Edge-Core ES3510MA-DC Programming manual

Management Guide
www.edge-core.com
8-Port Layer 2
Fast Ethernet Switch

M ANAGEMENT G UIDE
ES3510MA-DC FAST ETHERNET SWITCH
Layer 2 Switch
with 8 10/100BASE-TX (RJ-45) Ports,
and 2 Gigabit Combination Ports (RJ-45/SFP)
ES3510MA-DC
E122010/ST-R01
150200000251A

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
DECEMBER 2010 RELEASE
This is the second release of this guide. This guide is valid for software
release v1.2.4.2.

A BOUT T HIS G UIDE
– 6 –

– 7 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 7
FIGURES 35
TABLES 45
SECTION I GETTING STARTED 51
1INTRODUCTION 53
Key Features 53
Description of Software Features 54
System Defaults 59
2INITIAL SWITCH CONFIGURATION 63
Connecting to the Switch 63
Configuration Options 63
Required Connections 64
Remote Connections 65
Basic Configuration 66
Console Connection 66
Setting Passwords 66
Setting an IP Address 67
Downloading a Configuration File Referenced by a DHCP Server 73
Enabling SNMP Management Access 75
Managing System Files 77
Saving or Restoring Configuration Settings 78
SECTION II WEB CONFIGURATION 81
3USING THE WEB INTERFACE 83
Connecting to the Web Interface 83

C ONTENTS
– 8 –
Navigating the Web Browser Interface 84
Home Page 84
Configuration Options 85
Panel Display 85
Main Menu 86
4BASIC MANAGEMENT TASKS 99
Displaying System Information 99
Displaying Hardware/Software Versions 100
Configuring Support for Jumbo Frames 102
Displaying Bridge Extension Capabilities 103
Managing System Files 104
Copying Files via TFTP or HTTP 104
Saving the Running Configuration to a Local File 106
Setting The Start-Up File 107
Showing System Files 108
Automatic Operation Code Upgrade 109
Setting the System Clock 113
Setting the Time Manually 113
Setting the SNTP Polling Interval 114
Specifying SNTP Time Servers 115
Setting the Time Zone 116
Console Port Settings 117
Telnet Settings 119
Displaying CPU Utilization 120
Displaying Memory Utilization 121
Resetting the System 122
5INTERFACE CONFIGURATION 127
Port Configuration 127
Configuring by Port List 127
Configuring by Port Range 130
Displaying Connection Status 131
Configuring Local Port Mirroring 132
Configuring Remote Port Mirroring 134
Showing Port or Trunk Statistics 138
Performing Cable Diagnostics 142

C ONTENTS
– 9 –
Trunk Configuration 144
Configuring a Static Trunk 145
Configuring a Dynamic Trunk 147
Displaying LACP Port Counters 152
Displaying LACP Settings and Status for the Local Side 154
Displaying LACP Settings and Status for the Remote Side 155
Saving Power 156
Traffic Segmentation 158
Enabling Traffic Segmentation 158
Configuring Uplink and Downlink Ports 159
VLAN Trunking 161
6 VLAN CONFIGURATION 165
IEEE 802.1Q VLANs 165
Configuring VLAN Groups 168
Adding Static Members to VLANs 170
Configuring Dynamic VLAN Registration 175
IEEE 802.1Q Tunneling 178
Enabling QinQ Tunneling on the Switch 182
Adding an Interface to a QinQ Tunnel 183
Protocol VLANs 184
Configuring Protocol VLAN Groups 185
Mapping Protocol Groups to Interfaces 187
Configuring IP Subnet VLANs 189
Configuring MAC-based VLANs 191
Configuring VLAN Mirroring 193
7ADDRESS TABLE SETTINGS 195
Setting Static Addresses 195
Changing the Aging Time 197
Displaying the Dynamic Address Table 198
Clearing the Dynamic Address Table 199
Configuring MAC Address Mirroring 200
8SPANNING TREE ALGORITHM 203
Overview 203
Configuring Loopback Detection 206
Configuring Global Settings for STA 207
Displaying Global Settings for STA 212

