Edge-Core ES3510 Programming manual

Powered by Accton
www.edge-core.com
Management Guide
ES3510
10-Port
Fast Ethernet Switch

Management Guide
ES3510 Fast Ethernet Switch
Layer 2 Switch
with 8 10/100BASE-TX (RJ-45) Ports,
and 2 Combination Gigabit (RJ-45/SFP) Ports

ES3510
E112007-CS-R01
149100034700A

i
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Saving Configuration Settings 2-8
Managing System Files 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-11
Displaying System Information 3-11
Displaying Switch Hardware/Software Versions 3-12
Displaying Bridge Extension Capabilities 3-14
Setting the Switch’s IP Address 3-15
Manual Configuration 3-16
Using DHCP/BOOTP 3-17
Enabling Jumbo Frames 3-18
Managing Firmware 3-18
Downloading System Software from a Server 3-19

Contents
ii
Saving or Restoring Configuration Settings 3-20
Downloading Configuration Settings from a Server 3-21
Console Port Settings 3-22
Telnet Settings 3-24
Configuring Event Logging 3-26
Displaying Log Messages 3-26
System Log Configuration 3-27
Remote Log Configuration 3-28
Simple Mail Transfer Protocol 3-29
Resetting the System 3-31
Setting the System Clock 3-32
Configuring SNTP 3-32
Setting the Time Zone 3-33
Setting the Time Manually 3-34
Simple Network Management Protocol 3-34
Setting Community Access Strings 3-36
Specifying Trap Managers and Trap Types 3-36
Enabling SNMP Agent Status 3-38
Configuring SNMPv3 Management Access 3-38
Setting the Local Engine ID 3-38
Specifying a Remote Engine ID 3-39
Configuring SNMPv3 Users 3-39
Configuring Remote SNMPv3 Users 3-41
Configuring SNMPv3 Groups 3-42
Setting SNMPv3 Views 3-45
User Authentication 3-47
Configuring User Accounts 3-47
Configuring Local/Remote Logon Authentication 3-49
AAA Authorization and Accounting 3-53
Configuring AAA RADIUS Group Settings 3-54
Configuring AAA TACACS+ Group Settings 3-54
Configuring AAA Accounting 3-55
AAA Accounting Update 3-57
AAA Accounting 802.1X Port Settings 3-57
AAA Accounting Exec Command Privileges 3-58
AAA Accounting Exec Settings 3-60
AAA Accounting Summary 3-60
Authorization Settings 3-62
Authorization EXEC Settings 3-63
Authorization Summary 3-63
Configuring HTTPS 3-64
Replacing the Default Secure-site Certificate 3-65
Configuring the Secure Shell 3-66
Configuring the SSH Server 3-68
Generating the Host Key Pair 3-69

Contents
iii
Configuring Port Security 3-71
Configuring 802.1X Port Authentication 3-72
Displaying 802.1X Global Settings 3-74
Configuring 802.1X Global Settings 3-74
Configuring Port Settings for 802.1X 3-75
Displaying 802.1X Statistics 3-78
Web Authentication 3-79
Configuring Web Authentication 3-80
Configuring Web Authentication for Ports 3-81
Displaying Web Authentication Port Information 3-82
Re-authenticating Web Authenticated Ports 3-83
Network Access – MAC Address Authentication 3-83
Configuring the MAC Authentication Reauthentication Time 3-84
Configuring MAC Authentication for Ports 3-85
Displaying Secure MAC Address Information 3-87
Access Control Lists 3-88
Configuring Access Control Lists 3-88
Setting the ACL Name and Type 3-89
Configuring a Standard IP ACL 3-89
Configuring an Extended IP ACL 3-90
Configuring a MAC ACL 3-93
Binding a Port to an Access Control List 3-94
Filtering IP Addresses for Management Access 3-95
Port Configuration 3-97
Displaying Connection Status 3-97
Configuring Interface Connections 3-99
Creating Trunk Groups 3-102
Statically Configuring a Trunk 3-103
Enabling LACP on Selected Ports 3-104
Configuring LACP Parameters 3-106
Displaying LACP Port Counters 3-108
Displaying LACP Settings and Status for the Local Side 3-110
Displaying LACP Settings and Status for the Remote Side 3-112
Setting Broadcast Storm Thresholds 3-113
Configuring Port Mirroring 3-115
Configuring Rate Limits 3-116
Rate Limit Configuration 3-116
Showing Port Statistics 3-117
Address Table Settings 3-121
Setting Static Addresses 3-121
Displaying the Address Table 3-122
Changing the Aging Time 3-124
Spanning Tree Algorithm Configuration 3-124
Displaying Global Settings 3-125
Configuring Global Settings 3-128

