Managed 8 & 9 port switches, eight 10/100base-tx ethernet ports plus one 100base-fx port / eight 10/100base-tx ethernet ports plus one 1000base-sx port / eight 10/100base-tx ethernet ports (88 pages)
4 10/100/1000tx plus 4 sfp managed switch (99 pages)
Summary of Contents for MiLAN MIL-SM2401M-STK
Page 1
24-Port + One Dual-Module Expansion Slot Stackable Managed Switch MIL-SM2401M-STK USER GUIDE...
Page 2
In no event shall MiLAN Technology be liable for incidental or consequential damages, costs, or expenses arising out of or in connection with the performance of the product delivered hereunder.
Table of Contents 1. Introduction Features Software Features Package Contents Management Methods Console and Telnet Management Web-based Management SNMP Network Management Ethernet Switching Technology 2. Hardware Description Front Panel LED Indicators Rear Panel Desktop Installation Rack-mounted Installation Power On 3. Network Application Small Workgroup Segment Bridge Stacking Workgroup...
Page 4
6. Console Menu Management 6-1. Main Menu 6-2. Status and Counters 6-2-1. Port Status 6-2-2. Port Counters 6-2-3. System Information 6-3. Switch Configuration 6-3-1. Administration Configuration 6-3-1-1. Device Information 6-3-1-2. IP Configuration 6-3-1-3. User Name Configuration 6-3-1-4. Password Configuration 6-3-2. Port Configuration 6-3-3.
Page 5
6-3-8-1. MAC Address Ageing Time 6-3-8-2. Broadcast Storm Filtering 6-3-8-3. Max Bridge Transmit Delay Bound 6-3-8-4. Collision Retry Forever 6-3-8-5. Hash Algorithm 6-3-8-6. IFG Compensation 6-3-8-7. IP Stacking Group ID (0…65535) 6-3-8-8. IP Stacking Mode 6-4. Protocol Related Configuration 6-4-1. STP 6-4-1-1.
Page 6
7. Web-Based Management 7-1. System Login 7-2. Port Status 7-3. Port Statistics 7-4. Administrator 7-4-1. IP Address 7-4-2. Switch Setting 7-4-2-1. Basic Switch Settings 7-4-2-2. Advanced Settings 7-4-2-3. Miscellaneous Settings 7-4-3. Console Port Information 7-4-4. Port Controls 7-4-5. Trunking 7-4-5-1. Aggregator Setting 7-4-5-2.
Page 7
7-4-12-1. System Configuration 7-4-12-2. Per Port Configuration 7-4-12-3. 802.1X Miscellaneous Configuration 7-4-13. TFTP Update Firmware 7-4-14. Configuration Backup 7-4-14-1. TFTP Restore Configuration 7-4-14-2. TFTP Backup Configuration 7-4-15. Factory Default 7-4-16. System Reboot 7-5. Panel List 7-6. IP Stacking 7-6-1. Setting up an IP Stacking Group 8.
Introduction The MIL-SM2401M-STK managed switch is a multi-port switch that can be used to build high-performance switched workgroup networks. This switch is a store-and-forward device that offers low latency for high-speed networking. The switch is targeted at workgroup, department or backbone computing environments.
Features Conforms to IEEE802.3 10BASE-T, 802.3u 100BASE-TX/FX, 802.3ab 1000BASE-T, 802.3z Gigabit fiber 24 10/100 Ethernet ports plus one expansion slot IEEE802.3x Flow control Flow control for full duplex Backpressure for half duplex High back-plane bandwidth 8.8Gbps IEEE802.3ad Port trunk with LACP Broadcast storm filter Stack management via single IP address IGMP support for Multi Media application...
Software Features Provides SNMP, Web browser, Telnet and local RS-232 Management console management. The telnet and console also supports command line interface. RFC 1157 SNMP, RFC 1213 MIB II, RFC 1643 Ethernet RFC Standard like, RFC 1493 Bridge MIB, RFC 1757 RMON 1, RFC 1215 Trap, RFC 2674 VLAN MIB, private MIB.
Page 12
Bandwidth Control Each port supports bandwidth control. Per level 100Kbps. Supports single IP management feature, stacked up to 8 units. Stacking and switch management can be through Stacking any port, including the uplink module. Supports IEEE802.1x User-Authentication and can report to RADIUS server.
User Guide (CD Manual) Warranty Card If any item is missing or damaged, please contact your local dealer for service. Management Methods The MIL-SM2401M-STK switch series supports the following management methods: Console and Telnet Management Web-based Management SNMP Network Management Console and Telnet Management Console Management is done through the RS-232 Console Port.
Telnet. Web-based Management The switch provides an embedded HTML web server residing in flash memory. It offers advanced management features and allows users to manage the switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer or Netscape.
This revolutionized networking. First, by allowing two-way, simultaneous transmissions over the same port (Full-duplex), that essentially doubled the bandwidth. Second, by reducing the collision domain to a single switch-port, that eliminated the need for carrier sensing. Third, by using the store-and-forward technology’s approach of inspecting each packet to intercept corrupt or redundant...
Hardware Description Front Panel The Front Panel of the MIL-SM2401M-STK switch series consists of 24 10/100Base-TX RJ-45 ports (Auto MDI/MDIX) and one expansion slot. The LED Indicators and console port are also located on the front panel of the switch.
LED Indicators The LED Indicators give real-time information of systematic operation status. The following table provides descriptions of LED statuses and their meaning. Status Green Power Green 100M Green LNK/ACT Blinks Orange FDX/COL Blinks Table 2-1. The Description of LED Indicators Figure 2-2.
Rear Panel The 3-pronged power plug is located at the rear panel of the MIL-SM2401M-STK as shown in Figure 2-3. The Switch will work with AC in the range 100-240V AC, 50-60Hz. Figure 2-3. The Rear Panel of the 24 10/100TX plus one Exp. Slot stackable switch...
Desktop Installation Set the switch on a sufficiently large flat space with a power outlet nearby. The surface where you put your switch should be clean, smooth, level and sturdy. Provide enough clearance around the switch to allow attachment of cables, power cord and allow air circulation.
