EtherWAN EX73900 Series User Manual

EtherWAN EX73900 Series User Manual

Hardened managed switch
Hide thumbs Also See for EX73900 Series:
Table of Contents

Advertisement

Quick Links

EtherWAN EX73900 Series Hardened Managed Switch
FastFind Links
User's Guide
Unpacking and Installation
Computer Setup
Setting the initial IP address

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the EX73900 Series and is the answer not in the manual?

Questions and answers

Summary of Contents for EtherWAN EX73900 Series

  • Page 1 EtherWAN EX73900 Series Hardened Managed Switch FastFind Links User’s Guide Unpacking and Installation Computer Setup Setting the initial IP address...
  • Page 2 Disclaimer of Liability The information contained in this document is subject to change without notice. EtherWAN is not liable for any errors or omissions contained herein or for resulting damage in connection with the information provided in this manual.
  • Page 3: Table Of Contents

    Save Configuration Page using the CLI ..............29 Firmware Upgrade ....................31 Firmware Update using the CLI ................32 Booting From Alternate (Backup) Firmware ............. 33 Reboot ........................33 Reboot using the CLI ....................33 EX73900 Series Managed Switch Users Guide...
  • Page 4 Trunking Configuration Examples Using CLI Commands ......... 71 STP/Ring Page – Overview ................... 73 Choosing the Spanning Tree Protocols ..............73 STP/Ring Page - Configuring RSTP ................ 74 Global Configuration Page ..................74 RSTP Port Setting Page ..................79 EX73900 Series Managed Switch Users Guide...
  • Page 5 ACL Policy Map ..................... 128 ACL Configuration Examples Using CLI Commands ..........143 SNMP ........................151 SNMP General Settings ..................152 Configuring SNMP v1 & v2 Community Groups ............. 155 Configuring SNMP v3 Users .................. 155 EX73900 Series Managed Switch Users Guide...
  • Page 6 Static Routing with CLI Commands ............... 179 RIP ......................... 181 RIP Configuration with CLI Commands ..............186 Other Protocols....................189 GVRP ........................189 IGMP Snooping ..................... 194 Network Time Protocol ..................208 GMRP ........................214 DHCP Server ......................220 EX73900 Series Managed Switch Users Guide...
  • Page 7: Preface

    Indicates a variable, which is a placeholder for actual text provided by the user or system. Italic font is also used to brackets indicate variables. [ ] square Indicates optional values. brackets | vertical bar Indicates that you have a choice between two or more options or arguments. EX73900 Series Managed Switch Users Guide...
  • Page 8: Unpacking And Installation

     Console cable (depending on model) Unpacking Follow these steps to unpack the EX73900 Series Managed Switch and prepare it for operation: 1. Open the carton and carefully remove the contents. 2. Return all packing materials to the carton. If possible, save the carton and packing...
  • Page 9: Connecting Power

    7/8/8.1/10. It is possible to use Apple OSX or Linux systems as well, but, for the sake of brevity, all web configurations in this manual will be shown using Windows 7 as the underlying operating system.  Cat 5+ Ethernet Cables EX73900 Series Managed Switch Users Guide...
  • Page 10 The end user can employ any of the following web browsers during switch configuration: Internet Explorer, Firefox, or Chrome. Internet Explorer is the preferred browser for EtherWAN switch configuration. If there is trouble with other browsers while attempting to program the switch, Internet Explorer should be used.
  • Page 11: Computer Setup

    HTTPS (Hypertext Transfer Protocol) HTTP with encryption.  RS-232 – The EX73900 Series Managed Switch is equipped with a RS-232 serial port that can be used to access the switch’s CLI. The Serial port is DC-E DB-9F. A straight through serial cable is used to connect to a typical computer serial port (Also requires terminal emulation application).
  • Page 12: Default Ip Address

    Once logged in the user can now configure the switch per the network requirements. The two major addressing options are:  Simple IP addressing  Multiple VLAN addressing (See Add an IP to the Management VLAN on page 115). EX73900 Series Managed Switch Users Guide...
  • Page 13: Simple Ip Addressing

    Figure 2: Assigning an IP address CLI COMMAND USAGE This chapter describes accessing the EX73900 Series Managed Switch by using Telnet, SSH, or serial ports to configure the switch, navigating the Command Line Interface (CLI), typing keyboard shortcuts, and moving between the levels. This chapter assumes the user has a working understanding of Telnet, SSH and Terminal emulation applications.
  • Page 14: Navigating The Cli Hierarchy

    Ctrl + k: delete from the current position to the end of the line Ctrl + l: redraw the command line Ctrl + n: display the next line in the history Ctrl + p: display the previous line in the history EX73900 Series Managed Switch Users Guide...
  • Page 15: System Menu (Web Interface)

    The Dynamic Name Server (DNS) for your network  Alternate Firmware o This shows the firmware version mirrored on the switch. If the switch becomes unbootable from the primary firmware image, it will boot to this version on the next boot. EX73900 Series Managed Switch Users Guide...
  • Page 16: System Name/Password

    To change the system name: 1. Click on the + next to System. 2. Click on System Name/Password (see Figure 4). 3. Use your mouse to place the cursor in the System Name text box. EX73900 Series Managed Switch Users Guide...
  • Page 17: System Name/Password Using The Cli

    System Name/Password using the CLI For more information on CLI command usage see CLI Command Usage. System Name To set the system name on a switch, use the following CLI commands: CLI Command Mode: Global Configuration Mode EX73900 Series Managed Switch Users Guide...
  • Page 18: Ip Address

    DHCP server will be displayed. The default gateway setting can be used when using a Static IP address. To enable the default gateway: EX73900 Series Managed Switch Users Guide...
  • Page 19 2. Type in the default gateway in the Default Gateway text box. 3. Click on the Submit button. Note: After making changes to settings in the IP address section, the configuration needs to be saved using the System/Save configuration page (See Save Configuration) EX73900 Series Managed Switch Users Guide...
  • Page 20: Ip Address - Configuration Using The Cli

    IP Address - Configuration using the CLI For more information on CLI command usage see CLI Command Usage. IP Address To set the IP address, use the following CLI commands: CLI Command Mode: Global Configuration Mode EX73900 Series Managed Switch Users Guide...
  • Page 21 CLI Command Mode: Global Configuration Mode CLI Command Syntax: ip default-gateway <A.B.C.D> no ip default gateway Usage Example 1: Setting the default gateway to 192.168.1.254 switch_a(config)#ip default-gateway 192.168.1.254 switch_a(config)#q switch_a#write memory Building configuration..[OK] EX73900 Series Managed Switch Users Guide...
  • Page 22 To enable the DHCP client on a VLAN, use the following CLI commands: CLI Command Mode: Interface Configuration Mode CLI Command Syntax: get ip dhcp enable no get ip dhcp enable Usage Example – Enable DHCP Client on VLAN2: switch_a(config)#interface vlan1.2 EX73900 Series Managed Switch Users Guide...
  • Page 23: Management Interface

    Building configuration..[OK] Management Interface To navigate to the Management Interface page: 1. Click on the + next to System 2. Click on Management Interface EX73900 Series Managed Switch Users Guide...
  • Page 24 EX73900 Series Managed Switch. HTTPS HTTPS (Hypertext Transfer Protocol Secure) allows the user to determine what method, if any, is used to configure the EX73900 Series Managed Switch. The default is unencrypted HTTP (see Figure 6). To disable the Web interface: 1.
  • Page 25: Management Interface Configuration Using The Cli

    Management Interface Configuration using the CLI For more information on CLI command usage see CLI Command Usage. Enabling/Disabling Telnet To enable or disable telnet, use the following CLI commands: CLI Command Mode: Global Configuration Mode EX73900 Series Managed Switch Users Guide...
  • Page 26 Enabling/Disabling HTTP and/or HTTPS To enable or disable HTTP or HTTPS, use the following CLI commands: CLI Command Mode: Global Configuration Mode CLI Command Syntax: ip http server ip http secure-server EX73900 Series Managed Switch Users Guide...
  • Page 27: Save Configuration Page

    TFTP server such as TFTPD32. To back up a configuration: 1. Enter the IP address of your TFTP server in the TFTP Server text box 2. Enter the name of the configuration file in the FILE text box EX73900 Series Managed Switch Users Guide...
  • Page 28: Restore Default

