EX-3524/EX-3548

Zebra EX-3524/EX-3548, EX3524/EX3548 Owner's manual

  • Hello! I am an AI chatbot trained to assist you with the Zebra EX-3524/EX-3548 Owner's manual. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
www.edge-core.com
EX-3524/EX-3548
Layer 2 Gigabit Ethernet PoE/PoE+ Switch
System Reference Guide
Zebra and the Zebra head graphic are registered trademarks of ZIH Corp. The Symbol logo is a
registered trademark of Symbol Technologies, Inc., a Zebra Technologies company.
© 2015 Symbol Technologies, Inc.
– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should Read
this Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How this Guide
is Organized
This guide describes the switchs web management interface. An introduction to
the switchs key features is also provided. For information on initial configuration,
refer to the CLI Reference Guide.
Section I Getting Started” — Includes an introduction to switch management,
and the basic settings required to access the management interface.
Section II “Web Configuration — Includes all management options available
through the web browser interface.
Section III “Appendices Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the web browser.
For information on how to manage the switch through the command line interface,
see the following guide:
CLI Reference Guide
Note:
For a description of how to initialize the switch for management access via
the CLI or SNMP, refer to “Initial Switch Configuration” in the CLI Reference Guide.
For information on how to install the switch, see the following guide:
Installation Guide
How to Use This Guide
– 4 –
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information
Conventions The following conventions are used throughout this guide to show information:
Note:
Emphasizes important information or calls your attention to related features
or instructions.
Caution:
Alerts you to a potential hazard that could cause loss of data, or damage
the system or equipment.
Warning:
Alerts you to a potential hazard that could cause personal injury.
Revision History This section summarizes the changes in each revision of this guide.
December 2014 Revision
This is the third version of this guide. This guide is valid for software release
v5.0.0.0-07D. This release includes a major change in the underlying software
platform. It contains the following changes:
Removed the parameter “Auto reboot after opcode upgrade completed.“ from
the File Copy page under "Copying Files via FTP/TFTP or HTTP" on page 73.
Added the section "Specifying NTP Time Servers" on page 86.
Removed the “Predefined Configurationparameter from the System Time
page under "Setting the Time Zone" on page 89.
Changed the range default for several parameters under "Configuring the
Console Port" on page 91 and "Configuring Telnet Settings" on page 93.
Removed several options from the System Reset page under "Resetting the
System" on page 97.
Updated description for “Media Type” parameter and removed the “Giga PHY
Mode” parameter under "Configuring by Port List" on page 102.
Changed the number of available sessions for local and remote mirroring to six
under "Configuring Local Port Mirroring" on page 106 and "Configuring
Remote Port Mirroring" on page 108.
How to Use This Guide
– 5 –
Added the sections “"Displaying Transceiver Data" on page 116 and
"Configuring Transceiver Thresholds" on page 117.
Increased the number of supported trunks to 16 under "Trunk Configuration"
on page 121.
Added the parameter “Timeout Mode” under "Configuring a Dynamic Trunk"
on page 125.
Changed Static VLAN configuration pages under "Configuring VLAN Groups"
on page 148 and "Adding Static Members to VLANs" on page 151.
Added the section "Creating CVLAN to SPVLAN Mapping Entries" on page 164.
Added “priority” to parameter list under "Mapping Protocol Groups to
Interfaces" on page 169.
Added “mask” to parameter list under "Configuring MAC-based VLANs" on
page 173.
Added the section "Configuring MAC Address Learning" on page 179.
Updated parameter list under "Configuring Loopback Detection" on page 190.
Updated parameter list under "Configuring Interface Settings for STA" on
page 198 and "Displaying Interface Settings for STA" on page 202.
Updated parameter list under "Configuring a Class Map" on page 238.
Updated range of various parameters under "Creating QoS Policies" on
page 241.
Added “Command” to parameter list under "Configuring AAA Accounting" on
page 267.
