Microsoft ES4625, ES4649 User Manual

Powered by Accton

ES4625/ES4649
24/48-Port Gigabit Ethernet

Stackable Layer 3 Switch

Management Guide

Management Guide

Gigabit Ethernet Switch

Layer 3 Switch
with 20/44 RJ-45 Ports,
4 Combination Ports (SFP/RJ-45),
1 Extender Module Slot,
and 2 Stacking Ports

ES4625
ES4649
F3.1.1.21 E042005-R01
149100022900A

Contents

Chapter 1: Introduction 1-1

Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6

Chapter 2: Initial Configuration 2-1

Connecting to the Switch 2-1

Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3

Stack Operations 2-3

Selecting the Stack Master 2-3
Selecting the Backup Unit 2-4
Recovering from Stack Failure or Topology Change 2-4

Broken Link for Line and Wrap-around Topologies 2-4
Resilient IP Interface for Management Access 2-5

Resilient Configuration 2-5
Renumbering the Stack 2-5
Stack Limitations 2-5

Basic Configuration 2-6

Console Connection 2-6
Setting Passwords 2-7
Setting an IP Address 2-7

Manual Configuration 2-7

Dynamic Configuration 2-8
Enabling SNMP Management Access 2-9

Community Strings (for SNMP version 1 and 2c clients) 2-9

Trap Receivers 2-10

Configuring Access for SNMP Version 3 Clients 2-11
Saving Configuration Settings 2-11

Managing System Files 2-12

Chapter 3: Configuring the Switch 3-1

Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2

Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4

Basic Configuration 3-12

Displaying System Information 3-12

v

Contents

Displaying Switch Hardware/Software Versions 3-13
Displaying Bridge Extension Capabilities 3-15
Configuring Support for Jumbo Frames 3-16
Setting the Switch’s IP Address 3-17

Manual Configuration 3-18
Using DHCP/BOOTP 3-19

Managing Firmware 3-20

Downloading System Software from a Server 3-21

Saving or Restoring Configuration Settings 3-23

Downloading Configuration Settings from a Server 3-24
Console Port Settings 3-25
Telnet Settings 3-27
Configuring Event Logging 3-29

System Log Configuration 3-29

Remote Log Configuration 3-30

Displaying Log Messages 3-32

Sending Simple Mail Transfer Protocol Alerts 3-32
Renumbering the Stack 3-34
Resetting the System 3-35
Setting the System Clock 3-35

Configuring SNTP 3-35

Setting the Time Zone 3-36

Simple Network Management Protocol 3-37

Enabling the SNMP Agent 3-39
Setting Community Access Strings 3-39
Specifying Trap Managers and Trap Types 3-40
Configuring SNMPv3 Management Access 3-42

Setting a Local Engine ID 3-43

Specifying a Remote Engine ID 3-43

Configuring SNMPv3 Users 3-44

Configuring Remote SNMPv3 Users 3-46

Configuring SNMPv3 Groups 3-48

Setting SNMPv3 Views 3-52

User Authentication 3-53

Configuring User Accounts 3-53
Configuring Local/Remote Logon Authentication 3-55
Configuring HTTPS 3-58

Replacing the Default Secure-site Certificate 3-59
Configuring the Secure Shell 3-60

Generating the Host Key Pair 3-61

Configuring the SSH Server 3-63
Configuring Port Security 3-65
Configuring 802.1X Port Authentication 3-67

Displaying 802.1X Global Settings 3-68

Configuring 802.1X Global Settings 3-69

vi

Contents

Configuring Port Settings for 802.1X 3-69
Displaying 802.1X Statistics 3-72

Filtering IP Addresses for Management Access 3-74

Access Control Lists 3-76

Configuring Access Control Lists 3-76

Setting the ACL Name and Type 3-77
Configuring a Standard IP ACL 3-77
Configuring an Extended IP ACL 3-78
Configuring a MAC ACL 3-81

Configuring ACL Masks 3-83

Specifying the Mask Type 3-83
Configuring an IP ACL Mask 3-84
Configuring a MAC ACL Mask 3-86

Binding a Port to an Access Control List 3-87

Port Configuration 3-88

Displaying Connection Status 3-88
Configuring Interface Connections 3-91
Creating Trunk Groups 3-93

Statically Configuring a Trunk 3-94
Enabling LACP on Selected Ports 3-95
Configuring LACP Parameters 3-97
Displaying LACP Port Counters 3-100
Displaying LACP Settings and Status for the Local Side 3-101

Displaying LACP Settings and Status for the Remote Side 3-103
Setting Broadcast Storm Thresholds 3-104
Configuring Port Mirroring 3-106
Configuring Rate Limits 3-107
Showing Port Statistics 3-108

Address Table Settings 3-112

Setting Static Addresses 3-112
Displaying the Address Table 3-113
Changing the Aging Time 3-115

Spanning Tree Algorithm Configuration 3-115

Displaying Global Settings 3-116
Configuring Global Settings 3-119
Displaying Interface Settings 3-123
Configuring Interface Settings 3-126
Configuring Multiple Spanning Trees 3-128
Displaying Interface Settings for MSTP 3-132
Configuring Interface Settings for MSTP 3-133

