Edge-Core ECS3510-26P Programming manual

Management Guide
www.edge-core.com
ECS3510-26P
26-Port Fast Ethernet
Layer 2 Switch

M ANAGEMENT G UIDE
ECS3510-28P GIGABIT ETHERNET SWITCH
Layer 2 Managed Switch
with 24 10/100BASE-TX (RJ-45) PoE Ports,
and 2 Gigabit SFP Ports
ECS3510-28P
E052013/ST-R01
149100000220A

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch. To deploy this switch effectively and
ensure trouble-free operation, you should first read the relevant sections in
this guide so that you are familiar with all of its software features.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment. The guide
assumes a basic working knowledge of LANs (Local Area Networks), the
Internet Protocol (IP), and Simple Network Management Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS This guide focuses on switch software configuration through the web
interface and console port.
For information on how to install the switch, see the following guide:
Installation Guide
For all safety information and regulatory statements, see the following
documents:
Quick Start Guide
Safety and Regulatory Information

A BOUT T HIS G UIDE
– 6 –
REVISION HISTORY This section summarizes the changes in each revision of this guide.
MAY 2013 REVISION
This is the first version of this guide. This guide is valid for software release
v1.0.0.0.

– 7 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 7
FIGURES 33
TABLES 43
SECTION I GETTING STARTED 49
1INTRODUCTION 51
Key Features 51
Description of Software Features 52
System Defaults 57
2INITIAL SWITCH CONFIGURATION 61
Connecting to the Switch 61
Configuration Options 61
Required Connections 62
Remote Connections 63
Basic Configuration 64
Console Connection 64
Setting Passwords 64
Setting an IP Address 65
Downloading a Configuration File Referenced by a DHCP Server 71
Enabling SNMP Management Access 73
Managing System Files 75
Saving or Restoring Configuration Settings 76
SECTION II WEB CONFIGURATION 79
3USING THE WEB INTERFACE 81
Connecting to the Web Interface 81

C ONTENTS
– 8 –
Navigating the Web Browser Interface 82
Home Page 82
Configuration Options 83
Panel Display 83
Main Menu 84
4BASIC MANAGEMENT TASKS 97
Displaying System Information 97
Displaying Hardware/Software Versions 98
Configuring Support for Jumbo Frames 100
Displaying Bridge Extension Capabilities 101
Managing System Files 102
Copying Files via FTP/TFTP or HTTP 102
Saving the Running Configuration to a Local File 104
Setting The Start-Up File 105
Showing System Files 106
Automatic Operation Code Upgrade 107
Setting the System Clock 111
Setting the Time Manually 111
Setting the SNTP Polling Interval 112
Specifying SNTP Time Servers 113
Setting the Time Zone 114
Configuring Summer Time 115
Configuring the Console Port 117
Configuring Telnet Settings 119
Displaying CPU Utilization 120
Displaying Memory Utilization 121
Resetting the System 122
5INTERFACE CONFIGURATION 127
Port Configuration 127
Configuring by Port List 127
Configuring by Port Range 130
Displaying Connection Status 131
Configuring Local Port Mirroring 132
Configuring Remote Port Mirroring 134
Showing Port or Trunk Statistics 138
Performing Cable Diagnostics 142

C ONTENTS
– 9 –
Trunk Configuration 144
Configuring a Static Trunk 145
Configuring a Dynamic Trunk 147
Displaying LACP Port Counters 153
Displaying LACP Settings and Status for the Local Side 154
Displaying LACP Settings and Status for the Remote Side 156
Configuring Trunk Mirroring 158
Saving Power 159
Traffic Segmentation 161
Enabling Traffic Segmentation 161
Configuring Uplink and Downlink Ports 162
VLAN Trunking 163
6 VLAN CONFIGURATION 167
IEEE 802.1Q VLANs 167
Configuring VLAN Groups 170
Adding Static Members to VLANs 171
Configuring Dynamic VLAN Registration 176
IEEE 802.1Q Tunneling 179
Enabling QinQ Tunneling on the Switch 183
Adding an Interface to a QinQ Tunnel 184
Protocol VLANs 185
Configuring Protocol VLAN Groups 186
Mapping Protocol Groups to Interfaces 187
Configuring IP Subnet VLANs 189
Configuring MAC-based VLANs 191
Configuring VLAN Mirroring 193
7ADDRESS TABLE SETTINGS 195
Setting Static Addresses 195
Changing the Aging Time 197
Displaying the Dynamic Address Table 198
Clearing the Dynamic Address Table 199
Configuring MAC Address Mirroring 200
8SPANNING TREE ALGORITHM 203
Overview 203
Configuring Loopback Detection 206
Configuring Global Settings for STA 207

