Planet GS-4210-8UP2S User Manual

Planet GS-4210-8UP2S User Manual

8-port 10/100/1ooot 802.3bt poe + 2-port 100/1000x sfp managed ethernet switch 16/24-port 10/100/1 ooot 802.3bt poe++ plus 4-port gigabit tp/sfp combo managed ethernet switch
Table of Contents

Advertisement

Quick Links

User's Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C
8-Port 10/100/1000T 802.3bt PoE +
2-Port 100/1000X SFP
Managed Ethernet Switch
16/24-Port 10/100/1000T 802.3bt PoE++
plus 4-Port Gigabit TP/SFP Combo
16/24-Port 10/100/1000T 802.3bt PoE++
Managed Switch
plus 4-Port Gigabit TP/SFP Combo
Managed Ethernet Switch
GS-4210-8UP2S/
GS-4210-16UP4C/GS-4210-24UP4C
1

Advertisement

Table of Contents
loading

Summary of Contents for Planet GS-4210-8UP2S

  • Page 1 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 8-Port 10/100/1000T 802.3bt PoE + 2-Port 100/1000X SFP Managed Ethernet Switch 16/24-Port 10/100/1000T 802.3bt PoE++ plus 4-Port Gigabit TP/SFP Combo 16/24-Port 10/100/1000T 802.3bt PoE++ Managed Switch plus 4-Port Gigabit TP/SFP Combo Managed Ethernet Switch GS-4210-8UP2S/ GS-4210-16UP4C/GS-4210-24UP4C...
  • Page 2 PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their respective owners. Disclaimer PLANET Technology does not warrant that the hardware will work properly in all environments and applications, and makes no warranty and representation, either implied or expressed, with respect to the quality, performance, merchantability, or fitness for a particular purpose.
  • Page 3: Table Of Contents

    3.3 Administration Console ..........................46 3.4 Web Management ............................47 3.5 SNMP-based Network Management ......................48 3.6 PLANET Smart Discovery Utility ......................48 4. WEB CONFIGURATION ...................... 50 4.1 Main Web Page ............................52 4.1.1 Saving Configuration via the Web ........................54 4.1.2 Configuration Manager ............................
  • Page 4 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.1.3 IPv6 Configuration ............................. 59 4.2.1.4 User Configuration............................. 61 4.2.2 Time Settings ............................... 62 4.2.2.1 System Time .............................. 62 4.2.2.2 SNTP Server Settings ..........................65 4.2.3 Log Management ..............................66 4.2.3.1 Logging Service ............................66 4.2.3.2 Local Logging ............................67 4.2.3.3 Remote Syslog ............................
  • Page 5 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1.9 EEE ................................. 111 4.3.1.10 SFP Module Status ..........................112 4.3.1.11 SFP Module Detail Status ........................113 4.3.2 Link Aggregation ..............................114 4.3.2.1 LAG Setting ............................. 116 4.3.2.2 LAG Management ........................... 117 4.3.2.3 LAG Port Setting............................118 4.3.2.4 LACP Setting ............................
  • Page 6 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.6 IGMP Snooping ..............................178 4.3.6.1 IGMP Setting ............................182 4.3.6.2 IGMP Querier Setting ..........................184 4.3.6.3 IGMP Static Group ........................... 185 4.3.6.4 IGMP Group Table ........................... 186 4.3.6.5 IGMP Router Setting ..........................187 4.3.6.6 IGMP Router Table ..........................188 4.3.6.7 IGMP Forward All ............................
  • Page 7 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.2.5 DSCP Mapping ............................228 4.4.2.6 IP Precedence Mapping .......................... 230 4.4.3 QoS Basic Mode ..............................231 4.4.3.1 Global Settings ............................231 4.4.3.2 Port Settings ............................232 4.4.4 Bandwidth Control ............................. 233 4.4.4.1 Ingress Bandwidth Control ........................233 4.4.4.2 Egress Bandwidth Control ........................
  • Page 8 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.5.3 VLAN Setting ............................276 4.5.5.4 Port Setting .............................. 277 4.5.5.5 Statistics ..............................279 4.5.5.6 Database Agent ............................280 4.5.5.7 Rate Limit ..............................282 4.5.5.8 Option82 Global Setting .......................... 283 4.5.5.9 Option82 Port Setting ..........................284 4.5.5.10 Option82 Circuit-ID Setting ........................
  • Page 9 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.8.1.1 Save Configuration ..........................337 4.8.1.2 Factory Default ............................338 4.8.1.3 Reboot Switch ............................338 4.8.1.4 Backup Manager ............................. 339 4.8.1.5 Upgrade Manager............................ 340 4.8.1.6 Dual Image .............................. 341 4.8.2 Diagnostics ................................ 342 4.8.2.1 Cable Diagnostics............................ 342 4.8.2.2 Ping Test ..............................
  • Page 10 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.2.17 terminal command ............................363 6.3 Global Config Mode Commands ......................364 6.3.1 aaa Command ..............................364 6.3.2 boot Command ..............................364 6.3.3 clock Command ..............................364 6.3.4 dos Command ..............................364 6.3.5 dot1x Command ..............................365 6.3.6 do Command ..............................
  • Page 11: Introduction

    8. TROUBLESHOOTING ....................... 377 APPENDIX A Switch's RJ45 Pin Assignments ..............379 A.1 1000Mbps, 1000BASE-T .......................... 379 A.2 10/100Mbps, 10/100BASE-TX ........................379 1. INTRODUCTION Thank you for purchasing PLANET GS-4210 Managed Switch series, which comes with multiple Gigabit Ethernet copper and...
  • Page 12: Packet Contents

    1.2 Product Description Perfect Managed PoE++ Switches with Advanced L2/L4 Switching and Security PLANET GS-4210-8UP2S, GS-4210-16UP4C and GS-4210-24UP4C are cost-optimized, Gigabit 802.3bt PoE++ Managed Switches featuring PLANET intelligent PoE functions to improve the availability of critical business applications. They provide...
  • Page 13 With a total power budget of up to 180W, 400W and 720 watts for different kinds of PoE applications, the GS-4210-8UP2S, GS-4210-16UP4C and GS-4210-24UP4C provide a quick, safe and cost-effective 802.3bt PoE++ network solution for small businesses and enterprises.
  • Page 14 Redundant Ring, Fast Recovery for Critical Network Applications The GS-4210-8UP2S, GS-4210-16UP4C and GS-4210-24UP4C support redundant ring technology and feature strong, rapid self-recovery capability to prevent interruptions and external intrusions. They incorporate advanced ITU-T G.8032 ERPS (Ethernet Ring Protection Switching) technology, Spanning Tree Protocol (802.1s MSTP) into customer’s network to...
  • Page 15 802.3bt PoE++ 95-watt Power over 4-pair UTP Solution As the GS-4210-8UP2S, GS-4210-16UP4C and GS-4210-24UP4C adopt the IEEE 802.bt PoE++ standard technology, they are capable to source up to 95 watts of power by using all the four pairs of standard Cat5e/6 Ethernet cabling to deliver power and full-speed data to each remote PoE compliant powered device (PD).
  • Page 16 PoE Extension Intelligent Powered Device Alive Check The GS-4210-8UP2S, GS-4210-16UP4C and GS-4210-24UP4C can be configured to monitor connected PD status in real time via ping action. Once the PD stops working and responding, the GS-4210-8UP2S, GS-4210-16UP4C and GS-4210-24UP4C will resume the PoE port power and bring the PD back to work. They will greatly enhance the network reliability through the PoE...
  • Page 17 Scheduled Power Recycling The GS-4210-8UP2S, GS-4210-16UP4C and GS-4210-24UP4C allow each of the connected PoE IP cameras or PoE wireless access points to reboot at a specified time each week. Therefore, it will reduce the chance of IP camera or AP crash resulting from buffer overflow.
  • Page 18 IPv6/IPv4 Dual Stack Management Supporting both IPv6 and IPv4 protocols, the GS-4210-8UP2S, GS-4210-16UP4C and GS-4210-24UP4C help the SMBs to step in the IPv6 era with the lowest investment as their network facilities need not be replaced or overhauled if the IPv6 FTTx edge network is set up.
  • Page 19 Powerful Security The GS-4210-8UP2S, GS-4210-16UP4C and GS-4210-24UP4C offer comprehensive Layer 2 to Layer 4 Access Control List (ACL) for enforcing security to the edge. It can be used to restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or defined typical network applications.
  • Page 20 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Remote Management Solution PLANET's Universal Network Management System (UNI-NMS) and CloudViewer/CloudViewerPro app support IT staff by remotely managing all network devices and monitoring PDs' operational statuses. Thus, they're designed for both the enterprises and industries where deployments of PDs can be as remote as possible, without having to go to the actual location once a bug or faulty condition is found.
  • Page 21: How To Use This Manual

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 1.3 How to Use This Manual This User Manual is structured as follows: Section 2, INSTALLATION The section explains the functions of the Switch and how to physically install the Managed Switch. Section 3, SWITCH MANAGEMENT The section contains the information about the software function of the Managed Switch.
  • Page 22  Temperature threshold control  PoE Budget 720W/660W/600W(Factory default) mode option (GS-4210-24UP4C only)  Per port PoE function enable/disable  PoE PD Type for Standard/Legacy/UPOE mode option (GS-4210-8UP2S only)  Per port PoE Inline mode option (802.3BT (Factory default)/End-span/Mid-span) (GS-4210-16UP4C/24UP4C only) ...
  • Page 23 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Layer 2 Features ■ Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex) ■ High performance Store and Forward architecture, broadcast storm control, and runt/CRC filtering that eliminates erroneous packets to optimize the network bandwidth ■...
  • Page 24 ICMPv4/ICMPv6 remote ping ■ Link Layer Discovery Protocol (LLDP) and LLDP-MED ■ Event message logging to remote syslog server ■ Smart fan with speed control ■ PLANET Smart Discovery Utility for deployment management ■ PLANET NMS system and CloudViewer/CloudViewerPro for deployment management...
  • Page 25: Product Specifications

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 1.5 Product Specifications Product GS-4210-8UP2S Hardware Specifications Copper Ports 8 x 10/100/1000BASE-T RJ45 auto-MDI/MDI-X port 2 x 100/1000BASE-X SFP interface SFP Slots Supports 100/1000Mbps dual mode and DDM PoE Injector Port 8 ports with 802.3bt PoE++ injector function (Ports 1 to 8) <...
  • Page 26 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C PoE Ability PD @ 12.5 watts 8 units with standard mode PoE Ability PD @ 25 watts 7 units with standard mode PoE Ability PD @ 51 watts 3 units with standard mode PoE Ability PD @ 71 watts...
  • Page 27 SSHv2, TLSv1.2, SNMP v3 Firmware upgrade by HTTP/TFTP protocol through Ethernet network LLDP protocol System Management SNTP PLANET Smart Discovery Utility PLANET NMS System and CloudViewer/CloudViewerPro app Remote/Local Syslog Event Management System log RFC 1213 MIB-II RFC 1215 Generic Traps...
  • Page 28 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C IEEE 802.1s Multiple Spanning Tree Protocol IEEE 802.1p Class of Service IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP IEEE 802.3af Power over Ethernet IEEE 802.3at Power over Ethernet Plus IEEE 802.3bt Power over Ethernet Plus Plus IEEE 802.3az Energy Efficient Ethernet (EEE)
  • Page 29 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Product GS-4210-16UP4C GS-4210-24UP4C Hardware Specifications RJ45 Copper Ports 20 x 10/100/1000BASE-T RJ45 28 x 10/100/1000BASE-T RJ45 (MDI/MDIX) 16 ports with 802.3at/af/802.3bt PoE++ 24 ports with 802.3at/af/802.3bt PoE++ injector PoE Injector Port injector function (Ports 1 to 16)
  • Page 30 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Back pressure for half duplex Jumbo Frame 10K bytes Power over Ethernet IEEE 802.3bt PoE++ PSE PoE Standard Backward compatible with IEEE 802.3at/af PoE PSE  802.3BT  End-span PoE Power Supply Type  Mid-span Per port 54V DC ...
  • Page 31 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Protocol VLAN Private VLAN (Protected port) GVRP Link Aggregation IEEE 802.3ad LACP and static trunk IEEE 802.1D Spanning Tree Protocol (STP) IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) Spanning Tree Protocol IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
  • Page 32 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C PLANET Smart Discovery Utility PLANET NMS System and CloudViewer/CloudViewerPro app Remote/Local Syslog Event Management System log RFC 1213 MIB-II RFC 1215 Generic Traps RFC 1493 Bridge MIB RFC 2674 Bridge MIB Extensions RFC 2737 Entity MIB (v2)
  • Page 33: Installation

    The front panel provides a simple interface monitoring of the Managed Switch. Figure 2-1-1a, Figure 2-1-1b Figure 2-1-1c show the front panels of the Managed Switches. GS-4210-8UP2S Front Panel Figure 2-1-1a GS-4210-8UP2S Front Panel GS-4210-16UP4C Front Panel Figure 2-1-1b GS-4210-16UP4C Front Panel GS-4210-24UP4C Front Panel Figure 2-1-1c GS-4210-24UP4C Front Panel ■...
  • Page 34 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C ■ Console Port The console port is an RJ45 port connector. It is an interface for connecting a terminal directly. Through the console port, it provides rich diagnostic information including IP address setting, factory reset, port management, link status and system setting.
  • Page 35: Led Indications

