Edge-Core ECS3510-28T User manual

Management Guide

www.edge-core.com

ECS3510-28T/52T

28/52-Port Fast Ethernet

Layer 2 Switch

M

ANAGEMENT

G

UIDE

ECS3510-28T FAST ETHERNET SWITCH

Layer 2 Switch

with 24 10/100BASE-TX (RJ-45) Ports,

and 4 Gigabit Combination Ports (RJ-45/SFP)

ECS3510-52T FAST ETHERNET SWITCH

Layer 2 Switch

with 48 10/100BASE-TX (RJ-45) Ports,

and 4 Gigabit Combination Ports (RJ-45/SFP)

E022019-CS-R05

M0NEC3510201Z

149100000204A

– 5 –

ABOUT THIS GUIDE

PURPOSE This guide gives specific information on how to operate and use the

management functions of the switch.

AUDIENCE The guide is intended for use by network administrators who are

responsible for operating and maintaining network equipment;

consequently, it assumes a basic working knowledge of general switch

functions, the Internet Protocol (IP), and Simple Network Management

Protocol (SNMP).

CONVENTIONS The following conventions are used throughout this guide to show

information:

N

OTE

:

Emphasizes important information or calls your attention to related

features or instructions.

C

AUTION

:

Alerts you to a potential hazard that could cause loss of data, or

damage the system or equipment.

W

ARNING

:

Alerts you to a potential hazard that could cause personal injury.

RELATED PUBLICATIONS The following publication details the hardware features of the switch,

including the physical and performance-related characteristics, and how to

install the switch:

The Installation Guide

Also, as part of the switch’s software, there is an online web-based help

that describes all management related features.

A

BOUT

T

HIS

G

UIDE

– 6 –

DOCUMENTATION

NOTICE

This documentation is provided for general information purposes only. If

any product feature details in this documentation conflict with the product

datasheet, refer to the datasheet for the latest information.

REVISION HISTORY This section summarizes the changes in each revision of this guide.

FEBRUARY 2019 REVISION

This is the fifth version of this guide. This guide is valid for software release

v1.4.0.0. It includes the following changes:

◆ Added documentation notice.

DECEMBER 2013 REVISION

This is the fourth version of this guide. This guide is valid for software

release v1.4.0.0. It includes information on the following changes:

◆ Updated information on the length of cable which can be accurately

tested with cable diagnostics under "Performing Cable Diagnostics" on

page 170 and "test cable-diagnostics" on page 990.

DECEMBER 2013 REVISION

This is the third version of this guide. This guide is valid for software

release v1.4.0.0. It includes information on the following changes:

◆ Updated range for parameters under "Resetting the System" on

page 146.

◆ Removed symmetric parameter under "Configuring by Port List" on

page 152.

◆ Added "Displaying Transceiver Data" on page 166 and "Configuring

Transceiver Thresholds" on page 167.

◆ Added "Configuring Load Balancing" on page 185.

◆ Added "Configuring MAC Address Learning" on page 227.

◆ Updated Table 31, "Supported Notification Messages," on page 453.

◆ Added information for Command Usage under Table , "Switch

Clustering," on page 482.

◆ Added new parameters under "Using the Trace Route Function" on

page 561.

◆ Updated range of Forwarding Priority under "Configuring IGMP

Snooping and Query Parameters" on page 608.

◆ Updated parameter list under "Specifying Static Interfaces for a

Multicast Router" on page 612.

A

BOUT

T

HIS

G

UIDE

– 7 –

◆ Added Multicast Data Drop parameter under "Filtering IGMP Query

Packets and Multicast Data" on page 621.

◆ Updated range of Forwarding Priority under "Configuring MVR Domain

Settings" on page 644.

◆ Added "mac-learning" on page 866.

◆ Added "port security mac-address-as-permanent" on page 869.

◆ Added "ip dhcp snooping limit rate" on page 896.

◆ Added "clear ip dhcp snooping database flash" on page 900.

◆ Added mode option to "ip source-guard binding" on page 912 and "ip

source-guard max-binding" on page 915.

◆ Added "ip source-guard mode" on page 916.

◆ Added "clear ip source-guard binding blocked" on page 917.

◆ Updated parameters for "show ip source-guard binding" on page 918.

◆ Added allow-zeros option for "ip arp inspection validate" on page 928.

◆ Added Layer 3 and Layer 4 options to "permit, deny (MAC ACL)" on

page 957.

◆ Updated parameters for "clear access-list hardware counters" on

page 965.

