ELTEX MES53xx Operation Manual
  1. Manuals
  2. Brands
  3. ELTEX Manuals
  4. Switch
  5. MES53xx
  6. Operation manual

ELTEX MES53xx Operation Manual

Backbone switches, aggregation switches, access switches
Hide thumbs
Table of Contents

Advertisement

Quick Links

MES53xx, MES33xx, MES23xx
Operation Manual, Firmware Version 4.0.4
Backbone Switches, Aggregation Switches, Access Switches

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the MES53xx and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for ELTEX MES53xx

Summary of Contents for ELTEX MES53xx

  • Page 1 MES53xx, MES33xx, MES23xx Operation Manual, Firmware Version 4.0.4 Backbone Switches, Aggregation Switches, Access Switches...
  • Page 2 2.3 Main Specifications 2.4 MES2348B Switch Design Version 1.1 12.05.2016 Chapter added: 2.3 Main Specifications 2.4 MES3324 and MES2324 Switch Design Chapter deleted: 5.14.2 IPv6 Protocol Tunnelling (ISATAP) Version 1.0 25.03.2016 First issue Firmware Version 4.0.4 MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 3: Table Of Contents

    2.3 Main specifications ..........................14 2.4 Design ..............................18 2.4.1 Appearance and description of the front panel of MES53xx, MES33xx, MES23xx switches. . 18 2.5 Rear panel of the device ........................23 2.5.1 Side panels of the device ......................25 2.5.2 Light Indication ........................
  • Page 4 11.2 DHCP Relay features ........................166 11.1 PPPoE Intermediate Agent (PPPoEIA) configuration ..............167 11.2 DHCP Server Configuration ......................169 11.3 ACL Configuration ........................... 172 11.3.1 IPv4-based ACL Configuration.................... 174 11.3.2 IPv6 ACL Configuration ...................... 177 MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 5: Mes53Xx, Mes33Xx, Mes23Xx Ethernet Switch Series

    12.2 Updating firmware from TFTP server ....................198 12.2.1 System firmware update ....................198 APPENDIX A. EXAMPLE OF DEVICE USAGE AND CONFIGURATION .............. 201 APPENDIX B. CONSOLE CABLE ........................205 APPENDIX C. SUPPORTED ETHERTYPE VALUES .................... 206 MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 6 Notes contain important information, tips or recommendations on device operation and set-up. Warnings tell the user about situations that may be harmful to the user, cause damage to the device, malfunction or data loss. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 7: Introduction

    High-speed data transmission, especially in large-scale networks, requires a network topology that will allow flexible distribution of high-speed data flows. MES53xx, MES33xx, MES23xx series switches can be used in large enterprise networks, SMB networks and carrier networks. These switches deliver high performance, flexibility, security, and multi- tier QoS.

  • Page 8: Product Description

    All port parameters of each stack unit can be configured from the master switch. Device stacking allows for reducing network management efforts. 2.2.2 MAC address processing features Table 2.2 lists MAC address processing features. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 9: Layer 2 Protocol Tunneling (L2Pt) Features

    This feature isolates the ports in a group (in a single switch) located in the same Private VLAN Edge broadcast domain from each other, allowing traffic exchange with other ports that are located in the same broadcast domain but do not belong to this group. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 10 24 bits of the MAC address). If the MAC table of the switch contains a MAC Auto Voice VLAN address with VoIP gateway or IP phone OUI, this port will be automatically added support to the voice VLAN (identification by SIP or the destination MAC address is not supported). MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 11: Layer 3 Protocol Tunneling (L3Pt) Features

    802.1p class of service 802.1p standard specifies the method for indicating and using frame priority to ensure on-time delivery of time-critical traffic. 802.1p standard defines 8 priority support MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 12: Security Features

    Table 2.7. Switch control features Uploading and Device parameters are saved into the configuration file that contains configuration downloading the data for the specific device ports as well as for the whole system. configuration file MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 13 The device supports client authentication with TACACS+ protocol. The TACACS+ Controller Access protocol provides a centralized security system that handles user authentication and a centralized management system to ensure compatibility with RADIUS and Control System other authentication mechanisms. (TACACS+) MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 14: Additional Features

    20x1000 Base-X (SFP), 4x(10G Base-X(SFP+)/1000Base-X (SFP), 4x10/100/1000 Base-T/1000 Base-X Combo MES2324, 24x10/100/1000Base-T, 4x(10G Base-X(SFP+)/1000Base-X (SFP)) MES2324B Interfaces 20x1000 Base-X (SFP) MES2324FB 4x(10G Base-X(SFP+)/1000Base-X (SFP) 4x10/100/1000 Base-T/1000 Base-X Combo MES2348B 48x10/100/1000Base-T, 4x(10G Base-X(SFP+)/1000Base-X (SFP)) 10x10/100/1000Base-T MES2308 2x1000Base-X(SFP) MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 15 MES2348B, MES2308, MES2308P MES5324 MES3324F MES2324, TCAM routing volume MES2324B, MES2324FB, MES2348B, MES2308, MES2308P MES5324 MES3324F MES2324 Unicast routs MES2324B number MES2348B L3 functionality is disabled MES2324FB MES2308 MES2308P MES5324 ARP records number MES3324F MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 16 Total number of L3 interfaces up to 129 Total number of virtual Loopback interfaces 16 groups with up to 8 ports in each MSTP instances qty Jumbo frames Max. packet size 10K Stacking Up to 8 devices MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 17 275 W MES5324 430x298x44 mm MES3324F 430 x 280 x 44 mm MES2324 430 x 158 x 44 mm Dimensions MES2324B MES2324FB 430 x 243 x 44 mm MES2348B 430 x 280 x 44 mm MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 18: Design

    2.4.1 Appearance and description of the front panel of MES53xx, MES33xx, MES23xx switches. Front panel layout of the MES53xx, MES33xx and MES23xx series is shown in Figure 1–8. Figure 1. MES5324, front panel Table 2.10 lists connectors, LEDs and controls located on the front panel of the switch.
  • Page 19 Description UnitID Indicator of the stack unit number. Power Device power LED. Master Device operation mode LED (master/slave). Fan operation LED. Backup power supply LED. Console Console port for local management of the device. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 20 Combo ports: 10/100/1000 Base-T (RJ45) ports XG1, XG2 Slots for 10GSFP+/ 1GSFP transceivers. XG3, XG4 Figure 3 MES2324, front panel Figure 4. MES2324B, front panel Figure 5. MES2324FB, front panel Figure 6. MES2348B, front panel MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 21 Management is performed over the network other than the transportation network). The MES2324, MES2324B, MES2324FB switches can have an OOB port (out-of-band 10/100/1000 Base-T (RJ-45) for remote device management. Management is performed over the network other than the transportation network). MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 22 Earth bonding point of the device. ~110-250VAC, 60/50Hz max Connector for AC power supply UnitID Indicator of the stack unit number. Power Device power LED. Master Device operation mode LED (master/slave). Status Device status LED MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 23: Rear Panel Of The Device

