Edge-Core ES4524M-PoE Programming manual

Powered by Accton
Management Guide
ES4524M-PoE
24-Port Layer 2/4
Gigabit Ethernet Switch
with PoE

Management Guide
ES4524M-PoE Gigabit Ethernet Switch with PoE
Layer 2/4 Switch
with 22 10/100/1000BASE-T (RJ-45) Ports,
and 2 Gigabit Combination Ports (RJ-45/SFP)

ES4524M-PoE
F1.0.0.5 E012008/ST-R01
149100037400A

i
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-5
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Managing System Files 2-8
Saving Configuration Settings 2-9
Configuring Power over Ethernet 2-10
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-11
Displaying System Information 3-11
Displaying Switch Hardware/Software Versions 3-13
Displaying Bridge Extension Capabilities 3-14
Setting the Switch’s IP Address 3-15
Manual Configuration 3-16
Using DHCP/BOOTP 3-17

ii
Contents
Enabling Jumbo Frames 3-19
Managing Firmware 3-20
Downloading System Software from a Server 3-21
Saving or Restoring Configuration Settings 3-23
Downloading Configuration Settings from a Server 3-24
Console Port Settings 3-25
Telnet Settings 3-27
Configuring Event Logging 3-29
System Log Configuration 3-29
Remote Log Configuration 3-30
Displaying Log Messages 3-32
Sending Simple Mail Transfer Protocol Alerts 3-32
Resetting the System 3-34
Setting the System Clock 3-35
Configuring SNTP 3-35
Setting the Time Zone 3-36
Simple Network Management Protocol 3-37
Enabling the SNMP Agent 3-38
Setting Community Access Strings 3-39
Specifying Trap Managers and Trap Types 3-40
Configuring SNMPv3 Management Access 3-43
Setting the Local Engine ID 3-43
Specifying a Remote Engine ID 3-44
Configuring SNMPv3 Users 3-45
Configuring Remote SNMPv3 Users 3-47
Configuring SNMPv3 Groups 3-49
Setting SNMPv3 Views 3-52
User Authentication 3-54
Configuring User Accounts 3-54
Configuring Local/Remote Logon Authentication 3-55
Configuring HTTPS 3-58
Configuring the Secure Shell 3-61
Generating the Host Key Pair 3-63
Configuring Public Keys for Clients 3-65
Configuring the SSH Server 3-67
Configuring 802.1X Port Authentication 3-69
Displaying 802.1X Global Settings 3-70
Configuring 802.1X Global Settings 3-71
Configuring Port Settings for 802.1X 3-71
Displaying 802.1X Statistics 3-74
Filtering IP Addresses for Management Access 3-76
Client Security 3-78
Configuring Port Security 3-78
Access Control Lists 3-81
Setting the ACL Name and Type 3-82

iii
Contents
Configuring a Standard IP ACL 3-82
Configuring an Extended IP ACL 3-83
Configuring a MAC ACL 3-86
Binding a Port to an Access Control List 3-87
DHCP Snooping 3-88
DHCP Snooping Configuration 3-90
DHCP Snooping VLAN Configuration 3-90
DHCP Snooping Information Option Configuration 3-91
DHCP Snooping Port Configuration 3-93
Displaying DHCP Snooping Binding Information 3-94
IP Source Guard 3-95
IP Source Guard Port Configuration 3-95
Static IP Source Guard Binding Configuration 3-96
Dynamic IP Source Guard Binding Information 3-98
Port Configuration 3-99
Displaying Connection Status 3-99
Configuring Interface Connections 3-102
Creating Trunk Groups 3-105
Statically Configuring a Trunk 3-106
Enabling LACP on Selected Ports 3-107
Configuring LACP Parameters 3-110
Displaying LACP Port Counters 3-113
Displaying LACP Settings and Status for the Local Side 3-114
Displaying LACP Settings and Status for the Remote Side 3-116
Setting Broadcast Storm Thresholds 3-118
Configuring Port Mirroring 3-120
Configuring Rate Limits 3-121
Rate Limit Configuration 3-121
Showing Port Statistics 3-122
Power over Ethernet Settings 3-127
Switch Power Status 3-127
Setting a Switch Power Budget 3-129
Displaying Port Power Status 3-129
Configuring Port PoE Power 3-130
Address Table Settings 3-132
Setting Static Addresses 3-132
Displaying the Address Table 3-133
Changing the Aging Time 3-135
Spanning Tree Algorithm Configuration 3-136
Displaying Global Settings 3-138
Configuring Global Settings 3-141
Displaying Interface Settings 3-145
Configuring Interface Settings 3-148
Configuring Multiple Spanning Trees 3-151
Displaying Interface Settings for MSTP 3-154

