Edge-Core ECS4120-28Fv2 User manual

Web Management Guide

www.edge-core.com

ECS4120-28Fv2

ECS4120-28Fv2-I

28-Port Layer 2+

Gigabit Ethernet Switch

Software Release 1.2.2.24

Web Management Guide

ECS4120-28Fv2 Gigabit Ethernet Switch

L2+ Gigabit Ethernet Switch

with 20 100/1000 SFP Ports,

4 10/100/1000 BASE-T (RJ-45) / 100/1000 SFP Combo Ports,

4 10 Gigabit SFP+ Ports , and DC Power Supply

(Operating Temperature: 0°C – 50°C)

ECS4120-28Fv2-I Gigabit Ethernet Switch

L2+ Gigabit Ethernet Switch

with 20 100/1000 SFP Ports,

4 10/100/1000 BASE-T (RJ-45) / 100/1000 SFP Combo Ports,

4 10 Gigabit SFP+ Ports, and DC Power Supply

(Operating Temperature: -10°C – 65°C)

E102019-CS-R04

– 3 –

How to Use This Guide

This guide includes detailed information on the switch software, including how to

operate and use the management functions of the switch. To deploy this switch

effectively and ensure trouble-free operation, you should first read the relevant

sections in this guide so that you are familiar with all of its software features.

Who Should Read This

Guide?

This guide is for network administrators who are responsible for operating and

maintaining network equipment. The guide assumes a basic working knowledge of

LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network

Management Protocol (SNMP).

How This Guide is

Organized

This guide describes the switch’s web browser interface. For more detailed

information on the switch’s key features refer to the Administrator’s Guide.

The guide includes these sections:

◆ Section I “Getting Started” — Includes an introduction to switch management,

and the basic settings required to access the management interface.

◆ Section II “Web Configuration” — Includes all management options available

through the web browser interface.

◆ Section III “Appendices” — Includes information on troubleshooting switch

management access.

This guide focuses on switch software configuration through the web browser.

For information on how to manage the switch through the command line interface,

see the following guide:

CLI Reference Guide

Note:

For a description of how to initialize the switch for management access via

the CLI, web interface or SNMP, refer to “Initial Switch Configuration” in the CLI

Reference Guide.

How to Use This Guide

– 4 –

For information on how to install the switch, see the following guide:

Installation Guide

For all safety information and regulatory statements, see the following documents:

Quick Start Guide

Safety and Regulatory Information

Conventions The following conventions are used throughout this guide to show information:

Note:

Emphasizes important information or calls your attention to related features

or instructions.

Caution:

Alerts you to a potential hazard that could cause loss of data, or damage

the system or equipment.

Documentation

Notice

This documentation is provided for general information purposes only. If any

product feature details in this documentation conflict with the product datasheet,

refer to the datasheet for the latest information.

Revision History This section summarizes the changes in each revision of this guide.

Revision Date Change Description

v1.2.2.24 10/2019 Updated:

◆

"Ethernet Ring Protection Switching" on page 483

v1.2.2.24 04/2019 Added:

◆

Documentationnotice.

Updated:

◆

"Configuring Interfaces for DHCP Snooping" on

page 374

◆

"IPv6 Source Guard" on page 392

v1.2.2.14 02/2019 Added:

◆

"Configuring the DHCP Server" on page 708

Updated:

◆

"Configuring Port Security" on page 356

◆

"Configuring the Secure Shell" on page 327

◆

"Configuring Remote Logon Authentication

Servers" on page 296

◆

"Ethernet Ring Protection Switching" on page 483

How to Use This Guide

– 5 –

v1.2.2.2 09/2018 Added:

◆

"Smart Pair Configuration" on page 570

Updated:

◆

"Dashboard" on page 52

◆

"Home Page" on page 54

◆

"Specifying NTP Time Servers" on page 95

◆

"Configuring AAA Accounting" on page 301‐new

commandAAAaccountingbasedonspecificprivilege

levels.

