Comnet CNGE2FE24MS Installation And Operation Manual

Comnet CNGE2FE24MS Installation And Operation Manual

Environmentally hardened managed ethernet switch with (24) 10/100tx + (2) 10/100/1000tx rj45 or 1000 fx sfp ports
Table of Contents

Advertisement

Quick Links

INSTALLATION AND OPERATION MANUAL
CNGE2FE24MS
ENVIRONMENTALLY HARDENED MANAGED ETHERNET SWITCH WITH (24)
10/100TX + (2) 10/100/1000TX RJ45 OR 1000 FX SFP PORTS
V1.02 – October 2009
The ComNet™ CNGE2FE24MS Managed Ethernet Switch provides transmission of (24) 10/100
BASE-TX and (2) 10/100/1000TX or 1000FX combo ports. Unlike most Ethernet switches, these
environmentally hardened units are designed for deployment in difficult operating environments,
and are available for use with either conventional CAT-5e copper or optical transmission media.
The 24 electrical ports support the 10/100 Mbps Ethernet IEEE 802.3 protocol, and auto-
negotiating and auto-MDI/MDIX features are provided for simplicity and ease of installation. 2 ports
are 10/100/1000 configurable for copper or fiber media for use with multimode or single mode optical
fiber, selected by optional SFP modules. These network managed layer 2 switches are optically
(1000 BASE-FX) and electrically compatible with any IEEE 802.3 compliant Ethernet devices. Plug-
and-play design ensures ease of installation, and no electrical or optical adjustments are ever
required. The CNGE2FE24MS incorporates LED indicators for monitoring the operating status of the
managed switch and network. These units are rack mountable.
i

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the CNGE2FE24MS and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Comnet CNGE2FE24MS

  • Page 1 (1000 BASE-FX) and electrically compatible with any IEEE 802.3 compliant Ethernet devices. Plug- and-play design ensures ease of installation, and no electrical or optical adjustments are ever required. The CNGE2FE24MS incorporates LED indicators for monitoring the operating status of the managed switch and network. These units are rack mountable.
  • Page 2: Fcc Warning

    FCC Warning This Equipment has been tested and found to comply with the limits for a Class-A digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
  • Page 3: Table Of Contents

    Content FCC Warning ............... i 
 CE Mark Warning ............i 
 Content ............... ii 
 Introduction ..............1 
 Hardware Features ..........1 
 Software Feature............4 
 Package Contents ............ 7 
 Hardware Description..........8 
 Physical Dimension ..........8 
...
  • Page 4 Web-Based Management ........26 
 About Web-based Management ......26 
 Preparing for Web Management ......26 
 System Login ............27 
 System ..............28 
 System Information ..........28 
 IP Configuration ............. 29 
 DHCP Server – System configuration ....31 
...
  • Page 5 Port................50 
 Port Statistics ............50 
 Port Counters ............51 
 Port Control ............54 
 Port Trunk .............. 56 
 Aggregator setting ............56 
 Aggregator Information .............58 
 State Activity ..............59 
 Port Mirroring ............61 
 Rate Limiting ............
  • Page 6 IGMP Configuration..........85 
 LLDP Configuration ..........86 
 X-Ring ..............87 
 Security ..............89 
 802.1X/Radius Configuration..........89 
 MAC Address Table............92 
 Access Control List ..........97 
 Factory Default ............98 
 Save Configuration..........98 
 System Reboot............98 
...
  • Page 7 VLAN Commands Set.............113 
 Spanning Tree Commands Set ........115 
 QOS Commands Set ............118 
 IGMP Commands Set.............118 
 Mac / Filter Table Commands Set ........119 
 SNMP Commands Set............121 
 Port Mirroring Commands Set ........124 
 802.1x Commands Set ...........124 
...
  • Page 8: Introduction

    Introduction The 24 10/100TX + 2 10/100/1000T/SFP Combo Managed Industrial Switch is a cost- effective solution and meets the high reliability requirements demanded by industrial applications. Using fiber port can extend the connection distance that increases the network elasticity and performance. Hardware Features IEEE 802.3 10Base-T Ethernet IEEE 802.3u 100Base-TX / 100Base-FX...
  • Page 9 Packet Buffer 4Mbits MAC address 8K MAC address table Flash ROM 4Mbytes DRAM 32Mbytes Jumbo Frame 9022bytes (for Gigabit Ports) RS-232 console : Female DB-9 10/100TX: 24 x RJ45 Connector 10/100/1000T/ Mini-GBIC Combo: 2 x RJ45 + 2 x SFP sockets DC-PWR1, DC-PWR2: Green, Fault: Red Link/Activity (P1 ~ P26): Green...
  • Page 10 Redundant Power DC 12V ~ 48V Supply Power 16.2 Watts Consumption Operating Temp. C to 75 Operation 5% to 95% (Non-condensing) Humidity Storage C to 85 Temperature Case Dimension 440mm (W) x 280mm (D) x 44mm (H) Installation 19” Rack mount FCC Class A, CE EN61000-4-2 (ESD), CE EN61000-4-3 (RS), CE EN-61000-4-4 (EFT), CE EN61000-4-5 (Surge), CE EN61000-4-6 (CS), CE...
  • Page 11: Software Feature

