Edge-Core ECS4310-26T Programming manual

Management Guide
www.edge-core.com
ECS4310-26T
26-Port
Gigabit Smart Switch

M ANAGEMENT G UIDE
ECS4310-26T GIGABIT SMART SWITCH
with 24 10/100/1000BASE-T (RJ-45) Ports,
and 2 Gigabit SFP Slots
ECS4310-26T
E072010-CS-R01
149100000083A

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
JULY 2010 REVISION
This is the first version of this guide. This guide is valid for software release
v1.1.1.4.

A BOUT T HIS G UIDE
– 6 –

– 7 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 7
FIGURES 11
TABLES 13
SECTION I GETTING STARTED 15
1INTRODUCTION 17
Key Features 17
Description of Software Features 18
Configuration Backup and Restore 18
Authentication 18
Port Configuration 18
Rate Limiting 18
Port Mirroring 18
Port Trunking 19
Storm Control 19
Static Addresses 19
IEEE 802.1D Bridge 19
Store-and-Forward Switching 19
Spanning Tree Algorithm 19
Virtual LANs 20
Traffic Prioritization 20
Multicast Filtering 20
System Defaults 21
2INITIAL SWITCH CONFIGURATION 23
Connecting to the Switch 23
Setting an IP Address 23
Setting a Password 25

C ONTENTS
– 8 –
Changing a PC’s IP Address 27
SECTION II WEB CONFIGURATION 29
3USING THE WEB INTERFACE 31
Connecting to the Web Interface 31
Navigating the Web Browser Interface 32
Home Page 32
Configuration Options 32
Panel Display 33
Main Menu 33
4SYSTEM SETTINGS 37
Displaying System Information 37
Setting a User Account 39
Setting an IP Address 40
Setting an IPv4 Address 40
Setting an IPv6 Address 41
5PORT SETTINGS 45
6L
INK AGGREGATION 49
General Link Aggregation Guidelines 49
Creating Trunk Groups 50
Configuring Trunk Settings 52
Configuring LACP 54
7CREATING VLANS57
IEEE 802.1Q VLANs 57
Assigning Ports to VLANs 58
Configuring VLAN Attributes for Port Members 60
8 VLAN STACKING 61
Configuring IEEE 802.1Q Tunneling 61
VLAN Stacking Table 62
VLAN Stacking Settings 63
9IGMPSNOOPING 65
IGMP Snooping Introduction 65

C ONTENTS
– 9 –
Multicast Entry Table 66
IGMP Snooping Setting 67
IGMP Global Setting 67
IGMP VLAN Setting 69
10 SPANNING TREE 71
Configuring the Spanning Tree Protocol 71
Configuring STP Global Settings 72
Configuring STP Port Settings 75
11 QUALITY OF SERVICE 79
QoS Introduction 79
Port-Based Priority 80
DSCP-Based Priority 81
Priority-to-Queue Mapping 82
Packet Scheduling 84
12 LINK LAYER DISCOVERY PROTOCOL 87
Configuring LLDP 87
LLDP Neighbors 89
13 SNMP SETTINGS 91
Simple Network Management Protocol 91
Setting SNMP System and Community Strings 92
Specifying SNMP Trap Receivers 93
14 PORT MIRRORING 95
15 PORT SECURITY 97
16 BANDWIDTH CONTROL 99
17 JUMBO FRAME 101
18 MANAGEMENT ACCESS FILTER 103
19 MAC ADDRESS SECURITY 105
MAC Forwarding Table 105
Static MAC Addresses 106
MAC Address Filtering 107
20 802.1X SECURITY 109
Configuring 802.1X Authentication 109

