Edge-Core ES4626 User manual

1
www.edge-core.com
ES4626/ES4650 L3 Gigabit
Ethernet Switch

2
Preface
ES4626/ES4650 L3 Gigabit Ethernet Switch is a high performance routing switch
released by Edge-Core that can be deployed as an aggregation device for campus
networks, enterprise networks, as well as core layer switches for small and medium-sized
networks.ES4626/ES4650 L3 Gigabit Ethernet Switch support a variety of network
interfaces from 100Mb, 1000Mb to 10 GB Ethernet.
We are providing this manual for your better understanding, use and maintenance of
the ES4626/ES4650 L3 Gigabit Ethernet Switch. We strongly recommend you to read
through this manual carefully before installation and configuration to avoid possible
malfunction or damage to the switch. Furthermore, we sincerely hope our products and
services satisfy you.

3
Content
CHAPTER 1 SWITCH MANAGEMENT.......................................................................... 20
1.1 MANAGEMENT OPTIONS ........................................................................................... 20
1.1.1 Out-Of-Band Management.............................................................................. 20
1.1.2 In-band Management...................................................................................... 23
1.1.3 Management Via Telnet .................................................................................. 24
1.1.4 Management Via HTTP................................................................................... 26
1.2 MANAGEMENT INTERFACE ........................................................................................ 29
1.2.1 CLI Interface ................................................................................................... 29
1.2.2 Configuration Modes....................................................................................... 29
1.2.3 Configuration Syntax....................................................................................... 32
1.2.4 Shortcut Key Support...................................................................................... 33
1.2.5 Help Function.................................................................................................. 33
1.2.6 Input Verification ............................................................................................. 34
1.2.7 Fuzzy Match Support ...................................................................................... 34
1.3 WEB MANAGEMENT ................................................................................................. 35
1.3.1 Main Page....................................................................................................... 35
1.3.2 Module Front Panel......................................................................................... 35
CHAPTER 2 BASIC SWITCH CONFIGURATION.......................................................... 37
2.1 BASIC SWITCH CONFIGURATION COMMANDS ............................................................. 37
2.1.1 Commands For Basic Configuration ............................................................... 37
2.2 MONITOR AND DEBUG COMMAND.............................................................................. 51
2.2.1 Ping................................................................................................................. 51
2.2.2 Ping6............................................................................................................... 51
2.2.3 Telnet .............................................................................................................. 51
2.2.4 SSH ................................................................................................................ 54
2.2.5 Traceroute....................................................................................................... 57
2.2.6 Traceroute6..................................................................................................... 58
2.2.7 Show............................................................................................................... 58
2.2.8 Debug ............................................................................................................. 64
2.2.9 System log ...................................................................................................... 64
2.3 CONFIGURATE SWITCH IP ADDRESSES...................................................................... 69
2.3.1 Switch IP Addresses Configuration Task List .................................................. 69
2.3.2 Commands For Configuring Switch IP ............................................................ 70
2.4 SNMP CONFIGURATION ........................................................................................... 72
2.4.1 Introduction To SNMP ..................................................................................... 72

