Accessing the Switch

CHAPTERS

1. Overview

2. Web Interface Access

3. Command Line Interface Access

This guide applies to:

T1500G-10PS v2 or above, T1500G-8T v2 or above, T1500G-10MPS v2 or above, T1500-28PCT v3 or above, T1600G-18TS v2 or above, T1600G-28PS v3 or above, T1600G-28TS v3 or above, T1600G-52TS v3 or above, T1600G-52PS v3 or above, T1700X-16TS v3 or above, T1700G-28TQ v3 or above, T2500G-10TS v2 or above, T2600G-18TS v2 or above, T2600G-28TS v3 or above, T2600G-28MPS v3 or above, T2600G-28SQ v1 or above, T2600G-52TS v3 or above.

1Overview

You can access and manage the switch using the GUI (Graphical User Interface, also called web interface in this text) or using the CLI (Command Line Interface). There are equivalent functions in the web interface and the command line interface, while web configuration is easier and more visual than the CLI configuration. You can choose the method according to their available applications and preference.

2Web Interface Access

You can access the switch’s web interface through the web-based authentication. The switch uses two built-in web servers, HTTP server and HTTPS server, for user authentication.

The following example shows how to login via the HTTP server.

2.1Login

To manage your switch through a web browser in the host PC:

1)Make sure that the route between the host PC and the switch is available.

2)Launch a web browser. The supported web browsers include, but are not limited to, the following types:

»IE 8.0, 9.0, 10.0, 11.0

»Firefox 26.0, 27.0

»Chrome 32.0, 33.0

3)Enter the switch’s IP address in the web browser’s address bar. The switch’s default IP address is 192.168.0.1.

Figure 2-1 Enter the Switch's IP Addresss in the Browser

4)Enter the username and password in the pop-up login window. Use admin for both username and password in lower case letters.

Figure 2-2 Login Authentication

5)The typical web interface displays below. You can view the switch’s running status and configure the switch on this interface.

Figure 2-3 Web Interface

2.2Save the Configuration File

The switch’s configuration files fall into two types: the running configuration file and the start-up configuration file.

After you perform configurations on the sub-interfaces and click Apply, the modifications will be saved in the running configuration file. The configurations will be lost when the switch reboots.

If you need to keep the configurations after the switch reboots, please click on the main interface to save the configurations in the start-up configuration file.

Figure 2-4 Save the Configuration

2.3Disable the Web Server

You can shut down the HTTP server or HTTPS server to block any access to the web interface.

Go to SECURITY > Access Security > HTTP Config, disable the HTTP server and click Apply.

Figure 2-5 Shut Down HTTP Server

Go to SECURITY > Access Security > HTTPS Config, disable the HTTPS server and click Apply.

Figure 2-6 Disbale the HTTPS Server

2.4Configure the Switch’s IP Address and Default Gateway

For T1600G&T1700&T2600G Series Switches

If you want to access the switch via a specified port (hereafter referred to as the access port), you can configure the port as a routed port and specify its IP address, or configure the IP address of the VLAN which the access port belongs to.

Change the IP Address

By default, all the ports belong to VLAN 1 with the VLAN interface IP 192.168.0.1. The following example shows how to change the switch’s default access IP address 192.168.0.1.

1)Go to L3 FEATURES > Interface. The default access IP address in VLAN 1 in the Interface List. Click Edit IPv4 to modify VLAN1’s IP address.

Figure 2-7 Change VLAN1's IP Address

2)Choose the IP Address Mode as Static. Enter the new access address in the IP Address field and click Apply. Make sure that the route between the host PC and the switch’s new IP address is available.

Figure 2-8 Specify the IP Address

3)Enter the new IP address in the web browser to access the switch.

4)Click to save the settings.

Configure the Default Gateway

The following example shows how to configure the switch’s gateway. By default, the switch has no default gateway.

1)Go to page L3 FEATURES > Static Routing > IPv4 Static Routing Config. Click to load the following page and configure the parameters related to the switch’s gateway. Then click Create.

Figure 2-9 Configure the Default Gateway

Destination

Specify the destination as 0.0.0.0.

Subnet Mask

Specify the subnet mask as 255.255.255.0.

Next Hop

Configure your desired default gateway as the next hop’s IP address.

Distance

Specify the distance as 1.

2)Click to save the settings.