VLAN Configuration 3-135

IEEE 802.1Q VLANs 3-135

Enabling or Disabling GVRP (Global Setting) 3-138

Displaying Basic VLAN Information 3-138

Displaying Current VLANs 3-139

vii

Contents

Creating VLANs 3-140
Adding Static Members to VLANs (VLAN Index) 3-141
Adding Static Members to VLANs (Port Index) 3-143
Configuring VLAN Behavior for Interfaces 3-144

Configuring Private VLANs 3-146

Enabling Private VLANs 3-146
Configuring Uplink and Downlink Ports 3-147

Configuring Protocol-Based VLANs 3-147

Configuring Protocol Groups 3-148
Mapping Protocols to VLANs 3-149

Class of Service Configuration 3-150

Layer 2 Queue Settings 3-150

Setting the Default Priority for Interfaces 3-150
Mapping CoS Values to Egress Queues 3-152
Selecting the Queue Mode 3-154
Setting the Service Weight for Traffic Classes 3-154

Layer 3/4 Priority Settings 3-156

Mapping Layer 3/4 Priorities to CoS Values 3-156
Selecting IP Precedence/DSCP Priority 3-156
Mapping IP Precedence 3-157
Mapping DSCP Priority 3-158
Mapping IP Port Priority 3-160

Quality of Service 3-161

Configuring Quality of Service Parameters 3-162

Configuring a Class Map 3-162
Creating QoS Policies 3-165
Attaching a Policy Map to Ingress Queues 3-168

Multicast Filtering 3-169

IGMP Protocol 3-169
Layer 2 IGMP (Snooping and Query) 3-170

Configuring IGMP Snooping and Query Parameters 3-171
Displaying Interfaces Attached to a Multicast Router 3-173
Specifying Static Interfaces for a Multicast Router 3-174
Displaying Port Members of Multicast Services 3-175
Assigning Ports to Multicast Services 3-176

Layer 3 IGMP (Query used with Multicast Routing) 3-177

Configuring IGMP Interface Parameters 3-177
Displaying Multicast Group Information 3-180

Configuring Domain Name Service 3-181

Configuring General DNS Server Parameters 3-181
Configuring Static DNS Host to Address Entries 3-183
Displaying the DNS Cache 3-185

Dynamic Host Configuration Protocol 3-186

Configuring DHCP Relay Service 3-186
Configuring the DHCP Server 3-188

viii

Contents

Enabling the Server, Setting Excluded Addresses 3-188

Configuring Address Pools 3-190

Displaying Address Bindings 3-194

Configuring Router Redundancy 3-195

Virtual Router Redundancy Protocol 3-196

Configuring VRRP Groups 3-196

Displaying VRRP Global Statistics 3-201

Displaying VRRP Group Statistics 3-202

IP Routing 3-204

Overview 3-204

Initial Configuration 3-204
IP Switching 3-205

Routing Path Management 3-206

Routing Protocols 3-206
Basic IP Interface Configuration 3-207
Configuring IP Routing Interfaces 3-208
Address Resolution Protocol 3-210

Proxy ARP 3-210

Basic ARP Configuration 3-211

Configuring Static ARP Addresses 3-212

Displaying Dynamically Learned ARP Entries 3-213

Displaying Local ARP Entries 3-214

Displaying ARP Statistics 3-215
Displaying Statistics for IP Protocols 3-216

IP Statistics 3-216

ICMP Statistics 3-218

UDP Statistics 3-220

TCP Statistics 3-221
Configuring Static Routes 3-222
Displaying the Routing Table 3-223
Configuring the Routing Information Protocol 3-224

Configuring General Protocol Settings 3-225

Specifying Network Interfaces for RIP 3-227

Configuring Network Interfaces for RIP 3-228

Displaying RIP Information and Statistics 3-231
Configuring the Open Shortest Path First Protocol 3-234

Configuring General Protocol Settings 3-235

Configuring OSPF Areas 3-238

Configuring Area Ranges (Route Summarization for ABRs) 3-241

Configuring OSPF Interfaces 3-243

Configuring Virtual Links 3-247

Configuring Network Area Addresses 3-249

Configuring Summary Addresses (for External AS Routes) 3-252

Redistributing External Routes 3-253

Configuring NSSA Settings 3-254

ix

Contents

Displaying Link State Database Information 3-256
Displaying Information on Border Routers 3-258
Displaying Information on Neighbor Routers 3-259

Multicast Routing 3-260

Configuring Global Settings for Multicast Routing 3-260
Displaying the Multicast Routing Table 3-261
Configuring DVMRP 3-264

Configuring Global DVMRP Settings 3-264
Configuring DVMRP Interface Settings 3-267
Displaying Neighbor Information 3-269
Displaying the Routing Table 3-270

Configuring PIM-DM 3-271

Configuring Global PIM-DM Settings 3-271
Configuring PIM-DM Interface Settings 3-272
Displaying Interface Information 3-275
Displaying Neighbor Information 3-275

Chapter 4: Command Line Interface 4-1

Using the Command Line Interface 4-1

Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-1

Entering Commands 4-3

Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3

Showing Commands 4-4
Partial Keyword Lookup 4-5
Negating the Effect of Commands 4-5
Using Command History 4-5
Understanding Command Modes 4-6
Exec Commands 4-6
Configuration Commands 4-7
Command Line Processing 4-9

