Accton Technology ES3528M-SFP

Contents

xviii

Contents

Main Page Page Page About This Guide Page Contents Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Tables Page Page Page Figures Page Page Page 1-1 Chapter 1: Introduction Key Features Table1-1 Key Features 1-2 Description of Software Features Description of Software Features 1-3 1-4 Page 1-6 System Defaults System Defaults 1-7 Table1-2 System Defaults (Continued) 1-8 Table1-2 System Defaults (Continued) 2-1 Chapter 2: Initial Configuration Connecting to the Switch Configuration Options 2-2 Required Connections 2-3 Remote Connections Basic Configuration Console Connection 2-4 Setting Passwords Setting an IP Address Manual Configuration 2-5 Dynamic Configuration 2-6 Enabling SNMP Management Access Community Strings (for SNMP version 1 and 2c clients) 2-7 Trap Receivers 2-8 Configuring Access for SNMP Version 3 Clients Saving Configuration Settings Managing System Files 2-9 Managing System Files Page 3-1 Chapter 3: Configuring the Switch Using the Web Interface Navigating the Web Browser Interface Home Page Panel Display 3-3 Configuration Options Panel Display 3-4 Main Menu 3-5 3-6 3-7 3-8 3-9 3-10 Page 3-12 Basic Configuration Displaying System Information 3-13 Displaying Switch Hardware/Software Versions 3-14 Web Click System, Switch Information. Figure 3-4 Switch Information CLI Use the following command to display version information. 3-15 Displaying Bridge Extension Capabilities 3-16 Setting the Switchs IP Address Page 3-18 Using DHCP/BOOTP 3-19 Enabling Jumbo Frames Managing Firmware 3-20 Downloading System Software from a Server 3-21 Saving or Restoring Configuration Settings 3-22 Downloading Configuration Settings from a Server 3-23 Console Port Settings 3-24 3-25 Telnet Settings 3-26 3-27 3-28 Configuring Event Logging Displaying Log Messages System Log Configuration 3-29 3-30 Remote Log Configuration 3-31 Simple Mail Transfer Protocol 3-32 3-33 Resetting the System 3-34 Setting the System Clock Setting the Time Manually Configuring SNTP 3-35 Configuring NTP 3-36 3-37 Setting the Time Zone 3-38 Simple Network Management Protocol 3-39 Setting Community Access Strings 3-40 Specifying Trap Managers and Trap Types 3-41 Enabling SNMP Agent Status 3-42 Configuring SNMPv3 Management Access Setting the Local Engine ID 3-43 Specifying a Remote Engine ID Configuring SNMPv3 Users 3-44 Page 3-46 Configuring SNMPv3 Groups 3-47 3-48 3-49 Setting SNMPv3 Views Page 3-51 User Authentication Configuring User Accounts Page 3-53 Configuring Local/Remote Logon Authentication 3-54 Page 3-56 CLI Specify all the required parameters to enable logon authentication. 3-57 Configuring Encryption Keys 3-58 AAA Authorization and Accounting 3-59 Configuring AAA RADIUS Group Settings Configuring AAA TACACS+ Group Settings 3-60 Configuring AAA Accounting Page Page Page Page 3-65 AAA Accounting Exec Settings AAA Accounting Summary 3-66 Web Click Security, AAA, Summary. Figure 3-43 AAA Accounting Summary 3-67 Authorization Settings 3-68 Authorization EXEC Settings Authorization Summary 3-69 Configuring HTTPS 3-70 Replacing the Default Secure-site Certificate 3-71 Configuring the Secure Shell 3-72 3-73 3-74 Configuring the SSH Server 3-75 Generating the Host Key Pair 3-76 Importing User Public Keys 3-77 Page 3-79 3-80 Configuring Port Security 3-81 Configuring 802.1X Port Authentication 3-82 3-83 Displaying 802.1X Global Settings Configuring 802.1X Global Settings 3-84 Configuring Port Settings for 802.1X 3-85 3-86 3-87 Displaying 802.1X Statistics This switch can display statistics for dot1x protocol exchanges for any port. 3-88 Web Authentication 3-89 Configuring Web Authentication 3-90 Configuring Web Authentication for Ports 3-91 Displaying Web Authentication Port Information 3-92 Re-authenticating Web Authenticated Ports 3-93 Network Access MAC Address Authentication 3-94 