3)Check the routing table to verify the default gateway you configured. The entry marked in red box displays the valid default gateway.

Figure 2-10 View the Default Gateway

For T1500&T1500G Series Switches

If you want to access the switch, you can configure the system IP address of the switch. If you want the switch to accss a network, you can configure the default gateway of the switch. Only the computers in the management VLAN can access the management interface of the switch. By default, VLAN 1 owning all the ports is the management VLAN and you can access the switch via any port. By default, the system IP address is 192.168.0.1, and the switch has no default gateway. The following example shows how to change the system IP address and default gateway of the switch,

1)Go to SYSTEM > System Info > System IP. Specify the management VLAN ID. Specify the IP address mode as Static. Enter the new IP address, subnet mask and default gateway. Make sure that the route between the host PC and the switch’s new IP address is available. Click Apply.

Figure 2-11 Change the switch's IP address and default gateway

2)Enter the new IP address in the web browser to access the switch.

3)Click to save the settings.

3Command Line Interface Access

Users can access the switch's command line interface through the console (only for switch with console port), Telnet or SSH connection, and manage the switch with the command lines.

Console connection requires the host PC connecting to the switch’s console port directly, while Telnet and SSH connection support both local and remote access.

The following table shows the typical applications used in the CLI access.

Table 3-1Method list

Method

Using Port

Typical Applications

Console

Console port (connected directly)

Hyper Terminal

Telnet

RJ-45 port

CMD

SSH

RJ-45 port

Putty

3.1Console Login (only for switch with console port)

Follow these steps to log in to the switch via the Console port:

1)Connect the PC or terminal to the Console port on the switch with the serial cable.

2)Start the terminal emulation program (such as the Hyper Terminal) on the PC and configure the terminal emulation program as follows:

»Baud Rate: 38400bps

»Data Bits: 8

»Parity: None

»Stop Bits: 1

»Flow Control: None

3)Press Enter in the main window and Switch> will appear, indicating that you have successfully logged in to the switch and you can use the CLI now.

Figure 3-1 CLI Main Window

4)Enter enable to enter the User EXEC Mode to further configure the switch.

Figure 3-2 User EXEC Mode

Note:

In Windows XP, go to Start > All Programs > Accessories > Communications > Hyper Terminal to open the Hyper Terminal and configure the above settings to log in to the switch.

3.2Telnet Login

The switch supports Login Local Mode for authentication by default.

Login Local Mode: Username and password are required, which are both admin by default.

The following steps show how to manage the switch via the Login Local Mode:

1)Make sure the switch and the PC are in the same LAN (Local Area Network). Click Start and type in cmd in the Search bar and press Enter.

Figure 3-3 Open the CMD Window

2)Type in telnet 192.168.0.1 in the CMD window and press Enter.

Figure 3-4 Log In to the Switch

3)Type in the login username and password (both admin by default). Press Enter and you will enter User EXEC Mode.

Figure 3-5 Enter User EXEC Mode

4)Type in enable command and you will enter Privileged EXEC Mode. By default no password is needed. Later you can set a password for users who want to access the Privileged EXEC Mode.

Figure 3-6 Enter Privileged EXEC Mode

Now you can manage your switch with CLI commands through Telnet connection.

3.3SSH Login

SSH login supports the following two modes: Password Authentication Mode and Key Authentication Mode. You can choose one according to your needs:

Password Authentication Mode: Username and password are required, which are both admin by default.

Key Authentication Mode (Recommended): A public key for the switch and a private key for the client software (PuTTY) are required. You can generate the public key and the private key through the PuTTY Key Generator.

Before logging in via SSH, follow the steps below to enable SSH on the terminal emulation program:

Figure 3-7 Enable SSH

Password Authentication Mode

1)Open PuTTY and go to the Session page. Enter the IP address of the switch in the Host Name field and keep the default value 22 in the Port field; select SSH as the Connection type. Click Open.

Figure 3-8 Configurations in PuTTY

2)Enter the login username and password to log in to the switch, and you can continue to configure the switch.

Figure 3-9 Log In to the Switch

Key Authentication Mode

1)Open the PuTTY Key Generator. In the Parameters section, select the key type and enter the key length. In the Actions section, click Generate to generate a public/private key pair. In the following figure, an SSH-2 RSA key pair is generated, and the length of each key is 1024 bits.

