Cisco Systems ESW 500 manuale d’uso

Cis c o Small Busine s s Pro ES W 500 Serie s Swit ches ADMINISTR A TION GUIDE[...]

© 2009 Cisco Syst ems , Inc. All rights reser ved. OL - 19128-01 Xd ]Vh bdgZ i]Vc '%% d[[^X Zh ldgaYl^YZ# 6YYgZhhZ h! e]dcZ cjbWZgh! VcY [VmcjbW Zgh VgZa^hiZY dc i]Z 8^h Xd LZWh^iZVi l ll #X^hXd#X db$ d$ d[[^XZ h# 6bZg^XVh=ZVYfjVgiZgh 8^hXdHnhiZbh!>cX# HVc?dh Z!86?[...]

Contents ESW 500 Series Switches Administrat ion Guide 3 Chapter : Getting Started 12 Introduction 12 Typical Installation Methods 13 Default Configuration settings on the ESW 500 Series Switches 14 Physical Co nnectivity 14 Connecting to the Switch 17 Using the Default Static IP Address 17 Using a Dynamic IP Address Allocated to the Switch By DHCP[...]

Contents ESW 500 Series Switches Administrat ion Guide 4 Help 60 Defining System Information 60 Viewing Device Health 62 Resetting the Device 64 Managing Cisco Discovery Protocol 65 Defining the Bonjou r Discovery Protocol 68 TCAM Utilization 70 Chapter : Managing Smart Ports 72 Configuring Smart Ports for Desktops 73 Configuring Smart Ports for IP[...]

Contents ESW 500 Series Switches Administrat ion Guide 5 Mapping Authentication Profiles 115 Defining TACACS+ 117 Modifying TACACS+ Settings 120 Defining RADIUS 122 Modifying RADIUS Server Settings 126 Defining Access Methods 127 Defining Access Profiles 128 Defining Profile Rules 131 Modifying Profile Rules 135 Defining Traffic Control 137 Definin[...]

Contents ESW 500 Series Switches Administrat ion Guide 6 Defining Martian Addresses 1 83 Defining DHCP Snooping 185 Defining DHCP Snooping Properties 186 Defining DHCP Snooping on VLANs 188 Defining Trusted Interfaces 189 Binding Addresses to the DHCP Snooping Database 191 Query By 192 Query Results 193 Defining IP Source Guard 195 Configuring IP S[...]

Contents ESW 500 Series Switches Administrat ion Guide 7 Assigning Ports to Multiple VLANs 226 Defining Interface Settings 229 Modifying VLAN Interface Settings 230 Defining GVRP Settings 232 Modifying GVRP Settings 234 Defining Protocol Groups 236 Modifying Protocol Groups 237 Defining a Protocol Port 238 Chapter : Configuring IP Information 241 I[...]

Contents ESW 500 Series Switches Administrat ion Guide 8 Modifying a Multicast Group 268 Defining Multicast Forwarding 269 Modifying Multicast Forwarding 271 Defining Unregistered Multicast Settings 272 Chapter : Configuring Spanning Tree 275 Defining STP Properties 275 Global Settings 276 Defining Spanning Tr ee Interface Settings 278 Modifying In[...]

Contents ESW 500 Series Switches Administrat ion Guide 9 Configuring Bandwidth 319 Modifying Bandwidth Settings 320 Configuring VLAN Rate Limit 322 Modifying the VLAN Rate Limit 324 Defining Advanced QoS Mode 324 Configuring DSCP Mapping 325 Defining Class Mapping 327 Defining Aggregate Policer 329 Modifying QoS Aggregate Policer 331 Configuring Po[...]

Contents ESW 500 Series Switches Administrat ion Guide 10 Modifying SNMP Notifications 365 Defining SNMP Filter Settings 367 Managing Cisco Discovery Protocol 370 Chapter : Managing System Files 373 Software Upgrade 374 Save Configuration 375 Copy Configuration 377 Via TFTP 378 Via HTTP 379 Active Image 379 DHCP Auto Co nfiguration 381 Chapter : Ma[...]

Contents ESW 500 Series Switches Administrat ion Guide 11 Resetting GVRP Statistics Counters 403 Viewing EAP Statistics 403 Managing RMON Statistics 405 Viewing RMON Statistics 406 Resetting RMON Statistics Counters 408 Configuring RMON History 408 Defining RMON Hi story Control 408 Viewing the RMON History Table 411 Defining RMON Events Control 41[...]

Get ting Star ted In tr o duc tion ESW 500 Series Switches Administrat ion Guide 12 Get ting Star te d Intr o duc tion Thank you f or choo sing the Cisco Small Business Pro ES W 500 Series Switch. The ESW 50 0 serie s is a family of Ethernet swit ches that address es network infrastructure and acc ess needs of sm all busines s cust omers f or voice[...]

Get ting Star ted T ypi cal I nstalla tion Methods ESW 500 Series Switches Administrat ion Guide 13 • Perf orming Common C onfiguration T asks, page 30 • Using The Switch Console Port , page 48 Typic al Installation Methods The first st ep in any installa tion scenario is to connect to the switch and confi gure basic conne ctivity to ensure it [...]

Get ting Star ted T ypical Ins talla tion Me thods ESW 500 Series Switches Administrat ion Guide 14 In the thir d scenario, calle d Het erogeneous Net work , you ar e adding an ESW 500 switch to a network which do e s not ha ve an y Cisc o Small Busine ss products. D efault Configuration set tings on the ESW 500 S erie s Swi tch es The ES W 500 ser[...]

Get ting Star ted T ypical Ins talla tion Me thods ESW 500 Series Switches Administrat ion Guide 15 The ES W 540-24/24P and ESW 540-48 use shared por ts . When conne cting to uplink por ts, the GE p or ts tak e precedence over the Copper por ts . F o r example, on an ESW 540-24, if you plug a device int o GE 1 , you cannot use por t 11 . The other [...]

Get ting Star ted T ypical Ins talla tion Me thods ESW 500 Series Switches Administrat ion Guide 16 ESW-520-24/24P ESW-520-48/ 48P ESW-540-24/24P ESW-540-48[...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 17 C onne cting to the S witch This section contains inf ormation f or star ting the Swit ch Configuration Utilit y to pr ovision the switch f eatures. There are f our diff erent options t o c onnect to the switch, thr ee of which launch the Switch Configurati[...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 18 STEP 3 If your PC is using a static IP a ddress , mak e not e of your curr ent IP address s et t in gs , an d rec o rd t he m for f utu re us e. STEP 4 Place the PC on the same subnet of the switch by configuring the PC with the f ollowing param et ers : ?[...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 19 Log In p age STEP 6 Enter a user name and password. The default user name is cisco and the default pas s word is cisco . P as swords ar e both case s ensitive and alpha-numeric. Click Lo g I n . STEP 7 While the system is verifying the login at tempt, the L[...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 20 Switch C onfiguration Utilit y - System Dashbo ard STEP 9 Click Monitor & Device Propertie s > Syst em Management > IP Addr es sing > IP v 4 Interfac e . The IP v 4 Inter face page opens .[...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 21 IP v4 Inter face Page NOTE It is e xpe ct ed that the IP address to be assigne d t o the switch is known prior t o installation, bas ed on the network topology . STEP 10 Select the Static IP addr es s radio button and ent er the IP Address , Network Mask an[...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 22 NOTE If you will be using this P C f or fur ther switch configurat ion, it will nee d to be on the same subnet as the switch. Using a D ynamic IP Addre ss Allo c ated to the Sw itch By DHCP If th is met ho d of o bt ai ni ng an IP a dd re ss is us e d, you [...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 23 Log In p age STEP 2 Enter a user name and password. The default user name is cisco and the default pas s word is cisco . P asswor ds ar e both case sensit iv e an d al pha -nu mer ic. STEP 3 Click Lo g I n . The Swit ch Configuration Utility - System Dashbo[...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 24 Switch C onfiguration Utilit y - System Dashbo ard STEP 5 Y ou are now r eady to pr oce ed with additional swit ch configuration. Using the Cis co C onfiguration As sistant (CCA) NOTE T o per form an installation using CCA , you must have a PC with Windows [...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 25 STEP 1 Po wer on the ESW 500 series switch. STEP 2 Connect one of the designated uplink por ts on the ESW 500 series switch t o the ex pansion por t on the UC520 or one of the swit ch por ts on the SR520. STEP 3 Connect the P C with CCA installed to an y ac[...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 26 Co nnec t page STEP 6 Once you hav e conne ct ed to the communit y , the T opology V iew opens and displa ys the ESW 500 Series Switch. Right -click on the swit ch and it displays three options: • Device Mana ger • Proper ties • Annotation Y ou can no[...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 27 CCA T op ology View p age STEP 7 Click on Device Ma nager . The Lo g I n pa g e will launch in a new browser window . Log In p age STEP 8 Enter a user name and password. The default user name is cisco and the default pas s word is cisco . P asswor ds ar e b[...]

Get ting Star ted Conne cting to the Switch ESW 500 Series Switches Administrat ion Guide 28 STEP 10 A window opens that prompts y ou to change y our username and pas sword fr om the default . Choos e a new username and password, then click Apply . Switch C onfiguration Utilit y - System Dashbo ard STEP 11 Y ou are now r eady to pr oce ed with addi[...]

Get ting Star ted Naviga ting The Ci sc o Switch C onfigura tio n Utilit y ESW 500 Series Switches Administrat ion Guide 29 Na viga ting The Cis c o Switch C onfigura tion Utilit y The Cisco Switch Configuration U tilit y is a web - b ased device manager that is used to pr ovision the switch. Y ou must hav e IP conne ctivity be t ween the P C and t[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 30 Per forming C ommon C onfigura tion T asks Once the Switch Configuration Utilit y has been launche d and you hav e logged int o the swit ch, these are some e xamples of the common configuration tasks you can per f orm. Use the menus in the l[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 31 System I nforma tion Pa ge Fr om this page you can c onfigur e the host name of the switch, location and contact inf ormation f or support . Als o, you can view impor tant inf ormation such as the syst em uptime, sof tware version, MAC Addr [...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 32 CDP Page Review the port s f or connecting IP Phones , P C s, Acc ess Points and the uplink t o the Cisco UC520 or S R520 . Y ou can change the V oic e VLAN from the def ault of 100 if requir ed. C onfiguring the VL AN S et tings for the Swi[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 33 Prop ertie s Page C onfiguring individual por t s using Cisc o Smar tp or t Role s Smar tpor t Roles mak e it easy to provisio n swit ch por ts by automatically applying the appropriat e configuration f or at tached IP phones , acce ss p oin[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 34 Smar tp ort Role s Default Smar tpor t Roles applied to the individual por ts f or each t ype of device are as f ollows : Router • Configured f or optimal connection to a rout er or firewall f or W AN connectivity Switch • Configur ed as[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 35 NOTE The G in the port tables denotes 10/ 100/ 1000 (Gigabit) copp er or GBIC por ts on the ESW520 serie s switches , and denot es the single G 1 inter face on the 8 port versions of the swit ch. The f ollowing steps show one e xample of usi[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 36 Smar t Por ts S et ting Wizard STEP 3 Click Next . The Access P oi nt window opens. T o ensure all VLANs in the network are trunk e d t o the W ireles s Acces s Points, sele ct the dr op-down list beside Tr u n k Allowed VL ANs . S elect vl [...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 37 Smar t Por ts S et tings Wizard - Acc es s Point STEP 5 A confirmation page op ens. Re view your changes and click OK . S m a rt P o rts Se tti ng s W iz a r d - Acc ess P o i n t Se tti n g S ta t us STEP 6 Return t o the Syst em Dashb oard[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 38 Smar t Por ts S et ting Che cking the D evice Powe r Consumption Check the over view of the power consumption on the switch. Click System Dashboard > PoE Settings . The Po E S e t t i n gs page opens .[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 39 PoE Set tings Page Click Edi t to change a P oE s etting. The number of PoE devices suppor ted on a switch depends on the power r equirements f or each device and the switch mode l in question. T o help illustrat e this, the PoE Devic e Supp[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 40 PoE Devic e Supp or t In these sc enarios , a devic e would be a wir eles s acces s point , IP phone, video sur veillance camera or other such device. Re f er to the inf ormation that came with your specific device fo r power c o nsumption i[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 41 Save Configuration Page The Sav e Configuration P age c ontains the f ollowing fields : Sour ce F ile Nam e — Indicat es the devic e configuration file t o copy and the intended usage of the copie d file (Running, Startup, or B ackup ) . D[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 42 STEP 1 Ensure the P C has IP connectivit y t o the ESW 500 series switch. STEP 2 The switch can be upgraded through the TFTP or HT TP prot ocol. If you choos e t o use TF TP , the P C needs to ha ve a TF TP ser ver running on it . A fr ee TF[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 43 Fo r H T T P : C l i c k Br owse an d navigate to the file name of the image. STEP 6 Once the download is complete, click on Maint enance > File Management > Active Image The Active Image page opens . Acti ve Ima ge P age STEP 7 Choo s[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 44 Save Configuration Page STEP 9 Keep the def aults f or Sou r ce F ile N ame and Dest i na ti o n F ile N a m e and click Apply . STEP 10 Reset the switch by clicking on Monit or & Device Proper ties > Syst em Management > Restar t [...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 45 Rest ar t / Res et Page STEP 11 Click on Re se t / Reb o ot and the switch should r ebo ot with the new image. STEP 12 After the swit ch has completed rebooting and is up and running, log b ack in. STEP 13 Ensure the soft ware has been up gr[...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 46 Re set ting the D evic e The Restar t / Res et Page enables the devic e to be reset from a remot e location. Save all changes to the Running Configurat i on fi le b efore re s e t t i ng th e d ev ic e by clicking on Maint enance > F ile [...]

Get ting Star ted Performing Common Con figur ati on T asks ESW 500 Series Switches Administrat ion Guide 47 NOTE If using CCA t o launch the Switch Co nfiguration Utilit y , right-cl ick on switch > Device Manager . Refresh the t o p ology screen to get the lat e st IP address f or the switch. Manual Re set The Switch can be reset by inser ting[...]

Get ting Star ted Using The Switch Cons ole P or t ESW 500 Series Switches Administrat ion Guide 48 Using The Switch C ons ole Por t The switch f eatures a menu-base d console interfac e f or basic c onfiguration of the switch and management of your network . The switch can be configured using the menu-base d interface through the console por t or [...]

Get ting Star ted Using The Switch Cons ole P or t ESW 500 Series Switches Administrat ion Guide 49 STEP 4 On the PC, launch a terminal emulation program such as HyperT erminal (bundled with Windows ) or Putt y (freewar e) and configure a new connection with the f ollowing s ettings : • Spee d or Bits P er Se cond — 115200 • Data Bits — 8 ?[...]

Get ting Star ted Using The Switch Cons ole P or t ESW 500 Series Switches Administrat ion Guide 50 STEP 8 Scroll down t o option 6, IP Configuration, and press Enter . The IP C onfiguration Menu opens. STEP 9 Highlight option 1 , IP v 4 Address Configuration, and pres s Enter . The IP v4 Address Configuration Menu opens . STEP 10 Highlight opti on[...]

Get ting Star ted Using The Switch Cons ole P or t ESW 500 Series Switches Administrat ion Guide 51 The curr ent IP address set ting f or the ES W 500 series switch is shown. If the swit ch is alrea dy connected to the network and obtained an IP address via DHCP , this is the IP addr es s which is use d t o launch the ESW 500 Swit ch C onfiguration[...]

Mana g ing D ev ice Info rmation Unders tanding the Dashboards ESW 500 Series Switches Administrat ion Guide 52 Man aging D evic e Informa tion This sectio n provides information f or de fining both basic and advance d syst em inf ormation. This s ection contains the following t opic s: • Understanding th e D ashboards • Defining System Inf orm[...]

Mana g ing D ev ice Info rmation Unders tanding the Dashboards ESW 500 Series Switches Administrat ion Guide 53 System Dashb oard (ESW-520-24) Page[...]

Mana g ing D ev ice Info rmation Unders tanding the Dashboards ESW 500 Series Switches Administrat ion Guide 54 System Dashb oard (ESW-520-24P) Page[...]

Mana g ing D ev ice Info rmation Unders tanding the Dashboards ESW 500 Series Switches Administrat ion Guide 55 System Dashb oard (ESW-520-48) Page[...]

Mana g ing D ev ice Info rmation Unders tanding the Dashboards ESW 500 Series Switches Administrat ion Guide 56 System Dashb oard (ESW-520-48P) Page[...]

Mana g ing D ev ice Info rmation Unders tanding the Dashboards ESW 500 Series Switches Administrat ion Guide 57 System Dashb oard (ESW-540-24) Page[...]

Mana g ing D ev ice Info rmation Unders tanding the Dashboards ESW 500 Series Switches Administrat ion Guide 58 System Dashb oard (ESW-540-24P) Page[...]

Mana g ing D ev ice Info rmation Unders tanding the Dashboards ESW 500 Series Switches Administrat ion Guide 59 System Dashb oard (ESW-540-48) Page Y ou can edit a specific p ort on the switch by clicking on that por t from the devi ce view . The Syst em Dashboard page contains the f ollowing por t indicators in the device graphical r epresentation[...]

Mana g ing D ev ice Info rmation De fin in g S ys te m I nf or m a ti on ESW 500 Series Switches Administrat ion Guide 60 Common T asks • PoE S et ti n gs — Opens the P oE Set tings P age (PoE swit ches only) • Rest ar t / Res et — Opens the Restar t /Rese t Page . • Save Configuration — Opens the Sa ve C on fig ur at io n Pa ge . Help [...]

