGB5128A User Manual 162 3-22.3 Port Status When you configure the IEEE802.3ah OAM, then the switch will display the Port Status in this page. It provides Link OAM configuration operational status. The displayed field shows the active configuration status for the selected port. Web Interface To disp...

163  Link Monitoring Support : If status is enabled, DTE supports interpreting Link Events. The field will show enabled.  MIB Retrieval Support : If status is enabled, DTE supports sending Variable Response OAMPDUs.. The field will show enabled.  MTU Size : This represents the largest OAMPDU, in ...

LGB5128A User Manual 164 3-22.4 Link Events This chapter explains how to inspect and change the current Link OAM Link Event configurations. The Link OAM Link Event status relate to the currently selected stack unit, as reflected by the page header. The left pane displays the Event status for the Loc...

LGB5128A User Manual 166  Event Seconds Summary Error Total : This four-octet field indicates the sum of errored frame seconds that have been detected since the OAM sub-layer was reset.  Event Seconds Summary Event Total : This four-octet field indicates the number of Errored Frame Seconds Summary...

LGB5128A User Manual 167 3-22.5 Statistics This chapter explains how to provide detailed OAM traffic statistics for a specific switch port. Use the port select box to select which switch port details to display. The displayed counters represent the total number of OAM frames received and transmitted...

LGB5128A User Manual 170 Ingress: This is a Ingress (down) MEP—monitoring ingress traffic on “Residence Port.” Egress: This is a Egress (up) MEP—monitoring egress traffic on “Residence Port.”  Residence Port : The port where MEP is monitoring—see “Direction.” You need to assign a port to monitor th...

173 3-23 ERPS The chapter describes Ethernet Ring Protection Switching (ERPS). ITU-T under G.8032 recommended this to provide sub-50ms protection and recovery switching for Ethernet traffic in a ring topology, and at the same time ensuring that there are no loops formed at the Ethernet layer. Ethern...

LGB5128A User Manual 174 The West APS PDU handling MEP. Only one APS MEP is associated with interconnected sub-ring without virtual channel, and it is configured as "0" for such ring instances. "0" in this field indicates that no west APS MEP is associated with this instance.  Ring ...

175 3-22 PTP For Carrier Ethernet application, PTP is an acronym for Precision Time Protocol, a network protocol for synchronizing the clocks of computer systems. The chapter explains how to configure and inspect the current PTP clock settings. 3-22.1 Configuration This chapter allows the user to co...

177 N OTE : IPv4 unicast protocol only works in Master only and Slave only clocks. See parameter Device Type. In a unicast Slave, the only clocks you need to configure are the master clocks to request Announce and Sync messages from. See: Unicast Slave Configuration.  VLAN Tag Enable: Enables the V...

LGB5128A User Manual 180 Chapter 4. Security This chapter describes all of the switch security configuration tasks that enhance the security of local networks, including IP Source Guard, ARP Inspection, DHCP Snooping, AAA, etc. 4-1 IP Source Guard The section describes how to configure the IP Source...

181 Parameter description:  Mode of IP Source Guard Configuration : Enable the Global IP Source Guard or disable the Global IP Source Guard. All configured ACEs will be lost when the mode is enabled.  Port Mode Configuration : Specify which ports IP Source Guard is enabled on. Only when both Globa...

LGB5128A User Manual 184 4-2 ARP Insprction The section describes how to configure the ARP Inspection parameters of the switch. You could use the ARP Inspection configure to manage the ARP table. 4-2.1 Configuration This section describes how to configure ARP Inspection setting including: Mode (Enab...

LGB5128A User Manual 188 4-3.2 Statistics The section describes how to show the DHCP Snooping Statistics information of the switch. The statistics show only packet counters when DHCP snooping mode is enabled and relay mode is disabled. And it doesn't count the DHCP packets for DHCP client. Web Inter...

189  Rx and Tx Lease Active : The number of lease active (option 53 with value 13) packets received and transmitted.  Auto-refresh : Click the box next to auto-refresh and the device will refresh the information automatically.  Upper right icon (Refresh, Clear ): Click on these icons to refresh t...

LGB5128A User Manual 190 4-4 DHCP Relay The section describes how to forward DHCP requests to another specific DHCP servers via DHCP relay. The DHCP servers may be on another network. 4-4.1 Configuration This section describes how to configure DHCP Relay setting including ： Relay Mode (Enabled and D...

191 Indicates the DHCP relay information option policy. When DHCP relay information mode operation is enabled, if agent receives a DHCP message that already contains relay agent information it will enforce the policy. And it only works under DHCP if relay information operation mode is enabled. Possi...