Command Groups 4-10
Line Commands 4-11

line 4-12
login 4-12
password 4-13
timeout login response 4-14
exec-timeout 4-15
password-thresh 4-15
silent-time 4-16

x

Contents

databits 4-17
parity 4-17
speed 4-18
stopbits 4-18
disconnect 4-19
show line 4-19

General Commands 4-20

enable 4-20
disable 4-21
configure 4-22
show history 4-22
reload 4-23
end 4-23
exit 4-24
quit 4-24

System Management Commands 4-25

Device Designation Commands 4-25

prompt 4-25
hostname 4-26
switch renumber 4-26

User Access Commands 4-27

username 4-27
enable password 4-28

IP Filter Commands 4-29

management 4-29
show management 4-30

Web Server Commands 4-31

ip http port 4-31
ip http server 4-31
ip http secure-server 4-32
ip http secure-port 4-33

Telnet Server Commands 4-34

ip telnet server 4-34

Secure Shell Commands 4-34

ip ssh server 4-37
ip ssh timeout 4-37
ip ssh authentication-retries 4-38
ip ssh server-key size 4-38
delete public-key 4-39
ip ssh crypto host-key generate 4-39
ip ssh crypto zeroize 4-40
ip ssh save host-key 4-41
show ip ssh 4-41
show ssh 4-41
show public-key 4-42

xi

Contents

Event Logging Commands 4-43

logging on 4-43

logging history 4-44

logging host 4-45

logging facility 4-45

logging trap 4-46

clear log 4-47

show logging 4-47

show log 4-49
SMTP Alert Commands 4-49

logging sendmail host 4-50

logging sendmail level 4-50

logging sendmail source-email 4-51

logging sendmail destination-email 4-51

logging sendmail 4-52

show logging sendmail 4-52
Time Commands 4-53

sntp client 4-53

sntp server 4-54

sntp poll 4-55

show sntp 4-55

clock timezone 4-56

calendar set 4-56

show calendar 4-57
System Status Commands 4-57

show startup-config 4-57

show running-config 4-59

show system 4-61

show users 4-62

show version 4-62
Frame Size Commands 4-63

jumbo frame 4-63

Flash/File Commands 4-64

copy 4-64
delete 4-67
dir 4-67
whichboot 4-68
boot system 4-69

Authentication Commands 4-70

Authentication Sequence 4-70

authentication login 4-70

authentication enable 4-71
RADIUS Client 4-72

radius-server host 4-72

radius-server port 4-73

xii

Contents

radius-server key 4-73
radius-server retransmit 4-74
radius-server timeout 4-74
show radius-server 4-75

TACACS+ Client 4-75

tacacs-server host 4-76
tacacs-server port 4-76
tacacs-server key 4-77
show tacacs-server 4-77

Port Security Commands 4-78

port security 4-78

802.1X Port Authentication 4-80
dot1x system-auth-control 4-80
dot1x default 4-81
dot1x max-req 4-81
dot1x port-control 4-81
dot1x operation-mode 4-82
dot1x re-authenticate 4-83
dot1x re-authentication 4-83
dot1x timeout quiet-period 4-83
dot1x timeout re-authperiod 4-84
dot1x timeout tx-period 4-84
show dot1x 4-85

Access Control List Commands 4-87

IP ACLs 4-89

access-list ip 4-89
permit, deny (Standard ACL) 4-90
permit, deny (Extended ACL) 4-91
show ip access-list 4-93
access-list ip mask-precedence 4-93
mask (IP ACL) 4-94
show access-list ip mask-precedence 4-97
ip access-group 4-98
show ip access-group 4-98

MAC ACLs 4-99

access-list mac 4-99
permit, deny (MAC ACL) 4-100
show mac access-list 4-101
access-list mac mask-precedence 4-102
mask (MAC ACL) 4-102
show access-list mac mask-precedence 4-104
mac access-group 4-105
show mac access-group 4-105

ACL Information 4-106

show access-list 4-106

xiii

Contents

show access-group 4-106

SNMP Commands 4-107

snmp-server 4-107
show snmp 4-108
snmp-server community 4-109
snmp-server contact 4-109
snmp-server location 4-110
snmp-server host 4-110
snmp-server enable traps 4-112
snmp-server engine-id 4-113
show snmp engine-id 4-114
snmp-server view 4-115
show snmp view 4-116
snmp-server group 4-116
show snmp group 4-118
snmp-server user 4-119
show snmp user 4-120

DHCP Commands 4-121

DHCP Client 4-121

ip dhcp client-identifier 4-121
ip dhcp restart client 4-122

DHCP Relay 4-123

ip dhcp restart relay 4-123
ip dhcp relay server 4-124

DHCP Server 4-124

service dhcp 4-125
ip dhcp excluded-address 4-125
ip dhcp pool 4-126
network 4-127
default-router 4-127
domain-name 4-128
dns-server 4-128
next-server 4-129
bootfile 4-129
netbios-name-server 4-130
netbios-node-type 4-131
lease 4-131
host 4-132
client-identifier 4-133
hardware-address 4-134
clear ip dhcp binding 4-134
show ip dhcp binding 4-135

