iPECS ES-3052G User manual

U SER G UIDE
iPECS is an Ericsson-LG Brand
Please read this manual carefully before
operating your set. Retain it for future reference.
ES-3052G / ES-3052GP
User Manual

U SER M ANUAL
ES-3052 Series
ES-3052G MANAGED 52-PORT GE SWITCH
Layer 2 Managed Switch
with 48 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit SFP Ports
ES-3052GP MANAGED 52-PORT GE POE SWITCH
Layer 2 Managed Switch
with 48 10/100/1000BASE-T (RJ-45) PoE Ports,
and 4 Gigabit SFP Ports
ES-3052G
ES-3052GP
E042013/ST-R01
149100000226A

– 3 –
ES-3052 Series
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate and use the
management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP), and Simple Network Management
Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this guide to show
information:
N OTE : Emphasizes important information or calls your attention to related
features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
NOTICE OF CHANGES Ericsson-LG reserves the right to change specifications at any time without
notice.
RELATED PUBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how to
install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.

A BOUT T HIS G UIDE
– 4 –
ES-3052 Series
REVISION HISTORY This section summarizes the changes in each revision of this guide.
APRIL 2013 REVISION
This is the first version of this guide. This guide is valid for software release
v1.2.16.0.

– 5 –
ES-3052 Series
CONTENTS
ABOUT THIS GUIDE 3
CONTENTS 5
FIGURES 31
TABLES 41
SECTION I GETTING STARTED 47
1INTRODUCTION 49
Key Features 49
Description of Software Features 50
System Defaults 54
2INITIAL SWITCH CONFIGURATION 57
Connecting to the Switch 57
Configuration Options 57
Required Connections 58
Remote Connections 59
Basic Configuration 60
Console Connection 60
Setting Passwords 60
Setting an IP Address 61
Downloading a Configuration File Referenced by a DHCP Server 67
Enabling SNMP Management Access 69
Managing System Files 71
Saving or Restoring Configuration Settings 72
SECTION II WEB CONFIGURATION 75
3USING THE WEB INTERFACE 77
Connecting to the Web Interface 77

C ONTENTS
– 6 –
ES-3052 Series
Navigating the Web Browser Interface 78
Home Page 78
Configuration Options 79
Panel Display 79
Showing Status Information 80
Main Menu 81
4BASIC MANAGEMENT TASKS 95
Displaying System Information 95
Displaying Switch Hardware/Software Versions 97
Configuring Support for Jumbo Frames 98
Displaying Bridge Extension Capabilities 99
Managing System Files 101
Copying Files via FTP/TFTP or HTTP 101
Saving the Running Configuration to a Local File 103
Setting The Start-Up File 104
Showing System Files 104
Automatic Operation Code Upgrade 105
Setting the System Clock 110
Setting the Time Manually 110
Setting the SNTP Polling Interval 111
Specifying SNTP Time Servers 112
Setting the Time Zone 113
Configuring Summer Time 114
Configuring the Console Port 116
Configuring Telnet Settings 118
Displaying CPU Utilization 120
Displaying Memory Utilization 121
Resetting the System 121
5INTERFACE CONFIGURATION 127
Port Configuration 127
Configuring by Port List 127
Configuring by Port Range 130
Displaying Connection Status 131
Configuring Local Port Mirroring 132
Configuring Remote Port Mirroring 134
Showing Port or Trunk Statistics 138

C ONTENTS
– 7 –
ES-3052 Series
Performing Cable Diagnostics 142
Trunk Configuration 144
Configuring a Static Trunk 145
Configuring a Dynamic Trunk 148
Displaying LACP Port Counters 153
Displaying LACP Settings and Status for the Local Side 154
Displaying LACP Settings and Status for the Remote Side 156
Configuring Trunk Mirroring 158
Saving Power 160
Traffic Segmentation 162
Enabling Traffic Segmentation 162
Configuring Uplink and Downlink Ports 163
VLAN Trunking 164
6 VLAN CONFIGURATION 167
IEEE 802.1Q VLANs 167
Configuring VLAN Groups 170
Adding Static Members to VLANs 171
Configuring Dynamic VLAN Registration 176
IEEE 802.1Q Tunneling 180
Enabling QinQ Tunneling on the Switch 184
Adding an Interface to a QinQ Tunnel 185
Protocol VLANs 187
Configuring Protocol VLAN Groups 187
Mapping Protocol Groups to Interfaces 189
Configuring IP Subnet VLANs 191
Configuring MAC-based VLANs 193
Configuring VLAN Mirroring 195
7ADDRESS TABLE SETTINGS 197
Setting Static Addresses 197
Changing the Aging Time 199
Displaying the Dynamic Address Table 200
Clearing the Dynamic Address Table 201
Configuring MAC Address Mirroring 202
8SPANNING TREE ALGORITHM 205
Overview 205
Configuring Loopback Detection 208

