Edge-Core ES4626 User manual

1
www.edge-core.com
ES4626/ES4650 L3 Gigabit
Ethernet Switch

2
Preface
ES4626/ES4650 L3 Gigabit Ethernet Switch is a high performance routing switch
released by Edge-Core that can be deployed as an aggregation device for campus
networks, enterprise networks, as well as core layer switches for small and medium-sized
networks.ES4626/ES4650 L3 Gigabit Ethernet Switch support a variety of network
interfaces from 100Mb, 1000Mb to 10 GB Ethernet.
We are providing this manual for your better understanding, use and maintenance of
the ES4626/ES4650 L3 Gigabit Ethernet Switch. We strongly recommend you to read
through this manual carefully before installation and configuration to avoid possible
malfunction or damage to the switch. Furthermore, we sincerely hope our products and
services satisfy you.

3
Content
CHAPTER 1 SWITCH MANAGEMENT.......................................................................... 20
1.1 MANAGEMENT OPTIONS ........................................................................................... 20
1.1.1 Out-Of-Band Management.............................................................................. 20
1.1.2 In-band Management...................................................................................... 23
1.1.3 Management Via Telnet .................................................................................. 24
1.1.4 Management Via HTTP................................................................................... 26
1.2 MANAGEMENT INTERFACE ........................................................................................ 29
1.2.1 CLI Interface ................................................................................................... 29
1.2.2 Configuration Modes....................................................................................... 29
1.2.3 Configuration Syntax....................................................................................... 32
1.2.4 Shortcut Key Support...................................................................................... 33
1.2.5 Help Function.................................................................................................. 33
1.2.6 Input Verification ............................................................................................. 34
1.2.7 Fuzzy Match Support ...................................................................................... 34
1.3 WEB MANAGEMENT ................................................................................................. 35
1.3.1 Main Page....................................................................................................... 35
1.3.2 Module Front Panel......................................................................................... 35
CHAPTER 2 BASIC SWITCH CONFIGURATION.......................................................... 37
2.1 BASIC SWITCH CONFIGURATION COMMANDS ............................................................. 37
2.1.1 Commands For Basic Configuration ............................................................... 37
2.2 MONITOR AND DEBUG COMMAND.............................................................................. 51
2.2.1 Ping................................................................................................................. 51
2.2.2 Ping6............................................................................................................... 51
2.2.3 Telnet .............................................................................................................. 51
2.2.4 SSH ................................................................................................................ 54
2.2.5 Traceroute....................................................................................................... 57
2.2.6 Traceroute6..................................................................................................... 58
2.2.7 Show............................................................................................................... 58
2.2.8 Debug ............................................................................................................. 64
2.2.9 System log ...................................................................................................... 64
2.3 CONFIGURATE SWITCH IP ADDRESSES...................................................................... 69
2.3.1 Switch IP Addresses Configuration Task List .................................................. 69
2.3.2 Commands For Configuring Switch IP ............................................................ 70
2.4 SNMP CONFIGURATION ........................................................................................... 72
2.4.1 Introduction To SNMP ..................................................................................... 72

4
2.4.2 SNMP Configuration Task List......................................................................... 74
2.4.3 Commands For SNMP.................................................................................... 76
2.4.4 Typical SNMP Configuration Examples........................................................... 86
2.4.5 SNMP Troubleshooting ................................................................................... 87
2.5 SWITCH UPGRADE ................................................................................................... 88
2.5.1 Switch System Files........................................................................................ 88
2.5.2 BootROM Upgrade ......................................................................................... 88
2.5.3 FTP/TFTP Upgrade......................................................................................... 91
2.5.4 FTP/TFTP Configuration Examples ................................................................ 99
2.5.5 FTP/TFTP Troubleshooting........................................................................... 103
2.6 SECURITY FEATURE CONFIGURATION...................................................................... 104
2.6.1 Security Feature Introduction ........................................................................ 104
2.6.2 Security Feature Configuration ..................................................................... 105
2.6.3 Security Feature Commands ........................................................................ 107
2.6.4 Security Feature Example..............................................................................110
2.7 JUMBO CONFIGURATION..........................................................................................110
2.7.1 Jumbo Introduction ........................................................................................110
2.7.2 Jumbo Configuration Task Sequence.............................................................111
2.7.3 Commands for Jumbo....................................................................................111
2.8 SFLOW CONFIGURATION..........................................................................................111
2.8.1 sFlow Introduction..........................................................................................111
2.8.2 sFlow Configuration Task ...............................................................................112
2.8.3 Commands For sFlow....................................................................................113
2.8.4 sFlow Examples.............................................................................................118
2.8.5 sFlow Troubleshooting ...................................................................................118
2.9 TACACS+ CONFIGURATION ....................................................................................119
2.9.1 TACACS+ Introduction ...................................................................................119
2.9.2 TACACS+ Configurations...............................................................................119
2.9.3 Commands for TACACS+ ............................................................................. 120
2.9.4 Typical TACACS+ Scenarios......................................................................... 122
2.9.5 TACACS+ Troubleshooting ........................................................................... 122
2.10 WEB MANAGEMENT ............................................................................................. 123
2.10.1 Switch Basic Configuration ......................................................................... 123
2.10.2 SNMP Configuration ................................................................................... 124
2.10.3 Switch upgrade ........................................................................................... 126
2.10.4 Commands for Monitor And Debug............................................................. 129
2.10.5 Switch Maintenance.................................................................................... 130
2.10.6 Telnet server configuration .......................................................................... 131