iv
Contents
Configuring Interface Settings for MSTP 3-155
VLAN Configuration 3-157
Overview 3-157
Assigning Ports to VLANs 3-157
Forwarding Tagged/Untagged Frames 3-159
Enabling or Disabling GVRP (Global Setting) 3-160
Displaying Basic VLAN Information 3-160
Displaying Current VLANs 3-161
Creating VLANs 3-162
Adding Static Members to VLANs (VLAN Index) 3-164
Adding Static Members to VLANs (Port Index) 3-165
Configuring VLAN Behavior for Interfaces 3-166
Configuring Private VLANs 3-168
Displaying Current Private VLANs 3-169
Configuring Private VLANs 3-170
Associating Private VLANs 3-171
Displaying Private VLAN Interface Information 3-172
Configuring Private VLAN Interfaces 3-173
Configuring Protocol VLANs 3-174
Configuring Basic Protocol VLAN Settings 3-174
Configuring the Protocol VLAN System 3-175
Link Layer Discovery Protocol 3-176
Setting LLDP Timing Attributes 3-176
Configuring LLDP Interface Attributes 3-178
Displaying LLDP Local Device Information 3-181
Displaying LLDP Remote Port Information 3-182
Displaying LLDP Remote Information Details 3-183
Displaying Device Statistics 3-184
Displaying Detailed Device Statistics 3-185
Class of Service Configuration 3-186
Layer 2 Queue Settings 3-186
Setting the Default Priority for Interfaces 3-186
Mapping CoS Values to Egress Queues 3-188
Selecting the Queue Mode 3-190
Setting the Service Weight for Traffic Classes 3-191
Layer 3/4 Priority Settings 3-192
Mapping Layer 3/4 Priorities to CoS Values 3-192
Selecting IP DSCP Priority 3-192
Mapping DSCP Priority 3-192
Quality of Service 3-194
Configuring Quality of Service Parameters 3-195
Configuring a Class Map 3-195
Creating QoS Policies 3-198
Attaching a Policy Map to Ingress Queues 3-201

v
Contents
Multicast Filtering 3-202
Layer 2 IGMP (Snooping and Query) 3-203
Configuring IGMP Snooping and Query Parameters 3-204
Enabling IGMP Immediate Leave 3-206
Displaying Interfaces Attached to a Multicast Router 3-207
Specifying Static Interfaces for a Multicast Router 3-208
Displaying Port Members of Multicast Services 3-209
Assigning Ports to Multicast Services 3-210
Multicast VLAN Registration 3-211
Configuring Global MVR Settings 3-212
Displaying MVR Interface Status 3-214
Displaying Port Members of Multicast Groups 3-215
Configuring MVR Interfaces 3-216
Assigning Static Multicast Groups to Interfaces 3-217
Switch Clustering 3-219
Cluster Configuration 3-219
Cluster Member Configuration 3-221
Cluster Member Information 3-222
Cluster Candidate Information 3-223
UPnP 3-224
UPnP Configuration 3-225
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-1
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-6
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-8
Command Groups 4-9
General Commands 4-10
enable 4-10
disable 4-11

