Lacon L-EX73000 Quick Start Manual

Hardened managed ethernet switch

Advertisement

Quick Links

Hardened Managed Ethernet Switch

Quick Start Guide

This quick start guide describes how to install and use the
Hardened Managed Ethernet Switch. This is the switch of
choice for harsh environments constrained by space.

Physical Description

The Port Status LEDs and Power Inputs

User's Manual
1

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the L-EX73000 and is the answer not in the manual?

Questions and answers

Summary of Contents for Lacon L-EX73000

  • Page 1: Quick Start Guide

    Hardened Managed Ethernet Switch Quick Start Guide This quick start guide describes how to install and use the Hardened Managed Ethernet Switch. This is the switch of choice for harsh environments constrained by space. Physical Description The Port Status LEDs and Power Inputs User’s Manual...
  • Page 2: Hardened Managed Ethernet Switch

    Hardened Managed Ethernet Switch State Indication Power 1 Steady Power on Power 2 Power off Power 3 10/100Base-TX, 100Base-FX Steady A valid network connection established Link/ACT Transmitting or receiving data Flashing ACT stands for ACTIVITY 10/100/1000Base-TX (Green), 1000Base-SX/LX (Orange) Steady A valid network connection established Link/ACT Transmitting or receiving data...
  • Page 3: Functional Description

    Hardened Managed Ethernet Switch Functional Description Meets NEMA TS1/TS2 Environmental requirements such as temperature, shock, and vibration for traffic control equipment. Meets EN61000-6-2 & EN61000-6-3 EMC Generic Standard Immunity for industrial environment. Manageable via SNMP, Web-based, Telnet, and RS-232 console port. Supports IEEE802.3/802.3u/802.3ab/802.3z/802.3x.
  • Page 4 Hardened Managed Ethernet Switch RECOMMENDATION - It is recommended to inspect the sealed relay device periodically and to check for any degradation of the materials and to replace the complete product, not the sealed device, if any degradation is found. Sealed Relay Device information: Sealed Device: Relay Type V23079-A2008-B301, manufactured by Tyco Electronics Logistics Ag.
  • Page 5: Console Configuration

    Hardened Managed Ethernet Switch Console Configuration Connect to the switch console: Connect the DB9 straight cable to the RS-232 serial port of the device and the RS-232 serial port of the terminal or computer running the terminal emulation application. Direct access to the administration console is achieved by directly connecting a terminal or a PC equipped with a terminal-emulation program (such as HyperTerminal) to the switch console port.
  • Page 6: Web Configuration

    Hardened Managed Ethernet Switch Logon to Privileged Exec Mode (Enable Mode): At the “switch_a>” prompt just type in “enable” and press <Enter> to logon to Privileged Exec Mode (or Enable Mode). And the “switch_a#” prompt will show on the screen. Logon to Configure Mode (Configure Terminal Mode): At the “switch_a#”...
  • Page 7 Hardened Managed Ethernet Switch Enter the factory default login ID: root. Enter the factory default password (no password). Then click on the “Login” button to log on to the switch. User’s Manual...
  • Page 8 Hardened Managed Ethernet Switch User’s Manual...
  • Page 9: Preface

    Hardened Managed Ethernet Switch Preface This manual describes how to install and use the Hardened Managed Ethernet Switch. This switch introduced here is designed to deliver full scalability with SNMP/RMON web-based management functions by providing: To get the most out of this manual, you should have an understanding of Ethernet networking concepts.
  • Page 10: Table Of Contents

    Hardened Managed Ethernet Switch Table of Contents Quick Start Guide HYSICAL ESCRIPTION The Port Status LEDs and Power Inputs UNCTIONAL ESCRIPTION ONSOLE ONFIGURATION ONFIGURATION Preface Table of Contents Product Overview ARDENED ANAGED THERNET WITCH ACKAGE ONTENTS RODUCT IGHLIGHTS Basic Features Management Support RONT ANEL...
  • Page 11 Hardened Managed Ethernet Switch SNMP & RMON Management VERVIEW SNMP A MIB-2 (RFC 1213) GENT AND RMON MIB (RFC 2819) MIB (RFC 1493) RIDGE RMON Groups Supported Bridge Groups Supported Web-Based Browser Management OGGING ON TO THE SWITCH NDERSTANDING THE ROWSER NTERFACE YSTEM...
  • Page 12: Product Overview

    Hardened Managed Ethernet Switch Product Overview Hardened Managed Ethernet Switch Front and Bottom View Package Contents When you unpack the product package, you shall find the items listed below. Please inspect the contents, and report User’s Manual...
  • Page 13 Hardened Managed Ethernet Switch any apparent damage or missing items immediately to your authorized reseller. • The Hardened Managed Ethe rnet Switch • User’s Manual • RS232 cable User’s Manual...
  • Page 14: Product Highlights

    Hardened Managed Ethernet Switch Product Highlights Basic Features Meets NEMA TS1/TS2 Environmental requirements such as temperature, shock, and vibration for traffic control equipment. Meets EN61000-6-2 & EN61000-6-3 EMC Generic Standard Immunity for industrial environment. Manageable via SNMP, Web-based, Telnet, and RS-232 console port. Supports IEEE802.3/802.3u/802.3ab/802.3z/802.3x.
  • Page 15: Management Support

    Hardened Managed Ethernet Switch WARNING – EXPLOSION HAZARD – Substitution of any component may impair suitability for Class I, Division 2. WARNING – Exposure to some chemicals may degrade the sealing properties of materials used in the Sealed Relay Device. RECOMMENDATION - It is recommended to inspect the sealed relay device periodically and to check for any degradation of the materials and to replace the complete product, not the sealed device, if any...
  • Page 16 Hardened Managed Ethernet Switch IGMP Snooping Rate Control NETWORK MANAGEMENT METHODS Console port access via RS-232 cable (CLI, Command Line Interface) Telnet remote access SNMP agent: MIB-2 (RFC1213) Bridge MIB (RFC1493) RMON MIB (RFC2819) – statistics, history, alarm and events VLAN MIB (IEEE802.1Q/RFC2674) Private MIB Web browser...
  • Page 17: Front Panel Display

    Hardened Managed Ethernet Switch Front Panel Display POWER This LED comes on when the switch is properly connected to power and turned on.  P ort Status LEDs The LEDs are located on the front panel, displaying status for each respective port.
  • Page 18: Physical Ports

    Hardened Managed Ethernet Switch State Indication Power 1 Steady Power on Power 2 Power off Power 3 10/100Base-TX, 100Base-FX Steady A valid network connection established Link/ACT Transmitting or receiving data Flashing ACT stands for ACTIVITY 10/100/1000Base-TX (Green), 100Base-FX (Orange) Steady A valid network connection established Link/ACT Transmitting or receiving data...
  • Page 19: Switch Management

    Hardened Managed Ethernet Switch Switch Management Web-based browser interface The switch also boasts a point-and-click browser-based interface that lets user access full switch configuration and functionality from a Netscape or Internet Explorer browser. Administration console via RS-232 serial port (CLI) The switch provides an onboard serial port, which allows the switch to be configured via a directly connected terminal.
  • Page 20: Installation

    Hardened Managed Ethernet Switch Installation This chapter gives step-by-step instructions about how to install the switch: Selecting a Site for the Switch As with any electric device, you should place the switch where it will not be subjected to extreme temperatures, humidity, or electromagnetic interference.
  • Page 21: Wiring Diagram

    Hardened Managed Ethernet Switch Wiring Diagram Connecting to Power Redundant DC Terminal Block Power Inputs or 12VDC DC Jack: 12VDC DC Jack Step 1: Connect the supplied AC to DC power adapter to the receptacle on the topside of the switch. Step 2: Connect the power cord to the AC to DC power adapter and attach the plug into a standard AC outlet with the appropriate AC voltage.
  • Page 22: Redundant Dc Terminal Block Power Inputs

