Edge-Core ECS4210-12P Programming manual

Web Management Guide
www.edge-core.com
12/28-Port Gigabit Ethernet
Layer 2 Switch
ECS4210-12P
ECS4210-12T
ECS4210-28P
ECS4210-28T
Software Release v1.0.0.24

Web Management Guide
ECS4210-12P
Layer 2 Managed PoE Switch with
8 10/100/1000BASE-T (RJ-45) PoE Ports,
2 10/100/1000BASE-T (RJ-45) Ports,
and 2 Gigabit SFP Uplink Ports
ECS4210-12T
Layer 2 Managed Switch with
8 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit SFP Uplink Ports
ECS4210-28P
Layer 2 Managed PoE Switch with
24 10/100/1000BASE-T (RJ-45) PoE Ports,
and 4 Gigabit SFP Uplink Ports
ECS4210-28T
Layer 2 Managed Switch with
24 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit SFP Uplink Ports
ECS4210-12P 149100000219A
ECS4210-12T 149100000241A
ECS4210-28P 149100000217H
ECS4210-28T 149100000217H
E032014/ST-R03

– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should Read This
Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How This Guide is
Organized
This guide describes the switch’s web management interface. An introduction to
the switch’s key features is also provided. For information on initial configuration,
refer to the CLI Reference Guide.
The guide includes these sections:
◆Section I “Getting Started” — Includes an introduction to switch management.
◆Section II “Web Configuration” — Includes all management options available
through the web interface.
◆Section III “Appendices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the web interface.
For information on how to manage the switch through the Command Line
Interface (CLI), see the following guide:
CLI Reference Guide
For information on how to install the switch, see the following guide:
Installation Guide
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information

How to Use This Guide
– 4 –
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features
or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage
the system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Revision History This section summarizes the changes in each revision of this guide.
March 2014 Revision
This is the third version of this guide. This guide is valid for software release
v1.0.0.24. It includes the following changes.
◆Updated the maximum setting for aging time in "Changing the Aging Time" on
page 170.
◆Added the section "MLD Snooping (Snooping and Query for IPv6)" on
page 494.
October 2013 Revision
This is the second version of this guide. This guide is valid for software release
v1.0.0.18. It includes the following changes.
◆Added the ECS4210-12T model.
◆Updated parameter section for "Configuring Port Isolation" on page 111.
◆Updated description of new configuration pages for "Traffic Segmentation" on
page 128.
◆Added mask and priority parameters under "Configuring MAC-based VLANs"
on page 160.
◆Updated description of Action field for Traffic > DiffServ > Add Rule page under
"Creating QoS Policies" on page 232.
◆Updated parameters section under "Using the Ping Function" on page 427.
◆Updated parametes section and added description of IGMP RADIUS
Authentication under "Filtering Multicast Data at Interfaces" on page 483

How to Use This Guide
– 5 –
April 2013 Revision
This is the first version of this guide. This guide is valid for software release
v1.0.0.12.

How to Use This Guide
– 6 –

– 7 –
Contents
How to Use This Guide 3
Contents 7
Figures 17
Tables 29
Section I Getting Started 31
1 Introduction 33
Key Features 33
Description of Software Features 34
System Defaults 39
2 Using the Web Interface 43
Connecting to the Web Interface 43
Navigating the Web Browser Interface 44
Home Page 44
Configuration Options 45
Panel Display 46
Main Menu 47
Section II Web Configuration 63
3 Basic Management Tasks 65
Displaying System Information 66
Displaying Hardware/Software Versions 67
Configuring Support for Jumbo Frames 68
Displaying Bridge Extension Capabilities 69

Contents
– 8 –
Managing System Files 71
Copying Files via FTP/TFTP or HTTP 71
Saving the Running Configuration to a Local File 73
Setting The Start-Up File 74
Showing System Files 74
Automatic Operation Code Upgrade 75
Setting the System Clock 79
Setting the Time Manually 79
Setting the SNTP Polling Interval 80
Configuring NTP 81
Configuring Time Servers 82
Setting the Time Zone 85
Configuring the Console Port 86
Configuring Telnet Settings 88
Displaying CPU Utilization 90
Displaying Memory Utilization 91
Resetting the System 91
4 Interface Configuration 95
Port Configuration 95
Configuring by Port List 95
Configuring by Port Range 97
Displaying Connection Status 98
Configuring Local Port Mirroring 99
Configuring Remote Port Mirroring 101
Showing Port or Trunk Statistics 105
Performing Cable Diagnostics 110
Configuring Port Isolation 111
Trunk Configuration 115
Configuring a Static Trunk 116
Configuring a Dynamic Trunk 118
Displaying LACP Port Counters 123
Displaying LACP Settings and Status for the Local Side 124
Displaying LACP Settings and Status for the Remote Side 126

