Edge-Core ES3528MV2 Programming manual

Management Guide
www.edge-core.com
ES3528MV2
ES3528MV2-DC
28-Port Fast Ethernet
Layer 2 Switch

M ANAGEMENT G UIDE
ES3528MV2 FAST ETHERNET SWITCH
Layer 2 Switch
with 24 10/100BASE-TX (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP)
ES3528MV2-DC FAST ETHERNET SWITCH
Layer 2 Switch with DC power input
with 24 10/100BASE-TX (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP)
ES3528MV2
ES3528MV2-DC
E112013/ST-R03

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.

A BOUT T HIS G UIDE
– 6 –
REVISION HISTORY This section summarizes the changes in each revision of this guide.
NOVEMBER 2013 REVISION
This is the third version of this guide. This guide is valid for software
release v1.4.0.0. It includes the following updates to the manual:
◆Updated parameter ranges under "Configuring The Console Port" on
page 139.
◆Updated parameter ranges under "Configuring Telnet Settings" on
page 140.
◆Updated parameter ranges for “System Reload Configuration” under
"Resetting the System" on page 144.
◆Updated parameter list under "Setting the Time Zone" on page 138.
◆Updated parameter description under "Configuring by Port List" on
page 150.
◆Added “Timeout Mode” to parameter list under "Configuring a Dynamic
Trunk" on page 173.
◆Added the section "Creating CVLAN to SPVLAN Mapping Entries" on
page 211.
◆Added the section "Configuring MAC Address Learning" on page 227.
◆Added the parameters “Action” and “Shutdown Interval” under
"Configuring Loopback Detection" on page 240.
◆Updated thresholds under "Configuring ATC Thresholds and Responses"
on page 267 to use packets per second (pps).
◆Updated parameter description for “Add Rules” under "Configuring a
Class Map" on page 286.
◆Updated para mt er description under "Configuring AAA Authorization"
on page 321.
◆Updated parameter list under "Showing ACL Hardware Counters" on
page 371.
◆Added “Allow Zeros” parameter under "Configuring Global Settings for
ARP Inspection" on page 373.
◆Updated parameter list under "Configuring Port Security" on page 382.
◆Updated parameter list under "DHCP Snooping Configuration" on
page 412.
◆Updated parameter list under "Configuring Ports for DHCP Snooping" on
page 415.

A BOUT T HIS G UIDE
– 7 –
◆Updated default settings and added “MED-Location Civic Address”
parameter under "Configuring LLDP Interface Attributes" on page 427.
◆Added the section "Configuring LLDP Interface Civic-Address" on
page 430.
◆Added parameters for Port Details under "Displaying LLDP Remote
Device Information" on page 436.
◆Updated entries in Table 31, "Supported Notification Messages," on
page 456.
◆Added information on changes introduced by ERPSv2 under "Ethernet
Ring Protection Switching" on page 489.
◆Changed description of options for the Interval Level parameter under
"Configuring CFM Maintenance Associations" on page 526.
◆Updated range for the Packet Size parameter under "Using the Ping
Function" on page 561.
◆Added the section "Using the Trace Route Function" on page 563
◆Added description of RA Guard parameters under "Configuring IPv6
Interface Settings" on page 571.
◆Added the section "Specifying A DHCP Client Identifier" on page 595
◆Added the section "Configuring DHCP Relay Option 82" on page 596
◆Added the section "Configuring the PPPoE Intermediate Agent" on
page 600.
◆Updated parameter list under "Specifying Static Interfaces for a
Multicast Router" on page 614.
◆Updated parameter list under "Filtering IGMP Query Packets and
Multicast Data" on page 623.
◆Updated parameter list under "Displaying Multicast Groups Discovered
by IGMP Snooping" on page 624.
◆Added the section "MLD Snooping (Snooping and Query for IPv6)" on
page 634.
◆Added parameter for Forwarding Priority under "Configuring MVR6
Domain Settings" on page 662.
◆Added description of commands "clock summer-time (date)" on
page 757, "clock summertime (predefined)" on page 758, and "clock
summertime (recurring)" on page 759.
◆Updated parameter list for the command "copy" on page 720.

