Edge-Core ES4624-SFP User manual

1
www.edge-core.com
ES4624-SFP/ES4626-SFP
L3 Gigabit Ethernet Switch

2
Preface
ES4624-SFP/ES4626-SFP L3 Gigabit Ethernet Switch is a high performance routing
switch released by Edge-Core that can be deployed as an aggregation device for
enterprise and campus networks.ES4624-SFP/ES4626-SFP L3 Gigabit Ethernet Switch
support a variety of network interfaces from 100Mb, 1000Mb to 10 GB Ethernet.
We are providing this manual for your better understanding, use and maintenance of
the ES4624-SFP/ES4626-SFP L3 Gigabit Ethernet Switch. We strongly recommend you
to read through this manual carefully before installation and configuration to avoid
possible malfunction or damage to the switch. Furthermore, we sincerely hope our
products and services satisfy you.

3
Content
CHAPTER 1 SWITCH MANAGEMENT.......................................................................... 20
1.1 MANAGEMENT OPTIONS ........................................................................................... 20
1.1.1 Out-Of-Band Management.............................................................................. 20
1.1.2 In-band Management...................................................................................... 23
1.1.3 Management Via Telnet .................................................................................. 23
1.1.4 Management Via HTTP................................................................................... 26
1.2 MANAGEMENT INTERFACE ........................................................................................ 28
1.2.1 CLI Interface ................................................................................................... 28
1.2.2 Configuration Modes....................................................................................... 29
1.2.3 Configuration Syntax....................................................................................... 32
1.2.4 Shortcut Key Support...................................................................................... 33
1.2.5 Help Function.................................................................................................. 33
1.2.6 Input Verification ............................................................................................. 34
1.2.7 Fuzzy Match Support ...................................................................................... 34
1.3 WEB MANAGEMENT ................................................................................................. 35
1.3.1 Main Page....................................................................................................... 35
1.3.2 Module Front Panel......................................................................................... 35
CHAPTER 2 BASIC SWITCH CONFIGURATION.......................................................... 37
2.1 COMMANDS FOR BASIC SWITCH CONFIGURATION ...................................................... 37
2.1.1 Commands for Basic Configuration ................................................................ 37
2.2 MONITOR AND DEBUG COMMAND.............................................................................. 51
2.2.1 Ping................................................................................................................. 51
2.2.2 Ping6............................................................................................................... 52
2.2.3 Telnet .............................................................................................................. 52
2.2.4 SSH ................................................................................................................ 55
2.2.5 Traceroute....................................................................................................... 58
2.2.6 Traceroute6..................................................................................................... 58
2.2.7 Show............................................................................................................... 59
2.2.8 Debug ............................................................................................................. 65
2.2.9 System log ...................................................................................................... 65
2.3 CONFIGURATE SWITCH IP ADDRESSES...................................................................... 70
2.3.1 Switch IP Addresses Configuration Task List .................................................. 70
2.3.2 Commands For Configuring Switch IP ............................................................ 71
2.4 SNMP CONFIGURATION ........................................................................................... 73
2.4.1 Introduction To SNMP ..................................................................................... 73

4
2.4.2 SNMP Configuration Task List......................................................................... 75
2.4.3 Commands for SNMP ..................................................................................... 77
2.4.4 Typical SNMP Configuration Examples........................................................... 87
2.4.5 SNMP Troubleshooting ................................................................................... 88
2.5 SWITCH UPGRADE ................................................................................................... 89
2.5.1 Switch System Files........................................................................................ 89
2.5.2 BootROM Upgrade ......................................................................................... 89
2.5.3 FTP/TFTP Upgrade......................................................................................... 92
2.5.4 FTP/TFTP Configuration Examples .............................................................. 100
2.5.5 FTP/TFTP Troubleshooting........................................................................... 104
2.6 SECURITY FEATURE CONFIGURATION...................................................................... 106
2.6.1 Security Feature Introduction ........................................................................ 106
2.6.2 Security Feature Configuration ..................................................................... 106
2.6.3 Commands for Security Feature ................................................................... 108
2.6.4 Security Feature Example..............................................................................112
2.7 JUMBO CONFIGURATION..........................................................................................112
2.7.1 Jumbo Introduction ........................................................................................112
2.7.2 Jumbo Configuration Task Sequence.............................................................112
2.7.3 Jumbo Command...........................................................................................113
2.8 SFLOW CONFIGURATION..........................................................................................113
2.8.1 sFlow introduction ..........................................................................................113
2.8.2 sFlow Configuration Task ...............................................................................114
2.8.3 Commands for sFlow .....................................................................................115
2.8.4 sFlow Examples.............................................................................................119
2.8.5 sFlow Troubleshooting .................................................................................. 120
2.9 TACACS+ CONFIGURATION ................................................................................... 120
2.9.1 TACACS+ Introduction .................................................................................. 120
2.9.2 TACACS+ Configurations.............................................................................. 121
2.9.3 Commands for TACACS+ ............................................................................. 122
2.9.4 Typical TACACS+ Scenarios......................................................................... 123
2.9.5 TACACS+ Troubleshooting ........................................................................... 124
2.10 WEB MANAGEMENT ............................................................................................. 124
2.10.1 Switch Basic Configuration ......................................................................... 124
2.10.2 SNMP Configuration ................................................................................... 125
2.10.3 Switch upgrade ........................................................................................... 128
2.10.4 Monitor And Debug Command.................................................................... 130
2.10.5 Switch Maintenance.................................................................................... 132
2.10.6 Telnet server configuration .......................................................................... 133