◆ Removed symmetric parameter from "capabilities" on page 969.

◆ Added "discard" on page 971 and "show discard" on page 977.

◆ Added "Transceiver Threshold Configuration" on page 982.

◆ Added "storm-sample-type" on page 1021.

◆ Updated description of rate parameter under "switchport packet-rate"

on page 1022.

◆ Added "loopback-detection action" on page 1046.

◆ Removed “loopback-detection mode.”

◆ Added "loopback detection trap" on page 1048.

◆ Changed range of priority parameter under "ip igmp snooping priority"

on page 1194.

◆ Updated syntax for "ip igmp snooping vlan immediate-leave" on

page 1202

.

A

BOUT

T

HIS

G

UIDE

– 8 –

◆ Added "ip igmp authentication" on page 1218 and "show ip igmp

authentication" on page 1223.

◆ Updated syntax for "ip igmp query-drop" on page 1222.

◆ Added "ip multicast-data-drop" on page 1222 and "show ip

multicast-data-drop" on page 1226.

◆ Added "MLD Filtering and Throttling" on page 1237.

◆ Updated range of priority parameter for "mvr priority" on page 1248.

◆ Added "clear mrv groups dynamic" on page 1257.

◆ Added "clear mrv statistics" on page 1258.

◆ Updated parameter options for "show mvr statistics" on page 1263.

◆ Added "clear mvr6 statistics" on page 1279.

◆ Updated range of interval-level parameter for "ethernet cfm cc ma

interval" on page 1331.

◆ Added "clear efm oam event-log" on page 1358.

◆ Updated definition of netmask parameter for "ip address" on

page 1388.

◆ Added parameter option for "traceroute6" on page 1416

DECEMBER 2012 REVISION

This is the second version of this guide. This guide is valid for software

release v1.2.4.2. It includes information on the following changes:

◆ Removed support for VLAN translation.

◆ Removed egress port option from Security > ACL (Configure Interface -

Configure) page under "Binding a Port to an Access Control List" on

page 367, the ip access-group command page 948, the ipv6 access-

group command page 954, and the mac access-group command

page 960.

◆ Added "IPv6 Source Guard" on page 403.

◆ Added UDP Port parameter to "Remote Log Configuration" on page 420

and logging host command on page 741.

◆ Added "Ethernet Ring Protection Switching" on page 487, and "ERPS

Commands" on page 1085.

◆ Added "Connectivity Fault Management" on page 512.

◆ Added "OAM Configuration" on page 548.

A

BOUT

T

HIS

G

UIDE

– 9 –

◆ Added "MLD Snooping (Snooping and Query for IPv6)" on page 632,

and commands for "MLD Snooping" on page 1227.

◆ Added "Multicast VLAN Registration for IPv6" on page 657, and

commands for "MVR for IPv6" on page 1268.

◆ Added "TFTP Configuration Commands" on page 726.

◆ Added terminal command on page 737.

◆ Added daylight savings time commands "clock summer-time (date)" on

page 756, "clock summer-time (predefined)" on page 758, and "clock

summer-time (recurring)" on page 759.

◆ Added ipv6 dhcp snooping option remote-id command on page 905.

◆ Added ipv6 dhcp snooping option remote-id policy command on

page 906.

◆ Added commands for "IPv6 Source Guard" on page 919.

◆ Added commands for "ND Snooping" on page 1423.

◆ Added "UniDirectional Link Detection Commands" on page 1039.

JULY 2012 RELEASE

This is the first version of this guide. This guide is valid for software release

v1.0.0.0.

