Page 1
KGS-810F Ver.B Web Smart 8-Port Gigabit Ethernet Switch with 1 mini-GBIC Port KGS-810F-B Software rev1.081 or later User s Manual DOC.150331...
Page 2
KTI Networks Inc. KTI Networks Inc. reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of KTI Networks Inc. to provide notification of such revision or change.
Page 3
The information contained in this document is subject to change without prior notice. Copyright (C) All Rights Reserved. TRADEMARKS Ethernet is a registered trademark of Xerox Corp. FCC NOTICE This device complies with Class A Part 15 the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received including the interference that may cause.
1. Introduction The KGS-810F-B is a managed Gigabit Ethernet switch which is featured with the following switched ports: Seven 10/100/1000Mbps Gigabit copper ports One combo port - 10/100/1000Mbps copper & 1000Base-X SFP and the following advantages in a small footprint box:...
the up-to-date VLAN requirements. The switch supports both port-based VLAN and tagged VLAN in per-port basis. 802.1x Authentication IEEE 802.1X port-based network access control function provide a means of authenticating and authorizing devices attached to the switched port that has point-to-point connection characteristics, and of preventing access to that port in cases in which the authentication and authorization process fails.
1.2 Product Panels The following figure illustrates the front panel and rear panel of the switch: Front panel Rear panel 1.3 LED Indicators Function POWER Power status Management status LNK/1000M/ACT Network port 1000M link status (Port 1 - Port 8) LNK/100M/ACT Network port 100M link status (Port 1 - Port 8) LNK/10M/ACT...
Page 10
IEEE 802.3u 1000Base-T Connectors Shielded RJ-45 jacks Pin assignments Auto MDI/MDI-X detection Configuration Auto-negotiation or software control Transmission rate 10Mbps, 100Mbps, 1000Mbps Duplex support Full/Half duplex Network cable Cat.5 UTP Fiber interface Compliance IEEE 802.3z 1000Base-SX/LX (mini-GBIC) Connectors SFP for optional SFP type fiber transceivers Configuration Auto/Forced, 1000Mbps, Full duplex Transmission rate...
Page 11
Port Link Aggregation function settings Link Aggregation LACP settings RSTP settings 802.1X port access control IGMP snooping Port mirroring settings QoS function settings Storm protection control settings Port statistic, LACP status, RSTP status Reboot, restore factory default, update firmware DC Power Input Interfaces DC Jack ( -D 6.3mm / + D 2.0mm) Operating Input Voltages +5 ~ +12.6VDC...
2. Installation 2.1 Unpacking The product package contains: The switch unit One power adapter One product CD-ROM 2.2 Safety Cautions To reduce the risk of bodily injury, electrical shock, fire and damage to the product, observe the following precautions.
2.3 Mounting the Switch on a Wall The switch can be mounted on a desktop or shelf or a wall. Make sure that there is proper heat dissipation from and adequate ventilation around the device. Do not place heavy objects on the device. 2.4 Mounting the Switch on a Din-rail Chassis The switch also can be mounted on a din-rail chassis.
2.5 Applying Power Before you begin the installation, check the AC voltage of your area. The AC power adapter which is used to supply the DC power for the unit should have the AC voltage matching the commercial power voltage in your area.
2.6 Reset Button The reset button is used to perform a reset to the switch. It is not used in normal cases and can be used for diagnostic purpose. If any network hanging problem is suspected, it is useful to push the button to reset the switch without turning off the power.
function via software management to set forced mode and specify speed and duplex mode which match the configuration used by the connected device. 2.8 Making Fiber Connection The SFP slot must be installed with an SFP fiber transceiver for making fiber connection. Your switch may come with some SFP transceivers pre-installed when it is shipped.
2.9 LED Indication Function State Interpretation POWER Power status The power is supplied to the switch. The power is not supplied to the switch. Management status OFF The switch is in initialization. The switch is initialized completely. LNK/1000M/ACT Port link status A 1000Mbps link is established.
3. Advanced Functions To help a better understanding about the software management interfaces, this chapter describes some advanced functions provided by the switch. 3.1 Abbreviation Ingress Port: Ingress port is the input port on which a packet is received. Egress Port: Egress port is the output port from which a packet is sent out. IEEE 802.1Q Packets: A packet which is embedded with a VLAN Tag field VLAN Tag: In IEEE 802.1Q packet format, 4-byte tag field is inserted in the original Ethernet frame between the Source Address and Type/Length fields.