DNS Commands 4-136

ip host 4-136
clear host 4-137

xiv

Contents

ip domain-name 4-137
ip domain-list 4-138
ip name-server 4-139
ip domain-lookup 4-140
show hosts 4-141
show dns 4-141
show dns cache 4-142
clear dns cache 4-142

Interface Commands 4-143

interface 4-143
description 4-144
speed-duplex 4-144
negotiation 4-145
capabilities 4-146
media-type 4-148
shutdown 4-148
switchport broadcast packet-rate 4-149
clear counters 4-149
show interfaces status 4-150
show interfaces counters 4-151
show interfaces switchport 4-152

Mirror Port Commands 4-154

port monitor 4-154
show port monitor 4-155

Rate Limit Commands 4-156

rate-limit 4-156

Link Aggregation Commands 4-157

channel-group 4-158
lacp 4-159
lacp system-priority 4-160
lacp admin-key (Ethernet Interface) 4-161
lacp admin-key (Port Channel) 4-161
lacp port-priority 4-162
show lacp 4-163

Address Table Commands 4-166

mac-address-table static 4-167
clear mac-address-table dynamic 4-168
show mac-address-table 4-168
mac-address-table aging-time 4-169
show mac-address-table aging-time 4-169

Spanning Tree Commands 4-170

spanning-tree 4-171
spanning-tree mode 4-171
spanning-tree forward-time 4-172
spanning-tree hello-time 4-173

xv

Contents

spanning-tree max-age 4-173
spanning-tree priority 4-174
spanning-tree pathcost method 4-175
spanning-tree transmission-limit 4-175
spanning-tree mst-configuration 4-176
mst vlan 4-176
mst priority 4-177
name 4-177
revision 4-178
max-hops 4-179
spanning-tree spanning-disabled 4-179
spanning-tree cost 4-180
spanning-tree port-priority 4-181
spanning-tree edge-port 4-181
spanning-tree portfast 4-182
spanning-tree link-type 4-183
spanning-tree mst cost 4-183
spanning-tree mst port-priority 4-184
spanning-tree protocol-migration 4-185
show spanning-tree 4-186
show spanning-tree mst configuration 4-188

VLAN Commands 4-188

Editing VLAN Groups 4-188

vlan database 4-189
vlan 4-189

Configuring VLAN Interfaces 4-190

interface vlan 4-190
switchport mode 4-191
switchport acceptable-frame-types 4-192
switchport ingress-filtering 4-192
switchport native vlan 4-193
switchport allowed vlan 4-194
switchport forbidden vlan 4-195

Displaying VLAN Information 4-195

show vlan 4-196

Configuring Private VLANs 4-197

pvlan 4-197
show pvlan 4-198

Configuring Protocol-based VLANs 4-198

protocol-vlan protocol-group (Configuring Groups) 4-199
protocol-vlan protocol-group (Configuring Interfaces) 4-199
show protocol-vlan protocol-group 4-200
show interfaces protocol-vlan protocol-group 4-201

GVRP and Bridge Extension Commands 4-202

bridge-ext gvrp 4-202

xvi

Contents

show bridge-ext 4-202
switchport gvrp 4-203
show gvrp configuration 4-203
garp timer 4-204
show garp timer 4-205

Priority Commands 4-206

Priority Commands (Layer 2) 4-206

queue mode 4-206
switchport priority default 4-207
queue bandwidth 4-208
queue cos-map 4-209
show queue mode 4-210
show queue bandwidth 4-210
show queue cos-map 4-210

Priority Commands (Layer 3 and 4) 4-211

map ip port (Global Configuration) 4-211
map ip port (Interface Configuration) 4-212
map ip precedence (Global Configuration) 4-212
map ip precedence (Interface Configuration) 4-213
map ip dscp (Global Configuration) 4-214
map ip dscp (Interface Configuration) 4-214
show map ip port 4-215
show map ip precedence 4-216
show map ip dscp 4-217

Quality of Service Commands 4-218

class-map 4-219
match 4-220
policy-map 4-221
class 4-222
set 4-223
police 4-223
service-policy 4-224
show class-map 4-225
show policy-map 4-225
show policy-map interface 4-226

Multicast Filtering Commands 4-226

IGMP Snooping Commands 4-227

ip igmp snooping 4-227
ip igmp snooping vlan static 4-227
ip igmp snooping version 4-228
show ip igmp snooping 4-228
show mac-address-table multicast 4-229

IGMP Query Commands (Layer 2) 4-230

ip igmp snooping querier 4-230
ip igmp snooping query-count 4-230

xvii

Contents

ip igmp snooping query-interval 4-231
ip igmp snooping query-max-response-time 4-231
ip igmp snooping router-port-expire-time 4-232

Static Multicast Routing Commands 4-233

ip igmp snooping vlan mrouter 4-233
show ip igmp snooping mrouter 4-234

IGMP Commands (Layer 3) 4-234

ip igmp 4-235
ip igmp robustval 4-235
ip igmp query-interval 4-236
ip igmp max-resp-interval 4-237
ip igmp last-memb-query-interval 4-237
ip igmp version 4-238
show ip igmp interface 4-239
clear ip igmp group 4-239
show ip igmp groups 4-240

