Edge-Core ES3510MA Programming manual

Management Guide
www.edge-core.com
8-Port Layer 2
Fast Ethernet Switch

M ANAGEMENT G UIDE
ES3510MA FAST ETHERNET SWITCH
Layer 2 Switch
with 8 10/100BASE-TX (RJ-45) Ports,
and 2 Gigabit Combination Ports (RJ-45/SFP)
ES3510MA
E032010/ST-R01
149100000046A

– 3 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
MARCH 2010 REVISION
This is the first version of this guide. This guide is valid for software release
v1.0.0.0.

A BOUT T HIS G UIDE
– 4 –

– 5 –
CONTENTS
ABOUT THIS GUIDE 3
CONTENTS 5
FIGURES 31
TABLES 41
SECTION I GETTING STARTED 47
1INTRODUCTION 49
Key Features 49
Description of Software Features 50
Configuration Backup and Restore 50
Authentication 50
Access Control Lists 51
Port Configuration 51
Port Mirroring 51
Port Trunking 51
Rate Limiting 51
Storm Control 51
Static Addresses 51
IEEE 802.1D Bridge 52
Store-and-Forward Switching 52
Spanning Tree Algorithm 52
Virtual LANs 53
IEEE 802.1Q Tunneling (QinQ) 53
Traffic Prioritization 53
Quality of Service 54
Multicast Filtering 54
System Defaults 54

C ONTENTS
– 6 –
2INITIAL SWITCH CONFIGURATION 57
Connecting to the Switch 57
Configuration Options 57
Required Connections 58
Remote Connections 59
Basic Configuration 60
Console Connection 60
Setting Passwords 60
Setting an IP Address 61
Enabling SNMP Management Access 66
Managing System Files 68
Saving or Restoring Configuration Settings 69
SECTION II WEB CONFIGURATION 71
3USING THE WEB INTERFACE 73
Connecting to the Web Interface 73
Navigating the Web Browser Interface 74
Home Page 74
Configuration Options 75
Panel Display 75
Main Menu 76
4BASIC MANAGEMENT TASKS 89
Displaying System Information 89
Displaying Hardware/Software Versions 90
Configuring Support for Jumbo Frames 92
Displaying Bridge Extension Capabilities 93
Managing System Files 94
Copying Files via FTP/TFTP or HTTP 94
Saving the Running Configuration to a Local File 96
Setting The Start-Up File 97
Showing System Files 98
Automatic Operation Code Upgrade 99
Setting the System Clock 103
Setting the Time Manually 103
Configuring SNTP 104

C ONTENTS
– 7 –
Specifying SNTP Time Servers 105
Setting the Time Zone 106
Console Port Settings 107
Telnet Settings 109
Displaying CPU Utilization 110
Displaying Memory Utilization 111
Resetting the System 112
5INTERFACE CONFIGURATION 117
Port Configuration 117
Configuring by Port List 117
Configuring by Port Range 120
Displaying Connection Status 120
Configuring Local Port Mirroring 122
Configuring Remote Port Mirroring 124
Showing Port or Trunk Statistics 128
Performing Cable Diagnostics 132
Trunk Configuration 133
Configuring a Static Trunk 134
Configuring a Dynamic Trunk 137
Displaying LACP Port Counters 143
Displaying LACP Settings and Status for the Local Side 144
Displaying LACP Settings and Status for the Remote Side 146
Saving Power 148
Traffic Segmentation 150
Enabling Traffic Segmentation 150
Configuring Uplink and Downlink Ports 151
VLAN Trunking 152
6 VLAN CONFIGURATION 155
IEEE 802.1Q VLANs 155
Configuring VLAN Groups 158
Adding Static Members to VLANs 160
Configuring Dynamic VLAN Registration 165
IEEE 802.1Q Tunneling 168
Enabling QinQ Tunneling on the Switch 172
Adding an Interface to a QinQ Tunnel 173

C ONTENTS
– 8 –
Protocol VLANs 174
Configuring Protocol VLAN Groups 175
Mapping Protocol Groups to Interfaces 177
Configuring IP Subnet VLANs 179
Configuring MAC-based VLANs 181
Configuring VLAN Mirroring 183
7ADDRESS TABLE SETTINGS 185
Configuring MAC Address Learning 185
Setting Static Addresses 187
Changing the Aging Time 188
Displaying the Dynamic Address Table 189
Clearing the Dynamic Address Table 190
Configuring MAC Address Mirroring 191
8SPANNING TREE ALGORITHM 193
Configuring Loopback Detection 196
Configuring Global Settings for STA 197
Displaying Global Settings for STA 202
Configuring Interface Settings for STA 203
Displaying Interface Settings for STA 207
Configuring Multiple Spanning Trees 209
Configuring Interface Settings for MSTP 213
9RATE LIMIT CONFIGURATION 217
10 STORM CONTROL CONFIGURATION 219
11 CLASS OF SERVICE 221
Layer 2 Queue Settings 221
Setting the Default Priority for Interfaces 221
Selecting the Queue Mode 222
Mapping CoS Values to Egress Queues 225
Layer 3/4 Priority Settings 228
Setting Priority Processing to DSCP or CoS 228
Mapping Ingress DSCP Values to Internal DSCP Values 229
Mapping CoS Priorities to Internal DSCP Values 232
12 QUALITY OF SERVICE 235
Overview 235
Configuring a Class Map 236
Creating QoS Policies 239

