Edge-Core ECS4610-24F Programming manual

Management Guide
www.edge-core.com
ECS4610-24F
24-Port Layer 3
Gigabit Ethernet Switch

M ANAGEMENT G UIDE
ECS4610-24F GIGABIT ETHERNET SWITCH
Layer 3 Switch,
with 22 1000BASE-X SFP Ports,
and 2 Combination Gigabit Ports (RJ-45/SFP)
ECS4610-24F
E052010/ST-R01
149100000092A

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
MAY 2010 RELEASE
This is the first release of this guide. This guide is valid for software release
v1.1.2.0.

A BOUT T HIS G UIDE
– 6 –

– 7 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 7
FIGURES 37
TABLES 49
SECTION I GETTING STARTED 55
1INTRODUCTION 57
Key Features 57
Description of Software Features 58
Configuration Backup and Restore 58
Authentication 58
Access Control Lists 59
DHCP 59
Port Configuration 59
Port Mirroring 59
Port Trunking 59
Rate Limiting 60
Broadcast Storm Control 60
Static Addresses 60
IEEE 802.1D Bridge 60
Store-and-Forward Switching 60
Spanning Tree Algorithm 60
Virtual LANs 61
IEEE 802.1Q Tunneling (QinQ) 61
Traffic Prioritization 62
Quality of Service 62
IP Routing 62
Equal-cost Multipath Load Balancing 63
Router Redundancy 63

C ONTENTS
– 8 –
Address Resolution Protocol 63
Multicast Filtering 63
Multicast Routing 63
Tunneling 64
System Defaults 64
2INITIAL SWITCH CONFIGURATION 67
Connecting to the Switch 67
Configuration Options 67
Required Connections 68
Remote Connections 69
Basic Configuration 70
Console Connection 70
Setting Passwords 70
Setting an IP Address 71
Enabling SNMP Management Access 73
Managing System Files 75
Saving or Restoring Configuration Settings 76
SECTION II WEB CONFIGURATION 79
3USING THE WEB INTERFACE 81
Connecting to the Web Interface 81
Navigating the Web Browser Interface 82
Home Page 82
Configuration Options 83
Panel Display 83
Main Menu 84
4BASIC MANAGEMENT TASKS 101
Displaying System Information 101
Displaying Switch Hardware/Software Versions 103
Configuring Support for Jumbo Frames 104
Displaying Bridge Extension Capabilities 105
Managing System Files 106
Copying Files via FTP/TFTP or HTTP 106
Saving the Running Configuration to a Local File 108
Setting The Start-Up File 110

C ONTENTS
– 9 –
Showing System Files 110
Setting the System Clock 111
Setting the Time Manually 111
Configuring SNTP 112
Specifying SNTP Time Servers 113
Setting the Time Zone 114
Console Port Settings 115
Telnet Settings 117
Displaying CPU Utilization 118
Displaying Memory Utilization 119
Resetting the System 120
5INTERFACE CONFIGURATION 125
Port Configuration 125
Configuring by Port List 125
Configuring by Port Range 128
Displaying Connection Status 128
Configuring Port Mirroring 130
Showing Port or Trunk Statistics 131
Trunk Configuration 135
Configuring a Static Trunk 136
Configuring a Dynamic Trunk 139
Displaying LACP Port Counters 144
Displaying LACP Settings and Status for the Local Side 145
Displaying LACP Settings and Status for the Remote Side 147
Traffic Segmentation 149
Enabling Traffic Segmentation 149
Configuring Uplink and Downlink Ports 150
VLAN Trunking 151
6 VLAN CONFIGURATION 153
IEEE 802.1Q VLANs 153
Configuring VLAN Groups 156
Adding Static Members to VLANs 158
Configuring Dynamic VLAN Registration 163
Private VLANs 166
Creating Private VLANs 167
Associating Private VLANs 168