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 2.1.2 LED Indications The front panel LEDs indicate instant status of port links, data activity and system power; it helps monitor and troubleshoot when needed. Figure 2-1-2a, Figure 2-1-2b Figure 2-1-2c show the LED indications of these Managed Switches.
  • Page 36 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C GS-4210-16UP4C LED Indication  LED Definition ■ System/Alert Color Function Green Lights to indicate that the Switch has power. Lights to indicate the system is working. Green Off to indicate the system is booting. FAN 3 Lights to indicate that FAN 3 is down.
  • Page 37 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C GS-4210-24UP4C LED Indication  LED Definition ■ System/Alert Color Function Green Lights to indicate that the Switch has power. Lights to indicate the system is working. Green Off to indicate the system is booting. FAN 3 Lights to indicate that FAN 3 is down.
  • Page 38: Switch Rear Panel

    Managed Switches GS-4210-8UP2S/GS-4210-16UP4C & GS-4210-24UP4C Rear Panels Figure 2-1-3a Rear Panels of GS-4210-8UP2S, GS-4210-16UP4C & GS-4210-24UP4C ■ AC Power Receptacle For compatibility with electric service in most areas of the world, the Managed Switch’s power supply automatically adjusts to line power in the range of 100-240V AC and 50/60 Hz.
  • Page 39: Installing The Switch

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 2.2 Installing the Switch This section describes how to install your Managed Switch and make connections to the Managed Switch. Please read the following topics and perform the procedures in the order being presented. To install your Managed Switch on a desktop or shelf, simply complete the following steps.
  • Page 40: Rack Mounting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 2.2.2 Rack Mounting To install the Managed Switch in a 19-inch standard rack, please follow the instructions described below. Step 1: Place the Managed Switch on a hard flat surface, with the front panel positioned towards the front side.
  • Page 41: Installing The Sfp Transceiver

    Figure 2-1-7 Plug in the SFP transceiver  Approved PLANET SFP Transceivers PLANET Managed Switch supports both single mode and multi-mode SFP transceivers. The following list of approved PLANET SFP transceivers is correct at the time of publication: Gigabit SFP Transceiver Modules...
  • Page 42 SFP-Port 100BASE-FX Transceiver (1310nm) – 60km MFB-F60 It is recommended to use PLANET SFP on the Managed Switch. If you insert an SFP transceiver that is not supported, the Managed Switch will not recognize it. In the installation steps below, this Manual uses Gigabit SFP transceiver as an example. However, the steps for Fast Ethernet SFP transceiver are similar.
  • Page 43 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 2-1-8 How to Pull Out the SFP Transceiver Never pull out the module without lifting up the lever of the module and turning it into a horizontal position. Directly pulling out the module could damage the module and the SFP module slot of the...
  • Page 44: Switch Management

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 3. SWITCH MANAGEMENT This chapter explains the methods that you can use to configure management access to the Managed Switch. It describes the types of management applications and the communication and management protocols that deliver data between your management device (workstation or personal computer) and the system.
  • Page 45: Management Access Overview

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 3.2 Management Access Overview The Managed Switch gives you the flexibility to access and manage it using any or all of the following methods:  An administration console  Web browser interface  An external SNMP-based network management application The administration console and Web browser interfaces are embedded in the Managed Switch software and are available for immediate use.
  • Page 46: Administration Console

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 3.3 Administration Console The administration console is an internal, character-oriented, and command line user interface for performing system administration such as displaying statistics or changing option settings. Using this method, you can view the administration console from a terminal, personal computer, Apple Macintosh, or workstation connected to the Managed Switch's console port.
  • Page 47: Web Management

    Managed Switch's console port. Web Management requires Google Chrome, Safari or Mozilla Firefox latest version. Figure 3-1-4 Web Main Screen of Managed Switch The following web screen based on the GS-4210-24UP4C is the same as GS-4210-8UP2S and GS-4210-16UP4C.
  • Page 48: Snmp-Based Network Management

    3.6 PLANET Smart Discovery Utility For easily listing the Managed Switch in your Ethernet environment, the Planet Smart Discovery Utility from user’s manual CD-ROM is an ideal solution. The following installation instructions are to guide you to running the Planet Smart Discovery Utility.
  • Page 49 When clicking the “Control Packet Force Broadcast” function, it allows you to assign a new setting value to the Web Smart Switch under a different IP subnet address. Press the “Connect to Device” button and the Web login screen appears in Figure 3-1-4. Press the “Exit” button to shut down the Planet Smart Discovery Utility.
  • Page 50: Web Configuration

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4. WEB CONFIGURATION This section introduces the configuration and functions of the Web-based management. About Web-based Management The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the network through a standard browser such as Google Chrome.
  • Page 51 Figure 4-2 Login screen Default User Name: admin Default Password: admin The following web screen based on the GS-4210-24UP4C is the same as GS-4210-8UP2S and GS-4210-16UP4C. After entering the username and password, the main screen appears as Figure 4-3.
  • Page 52: Main Web Page

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Now, you can use the Web management interface to continue the switch management or manage the Managed Switch by Web interface. The Switch Menu on the left of the web page lets you access all the commands and statistics the Managed Switch provides.
  • Page 53 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Main Menu Using the onboard Web agent, you can define system parameters, manage and control the Managed Switch, and all its ports, or monitor network conditions. Via the Web-Management, the administrator can set up the Managed Switch by selecting the functions those listed in the Main Function.
  • Page 54: Saving Configuration Via The Web

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.1.1 Saving Configuration via the Web To save all applied changes and set the current configuration as a startup configuration, the startup-configuration file will be loaded automatically across a system reboot. The screen in Figure 4-1-3 appears.
  • Page 55: Configuration Manager

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.1.2 Configuration Manager The system file folder contains configuration settings. The screen in Figure 4-1-5 appears. Figure 4-1-5 Save Button Screenshot The page includes the following fields: Object Description  Running Configuration Refers to the running configuration sequence used in the switch.
  • Page 56: System

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2 System Use the System menu items to display and configure basic administrative details of the Managed Switch. Under System the following topics are provided to configure and view the system information. This section has the following items: 4.2.1 Management...
  • Page 57: Management

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.1 Management 4.2.1.1 System Information The System Info page provides information for the current device information. System Info page helps a switch administrator to identify the hardware MAC address, software version and system uptime. The screens in Figure 4-2-1 appear.
  • Page 58: Ip Configuration

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.1.2 IP Configuration The IP Configuration includes the IP Address, Subnet Mask and Gateway. The configured column is used to view or change the IP configuration. Fill out the IP Address, Subnet Mask and Gateway for the device. The screens in Figure 4-2-2 &...
  • Page 59: Ipv6 Configuration

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-2-3 IP Information Page Screenshot The page includes the following fields: Object Description  DHCP State Display the current DHCP state.  IP Address Display the current IP address.  Subnet Mask Display the current subnet mask.
  • Page 60 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  IPv6 Address Provide the IPv6 address of this switch. IPv6 address is in 128-bit records represented as eight fields of up to four hexadecimal digits with a colon separating each field (:). For example, 'fe80::215:c5ff:fe03:4dc7'.
  • Page 61: User Configuration

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.1.4 User Configuration This page provides an overview of the current users and privilege type. Currently the only way to login as another user on the Web server is to close and reopen the browser. After the setup is completed, please press “Apply” button to take effect. Please login Web interface with a new user name and password;...
  • Page 62: Time Settings

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.2 Time Settings 4.2.2.1 System Time Configure SNTP on this page. SNTP is an acronym for Simple Network Time Protocol, a network protocol for synchronizing the clocks of computer systems. You can specify SNTP Servers and set GMT Time zone. The SNTP Configuration screens in Figure 4-2-8 &...
  • Page 63 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Daylight Saving Time duration to repeat the configuration every year. Select 'Non-Recurring' and configure the Daylight Saving Time duration for single time configuration. (Default: Disabled).  Daylight Saving Time Enter the number of minutes to add during Daylight Saving Time. ( Range: 1 to...
  • Page 64 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-2-9 Time Information Page Screenshot The page includes the following fields: Object Description  Current Data/Time Display the current data/time.  SNTP Display the current SNTP state.  Time Zone Display the current time zone.
  • Page 65: Sntp Server Settings

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.2.2 SNTP Server Settings The SNTP Server Configuration screens in Figure 4-2-10 & Figure 4-2-11 appear. Figure 4-2-10 SNTP Setup Page Screenshot The page includes the following fields: Object Description  SNTP Server Address Type the IP address or domain name of the SNTP server.
  • Page 66: Log Management

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.3 Log Management The Managed Switch log management is provided here. The local logs allow you to configure and limit system messages that are logged to flash or RAM memory. The default is for event levels 0 to 3 to be logged to flash and levels 0 to 6 to be logged to RAM.
  • Page 67: Local Logging

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.3.2 Local Logging The switch system local logging information is provided here. The local Log screens in Figure 4-2-14 & Figure 4-2-15 appear. Figure 4-2-14 Local Log Target Setting Page Screenshot The page includes the following fields:...
  • Page 68: Remote Syslog

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.3.3 Remote Syslog Configure remote syslog on this page. The Remote Syslog page allows you to configure the logging of messages that are sent to syslog servers or other management stations. You can also limit the event messages sent to only those messages below a specified level.
  • Page 69 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Server Address Provide the remote syslog IP address of this switch.  Server Port Provide the port number of remote syslog server. Default Port no.: 514  Severity The severity of the local log entry.
  • Page 70: Logging Message

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.3.4 Logging Message The switch log view is provided here. The Log View screens in Figure 4-2-18, Figure 4-2-19 & Figure 4-2-20 appear. Figure 4-2-18 Log Information Select Page Screenshot The page includes the following fields:...
  • Page 71 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-2-19 Logging Information Page Screenshot The page includes the following fields: Object Description  Target Display the current log target.  Severity Display the current log severity.  Category Display the current log category.  Total Entries Display the current log entries.
  • Page 72: Snmp Management

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.4 SNMP Management 4.2.4.1 SNMP Overview The Simple Network Management Protocol (SNMP) is an application layer protocol that facilitates the exchange of management information between network devices. It is part of the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol suite.
  • Page 73: Snmp Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.4.2 SNMP Setting Configure SNMP setting on this page. The SNMP System global setting screens in Figure 4-2-21 & Figure 4-2-22 appear. Figure 4-2-21 SNMP Global Setting Page Screenshot The page includes the following fields: Object Description ...
  • Page 74: Snmp Community

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.4.3 SNMP Community Configure SNMP Community on this page. The SNMP Community screens in Figure 4-2-23 & Figure 4-2-24 appear. Figure 4-2-23 Community Setting Page Screenshot The page includes the following fields: Object Description  Indicates the community read/write access string to permit access to SNMP agent.
  • Page 75: Snmp View

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.4.4 SNMP View Configure SNMPv3 view table on this page. The entry index keys are View Name and OID Subtree. The SNMPv3 View Table Setting screens in Figure 4-2-25 Figure 4-2-26 appear. Figure 4-2-25 SNMPv3 View Table Setting Page Screenshot...
  • Page 76: Snmp Access Group

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.4.5 SNMP Access Group Configure SNMPv3 access group on this page. The entry index keys are Group Name, Security Model and Security Level. The SNMPv3 Access Group Setting screens in Figure 4-2-27 & Figure 4-2-28 appear.
  • Page 77 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-2-28 SNMP View Table Status Page Screenshot The page includes the following fields: Object Description  Group Name Display the current SNMP access group name.  Security Model Display the current security model.  Security Level Display the current security level.
  • Page 78: Snmp User

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.4.6 SNMP User Configure SNMPv3 users table on this page. Each SNMPv3 user is defined by a unique name. Users must be configured with a specific security level and assigned to a group. The SNMPv3 group restricts users to a specific read, write, and notify view. The entry index key is User Name.
  • Page 79 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  DES: An optional flag to indicate that this user using DES authentication protocol.  Encryption Key A string identifying the privacy pass phrase. The allowed string length is 8 to 16. Buttons : Click to add a new user entry.
  • Page 80: Snmpv1, 2 Notification Recipients

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.4.7 SNMPv1, 2 Notification Recipients Configure SNMPv1 and 2 notification recipients on this page. The SNMPv1, 2 Notification Recipients screens in Figure 4-2-31 & Figure 4-2-32 appear. Figure 4-2-31 SNMPv1, 2 Notification Recipients Page Screenshot The page includes the following fields:...
  • Page 81: Snmpv3 Notification Recipients

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.4.8 SNMPv3 Notification Recipients Configure SNMPv3 notification recipients on this page. The SNMPv1, 2 Notification Recipients screens in Figure 4-2-33 & Figure 4-2-34 appear. Figure 4-2-33 SNMPv3 Notification Recipients Page Screenshot The page includes the following fields:...
  • Page 82: Snmp Engine Id

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.4.9 SNMP Engine ID Configure SNMPv3 Engine ID on this page. The entry index key is Engine ID. The remote engine ID is used to compute the security digest for authenticating and encrypting packets sent to a user on the remote host. The SNMPv3 Engine ID Setting...
  • Page 83: Snmp Remote Engine Id

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.4.10 SNMP Remote Engine ID Configure SNMPv3 remote Engine ID on this page. The SNMPv3 Remote Engine ID Setting screens in Figure 4-2-37 & Figure 4-2-38 appear. Figure 4-2-37 SNMPv3 Remote Engine ID Setting Page Screenshot...
  • Page 84: Rmon