C ONTENTS
– 9 –
Attaching a Policy Map to a Port 249
13 VOIP TRAFFIC CONFIGURATION 251
Overview 251
Configuring VoIP Traffic 251
Configuring Telephony OUI 253
Configuring VoIP Traffic Ports 254
14 SECURITY MEASURES 257
AAA Authorization and Accounting 258
Configuring Local/Remote Logon Authentication 259
Configuring Remote Logon Authentication Servers 260
Configuring AAA Accounting 265
Configuring AAA Authorization 270
Configuring User Accounts 273
Web Authentication 274
Configuring Global Settings for Web Authentication 275
Configuring Interface Settings for Web Authentication 276
Network Access (MAC Address Authentication) 277
Configuring Global Settings for Network Access 279
Configuring Network Access for Ports 280
Configuring Port Link Detection 282
Configuring a MAC Address Filter 283
Displaying Secure MAC Address Information 285
Configuring HTTPS 286
Configuring Global Settings for HTTPS 286
Replacing the Default Secure-site Certificate 288
Configuring the Secure Shell 289
Configuring the SSH Server 292
Generating the Host Key Pair 293
Importing User Public Keys 295
Access Control Lists 297
Setting A Time Range 298
Showing TCAM Utilizaiton 301
Setting the ACL Name and Type 302
Configuring a Standard IPv4 ACL 304
Configuring an Extended IPv4 ACL 305
Configuring a MAC ACL 308

C ONTENTS
– 10 –
Configuring an ARP ACL 310
Binding a Port to an Access Control List 312
ARP Inspection 313
Configuring Global Settings for ARP Inspection 314
Configuring VLAN Settings for ARP Inspection 316
Configuring Interface Settings for ARP Inspection 318
Displaying ARP Inspection Statistics 319
Displaying the ARP Inspection Log 320
Filtering IP Addresses for Management Access 321
Configuring Port Security 323
Configuring 802.1X Port Authentication 325
Configuring 802.1X Global Settings 326
Configuring Port Authenticator Settings for 802.1X 328
Configuring Port Supplicant Settings for 802.1X 332
Displaying 802.1X Statistics 334
IP Source Guard 337
Configuring Ports for IP Source Guard 337
Configuring Static Bindings for IP Source Guard 339
Displaying Information for Dynamic IP Source Guard Bindings 341
DHCP Snooping 342
DHCP Snooping Configuration 345
DHCP Snooping VLAN Configuration 346
Configuring Ports for DHCP Snooping 347
Displaying DHCP Snooping Binding Information 348
15 BASIC ADMINISTRATION PROTOCOLS 351
Configuring Event Logging 351
System Log Configuration 351
Remote Log Configuration 353
Sending Simple Mail Transfer Protocol Alerts 355
Link Layer Discovery Protocol 356
Setting LLDP Timing Attributes 356
Configuring LLDP Interface Attributes 358
Displaying LLDP Local Device Information 361
Displaying LLDP Remote Port Information 363
Displaying Device Statistics 368

C ONTENTS
– 11 –
Simple Network Management Protocol 370
Configuring Global Settings for SNMP 373
Setting the Local Engine ID 374
Specifying a Remote Engine ID 375
Setting SNMPv3 Views 376
Configuring SNMPv3 Groups 379
Setting Community Access Strings 383
Configuring Local SNMPv3 Users 385
Configuring Remote SNMPv3 Users 387
Specifying Trap Managers 390
Remote Monitoring 394
Configuring RMON Alarms 395
Configuring RMON Events 398
Configuring RMON History Samples 400
Configuring RMON Statistical Samples 403
Switch Clustering 406
Configuring General Settings for Clusters 406
Cluster Member Configuration 408
Managing Cluster Members 409
16 IP CONFIGURATION 411
Using the Ping Function 411
Setting the Switch’s IP Address (IP Version 4) 412
Setting the Switch’s IP Address (IP Version 6) 415
Configuring the IPv6 Default Gateway 416
Configuring IPv6 Interface Settings 417
Configuring an IPv6 Address 420
Showing IPv6 Addresses 422
Showing the IPv6 Neighbor Cache 424
Showing IPv6 Statistics 426
Showing the MTU for Responding Destinations 431
17 IP SERVICES 433
Configuring General DNS Service Parameters 433
Configuring a List of Domain Names 434
Configuring a List of Name Servers 436
Configuring Static DNS Host to Address Entries 437
Displaying the DNS Cache 439

