Edge-Core ES4612 Programming manual

thereisnoedgelimitthereisnopermanentcore
thereisnoedgelimitthereisnopermanentcore
Gigabit Ethernet Switch
Management Guide

Management Guide
Gigabit Ethernet Switch
Layer 3 Workgroup Switch with 8 SFP Ports,
and 4 Gigabit Combination (RJ-45/SFP) Ports

ES4612
F1.0.2.5 E092004-R01
150000046400A

v
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Saving Configuration Settings 2-8
Managing System Files 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-11
Displaying System Information 3-11
Displaying Switch Hardware/Software Versions 3-12
Displaying Bridge Extension Capabilities 3-14
Setting the Switch’s IP Address 3-15
Manual Configuration 3-16
Using DHCP/BOOTP 3-18
Managing Firmware 3-19
Downloading System Software from a Server 3-20
Saving or Restoring Configuration Settings 3-22
Downloading Configuration Settings from a Server 3-23

Contents
vi
Console Port Settings 3-24
Telnet Settings 3-26
Configuring Event Logging 3-28
System Log Configuration 3-28
Remote Log Configuration 3-30
Displaying Log Messages 3-32
Resetting the System 3-32
Setting the System Clock 3-33
Configuring SNTP 3-33
Setting the Time Zone 3-34
Simple Network Management Protocol 3-35
Enabling the SNMP Agent 3-36
Setting Community Access Strings 3-36
Specifying Trap Managers and Trap Types 3-37
Configuring SNMPv3 Management Access 3-38
Setting an Engine ID 3-38
Configuring SNMPv3 Users 3-39
Configuring SNMPv3 Groups 3-41
Setting SNMPv3 Views 3-43
User Authentication 3-44
Configuring User Accounts 3-44
Configuring Local/Remote Logon Authentication 3-46
Configuring HTTPS 3-48
Replacing the Default Secure-site Certificate 3-49
Configuring the Secure Shell 3-50
Generating the Host Key Pair 3-52
Configuring the SSH Server 3-54
Configuring Port Security 3-55
Configuring 802.1x Port Authentication 3-57
Displaying 802.1x Global Settings 3-58
Configuring 802.1x Global Settings 3-60
Configuring Port Authorization Mode 3-61
Displaying 802.1x Statistics 3-62
Filtering IP Addresses for Management Access 3-64
Access Control Lists 3-66
Configuring Access Control Lists 3-66
Setting the ACL Name and Type 3-67
Configuring a Standard IP ACL 3-67
Configuring an Extended IP ACL 3-69
Configuring a MAC ACL 3-71
Configuring ACL Masks 3-73
Specifying the Mask Type 3-73
Configuring an IP ACL Mask 3-74
Configuring a MAC ACL Mask 3-76
Binding a Port to an Access Control List 3-77

Contents
vii
Port Configuration 3-78
Displaying Connection Status 3-78
Configuring Interface Connections 3-81
Creating Trunk Groups 3-83
Statically Configuring a Trunk 3-84
Enabling LACP on Selected Ports 3-85
Configuring LACP Parameters 3-87
Displaying LACP Port Counters 3-89
Displaying LACP Settings and Status for the Local Side 3-90
Displaying LACP Settings and Status for the Remote Side 3-92
Setting Broadcast Storm Thresholds 3-93
Configuring Port Mirroring 3-95
Configuring Rate Limits 3-96
Showing Port Statistics 3-97
Address Table Settings 3-101
Setting Static Addresses 3-101
Displaying the Address Table 3-102
Changing the Aging Time 3-104
Spanning Tree Algorithm Configuration 3-104
Displaying Global Settings 3-105
Configuring Global Settings 3-108
Displaying Interface Settings 3-112
Configuring Interface Settings 3-115
Configuring Multiple Spanning Trees 3-117
Displaying Interface Settings for MSTP 3-120
Configuring Interface Settings for MSTP 3-121
VLAN Configuration 3-123
Configuring IEEE 802.1Q VLANs 3-123
Enabling or Disabling GVRP (Global Setting) 3-126
Displaying Basic VLAN Information 3-126
Displaying Current VLANs 3-127
Creating VLANs 3-128
Adding Static Members to VLANs (VLAN Index) 3-129
Adding Static Members to VLANs (Port Index) 3-131
Configuring VLAN Behavior for Interfaces 3-132
Configuring Private VLANs 3-134
Enabling Private VLANs 3-134
Configuring Uplink and Downlink Ports 3-135
Configuring Protocol-Based VLANs 3-135
Configuring Protocol Groups 3-136
Mapping Protocols to VLANs 3-136
Class of Service Configuration 3-138
Layer 2 Queue Settings 3-138
Setting the Default Priority for Interfaces 3-138
Mapping CoS Values to Egress Queues 3-140