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.5 RMON 4.2.5.1 RMON Overview RMON is the most important expansion of the standard SNMP. RMON is a set of MIB definitions, used to define standard network monitor functions and interfaces, enabling the communication between SNMP management terminals and remote monitors.
  • Page 85 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The Page includes the following fields: Object Description  Port Select port for this drop down list.  Drop Events The total number of events in which packets were dropped by the probe due to lack of resources.
  • Page 86: Rmon Event

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.5.3 RMON Event Configure RMON Event table on this page. The RMON Event screens in Figure 4-2-40 & Figure 4-2-41 appear. Figure 4-2-40 RMON Event Configuration Page Screenshot The page includes the following fields: Object Description ...
  • Page 87: Rmon Event Log

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-2-41 RMON Event Status Page Screenshot The page includes the following fields: Object Description  Index Display the current event index.  Event Type Display the current event type.  Community Display the current community for SNMP trap.
  • Page 88: Rmon Alarm

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.5.5 RMON Alarm Configure RMON Alarm table on this page. The RMON Alarm screens in Figure 4-2-43 & Figure 4-2-44 appear. Figure 4-2-43 RMON Alarm Table Page Screenshot The page includes the following fields: Object Description ...
  • Page 89 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C errors).  UnderSizePkts: The total number of frames received that were less than 64 octets long(excluding framing bits, but including FCS octets) and were otherwise well formed.  OverSizePkts: The total number of frames received that were longer than 1518 octets(excluding framing bits, but including FCS octets) and were otherwise well formed.
  • Page 90 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  Falling Threshold Falling threshold value (0–2147483647).  Rising Event Event to fire when the rising threshold is crossed.  Falling Event Event to fire when the falling threshold is crossed.  Owner Specify an owner for the alarm.
  • Page 91: Rmon History

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.2.5.6 RMON History Configure RMON History table on this page. The RMON History screens in Figure 4-2-45 & Figure 4-2-46 appear. Figure 4-2-45 RMON History Table Page Screenshot The page includes the following fields: Object Description ...
  • Page 92: Rmon History Log

    APs, VoIP phones, IP cameras, etc., compliant with the SNMP Protocol, ONVIF Protocol and PLANET Smart Discovery utility. The CloudViewer is a free networking service just for PLANET Products. This service provides simplified network monitoring and real-time network status. Working with PLANET CloudViewer app, user can easily check network status, device information, Port and PoE status from Internet.
  • Page 93 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The NMS Controller – LAN Configuration screens in Figure 4-2-49 appear. Figure 4-2-49 NMS Controller – LAN Configuration Page Screenshot Object Description  Remote NMS Enable Enable NMS management.  NMS Controller IP address The IP address of NMS Controller.
  • Page 94: Switching

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3 Switching Use the Switching menu items to display and configure management functions of the Managed Switch. This section has the following items: 4.3.1 Port Management ■ Port Configuration Configures port configuration settings. ■ Port Counters Lists Ethernet and RMON port statistics.
  • Page 95 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C ■ MST Instance Setting Configuration each MST instance setting. ■ MST Port Setting Configuration per port MST setting. ■ STP Statistics Display the STP statistics. 4.3.5 Multicast ■ Properties Configures multicast properties. ■ Multicast Throttling Setting Configures multicast throttling setting.
  • Page 96: Port Management

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1 Port Management Use the Port Menu to display or configure the Managed Switch's ports. 4.3.1.1 Port Configuration This page displays current port configurations and status. Ports can also be configured here. The table has one row for each...
  • Page 97 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  When Auto Speed is selected for a port, this section indicates the flow control Flow Control capability that is advertised to the link partner. When a fixed-speed setting is selected, that is what is used. Current Rx column indicates whether pause frames on the port are obeyed.
  • Page 98: Port Counters

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1.2 Port Counters This page provides an overview of traffic and trunk statistics for all switch ports. The Port Statistics screens in Figure 4-3-3, Figure 4-3-4, Figure 4-3-5 & Figure 4-3-6 appear. Figure 4-3-3 Port MIB Counters Page Screenshot...
  • Page 99 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Object Description  Received Octets The total number of octets received on the interface, including framing characters.  Received Unicast The number of subnetwork-unicast packets delivered to a higher-layer protocol. Packets  Received Unknown The number of packets received via the interface which is discarded because of Unicast Packets an unknown or unsupported protocol.
  • Page 100 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-5 Ethernet link Counters Page Screenshot Object Description  Alignment Errors The number of alignment errors (missynchronized data packets).  FCS Errors A count of frames received on a particular interface that are an integral number of octets in length but do not pass the FCS check.
  • Page 101 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-6 RMON Counters Page Screenshot Object Description  Drop Events The total number of events in which packets were dropped due to lack of resources.  Octets The total number of octets received and transmitted on the interface, including framing characters.
  • Page 102: Bandwidth Utilization

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1.3 Bandwidth Utilization The Bandwidth Utilization page displays the percentage of the total available bandwidth being used on the ports. Bandwidth utilization statistics can be viewed using a line graph. The Bandwidth Utilization screen in Figure 4-3-7 appears.
  • Page 103: Port Mirroring

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1.4 Port Mirroring Configure port Mirroring on this page. This function provides monitoring of network traffic that forwards a copy of each incoming or outgoing packet from one port of a network switch to another port where the packet can be studied. It enables the manager to keep close track of switch performance and alter it if necessary.
  • Page 104 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Session ID Set the port mirror session ID. Possible ID are: 1 to 4.  Monitor Session State Enable or disable the port mirroring function.  Destination Port Select the port to mirror destination port.
  • Page 105: Jumbo Frame

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1.5 Jumbo Frame This page provides to select the maximum frame size allowed for the switch port. The Jumbo Frame screen in Figure 4-3-11 & Figure 4-3-12 appear. Figure 4-3-11 Jumbo Frame Setting Page Screenshot The page includes the following fields:...
  • Page 106: Port Error Disabled Configuration

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1.6 Port Error Disabled Configuration This page provides to set port error disable function. The Port Error Disable Configuration screens in Figure 4-3-13 & Figure 4-3-14 appear. Figure 4-3-13 Error Disabled Recovery Page Screenshot The page includes the following fields:...
  • Page 107 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Buttons : Click to apply changes. Figure 4-3-14 Error Disabled Information Page Screenshot The page includes the following fields: Object Description  Recovery Interval Display the current recovery interval time.  BPDU Guard Display the current BPDU guard status.
  • Page 108: Port Error Disabled Status

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1.7 Port Error Disabled Status This page provides disable that transitions a port into error disable and the recovery options. The ports were disabled by some protocols such as BPDU Guard, Loopback and UDLD. The Port Error Disable screen in Figure 4-3-15 appears.
  • Page 109: Protected Ports

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1.8 Protected Ports Overview When a switch port is configured to be a member of protected group (also called Private VLAN), communication between protected ports within that group can be prevented. Two application examples are provided in this section: ...
  • Page 110 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The configuration of promiscuous and isolated ports applies to all private VLANs. When traffic comes in on a promiscuous port in a private VLAN, the VLAN mask from the VLAN table is applied. When traffic comes in on an isolated port, the private VLAN mask is applied in addition to the VLAN mask from the VLAN table.
  • Page 111: Eee

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1.9 EEE What is EEE EEE is a power saving option that reduces the power usage when there is low or no traffic utilization.EEE works by powering down circuits when there is no traffic. When a port gets data to be transmitted all circuits are powered up. The time it takes to power up the circuits is named wakeup time.
  • Page 112: Sfp Module Status

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1.10 SFP Module Status Managed switch has supported the SFP module with digital diagnostics monitoring (DDM) function, this feature is also known as digital optical monitoring (DOM). You can check the physical or operational status of an SFP module via the SFP Module Information Page.
  • Page 113: Sfp Module Detail Status

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.1.11 SFP Module Detail Status The SFP Module Detail Status screen in Figure 4-3-22 appears. Figure 4-3-22 SFP Module Detail Status Page Screenshot with Sample Switch The page includes the following fields: Object Description  Port The logical port for the settings contained in the same row.
  • Page 114: Link Aggregation

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.2 Link Aggregation Port Aggregation optimizes port usage by linking a group of ports together to form a single Link Aggregated Groups (LAGs). Port Aggregation multiplies the bandwidth between the devices, increases port flexibility, and provides link redundancy.
  • Page 115 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Partner Systems that require high-speed redundant links. Link aggregation lets you group up to eight consecutive ports into a single dedicated connection. This feature can expand bandwidth to a device on the network. LACP operation requires full-duplex mode.
  • Page 116: Lag Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.2.1 LAG Setting This page allows configuring load balance algorithm configuration settings. The LAG Setting screens in Figure 4-3-24 & Figure 4-3-25 appear. Figure 4-3-24 LAG Setting Page Screenshot The page includes the following fields: Object Description ...
  • Page 117: Lag Management

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.2.2 LAG Management This page is used to configure the LAG management. The LAG Management screens in Figure 4-3-26 & Figure 4-3-27 appear. Figure 4-3-26 LAG Management Page Screenshot The page includes the following fields: Object Description ...
  • Page 118: Lag Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.2.3 LAG Port Setting This page allows setting configuration for each LAG. The LAG Port Setting screens in Figure 4-3-28 & Figure 4-3-29 appear. Figure 4-3-28 LAG Port Setting Information Page Screenshot The page includes the following fields:...
  • Page 119 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-29 LAG Port Status Page Screenshot The page includes the following fields: Object Description  The LAG for the settings contained in the same row  Description Display the current description  Port Type Display the current port type ...
  • Page 120: Lacp Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.2.4 LACP Setting This page is used to configure the LACP system priority setting. The LACP Setting screens in Figure 4-3-30 & Figure 4-3-31 appear. Figure 4-3-30 LACP Setting Page Screenshot The page includes the following fields:...
  • Page 121: Lacp Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.2.5 LACP Port Setting This page is used to configure the LACP port setting. The LACP Port Setting screens in Figure 4-3-32 & Figure 4-3-33 appear. Figure 4-3-32 LACP Port Setting Page Screenshot The page includes the following fields:...
  • Page 122: Lag Status

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.2.6 LAG Status This page displays LAG status. The LAG Status screens in Figure 4-3-34 & Figure 4-3-35 appear. Figure 4-3-34 LAG Status Page Screenshot The page includes the following fields: Object Description  LAG Display the current trunk entry.
  • Page 123 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  “D” means standby  Mux LACP mux state machine status of the port  “DETACH” means the port is in detached state  “WAIT” means waiting state  “ATTACH” means attach state  “CLLCT” means collecting state ...
  • Page 124: Vlan

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3 VLAN 4.3.3.1 VLAN Overview A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. VLAN can be used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN.
  • Page 125: Ieee 802.1Q Vlan

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C This section has the following items:  Management VLAN Configures the management VLAN  Create VLAN Creates the VLAN group  Interface Settings Configures mode and PVID on the VLAN port  Port to VLAN Configures the VLAN membership ...
  • Page 126 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C ■ IEEE 802.1Q Standard IEEE 802.1Q (tagged) VLAN are implemented on the Switch. 802.1Q VLAN require tagging, which enables them to span the entire network (assuming all switches on the network are IEEE 802.1Q-compliant). VLAN allow a network to be segmented in order to reduce the size of broadcast domains. All packets entering a VLAN will only be forwarded to the stations (over IEEE 802.1Q enabled switches) that are members of that VLAN, and this includes broadcast,...
  • Page 127 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The Ether Type and VLAN ID are inserted after the MAC source address, but before the original Ether Type/Length or Logical Link Control. Because the packet is now a bit longer than it was originally, the Cyclic Redundancy Check (CRC) must be recalculated.
  • Page 128 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C ■ Assigning Ports to VLANs Before enabling VLANs for the switch, you must first assign each port to the VLAN group(s) in which it will participate. By default all ports are assigned to VLAN 1 as untagged ports. Add a port as a tagged port if you want it to carry traffic for one or more VLANs, and any intermediate network devices or the host at the other end of the connection supports VLANs.
  • Page 129: Management Vlan

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.3 Management VLAN Configure Management VLAN on this page. The screens in Figure 4-3-36 & Figure 4-3-37 appear. Figure 4-3-36 Management VLAN Setting Page Screenshot The page includes the following fields: Object Description  Management VLAN...
  • Page 130: Create Vlan

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.4 Create VLAN Create/delete VLAN on this page. The screens in Figure 4-3-38 & Figure 4-3-39 appear. Figure 4-3-38 VLAN Setting Page Screenshot The page includes the following fields: Object Description  Indicates the ID of this particular VLAN.
  • Page 131: Interface Settings

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.5 Interface Settings This page is used for configuring the Managed Switch port VLAN. The VLAN per Port Configuration Page contains fields for managing ports that are part of a VLAN. The port default VLAN ID (PVID) is configured on the VLAN Port Configuration Page.
  • Page 132 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The Managed Switch supports multiple VLAN tags and can therefore be used in MAN applications as a provider bridge, aggregating traffic from numerous independent customer LANs into the MAN (Metro Access Network) space. One of the purposes of the provider bridge is to recognize and use VLAN tags so that the VLANs in the MAN space can be used independent of the customers’...
  • Page 133 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Port Select Select port number for this drop down list to set VLAN port setting.  Interface VLAN Mode Set the port in access, trunk, hybrid and tunnel mode.
  • Page 134 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-41 Edit Interface Setting Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  Interface VLAN Mode Display the current interface VLAN mode.  PVID Display the current PVID.
  • Page 135: Port To Vlan

