Edge-Core ECS4510-28P User manual

Management Guide
www.edge-core.com
ECS4510-28T/P/F
ECS4510-52T
28/52-Port Layer 2+
Gigabit Ethernet Switch

M ANAGEMENT G UIDE
ECS4510-28T GIGABIT ETHERNET SWITCH
Layer 2+ Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
2 10-Gigabit SFP+ Ports,
and Optional Module with 2 10-Gigabit SFP+ Ports
ECS4510-28P GIGABIT ETHERNET POE SWITCH
Layer 2+ Gigabit Ethernet PoE Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
2 10-Gigabit SFP+ Ports,
and Optional Module with 2 10-Gigabit SFP+ Ports
ECS4510-28F GIGABIT ETHERNET FIBER SWITCH
Layer 2+ Gigabit Ethernet Fiber Switch
with 22 SFP Ports,
with 2 10/100/1000BASE-T (RJ-45/SFP) Ports,
2 10-Gigabit SFP+ Ports,
and Optional Module with 2 10-Gigabit SFP+ Ports
ECS4510-52T GIGABIT ETHERNET SWITCH
Layer 2+ Gigabit Ethernet Switch
with 48 10/100/1000BASE-T (RJ-45) Ports,
2 10-Gigabit SFP+ Ports,
and Optional Module with 2 10-Gigabit SFP+ Ports
ECS4510-28T
ECS4510-28P
ECS4510-28F
ECS4510-52T
E122012/ST-R03
149100000182A
149100000189A
149100000191A

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.

A BOUT T HIS G UIDE
– 6 –
REVISION HISTORY This section summarizes the changes in each revision of this guide.
DECEMBER 2012 REVISION
This is the third version of this guide. This guide is valid for software
release v1.3.1.7. This release adds support for Layer 3 lite, including static
and dynamic routing. It also includes information on the following changes:
◆Added support for ECS4510-52T. (See Figure 2, "Front Panel
Indicators," on page 101.)
◆Updated description for "Setting an IP Address" on page 83.
◆Added “L3 Interface” parameter to the static VLAN configuration pages.
(See "Configuring VLAN Groups" on page 196.)
◆Updated default settings for storm control rate limit. (See "Storm
Control" on page 260.)
◆Changed method of configuring an IPv4 address to follow conventions
for a Layer 3 switch. (See "Setting the Switch’s IP Address (IP Version
4)" on page 615.)
◆Removed DHCP Relay Option 82 as an unsupported Layer 2 feature.
This switch now only supports configuring the address for relay servers.
(See "Configuring DHCP Relay Service" on page 645 and "DHCP Relay"
on page 1362.)
◆Added a chapter describing the general commands for Layer 3 lite
functions, including IP interface configuration, configuring static routes,
and displaying the routing table. (See "General IP Routing" on
page 653.)
◆Added trace route function (See "Using the Trace Route Function" on
page 658.)
◆Added chapter on unicast routing, including description of general
routing and the Routing Information Protocol. (See "Unicast Routing"
on page 669.)
◆Added the command "terminal" on page 753.
◆Updated description of the command "interface" on page 972.
◆Change configuration mode to VLAN interface for "ip dhcp relay server"
on page 1362.
◆Added max-failures parameter to "traceroute6" on page 1395.
◆Added the command "ipv6 hop-limit" on page 1396.