5
2.10.7 Telnet server user configuration .................................................................. 133
2.10.8 Telnet security IP......................................................................................... 133
CHAPTER 3 PORT CONFIGURATION........................................................................ 134
3.1 INTRODUCTION TO PORT ........................................................................................ 134
3.2 PORT CONFIGURATION........................................................................................... 134
3.2.1 Network Port Configuration ........................................................................... 134
3.2.2 VLAN Interface Configuration ....................................................................... 143
3.2.3 Network Management Port Configuration ..................................................... 145
3.3 PORT MIRRORING CONFIGURATION......................................................................... 148
3.3.1 Introduction to port Mirroring ......................................................................... 148
3.3.2 Port Mirroring Configuration Task List ........................................................... 149
3.3.3 Command For Mirroring Configuration.......................................................... 149
3.3.4 Device Mirroring Troubleshooting ................................................................. 150
3.4 PORT CONFIGURATION EXAMPLE ............................................................................ 151
3.5 PORT TROUBLESHOOTING ...................................................................................... 151
3.6 WEB MANAGEMENT ............................................................................................... 152
3.6.1 Ethernet port configuration............................................................................ 152
3.6.2 Physical port configuration............................................................................ 152
3.6.3 Bandwidth control ......................................................................................... 153
3.6.4 Vlan interface configuration........................................................................... 153
3.6.5 Allocate IP address for L3 port ...................................................................... 154
3.6.6 L3 port IP addr mode configuration............................................................... 154
3.6.7 Port mirroring configuration........................................................................... 154
3.6.8 Mirror configuration ....................................................................................... 154
3.6.9 Port debug and maintenance ........................................................................ 155
3.6.10 Show port information ................................................................................. 155
CHAPTER 4 PORT CHANNEL CONFIGURATION ..................................................... 156
4.1 INTRODUCTION TO PORT CHANNEL ......................................................................... 156
4.2 PORT CHANNEL CONFIGURATION TASK LIST ............................................................ 157
4.3 COMMANDS FOR PORT CHANNEL............................................................................. 158
4.3.1 debug lacp .................................................................................................... 158
4.3.2 port-group ..................................................................................................... 158
4.3.3 port-group mode ........................................................................................... 159
4.3.4 interface port-channel ................................................................................... 160
4.3.5 show port-group ............................................................................................ 160
4.4 PORT CHANNEL EXAMPLE ...................................................................................... 164
4.5 PORT CHANNEL TROUBLESHOOTING ....................................................................... 167

6
4.6 WEB MANAGEMENT ............................................................................................... 167
4.6.1 LACP port group configuration...................................................................... 167
4.6.2 LACP port configuration ................................................................................ 168
CHAPTER 5 VLAN CONFIGURATION........................................................................ 169
5.1 VLAN CONFIGURATION .......................................................................................... 169
5.1.1 Introduction to VLAN..................................................................................... 169
5.1.2 VLAN Configuration Task List ....................................................................... 170
5.1.3 Commands For Vlan Configuration............................................................... 172
5.1.4 Typical VLAN Application .............................................................................. 177
5.2 GVRP CONFIGURATION ......................................................................................... 179
5.2.1 Introduction to GVRP .................................................................................... 179
5.2.2 GVRP Configuration Task List....................................................................... 179
5.2.3 Commands for GVRP ................................................................................... 180
5.2.4 Typical GVRP Application ............................................................................. 183
5.2.5 GVRP Troubleshooting ................................................................................. 185
5.3 DOT1Q-TUNNEL CONFIGURATION............................................................................ 186
5.3.1 Dot1q-tunnel Introduction.............................................................................. 186
5.3.2 Dot1q-tunnel Configuration ........................................................................... 187
5.3.3 Commands for Dot1q-Tunnel Configuration.................................................. 187
5.3.4 Typical Applications Of The Dot1q-tunnel ..................................................... 189
5.3.5 Dot1q-tunnel Troubleshooting ....................................................................... 190
5.4 VLAN-TRANSLATION CONFIGURATION..................................................................... 190
5.4.1 VLAN-translation Introduction ....................................................................... 190
5.4.2 VLAN-translation Configuration..................................................................... 191
5.4.3 Commands for VLAN-Translation Configuration ........................................... 191
5.4.4 Typical application of VLAN-translation......................................................... 193
5.4.5 VLAN-translation Troubleshooting ................................................................ 194
5.5 DYNAMIC VLAN CONFIGURATION ........................................................................... 194
5.5.1 Dynamic VLAN Introduction .......................................................................... 194
5.5.2 Dynamic VLAN Configuration ....................................................................... 195
5.5.3 Typical Application Of The Dynamic VLAN ................................................... 202
5.5.4 Dynamic VLAN Troubleshooting ................................................................... 203
5.6 VOICE VLAN CONFIGURATION................................................................................ 203
5.6.1 Voice VLAN Introduction ............................................................................... 203
5.6.2 Voice VLAN Configuration............................................................................. 204
5.6.3 Typical Applications Of The Voice VLAN....................................................... 207
5.6.4 Voice VLAN Troubleshooting ........................................................................ 208

