Edge-Core Direk Tronik 24/48-Port Programming manual

Powered by Accton
Management Guide
ES4524D
ES4548D
24/48-Port
Gigabit Ethernet Switch
e-mail: [email protected]
tel: [phone] fax: [phone]

Management Guide
ES4524D Gigabit Ethernet Switch
Layer 2 Switch
with 20 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP)
ES4548D Gigabit Ethernet Switch
Layer 2 Switch
with 44 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP)

ES4524D
ES4548D
F0.0.0.4 E112006-CS-R01
149100030400A

v
Contents
Section I: Getting Started
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-2
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-3
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-8
Enabling SNMP Management Access 2-10
Community Strings (for SNMP version 1 and 2c clients) 2-10
Trap Receivers 2-11
Configuring Access for SNMP Version 3 Clients 2-12
Managing System Files 2-12
Saving Configuration Settings 2-13
Section II: Switch Management
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Chapter 4: Basic System Settings 4-1
Displaying System Information 4-1
Displaying Switch Hardware/Software Versions 4-3
Displaying Bridge Extension Capabilities 4-5
Configuring Support for Jumbo Frames 4-6
Renumbering the Stack 4-7
Resetting the System 4-7

Contents
vi
Chapter 5: Setting an IP Address 5-1
Setting the Switch’s IP Address (IP Version 4) 5-1
Manual Configuration 5-2
Using DHCP/BOOTP 5-3
Setting the Switch’s IP Address (IP Version 6) 5-4
Configuring an IPv6 Address 5-4
Configuring an IPv6 General Network Prefix 5-10
Configuring the Neighbor Detection Protocol and Static Entries 5-11
Chapter 6: Managing System Files 6-1
Managing Firmware 6-1
Downloading System Software from a Server 6-2
Saving or Restoring Configuration Settings 6-4
Downloading Configuration Settings from a Server 6-5
Chapter 7: Console Port Settings 7-1
Chapter 8: Telnet Settings 8-1
Chapter 9: Configuring Event Logging 9-1
System Log Configuration 9-1
Remote Log Configuration 9-2
Displaying Log Messages 9-4
Sending Simple Mail Transfer Protocol Alerts 9-4
Chapter 10: Setting the System Clock 10-1
Configuring SNTP 10-1
Setting the Time Zone 10-2
Chapter 11: Simple Network Management Protocol 11-1
SNMP Overview 11-1
Enabling the SNMP Agent 11-2
Setting Community Access Strings 11-3
Specifying Trap Managers and Trap Types 11-4
Configuring SNMPv3 Management Access 11-6
Setting a Local Engine ID 11-7
Specifying a Remote Engine ID 11-7
Configuring SNMPv3 Users 11-8
Configuring Remote SNMPv3 Users 11-10
Configuring SNMPv3 Groups 11-12
Setting SNMPv3 Views 11-16
Chapter 12: User Authentication 12-1
Configuring User Accounts 12-1
Configuring Local/Remote Logon Authentication 12-2
Configuring HTTPS 12-5
Replacing the Default Secure-site Certificate 12-6
Configuring the Secure Shell 12-8
Generating the Host Key Pair 12-10

Contents
vii
Configuring the SSH Server 12-12
Filtering IP Addresses for Management Access 12-13
Chapter 13: Configuring Port Security 13-1
Chapter 14: Configuring 802.1X Port Authentication 14-1
Displaying 802.1X Global Settings 14-2
Configuring 802.1X Global Settings 14-3
Configuring Port Settings for 802.1X 14-3
Displaying 802.1X Statistics 14-6
Chapter 15: Access Control Lists 15-1
Overview 15-1
Setting an ACL Name and Type 15-1
Configuring a Standard IPv4 ACL 15-2
Configuring an Extended IPv4 ACL 15-3
Configuring a MAC ACL 15-6
Configuring a Standard IPv6 ACL 15-7
Configuring an Extended IPv6 ACL 15-8
Binding a Port to an Access Control List 15-11
Chapter 16: Port Configuration 16-1
Displaying Connection Status 16-1
Configuring Interface Connections 16-4
Showing Port Statistics 16-6
Chapter 17: Creating Trunk Groups 17-1
Statically Configuring a Trunk 17-2
Setting a Load-Balance Mode for Trunks 17-3
Enabling LACP on Selected Ports 17-5
Configuring LACP Parameters 17-7
Displaying LACP Port Counters 17-9
Displaying LACP Settings and Status for the Local Side 17-11
Displaying LACP Settings and Status for the Remote Side 17-13
Chapter 18: Broadcast Storm Control 18-1
Setting Broadcast Storm Thresholds 18-1
Chapter 19: Configuring Port Mirroring 19-1
Chapter 20: Configuring Rate Limits 20-1
Chapter 21: Address Table Settings 21-1
Setting Static Addresses 21-1
Displaying the Address Table 21-2
Changing the Aging Time 21-4
Chapter 22: Spanning Tree Algorithm Configuration 22-1
Overview 22-1
Displaying Global Settings 22-3

