ELTEX MES53xx User manual

MES53xx, MES33xx, MES23xx
Operation Manual, Firmware Version 4.0.4
Backbone Switches, Aggregation Switches, Access Switches

MES53xx, MES33xx, MES23xx Ethernet Switch Series 2
Document Version
Issue Date
Revisions
Version 1.4
09.09.2016
Chapter added:
2.4 Design –MES2308 Switch description is added
5.8 Configuring ‘time-range’ intervals
5.15.8 Configuring OAM protocol
5.17.4 Function of the multicast traffic limitation
5.24 Power supply via Ethernet (PoE) lines
5.27 Configuring PPPoE Intermediate Agent
Changes in sections:
2.3 The main technical specification
5.4 System control commands
5.7 System time configuration
5.8 Configuring interfaces
5.12 IPv4-addressing configuration
5.15.5 STP (STP, RSTP, MSTP)
5.17.1 Rules of multicast addressing
5.17.2 Agent function of IGMP (IGMP Snooping)
5.19.1 AAA mechanism
5.19.2 RADIUS protocol
5.19.4 TACACS+ protocol
5.19.5 SNMP
Version 1.3
22.07.2016
Chapter added:
5.15.6 Configuring G.8032v2 (ERPS)
Changes in sections:
2.2.3 L2 functions of the OSI model
5.4 Command of system control
5.8.2 VLAN interface configuration
5.19.1 AAA mechanism
5.19.8.1 Telnet, SSH, HTTP and FTP
5.20 Error log, SYSLOG protocol
5.27 ACL configuration (Access Control List)
Version 1.2
25.05.2016
Chapter added:
2.3 Main Specifications
2.4 MES2348B Switch Design
Version 1.1
12.05.2016
Chapter added:
2.3 Main Specifications
2.4 MES3324 and MES2324 Switch Design
Chapter deleted:
5.14.2 IPv6 Protocol Tunnelling (ISATAP)
Version 1.0
25.03.2016
First issue
Firmware Version
4.0.4

MES53xx, MES33xx, MES23xx Ethernet Switch Series 3
CONTENTS
1 INTRODUCTION ...........................................................................................................................................7
2 PRODUCT DESCRIPTION ..............................................................................................................................8
2.1 Purpose................................................................................................................................................8
2.2 Switch Features ...................................................................................................................................8
2.2.1 Basic Features ............................................................................................................................8
2.2.2 MAC address processing features .............................................................................................8
2.2.3 Layer 2 Protocol Tunneling (L2PT) Features ..............................................................................9
2.2.4 Layer 3 Protocol Tunneling (L3PT) Features ............................................................................11
2.2.5 QoS Features............................................................................................................................11
2.2.6 Security features......................................................................................................................12
2.2.7 Switch Control Features...........................................................................................................12
2.2.8 Additional Features..................................................................................................................14
2.3 Main specifications............................................................................................................................14
2.4 Design ................................................................................................................................................18
2.4.1 Appearance and description of the front panel of MES53xx, MES33xx, MES23xx switches. .18
2.5 Rear panel of the device....................................................................................................................23
2.5.1 Side panels of the device .........................................................................................................25
2.5.2 Light Indication ........................................................................................................................25
2.6 Delivery Package................................................................................................................................27
3 INSTALLATION AND CONNECTION............................................................................................................28
3.1 Support brackets mounting...............................................................................................................28
3.2 Device rack installation......................................................................................................................28
3.3 Power module installation ................................................................................................................30
3.4 Connection to power supply .............................................................................................................30
3.5 Battery connection to MES2324B, MES2324FB, MES2348B.............................................................31
3.6 SFP transceiver installation and removal ..........................................................................................31
4 INITIAL SWITCH CONFIGURATION.............................................................................................................33
4.1 Configuring the Terminal...................................................................................................................33
4.2 Turning on the device........................................................................................................................33
4.3 Startup menu.....................................................................................................................................34
4.4 Switch operation modes....................................................................................................................34
4.4.1 Switch operation in stacking mode .........................................................................................34
4.5 Switch function configuration ...........................................................................................................36
4.5.1 Basic switch configuration.......................................................................................................36
4.5.2 Security system configuration .................................................................................................39
4.5.3 Banner configuration...............................................................................................................40
5 DEVICE MANAGEMENT. COMMAND LINE INTERFACE .............................................................................41
5.1 Basic commands ................................................................................................................................41
5.2 Filtering command line messages .....................................................................................................43
5.3 Macrocommand configuration..........................................................................................................43
5.4 System management commands ......................................................................................................44
5.5 Password parameters configuration commands ..............................................................................48
5.6 File operations...................................................................................................................................49
5.6.1 Command parameters description..........................................................................................49
5.6.2 File operation commands ........................................................................................................49
5.6.3 Automatic update and configuration commands....................................................................51
5.7 System time configuration ................................................................................................................52
5.8 Configuring time ranges ....................................................................................................................56
5.9 Interface configuration......................................................................................................................56
5.9.1 Ethernet, Port-Channel and Loopback interface parameters .................................................56
5.9.2 VLAN interface configuration ..................................................................................................65