7
CHAPTER 6 MAC TABLE CONFIGURATION............................................................. 209
6.1 INTRODUCTION TO MAC TABLE............................................................................... 209
6.1.1 Obtaining MAC Table .................................................................................... 209
6.1.2 Forward or Filter.............................................................................................211
6.2 MAC ADDRESS TABLE CONFIGURATION TASK LIST ................................................... 212
6.3 COMMANDS FOR MAC ADDRESS TABLE CONFIGURATION .......................................... 212
6.3.1 mac-address-table aging-time....................................................................... 212
6.3.2 mac-address-table ........................................................................................ 213
6.3.3 show mac-address-table ............................................................................... 214
6.4 TYPICAL CONFIGURATION EXAMPLES ...................................................................... 214
6.5 TROUBLESHOOTING ............................................................................................... 215
6.6 MAC ADDRESS FUNCTION EXTENSION ................................................................... 215
6.6.1 MAC Address Binding ................................................................................... 215
CHAPTER 7 MSTP CONFIGURATION........................................................................ 223
7.1 MSTP INTRODUCTION............................................................................................ 223
7.1.1 MSTP Region................................................................................................ 223
7.1.2 Port Roles ..................................................................................................... 225
7.1.3 MSTP Load Balance ..................................................................................... 225
7.2 MSTP CONFIGURATION TASK LIST.......................................................................... 225
7.3 COMMANDS FOR MSTP ......................................................................................... 229
7.3.1 abort.............................................................................................................. 229
7.3.2 exit ................................................................................................................ 229
7.3.3 instance vlan ................................................................................................. 230
7.3.4 name............................................................................................................. 230
7.3.5 revision-level ................................................................................................. 231
7.3.6 spanning-tree ................................................................................................ 231
7.3.7 spanning-tree format..................................................................................... 232
7.3.8 spanning-tree forward-time ........................................................................... 232
7.3.9 spanning-tree hello-time................................................................................ 233
7.3.10 spanning-tree link-type p2p......................................................................... 233
7.3.11 spanning-tree maxage................................................................................. 234
7.3.12 spanning-tree max-hop ............................................................................... 234
7.3.13 spanning-tree mcheck................................................................................. 235
7.3.14 spanning-tree mode .................................................................................... 235
7.3.15 spanning-tree mst configuration.................................................................. 235
7.3.16 spanning-tree mst cost................................................................................ 236
7.3.17 spanning-tree mst port-priority .................................................................... 237

8
7.3.18 spanning-tree mst priority............................................................................ 237
7.3.19 spanning-tree portfast ................................................................................. 238
7.3.20 spanning-tree digest-snooping.................................................................... 238
7.3.21 spanning-tree tcflush (global mode)............................................................ 239
7.3.22 spanning-tree tcflush (port mode) ............................................................... 239
7.4 MSTP EXAMPLE.................................................................................................... 240
7.5 MSTP TROUBLESHOOTING .................................................................................... 245
7.5.1 Commands for Monitor And Debug............................................................... 245
7.6 WEB MANAGEMENT ............................................................................................... 249
7.6.1 MSTP field operation..................................................................................... 249
7.6.2 MSTP port operation ..................................................................................... 250
7.6.3 MSTP global control...................................................................................... 251
7.6.4 Show MSTP setting....................................................................................... 253
CHAPTER 8 QOS AND PBR CONFIGURATION......................................................... 254
8.1 QOSCONFIGURATION............................................................................................ 254
8.1.1 Introduction to QoS ....................................................................................... 254
8.1.2 QoS Configuration Task List.......................................................................... 259
8.1.3 Commands for QoS ...................................................................................... 263
8.1.4 QoS Example................................................................................................ 272
8.1.5 QoS Troubleshooting .................................................................................... 275
8.2 PBR CONFIGURATION ............................................................................................ 280
8.2.1 Introduction to PBR....................................................................................... 280
8.2.2 PBR configuration ......................................................................................... 280
8.2.3 PBR examples .............................................................................................. 281
CHAPTER 9 FLOW-BASED REDIRECTION............................................................... 283
9.1 INTRODUCTION TO FLOW-BASED REDIRECTION........................................................ 283
9.2 FLOW-BASED REDIRECTION CONFIGURATION TASK SEQUENCE ................................ 283
9.3 COMMAND FOR FLOW-BASED REDIRECTION ............................................................ 284
9.3.1 access-group <aclname> redirect to interface ethernet ................................ 284
9.3.2 show flow-based-redirect .............................................................................. 284
9.4 FLOW-BASED REDIRECTION EXAMPLES ................................................................... 285
9.5 FLOW-BASED REDIRECTION TROUBLESHOOTING HELP............................................. 285
CHAPTER 10 L3 FORWARD CONFIGURATION ........................................................ 286
10.1 LAYER 3INTERFACE ............................................................................................. 286
10.1.1 Introduction to Layer 3 Interface ................................................................. 286
10.1.2 Layer 3 Interface Configuration Task List .................................................... 286