vi
Contents
configure 4-12
show history 4-12
reload 4-13
prompt 4-13
end 4-14
exit 4-14
quit 4-14
System Management Commands 4-15
Device Designation Commands 4-15
hostname 4-16
System Status Commands 4-16
show startup-config 4-16
show running-config 4-18
show system 4-19
show users 4-20
show version 4-21
Frame Size Commands 4-22
jumbo frame 4-22
File Management Commands 4-23
copy 4-24
delete 4-26
dir 4-27
whichboot 4-28
boot system 4-28
Line Commands 4-29
line 4-30
login 4-30
password 4-31
timeout login response 4-32
exec-timeout 4-33
password-thresh 4-33
silent-time 4-34
databits 4-35
parity 4-35
speed 4-36
stopbits 4-37
disconnect 4-37
show line 4-38
Event Logging Commands 4-39
logging on 4-39
logging history 4-40
logging host 4-41
logging facility 4-41
logging trap 4-42
clear log 4-42

vii
Contents
show logging 4-43
show log 4-44
SMTP Alert Commands 4-45
logging sendmail host 4-45
logging sendmail level 4-46
logging sendmail source-email 4-46
logging sendmail destination-email 4-47
logging sendmail 4-47
show logging sendmail 4-48
Time Commands 4-48
sntp client 4-49
sntp server 4-50
sntp poll 4-50
show sntp 4-51
clock timezone 4-51
calendar set 4-52
show calendar 4-53
Switch Cluster Commands 4-53
cluster 4-54
cluster commander 4-54
cluster ip-pool 4-55
cluster member 4-56
rcommand 4-56
show cluster 4-57
show cluster members 4-57
show cluster candidates 4-57
UPnP Commands 4-58
upnp device 4-58
upnp device ttl 4-59
upnp device advertise duration 4-59
show upnp 4-60
SNMP Commands 4-60
snmp-server 4-61
show snmp 4-61
snmp-server community 4-62
snmp-server contact 4-63
snmp-server location 4-64
snmp-server host 4-64
snmp-server enable traps 4-66
snmp-server engine-id 4-67
show snmp engine-id 4-68
snmp-server view 4-69
show snmp view 4-70
snmp-server group 4-71
show snmp group 4-72

viii
Contents
snmp-server user 4-73
show snmp user 4-74
Authentication Commands 4-75
User Account Commands 4-75
username 4-76
enable password 4-77
Authentication Sequence 4-78
authentication login 4-78
authentication enable 4-79
RADIUS Client 4-80
radius-server host 4-80
radius-server port 4-81
radius-server key 4-81
radius-server retransmit 4-82
radius-server timeout 4-82
show radius-server 4-82
TACACS+ Client 4-83
tacacs-server host 4-83
tacacs-server port 4-84
tacacs-server key 4-84
show tacacs-server 4-85
Web Server Commands 4-85
ip http port 4-85
ip http server 4-86
ip http secure-server 4-86
ip http secure-port 4-87
Telnet Server Commands 4-88
ip telnet server 4-88
Secure Shell Commands 4-89
ip ssh server 4-91
ip ssh timeout 4-92
ip ssh authentication-retries 4-93
ip ssh server-key size 4-93
delete public-key 4-94
ip ssh crypto host-key generate 4-94
ip ssh crypto zeroize 4-95
ip ssh save host-key 4-95
show ip ssh 4-96
show ssh 4-96
show public-key 4-97
802.1X Port Authentication 4-98
dot1x system-auth-control 4-99
dot1x default 4-99
dot1x max-req 4-99
dot1x port-control 4-100