Contents
viii
Configuring Global Settings 22-6
Displaying Interface Settings 22-10
Configuring Interface Settings 22-13
Configuring Multiple Spanning Trees 22-15
Displaying Interface Settings for MSTP 22-18
Configuring Interface Settings for MSTP 22-19
Chapter 23: VLAN Configuration 23-1
Assigning Ports to VLANs 23-1
Enabling or Disabling GVRP (Global Setting) 23-4
Displaying Basic VLAN Information 23-4
Displaying Current VLANs 23-5
Creating VLANs 23-6
Adding Static Members to VLANs (VLAN Index) 23-7
Adding Static Members to VLANs (Port Index) 23-9
Configuring VLAN Behavior for Interfaces 23-10
Configuring IEEE 802.1Q Tunneling 23-12
Enabling QinQ Tunneling on the Switch 23-16
Adding an Interface to a QinQ Tunnel 23-17
Chapter 24: Configuring Private VLANs 24-1
Enabling Private VLANs 24-1
Configuring Uplink and Downlink Ports 24-2
Chapter 25: Configuring Protocol-Based VLANs 25-1
Configuring Protocol Groups 25-1
Mapping Protocols to VLANs 25-2
Chapter 26: Class of Service Configuration 26-1
Layer 2 Queue Settings 26-1
Setting the Default Priority for Interfaces 26-1
Mapping CoS Values to Egress Queues 26-3
Selecting the Queue Mode 26-4
Setting the Service Weight for Traffic Classes 26-5
Layer 3/4 Priority Settings 26-7
Mapping Layer 3/4 Priorities to CoS Values 26-7
Selecting IP Precedence/DSCP Priority 26-7
Mapping IP Precedence 26-8
Mapping DSCP Priority 26-9
Mapping IP Port Priority 26-11
Chapter 27: Quality of Service 27-1
Configuring Quality of Service Parameters 27-1
Configuring a Class Map 27-2
Creating QoS Policies 27-4
Attaching a Policy Map to Ingress Queues 27-7

Contents
ix
Chapter 28: Multicast Filtering 28-1
Layer 2 IGMP (Snooping and Query) 28-1
Configuring IGMP Snooping and Query Parameters 28-2
Displaying Interfaces Attached to a Multicast Router 28-4
Specifying Static Interfaces for a Multicast Router 28-5
Displaying Port Members of Multicast Services 28-6
Assigning Ports to Multicast Services 28-7
Chapter 29: Configuring Domain Name Service 29-1
Configuring General DNS Service Parameters 29-1
Configuring Static DNS Host to Address Entries 29-3
Displaying the DNS Cache 29-5
Chapter 30: Switch Clustering 30-1
Cluster Configuration 30-1
Cluster Member Configuration 30-2
Cluster Member Information 30-3
Cluster Candidate Information 30-4
Section III: Command Line Interface
Chapter 31: Using the Command Line Interface 31-1
Accessing the CLI 31-1
Console Connection 31-1
Telnet Connection 31-1
Entering Commands 31-3
Keywords and Arguments 31-3
Minimum Abbreviation 31-3
Command Completion 31-3
Getting Help on Commands 31-3
Showing Commands 31-4
Partial Keyword Lookup 31-5
Negating the Effect of Commands 31-5
Using Command History 31-5
Understanding Command Modes 31-6
Exec Commands 31-6
Configuration Commands 31-7
Command Line Processing 31-9
Chapter 32: CLI Command Groups 32-1
Chapter 33: General Commands 33-1
enable 33-1
disable 33-2
configure 33-2
show history 33-3
prompt 33-4