Rack-mounted Installation The MIL-SM2401M-STK switch come with a rack-mounted kid and can be mounted in an EIA standard size, 19-inch Rack. The switch can be placed in a wiring closet with other equipment. Perform the following steps to rack mount the switch: A.
Figure 2-6. Mount the switch in an EIA standard 19-inch Rack Note: For proper ventilation, allow about at least 4 inches (10 cm) of clearance on the front and 3.4 inches (8 cm) on the back of the Switch. This is especially important for enclosed rack installation.
Network Application This section provides you a few samples of network topology in which the Switch is used. In general, the 24 10/100TX plus one Exp. Slot Single IP Stackable Switch is designed as a segment switch. That is, with its large address table (8000 MAC address) and high performance, it is ideal for interconnecting networking segments.
Small Workgroup The MIL-SM2401M-STK switch can be used as a standalone switch to which personal computers, servers and printer servers are directly connected to form a small workgroup. Figure 3-1. Small Workgroup Application...
Segment Bridge For enterprise networks where large data broadcasts are constantly processed, this switch is an ideal solution for department users to connect to the corporate backbone. In the illustration below, two Ethernet switches with PCs, print servers, and local servers attached, are both connected to the switch.
Stacking Workgroup Up to eight (8) individual MIL-SM2401M-STK switches can be connected to form a single logical unit using embedded stacking technology. The stack behaves as a single switching unit that is manageable by a master switch elected from one of the member switches.
Console Management Connecting a Terminal or PC to the Console Port Console management involves the administration of the switch via a direct connection to the RS-232 console port. This port is a female DB-9 connector. From the main menu of the console program, the user has access to manage the functions of the switch.
Communication Parameters After the connection between Switch and PC is finished, turn on the PC and run a terminal emulation program or Hyper Terminal to match the following default characteristics of the console port: Baud Rate: 9600 bps Data Bits: 8...
The default user name is root; the default password is root. 1. The switch also provides a serial interface to manage and monitor the switch. The user can follow the Console Port Information provided by the web to use the Windows HyperTerminal program to link the switch.
Page 29
4. The switch is shipped with a default IP address of 192.168.1.77. The default subnet mask is 255.255.255.0.
Console Management Options The system supports two types of console management – CLI Command and Menu Selection. After you login to the system, you will see a command prompt. To enter the Menu Selection management interface, type “menu” at the command prompt and you will see the main menu interface.
To enter CLI Command management interface, type “enable” at the command prompt. The following tables list the CLI commands and descriptions. 5-1. Commands Level Access Modes Method Begin a User EXEC session with your switch. Enter the enable Privileged command EXEC while in user EXEC mode. Enter the...
Page 32
Enter the interface command (with a Interface specific configuration interface) while in global configuration mode mode, enter switch as a whole. exit or end To exit to Use this mode to Switch user EXEC configure (vlan)# mode, enter VLAN-specific exit. parameters.
Set switch system contact window string Use the ip address interface configuration command to set an IP address for a switch. Use the no form of this command to remove an IP address or to disable IP processing. Example...
Page 34
Switch (config)# Default Switch (config)# username xxxxxx Switch (config)# Password xxxxxx Switch> show system info Name: switch1 location: lab Description: layer2 switch Contact: somewhere Serial NO: 1.00 Switch# show ip Address ip: 192.168.1.1 Address subnet: 255.255.255.0 Address gateway: 192.168.1.254...
Page 35
Use the show version user EXEC command to display version information for the hardware and firmware. Use the show terminal command to display console information for the switch Switch# show accounting Username: root Password: root Switch> show version Firmware version: 1.0 Hardware version: 3.0...
Fast Ethernet. Use the duplex configuration command to specify Auto the duplex mode of operation for module Ethernet. Example Switch (config)# interface fastEthernet 0/1 Switch (config)# interface moduleEthernet 1/1 Switch (config)# interface fastEthernet 0/1 Switch (config-if)# duplex full...
Page 37
Ethernet ports to control traffic rates during congestion. Use the no form of this command to disable security on the port. Switch (config)# interface fastEthernet 0/1 Switch (config-if)# speed 10 Switch (config)# interface fastEthernet 1/2 Switch (config-if)#...
Page 38
Set bandwidth in or out rate. The value rage is (0~999), and zero of the value is Disable disable (The module can’t be setting) Switch (config)# interface fastEthernet 0/1 Switch (config-if)# security on Switch (config)# interface fastEthernet 0/1 Switch (config-if)#...
Page 39
Switch (config)# interface fastEthernet 0/1 Switch (config-if)# state disable Switch (config)# interface fastEthernet 0/1 Switch (config-if)# show interface...
Page 40
Interface show bandwidth configuration mode Display the bandwidth of the values Switch (config)# interface fastEthernet 0/1 Switch (config-if)# Show bandwidth...
1 1-4 lacp on workp 2 Trunk without LACP: Switch (config)# port group 1 1-4 lacp off workp 4 Switch # show group Group Trunk.1: Ports: 02 03 04 Priority: 0001 Lacp: Enable Work ports: 0 Switch (config)# port group 3 activityport Trunk.1 Lacp:...
[Group VLAN name] delete database Description Defaults To enter the VLAN configuration interface To set switch VLAN mode .Use the no form of this Disable command to restore to default. Port Base VLAN Add new Port Base VLAN Delete port base...
Page 44
Banyan_vines-bany an_c5, Banyan_vines-bany an_ad, Decent_mop_01-de cent_01, Decent_mop_02-de Switch(vlan)# vlan v2 vlanid 2 port 1-4 tag 2-4 Switch (vlan)# no vlan v2 Switch (vlan)# no vlan v2 2 Switch (vlan)# vlan protocol v3 ip vlanid 2 port 5-8 tag 6,8...
