Edge-Core ES3510 Programming manual

Powered by Accton
www.edge-core.com
Management Guide
ES3510
10-Port
Fast Ethernet Switch

Management Guide
ES3510 Fast Ethernet Switch
Layer 2 Switch
with 8 10/100BASE-TX (RJ-45) Ports,
and 2 Combination Gigabit (RJ-45/SFP) Ports

ES3510
E112007-CS-R01
149100034700A

i
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Saving Configuration Settings 2-8
Managing System Files 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-11
Displaying System Information 3-11
Displaying Switch Hardware/Software Versions 3-12
Displaying Bridge Extension Capabilities 3-14
Setting the Switch’s IP Address 3-15
Manual Configuration 3-16
Using DHCP/BOOTP 3-17
Enabling Jumbo Frames 3-18
Managing Firmware 3-18
Downloading System Software from a Server 3-19

Contents
ii
Saving or Restoring Configuration Settings 3-20
Downloading Configuration Settings from a Server 3-21
Console Port Settings 3-22
Telnet Settings 3-24
Configuring Event Logging 3-26
Displaying Log Messages 3-26
System Log Configuration 3-27
Remote Log Configuration 3-28
Simple Mail Transfer Protocol 3-29
Resetting the System 3-31
Setting the System Clock 3-32
Configuring SNTP 3-32
Setting the Time Zone 3-33
Setting the Time Manually 3-34
Simple Network Management Protocol 3-34
Setting Community Access Strings 3-36
Specifying Trap Managers and Trap Types 3-36
Enabling SNMP Agent Status 3-38
Configuring SNMPv3 Management Access 3-38
Setting the Local Engine ID 3-38
Specifying a Remote Engine ID 3-39
Configuring SNMPv3 Users 3-39
Configuring Remote SNMPv3 Users 3-41
Configuring SNMPv3 Groups 3-42
Setting SNMPv3 Views 3-45
User Authentication 3-47
Configuring User Accounts 3-47
Configuring Local/Remote Logon Authentication 3-49
AAA Authorization and Accounting 3-53
Configuring AAA RADIUS Group Settings 3-54
Configuring AAA TACACS+ Group Settings 3-54
Configuring AAA Accounting 3-55
AAA Accounting Update 3-57
AAA Accounting 802.1X Port Settings 3-57
AAA Accounting Exec Command Privileges 3-58
AAA Accounting Exec Settings 3-60
AAA Accounting Summary 3-60
Authorization Settings 3-62
Authorization EXEC Settings 3-63
Authorization Summary 3-63
Configuring HTTPS 3-64
Replacing the Default Secure-site Certificate 3-65
Configuring the Secure Shell 3-66
Configuring the SSH Server 3-68
Generating the Host Key Pair 3-69

Contents
iii
Configuring Port Security 3-71
Configuring 802.1X Port Authentication 3-72
Displaying 802.1X Global Settings 3-74
Configuring 802.1X Global Settings 3-74
Configuring Port Settings for 802.1X 3-75
Displaying 802.1X Statistics 3-78
Web Authentication 3-79
Configuring Web Authentication 3-80
Configuring Web Authentication for Ports 3-81
Displaying Web Authentication Port Information 3-82
Re-authenticating Web Authenticated Ports 3-83
Network Access – MAC Address Authentication 3-83
Configuring the MAC Authentication Reauthentication Time 3-84
Configuring MAC Authentication for Ports 3-85
Displaying Secure MAC Address Information 3-87
Access Control Lists 3-88
Configuring Access Control Lists 3-88
Setting the ACL Name and Type 3-89
Configuring a Standard IP ACL 3-89
Configuring an Extended IP ACL 3-90
Configuring a MAC ACL 3-93
Binding a Port to an Access Control List 3-94
Filtering IP Addresses for Management Access 3-95
Port Configuration 3-97
Displaying Connection Status 3-97
Configuring Interface Connections 3-99
Creating Trunk Groups 3-102
Statically Configuring a Trunk 3-103
Enabling LACP on Selected Ports 3-104
Configuring LACP Parameters 3-106
Displaying LACP Port Counters 3-108
Displaying LACP Settings and Status for the Local Side 3-110
Displaying LACP Settings and Status for the Remote Side 3-112
Setting Broadcast Storm Thresholds 3-113
Configuring Port Mirroring 3-115
Configuring Rate Limits 3-116
Rate Limit Configuration 3-116
Showing Port Statistics 3-117
Address Table Settings 3-121
Setting Static Addresses 3-121
Displaying the Address Table 3-122
Changing the Aging Time 3-124
Spanning Tree Algorithm Configuration 3-124
Displaying Global Settings 3-125
Configuring Global Settings 3-128