LGB5128A User Manual 192 4-4.2 Statistics The section describes the switch’s DHCP Relay Statistics information. The statistics show both Server and Client packet counters when DHCP Relay mode is enabled. Web Interface To configure a DHCP Snooping Statistics Configuration in the Web interface: 1. Che...

193 The number of packets that were replaced with relay agent information option.  Keep Agent Option : The number of packets whose relay agent information was retained.  Drop Agent Option : The number of packets that were dropped which were received with relay agent information.  Auto-refresh : C...

LGB5128A User Manual 194 4-5 NAS The section describes how to configure the NAS parameters of the switch. You can use the NAS server to connect users to a variety of resources including Internet access, conference calls, printing documents on shared printers, or by simply logging on to the Internet....

LGB5128A User Manual 196 RADIUS-assigned QoS centrally controls the traffic class to which traffic coming from a successfully authenticated supplicant is assigned on the switch. The RADIUS server must be configured to transmit special RADIUS attributes to take advantage of this feature (see RADIUS-A...

197 In this mode, the switch will send one EAPOL Success frame when the port link comes up, and any client on the port will be allowed network access without authentication.  Force Unauthorized : In this mode, the switch will send one EAPOL Failure frame when the port link comes up, and any client ...

LGB5128A User Manual 198 In port-based 802.1X authentication, once a supplicant is successfully authenticated on a port, the whole port is opened for network traffic. This allows other clients connected to the port (for instance through a hub) to piggyback on the successfully authenticated client an...

199 order to successfully identify a QoS Class. The User-Priority-Table attribute defined in RFC4675 forms the basis for identifying the QoS Class in an Access-Accept packet. Only the first occurrence of the attribute in the packet will be considered, and to be valid, it must follow this rule: • All...

LGB5128A User Manual 202  Auto-refresh : Click the box next to auto-refresh and the device will refresh the information automatically.  Upper right icon (Refresh): Click on these icons to refresh the NAS Switch Status manually.

203 4-5.3 Port Status The section provides detailed NAS statistics for a specific switch port running EAPOL-based IEEE 802.1X authentication. Web Interface To configure a NAS Port Status Configuration in the Web interface: 1. Specify the Port that you want to check. 2. Check “Auto-refresh.” Figure 4...

LGB5128A User Manual 204 • Single 802.1X • Multi 802.1X  Backend Server Counters : These backend (RADIUS) frame counters are available for the following administrative states: • Port-based 802.1X • Single 802.1X • Multi 802.1X • MAC-based Auth.  Last Supplicant/Client Info : Information about the ...

LGB5128A User Manual 206 4-6 AAA This section shows you to use an AAA (Authentication, Authorization, Accounting) server to provide access control to your network. The AAA server can be a TACACS+ or RADIUS server to create and manage objects that contain settings for using AAA servers. 4-6.1 Configu...

LGB5128A User Manual 208 RADIUS Authentication Server Configuration The table has one row for each RADIUS Authentication Server and a number of columns, which are:  # : The RADIUS Authentication Server number for which the configuration below applies.  Enabled : Enable the RADIUS Authentication Se...

209  Secret : The secret—up to 29 characters long—shared between the TACACS+ Authentication Server and the switch stack.  Buttons: Save – Click to save changes. Reset- Click to undo any changes made locally and revert to previously saved values. 4-6.2 Radius Overview This section shows you an over...

LGB5128A User Manual 210 The IP address and UDP port number (in <IP Address>:<UDP Port> notation) of this server.  State : The current state of the server. This field has one of the following values: Disabled: The server is disabled. Not Ready: The server is enabled, but IP communicatio...

211 Parameter description:  Auto-refresh : Click the box next to auto-refresh and the device will refresh the information automatically.  Upper right icon (Refresh, Clear): Click on these icons to refresh the RADIUS Statistics information by manual or to clear all entries. 4-7 Port Security This s...

LGB5128A User Manual 212 Parameter description: System Configuration  Mode : Indicates if Limit Control is globally enabled or disabled on the switch stack. If globally disabled, other modules may still use the underlying functionality, but limit checks and corresponding actions are disabled.  Agi...

213 1) Boot the stack or elect a new master switch, 2) Disable and re-enable Limit Control on the port or the switch stack. 3) Click the Reopen button. Trap & Shutdown: If Limit + 1 MAC addresses is seen on the port, both the "Trap" and the "Shutdown" actions described above will...

LGB5128A User Manual 214 4-7.2 Switch Status This section shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules—the user modules. When a user module has enabled port security on a port, the port is set up for softwar...

LGB5128A User Manual 216 4-7.3 Port Status This section shows the MAC addresses secured by the Port Security module. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules—the user modules. When a user module has enabled port security on a port, the...

217 4-8 Access Management This section shows you to configure access management table of the Switch including HTTP/HTTPS, SNMP, and TELNET/SSH. You can manage the Switch over an Ethernet LAN, or over the Internet. 4-8.1 Configuration This section shows you how to configure access management table of...