5
2.10.7 Telnet server user configuration .................................................................. 131
2.10.8 Telnet security IP......................................................................................... 132
CHAPTER 3 PORT CONFIGURATION........................................................................ 133
3.1 INTRODUCTION TO PORT ........................................................................................ 133
3.2 PORT CONFIGURATION........................................................................................... 133
3.2.1 Network Port Configuration ........................................................................... 133
3.2.2 VLAN Interface Configuration ....................................................................... 142
3.2.3 Network Management Port Configuration ..................................................... 144
3.3 PORT MIRRORING CONFIGURATION......................................................................... 147
3.3.1 Introduction to Port Mirroring......................................................................... 147
3.3.2 Port Mirroring Configuration Task List ........................................................... 148
3.3.3 Command For Mirroring Configuration.......................................................... 148
3.3.4 Device Mirroring Troubleshooting ................................................................. 149
3.4 PORT CONFIGURATION EXAMPLE ............................................................................ 150
3.5 PORT TROUBLESHOOTING ...................................................................................... 151
3.6 WEB MANAGEMENT ............................................................................................... 151
3.6.1 Ethernet port configuration............................................................................ 151
3.6.2 Physical port configuration............................................................................ 151
3.6.3 Bandwidth control ......................................................................................... 152
3.6.4 Vlan interface configuration........................................................................... 153
3.6.5 Allocate IP address for L3 port ...................................................................... 153
3.6.6 L3 port IP addr mode configuration............................................................... 153
3.6.7 Port mirroring configuration........................................................................... 154
3.6.8 Mirror configuration ....................................................................................... 154
3.6.9 Port debug and maintenance ........................................................................ 154
3.6.10 Show port information ................................................................................. 155
CHAPTER 4 PORT CHANNEL CONFIGURATION ..................................................... 156
4.1 INTRODUCTION TO PORT CHANNEL ......................................................................... 156
4.2 PORT CHANNEL CONFIGURATION TASK LIST ............................................................ 157
4.3 COMMANDS FOR PORT CHANNEL............................................................................. 158
4.3.1 debug lacp .................................................................................................... 158
4.3.2 port-group ..................................................................................................... 158
4.3.3 port-group mode ........................................................................................... 159
4.3.4 interface port-channel ................................................................................... 160
4.3.5 show port-group ............................................................................................ 160
4.4 PORT CHANNEL EXAMPLE ...................................................................................... 164
4.5 PORT CHANNEL TROUBLESHOOTING ....................................................................... 166

6
4.6 WEB MANAGEMENT ............................................................................................... 167
4.6.1 LACP port group configuration...................................................................... 167
4.6.2 LACP port configuration ................................................................................ 167
CHAPTER 5 VLAN CONFIGURATION........................................................................ 169
5.1 VLAN CONFIGURATION .......................................................................................... 169
5.1.1 Introduction To VLAN .................................................................................... 169
5.1.2 VLAN Configuration Task List ....................................................................... 170
5.1.3 Commands For Vlan Configuration............................................................... 172
5.1.4 Typical VLAN Application .............................................................................. 177
5.2 GVRP CONFIGURATION ......................................................................................... 179
5.2.1 Introduction to GVRP .................................................................................... 179
5.2.2 GVRP Configuration Task List....................................................................... 179
5.2.3 Commands for GVRP ................................................................................... 180
5.2.4 Typical GVRP Application ............................................................................. 183
5.2.5 GVRP Troubleshooting ................................................................................. 185
5.3 DOT1Q-TUNNEL CONFIGURATION............................................................................ 185
5.3.1 Dot1q-tunnel Introduction.............................................................................. 185
5.3.2 Dot1q-tunnel Configuration ........................................................................... 187
5.3.3 Dot1q-Tunnel Configuration Command......................................................... 187
5.3.4 Typical Applications Of The Dot1q-tunnel ..................................................... 189
5.3.5 Dot1q-tunnel Troubleshooting ....................................................................... 190
5.4 VLAN-TRANSLATION CONFIGURATION..................................................................... 190
5.4.1 VLAN-translation Introduction ....................................................................... 190
5.4.2 VLAN-translation Configuration..................................................................... 191
5.4.3 Commands for VLAN-Translation Configuration ........................................... 191
5.4.4 Typical application of VLAN-translation......................................................... 193
5.4.5 VLAN-translation Troubleshooting ................................................................ 194
5.5 DYNAMIC VLAN CONFIGURATION ........................................................................... 194
5.5.1 Dynamic VLAN Introduction .......................................................................... 194
5.5.2 Dynamic VLAN Configuration ....................................................................... 195
5.5.3 Typical Application Of The Dynamic VLAN ................................................... 202
5.5.4 Dynamic VLAN Troubleshooting ................................................................... 203
5.6 VOICE VLAN CONFIGURATION................................................................................ 204
5.6.1 Voice VLAN Introduction ............................................................................... 204
5.6.2 Voice VLAN Configuration............................................................................. 204
5.6.3 Typical Applications Of The Voice VLAN....................................................... 207
5.6.4 Voice VLAN Troubleshooting ........................................................................ 208