C ONTENTS
– 10 –
802.1X Global Settings 110
802.1X Port Settings 111
21 GENERAL SECURITY SETTINGS 113
IP Filter Security 113
Storm Control Setting 114
Port Isolation 116
Defence Engine 117
22 PORT STATISTICS 119
23 MANAGEMENT TOOLS 121
HTTP Upgrade 121
Restoring Factory Defaults 122
Resetting the Switch 123
SECTION III APPENDICES 125
ASOFTWARE SPECIFICATIONS 127
Software Features 127
Management Features 128
Standards 128
Management Information Bases 129
BTROUBLESHOOTING 131
Problems Accessing the Management Interface 131
GLOSSARY 133
INDEX 139

– 11 –
FIGURES
Figure 1: Login Page 24
Figure 2: Web Interface Home Page 24
Figure 3: IP Settings Page 25
Figure 4: User Accounts Page 26
Figure 5: Home Page 32
Figure 6: Front Panel Indicators 33
Figure 7: System Information 38
Figure 8: System Password 39
Figure 9: IPv4 Address Configuration 41
Figure 10: IPv6 Address Configuration 43
Figure 11: Port Configuration 47
Figure 12: Trunk Group Setting 51
Figure 13: Trunk Distribution Algorithm Setting 53
Figure 14: LACP Port Configuration 55
Figure 15: VLAN Membership Configuration 59
Figure 16: VLAN Port Configuration 60
Figure 17: VLAN Stacking Table 63
Figure 18: VLAN Stacking Settings 64
Figure 19: Multicast Entry Table 67
Figure 20: IGMP Snooping Global Settings 69
Figure 21: IGMP Snooping VLAN Settings 70
Figure 22: STP Global Setting 74
Figure 23: STP Port Setting 78
Figure 24: Port-Based Priority Setting 81
Figure 25: DSCP-Based Priority Setting 82
Figure 26: Priority-to-Queue Mapping 84
Figure 27: Packet Scheduling 85
Figure 28: LLDP Settings 88
Figure 29: LLDP Neighbors 90
Figure 30: SNMP Settings 93
Figure 31: SNMP Trap Receiver Settings 94

F IGURES
– 12 –
Figure 32: Port Mirroring 96
Figure 33: Port Security 98
Figure 34: Bandwidth Control 100
Figure 35: Jumbo Frame Setting 101
Figure 36: Management Access Filter 104
Figure 37: MAC Address Forwarding Table 106
Figure 38: Static MAC Setting 107
Figure 39: MAC Address Filtering 108
Figure 40: 802.1X Setting 111
Figure 41: 802.1X Port Setting 112
Figure 42: IP Filter Setting 114
Figure 43: Storm Control Settings 115
Figure 44: Port Isolation Settings 116
Figure 45: Defence Engine Setting 117
Figure 46: Port Statistics 120
Figure 47: Software Upgrade 122
Figure 48: Restoring Factory Defaults 122
Figure 49: Reboot Switch 123

– 13 –
TABLES
Table 1: Key Features 17
Table 2: System Defaults 21
Table 3: Web Page Configuration Buttons 32
Table 4: Main Menu 33
Table 5: Recommended STP Path Cost Range 75
Table 6: Recommended STP Path Costs 75
Table 7: Default STP Path Costs 76
Table 8: Default Mapping of CoS Values to Egress Queues 82
Table 9: CoS Priority Levels 83
Table 10: LLDP System Capabilities 89
Table 11: Troubleshooting Chart 131

T ABLES
– 14 –

– 15 –
S ECTION I
GETTING STARTED
This section provides an overview of the switch, and introduces some basic
concepts about network switches. It also describes the basic settings
required to access the management interface.
This section includes these chapters:
◆"Introduction" on page 17
◆"Initial Switch Configuration" on page 23

