Edge-Core ECS3510-10PD Programming manual

Management Guide
www.edge-core.com
10-Port Layer 2
Fast Ethernet Switch

M ANAGEMENT G UIDE
ECS3510-10PD FAST ETHERNET SWITCH
Layer 2 Switch
with 8 10/100BASE-TX (RJ-45) Ports,
and 2 Gigabit Combination Ports (RJ-45/SFP)
ECS3510-10PD
E032014/ST-R03
149100000179A

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.

A BOUT T HIS G UIDE
– 6 –
REVISION HISTORY This section summarizes the changes in each revision of this guide.
MARCH 2014 RELEASE
This is the third release of this guide. This guide is valid for software
release v1.4.2.1. It includes the following changes:
◆Added the command "clock timezone-predefined" on page 771.
DECEMBER 2013 RELEASE
This is the second release of this guide. This guide is valid for software
release v1.4.0.1. It includes the following changes:
◆Updated parameter values under "Configuring the Console Port" on
page 141.
◆Updated parameter values under "Configuring Telnet Settings" on
page 143.
◆Updated description of parameters under "Configuring by Port List" on
page 152.
◆Added timeout parameter under "Configuring a Dynamic Trunk" on
page 177.
◆Added sections "Displaying Transceiver Data" on page 166,
"Configuring Transceiver Thresholds" on page 167, and "Configuring
Load Balancing" on page 187.
◆Added the section "Creating CVLAN to SPVLAN Mapping Entries" on
page 215.
◆Added “priority” parameter under "Mapping Protocol Groups to
Interfaces" on page 221.
◆Added the section "Configuring MAC Address Learning" on page 229.
◆Added new parameters under "Configuring Loopback Detection" on
page 242.
◆Updated description of “Type” parameter and added description of
“CoS” parameter under "Configuring a Class Map" on page 290.
◆Updated description of “Access Level” parameter under "Configuring
User Accounts" on page 328.
◆Added “Counter” parameter under "Binding a Port to an Access Control
List" on page 373.
◆Added the sections "Configuring ACL Mirroring" on page 374 and
"Showing ACL Hardware Counters" on page 376.
◆Added the parameter “Allow Zeros” under "Configuring Global Settings
for ARP Inspection" on page 378.

A BOUT T HIS G UIDE
– 7 –
◆Updated parameter list under "Configuring Port Security" on page 387.
◆Added the section "IPv6 Source Guard" on page 409.
◆Updated parameter list under "DHCP Snooping Configuration" on
page 418 and "Configuring Ports for DHCP Snooping" on page 420.
◆Added “UDP Port” parameter under "Remote Log Configuration" on
page 428.
◆Added “MED-Location Civic Address” parameter under "Configuring
LLDP Interface Attributes" on page 433.
◆Added the section "Configuring LLDP Interface Civic-Address" on
page 437.
◆Updated parameter list under "Displaying LLDP Local Device
Information" on page 439 and "Displaying LLDP Remote Device
Information" on page 442.
◆Added the sections "Creating SNMP Notification Logs" on page 477 and
"Showing SNMP Statistics" on page 479.
◆Updated description for ERPS version 2 under "ERPS Ring
Configuration" on page 502, and added the section "ERPS Forced and
Manual Mode Operations" on page 518.
◆Added the sections "Configuring a Remote Loop Back Test" on page 564
and "Displaying Results of Remote Loop Back Testing" on page 566.
◆Added the section "Using the Trace Route Function" on page 571
◆Added description of parameters for RA Guard under "Configuring IPv6
Interface Settings" on page 580.
◆Added the section "Specifying a DHCP Client Identifier" on page 603,
"Configuring DHCP Relay Service" on page 604.
◆Added the section "Configuring the PPPoE Intermediate Agent" on
page 608.
◆Added description of “Multicast Data Drop” under "Filtering IGMP Query
Packets and Multicast Data" on page 632.
◆Updated parameter list under "Displaying Multicast Groups Discovered
by IGMP Snooping" on page 633.
◆Added the section "MLD Snooping (Snooping and Query for IPv6)" on
page 643.
◆Added the section "Multicast VLAN Registration for IPv6" on page 668.
◆Added "TFTP Configuration Commands" on page 736.