9
10.1.3 Commands for Layer 3 Interface................................................................. 287
10.2 IP CONFIGURATION .............................................................................................. 287
10.2.1 Introduction to IPv4, IPv6............................................................................ 287
10.2.2 IP Configuration .......................................................................................... 289
10.2.3 IP Configuration Examples.......................................................................... 304
10.2.4 IP Troubleshooting ...................................................................................... 309
10.3 IP FORWARDING .................................................................................................. 319
10.3.1 Introduction to IP Forwarding ...................................................................... 319
10.3.2 IP Route Aggregation Configuration Task ................................................... 319
10.3.3 Commands for IP Route Aggregation.......................................................... 320
10.4 URPF................................................................................................................. 320
10.4.1 URPF Introduction ...................................................................................... 320
10.4.2 URPF Operation Mechanism ...................................................................... 321
10.4.3 URPF Configuration Task Sequence........................................................... 321
10.4.4 Commands For URPF................................................................................. 322
10.4.5 URPF Troubleshooting................................................................................ 323
10.5 ARP ................................................................................................................... 323
10.5.1 Introduction to ARP ..................................................................................... 323
10.5.2 ARP Configuration Task List........................................................................ 324
10.5.3 Commands for ARP Configuration .............................................................. 324
CHAPTER 11 DHCP CONFIGURATION...................................................................... 328
11.1 INTRODUCTION TO DHCP..................................................................................... 328
11.2 DHCP SERVER CONFIGURATION .......................................................................... 329
11.2.1 DHCP Sever Configuration Task List........................................................... 329
11.2.2 Commands for DHCP Server Configuration................................................ 331
11.3 DHCP RELAY CONFIGURATION ............................................................................. 339
11.3.1 DHCP Relay Configuration Task List........................................................... 340
11.3.2 Commands for DHCP Relay Configuration ................................................. 341
11.4 DHCP CONFIGURATION EXAMPLE......................................................................... 343
11.5 DHCP TROUBLESHOOTING................................................................................... 346
11.5.1 Commands for Monitor and Debug ............................................................. 346
11.6 WEB MANAGEMENT.............................................................................................. 349
11.6.1 DHCP server configuration.......................................................................... 349
11.6.2 DHCP debugging ........................................................................................ 354
CHAPTER 12 DHCP OPTION 82 CONFIGURATION.................................................. 356
12.1 INTRODUCTION TO DHCP OPTION 82 .................................................................... 356
12.1.1 DHCP option 82 Message Structure ........................................................... 356

10
12.1.2 option 82 Working Mechanism.................................................................... 357
12.2 DHCP OPTION 82 CONFIGURATION....................................................................... 358
12.2.1 DHCP option 82 Configuration Task List ..................................................... 358
12.2.2 Command for DHCP option 82 ................................................................... 360
12.3 DHCP OPTION 82 APPLICATION EXAMPLES ........................................................... 363
12.4 DHCP OPTION 82 TROUBLESHOOTING HELP......................................................... 365
CHAPTER 13 DHCP SNOOPING CONFIGURATION.................................................. 367
13.1 INTRODUCTION TO DHCP SNOOPING.................................................................... 367
13.2 DHCP SNOOPING CONFIGURATION ...................................................................... 367
13.2.1 DHCP Snooping Configuration Task Sequence .......................................... 367
13.2.2 Command for DHCP Snooping Configuration............................................. 370
13.3 DHCP SNOOPING TYPICAL APPLICATION............................................................... 381
13.4 DHCP SNOOPING TROUBLESHOOTING HELP......................................................... 382
13.4.1 Monitor And Debug Information .................................................................. 382
13.4.2 DHCP Snooping Troubleshooting Help ....................................................... 382
CHAPTER 14 SNTP CONFIGURATION ...................................................................... 383
14.1 INTRODUCTION TO SNTP ..................................................................................... 383
14.2 COMMANDS FOR SNTP........................................................................................ 384
14.2.1 clock timezone ............................................................................................ 384
14.2.2 sntp server .................................................................................................. 384
14.2.3 sntp poll....................................................................................................... 385
14.2.4 debug sntp .................................................................................................. 385
14.2.5 show sntp.................................................................................................... 385
14.3 TYPICAL SNTP CONFIGURATION EXAMPLES .......................................................... 386
14.4 WEB MANAGEMENT ............................................................................................. 386
14.4.1 SNMP/NTP server configuration ................................................................. 386
14.4.2 Request interval configuration..................................................................... 387
14.4.3 Time difference ........................................................................................... 387
14.4.4 Show SNTP ................................................................................................ 387
CHAPTER 15 ARP SCANNING PREVENTION FUNCTION CONFIGURATION......... 388
15.1 INTRODUCTION TO ARP SCANNING PREVENTION FUNCTION ................................... 388
15.2 ARP SCANNING PREVENTION CONFIGURATION TASK SEQUENCE............................ 388
15.3 COMMAND FOR ARP SCANNING PREVENTION ....................................................... 390
15.3.1 anti-arpscan enable..................................................................................... 390
15.3.2 anti-arpscan port-based threshold .............................................................. 390
15.3.3 anti-arpscan ip-based threshold.................................................................. 391