Configuring the MAC Authentication Reauthentication Time Configuring MAC Authentication for Ports 3-95 3-96 Configuring Port Link Detection 3-97 Displaying Secure MAC Address Information 3-98 MAC Authentication Configuring MAC authentication parameters for ports 3-99 Access Control Lists 3-100 Configuring Access Control Lists Setting the ACL Name and Type 3-101 Configuring a Standard IP ACL 3-102 Configuring an Extended IP ACL 3-103 3-104 3-105 Configuring a MAC ACL 3-106 Binding a Port to an Access Control List 3-107 Filtering IP Addresses for Management Access 3-108 3-109 3-110 Port Configuration Displaying Connection Status 3-111 3-112 Configuring Interface Connections 3-113 3-114 Creating Trunk Groups 3-115 Statically Configuring a Trunk } active links statically configured 3-116 Enabling LACP on Selected Ports } } Page 3-118 Configuring LACP Parameters 3-119 3-120 You can display statistics for LACP protocol messages. Displaying LACP Port Counters 3-121 CLI The following example displays LACP counters. 3-122 Displaying LACP Settings and Status for the Local Side 3-123 Figure 3-78 LACP - Port Internal Information 3-124 Displaying LACP Settings and Status for the Remote Side 3-125 Setting Broadcast Storm Thresholds 3-126 Figure 3-80 Port Broadcast Control 3-127 Configuring Port Mirroring 3-128 Configuring Rate Limits Rate Limit Configuration 3-129 Showing Port Statistics 3-130 3-131 Page Address Table Settings 3-133 Address Table Settings Setting Static Addresses 3-134 Displaying the Address Table Page 3-136 Changing the Aging Time Spanning Tree Algorithm Configuration 3-137 x x 3-138 Displaying Global Settings 3-139 3-140 3-141 Configuring Global Settings 3-142 3-143 3-144 Displaying Interface Settings x x 3-145 3-146 3-147 Configuring Interface Settings 3-148 3-149 Configuring Multiple Spanning Trees 3-150 3-151 CLI This example sets STA attributes for port 1, followed by settings for each port. Displaying Interface Settings for MSTP 3-144 Page 3-153 Configuring Interface Settings for MSTP Displaying Interface Settings on page3-144 for addition al information.) 3-154 3-155 VLAN Configuration IEEE 802.1Q VLANs 3-156 Assigning Ports to VLANs 3-157 3-158 Forwarding Tagged/Untagged Frames Enabling or Disabling GVRP (Global Setting) 3-159 Displaying Basic VLAN Information Displaying Current VLANs 3-160 3-161 Creating VLANs 3-162 Adding Static Members to VLANs (VLAN Index) 3-163 3-164 Adding Static Members to VLANs (Port Index) 3-165 Configuring VLAN Behavior for Interfaces 3-166 3-167 Configuring IEEE 802.1Q Tunneling 3-168 3-169 3-170 Enabling QinQ Tunneling on the Switch 3-171 3-172 Adding an Interface to a QinQ Tunnel 3-173 Private VLANs 3-174 Displaying Current Private VLANs 3-175 Configuring Private VLANs 3-176 Associating VLANs 3-177 Displaying Private VLAN Interface Information 3-178 Configuring Private VLAN Interfaces 3-179 Protocol VLANs Protocol VLAN Group Configuration 3-180 Protocol VLAN System Configuration 3-181 Link Layer Discovery Protocol Setting LLDP Timing Attributes 3-182 3-183 Configuring LLDP Interface Attributes 3-184 3-185 3-186 Displaying LLDP Local Device Information 3-187 CLI This example displays LLDP information for the local switch. This example displays detailed information for a specific port on the local switch. Displaying LLDP Remote Port Information Figure 3-113 LLDP Remote Port Information 3-188 Displaying LLDP Remote Information Details 3-189 Displaying Device Statistics 3-190 Displaying Detailed Device Statistics 3-191 Class of Service Configuration Layer 2 Queue Settings Setting the Default Priority for Interfaces 3-192 Mapping CoS Values to Egress Queues 3-193 3-194 Enabling CoS 3-195 Selecting the Queue Mode Setting the Service Weight for Traffic Classes 3-196 Layer 3/4 Priority Settings Mapping Layer 3/4 Priorities to CoS Values Page 3-198 Mapping DSCP Priority 3-199 