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.6 Port to VLAN Use the VLAN Static Table to configure port members for the selected VLAN index. This page allows you to add and delete port members of each VLAN. The screen in Figure 4-3-42 appears.
  • Page 136: Port Vlan Membership

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.7 Port VLAN Membership This page provides an overview of membership status for VLAN users. The VLAN Membership Status screen in Figure 4-3-43 appears. Figure 4-3-43 Port VLAN Membership Table Page Screenshot The page includes the following fields:...
  • Page 137: Protocol Vlan Group Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.8 Protocol VLAN Group Setting The network devices required to support multiple protocols cannot be easily grouped into a common VLAN. This may require non-standard devices to pass traffic between different VLANs in order to encompass all the devices participating in a specific protocol.
  • Page 138 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-45 Protocol VLAN Group State Page Screenshot The page includes the following fields: Object Description  Display the current group ID. Group ID  Frame Type Display the current frame type.  Protocol Value Display the current protocol value.
  • Page 139: Protocol Vlan Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.9 Protocol VLAN Port Setting This page allows you to map an already configured Group Name to a VLAN/port for the switch. The Protocol VLAN Port Setting/State screens in Figure 4-3-46 & Figure 4-3-47 appear. Figure 4-3-46 Protocol VLAN Port Setting Page Screenshot...
  • Page 140: Gvrp Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.10 GVRP Setting GARP VLAN Registration Protocol (GVRP) defines a way for switches to exchange VLAN information in order to register VLAN members on ports across the network. VLANs are dynamically configured based on join messages issued by host devices and propagated throughout the network.
  • Page 141 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  GVRP Controls whether GVRP is enabled or disabled on this switch. Buttons : Click to apply changes. Figure 4-3-49 GVRP Global Setting Page Screenshot The page includes the following fields:...
  • Page 142: Gvrp Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.11 GVRP Port Setting The GVRP Port Setting/Status screens in Figure 4-3-50 & Figure 4-3-51 appear. Figure 4-3-50 GVRP Global Setting Page Screenshot The page includes the following fields: Object Description  Port Select Select port for this drop down list to assign protocol VLAN port.
  • Page 143: Gvrp Vlan

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-51 GVRP Port Status Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  Enable Status Display the current GVRP port state.  Registration Mode Display the current registration mode.
  • Page 144: Gvrp Statistics

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.13 GVRP Statistics The GVRP Port Statistics and Error Statistics screens in Figure 4-3-53 & Figure 4-3-54 appear. Figure 4-3-53 GVRP Port Statistics Page Screenshot The page includes the following fields: Object Description  The switch port number of the logical port.
  • Page 145 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-54 GVRP Port Error Statistics Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  Invalid Protocol ID Display the current invalid protocol ID.
  • Page 146: Vlan Setting Example

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.14 VLAN setting example: - Separate VLANs - 802.1Q VLAN Trunk 4.3.3.14.1 Two separate 802.1Q VLANs The diagram shows how the Managed Switch handles Tagged and Untagged traffic flow for two VLANs. VLAN Group 2 and VLAN Group 3 are separated VLANs.
  • Page 147 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The scenario described as follows:  Untagged packet entering VLAN 2 While [PC-1] transmits an untagged packet enters Port-1, the Managed Switch will tag it with a VLAN Tag=2. [PC-2] and [PC-3] will received the packet through Port-2 and Port-3.
  • Page 148 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Assign VLAN mode and PVID to each port: Port-1,Port-2 and Port-3 : VLAN Mode = Hybrid, PVID=2 Port-4,Port-5 and Port-6 : VLAN Mode = Hybrid, PVID=3 Assign Tagged/Untagged to each port: VLAN ID = 2: Port-1 & 2 = Untagged, Port-3 = Tagged, Port -4~6 = Excluded.
  • Page 149: Vlan Trunking Between Two 802.1Q Aware Switches

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.3.14.2 VLAN Trunking between two 802.1Q aware switches In most cases, they are used for “Uplink” to other switches. VLANs are separated at different switches, but they need to access other switches within the same VLAN group. The screen in Figure 4-3-56 appears.
  • Page 150 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Assign VLAN mode and PVID to each port: Port-1,Port-2 and Port-3 : VLAN Mode = Hybrid, PVID=2 Port-4,Port-5 and Port-6 : VLAN Mode = Hybrid, PVID=3 Port-7 : VLAN Mode = Hybrid, PVID=1 Assign Tagged/Untagged to each port:...
  • Page 151 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C VLAN ID = 2: Port-1 & 2 = Untagged, Port-3 & 7 = Tagged, Port -4~6 = Excluded. VLAN ID = 3: Port-4 & 5 = Untagged, Port -6 & 7= Tagged, Port-1~3 = Excluded.
  • Page 152: Spanning Tree Protocol

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.4 Spanning Tree Protocol 4.3.4.1 Theory The Spanning Tree Protocol can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices in your network to ensure that only one route exists between any two stations on the network, and provide backup links which automatically take over when a primary link goes down.
  • Page 153 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C STP communicates between switches on the network using Bridge Protocol Data Units (BPDUs). Each BPDU contains the following information:  The unique identifier of the switch that the transmitting switch currently believes is the root switch ...
  • Page 154 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C A port transitions from one state to another as follows:  From initialization (switch boot) to blocking  From blocking to listening or to disabled  From listening to learning or to disabled  From learning to forwarding or to disabled ...
  • Page 155 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The following are the user-configurable STP parameters for the switch level: Parameter Description Default Value Bridge Identifier(Not user A combination of the User-set priority and 32768 + MAC the switch’s MAC address. configurable except by setting priority...
  • Page 156 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C User-Changeable STA Parameters The Switch’s factory default setting should cover the majority of installations. However, it is advisable to keep the default settings as set at the factory; unless, it is absolutely necessary. The user changeable parameters in the Switch are as follows: Priority –...
  • Page 157 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 3. Illustration of STP A simple illustration of three switches connected in a loop is depicted in the below diagram. In this example, you can anticipate some major network problems if the STP assistance is not applied.
  • Page 158 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C In this example, only the default STP values are used. Figure 4-3-59 After Applying the STA Rules The switch with the lowest Bridge ID (switch C) was elected the root bridge, and the ports were selected to give a high port cost between switches B and C.
  • Page 159: Stp Global Settings

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.4.2 STP Global Settings This page allows you to configure STP system settings. The settings are used by all STP Bridge instances in the Switch. The Managed Switch support the following Spanning Tree protocols: ‧ Compatiable -- Spanning Tree Protocol (STP):Provides a single path between end stations, avoiding and eliminating loops.
  • Page 160 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C RSTP-Operation and MSTP-Operation.  Configuration Name Identifier used to identify the configuration currently being used.  Configuration Revision Identifier used to identify the configuration currently being used. The values allowed are between 0 and 65535. The default value is 0.
  • Page 161: Stp Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.4.3 STP Port Setting This page allows you to configure per port STP settings. The STP Port Setting screens in Figure 4-3-62 & Figure 4-3-63 appear. Figure 4-3-62 STP Port Configuration Page Screenshot The page includes the following fields:...
  • Page 162 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C By default, the system automatically detects the speed and duplex mode used on each port, and configures the path cost according to the values shown below. Path cost “0” is used to indicate auto-configuration mode. When the short path cost method is selected and the default path cost recommended by the IEEE 8021w standard exceeds 65,535, the default is set to 65,535.
  • Page 163 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-63 STP Port Status Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical STP port.  Admin Enable Display the current STP port mode status.
  • Page 164: Cist Instance Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.4.4 CIST Instance Setting This Page allows you to configure CIST instance settings. The CIST Instance Setting and Information screens in Figure 4-3-64 & Figure 4-3-65 appear. Figure 4-3-64: CIST Instance Setting Page Screenshot The Page includes the following fields:...
  • Page 165 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C When exceeded, transmission of the next BPDU will be delayed. Valid values are in the range 1 to 10 BPDU's per second.  Hello Time The time that controls the switch to send out the BPDU packet to check STP current status.
  • Page 166: Cist Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.4.5 CIST Port Setting This page allows you to configure per port CIST priority and cost. The CIST Port Setting and Status screens in Figure 4-3-66 & Figure 4-3-67 appear. Figure 4-3-66 CIST Port Setting Page Screenshot...
  • Page 167 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-67 CIST Port Status Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical STP port.  Indentifier (Priority / Display the current indentifier (Priority / Port ID).
  • Page 168: Mst Instance Configuration

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.4.6 MST Instance Configuration This page allows the user to configure MST Instance Configuration. The MST Instance Setting, Information and Status screens Figure 4-3-68, Figure 4-3-69 & Figure 4-3-70 appear. Figure 4-3-68 MST Instance Setting Page Screenshot...
  • Page 169 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-70 MST Instance Status Page Screenshot The page includes the following fields: Object Description  MSTI ID Display the MSTI ID.  Regional Root Bridge Display the current designated root bridge.  Internal Root Cost Display the current internal root cost.
  • Page 170: Mst Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.4.7 MST Port Setting This page allows the user to inspect the current STP MSTI port configurations, and possibly change them as well. A MSTI port is a virtual port, which is instantiated separately for each active CIST (physical) port for each MSTI instance configured and applicable for the port.
  • Page 171 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-72 MST Port Status Page Screenshot The page includes the following fields: Object Description  MSTI ID Display the current MSTI ID.  Port The switch port number of the logical STP port.  Indentifier (Priority / Display the current indentifier (priority / port ID).
  • Page 172: Stp Statistics

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.4.8 STP Statistics This page displays STP statistics. The STP statistics screen in Figure 4-3-73 appears. Figure 4-3-73 STP Statistics Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical STP port.
  • Page 173: Multicast

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.5 Multicast This section has the following items:  Properties Configures multicast properties  IGMP Snooping Configures IGMP snooping settings  IGMP Snooping Statistics Display the IGMP snooping statistics  MLD Snooping Configures MLD snooping settings ...
  • Page 174: Multicast Throttling Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.5.2 Multicast Throttling Setting Multicast throttling sets a maximum number of multicast groups that a port can join at the same time. When the maximum number of groups is reached on a port, the switch can take one of two actions; either “deny” or “replace”. If the action is set to deny, any new multicast join reports will be dropped.
  • Page 175 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-77 IGMP Port Max Groups Information Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  Max Groups Display the current Max groups.  Action...
  • Page 176: Multicast Profile Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.5.3 Multicast Profile Setting In certain switch applications, the administrator may want to control the multicast services that are available to end users. For example, an IP/TV service is based on a specific subscription plan. The multicast filtering feature fulfills this requirement by restricting access to specified multicast services on a switch port.
  • Page 177 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  IP Type Select IPv4 or IPv6 for this drop down list.  Profile Index Indicates the ID of this particular profile.  Group from Specifies multicast groups to include in the profile. Specify a multicast group range by entering a start IP address.
  • Page 178: Igmp Snooping

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.6 IGMP Snooping The Internet Group Management Protocol (IGMP) lets host and routers share information about multicast groups memberships. IGMP snooping is a switch feature that monitors the exchange of IGMP messages and copies them to the CPU for feature processing.
  • Page 179 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Multicast Flooding IGMP Snooping Multicast Stream Control...
  • Page 180 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C IGMP Versions 1 and 2 Multicast groups allow members to join or leave at any time. IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group. IGMP version 1 is defined in RFC 1112. It has a fixed packet size and no optional data.
  • Page 181 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C IGMP State Transitions  IGMP Querier – A router, or multicast-enabled switch, can periodically ask their hosts if they want to receive multicast traffic. If there is more than one router/switch on the LAN performing IP multicasting, one of these devices is elected “querier” and assumes the role of querying the LAN for group members.
  • Page 182: Igmp Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.6.1 IGMP Setting This page provides IGMP Snooping related configuration. Most of the settings are global, whereas the Router Port configuration is related to the current unit, as reflected by the page header. The IGMP Snooping Setting and Information screens in...
  • Page 183 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-82 IGMP Snooping Information Page Screenshot The page includes the following fields: Object Description  Entry No. Display the current entry number.  VLAN ID Display the current VLAN ID.  IGMP Snooping Operation Status Display the current IGMP snooping operation status.
  • Page 184: Igmp Querier Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.6.2 IGMP Querier Setting This page provides IGMP Querier Setting. The IGMP Querier Setting screens in Figure 4-3-83 & Figure 4-3-84 appear. Figure 4-3-83 IGMP VLAN Setting Page Screenshot The page includes the following fields: Object Description ...
  • Page 185: Igmp Static Group

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.6.3 IGMP Static Group Multicast filtering can be dynamically configured using IGMP Snooping and IGMP Query messages as described in above sections. For certain applications that require tighter control, you may need to statically configure a multicast service on the Managed Switch.
  • Page 186: Igmp Group Table

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.6.4 IGMP Group Table This page provides Multicast Database. The IGMP Group Table screen in Figure 4-3-87 appears. Figure 4-3-87 IGMP Group Table Page Screenshot The page includes the following fields: Object Description  VLAN ID Display the current VID.
  • Page 187: Igmp Router Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.6.5 IGMP Router Setting Depending on your network connections, IGMP snooping may not always be able to locate the IGMP querier. Therefore, if the IGMP querier is a known multicast router/ switch connected over the network to an interface (port or trunk) on your Managed Switch, you can manually configure the interface (and a specified VLAN) to join all the current multicast groups supported by the attached router.
  • Page 188: Igmp Router Table