◆

"Configuring LLDP Interface Attributes" on

page 415

◆

"ERPS Ring Configuration" on page 488

◆

Figure 395 on page 603

◆

Multiple updates per internal review.

v1.0.2.33 11/2017 Initial release

Revision Date Change Description

How to Use This Guide

– 6 –

– 7 –

Contents

How to Use This Guide 3

Contents 7

Figures 19

Tables 35

Section I Getting Started 37

1 Introduction 39

Key Features 39

Description of Software Features 40

Address Resolution Protocol 44

Operation, Administration, and Maintenance 45

Multicast Filtering 45

Link Layer Discovery Protocol 45

System Defaults 46

Section II Web Configuration 49

2 Using the Web Interface 51

Connecting to the Web Interface 51

Navigating the Web Browser Interface 52

Dashboard 52

Home Page 54

Configuration Options 54

Panel Display 55

Main Menu 56

3 Basic Management Tasks 77

Contents

– 8 –

Displaying System Information 78

Displaying Hardware/Software Versions 79

Configuring Support for Jumbo Frames 80

Displaying Bridge Extension Capabilities 81

Managing System Files 82

Copying Files via FTP/ TFTP or HTTP 82

Saving the Running Configuration to a Local File 85

Setting the Start-up File 86

Showing System Files 86

Automatic Operation Code Upgrade 87

Setting the System Clock 91

Setting the Time Manually 91

Setting the SNTP Polling Interval 92

Configuring NTP 93

Configuring Time Servers 94

Setting the Time Zone 98

Configuring Summer Time 99

Configuring the Console Port 101

Configuring Telnet Settings 103

Displaying CPU Utilization 104

Configuring CPU Guard 106

Displaying Memory Utilization 107

Resetting the System 108

4 Interface Configuration 113

Port Configuration 114

Configuring by Port List 114

Configuring by Port Range 117

Displaying Connection Status 118

Showing Port or Trunk Statistics 119

Displaying Statistical History 124

Transceiver Data and Thresholds 128

Displaying Transceiver Data 128

Configuring Transceiver Thresholds 129

Performing Cable Diagnostics 131

Contents

– 9 –

Trunk Configuration 133

Configuring a Static Trunk 134

Configuring a Dynamic Trunk 137

Displaying LACP Port Counters 143

Displaying LACP Settings and Status for the Local Side 144

Displaying LACP Settings and Status for the Remote Side 146

Configuring Load Balancing 147

Saving Power 149

Configuring Local Port Mirroring 150

Configuring Remote Port Mirroring 152

Sampling Traffic Flows 156

Configuring sFlow Receiver Settings 157

Configuring an sFlow Polling Instance 159

Traffic Segmentation 161

Enabling Traffic Segmentation 161

Configuring Uplink and Downlink Ports 162

VLAN Trunking 164

5 VLAN Configuration 167

IEEE 802.1Q VLANs 167

Configuring VLAN Groups 171

Adding Static Members to VLANs 173

Configuring Dynamic VLAN Registration 178

IEEE 802.1Q Tunneling 181

Enabling QinQ Tunneling on the Switch 185

Creating CVLAN to SPVLAN Mapping Entries 186

Adding an Interface to QinQ Tunnel 188

L2PT Tunneling 189

Configuring the L2PT Tunnel Address 191

Enabling L2PT for Selected Interfaces 192

Protocol VLANs 193

Configuring Protocol VLAN Groups 194

Mapping Protocol Groups to Interfaces 195

Configuring IP Subnet VLANs 197

Configuring MAC-based VLANs 199

Contents

– 10 –

Configuring VLAN Translation 201

6 Address Table Settings 205

Dynamic Address Cache 205

Displaying the Dynamic Address Table 205

Clearing the Dynamic Address Table 206

Changing the Aging Time 207

Configuring MAC Address Learning 208

Setting Static Addresses 209

Issuing MAC Address Traps 211

