Edge-Core ES3510MA Programming manual

Management Guide
www.edge-core.com
8-Port Layer 2
Fast Ethernet Switch

M ANAGEMENT G UIDE
ES3510MA FAST ETHERNET SWITCH
Layer 2 Switch
with 8 10/100BASE-TX (RJ-45) Ports,
and 2 Gigabit Combination Ports (RJ-45/SFP)
ES3510MA
E032010/ST-R01
149100000046A

– 3 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
MARCH 2010 REVISION
This is the first version of this guide. This guide is valid for software release
v1.0.0.0.

A BOUT T HIS G UIDE
– 4 –

– 5 –
CONTENTS
ABOUT THIS GUIDE 3
CONTENTS 5
FIGURES 31
TABLES 41
SECTION I GETTING STARTED 47
1INTRODUCTION 49
Key Features 49
Description of Software Features 50
Configuration Backup and Restore 50
Authentication 50
Access Control Lists 51
Port Configuration 51
Port Mirroring 51
Port Trunking 51
Rate Limiting 51
Storm Control 51
Static Addresses 51
IEEE 802.1D Bridge 52
Store-and-Forward Switching 52
Spanning Tree Algorithm 52
Virtual LANs 53
IEEE 802.1Q Tunneling (QinQ) 53
Traffic Prioritization 53
Quality of Service 54
Multicast Filtering 54
System Defaults 54

C ONTENTS
– 6 –
2INITIAL SWITCH CONFIGURATION 57
Connecting to the Switch 57
Configuration Options 57
Required Connections 58
Remote Connections 59
Basic Configuration 60
Console Connection 60
Setting Passwords 60
Setting an IP Address 61
Enabling SNMP Management Access 66
Managing System Files 68
Saving or Restoring Configuration Settings 69
SECTION II WEB CONFIGURATION 71
3USING THE WEB INTERFACE 73
Connecting to the Web Interface 73
Navigating the Web Browser Interface 74
Home Page 74
Configuration Options 75
Panel Display 75
Main Menu 76
4BASIC MANAGEMENT TASKS 89
Displaying System Information 89
Displaying Hardware/Software Versions 90
Configuring Support for Jumbo Frames 92
Displaying Bridge Extension Capabilities 93
Managing System Files 94
Copying Files via FTP/TFTP or HTTP 94
Saving the Running Configuration to a Local File 96
Setting The Start-Up File 97
Showing System Files 98
Automatic Operation Code Upgrade 99
Setting the System Clock 103
Setting the Time Manually 103
Configuring SNTP 104

C ONTENTS
– 7 –
Specifying SNTP Time Servers 105
Setting the Time Zone 106
Console Port Settings 107
Telnet Settings 109
Displaying CPU Utilization 110
Displaying Memory Utilization 111
Resetting the System 112
5INTERFACE CONFIGURATION 117
Port Configuration 117
Configuring by Port List 117
Configuring by Port Range 120
Displaying Connection Status 120
Configuring Local Port Mirroring 122
Configuring Remote Port Mirroring 124
Showing Port or Trunk Statistics 128
Performing Cable Diagnostics 132
Trunk Configuration 133
Configuring a Static Trunk 134
Configuring a Dynamic Trunk 137
Displaying LACP Port Counters 143
Displaying LACP Settings and Status for the Local Side 144
Displaying LACP Settings and Status for the Remote Side 146
Saving Power 148
Traffic Segmentation 150
Enabling Traffic Segmentation 150
Configuring Uplink and Downlink Ports 151
VLAN Trunking 152
6 VLAN CONFIGURATION 155
IEEE 802.1Q VLANs 155
Configuring VLAN Groups 158
Adding Static Members to VLANs 160
Configuring Dynamic VLAN Registration 165
IEEE 802.1Q Tunneling 168
Enabling QinQ Tunneling on the Switch 172
Adding an Interface to a QinQ Tunnel 173