    Hot-swappable removable ventilation modules. Connector for DC power supply ~220 VAC 50 Hz max 1A Connector for AC power supply Figure 10. MES3324F, rear panel Table 2.16. Description of the rear panel connectors of the switch MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 24 Table 2.17 – Description of the rear panel connectors of the MES2324, MES2348B switches № Rear panel element Description Earth bonding point Earth bonding point of the device. Fans 12VDC max 5A Terminals for battery 12V ~110-250VAC, 60/50Hz max Connector for AC power supply MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 25: Side Panels Of The Device

    'Installation and connection'. 2.5.2 Light Indication Ethernet interface status is represented by two LEDs: green LINK/ACT and red SPEED. Location of LEDs is shown in Figure 15-17. Figure 17. QSFP transceiver socket appearance MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 26 Data transfer is in progress Unit ID (1-8) LED indicates the stack unit number. System indicators (Power, Master, Fan, RPS) are designed to display the operational status of the modules of the MES53xx, MES33xx, MES23xx switches. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 27: Delivery Package

    Ethernet switch; – Power module PM75-48/12 or PM-160-220/12; – Power cable (if equipped with 220V power supply) – Rack mounting set; – Documentation. SFP/SFP+ transceivers may be included in the delivery package on request. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 28: Installation And Connection

    2. Align mounting holes in the support bracket with the corresponding holes in the rack guides. Use the holes of the same level on both sides of the guides to ensure horizontal installation of the device. 3. Use a screwdriver to screw the switch to the rack. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 29 Figure 22 shows an example of MES5324 rack installation. Figure 22. MES5324 switch rack location Do not block air vents and fans located on the rear panel to avoid components overheating and subsequent switch malfunction. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 30: Power Module Installation

    To connect the device to DC power supply, use wires with a minimum cross-section of 1 mm 4. Turn the device on and check the front panel LEDs to make sure the terminal is in normal operating conditions. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 31: Battery Connection To Mes2324B, Mes2324Fb, Mes2348B

    1. Insert the top SFP module into a slot with its open side down, and the bottom SFP module with its open side up. Figure 25. SFP transceiver installation 2. Push the module. When it is in place, you should hear a distinctive 'click'. This applies to MES2324B, MES2324FB, MES2348B MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 32 Figure 26. Installed SFP transceivers To remove a transceiver, perform the following actions: 1. Unlock the module's latch. Figure 27. Opening SFP transceiver latch 2. Remove the module from the slot. Figure 28 SFP transceiver removal MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 33: Initial Switch Configuration

    BootROM: Image checksum verification PASSED Starting U-Boot. Press ctrl+shift+6 to enable debug mode. U-Boot 2011.12 (Feb 01 2016 - 14:45:42) Eltex version: v2011.12 2013_Q3.0 4.0.1 Loading system/images/active-image ... Autoboot in 2 seconds - press RETURN or Esc. to abort and enter prom.

  • Page 34: Startup Menu

    To enter the startup menu, connect to the device via the RS-232 interface, reboot the device and press and hold the ESC or ENTER key for 2 seconds after the POST procedure is completed. U-Boot 2011.12 (Feb 01 2016 - 14:45:42) Eltex version: v2011.12 2013_Q3.0 4.0.1 Loading system/images/active-image ...
  • Page 35 Shows stack units information. show stack configuration Display information about stackable interfaces of stack units. show stack links [details] Display verbose information about stackable interfaces.  show stack links command example: console# show stack links MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 36: Switch Function Configuration

    Username and password are required to log in for device administration. Use the following commands to create a new system user or configure the username, password, or privilege level: console# configure console(config)# username name password password privilege {1-15} MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 37 Privilege level 1 allows access to the device, but denies configuration. Privilege level 15 allows both the access and configuration of the device. Example commands to set admin's password as “eltex” and create the “operator” user with the “pass” password and privilege level 1:...
  • Page 38 MIB objects. You can set the IP address of the management station for each community. Example of private community creation with read-write access and management station IP address 192.168.16.44: console# configure console(config)# snmp-server server console(config)# snmp-server community private rw 192.168.16.44 console (config)# exit console# MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 39: Security System Configuration

    Startup menu will open where you can initiate password recovery procedure ([2]). To ensure basic security, you can define the password for the following services: – Console (serial port connection) – Telnet; – SSH. 4.5.2.1 Setting console password console(config)# aaa authentication login default line MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 40: Banner Configuration

    Enter ssh in response to the password prompt that appears during the registration in the SSH session. 4.5.3 Banner configuration For your convenience, you can specify a banner, a message with any information. For example: console(config)# banner exec ; Role: Core switch Location: Objedineniya 9, str. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 41: Device Management. Command Line Interface

    Show the privilege level of the current user. terminal history Enable command history for the current terminal session. -/function is enabled- terminal no history Disable command history for the current terminal session. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 42 - d – delimiter; - message_text - message text (up to 510 characters in a line, total count is 2000 characters). MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 43: Filtering Command Line Messages

    Create the global macro descriptor string. word word: (1..160) characters no macro global description Delete the descriptor string. EXEC mode commands Command line prompt in the EXEC mode is as follows: MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 44: System Management Commands

    - host - domain name of the network node; timeout: (50..65535)/2000 - size - size of the packet to be sent, the quantity of bytes in the packet; - count - quantity of packets to be sent; - timeout - request timeout. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 45 Display the total and used size of hardware tables (routing, resources neighbours, interfaces). show system tcam utilization Show TCAM memory (Ternary Content Addressable Memory) [unit unit] unit: (1..8)/- resource load. - unit - the stack unit number. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 46 Example use of the command: traceroute console# traceroute ip eltex.com Tracing the route to eltex.com (148.21.11.69) form , 30 hops max, 18 byte packets Type Esc to abort. 1 gateway.eltex (192.168.1.101) 0 msec 0 msec 0 msec 2 eltexsrv (192.168.0.1) 0 msec 0 msec 0 msec 3 * * * Table 5.12.
  • Page 47 Table 5.16. System management commands in the global configuration mode Command Value/Default value Action hostname name Use this command to specify the network name for the device. name: (1..160) characters/- no hostname Set the default network device name. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 48: Password Parameters Configuration Commands

    Restore the default value. min-classes passwords complexity Enable minimum password length restriction. min­length value value: (0..64)/8 no passwords complexity Restore the default value. min-length passwords complexity number: (0..16)/3 Enable the restriction for the minimum quantity of identical MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 49: File Operations