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.6.6 IGMP Router Table This page provides Router Table. The Dynamic, Static and Forbidden Router Table screens in Figure 4-3-90, Figure 4-3-91 & Figure 4-3-92 appear. Figure 4-3-90 Dynamic Router Table Page Screenshot The page includes the following fields:...
  • Page 189: Igmp Forward All

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.6.7 IGMP Forward All This page provides IGMP Forward All. The Forward All screen in Figure 4-3-93 appears. Figure 4-3-93 Forward All Setting Page Screenshot The page includes the following fields: Object Description  Select VLAN ID for this drop down list to assign IGMP membership.
  • Page 190: Igmp Snooping Statics

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.6.8 IGMP Snooping Statics This page provides IGMP Snooping Statics. The IGMP Snooping Statics screen in Figure 4-3-94 appears. Figure 4-3-94 Forward All Setting Page Screenshot The page includes the following fields: Object Description  Total RX Display current total RX.
  • Page 191: Igmp Filter Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.6.9 IGMP Filter Setting The Filter Setting and Status screens in Figure 4-3-95 & Figure 4-3-96 appear. Figure 4-3-95 Filter Setting Page Screenshot The page includes the following fields: Object Description  Port Select Select port number for this drop down list.
  • Page 192: Mld Snooping

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.7 MLD Snooping 4.3.7.1 MLD Setting This page provides MLD Snooping related configuration. Most of the settings are global, whereas the Router Port configuration is related to the current unit, as reflected by the page header. The MLD Snooping Setting, Information and Table screens in...
  • Page 193 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  MLD Snooping Status Display the current MLD snooping status.  MLD Snooping Version Display the current MLD snooping version.  MLD Snooping Report Suppression Display the current MLD snooping report suppression.
  • Page 194: Mld Static Group

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.7.2 MLD Static Group The MLD Static Group configuration screens in Figure 4-3-100 & Figure 4-3-101 appear. Figure 4-3-100 Add MLD Static Group Page Screenshot The page includes the following fields: Object Description  VLAN ID Select VLAN ID for this drop down list.
  • Page 195: Mld Group Table

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.7.3 MLD Group Table This page provides MLD Group Table. The MLD Group Table screen in Figure 4-3-102 appears. Figure 4-3-102 MLD Group Table Page Screenshot The page includes the following fields: Object Description  VLAN ID Display the current VID.
  • Page 196: Mld Router Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.7.4 MLD Router Setting Depending on your network connections, MLD snooping may not always be able to locate the MLD querier. Therefore, if the MLD querier is a known multicast router/ switch connected over the network to an interface (port or trunk) on your Managed Switch, you can manually configure the interface (and a specified VLAN) to join all the current multicast groups supported by the attached router.
  • Page 197: Mld Router Table

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.7.5 MLD Router Table This page provides Router Table. The Dynamic, Static and Forbidden Router Table screens in Figure 4-3-105, Figure 4-3-106 & Figure 4-3-107 appear. Figure 4-3-105 Dynamic Router Table Page Screenshot The page includes the following fields:...
  • Page 198: Mld Forward All

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.7.6 MLD Forward All This page provides MLD Forward All. The Forward All screen in Figure 4-3-108 appears. Figure 4-3-108 Forward All Setting Page Screenshot The page includes the following fields: Object Description  Select VLAN ID for this drop down list to assign MLD membership VLAN ID ...
  • Page 199: Mld Snooping Statics

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.7.7 MLD Snooping Statics This page provides MLD Snooping Statics. The MLD Snooping Statics screen in Figure 4-3-109 appears. Figure 4-3-109 Forward All Setting Page Screenshot The page includes the following fields: Object Description  Total RX Display current total RX.
  • Page 200: Mld Filter Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.7.8 MLD Filter Setting The Filter Setting and Status screens in Figure 4-3-110 & Figure 4-3-111 appear. Figure 4-3-110 Filter Setting Page Screenshot The page includes the following fields: Object Description  Port Select Select port number for this drop down list ...
  • Page 201: Lldp

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.8 LLDP 4.3.8.1 Link Layer Discovery Protocol Link Layer Discovery Protocol (LLDP) is used to discover basic information about neighboring devices on the local broadcast domain. LLDP is a Layer 2 protocol that uses periodic broadcasts to advertise information about the sending device. Advertised information is represented in Type Length Value (TLV) format according to the IEEE 802.1ab standard, and can include details...
  • Page 202 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C network discovery information up-to-date. The interval between each LLDP frame is determined by the Transmission Interval value. Valid values are restricted to 5 - 32768 seconds. Default: 30 seconds This attribute must comply with the following rule: (Transmission Interval * Hold Time Multiplier) ≤65536, and Transmission Interval...
  • Page 203: Lldp Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-113 LLDP Global Config Page Screenshot The page includes the following fields: Object Description  LLDP Enable Display the current LLDP status.  LLDP PDU Disable Action Display the current LLDP PDU disable action.  Transmission Interval Display the current transmission interval.
  • Page 204 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Port Select Select port for this drop down list  State Enables LLDP messages transmit and receive modes for LLDP Protocol Data Units. Options: ■ Tx only ■...
  • Page 205 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-115 LLDP Port Status Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  State Display the current LLDP status.  Selected Optional TLVs Display the current selected optional TLVs.
  • Page 206: Lldp Local Device

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-117 LLDP Port VLAN TLV Status Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  Selected VLAN Display the current selected VLAN. 4.3.8.4 LLDP Local Device Use the LLDP Local Device Information screen to display information about the switch, such as its MAC address, chassis ID, management IP address, and port information.
  • Page 207 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Chassis ID Subtype Display the current chassis ID subtype.  Chassis ID Display the current chassis ID.  System Name Display the current system name.  System Description Display the current system description.
  • Page 208: Lldp Remove Device

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.8.5 LLDP Remove Device This Page provides a status overview for all LLDP remove devices. The displayed table contains a row for each port on which an LLDP neighbor is detected. The LLDP Remove Device screen in Figure 4-3-120 appears.
  • Page 209: Med Network Policy

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.8.6 MED Network Policy Network Policy Discovery enables the efficient discovery and diagnosis of mismatch issues with the VLAN configuration, along with the associated Layer 2 and Layer 3 attributes, which apply for a set of specific protocol applications on that port. Improper network policy configurations are a very significant issue in VoIP environments that frequently result in voice quality degradation or loss of service.
  • Page 210 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-121 Voice Auto Mode Configuration and Network Policy Configuration Page Screenshot The page includes the following fields: Object Description  LLDP MED Policy for Set the LLDP MED policy for voice application mode Voice Application ...
  • Page 211 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Softphone Voice - for use by softphone applications on typical data centric devices, such as PCs or laptops. This class of endpoints frequently does not support multiple VLANs, if at all, and are typically configured to use an 'untagged’...
  • Page 212 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Buttons : Click to apply changes. Figure 4-3-122 LLDP MED Network Policy Table Page Screenshot The page includes the following fields: Object Description  Network Policy Number Display the current network policy number.  Application Display the current application.
  • Page 213: Med Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.8.7 MED Port Setting The Port LLDP MED Configuration/Port Setting Table screens in Figure 4-3-123 & Figure 4-3-124 appear. Figure 4-3-123 Port LLDP MED Configuration Page Screenshot The page includes the following fields: Object Description  Port Select Select port for this drop down list ...
  • Page 214 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-124 Port LLDP MED Configuration Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  LLDP MED Status Display the current LLDP MED status.
  • Page 215 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Port Select port for this drop down list.  Location Coordinate A string identifying the Location Coordinate that this entry should belong to .  Location Civic Address A string identifying the Location Civic Address that this entry should belong to.
  • Page 216: Lldp Statistics

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.8.8 LLDP Statistics Use the LLDP Device Statistics screen to general statistics for LLDP-capable devices attached to the switch, and for LLDP protocol messages transmitted or received on all local interfaces. The LLDP Global and Port Statistics screens in Figure 4-3-127 &...
  • Page 217 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-3-128 LLDP Port Statistics Page Screenshot The page includes the following fields: Object Description  Port The port on which LLDP frames are received or transmitted.  TX Frame – Total The number of LLDP frames transmitted on the port.
  • Page 218: Mac Address Table

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.9 MAC Address Table Switching of frames is based upon the DMAC address contained in the frame. The Managed Switch builds up a table that maps MAC addresses to switch ports for knowing which ports the frames should go to (based upon the DMAC address in the frame).
  • Page 219: Dynamic Address Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Object Description  MAC Address The MAC address of the entry  VLAN The VLAN ID of the entry  Type Indicates whether the entry is a static or dynamic entry  Port The ports that are members of the entry Buttons : Click to add dynamic MAC address to static MAC address.
  • Page 220: Static Mac Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.9.3 Static MAC Setting The static entries in the MAC table are shown in this table. The MAC table is sorted first by VLAN ID and then by MAC address. The Static MAC Setting screens in Figure 4-3-133 &...
  • Page 221: Mac Filtering

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.3.9.4 MAC Filtering By filtering MAC address, the switch can easily filter the per-configured MAC address and reduce the un-safety. The Static MAC Setting screens in Figure 4-3-135 & Figure 4-3-136 appear. Figure 4-3-135 MAC Filtering Setting Page Screenshot...
  • Page 222: Quality Of Service

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4 Quality of Service 4.4.1 Understanding QoS Quality of Service (QoS) is an advanced traffic prioritization feature that allows you to establish control over network traffic. QoS enables you to assign various grades of network service to different types of traffic, such as multi-media, video, protocol-specific, time critical, and file-backup traffic.
  • Page 223: General

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.2 General 4.4.2.1 QoS Properties The QoS Global Setting and Information screen in Figure 4-4-1 & Figure 4-4-2 appear. Figure 4-4-1 QoS Global Setting Page Screenshot The page includes the following fields: Object Description  QoS Mode...
  • Page 224: Qos Port Settings

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.2.2 QoS Port Settings The QoS Port Settings and Status screen in Figure 4-4-3 & Figure 4-4-4 appear. Figure 4-4-3 QoS Port Setting Page Screenshot The page includes the following fields: Object Description  Port Select Select port number for this drop down list.
  • Page 225: Queue Settings

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Port The switch port number of the logical port  CoS Value Display the current CoS value  Remark CoS Display the current remark CoS  Remark DSCP Display the current remark DSCP ...
  • Page 226: Cos Mapping

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-4-6 Queue Information Page Screenshot The page includes the following fields: Object Description  Information Name Display the current queue method information.  Information Value Display the current queue value information. 4.4.2.4 CoS Mapping The CoS to Queue and Queue to CoS Mapping screens in Figure 4-4-7 &...
  • Page 227 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  CoS Mapping Figure 4-4-8 CoS Mapping Page Screenshot The page includes the following fields: Object Description  CoS Display the current CoS value.  Mapping to Queue Display the current mapping to queue.  Queue Display the current queue value.
  • Page 228: Dscp Mapping

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.2.5 DSCP Mapping The DSCP to Queue and Queue to DSCP Mapping screens in Figure 4-4-9 & Figure 4-4-10 appear. Figure 4-4-9 DSCP to Queue and Queue to DSCP Mapping Page Screenshot The page includes the following fields:...
  • Page 229 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-4-10 DSCP Mapping Page Screenshot The page includes the following fields: Object Description  DSCP Display the current CoS value  Mapping to Queue Display the current mapping to queue  Queue Display the current queue value ...
  • Page 230: Ip Precedence Mapping

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.2.6 IP Precedence Mapping The IP Precedence to Queue and Queue to IP Precedence Mapping screens in Figure 4-4-11 & Figure 4-4-12 appear. Figure 4-4-11 IP Precedence to Queue and Queue to IP Precedence Mapping Page Screenshot...
  • Page 231: Qos Basic Mode

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.3 QoS Basic Mode 4.4.3.1 Global Settings The Basic Mode Global Settings and QoS Information screen in Figure 4-4-13 & Figure 4-4-14 appear. Figure 4-4-13 Basic Mode Global Settings Page Screenshot The page includes the following fields:...
  • Page 232: Port Settings

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.3.2 Port Settings The QoS Port Setting and Status screen in Figure 4-4-15 & Figure 4-4-16 appear. Figure 4-4-15 Basic Mode Global Settings Page Screenshot The page includes the following fields: Object Description  Port Select port number for this drop down list.
  • Page 233: Bandwidth Control

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.4 Bandwidth Control Configure the switch port rate limit for the switch port on this page. 4.4.4.1 Ingress Bandwidth Control This page provides to select the ingress bandwidth preamble. The Ingress Bandwidth Control Setting and Status screens in Figure 4-4-17 &...
  • Page 234: Egress Bandwidth Control

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.4.2 Egress Bandwidth Control This page provides to select the egress bandwidth preamble. The Egress Bandwidth Control Setting and Status screens in Figure 4-4-19 & Figure 4-4-20 appear. Figure 4-4-19 Egress Bandwidth Control Settings Page Screenshot...
  • Page 235: Egress Queue

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.4.3 Egress Queue The Egress Queue Bandwidth Control Settings and Status screens in Figure 4-4-21 & Figure 4-4-22 appear. Figure 4-4-21 Egress Queue Bandwidth Settings Page Screenshot The page includes the following fields: Object Description  Port Select port number for this drop down list.
  • Page 236: Storm Control