4
2.4.2 SNMP Configuration Task List......................................................................... 74
2.4.3 Commands For SNMP.................................................................................... 76
2.4.4 Typical SNMP Configuration Examples........................................................... 86
2.4.5 SNMP Troubleshooting ................................................................................... 87
2.5 SWITCH UPGRADE ................................................................................................... 88
2.5.1 Switch System Files........................................................................................ 88
2.5.2 BootROM Upgrade ......................................................................................... 88
2.5.3 FTP/TFTP Upgrade......................................................................................... 91
2.5.4 FTP/TFTP Configuration Examples ................................................................ 99
2.5.5 FTP/TFTP Troubleshooting........................................................................... 103
2.6 SECURITY FEATURE CONFIGURATION...................................................................... 104
2.6.1 Security Feature Introduction ........................................................................ 104
2.6.2 Security Feature Configuration ..................................................................... 105
2.6.3 Security Feature Commands ........................................................................ 107
2.6.4 Security Feature Example..............................................................................110
2.7 JUMBO CONFIGURATION..........................................................................................110
2.7.1 Jumbo Introduction ........................................................................................110
2.7.2 Jumbo Configuration Task Sequence.............................................................111
2.7.3 Commands for Jumbo....................................................................................111
2.8 SFLOW CONFIGURATION..........................................................................................111
2.8.1 sFlow Introduction..........................................................................................111
2.8.2 sFlow Configuration Task ...............................................................................112
2.8.3 Commands For sFlow....................................................................................113
2.8.4 sFlow Examples.............................................................................................118
2.8.5 sFlow Troubleshooting ...................................................................................118
2.9 TACACS+ CONFIGURATION ....................................................................................119
2.9.1 TACACS+ Introduction ...................................................................................119
2.9.2 TACACS+ Configurations...............................................................................119
2.9.3 Commands for TACACS+ ............................................................................. 120
2.9.4 Typical TACACS+ Scenarios......................................................................... 122
2.9.5 TACACS+ Troubleshooting ........................................................................... 122
2.10 WEB MANAGEMENT ............................................................................................. 123
2.10.1 Switch Basic Configuration ......................................................................... 123
2.10.2 SNMP Configuration ................................................................................... 124
2.10.3 Switch upgrade ........................................................................................... 126
2.10.4 Commands for Monitor And Debug............................................................. 129
2.10.5 Switch Maintenance.................................................................................... 130
2.10.6 Telnet server configuration .......................................................................... 131

5
2.10.7 Telnet server user configuration .................................................................. 131
2.10.8 Telnet security IP......................................................................................... 132
CHAPTER 3 PORT CONFIGURATION........................................................................ 133
3.1 INTRODUCTION TO PORT ........................................................................................ 133
3.2 PORT CONFIGURATION........................................................................................... 133
3.2.1 Network Port Configuration ........................................................................... 133
3.2.2 VLAN Interface Configuration ....................................................................... 142
3.2.3 Network Management Port Configuration ..................................................... 144
3.3 PORT MIRRORING CONFIGURATION......................................................................... 147
3.3.1 Introduction to Port Mirroring......................................................................... 147
3.3.2 Port Mirroring Configuration Task List ........................................................... 148
3.3.3 Command For Mirroring Configuration.......................................................... 148
3.3.4 Device Mirroring Troubleshooting ................................................................. 149
3.4 PORT CONFIGURATION EXAMPLE ............................................................................ 150
3.5 PORT TROUBLESHOOTING ...................................................................................... 151
3.6 WEB MANAGEMENT ............................................................................................... 151
3.6.1 Ethernet port configuration............................................................................ 151
3.6.2 Physical port configuration............................................................................ 151
3.6.3 Bandwidth control ......................................................................................... 152
3.6.4 Vlan interface configuration........................................................................... 153
3.6.5 Allocate IP address for L3 port ...................................................................... 153
3.6.6 L3 port IP addr mode configuration............................................................... 153
3.6.7 Port mirroring configuration........................................................................... 154
3.6.8 Mirror configuration ....................................................................................... 154
3.6.9 Port debug and maintenance ........................................................................ 154
3.6.10 Show port information ................................................................................. 155
CHAPTER 4 PORT CHANNEL CONFIGURATION ..................................................... 156
4.1 INTRODUCTION TO PORT CHANNEL ......................................................................... 156
4.2 PORT CHANNEL CONFIGURATION TASK LIST ............................................................ 157
4.3 COMMANDS FOR PORT CHANNEL............................................................................. 158
4.3.1 debug lacp .................................................................................................... 158
4.3.2 port-group ..................................................................................................... 158
4.3.3 port-group mode ........................................................................................... 159
4.3.4 interface port-channel ................................................................................... 160
4.3.5 show port-group ............................................................................................ 160
4.4 PORT CHANNEL EXAMPLE ...................................................................................... 164
4.5 PORT CHANNEL TROUBLESHOOTING ....................................................................... 166