Updated parameter list under "Configuring AAA Authorization" on page 274.
Updated description of “Access Level” and other parameters under
"Configuring User Accounts" on page 277.
Removed “redirect to” interface option under "Access Control Lists" on
page 302.
Added “Internet Protocol” parameter under "Configuring a MAC ACL" on
page 314.
Added “Counter” parameter under "Binding a Port to an Access Control List" on
page 318.
Added the section "Configuring ACL Mirroring" on page 319.
How to Use This Guide
– 6 –
Added the section "Showing ACL Hardware Counters" on page 321.
Added the parameter “Allow Zeros under "Configuring Global Settings for
ARP Inspection" on page 323.
Updated parameter list under "Configuring Port Security" on page 333.
Updated parameter list under "DoS Protection" on page 347.
Added the section "IPv6 Source Guard" on page 355.
Added parameter options under "DHCP Snooping Global Configuration" on
page 363.
Added “Circuit ID” parameter under "Configuring Ports for DHCP Snooping" on
page 366.
Changed web pages under "Sending Simple Mail Transfer Protocol Alerts" on
page 373.
Added “MAC/PHY Configuration/Status” parameter under "Configuring
LLDP Interface Attributes" on page 377.
Added parameter list for interface details under "Displaying LLDP Local Device
Information" on page 382.
Added the section "Setting the Switchs Overall PoE Power Budget" on
page 399.
Added “MAC Notification Traps” and “MAC Notification Trap Interval” under
"Configuring Global Settings for SNMP" on page 405.
Updated Table 33, Supported Notification Messages," on page 412.
Added the section "Creating SNMP Notification Logs" on page 427 and
"Showing SNMP Statistics" on page 429.
Added “Forwarding Priority” to parameter list under "Configuring IGMP
Snooping and Query Parameters" on page 454.
Updated parameter list under "Displaying Multicast Groups Discovered by
IGMP Snooping" on page 468.
Added the section "Displaying IGMP Snooping Statistics" on page 470.
Added the section "MLD Snooping (Snooping and Query for IPv6)" on
page 479.
Added the section "Multicast VLAN Registration for IPv6" on page 504.
How to Use This Guide
– 7 –
Removed “Enable Rapid-Commit” from the parameter list under "Configuring
IPv6 Interface Settings" on page 526.
Added parameters for “RA Guard Mode” under "Configuring an IPv6 Address"
on page 531.
Added the section "Configuring DHCP Relay Service" on page 551.
Added the section "Configuring the PPPoE Intermediate Agent" on page 552.
Added the section "Using the Trace Route Function" on page 562.
September 2014 Revision
This is the second version of this guide. This guide is valid for software release
v4.0.1.0-04R. It contains the following changes:
Updated description of System Fan under "Displaying System Information" on
page 67.
Added the section "Configuring HTTP Settings" on page 94.
Added “MAC Mask” parameter under "Displaying the Dynamic Address Table"
on page 183.
Updated descriptive text for Remaining Age parameter under "Configuring
VoIP Traffic Ports" on page 256
Added descriptive text for Figure 115 on page 204.
Updated description of Authentication Password under "Configuring Local
SNMPv3 Users" on page 417
Added “Encryption” parameter under "Configuring Remote SNMPv3 Users" on
page 420.
Added description for change a local SNMPv3 local user group under
"Configuring Local SNMPv3 Users" on page 417
March 2014 Revision
This is the first version of this guide. This guide is valid for software release
v4.0.0.0-02R.
