Zebra EX-3524/EX-3548 Owner's manual

www.edge-core.com

EX-3524/EX-3548

Layer 2 Gigabit Ethernet PoE/PoE+ Switch

System Reference Guide

Zebra and the Zebra head graphic are registered trademarks of ZIH Corp. The Symbol logo is a

registered trademark of Symbol Technologies, Inc., a Zebra Technologies company.

– 3 –

How to Use This Guide

This guide includes detailed information on the switch software, including how to

operate and use the management functions of the switch. To deploy this switch

effectively and ensure trouble-free operation, you should first read the relevant

sections in this guide so that you are familiar with all of its software features.

Who Should Read

this Guide?

This guide is for network administrators who are responsible for operating and

maintaining network equipment. The guide assumes a basic working knowledge of

LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network

Management Protocol (SNMP).

How this Guide

is Organized

This guide describes the switch’s web management interface. An introduction to

the switch’s key features is also provided. For information on initial configuration,

refer to the CLI Reference Guide.

◆ Section I “Getting Started” — Includes an introduction to switch management,

and the basic settings required to access the management interface.

◆ Section II “Web Configuration” — Includes all management options available

through the web browser interface.

◆ Section III “Appendices” — Includes information on troubleshooting switch

management access.

This guide focuses on switch software configuration through the web browser.

For information on how to manage the switch through the command line interface,

see the following guide:

CLI Reference Guide

Note:

For a description of how to initialize the switch for management access via

the CLI or SNMP, refer to “Initial Switch Configuration” in the CLI Reference Guide.

For information on how to install the switch, see the following guide:

Installation Guide

How to Use This Guide

– 4 –

For all safety information and regulatory statements, see the following documents:

Quick Start Guide

Safety and Regulatory Information

Conventions The following conventions are used throughout this guide to show information:

Note:

Emphasizes important information or calls your attention to related features

or instructions.

Caution:

Alerts you to a potential hazard that could cause loss of data, or damage

the system or equipment.

Warning:

Alerts you to a potential hazard that could cause personal injury.

Revision History This section summarizes the changes in each revision of this guide.

December 2014 Revision

This is the third version of this guide. This guide is valid for software release

v5.0.0.0-07D. This release includes a major change in the underlying software

platform. It contains the following changes:

◆ Removed the parameter “Auto reboot after opcode upgrade completed.“ from

the File Copy page under "Copying Files via FTP/TFTP or HTTP" on page 73.

◆ Added the section "Specifying NTP Time Servers" on page 86.

◆ Removed the “Predefined Configuration” parameter from the System Time

page under "Setting the Time Zone" on page 89.

◆ Changed the range default for several parameters under "Configuring the

Console Port" on page 91 and "Configuring Telnet Settings" on page 93.

◆ Removed several options from the System Reset page under "Resetting the

System" on page 97.

◆ Updated description for “Media Type” parameter and removed the “Giga PHY

Mode” parameter under "Configuring by Port List" on page 102.

◆ Changed the number of available sessions for local and remote mirroring to six

under "Configuring Local Port Mirroring" on page 106 and "Configuring

Remote Port Mirroring" on page 108.

How to Use This Guide

– 5 –

◆ Added the sections “"Displaying Transceiver Data" on page 116 and

"Configuring Transceiver Thresholds" on page 117.

◆ Increased the number of supported trunks to 16 under "Trunk Configuration"

on page 121.

◆ Added the parameter “Timeout Mode” under "Configuring a Dynamic Trunk"

on page 125.

◆ Changed Static VLAN configuration pages under "Configuring VLAN Groups"

on page 148 and "Adding Static Members to VLANs" on page 151.

◆ Added the section "Creating CVLAN to SPVLAN Mapping Entries" on page 164.

◆ Added “priority” to parameter list under "Mapping Protocol Groups to

Interfaces" on page 169.

◆ Added “mask” to parameter list under "Configuring MAC-based VLANs" on

page 173.

◆ Added the section "Configuring MAC Address Learning" on page 179.

◆ Updated parameter list under "Configuring Loopback Detection" on page 190.