C ONTENTS
– 12 –
18 MULTICAST FILTERING 441
Overview 441
Layer 2 IGMP (Snooping and Query) 442
Configuring IGMP Snooping and Query Parameters 444
Specifying Static Interfaces for a Multicast Router 447
Assigning Interfaces to Multicast Services 449
Setting IGMP Snooping Status per Interface 451
Displaying Multicast Groups Discovered by IGMP Snooping 457
Filtering and Throttling IGMP Groups 458
Enabling IGMP Filtering and Throttling 459
Configuring IGMP Filter Profiles 459
Configuring IGMP Filtering and Throttling for Interfaces 462
Multicast VLAN Registration 463
Configuring Global MVR Settings 465
Configuring MVR Interface Status 466
Assigning Static Multicast Groups to Interfaces 468
Displaying MVR Receiver Groups 470
SECTION III COMMAND LINE INTERFACE 471
19 USING THE COMMAND LINE INTERFACE 473
Accessing the CLI 473
Console Connection 473
Telnet Connection 474
Entering Commands 475
Keywords and Arguments 475
Minimum Abbreviation 475
Getting Help on Commands 476
Partial Keyword Lookup 477
Negating the Effect of Commands 477
Using Command History 477
Understanding Command Modes 478
Exec Commands 478
Configuration Commands 479
Command Line Processing 481
CLI Command Groups 482

C ONTENTS
– 13 –
20 GENERAL COMMANDS 485
prompt 485
reload (Global Configuration) 486
enable 487
quit 488
show history 488
configure 489
disable 490
reload (Privileged Exec) 490
show reload 491
end 491
exit 491
21 SYSTEM MANAGEMENT COMMANDS 493
Device Designation 493
hostname 494
Banner Information 494
banner configure 495
banner configure company 496
banner configure dc-power-info 497
banner configure department 497
banner configure equipment-info 498
banner configure equipment-location 499
banner configure ip-lan 499
banner configure lp-number 500
banner configure manager-info 501
banner configure mux 501
banner configure note 502
show banner 503
System Status 503
show access-list tcam-utilization 504
show memory 504
show process cpu 504
show running-config 505
show startup-config 506
show system 507
show users 507

C ONTENTS
– 14 –
show version 508
Frame Size 509
jumbo frame 509
File Management 510
boot system 511
copy 512
delete 515
dir 515
whichboot 516
upgrade opcode auto 517
upgrade opcode path 518
Line 520
line 520
databits 521
exec-timeout 522
login 522
parity 523
password 524
password-thresh 525
silent-time 526
speed 526
stopbits 527
timeout login response 527
disconnect 528
show line 529
Event Logging 529
logging facility 530
logging history 531
logging host 532
logging on 532
logging trap 533
clear log 533
show log 534
show logging 535
SMTP Alerts 536
logging sendmail 537

C ONTENTS
– 15 –
logging sendmail host 537
logging sendmail level 538
logging sendmail destination-email 538
logging sendmail source-email 539
show logging sendmail 539
Time 540
sntp client 540
sntp poll 541
sntp server 542
show sntp 542
clock timezone 543
calendar set 544
show calendar 544
Time Range 545
time-range 545
absolute 546
periodic 546
show time-range 547
Switch Clustering 548
cluster 549
cluster commander 549
cluster ip-pool 550
cluster member 551
rcommand 551
show cluster 552
show cluster members 552
show cluster candidates 553
22 SNMP COMMANDS 555
snmp-server 556
snmp-server community 557
snmp-server contact 557
snmp-server location 558
show snmp 558
snmp-server enable traps 559
snmp-server host 560
snmp-server engine-id 563

C ONTENTS
– 16 –
snmp-server group 564
snmp-server user 565
snmp-server view 566
show snmp engine-id 567
show snmp group 568
show snmp user 569
show snmp view 570
nlm 570
snmp-server notify-filter 571
show nlm oper-status 572
show snmp notify-filter 573
23 REMOTE MONITORING COMMANDS 575
rmon alarm 576
rmon event 577
rmon collection history 578
rmon collection stats 579
show rmon alarm 580
show rmon event 580
show rmon history 580
show rmon statistics 581
24 AUTHENTICATION COMMANDS 583
User Accounts 583
enable password 584
username 585
Authentication Sequence 586
authentication enable 586
authentication login 587
RADIUS Client 588
radius-server acct-port 588
radius-server auth-port 589
radius-server host 589
radius-server key 590
radius-server retransmit 590
radius-server timeout 591
show radius-server 591

