User ManualTable of ContentsMES3500-24/24F1About This User's Guide3Document Conventions4Safety Warnings5Contents Overview7Table of Contents9User’s Guide21Getting to Know Your Switch231.1 Introduction231.1.1 Backbone Application231.1.2 Bridging Example241.1.3 High Performance Switching Example241.1.4 IEEE 802.1Q VLAN Application Examples251.1.5 IPv6 Support251.2 Ways to Manage the Switch261.3 Good Habits for Managing the Switch26Hardware Installation and Connection272.1 Installation Scenarios272.2 Desktop Installation Procedure272.3 Mounting the Switch on a Rack272.3.1 Rack-mounted Installation Requirements272.3.2 Attaching the Mounting Brackets to the Switch282.3.3 Mounting the Switch on a Rack29Hardware Overview303.1 Front Panel303.1.1 Console Port313.1.2 Ethernet Ports323.1.3 Transceiver Slots323.1.4 Power Connector343.1.5 Signal Slot353.2 LEDs37The Web Configurator394.1 Introduction394.2 System Login394.3 The Web Configurator Layout404.3.1 Change Your Password444.4 Saving Your Configuration444.5 Switch Lockout444.6 Resetting the Switch454.6.1 Reload the Configuration File454.7 Logging Out of the Web Configurator464.8 Help46Initial Setup Example495.1 Overview495.1.1 Creating a VLAN495.1.2 Setting Port VID505.2 Configuring Switch Management IP Address51Tutorials536.1 How to Use DHCP Snooping on the Switch536.2 How to Use DHCP Relay on the Switch566.2.1 DHCP Relay Tutorial Introduction576.2.2 Creating a VLAN576.2.3 Configuring DHCP Relay596.2.4 Troubleshooting606.3 How to Use PPPoE IA on the Switch606.3.1 Configuring Switch A616.3.2 Configuring Switch B636.4 How to Use Error Disable and Recovery on the Switch666.5 How to Set Up a Guest VLAN686.5.1 Creating a Guest VLAN686.5.2 Enabling IEEE 802.1x Port Authentication716.5.3 Enabling Guest VLAN726.6 How to Do Port Isolation in a VLAN736.6.1 Creating a VLAN746.6.2 Creating a Private VLAN Rule76Technical Reference79System Status and Port Statistics817.1 Overview817.2 Port Status Summary817.2.1 Status: Port Details83Basic Setting868.1 Overview868.2 System Information868.3 General Setup888.4 Introduction to VLANs898.4.1 Smart Isolation908.5 Switch Setup918.6 IP Setup938.6.1 Management IP Addresses938.7 Port Setup95VLAN979.1 Introduction to IEEE 802.1Q Tagged VLANs979.1.1 Forwarding Tagged and Untagged Frames979.2 Automatic VLAN Registration989.2.1 GARP989.2.2 GVRP989.3 Port VLAN Trunking999.4 Select the VLAN Type999.5 Static VLAN999.5.1 VLAN Status1009.5.2 VLAN Details1019.5.3 Configure a Static VLAN1029.5.4 Configure VLAN Port Settings1039.6 Subnet Based VLANs1049.7 Configuring Subnet Based VLAN1059.8 Protocol Based VLANs1079.9 Configuring Protocol Based VLAN1089.10 Create an IP-based VLAN Example1099.11 Port-based VLAN Setup1109.11.1 Configure a Port-based VLAN111Static MAC Forward Setup11410.1 Overview11410.2 Configuring Static MAC Forwarding114Static Multicast Forward Setup11611.1 Static Multicast Forwarding Overview11611.2 Configuring Static Multicast Forwarding117Filtering12012.1 Configure a Filtering Rule120Spanning Tree Protocol12213.1 STP/RSTP Overview12213.1.1 STP Terminology12213.1.2 How STP Works12313.1.3 STP Port States12313.1.4 Multiple RSTP12413.1.5 Multiple STP12413.2 Spanning Tree Protocol Status Screen12713.3 Spanning Tree Configuration12713.4 Configure Rapid Spanning Tree Protocol12813.5 Rapid Spanning Tree Protocol Status13013.6 Configure Multiple Rapid Spanning