Contents
– 9 –
Traffic Segmentation 128
Enabling Traffic Segmentation 128
Configuring Uplink and Downlink Ports 129
VLAN Trunking 131
5 VLAN Configuration 135
IEEE 802.1Q VLANs 135
Configuring VLAN Groups 138
Adding Static Members to VLANs 140
Configuring Dynamic VLAN Registration 145
IEEE 802.1Q Tunneling 148
Enabling QinQ Tunneling on the Switch 152
Adding an Interface to a QinQ Tunnel 153
Protocol VLANs 154
Configuring Protocol VLAN Groups 155
Mapping Protocol Groups to Interfaces 156
Configuring IP Subnet VLANs 158
Configuring MAC-based VLANs 160
Configuring VLAN Mirroring 162
6 Address Table Settings 165
Setting Static Addresses 165
Configuring MAC Address Isolation 167
Changing the Aging Time 170
Displaying the Dynamic Address Table 171
Clearing the Dynamic Address Table 172
Configuring MAC Address Mirroring 173
Configuring Extended MAC Security 175
7 Spanning Tree Algorithm 179
Overview 179
Configuring Loopback Detection 182
Configuring Global Settings for STA 183
Displaying Global Settings for STA 189
Configuring Interface Settings for STA 190
Displaying Interface Settings for STA 194

Contents
– 10 –
Configuring Multiple Spanning Trees 196
Configuring Interface Settings for MSTP 200
8 Congestion Control 203
Rate Limiting 203
Storm Control 204
Automatic Traffic Control 206
Setting the ATC Timers 208
Configuring ATC Thresholds and Responses 209
9 Class of Service 213
Layer 2 Queue Settings 213
Setting the Default Priority for Interfaces 213
Selecting the Queue Mode 214
Mapping CoS Values to Egress Queues 217
Layer 3/4 Priority Settings 220
Setting Priority Processing to DSCP or CoS 220
Mapping Ingress DSCP Values to Internal DSCP Values 221
Mapping CoS Priorities to Internal DSCP Values 224
10 Quality of Service 227
Overview 227
Configuring a Class Map 228
Creating QoS Policies 232
Attaching a Policy Map to a Port 241
11 VoIP Traffic Configuration 243
Overview 243
Configuring VoIP Traffic 244
Configuring Telephony OUI 245
Configuring VoIP Traffic Ports 246
12 Security Measures 249
AAA Authorization and Accounting 250
Configuring Local/Remote Logon Authentication 251
Configuring Remote Logon Authentication Servers 252
Configuring AAA Accounting 257

Contents
– 11 –
Configuring AAA Authorization 262
Configuring User Accounts 265
Web Authentication 267
Configuring Global Settings for Web Authentication 267
Configuring Interface Settings for Web Authentication 268
Network Access (MAC Address Authentication) 270
Configuring Global Settings for Network Access 272
Configuring Network Access for Ports 273
Configuring Port Link Detection 275
Configuring a MAC Address Filter 276
Displaying Secure MAC Address Information 278
Configuring HTTPS 279
Configuring Global Settings for HTTPS 279
Replacing the Default Secure-site Certificate 281
Configuring the Secure Shell 282
Configuring the SSH Server 285
Generating the Host Key Pair 286
Importing User Public Keys 288
Access Control Lists 290
Setting A Time Range 291
Showing TCAM Utilization 294
Setting the ACL Name and Type 295
Configuring a Standard IPv4 ACL 297
Configuring an Extended IPv4 ACL 298
Configuring a Standard IPv6 ACL 300
Configuring an Extended IPv6 ACL 302
Configuring a MAC ACL 304
Configuring an ARP ACL 306
Binding a Port to an Access Control List 308
Configuring ACL Mirroring 309
Showing ACL Hardware Counters 311
ARP Inspection 312
Configuring Global Settings for ARP Inspection 313
Configuring VLAN Settings for ARP Inspection 315
Configuring Interface Settings for ARP Inspection 316