    Hardened Managed Ethernet Switch Redundant DC Terminal Block Power Inputs There are two pairs of power inputs for use with redundant power sources. You only need to have one power input connected to run the switch. Step 1: Connect the DC power cord to the plug-able terminal block on the switch, and then plug it into a standard DC outlet.
  • Page 23: Connecting To Your Network

    Hardened Managed Ethernet Switch Special note: The relay output is normal open position when there is no power to the switch. Please do not connect any power source to this terminal to prevent shorting your power supply. Connecting to Your Network Cable Type &...
  • Page 24 Hardened Managed Ethernet Switch Step 2: Prepare cable with corresponding connectors for each type of port in use. Step 3: Consult Cable Specifications Table on previous page for cabling requirements based on connectors and speed. Step 4: Connect one end of the cable to the switch and the other end to a desired device.
  • Page 25: Switch Management

    Hardened Managed Ethernet Switch Switch Management This chapter explains the methods that you can use to configure management access to the switch. It describes the types of management applications and the communication and management protocols that deliver data between your management device (workstation or personal computer) and the system.
  • Page 26: Administration Console (Cli)

    Hardened Managed Ethernet Switch Administration Console (CLI) The administration console is an internal, character-oriented, Command Line Interface (CLI) for performing system administration such as displaying statistics or changing option settings. Using this method, you can view the administration console from a terminal, personal computer, Apple Macintosh, or workstation connected to the switch’s console port.
  • Page 27: Modem Access

    Hardened Managed Ethernet Switch Modem Access You can access the switch’s administration console from a PC or Macintosh using an external modem attached to the console port. The switch management program provides Console Port screen, accessible from the Basic Management screen that lets you configure parameters for modem access.
  • Page 28: Protocols

    Hardened Managed Ethernet Switch Protocols The switch supports the following protocols: VIRTUAL TERMINAL PROTOCOLS, SUCH AS TELNET A virtual terminal protocol is a software program, such as Telnet, that allows you to establish a management session from a Macintosh, a PC, or a UNIX workstation.
  • Page 29: Web-Based Browser Management

    Hardened Managed Ethernet Switch Web-Based Browser Management The switch provides a web-based browser interface for configuring and managing the switch. This interface allows you to access the switch using a preferred web browser. This chapter describes how to configure the switch using its web-based browser interface.
  • Page 30: Snmp & Rmon Management

    Hardened Managed Ethernet Switch SNMP & RMON Management This chapter describes the switch’s Simple Network Management Protocol (SNMP) and Remote Monitoring (RMON) capabilities. Overview RMON is an abbreviation for the Remote Monitoring MIB (Management Information Base). RMON is a system defined by the Internet Engineering Task Force (IETF) document RFC 2819, which defines how networks can be monitored remotely.
  • Page 31: Rmon Mib (Rfc 2819) And Bridge Mib (Rfc 1493)

    Hardened Managed Ethernet Switch - Retrieving MIB counters from various layers of software modules according to the SNMP GET/GET NEXT frame messages. - Setting MIB variables according to the SNMP SET frame message. - Generating an SNMP TRAP frame message to the Network Management Station if the threshold of a certain MIB counter is reached or if other trap conditions (such as the following) are met: WARM START...
  • Page 32: Bridge Groups Supported

    Hardened Managed Ethernet Switch - RMON History Group – gathers and stores periodic statistical samples from the previous Statistics Group. - RMON Alarm Group – allows a network administrator to define alarm thresholds for any MIB variable. An alarm can be associated with Low Threshold, High Threshold, or both.
  • Page 33: Web-Based Browser Management

    Hardened Managed Ethernet Switch Web-Based Browser Management The switch provides a web-based browser interface for configuring and managing the switch. This interface allows you to access the switch using a preferred web browser. This chapter describes how to configure the switch using its web-based browser interface.
  • Page 34 Hardened Managed Ethernet Switch LOGIN Enter the factory default login ID: root. PASSWORD Enter the factory default password (no password). Or enter a user-defined password if you followed the instructions later and changed the factory default password. Then click on the “Login” button to log on to the switch. User’s Manual...
  • Page 35: Understanding The Browser Interface

    Hardened Managed Ethernet Switch Understanding the Browser Interface The web browser interface provides groups of point-and-click buttons at the left field of the screen for configuring and managing the switch. SYSTEM System Information, System Name/Password, Address, Save Configuration, Firmware Upgrade, Alarm Setting, Reboot, Logout PORT Configuration, Port Status, Rate Control, RMON Statistics, Per Port Vlan Activities...
  • Page 36 Hardened Managed Ethernet Switch VLAN VLAN Mode Setting, 802.1Q VLAN Setting, 802.1Q Port Setting, Port Based VLAN Global Configuration, 802.1p Priority, DSCP SNMP SNMP General Setting, SNMP v1/v2c, SNMP v3 802.1X Radius Configuration, Port-Based Authentication OTHER PROTOCOLS GVRP, IGMP Snooping, NTP User’s Manual...
  • Page 37: System

    Hardened Managed Ethernet Switch System System Information View System information, VLAN ID, IP Address, and IP Subnet Mask of the Switch. User’s Manual...
  • Page 38 Hardened Managed Ethernet Switch System Name/Password System Name: Click in “System Name” text box. Type a system name if it is blank, or replace the current system name with a new one. Updating setting: Click “Updating setting” button to update your settings. Password: Click in “Password”...
  • Page 39 Hardened Managed Ethernet Switch IP Address IP Address: Click in “IP Address” text box and type a new address to change the IP Address. IP Subnet Mask: Click in “IP Subnet Mask” text box and type a new address to change the IP Subnet Mask. Submit: Click “Submit”...
  • Page 40 Hardened Managed Ethernet Switch Click the text box and type a new address to change the DNS Server. (Need to choose “Enable” from the “DNS Server” drop-down menu.) Submit: Click “Submit” button when you finished DNS Server. Save Configuration Load config from TFTP server: Click in “TFTP Server”...
  • Page 41 Hardened Managed Ethernet Switch Auto save interval (5~65536 sec): Click in “Auto save interval” text box and type a decimal number between 5 and 65536. Submit: Click “Submit” button when you finished Auto save configuration. Firmware Upgrade Filename: Click in “Filename” text box and type the name of the file that you intend to upgrade it to the switch.
  • Page 42 Hardened Managed Ethernet Switch Please follow the message on the screen during the firmware upgrade process. Do not turn off the power or perform other functions during this period of time. User’s Manual...
  • Page 43 Hardened Managed Ethernet Switch User’s Manual...
  • Page 44 Hardened Managed Ethernet Switch Firmware has been upgraded successfully to the switch. Reboot the switch after completing the upgrade process. User’s Manual...
  • Page 45 Hardened Managed Ethernet Switch User’s Manual...
  • Page 46 Hardened Managed Ethernet Switch Alarm Setting Name: Click “Name” drop-down menu to choose “fe1~fe16”, “ge1~ge2”, or “Power1~Power3” from the “Name” drop-down list. Trigger Enabled: Click “Trigger Enabled” drop-down menu to choose “YES” or “NO” from the “Trigger Enabled” drop-down list to enable or disable Trigger.
  • Page 47 Hardened Managed Ethernet Switch Reboot Reboot: Click “Reboot” button to restart the switch. User’s Manual...
  • Page 48 Hardened Managed Ethernet Switch Logout Logout: Click “Logout” button to logout of the switch. User’s Manual...
  • Page 49: Port