Quality of Service 3-200 Configuring Quality of Service Parameters Configuring a Class Map 3-201 Page 3-203 Creating QoS Policies 3-204 Page 3-206 Attaching a Policy Map to Ingress Queues 3-207 VoIP Traffic Configuration Configuring VoIP Traffic 3-208 Configuring VoIP Traffic Port 3-209 3-210 Configuring Telephony OUI 3-211 3-212 Multicast Filtering Layer 2 IGMP (Snooping and Query) 3-213 Configuring IGMP Snooping and Query Parameters 3-214 3-215 Enabling IGMP Immediate Leave 3-216 Displaying Interfaces Attached to a Multicast Router 3-217 Specifying Static Interfaces for a Multicast Router 3-218 Displaying Port Members of Multicast Services 3-219 Assigning Ports to Multicast Services 3-220 IGMP Filtering and Throttling 3-221 Enabling IGMP Filtering and Throttling 3-222 Configuring IGMP Filter Profiles 3-223 Configuring IGMP Filtering and Throttling for Interfaces 3-224 3-225 Multicast VLAN Registration 3-226 Configuring Global MVR Settings 3-227 Displaying MVR Interface Status 3-228 Displaying Port Members of Multicast Groups 3-229 Configuring MVR Interface Status 3-230 3-231 Assigning Static Multicast Groups to Interfaces 3-232 DHCP Snooping DHCP Snooping 3-233 DHCP Snooping Configuration DHCP Snooping VLAN Configuration 3-234 DHCP Snooping Information Option Configuration DHCP Snooping 3-235 DHCP Snooping Port Configuration 3-236 DHCP Snooping Binding Information IP Source Guard 3-237 IP Source Guard IP Source Guard Port Configuration 3-238 Static IP Source Guard Binding Configuration IP Source Guard 3-239 Dynamic IP Source Guard Binding Information 3-240 IP Clustering IP Clustering 3-241 Cluster Configuration 3-242 Cluster Member Configuration IP Clustering 3-243 Cluster Member Information Cluster Candidate Information Page UPnP 3-245 UPnP UPnP Configuration 3-246 4-1 Chapter 4: Command Line Interface Using the Command Line Interface Accessing the CLI Console Connection 4-2 Telnet Connection 4-3 Entering Commands Keywords and Arguments Minimum Abbreviation Command Completion Getting Help on Commands Page 4-5 4-6 Partial Keyword Lookup Negating the Effect of Commands Using Command History Understanding Command Modes 4-7 Exec Commands 4-8 Configuration Commands Page 4-10 Command Line Processing Command Groups 4-11 Command Groups 4-12 Line Commands 4-13 line login 4-14 password 4-15 timeout login response exec-timeout 4-16 password-thresh 4-17 silent-time databits 4-18 parity 4-19 speed stopbits 4-20 disconnect show line 4-21 General Commands enable 4-22 disable 4-23 configure show history 4-24 reload reload cancel 4-25 show reload end 4-26 exit quit 4-27 System Management Commands Device Designation Commands prompt 4-28 hostname Banner 4-29 banner configure 4-30 banner configure company 4-31 banner configure dc-power-info banner configure department 4-32 banner configure equipment-info 4-33 banner configure equipment-location banner configure ip-lan 4-34 banner configure lp-number 4-35 banner configure manager-info banner configure mux 4-36 banner configure note 4-37 show banner 4-38 User Access Commands username 4-39 enable password 4-40 IP Filter Commands management 4-41 show management 4-42 Web Server Commands ip http port ip http server 4-43 ip http secure-server 4-44 ip http secure-port 4-45 Telnet Server Commands ip telnet port ip telnet server 4-46 Secure Shell Commands 4-47 4-48 ip ssh server 4-49 ip ssh timeout ip ssh authentication-retries 4-50 ip ssh server-key size delete public-key 4-51 ip ssh crypto host-key generate ip ssh crypto zeroize 4-52 ip ssh save host-key show ip ssh 4-53 Example show ssh This command displays the current SSH server connections. Command Mode Table4-17 show ssh - display des cription 4-54 show public-key 4-55 Event Logging Commands logging on 4-56 logging history 4-57 logging host logging facility 4-58 logging trap clear logging 4-59 show logging 4-60 show log 4-61 SMTP