Ethernet aggregation switches - Eltex

[Pages:108]Ethernet aggregation switches

MES5312, MES5316A, MES5324A, MES5332A

MES Ethernet switches monitoring and configuration via SNMP, firmware version 6.1.1

eltex-

Document Version Version 1.1 Firmware Version

Issue Date 04.02.2021 MES5312 -- 6.1.1 MES5300 -- 6.1.1

Revisions First issue

2

MES Ethernet switches monitoring and configuration via SNMP

CONTENTS

1

SNMP-SERVER CONFIGURATION AND SNMP-TRAP SENDING ........................................................................5

2

SHORT DESCRIPTIONS .....................................................................................................................................5

3

FILE OPERATIONS ............................................................................................................................................6

3.1

Saving the configuration .................................................................................................................................6

3.2

Operation with TFTP server.............................................................................................................................7

3.3

Switch autoconfiguration ................................................................................................................................9

3.4

Firmware update ...........................................................................................................................................10

4

SYSTEM CONFIGURATION .............................................................................................................................13

4.1

System resources ..........................................................................................................................................13

4.2

System parameters .......................................................................................................................................21

4.3

Stack parameters...........................................................................................................................................23

4.4

Device management......................................................................................................................................24

5

SYSTEM TIME CONFIGURATION ....................................................................................................................28

6

INTERFACE CONFIGURATION ........................................................................................................................30

6.1

Ethernet interface parameters......................................................................................................................30

6.2

VLAN Configuration .......................................................................................................................................39

6.3

Errdisable state configuration and monitoring .............................................................................................44

6.4

Configuring voice vlan ...................................................................................................................................46

6.5

Configuring LLDP ...........................................................................................................................................47

7

IPV4-ADDRESSING CONFIGURATION ............................................................................................................49

8

IPV6-ADDRESSING CONFIGURATION ............................................................................................................51

9

GREEN ETHERNET CONFIGURATION .............................................................................................................52

10

RING PROTOCOLS CONFIGURATION .............................................................................................................53

10.1

ERPS protocol ................................................................................................................................................53

10.2

Spanning-tree protocol configuration...........................................................................................................55

11

MULTICAST ADDRESSING ..............................................................................................................................59

11.1

Multicast addressing rules ............................................................................................................................59

11.2

Multicast-traffic restriction functions ...........................................................................................................61

12

MANAGEMENT FUNCTIONS ..........................................................................................................................64

12.1

AAA mechanism ............................................................................................................................................64

12.2

Access configuration .....................................................................................................................................67

13

PORT MIRRORING .........................................................................................................................................69

14

PHYSICAL LAYER DIAGNOSTIC FUNCTIONS ...................................................................................................71

14.1

Optical transceiver diagnostics .....................................................................................................................71

15

SECURITY FUNCTIONS ...................................................................................................................................72

15.1

Port security functions ..................................................................................................................................72

15.2

DHCP control and option 82..........................................................................................................................76

15.3

IP-source Guard.............................................................................................................................................78

15.4

ARP Inspection ..............................................................................................................................................80

15.5

Port based client authentication (802.1x) .....................................................................................................81

15.6

Loopback-detection mechanism ...................................................................................................................84

15.7

Broadcast storm control................................................................................................................................86

16

CONFIGURING IP AND MAC ACL ...................................................................................................................88

17

DOS-ATTACK PROTECTION CONFIGURATION ...............................................................................................93

18

QUALITY OF SERVICE ? QOS ..........................................................................................................................94

18.1

QoS configuration..........................................................................................................................................94

18.2

QoS statistics .................................................................................................................................................97

19

ROUTING .......................................................................................................................................................99

19.1

Static routing .................................................................................................................................................99

19.2

Dynamic routing ............................................................................................................................................99

APPENDIX A. BIT MASK CALCULATION METHOD ....................................................................................................................100

APPENDIX B: EXAMPLE OF CREATING A STANDARD IP ACL ....................................................................................................101

APPENDIX C. EXAMPLE OF CREATING, FILLING AND REMOVING AN OFFSET-LIST WITH MAC ACL ........................................106

MES Ethernet switches monitoring and configuration via SNMP

3

SYMBOLS Symbol

[ ]

{} ?,? ?-? ?|? ?/?

Calibri Italic

Bold italic

Courier New

Description

Square brackets are used to indicate optional parameters in the command line; when entered, they provide additional options. In the command line, mandatory parameters are shown in curly braces.

In the command description, these characters are used to define ranges.

In the command description, this character means 'or'. This sign separates possible and default values when specifying variable values. Calibri Italic is used to indicate variables and parameters that should be replaced with an appropriate word or string. Notes and warnings are shown in bold italic. Keyboard keys are shown in bold italic within angle brackets. Command examples are shown in Courier New Bold.