ix
Contents
dot1x operation-mode 4-100
dot1x re-authenticate 4-101
dot1x re-authentication 4-102
dot1x timeout quiet-period 4-102
dot1x timeout re-authperiod 4-103
dot1x timeout tx-period 4-103
show dot1x 4-104
Management IP Filter Commands 4-107
management 4-107
show management 4-108
Client Security Commands 4-109
Port Security Commands 4-109
port security 4-110
IP Source Guard Commands 4-111
ip source-guard 4-111
ip source-guard binding 4-113
show ip source-guard 4-114
show ip source-guard binding 4-114
DHCP Snooping Commands 4-115
ip dhcp snooping 4-115
ip dhcp snooping vlan 4-117
ip dhcp snooping trust 4-118
ip dhcp snooping verify mac-address 4-119
ip dhcp snooping information option 4-120
ip dhcp snooping information policy 4-121
show ip dhcp snooping 4-121
show ip dhcp snooping binding 4-122
Access Control List Commands 4-122
IP ACLs 4-123
access-list ip 4-123
permit, deny (Standard ACL) 4-124
permit, deny (Extended ACL) 4-125
show ip access-list 4-127
ip access-group 4-127
show ip access-group 4-128
MAC ACLs 4-128
access-list mac 4-128
permit, deny (MAC ACL) 4-129
show mac access-list 4-131
mac access-group 4-131
show mac access-group 4-132
ACL Information 4-132
show access-list 4-132
show access-group 4-133

x
Contents
Interface Commands 4-135
interface 4-135
description 4-136
speed-duplex 4-136
negotiation 4-137
capabilities 4-138
flowcontrol 4-139
media-type 4-140
shutdown 4-141
switchport packet-rate 4-141
clear counters 4-142
show interfaces status 4-143
show interfaces counters 4-144
show interfaces switchport 4-145
Link Aggregation Commands 4-147
channel-group 4-148
lacp 4-149
lacp system-priority 4-150
lacp admin-key (Ethernet Interface) 4-151
lacp admin-key (Port Channel) 4-152
lacp port-priority 4-153
show lacp 4-154
Mirror Port Commands 4-157
port monitor 4-157
show port monitor 4-158
Rate Limit Commands 4-159
rate-limit 4-159
Power over Ethernet Commands 4-160
power mainpower maximum allocation 4-160
power inline compatible 4-161
power inline 4-162
power inline maximum allocation 4-163
power inline priority 4-163
show power inline status 4-164
show power mainpower 4-165
Address Table Commands 4-166
mac-address-table static 4-166
clear mac-address-table dynamic 4-167
show mac-address-table 4-167
mac-address-table aging-time 4-168
show mac-address-table aging-time 4-169
Spanning Tree Commands 4-169
spanning-tree 4-170
spanning-tree mode 4-171
spanning-tree forward-time 4-172

xi
Contents
spanning-tree hello-time 4-173
spanning-tree max-age 4-173
spanning-tree priority 4-174
spanning-tree pathcost method 4-175
spanning-tree transmission-limit 4-175
spanning-tree mst-configuration 4-176
mst vlan 4-176
mst priority 4-177
name 4-178
revision 4-178
max-hops 4-179
spanning-tree spanning-disabled 4-179
spanning-tree cost 4-180
spanning-tree port-priority 4-181
spanning-tree edge-port 4-182
spanning-tree portfast 4-183
spanning-tree link-type 4-184
spanning-tree mst cost 4-185
spanning-tree mst port-priority 4-186
spanning-tree protocol-migration 4-186
show spanning-tree 4-187
show spanning-tree mst configuration 4-189
VLAN Commands 4-189
GVRP and Bridge Extension Commands 4-190
bridge-ext gvrp 4-190
show bridge-ext 4-191
switchport gvrp 4-191
show gvrp configuration 4-192
garp timer 4-192
show garp timer 4-193
Editing VLAN Groups 4-194
vlan database 4-194
vlan 4-195
Configuring VLAN Interfaces 4-196
interface vlan 4-196
switchport mode 4-197
switchport acceptable-frame-types 4-197
switchport ingress-filtering 4-198
switchport native vlan 4-199
switchport allowed vlan 4-200
switchport forbidden vlan 4-201
Displaying VLAN Information 4-202
show vlan 4-202
Configuring Private VLANs 4-203
private-vlan 4-204

