ES3000 Ethernet Switch User Guide 72E-68446-01 Revision A May 2004...
Page 4
Symbol does not assume any product liability arising out of, or in connection with, the application or use of any product, circuit, or application described herein. No license is granted, either expressly or by implication, estoppel, or otherwise under any Symbol Technologies, Inc., intellectual property rights. An implied license only exists for equipment, circuits, and subsystems contained in Symbol products.
Page 6
Establishing a RS-232 Serial Connection to the Ethernet Switch ..1-5 Administration of the ES3000 Ethernet Switch ......1-6 Installing a SFP Fiber Transceiver.
Page 7
Main Menu->Ports->Port Security->Radius......3-35 Main Menu->Ports->Port Security ->802.1x ......3-36 Main Menu->Ports->Power over Ethernet.
Page 8
ES3000 User Guide Chapter 4. Web Management Access General Information ..........4-2 Saving Web Interface Configuration Changes .
Page 9
Chapter 5. Command Line Interface ES3000 Ethernet Switch Command Brief ....... . . 5-1 Help Key.
Page 10
ES3000 User Guide VLAN Commands ..........5-74 Quality of Service Commands .
Introduction The ES3000 User Guide provides general instructions for configuring and using the ES3000 Ethernet Switch. This guide provides information general in nature for those who may be new to the E3000 Ethernet Switch device. Notational Conventions The following conventions are used in this document: •...
If the problem cannot be solved over the phone, you may need to return your equipment for servicing. If that is necessary, you will be given specific directions. Symbol Technologies is not responsible for any damages incurred during shipment if the approved shipping container is not used. Shipping the units improperly can possibly void the warranty.
ES 3000 (non PoE) - Part Number ES-3000-10-WW The PoE and non-PoE versions of the ES3000 use different versions of the bootcode and runtime software. Do not attempt to use PoE software with a non-PoE switch. Do not attempt to use non-...
A virtual terminal protocol is a software program (such as Telnet) allowing the establishment of a management session from a Macintosh, PC or UNIX workstation. Because Telnet runs over TCP/IP, at least one IP address is required on the ES3000 Ethernet Switch before establishing access to it with a virtual terminal protocol.
1.5 Default Installation 1.5.1 Preparing for Site Installation Site preparation for the ES3000 Ethernet Switch installation begins with a site survey and network analysis. Review the site survey reports to determine specific equipment placement, site-specific port capacity, and power drops. Ensure the installation area is free of dust and dirt.
Inspect the package contents and report any missing or damaged items to the Symbol sales representative. The package (for both the PoE and non-PoE Ethernet Switch models) should contain the following: • ES3000 Ethernet Switch • Quick Installation Guide • Rack-mounting brackets •...
1.5.3 Supplying Power To cable the ES3000 Ethernet Switch to receive power: 1. Connect the supplied AC power cord to the power connector on the rear of the Ethernet Switch. 2. Plug the cord into a standard AC outlet with a voltage range from 100VAC to 240VAC.
IP address to the switch. To configure or determine the IP address on the switch via direct serial connection: 1. Use HyperTerminal (or other communications utility) to secure a connection to the ES3000 Ethernet Switch.
Page 19
To use the ES3000 Command Line Interface (CLI) to configure the device: 1. Use HyperTerminal (or other communications utility) to secure a connection to the ES3000 Ethernet Switch. 2. Hit the return key <Enter> to display the ES3000 logon screen.
Page 20
The Web interface General Information page displays. Refer to Chapter 3 for information on using the ES3000 serial interface to configure the device. Refer to Chapter 4 instructions on using the Web interface to configure the device. Refer to Chapter 5...
1.7 Installing a SFP Fiber Transceiver The ES3000 Ethernet Switch supports a SFP (small form factor pluggable) fiber channel transceiver used in fiber channel cable installations. To install the SFP Fiber Transceiver: 1. Remove the rubber plug protecting the optics on the transceiver.
Once completed, the software version requires verification within the System page. The PoE and non-PoE versions of the ES3000 switch use different versions of the bootcode and runtime software. Do not attempt to use PoE software with a non-PoE switch. Do not attempt to...
ES3000 User Guide Symbol recommends using a RS-232 serial port connection to the switch during the software upgrade. When using a Telnet Session or Web interface, the connection to the switch is not available until the switch has completed its boot cycle and entered the Spanning Tree forwarding mode.
Administration Console Access The administration console is an internal, character-oriented, VT-100/ANSI menu-driven user interface for management configuration activities. View the administration console from a terminal, PC, Apple Macintosh, or UNIX workstation connected to the switch console port. 3.1 Direct Access Management Method The direct access management method is required when initially setting up the switch.
Page 26
ES3000 User Guide The following are Symbol recommended terminal-emulation programs: • HyperTerminal (which is built into the Microsoft Windows operating systems) • ZTerm (Apple Macintosh) • TIP (UNIX workstation) To set up the connection using a HyperTerminal on a PC (but other systems follow similar steps): 1.
Page 27
5. Verify the port settings are: Baud Rate: 19200 Data Bits: Parity: None Stop Bits: Flow Control: None Administration Console Access...
Page 28
ES3000 User Guide 6. Click OK. When the HyperTerminal window displays, a connection exists to the switch and a logon screen displays. If a login screen or main menu does not display, hit the return key.
Main Menu->System Admin.->Tools->Save Config. on page 3-24. Use the Save Config page to save all updates to the menu-driven interface. Once updates are made refer back to the target configuration page to ensure the updates have been implemented by the ES3000 Ethernet Switch.
ES3000 User Guide 3.4 Main Menu Options The main menu displays the submenus available. Select Enter when a highlighted option confirms the choice of the specified submenu. The hotkey or letter within square bracket of each menu option can also be typed to directly choose the option. There are ten main menu items to choose from: •...
ES3000 User Guide 3.5 General Information The General Information screen displays information on the operational state of the ES3000 Ethernet Switch. Use this information for general configuration information when accessing other menu items. • System up for • Boot Code Version •...
3.5.1 Main Menu->System Administration->System Configuration Use the System Configuration screen to access System Name, Contact Person, and System Location submenus required for configuring the device. The MAC address and Object ID also display, but these items are not user configurable. There are three submenus at System Configuration menu, •...
• Management Access • Quit Use the IP Config menu to manage the IP related information for the ES3000 from the System IP Configuration menu. Use the Management Access menu to enable or disable the Web, SNMP and/or telnet interfaces from the Management Access menu.
3.5.3 Main Menu->Access->System IP Configuration Use the System IP Configuration menu to manage IP related information for the ES3000 supported system. • IP Assignment Mode • Manual - Manually enter IP related information • DHCP - The switch accepts DHCP broadcast from a DHCP server and automatically configures IP related information The default setting is DHCP.
3-12 ES3000 User Guide • Press Ctrl-W to save any changes to NVRAM. 3.5.4 Main Menu->Access->Management Access Use the Management Access screen to enable or disable the Web, SNMP, and/or telnet interfaces. The Management Access menu can also be used to change the user name and password. User names and passwords are case sensitive and can be up to 20 characters long.
Page 37
The configurable fields within the Management Access menu have the following values: Set Console UI Time Out: Set Telnet UI Time Out: Change Local User Name: Change Local Password: Enable/Disable Telnet Server: Enable/Disable SNMP Agent: Enable/Disable Web Server: Session is disconnected when the time out occurs Telnet session is disconnected when the time out occurs Defines the name of the local user Changes the password of the local user...
SNMP manager to certain conditions on the network. A trap could result from improper user authentication, PoE power usage over threshold or network topology changes.. Use the SNMP Configuration menu to manage the ES3000 switch using the Simple Network Management Protocol (SNMP) from a network management station. Configure the switch to participate in the SNMP community and add the SNMP host agent to the host table.
Page 39
3-15 Administration Console Access The SNMP Configuration page has four options: • System Information • Authorized Managers • Trap Receivers • Trap Selection...
3-16 ES3000 User Guide 3.5.6 Main Menu->SNMP Config.->System Information Use the System Information page to display system information to set the system name, location, and contact information. The MAC address and Object ID are also shown, but the MAC address and...
3.5.7 Main Menu->SNMP Config.->Authorized Managers Use the Authorized Managers page to list the SNMP managers and their associated information. There are two community strings in default mode, private and public. Read-only is allowed with public and read-write is granted to private. Change the two community strings as required. Four commands are available to set the Manager IP, community string, Status, Privilege, and IP address.
3-18 ES3000 User Guide 3.5.8 Main Menu->SNMP Config.->Trap Receiver Configuration When Authentication Traps is Enabled, the system generates an SNMP trap upon a host authorization failure. The failure occurs when a host attempts to gain access to the system but the host IP is not in the SNMP host table.
3.5.9 Main Menu->SNMP Config. ->Trap Selection Three commands are available to configure individual trap parameters: Enable/Disable Auth Fail Trap: Add Link Down Trap Ports: Delete Link Down Trap Ports: 3.5.9.1 Port Link Down Trap When on, the system generates an SNMP trap upon a port link down. This failure occurs when a link is disconnected.
3.5.10 Main Menu->System Admin. ->Tools Menu The Tools Menu has six options: • Software Upgrade • System Reboot • Save Config. • Upload/Download Config. • SNTP Config • System Log These individual menu options are discussed in detail in the sections that follow. 3-21 Administration Console Access...
3-22 ES3000 User Guide 3.5.11 Main Menu->System Admin.->Tools->Software Upgrade If new improvements to the software on the switch become available, use the Software Upgrade menu to upgrade the switch to the new software version. Once the IP address of the TFTP and the name of the new software image file are properly configured, the user can upgrade the software with command on this menu.
3.5.12 Main Menu->System Admin.->Tools->System Reboot When the system reboots, reboot Status and reboot Type options display: Reboot Status: Stop The switch is powered down. Normal The switch conducts a warm reboot as normal when rebooted. Reboot Type: Normal Reboot with current runtime code and configuration. Factor-Default The switch runs as factor default after reboot.
Save updated settings to Flash once changes to the screens within the console interface have been made. Use the Save Config screen as the central location to save changes made within the ES3000 Ethernet Switch menu-driven interface. Once updates have been saved to the system using the Save Config page, refer back to the target configuration screen to ensure the changes have been implemented by the ES3000 Ethernet Switch.