A BOUT T HIS G UIDE
– 7 –
SEPTEMBER 2012 REVISION
This is the second version of this guide. This guide is valid for software
release v1.2.2.0. It includes information on the following changes:
◆Added support for ECS4510-28F and ECS4510-28P. (See Figure 2,
"Front Panel Indicators," on page 101.)
◆Added “Media Type” to Parameter list under "Configuring by Port List"
on page 151.
◆Added “Timeout Mode” to Parameter list under "Configuring a Dynamic
Trunk" on page 172.
◆Updated information on maximum ACL rules in the Command Usage
section under "Access Control Lists" on page 347.
◆Added description of LLDP-MED TLVs reported by end-node devices in
the Parameters section under "Displaying LLDP Remote Device
Information" on page 428.
◆Added "Power over Ethernet" on page 438 for the ECS4510-28P.
◆Added support for ERPSv2 as described under "Ethernet Ring Protection
Switching" on page 484.
◆Added more information for DHCP Option 60, 66 and 67 statements in
the Command Usage section under "Specifying A DHCP Client
Identifier" on page 643.
◆Added support for PPPoE IA as described under "Configuring the PPPoE
Intermediate Agent" on page 646.
◆Added "TFTP Configuration Commands" on page 742.
◆Added PPPoE IA configuration commands as described under "PPPoE
Intermediate Agent" on page 877.
◆Added lacp timeout command on page 999.
◆Added "Power over Ethernet Commands" on page 1005.
◆Added commands for ERPSv2, including "non-revertive" on page 1095,
"raps-def-mac" on page 1100, "raps-without-vc" on page 1100, "rpl
neighbor" on page 1103, "rpl neighbor" on page 1103, "version" on
page 1105, "clear erps statistics" on page 1106, "erps clear" on
page 1107, "erps forced-switch" on page 1107, and "erps manual-
switch" on page 1109.
◆Added lldp dot3-tlv poe and lldp med-tlv ext-poe commands on page
page 1280 and page 1283, respectively for the ECS4510-28P.
◆Added more information for DHCP Option 60, 66 and 67 statements in
the Command Usage section under the ip dhcp client class-id command
on page 1356.

A BOUT T HIS G UIDE
– 8 –
MAY 2012 REVISION
This is the first version of this guide. This guide is valid for software release
v1.1.2.1.

– 9 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 9
FIGURES 47
TABLES 61
SECTION I GETTING STARTED 67
1INTRODUCTION 69
Key Features 69
Description of Software Features 70
IP Routing 74
Address Resolution Protocol 75
System Defaults 76
2INITIAL SWITCH CONFIGURATION 79
Connecting to the Switch 79
Configuration Options 79
Required Connections 80
Remote Connections 81
Basic Configuration 82
Console Connection 82
Setting Passwords 82
Setting an IP Address 83
Downloading a Configuration File Referenced by a DHCP Server 90
Enabling SNMP Management Access 92
Managing System Files 94
Saving or Restoring Configuration Settings 95

C ONTENTS
– 10 –
SECTION II WEB CONFIGURATION 97
3USING THE WEB INTERFACE 99
Connecting to the Web Interface 99
Navigating the Web Browser Interface 100
Home Page 100
Configuration Options 101
Panel Display 101
Main Menu 102
4BASIC MANAGEMENT TASKS 119
Displaying System Information 120
Displaying Hardware/Software Versions 121
Configuring Support for Jumbo Frames 122
Displaying Bridge Extension Capabilities 123
Managing System Files 125
Copying Files via FTP/TFTP or HTTP 125
Saving the Running Configuration to a Local File 127
Setting The Start-Up File 128
Showing System Files 129
Automatic Operation Code Upgrade 130
Setting the System Clock 134
Setting the Time Manually 134
Setting the SNTP Polling Interval 135
Configuring NTP 136
Configuring Time Servers 137
Setting the Time Zone 141
Configuring the Console Port 142
Configuring Telnet Settings 144
Displaying CPU Utilization 145
Displaying Memory Utilization 146
Resetting the System 147
5INTERFACE CONFIGURATION 151
Port Configuration 151
Configuring by Port List 151
Configuring by Port Range 154
Displaying Connection Status 155

C ONTENTS
– 11 –
Configuring Local Port Mirroring 156
Configuring Remote Port Mirroring 158
Showing Port or Trunk Statistics 162
Performing Cable Diagnostics 166
Trunk Configuration 168
Configuring a Static Trunk 169
Configuring a Dynamic Trunk 172
Displaying LACP Port Counters 178
Displaying LACP Settings and Status for the Local Side 179
Displaying LACP Settings and Status for the Remote Side 181
Saving Power 182
Sampling Traffic Flows 184
Configuring sFlow Global Settings 185
Configuring sFlow Interface Settings 185
Traffic Segmentation 187
Enabling Traffic Segmentation 187
Configuring Uplink and Downlink Ports 189
VLAN Trunking 191
6 VLAN CONFIGURATION 193
IEEE 802.1Q VLANs 193
Configuring VLAN Groups 196
Adding Static Members to VLANs 199
Configuring Dynamic VLAN Registration 203
IEEE 802.1Q Tunneling 206
Enabling QinQ Tunneling on the Switch 210
Creating CVLAN to SPVLAN Mapping Entries 211
Adding an Interface to a QinQ Tunnel 213
Protocol VLANs 215
Configuring Protocol VLAN Groups 215
Mapping Protocol Groups to Interfaces 217
Configuring IP Subnet VLANs 219
Configuring MAC-based VLANs 221
Configuring VLAN Mirroring 223
Configuring VLAN Translation 224
7ADDRESS TABLE SETTINGS 227
Setting Static Addresses 227