Page 19
information includes a VID associated to the VLAN, member ports, and some special settings. -19-...
3.2 QoS Function The switch provides a powerful Quality of Service (QoS) function to guide the packet forwarding in four priority classes. The versatile classification methods can meet most of the application needs. The following figure illustrates the QoS operation flow when a packet received on the ingress port until it is transmitted out from the egress port: -20-...
3.2.1 Packet Priority Classification Each received packet is examined and classified into one of four priority classes, Class 3, Class 2, Class 1 and Class 0 upon reception. The switch provides the following classification methods: 802.1p classification: use User Priority tag value in the received IEEE 802.1Q packet to map to one priority class DSCP classification: use DSCP value in the received IP packet to map to one priority class Port-based classification: used when 802.1p and DSCP are disabled or fail to be applied...
get any service (or egress bandwidth) when higher priority traffic is heavy for long time. Three weighted ratio policies are provided to resolve such problem. Four class queues are served in weighted round robin basis. Every priority class can get a guaranteed ratio for the egress bandwidth. 3.3 VLAN Function The switch supports port-based VLAN, 802.1Q Tag VLAN and eight VLAN groups.
3.3.2.2 Keep Tag Per port setting Enable - The VLAN tag in the received VLAN tagged packet will be kept as it is and is not stripped in whole forwarding operation. Disable - The VLAN tag data in the received VLAN tagged packet is stripped (removed). 3.3.2.3 Drop Untagged Per Port Setting Enable - All untagged packets and priority-tagged packets are dropped.
VLAN-tagged packet Ingress Port Default Tag Tag-ignore Untagged packet Ingress Port Default Tag Tag-aware Priority-tagged packet Ingress Port Default Tag Tag-aware VLAN-tagged packet Received packet VLAN Tag Tag-aware 3.3.5 VLAN Group Table Configuration The switch provides a table of eight VLAN groups to support up to eight VLANs at the same time. Each VLAN group is associated to one unique VLAN.
Packet destination MAC address: for MAC address table loop up Switch MAC address table: to find the associated port where a MAC address is learned If the MAC address table lookup is matched and the learned port is the VLAN member port, the packet is forwarded to the port (egress port).
3.4 802.1X Authentication For some IEEE 802 LAN environments, it is desirable to restrict access to the services offered by the LAN to those users and devices that are permitted to make use of those services. IEEE 802.1X Port-based network access control function provide a means of authenticating and authorizing devices attached to a LAN port that has point-to-point connection characteristics, and of preventing access to that port in cases in which the authentication and authorization process fails.
Page 27
(This could be a username/password combination or a certificate.) After the switch, the authenticator receives the ID from the PC (the supplicant). The switch then passes the ID information to an authentication server (RADIUS server) that can verify the identification information. The RADIUS server responds to the switch with either a success or failure message.
4. Web Management The switch features an http server which can serve the management requests coming from any web browser software over TCP/IP network. Web Browser Compatible web browser software with JAVA script support Microsoft Internet Explorer 4.0 or later Set IP Address for the System Unit Before the switch can be managed from a web browser software, make sure a unique IP address is configured for the switch.
attempts will be prompted with a warning message as the right display above. A new connection will be accepted when the current user logout successfully or auto logout by the switch due to no access for time out of 3 minutes. System Configuration is displayed after a successful login.
Page 30
RSTP RSTP (Rapid spanning tree protocol) related configuration 802.1X 802.1X authentication related configuration IGMP Snooping IGMP snooping related configuration Mirroring Port mirroring related configuration Quality of Service related configuration Storm Control Packet Storm protection control configuration Monitoring Statistics Overview List simple statistics for all ports Detailed Statistics List detailed statistics for all ports LACP Status...
Page 32
Configuration Description MAC Address The MAC address factory configured for the switch It can not be changed in any cases. S/W Version The firmware version currently running H/W Version The hardware version currently operating Active IP Address Currently used IP address for the switch management Active Subnet Mask Currently used subnet mask for IP address for the switch management Active Gateway...