7
CHAPTER 6 MAC TABLE CONFIGURATION............................................................. 209
6.1 INTRODUCTION TO MAC TABLE............................................................................... 209
6.1.1 Obtaining MAC Table .................................................................................... 209
6.1.2 Forward or Filter.............................................................................................211
6.2 MAC ADDRESS TABLE CONFIGURATION TASK LIST ................................................... 212
6.3 COMMANDS FOR MAC ADDRESS TABLE CONFIGURATION .......................................... 212
6.3.1 mac-address-table aging-time....................................................................... 212
6.3.2 mac-address-table ........................................................................................ 213
6.3.3 show mac-address-table ............................................................................... 214
6.4 TYPICAL CONFIGURATION EXAMPLES ...................................................................... 214
6.5 TROUBLESHOOTING ............................................................................................... 215
6.6 MAC ADDRESS FUNCTION EXTENSION ................................................................... 215
6.6.1 MAC Address Binding ................................................................................... 215
CHAPTER 7 MSTP CONFIGURATION........................................................................ 223
7.1 MSTP INTRODUCTION............................................................................................ 223
7.1.1 MSTP Region................................................................................................ 223
7.1.2 Port Roles ..................................................................................................... 225
7.1.3 MSTP Load Balance ..................................................................................... 225
7.2 MSTP CONFIGURATION TASK LIST.......................................................................... 225
7.3 COMMANDS FOR MSTP ......................................................................................... 229
7.3.1 abort.............................................................................................................. 229
7.3.2 exit ................................................................................................................ 229
7.3.3 instance vlan ................................................................................................. 230
7.3.4 name............................................................................................................. 230
7.3.5 revision-level ................................................................................................. 231
7.3.6 spanning-tree ................................................................................................ 231
7.3.7 spanning-tree format..................................................................................... 232
7.3.8 spanning-tree forward-time ........................................................................... 233
7.3.9 spanning-tree hello-time................................................................................ 233
7.3.10 spanning-tree link-type p2p......................................................................... 233
7.3.11 spanning-tree maxage................................................................................. 234
7.3.12 spanning-tree max-hop ............................................................................... 234
7.3.13 spanning-tree mcheck................................................................................. 235
7.3.14 spanning-tree mode .................................................................................... 235
7.3.15 spanning-tree mst configuration.................................................................. 236
7.3.16 spanning-tree mst cost................................................................................ 236
7.3.17 spanning-tree mst port-priority .................................................................... 237

8
7.3.18 spanning-tree mst priority............................................................................ 237
7.3.19 spanning-tree portfast ................................................................................. 238
7.3.20 spanning-tree digest-snooping.................................................................... 238
7.3.21 spanning-tree tcflush (global mode)............................................................ 239
7.3.22 spanning-tree tcflush (port mode) ............................................................... 239
7.4 MSTP EXAMPLE.................................................................................................... 240
7.5 MSTP TROUBLESHOOTING .................................................................................... 245
7.5.1 Commands for Monitor And Debug............................................................... 245
7.6 WEB MANAGEMENT ............................................................................................... 249
7.6.1 MSTP field operation..................................................................................... 249
7.6.2 MSTP port operation ..................................................................................... 250
7.6.3 MSTP global control...................................................................................... 251
7.6.4 Show MSTP setting....................................................................................... 252
CHAPTER 8 QOS AND PBR CONFIGURATION......................................................... 254
8.1 QOSCONFIGURATION............................................................................................ 254
8.1.1 Introduction to QoS ....................................................................................... 254
8.1.2 QoS Configuration Task List.......................................................................... 259
8.1.3 Commands for QoS ...................................................................................... 263
8.1.4 QoS Example................................................................................................ 272
8.1.5 QoS Troubleshooting .................................................................................... 275
8.2 PBR CONFIGURATION ............................................................................................ 280
8.2.1 Introduction to PBR....................................................................................... 280
8.2.2 PBR configuration ......................................................................................... 280
8.2.3 PBR examples .............................................................................................. 280
CHAPTER 9 FLOW-BASED REDIRECTION............................................................... 282
9.1 INTRODUCTION TO FLOW-BASED REDIRECTION........................................................ 282
9.2 FLOW-BASED REDIRECTION CONFIGURATION TASK SEQUENCE ................................ 282
9.3 COMMAND FOR FLOW-BASED REDIRECTION ............................................................ 283
9.3.1 access-group <aclname> redirect to interface ethernet ................................ 283
9.3.2 show flow-based-redirect .............................................................................. 283
9.4 FLOW-BASED REDIRECTION EXAMPLES ................................................................... 284
9.5 FLOW-BASED REDIRECTION TROUBLESHOOTING HELP............................................. 284
CHAPTER 10 L3 FORWARD CONFIGURATION ........................................................ 285
10.1 LAYER 3INTERFACE ............................................................................................. 285
10.1.1 Introduction to Layer 3 Interface ................................................................. 285
10.1.2 Layer 3 Interface Configuration Task List .................................................... 285