xii
Contents
private vlan association 4-205
switchport mode private-vlan 4-205
switchport private-vlan host-association 4-206
switchport private-vlan mapping 4-207
show vlan private-vlan 4-207
Configuring Protocol-based VLANs 4-208
protocol-vlan protocol-group 4-209
protocol-vlan protocol-group vlan 4-209
show protocol-vlan protocol-group 4-210
show protocol-vlan protocol-group-vid 4-211
LLDP Commands 4-212
lldp 4-214
lldp holdtime-multiplier 4-214
lldp medFastStartCount 4-215
lldp notification-interval 4-215
lldp refresh-interval 4-216
lldp reinit-delay 4-217
lldp tx-delay 4-217
lldp admin-status 4-218
lldp notification 4-218
lldp mednotification 4-219
lldp basic-tlv management-ip-address 4-220
lldp basic-tlv port-description 4-221
lldp basic-tlv system-capabilities 4-221
lldp basic-tlv system-description 4-222
lldp basic-tlv system-name 4-222
lldp dot1-tlv proto-ident 4-223
lldp dot1-tlv proto-vid 4-223
lldp dot1-tlv pvid 4-224
lldp dot1-tlv vlan-name 4-224
lldp dot3-tlv link-agg 4-225
lldp dot3-tlv mac-phy 4-225
lldp dot3-tlv max-frame 4-226
lldp dot3-tlv poe 4-226
lldp medtlv extpoe 4-227
lldp medtlv inventory 4-227
lldp medtlv location 4-228
lldp medtlv med-cap 4-228
lldp medtlv network-policy 4-229
show lldp config 4-229
show lldp info local-device 4-231
show lldp info remote-device 4-232
show lldp info statistics 4-233

xiii
Contents
Class of Service Commands 4-234
Priority Commands (Layer 2) 4-234
queue mode 4-234
switchport priority default 4-235
queue bandwidth 4-236
queue cos-map 4-237
show queue mode 4-238
show queue bandwidth 4-238
show queue cos-map 4-239
Priority Commands (Layer 3 and 4) 4-240
map ip dscp (Global Configuration) 4-240
map ip dscp (Interface Configuration) 4-241
show map ip dscp 4-242
Quality of Service Commands 4-243
class-map 4-244
match 4-245
policy-map 4-246
class 4-246
set 4-247
police 4-248
service-policy 4-249
show class-map 4-250
show policy-map 4-250
show policy-map interface 4-251
Multicast Filtering Commands 4-252
IGMP Snooping Commands 4-252
ip igmp snooping 4-253
ip igmp snooping vlan static 4-253
ip igmp snooping version 4-254
ip igmp snooping immediate-leave 4-254
show ip igmp snooping 4-255
show mac-address-table multicast 4-256
IGMP Query Commands (Layer 2) 4-256
ip igmp snooping querier 4-257
ip igmp snooping query-count 4-257
ip igmp snooping query-interval 4-258
ip igmp snooping query-max-response-time 4-258
ip igmp snooping router-port-expire-time 4-259
Static Multicast Routing Commands 4-260
ip igmp snooping vlan mrouter 4-260
show ip igmp snooping mrouter 4-261
Multicast VLAN Registration Commands 4-261
mvr (Global Configuration) 4-262
mvr (Interface Configuration) 4-263
mvr immediate 4-264

xiv
Contents
show mvr 4-265
show mvr interface 4-266
show mvr members 4-267
IP Interface Commands 4-268
Basic IP Configuration 4-268
ip address 4-268
ip default-gateway 4-269
ip dhcp restart 4-270
show ip interface 4-271
show ip redirects 4-271
ping 4-272
Appendix A: Software Specifications A-1
Software Features A-1
Management Features A-2
Standards A-2
Management Information Bases A-3
Appendix B: Troubleshooting B-1
Problems Accessing the Management Interface B-1
Using System Logs B-2
Glossary
Index