4.4.1 Management VLAN Management VLAN settings allow administrator to access the switch and perform the switch management over a dedicated VLAN. The following rules are applied with the Management VLAN: 1. If the VLAN function is disabled, Management VLAN setting is ignored and no VLAN limitation is applied in accessing the switch web management interface.
4.5 Ports Configuration Function Enable Jumbo Frames Select to enable jumbo frame support Power Saving Mode Full – all the time Link-up – power saving only when link up Link-down – power saving only when link down Disable – disable port power saving Port The port number Link...
10 Half Disable Half 10 Full Disable Full 100 Half Disable 100M Half 100 Full Disable 100M Full 1000 Full Enable 1000M Full Auto 1000 Full Enable 1000M Full Flow Control Set port flow control function v - set to enable 802.3x pause flow control for ingress and egress Drop frame after excessive collision Check to enable the function.
Vendor Name The vendor name of the transceiver Vendor OUI The vendor OUI of the transceiver Temperature The current temperature sensed inside the transceiver Voltage The working voltage sensed inside the transceiver TX Power The transmission optical power sensed (Unit: dBm) [Refresh] Click to refresh current configuration.
4.6.1 Port-based VLAN Mode Configuration Description Group 1, 2 Port-based VLAN group number Member ports Select member ports for the group [Apply] Click to apply the configuration change [Refresh] Click to refresh current configuration [Back] Click to go back to upper menu Operation in this mode: 1.
4.6.2 Port-based VLAN ISP Mode Configuration Description Joint port Select a port as the joint port for all 7 port-based VLAN groups [Apply] Click to apply the configuration change [Refresh] Click to refresh current configuration [Back] Click to go back to upper menu Example: If Port 8 is selected as the joint port, the 7 port-based VLAN groups are configured as follows automatically: Group 1 - member [Port 1, Port 8]...
Mode Operation: 1. The joint port is the shared member port for all groups. 2. Two member ports are configured in each group. 3. The member ports in same group can communicate with other only. 4. No packet tag is examined. 5.
4.6.3.1 Ingress Default Tag Configuration Description Port Port number PVID Port VID, VID for Ingress Default Tag 1 ~ 4095 - decimal 12-bit VID value CFI for Ingress Default Tag 0, 1 - 1-bit CFI value User Priority User priority for Ingress Default Tag 0 ~ 7 - decimal 3-bit value [Apply] Click to apply the configuration change...
4.6.3.2 Ingress Settings Configuration Description Port Port number Tag Aware Check tag data for every received packet Tag-aware - set to activate Tag-based mode Tag-ignore - set to use port-based mode and ignore any tag in packet Keep Tag Tag is removed from the received packet if exists Enable - set to activate tag removal for VLAN-tagged packets Disable - set to disable tag removal function Drop Untag...
Page 42
[Apply] Click to apply the configuration change [Refresh] Click to refresh current configuration Note: 1. Priority-tagged packet (VID=0) is treated as untagged packet in the switch. 2. [Tag Aware] setting affects the index used for VLAN classification (VLAN table lookup). The following table lists the index used: Ingress [Tag Aware] setting Received packet type...
Page 44
Configuration Description Port Port number Insert Tag Activate tagging (Insert a tag to the packet) Enable - set to activate tagging Disable - set to disable tagging function Untagging Specific VID No tag insertion if packet tag information matches [Untagged VID] Enable - set to enable this function Disable - set to disable this function Untagged VID...
4.6.3.4 VLAN Groups Configuration Description Group Group number VID of the VLAN to which this group is associated 1 ~ 4095 - decimal 12-bit VID value Member Ports Select the admitted egress ports for the packets belong to the VLAN Port 1 ~ 8 - click to select Source Port Check Check whether the ingress port is the member port of the VLAN...
4.6.4 Important Notes for VLAN Configuration Some considerations should be checked in configuring VLAN settings: 1. Switch VLAN Mode selection It is suggested to evaluate your VLAN application first and plan your VLAN configuration carefully before applying it. Any incorrect setting might cause network problem. 2.
4.7 LACP Configuration Description Port Port number Protocol Enabled Enable LACP support for the port Key Value An integer value assigned to the port that determines which ports are aggregated into an LACP link aggregate. Set same value to the ports in same LACP link aggregate.