How to Use This Guide
– 8 –
– 9 –
Contents
How to Use This Guide 3
Contents 9
Figures 19
Tables 31
Section I Getting Started 33
1 Introduction 35
Key Features 35
Description of Software Features 36
System Defaults 42
Section II Web Configuration 45
2 Using the Web Interface 47
Connecting to the Web Interface 47
Navigating the Web Browser Interface 48
Home Page 48
Configuration Options 49
Panel Display 49
Main Menu 50
3 Basic Management Tasks 67
Displaying System Information 67
Displaying Hardware/Software Versions 69
Configuring Support for Jumbo Frames 71
Displaying Bridge Extension Capabilities 72
Managing System Files 73
Contents
– 10 –
Copying Files via FTP/TFTP or HTTP 73
Saving the Running Configuration to a Local File 75
Setting the Start-Up File 76
Showing System Files 77
Automatic Operation Code Upgrade 78
Setting the System Clock 82
Setting the Time Manually 82
Setting the SNTP Polling Interval 83
Configuring NTP 84
Configuring Time Servers 85
Setting the Time Zone 89
Configuring Summer Time 89
Configuring the Console Port 91
Configuring Telnet Settings 93
Configuring HTTP Settings 94
Displaying CPU Utilization 95
Displaying Memory Utilization 96
Resetting the System 97
4 Interface Configuration 101
Port Configuration 102
Configuring by Port List 102
Configuring by Port Range 104
Displaying Connection Status 105
Configuring Local Port Mirroring 106
Configuring Remote Port Mirroring 108
Showing Port or Trunk Statistics 112
Displaying Transceiver Data 116
Configuring Transceiver Thresholds 117
Performing Cable Diagnostics 119
Trunk Configuration 121
Configuring a Static Trunk 122
Configuring a Dynamic Trunk 125
Displaying LACP Port Counters 132
Displaying LACP Settings and Status for the Local Side 133
Contents
– 11 –
Displaying LACP Settings and Status for the Remote Side 134
Configuring Load Balancing 135
Saving Power 137
Traffic Segmentation 139
Enabling Traffic Segmentation 139
Configuring Uplink and Downlink Ports 140
VLAN Trunking 142
5 VLAN Configuration 145
IEEE 802.1Q VLANs 145
Configuring VLAN Groups 148
Adding Static Members to VLANs 151
Configuring Dynamic VLAN Registration 155
IEEE 802.1Q Tunneling 159
Enabling QinQ Tunneling on the Switch 163
Creating CVLAN to SPVLAN Mapping Entries 164
Adding an Interface to a QinQ Tunnel 166
Protocol VLANs 167
Configuring Protocol VLAN Groups 168
Mapping Protocol Groups to Interfaces 169
Configuring IP Subnet VLANs 171
Configuring MAC-based VLANs 173
Configuring VLAN Mirroring 175
6 Address Table Settings 179
Configuring MAC Address Learning 179
Setting Static Addresses 181
Changing the Aging Time 182
Displaying the Dynamic Address Table 183
Clearing the Dynamic Address Table 184
Configuring MAC Address Mirroring 185
7 Spanning Tree Algorithm 187
Overview 187
Configuring Loopback Detection 190
Configuring Global Settings for STA 191
Contents
– 12 –
Displaying Global Settings for STA 197
Configuring Interface Settings for STA 198
Displaying Interface Settings for STA 202
Configuring Multiple Spanning Trees 205
Configuring Interface Settings for MSTP 209
8 Congestion Control 213
Rate Limiting 213
Storm Control 214
Automatic Traffic Control 216
Setting the ATC Timers 217
Configuring ATC Thresholds and Responses 219
9 Class of Service 223
Layer 2 Queue Settings 223
Setting the Default Priority for Interfaces 223
Selecting the Queue Mode 224
Mapping CoS Values to Egress Queues 227
Layer 3/4 Priority Settings 229
Setting Priority Processing to DSCP or CoS 230
Mapping Ingress DSCP Values to Internal DSCP Values 231
Mapping CoS Priorities to Internal DSCP Values 233