xv
Tables
Table 1-1 Key Features 1-1
Table 1-2 System Defaults 1-5
Table 3-1 Configuration Options 3-3
Table 3-2 Main Menu 3-4
Table 3-3 Logging Levels 3-29
Table 3-1 SNMPv3 Security Models and Levels 3-38
Table 3-1 Supported Notification Messages 3-49
Table 3-2 HTTPS Support 3-59
Table 3-3 802.1X Statistics 3-74
Table 3-4 LACP Port Counters 3-113
Table 3-5 LACP Internal Configuration Information 3-114
Table 3-6 LACP Remote Side Settings 3-116
Table 3-7 Port Statistics 3-122
Table 3-1 Recommended STA Path Cost Range 3-149
Table 3-2 Recommended STA Path Costs 3-149
Table 3-3 Default STA Path Costs 3-150
Table 3-1 Mapping CoS Values to Egress Queues 3-188
Table 3-2 CoS Priority Levels 3-188
Table 3-3 Mapping DSCP Priority 3-193
Table 4-1 Command Modes 4-6
Table 4-2 Configuration Commands 4-7
Table 4-3 Keystroke Commands 4-8
Table 4-4 Command Group Index 4-9
Table 4-5 General Commands 4-10
Table 4-6 System Management Commands 4-15
Table 4-7 Device Designation Commands 4-15
Table 4-8 System Status Commands 4-16
Table 4-9 Frame Size Commands 4-22
Table 4-10 Flash/File Commands 4-23
Table 4-11 File Directory Information 4-27
Table 4-12 Line Command Syntax 4-29
Table 4-13 Event Logging Commands 4-39
Table 4-14 Logging Levels 4-40
Table 4-15 show logging flash/ram - display description 4-43
Table 4-16 show logging trap - display description 4-44
Table 4-17 SMTP Alert Commands 4-45
Table 4-18 Time Commands 4-48
Table 4-19 Switch Cluster Commands 4-53
Table 4-20 UPnP Commands 4-58
Table 4-21 SNMP Commands 4-60
Table 4-22 show snmp engine-id - display description 4-69

xvi
Tables
Table 4-23 show snmp view - display description 4-70
Table 4-24 show snmp group - display description 4-72
Table 4-25 show snmp user - display description 4-74
Table 4-26 Authentication Commands 4-75
Table 4-27 User Access Commands 4-75
Table 4-28 Default Login Settings 4-76
Table 4-29 Authentication Sequence 4-78
Table 4-30 RADIUS Client Commands 4-80
Table 4-31 TACACS+ Client Commands 4-83
Table 4-32 Web Server Command 4-85
Table 4-33 HTTPS System Support 4-87
Table 4-34 Telnet Server Commands 4-88
Table 4-35 Secure Shell Commands 4-89
Table 4-36 show ssh - display description 4-96
Table 4-37 802.1X Port Authentication Commands 4-98
Table 4-38 IP Filter Commands 4-107
Table 4-1 Client Security Commands 4-109
Table 4-1 Port Security Commands 4-109
Table 4-2 IP Source Guard Commands 4-111
Table 4-3 DHCP Snooping Commands 4-115
Table 4-4 Access Control List Commands 4-122
Table 4-5 IP ACL Commands 4-123
Table 4-2 MAC ACL Commands 4-128
Table 4-1 ACL Information 4-132
Table 4-2 Interface Commands 4-135
Table 4-3 show interfaces switchport - display description 4-146
Table 4-4 Link Aggregation Commands 4-147
Table 4-5 show lacp counters - display description 4-154
Table 4-6 show lacp internal - display description 4-155
Table 4-7 show lacp neighbors - display description 4-156
Table 4-9 Mirror Port Commands 4-157
Table 4-8 show lacp sysid - display description 4-157
Table 4-10 Rate Limit Commands 4-159
Table 4-11 PoE Commands 4-160
Table 4-13 show power mainpower parameters 4-165
Table 4-12 show power inline status parameters 4-165
Table 4-14 Address Table Commands 4-166
Table 4-15 Spanning Tree Commands 4-169
Table 4-3 Recommended STA Path Cost Range 4-180
Table 4-4 Recommended STA Path Cost 4-180
Table 4-5 Default STA Path Costs 4-181
Table 4-1 VLAN Commands 4-189
Table 4-6 GVRP and Bridge Extension Commands 4-190
Table 4-1 Editing VLAN Groups 4-194
Table 4-2 Configuring VLAN Interfaces 4-196