Contents
iv
Displaying Interface Settings 3-131
Configuring Interface Settings 3-134
Configuring Multiple Spanning Trees 3-136
Displaying Interface Settings for MSTP 3-138
Configuring Interface Settings for MSTP 3-140
VLAN Configuration 3-142
IEEE 802.1Q VLANs 3-142
Enabling or Disabling GVRP (Global Setting) 3-145
Displaying Basic VLAN Information 3-146
Displaying Current VLANs 3-146
Creating VLANs 3-148
Adding Static Members to VLANs (VLAN Index) 3-149
Adding Static Members to VLANs (Port Index) 3-151
Configuring VLAN Behavior for Interfaces 3-152
Configuring IEEE 802.1Q Tunneling 3-154
Enabling QinQ Tunneling on the Switch 3-157
Adding an Interface to a QinQ Tunnel 3-159
Private VLANs 3-161
Displaying Current Private VLANs 3-161
Configuring Private VLANs 3-162
Associating VLANs 3-163
Displaying Private VLAN Interface Information 3-164
Configuring Private VLAN Interfaces 3-165
Protocol VLANs 3-167
Protocol VLAN Group Configuration 3-167
Configuring Protocol VLAN Interfaces 3-168
Link Layer Discovery Protocol 3-169
Setting LLDP Timing Attributes 3-169
Configuring LLDP Interface Attributes 3-171
Displaying LLDP Local Device Information 3-174
Displaying LLDP Remote Port Information 3-175
Displaying LLDP Remote Information Details 3-176
Displaying Device Statistics 3-177
Displaying Detailed Device Statistics 3-178
Class of Service Configuration 3-179
Layer 2 Queue Settings 3-179
Setting the Default Priority for Interfaces 3-179
Mapping CoS Values to Egress Queues 3-181
Selecting the Queue Mode 3-183
Setting the Service Weight for Traffic Classes 3-183
Layer 3/4 Priority Settings 3-185
Mapping Layer 3/4 Priorities to CoS Values 3-185
Enabling IP DSCP Priority 3-185
Mapping DSCP Priority 3-186
Mapping IP Port Priority 3-187