IP Interface Commands 4-241

Basic IP Configuration 4-241

ip address 4-242
ip default-gateway 4-243
show ip interface 4-244
show ip redirects 4-244
ping 4-245

Address Resolution Protocol (ARP) 4-246

arp 4-246
arp-timeout 4-247
clear arp-cache 4-247
show arp 4-247
ip proxy-arp 4-248

IP Routing Commands 4-249

Global Routing Configuration 4-249

ip routing 4-249
ip route 4-250
clear ip route 4-251
show ip route 4-251
show ip host-route 4-252
show ip traffic 4-253

Routing Information Protocol (RIP) 4-254

router rip 4-254
timers basic 4-255
network 4-256
neighbor 4-256
version 4-257
ip rip receive version 4-258
ip rip send version 4-259

xviii

Contents

ip split-horizon 4-260
ip rip authentication key 4-260
ip rip authentication mode 4-261
show rip globals 4-262
show ip rip 4-262

Open Shortest Path First (OSPF) 4-264

router ospf 4-265
router-id 4-265
compatible rfc1583 4-266
default-information originate 4-267
timers spf 4-268
area range 4-268
area default-cost 4-269
summary-address 4-270
redistribute 4-270
network area 4-271
area stub 4-272
area nssa 4-273
area virtual-link 4-274
ip ospf authentication 4-276
ip ospf authentication-key 4-277
ip ospf message-digest-key 4-278
ip ospf cost 4-279
ip ospf dead-interval 4-279
ip ospf hello-interval 4-280
ip ospf priority 4-280
ip ospf retransmit-interval 4-281
ip ospf transmit-delay 4-282
show ip ospf 4-282
show ip ospf border-routers 4-283
show ip ospf database 4-284
show ip ospf interface 4-292
show ip ospf neighbor 4-293
show ip ospf summary-address 4-294
show ip ospf virtual-links 4-294

Multicast Routing Commands 4-295

Static Multicast Routing Commands 4-295

ip igmp snooping vlan mrouter 4-295
show ip igmp snooping mrouter 4-296

General Multicast Routing Commands 4-297

ip multicast-routing 4-297
show ip mroute 4-297

DVMRP Multicast Routing Commands 4-299

router dvmrp 4-299
probe-interval 4-300

xix

Contents

nbr-timeout 4-301
report-interval 4-301
flash-update-interval 4-302
prune-lifetime 4-302
default-gateway 4-303
ip dvmrp 4-303
ip dvmrp metric 4-304
clear ip dvmrp route 4-305
show router dvmrp 4-305
show ip dvmrp route 4-306
show ip dvmrp neighbor 4-307
show ip dvmrp interface 4-307

PIM-DM Multicast Routing Commands 4-308

router pim 4-308
ip pim dense-mode 4-309
ip pim hello-interval 4-310
ip pim hello-holdtime 4-310
ip pim trigger-hello-interval 4-311
ip pim join-prune-holdtime 4-311
ip pim graft-retry-interval 4-312
ip pim max-graft-retries 4-312
show router pim 4-313
show ip pim interface 4-313
show ip pim neighbor 4-314

Router Redundancy Commands 4-314

Virtual Router Redundancy Protocol Commands 4-315

vrrp ip 4-315
vrrp authentication 4-316
vrrp priority 4-317
vrrp timers advertise 4-318
vrrp preempt 4-318
show vrrp 4-319
show vrrp interface 4-321
show vrrp router counters 4-322
show vrrp interface counters 4-322
clear vrrp router counters 4-323
clear vrrp interface counters 4-323

xx

Contents

Appendix A: Software Specifications A-1

Software Features A-1
Management Features A-2
Standards A-2
Management Information Bases A-3

Appendix B: Troubleshooting B-1

Problems Accessing the Management Interface B-1
Using System Logs B-2

Glossary

Index

xxi

Contents

xxii

Tables

Table 1-1 Key Features 1-1
Table 1-2 System Defaults 1-6
Table 3-1 Web Page Configuration Buttons 3-3
Table 3-2 Switch Main Menu 3-4
Table 3-3 Logging Levels 3-29
Table 3-4 SNMPv3 Security Models and Levels 3-38
Table 3-5 Supported Notification Messages 3-49
Table 3-6 HTTPS System Support 3-58
Table 3-7 802.1X Statistics 3-72
Table 3-8 LACP Port Counters 3-100
Table 3-9 LACP Internal Configuration Information 3-101
Table 3-10 LACP Neighbor Configuration Information 3-103
Table 3-11 Port Statistics 3-108
Table 3-12 Mapping CoS Values to Egress Queues 3-152
Table 3-13 CoS Priority Levels 3-152
Table 3-14 Mapping IP Precedence 3-157
Table 3-15 Mapping DSCP Priority 3-158
Table 3-16 Address Resolution Protocol 3-210
Table 3-17 ARP Statistics 3-215
Table 3-18 IP Statistics 3-216
Table 3-19 ICMP Statistics 3-218
Table 3-20 USP Statistics 3-220
Table 3-21 TCP Statistics 3-221
Table 3-22 RIP Information and Statistics 3-231
Table 4-1 General Command Modes 4-6
Table 4-2 Configuration Command Modes 4-8
Table 4-3 Keystroke Commands 4-9
Table 4-4 Command Group Index 4-10
Table 4-5 Line Commands 4-11
Table 4-6 General Commands 4-20
Table 4-7 System Management Commands 4-25
Table 4-8 Device Designation Commands 4-25
Table 4-9 User Access Commands 4-27
Table 4-10 Default Login Settings 4-27
Table 4-11 IP Filter Commands 4-29
Table 4-12 Web Server Commands 4-31
Table 4-13 HTTPS System Support 4-32
Table 4-14 Telnet Server Commands 4-34
Table 4-15 Secure Shell Commands 4-35
Table 4-16 show ssh - display description 4-42
Table 4-17 Event Logging Commands 4-43

