ELTEX MES3108 User manual

MES3000
MES3108, MES3108F, MES3116, MES3116F,
MES3124, MES3124F, MES3224, MES3224F
Operation Manual, firmware version 2.5.47
Backbone Switches,
Aggregation Switches

2MES3000 Ethernet switch series
Document version
Issue date
Revisions
Version 1.32
18.09.2017
Changes in chapters:
- 5.1 Basic commands
- 5.4 System management commands
- 5.10 Storm control
- 5.15.5.1 STP, RSTP configuration
- 5.29 ACL configuration (Access Control Lists)
- 5.31 Quality of Services (QOS)
Version 1.31
18.09.2017
Added chapters:
- 5.8.3 Private VLAN configuration
- 5.26 Lightweight DHCPv6 Relay Agent (LDRA)
Changes in chapters:
- 5.6.2 File operation commands
- 5.8 Interface and VLAN configuration
- 5.11 Link Aggregation Group (LAG)
- 5.15.8 G.8032v2 (ERPS) protocol configuration
- 5.15.5 STP family (STP, RSTP, MSTP)
- 5.15.12 Layer 2 Protocol Tunneling (L2PT) configuration
- 5.17.1 Multicast addressing rules
- 5.17.2 IGMP Snooping
- 5.19 Alarm log, SYSLOG protocol
- 5.24.3 DHCP management and Option 82
- 5.25 DHCP Relay features
- 5.27 PPPoE Intermediate Agent configuration
- 5.29 ACL Configuration (Access Control Lists)
- 5.31.1 QoS Configuration
Version 1.30
23.06.2016
Changes in chapters:
- 5.4 System management commands
- 5.8.2 VLAN and interfaces switching modes configuration
-5.8.3 IP interface configuration
- 5.14.1 IPv6 configuration
- 5.15.5 STP family (STP, RSTP, MSTP)
- 5.19 Alarm log, SYSLOG protocol
- 5.27 DHCP server configuration
- 5.28 IPv4 ACL configuration
- 5.30 Quality of Services (QoS)
Version 1.29
10.02.2016
Changes in chapters:
- 5.8 Interface and VLAN configuration
- 5.10 Broadcast storm control
- 5.17 Multicast addressing
- 5.18.4 Simple network management protocol (SNMP)
- 5.24.2 Port-based client authentication (IEEE 802.1x standard)
- 5.24.3 DHCP management and Option 82
- 5.24.4 Client IP address protection (IP Source Guard)
- 5.24.5 ARP management (ARP Inspection)
- 5.24.6 MAC address notification configuration
- 5.28.1 ACL configuration (Access Control Lists)
- 6.2 Software update from TFTP server
Added chapters:
- 5.12.15 Layer 2 Protocol Tunneling (L2PT) configuration
Version 1.28
15.10.2015
Changes in chapters:
- 5.17.5 IGMP Proxy multicast routing
- 5.31.3 OSPF protocol configuration
Version 1.27
1.09.2015
Changes in chapters:
- 2.2.8 Additional functions
- 5.4 System management commands
- 5.8 Interface configuration
- 5.10 Broadcast storm control
- 5.11 Link Agregation Group (LAG)
- 5.15.2 ARP protocol configuration
- 5.15.6 Flex-link function configuration
- 5.17.5 IGMP Proxy multicast routing function
- 5.18.1 ААА mechanism
- 5.20 Port mirroring (monitoring)
- 5.30.1 QoS Configuration

MES3000 Ethernet switch series 3
- 5.31.5 Configuration of Virtual Router Redundancy Protocol (VRRP)
Added chapter:
- 5.23 IP Service Level Agreements (IP SLA)
Version 1.26
03.06.2015
Changes in chapters:
- 5.15.4 Loopback detection mechanism
- 5.15.5 STP protocol family
- 5.18.2 RADIUS protocol
- 5.24.2. Port-based client authentication (802.1x standard)
- 5.23.3 DHCP protocol management and Option 82
- 5.24 DHCP Relay mediation features
Version 1.25
11.03.2015
Changes in chapters:
- 5.8.2 VLAN interface configuration
- 5.10 Broadcast storm control
- 5.17.2 IGMP snooping function
- 5.18.4 Simple network management protocol (SNMP)
- 5.23.2.2 Advanced authentication
Version 1.24
26.01.2015
Changes in chapters:
-5.6.3 Configuration backup commands
-5.24 DHCP Relay mediation features
Added chapters:
-5.15.6 Flex-link function configuration
Version 1.23
25.11.2014
Synchronized with firmware version 2.5.32.