Alert Commands logging sendmail host 4-62 logging sendmail level 4-63 logging sendmail source-email logging sendmail destination-email 4-64 logging sendmail show logging sendmail 4-65 Time Commands sntp client 4-66 sntp server 4-67 sntp poll show sntp 4-68 ntp client 4-69 ntp server 4-70 ntp poll ntp authenticate 4-71 ntp authentication-key 4-72 show ntp clock timezone-predefined 4-73 clock timezone 4-74 clock summer-time (date) 4-75 clock summer-time (predefined) 4-76 clock summer-time (recurring) 4-77 calendar set show calendar 4-78 System Status Commands show startup-config 4-79 show running-config 4-80 4-81 Example Related Commands show startup-config (4-78) 4-82 show system show users 4-83 show version 4-84 Frame Size Commands jumbo frame 4-85 Flash/File Commands copy 4-86 4-87 The following example shows how to copy the running configuration to a startup file. The following example shows how to download a configuration file: 4-88 delete 4-89 dir 4-90 whichboot boot system 4-91 Authentication Commands Authentication Sequence 4-92 authentication login 4-93 authentication enable 4-94 RADIUS Client 4-95 radius-server host radius-server acct-port 4-96 radius-server auth-port radius-server key 4-97 radius-server retransmit radius-server timeout show radius-server 4-98 TACACS+ Client tacacs-server host 4-99 tacacs-server port tacacs-server key 4-100 tacacs-server retransmit tacacs-server timeout 4-101 show tacacs-server 4-102 AAA Commands aaa group server 4-103 server aaa accounting dot1x 4-104 aaa accounting exec 4-105 aaa accounting commands 4-106 aaa accounting update 4-107 accounting dot1x accounting exec 4-108 accounting commands aaa authorization exec 4-109 authorization exec 4-110 show accounting 4-111 Port Security Commands port security 4-112 802.1X Port Authentication 4-113 dot1x system-auth-control dot1x default 4-114 dot1x max-req dot1x port-control 4-115 dot1x operation-mode dot1x re-authenticate 4-116 dot1x re-authentication dot1x timeout quiet-period 4-117 dot1x timeout re-authperiod dot1x timeout tx-period 4-118 dot1x intrusion-action show dot1x 4-119 4-120 4-121 Network Access MAC Address Authentication network-access mode 4-122 network-access max-mac-count 4-123 mac-authentication intrusion-action mac-authentication max-mac-count 4-124 network-access dynamic-qos network-access dynamic-vlan 4-125 network-access guest-vlan network-access link-detection 4-126 network-access link-detection link-down network-access link-detection link-up 4-127 network-access link-detection link-up-down mac-authentication reauth-time 4-128 clear network-access show network-access 4-129 show network-access mac-address-table 4-130 Web Authentication 4-131 web-auth login-attempts web-auth login-fail-page-url 4-132 web-auth login-page-url web-auth login-success-page-url 4-133 web-auth quiet-period web-auth session-timeout 4-134 web-auth system-auth-control web-auth 4-135 show web-auth show web-auth interface 4-136 web-auth re-authenticate (Port) web-auth re-authenticate (IP) 4-137 show web-auth summary 4-138 4-139 Access Control List Commands 4-140 IP ACLs access-list ip 4-141 permit, deny (Standard ACL) permit, deny (Extended ACL) 4-142 4-143 show ip access-list ip access-group 4-144 show ip access-group MAC ACLs 4-145 access-list mac 4-146 permit, deny (MAC ACL) 4-147 show mac access-list 4-148 mac access-group show mac access-group 4-149 ACL Information show access-list show access-group 4-150 SNMP Commands 4-151 snmp-server show snmp 4-152 snmp-server community 4-153 snmp-server contact snmp-server location 4-154 snmp-server host 4-155 4-156 snmp-server enable traps 4-157 snmp-server engine-id 4-158 show snmp engine-id 4-159 snmp-server view 4-160 show snmp view snmp-server group 4-161 show snmp group 4-162 4-163 snmp-server user 4-164 4-165 show snmp user This command shows information on SNMP users. Command Mode