Page is loading ...
Management Guide
www.edge-core.com
ECS3510-28T/52T
28/52-Port Fast Ethernet
Layer 2 Switch
M
ANAGEMENT
G
UIDE
ECS3510-28T FAST ETHERNET SWITCH
Layer 2 Switch
with 24 10/100BASE-TX (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP)
ECS3510-52T FAST ETHERNET SWITCH
Layer 2 Switch
with 48 10/100BASE-TX (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP)
E022019-CS-R05
M0NEC3510201Z
149100000204A
– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N
OTE
:
Emphasizes important information or calls your attention to related
features or instructions.
C
AUTION
:
Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W
ARNING
:
Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
A
BOUT
T
HIS
G
UIDE
– 6 –
DOCUMENTATION
NOTICE
This documentation is provided for general information purposes only. If
any product feature details in this documentation conflict with the product
datasheet, refer to the datasheet for the latest information.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
FEBRUARY 2019 REVISION
This is the fifth version of this guide. This guide is valid for software release
v1.4.0.0. It includes the following changes:
◆ Added documentation notice.
DECEMBER 2013 REVISION
This is the fourth version of this guide. This guide is valid for software
release v1.4.0.0. It includes information on the following changes:
◆ Updated information on the length of cable which can be accurately
tested with cable diagnostics under "Performing Cable Diagnostics" on
page 170 and "test cable-diagnostics" on page 990.
DECEMBER 2013 REVISION
This is the third version of this guide. This guide is valid for software
release v1.4.0.0. It includes information on the following changes:
◆ Updated range for parameters under "Resetting the System" on
page 146.
◆ Removed symmetric parameter under "Configuring by Port List" on
page 152.
◆ Added "Displaying Transceiver Data" on page 166 and "Configuring
Transceiver Thresholds" on page 167.
◆ Added "Configuring Load Balancing" on page 185.
◆ Added "Configuring MAC Address Learning" on page 227.
◆ Updated Table 31, "Supported Notification Messages," on page 453.
◆ Added information for Command Usage under Table , "Switch
Clustering," on page 482.
◆ Added new parameters under "Using the Trace Route Function" on
page 561.
◆ Updated range of Forwarding Priority under "Configuring IGMP
Snooping and Query Parameters" on page 608.
◆ Updated parameter list under "Specifying Static Interfaces for a
Multicast Router" on page 612.
A
BOUT
T
HIS
G
UIDE
– 7 –
◆ Added Multicast Data Drop parameter under "Filtering IGMP Query
Packets and Multicast Data" on page 621.
◆ Updated range of Forwarding Priority under "Configuring MVR Domain
Settings" on page 644.
◆ Added "mac-learning" on page 866.
◆ Added "port security mac-address-as-permanent" on page 869.
◆ Added "ip dhcp snooping limit rate" on page 896.
◆ Added "clear ip dhcp snooping database flash" on page 900.
◆ Added mode option to "ip source-guard binding" on page 912 and "ip
source-guard max-binding" on page 915.
◆ Added "ip source-guard mode" on page 916.
◆ Added "clear ip source-guard binding blocked" on page 917.
◆ Updated parameters for "show ip source-guard binding" on page 918.
◆ Added allow-zeros option for "ip arp inspection validate" on page 928.
◆ Added Layer 3 and Layer 4 options to "permit, deny (MAC ACL)" on
page 957.
◆ Updated parameters for "clear access-list hardware counters" on
page 965.
◆ Removed symmetric parameter from "capabilities" on page 969.
◆ Added "discard" on page 971 and "show discard" on page 977.
◆ Added "Transceiver Threshold Configuration" on page 982.
◆ Added "storm-sample-type" on page 1021.
◆ Updated description of rate parameter under "switchport packet-rate"
on page 1022.
◆ Added "loopback-detection action" on page 1046.
◆ Removed “loopback-detection mode.”
◆ Added "loopback detection trap" on page 1048.
◆ Changed range of priority parameter under "ip igmp snooping priority"
on page 1194.
◆ Updated syntax for "ip igmp snooping vlan immediate-leave" on
page 1202
.
A
BOUT
T
HIS
G
UIDE
– 8 –
◆ Added "ip igmp authentication" on page 1218 and "show ip igmp
authentication" on page 1223.