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.5 Storm Control Storm control for the switch is configured on this Page. There is an unknown unicast storm rate control, unknown multicast storm rate control, and a broadcast storm rate control. These only affect flooded frames, i.e. frames with a (VLAN ID, DMAC) pair not present on the MAC Address table.
  • Page 237: Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.5.2 Port Setting Storm control for the switch is configured on this page. There are three types of storm rate control:  Broadcast storm rate control  Unknown Multicast storm rate control  Unknown Unicast storm rate control The configuration indicates the permitted packet rate for unknown unicast, unknown multicast, or broadcast traffic across the switch.
  • Page 238 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-4-26 Storm Control Information Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  Display the current port state. Port State  Broadcast (Kbps/pps) Display the current broadcast storm control rate.
  • Page 239: Voice Vlan

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.6 Voice VLAN 4.4.6.1 Introduction to Voice VLAN Configure the switch port rate limit for the switch port on this page. Voice VLAN is specially configured for the user voice data traffic. By setting a Voice VLAN and adding the ports of the connected voice equipments to Voice VLAN, the user will be able to configure QoS (Quality of service) service for voice data, and improve voice data traffic transmission priority to ensure the calling quality.
  • Page 240: Properties

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.6.2 Properties The Voice VLAN feature enables voice traffic to forward on the Voice VLAN, and then the switch can be classified and scheduled to network traffic. It is recommended that there are two VLANs on a port -- one for voice, one for data.
  • Page 241 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-4-28 Properites Page Screenshot The page includes the following fields: Object Description  Voice VLAN State Display the current voice VLAN state.  Voice VLAN ID Display the current voice VLAN ID.  Remark CoS/802.1p Display the current remark CoS/802.1p.
  • Page 242: Telephony Oui Mac Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.6.3 Telephony OUI MAC Setting Configure VOICE VLAN OUI table on this Page. The Telephony OUI MAC Setting screens in Figure 4-4-29 & Figure 4-4-30 appear. Figure 4-4-29 Voice VLAN OUI Settings Page Screenshot The page includes the following fields:...
  • Page 243: Telephony Oui Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.4.6.4 Telephony OUI Port Setting The Voice VLAN feature enables voice traffic forwarding on the Voice VLAN, then the switch can classify and schedule network traffic. It is recommended that there be two VLANs on a port - one for voice, one for data. Before connecting the IP device to the switch, the IP phone should configure the voice VLAN ID correctly.
  • Page 244 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-4-32 Voice VLAN Port State Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  State Display the current state.  CoS Mode Display the current CoS mode.
  • Page 245: Security

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5 Security This section is to control the access of the Managed Switch, including the user access and management control. The Security Page contains links to the following main topics:  Access Security   802.1x ...
  • Page 246 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  Session Timeout Set the session timeout value.  Password Retry Count Set the password retry count value.  Silent Time Set the silent time value. Buttons : Click to apply changes : Click to disconnect telnet communication...
  • Page 247: Ssh

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.1.2 SSH Configure SSH on this Page. This Page shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the port is set-up for software-based learning.
  • Page 248 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-5-4 SSH Information Page Screenshot The page includes the following fields: Object Description  SSH Service Display the current SSH service.  Login Authentication List Display the current login authentication list.  Enable Authentication List Display the current enable authentication list.
  • Page 249: Http

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.1.3 HTTP The HTTP Settings and Information screens in Figure 4-5-5 & Figure 4-5-6 appear. Figure 4-5-5 HTTP Settings Page Screenshot The page includes the following fields: Object Description  HTTP Service Disable or enable HTTP service ...
  • Page 250: Https

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.1.4 HTTPs The HTTPs Settings and Information screen in Figure 4-5-7 & Figure 4-5-8 appear. Figure 4-5-7 HTTPs Settings Page Screenshot The page includes the following fields: Object Description  HTTPs Service Disable or enable HTTPs service.
  • Page 251: Access Method Profile Rules

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.1.5 Access Method Profile Rules The Access Method Profile Rules Table Setting and Table screens in Figure 4-5-9 & Figure 4-5-10 appear. Figure 4-5-9 Profile Rule Table Setting Page Screenshot The page includes the following fields:...
  • Page 252: Access Profiles

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  Port Display the current port list.  Source IPv4 Display the current source IPv4 address.  Source IPv4 Mask Display the current source IPv4 mask.  Source IPv6 Display the current source IPv6 address.  Source IPv6 Prefix Display the current source IPv6 prefix.
  • Page 253: Aaa

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.2 AAA Authentication, authorization, and accounting (AAA) provides a framework for configuring access control on the Managed Switch. The three security functions can be summarized as follows:  Authentication — Identifies users that request access to the network.
  • Page 254: Login List

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.2.1 Login List This page is to login list parameters. The authentication list screen in Figure 4-5-13 & Figure 4-5-14 appears. Figure 4-5-13 New Authentication List Screenshot The page includes the following fields: Object Description  List Name Defines a name for the authentication list.
  • Page 255: Enable List

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.2.2 Enable List This page is to login list parameters. The authentication list screens in Figure 4-5-15 & Figure 4-5-16 appear. Figure 4-5-15 New Authentication List Screenshot The page includes the following fields: Object Description  List Name Defines a name for the authentication list.
  • Page 256: Radius Server

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.2.3 RADIUS Server This page is to configure the RADIUS server connection session parameters. The RADIUS Settings screens in Figure 4-5-17, Figure 4-5-18 & Figure 4-5-19 appears. Figure 4-5-17 Use Default Parameters Page Screenshot The page includes the following fields:...
  • Page 257 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-5-18 New Radius Server Page Screenshot The page includes the following fields: Object Description  Server Definition Set the server definition.  Server IP Address of the Radius server IP/name.  Authentication Port The UDP port to use on the RADIUS Authentication Server. If the port is set to 0 (zero), the default port (1812) is used on the RADIUS Authentication Server.
  • Page 258 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  Server Priority Set the server priority  Dead Time The Dead Time, which can be set to a number between 0 and 3600 seconds, is the period during which the switch will not send new requests to a server that has failed to respond to a previous request.
  • Page 259: Tacacs+ Server

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.2.4 TACACS+ Server This page is to configure the RADIUS server connection session parameters. The RADIUS Settings screens in Figure 4-5-20, Figure 4-5-21 & Figure 4-5-22 appear. Figure 4-5-20 Use Default Parameters Page Screenshot The page includes the following fields:...
  • Page 260 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Server Definition Set the server definition.  Server IP Address of the TACACS+ server IP/name.  Server Port Network (TCP) port of TACACS+ server used for authentication messages.
  • Page 261: 261

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.3 802.1X Overview of 802.1X (Port-based) Authentication In the 802.1X-world, the user is called the supplicant, the switch is the authenticator, and the RADIUS server is the authentication server. The switch acts as the man-in-the-middle, forwarding requests and responses between the supplicant and the authentication server.
  • Page 262 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  Device Roles With 802.1X port-based authentication, the devices in the network have specific roles as shown below. Figure 4-5-23  Client—the device (workstation) that requests access to the LAN and switch services and responds to requests from the switch.
  • Page 263 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  Authentication Initiation and Message Exchange The switch or the client can initiate authentication. If you enable authentication on a port by using the dot1x port-control auto interface configuration command, the switch must initiate authentication when it determines that the port link state transitions from down to up.
  • Page 264 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  Ports in Authorized and Unauthorized States The switch port state determines whether or not the client is granted access to the network. The port starts in the unauthorized state. While in this state, the port disallows all ingress and egress traffic except for 802.1X protocol packets. When a client is successfully authenticated, the port transitions to the authorized state, allowing all traffic for the client to flow normally.
  • Page 265: Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.3.2 802.1X Setting This page allows you to configure the IEEE 802.1X authentication system. The IEEE 802.1X standard defines a port-based access control procedure that prevents unauthorized access to a network by requiring users to first submit credentials for authentication. One or more central servers, the backend servers, determine whether the user is allowed access to the network.
  • Page 266: Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.3.3 802.1X Port Setting This page allows you to configure the IEEE 802.1X Port Setting. The 802.1X Port Setting screens in Figure 4-5-27 & Figure 4-5-28 appear. Figure 4-5-27 802.1X Port Setting Page Screenshot The page includes the following fields:...
  • Page 267 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  Reauthentication Determines the period, in seconds, after which a connected client must be Period reauthenticated. This is only active if the Reauthentication Enabled checkbox is checked. Valid values are in the range 30 to 65535 seconds.
  • Page 268: Guest Vlan Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.3.4 Guest VLAN Setting Overview When a Guest VLAN enabled port's link comes up, the switch starts transmitting EAPOL Request Identity frames. If the number of transmissions of such frames exceeds Max. Reauth. Count and no EAPOL frames have been received in the meantime, the switch considers entering the Guest VLAN.
  • Page 269 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The "Guest VLAN Enabled" checkbox provides a quick way to globally enable/disable Guest VLAN functionality.  When checked, the individual ports' ditto setting determines whether the port can be moved into Guest VLAN.  When unchecked, the ability to move to the Guest VLAN is disabled for all ports.
  • Page 270: Authenticated Host

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.3.5 Authenticated Host The Authenticated Host Table screen in Figure 4-5-31 appears. Figure 4-5-31 Authenticated Host Table Page Screenshot The page includes the following fields: Object Description  User Name Display the current user name.  Port Display the current port number.
  • Page 271: Port Security

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.4 Port Security This page allows you to configure the Port Security Limit Control system and port settings. Limit Control allows for limiting the number of users on a given port. A user is identified by a MAC address and VLAN ID. If Limit Control is enabled on a port, the limit specifies the maximum number of users on the port.
  • Page 272 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C remain shut down. There are three ways to re-open the port: 1) Disable and re-enable Limit Control on the port or the switch, 2) Click the Reopen button.  Discard: If Limit + 1 MAC addresses is seen on the port, it will trigger the action that do not learn the new MAC and drop the package.
  • Page 273: Dhcp Snooping

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.5 DHCP Snooping 4.5.5.1 DHCP Snooping Overview The addresses assigned to DHCP clients on unsecure ports can be carefully controlled using the dynamic bindings registered with DHCP Snooping. DHCP snooping allows a switch to protect a network from rogue DHCP servers or other devices which send port-related information to a DHCP server.
  • Page 274 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  Filtering rules are implemented as follows: ■ If the global DHCP snooping is disabled, all DHCP packets are forwarded. ■ If DHCP snooping is enabled globally, and also enabled on the VLAN where the DHCP packet is received, all DHCP packets are forwarded for a trusted port.
  • Page 275: Global Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.5.2 Global Setting DHCP Snooping is used to block intruder on the untrusted ports of switch when it tries to intervene by injecting a bogus DHCP reply packet to a legitimate conversation between the DHCP client and server. Configure DHCP Snooping on this page. The...
  • Page 276: Vlan Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.5.3 VLAN Setting Command Usage  When DHCP snooping is enabled globally on the switch, and enabled on the specified VLAN, DHCP packet filtering will be performed on any untrusted ports within the VLAN.  When the DHCP snooping is globally disabled, DHCP snooping can still be configured for specific VLANs, but the changes will not take effect until DHCP snooping is globally re-enabled.
  • Page 277: Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.5.4 Port Setting Configures switch ports as trusted or untrusted. Command Usage  A trusted interface is an interface that is configured to receive only messages from within the network. An untrusted interface is an interface that is configured to receive messages from outside the network or firewall.
  • Page 278 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-5-39 DHCP Snooping Port Setting Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  Type Display the current type.  Chaddr Check Display the current chaddr check.
  • Page 279: Statistics

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.5.5 Statistics The DHCP Snooping Statistics screen in Figure 4-5-40 appears. Figure 4-5-40 DHCP Snooping Statistics Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.
  • Page 280: Database Agent

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.5.6 Database Agent Overview of the DHCP Snooping Database Agent When DHCP snooping is enabled, the switch uses the DHCP snooping binding database to store information about untrusted interfaces. The database can have up to 8192 bindings.
  • Page 281 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Database Type Select database type.  File Name The name of file image.  Remote Server Fill in your remote server IP address.  Write Delay Specify the duration for which the transfer should be delayed after the binding database changes.
  • Page 282: Rate Limit

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.5.7 Rate Limit After enabling DHCP snooping, the switch will monitor all the DHCP messages and implement software transmission. The DHCP Rate Limit Setting and Config screens in Figure 4-5-43 & Figure 4-5-44 appear. Figure 4-5-43 DHCP Rate Limit Setting Page Screenshot...
  • Page 283: Option82 Global Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.5.8 Option82 Global Setting DHCP provides a relay mechanism for sending information about the switch and its DHCP clients to DHCP servers. Known as DHCP Option 82, it allows compatible DHCP servers to use the information when assigning IP addresses, or to set other services or policies for clients.
  • Page 284: Option82 Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-5-46 Option82 Global Setting Page Screenshot The page includes the following fields: Object Description  Option82 Remote ID Display the current option82 remote ID. 4.5.5.9 Option82 Port Setting This function is used to set the retransmitting policy of the system for the received DHCP request message which contains option82.
  • Page 285 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Port Select port for this drop down list.  Enable Enable or disable option82 function on port.  Allow Untrusted Select modes for this drop down list. The following modes are available: ...
  • Page 286: Option82 Circuit-Id Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.5.10 Option82 Circuit-ID Setting Set creation method for option82, users can define the parameters of circuit-id suboption by themselves. Option82 Circuit-ID Setting screens in Figure 4-5-49 & Figure 4-5-50 appear. Figure 4-5-49 Option82 Port Circuit-ID Setting Page Screenshot...
  • Page 287: Dynamic Arp Inspection