9
10.1.3 Commands for Layer 3 Interface................................................................. 286
10.2 IP CONFIGURATION .............................................................................................. 286
10.2.1 Introduction to IPv4, IPv6............................................................................ 286
10.2.2 IP Configuration .......................................................................................... 289
10.2.3 IP Configuration Examples.......................................................................... 303
10.2.4 IP Troubleshooting ...................................................................................... 307
10.3 IP FORWARDING .................................................................................................. 317
10.3.1 Introduction to IP Forwarding ...................................................................... 317
10.3.2 IP Route Aggregation Configuration Task ................................................... 317
10.3.3 Commands for IP Route Aggregation.......................................................... 318
10.4 URPF................................................................................................................. 318
10.4.1 URPF Introduction ...................................................................................... 318
10.4.2 URPF Operation Mechanism ...................................................................... 319
10.4.3 URPF Configuration Task Sequence........................................................... 319
10.4.4 Commands For URPF................................................................................. 320
10.4.5 URPF Troubleshooting................................................................................ 321
10.5 ARP ................................................................................................................... 321
10.5.1 Introduction to ARP ..................................................................................... 321
10.5.2 ARP Configuration Task List........................................................................ 322
10.5.3 Commands for ARP Configuration .............................................................. 322
CHAPTER 11 DHCP CONFIGURATION...................................................................... 326
11.1 INTRODUCTION TO DHCP..................................................................................... 326
11.2 DHCP SERVER CONFIGURATION .......................................................................... 327
11.2.1 DHCP Sever Configuration Task List........................................................... 327
11.2.2 DHCP Server Configuration Commands ..................................................... 329
11.3 DHCP RELAY CONFIGURATION ............................................................................. 337
11.3.1 DHCP Relay Configuration Task List........................................................... 338
11.3.2 DHCP Relay Configuration Commands ...................................................... 339
11.4 DHCP CONFIGURATION EXAMPLE......................................................................... 341
11.5 DHCP TROUBLESHOOTING................................................................................... 344
11.5.1 Commands for Monitor and Debug ............................................................. 344
11.6 WEB MANAGEMENT.............................................................................................. 347
11.6.1 DHCP server configuration.......................................................................... 347
11.6.2 DHCP debugging ........................................................................................ 352
CHAPTER 12 DHCP OPTION 82 CONFIGURATION.................................................. 354
12.1 INTRODUCTION TO DHCP OPTION 82 .................................................................... 354
12.1.1 DHCP option 82 Message Structure ........................................................... 354

10
12.1.2 option 82 Working Mechanism.................................................................... 355
12.2 DHCP OPTION 82 CONFIGURATION....................................................................... 356
12.2.1 DHCP option 82 Configuration Task List ..................................................... 356
12.2.2 Command for DHCP option 82 ................................................................... 358
12.3 DHCP OPTION 82 APPLICATION EXAMPLES ........................................................... 361
12.4 DHCP OPTION 82 TROUBLESHOOTING HELP......................................................... 363
CHAPTER 13 DHCP SNOOPING CONFIGURATION.................................................. 365
13.1 INTRODUCTION TO DHCP SNOOPING.................................................................... 365
13.2 DHCP SNOOPING CONFIGURATION ...................................................................... 365
13.2.1 DHCP Snooping Configuration Task Sequence .......................................... 365
13.2.2 Command for DHCP Snooping Configuration............................................. 368
13.3 DHCP SNOOPING TYPICAL APPLICATION............................................................... 379
13.4 DHCP SNOOPING TROUBLESHOOTING HELP......................................................... 380
13.4.1 Monitor And Debug Information .................................................................. 380
13.4.2 DHCP Snooping Troubleshooting Help ....................................................... 380
CHAPTER 14 SNTP CONFIGURATION ...................................................................... 381
14.1 INTRODUCTION TO SNTP ..................................................................................... 381
14.2 COMMANDS FOR SNTP........................................................................................ 382
14.2.1 clock timezone ............................................................................................ 382
14.2.2 sntp server .................................................................................................. 383
14.2.3 sntp poll....................................................................................................... 383
14.2.4 debug sntp .................................................................................................. 383
14.2.5 show sntp.................................................................................................... 384
14.3 TYPICAL SNTP CONFIGURATION EXAMPLES .......................................................... 384
14.4 WEB MANAGEMENT ............................................................................................. 385
14.4.1 SNMP/NTP server configuration ................................................................. 385
14.4.2 Request interval configuration..................................................................... 385
14.4.3 Time difference ........................................................................................... 385
14.4.4 Show SNTP ................................................................................................ 386
CHAPTER 15 ARP SCANNING PREVENTION FUNCTION CONFIGURATION......... 387
15.1 INTRODUCTION TO ARP SCANNING PREVENTION FUNCTION ................................... 387
15.2 ARP SCANNING PREVENTION CONFIGURATION TASK SEQUENCE............................ 388
15.3 COMMAND FOR ARP SCANNING PREVENTION ....................................................... 389
15.3.1 anti-arpscan enable..................................................................................... 389
15.3.2 anti-arpscan port-based threshold .............................................................. 390
15.3.3 anti-arpscan ip-based threshold.................................................................. 390