◆ Updated syntax for "ip igmp query-drop" on page 1222.
◆ Added "ip multicast-data-drop" on page 1222 and "show ip
multicast-data-drop" on page 1226.
◆ Added "MLD Filtering and Throttling" on page 1237.
◆ Updated range of priority parameter for "mvr priority" on page 1248.
◆ Added "clear mrv groups dynamic" on page 1257.
◆ Added "clear mrv statistics" on page 1258.
◆ Updated parameter options for "show mvr statistics" on page 1263.
◆ Added "clear mvr6 statistics" on page 1279.
◆ Updated range of interval-level parameter for "ethernet cfm cc ma
interval" on page 1331.
◆ Added "clear efm oam event-log" on page 1358.
◆ Updated definition of netmask parameter for "ip address" on
page 1388.
◆ Added parameter option for "traceroute6" on page 1416
DECEMBER 2012 REVISION
This is the second version of this guide. This guide is valid for software
release v1.2.4.2. It includes information on the following changes:
◆ Removed support for VLAN translation.
◆ Removed egress port option from Security > ACL (Configure Interface -
Configure) page under "Binding a Port to an Access Control List" on
page 367, the ip access-group command page 948, the ipv6 access-
group command page 954, and the mac access-group command
page 960.
◆ Added "IPv6 Source Guard" on page 403.
◆ Added UDP Port parameter to "Remote Log Configuration" on page 420
and logging host command on page 741.
◆ Added "Ethernet Ring Protection Switching" on page 487, and "ERPS
Commands" on page 1085.
◆ Added "Connectivity Fault Management" on page 512.
◆ Added "OAM Configuration" on page 548.
A
BOUT
T
HIS
G
UIDE
– 9 –
◆ Added "MLD Snooping (Snooping and Query for IPv6)" on page 632,
and commands for "MLD Snooping" on page 1227.
◆ Added "Multicast VLAN Registration for IPv6" on page 657, and
commands for "MVR for IPv6" on page 1268.
◆ Added "TFTP Configuration Commands" on page 726.
◆ Added terminal command on page 737.
◆ Added daylight savings time commands "clock summer-time (date)" on
page 756, "clock summer-time (predefined)" on page 758, and "clock
summer-time (recurring)" on page 759.
◆ Added ipv6 dhcp snooping option remote-id command on page 905.
◆ Added ipv6 dhcp snooping option remote-id policy command on
page 906.
◆ Added commands for "IPv6 Source Guard" on page 919.
◆ Added commands for "ND Snooping" on page 1423.
◆ Added "UniDirectional Link Detection Commands" on page 1039.
JULY 2012 RELEASE
This is the first version of this guide. This guide is valid for software release
v1.0.0.0.
A
BOUT
T
HIS
G
UIDE
– 10 –
– 11 –
CONTENTS
ABOUT THIS GUIDE 5
C
ONTENTS 11
F
IGURES 49
T
ABLES 61
SECTION I GETTING STARTED 67
1INTRODUCTION 69
Key Features 69
Description of Software Features 70
System Defaults 75
2INITIAL SWITCH CONFIGURATION 79
Connecting to the Switch 79
Configuration Options 79
Required Connections 80
Remote Connections 81
Basic Configuration 82
Console Connection 82
Setting Passwords 82
Setting an IP Address 83
Downloading a Configuration File Referenced by a DHCP Server 89
Enabling SNMP Management Access 91
Managing System Files 93
Saving or Restoring Configuration Settings 94
SECTION II WEB CONFIGURATION 97
3USING THE WEB INTERFACE 99
Connecting to the Web Interface 99
Navigating the Web Browser Interface 100
C
ONTENTS
– 12 –
Home Page 100
Configuration Options 101
Panel Display 101
Main Menu 102
4BASIC MANAGEMENT TASKS 119
Displaying System Information 119
Displaying Hardware/Software Versions 120
Configuring Support for Jumbo Frames 122
Displaying Bridge Extension Capabilities 123
Managing System Files 124
Copying Files via FTP/TFTP or HTTP 124
Saving the Running Configuration to a Local File 126
Setting the Start-Up File 127
Showing System Files 128
Automatic Operation Code Upgrade 129