xxiii

Tables

Table 4-18 Logging Levels 4-44
Table 4-19 show logging flash/ram - display description 4-48
Table 4-20 show logging trap - display description 4-48
Table 4-21 SMTP Alert Commands 4-49
Table 4-22 Time Commands 4-53
Table 4-23 System Status Commands 4-57
Table 4-24 Frame Size Commands 4-63
Table 4-25 Flash/File Commands 4-64
Table 4-26 File Directory Information 4-68
Table 4-27 Authentication Commands 4-70
Table 4-28 Authentication Sequence Commands 4-70
Table 4-29 RADIUS Client Commands 4-72
Table 4-30 TACACS+ Client Commands 4-75
Table 4-31 Port Security Commands 4-78
Table 4-32 802.1X Port Authentication Commands 4-80
Table 4-33 Access Control List Commands 4-88
Table 4-34 IP ACL Commands 4-89
Table 4-35 MAC ACL Commands 4-99
Table 4-36 ACL Information Commands 4-106
Table 4-37 SNMP Commands 4-107
Table 4-38 show snmp engine-id - display description 4-114
Table 4-39 show snmp view - display description 4-116
Table 4-40 show snmp group - display description 4-118
Table 4-41 show snmp user - display description 4-120
Table 4-42 DHCP Commands 4-121
Table 4-43 DHCP Client Commands 4-121
Table 4-44 DHCP Relay Commands 4-123
Table 4-45 DHCP Server Commands 4-124
Table 4-46 DNS Commands 4-136
Table 4-47 show dns cache - display description 4-142
Table 4-48 Interface Commands 4-143
Table 4-49 show interfaces switchport - display description 4-153
Table 4-50 Mirror Port Commands 4-154
Table 4-51 Rate Limit Commands 4-156
Table 4-52 Link Aggregation Commands 4-157
Table 4-53 show lacp counters - display description 4-163
Table 4-54 show lacp internal - display description 4-164
Table 4-55 show lacp neighbors - display description 4-165
Table 4-57 Address Table Commands 4-166
Table 4-56 show lacp sysid - display description 4-166
Table 4-58 Spanning Tree Commands 4-170
Table 4-59 VLAN Commands 4-188
Table 4-60 Commands for Editing VLAN Groups 4-188
Table 4-61 Commands for Configuring VLAN Interfaces 4-190
Table 4-62 Commands for Displaying VLAN Information 4-195

xxiv

Tables

Table 4-63 Private VLAN Commands 4-197
Table 4-64 Protocol-based VLAN Commands 4-198
Table 4-65 GVRP and Bridge Extension Commands 4-202
Table 4-66 Priority Commands 4-206
Table 4-67 Priority Commands (Layer 2) 4-206
Table 4-68 Default CoS Priority Levels 4-209
Table 4-69 Priority Commands (Layer 3 and 4) 4-211
Table 4-70 Mapping IP Precedence to CoS Values 4-213
Table 4-71 Mapping IP DSCP to CoS Values 4-215
Table 4-72 Quality of Service Commands 4-218
Table 4-73 Multicast Filtering Commands 4-226
Table 4-74 IGMP Snooping Commands 4-227
Table 4-75 IGMP Query Commands (Layer 2) 4-230
Table 4-76 Static Multicast Routing Commands 4-233
Table 4-77 IGMP Commands (Layer 3) 4-234
Table 4-78 show ip igmp groups - display description 4-240
Table 4-79 IP Interface Commands 4-241
Table 4-80 Basic IP Configuration Commands 4-241
Table 4-81 Address Resolution Protocol Commands 4-246
Table 4-82 IP Routing Commands 4-249
Table 4-83 Global Routing Configuration Commands 4-249
Table 4-84 show ip route - display description 4-252
Table 4-85 show ip host-route - display description 4-252
Table 4-86 Routing Information Protocol Commands 4-254
Table 4-87 show rip globals - display description 4-262
Table 4-88 show ip rip - display description 4-263
Table 4-89 Open Shortest Path First Commands 4-264
Table 4-91 show ip ospf border-routers - display description 4-283
Table 4-90 show ip ospf - display description 4-283
Table 4-92 show ip ospf database - display description 4-285
Table 4-93 show ip ospf asbr-summary - display description 4-286
Table 4-94 show ip ospf database-summary - display description 4-287
Table 4-95 show ip ospf external - display description 4-288
Table 4-96 show ip ospf network - display description 4-289
Table 4-97 show ip ospf router - display description 4-290
Table 4-98 show ip ospf summary - display description 4-291
Table 4-99 show ip ospf interface - display description 4-292
Table 4-100 show ip ospf neighbor - display description 4-293
Table 4-101 show ip ospf virtual-links - display description 4-294
Table 4-102 Multicast Routing Commands 4-295
Table 4-103 Static Multicast Routing Commands 4-295
Table 4-104 General Multicast Routing Commands 4-297
Table 4-105 show ip mroute - display description 4-298
Table 4-106 DVMRP Multicast Routing Commands 4-299
Table 4-107 show ip dvmrp route - display description 4-306

