manualshive.com logo in svg

Edge-Core ECS2020 Series, Web Management Manual, Page: 54 / 115

Share
Download
Edge-Core ECS2020 Series Web Management Manual Download Page 54

 

54 

 

6.7

 

ACCESS CONTROL 

6.7.1

 

ACL access control list 

6.7.1.1

 

View access control list 

Click the "Fault/Safety" "Access Control" you can view the configuration information of the access control list: 

 

Figure 6-31:

 

Access Control List 

6.7.1.2

 

Increased access rules 

1.

 

INCREASE THE STANDARD IP ACCESS RULES 

Click "New ACL Rules", in the pop-up dialog box, select "Standard IPV4 ACL Configuration", in the list of ID:0, ID:0 
ACE, rules to allow. IP address is: any source IP address. Click "Apply" to complete the new rules: 

 

Figure 6-32:

 

Configuration Standard IP Access Control List 

 

Summary of Contents for ECS2020 Series

Page 1: ...Web Management www edge core com Guide ECS2020 Series 10 28 Port Gigabit Web Smart PoE Non PoE Switch Software Release v1 0 0 0...

Page 2: ...t Gigabit Ethernet Switch with 8 10 100 1000BASE T RJ 45 802 3af at PoE Ports and 2 Gigabit SFP Ports ECS2020 28P Web smart Gigabit Ethernet Switch with 24 10 100 1000BASE T RJ 45 and 4 Gigabit SFP Po...

Page 3: ...otocol SNMP Related Documentation This guide focuses on switch software configuration through the Web management interface For information on how to manage the switch through the CLI see the following...

Page 4: ...OL 17 4 3 1 Configuring flow control 18 4 4 PORT AGGREGATION 19 4 4 1 Viewing port aggregation configuration 19 4 4 2 Add port aggregation 20 4 4 3 Modifying port aggregation 21 4 5 PORT MIRRORING 21...

Page 5: ...FAULT SAFETY 40 6 1 ATTACK PREVENTION 40 6 1 1 ARP snooping 40 6 1 2 Port security 42 6 1 3 DHCP snooping 43 6 1 4 CPU Guard 46 6 2 PATH DETECTION 47 6 2 1 Path Tracert detection 47 6 2 2 Cable detect...

Page 6: ...7 7 7 4 Activate the TRAP 88 7 7 5 Disable the TRAP 88 7 7 6 Change community 89 7 7 7 Added the SNMP TRAP service host 89 7 7 8 Delete the SNMP TRAP service host 90 7 8 RMON 90 7 8 1 View ROMN config...

Page 7: ...ew the priority schedule 107 9 1 2 The configuration global settings of SP 107 9 1 3 The configuration global settings of DSCP 110 9 1 4 Editing the DSCP values 112 10 EEE 114 10 1 EEE 114 10 1 1 802...

Page 8: ...10 and the default subnet mask is 255 255 255 0 Run a web browser and enter http 192 168 2 10 in the address bar Enter the default user name and password user name admin password admin and then click...

Page 9: ...ormation Figure 2 1 Web Device Panel 2 Clicking on a specific port displays the following information Figure 2 2 View the Port Status 2 2 PORT INFORMATION The configuration of the ECS2020 10P is as fo...

Page 10: ...rend 2 4 DEVICE CONFIGURATION Click Device Configuration to view and change the configuration of the device Figure 2 4 Device Configuration Use Device configuration to configure the following modules...

Page 11: ...icts Figure 2 5 View the Port Statistics 3 QUICK CONFIGURATION Click on Quick Configuration to quickly configure commonly used functions such as a VLANs trunk ports port classes SNMP and basic setting...

Page 12: ...etc When configuration is completed click Next Figure 3 2 VLAN Settings 3 3 PORT MODE Click Quick Configuration and then Port Mode to access the port settings page You can change the port setting to...

Page 13: ...Quick Configuration and then SNMP Settings to access the SNMP Settings page You can configure SNMP settings such as enable disable SNMP and SNMP TRAP services etc When configuration is complete click...