    Command history file. usb:// Source or destination address on an USB drive. 5.6.2 File operation commands File operation commands are available to privileged users only. Command line prompt in the Privileged EXEC mode is as follows: MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 50 - detailed - output the configuration with binary data loopbackloopback_id}] show bootvar Show the active system firmware file that the device loads on startup. write [memory] Save the current configuration into the initial configuration file. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 51: Automatic Update And Configuration Commands

    Command line prompt in the global configuration mode is as follows: console(config)# Table 5.21. System management commands in the global configuration mode Command Value/Default value Action boot host auto-config -/enabled Enable automatic configuration based on DHCP. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 52: System Time Configuration

    (1..31); - day - day; month - month; year - year. day year month: (Jan..Dec); year: (2000..2037) show sntp configuration Show SNTP configuration. show sntp status Show SNTP status. EXEC mode commands MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 53 By default, key number md5 value authentication is disabled no sntp authentication-key Delete authentication key for SNTP. number sntp authenticate -/authentication is not Authentication is required to obtain information from NTP required servers. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 54 Table 5.26. List of system time configuration commands in the interface configuration mode Command Value/Default value Action sntp client enable Allow the operation of SNTP clients that support packet -/denied transmission to the nearest device in a group of receivers, as MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 55 Asterisk (*) means that the time is not valid.  Specify system clock date and time: March 7, 2009, 1:32pm console# clock set 13:32:00 7 Mar 2009  Show SNTP status: console# show sntp status MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 56: Configuring Time Ranges

    You can specify the mask value in X.X.X.X format or in /N format, where N is the number of 1's in the binary mask representation. 5.9.1 Ethernet, Port-Channel and Loopback interface parameters Interface configuration mode commands (interface range) MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 57 MES2324x) interface loopback loopback_id For configuring virtual interface where – group – sequential number of a group, total number in accordance with Table Table 2.9. Main specifications (‘Link agregation (LAG)’ string); MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 58 – sequential number of virtual interface corresponding to Table 2.9. Main specifications (‘Number of virtual Loopback interfaces’ string. Interface entry 1..8/0/1..N number of the stack unit slot number interface number Commands entered in the interface configuration mode are applied to the selected interface. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 59 Flowcontrol autonegotiation works only when negotiation mode is enabled on the interface (Ethernet, mode: (on, off, auto)/off port-channel). no flowcontrol Disable flow control mode. back-pressure Enable the ‘back pressure' function for the interface -/disabled (Ethernet). MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 60 Set the default value. seconds interval EXEC mode commands Command line prompt in the EXEC mode is as follows: console# Table 5.30. EXEC mode commands Command Value/Default value Action clear counters Reset statistics for all interfaces. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 61 Show the reason for disabling the port or port group and gi_port: (1..8/0/1..48); {gigabitethernet gi_port | automatic activation status. te_port: (1..8/0/1..24); tengigabitethernet te_port | fo_port: (1..8/0/1..4); fortygigabitethernet fo_port | group: (1..16) port-channel group} Examples of command usage MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 62 Not Present Not Present Not Present Po10 Not Present Po11 Not Present Po12 Not Present Po13 Not Present Po14 Not Present Po15 Not Present Po16 Not Present  Show autonegotiation parameters: console# show interfaces advertise MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 63 …………………………………………………………………………………………………………………………………………………………………. InUcastPkts InMcastPkts InBcastPkts InOctets ---------------- ------------ ------------ ------------ ------------ 1390 OutUcastPkts OutMcastPkts OutBcastPkts OutOctets ---------------- ------------ ------------ ------------ ------------ 39616  Show channel group 1 statistics: console# show interfaces counters port-channel 1 MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 64 The number of cases when the carrier control state was lost or not approved during the frame transmission attempt. Oversize Packets The number of received packets whose size exceeds the maximum allowed frame size. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 65: Vlan Interface Configuration

    Command line prompt in the VLAN interface configuration mode is as follows: console# configure console(config)# interface {vlan |range vlan VLANlist} vlan_id console(config-if)# This mode is available in the global configuration mode and designed for configuration of VLAN interface or VLAN interface range parameters. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 66 Set the default value. switchport access vlan vlan_id Add VLAN for the access interface. vlan_id: - vlan_id - VLAN ID. (1..4094)/1 no switchport access vlan Set the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 67 Remove a classification rule. switchport general map protocols-group group vlan vlan_id: (1..4094) Set a classification rule for the main vlan_id group: (1.. interface based on protocol tethering. 2147483647) - group – group number ID; MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 68 Specify the port as a tagging port in the default VLAN. no switchport default-vlan tagged Set the default value. Privileged EXEC mode commands Command line prompt in the Privileged EXEC mode is as follows: MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 69 Created by: D-Default, S-Static, G-GVRP, R-Radius Assigned VLAN, V-Voice VLAN Vlan Name Tagged Ports UnTagged Ports Created by ---- ----------------- ------------------ ------------------ ---------------- te1/0/1-24, fo1/0/1-4,gi1/0/1, Po1-8 Show source ports and multicast traffic receivers in VLAN 4: console# show vlan multicast-tv vlan 4 MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 70 An IP interface is created when an IP address is assigned to any of the interfaces of the device, gigabitethernet, tengigabitethernet, fortygigabitethernet, oob, port-channel, or VLAN. Command line prompt in the IP interface configuration mode is as follows console# configure console(config)# interface ip A.B.C.D MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 71: Selective Q-In-Q

    Creates a ‘permit’ rule to transmit all ingress packets with the permit [ingress_vlan ingress_vlan_id: (1..4094) ingress_vlan_id outer tag. If ingress_vlan_id is not set, all ingress_vlan_id] ingress packets will be transmitted without changes. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 72: Broadcast Storm Control

    Ethernet interface configuration mode commands Command line prompt in the Ethernet or port group interface configuration mode is as follows: MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 73: Link Aggregation Groups (Lag)

    The switches support Link agregation groups (LAG) in the number corresponding to Table 2.9. Main specifications (‘Link aggregation group ). Each port group should include Ethernet interfaces (LAG)’ operating at the same speed in full-duplex mode. Aggregation of ports into group will increase bandwidth MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 74: Static Link Aggregation Groups

    Static LAG groups are used to aggregate multiple physical links into a single link, which increases link bandwidth and adds resiliency. For static groups, the priority of links in an aggregated linkset is not specified. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 75: Lacp Link Aggregation Protocol

    [parameters | statistics | - statistics - show protocol operation statistics; protocol-state] - protocol-state - show protocol operation state. show lacp port-channel Show information on LACP for a port group. group: (1..16) [group] Examples of command usage MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 76: Ipv4 Addressing Configuration