4.8 RSTP Configuration Description System Priority The lower the bridge priority is the higher priority it has. Usually, the bridge with the highest bridge priority is the root. Value: 0 ~ 61440 Hello Time Hello Time is used to determine the periodic time to send normal BPDU from designated ports among bridges.
Page 49
Force Version Two options are offered for choosing STP algorithm. Compatible - STP (IEEE 802.1D) Normal - RSTP (IEEE 802.1w) Aggregations Enabled to support port trunking in STP. It means a link aggregate is treated as a physical port in RSTP/STP operation. Port Protocol Enabled Port is enabled to support RSTP/STP.
4.9 802.1X Configuration Configuration Description Mode Disabled - disable 802.1X function Enabled - enable 802.1X function RADIUS IP IP address of the Radius server RADIUS UDP Port The UDP port for authentication requests to the specified Radius server RADIUS Secret The encryption key for use during authentication sessions with the Radius server.
Force Unauthorized - the port is forced to be in unauthorized state. Port State Port 802.1X state 802.1X Disabled - the port is in 802.1X disabled state Link Down - the port is in link down state Authorized (green color) - the port is in 802.1X authorized state Unauthorized (red color) - the port is in 802.1X unauthorized state [Re-authenticate] Click to perform a manual authentication for the port...
4.10 IGMP Snooping Configuration Description IGMP Enabled Check to enable global IGMP snooping. Router Ports Specify which ports have multicast router connected and require being forwarding IPMC packets unconditionally. VLAN ID List of current existing VLANs IGMP Snooping Enabled Check to enable IGMP snooping on the associated VLAN. IGMP Querying Enabled Check to enable IGMP querying on the associated VLAN.
4.11 Mirroring Configuration Description Mirror Port The port is forwarded all packets received on the mirrored ports Mirror Source Select the ports which will be mirrored all received packets to the mirror port. [Apply] Click to apply the configuration change [Refresh] Click to refresh current configuration -53-...
4.12 Quality of Service QoS Configuration Description Port Port number 802.1p 802.1p priority classification Enable - set to enable this classification to the port for priority-tagged and VLAN-tagged packets Disable - 802.1p classification is not applied to the port DSCP DSCP classification Enable - set to enable DSCP classification to the port for IP packets Disable - DSCP classification is not applied to the port...
[802.1p Mapping] Click to configure 802.1p mapping tables. [DSCP Mapping] Click to configure DSCP mapping table. [Service Policy] Click to configure per port egress service policy mode. [Apply] Click to apply the configuration change [Refresh] Click to refresh current configuration Note: 802.1p classification is superior over DSCP classification if both are enabled.
[Refresh] Click to refresh current configuration [Back] Click to go back to upper menu Every ingress port has its own 802.1p mapping table. The table is referred in 802.1p priority classification for the received packet. 4.12.2 DSCP Mapping Configuration Description DSCP [0-63] Seven user-defined DSCP values which are configured with a priority class 0 ~ 63 - 6-bit DSCP value in decimal...
[Refresh] Click to refresh current configuration [Back] Click to go back to upper menu Only one DSCP mapping table is configured and applied to all ports. The table is referred in DSCP priority classification. 4.12.3 QoS Service Policy -57-...
Page 58
Configuration Description Port Port number Policy Service policy for egress priority among four egress class queues Strict priority - high class queue is served first always till it is empty Weighted ratio priority Class 3:2:1:0 = 4:3:2:1 - weighted ratio 4:3:2:1 Weighted ratio priority Class 3:2:1:0 = 5:3:1:1 - weighted ratio 5:3:1:1 Weighted ratio priority Class 3:2:1:0 = 1:1:1:1 - weighted ratio 1:1:1:1 [Apply]...
4.13 Storm Control Configuration Description Broadcast Rate The rate limit of the broadcast packets transmitted on a port. Broadcast Rate The rate limit of the Multicast packets transmitted on a port. Flooded Unicast Rate The rate limit of the flooded unicast packets transmitted on a port. The flooded unicast packets are those unicast packets whose destination address is not learned in the MAC address table.
4.14 Statistics Overview Statistics Description Port Port number Tx Bytes Total of bytes transmitted on the port Tx Frames Total of packet frames transmitted on the port Rx Bytes Total of bytes received on the port Rx Frames Total of packet frames received on the port Tx Errors Total of error packet frames transmitted on the port Rx Errors...