Notes and Warnings

Notes contain important information, tips, or recommendations on device operation and configuration.

Warnings inform the user about situations that may be harmful to the user, cause damage to the device, malfunction or data loss.

4

MES Ethernet switches monitoring and configuration via SNMP

1 SNMP-SERVER CONFIGURATION AND SNMP-TRAP SENDING

snmp-server server snmp-server community public ro snmp-server community private rw snmp-server host 192.168.1.1 traps version 2c private

2 SHORT DESCRIPTIONS

ifIndex -- port index; May take the following values:

Switch model

MES5312 MES5316A MES5324A MES5332A

Data center switch Indexes

- indexes 1-32 ? tengigabitethernet 1/0/1-32; - indexes 53-84 ? tengigabitethernet 2/0/1-32; - indexes 105-136 ? tengigabitethernet 3/0/1-32; - indexes 157-188 ? tengigabitethernet 4/0/1-32; - indexes 209-240 ? tengigabitethernet 5/0/1-32; - indexes 261-292 ? tengigabitethernet 6/0/1-32; - indexes 313-344 ? tengigabitethernet 7/0/1-32; - indexes 365-396 ? tengigabitethernet 8/0/1-32; - indexes 1000-1031 ? Port-Channel 1/0/1-32; - indexes 3000-3015 ? Tunnel 1-16; - index 7000? loopback 1;

index-of-rule -- rule index in ACL. Always a multiple of 20! If the indexes are not divisible by 20 when the rules are created, the sequence numbers of the rules in the ACL will be divisible by 20 after the switch is rebooted;

The value of field N -- in IP and MAC ACL any rule occupies from one to 3 fields depending on its structure;

IP address -- IP address for switch management;

In the examples given in the document the following IP address is used for management: 192.168.1.30;

ip address of tftp server -- TFTP server IP address;

In the examples given in the document the following TFTP server IP address is used: 192.168.1.1;

community -- community string (password) for the access via SNMP.

In the examples given in the document the following community are used:

private -- rights for recording (rw); public -- rights for reading (ro).

MES Ethernet switches monitoring and configuration via SNMP

5

3 FILE OPERATIONS

3.1 Saving the configuration

Saving the configuration to non-volatile memory

MIB: rlcopy.mib

Tables used: rlCopyEntry -- 1.3.6.1.4.1.89.87.2.1

snmpset -v2c -c \ 1.3.6.1.4.1.89.87.2.1.3.1 i {local(1)} \ 1.3.6.1.4.1.89.87.2.1.7.1 i {runningConfig(2)} \ 1.3.6.1.4.1.89.87.2.1.8.1 i {local(1)} \ 1.3.6.1.4.1.89.87.2.1.12.1 i {startupConfig (3)} \ 1.3.6.1.4.1.89.87.2.1.17.1 i {createAndGo (4)}

Example CLI command:

copy running-config startup-config

SNMP command:

snmpset -v2c -c private 192.168.1.30 \ 1.3.6.1.4.1.89.87.2.1.3.1 i 1 \ 1.3.6.1.4.1.89.87.2.1.7.1 i 2 \ 1.3.6.1.4.1.89.87.2.1.8.1 i 1 \ 1.3.6.1.4.1.89.87.2.1.12.1 i 3 \ 1.3.6.1.4.1.89.87.2.1.17.1 i 4

Saving the configuration from non-volatile memory:

MIB: rlcopy.mib

Tables used: rlCopyEntry -- 1.3.6.1.4.1.89.87.2.1

snmpset -v2c -c \ 1.3.6.1.4.1.89.87.2.1.3.1 i {local(1)} \ 1.3.6.1.4.1.89.87.2.1.7.1 i {startupConfig (3)} \ 1.3.6.1.4.1.89.87.2.1.8.1 i {local(1)} \ 1.3.6.1.4.1.89.87.2.1.12.1 i {runningConfig(2)} \ 1.3.6.1.4.1.89.87.2.1.17.1 i {createAndGo (4)}

Example CLI command:

copy startup-config running-config

SNMP command:

snmpset -v2c -c private 192.168.1.30 \ 1.3.6.1.4.1.89.87.2.1.3.1 i 1 \ 1.3.6.1.4.1.89.87.2.1.7.1 i 3 \ 1.3.6.1.4.1.89.87.2.1.8.1 i 1 \ 1.3.6.1.4.1.89.87.2.1.12.1 i 2 \ 1.3.6.1.4.1.89.87.2.1.17.1 i 4