    Table 5.49. Global configuration mode commands Command Value/Default value Action ip default-gateway Specify the default gateway address for the switch. -/default gateway is not ip_address defined no ip default-gateway Remove the default gateway address. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 77: Green Ethernet Configuration

    Green Ethernet is a technology that reduces the device power consumption by disabling power supply to unused electric ports and changing the levels of transmitted signals according to the cable length. Global configuration mode commands Command line prompt in the global configuration mode is as follows: console(config)# MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 78 [gigabitethernet gi_port | gi_port: (1..8/0/1..48); tengigabitethernet te_port | te_port: (1..8/0/1..24); fortygigabitethernet fo_port | fo_port: (1..8/0/1..4); detailed] green-ethernet power-meter Reset the power meter readings. reset Examples of command usage  Show green-ethernet statistics: console# show green-ethernet detailed MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 79: Ipv6 Addressing Configuration

    64 least significant bits of the IPv6 address. A MAC address is divided into two 24-bit parts separated by the FFFE constant. Global configuration mode commands Command line prompt in the global configuration mode is as follows: console(config)# MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 80 Set the default value. ipv6 address Set the local IPv6 address for the interface. Most significant Default value for a local ipv6_address/prefix_length bits of the local IP addresses in IPv6 - FE80:: address: (FE80::EUI64) link-local MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 81 | icmp | nd | gi_port: (1..8/0/1..48); ipv6_address/ipv6_prefix | te_port: (1..8/0/1..24); interface fo_port: (1..8/0/1..4); {gigabitethernet gi_port | group: (1..16); tengigabitethernet te_port | vlan_id: (1..4094) fortygigabitethernet fo_port | port-channe lgroup | loopback | vlan vlan id}] MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 82: Protocol Configuration

    When network node name is specified, the command will display the corresponding IP address. Example use of commands Use DNS servers 192.168.16.35 and 192.168.16.38 and set mes as the default domain name: console# configure MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 83: Arp Configuration

    192.168.16.35 192.168.16.38 console(config)# ip domain name mes Specify static mapping: network node eltex.mes has the IP address 192.168.16.39: console# configure console(config)# ip host eltex.mes 192.168.16.39 5.16.2 ARP configuration ARP (Address Resolution Protocol) is a link layer protocol used for deriving the MAC address from the IP address contained in the request.

  • Page 84: Gvrp Configuration

    Ethernet or port group interface (interface range) configuration mode commands Command line prompt in the Ethernet or port group interface configuration mode is as follows: console# configure console(config)# interface {gigabitethernet gi_port | tengigabitethernet te_port | fortygigabitethernet fo_port | port-channel group} console(config-if)# MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 85: Loopback Detection Mechanism

    This mechanism allows the device to detect loopback ports. The switch detects port loopbacks by sending a frame with the destination address that match one of the device MAC addresses. Global configuration mode commands Command line prompt in the global configuration mode is as follows: MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 86: Stp Family (Stp, Rstp, Mstp)

    Each instance may contain multiple VLAN groups. However, one drawback of MSTP it that all MSTP switches should have the same VLAN group configuration. Max available number of the MSTP instances is specified in the Table 2.9. Main specifications. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 87 - filtering – BPDU packets are filtered on the interface on which STP is disabled; -/flooding - flooding – untagged BPDU packets are transmitted and tagged packets are filtered on the interface on which STP is disabled. no spanning-tree bpdu Set the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 88 - filtering - BPDU packets are filtered on the interface on which STP is disabled; - flooding - untagged BPDU packets are transmitted and tagged packets are filtered on the interface on which STP is disabled. no spanning-tree bpdu Set the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 89: Mstp Configuration

    Action spanning-tree Enable STP on the switch. -/enabled no spanning-tree Disable STP on the switch. spanning-tree mode {stp | Set STP operation mode. rstp | mstp} -/RSTP no spanning-tree mode Set the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 90 Enable root protection for all STP spanning trees for the selected port. This protection prohibits the interface to be the -/protection disabled root port of the switch. no spanning-tree guard root Set the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 91 'Hello' broadcast message transmission interval to 5 seconds, spanning tree lifetime to 38 seconds. Show STP configuration: console(config)# spanning-tree console(config)# spanning-tree mode rstp console(config)# spanning-tree priority 12288 console(config)# spanning-tree forward-time 20 console(config)# spanning-tree hello-time 5 console(config)# spanning-tree max-age 38 console(config)# exit console# show spanning-tree MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 92: G.8032V2 (Erps) Protocol Configuration

    The recovery time does not exceed 1 second, it is much lower than network changover time when you use spanningtree protocols. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 93 Set the default value. revertive Select the ring operation mode. -/revertive no revertive Set the default value. sub-ring vlanvlan_id Set the subring for the ring. vlan_id:(1..4094) - vlan_id – VLAN ID number. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 94: Lldp Configuration

    Specify how frequently the device will send LLDP information seconds: (5..32768)/30 updates. seconds no lldp timer Set the default value. lldp hold-multiplier number number: (2..10)/4 Specify the amount of time for the receiver to keep LLDP MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 95 LLDP packet by the device. 802.3-mac-phy, 802.3-lag, You can pass up to 5 optional TLV to the command. 802.3-max-frame-size)/By no lldp optional-tlv Set the default value. default optional TLV are not included in the packet. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 96 Set the default value. topology-change The LLDP packets received through a port group are saved individually by these port groups. LLDP sends different messages to each port of the group. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 97 Set the following TLV fields for the te1/0/10 port: port-description, system-name, system- description. Add the control address 10.10.10.70 for this interface. console(config)# configure console(config)# interface tengigabitethernet 1/0/10 console(config-if)# lldp optional-tlvport-desc sys-name sys-desc console(config-if)# lldp management-address 10.10.10.70 View LLDP configuration: console# show lldp configuration MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 98 Port Device ID Port ID System Name Capabilities --------- ---------------- -------- ---------- ------------- te0/1 0060.704C.73FE ts-7800-2 te0/2 0060.704C.73FD ts-7800-2 te0/3 0060.704C.73FC ts-7900-1 B, R te0/4 0060.704C.73FB ts-7900-2 console# show lldp neighbors tengigabitethernet 1/0/20 MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 99: Oam Protocol Configuration

