Edge-Core ECS4510-12PD Programming manual

www.edge-core.com
Web Management Guide
12-Port Gigabit Ethernet
Layer 2 Switch
ECS4510-12PD
Software Release v1.0.2.0

Web Management Guide
ECS4510-12PD Gigabit Ethernet Switch
Layer 2 Switch with
1 10/100/1000BASE-T (RJ-45) Port
1 10/100/1000BASE-T (RJ-45) PoE PSE Port,
8 10/100/1000BASE-T (RJ-45) PoE PD Ports,
and 2 Gigabit SFP Ports
E082013/ST-R01
149100000229A

– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should Read This
Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How This Guide is
Organized
This guide describes the switch’s web management interface. An introduction to
the switch’s key features is also provided. For information on initial configuration,
refer to the CLI Reference Guide.
The guide includes these sections:
◆Section I “Getting Started” — Includes an introduction to switch management.
◆Section II “Web Configuration” — Includes all management options available
through the web interface.
◆Section III “Appendices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the web interface.
For information on how to manage the switch through the Command Line
Interface (CLI), see the following guide:
CLI Reference Guide
For information on how to install the switch, see the following guide:
Installation Guide
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information

How to Use This Guide
– 4 –
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features
or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage
the system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Revision History This section summarizes the changes in each revision of this guide.
August 2013 Revision
This is the first version of this guide. This guide is valid for software release v1.0.2.0.

– 5 –
CONTENTS
HOW TO USE THIS GUIDE 3
CONTENTS 5
FIGURES 15
TABLES 27
SECTION I GETTING STARTED 29
1INTRODUCTION 31
Key Features 31
Description of Software Features 32
System Defaults 37
2USING THE WEB INTERFACE 41
Connecting to the Web Interface 41
Navigating the Web Browser Interface 42
Home Page 42
Configuration Options 43
Panel Display 43
Main Menu 44
SECTION II WEB CONFIGURATION 61
3BASIC MANAGEMENT TASKS 63
Displaying System Information 64
Displaying Hardware/Software Versions 65
Configuring Support for Jumbo Frames 66
Displaying Bridge Extension Capabilities 67
Managing System Files 69
Copying Files via FTP/TFTP or HTTP 69
Saving the Running Configuration to a Local File 71
Setting the Start-up File 72

C ONTENTS
– 6 –
Showing System Files 72
Automatic Operation Code Upgrade 73
Setting the System Clock 77
Setting the Time Manually 77
Setting the SNTP Polling Interval 78
Configuring NTP 79
Configuring Time Servers 80
Setting the Time Zone 84
Configuring the Console Port 85
Configuring Telnet Settings 87
Displaying CPU Utilization 88
Displaying Memory Utilization 89
Resetting the System 90
4INTERFACE CONFIGURATION 93
Port Configuration 94
Configuring by Port List 94
Configuring by Port Range 96
Displaying Connection Status 97
Configuring Local Port Mirroring 98
Configuring Remote Port Mirroring 100
Showing Port or Trunk Statistics 104
Displaying Transceiver Data 109
Configuring Transceiver Thresholds 110
Performing Cable Diagnostics 112
Trunk Configuration 114
Configuring a Static Trunk 115
Configuring a Dynamic Trunk 117
Displaying LACP Port Counters 123
Displaying LACP Settings and Status for the Local Side 124
Displaying LACP Settings and Status for the Remote Side 126
Configuring Load Balancing 127
Saving Power 129
Traffic Segmentation 131
Enabling Traffic Segmentation 131
Configuring Uplink and Downlink Ports 132
VLAN Trunking 134

C ONTENTS
– 7 –
5 VLAN CONFIGURATION 137
IEEE 802.1Q VLANs 137
Configuring VLAN Groups 140
Adding Static Members to VLANs 142
Configuring Dynamic VLAN Registration 147
IEEE 802.1Q Tunneling 150
Enabling QinQ Tunneling on the Switch 154
Creating CVLAN to SPVLAN Mapping Entries 155
Adding an Interface to a QinQ Tunnel 157
Protocol VLANs 158
Configuring Protocol VLAN Groups 159
Mapping Protocol Groups to Interfaces 160
Configuring IP Subnet VLANs 162
Configuring MAC-based VLANs 164
Configuring VLAN Mirroring 166
6ADDRESS TABLE SETTINGS 169
Setting Static Addresses 169
Changing the Aging Time 171
Displaying the Dynamic Address Table 172
Clearing the Dynamic Address Table 173
Configuring MAC Address Mirroring 174
7SPANNING TREE ALGORITHM 177
Overview 177
Configuring Loopback Detection 180
Configuring Global Settings for STA 182
Displaying Global Settings for STA 187
Configuring Interface Settings for STA 188
Displaying Interface Settings for STA 192
Configuring Multiple Spanning Trees 194
Configuring Interface Settings for MSTP 199
8CONGESTION CONTROL 201
Rate Limiting 201
Storm Control 202
Automatic Traffic Control 204
Setting the ATC Timers 206
Configuring ATC Thresholds and Responses 207