Mana g ing D ev ice Info rmation De fin in g S ys te m I nf or m a ti on ESW 500 Series Switches Administrat ion Guide 61 STEP 1 Click Monitor & Device Propertie s > Syst em Management > Syst em Information . The Syst em Inf ormation Page open s: System I nforma tion Pa ge The Syst em Inf ormation Page contains the f ollowing fields : •[...]

Mana g ing D ev ice Info rmation Vi e w i n g D e v i c e H e a l t h ESW 500 Series Switches Administrat ion Guide 62 Minutes and Sec onds. F or example: 41 days, 2 hours , 22 minut es and 15 seconds. • Base MAC Add r ess — Displays the device MAC addr es s. • Softwar e V ersi on — Displa ys the soft ware v ersion number . • Boot V ersi [...]

Mana g ing D ev ice Info rmation Vi e w i n g D e v i c e H e a l t h ESW 500 Series Switches Administrat ion Guide 63 STEP 1 Click Monitor & Device Propertie s > Syst em Management > Health . The Health Pag e opens : He a lth Page The Health P age contains the f ollowing fields: • Power Supply Status — Displa ys the power supply stat[...]

Mana g ing D ev ice Info rmation Re s et t in g t h e D e vi c e ESW 500 Series Switches Administrat ion Guide 64 - Not Pres ent -- Indicates the fan is not pr esent . Re s etting the D evic e The Re star t / Res et page enables the devic e t o be reset from a r emote location. Save all changes t o the Runni ng Configuration file bef ore r es ettin[...]

Mana g ing D ev ice Info rmation Managing Cisc o Disc over y Pro toc ol ESW 500 Series Switches Administrat ion Guide 65 Managing Cis c o Dis c over y Proto c ol The Cisco Disc over y Pr otocol (CDP) is a Cisco proprietar y pr otocol that enables devices to adv ertise their exist e nce to other devices by CDP sending out periodic updates to a Multi[...]

Mana g ing D ev ice Info rmation Managing Cisc o Disc over y Pro toc ol ESW 500 Series Switches Administrat ion Guide 66 • Vo i c e V L A N — The V oice VL AN field displa ys the curr ent V oice VL AN used by the switch. The def ault is VL AN #100 . This VLAN carrie s the voice tra ffic, and is also adver tised through the CDP t o the other ele[...]

Mana g ing D ev ice Info rmation Managing Cisc o Disc over y Pro toc ol ESW 500 Series Switches Administrat ion Guide 67 • Por t ID — Indicates the neighboring device’ s por t from which the CDP pack et was sent . STEP 2 Select Enable in the CDP Status field t o enable the Cisc o Discover y Prot oc ol on the device. STEP 3 Define a VLAN ID to[...]

Mana g ing D ev ice Info rmation Defining the Bonjour Dis cover y Pr o to col ESW 500 Series Switches Administrat ion Guide 68 • Advertis ement V ersion — Indicates the CDP version adv er tised by the neighboring device . • Native VLAN — Defines the ID numb er of the VLAN on the neighbor device. • Duplex — Displa ys the duplex stat e of[...]

Mana g ing D ev ice Info rmation Defining the Bonjour Dis cover y Pr o to col ESW 500 Series Switches Administrat ion Guide 69 The Bonjour screen contains inf ormation f or enabling/ disabling Bonjour on the device, spe cifying a Ser vic e T ype and the r elated por t used for publishing devices over the network . A S er vice T ype is the t ype of [...]

Mana g ing D ev ice Info rmation T CAM Utiliza tion ESW 500 Series Switches Administrat ion Guide 70 - HT TP — Specifie s the Ser vice T yp e s elected is HT TP . This ser vic e is enabled by default , and can be us er - disable d but not d elet ed. The ser vic e us es the default por t 80. The por t can be change d using the menu CLI. - HT TPS ?[...]

Mana g ing D ev ice Info rmation T CAM Utiliza tion ESW 500 Series Switches Administrat ion Guide 71 STEP 1 Click Monitor & Device Propertie s > Syst em Management > T CAM Utilization . The T CAM Utilization P age open s: T CAM Utiliza tion Page The T CAM Utilization Page contains the f ollowing field: • T CAM Utilization – Indicates [...]

Managing Smar t Por ts ESW 500 Series Switches Administrat ion Guide 72 Man aging Smar t Por t s The Smar t Ports wizards pr ovide net work manager s with quick and simple solution to configuring the devices by understanding an d aut omatically configuring t h e p or t set tings f o r v a rious network devices , including : • De sktop — Allows [...]

Managing Smar t Por ts Configuring Smart Por ts for Desk top s ESW 500 Series Switches Administrat ion Guide 73 NOTE By def a ult, the us er por ts are configured as IP Phone + De skt op f o r P oE swit ches and Desktop f or non-P oE switches. For devices other than IP Phone and Desktop, users need to configure the smar tpor t role per device (e.g.[...]

Managing Smar t Por ts Configuring Smart Por ts for Desk top s ESW 500 Series Switches Administrat ion Guide 74 STEP 1 Open the S witch C onfiguration Utilit y . The web application automatically opens to th e Syst em Dashbo ar d Page . System Dashb oard Page STEP 2 Click Smar t Ports Wizard under P or ts on the Sys te m Da s hb oa rd Page . The Sm[...]

Managing Smar t Por ts Configuring Smart Por ts for Desk top s ESW 500 Series Switches Administrat ion Guide 75 Smar t Por ts S et ting Page STEP 3 Select a por t or range of por ts . STEP 4 Select Desk to p in the Assi gn Pr of il e drop-down list . Click Nex t . The Smar t P or ts De skt op S ettin gs P age opens: Smar t Por ts D esktop s S etti [...]

Managing Smar t Por ts Configuring Smart Por ts for Desk top s ESW 500 Series Switches Administrat ion Guide 76 - Access — Indicat e s a por t belongs to a single untagged VL AN. This is the default set ting f or por ts that are connected to deskt ops . • VL AN ID — Indicates the VLAN to which the por t belongs. • Por t Se curit y Mode — [...]

Managing Smar t Por ts Configuring S mar t Por ts f or IP Phones and D esk top s ESW 500 Series Switches Administrat ion Guide 77 STEP 6 Click Apply . The D esktop port s ettings are saved, and the device is updated. C onfiguring Smar t Por t s for IP Phones and D e sktop s The Smar t Ports f or IP Phones and De skt ops Page allows netw ork ad mini[...]

Managing Smar t Por ts Configuring S mar t Por ts f or IP Phones and D esk top s ESW 500 Series Switches Administrat ion Guide 78 Smar t Por ts IP Phones and D esktop S et tings Page The Smar t Ports IP Phones and D e skt op Set tings Page contains the f ollowing fields: • Por ts — Indicates the por t to which Smar t Port wizard settings are ap[...]

Managing Smar t Por ts Configuring S mar t Por ts f or IP Phones and D esk top s ESW 500 Series Switches Administrat ion Guide 79 • Max MAC Addres se s — Indicates the maximum number of MAC addr es se s that can be learne d on the por t . A maximum of 3 MA C address es can be learned on the por t . • Por t Se curit y Ac tion — Indicat e s t[...]

Managing Smar t Por ts Configuring Smart Por ts for Acc ess Points ESW 500 Series Switches Administrat ion Guide 80 C onfiguring Smar t Por t s for Ac c e s s Poin ts The Smar t P or ts f or Acc ess Points Pa ge allows net work admini strators t o manage the connection b etween the switch and wireless acc es s p oints. T o configure smar t por ts f[...]

Managing Smar t Por ts Configuring Smart Por ts for Acc ess Points ESW 500 Series Switches Administrat ion Guide 81 Smar t Por ts for A cc es s Points S et tings Page The Sm a r t Por t s for Ac c e s s Poi nt s S e t t in g s Pa ge contains the f o llowing fields : • Por ts — Indicates the por t to which Smar t Port wizard settings are applied[...]

Managing Smar t Por ts Configuring Smart Por ts for Switches ESW 500 Series Switches Administrat ion Guide 82 STEP 7 Select which trunks are permit t ed in the VL AN using the Allow and Exclude buttons . STEP 8 Click Apply . The Ac ces s P oint p ort s ettings are sav ed, and the devic e is updated. STEP 9 Click OK . The Smar t po r ts Se t ting pa[...]

Managing Smar t Por ts Configuring Smart Por ts for Switches ESW 500 Series Switches Administrat ion Guide 83 STEP 4 Select Swit ch in the Ass ig n P r of il e drop-down list . Click Nex t . The Smar t Ports Swit ch Setting Page opens : Smar t Por ts S w itch S et tings Page The Smar t P or ts Swit ch Set tings Page contains the f ollowing fields :[...]

Managing Smar t Por ts Configuring Smart Por ts for R outers ESW 500 Series Switches Administrat ion Guide 84 • Macro De scription — Indicates the t ype of device conne ct ed to the por t . F or swit ches , this field is always Switch. STEP 5 Select a VLAN in the T runk Native VLAN ID drop-down list . STEP 6 Select which trunks are permit t ed [...]

Managing Smar t Por ts Configuring Smart Por ts for R outers ESW 500 Series Switches Administrat ion Guide 85 Smar t Por ts S et ting Page STEP 3 Select a por t or range of por ts . STEP 4 Select Route r in the Assi gn Pr of il e drop-down list . STEP 5 Click Nex t . The Smar t Port Router Settings Page opens :[...]

Managing Smar t Por ts Configuring Smart Por ts for R outers ESW 500 Series Switches Administrat ion Guide 86 Smar t Por t Router S et tings Page The Edit Smart Por t Rout er P age contains the following fields: • Por ts — Indicates the por t to which Smar t Port wizard settings are applied. • VL AN Por t Mode — Indicates the VLAN p or t mo[...]

Managing Smar t Por ts Configuring Smart p or ts for Guests ESW 500 Series Switches Administrat ion Guide 87 STEP 7 Select with trunk s are permit t ed in the VL AN using the Ad d and De le te but t ons. STEP 8 Click Apply . The routing por t set tings ar e saved, and the device is updated. STEP 9 Click OK . The Smar t po r ts Se t ting page opens [...]

Managing Smar t Por ts Configuring Smart p or ts for Guests ESW 500 Series Switches Administrat ion Guide 88 Smar tp ort s Guest S et tings Page The Smar tpor ts Gue st Set tings P age contains the f ollowing fields : • Por t s — Indicates the por t t o which Smar t por ts Wizar d set tings ar e applied. • VLAN Por t Mode — Indicates the VL[...]

Managing Smar t Por ts Configuring Smart p or ts for Ser vers ESW 500 Series Switches Administrat ion Guide 89 C onfiguring Smar t p or t s for Ser vers The Smar t por ts Set ting P age allows network administra to rs to d ef in e s et t i ng s bet ween the device and a se r ver . T o configure por ts using the Ser ver : STEP 1 Open the Small Busin[...]

Managing Smar t Por ts Configuring Smart p or ts for Ser vers ESW 500 Series Switches Administrat ion Guide 90 Sm art po rts Se rver Sett in gs Pa ge The Sma rt ports Se r ve r Sett ing s P ag e contains the f ollowing fields : • Por t s — Indicates the por t t o which Smar t por ts Wizar d set tings ar e applied. • VLAN Por t Mode — Indica[...]

Managing Smar t Por ts Configuring Smart p or ts for Prin t ers ESW 500 Series Switches Administrat ion Guide 91 F or warding stat e when the por t link is up. Fast Link o ptimiz es the S TP prot o col conv ergence. STP con vergence can take 30-60 sec onds in large net works. • Spanning T ree BPDU Guard — Indicat es if BPDU Guard is enabled on [...]

Managing Smar t Por ts Configuring Smart p or ts for Prin t ers ESW 500 Series Switches Administrat ion Guide 92 Smar t p or t s S et ting Page STEP 5 Click Next . The Smar tpor ts Printer Set tings Page opens : Smar tp or t s Printer Set tings Page The Smar tpor ts Printer Set tings Page contains the f ollowing fields: • Por t s — Indicates th[...]

Managing Smar t Por ts Configuring Smart p or ts for Prin t ers ESW 500 Series Switches Administrat ion Guide 93 • T runk Native VLAN ID — Indicates the VLAN to which the por t belongs . The default is VLAN 1 – the user can change this VLAN by s electing one of the cr eated VLANs via the drop down list . • Por t S ec u ri t y Mo d e — Def[...]

Managing Smar t Por ts Configuring S mar t p or ts for V S Camer a ESW 500 Series Switches Administrat ion Guide 94 C onfiguring Smar t p or t s for VS Camera The Smar t por ts Set ting P age allows network administra to rs to d ef in e s et t i ng s bet ween the device and a vide o sur veillanc e camera. T o configure por ts using a VS camera: STE[...]

Managing Smar t Por ts Configuring S mar t p or ts for V S Camer a ESW 500 Series Switches Administrat ion Guide 95 Smar t po r ts VS Camera S et tings Page The Sma rt ports Se r ve r Sett ing s P ag e contains the f ollowing fields : • Por t s — Indicates the por t t o which Smar t por ts Wizar d set tings ar e applied. • VLAN Por t Mode —[...]

Managing Smar t Por ts Configuring Smart Por ts for Other ESW 500 Series Switches Administrat ion Guide 96 • Spanning T ree Por t F a st — Indicat es Fast Link is enabled on the port . If Fast Link mode is enabled f or a por t , the Por t State is aut omatically placed in the F or warding stat e when the por t link is up. Fast Link o ptimiz es [...]

Managing Smar t Por ts Configuring Smart Por ts for Other ESW 500 Series Switches Administrat ion Guide 97 F or more inf ormation on c onfiguring SP AN (Por t Mirroring), se e Chapt er 19 , Managing Device Diagno stics. T o r emove any previous Smart Por ts conf iguration from a por t , configure smart ports f or oth er : STEP 1 Open the S witch C [...]

Managing Smar t Por ts Configuring Smart Por ts for Other ESW 500 Series Switches Administrat ion Guide 98 Smar t Por ts O ther Page The Edit Smar t Por t O the r Page contains the f ollowing fields: • Por ts — Indicates the por t to which Smar t P ort wizard set tings are applied. • VL AN Por t Mode — Indicates the VLAN p or t mo de enable[...]

Co nf ig ur in g Sy ste m Ti me De fin in g S ys te m T ime ESW 500 Series Switches Administrat ion Guide 99 C onfiguring S ystem Time The devic e suppor ts t he Simple Net work T im e Prot o col (S NTP) . S NTP assures accurate network device clo ck time syn chr onization up to the millisecon d. T ime synchr onization is per f ormed by a net work [...]

Co nf ig ur in g Sy ste m Ti me De fin in g S ys te m T ime ESW 500 Series Switches Administrat ion Guide 100 STEP 1 Click Monitor & Device Propertie s > Syst em Management > T ime > System T ime . The Sys te m T i me Pag e opens : System Ti me Page The Sys te m T i me Pag e contains the f ollowing fields: • Clock S ource — Indicat[...]

Co nf ig ur in g Sy ste m Ti me De fin in g S ys te m T ime ESW 500 Series Switches Administrat ion Guide 101 while the local time in New Y ork is GMT –5. There ar e t wo type s of daylight settings , either by a specific dat e in a particular year or a recurring set ting irrespective of the year . For a specific s etting in a par ticular year co[...]

Co nf ig ur in g Sy ste m Ti me De fin in g S ys te m T ime ESW 500 Series Switches Administrat ion Guide 102 - Month — The month of the y ear in which DST ends. The p os sible field range is Jan-Dec. - Ye a r — The year in which the configured DST ends. - Ti m e — The time at which D ST starts . The field f ormat is Hour :Minute, f or ex amp[...]

Co nf ig ur in g Sy ste m Ti me De fin in g S NT P Se tti n gs ESW 500 Series Switches Administrat ion Guide 103 D efining SNTP S et tings The SNT P Se tti ng s P ag e contains inf ormation f o r enabling S NTP ser vers , as well as adding new S NTP ser vers. In addition, the SNT P Se tti ng s P ag e enables the device to r eque st and accept S NTP[...]

Co nf ig ur in g Sy ste m Ti me De fin in g S NT P Se tti n gs ESW 500 Series Switches Administrat ion Guide 104 • Encr yption Key ID — Indicat e s the K ey Identification used to communicate bet ween the SNTP ser ver and device. The range is 1 - 42949 67295. • Pref erence — The SNTP s er ver pr oviding S NTP system time inf ormation. The p[...]

Co nf ig ur in g Sy ste m Ti me Defining SNTP Authen ti ca tio n ESW 500 Series Switches Administrat ion Guide 105 Add S NTP Ser ver P age The Add S N TP S er ver Pa ge contains the f ollowing fields : • SNT P Se r v er — The SNTP s er ver ’ s IP address . • Enable Poll Inter val — Sele ct whether or not the device po lls the s elected SN[...]

Co nf ig ur in g Sy ste m Ti me Defining SNTP Authen ti ca tio n ESW 500 Series Switches Administrat ion Guide 106 STEP 1 Click Monitor & Device Propertie s > Syst em Management > T ime > S NTP Authentication . The S N TP Authentication Page opens : SNTP Authentication Page The S N TP Authentication Page contains the f ollowing fields [...]

Co nf ig ur in g Sy ste m Ti me Defining SNTP Authen ti ca tio n ESW 500 Series Switches Administrat ion Guide 107 Add SNTP Authentication Page The Add S N TP Authentication Page contains the f ollowing fields : • Encr yption Key ID — Defines the Ke y Identification use d t o authenticate the SNTP ser ver and device. The range is 1 - 4294967295[...]

Co nf ig ur in g Dev i ce Sec u ri ty Passw ords Managemen t ESW 500 Series Switches Administrat ion Guide 108 C onfiguring D evic e S e curit y The Securit y Suite contains the f ollowing topics: • Pas s wo rds M a n ag em en t • Defining Authentication • Defining Acc es s Methods • Defining T raffic C o ntrol • Defining 802. 1 x • Def[...]