A BOUT T HIS G UIDE
– 8 –
◆Added the command "terminal" on page 747.
◆Added UDP port parameter for the command "logging host" on
page 751.
◆Added the command "clock summer-time (date)" on page 766, "clock
summer-time (predefined)" on page 768, and "clock summer-time
(recurring)" on page 769.
◆Added “mac-notification” parameter for the command "snmp-server
enable traps" on page 790, as well as the commands "snmp-server
enable port-traps mac-notification" on page 793 and "show snmp-
server enable port-traps" on page 794.
◆Updated description of the “level” parameter under the commands
"enable password" on page 816, and "username" on page 817.
◆Added the command "accounting commands" on page 836.
◆Added the commands "mac-learning" on page 880, and "port security
mac-address-as-permanent" on page 883.
◆Added the command "ip dhcp snooping limit rate" on page 910.
◆Added the commands "ipv6 dhcp snooping option remote-id" on
page 919 and "ipv6 dhcp snooping option remote-id policy" on
page 920.
◆Added MAC and ACL mode options for the commands "ip source-guard
binding" on page 926, "ip source-guard max-binding" on page 929, "ip
source-guard mode" on page 930.
◆Added the command "clear ip source-guard binding blocked" on
page 931.
◆Updated parameter list for the command "show ip source-guard
binding" on page 932.
◆Added the section "IPv6 Source Guard" on page 933.
◆Added “allow zeros” parameter to the command "ip arp inspection
validate" on page 942.
◆Added “counter” parameter to the command "ip access-group" on
page 962, "ipv6 access-group" on page 968, and "mac access-group"
on page 974.
◆Added Layer 3 and 4 parameters to the command "permit, deny
(MAC ACL)" on page 971.
◆Added the command "clear access-list hardware counters" on
page 979, and added the “hardware-counters” parameter to the
command "show access-list" on page 980.

A BOUT T HIS G UIDE
– 9 –
◆Added the commands "discard" on page 985 and "show discard" on
page 991.
◆Added the commands "transceiver-monitor" on page 996, "transceiver-
threshold-auto" on page 996, "transceiver-threshold current" on
page 997, "transceiver-threshold rx-power" on page 998, "transceiver-
threshold temperature" on page 999, "transceiver-threshold tx-power"
on page 1000, "transceiver-threshold voltage" on page 1001, and
"show interfaces transceiver-threshold" on page 1003.
◆Added the command "lacp timeout" on page 1017.
◆Added “access-list” parameter to the command "port monitor" on
page 1023.
◆Added the command "spanning-tree tc-prop-stop" on page 1094.
◆Added changes for ERPS version 2 under "ERPS Commands" on
page 1099.
◆Added “priority” parameter to the command "protocol-vlan
protocol-group (Configuring Interfaces)" on page 1158.
◆Updated syntax for "class-map" on page 1188 command.
◆Added “cos” parameter to "match" on page 1190 command.
◆Added commands "clear ip igmp snooping groups dynamic" on
page 1222 and "clear ip igmp snooping statistics" on page 1223.
◆Updated display text for the command "show ip igmp snooping group"
on page 1224.
◆Added the command "ip igmp authentication" on page 1232 and "show
ip igmp authentication" on page 1237.
◆Updated syntax for the command "ip igmp query-drop" on page 1236.
◆Added commands "ip multicast-data-drop" on page 1236 and "show ip
multicast-data-drop" on page 1240.
◆Added sections "MLD Snooping" on page 1241 and "MLD Filtering and
Throttling" on page 1251.
◆Added commands "mvr priority" on page 1264 and "mvr proxy-
switching" on page 1266.
◆Updated parameters for "mvr immediate-leave" on page 1270.
◆Added commands "clear mrv groups dynamic" on page 1273 and "clear
mrv statistics" on page 1273.
◆Updated parameters for "show mvr members" on page 1276 and "show
mvr statistics" on page 1278.

A BOUT T HIS G UIDE
– 10 –
◆Updated display text for the command “show mvr statistics query” on
page 1278, and “show mvr statistics summary” on page 1278.
◆Added the section "MVR for IPv6" on page 1283.
◆Added commands "clear efm oam event-log" on page 1374, "efm oam
remote-loopback" on page 1375, and "efm oam remote-loopback test"
on page 1376.
◆Added the section "DHCP Relay Option 82" on page 1397.
◆Updated parameter description for the command "ip address" on
page 1404.
◆Added the section "ND Snooping" on page 1439.
JANUARY 2012 RELEASE
This is the first release of this guide. This guide is valid for software release
v1.3.4.5.