3.5.14 Main Menu->System Admin. ->Tools ->Upload/Download Config. There are four configurable functions within the Upload/Download Configuration page: Set TFTP Server IP Address Set Configuration File Name Upload Configuration File Download Configuration File Administration Console Access user can enter the server IP address to get the TFTP server. user can enter the file name that they want to config user can upload the configuration file user can download configuration file from a TFTP server...
3-26 ES3000 User Guide 3.5.15 Main Menu->System Admin.->Tools->SNTP Config. There are configurable functions in the SNTP Configuration page: Set SNTP Server IP Set SNTP Interval Set Time Zone Set Daylight Saving Simple Network Time Protocol, the user can enter SNTP server IP to gain access.
The System Log is a tool for observing system behavior. Clear the system log by selecting Clear System Log. Symbol recommends referring to the System Log when contacting the Support Center to determine if an ES3000 event has been recorded.
3-28 ES3000 User Guide 3.5.17 Main Menu->Port Configuration Menu Use the Port Configuration menu to set the port characteristics related to link operations. All of the parameters on the Port Configuration page are toggle settings. To change, or toggle, between options, select Ctrl-M to move the curser to the ports field and strike the space bar when the appropriate option is highlighted.
3-29 Administration Console Access 3.5.18 Main Menu->Ports->Basic Port Config. Use the Basic Port Configuration menu to configure port status (link type, admin enable/disable, link up/down, mode, and flow control). To mirror other ports, select Port Mirroring.
3-30 ES3000 User Guide 3.5.19 Main Menu->Ports->Basic Port Config.->Port Status & Config. The Port Status & Configuration menu contains the following editable fields: Type The type of a port, this field is not user configurable. Admin field Enables or disables the port.
Page 55
port compliant with IEEE 802.3u. If the other port is not IEEE802.3u compliant, the port defaults to half-duplex (10 Mbps mode). Users can operate the communication speed and duplex mode manually. Flow Control Enables or disables Flow Control. Flow control is a protocol preventing packets from being dropped by reducing the amount of traffic to a level that can be accommodated.
Use the Port Counters menu to select the port where information is required. Refer to the Total and Avg./s lists for individual port information. Reset the ES3000 to retrieve the latest information immediately. The Refresh mode is to set to a defined refresh interval.
3.5.21 Main Menu->Ports->Basic Port Config->Port Mirroring Port mirroring allows one port on the ES3000 to see all of the packets passing through any other port on the switch. Usually, a network analyzer is attached to the monitoring port so the network administrator can debug problems with the monitored port.
3-34 ES3000 User Guide 3.5.22 Main Menu->Ports->Port Security Use the Port Security screen to enable or disable the Web, SNMP, and/or telnet interfaces or change the user name and password. User names and passwords are case sensitive and can be up to 20 characters long.
3-35 Administration Console Access 3.5.23 Main Menu->Ports->Port Security->Radius Use the Radius menu option to configure the advanced security settings of the switch to limit the access to the management interfaces. There are two advanced security options beyond the basic password protection: RADIUS client authentication and 802.1X port authentication. If the user has a RADIUS server on the network, authentication of management access can be conducted through the RADIUS server.
(30sec.), the supplicant requiring and server responding time, the maximum request times and the quiet period if there is no any activity on the ES3000. Configure the up re-authentication period when re-authentication status is Enabled. Go back to the...
3.5.25 Main Menu->Ports->Power over Ethernet Use Power-over-Ethernet (PoE) to eliminate using a 110/220 VAC power source to power access points and other devices on a wired LAN. If using a Power-over-Ethernet system, only a single CAT5 Ethernet cable carrying both power and data to each device is required. The single cable scheme provides greater flexibility in the placement of access points and network devices and can significantly decrease installation costs.
Page 62
3-38 ES3000 User Guide Global Configuration Power Usage: Management Method: Detection Method: Sets the power usage threshold for sending a trap. The action to take when the power sink over the power budget, use one of the following: 1) Low priority port is shut down;...
3-40 ES3000 User Guide 3.5.26 Main Menu->Ports->Link Aggregation Use the Link Aggregation menu to allow multiple links between switches to work as one virtual link (aggregate link). Trunks can be defined for similar port types only. For example, a 10/100 port cannot form a Port Trunk with a gigabit port.
3.5.27 Main Menu->Ports->Link Aggregation->LA Config Use the LA Configuration menu to define multiple links between switches to work as one virtual link or aggregate link. Trunks can be defined for similar port types only. For example, a 10/100 port cannot form a Port Trunk with a gigabit port.
3-42 ES3000 User Guide 3.5.28 Main Menu->Ports->Link Aggregation->Set Port Priority The default system priority is the same in all ports. If configuring a port with different priority in the link aggregation, go to set port priority to configure the port priority.
3-43 Administration Console Access 3.5.29 Main Menu>VLANs A Virtual Local Area Network (VLAN) is a means to electronically separate ports on the same switch from a single broadcast domain into separate broadcast domains. By using a VLAN, users can group by logical function instead of physical location.
3-44 ES3000 User Guide 3.5.30 Main Menu->VLANs->VLANs by VLAN-ID Create a new VLAN, add new ports to an existing VLAN, remove ports from an existing VLAN, delete a VLAN, Set Management Status, and/or Set GVRP Status from the VLAN by VLAN-ID screen. Six...
Page 69
To create a new VLAN Group: 1. Select Create VLAN. 2. Enter the VLAN ID and name in the provided fields. 3. Add VLAN members if so desired. 4. Click Apply. To delete a VLAN Group: 1. Select Delete VLAN. 2.
3-46 ES3000 User Guide To set the GARP VLAN registration protocol (GVRP) message status (GARP refers to General Attribute Registration Protocol): 1. Select Set GVRP Status. 2. Choose E to enable and D to disable. To set Management Status: 1. Select Set Management Status.
3.5.31 Main Menu->VLANs->VLAN Port Configuration Menu Use the VLAN Port Configuration screen to configure VLAN configurations for each port. The PVID is default to 1 for every port. Set Port VID: Sets PVID of a port. Set Frame Type: Sets the acceptable frame types, All or Tagged Only. When Tagged Only is selected, all non-tagged packet are dropped.
The ES3000 can “snoop” the messaging protocol to keep track of multicast groups and to insure multicast traffic is sent only to the appropriate ports within a VLAN. In networks where multimedia applications generate multicast traffic, IGMP can reduce unnecessary bandwidth by limiting traffic forwarding otherwise broadcast to the network.
3.5.33 Main Menu->IGMP Snooping->IGMP Snooping Config. Enable The system detects IGMP queries, report packets, and manage IP multicast traffic through the switch. Disable The switch forwards traffic and disregards any IGMP requests. Users can set up Host port aged time and router port aged time to snoop the network and the IGMP Snooping status report interval.
3-50 ES3000 User Guide 3.5.34 Main Menu->IGMP Snooping->VLAN Filter Table Use the VLAN Filter Table to define the VLAN not to be included in the set Vlan Filter. Enter the VLAN ID (1-4094) in the VLAN ID field. Ensure the Status field is set to Filter.
3-51 Administration Console Access 3.5.35 Main Menu->IGMP Snooping->Router Port Table The Router Port Table menu displays the ports in a VLAN ID connecting to the router. The user can snoop the package from the router side of the ports. Select Next Page to display additional VLAN IDs should they exist.
ES3000 User Guide 3.5.36 Main Menu->Spanning Tree Configuration Menu The ES3000 can be configured to use one of three spanning tree protocols. Spanning Tree Protocol (STP) is compatible with legacy equipment. Rapid Spanning Tree Protocol (RSTP) is signficantly faster than STP. Multiple Spanning Tree Protocol (MSTP) is based on RSTP and extends RSTP in a way that is useful for switches implementing VLANs.
3.5.37 Main Menu->Spanning Tree->Forwarding DB Use the Forwarding Database option to view the dynamic MAC addresses currently in the address database. When addresses are in the database, the packets intended for those addresses are forwarded directly to those ports. The Administrator can display addresses in the table by port, VLAN, and/or MAC address by entering the short key.
Page 78
3-54 ES3000 User Guide Static Address Table: Use the Static Addresses Table to specify Media Access Control (MAC) addresses for specific ports not purged from the bridge table by the aging function. There are 3 entries in the table. Two commands are available to add and/or remove an entry.
3-55 Administration Console Access 3.5.38 Main Menu->Spanning Tree->MSTP Config. 3.5.39 Main Menu->Spanning Tree->Multiple Spanning Tree Configuration->MSTP Config. Rapid spanning tree (IEEE 802.1w) is supported to reduce the spanning tree established time. Each spanning tree establishment process takes several timeouts to avoid a loop, even the edge switch. The user can configure the switch to avoid the long latency due to timeouts if there is only a single connection to the switch.
Page 80
3-56 ES3000 User Guide The upper half of the MSTP Config screen displays information about the Multiple Spanning Tree Configuration. Status: Global MSTP Status: Protocol Version: MST Config ID Selector: MST Region Name: Status of global multiple spanning tree protocol. Enabled indicates that MSTP is running while Disabled indicates MSTP is not running.
Page 81
MST Region Version: MST Config Digest: Command: Enable/Disable Global MSTP: Set MSTP Protocol Version: Cist Configuration: Cist Basic Port Configuration: Cist Advanced Port Config: Set MSTI Region Name: Set MSTI Region Version: Designated Topology Info: Regional Topology Info: Configure the switch to ensure the SPT works properly. The Common Instant Spanning Tree Configuration Menu enables the user to configure the switch-wide parameters, such as Cist Hello Time, Cist Maximum Age, and Cist Forward Delay.
3-58 ES3000 User Guide 3.5.40 Main Menu->Spanning Tree->CIST Config. Status Hello Time: Maximum Age: Forward Delay: Bridge Priority: Command Set Cist Bridge Priority: Set Cist Bridge Hello Time: Set Cist Bridge Maximum Age: Set MSTP Max Hop Count Delay: Time between configuration messages sent by the Spanning Tree...
Page 83
3-59 Administration Console Access Rapid Spanning Tree When a port running the standard STP is connected, it goes through the STP negotiation (listening -> learning -> forwarding or blocking) before it is available. If a client is trying to access a server through the switch running STP negotiation, it is not able to connect to it immediately.