    Hardened Managed Ethernet Switch Port Configuration Admin Setting: Click “Admin Setting” drop-down menu to choose “Link down” or “Link up” from the “Admin Setting” drop-down list to disable or enable Admin Setting for the port. Speed: Click “Speed” drop-down menu to change the line speed and duplex settings from the “Speed”...
  • Page 50 Hardened Managed Ethernet Switch Port Status View the Link Status, Speed, Duplex, and Flow control status for all ports. User’s Manual...
  • Page 51 Hardened Managed Ethernet Switch Rate Control Ingress: Click in “Ingress” text box and type a new Rate to change the Ingress Rate Control for the port. Rate Values: 64kbps, 128kbps, 192kbps, … , 1792kbps. 2Mbps, 3Mbps, 4Mbps, … , 100Mbps. 104Mbps, 112Mbps, 120Mbps, …...
  • Page 52 Hardened Managed Ethernet Switch 104Mbps, 112Mbps, 120Mbps, … , 1000Mbps. <Note>: M = 1024k. Update setting: Click “Update setting” button when you finished these Rate Control settings. RMON Statistics Click Port 1 ~ Port 18 to view corresponding RMON Statistics. User’s Manual...
  • Page 53 Hardened Managed Ethernet Switch Per port vlan activities Click Port 1 ~ Port 18 to view corresponding vlan activities. User’s Manual...
  • Page 54: Switching

    Hardened Managed Ethernet Switch Switching Bridging Aging Time (seconds): Click the text box and type a decimal number as Bridging Aging Time in seconds. Update setting: Click “update setting” button when you finished Aging User’s Manual...
  • Page 55 Hardened Managed Ethernet Switch Time settings. Threshold level (0-100): Click in “Level” text box and type a decimal number port. Need choose “Broadcast” and/or “DFL-Multicast“ from “Storm-control enabled type” for the port. DLF (Destination Lookup Failure). Storm-control enabled type: Choose “Broadcast” and/or “DLF-Multicast” from “Storm-control enabled type”...
  • Page 56 Hardened Managed Ethernet Switch Delete MAC address: Click “Delete MAC address” drop-down menu and choose a locked forwarding MAC address from the “Delete MAC address” drop-down list to be deleted from the port. Submit: Click “Submit” button when you finished Static-MAC-Entry Forward settings.
  • Page 57 Hardened Managed Ethernet Switch Port Mirroring Mirror From: Choose Mirror From port from Port 1 ~ Port 18. Mirror To: Click “Mirror To” drop-down menu to Choose Mirror To port (Port 1 ~ Port 18) from “Mirror To” drop-down list. Mirror Mode: Click “Mirror Mode”...
  • Page 58: Trunking

    Hardened Managed Ethernet Switch Trunking Port Trunking Static Channel Group: Trunk 1: Click Port 1 ~ Port 16 to assign ports to Trunk 1. (Maximum 4 ports in Trunk 1.) GE Trunking: Trunk 3: Click “Static” or “Disable” for Trunk 3. Submit: Click “Submit”...
  • Page 59: Stp / Ring

    Hardened Managed Ethernet Switch STP / Ring Global Configuration Spanning Tree Protocol: Click “Spanning Tree Protocol” drop-down menu to Choose “Enable” or “Disable” from “Spanning Tree Protocol” drop-down list to enable or disable Spanning Tree Protocol. Bridge Priority (0..61440): Click in “Bridge Priority” text box and type a decimal number between 0 and 61440.
  • Page 60 Hardened Managed Ethernet Switch Update setting: Click “Update setting” button when you finished Global Configuration. RSTP Port Setting STP Version: Click “STP Version” drop-down menu to choose “RSTP” from “STP Version” drop-down list. Port: Click “Port” drop-down menu to Choose Port 1 ~ Port 18 from “Port”...
  • Page 61 Hardened Managed Ethernet Switch “Disable”, or “Auto” from “Edge Port” drop-down list to set Enable, Disable, or Auto Edge Port for the port. Update setting: Click “Update setting” button when you finished RSTP Port Setting. User’s Manual...
  • Page 62 Hardened Managed Ethernet Switch MSTP Properties STP Version: Click “STP Version” drop-down menu to choose “MSTP” from “STP Version” drop-down list. Region Name: Click in “Region Name” text box to create an MST region and specify a name to it. MST bridges of a region form different spanning trees for different VLANs.
  • Page 63 Hardened Managed Ethernet Switch User’s Manual...
  • Page 64 Hardened Managed Ethernet Switch MSTP Instance Setting VLAN Instance Configuration VLAN Instance Configuration: Click “VLAN Instance Configuration” button. The “VLAN Instance Configuration” window appears. VLAN ID: Click “VLAN ID” drop-down menu to choose VLAN from “VLAN ID” drop-down list to simultaneously add multiple VLANs for the corresponding instance of a bridge.
  • Page 65 Hardened Managed Ethernet Switch User’s Manual...
  • Page 66 Hardened Managed Ethernet Switch MSTP Port Setting Port Instance Configuration Instance ID: Click “Instance ID” drop-down menu to choose instance ID from “Instance ID” drop-down list. Click Port 1 ~ Port 18 to assign ports to the corresponding instance ID. Update setting: Click “Update setting”...
  • Page 67 Hardened Managed Ethernet Switch range is 0-240. The priority values can only be set in increments of 16. Admin. Path Cost: Click in “Admin. Path Cost” text box to set the cost of a path associated with an interface. Update setting: Click “Update setting” button when you finished MSTP Port Setting.
  • Page 68: Vlan

    Hardened Managed Ethernet Switch VLAN VLAN Mode Setting VLAN Mode Setting: Click “VLAN Mode Setting” drop-down menu to choose “Tag-based VLAN” or “Port-based VLAN” from “VLAN Mode Setting” drop-down list. Update Setting: Click “Update Setting” button when you finished VLAN Mode Setting.
  • Page 69 Hardened Managed Ethernet Switch User’s Manual...
  • Page 70 Hardened Managed Ethernet Switch 802.1Q VLAN setting Add VLAN: VLAN setting: Click “VLAN setting”. The “VLAN Setting” window appears. Add VLAN: Click “Add VLAN” button to create a new VLAN from “VLAN Setting” window. VLAN ID(2-4094): Click in the “VLAN ID” textbox and specify a new VLAN ID number from 2 ~ 4094.
  • Page 71 Hardened Managed Ethernet Switch Delete VLAN: VLAN setting: Click “VLAN setting”. The “VLAN Setting” window appears. Delete VLAN: Click “Delete VLAN” button. Select a VLAN ID: Click “Select a VLAN ID” drop-down menu from “Select a VLAN ID” drop-down list to choose the VLAN to be deleted. Submit: Click “Submit”...
  • Page 72 Hardened Managed Ethernet Switch 802.1Q Port Setting VLAN Port Setting: Click “VLAN Port Setting”. The “VLAN Port Setting” window appears. Mode: Click “Mode” drop-down menu to choose “Access”, “Trunk”, or “Hybrid” from “Mode” drop-down list for the port. The port will be Tag port if you choose “Trunk”...
  • Page 73 Hardened Managed Ethernet Switch User’s Manual...
  • Page 74 Hardened Managed Ethernet Switch Port Based VLAN VLAN: Choose the port to be added to or deleted from the VLAN. Select all: Click “select all” button to choose Port 1 ~ Port 18 all to be added to the VLAN. Delete all: Click “delete all”...
  • Page 75: Qos