Setting the System Clock 133
Setting the Time Manually 133
Setting the SNTP Polling Interval 134
Configuring NTP 135
Configuring Time Servers 136
Setting the Time Zone 140
Configuring the Console Port 141
Configuring Telnet Settings 143
Displaying CPU Utilization 144
Displaying Memory Utilization 145
Resetting the System 146
5INTERFACE CONFIGURATION 151
Port Configuration 152
Configuring by Port List 152
Configuring by Port Range 154
Displaying Connection Status 155
Configuring Local Port Mirroring 156
Configuring Remote Port Mirroring 158
Showing Port or Trunk Statistics 162
Displaying Transceiver Data 166
Configuring Transceiver Thresholds 167
C
ONTENTS
– 13 –
Performing Cable Diagnostics 170
Trunk Configuration 172
Configuring a Static Trunk 173
Configuring a Dynamic Trunk 175
Displaying LACP Port Counters 181
Displaying LACP Settings and Status for the Local Side 182
Displaying LACP Settings and Status for the Remote Side 184
Configuring Load Balancing 185
Saving Power 187
Traffic Segmentation 189
Enabling Traffic Segmentation 189
Configuring Uplink and Downlink Ports 190
VLAN Trunking 192
6 VLAN CONFIGURATION 195
IEEE 802.1Q VLANs 195
Configuring VLAN Groups 198
Adding Static Members to VLANs 200
Configuring Dynamic VLAN Registration 205
IEEE 802.1Q Tunneling 208
Enabling QinQ Tunneling on the Switch 212
Creating CVLAN to SPVLAN Mapping Entries 213
Adding an Interface to a QinQ Tunnel 215
Protocol VLANs 216
Configuring Protocol VLAN Groups 217
Mapping Protocol Groups to Interfaces 218
Configuring IP Subnet VLANs 220
Configuring MAC-based VLANs 222
Configuring VLAN Mirroring 224
7ADDRESS TABLE SETTINGS 227
Configuring MAC Address Learning 227
Setting Static Addresses 229
Changing the Aging Time 230
Displaying the Dynamic Address Table 231
Clearing the Dynamic Address Table 232
Configuring MAC Address Mirroring 233
8SPANNING TREE ALGORITHM 235
C
ONTENTS
– 14 –
Overview 235
Configuring Loopback Detection 238
Configuring Global Settings for STA 240
Displaying Global Settings for STA 245
Configuring Interface Settings for STA 246
Displaying Interface Settings for STA 250
Configuring Multiple Spanning Trees 253
Configuring Interface Settings for MSTP 257
9CONGESTION CONTROL 259
Rate Limiting 259
Storm Control 260
Automatic Traffic Control 262
Setting the ATC Timers 264
Configuring ATC Thresholds and Responses 265
10 CLASS OF SERVICE 269
Layer 2 Queue Settings 269
Setting the Default Priority for Interfaces 269
Selecting the Queue Mode 270
Mapping CoS Values to Egress Queues 273
Layer 3/4 Priority Settings 275
Setting Priority Processing to DSCP or CoS 276
Mapping Ingress DSCP Values to Internal DSCP Values 277
Mapping CoS Priorities to Internal DSCP Values 279
11 QUALITY OF SERVICE 283
Overview 283
Configuring a Class Map 284
Creating QoS Policies 287
Attaching a Policy Map to a Port 297
12 VOIP TRAFFIC CONFIGURATION 299
Overview 299
Configuring VoIP Traffic 299
Configuring Telephony OUI 301
Configuring VoIP Traffic Ports 302
13 SECURITY MEASURES 305
AAA Authentication, Authorization and Accounting 306
Configuring Local/Remote Logon Authentication 307
C
ONTENTS
– 15 –
Configuring Remote Logon Authentication Servers 308
Configuring AAA Accounting 313
Configuring AAA Authorization 319
Configuring User Accounts 322
Web Authentication 324
Configuring Global Settings for Web Authentication 325
Configuring Interface Settings for Web Authentication 326
Network Access (MAC Address Authentication) 327
Configuring Global Settings for Network Access 330
Configuring Network Access for Ports 331
Configuring Port Link Detection 333
Configuring a MAC Address Filter 334
Displaying Secure MAC Address Information 336
Configuring HTTPS 337