    Software Feature SNMP v1 SNMP v2c Management SNMP v3 Web/Telnet/Console (CLI) RFC 2418 SNMP MIB, RFC 1213 MIBII, RFC 2011 SNMP V2 MIB, RFC 1493 Bridge MIB, SNMP MIB RFC 2674 VLAN MIB, RFC 1215 Trap MIB, RFC 1643 Ethernet Like, RFC 1757 RMON1, RSTP MIB, LLDP MIB, Private MIB Port based VLAN, up to 24 groups IEEE802.1Q Tag VLAN...
  • Page 12 The quality of service determined by port, Tag and Quality of service IPv4 Type of service, IPv4 Different Service Supports IEEE802.1p class of service, per port Class of Service provides 4 priority queues Supports 50 entries of MAC address for static MAC Port Security and another 50 for MAC filter Port Mirror...
  • Page 13 Supports Flow Control for Full-duplex and Back Flow Control Pressure for Half-duplex Supports System log record and remote system log System log server Supports 1 SMTP Server and 6 e-mail accounts for SMTP receiving event alert Provides one relay output for port breakdown and Relay Alarm power failure Alarm Relay current carry ability: 1A @ DC 24V...
  • Page 14: Package Contents

    Package Contents Please refer to the package contents list below to verify them against the checklist.  24 10/100TX + 2 10/100/1000T/SFP Combo Managed Industrial Switch x 1  User manual x 1  Pluggable Terminal Block x 1  Mounting plate x 2 ...
  • Page 15: Hardware Description

    Hardware Description In this paragraph, the Industrial switch’s hardware spec, port, cabling information, and wiring installation will be described. Physical Dimension 24 10/100TX + 2 10/100/1000T/SFP Combo Managed Industrial Switch dimension (W x D x H) is 17.6” x 11.2” x 1.75” (440mm x 280mm x 44mm)
  • Page 16: Front Panel

    Front Panel The Front Panel of 24 10/100TX + 2 10/100/1000T/SFP Combo Managed Industrial Switch is shown as below: Front Panel of the Managed Industrial Switch Rear Panel The rear panel of 24 10/100TX + 2 10/100/1000T/SFP Combo Managed Industrial Switch has one terminal block connector.
  • Page 17 Pin-outs follow: PWR1 Pin 1 or Pin 2 = +12 to +48 VDC Pin 3 or Pin 4 = -12 VDC to -48 VDC PWR2 Pin 7 or Pin 8 = +12 to +48 VDC Pin 9 or Pin 10 = -12 VDC to -48 VDC Fault Pin 5 and Pin 6 = normally open relay secondary, contacts rated at 24 VDC 1A max, resistive loads only...
  • Page 18: Led Indicators

    LED Indicators The diagnostic LEDs located on the front panel of the industrial switch provide real-time information of the system and optional status. The following table provides the description of the LED status and their meanings for the switch. Status Description Green DC power input 1 is active...
  • Page 19: Cabling

    Cabling  Use four twisted-pair, Category 5e or above cabling for RJ45 port connection. The cable between the switch and the link partner (switch, hub, workstation, etc.) must be less than 100 meters (328 ft.) long. Fiber segment using a small form-factor pluggable, a single-mode connector can be ...
  • Page 20 Transceiver Inserted Second, insert the fiber cable of LC connector into the transceiver. LC connector to the transceiver...
  • Page 21 To remove the LC connector from the transceiver, please follow the steps shown below: First, press the upper side of the LC connector to release from the transceiver and pull it out. Remove LC connector Second, push down the metal loop and pull the transceiver out by the plastic handle.
  • Page 22 Pull out from the transceiver...
  • Page 23: Desktop Installation

    Desktop Installation Set the Switch on a sufficiently large flat space with a power outlet nearby. The surface where you put your switch should be clean, smooth, level and sturdy. Make sure there is enough clearance around the Switch to allow attachment of cables, power cord and allow air circulation.
  • Page 24 Perform the following steps to rack-mount the switch: Position one plate to align with the holes on one side of the Switch and secure it with the smaller plate screws. Then, attach the remaining plate to the other side of the Switch.
  • Page 25: Network Application

    Network Application This segment provides the samples to help user have more actual idea of industrial switch application. For the sample applications of the industrial switch, see the figures below.
  • Page 26: X-Ring Application

    X-Ring Application The industrial switch supports the X-Ring protocol that can help the network system to recover from network connection failure within 20ms or less, and make the network system more reliable. The X-Ring algorithm is similar to Spanning Tree Protocol (STP) and Rapid STP (RSTP) algorithm but its recovery time is less than STP/RSTP.
  • Page 27: Couple Ring Application

    Couple Ring Application In the network, it may have more than one X-Ring group. Using the coupling ring function can connect each X-Ring for the redundant backup. It can ensure the transmissions between two ring groups not to fail. The following figure is a sample of coupling ring application.
  • Page 28: Dual Homing Application

    Dual Homing Application Dual Homing function is to prevent the connection loss from between X-Ring group and upper level/core switch. Assign two ports to be the Dual Homing port that is backup port in the X-Ring group. The Dual Homing function only works when the X-Ring function is active.
  • Page 29: Console Management

    Console Management Connecting to the Console Port Use the supplied RS-232 cable to connect between a terminal/PC and the console port. The terminal or PC to being connected must support the terminal emulation program. Connecting the switch to a terminal via RS-232 cable Login in the Console Interface When the connection between Switch and PC is ready, turn on the PC and run a terminal emulation program or Hyper Terminal and configure its communication parameters to...
  • Page 30: Cli Management

    Flow control: None The settings of communication parameters After finishing the parameter settings, click ‘OK’. When the blank screen shows up, press Enter key to bring out the login prompt. Key in ‘admin’ (default value) for both User name and Password (use Enter key to switch), then press Enter key and the Main Menu of console management appears.
  • Page 31 The system supports the console management—CLI command. After you log in on the system, you will see a command prompt. To enter CLI management interface, type in “enable” command. CLI command interface The following table lists the CLI commands and description. Access Exit Modes...
  • Page 32 Enter the To exit to Use this mode to configure privileged configure those Global command switch EXEC parameters that are Configuration while in (config)# mode, enter going to be applied to privileged exit or end your switch. EXEC mode. Enter the vlan To exit to database...
  • Page 33: Web-Based Management