10 Quality of Service 237
Overview 237
Configuring a Class Map 238
Creating QoS Policies 241
Attaching a Policy Map to a Port 251
11 VoIP Traffic Configuration 253
Overview 253
Configuring VoIP Traffic 254
Configuring Telephony OUI 255
Configuring VoIP Traffic Ports 256
12 Security Measures 259
AAA Authentication, Authorization and Accounting 260
Contents
– 13 –
Configuring Local/Remote Logon Authentication 261
Configuring Remote Logon Authentication Servers 262
Configuring AAA Accounting 267
Configuring AAA Authorization 274
Configuring User Accounts 277
Web Authentication 279
Configuring Global Settings for Web Authentication 279
Configuring Interface Settings for Web Authentication 280
Network Access (MAC Address Authentication) 282
Configuring Global Settings for Network Access 284
Configuring Network Access for Ports 285
Configuring Port Link Detection 287
Configuring a MAC Address Filter 288
Displaying Secure MAC Address Information 290
Configuring HTTPS 291
Configuring Global Settings for HTTPS 291
Replacing the Default Secure-site Certificate 293
Configuring the Secure Shell 294
Configuring the SSH Server 297
Generating the Host Key Pair 298
Importing User Public Keys 300
Access Control Lists 302
Showing TCAM Utilization 303
Setting the ACL Name and Type 304
Configuring a Standard IPv4 ACL 306
Configuring an Extended IPv4 ACL 307
Configuring a Standard IPv6 ACL 310
Configuring an Extended IPv6 ACL 312
Configuring a MAC ACL 314
Configuring an ARP ACL 316
Binding a Port to an Access Control List 318
Configuring ACL Mirroring 319
Showing ACL Hardware Counters 321
ARP Inspection 322
Configuring Global Settings for ARP Inspection 323
Contents
– 14 –
Configuring VLAN Settings for ARP Inspection 325
Configuring Interface Settings for ARP Inspection 326
Displaying ARP Inspection Statistics 328
Displaying the ARP Inspection Log 329
Displaying ARP Inspection Statistics 330
Filtering IP Addresses for Management Access 331
Configuring Port Security 333
Configuring 802.1X Port Authentication 335
Configuring 802.1X Global Settings 337
Configuring Port Authenticator Settings for 802.1X 338
Configuring Port Supplicant Settings for 802.1X 342
Displaying 802.1X Statistics 344
DoS Protection 347
IPv4 Source Guard 349
Configuring Ports for IPv4 Source Guard 350
Configuring Static Bindings for IPv4 Source Guard 351
Displaying Information for Dynamic IPv4 Source Guard Bindings 354
IPv6 Source Guard 355
Configuring Ports for IPv6 Source Guard 355
Configuring Static Bindings for IPv6 Source Guard 358
Displaying Information for Dynamic IPv6 Source Guard Bindings 360
DHCP Snooping 361
DHCP Snooping Global Configuration 363
DHCP Snooping VLAN Configuration 365
Configuring Ports for DHCP Snooping 366
Displaying DHCP Snooping Binding Information 367
13 Basic Administration Protocols 369
Configuring Event Logging 369
System Log Configuration 369
Remote Log Configuration 372
Sending Simple Mail Transfer Protocol Alerts 373
Link Layer Discovery Protocol 374
Setting LLDP Timing Attributes 375
Configuring LLDP Interface Attributes 377
Contents
– 15 –
Configuring LLDP Interface Civic-Address 380
Displaying LLDP Local Device Information 382
Displaying LLDP Remote Device Information 386
Displaying Device Statistics 394
Cisco Discover Protocol 396
Configuring Global Settings for CDP 396
Enabling CDP on Selected Interfaces 397
Showing CDP Neighbors 398
Power over Ethernet 399
Setting the Switch’s Overall PoE Power Budget 399
Setting the Port PoE Power Budget 401
Simple Network Management Protocol 403
Configuring Global Settings for SNMP 405