Page 45
Number 1~24 Set VLAN ID range [1~255] range 0 [256~511] range 1 [512~767] range 2 [768~1023] range 3 [1024~1279] range [1280~1535] range [1536~1791] range [1792~2047] range [2048~2303] range [2304~2559] range [2560~2815] range Switch (vlan)# vlanidrange 2 OLD: 0 NEW: 2...
Page 46
Show VLAN of Group Name or VLAN ID information vlanid: 1 ~ 4094 show protocol vlan Protocol netbios Switch (vlan)# vlan protocol v2 add 5 tagged Switch (vlan)# vlan protocol v2 delete 5 Switch (vlan)# show vlan v2 2 Switch (vlan)# show...
Page 47
Ingress Filter Rules1 & Ingress Filter Rules2 show Port PVID and Ingress Filter Rules1 & Ingress Filter Rules2 Switch (vlan)# port 2 pvid 2 ingressfilter1 off ingressfilter2 on Switch (vlan)# show port 2 Port ID: 2 Port Vid: 2 Ingress 1 Filter:...
Spanning Tree Disable Protocol (STP). Use the no form of the command to restore to default Example Switch> show spanning-tree System: Priority: 32768 Max Age: 20 Hello Time: 2 Forward Delay: 15 Priority: 32768 Mac Address:...
Page 49
If a 20 sec switch does not receive a bridge protocol data unit (BPDU) message from the root switch within this interval, it...
Page 50
Use the spanning-tree hello-time global configuration command to specify the interval between hello 2 sec. bridge protocol data units (BPDUs). Use the no form of this command to return to the default interval. Switch (config)# spanning-tree hello-time 3...
Page 51
– 100 path cost for Spanning Tree 100 Mbps Protocol (STP) – 10 calculations. In the event of a loop, spanning tree Switch (config)# spanning-tree forward-time 20 Switch (config)# interface fastEthernet 0/2 Switch (config-if)# stp-path-cost 20...
Page 52
Use the no form of this command to return to the default value. Switch (config)# interface fastEthernet 0/2 Switch (config-if)#...
Hi 2 sp: all high before Low 1 low. [Priority] Hi:1~7 Low:1 Example Switch (config)# qos storm-control 5 Switch (config)# low-priority-delay-b ound on 1 WRR: Switch (config)# qos queuepolicy wrr hi 7 low 1 First Come First...
Page 54
Show broadcast storm control. Show low priority delay board. Show qos policy Switch (config)# qos level 2,3 enable Switch (config)# no qos level 0-7 Switch (config)# bridge-delay-bound Switch (config)# show qos storm-control QOS storm control mode: ENABLE...
Page 55
Privileged bridge-delay-bo EXEC mode Show bridge delay bound Switch (config)# show qos bridge-delay-bound bridge-delay-bound...
EXEC mode Description Defaults Enable /Disable IGMP snooping function Modify IGMP query Disable mode Displays the details of an IGMP profile entry. Example Switch (config)# igmp on Switch (config)# Igmp-query enable Switch# show ip igmp profile VID Port 224.1.1.1 10 1,2,6...
| filter addresses to the MAC address table. Use the no form of this command to remove static entries from the Example (Enable) Switch (config)# mac-address-table aging-time on Switch (config)# mac-address-table aging-time 333 (Disable) Switch (config)# mac-address-table aging-time off...
Page 58
MAC address table. Use the show mac-address-table user EXEC command to display the MAC address table. Switch (config)# interface fastEthernet Switch (config-if)# no mac-address-table static hwaddr 004063112233 vlanid Switch (config)# show mac-address-table static Switch (config)# show mac-address-table...
Set Snmp agent system contact Add snmp community string. Use the no form of PUBLIC this command to remove the specified community. Example Switch (config)# snmp system-name l2switch Switch (config)# snmp system-location lab Switch (config)# snmp system-contact where Switch (config)# snmp...
Switched Port Analyzer (SPAN) port monitoring is enabled. Example Switch (config)# Interface fastEthernet Switch (config-if)# port monitor both 3 Switch (config-if)# show port monitor State: ENABLE AnalysisPortId: 8 Port 1 Rx: Monitor Port 1 Rx: Monitor Port 2 Rx:...
Page 61
Port 6 Rx: Port 7 Rx: Port 7 Rx: Port 8 Rx: Analysis Port 8 Tx: Analysis Port 9 Rx: Port 9 Rx:...
Stacking 0~65535 [ID] [mode] Mode Mode: 0 = Disable, 1 = Master, 2 = Slave Description Defaults Switch>show stackinglist MAC = 00:22:33:44:55:66 [Master] No Slave! Switch>show stackinginfo 00.22.33.44.55.66 GroupID: 3000 Stacking Mode: Disable System Information: test Switch>stacking 00.22.33.44.55.66 Switch(stacking-00.22.33.
Page 63
Set the Stacking information information of Mode [name] the Stack Switch(stacking-00.22.33. 44.55.66)# set information test Setting System Information: test...
Use the 802.1x system radius IP global configuration command to change the radius server IP. Use the no form of this command to return to the default interval. Example Switch> show 8021x Switch (config)# 8021x on Switch (config)# 8021x system radiusip 192.168.1.1...
Page 65
TX period. Use the no form of this command to return to the default value. Set the period of time the switch wait for a supplicant response to Switch (config)# 8021x system sharekey 123456 Switch (config)#...
Page 66
[reject | accept | configuration authorize | mode disable] an EAP request. Set the period of time the switch wait for a server response to an authentication request. Set the number of authentication that must time-out before authentication fails and the authentication session ends.
Supplicant and the authentication server. Disable: The specified port is required to be held in the Authorized state. Description Defaults Backup configure file command Example Switch (config)# copy flash:config.text tftp >192.168.1.1 >backup.dat...
Page 68
Global [TFTP IP configuration address] [file mode name] tftp:firmware flash Global [TFTP IP configuration address] mode [file name] Restore configure file command Update firmware command Switch(config)# Tftp:config.text flash >192.168.1.1 >restore.dat Switch (config)# Tftp:firmware flash >192.168.1.1 >image.bin...