Page 14: ...show the current switch port configuration information 1 Port The number of the port 2 Port Description Displays the switch port description 3 Port Status The switch port status information enabled o...

Page 15: ...Edit icon Step 2 In the Port Properties configuration page fill select the value to be configured Step 3 Click the Apply button to complete the configuration 4 2 STORM CONTROL 4 2 1 Check the storm c...

Page 16: ...e control value setting is not a multiple of 16 the system automatically matches the closest multiple of 16 6 The control values of unknown unicast broadcast and unknown multicast can only be a single...

Page 17: ...rm control to 1009 and then click Apply Settings Figure 4 6 Configuring Storm Control Information The configuration displays as shown below Figure 4 7 Configuration Successfully Storm Control Informat...

Page 18: ...then click Flow Control Select On and click Apply Figure 4 9 Open Port Flow Control Function To enable port traffic control follow these steps Step 1 Select the port Step 2 Set the Flow control to On...

Page 19: ...Flow Control Close port traffic control follow these steps Step 1 Select the button to the right of the port or directly selected port Step 2 In the Flow Control Type select off Step 3 Click Apply 4...

Page 20: ...ach aggregate port can bind up to eight member ports port to transfer data among members of the network traffic through the shunt rules 6 Port aggregation group must ensure that the port speed duplex...

Page 21: ...tion Procedure Step 1 In the Aggregation List Click to modify the right of the port aggregation Step 2 In the port aggregation configuration page to modify the load balancing type and click Next to Ap...

Page 22: ...a is mirrored to the destination port Destination port mirror data sent to the destination port 1 Port aggregation port can not be used as the destination port and source port 2 Destination port and s...

Page 23: ...ceplate is gray 4 Aggregated port mirroring can not be configured are shown in gray in the panel 5 Has been selected port mirroring port displayed in the faceplate is gray 4 5 3 To modify the port mir...

Page 24: ...move port mirroring configuration steps are as follows Step 1 In the image you want to modify the operation of the group column click Step 2 In the panel click Cancel the source port destination port...

Page 25: ...rroring Port Isolation view of the switch Figure 4 21 Port Isolation Configuration Information 4 6 2 Configuring port isolation Open Port Isolation function select the port on which you want to open p...

Page 26: ...re 4 23 Enable Port Isolation Results 4 6 3 Modify the port isolation Select the port to modify click on the action bar button Modify the corresponding port isolation Figure 4 24 To Modify the Port Is...

Page 27: ...formation In the port speed list which shows the current speed limit switch attribute configuration information Port The number of the port Input limit uplink port speed Output speed port downstream r...

Page 28: ...ration 4 7 3 Remove the port speed limit Click the need to remove the limit on the right port icon in the configuration area of the port rate value pull bar to the far right Apply to complete the oper...

Page 29: ...red Figure 5 1 VLAN Configuration Information In the VLAN list which shows the properties of the configuration information of the current switch VLAND 1 VLAN ID VLAN ID value is displayed 2 VLAN Name...

Page 30: ...ep 3 Select the ports Step 4 Click the lower right corner Apply button to complete the configuration 5 1 3 Remove VLAN 5 1 3 1 Single VLAN delete To delete the selected VLAN click the X button to dele...

Page 31: ...removed because of there are member ports The others will be removed Figure 5 4 Delete Multiple VLAN Delete multiple VLAN follow these steps Step 1 I want to delete VLAN check box setp2 Click on the...

Page 32: ...the configuration 5 1 4 2 To remove the port from a VLAN Click on the icon you can remove the port from this VLAN Figure 5 6 To Remove the Port from the VLAN Procedure to remove the port from VLAN as...

Page 33: ...uration of the current switch 1 The port name display port number used 2 The Native VLAN display native VLAN 3 The allowed VLAN the VLAN allows the display message can be through VLAN 4 The default po...

Page 34: ...iguration 5 1 7 Change the port mode is hybrid Select the port you want to change the mode and click the Port Mode list you can set the port mode is hybrid Figure 5 9 Change the Port Mode is Hybrid Th...