C ONTENTS
– 10 –
Displaying Global Settings for STA 212
Configuring Interface Settings for STA 213
Displaying Interface Settings for STA 217
Configuring Multiple Spanning Trees 220
Configuring Interface Settings for MSTP 223
9CONGESTION CONTROL 227
Rate Limiting 227
Storm Control 229
Automatic Traffic Control 232
Setting the ATC Timers 233
Configuring ATC Thresholds and Responses 235
10 CLASS OF SERVICE 239
Layer 2 Queue Settings 239
Setting the Default Priority for Interfaces 239
Selecting the Queue Mode 240
Mapping CoS Values to Egress Queues 243
Layer 3/4 Priority Settings 245
Setting Priority Processing to DSCP or CoS 246
Mapping Ingress DSCP Values to Internal DSCP Values 247
Mapping CoS Priorities to Internal DSCP Values 249
11 QUALITY OF SERVICE 253
Overview 253
Configuring a Class Map 254
Creating QoS Policies 257
Attaching a Policy Map to a Port 267
12 VOIP TRAFFIC CONFIGURATION 269
Overview 269
Configuring VoIP Traffic 270
Configuring Telephony OUI 271
Configuring VoIP Traffic Ports 272
13 SECURITY MEASURES 275
AAA Authorization and Accounting 276
Configuring Local/Remote Logon Authentication 277
Configuring Remote Logon Authentication Servers 278
Configuring AAA Accounting 283
Configuring AAA Authorization 289

C ONTENTS
– 11 –
Configuring User Accounts 292
Web Authentication 294
Configuring Global Settings for Web Authentication 294
Configuring Interface Settings for Web Authentication 295
Network Access (MAC Address Authentication) 296
Configuring Global Settings for Network Access 299
Configuring Network Access for Ports 300
Configuring Port Link Detection 302
Configuring a MAC Address Filter 303
Displaying Secure MAC Address Information 305
Configuring HTTPS 306
Configuring Global Settings for HTTPS 306
Replacing the Default Secure-site Certificate 308
Configuring the Secure Shell 309
Configuring the SSH Server 312
Generating the Host Key Pair 313
Importing User Public Keys 315
Access Control Lists 317
Showing TCAM Utilization 318
Setting the ACL Name and Type 319
Configuring a Standard IPv4 ACL 320
Configuring an Extended IPv4 ACL 322
Configuring a MAC ACL 325
Configuring an ARP ACL 327
Binding a Port to an Access Control List 328
ARP Inspection 330
Configuring Global Settings for ARP Inspection 331
Configuring VLAN Settings for ARP Inspection 333
Configuring Interface Settings for ARP Inspection 334
Displaying ARP Inspection Statistics 336
Displaying the ARP Inspection Log 337
Filtering IP Addresses for Management Access 338
Configuring Port Security 340
Configuring 802.1X Port Authentication 342
Configuring 802.1X Global Settings 344
Configuring Port Authenticator Settings for 802.1X 345

C ONTENTS
– 12 –
Configuring Port Supplicant Settings for 802.1X 349
Displaying 802.1X Statistics 351
IP Source Guard 354
Configuring Ports for IP Source Guard 354
Configuring Static Bindings for IP Source Guard 356
Displaying Information for Dynamic IP Source Guard Bindings 358
DHCP Snooping 359
DHCP Snooping Global Configuration 362
DHCP Snooping VLAN Configuration 363
Configuring Ports for DHCP Snooping 364
Displaying DHCP Snooping Binding Information 365
DoS Protection 366
14 BASIC ADMINISTRATION PROTOCOLS 369
Configuring Event Logging 369
System Log Configuration 369
Remote Log Configuration 372
Sending Simple Mail Transfer Protocol Alerts 373
Link Layer Discovery Protocol 376
Setting LLDP Timing Attributes 376
Configuring LLDP Interface Attributes 378
Configuring LLDP Interface Civic-Address 382
Displaying LLDP Local Device Information 384
Displaying LLDP Remote Device Information 387
Displaying Device Statistics 392
Power Over Ethernet 393
Displaying the Switch’s Overall PoE Power Budget 394
Setting The Port PoE Power Budget 395
Simple Network Management Protocol 397
Configuring Global Settings for SNMP 399
Setting the Local Engine ID 400
Specifying a Remote Engine ID 401
Setting SNMPv3 Views 402
Configuring SNMPv3 Groups 405
Setting Community Access Strings 410
Configuring Local SNMPv3 Users 411
Configuring Remote SNMPv3 Users 413