Co nf ig ur in g Dev i ce Sec u ri ty Passw ords Managemen t ESW 500 Series Switches Administrat ion Guide 109 STEP 1 Click Securi ty > Users and Pas s wo rd s > User Authentication . The User Authentication P age opens: Us er Authentica tion Page The User Authentication P age contains the f ollowing fields: • User Name — Displays the use[...]

Co nf ig ur in g Dev i ce Sec u ri ty Passw ords Managemen t ESW 500 Series Switches Administrat ion Guide 110 • User Name — Sp ecifie s the user name. • Pas s w ord — Sp ecifies the new pas sword. The password is not displa yed. As it is enter e d an * corresponding to each charact er is display ed in the field. (Range : 1 - 159 characters[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 111 STEP 3 Define the relevant fields. STEP 4 Click Apply . The lo cal user set tings are modified, and the device is updated. D efining Authentic a tion The Authentication section contains the f ollowing pages : • Defining Profiles • M[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 112 STEP 1 Click Securi ty > A uthenticati on > Pr ofiles . The Profiles P age opens : Profile s Page The Pr ofiles Page contains the f ollowing fields : • Profile Name — Displa ys the Pr ofile name defined f or the Login T able. [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 113 Add Authentication Profile Page The Add Authentication Pr ofile Page contains the f ollowing fields : • Profile Name — Defines the Authentication profile name. • Authentication Method — D efines the user au thentication metho ds[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 114 Mo difying an Authentic a tion Profile STEP 1 Click Securi ty > A uthenticati on > Pr ofiles . The Profiles P age opens : STEP 2 Click the Edit But ton. The Edit A uthentication Profile P age opens : Edit Authentica tion Profile P[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 115 Mapping Authentication Pr ofile s After authentication pr ofiles are defined, authentication profiles can be applied to management acc ess metho ds. For e xample, console us ers can be authenticated by one authentication pr ofile, while[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 116 • Se cu r e T eln et (SSH ) — Indicates that Authentication pr ofiles are used to authenticat e Se cur e Shell (S SH) users . S SH provides clients secure and en cr y pte d rem ote co nn e ct io ns to a de vi c e. • Secur e HTTP ?[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 117 D efining T AC ACS+ The devices provide T ermi na l A ccess Con tro ll er A ccess Con trol System (T AC ACS+) clien t suppor t . T ACA C S+ pr ovides centralize d s ecurit y f or validation of users acce ssing the devic e. T AC ACS+ pro[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 118 STEP 1 Click Securi ty > A uthenticati on > T ACACS+ . The TA C A C S + P a g e opens : TA C A C S + P a g e The TA C A C S + P a g e contains the f ollowing fields : • Sour ce IP A dd ress — Displa ys the device s our ce IP a[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 119 • Ti m e o u t f o r R e p l y — Displays the amount of time in seconds that pas ses bef ore the connection bet ween the device and the T ACACS+ times out . The field range is 1 - 1000 se conds . • Single Conn ection — Maintains[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 120 - Use D efault — Uses the default value f or the paramete r . If Us e De fa u lt check box i s s el ec te d , t he g lo b al va l ue of 0.0 .0. 0. i s u s e d a n d i nte rp re te d as a request t o use the IP address of the outgoing [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 121 Edit T A C AC S+ Ser ver Page The Edit T ACACS + Se r ver Pag e contains the f ollowing fields : • Host IP Addres s — Define s the T ACA C S+ Ser ver IP address . • Priorit y — Define s the order in which the T ACA CS+ s er vers[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 122 • Single Conn ection — Maintains a single open connection b etwe en the devic e and the T AC ACS+ ser ver when selected • Use D efault — Indicat es that the factor y defa ult value is us ed. STEP 3 Define the relevant fields. ST[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 123 • Radius Ac counting — Define s the authentication method use d f or R ADIUS ses sion acc ounting. Possible field value s ar e : - 802. 1 x — 802. 1 x authentication is used to initiat e acc o unting. - Lo g i n — L ogin authent[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 124 • Dead T ime — Defines the amount of time (minutes ) that a R ADIUS ser ver is bypass ed f or s er vice requests. The range is 0 -2000 . The Dead T ime default is 0 minutes. • Key St ri n g — D efines the default ke y string use[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 125 • Priorit y — Displays the ser ver priority . The pos sible values are 0-65535, where 1 is the highest value. The R ADIUS Ser ver priority is us ed t o configure the ser ver quer y or der . • Sour ce IP A dd ress — Defines the s[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Authen tica tion ESW 500 Series Switches Administrat ion Guide 126 STEP 4 Click Apply . The R ADIUS S er ver is added, and the device is updated. Mo difying R A DIUS Ser ver S et tings STEP 1 Click Securi ty > A uthentication > R ADIUS . The RA D I U S P a g e opens : STEP 2 Click the Edit button[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Methods ESW 500 Series Switches Administrat ion Guide 127 • Account ing Po r t — Indicat e s the por t used to send lo gin and logout me ssage s t o the R ADIUS ser ver . The acc ounting por t default is 1813. • Number of Retries — Defines the numb er of transmitted requests sent to R A[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Methods ESW 500 Series Switches Administrat ion Guide 128 • Defining Profile Rules D efining Ac c e ss Profile s Access p r ofi les a re pr ofiles an d ru les f or accessin g th e de vice . Access to management functions can be limited to user groups. Us er gr oups are defined f or in te rfac[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Methods ESW 500 Series Switches Administrat ion Guide 129 STEP 1 Click Securi ty > A ccess Met hod > Access P r ofi les . The Access Pr ofiles P age open s: Ac c e ss Profiles Page The Access Pr ofiles P age contains the f ollowing fields : • Acce s s Profile Name — Defines the acce s[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Methods ESW 500 Series Switches Administrat ion Guide 130 Add Acces s P ro file Pag e The Add Acce ss Profile Pa ge contains the f ollowing fields: • Acce s s Profile Name — Defines the acce ss profile name. The acces s profile name can contain up to 32 charact ers . • Rule Priority — D[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Methods ESW 500 Series Switches Administrat ion Guide 131 - HT TP — As signs HTTP ac ces s to the rule. If s elected, users acc e ssing the device using HTTP me eting acces s profile crit eria are permitted or de nied access t o the de vice . - Secur e HTTP (HTTPS) — As signs HTTPS ac ces s[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Methods ESW 500 Series Switches Administrat ion Guide 132 • Rule Pri ority • Int er face • Management Method • IP Address • Prefix L engt h • Fo r w a rd i n g A c t i o n T o define profile rules: STEP 1 Click Securi ty > A ccess Met hod > Pr ofile Rules . The Pr ofile Rules [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Methods ESW 500 Series Switches Administrat ion Guide 133 • Interfac e — Indicat es the inter face typ e t o which the rule applies . The pos sible field values ar e : - Por t — A t taches the rule to the sele ct ed p or t . - EtherChannel — Attaches the rule to the selected EtherChanne[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Methods ESW 500 Series Switches Administrat ion Guide 134 Add Profile Rule Page The Add Pr ofile Rule Page contains the f ollowing fields : • Acce s s Profile Name — Defines the acce ss profile name. The acces s profile name can contain up to 32 charact ers . • Rule Priority — D efines [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Methods ESW 500 Series Switches Administrat ion Guide 135 - HT TP — As signs HTTP ac ces s to the rule. If s elected, users acc e ssing the device using HTTP me eting acces s profile crit eria are permitted or de nied access t o the de vice . - Secur e HTTP (SSL) — As signs HT TPS acces s t[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Methods ESW 500 Series Switches Administrat ion Guide 136 Edit Profile Rule Page The Edit Pr ofile Rule P age contains the f ollowing fields: • Acce s s Profile Name — Defines the acce ss profile name. The acces s profile name can contain up to 32 charact ers . • Priorit y — Defines the[...]

Co nf ig ur in g Dev i ce Sec u ri ty De fin in g T r a f f i c Con tr ol ESW 500 Series Switches Administrat ion Guide 137 - HT TP — As signs HTTP ac ces s to the rule. If s elected, users acc e ssing the device using HTTP me eting acces s profile crit eria are permitted or de nied access t o the de vice . - Secur e HTTP (SSL) — As signs HT TP[...]

Co nf ig ur in g Dev i ce Sec u ri ty De fin in g T r a f f i c Con tr ol ESW 500 Series Switches Administrat ion Guide 138 • Defining Storm Control • Defining Port S ecurit y D efining Storm C ontr ol St orm Control enables limiting the amount of Multicast a nd Br oadcast frames acc e pted and fo r warded by the device. When Layer 2 frames ar [...]

Co nf ig ur in g Dev i ce Sec u ri ty De fin in g T r a f f i c Con tr ol ESW 500 Series Switches Administrat ion Guide 139 STEP 1 Click Securi ty > Tr a f f i c C o n t r o l > Storm Control . The Storm Contr ol P a ge opens : Storm C ontrol Page The Storm Contr ol Page contains the f ollowing fields: • Unknown Unicast Group Control — On[...]

Co nf ig ur in g Dev i ce Sec u ri ty De fin in g T r a f f i c Con tr ol ESW 500 Series Switches Administrat ion Guide 140 - Disable — Disables Broadcast pack et t ypes to be f or war ded. • Broadcast Rat e Threshold — Indicat es the maximum rate (kilobits per sec ond) at which unknown pack ets are f or warded. - F or FE por ts, the rate is [...]

Co nf ig ur in g Dev i ce Sec u ri ty De fin in g T r a f f i c Con tr ol ESW 500 Series Switches Administrat ion Guide 141 • Por t — Indicat es the por t from which st orm control is enabled. • Enable Broadcast Control — Indicates if Br oadcast packet typ es are f or warded on the specific interface. The po ssible field values are: - Check[...]

Co nf ig ur in g Dev i ce Sec u ri ty De fin in g T r a f f i c Con tr ol ESW 500 Series Switches Administrat ion Guide 142 locked. When a packet is r ec eived on a locked por t , and the packet source MAC addr es s is not tied t o that p or t (either it was learned on a dif fer ent por t , or it is unknown t o the system ), the protection mechanis[...]

Co nf ig ur in g Dev i ce Sec u ri ty De fin in g T r a f f i c Con tr ol ESW 500 Series Switches Administrat ion Guide 143 STEP 1 Click Securi ty > Tr a f f i c C o n t r o l > Po r t S ec u ri t y . The Por t S e c u ri t y Pag e opens : Por t Se curit y Page The Por t S e c u ri t y Pag e contains the f ollowing fields: • Ports Radio But[...]

Co nf ig ur in g Dev i ce Sec u ri ty De fin in g T r a f f i c Con tr ol ESW 500 Series Switches Administrat ion Guide 144 - Classic Lock — L ocks the por t using the clas sic lock mechanism. The por t is immediately locked, r egardles s of the number of address es that ha ve already been learne d. - Limited Dynamic L ock — L ocks the p or t b[...]