    1. Click the dropdown box next to Auto Save. 2. Set the Auto Save interval (5~65535 sec) Note: If a Firewall is running on the PC that is running the TFTP server it may need to be temporarily disabled. EX73900 Series Managed Switch Users Guide...
  • Page 29: Save Configuration Page Using The Cli

    Usage Example: Saving a Configuration switch_a#write memory Building configuration..[OK] Restore Default Settings To restore the switch to its default settings, use the following CLI commands: CLI Command Mode: Global Configuration Mode CLI Command Syntax: restore default EX73900 Series Managed Switch Users Guide...
  • Page 30 CLI Command Mode: Global Configuration Mode CLI Command Syntax: service auto-config enable no service auto-config enable service auto-config interval <number> Usage Example 1: Enabling Auto Save with interval of 10 seconds switch_a(config)#service auto-config enable EX73900 Series Managed Switch Users Guide...
  • Page 31: Firmware Upgrade

    .TGZ or .IMG format. This is a compressed file; however, it should not be decompressed before updating the switch. To update the firmware on the EX73900 Series Managed Switch (see Figure 8): 1. Copy the firmware file to the correct directory for your TFTP server. The correct directory depends on your TFTP server settings 2.
  • Page 32: Firmware Update Using The Cli

    Usage Example: Loading new firmware from TFTP server on 192.168.1.100, where filename is file_name.tgz switch_a#install image 192.168.1.100 flash.tgz Note: Depending on the firmware being loaded, the extension may not be .tgz. The Switch does not use the extension to validate firmware. EX73900 Series Managed Switch Users Guide...
  • Page 33: Booting From Alternate (Backup) Firmware

    To navigate to the Reboot page: 1. Click on the + next to System 2. Click on Reboot To reboot the EX73900 Series Managed Switch: 1. Click on the Reboot button. 2. Click OK on the popup message. Reboot using the CLI For more information on CLI command usage see CLI Command Usage.
  • Page 34: Logout

    To logout of the Web Configuration Console: 1. Click on the + next to System 2. Click on Logout Logout from the CLI CLI Command Mode: User Exec Mode or Privileged Exec Mode CLI Command Syntax: logout EX73900 Series Managed Switch Users Guide...
  • Page 35: Diagnostics

    To navigate to the System Log page: 1. Click on the + next to Diagnostics. 2. Click on System Log. The System Log shows the data and time of port links going up or down (see Figure 10) EX73900 Series Managed Switch Users Guide...
  • Page 36: System Log Using Cli Command

    Syslog servers to report to (see Figure 11). To configure the Remote Logging on the EX73900 Series Managed Switch: 1. Click on the Enable or Disable radio button under Remote Logging.
  • Page 37 To delete a Syslog server from the list of servers currently on the switch: 1. Select the Syslog server from the Drop down box 2. Click on the Delete Syslog Server button Figure 11: Remote Logging Page EX73900 Series Managed Switch Users Guide...
  • Page 38: Remote Logging Using Cli Commands

    The ARP Table page shows ARP (Address Resolution Protocol) entries that are stored in the Switches ARP Table. This is useful for troubleshooting purposes. The information shown  IP Address of the listed device  Hardware Type – For Ethernet devices this will always be 1. EX73900 Series Managed Switch Users Guide...
  • Page 39: Arp Table Using Cli Commands

    ARP Table using CLI Commands CLI Command Mode: Global Configuration Mode CLI Command Syntax: show arp-table Route Table To navigate to the Route Table page: 1. Click on the + next to Diagnostics. 2. Click on Route Table. EX73900 Series Managed Switch Users Guide...
  • Page 40: Route Table Using Cli Commands

    Figure 13: Route Table Route Table Using CLI Commands CLI Command Mode: Privileged Exec Mode CLI Command Syntax: show route-table Usage Example: switch_a#show route-table Destination Gateway Genmask Flags Metric Ref VLAN 10.58.7.0 0.0.0.0 255.255.255.0 EX73900 Series Managed Switch Users Guide...
  • Page 41: Alarm Setting

    To configure an Ethernet port or Power input alarm: 1. Select an Ethernet port or Power input from the dropdown box (see Figure 14). Figure 14: Alarm Trigger EX73900 Series Managed Switch Users Guide...
  • Page 42 Dying Gasp Using CLI Commands Show current primary and secondary Dying Gasp settings CLI Command Mode: Privileged Exec Mode CLI Command Syntax: show dying-gasp status Set primary and secondary Dying Gasp messages CLI Command Mode: Global Configuration Mode EX73900 Series Managed Switch Users Guide...
  • Page 43: Port

     Flow Control – State of Flow Control for the Port. To provide a description to a port on the EX73900 Series Managed Switch: 1. Click in the Description text box for the appropriate port. 2. Type in the description of the port.
  • Page 44 Down. 2. Click on the Submit button. To set the Port Speed and/or Port Duplex Settings on the EX73900 Series Managed Switch: 1. Click on the drop-down box under Speed and select the desired port speed / duplex settings for that port. Please note, not all port types will have the same options. For...
  • Page 45: Port Status

    Port Type – Indicates switch or router port  Admin Setting – Administratively State of the Port.  Speed – Speed and Duplex Settings for Port.  Flow Control – State of Flow Control for the Port. Figure 18: Port Status EX73900 Series Managed Switch Users Guide...
  • Page 46: Rate Control

    The Rate Control page is shown below (see Figure 19): To provide either an ingress or egress rate control for a port on the EX73900 Series Managed Switch: 1. Click in the Ingress or Egress Text Box for the appropriate port.
  • Page 47: Rmon Statistics

    (see Figure 20). To view the RMON statistics for a particular port on the EX73900 Series Managed Switch: 1. Click on the link to the port at the top of the RMON Statistics page.
  • Page 48: Per Port Vlan Activities

    This is a read-only page that will allow the user to see what devices are connected to a particular port and the vlan associated with that device and port. To clear the MAC addresses for a particular port on the EX73900 Series Managed Switch (see Figure 21): 1.
  • Page 49: Port Configuration Examples Using Cli Commands

    To provide a description of a port use the CLI commands below: CLI Command Mode: Interface Configuration Mode CLI Command Syntax: description <description text> Usage Example: switch_a(config-if)#description A_Port_Description Enable or Disable a Port To administratively enable or disable a port use the CLI commands below: EX73900 Series Managed Switch Users Guide...
  • Page 50 Usage Example: switch_a(config-if)#flowcontrol on Display Port Status To display the port status for a port use the CLI commands below: CLI Command Mode: Privileged Exec Mode CLI Command Syntax: show interface <ifname> Usage Example: EX73900 Series Managed Switch Users Guide...
  • Page 51: Switching

    To display a port’s VLAN activities use the CLI commands below: CLI Command Mode: Privileged Exec Mode CLI Command Syntax: show bridge interface <interface name> Usage Example: switch_a#show bridge interface fe1 SWITCHING Bridging To navigate to the Bridging page: EX73900 Series Managed Switch Users Guide...
  • Page 52 Type allows users to determine the type of storm control to be used by the switch. To set the Storm Control Enabled Type: 1. Select the check box next to Broadcast and/or DFL-Multicast for the port that needs to be changed 2. Click on the Update Setting button. EX73900 Series Managed Switch Users Guide...
  • Page 53: Loopback Detect

    1. Click on the + next to Switching. 2. Click on Loopback Detect. Loopback Detection (Global) To globally enable the Loopback Detect feature of the EX73900 Series Managed Switch (see Figure 23): 1. Click on the Loopback Detect drop-down box.
  • Page 54: Polling Interval

    Figure 23: Loopback Detection Loopback Detection (Per Port) To enable Loopback Detection for a particular port or ports on the EX73900 Series Managed Switch (see Figure 24): 1. Select the value Enable from the Mode drop down list for a port on the Loopback Detect page.
  • Page 55: Storm Detect

    3. Set the Storm-Detect errdisable-recovery time to value between 0 and 65535 seconds. The Default is 0 (disabled). This value determines if the switch should re- enable the port after the specified value or leave the port disabled. EX73900 Series Managed Switch Users Guide...
  • Page 56: Static Mac Entry

