Hirschmann Power MICE Reference Manual
  1. Manuals
  2. Brands
  3. Hirschmann Manuals
  4. Network Router
  5. Power MICE
  6. Reference manual

Hirschmann Power MICE Reference Manual

Web-based interface industrial ethernet (gigabit) switch
Hide thumbs Also See for Power MICE:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Programming Manual, User Manual

Reference Manual

Web-based Interface
Industrial ETHERNET (Gigabit) Switch
Power MICE, MACH 4000
RM Web L3P
Technical Support
Release 4.1 03/08
HAC-Support@hirschmann.de

Advertisement

Table of Contents
loading

Related Manuals for Hirschmann Power MICE

Summary of Contents for Hirschmann Power MICE

  • Page 1: Reference Manual

    Reference Manual Web-based Interface Industrial ETHERNET (Gigabit) Switch Power MICE, MACH 4000 RM Web L3P Technical Support Release 4.1 03/08 HAC-Support@hirschmann.de...
  • Page 2 This publication has been created by Hirschmann Automation and Control GmbH according to the best of our knowledge. Hirschmann reserves the right to change the con- tents of this manual without prior notice. Hirschmann can give no guarantee in respect of the correctness or accuracy of the details in this publication.

  • Page 3: Table Of Contents

    Content Content About this Manual Opening the Web-based Interface Basic Settings System Network Software 2.3.1 Update via file selection 2.3.2 tftp update Port Configuration Power over ETHERNET Load/Save 2.6.1 Loading the configuration 2.6.2 Saving the configuration 2.6.3 URL 2.6.4 Deleting a configuration 2.6.5 Using the AutoConfiguration Adapter (ACA) 2.6.6 Canceling a configuration change Restart...
  • Page 4 Content 802.1x port authentication 3.5.1 Preparing the device for the 802.1X port authentication 52 3.5.2 Configuration table 3.5.3 Statistics table 3.5.4 Radius server Time Interaction of PTP and SNTP SNTP configuration PTP configuration 4.3.1 PTP Global 4.3.2 PTP port Switching Switching Global Filters for MAC addresses Rate Limiter...
  • Page 5 Content QoS/Priority Global Port configuration 6.2.1 Entering the port priority 6.2.2 Selecting the trust mode 6.2.3 Displaying the untrusted traffic class 6.2.4 Shaping rate 802.1D/p Mapping IP DSCP mapping Queue Management 6.5.1 Strict Priority 6.5.2 Weighted Fair Queuing 6.5.3 Maximum bandwidth Routing Global Configuring Router Interfaces...
  • Page 6 Content Tracking 7.7.1 Configuration 7.7.2 Applications Redundancy Link aggregation 8.1.1 Configuring the link aggregation 8.1.2 HIPER ring and link aggregation HIPER-Ring 8.2.1 Configuring HIPER-Ring Version 1 8.2.2 Configuring HIPER-Ring Version 2 (MRP Draft) Redundant coupling 8.3.1 Configuring the redundant coupling Rapid Spanning Tree 8.4.1 Configuring the Rapid Spanning Tree VRRP/HiVRRP...
  • Page 7 Content Alarms (Traps) Report IP address conflict detection 9.10 Self-test Advanced 10.1 DHCP Relay Agent 10.2 DHCP Server 10.3 Industry Protocols 10.3.1PROFINET IO 10.3.2EtherNet/IP 10.4 Command Line Technical Data Reader´s comments Index Further support RM Web L3P Release 4.1 03/08...
  • Page 8 Content RM Web L3P Release 4.1 03/08...

  • Page 9: About This Manual

    About this Manual About this Manual The "Web-based Interface" reference manual contains detailed information on using the Web interface to operate the individual functions of the device. The "Command Line Interface" reference manual contains detailed informa- tion on using the Command Line Interface to operate the individual functions of the device.
  • Page 10 About this Manual The Network Management Software HiVision provides you with additional options for smooth configuration and monitoring: Event logbook. Configuration of „System Location“ and „System Name“. Configuration of the network address range and SNMP parameters. Saving the configuration on the device. Simultaneous configuration of multiple devices.