Page 35: ...the navigation bar VLAN Management Voice VLAN Voice VLAN Global to configure the voice VLAN Figure 5 11 View Voice VLAN Information To configure the voice VLAN global steps as follows Step 1 In the vo...

Page 36: ...VLAN Port To configure the voice VLAN port steps as follows Step 1 Select ports to configure Step 2 In the state text box choose enable Step 3 In the mode text box choose manual Step 4 Click Apply 5 2...

Page 37: ...x enter the description such as testOUI Step 4 Click Apply 5 2 5 Voice device address Click on the navigation bar VLAN Management Voice VLAN Voice Device Address to view the voice device Figure 5 14 V...

Page 38: ...BOX click ON the OFF to ON Step 2 In the surveillance VLAN ID text box enter the ID such as 500 Step 3 In the surveillance VLAN COS text box choose 3 Step 4 In the aging time text box enter aging tim...

Page 39: ...e MAC address text box enter MAC address such as 00A1 0203 0000 Step 4 In the mask text box enter the mask such as FFFF F000 000 Step 5 Click Apply 5 3 4 MAC settings and surveillance device Click on...

Page 40: ...witches has been configured for ARP information this feature is turned off by default Figure 6 1 View Port ARP Inspection Information 6 1 1 2 ARP inspection function In the ARP Inspection configuratio...

Page 41: ...pection Configure Success 6 1 1 3 Disable ARP inspection function In the ARP Inspection configuration table click the button from on to off to disable the ARP Inspection and then click the OK button t...

Page 42: ...prevention Port Security configure the switch port security Figure 6 6 Port security configuration In the configuration page selected one or more ports enable the admin state and configure the port m...

Page 43: ...the port security and click the button of Save Figure 6 8 Change Port Security Status 6 1 3 DHCP snooping 6 1 3 1 View DHCP snooping configuration Click the Fault Safety Attack Prevention DHCP Snoopin...

Page 44: ...3 Set the port to DHCP snooping trusted port In the trusted port list select the port that needs to be disabled to prevent DHCP attacks and click the Apply button and enable option82 function Figure...

Page 45: ...dress Click Binding List to view the list information Figure 6 12 View the IP Address that the Trusted Port Gets 6 1 3 5 Configure CID information Click the Option82 Circuit ID button configure the CI...

Page 46: ...the ON button will prevent the DHCP attack function off Figure 6 14 Off DHCP Snooping Function 6 1 4 CPU Guard Click the Fault Safety Attack prevention CPU Guard the configuration information show the...

Page 47: ...n Figure 6 16 Change CPU Guard Configuration 6 2 PATH DETECTION 6 2 1 Path Tracert detection Click the Fault Safety Path Detection or Tracert Detection can view the Path Detection configuration Figure...

Page 48: ...Figure 6 18 Tracert Detection Information 6 2 2 Cable detection Click the Fault Safety Path Detection Cable Detection can view the Cable Detection configuration Figure 6 19 Cable Detection Informatio...

Page 49: ...on only selected one port Figure 6 20 Port Cable Detection Result 6 3 PORT ERROR DISABLE Collect port disable information and can set the port auto recovery time Figure 6 21 Error Disable Automatic Re...

Page 50: ...ick the Fault Safety DDOS Protection can view the DDOS protection configuration Figure 6 22 DDOS Protection Information Selected dos type to prevent multiple computers from sending attack packets Figu...

Page 51: ...n view the current loop detection configuration Figure 6 24 View Loopback Detection Configuration Information 6 5 1 Enable loopback detection Enable the loopback detection and configuration some param...

Page 52: ...nge the loopback detection status Figure 6 26 Configure Ports Parameter Click Edit button change the port status Figure 6 27 Change the Port Configure 6 6 STP Click the Fault Safety STP STP Global can...

Page 53: ...otice 1 When the loopback detection and STP functions are mutually exclusive 2 LLDP PDU flooding enabled prevents executing mSTP enable Figure 6 29 Enable STP Change Mode and Traps 6 6 2 STP port sett...

