Edge-Core ES4524M-PoE Programming manual

Powered by Accton
Management Guide
ES4524M-PoE
24-Port Layer 2/4
Gigabit Ethernet Switch
with PoE

Management Guide
ES4524M-PoE Gigabit Ethernet Switch with PoE
Layer 2/4 Switch
with 22 10/100/1000BASE-T (RJ-45) Ports,
and 2 Gigabit Combination Ports (RJ-45/SFP)

ES4524M-PoE
F1.0.0.5 E012008/ST-R01
149100037400A

i
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-5
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Managing System Files 2-8
Saving Configuration Settings 2-9
Configuring Power over Ethernet 2-10
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-11
Displaying System Information 3-11
Displaying Switch Hardware/Software Versions 3-13
Displaying Bridge Extension Capabilities 3-14
Setting the Switch’s IP Address 3-15
Manual Configuration 3-16
Using DHCP/BOOTP 3-17

ii
Contents
Enabling Jumbo Frames 3-19
Managing Firmware 3-20
Downloading System Software from a Server 3-21
Saving or Restoring Configuration Settings 3-23
Downloading Configuration Settings from a Server 3-24
Console Port Settings 3-25
Telnet Settings 3-27
Configuring Event Logging 3-29
System Log Configuration 3-29
Remote Log Configuration 3-30
Displaying Log Messages 3-32
Sending Simple Mail Transfer Protocol Alerts 3-32
Resetting the System 3-34
Setting the System Clock 3-35
Configuring SNTP 3-35
Setting the Time Zone 3-36
Simple Network Management Protocol 3-37
Enabling the SNMP Agent 3-38
Setting Community Access Strings 3-39
Specifying Trap Managers and Trap Types 3-40
Configuring SNMPv3 Management Access 3-43
Setting the Local Engine ID 3-43
Specifying a Remote Engine ID 3-44
Configuring SNMPv3 Users 3-45
Configuring Remote SNMPv3 Users 3-47
Configuring SNMPv3 Groups 3-49
Setting SNMPv3 Views 3-52
User Authentication 3-54
Configuring User Accounts 3-54
Configuring Local/Remote Logon Authentication 3-55
Configuring HTTPS 3-58
Configuring the Secure Shell 3-61
Generating the Host Key Pair 3-63
Configuring Public Keys for Clients 3-65
Configuring the SSH Server 3-67
Configuring 802.1X Port Authentication 3-69
Displaying 802.1X Global Settings 3-70
Configuring 802.1X Global Settings 3-71
Configuring Port Settings for 802.1X 3-71
Displaying 802.1X Statistics 3-74
Filtering IP Addresses for Management Access 3-76
Client Security 3-78
Configuring Port Security 3-78
Access Control Lists 3-81
Setting the ACL Name and Type 3-82

iii
Contents
Configuring a Standard IP ACL 3-82
Configuring an Extended IP ACL 3-83
Configuring a MAC ACL 3-86
Binding a Port to an Access Control List 3-87
DHCP Snooping 3-88
DHCP Snooping Configuration 3-90
DHCP Snooping VLAN Configuration 3-90
DHCP Snooping Information Option Configuration 3-91
DHCP Snooping Port Configuration 3-93
Displaying DHCP Snooping Binding Information 3-94
IP Source Guard 3-95
IP Source Guard Port Configuration 3-95
Static IP Source Guard Binding Configuration 3-96
Dynamic IP Source Guard Binding Information 3-98
Port Configuration 3-99
Displaying Connection Status 3-99
Configuring Interface Connections 3-102
Creating Trunk Groups 3-105
Statically Configuring a Trunk 3-106
Enabling LACP on Selected Ports 3-107
Configuring LACP Parameters 3-110
Displaying LACP Port Counters 3-113
Displaying LACP Settings and Status for the Local Side 3-114
Displaying LACP Settings and Status for the Remote Side 3-116
Setting Broadcast Storm Thresholds 3-118
Configuring Port Mirroring 3-120
Configuring Rate Limits 3-121
Rate Limit Configuration 3-121
Showing Port Statistics 3-122
Power over Ethernet Settings 3-127
Switch Power Status 3-127
Setting a Switch Power Budget 3-129
Displaying Port Power Status 3-129
Configuring Port PoE Power 3-130
Address Table Settings 3-132
Setting Static Addresses 3-132
Displaying the Address Table 3-133
Changing the Aging Time 3-135
Spanning Tree Algorithm Configuration 3-136
Displaying Global Settings 3-138
Configuring Global Settings 3-141
Displaying Interface Settings 3-145
Configuring Interface Settings 3-148
Configuring Multiple Spanning Trees 3-151
Displaying Interface Settings for MSTP 3-154