C ONTENTS
– 10 –
Configuring Private VLAN Interfaces 169
IEEE 802.1Q Tunneling 171
Enabling QinQ Tunneling on the Switch 175
Adding an Interface to a QinQ Tunnel 176
Protocol VLANs 177
Configuring Protocol VLAN Groups 178
Mapping Protocol Groups to Interfaces 180
Configuring IP Subnet VLANs 182
Configuring MAC-based VLANs 184
7ADDRESS TABLE SETTINGS 187
Configuring MAC Address Learning 187
Setting Static Addresses 189
Changing the Aging Time 190
Displaying the Dynamic Address Table 191
Clearing the Dynamic Address Table 192
8SPANNING TREE ALGORITHM 195
Overview 195
Configuring Loopback Detection 198
Configuring Global Settings for STA 199
Displaying Global Settings for STA 204
Configuring Interface Settings for STA 205
Displaying Interface Settings for STA 209
Configuring Multiple Spanning Trees 212
Configuring Interface Settings for MSTP 216
9RATE LIMIT CONFIGURATION 219
10 STORM CONTROL CONFIGURATION 221
11 QUALITY OF SERVICE 223
Overview 223
Configuring a Class Map 224
Creating QoS Policies 227
Attaching a Policy Map to a Port 237
12 VOIP TRAFFIC CONFIGURATION 239
Overview 239
Configuring VoIP Traffic 239
Configuring Telephony OUI 241
Configuring VoIP Traffic Ports 242

C ONTENTS
– 11 –
13 SECURITY MEASURES 245
AAA Authorization and Accounting 246
Configuring Local/Remote Logon Authentication 247
Configuring Remote Logon Authentication Servers 248
Configuring AAA Accounting 253
Configuring AAA Authorization 258
Configuring User Accounts 261
Network Access (MAC Address Authentication) 262
Configuring Global Settings for Network Access 265
Configuring Network Access for Ports 266
Configuring Port Link Detection 268
Configuring a MAC Address Filter 269
Displaying Secure MAC Address Information 270
Configuring HTTPS 272
Configuring Global Settings for HTTPS 272
Replacing the Default Secure-site Certificate 274
Configuring the Secure Shell 275
Configuring the SSH Server 278
Generating the Host Key Pair 279
Importing User Public Keys 281
Access Control Lists 283
Setting A Time Range 284
Setting the ACL Name and Type 286
Configuring a Standard IPv4 ACL 288
Configuring an Extended IPv4 ACL 289
Configuring a Standard IPv6 ACL 292
Configuring an Extended IPv6 ACL 293
Configuring a MAC ACL 296
Configuring an ARP ACL 298
Binding a Port to an Access Control List 300
ARP Inspection 301
Configuring Global Settings for ARP Inspection 302
Configuring VLAN Settings for ARP Inspection 304
Configuring Interface Settings for ARP Inspection 306
Displaying ARP Inspection Statistics 307
Displaying the ARP Inspection Log 308

C ONTENTS
– 12 –
Filtering IP Addresses for Management Access 309
Configuring Port Security 311
Configuring 802.1X Port Authentication 313
Configuring 802.1X Global Settings 314
Configuring Port Settings for 802.1X 316
Displaying 802.1X Statistics 320
IP Source Guard 321
Configuring Ports for IP Source Guard 321
Configuring Static Bindings for IP Source Guard 323
Displaying Information for Dynamic IP Source Guard Bindings 325
DHCP Snooping 326
DHCP Snooping Configuration 329
DHCP Snooping VLAN Configuration 330
Configuring Ports for DHCP Snooping 331
Displaying DHCP Snooping Binding Information 332
14 BASIC ADMINISTRATION PROTOCOLS 335
Configuring Event Logging 335
System Log Configuration 335
Remote Log Configuration 337
Sending Simple Mail Transfer Protocol Alerts 339
Link Layer Discovery Protocol 340
Setting LLDP Timing Attributes 340
Configuring LLDP Interface Attributes 342
Displaying LLDP Local Device Information 345
Displaying LLDP Remote Port Information 347
Displaying Device Statistics 352
Simple Network Management Protocol 354
Configuring Global Settings for SNMP 356
Setting the Local Engine ID 357
Specifying a Remote Engine ID 358
Setting SNMPv3 Views 360
Configuring SNMPv3 Groups 363
Setting Community Access Strings 366
Configuring Local SNMPv3 Users 368
Configuring Remote SNMPv3 Users 370
Specifying Trap Managers 372