    Ethernet devices. Both devices must support IEEE 802.3ah standard. Commands of the configuration modes for Ethernet interfaces. Command line prompt in the Ethernet interface configuration mode is as follows: console(config-if)# Table 5.88– List of the commands for Ethernet interface configuration MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 100 Enable the aggressive mode of the uni-directional detection agressive communication detection. If Ethernet OAM messages do not -/disabled come from the adjacent device a link will be tagged as an unidirectional. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 101 GigabitEthernet0/3 gigabitethernet 1/0/3 Local client ------------ Administrative configurations: Mode: active Unidirection: not supported Link monitor: supported Remote loopback: supported MIB retrieval: not supported Mtu size: 1500 Operational status: Port status: operational MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 102: Voice Vlan

    Table 5.90. Global configuration mode commands Command Value/Default value Action voice vlan aging-timeout Set a timeout for the port that belongs to the voice-vlan. If timeout: (1..43200)/1440 timeout there were no frames with OUI of VoIP equipment within a MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 103: Multicast Addressing

    Ethernet ports or port groups. group: (1..16) fortygigabitethernet fo_port | - remove - remove the static subscription to a multicast MAC port-channel group}] address; Interfaces must be separated by “–” and “,”. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 104 - add - add ports to the source IP address group; fo_port: (1..8/0/1..4); fortygigabitethernet fo_port | - remove - remove ports from the group of the source IP group: (1..16) port-channel group} address; no bridge multicast source Restore the default value. ip_address group ip_multicast_address MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 105 (1..8/0/1..4); fortygigabitethernet fo_port | - remove - disable port removal from the source IPv6 address group: (1..16) port-channel group} group; no bridge multicast ipv6 Restore the default value. forbidden source ipv6_address group ipv6_multicast_address MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 106 (0..0xFFFF) sap | llc-snap pid ] {discard | - sap - LLC packet type; pid: (0..0xFFFFFFFFFF) bridge} - pid - LLC-Snap packet type; -discard – drop packets; - bridge - bridge packet transmission mode; MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 107 - ipv6_multicast_address - multicast IPv6 address; {ipv4_source_address | - ip - show by IP addresses; ipv6_source_address}] - mac - show by MAC addresses; - ipv4_source_address - source IPv4 address; - ipv6_source_address - source IPv6 address. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 108: Igmp Snooping Function

    IGMP Snooping is used in multicast networks. The main task of IGMP Snooping is to provide multicast traffic only for those ports that requested it. IGMP Snooping can be used only in a static VLAN group. The following IGMP versions are supported: IGMPv1, IGMPv2, IGMPv3. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 109 Indicated that a multicast router is not connected to the fo_port: (1..8/0/1..4); vlan_id mrouter interface port. group: (1..16). {gigabitethernet gi_port | tengigabitethernet te_port | fortygigabitethernet fo_port | port-channel group} MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 110 (1..7)/robustness count port. variable value no ip igmp Set the default value. last­member­query-count ip igmp Specify the query interval for the last participant. milliseconds MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 111: Mld Snooping Is A Multicast Traffic Control Protocol For Ipv6 Networks

    (config-if)# ip igmp robustness 4 console (config-if)# ip igmp query-max-response-time15 7.2.3 MLD snooping is a multicast traffic control protocol for IPv6 networks. MLD snooping is a multicast-constraining mechanism that minimises the amount of multicast traffic in IPv6 networks. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 112 (1..16). {gigabitethernet gi_port | tengigabitethernet te_port | fortygigabitethernet fo_port | port-channel group} Ipv6 mld snooping vlan vlan_id: (1..4094) Enable MLD Snooping Immediate-Leave process for the vlan_id immediate-leave -/disabled current VLAN. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 113: Multicast-Traffic Restriction

    Show information about the mrouter ports. vlan_id: (1..4094) mrouter [interface vlan_id] 7.2.4 Multicast-traffic restriction Multicast-traffic restriction is used to comfortably configure restriction for viewing the specific multicast groups. Commands of the global configuration mode MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 114 Delete the match of multicast profile (or all multicast profiles) {profille_name|all} to interface. EXEC mode commands All commands are available to the privileged user only. Command line prompt in the EXEC mode is as follows: console# MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 115: Igmp Proxy Multicast Routing Function

    Command line prompt in the VLAN configuration mode is as follows: console(config-if)# Table 5.109. Ethernet interface, VLAN and port group configuration mode commands. Command Value/Default value Action ip igmp-proxy gi_port: (1..8/0/1..48); A configured interface is a downlink interface. This MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 116: Multicast Routing. Pim Protocol

    BSR (bootsrtap router) is a mechanism for gathering information about RP candidates, creating an RP list for each multicast group and sending it with a domain. IPv4 multicast routing configuration. Global configuration mode commands Command line prompt in the global configuration mode is as follows: MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 117 | default} - range - specify a multicast subnetwork; - multicast_subnet - multicast subnetwork; - default - specify a range in 232.0.0.0/8. no ip pim ssm [range Disable this parameter. multicast_subnet | default] MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 118 (1..4094). vlan vlan_id] show ip (ipv6) pim interface gi_port: (1..8/0/1..48); Show information about PIM interfaces: [gigabitethernet gi_port | te_port: (1..8/0/1..24); - state-on - displays all interfaces on which PIM is enabled; MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 119: Control Functions

    (already authorized) in the system.  Accounting - user resource consumption monitoring. The SSH mechanism is used for data encryption. Global configuration mode commands Command line prompt in the global configuration mode is as follows: console(config)# MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 120 In the multiple sessions mode, start/stop messages default. are sent for all users; in the multiple hosts mode — only for authenticated users (see 802.1x Section). no aaa accounting dot1x Set the default value. start-stop group radius MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 121 IP address of the switch. Calling-Station-ID (31) User IP address. Acct-Session-ID (44) Unique accounting identifier. Acct-Authentic (45) Specify the method for client authentication. Show how long the user is connected to the Acct-Session-Time (46) system. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 122 Command line prompt in the EXEC mode is as follows: console> All commands from this section are available to the privileged users only. Table 5.119. EXEC mode commands Command Value/Default value Action show accounting Show information about configured accounting methods. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 123: Radius

    Set the default time in minutes the RADIUS client deadtime: (0..2000)/0 of the switch will not poll unavailable servers. no radius-server deadtime Set the default value. radius-server host vlan_id: (1..4094); Specify a device interface whose IP address will be used as the MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 124 (config)# radius-server timeout 5 console (config)# radius-server retransmit 5 console (config)# radius-server deadtime 10 console (config)# radius-server key secret console (config)# radius-server host 196.168.16.3 auth-port 1645 retransmit 2  Show RADIUS server configuration parameters console# show radius-servers MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 125: Tacacs

    Specify the default authentication and encryption key for TACACS data exchange between the device and TACACS key: (0..128) environment. characters/default key is - encrypted –secret_key value in the encrypted form. an empty string encrypted tacacs-server key MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 126: Simple Network Management Protocol (Snmp)