Figure 3-10 Generate a Public/Private Key Pair

Note:

The key length should be between 512 and 3072 bits.

You can accelerate the key generation process by moving the mouse quickly and randomly in the Key section.

2)After the keys are successfully generated, click Save public key to save the public key to a TFTP server; click Save private key to save the private key to the host PC.

Figure 3-11 Save the Generated Keys

3)On Hyper Terminal, download the public key file from the TFTP server to the switch as shown in the following figure:

Figure 3-12 Download the Public Key to the Switch

Note:

The key type should accord with the type of the key file. In the above CLI, v1 corresponds to SSH-1 (RSA), and v2 corresponds to SSH-2 RSA and SSH-2 DSA.

The key downloading process cannot be interrupted.

4)After the public key is downloaded, open PuTTY and go to the Session page. Enter the IP address of the switch and select SSH as the Connection type (keep the default value in the Port field).

Figure 3-13 Configure the Host Name and Connection Type

5)Go to Connection > SSH > Auth. Click Browse to download the private key file to PuTTY. Click Open to start the connection and negotiation.

Figure 3-14 Download the Private Key to PuTTY

6)After negotiation is completed, enter the username to log in. If you can log in without entering the password, the key authentication completed successfully.

Figure 3-15 Log In to the Switch

3.4Disable Telnet login

You can shut down the Telnet function to block any Telnet access to the CLI interface.

Using the GUI:

Go to SECURITY > Access Security > Telnet Config, disable the Telnet function and click Apply.

Figure 3-16 Disable Telnet login

Using the CLI:

Switch#configure

Switch(config)#telnet disable

3.5Disable SSH login

You can shut down the SSH server to block any SSH access to the CLI interface.

Using the GUI:

Go to SECURITY > Access Security > SSH Config, disable the SSH server and click Apply.

Figure 3-17 Shut down SSH server

Using the CLI:

Switch#configure

Switch(config)#no ip ssh server

3.6Copy running-config startup-config

The switch’s configuration files fall into two types: the running configuration file and the start-up configuration file.

After you enter each command line, the modifications will be saved in the running configuration file. The configurations will be lost when the switch reboots.

If you need to keep he configurations after the switch reboots, please user the command copy running-config startup-config to save the configurations in the start-up configuration file.

Switch(config)#end

Switch#copy running-config startup-config

3.7Change the Switch’s IP Address and Default Gateway

For T1600G&T1700&T2600G Series Switches

If you want to access the switch via a specified port (hereafter referred to as the access port), you can configure the port as a routed port and specify its IP address, or configure the IP address of the VLAN which the access port belongs to.

Change the IP Address

By default, all the ports belong to VLAN 1 with the VLAN interface IP 192.168.0.1/24. In the following example, we will show how to replace the switch’s default access IP address 192.168.0.1/24 with 192.168.0.10/24.

Switch#configure

Switch(config)#interface vlan 1

Switch(config-if)#ip address 192.168.0.10 255.255.255.0

The connection will be interrupted and you should telnet to the switch's new IP address 192.168.0.10.

C:\Users\Administrator>telnet 192.168.0.10

User:admin

Password:admin

Switch>enable

Switch#copy running-config startup-config

Configure the Default Gateway

In the following example, we will show how to configure the switch’s gateway as 192.168.0.100. By default, the switch has no default gateway.

Switch#configure

Switch(config)#ip route 0.0.0.0 255.255.255.0 192.168.0.100 1

Switch(config)#end

Switch#copy running-config startup-config

For T1500&T1500G Series Switches

If you want to access the switch, you can configure the system IP address of the switch. If you want the switch to accss a network, you can configure the default gateway of the switch. Only the computers in the management VLAN can access the management interface of the switch. By default, VLAN 1 owning all the ports is the management VLAN and you can access the switch via any port. By default, the system IP address is 192.168.0.1, and the switch has no default gateway. The following example shows how to configure the switch’s IP address as 192.168.0.10/24 and configure the default gateway as 192.168.0.100.

Switch#configure

Switch(config)#interface vlan 1

Switch(config-if)#ip address 192.168.0.10 255.255.255.0 gateway 192.168.0.100

The connection will be interrupted and you should telnet to the switch's new IP address 192.168.0.10.

C:\Users\Administrator>telnet 192.168.0.10

User:admin

Password:admin

Switch>enable

Switch#copy running-config startup-config