◆ Updated parameter list under "Configuring Interface Settings for STA" on

page 198 and "Displaying Interface Settings for STA" on page 202.

◆ Updated parameter list under "Configuring a Class Map" on page 238.

◆ Updated range of various parameters under "Creating QoS Policies" on

page 241.

◆ Added “Command” to parameter list under "Configuring AAA Accounting" on

page 267.

◆ Updated parameter list under "Configuring AAA Authorization" on page 274.

◆ Updated description of “Access Level” and other parameters under

"Configuring User Accounts" on page 277.

◆ Removed “redirect to” interface option under "Access Control Lists" on

page 302.

◆ Added “Internet Protocol” parameter under "Configuring a MAC ACL" on

page 314.

◆ Added “Counter” parameter under "Binding a Port to an Access Control List" on

page 318.

◆ Added the section "Configuring ACL Mirroring" on page 319.

How to Use This Guide

– 6 –

◆ Added the section "Showing ACL Hardware Counters" on page 321.

◆ Added the parameter “Allow Zeros” under "Configuring Global Settings for

ARP Inspection" on page 323.

◆ Updated parameter list under "Configuring Port Security" on page 333.

◆ Updated parameter list under "DoS Protection" on page 347.

◆ Added the section "IPv6 Source Guard" on page 355.

◆ Added parameter options under "DHCP Snooping Global Configuration" on

page 363.

◆ Added “Circuit ID” parameter under "Configuring Ports for DHCP Snooping" on

page 366.

◆ Changed web pages under "Sending Simple Mail Transfer Protocol Alerts" on

page 373.

◆ Added “MAC/PHY Configuration/Status” parameter under "Configuring

LLDP Interface Attributes" on page 377.

◆ Added parameter list for interface details under "Displaying LLDP Local Device

Information" on page 382.

◆ Added the section "Setting the Switch’s Overall PoE Power Budget" on

page 399.

◆ Added “MAC Notification Traps” and “MAC Notification Trap Interval” under

"Configuring Global Settings for SNMP" on page 405.

◆ Updated Table 33, Supported Notification Messages," on page 412.

◆ Added the section "Creating SNMP Notification Logs" on page 427 and

"Showing SNMP Statistics" on page 429.

◆ Added “Forwarding Priority” to parameter list under "Configuring IGMP

Snooping and Query Parameters" on page 454.

◆ Updated parameter list under "Displaying Multicast Groups Discovered by

IGMP Snooping" on page 468.

◆ Added the section "Displaying IGMP Snooping Statistics" on page 470.

◆ Added the section "MLD Snooping (Snooping and Query for IPv6)" on

page 479.

◆ Added the section "Multicast VLAN Registration for IPv6" on page 504.

How to Use This Guide

– 7 –

◆ Removed “Enable Rapid-Commit” from the parameter list under "Configuring

IPv6 Interface Settings" on page 526.

◆ Added parameters for “RA Guard Mode” under "Configuring an IPv6 Address"

on page 531.

◆ Added the section "Configuring DHCP Relay Service" on page 551.

◆ Added the section "Configuring the PPPoE Intermediate Agent" on page 552.

◆ Added the section "Using the Trace Route Function" on page 562.

September 2014 Revision

This is the second version of this guide. This guide is valid for software release

v4.0.1.0-04R. It contains the following changes:

◆ Updated description of System Fan under "Displaying System Information" on

page 67.

◆ Added the section "Configuring HTTP Settings" on page 94.

◆ Added “MAC Mask” parameter under "Displaying the Dynamic Address Table"

on page 183.

◆ Updated descriptive text for Remaining Age parameter under "Configuring

VoIP Traffic Ports" on page 256

◆ Added descriptive text for Figure 115 on page 204.

◆ Updated description of Authentication Password under "Configuring Local

SNMPv3 Users" on page 417

◆ Added “Encryption” parameter under "Configuring Remote SNMPv3 Users" on

page 420.

◆ Added description for change a local SNMPv3 local user group under

"Configuring Local SNMPv3 Users" on page 417

March 2014 Revision

This is the first version of this guide. This guide is valid for software release

v4.0.0.0-02R.