C ONTENTS
– 8 –
Protocol VLANs 174
Configuring Protocol VLAN Groups 175
Mapping Protocol Groups to Interfaces 177
Configuring IP Subnet VLANs 179
Configuring MAC-based VLANs 181
Configuring VLAN Mirroring 183
7ADDRESS TABLE SETTINGS 185
Configuring MAC Address Learning 185
Setting Static Addresses 187
Changing the Aging Time 188
Displaying the Dynamic Address Table 189
Clearing the Dynamic Address Table 190
Configuring MAC Address Mirroring 191
8SPANNING TREE ALGORITHM 193
Configuring Loopback Detection 196
Configuring Global Settings for STA 197
Displaying Global Settings for STA 202
Configuring Interface Settings for STA 203
Displaying Interface Settings for STA 207
Configuring Multiple Spanning Trees 209
Configuring Interface Settings for MSTP 213
9RATE LIMIT CONFIGURATION 217
10 STORM CONTROL CONFIGURATION 219
11 CLASS OF SERVICE 221
Layer 2 Queue Settings 221
Setting the Default Priority for Interfaces 221
Selecting the Queue Mode 222
Mapping CoS Values to Egress Queues 225
Layer 3/4 Priority Settings 228
Setting Priority Processing to DSCP or CoS 228
Mapping Ingress DSCP Values to Internal DSCP Values 229
Mapping CoS Priorities to Internal DSCP Values 232
12 QUALITY OF SERVICE 235
Overview 235
Configuring a Class Map 236
Creating QoS Policies 239

C ONTENTS
– 9 –
Attaching a Policy Map to a Port 249
13 VOIP TRAFFIC CONFIGURATION 251
Overview 251
Configuring VoIP Traffic 251
Configuring Telephony OUI 253
Configuring VoIP Traffic Ports 254
14 SECURITY MEASURES 257
AAA Authorization and Accounting 258
Configuring Local/Remote Logon Authentication 259
Configuring Remote Logon Authentication Servers 260
Configuring AAA Accounting 265
Configuring AAA Authorization 270
Configuring User Accounts 273
Web Authentication 274
Configuring Global Settings for Web Authentication 275
Configuring Interface Settings for Web Authentication 276
Network Access (MAC Address Authentication) 277
Configuring Global Settings for Network Access 279
Configuring Network Access for Ports 280
Configuring Port Link Detection 282
Configuring a MAC Address Filter 283
Displaying Secure MAC Address Information 285
Configuring HTTPS 286
Configuring Global Settings for HTTPS 286
Replacing the Default Secure-site Certificate 288
Configuring the Secure Shell 289
Configuring the SSH Server 292
Generating the Host Key Pair 293
Importing User Public Keys 295
Access Control Lists 297
Setting A Time Range 298
Showing TCAM Utilizaiton 301
Setting the ACL Name and Type 302
Configuring a Standard IPv4 ACL 304
Configuring an Extended IPv4 ACL 305
Configuring a MAC ACL 308

C ONTENTS
– 10 –
Configuring an ARP ACL 310
Binding a Port to an Access Control List 312
ARP Inspection 313
Configuring Global Settings for ARP Inspection 314
Configuring VLAN Settings for ARP Inspection 316
Configuring Interface Settings for ARP Inspection 318
Displaying ARP Inspection Statistics 319
Displaying the ARP Inspection Log 320
Filtering IP Addresses for Management Access 321
Configuring Port Security 323
Configuring 802.1X Port Authentication 325
Configuring 802.1X Global Settings 326
Configuring Port Authenticator Settings for 802.1X 328
Configuring Port Supplicant Settings for 802.1X 332
Displaying 802.1X Statistics 334
IP Source Guard 337
Configuring Ports for IP Source Guard 337
Configuring Static Bindings for IP Source Guard 339
Displaying Information for Dynamic IP Source Guard Bindings 341
DHCP Snooping 342
DHCP Snooping Configuration 345
DHCP Snooping VLAN Configuration 346
Configuring Ports for DHCP Snooping 347
Displaying DHCP Snooping Binding Information 348
15 BASIC ADMINISTRATION PROTOCOLS 351
Configuring Event Logging 351
System Log Configuration 351
Remote Log Configuration 353
Sending Simple Mail Transfer Protocol Alerts 355
Link Layer Discovery Protocol 356
Setting LLDP Timing Attributes 356
Configuring LLDP Interface Attributes 358
Displaying LLDP Local Device Information 361
Displaying LLDP Remote Port Information 363
Displaying Device Statistics 368