11
15.3.4 anti-arpscan trust ........................................................................................ 391
15.3.5 anti-arpscan trust ip..................................................................................... 391
15.3.6 anti-arpscan recovery enable...................................................................... 392
15.3.7 anti-arpscan recovery time.......................................................................... 392
15.3.8 anti-arpscan log enable............................................................................... 392
15.3.9 anti-arpscan trap enable ............................................................................. 393
15.3.10 show anti-arpscan..................................................................................... 393
15.3.11 debug anti-arpscan.................................................................................... 395
15.4 ARP SCANNING PREVENTION TYPICAL EXAMPLES ................................................. 396
15.5 ARP SCANNING PREVENTION TROUBLESHOOTING HELP........................................ 397
CHAPTER 16 PREVENT ARP, ND SPOOFING CONFIGURATION............................ 398
16.1 OVERVIEW........................................................................................................... 398
16.1.1 ARP ( Address Resolution Protocol)............................................................ 398
16.1.2 ARP Spoofing.............................................................................................. 398
16.1.3 How to prevent void ARP/ND Spoofing for our Layer 3 Switch ................... 399
16.2 PREVENT ARP, ND SPOOFING CONFIGURATION..................................................... 399
16.2.1 Prevent ARP, ND Spoofing Configuration Task List..................................... 399
16.3 COMMANDS FOR PREVENTING ARP, ND SPOOFING............................................... 400
16.3.1 ip arp-security updateprotect....................................................................... 400
16.3.2 ipv6 nd-security updateprotect .................................................................... 401
16.3.3 ip arp-security learnprotect.......................................................................... 401
16.3.4 ipv6 nd learnprotect .................................................................................... 401
16.3.5 ip arp-security convert................................................................................. 402
16.3.6 ipv6 nd-security convert .............................................................................. 402
16.3.7 clear ip arp dynamic.................................................................................... 402
16.3.8 clear ipv6 nd dynamic ................................................................................. 402
16.4 PREVENT ARP, ND SPOOFING EXAMPLE............................................................... 403
CHAPTER 17 ROUTING PROTOCOL......................................................................... 405
17.1 ROUTING PROTOCOL OVERVIEW........................................................................... 405
17.1.1 Routing Table .............................................................................................. 406
17.2 IP ROUTING POLICY............................................................................................. 407
17.2.1 Introduction To Routing Policy..................................................................... 407
17.2.2 IP Routing Policy Configuration Task List.................................................... 409
17.2.3 Commands for Routing Policy..................................................................... 413
17.2.4 Configuration Examples.............................................................................. 425
17.2.5 Troubleshooting .......................................................................................... 426
17.3 STATIC ROUTE..................................................................................................... 429

12
17.3.1 Introduction to Static Route ......................................................................... 429
17.3.2 Introduction to Default Route ...................................................................... 429
17.3.3 Static Route Configuration Task List............................................................ 430
17.3.4 Commands for Static Route ........................................................................ 430
17.3.5 Configuration Examples.............................................................................. 434
17.4 RIP..................................................................................................................... 435
17.4.1 Introduction to RIP ...................................................................................... 435
17.4.2 RIP Configuration Task List......................................................................... 437
17.4.3 Commands for RIP ..................................................................................... 442
17.4.4 RIP Examples ............................................................................................. 458
17.4.5 RIP Troubleshooting.................................................................................... 461
17.5 RIPNG ................................................................................................................ 466
17.5.1 Introduction to RIPng .................................................................................. 466
17.5.2 RIPng Configuration Task List..................................................................... 468
17.5.3 Commands For RIPng ................................................................................ 471
17.5.4 RIPng Configuration Examples ................................................................... 477
17.5.5 RIPng Troubleshooting................................................................................ 478
17.6 OSPF................................................................................................................. 482
17.6.1 Introduction to OSPF .................................................................................. 482
17.6.2 OSPF Configuration Task List ..................................................................... 486
17.6.3 Commands for OSPF.................................................................................. 490
17.6.4 OSPF Example ............................................................................................511
17.6.5 OSPF Troubleshooting................................................................................ 520
17.7 OSPFV3............................................................................................................. 528
17.7.1 Introduction to OSPFv3............................................................................... 528
17.7.2 OSPFv3 Configuration Task List ................................................................. 532
17.7.3 Commands for OSPFV3 ............................................................................. 536
17.7.4 OSPFv3 Examples...................................................................................... 546
17.7.5 OSPFv3 Troubleshooting............................................................................ 548
17.8 BGP ................................................................................................................... 556
17.8.1 BGP Introduction......................................................................................... 556
17.8.2 BGP Configuration Task List ....................................................................... 559
17.8.3 Commands for BGP.................................................................................... 572
17.8.4 Configuration Examples of BGP ..................................................................611
17.8.5 BGP Troubleshooting .................................................................................. 619
17.9 MBGP4+ ............................................................................................................ 631
17.9.1 MBGP4+ Introduction.................................................................................. 631
17.9.2 MBGP4+ Configures Mission List ............................................................... 631