    Hardened Managed Ethernet Switch Global Configuration QoS: Click “QoS” drop-down menu from “QoS” drop-down list to choose “Enable” or “Disable” to enable or disable QoS. Trust: Enable or disable the switch port to trust the CoS (Class of Service) labels of all traffic received on that port. Enable or disable a routed port to trust the DSCP (Differentiated Service Code Point) labels of all traffic received on that port.
  • Page 76 Hardened Managed Ethernet Switch 802.1p Priority Priority: Click “Priority” drop-down menu from “Priority” drop-down list to choose 0 ~ 3 for VLAN Priority 0 ~ 7. Submit: Click “Submit” button when you finished 802.1p priority. User’s Manual...
  • Page 77 Hardened Managed Ethernet Switch DSCP Priority: Click “Priority” drop-down menu from “Priority” drop-down list to choose 0 ~ 3 for DSCP Priority 0 ~ 63. Submit: Click “Submit” button when you finished DSCP. User’s Manual...
  • Page 78: Snmp

    Hardened Managed Ethernet Switch SNMP SNMP General Setting SNMP Status: Click “SNMP Status” drop-down menu from “SNMP Status” drop-down list to choose “Enable” or “Disable” to enable or disable SNMP. User’s Manual...
  • Page 79 Hardened Managed Ethernet Switch Description: Click in the “Description” textbox and specify a new description for SNMP. Location: Click in the “Location” textbox and specify a new location for SNMP. Contact: Click in the “Contact” textbox and specify a new contact for SNMP.
  • Page 80 Hardened Managed Ethernet Switch SNMP v1/v2c Get Community Name: Click in the “Get Community Name” textbox and specify a get community name. Set Community Name: Click in the “Set Community Name” textbox and specify a set community name. Update Setting: Click “Update Setting” button when you finished SNMP V1/V2c Setting.
  • Page 81 Hardened Managed Ethernet Switch User’s Manual...
  • Page 82 Hardened Managed Ethernet Switch SNMP v3 Add User: Add User: Click “Add User” button. The “SNMP V3 Setting” window appears. SNMP Version: Click “SNMP Version” drop-down menu from “SNMP Version” drop-down list to choose “SNMPv3 No-Auth”, “SNMPv3 Auth-MD5”, “SNMPv3 Auth-SHA”, “SNMPv3 Priv Auth-MD5”, or “SNMPv3 Priv Auth-SHA”.
  • Page 83 Hardened Managed Ethernet Switch User Name: Click in the “User Name” textbox and specify a user name for user using SNMP v3. Access Mode: Click “Access Mode” drop-down menu from “Access Mode” drop-down list to choose “Read Only” or “Read/Write”. Read Only: Add a user using SNMP v3 with read-only access mode.
  • Page 84 Hardened Managed Ethernet Switch 802.1x Radius Configuration Radius Status: Click “Radius Status” drop-down menu from “Radius Status” drop-down list to choose “Enable” or “Disable” to globally enable or disable authentication. Update Setting: Click “Update Setting” button when you finished Radius Status Setting.
  • Page 85 Hardened Managed Ethernet Switch Add Radius: Add Radius: Click “Add Radius” button. The “Radius Server Setting” window appears. Radius Server IP: Click in the “Radius Server IP” textbox and specify the IP address of the remote radius server host. Radius Server Port: Click in the “Radius Server Port” textbox and specify the UDP destination port for authentication requests.
  • Page 86 Hardened Managed Ethernet Switch Delete Radius: Delete Radius: Click “Delete Radius” button. The “Select Radius Server IP” window appears. Select Radius Server IP: Click “Select Radius Server IP” drop-down menu from “Select Radius Server IP” drop-down list to choose the IP address of the remote radius server host to be deleted.
  • Page 87 Hardened Managed Ethernet Switch Port-Based Authentication Interface: Click “Interface” drop-down menu from “Interface” drop-down list to choose the port to be set port-based authentication. Authentication State: Click “Authentication State” drop-down menu from “Authentication State” drop-down list to choose “Enable” or “Disable” to enable or disable authentication state.
  • Page 88 Hardened Managed Ethernet Switch reauthorization attempts. The default time is 3600 seconds. Update Setting: Click “Update Setting” button when you finished port-based authentication setting. User’s Manual...
  • Page 89: Other Protocols

    Hardened Managed Ethernet Switch Other Protocols User’s Manual...
  • Page 90 Hardened Managed Ethernet Switch GVRP GVRP Global Setting: GVRP: Click “GVRP” drop-down menu from “GVRP” drop-down list to choose “Enable” or “Disable” to enable or disable GVRP (GARP VLAN Registration Protocol). Dynamic VLAN creation: Click “Dynamic VLAN creation” drop-down menu from “Dynamic VLAN creation” drop-down list to choose “Enable” or “Disable”...
  • Page 91 Hardened Managed Ethernet Switch IGMP Snooping IGMP mode: Click “IGMP mode” drop-down menu from “IGMP mode” drop-down list to choose “Disable”, “Passive”, or “querier” for the switch. Disable: Disable IGMP on the switch. Passive: The switch with only multicast-data-forwarding capability. Querier: The switch acts as the querier for the network.
  • Page 92 Hardened Managed Ethernet Switch Max-response-time: Click in the “max-re sponse-time” textbox and specify a new number from 1 ~ 124. This determines the maximum amount of time in seconds allowed before sending an IGMP response report. The max-response-time field allows an entry between 1 and 124 (seconds).
  • Page 93 Hardened Managed Ethernet Switch NTP Setting: NTP Status: Click “NTP Status” drop-down menu from “NTP Status” drop-down list to choose “Enable” or “Disable” to enable or disable NTP for the Switch. NTP Server (IP Address or Domain name): Click in the “NTP Server” textbox and specify the IP address or Domain name of NTP server.
  • Page 94 Hardened Managed Ethernet Switch Daylight Saving Mode: Click "Daylight Saving Mode" drop-down menu from "Daylight Saving Mode" drop-down list to choose "Disable", "Weekday", or "Date" to choose disable, weekday, or date daylight saving for the Switch. Time Set Offset (1-1440 min): Click in the "Time Set Offset" textbox and specify the offset time of daylight saving.
  • Page 95: Command Line Console Management

    Hardened Managed Ethernet Switch Command Line Console Management The switch provides a command line console interface for configuration purposes. The switch can be configured either locally through its RS-232 port or remotely via a Telnet session. For the later, you must specify an IP address for the switch first.
  • Page 96: Exec Mode (View Mode)

    Hardened Managed Ethernet Switch Exec Mode (View Mode) Logon to Exec Mode (View Mode) At the switch_a login: prompt just type in “root” and press <Enter> to logon to Exec Mode (or View Mode). switch_a login: root User’s Manual...
  • Page 97 Hardened Managed Ethernet Switch Basic commands Exec Mode (or View Mode) is the base mode from where users can perform basic commands like: clear, debug, disable, enable, exit, help, logout, no, quit, show, terminal The CLI contains a text-based help facility. Access this help by typing in the full or partial command string then typing a question mark “?”.
  • Page 98 Hardened Managed Ethernet Switch Login timed out The login session to Exec Mode (or View Mode) has timed out due to an extended period of inactivity (60 seconds) to indicate authentication attempt timed out. And the switch_a login: prompt will show on the screen. Logon back to Exec Mode (View Mode) At the switch_a login: prompt just type in “root”...
  • Page 99 Hardened Managed Ethernet Switch back to Exec Mode (or View Mode). switch_a login: root Exit from Exec Mode (View Mode) At the switch_a> prompt just type in “exit” and press <Enter> to exit from Exec Mode (or View Mode). switch_a>exit User’s Manual...
  • Page 100: Privileged Exec Mode (Enable Mode)