    Web-Based Management This section introduces the configuration and functions of the Web-Based management. About Web-based Management There is an embedded HTML web site residing in flash memory on CPU board of the switch, which offers advanced management features and allows users to manage the switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer.
  • Page 34: System Login

    System Login Launch the Internet Explorer on the PC Key in “http:// “+” the IP address of the switch”, and then Press “Enter”. The login screen will appear right after. Key in the user name and password. The default user name and password are the same as ‘admin’...
  • Page 35: System

    System System Information Assign the system name and location and view the system information.  System Name: Assign the system name of the switch (The maximum length is 64 bytes)  System Description: Describes the switch.  System Location: Assign the switch physical location (The maximum length is 64 bytes).
  • Page 36: Ip Configuration

    IP Configuration User can configure the IP Settings and DHCP client function in here.  DHCP Client: Enable or disable the DHCP client function. When DHCP client function is enabled, the industrial switch will be assigned an IP address from the network DHCP server.
  • Page 37 IP configuration interface...
  • Page 38: Dhcp Server - System Configuration

    DHCP Server – System configuration DHCP is the abbreviation of Dynamic Host Configuration Protocol that is a protocol for assigning dynamic IP addresses to devices on a network. With dynamic addressing, a device can have a different IP address every time it connects to the network. In some systems, the device's IP address can even change while it is still connected.
  • Page 39: Dhcp Server - Client Entries

    DHCP Server Configuration interface DHCP Server – Client Entries When the DHCP server function is active, the system will collect the DHCP client information and displays it at this tab. DHCP Client Entries interface...
  • Page 40: Dhcp Server - Port And Ip Bindings

    DHCP Server - Port and IP Bindings Assign the dynamic IP address to the port. When the device is connecting to the port and asks for IP assigning, the system will assign the IP address that has been assigned before to the connected device.
  • Page 41: Tftp - Update Firmware

    Port and IP Bindings interface TFTP - Update Firmware It provides the functions that allow user to update the switch firmware. Before updating, make sure the TFTP server is ready and the firmware image is located on the TFTP server. TFTP Server IP Address: Type in your TFTP server IP.
  • Page 42: Tftp - Backup Configuration

    Restore Configuration interface TFTP - Backup Configuration You can save the current configuration from flash ROM to TFTP server for restoring later. TFTP Server IP Address: Type in the TFTP server IP. Backup File Name: Type in the file name. Click Backup Configuration interface System Event Log –...
  • Page 43 System Log Server IP Address: Assign the system log server IP. When Syslog Client Mode is set as Client Only, the system event log will only be reserved in the switch’s RAM until next reboot. When Syslog Client Mode is set as Server Only, the system log will only be sent to the syslog server and you have to type the IP address of the Syslog Server in the “Syslog Server IP Address”...
  • Page 44: System Event Log - Smtp Configuration

    Syslog Configuration interface System Event Log - SMTP Configuration You can set up the mail server IP, mail account, password, and forwarded email account for receiving the event alert. Email Alert: Enable or disable the email alert function. SMTP Server IP: Set up the mail server IP address (when Email Alert enabled, this function will then be available).
  • Page 45 Authentication: Tick the checkbox to enable this function, configuring the email account and password for authentication (when Email Alert enabled, this function will then be available). Mail Account: Set up the email account, e.g. johnadmin, to receive the alert. It must be an existing email account on the mail server, which you had set up in SMTP Server IP Address column.
  • Page 46: System Event Log - Event Configuration

    System Event Log - Event Configuration The user must enable the Syslog or SMTP first to configure the condition setting in this page. When the Syslog/SMTP checkbox is marked, the event log will be sent to system log server/SMTP server. Also, per port log (link up, link down, and both) events can be sent to the system log server/SMTP server with the respective checkbox ticked.
  • Page 47 Event Configuration interface...
  • Page 48: Fault Relay Alarm

    Fault Relay Alarm  Power Failure: Tick the checkbox to enable the function of lighting up the FAULT LED on the panel when power fails.  Port Link Down/Broken: Tick the checkbox to enable the function of lighting up FAULT LED on the panel when Ports’ states are link down or broken. Fault Relay Alarm interface...
  • Page 49: Sntp Configuration

    SNTP Configuration You can configure the SNTP (Simple Network Time Protocol) settings. The SNTP allows you to synchronize switch clocks in the Internet. SNTP Client: Enable/disable SNTP function to get the time from the SNTP server. Daylight Saving Time: Enable/disable daylight saving time function. When daylight saving time is enabled, you need to configure the daylight saving time period.
  • Page 50 CET - Central European FWT - French Winter MET - Middle European +1 hour
 1 pm
 MEWT - Middle European Winter SWT - Swedish Winter 
 EET - Eastern European, USSR +2 hours
 2 pm
 Zone 1
 BT - Baghdad, USSR Zone 2
 +3 hours
...
  • Page 51: Ip Security

    SNTP Configuration interface IP Security IP security function allows the user to assign 10 specific IP addresses that have permission to access the switch through the web browser for the securing switch management.  IP Security Mode: When this option is in Enable mode, the Enable HTTP Server and Enable Telnet Server checkboxes will then be available.
  • Page 52 addresses for access security. Only these 10 IP addresses can access and manage the switch through the HTTP/Telnet service.  And then, click to have the configuration taken effect. [NOTE] Remember to execute the “Save Configuration” action, otherwise the new configuration will lose when the switch powers off.
  • Page 53: User Authentication