A

BOUT

T

HIS

G

UIDE

– 10 –

– 11 –

CONTENTS

ABOUT THIS GUIDE 5

C

ONTENTS 11

F

IGURES 49

T

ABLES 61

SECTION I GETTING STARTED 67

1INTRODUCTION 69

Key Features 69

Description of Software Features 70

System Defaults 75

2INITIAL SWITCH CONFIGURATION 79

Connecting to the Switch 79

Configuration Options 79

Required Connections 80

Remote Connections 81

Basic Configuration 82

Console Connection 82

Setting Passwords 82

Setting an IP Address 83

Downloading a Configuration File Referenced by a DHCP Server 89

Enabling SNMP Management Access 91

Managing System Files 93

Saving or Restoring Configuration Settings 94

SECTION II WEB CONFIGURATION 97

3USING THE WEB INTERFACE 99

Connecting to the Web Interface 99

Navigating the Web Browser Interface 100

C

ONTENTS

– 12 –

Home Page 100

Configuration Options 101

Panel Display 101

Main Menu 102

4BASIC MANAGEMENT TASKS 119

Displaying System Information 119

Displaying Hardware/Software Versions 120

Configuring Support for Jumbo Frames 122

Displaying Bridge Extension Capabilities 123

Managing System Files 124

Copying Files via FTP/TFTP or HTTP 124

Saving the Running Configuration to a Local File 126

Setting the Start-Up File 127

Showing System Files 128

Automatic Operation Code Upgrade 129

Setting the System Clock 133

Setting the Time Manually 133

Setting the SNTP Polling Interval 134

Configuring NTP 135

Configuring Time Servers 136

Setting the Time Zone 140

Configuring the Console Port 141

Configuring Telnet Settings 143

Displaying CPU Utilization 144

Displaying Memory Utilization 145

Resetting the System 146

5INTERFACE CONFIGURATION 151

Port Configuration 152

Configuring by Port List 152

Configuring by Port Range 154

Displaying Connection Status 155

Configuring Local Port Mirroring 156

Configuring Remote Port Mirroring 158

Showing Port or Trunk Statistics 162

Displaying Transceiver Data 166

Configuring Transceiver Thresholds 167

C

ONTENTS

– 13 –

Performing Cable Diagnostics 170

Trunk Configuration 172

Configuring a Static Trunk 173

Configuring a Dynamic Trunk 175

Displaying LACP Port Counters 181

Displaying LACP Settings and Status for the Local Side 182

Displaying LACP Settings and Status for the Remote Side 184

Configuring Load Balancing 185

Saving Power 187

Traffic Segmentation 189

Enabling Traffic Segmentation 189

Configuring Uplink and Downlink Ports 190

VLAN Trunking 192

6 VLAN CONFIGURATION 195

IEEE 802.1Q VLANs 195

Configuring VLAN Groups 198

Adding Static Members to VLANs 200

Configuring Dynamic VLAN Registration 205

IEEE 802.1Q Tunneling 208

Enabling QinQ Tunneling on the Switch 212

Creating CVLAN to SPVLAN Mapping Entries 213

Adding an Interface to a QinQ Tunnel 215

Protocol VLANs 216

Configuring Protocol VLAN Groups 217

Mapping Protocol Groups to Interfaces 218

Configuring IP Subnet VLANs 220

Configuring MAC-based VLANs 222

Configuring VLAN Mirroring 224

7ADDRESS TABLE SETTINGS 227

Configuring MAC Address Learning 227

Setting Static Addresses 229

Changing the Aging Time 230

Displaying the Dynamic Address Table 231

Clearing the Dynamic Address Table 232

Configuring MAC Address Mirroring 233

8SPANNING TREE ALGORITHM 235

C

ONTENTS

– 14 –

Overview 235

Configuring Loopback Detection 238

Configuring Global Settings for STA 240

Displaying Global Settings for STA 245

Configuring Interface Settings for STA 246

Displaying Interface Settings for STA 250

Configuring Multiple Spanning Trees 253

Configuring Interface Settings for MSTP 257

9CONGESTION CONTROL 259

Rate Limiting 259

Storm Control 260

Automatic Traffic Control 262

Setting the ATC Timers 264

Configuring ATC Thresholds and Responses 265

10 CLASS OF SERVICE 269

Layer 2 Queue Settings 269

Setting the Default Priority for Interfaces 269

Selecting the Queue Mode 270

Mapping CoS Values to Egress Queues 273

Layer 3/4 Priority Settings 275

Setting Priority Processing to DSCP or CoS 276

Mapping Ingress DSCP Values to Internal DSCP Values 277

Mapping CoS Priorities to Internal DSCP Values 279

11 QUALITY OF SERVICE 283

Overview 283

Configuring a Class Map 284

Creating QoS Policies 287

Attaching a Policy Map to a Port 297

12 VOIP TRAFFIC CONFIGURATION 299

Overview 299

Configuring VoIP Traffic 299