How to Use This Guide

– 8 –

– 9 –

Contents

How to Use This Guide 3

Contents 9

Figures 19

Tables 31

Section I Getting Started 33

1 Introduction 35

Key Features 35

Description of Software Features 36

System Defaults 42

Section II Web Configuration 45

2 Using the Web Interface 47

Connecting to the Web Interface 47

Navigating the Web Browser Interface 48

Home Page 48

Configuration Options 49

Panel Display 49

Main Menu 50

3 Basic Management Tasks 67

Displaying System Information 67

Displaying Hardware/Software Versions 69

Configuring Support for Jumbo Frames 71

Displaying Bridge Extension Capabilities 72

Managing System Files 73

Contents

– 10 –

Copying Files via FTP/TFTP or HTTP 73

Saving the Running Configuration to a Local File 75

Setting the Start-Up File 76

Showing System Files 77

Automatic Operation Code Upgrade 78

Setting the System Clock 82

Setting the Time Manually 82

Setting the SNTP Polling Interval 83

Configuring NTP 84

Configuring Time Servers 85

Setting the Time Zone 89

Configuring Summer Time 89

Configuring the Console Port 91

Configuring Telnet Settings 93

Configuring HTTP Settings 94

Displaying CPU Utilization 95

Displaying Memory Utilization 96

Resetting the System 97

4 Interface Configuration 101

Port Configuration 102

Configuring by Port List 102

Configuring by Port Range 104

Displaying Connection Status 105

Configuring Local Port Mirroring 106

Configuring Remote Port Mirroring 108

Showing Port or Trunk Statistics 112

Displaying Transceiver Data 116

Configuring Transceiver Thresholds 117

Performing Cable Diagnostics 119

Trunk Configuration 121

Configuring a Static Trunk 122

Configuring a Dynamic Trunk 125

Displaying LACP Port Counters 132

Displaying LACP Settings and Status for the Local Side 133

Contents

– 11 –

Displaying LACP Settings and Status for the Remote Side 134

Configuring Load Balancing 135

Saving Power 137

Traffic Segmentation 139

Enabling Traffic Segmentation 139

Configuring Uplink and Downlink Ports 140

VLAN Trunking 142

5 VLAN Configuration 145

IEEE 802.1Q VLANs 145

Configuring VLAN Groups 148

Adding Static Members to VLANs 151

Configuring Dynamic VLAN Registration 155

IEEE 802.1Q Tunneling 159

Enabling QinQ Tunneling on the Switch 163

Creating CVLAN to SPVLAN Mapping Entries 164

Adding an Interface to a QinQ Tunnel 166

Protocol VLANs 167

Configuring Protocol VLAN Groups 168

Mapping Protocol Groups to Interfaces 169

Configuring IP Subnet VLANs 171

Configuring MAC-based VLANs 173

Configuring VLAN Mirroring 175

6 Address Table Settings 179

Configuring MAC Address Learning 179

Setting Static Addresses 181

Changing the Aging Time 182

Displaying the Dynamic Address Table 183

Clearing the Dynamic Address Table 184

Configuring MAC Address Mirroring 185

7 Spanning Tree Algorithm 187

Overview 187

Configuring Loopback Detection 190

Configuring Global Settings for STA 191

Contents

– 12 –

Displaying Global Settings for STA 197

Configuring Interface Settings for STA 198

Displaying Interface Settings for STA 202

Configuring Multiple Spanning Trees 205

Configuring Interface Settings for MSTP 209

8 Congestion Control 213

Rate Limiting 213

Storm Control 214

Automatic Traffic Control 216

Setting the ATC Timers 217

Configuring ATC Thresholds and Responses 219

9 Class of Service 223

Layer 2 Queue Settings 223

Setting the Default Priority for Interfaces 223

Selecting the Queue Mode 224

Mapping CoS Values to Egress Queues 227

Layer 3/4 Priority Settings 229

Setting Priority Processing to DSCP or CoS 230

Mapping Ingress DSCP Values to Internal DSCP Values 231

Mapping CoS Priorities to Internal DSCP Values 233