    -/255.255.255.255; group_name [ipv4_address | command. Specify the objects available to the community. prefix-length: (1..32)/32; ipv6_address | ipv6z_address] - ipv4_address, ipv6_address, ipv6z_address – IP-address of view_name: (1..30) [mask mask | prefix the device; characters; prefix_length] MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 127 1.3.*.2); - include - OID is included in the filtering rule; - exclude - OID is excluded from the filtering rule. no snmp-server filter Remove an SNMP filter rule. filter_name [OID] MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 128 Disable sending SNMP trap messages. ospf snmp-server enable traps ipv6 Enable sending SNMP trap messages of the OSPF protocol ospf (IPv6). -/enabled no snmp-server enable traps Disable sending SNMP trap messages. ipv6 ospf MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 129: Remote Network Monitoring Protocol (Rmon)

    The data collected by RMON describes the traffic between the network nodes. Information collected by the agent is transmitted to the network management application. Global configuration mode commands Command line prompt in the global configuration mode is as follows: console(config)# MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 130 Set the default value. {history | log} Ethernet or port group interface (interface range) configuration mode commands Command line prompt in the Ethernet or port group interface configuration mode is as follows: console(config-if)# MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 131 [index] Show the RMON remote monitoring entry table. index: (0..65535) -index - event index. Examples of command usage  Show statistics of the 10th Ethernet interface: console# show rmon statistics tengigabitethernet 1/0/10 MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 132 The number of packets received (including bad packets), with a length of 1024 to 1024 to 1518 Octets 1518 bytes inclusively (w/o frame bits, but with checksum bits).  Show information on the statistics group for port 8: console# show rmon collection stats tengigabitethernet 1/0/8 MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 133 The number of packets received during the entry generation period, with a length of Oversize Pkts more than 1518 bytes (w/o frame bits, but with checksum bits), but formed correctly in other respects. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 134 Time interval in seconds when data is collected and compared to upper and lower Interval thresholds. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 135 Time and date of the last event generation. If no events has been generated, this Last time sent value will be equal to zero.  Show the RMON remote monitoring entry table. console# show rmon log MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 136: Acl Access Lists For Device Management

    (1..8/0/1..48); - service - access type. [gigabitethernet gi_port | te_port: (1..8/0/1..24); tengigabitethernette_port | fo_port: (1..8/0/1..4); fortygigabitethernet fo_port | group: (1..16); port-channel group | oob | vlan_id(1..4094) vlan vlan_id] [service service] service: (telnet, snmp, MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 137: Access Configuration

    Table 5.140. Global configuration mode commands Value/Default Command Action value ip telnet server Enable remote device configuration via Telnet. Telnet server is enabled by default. no ip telnet server Disable remote device configuration via Telnet. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 138 By default, HTTP- server is disabled Forbid the remote device configuration no ip http server through WEB. ip http port port Set the HTTP server port. 1..65535/80 no ip http port Recover the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 139 Show SSH server configuration and active incoming SSH sessions. show crypto key username: (1..48) Show public SSH keys saved on the switch. pubkey­chain ssh characters - username - remote client name; MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 140 [1 | Show SSL certificates for the HTTPS server. Examples of command usage Enable SSH server on the switch. Enable the use of public keys. Create an RSA key for the eltex user: console# configure console(config)# ip ssh server...

  • Page 141: Alarm Log, Syslog Protocol

    New buffer size value will take effect after the device is size: (20..1000)/200 restarted. no logging buffered size Set the default value. logging file [level] level: (see Table 5.140. Enable transmission of alarm and debug messages with the MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 142 Show log state, alert and debug messages stored in the internal buffer. show syslog-servers Show remote syslog server settings. Example use of commands  Enable error message registration in the console: console# configure console (config)# logging on MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 143: Port Mirroring (Monitoring)

    - rx - copy packets received by the monitored port fo_port: (1..8/0/1..4) - tx - copy packets sent by the monitored port When the rx/tx parameter is not specified, all packets will be copied from the monitored port. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 144: Sflow Function

    Global configuration mode commands MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 145 - id - the number of sflow server (set by the sflow receiver id: (0..8) command in the global configuration mode). no sflow Disable sample counter for the port. counters­sampling EXEC mode commands Command line prompt in the EXEC mode is as follows: console> MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 146: Physical Layer Diagnostics Functions

    Table 5.155. Copper-wire cable diagnostics commands Command Value/Default value Action test cable-diagnostics tdr Perform virtual cable testing for the selected interface. interface gi_port: (1..8/0/1..48); {gigabitethernet gi_port | te_port: (1..8/0/1..24); tengigabitethernet te_port | fo_port: (1..8/0/1..4). fortygigabitethernet fo_port} MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 147: Optical Transceiver Diagnostics

    ----------- ------ ------- ------- ------- ------- --- te1/0/1 3.33 17.0 1.07 0.00 Temp - Internally measured transceiver temperature Voltage - Internally measured supply voltage Current - Measured TX bias current Output Power - Measured TX output power in milliWatts MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 148: Power Supply Via Ethernet (Poe) Lines

    (snmptrap) about threshold crossing is formed. percent: (1..99)/95 no power inline Recovers the default threshold value. usage­threshold power inline traps enable Allow forming the information messages for PoE subsystem. -/disabled no power inline traps Returns the default settings. enable MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 149: Interface Configuration Mode Commands

    Shows parameters of the device PoE-interface power consumption consumption. gi_port: (1..8/0/1..8); [gigabitethernet gi_port| - unit_id – unit number in stack. unit_id : (1..8) unitunit_id] show power inline version Shows controller software version of the PoE subsystem. Command execution examples MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 150 Table 5.162– Parameters of the power supply status Nominal Power Nominal load supplying capacity of the PoE subsystem. ConsumedPower Measured value of the power consumption. UsageThreshold Power consumption threshold at which information message (snmp trap) about threshold crossing is formed. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 151: Security Functions

    Disable security functions on the interface. port security max num Specify the maximum number of addresses that can be learned by the port. num: (1..256)/1 no port security max Set the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 152 1 address. After the MAC address is learned, block the new address learning feature for the interface and drop packets with unknown source MAC address. Save learned address to a file. console# configure MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 153: Port-Based Client Authentication (802.1X Standard)