Configuring Global Settings for HTTPS 337
Replacing the Default Secure-site Certificate 339
Configuring the Secure Shell 341
Configuring the SSH Server 343
Generating the Host Key Pair 345
Importing User Public Keys 346
Access Control Lists 348
Setting a Time Range 350
Showing TCAM Utilization 352
Setting the ACL Name and Type 353
Configuring a Standard IPv4 ACL 355
Configuring an Extended IPv4 ACL 357
Configuring a Standard IPv6 ACL 359
Configuring an Extended IPv6 ACL 361
Configuring a MAC ACL 363
Configuring an ARP ACL 365
Binding a Port to an Access Control List 367
Configuring ACL Mirroring 368
Showing ACL Hardware Counters 370
ARP Inspection 371
Configuring Global Settings for ARP Inspection 372
Configuring VLAN Settings for ARP Inspection 374
C
ONTENTS
– 16 –
Configuring Interface Settings for ARP Inspection 376
Displaying ARP Inspection Statistics 377
Displaying the ARP Inspection Log 378
Filtering IP Addresses for Management Access 379
Configuring Port Security 381
Configuring 802.1X Port Authentication 383
Configuring 802.1X Global Settings 385
Configuring Port Authenticator Settings for 802.1X 386
Configuring Port Supplicant Settings for 802.1X 390
Displaying 802.1X Statistics 392
DoS Protection 395
IPv4 Source Guard 397
Configuring Ports for IPv4 Source Guard 398
Configuring Static Bindings for IPv4 Source Guard 400
Displaying Information for Dynamic IPv4 Source Guard Bindings 402
IPv6 Source Guard 403
Configuring Ports for IPv6 Source Guard 403
Configuring Static Bindings for IPv6 Source Guard 405
Displaying Information for Dynamic IPv6 Source Guard Bindings 408
DHCP Snooping 409
DHCP Snooping Configuration 411
DHCP Snooping VLAN Configuration 413
Configuring Ports for DHCP Snooping 414
Displaying DHCP Snooping Binding Information 415
14 BASIC ADMINISTRATION PROTOCOLS 417
Configuring Event Logging 418
System Log Configuration 418
Remote Log Configuration 420
Sending Simple Mail Transfer Protocol Alerts 421
Link Layer Discovery Protocol 423
Setting LLDP Timing Attributes 423
Configuring LLDP Interface Attributes 425
Configuring LLDP Interface Civic-Address 429
Displaying LLDP Local Device Information 430
Displaying LLDP Remote Device Information 434
Displaying Device Statistics 442
C
ONTENTS
– 17 –
Simple Network Management Protocol 444
Configuring Global Settings for SNMP 446
Setting the Local Engine ID 447
Specifying a Remote Engine ID 448
Setting SNMPv3 Views 449
Configuring SNMPv3 Groups 452
Setting Community Access Strings 457
Configuring Local SNMPv3 Users 458
Configuring Remote SNMPv3 Users 460
Specifying Trap Managers 463
Creating SNMP Notification Logs 467
Showing SNMP Statistics 469
Remote Monitoring 471
Configuring RMON Alarms 472
Configuring RMON Events 475
Configuring RMON History Samples 477
Configuring RMON Statistical Samples 480
Switch Clustering 482
Configuring General Settings for Clusters 483
Cluster Member Configuration 484
Managing Cluster Members 486
Ethernet Ring Protection Switching 487
ERPS Global Configuration 491
ERPS Ring Configuration 492
ERPS Forced and Manual Mode Operations 508
Connectivity Fault Management 512
Configuring Global Settings for CFM 515
Configuring Interfaces for CFM 519
Configuring CFM Maintenance Domains 519
Configuring CFM Maintenance Associations 524
Configuring Maintenance End Points 528
Configuring Remote Maintenance End Points 530
Transmitting Link Trace Messages 532
Transmitting Loop Back Messages 534
Transmitting Delay-Measure Requests 535
Displaying Local MEPs 537
C
ONTENTS
– 18 –
Displaying Details for Local MEPs 538
Displaying Local MIPs 540
Displaying Remote MEPs 541
Displaying Details for Remote MEPs 542
Displaying the Link Trace Cache 544