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.6 Dynamic ARP Inspection Dynamic ARP Inspection (DAI) is a secure feature. Several types of attacks can be launched against a host or devices connected to Layer 2 networks by "poisoning" the ARP caches. This feature is used to block such attacks. Only valid ARP requests and responses can go through DUT.
  • Page 288: Vlan Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.6.2 VLAN Setting DAI VLAN Setting screens in Figure 4-5-53 & Figure 4-5-54 appear. Figure 4-5-53 DAI VLAN Setting Page Screenshot The page includes the following fields: Object Description VLAN ID Indicates the ID of this particular VLAN.
  • Page 289: Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.6.3 Port Setting Configures switch ports as DAI trusted or untrusted and check mode. DAI Port Setting screens in Figure 4-5-55 & Figure 4-5-56 appear. Figure 4-5-55 DAI Port Setting Page Screenshot The page includes the following fields:...
  • Page 290 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-5-56 DAI Port Setting Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  Type Display the current port type.  Src-Mac Chk Display the current Src-Mac Chk status.
  • Page 291: Statistics

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.6.4 Statistics Configures switch ports as DAI trusted or untrusted and check mode. DAI Port Setting screen in Figure 4-5-57 appears. Figure 4-5-57 DAI Port Setting Page Screenshot The page includes the following fields: Object Description ...
  • Page 292: Arp Rate Limit

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.6.5 ARP Rate Limit The ARP Rate Limit Setting and Config screens in Figure 4-5-58 & Figure 4-5-59 appear. Figure 4-5-58 ARP Rate Limit Setting Page Screenshot The page includes the following fields: Object Description  Port Select port for this drop down list.
  • Page 293: Ip Source Guard

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.7 IP Source Guard IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host.
  • Page 294: Port Settings

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.7.1 Port Settings IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host.
  • Page 295 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-5-61 IP Source Guard Port Setting Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical port.  Status Display the current status.  Verify Source Display the current verify source.
  • Page 296: Binding Table

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.7.2 Binding Table The IP Source Guard Static Binding Entry and Table Status screens in Figure 4-5-62 & Figure 4-5-63 appear. Figure 4-5-62 IP Source Guard Static Binding Entry Page Screenshot The page includes the following fields:...
  • Page 297: Dos

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.8 DoS The DoS is short for Denial of Service, which is a simple but effective destructive attack on the internet. The server under DoS attack will drop normal user data packet due to non-stop processing the attacker’s data packet, leading to the denial of the service and worse can lead to leak of sensitive data of the server.
  • Page 298 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  DMAC = SMAC Enable or disable DoS check mode by DMAC = SMAC.  Land Enable or disable DoS check mode by land.  UDP Blat Enable or disable DoS check mode by UDP blat.
  • Page 299 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-5-65 DoS Information Page Screenshot The page includes the following fields: Object Description  DMAC = SMAC Display the current DMAC = SMAC status.  Land Attack Display the current land attach status.  UDP Blat Display the current UDP blat status.
  • Page 300: Dos Port Setting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.8.2 DoS Port Setting The DoS Port Setting and Status screens in Figure 4-5-66 & Figure 4-5-67 appear. Figure 4-5-66 Port Security Setting Page Screenshot The page includes the following fields: Object Description  Port Select Select port for this drop down list.
  • Page 301: Access Control List

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.9 Access Control List ACL is an acronym for Access Control List. It is the list table of ACEs, containing access control entries that specify individual users or groups permitted or denied to specific traffic objects, such as a process or a program. Each accessible traffic object contains an identifier to its ACL.
  • Page 302: Mac-Based Acl

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.9.1 MAC-Based ACL This page shows the ACL status by different ACL users. Each row describes the ACE that is defined. It is a conflict if a specific ACE is not applied to the hardware due to hardware limitations. MAC-based ACL screens in Figure 4-5-68 &...
  • Page 303: Mac-Based Ace

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.9.2 MAC-Based ACE An ACE consists of several parameters. Different parameter options are displayed depending on the frame type that you selected. The MAC-based ACE screen in Figure 4-5-70 & Figure 4-5-71 appears. Figure 4-5-70 MAC-Based ACE Page Screenshot...
  • Page 304 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  Any: No DA MAC filter is specified.  User Defined: If you want to filter a specific destination MAC address with this ACE, choose this value. A field for entering a DA MAC value appears.
  • Page 305 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  ACL Name Display the current ACL name.  Sequence Display the current sequence.  Action Display the current action.  Destination MAC Address Display the current destination MAC address.
  • Page 306: Ipv4-Based Acl

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.9.3 IPv4-Based ACL This page shows the ACL status by different ACL users. Each row describes the ACE that is defined. It is a conflict if a specific ACE is not applied to the hardware due to hardware limitations. IPv4-based ACL screens in Figure 4-5-72 &...
  • Page 307: Ipv4-Based Ace

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.9.4 IPv4-Based ACE An ACE consists of several parameters. Different parameter options are displayed depending on the frame type that you selected. The IPv4-based ACE screens in Figure 4-5-74 & Figure 4-5-75 appear. Figure 4-5-74 IP-Based ACE Page Screenshot...
  • Page 308 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  ACL Name Select ACL name for this drop down list.  Sequence Set the ACL sequence.  Action Indicates the forwarding action of the ACE.  Permit: Frames matching the ACE may be forwarded and learned.
  • Page 309 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C you can enter a specific source port range value. A field for entering a source port value appears. The allowed range is 0 to 65535. A frame that hits this ACE matches this source port value.
  • Page 310 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C ACE.  Set: TCP frames where the SYN field is set must be able to match this entry.  Unset: TCP frames where the SYN field is set must not be able to match this entry.
  • Page 311 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-5-75 IPv4-Based ACE Table Page Screenshot The page includes the following fields: Object Description  ACL Name Display the current ACL name.  Sequence Display the current sequence.  Action Display the current action.  Protocol Display the current protocol.
  • Page 312: Ipv6-Based Acl

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.9.5 IPv6-Based ACL This page shows the ACL status by different ACL users. Each row describes the ACE that is defined. It is a conflict if a specific ACE is not applied to the hardware due to hardware limitations. IPv6-based ACL screens in Figure 4-5-76 &...
  • Page 313: Ipv6-Based Ace

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.9.6 IPv6-based ACE An ACE consists of several parameters. Different parameter options are displayed depending on the frame type that you selected. The IPv6-based ACE screens in Figure 4-5-78 & Figure 4-5-79 appear. Figure 4-5-78 IP-Based ACE Page Screenshot...
  • Page 314 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  ACL Name Select ACL name for this drop down list.  Sequence Set the ACL sequence.  Action Indicates the forwarding action of the ACE.  Permit: Frames matching the ACE may be forwarded and learned.
  • Page 315 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C matches this source port value.  Range: If you want to filter a specific source port range filter with this ACE, you can enter a specific source port range value. A field for entering a source port value appears.
  • Page 316 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C  Don’t Care: Any value is allowed ("don't-care"). Specify the TCP "Synchronize sequence numbers" (SYN) value for this ACE.  Set: TCP frames where the SYN field is set must be able to match this entry.
  • Page 317 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Buttons : Click to add ACE list Figure 4-5-79 IPv6-based ACE Table Page Screenshot The page includes the following fields: Object Description  ACL Name Display the current ACL name.  Sequence Display the current sequence.
  • Page 318: Acl Binding

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.5.9.7 ACL Binding This page allows you to bind the Policy content to the appropriate ACLs. The ACL Policy screens in Figure 4-5-80 & Figure 4-5-81 appears. Figure 4-5-80 ACL Binding Page Screenshot The page includes the following fields:...
  • Page 319: Ring

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.6 Ring Use the Maintenance menu items to display and configure basic configurations of The Wall-mount Managed Switch. Under maintenance, the following topics are provided to back up, upgrade, save and restore the configuration. This section has the following items: ■...
  • Page 320: Ring Wizard

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.6.1 Ring Wizard This page allows the user to configure the ERPS by wizard; screen in Figure 4-6-1 appears. Figure 4-6-1 Ring Wizard page screenshot The page includes the following fields: Object Description  All Switch Numbers Set all the switch numbers for the ring group.
  • Page 321: Erps

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.6.2 ERPS This page allows the user to inspect and configure the current ERPS Instance; screen in Figure 4-6-2 Figure 4-6-3 appears. Figure 4-6-2 Ethernet Ring Protocol Switch page screenshot Object Description  Enable Enables ERPS on the switch. ERPS must be enabled globally on the switch before it can enable on an ERPS ring.
  • Page 322 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Buttons : Click to add a new Protection group entry. : Click to refresh the page immediately. : Click to save changes. Click to undo any changes made locally and revert to previously saved values. Figure 4-6-3 Ethernet Ring Protocol Switch Configuration page screenshot...
  • Page 323 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Instance Command: Object Description  Command Administrative command. A port can be administratively configured to be in either manual switch or forced switch state.  Port Port selection - Port0 or Port1 of the protection Group on which the command is applied.
  • Page 324: Power Over Ethernet

    600 watts, operating temperature around 50 degrees C (Factory default mode) The following web screen based on GS-4210-24UP4C will be the same as that of GS-4210-8UP2S and GS-4210-16UP4C, except the numbers of PoE chipset and PoE budget information. Figure 4-7-1 Power over Ethernet Web Screen...
  • Page 325: Power Over Ethernet Powered Device

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.7.1 Power over Ethernet Powered Device Voice over IP phones Enterprise can install POE VoIP Phone, ATA and other Ethernet/non-Ethernet end-devices in the central area where UPS is 3~5 watts installed for un-interruptible power system and power control system.
  • Page 326: Power Over Ethernet Configuration

    PoE power budget automatically.  Power Budget GS-4210-8UP2S provides 180 watts PoE Budget. GS-4210-16UP4C provides 400 watts PoE Budget. GS-4210-24UP4C provides following PoE Budget options. 720 watts, operating temperature < 40 degrees C...
  • Page 327 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C This section allows the user to inspect and configure the current PoE port settings Figure 4-7-4 shows. Figure 4-7-4 Per Port Power over Ethernet Configuration Screenshot...
  • Page 328 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  PoE Mode There are three modes for PoE mode.  Enable: enable PoE function.  Disable: disable PoE function.  Schedule: enable PoE function in schedule mode.
  • Page 329 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C mode is used to support legacy devices.  UPOE: Set inline mode to PoH (Power over HD-BASE-T) 4-pair PoE+ PSE Pins 1-2 (pair #2 in both T568A and T568B) form one side of the DC supply and pins 3-6 (pair #3 in both T568A and T568B) provide the return.
  • Page 330: Poe Status

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.7.3 PoE Status This page displays to per port PoE usage status, the screen in Figure 4-7-5 appears. Figure 4-7-5 PoE Status Screenshot The page includes the following fields: Object Description  Port Number Displays per port status.
  • Page 331: Poe Schedule

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.7.4 PoE Schedule This page allows the user to define PoE schedule and scheduled power recycling. PoE Schedule Besides being used as an IP Surveillance, the Managed PoE switch is certainly applicable to construct any PoE network including VoIP and Wireless LAN.
  • Page 332 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The screen in Figure 4-7-6 appears. Figure 4-7-6 PoE Schedule Screenshot Please press Add New Rule button to start setting PoE Schedule function. You have to set PoE schedule to profile and then go back to PoE Port Configuration, and select “Schedule” mode from per port “PoE Mode” option to enable you to indicate...
  • Page 333 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Profile Set the schedule profile mode. Possible profiles are: Profile1 Profile2 Profile3 Profile4  Week Day Allows user to set week day for defining PoE function by enabling it on the day.
  • Page 334: Alive Check Configuration

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.7.5 Alive Check Configuration The GS-4210 802.3BT PoE++ Series can be configured to monitor connected PD’s status in real-time via ping action. Once the PD stops working and without response, the PoE Switch is going to restart PoE port power, and bring the PD back to work. It will greatly enhance the reliability and reduces administrator management burden.
  • Page 335 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Mode Allows user to enable or disable per port PD Alive Check function. By default, all ports are disabled.  Ping PD IP Address This column allows user to set PoE device IP address for system making ping to the PoE device.
  • Page 336 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Figure 4-7-8 PD Alive Check Configuration Screenshot...
  • Page 337: Maintenance

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.8 Maintenance Use the Maintenance menu items to display and configure basic configurations of the GS-4210 802.3BT PoE++ Series. Under maintenance, the following two topics are provided: ■ Switch Maintenance You can save the configuration, reboot or reset default, configuration backup/restore of the switch on this page.
  • Page 338: Factory Default

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.8.1.2 Factory Default You can reset the configuration default of the switch on this page. Only the IP configuration is retained. The new configuration is available immediately, which means that no restart is necessary. The Factory Default screen in...
  • Page 339: Backup Manager

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.8.1.4 Backup Manager This function allows backup of the current image or configuration of the Managed Switch to the local management station. The Backup Manager screen in Figure 4-8-4 appears. Figure 4-8-4 Backup Manager Page Screenshot...
  • Page 340: Upgrade Manager