C ONTENTS
– 8 –
9CLASS OF SERVICE 211
Layer 2 Queue Settings 211
Setting the Default Priority for Interfaces 211
Selecting the Queue Mode 212
Mapping CoS Values to Egress Queues 215
Layer 3/4 Priority Settings 217
Setting Priority Processing to DSCP or CoS 218
Mapping Ingress DSCP Values to Internal DSCP Values 219
Mapping CoS Priorities to Internal DSCP Values 221
10 QUALITY OF SERVICE 225
Overview 225
Configuring a Class Map 226
Creating QoS Policies 230
Attaching a Policy Map to a Port 239
11 VOIP TRAFFIC CONFIGURATION 241
Overview 241
Configuring VoIP Traffic 242
Configuring Telephony OUI 243
Configuring VoIP Traffic Ports 244
12 SECURITY MEASURES 247
AAA Authorization and Accounting 248
Configuring Local/Remote Logon Authentication 249
Configuring Remote Logon Authentication Servers 250
Configuring AAA Accounting 255
Configuring AAA Authorization 260
Configuring User Accounts 263
Web Authentication 265
Configuring Global Settings for Web Authentication 265
Configuring Interface Settings for Web Authentication 266
Network Access (MAC Address Authentication) 268
Configuring Global Settings for Network Access 270
Configuring Network Access for Ports 271
Configuring Port Link Detection 273
Configuring a MAC Address Filter 274
Displaying Secure MAC Address Information 276

C ONTENTS
– 9 –
Configuring HTTPS 277
Configuring Global Settings for HTTPS 277
Replacing the Default Secure-site Certificate 279
Configuring the Secure Shell 281
Configuring the SSH Server 283
Generating the Host Key Pair 284
Importing User Public Keys 286
Access Control Lists 288
Setting A Time Range 290
Showing TCAM Utilization 292
Setting the ACL Name and Type 293
Configuring a Standard IPv4 ACL 295
Configuring an Extended IPv4 ACL 296
Configuring a Standard IPv6 ACL 299
Configuring an Extended IPv6 ACL 300
Configuring a MAC ACL 302
Configuring an ARP ACL 304
Binding a Port to an Access Control List 306
ARP Inspection 307
Configuring Global Settings for ARP Inspection 308
Configuring VLAN Settings for ARP Inspection 310
Configuring Interface Settings for ARP Inspection 312
Displaying ARP Inspection Statistics 313
Displaying the ARP Inspection Log 314
Filtering IP Addresses for Management Access 315
Configuring Port Security 317
Configuring 802.1X Port Authentication 319
Configuring 802.1X Global Settings 320
Configuring Port Authenticator Settings for 802.1X 322
Configuring Port Supplicant Settings for 802.1X 326
Displaying 802.1X Statistics 328
DoS Protection 331
IP Source Guard 333
Configuring Ports for IP Source Guard 333
Configuring Static Bindings for IP Source Guard 335
Displaying Information for Dynamic IP Source Guard Bindings 337

C ONTENTS
– 10 –
DHCP Snooping 339
DHCP Snooping Configuration 341
DHCP Snooping VLAN Configuration 342
Configuring Ports for DHCP Snooping 343
Displaying DHCP Snooping Binding Information 345
13 BASIC ADMINISTRATION PROTOCOLS 347
Configuring Event Logging 348
System Log Configuration 348
Remote Log Configuration 350
Sending Simple Mail Transfer Protocol Alerts 351
Link Layer Discovery Protocol 352
Setting LLDP Timing Attributes 353
Configuring LLDP Interface Attributes 355
Configuring LLDP Interface Civic-Address 358
Displaying LLDP Local Device Information 360
Displaying LLDP Remote Device Information 364
Displaying Device Statistics 372
Power over Ethernet 374
Enabling PSE Power 375
Configuring Power Source Check 376
Simple Network Management Protocol 377
Configuring Global Settings for SNMP 379
Setting the Local Engine ID 380
Specifying a Remote Engine ID 381
Setting SNMPv3 Views 383
Configuring SNMPv3 Groups 385
Setting Community Access Strings 391
Configuring Local SNMPv3 Users 393
Configuring Remote SNMPv3 Users 395
Specifying Trap Managers 397
Remote Monitoring 402
Configuring RMON Alarms 402
Configuring RMON Events 405
Configuring RMON History Samples 407
Configuring RMON Statistical Samples 410