Edge-Core ECS4110-28T Programming manual

Management Guide
www.edge-core.com
ECS4110-28T/28P/52T/52P
28/52-Port Gigabit Ethernet
Layer 2+ Switch

M ANAGEMENT G UIDE
ECS4110-28T GIGABIT ETHERNET SWITCH
Layer 2+ Managed Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit SFP Ports
ECS4110-28P GIGABIT ETHERNET POE SWITCH
Layer 2+ Managed Switch
with 24 10/100/1000BASE-T (RJ-45) PoE Ports,
and 4 Gigabit SFP Ports
ECS4110-52T GIGABIT ETHERNET SWITCH
Layer 2+ Managed Switch
with 48 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit SFP Ports
ECS4110-52P GIGABIT ETHERNET POE SWITCH
Layer 2+ Managed Switch
with 48 10/100/1000BASE-T (RJ-45) PoE Ports,
and 4 Gigabit SFP Ports
E072014/ST-R02
150200000929A

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.

A BOUT T HIS G UIDE
– 6 –
REVISION HISTORY This section summarizes the changes in each revision of this guide.
JULY 2014 RELEASE
This is the second version of this guide. This guide is valid for software
release v1.1.2.0. It includes information on the following changes:
◆Adds information for the ECS4110-28T and ECS4110-28P.
◆Updated information in Table 1, "Key Features," on page 75.
◆Updated information under "Description of Software Features" on
page 76.
◆Updated information in Table 2, "System Defaults," on page 82.
◆Updated information in Table 6, "Switch Main Menu," on page 106.
◆Added the section "Configuring NTP" on page 139.
◆Added the section "Configuring Time Servers" on page 140.
◆Updated description of Media Type under "Configuring by Port List" on
page 156.
◆Added the section "Displaying Transceiver Data" on page 170.
◆Added Timout Mode under "Configuring a Dynamic Trunk" on page 179.
◆Added the section "Configuring Load Balancing" on page 189.
◆Updated information under "Traffic Segmentation" on page 193.
◆Added description of L3 Interface parameter under "Configuring
VLAN Groups" on page 202.
◆Added description of Mask parameter under "Configuring MAC-based
VLANs" on page 227.
◆Added the section "Configuring MAC Address Learning" on page 231.
◆Updated the parameter list under "Configuring Loopback Detection" on
page 242.
◆Added description of BPDU Flooding and Cisco Prestandard Status
parameters under "Configuring Global Settings for STA" on page 243.
◆Added description of BPDU Flooding and Admin Edge Port parameters
under "Configuring Interface Settings for STA" on page 250.
◆Updated the parameter list under "Configuring a Class Map" on
page 288.
◆Updated the paramter list under "Configuring Local/Remote Logon
Authentication" on page 311.

A BOUT T HIS G UIDE
– 7 –
◆Updated the parameter list under "Configuring AAA Accounting" on
page 317.
◆Updated the parameter list under "Configuring AAA Authorization" on
page 323.
◆Updated description of the Access Level parameter under "Configuring
User Accounts" on page 326.
◆Added the section "Setting a Time Range" on page 353.
◆Updated description of Source Address Type and Destination Address
Type parameters under "Configuring an Extended IPv6 ACL" on
page 365.
◆Added Internet Protocol parameter under "Configuring a MAC ACL" on
page 367.
◆Added the section "Configuring ACL Mirroring" on page 372.
◆Added the section "Showing ACL Hardware Counters" on page 374.
◆Added the parameter Allow Zeros under "Configuring Global Settings
for ARP Inspection" on page 376.
◆Updated parameter list under "Configuring Port Security" on page 385.
◆Added the parameter Re-authentication Max Retries under "Configuring
Port Authenticator Settings for 802.1X" on page 390.
◆Updated the parameter list for "DoS Protection" on page 399.
◆Added the section "IPv6 Source Guard" on page 406.
◆Updated the parameter list for "DHCP Snooping Global Configuration"
on page 415.
◆Added the Circuit ID parameter under "Configuring Ports for DHCP
Snooping" on page 417.
◆Added description of time range parameters under "Setting the Port
PoE Power Budget" on page 450.
◆Updated Table 34, "Supported Notification Messages," on page 462.
◆Added the section "Creating SNMP Notification Logs" on page 476 and
"Showing SNMP Statistics" on page 478.
◆Added the sections "Ethernet Ring Protection Switching" on page 495,
"Connectivity Fault Management" on page 520, and "OAM
Configuration" on page 556.
◆Added the Forwarding Priority parameter under "Configuring IGMP
Snooping and Query Parameters" on page 570.