– 11 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 11
FIGURES 49
TABLES 61
SECTION I GETTING STARTED 67
1INTRODUCTION 69
Key Features 69
Description of Software Features 70
System Defaults 75
2INITIAL SWITCH CONFIGURATION 79
Connecting to the Switch 79
Configuration Options 79
Required Connections 80
Remote Connections 81
Basic Configuration 82
Console Connection 82
Setting Passwords 82
Disabling PSE Check for Network Connections 83
Setting an IP Address 83
Downloading a Configuration File Referenced by a DHCP Server 89
Enabling SNMP Management Access 91
Managing System Files 93
Saving or Restoring Configuration Settings 94
SECTION II WEB CONFIGURATION 97
3USING THE WEB INTERFACE 99
Connecting to the Web Interface 99

C ONTENTS
– 12 –
Navigating the Web Browser Interface 100
Home Page 100
Configuration Options 101
Panel Display 101
Main Menu 102
4BASIC MANAGEMENT TASKS 119
Displaying System Information 119
Displaying Hardware/Software Versions 120
Configuring Support for Jumbo Frames 122
Displaying Bridge Extension Capabilities 123
Managing System Files 124
Copying Files via FTP/TFTP or HTTP 124
Saving the Running Configuration to a Local File 126
Setting the Start-Up File 127
Showing System Files 128
Automatic Operation Code Upgrade 129
Setting the System Clock 133
Setting the Time Manually 133
Setting the SNTP Polling Interval 134
Configuring NTP 135
Configuring Time Servers 136
Setting the Time Zone 140
Configuring the Console Port 141
Configuring Telnet Settings 143
Displaying CPU Utilization 144
Displaying Memory Utilization 145
Resetting the System 146
5INTERFACE CONFIGURATION 151
Port Configuration 152
Configuring by Port List 152
Configuring by Port Range 154
Displaying Connection Status 155
Configuring Local Port Mirroring 156
Configuring Remote Port Mirroring 158
Showing Port or Trunk Statistics 162
Displaying Transceiver Data 166

C ONTENTS
– 13 –
Configuring Transceiver Thresholds 167
Performing Cable Diagnostics 170
Performing Cable Diagnostics 172
Trunk Configuration 173
Configuring a Static Trunk 174
Configuring a Dynamic Trunk 177
Displaying LACP Port Counters 183
Displaying LACP Settings and Status for the Local Side 184
Displaying LACP Settings and Status for the Remote Side 186
Configuring Load Balancing 187
Saving Power 189
Traffic Segmentation 191
Enabling Traffic Segmentation 191
Configuring Uplink and Downlink Ports 192
VLAN Trunking 194
6 VLAN CONFIGURATION 197
IEEE 802.1Q VLANs 197
Configuring VLAN Groups 200
Adding Static Members to VLANs 202
Configuring Dynamic VLAN Registration 207
IEEE 802.1Q Tunneling 210
Enabling QinQ Tunneling on the Switch 214
Creating CVLAN to SPVLAN Mapping Entries 215
Adding an Interface to a QinQ Tunnel 217
Protocol VLANs 219
Configuring Protocol VLAN Groups 219
Mapping Protocol Groups to Interfaces 221
Configuring IP Subnet VLANs 223
Configuring MAC-based VLANs 225
Configuring VLAN Mirroring 227
7ADDRESS TABLE SETTINGS 229
Configuring MAC Address Learning 229
Setting Static Addresses 231
Changing the Aging Time 232
Displaying the Dynamic Address Table 233
Clearing the Dynamic Address Table 234

C ONTENTS
– 14 –
Configuring MAC Address Mirroring 235
8SPANNING TREE ALGORITHM 239
Overview 239
Configuring Loopback Detection 242
Configuring Global Settings for STA 244
Displaying Global Settings for STA 249
Configuring Interface Settings for STA 250
Displaying Interface Settings for STA 254
Configuring Multiple Spanning Trees 257
Configuring Interface Settings for MSTP 261
9CONGESTION CONTROL 265
Rate Limiting 265
Storm Control 266
Automatic Traffic Control 268
Setting the ATC Timers 270
Configuring ATC Thresholds and Responses 271
10 CLASS OF SERVICE 275
Layer 2 Queue Settings 275
Setting the Default Priority for Interfaces 275
Selecting the Queue Mode 276
Mapping CoS Values to Egress Queues 279
Layer 3/4 Priority Settings 281
Setting Priority Processing to DSCP or CoS 282
Mapping Ingress DSCP Values to Internal DSCP Values 283
Mapping CoS Priorities to Internal DSCP Values 285
11 QUALITY OF SERVICE 289
Overview 289
Configuring a Class Map 290
Creating QoS Policies 293
Attaching a Policy Map to a Port 303
12 VOIP TRAFFIC CONFIGURATION 305
Overview 305
Configuring VoIP Traffic 306
Configuring Telephony OUI 307
Configuring VoIP Traffic Ports 308