Page 54: ...s control list Figure 6 31 Access Control List 6 7 1 2 Increased access rules 1 INCREASE THE STANDARD IP ACCESS RULES Click New ACL Rules in the pop up dialog box select Standard IPV4 ACL Configuratio...

Page 55: ...andard IP Access Control List 3 INCREASING EXPAND MAC ACCESS RULES Click New ACL rules select Configuration Expand MAC ACL in the pop up window in list ID 20 ACE ID 0 Rules Deny Source MAC address 008...

Page 56: ...er the modified ACL rules page the rules are Deny click Apply Figure 6 35 To Modify the ACL Rule Configuration instructions The modified extended MAC and extended IP for the same operation 6 7 1 4 Del...

Page 57: ...structions Delete after the success of the kneeling in port configuration table deleted together 6 7 2 Application ACL 6 7 2 1 View application ACL The configuration information and click on the Fault...

Page 58: ...hen select the port of application click Apply to complete the configuration Figure 6 39 Add Applications ACL 6 7 2 3 Delete application ACL Click to delete the application rule on the right side canc...

Page 59: ...6 41 View Snooping IGMP Configuration Information 6 8 1 2 Action multicast listener function Click the Fault Safety IGMP Snooping click Off button to activate the multicast monitoring function Figure...

Page 60: ...on 6 8 1 4 Configuration multicast routing Select VLAN click Router Port Add button to configure the multicast routing in the port panel Figure 6 44 Configuration of Multicast Routing Multicast routin...

Page 61: ...rsion configuration steps are as follows Step 1 Select the required version number Step 2 Click the Apply button to complete the configuration 6 8 2 MLD 6 8 2 1 View MLD configuration Click the Fault...

Page 62: ...icast Listener Configuration The default multicast listener MLD did not open The default on multicast listener MLD all VLAN are open The default version of V1 MLD 6 8 2 3 Disable multicast listener fu...

Page 63: ...panel to select multicast listener routing port Step 2 Select VLAN Step 3 Click on the Add Router Port button to complete the configuration 6 9 IEEE 802 1X IEEE 802 1X is a port based authentication p...

Page 64: ...64 Click to Open Figure 6 51 Enable IEEE 802 1X Switch config AAA RADIUS server address 192 168 2 100 Auth Port 1812 Key 123 type all Figure 6 52 Configuration Radius...

Page 65: ...not allow the user to authenticate The device does not provide authentication services to clients that pass through the port Single host This port can only connect to a host through authentication can...

Page 66: ...Authentication Console ECS2020 Telnet ECS2020 SSH ECS2020 click Apply Figure 6 55 Configuration Enable Authentication Switch config Method List Name ECS2020 Method 1 RADIUS click Save Switch config En...

Page 67: ...switch by Gi 0 2 Configure the TACACS sever 192 168 2 100 and connect with switch by Gi 0 1 Click on Fault Safety AAA TACACS Switch config AAA TACACS server address 192 168 2 100 Auth Port 49 Key qwe...

Page 68: ...able Authentication Console ECS2020 Telnet ECS2020 SSH ECS2020 click Apply Figure 6 59 Configuration Login Authentication You can successfully open AAA TACACS function PC input right user name and pas...

Page 69: ...ent VLAN ID the default is 1 1 In the DHCP text box choose static allocation 2 In the Management IP text box enter the IP address such as 192 168 2 10 3 In the Subnet Mask text box enter the subnet ma...

Page 70: ...tion system time You can select NTP or SNTP enter SNTP NTP Server IP Address such as 203 117 180 36 local SNTP NTP servers or internet SNTP NTP servers in the Time Zone T text box you can choose any t...

Page 71: ...immediately button Step 2 Click OK in the box that pops up OK button Step 3 Prompted to save the current configuration depending on your need to select OK or Cancel Step 4 After the restart the progr...

Page 72: ...ox click OK button 7 1 4 System log Click on the navigation bar System Management System Settings System Log to enter the log management interface you can query the system log clear the log Figure 7 5...

Page 73: ...face you can export the log information through TFTP server Figure 7 6 Log Export 7 1 6 ARP table Click on the navigation bar System Management System Settings ARP Table to enter the ARP entry interfa...