  • Page 11: Key

    The designations used in this manual have the following meanings: List Work step Subheading Link Indicates a cross-reference with a stored link Note: A note emphasizes an important fact or draws your attention to a dependency. ASCII representation in user interface Courier Symbols used: Router with firewall...
  • Page 12 A random computer Configuration Computer Server PLC - Programmable logic controller I/O - Robot RM Web L3P Release 4.1 03/08...

  • Page 13: Opening The Web-Based Interface

    Opening the Web-based Interface 1 Opening the Web-based Inter- face To open the Web-based interface, you will need a Web browser (a program that can read hypertext), for example Mozilla Firefox version 1 or later, or Microsoft Internet Explorer version 6 or later. Note: The Web-based interface uses the “Java™...
  • Page 14 Opening the Web-based Interface Establish the connection by entering the IP address of the device which you want to administer via the Web-based management in the address field of the Web browser. Enter the address in the following form: http://xxx.xxx.xxx.xxx The login window appears on the screen.
  • Page 15 Opening the Web-based Interface Note: The changes you make in the dialogs are copied to the device when you click on “Write”. Click on “Load” to update the display. Note: You can block your access to the device by entering an incorrect con- figuration.
  • Page 16 Opening the Web-based Interface The menu section displays the menu items. By placing the mouse pointer in the menu section and clicking the right mouse button you can use “Back” to return to a menu item you have already selected, or “Forward” to jump to a menu item you have already selected.

  • Page 17: Basic Settings

    Basic Settings 2 Basic Settings The basic settings menu contains the dialogs, displays and tables for basic settings configuration: System Network Software Port configuration Power over Ethernet Load/Save Restart RM Web L3P Release 4.1 03/08...

  • Page 18: System

    Basic Settings 2.1 System 2.1 System The "System submenu in the basic settings menu is structured as follows: Device status System data Device view Reloading data Figure 4: "System" submenu Device status This section of the website provides information on the device status and the alarm state of the device.

  • Page 19: System Data

    Basic Settings 2.1 System Time of the oldest existing alarm Cause of the oldest existing alarm Symbol indicates the Device Status Figure 5: Device status and alarm display System data This area of the website displays the system parameters of the device. Here you can change, –...

  • Page 20: Device View

    Basic Settings 2.1 System Module present Empty slot Module was removed. Click this check mark to define this slot as an empty slot. Figure 6: Availability of the media modules Device view The device view shows the device with the current configuration. The symbols underneath the device view represent the status of the individual ports.
  • Page 21 Basic Settings 2.1 System Meaning of the symbols: The port (10, 100 Mbit/s, 1, 10 Gbit/s) is enabled and the connection is OK. The port is disabled by the management and it has a connection. The port is disabled by the management and it has no connection.

  • Page 22: Network

    Basic Settings 2.2 Network 2.2 Network With the Basics:Network dialog you define the source from which the device gets its IP parameters after starting, and you assign the IP parameters and VLAN ID and configure the HiDiscovery access. Figure 9: Network parameters dialog Under "Mode", enter where the device is to obtain its IP parameters: In the BOOTP mode, the configuration is via a BOOTP or DHCP serv- er on the basis of the MAC address of the device...
  • Page 23 Basic Settings 2.2 Network You enter the name applicable to the DHCP protocol in the "Name" line in the system dialog of the Web-based interface. The "VLAN ID" frame enables you to assign a VLAN to the agent. If you enter the illegal VLAN ID "0"...

  • Page 24: Software

    Basic Settings 2.3 Software 2.3 Software The software dialog enables you to carry out a software update of the device via tftp or file selection. Figure 10: Software dialog 2.3.1 Update via file selection For an update via a file selection window, the device software must be on a drive that you can access via your PC.

  • Page 25: Tftp Update

    Basic Settings 2.3 Software Click on "Update" to transfer the software to the device. The end of the update is indicated by one of the following messages: Update completed successfully. Update failed. Reason: incorrect file. Update failed. Reason: error when saving. After loading successfully, activate the new software: Select the dialog Basic Settings:Restart and perform a cold start.