Contents
viii
Selecting the Queue Mode 3-142
Setting the Service Weight for Traffic Classes 3-142
Layer 3/4 Priority Settings 3-144
Mapping Layer 3/4 Priorities to CoS Values 3-144
Selecting IP Precedence/DSCP Priority 3-144
Mapping IP Precedence 3-145
Mapping DSCP Priority 3-146
Mapping IP Port Priority 3-148
Mapping CoS Values to ACLs 3-149
Changing Priorities Based on ACL Rules 3-150
Multicast Filtering 3-152
IGMP Protocol 3-152
Layer 2 IGMP (Snooping and Query) 3-153
Configuring IGMP Snooping and Query Parameters 3-154
Displaying Interfaces Attached to a Multicast Router 3-156
Specifying Static Interfaces for a Multicast Router 3-157
Displaying Port Members of Multicast Services 3-158
Assigning Ports to Multicast Services 3-159
Layer 3 IGMP (Query used with Multicast Routing) 3-160
Configuring IGMP Interface Parameters 3-160
Displaying Multicast Group Information 3-163
Configuring Domain Name Service 3-164
Configuring General DNS Server Parameters 3-164
Configuring Static DNS Host to Address Entries 3-166
Displaying the DNS Cache 3-168
Dynamic Host Configuration Protocol 3-169
Configuring DHCP Relay Service 3-169
Configuring the DHCP Server 3-171
Enabling the Server, Setting Excluded Addresses 3-171
Configuring Address Pools 3-173
Displaying Address Bindings 3-177
Configuring Router Redundancy 3-178
Virtual Router Redundancy Protocol 3-179
Configuring VRRP Groups 3-179
Displaying VRRP Global Statistics 3-184
Displaying VRRP Group Statistics 3-185
Hot Standby Router Protocol 3-186
Configuring HSRP Groups 3-186
IP Routing 3-193
Overview 3-193
Initial Configuration 3-193
IP Switching 3-194
Routing Path Management 3-195
Routing Protocols 3-195
Basic IP Interface Configuration 3-196

Contents
ix
Configuring IP Routing Interfaces 3-197
Address Resolution Protocol 3-199
Proxy ARP 3-199
Basic ARP Configuration 3-200
Configuring Static ARP Addresses 3-201
Displaying Dynamically Learned ARP Entries 3-202
Displaying Local ARP Entries 3-203
Displaying ARP Statistics 3-204
Displaying Statistics for IP Protocols 3-205
IP Statistics 3-205
ICMP Statistics 3-207
UDP Statistics 3-209
TCP Statistics 3-210
Configuring Static Routes 3-211
Displaying the Routing Table 3-212
Configuring the Routing Information Protocol 3-213
Configuring General Protocol Settings 3-214
Specifying Network Interfaces for RIP 3-216
Configuring Network Interfaces for RIP 3-217
Displaying RIP Information and Statistics 3-220
Configuring the Open Shortest Path First Protocol 3-223
Configuring General Protocol Settings 3-224
Configuring OSPF Areas 3-227
Configuring Area Ranges (Route Summarization for ABRs) 3-230
Configuring OSPF Interfaces 3-232
Configuring Virtual Links 3-236
Configuring Network Area Addresses 3-238
Configuring Summary Addresses (for External AS Routes) 3-241
Redistributing External Routes 3-242
Configuring NSSA Settings 3-243
Displaying Link State Database Information 3-245
Displaying Information on Border Routers 3-247
Displaying Information on Neighbor Routers 3-248
Multicast Routing 3-249
Configuring Global Settings for Multicast Routing 3-249
Displaying the Multicast Routing Table 3-250
Configuring DVMRP 3-253
Configuring Global DVMRP Settings 3-253
Configuring DVMRP Interface Settings 3-256
Displaying Neighbor Information 3-258
Displaying the Routing Table 3-259
Configuring PIM-DM 3-260
Configuring Global PIM-DM Settings 3-260
Configuring PIM-DM Interface Settings 3-261
Displaying Interface Information 3-264

Contents
x
Displaying Neighbor Information 3-264
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-1
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-6
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-9
Command Groups 4-10
Line Commands 4-11
line 4-12
login 4-12
password 4-13
timeout login response 4-14
exec-timeout 4-15
password-thresh 4-15
silent-time 4-16
databits 4-17
parity 4-17
speed 4-18
stopbits 4-18
disconnect 4-19
show line 4-19
General Commands 4-20
enable 4-21
disable 4-21
configure 4-22
show history 4-22
reload 4-23
end 4-24
exit 4-24
quit 4-24

