ELTEX MES53xx User Manual

MES53xx, MES33xx, MES23xx Ethernet Switch Series 71
console(config-ip)#
This mode is available from the configuration mode and designed for configuration of IP interface
parameters.
Table 5.37. – IP interface configuration mode commands
Command
Value/Default value
Action
directed-broadcast
-/disabled
Enable IP directed-broadcast packet translation into standard
broadcast packet and enable its transmission via the selected
interface.
no directed-broadcast
Disable IP directed-broadcast packet translation.
helper-address ip_address
ip_address: A.B.C.D
Enable forwarding of broadcast UDP packets to the specific
address.
- ip_address - destination IP address for packets forwarding.
no helper-address
ip_address
Disable forwarding of broadcast UDP packages.
Examples of command usage
 Enable the directed-broadcast function:
console# configure
console(config)#interface PortChannel 1
console(config-if)#ip address 100.0.0.1 /24
console(config-if)#exit
console(config)# interface ip 100.0.0.1
console(config-ip)#directed-broadcast
5.10 Selective Q-in-Q
This function uses configured filtering rules based on internal VLAN numbers (Customer VLAN) to
add and external SPVLAN (Service Provider's VLAN), substitute Customer VLAN, and block traffic.
A list of traffic processing rules is created for the device.
Ethernet and Port-Channel interface (interface range) configuration mode commands
Command line prompt in the configuration interface configuration mode is as follows:
console# configure
console(config)# interface {gigabitethernet gi_port | tengigabitethernet
te_port | fortygigabitethernet fo_port | oob | port-channel group | range
{…}}
console(config-if)#
Table 5.38. - Ethernet interface (interface range) configuration mode commands
Command
Value/Default value
Action
selective-qinq list ingress
add_vlan vlan_id
[ingress_vlan
ingress_vlan_id]
vlan_id: (1..4094)
ingress_vlan_id: (1..4094)
Create a rule that will add the second stamp vlan_id to a
packet with the outer stamp ingress_vlan_id. If
ingress_vlan_id is not specified, the rule will be applied to all
ingress packets that are not processed by other rules ('default
rule').
selective-qinq list ingress
deny [ingress_vlan
ingress_vlan_id]
ingress_vlan_id: (1..4094)
Create a ‘deny’ rule to drop tag ingress packets with the
ingress_vlan_id outer tag. If ingress_vlan_idis not set, all
ingress packets will be dropped.
selective-qinq list ingress
permit [ingress_vlan
ingress_vlan_id]
ingress_vlan_id: (1..4094)
Creates a ‘permit’ rule to transmit all ingress packets with the
ingress_vlan_id outer tag. If ingress_vlan_id is not set, all
ingress packets will be transmitted without changes.

ELTEX MES53xx Specifications

General

Brand	ELTEX
Model	MES53xx
Category	Switch
Language	English

Summary

1 Introduction

2 Product Description

2.1 Purpose

Describes the intended use of aggregation and top-of-rack switches.

2.2 Switch Features

Describes key switch features like Layer 2/3 tunneling, QoS, security, and basic operations.

2.3 Main Specifications

Lists detailed hardware specifications like packet processor, interfaces, and buffer memory.

3 Installation and Connection

3.4 Connection to power supply

Details grounding procedures and connecting the device to AC or DC power sources.

3.6 SFP transceiver installation and removal

Guides users on installing and removing SFP transceivers for network connections.

4 Initial Switch Configuration

4.1 Configuring the Terminal

Details the steps to configure a PC terminal for connecting to the switch.

4.5 Switch function configuration

Covers initial setup including admin password, user creation, IP configuration, and SNMP settings.

5 Device Management. Command Line Interface

5.1 Basic commands

Introduces fundamental CLI commands for navigation, session management, and help.

5.4 System management commands

Provides commands for system diagnostics and management, including ping, traceroute, and status checks.

5.6 File operations

Covers commands for file management, including copying, deleting, and viewing files.

5.9 Interface configuration

Details configuration for interface parameters like speed, duplex, flow control, and VLAN settings.

11.1 Security functions

11.1.1 Port security functions

Configures port security to restrict access by MAC addresses, limiting learned addresses per port.

11.1.2 Port-based client authentication (802.1x standard)

Explains 802.1X authentication for network access control via an external server.

11.1.3 DHCP management and Option 82

Manages DHCP client, server, and relay, including Option 82 for IP address and port information.

11.1.4 Client IP address protection (IP Source Guard)

Details IP Source Guard for protecting against IP address spoofing.

11.1.5 ARP Inspection

Explains ARP inspection to prevent ARP spoofing attacks.

11.3 ACL Configuration

11.3.1 IPv4-based ACL Configuration

Guides on creating and configuring IPv4 Access Control Lists for traffic filtering.

11.3.2 IPv6 ACL Configuration

Details the creation and configuration of IPv6 Access Control Lists for traffic filtering.

11.5 Quality of Services (QoS)

11.5.1 QoS Configuration

Explains QoS configuration for traffic prioritization, bandwidth management, and queue settings.

11.6 Routing protocol configuration

11.6.1 Static Routing Configuration

Guides on configuring static routes for network path definition.

11.6.3 OSPF and OSPFv3 configuration

Details the configuration of OSPF and OSPFv3 for dynamic link-state routing.

11.6.4 Configuration of Virtual Router Redundancy Protocol (VRRP)

Explains VRRP configuration for default gateway redundancy and high availability.

12 Service Menu, Change of Firmware

12.2 Updating firmware from TFTP server

Provides instructions for updating the device firmware using a TFTP server.

APPENDIX A. Example of Device Usage and Configuration

Configuration of multiple spanning trees (MSTP)

Illustrates MSTP configuration for VLANs and ring topologies.

APPENDIX B. Console Cable

TECHNICAL SUPPORT SERVICE