    User Authentication Change web management login user name and password for the management security issue. User name: Type in the new user name (The default is ‘root’)   Password: Type in the new password (The default is ‘root’)  Confirm password: Re-type the new password ...
  • Page 54: Advanced Configuration-Aging Time

     IP Multicast Packets: Tick this check box to enable the switch to filter the packet type of IP Multicast.  Broadcast Packets: Tick this check box to enable the switch to filter the packet type of broadcast.  Broadcast Storm Rate: User can set the filtering rate range from 1/2 of ingress to 1/16 of ingress.
  • Page 55: Advanced Configuration-Jumbo Frame

     And then, click to have the configuration taken effect. Aging Time interface Advanced Configuration—Jumbo Frame This tab is used to enable the jumbo frame function.  Enable Jumbo Frame: When this check box is ticked, the Gigabit port of the switch extends the frame to 9022bytes.
  • Page 56: 1000Tx Cable Length

    1000TX Cable Length This tab is used to allow port 25 and port 26 to support Cat5e or Cat6 cable length longer than 10 meters. To support long cable: Uncheck the check box for the port(s) you would like to ...
  • Page 57: Port

    Port Port Statistics The following information provides the current port statistic information.  Port: Displays the port number.  Type: Displays the media type of the port.  Link: The status of linking—‘Up’ or ‘Down’.  State: The user can set the state of the port as ‘Enable’ or ‘Disable’ via Port Control. When the state is disabled, the port will not transmit or receive any packet.
  • Page 58: Port Counters

    Port Statistics interface Port Counters This chart displays the transmitted and received traffic of single port.  Select Port: Pull down the menu bar to select a particular port, and then the counters for the port will be displayed.  RxBcastPkt: The number of good broadcast packets received.
  • Page 59  RxMcastPkt: The number of good multicast packets received except broadcast packets).  RxFCSErr: The number of packets received that had a bad FCS or RX ER asserted with the proper and integral octels.  RxOverSizePkt: The number of packets received that were longer than Max_Pkt_Len (=1522 bytes) and were otherwise well formed.
  • Page 60  TxSingleCollisn: number successfully transmitted packets which transmission is inhibited by exactly one collision.  TxMultiCollisn: The number of successfully transmitted packets which transmission is inhibited by more than one collision.  TxCollisn: The number of collisions on this Ethernet segment. TxDefferTrans: The number of packets for which the first transmission attempt is ...
  • Page 61: Port Control

    Port Control In Port control, you can view and set the operation mode of each port. Port: Select the port that you want to configure. State: Current port status. The port can be set to disable or enable mode. If the port state is set as ‘Disable’, it will not receive or transmit any packet.
  • Page 62 Port Control interface...
  • Page 63: Port Trunk

    Port Trunk Port trunking is the combination of several ports or network cables to expand the connection speed beyond the limits of any one single port or network cable. Link Aggregation Control Protocol (LACP), which is a protocol running on layer 2, provides a standardized means in accordance with IEEE 802.3ad to bundle several physical ports together to form a single logical channel.
  • Page 64  Select the ports to join the trunk group. The system allows a maximum of four ports to be aggregated in a trunk group. Click and the ports focused in the right side will be shifted to the left side. To remove unwanted ports, select the ports and click ...
  • Page 65: Aggregator Information

    Aggregator Information When you have setup the aggregator setting with LACP disabled, you will see the local static trunk group information in here. Group Key: Displays the trunk group ID. Port Member: Displays the members of this static trunk group. Port Trunk—Aggregator Setting interface (two ports are added to the left field with LACP disable)
  • Page 66: State Activity

    Port Trunk – Aggregator Information interface State Activity Having set up the LACP aggregator on the tab of Aggregator Setting, you can configure the state activity for the members of the LACP trunk group. You can tick or cancel the checkbox beside the state display.
  • Page 67 Port Trunk – State Activity interface...
  • Page 68: Port Mirroring

    Port Mirroring The Port mirroring is a method for monitoring traffic in switched networks. Traffic through ports can be monitored by one specific port, which means traffic goes in or out Monitored (source) port will be duplicated into Analysis (destination) port. Port Trunk –...
  • Page 69: Rate Limiting

    Rate Limiting All the ports support packet ingress and egress rate control. For example, assume the wire speed of port 1 is 100Mbps; users can set its effective egress rate as 2Mbps, ingress rate as 1Mbps. The switch performs the ingress rate by packet counter to meet the specified rate.
  • Page 70: Vlan Configuration

    VLAN configuration A Virtual LAN (VLAN) is a logical network grouping that limits the broadcast domain, which would allow you to isolate network traffic, so only the members of the same VLAN will receive traffic from the ones of the same VLAN. Basically, creating a VLAN from a switch is logically equivalent of reconnecting a group of network devices to another Layer 2 switch.
  • Page 71 In order for an end station to send packets to different VLAN groups, it itself has to be either capable of tagging packets it sends with VLAN tags or attached to a VLAN-aware bridge that is capable of classifying and tagging the packet with different VLAN ID based on not only default PVID but also other information about the packet, such as the protocol.
  • Page 72 VLAN—Port Based Add interface  Enter the group name and VLAN ID. Add the port number having selected into the right field to group these members to be a VLAN group or remove any of them listed in the right field from the VLAN. And then, click to have the settings taken effect.
  • Page 73 VLAN—Port Based Edit/Delete interface  to delete the VLAN.  to modify group name, VLAN ID, or add/remove the members of the existing VLAN group. [NOTE] Remember to execute the “Save Configuration” action, otherwise the new configuration will lose when switch power off.
  • Page 74: 802.1Q Vlan