    Static MAC Entry Occasionally, it may be useful to specify a MAC address on a particular port and VLAN rather than adjusting the ageing time for the entire switch. Alternatively, it is also possible EX73900 Series Managed Switch Users Guide...
  • Page 57 To remove a static MAC entry for a particular port (see Figure 28): 1. For a particular port, select the MAC address to be deleted from the Delete MAC Address drop down box. 2. Click on the Submit button. EX73900 Series Managed Switch Users Guide...
  • Page 58 To remove a MAC address from the Static-MAC-Entry Discard table (see Figure 30): 1. From the drop down box underneath Delete MAC Address, select the MAC address to be deleted. 2. Click on the Submit button. EX73900 Series Managed Switch Users Guide...
  • Page 59: Port Mirroring

    1. Click on the + next to Switching. 2. Click on Port Mirroring. To configure port mirroring for a port or ports on the EX73900 Series Managed Switch (see Figure 31): 1. Select the port or ports that traffic is to be mirrored from under the Mirror From column.
  • Page 60: Link State Tracking

    Figure 31: Port Mirroring To disable port mirroring for a port or ports on the EX73900 Series Managed Switch (see Figure 32): 1. Under the Current Settings section, the current port mirroring configuration should be displayed. 2. Click on the Delete button.
  • Page 61: Port Settings

    Figure 33: Link State Tracking Port Settings To configure individual ports for a Link State group on the EX73900 Series Managed Switch (see Figure 34): 1. Under Port Setting, select the Link State Group that the port will belong to from the Group drop down box 2.
  • Page 62: Switch Configuration Examples Using Cli Commands

    Figure 34: Link State Tracking – Port Settings Switch Configuration Examples Using CLI Commands Setting the Ageing Time Value To update the Ageing Time value on the EX73900 Series Managed Switch, use the CLI commands below: CLI Command Mode: Global Configuration Mode...
  • Page 63 Usage Example: switch_a(config)#bridge 1 loopback-detect enable Setting the Loopback Detect Action To set the action for Loopback Detect on the EX73900 Series Managed Switch, use the CLI commands below: CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 loopback-detect action <err-disable | none>...
  • Page 64 Usage Example: switch_a(config)#bridge 1 loopback-detect interval 5 Enabling Loopback Detect (Port) To enable Loopback Detection on a port on the EX73900 Series Managed Switch, use the CLI commands below: CLI Command Mode: Interface Configuration Mode CLI Command Syntax: loopback-detect enable...
  • Page 65 CLI Command Mode: Interface Configuration Mode CLI Command Syntax: storm-detect (bc | mc-bc) pps <0-100000> bc = broadcast only mc-bc = count broadcast & multicast packets together. Default: 0 (Disabled) Usage Example 1 – Enabling Multicast + Broadcast: EX73900 Series Managed Switch Users Guide...
  • Page 66 CLI Command Syntax: no storm-detect port enable Adding a MAC Address for Static-MAC-Entry Forwarding To add a MAC address for Static-MAC-Entry Forwarding for a port on the EX73900 Series Managed Switch, use the CLI commands below: CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 address <mac address>...
  • Page 67: Configuring Port Mirroring

    Usage Example: switch_a(config)# bridge 1 address 00e0.abcd.1245 discard vlan 1 Configuring Port Mirroring To configure a port for Port Mirroring on the EX73900 Series Managed Switch, use the CLI commands below: CLI Command Mode: Interface Configuration Mode CLI Command Syntax: mirror interface <interface> direction <both | tx | rx>...
  • Page 68: Trunking

    LACP packets to the peer (directly connected device that also implements LACP). This means that both sides of the LACP channel must be configured for LACP which implies both devices must support it. LACP also has a couple of very important advantages over static channel: EX73900 Series Managed Switch Users Guide...
  • Page 69: Port Trunking

    2. Click on the corresponding checkbox for each desired port to be included in the Trunk Group. A maximum of eight ports can be assigned to each trunk group. 3. Click on the Submit button. EX73900 Series Managed Switch Users Guide...
  • Page 70: Lacp Trunking

    8. Repeat steps 1-7 for each additional port that is to be used in the trunk. To set the LACP System Priority 1. Enter a value between 1 and 65535. The default value is 32768. EX73900 Series Managed Switch Users Guide...
  • Page 71: Trunking Configuration Examples Using Cli Commands

    Adding an Interface to a Static Trunk To add an interface to a static trunk, use the CLI commands below: CLI Command Mode: Interface Configuration Mode CLI Command Syntax: static-channel-group <static channel> (1-6 for 100Mbps, 7-8 for 1Gbps ports) EX73900 Series Managed Switch Users Guide...
  • Page 72 Usage Example: switch_a(config-if)#static-channel-group 1 Adding an Interface to a LACP Trunk To add an interface to a LACP trunk on the EX73900 Series Managed Switch, use the CLI commands below: CLI Command Mode: Interface Configuration Mode CLI Command Syntax: channel-group <LACP Channel> mode <active | passive>...
  • Page 73: Stp/Ring Page - Overview

    Regions. Each region runs its own instance of the Spanning Tree Protocol. Within each Region, the MSTP protocol can accommodate a network diameter of up to 40 switches. There can be a maximum of 40 Regions in a single MSTP network. EX73900 Series Managed Switch Users Guide...
  • Page 74: Stp/Ring Page - Configuring Rstp

    Configuration BPDU, used by Spanning Tree Protocol to provide information to all switches.  TCN (Topology change), tells about changes in the topology.  TCA (Topology change Acknowledgment), confirm the reception of the TCN. EX73900 Series Managed Switch Users Guide...
  • Page 75 Bridge Priority will be the Backup Root Bridge. If all switches have the same Bridge Priority, then The 12 bit System ID or MAC Address (if the system ID’s are the same) will be used to determine the Root and Backup Root Bridge (See below). EX73900 Series Managed Switch Users Guide...
  • Page 76 Root Switch. To set a Backup Root Bridge set the Bridge ID to be between the Root Bridge and the rest of the network switches. EX73900 Series Managed Switch Users Guide...
  • Page 77 Max Age parameter is used as a hop count limit on how far the Spanning Tree protocol packet can propagate throughout the network topology, therefore, it must be configured with a value that is greater than the network diameter. Relationship between Max Age, Forward Delay and Hello Time EX73900 Series Managed Switch Users Guide...
  • Page 78 3. Enter the Forward Delay in the text box to the right of the Forward Delay (4..30 sec) label. 4. Click on the Update Setting button. 5. Save the configuration (see the Save Configuration Page) Figure 40: Max Age, Hello Timer & Forward Delay EX73900 Series Managed Switch Users Guide...
  • Page 79: Rstp Port Setting Page

    In a stable RSTP topology, each port on a switch can function in any one of 4 different Spanning Tree port roles. These Spanning Tree port roles are (see Figure 41):  Root Port  Designated Port  Alternate Port  Backup Port Figure 41: Spanning Tree Port Roles EX73900 Series Managed Switch Users Guide...
  • Page 80 The default values will work fine in most scenarios; however, there are times when you may need to adjust these values manually in order to influence the location of the Alternate Port, the Root Port or the Backup Port. EX73900 Series Managed Switch Users Guide...
  • Page 81 By enabling the Edge Port feature on a port, the switch will stop reacting to any linkup event on this port, and will not send out any Topology Change notification to the neighbor bridges. EX73900 Series Managed Switch Users Guide...
  • Page 82: Rstp Configuration Examples Using Cli Commands

    1 max-age 20 switch_a(config)#bridge 1 forward-time 15 switch_a(config)#bridge 1 hello-time 2 Modifying the Port Priority and Path Cost To modify the Port Priority and Path Cost on a switch, use the below CLI commands: EX73900 Series Managed Switch Users Guide...
  • Page 83 CLI Command Mode: Interface Configuration Mode CLI Command Syntax: spanning-tree edgeport no spanning-tree edgeport Usage Example 1: Enabling edge port on port 1: switch_a(config-if)#spanning-tree edgeport Usage Example 2: Disabling edge port on port 1: switch_a(config-if)#no spanning-tree edgeport EX73900 Series Managed Switch Users Guide...
  • Page 84: Stp/Ring Page - Configuring Mstp