Contents
xi
System Management Commands 4-25
Device Designation Commands 4-25
prompt 4-26
hostname 4-26
User Access Commands 4-27
username 4-27
enable password 4-28
IP Filter Commands 4-29
management 4-29
show management 4-30
Web Server Commands 4-31
ip http port 4-31
ip http server 4-31
ip http secure-server 4-32
ip http secure-port 4-33
Telnet Server Commands 4-34
ip telnet port 4-34
ip telnet server 4-34
Secure Shell Commands 4-35
ip ssh server 4-37
ip ssh timeout 4-38
ip ssh authentication-retries 4-38
ip ssh server-key size 4-39
delete public-key 4-39
ip ssh crypto host-key generate 4-40
ip ssh crypto zeroize 4-40
ip ssh save host-key 4-41
show ip ssh 4-41
show ssh 4-42
show public-key 4-43
Event Logging Commands 4-44
logging on 4-44
logging history 4-45
logging host 4-46
logging facility 4-46
logging trap 4-47
clear logging 4-47
show logging 4-48
SMTP Alert Commands 4-49
logging sendmail host 4-50
logging sendmail level 4-50
logging sendmail source-email 4-51
logging sendmail destination-email 4-51
logging sendmail 4-52
show logging sendmail 4-52

Contents
xii
Time Commands 4-53
sntp client 4-53
sntp server 4-54
sntp poll 4-55
show sntp 4-55
clock timezone 4-56
calendar set 4-57
show calendar 4-57
System Status Commands 4-58
show startup-config 4-58
show running-config 4-59
show system 4-61
show users 4-62
show version 4-62
Frame Size Commands 4-63
jumbo frame 4-63
Flash/File Commands 4-64
copy 4-64
delete 4-67
dir 4-67
whichboot 4-68
boot system 4-69
Authentication Commands 4-70
Authentication Sequence 4-70
authentication login 4-70
authentication enable 4-71
RADIUS Client 4-72
radius-server host 4-72
radius-server port 4-73
radius-server key 4-73
radius-server retransmit 4-74
radius-server timeout 4-74
show radius-server 4-74
TACACS+ Client 4-75
tacacs-server host 4-75
tacacs-server port 4-76
tacacs-server key 4-76
show tacacs-server 4-77
Port Security Commands 4-77
port security 4-78
802.1x Port Authentication 4-79
authentication dot1x default 4-80
dot1x default 4-80
dot1x max-req 4-80
dot1x port-control 4-81

Contents
xiii
dot1x operation-mode 4-82
dot1x re-authenticate 4-82
dot1x re-authentication 4-83
dot1x timeout quiet-period 4-83
dot1x timeout re-authperiod 4-84
dot1x timeout tx-period 4-84
show dot1x 4-85
Access Control List Commands 4-87
IP ACLs 4-88
access-list ip 4-89
permit, deny (Standard ACL) 4-90
permit, deny (Extended ACL) 4-91
show ip access-list 4-93
access-list ip mask-precedence 4-93
mask (IP ACL) 4-94
show access-list ip mask-precedence 4-97
ip access-group 4-98
show ip access-group 4-98
map access-list ip 4-99
show map access-list ip 4-100
match access-list ip 4-100
show marking 4-101
MAC ACLs 4-102
access-list mac 4-102
permit, deny (MAC ACL) 4-103
show mac access-list 4-104
access-list mac mask-precedence 4-105
mask (MAC ACL) 4-106
show access-list mac mask-precedence 4-108
mac access-group 4-108
show mac access-group 4-109
map access-list mac 4-109
show map access-list mac 4-110
match access-list mac 4-111
ACL Information 4-112
show access-list 4-112
show access-group 4-112
SNMP Commands 4-113
snmp-server 4-113
show snmp 4-114
snmp-server community 4-115
snmp-server contact 4-115
snmp-server location 4-116
snmp-server host 4-117
snmp-server enable traps 4-118