A BOUT T HIS G UIDE
– 8 –
◆Added the sections "Filtering IGMP Query Packets and Multicast Data"
on page 584 and "Displaying IGMP Snooping Statistics" on page 586.
◆Added the section "MLD Snooping (Snooping and Query for IPv6)" on
page 595.
◆Added the section "Configuring MVR Global Settings" on page 605.
◆Updated the parameter list under "Configuring MVR Domain Settings"
on page 607.
◆Added the section "Configuring MVR Group Address Profiles" on
page 608.
◆Updated the parameter list under "Configuring MVR Interface Status"
on page 611.
◆Updated the parameter list under "Displaying MVR Receiver Groups" on
page 616.
◆Added the section "Displaying MVR Statistics" on page 617.
◆Added the section "Multicast VLAN Registration for IPv6" on page 621.
◆Added new parameters under "Configuring IPv6 Interface Settings" on
page 644.
◆Added the section "Specifying a DHCP Client Identifier" on page 669.
◆Added the section "Configuring DHCP Relay Service" on page 671.
◆Added the section "Using the Trace Route Function" on page 684.
◆Added the sections "Configuring Static Routes" on page 691 and
"Displaying the Routing Table" on page 693.
◆Updated syntax for the command "show running-config" on page 729.
◆Added the commands "show watchdog" on page 734 and "watchdog
software" on page 735.
◆Updated syntax for the command "copy" on page 738.
◆Updated syntax for the command "delete" on page 741.
◆Added the command "upgrade opcode reload" on page 745.
◆Added "TFTP Configuration Commands" on page 746.
◆Updated syntax for the command "logging host" on page 761
◆Added "NTP Commands" on page 773.

A BOUT T HIS G UIDE
– 9 –
◆Added the commands "clock summer-time (date)" on page 777, "clock
summer-time (predefined)" on page 778, and "clock summer-time
(recurring)" on page 779.
◆Updated syntax for the command "snmp-server enable traps" on
page 798.
◆Added the commands "snmp-server enable port-traps mac-notification"
on page 801 and "show snmp-server enable port-traps" on page 802.
◆Updated description of syntax for the commands "enable password" on
page 824 and "username" on page 825.
◆Added commands "privilege" on page 827 and "show privilege" on
page 827.
◆Added the commands "tacacs-server retransmit" on page 836 and
"tacacs-server timeout" on page 837.
◆Added the command "accounting commands" on page 844.
◆Updated syntax for the command "show accounting" on page 846
◆Added the command "dot1x max-reauth-req" on page 866.
◆Added the section "PPPoE Intermediate Agent" on page 880.
◆Added the commands "mac-learning" on page 890, "port security
mac-address-as-permanent" on page 893, and ."show port security" on
page 893.
◆Updated syntax and description for the command "ip dhcp snooping
information option" on page 918.
◆Added the command "ip dhcp snooping limit rate" on page 920.
◆Added the command "ip dhcp snooping information option circuit-id" on
page 922.
◆Added the command "clear ip dhcp snooping binding" on page 924.
◆Added the section "DHCPv6 Snooping" on page 926.
◆Updated syntax for "ip source-guard binding" on page 936 and "ip
source-guard max-binding" on page 939.
◆Added the command "ip source-guard mode" on page 940.
◆Added the command "clear ip source-guard binding blocked" on
page 941.
◆Updated syntax for "show ip source-guard binding" on page 942.
◆Added the section "IPv6 Source Guard" on page 943.

A BOUT T HIS G UIDE
– 10 –
◆Added allow-zeros parameter to the command "ip arp inspection
validate" on page 952.
◆Added new commands under the section "Denial of Service Protection"
on page 957.
◆Added new commands under the section "Port-based Traffic
Segmentation" on page 963.
◆Added counter parameter to the commands "ip access-group" on
page 975, "ipv6 access-group" on page 981, and "mac access-group"
on page 987.
◆Updated syntax for the command "permit, deny (MAC ACL)" on
page 984.
◆Updated syntax for the command "show access-group" on page 992.
◆Added the commands "discard" on page 999 and "show discard" on
page 1004.
◆Updated syntax for the command "media-type" on page 1001.
◆Added commands under "Transceiver Threshold Configuration" on
page 1009.
◆Added the commands "port channel load-balance" on page 1022, "lacp
timeout" on page 1029, and "show port-channel load-balance" on
page 1033.
◆Added the commands "power mainpower maximum allocation" on
page 1036 and "show power mainpower" on page 1042.
◆Added access-list parameter to the command "port monitor" on
page 1045.
◆Added the command "spanning-tree system-bpdu-flooding" on
page 1099.
◆Updated description for the command "spanning-tree bpdu-filter" on
page 1103.
◆Updated description for the command "spanning-tree bpdu-guard" on
page 1104.
◆Added block parameter to the command "spanning-tree
loopback-detection action" on page 1108.
◆Added the command "spanning-tree port-bpdu-flooding" on page 1112
and "spanning-tree tc-prop-stop" on page 1114.
◆Updated syntax for the command "show spanning-tree" on page 1116.
◆Added the chapter "ERPS Commands" on page 1119.