4.15 Detailed Statistics Button Description [Port #] Click to display the detailed statistics of Port #. [Clear] Click to reset all statistic counters [Refresh] Click to refresh the displayed statistic counters -61-...
4.16 LACP Status Status Description Port The port number Normal Display the ports not LACP enabled. Group # The LACP group Status The LACP port status presented with color and a number <Down> - the port is link down <Blocked & #> - the port is blocked by RSTP and the # is the port number of LACP link partner <Learning>...
Page 63
Note: the figure shows an example that two LACP link aggregates are configured. Status Description Port The port number Protocol Active yes - the port is link up and in LACP operation no - the port is link down or not in LACP operation Partner Port Number The port number of the remote link partner Operation Port Key...
4.17 RSTP Status Status Description VLAN Id The VLAN where a spanning tree network exists Bridge ID The Bridge ID of this Bridge instance. Hello Time Hello Time is used to determine the periodic time to send normal BPDU from designated ports among bridges.
Page 65
based on the port link speed. The default costs are : Link Speed Auto Default Cost 10Mbps 2000000 100Mbps 200000 1000Mbps 20000 Edge Port An Edge Port is a port connected to a device that knows nothing about STP or RSTP. Usually, the connected device is an end station.
4.18 IGMP Status Status Description VLAN ID The VLAN ID of the entry. Querier Status Show the Querier status is "Active" or "Idle". Queries transmitted The number of Transmitted Queries. Queries Received The number of Received Queries. V1 Reports The number of Received V1 Reports. V2 Reports The number of Received V2 Reports.
4.19 Ping Ping Description Target IP Address The target IP address to which the ping command issues Count The number of ping commands generated Time Out (in secs) The time out for a reply (in seconds) [Apply] Start the ping command Status The command status Received replies...
your current http connection lost. You must rebuild the connection to perform any management operation to the unit. 4.21 Factory Default This menu is used to restore all settings of the switch unit with factory default values except current IP configuration and Management VLAN configuration.
4.23 Configuration File Transfer Operation Description Configuration file File name [Browse] Click to locate a configuration file. [Upload] Click to start upload for the specified configuration file. [Download] Click to save current configuration as the specified configuration file. 4.24 Logout This command is used to force a logout immediately from the switch management and pop-up a login page.
Appendix. Factory Default Settings System Configuration DHCP Enabled Not select (disabled) Fallback IP Address 192.168.0.2 Fallback IP Subnet mask 255.255.255.0 Fallback Gateway IP 192.168.0.1 Management VLAN - VID Management VLAN - CFI Management VLAN - User priority Name Null Inactivity Timeout 300 seconds Password SNMP enabled...
Page 72
Joint Port Port 8 Advanced VLAN Mode Settings Ingress Default Tag - PVID 1 for all ports Ingress Default Tag - CFI 0 for all ports Ingress Default Tag - User Priority 0 for all ports Ingress Setting - Tag Aware Tag-ignore for all ports Ingress Setting - Keep Tag Enable for all ports...
Page 73
VLAN Group 7 - Member Ports None VLAN Group 7 - Source Port Check Disable VLAN Group 8 - VID VLAN Group 8 - Member Ports None VLAN Group 8 - Source Port Check Disable LACP Port Configuration Protocol Enabled Not select (disabled) for all ports Key Value Auto for all ports...
Page 74
EAP Timeout Port 1~Port 8 - tag 1 Class 0 Port 1~Port 8 - tag 2 Class 1 Port 1~Port 8 - tag 3 Class 1 Port 1~Port 8 - tag 4 Class 2 Port 1~Port 8 - tag 5 Class 2 Port 1~Port 8 - tag 6 Class 3...
Page 75
Port 1~Port 8 - tag 5 Class 2 Port 1~Port 8 - tag 6 Class 3 Port 1~Port 8 - tag 7 Class 3 QoS DSCP Mapping DSCP 1 / Priority 0, Class 0 DSCP 2 / Priority 0, Class 0 DSCP 3 / Priority 0, Class 0 DSCP 4 / Priority...
Need help?
Do you have a question about the KGS-810F and is the answer not in the manual?
Questions and answers