LGB5128A User Manual 220 4-9 SSH This section shows you to use SSH (Secure SHell) to securely access the Switch. SSH is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication. Web Interface To configure a SSH Configuration in the We...

221 4-10 HTTPs This section shows you how to use HTTPS to securely access the Switch. HTTPS is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication via the browser. Web Interface To configure a HTTPS Configuration in the Web inter...

LGB5128A User Manual 222 4-11 Auth Method This page shows how a user is authenticated when he logs into the switch stack via one of the management client interfaces. Web Interface To configure a Authentication Method Configuration in the Web interface: 1. Specify the Client (console, telent, ssh, we...

223 Chapter 5. Maintenance This chapter describes switch Maintenance configuration tasks to enhance the performance of the local network, including Restart Device, Firmware upgrade, Save/Restore, Import/Export, and Diagnostics. 5-1 Restart Device This section describes how to restart switch for any ...

LGB5128A User Manual 224 5-2 Firmware This section describes how to upgrade Firmware. The Switch can be enhanced with more value-added functions by installing firmware upgrades. 5-2.1 Firmware Upgrade This page facilitates an update of the firmware controlling the Web Interface To configure a Firmwa...

225 5-2.2 Firmware Selection The switch supports Dual image for firmware redundancy purpose. You can select the firmware image for your device start firmware or operating firmware. This page provides information about the active and alternate (backup) firmware images in the device, and allows you to...

227 5-3 Save / Restore This section describes how to save and restore the Switch configuration, including reset to Factory Defaults, Save Start, Save Users, or Restore Users for any maintenance needs. 5-3.1 Factory Defaults This section describes how to reset the Switch configuration to Factory Defa...

LGB5128A User Manual 228 5-3.3 Save User This section describes how to save users information. Any current configuration files will be saved as XML format. Web Interface To configure a Save User Configuration in the Web interface: 1. Chick Save User. 2. Click Yes. Figure 5-3.3: The Save as Backup Co...

229 5-4 Export / Import This section describes how to export and import the Switch configuration. Any current configuration files will be exported as XML format. 5-4.1 Export Config This section describes how to export the Switch Configuration for maintenance needs. Any current configuration files w...

LGB5128A User Manual 230 5-4.2 Import Config This section describes how to export the Switch Configuration for maintenance needs. Any current configuration files will be exported as XML format. Web Interface To configure an Import Config Configuration in the Web interface: 1. Click Browser to select...

231 5-5 Diagmostics This section provides a set of basic system diagnosis. It let users know that whether the system is healthy or needs to be fixed. The basic system check includes ICMP Ping, ICMPv6, and VeriPHY Cable Diagnostics . 5-5.1 Ping This section allows you to issue ICMP PING packets to tr...

LGB5128A User Manual 232 5-5.2 Ping6 This section allows you to issue ICMPv6 PING packets to troubleshoot IPv6 connectivity issues. Web Interface To configure an ICMPv6 PING Configuration in the Web interface: 1.Specify ICMPv6 PING IP Address . 2.Specify ICMPv6 PING Size. 3.Click Start. Figure 5-5.2...

235 Aggregation Using multiple ports in parallel to increase the link speed beyond the limits of a port and to increase the redundancy fo r higher availability. (Also Port Aggregation, Link Aggregation). ARP ARP is an acronym for Address Resolution Protocol. It is a protocol used to convert an IP ad...

LGB5128A User Manual 236 The DHCP server ensures that all IP addresses are unique, for example, no IP address is assigned to a second client while the first client's assignment is valid (its lease has not expired). Therefore, IP address pool management is done by the server and not by a human networ...

241 NetBIOS is an acronym for Network Basic Input/Output System. It is a program that allows applications on separate computers to communicate within a Local Area Network (LAN), and it is not supported on a Wide Area Network (WAN). The NetBIOS gives each computer in the network both a NetBIOS name a...

LGB5128A User Manual 242 PING ping is a program that sends a series of packets over a network or the Internet to a specific computer to generate a response from that computer. The other computer responds with an acknowledgment that it received the packets. Ping was created to verify whether a specif...

LGB5128A User Manual 244 SMTP SMTP is an acronym for Simple Mail Transfer Protocol. It is a text-based protocol that uses the Transmission Control Protocol (TCP) and provides a mail service modeled on the FTP file transfer service. SMTP transfers mail messages between systems and notifications regar...

724-746-5500 | blackbox.com About Black Box Black Box provides an extensive range of networking and infrastructure products. You’ll find everything from cabinets and racks and power and surge protection products to media converters and Ethernet switches all supported by free, live 24/7 Tech support ...