Accton Technology ES4512C Programming manual

www.edge-core.com
Management Guide
Powered by Accton
ES4512C
ES4524C
ES4548C
12/24/48-Port Gigabit
Intelligent Switch

Installation Guide
ES4512C 12-Port Gigabit Intelligent Switch
Layer 2 Workgroup Switch
with 12 1000BASE-T (RJ-45) Ports,
and 4 Combination (RJ-45/SFP) Ports
ES4524C 24-Port Gigabit Intelligent Switch
Layer 2 Workgroup Switch
with 24 1000BASE-T (RJ-45) Ports,
and 4 Combination (RJ-45/SFP) Ports
ES4548C 48-Port Gigabit Intelligent Switch
Layer 2 Workgroup Switch
with 48 1000BASE-T (RJ-45) Ports,
and 4 Combination (RJ-45/SFP) Ports

ES4512C
ES4524C
ES4548C
E052005-R02

i
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-5
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings 2-6
Trap Receivers 2-7
Saving Configuration Settings 2-7
Managing System Files 2-8
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-9
Displaying System Information 3-9
Displaying Switch Hardware/Software Versions 3-10
Displaying Bridge Extension Capabilities 3-11
Setting the Switch’s IP Address 3-13
Manual Configuration 3-14
Using DHCP/BOOTP 3-15
Managing Firmware 3-16
Downloading System Software from a Server 3-16
Saving or Restoring Configuration Settings 3-17
Downloading Configuration Settings from a Server 3-18
Configuring Event Logging 3-19

Contents
ii
System Log Configuration 3-19
Remote Log Configuration 3-20
Displaying Log Messages 3-22
Sending Simple Mail Transfer Protocol Alerts 3-23
Resetting the System 3-25
Setting the System Clock 3-26
Configuring SNTP 3-26
Setting the Time Zone 3-27
Simple Network Management Protocol 3-28
Setting Community Access Strings 3-28
Specifying Trap Managers and Trap Types 3-29
User Authentication 3-30
Configuring the Logon Password 3-30
Configuring Local/Remote Logon Authentication 3-31
Configuring HTTPS 3-34
Replacing the Default Secure-site Certificate 3-35
Configuring the Secure Shell 3-36
Generating the Host Key Pair 3-38
Configuring the SSH Server 3-40
Configuring Port Security 3-41
Configuring 802.1x Port Authentication 3-43
Displaying 802.1x Global Settings 3-44
Configuring 802.1x Global Settings 3-46
Configuring Port Authorization Mode 3-47
Displaying 802.1x Statistics 3-48
Filtering IP Addresses for Management Access 3-50
Access Control Lists 3-52
Configuring Access Control Lists 3-52
Setting the ACL Name and Type 3-53
Configuring a Standard IP ACL 3-53
Configuring an Extended IP ACL 3-55
Configuring a MAC ACL 3-57
Configuring ACL Masks 3-59
Specifying the Mask Type 3-59
Configuring an IP ACL Mask 3-60
Configuring a MAC ACL Mask 3-62
Binding a Port to an Access Control List 3-63
Port Configuration 3-64
Displaying Connection Status 3-64
Configuring Interface Connections 3-67
Creating Trunk Groups 3-69
Statically Configuring a Trunk 3-70
Enabling LACP on Selected Ports 3-71
Configuring LACP Parameters 3-73
Displaying LACP Port Counters 3-76

