Edge-Core ES4626F Programming manual

Powered by Accton
Management Guide
ES4626F/ES4650F
24/48-Port
Stackable Layer 3
Gigabit Ethernet Switch

Management Guide
ES4626F Gigabit Ethernet Switch
Stackable Layer 3 Switch
with 20 10/100/1000BASE-T (RJ-45) Ports,
4 Gigabit Combination Ports (RJ-45/SFP),
2 10-Gigabit Extender Module Slots,
and 2 Stacking Ports
ES4650F Gigabit Ethernet Switch
Stackable Layer 3 Switch
with 44 10/100/1000BASE-T (RJ-45) Ports,
4 Gigabit Combination Ports (RJ-45/SFP),
2 10-Gigabit Extender Module Slots,
and 2 Stacking Ports

ES4626F, ES4650F
F1.1.0.2 E062009-R01/ST
149100000013A

i
About This Guide
Purpose
This guide gives specific information on how to operate and use the management
functions of the switch.
Audience
The guide is intended for use by network administrators who are responsible for operating
and maintaining network equipment; consequently, it assumes a basic working
knowledge of general switch functions, the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
Conventions
The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features or
instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage the
system or equipment.
Warning: Alerts you to a potential hazard that could cause personal injury.
Related Publications
The following publication details the hardware features of the switch, including the
physical and performance-related characteristics, and how to install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help that describes all
management related features.
Revision History
This section summarizes the changes in each revision of this guide.
June 2009 Revision
This is the first release of this guide.

ii

iii
Contents
Section I: Getting Started
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-7
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Stack Operations 2-3
Selecting the Stack Master 2-3
Selecting the Backup Unit 2-4
Recovering from Stack Failure or Topology Change 2-4
Broken Link for Line and Wrap-around Topologies 2-4
Resilient IP Interface for Management Access 2-5
Resilient Configuration 2-5
Renumbering the Stack 2-5
Ensuring Consistent Code is Used Across the Stack 2-5
Basic Configuration 2-6
Console Connection 2-6
Setting Passwords 2-7
Setting an IP Address 2-7
Manual Configuration 2-8
Dynamic Configuration 2-11
Enabling SNMP Management Access 2-13
Community Strings (for SNMP version 1 and 2c clients) 2-13
Trap Receivers 2-14
Configuring Access for SNMP Version 3 Clients 2-15
Managing System Files 2-15
Saving Configuration Settings 2-16
Section II: Switch Management
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3

Contents
iv
Main Menu 3-4
Chapter 4: Basic Management Tasks 4-1
Displaying System Information 4-1
Displaying Switch Hardware/Software Versions 4-3
Displaying Bridge Extension Capabilities 4-4
Setting the Switch’s IP Address (IP Version 4) 4-5
Manual Configuration 4-7
Using DHCP/BOOTP 4-8
Setting the Switch’s IP Address (IP Version 6) 4-9
Configuring an IPv6 Address 4-9
Configuring an IPv6 General Network Prefix 4-15
Configuring Neighbor Detection Protocol and Static Entries 4-17
Configuring Support for Jumbo Frames 4-21
Managing Firmware 4-21
Downloading System Software from a Server 4-22
Saving or Restoring Configuration Settings 4-24
Downloading Configuration Settings from a Server 4-25
Console Port Settings 4-26
Telnet Settings 4-28
Configuring Event Logging 4-30
System Log Configuration 4-30
Remote Log Configuration 4-31
Displaying Log Messages 4-33
Sending Simple Mail Transfer Protocol Alerts 4-33
Renumbering the Stack 4-35
Resetting the System 4-36
Setting the System Clock 4-36
Setting the Current Time 4-37
Configuring SNTP 4-37
Setting the Time Zone 4-39
Configuring Summer Time 4-40
Chapter 5: Simple Network Management Protocol 5-1
Enabling the SNMP Agent 5-2
Setting Community Access Strings 5-3
Specifying Trap Managers and Trap Types 5-4
Configuring SNMPv3 Management Access 5-7
Setting a Local Engine ID 5-7
Specifying a Remote Engine ID 5-8
Configuring SNMPv3 Users 5-9
Configuring Remote SNMPv3 Users 5-11
Configuring SNMPv3 Groups 5-13
Setting SNMPv3 Views 5-17