Example Table4-46 show snmp user - display description 4-166 Interface Commands interface 4-167 description speed-duplex 4-168 negotiation 4-169 capabilities 4-170 flowcontrol 4-171 shutdown 4-172 switchport packet-rate clear counters 4-173 show interfaces status 4-174 show interfaces counters 4-175 show interfaces switchport 4-176 Example This example shows the configuration setting for port 24. Table4-48 Interfaces Switchp ort Statistics Mirror Port Commands 4-177 Mirror Port Commands port monitor 4-178 show port monitor Rate Limit Commands 4-179 Rate Limit Commands rate-limit 4-180 Link Aggregation Commands 4-181 channel-group 4-182 lacp 4-183 lacp system-priority 4-184 lacp admin-key (Ethernet Interface) 4-185 lacp admin-key (Port Channel) 4-186 lacp port-priority show lacp 4-187 Default Setting Port Channel: all Command Mode Table4-52 show lacp count ers - display description 4-188 Table4-53 show lacp intern al - display description 4-189 Table4-54 show lacp neighb ors - display description Table4-55 show lacp sysid - display description 4-190 Address Table Commands mac-address-table static Address Table Commands 4-191 clear mac-address-table dynamic show mac-address-table 4-192 mac-address-table aging-time 4-193 show mac-address-table aging-time LLDP Commands 4-194 Table4-57 LLDP Comman ds (Continued) 4-195 lldp lldp holdtime-multiplier 4-196 lldp medFastStartCount lldp notification-interval 4-197 lldp refresh-interval 4-198 lldp reinit-delay lldp tx-delay 4-199 lldp admin-status lldp notification 4-200 lldp mednotification 4-201 lldp basic-tlv management-ip-address lldp basic-tlv port-description 4-202 lldp basic-tlv system-capabilities lldp basic-tlv system-description 4-203 lldp basic-tlv system-name lldp dot1-tlv proto-ident 4-204 lldp dot1-tlv proto-vid lldp dot1-tlv pvid 4-205 lldp dot1-tlv vlan-name lldp dot3-tlv link-agg 4-206 lldp dot3-tlv mac-phy lldp dot3-tlv max-frame 4-207 lldp dot3-tlv poe lldp medtlv extpoe 4-208 lldp medtlv inventory lldp medtlv location 4-209 lldp medtlv med-cap lldp medtlv network-policy 4-210 show lldp config 4-211 4-212 show lldp info local-device 4-213 show lldp info remote-device show lldp info statistics 4-214 UPnP Commands 4-215 UPnP Commands upnp device 4-216 upnp device ttl upnp device advertise duration 4-217 show upnp Spanning Tree Commands 4-218 spanning-tree 4-219 spanning-tree mode 4-220 spanning-tree forward-time 4-221 spanning-tree hello-time spanning-tree max-age 4-222 spanning-tree priority spanning-tree pathcost method 4-223 spanning-tree transmission-limit spanning-tree mst-configuration 4-224 mst vlan 4-225 mst priority name 4-226 revision max-hops 4-227 spanning-tree spanning-disabled spanning-tree cost 4-228 spanning-tree port-priority 4-229 spanning-tree edge-port 4-230 spanning-tree portfast 4-231 spanning-tree link-type spanning-tree loopback-detection 4-232 spanning-tree loopback-detection release-mode 4-233 spanning-tree loopback-detection trap spanning-tree mst cost 4-234 spanning-tree mst port-priority 4-235 spanning-tree protocol-migration show spanning-tree 4-236 4-237 show spanning-tree mst configuration This command shows the configuration of the multiple spanni ng tree. Command Mode 4-238 VLAN Commands GVRP and Bridge Extension Commands 4-239 bridge-ext gvrp show bridge-ext 4-240 switchport gvrp show gvrp configuration 4-241 garp timer show garp timer 4-242 Editing VLAN Groups vlan database 4-243 vlan 4-244 Configuring VLAN Interfaces interface vlan 4-245 switchport mode 4-246 switchport acceptable-frame-types switchport ingress-filtering 4-247 switchport native vlan 4-248 switchport allowed vlan 4-249 switchport forbidden vlan 4-250 Displaying VLAN Information show vlan 4-251 Configuring IEEE 802.1Q Tunneling dot1q-tunnel system-tunnel-control 4-252 switchport dot1q-tunnel mode 4-253 switchport dot1q-tunnel tpid show dot1q-tunnel 4-254 