Contents
v
Mapping IP Precedence Priority 3-189
Mapping IP TOS Priority 3-191
Mapping CoS Values to ACLs 3-193
Quality of Service 3-193
Configuring Quality of Service Parameters 3-194
Configuring a Class Map 3-194
Creating QoS Policies 3-197
Attaching a Policy Map to Ingress Queues 3-200
VoIP Traffic Configuration 3-201
Configuring VoIP Traffic 3-201
Configuring VoIP Traffic Port 3-202
Configuring Telephony OUI 3-204
Multicast Filtering 3-206
Layer 2 IGMP (Snooping and Query) 3-206
Configuring IGMP Snooping and Query Parameters 3-207
Enabling IGMP Immediate Leave 3-209
Displaying Interfaces Attached to a Multicast Router 3-210
Specifying Static Interfaces for a Multicast Router 3-211
Displaying Port Members of Multicast Services 3-212
Assigning Ports to Multicast Services 3-213
IGMP Filtering and Throttling 3-214
Enabling IGMP Filtering and Throttling 3-215
Configuring IGMP Filter Profiles 3-216
Configuring IGMP Filtering and Throttling for Interfaces 3-217
Multicast VLAN Registration 3-219
Configuring Global MVR Settings 3-220
Displaying MVR Interface Status 3-221
Displaying Port Members of Multicast Groups 3-222
Configuring MVR Interface Status 3-223
Assigning Static Multicast Groups to Interfaces 3-225
DHCP Snooping 3-226
DHCP Snooping Configuration 3-227
DHCP Snooping VLAN Configuration 3-227
DHCP Snooping Information Option Configuration 3-228
DHCP Snooping Port Configuration 3-229
IP Source Guard 3-231
IP Source Guard Port Configuration 3-231
Static IP Source Guard Binding Configuration 3-232
Dynamic IP Source Guard Binding Information 3-233
Switch Clustering 3-234
Cluster Configuration 3-235
Cluster Member Configuration 3-236
Cluster Member Information 3-237
Cluster Candidate Information 3-238
UPnP 3-239

Contents
vi
UPnP Configuration 3-239
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-2
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-5
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-8
Command Groups 4-9
Line Commands 4-10
line 4-11
login 4-11
password 4-12
timeout login response 4-13
exec-timeout 4-13
password-thresh 4-14
silent-time 4-15
databits 4-15
parity 4-16
speed 4-17
stopbits 4-17
disconnect 4-18
show line 4-18
General Commands 4-19
enable 4-19
disable 4-20
configure 4-21
show history 4-21
reload 4-22
end 4-22
exit 4-23
quit 4-23

Contents
vii
System Management Commands 4-24
Device Designation Commands 4-24
prompt 4-24
hostname 4-25
Banner 4-25
banner configure 4-26
banner configure company 4-27
banner configure dc-power-info 4-28
banner configure department 4-28
banner configure equipment-info 4-29
banner configure equipment-location 4-30
banner configure ip-lan 4-30
banner configure lp-number 4-31
banner configure manager-info 4-32
banner configure mux 4-32
banner configure note 4-33
show banner 4-34
User Access Commands 4-35
username 4-35
enable password 4-36
IP Filter Commands 4-37
management 4-37
show management 4-38
Web Server Commands 4-39
ip http port 4-39
ip http server 4-39
ip http secure-server 4-40
ip http secure-port 4-41
Telnet Server Commands 4-42
ip telnet port 4-42
ip telnet server 4-42
Secure Shell Commands 4-43
ip ssh server 4-45
ip ssh timeout 4-46
ip ssh authentication-retries 4-46
ip ssh server-key size 4-47
delete public-key 4-47
ip ssh crypto host-key generate 4-48
ip ssh crypto zeroize 4-48
ip ssh save host-key 4-49
show ip ssh 4-49
show ssh 4-50
show public-key 4-51
Event Logging Commands 4-52
logging on 4-52

Contents
viii
logging history 4-53
logging host 4-54
logging facility 4-54
logging trap 4-55
clear logging 4-55
show logging 4-56
show log 4-57
SMTP Alert Commands 4-58
logging sendmail host 4-58
logging sendmail level 4-59
logging sendmail source-email 4-60
logging sendmail destination-email 4-60
logging sendmail 4-61
show logging sendmail 4-61
Time Commands 4-62
sntp client 4-62
sntp server 4-63
sntp poll 4-64
show sntp 4-64
clock timezone 4-65
calendar set 4-65
show calendar 4-66
System Status Commands 4-66
show startup-config 4-66
show running-config 4-68
show system 4-70
show users 4-70
show version 4-71
Frame Size Commands 4-72
jumbo frame 4-72
Flash/File Commands 4-73
copy 4-73
delete 4-75
dir 4-76
whichboot 4-77
boot system 4-78
Authentication Commands 4-79
Authentication Sequence 4-79
authentication login 4-79
authentication enable 4-80
RADIUS Client 4-81
radius-server host 4-81
radius-server auth-port 4-82
radius-server acct-port 4-83
radius-server key 4-83