Changes in chapters:
- 5.18.1 AAA mechanism
- 5.30.5 Configuration of Virtual Router Redundancy Protocol (VRRP)
Added chapters:
- 5.14.3 IPv6 RA guard function configuration
- 5.14.4 DHCPv6 guard function configuration
Version 1.23
25.11.2014
Synchronized with firmware version 2.5.32.
Changes in chapters:
- 5.18.1 AAA mechanism
- 5.30.5 Configuration of Virtual Router Redundancy Protocol (VRRP)
Added chapters:
- 5.14.3 IPv6 RA guard function configuration
- 5.14.4 DHCPv6 guard function configuration
Version 1.22
21.10.2014
Synchronized with firmware version 2.5.30.
Changes in chapters:
- 5.8.2 VLAN interface configuration
- 5.10 Broadcast storm control
Version 1.21
13.10.2014
Synchronized with firmware version 2.5.28.
Changes in chapters:
- 5.11 Link Aggregation Groups (LAG)
- 5.15.6 EAPS protocol
Version 1.20
26/08/2014
Synchronized with firmware version 2.5.26.
Changes in chapters:
- 5.4 System management commands
- 5.15.6 EAPS protocol
- 5.24 DHCP Relay mediation features
- 5.30.3 OSPF protocol configuration
- Appendix А: Multicast-tv configuration
Version 1.19
28/07/2014
Synchronized with firmware version 2.5.24.
Changes in chapters:
- 5.12 IPv4 addressing configuration
- 5.18.7.1 Telnet, SSH, HTTP and FTP
Added chapters:
- 5.8.3 IP interface configuration
Version 1.18
29/05/2014
Changes in chapters:
- 5.8.2 VLAN interface configuration
- 5.9 Selective Q-in-Q
- 5.30.3 OSPF protocol configuration
Added chapters:
- 5.30.4 BFD protocol configuration

4MES3000 Ethernet switch series
Version 1.17
29/04/2014
Changes in chapters:
- 5.8.1 Parameters of the Ethernet and Port-Channel interfaces
Version 1.16
01 April 2014
Changes in chapters:
- 5.22.1 Copper-wire cable diagnostics
Version 1.15
29/01/2014
Changes in chapters:
- 5.17.2 IGMP Proxy multicast routing function
Version 1.14
05/12/2013
Changes in chapters:
- 2.2 Switch functionality
Added chapters:
- 5.30.4 Virtual Router Redundancy Protocol (VRRP) configuration
Version 1.13
22/11/2013
Changes in chapters:
- 5.15.5 STP protocol family (STP, RSTP, MSTP)
- 5.8.1 Parameters of the Ethernet and Port-Channel interfaces
- 5.18.2 RADIUS protocol
- 5.20 Mirroring (monitoring) of ports
Added chapters:
- 5.2 Filtering of command line messages
Version 1.12
02/10/2013
Changes in chapters:
- 4.4.2 Switch operation in stackable mode
- 5.6 System time configuration
- 5.16.2 IGMP protocol mediation features (IGMP Snooping)
- 5.29.3 OSPF protocol configuration
Version 1.11
15/08/2013
Changes in chapters:
- 5.26.1 IPv4 ACL configuration
- 5.26.2 IPv6 ACL configuration
- 5.26.3 MAC ACL configuration
Version 1.10