xxv

Tables

Table 4-108 show ip dvmrp neighbor - display description 4-307
Table 4-109 PIM-DM Multicast Routing Commands 4-308
Table 4-110 show ip pim neighbor - display description 4-314
Table 4-111 Router Redundancy Commands 4-314
Table 4-112 VRRP Commands 4-315
Table 4-113 show vrrp - display description 4-320
Table 4-114 show vrrp brief - display description 4-321
Table B-1 Troubleshooting Chart B-1

xxvi

Figures

Figure 3-1 Home Page 3-2
Figure 3-2 Front Panel Indicators 3-3
Figure 3-3 System Information 3-12
Figure 3-4 Switch Information 3-14
Figure 3-5 Displaying Bridge Extension Configuration 3-15
Figure 3-6 Configuring Support for Jumbo Frames 3-16
Figure 3-7 IP Interface Configuration - Manual 3-18
Figure 3-8 Default Gateway 3-18
Figure 3-9 IP Interface Configuration - DHCP 3-19
Figure 3-10 Copy Firmware 3-21
Figure 3-11 Setting the Startup Code 3-21
Figure 3-12 Deleting Files 3-22
Figure 3-13 Downloading Configuration Settings for Start-Up 3-24
Figure 3-14 Setting the Startup Configuration Settings 3-24
Figure 3-15 Configuring the Console Port 3-26
Figure 3-16 Configuring the Telnet Interface 3-28
Figure 3-17 System Logs 3-30
Figure 3-18 Remote Logs 3-31
Figure 3-19 Displaying Logs 3-32
Figure 3-20 Enabling and Configuring SMTP Alerts 3-33
Figure 3-21 Renumbering the Stack 3-34
Figure 3-22 Resetting the System 3-35
Figure 3-23 SNTP Configuration 3-36
Figure 3-24 Clock Time Zone 3-37
Figure 3-25 Enabling the SNMP Agent 3-39
Figure 3-26 Configuring SNMP Community Strings 3-40
Figure 3-27 Configuring SNMP Trap Managers 3-42
Figure 3-28 Setting the SNMPv3 Engine ID 3-43
Figure 3-29 Setting an Engine ID 3-44
Figure 3-30 Configuring SNMPv3 Users 3-45
Figure 3-31 Configuring Remote SNMPv3 Users 3-47
Figure 3-32 Configuring SNMPv3 Groups 3-51
Figure 3-33 Configuring SNMPv3 Views 3-52
Figure 3-34 User Accounts 3-54
Figure 3-35 Authentication Server Settings 3-57
Figure 3-36 HTTPS Settings 3-59
Figure 3-37 SSH Host-Key Settings 3-62
Figure 3-38 SSH Server Settings 3-64
Figure 3-39 Port Security 3-66
Figure 3-40 802.1X Global Information 3-68
Figure 3-41 802.1X Global Configuration 3-69

xxvii

Figures

Figure 3-42 802.1X Port Configuration 3-70
Figure 3-43 802.1X Port Statistics 3-73
Figure 3-44 IP Filter 3-75
Figure 3-45 Selecting ACL Type 3-77
Figure 3-46 ACL Configuration - Standard IP 3-78
Figure 3-47 ACL Configuration - Extended IP 3-80
Figure 3-48 ACL Configuration - MAC 3-82
Figure 3-49 Selecting ACL Mask Types 3-83
Figure 3-50 ACL Mask Configuration - IP 3-85
Figure 3-51 ACL Mask Configuration - MAC 3-86
Figure 3-52 ACL Port Binding 3-88
Figure 3-53 Port - Port Information 3-89
Figure 3-54 Port - Port Configuration 3-92
Figure 3-55 Static Trunk Configuration 3-94
Figure 3-56 LACP Trunk Configuration 3-96
Figure 3-57 LACP - Aggregation Port 3-98
Figure 3-58 LACP - Port Counters Information 3-100
Figure 3-59 LACP - Port Internal Information 3-102
Figure 3-60 LACP - Port Neighbors Information 3-103
Figure 3-61 Port Broadcast Control 3-105
Figure 3-62 Mirror Port Configuration 3-106
Figure 3-63 Rate Limit Configuration 3-107
Figure 3-64 Port Statistics 3-111
Figure 3-65 Static Addresses 3-113
Figure 3-66 Dynamic Addresses 3-114
Figure 3-67 Address Aging 3-115
Figure 3-68 STA Information 3-118
Figure 3-69 STA Global Configuration 3-122
Figure 3-70 STA Port Information 3-125
Figure 3-71 STA Port Configuration 3-128
Figure 3-72 MSTP VLAN Configuration 3-130
Figure 3-73 MSTP Port Information 3-132
Figure 3-74 MSTP Port Configuration 3-134
Figure 3-75 Globally Enabling GVRP 3-138
Figure 3-76 VLAN Basic Information 3-138
Figure 3-77 VLAN Current Table 3-139
Figure 3-78 VLAN Static List - Creating VLANs 3-141
Figure 3-79 VLAN Static Table - Adding Static Members 3-142
Figure 3-80 VLAN Static Membership by Port 3-143
Figure 3-81 VLAN Port Configuration 3-145
Figure 3-82 Private VLAN Status 3-146
Figure 3-83 Private VLAN Link Status 3-147
Figure 3-84 Protocol VLAN Configuration 3-148
Figure 3-85 Protocol VLAN Port Configuration 3-149
Figure 3-86 Default Port Priority 3-151

