Edge-Core ES4612 Programming manual

thereisnoedgelimitthereisnopermanentcore
thereisnoedgelimitthereisnopermanentcore
Gigabit Ethernet Switch
Management Guide

Management Guide
Gigabit Ethernet Switch
Layer 3 Workgroup Switch with 8 SFP Ports,
and 4 Gigabit Combination (RJ-45/SFP) Ports

ES4612
F1.0.2.5 E092004-R01
150000046400A

v
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Saving Configuration Settings 2-8
Managing System Files 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-11
Displaying System Information 3-11
Displaying Switch Hardware/Software Versions 3-12
Displaying Bridge Extension Capabilities 3-14
Setting the Switch’s IP Address 3-15
Manual Configuration 3-16
Using DHCP/BOOTP 3-18
Managing Firmware 3-19
Downloading System Software from a Server 3-20
Saving or Restoring Configuration Settings 3-22
Downloading Configuration Settings from a Server 3-23

Contents
vi
Console Port Settings 3-24
Telnet Settings 3-26
Configuring Event Logging 3-28
System Log Configuration 3-28
Remote Log Configuration 3-30
Displaying Log Messages 3-32
Resetting the System 3-32
Setting the System Clock 3-33
Configuring SNTP 3-33
Setting the Time Zone 3-34
Simple Network Management Protocol 3-35
Enabling the SNMP Agent 3-36
Setting Community Access Strings 3-36
Specifying Trap Managers and Trap Types 3-37
Configuring SNMPv3 Management Access 3-38
Setting an Engine ID 3-38
Configuring SNMPv3 Users 3-39
Configuring SNMPv3 Groups 3-41
Setting SNMPv3 Views 3-43
User Authentication 3-44
Configuring User Accounts 3-44
Configuring Local/Remote Logon Authentication 3-46
Configuring HTTPS 3-48
Replacing the Default Secure-site Certificate 3-49
Configuring the Secure Shell 3-50
Generating the Host Key Pair 3-52
Configuring the SSH Server 3-54
Configuring Port Security 3-55
Configuring 802.1x Port Authentication 3-57
Displaying 802.1x Global Settings 3-58
Configuring 802.1x Global Settings 3-60
Configuring Port Authorization Mode 3-61
Displaying 802.1x Statistics 3-62
Filtering IP Addresses for Management Access 3-64
Access Control Lists 3-66
Configuring Access Control Lists 3-66
Setting the ACL Name and Type 3-67
Configuring a Standard IP ACL 3-67
Configuring an Extended IP ACL 3-69
Configuring a MAC ACL 3-71
Configuring ACL Masks 3-73
Specifying the Mask Type 3-73
Configuring an IP ACL Mask 3-74
Configuring a MAC ACL Mask 3-76
Binding a Port to an Access Control List 3-77

Contents
vii
Port Configuration 3-78
Displaying Connection Status 3-78
Configuring Interface Connections 3-81
Creating Trunk Groups 3-83
Statically Configuring a Trunk 3-84
Enabling LACP on Selected Ports 3-85
Configuring LACP Parameters 3-87
Displaying LACP Port Counters 3-89
Displaying LACP Settings and Status for the Local Side 3-90
Displaying LACP Settings and Status for the Remote Side 3-92
Setting Broadcast Storm Thresholds 3-93
Configuring Port Mirroring 3-95
Configuring Rate Limits 3-96
Showing Port Statistics 3-97
Address Table Settings 3-101
Setting Static Addresses 3-101
Displaying the Address Table 3-102
Changing the Aging Time 3-104
Spanning Tree Algorithm Configuration 3-104
Displaying Global Settings 3-105
Configuring Global Settings 3-108
Displaying Interface Settings 3-112
Configuring Interface Settings 3-115
Configuring Multiple Spanning Trees 3-117
Displaying Interface Settings for MSTP 3-120
Configuring Interface Settings for MSTP 3-121
VLAN Configuration 3-123
Configuring IEEE 802.1Q VLANs 3-123
Enabling or Disabling GVRP (Global Setting) 3-126
Displaying Basic VLAN Information 3-126
Displaying Current VLANs 3-127
Creating VLANs 3-128
Adding Static Members to VLANs (VLAN Index) 3-129
Adding Static Members to VLANs (Port Index) 3-131
Configuring VLAN Behavior for Interfaces 3-132
Configuring Private VLANs 3-134
Enabling Private VLANs 3-134
Configuring Uplink and Downlink Ports 3-135
Configuring Protocol-Based VLANs 3-135
Configuring Protocol Groups 3-136
Mapping Protocols to VLANs 3-136
Class of Service Configuration 3-138
Layer 2 Queue Settings 3-138
Setting the Default Priority for Interfaces 3-138
Mapping CoS Values to Egress Queues 3-140