C ONTENTS
– 15 –
13 SECURITY MEASURES 311
AAA Authentication, Authorization and Accounting 312
Configuring Local/Remote Logon Authentication 313
Configuring Remote Logon Authentication Servers 314
Configuring AAA Accounting 319
Configuring AAA Authorization 325
Configuring User Accounts 328
Web Authentication 330
Configuring Global Settings for Web Authentication 331
Configuring Interface Settings for Web Authentication 332
Network Access (MAC Address Authentication) 333
Configuring Global Settings for Network Access 336
Configuring Network Access for Ports 337
Configuring Port Link Detection 339
Configuring a MAC Address Filter 340
Displaying Secure MAC Address Information 342
Configuring HTTPS 343
Configuring Global Settings for HTTPS 343
Replacing the Default Secure-site Certificate 345
Configuring the Secure Shell 347
Configuring the SSH Server 349
Generating the Host Key Pair 351
Importing User Public Keys 352
Access Control Lists 354
Setting a Time Range 356
Showing TCAM Utilization 358
Setting the ACL Name and Type 359
Configuring a Standard IPv4 ACL 361
Configuring an Extended IPv4 ACL 362
Configuring a Standard IPv6 ACL 365
Configuring an Extended IPv6 ACL 367
Configuring a MAC ACL 369
Configuring an ARP ACL 371
Binding a Port to an Access Control List 373
Configuring ACL Mirroring 374
Showing ACL Hardware Counters 376

C ONTENTS
– 16 –
ARP Inspection 377
Configuring Global Settings for ARP Inspection 378
Configuring VLAN Settings for ARP Inspection 380
Configuring Interface Settings for ARP Inspection 382
Displaying ARP Inspection Statistics 383
Displaying the ARP Inspection Log 384
Filtering IP Addresses for Management Access 385
Configuring Port Security 387
Configuring 802.1X Port Authentication 389
Configuring 802.1X Global Settings 391
Configuring Port Authenticator Settings for 802.1X 392
Configuring Port Supplicant Settings for 802.1X 396
Displaying 802.1X Statistics 398
DoS Protection 401
IPv4 Source Guard 404
Configuring Ports for IPv4 Source Guard 404
Configuring Static Bindings for IPv4 Source Guard 406
Displaying Information for Dynamic IPv4 Source Guard Bindings 408
IPv6 Source Guard 409
Configuring Ports for IPv6 Source Guard 409
Configuring Static Bindings for IPv6 Source Guard 412
Displaying Information for Dynamic IPv6 Source Guard Bindings 414
DHCP Snooping 415
DHCP Snooping Configuration 418
DHCP Snooping VLAN Configuration 419
Configuring Ports for DHCP Snooping 420
Displaying DHCP Snooping Binding Information 422
14 BASIC ADMINISTRATION PROTOCOLS 425
Configuring Event Logging 426
System Log Configuration 426
Remote Log Configuration 428
Sending Simple Mail Transfer Protocol Alerts 429
Link Layer Discovery Protocol 431
Setting LLDP Timing Attributes 431
Configuring LLDP Interface Attributes 433
Configuring LLDP Interface Civic-Address 437

C ONTENTS
– 17 –
Displaying LLDP Local Device Information 439
Displaying LLDP Remote Device Information 442
Displaying Device Statistics 450
Power over Ethernet 452
Configuring the Power Source Check 452
Simple Network Management Protocol 453
Configuring Global Settings for SNMP 456
Setting the Local Engine ID 457
Specifying a Remote Engine ID 458
Setting SNMPv3 Views 459
Configuring SNMPv3 Groups 462
Setting Community Access Strings 466
Configuring Local SNMPv3 Users 468
Configuring Remote SNMPv3 Users 470
Specifying Trap Managers 473
Creating SNMP Notification Logs 477
Showing SNMP Statistics 479
Remote Monitoring 481
Configuring RMON Alarms 482
Configuring RMON Events 484
Configuring RMON History Samples 486
Configuring RMON Statistical Samples 489
Switch Clustering 492
Configuring General Settings for Clusters 493
Cluster Member Configuration 494
Managing Cluster Members 496
Ethernet Ring Protection Switching 497
ERPS Global Configuration 501
ERPS Ring Configuration 502
ERPS Forced and Manual Mode Operations 518
Connectivity Fault Management 522
Configuring Global Settings for CFM 525
Configuring Interfaces for CFM 529
Configuring CFM Maintenance Domains 529
Configuring CFM Maintenance Associations 534
Configuring Maintenance End Points 539