Page 74: ...y exists is displayed 2 Port Displays the source port number of the MAC address 3 Port Type There are two types of dynamic and static 4 VLAN VLAN ID display value You can query the MAC address type ac...

Page 75: ...ox to enter the MAC address such as 0001 7A4F 74D2 Step 3 In the VLAN ID text box to enter the VLAN ID such as 1 Step 4 Select ports in the port panel Step 5 Click on Apply to complete the configurati...

Page 76: ...the configuration Figure 7 11 Batch MAC Binding Configuration 7 1 7 3 Remove the static MAC address type 1 Single MAC records are deleted Select the need to delete the MAC address click the X button t...

Page 77: ...ront of the column you want to bind check box click Delete Static MAC button Figure 7 13 MAC Address Batch Deletion 3 Delete all dynamic MAC address In the MAC address list click Delete Dynamic MAC bu...

Page 78: ...Figure 7 15 DHCP Server Info 7 2 2 Enable the DHCP server Enable the DHCP server address pool IP range and device IP must be the same network segment IP Figure 7 16 Enable DHCP Server When the host an...

Page 79: ...file Step 2 Click the Upgrade button switch to start the upgrade new software Step 3 When the upgrade progress bar is at 100 the switch will automatically reboot completion of the upgrade is complete...

Page 80: ...on Figure 7 19 CPU Information Web pages to the content of the system task view consistent with the results show the CPU commands command line click on the Clear button to remove the current switches...

Page 81: ...ve the current configuration Click on the System Management Configuration Management Configuration Management click Save button the running the content of the config files saved to the startup config...

Page 82: ...ort Figure 7 22 Imported Configuration Import the configuration steps are as follows Step 1 Select the Import Configuration Step 2 Click Choose File button to find you want to import the configuration...

Page 83: ...gs Factory default operation steps are as follows Step 1 Click the Restore the Factory Settings button Step 2 In the pop up confirmation box click the OK button Step 3 After the completion of the rese...

Page 84: ...84 1 Configure some functions such as IP address port speed limit port mirroring and other functions...

Page 85: ...up the current running profile 3 On the basis of step 1 add or remove the function configuration such as port description 4 Click on the Apply Delete The configuration file is applied the system will...

Page 86: ...guration copy 7 7 SNMP 7 7 1 Check the SNMP Click on the System Management SNMP you can view the SNMP configured information Figure 7 26 View the SNMP Configuration Information By default SNMP is not...

Page 87: ...lows Step 1 Choose open SNMP options Step 2 Click OK button to complete the configuration 7 7 3 To disable the SNMP Click ON the System Management SNMP choose the SNMP service click ON the ON to OFF c...

Page 88: ...on steps are as follows Step 1 Select ON option Step 2 Click OK button to complete the configuration 7 7 5 Disable the TRAP Choose the SNMP TRAP service click ON the ON to OFF click OK complete the co...

Page 89: ...onfiguration steps are as follows Step 1 In the community name dialog box input the pub Step 2 Select RO permissions Step 3 Click on OK button complete the configuration 7 7 7 Added the SNMP TRAP serv...

Page 90: ...mplete the configuration When an SNMP closed hide the SNMP TRAP service host list 7 7 8 Delete the SNMP TRAP service host Click on the System Management SNMP in the SNMP TRAP service host list need to...

Page 91: ...s in the configuration The EVENT should be created first Please note the prompts in the configuration eg Rising Threshold is greater than Falling Threshold 7 8 3 Change ROMN type On the ROMN configure...

Page 92: ...lick the Statistics List We can choose the port to view the information Figure 7 38 View the Port Configure Information 7 8 4 Delete the configured rule Select the entry you want to delete and click F...

Page 93: ...ry List Rule 7 9 LLDP SETTINGS 7 9 1 LLDP settings Click on the System Management LLDP Settings LLDP Settings can view the LLDP settings information The default mode is Global settings and this featur...

Page 94: ...9 3 LLDP PORT SET Configuration the LLDP Port Properties Figure 7 44 LLDP port properties 7 9 4 Neighbor info When the LLDP function is enabled the neighbor information is recorded when a neighbor dev...