Setting the Local Engine ID 406
Specifying a Remote Engine ID 407
Setting SNMPv3 Views 409
Configuring SNMPv3 Groups 411
Setting Community Access Strings 416
Configuring Local SNMPv3 Users 417
Configuring Remote SNMPv3 Users 420
Specifying Trap Managers 423
Creating SNMP Notification Logs 427
Showing SNMP Statistics 429
Remote Monitoring 431
Configuring RMON Alarms 432
Configuring RMON Events 434
Configuring RMON History Samples 436
Configuring RMON Statistical Samples 439
Switch Clustering 442
Configuring General Settings for Clusters 442
Cluster Member Configuration 444
Managing Cluster Members 446
Setting a Time Range 446
14 Multicast Filtering 451
Contents
– 16 –
Overview 451
Layer 2 IGMP (Snooping and Query for IPv4) 453
Configuring IGMP Snooping and Query Parameters 454
Specifying Static Interfaces for a Multicast Router 458
Assigning Interfaces to Multicast Services 461
Setting IGMP Snooping Status per Interface 463
Displaying Multicast Groups Discovered by IGMP Snooping 468
Displaying IGMP Snooping Statistics 470
Filtering and Throttling IGMP Groups 474
Enabling IGMP Filtering and Throttling 474
Configuring IGMP Filter Profiles 475
Configuring IGMP Filtering and Throttling for Interfaces 477
MLD Snooping (Snooping and Query for IPv6) 479
Configuring MLD Snooping and Query Parameters 479
Setting Immediate Leave Status for MLD Snooping per Interface 481
Specifying Static Interfaces for an IPv6 Multicast Router 481
Assigning Interfaces to IPv6 Multicast Services 483
Showing MLD Snooping Groups and Source List 486
Multicast VLAN Registration for IPv4 487
Configuring MVR Global Settings 489
Configuring MVR Domain Settings 491
Configuring MVR Group Address Profiles 492
Configuring MVR Interface Status 495
Assigning Static MVR Multicast Groups to Interfaces 497
Displaying MVR Receiver Groups 499
Displaying MVR Statistics 500
Multicast VLAN Registration for IPv6 504
Configuring MVR6 Global Settings 505
Configuring MVR6 Domain Settings 507
Configuring MVR6 Group Address Profiles 508
Configuring MVR6 Interface Status 511
Assigning Static MVR6 Multicast Groups to Interfaces 513
Displaying MVR6 Receiver Groups 515
Displaying MVR6 Statistics 516
Contents
– 17 –
15 IP Configuration 521
Setting the Switch’s IP Address (IP Version 4) 521
Setting the Switch’s IP Address (IP Version 6) 524
Configuring the IPv6 Default Gateway 525
Configuring IPv6 Interface Settings 526
Configuring an IPv6 Address 531
Showing IPv6 Addresses 533
Showing the IPv6 Neighbor Cache 535
Showing IPv6 Statistics 536
Showing the MTU for Responding Destinations 542
16 IP Services 543
Domain Name Service 543
Configuring General DNS Service Parameters 543
Configuring a List of Domain Names 544
Configuring a List of Name Servers 546
Configuring Static DNS Host to Address Entries 547
Displaying the DNS Cache 548
Dynamic Host Configuration Protocol 549
Specifying a DHCP Client Identifier 549
Configuring DHCP Relay Service 551
Configuring the PPPoE Intermediate Agent 552
Configuring PPPoE IA Global Settings 552
Configuring PPPoE IA Interface Settings 554
Showing PPPoE IA Statistics 555
17 General IP Routing 557
Overview 557
Initial Configuration 557
IP Routing and Switching 558
Routing Path Management 559
Routing Protocols 560
Configuring IP Routing Interfaces 560
Configuring Local and Remote Interfaces 560
Using the Ping Function 561
Using the Trace Route Function 562
Contents
– 18 –
Address Resolution Protocol 563
Proxy ARP Configuration 564
Configuring Static ARP Addresses 565
Displaying Dynamic or Local ARP Entries 567