18/06/2013
Added chapters:
- 5.5.3 Configuration backup commands
- 5.14.7 G.8032v2 (ERPS) protocol configuration
- 5.14.9 OAM protocol configuration
- 5.14.10 CFM protocol configuration
Changes in chapters:
- 4.1 Terminal configuration
- 5.9 Broadcast storm control
- 5.17.2 RADIUS protocol
- 5.17.3 TACACS+ protocol
- 5.17.4 SNMP network management protocol
- 5.17.1 ААА mechanism
- 5.17.7.1 Telnet, SSH, HTTP and FTP
- 5.17.7.2 Terminal configuration commands
- 5.21.2 Optical transceiver diagnostics
Version 1.9
20/03/2013
Added chapters:
- 5.17.4 Multicast traffic policing features
Changes in chapters:
- 5.17.2 IGMP protocol mediation features (IGMP Snooping)
- 5.18.1 ААА mechanism
- 5.18.7 Access configuration
- 5.23.3 DHCP protocol management and Option 82
- 5.25 PPPoE Intermediate Agent configuration
Version 1.8
06/03/2013
Changes in chapters:
- 5.3. Added description of the CPU monitoring and protection feature
configuration.
- 5.7.1. Added description of the interface load monitoring feature
configuration.
- 5.7.2. Added description of MAC-based vlan, EtherType configuration
for outgoing packets.
- 5.16.1. Added description of MAC address learning configuration in
VLAN.
- 5.16.2 IGMP protocol mediation features (IGMP Snooping).
- 5.17.4. Added description of SNMP trap messages configuration on
ports.
- 5.19. Added description of remote mirroring configuration.
- 5.22.3. Added description of DHCP Option 82 format configuration.
Added chapters:
- 5.24 PPPoE Intermediate Agent configuration.

MES3000 Ethernet switch series 5
- 5.28.3 OSPF protocol configuration.
- Appendix B. Typical network building schemes based on EAPS
protocol.
- Appendix C. Description of switch processes.
Version 1.7
27/11/2012
Changes in chapters:
- 2.3 Main specifications
- 4.4.2 Switch operation in stackable mode
- 5.10 Link Aggregation Group (LAG)
Version 1.6
10/09/2012
Changes in chapters:
- 5.21 Physical diagnostics functions
Version 1.5
24/08/2012
Added the description of MAC Address Notification function.
Changes in chapters:
- 5.5.2 File operation commands
- 7.2.1 Adding SVLAN
- 7.2.2 CVLAN substitution
Version 1.4
04/07/2012
Support for device operation in stackable mode.
Added description MES3224, MES3224F.
Version 1.3
20/12/2011
Changes in chapters:
- 5.8 Selective Q-in-Q
- 7.2 Selective-qinq configuration
Version 1.2
01/12/2011
Added description of EAPS protocol configuration. Protocol supported
from the version 2.1.12
Version 1.1
30/08/2011
IGMP Proxy function description.
Function is supported from the firmware version 2.1.8
Version 1.0
10/06/2011
First issue.