C ONTENTS
– 12 –
Changing the Aging Time 229
Displaying the Dynamic Address Table 230
Clearing the Dynamic Address Table 231
Configuring MAC Address Mirroring 232
8SPANNING TREE ALGORITHM 235
Overview 235
Configuring Loopback Detection 238
Configuring Global Settings for STA 240
Displaying Global Settings for STA 245
Configuring Interface Settings for STA 246
Displaying Interface Settings for STA 250
Configuring Multiple Spanning Trees 253
Configuring Interface Settings for MSTP 257
9CONGESTION CONTROL 259
Rate Limiting 259
Storm Control 260
Automatic Traffic Control 263
Setting the ATC Timers 264
Configuring ATC Thresholds and Responses 266
10 CLASS OF SERVICE 269
Layer 2 Queue Settings 269
Setting the Default Priority for Interfaces 269
Selecting the Queue Mode 270
Mapping CoS Values to Egress Queues 273
Layer 3/4 Priority Settings 276
Setting Priority Processing to DSCP or CoS 276
Mapping Ingress DSCP Values to Internal DSCP Values 277
Mapping CoS Priorities to Internal DSCP Values 280
11 QUALITY OF SERVICE 283
Overview 283
Configuring a Class Map 284
Creating QoS Policies 287
Attaching a Policy Map to a Port 297
12 VOIP TRAFFIC CONFIGURATION 299
Overview 299
Configuring VoIP Traffic 299

C ONTENTS
– 13 –
Configuring Telephony OUI 301
Configuring VoIP Traffic Ports 302
13 SECURITY MEASURES 305
AAA (Authentication, Authorization and Accounting) 306
Configuring Local/Remote Logon Authentication 307
Configuring Remote Logon Authentication Servers 308
Configuring AAA Accounting 313
Configuring AAA Authorization 319
Configuring User Accounts 322
Web Authentication 324
Configuring Global Settings for Web Authentication 324
Configuring Interface Settings for Web Authentication 325
Network Access (MAC Address Authentication) 326
Configuring Global Settings for Network Access 329
Configuring Network Access for Ports 330
Configuring Port Link Detection 332
Configuring a MAC Address Filter 333
Displaying Secure MAC Address Information 335
Configuring HTTPS 336
Configuring Global Settings for HTTPS 336
Replacing the Default Secure-site Certificate 338
Configuring the Secure Shell 340
Configuring the SSH Server 342
Generating the Host Key Pair 344
Importing User Public Keys 345
Access Control Lists 347
Setting A Time Range 349
Showing TCAM Utilization 351
Setting the ACL Name and Type 352
Configuring a Standard IPv4 ACL 354
Configuring an Extended IPv4 ACL 356
Configuring a Standard IPv6 ACL 358
Configuring an Extended IPv6 ACL 360
Configuring a MAC ACL 362
Configuring an ARP ACL 364
Binding a Port to an Access Control List 366