3-60 ES3000 User Guide 3.5.41 Main Menu->Spanning Tree->MSTP Config->CIST Basic Port Config. Use the CIST Basic Port Config. menu to configure the port edge status, port P-TO-P status, and restart port migration to prevent the wrong link.
3-61 Administration Console Access 3.5.42 Main Menu -> Spanning Tree -> MSTP Config. -> CIST Advanced Port Config. Use the CIST Advanced Port Config. menu to set up the port edge status, port P-TO-P status, and restart port migration to prevent the wrong link.
3-62 ES3000 User Guide 3.5.43 Main Menu->Spanning Tree->MSTP Config.->MSTP Instance Config. A small tree instance can be considered in the MSTP. One Instance can have more than one VLAN. Use the MSTP Instance Config. menu to add or remove a VLAN, or remove the MST Instance as...
3-63 Administration Console Access 3.5.44 Main Menu->Spanning Tree->MSTP Config.->Designated Topology Info. The Designated Topology Info. page displays read-only topology information for each port.
3-64 ES3000 User Guide 3.5.45 Main Menu->Spanning Tree->MSTP Config.->Regional Topology Info. The Regional Topology Info. page displays regional topology information (read-only) for each port.
Administration Console Access 3.5.46 Main Menu->QoS (Quality of Service Configuration Menu) The ES3000 implements IEEE 802.1p Quality of Service (QoS) processing. QoS policies examine packets and classify them. The classification is used to drop packets or to assign markers to the packets.
3-66 ES3000 User Guide 3.5.47 Main Menu->QoS->Policy Config. Differentiated Service (DiffServ) uses a priority tag in the data packet (the Differentiated Service Code Point or DSCP) to determine the priority of the packet. The Policy Config menu maps the various DSCP tags to the two four queues on each port.
3-67 Administration Console Access 3.5.48 Main Menu->QoS->Queue Config. Port Prioritization allows the user to specify which ports have greater precedence in situations where traffic can be buffered in the switch due to congestion. Traffic that comes in on ports with a setting of high is transmitted before those that come in on a port with a normal setting.
3-68 ES3000 User Guide 3.5.49 Main Menu->QoS->Queue Config.->Queue Mapping The priority tag of each packet is divided into four queues on each output port within the Queue Mapping screen. The default setup each queue assuming two priorities sequentially. Configure the traffic class as needed. Quality of Service works only after the QoS status is Enabled...
Use the Rate Limiting screen to configure the broadcast storm control to enable or disable traffic control in the networks. Rate limiting, or storm control, prevents ports on the ES3000 switch from being overwhelmed by a broadcast, unicast, or multicast storm. A storm results when packets flood the LAN, which degrades network performance.
3-70 ES3000 User Guide 3.5.51 Main Menu->QoS->Rate Limiting->Broadcast Storm Control Configuration Menu Use the Storm Control Configuration page to set the limitation of broadcast, multicast, and/or DLF (Destination Look Failure) packets delivered to the CPU. Each kind of packet determines the network load.
The CLI (Command Line Interface) provides a means to configure the system for advanced users. Symbol recommends the CLI for adavanced users who do not need to navigae a menu-driven interface to configure the ES3000 Ethernet Switch. See Chapter 5 for detailed information.
Web Management Access The Symbol ES3000 Managed Switch provides a built-in browser interface for configuring and managing remotely using a standard Web browser such as Microsoft Internet Explorer or Netscape Navigator. The browser interface also allows for system monitoring of the Switch. The help page covers many of the basic functions and features of the switch and its Web interface.
Ports VLANs IGMP Snooping Spanning Tree Each submenu item has its own set of options for configuring the ES3000 Ethernet Switch by a specific functional area. Configure IP address information, management access and user information Configure port security, PoE and link aggregation.
System Admin->Tools->Save Configuration on page 4-14. Use the Save Configuration page to save all updates to the Web interface. Once updates are made, refer back to the target configuration page to ensure the updates have been implemented by the ES3000 Ethernet Switch.
ES3000 User Guide 4.2.1 System Admin->Access->IP Configuration The IP Configuration menu manages the IP related information of the system. To manually configure the IP address: 1. Enter a site-specific IP address, Gateway address and Net mask. 2. Click Apply to change the IP settings.
4.2.2 System Admin->Access->Management Access Use the Management Access screen to enable or disable the Web, SNMP and/or telnet interfaces. Use the Management Access screen to change the user name and password. User names and passwords are case sensitive and can be up to 20 characters long. Enable/Disable the Web interface from the Management Access screen.
ES3000 User Guide 4.2.3 System Admin->Access->User Name Password Change The user name and password can be up to 20 characters and are case sensitive. The password entered is encrypted on the screen and displays as a sequence of asterisks (*). Use the User Name Password Change screen to: •...
PoE power usage over threshold or network topology changes. Manage the ES3000 by SNMP from a network management station. Configure the switch to participate in the SNMP community and add the host agent to the host table. This prevents unauthorized SNMP access to the switch from non-approved SNMP hosts.
ES3000 User Guide 4.2.5 System Admin->SNMP Configuration->SNMP Information Create up to ten different community strings with either READ or READ-WRITE privileges. Set the strings prior to setting host access, as the host table depends on the existence of community strings.
Web Management Access 4.2.6 System Admin->SNMP Configuration->Authorized Managers Use the SNMP Host Table to add and remove hosts from access rights granted to community groups. The permissions GET, SET, and TRAP are assigned to a community name. These permissions are assigned to individual machines by adding those machines and their IP address to the appropriate community string.
4-10 ES3000 User Guide 4.2.7 System Admin->SNMP Configuration->Trap Receiver Authentication Traps When enabled, the system generates an SNMP trap upon a host authorization failure. The failure occurs when a host tries to gain access to the system but the host IP is not in the SNMP host table.
4-12 ES3000 User Guide 4.2.8 System Admin->Tools->Software Upgrade Use the Software Upgrade menu to upgrade the software for the switch through TFTP protocol, reboot the system with variety options and save configuration to Flash and View Statistic information. If new improvements to the software that runs the switch become available, use the Software Upgrade menu to upgrade the switch to the new software release.
4.2.9 System Admin->Tools->System Reboot Two options are provided when the system reboots, Reboot Status: Stop: Shutdown the system Start: Reboot the system Reboot Type Normal: Boot up with runtime configuration Factory Default: Boot up with factory default configuration 4-13 Web Management Access...
Configuration page as the central location to save changes made within the ES3000 Ethernet Switch Web interface. Once changes have been saved to the system using the Save Configuration page, refer back to the target configuration screen to ensure the changes have been implemented by the ES3000 Ethernet Switch.
4.2.11 System Admin->Tools->SNTP Configuration Use the following editable functions in the SNTP Configuration page are required: Set SNTP Server IP Simple Network Time Protocol, user can enter SNTP server IP to get into it. Set SNTP Interval Set up SNTP polling interval (1min for example). Set Time Zone Set up the time zone, like Casablance, Monrovia 4-15...
4-16 ES3000 User Guide 4.2.12 System Admin->Tools->System Log Menu Use the System Log Menu to trace the entry when and from where, then users can know the entry system history. Select Clear to clean the table.
4.2.13 System Admin->Tools->TFTP Configuration File Upload/ Download There are fours functions in the page TFTP Configuration File Upload/Download page: Set TFTP Server IP Address Set Configuration File Name Upload Configuration File Download Configuration File enter the server IP address to get the TFTP server. enter the file name that they want to config upload the configuration file download configuration file from a TFTP server...
4-18 ES3000 User Guide 4.2.14 System Admin->Ports->Port Status and Configuration Configure the characteristics related to link operations. All of the parameters on the Port Status and Configuration page are toggle settings. To change, or toggle, between options, hit Ctrl-M to move the curser to the ports field and strike the space bar when the appropriate option is highlighted.
Page 115
4-19 Web Management Access Enabling the GBIC connector for a Gigabit Ethernet port disables the built-in 1000BASE-T port. GBIC ports do not support Auto Negotiation. Manually configure the GBIC port. The default values are 1000 Mbps, full duplex.
4-20 ES3000 User Guide 4.2.15 System Admin->Ports->Port Counters Use the Port Counters screen to select the target port for displaying port information. Selected a target port form the Select Port pull-down menu and click Apply to display counter information for that port.
4.2.16 System Admin->Ports->IP (Port) Mirroring Port mirroring allows one port on the ES3000 to see all of the packets passing through any other port on the switch. Usually, a network analyzer is attached to the monitoring port so the network administrator can debug problems with the monitored port.
4-22 ES3000 User Guide 4.2.17 System Admin->Ports->Port Security ->Radius Configuration Use the Radius Configuration screen to configure switch advanced security settings to limit the access to management interfaces. There are two advanced security options beyond the basic password protection: RADIUS client authentication and 802.1X port authentication. If a RADIUS server is on the network, configure the authentication of management access through a RADIUS server.
4.2.18 System Admin->Ports->Port Security ->802.1x Configuration Use the 802.1x screen to: • Create the NAS ID used for connection • Configure the port to pass security to • Set port control type • Set the operational or administrative control direction •...
The ES3000 has a maximum PoE power budget of 170 watts. This is enough to supply 7 watts to all 24 PoE ports on the switch. The switch supplies a maximum of 16.5 watts per port.When a new powered device is connected to a port, the ES3000 switch checks whether enough power remains in the power budget to support the device.
4-25 Web Management Access 4.2.20 System Admin->Ports->Power over Ethernet->Port Configuration The Port Configuration page provides a port-by-port selection option for the PoE function. To set up administration, priority and/or limit, apply one or more ports simultaneously. There are 8 parameters for each port. 3 of the 8 parameters are user configurable, the other 5 are values assigned by the system to display information on the power supplied.
Page 122
4-26 ES3000 User Guide Down: Status: The status of the port. When a power device is connected and power is provided, Powered is displayed for the port. Class: 4 classes are specified within IEEE 802.3af to help determine the maximum number of PDs the system can support.
Page 123
Example: The switch ports could require a PoE scheme similar to the following: Port 1, 5 2, 6 3, 7 1. The administrator needs to click ports 1 and 5 and choose Disable. 2. Select Apply to disable ports 1 and 5. 3.
The power supply in the ES3000 Ethernet Switch is 225W. 170W is dedicated to the powered devices as a power budget. The switch is capable of providing power to 11 devices requiring a maximum power of 15.4W...