    Set the default value. dot1x default Ethernet interface configuration mode commands Command line prompt in the Ethernet interface configuration mode is as follows: console(config-if)# EAP (Extensible Authentication Protocol) performs remote client authentication and defines the authentication method. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 154 [gigabitethernet gi_port | in the command or all ports supporting 802.1X. te_port: (1..8/0/1..24); tengigabitethernet te_port | fo_port: (1..8/0/1..4); fortygigabitethernet fo_port | oob] show dot1x interface gi_port: (1..8/0/1..48); Show 802.1X state for the switch or selected MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 155 The period between repeated authentication checks. 802.1X username. If the port is authorized, the current user name is shown. If the Username port is not authorized, the last successfully authorized user name for the port is shown. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 156 The number of EAPOL Resp/Id packets sent by the current authenticator. The number of EAPOL request packets (except for Resp/Id) sent by the current EapolReqFramesTx authenticator. The number of EAPOL packets with unrecognised type received by the current InvalidEapolFramesRx authenticator. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 157 Allow one or multiple clients to be present on an authorized ,multi­host | single-host | 802.1X port. multi-sessions} -/ multi-host - multi-host - multiple clients; - single-host - single host; - multi-sessions – multiple sessions. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 158 VLAN when it is unauthorized and guest VLAN leave the guest VLAN when it passes authorization. To use these functions, the port must not be a static member of the guest VLAN. no dot1x guest-vlan Set the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 159: Dhcp Management And Option 82

    <stacked/slotid/interfaceid>:<vlan> Circuit ID The last byte is the number of the port that the device sending a DHCP request is connected to. Enterprise number – 0089c1 Remote agent ID Device MAC address MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 160 Enterprise number – 0089c1 Remote agent ID Device MAC address Table 5.177. Option 82 field format in custom mode Field Information sent Length (1 byte) Circuit ID type Circuit ID Length (1 byte) VLAN (2 bytes) MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 161 EXEC mode commands Command line prompt in the EXEC mode is as follows: console# Table 5.180. EXEC mode commands Command Value/Default value Action Show DHCP Option 82 usage information. show ip dhcp information option MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 162: Client Ip Address Protection (Ip Source Guard)

    Command line prompt in the global configuration mode is as follows: console(config)# Table 5.181. Global configuration mode commands Command Value/Default value Action ip source-guard The function is disabled by Enable client IP address protection function for the entire default. switch. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 163 (1..8/0/1..48); for the specified interface, IP address, MAC address, and [ip­address ip_address] te_port: (1..8/0/1..24); VLAN group. [vlan vlan_id] fo_port: (1..8/0/1..4); [gigabitethernet gi_port | group: (1..16); tengigabitethernet te_port | vlan_id: (1..4094); fortygigabitethernet fo_port | MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 164: Arp Inspection

    The function is disabled by no ip arp inspection vlan Disable ARP Inspection based on DHCP snooping mapping default. vlan_id database in the selected VLAN group. ip arp inspection validate Enable specific checks for ARP inspection. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 165 Add a static mapping between IP and MAC address. mac_address no ip ip_address Remove a static mapping between IP and MAC address. mac­address mac_address EXEC mode commands Command line prompt in the EXEC mode is as follows: console# MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 166: Dhcp Relay Features

    When the switch receives a response from the server, it sends it to the client. Global configuration mode commands Command line prompt in the global configuration mode is as follows: console(config)# MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 167: Pppoe Intermediate Agent (Pppoeia) Configuration

    It is required for user interface authentication on the access server (BRAS, Broadband Remote Access Server). PPPoEIA function realization provides the additional capabilities to control protocol messages by assigning the proxy interfaces. Global configuration mode commands MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 168 Assigning the remote-id identifier added by switch. format-type remote-idremote_id remote_id: (1..63) Identifier must be configured on all the switch’s interfaces characters /switch MAC where PPPoE IA operates. address. no pppoe intermediate­agent Recovery the default setting. format-type remote-id MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 169 The function can be used only on the interface where PPPoE IA operation is permitted and on the trusted -/disabled interface. Usually, deletion function is configured on the interface addressed to the PPPoE server side. nopppoe intermediate­agent Disable the delete mode. vendor-tag strip MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 170: Dhcp Server Configuration

    Table 5.195. Global configuration mode commands Command Value/Default value Action ip dhcp server Enable the DHCP server function for the switch. -/disabled no ip dhcp server Disable the DHCP server function for the switch. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 171 - days - the number of days; -/1 day - hours - the number of hours; - minutes - the number of minutes. no lease Set the default value. DHCP server pool and DHCP server static addresses configuration mode commands MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 172 - ip_address_list - the list of IP addresses; characters; - hex_string - a hex string; desc: (1..160) characters. no option code Remove DHCP server options. Privileged EXEC mode commands Command line prompt in the Privileged EXEC mode is as follows: console# MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 173: Acl Configuration

    The ACL creation and modification commands are available in the global configuration mode. Global configuration mode commands Command line prompt in the global configuration mode is as follows: console (config)# MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 174: Ipv4-Based Acl Configuration

    Privileged EXEC mode commands Command line in the Privileged EXEC mode appears as follows: console# Table 5.202. ACL display commands Command Value/Default value Action show access-lists [access_list] access_list: (0..32) Display ACLs created on the switch. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 175 (0–255). To match all protocols, specify the value ip. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 176 Disable the port when receiving a packet from it that satisfies Disable a port the conditions of a deny command that describes that field. log_input Enable message log registration when a packet corresponding Message log to the entry is received. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 177: Ipv6 Acl Configuration

    {any | icmp_type} {any | icmp_code} specified, the physical interface receiving the packet will be disabled. If [dscp dscp | precedence precedence] the log-input keyword is specified, a message will be sent to the system *time­range time_name] log. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 178 Specify the value of the diffserv DSCP field. Possible message header codes for the dscp field: (0 – 63). precedence IP priority Specify the priority of IP traffic: (0 - 7). time_name Name of the time-range Specify configuration of time periods. configuration profile MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 179: Mac-Based Acl Configuration

    Add a permit filtering entry for the TCP. The packets that meet the entry's {any | source_port} conditions will be processed by the switch. {any | destination_prefix/length} {any | destination_port} [dscp dscp | precedence precedence] [time­range time_name] MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 180 The mask specifies the bits of the MAC address which should source MAC address of the be ignored. “1” indicates an ignored bit. For example, the packet. mask can be used to specify an MAC address range that will be MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 181: Dos Attack Protection Configuration

    DoS attack protection configuration 11.4 This type of commands is used to block certain common types of DoS attacks. Global configuration mode commands Command line prompt in the global configuration mode is as follows: console (config)# MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 182: Quality Of Services (Qos)