Co nf ig ur in g Dev i ce Sec u ri ty De fin in g T r a f f i c Con tr ol ESW 500 Series Switches Administrat ion Guide 145 Mo dif ying Por t Se curit y STEP 1 Click Securi ty > Tr a f f i c C o n t r o l > Po r t S ec u ri t y . The Por t S e c u ri t y Pag e opens : STEP 2 Click the Edi t Button. The Ed it Por t S e cu ri t y Pag e opens : [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 146 maximum addr es se s allowed on the por t . B oth r elearning and aging MAC addr es se s ar e enable d. Pr eviously l earned MAC addr es se s ar e not deleted but ar e converted to a static MA C address . • Max Entries — Spe cifies the numb[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 147 • Authenticators — Specifies the port , which is authenticat ed bef ore permitting syst em acce ss . • Supplicants — Sp ecifies host c onnected to th e authenticat ed p or t r eque sting t o acc es s the syst em ser vic es . • Authent[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 148 STEP 1 Click Securi ty > 802. 1 X > Pr oper ties . The 802. 1 X Propertie s P age opens: 802. 1 X Proper ties Page The 802. 1 X Proper ties Page contains the f ollowing fields : • Port Bas ed Authentication St ate — Enables Port-based[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 149 - Checked — Enables using a Gue s t VL AN f or unauthorized por ts . If a Guest VL AN is enabled, the unauthorized por t automatica lly joins the VLAN s elected in the VL AN List field. - Unchecked — Disables us e of a Guest VLAN f or unaut[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 150 STEP 1 Click Securi ty > 802. 1 X > P or t Authentication . The 802. 1 X Port Authentication Pag e opens : 802. 1 X Por t Authentication Page The 802. 1 X Port Authentication P age contains th e f ollow ing fields : • Copy Fr om Entry N[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 151 - 802. 1 x & MAC — Enables 802. 1 x + MAC Authentication on the device. In the case of 802. 1 x + MAC, 802. 1 x tak es preced ence. • Pe rio dic Rea uthentication — Enables por t reauthentication. The def ault value is disable d. • [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 152 STEP 3 Click Apply . The 802. 1 X por t authentication set tings ar e defined, and the device is updated. Mo difying 8021 X Se curit y STEP 1 Click Securi ty > 802. 1 X > P or t Authentication . The 802. 1 X Pro pertie s P age opens : STE[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 153 - auto — Enables por t-based authentication on the device. The interface moves bet ween an authorized or unauthorized stat e base d on the authentication e xchange betwee n the device and the client . - fo r c e A u t h o r i z e d — Indica[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 154 - Unchecked — P or t authentication acc or ding to the R eauthentication settings above. • Authenticator Stat e — Specifie s the port authorization state. The possible field values are as f ollows : - Initialize — Enables por t-base d a[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 155 D efining Authentication The 802. 1 X Authentication P age allows network managers to configur e advanced por t- b as ed authentication settings f or sp ecific por ts and VLANs . STEP 1 Click Securi ty > 802. 1 X > Au thentication . The 8[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 156 • Action on V iolation — D efines the action to be applied to pack ets arriving in single-host mo de, fr om a host who se MAC addr es s is not the supplicant MAC addr es s. The pos sible fiel d values ar e : - Fo r w a r d — F or wards th[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 157 Mo difying Authentic a tion Set tings STEP 1 Click Securi ty > 802. 1 X > Au thentication . The 802. 1 X Port Authentication P age open s: STEP 2 Click the Edit but t on. The Edit Authentication P age opens : Edit Authentication Page The [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 158 - Discard — Discar ds the pack ets . This is the def ault value. - Shut Down — Discards the pack ets and shuts down the por t . The p orts r emains shut down until reactivat ed, or until the devic e is r eset . • Enable T rap s — Indica[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining 802. 1 x ESW 500 Series Switches Administrat ion Guide 159 STEP 1 Click Securi ty > 802. 1 X > Au thenticated Hosts . The Authenticat ed Ho st Pa ge open s: Authenticated Ho sts Page The Authenticat ed Hosts Page contains the f ollowing fields: • User Name — Lists the supplicants that wer e a[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 160 - RA D I U S — Indicates the supplicant was authenticat ed by a R ADIUS ser ver . • MAC Addr es s — Displa ys the supplicant MAC addr es s. D efining A cc e s s C on trol Access C on trol Li sts (ACL ) allow net work managers to de[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 161 MA C B ase d AC L Page The MAC Base d ACL Page contains the f ollowing fields : • ACL N ame — Displa ys the user -define d MAC based ACLs. • Priorit y — Indicates the ACE priority , which dete rmines which ACE is matched t o a pa[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 162 • 802. 1 p Mask — Displays the wildcar d bits to be applied to the CoS. • Ether typ e — Displays the Ethernet type of the packe t . • Action — Indicates the A CL f or war ding action. F or example, the port can b e shut down,[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 163 - MAC Addr es s — Mat ches the source MAC addr e ss from which packets are address ed to the AC E . - W ildcar d M ask — Indicat es the source MAC Address wild card mask . W ildcards ar e us ed to mask all or par t of a source MAC Ad[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 164 STEP 3 Define the relevant fields. STEP 4 Click Apply . The MAC Based ACL is defined, and the device is updat e d. Adding Rule to MAC Bas e d A CL STEP 1 Click Se curity > Ac ces s Control Lists (ACL ) > MAC Base d ACL . The MAC Ba[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 165 - MAC Addr es s — Mat ches the source MAC addr e ss from which packets are address ed to the AC E . - W ildcar d M ask — Indicat es the source MAC Address wild card mask . W ildcards ar e us ed to mask all or par t of a source MAC Ad[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 166 STEP 4 Define the relevant fields. STEP 5 Click Apply . The ACL Rule is defined, and the device is up dat ed. Mo difying MAC B ase d ACL STEP 1 Click Se curity > Ac ces s Control Lists (ACL ) > MAC Based ACL . The MAC Base d ACL Pa[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 167 - W ildcar d M ask — Indicat es the source MAC Address wild card mask . W ildcards ar e us ed to mask all or par t of a source MAC Addr e ss . W ild card masks specif y which oct ets ar e used and which oct ets ar e ignored. A wild car[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 168 STEP 4 Click Apply . The MAC Bas e d ACL is modified, and the device is updated. D efining IP B as e d A CL The IP Bas ed ACL P a ge page contains inf ormation f or defining IP B ased ACLs, including defining the ACEs defined f or IP B a[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 169 • Prot oc ol — Cr eates an ACE bas ed on a specific prot oc ol. The pos sible field values are: - ICMP — Internet Contr ol Mess age Pr ot oco l (ICMP) . The ICMP allows the ga tew ay o r d e st in at io n h o st to c om mu ni c ate[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 170 - AH — Authentication Header (AH) . Pr ovide s source host authentication and data integrit y . - EIGRP — Enhanced Interior Gat ewa y R outing Pr ot ocol (EIGRP). Pr ovides fast con vergence, suppor t f or va riable-length subnet mas[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 171 - IP Address — Displays the source por t IP address to which pack ets are addres sed to the ACE . - Wil dc a rd M as k — Displays the source IP address wildcard mask . W ildcar d masks sp ecify which bits are used and which bits are [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 172 Add IP B ase d A CL Page The Add IP Bas ed ACL Pa ge contains the f ollowing fields : • ACL N ame — Defines the user -define d IP based ACLs. • New Rule Priority — Indicat es the rule priorit y , which determines which rule is ma[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 173 - Psh — Push - Rst — Reset - Syn — Sync hroni ze - Fin — Fi na l • ICMP — Indicat es if ICMP packets ar e permit ted on the network . The pos sible field values a re as f ollows: • ICMP Code — Indicates and ICMP mes sage [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 174 • Tr af f i c C l a s s — Indicates the traffic clas s t o which the packets ar e matched. The po ssi ble field values a r e : - Checked — Matches pack ets t o traffic clas ses . - Unchecked — Doe s not mat ch packets t o traf fi[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 175 Edit IP B ase d ACL Page The Edi t I P B a s e d ACL Pa g e c ontains the f ollowing fields : • ACL N ame — Displa ys the user - define d base d ACLs. • New Rule Priority — Indicat es the rule priorit y , which determines which r[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 176 • ICMP Code — Indicates and ICMP mes sage code for filt ering ICMP packets. ICMP packets that ar e filt ered by ICMP mess age typ e can also be fil t ered by the ICMP mes sage code. • IGMP — Filt ers packe ts by IGMP mes sage or [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 177 STEP 3 Define the relevant fields, STEP 4 Click Apply . The IP B a sed ACL is modified, an d the device is updated. Adding an IP B as ed Rule STEP 1 Click Securi ty > Acces s Control Lists (A CL) > IP Based A CL . The IP Base d ACL[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 178 • Sour ce P ort — Defines the T CP /UDP source por t to which the ACE is mat ched. This field is active only if 800/6- T CP or 800/ 17 -UDP are selected in the Se lect from List dr op-down list . The pos sible field range is 0 - 6553[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 179 STEP 4 Define the relevant fields, STEP 5 Click Apply . The IP B a sed ACL is modified, an d the device is updated. D efining ACL Binding When an ACL is bound t o an interface, all the AC E rules that ha ve been defined are applied to th[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Acc ess Control ESW 500 Series Switches Administrat ion Guide 180 • T o Entr y Numb er( s) — Assigns the c opied ACL binding configuration to the specifie d table entr y . • Ports/EtherChannels — Indicates the int er face t o which the ACL is bound. F or each entr y , an int er face has a bound[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DoS Preven t ion ESW 500 Series Switches Administrat ion Guide 181 STEP 4 Click Apply . The ACL binding is define d, an d the device is updated. D efining D oS Preven tion Denial of Ser vice (DO S) increases net work securit y by prev enting packets with invalid IP addr e ss e s fr om entering the netw[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DoS Preven t ion ESW 500 Series Switches Administrat ion Guide 182 STEP 1 Click Securi ty > DoS Prev ention > Global S ettings . The Global S et tings Page open s: Glob al S et tings Page The Global S ettings Page contains the f ollowing fields : • Securit y Suite Status — Indicates if DoS se[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DoS Preven t ion ESW 500 Series Switches Administrat ion Guide 183 • Back Orif ic e T rojan — Discards UDP packets with destination UDP p o r t e qual t o 31337 and source UDP por t equal t o 1024. STEP 2 Define the relevant fields. STEP 3 Click Apply . The DoS prevention global set tings ar e defi[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DoS Preven t ion ESW 500 Series Switches Administrat ion Guide 184 STEP 1 Click Securi ty > DoS Prev ention > Mar tian Addr es ses . The Mar tian Address es Pag e opens : Ma r t ian Add r esses P a ge The Mar tian Address es Page contains the f ollowing fields: • In cl ud e R eserved Ma rtia n [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 185 Add Mar tian Addres se s Page The Add M ar tian Addre ss es Page contains the f ollowing fields : • IP Address — Enter the Mar tian IP addresse s f or which Do S at tack is enabled. The po s sible values are: - One of the addr es ses [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 186 The DHCP Snooping T able contains the untrusted int er faces MAC addr es s, IP address , Lease T ime, VL AN ID , and interfac e inf ormati on. The DHCP Snooping s ection contains the f ollowing topics : • Defining DHCP Snooping Proper t[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 187 STEP 1 Click Securi ty > DHCP Snooping > Pr oper ties . The DHCP Snooping Proper ties Pag e opens : DHCP Sno oping Proper tie s Page The DHCP Snooping Proper ties Page contains the f ollowing fields : • Enable DHCP Snooping — In[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 188 - Checked — V erifies (on an untrusted por t) that the source MAC addr ess of the La yer 2 header matches the client hardwar e addres s as appears in the DHCP Header (par t of the payload). - Unchecked — Disable s verifying that the s[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 189 STEP 1 Click Se curity > DHCP Sno oping > VLAN Set tings . The DHCP Snooping VL AN Settings P age opens : DHCP Snooping VL AN S et tings Page The DHCP Snooping VL AN Set tings P age contains the f ollowing fields : • VLAN ID — I[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 190 STEP 1 Click S ecurit y > DHCP Snoo ping > T rusted Interface s . The Tr u s t e d I n t e r f a c e s Pag e opens : T ruste d Interfac es Page The Tr u s t e d I n t e r f a c e s P a g e contains the f ollowing fields : • Por ts[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 191 Edit T rusted Inter face Page The Edit T rusted Int er face Page contains the f ollowing field: • Interface — C ontains a list of e xisting interface s. • T rust Status — Indicates whether the interface is a T r ust ed Interfac e.[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 192 STEP 1 Click Securit y > DHCP Snooping > Binding Datab ase . The Binding Database Page open s: Binding Database Page STEP 2 Define any of the f ollowing fields as a quer y filte r : Quer y By • MAC Addr es s — Indicat es the MAC[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 193 - EtherChannel — Queries the VL AN database by EtherChannel numb er . STEP 3 Click Quer y . The r esults app ear in the Quer y Res ult s table. Quer y Re sults The Quer y Results table contains the f ollowing fields: • MAC Addr es s ?[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 194 Add D HCP Snoopi ng En tr y Pa ge The window displa ys the f ollowing fields: • Ty p e — Displays the IP addr es s binding typ e . The p os sible field values are: - Static — Indicates the IP addr e ss is static. - Dyna mic — Indi[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 195 D efining IP S ource Guard IP Source Guard is a securit y featur e that r estricts the client IP traf fic t o thos e sour ce IP addr es ses configur e d in t he DHCP Snooping Binding Databas e and in manually configured IP source bindings[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 196 STEP 1 Click Se curity > DHCP Sno oping > IP Source Guard > Pr op er ties . The IP Source Guar d Pr oper ties P age opens : IP Sourc e Guar d Proper ties Page The IP Source Guar d Proper ties Page contains the f ollowing fields :[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 197 De fining IP Sourc e Guar d Inter face Set tings In the IP Source Guar d Int er face S ettings Page , IP Source Guard can be enabled on DHCP Snooping untrusted interface s, perm itting the transmis sion of DHCP packets allowed by DHCP Sno[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 198 STEP 1 Click Se curity > DHCP Sno oping > IP Source Guar d > Interface S ettings . The IP Source Guar d Inter face Settings P age open s: IP Source Guard Interfac e S et tings Page The IP Source Guard Int er face S ettings Page c[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 199 Edit Interface S et tings Page STEP 3 Define the fields . STEP 4 Click Apply . The new IP Source Guar d Interface configuration is added, and the device is updated. Quer ying the IP S ource Binding Datab ase The IP Source Guard Binding Da[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 200 STEP 1 Click Se curity > DHCP Sno oping > IP Source Guard > Binding Database . The IP Source Guar d Binding Databas e P age opens : IP Sourc e Guard Binding Databas e Page The IP Source Guar d Binding Database Page contains the f[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining DHCP Sno oping ESW 500 Series Switches Administrat ion Guide 201 Quer y By STEP 2 In the Quer y By section, select and define the pref erred filt er f or s ear ching the IP Sour ce Guar d Dat abase: • MAC Addr es s — Queries the databa se by MAC addr es s. • IP Address — Queries the database by[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Dynamic ARP I nspe ct ion ESW 500 Series Switches Administrat ion Guide 202 - VL AN — Indicat es that DHCP Sno oping is no t enabled on the VL AN. - Tr u s t e d P o r t — Indicates the por t is a trust ed p or t . - Res ou rce P rob lem — Indicates that the T CAM is full. STEP 4 Define the relev[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Dynamic ARP I nspe ct ion ESW 500 Series Switches Administrat ion Guide 203 If the packet’ s IP address was not f ound in the ARP Inspe ction List , and DHCP snooping is enabled f or a VLAN, a search of the DHCP Snooping Databas e is per f ormed. If the IP address is f ound, the packet is valid and i[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Dynamic ARP I nspe ct ion ESW 500 Series Switches Administrat ion Guide 204 STEP 1 Click Se curity > ARP Inspection > Proper ties . The ARP Inspection Proper ties Page open s: ARP Inspe ction Prop ertie s Page The ARP Inspe ction Proper ties Page contains the f ollowing fields : • Enable ARP In[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Dynamic ARP I nspe ct ion ESW 500 Series Switches Administrat ion Guide 205 • Lo g B u f fe r I n te r v a l — Defines the minim al int er val bet ween succ es sive S yslog me ssag es. T he poss ib le fi el d v al ues a r e : - Retr y Fr eq uency — Fr equency at which the log is updated. The pos [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Dynamic ARP I nspe ct ion ESW 500 Series Switches Administrat ion Guide 206 STEP 1 Click Se curity > AR P Inspection > T rusted Interfaces . The ARP Inspe ction T rusted Int er faces P age opens : ARP Inspe ction Trusted Interfac es Page The ARP Inspe ction T rusted Int er faces Page contains the[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Dynamic ARP I nspe ct ion ESW 500 Series Switches Administrat ion Guide 207 STEP 2 Click Edi t . The Edit Inter fac e S et tin gs Page opens : Edit Interface S et tings Page STEP 3 Define the fields . STEP 4 Click Apply . The T rusted Int erface’ s configuration is modified, and the device is updated[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Dynamic ARP I nspe ct ion ESW 500 Series Switches Administrat ion Guide 208 STEP 1 Click Se curity > AR P Inspection > ARP Insp ection List . The ARP Insp ection List Pag e opens : ARP Insp e ction List Page The ARP Inspe c tion List Page contains the f ollowing fields : • ARP Inspection List N[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Dynamic ARP I nspe ct ion ESW 500 Series Switches Administrat ion Guide 209 Add A RP l ist P age STEP 3 Define the fields and click Apply . The new ARP Insp ection List is added and the device is updated. Adding a Binding List entr y STEP 1 Select an ARP Inspection List Name fr om the drop-down list . [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Dynamic ARP I nspe ct ion ESW 500 Series Switches Administrat ion Guide 210 A ssignin g ARP In spe ction VL AN S et tings The ARP Inspe c tion VL AN Set tings Page contains fields f or enabling ARP Inspection on VL ANs. In the Enabled VL AN table, users as sign static ARP Inspection Lists to enabled VL[...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Dynamic ARP I nspe ct ion ESW 500 Series Switches Administrat ion Guide 211 STEP 1 Click Se curity > AR P Inspection > VL AN Set tings . The ARP Inspe c tion VL AN Settings P age opens : ARP Inspe ction VL AN Set tings Page The ARP Inspe c tion VL AN Set tings Page contains the f ollowing fields [...]

Co nf ig ur in g Dev i ce Sec u ri ty Defining Dynamic ARP I nspe ct ion ESW 500 Series Switches Administrat ion Guide 212 Add ARP VL AN S et tings Page The Add ARP VL AN S ettings Page contains the f ollowing fields : • VLAN ID — Select the VLAN which includes the spe cified ARP I nspe ction List . • List Name — Sele ct a static ARP Inspe [...]

Co nf ig ur in g P orts Por t S et t in gs ESW 500 Series Switches Administrat ion Guide 213 C onfiguring Por t s Por t S et tings The Port S ettings Page contains fields f or defining por t parameters. T o define por t settings: STEP 1 Click V LA N & P ort Se tt in gs > P ort Ma na ge me nt > Po r t S et t i ng s . The Por t S et ti ng s[...]

Co nf ig ur in g P orts Por t S et t in gs ESW 500 Series Switches Administrat ion Guide 214 • Por t T y pe — Di spla ys th e port type. The poss ible fie ld va lues ar e: - 100M — Copper - 1000M — Copper (c opper cable). - 1000M — ComboC (comb o por t with copper cable 3). - 1000M — ComboF (c ombo por t with optic fiber cable) . - 1000[...]

Co nf ig ur in g P orts Por t S et t in gs ESW 500 Series Switches Administrat ion Guide 215 Mo dif ying Por t Se t tings STEP 1 Click VL AN & Por t S ettings > Port Management > Por t S et ti n gs . The Por t S et ti ng s Pag e opens : STEP 2 Click a specific entr y ’ s Edit button. The Edit P or t Page opens : Edit Por t Page The Edit[...]

Co nf ig ur in g P orts Por t S et t in gs ESW 500 Series Switches Administrat ion Guide 216 - 100M — Copper - 1000M — Copper (c opper cable). - 1000M — ComboC (comb o por t with copper cable 3). - 1000M — ComboF (c ombo por t with optic fiber cable) . - 1000M F iberOptic s — Indicates the por t has a fib e r optic por t connection. • A[...]

Co nf ig ur in g P orts Por t S et t in gs ESW 500 Series Switches Administrat ion Guide 217 • Admin Advertis ement — S pecif ies the cap abi lit ies t o be a dv ertised by t he Port . The p os s ibl e field values are: - Max Capability — Indicates that all por t spee ds and Duplex mode settin gs c an be a ccept ed. - 10 Half — Indicates th[...]

Co nf ig ur in g P orts Por t S et t in gs ESW 500 Series Switches Administrat ion Guide 218 Ethernet cable can be used, and the pairs are mat ched up properly . When t wo hubs or switches ar e conne ct ed to each other , or t wo end stations ar e connected to each other , a cross over cable is used to ensur e that the c orr ect pairs are connected[...]

Co nf ig ur in g V L A Ns ESW 500 Series Switches Administrat ion Guide 219 C onfiguring VL ANs VLANs are logical sub gro ups with a L ocal Area Net work (L AN) which combine user stations and network devic es int o a single unit , regardless of the physical LAN se gment to which they ar e attache d. VLANs allow net work traffic t o flow mor e ef f[...]

Co nf ig ur in g V L A Ns Defining VL AN Proper tie s ESW 500 Series Switches Administrat ion Guide 220 D efining VL AN Prop er tie s The VLAN Proper ties Page pr ovides inf ormation and glob al paramet ers f or configuring an d workin g with VLANs . T o define VL AN pr oper ties : STEP 1 Click VL AN & P or t Set tings > VL AN Management >[...]

Co nf ig ur in g V L A Ns Defining VL AN Proper tie s ESW 500 Series Switches Administrat ion Guide 221 • Authentication — Indicat es whether unauthorized us ers can acce ss a Guest VLAN. The p ossible field value s ar e : - Enable — Enables unauthorized users to use the Guest VLAN. - Disable — Disables unauthorized us ers from using the Gu[...]

Co nf ig ur in g V L A Ns Defining VL AN Proper tie s ESW 500 Series Switches Administrat ion Guide 222 Mo dif ying VL ANs STEP 1 Click VL AN & Por t S ettings > VL AN Management > Proper ties . The VL AN Proper ties Page open s. STEP 2 Click Edi t . The Edi t VL AN Page opens: Edit VL AN Page The Edit V LAN Page contains inf ormation f o[...]

Co nf ig ur in g V L A Ns Defining VL AN Proper tie s ESW 500 Series Switches Administrat ion Guide 223 STEP 3 Define the relevant fields. STEP 4 In the P or t List , sele ct the por ts t o include in the VLAN and click the adjac ent right arrow . The selected por ts then appear in the VL AN Members list . STEP 5 Click Apply . The VL AN Set tings a[...]

Co nf ig ur in g V L A Ns Defining VL AN Proper tie s ESW 500 Series Switches Administrat ion Guide 224 • VLAN Name — Displays the VLAN name. • VLAN T yp e — Indicat es the VLAN t ype. The po ssible field value s ar e : - Dyna mic — Indicates the VLAN was dynamically cr eated thr ough GVRP . - Static — Indicates the VLAN is user - defin[...]

Co nf ig ur in g V L A Ns Defining VL AN Proper tie s ESW 500 Series Switches Administrat ion Guide 225 Edit Interfac e Stat us Page The Edit Inter face Sta tus Page contains the f ollowing fields: • VLAN ID — Displa ys the VLAN ID . • VLAN Name — Displays the VLAN name. • Interface — D efines the por t or EtherChannel at tached to the [...]

Co nf ig ur in g V L A Ns Assigning Ports to Multiple VL ANs ESW 500 Series Switches Administrat ion Guide 226 A s signing Por ts to Multiple VL ANs B e fo r e e n a b l i n g V L A N s fo r t h e s w i t c h , y o u must first assign each p or t t o the VLAN group(s ) in which it will par ticipate. By def ault all p or t s ar e as signed to VLAN 1[...]

Co nf ig ur in g V L A Ns Assigning Ports to Multiple VL ANs ESW 500 Series Switches Administrat ion Guide 227 STEP 1 Click VL AN & P or t Set tings > VL AN Management > VLAN to P or t . The VL AN T o Por t Pag e opens : VL AN T o Por t Page The VL A N T o Po r t Pa ge contains the f ollowing fields : • Por t s — Indicates that por ts[...]

