Edge-Core ES4528V-38 Programming manual

Management Guide
www.edge-core.com
28-Port
Gigabit Ethernet Switch

M ANAGEMENT G UIDE
ES4528V GIGABIT ETHERNET SWITCH
Layer 2 Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit Combination Ports (RJ-45/SFP)
ES4528V
E072009/ST-R01
149100000014A

– 5 –
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
RELATED
PUBLICATIONS
The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.
REVISION HISTORY This section summarizes the changes in each revision of this guide.
JULY 2009 REVISION
This is the first version of this guide. This guide is valid for software release
v1.12.

A BOUT T HIS G UIDE
– 6 –

– 7 –
CONTENTS
ABOUT THIS GUIDE 5
CONTENTS 7
FIGURES 19
TABLES 23
SECTION I GETTING STARTED 25
1INTRODUCTION 27
Key Features 27
Description of Software Features 28
Configuration Backup and Restore 28
Authentication 28
Access Control Lists 29
Port Configuration 29
Rate Limiting 29
Port Mirroring 29
Port Trunking 29
Storm Control 29
Static Addresses 29
IEEE 802.1D Bridge 30
Store-and-Forward Switching 30
Spanning Tree Algorithm 30
Virtual LANs 31
Traffic Prioritization 31
Quality of Service 32
Multicast Filtering 32
System Defaults 33
2INITIAL SWITCH CONFIGURATION 35
Connecting to the Switch 35
Configuration Options 35

C ONTENTS
– 8 –
Required Connections 36
Remote Connections 37
Basic Configuration 38
Setting Passwords 38
Setting an IP Address 38
Enabling SNMP Management Access 41
Managing System Files 45
Saving or Restoring Configuration Settings 45
SECTION II WEB CONFIGURATION 47
3USING THE WEB INTERFACE 49
Connecting to the Web Interface 49
Navigating the Web Browser Interface 50
Home Page 50
Configuration Options 50
Panel Display 51
Main Menu 51
4CONFIGURING THE SWITCH 55
Configuring System Information 55
Setting an IP Address 56
Setting an IPv4 Address 56
Setting an IPv6 Address 58
Setting the System Password 61
Filtering IP Addresses for Management Access 61
Configuring Port Connections 63
Configuring Authentication for Management Access and 802.1X 65
Creating Trunk Groups 69
Configuring Static Trunks 70
Configuring LACP 73
Configuring the Spanning Tree Algorithm 76
Configuring Global Settings for STA 77
Configuring Interface Settings for STA 78
Configuring 802.1X Port Authentication 82
Configuring HTTPS 88
Configuring SSH 89

C ONTENTS
– 9 –
IGMP Snooping 90
Configuring IGMP Snooping and Query 91
Configuring IGMP Filtering 95
Configuring Link Layer Discovery Protocol 96
Configuring the MAC Address Table 99
IEEE 802.1Q VLANs 101
Assigning Ports to VLANs 102
Configuring VLAN Attributes for Port Members 103
Configuring Private VLANs 105
Using Port Isolation 106
Quality of Service 107
Configuring Port-Level Queue Settings 108
Configuring DSCP Remarking 109
Configuring QoS Control Lists 111
Configuring Rate Limiting 114
Configuring Storm Control 116
Access Control Lists 118
Assigning ACL Policies and Responses 118
Configuring Rate Limiters 119
Configuring Access Control Lists 120
Configuring Port Mirroring 128
Simple Network Management Protocol 130
Configuring SNMP System and Trap Settings 131
Setting SNMPv3 Community Access Strings 136
Configuring SNMPv3 Users 137
Configuring SNMPv3 Groups 138
Configuring SNMPv3 Views 140
Configuring SNMPv3 Group Access Rights 141
Configuring UPnP 142
Configuring DHCP Relay and Option 82 Information 144
5MONITORING THE SWITCH 147
Displaying Basic Information About the System 147
Displaying System Information 147
Displaying Log Messages 148
Displaying Log Details 150
Displaying Access Management Statistics 150

C ONTENTS
– 10 –
Displaying Information About Ports 151
Displaying Port Status On the Front Panel 151
Displaying an Overview of Port Statistics 152
Displaying QoS Statistics 153
Displaying Detailed Port Statistics 154
Displaying Information on Authentication Servers 157
Displaying a List of Authentication Servers 157
Displaying Statistics for Configured Authentication Servers 158
Displaying Information on LACP 163
Displaying an Overview of LACP Groups 163
Displaying LACP Port Status 163
Displaying LACP Port Statistics 165
Displaying Information on the Spanning Tree 166
Displaying Bridge Status for STA 166
Displaying Port Status for STA 168
Displaying Port Statistics for STA 169
Displaying Port Security Information 170
Displaying Port Security Status 170
Displaying Port Security Statistics 171
Showing IGMP Snooping Information 175
Displaying LLDP Information 176
Displaying LLDP Neighbor Information 176
Displaying LLDP Port Statistics 178
Displaying DHCP Relay Statistics 179
Displaying the MAC Address Table 181
6PERFORMING BASIC DIAGNOSTICS 183
Pinging an IPv4 or IPv6 Address 183
Running Cable Diagnostics 184
7PERFORMING SYSTEM MAINTENANCE 187
Resetting the Switch 187
Restoring Factory Defaults 188
Upgrading Firmware 188
Registering the Product 189
Managing Configuration Files 190
Saving Configuration Settings 190
Restoring Configuration Settings 190