Power Management Method: When the power budget is running out as more powered · Maximum power allowed for powered devices. 170W for the ES3000 switch. The powered device detection method. Older devices could contain a capacitor. If this option is disabled (default), capacitor devices are not detected and powered.
Page 126
4-30 ES3000 User Guide · Power Usage Threshold: • Low priority port will be shutdown. When a newly powered device is connected, the switch searches among its currently connected and powered devices. If any port has lower priority than the newly connected...
Page 127
1. The flowchart assumes capacitor detection is enabled, otherwise, the path is No. 2. When selecting a priority-based power supply scheme, the "Yes" flow applies. Otherwise, the sequence of connections applies. 3. When the power consumption percentage is over the threshold, an SNMP trap is issued to corresponding receivers.
Page 128
4-32 ES3000 User Guide 3. Powered Device (capacitor). If capacitor detection enabled is not selected for a global configuration, go to Power Not Provided (step 13). (this step is combined with next step to make the flow chart clearly). 4. Check the connected device requirement on power based on capacitor. If it is not a powered device, go to Power Not Provided (step 13).
4-33 Web Management Access 4.2.23 System Admin->Ports->Link Aggregation->System Priority Enter a number between 0-65535 to set up the system priority for the link aggregation. Click Apply to implement. Link Aggregation allows multiple links between switches to work as one virtual link aggregate link).
4-34 ES3000 User Guide 4.2.24 System Admin->Ports->Link Aggregation->Add Group Use Link Aggregation to configure multiple links between switches to work as one virtual link (aggregate link). Link Aggregation can be defined for similar port types only. A 10/100 port cannot form a Port Link Aggregation with a gigabit port.
4-35 Web Management Access 4.2.25 System Admin->Ports->Link Aggregation->Set Port Priority Use the Set Port Priority screen to specify the ports with greater precedence in situations where traffic could be buffered in the switch due to congestion. Traffic on ports with a high priority is transmitted before traffic with a low priority setting.
4-36 ES3000 User Guide 4.2.26 VLANs->VLAN Config->VLANs by VLAN-ID A Virtual Local Area Network (VLAN) is a means to electronically separate ports on the same switch from a single broadcast domain into separate broadcast domains. Users can group by logical function instead of physical location.
4.2.27 VLANs->VLAN Config->Creating/Modify VLAN To create a VLAN, select the Create/Modify VLAN menu item. For advanced users, refer Chapter 5 To create a VLAN: 1. Specify a VLAN ID (between 2 - 4094) for the new target VLAN within the VLAN ID field. VLAN #1 cannot be deleted under any circumstance.
Page 134
4-38 ES3000 User Guide 4. Add Ports as untagged or tagged members, or select the Forbidden checkbox for the target port to prevent dynamic membership via GVRP. If a port is added to multiple VLANs as a tagged member, that port becomes an 802.1Q trunk port.
4.2.28 VLANs->VLAN Config->Create/Modify 802.1Q Trunk IEEE 802.1Q is the standard for encapsulating packets and marking them with VLAN information before sending them across a link between two switches. Use the Create/Modify 802.1Q Trunk screen to modify the encapsulation behavior on a port-by-port basis rather than on a VLAN-by-VLAN basis.
4.2.29 VLANs->VLAN Config->VLANs by Port Use the VLAN by Port screen to configure VLAN port information on a port-by-port basis. 1. Select Modify to configure VLAN information for the target port. 2. Configure trunk ports and VLAN membership as required. In the example below, Ports 25-26 are 802.1Q trunk ports with VLANs 1-2 as members.
The ES3000 can “snoop” the messaging protocol to keep track of multicast groups and to insure multicast traffic is sent only to the appropriate ports within a VLAN. In networks where multimedia applications generate multicast traffic, IGMP can reduce unnecessary bandwidth by limiting traffic forwarding otherwise broadcast to the network.
Page 139
4-43 Web Management Access The page displays: IGMP Snooping Status: The global enabled or disabled status of IGMP snooping. The administrator can select Enabled or Disabled. When Enabled, the switch detects IGMP queries, reports, and manages multicast traffic through the switch for all VLANs. When Disabled, the switch forwards traffic and disregards IGMP requests.
4-44 ES3000 User Guide 4.2.31 IGMP Snooping->IGMP Snooping Config->VLAN Filter Table Use the VLAN Filter Table to define the VLAN not to be included in the set Vlan Filter. Enter the VLAN ID (1-4094) in the VLAN ID field. Ensure the Status field is set to Filter. Click Apply to remove...
4-45 Web Management Access 4.2.32 IGMP Snooping->IGMP Snooping Config->Router Port Table The Router Port Table page displays the ports in VLANs connected to the router. User can snoop the package from router side in these ports.
ES3000 User Guide 4.2.33 Spanning Tree->Forwarding DB->Add Static FDB Entries The ES3000 can be configured to use one of three spanning tree protocols. Spanning Tree Protocol (STP) is compatible with legacy equipment. Rapid Spanning Tree Protocol (RSTP) is significantly faster than STP.
4-47 Web Management Access 4.2.34 Spanning Tree->Forwarding DB->FDB by Port/MAC/VLAN When the number of hosts increase on a network, the Forwarding Database grows sharply. Looking for a MAC address can become time-consuming work. The system provides three different ways for an administrator to look over MAC addresses;...
ES3000 User Guide 4.2.35 Spanning Tree->MSTP Configuration->MSTP Config The ES3000 Ethernet switch is compliant with IEEE802.1D Spanning Tree Protocol (STP), IEEE 802.1w Rapid Spanning Tree, and IEEE 802.1s Multiple Spanning Tree. STP ensures only one path is active at a time between any two network nodes. There can more than one physical path between any two nodes, forming a loop, either created for redundancy or by accident.
4-50 ES3000 User Guide 4.2.36 Spanning Tree->MSTP Configuration->CIST Configuration Status Hello Time: Time between configuration messages sent by the Spanning Tree algorithm Maximum Age Amount of time before a configuration message is discarded by the system Forward Delay Amount of time system spends transitioning from the learning to listening to...
4-52 ES3000 User Guide 4.2.37 Spanning Tree->MSTP Configuration->CIST Basic Port Configuration Use the CIST Basic Port Configuration screen to set up the port, priority and path cost and enable/ disable the port STP status. Use the Port menu to define the target port. Use the Priority field to set...
4-53 Web Management Access 4.2.38 Spanning Tree->MSTP Configuration->CIST Advanced Port Configuration Use the CIST Advanced Port Configuration screen to configure the port edge status, port P-TO-P status, and restart port migration to prevent the wrong link. Click Apply to implement the changes.
4-54 ES3000 User Guide 4.2.39 Spanning Tree->MSTP Configuration->MSTP Instance Configuration One instance can have more than one VLAN. Use the MSTP In stance Configuration page to add or remove a VLAN, or remove a MST and Instance Port configuration. Specify a single instance (a range of instances separated by a hyphen) or a series of instances separated by a comma.
4-55 Web Management Access 4.2.40 Spanning Tree->MSTP Configuration->Designated Topology Information Use the Designated Topology Information page to display designated topology information for each port.
4-56 ES3000 User Guide 4.2.41 Spanning Tree->MSTP Configuration->Regional Topology Information Use the Regional Topology Information page to display regional topology information for each port.
CoS priority or DSCP value. The queues are serviced using a weighted round robin algorithm. There are two means to differentiate ES3000 traffic, VLAN tags or Differentiated Service Code Points (DSCP) in the header of packets. By using either VLAN tags (port-based) or DSCP (DiffServ), configure the switch so specific traffic takes priority over less critical traffic.
Page 154
4-58 ES3000 User Guide Nine parameters are available to classify a data packet, including the Source Mac Address, Destination Mac Address, VLAN ID, DSCP, Protocol, Source IP Address, Destination IP Address, Source Layer 4 Port Number, and Destination Layer 4 Port Number.
Page 155
Destination MAC: The destination MAC address on a data packet. The format is same as source MAC address. VLAN ID: The ID of a VLAN. The value is between 1 and 4094. 0 is used to indicate no VLAN and 4095 is reserved for system use. DSCP: Differentiated Service Code Point has 6 bits and the value is between 0 and 63.
Page 156
4-60 ES3000 User Guide Source IP Address: Destination IP Address: Source Layer 4 Port: Destination Layer 4 Port: ICMP is the basic ping command. When a ping command is issued, the packet sent is an ICMP echo packet. The packet waits for the ICMP echo reply packet to complete the ping process.
4.2.43 QoS->Policy Configuration->Create In-Profile Action The In-Profile Action applies to the ingress data packets. Like the Classifier, it has a unique ID as index. The index is a number between 1 and 65535. Four actions are possible: Action Drop Policed-dscp Policed-precedence Policed-cos Description...
4-62 ES3000 User Guide The precedence and CoS (Class of Service) has three bits. The value is between 0 and 7. Higher values have priority. DSCP combines Precedence and ToS (Type of Service). DSCP is 6 bits long for the priority and the value ranges from 0 and 63.
4.2.45 QoS->Policy Configuration->Create No-Match Action Committed Rate: The unit for 10/100Mbps port is 1Mbits and 1000Mbps ports is 8Mbits. When the data rate higher than committed rate, the data is sent as best effort. In other words, the packet is delivered when the bandwidth is available.
4-64 ES3000 User Guide 4.2.46 QoS->Policy Configuration->Create Port List Use the Create Port List page to configure the QoS group by ID, and key in the port in the port list to have the same priority. Select the ports for any Classifier and Action. As shown in the following figure, we have two port lists available and creating the 3rd list which consists of ports 2, 4, 6, and 8 to 12.
4-65 Web Management Access 4.2.47 QoS->Policy Configuration->Create Policy Use the Create Policy screen to set up the QoS group by Policy ID, and key in the policy (1-65535) by classifier, in profile action, no match action, out profile action, and data path ID in the blank space. View the setting report by clicking Apply.
4-66 ES3000 User Guide 4.2.48 QoS->Policy Configuration->Policy Sequence Select Policy Sequence from the Policy Configuration menu to launch the Display Policy Sequence By Port page. Select Display by Index order to display the policy index for the selected port. Select...
Page 163
4-67 Web Management Access Examples with Applied Policies When all policies are enabled, use a ping command to check the packet transmissions between switch 172.16.5.219 and host 172.16.5.56 The ping receives responses regardless of whether these policies are enabled or disabled. In other words, these policies are not applied to traffic to the CPU. The traffic between host 172.16.5.56 and switch 172.16.5.218 is verified (in this example).