    802.1Q VLAN Virtual Local Area Network (VLAN) can be implemented on the switch to logically create different broadcast domain. When the 802.1Q VLAN function is enabled, all ports on the switch belong to default VLAN of VID 1, which means they logically are regarded as members of the same broadcast domain.
  • Page 75 802.1Q Configuration  Pull down the selection item and focus on 802.1Q then press to set the VLAN Operation Mode in 802.1Q mode.  Enable GVRP Protocol: GVRP (GARP VLAN Registration Protocol) is a protocol that facilitates control of virtual local area networks (VLANs) within a larger network. GVRP conforms to the IEEE 802.1Q specification, which defines a method of tagging frames with VLAN configuration data.
  • Page 76 Note: Because the access port doesn’t have an understanding of tagged frame, the column field of Tagged VID is not available.  Trunk Link: A segment which provides the link path for one or more VLAN- aware devices (switches). A Trunk Port, connected to the trunk link, has an understanding of tagged frame, which is used for the communication among VLANs across switches.
  • Page 77  Click to have the configuration take effect. You can see the link type, untagged VID, and tagged VID information of each port in  the table below on the screen. 802.1Q VLAN interface...
  • Page 78: Group Configuration

    Group Configuration Edit the existing VLAN Group.  Select the VLAN group in the table list.  Click Group Configuration interface You can modify the VLAN group name and VLAN ID. ...
  • Page 79: Rapid Spanning Tree

    Group Configuration interface  Click Rapid Spanning Tree The Rapid Spanning Tree Protocol (RSTP) is an evolution of the Spanning Tree Protocol and provides for faster spanning tree convergence after a topology change. The system also supports STP and the system will auto-detect the connected device that is running STP or RSTP protocol.
  • Page 80: Rstp - System Configuration

    RSTP - System Configuration  The user can view spanning tree information of Root Bridge.  The user can modify RSTP state. After modification, click  RSTP mode: The user must enable the RSTP function first before configuring the related parameters. ...
  • Page 81 RSTP System Configuration interface...
  • Page 82: Rstp-Port Configuration

    RSTP—Port Configuration You can configure path cost and priority of every port.  Select the port in the port column field.  Path Cost: The cost of the path to the other bridge from this transmitting bridge at the specified port. Enter a number 1 through 200,000,000. ...
  • Page 83 RSTP Port Configuration interface...
  • Page 84: Snmp Configuration

    SNMP Configuration Simple Network Management Protocol (SNMP) is the protocol developed to manage nodes (servers, workstations, routers, switches and hubs etc.) on an IP network. SNMP enables network administrators to manage network performance, find and solve network problems, and plan for network growth. Network management systems learn of problems by receiving traps or change notices from network devices implementing SNMP.
  • Page 85 SNMP System Configuration interface...
  • Page 86: Trap Configuration

    Trap Configuration A trap manager is a management station that receives the trap messages generated by the switch. If no trap manager is defined, no traps will be issued. Create a trap manager by entering the IP address of the station and a community string. To define a management station as a trap manager, assign an IP address, enter the SNMP community strings, and select the SNMP trap version.
  • Page 87: Snmpv3 Configuration

    SNMPV3 Configuration Configure the SNMP V3 function. Context Table Configure SNMP v3 context table. Assign the context name of context table. Click to add context name. Click to remove the unwanted context name. User Profile Configure SNMP v3 user table.. ...
  • Page 88 SNMP V3 configuration interface...
  • Page 89 Group Table Configure SNMP v3 group table.  Security Name (User ID): Assign the user name that you have set up in user table. Group Name: Set up the group name.  Click to add the context name.   Click to remove the unwanted context name.
  • Page 90: Qos Configuration

     Click to add the context name.  Click to remove the unwanted context name. QoS Configuration You can configure QoS mode, 802.1p priority [7-0] setting, Static Port Ingress Priority setting and TOS setting. QoS Policy and Priority Type Qos Mode: Select the QoS policy rule. ...
  • Page 91 has received. For example, user set the TOS level 25 as 0. The port 1 is following the TOS priority policy only. When the port 1 packet received, the system will check the TOS value of the received IP packet. If the TOS value of received IP packet is 25 (priority = 0), and then the packet priority will have highest priority.
  • Page 92: Igmp Configuration

    IGMP Configuration The Internet Group Management Protocol (IGMP) is an internal protocol of the Internet Protocol (IP) suite. IP manages multicast traffic by using switches, routers, and hosts that support IGMP. Enabling IGMP allows the ports to detect IGMP queries, report packets, and manage IP multicast traffic through the switch.
  • Page 93: Lldp Configuration

    IGMP Configuration interface LLDP Configuration LLDP (Link Layer Discovery Protocol) function allows the switch to advertise its information to other nodes on the network and store the information it discovers.  LLDP Protocol: Disable or enable LLDP function.  LLDP Interval: Set the interval of learning the information time in second. ...
  • Page 94: X-Ring

    X-Ring X-Ring provides a faster redundant recovery than Spanning Tree topology. The action is similar to STP or RSTP, but the algorithms between them are not the same. In the X-Ring topology, every switch should be enabled with X-Ring function and two ports should be assigned as the member ports in the ring.
  • Page 95 backup port. When 1 Ring Port fails, the system will automatically upgrade the Ring Port to be the working port.  Enable Couple Ring: To enable the coupe ring function, tick the checkbox beside the Enable Couple Ring string label. ...
  • Page 96: Security

    configuration will lose when switch powers off. Security In this section, you can configure the 802.1x and MAC address table. 802.1X/Radius Configuration 802.1x is an IEEE authentication specification which prevents the client from connecting to a wireless access point or wired switch until it provides authority, like the user name and password that are verified by an authentication server (such as RADIUS server).
  • Page 97 802.1x System Configuration interface 802.1x Per Port Configuration You can configure the 802.1x authentication state for each port. The state provides Disable, Accept, Reject, and Authorize.  Reject: The specified port is required to be held in the unauthorized state. ...
  • Page 98: Misc Configuration