Status and Counters: Show the status of the switch. Switch Configuration: Menus to configure the switch. Protocol Related Configuration: Configures the protocol features. System Reset Configuration: Restarts the system or resets switch to the default configuration. Save Configuration: Saves the system configuration.
Page 70
<Control Key> The control keys listed below are provided in all menus: Tab: Move the cursor to next item. Backspace: Move the cursor to previous item. Enter: Selects item. Space: Toggle selected item to next configuration or changes the value. Esc: Exits the current action mode.
6-2. Status and Counters In Status and Counters, you can view Port status, counters, and system information. Press the “Tab” or “Backspace” to choose an item, and press “Enter” key to select item.
6-2-1. Port Status Type: Displays port connection speed. Link: Displays the port's link status. When the port is connecting with the device and working normally, the link status is “UP”. When the port has no link, the link status is “Down”. State: A port that is enabled will be displayed as “Enable”.
Page 73
enabled on the port. Actions-> Press the Tab or Backspace key to choose action menu, and then press the Enter key to select the item. <Previous Page>: Displays previous page. <Next page>: Displays next page. <Quit>: Exits the port status page, and returns to previous menu.
6-2-2. Port Counters The following information provides a view of the current status of the unit. Select Refresh to view updated statistics or select Clear to reset all counters to 0. Actions-> Press the Tab or Backspace key to choose action menu, and then press the Enter key to select item.
System Name: Displays the name of the device. System Location: Displays where the device is located. System Description: Displays the device type. Firmware Version: Displays the switch’s firmware version. Kernel Version: Displays the system kernel software version. Hardware Version: Displays the switch’s Hardware version.
6-3. Switch Configuration In Switch Configuration, there are 8 main functions – Administration, Port, Trunk, Port Mirroring, VLAN, Priority, MAC Address, and Misc. Configuration. Press the Tab or Backspace key to choose action menu, and then press the Enter key to select item.
6-3-1-1. Device Information Name: 10 characters can be used to give the switch a unique name in order to distinguish it on the network. After configuration this name will show at the top of each menu screen. Description: 32 characters can be used to describe the switch.
6-3-1-2. IP Configuration This menu enables the user to change the default settings of the IP address, subnet mask and gateway. Rebooting the switch is necessary to have the configuration change take affect. DHCP: Disables or enables the DHCP client function.
6-3-1-3. User Name Configuration Use this screen to change the User Name. The default user name is root. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Quit>: Exits the user name configuration page and returns to previous menu.
6-3-1-4. Password Configuration Use this screen to change the Password. The default password is root. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Quit>: Exits the password configuration page and returns to previous menu.
6-3-2. Port Configuration This page can change every port status. Press the TAB key to select each item and press the SPACE key to change the configuration of each item. State: Displays current port status. The port can be set to disable or enable mode.
Page 84
Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Previous Page>: Displays previous page. <Next page>: Displays next page. <Quit>: Exits the port configuration page and returns to previous menu.
6-3-3. Trunk Configuration This page can configure trunk groups. Press the TAB key to select each item and press the SPACE key to change the configuration of each item. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line.
6-3-4. Port Mirroring Configuration Port mirroring is a method for monitoring traffic in switched networks. Traffic through ports can be monitored by one specific port. The traffic being received or transmitted by the monitored ports will be duplicated into the monitoring port. Press the Space key to change the configuration of an item.
6-3-5. VLAN Configuration This page can set VLAN mode to port-based VLAN, 802.1Q VLAN or disable VLAN function. All ports are automatically placed in VLAN 1, the default VLAN. To create new VLANs, use the Create a VLAN Group menu and add a VLAN. Make sure when you enter a VLAN name you do not leave spaces.
VLAN. One configuration that is common for port based VLANs is to have all the ports on the switch on separate VLANs except for the port that has the server connected. The port connected to the server belongs to all the VLANs.
Page 90
If more than one VLAN is necessary, the additional VLANs may be created. Security VLANs Security VLAN’s allow for limiting telnet, SNMP and web access to the switch to a specific VLAN. The VID of the Security VLAN may be changed from 255 to another value after creating the VLAN.
Page 91
Ingress Filter 2: Drop untagged frame. Press the Space key to choose drop or forward the untagged frame. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Previous Page>: Displays previous page. <Next page>: Displays next page.
6-3-5-2. Create a VLAN Group Create Port-Based VLAN Select <Edit> to create a port-based VLAN and add member/nonmember ports to it. 1. VLAN Name: Type a name for the new VLAN using 15 alphanumeric characters and no spaces. 2. Group ID: Type the VLAN group ID. The group ID range is 1~4096. 3.
Page 93
Create 802.1Q VLAN Select <Edit> to create a 802.1Q VLAN and add tagged /untagged member ports to it. 1. VLAN Name: Type a name for the new VLAN using 15 alphanumeric characters and no spaces. 2. VLAN ID: Type a VID (between 1~4096). The default is 1. There are 256 VLAN groups provided to configure.
Page 94
<Quit>: Exits this page and returns to previous menu.
6-3-5-3. Edit / Delete VLAN Group Use this menu to edit or delete a VLAN group. When editing the chosen VLAN, the user can change the protocol VLAN or a member port. A new protocol can be configured and the ports can be changed to tagged or untagged or deleted as member ports from this VLAN.
Page 96
Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line. <Delete>: Deletes selected VLAN Groups. <Previous Page>: Displays previous page. <Next page>: Displays next page. <Quit>: Exits this page and returns to previous menu.
6-3-5-4. Group Sorted Mode Use this menu to select the VLAN groups sorted mode. There are two selections: Name: Sorted by name VID: Sorted by VID The results can be viewed on the Edit/Delete a VLAN Group screen. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line.
Page 98
<Quit>: Exits this page and returns to previous menu.
L): The high priority packets are sent before the low priority packets. Ratio (1:1, 2:1, 3:1, 4:1, 5:1, 6:1, 7:1): Select the preference given to packets in the switch's high-priority queue. These options represent the number of high priority packets sent before one low priority packet is sent. Actions->...