6
4.6 WEB MANAGEMENT ............................................................................................... 167
4.6.1 LACP port group configuration...................................................................... 167
4.6.2 LACP port configuration ................................................................................ 167
CHAPTER 5 VLAN CONFIGURATION........................................................................ 169
5.1 VLAN CONFIGURATION .......................................................................................... 169
5.1.1 Introduction To VLAN .................................................................................... 169
5.1.2 VLAN Configuration Task List ....................................................................... 170
5.1.3 Commands For Vlan Configuration............................................................... 172
5.1.4 Typical VLAN Application .............................................................................. 177
5.2 GVRP CONFIGURATION ......................................................................................... 179
5.2.1 Introduction to GVRP .................................................................................... 179
5.2.2 GVRP Configuration Task List....................................................................... 179
5.2.3 Commands for GVRP ................................................................................... 180
5.2.4 Typical GVRP Application ............................................................................. 183
5.2.5 GVRP Troubleshooting ................................................................................. 185
5.3 DOT1Q-TUNNEL CONFIGURATION............................................................................ 185
5.3.1 Dot1q-tunnel Introduction.............................................................................. 185
5.3.2 Dot1q-tunnel Configuration ........................................................................... 187
5.3.3 Dot1q-Tunnel Configuration Command......................................................... 187
5.3.4 Typical Applications Of The Dot1q-tunnel ..................................................... 189
5.3.5 Dot1q-tunnel Troubleshooting ....................................................................... 190
5.4 VLAN-TRANSLATION CONFIGURATION..................................................................... 190
5.4.1 VLAN-translation Introduction ....................................................................... 190
5.4.2 VLAN-translation Configuration..................................................................... 191
5.4.3 Commands for VLAN-Translation Configuration ........................................... 191
5.4.4 Typical application of VLAN-translation......................................................... 193
5.4.5 VLAN-translation Troubleshooting ................................................................ 194
5.5 DYNAMIC VLAN CONFIGURATION ........................................................................... 194
5.5.1 Dynamic VLAN Introduction .......................................................................... 194
5.5.2 Dynamic VLAN Configuration ....................................................................... 195
5.5.3 Typical Application Of The Dynamic VLAN ................................................... 202
5.5.4 Dynamic VLAN Troubleshooting ................................................................... 203
5.6 VOICE VLAN CONFIGURATION................................................................................ 204
5.6.1 Voice VLAN Introduction ............................................................................... 204
5.6.2 Voice VLAN Configuration............................................................................. 204
5.6.3 Typical Applications Of The Voice VLAN....................................................... 207
5.6.4 Voice VLAN Troubleshooting ........................................................................ 208

7
CHAPTER 6 MAC TABLE CONFIGURATION............................................................. 209
6.1 INTRODUCTION TO MAC TABLE............................................................................... 209
6.1.1 Obtaining MAC Table .................................................................................... 209
6.1.2 Forward or Filter.............................................................................................211
6.2 MAC ADDRESS TABLE CONFIGURATION TASK LIST ................................................... 212
6.3 COMMANDS FOR MAC ADDRESS TABLE CONFIGURATION .......................................... 212
6.3.1 mac-address-table aging-time....................................................................... 212
6.3.2 mac-address-table ........................................................................................ 213
6.3.3 show mac-address-table ............................................................................... 214
6.4 TYPICAL CONFIGURATION EXAMPLES ...................................................................... 214
6.5 TROUBLESHOOTING ............................................................................................... 215
6.6 MAC ADDRESS FUNCTION EXTENSION ................................................................... 215
6.6.1 MAC Address Binding ................................................................................... 215
CHAPTER 7 MSTP CONFIGURATION........................................................................ 223
7.1 MSTP INTRODUCTION............................................................................................ 223
7.1.1 MSTP Region................................................................................................ 223
7.1.2 Port Roles ..................................................................................................... 225
7.1.3 MSTP Load Balance ..................................................................................... 225
7.2 MSTP CONFIGURATION TASK LIST.......................................................................... 225
7.3 COMMANDS FOR MSTP ......................................................................................... 229
7.3.1 abort.............................................................................................................. 229
7.3.2 exit ................................................................................................................ 229
7.3.3 instance vlan ................................................................................................. 230
7.3.4 name............................................................................................................. 230
7.3.5 revision-level ................................................................................................. 231
7.3.6 spanning-tree ................................................................................................ 231
7.3.7 spanning-tree format..................................................................................... 232
7.3.8 spanning-tree forward-time ........................................................................... 233
7.3.9 spanning-tree hello-time................................................................................ 233
7.3.10 spanning-tree link-type p2p......................................................................... 233
7.3.11 spanning-tree maxage................................................................................. 234
7.3.12 spanning-tree max-hop ............................................................................... 234
7.3.13 spanning-tree mcheck................................................................................. 235
7.3.14 spanning-tree mode .................................................................................... 235
7.3.15 spanning-tree mst configuration.................................................................. 236
7.3.16 spanning-tree mst cost................................................................................ 236
7.3.17 spanning-tree mst port-priority .................................................................... 237