Displaying Fault Notification Settings 546
Displaying Continuity Check Errors 547
OAM Configuration 548
Enabling OAM on Local Ports 548
Displaying Statistics for OAM Messages 551
Displaying the OAM Event Log 552
Displaying the Status of Remote Interfaces 553
Configuring a Remote Loop Back Test 554
Displaying Results of Remote Loop Back Testing 556
15 IP CONFIGURATION 559
Using the Ping Function 559
Using the Trace Route Function 561
Address Resolution Protocol 562
Setting the ARP Timeout 563
Displaying ARP Entries 563
Setting the Switch’s IP Address (IP Version 4) 564
Configuring the IPv4 Default Gateway 564
Configuring IPv4 Interface Settings 565
Setting the Switch’s IP Address (IP Version 6) 568
Configuring the IPv6 Default Gateway 569
Configuring IPv6 Interface Settings 569
Configuring an IPv6 Address 574
Showing IPv6 Addresses 577
Showing the IPv6 Neighbor Cache 578
Showing IPv6 Statistics 580
Showing the MTU for Responding Destinations 585
16 IP SERVICES 587
Domain Name Service 587
Configuring General DNS Service Parameters 587
Configuring a List of Domain Names 588
Configuring a List of Name Servers 590
C
ONTENTS
– 19 –
Configuring Static DNS Host to Address Entries 591
Displaying the DNS Cache 592
Dynamic Host Configuration Protocol 593
Specifying a DHCP Client Identifier 593
Configuring DHCP Relay Service 594
Configuring the PPPoE Intermediate Agent 598
Configuring PPPoE IA Global Settings 598
Configuring PPPoE IA Interface Settings 600
Showing PPPoE IA Statistics 602
17 MULTICAST FILTERING 605
Overview 605
Layer 2 IGMP (Snooping and Query for IPv4) 606
Configuring IGMP Snooping and Query Parameters 608
Specifying Static Interfaces for a Multicast Router 612
Assigning Interfaces to Multicast Services 614
Setting IGMP Snooping Status per Interface 616
Filtering IGMP Query Packets and Multicast Data 621
Displaying Multicast Groups Discovered by IGMP Snooping 622
Displaying IGMP Snooping Statistics 623
Filtering and Throttling IGMP Groups 627
Enabling IGMP Filtering and Throttling 627
Configuring IGMP Filter Profiles 628
Configuring IGMP Filtering and Throttling for Interfaces 630
MLD Snooping (Snooping and Query for IPv6) 632
Configuring MLD Snooping and Query Parameters 632
Setting Immediate Leave Status for MLD Snooping per Interface 634
Specifying Static Interfaces for an IPv6 Multicast Router 635
Assigning Interfaces to IPv6 Multicast Services 637
Showing MLD Snooping Groups and Source List 639
Multicast VLAN Registration for IPv4 640
Configuring MVR Global Settings 641
Configuring MVR Domain Settings 644
Configuring MVR Group Address Profiles 645
Configuring MVR Interface Status 648
Assigning Static MVR Multicast Groups to Interfaces 650
Displaying MVR Receiver Groups 652
C
ONTENTS
– 20 –
Displaying MVR Statistics 653
Multicast VLAN Registration for IPv6 657
Configuring MVR6 Global Settings 658
Configuring MVR6 Domain Settings 660
Configuring MVR6 Group Address Profiles 661
Configuring MVR6 Interface Status 664
Assigning Static MVR6 Multicast Groups to Interfaces 666
Displaying MVR6 Receiver Groups 668
Displaying MVR6 Statistics 669
SECTION III COMMAND LINE INTERFACE 675
18 USING THE COMMAND LINE INTERFACE 677
Accessing the CLI 677
Console Connection 677
Telnet Connection 678
Entering Commands 679
Keywords and Arguments 679
Minimum Abbreviation 679
Command Completion 679
Getting Help on Commands 680
Partial Keyword Lookup 682
Negating the Effect of Commands 682
Using Command History 682
Understanding Command Modes 682
Exec Commands 683
Configuration Commands 683
Command Line Processing 685
CLI Command Groups 686
19 GENERAL COMMANDS 689
prompt 689
reload (Global Configuration) 690
enable 691
quit 692
show history 692
configure 693
/