S ECTION | Getting Started
– 16 –

– 17 –
1INTRODUCTION
This switch provides a broad range of features for Layer 2 switching. It
includes a management agent that allows you to configure the features
listed in this manual. The default configuration can be used for most of the
features provided by this switch. However, there are many options that you
should configure to maximize the switch’s performance for your particular
network environment.
KEY FEATURES
Table 1: Key Features
Feature Description
Configuration Backup
and Restore
Backup to management station or TFTP server
Authentication Web – user name/password, RADIUS
SNMP v1/2c - Community strings
Port – IEEE 802.1X, MAC address filtering
DHCP Snooping (with Option 82 relay information)
IP Filter
DHCP Client Supported
Port Configuration Speed, duplex mode, flow control
Rate Limiting Input rate limiting per port
Port Mirroring One or more ports mirrored to single analysis port
Port Trunking Supports up to 8 trunks using either static or dynamic trunking
(LACP)
Storm Control Throttling for broadcast, multicast, and unknown unicast storms
Address Table Up to 16K MAC addresses in the forwarding table, 1024 static MAC
addresses
IP Version 4 and 6 Supports IPv4 and IPv6 addressing
IEEE 802.1D Bridge Supports dynamic data switching and addresses learning
Store-and-Forward
Switching
Supported to ensure wire-speed switching while eliminating bad
frames
Spanning Tree Algorithm Supports Rapid Spanning Tree Protocol (RSTP), which includes
STP backward compatible mode
Virtual LANs Up to 256 using IEEE 802.1Q, port-based, and QinQ VLAN
Stacking
Traffic Prioritization Queue mode and CoS configured by port or DSCP
Multicast Filtering Supports IGMP snooping and query

C HAPTER 1 | Introduction
Description of Software Features
– 18 –
DESCRIPTION OF SOFTWARE FEATURES
The switch provides a wide range of advanced performance enhancing
features. Flow control eliminates the loss of packets due to bottlenecks
caused by port saturation. Storm suppression prevents broadcast,
multicast, and unknown unicast traffic storms from engulfing the network.
Untagged (port-based) and tagged VLANs provide traffic security and
efficient use of network bandwidth. CoS priority queueing ensures the
minimum delay for moving real-time multimedia data across the network.
While multicast filtering provides support for real-time network
applications.
Some of the management features are briefly described below.
CONFIGURATION
BACKUP AND
RESTORE
You can save the current configuration settings to a file on the
management station (using the web interface) and later download this file
to restore the switch configuration settings.
AUTHENTICATION This switch authenticates management access via a web browser. User
names and passwords can be configured locally Port-based authentication
is also supported via the IEEE 802.1X protocol. This protocol uses
Extensible Authentication Protocol over LANs (EAPOL) to request user
credentials from the 802.1X client, and then uses the EAP between the
switch and the authentication server to verify the client’s right to access
the network via an authentication server (i.e., RADIUS server).
PORT CONFIGURATION You can manually configure the speed and duplex mode, and flow control
used on specific ports, or use auto-negotiation to detect the connection
settings used by the attached device. Use the full-duplex mode on ports
whenever possible to double the throughput of switch connections. Flow
control should also be enabled to control network traffic during periods of
congestion and prevent the loss of packets when port buffer thresholds are
exceeded. The switch supports flow control based on the IEEE 802.3x
standard (now incorporated in IEEE 802.3-2005).
RATE LIMITING This feature controls the maximum rate for traffic transmitted or received
on an interface. Rate limiting is configured on interfaces at the edge of a
network to limit traffic into or out of the network. Traffic that falls within
the rate limit is transmitted, while packets that exceed the acceptable
amount of traffic are dropped.
PORT MIRRORING The switch can unobtrusively mirror traffic from any port to a monitor port.
You can then attach a protocol analyzer or RMON probe to this port to
perform traffic analysis and verify connection integrity.

