ELTEX MES1000 User Manual

MES1000, MES2000 Ethernet Switches 195
show ip dhcp
-
Displays DHCP server configuration.
show ip dhcp
excluded-addresses
-
Displays the IP addresses which will not be assigned to DHCP
clients by the DHCP server.
show ip dhcp pool host
[ip_address | name]
(1–32) characters
Displays configuration for static addresses of the DHCP server:
- ip_address—client IP address;
- name—name of the DHCP address pool.
show ip dhcp pool network
[name]
(1–32) characters
Displays configuration for the DHCP address pool of the DHCP
server:
- name—name of the DHCP address pool.
show ip dhcp binding
[ip_address]
-
Displays the IP addresses which are bound to the client physical
addresses as well as lease period, assignment method, and
status of the IP addresses.
show ip dhcp server
statistics
-
Displays statistics of the DHCP server.
Example of Commands Execution
 Configure the test DHCP pool and specify the following for a DHCP client: test.ru—domain
name, 192.168.45.1—default gateway, and 192.168.45.112—DNS server.
console#
console# configure
console(config)# ip dhcp pool network test
console(config-dhcp)# address 192.168.45.0 255.255.255.0
console(config-dhcp)# domain-name test.ru
console(config-dhcp)# dns-server 192.168.45.112
console(config-dhcp)# default-router 192.168.45.1
5.31 ACL Configuration (Access Control Lists)
ACL (Access Control List) is a table which defines filtration rules for incoming traffic based on IP and
MAC addresses sent in packets of protocols and TCP/UPD ports.
In order to implement the ACL function, the switch uses TCAM (Ternary Content Addressable
Memory) system resources. This resource is used for implementation of other device functions, for
example Selective Q-in-Q. Given that TCAM life span is limited, there are two modes of its utilization for
various circumstances. These modes are named ACL-only and ACL & SQinQ.
In ACL-only mode, the entire TCAM resource is dedicated to the ACL service. It allows the device
user to create the maximum number of rules for access control lists. Moreover, this mode allows to group
the identical rules, if they are applied to all the switch ports. It allows to greatly reduce the consumption
of TCAM resources.
To manage ACL rules in the ACL-only mode, additional parameter is used—the 'profile'. For each
port, there are 3 profiles available—0, 1, and 2. You can assign access lists to these profiles. During the
analysis, the traffic continuously checked for conformance to the access control list rules in the order
determined by the profile number. First of all, profile 0 rules are checked, then the profile 1 and lastly the
profile 2.
In order to preserve TCAM resources, general rules for all ports should be grouped in one of the
profiles.
The ACL-only mode limitation is the inability to use Selective Q-in-Q and MAC-based VLAN
functions.
The ACL & SQinQ mode enables simultaneous TCAM resource utilization by multiple services. TCAM
distribution across the services is performed automatically.
To estimate TCAM utilization, use the 'show system resources tcam' command.
ACLs for IPv6, IPv4 and MAC addresses should have different names.

ELTEX MES1000 Specifications

General

Model	MES1000
Layer	L2
VLAN	Not supported
Type	Unmanaged
Power Supply	External 5V DC
Operating Temperature	0°C to +40°C
Storage Temperature	-40°C to +70°C
Humidity	10 to 90% (non-condensing)

Summary

2 PRODUCT DESCRIPTION

2.2 Device Functions

Lists and describes the basic, MAC address processing, and second-layer OSI functions of the switches.

3 INSTALLATION AND CONNECTION

4 DEVICE STARTUP, INITIAL CONFIGURATION

4.3 Configuration procedure

Outlines the necessary information and steps for initial device configuration.

5 DEVICE MANAGEMENT COMMAND LINE INTERFACE

5.2 Basic commands

Lists and describes fundamental commands available in EXEC and Privileged EXEC modes.

5.10 Interface configuration

Covers configuration of Ethernet interfaces, port channels, and VLAN interfaces.

5.14 IPv4 addressing configuration

5.15 IPv6 addressing configuration

5.27 Security functions

Explains security functions, including port security, port-based authentication (802.1x), DHCP snooping, ARP inspection, and MAC address notification.

5.31 ACL Configuration (Access Control Lists)

Explains Access Control Lists for filtering traffic based on IP, MAC addresses, and TCP/UDP ports.

5.33 Quality of Services (QoS)

6 SERVICE MENU, CHANGE OF SOFTWARE

6.2 Update of software from TFTP server