Contents
x
end 33-4
exit 33-4
quit 33-5
Chapter 34: System Management Commands 34-1
hostname 34-1
reload 34-2
switch renumber 34-2
jumbo frame 34-3
show startup-config 34-3
show running-config 34-5
show system 34-7
show users 34-7
show version 34-8
Chapter 35: File Management Commands 35-1
copy 35-2
delete 35-4
dir 35-5
whichboot 35-6
boot system 35-7
Chapter 36: Line Commands 36-1
line 36-1
login 36-2
password 36-3
timeout login response 36-4
exec-timeout 36-4
password-thresh 36-5
silent-time 36-6
databits 36-6
parity 36-7
speed 36-8
stopbits 36-8
disconnect 36-9
show line 36-9
Chapter 37: Event Logging Commands 37-1
logging on 37-1
logging history 37-2
logging host 37-3
logging facility 37-3
logging trap 37-4
clear log 37-5
show logging 37-5
show log 37-7

Contents
xi
Chapter 38: SMTP Alert Commands 38-1
logging sendmail host 38-1
logging sendmail level 38-2
logging sendmail source-email 38-2
logging sendmail destination-email 38-3
logging sendmail 38-3
show logging sendmail 38-4
Chapter 39: Time Commands 39-1
sntp client 39-1
sntp server 39-2
sntp poll 39-3
show sntp 39-3
clock timezone 39-4
calendar set 39-5
show calendar 39-5
Chapter 40: SNMP Commands 40-1
snmp-server 40-2
show snmp 40-2
snmp-server community 40-3
snmp-server contact 40-4
snmp-server location 40-4
snmp-server host 40-5
snmp-server enable traps 40-7
snmp-server engine-id 40-8
show snmp engine-id 40-9
snmp-server view 40-10
show snmp view 40-11
snmp-server group 40-11
show snmp group 40-13
snmp-server user 40-14
show snmp user 40-15
Chapter 41: User Authentication Commands 41-1
User Account Commands 41-1
username 41-1
enable password 41-2
Authentication Sequence 41-3
authentication login 41-3
authentication enable 41-4
RADIUS Client 41-5
radius-server host 41-6
radius-server port 41-6
radius-server key 41-7
radius-server retransmit 41-7

Contents
xii
radius-server timeout 41-8
show radius-server 41-8
TACACS+ Client 41-9
tacacs-server host 41-9
tacacs-server port 41-9
tacacs-server key 41-10
show tacacs-server 41-10
Web Server Commands 41-11
ip http port 41-11
ip http server 41-11
ip http secure-server 41-12
ip http secure-port 41-13
Telnet Server Commands 41-14
ip telnet server 41-14
Secure Shell Commands 41-15
ip ssh server 41-17
ip ssh timeout 41-18
ip ssh authentication-retries 41-19
ip ssh server-key size 41-19
delete public-key 41-20
ip ssh crypto host-key generate 41-20
ip ssh crypto zeroize 41-21
ip ssh save host-key 41-21
show ip ssh 41-22
show ssh 41-22
show public-key 41-23
IP Filter Commands 41-24
management 41-24
show management 41-25
Chapter 42: Port Security Commands 42-1
port security 42-1
Chapter 43: 802.1X Port Authentication 43-1
dot1x system-auth-control 43-1
dot1x default 43-2
dot1x max-req 43-2
dot1x port-control 43-2
dot1x operation-mode 43-3
dot1x re-authenticate 43-4
dot1x re-authentication 43-4
dot1x timeout quiet-period 43-5
dot1x timeout re-authperiod 43-5
dot1x timeout tx-period 43-6
show dot1x 43-6