MES53xx, MES33xx, MES23xx Ethernet Switch Series 4
5.10 Selective Q-in-Q ................................................................................................................................ 71
5.11 Broadcast Storm Control .................................................................................................................. 72
5.12 Link Aggregation Groups (LAG)......................................................................................................... 73
5.12.1 Static link aggregation groups.............................................................................................. 74
5.12.2 LACP link aggregation protocol............................................................................................ 75
5.13 IPv4 addressing configuration .......................................................................................................... 76
5.14 Green Ethernet configuration........................................................................................................... 77
5.15 IPv6 addressing configuration .......................................................................................................... 79
5.15.1 IPv6 protocol........................................................................................................................ 79
5.16 Protocol configuration...................................................................................................................... 82
5.16.1 DNS configuration................................................................................................................ 82
5.16.2 ARP configuration ................................................................................................................ 83
5.16.3 GVRP configuration.............................................................................................................. 84
5.16.4 Loopback detection mechanism.......................................................................................... 85
5.16.5 STP family (STP, RSTP, MSTP) .............................................................................................. 86
5.16.6 G.8032v2 (ERPS) protocol configuration ............................................................................. 92
5.16.7 LLDP configuration............................................................................................................... 94
5.16.8 OAM protocol configuration................................................................................................ 99
7.1 Voice VLAN...................................................................................................................................... 102
7.2 Multicast addressing....................................................................................................................... 103
7.2.1 Multicast addressing rules .................................................................................................... 103
7.2.2 IGMP snooping function ....................................................................................................... 108
7.2.3 MLD snooping is a multicast traffic control protocol for IPv6 networks.............................. 111
7.2.4 Multicast-traffic restriction................................................................................................... 113
7.2.5 IGMP Proxy multicast routing function................................................................................. 115
7.3 Multicast routing. PIM protocol ..................................................................................................... 116
7.4 Control functions ............................................................................................................................ 119
7.4.1 AAA mechanism .................................................................................................................... 119
7.4.2 RADIUS .................................................................................................................................. 123
7.4.4 TACACS+................................................................................................................................ 125
7.4.5 Simple network management protocol (SNMP)................................................................... 126
7.4.6 Remote network monitoring protocol (RMON).................................................................... 129
7.4.7 ACL access lists for device management .............................................................................. 136
7.4.8 Access configuration ............................................................................................................. 137
7.5 Alarm log, SYSLOG protocol............................................................................................................ 141
7.6 Port mirroring (monitoring)............................................................................................................ 143
8.1 sFlow function................................................................................................................................. 144
8.2 Physical layer diagnostics functions ............................................................................................... 146
8.2.1 Copper-wire cable diagnostics.............................................................................................. 146
8.2.2 Optical transceiver diagnostics ............................................................................................. 147
8.3 Power supply via Ethernet (PoE) lines............................................................................................ 148
11.1 Security functions ........................................................................................................................... 151
11.1.1 Port security functions....................................................................................................... 151
11.1.2 Port-based client authentication (802.1x standard).......................................................... 153
11.1.3 DHCP management and Option 82.................................................................................... 159
11.1.4 Client IP address protection (IP Source Guard) ................................................................. 162
11.1.5 ARP Inspection ................................................................................................................... 164
11.2 DHCP Relay features ....................................................................................................................... 166
11.1 PPPoE Intermediate Agent (PPPoEIA) configuration...................................................................... 167
11.2 DHCP Server Configuration............................................................................................................. 169
11.3 ACL Configuration ........................................................................................................................... 172
11.3.1 IPv4-based ACL Configuration............................................................................................ 174
11.3.2 IPv6 ACL Configuration ...................................................................................................... 177