C ONTENTS
– 14 –
Configuring ACL Mirroring 367
Showing ACL Hardware Counters 369
ARP Inspection 370
Configuring Global Settings for ARP Inspection 371
Configuring VLAN Settings for ARP Inspection 373
Configuring Interface Settings for ARP Inspection 375
Displaying ARP Inspection Statistics 376
Displaying the ARP Inspection Log 377
Filtering IP Addresses for Management Access 378
Configuring Port Security 380
Configuring 802.1X Port Authentication 382
Configuring 802.1X Global Settings 384
Configuring Port Authenticator Settings for 802.1X 385
Configuring Port Supplicant Settings for 802.1X 389
Displaying 802.1X Statistics 391
DoS Protection 394
IP Source Guard 396
Configuring Ports for IP Source Guard 397
Configuring Static Bindings for IP Source Guard 399
Displaying Information for Dynamic IP Source Guard Bindings 401
DHCP Snooping 402
DHCP Snooping Configuration 404
DHCP Snooping VLAN Configuration 406
Configuring Ports for DHCP Snooping 407
Displaying DHCP Snooping Binding Information 408
14 BASIC ADMINISTRATION PROTOCOLS 411
Configuring Event Logging 412
System Log Configuration 412
Remote Log Configuration 414
Sending Simple Mail Transfer Protocol Alerts 415
Link Layer Discovery Protocol 416
Setting LLDP Timing Attributes 417
Configuring LLDP Interface Attributes 419
Configuring LLDP Interface Civic-Address 422
Displaying LLDP Local Device Information 424
Displaying LLDP Remote Device Information 428

C ONTENTS
– 15 –
Displaying Device Statistics 436
Power over Ethernet 438
Displaying the Switch’s Overall PoE Power Budget 439
Setting The Port PoE Power Budget 440
Simple Network Management Protocol 442
Configuring Global Settings for SNMP 444
Setting the Local Engine ID 445
Specifying a Remote Engine ID 446
Setting SNMPv3 Views 447
Configuring SNMPv3 Groups 450
Setting Community Access Strings 455
Configuring Local SNMPv3 Users 456
Configuring Remote SNMPv3 Users 458
Specifying Trap Managers 461
Creating SNMP Notification Logs 465
Showing SNMP Statistics 467
Remote Monitoring 469
Configuring RMON Alarms 470
Configuring RMON Events 472
Configuring RMON History Samples 474
Configuring RMON Statistical Samples 477
Switch Clustering 480
Configuring General Settings for Clusters 480
Cluster Member Configuration 482
Managing Cluster Members 483
Ethernet Ring Protection Switching 484
ERPS Global Configuration 488
ERPS Ring Configuration 489
ERPS Forced and Manual Mode Operations 505
Connectivity Fault Management 509
Configuring Global Settings for CFM 512
Configuring Interfaces for CFM 516
Configuring CFM Maintenance Domains 516
Configuring CFM Maintenance Associations 521
Configuring Maintenance End Points 526
Configuring Remote Maintenance End Points 527

C ONTENTS
– 16 –
Transmitting Link Trace Messages 529
Transmitting Loop Back Messages 531
Transmitting Delay-Measure Requests 533
Displaying Local MEPs 535
Displaying Details for Local MEPs 536
Displaying Local MIPs 538
Displaying Remote MEPs 539
Displaying Details for Remote MEPs 540
Displaying the Link Trace Cache 542
Displaying Fault Notification Settings 543
Displaying Continuity Check Errors 544
OAM Configuration 546
Enabling OAM on Local Ports 546
Displaying Statistics for OAM Messages 548
Displaying the OAM Event Log 549
Displaying the Status of Remote Interfaces 550
Configuring a Remote Loop Back Test 551
Displaying Results of Remote Loop Back Testing 553
15 MULTICAST FILTERING 555
Overview 555
Layer 2 IGMP (Snooping and Query) 556
Configuring IGMP Snooping and Query Parameters 558
Specifying Static Interfaces for a Multicast Router 562
Assigning Interfaces to Multicast Services 564
Setting IGMP Snooping Status per Interface 566
Filtering IGMP Query Packets and Multicast Data 571
Displaying Multicast Groups Discovered by IGMP Snooping 572
Displaying IGMP Snooping Statistics 573
Filtering and Throttling IGMP Groups 577
Enabling IGMP Filtering and Throttling 577
Configuring IGMP Filter Profiles 578
Configuring IGMP Filtering and Throttling for Interfaces 580
Multicast VLAN Registration for IPv4 582
Configuring MVR Global Settings 583
Configuring MVR Domain Settings 585
Configuring MVR Group Address Profiles 587

