Edge-Core ECS4810-12M Layer 2 Programming manual

Management Guide
www.edge-core.com
ECS4810-12M Layer 2
Gigabit Ethernet Switch

M ANAGEMENT G UIDE
ECS4810-12M GIGABIT ETHERNET SWITCH
Layer 2 Switch
with 12 Gigabit Combination Ports (RJ-45/SFP)
ECS4810-12M
E072011/ST-R01
149100000142A

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
JUNE 2011 REVISION
This is the first version of this guide. This guide is valid for software release
v1.0.6.0.

A BOUT T HIS G UIDE
– 6 –

– 7 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 7
FIGURES 37
TABLES 47
SECTION I GETTING STARTED 53
1INTRODUCTION 55
Key Features 55
Description of Software Features 56
System Defaults 61
2INITIAL SWITCH CONFIGURATION 65
Connecting to the Switch 65
Configuration Options 65
Required Connections 66
Remote Connections 67
Basic Configuration 68
Console Connection 68
Setting Passwords 68
Setting an IP Address 69
Downloading a Configuration File Referenced by a DHCP Server 75
Enabling SNMP Management Access 77
Managing System Files 79
Saving or Restoring Configuration Settings 80
SECTION II WEB CONFIGURATION 83
3USING THE WEB INTERFACE 85
Connecting to the Web Interface 85

C ONTENTS
– 8 –
Navigating the Web Browser Interface 86
Home Page 86
Configuration Options 87
Panel Display 87
Main Menu 88
4BASIC MANAGEMENT TASKS 103
Displaying System Information 103
Displaying Hardware/Software Versions 105
Configuring Support for Jumbo Frames 106
Displaying Bridge Extension Capabilities 107
Managing System Files 109
Copying Files via FTP/TFTP or HTTP 109
Saving the Running Configuration to a Local File 111
Setting The Start-Up File 112
Showing System Files 112
Automatic Operation Code Upgrade 113
Setting the System Clock 117
Setting the Time Manually 117
Setting the SNTP Polling Interval 119
Specifying SNTP Time Servers 120
Setting the Time Zone 120
Configuring The Console Port 122
Configuring Telnet Settings 124
Displaying CPU Utilization 125
Displaying Memory Utilization 126
Resetting the System 127
5INTERFACE CONFIGURATION 131
Port Configuration 132
Configuring by Port List 132
Configuring by Port Range 134
Displaying Connection Status 135
Configuring Local Port Mirroring 136
Configuring Remote Port Mirroring 138
Showing Port or Trunk Statistics 142
Displaying Statistical History 146
Displaying Transceiver Data 148

C ONTENTS
– 9 –
Performing Cable Diagnostics 151
Trunk Configuration 152
Configuring a Static Trunk 153
Configuring a Dynamic Trunk 156
Displaying LACP Port Counters 161
Displaying LACP Settings and Status for the Local Side 162
Displaying LACP Settings and Status for the Remote Side 164
Configuring Load Balancing 166
Saving Power 167
Traffic Segmentation 169
Enabling Traffic Segmentation 169
Configuring Uplink and Downlink Ports 170
VLAN Trunking 173
6 VLAN CONFIGURATION 175
IEEE 802.1Q VLANs 175
Configuring VLAN Groups 178
Adding Static Members to VLANs 180
Configuring Dynamic VLAN Registration 185
Showing VLAN Statistics 188
IEEE 802.1Q Tunneling 189
Enabling QinQ Tunneling on the Switch 193
Adding an Interface to a QinQ Tunnel 194
Protocol VLANs 195
Configuring Protocol VLAN Groups 196
Mapping Protocol Groups to Interfaces 198
Configuring IP Subnet VLANs 200
Configuring MAC-based VLANs 202
Configuring VLAN Mirroring 203
7ADDRESS TABLE SETTINGS 207
Setting Static Addresses 207
Changing the Aging Time 209
Displaying the Dynamic Address Table 210
Clearing the Dynamic Address Table 211
Configuring MAC Address Mirroring 212
8SPANNING TREE ALGORITHM 215
Overview 215