Contents
xiii
Chapter 44: Access Control List Commands 44-1
IPv4 ACLs 44-1
access-list ip 44-2
permit, deny (Standard IPv4 ACL) 44-2
permit, deny (Extended IPv4 ACL) 44-3
show ip access-list 44-5
ip access-group 44-6
show ip access-group 44-6
IPv6 ACLs 44-7
access-list ipv6 44-7
permit, deny (Standard IPv6 ACL) 44-8
permit, deny (Extended IPv6 ACL) 44-9
show ipv6 access-list 44-10
ipv6 access-group 44-11
show ipv6 access-group 44-11
MAC ACLs 44-12
access-list mac 44-12
permit, deny (MAC ACL) 44-13
show mac access-list 44-14
mac access-group 44-15
show mac access-group 44-15
ACL Information 44-16
show access-list 44-16
show access-group 44-16
Chapter 45: Interface Commands 45-1
interface 45-1
description 45-2
speed-duplex 45-2
negotiation 45-3
capabilities 45-4
flowcontrol 45-5
media-type 45-6
shutdown 45-6
clear counters 45-7
show interfaces status 45-8
show interfaces counters 45-9
show interfaces switchport 45-10
Chapter 46: Link Aggregation Commands 46-1
channel-group 46-2
port channel load-balance 46-3
lacp 46-4
lacp system-priority 46-5
lacp admin-key (Ethernet Interface) 46-6
lacp admin-key (Port Channel) 46-7

Contents
xiv
lacp port-priority 46-8
show lacp 46-8
show port-channel load-balance 46-11
Chapter 47: Broadcast Storm Control Commands 47-1
switchport broadcast packet-rate 47-1
Chapter 48: Mirror Port Commands 48-1
port monitor 48-1
show port monitor 48-2
Chapter 49: Rate Limit Commands 49-1
rate-limit 49-1
Chapter 50: Address Table Commands 50-1
mac-address-table static 50-1
clear mac-address-table dynamic 50-2
show mac-address-table 50-3
mac-address-table aging-time 50-4
show mac-address-table aging-time 50-4
Chapter 51: Spanning Tree Commands 51-1
spanning-tree 51-2
spanning-tree mode 51-2
spanning-tree forward-time 51-3
spanning-tree hello-time 51-4
spanning-tree max-age 51-5
spanning-tree priority 51-5
spanning-tree pathcost method 51-6
spanning-tree transmission-limit 51-7
spanning-tree mst-configuration 51-7
mst vlan 51-8
mst priority 51-9
name 51-9
revision 51-10
max-hops 51-11
spanning-tree spanning-disabled 51-11
spanning-tree cost 51-12
spanning-tree port-priority 51-13
spanning-tree edge-port 51-13
spanning-tree portfast 51-14
spanning-tree link-type 51-15
spanning-tree mst cost 51-16
spanning-tree mst port-priority 51-17
spanning-tree protocol-migration 51-17
show spanning-tree 51-18
show spanning-tree mst configuration 51-20

Contents
xv
Chapter 52: VLAN Commands 52-1
GVRP and Bridge Extension Commands 52-1
bridge-ext gvrp 52-2
show bridge-ext 52-2
switchport gvrp 52-3
show gvrp configuration 52-3
garp timer 52-4
show garp timer 52-5
Editing VLAN Groups 52-5
vlan database 52-5
vlan 52-6
Configuring VLAN Interfaces 52-7
interface vlan 52-7
switchport mode 52-8
switchport acceptable-frame-types 52-9
switchport ingress-filtering 52-9
switchport native vlan 52-10
switchport allowed vlan 52-11
switchport forbidden vlan 52-12
Configuring IEEE 802.1Q Tunneling 52-13
dot1q-tunnel system-tunnel-control 52-14
switchport dot1q-tunnel mode 52-14
switchport dot1q-tunnel tpid 52-15
show dot1q-tunnel 52-16
Displaying VLAN Information 52-16
show vlan 52-17
Chapter 53: Private VLAN Commands 53-1
pvlan 53-1
show pvlan 53-2
Chapter 54: Protocol-based VLAN Commands 54-1
protocol-vlan protocol-group (Configuring Groups) 54-1
protocol-vlan protocol-group (Configuring Interfaces) 54-2
show protocol-vlan protocol-group 54-3
show interfaces protocol-vlan protocol-group 54-4
Chapter 55: Class of Service Commands 55-1
Priority Commands (Layer 2) 55-1
queue mode 55-2
switchport priority default 55-3
queue bandwidth 55-4
queue cos-map 55-4
show queue mode 55-5
show queue bandwidth 55-6
show queue cos-map 55-6