6

MES Ethernet switches monitoring and configuration via SNMP

Deleting the configuration from the non-volatile memory

MIB: rlmng.mib

Tables used: rndAction -- 1.3.6.1.4.89.1.2

snmpset -v2c -c \ 1.3.6.1.4.1.89.1.2.0 i {eraseStartupCDB (20)}

Startup-config deletion example CLI command:

delete startup-config

SNMP command:

snmpset -v2c -c private 192.168.1.30 \ 1.3.6.1.4.1.89.1.2.0 i 20

3.2 Operation with TFTP server

Copying the configuration from the volatile memory to TFTP server

MIB: rlCopy.mib

Tables used: rlCopyEntry -- 1.3.6.1.4.1.89.87.2.1

snmpset -v2c -c -t 5 -r 3 \ 1.3.6.1.4.1.89.87.2.1.3.1 i {local(1)} \ 1.3.6.1.4.1.89.87.2.1.7.1 i {runningConfig(2)} \ 1.3.6.1.4.1.89.87.2.1.8.1 i {tftp(3)} \ 1.3.6.1.4.1.89.87.2.1.9.1 a {ip address of tftp server} \ 1.3.6.1.4.1.89.87.2.1.11.1 s "MES-config.cfg" \ 1.3.6.1.4.1.89.87.2.1.17.1 i {createAndGo (4)}

Example of copying from running-config to TFTP server CLI command:

copy running-config t

SNMP command:

snmpset -v2c -c private -t 5 -r 3 192.168.1.30 \ 1.3.6.1.4.1.89.87.2.1.3.1 i 1 \ 1.3.6.1.4.1.89.87.2.1.7.1 i 2 \ 1.3.6.1.4.1.89.87.2.1.8.1 i 3 \ 1.3.6.1.4.1.89.87.2.1.9.1 a 192.168.1.1 \ 1.3.6.1.4.1.89.87.2.1.11.1 s "MES-config.cfg " \ 1.3.6.1.4.1.89.87.2.1.17.1 i 4

MES Ethernet switches monitoring and configuration via SNMP

7

Copying the configuration to the volatile memory from TFTP server

MIB: rlcopy.mib

Tables used: rlCopyEntry -- 1.3.6.1.4.1.89.87.2.1

snmpset -v2c -c -t 5 -r 3 \ 1.3.6.1.4.1.89.87.2.1.3.1 i {tftp(3)} \ 1.3.6.1.4.1.89.87.2.1.4.1 a {ip address of tftp server} \ 1.3.6.1.4.1.89.87.2.1.6.1 s "MES-config.cfg" \ 1.3.6.1.4.1.89.87.2.1.8.1 i {local(1)} \ 1.3.6.1.4.1.89.87.2.1.12.1 i {runningConfig(2)} \ 1.3.6.1.4.1.89.87.2.1.17.1 i {createAndGo (4)}

Example of copying from a TFTP server to running-config CLI command:

copy t running-config

SNMP command:

snmpset -v2c -c private -t 5 -r 3 192.168.1.30 \ 1.3.6.1.4.1.89.87.2.1.3.1 i 3 \ 1.3.6.1.4.1.89.87.2.1.4.1 a 192.168.1.1 \ 1.3.6.1.4.1.89.87.2.1.6.1 s "MES-config.cfg " \ 1.3.6.1.4.1.89.87.2.1.8.1 i 1 \ 1.3.6.1.4.1.89.87.2.1.12.1 i 2 \ 1.3.6.1.4.1.89.87.2.1.17.1 i 4

Copying the configuration from the non-volatile memory to TFTP server

MIB: file rlcopy.mib

Tables used: rlCopyEntry -- 1.3.6.1.4.1.89.87.2.1

snmpset -v2c -c -t 5 -r 3 \ 1.3.6.1.4.1.89.87.2.1.3.1 i {local(1)} \ 1.3.6.1.4.1.89.87.2.1.7.1 i {startupConfig (3)} \ 1.3.6.1.4.1.89.87.2.1.8.1 i {tftp(3)} \ 1.3.6.1.4.1.89.87.2.1.9.1 a {ip address of tftp server} \ 1.3.6.1.4.1.89.87.2.1.11.1 s "MES-config.cfg" \ 1.3.6.1.4.1.89.87.2.1.17.1 i {createAndGo (4)}

Example of copying from startup-config to TFTP server CLI command:

copy startup-config t

SNMP command:

snmpset -v2c -c private -t 5 -r 3 192.168.1.30 \ 1.3.6.1.4.1.89.87.2.1.3.1 i 1 \ 1.3.6.1.4.1.89.87.2.1.7.1 i 2 \ 1.3.6.1.4.1.89.87.2.1.8.1 i 3 \ 1.3.6.1.4.1.89.87.2.1.9.1 a 192.168.1.1 \ 1.3.6.1.4.1.89.87.2.1.11.1 s "MES-config.cfg " \ 1.3.6.1.4.1.89.87.2.1.17.1 i 4

8

MES Ethernet switches monitoring and configuration via SNMP

 ................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download