    Hardened Managed Ethernet Switch Privileged Exec Mode (Enable Mode) Logon to Privileged Exec Mode (Enable Mode) At the switch_a> prompt just type in “enable” and press <Enter> to logon to Privileged Exec Mode (or Enable Mode). And the switch_a# prompt will show on the screen.
  • Page 101 Hardened Managed Ethernet Switch At the switch_a# prompt just type in the full or partial command string then typing a question mark “?” to display the command keywords or parameters along with a short description. switch_a#show ? User’s Manual...
  • Page 102 Hardened Managed Ethernet Switch Login timed out The login session to Privileged Exec Mode (or Enable Mode) has timed out due to an extended period of inactivity (60 seconds) to indicate authentication attempt timed out. And the switch_a login: prompt will show on the screen. Logon back to Exec Mode (View Mode) At the switch_a login: prompt just type in “root”...
  • Page 103 Hardened Managed Ethernet Switch back to Exec Mode (or View Mode). switch_a login: root Exit from Privileged Exec Mode (or Enable Mode) At the switch_a# prompt just type in “exit” and press <Enter> to exit from Privileged Exec Mode (or Enable Mode). switch_a#exit User’s Manual...
  • Page 104: Configure Mode (Configure Terminal Mode)

    Hardened Managed Ethernet Switch Configure Mode (Configure Terminal Mode) Logon to Configure Mode (Configure Terminal Mode) At the switch_a# prompt just type in “configure terminal” and press <Enter> to logon to Configure Mode (or Configure Terminal Mode). And the switch_a(config)# prompt will show on the screen. switch_a#configure terminal Commands Configure Mode (or Configure Terminal Mode) serves as a gateway into the...
  • Page 105 Hardened Managed Ethernet Switch At the switch_a(config)# prompt just type in the full or partial command string then typing a question mark “?” to display the command keywords or parameters along with a short description. switch_a(config)#show ? User’s Manual...
  • Page 106 Hardened Managed Ethernet Switch Login timed out The login session to Configure Mode (or Configure Terminal Mode) has timed out due to an extended period of inactivity (60 seconds) to indicate authentication attempt timed out. And the switch_a login: prompt will show on the screen.
  • Page 107 Hardened Managed Ethernet Switch Exit from Configure Mode (or Configure Terminal Mode) At the switch_a(config)# prompt just type in “exit” and press <Enter> to exit from Configure Mode (or Configure Terminal Mode). switch_a(config)#exit User’s Manual...
  • Page 108: System

    Hardened Managed Ethernet Switch System System Information, System Name/Password, Address, Save Configuration, Firmware Upgrade, Alarm Setting, Reboot, Logout System Name/Password System Name: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use hostname command to set or change the network server name.
  • Page 109 Hardened Managed Ethernet Switch IP Address IP Address/IP Subnet Mask: Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode. vlan1.1 means vlan 1. The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface vlan1.1 switch_a(config-if)# Usage: Use ip address command to set the IP address of an interface.
  • Page 110 Hardened Managed Ethernet Switch Example: The following example sets the default gateway 192.168.1.254 to switch: switch_a(config)#ip default-gateway 192.168.1.254 switch_a(config)# DNS Server: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use ip dns command to set the IP address of the DNS server.
  • Page 111 Hardened Managed Ethernet Switch switch_a#install image 192.168.1.100 flash.tgz switch_a# Load config to TFTP server: Command Mode: Privileged Exec mode Logon to Privileged Exec Mode (Enable Mode). The switch_a# prompt will show on the screen. switch_a# Usage: Use write config-file command to backup configuration file to tftp server. Command Syntax: write config-file IP-ADDRESS IP-ADDRESS specifies the IP address of tftp server.
  • Page 112 Hardened Managed Ethernet Switch Command Mode: Privileged Exec mode Logon to Privileged Exec Mode (Enable Mode). The switch_a# prompt will show on the screen. switch_a# Usage: Use restore default command to restore default setting of the switch. Command Syntax: restore default Example: The following example restores default setting of the switch: switch_a#restore default...
  • Page 113 Hardened Managed Ethernet Switch Use this command to set the interval when the configuration would be automatically saved. The range of interval value is from 5 to 65535. And the default value is 30 seconds. Command Syntax: service auto-config interval WORD WORD specifies the interval value.
  • Page 114 Hardened Managed Ethernet Switch At the “switch_a#” prompt just type in “reload” and press <Enter> to reboot the switch after completing the upgrade process. User’s Manual...
  • Page 115 Hardened Managed Ethernet Switch Alarm Setting Alarm-trigger if: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use this command to enable or disable alarm trigger on interface. Command Syntax: (no) alarm-trigger if INTERFACE INTERFACE specifies the interface.
  • Page 116: Port

    Hardened Managed Ethernet Switch Command Syntax: reload Example: The following example specifies restarting switch: switch_a#reload switch_a login: Logout Command Mode: Exec mode or Privileged Exec mode Logon to Exec Mode (View Mode) or Privileged Exec Mode (Enable Mode). The switch_a> or switch_a# prompt will show on the screen. switch_a>...
  • Page 117 Hardened Managed Ethernet Switch Usage: Use the shutdown command to shut down the selected interface. Use the no shutdown to disable this function. Command Syntax: (no) shutdown Example: The following example shows the use of the shutdown command to shut down the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#shutdown...
  • Page 118 Hardened Managed Ethernet Switch switch_a(config)#interface fe1 switch_a(config-if)# Usage: Use flowcontrol on command to enable flow control, and configure the flow control mode for the port. Use the no flowcontrol to disable this function. Command Syntax: flowcontrol on no flowcontrol Example: The following example shows the use of flowcontrol on to the interface fe1 (port 1): switch_a(config)#interface fe1...
  • Page 119 Hardened Managed Ethernet Switch fe1 means port 1. The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)# Usage: Use this command to specify the ingress/egress rate to be used for each interface. The bandwidth value is in bits. Use the no parameter with this command to remove the ingress/egress rate to be used for each interface.
  • Page 120 Hardened Managed Ethernet Switch Per Port Vlan Activities Command Mode: Exec mode or Privileged Exec mode Logon to Exec Mode (View Mode) or Privileged Exec Mode (Enable Mode). The switch_a> or switch_a# prompt will show on the screen. switch_a> switch_a# Usage: Use show vlan command to display information about a particular VLAN by specifying the VLAN ID.
  • Page 121: Switching

    Hardened Managed Ethernet Switch Switching Bridging, Static MAC Entry, Port Mirroring Bridging Aging Time (seconds): Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use this command to specify an ageing-out time for a learned MAC address. The learned MAC address will persist till this specified time.
  • Page 122 Hardened Managed Ethernet Switch maximum speed (pps) of the interface. Example: The following example shows setting storm-control level LEVEL (30) to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#storm-control level 30 switch_a(config-if)# Broadcast: Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode.
  • Page 123 Hardened Managed Ethernet Switch Command Syntax: storm-control multicast enable no storm-control multicast Example: The following example shows setting storm-control multicast enable to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#storm-control multicast enable switch_a(config-if)# DLF: Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode.
  • Page 124 Hardened Managed Ethernet Switch Usage: Use this command to statically configure a bridge entry to forward matching frames. Command Syntax: bridge GROUP address MAC forward IFNAME VLANID no bridge GROUP address MAC forward IFNAME VLANID GROUP <1-1> Bridge-group ID used for bridging. MAC the Media Access Control (MAC) address in the HHHH.HHHH.HHHH format.
  • Page 125 Hardened Managed Ethernet Switch Port Mirroring Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode. fe1 means port 1. The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)# Usage: Use this command to define a mirror source port and its direction. Use the no parameter with this command to disable port mirroring by the destination port on the specified source port.
  • Page 126: Trunking

    Hardened Managed Ethernet Switch Trunking Port Trunking Port Trunking Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode. fe1 means port 1. The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)# Usage: Use static-channel-group command to create a static aggregator, or add a member port to an already-existing static aggregator.
  • Page 127: Stp / Ring