Contents
– 12 –
Displaying ARP Inspection Statistics 317
Displaying the ARP Inspection Log 318
Filtering IP Addresses for Management Access 319
Configuring Port Security 321
Configuring 802.1X Port Authentication 323
Configuring 802.1X Global Settings 325
Configuring Port Authenticator Settings for 802.1X 326
Configuring Port Supplicant Settings for 802.1X 330
Displaying 802.1X Statistics 332
DoS Protection 335
IP Source Guard 341
Configuring Ports for IP Source Guard 341
Configuring Static Bindings for IP Source Guard 343
Displaying Information for Dynamic IP Source Guard Bindings 344
DHCP Snooping 346
DHCP Snooping Global Configuration 348
DHCP Snooping VLAN Configuration 349
Configuring Ports for DHCP Snooping 350
Displaying DHCP Snooping Binding Information 352
13 Basic Administration Protocols 355
Configuring Event Logging 355
System Log Configuration 355
Remote Log Configuration 358
Link Layer Discovery Protocol 359
Setting LLDP Timing Attributes 360
Configuring LLDP Interface Attributes 361
Configuring LLDP Interface Civic-Address 365
Displaying LLDP Local Device Information 367
Displaying LLDP Remote Device Information 371
Displaying Device Statistics 379
Power over Ethernet 381
Displaying the Switch’s Overall PoE Power Budget 382
Setting The Port PoE Power Budget 383

Contents
– 13 –
Simple Network Management Protocol 385
Configuring Global Settings for SNMP 387
Setting the Local Engine ID 388
Specifying a Remote Engine ID 389
Setting SNMPv3 Views 390
Configuring SNMPv3 Groups 393
Setting Community Access Strings 398
Configuring Local SNMPv3 Users 399
Configuring Remote SNMPv3 Users 401
Specifying Trap Managers 403
Creating SNMP Notification Logs 407
Showing SNMP Statistics 409
Remote Monitoring 411
Configuring RMON Alarms 412
Configuring RMON Events 414
Configuring RMON History Samples 416
Configuring RMON Statistical Samples 419
Switch Clustering 421
Configuring General Settings for Clusters 422
Cluster Member Configuration 423
Managing Cluster Members 425
14 IP Configuration 427
Using the Ping Function 427
Address Resolution Protocol 429
Setting the ARP Timeout 429
Displaying ARP Entries 430
Setting the Switch’s IP Address (IP Version 4) 431
Setting the Switch’s IP Address (IP Version 6) 434
Configuring the IPv6 Default Gateway 434
Configuring IPv6 Interface Settings 435
Configuring an IPv6 Address 440
Showing IPv6 Addresses 442
Showing the IPv6 Neighbor Cache 444
Showing IPv6 Statistics 445

Contents
– 14 –
Showing the MTU for Responding Destinations 451
15 IP Services 453
Domain Name Service 453
Configuring General DNS Service Parameters 453
Configuring a List of Domain Names 454
Configuring a List of Name Servers 456
Configuring Static DNS Host to Address Entries 457
Displaying the DNS Cache 458
Multicast Domain Name Service 459
Dynamic Host Configuration Protocol 460
Specifying A DHCP Client Identifier 460
Configuring DHCP Relay Option 82 461
16 Multicast Filtering 467
Overview 467
Layer 2 IGMP (Snooping and Query) 468
Configuring IGMP Snooping and Query Parameters 470
Specifying Static Interfaces for a Multicast Router 473
Assigning Interfaces to Multicast Services 476
Setting IGMP Snooping Status per Interface 478
Filtering Multicast Data at Interfaces 483
Displaying Multicast Groups Discovered by IGMP Snooping 484
Displaying IGMP Snooping Statistics 485
Filtering and Throttling IGMP Groups 489
Enabling IGMP Filtering and Throttling 489
Configuring IGMP Filter Profiles 490
Configuring IGMP Filtering and Throttling for Interfaces 492
MLD Snooping (Snooping and Query for IPv6) 494
Configuring MLD Snooping and Query Parameters 494
Setting Immediate Leave Status for MLD Snooping per Interface 496
Specifying Static Interfaces for an IPv6 Multicast Router 496
Assigning Interfaces to IPv6 Multicast Services 498
Showing MLD Snooping Groups and Source List 501
Multicast VLAN Registration 502
Configuring MVR Global Settings 504