Contents
v
Chapter 6: User Authentication 6-1
Configuring User Accounts 6-1
Configuring Local/Remote Logon Authentication 6-2
Configuring HTTPS 6-5
Replacing the Default Secure-site Certificate 6-7
Configuring the Secure Shell 6-8
Generating the Host Key Pair 6-10
Importing User Public Keys 6-12
Configuring the SSH Server 6-14
Configuring Port Security 6-16
Configuring 802.1X Port Authentication 6-18
Displaying 802.1X Global Settings 6-19
Configuring 802.1X Global Settings 6-20
Configuring Port Settings for 802.1X 6-20
Displaying 802.1X Statistics 6-24
Filtering IP Addresses for Management Access 6-26
Chapter 7: Access Control Lists 7-1
Configuring Access Control Lists 7-1
Setting the ACL Name and Type 7-1
Configuring a Standard IPv4 ACL 7-2
Configuring an Extended IPv4 ACL 7-3
Configuring a MAC ACL 7-6
Configuring a Standard IPv6 ACL 7-7
Configuring an Extended IPv6 ACL 7-8
Binding a Port to an Access Control List 7-11
Chapter 8: Port Configuration 8-1
Displaying Connection Status 8-1
Configuring Interface Connections 8-3
Creating Trunk Groups 8-6
Statically Configuring a Trunk 8-7
Enabling LACP on Selected Ports 8-8
Configuring LACP Parameters 8-10
Displaying LACP Port Counters 8-13
Displaying LACP Settings and Status for the Local Side 8-14
Displaying LACP Settings and Status for the Remote Side 8-16
Setting Broadcast Storm Thresholds 8-17
Configuring Port Mirroring 8-19
Configuring Rate Limits 8-20
Showing Port Statistics 8-22
Chapter 9: Address Table Settings 9-1
Setting Static Addresses 9-1
Displaying the Address Table 9-2
Changing the Aging Time 9-4

Contents
vi
Chapter 10: Spanning Tree Algorithm 10-1
Displaying Global Settings 10-3
Configuring Global Settings 10-6
Displaying Interface Settings 10-10
Configuring Interface Settings 10-13
Configuring Multiple Spanning Trees 10-16
Displaying Interface Settings for MSTP 10-19
Configuring Interface Settings for MSTP 10-20
Chapter 11: VLAN Configuration 11-1
IEEE 802.1Q VLANs 11-1
Enabling or Disabling GVRP (Global Setting) 11-4
Displaying Basic VLAN Information 11-4
Displaying Current VLANs 11-5
Creating VLANs 11-6
Adding Static Members to VLANs (VLAN Index) 11-7
Adding Static Members to VLANs (Port Index) 11-9
Configuring VLAN Behavior for Interfaces 11-10
Configuring IEEE 802.1Q Tunneling 11-12
Enabling QinQ Tunneling on the Switch 11-16
Adding an Interface to a QinQ Tunnel 11-17
Configuring Private VLANs 11-18
Enabling Private VLANs 11-19
Configuring Uplink and Downlink Ports 11-19
Configuring Protocol-Based VLANs 11-20
Configuring Protocol Groups 11-20
Mapping Protocols to VLANs 11-21
Chapter 12: Link Layer Discovery Protocol 12-1
Setting Basic LLDP Timing Attributes 12-1
Configuring LLDP Interface Attributes 12-3
Displaying LLDP Local Device Information 12-5
Displaying LLDP Remote Port Information 12-8
Displaying LLDP Remote Information Details 12-9
Displaying Device Statistics 12-11
Displaying Detailed Device Statistics 12-13
Chapter 13: Class of Service 13-1
Layer 2 Queue Settings 13-1
Setting the Default Priority for Interfaces 13-1
Mapping CoS Values to Egress Queues 13-3
Selecting the Queue Mode 13-5
Setting the Service Weight for Traffic Classes 13-6
Layer 3/4 Priority Settings 13-7
Mapping Layer 3/4 Priorities to CoS Values 13-7
Selecting IP Precedence/DSCP Priority 13-7