11
15.3.4 anti-arpscan trust ........................................................................................ 391
15.3.5 anti-arpscan trust ip..................................................................................... 392
15.3.6 anti-arpscan recovery enable...................................................................... 392
15.3.7 anti-arpscan recovery time.......................................................................... 393
15.3.8 anti-arpscan log enable............................................................................... 393
15.3.9 anti-arpscan trap enable ............................................................................. 394
15.3.10 show anti-arpscan..................................................................................... 394
15.3.11 debug anti-arpscan.................................................................................... 396
15.4 ARP SCANNING PREVENTION TYPICAL EXAMPLES ................................................. 396
15.5 ARP SCANNING PREVENTION TROUBLESHOOTING HELP........................................ 397
CHAPTER 16 PREVENT ARP, ND SPOOFING CONFIGURATION............................ 398
16.1 OVERVIEW........................................................................................................... 398
16.1.1 ARP ( Address Resolution Protocol)............................................................ 398
16.1.2 ARP Spoofing.............................................................................................. 398
16.1.3 How to prevent void ARP/ND Spoofing for our Layer 3 Switch ................... 398
16.2 PREVENT ARP, ND SPOOFING CONFIGURATION..................................................... 399
16.2.1 Prevent ARP, ND Spoofing Configuration Task List..................................... 399
16.3 COMMANDS FOR PREVENTING ARP, ND SPOOFING............................................... 400
16.3.1 ip arp-security updateprotect....................................................................... 400
16.3.2 ipv6 nd-security updateprotect .................................................................... 400
16.3.3 ip arp-security learnprotect.......................................................................... 401
16.3.4 ipv6 nd learnprotect .................................................................................... 401
16.3.5 ip arp-security convert................................................................................. 401
16.3.6 ipv6 nd-security convert .............................................................................. 402
16.3.7 clear ip arp dynamic.................................................................................... 402
16.3.8 clear ipv6 nd dynamic ................................................................................. 402
16.4 PREVENT ARP, ND SPOOFING EXAMPLE............................................................... 402
CHAPTER 17 ROUTING PROTOCOL......................................................................... 405
17.1 ROUTING PROTOCOL OVERVIEW........................................................................... 405
17.1.1 Routing Table .............................................................................................. 406
17.2 IP ROUTING POLICY............................................................................................. 407
17.2.1 Introduction To Routing Policy..................................................................... 407
17.2.2 IP Routing Policy Configuration Task List.................................................... 409
17.2.3 Commands for Routing Policy..................................................................... 413
17.2.4 Configuration Examples.............................................................................. 425
17.2.5 Troubleshooting .......................................................................................... 426
17.3 STATIC ROUTE..................................................................................................... 429

12
17.3.1 Introduction to Static Route ......................................................................... 429
17.3.2 Introduction to Default Route ...................................................................... 429
17.3.3 Static Route Configuration Task List............................................................ 430
17.3.4 Commands for Static Route ........................................................................ 430
17.3.5 Configuration Examples.............................................................................. 434
17.4 RIP..................................................................................................................... 435
17.4.1 Introduction to RIP ...................................................................................... 435
17.4.2 RIP Configuration Task List......................................................................... 437
17.4.3 Commands for RIP ..................................................................................... 443
17.4.4 RIP Examples ............................................................................................. 458
17.4.5 RIP Troubleshooting.................................................................................... 461
17.5 RIPNG ................................................................................................................ 467
17.5.1 Introduction to RIPng .................................................................................. 467
17.5.2 RIPng Configuration Task List..................................................................... 468
17.5.3 Commands For RIPng ................................................................................ 472
17.5.4 RIPng Configuration Examples ................................................................... 477
17.5.5 RIPng Troubleshooting................................................................................ 479
17.6 OSPF................................................................................................................. 483
17.6.1 Introduction to OSPF .................................................................................. 483
17.6.2 OSPF Configuration Task List ..................................................................... 486
17.6.3 Commands for OSPF.................................................................................. 490
17.6.4 OSPF Example ............................................................................................511
17.6.5 OSPF Troubleshooting................................................................................ 520
17.7 OSPFV3............................................................................................................. 529
17.7.1 Introduction to OSPFv3............................................................................... 529
17.7.2 OSPFv3 Configuration Task List ................................................................. 532
17.7.3 Commands for OSPFV3 ............................................................................. 536
17.7.4 OSPFv3 Examples...................................................................................... 546
17.7.5 OSPFv3 Troubleshooting............................................................................ 549
17.8 BGP ................................................................................................................... 556
17.8.1 BGP Introduction......................................................................................... 556
17.8.2 BGP Configuration Task List ....................................................................... 560
17.8.3 Commands for BGP.................................................................................... 573
17.8.4 Configuration Examples of BGP ................................................................. 613
17.8.5 BGP Troubleshooting .................................................................................. 622
17.9 MBGP4+ ............................................................................................................ 634
17.9.1 MBGP4+ Introduction.................................................................................. 634
17.9.2 MBGP4+ Configures Mission List ............................................................... 634