C ONTENTS
– 10 –
Configuring Interface Settings for STA 213
Displaying Interface Settings for STA 217
Configuring Multiple Spanning Trees 220
Configuring Interface Settings for MSTP 224
9RATE LIMIT CONFIGURATION 227
10 STORM CONTROL CONFIGURATION 229
11 CLASS OF SERVICE 231
Layer 2 Queue Settings 231
Setting the Default Priority for Interfaces 231
Selecting the Queue Mode 232
Mapping CoS Values to Egress Queues 235
Layer 3/4 Priority Settings 238
Setting Priority Processing to DSCP or CoS 238
Mapping Ingress DSCP Values to Internal DSCP Values 239
Mapping CoS Priorities to Internal DSCP Values 242
12 QUALITY OF SERVICE 245
Overview 245
Configuring a Class Map 246
Creating QoS Policies 249
Attaching a Policy Map to a Port 259
13 VOIP TRAFFIC CONFIGURATION 261
Overview 261
Configuring VoIP Traffic 261
Configuring Telephony OUI 263
Configuring VoIP Traffic Ports 264
14 SECURITY MEASURES 267
AAA Authorization and Accounting 268
Configuring Local/Remote Logon Authentication 269
Configuring Remote Logon Authentication Servers 270
Configuring AAA Accounting 275
Configuring AAA Authorization 280
Configuring User Accounts 283
Web Authentication 284
Configuring Global Settings for Web Authentication 285
Configuring Interface Settings for Web Authentication 286

C ONTENTS
– 11 –
Network Access (MAC Address Authentication) 287
Configuring Global Settings for Network Access 289
Configuring Network Access for Ports 290
Configuring Port Link Detection 292
Configuring a MAC Address Filter 293
Displaying Secure MAC Address Information 295
Configuring HTTPS 297
Configuring Global Settings for HTTPS 297
Replacing the Default Secure-site Certificate 298
Configuring the Secure Shell 300
Configuring the SSH Server 303
Generating the Host Key Pair 304
Importing User Public Keys 306
Access Control Lists 308
Setting A Time Range 309
Showing TCAM Utilization 311
Setting the ACL Name and Type 312
Configuring a Standard IPv4 ACL 314
Configuring an Extended IPv4 ACL 315
Configuring a Standard IPv6 ACL 318
Configuring an Extended IPv6 ACL 319
Configuring a MAC ACL 321
Configuring an ARP ACL 323
Binding a Port to an Access Control List 325
ARP Inspection 326
Configuring Global Settings for ARP Inspection 327
Configuring VLAN Settings for ARP Inspection 329
Configuring Interface Settings for ARP Inspection 331
Displaying ARP Inspection Statistics 332
Displaying the ARP Inspection Log 333
Filtering IP Addresses for Management Access 334
Configuring Port Security 336
Configuring 802.1X Port Authentication 338
Configuring 802.1X Global Settings 339
Configuring Port Authenticator Settings for 802.1X 341
Configuring Port Supplicant Settings for 802.1X 345

C ONTENTS
– 12 –
Displaying 802.1X Statistics 347
IP Source Guard 350
Configuring Ports for IP Source Guard 350
Configuring Static Bindings for IP Source Guard 352
Displaying Information for Dynamic IP Source Guard Bindings 354
DHCP Snooping 355
DHCP Snooping Configuration 358
DHCP Snooping VLAN Configuration 359
Configuring Ports for DHCP Snooping 360
Displaying DHCP Snooping Binding Information 361
15 BASIC ADMINISTRATION PROTOCOLS 363
Configuring Event Logging 363
System Log Configuration 363
Remote Log Configuration 366
Sending Simple Mail Transfer Protocol Alerts 367
Link Layer Discovery Protocol 368
Setting LLDP Timing Attributes 369
Configuring LLDP Interface Attributes 370
Displaying LLDP Local Device Information 373
Displaying LLDP Remote Port Information 375
Displaying Device Statistics 381
Simple Network Management Protocol 382
Configuring Global Settings for SNMP 385
Setting the Local Engine ID 386
Specifying a Remote Engine ID 387
Setting SNMPv3 Views 388
Configuring SNMPv3 Groups 391
Setting Community Access Strings 395
Configuring Local SNMPv3 Users 396
Configuring Remote SNMPv3 Users 398
Specifying Trap Managers 401
Remote Monitoring 405
Configuring RMON Alarms 406
Configuring RMON Events 409
Configuring RMON History Samples 411
Configuring RMON Statistical Samples 414