Co nf ig ur in g V L A Ns Assigning Ports to Multiple VL ANs ESW 500 Series Switches Administrat ion Guide 228 • Join VLAN — D efines the VL ANs to which the interface is joine d. Pr es sing the Join VLAN but ton displa ys the Join VLAN to P or t Pa ge . Select the VL AN to which t o add the p ort , sele ct the VLANs to be tagged or untagged an[...]

Co nf ig ur in g V L A Ns De fin ing I n t erf ace Se ttin gs ESW 500 Series Switches Administrat ion Guide 229 D efining Inter fac e Set tings The VLAN Inter face Set ting Page pr ovide s paramet ers f or managing por ts that ar e par t of a VLAN. The p ort default VL AN ID (PVID) is configured on the VLAN Por t Settings page. All untagge d pack e[...]

Co nf ig ur in g V L A Ns De fin ing I n t erf ace Se ttin gs ESW 500 Series Switches Administrat ion Guide 230 • Interfac e — The por t number included in the VL AN. • Interface VL AN Mode — Indicat es the por t mode. P os sible values are: - General — The por t belongs to VLANs , and each VL AN is user - define d as tagged or untagge d [...]

Co nf ig ur in g V L A Ns De fin ing I n t erf ace Se ttin gs ESW 500 Series Switches Administrat ion Guide 231 Edit VL AN Por t Page The Edit VLAN Por t P age contains the f ollowing fields : • Interfac e — The por t or EtherChannel asso ciat ed with this VL AN int er face configuration. • VLAN Mo de — Indicates the por t mode. Possible va[...]

Co nf ig ur in g V L A Ns De fin in g G VR P Sett ing s ESW 500 Series Switches Administrat ion Guide 232 • Ingress Filt ering — Ingr es s filt ering discards pack ets which do not include an ingress por t . The po ssible value s are: - Enable — Ingress filtering is activat ed on the por t . - Disable — Ingress filtering is not activat ed o[...]

Co nf ig ur in g V L A Ns De fin in g G VR P Sett ing s ESW 500 Series Switches Administrat ion Guide 233 STEP 1 Click VL AN & P or t Set tings > VL AN Management > G VRP Set tings . The GVR P Settings Pag e opens : GV R P S e t t i ng s Pa g e The GVR P Se t t in g s Pa ge contains the f ollowing fields: • GV RP Glob al Status — Indi[...]

Co nf ig ur in g V L A Ns De fin in g G VR P Sett ing s ESW 500 Series Switches Administrat ion Guide 234 • GVRP Stat e — Indicat es if G VRP is enabled on the interface. The pos sible field values are: - Enabled — Enables GVRP on the selected interface. - Disable d — Disables GVRP on the select ed inter f ace. • Dynamic VL AN Cr eation ?[...]

Co nf ig ur in g V L A Ns De fin in g G VR P Sett ing s ESW 500 Series Switches Administrat ion Guide 235 Edit GVRP Page The Edit GVRP Page contains the f ollowing fields: • Interfac e — P or t or EtherChannel describ ed by the GVRP settings entr y . • GVRP Stat e — Indicat es if G VRP is enabled on the interface. The pos sible field values[...]

Co nf ig ur in g V L A Ns Defining Pr otocol Groups ESW 500 Series Switches Administrat ion Guide 236 D efining Proto c ol Gr oup s The Pr otocol Gro up P age contains inf ormation which des cribes the prot ocol names and the VLAN Ethernet t ype. Interface s can be classifie d as a specific pr otocol bas ed interface. STEP 1 Click VL AN & P or [...]

Co nf ig ur in g V L A Ns Defining Pr otocol Groups ESW 500 Series Switches Administrat ion Guide 237 Add Protoc ol Group Page The Add Pr otocol Gro up Page pr ovides information f or configuring new VL AN pr otocol groups . The Add Protocol Gr oup P age contains the f ollowing fields . • Frame T yp e — Displa ys the pack et t ype. • Prot o c[...]

Co nf ig ur in g V L A Ns De fin in g a P r o t ocol P ort ESW 500 Series Switches Administrat ion Guide 238 Edit Protoc ol Gr oup Page The Edit Pr otocol Group P age contains the f ollowing fields . • Frame T yp e — Displa ys the pack et typ e. • Prot o col V alue — Displa ys the User - defined prot oc ol value. • Gr oup ID (He x) — De[...]

Co nf ig ur in g V L A Ns De fin in g a P r o t ocol P ort ESW 500 Series Switches Administrat ion Guide 239 STEP 1 Click VL AN & P or t Set tings > VLAN Management > Protocol Port . The Prot o col Por t Pa ge opens : Proto col Por t Page The Pr otocol Port Page contains the f ollowing fields . • Interfac e — P or t or EtherChannel nu[...]

Co nf ig ur in g V L A Ns De fin in g a P r o t ocol P ort ESW 500 Series Switches Administrat ion Guide 240 Add Protoc ol Por t to VL AN Page The Add Pr otocol Port to VLAN Page contains the f ollowing fields . • Interfac e — P or t or EtherChannel number added to a pr otocol gr oup. • Group ID — Pr otocol gro up ID to which the int er fac[...]

Configuring IP Information IP Addressing ESW 500 Series Switches Administrat ion Guide 241 C onfiguring IP Informa tion The IP addr es s and default gatewa y can b e either dynamically or statically configured. In Lay er 2, a static IP addr ess is configured on the IPv4 Int erface Page. The Management VL AN is set to VL AN 1 by default , but can be[...]

Configuring IP Information IP Addressing ESW 500 Series Switches Administrat ion Guide 242 STEP 1 Click Monitor & Device Propertie s > Syst em Management > IP Addr es sing > IP v 4 Interfac e . The IP v 4 Inter face P age opens : IP v4 Inter face Page The IP v 4 Inter face P age contains the f ollowing fields : • Get Dynamic IP from [...]

Configuring IP Information Defining DHCP Rela y ESW 500 Series Switches Administrat ion Guide 243 • Active Default Gat eway — Activ e default gatewa y ’ s IP Addr es s . • Remove User Defined — Removes the s ele ct ed IP ad dr es s from the int er face. The po ssi ble field values a r e : - Checked — Removes the IP addr es s from the in[...]

Configuring IP Information Defining DHCP Rela y ESW 500 Series Switches Administrat ion Guide 244 STEP 1 Click Monitor & Device Propertie s > S ystem Management > IP Addr es sing > DHCP Relay > DHCP Ser ver . The DHCP Ser ver Page open s: DHCP Ser ver Page The DHCP Ser ver P age Ser ver contains the f ollowing fields : • DHCP Rela[...]

Configuring IP Information Defining DHCP R elay In ter face s ESW 500 Series Switches Administrat ion Guide 245 Add D HCP Ser ver Page The Add DHCP Ser ver Page contains the f ollowing field: • DHCP Ser ver IP Addres s — Defines the IP address as signed to the DHCP ser ver . STEP 3 Define the relevant fields. STEP 4 Click Apply . The DHCP S er [...]

Configuring IP Information Defining DHCP R elay In ter face s ESW 500 Series Switches Administrat ion Guide 246 STEP 1 Click Monitor & Device Propertie s > S ystem Management > IP Addr es sing > DHCP Relay > DHCP Int er faces . The DHCP Int er faces P age opens : DHCP Interfac es Page The DHCP Int er faces P age contains the f ollow[...]

Configuring IP Information Managing ARP ESW 500 Series Switches Administrat ion Guide 247 Add D HCP Int erface Pa ge The Add DHCP Interface Page contains the f ollowing field: • Interfac e — Selects the interfac e t o define DHCP Rela y . The p ossible fiel d value is : - VL AN — Defines the DHCP Relay on the selected VLAN. STEP 3 Select the [...]

Configuring IP Information Managing ARP ESW 500 Series Switches Administrat ion Guide 248 STEP 1 Click Monitor & Device Propertie s > S ystem Management > IP Addr es sing > ARP . The ARP Pa ge opens : ARP Page The ARP Pa ge contains the f ollowing fields. • ARP Entr y Age Out — D efines the amount of time (seconds) that pas s bet w[...]

Configuring IP Information Managing ARP ESW 500 Series Switches Administrat ion Guide 249 ARP T able • Interface — Indicates the interface for which the ARP paramet ers are defined. • IP Address — Indicates the station IP addres s , which is associated with the M AC ad dr ess. • MAC Addr es s — Indicat es the station MA C addr ess , whi[...]

Configuring IP Information Managing ARP ESW 500 Series Switches Administrat ion Guide 250 Mo dif ying ARP Set tings STEP 1 Click Monitor & Device Propertie s > S ystem Management > IP Addr es sing > ARP . The ARP Pa ge opens : STEP 2 Click the Edi t but t on. The Edit ARP Page opens : Edit ARP Page The Edit AR P Page contains the f oll[...]

Configuring IP Information Domain Name Syst em ESW 500 Series Switches Administrat ion Guide 251 D omain Name S ystem Domain Name System (DNS) conv er ts user - defined domain names into IP address e s. Each tim e a domain name is as signed, the DNS se r vice translates the name int o a numeric IP address . F or example, www . i pe xa mp le .c om i[...]

Configuring IP Information Domain Name Syst em ESW 500 Series Switches Administrat ion Guide 252 STEP 1 Click Monitor & Device Proper ties > System Management > Do main Name S yst em (DNS) > DNS Ser vers . The DNS Ser vers Page open s: DNS Ser v ers Page The DNS Ser vers P age contains the f ollowing fields . • Enable DNS — Enable [...]

Configuring IP Information Domain Name Syst em ESW 500 Series Switches Administrat ion Guide 253 - Checked — Remov es the s elected DNS ser ver - Unchecked — Maintains the current DNS ser ver list . DNS Ser ver D etails • DNS Ser ver — Displays the DNS ser ver ’s IP addr es s, up to f our DNS ser vers can be defined. • Active Ser ver ?[...]

Configuring IP Information Domain Name Syst em ESW 500 Series Switches Administrat ion Guide 254 STEP 1 Click Monitor & Device Proper ties > System Management > Doma in Nam e Sy ste m (DNS) > Host Mapping . The Host Mapping Page opens : Ho st Mapping Page The Host Mapping Page contains the f ollowing fields : • Host Names — Display[...]

Configuring IP Information Domain Name Syst em ESW 500 Series Switches Administrat ion Guide 255 Add Host Name Page The Add Host Name P age contains the f ollowing fields : • Host Name — Displa ys a user - defined default domain name. When defined, the default domain name is applied to all unqualified host names . The Host Name field can contai[...]

De fining Addres s T able s De fin in g S ta ti c A dd r esses ESW 500 Series Switches Administrat ion Guide 256 D e fining Addre s s T able s MAC addr es ses are stor ed in either the Static Address or the Dynamic Address databas e s . A packet address ed to a destination stor ed in one of the dat ab ases is f or warded immediately t o the por t .[...]

De fining Addres s T able s De fin in g S ta ti c A dd r esses ESW 500 Series Switches Administrat ion Guide 257 STEP 1 Click VL AN & P or t Set tings > Addr es s T ables > Static . The Static Page opens : Static Page The Static Page contains the f ollowing fields : • VLAN ID — Displa ys the VL AN ID number to which the entr y re f er[...]

De fining Addres s T able s De fin in g S ta ti c A dd r esses ESW 500 Series Switches Administrat ion Guide 258 - Dele t e on T imeo ut — The MAC addr es s is delet ed when a timeout occurs. - Secur e — The MAC Addr es s is defined f or locked por ts . STEP 2 Click the Add but t on. The Add Static MAC Addr es s Page opens : Add Static MA C Add[...]

De fining Addres s T able s Defining Dynamic Addr ess es ESW 500 Series Switches Administrat ion Guide 259 STEP 3 Define the relevant fields. STEP 4 Click Apply . The Static MAC Ad dress is added, and the device is updat ed. D efining D yn amic Addre s s e s The Dynamic Address T able contains the MAC addresse s learned by monitoring the source add[...]

De fining Addres s T able s Defining Dynamic Addr ess es ESW 500 Series Switches Administrat ion Guide 260 STEP 1 Click VL AN & P or t Set tings > Addr es s T ables > Dy nam ic . The Dyna mic P age open s: Dyna mic Pa ge The Dyna m ic P age contains th e f ollow ing fields : • Aging Int er val — Sp ecifie s the amount of time in se c [...]

De fining Addres s T able s Defining Dynamic Addr ess es ESW 500 Series Switches Administrat ion Guide 261 Quer y By S e ction In the Quer y By se ction, select the pr ef erred option f or sor ting the address es table : • Interface — Spe cifies the interface for which the table is queried. The quer y can search f or a specific p or t or EtherC[...]

Configuring Multic ast For warding IGMP Snooping ESW 500 Series Switches Administrat ion Guide 262 C onfiguring Multic ast For warding The Multicast se ction c ontains the f ollowing page s: • IGMP Snooping • Defining Multicast Group • Defining Multicast Forwarding • Defining Unregist ered Multicast Set tings IGMP Sno oping When IGMP Snoopi[...]

Configuring Multic ast For warding IGMP Snooping ESW 500 Series Switches Administrat ion Guide 263 NOTE In addition t o the ES W500 sw it ch configur ation, PIM r out er (f or e xample, the UC500) is configured in upstream r outer . T o enable IGMP Snooping : STEP 1 Click VL AN & P or t Set tings > Mult icast > IGMP Snooping . The IGMP Sn[...]

Configuring Multic ast For warding IGMP Snooping ESW 500 Series Switches Administrat ion Guide 264 • IGMP Snooping Status — Indicates if IGMP snoopin g is enabled on the spe cific VLAN. The p ossible field value s ar e : - Enabled — IGMP Snooping is enabled on the VLAN. - Disable d — IGMP Snooping is not enabled on the VL AN. • Host T ime[...]

Configuring Multic ast For warding IGMP Snooping ESW 500 Series Switches Administrat ion Guide 265 Edit IGMP Snooping Page The Edit IGMP Snooping P age contains the f ollowing fields: • VLAN ID — Specifies the VL AN ID . • IGMP Status Enable — Indicates if IGMP snooping is enabled on the VLAN. The possibl e fi eld val ues a re: - Enable —[...]

Configuring Multic ast For warding De fin in g M u l ti cas t G r ou p ESW 500 Series Switches Administrat ion Guide 266 STEP 4 Click Apply . The IGMP Sno oping P arameters ar e modified, and the devic e is updated. D efining Multic ast Group The Multicast Gr oup Page displays the por ts and EtherChannels that are members of Multicast ser vic e gro[...]

Configuring Multic ast For warding De fin in g M u l ti cas t G r ou p ESW 500 Series Switches Administrat ion Guide 267 • Enable Bridge Multicast Filtering — Indicat es if Bridge Mu lticast F iltering is enabled on the devic e. Bridge Multicast F iltering can be enabled only if IGMP Snooping is enabled . The p os s ibl e field values are: - Ch[...]

Configuring Multic ast For warding De fin in g M u l ti cas t G r ou p ESW 500 Series Switches Administrat ion Guide 268 • Bridge Multicast IP Addr es s — Displa ys the IP addr es s attache d t o the Multicast Group. • Bridge Multicast MAC Addr es s — Displa ys the MAC addr es s attache d t o the Multicast Group. STEP 3 Define the relevant [...]

Configuring Multic ast For warding Defining Multicast F or war ding ESW 500 Series Switches Administrat ion Guide 269 - Static — Attaches the inter face t o the Multicast gr oup as static member in the Static Row . The int er face has joined the Mul tica st gr oup statically in the Curr ent Row . - Fo r b i d d e n — F orbidden inter faces are [...]

Configuring Multic ast For warding Defining Multicast F or war ding ESW 500 Series Switches Administrat ion Guide 270 STEP 1 Click VL AN & P or t Se t tings > Mult icast > F or ward . The Multicast F or war d P age open s: Multicast For ward Page The Multicast F or ward P a ge contains the f ollowing fields: • VLAN ID — Di spla ys the[...]

Configuring Multic ast For warding Defining Multicast F or war ding ESW 500 Series Switches Administrat ion Guide 271 - Dyna mic — A t taches the por t t o the Multicast gr oup as dynamic member . Mo dif ying Multicast For w ar ding STEP 2 Click VL AN & P or t Se t tings > Mult icast > F or ward . The Multicast F or war d P age open s: [...]

Configuring Multic ast For warding Defining Unr egister ed Mult icas t S ettings ESW 500 Series Switches Administrat ion Guide 272 STEP 5 Click Apply . The Multicast Forward All set tings ar e modified, and the devic e is updated. D efining Unre gister e d Multic ast S et tings Multicast frames are generally f or war ded to all por ts in the VLAN. [...]

Configuring Multic ast For warding Defining Unr egister ed Mult icas t S ettings ESW 500 Series Switches Administrat ion Guide 273 STEP 1 Click VL AN & Por t Set tings > Multicast > Unregister e d Multicast . The Unregist ered Multicast Page opens : Unregi stered Mul ticast Page The U nregistered M ulticast Page contains the f ollowing fi[...]

Configuring Multic ast For warding Defining Unr egister ed Mult icas t S ettings ESW 500 Series Switches Administrat ion Guide 274 Edit Unregistered Multic ast Page STEP 3 Define the Unr egist ered Multicast field. STEP 4 Click Apply . The Multicast Forward All set tings ar e saved and the device is updated.[...]

Configuring Spanning T ree Defining S TP Proper tie s ESW 500 Series Switches Administrat ion Guide 275 C onfiguring Sp anning T re e The Spanning T ree Protoc ol (STP) pr ovides tree t opography f or any arrangement of bridges . S TP also provides one path bet ween end stations on a network , eliminating lo ops . L oops o ccur when alternat e ro u[...]