C ONTENTS
– 17 –
TACACS+ Client 592
tacacs-server 592
tacacs-server host 593
tacacs-server key 593
tacacs-server port 594
show tacacs-server 594
AAA 595
aaa accounting commands 595
aaa accounting dot1x 596
aaa accounting exec 597
aaa accounting update 598
aaa authorization exec 599
aaa group server 600
server 600
accounting dot1x 601
accounting exec 601
authorization exec 602
show accounting 602
Web Server 603
ip http port 604
ip http server 604
ip http secure-server 605
ip http secure-port 606
Telnet Server 607
ip telnet max-sessions 607
ip telnet port 608
ip telnet server 608
show ip telnet 609
Secure Shell 609
ip ssh authentication-retries 612
ip ssh server 612
ip ssh server-key size 613
ip ssh timeout 614
delete public-key 614
ip ssh crypto host-key generate 615
ip ssh crypto zeroize 616

C ONTENTS
– 18 –
ip ssh save host-key 616
show ip ssh 617
show public-key 617
show ssh 618
802.1X Port Authentication 619
dot1x default 620
dot1x eapol-pass-through 620
dot1x system-auth-control 621
dot1x intrusion-action 621
dot1x max-req 622
dot1x operation-mode 622
dot1x port-control 623
dot1x re-authentication 624
dot1x timeout quiet-period 624
dot1x timeout re-authperiod 625
dot1x timeout supp-timeout 625
dot1x timeout tx-period 626
dot1x re-authenticate 626
dot1x identity profile 627
dot1x max-start 628
dot1x pae supplicant 628
dot1x timeout auth-period 629
dot1x timeout held-period 629
dot1x timeout start-period 630
show dot1x 630
Management IP Filter 633
management 633
show management 634
25 GENERAL SECURITY MEASURES 637
Port Security 638
mac-learning 638
port security 639
Network Access (MAC Address Authentication) 641
network-access aging 642
network-access mac-filter 642
mac-authentication reauth-time 643

C ONTENTS
– 19 –
network-access dynamic-qos 644
network-access dynamic-vlan 645
network-access guest-vlan 645
network-access link-detection 646
network-access link-detection link-down 647
network-access link-detection link-up 647
network-access link-detection link-up-down 648
network-access max-mac-count 648
network-access mode mac-authentication 649
network-access port-mac-filter 650
mac-authentication intrusion-action 651
mac-authentication max-mac-count 651
show network-access 652
show network-access mac-address-table 653
show network-access mac-filter 654
Web Authentication 654
web-auth login-attempts 655
web-auth quiet-period 656
web-auth session-timeout 656
web-auth system-auth-control 657
web-auth 657
web-auth re-authenticate (Port) 658
web-auth re-authenticate (IP) 658
show web-auth 659
show web-auth interface 659
show web-auth summary 660
DHCP Snooping 660
ip dhcp snooping 661
ip dhcp snooping database flash 663
ip dhcp snooping information option 663
ip dhcp snooping information policy 664
ip dhcp snooping verify mac-address 665
ip dhcp snooping vlan 665
ip dhcp snooping trust 666
clear ip dhcp snooping database flash 667
show ip dhcp snooping 668

C ONTENTS
– 20 –
show ip dhcp snooping binding 668
IP Source Guard 669
ip source-guard binding 669
ip source-guard 670
show ip source-guard 672
show ip source-guard binding 672
ARP Inspection 673
ip arp inspection 674
ip arp inspection filter 675
ip arp inspection log-buffer logs 676
ip arp inspection validate 677
ip arp inspection vlan 677
ip arp inspection limit 678
ip arp inspection trust 679
show ip arp inspection configuration 680
show ip arp inspection interface 680
show ip arp inspection log 681
show ip arp inspection statistics 681
show ip arp inspection vlan 681
26 ACCESS CONTROL LISTS 683
IPv4 ACLs 683
access-list ip 684
permit, deny (Standard IP ACL) 685
permit, deny (Extended IPv4 ACL) 686
ip access-group 688
show ip access-group 689
show ip access-list 689
MAC ACLs 690
access-list mac 690
permit, deny
(MAC ACL) 691
mac access-group 693
show mac access-group 694
show mac access-list 694
ARP ACLs 695
access-list arp 695
permit, deny (ARP ACL) 696