4-69 Web Management Access 4.2.49 QoS->Queue Config->Queue Mapping The priority tag of each packet is divided into four queues on each output port. The default setup is each queue taking two priorities sequentially. The Administrator can configure the traffic class as needed.
Page 166
4-70 ES3000 User Guide An Administrator can modify the traffic mapping as required. Quality of Service works only after the QoS status is enabled. After the modification, set the QoS Status to Enabled and click Apply to implement the changes.
Web Management Access 4.2.50 QoS->Rate Limiting->Storm Control Configuration Rate limiting, or storm control, prevents ports on the ES3000 switch from being overwhelmed by a broadcast, unicast, or multicast storm. A storm results when packets flood the LAN, which degrades network performance. With rate limiting enabled, the switch monitors incoming traffic by counting packets over a period of time.
Page 168
4-72 ES3000 User Guide There are three kinds of storm control; DLF, Broadcast, and Multicast. DLF: Destination Look Failure packets. DLF packets are broadcast to all ports except the incoming port. Broadcast: Packets are delivered to all ports except the incoming port as DLF packets.
5.1 ES3000 Ethernet Switch Command Brief 5.1.1 Help Key Command Description abbreviated-command- Provides a list of commands that begin with a particular character string. entry<?> (No space between command and question mark.) abbreviated-command- Completes a partial command name. entry<Tab> <?>...
Command Line Interface 5.1.2 Command Hierarchy A specific value for each command mode displays at the prompt line. Use specific commands to enter or exit each command mode. The administrator can only enter command modes from specific modes and only exit to specific command modes.
Page 172
ES3000 User Guide Command Mode User EXEC(exec) Privileged EXEC(privExec) Global Configuration(config) Interface Configuration(config-if) Switch(config-if)# Prompt Enter/Exit Command Switch> Default mode, automatically enter logout or exit to quit CLI. Switch# enable to enter from User EXEC mode logout to quit CLI; disable or exit...
Page 173
Command Line Interface The prompt displays the switch name, Switch, and the current CLI command mode: • User EXEC-Switch> • Privileged EXEC-Switch # • Global Configuration-Switch (config)# • Interface Configuration-Switch (config-if)#...
Page 174
ES3000 User Guide The ESW3000 command sets are organized into the tree hierarchy. The commands, that are not in the same level of the command tree are not available until the user has navigated down to that level. In a lower level of the command tree, the user can still enter the global configuration commands that are in the top level of the command tree.
5.2 Basic Commands help The help command is in each command mode and displays a brief message about using the CLI help system. help The help command has no arguments or keywords. YNTAX ESCRIPTION The help command has no default setting. EFAULT ALUE All mode...
Page 176
ES3000 User Guide enable The enable command changes the command mode from User EXEC to privExec mode. enable The enable command has no arguments or keywords. YNTAX ESCRIPTION The enable command has no default setting. EFAULT ALUE User EXEC OMMAND...
Page 177
interface The interface command moves to the Interface Configuration (config-if) command mode. interface The interface command has no arguments or keywords. YNTAX ESCRIPTION The interface command has no default setting. EFAULT ALUE Global configuration OMMAND ODES Nortel EFERENCE XAMPLE Switch(config)# interface FastEthernet0/1 Switch(config-if)# Switch(config)# interface VLAN 1 Switch(config-if)#...
Page 178
5-10 ES3000 User Guide Use the end command to exit configuration mode. YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE exit The exit command quits to the previous mode. exit YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch#exit Switch> Switch(config-if)#exit Switch(config)# The end command has no argument.
Page 179
ping Use the ping command to display ping test information. ping <ip> <ip> IP address YNTAX ESCRIPTION The ping command has no default setting. EFAULT ALUE All command modes OMMAND ODES Nortel EFERENCE Switch Tools Configuration -> Ping Execution XAMPLE Switch# ping 172.16.3.152 Type Ctrl-C to abort.
XAMPLE Switch# copy running-config tftp 172.16.3.152 config.txt Please wait a minute. 2581 bytes data transferred! Switch# copy tftp 172.16.3.152 config.txt running-config Please wait a minute. 2581 bytes data transferred! Switch# copy running-config startup-config Use this command to save the config to NVRAM. copy running-config startup-config YNTAX ESCRIPTION...
5-14 ES3000 User Guide 5.3 Web Browser Commands ip http server Use this command to enable or disable access to the Web server embedded in the system. ip http server no ip http server YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES...
Page 183
show ip http server Use the show ip http server command to display telnet. show ip http server The show ip http server command has no arguments or keywords. YNTAX ESCRIPTION The show ip http server command has no default setting. EFAULT ALUE Privileged EXEC...
5-16 ES3000 User Guide 5.4 SNMP Commands snmp-server agent Use the snmp-server agent command to enable or disable the access to the SNMP agent embedded in the system. snmp-server agent no snmp-server agent YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE...
snmp-server location To set the system location string. snmp-server location <string> no snmp-server location A string of length with 50 characters maximum YNTAX ESCRIPTION No system location string is set by default EFAULT ALUE Global configuration OMMAND ODES Cisco EFERENCE Basic Switch Configuration Menu->System Administration->Set System Location XAMPLE...
5-18 ES3000 User Guide XAMPLE !Set system Contact Information "MIS_1" Switch(config)# snmp-server contact MIS_1 Switch(config)# !Clean system Contact Information to default Switch(config)# no snmp-server contact Switch(config)# snmp-server community Use the snmp-server community command to set up the community access string for use with SNMP protocol.
!Disable SNMP manager entry index-4 Switch(config)# no snmp-server community 4 Switch(config)# snmp-server host Use the snmp-server host command to set up the recipient of SNMP notification operation. snmp-server host <index> type<traptype><ip> trap <string> no snmp-server host <index> type<traptype><ip> trap <string> <index>...
Page 188
5-20 ES3000 User Guide snmp-server enable traps Use the snmp-server enable traps command to enable or disable the specified SNMP notification. snmp-server enable traps <notification-type> <notification-option> no snmp-server enable traps <notification-type> <notification-option> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE <notification-type>...
Page 189
show snmp Use the show snmp command to display snmp trap-receivers information. show snmp The show snmp command has no arguments or keywords. YNTAX ESCRIPTION The show snmp command has no default setting. EFAULT ALUE Privileged EXEC OMMAND ODES Cisco EFERENCE Basic Switch Configuration ->...
5-22 ES3000 User Guide 5.5 Basic System Management Commands hostname Use the hostname command to specify the host name for the system. hostname <string> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE !Set system name "switch_1" Switch(config)# hostname switch_1 Switch(config)#...
Page 191
XAMPLE Switch# show sys-info System up for Boot Code Version : 1.0.0.07 / Feb 16 2004 14:35:55 Runtime Code Version : 1.0.7.05 / Apr 01 2004 09:33:00 Hardware Information Version : Version1 DRAM Size : 32MB Fixed Baud Rate : 9600bps Flash Size : 8MB Administration Information...
5-24 ES3000 User Guide console inactivity-timer Use the console inactivity-timer command to specify an inactivity timeout value for the console. console inactivity-timer <min> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE ! Set console timeout 5min Switch(config)# console inactivity-timer 5...
XAMPLE Switch# show console Console UI Idle Timeout: 5 Min. Console -------- Active Switch# telnet-server enable Use the telnet-server command to enable or disable access to the telnet server. telnet-server enable no telnet-server The telnet-server command has no argument. YNTAX ESCRIPTION The feature is enabled by default.
5-26 ES3000 User Guide telnet-server inactivity-timer Use the telnet-server inactivity-timer command to specify an inactivity timeout value for telnet server. telnet-server inactivity-timer <min> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE ! Set telnet timeout 5min Switch(config)# telnet-server inactivity-timer 5...
XAMPLE Switch# show telnet-server Telnet UI Idle Timeout: 5 Min. Telnet Server --------------- enabled Switch# 5.6 IP Addressing Commands ip address Use the ip address command to specify an IP address and subnet mask for the system. ip address <ip> <mask> <ip>...
Page 196
5-28 ES3000 User Guide ip address dhcp Use the ip address dhcp command to enable or disable the system to acquire its IP address through DHCP. ip address dhcp YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE !Set IP address use dhcp...
Page 197
show ip conf Use the show ip conf command to display IP configurations. show ip conf The show ip conf command has no arguments or keywords. YNTAX ESCRIPTION The show ip conf command has no default setting. EFAULT ALUE Privileged EXEC OMMAND ODES None...
5-30 ES3000 User Guide 5.7 Security Commands username Use the username command to specify the user name and password for logging into the system. username name <string> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE ! Set username "admin" password "delta"...
5.8 Layer-2 Interface Commands shutdown Use the shutdown command to enable or disable a port. interface <port> shutdown no shutdown <port> YNTAX ESCRIPTION The shutdown feature is enabled by default. EFAULT ALUE Interface configuration OMMAND ODES Cisco EFERENCE Basic Switch Configuration Menu->Port->Set Status XAMPLE ! Enable port-3 Switch(config)# interface fastethernet0/3...
5-32 ES3000 User Guide speed-duplex Use the speed-duplex command to configure the speed and duplex mode for a port. interface <port> speed-duplex <option> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE ! set port-3 speed 100 duplex full Switch(config)# interface fastethernet0/3...
flow-control Use the flow-control command to enable or disable the flow control for a port. interface <port> flow-control no flow-control <port> YNTAX ESCRIPTION The flow control feature is enabled by default. EFAULT ALUE Interface configuration OMMAND ODES Cisco EFERENCE Basic Switch Configuration Menu->Port->Set Flow control XAMPLE ! Enable Flow control port-3 Switch(config)# interface fastethernet0/3...
Page 202
5-34 ES3000 User Guide XAMPLE Switch# show interface Port Trunk ---- ----- 1/10 1/11 1/12 Type Link Status -------- ----- -------- 10/100TX Down Enabled 10/100TX Down Enabled 10/100TX Down Enabled 10/100TX Down Enabled 10/100TX Down Enabled 10/100TX Down Enabled 10/100TX...