Contents
xiv
snmp-server engine-id 4-119
show snmp engine-id 4-119
snmp-server view 4-120
show snmp view 4-121
snmp-server group 4-121
show snmp group 4-123
snmp-server user 4-124
show snmp user 4-125
snmp ip filter 4-125
DHCP Commands 4-126
DHCP Client 4-126
ip dhcp client-identifier 4-127
ip dhcp restart client 4-127
DHCP Relay 4-128
ip dhcp restart relay 4-128
ip dhcp relay server 4-129
DHCP Server 4-130
service dhcp 4-130
ip dhcp excluded-address 4-131
ip dhcp pool 4-131
network 4-132
default-router 4-133
domain-name 4-133
dns-server 4-134
next-server 4-134
bootfile 4-135
netbios-name-server 4-135
netbios-node-type 4-136
lease 4-136
host 4-137
client-identifier 4-138
hardware-address 4-139
clear ip dhcp binding 4-139
show ip dhcp binding 4-140
DNS Commands 4-141
ip host 4-141
clear host 4-142
ip domain-name 4-142
ip domain-list 4-143
ip name-server 4-144
ip domain-lookup 4-145
show hosts 4-146
show dns 4-147
show dns cache 4-147
clear dns cache 4-148

Contents
xv
Interface Commands 4-149
interface 4-149
description 4-150
speed-duplex 4-150
negotiation 4-151
capabilities 4-152
media-type 4-154
shutdown 4-154
switchport broadcast packet-rate 4-155
clear counters 4-156
show interfaces status 4-157
show interfaces counters 4-158
show interfaces switchport 4-159
Mirror Port Commands 4-160
port monitor 4-160
show port monitor 4-161
Rate Limit Commands 4-162
rate-limit 4-162
Link Aggregation Commands 4-163
channel-group 4-164
lacp 4-164
Address Table Commands 4-166
mac-address-table static 4-166
clear mac-address-table dynamic 4-167
show mac-address-table 4-167
mac-address-table aging-time 4-168
show mac-address-table aging-time 4-169
Spanning Tree Commands 4-169
spanning-tree 4-170
spanning-tree mode 4-171
spanning-tree forward-time 4-172
spanning-tree hello-time 4-173
spanning-tree max-age 4-173
spanning-tree priority 4-174
spanning-tree pathcost method 4-174
spanning-tree transmission-limit 4-175
spanning-tree mst-configuration 4-175
mst vlan 4-176
mst priority 4-177
name 4-177
revision 4-178
max-hops 4-179
spanning-tree spanning-disabled 4-179
spanning-tree cost 4-180
spanning-tree port-priority 4-180

Contents
xvi
spanning-tree edge-port 4-181
spanning-tree portfast 4-182
spanning-tree link-type 4-183
spanning-tree mst cost 4-183
spanning-tree mst port-priority 4-184
spanning-tree protocol-migration 4-185
show spanning-tree 4-186
show spanning-tree mst configuration 4-188
VLAN Commands 4-188
Editing VLAN Groups 4-189
vlan database 4-189
vlan 4-190
Configuring VLAN Interfaces 4-191
interface vlan 4-191
switchport mode 4-192
switchport acceptable-frame-types 4-192
switchport ingress-filtering 4-193
switchport native vlan 4-194
switchport allowed vlan 4-195
switchport forbidden vlan 4-196
Displaying VLAN Information 4-197
show vlan 4-197
Configuring Private VLANs 4-198
pvlan 4-198
show pvlan 4-199
Configuring Protocol-based VLANs 4-199
protocol-vlan protocol-group (Configuring Groups) 4-200
protocol-vlan protocol-group (Configuring Interfaces) 4-200
show protocol-vlan protocol-group 4-201
show interfaces protocol-vlan protocol-group 4-202
GVRP and Bridge Extension Commands 4-203
bridge-ext gvrp 4-203
show bridge-ext 4-204
switchport gvrp 4-204
show gvrp configuration 4-205
garp timer 4-205
show garp timer 4-206
Priority Commands 4-207
Priority Commands (Layer 2) 4-207
queue mode 4-208
switchport priority default 4-209
queue bandwidth 4-210
queue cos-map 4-210
show queue mode 4-211
show queue bandwidth 4-212

Contents
xvii
show queue cos-map 4-212
Priority Commands (Layer 3 and 4) 4-213
map ip port (Global Configuration) 4-213
map ip port (Interface Configuration) 4-214
map ip precedence (Global Configuration) 4-214
map ip precedence (Interface Configuration) 4-215
map ip dscp (Global Configuration) 4-216
map ip dscp (Interface Configuration) 4-216
show map ip port 4-217
show map ip precedence 4-218
show map ip dscp 4-219
Multicast Filtering Commands 4-220
IGMP Snooping Commands 4-221
ip igmp snooping 4-221
ip igmp snooping vlan static 4-221
ip igmp snooping version 4-222
show ip igmp snooping 4-222
show mac-address-table multicast 4-223
IGMP Query Commands (Layer 2) 4-224
ip igmp snooping querier 4-224
ip igmp snooping query-count 4-224
ip igmp snooping query-interval 4-225
ip igmp snooping query-max-response-time 4-226
ip igmp snooping router-port-expire-time 4-226
Static Multicast Routing Commands 4-227
ip igmp snooping vlan mrouter 4-227
show ip igmp snooping mrouter 4-228
IGMP Commands (Layer 3) 4-229
ip igmp 4-229
ip igmp robustval 4-230
ip igmp query-interval 4-231
ip igmp max-resp-interval 4-231
ip igmp last-memb-query-interval 4-232
ip igmp version 4-233
show ip igmp interface 4-233
clear ip igmp group 4-234
show ip igmp groups 4-235
IP Interface Commands 4-236
Basic IP Configuration 4-236
ip address 4-236
ip default-gateway 4-238
show ip interface 4-239
show ip redirects 4-239
ping 4-239
Address Resolution Protocol (ARP) 4-241