7 Spanning Tree Algorithm 213

Overview 213

Configuring Loopback Detection 216

Configuring Global Settings for STA 217

Displaying Global Settings for STA 223

Configuring Interface Settings for STA 224

Displaying Interface Settings for STA 228

Configuring Multiple Spanning Trees 231

Configuring Interface Settings for MSTP 235

8 Congestion Control 239

Rate Limiting 239

Storm Control 240

Automatic Traffic Control 242

Setting the ATC Timers 244

Configuring ATC Thresholds and Responses 245

9 Class of Service 249

Layer 2 Queue Settings 249

Setting the Default Priority for Interfaces 249

Selecting the Queue Mode 250

Mapping CoS Values to Egress Queues 253

Layer 3/4 Priority Settings 256

Setting Priority Processing to IP Precedence/DSCP or CoS 256

Mapping Ingress DSCP Values to Internal DSCP Values 257

Mapping CoS Priorities to Internal DSCP Values 260

Contents

– 11 –

Mapping Internal DSCP Values to Egress CoS Values 262

Mapping IP Precedence Values to Internal DSCP Values 264

Mapping IP Port Priority to Internal DSCP Values 266

10 Quality of Service 269

Overview 269

Configuring a Class Map 270

Creating QoS Policies 274

Attaching a Policy Map to a Port 284

11 VoIP Traffic Configuration 287

Overview 287

Configuring VoIP Traffic 288

Configuring Telephony OUI 289

Configuring VoIP Traffic Ports 290

12 Security Measures 293

AAA Authentication, Authorization and Accounting 294

Configuring Local/Remote Logon Authentication 295

Configuring Remote Logon Authentication Servers 296

Configuring AAA Accounting 301

Configuring AAA Authorization 307

Configuring User Accounts 310

Web Authentication 312

Configuring Global Settings for Web Authentication 312

Configuring Interface Settings for Web Authentication 313

Network Access (MAC Address Authentication) 314

Configuring Global Settings for Network Access 317

Configuring Network Access for Ports 318

Configuring Port Link Detection 320

Configuring a MAC Address Filter 321

Displaying Secure MAC Address Information 323

Configuring HTTPS 324

Configuring Global Settings for HTTPS 324

Replacing the Default Secure-site Certificate 326

Configuring the Secure Shell 327

Contents

– 12 –

Configuring the SSH Server 330

Generating the Host Key Pair 331

Importing User Public Keys 333

Access Control Lists 335

Showing TCAM Utilization 336

Setting the ACL Name and Type 338

Configuring a Standard IPv4 ACL 340

Configuring an Extended IPv4 ACL 341

Configuring a Standard IPv6 ACL 343

Configuring an Extended IPv6 ACL 345

Configuring a MAC ACL 347

Configuring an ARP ACL 349

Displaying Configured ACL Rules 351

Showing ACL Hardware Counters 353

Filtering IP Addresses for Management Access 354

Configuring Port Security 356

Configuring 802.1X Port Authentication 359

Configuring 802.1X Global Settings 360

Configuring Port Authenticator Settings for 802.1X 361

Displaying 802.1X Statistics 365

DoS Protection 367

DHCPv4 Snooping 368

DHCP Snooping Global Configuration 371

DHCP Snooping VLAN Configuration 373

Configuring Interfaces for DHCP Snooping 374

Displaying DHCP Snooping Binding Information 376

DHCPv6 Snooping 377

DHCPv6 Snooping Global Configuration 379

DHCPv6 Snooping VLAN Configuration 381

Configuring Interfaces for DHCPv6 Snooping 383

Displaying DHCPv6 Snooping Binding Information 384

Displaying DHCPv6 Snooping Statistics 385

IPv4 Source Guard 386

Configuring Ports for IPv4 Source Guard 386

Configuring Static Bindings for IPv4 Source Guard 389

Contents

– 13 –