Page 203
show interface counters Use the show interface counters command to display interface statistics. show interface counters <port> <port> YNTAX ESCRIPTION The feature is disabled by default. EFAULT ALUE Privileged EXEC OMMAND ODES EFERENCE Main Menu -> Statistics Menu XAMPLE Switch# show interface counters fastethernet0/2 Total RX Bytes Total RX Pkts 64-Byte Pkts...
Page 204
5-36 ES3000 User Guide XAMPLE Switch# show interface counters errors fastethernet0/2 CRC/Align Errors Fragments Switch # port monitor Use the port monitor command to configure a port to monitor traffic from another port. interface <port> port monitor <port> direction <direction>...
Page 205
XAMPLE ! Set port-2 Monitoring Port , port-4 Monitored Port, direction is both. Switch(config)# interface fastethernet0/2 Switch(config-if)# port monitor fastethernet0/4 direction both Switch(config-if)# !Disable port-2 Monitoring Port , port-4 Monitored Port Switch(config)# interface fastethernet0/2 Switch(config-if)# no port monitor Switch(config-if)# show monitor Use the show monitor command to display port monitoring information.
5-38 ES3000 User Guide storm-control threshold Use the storm-control threshold command to configure the mulitcast storm control for a port. storm-control threshold<threshold> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE ! Set rate 3000 packets per second Switch(config)# strom-control threshold 3000 Switch(config)# <threshold>...
storm-control broadcast Use the strom-control broadcast command to configure the broadcast storm control for a port. storm-control broadcast no storm-control broadcast The storm-control broadcast command has no arguments or keywords. YNTAX ESCRIPTION The default value is disabled. EFAULT ALUE Global configuration OMMAND ODES Cisco...
5-40 ES3000 User Guide ! Disable multicast storm control Switch(config)# no storm-control mutlicast storm-control unicast Use the storm-control unicast command to configure the unicast(DLF) storm control for a port. storm-control unicast no storm-control unicast YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES...
show storm-control Use the show storm-control command to display storm-control status. show storm-control The show storm-control command has no arguments or keywords. YNTAX ESCRIPTION The show storm-control command has no default setting. EFAULT ALUE Privileged EXEC OMMAND ODES Cisco EFERENCE Basic Switch Configuration Menu ->...
5-42 ES3000 User Guide 5.9 Link Aggregation Commands lacp Use the lacp command to add ports to a port LACP group or delete ports from the group. lacp <trunkKEY> <port list> <mode> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE <trunkKEY>...
XAMPLE ! Set port-1 port-2 port-3 link aggregation, and LACP key =10 and mode = active Switch(config)# lacp 10 1,2,3 active Switch(config)# ! Set port-10-13 link aggregation,and LACP key =42 and mode = passive Switch(config)# lacp 42 10-13 passive Switch(config)# ! Set port-5-7 link aggregation,and LACP key =42 and mode = manual Switch(config)# lacp 12 5-7 manual Switch(config)#...
5-44 ES3000 User Guide lacp port-priority Use the lacp port-priority command to LACP port priority. lacp port-priority <priority-value> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE ! set port 3 port-priority 40 Switch(config)# interface fastethernet0/3 Switch(config-if)# lacp port-priority 40 Switch(config-if)# show lacp Use the show lacp command to display link aggregation information.
Page 213
XAMPLE Switch# show lacp System Priority : 40000 Mode Member post list ---- -------- --------- Manual Active 4,5,6 Switch# Switch# show lacp 2 System Priority : 40000 Key 2 Attached port list ---- -------- --------- Switch# Command Line Interface --------- --------- --------- ---------...
mac-address-table aging-time Use the mac-address-table aging-time command to control aging time for dynamic MAC addresses. mac-address-table aging-time<sec> Integer ranges from 10 - 1000000. YNTAX ESCRIPTION Default value is 300. EFAULT ALUE Global configuration OMMAND ODES Cisco EFERENCE Basic Switch Configuration Menu -> Forwarding Database-> Set Age-Out time XAMPLE ! Set Age-Out time 300 sec...
5-48 ES3000 User Guide show mac-address-table mac Use the show mac-address-table mac command to list MAC addresses by individual MAC address. show mac-address-table mac YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch# show mac-address-table mac MAC Address ----------------- 00:30:AB:00:09:20...
XAMPLE Switch# show mac-address-table interface fastethernet0/26 MAC Address ----------------- 00:30:AB:00:09:20 00:30:AB:00:09:21 00:30:AB:00:09:22 00:30:AB:00:09:23 00:30:AB:00:09:24 Switch# show mac-address-table vlan Use the show mac-address-table vlan command to display the MAC address table by VLAN. show mac-address-table vlan <vlanID> <vlanID> YNTAX ESCRIPTION The show mac-address-table vlan command has no default setting. EFAULT ALUE Privileged EXEC...
5-50 ES3000 User Guide show mac-address-table static Use the show mac-address-table static command to display the MAC address table by static. show mac-address-table static YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch# show mac-address-table static MAC Address --------------------- 00:00:A0:21:00:11 Switch# The c command has no arguments or keywords.
5.11 Multiple Spanning Tree Commands spanning-tree mst Use the spanning-tree mst command to enable or disable multiple spanning tree. spanning-tree mst enable spanning-tree mst disable The spanning-tree mst command has no arguments or keywords. YNTAX ESCRIPTION EFAULT ALUE Global configuration OMMAND ODES EFERENCE...
5-52 ES3000 User Guide XAMPLE !Cnfigure the MSTP name “Symbol” Switch(config)# spanning-tree mst name Symbol Switch(config)# spanning-tree mst revision Use the spanning-tree mst revision command to configure the mst revision number. spanning-tree mst revison <revision> YNTAX ESCRIPTION EFAULT ALUE OMMAND...
5-54 ES3000 User Guide XAMPLE !Set CIST priority 40960 Switch(config)# spanning-tree mst priority 40960 Switch(config)# spanning-tree mst max-age Use the spanning-tree mst max-age command to configure the value of CIST bridge Max Age. spanning-tree mst max-age <seconds> YNTAX ESCRIPTION EFAULT...
5-58 ES3000 User Guide ! Disable MSTP on port 4 Switch(config)# interface fastethernet0/4 Switch(config-if)# spanning-tree mst shutdown Switch(config)# spanning-tree mst port-priority Use the spanning-tree mst port priority command to configure CIST Port Priority. spanning-tree mst port-priority <priority> YNTAX ESCRIPTION EFAULT...
Page 227
XAMPLE ! Set CIST port path cost 4000 on port 4 Switch(config)# interface fastethernet0/4 Switch(config-if)# spanning-tree mst cost 4000 Switch(config-if)# spanning-tree mst init-migration Init Protocol Migration on the Port in MSTP. spanning-tree mst init-migration The spanning-tree mst init-migration command has no arguments or YNTAX ESCRIPTION keywords.
5-60 ES3000 User Guide spanning-tree mst edgeport Use the spanning-tree mst edgeport command to configure the Edge Port Status in MSTP. spanning-tree mst edgeport YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE ! Set Edge port TRUE on port 4...
Page 229
EFAULT ALUE Interface configuration OMMAND ODES EFERENCE XAMPLE ! Force p2p false on port 4 Switch(config)# interface fastethernet0/4 Switch(config-if)# spanning-tree mst point-to-point forcefalse Switch(config-if)# spanning-tree mst instance shutdown Use the spanning-tree mst instance shutdown command to Enable/Disable MSTP function on the interface.
5-62 ES3000 User Guide spanning-tree mst instance port-priority Use the spanning-tree mst instance port-priority command to configure instance Port Priority. spanning-tree mst instance<instance-id> port-priority <priority> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE ! Set CIST port priority 64 on port 4 for instance 8...
show spanning-tree mst configuration Use the show spanning-tree mst configuration command to display the MSTP configuration. show spanning-tree mst configuration The show spanning-tree mst configuration command has no arguments or YNTAX ESCRIPTION keywords. The show spanning-tree mst configuration command has no default EFAULT ALUE setting.
5-64 ES3000 User Guide show spanning-tree mst cist configuration Use this command to display the MSTP CIST configuration. show spanning-tree mst cist configuration YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch# show spanning-tree mst cist configuration Cist Root Port:...
Page 233
show spanning-tree mst cist interface Use this command to display MSTP CIST configuration information for interface. show spanning-tree mst cist interface <port list> <port list> YNTAX ESCRIPTION The show spanning-tree mst cist interface command has no default EFAULT ALUE setting. Privileged EXEC OMMAND ODES...
5-66 ES3000 User Guide show spanning-tree mst instance configuration Use this command to display MSTP CIST configuration. show spanning-tree mst <instance> configuration YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch# show spanning-tree mst 5 configuration Msti Root Port: 0...
Page 235
show spanning-tree mst instance interface Use this command to display MSTP CIST configuration information for interface. show spanning-tree mst <instance> interface <port list> <instance> YNTAX ESCRIPTION <port list> The show spanning-tree mst instance interface command has no default EFAULT ALUE setting.
5-68 ES3000 User Guide 5.12 IGMP Snooping Commands ip igmp snooping Use the ip igmp snooping command to enable or disable IGMP snooping as implemented in the system. ip igmp snooping no ip igmp snooping YNTAX ESCRIPTION EFAULT ALUE OMMAND...
Page 237
Advanced Switch Configuration Menu->IGMP Snooping->Set Host Port Aged Tim, Set Router Port Aged Time XAMPLE !Enable igmp snooping router port age out time 300 sec Switch(config)# ip igmp snooping aging-time router 300 Switch(config)# !Enable igmp snooping host port age out time 300 sec Switch(config)# ip igmp snooping aging-time host 300 Switch(config)# ip igmp snooping report-forward-interval...
5-70 ES3000 User Guide ip igmp snooping vlan-filter vlan Use this command to filter IGMP snooping on a specific interface in the system. ip igmp snooping vlan-filter vlan <vlanID> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE !Filt igmp snooping on vlan1...
XAMPLE Switch# show ip igmp snooping conf IGMP Snooping Status Host Port Age-Out Time Router Port Age-Out Time : 300 sec Report Forward Interval Switch# show mac-address-table multicast Use this command to display Layer2 multicast entries information for VLAN. show mac-address-table multicst This command has no arguments or keywords.
5-72 ES3000 User Guide show ip igmp snooping mrouter Use this command to display multicast router port information for VLAN. show ip igmp snooping mrouter YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch# show ip igmp snooping mrouter VLAN ID...