C ONTENTS
– 11 –
SECTION III COMMAND LINE INTERFACE 193
8USING THE COMMAND LINE INTERFACE 195
Accessing the CLI 195
Console Connection 195
Telnet Connection 196
Entering Commands 197
Keywords and Arguments 197
Minimum Abbreviation 198
Getting Help on Commands 198
Partial Keyword Lookup 199
Using Command History 200
Command Line Processing 200
CLI Command Groups 201
9SYSTEM COMMANDS 203
system configuration 204
system reboot 204
system restore default 205
system contact 205
system name 205
system location 206
system password 206
system timezone 207
system log 207
system access configuration 208
system access mode 208
system access add 209
system access ipv6 add 210
system access delete 211
system access lookup 211
system access clear 211
system access statistics 211
10 IP COMMANDS 213
ip configuration 213
ip dhcp 214
ip setup 215

C ONTENTS
– 12 –
ip ping 216
ip dns 217
ip dns_proxy 217
ip sntp 218
ip ipv6 autoconfig 218
ip ipv6 setup 219
ip ipv6 ping6 220
ip ipv6 sntp 221
11 AUTHENTICATION COMMANDS 223
auth configuration 223
auth timeout 224
auth deadtime 225
auth radius 225
auth acct_radius 226
auth tacacs+ 228
auth client 229
auth statistics 230
12 PORT COMMANDS 233
port configuration 233
port state 235
port mode 235
port flow control 236
port maxframe 237
port power 237
port excessive 238
port statistics 239
port veriphy 240
port numbers 241
13 LINK AGGREGATION COMMANDS 243
aggr configuration 244
aggr add 245
aggr delete 245
aggr lookup 246
aggr mode 246
14 LACP COMMANDS 249
lacp configuration 251

C ONTENTS
– 13 –
lacp mode 251
lacp key 252
lacp role 252
lacp status 253
lacp statistics 253
15 RSTP COMMANDS 255
rstp configuration 256
rstp sysprio 256
rstp age 257
rstp delay 257
rstp txhold 258
rstp version 258
rstp mode 259
rstp cost 259
rstp priority 261
rstp edge 261
rstp autoedge 262
rstp p2p 263
rstp status 263
rstp statistics 264
rstp mcheck 264
16 IEEE 802.1X COMMANDS 267
dot1x configuration 267
dot1x mode 269
dot1x state 269
dot1x authenticate 270
dot1x reauthentication 271
dot1x period 272
dot1x timeout 272
dot1x clients 272
dot1x agetime 273
dot1x holdtime 274
dot1x statistics 274
17 IGMP COMMANDS 277
igmp configuration 277
igmp mode 279

C ONTENTS
– 14 –
igmp state 279
igmp querier 280
igmp fastleave 281
igmp leave proxy 282
igmp throttling 282
igmp filtering 283
igmp router 284
igmp flooding 284
igmp groups 285
igmp status 285
18 LLDP COMMANDS 287
lldp configuration 287
lldp mode 288
lldp optional_tlv 288
lldp interval 289
lldp hold 290
lldp delay 290
lldp reinit 291
lldp info 291
lldp statistics 292
lldp cdp_aware 293
19 MAC COMMANDS 295
mac configuration 295
mac add 296
mac delete 296
mac lookup 297
mac agetime 297
mac learning 297
mac dump 298
mac statistics 299
mac flush 299
20 VLAN COMMANDS 301
vlan configuration 301
vlan aware 302
vlan pvid 303
vlan frametype 303

C ONTENTS
– 15 –
vlan ingressfilter 304
vlan qinq 304
vlan add 305
vlan delete 305
vlan lookup 306
21 PVLAN COMMANDS 307
pvlan configuration 307
pvlan add 308
pvlan delete 308
pvlan lookup 309
pvlan isolate 309
22 QOS COMMANDS 311
qos configuration 312
qos default 312
qos tagprio 313
qos qcl port 313
qos qcl add 314
qos qcl delete 315
qos qcl lookup 316
qos mode 316
qos weight 317
qos rate limiter 317
qos shaper 318
qos storm unicast 319
qos storm multicast 319
qos storm broadcast 320
qos dscp remarking 320
qos dscp queue mapping 321
23 ACL COMMANDS 323
acl configuration 323
acl action 324
acl policy 325
acl rate 325
acl add 326
acl delete 329
acl lookup 329