10 Quality of Service 237

Overview 237

Configuring a Class Map 238

Creating QoS Policies 241

Attaching a Policy Map to a Port 251

11 VoIP Traffic Configuration 253

Overview 253

Configuring VoIP Traffic 254

Configuring Telephony OUI 255

Configuring VoIP Traffic Ports 256

12 Security Measures 259

AAA Authentication, Authorization and Accounting 260

Contents

– 13 –

Configuring Local/Remote Logon Authentication 261

Configuring Remote Logon Authentication Servers 262

Configuring AAA Accounting 267

Configuring AAA Authorization 274

Configuring User Accounts 277

Web Authentication 279

Configuring Global Settings for Web Authentication 279

Configuring Interface Settings for Web Authentication 280

Network Access (MAC Address Authentication) 282

Configuring Global Settings for Network Access 284

Configuring Network Access for Ports 285

Configuring Port Link Detection 287

Configuring a MAC Address Filter 288

Displaying Secure MAC Address Information 290

Configuring HTTPS 291

Configuring Global Settings for HTTPS 291

Replacing the Default Secure-site Certificate 293

Configuring the Secure Shell 294

Configuring the SSH Server 297

Generating the Host Key Pair 298

Importing User Public Keys 300

Access Control Lists 302

Showing TCAM Utilization 303

Setting the ACL Name and Type 304

Configuring a Standard IPv4 ACL 306

Configuring an Extended IPv4 ACL 307

Configuring a Standard IPv6 ACL 310

Configuring an Extended IPv6 ACL 312

Configuring a MAC ACL 314

Configuring an ARP ACL 316

Binding a Port to an Access Control List 318

Configuring ACL Mirroring 319

Showing ACL Hardware Counters 321

ARP Inspection 322

Configuring Global Settings for ARP Inspection 323

Contents

– 14 –

Configuring VLAN Settings for ARP Inspection 325

Configuring Interface Settings for ARP Inspection 326

Displaying ARP Inspection Statistics 328

Displaying the ARP Inspection Log 329

Displaying ARP Inspection Statistics 330

Filtering IP Addresses for Management Access 331

Configuring Port Security 333

Configuring 802.1X Port Authentication 335

Configuring 802.1X Global Settings 337

Configuring Port Authenticator Settings for 802.1X 338

Configuring Port Supplicant Settings for 802.1X 342

Displaying 802.1X Statistics 344

DoS Protection 347

IPv4 Source Guard 349

Configuring Ports for IPv4 Source Guard 350

Configuring Static Bindings for IPv4 Source Guard 351

Displaying Information for Dynamic IPv4 Source Guard Bindings 354

IPv6 Source Guard 355

Configuring Ports for IPv6 Source Guard 355

Configuring Static Bindings for IPv6 Source Guard 358

Displaying Information for Dynamic IPv6 Source Guard Bindings 360

DHCP Snooping 361

DHCP Snooping Global Configuration 363

DHCP Snooping VLAN Configuration 365

Configuring Ports for DHCP Snooping 366

Displaying DHCP Snooping Binding Information 367

13 Basic Administration Protocols 369

Configuring Event Logging 369

System Log Configuration 369

Remote Log Configuration 372

Sending Simple Mail Transfer Protocol Alerts 373

Link Layer Discovery Protocol 374

Setting LLDP Timing Attributes 375

Configuring LLDP Interface Attributes 377

Contents

– 15 –

Configuring LLDP Interface Civic-Address 380

Displaying LLDP Local Device Information 382

Displaying LLDP Remote Device Information 386

Displaying Device Statistics 394

Cisco Discover Protocol 396

Configuring Global Settings for CDP 396

Enabling CDP on Selected Interfaces 397

Showing CDP Neighbors 398

Power over Ethernet 399

Setting the Switch’s Overall PoE Power Budget 399

Setting the Port PoE Power Budget 401

Simple Network Management Protocol 403

Configuring Global Settings for SNMP 405

Setting the Local Engine ID 406