A BOUT T HIS G UIDE
– 8 –
◆Updated syntax for the command "delete" on page 723.
◆Updated range for the command "exec-timeout" on page 730.
◆Added the command "terminal" on page 737.
◆Updated parameter options for the command "snmp-server
enable traps" on page 778.
◆Added the command "snmp-server enable port-traps mac-notification"
on page 781 and "show snmp-server enable port-traps" on page 782,
◆In Chapter "Flow Sampling Commands" on page 803 - removed and
replaced previous commands with descriptions of a new command set.
◆Added the command "accounting commands" on page 830.
◆Added description of new command "mac-learning" on page 874.
◆Updated the description of command usage under "port security" on
page 875.
◆Added description of new command "port security mac-address-as-
permanent" on page 877.
◆Added description of new command "ip dhcp snooping limit rate" on
page 904.
◆Added description of new command "ipv6 dhcp snooping option
remote-id" on page 913.
◆Added description of new command "ipv6 dhcp snooping option
remote-id policy" on page 914.
◆Updated parameters for the commands "ip source-guard binding" on
page 920 and "ip source-guard max-binding" on page 923.
◆Added description of new command "ip source-guard mode" on
page 924.
◆Added the new command "clear ip source-guard binding blocked" on
page 924
◆Updated syntax of command "show ip source-guard binding" on
page 925.
◆Added new section describing commands for "IPv6 Source Guard" on
page 926.
◆Added option to allow zeros for command "ip arp inspection validate"
on page 935.
◆Added new parameters for IPv4 and IPv6 filters to the command
"permit, deny (MAC ACL)" on page 965.

A BOUT T HIS G UIDE
– 9 –
◆Added the command "clear access-list hardware counters" on
page 973.
◆Updated description of parameters for the command "capabilities" on
page 977.
◆Added the command "discard" on page 979.
◆Added description of seven new DDM commands beginning
with"transceiver-threshold-auto" on page 989 and ending with
"transceiver-threshold voltage" on page 995.
◆Added the command "port channel load-balance" on page 1004.
◆Added the command "lacp timeout" on page 1011.
◆Added the command "storm-sample-type" on page 1029.
◆Updated descriptions of commands "auto-traffic-control alarm-clear-
threshold" on page 1037 and "auto-traffic-control alarm-fire-threshold"
on page 1038 now able to be set using packet rate (packets per
second).
◆Added description of new command "loopback-detection action" on
page 1048 and removed the command loopback-detection mode.
◆Updated information in Command Usage section for the command
"show mac-address-table" on page 1061.
◆Added description of new command "spanning-tree tc-prop-stop" on
page 1088.
◆Updated parameters for "protocol-vlan protocol-group (Configuring
Interfaces)" on page 1155.
◆Added address mask parameter to the command "mac-vlan" on
page 1160.
◆Updated parameters for the command "match" on page 1186.
◆Updated range for the command "ip igmp snooping priority" on
page 1206.
◆Added the commands "clear ip igmp snooping groups dynamic" on
page 1220 and "clear ip igmp snooping statistics" on page 1221.
◆Added description of new commands"ip igmp authentication" on
page 1230 and "show ip igmp authentication" on page 1235.
◆Updated range for the command "ip igmp max-groups" on page 1233.
◆Added the commands "ip multicast-data-drop" on page 1234 and
"show ip multicast-data-drop" on page 1238.

A BOUT T HIS G UIDE
– 10 –
◆Added new section "MLD Snooping" on page 1239.
◆Added new section "MLD Filtering and Throttling" on page 1249.
◆Updated range for the command "mvr priority" on page 1262.
◆Added commands "clear mrv groups dynamic" on page 1269 and "clear
mrv statistics" on page 1270.
◆Added commands "clear mvr6 groups dynamic" on page 1288 and
"clear mvr6 statistics" on page 1288.
◆Updated description of parameters for "ethernet cfm cc ma interval" on
page 1339.
◆Added command "clear efm oam event-log" on page 1366.
◆Added the section "DHCP Relay Option 82" on page 1389.
◆Updated the description of command "ip address" on page 1396 to
include using classless subnet format for the ip address subnet mask.
◆Updated parameters for the command "traceroute6" on page 1423.
◆Added the section "ND Snooping" on page 1430.
APRIL 2013 REVISION
This is the second version of this guide. This guide is valid for software
release v1.0.0.0. It includes the following correction to the manual:
◆Updated information in the Command Usage section under "spanning-
tree bpdu-filter" on page 1077.
MARCH 2012 REVISION
This is the first version of this guide. This guide is valid for software release
v1.0.0.0.