Firmware version
2.5.47

6MES3000 Ethernet switch series
CONTENTS
1 INTRODUCTION............................................................................................................................. 10
2 PRODUCT DESCRIPTION ................................................................................................................ 11
2.1 Purpose............................................................................................................................................. 11
2.2 Switch functionality .......................................................................................................................... 11
2.2.1 Basic functions ........................................................................................................................ 11
2.2.2 Functions for MAC address processing................................................................................... 11
2.2.3 Second-layer functions of OSI model correspondence........................................................... 12
2.2.4 Third-layer functions of OSI model ......................................................................................... 14
2.2.5 QoS functions.......................................................................................................................... 14
2.2.6 Security functions ................................................................................................................... 14
2.2.7 Switch control functions ......................................................................................................... 15
2.2.8 Additional functions................................................................................................................ 16
2.3 Main specifications ........................................................................................................................... 17
2.4 Design ............................................................................................................................................... 19
2.4.1 Front panel of the device........................................................................................................ 19
2.4.2 Rear panel of the device ......................................................................................................... 21
2.4.3 Side panels of the device ........................................................................................................ 22
2.4.4 Light Indication ....................................................................................................................... 22
2.5 Delivery Package............................................................................................................................... 24
3 INSTALLATION AND CONNECTION ................................................................................................. 25
3.1 Support brackets mounting .............................................................................................................. 25
3.2 Device rack installation..................................................................................................................... 25
3.3 Power module installation................................................................................................................ 27
3.4 Connection to Power Supply ............................................................................................................ 27
3.5 SFP transceiver installation and removal ......................................................................................... 28
4 INITIAL SWITCH CONFIGURATION.................................................................................................. 29
4.1 Configuring the Terminal .................................................................................................................. 29
4.2 Turning on the device ....................................................................................................................... 29
4.3 Startup menu.................................................................................................................................... 30
4.4 Switch operation modes................................................................................................................... 31
4.4.1 Switch operation mode selection ........................................................................................... 31
4.4.2 Switch operation in stackable mode....................................................................................... 31
4.5 Switch function configuration .......................................................................................................... 33
4.5.1 Basic switch configuration ...................................................................................................... 33
4.5.2 Security system configuration ................................................................................................ 36
4.5.3 Banner configuration .............................................................................................................. 37
5 DEVICE MANAGEMENT COMMAND LINE INTERFACE...................................................................... 38
5.1 Basic commands ............................................................................................................................... 38
5.2 Filtering of command line messages ................................................................................................ 40
5.3 Macrocommand configuration......................................................................................................... 41
5.4 System management commands ..................................................................................................... 42
5.5 Commands for configuration of password parameters ................................................................... 46
5.6 File operations .................................................................................................................................. 47
5.6.1 Command parameters description ......................................................................................... 47
5.6.2 File operation commands ....................................................................................................... 48
5.6.3 Configuration backup commands ........................................................................................... 50
5.6.4 Automatic update and configuration commands................................................................... 50
5.7 System time configuration................................................................................................................ 52
5.8 Interface and VLAN configuration .................................................................................................... 55
5.8.1 Ethernet and Port-Channel interface parameters configuration ........................................... 56
5.8.2 VLAN and interfaces switching modes configuration............................................................. 63
5.8.3 Private VLAN configuration..................................................................................................... 70

MES3000 Ethernet switch series 7
5.8.4 IP interface configuration ........................................................................................................73
5.9 Selective Q-in-Q.................................................................................................................................73
5.10 Storm control.....................................................................................................................................75
5.11 Link Aggregation Groups (LAG) .........................................................................................................76
5.11.1 Static link aggregation groups ..............................................................................................77
5.11.2 Link aggregation Control Protocol........................................................................................78
5.12 IPv4 addressing configuration ...........................................................................................................79
5.13 Green Ethernet configuration ...........................................................................................................81
5.14 IPv6 addressing configuration ...........................................................................................................82
5.14.1 IPv6 protocol.........................................................................................................................82
5.14.2 IPv6 protocol tunnelling (ISATAP).........................................................................................85
5.14.3 IPv6 RA guard configuration .................................................................................................87
5.14.4 DHCPv6 guard configuration ................................................................................................87
5.15 Protocol configuration.......................................................................................................................88