13
17.9.3 MBGP4+ Examples..................................................................................... 634
17.9.4 MBGP4+ Troubleshooting........................................................................... 636
CHAPTER 18 IGMP SNOOPING .................................................................................637
18.1 INTRODUCTION TO IGMP SNOOPING ..................................................................... 637
18.2 IGMP SNOOPING CONFIGURATION TASK ............................................................... 637
18.3 COMMANDS FOR IGMP SNOOPING ....................................................................... 639
18.3.1 ip igmp snooping......................................................................................... 639
18.3.2 ip igmp snooping vlan ................................................................................. 639
18.3.3 ip igmp snooping vlan immediate-leave ...................................................... 639
18.3.4 ip igmp snooping vlan l2-general-querier .................................................... 640
18.3.5 ip igmp snooping vlan limit.......................................................................... 640
18.3.6 ip igmp snooping vlan mrouter-port interface .............................................. 641
18.3.7 ip igmp snooping vlan mrpt ......................................................................... 641
18.3.8 ip igmp snooping vlan query-interval........................................................... 642
18.3.9 ip igmp snooping vlan query-mrsp .............................................................. 642
18.3.10 ip igmp snooping vlan query-robustness................................................... 642
18.3.11 ip igmp snooping vlan suppression-query-time ......................................... 643
18.4 IGMP SNOOPING EXAMPLE.................................................................................. 643
18.5 IGMP SNOOPING TROUBLESHOOTING .................................................................. 646
18.5.1 Commands for Monitor And Debug............................................................. 646
CHAPTER 19 MULTICAST VLAN................................................................................ 649
19.1 INTRODUCTIONS TO MULTICAST VLAN.................................................................. 649
19.2 MULTICAST VLAN CONFIGURATION TASK .............................................................. 649
19.3 COMMANDS FOR MULTICAST VLAN...................................................................... 650
19.3.1 multicast-vlan .............................................................................................. 650
19.3.2 multicast-vlan association<vlan-list>........................................................... 650
19.4 EXAMPLES OF MULTICAST VLAN.......................................................................... 651
CHAPTER 20 IPV4 MULTICAST PROTOCOL ............................................................ 653
20.1 IPV4MULTICAST PROTOCOL OVERVIEW................................................................ 653
20.1.1 Introduction to Multicast .............................................................................. 653
20.1.2 Multicast Address........................................................................................ 654
20.1.3 IP Multicast Packet Transmission................................................................ 655
20.1.4 IP Multicast Application ............................................................................... 655
20.2 PIM-DM ............................................................................................................. 656
20.2.1 Introduction to PIM-DM ............................................................................... 656
20.2.2 PIM-DM Configuration Task List.................................................................. 657

14
20.2.3 Commands for PIM-DM .............................................................................. 658
20.2.4 PIM-DM Configuration Examples................................................................ 663
20.2.5 PIM-DM Troubleshooting ............................................................................ 664
20.3 PIM-SM.............................................................................................................. 670
20.3.1 Introduction to PIM-SM ............................................................................... 670
20.3.2 PIM-SM Configuration Task List.................................................................. 671
20.3.3 Commands for PIM-SM............................................................................... 674
20.3.4 PIM-SM Configuration Examples ................................................................ 683
20.3.5 PIM-SM Troubleshooting............................................................................. 685
20.4 DVMRP.............................................................................................................. 695
20.4.1 Introduction to DVMRP ............................................................................... 695
20.4.2 Configuration Task List................................................................................ 696
20.4.3 Commands for DVMRP............................................................................... 698
20.4.4 DVMRP Configuration Examples ................................................................ 701
20.4.5 DVMRP Troubleshooting............................................................................. 701
20.5 DCSCM ............................................................................................................. 706
20.5.1 Introduction to DCSCM ............................................................................... 706
20.5.2 DCSCM Configuration Task List.................................................................. 707
20.5.3 Commands for DCSCM .............................................................................. 710
20.5.4 DCSCM Configuration Examples................................................................ 715
20.5.5 DCSCM Troubleshooting ............................................................................ 716
20.6 IGMP ................................................................................................................. 718
20.6.1 Introduction to IGMP ................................................................................... 718
20.6.2 Configuration Task List................................................................................ 720
20.6.3 Commands for IGMP .................................................................................. 723
20.6.4 IGMP Configuration Example...................................................................... 727
20.6.5 IGMP Troubleshooting ................................................................................ 728
CHAPTER 21 IPV6 MULTICAST PROTOCOL ............................................................ 732
21.1 PIM-DM6............................................................................................................ 732
21.1.1 Introduction to PIM-DM6 ............................................................................. 732
21.1.2 PIM-DM Configuration Task List.................................................................. 733
21.1.3 Commands for PIM-DM6 ............................................................................ 734
21.1.4 PIM-DM Typical Application ........................................................................ 739
21.1.5 PIM-DM Troubleshooting ............................................................................ 740
21.2 PIM-SM6............................................................................................................ 746
21.2.1 Introduction to PIM-SM6 ............................................................................. 746
21.2.2 PIM-SM Configuration Task List.................................................................. 747
21.2.3 Commands for PIM-SM............................................................................... 750