MES53xx, MES33xx, MES23xx Ethernet Switch Series 5
11.3.3 MAC-based ACL Configuration ...........................................................................................179
11.4 DoS attack protection configuration ...............................................................................................180
11.5 Quality of Services (QoS) .................................................................................................................181
11.5.1 QoS Configuration ..............................................................................................................181
11.5.2 QoS Statistics ......................................................................................................................187
11.6 Routing protocol configuration .......................................................................................................188
11.6.1 Static Routing Configuration...............................................................................................188
11.6.2 RIP Configuration................................................................................................................189
11.6.3 OSPF and OSPFv3 configuration .........................................................................................191
11.6.4 Configuration of Virtual Router Redundancy Protocol (VRRP)...........................................196
12 SERVICE MENU, CHANGE OF FIRMWARE................................................................................................198
12.1 Startup Menu...................................................................................................................................198
12.2 Updating firmware from TFTP server..............................................................................................198
12.2.1 System firmware update ....................................................................................................198
APPENDIX A. EXAMPLE OF DEVICE USAGE AND CONFIGURATION..............................................................201
APPENDIX B. CONSOLE CABLE......................................................................................................................205
APPENDIX C. SUPPORTED ETHERTYPE VALUES............................................................................................206

MES53xx, MES33xx, MES23xx Ethernet Switch Series 6
LEGEND
Label
Description
[ ]
Square brackets are used to indicate optional parameters in the command
line; when entered, they provide additional options.
{}
Curly brackets are used to indicate mandatory parameters in the command
line. You need to choose one of them.

-
In the command description, these characters are used to define ranges.

In the command description, this character means 'or'.

In the command description, this character indicates the default value.
Calibri Italic
Calibri Italic is used to indicate variables and parameters that should be
replaced with an appropriate word or string.
Bold
Notes and warnings are shown in semibold.
<Bold Italic>
Keyboard keys are shown in bold italic within angle brackets.
Courier New
Command examples are shown in Courier New Bold.
Courier New
Command execution results are shown in Courier New in a frame with a
shadow border.
Notes and Warnings
Notes contain important information, tips or recommendations on device operation and
set-up.
Warnings tell the user about situations that may be harmful to the user, cause damage
to the device, malfunction or data loss.

MES53xx, MES33xx, MES23xx Ethernet Switch Series 7
1INTRODUCTION
Over the last few years, more and more large-scale projects are utilising NGN concept in
communication network development. One of the main tasks in implementing large multiservice networks
is to create reliable high-performance backbone networks for multilayer architecture of next-generation
networks.
High-speed data transmission, especially in large-scale networks, requires a network topology that
will allow flexible distribution of high-speed data flows.
MES53xx, MES33xx, MES23xx series switches can be used in large enterprise networks, SMB
networks and carrier networks. These switches deliver high performance, flexibility, security, and multi-
tier QoS. MES5324 and MES3324 switches provide better availability due to protection of nodes that
enable fail-over operation and backup of power and ventilation modules.
This operation manual describes intended use, specifications, first-time set-up recommendations,
and the syntax of commands used for configuration, monitoring and firmware update of the switches.