Configuring Telephony OUI 301

Configuring VoIP Traffic Ports 302

13 SECURITY MEASURES 305

AAA Authentication, Authorization and Accounting 306

Configuring Local/Remote Logon Authentication 307

C

ONTENTS

– 15 –

Configuring Remote Logon Authentication Servers 308

Configuring AAA Accounting 313

Configuring AAA Authorization 319

Configuring User Accounts 322

Web Authentication 324

Configuring Global Settings for Web Authentication 325

Configuring Interface Settings for Web Authentication 326

Network Access (MAC Address Authentication) 327

Configuring Global Settings for Network Access 330

Configuring Network Access for Ports 331

Configuring Port Link Detection 333

Configuring a MAC Address Filter 334

Displaying Secure MAC Address Information 336

Configuring HTTPS 337

Configuring Global Settings for HTTPS 337

Replacing the Default Secure-site Certificate 339

Configuring the Secure Shell 341

Configuring the SSH Server 343

Generating the Host Key Pair 345

Importing User Public Keys 346

Access Control Lists 348

Setting a Time Range 350

Showing TCAM Utilization 352

Setting the ACL Name and Type 353

Configuring a Standard IPv4 ACL 355

Configuring an Extended IPv4 ACL 357

Configuring a Standard IPv6 ACL 359

Configuring an Extended IPv6 ACL 361

Configuring a MAC ACL 363

Configuring an ARP ACL 365

Binding a Port to an Access Control List 367

Configuring ACL Mirroring 368

Showing ACL Hardware Counters 370

ARP Inspection 371

Configuring Global Settings for ARP Inspection 372

Configuring VLAN Settings for ARP Inspection 374

C

ONTENTS

– 16 –

Configuring Interface Settings for ARP Inspection 376

Displaying ARP Inspection Statistics 377

Displaying the ARP Inspection Log 378

Filtering IP Addresses for Management Access 379

Configuring Port Security 381

Configuring 802.1X Port Authentication 383

Configuring 802.1X Global Settings 385

Configuring Port Authenticator Settings for 802.1X 386

Configuring Port Supplicant Settings for 802.1X 390

Displaying 802.1X Statistics 392

DoS Protection 395

IPv4 Source Guard 397

Configuring Ports for IPv4 Source Guard 398

Configuring Static Bindings for IPv4 Source Guard 400

Displaying Information for Dynamic IPv4 Source Guard Bindings 402

IPv6 Source Guard 403

Configuring Ports for IPv6 Source Guard 403

Configuring Static Bindings for IPv6 Source Guard 405

Displaying Information for Dynamic IPv6 Source Guard Bindings 408

DHCP Snooping 409

DHCP Snooping Configuration 411

DHCP Snooping VLAN Configuration 413

Configuring Ports for DHCP Snooping 414

Displaying DHCP Snooping Binding Information 415

14 BASIC ADMINISTRATION PROTOCOLS 417

Configuring Event Logging 418

System Log Configuration 418

Remote Log Configuration 420

Sending Simple Mail Transfer Protocol Alerts 421

Link Layer Discovery Protocol 423

Setting LLDP Timing Attributes 423

Configuring LLDP Interface Attributes 425

Configuring LLDP Interface Civic-Address 429

Displaying LLDP Local Device Information 430

Displaying LLDP Remote Device Information 434

Displaying Device Statistics 442

C

ONTENTS

– 17 –

Simple Network Management Protocol 444

Configuring Global Settings for SNMP 446

Setting the Local Engine ID 447

Specifying a Remote Engine ID 448

Setting SNMPv3 Views 449

Configuring SNMPv3 Groups 452

Setting Community Access Strings 457

Configuring Local SNMPv3 Users 458

Configuring Remote SNMPv3 Users 460

Specifying Trap Managers 463

Creating SNMP Notification Logs 467

Showing SNMP Statistics 469

Remote Monitoring 471

Configuring RMON Alarms 472

Configuring RMON Events 475

Configuring RMON History Samples 477

Configuring RMON Statistical Samples 480

Switch Clustering 482

Configuring General Settings for Clusters 483

Cluster Member Configuration 484

Managing Cluster Members 486

Ethernet Ring Protection Switching 487

ERPS Global Configuration 491

ERPS Ring Configuration 492

ERPS Forced and Manual Mode Operations 508

Connectivity Fault Management 512

Configuring Global Settings for CFM 515

Configuring Interfaces for CFM 519

Configuring CFM Maintenance Domains 519

Configuring CFM Maintenance Associations 524

Configuring Maintenance End Points 528

Configuring Remote Maintenance End Points 530

Transmitting Link Trace Messages 532