    4. Choose MSTP in the STP Version drop down list. 5. Click on the Update Setting button. 6. Save the configuration (see the Save Configuration Page). Figure 44: Enabling MSTP on STP/Ring Global Configuration Page EX73900 Series Managed Switch Users Guide...
  • Page 85 Root Switch. To set a Backup Root Bridge set the Bridge ID to be between the Root Bridge and the rest of the network switches. EX73900 Series Managed Switch Users Guide...
  • Page 86 Setting the MAX Age, Forward Delay and Hello Timer Navigate to the STP/Ring Global Configuration page: 1. Click on the + next to STP/Ring. 2. Click on Global Configuration. Relationship between Max Age, Forward Delay and Hello Time EX73900 Series Managed Switch Users Guide...
  • Page 87 3. Enter the Forward Delay in the text box to the right of the Forward Delay (4..30 sec) label. 4. Click on the Update Setting button. 5. Save the configuration (see the Save Configuration Page) Figure 47: Max Age, Hello Timer & Forward Delay EX73900 Series Managed Switch Users Guide...
  • Page 88: Mstp Properties Page

    Name entry field, 2. Enter the Revision Level value for the corresponding Region in the Revision Level entry field. 3. Click on the Update Setting button. 4. Save the configuration (see the Save Configuration Page) EX73900 Series Managed Switch Users Guide...
  • Page 89 Follow the steps below to configure the Max Hops parameter: 1. Enter the desired hop count in the entry field next to Max Hops 2. Click on the Update Setting button (see below). 3. Save the configuration (see the Save Configuration Page) EX73900 Series Managed Switch Users Guide...
  • Page 90: Mstp Instance Setting Page

    Note: You can enter a new instance number here, which is how a new MSTI instance is created. You can use an existing MSTI instance if it has already been created on another switch. EX73900 Series Managed Switch Users Guide...
  • Page 91 To set the bridge priority on the switch for a specific MSTI Instance (see Figure 52): 1. Choose the particular instance in the Instance ID drop down list for which the switch will be a MSTI Regional Root Bridge; EX73900 Series Managed Switch Users Guide...
  • Page 92: Mstp Port Setting Page

    Modify the Port Cost adjusts the location of the blocking port in a MSTP loop. To modify the Port Priority and the Path Cost of the ports on a MSTP switch for the MSTI instance only, please follow the below steps: EX73900 Series Managed Switch Users Guide...
  • Page 93 If changes have been made to the port membership of a VLAN, you must also reconfigure the MSTP port membership for the MSTP instance that the VLAN maps to. To reconfigure the MSTP instance port membership: 1. Click on the Port Instance Configuration button (see Figure 54) EX73900 Series Managed Switch Users Guide...
  • Page 94 3. Check the box next to all the ports that should be part of this instance 4. Click on the Update Setting button. 5. Save the configuration (see the Save Configuration Page) Figure 54: Port Instance Configuration EX73900 Series Managed Switch Users Guide...
  • Page 95: Mstp Configuration Examples Using Cli Commands

    To configure the CIST Bridge Priority, Max Age, Forward Delay, and Hello Time of a Spanning Tree Bridge, use the following CLI commands: CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 priority <0-61440> bridge 1 max-age <6-40> EX73900 Series Managed Switch Users Guide...
  • Page 96 1 revision <revision_number> Usage Example: switch_a(config)#spanning-tree mst configuration switch_a(config-mst)#bridge 1 region R1 switch_a(config-mst)#bridge 1 revision 0 Creating an MSTP Instance To create a MSTP instance and map it to a VLAN, use the following CLI commands: EX73900 Series Managed Switch Users Guide...
  • Page 97 1 path-cost 200000 switch_a(config-if)#bridge-group 1 priority 128 To modify the MSTP Port Priority and MSTP Port Path Cost for an Instance on a switch, please use the below CLI commands: CLI Command Mode: Interface Configuration Mode EX73900 Series Managed Switch Users Guide...
  • Page 98: Stp/Ring Page - Alpha Ring

    2. Click on α-Ring Setting. EtherWAN α-Ring Technology The α-Ring protocol was designed and developed by EtherWAN to overcome traditional STP and RSTP’s inability to provide fast network recovery and minimize packet loss caused by link failure. Among the advantages of α-Ring are: ...
  • Page 99 1. Change Ring Port 1 to the port you will be using for the first redundant connection 2. Change Ring Port 2 to the port you will be using for the second redundant connection. 3. Click on the Update Setting button. 4. Save the configuration Figure 56: α-Ring Settings EX73900 Series Managed Switch Users Guide...
  • Page 100 For more information on CLI command usage see CLI Command Usage. Enable Alpha Ring Protocols To enable the Alpha Ring protocols, use the following CLI commands: CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 ring enable/disable EX73900 Series Managed Switch Users Guide...
  • Page 101 -- Shows whether ring ports are in BLOCK or FORWARD mode. Usage Example 1: switch_a>enable switch_a#show ring state switch_a(config)# ring enable switch_a(config)#show ring port-state ring-port 1 fe2 BLOCK ring-port 2 fe3 FORWARD EX73900 Series Managed Switch Users Guide...
  • Page 102 To view the statuses of ring couplings and rings connected by redundancy pair, use the following CLI commands: CLI Command Mode: Privileged Exec Mode CLI Command Syntax: show ring-coupling state CLI Command Syntax: show ring-coupling port-state Usage Example 1: EX73900 Series Managed Switch Users Guide...
  • Page 103: Stp/Ring Page - Alpha Chain Protocol

    The EtherWAN Alpha Ring protocols can be used in mission critical applications to recover from a link failure in 15 milliseconds or less. However, with the Alpha Ring protocols (Alpha Ring, Alpha Ring-Coupling), the redundant topologies that these protocols can be applied to will be limited to at the most two Rings per switch.
  • Page 104: Global Settings

    Warning! When this option is enabled, all the ports on the switch will have the Storm Control feature automatically enabled. 5. Click on the Submit button to load the changes into the running configuration. EX73900 Series Managed Switch Users Guide...
  • Page 105: Alpha Chain Pass-Through Setting

    Figure 59: Chain Ports – Master and Slave on one Switch Figure 60: Chain Ports – Master Chain Port Alpha Chain Pass-Through Setting To navigate to the Chain Pass-Through Setting page: 1. Click on the + next to STP/Ring. EX73900 Series Managed Switch Users Guide...
  • Page 106: Configuring Alpha Chain Using Cli Commands

    To disable the automatic enabling of Storm Control feature on all the ports, use the following CLI commands: CLI Command Mode: Global Configuration Mode CLI Command Syntax: no bridge 1 chain-storm Usage Example: switch_a(config)# no bridge 1 chain-storm EX73900 Series Managed Switch Users Guide...
  • Page 107: Stp/Ring Page - Advanced Setting

    Usage Example 2: Disabling chain port pass-through switch_a(config)# no chain pass-through STP/Ring Page - Advanced Setting To navigate to the STP/Ring Advanced Setting page: 1. Click on the + next to STP/Ring. 2. Click on Advanced Setting. EX73900 Series Managed Switch Users Guide...
  • Page 108: Advanced Bridge Configuration

     BPDU-Guard Configuration – When set to Default the port will default to the Advanced Bridge Configuration settings. Enable or Disable to override the Bridge BPDU-Guard EX73900 Series Managed Switch Users Guide...
  • Page 109 Figure 63: Advanced Per Port Configuration EX73900 Series Managed Switch Users Guide...
  • Page 110: Configuring Spanning Tree Advanced Settings Using Cli Commands

    To enable the BPDU Guard Error Disable-timeout feature on a switch port, and set the timeout interval, use the CLI commands below: CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 spanning-tree errdisable-timeout enable bridge 1 spanning-tree errdisable-timeout interval 300 Usage Example: EX73900 Series Managed Switch Users Guide...
  • Page 111: Vlan

    VLAN Port Based VLAN vs. Tagged Based VLAN The EX73900 Series Managed Switch can be configured to operate in one of two VLAN modes: Port based VLAN mode or Tagged based VLAN mode. In Port based VLAN mode, packets from different VLANs can only be segregated from one another while within a single switch, but not when the packets travel to other switches in the network.
  • Page 112 VLAN number that the packet belongs to. All ports on the EX73900 Series Managed Switch can be configured with different Port Types that have different tagging restrictions as defined below.
  • Page 113: Q Tag Based Vlan Configuration Examples Using Cli Commands