MES53xx, MES33xx, MES23xx Ethernet Switch Series 8
2PRODUCT DESCRIPTION
2.1 Purpose
High-performance aggregation switches MES5324 and MES3324 have 10GBASE-X, 40GBASE-X ports
and are designed to be used in carrier networks as aggregation devices and in data processing centres as
top-of-rack or end-of-row switches.
The ports support 40 Gbps (QSFP) (MES5324), 10 Gbps (SFP+) or 1 Gbps (1000BASE-X and
1000BASE-T SFP) for higher flexibility and ensure that you can gradually move to higher transfer rates.
Non-blocking switch fabric ensures correct packet processing with minimal and predictable latency at
maximum load for all types of traffic.
Front-to-back ventilation ensures efficient cooling in data processing centres.
Redundancy fans and AC or DC power supplies along with a comprehensive hardware monitoring
system ensure high reliability. The devices allow hot swapping of power and ventilation modules providing
smooth network operation.
MES2324 and MES2348 series access switches are L2+ managed switches with 24-
48x10/100/1000Base-T ports and 4x10GBase-X (SFP+)/1000Base-X (SFP) ports.
MES2308 access switches include 10x10/100/1000Base-T ports, (MES2308P –8x10/100/1000Base-T
ports supporting PoE+, and 2x10/100/1000Base-T ports), 2x1000Base-X (SFP) ports.
The switches provide end users with connection to SMB networks and carrier networks through the
Gigabit Ethernet interface.
2.2 Switch Features
2.2.1 Basic Features
Table 2.1 lists the basic administrable features of the devices of this series.
Table 2.1. Basic features of the device
Head-of-Line blocking
(HOL)
HOL blocking occurs when device output ports are overloaded with traffic coming
from input ports. It may lead to data transfer delays and packet loss.
Jumbo frames
Enables jumbo frame transmission to minimize the amount of transmitted
packets. This reduces overhead, processing time and interruptions.
Flow control
(IEEE 802.3X)
With flow control you can interconnect low-speed and high-speed devices. To
avoid buffer overrun, the low-speed device can send PAUSE packets that will force
the high-speed device to pause packet transmission.
Operation in device
stack
You can combine multiple switches in a stack. In this case, switches are considered
as a single device with shared settings. There are two stack topologies—ring and
chain. All port parameters of each stack unit can be configured from the master
switch. Device stacking allows for reducing network management efforts.
2.2.2 MAC address processing features
Table 2.2 lists MAC address processing features.

MES53xx, MES33xx, MES23xx Ethernet Switch Series 9
Table 2.2. MAC address processing features
MAC address
table
The switch creates an in-memory look-up table that maps MAC addresses and
switch port nodes.
Learning mode
When learning is not available, the incoming data on a port will be transmitted to
all other ports of the switch. Learning mode allows the switch to analyse the
frame, discover sender's MAC address and add it to the routing table. Then, if the
destination MAC address of an Ethernet frames is already in the routing table, that
frame will be sent only to the port specified in the table.
MAC Multicast support
This feature enables one-to-many and many-to-many data distribution. Thus, the
frame addressed to a multicast group will be transmitted to each port of the
group.
Automatic Aging for
MAC Addresses
If there are no packets from a device with a specific MAC address in a specific
period, the entry for this address expires and will be removed. It keeps the switch
table up to date.
Static MAC Entries
The network switch allows you to define static MAC entries that will be saved in
the routing table.
2.2.3 Layer 2 Protocol Tunneling (L2PT) Features
Table 2.3 lists Layer 2 features and special aspects (OSI Layer 2).
Table 2.3. Layer 2 feature description (OSI Layer 2)
IGMP Snooping
(Internet Group
Management Protocol)
IGMP implementation analyses the contents of IGMP packets and discovers
network devices participating in multicast groups and forwards the traffic to the
corresponding ports.
MLD Snooping
(Multicast Listener
Discovery)
MLD protocol implementation allows the device to minimize multicast IPv6 traffic.
MVR
(Multicast VLAN
Registration)
This feature can redirect multicast traffic from one VLAN to another using IGMP
messages and reduce uplink port load. Used in III-play solutions.
Broadcast Storm Control
Broadcast storm is a multiplication of broadcast messages in each host causing
their exponential growth that can lead to the network meltdown. The switches
can restrict the transfer rate for multicast and broadcast frames received and sent
by the switch.
Port Mirroring
Port mirroring is used to duplicate the traffic on monitored ports by sending
ingress or and/or egress packets to the controlling port. Switch users can define
controlled and controlling ports and select the type of traffic (ingress or egress)
that will be sent to the controlling port.
Protected ports
This feature assigns the uplink port to the switch port. This uplink port will receive
all the traffic and provide isolation from other ports (in a single switch) located in
the same broadcast domain (VLAN).
Private VLAN Edge
This feature isolates the ports in a group (in a single switch) located in the same
broadcast domain from each other, allowing traffic exchange with other ports that
are located in the same broadcast domain but do not belong to this group.