C ONTENTS
– 8 –
ES-3052 Series
Configuring Global Settings for STA 209
Displaying Global Settings for STA 215
Configuring Interface Settings for STA 216
Displaying Interface Settings for STA 220
Configuring Multiple Spanning Trees 222
Configuring Interface Settings for MSTP 226
9CONGESTION CONTROL 229
Rate Limiting 229
Storm Control 231
Automatic Traffic Control 234
Setting the ATC Timers 235
Configuring ATC Thresholds and Responses 237
10 CLASS OF SERVICE 241
Layer 2 Queue Settings 241
Setting the Default Priority for Interfaces 241
Selecting the Queue Mode 242
Mapping CoS Values to Egress Queues 245
Layer 3/4 Priority Settings 248
Setting Priority Processing to DSCP or CoS 248
Mapping Ingress DSCP Values to Internal DSCP Values 249
Mapping CoS Priorities to Internal DSCP Values 252
11 QUALITY OF SERVICE 255
Overview 255
Configuring a Class Map 256
Creating QoS Policies 259
Attaching a Policy Map to a Port 269
12 VOIP TRAFFIC CONFIGURATION 271
Overview 271
Configuring VoIP Traffic 272
Configuring Telephony OUI 273
Configuring VoIP Traffic Ports 275
13 SECURITY MEASURES 279
AAA Authorization and Accounting 280
Configuring Local/Remote Logon Authentication 281
Configuring Remote Logon Authentication Servers 282
Configuring AAA Accounting 287

C ONTENTS
– 9 –
ES-3052 Series
Configuring AAA Authorization 292
Configuring User Accounts 296
Web Authentication 298
Configuring Global Settings for Web Authentication 298
Configuring Interface Settings for Web Authentication 299
Network Access (MAC Address Authentication) 300
Configuring Global Settings for Network Access 303
Configuring Network Access for Ports 304
Configuring Port Link Detection 306
Configuring a MAC Address Filter 307
Displaying Secure MAC Address Information 309
Configuring HTTPS 311
Configuring Global Settings for HTTPS 311
Replacing the Default Secure-site Certificate 312
Configuring the Secure Shell 314
Configuring the SSH Server 317
Generating the Host Key Pair 318
Importing User Public Keys 320
Access Control Lists 322
Showing TCAM Utilization 323
Setting the ACL Name and Type 324
Configuring a Standard IPv4 ACL 326
Configuring an Extended IPv4 ACL 327
Configuring a Standard IPv6 ACL 331
Configuring an Extended IPv6 ACL 333
Configuring a MAC ACL 335
Configuring an ARP ACL 337
Binding a Port to an Access Control List 339
ARP Inspection 340
Configuring Global Settings for ARP Inspection 341
Configuring VLAN Settings for ARP Inspection 343
Configuring Interface Settings for ARP Inspection 345
Displaying ARP Inspection Statistics 346
Displaying the ARP Inspection Log 348
Filtering IP Addresses for Management Access 349
Configuring Port Security 351

C ONTENTS
– 10 –
ES-3052 Series
Configuring 802.1X Port Authentication 353
Configuring 802.1X Global Settings 355
Configuring Port Authenticator Settings for 802.1X 356
Configuring Port Supplicant Settings for 802.1X 361
Displaying 802.1X Statistics 363
IP Source Guard 365
Configuring Ports for IP Source Guard 365
Configuring Static Bindings for IP Source Guard 367
Displaying Information for Dynamic IP Source Guard Bindings 369
DHCP Snooping 370
DHCP Snooping Configuration 373
DHCP Snooping VLAN Configuration 374
Configuring Ports for DHCP Snooping 375
Displaying DHCP Snooping Binding Information 376
DoS Protection 377
14 BASIC ADMINISTRATION PROTOCOLS 379
Configuring Event Logging 379
System Log Configuration 379
Remote Log Configuration 382
Sending Simple Mail Transfer Protocol Alerts 383
Link Layer Discovery Protocol 387
Setting LLDP Timing Attributes 387
Configuring LLDP Interface Attributes 389
Configuring LLDP Interface Civic-Address 393
Displaying LLDP Local Device Information 396
Displaying LLDP Remote Port Information 399
Displaying Device Statistics 404
Power Over Ethernet 406
Displaying the Switch’s Overall PoE Power Budget 407
Setting The Port PoE Power Budget 408
Simple Network Management Protocol 410
Configuring Global Settings for SNMP 412
Setting the Local Engine ID 413
Specifying a Remote Engine ID 414
Setting SNMPv3 Views 416
Configuring SNMPv3 Groups 419