Displaying ARP Statistics 568
Configuring Static Routes 569
Displaying the Routing Table 570
Section III Appendices 573
A Software Specifications 575
Software Features 575
Management Features 576
Standards 577
Management Information Bases 577
B Troubleshooting 579
Problems Accessing the Management Interface 579
Using System Logs 580
C License Information 581
The GNU General Public License 581
GNU Lesser General Public License, version 3.0 584
The BSD License 586
ISC License 587
D Customer Support 593
Zebra Support 593
Customer Support Web Site 593
Manuals 593
Glossary 595
Index 603
– 19 –
Figures
Figure 1: Home Page 48
Figure 2: Front Panel Indicators 49
Figure 3: System Information 68
Figure 4: General Switch Information (EX-3524) 70
Figure 5: General Switch Information (EX-3548) 70
Figure 6: Configuring Support for Jumbo Frames 71
Figure 7: Displaying Bridge Extension Configuration 73
Figure 8: Copy Firmware 75
Figure 9: Saving the Running Configuration 76
Figure 10: Setting Start-Up Files 77
Figure 11: Displaying System Files 77
Figure 12: Configuring Automatic Code Upgrade 81
Figure 13: Manually Setting the System Clock 83
Figure 14: Setting the Polling Interval for SNTP 84
Figure 15: Configuring NTP 85
Figure 16: Specifying SNTP Time Servers 86
Figure 17: Adding an NTP Time Server 87
Figure 18: Showing the NTP Time Server List 87
Figure 19: Adding an NTP Authentication Key 88
Figure 20: Showing the NTP Authentication Key List 88
Figure 21: Setting the Time Zone 89
Figure 22: Summer Time Settings 91
Figure 23: Console Port Settings 92
Figure 24: Telnet Connection Settings 94
Figure 25: HTTP Connection Settings 95
Figure 26: Displaying CPU Utilization 96
Figure 27: Displaying Memory Utilization 96
Figure 28: Restarting the Switch (Immediately) 99
Figure 29: Restarting the Switch (In) 99
Figures
– 20 –
Figure 30: Restarting the Switch (At) 99
Figure 31: Restarting the Switch (Regularly) 99
Figure 32: Showing Reset Settings 100
Figure 33: Configuring Connections by Port List 104
Figure 34: Configuring Connections by Port Range 105
Figure 35: Displaying Port Information 106
Figure 36: Configuring Local Port Mirroring 106
Figure 37: Configuring Local Port Mirroring 107
Figure 38: Displaying Local Port Mirror Sessions 108
Figure 39: Configuring Remote Port Mirroring 108
Figure 40: Configuring Remote Port Mirroring (Source) 111
Figure 41: Configuring Remote Port Mirroring (Intermediate) 111
Figure 42: Configuring Remote Port Mirroring (Destination) 112
Figure 43: Showing Port Statistics (Table) 115
Figure 44: Showing Port Statistics (Chart) 116
Figure 45: Displaying Transceiver Data 117
Figure 46: Configuring Transceiver Thresholds 119
Figure 47: Performing Cable Tests 121
Figure 48: Configuring Static Trunks 122
Figure 49: Creating Static Trunks 124
Figure 50: Adding Static Trunks Members 124
Figure 51: Configuring Connection Parameters for a Static Trunk 125
Figure 52: Showing Information for Static Trunks 125
Figure 53: Configuring Dynamic Trunks 125
Figure 54: Configuring the LACP Aggregator Admin Key 128
Figure 55: Enabling LACP on a Port 129
Figure 56: Configuring LACP Parameters on a Port 130
Figure 57: Showing Members of a Dynamic Trunk 130
Figure 58: Configuring Connection Settings for a Dynamic Trunk 131
Figure 59: Showing Connection Parameters for Dynamic Trunks 131
Figure 60: Displaying LACP Port Counters 132
Figure 61: Displaying LACP Port Internal Information 134
Figure 62: Displaying LACP Port Remote Information 135
Figure 63: Configuring Load Balancing 137
Figure 64: Enabling Power Savings 138
/