Contents
iv
Displaying Interface Settings 3-131
Configuring Interface Settings 3-134
Configuring Multiple Spanning Trees 3-136
Displaying Interface Settings for MSTP 3-138
Configuring Interface Settings for MSTP 3-140
VLAN Configuration 3-142
IEEE 802.1Q VLANs 3-142
Enabling or Disabling GVRP (Global Setting) 3-145
Displaying Basic VLAN Information 3-146
Displaying Current VLANs 3-146
Creating VLANs 3-148
Adding Static Members to VLANs (VLAN Index) 3-149
Adding Static Members to VLANs (Port Index) 3-151
Configuring VLAN Behavior for Interfaces 3-152
Configuring IEEE 802.1Q Tunneling 3-154
Enabling QinQ Tunneling on the Switch 3-157
Adding an Interface to a QinQ Tunnel 3-159
Private VLANs 3-161
Displaying Current Private VLANs 3-161
Configuring Private VLANs 3-162
Associating VLANs 3-163
Displaying Private VLAN Interface Information 3-164
Configuring Private VLAN Interfaces 3-165
Protocol VLANs 3-167
Protocol VLAN Group Configuration 3-167
Configuring Protocol VLAN Interfaces 3-168
Link Layer Discovery Protocol 3-169
Setting LLDP Timing Attributes 3-169
Configuring LLDP Interface Attributes 3-171
Displaying LLDP Local Device Information 3-174
Displaying LLDP Remote Port Information 3-175
Displaying LLDP Remote Information Details 3-176
Displaying Device Statistics 3-177
Displaying Detailed Device Statistics 3-178
Class of Service Configuration 3-179
Layer 2 Queue Settings 3-179
Setting the Default Priority for Interfaces 3-179
Mapping CoS Values to Egress Queues 3-181
Selecting the Queue Mode 3-183
Setting the Service Weight for Traffic Classes 3-183
Layer 3/4 Priority Settings 3-185
Mapping Layer 3/4 Priorities to CoS Values 3-185
Enabling IP DSCP Priority 3-185
Mapping DSCP Priority 3-186
Mapping IP Port Priority 3-187

Contents
v
Mapping IP Precedence Priority 3-189
Mapping IP TOS Priority 3-191
Mapping CoS Values to ACLs 3-193
Quality of Service 3-193
Configuring Quality of Service Parameters 3-194
Configuring a Class Map 3-194
Creating QoS Policies 3-197
Attaching a Policy Map to Ingress Queues 3-200
VoIP Traffic Configuration 3-201
Configuring VoIP Traffic 3-201
Configuring VoIP Traffic Port 3-202
Configuring Telephony OUI 3-204
Multicast Filtering 3-206
Layer 2 IGMP (Snooping and Query) 3-206
Configuring IGMP Snooping and Query Parameters 3-207
Enabling IGMP Immediate Leave 3-209
Displaying Interfaces Attached to a Multicast Router 3-210
Specifying Static Interfaces for a Multicast Router 3-211
Displaying Port Members of Multicast Services 3-212
Assigning Ports to Multicast Services 3-213
IGMP Filtering and Throttling 3-214
Enabling IGMP Filtering and Throttling 3-215
Configuring IGMP Filter Profiles 3-216
Configuring IGMP Filtering and Throttling for Interfaces 3-217
Multicast VLAN Registration 3-219
Configuring Global MVR Settings 3-220
Displaying MVR Interface Status 3-221
Displaying Port Members of Multicast Groups 3-222
Configuring MVR Interface Status 3-223
Assigning Static Multicast Groups to Interfaces 3-225
DHCP Snooping 3-226
DHCP Snooping Configuration 3-227
DHCP Snooping VLAN Configuration 3-227
DHCP Snooping Information Option Configuration 3-228
DHCP Snooping Port Configuration 3-229
IP Source Guard 3-231
IP Source Guard Port Configuration 3-231
Static IP Source Guard Binding Configuration 3-232
Dynamic IP Source Guard Binding Information 3-233
Switch Clustering 3-234
Cluster Configuration 3-235
Cluster Member Configuration 3-236
Cluster Member Information 3-237
Cluster Candidate Information 3-238
UPnP 3-239

Contents
vi
UPnP Configuration 3-239
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-2
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-5
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-8
Command Groups 4-9
Line Commands 4-10
line 4-11
login 4-11
password 4-12
timeout login response 4-13
exec-timeout 4-13
password-thresh 4-14
silent-time 4-15
databits 4-15
parity 4-16
speed 4-17
stopbits 4-17
disconnect 4-18
show line 4-18
General Commands 4-19
enable 4-19
disable 4-20
configure 4-21
show history 4-21
reload 4-22
end 4-22
exit 4-23
quit 4-23