    802.1x Per Port Setting interface Misc Configuration  Quiet Period: Used to define periods of time during which it will not attempt to acquire a supplicant (default time is 60 seconds)  TX Period: Used to determine when an EAPOL PDU is to be transmitted (default value is 30 seconds).
  • Page 99: Mac Address Table

    between the supplicant and authentication server (default value is 30 seconds).  Server Timeout: Used to determine timeout conditions in the exchanges between the authenticator and authentication server (Default value is 30 seconds).  Max Requests: Used to determine the number of reauthentication attempts that are permitted before the specific port becomes unauthorized (default value is 2 times).
  • Page 100: Static Mac Address

    Static MAC Address You can add a static MAC address; it remains in the switch's address table, regardless of whether the device is physically connected to the switch. This saves the switch from having to re-learn a device's MAC address when the disconnected or powered-off device is active on the network again.
  • Page 101: Mac Filtering

    MAC Filtering By filtering MAC address, the switch can easily filter the pre-configured MAC address and reduce the un-safety. You can add and delete filtering MAC address. MAC Filtering interface  MAC Address: Enter the MAC address that you want to filter. ...
  • Page 102: All Mac Addresses

    All MAC Addresses You can view the port that connected device’s MAC address and the related devices’ MAC address.  Select the port. The selected port of static & dynamic MAC address information will be displayed in  here.  Click to clear the current port static MAC address information on screen.
  • Page 103 register to join specific multicast groups. With multicast filtering, network devices only forward multicast traffic to the ports that are connected to registered end stations.  IP Address: Assign a multicast group IP address in the range of 224.0.0.0 ~ 239.255.255.255.
  • Page 104: Access Control List

    Access Control List  Group Id: Type in the Group ID from 1 to 255.  Action: Permit and Deny.  VLAN: Select any or a particular VID.  Packet type: Select packet type—IPv4 or Non-IPv4  Src IP Address: Select any or assign an IP address with Subnet Mask for source IP address.
  • Page 105: Factory Default

    Factory Default Reset switch to default configuration. Click to reset all configurations to the default value. Factory Default interface Save Configuration Save all configurations that you have made in the system. To ensure the all configuration will be saved. Click to save the all configuration to the flash memory.
  • Page 106: Troubleshooting

    Troubleshooting Incorrect connections The switch port can automatically detect straight or crossover cable when you link switch with other Ethernet device. For the RJ45 connector, the user should use correct UTP/STP cable. The link will fail if the RJ45 connector is not correctly pinned on right position.
  • Page 107: Diagnosing Led Indicators

    Data path loops will cause broadcast storms that will severely impact your network performance. Diagnosing LED Indicators To assist in identifying problems, the Switch can be easily monitored through panel indicators, which describe common problems the user may encounter and where the user can find possible solutions.
  • Page 108: Appendix A-Rj45 Pin Assignment

    Appendix A—RJ45 Pin Assignment  RJ45 ports The UTP/STP ports will automatically sense for Fast Ethernet (10/100Base-TX connections), or Gigabit Ethernet (10/100/1000Base-T connections). Auto MDI/MDIX means that the switch can connect to another switch or workstation without changing straight through or crossover cabling. See the figures below for straight through and crossover cable schematic.
  • Page 109: 10/100Base-Tx Cable Schematic

    The table below shows the 10/100BASE-TX MDI and MDI-X port pin outs. Pin Number MDI-X Signal Name MDI Signal Name Receive Data plus (RD+) Transmit Data plus (TD+) Receive Data minus (RD-) Transmit Data minus (TD-) Transmit Data plus (TD+) Receive Data plus (RD+) Transmit Data minus (TD-) Receive Data minus (RD-)
  • Page 110: 10/100/1000Base-Tx Pin Outs

    10/100/1000Base-TX Pin outs The following figure shows the 10/100/1000 Ethernet RJ45 pin outs. 10/100/1000Base-TX Cable Schematic Straight through cables schematic...
  • Page 111 Cross over cables schematic...
  • Page 112: Appendix B-Command Sets

    Appendix B—Command Sets Commands Set List User EXEC Privileged EXEC Global configuration VLAN database Interface configuration System Commands Set Netstar Commands Level Description Example show config Show switch switch>show config configuration show terminal Show console switch#show terminal information write memory Save user switch#write memory configuration into...
  • Page 113 ip address Configure the IP switch(config)#ip address [Ip-address] [Subnet- address of switch 192.168.1.1 255.255.255.0 mask] [Gateway] 192.168.1.254 ip dhcp Enable DHCP client switch(config)#ip dhcp function of switch show ip Show IP information of switch#show ip switch no ip dhcp Disable DHCP client switch(config)#no ip dhcp function of switch reload...
  • Page 114 dhcpserver gateway Configure gateway for switch(config)#dhcpserver [Gateway] DHCP clients gateway 192.168.1.254 dhcpserver dnsip Configure DNS IP for switch(config)#dhcpserver dnsip [DNS IP] DHCP clients 192.168.1.1 dhcpserver leasetime Configure lease time switch(config)#dhcpserver [Hours] (in hour) leasetime 1 dhcpserver ipbinding Set static IP for DHCP switch(config)#interface [IP address] clients by port...
  • Page 115 show security Show the information switch#show security of IP security no security Disable IP security switch(config)#no security function no security http Disable IP security of switch(config)#no security http HTTP server no security telnet Disable IP security of switch(config)#no security telnet telnet server bsf rate Configure Broadcast...
  • Page 116: Port Commands Set