6-3-7-1. Static MAC Address When a static MAC address is added, it remains in the switch's address table, regardless of whether the device is physically connected to the switch. This saves the switch from having to re-learn a device's MAC address when the device is disconnected or powered-off and then becomes active again.
Page 102
address. 5. Press ESC to go back action menu line, and then select <Save> to save all configured values. Edit static MAC address 1. Press <Edit> key to modify a static MAC address. 2. Choose the MAC address that you want to modify and then press enter. 3.
6-3-7-2. Filtering MAC Address Add Filtering MAC address 1. Press the <Add> key to add a static Filtering address. 2. Press the <Edit> key to enter the MAC address you want to filter. 3. Enter the MAC address and then press enter. 4.
Page 104
Edit Filtering MAC address 1. Press the <Edit> key to modify a static Filtering address. 2. Choose the MAC address that you want to modify and then press enter. 3. Press the <Edit> key to modify all the items. 4. Press ESC to go back action menu line, and then select <Save> to save all configured values.
Page 105
<Previous Page>: Displays previous page. <Next page>: Displays next page. <Quit>: Exits this page and returns to previous menu.
6-3-8-1. MAC Address Ageing Time To configure a different MAC Address Ageing Time, type the number of seconds that an inactive MAC address remains in the switch’s address table before it is deleted. Once the address is removed from the table, a device will...
The valid range is 300 to765 seconds. Default is 300 seconds. 6-3-8-2. Broadcast Storm Filtering Broadcast storm filtering is used to limit the amount of broadcast traffic on the network.
Low Queue Max Delay Time: Set the time that low priority packets are queued in the switch. The valid range is 0 to 255 ms. Since the default is OFF, the Max Delay Time is 0. This item must be set if “Low Queue Delay Bound” is enabled.
Master: One switch must be selected to control all other switches in stacking group. Only one switch can be assigned to be the master switch in one stacking group. Once the stacking group is set up, the master switch will control all switches in the stacking group.
6-4. Protocol Related Configuration 6-4-1. STP Spanning tree is a link management protocol that provides path redundancy while preventing undesirable loops in the network.
6-4-1-1. STP Setup This page enables or disables the Spanning Tree function. The Spanning Tree function must be enabled before the STP function can be configured. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values.
6-4-1-2. System Configuration All devices in the spanning tree instance will utilize the same values as the root bridge to ensure consistency throughout the network. If this device becomes the root bridge, then the other switches in the STP instance will utilize its values. Spanning tree information for the Root Bridge on the left is for display only.
Page 114
Hello Time: The number of seconds between the transmission of Spanning-Tree Protocol configuration messages. Enter a number 1 through 10. Forward Delay Time: The number of seconds a port waits before changing from its Spanning-Tree Protocol learning and listening states to the forwarding state.
10Mb/s = 50-600 100Mb/s = 10-60. If you change the value, you must reboot the switch to save the value change. On the action menu line press <Next Page> to configure Port 9 through Port 26 or press <Previous Page> returns to last page.
Page 116
Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Previous Page>: Displays the previous page. <Next Page>: Displays the next page. <Quit>: Exits this page and returns to previous menu.
Protocol (SNMP) can manage the switch provided that the Management Information Base (MIB) is installed. SNMP is a protocol that governs the transfer of information between management and agent. The switch supports SNMP V1. Use this menu to define management stations as trap managers and to enter SNMP community strings.
Press <Edit> to enter all items, ESC to return to the action menu, and then press <Save> to save the configured values. System Name: Enter a name to identify the switch. System Contact: Enter the name of the contact person or organization.
6-4-2-2. Community Strings Community strings serve as passwords and can be entered as one of the following: Community Name: Enter the name of current community strings. The default is “public”. Write Access: Enables the permissions for Read Only or Read/Write. Read only: Enables requests accompanied by this string to display MIB-object information.
Page 120
3. Press ESC to go back action menu line, and then select <Save> to save all configured values. Edit Community Strings 1. Press <Edit> key to modify a Community String. 2. Choose the Community Name that you want to modify and then press enter. 3.
Page 121
<Edit>: Configures all items. When finished, pressing ESC returns to the action menu line. <Delete>: Deletes a community string. After deleting, press <Save> to complete the deletion. <Save>: Saves all configured values. <Quit>: Exits this page and returns to previous menu.
6-4-2-3. Trap Managers A trap manager is a management station that receives traps. The switch generates system alerts. If no trap manager is defined, no traps are issued. Create a trap manager by entering the IP address of the station and a community...
Page 123
Add SNMP Trap Managers 1. Press the <Add> key. Then press the <Edit> key on this menu to add a SNMP Trap Manager. 2. Enter the IP address and Community Name for the SNMP Trap Manager. 3. Press ESC to go back action menu line, and then select <Save> to save all configured values.
Page 124
Delete SNMP Trap Managers 1. Press the <Delete> key to delete a SNMP Trap Manager. 2. Choose the IP Address and Community Name that you want to delete and then press enter. 3. After deleting the SNMP Trap Manager, you must press <Save> to complete the deletion.
6-4-3. LACP The Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Partner Systems on a link to allow their Link Aggregation Control instances to reach agreement on the identity of the Link Aggregation Group to which the link belongs. Move the link to that Link Aggregation Group, and enable its transmission and reception functions in an orderly manner.
6-4-3-1. LACP Working Ports Group: Displays the trunk group ID. LACP: Press the Space key to enable or disable LACP (Link Aggregation Control Protocol) support. If enabled, the group is an LACP static trunking group. If disabled, the group is a local static trunking group. LACP Work Port Num: The maximum number of ports that can be aggregated at the same time.
6-4-3-2. LACP State Activity Active: The port automatically sends LACP protocol packets. Passive: The port does not automatically send LACP protocol packets, and responds only if it receives LACP protocol packets from the opposite device. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line.
6-4-3-3. Group Status When setting a trunking group, the relationship status information may be seen on the LACP Group Status screen. Actions-> <Previous Page>: Displays previous page. <Next page>: Displays next page. <Quit>: Exits this page and returns to previous menu.