Contents
– 15 –
Configuring MVR Domain Settings 506
Configuring MVR Group Address Profiles 507
Configuring MVR Interface Status 510
Assigning Static MVR Multicast Groups to Interfaces 512
Displaying MVR Receiver Groups 514
Displaying MVR Statistics 515
Section III Appendices 521
A Software Specifications 523
Software Features 523
Management Features 524
Standards 525
Management Information Bases 525
B Troubleshooting 527
Problems Accessing the Management Interface 527
Using System Logs 528
C License Information 529
The GNU General Public License 529
Glossary 533
Index 541

Contents
– 16 –

– 17 –
Figures
Figure 1: Home Page 44
Figure 2: Front Panel Indicators 46
Figure 3: System Information 67
Figure 4: General Switch Information 68
Figure 5: Configuring Support for Jumbo Frames 69
Figure 6: Displaying Bridge Extension Configuration 70
Figure 7: Copy Firmware 72
Figure 8: Saving the Running Configuration 73
Figure 9: Setting Start-Up Files 74
Figure 10: Displaying System Files 75
Figure 11: Configuring Automatic Code Upgrade 78
Figure 12: Manually Setting the System Clock 80
Figure 13: Setting the Polling Interval for SNTP 81
Figure 14: Configuring NTP 82
Figure 15: Specifying SNTP Time Servers 82
Figure 16: Adding an NTP Time Server 83
Figure 17: Showing the NTP Time Server List 84
Figure 18: Adding an NTP Authentication Key 85
Figure 19: Showing the NTP Authentication Key List 85
Figure 20: Setting the Time Zone 86
Figure 21: Console Port Settings 88
Figure 22: Telnet Connection Settings 89
Figure 23: Displaying CPU Utilization 90
Figure 24: Displaying Memory Utilization 91
Figure 25: Restarting the Switch (Immediately) 93
Figure 26: Restarting the Switch (In) 94
Figure 27: Restarting the Switch (At) 94
Figure 28: Restarting the Switch (Regularly) 94
Figure 29: Configuring Connections by Port List 97

Figures
– 18 –
Figure 30: Configuring Connections by Port Range 98
Figure 31: Displaying Port Information 99
Figure 32: Configuring Local Port Mirroring 99
Figure 33: Configuring Local Port Mirroring 100
Figure 34: Displaying Local Port Mirror Sessions 101
Figure 35: Configuring Remote Port Mirroring 101
Figure 36: Configuring Remote Port Mirroring (Source) 104
Figure 37: Configuring Remote Port Mirroring (Intermediate) 105
Figure 38: Configuring Remote Port Mirroring (Destination) 105
Figure 39: Showing Port Statistics (Table) 108
Figure 40: Showing Port Statistics (Chart) 109
Figure 41: Performing Cable Tests 111
Figure 42: Enabling Port Isolation Globally 112
Figure 43: Configuring Port Isolation Profiles 113
Figure 44: Displaying Port Isolation Profiles 113
Figure 45: Assigning Port Isolation Profiles 114
Figure 46: Configuring Static Trunks 116
Figure 47: Creating Static Trunks 117
Figure 48: Adding Static Trunks Members 117
Figure 49: Configuring Connection Parameters for a Static Trunk 118
Figure 50: Showing Information for Static Trunks 118
Figure 51: Configuring Dynamic Trunks 118
Figure 52: Configuring the LACP Aggregator Admin Key 121
Figure 53: Enabling LACP on a Port 121
Figure 54: Configuring LACP Parameters on a Port 122
Figure 55: Configuring Connection Parameters for a Dynamic Trunk 122
Figure 56: Displaying Connection Parameters for Dynamic Trunks 123
Figure 57: Showing Members of Dynamic Trunks 123
Figure 58: Displaying LACP Port Counters 124
Figure 59: Displaying LACP Port Internal Information 126
Figure 60: Displaying LACP Port Remote Information 127
Figure 61: Enabling Traffic Segmentation 129
Figure 62: Configuring Members for Traffic Segmentation 130
Figure 63: Showing Traffic Segmentation Members 131
Figure 64: Configuring VLAN Trunking 131