Contents
xviii
arp 4-241
arp-timeout 4-242
clear arp-cache 4-242
show arp 4-242
ip proxy-arp 4-243
IP Routing Commands 4-244
Global Routing Configuration 4-244
ip routing 4-244
ip route 4-245
clear ip route 4-246
show ip route 4-246
show ip host-route 4-247
show ip traffic 4-248
Routing Information Protocol (RIP) 4-248
router rip 4-249
timers basic 4-249
network 4-250
neighbor 4-251
version 4-252
ip rip receive version 4-253
ip rip send version 4-254
ip split-horizon 4-255
ip rip authentication key 4-255
ip rip authentication mode 4-256
show rip globals 4-257
show ip rip 4-257
Open Shortest Path First (OSPF) 4-259
router ospf 4-260
router-id 4-260
compatible rfc1583 4-261
default-information originate 4-262
timers spf 4-263
area range 4-264
area default-cost 4-264
summary-address 4-265
redistribute 4-266
network area 4-267
area stub 4-268
area nssa 4-269
area virtual-link 4-270
ip ospf authentication 4-272
ip ospf authentication-key 4-273
ip ospf message-digest-key 4-274
ip ospf cost 4-275
ip ospf dead-interval 4-275

Contents
xix
ip ospf hello-interval 4-276
ip ospf priority 4-276
ip ospf retransmit-interval 4-277
ip ospf transmit-delay 4-278
show ip ospf 4-278
show ip ospf border-routers 4-279
show ip ospf database 4-280
show ip ospf interface 4-288
show ip ospf neighbor 4-289
show ip ospf summary-address 4-290
show ip ospf virtual-links 4-290
Multicast Routing Commands 4-291
Static Multicast Routing Commands 4-291
ip igmp snooping vlan mrouter 4-291
show ip igmp snooping mrouter 4-292
General Multicast Routing Commands 4-293
ip multicast-routing 4-293
show ip mroute 4-293
DVMRP Multicast Routing Commands 4-295
router dvmrp 4-295
probe-interval 4-296
nbr-timeout 4-297
report-interval 4-297
flash-update-interval 4-298
prune-lifetime 4-298
default-gateway 4-299
ip dvmrp 4-299
ip dvmrp metric 4-300
clear ip dvmrp route 4-301
show router dvmrp 4-301
show ip dvmrp route 4-302
show ip dvmrp neighbor 4-303
show ip dvmrp interface 4-303
PIM-DM Multicast Routing Commands 4-304
router pim 4-304
ip pim dense-mode 4-305
ip pim hello-interval 4-306
ip pim hello-holdtime 4-306
ip pim trigger-hello-interval 4-307
ip pim join-prune-holdtime 4-307
ip pim graft-retry-interval 4-308
ip pim max-graft-retries 4-309
show router pim 4-309
show ip pim interface 4-309
show ip pim neighbor 4-310

Contents
xx
Router Redundancy Commands 4-311
Virtual Router Redundancy Protocol Commands 4-311
vrrp ip 4-312
vrrp authentication 4-313
vrrp priority 4-313
vrrp timers advertise 4-314
vrrp preempt 4-315
show vrrp 4-316
show vrrp interface 4-318
show vrrp router counters 4-318
show vrrp interface counters 4-319
clear vrrp router counters 4-319
clear vrrp interface counters 4-319
Hot Standby Router Protocol Commands 4-320
standby ip 4-321
standby priority 4-322
standby preempt 4-323
standby authentication 4-324
standby timers 4-325
standby track 4-326
show standby 4-327
show standby interface 4-329
Appendix A: Software Specifications A-1
Software Features A-1
Management Features A-2
Standards A-2
Management Information Bases A-3
Appendix B: Troubleshooting B-1
Problems Accessing the Management Interface B-1
Using System Logs B-2
Glossary
Index