Specifying a Remote Engine ID 407

Setting SNMPv3 Views 409

Configuring SNMPv3 Groups 411

Setting Community Access Strings 416

Configuring Local SNMPv3 Users 417

Configuring Remote SNMPv3 Users 420

Specifying Trap Managers 423

Creating SNMP Notification Logs 427

Showing SNMP Statistics 429

Remote Monitoring 431

Configuring RMON Alarms 432

Configuring RMON Events 434

Configuring RMON History Samples 436

Configuring RMON Statistical Samples 439

Switch Clustering 442

Configuring General Settings for Clusters 442

Cluster Member Configuration 444

Managing Cluster Members 446

Setting a Time Range 446

14 Multicast Filtering 451

Contents

– 16 –

Overview 451

Layer 2 IGMP (Snooping and Query for IPv4) 453

Configuring IGMP Snooping and Query Parameters 454

Specifying Static Interfaces for a Multicast Router 458

Assigning Interfaces to Multicast Services 461

Setting IGMP Snooping Status per Interface 463

Displaying Multicast Groups Discovered by IGMP Snooping 468

Displaying IGMP Snooping Statistics 470

Filtering and Throttling IGMP Groups 474

Enabling IGMP Filtering and Throttling 474

Configuring IGMP Filter Profiles 475

Configuring IGMP Filtering and Throttling for Interfaces 477

MLD Snooping (Snooping and Query for IPv6) 479

Configuring MLD Snooping and Query Parameters 479

Setting Immediate Leave Status for MLD Snooping per Interface 481

Specifying Static Interfaces for an IPv6 Multicast Router 481

Assigning Interfaces to IPv6 Multicast Services 483

Showing MLD Snooping Groups and Source List 486

Multicast VLAN Registration for IPv4 487

Configuring MVR Global Settings 489

Configuring MVR Domain Settings 491

Configuring MVR Group Address Profiles 492

Configuring MVR Interface Status 495

Assigning Static MVR Multicast Groups to Interfaces 497

Displaying MVR Receiver Groups 499

Displaying MVR Statistics 500

Multicast VLAN Registration for IPv6 504

Configuring MVR6 Global Settings 505

Configuring MVR6 Domain Settings 507

Configuring MVR6 Group Address Profiles 508

Configuring MVR6 Interface Status 511

Assigning Static MVR6 Multicast Groups to Interfaces 513

Displaying MVR6 Receiver Groups 515

Displaying MVR6 Statistics 516

Contents

– 17 –

15 IP Configuration 521

Setting the Switch’s IP Address (IP Version 4) 521

Setting the Switch’s IP Address (IP Version 6) 524

Configuring the IPv6 Default Gateway 525

Configuring IPv6 Interface Settings 526

Configuring an IPv6 Address 531

Showing IPv6 Addresses 533

Showing the IPv6 Neighbor Cache 535

Showing IPv6 Statistics 536

Showing the MTU for Responding Destinations 542

16 IP Services 543

Domain Name Service 543

Configuring General DNS Service Parameters 543

Configuring a List of Domain Names 544

Configuring a List of Name Servers 546

Configuring Static DNS Host to Address Entries 547

Displaying the DNS Cache 548

Dynamic Host Configuration Protocol 549

Specifying a DHCP Client Identifier 549

Configuring DHCP Relay Service 551

Configuring the PPPoE Intermediate Agent 552

Configuring PPPoE IA Global Settings 552

Configuring PPPoE IA Interface Settings 554

Showing PPPoE IA Statistics 555

17 General IP Routing 557

Overview 557

Initial Configuration 557

IP Routing and Switching 558

Routing Path Management 559

Routing Protocols 560

Configuring IP Routing Interfaces 560

Configuring Local and Remote Interfaces 560

Using the Ping Function 561

Using the Trace Route Function 562

Contents

– 18 –

Address Resolution Protocol 563

Proxy ARP Configuration 564

Configuring Static ARP Addresses 565

Displaying Dynamic or Local ARP Entries 567

Displaying ARP Statistics 568

Configuring Static Routes 569

Displaying the Routing Table 570

Section III Appendices 573