Page 241
show ip igmp snooping vlan-filter-table Use this command to display IGMP Snooping VLAN filter information. show ip igmp snooping vlan-filter-table This command has no arguments or keywords. YNTAX ESCRIPTION This command has no default setting. EFAULT ALUE Privileged EXEC OMMAND ODES None EFERENCE...
5-74 ES3000 User Guide 5.13 VLAN Commands vlan init Use the vlan init command to remove all vlans and reset ports to default VLAN vlan init YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE !remove all vlan. Switch(config)# vlan init...
Page 243
XAMPLE ! create a 802.1Q vlan untag port 1-5, 10, 15-19 Switch(config)# interface vlan3 Switch(config-if)# name VLAN-3 Switch(config-if)# member 1-5,10,15-19 Switch(config-if)# ! modify participation (remove 10, 15-19) Switch(config)# interface vlan3 Switch(config-if)# member 1-5 Switch(config-if)# forbidden Use the forbidden command to create a new VLAN or modify an existing one in the system. interface <vlanID>...
Page 244
5-76 ES3000 User Guide management Use the management command to remove a port member from a VLAN. interface <vlanID> management YNTAX ESCRIPTION OMMAND ODES EFERENCE XAMPLE ! Set Vlan3 management Switch(config)# interface vlan3 Switch(config-if)# management Switch(config-if)# no interface Use the no interface command to delete a VLAN in the system.
Page 245
PVID Use the PVID command to configure a PVID on a port. PVID <vlanID> <vlanID> YNTAX ESCRIPTION Interface configuration OMMAND ODES None EFERENCE XAMPLE ! Set port 2 PVID 3 Switch(config)# interface fastethernet0/2 Switch(config-if)# PVID 3 Switch(config-if)# frame-type Use the frame-type command to configure the frame type on a port. frame-type <type>...
Page 246
5-78 ES3000 User Guide show vlan Use the show-vlan command to display VLAN information. show vlan <vlanID> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch# show vlan all VLAN Name ---- ----------------------------- --------- Default VLAN VLAN-2 VLAN-3 Switch# gvrp Use the gvrp command to enable or disable the GVRP protocol implemented in the system.
Page 247
XAMPLE ! Enable GVRP Switch(config)# gvrp Switch(config)# ! Disable GVRP Switch(config)# no gvrp Switch(config)# show vlan gvrp Use the show vlan gvrp command to display VLAN information. show vlan gvrp <vlanID> YNTAX ESCRIPTION The show vlan gvrp command has no default setting. EFAULT ALUE Privileged EXEC...
Page 248
5-80 ES3000 User Guide show vlan port Use the show vlan port command to display VLAN information. show vlan port YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch# show vlan port Port PVID Acceptable Frame Type ---- ---- ---------------------...
5.14 Quality of Service Commands mls qos Use the mls qos command to enable or disable the QoS implemented in the system. mls qos no mls qos The mls qos command has no argument. YNTAX ESCRIPTION The feature is disabled by default. EFAULT ALUE Global configuration...
5-82 ES3000 User Guide XAMPLE ! traffic class(Queue) 1 mapping to Priority 5 Switch(config)# priority-queue cos-map 1 5 Switch(config)# show mls qos Use the show mls qos command to display QoS information. show mls qos YNTAX ESCRIPTION EFAULT ALUE OMMAND...
Page 251
XAMPLE Switch# show priority-queue cos-map Pritority Traffic Class --------- ------------- Switch# 5-83 Command Line Interface...
XAMPLE ! Create a classifier Index:23, source MAC address: 00:00:01:02:03:04 Vlan ID is 40 Switch(config)# diffserv classifier 23 src-mac 00:00:01:02:03:04 vlan-id Switch(config)# ! delete a classifier Index 23 Switch(config)# no diffserv classifier 23 Switch(config)# diffserv inprofile Use the diffserv inprofile command to configure in-profile action for diffserv. diffserv inprofile <index>...
Page 254
5-86 ES3000 User Guide diffserv nomatch Use the diffserv nomatch command to configure nomatch action for diffserv. diffserv nomatch <index> [drop | policed-dscp <ds> | precedence <precedence> | cos <cos>] YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE ! Create a no-match Index:2 , replace COS value to 3...
diffserv outprofile Use the diffserv outprofile command to configure the out-profile for diffserv. diffserv outprofile <index> committed-rate<unit> burst-size<volume> [drop | dscp <ds>] <index> YNTAX ESCRIPTION <meter-id> <ds> EFAULT ALUE Global configuration command OMMAND ODES EFERENCE XAMPLE ! Create a out-profile Index 4, set committed-rate to 23, burst-size 4 and out-profile action drop.
5-88 ES3000 User Guide XAMPLE ! Create a portlist Index 5, set port 3-7 . Switch(config)# diffserv portlist 5 3-7 Switch(config)# ! delete a port-list 5 Switch(config)# no diffserv portlist 5 Switch(config)# diffserv policy Use the diffserv policy command to configure the policy for diffserv.
Page 257
! delete a policy Index 5 Switch(config)# no diffserv policy 5 Switch(config)# show diffserv classifier Use the show diffserv classifier command to display diffserv classifier information. show diffserv classifier The show diffserv classifier command has no arguments or keywords. YNTAX ESCRIPTION EFAULT ALUE...
5-90 ES3000 User Guide show diffserv inprofile Use the diffserv inprofile command to display the diffserv in-profile information. show diffserv inprofile YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch# show diffserv inprofile In-Profile Action: Index Action ------------------------------------ policed-dscp Switch# show diffserv outprofile Use the show diffserv outprofile command to display diffserv out-profile information.
show diffserv portlist Use the show diffserv portlist command to display diffserv portlist information. show diffserv portlist The show diffserv portlist command has no arguments or keywords. YNTAX ESCRIPTION EFAULT ALUE Privileged EXEC OMMAND ODES EFERENCE XAMPLE Switch# show diffserv portlist Portlist: Index Portlist ----- --------------------------------------------------------------...
Page 260
5-92 ES3000 User Guide show diffserv policy Use the show diffserv policy command to display diffserv policy information. show diffserv policy [<index>] YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch# show diffserv policy all Policy : Index Classifier Precedence In-Profile No-Match Out-Profile PortList Status -...
Page 261
show diffserv policy prcedence port Use this command to show diffserv policy precedence by port information. show diffserv policy-precedence port<port num> [sort index/precedence] The command has no arguments or keywords. YNTAX ESCRIPTION EFAULT ALUE Privileged EXEC OMMAND ODES EFERENCE XAMPLE Switch# show diffserv policy-precedence port 5 sort precedence Selected Port Number: 5 Precedence...
5-94 ES3000 User Guide 5.16 802.1x Commands dot1x radius Use the dot1x nas-id command to set 802.1x admin status. dot1x radius <NASID> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE ! NAS ID "dot1x_auth" Switch(config)# dot1x radius dot1x_auth Switch(config)# dot1x port-control Use the dot1x port-control command to set 802.1x port control status.
Cisco EFERENCE XAMPLE ! set port-control auto on port 5 Switch(config)# interface fastethernet0/5 Switch(config-if)# dot1x port-control auto Switch(config)# dot1x re-authentication Use the dot1x re-authentication command to set 802.1x port re-authentication. dot1x re-authentication no dot1x re-authentication The dot1x re-authentication command has no arguments or keywords. YNTAX ESCRIPTION EFAULT...
5-96 ES3000 User Guide dot1x timeout re-authperiod Use this command to set the number of seconds between re-authentication attempts. The command affects the behavior of the switch only if periodic re-authentication is enabled. dot1x timeout re-authperiod <minute> YNTAX ESCRIPTION EFAULT...
dot1x timeout quiet-period Use this command to set the number of seconds the switch remains in quiet state following a failed authentication exchange with the client. dot1x timeout quiet-period <second> <second> YNTAX ESCRIPTION EFAULT ALUE Interface configuration OMMAND ODES Cisco EFERENCE XAMPLE ! Set quiet period time 60 sec on port 7...
5-98 ES3000 User Guide dot1x timeout tx-period Use this command to set the number of seconds the switch waits for a response to an EAP-request/identity frame from the client before retransmitting the request. dot1x timeout tx-period <second> YNTAX ESCRIPTION EFAULT...
dot1x re-authenticate Use this command to re-authenticate on an 802.1X-authorized port. dot1x re-authenticate The dot1x re-authenticate command has no arguments or keywords. YNTAX ESCRIPTION EFAULT ALUE Interface configuration OMMAND ODES Cisco EFERENCE XAMPLE ! re-authenticate on port 3 now Switch(config)# interface fastethernet0/3 Switch(config-if)# dot1x re-authenticate Switch(config-if)# dot1x init...
5-100 ES3000 User Guide dot1x control-direction Use the dot1x control-direction command to impose dot1x authentication on either incoming or outgoing traffic. dot1x control-direction <direction> : <direction> YNTAX ESCRIPTION OMMAND ODES EFERENCE XAMPLE ! Set Control direction Both on port 5...
Page 269
show dot1x show dot1x <port-list> <port-list> YNTAX ESCRIPTION EFAULT ALUE Privileged EXEC OMMAND ODES Cisco EFERENCE XAMPLE Switch# show dot1x 1-2 NAS ID : dot1x_auth Port No : 1 Port Status : Authorized Port Control : Force Authorized Quiet Period : 60 Supplicant Timeout : 30 Maxumum Request...
5-102 ES3000 User Guide 5.17 Radius Commands radius-server host Use the radius-server host command to specify a RADIUS server host. radius-server host < ip-address> [timeout <seconds>] [retransmit <retries>] [key <string>] no radius-server YNTAX ESCRIPTION OMMAND ODES EFERENCE XAMPLE !Set radius server 192.168.0.1 timeout 5 second retransmit 4 times and Shared Secret "karl_radius"...
show radius-server Use the show radius-server command to display Radius configure information. show radius-server The show radius-server command has no arguments or keywords. YNTAX ESCRIPTION The show radius-server command has no default setting. EFAULT ALUE Privileged EXEC OMMAND ODES EFERENCE XAMPLE Switch# show radius Server IP Address :...