Tree Protocol13113.7 Multiple Rapid Spanning Tree Protocol Status13313.8 Configure Multiple Spanning Tree Protocol13513.8.1 Multiple Spanning Tree Protocol Port Configuration13813.9 Multiple Spanning Tree Protocol Status139Bandwidth Control14114.1 Bandwidth Control Overview14114.1.1 CIR and PIR14114.2 Bandwidth Control Setup142Broadcast Storm Control14415.1 Broadcast Storm Control Setup144Mirroring14616.1 Port Mirroring Setup146Link Aggregation14817.1 Link Aggregation Overview14817.2 Dynamic Link Aggregation14817.2.1 Link Aggregation ID14917.3 Link Aggregation Status14917.4 Link Aggregation Setting15117.5 Link Aggregation Control Protocol15317.6 Static Trunking Example154Port Authentication15618.1 Port Authentication Overview15618.1.1 IEEE 802.1x Authentication15618.1.2 MAC Authentication15718.2 Port Authentication Configuration15818.2.1 Activate IEEE 802.1x Security15918.2.2 Guest VLAN16018.2.3 Activate MAC Authentication162Port Security16419.1 About Port Security16419.2 Port Security Setup164Classifier16620.1 About the Classifier and QoS16620.2 Configuring the Classifier16620.3 Viewing and Editing Classifier Configuration16820.4 Classifier Example170Policy Rule17121.1 Policy Rules Overview17121.1.1 DiffServ17121.1.2 DSCP and Per-Hop Behavior17121.2 Configuring Policy Rules17121.3 Viewing and Editing Policy Configuration17421.4 Policy Example175Queuing Method17622.1 Queuing Method Overview17622.1.1 Strictly Priority Queuing17622.1.2 Weighted Fair Queuing17622.1.3 Weighted Round Robin Scheduling (WRR)17722.2 Configuring Queuing177VLAN Stacking17923.1 VLAN Stacking Overview17923.1.1 VLAN Stacking Example17923.2 VLAN Stacking Port Roles18023.3 VLAN Tag Format18123.3.1 Frame Format18123.4 Configuring VLAN Stacking18223.4.1 Port-based Q-in-Q18323.4.2 Selective Q-in-Q184Multicast18624.1 Multicast Overview18624.1.1 IP Multicast Addresses18624.1.2 IGMP Filtering18624.1.3 IGMP Snooping18624.1.4 IGMP Snooping and VLANs18724.2 Multicast Status18724.3 Multicast Setting18824.4 IGMP Snooping VLAN19124.5 IGMP Filtering Profile19224.6 MVR Overview19324.6.1 Types of MVR Ports19424.6.2 MVR Modes19424.6.3 How MVR Works19424.7 General MVR Configuration19524.8 MVR Group Configuration19724.8.1 MVR Configuration Example198AAA20125.1 Authentication, Authorization and Accounting (AAA)20125.1.1 Local User Accounts20125.1.2 RADIUS and TACACS+20225.2 AAA Screens20225.2.1 RADIUS Server Setup20225.2.2 TACACS+ Server Setup20525.2.3 AAA Setup20725.2.4 Vendor Specific Attribute20925.2.5 Tunnel Protocol Attribute21025.3 Supported RADIUS Attributes21025.3.1 Attributes Used for Authentication21125.3.2 Attributes Used for Accounting211IP Source Guard21426.1 IP Source Guard Overview21426.1.1 DHCP Snooping Overview21426.1.2 ARP Inspection Overview21626.2 IP Source Guard21826.3 IP Source Guard Static Binding21826.4 DHCP Snooping22026.5 DHCP Snooping Configure22226.5.1 DHCP Snooping Port Configure22426.5.2 DHCP Snooping VLAN Configure22526.6 ARP Inspection Status22626.6.1 ARP Inspection VLAN Status22726.6.2 ARP Inspection Log Status22826.7 ARP Inspection Configure22926.7.1 ARP Inspection Port Configure23026.7.2 ARP Inspection VLAN Configure232Loop Guard23327.1 Loop Guard Overview23327.2 Loop Guard Setup235VLAN Mapping23728.1 VLAN Mapping Overview23728.1.1 VLAN Mapping Example23728.2 Enabling VLAN Mapping23828.3 Configuring VLAN Mapping239Layer 2 Protocol Tunneling24129.1 