A Software Specifications 575

Software Features 575

Management Features 576

Standards 577

Management Information Bases 577

B Troubleshooting 579

Problems Accessing the Management Interface 579

Using System Logs 580

C License Information 581

The GNU General Public License 581

GNU Lesser General Public License, version 3.0 584

The BSD License 586

ISC License 587

D Customer Support 593

Zebra Support 593

Customer Support Web Site 593

Manuals 593

Glossary 595

Index 603

– 19 –

Figures

Figure 1: Home Page 48

Figure 2: Front Panel Indicators 49

Figure 3: System Information 68

Figure 4: General Switch Information (EX-3524) 70

Figure 5: General Switch Information (EX-3548) 70

Figure 6: Configuring Support for Jumbo Frames 71

Figure 7: Displaying Bridge Extension Configuration 73

Figure 8: Copy Firmware 75

Figure 9: Saving the Running Configuration 76

Figure 10: Setting Start-Up Files 77

Figure 11: Displaying System Files 77

Figure 12: Configuring Automatic Code Upgrade 81

Figure 13: Manually Setting the System Clock 83

Figure 14: Setting the Polling Interval for SNTP 84

Figure 15: Configuring NTP 85

Figure 16: Specifying SNTP Time Servers 86

Figure 17: Adding an NTP Time Server 87

Figure 18: Showing the NTP Time Server List 87

Figure 19: Adding an NTP Authentication Key 88

Figure 20: Showing the NTP Authentication Key List 88

Figure 21: Setting the Time Zone 89

Figure 22: Summer Time Settings 91

Figure 23: Console Port Settings 92

Figure 24: Telnet Connection Settings 94

Figure 25: HTTP Connection Settings 95

Figure 26: Displaying CPU Utilization 96

Figure 27: Displaying Memory Utilization 96

Figure 28: Restarting the Switch (Immediately) 99

Figure 29: Restarting the Switch (In) 99

Figures

– 20 –

Figure 30: Restarting the Switch (At) 99

Figure 31: Restarting the Switch (Regularly) 99

Figure 32: Showing Reset Settings 100

Figure 33: Configuring Connections by Port List 104

Figure 34: Configuring Connections by Port Range 105

Figure 35: Displaying Port Information 106

Figure 36: Configuring Local Port Mirroring 106

Figure 37: Configuring Local Port Mirroring 107

Figure 38: Displaying Local Port Mirror Sessions 108

Figure 39: Configuring Remote Port Mirroring 108

Figure 40: Configuring Remote Port Mirroring (Source) 111

Figure 41: Configuring Remote Port Mirroring (Intermediate) 111

Figure 42: Configuring Remote Port Mirroring (Destination) 112

Figure 43: Showing Port Statistics (Table) 115

Figure 44: Showing Port Statistics (Chart) 116

Figure 45: Displaying Transceiver Data 117

Figure 46: Configuring Transceiver Thresholds 119

Figure 47: Performing Cable Tests 121

Figure 48: Configuring Static Trunks 122

Figure 49: Creating Static Trunks 124

Figure 50: Adding Static Trunks Members 124

Figure 51: Configuring Connection Parameters for a Static Trunk 125

Figure 52: Showing Information for Static Trunks 125

Figure 53: Configuring Dynamic Trunks 125

Figure 54: Configuring the LACP Aggregator Admin Key 128

Figure 55: Enabling LACP on a Port 129

Figure 56: Configuring LACP Parameters on a Port 130

Figure 57: Showing Members of a Dynamic Trunk 130

Figure 58: Configuring Connection Settings for a Dynamic Trunk 131

Figure 59: Showing Connection Parameters for Dynamic Trunks 131

Figure 60: Displaying LACP Port Counters 132

Figure 61: Displaying LACP Port Internal Information 134

Figure 62: Displaying LACP Port Remote Information 135

Figure 63: Configuring Load Balancing 137

Figure 64: Enabling Power Savings 138

Page is loading ...

Zebra EX-3524/EX-3548 Owner's manual

This manual is also suitable for

Zebra EX-3524/EX-3548 Owner's manual

Related papers

Other documents