8
7.3.18 spanning-tree mst priority............................................................................ 237
7.3.19 spanning-tree portfast ................................................................................. 238
7.3.20 spanning-tree digest-snooping.................................................................... 238
7.3.21 spanning-tree tcflush (global mode)............................................................ 239
7.3.22 spanning-tree tcflush (port mode) ............................................................... 239
7.4 MSTP EXAMPLE.................................................................................................... 240
7.5 MSTP TROUBLESHOOTING .................................................................................... 245
7.5.1 Commands for Monitor And Debug............................................................... 245
7.6 WEB MANAGEMENT ............................................................................................... 249
7.6.1 MSTP field operation..................................................................................... 249
7.6.2 MSTP port operation ..................................................................................... 250
7.6.3 MSTP global control...................................................................................... 251
7.6.4 Show MSTP setting....................................................................................... 252
CHAPTER 8 QOS AND PBR CONFIGURATION......................................................... 254
8.1 QOSCONFIGURATION............................................................................................ 254
8.1.1 Introduction to QoS ....................................................................................... 254
8.1.2 QoS Configuration Task List.......................................................................... 259
8.1.3 Commands for QoS ...................................................................................... 263
8.1.4 QoS Example................................................................................................ 272
8.1.5 QoS Troubleshooting .................................................................................... 275
8.2 PBR CONFIGURATION ............................................................................................ 280
8.2.1 Introduction to PBR....................................................................................... 280
8.2.2 PBR configuration ......................................................................................... 280
8.2.3 PBR examples .............................................................................................. 280
CHAPTER 9 FLOW-BASED REDIRECTION............................................................... 282
9.1 INTRODUCTION TO FLOW-BASED REDIRECTION........................................................ 282
9.2 FLOW-BASED REDIRECTION CONFIGURATION TASK SEQUENCE ................................ 282
9.3 COMMAND FOR FLOW-BASED REDIRECTION ............................................................ 283
9.3.1 access-group <aclname> redirect to interface ethernet ................................ 283
9.3.2 show flow-based-redirect .............................................................................. 283
9.4 FLOW-BASED REDIRECTION EXAMPLES ................................................................... 284
9.5 FLOW-BASED REDIRECTION TROUBLESHOOTING HELP............................................. 284
CHAPTER 10 L3 FORWARD CONFIGURATION ........................................................ 285
10.1 LAYER 3INTERFACE ............................................................................................. 285
10.1.1 Introduction to Layer 3 Interface ................................................................. 285
10.1.2 Layer 3 Interface Configuration Task List .................................................... 285