C HAPTER 1 | Introduction
Description of Software Features
– 19 –
PORT TRUNKING Ports can be combined into an aggregate connection. Trunks can be
manually set up or dynamically configured using Link Aggregation Control
Protocol (LACP – IEEE 802.3-2005). The additional ports dramatically
increase the throughput across any connection, and provide redundancy by
taking over the load if a port in the trunk should fail. The switch supports
up to 8 trunks.
STORM CONTROL Broadcast, multicast and unknown unicast storm suppression prevents
traffic from overwhelming the network.When enabled on a port, the level of
broadcast traffic passing through the port is restricted. If broadcast traffic
rises above a pre-defined threshold, it will be throttled until the level falls
back beneath the threshold.
STATIC ADDRESSES A static address can be assigned to a specific interface on this switch.
Static addresses are bound to the assigned interface and will not be
moved. When a static address is seen on another interface, the address will
be ignored and will not be written to the address table. Static addresses
can be used to provide network security by restricting access for a known
host to a specific port.
IEEE 802.1D BRIDGE The switch supports IEEE 802.1D transparent bridging. The address table
facilitates data switching by learning addresses, and then filtering or
forwarding traffic based on this information. The address table supports up
to 16K addresses.
STORE-AND-FORWARD
SWITCHING
The switch copies each frame into its memory before forwarding them to
another port. This ensures that all frames are a standard Ethernet size and
have been verified for accuracy with the cyclic redundancy check (CRC).
This prevents bad frames from entering the network and wasting
bandwidth.
To avoid dropping frames on congested ports, the switch provides 448 KB
for frame buffering. This buffer can queue packets awaiting transmission
on congested networks.
SPANNING TREE
ALGORITHM
The switch supports these spanning tree protocols:
◆Spanning Tree Protocol (STP, IEEE 802.1D) – Supported by using the
STP backward compatible mode provided by RSTP. STP provides loop
detection. When there are multiple physical paths between segments,
this protocol will choose a single path and disable all others to ensure
that only one route exists between any two stations on the network.
This prevents the creation of network loops. However, if the chosen
path should fail for any reason, an alternate path will be activated to
maintain the connection.

C HAPTER 1 | Introduction
Description of Software Features
– 20 –
◆Rapid Spanning Tree Protocol (RSTP, IEEE 802.1w) – This protocol
reduces the convergence time for network topology changes to about 3
to 5 seconds, compared to 30 seconds or more for the older IEEE
802.1D STP standard. It is intended as a complete replacement for STP,
but can still interoperate with switches running the older standard by
automatically reconfiguring ports to STP-compliant mode if they detect
STP protocol messages from attached devices.
VIRTUAL LANSThe switch supports up to 256 VLANs. A Virtual LAN is a collection of
network nodes that share the same collision domain regardless of their
physical location or connection point in the network. The switch supports
tagged VLANs based on the IEEE 802.1Q standard. Members of VLAN
groups can be manually assigned to a specific set of VLANs. This allows the
switch to restrict traffic to the VLAN groups to which a user has been
assigned. By segmenting your network into VLANs, you can:
◆Eliminate broadcast storms which severely degrade performance in a
flat network.
◆Simplify network management for node changes/moves by remotely
configuring VLAN membership for any port, rather than having to
manually change the network connection.
◆Provide data security by restricting all traffic to the originating VLAN.
TRAFFIC
PRIORITIZATION
This switch prioritizes each packet based on the required level of service,
using eight priority queues with strict, Weighted Fair Queuing, or Weighted
Round Robin Queuing. It uses IEEE 802.1p and 802.1Q tags to prioritize
incoming traffic based on input from the end-station application. These
functions can
be used to provide independent priorities for delay-sensitive
data and best-effort data.
This switch also supports several common methods of prioritizing layer 3/4
traffic to meet application requirements. Traffic can be prioritized based on
the priority bits in the IP frame’s Type of Service (ToS) octet or the number
of the TCP/UDP port. When these services are enabled, the priorities are
mapped to a Class of Service value by the switch, and the traffic then sent
to the corresponding output queue.
MULTICAST FILTERING Specific multicast traffic can be assigned to its own VLAN to ensure that it
does not interfere with normal network traffic and to guarantee real-time
delivery by setting the required priority level for the designated VLAN. The
switch uses IGMP Snooping and Query to manage multicast group
registration.