Contents
ix
radius-server retransmit 4-83
radius-server timeout 4-84
show radius-server 4-84
TACACS+ Client 4-85
tacacs-server host 4-85
tacacs-server port 4-86
tacacs-server key 4-87
tacacs-server retransmit 4-87
tacacs-server timeout 4-88
show tacacs-server 4-88
AAA Commands 4-89
aaa group server 4-89
server 4-90
aaa accounting dot1x 4-90
aaa accounting exec 4-91
aaa accounting commands 4-92
aaa accounting update 4-93
accounting dot1x 4-94
accounting exec 4-94
accounting commands 4-95
aaa authorization exec 4-95
authorization exec 4-96
show accounting 4-97
Port Security Commands 4-98
port security 4-98
802.1X Port Authentication 4-99
dot1x system-auth-control 4-100
dot1x default 4-100
dot1x max-req 4-101
dot1x port-control 4-101
dot1x operation-mode 4-102
dot1x re-authenticate 4-102
dot1x re-authentication 4-103
dot1x timeout quiet-period 4-103
dot1x timeout re-authperiod 4-104
dot1x timeout tx-period 4-104
dot1x intrusion-action 4-105
show dot1x 4-105
Network Access – MAC Address Authentication 4-108
network-access mode 4-108
network-access max-mac-count 4-109
mac-authentication intrusion-action 4-110
mac-authentication max-mac-count 4-110
network-access dynamic-vlan 4-111
network-access guest-vlan 4-111

Contents
x
mac-authentication reauth-time 4-112
clear network-access 4-113
show network-access 4-113
show network-access mac-address-table 4-114
Web Authentication 4-115
web-auth login-attempts 4-116
web-auth quiet-period 4-116
web-auth session-timeout 4-117
web-auth system-auth-control 4-117
web-auth 4-118
show web-auth 4-118
show web-auth interface 4-119
web-auth re-authenticate (Port) 4-119
web-auth re-authenticate (IP) 4-120
show web-auth summary 4-120
Access Control List Commands 4-122
IP ACLs 4-123
access-list ip 4-123
permit, deny (Standard ACL) 4-124
permit, deny (Extended ACL) 4-124
show ip access-list 4-126
ip access-group 4-126
show ip access-group 4-127
MAC ACLs 4-127
access-list mac 4-128
permit, deny (MAC ACL) 4-129
show mac access-list 4-130
mac access-group 4-131
show mac access-group 4-131
ACL Information 4-132
show access-list 4-132
show access-group 4-132
SNMP Commands 4-133
snmp-server 4-134
show snmp 4-134
snmp-server community 4-135
snmp-server contact 4-136
snmp-server location 4-136
snmp-server host 4-137
snmp-server enable traps 4-139
snmp-server engine-id 4-140
show snmp engine-id 4-141
snmp-server view 4-142
show snmp view 4-143
snmp-server group 4-143

Contents
xi
show snmp group 4-145
snmp-server user 4-146
show snmp user 4-148
Interface Commands 4-150
interface 4-150
description 4-151
speed-duplex 4-151
negotiation 4-152
capabilities 4-153
flowcontrol 4-154
shutdown 4-155
broadcast byte-rate 4-156
switchport broadcast 4-156
clear counters 4-157
show interfaces status 4-157
show interfaces counters 4-158
show interfaces switchport 4-159
Mirror Port Commands 4-162
port monitor 4-162
show port monitor 4-163
Rate Limit Commands 4-164
rate-limit 4-164
Link Aggregation Commands 4-165
channel-group 4-166
lacp 4-167
lacp system-priority 4-168
lacp admin-key (Ethernet Interface) 4-169
lacp admin-key (Port Channel) 4-170
lacp port-priority 4-171
show lacp 4-171
Address Table Commands 4-175
mac-address-table static 4-175
clear mac-address-table dynamic 4-176
show mac-address-table 4-176
mac-address-table aging-time 4-177
show mac-address-table aging-time 4-178
LLDP Commands 4-178
lldp 4-180
lldp holdtime-multiplier 4-180
lldp medFastStartCount 4-181
lldp notification-interval 4-181
lldp refresh-interval 4-182
lldp reinit-delay 4-183
lldp tx-delay 4-183
lldp admin-status 4-184