    8 queues by packet priority depending on the type of transferred data. 11.5.1 QoS Configuration Global configuration mode commands Command line prompt in the global configuration mode is as follows: console(config)# MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 183 CoS = 7 - queue 8 wrr-queue bandwidth Specify the transmit queue weights used in the WRR weight: (0..255)/1 weight1..weight8 (Weighted Round Robin) mechanism. The default weight of any queue is 1. no wrr-queue bandwidth Set the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 184 - out-dscp - define up to 8 DSCP values separated by spaces. values remain the same for Applicable for the qos basic mode only. all ingress packets. no qos map dscp-mutation Set the default values. [in_dscp] MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 185 Command Value/Default value Action trust Defines the trusted mode for a certain type of traffic as per By default, the trusted global trusted mode. mode is not set. no trust Set the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 186 Set CoS as the default value for a port to (the CoS value that is used for all untagged traffic on the interface). default_cos: (0..7)/0 no qos cos Set the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 187 12 to 1 console(config)# qos map dscp-queue 16 to 2 console(config)# priority-queue out num-of-queues 1 console(config)# policy-map traffic console(config-pmap)# class class1 access-group tcp_ena console(config-pmap-c)# police1000 200000 exceed-actiondrop console(config-pmap-c)# exit console(config-pmap)# exit MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 188: Qos Statistics

    EXEC mode commands Command line prompt in the EXEC mode is as follows: console# Table 5.220. EXEC mode commands. Command Value/Default value Action clear qos statistics Clear QoS statistics. show qos statistics Display QoS statistics. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 189: Routing Protocol Configuration

    Table 5.223. Description of command result Field Description Display a route origin: C - Connected (the route is taken from directly connected and running interface), S – Static (static route specified in the routing table). MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 190: Rip Configuration

    (internal, external1, - route_map_name - announce routes after they are filtered route_map_name] external-2); by the specified route-map; route_map_name: (1..32) characters shutdown Disable routing via RIP. -/enabled no shutdown Enable routing via RIP. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 191 [database | View information about RIP routing: statistics | peers] - database – information about RIP settings; - statistics – statistics; - peers – information of a network member. Example use of commands MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 192: Ospf And Ospfv3 Configuration

    - name - the name of the import policy that allows filtering and changes in imported routes; metric: (1..65535); - subnets - allows you to import subnetworks. name: (1..255) characters no redistribute connected Disable a specific function [metric metric] [route-map name] [subnets] MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 193 ID. A.B.C.D: router ID in the - no-summary - do not send information about external IPv4 address format summary routes. no area A.B.C.D stub Set the default value. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 194 A.B.C.D shutdown Enable an OSPF process for an area. -/enabled shutdown Disable an OSPF process. -/enabled no shutdown Enable an OSPF process. IP interface configuration mode commands Command line prompt is as follows: console(config-ip)# MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 195 Enable routing via OSPFv3 protocol on the interface. ipv6 ospf process area area process: (1..65536); Enable (disable) an OSPF process for a specific area. [shutdown] area: router ID in the IPv4 address format MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 196: Configuration Of Virtual Router Redundancy Protocol (Vrrp)

    Display the status of an OSPF protocol database. [process_id] database process_id: (1..65535) [router | summary | as­summary+ show {ip | ipv6} ospf Display parameters and the current status of virtual links: process_id: (1..65535) virtual­links *process_id] MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 197 VRRP Version 2 and to closest hundredths milliseconds: (50..40950); second (10 milliseconds) for VRRP Version 3. By default: 1 sec no vrrp vrid timers Set the default value. advertise [msec] MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 198 Virtual Router name Supported version VRRPv3 State is Initializing Virtual IP addresses are 10.10.10.1(down) Source IP address is 0.0.0.0(default) Virtual MAC address is 00:00:5e:00:01:01 Advertisement interval is 1.000 sec Preemption enabled Priority is 255 MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 199: Service Menu, Change Of Firmware

    The device loads from the system firmware file which is stored in the flash memory. During the update a new firmware file is saved in an allocated area of memory. When booting up, the device launches an active system firmware file. MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 200 Time: 17:17:31 Inactive-image: flash://system/images/_mes5324-401.ros Version: 4.0.1 MD5 Digest: b66fd2211e4ff7790308bafa45d92572 Date: 26-Feb-2016 Time: 11:08:56 console# reload This command will reset the whole system and disconnect your current session. Do you want to continue (y/n) [n]? MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 201 Confirm reboot by entering “ ”. MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 202: Appendix A. Example Of Device Usage And Configuration

    1 console(config-if)# ip address 192.168.16.1 /24 console(config-if)# exit console(config)# spanning-tree mode mst console(config)# interface range TengigabitEthernet 1/0/1-2 console(config-if)# switchport mode trunk console(config-if)# switchport trunk allowed vlan add 10,20,30,40,50,60 console(config-if)# exit MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 203 1/0/1 switchport mode trunk switchport trunk allowed vlan add 100-102,200-202 selective-qinq list egress override_vlan 100 ingress_vlan 200 selective-qinq list egress override_vlan 101 ingress_vlan 201 selective-qinq list egress override_vlan 102 ingress_vlan 202 exit MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 204 102 console(config)# ip igmp snooping vlan 103 … console(config)# ip igmp snooping vlan124 6. Configure a control interface: console(config)# interface vlan 1200 console(config-if)# ip address 192.168.33.100 255.255.255.0 console(config-if)# exit MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 205 5 multicast-tv vlan 1000 console(config)# ip igmp snooping map cpe vlan 6 multicast-tv vlan 1001 6. Configure a control interface: console(config)# interface vlan 1200 console(config-if)# ip address 192.168.33.100 255.255.255.0 console(config-if)# exit MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 206: Appendix B. Console Cable

    APPENDIX B. CONSOLE CABLE Figure 26. Console cable connection MES53xx, MES33xx, MES23xx Ethernet Switch Series...

  • Page 207: Appendix C. Supported Ethertype Values

    0x88c7 0x88db 0x88ef 0x8804 0x8819 0x882E 0x8841 0x0800 0x8895 0x88c8 0x88dc 0x88f0 0x8805 0x881a 0x882F 0x8842 0x8086 0x8896 0x88c9 0x88dd 0x88f1 0x8806 0x881b 0x8830 0x8844 0x8100 0x889b 0x88ca 0x88de 0x88f2 0x8807 0x881c 0x8831 0x8846 MES53xx, MES33xx, MES23xx Ethernet Switch Series...
  • Page 208 +7(383) 274-47-87 +7(383) 272-83-31 E-mail: techsupp@eltex.nsk.ru Visit the Eltex Ltd. website to find technical documentation and firmware for our products, review our knowledge base and consult Service centre engineers on the technical forum: Official web-site: http://eltex.nsk.ru Technical forum: http://eltex.nsk.ru/forum Knowledge base: http://eltex.nsk.ru/support/knowledge Download centre: http://eltex.nsk.ru/support/downloads...

This manual is also suitable for:

Mes33xxMes23xx

Table of Contents

Save PDF