Page 95: ...bor Info 7 10 ADMINISTRATION 7 10 1 Telnet info Click on the System Management Administration Administration Settings can view the telnet settings information This feature is turned off by default Fig...

Page 96: ...96 7 10 2 ENABLE THE TELNET Click on the button and apply To enable the telnet and the user can connect to the device via telnet Figure 7 47 Enable Telnet Figure 7 48 Telnet Login...

Page 97: ...97 7 10 3 HTTPS Enable https function users can through https management the device Figure 7 49 Enable HTTPS Figure 7 50 HTTPS login...

Page 98: ...98 7 10 4 SSH Enable SSH function and SSH takes a long time to open for the first time Figure 7 51 Enable SSH...

Page 99: ...99 Figure 7 52 Use SSH2 Login...

Page 100: ...100 Figure 7 53 Use SSH1 Login...

Page 101: ...the PSE system configuration Click on the navigation bar PSE System Management PSE System Configuration to view the PSE system information of the current switch click Refresh button display refresh c...

Page 102: ...ation bar PSE System Management PSE System Configuration to configure power supply mode to automatic mode Figure 8 2 Automatic Mode To configure the switch PSE System steps as follows Step 1 In the po...

Page 103: ...gure 8 3 Static Mode To configure the switch PSE System steps as follows Step 1 In the power supply mode choose static mode Step 2 Click on Apply Settings button to complete the configuration 8 1 2 3...

Page 104: ...Settings button to complete the configuration 8 2 POE PORT CONFIGURATION Click the PSE System Management POE Port Configuration to configure the POE port on the switch Figure 8 5 PoE Port Configuratio...

Page 105: ...port settings follow these steps Step 1 Select port and Click icon Step 2 In the power supply enable choose disable 8 3 POE TIMER CONFIGURATION Click the PSE System Management PoE Timer Configuration...

Page 106: ...eps are as follows Step 1 Select a port to configure Step 2 In the timer choose enable Step 3 Configure absolute time start time 2017 8 29 08 30 end time 2017 9 30 08 30 Step 4 Configure periodic time...

Page 107: ...riority schedule Figure 9 1 Priority Schedule 9 1 2 The configuration global settings of SP 9 1 2 1 The configuration global settings of 802 1P SP Click on QoS Priority Schedule Global Settings in sch...

Page 108: ...Global Settings in 802 1p and WRR Priority schedule steps are as follows Step 1 In scheduling mark choose 802 1p Step 2 In the Scheduling algorithm choose WRR Step 3 In queue1 text box enter the weigh...

Page 109: ...gure 9 4 Global Settings in 802 1p and Hybrid Priority schedule steps are as follows Step 1 In scheduling mark choose 802 1p Step 2 In the Scheduling algorithm choose hybrid Step 3 In strict priority...

Page 110: ...se DSCP Step 2 In the Scheduling algorithm choose strict priority Step 3 In from DSCP value text box choose 0 and in to DSCP value text box choose 1 and in priority text box choose low Step 4 In from...

Page 111: ...9 6 Global Settings in DSCP and WRR Priority schedule steps are as follows Step 1 In scheduling mark choose DSCP Step 2 In the Scheduling algorithm choose WRR Step 3 In queue1 text box enter the weigh...

Page 112: ...chedule steps are as follows Step 1 In scheduling mark choose DSCP Step 2 In the Scheduling algorithm choose hybrid Step 3 In strict priority text box choose the queue3 4 Step 4 In WRR text box choose...

Page 113: ...113 Modify DSCP values follow these steps Step 1 Select DSCP values and Click icon Step 2 In the priority text box choose medium Step 3 Click on the save Step 4 Click OK...

Page 114: ...EEE 802 3az EEE Settings you can view the EEE information Figure 10 1 View the 802 3az EEE Settings 10 1 2 Active the EEE Click ON the EEE EEE 802 3az EEE Settings choose the 802 3az EEE click ON the...

Page 115: ...E022019 CS R02...

Reviews:

No comments