C ONTENTS
– 13 –
Switch Clustering 416
Configuring General Settings for Clusters 417
Cluster Member Configuration 418
Managing Cluster Members 420
16 IP CONFIGURATION 421
Using the Ping Function 421
Address Resolution Protocol 422
Setting the ARP Timeout 423
Displaying ARP Entries 424
Setting the Switch’s IP Address (IP Version 4) 425
Configuring the IPv4 Default Gateway 425
Configuring IPv4 Interface Settings 426
Setting the Switch’s IP Address (IP Version 6) 429
Configuring the IPv6 Default Gateway 429
Configuring IPv6 Interface Settings 430
Configuring an IPv6 Address 433
Showing IPv6 Addresses 436
Showing the IPv6 Neighbor Cache 437
Showing IPv6 Statistics 439
Showing the MTU for Responding Destinations 444
17 IP SERVICES 445
Configuring General DNS Service Parameters 445
Configuring a List of Domain Names 446
Configuring a List of Name Servers 448
Configuring Static DNS Host to Address Entries 449
Displaying the DNS Cache 451
18 MULTICAST FILTERING 453
Overview 453
Layer 2 IGMP (Snooping and Query) 454
Configuring IGMP Snooping and Query Parameters 456
Specifying Static Interfaces for a Multicast Router 460
Assigning Interfaces to Multicast Services 461
Setting IGMP Snooping Status per Interface 464
Displaying Multicast Groups Discovered by IGMP Snooping 469
Filtering and Throttling IGMP Groups 470
Enabling IGMP Filtering and Throttling 471

C ONTENTS
– 14 –
Configuring IGMP Filter Profiles 471
Configuring IGMP Filtering and Throttling for Interfaces 474
Multicast VLAN Registration 476
Configuring Global MVR Settings 477
Configuring MVR Group Address Ranges 478
Configuring MVR Interface Status 480
Assigning Static Multicast Groups to Interfaces 482
Displaying MVR Receiver Groups 483
SECTION III COMMAND LINE INTERFACE 485
19 USING THE COMMAND LINE INTERFACE 487
Accessing the CLI 487
Console Connection 487
Telnet Connection 488
Entering Commands 489
Keywords and Arguments 489
Minimum Abbreviation 489
Command Completion 489
Getting Help on Commands 490
Partial Keyword Lookup 491
Negating the Effect of Commands 491
Using Command History 492
Understanding Command Modes 492
Exec Commands 492
Configuration Commands 493
Command Line Processing 495
CLI Command Groups 496
20 GENERAL COMMANDS 499
prompt 499
reload (Global Configuration) 500
enable 501
quit 502
show history 502
configure 503
disable 504

C ONTENTS
– 15 –
reload (Privileged Exec) 504
show reload 505
end 505
exit 505
21 SYSTEM MANAGEMENT COMMANDS 507
Device Designation 507
hostname 508
Banner Information 508
banner configure 509
banner configure company 510
banner configure dc-power-info 511
banner configure department 511
banner configure equipment-info 512
banner configure equipment-location 513
banner configure ip-lan 513
banner configure lp-number 514
banner configure manager-info 515
banner configure mux 515
banner configure note 516
show banner 517
System Status 517
show access-list tcam-utilization 518
show memory 518
show process cpu 519
show running-config 519
show startup-config 520
show system 521
show tech-support 522
show users 522
show version 523
Frame Size 524
jumbo frame 524
File Management 525
boot system 526
copy 527
delete 530

C ONTENTS
– 16 –
dir 530
whichboot 531
upgrade opcode auto 532
upgrade opcode path 533
Line 535
line 535
databits 536
exec-timeout 537
login 537
parity 538
password 539
password-thresh 540
silent-time 541
speed 541
stopbits 542
timeout login response 542
disconnect 543
show line 544
Event Logging 544
logging facility 545
logging history 546
logging host 547
logging on 547
logging trap 548
clear log 548
show log 549
show logging 550
SMTP Alerts 551
logging sendmail 552
logging sendmail host 552
logging sendmail level 553
logging sendmail destination-email 553
logging sendmail source-email 554
show logging sendmail 554
Time 555
sntp client 555