5.15.1 DNS protocol configuration ..................................................................................................88
5.15.2 ARP configuration .................................................................................................................89
5.15.3 GVRP protocol configuration................................................................................................91
5.15.4 Loopback detection mechanism (loopback-detection)........................................................93
5.15.5 STP family (STP, RSTP, MSTP) ...............................................................................................94
5.15.6 Flex-link configuration ........................................................................................................100
5.15.7 EAPS protocol .....................................................................................................................101
5.15.8 G.8032v2 (ERPS) protocol configuration ............................................................................102
5.15.9 LLDP protocol configuration ...............................................................................................103
5.15.10OAM protocol configuration...............................................................................................108
5.15.11CFM protocol configuration................................................................................................111
5.15.12Layer 2 Protocol Tunneling (L2PT) function configuration.................................................114
5.16 Voice VLAN ......................................................................................................................................117
5.17 Multicast addressing .......................................................................................................................118
5.17.1 Multicast addressing rules..................................................................................................118
5.17.2 IGMP snooping ...................................................................................................................124
5.17.3 MLD Snooping—multicast traffic control protocol for IPv6 networks...............................127
5.17.4 Multicast traffic restriction functions.................................................................................129
5.17.5 IGMP Proxy multicast routing.............................................................................................131
5.18 Control functions.............................................................................................................................133
5.18.1 AAA mechanism..................................................................................................................133
5.18.2 RADIUS protocol .................................................................................................................137
5.18.3 TACACS+ protocol...............................................................................................................139
5.18.4 Simple network management protocol (SNMP) ................................................................140
5.18.5 Remote network monitoring protocol (RMON) .................................................................144
5.18.6 Access Lists (ACL) for device management.........................................................................150
5.18.7 Access configuration...........................................................................................................152
5.19 Alarm log, SYSLOG protocol.............................................................................................................155
5.20 Port mirroring (monitoring).............................................................................................................157
5.21 SFlow function .................................................................................................................................159
5.22 Physical layer diagnostics functions ................................................................................................160
5.22.1 Copper-wire cable diagnostics............................................................................................160
5.22.2 Optical transceiver diagnostics...........................................................................................162
5.23 IP Service Level Agreements (IP SLA)...............................................................................................165
5.23.1 ICMP Echo operation..........................................................................................................166
5.23.2 UDP Jitter operation ...........................................................................................................167
5.24 Security functions............................................................................................................................170
5.24.1 Port security functions........................................................................................................170
5.24.2 Port-based client authentication (IEEE 802.1x standard)...................................................171
5.24.3 DHCP protocol management and Option 82......................................................................179

8MES3000 Ethernet switch series
5.24.4 Client IP address protection (IP-source Guard) ................................................................. 183
5.24.5 ARP management (ARP Inspection)................................................................................... 185
5.24.6 MAC Address Notification configuration........................................................................... 187
5.25 DHCP Relay mediation features...................................................................................................... 189
5.26 Lightweight DHCPv6 Relay Agent (LDRA) functions ....................................................................... 191
5.27 PPPoE Intermediate Agent configuration....................................................................................... 192
5.28 DHCP server configuration ............................................................................................................. 194
5.29 ACL Configuration (Access Control Lists) ........................................................................................ 197
5.29.1 IPv4 ACL configuration....................................................................................................... 199
5.29.2 IPv6 ACL Configuration ...................................................................................................... 202
5.29.3 MAC ACL Configuration ..................................................................................................... 205
5.30 Configuration of Protection from DoS Attacks ............................................................................... 207
5.31 Quality of Services (QoS) ................................................................................................................ 208
5.31.1 QoS Configuration.............................................................................................................. 208
5.31.2 QoS Statistics ..................................................................................................................... 216
5.32 Configuration of routing protocol .................................................................................................. 217
5.32.1 Static routing configuration............................................................................................... 217
5.32.2 RIP Configuration ............................................................................................................... 219
5.32.3 OSPF Protocol Configuration ............................................................................................. 221
5.32.4 BFD protocol configuration................................................................................................ 223
5.32.5 Configuration of Virtual Router Redundancy Protocol (VRRP).......................................... 224
6 SERVICE MENU, CHANGE OF SOFTWARE.......................................................................................227
6.1 Startup Menu.................................................................................................................................. 227
6.2 Update of software from TFTP server ............................................................................................ 228
6.2.1 System software update ....................................................................................................... 229
6.2.2 Update of loading file of the device (initial loader) .............................................................. 230
APPENDIX A SAMPLES OF USE AND CONFIGURATION OF DEVICE .......................................................232
APPENDIX B TYPICAL NETWORKS TOPOLOGIES BASED ON EAPS.........................................................238
APPENDIX C DESCRIPTION OF SWITCH PROCESSES.............................................................................240

MES3000 Ethernet switch series 9
SYMBOLS
Value
Description
[ ]
In the command line, optional parameters are shown in square brackets;
when entered, they provide additional options.
