Edge-Core ES4625 Programming manual

Powered by Accton
Management Guide
ES4625/ES4649
24/48-Port Gigabit Ethernet
Stackable Layer 3 Switch

Management Guide
Gigabit Ethernet Switch
Layer 3 Switch
with 20/44 RJ-45 Ports,
4 Combination Ports (SFP/RJ-45),
1 Extender Module Slot,
and 2 Stacking Ports

ES4625
ES4649
F3.1.1.21 E042005-R01
149100022900A

v
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Stack Operations 2-3
Selecting the Stack Master 2-3
Selecting the Backup Unit 2-4
Recovering from Stack Failure or Topology Change 2-4
Broken Link for Line and Wrap-around Topologies 2-4
Resilient IP Interface for Management Access 2-5
Resilient Configuration 2-5
Renumbering the Stack 2-5
Stack Limitations 2-5
Basic Configuration 2-6
Console Connection 2-6
Setting Passwords 2-7
Setting an IP Address 2-7
Manual Configuration 2-7
Dynamic Configuration 2-8
Enabling SNMP Management Access 2-9
Community Strings (for SNMP version 1 and 2c clients) 2-9
Trap Receivers 2-10
Configuring Access for SNMP Version 3 Clients 2-11
Saving Configuration Settings 2-11
Managing System Files 2-12
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-12
Displaying System Information 3-12

Contents
vi
Displaying Switch Hardware/Software Versions 3-13
Displaying Bridge Extension Capabilities 3-15
Configuring Support for Jumbo Frames 3-16
Setting the Switch’s IP Address 3-17
Manual Configuration 3-18
Using DHCP/BOOTP 3-19
Managing Firmware 3-20
Downloading System Software from a Server 3-21
Saving or Restoring Configuration Settings 3-23
Downloading Configuration Settings from a Server 3-24
Console Port Settings 3-25
Telnet Settings 3-27
Configuring Event Logging 3-29
System Log Configuration 3-29
Remote Log Configuration 3-30
Displaying Log Messages 3-32
Sending Simple Mail Transfer Protocol Alerts 3-32
Renumbering the Stack 3-34
Resetting the System 3-35
Setting the System Clock 3-35
Configuring SNTP 3-35
Setting the Time Zone 3-36
Simple Network Management Protocol 3-37
Enabling the SNMP Agent 3-39
Setting Community Access Strings 3-39
Specifying Trap Managers and Trap Types 3-40
Configuring SNMPv3 Management Access 3-42
Setting a Local Engine ID 3-43
Specifying a Remote Engine ID 3-43
Configuring SNMPv3 Users 3-44
Configuring Remote SNMPv3 Users 3-46
Configuring SNMPv3 Groups 3-48
Setting SNMPv3 Views 3-52
User Authentication 3-53
Configuring User Accounts 3-53
Configuring Local/Remote Logon Authentication 3-55
Configuring HTTPS 3-58
Replacing the Default Secure-site Certificate 3-59
Configuring the Secure Shell 3-60
Generating the Host Key Pair 3-61
Configuring the SSH Server 3-63
Configuring Port Security 3-65
Configuring 802.1X Port Authentication 3-67
Displaying 802.1X Global Settings 3-68
Configuring 802.1X Global Settings 3-69

Contents
vii
Configuring Port Settings for 802.1X 3-69
Displaying 802.1X Statistics 3-72
Filtering IP Addresses for Management Access 3-74
Access Control Lists 3-76
Configuring Access Control Lists 3-76
Setting the ACL Name and Type 3-77
Configuring a Standard IP ACL 3-77
Configuring an Extended IP ACL 3-78
Configuring a MAC ACL 3-81
Configuring ACL Masks 3-83
Specifying the Mask Type 3-83
Configuring an IP ACL Mask 3-84
Configuring a MAC ACL Mask 3-86
Binding a Port to an Access Control List 3-87
Port Configuration 3-88
Displaying Connection Status 3-88
Configuring Interface Connections 3-91
Creating Trunk Groups 3-93
Statically Configuring a Trunk 3-94
Enabling LACP on Selected Ports 3-95
Configuring LACP Parameters 3-97
Displaying LACP Port Counters 3-100
Displaying LACP Settings and Status for the Local Side 3-101
Displaying LACP Settings and Status for the Remote Side 3-103
Setting Broadcast Storm Thresholds 3-104
Configuring Port Mirroring 3-106
Configuring Rate Limits 3-107
Showing Port Statistics 3-108
Address Table Settings 3-112
Setting Static Addresses 3-112
Displaying the Address Table 3-113
Changing the Aging Time 3-115
Spanning Tree Algorithm Configuration 3-115
Displaying Global Settings 3-116
Configuring Global Settings 3-119
Displaying Interface Settings 3-123
Configuring Interface Settings 3-126
Configuring Multiple Spanning Trees 3-128
Displaying Interface Settings for MSTP 3-132
Configuring Interface Settings for MSTP 3-133
VLAN Configuration 3-135
IEEE 802.1Q VLANs 3-135
Enabling or Disabling GVRP (Global Setting) 3-138
Displaying Basic VLAN Information 3-138
Displaying Current VLANs 3-139