Layer 2 Protocol Tunneling Overview24129.1.1 Layer-2 Protocol Tunneling Mode24229.2 Configuring Layer 2 Protocol Tunneling243sFlow24530.1 sFlow Overview24530.2 sFlow Port Configuration24630.2.1 sFlow Collector Configuration247PPPoE24931.1 PPPoE Intermediate Agent Overview24931.1.1 PPPoE Intermediate Agent Tag Format24931.1.2 Sub-Option Format24931.1.3 Port State25031.2 The PPPoE Screen25131.3 PPPoE Intermediate Agent25131.3.1 PPPoE IA Per-Port25331.3.2 PPPoE IA Per-Port Per-VLAN25431.3.3 PPPoE IA for VLAN256Error Disable25732.1 CPU Protection Overview25732.2 Error-Disable Recovery Overview25732.3 The Error Disable Screen25832.4 CPU Protection Configuration25832.5 Error-Disable Detect Configuration25932.6 Error-Disable Recovery Configuration260Private VLAN26233.1 Private VLAN Overview26233.2 Configuring Private VLAN263Static Route26534.1 Static Routing Overview26534.2 Configuring Static Routing266Differentiated Services26835.1 DiffServ Overview26835.1.1 DSCP and Per-Hop Behavior26835.1.2 DiffServ Network Example26835.2 Two Rate Three Color Marker Traffic Policing26935.2.1 TRTCM-Color-blind Mode27035.2.2 TRTCM-Color-aware Mode27035.3 Activating DiffServ27035.3.1 Configuring 2-Rate 3 Color Marker Settings27135.3.2 Configuring DSCP Profiles27335.4 DSCP-to-IEEE 802.1p Priority Settings27435.4.1 Configuring DSCP Settings274DHCP27636.1 DHCP Overview27636.1.1 DHCP Modes27636.1.2 DHCP Configuration Options27636.2 DHCP Status27636.3 DHCP Relay27736.3.1 DHCP Relay Agent Information27736.3.2 Configuring DHCP Global Relay27836.3.3 Global DHCP Relay Configuration Example27936.4 Configuring DHCP VLAN Settings28036.4.1 Example: DHCP Relay for Two VLANs281Maintenance28337.1 The Maintenance Screen28337.2 Load Factory Default28437.3 Save Configuration28437.4 Reboot System28437.5 Firmware Upgrade28537.6 Restore a Configuration File28637.7 Backup a Configuration File28637.8 FTP Command Line28737.8.1 Filename Conventions28737.8.2 FTP Command Line Procedure28837.8.3 GUI-based FTP Clients28837.8.4 FTP Restrictions288Access Control29038.1 Access Control Overview29038.2 The Access Control Main Screen29038.3 About SNMP29038.3.1 SNMP v3 and Security29138.3.2 Supported MIBs29238.3.3 SNMP Traps29238.3.4 Configuring SNMP29638.3.5 Configuring SNMP Trap Group29738.3.6 Configuring SNMP User29838.4 Setting Up Login Accounts29938.5 SSH Overview30138.6 How SSH works30238.7 SSH Implementation on the Switch30338.7.1 Requirements for Using SSH30338.8 Introduction to HTTPS30338.9 HTTPS Example30438.9.1 Internet Explorer Warning Messages30438.9.2 Mozilla Firefox Warning Messages30738.9.3 The Main Screen30838.10 Service Port Access Control30938.11 Remote Management310Diagnostic31239.1 Diagnostic312Syslog31340.1 Syslog Overview31340.2 Syslog Setup31440.3 Syslog Server Setup315Cluster Management31641.1 Cluster Management Status Overview31641.2 Cluster Management Status31741.2.1 Cluster Member Switch Management31841.3 Clustering Management Configuration320MAC Table32242.1 MAC Table Overview32242.2 Viewing the MAC Table323ARP Table32543.1 ARP Table Overview32543.1.1 How ARP Works32543.2 The ARP Table Screen326Configure Clone32744.1 Configure Clone327Troubleshooting32945.1 Power, Hardware Connections, and LEDs32945.2 Switch Access and Login33045.3 Switch Configuration332Common Services333Legal Information337Index341Size: 8.29 MBPages: 349Language: EnglishOpen manual