{}
In the command line, mandatory parameters are shown in curly braces.
Choose one of the listed parameters.
","
"-"
In the description of the command, these signs are used for defining ranges.
"|"
In the description of the command, this sign means 'or'.
"/"
In the description of the command, this sign indicates the default value
Calibri italic
Variables and parameters that should be replaced with the appropriate word
or string are written in Calibri Italic.
Semibold font
Notes and warnings are written in bold font.
<Semibold italic>
Keyboard keys are written in bold italic and enclosed in angle brackets.
Courier New
Examples of command entry are written in Courier New bold.
Courier New
Results of command execution are written in Courier New font in a frame
with the shadow border.
Notes and warnings
Notes contain important information, tips or recommendations on device operation and
setup.
Warnings are used to inform the user about harmful situations for the device and the
user alike, which could cause malfunction or data loss.

10 MES3000 Ethernet switch series
1INTRODUCTION
In the last few years, more and more large-scale projects are utilizing NGN concept for
communication network development. One of the main tasks in implementation of large multiservice
networks is the creation of reliable high-performance transport network, that will serve as a backbone in
multilayer architecture of next-generation networks.
For delivering high transfer rates, Gigabit Ethernet (GE) and 10Gigabit Ethernet (10GE) data transfer
technologies are widely used. High-speed data transmission, especially in large-scale networks, requires a
network topology that will allow flexible distribution of high-speed data flows.
MES3000 series switches could be used in large enterprise networks, SMB networks and operator's
networks. They provide high performance, flexibility, security and multi-tier QoS in conjunction with high
reliability provided by the backup of nodes, that enable fail-over operation—power modules and
ventilation modules.
Design versions of MES3000 series switches:
MES3124 24x10/100/1000Base-T ports, 4x10GBaseX(SFP+) or 1000Base-X(SFP) ports;
MES3124F 20x1000Base-X(SFP) ports, 4x10/100/1000Base-T/1000Base-X (SFP) combo ports,
4x10GBase-X (SFP+) or 1000Base-X (SFP) ports;
MES3116 16x10/100/1000Base-T ports, 2x10GBaseX (SFP+) or 1000Base-X (SFP) ports
MES3116F 12x1000Base-X (SFP) ports, 4x10/100/1000Base-T/1000Base-X (SFP) combo ports,
2x10GBase-X (SFP+) or 1000Base-X (SFP) ports;
MES3108 8x10/100/1000Base-T ports, 2x10GBaseX (SFP+) or 1000Base-X (SFP) ports;
MES3108F 4x1000Base-X (SFP) ports, 4x10/100/1000Base-T/1000Base-X (SFP) combo ports,
2x10GBase-X (SFP+) or 1000Base-X (SFP) ports;
MES3224 24x10/100/1000Base-T ports, 2x10GBaseX (SFP+) or 1000Base-X (SFP) ports,
2x10GBase-LR/ER/ZR (XFP) ports;
MES3224F 20x1000Base-X (SFP) ports, 4x10/100/1000Base-T/1000Base-X (SFP) combo ports,
2x10GBase-X (SFP+) or 1000Base-X (SFP) ports, 2x10GBase-LR/ER/ZR (XFP) ports.
This operation manual describes intended use, specifications, first time setup recommendations,
and the syntax of commands used for configuration, monitoring and firmware update of the switch.