    show jumbo-frame Show jumbo frame switch#show jumbo-frame enable/disable Port Commands Set Netstar Commands Level Description Example interface fastEthernet Choose the port for switch(config)#interface [Portid] modification. fastEthernet 2 duplex Use the duplex switch(config)#interface [full | half] configuration command fastEthernet 2 to specify the duplex switch(config-if)#duplex full mode of operation for Fast Ethernet.
  • Page 117 no security Disable security of switch(config)#interface interface fastEthernet 2 switch(config-if)#no security ratelimit in Set interface input rate switch(config)#interface [Value] limiting fastEthernet 2 switch(config-if)#ratelimit in 100 ratelimit out Set interface output switch(config)#interface [Value] rate limiting fastEthernet 2 switch(config-if)#ratelimit out 100 show ratelimit Show interfaces rate switch(config)#interface limiting...
  • Page 118: Trunk Commands Set

    show interface show interface statistic switch(config)#interface accounting1 counter1 fastEthernet 2 switch(config-if)#show interface accounting1 show interface show interface statistic switch(config)#interface accounting2 counter2 fastEthernet 2 switch(config-if)#show interface accounting2 no accounting Clear interface switch(config)#interface accounting information fastEthernet 2 switch(config-if)#no accounting alias [name] Configure alias name switch(config)#interface of port fastEthernet 2...
  • Page 119 aggregator group Assign a trunk group switch(config)#aggregator group [GroupID] [Port-list] with LACP active. 1 1-4 lacp workp 2 lacp [GroupID] :1~3 workp [Port-list]:Member port switch(config)#aggregator group [Workport] list, This parameter 2 1,4,3 lacp workp 3 could be a port range(ex.1-4) or a port list separate by a comma(ex.2, 3, 6) [Workport]: The...
  • Page 120: Vlan Commands Set

    no aggregator lacp Disable the LACP switch(config)#no aggreator lacp [GroupID] function of trunk group no aggregator group Remove a trunk group switch(config)#no aggreator [GroupID] group 2 VLAN Commands Set Netstar Commands Level Description Example vlan database Enter VLAN configure switch#vlan database mode vlanmode To set switch VLAN...
  • Page 121 IEEE 802.1Q VLAN vlan 8021q name Change the name of switch(vlan)#vlan 8021q test vid [GroupName] VLAN group, if the group didn’t exist, this [VID] command can’t be applied. vlan 8021q port Assign a access link switch(vlan)#vlan 8021q port 3 [PortNumber] for VLAN by port, if the access-link untag 33 access-link untag...
  • Page 122: Spanning Tree Commands Set

    vlan 8021q trunk Assign a hybrid link for switch(vlan)#vlan 8021q trunk 3 [PortNumber] VLAN by trunk group hybrid-link untag 4 tag 3,6,8 hybrid-link untag [UntaggedVID] switch(vlan)#vlan 8021q trunk 3 hybrid-link untag 5 tag 6-8 [TaggedVID List] show vlan [GroupID] Show VLAN switch(vlan)#show vlan 23 information show vlan...
  • Page 123 spanning-tree hello- Use the spanning-tree switch(config)#spanning-tree time [seconds] hello-time global hello-time 3 configuration command to specify the interval between hello bridge protocol data units (BPDUs). spanning-tree Use the spanning-tree switch(config)#spanning-tree forward-time [seconds] forward-time global forward-time 20 configuration command to set the forwarding-time for the specified spanning- tree instances.
  • Page 124 stp-path-priority Use the spanning-tree switch(config)#interface [Port Priority] port-priority interface fastEthernet 2 configuration command to switch(config-if)#stp-path- configure a port priority priority 127 that is used when two switches tie for position as the root switch. stp-admin-p2p Admin P2P of STP priority switch(config)#interface [Auto|True|False] on this interface.
  • Page 125: Qos Commands Set

    QOS Commands Set Netstar Commands Level Description Example qos priority-tos Configure TOS Priority switch(config)#qos priority-tos 9 [TosNum][Priority] qos mode Configure QOS mode switch(config)#qos mode sp [SP|WRR|WRR1|WRR2] qos 8021p-priority Configure 8021p switch(config)#qos 8021p-Priority [Index][Lowest|SecLow Priority 1 lowest |SecHigh|Highest] qos priority-portbased Configure COS Priority switch(config)#interface [Priority] fastEthernet 2 switch(config-if)#qos priority-...
  • Page 126: Mac / Filter Table Commands Set

    igmp last-query- Configure last member switch(config)#igmp last-query- interval [1~250 tenths query interval interval 60 of a sec.] show igmp Show IGMP switch#show igmp configuration configuration configuration show igmp table Show IGMP snooping switch#show igmp multi table no igmp Disable IGMP switch(config)#no igmp snooping function no igmp-query...
  • Page 127 no mac-address-table Remove an entry of switch(config)#interface static hwaddr MAC address table of fastEthernet 2 [HW-Addr][VID] interface (static) switch(config-if)#no mac-address- table static hwaddr 000012345678 1 no mac-address-table Remove an entry of switch(config)#no mac-address- filter hwaddr MAC address table table filter hwaddr 000012348678 [HW-Addr][VID] (filter) no mac-address-table...
  • Page 128: Snmp Commands Set