Contents
viii
Creating VLANs 3-140
Adding Static Members to VLANs (VLAN Index) 3-141
Adding Static Members to VLANs (Port Index) 3-143
Configuring VLAN Behavior for Interfaces 3-144
Configuring Private VLANs 3-146
Enabling Private VLANs 3-146
Configuring Uplink and Downlink Ports 3-147
Configuring Protocol-Based VLANs 3-147
Configuring Protocol Groups 3-148
Mapping Protocols to VLANs 3-149
Class of Service Configuration 3-150
Layer 2 Queue Settings 3-150
Setting the Default Priority for Interfaces 3-150
Mapping CoS Values to Egress Queues 3-152
Selecting the Queue Mode 3-154
Setting the Service Weight for Traffic Classes 3-154
Layer 3/4 Priority Settings 3-156
Mapping Layer 3/4 Priorities to CoS Values 3-156
Selecting IP Precedence/DSCP Priority 3-156
Mapping IP Precedence 3-157
Mapping DSCP Priority 3-158
Mapping IP Port Priority 3-160
Quality of Service 3-161
Configuring Quality of Service Parameters 3-162
Configuring a Class Map 3-162
Creating QoS Policies 3-165
Attaching a Policy Map to Ingress Queues 3-168
Multicast Filtering 3-169
IGMP Protocol 3-169
Layer 2 IGMP (Snooping and Query) 3-170
Configuring IGMP Snooping and Query Parameters 3-171
Displaying Interfaces Attached to a Multicast Router 3-173
Specifying Static Interfaces for a Multicast Router 3-174
Displaying Port Members of Multicast Services 3-175
Assigning Ports to Multicast Services 3-176
Layer 3 IGMP (Query used with Multicast Routing) 3-177
Configuring IGMP Interface Parameters 3-177
Displaying Multicast Group Information 3-180
Configuring Domain Name Service 3-181
Configuring General DNS Server Parameters 3-181
Configuring Static DNS Host to Address Entries 3-183
Displaying the DNS Cache 3-185
Dynamic Host Configuration Protocol 3-186
Configuring DHCP Relay Service 3-186
Configuring the DHCP Server 3-188

Contents
ix
Enabling the Server, Setting Excluded Addresses 3-188
Configuring Address Pools 3-190
Displaying Address Bindings 3-194
Configuring Router Redundancy 3-195
Virtual Router Redundancy Protocol 3-196
Configuring VRRP Groups 3-196
Displaying VRRP Global Statistics 3-201
Displaying VRRP Group Statistics 3-202
IP Routing 3-204
Overview 3-204
Initial Configuration 3-204
IP Switching 3-205
Routing Path Management 3-206
Routing Protocols 3-206
Basic IP Interface Configuration 3-207
Configuring IP Routing Interfaces 3-208
Address Resolution Protocol 3-210
Proxy ARP 3-210
Basic ARP Configuration 3-211
Configuring Static ARP Addresses 3-212
Displaying Dynamically Learned ARP Entries 3-213
Displaying Local ARP Entries 3-214
Displaying ARP Statistics 3-215
Displaying Statistics for IP Protocols 3-216
IP Statistics 3-216
ICMP Statistics 3-218
UDP Statistics 3-220
TCP Statistics 3-221
Configuring Static Routes 3-222
Displaying the Routing Table 3-223
Configuring the Routing Information Protocol 3-224
Configuring General Protocol Settings 3-225
Specifying Network Interfaces for RIP 3-227
Configuring Network Interfaces for RIP 3-228
Displaying RIP Information and Statistics 3-231
Configuring the Open Shortest Path First Protocol 3-234
Configuring General Protocol Settings 3-235
Configuring OSPF Areas 3-238
Configuring Area Ranges (Route Summarization for ABRs) 3-241
Configuring OSPF Interfaces 3-243
Configuring Virtual Links 3-247
Configuring Network Area Addresses 3-249
Configuring Summary Addresses (for External AS Routes) 3-252
Redistributing External Routes 3-253
Configuring NSSA Settings 3-254

Contents
x
Displaying Link State Database Information 3-256
Displaying Information on Border Routers 3-258
Displaying Information on Neighbor Routers 3-259
Multicast Routing 3-260
Configuring Global Settings for Multicast Routing 3-260
Displaying the Multicast Routing Table 3-261
Configuring DVMRP 3-264
Configuring Global DVMRP Settings 3-264
Configuring DVMRP Interface Settings 3-267
Displaying Neighbor Information 3-269
Displaying the Routing Table 3-270
Configuring PIM-DM 3-271
Configuring Global PIM-DM Settings 3-271
Configuring PIM-DM Interface Settings 3-272
Displaying Interface Information 3-275
Displaying Neighbor Information 3-275
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-1
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-6
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-9
Command Groups 4-10
Line Commands 4-11
line 4-12
login 4-12
password 4-13
timeout login response 4-14
exec-timeout 4-15
password-thresh 4-15
silent-time 4-16