Configuring Spanning T ree Defining S TP Proper tie s ESW 500 Series Switches Administrat ion Guide 276 STEP 1 Click VL AN & P or t Set tings > Spanning T r ee (STP) > Proper ties . The ST P Proper ties Page open s: STP Proper tie s Page The STP Pr oper ties Page contains the f ollowing fields : Glob al Set tings The Global Set tings ar e[...]

Configuring Spanning T ree Defining S TP Proper tie s ESW 500 Series Switches Administrat ion Guide 277 - Rapid STP — Enables Rapid STP on the device. - Multiple STP — Enables Mult iple ST P on the device. • BPDU Handling — Determines how BPDU pack ets are managed when STP is disable d on the por t or devic e. BPDUs ar e use d t o transmit [...]

Configuring Spanning T ree Defining Spannin g T ree Int er face Settings ESW 500 Series Switches Administrat ion Guide 278 • Bridge ID — Identifies the Bridge Priorit y and MAC addr e ss . • Roo t Br idg e ID — Identifie s the R oot Bridge priorit y and MAC addr es s . • Roo t Por t — Indicat es the p ort numb er that offers the lowest [...]

Configuring Spanning T ree Defining Spannin g T ree Int er face Settings ESW 500 Series Switches Administrat ion Guide 279 STEP 1 Click VL AN & P or t Set tings > Spanning T r ee (STP) > Int er face Settings . The STP Int erface Set tings Page opens : Interfac e Set tings Page The S TP Int erface S ettings Page contains the f ollowing fie[...]

Configuring Spanning T ree Defining Spannin g T ree Int er face Settings ESW 500 Series Switches Administrat ion Guide 280 conv ergence. STP con vergence can take 30-60 sec onds in large net works. The po s sible values are: - Enabled — P or t F ast is enabled. - Disable — Port Fast is disabled. - Auto — P or t F ast mode is enable d a f ew s[...]

Configuring Spanning T ree Defining Spannin g T ree Int er face Settings ESW 500 Series Switches Administrat ion Guide 281 - Desi gna t ed — The por t or EtherChannel thro ugh which the designated switch is attached to the LAN. - Alternate — Provides an alt ernate path to the r oot switch fr om the r oot interface. - Bac kup — Provides a back[...]

Configuring Spanning T ree Defining Spannin g T ree Int er face Settings ESW 500 Series Switches Administrat ion Guide 282 Mo dif ying Interfac e S et tings STEP 1 Click VL AN & P or t Set tings > Spanning T r ee (STP) > Int er face Settings . The Int erface Set tings Page opens : STEP 2 Click the Edit but t on. The Edit Inter fac e S et [...]

Configuring Spanning T ree Defining Spannin g T ree Int er face Settings ESW 500 Series Switches Administrat ion Guide 283 - Enabled — Enables Port F ast on the por t . - Disable d — Disables Por t F ast on the por t . - Auto — Enables Por t F ast mo de a f ew se conds after the int er face becomes active. • Enable Root Guard — Enable the[...]

Configuring Spanning T ree Defining Rapid Spanning T r ee ESW 500 Series Switches Administrat ion Guide 284 - Checked — P ath Co st is the def ault value. - Unchecked — P ath Co st is user - defined. • Priorit y — Priorit y value of the por t . The priorit y value influence s the por t choice when a bridge has two por ts conne ct ed in a lo[...]

Configuring Spanning T ree Defining Rapid Spanning T r ee ESW 500 Series Switches Administrat ion Guide 285 STEP 1 Click VL AN & P or t Set tings > Spanning T r ee (STP) > RSTP . The RSTP P age opens : RSTP Pa ge The RS TP Page contains the f ollowing fields : • Copy Fr om Entr y Number — Indicate the por t fr om which the STP int er [...]

Configuring Spanning T ree Defining Rapid Spanning T r ee ESW 500 Series Switches Administrat ion Guide 286 - Desi gna t ed — Indicat es that the por t or EtherChannel via which the designated switch is attached to the LAN. - Alternate — Provides an alt ernate path to the r oot switch fr om the r oot interface. - Backup — Provides a backup pa[...]

Configuring Spanning T ree Defining Rapid Spanning T r ee ESW 500 Series Switches Administrat ion Guide 287 • Poi nt-t o-Point Operational Status — I nd ic ate s t he Po in t-to -Po in t o p er at i n g state. The possible values are: - Ena bl e — Enable s P oint-t o-Point on the int er face. - Disable — Dis ables P oint-t o-Po int on the i[...]

Configuring Spanning T ree Defining Rapid Spanning T r ee ESW 500 Series Switches Administrat ion Guide 288 • Role — Indicat es the por t role assigne d by the S TP algorithm in order t o pr ovide to S TP paths. The po ssible field values are: - Roo t — Pr ovides the lowest c ost path t o f or ward pack ets t o r oot swit ch. - Desi gna t ed [...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 289 - Fo r w a r d i n g — Indicates that the por t is in F or war ding mode. The por t can f or ward traffic and learn new MAC addr es ses . • Point -to-Point Admin Status — Indicat e s whether a point-t o-point link is established on t[...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 290 • Defining MSTP Inte r face Set tings D efining MSTP Proper ties The MSTP Pr op er tie s Pa ge contains inf ormation f or defining global MSTP set tings , incl uding r egion na mes , MS TP revisions, and maximum hop s. To d e f i n e M S[...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 291 inf orm ation is aged out . The po ssibl e field range is 1 -40 . The field default is 20 hops . • IST Mast er — Identifie s the r egion’ s master . STEP 2 Define the relevant fields. STEP 3 Click Apply . The MSTP propertie s ar e de[...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 292 STEP 1 Click VL AN & P or t Set tings > Spanning T r ee (STP) > MS TP > Instance to VLAN . The Instance to VLAN Page opens : Instanc e to VL AN Page The Instance to VLAN Page contains the f ollowing fields: • VLAN — Indica[...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 293 D efining MSTP Instanc e S et tings MSTP maps VL ANs int o STP instances. P ackets assigned to various VL ANs ar e transmitted al ong diff erent paths within Multiple Spanning T ree Regions (MST Regions ) . Regions ar e one or mor e Multip[...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 294 • Designated Root Bridge ID — Indicates the priority and MAC address of the bridge with the lowest path co st to the instance ID. • Roo t Por t — Indicat es the s elected instance’ s root por t . • Roo t Path Co st — Indicat [...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 295 STEP 1 Click VL AN & P or t Set tings > Spanning T r ee (STP) > MS TP > Inter fac e Set t ings . The MSTP Int er face Set tings Page opens : MSTP Interfac e Set tings Page The MSTP Int er face Set tings Page contains the f oll[...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 296 - Listening — Indicates that the por t is in Listening mode. The port cannot f or ward traffic nor can it learn MAC addr ess es. - L earning — Indicat es that the p ort is in Learning mode. The por t cannot f or ward tra ffic, however [...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 297 • Interface Priorit y — Defines the interface priority f or specified instance. The priority value is betwe en 0 -240. The priority value is provided in increments of 16. The defaul t value is 128. • Pat h C o s t — Indicates the p[...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 298 MSTP Interfac e T able Page The MSTP Int er face T able Page contains the f ollowing fields : • Instance — Define s the VLAN group t o which the int erfac e is assigne d. • Interfac e — Indicat es the por t or EtherChannel f or whi[...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 299 when a LAN has t wo or more connections connected to a shar ed segment . - Disable d — Indicates the por t is not participating in the Spanning T ree. • Mode — Indicates the current Spanning T ree mode. The pos sible field values are[...]

Configuring Spanning T ree Defining Multiple Spanning T re e ESW 500 Series Switches Administrat ion Guide 300 - Fo r w a r d i n g — Indicates that the por t is in F or war ding mode. The por t can f or ward traffic and learn new MAC addr es ses . • Designated Co st — Indicat e s that the default path cost is assigned according t o the metho[...]

Configuring Qualit y of Ser vic e ESW 500 Series Switches Administrat ion Guide 301 C onfiguring Qualit y of S er vic e Network traf fic is usually unpr edictable, and the only b asic assurance that can be offer ed is be st effort traffic deliver y . T o overcome this challenge, Quali t y of Se r v ice (Q oS) is applied throughout the network . Thi[...]

Configuring Qualit y of Ser vic e Managing Q oS Sta t is tics ESW 500 Series Switches Administrat ion Guide 302 • Tr af f i c C l a s s i f i c at i o n — Classifie s each incoming pack et as belonging to a given traffic class , based on the packet contents and/ or the c ont e x t . • Ass i g n me n t to Ha r d wa r e Q u e ues — As signs i[...]

Configuring Qualit y of Ser vic e Managing Q oS Sta t is tics ESW 500 Series Switches Administrat ion Guide 303 STEP 1 Click Qualit y of Ser vice > QoS Statistics > Policer Statistics . The Po li c e r St a t i st i c s Pag e opens : P o li ce r S t a ti st i cs P ag e The Pol i ce r St at i st ic s Pag e contains the f ollowing fields : • [...]

Configuring Qualit y of Ser vic e Managing Q oS Sta t is tics ESW 500 Series Switches Administrat ion Guide 304 The Ad d Pol ic e r S t at is ti c s Pa g e contains the f ollowing fields : • Interfac e — Select either the Port or EtherChannel radio but ton t o s elect the interface. • Pol i cy Na me — Sele ct the p olicy Name fr om the pull[...]

Configuring Qualit y of Ser vic e Managing Q oS Sta t is tics ESW 500 Series Switches Administrat ion Guide 305 STEP 1 Click Quality of S er vice > QoS Statistics > Aggregat e Poli cer . The Aggregate Pol i c e r Pa g e opens : Aggre gate Policer Page The Aggregat e Policer Page contains the f ollowing fields : • Aggregate P o lic er Nam e [...]

Configuring Qualit y of Ser vic e Managing Q oS Sta t is tics ESW 500 Series Switches Administrat ion Guide 306 STEP 2 Click the Add but t on. The Add Aggregat e Policer Pa ge opens . The Add Aggregat e Policer P age includes one field: the Aggregat e Policer Name. STEP 3 Define the relevant fields. STEP 4 Click Apply . The Aggregate P o lic e defi[...]

Configuring Qualit y of Ser vic e Managing Q oS Sta t is tics ESW 500 Series Switches Administrat ion Guide 307 Res et ting Aggre ga te Polic er Statistics Counters STEP 1 Click Quality of S er vice > QoS Statistics > Aggregat e Policer . The Aggregate P oli cer Sta tis tics P age open s: STEP 2 Click Clear Counters . The Aggregate P olicer s[...]

Configuring Qualit y of Ser vic e Managing Q oS Sta t is tics ESW 500 Series Switches Administrat ion Guide 308 STEP 1 Click Quality of S er vice > QoS Statistics > Queue s Statistics . The Queues Statistics Page open s: Queues St a tistic s Page The Queues Statistic s P age contains the f oll owing fields: • Set — Displays the count er s[...]

Configuring Qualit y of Ser vic e Managing Q oS Sta t is tics ESW 500 Series Switches Administrat ion Guide 309 STEP 2 Click the Add but t on. The Add Queues Statistic s Pa ge opens. Adding Queue s Statistics • The Add Queues Statistic s Page contains the f ollowing fields: • Selec t Coun te r Set — Selects the counter set . • Interfac e ?[...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 310 D efining General S et t ings The QoS General S e t tings se ction contains the f ollowing pages : • Defining CoS • Defining QoS Queue • Mapping CoS to Queue • Mapping D SCP to Queue • Configuring Bandwidth • VLAN Rate Limit D [...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 311 STEP 1 Click Qualit y of Ser vice > General > CoS . The CoS P ag e opens : CoS Pa ge The CoS P ag e contains the f ollowing fields: • QoS M ode — Indicat es if QoS is enabled on the device. The p ossible value s are: - Advanc ed [...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 312 • Restor e D efaults — R estor es the factor y CoS default set tings t o the sele cted port . - Checked — Rest ores the fact or y QoS default settings to por ts a f ter clicking the Apply button. - Unchecked — Maintains the current[...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 313 D efining Q oS Queue The Queue Pa ge contains fields f or defining the QoS queue forwarding type s.[...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 314 STEP 1 Click Qualit y of Ser vice > General > Queue . The Queue Page opens : Queue Page (non-Gigabit devic es)[...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 315 Queue Page (Gigabit device s) The Queue Pa ge contains the f ollowing fields: • Fa s t E t h e r n e t — Select whether traf fic scheduling on Fast Ethernet int er faces is base d on either Strict Priority or WRR. This field is applica[...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 316 • Giga Ethernet — Enable s configuring traffic s cheduling on GE int er faces . This field heading is applicable to FE devices only . The fields below ar e applicable to both FE and GE devices. • Queue — Displa ys the queue f or wh[...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 317 STEP 1 Click Quality of Ser vic e > General > CoS t o Qu eue . The Cos to Queue P a ge opens : Co s to Queue Page The Cos t o Q ue ue P age contains the f ollowing fields: • Restor e Defaults — Rest ores all queues to the def aul[...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 318 Mapping DSCP to Queue The DS CP to Queue P age enables mapping D S CP values to specific queues . T o map D CS P to Queues: STEP 1 Click Qualit y of Ser vice > General > DSCP t o Qu eu e . The DS CP to Queue P age open s: DSCP to Que[...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 319 C onfiguring Ba ndwidth The Bandwidth Page allows network managers to define the bandwidth set tings f or s peci fied egr ess an d in gr es s int erfaces. Rate Limits and Shaping are defined per inter face: • Rat e Limit sets the ma ximu[...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 320 • Ingress Rate Limit — Indicat es the traffic limit fo r ingress inter faces. The possibl e fi eld val ues a re: - Status — Enables or dis ables rate limiting f or ingr ess inter faces. Disable is the default value. - Rate Limit — [...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 321 Edit B andwidth Page The Edit B andwidth Page contains the f ollowing fields : • Interfac e — Indicat es whether the interfac e, f or which bandwidth s e t tings are edit ed, is a port or a Eth erChan nel. • Enable Egres s Shaping Ra[...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 322 F or FE por ts, the rate is 62 - 100 , 000 Kbps. F or GE por ts , the rat e is 62 - 1 , 000 , 000 Kbps. STEP 4 Modify the relevant fields . STEP 5 Click Apply . The b a ndwidth settings are modified, an d the device is updated. C onfigurin[...]

Configuring Qualit y of Ser vic e Defining Gener al Settings ESW 500 Series Switches Administrat ion Guide 323 • VLAN – Indicat es the VL AN on which the Rat e Limit is applied. • Rat e Limit – Defines the maximum rate (CIR) in kbits per s e cond (bps) that f or wardi ng traffic is permit t ed in the VLAN. • Burst Size – Defines the max[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 324 Mo dif ying the VL AN Rate Limit STEP 1 Click Qualit y of Ser vice > General > VL AN Rate Limit . The VL AN Rate Limit P age open s: STEP 2 Click the Edit but t on. The VLAN Rate Limit Pa ge opens : Edit VL AN Rate Limit Page The V[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 325 CCLs are set acc or ding to the classificat ion defined in the ACL, and they cannot be defined until a valid ACL is defined. When CCLs ar e defined, ACLs and CCLs can be grouped together in a more comple x structure, called policies . Po[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 326 STEP 1 Click Quality of S er vice > Advanc ed Mode > DS CP Mapping . The DS CP Mapping Pag e opens : DSCP Mapping Page The DS CP Mapping Page contains the f ollowing fields: • DSC P I n — Indicat es the D SCP value in the incom[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 327 D efining Clas s Mapping The Class Mapping Page contains parameters f or defining class maps . One IP ACL and/ or one MAC ACL comprise a class map. Clas s maps ar e configured to mat ch packet crit eria, and are matched t o packets on a [...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 328 - AND — Both the ACL 1 and the IP -b as ed ACL 2 must match a pack et . - OR — Either the ACL 1 or the ACL 2 must mat ch a packet . • ACL 2 — Contains a list of the user - define d ACLs. STEP 2 Click the Add but t on. The Add QoS[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 329 - MAC Base d ACLs — Mat ches packets to MA C base d A CLs first , then matches pack ets to IP based ACLs . STEP 3 Define the relevant fields. STEP 4 Click Apply . Q oS mapping is adde d, and the device is updated. D efining Aggre ga te[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 330 STEP 1 Click Qualit y of Ser vice > Advance d Mode > Aggr eg ate Policer . The Aggregat e Pol i c e r Pa g e opens : Aggre gate Policer Page The Aggregat e Policer Page contains the f ollowing fields . • Aggregate P olic er Name [...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 331 Add Q oS Aggregate Policer Page The Add QoS Aggregate P olic er P age contains the f ollowing fields . • Aggregate P olic er Name — Spec if ies t he A gg reg at e P oli cer N am e. • Ingress C ommitted Inf ormation Rate (CIR) — D[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 332 Edit QoS Aggregate Policer Page The Edit QoS Aggr egate P olic er Page contains the f ollowing fields . • Aggregate P olic er Name — Spe c ifie s the Aggregat e Policer Name • Ingress C ommitted Inf ormation Rate (CIR) — Defines [...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 333 STEP 1 Click Qualit y of Ser vice > Advance d Mode > Policy T able . The Policy T able P age open s: Policy T able Page The Pol i cy T ab l e Pa ge contains the f ollowing field: • Policy Name — Displays the user - defined poli[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 334 Add Q oS Polic y Profile Page The Add QoS Policy Pr ofile Page contains the f ollowing fields . • New Policy Name — Specifies the user - defined policy name. • Clas s Map — Sele cts the user - define d clas s maps which can b e a[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 335 differ ent por ts can be configured f or policing purpo s es . An aggr egate policer can b e applied to multiple cl asse s in the same policy map, but cannot be us e d across dif f erent policy maps . - Single — Configures the class to[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 336 Edit QoS Policy Profile Pag e The Edit QoS Poli cy Profil e Page contains the f ollowing fields . • Pol i cy Na me — Displays the user - defined policy name. • Clas s Map — Displays the user -define d name of the class map. • A[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 337 • Ty p e — Policer ty p e f or the p olicy . Possible value s ar e: - Aggregate — Configures the class to use a configured aggregat e policer s elected fr om the drop-down list . An aggregat e polic er is defined if the p o lic er [...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 338 STEP 1 Click Qualit y of Ser vice > Advance d Mode > Po l i cy Bi nd i ng . The Policy Binding Pag e opens : Policy Bindin g Page The Policy Binding P a ge contains the f ollowing fields : • Interfac e — Displa ys the interface[...]