– 11 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 11
FIGURES 49
TABLES 61
SECTION I GETTING STARTED 67
1INTRODUCTION 69
Key Features 69
Description of Software Features 70
System Defaults 75
2INITIAL SWITCH CONFIGURATION 79
Connecting to the Switch 79
Configuration Options 79
Required Connections 80
Remote Connections 81
Basic Configuration 81
Console Connection 81
Setting Passwords 82
Setting an IP Address 83
Downloading a Configuration File Referenced by a DHCP Server 89
Enabling SNMP Management Access 90
Managing System Files 93
Saving or Restoring Configuration Settings 93
SECTION II WEB CONFIGURATION 95
3USING THE WEB INTERFACE 97
Connecting to the Web Interface 97

C ONTENTS
– 12 –
Navigating the Web Browser Interface 98
Home Page 98
Configuration Options 99
Panel Display 99
Main Menu 100
4BASIC MANAGEMENT TASKS 117
Displaying System Information 117
Displaying Hardware/Software Versions 118
Configuring Support for Jumbo Frames 120
Displaying Bridge Extension Capabilities 121
Managing System Files 122
Copying Files via FTP/TFTP or HTTP 122
Saving the Running Configuration to a Local File 124
Setting the Start-up File 125
Showing System Files 126
Automatic Operation Code Upgrade 127
Setting the System Clock 131
Setting the Time Manually 131
Setting the SNTP Polling Interval 132
Configuring NTP 133
Configuring Time Servers 134
Setting the Time Zone 138
Configuring The Console Port 139
Configuring Telnet Settings 140
Displaying CPU Utilization 142
Displaying Memory Utilization 143
Resetting the System 144
5INTERFACE CONFIGURATION 149
Port Configuration 150
Configuring by Port List 150
Configuring by Port Range 152
Displaying Connection Status 153
Configuring Local Port Mirroring 154
Configuring Remote Port Mirroring 156
Showing Port or Trunk Statistics 160
Displaying Transceiver Data 164

C ONTENTS
– 13 –
Configuring Transceiver Thresholds 165
Performing Cable Diagnostics 168
Trunk Configuration 170
Configuring a Static Trunk 171
Configuring a Dynamic Trunk 173
Displaying LACP Port Counters 179
Displaying LACP Settings and Status for the Local Side 180
Displaying LACP Settings and Status for the Remote Side 182
Configuring Load Balancing 183
Saving Power 185
Traffic Segmentation 187
Enabling Traffic Segmentation 187
Configuring Uplink and Downlink Ports 188
VLAN Trunking 190
6 VLAN CONFIGURATION 193
IEEE 802.1Q VLANs 193
Configuring VLAN Groups 196
Adding Static Members to VLANs 198
Configuring Dynamic VLAN Registration 203
IEEE 802.1Q Tunneling 206
Enabling QinQ Tunneling on the Switch 210
Creating CVLAN to SPVLAN Mapping Entries 211
Adding an Interface to a QinQ Tunnel 213
Protocol VLANs 214
Configuring Protocol VLAN Groups 215
Mapping Protocol Groups to Interfaces 216
Configuring IP Subnet VLANs 219
Configuring MAC-based VLANs 221
Configuring VLAN Mirroring 222
Configuring VLAN Translation 224
7ADDRESS TABLE SETTINGS 227
Configuring MAC Address Learning 227
Setting Static Addresses 229
Changing the Aging Time 231
Displaying the Dynamic Address Table 232
Clearing the Dynamic Address Table 233

C ONTENTS
– 14 –
Configuring MAC Address Mirroring 234
8SPANNING TREE ALGORITHM 237
Overview 237
Configuring Loopback Detection 240
Configuring Global Settings for STA 242
Displaying Global Settings for STA 247
Configuring Interface Settings for STA 248
Displaying Interface Settings for STA 252
Configuring Multiple Spanning Trees 255
Configuring Interface Settings for MSTP 259
9CONGESTION CONTROL 261
Rate Limiting 261
Storm Control 262
Automatic Traffic Control 264
Setting the ATC Timers 266
Configuring ATC Thresholds and Responses 267
10 CLASS OF SERVICE 271
Layer 2 Queue Settings 271
Setting the Default Priority for Interfaces 271
Selecting the Queue Mode 272
Mapping CoS Values to Egress Queues 275
Layer 3/4 Priority Settings 278
Setting Priority Processing to DSCP or CoS 278
Mapping Ingress DSCP Values to Internal DSCP Values 279
Mapping CoS Priorities to Internal DSCP Values 282
11 QUALITY OF SERVICE 285
Overview 285
Configuring a Class Map 286
Creating QoS Policies 289
Attaching a Policy Map to a Port 299
12 VOIP TRAFFIC CONFIGURATION 301
Overview 301
Configuring VoIP Traffic 302
Configuring Telephony OUI 303
Configuring VoIP Traffic Ports 305