13
17.9.3 MBGP4+ Examples..................................................................................... 631
17.9.4 MBGP4+ Troubleshooting........................................................................... 633
CHAPTER 18 IGMP SNOOPING .................................................................................634
18.1 INTRODUCTION TO IGMP SNOOPING ..................................................................... 634
18.2 IGMP SNOOPING CONFIGURATION TASK ............................................................... 634
18.3 COMMANDS FOR IGMP SNOOPING ....................................................................... 636
18.3.1 ip igmp snooping......................................................................................... 636
18.3.2 ip igmp snooping vlan ................................................................................. 636
18.3.3 ip igmp snooping vlan immediate-leave ...................................................... 636
18.3.4 ip igmp snooping vlan l2-general-querier .................................................... 637
18.3.5 ip igmp snooping vlan limit.......................................................................... 637
18.3.6 ip igmp snooping vlan mrouter-port interface .............................................. 638
18.3.7 ip igmp snooping vlan mrpt ......................................................................... 638
18.3.8 ip igmp snooping vlan query-interval........................................................... 639
18.3.9 ip igmp snooping vlan query-mrsp .............................................................. 639
18.3.10 ip igmp snooping vlan query-robustness................................................... 639
18.3.11 ip igmp snooping vlan suppression-query-time ......................................... 640
18.4 IGMP SNOOPING EXAMPLE.................................................................................. 640
18.5 IGMP SNOOPING TROUBLESHOOTING .................................................................. 643
18.5.1 Commands for Monitor And Debug............................................................. 643
CHAPTER 19 MULTICAST VLAN................................................................................ 647
19.1 INTRODUCTIONS TO MULTICAST VLAN.................................................................. 647
19.2 MULTICAST VLAN CONFIGURATION TASK .............................................................. 647
19.3 COMMANDS FOR MULTICAST VLAN...................................................................... 648
19.3.1 multicast-vlan .............................................................................................. 648
19.3.2 multicast-vlan association<vlan-list>........................................................... 648
19.4 EXAMPLES OF MULTICAST VLAN.......................................................................... 649
CHAPTER 20 IPV4 MULTICAST PROTOCOL ............................................................ 651
20.1 IPV4MULTICAST PROTOCOL OVERVIEW................................................................ 651
20.1.1 Introduction to Multicast .............................................................................. 651
20.1.2 Multicast Address........................................................................................ 652
20.1.3 IP Multicast Packet Transmission................................................................ 653
20.1.4 IP Multicast Application ............................................................................... 654
20.2 PIM-DM ............................................................................................................. 654
20.2.1 Introduction to PIM-DM ............................................................................... 654
20.2.2 PIM-DM Configuration Task List.................................................................. 655

14
20.2.3 Commands for PIM-DM .............................................................................. 657
20.2.4 PIM-DM Configuration Examples................................................................ 661
20.2.5 PIM-DM Troubleshooting ............................................................................ 662
20.3 PIM-SM.............................................................................................................. 668
20.3.1 Introduction to PIM-SM ............................................................................... 668
20.3.2 PIM-SM Configuration Task List.................................................................. 669
20.3.3 Commands for PIM-SM............................................................................... 672
20.3.4 PIM-SM Configuration Examples ................................................................ 681
20.3.5 PIM-SM Troubleshooting............................................................................. 683
20.4 DVMRP.............................................................................................................. 693
20.4.1 Introduction to DVMRP ............................................................................... 693
20.4.2 Configuration Task List................................................................................ 694
20.4.3 Commands for DVMRP............................................................................... 696
20.4.4 DVMRP Configuration Examples ................................................................ 699
20.4.5 DVMRP Troubleshooting............................................................................. 700
20.5 DCSCM ............................................................................................................. 704
20.5.1 Introduction to DCSCM ............................................................................... 704
20.5.2 DCSCM Configuration Task List.................................................................. 705
20.5.3 Commands for DCSCM .............................................................................. 708
20.5.4 DCSCM Configuration Examples................................................................ 713
20.5.5 DCSCM Troubleshooting ............................................................................ 714
20.6 IGMP ................................................................................................................. 716
20.6.1 Introduction to IGMP ................................................................................... 716
20.6.2 Configuration Task List................................................................................ 718
20.6.3 Commands for IGMP .................................................................................. 720
20.6.4 IGMP Configuration Example...................................................................... 725
20.6.5 IGMP Troubleshooting ................................................................................ 726
CHAPTER 21 IPV6 MULTICAST PROTOCOL ............................................................ 730
21.1 PIM-DM6............................................................................................................ 730
21.1.1 Introduction to PIM-DM6 ............................................................................. 730
21.1.2 PIM-DM Configuration Task List.................................................................. 731
21.1.3 Commands for PIM-DM6 ............................................................................ 733
21.1.4 PIM-DM Typical Application ........................................................................ 737
21.1.5 PIM-DM Troubleshooting ............................................................................ 738
21.2 PIM-SM6............................................................................................................ 744
21.2.1 Introduction to PIM-SM6 ............................................................................. 744
21.2.2 PIM-SM Configuration Task List.................................................................. 746
21.2.3 Commands for PIM-SM............................................................................... 748

15
21.2.4 PIM-SM Typical Application......................................................................... 757
21.2.5 PIM-SM Troubleshooting............................................................................. 759
21.3 MLD ................................................................................................................... 769
21.3.1 Introduction to MLD..................................................................................... 769
21.3.2 MLD Configuration Task List ....................................................................... 769
21.3.3 Commands for MLD.................................................................................... 771
21.3.4 MLD Typical Application .............................................................................. 777
21.3.5 MLD Troubleshooting.................................................................................. 777
21.4 MLD SNOOPING .................................................................................................. 780
21.4.1 MLD Snooping Introduction......................................................................... 780
21.4.2 MLD Snooping Configuration Task.............................................................. 781
21.4.3 Commands For MLD Snooping Configuration ............................................ 782
21.4.4 MLD Snooping Examples............................................................................ 789
21.4.5 MLD Snooping Troubleshooting.................................................................. 792
CHAPTER 22 ACL CONFIGURATION......................................................................... 793
22.1 INTRODUCTION TO ACL........................................................................................ 793
22.1.1 Access-list................................................................................................... 793
22.1.2 Access-group .............................................................................................. 793
22.1.3 Access-list Action and Global Default Action ............................................... 794
22.2 ACL CONFIGURATION........................................................................................... 794
22.2.1 ACL Configuration Task Sequence.............................................................. 794
22.2.2 Commands for ACL..................................................................................... 800
22.3 ACL EXAMPLE ..................................................................................................... 808
22.4 ACL TROUBLESHOOTING...................................................................................... 809
22.4.1 Commands for Monitor And Debug............................................................. 809
22.5 WEB MANAGEMENT ............................................................................................. 812
22.5.1 Numeric standard ACL configuration........................................................... 812
22.5.2 Delete numeric IP ACL................................................................................ 813
22.5.3 Configure the numeric extended ACL ......................................................... 813
22.5.4 Configure and delete the standard ACL name ............................................ 815
22.5.5 Configure extended ACL name configuration.............................................. 816
22.5.6 Firewall configuration .................................................................................. 816
22.5.7 ACL port binding.......................................................................................... 816
CHAPTER 23 802.1X CONFIGURATION .................................................................... 818
23.1 INTRODUCTION TO 802.1X.................................................................................... 818
23.1.1 The Authentication Structure of 802.1x ....................................................... 818
23.1.2 The Work Mechanism of 802.1x.................................................................. 820