Configuring Qualit y of Ser vic e Defining Advanc ed QoS Mo de ESW 500 Series Switches Administrat ion Guide 339 Add Q oS Policy Binding Page The Add QoS Policy Binding Page contains the f ollowing fields. • Interfac e — Select either the Port or EtherChannel radio but ton t o s elect the interface. • Pol i cy Na me — Sele ct a P olicy to a[...]

Configuring Qualit y of Ser vic e De fin in g Qo S B as i c Mod e ESW 500 Series Switches Administrat ion Guide 340 • Interfac e — Displa ys the interface to which the entry ref ers . • Pol i cy Na me — Displa ys the Po licy name asso ciat ed with the int er face. STEP 3 Define the relevant fields. STEP 4 Click Apply . The QoS p olicy b ind[...]

Configuring Qualit y of Ser vic e De fin in g Qo S B as i c Mod e ESW 500 Series Switches Administrat ion Guide 341 • Tr u s t M o d e — Displays the trust mode. If a pack et’ s CoS tag and DS CP tag, are mapped to diff erent queues, the T rust Mode determines the queue t o which the packet is assigned. Pos sible values are: - CoS — Sets tr[...]

Configuring Qualit y of Ser vic e De fin in g Qo S B as i c Mod e ESW 500 Series Switches Administrat ion Guide 342 DSCP Mapping Page The DS CP Mapping Page contains the f ollowing fields: • DSC P I n — Indicat es the D SCP value in the incoming packet . • DSC P O ut — Indicates the D SCP value in the outgoing pack et . STEP 3 Define the D [...]

Co nf ig ur in g S NM P SNMP V ersions ESW 500 Series Switches Administrat ion Guide 343 C onfiguring SNMP The Simple Network Management Pr otocol (S NMP) pr ovides a metho d f or managing net w ork devic es . SNMP V ersions The devic e suppor ts t he f ollow ing SNM P versions: SNMP v1 and v2 SNMP agents maintain a list of variables that ar e us e[...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 344 • Security • F eature Acces s Control • Tr a p s The device generates the f ollowing trap: • Copy trap The S N MP s ection contains the following topics : • Configuring S NMP Securit y • Defining T rap Management C onfiguring SNMP S e c[...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 345 STEP 1 Click Monitor & Device Propertie s > SNMP > S ecurity > Engine ID . The Engine ID Pag e opens : Engine ID Page The Engine ID Page contains the f ollowing fields. • L ocal Engine ID ( 10 -64 He x characters ) — Indicates the [...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 346 STEP 3 Click Apply . The S NMP Engine ID is defined, and the device is updated. D efining SNMP Views SNMP Vi ews provide acces s or block acc es s t o device f eatures or f eature aspe cts . F or example, a view disp la ys that the SNMP Group A has[...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 347 • Object ID Subtree — Indicates the device f eature OID that is included or ex clude d in the sele cted S NMP view . • Vi e w T y p e — Indicates if the defined OID branch that ar e included or e x cluded in the selected SNMP view . STEP 2 [...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 348 D efining SNMP Us ers The SNM P U se rs P ag e pr ovides information f or cr eating S NMP users, an d assigning S NMP acc es s c ontrol privileges to SNMP users . Groups allow network managers to assign acce ss rights to specific device featur e s,[...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 349 • Authentication — Indicat es the Authentication method us ed. STEP 2 Click the Add but t on. The Add SNMP Group Membership Page opens : Add SNMP Group Membership Page The Add SNMP Group M ember ship Page pr ovides i nf ormation f or as signing[...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 350 - SHA P assw or d — Users should enter a password that is encr ypted using the HMAC-SHA-96 authentication metho d. - None — No user authentication is used. • Pas s w ord — D efine the local user password. L ocal user pas swords can contain [...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 351 • Group Name — SNMP group, which can be chosen from the list, to which the SNMP us er belongs. S NMP gr oups are defined in the SNMP Group Pr ofile page. • Authentication Method — Indicates the A uthentication method used. The possibl e fi [...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 352 STEP 1 Click Monitor & Device Propertie s > SNMP > Se curity > Groups . The SNM P Groups Page opens: SNMP Groups Page The SNM P G r ou p s P ag e contains the f ollowing fields: • Group Name — Displa ys the user -d efined group t o[...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 353 - Privacy — En cryp ts SNM P m ess ag e. • Operation — D efines the group acces s right , which are per view . The pos sible field values ar e : - Read — The management acces s is restrict ed to r ead-only , and changes cannot be made to th[...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 354 - No Authentication — Neither the Authentication nor the Privacy s ecurit y levels ar e assigne d t o the group. - Authentication — Authenticat es SNMP mes sage s, and ensures the SNMP me ss ages origin is authenticated. - Privacy — En cryp t[...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 355 • Group Name — Displays the user - defined group to which acces s control rules are applied. The field range is up to 30 charact ers. • Secur ity Model — Defines the SNMP version at tached to the gr oup. The possibl e fi eld val ues a re: -[...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 356 T o define S NMP Communitie s: STEP 1 Click Monitor & D evice Prop er ties > SNMP > S ecurit y > Communitie s . The SNMP C ommunities Page opens: SNMP Com munities Page The S NMP Communities Page is divided int o the f ollowing tabl es[...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 357 • Management Station — Displays the management station IP addres s f or which the Advance d S NMP co mmunit y is defined. • Community String — Displa ys the pas swor d use d to authenticate the management station to the device. • Group Na[...]

Co nf ig ur in g S NM P Configuring SNMP Se curit y ESW 500 Series Switches Administrat ion Guide 358 • Access Mode — Define s the acces s rights of the c ommunity . The pos sible field values ar e : - Read Onl y — Management acces s is restrict ed to r ead-only , and changes cannot be made to the communit y . - Read Wri te — Management acc[...]

Co nf ig ur in g S NM P Defining T r ap Management ESW 500 Series Switches Administrat ion Guide 359 • Community String — Defines the pas sword used to authenticat e the management station to the device. Configure either the Basic Mode or the Advanced Mode. • Bas ic — Enables SNMP B asic mode f or a sele cted community and c ontains the f o[...]

Co nf ig ur in g S NM P Defining T r ap Management ESW 500 Series Switches Administrat ion Guide 360 STEP 1 Click Monit or & Device Properties > S NMP > T rap Management > T rap Sett ings . The T rap S ettings Page opens : Tr ap S e t t i n g s P a g e The T rap S ettings Page contains the f ollowing fields : • Enable SNMP Notificati[...]

Co nf ig ur in g S NM P Defining T r ap Management ESW 500 Series Switches Administrat ion Guide 361 C onfiguring St a tion Management The Station Management P a ge contains inf ormation f o r defining filters that det ermine whether traps are sent to specific us ers , and the trap t ype sent . S NMP notification filt ers provide the f ollowing ser[...]

Co nf ig ur in g S NM P Defining T r ap Management ESW 500 Series Switches Administrat ion Guide 362 The SNMP v 1 ,2 Notification R ecipient table area contain s the f oll owing fields : • Recipients IP — Indicat es the IP address to which the traps are sent . • Notification T yp e — Defines the notification s ent . The pos sible field valu[...]

Co nf ig ur in g S NM P Defining T r ap Management ESW 500 Series Switches Administrat ion Guide 363 • UDP Por t — Displays the UDP por t used to send notifications . The defa ult is 162. • Fi lte r Na m e — D efines if the SNM P filter f or which the SNMP Notification filter is defined. • Ti m e o u t — Indicates the amount of time ( s[...]

Co nf ig ur in g S NM P Defining T r ap Management ESW 500 Series Switches Administrat ion Guide 364 • Providing Acces s Control Checks The Add S NMP Notification Recipient Page contains the f ollowing fields : • Recipient IP Address — Indicates the IP addr es s to whom the traps ar e sent . • Notification T yp e — Defines the notificatio[...]

Co nf ig ur in g S NM P Defining T r ap Management ESW 500 Series Switches Administrat ion Guide 365 • Fi lte r Na m e — D efines if the SNM P filter f or which the SNMP Notification filter is defined. • Ti m e o u t — Indicates the amount of time ( se conds) the device waits bef ore r e- sending info rms . The default is 15 seconds . • R[...]

Co nf ig ur in g S NM P Defining T r ap Management ESW 500 Series Switches Administrat ion Guide 366 Edit SNMP Notific a tion Re cipient Page The Edit SNMP Notificati on Recipient P age contains the f ollowing fields: • Recipient IP Address — Indicates the IP address to whom the traps are sent . • Notification T yp e — Defines the notificat[...]

Co nf ig ur in g S NM P Defining T r ap Management ESW 500 Series Switches Administrat ion Guide 367 - SNM P V 1 — Indicat es S NMP V ersion 1 trap s are sent . - SNM P V 2 — Indicates SNMP V ersion 2 traps are sent . The S N MP v3 Notification Re cipient ar ea contains the fo llowing fields : • SNM Pv3 — Enables SNMP v3 as the Notification[...]

Co nf ig ur in g S NM P Defining T r ap Management ESW 500 Series Switches Administrat ion Guide 368 STEP 1 Click Mo nitor & Devic e Proper tie s > SNMP > T rap Management > Filt er Settin gs . The Filt er S ettings Page opens : Filter Set tings Page The Filt er S ettings Page contains the f ollowing fields: • Fi lte r Na m e — C o[...]

Co nf ig ur in g S NM P Defining T r ap Management ESW 500 Series Switches Administrat ion Guide 369 Add SNMP Notific ation F ilter Page The Add S NMP Notification Filt er Page contains the f ollowing fields : • Fi lte r Na m e — D efines notification filt ers . • New Object Identifier T ree — Displays the OID f or which notifications are s[...]

Co nf ig ur in g S NM P Managing Cisc o Disc over y Pro toc ol ESW 500 Series Switches Administrat ion Guide 370 Managing Cis c o Dis c over y Proto c ol The Cisc o Discover y Prot o col (CDP) is a Cisco proprietar y prot ocol that enable s devices to adv ertise their exist e nce to other devices by CDP sending out periodic updates to a Multicast a[...]

Co nf ig ur in g S NM P Managing Cisc o Disc over y Pro toc ol ESW 500 Series Switches Administrat ion Guide 371 • Dev ice I D — Indicat es the device ID TL V which is adver tised by neighboring device s. • Lo cal I nterfac e — Indicates the r ece iving p or t number . • Adve r tise V ersio n — Indicat es the CDP version advertis ed by [...]

Co nf ig ur in g S NM P Managing Cisc o Disc over y Pro toc ol ESW 500 Series Switches Administrat ion Guide 372 STEP 1 Click Monitor & Device Propertie s > CDP . The CDP Page open s STEP 2 Click Deta il s . The CDP Neighbor D etails P age open s: CDP Neighbor D etails Page In addition t o the fields in the CDP Pa ge , the CDP Neighbor Detai[...]

Mana g ing Syst em F ile s ESW 500 Series Switches Administrat ion Guide 373 Man aging System F ile s This section contains inf ormation f or defi ning file maint enance and include s b oth configuration file management as w ell as devi ce a ccess . The File Management section contains the f ollowing topics: • Software Upgrade • Save Configurat[...]

Mana g ing Syst em F ile s So ftwa r e U pgr ad e ESW 500 Series Switches Administrat ion Guide 374 • Image Files — Soft ware upgrades are used when a new version file is downloade d. S of t ware Upgrade Fi rmwar e file s are downloaded as r e quir ed for upgrading the firmwar e version or f or b acking up the system configuration. F i le names[...]

Mana g ing Syst em F ile s Save Configur a t ion ESW 500 Series Switches Administrat ion Guide 375 • BACKUP — Spe cifies that firmware is uploaded f or a firmware backup. • via TF TP — Indicat es that the upgrade file is f ound on a TF TP ser ver . • via HT TP — Indicat es that the upgrade file is f ound on a HTTP ser ver . • Fi le T [...]

Mana g ing Syst em F ile s Save Configur a t ion ESW 500 Series Switches Administrat ion Guide 376 STEP 1 Click Maintenance > File Management > Sa ve Configuration . The Sa v e Configuration Page opens: Save Configuration Page The Sav e Configuration P age c ontains the f ollowing fields : Sour ce F ile Nam e — Indicat es the devic e config[...]

Mana g ing Syst em F ile s Cop y Conf igu ra tio n ESW 500 Series Switches Administrat ion Guide 377 C opy C onfigura tion The configuration file s contr ol the operation of the switch, and contain the functional set tings at the device and the por t level. Configuration files are one of the f ollowing t ype s : • Fa c to r y D e f a u l t — Co[...]

Mana g ing Syst em F ile s Cop y Conf igu ra tio n ESW 500 Series Switches Administrat ion Guide 378 STEP 1 Click Maintenance > File Management > Copy Configuration File . The Cop y Configuration File P age opens : Copy C onfiguration F ile Page The Copy Configuration File P age contains the f ollowing fields : • via TF TP — Download and [...]

Mana g ing Syst em F ile s Active I mage ESW 500 Series Switches Administrat ion Guide 379 • Dest ination File T ype — Sp ecifie s the typ e of configu ration file to be creat ed. The po s sible values are: - Running Config — Contains the configuration currently valid on the device. - Star ting Config — Contains the configuration which will[...]

Mana g ing Syst em F ile s Active I mage ESW 500 Series Switches Administrat ion Guide 380 STEP 1 Click Maintenance > F ile Management > Active Ima g e . The Active Image P a ge open s: Acti ve Ima ge P age The Active Image P age contains the f ollowing fields : • Active Image — Indicat es the Image file which is currently activ e on the [...]

Mana g ing Syst em F ile s DHCP Auto Con figura tion ESW 500 Series Switches Administrat ion Guide 381 DHCP Auto C onfigura tion Dynamic Host C onfiguration Prot o col (D HCP) pr ovides a framework f or passing configuration inf ormation t o hosts on a T CP /IP net work . The DHCP Aut o Con fig uration P age allows network managers to change the co[...]

Mana ging Power-over -Ethernet D evic es De fin ing P oE Se ttin gs ESW 500 Series Switches Administrat ion Guide 382 Man aging Power - over -Ethernet D evic e s Po wer -over -Ethernet (PoE) pr ovide s power to devices over e xisting LAN cabling, without updating or modif ying the network infrastructure. P ower -over -Ethernet r emov es the nece ss[...]

Mana ging Power-over -Ethernet D evic es De fin ing P oE Se ttin gs ESW 500 Series Switches Administrat ion Guide 383 STEP 1 Click VL AN & P or t Set tings > Po r t Ma n ag em en t > PoE S et t in gs . The PoE S et t i n gs Pag e opens : PoE Set tings Page The PoE S et t i n gs Pag e displays the curr ently configured P oE por ts and cont[...]

Mana ging Power-over -Ethernet D evic es De fin ing P oE Se ttin gs ESW 500 Series Switches Administrat ion Guide 384 • Priorit y — Indicates the PoE port priorit y . The po ssible value s ar e: Critical , High and Lo w . The default is Lo w . • Pow e r A ll o ca ti o n ( mW ) — In dicates the power in milliwat ts allocated to the por t . T[...]

Mana ging Power-over -Ethernet D evic es De fin ing P oE Se ttin gs ESW 500 Series Switches Administrat ion Guide 385 - Lo w — Defines the PoE priority level as low . - High — Defines the PoE priorit y level as high. - Critical — Defines the PoE priority level as Critical. This is the highest Po E priorit y level. • Pow e r A ll o ca ti o n[...]

Managing System Lo gs Enabling Syst em Logs ESW 500 Series Switches Administrat ion Guide 386 Man aging System Lo gs The Syst em L ogs enable viewing device events in r eal time, and recording the events f or later usage. Syst em L ogs record and manage ev ents and repor t err ors or inf ormational me ss ages . Ev ent mes sages have a unique f orma[...]

Managing System Lo gs Enabling Syst em Logs ESW 500 Series Switches Administrat ion Guide 387 STEP 1 Click Maintenance > Syst em L ogging > Syst em Mes sages S et tings . The Sys tem Mes sage s Set tings P age opens. System Me ss age s Set tings Page The Syst em Mes sages S ettings Page contains the f ollowing fields : • Enable Logging — [...]

Managing System Lo gs V iewing the Devic e Memor y L ogs ESW 500 Series Switches Administrat ion Guide 388 - Debu g — Pr ovides detailed inf ormation about the log. If a Debug err or occurs , contact Customer T e ch Suppor t . • Memor y L ogs — The s ele cted Severity t ypes will appear in chronological order in all system logs that are saved[...]

Managing System Lo gs V iewing the Devic e Memor y L ogs ESW 500 Series Switches Administrat ion Guide 389 STEP 1 Click Maintenance > Syst em Logging > Syst em Mes sage s (Memor y) . The Sys t em Mes sages (Memor y) Page opens . System Me ss ages (Memor y) Page The Sy stem Mess age s (M emor y) Page c ontains the f ollowing fields : • Lo g [...]