Contents
xvi
Priority Commands (Layer 3 and 4) 55-7
map ip port (Global Configuration) 55-7
map ip port (Interface Configuration) 55-8
map ip precedence (Global Configuration) 55-8
map ip precedence (Interface Configuration) 55-9
map ip dscp (Global Configuration) 55-10
map ip dscp (Interface Configuration) 55-10
show map ip port 55-11
show map ip precedence 55-12
show map ip dscp 55-13
Chapter 56: Quality of Service Commands 56-1
class-map 56-2
match 56-3
policy-map 56-4
class 56-4
set 56-5
police 56-6
service-policy 56-7
show class-map 56-8
show policy-map 56-8
show policy-map interface 56-9
Chapter 57: Multicast Filtering Commands 57-1
IGMP Snooping Commands 57-1
ip igmp snooping 57-1
ip igmp snooping vlan static 57-2
ip igmp snooping version 57-2
show ip igmp snooping 57-3
show mac-address-table multicast 57-3
IGMP Query Commands 57-4
ip igmp snooping querier 57-4
ip igmp snooping query-count 57-5
ip igmp snooping query-interval 57-5
ip igmp snooping query-max-response-time 57-6
ip igmp snooping router-port-expire-time 57-7
Static Multicast Routing Commands 57-8
ip igmp snooping vlan mrouter 57-8
show ip igmp snooping mrouter 57-9
Chapter 58: Domain Name Service Commands 58-1
ip host 58-1
clear host 58-2
ip domain-name 58-3
ip domain-list 58-3
ip name-server 58-4

Contents
xvii
ip domain-lookup 58-5
show hosts 58-6
show dns 58-7
show dns cache 58-7
clear dns cache 58-8
Chapter 59: IPv4 Interface Commands 59-1
ip address 59-1
ip default-gateway 59-2
ip dhcp restart 59-3
show ip interface 59-4
show ip redirects 59-4
ping 59-5
Chapter 60: IPv6 Interface Commands 60-1
ipv6 enable 60-2
ipv6 general-prefix 60-3
show ipv6 general-prefix 60-4
ipv6 address 60-4
ipv6 address autoconfig 60-6
ipv6 address eui-64 60-7
ipv6 address link-local 60-9
show ipv6 interface 60-10
ipv6 default-gateway 60-12
show ipv6 default-gateway 60-12
ipv6 mtu 60-13
show ipv6 mtu 60-14
show ipv6 traffic 60-14
clear ipv6 traffic 60-20
ping ipv6 60-21
ipv6 neighbor 60-22
ipv6 nd dad attempts 60-23
ipv6 nd ns interval 60-25
show ipv6 neighbors 60-26
clear ipv6 neighbors 60-27
Chapter 61: Switch Cluster Commands 61-1
cluster 61-1
cluster commander 61-2
cluster ip-pool 61-2
cluster member 61-3
rcommand 61-4
show cluster 61-4
show cluster members 61-5
show cluster candidates 61-5

Contents
xviii
Section IV: Appendices
Appendix A: Software Specifications A-1
Software Features A-1
Management Features A-2
Standards A-2
Management Information Bases A-3
Appendix B: Troubleshooting B-1
Problems Accessing the Management Interface B-1
Using System Logs B-2
Glossary
Index