C ONTENTS
– 15 –
13 SECURITY MEASURES 307
AAA Authorization and Accounting 308
Configuring Local/Remote Logon Authentication 309
Configuring Remote Logon Authentication Servers 310
Configuring AAA Accounting 315
Configuring AAA Authorization 321
Configuring User Accounts 324
Web Authentication 326
Configuring Global Settings for Web Authentication 326
Configuring Interface Settings for Web Authentication 327
Network Access (MAC Address Authentication) 329
Configuring Global Settings for Network Access 331
Configuring Network Access for Ports 332
Configuring Port Link Detection 334
Configuring a MAC Address Filter 335
Displaying Secure MAC Address Information 337
Configuring HTTPS 338
Configuring Global Settings for HTTPS 338
Replacing the Default Secure-site Certificate 340
Configuring the Secure Shell 342
Configuring the SSH Server 344
Generating the Host Key Pair 346
Importing User Public Keys 347
Access Control Lists 349
Setting a Time Range 351
Showing TCAM Utilization 353
Setting the ACL Name and Type 354
Configuring a Standard IPv4 ACL 356
Configuring an Extended IPv4 ACL 358
Configuring a Standard IPv6 ACL 360
Configuring an Extended IPv6 ACL 362
Configuring a MAC ACL 364
Configuring an ARP ACL 366
Binding a Port to an Access Control List 368
Configuring ACL Mirroring 369
Showing ACL Hardware Counters 371

C ONTENTS
– 16 –
ARP Inspection 372
Configuring Global Settings for ARP Inspection 373
Configuring VLAN Settings for ARP Inspection 375
Configuring Interface Settings for ARP Inspection 377
Displaying ARP Inspection Statistics 378
Displaying the ARP Inspection Log 379
Filtering IP Addresses for Management Access 380
Configuring Port Security 382
Configuring 802.1X Port Authentication 384
Configuring 802.1X Global Settings 386
Configuring Port Authenticator Settings for 802.1X 387
Configuring Port Supplicant Settings for 802.1X 391
Displaying 802.1X Statistics 393
DoS Protection 396
IPv4 Source Guard 398
Configuring Ports for IP Source Guard 399
Configuring Static Bindings for IP Source Guard 401
Displaying Information for Dynamic IPv4 Source Guard Bindings 403
IPv6 Source Guard 404
Configuring Ports for IPv6 Source Guard 404
Configuring Static Bindings for IPv6 Source Guard 406
Displaying Information for Dynamic IPv6 Source Guard Bindings 409
DHCP Snooping 410
DHCP Snooping Configuration 412
DHCP Snooping VLAN Configuration 414
Configuring Ports for DHCP Snooping 415
Displaying DHCP Snooping Binding Information 416
14 BASIC ADMINISTRATION PROTOCOLS 419
Configuring Event Logging 420
System Log Configuration 420
Remote Log Configuration 422
Sending Simple Mail Transfer Protocol Alerts 423
Link Layer Discovery Protocol 424
Setting LLDP Timing Attributes 425
Configuring LLDP Interface Attributes 427
Configuring LLDP Interface Civic-Address 430

C ONTENTS
– 17 –
Displaying LLDP Local Device Information 432
Displaying LLDP Remote Device Information 436
Displaying Device Statistics 444
Simple Network Management Protocol 446
Configuring Global Settings for SNMP 448
Setting the Local Engine ID 449
Specifying a Remote Engine ID 450
Setting SNMPv3 Views 452
Configuring SNMPv3 Groups 455
Setting Community Access Strings 460
Configuring Local SNMPv3 Users 461
Configuring Remote SNMPv3 Users 463
Specifying Trap Managers 466
Creating SNMP Notification Logs 470
Showing SNMP Statistics 472
Remote Monitoring 474
Configuring RMON Alarms 475
Configuring RMON Events 477
Configuring RMON History Samples 479
Configuring RMON Statistical Samples 482
Switch Clustering 484
Configuring General Settings for Clusters 485
Cluster Member Configuration 486
Managing Cluster Members 488
Ethernet Ring Protection Switching 489
ERPS Global Configuration 493
ERPS Ring Configuration 494
ERPS Forced and Manual Mode Operations 510
Connectivity Fault Management 514
Configuring Global Settings for CFM 517
Configuring Interfaces for CFM 521
Configuring CFM Maintenance Domains 521
Configuring CFM Maintenance Associations 526
Configuring Maintenance End Points 531
Configuring Remote Maintenance End Points 533
Transmitting Link Trace Messages 535