C ONTENTS
– 10 –
Configuring Loopback Detection 218
Configuring Global Settings for STA 219
Displaying Global Settings for STA 224
Configuring Interface Settings for STA 225
Displaying Interface Settings for STA 229
Configuring Multiple Spanning Trees 232
Configuring Interface Settings for MSTP 236
9RATE LIMIT CONFIGURATION 239
10 STORM CONTROL CONFIGURATION 241
11 CLASS OF SERVICE 243
Layer 2 Queue Settings 243
Setting the Default Priority for Interfaces 243
Selecting the Queue Mode 244
Mapping CoS Values to Egress Queues 247
Layer 3/4 Priority Settings 249
Setting Priority Processing to DSCP or CoS 250
Mapping Ingress DSCP Values to Internal DSCP Values 251
Mapping CoS Priorities to Internal DSCP Values 253
12 QUALITY OF SERVICE 257
Overview 257
Configuring a Class Map 258
Creating QoS Policies 262
Attaching a Policy Map to a Port 271
13 VOIP TRAFFIC CONFIGURATION 273
Overview 273
Configuring VoIP Traffic 273
Configuring Telephony OUI 275
Configuring VoIP Traffic Ports 276
14 SECURITY MEASURES 279
AAA Authorization and Accounting 280
Configuring Local/Remote Logon Authentication 281
Configuring Remote Logon Authentication Servers 282
Configuring AAA Accounting 287
Configuring AAA Authorization 292
Configuring User Accounts 295
Web Authentication 297

C ONTENTS
– 11 –
Configuring Global Settings for Web Authentication 298
Configuring Interface Settings for Web Authentication 299
Network Access (MAC Address Authentication) 300
Configuring Global Settings for Network Access 303
Configuring Network Access for Ports 304
Configuring Port Link Detection 306
Configuring a MAC Address Filter 307
Displaying Secure MAC Address Information 309
Configuring HTTPS 310
Configuring Global Settings for HTTPS 310
Replacing the Default Secure-site Certificate 312
Configuring the Secure Shell 314
Configuring the SSH Server 316
Generating the Host Key Pair 318
Importing User Public Keys 319
Access Control Lists 321
Setting A Time Range 322
Showing TCAM Utilization 325
Setting the ACL Name and Type 326
Configuring a Standard IPv4 ACL 328
Configuring an Extended IPv4 ACL 329
Configuring a Standard IPv6 ACL 332
Configuring an Extended IPv6 ACL 334
Configuring a MAC ACL 336
Configuring an ARP ACL 338
Binding a Port to an Access Control List 340
ARP Inspection 341
Configuring Global Settings for ARP Inspection 342
Configuring VLAN Settings for ARP Inspection 344
Configuring Interface Settings for ARP Inspection 346
Displaying ARP Inspection Statistics 347
Displaying the ARP Inspection Log 348
Filtering IP Addresses for Management Access 349
Configuring Port Security 351
Configuring 802.1X Port Authentication 353
Configuring 802.1X Global Settings 355

C ONTENTS
– 12 –
Configuring Port Authenticator Settings for 802.1X 356
Configuring Port Supplicant Settings for 802.1X 360
Displaying 802.1X Statistics 362
IP Source Guard 365
Configuring Ports for IP Source Guard 365
Configuring Static Bindings for IP Source Guard 367
Displaying Information for Dynamic IP Source Guard Bindings 369
DHCP Snooping 371
DHCP Snooping Configuration 373
DHCP Snooping VLAN Configuration 374
Configuring Ports for DHCP Snooping 375
Displaying DHCP Snooping Binding Information 376
15 BASIC ADMINISTRATION PROTOCOLS 379
Configuring Event Logging 380
System Log Configuration 380
Remote Log Configuration 382
Sending Simple Mail Transfer Protocol Alerts 383
Link Layer Discovery Protocol 385
Setting LLDP Timing Attributes 385
Configuring LLDP Interface Attributes 387
Displaying LLDP Local Device Information 390
Displaying LLDP Remote Port Information 393
Displaying Device Statistics 399
Simple Network Management Protocol 400
Configuring Global Settings for SNMP 403
Setting the Local Engine ID 404
Specifying a Remote Engine ID 405
Setting SNMPv3 Views 406
Configuring SNMPv3 Groups 409
Setting Community Access Strings 413
Configuring Local SNMPv3 Users 414
Configuring Remote SNMPv3 Users 416
Specifying Trap Managers 419
Remote Monitoring 424
Configuring RMON Alarms 424
Configuring RMON Events 427