xix
Tables
Table 1-1 Key Features 1-1
Table 1-2 System Defaults 1-6
Table 3-1 Web Page Configuration Buttons 3-3
Table 3-2 Switch Main Menu 3-4
Table 9-1 Logging Levels 9-1
Table 11-1 SNMPv3 Security Models and Levels 11-2
Table 11-2 Supported Notification Messages 11-13
Table 12-1 HTTPS System Support 12-6
Table 14-1 802.1X Statistics 14-6
Table 16-1 Port Statistics 16-6
Table 17-1 LACP Port Counters 17-9
Table 17-2 LACP Internal Configuration Information 17-11
Table 17-3 LACP Neighbor Configuration Information 17-13
Table 26-1 Mapping CoS Values to Egress Queues 26-3
Table 26-2 CoS Priority Levels 26-3
Table 26-3 Mapping IP Precedence 26-8
Table 26-4 Mapping DSCP Priority 26-9
Table 31-1 General Command Modes 31-6
Table 31-2 Configuration Command Modes 31-8
Table 31-3 Keystroke Commands 31-9
Table 32-1 Command Group Index 32-1
Table 33-1 General Commands 33-1
Table 34-1 System Management Commands 34-1
Table 35-1 Flash/File Commands 35-1
Table 35-2 File Directory Information 35-6
Table 36-1 Line Commands 36-1
Table 37-1 Event Logging Commands 37-1
Table 37-2 Logging Levels 37-2
Table 37-3 show logging flash/ram - display description 37-6
Table 37-4 show logging trap - display description 37-6
Table 38-1 SMTP Alert Commands 38-1
Table 39-1 Time Commands 39-1
Table 40-1 SNMP Commands 40-1
Table 40-2 show snmp engine-id - display description 40-9
Table 40-3 show snmp view - display description 40-11
Table 40-4 show snmp group - display description 40-13
Table 40-5 show snmp user - display description 40-16
Table 41-1 Authentication Commands 41-1
Table 41-2 User Access Commands 41-1
Table 41-3 Default Login Settings 41-2
Table 41-4 Authentication Sequence Commands 41-3

xx
Tables
Table 41-5 RADIUS Client Commands 41-5
Table 41-6 TACACS+ Client Commands 41-9
Table 41-7 Web Server Commands 41-11
Table 41-8 HTTPS System Support 41-13
Table 41-9 Telnet Server Commands 41-14
Table 41-10 Secure Shell Commands 41-15
Table 41-11 show ssh - display description 41-22
Table 41-12 IP Filter Commands 41-24
Table 42-1 Port Security Commands 42-1
Table 43-1 802.1X Port Authentication Commands 43-1
Table 44-1 Access Control List Commands 44-1
Table 44-2 IPv4 ACL Commands 44-1
Table 44-3 IPv6 ACL Commands 44-7
Table 44-4 MAC ACL Commands 44-12
Table 44-5 ACL Information Commands 44-16
Table 45-1 Interface Commands 45-1
Table 45-2 show interfaces switchport - display description 45-10
Table 46-1 Link Aggregation Commands 46-1
Table 46-2 show lacp counters - display description 46-9
Table 46-3 show lacp internal - display description 46-10
Table 46-4 show lacp neighbors - display description 46-10
Table 46-5 show lacp sysid - display description 46-11
Table 47-1 Broadcast Storm Control Commands 47-1
Table 48-1 Mirror Port Commands 48-1
Table 49-1 Rate Limit Commands 49-1
Table 50-1 Address Table Commands 50-1
Table 51-1 Spanning Tree Commands 51-1
Table 52-1 VLAN Commands 52-1
Table 52-2 GVRP and Bridge Extension Commands 52-1
Table 52-3 Commands for Editing VLAN Groups 52-5
Table 52-4 Commands for Configuring VLAN Interfaces 52-7
Table 52-1 IEEE 802.1Q Tunneling Commands 52-13
Table 52-1 Commands for Displaying VLAN Information 52-16
Table 53-1 Private VLAN Commands 53-1
Table 54-1 Protocol-based VLAN Commands 54-1
Table 55-1 Priority Commands 55-1
Table 55-2 Priority Commands (Layer 2) 55-1
Table 55-3 Default CoS Priority Levels 55-5
Table 55-4 Priority Commands (Layer 3 and 4) 55-7
Table 55-5 Mapping IP Precedence to CoS Values 55-9
Table 55-6 Mapping IP DSCP to CoS Values 55-11
Table 56-1 Quality of Service Commands 56-1
Table 57-1 Multicast Filtering Commands 57-1
Table 57-2 IGMP Snooping Commands 57-1
Table 57-3 IGMP Query Commands 57-4