Transmitting Loop Back Messages 534

Transmitting Delay-Measure Requests 535

Displaying Local MEPs 537

C

ONTENTS

– 18 –

Displaying Details for Local MEPs 538

Displaying Local MIPs 540

Displaying Remote MEPs 541

Displaying Details for Remote MEPs 542

Displaying the Link Trace Cache 544

Displaying Fault Notification Settings 546

Displaying Continuity Check Errors 547

OAM Configuration 548

Enabling OAM on Local Ports 548

Displaying Statistics for OAM Messages 551

Displaying the OAM Event Log 552

Displaying the Status of Remote Interfaces 553

Configuring a Remote Loop Back Test 554

Displaying Results of Remote Loop Back Testing 556

15 IP CONFIGURATION 559

Using the Ping Function 559

Using the Trace Route Function 561

Address Resolution Protocol 562

Setting the ARP Timeout 563

Displaying ARP Entries 563

Setting the Switch’s IP Address (IP Version 4) 564

Configuring the IPv4 Default Gateway 564

Configuring IPv4 Interface Settings 565

Setting the Switch’s IP Address (IP Version 6) 568

Configuring the IPv6 Default Gateway 569

Configuring IPv6 Interface Settings 569

Configuring an IPv6 Address 574

Showing IPv6 Addresses 577

Showing the IPv6 Neighbor Cache 578

Showing IPv6 Statistics 580

Showing the MTU for Responding Destinations 585

16 IP SERVICES 587

Domain Name Service 587

Configuring General DNS Service Parameters 587

Configuring a List of Domain Names 588

Configuring a List of Name Servers 590

C

ONTENTS

– 19 –

Configuring Static DNS Host to Address Entries 591

Displaying the DNS Cache 592

Dynamic Host Configuration Protocol 593

Specifying a DHCP Client Identifier 593

Configuring DHCP Relay Service 594

Configuring the PPPoE Intermediate Agent 598

Configuring PPPoE IA Global Settings 598

Configuring PPPoE IA Interface Settings 600

Showing PPPoE IA Statistics 602

17 MULTICAST FILTERING 605

Overview 605

Layer 2 IGMP (Snooping and Query for IPv4) 606

Configuring IGMP Snooping and Query Parameters 608

Specifying Static Interfaces for a Multicast Router 612

Assigning Interfaces to Multicast Services 614

Setting IGMP Snooping Status per Interface 616

Filtering IGMP Query Packets and Multicast Data 621

Displaying Multicast Groups Discovered by IGMP Snooping 622

Displaying IGMP Snooping Statistics 623

Filtering and Throttling IGMP Groups 627

Enabling IGMP Filtering and Throttling 627

Configuring IGMP Filter Profiles 628

Configuring IGMP Filtering and Throttling for Interfaces 630

MLD Snooping (Snooping and Query for IPv6) 632

Configuring MLD Snooping and Query Parameters 632

Setting Immediate Leave Status for MLD Snooping per Interface 634

Specifying Static Interfaces for an IPv6 Multicast Router 635

Assigning Interfaces to IPv6 Multicast Services 637

Showing MLD Snooping Groups and Source List 639

Multicast VLAN Registration for IPv4 640

Configuring MVR Global Settings 641

Configuring MVR Domain Settings 644

Configuring MVR Group Address Profiles 645

Configuring MVR Interface Status 648

Assigning Static MVR Multicast Groups to Interfaces 650

Displaying MVR Receiver Groups 652

C

ONTENTS

– 20 –

Displaying MVR Statistics 653

Multicast VLAN Registration for IPv6 657

Configuring MVR6 Global Settings 658

Configuring MVR6 Domain Settings 660

Configuring MVR6 Group Address Profiles 661

Configuring MVR6 Interface Status 664

Assigning Static MVR6 Multicast Groups to Interfaces 666

Displaying MVR6 Receiver Groups 668

Displaying MVR6 Statistics 669

SECTION III COMMAND LINE INTERFACE 675

18 USING THE COMMAND LINE INTERFACE 677

Accessing the CLI 677

Console Connection 677

Telnet Connection 678

Entering Commands 679

Keywords and Arguments 679

Minimum Abbreviation 679

Command Completion 679

Getting Help on Commands 680

Partial Keyword Lookup 682

Negating the Effect of Commands 682

Using Command History 682

Understanding Command Modes 682

Exec Commands 683

Configuration Commands 683

Command Line Processing 685

CLI Command Groups 686

19 GENERAL COMMANDS 689

prompt 689

reload (Global Configuration) 690

enable 691

quit 692

show history 692

configure 693

Page is loading ...

Edge-Core ECS3510-28T User manual

This manual is also suitable for

Edge-Core ECS3510-28T User manual

Related papers

Other documents