16
23.1.3 The Encapsulation of EAPOL Messages .................................................... 821
23.1.4 The Encapsulation of EAP Attributes .......................................................... 823
23.1.5 The Authentication Methods of 802.1x ........................................................ 824
23.1.6 The Extension and Optimization of 802.1x.................................................. 829
23.1.7 The Features of VLAN Allocation ................................................................ 830
23.2 802.1X CONFIGURATION TASK LIST....................................................................... 831
23.3 COMMANDS FOR 802.1X...................................................................................... 835
23.3.1 aaa enable .................................................................................................. 835
23.3.2 aaa-accounting enable................................................................................ 836
23.3.3 dot1x accept-mac........................................................................................ 836
23.3.4 dot1x eapor enable ..................................................................................... 837
23.3.5 dot1x enable ............................................................................................... 837
23.3.6 dot1x guest-vlan.......................................................................................... 838
23.3.7 dot1x macfilter enable................................................................................. 839
23.3.8 dot1x max-req ............................................................................................. 839
23.3.9 dot1x max-user ........................................................................................... 839
23.3.10 dot1x max-user userbased........................................................................ 840
23.3.11 dot1x port-control ...................................................................................... 840
23.3.12 dot1x port-method..................................................................................... 841
23.3.13 dot1x re-authenticate ................................................................................ 841
23.3.14 dot1x re-authentication.............................................................................. 842
23.3.15 dot1x timeout quiet-period......................................................................... 842
23.3.16 dot1x timeout re-authperiod ...................................................................... 842
23.3.17 dot1x timeout tx-period.............................................................................. 843
23.3.18 radius-server accounting host ................................................................... 843
23.3.19 radius-server authentication host .............................................................. 844
23.3.20 radius-server dead-time ............................................................................ 845
23.3.21 radius-server key ...................................................................................... 845
23.3.22 radius-server retransmit ............................................................................ 845
23.3.23 radius-server timeout ................................................................................ 846
23.4 802.1X APPLICATION EXAMPLE............................................................................. 847
23.4.1 Examples of Guest Vlan Applications ......................................................... 847
23.4.2 Examples of IPv4 Radius Applications........................................................ 850
23.5 802.1X TROUBLESHOOTING ................................................................................. 851
23.5.1 Commands for Monitor and debug.............................................................. 851
23.6 WEB MANAGEMENT ............................................................................................. 857
23.6.1 RADIUS client configuration........................................................................ 857
23.6.2 802.1X configuration ................................................................................... 859

17
CHAPTER 24 THE NUMBER LIMITATION FUNCTION OF PORT, MAC IN VLAN AND
IP CONFIGURATION.................................................................................................... 863
24.1 INTRODUCTION TO THE NUMBER LIMITATION FUNCTION OF PORT,MAC IN VLAN AND IP
.................................................................................................................................. 863
24.2 THE NUMBER LIMITATION FUNCTION OF PORT,MAC IN VLAN AND IP CONFIGURATION
TASK SEQUENCE ......................................................................................................... 864
24.3 COMMAND FOR THE NUMBER LIMITATION FUNCTION OF PORT,MAC IN VLAN AND IP
.................................................................................................................................. 866
24.3.1 switchport mac-address dynamic maximum ............................................... 866
24.3.2 ip mac-address dynamic maximum............................................................. 867
24.3.3 switchport arp dynamic maximum............................................................... 868
24.3.4 switchport nd dynamic maximum ................................................................ 868
24.3.5 ip arp dynamic maximum ............................................................................ 869
24.3.6 ipv6 nd dynamic maximum.......................................................................... 870
24.3.7 mac-address query timeout......................................................................... 870
24.3.8 show mac-address dynamic count.............................................................. 871
24.3.9 show arp-dynamic count ............................................................................. 871
24.3.10 show nd-dynamic count ............................................................................ 872
24.3.11 debug switchport mac count...................................................................... 873
24.3.12 debug switchport arp count ....................................................................... 873
24.3.13 debug switchport nd count ........................................................................ 874
24.3.14 debug ip mac count................................................................................... 874
24.3.15 debug ip arp count .................................................................................... 875
24.3.16 debug ipv6 nd count.................................................................................. 875
24.4 THE NUMBER LIMITATION FUNCTION OF PORT,MAC IN VLAN AND IP TYPICAL
EXAMPLES .................................................................................................................. 876
24.5 THE NUMBER LIMITATION FUNCTION OF PORT,MAC IN VLAN AND IP
TROUBLESHOOTING HELP ............................................................................................ 877
CHAPTER 25 VRRP CONFIGURATION...................................................................... 878
25.1 INTRODUCTION TO VRRP..................................................................................... 878
25.2 CONFIGURATION TASK LIST .................................................................................. 879
25.3 COMMANDS FOR VRRP ....................................................................................... 880
25.3.1 advertisement-interval................................................................................. 880
25.3.2 circuit-failover.............................................................................................. 881
25.3.3 debug vrrp................................................................................................... 882
25.3.4 disable......................................................................................................... 882
25.3.5 enable ......................................................................................................... 882