C ONTENTS
– 13 –
Remote Monitoring 376
Configuring RMON Alarms 377
Configuring RMON Events 380
Configuring RMON History Samples 382
Configuring RMON Statistical Samples 384
15 MULTICAST FILTERING 387
Overview 387
IGMP Protocol 388
Layer 2 IGMP (Snooping and Query) 389
Configuring IGMP Snooping and Query Parameters 391
Specifying Static Interfaces for a Multicast Router 395
Assigning Interfaces to Multicast Services 397
Setting IGMP Snooping Status per Interface 399
Displaying Multicast Groups Discovered by IGMP Snooping 404
Filtering and Throttling IGMP Groups 405
Enabling IGMP Filtering and Throttling 405
Configuring IGMP Filter Profiles 406
Configuring IGMP Filtering and Throttling for Interfaces 409
Layer 3 IGMP (Query used with Multicast Routing) 410
Configuring IGMP Proxy Routing 411
Configuring IGMP Interface Parameters 413
Configuring Static IGMP Group Membership 416
Displaying Multicast Group Information 418
Multicast VLAN Registration 420
Configuring Global MVR Settings 422
Configuring the MVR Group Range 423
Configuring MVR Interface Status 424
Assigning Static Multicast Groups to Interfaces 427
Showing Multicast Groups Assigned to Interfaces 428
16 IP CONFIGURATION 431
Setting the Switch’s IP Address (IP Version 4) 431
17 GENERAL IP ROUTING 435
Overview 435
Initial Configuration 435
IP Routing and Switching 436
Routing Path Management 437

C ONTENTS
– 14 –
Routing Protocols 438
Configuring IP Routing Interfaces 438
Configuring Local and Remote Interfaces 438
Using the Ping Function 439
Using the Trace Route Function 440
Address Resolution Protocol 441
Basic ARP Configuration 442
Configuring Static ARP Addresses 444
Displaying Dynamic or Local ARP Entries 445
Displaying ARP Statistics 446
Configuring Static Routes 447
Displaying the Routing Table 449
Equal-cost Multipath Routing 450
18 CONFIGURING ROUTER REDUNDANCY 453
Configuring VRRP Groups 454
Displaying VRRP Global Statistics 460
Displaying VRRP Group Statistics 461
19 IP SERVICES 463
Domain Name Service 463
Configuring General DNS Service Parameters 463
Configuring a List of Domain Names 464
Configuring a List of Name Servers 466
Configuring Static DNS Host to Address Entries 467
Displaying the DNS Cache 468
Dynamic Host Configuration Protocol 469
Configuring DHCP Relay Service 470
Configuring the DHCP Server 471
Forwarding UDP Service Requests 478
Enabling the UDP Helper 478
Specifying UDP Destination Ports 479
Specifying The Target Server or Subnet 480
20 UNICAST ROUTING 483
Overview 483
Configuring the Routing Information Protocol 484
Configuring General Protocol Settings 485
Clearing Entries from the Routing Table 488

C ONTENTS
– 15 –
Specifying Network Interfaces 489
Specifying Passive Interfaces 491
Specifying Static Neighbors 492
Configuring Route Redistribution 493
Specifying an Administrative Distance 495
Configuring Network Interfaces for RIP 496
Displaying RIP Interface Settings 500
Displaying Peer Router Information 501
Resetting RIP Statistics 502
Configuring the Open Shortest Path First Protocol (Version 2) 502
Defining Network Areas Based on Addresses 504
Configuring General Protocol Settings 507
Displaying Adminstrative Settings and Statistics 510
Adding an NSSA or Stub 512
Configuring NSSA Settings 513
Configuring Stub Settings 516
Displaying Information on NSSA and Stub Areas 518
Configuring Area Ranges (Route Summarization for ABRs) 519
Redistributing External Routes 521
Configuring Summary Addresses (for External AS Routes) 523
Configuring OSPF Interfaces 525
Configuring Virtual Links 531
Displaying Link State Database Information 534
Displaying Information on Virtual Links 536
Displaying Information on Neighboring Routers 538
21 MULTICAST ROUTING 541
Overview 541
Configuring Global Settings for Multicast Routing 544
Enabling Multicast Routing Globally 544
Displaying the Multicast Routing Table 544
Configuring PIM for IPv4 548
Enabling PIM Globally 548
Configuring PIM Interface Settings 548
Displaying Neighbor Information 554
Configuring Global PIM-SM Settings 554
Configuring a BSR Candidate 556