Displaying Information for Dynamic IPv4 Source Guard Bindings 391

IPv6 Source Guard 392

Configuring Ports for IPv6 Source Guard 393

Configuring Static Bindings for IPv6 Source Guard 395

Displaying Information for Dynamic IPv6 Source Guard Bindings 397

ARP Inspection 398

Configuring Global Settings for ARP Inspection 399

Configuring VLAN Settings for ARP Inspection 401

Configuring Interface Settings for ARP Inspection 403

Displaying ARP Inspection Statistics 404

Displaying the ARP Inspection Log 405

Application Filter 406

13 Basic Administration Protocols 407

Configuring Event Logging 408

System Log Configuration 408

Remote Log Configuration 410

Sending Simple Mail Transfer Protocol Alerts 411

Link Layer Discovery Protocol 413

Setting LLDP Timing Attributes 413

Configuring LLDP Interface Attributes 415

Configuring LLDP Interface Civic-Address 420

422

Displaying LLDP Local Device Information 423

Displaying LLDP Remote Device Information 427

Displaying Device Statistics 436

Simple Network Management Protocol 438

Configuring Global Settings for SNMP 440

Setting Community Access Strings 441

Setting the Local Engine ID 442

Specifying a Remote Engine ID 443

Setting SNMPv3 Views 444

Configuring SNMPv3 Groups 447

Configuring Local SNMPv3 Users 453

Configuring Remote SNMPv3 Users 455

Contents

– 14 –

Specifying Trap Managers 458

Creating SNMP Notification Logs 462

Showing SNMP Statistics 464

Remote Monitoring 466

Configuring RMON Alarms 466

Configuring RMON Events 469

Configuring RMON History Samples 471

Configuring RMON Statistical Samples 474

Switch Clustering 476

Configuring General Settings for Clusters 477

Cluster Member Configuration 478

Managing Cluster Members 480

Setting a Time Range 481

Ethernet Ring Protection Switching 483

ERPS Global Configuration 488

ERPS Ring Configuration 488

ERPS Forced and Manual Mode Operations 505

OAM Configuration 509

Enabling OAM on Local Ports 509

Displaying Statistics for OAM Messages 512

Displaying the OAM Event Log 512

Displaying the Status of Remote Interfaces 513

Configuring a Remote Loopback Test 514

Displaying Results of Remote Loopback Testing 516

Connectivity Fault Management 517

Configuring Global Settings for CFM 521

Configuring Interfaces for CFM 524

Configuring CFM Maintenance Domains 525

Configuring CFM Maintenance Associations 529

Configuring Maintenance End Points 534

Configuring Remote Maintenance End Points 535

Transmitting Link Trace Messages 537

Transmitting Loop Back Messages 539

Transmitting Delay-Measure Requests 541

Displaying Local MEPs 543

Contents

– 15 –

Displaying Details for Local MEPs 544

Displaying Local MIPs 546

Displaying Remote MEPs 547

Displaying Details for Remote MEPs 548

Displaying the Link Trace Cache 550

Displaying Fault Notification Settings 551

Displaying Continuity Check Errors 552

OAM Configuration 553

Enabling OAM on Local Ports 553

Displaying Statistics for OAM Messages 556

Displaying the OAM Event Log 557

Displaying the Status of Remote Interfaces 558

Configuring a Remote Loopback Test 559

Displaying Results of Remote Loopback Testing 561

UDLD Configuration 562

Configuring UDLD Protocol Intervals 563

Configuring UDLD Interface Settings 564

Displaying UDLD Neighbor Information 566

LBD Configuration 567

Configuring Global Settings for LBD 568

Configuring Interface Settings for LBD 570

Smart Pair Configuration 570

Configuring the Smart Pair Global Settings 571

Configuring Smart Pair Interface Settings 572

Show the Configured Smart Pair IDs 573