C ONTENTS
– 18 –
Configuring Remote Maintenance End Points 540
Transmitting Link Trace Messages 542
Transmitting Loop Back Messages 544
Transmitting Delay-Measure Requests 546
Displaying Local MEPs 548
Displaying Details for Local MEPs 549
Displaying Local MIPs 551
Displaying Remote MEPs 551
Displaying Details for Remote MEPs 552
Displaying the Link Trace Cache 554
Displaying Fault Notification Settings 556
Displaying Continuity Check Errors 557
OAM Configuration 558
Enabling OAM on Local Ports 558
Displaying Statistics for OAM Messages 561
Displaying the OAM Event Log 562
Displaying the Status of Remote Interfaces 563
Configuring a Remote Loop Back Test 564
Displaying Results of Remote Loop Back Testing 566
15 IP CONFIGURATION 569
Using the Ping Function 569
Using the Trace Route Function 571
Address Resolution Protocol 572
Setting the ARP Timeout 573
Displaying ARP Entries 574
Setting the Switch’s IP Address (IP Version 4) 574
Configuring the IPv4 Default Gateway 574
Configuring IPv4 Interface Settings 575
Setting the Switch’s IP Address (IP Version 6) 578
Configuring the IPv6 Default Gateway 579
Configuring IPv6 Interface Settings 580
Configuring an IPv6 Address 584
Showing IPv6 Addresses 587
Showing the IPv6 Neighbor Cache 588
Showing IPv6 Statistics 590
Showing the MTU for Responding Destinations 595

C ONTENTS
– 19 –
16 IP SERVICES 597
Domain Name Service 597
Configuring General DNS Service Parameters 597
Configuring a List of Domain Names 598
Configuring a List of Name Servers 600
Configuring Static DNS Host to Address Entries 601
Displaying the DNS Cache 602
Dynamic Host Configuration Protocol 603
Specifying a DHCP Client Identifier 603
Configuring DHCP Relay Service 604
Configuring the PPPoE Intermediate Agent 608
Configuring PPPoE IA Global Settings 608
Configuring PPPoE IA Interface Settings 610
Showing PPPoE IA Statistics 612
17 MULTICAST FILTERING 615
Overview 615
Layer 2 IGMP (Snooping and Query for IPv4) 616
Configuring IGMP Snooping and Query Parameters 618
Specifying Static Interfaces for a Multicast Router 622
Assigning Interfaces to Multicast Services 624
Setting IGMP Snooping Status per Interface 626
Filtering IGMP Query Packets and Multicast Data 632
Displaying Multicast Groups Discovered by IGMP Snooping 633
Displaying IGMP Snooping Statistics 634
Filtering and Throttling IGMP Groups 638
Enabling IGMP Filtering and Throttling 638
Configuring IGMP Filter Profiles 639
Configuring IGMP Filtering and Throttling for Interfaces 641
MLD Snooping (Snooping and Query for IPv6) 643
Configuring MLD Snooping and Query Parameters 643
Setting Immediate Leave Status for MLD Snooping per Interface 645
Specifying Static Interfaces for an IPv6 Multicast Router 646
Assigning Interfaces to IPv6 Multicast Services 648
Showing MLD Snooping Groups and Source List 650
Multicast VLAN Registration for IPv4 651
Configuring MVR Global Settings 652

C ONTENTS
– 20 –
Configuring MVR Domain Settings 655
Configuring MVR Group Address Profiles 656
Configuring MVR Interface Status 659
Assigning Static MVR Multicast Groups to Interfaces 661
Displaying MVR Receiver Groups 663
Displaying MVR Statistics 664
Multicast VLAN Registration for IPv6 668
Configuring MVR6 Global Settings 669
Configuring MVR6 Domain Settings 671
Configuring MVR6 Group Address Profiles 673
Configuring MVR6 Interface Status 675
Assigning Static MVR6 Multicast Groups to Interfaces 678
Displaying MVR6 Receiver Groups 679
Displaying MVR6 Statistics 680
SECTION III COMMAND LINE INTERFACE 685
18 USING THE COMMAND LINE INTERFACE 687
Accessing the CLI 687
Console Connection 687
Telnet Connection 688
Entering Commands 689
Keywords and Arguments 689
Minimum Abbreviation 689
Command Completion 689
Getting Help on Commands 690
Partial Keyword Lookup 692
Negating the Effect of Commands 692
Using Command History 692
Understanding Command Modes 693
Exec Commands 693
Configuration Commands 694
Command Line Processing 696
CLI Command Groups 697
19 GENERAL COMMANDS 699
prompt 699