C ONTENTS
– 17 –
Configuring MVR Interface Status 590
Assigning Static MVR Multicast Groups to Interfaces 592
Displaying MVR Receiver Groups 594
Displaying MVR Statistics 595
Multicast VLAN Registration for IPv6 599
Configuring MVR6 Global Settings 600
Configuring MVR6 Domain Settings 602
Configuring MVR6 Group Address Profiles 603
Configuring MVR6 Interface Status 606
Assigning Static MVR6 Multicast Groups to Interfaces 608
Displaying MVR6 Receiver Groups 610
Displaying MVR6 Statistics 611
16 IP CONFIGURATION 615
Setting the Switch’s IP Address (IP Version 4) 615
Setting the Switch’s IP Address (IP Version 6) 619
Configuring the IPv6 Default Gateway 619
Configuring IPv6 Interface Settings 620
Configuring an IPv6 Address 625
Showing IPv6 Addresses 628
Showing the IPv6 Neighbor Cache 629
Showing IPv6 Statistics 631
Showing the MTU for Responding Destinations 636
17 IP SERVICES 637
Domain Name Service 637
Configuring General DNS Service Parameters 637
Configuring a List of Domain Names 638
Configuring a List of Name Servers 640
Configuring Static DNS Host to Address Entries 641
Displaying the DNS Cache 642
Dynamic Host Configuration Protocol 643
Specifying A DHCP Client Identifier 643
Configuring DHCP Relay Service 645
Configuring the PPPoE Intermediate Agent 646
Configuring PPPoE IA Global Settings 646
Configuring PPPoE IA Interface Settings 648
Showing PPPoE IA Statistics 650

C ONTENTS
– 18 –
18 GENERAL IP ROUTING 653
Overview 653
Initial Configuration 653
IP Routing and Switching 654
Routing Path Management 655
Routing Protocols 656
Configuring IP Routing Interfaces 656
Configuring Local and Remote Interfaces 656
Using the Ping Function 657
Using the Trace Route Function 658
Address Resolution Protocol 659
Basic ARP Configuration 660
Configuring Static ARP Addresses 662
Displaying Dynamic or Local ARP Entries 663
Displaying ARP Statistics 664
Configuring Static Routes 665
Displaying the Routing Table 667
19 UNICAST ROUTING 669
Overview 669
Configuring the Routing Information Protocol 670
Configuring General Protocol Settings 671
Clearing Entries from the Routing Table 674
Specifying Network Interfaces 675
Specifying Passive Interfaces 677
Specifying Static Neighbors 678
Configuring Route Redistribution 679
Specifying an Administrative Distance 681
Configuring Network Interfaces for RIP 683
Displaying RIP Interface Settings 687
Displaying Peer Router Information 687
Resetting RIP Statistics 688

C ONTENTS
– 19 –
SECTION III COMMAND LINE INTERFACE 689
20 USING THE COMMAND LINE INTERFACE 691
Accessing the CLI 691
Console Connection 691
Telnet Connection 692
Entering Commands 693
Keywords and Arguments 693
Minimum Abbreviation 693
Command Completion 693
Getting Help on Commands 694
Partial Keyword Lookup 696
Negating the Effect of Commands 696
Using Command History 696
Understanding Command Modes 696
Exec Commands 697
Configuration Commands 698
Command Line Processing 700
Showing Status Information 700
CLI Command Groups 701
21 GENERAL COMMANDS 705
prompt 705
reload (Global Configuration) 706
enable 707
quit 708
show history 708
configure 709
disable 710
reload (Privileged Exec) 710
show reload 711
end 711
exit 711
22 SYSTEM MANAGEMENT COMMANDS 713
Device Designation 713
hostname 714

C ONTENTS
– 20 –
Banner Information 714
banner configure 715
banner configure company 716
banner configure dc-power-info 717
banner configure department 717
banner configure equipment-info 718
banner configure equipment-location 719
banner configure ip-lan 719
banner configure lp-number 720
banner configure manager-info 721
banner configure mux 721
banner configure note 722
show banner 723
System Status 723
show access-list tcam-utilization 724
show memory 724
show process cpu 725
show running-config 725
show startup-config 727
show system 727
show tech-support 728
show users 729
show version 730
show watchdog 730
watchdog software 730
Frame Size 731
jumbo frame 731
File Management 732
General Commands 733
boot system 733
copy 734
delete 737
dir 737
whichboot 738
Automatic Code Upgrade Commands 739
upgrade opcode auto 739