xxviii

Figures

Figure 3-87 Traffic Classes 3-153
Figure 3-88 Queue Mode 3-154
Figure 3-89 Queue Scheduling 3-155
Figure 3-90 IP Precedence/DSCP Priority Status 3-156
Figure 3-91 IP Precedence Priority 3-157
Figure 3-92 IP DSCP Priority 3-159
Figure 3-93 IP Port Priority Status 3-160
Figure 3-94 IP Port Priority 3-160
Figure 3-95 Configuring Class Maps 3-164
Figure 3-96 Configuring Policy Maps 3-167
Figure 3-97 Service Policy Settings 3-168
Figure 3-98 IGMP Configuration 3-172
Figure 3-99 Multicast Router Port Information 3-173
Figure 3-100 Static Multicast Router Port Configuration 3-174
Figure 3-101 IP Multicast Registration Table 3-175
Figure 3-102 IGMP Member Port Table 3-176
Figure 3-103 IGMP Interface Settings 3-179
Figure 3-104 IGMP Group Membership 3-180
Figure 3-105 DNS General Configuration 3-182
Figure 3-106 DNS Static Host Table 3-184
Figure 3-107 DNS Cache 3-185
Figure 3-108 DHCP Relay Configuration 3-187
Figure 3-109 DHCP Server General Configuration 3-189
Figure 3-110 DHCP Server Pool Configuration 3-191
Figure 3-111 DHCP Server Pool - Network Configuration 3-192
Figure 3-112 DHCP Server Pool - Host Configuration 3-193
Figure 3-113 DHCP Server - IP Binding 3-194
Figure 3-114 VRRP Group Configuration 3-199
Figure 3-115 VRRP Group Configuration Detail 3-200
Figure 3-116 VRRP Global Statistics 3-201
Figure 3-117 VRRP Group Statistics 3-203
Figure 3-118 IP Global Settings 3-207
Figure 3-119 IP Routing Interface 3-209
Figure 3-120 ARP General 3-211
Figure 3-121 ARP Static Addresses 3-212
Figure 3-122 ARP Dynamic Addresses 3-213
Figure 3-123 ARP Other Addresses 3-214
Figure 3-124 ARP Statistics 3-215
Figure 3-125 IP Statistics 3-218
Figure 3-126 ICMP Statistics 3-219
Figure 3-127 UDP Statistics 3-220
Figure 3-128 TCP Statistics 3-221
Figure 3-129 IP Static Routes 3-222
Figure 3-130 IP Routing Table 3-223
Figure 3-131 RIP General Settings 3-226

xxix

Figures

Figure 3-132 RIP Network Addresses 3-227
Figure 3-133 RIP Interface Settings 3-230
Figure 3-134 RIP Statistics 3-232
Figure 3-135 OSPF General Configuration 3-237
Figure 3-136 OSPF Area Configuration 3-240
Figure 3-137 OSPF Range Configuration 3-242
Figure 3-138 OSPF Interface Configuration 3-245
Figure 3-139 OSPF Interface Configuration - Detailed 3-246
Figure 3-140 OSPF Virtual Link Configuration 3-248
Figure 3-141 OSPF Network Area Address Configuration 3-250
Figure 3-142 OSPF Summary Address Configuration 3-252
Figure 3-143 OSPF Redistribute Configuration 3-254
Figure 3-144 OSPF NSSA Settings 3-255
Figure 3-145 OSPF Link State Database Information 3-257
Figure 3-146 OSPF Border Router Information 3-258
Figure 3-147 OSPF Neighbor Information 3-259
Figure 3-148 Multicast Routing General Settings 3-260
Figure 3-149 Multicast Routing Table 3-262
Figure 3-150 DVMRP General Settings 3-267
Figure 3-151 DVMRP Interface Settings 3-268
Figure 3-152 DVMRP Neighbor Information 3-269
Figure 3-153 DVMRP Routing Table 3-270
Figure 3-154 PIM-DM General Settings 3-272
Figure 3-155 PIM-DM Interface Settings 3-274
Figure 3-156 PIM-DM Interface Information 3-275
Figure 3-157 PIM-DM Neighbor Information 3-276

xxx