Contents
xii
lldp notification 4-184
lldp mednotification 4-185
lldp basic-tlv management-ip-address 4-186
lldp basic-tlv port-description 4-186
lldp basic-tlv system-capabilities 4-187
lldp basic-tlv system-description 4-187
lldp basic-tlv system-name 4-188
lldp dot1-tlv proto-ident 4-188
lldp dot1-tlv proto-vid 4-189
lldp dot1-tlv pvid 4-189
lldp dot1-tlv vlan-name 4-190
lldp dot3-tlv link-agg 4-190
lldp dot3-tlv mac-phy 4-191
lldp dot3-tlv max-frame 4-191
lldp dot3-tlv poe 4-192
lldp medtlv extpoe 4-192
lldp medtlv inventory 4-193
lldp medtlv location 4-193
lldp medtlv med-cap 4-194
lldp medtlv network-policy 4-194
show lldp config 4-195
show lldp info local-device 4-197
show lldp info remote-device 4-198
show lldp info statistics 4-198
Spanning Tree Commands 4-200
spanning-tree 4-201
spanning-tree mode 4-201
spanning-tree forward-time 4-202
spanning-tree hello-time 4-203
spanning-tree max-age 4-204
spanning-tree priority 4-204
spanning-tree pathcost method 4-205
spanning-tree transmission-limit 4-206
spanning-tree mst-configuration 4-206
mst vlan 4-207
mst priority 4-207
name 4-208
revision 4-209
max-hops 4-209
spanning-tree spanning-disabled 4-210
spanning-tree cost 4-210
spanning-tree port-priority 4-211
spanning-tree edge-port 4-212
spanning-tree portfast 4-212
spanning-tree link-type 4-213

Contents
xiii
spanning-tree mst cost 4-214
spanning-tree mst port-priority 4-215
spanning-tree protocol-migration 4-216
show spanning-tree 4-216
show spanning-tree mst configuration 4-218
VLAN Commands 4-219
GVRP and Bridge Extension Commands 4-219
bridge-ext gvrp 4-220
show bridge-ext 4-220
switchport gvrp 4-221
show gvrp configuration 4-221
garp timer 4-222
show garp timer 4-222
Editing VLAN Groups 4-223
vlan database 4-223
vlan 4-224
Configuring VLAN Interfaces 4-225
interface vlan 4-225
switchport mode 4-226
switchport acceptable-frame-types 4-227
switchport ingress-filtering 4-227
switchport native vlan 4-228
switchport allowed vlan 4-229
switchport forbidden vlan 4-230
Displaying VLAN Information 4-231
show vlan 4-231
Configuring IEEE 802.1Q Tunneling 4-232
dot1q-tunnel system-tunnel-control 4-232
switchport dot1q-tunnel mode 4-233
switchport dot1q-tunnel tpid 4-234
show dot1q-tunnel 4-234
Configuring Private VLANs 4-235
private-vlan 4-237
private vlan association 4-237
switchport mode private-vlan 4-238
switchport private-vlan host-association 4-239
switchport private-vlan isolated 4-239
switchport private-vlan mapping 4-240
show vlan private-vlan 4-241
Configuring Protocol-based VLANs 4-242
protocol-vlan protocol-group (Configuring Groups) 4-242
protocol-vlan protocol-group (Configuring Interfaces) 4-243
show protocol-vlan protocol-group 4-244
show interfaces protocol-vlan protocol-group 4-245
Priority Commands 4-245