Display the Configured Smart Pair Port Members and Restore the Traffic 573

14 Multicast Filtering 575

Overview 575

Layer 2 IGMP (Snooping and Query for IPv4) 576

Configuring IGMP Snooping and Query Parameters 578

Specifying Static Interfaces for a Multicast Router 582

Assigning Interfaces to Multicast Services 584

Setting IGMP Snooping Status per Interface 586

Filtering IGMP Query Packets and Multicast Data 592

Contents

– 16 –

Displaying Multicast Groups Discovered by IGMP Snooping 593

Displaying IGMP Snooping Statistics 594

Filtering and Throttling IGMP Groups 598

Enabling IGMP Filtering and Throttling 599

Configuring IGMP Filter Profiles 599

Configuring IGMP Filtering and Throttling for Interfaces 602

MLD Snooping (Snooping and Query for IPv6) 603

Configuring MLD Snooping and Query Parameters 604

Setting Immediate Leave Status for MLD Snooping per Interface 605

Specifying Static Interfaces for an IPv6 Multicast Router 606

Assigning Interfaces to IPv6 Multicast Services 608

Showing MLD Snooping Groups and Source List 610

Displaying MLD Snooping Statistics 611

Multicast VLAN Registration for IPv4 619

Configuring MVR Global Settings 621

Configuring MVR Domain Settings 623

Configuring MVR Group Address Profiles 624

Configuring MVR Interface Status 627

Assigning Static MVR Multicast Groups to Interfaces 629

Displaying MVR Receiver Groups 631

Displaying MVR Statistics 632

Multicast VLAN Registration for IPv6 636

Configuring MVR6 Global Settings 637

Configuring MVR6 Domain Settings 639

Configuring MVR6 Group Address Profiles 640

Configuring MVR6 Interface Status 643

Assigning Static MVR6 Multicast Groups to Interfaces 645

Displaying MVR6 Receiver Groups 647

Displaying MVR6 Statistics 648

15 Basic IP Functions 653

Using the Ping Function 653

Using the Trace Route Function 655

Address Resolution Protocol 656

Basic ARP Configuration 657

Contents

– 17 –

Configuring Static ARP Addresses 658

Displaying Dynamic or Local ARP Entries 660

Displaying ARP Statistics 660

16 IP Configuration 663

Setting the Switch’s IP Address (IP Version 4) 663

Configuring IPv4 Interface Settings 663

Setting the Switch’s IP Address (IP Version 6) 667

Configuring the IPv6 Default Gateway 667

Configuring IPv6 Interface Settings 668

Configuring an IPv6 Address 673

Showing IPv6 Addresses 676

Showing the IPv6 Neighbor Cache 677

Showing IPv6 Statistics 678

Showing the MTU for Responding Destinations 684

17 General IP Routing 685

Overview 685

Initial Configuration 685

IP Routing and Switching 686

Routing Path Management 687

Routing Protocols 687

Configuring IP Routing Interfaces 688

Configuring Local and Remote Interfaces 688

Configuring Static Routes 689

Displaying the Routing Table 690

18 IP Services 693

Domain Name Service 693

Configuring General DNS Service Parameters 693

Configuring a List of Domain Names 694

Configuring a List of Name Servers 696

Configuring Static DNS Host to Address Entries 697

Displaying the DNS Cache 698

Dynamic Host Configuration Protocol 699

Specifying a DHCP Client Identifier 699

Contents

– 18 –

Configuring DHCP Relay Agent Mode 701

Configuring DHCP Relay Agent Mode 702

Configuring DHCP Layer 3 Relay Service 703

Configuring DHCP L2 Relay Service with Option 82 704

Configuring the DHCP Server 708

Enabling DHCP Dynamic Provision 715

Configuring the PPPoE Intermediate Agent 716

Configuring PPPoE IA Global Settings 716

Configuring PPPoE IA Interface Settings 717

Showing PPPoE IA Statistics 719