C ONTENTS
– 16 –
Configuring a Static Rendezvous Point 557
Configuring an RP Candidate 559
Displaying the BSR Router 561
Displaying RP Mapping 563
SECTION III COMMAND LINE INTERFACE 565
22 USING THE COMMAND LINE INTERFACE 567
Accessing the CLI 567
Console Connection 567
Telnet Connection 568
Entering Commands 569
Keywords and Arguments 569
Minimum Abbreviation 569
Command Completion 569
Getting Help on Commands 570
Partial Keyword Lookup 571
Negating the Effect of Commands 571
Using Command History 571
Understanding Command Modes 572
Exec Commands 572
Configuration Commands 573
Command Line Processing 575
CLI Command Groups 576
23 GENERAL COMMANDS 579
prompt 579
reload (Global Configuration) 580
enable 581
quit 582
show history 582
configure 583
disable 584
reload (Privileged Exec) 584
show reload 585
end 585
exit 585

C ONTENTS
– 17 –
24 SYSTEM MANAGEMENT COMMANDS 587
Device Designation 587
hostname 588
System Status 588
show running-config 588
show startup-config 590
show system 590
show users 591
show version 592
Frame Size 592
jumbo frame 592
File Management 593
boot system 594
copy 595
delete 598
dir 598
whichboot 599
Line 600
line 600
databits 601
exec-timeout 602
login 603
parity 604
password 604
password-thresh 605
silent-time 606
speed 606
stopbits 607
timeout login response 608
disconnect 608
show line 609
Event Logging 610
logging facility 610
logging history 611
logging host 612
logging on 612

C ONTENTS
– 18 –
logging trap 613
clear log 613
show log 614
show logging 615
SMTP Alerts 616
logging sendmail 617
logging sendmail host 617
logging sendmail level 618
logging sendmail destination-email 618
logging sendmail source-email 619
show logging sendmail 619
Time 620
sntp client 620
sntp poll 621
sntp server 622
show sntp 622
clock timezone 623
calendar set 624
show calendar 624
Time Range 625
time-range 625
absolute 626
periodic 626
25 SNMP COMMANDS 629
snmp-server 630
snmp-server community 630
snmp-server contact 631
snmp-server location 631
show snmp 632
snmp-server enable traps 633
snmp-server host 634
snmp-server engine-id 636
snmp-server group 637
snmp-server user 639
snmp-server view 640
show snmp engine-id 641

C ONTENTS
– 19 –
show snmp group 642
show snmp user 643
show snmp view 644
nlm 644
snmp-server notify-filter 645
show nlm oper-status 646
show snmp notify-filter 647
26 REMOTE MONITORING COMMANDS 649
rmon alarm 650
rmon event 651
rmon collection history 652
rmon collection stats 653
show rmon alarm 654
show rmon event 654
show rmon history 654
show rmon statistics 655
27 AUTHENTICATION COMMANDS 657
User Accounts 657
enable password 658
username 659
Authentication Sequence 660
authentication enable 660
authentication login 661
RADIUS Client 662
radius-server acct-port 662
radius-server auth-port 663
radius-server host 663
radius-server key 664
radius-server retransmit 665
radius-server timeout 665
show radius-server 666
TACACS+ Client 666
tacacs-server 667
tacacs-server host 667
tacacs-server key 668
tacacs-server port 668

C ONTENTS
– 20 –
show tacacs-server 669
AAA 669
aaa accounting commands 670
aaa accounting dot1x 671
aaa accounting exec 672
aaa accounting update 673
aaa authorization exec 673
aaa group server 674
server 675
accounting dot1x 675
accounting exec 676
authorization exec 676
show accounting 677
Web Server 678
ip http port 678
ip http server 679
ip http secure-server 679
ip http secure-port 681
Telnet Server 681
ip telnet max-sessions 682
ip telnet port 682
ip telnet server 683
show ip telnet 683
Secure Shell 684
ip ssh authentication-retries 687
ip ssh server 687
ip ssh server-key size 688
ip ssh timeout 688
delete public-key 689
ip ssh crypto host-key generate 689
ip ssh crypto zeroize 690
ip ssh save host-key 691
show ip ssh 691
show public-key 692
show ssh 693