C ONTENTS
– 13 –
Configuring RMON History Samples 429
Configuring RMON Statistical Samples 432
Switch Clustering 434
Configuring General Settings for Clusters 435
Cluster Member Configuration 436
Managing Cluster Members 438
Ethernet Ring Protection Switching 439
ERPS Configuration 442
ERPS Ring Configuration 443
Connectivity Fault Management 449
Configuring Global Settings for CFM 452
Configuring Interfaces for CFM 456
Configuring CFM Maintenance Domains 456
Configuring CFM Maintenance Associations 461
Configuring Maintenance End Points 466
Configuring Remote Maintenance End Points 467
Transmitting Link Trace Messages 469
Transmitting Loop Back Messages 471
Transmitting Delay-Measure Requests 473
Displaying Local MEPs 475
Displaying Details for Local MEPs 476
Displaying Local MIPs 478
Displaying Remote MEPs 479
Displaying Details for Remote MEPs 480
Displaying the Link Trace Cache 482
Displaying Fault Notification Settings 483
Displaying Continuity Check Errors 484
OAM Configuration 486
Enabling OAM on Local Ports 486
Displaying Statistics for OAM Messages 488
Displaying the OAM Event Log 489
Displaying the Status of Remote Interfaces 490
Configuring a Remote Loop Back Test 491
Displaying Results of Remote Loop Back Testing 493
16 IP CONFIGURATION 495
Using the Ping Function 495

C ONTENTS
– 14 –
Address Resolution Protocol 496
Setting the ARP Timeout 497
Displaying ARP Entries 498
Setting the Switch’s IP Address (IP Version 4) 499
Configuring the IPv4 Default Gateway 499
Configuring IPv4 Interface Settings 500
Setting the Switch’s IP Address (IP Version 6) 503
Configuring the IPv6 Default Gateway 503
Configuring IPv6 Interface Settings 504
Configuring an IPv6 Address 507
Showing IPv6 Addresses 510
Showing the IPv6 Neighbor Cache 512
Showing IPv6 Statistics 513
Showing the MTU for Responding Destinations 519
17 IP SERVICES 521
Configuring General DNS Service Parameters 521
Configuring a List of Domain Names 522
Configuring a List of Name Servers 524
Configuring Static DNS Host to Address Entries 525
Displaying the DNS Cache 527
18 MULTICAST FILTERING 529
Overview 529
Layer 2 IGMP (Snooping and Query) 530
Configuring IGMP Snooping and Query Parameters 532
Specifying Static Interfaces for a Multicast Router 536
Assigning Interfaces to Multicast Services 538
Setting IGMP Snooping Status per Interface 540
Displaying Multicast Groups Discovered by IGMP Snooping 545
Displaying IGMP Snooping Statistics 546
Filtering and Throttling IGMP Groups 550
Enabling IGMP Filtering and Throttling 551
Configuring IGMP Filter Profiles 551
Configuring IGMP Filtering and Throttling for Interfaces 554
Multicast VLAN Registration 555
Configuring MVR Domain Settings 557
Configuring MVR Group Address Profiles 558

C ONTENTS
– 15 –
Configuring MVR Interface Status 561
Assigning Static Multicast Groups to Interfaces 563
Displaying MVR Receiver Groups 565
Displaying MVR Statistics 566
SECTION III COMMAND LINE INTERFACE 571
19 USING THE COMMAND LINE INTERFACE 573
Accessing the CLI 573
Console Connection 573
Telnet Connection 574
Entering Commands 575
Keywords and Arguments 575
Minimum Abbreviation 575
Command Completion 575
Getting Help on Commands 576
Partial Keyword Lookup 577
Negating the Effect of Commands 578
Using Command History 578
Understanding Command Modes 578
Exec Commands 578
Configuration Commands 579
Command Line Processing 582
Showing Status Information 582
Output Modifiers 583
CLI Command Groups 583
20 GENERAL COMMANDS 587
prompt 587
reload (Global Configuration) 588
enable 589
quit 590
show history 590
configure 591
disable 592
reload (Privileged Exec) 592
show reload 593