18
25.3.6 interface ...................................................................................................... 883
25.3.7 preempt-mode............................................................................................. 883
25.3.8 priority ......................................................................................................... 884
25.3.9 router vrrp ................................................................................................... 884
25.3.10 show vrrp .................................................................................................. 884
25.3.11 virtual-ip..................................................................................................... 885
25.4 TYPICAL VRRP SCENARIO ................................................................................... 886
25.5 VRRP TROUBLESHOOTING .................................................................................. 887
25.6 WEB MANAGEMENT ............................................................................................. 887
25.6.1 Create VRRP Number................................................................................. 887
25.6.2 Configure VRRP Dummy IP........................................................................ 887
25.6.3 Configure VRRP Port .................................................................................. 888
25.6.4 Activate Virtual Router................................................................................. 888
25.6.5 Configure Preemptive Mode For VRRP ...................................................... 888
25.6.6 Configure VRRP priority.............................................................................. 888
25.6.7 Configure VRRP Timer interval ................................................................... 889
25.6.8 Configure VRRP Interface Monitor.............................................................. 889
25.6.9 Configure Authentication Mode For VRRP.................................................. 889
CHAPTER 26 MRPP CONFIGURATION...................................................................... 891
26.1 MRPP INTRODUCTION ......................................................................................... 891
26.1.1 Conception Introduction .............................................................................. 891
26.1.2 MRPP Protocol Packet Types ..................................................................... 892
26.1.3 MRPP Protocol Operation System.............................................................. 893
26.2 MRPP CONFIGURATION TASK LIST ....................................................................... 894
26.3 COMMANDS FOR MRPP ...................................................................................... 895
26.3.1 clear mrpp statistics .................................................................................... 895
26.3.2 control-vlan ................................................................................................. 895
26.3.3 debug mrpp................................................................................................. 896
26.3.4 enable ......................................................................................................... 896
26.3.5 fail-timer ...................................................................................................... 897
26.3.6 hello-timer ................................................................................................... 897
26.3.7 mrpp enable ................................................................................................ 898
26.3.8 mrpp ring..................................................................................................... 898
26.3.9 node-mode.................................................................................................. 899
26.3.10 primary-port............................................................................................... 899
26.3.11 secondary-port .......................................................................................... 899
26.3.12 show mrpp ................................................................................................ 900
26.3.13 show mrpp statistics.................................................................................. 900

19
26.4 MRPP TYPICAL SCENARIO.................................................................................... 900
26.5 MRPP TROUBLESHOOTING .................................................................................. 902
CHAPTER 27 CLUSTER CONFIGURATION...............................................................904
27.1 INTRODUCTION TO CLUSTER NETWORK MANAGEMENT ............................................ 904
27.2 CLUSTER NETWORK MANAGEMENT CONFIGURATION SEQUENCE............................ 905
27.3 COMMANDS FOR CLUSTER.................................................................................... 907
27.3.1 cluster run ................................................................................................... 907
27.3.2 cluster register timer ................................................................................... 907
27.3.3 cluster ip-pool.............................................................................................. 908
27.3.4 cluster commander ..................................................................................... 908
27.3.5 cluster member ........................................................................................... 909
27.3.6 cluster auto-add enable............................................................................... 909
27.3.7 rcommand member..................................................................................... 910
27.3.8 rcommand commander ............................................................................... 910
27.3.9 cluster reset member ...................................................................................911
27.3.10 cluster update member ..............................................................................911
27.3.11 cluster holdtime ......................................................................................... 912
27.3.12 cluster heartbeat ....................................................................................... 912
27.3.13 clear cluster candidate-table ..................................................................... 913
27.4 EXAMPLES OF CLUSTER ADMINISTRATION ............................................................. 913
27.5 CLUSTER ADMINISTRATION TROUBLESHOOTING..................................................... 914
27.5.1 Cluster Administration Debugging and Monitoring Command..................... 914

20
Chapter 1 Switch Management
1.1 Management Options
After purchasing the switch, the user needs to configure the switch for network
management. ES4626/ES4650 Switch provides two management options: in-band
management and out-of-band management.
1.1.1 Out-Of-Band Management
Out-of-band management is the management through Console interface. Generally,
the user will use out-of-band management for the initial switch configuration, or when
in-band management is not available. For instance, the user must assign an IP address
to the switch via the Console interface to be able to access the switch through Telnet.
The procedures for managing the switch via Console interface are listed below:
Step 1: setting up the environment:
Fig 1-1 Out-of-band Management Configuration Environment
As shown in Fig 1-1, the serial port (RS-232) is connected to the switch with the
serial cable provided. The table below lists all the devices used in the connection.
Device Name Description
PC machine Has functional keyboard and RS-232, with terminal
emulator installed, such as HyperTerminal included in
connect with serial port