    Hardened Managed Ethernet Switch STP / Ring Global Configuration, RSTP Port Setting, MSTP Properties, MSTP Instance Setting, MSTP Port Setting, Ring Setting Global Configuration STP Version: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use this command to choose the Spanning Tree protocol, Rapid Spanning...
  • Page 128 Hardened Managed Ethernet Switch GROUP <1-1> Bridge group name used for bridging. BRIDGE-FORWARD Puts all ports of the specified bridge into the forwarding state. Example: The following example enables or disables the multiple-spanning-tree on bridge GROUP (1): switch_a(config)#bridge 1 multiple-spanning-tree enable switch_a(config)#no bridge 1 multiple-spanning-tree enable bridge-forward switch_a(config)# Rapid Spanning Tree Protocol:...
  • Page 129 Hardened Managed Ethernet Switch Command Syntax: bridge GROUP spanning-tree enable no bridge GROUP spanning-tree enable BRIDGE-FORWARD GROUP <1-1> Bridge group name used for bridging. BRIDGE-FORWARD Puts all ports of the specified bridge into the forwarding state. Example: The following example enables or disables the spanning-tree on bridge GROUP (1): switch_a(config)#bridge 1 spanning-tree enable switch_a(config)#no bridge 1 spanning-tree enable bridge-forward...
  • Page 130 Hardened Managed Ethernet Switch this bridge is the root bridge) all the bridges in a bridged LAN exchange Bridge Protocol Data Units (BPDUs). Command Syntax: bridge GROUP hello-time HELLOTIME no bridge GROUP hello-time GROUP <1-1> The ID of the bridge group to which this hello time is assigned.
  • Page 131 Hardened Managed Ethernet Switch switch_a(config)# Usage: Use this command to set the time (in seconds) after which (if this bridge is the root bridge) each port changes states to learning and forwarding. Use the no parameter with this command to restore the default value. Command Syntax: bridge GROUP forward-time FORWARD_DELAY no bridge GROUP forward-time...
  • Page 132 Hardened Managed Ethernet Switch Admin. Path Cost: Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode. fe1 means port 1. The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)# Usage: Use this command to set the cost of a path associated with a bridge-group. Use the no parameter with this command to restore the default cost of a path associated with a bridge-group.
  • Page 133 Hardened Managed Ethernet Switch shared Disable rapid transition. Example: The following example sets the link-type LINKTYPE (point-to-point) of the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#spanning-tree link-type point-to-point switch_a(config-if)# Autoedge: Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode.
  • Page 134 Hardened Managed Ethernet Switch Use the no spanning-tree edgeport command to set a port to its default state (not an edge-port) and to disable rapid transitions. Command Syntax: (no) spanning-tree edgeport Example: The following example enables the spanning-tree edgeport of the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#spanning-tree edgeport...
  • Page 135 Hardened Managed Ethernet Switch Then logon to MST Configuration mode. The switch_a(config-mst)# prompt will show on the screen. switch_a(config)#spanning-tree mst configuration switch_a(config-mst)# Usage: Use this command to specify the number for configuration information. The default value of revision number is 0. Command Syntax: bridge GROUP revision REVISION_NUM GROUP <1-1>...
  • Page 136 Hardened Managed Ethernet Switch MSTP Instance Setting Bridge Instance VLAN: Command Mode: MST Configuration mode Logon to Configure Mode (Configure Terminal Mode). Then logon to MST Configuration mode. The switch_a(config-mst)# prompt will show on the screen. switch_a(config)#spanning-tree mst configuration switch_a(config-mst)# Usage: Use this command to simultaneously add multiple VLANs for the corresponding instance of a bridge.
  • Page 137 Hardened Managed Ethernet Switch bridge GROUP instance INSTANCE_ID priority BRIDGE_PRIORITY no bridge GROUP instance INSTANCE_ID priority GROUP <1-1> Specify the bridge-group ID. INSTANCE_ID Specify the instance ID. BRIDGE_PRIORITY <0-61440> Specify the bridge priority. Example: The following example sets the bridge priority (0) for an MST instance (3) in bridge GROUP (1): switch_a(config)#bridge 1 instance 3 priority 0 switch_a(config)#...
  • Page 138 Hardened Managed Ethernet Switch switch_a(config)#interface fe1 switch_a(config-if)# Usage: Use this command to set the port priority for a bridge group. The Multiple Spanning Tree Protocol uses port priority as a tiebreaker to determine which port should forward frames for a particular instance on a LAN, or which port should be the root port for an instance.
  • Page 139 Hardened Managed Ethernet Switch Example: The following example sets the path cost (1000) for Multiple Spanning Tree instance (3) to a port (fe1) in bridge GROUP (1): switch_a(config)#interface fe1 switch_a(config-if)#bridge-group 1 instance 3 path-cost 1000 switch_a(config-if)# Ring Setting Ring state: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode).
  • Page 140 Hardened Managed Ethernet Switch switch_a(config)#ring set-port fe1 fe2 switch_a(config)# User’s Manual...
  • Page 141: Vlan

    Hardened Managed Ethernet Switch VLAN VLAN Mode Setting, 802.1Q VLAN Setting, 802.1Q Port Setting, Port Based VLAN 802.1Q VLAN Setting VLAN Database: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use vlan database command to enter the VLAN configuration mode.
  • Page 142 Hardened Managed Ethernet Switch affected. VLAN_NAME The ASCII name of the VLAN. Maximum length: 16 characters. enable Sets VLAN into an enable state. disable Sets VLAN into a disable state. Example: The following example enables the vlan VLANID (2) and name VLAN_NAME (vlan2) of bridge GROUP (1): switch_a(config-vlan)#vlan 2 bridge 1 name vlan2 state enable switch_a(config-vlan)#...
  • Page 143 Hardened Managed Ethernet Switch switch_a(config)#interface fe1 switch_a(config-if)# Usage: Use switchport mode hybrid command to set the switching characteristics of the Layer-2 interface as hybrid, and classify both tagged and untagged frames. Use the no switchport hybrid command to reset the mode of the Layer-2 interface to access (default).
  • Page 144 Hardened Managed Ethernet Switch switch_a(config-if)#switchport mode trunk switch_a(config-if)# Switchport hybrid allowed vlan: Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode. fe1 means port 1. The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)# Usage:...
  • Page 145 Hardened Managed Ethernet Switch Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode. fe1 means port 1. The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)# Usage: Use this command to set the switching characteristics of the Layer-2 interface to trunk.
  • Page 146 Hardened Managed Ethernet Switch Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode. fe1 means port 1. The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)# Usage: Use this command to set or remove the default VLAN for the interface. Command Syntax: switchport portbase add|remove vlan VLANID VLANID The ID of the VLAN will be added to or removed from the Layer-2...
  • Page 147: Qos

    Hardened Managed Ethernet Switch Global Configuration, 802.1p Priority, DSCP Global Configuration QoS: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use mls qos enable command to globally enable QoS. Use the no mls qos command to globally disable QoS.
  • Page 148 Hardened Managed Ethernet Switch Strict Priority: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use priority-queue out command to enable the egress expedite queue. Use the no priority-queue out command to disable the egress expedite queue.
  • Page 149 Hardened Managed Ethernet Switch The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use wrr-queue cos-map command to specify CoS values for a queue. Command Syntax: wrr-queue cos-map QUEUE_ID COS_VALUE QUEUE_ID Queue ID. Range is 0-3. COS_VALUE CoS values. Up to 8 values (separated by spaces). Range is 0-7.
  • Page 150: Snmp