iv
Contents
Configuring Interface Settings for MSTP 3-155
VLAN Configuration 3-157
Overview 3-157
Assigning Ports to VLANs 3-157
Forwarding Tagged/Untagged Frames 3-159
Enabling or Disabling GVRP (Global Setting) 3-160
Displaying Basic VLAN Information 3-160
Displaying Current VLANs 3-161
Creating VLANs 3-162
Adding Static Members to VLANs (VLAN Index) 3-164
Adding Static Members to VLANs (Port Index) 3-165
Configuring VLAN Behavior for Interfaces 3-166
Configuring Private VLANs 3-168
Displaying Current Private VLANs 3-169
Configuring Private VLANs 3-170
Associating Private VLANs 3-171
Displaying Private VLAN Interface Information 3-172
Configuring Private VLAN Interfaces 3-173
Configuring Protocol VLANs 3-174
Configuring Basic Protocol VLAN Settings 3-174
Configuring the Protocol VLAN System 3-175
Link Layer Discovery Protocol 3-176
Setting LLDP Timing Attributes 3-176
Configuring LLDP Interface Attributes 3-178
Displaying LLDP Local Device Information 3-181
Displaying LLDP Remote Port Information 3-182
Displaying LLDP Remote Information Details 3-183
Displaying Device Statistics 3-184
Displaying Detailed Device Statistics 3-185
Class of Service Configuration 3-186
Layer 2 Queue Settings 3-186
Setting the Default Priority for Interfaces 3-186
Mapping CoS Values to Egress Queues 3-188
Selecting the Queue Mode 3-190
Setting the Service Weight for Traffic Classes 3-191
Layer 3/4 Priority Settings 3-192
Mapping Layer 3/4 Priorities to CoS Values 3-192
Selecting IP DSCP Priority 3-192
Mapping DSCP Priority 3-192
Quality of Service 3-194
Configuring Quality of Service Parameters 3-195
Configuring a Class Map 3-195
Creating QoS Policies 3-198
Attaching a Policy Map to Ingress Queues 3-201

v
Contents
Multicast Filtering 3-202
Layer 2 IGMP (Snooping and Query) 3-203
Configuring IGMP Snooping and Query Parameters 3-204
Enabling IGMP Immediate Leave 3-206
Displaying Interfaces Attached to a Multicast Router 3-207
Specifying Static Interfaces for a Multicast Router 3-208
Displaying Port Members of Multicast Services 3-209
Assigning Ports to Multicast Services 3-210
Multicast VLAN Registration 3-211
Configuring Global MVR Settings 3-212
Displaying MVR Interface Status 3-214
Displaying Port Members of Multicast Groups 3-215
Configuring MVR Interfaces 3-216
Assigning Static Multicast Groups to Interfaces 3-217
Switch Clustering 3-219
Cluster Configuration 3-219
Cluster Member Configuration 3-221
Cluster Member Information 3-222
Cluster Candidate Information 3-223
UPnP 3-224
UPnP Configuration 3-225
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-1
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-6
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-8
Command Groups 4-9
General Commands 4-10
enable 4-10
disable 4-11

vi
Contents
configure 4-12
show history 4-12
reload 4-13
prompt 4-13
end 4-14
exit 4-14
quit 4-14
System Management Commands 4-15
Device Designation Commands 4-15
hostname 4-16
System Status Commands 4-16
show startup-config 4-16
show running-config 4-18
show system 4-19
show users 4-20
show version 4-21
Frame Size Commands 4-22
jumbo frame 4-22
File Management Commands 4-23
copy 4-24
delete 4-26
dir 4-27
whichboot 4-28
boot system 4-28
Line Commands 4-29
line 4-30
login 4-30
password 4-31
timeout login response 4-32
exec-timeout 4-33
password-thresh 4-33
silent-time 4-34
databits 4-35
parity 4-35
speed 4-36
stopbits 4-37
disconnect 4-37
show line 4-38
Event Logging Commands 4-39
logging on 4-39
logging history 4-40
logging host 4-41
logging facility 4-41
logging trap 4-42
clear log 4-42