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.8.1.5 Upgrade Manager This function allows reloading of the current image or configuration of the Managed Switch to the local management station. The Upgrade Manager screen in Figure 4-8-5 appears. Figure 4-8-5 Upgrade Manager Page Screenshot...
  • Page 341: Dual Image

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.8.1.6 Dual Image This page provides information about the active and backup firmware images in the device, and allows you to revert to the backup image. The web page displays two tables with information about the active and backup firmware images. The Dual...
  • Page 342: Diagnostics

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.8.2 Diagnostics This section provide the Physical layer and IP layer network diagnostics tools for troubleshoot. The diagnostic tools are designed for network manager to help them quickly diagnose problems between point to point and better service customers.
  • Page 343 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The page includes the following fields: Object Description  Port Select port for this drop down list. Buttons : Click to run the diagnostics Figure 4-8-9 Test Results Page Screenshot The page includes the following fields:...
  • Page 344: Ping Test

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.8.2.2 Ping Test This page allows you to issue ICMP PING packets to troubleshoot IP connectivity issues. After you press “Apply”, ICMP packets are transmitted, and the sequence number and roundtrip time are displayed upon reception of a reply. The page refreshes automatically until responses to all packets are received, or until a timeout occurs.
  • Page 345: Ipv6 Ping Test

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 4.8.2.3 IPv6 Ping Test This page allows you to issue ICMPv6 PING packets to troubleshoot IPv6 connectivity issues. After you press “Apply”, 5 ICMPv6 packets are transmitted, and the sequence number and roundtrip time are displayed upon reception of a reply.
  • Page 346: Command Line Interface

    (CLI) is very similar to entering commands on a UNIX system. This chapter describes how to use the Command Line Interface (CLI). The following screen based on GS-4210-24UP4C will be the same as that of GS-4210-8UP2S and GS-4210-16UP4C.
  • Page 347 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C Configure IP address The GS-4210 802.3BT PoE++ Series is shipped with default IP address as follows: IP Address: 192.168.0.100 Subnet Mask: 255.255.255.0 To check the current IP address or modify a new IP address for the GS-4210 802.3BT PoE++ Series, please use the procedures as follows: ...
  • Page 348: Telnet Login

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 5.2 Telnet Login The GS-4210 802.3BT PoE++ Series also supports telnet for remote management. The Managed Switch asks for user name and password for remote login when using telnet, please use “admin” for username & password.
  • Page 349: Command Line Mode

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6. Command Line Mode The CLI groups all the commands in appropriate modes according to the nature of the command. A sample of the CLI command modes are described below. Each of the command modes supports specific software commands.
  • Page 350: User Mode Commands

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The CLI provides the following modes: User Mode When the operator logs into the CLI, the User Mode is the initial mode. The User Mode contains a limited set of commands. The command prompt shown at this level is: Command Prompt: GS-4210-24UP4C >...
  • Page 351: Exit Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.1.2 exit command Description: Exit current mode and down to previous mode Syntax: exit Example: GS-4210-24UP4C# exit GS-4210-24UP4C> 6.1.3 ping command Description: Send ICMP ECHO_REQUEST to network hosts Syntax: ping HOSTNAME (Host name) Example: GS-4210-24UP4C> ping 192.168.0.100 PING 192.168.0.100 (192.168.0.100): 56 data bytes...
  • Page 352 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C show history Description: List the last several history commands Syntax: show history Example: GS-4210-24UP4C> show history show info Description: Show basic information Syntax: show info Example: GS-4210-24UP4C> show info show ip Description: Show the IP Address, Subnet Mask, Default Gateway...
  • Page 353: Terminal Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C show version Description: Show the system hardware and software status Syntax: show version Example: GS-4210-24UP4C> show version Loader Version : 1.0.0.48161 Loader Date : Jan 13 2020 - 15:18:03 Firmware Version : 2.305b200122 Firmware Date : Jan 22 2020 - 14:49:27 GS-4210-24UP4C>...
  • Page 354 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C clear gvrp Description: Clear the GVRP configuration Syntax: clear GVRP error-statistics (GVRP Error Statistics information) clear GVRP statistics (GVRP Statistics information) Example: GS-4210-24UP4C# clear gvrp error-statistics GS-4210-24UP4C# clear gvrp statistics GS-4210-24UP4C# clear interfaces Description: Clear the Interface status and configuration Syntax: clear interface LAG <1-8>...
  • Page 355 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C clear ip arp Description: Clear the IP configuration Syntax: clear ip arp inspection interfaces LAG <1-8> statistics clear ip arp inspection interfaces GigabitEthernet <1-26> statistics Example: GS-4210-24UP4C# clear ip arp inspection interfaces lag 1 statistics GS-4210-24UP4C# clear ip arp inspection interfaces GigabitEthernet 1 statistics...
  • Page 356 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C clear ipv6 Description: Clear the ipv6 information Syntax: clear ipv6 mld snooping groups dynamic/static clear ipv6 mld snooping statistics clear ipv6 mld snooping vlan x static-mac xx:xx:xx:xx:xx:xx Example: GS-4210-24UP4C# clear ipv6 mld snooping groups dynamic GS-4210-24UP4C# clear ipv6 mld snooping groups static...
  • Page 357 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C clear logging Description: Clear log configuration Syntax: clear logging buffered/flash Example: GS-4210-24UP4C# clear logging buffered GS-4210-24UP4C# clear logging flash GS-4210-24UP4C# clear mac Description: Clear MAC configuration Syntax: clear mac address-table dynamic interface lag x clear mac address-table dynamic interface GigabitEthernet x...
  • Page 358: Clock Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.2.2 clock command Description: Manage the system clock Syntax: clock set HH:MM:SS:Month: Date: Year Example: GS-4210-24UP4C# clock set 13:36:00 jul 3 2014 13:36:00 DFL(UTC+8) Jul 03 2014 GS-4210-24UP4C# 6.2.3 configure command Description: Enter Global Config mode...
  • Page 359: Debug Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.2.5 debug command Description: Debug Options Syntax: debug acl all/common/reserve/user-defined Example: GS-4210-24UP4C# debug acl all GS-4210-24UP4C# debug acl common GS-4210-24UP4C# debug acl reserve GS-4210-24UP4C# debug acl user-defined GS-4210-24UP4C# 6.2.6 delete command Description: Delete a file from the flash file system...
  • Page 360: End Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.2.8 end command Description: End current mode and change to enable mode Syntax: Example: GS-4210-24UP4C(config)# end GS-4210-24UP4C# 6.2.9 exit command Description: Exit current mode and down to previous mode Syntax: exit Example: GS-4210-24UP4C# exit GS-4210-24UP4C> 6.2.10 ping command...
  • Page 361: Reboot Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.2.11 reboot command Description: Halt and perform a cold restart Syntax: reboot Example: GS-4210-24UP4C# reboot *Jul 03 14:22:09: %System-4: System reboot 6.2.12 renew command Description: RenewIP configuration Syntax: renew ip dhcp snooping database Example: GS-4210-24UP4C# renew ip dhcp snooping database GS-4210-24UP4C# 6.2.13 restore-defaults command...
  • Page 362: Show Command

    Country Name (2 letter code) [AU]:TW State or Province Name (full name) [Some-State]:TW Locality Name (eg, city) []:Taipei Organization Name (eg, company) [Internet Widgits Pty Ltd]:PLANET Organizational Unit Name (eg, section) []:GS-4210-24UP4C Common Name (e.g. server FQDN or YOUR name) []:Marc Email Address []:marcl@planet.com.tw...
  • Page 363: Terminal Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.2.17 terminal command Description: Terminal configuration Syntax: terminal length<0-24> Length value. 0 means no limit Example: GS-4210-24UP4C# terminal length 0 GS-4210-24UP4C#...
  • Page 364: Global Config Mode Commands

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.3 Global Config Mode Commands 6.3.1 aaa Command Description: AAA (Authentication, Authorization, Accounting) Syntax: aaa accounting commands/exec/system/update aaa authentication enable/login 6.3.2 boot Command Description: Booting Operations Syntax: boot host auto-config boot system image0/1 6.3.3 clock Command...
  • Page 365: Dot1X Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C land-deny Source IP equals to destination IP nullscan-deny NULL Scan Attacks pod-deny Ping of Death Attacks smurf-deny Smurf Attacks smurf-netmask DoS information syn-sportl1024-deny SYN packets with sport less than 1024 synfin-deny SYN and FIN bits set in the packet...
  • Page 366: End Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.3.8 end Command Description: End current mode and change to enable mode Syntax: 6.3.9 errdisable Command Description: Error Disable Syntax: errdisable recovery cause/interval 6.3.10 exit Command Description: Exit current mode and down to previous mode Syntax: Exit 6.3.11 fpga Command...
  • Page 367: Hostname Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.3.13 hostname Command Description: Set system's network name Syntax: hostname WORD (this system's network name) 6.3.14 interface Command Description: Select an interface to configure Syntax: Interface GigabitEthernet/LAG/range 6.3.15 ip Command Description: IP configuration Syntax: acl This command creates an ACL, which perform classification on layer 3 fields and enters ip-access configuration mode.
  • Page 368: Ipv6 Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.3.16 ipv6 Command Description: IPV6 configuration Syntax: ipv6 acl This command creates an ACL, which perform classification onlayer 3 fields and enters to ipv6-access configuration mode. address Set IPv6 address and prefix autoconfig Enable Ipv6 auto-configuration...
  • Page 369: Lldp Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.3.21 lldp Command Description: LLDP Configuration Syntax: lldp holdtime-multiplier Configure LLDP holdtime multiplier lldpdu Configure LLDP PDU handling when LLDP is disabled LLDP MED configuration reinit-delay Configure LLDP reinitialization delay tx-delay Configure LLDP TX delay tx-interval Configure LLDP transmission interval 6.3.22 logging Command...
  • Page 370: Mirror Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.3.25 mirror Command Description: Mirror configuration Syntax: mirror session <1-4> Session ID (e.g. 1-4)configuraton destination/source interface/GigabitEthernet <1-26> GigabitEthernet device number 6.3.26 no Command Description: Negate command Syntax: 6.3.27 poe Command Description: This command provide PoE configuration...
  • Page 371: Port-Security Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.3.28 port-security Command Description: Port security Configuration Syntax: port-security 6.3.29 qos Command Description: Enable/Disable QoS on the device and enter the QoS mode (advance/basic) Syntax: advanced Enable/Disable QoS on the device and enter the QoS mode (advance/basic).
  • Page 372: Snmp Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.3.32 Snmp Command Description: SNMP information Syntax: snmp community Set community or security name string engineid SNMP engine id setting group Set access group string host Trap or inform host trap Snmp class trap setting user...
  • Page 373: Storm-Control Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.3.35 storm-control Command Description: Storm control configuration Syntax: Storm-control Interframe configuration unit Unit configuration 6.3.36 system Command Description: System information Syntax: contact Set host contact location Set host location name Set host name 6.3.37 tacacs Command...
  • Page 374: Vlan Command

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 6.3.39 vlan Command Description: VLAN Configuration Syntax: vlan VLAN-LIST VLAN List (e.g. 3,6-8): The range of VLAN ID is 1 to 4094 protocol-vlan 802.1v protocol VLAN configuration 6.3.40 voice-vlan Command Description: Voice VLAN Configuration Syntax: voice vlan <1-4094> (Specifies the Voice VLAN Identifier)
  • Page 375: Switch Operation

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 7. SWITCH OPERATION 7.1 Address Table The Switch is implemented with an address table. This address table is composed of many entries. Each entry is used to store the address information of some nodes on the network, including MAC address, port no, etc. This information comes from the learning process of Ethernet Switch.
  • Page 376: Auto-Negotiation

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 7.5 Auto-Negotiation The STP ports on the Switch have a built-in "Auto-negotiation". This technology automatically sets the best possible bandwidth when a connection is established with another network device (usually at Power On or Reset). This is done by detecting the modes and speeds when both devices are connected.
  • Page 377: Troubleshooting

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C 8. TROUBLESHOOTING This chapter contains information to help you solve your issue. If the Managed Switch is not functioning properly, make sure the Managed Switch is set up according to instructions in this manual. ■ The Link LED is not lit...
  • Page 378 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C ■ Why the PoE Ethernet Switch doesn’t connect to the network Solution: Check the LNK/ACT LED on the PoE Ethernet Switch. Try another port on the PoE Ethernet Switch. Make sure the cable is installed properly and make sure the cable is the right type. Turn off the power. After a while, turn on power again.
  • Page 379: Appendix A Switch's Rj45 Pin Assignments

    User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C APPENDIX A Switch's RJ45 Pin Assignments A.1 1000Mbps, 1000BASE-T Contact MDI-X BI_DA+ BI_DB+ BI_DA- BI_DB- BI_DB+ BI_DA+ BI_DC+ BI_DD+ BI_DC- BI_DD- BI_DB- BI_DA- BI_DD+ BI_DC+ BI_DD- BI_DC- Implicit implementation of the crossover function within a twisted-pair cable, or at a wiring panel, while not expressly forbidden, is beyond the scope of this standard.
  • Page 380 User’s Manual of GS-4210-8UP2S/GS-4210-16UP4C/GS-4210-24UP4C The standard cable, RJ45 pin assignment The standard RJ45 receptacle/connector There are 8 wires on a standard UTP/STP cable and each wire is color-coded. The following shows the pin allocation and color of straight cable and crossover cable connection:...

This manual is also suitable for:

Gs-4210-16up4cGs-4210-24up4c

Table of Contents