Contents
viii
Selecting the Queue Mode 3-142
Setting the Service Weight for Traffic Classes 3-142
Layer 3/4 Priority Settings 3-144
Mapping Layer 3/4 Priorities to CoS Values 3-144
Selecting IP Precedence/DSCP Priority 3-144
Mapping IP Precedence 3-145
Mapping DSCP Priority 3-146
Mapping IP Port Priority 3-148
Mapping CoS Values to ACLs 3-149
Changing Priorities Based on ACL Rules 3-150
Multicast Filtering 3-152
IGMP Protocol 3-152
Layer 2 IGMP (Snooping and Query) 3-153
Configuring IGMP Snooping and Query Parameters 3-154
Displaying Interfaces Attached to a Multicast Router 3-156
Specifying Static Interfaces for a Multicast Router 3-157
Displaying Port Members of Multicast Services 3-158
Assigning Ports to Multicast Services 3-159
Layer 3 IGMP (Query used with Multicast Routing) 3-160
Configuring IGMP Interface Parameters 3-160
Displaying Multicast Group Information 3-163
Configuring Domain Name Service 3-164
Configuring General DNS Server Parameters 3-164
Configuring Static DNS Host to Address Entries 3-166
Displaying the DNS Cache 3-168
Dynamic Host Configuration Protocol 3-169
Configuring DHCP Relay Service 3-169
Configuring the DHCP Server 3-171
Enabling the Server, Setting Excluded Addresses 3-171
Configuring Address Pools 3-173
Displaying Address Bindings 3-177
Configuring Router Redundancy 3-178
Virtual Router Redundancy Protocol 3-179
Configuring VRRP Groups 3-179
Displaying VRRP Global Statistics 3-184
Displaying VRRP Group Statistics 3-185
Hot Standby Router Protocol 3-186
Configuring HSRP Groups 3-186
IP Routing 3-193
Overview 3-193
Initial Configuration 3-193
IP Switching 3-194
Routing Path Management 3-195
Routing Protocols 3-195
Basic IP Interface Configuration 3-196

Contents
ix
Configuring IP Routing Interfaces 3-197
Address Resolution Protocol 3-199
Proxy ARP 3-199
Basic ARP Configuration 3-200
Configuring Static ARP Addresses 3-201
Displaying Dynamically Learned ARP Entries 3-202
Displaying Local ARP Entries 3-203
Displaying ARP Statistics 3-204
Displaying Statistics for IP Protocols 3-205
IP Statistics 3-205
ICMP Statistics 3-207
UDP Statistics 3-209
TCP Statistics 3-210
Configuring Static Routes 3-211
Displaying the Routing Table 3-212
Configuring the Routing Information Protocol 3-213
Configuring General Protocol Settings 3-214
Specifying Network Interfaces for RIP 3-216
Configuring Network Interfaces for RIP 3-217
Displaying RIP Information and Statistics 3-220
Configuring the Open Shortest Path First Protocol 3-223
Configuring General Protocol Settings 3-224
Configuring OSPF Areas 3-227
Configuring Area Ranges (Route Summarization for ABRs) 3-230
Configuring OSPF Interfaces 3-232
Configuring Virtual Links 3-236
Configuring Network Area Addresses 3-238
Configuring Summary Addresses (for External AS Routes) 3-241
Redistributing External Routes 3-242
Configuring NSSA Settings 3-243
Displaying Link State Database Information 3-245
Displaying Information on Border Routers 3-247
Displaying Information on Neighbor Routers 3-248
Multicast Routing 3-249
Configuring Global Settings for Multicast Routing 3-249
Displaying the Multicast Routing Table 3-250
Configuring DVMRP 3-253
Configuring Global DVMRP Settings 3-253
Configuring DVMRP Interface Settings 3-256
Displaying Neighbor Information 3-258
Displaying the Routing Table 3-259
Configuring PIM-DM 3-260
Configuring Global PIM-DM Settings 3-260
Configuring PIM-DM Interface Settings 3-261
Displaying Interface Information 3-264

Contents
x
Displaying Neighbor Information 3-264
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-1
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-6
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-9
Command Groups 4-10
Line Commands 4-11
line 4-12
login 4-12
password 4-13
timeout login response 4-14
exec-timeout 4-15
password-thresh 4-15
silent-time 4-16
databits 4-17
parity 4-17
speed 4-18
stopbits 4-18
disconnect 4-19
show line 4-19
General Commands 4-20
enable 4-21
disable 4-21
configure 4-22
show history 4-22
reload 4-23
end 4-24
exit 4-24
quit 4-24