    To configure a 802.1Q VLAN on a switch use the following CLI commands CLI Command Mode: VLAN Database Configuration Mode CLI Command Syntax: switchport portbase add vlan <1 – 16> vlan <1 – 4094> bridge 1 name VLAN NAME state enable EX73900 Series Managed Switch Users Guide...
  • Page 114 Configuring an Access Port To configure an Access Port use the following CLI commands: CLI Command Mode: Interface Configuration Mode CLI Command Syntax: switchport mode access CLI Command Syntax: switchport access vlan <1 – 4094> EX73900 Series Managed Switch Users Guide...
  • Page 115: Add An Ip To The Management Vlan

    To add an IP for a Management VLAN: 1. Enter the IP address and subnet mask for the management VLAN 2. Click on the Submit button (see below). 3. Save the configuration (see the Save Configuration Page) EX73900 Series Managed Switch Users Guide...
  • Page 116: Configuring The Port Type And The Pvid Setting

    2. Enter the PVID VLAN for each port (see below). 3. Enter the Priority Level (optional). 4. Click on the Update Setting button. 5. Save the configuration (see the Save Configuration Page) EX73900 Series Managed Switch Users Guide...
  • Page 117 1. Click on the + next to VLAN. 2. Click on VLAN Setting. To configure the egress member ports for each VLAN: 1. Click on the VLAN link that you want to configure (see below). EX73900 Series Managed Switch Users Guide...
  • Page 118 If any of the egress member ports are Hybrid ports, you must also configure the Tag action on this port (see Figure 70). 4. Select the correct Tag option in the drop down list under Tag or Untag for this port. 5. Click on the Submit button. EX73900 Series Managed Switch Users Guide...
  • Page 119: Qos

    QoS. QoS as it pertains to the EX73900 Series Managed Switch can be broken down into two types, CoS and DCSP. CoS or Class of Service operates at Layer 2 and was developed by an IEEE working group in the 1990s.
  • Page 120: Global Configuration Page

    Internetwork Control 7 (highest) Network Control The above recommendations are implemented in the V2.0.0 EtherWAN Managed Switch’s 802.1p submenu. DSPC or Diffserv Code Point uses the first 6 bits in the ToS field of the IP(v4) packet header. This type of QoS is primarily useful if the QoS needs to pass through a router or routers.
  • Page 121 3). A number from 1 to 20 can be assigned for each queue. This number is used with WRR policy and is the value of the number of packets that must be emptied from the queue before the next queue is considered. By default, these values are: EX73900 Series Managed Switch Users Guide...
  • Page 122: Qos Global Configuration Using The Cli Interface

    Usage Example – Disable QoS Trust: switch_a(config)# no mls qos trust Configuring the Egress Expedite Queue CLI Command Mode: Global Configuration Mode CLI Command Syntax: priority-queue strict priority-queue out EX73900 Series Managed Switch Users Guide...
  • Page 123: 802.1P Priority Page

    Each VLAN priority is expressed as the three-bit PCP field in the 802.1Q header discussed previously. The values shown above are the default values with the higher VLAN priorities corresponding to the higher priority queues. EX73900 Series Managed Switch Users Guide...
  • Page 124: 802.1P Priority Submenu - Cli Interface

    Queue ID. Range is 0-3. COS_VALUE CoS values. Up to 8 values (separated by spaces). Usage Example The following example shows mapping CoS values 0 and 1 to queue 1 on the switch: switch_a(config)#wrr-queue cos-map 1 0 1 EX73900 Series Managed Switch Users Guide...
  • Page 125: Dscp Page - Http Interface

    <dscp_value> to <queue_ID> dscp_value: Up to 8 values (separated by spaces). Range is 0-63. queue_ID: Range is 0-3. Usage Example The following example shows mapping DSCP values 0 to 3 to queue 1 on the switch: EX73900 Series Managed Switch Users Guide...
  • Page 126: Acl (Access Control List)

    CLI Command Syntax: user-priority <0-7> ACL (Access Control List) The settings in the ACL feature of the EtherWAN switch can be used to control which packets are allowed to enter the switch (Packet Filtering), as well as to control the amount of bandwidth that can be allocated for those packets (Bandwidth Policing).
  • Page 127: Configuring Acl

    1. Click on the + next to ACL. 2. Click on ACL Configuration. In order to enable the ACL feature on the EtherWAN switch, the QoS feature must be enabled on the switch as well. In order to apply the ACL packet filtering features on a port, you must: 1.
  • Page 128: Acl Policy Map

    List can be created during the initial ACL Policy Map creation process. After you have chosen just one Access List from below and have finished all the configuration steps for it, please continue onto step #3. EX73900 Series Managed Switch Users Guide...
  • Page 129 9. You can enter a source IP address in order to deny an IP packet with that source IP to gain entry into the switch. To do so, you must choose the deny option from the EX73900 Series Managed Switch Users Guide...
  • Page 130 4. To give this particular Extended IP access list an ID, enter a number in the range from 100 – 199, or from 2000 – 2699, into the entry field next to the Create option drop-down list. EX73900 Series Managed Switch Users Guide...
  • Page 131 IP packet from entry to the switch that did not match any of the previous rules from all the previous access control lists, otherwise these additional IP packets will also be allowed entry into the switch. EX73900 Series Managed Switch Users Guide...
  • Page 132 6. Next, enter the Comparison Mask for the source Ethernet address in reverse logic (Ex. 255.255.255.0 is 0.0.0.255 in reverse logic) into the entry field from the Mask column following the Source MAC column. EX73900 Series Managed Switch Users Guide...
  • Page 133 ACL Policy Map to serve as the catch all deny rule in order to deny any and all types of packets from entry into the switch that did not match any of the previous rules from all the previous access control lists. Layer 4 Figure 78: Layer 4 EX73900 Series Managed Switch Users Guide...
  • Page 134 Access Lists. Otherwise all packets that did not match the classification rules of this Access List will also be allowed entry into the switch. Figure 79: IP Access List Name EX73900 Series Managed Switch Users Guide...
  • Page 135 2. Next, enter a name in the entry field next to “Policy Map Name” for the new ACL “Policy Map” that you are currently creating, and click on the submit button (see Figure 81). EX73900 Series Managed Switch Users Guide...
  • Page 136 Figure 82). 2. Next, check the boxes below Attach Class Map to Policy Map next to all the ports that you would like to apply this Policy Map to. 3. Click on the Attach button. EX73900 Series Managed Switch Users Guide...
  • Page 137 1. ACL Policy Map Next, follow the instructions on how to create a new on page 128. 2. Next, click on the Submit button. Figure 83: Adding a New ACL Class to an Existing Policy Map EX73900 Series Managed Switch Users Guide...
  • Page 138 3. You can confirm that the ACL Class has been added correctly to this Policy Map by checking the dropdown list under “Class Name”. If you see the newly added ACL Class in the list above the dash line, then it has been added properly (see below). EX73900 Series Managed Switch Users Guide...
  • Page 139 1. Make sure to select the correct ACL Class that is above the dash line from the drop- down list under Class Name (see Figure 86). 2. Next, click on the Remove button under Attach Class Map to Policy Map. EX73900 Series Managed Switch Users Guide...
  • Page 140 Class Name. If you do not see the ACL Class in the list above the dash line, but see it below the dash line, then it means it has been removed from this Policy Map (see Figure 87). Figure 87: Verifying ACL Class Removal EX73900 Series Managed Switch Users Guide...
  • Page 141 3. Next, select the correct ACL Class from the drop-down list under Class Name, and then wait for the GUI to update itself. 4. Next, click on the Remove button under Attach Class Map to Policy Map EX73900 Series Managed Switch Users Guide...
  • Page 142 5. You can confirm that this ACL Class has been removed completely by checking the drop-down list under “Class Name”. If you do not see the ACL Class in the list then it means it has been completely removed (see below). Figure 90: Policy Map 3 EX73900 Series Managed Switch Users Guide...
  • Page 143: Acl Configuration Examples Using Cli Commands