C ONTENTS
– 13 –
Specifying Trap Managers 415
Remote Monitoring 420
Configuring RMON Alarms 420
Configuring RMON Events 423
Configuring RMON History Samples 425
Configuring RMON Statistical Samples 428
Switch Clustering 430
Configuring General Settings for Clusters 431
Cluster Member Configuration 432
Managing Cluster Members 434
Setting A Time Range 435
15 IP CONFIGURATION 439
Using the Ping Function 439
Address Resolution Protocol 441
Setting the ARP Timeout 441
Displaying ARP Entries 442
Setting the Switch’s IP Address (IP Version 4) 443
Setting the Switch’s IP Address (IP Version 6) 445
Configuring the IPv6 Default Gateway 445
Configuring IPv6 Interface Settings 446
Configuring an IPv6 Address 450
Showing IPv6 Addresses 452
Showing the IPv6 Neighbor Cache 454
Showing IPv6 Statistics 456
Showing the MTU for Responding Destinations 461
16 IP SERVICES 463
Configuring General DNS Service Parameters 463
Configuring a List of Domain Names 464
Configuring a List of Name Servers 466
Configuring Static DNS Host to Address Entries 467
Displaying the DNS Cache 468
17 MULTICAST FILTERING 471
Overview 471
Layer 2 IGMP (Snooping and Query) 472
Configuring IGMP Snooping and Query Parameters 474
Specifying Static Interfaces for a Multicast Router 477

C ONTENTS
– 14 –
Assigning Interfaces to Multicast Services 480
Setting IGMP Snooping Status per Interface 482
Displaying Multicast Groups Discovered by IGMP Snooping 487
Filtering and Throttling IGMP Groups 488
Enabling IGMP Filtering and Throttling 488
Configuring IGMP Filter Profiles 489
Configuring IGMP Filtering and Throttling for Interfaces 492
Multicast VLAN Registration 493
Configuring Global MVR Settings 495
Configuring MVR Interface Status 496
Assigning Static MVR Multicast Groups to Interfaces 498
Displaying MVR Receiver Groups 500
SECTION III COMMAND LINE INTERFACE 503
18 USING THE COMMAND LINE INTERFACE 505
Accessing the CLI 505
Console Connection 505
Telnet Connection 506
Entering Commands 507
Keywords and Arguments 507
Minimum Abbreviation 507
Command Completion 507
Getting Help on Commands 508
Partial Keyword Lookup 509
Negating the Effect of Commands 509
Using Command History 510
Understanding Command Modes 510
Exec Commands 510
Configuration Commands 511
Command Line Processing 513
Output Modifiers 513
CLI Command Groups 514
19 GENERAL COMMANDS 517
prompt 517
reload (Global Configuration) 518

C ONTENTS
– 15 –
enable 519
quit 520
show history 520
configure 521
disable 522
reload (Privileged Exec) 522
show reload 523
end 523
exit 523
20 SYSTEM MANAGEMENT COMMANDS 525
Device Designation 525
hostname 526
System Status 526
show access-list tcam-utilization 527
show memory 527
show process cpu 528
show running-config 528
show startup-config 529
show system 530
show tech-support 531
show users 531
show version 532
Frame Size 533
jumbo frame 533
File Management 534
General Commands 535
boot system 535
copy 536
delete 539
dir 539
whichboot 540
Automatic Code Upgrade Commands 541
upgrade opcode auto 541
upgrade opcode path 542
show upgrade 543