Contents
iii
Displaying LACP Settings and Status for the Local Side 3-77
Displaying LACP Settings and Status for the Remote Side 3-79
Setting Broadcast Storm Thresholds 3-80
Configuring Port Mirroring 3-82
Configuring Rate Limits 3-83
Showing Port Statistics 3-84
Address Table Settings 3-88
Setting Static Addresses 3-88
Displaying the Address Table 3-89
Changing the Aging Time 3-91
Spanning Tree Algorithm Configuration 3-91
Displaying Global Settings 3-92
Configuring Global Settings 3-95
Displaying Interface Settings 3-99
Configuring Interface Settings 3-102
Configuring Multiple Spanning Trees 3-104
Displaying Interface Settings for MSTP 3-107
Configuring Interface Settings for MSTP 3-108
VLAN Configuration 3-110
IEEE 802.1Q VLANs 3-110
Enabling or Disabling GVRP (Global Setting) 3-113
Displaying Basic VLAN Information 3-113
Displaying Current VLANs 3-114
Creating VLANs 3-115
Adding Static Members to VLANs (VLAN Index) 3-116
Adding Static Members to VLANs (Port Index) 3-118
Configuring VLAN Behavior for Interfaces 3-119
Configuring Private VLANs 3-121
Enabling Private VLANs 3-121
Configuring Uplink and Downlink Ports 3-122
Configuring Protocol-Based VLANs 3-122
Configuring Protocol Groups 3-123
Mapping Protocols to VLANs 3-123
Class of Service Configuration 3-125
Layer 2 Queue Settings 3-125
Setting the Default Priority for Interfaces 3-125
Mapping CoS Values to Egress Queues 3-127
Selecting the Queue Mode 3-129
Setting the Service Weight for Traffic Classes 3-129
Layer 3/4 Priority Settings 3-131
Mapping Layer 3/4 Priorities to CoS Values 3-131
Selecting IP Precedence/DSCP Priority 3-131
Mapping IP Precedence 3-132
Mapping DSCP Priority 3-133
Mapping IP Port Priority 3-135

Contents
iv
Mapping CoS Values to ACLs 3-136
Changing Priorities Based on ACL Rules 3-137
Multicast Filtering 3-139
Layer 2 IGMP (Snooping and Query) 3-139
Configuring IGMP Snooping and Query Parameters 3-140
Displaying Interfaces Attached to a Multicast Router 3-142
Specifying Static Interfaces for a Multicast Router 3-143
Displaying Port Members of Multicast Services 3-144
Assigning Ports to Multicast Services 3-145
Configuring Domain Name Service 3-146
Configuring General DNS Server Parameters 3-146
Configuring Static DNS Host to Address Entries 3-148
Displaying the DNS Cache 3-150
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-1
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-6
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-9
Command Groups 4-10
Line Commands 4-11
line 4-12
login 4-12
password 4-13
exec-timeout 4-14
password-thresh 4-15
silent-time 4-15
databits 4-16
parity 4-17
speed 4-17
stopbits 4-18

Contents
v
disconnect 4-18
show line 4-19
General Commands 4-20
enable 4-20
disable 4-21
configure 4-21
show history 4-22
reload 4-22
end 4-23
exit 4-23
quit 4-24
System Management Commands 4-24
Device Designation Commands 4-25
prompt 4-25
hostname 4-25
User Access Commands 4-26
username 4-26
enable password 4-27
IP Filter Commands 4-28
management 4-28
show management 4-29
Web Server Commands 4-30
ip http port 4-30
ip http server 4-30
ip http secure-server 4-31
ip http secure-port 4-32
Telnet Server Commands 4-33
ip telnet port 4-33
ip telnet server 4-33
Secure Shell Commands 4-34
ip ssh server 4-36
ip ssh timeout 4-37
ip ssh authentication-retries 4-37
ip ssh server-key size 4-38
delete public-key 4-38
ip ssh crypto host-key generate 4-39
ip ssh crypto zeroize 4-39
ip ssh save host-key 4-40
show ip ssh 4-40
show ssh 4-41
show public-key 4-42
Event Logging Commands 4-43
logging on 4-43
logging history 4-44
logging host 4-45

Contents
vi
logging facility 4-45
logging trap 4-46
clear logging 4-46
show logging 4-47
SMTP Alert Commands 4-48
logging sendmail host 4-49
logging sendmail level 4-49
logging sendmail source-email 4-50
logging sendmail destination-email 4-50
logging sendmail 4-51
show logging sendmail 4-51
Time Commands 4-52
sntp client 4-52
sntp server 4-53
sntp poll 4-54
show sntp 4-54
clock timezone 4-55
calendar set 4-55
show calendar 4-56
System Status Commands 4-57
show startup-config 4-57
show running-config 4-58
show system 4-60
show users 4-61
show version 4-61
Frame Size Commands 4-62
jumbo frame 4-62
Flash/File Commands 4-63
copy 4-63
delete 4-65
dir 4-66
whichboot 4-67
boot system 4-67
Authentication Commands 4-68
Authentication Sequence 4-69
authentication login 4-69
authentication enable 4-70
RADIUS Client 4-71
radius-server host 4-71
radius-server port 4-71
radius-server key 4-72
radius-server retransmit 4-72
radius-server timeout 4-73
show radius-server 4-73
TACACS+ Client 4-74