Managing System Lo gs V iewing the Sys tem Fl ash L ogs ESW 500 Series Switches Administrat ion Guide 390 Viewing the System Flash Lo gs The Syst em Mes sages (Flash) P age contains inf ormation about log entrie s sav ed t o the Log F ile in FL AS H, including the time the log was generated, the event severity , and a de scription of the log me ss [...]

Managing System Lo gs Rem ote Lo g S er v er s ESW 500 Series Switches Administrat ion Guide 391 Cle aring Flash Logs Flash L ogs can be cleared fr om the Syst em Mes sages (Flash) P age . T o clear the Syst em Mes s ages (Flash) P age : STEP 1 Click Maintenance > Syst em L ogging > System Mes sages (Flash) . The System Mes sages (Flash) P ag[...]

Managing System Lo gs Rem ote Lo g S er v er s ESW 500 Series Switches Administrat ion Guide 392 • Server — Specifie s the ser ver IP addr es s to which logs can be sent . • UDP Por t — Defines the UDP p or t t o which the ser ver lo gs are sent . The pos sible range is 1 t o 65535. The default value is 5 14. • Fa c i l i t y — D efine [...]

Managing System Lo gs Rem ote Lo g S er v er s ESW 500 Series Switches Administrat ion Guide 393 Add Sy slog Ser ver Page The Add Syslog Ser ver Page contains fields f or defining new Re mote L o g Ser vers. The Add Syslog Ser ver Page contains the f ollowing fields : • Lo g S e r v e r I P A d d re s s — Spe cifies the ser ver to which logs ca[...]

Managing System Lo gs Rem ote Lo g S er v er s ESW 500 Series Switches Administrat ion Guide 394 - Critical — The thir d highest warning level. A critical log is saved if a critical device malfunction o ccurs; for e xample, two device p orts are not functioning, while the r est of the devic e por ts r emain functional. - Error — A device error [...]

Managing System Lo gs Rem ote Lo g S er v er s ESW 500 Series Switches Administrat ion Guide 395 The Edit Syslo g S er ve r Page contain s the f oll owing fields : • Server — Specifie s the name of the Remot e L og S er ver t o which lo gs can be sent . • UDP Por t — Defines the UDP p or t t o which the ser ver lo gs are sent . The pos sibl[...]

Managing System Lo gs Rem ote Lo g S er v er s ESW 500 Series Switches Administrat ion Guide 396 STEP 4 Click Apply . The Syslog S e r ver settings are modified, and the device is up dat ed.[...]

Viewing Statistic s V iewing Etherne t Statis tic s ESW 500 Series Switches Administrat ion Guide 397 Viewing St a tistic s This secti o n de scribe s device statistic s f or RMON, inter faces , G VRP , E AP , and Etherlike statistics . This s ectio n c ontains the f ollowing topics : • V iewing Ethernet Statistic s • Managing RMON Statistics ?[...]

Viewing Statistic s V iewing Etherne t Statis tic s ESW 500 Series Switches Administrat ion Guide 398 STEP 1 Click Statistics > Ethernet > Int er face . The Interface Stat istics Page open s: Interfac e Statistics Page The Interface Statistic s P age contains the f ollowing fields : • Interfac e — Indicat es the interfac e f or which stat[...]

Viewing Statistic s V iewing Etherne t Statis tic s ESW 500 Series Switches Administrat ion Guide 399 - 60 Sec — Indicat es that the Ethernet statistic s ar e refr eshed ever y 60 seconds. - No Refresh — Indicat es that the Ether net statistics ar e not refr eshe d. The R eceiv e S tat ist ics a r ea co nta ins the f ollo win g fi eld s: • To[...]

Viewing Statistic s V iewing Etherne t Statis tic s ESW 500 Series Switches Administrat ion Guide 400 T o view Etherlike Statisti cs : STEP 1 Click Statistics > Ethernet > Etherlik e . The Etherlike P age opens : Etherlik e Page The Etherlik e Page contains Ethernet-lik e interface statistics . The Etherlike P a ge contains the f ollowing fie[...]

Viewing Statistic s V iewing Etherne t Statis tic s ESW 500 Series Switches Administrat ion Guide 401 - 60 Sec — Indicat es that the Etherlike statistics are r efreshed ever y 60 seconds. - No Refresh — Indicat es that the Ether lik e statistics are not re freshed. • Frame Check Se quence (FCS) Errors — Displa ys the number of FCS errors r [...]

Viewing Statistic s V iewing Etherne t Statis tic s ESW 500 Series Switches Administrat ion Guide 402 STEP 1 Click Statistics > Ethernet > G VRP . The GV RP Pag e opens : GV R P P ag e The GVR P Pa ge is divided into t wo ar eas , G VRP Statistics T able and GVRP Err or Statistics T able. The f ollowing fiel ds ar e relevant f or both table s[...]

Viewing Statistic s V iewing Etherne t Statis tic s ESW 500 Series Switches Administrat ion Guide 403 - 30 Sec — Indicates that the G VRP statistics are r efreshed ever y 30 seconds. - 60 Sec — Indicates that the G VRP statistics are r efreshed ever y 60 seconds. - No Refresh — Indicat es that the GVRP statistics are not r efreshed. The G VRP[...]

Viewing Statistic s V iewing Etherne t Statis tic s ESW 500 Series Switches Administrat ion Guide 404 To v i e w t h e E A P S t a t i s t i c s : STEP 1 Click Statistics > Ethernet > E AP . The EAP Pa ge opens : EAP Pa ge The E AP Page c ontains the f ollowing fields: • Por t — Indicates the por t which is polled f or statistics . • Re[...]

Viewing Statistic s Managing RMON Sta ti s tic s ESW 500 Series Switches Administrat ion Guide 405 • Frames T ransmit ted — Indicat es the numb er of E APOL frame s transmitted via the por t . • Star t Frames Received — Indicates the number of E APOL Star t frame s r ec eived on the por t . • L og o ff Fra mes R ecei ved — Indicates the[...]

Viewing Statistic s Managing RMON Sta ti s tic s ESW 500 Series Switches Administrat ion Guide 406 Viewing RMON Statistics The RMON Statistics Page contains fields f or viewing inf ormation about devic e utilization and errors that occurred on the device. T o view the RMON statistics : STEP 1 Click Statistics > RMON (Remot e Management) > Sta[...]

Viewing Statistic s Managing RMON Sta ti s tic s ESW 500 Series Switches Administrat ion Guide 407 - 15 Sec — Indicates that the RMON statistics ar e refr eshed ever y 15 seconds. - 30 Sec — Indicates that the RMON statistics ar e refr eshed ever y 30 seconds. - 60 Sec — Indicat es that the RMON statistic s ar e refreshed ever y 60 seconds. -[...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 408 • Collisio ns — Displays the number of c ollisions r ec eived on the inter face since the page was last r efreshed. • Frames of x x By tes — Number of frame s c ontaining the specified numb er of by t es that were r eceived on the interfac e sin[...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 409 RMON Histor y C on tr ol Page The RMON Histor y Control P age contains the f ollowing fields : • History Entr y No. — Number aut omatically as signed to the table entr y number . • Sour ce In te r face — Displays the int er face (por t or EtherC[...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 410 Add R MON H ist or y P age The Add RMON Hist or y Page contains the f ollowing fields : • New Histor y Entr y — Number automatically as signed to the table entr y number . • Sour ce In te r face — Sele ct the int er face (por t or EtherChannel) [...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 411 Edit RMON Histor y Page The Edit RMON Hist or y Page contains the f ollowing fields: • History Entr y No. — Displays the entry numb er f or the Histor y Control T able page. • Sour ce In te r face — Displays the int er face (por t or EtherChanne[...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 412 STEP 1 Click Statistics > RMON (Rem ote Management) > Hist or y . The RMON Histor y Control P age opens : STEP 2 Click the Histor y T able but t on. The RMON Hist or y T able Page opens : RMON Histor y T able Page The RMON Histor y T able Page con[...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 413 • Rec ei ved Packets — Displa ys the number of pack ets r eceived on the int er face since the page was last refr e shed, including b a d pack ets , Multicast and Br oadcast packets. • Broadcast Pack ets — Displa ys the number of good Broadcast [...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 414 STEP 1 Click Statistics > RMON (Rem ote Management) > E vents . The RMON Events P age open s: RMON Events Page The RMON E vents P age contains the f ollowing fields : • Eve nt En t r y — Displays the event index number . • Community — Disp[...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 415 The Del et e button delet es the sele ct ed RMON event . STEP 2 Click the Add but t on. The Add RMON Ev ents Page opens : Add R MON Eve nts Page The Ad d RM ON Eve nt s Pag e contains the f ollowing fields : • Eve nt En t r y — Indicates the ev ent [...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 416 Edit RMON Events Page The Edit RMON E vents P age contains the f ollowing fields: • Entr y Event No. — Displa ys the event entr y index number . • Community — Displays the SNMP co mmunity string. • Descr ipti on — Displa ys the user - define[...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 417 RMON Events Log Page The RMON Ev ents Log P age contains the f ollowing fields : • Eve nt — Displa ys the RMON Ev ents L og entr y number . • Lo g N o . — Displays the log number . • Lo g T i m e — Displa ys the time when the log entr y was [...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 418 STEP 1 Click Statistics > RMON (Remot e Management) > Alarms . The RMON Alarms Page open s: RMON Alarms Page The RMON Alarms P age contains the f ollowing fields : • Alarm Entr y — Indicates the alarm entr y numb er . • Count er Name — Dis[...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 419 - Abs olute — Compares the values d ir ectly with the thresholds at the end of the sampling inter val. • Rising Threshold — Displa ys the rising counter value that triggers the rising threshold alarm. The rising threshold is presented on t op of t[...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 420 Add R MON A lar m Pag e The Add RMON Alarm P age contains the f ollowing fields: • Alarm Entr y — Indicates the alarm entr y numb er . • Interfac e — Displa ys the interface (por t or EtherChannel) f or which RMON statistics are displa yed. The [...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 421 • Rising Ev ent — Selects an event which is defined in the Events table that triggers the rising threshold alarm. The E vents T able is displayed in the RMON Eve nt s Pa g e . • F alling Threshold — Displays the falling count er value that trigg[...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 422 Edit RMON Alarm Page The Edit R MON Ala rm Page contains the f ollowing fields : • Alarm Entr y — Indicates the alarm entr y numb er . • Interfac e — Displa ys the interface (por t or EtherChannel) f or which RMON statistics are displa yed. The [...]

Viewing Statistic s Configuring RMON His tor y ESW 500 Series Switches Administrat ion Guide 423 • Rising Ev ent — Selects an event which is defined in the Events table that triggers the rising threshold alarm. The E vents T able is displayed in the RMON Eve nt s Pa g e . • F alling Threshold — Displays the falling count er value that trigg[...]

Aggr ega tin g Ports ESW 500 Series Switches Administrat ion Guide 424 Aggre ga ting Por t s EtherChannels optimize por t usage by linking a group of por ts t ogether to f orm a single aggregat ed group. EtherChannels multiply the bandwidth b etween the device s, increase por t fl exibilit y , and provide link redundancy . The devic e suppor ts b o[...]

Aggr ega tin g Ports Defining EtherChannel Management ESW 500 Series Switches Administrat ion Guide 425 • Defining EtherChannel Management • Configuring L ACP • Defining EtherChannel Set tings D efining EtherChannel Man agemen t Po rts added to a Ethe rChannel lose their in dividual por t configuration. When p ort s are r e moved fr om the Et[...]

Aggr ega tin g Ports Defining EtherChannel Management ESW 500 Series Switches Administrat ion Guide 426 • Link State — Displa ys the link operational status . • Member — Displays the por ts configured t o the EtherChannel. Modif ying L AG M ember ship STEP 1 Click V L A N & P ort S e tt i n g s > P o rt M an ag em en t > EtherChan[...]

Aggr ega tin g Ports Defining EtherChannel S e t tings ESW 500 Series Switches Administrat ion Guide 427 • Por t List — Contains a list of por ts than can be adde d t o a EtherChannel by using the >> button t o add or the << but t on to r emove it ems . • EtherChannel Members — Displays the por ts which ar e members of the selec[...]

Aggr ega tin g Ports Defining EtherChannel S e t tings ESW 500 Series Switches Administrat ion Guide 428 STEP 1 Click VL AN & P or t Set tings > Port Management > Eth erChannel S ettings . The EtherChannel Set tings Page opens : EtherChannel Set tings Page The EtherChannel Set tings P age contains the f ollowing fields : • Copy Fr om En[...]

Aggr ega tin g Ports Defining EtherChannel S e t tings ESW 500 Series Switches Administrat ion Guide 429 • Flow Control — Displays the curr ent Flow Control setting. Flow control ma y be enabled, dis abled , or be in a uto negot iation mode. Flo w c o nt r ol ope rates when the p or ts ar e in full duplex mode. • PVE — Indicates that this E[...]

Aggr ega tin g Ports Defining EtherChannel S e t tings ESW 500 Series Switches Administrat ion Guide 430 • EtherChannel — Displays the EtherChannel ID number . • Descri ptio n — Displays the user -define d por t name. • EtherChannel T yp e — Indicates he por t t ypes that comprise the EtherChannel. • Admin Status — Enables or dis ab[...]

Aggr ega tin g Ports Configuring L ACP ESW 500 Series Switches Administrat ion Guide 431 the negotiation proces s. The po ssible field values are thos e specified in the Admin Advert isement field. • Neighbor Adver tisement — The neighbor EtherChannel (the EtherChannel t o which the selected inter face is connected) adver tises its cap abilitie[...]

Aggr ega tin g Ports Configuring L ACP ESW 500 Series Switches Administrat ion Guide 432 STEP 1 Click VL AN & P or t Set tings > Port Management > LAC P . The LA CP P ag e opens : LA C P P a ge The LA C P P ag e contains fields f or configuring L ACP EtherChannels. • LA C P S y s t em P r i o r i ty — Indicat es the glob al LACP pr io[...]

Aggr ega tin g Ports Configuring L ACP ESW 500 Series Switches Administrat ion Guide 433 M odif y L A CP Parameter S et tings STEP 1 Click VL AN & P or t Set tings > Port Management > LAC P . The LA CP P ag e opens : STEP 2 Click the Edit button. The Edit L AC P Page opens : Edit L ACP Page The Edit LAC P Page contains the f ollowing fiel[...]

Manag ing Dev ice D i agno stic s Eth e rn et Po r t T e st in g ESW 500 Series Switches Administrat ion Guide 434 Man aging D evic e Di agno stic s This section c ontains inf ormation f or runni ng diagnostic proce dur es on the swit ch, and includes the f ollowing topics: • Ethernet Por t s • GBIC Uplink Ports • SP AN (Port Mirroring) • C[...]

Manag ing Dev ice D i agno stic s Eth e rn et Po r t T e st in g ESW 500 Series Switches Administrat ion Guide 435 STEP 1 Click Maintenance > Diagnostics > Ethernet P or ts . The Ethernet Por ts Page opens: The Ethernet Ports Page contains the f ollowing fields: • Por t — Displa ys the por t list . • T e st Result — Displays the cable[...]

Manag ing Dev ice D i agno stic s Eth e rn et Po r t T e st in g ESW 500 Series Switches Administrat ion Guide 436 STEP 2 Click the Te s t button t o run the cable test . A popup mes sage appears that states "The op eration will shut down the t ested por t f or a shor t period, continue?". Click OK to continue or Cance l to st op the test[...]

Manag ing Dev ice D i agno stic s Performing GBIC Uplink T esting ESW 500 Series Switches Administrat ion Guide 437 STEP 3 Click Done t o close the window . Per forming GBIC Uplink T e sting The GBIC Uplink P age allows network managers to per f orm tests on Fiber Optic cables . Optical transceiver diagnostic s can be per f orme d only when the lin[...]

Manag ing Dev ice D i agno stic s Configur e Span (P or t Mirroring) ESW 500 Series Switches Administrat ion Guide 438 C onfigur e Sp an (Por t Mirroring) Po r t Mirroring monit ors and mirr ors net work traffic by f or war ding copie s of incoming and outgoing packets fr om one po r t to a monit oring p ort . Port mirroring can be use d as diagnos[...]

Manag ing Dev ice D i agno stic s Configur e Span (P or t Mirroring) ESW 500 Series Switches Administrat ion Guide 439 NOTE The destination por t must be configured with a Smar t Por t r ole of "O ther " using the Smar t Port Wizard bef ore configuring for por t mirr oring. • Sour ce P ort — Defines the p ort fr om which traffic is to[...]

Manag ing Dev ice D i agno stic s Monitoring CPU Utiliz a t ion ESW 500 Series Switches Administrat ion Guide 440 - Tx O n l y — Defines the por t mirr oring on transmitting por ts. - Tx a n d R x — Defines the por t mirroring on both receiving and transmitting p or ts. STEP 2 Define the relevant fields. Click Apply . Por t mirroring is added, [...]

Manag ing Dev ice D i agno stic s Monitoring CPU Utiliz a t ion ESW 500 Series Switches Administrat ion Guide 441 STEP 1 Click Maintenance > Diagnostics > CPU Utilization . The CPU Utiliz ati on Pag e open s: The CPU Utilization page contains the f ollowing fields: • CPU Utilization — Displa ys CPU r es ource utilization inf ormation. The[...]

Manag ing Dev ice D i agno stic s Monitoring CPU Utiliz a t ion ESW 500 Series Switches Administrat ion Guide 442 - 30 Sec — Indicat es that the CPU utilization statistics a re r efr eshed ever y 30 seconds . - 60 Sec — Indicat es that the CPU utilization statistics a re r efr eshed ever y 60 seconds . • Usage Per centage s — Graph ’ s y-[...]