    Hardened Managed Ethernet Switch SNMP SNMP General Setting, SNMP v1/v2c, SNMP v3 SNMP General Setting SNMP Status: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use snmp-server enable command to enable and no snmp-server enable command to disable SNMP to the switch.
  • Page 151 Hardened Managed Ethernet Switch Location: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use snmp-server location command to specify and no snmp-server location command to remove location for SNMP. Command Syntax: snmp-server location LOCATION no snmp-server location...
  • Page 152 Hardened Managed Ethernet Switch switch_a(config)# Usage: Use this command to specify trap community name for SNMP. Use the no parameter with this command to remove trap community name for SNMP. Command Syntax: snmp-server trap-community <1-5> NAME no snmp-server trap-community <1-5> <1-5>...
  • Page 153 Hardened Managed Ethernet Switch The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use snmp-server trap-type enable coldStart command to enable cold start trap for SNMP. Use the no snmp-server trap-type enable coldStart command to disable cold start trap for SNMP. Command Syntax: (no) snmp-server trap-type enable coldStart Example:...
  • Page 154 Hardened Managed Ethernet Switch down trap for SNMP. Use the no snmp-server trap-type enable linkDown command to disable link down trap for SNMP. Command Syntax: (no) snmp-server trap-type enable linkDown Example: The following example enables link down trap for SNMP: switch_a(config)#snmp-server trap-type enable linkDown switch_a(config)# Link Up Trap:...
  • Page 155 Hardened Managed Ethernet Switch (no) snmp-server trap-type enable authenticationFailure Example: The following example enables authentication failure trap for SNMP: switch_a(config)#snmp-server trap-type enable authenticationFailure switch_a(config)# Topology Change Trap: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use snmp-server trap-type enable topologyChange command to enable...
  • Page 156 Hardened Managed Ethernet Switch The following example specifies get community name (name) for SNMP: switch_a(config)#snmp-server community get name switch_a(config)# Set Community Name: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use snmp-server community set command to specify and no...
  • Page 157 Hardened Managed Ethernet Switch switch_a(config)#snmp-server v3-user myuser ro noauth switch_a(config)# SNMPv3 Auth-MD5, SNMPv3 Auth-SHA: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Add a user using snmp v3 with read-only or read-write access mode and with MD5 or SHA authentication.
  • Page 158 Hardened Managed Ethernet Switch ro read-only access mode rw read-write access mode md5 authentication method sha authentication method AUTH_PASSWORD authentication password PRIV_PASS_PHRASE encryption pass phrase Example: The following example adds a user (myuser) using snmp v3 with read-write access mode, MD5 authentication (mypassword), and encryption pass phrase (mypassphrase): switch_a(config)#snmp-server v3-user myuser rw priv md5 mypassword des mypassphrase...
  • Page 159 Hardened Managed Ethernet Switch 802.1x Radius Configuration, Port-Based Authentication Radius Configuration Radius Status: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use dot1x system-auth-ctrl command to globally enable authentication. Use no dot1x system-auth-ctrl command to globally disable authentication.
  • Page 160 Hardened Managed Ethernet Switch switch_a(config)#radius-server host 192.168.1.100 auth-port 1812 switch_a(config)# Secret Key: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use this command to set the shared secret key between a Radius server and a client.
  • Page 161 Hardened Managed Ethernet Switch switch_a(config)#radius-server timeout 20 switch_a(config)# Retransmit: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use this command to specify the number of times the Switch transmits each radius request to the server before giving up.
  • Page 162 Hardened Managed Ethernet Switch switch_a(config)#interface fe1 switch_a(config-if)#dot1x reauthentication switch_a(config-if)# Port Control: Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode. fe1 means port 1. The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)# Usage: Use this command to force a port state.
  • Page 163 Hardened Managed Ethernet Switch Use no dot1x timeout re-authperiod command to delete the interval between reauthorization attempts. Command Syntax: dot1x timeout re-authperiod SECS no dot1x timeout re-authperiod SECS <1-4294967295> Specify the seconds between reauthorization attempts. The default time is 3600 seconds. Example: The following example specifies to set the interval 25 seconds between reauthorization attempts:...
  • Page 164: Other Protocols

    Hardened Managed Ethernet Switch Other Protocols GVRP, IGMP Snooping, NTP GVRP GVRP: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use set gvrp enable bridge command to enable (set) and set gvrp disable bridge command to disable (reset) GVRP globally for the bridge instance.
  • Page 165 Hardened Managed Ethernet Switch Example: The following example enables dynamic VLAN creation for bridge GROUP (1): switch_a(config)#set gvrp dynamic-vlan-creation enable bridge 1 switch_a(config)# Per port setting: GVRP: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use set port gvrp enable command to enable and set port gvrp disable...
  • Page 166 Hardened Managed Ethernet Switch The following example sets GVRP applicant state to active on the interface fe1 (port 1): switch_a(config)#set gvrp applicant state active fe1 switch_a(config)# Per port setting: GVRP registration: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen.
  • Page 167 Hardened Managed Ethernet Switch switch_a(config-if)# Usage: Use ip igmp snooping querier command to enable IGMP querier operation on a subnet (VLAN) when no multicast routing protocol is configured in the subnet (VLAN). When enabled, the IGMP Snooping querier sends out periodic IGMP queries for all interfaces on that VLAN.
  • Page 168 Hardened Managed Ethernet Switch switch_a(config)#interface vlan1.1 switch_a(config-if)#ip igmp snooping IGMP version: Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode. fe1 means port 1. The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)# Usage: Use ip igmp version command to set the current IGMP protocol version on...
  • Page 169 Hardened Managed Ethernet Switch Command Syntax: (no) ip igmp snooping fast-leave Example: The following example enables IGMP snooping fast-leave on vlan1.1: switch_a(config)#interface vlan1.1 switch_a(config-if)#ip igmp snooping fast-leave IGMP querier: Query-interval: Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode.
  • Page 170 Hardened Managed Ethernet Switch switch_a(config-if)# Usage: Use ip igmp query-max-response-time command to configure the frequency of sending IGMP host query messages. return default frequency, igmp query-max-response-time command. Command Syntax: ip igmp query-max-response-time RESPONSETIME no ip igmp query-max-response-time RESPONSETIME <1-240> Maximum response time seconds)
  • Page 171 Hardened Managed Ethernet Switch IGMP passive snooping: Report suppression: Command Mode: Interface mode Logon to Configure Mode (Configure Terminal Mode). Then logon to Interface mode. vlan1.1 means vlan 1. The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface vlan1.1 switch_a(config-if)# Usage: Use ip igmp snooping report-suppression command to enable report suppression for IGMP versions 1 and 2.
  • Page 172 Hardened Managed Ethernet Switch NTP Server: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode). The switch_a(config)# prompt will show on the screen. switch_a(config)# Usage: Use this command to specify the IP address or Domain name of NTP server. Command Syntax: ntp server IP-ADDRESS|DOMAIN-NAME IP-ADDRESS A.B.C.D specifies the IP address of NTP server.
  • Page 173 Hardened Managed Ethernet Switch Usage: Use this command to to set time zone. Command Syntax: clock timezone TIMEZONE TIMEZONE Specifies the time zone. (Please refer the Appendix B) Example: The following example sets time zone (Canada/Yukon): switch_a(config)#clock timezone YST9YDT switch_a(config)# Polling Interval: Command Mode: Configure mode Logon to Configure Mode (Configure Terminal Mode).
  • Page 174 Hardened Managed Ethernet Switch WEEK <1-5> Specifies weekdays from Monday to Friday. DAY <0-6> Specifies from Sunday to Saturday. MONTH <1-12> Specifies from January to December. HOUR <0-23> Specifies from 0 to 23. MINUTE <0-59> Specifies from 0 to 59. OFFSET <1-1440>...
  • Page 175: Specifications