Figures
– 19 –
Figure 65: Configuring VLAN Trunking 133
Figure 66: VLAN Compliant and VLAN Non-compliant Devices 136
Figure 67: Using GVRP 138
Figure 68: Creating Static VLANs 139
Figure 69: Modifying Settings for Static VLANs 140
Figure 70: Showing Static VLANs 140
Figure 71: Configuring Static Members by VLAN Index 143
Figure 72: Configuring Static VLAN Members by Interface 144
Figure 73: Configuring Static VLAN Members by Interface Range 144
Figure 74: Configuring Global Status of GVRP 146
Figure 75: Configuring GVRP for an Interface 147
Figure 76: Showing Dynamic VLANs Registered on the Switch 147
Figure 77: Showing the Members of a Dynamic VLAN 148
Figure 78: QinQ Operational Concept 149
Figure 79: Enabling QinQ Tunneling 153
Figure 80: Adding an Interface to a QinQ Tunnel 154
Figure 81: Configuring Protocol VLANs 156
Figure 82: Displaying Protocol VLANs 156
Figure 83: Assigning Interfaces to Protocol VLANs 158
Figure 84: Showing the Interface to Protocol Group Mapping 158
Figure 85: Configuring IP Subnet VLANs 160
Figure 86: Showing IP Subnet VLANs 160
Figure 87: Configuring MAC-Based VLANs 161
Figure 88: Showing MAC-Based VLANs 162
Figure 89: Configuring VLAN Mirroring 163
Figure 90: Showing the VLANs to Mirror 163
Figure 91: Configuring Static MAC Addresses 166
Figure 92: Displaying Static MAC Addresses 167
Figure 93: Setting Global Status for MAC Address Isolation 169
Figure 94: Configuring MAC Address Isolation 169
Figure 95: Displaying Interfaces Assigned a MAC Address Isolation Mode 170
Figure 96: Setting the Address Aging Time 171
Figure 97: Displaying the Dynamic MAC Address Table 172
Figure 98: Clearing Entries in the Dynamic MAC Address Table 173
Figure 99: Mirroring Packets Based on the Source MAC Address 174

Figures
– 20 –
Figure 100: Showing the Source MAC Addresses to Mirror 174
Figure 101: Configuring Extended MAC Security on a VLAN 177
Figure 102: Configuring Extended MAC Security on a Port or Trunk 177
Figure 103: STP Root Ports and Designated Ports 180
Figure 104: MSTP Region, Internal Spanning Tree, Multiple Spanning Tree 181
Figure 105: Common Internal Spanning Tree, Common Spanning Tree,
Internal Spanning Tree 181
Figure 106: Configuring Port Loopback Detection 183
Figure 107: Configuring Global Settings for STA (STP) 187
Figure 108: Configuring Global Settings for STA (RSTP) 188
Figure 109: Configuring Global Settings for STA (MSTP) 188
Figure 110: Displaying Global Settings for STA 190
Figure 111: Configuring Interface Settings for STA 193
Figure 112: STA Port Roles 195
Figure 113: Displaying Interface Settings for STA 196
Figure 114: Creating an MST Instance 198
Figure 115: Displaying MST Instances 198
Figure 116: Modifying the Priority for an MST Instance 199
Figure 117: Displaying Global Settings for an MST Instance 199
Figure 118: Adding a VLAN to an MST Instance 200
Figure 119: Displaying Members of an MST Instance 200
Figure 120: Configuring MSTP Interface Settings 202
Figure 121: Displaying MSTP Interface Settings 202
Figure 122: Configuring Rate Limits 204
Figure 123: Configuring Storm Control 206
Figure 124: Storm Control by Limiting the Traffic Rate 206
Figure 125: Storm Control by Shutting Down a Port 207
Figure 126: Configuring ATC Timers 209
Figure 127: Configuring ATC Interface Attributes 211
Figure 128: Setting the Default Port Priority 214
Figure 129: Setting the Queue Mode (Strict) 216
Figure 130: Setting the Queue Mode (WRR) 216
Figure 131: Setting the Queue Mode (Strict and WRR) 217
Figure 132: Mapping CoS Values to Egress Queues 219
Figure 133: Showing CoS Values to Egress Queue Mapping 219