Configuring Private VLANs 4-255 4-256 private-vlan private vlan association 4-257 switchport mode private-vlan 4-258 switchport private-vlan host-association switchport private-vlan isolated 4-259 switchport private-vlan mapping show vlan private-vlan 4-260 4-261 Configuring Protocol-based VLANs protocol-vlan protocol-group (Configuring Groups) 4-262 protocol-vlan protocol-group (Configuring VLANs) 4-263 show protocol-vlan protocol-group show protocol-vlan protocol-group-vid 4-264 Priority Commands Priority Commands (Layer 2) 4-265 queue mode switchport priority default 4-266 queue bandwidth 4-267 queue cos-map 4-268 show queue mode show queue bandwidth 4-269 show queue cos-map Priority Commands (Layer 3 and 4) map ip dscp (Global Configuration) 4-270 map ip dscp (Interface Configuration) 4-271 show map ip dscp 4-272 Quality of Service Commands 4-273 class-map 4-274 match 4-275 policy-map 4-276 class 4-277 set police 4-278 service-policy 4-279 show class-map show policy-map 4-280 show policy-map interface Voice VLAN Commands 4-281 voice vlan 4-282 voice vlan aging voice vlan mac-address 4-283 switchport voice vlan 4-284 switchport voice vlan rule switchport voice vlan security 4-285 switchport voice vlan priority 4-286 show voice vlan 4-287 Multicast Filtering Commands IGMP Snooping Commands 4-288 ip igmp snooping ip igmp snooping vlan static 4-289 ip igmp snooping version ip igmp snooping leave-proxy 4-290 ip igmp snooping immediate-leave 4-291 show ip igmp snooping show mac-address-table multicast 4-292 IGMP Query Commands (Layer 2) ip igmp snooping querier 4-293 ip igmp snooping query-count ip igmp snooping query-interval 4-294 ip igmp snooping query-max-response-time 4-295 ip igmp snooping router-port-expire-time Static Multicast Routing Commands 4-296 ip igmp snooping vlan mrouter show ip igmp snooping mrouter 4-297 IGMP Filtering and Throttling Commands 4-298 ip igmp filter (Global Configuration) ip igmp profile 4-299 permit, deny range 4-300 ip igmp filter (Interface Configuration) ip igmp max-groups 4-301 ip igmp max-groups action 4-302 show ip igmp filter show ip igmp profile 4-303 show ip igmp throttle interface 4-304 Multicast VLAN Registration Commands mvr (Global Configuration) Multicast VLAN Registration Commands 4-305 mvr (Interface Configuration) 4-306 Multicast VLAN Registration Commands 4-307 show mvr 4-308 The following displays information about the interfaces attac hed to the MVR VLAN: Table4-81 show mvr interfa ce - display description Table4-82 show mvr memb ers - display description IP Interface Commands IP Interface Commands ip address 4-310 ip default-gateway IP Interface Commands 4-311 ip dhcp restart show ip interface 4-312 show ip redirects ping IP Source Guard Commands 4-313 IP Source Guard Commands ip source-guard 4-314 IP Source Guard Commands 4-315 ip source-guard binding 4-316 show ip source-guard show ip source-guard binding 4-317 DHCP Snooping Commands ip dhcp snooping 4-318 4-319 ip dhcp snooping vlan 4-320 ip dhcp snooping trust 4-321 ip dhcp snooping verify mac-address ip dhcp snooping information option 4-322 ip dhcp snooping information policy 4-323 ip dhcp snooping database flash show ip dhcp snooping 4-324 show ip dhcp snooping binding IP Cluster Commands cluster IP Cluster Commands 4-325 cluster commander 4-326 cluster ip-pool cluster member IP Cluster Commands 4-327 rcommand show cluster 4-328 show cluster members show cluster candidates A-1 Appendix A: Software Specifications Software Features Software Specifications A-2 A Management Features Standards Management Information Bases A-3 A Management Information Bases Page B-1 Appendix B: Troubleshooting Problems Accessing the Management Interface Troubleshooting B-2 B Using System Logs Glossary Page Page Page Page Page Index Index-1 Numerics A B Index-2 E F G H Index-3 J K L M Index-4 N P Q Index-5 R S T Index-6 U V W