C ONTENTS
– 16 –
Line 544
line 544
databits 545
exec-timeout 546
login 547
parity 548
password 548
password-thresh 549
silent-time 550
speed 550
stopbits 551
timeout login response 552
disconnect 552
terminal 553
show line 554
Event Logging 555
logging facility 555
logging history 556
logging host 557
logging on 557
logging trap 558
clear log 558
show log 559
show logging 560
SMTP Alerts 561
logging sendmail 561
logging sendmail host 562
logging sendmail level 563
logging sendmail destination-email 563
logging sendmail source-email 564
show logging sendmail 564
Time 565
SNTP Commands 565
sntp client 565
sntp poll 566
sntp server 567

C ONTENTS
– 17 –
show sntp 567
Manual Configuration Commands 568
clock summer-time 568
clock timezone 569
clock timezone-predefined 570
calendar set 571
show calendar 571
Time Range 572
time-range 572
absolute 573
periodic 574
show time-range 575
Switch Clustering 575
cluster 576
cluster commander 577
cluster ip-pool 578
cluster member 578
rcommand 579
show cluster 579
show cluster members 580
show cluster candidates 580
21 SNMP COMMANDS 581
General SNMP Commands 582
snmp-server 582
snmp-server community 583
snmp-server contact 583
snmp-server location 584
show snmp 584
SNMP Target Host Commands 585
snmp-server enable traps 585
snmp-server host 586
SNMPv3 Commands 589
snmp-server engine-id 589
snmp-server group 590
snmp-server user 591
snmp-server view 592

C ONTENTS
– 18 –
show snmp engine-id 593
show snmp group 594
show snmp user 595
show snmp view 596
Notification Log Commands 596
nlm 596
snmp-server notify-filter 597
show nlm oper-status 598
show snmp notify-filter 599
22 REMOTE MONITORING COMMANDS 601
rmon alarm 602
rmon event 603
rmon collection history 604
rmon collection rmon1 605
show rmon alarms 606
show rmon events 606
show rmon history 606
show rmon statistics 607
23 AUTHENTICATION COMMANDS 609
User Accounts 609
enable password 610
username 611
Authentication Sequence 612
authentication enable 612
authentication login 613
RADIUS Client 614
radius-server acct-port 614
radius-server auth-port 615
radius-server host 615
radius-server key 616
radius-server retransmit 616
radius-server timeout 617
show radius-server 617
TACACS+ Client 618
tacacs-server host 618
tacacs-server key 619

C ONTENTS
– 19 –
tacacs-server port 620
show tacacs-server 620
AAA 621
aaa accounting commands 621
aaa accounting dot1x 622
aaa accounting exec 623
aaa accounting update 624
aaa authorization exec 625
aaa group server 626
server 626
accounting dot1x 627
accounting exec 627
authorization exec 628
show accounting 628
Web Server 629
ip http port 630
ip http server 630
ip http secure-port 631
ip http secure-server 631
Telnet Server 633
ip telnet max-sessions 633
ip telnet port 634
ip telnet server 634
show ip telnet 635
Secure Shell 635
ip ssh authentication-retries 638
ip ssh server 638
ip ssh server-key size 639
ip ssh timeout 640
delete public-key 640
ip ssh crypto host-key generate 641
ip ssh crypto zeroize 642
ip ssh save host-key 642
show ip ssh 643
show public-key 643
show ssh 644

C ONTENTS
– 20 –
802.1X Port Authentication 645
General Commands 646
dot1x default 646
dot1x eapol-pass-through 646
dot1x system-auth-control 647
Authenticator Commands 647
dot1x intrusion-action 647
dot1x max-req 648
dot1x operation-mode 649
dot1x port-control 650
dot1x re-authentication 650
dot1x timeout quiet-period 651
dot1x timeout re-authperiod 651
dot1x timeout supp-timeout 652
dot1x timeout tx-period 652
dot1x re-authenticate 653
Supplicant Commands 654
dot1x identity profile 654
dot1x max-start 654
dot1x pae supplicant 655
dot1x timeout auth-period 656
dot1x timeout held-period 656
dot1x timeout start-period 657
Display Information Commands 657
show dot1x 657
Management IP Filter 660
management 660
show management 661
24 GENERAL SECURITY MEASURES 663
Port Security 664
port security 664
Network Access (MAC Address Authentication) 666
network-access aging 667
network-access mac-filter 667
mac-authentication reauth-time 668
network-access dynamic-qos 669