    Hardened Managed Ethernet Switch Specifications Applicable Standards IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX, 100Base-FX IEEE 802.3ab 1000Base-T IEEE 802.3z 1000Base-SX/LX Store-and-Forward Switching Method Forwarding Rate 10Base-T 10 / 20Mbps half / full-duplex 100Base-TX 100 / 200Mbps half / full-duplex 100Base-FX 200Mbps full-duplex 1000Base-T/SX/LX 2000Mbps full-duplex...
  • Page 176 Hardened Managed Ethernet Switch EN61000-6-2: EN61000-4-2 (ESD Standard) EN61000-4-3 (Radiated RFI Standards) EN61000-4-4 (Burst Standards) EN61000-4-5 (Surge Standards) EN61000-4-6 (Induced RFI Standards) EN61000-4-8 (Magnetic Field Standards) EN61000-4-11 (Voltage Dips Standards) IEC60068-2-6 Fc (Vibration Resistance) Environmental Test IEC60068-2-27 Ea (Shock) Compliance IEC60068-2-32 Ed (Free Fall) NEMA TS1/2 Environmental requirements for traffic control equipment User’s Manual...
  • Page 177 Hardened Managed Ethernet Switch Appendix A DB9 DCE pin assignment Pin no. Name RS232 Signal name Data Carrier detect Received data Transmit data Signal ground Data set Ready Clear to send User’s Manual...
  • Page 178 Hardened Managed Ethernet Switch Appendix B Time Zone Country and City Lists Europe MEZ-1MESZ Europe/Vienna, Europe/Berlin, Europe/Zurich MET-1METDST Africa/Tunis, CET, MET, Europe/Tirane, Europe/Andorra, Europe/Brussels, Europe/Prague, Europe/Copenhagen, Europe/Paris, Europe/Gibraltar, Europe/Budapest, Europe/Rome, Europe/Vaduz, Europe/Luxembourg, Europe/Malta, Europe/Monaco, Europe/Amsterdam, Europe/Oslo, Europe/Warsaw, Europe/Belgrade, Europe/Madrid, Africa/Ceuta, Europe/Stockholm, Europe/Vatican, Europe/San_Marino, Arctic/Longyearbyen, Atlantic/Jan_Mayen, Europe/Ljubljana,...
  • Page 179 Hardened Managed Ethernet Switch Asia/Yekaterinburg RFT-6RFTDST Asia/Omsk, Asia/Novosibirsk RFT-7RFTDST Asia/Hovd, Asia/Krasnoyarsk RFT-8RFTDST Asia/Irkutsk, Asia/Chungking, Asia/Ulan_Bator RFT-9RFTDST Asia/Choibalsan, Asia/Yakutsk RFT-10RFTDST Asia/Vladivostok RFT-11RFTDST Asia/Sakhalin, Asia/Magadan RFT-12RFTDST Asia/Kamchatka, Asia/Anadyr North America PST8PDT America/Los_Angeles, US/Pacific-New, PST8PDT, US/Pacific, SystemV/PST8PDT MST7MDT America/Denver, America/Boise, America/Cambridge_Bay, America/Shiprock, MST7MDT, Navajo, US/Mountain, SystemV/MST7MDT MST7 America/Phoenix, MST, US/Arizona,...
  • Page 180 Hardened Managed Ethernet Switch America/Argentina/La_Rioja, America/Argentina/San_Juan, America/Argentina/Jujuy, America/Argentina/Catamarca, America/Argentina/Mendoza, America/Argentina/Rio_Gallegos, America/Argentina/Ushuaia, America/Argentina/ComodRivadavia, America/Buenos_Aires, America/Cordoba, America/Jujuy, America/Mendoza EBST3EBDT America/Fortaleza, America/Recife, America/Araguaina, America/Maceio, America/Bahia, America/Sao_Paulo, America/Cuiaba, America/Montevideo, America/Catamarca, America/Rosario, Brazil/East WBST4WBDT America/Campo_Grande, America/Boa_Vista, America/Manaus, Atlantic/Stanley, America/Asuncion, Brazil/West ACRE5 America/Rio_Branco, America/Porto_Acre, Brazil/Acre NORO2 America/Noronha, Brazil/DeNoronha CST4CDT Antarctica/Palmer, America/Santiago,...
  • Page 181 Hardened Managed Ethernet Switch Africa/Mbabane EST-2EDT Africa/Cairo, Egypt UAEST-4 Asia/Dubai IST-3IDT Asia/Baghdad JST-2JDT Asia/Amman SST-2SDT Asia/Damascus Universal Africa/Ouagadougou, Africa/Abidjan, Africa/Banjul, Africa/Accra, Africa/Conakry, Africa/Bissau, Africa/Monrovia, Africa/Bamako, Africa/Nouakchott, Africa/Casablanca, Africa/El_Aaiun, Atlantic/St_Helena, Africa/Sao_Tome, Africa/Dakar, Africa/Freetown, Africa/Lome, America/Danmarkshavn, Atlantic/Reykjavik, Etc/GMT, Etc/UTC, Etc/UCT, GMT, Etc/Universal, Etc/Zulu, Etc/Greenwich, Etc/GMT-0, Etc/GMT+0, Etc/GMT0, Africa/Timbuktu, GMT+0, GMT-0, GMT0, Greenwich, Iceland, UCT, UTC, Universal,...
  • Page 182 Hardened Managed Ethernet Switch Pacific/Honolulu, Etc/GMT+10, HST, US/Hawaii, SystemV/HST10 UCT11 Pacific/Niue, Pacific/Pago_Pago, Pacific/Apia, Pacific/Midway, Etc/GMT+11, Pacific/Samoa, US/Samoa UCT-1 Africa/Algiers, Africa/Luanda, Africa/Porto-Novo, Africa/Douala, Africa/Bangui, Africa/Ndjamena, Africa/Kinshasa, Africa/Brazzaville, Africa/Malabo, Africa/Libreville, Africa/Windhoek, Africa/Niamey, Africa/Lagos, Etc/GMT-1 UCT-2 Africa/Gaborone, Africa/Bujumbura, Africa/Lubumbashi, Africa/Tripoli, Africa/Blantyre, Africa/Maputo, Africa/Kigali, Africa/Lusaka, Africa/Harare, Etc/GMT-2, Libya UCT-3...
  • Page 183 Hardened Managed Ethernet Switch Pacific/Saipan, Pacific/Truk, Pacific/Noumea, Pacific/Port_Moresby, Etc/GMT-10, Pacific/Yap UCT-11 Pacific/Ponape, Pacific/Kosrae, Pacific/Guadalcanal, Etc/GMT-11 UCT-11:30 Pacific/Norfolk UCT-12 Pacific/Fiji, Pacific/Tarawa, Pacific/Enderbury, Pacific/Majuro, Pacific/Kwajalein, Pacific/Nauru, Pacific/Tongatapu, Pacific/Funafuti, Pacific/Wake, Pacific/Efate, Pacific/Wallis, Etc/GMT-12, Kwajalein UCT-13 Etc/GMT-13 Asia/Tokyo, Japan Asia/Seoul, Asia/Pyongyang, ROK UCT-3:30 Asia/Tehran, Iran UCT-4:30 Asia/Kabul IST-2IDT...
  • Page 184 Hardened Managed Ethernet Switch North America (Haiti) EST5EDT_HT America/Nassau, America/Santo_Domingo, America/Port-au-Prince, America/Bogota North America (Mexico) PST8PDT_MX America/Tijuana, America/Ensenada, Mexico/BajaNorte MST7MDT_MX America/Chihuahua, America/Hermosillo, America/Mazatlan, Mexico/BajaSur CST6CDT_MX America/Guatemala North America (Turks and Caicos) EST5EDT_TC America/Grand_Turk Additions Since 10g RTM EST5EDT_INDIANA America/Indiana/Indianapolis, America/Indiana/Marengo, America/Indiana/Vevay, America/Fort_Wayne, America/Indianapolis,...

Table of Contents