9
10.1.3 Commands for Layer 3 Interface................................................................. 286
10.2 IP CONFIGURATION .............................................................................................. 286
10.2.1 Introduction to IPv4, IPv6............................................................................ 286
10.2.2 IP Configuration .......................................................................................... 289
10.2.3 IP Configuration Examples.......................................................................... 303
10.2.4 IP Troubleshooting ...................................................................................... 307
10.3 IP FORWARDING .................................................................................................. 317
10.3.1 Introduction to IP Forwarding ...................................................................... 317
10.3.2 IP Route Aggregation Configuration Task ................................................... 317
10.3.3 Commands for IP Route Aggregation.......................................................... 318
10.4 URPF................................................................................................................. 318
10.4.1 URPF Introduction ...................................................................................... 318
10.4.2 URPF Operation Mechanism ...................................................................... 319
10.4.3 URPF Configuration Task Sequence........................................................... 319
10.4.4 Commands For URPF................................................................................. 320
10.4.5 URPF Troubleshooting................................................................................ 321
10.5 ARP ................................................................................................................... 321
10.5.1 Introduction to ARP ..................................................................................... 321
10.5.2 ARP Configuration Task List........................................................................ 322
10.5.3 Commands for ARP Configuration .............................................................. 322
CHAPTER 11 DHCP CONFIGURATION...................................................................... 326
11.1 INTRODUCTION TO DHCP..................................................................................... 326
11.2 DHCP SERVER CONFIGURATION .......................................................................... 327
11.2.1 DHCP Sever Configuration Task List........................................................... 327
11.2.2 DHCP Server Configuration Commands ..................................................... 329
11.3 DHCP RELAY CONFIGURATION ............................................................................. 337
11.3.1 DHCP Relay Configuration Task List........................................................... 338
11.3.2 DHCP Relay Configuration Commands ...................................................... 339
11.4 DHCP CONFIGURATION EXAMPLE......................................................................... 341
11.5 DHCP TROUBLESHOOTING................................................................................... 344
11.5.1 Commands for Monitor and Debug ............................................................. 344
11.6 WEB MANAGEMENT.............................................................................................. 347
11.6.1 DHCP server configuration.......................................................................... 347
11.6.2 DHCP debugging ........................................................................................ 352
CHAPTER 12 DHCP OPTION 82 CONFIGURATION.................................................. 354
12.1 INTRODUCTION TO DHCP OPTION 82 .................................................................... 354
12.1.1 DHCP option 82 Message Structure ........................................................... 354

10
12.1.2 option 82 Working Mechanism.................................................................... 355
12.2 DHCP OPTION 82 CONFIGURATION....................................................................... 356
12.2.1 DHCP option 82 Configuration Task List ..................................................... 356
12.2.2 Command for DHCP option 82 ................................................................... 358
12.3 DHCP OPTION 82 APPLICATION EXAMPLES ........................................................... 361
12.4 DHCP OPTION 82 TROUBLESHOOTING HELP......................................................... 363
CHAPTER 13 DHCP SNOOPING CONFIGURATION.................................................. 365
13.1 INTRODUCTION TO DHCP SNOOPING.................................................................... 365
13.2 DHCP SNOOPING CONFIGURATION ...................................................................... 365
13.2.1 DHCP Snooping Configuration Task Sequence .......................................... 365
13.2.2 Command for DHCP Snooping Configuration............................................. 368
13.3 DHCP SNOOPING TYPICAL APPLICATION............................................................... 379
13.4 DHCP SNOOPING TROUBLESHOOTING HELP......................................................... 380
13.4.1 Monitor And Debug Information .................................................................. 380
13.4.2 DHCP Snooping Troubleshooting Help ....................................................... 380
CHAPTER 14 SNTP CONFIGURATION ...................................................................... 381
14.1 INTRODUCTION TO SNTP ..................................................................................... 381
14.2 COMMANDS FOR SNTP........................................................................................ 382
14.2.1 clock timezone ............................................................................................ 382
14.2.2 sntp server .................................................................................................. 383
14.2.3 sntp poll....................................................................................................... 383
14.2.4 debug sntp .................................................................................................. 383
14.2.5 show sntp.................................................................................................... 384
14.3 TYPICAL SNTP CONFIGURATION EXAMPLES .......................................................... 384
14.4 WEB MANAGEMENT ............................................................................................. 385
14.4.1 SNMP/NTP server configuration ................................................................. 385
14.4.2 Request interval configuration..................................................................... 385
14.4.3 Time difference ........................................................................................... 385
14.4.4 Show SNTP ................................................................................................ 386
CHAPTER 15 ARP SCANNING PREVENTION FUNCTION CONFIGURATION......... 387
15.1 INTRODUCTION TO ARP SCANNING PREVENTION FUNCTION ................................... 387
15.2 ARP SCANNING PREVENTION CONFIGURATION TASK SEQUENCE............................ 388
15.3 COMMAND FOR ARP SCANNING PREVENTION ....................................................... 389
15.3.1 anti-arpscan enable..................................................................................... 389
15.3.2 anti-arpscan port-based threshold .............................................................. 390
15.3.3 anti-arpscan ip-based threshold.................................................................. 390