C ONTENTS
– 17 –
sntp poll 556
sntp server 557
show sntp 557
clock timezone 558
calendar set 559
show calendar 559
Time Range 560
time-range 560
absolute 561
periodic 561
show time-range 562
Switch Clustering 563
cluster 564
cluster commander 564
cluster ip-pool 565
cluster member 566
rcommand 566
show cluster 567
show cluster members 567
show cluster candidates 568
22 SNMP COMMANDS 569
snmp-server 570
snmp-server community 571
snmp-server contact 571
snmp-server location 572
show snmp 572
snmp-server enable traps 573
snmp-server host 574
snmp-server engine-id 577
snmp-server group 578
snmp-server user 579
snmp-server view 580
show snmp engine-id 581
show snmp group 582
show snmp user 583
show snmp view 584

C ONTENTS
– 18 –
nlm 584
snmp-server notify-filter 585
show nlm oper-status 586
show snmp notify-filter 587
23 REMOTE MONITORING COMMANDS 589
rmon alarm 590
rmon event 591
rmon collection history 592
rmon collection rmon1 593
show rmon alarms 594
show rmon events 594
show rmon history 594
show rmon statistics 595
24 AUTHENTICATION COMMANDS 597
User Accounts 597
enable password 598
username 599
Authentication Sequence 600
authentication enable 600
authentication login 601
RADIUS Client 602
radius-server acct-port 602
radius-server auth-port 603
radius-server host 603
radius-server key 604
radius-server retransmit 604
radius-server timeout 605
show radius-server 605
TACACS+ Client 606
tacacs-server host 606
tacacs-server key 607
tacacs-server port 607
show tacacs-server 608
AAA 609
aaa accounting commands 609
aaa accounting dot1x 610

C ONTENTS
– 19 –
aaa accounting exec 611
aaa accounting update 612
aaa authorization exec 613
aaa group server 614
server 614
accounting dot1x 615
accounting exec 615
authorization exec 616
show accounting 616
Web Server 617
ip http port 618
ip http server 618
ip http secure-server 619
ip http secure-port 620
Telnet Server 621
ip telnet max-sessions 621
ip telnet port 622
ip telnet server 622
show ip telnet 623
Secure Shell 623
ip ssh authentication-retries 626
ip ssh server 626
ip ssh server-key size 627
ip ssh timeout 628
delete public-key 628
ip ssh crypto host-key generate 629
ip ssh crypto zeroize 630
ip ssh save host-key 630
show ip ssh 631
show public-key 631
show ssh 632
802.1X Port Authentication 633
dot1x default 634
dot1x eapol-pass-through 634
dot1x system-auth-control 635
dot1x intrusion-action 635

C ONTENTS
– 20 –
dot1x max-req 636
dot1x operation-mode 636
dot1x port-control 637
dot1x re-authentication 638
dot1x timeout quiet-period 638
dot1x timeout re-authperiod 639
dot1x timeout supp-timeout 639
dot1x timeout tx-period 640
dot1x re-authenticate 640
dot1x identity profile 641
dot1x max-start 642
dot1x pae supplicant 642
dot1x timeout auth-period 643
dot1x timeout held-period 643
dot1x timeout start-period 644
show dot1x 644
Management IP Filter 647
management 647
show management 648
25 GENERAL SECURITY MEASURES 651
Port Security 652
port security 652
Network Access (MAC Address Authentication) 654
network-access aging 655
network-access mac-filter 655
mac-authentication reauth-time 656
network-access dynamic-qos 657
network-access dynamic-vlan 658
network-access guest-vlan 659
network-access link-detection 659
network-access link-detection link-down 660
network-access link-detection link-up 660
network-access link-detection link-up-down 661
network-access max-mac-count 661
network-access mode mac-authentication 662
network-access port-mac-filter 663