    <100-199, 2000-2699> permit ip <source IP> <source bit mask> <destination IP> <destination bit mask> ip-access-list <100-199, 2000-2699> deny ip <source IP> <source bit mask> <destination IP> <destination bit mask> ip-access-list <100-199, 2000-2699> deny ip any any EX73900 Series Managed Switch Users Guide...
  • Page 144 II, 2=SNAP, 4=802.3, 8=LLC> ether-type <EtherType> < EtherType bit mask> Usage Example: switch_a(config)#mac-access-list 2000 permit 00e0.b321.03de 0000.0000.0000 00e0.b321.03df 0000.0000.0000 1 ether-type 800 0000 switch_a(config)#mac-access-list 2000 deny 00e0.b321.03de 0000.0000.0000 00e0.b321.03df 0000.0000.0000 1 ether-type 800 0000 switch_a(config)#mac-access-list 2000 deny any any 1 ether-type 800 0000 EX73900 Series Managed Switch Users Guide...
  • Page 145 Standard/Extended IP Access List, or MAC Access List, to the ACL Class Map by referencing its Access list ID. Note: The bandwidth policing capabilities of the ACL Class cannot be configured here; it can only be configured during the ACL Policy Map creation or modification: EX73900 Series Managed Switch Users Guide...
  • Page 146 <ACL Policy Name> class <ACL Class Name> police <1-1000000> <1-20000> exceed-action drop Usage Example: switch_a>enable switch_a#configure terminal switch_a (config) #class IP_Class_1 switch_a(config-cmap)#policy-map IP_Policy_1 switch_a(config-pmap)#class IP_Class_1 switch_a(config-pmap-c)# police 50000 5000 5000 5000 exceed- action drop EX73900 Series Managed Switch Users Guide...
  • Page 147 Deleting an ACL Class You can use the CLI commands below to delete an existing ACL Class. CLI Command Mode: Global Configuration Mode CLI Command Syntax: no class-map <ACL Class Name> Usage Example: switch_a(config)#no class-map IP_Class_1 EX73900 Series Managed Switch Users Guide...
  • Page 148: Access Lists

    6. Define the Source Ports by entering a number and selecting an operator: eq (equal to), gt (greater than), lt (less than), or neq (not equal to). You can also enter a range of source ports into the field below and clicking the “range” radio button. EX73900 Series Managed Switch Users Guide...
  • Page 149 To attach an existing Access List to a port, select the desired interface from the drop down menu, and then the Access List you wish to attach. Then click Update Setting. Remember to save the configuration before exiting the web interface. EX73900 Series Managed Switch Users Guide...
  • Page 150 ((eq|gt|lt|neq) <0-65535> | range <0-65535> <0-65535>|) (A.B.C.D/M|A.B.C.D A.B.C.D|host A.B.C.D|any) ((eq|gt|lt|neq) (tftp|bootp|<0-65535>) | range <0-65535> <0-65535>|) (no) access-list (<100-199>|<2000-2699>) (deny|permit) (tcp) (A.B.C.D/M|A.B.C.D A.B.C.D|host A.B.C.D|any) ((eq|gt|lt|neq) <0-65535> | range <0-65535> <0-65535>|) (A.B.C.D/M|A.B.C.D A.B.C.D|host A.B.C.D|any) ((eq|gt|lt|neq) (ftp|ssh|telnet|www|<0-65535>) | range <0-65535> <0-65535>|) EX73900 Series Managed Switch Users Guide...
  • Page 151: Snmp

    (a network management software running on a computer, usually called a NMS, short for Network Management Station) polling requests to fetch or to set a data item on the managed device. The SNMP Agent can also send alert messages (called Traps) to a NMS EX73900 Series Managed Switch Users Guide...
  • Page 152: Snmp General Settings

    Link Up Trap. This will allow or stop the switch from sending a trap to the identified trap community groups when any port on the switch moves from the link down state to the link up state. EX73900 Series Managed Switch Users Guide...
  • Page 153 MAC Notification Removed section. 14. Click on the Update button after you have finished the configuration of the SNMP Server (Agent) General Settings. 15. Save the configuration (see the Save Configuration Page) EX73900 Series Managed Switch Users Guide...
  • Page 154 Figure 93: SNMP General Settings EX73900 Series Managed Switch Users Guide...
  • Page 155: Configuring Snmp V1 & V2 Community Groups

    4. Save the configuration (see the Save Configuration Page) Figure 94: Community Name V1/V2c Configuring SNMP v3 Users To navigate to the SNMP v3 page: 1. Click on the + next to SNMP. 2. Click on SNMP v3. EX73900 Series Managed Switch Users Guide...
  • Page 156 56-bit DES encryption algorithm. e. SNMPv3 Priv Auth-SHA = User authentication will be required using the SHA-1 hashing Algorithm, and in addition, all data in protocol message will be encrypted using 56-bit DES encryption algorithm. EX73900 Series Managed Switch Users Guide...
  • Page 157 5. Next, if authentication is required for this user, and you have chosen an authentication protocol, then the entry field next to Auth. Password will have been enabled. Enter a password for this user inside this entry field. See Figure 98. EX73900 Series Managed Switch Users Guide...
  • Page 158 Figure 99: Privacy PassPhrase Deleting SNMP v3 Users from the switch 1. Go to SNMP  SNMP v3, you should see a list of previously configured users. Next, click on the Delete User button. See below. EX73900 Series Managed Switch Users Guide...
  • Page 159 Figure 100: Delete User 2. Next, select the user that you wish to delete from the drop-down list next to Select User Name. 3. Click on the Submit button. See below. Figure 101: Select User EX73900 Series Managed Switch Users Guide...
  • Page 160: Snmp Configuration Examples Using Cli Commands

    5 <1 -256 characters > snmp-server trap-ipaddress 1 <IP Address> snmp-server trap-ipaddress 2 <IP Address> snmp-server trap-ipaddress 3 <IP Address> snmp-server trap-ipaddress 4 <IP Address> snmp-server trap-ipaddress 5 <IP Address> snmp-server trap-type enable linkDown snmp-server trap-type enable linkup EX73900 Series Managed Switch Users Guide...
  • Page 161 CLI Command Mode: Global Configuration Mode CLI Command Syntax: snmp-server enable snmp-server community get <1 -256 characters> snmp-server community set <1 -256 characters> Usage Example: switch_a(config)# snmp-server community get public switch_a(config)# snmp-server community set private EX73900 Series Managed Switch Users Guide...
  • Page 162: Ieee 802.1X

    When an end device is initially connected to a port on the EtherWAN switch where the 802.1X protocol is enabled on the port, the switch will only pass 802.1X authentication traffic (known as EAPOL traffic) on that port between the Supplicant on the end device and the RADIUS server, and will not allow any other traffic to pass.
  • Page 163: Configuring 802.1X From The Web Interface

    2. Click on Radius Configuration Enabling Radius By default, the 802.1X function is globally disabled on the EtherWAN switch. If you want to use the 802.1X port based security on a port, you must enable it globally on the switch first, and then enable it on a per port basis.
  • Page 164 RADIUS server. To do this, please enter a number (from 1 to 100) into the entry field next to Retransmit. 7. Click on the Submit button. Figure 103: Radius Setup EX73900 Series Managed Switch Users Guide...
  • Page 165 Enabled in the drop-down list next to Periodic Re-authentication. 5. After you have enabled periodic re-authentication, you must also configure the time period interval for the re-authentication of the end station. To do this, enter the EX73900 Series Managed Switch Users Guide...
  • Page 166: Lldp

    LLDP significantly aids in the deployment of any network device that supports the protocol. As a media independent protocol intended to be run on all IEEE 802 devices, LLDP may be used to discover routers, bridges, repeaters, WLAN APs, IP telephones, network EX73900 Series Managed Switch Users Guide...
  • Page 167: Lldp General Settings

    1. Click on the + next to LLDP. 2. Click on General Settings. Enable/Disable LLDP To enable LLDP on the EX73900 Series Managed Switch: 1. Select Enable or Disable from the Drop Down box in the LLDP field of the LLDP Transmit Settings box (see Figure 106) 2.
  • Page 168 3. Save the configuration (see the Save Configuration Page) Global TLV Setting The global TLV (Time – Length – Value) settings are advertised by the switch to other LLDP devices. The TLVs supported by the EX73900 Series Managed Switch are (see Figure 106):  Port Description ...
  • Page 169: Lldp Ports Settings