6-4-4. IGMP/GVRP Configuration Use the IGMP/GVRP Configuration screen to enable or disable IGMP, Query Mode and GVRP (GARP VLAN Registration Protocol) support. Press the Space key to choose Enabled or Disabled. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line.
6-4-5-1. 802.1x Setup Use this screen to enable or disable 802.1x. Press the Space key to choose Enabled or Disabled mode. Actions-> Configures all items. When finished, pressing ESC returns to the action <Edit>: menu line. <Save>: Saves all configured values. <Quit>: Exits this page and returns to previous menu.
6-4-5-2. 802.1x System Configuration After enabling the IEEE 802.1x function, use the 802.1x System Configuration screen to configure the IEEE 802.1x parameters. Radius Server IP: Enter the Radius Server IP address. Shared Key: Enter an encryption key for use during authentication sessions with the specified radius server.
6-4-5-3. 802.1x Per Port Configuration 802.1x authentication state can be configured for each port as Disable, Accept, Reject or Authorize. Press the “Space” key to change the state value for each port. Formatted: Bullets and Numbering Reject: The specified port is required to be held in the unauthorized state. Accept: The specified port is required to be held in the Authorized state.
Supplicant timeout: Enter the period of time the switch waits for a supplicant response to an EAP request. Server timeout: Enter the period of time the switch waits for a server response to an authentication request. Reauthorize Maximum: Enter the number of authentication that must time-out before authentication fails and the authentication session ends.
Page 135
menu line. <Save>: Saves all configured values. <Quit>: Exits this page and returns to previous menu.
Resets the switch to the factory default configuration. The software version that the switch will be reset to can be found on the “System Information” menu under the main menu “Status and Counters”.
<Save>: Starts download of image file from the TFTP server. When the save is successful, the image is downloaded. Rebooting the switch is necessary to have the new firmware version take effect. <Quit>: Exits this page and returns to previous menu.
6-5-3-2. TFTP Restore Configuration Use this screen to restore an EEPROM value or save a previous version of the image file from the TFTP server. Start the TFTP server, and copy the firmware update version image file to TFTP server. TFTP Server IP: Enter the IP address of the TFTP server.
6-5-3-3. TFTP Backup Configuration Use this screen to save the current EEPROM value to an image file. Then go to the update configuration page to restore the EEPROM value. Start the TFTP server, and copy the firmware update version image file to TFTP server.
6-5-3-4. Save Configuration The configuration must be saved to the flash memory when it has been changed. Manually powering off the system before the process has been completed may result in corrupted memory and may cause the unit to not start or come up in an unknown state.
6-6. X-modem Upgrade 1. While booting the switch, press the X key to start the Xmodem routine on the device. 2. Pressing X will cause the switch Xmodem application to begin and cause the baud rate to change to 57600 bps. You will need to disconnect the cable...
Page 144
3. Select “send file" under the "transfer" menu from menu bar. 4. Press the "browse" button to select the path. 5. Select "1K Xmodem" of protocol and press the "Send" button. 6. After successfully upgrading to the new firmware, change the baud rate back to the default 9600bps.
Web-Based Management This section introduces the configuration and functions of the web-based management of MIL-SM2401M-STK switch series. The managed switch series provides an embedded HTML website residing in flash memory. It offers advanced management features and allow users to manage the device from anywhere on the network through a standard browser such as Internet Explorer or Netscape.
7-1. System Login 1. Launch Internet Explorer or Netscape. 2. Type http:// and the IP address of the switch in the Location or Address field. The default IP Address is 192.168.1.77. 3. Press Enter. Figure 5-1: The Password Window 4. In the login screen, type the user name and password. The default is root for both.
7-2. Port Status Link: “Down” is “No Link”. “UP” is “Link”. State: Displays port status off or on depending on user setting. “Unlink” means the port is offline or “off ”. Auto Negotiation: Displays the auto negotiation mode. There are three selections: Auto, Force and Nway-force.
7-3. Port Statistics The following information provides a view of the current status of the unit. Pressing the Clear button will return all counts to zero.
Page 150
Left click the mouse on the desired port on the graphical image of the switch to get specific information for that port.
7-4-1. IP Address Entering new values and clicking the Apply button can change the IP Settings. The switch must be reset for the new IP address to take effect. Default IP: 192.168.1.77 Default Subnet Mask: 255.255.255.0...
Firmware Version: Displays the switch’s downloaded firmware version. Kernel version: Displays write to default EEPROM value version. Hardware Version: Displays the switch’s hardware version. MAC Address: Displays unique hardware address assigned by manufacturer. Module: Displays the type and description of the switch module.
This valid values are 1sec, 2 sec, 4 sec and off. Default is 1 second. Enable Low Queue Delay Bound: Limits the low priority packets queuing time in switch. If a low priority packet in the switch exceeds the Max Delay Time, it will be sent. The valid range is 1to 255 ms.
Page 154
Weighted Round Ratio: This option enables the user to choose a ratio of the number of high priority packets sent before one low priority packet is sent. For example, 2:1 (2 High : 1 Low) will have the switch send 2 high priority packets before sending 1 low priority packet.
Page 155
Qos Policy: High Priority Levels: 0 to 7 priority level can map to a high or low queue. When the VLAN Tag number of a frame is mapping as a high priority level, this frame always has high priority. In this example, the QoS policy applies to the switch, not for a single port.
7-4-2-3. Miscellaneous Setting Collisions Retry Forever: Disabled – In half duplex, if a collision occurs, the switch will retry 48 times and then drop frame. Enabled – In half duplex, if a collision occurs, the switch will retry forever. Hash Algorithm: CRC Hash or Direct Map for MAC address learning algorithm.
Page 157
IGMP Theory of Operation The following three topologies detail how IGMP Query works and to be configured within a network: 1. Auto mode needs to be enabled when the router’s IP address is smaller than other switches in the subnet.
Page 158
2. IGMP needs to be enabled when the router’s IP address is not smaller than other switches in the subnet. This Router supports IGMP protocol, but IGMP has to be enabled, and the Router has to be the Querier.