MES53xx, MES33xx, MES23xx Ethernet Switch Series 10
Private VLAN
(light version)
Enables isolation of devices located in the same broadcast domain within the
entire L2 network. Only two port operation modes are implemented—
Promiscuous and Isolated (isolated ports cannot exchange traffic).
Spanning Tree Protocol
Spanning Tree Protocol is a network protocol that ensures loop-free network
topology by converting networks with redundant links to a spanning tree topology.
Switches exchange configuration messages using frames in a specific format and
selectively enable or disable traffic transmission to ports.
IEEE 802.1w Rapid
spanning tree protocol
Rapid STP (RSTP) is the enhanced version of the STP that enables faster
convergence of a network to a spanning tree topology and provides higher
stability.
ERPS (Ethernet Ring
Protection Switching)
protocol
Protocol used for increasing stability and reliability data transmission network
having ring topology. It is realized by reducing recovery network time in case of
breakdown. Recovery time does not exceed 1 second. It is much less than
network changeover time in case of spanningtree protocols usage.
VLAN support
VLAN is a group of switch ports that form a single broadcast domain. The switch
supports various packet classification methods to identify the VLAN they belong
to.
Supporting OAM
protocol
(Operation, Administration,
and Maintenance, IEEE
802.3ah)
Ethernet OAM (Operation, Administration, and Maintenance), IEEE 802.3ah –
functions of data transmission channel level corresponds to channel status
monitor protocol. The protocol uses data blocks of OAM (OAMPDU) to transmit
information about the channel status between connected Ethernet devices. Both
devices must support standard IEEE 802.3ah.
GARP VLAN (GVRP)
GARP VLAN registration protocol dynamically add/removes VLAN groups on the
switch ports. If GVRP is enabled, the switch identifies and then distributes the
VLAN inheritance data to all ports that form the active topology.
Port Based VLAN
Distribution to VLAN groups is performed according to the ingress ports. This
solution ensures that only one VLAN group is used on each port.
802.1Q support
IEEE 802.1Q is an open standard that describes the traffic tagging procedure for
transferring VLAN inheritance information. It allows multiple VLAN groups to be
used on one port.
Link aggregation with
LACP
(Link Aggregation
Control Protocol)
The LACP enables automatic aggregation of separate links between two devices
(switch-switch or switch-server) in a single data communication channel.
The protocol constantly monitors whether link aggregation is possible; in case one
link in the aggregated channel fails, its traffic will be automatically redistributed to
functioning components of the aggregated channel.
LAG group creation
(Link Aggregation
Group)
The device allows for link group creation. Link aggregation, trunking or IEEE
802.3ad is a technology that enables aggregation of multiple physical links into
one logical link. This leads to greater bandwidth and reliability of the backbone
'switch-switch' or 'switch-server' channels. There are three types of balancing—
based on MAC addresses, IP addresses or destination port (socket).
A LAG group contains ports with the same speed operating in full-duplex mode.
Auto Voice VLAN
support
Allows you to identify voice traffic by OUI (Organizationally Unique Identifier—first
24 bits of the MAC address). If the MAC table of the switch contains a MAC
address with VoIP gateway or IP phone OUI, this port will be automatically added
to the voice VLAN (identification by SIP or the destination MAC address is not
supported).