Section III Appendices 721

A Software Specifications 723

Software Features 723

Management Features 725

Standards 725

Management Information Bases 726

B Troubleshooting 729

Problems Accessing the Management Interface 729

Using System Logs 730

C License Information 731

The GNU General Public License 731

Glossary 735

– 19 –

Figures

Figure 1: Dashboard 52

Figure 2: Home Page 54

Figure 3: Front Panel Indicators 55

Figure 4: System Information 78

Figure 5: General Switch Information 80

Figure 6: Configuring Support for Jumbo Frames 81

Figure 7: Displaying Bridge Extension Configuration 82

Figure 8: Copy Firmware 84

Figure 9: Saving the Running Configuration 85

Figure 10: Setting Start-Up Files 86

Figure 11: Displaying System Files 87

Figure 12: Configuring Automatic Code Upgrade 90

Figure 13: Manually Setting the System Clock 92

Figure 14: Setting the Polling Interval for SNTP 93

Figure 15: Configuring NTP 94

Figure 16: Specifying SNTP Time Servers 95

Figure 17: Adding an NTP Time Server 96

Figure 18: Showing the NTP Time Server List 96

Figure 19: Adding an NTP Authentication Key 97

Figure 20: Showing the NTP Authentication Key List 97

Figure 21: Setting the Time Zone 99

Figure 22: Configuring Summer Time 101

Figure 23: Console Port Settings 102

Figure 24: Telnet Connection Settings 104

Figure 25: Displaying CPU Utilization - Show Information 105

Figure 26: Displaying CPU Utilization - Show Information by Task 105

Figure 27: Configuring CPU Guard 107

Figure 28: Displaying Memory Utilization 108

Figure 29: Restarting the Switch (Immediately) 110

Figures

– 20 –

Figure 30: Restarting the Switch (In) 110

Figure 31: Restarting the Switch (At) 111

Figure 32: Restarting the Switch (Regularly) 111

Figure 33: Configuring Connections by Port List 117

Figure 34: Configuring Connections by Port Range 118

Figure 35: Displaying Port Information 119

Figure 36: Showing Port Statistics (Table) 123

Figure 37: Showing Port Statistics (Chart) 123

Figure 38: Configuring a History Sample 125

Figure 39: Showing Entries for History Sampling 126

Figure 40: Showing Status of Statistical History Sample 126

Figure 41: Showing Current Statistics for a History Sample 127

Figure 42: Showing Ingress Statistics for a History Sample 128

Figure 43: Displaying Transceiver Data 129

Figure 44: Configuring Transceiver Thresholds 131

Figure 45: Performing Cable Tests 133

Figure 46: Configuring Static Trunks 134

Figure 47: Creating Static Trunks 135

Figure 48: Adding Static Trunks Members 136

Figure 49: Configuring Connection Parameters for a Static Trunk 136

Figure 50: Showing Information for Static Trunks 137

Figure 51: Configuring Dynamic Trunks 137

Figure 52: Configuring the LACP Aggregator Admin Key 140

Figure 53: Enabling LACP on a Port 141

Figure 54: Configuring LACP Parameters on a Port 141

Figure 55: Showing Members of a Dynamic Trunk 142

Figure 56: Configuring Connection Settings for a Dynamic Trunk 142

Figure 57: Displaying Connection Parameters for Dynamic Trunks 143

Figure 58: Displaying LACP Port Counters 144

Figure 59: Displaying LACP Port Internal Information 145

Figure 60: Displaying LACP Port Remote Information 147

Figure 61: Configuring Load Balancing 148

Figure 62: Enabling Power Savings 150

Figure 63: Configuring Local Port Mirroring 150

Figure 64: Configuring Local Port Mirroring 151

Page is loading ...

Edge-Core ECS4120-28Fv2, ECS4120-28Fv2-I, ECS4120-28T, ECS4120-52T User manual

Related papers

Other documents