15
21.2.4 PIM-SM Typical Application......................................................................... 759
21.2.5 PIM-SM Troubleshooting............................................................................. 761
21.3 MLD ................................................................................................................... 771
21.3.1 Introduction to MLD..................................................................................... 771
21.3.2 MLD Configuration Task List ....................................................................... 771
21.3.3 Commands for MLD.................................................................................... 773
21.3.4 MLD Typical Application .............................................................................. 779
21.3.5 MLD Troubleshooting.................................................................................. 779
21.4 MLD SNOOPING .................................................................................................. 782
21.4.1 MLD Snooping Introduction......................................................................... 782
21.4.2 MLD Snooping Configuration Task.............................................................. 783
21.4.3 Commands For MLD Snooping Configuration ............................................ 784
21.4.4 MLD Snooping Examples............................................................................ 791
21.4.5 MLD Snooping Troubleshooting.................................................................. 793
CHAPTER 22 ACL CONFIGURATION......................................................................... 794
22.1 INTRODUCTION TO ACL........................................................................................ 794
22.1.1 Access-list................................................................................................... 794
22.1.2 Access-group .............................................................................................. 794
22.1.3 Access-list Action and Global Default Action ............................................... 794
22.2 ACL CONFIGURATION........................................................................................... 795
22.2.1 ACL Configuration Task Sequence.............................................................. 795
22.2.2 Commands for ACL..................................................................................... 808
22.3 ACL EXAMPLE ..................................................................................................... 827
22.4 ACL TROUBLESHOOTING...................................................................................... 828
22.4.1 Command for Monitor And Debug............................................................... 828
22.5 WEB MANAGEMENT ............................................................................................. 831
22.5.1 Numeric standard ACL configuration........................................................... 832
22.5.2 Delete numeric IP ACL................................................................................ 832
22.5.3 Configure the numeric extended ACL ......................................................... 833
22.5.4 Configure and delete the standard ACL name ............................................ 834
22.5.5 Configure extended ACL name configuration.............................................. 835
22.5.6 Firewall configuration .................................................................................. 835
22.5.7 ACL port binding.......................................................................................... 835
CHAPTER 23 802.1X CONFIGURATION .................................................................... 837
23.1 INTRODUCTION TO 802.1X.................................................................................... 837
23.1.1 The Authentication Structure of 802.1x ....................................................... 837
23.1.2 The Work Mechanism of 802.1x.................................................................. 839

16
23.1.3 The Encapsulation of EAPOL Messages .................................................... 840
23.1.4 The Encapsulation of EAP Attributes .......................................................... 842
23.1.5 The Authentication Methods of 802.1x ........................................................ 842
23.1.6 The Extension and Optimization of 802.1x.................................................. 848
23.1.7 The Features of VLAN Allocation ................................................................ 849
23.2 802.1X CONFIGURATION TASK LIST....................................................................... 850
23.3 COMMANDS FOR 802.1X...................................................................................... 854
23.3.1 aaa enable .................................................................................................. 854
23.3.2 aaa-accounting enable................................................................................ 855
23.3.3 dot1x accept-mac........................................................................................ 855
23.3.4 dot1x eapor enable ..................................................................................... 856
23.3.5 dot1x enable ............................................................................................... 856
23.3.6 dot1x guest-vlan.......................................................................................... 857
23.3.7 dot1x macfilter enable................................................................................. 858
23.3.8 dot1x max-req ............................................................................................. 858
23.3.9 dot1x max-user ........................................................................................... 858
23.3.10 dot1x max-user userbased........................................................................ 859
23.3.11 dot1x port-control ...................................................................................... 859
23.3.12 dot1x port-method..................................................................................... 860
23.3.13 dot1x re-authenticate ................................................................................ 860
23.3.14 dot1x re-authentication.............................................................................. 860
23.3.15 dot1x timeout quiet-period......................................................................... 861
23.3.16 dot1x timeout re-authperiod ...................................................................... 861
23.3.17 dot1x timeout tx-period.............................................................................. 862
23.3.18 radius-server accounting host ................................................................... 862
23.3.19 radius-server authentication host .............................................................. 863
23.3.20 radius-server dead-time ............................................................................ 863
23.3.21 radius-server key ...................................................................................... 864
23.3.22 radius-server retransmit ............................................................................ 864
23.3.23 radius-server timeout ................................................................................ 865
23.4 802.1X APPLICATION EXAMPLE............................................................................. 865
23.4.1 Examples of Guest Vlan Applications ......................................................... 865
23.4.2 Examples of IPv4 Radius Applications........................................................ 869
23.5 802.1X TROUBLESHOOTING ................................................................................. 870
23.5.1 Command for Monitor and debug ............................................................... 870
23.6 WEB MANAGEMENT ............................................................................................. 876
23.6.1 RADIUS client configuration........................................................................ 876
23.6.2 802.1X configuration ................................................................................... 878