    no multicast-filtering Remove multicast switch(config)#interface [IP-Addr][VID] filtering entry of fastEthernet 2 interface switch(config-if)#no multicast- filtering 239.0.0.1 1 no multicast-filtering Remove multicast switch(config)#no multicast- [IP-Addr][VID] filtering entry filtering 239.0.0.1 1 show multicast- Show multicast filtering switch#show multicast-filtering filtering table SNMP Commands Set Netstar Commands Level Description...
  • Page 129 snmpv3 context-name Configure the context switch(config)#snmpv3 context- [Context Name ] name name Test snmpv3 user Configure the user switch(config)#snmpv3 user [User Name] profile for SNMPV3 test01 group G1 password group agent. Privacy AuthPW PrivPW [Group Name] password could be password empty.
  • Page 130 show snmp Show SNMP switch#show snmp configuration no snmp community- Remove the specified switch(config)#no snmp strings [Community] community. community-strings public no snmp-server host Remove the SNMP switch(config)#no snmp-server [Host-address] server host. host 192.168.1.50 no snmpv3 user Remove specified user switch(config)#no snmpv3 user [User Name] of SNMPv3 agent.
  • Page 131: Port Mirroring Commands Set

    Port Mirroring Commands Set Netstar Commands Level Description Example monitor destination Set destination port switch(config)#monitor [Port ID] destination 1 monitor source Set source port switch(config)#monitor source 2 [Port ID] monitor mode Configure mode of switch(config)#monitor mode rx [RX|TX|Both|Disabled] monitor function show monitor Show port monitor switch#show monitor...
  • Page 132 8021x system Use the 802.1x system switch(config)#8021x system accountport [port ID] account port global accountport 1813 configuration command to change the accounting port 8021x system Use the 802.1x system switch(config)#8021x system sharedkey [ID] share key global sharedkey 123456 configuration command to change the shared key value.
  • Page 133 8021x misc Use the 802.1x misc switch(config)#8021x misc servertimeout [sec.] server timeout global servertimeout 20 configuration command to set the server timeout. 8021x misc Use the 802.1x misc switch(config)#8021x misc maxrequest [number] max request global maxrequest 3 configuration command to set the MAX requests.
  • Page 134: Tftp Commands Set

    TFTP Commands Set Netstar Commands Level Description Example backup Save configuration to switch(config)#backup flash:backup_cfg TFTP and need to flash:backup_cfg specify the IP of TFTP server and the file name of image. restore Get configuration from switch(config)#restore flash:restore_cfg TFTP server and need flash:restore_cfg to specify the IP of TFTP server and the...
  • Page 135: Systemlog, Smtp And Event Commands Set

    SystemLog, SMTP and Event Commands Set Netstar Commands Level Description Example systemlog ip Set System log server switch(config)#systemlog ip [IP address] IP address. 192.168.1.100 systemlog mode Specified the log mode switch(config)#systemlog mode [client|server|both] both show systemlog Display system log. Switch>show systemlog show systemlog Show system log client switch#show systemlog...
  • Page 136 event device-cold-start Set cold start event switch(config)#event device-cold- [Systemlog|SMTP|Both type start both event authentication- Set Authentication switch(config)#event failure failure event type authentication-failure both [Systemlog|SMTP|Both event ring-topology- Set X-ring topology switch(config)#event ring- change changed event type topology-change both [Systemlog|SMTP|Both event systemlog Set port event for switch(config)#interface [Link-UP|Link-...
  • Page 137: Sntp Commands Set

    no event smpt Disable port event for switch(config)#interface SMTP fastethernet 2 switch(config-if)#no event smtp show systemlog Show system log client switch#show systemlog & server information SNTP Commands Set Netstar Commands Level Description Example sntp enable Enable SNTP function switch(config)#sntp enable sntp daylight Enable daylight saving switch(config)#sntp daylight...
  • Page 138 sntp ip [IP] Set SNTP server IP, if switch(config)#sntp ip 192.169.1.1 SNTP function is inactive, this command can’t be applied. sntp timezone Set timezone index, switch(config)#sntp timezone 22 [Timezone] use “show sntp timzezone” command to get more information of index number show sntp Show SNTP switch#show sntp...
  • Page 139: X-Ring Commands Set

    X-Ring Commands Set Netstar Commands Level Description Example ring enable Enable X-ring switch(config)#ring enable ring master Enable ring master switch(config)#ring master ring ringport Configure 1st/2nd Ring switch(config)#ring ringport 7 8 [1st Ring Port] [2nd Port Ring Port] ring couplering Enable couple ring switch(config)#ring couplering ring couplering Configure Coupling...
  • Page 140: Lldp Command Set

    ring centralring Enable and configure switch(config)#ring centralring 1 [ring ID (1~4)] [1st Ring central ring port Port] [2nd Ring Port] no ring centralring Disable central ring switch(config)#no ring centralring [ring ID (1~4)] LLDP Command Set Netstar Commands Level Description Example lldp enable Enable LLDP function switch(config)#lldp enable lldp interval...
  • Page 141 acl sip ip Specify Src IP and switch(config)#acl sip ip [IP address][Mask] Mask 192.168.1.1 255.255.255.0 acl dip any Any Des IP switch(config)#acl dip any acl dip ip Specify Des IP and switch(config)#acl dip ip [IP address][Mask] Mask 192.168.1.1 255.255.255.0 acl frg Configure ACL IP switch(config)#acl frg check [Check|Uncheck]...
  • Page 142 ComNet Customer Service Customer Care is ComNet Technology’s global service center, where our professional staff are ready to answer your questions at any time. Email address of ComNet Global Service Center: customercare@ComNet.net Communication Networks World Headquarters ComNet Europe Ltd 3 Corporate Drive...

Table of Contents