Page 159
3. The following topology must be set when the IP address of the switch is not the smallest in the subnet. The network will cause a multi-cast storm from the IGMP client report if it is in Auto mode. All switches must be in disable mode when the VOD server is configured for IGMP Querier.
7-4-3. Console Port Information Console is a standard UART interface to communicate with a serial port. The Windows HyperTerminal program can be used to link the switch with the console port. In order to change any of these parameters, you must be connected to the console port.
7-4-4. Port Controls The Port Controls menu allows changing of port configurations. State: User can disable or enable each port. Negotiation: User can set auto negotiation mode for each port to Auto, Nway (specify the speed/duplex on this port and enable auto-negotiation) or Force. Speed: User can set 100Mbps or 10Mbps speed on Ports 1 to 24.
Page 162
Band Width: Ports 1 to 24 support by-port ingress and egress rate control. For example, if port 1 is set to 10Mbps, you can set it’s effective egress rate to 1Mbps and ingress rate to 500Kbps. The MIL-SM2401M-STK will perform flow control or backpressure to confine the ingress rate to meet the specified rate.
7-4-5. Trunking The Link Aggregation Control Protocol (LACP) standardized means for exchanging information between Partner Systems on a link to allow their Link Aggregation Control instances. To reach agreement on the identity of the Link Aggregation Group to which the link belongs, move the link to that Link Aggregation Group, and enable its transmission and reception functions in an orderly manner.
7-4-5-1. Aggregator Setting System Priority: A value used to identify the active LACP. The switch with the lowest value has the highest priority and is selected as the active LACP. To create a trunk across two or more ports: 1. Group ID: Choose the "Group ID" and click the Select button.
Page 165
remove a port, select the port to be removed from the Work Ports column and click the Remove button. 5. Click the Apply button to save the new configuration. 6. Click the Delete button to remove a trunking Group ID.
7-4-5-3. State Activity Active (selected): The active port automatically sends LACP protocol packets. Passive (not selected): The passive port does not automatically send LACP protocol packets, but responds only if it receives LACP protocol packets from the other device. A link having either two active LACP ports or one active port can perform dynamic LACP trunking.
7-4-6. Forwarding and Filtering 7-4-6-1. IGMP Snooping The switch supports IP multicasting. You can enable IGMP via the web management’s configuration screen. In addition, you can view different multicast groups, VIDs and member ports, and IP multicast addresses that range from 224.0.0.0 through 239.255.255.255.
Page 169
Message A message sent from the querier (IGMP router or switch) Query asking for a response from each host belonging to the multicast group. A message sent by a host to the querier to indicate that the host wants to be or is a member of a given group indicated in Report the report message.
7-4-6-2. Static MAC Address When a static MAC address is added, it remains in the switch's address table, regardless of whether or not the device is physically connected to the switch. This saves the switch from having to re-learn a device's MAC address when the device is disconnected or powered-off.
Page 171
are associated with individual VLANs. Type the VID (tag-based VLANs) to associate with the MAC address. Click the Add button. 7. To delete a MAC address, highlight the selection in the table you want to delete and then click the Delete button.
Steps to specify a MAC address to filter: 1. In the MAC Address box, enter the MAC address to filter. 2. If tag-based (802.1Q) VLAN are set up on the switch, in the VLAN ID box, type the VID to associate with the MAC address.
VLAN members. Basically, creating a VLAN from a switch is logically equivalent of reconnecting a group of network devices to another Layer 2 switch. However, all the network devices are still plugged into the same switch physically.
Page 174
PVID and other information about the packet, such as the protocol. MIL-SM2401M-STK will support protocol-based VLAN classification by means of both built-in knowledge of layer 2 packet formats used by selected popular protocols, such as Novell IPX and AppleTalk’s EtherTalk, and some degree of...
Page 175
Create a VLAN and add tagged member ports to it. 1. Click the Add button to create a new VLAN group. 2. Enter the VLAN name, group ID and select the members for the new VLAN. 3. Click the Apply button. 4.
GVRP allows automatic VLAN configuration between the switch and nodes. A GVRP request can be sent using the VID of a VLAN defined on the switch when the switch is connected to a device with GVRP enabled. The switch will...
Page 177
Security VLANs Security VLAN’s allow for limiting telnet, SNMP and web access to the switch to a specific VLAN. The VID of the Security VLAN may be changed from 255 to another value after creating the VLAN. The new VID must not already exist on...
Page 178
3. Enter a VLAN ID (2 to 4094). The default is 1. 4. Choose the protocol type. Default is NONE. 5. From the Available ports box, select ports to add to the switch and click Add. If the trunk groups exist, you can see it here (ex:Trunk1,Trunk2…) and configure it as a member of the VLAN or not.
Page 179
Use this page to set the outgoing frames are VLAN-Tagged frames or not, and then click the Apply button. Tag: Outgoing frames with VLAN-Tagged. Untag: Outgoing frames without VLAN-Tagged.
Port VID To configure port VID settings: From the main 802.1Q VLAN page, select Port VLAN ID Settings. Port VLAN ID Set the port VLAN ID that will be assigned to untagged traffic on a given port. This feature is useful for accommodating devices that you want to participate in the VLAN but that don’t support tagging.
Page 181
Ingress Filtering Ingress filtering lets frames belonging to a specific VLAN to be forwarded if the port belongs to that VLAN. Enable: Forward only packets with VID matching this port's configured VID. Disable: Disable Ingress filter function. Acceptable Frame Type ALL: All packets are acceptable.
When STP is enabled it ensures that only one path at a time is active between any two nodes on the network. Spanning-Tree Protocol can be enabled using web management’s switch setting advanced item, and selecting enable Spanning-Tree protocol. By default, spanning tree is disabled on the switch.
7-4-8-1. System Configuration Spanning Tree information for the Root Bridge at the bottom is for display only. Configure new values for the STP parameters at the top. STP State: Enable the Spanning Tree function by marking the box. Priority: The value used to identify the root bridge. The bridge with the lowest value has the highest priority and is selected as the root.