5-104 ES3000 User Guide 5.18 SNTP Commands sntp server Use the sntp server command to configure the sntp server snto server <ip> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES XAMPLE ! Configure SNTP server ip 172.16.5.198. Switch(config)# sntp server 172.16.5.198 Switch(config)# sntp poll-interval Use this command to configure the polling interval for sntp operation.
sntp daylight-saving Use this command to enable or disable daylight saving, if time zone is applicable. sntp daylight-saving no sntp daylight-saving This command has no argument. YNTAX ESCRIPTION This command is disabled by default EFAULT ALUE Global configuration OMMAND ODES None EFERENCE Basic Switch Configuration Menu->SNTP Configuration->...
5-106 ES3000 User Guide XAMPLE !Configure timezone to Taipei. Switch(config)# sntp timezone 50 Switch(config)# show sntp Use the show sntp configuration information for the interface show sntp YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch# show sntp Date ( YYYY/MM/DD )
5.19 Syslog Commands show log Use the show log command to display log for the switch show log YNTAX ESCRIPTION The show log command has no default setting EFAULT ALUE Priviliaged EXEC OMMAND ODES EFERENCE XAMPLE Switch# show log Entry Time(YYYY/MM/DD HH:MM:SS) Event ----- ------------------------- ------------------------------------- 0000/00/00 00:00:18...
5-108 ES3000 User Guide log clear Use the log clear command to delete the syslog log clear YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE Switch(config)# log clear Switch(config)# Global configuration...
5.20 Power Over Ethernet Commands peth trap Use the peth trap command to configure a PoE trap. peth trap no peth trap The peth trap command has no arguments or keywords YNTAX ESCRIPTION EFAULT ALUE Global configuration OMMAND ODES EFERENCE XAMPLE !Set PETH trap on Switch(config)# peth trap...
Page 278
5-110 ES3000 User Guide peth disconnection-method Use the peth disconnection-method command to configure the dosconnection method. peth disconnection-method <method> YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES EFERENCE XAMPLE !Set disconnection-method low-priority Switch(config)# peth disconnection-method low-priority Switch(config)# peth capacitor-detection Use the peth capacitor-detection command to set the power detection method.
Page 279
XAMPLE !Enable capacitor detection Switch(config)# peth capacitor-detection Switch(config)# peth limit Use the peth limit command to set the power limit on a port. peth limit <mwatt> <mwatt> YNTAX ESCRIPTION 15 watt EFAULT ALUE Interface configuration OMMAND ODES EFERENCE XAMPLE !Set power limit 10 watt on port 2 Switch(config)# interface fastethernet0/2 Switch(config-if)# peth limit 15 Switch(config-if)#...
Page 280
5-112 ES3000 User Guide XAMPLE !Set priority low oon port 3 Switch(config)# interface fastethernet0/3 Switch(config-if)# peth priority low Switch(config-if)# peth shutdown Use the peth shutdown command to shut down a PoE port. peth shutdown YNTAX ESCRIPTION EFAULT ALUE OMMAND ODES...
Page 281
show peth-conf Use the show peth-conf command to display switch Ethernet settings.. show peth-conf This command has no arguments or keywords. YNTAX ESCRIPTION EFAULT ALUE Prilileged EXEC OMMAND ODES EFERENCE XAMPLE Switch# show peth-conf Power budget Power Consumption Power usage threshold Power Management Method : Low priority port will be shut down Power Detection Method Switch#...
Page 282
5-114 ES3000 User Guide XAMPLE Switch# show peth-port No. Admin. Status --- ------ -------------- ----- ------ --------- --------- --------- ---- Not Powered Down Not Powered Not Powered Not Powered Not Powered Not Powered Not Powered Not Powered Not Powered Not Powered...
5.21 Miscellaneous Commands system mtu Use the system mtu command to set the mtu length. system mtu 1578 no system mtu The system mtu command has one argument for the current version that YNTAX ESCRIPTION is required to be 1578. EFAULT ALUE Global configuration...
Page 288
5-120 ES3000 User Guide interface FastEthernet0/16 no flow-control interface FastEthernet0/17 no flow-control interface FastEthernet0/18 no flow-control interface FastEthernet0/19 no flow-control port security max-mac-count 1 port security action noaction interface FastEthernet0/20 no flow-control port security Secure port security action trap-shutdown interface FastEthernet0/21...
Page 289
port monitor FastEthernet0/23 interface FastEthernet0/23 no flow-control interface FastEthernet0/24 no flow-control interface GigabitEthernet0/25 no flow-control interface GigabitEthernet0/26 giga-port-type GBIC no flow-control vlan-type 802.1q interface vlan1 name Default VLAN untagged 0/1-26 interface vlan2 name inter VLAN untagged 0/1,0/5-9 5-121 Command Line Interface...
Page 290
5-122 ES3000 User Guide tagged 0/2 forbidden 0/3-4 interface vlan3 name ext VLAN untagged 0/14 tagged 0/15 forbidden 0/10-13 ip address 172.16.3.42 255.255.240.0 ip igmp snooping ip igmp snooping aging-time 300 ip default-gateway 172.16.5.111 no ip http server mac-address-table aging-time 400...
Page 291
5-123 Command Line Interface mls qos priority-queue cos-map 0 1 priority-queue cos-map 0 2 priority-queue cos-map 1 6 priority-queue cos-map 1 7 port storm-control broadcast threshold medium console inactivity-timer 0 no telnet-server telnet-server inactivity-timer 10...
Specifications & Pin Assignments A.1 Specifications The ES3000 Ethernet Switch has the following specifications: Width Height Depth Weight Max Power Consumption Operating Temperature 482.6 mm with mounting brackets 440 mm without moutning brackets 44 mm (1RU) 256 mm PoE version 8.95 lbs. (with rack brackets) PoE version 8.95 lbs.
ES3000 User Guide Operating Humidity MTBF A.2 RJ-45 Plug and RJ-45 Connector In a Fast Ethernet network, it is important all 100BASE-T certified Category 5 cabling use RJ-45 plugs. The RJ-45 plug accepts 4-pair UTP or shielded twisted-pair (STP) 100-ohm cable and connects into the RJ-45 connector.
Cabling Guidelines B.1 Fast Ethernet Cable Guidelines Fast Ethernet uses UTP cable, as specified in the IEEE 802.3u standard for 100BASE-TX.The specification requires Category 5 UTP cable consisting of either two-pair or four-pair twisted insulated copper conductors bound in a single plastic sheath. Category 5 cable is certified up to 100 MHz bandwidth.
ES3000 User Guide B.1.2 Termination Method To minimize cross-talk noise, maintain the twist ratio of the cable up to the point of termination; verify untwist at any RJ-45 plug or patch panel does not exceed 0.5 inch (1.5 cm). B.2 Category 5 Cable...
technology automatically senses which connection, MDI or MDI-X, is needed and makes the right connection. B.4 Patch Panels and Cables If using patch panels, ensure they meet the 100BASE-TX requirements. Symbol recommends Category 5 UTP cable for patch cables and work area cables to ensure the UTP patch cable rating meets or exceeds the distribution cable rating.
ES3000 User Guide B.5.3 Length The maximum distance limitation between two pieces of equipment is 100 m, as per the original Ethernet specification. The end-to-end link is called the "channel." TSB-67 defines the "Basic Link" which is the portion of the link that is part of the building infrastructure.
B.5.6 Patch Cables When installing equipment, replace old patch panel cables that do not meet Category 5e specifications. As pointed out in the NEXT section, this near end piece of cable is critical for successful operation. B.5.7 Optimum Performance For optimum performance of the 1000BASE-T product, it is important to fully qualify the cable installation and ensure it meets or exceeds ANSI/EIA/TIA-568-A:1995 or ISO/IEC 11801:1995 Category 5 specifications.
Symbol Technologies provides its customers with prompt and accurate customer support. Use the Symbol Support Center as the primary contact for any technical problem, question or support issue involving Symbol products. If the Symbol Customer Support specialists cannot solve a problem, access to all technical disciplines within Symbol becomes available for further assistance and support.
ES3000 User Guide North American Contacts Inside North America, contact Symbol by: Symbol Technologies, Inc. One Symbol Plaza Holtsville, New York 11742-1300 Telephone: 1-631-738-2400/1-800-SCAN 234 Fax: 1-631-738-5990 Symbol Support Center (for warranty and service information): telephone: 1-800-653-5350 fax: (631) 563-5410 Email: support@symbol.com...
Web Support Sites MySymbolCare http://www.symbol.com/services/msc Symbol Services Homepage http://symbol.com/services Symbol Software Updates http://symbol.com/services/downloads Symbol Developer Program http://software.symbol.com/devzone Additional Information Obtain additional information by contacting Symbol at: 1-800-722-6234, inside North America +1-631-738-5200, in/outside North America http://www.symbol.com/...
Page 305
10BASE-T The IEEE specification for 10 Mbps Ethernet over Category 3, 4, or 5 twisted-pair cable. 100BASE-FX The IEEE specification for 100 Mbps Fast Ethernet over fiber-optic cable. 100BASE-TX The IEEE specification for 100 Mbps Fast Ethernet over Category 5 twisted-pair cable. 1000BASE-SX The IEEE specification for 1000 Mbps Gigabit Ethernet over fiber-optic cable.
Page 306
GL-2 ES3000 User Guide Backbone The part of a network used as a primary path for transporting traffic between network segments. Bandwidth The information capacity, measured in bits per second, that a channel could transmit. Bandwidth examples include 10 Mbps for Ethernet, 100 Mbps for Fast Ethernet, and 1000 Mbps (I Gbps) for Gigabit Ethernet.
Page 307
Full-duplex A system that allows packets to be transmitted and received at the same time and, in effect, doubles the potential throughput of a link. Half-duplex A system that allows packets to transmitted and received, but not at the same time. Contrast with full-duplex.
Page 308
GL-4 ES3000 User Guide Multicast A single packet sent to a specific group of end stations on a network. Port monitoring The ability to monitor the traffic passing through a port on a device to analyze network characteristics and perform troubleshooting.
Page 309
GL-5 Traffic prioritization Giving time-critical data traffic a higher quality of service over other, non-critical data traffic. Unicast A packet sent to a single end station on a network. VLAN Virtual LAN. A logical association that allows users to communicate as if they were physically connected to a single LAN, independent of the actual physical configuration of the network.
Need help?
Do you have a question about the ES3000 and is the answer not in the manual?
Questions and answers