C ONTENTS
– 18 –
Transmitting Loop Back Messages 536
Transmitting Delay-Measure Requests 538
Displaying Local MEPs 540
Displaying Details for Local MEPs 541
Displaying Local MIPs 543
Displaying Remote MEPs 544
Displaying Details for Remote MEPs 545
Displaying the Link Trace Cache 547
Displaying Fault Notification Settings 549
Displaying Continuity Check Errors 550
OAM Configuration 551
Enabling OAM on Local Ports 551
Displaying Statistics for OAM Messages 554
Displaying the OAM Event Log 555
Displaying the Status of Remote Interfaces 556
Configuring a Remote Loop Back Test 557
Displaying Results of Remote Loop Back Testing 559
15 IP CONFIGURATION 561
Using the Ping Function 561
Using the Trace Route Function 563
Address Resolution Protocol 564
Setting the ARP Timeout 565
Displaying ARP Entries 566
Setting the Switch’s IP Address (IP Version 4) 566
Configuring the IPv4 Default Gateway 566
Configuring IPv4 Interface Settings 567
Setting the Switch’s IP Address (IP Version 6) 570
Configuring the IPv6 Default Gateway 571
Configuring IPv6 Interface Settings 571
Configuring an IPv6 Address 576
Showing IPv6 Addresses 579
Showing the IPv6 Neighbor Cache 580
Showing IPv6 Statistics 581
Showing the MTU for Responding Destinations 587

C ONTENTS
– 19 –
16 IP SERVICES 589
Domain Name Service 589
Configuring General DNS Service Parameters 589
Configuring a List of Domain Names 590
Configuring a List of Name Servers 592
Configuring Static DNS Host to Address Entries 593
Displaying the DNS Cache 594
Dynamic Host Configuration Protocol 595
Specifying A DHCP Client Identifier 595
Configuring DHCP Relay Option 82 596
Configuring the PPPoE Intermediate Agent 600
Configuring PPPoE IA Global Settings 600
Configuring PPPoE IA Interface Settings 602
Showing PPPoE IA Statistics 604
17 MULTICAST FILTERING 607
Overview 607
Layer 2 IGMP (Snooping and Query for IPv4) 608
Configuring IGMP Snooping and Query Parameters 610
Specifying Static Interfaces for a Multicast Router 614
Assigning Interfaces to Multicast Services 616
Setting IGMP Snooping Status per Interface 618
Filtering IGMP Query Packets and Multicast Data 623
Displaying Multicast Groups Discovered by IGMP Snooping 624
Displaying IGMP Snooping Statistics 625
Filtering and Throttling IGMP Groups 629
Enabling IGMP Filtering and Throttling 629
Configuring IGMP Filter Profiles 630
Configuring IGMP Filtering and Throttling for Interfaces 632
MLD Snooping (Snooping and Query for IPv6) 634
Configuring MLD Snooping and Query Parameters 634
Setting Immediate Leave Status for MLD Snooping per Interface 636
Specifying Static Interfaces for an IPv6 Multicast Router 637
Assigning Interfaces to IPv6 Multicast Services 639
Showing MLD Snooping Groups and Source List 641
Multicast VLAN Registration for IPv4 642
Configuring MVR Global Settings 643

C ONTENTS
– 20 –
Configuring MVR Domain Settings 646
Configuring MVR Group Address Profiles 647
Configuring MVR Interface Status 650
Assigning Static MVR Multicast Groups to Interfaces 652
Displaying MVR Receiver Groups 654
Displaying MVR Statistics 655
Multicast VLAN Registration for IPv6 659
Configuring MVR6 Global Settings 660
Configuring MVR6 Domain Settings 662
Configuring MVR6 Group Address Profiles 663
Configuring MVR6 Interface Status 666
Assigning Static MVR6 Multicast Groups to Interfaces 669
Displaying MVR6 Receiver Groups 670
Displaying MVR6 Statistics 671
SECTION III COMMAND LINE INTERFACE 677
18 USING THE COMMAND LINE INTERFACE 679
Accessing the CLI 679
Console Connection 679
Telnet Connection 680
Entering Commands 681
Keywords and Arguments 681
Minimum Abbreviation 681
Command Completion 681
Getting Help on Commands 682
Partial Keyword Lookup 684
Negating the Effect of Commands 684
Using Command History 684
Understanding Command Modes 684
Exec Commands 685
Configuration Commands 686
Command Line Processing 688
CLI Command Groups 689
19 GENERAL COMMANDS 691
prompt 691