C ONTENTS
– 16 –
end 593
exit 593
21 SYSTEM MANAGEMENT COMMANDS 595
Device Designation 595
hostname 596
Banner Information 596
banner configure 597
banner configure company 598
banner configure dc-power-info 599
banner configure department 599
banner configure equipment-info 600
banner configure equipment-location 601
banner configure ip-lan 601
banner configure lp-number 602
banner configure manager-info 603
banner configure mux 603
banner configure note 604
show banner 605
System Status 605
show access-list tcam-utilization 606
show memory 606
show process cpu 607
show running-config 607
show startup-config 608
show system 609
show tech-support 610
show users 611
show version 611
Frame Size 612
jumbo frame 612
File Management 613
boot system 614
copy 615
delete 618
dir 618
whichboot 619

C ONTENTS
– 17 –
upgrade opcode auto 620
upgrade opcode path 621
Line 623
line 623
databits 624
exec-timeout 625
login 625
parity 626
password 627
password-thresh 628
silent-time 629
speed 629
stopbits 630
timeout login response 630
disconnect 631
show line 632
Event Logging 632
logging facility 633
logging history 634
logging host 635
logging on 635
logging trap 636
clear log 636
show log 637
show logging 638
SMTP Alerts 639
logging sendmail 640
logging sendmail host 640
logging sendmail level 641
logging sendmail destination-email 641
logging sendmail source-email 642
show logging sendmail 642
Time 643
sntp client 643
sntp poll 644
sntp server 645

C ONTENTS
– 18 –
show sntp 645
clock timezone 646
calendar set 647
show calendar 647
Time Range 648
time-range 648
absolute 649
periodic 650
show time-range 651
Switch Clustering 651
cluster 652
cluster commander 653
cluster ip-pool 653
cluster member 654
rcommand 655
show cluster 655
show cluster members 656
show cluster candidates 656
22 SNMP COMMANDS 657
snmp-server 658
snmp-server community 659
snmp-server contact 659
snmp-server location 660
show snmp 660
snmp-server enable traps 661
snmp-server host 662
snmp-server engine-id 665
snmp-server group 666
snmp-server user 667
snmp-server view 668
show snmp engine-id 669
show snmp group 670
show snmp user 671
show snmp view 672
nlm 672
snmp-server notify-filter 673

C ONTENTS
– 19 –
show nlm oper-status 674
show snmp notify-filter 675
23 REMOTE MONITORING COMMANDS 677
rmon alarm 678
rmon event 679
rmon collection history 680
rmon collection rmon1 681
show rmon alarms 682
show rmon events 682
show rmon history 682
show rmon statistics 683
24 FLOW SAMPLING COMMANDS 685
sflow destination 685
sflow max-datagram-size 686
sflow max-header-size 687
sflow owner 687
sflow sample 688
sflow source 688
sflow timeout 689
show sflow 689
25 AUTHENTICATION COMMANDS 691
User Accounts 691
enable password 692
username 693
Authentication Sequence 694
authentication enable 694
authentication login 695
RADIUS Client 696
radius-server acct-port 696
radius-server auth-port 697
radius-server host 697
radius-server key 698
radius-server retransmit 698
radius-server timeout 699
show radius-server 699

C ONTENTS
– 20 –
TACACS+ Client 700
tacacs-server host 700
tacacs-server key 701
tacacs-server port 702
tacacs-server retransmit 702
tacacs-server timeout 703
show tacacs-server 703
AAA 704
aaa accounting dot1x 704
aaa accounting exec 705
aaa accounting update 706
aaa authorization exec 707
aaa group server 708
server 708
accounting dot1x 709
accounting exec 709
authorization exec 710
show accounting 710
Web Server 711
ip http port 712
ip http server 712
ip http secure-port 713
ip http secure-server 713
Telnet Server 715
ip telnet max-sessions 715
ip telnet port 716
ip telnet server 716
show ip telnet 717
Secure Shell 717
ip ssh authentication-retries 720
ip ssh server 720
ip ssh server-key size 721
ip ssh timeout 722
delete public-key 722
ip ssh crypto host-key generate 723
ip ssh crypto zeroize 724