Contents
xiv
Priority Commands (Layer 2) 4-246
queue mode 4-246
switchport priority default 4-247
queue bandwidth 4-248
queue cos-map 4-248
show queue mode 4-249
show queue bandwidth 4-250
show queue cos-map 4-250
Priority Commands (Layer 3 and 4) 4-251
map ip dscp 4-251
map ip port 4-252
map ip precedence 4-253
map ip tos 4-254
map access-list ip 4-255
map access-list mac 4-255
show map ip dscp 4-256
show map ip port 4-256
show map ip precedence 4-257
show map ip tos 4-257
show map access-list 4-258
Quality of Service Commands 4-259
class-map 4-260
match 4-261
policy-map 4-262
class 4-262
set 4-263
police 4-264
service-policy 4-265
show class-map 4-266
show policy-map 4-266
show policy-map interface 4-267
Voice VLAN Commands 4-267
voice vlan 4-268
voice vlan aging 4-269
voice vlan mac-address 4-269
switchport voice vlan 4-270
switchport voice vlan rule 4-271
switchport voice vlan security 4-271
switchport voice vlan priority 4-272
show voice vlan 4-273
Multicast Filtering Commands 4-274
IGMP Snooping Commands 4-274
ip igmp snooping 4-274
ip igmp snooping vlan static 4-275
ip igmp snooping version 4-275

Contents
xv
ip igmp snooping leave-proxy 4-276
ip igmp snooping immediate-leave 4-277
show ip igmp snooping 4-277
show mac-address-table multicast 4-278
IGMP Query Commands (Layer 2) 4-279
ip igmp snooping querier 4-279
ip igmp snooping query-count 4-280
ip igmp snooping query-interval 4-280
ip igmp snooping query-max-response-time 4-281
ip igmp snooping router-port-expire-time 4-282
Static Multicast Routing Commands 4-282
ip igmp snooping vlan mrouter 4-283
show ip igmp snooping mrouter 4-283
IGMP Filtering and Throttling Commands 4-284
ip igmp filter (Global Configuration) 4-284
ip igmp profile 4-285
permit, deny 4-285
range 4-286
ip igmp filter (Interface Configuration) 4-287
ip igmp max-groups 4-287
ip igmp max-groups action 4-288
show ip igmp filter 4-288
show ip igmp profile 4-289
show ip igmp throttle interface 4-290
Multicast VLAN Registration Commands 4-290
mvr (Global Configuration) 4-291
mvr (Interface Configuration) 4-292
show mvr 4-294
IP Interface Commands 4-296
ip address 4-296
ip default-gateway 4-297
ip dhcp restart 4-298
show ip interface 4-298
show ip redirects 4-299
ping 4-299
DHCP Snooping Commands 4-301
ip dhcp snooping 4-301
ip dhcp snooping vlan 4-303
ip dhcp snooping trust 4-304
ip dhcp snooping verify mac-address 4-305
ip dhcp snooping information option 4-305
ip dhcp snooping information policy 4-306
ip dhcp snooping database flash 4-307
show ip dhcp snooping 4-307
show ip dhcp snooping binding 4-308

Contents
xvi
IP Source Guard Commands 4-308
ip source-guard 4-308
ip source-guard binding 4-310
show ip source-guard 4-311
show ip source-guard binding 4-311
Switch Cluster Commands 4-312
cluster 4-312
cluster commander 4-313
cluster ip-pool 4-313
cluster member 4-314
rcommand 4-314
show cluster 4-315
show cluster members 4-315
show cluster candidates 4-316
UPnP Commands 4-316
upnp device 4-316
upnp device ttl 4-317
upnp device advertise duration 4-317
show upnp 4-318
Appendix A: Software Specifications A-1
Software Features A-1
Management Features A-2
Standards A-2
Management Information Bases A-3
Appendix B: Troubleshooting B-1
Problems Accessing the Management Interface B-1
Using System Logs B-2
Glossary
Index