17
CHAPTER 24 THE NUMBER LIMITATION FUNCTION OF PORT, MAC IN VLAN AND
IP CONFIGURATION.................................................................................................... 882
24.1 INTRODUCTION TO THE NUMBER LIMITATION FUNCTION OF PORT,MAC IN VLAN AND IP
.................................................................................................................................. 882
24.2 THE NUMBER LIMITATION FUNCTION OF PORT,MAC IN VLAN AND IP CONFIGURATION
TASK SEQUENCE ......................................................................................................... 883
24.3 COMMAND FOR THE NUMBER LIMITATION FUNCTION OF PORT,MAC IN VLAN AND IP
.................................................................................................................................. 885
24.3.1 switchport mac-address dynamic maximum ............................................... 885
24.3.2 ip mac-address dynamic maximum............................................................. 886
24.3.3 switchport arp dynamic maximum............................................................... 887
24.3.4 switchport nd dynamic maximum ................................................................ 887
24.3.5 ip arp dynamic maximum ............................................................................ 888
24.3.6 ipv6 nd dynamic maximum.......................................................................... 889
24.3.7 mac-address query timeout......................................................................... 889
24.3.8 show mac-address dynamic count.............................................................. 890
24.3.9 show arp-dynamic count ............................................................................. 890
24.3.10 show nd-dynamic count ............................................................................ 891
24.3.11 debug switchport mac count...................................................................... 891
24.3.12 debug switchport arp count ....................................................................... 892
24.3.13 debug switchport nd count ........................................................................ 892
24.3.14 debug ip mac count................................................................................... 893
24.3.15 debug ip arp count .................................................................................... 893
24.3.16 debug ipv6 nd count.................................................................................. 894
24.4 THE NUMBER LIMITATION FUNCTION OF PORT,MAC IN VLAN AND IP TYPICAL
EXAMPLES .................................................................................................................. 895
24.5 THE NUMBER LIMITATION FUNCTION OF PORT,MAC IN VLAN AND IP
TROUBLESHOOTING HELP ............................................................................................ 896
CHAPTER 25 VRRP CONFIGURATION...................................................................... 897
25.1 INTRODUCTION TO VRRP..................................................................................... 897
25.2 CONFIGURATION TASK LIST .................................................................................. 898
25.3 COMMANDS FOR VRRP ....................................................................................... 899
25.3.1 advertisement-interval................................................................................. 899
25.3.2 circuit-failover.............................................................................................. 900
25.3.3 debug vrrp................................................................................................... 901
25.3.4 disable......................................................................................................... 901
25.3.5 enable ......................................................................................................... 901

18
25.3.6 interface ...................................................................................................... 902
25.3.7 preempt-mode............................................................................................. 902
25.3.8 priority ......................................................................................................... 902
25.3.9 router vrrp ................................................................................................... 903
25.3.10 show vrrp .................................................................................................. 903
25.3.11 virtual-ip..................................................................................................... 904
25.4 TYPICAL VRRP SCENARIO ................................................................................... 905
25.5 VRRP TROUBLESHOOTING .................................................................................. 905
25.6 WEB MANAGEMENT ............................................................................................. 906
25.6.1 Create VRRP Number................................................................................. 906
25.6.2 Configure VRRP Dummy IP........................................................................ 906
25.6.3 Configure VRRP Port .................................................................................. 906
25.6.4 Activate Virtual Router................................................................................. 907
25.6.5 Configure Preemptive Mode For VRRP ...................................................... 907
25.6.6 Configure VRRP priority.............................................................................. 907
25.6.7 Configure VRRP Timer interval ................................................................... 908
25.6.8 Configure VRRP Interface Monitor.............................................................. 908
25.6.9 Configure Authentication Mode For VRRP.................................................. 908
CHAPTER 26 MRPP CONFIGURATION...................................................................... 909
26.1 MRPP INTRODUCTION ......................................................................................... 909
26.1.1 Conception Introduction .............................................................................. 909
26.1.2 MRPP Protocol Packet Types ..................................................................... 910
26.1.3 MRPP Protocol Operation System...............................................................911
26.2 MRPP CONFIGURATION TASK LIST ....................................................................... 912
26.3 COMMANDS FOR MRPP ...................................................................................... 913
26.3.1 clear mrpp statistics .................................................................................... 913
26.3.2 control-vlan ................................................................................................. 913
26.3.3 debug mrpp................................................................................................. 914
26.3.4 enable ......................................................................................................... 914
26.3.5 fail-timer ...................................................................................................... 915
26.3.6 hello-timer ................................................................................................... 915
26.3.7 mrpp enable ................................................................................................ 916
26.3.8 mrpp ring..................................................................................................... 916
26.3.9 node-mode.................................................................................................. 916
26.3.10 primary-port............................................................................................... 917
26.3.11 secondary-port .......................................................................................... 917
26.3.12 show mrpp ................................................................................................ 917
26.3.13 show mrpp statistics.................................................................................. 918

19
26.4 MRPP TYPICAL SCENARIO.................................................................................... 918
26.5 MRPP TROUBLESHOOTING .................................................................................. 920
CHAPTER 27 CLUSTER CONFIGURATION...............................................................921
27.1.1 Introduction to cluster network management .............................................. 921
27.1.2 Cluster Network Management Configuration Sequence ............................. 921
27.1.3 Commands for cluster................................................................................. 923
27.1.4 Examples of Cluster Administration ............................................................ 929
27.1.5 Cluster Administration Troubleshooting....................................................... 930

20
Chapter 1 Switch Management
1.1 Management Options
After purchasing the switch, the user needs to configure the switch for network
management. ES4624-SFP/ES4626-SFP Switch provides two management options:
in-band management and out-of-band management.
1.1.1 Out-Of-Band Management
Out-of-band management is the management through Console interface. Generally,
the user will use out-of-band management for the initial switch configuration, or when
in-band management is not available. For instance, the user must assign an IP address
to the switch via the Console interface to be able to access the switch through Telnet.
The procedures for managing the switch via Console interface are listed below:
Step 1: setting up the environment:
Fig 1-1 Out-of-band Management Configuration Environment
As shown in Fig 1-1, the serial port (RS-232) is connected to the switch with the
serial cable provided. The table below lists all the devices used in the connection.
Device Name Description
PC machine Has functional keyboard and RS-232,with terminal emulator
installed,such as HyperTerminal included in Windows
9x/NT/2000/XP.
Serial port cable One end attach to the RS-232 serial port, the other end to
the Console port.
Connect with serial port