C ONTENTS
– 16 –
acl clear 330
24 MIRROR COMMANDS 331
mirror configuration 331
mirror port 331
mirror mode 332
25 CONFIG COMMANDS 333
config save 333
config load 334
26 SNMP COMMANDS 335
snmp configuration 336
snmp mode 337
snmp version 338
snmp read community 338
snmp write community 339
snmp trap mode 339
snmp trap version 340
snmp trap community 340
snmp trap destination 341
snmp trap ipv6 destination 341
snmp trap authentication failure 341
snmp trap link-up 342
snmp trap inform mode 342
snmp trap inform timeout 343
snmp trap inform retry times 343
snmp trap probe security engine id 344
snmp trap security engine id 344
snmp trap security name 345
snmp engine id 345
snmp community add 346
snmp community delete 346
snmp community lookup 347
snmp user add 347
snmp user delete 348
snmp user changekey 349
snmp user lookup 349
snmp group add 350

C ONTENTS
– 17 –
snmp group delete 351
snmp group lookup 351
snmp view add 352
snmp view delete 352
snmp view lookup 353
snmp access add 353
snmp access delete 354
snmp access lookup 354
27 HTTPS COMMANDS 357
https configuration 357
https mode 357
https redirect 358
28 SSH COMMANDS 361
ssh configuration 361
ssh mode 361
29 UPNP COMMANDS 363
upnp configuration 363
upnp mode 363
upnp ttl 364
upnp advertising duration 365
30 DHCP COMMANDS 367
dhcp relay configuration 367
dhcp relay mode 367
dhcp relay server 368
dhcp relay information mode 368
dhcp relay information policy 369
dhcp relay statistics 369
31 FIRMWARE COMMANDS 371
firmware load 371
firmware ipv6 load 373

C ONTENTS
– 18 –
SECTION IV APPENDICES 375
ASOFTWARE SPECIFICATIONS 377
Software Features 377
Management Features 378
Standards 379
Management Information Bases 379
BTROUBLESHOOTING 381
Problems Accessing the Management Interface 381
Using System Logs 382
GLOSSARY 383
INDEX 391

– 19 –
FIGURES
Figure 1: Home Page 50
Figure 2: Front Panel Indicators 51
Figure 3: System Information Configuration 56
Figure 4: IP & Time Configuration 58
Figure 5: IPv6 & Time Configuration 60
Figure 6: System Password 61
Figure 7: Access Management Configuration 62
Figure 8: Port Configuration 64
Figure 9: Authentication Configuration 68
Figure 10: Static Trunk Configuration 72
Figure 11: LACP Port Configuration 75
Figure 12: RSTP System Configuration 78
Figure 13: RSTP Port Configuration 81
Figure 14: Port Security Configuration 87
Figure 15: HTTPS Configuration 89
Figure 16: SSH Configuration 90
Figure 17: IGMP Snooping Configuration 94
Figure 18: IGMP Snooping Port Group Filtering Configuration 95
Figure 19: LLDP Configuration 99
Figure 20: MAC Address Table Configuration 101
Figure 21: VLAN Membership Configuration 103
Figure 22: VLAN Port Configuration 105
Figure 23: Private VLAN Membership Configuration 106
Figure 24: Port Isolation Configuration 107
Figure 25: Port QoS Configuration 109
Figure 26: DSCP Remarking Configuration 111
Figure 27: QoS Control List Configuration 114
Figure 28: Rate Limit Configuration 115
Figure 29: Storm Control Configuration 117
Figure 30: ACL Port Configuration 119
Figure 31: ACL Rate Limiter Configuration 120

F IGURES
– 20 –
Figure 32: Access Control List Configuration 127
Figure 33: Mirror Configuration 129
Figure 34: SNMP System Configuration 135
Figure 35: SNMPv3 Communities Configuration 136
Figure 36: SNMPv3 Users Configuration 138
Figure 37: SNMPv3 Group Configuration 139
Figure 38: SNMPv3 View Configuration 140
Figure 39: SNMPv3 Access Configuration 142
Figure 40: UPnP Configuration 144
Figure 41: DHCP Relay Configuration 146
Figure 42: System Information 148
Figure 43: System Log Information 149
Figure 44: Detailed System Log Information 150
Figure 45: Access Management Statistics 151
Figure 46: Port State Overview 151
Figure 47: Port Statistics Overview 152
Figure 48: Queuing Counters 153
Figure 49: Detailed Port Statistics 156
Figure 50: RADIUS Overview 158
Figure 51: RADIUS Details 162
Figure 52: LACP System Status 163
Figure 53: LACP Port Status 164
Figure 54: LACP Port Statistics 165
Figure 55: Spanning Tree Bridge Status 168
Figure 56: Spanning Tree Port Status 169
Figure 57: Spanning Tree Port Statistics 170
Figure 58: Port Security Status 171
Figure 59: Port Security Statistics 174
Figure 60: IGMP Snooping Status 176
Figure 61: LLDP Neighbor Information 177
Figure 62: LLDP Port Statistics 179
Figure 63: DHCP Relay Statistics 181
Figure 64: MAC Address Table 182
Figure 65: ICMP Ping 184
Figure 66: VeriPHY Cable Diagnostics 185
Figure 67: Reset Device 187