    1. Select Enable from the Drop Down box under the Transmit field for each port for which the transmission of LLDP information should be enabled. 2. Click on the Submit button. Enabling LLDP Reception for a specific Port To enable the reception of LLDP information for a specific port: EX73900 Series Managed Switch Users Guide...
  • Page 170: Lldp Neighbors

    Port – The local switch port to which the remote device is connected.  Chassis ID – The MAC address of the remote device.  Port ID – The port number of the remote device. EX73900 Series Managed Switch Users Guide...
  • Page 171: Lldp Statistics

     Errors – LLDP errors.  Ageout – LLDP information that has been aged out by the switch.  TLV Discards – TLV information discarded  TLV Unknown – TLV information that is unknown EX73900 Series Managed Switch Users Guide...
  • Page 172: Lldp Configuration Examples Using Cli Commands

    Figure 109: LLDP Statistics LLDP Configuration Examples Using CLI Commands Enable/Disable LLDP To enable or disable LLDP on the EX73900 Series Managed Switch use the CLI commands below: CLI Command Mode: Global Configuration Mode CLI Command Syntax: lldp enable no lldp enable...
  • Page 173 System Description TLV sys-cap System Capabilities mgmt-addrs Management Address port-vlan-id Port VLAN ID mac-phy MAC/PHY Configuration/Status port-and-protocol Port And Protocol VLAN ID vlan-name VLAN Name protocol-identity Protocol Identity link-aggregation (Link Aggregation max-frame Maximum Frame Size EX73900 Series Managed Switch Users Guide...
  • Page 174 Usage Example: switch_a# interface fe1 switch_a(config)# lldp rcv-pkt Enabling LLDP Notify To enable LLDP Notify for a port use the CLI commands below: CLI Command Mode: Interface Configuration Mode CLI Command Syntax: lldp notification EX73900 Series Managed Switch Users Guide...
  • Page 175: Routing

    VLANs, or switches with routers, you will need to enable static or dynamic routing. To navigate to the Static Route page: 1. Click on the + next to Routing. 2. Click on Static Route. EX73900 Series Managed Switch Users Guide...
  • Page 176: Routing Table

    Distance/Metric – Administrative distance/metric.  Next Hop – Next closest router or Layer 3 switch on the route  Interface – Interface used by defined route  Up Time – Length of time the route is active EX73900 Series Managed Switch Users Guide...
  • Page 177 4. Select the destination network or next hop router address to match an ACL, in an ACL is to be used. 5. Select the Set Clause data type, and enter the metric or next hop results. 6. Click Add to create the Route Map. EX73900 Series Managed Switch Users Guide...
  • Page 178 1. Select the VLAN or layer 3 interface on which you want to enable Proxy ARP. 2. Select “enable” from the dropdown menu. 3. Click Update Setting. Figure 113: Enable Proxy ARP on an interface EX73900 Series Managed Switch Users Guide...
  • Page 179: Static Routing With Cli Commands

    192.168.3.0/24 [120/2] via 172.16.0.200, ge1, 00:03:33 192.168.4.0/24 [120/12] via 172.16.0.200, ge1, 00:03:23 192.168.5.0/24 [120/12] via 172.16.0.200, ge1, 00:03:23 Create or Delete Access List To create (or delete) an access list, use the CLI commands below: EX73900 Series Managed Switch Users Guide...
  • Page 180 To enable Proxy ARP on an interface, use the CLI commands below: CLI Command Mode: Interface Configuration Mode CLI Command syntax: ip proxy arp no ip proxy arp Usage Example: switch_a(config)#vlan database switch_a(config-vlan)#int vlan1.1 EX73900 Series Managed Switch Users Guide...
  • Page 181: Rip

    5. Set the timings for the Routing Table Update Timer, the Routing Information Timeout Timer, and the Garbage Collection Timer (Default values are 30, 180, and 120 seconds respectively). 6. Click Update Setting to start RIP with the set values. EX73900 Series Managed Switch Users Guide...
  • Page 182 6. For the Split Horizon Field, select enable, disable, or poison reverse. 7. Set the Authentication Mode to disable, MD5, or simple password. 8. If the Authentication Mode is MD5 or Simple Password, set the Authentication Key (1 – 16 characters). 9. Click Update Setting EX73900 Series Managed Switch Users Guide...
  • Page 183 Next Hop – Next closest router or Layer 3 switch towards destination  Metric – Number of hops  From – IP address of source router  I/F – Interface  Time – Duration of time since last update Figure 116: RIP Route Table EX73900 Series Managed Switch Users Guide...
  • Page 184 The RIP Neighbor screen is used to add/delete RIP neighbor IP addresses. Add the IP address of neighboring routers and layer 3 switches, and click Add. Select existing neighbors from the list at the bottom and click Delete to remove them. Figure 118: RIP Neighbor Addition and Deletion EX73900 Series Managed Switch Users Guide...
  • Page 185 (connected or static), a route map that has been previously defined, and the desired metric, then click the Add button. Figure 120: Add or Delete Items to Redistribute List EX73900 Series Managed Switch Users Guide...
  • Page 186: Rip Configuration With Cli Commands

    Define RIP Neighbor To set a neighboring router or layer 3 switch with which to exchange routing information, use the CLI commands below: CLI Command Mode: Router Rip Config EX73900 Series Managed Switch Users Guide...
  • Page 187 To redistribute routes from one routing domain to another, use the CLI commands below: CLI Command Mode: Router Rip Config CLI Command Syntax: redistribute (connected | static) [metric <0-16>] [route-map map_name] Usage Example: switch_a(config-router)# redistribute static metric 10 EX73900 Series Managed Switch Users Guide...
  • Page 188 Flush: Number of seconds that must pass before route is removed from routing table. Default is 240 seconds. Usage Example: switch_a(config-router)# timers basic 30 180 120 RIP Authentication To configure text or MD5 authentication for RIP: CLI Command Mode: Interface Configuration Mode EX73900 Series Managed Switch Users Guide...
  • Page 189: Other Protocols

    Any IEEE 802.1Q compliant switch must implement this protocol. To navigate to the Other Protocols / GVRP page (see Figure 121): 1. Click on the + next to Other Protocols. 2. Click on GVRP. Figure 121: GVRP EX73900 Series Managed Switch Users Guide...
  • Page 190 1. Under GVRP Global Setting, choose the Enable option from the drop-down list next to GVRP. 2. Choose the Enable option from the drop-down list next to Dynamic VLAN Creation. 3. Click on the Update Setting button. EX73900 Series Managed Switch Users Guide...
  • Page 191 Figure 123: GVRP Configuration Access Switch Enabling the GVRP Protocol at the Port Level To navigate to the Other Protocols / GVRP page (see Figure 121): 1. Click on the + next to Other Protocols. EX73900 Series Managed Switch Users Guide...
  • Page 192 Enable option from the drop-down list under the GVRP Registration column. 4. Click on the Update Setting button. 5. Save the configuration (see the Save Configuration Page) Figure 124: GVRP Per Port Settings EX73900 Series Managed Switch Users Guide...
  • Page 193 CLI Command Syntax: set gvrp dynamic-vlan-creation disable bridge 1 Usage Example: switch_a(config)# set gvrp dynamic-vlan-creation disable bridge 1 To enable or disable GVRP locally on a port on the EtherWAN switch, you must use the following CLI commands: CLI Command Mode: Global Configuration Mode CLI Command Syntax: set port gvrp enable <port id>...
  • Page 194: Igmp Snooping