Page 184
Hello Time: The number of seconds between the transmission of Spanning-Tree Protocol configuration messages. Enter a number 1 through 10. Forward Delay Time: The number of seconds a port waits before changing from its Spanning-Tree Protocol learning and listening states to the forwarding state.
7-4-8-2. Per Port Configuration The path cost and priority can be configured for each port. 1. Select the port to be configured in the Port menu list by clicking on it. 2. Enter the Path Cost and Port Priority settings:...
Page 186
PathCost: Path Cost specifies the path cost of the port that the switch uses to determine which ports are the forwarding ports. The lowest number becomes the forwarding port. The range is 1-65535 and the default value is based on IEEE802.1D.
7-4-9. Port Mirroring The Port Mirroring feature is disabled by default. Selecting enable from the pull down menu will cause the selected traffic from the selected monitor ports to be mirrored to the selected analysis port. Press the Apply button to submit the changes.
Page 188
Monitor Port: The ports you want to mirror. All source port traffic will be copied to a mirror port. You can select a maximum of 25 source ports in the switch. If you want to disable the function, you must select monitor port to none.
The switch supports SNMP V1. Any Network Management station running the Simple Network Management Protocol (SNMP) can manage the switch provided that the Management Information Base (MIB) is installed. Use this menu to define management stations as trap managers and to enter SNMP community strings.
Remove button. 7-4-10-3. Trap Managers A trap manager is a management station that receives traps. Traps are the system alerts generated by the switch. If no trap manager is defined, no traps are Formatted: Bullets and Numbering...
Page 191
issued. Create a trap manager by entering the IP address of the station and a community string. IP Address: Enter the IP Address of the Trap Device. Community: Enter the Community String for the Trap Device. Click the Add button to add the new trap manager. To remove a trap manager, select it from the list of current managers and click the Remove button.
7-4-11. Security Manager The user can change the user name and password to keep the switch secure. After entering a new user name and password, click the Apply button to submit the changes. The default user name and password are below.
7-4-12. 802.1X When the IEEE 802.1x function is enabled, the parameters may be configured here. 7-4-12-1. System Configuration Radius Server IP: Set the Radius Server IP address. Server Port: Set the UDP destination port for authentication requests to the specified Radius Server. Accounting Port: Set the UDP destination port for accounting requests to the specified Radius Server.
7-4-12-2. Per Port Configuration Each port can be configured to one of the following four states: Reject: The specified port is required to be held in the Unauthorized state. Accept: The specified port is required to be held in the Authorized state. Authorized: The specified port is set to the Authorized or Unauthorized state in accordance with the outcome of an authentication exchange between the Supplicant and the authentication server.
Supplicant timeout: Set the period of time the switch waits for a supplicant response to an EAP request. Server timeout: Set the period of time the switch waits for a server response to an authentication request. Max requests: Set the number of authentication that must time-out before authentication fails and the authentication session ends.
7-4-13. TFTP Update Firmware The following menu options provide some system control functions to allow a user to update firmware and remotely boot the switch system: • Executing TFTP software • Copy firmware update version image.bin to TFTP software directory.
7-4-14-1. TFTP Restore Configuration Use this screen to set TFTP server IP address. You can restore EEPROM value from here, but you must put the image back in the TFTP server. The switch will download back flash image. 7-4-14-2. TFTP Configuration Backup Use this screen to set the TFTP server IP address.
7-4-15. Factory Default Resets the Switch to default configuration. Default IP Address: 192.168.1.77 Default Gateway: 192.168.16.254 Subnet mask: 255.255.255.0 All other settings default to either Disabled or no value. 7-4-16. System Reboot Select Reboot to restart the system with the current saved configuration.
7-5. Panel List The Panel list option will display the switch panel in a GUI interface format. When stacking has been enabled, the display will include the slave switches in the display. Clicking on each port will give the current port status information.
7-6. IP Stacking The IP stacking function allows up to eight MIL-SM2401M-STK switches to be joined as a single unit group. The stackable switches can then be managed through a single IP address. When configuring the stacking function, please review the following guidelines.
Select IP Stacking in the menu bar and enter the following information for the master switch in the stack. Click the Apply button to save the new configuration. Group ID (0...65535): Assign a group ID for stacking group. The switches in the same stacking group have same group ID.
Page 202
The web-based interface menu bar for the master switch is used to configure each of the slave switches in the stacking group. To configure a switch in the stacking group, click on the link at the top of screen and log in to the switch to be configured.
This section is intended to help you solve some common problems encountered while using the MIL-SM2401M switch series. Incorrect connections The switch auto-detects the polarity and direction of the UTP cable attached. If no link I seen, then check the following: Faulty or loose cables Look for loose or obviously faulty connections.
If the power indicator does turn on when the power cord is plugged in, you may have a problem with power outlet or power cord. However, if the switch powers off after running for a while check for loose power connections, power losses or surges at power outlet.
Technical Specifications This section provides the specifications of MIL-SM2401M-STK switch product. Standard Switch architecture Back plane LED Indicators IEEE802.3 10BASE-T IEEE802.3u 100BASE-TX/100BASE-FX IEEE802.3z Gigabit SX/LX IEE802.3ab Gigabit 1000T IEEE802.3x Flow Control and Back pressure IEEE802.3ad Port trunk with LACP IEEE802.1d Spanning tree protocol IEEE802.1w Rapid Spanning Tree...
Page 206
1000Mbps, 100Mbps 100FX module: Link/Activity, Full duplex1000Mbps, 100Mbps 100FX module: Link/Activity, Full duplex 10/100TX: RJ-45 100FX(Multi /Single Mode) module: SC Connector Gigabit SX/LX module: SC Gigabit 1000T module: RJ-45 MAC address 8K MAC address table with Auto learning function Memory 3Mbits for packet buffer ARM-7 Flash ROM...
Need help?
Do you have a question about the MIL-SM2401M-STK and is the answer not in the manual?
Questions and answers