    IGMP Snooping The settings in the IGMP Snooping feature of the EtherWAN switch controls how the switch forwards multicast packets. General Overview The EX73900 Series Managed Switch has been outfitted with the IGMP Snooping function in three modes: ...
  • Page 195 To put the IGMP Snooping feature in the correct Mode, follow the steps below:  Choose the appropriate choice from the dropdown list next to IGMP mode  Click on the Update Setting button (See below) EX73900 Series Managed Switch Users Guide...
  • Page 196 This allows the multicast stream to disappear from a port much faster. 2. Next, click on the Update Setting button EX73900 Series Managed Switch Users Guide...
  • Page 197 To navigate to the IGMP Snooping page: 1. Click on the + next to Other Protocols. 2. Click on IGMP Snooping. To configure specific properties for IGMP Passive Mode, please follow the steps below. Figure 127: IGMP Passive Mode EX73900 Series Managed Switch Users Guide...
  • Page 198 IGMP query. Any response received after this time will not be accepted by the Querier. It is recommended that you use the default setting of 10 seconds according to the IGMP standard. EX73900 Series Managed Switch Users Guide...
  • Page 199 IGMP Snooping Disabled mode: 1. Select either the PassiveForwardMode or the ForceForwardMode radio button. EX73900 Series Managed Switch Users Guide...
  • Page 200 Note: The presence of an IGMP Querier port will make the settings provided by the PassiveForwardMode to have no effect, and all unknown multicast packets will be forwarded to the IGMP Querier port only. EX73900 Series Managed Switch Users Guide...
  • Page 201 IGMP Querier port. In addition, when an IGMP Querier port is present, all unknown multicast packets will also be forwarded to the IGMP Querier port as well, in addition to the settings in the ForceForwardMode function. EX73900 Series Managed Switch Users Guide...
  • Page 202 3. Click on the Update Setting button. Note: When the switch is in IGMP Snooping Querier mode, there will not be an IGMP Querier port present, and the settings according to the ForceForwardMode will always be in effect. EX73900 Series Managed Switch Users Guide...
  • Page 203 Note: when an IGMP Querier port is present, all registered multicast group IDs will show up in the Membership column as a checked box for the IGMP Querier port, even if an IGMP Join was never received for that Group ID on the Querier port. EX73900 Series Managed Switch Users Guide...
  • Page 204 Usage Example: switch_a(config)#ip igmp snooping enable switch_a(config)#no ip igmp snooping querier To put the IGMP Snooping feature in Querier Mode use the following CLI commands: EX73900 Series Managed Switch Users Guide...
  • Page 205 Usage Example - Disabling the IGMP fast-leave feature: switch_a(config)#interface vlan1.1 switch_a(config-if)#no ip igmp snooping fast-leave To enable or disable the IGMP Report Suppression feature on a VLAN, use the CLI commands below: CLI Command Mode: VLAN Interface Configuration Mode EX73900 Series Managed Switch Users Guide...
  • Page 206 <ifname>,<ifname>,<ifname> Usage Example - Flood all unknown multicast packets: switch_a(config)# ip igmp snooping passive-forward all Usage Example - Drop all unknown multicast packets: switch_a(config)# ip igmp snooping passive-forward none EX73900 Series Managed Switch Users Guide...
  • Page 207 <ifname>,<ifname>,<ifname> Usage Example - Flood all unknown multicast packets: switch_a(config)# ip igmp snooping force-forward all Usage Example - Drop all unknown multicast packets: switch_a(config)# ip igmp snooping force-forward none EX73900 Series Managed Switch Users Guide...
  • Page 208: Network Time Protocol

    To navigate to the NTP page: 1. Click on the + next to Other Protocols. 2. Click on NTP Enabling NTP To enable the NTP client, follow the steps below (see Figure 134): EX73900 Series Managed Switch Users Guide...
  • Page 209 To set the time immediately using an NTP server, follow the steps below: 1. Enter the new polling period in the Polling Interval textbox. 2. Click on the Sync Time button in the NTP Server field EX73900 Series Managed Switch Users Guide...
  • Page 210 For example, if Daylight Saving Time begins on the second Sunday in March at 2:00AM and ends on the first Sunday in November at 2:00AM, then select the values as shown in Figure 135. 5. Click on the Update Setting button EX73900 Series Managed Switch Users Guide...
  • Page 211 For example, if Daylight Saving Time begins on March 9th at 2:00AM and ends on November 2nd at 2:00AM, then select the values as shown in Figure 136. 5. Click on the Update Setting button EX73900 Series Managed Switch Users Guide...
  • Page 212 To enable NTP on the EX73900 Series Managed Switch, use the CLI commands below: CLI Command Mode: Global Configuration Mode CLI Command Syntax: ntp enable To set the NTP server on the EX73900 Series Managed Switch, use the CLI commands below: CLI Command Mode: Global Configuration Mode CLI Command Syntax: ntp server <IP Address or Host Name of NTP Server>...
  • Page 213 CLI Command Syntax: ntp polling-interval <time in minutes, 1-10080> Usage Example: switch_a(config)#ntp polling-interval 180 To have the NTP client sync the clock immediately on the EX73900 Series Managed Switch, use the CLI commands below: CLI Command Mode: Global Configuration Mode...
  • Page 214: Gmrp

    To navigate to the Other Protocols / GMRP page: 1. Click on the + next to Other Protocols. 2. Click on GMRP. General Overview The ports on the EtherWAN switch can be configured with the GMRP feature in five modes:  Disabled ...
  • Page 215 When a port is put in GMRP disabled mode that port will not participate in any GMRP activities. Enabling the GMRP Feature Globally on the Switch To navigate to the Other Protocols / GMRP page: 1. Click on the + next to Other Protocols. 2. Click on GMRP. EX73900 Series Managed Switch Users Guide...
  • Page 216 To enable the GMRP function in the switch, follow the procedure below: 1. Choose the Enable option from the dropdown list next to GMRP 2. Click on the Update Setting button. (See Figure 137) Figure 137: GMRP Global Setting EX73900 Series Managed Switch Users Guide...
  • Page 217 If you do not wish to transmit any multicast packets on a port based on the received GMRP multicast group registrations on that port, but would like to receive multicast packets that belong to the currently registered multicast groups on the switch on that port, configure the items listed below: EX73900 Series Managed Switch Users Guide...
  • Page 218 If you do not want a port to participate in the GMRP protocol, configure the items listed below:  For each port that you wish to apply this application, select the Disable option from the drop-down list under the GMRP column.  Click on the Update Setting button. EX73900 Series Managed Switch Users Guide...
  • Page 219 Usage Examples: switch_a(config)# set gmrp enable bridge 1 switch_a(config)# set gmrp disable bridge 1 To enable GMRP locally on a port on the EtherWAN switch, you must use the below CLI commands: CLI Command Mode: Global Configuration Mode CLI Command Syntax: set port gmrp enable <port id>...
  • Page 220: Dhcp Server

    DNS servers. General Overview The EtherWAN switch can function as a DHCP server for a single VLAN (it can be any VLAN) on the switch. When functioning as a DHCP server, the EtherWAN switch can be configured with a range of IP addresses, default gateway and DNS servers, which will allow...
  • Page 221 6. Enter the lease period in seconds, which the DHCP clients are allowed the use of their leased IP addresses, in the entry field next to Lease Time. Click on the Update Setting button. EX73900 Series Managed Switch Users Guide...
  • Page 222 To check what IP addresses has been allocated to which DHCP clients: 1. Click on the DHCP Binding Table link (see Figure 139) Click on the DHCP General Setting link to get back to the previous DHCP configuration Web GUI page (see Figure 140). EX73900 Series Managed Switch Users Guide...
  • Page 223 Figure 139: DHCP Bindings Figure 140: DHCP Binding Table EX73900 Series Managed Switch Users Guide...
  • Page 224 CLI Command Syntax: dhcp-server restart Usage Examples: switch_a(config)#interface vlan1.100 switch_a(config-if)#dhcp-server enable switch_a(config-if)#no dhcp-server enable To check what IP addresses has been allocated: CLI Command Mode: Privileged Exec Mode CLI Command Syntax: show dhcp-server binding EX73900 Series Managed Switch Users Guide...
  • Page 225 Usage Example: switch_a#show dhcp-server binding Mac Address IP-Address Expires in a4:ba:db:de:d6:2f 192.168.7.100 23 hours, 57 minutes, 15 seconds EX73900 Series Managed Switch Users Guide...
  • Page 226 Taiwan www.EtherWAN.com EtherWAN has made a good faith effort to ensure the accuracy of the information in this document and disclaims the implied warranties of merchantability and fitness for a particular purpose and makes no express warranties, except as may be stated in its written agreement with and for its customers.

Table of Contents