  • Page 26: Port Configuration

    – 1000 Mbit/s full duplex (FDX). The “Link/Current operating mode” column displays the current operating mode and thereby also an existing connection. Power MICE: In the “Cable-Crossing” column, you assign the connections of a TP port. The possible settings are: –...
  • Page 27 Basic Settings 2.4 Port Configuration Note: If you have set up VLANs, pay attention to the “Transparent mode” under „Setting up the VLAN“ page 84“. Note: The active automatic configuration has priority over the manual configuration. Note: For configuring link aggregation, see „Link aggregation“...
  • Page 28 Basic Settings 2.4 Port Configuration Figure 11: Port configuration table dialog RM Web L3P Release 4.1 03/08...

  • Page 29: Power Over Ethernet

    On delivery, the Power over ETHERNET function is activated globally and on all ports. System power for MS20/30 and Power MICE: The device provides the nominal system power for the sum of all PoE ports plus a surplus. Because the PoE media module gets its operating voltage externally, the device does not know the possible system power.
  • Page 30 Basic Settings 2.5 Power over ETHERNET The difference between the "nominal" and "reserved" power indicates how much power is still available to the free PoE ports. In the “Port on” column, you can enable/disable PoE at this port. The “Status” column indicates the PoE status of the port. In the “Priority”...

  • Page 31: Load/Save

    Basic Settings 2.6 Load/Save 2.6 Load/Save With this dialog you can: load a configuration, save a configuration, enter a URL, restore the delivery configuration, use the ACA for configuring, cancel a configuration change. Figure 13: Load/store dialog RM Web L3P Release 4.1 03/08...

  • Page 32: Loading The Configuration

    Basic Settings 2.6 Load/Save 2.6.1 Loading the configuration In the "Load" frame, you have the option to load a configuration saved on the device, load a configuration stored under the specified URL, load a configuration stored on the specified URL and save it on the device, load a configuration stored on the PC as an editable and readable script or in binary form.

  • Page 33: Url

    Basic Settings 2.6 Load/Save If you change the current configuration (for example, by switching a port off), the load/save symbol in the menu area changes from a disk symbol into a yellow triangle. After saving the configuration, the load/save symbol changes back into the disk symbol.

  • Page 34: Using The Autoconfiguration Adapter (Aca)

    Basic Settings 2.6 Load/Save 2.6.5 Using the AutoConfiguration Adapter (ACA) The ACAs are devices for saving the configuration data of a device. In the case of a device failure, an ACA enables the configuration data to be trans- ferred easily by means of a substitute device of the same type. Note: If you replace a device with DIP switches, please ensure that the DIP switch settings are identical.

  • Page 35: Canceling A Configuration Change

    Basic Settings 2.6 Load/Save Status Meaning notPresent No ACA present. The configuration data from the ACA and the device are consistent. removed The ACA has been removed after booting. notInSync The configuration data from the ACA and the device are not consistent. outOfMemory The local configuration data is too extensive to be stored on the ACA.
  • Page 36 Basic Settings 2.6 Load/Save Watchdog IP address "Watchdog IP address" shows you the IP address of the PC from which you have activated the (watchdog) function. The device monitors the link to the PC with this IP address, checking for interruptions. RM Web L3P Release 4.1 03/08...

  • Page 37: Restart

    Basic Settings 2.7 Restart 2.7 Restart With this dialog you can: Cold start the device. In a cold start, the device reloads the software from the non-volatile memory, restarts, and performs a self-test. Warm start the device. In this case the device checks the software in the volatile memory and restarts.
  • Page 38 Basic Settings 2.7 Restart Figure 14: Restart dialog RM Web L3P Release 4.1 03/08...

  • Page 39: Security

    Security 3 Security The security menu contains the dialogs, displays and tables for configuring the security settings: Password SNMPv1/v2 access Telnet/Web/SSH access Port security 802.1x port authentication RM Web L3P Release 4.1 03/08...

  • Page 40: Password / Snmp

    Security 3.1 Password / SNMP 3.1 Password / SNMP This dialog gives you the option of changing the read and read/write pass- words for access to the device via the Web-based interface/CLI/SNMP. Please note that passwords are case-sensitive. For security reasons, the read password and the read/write password must not be identical.
  • Page 41 Security 3.1 Password / SNMP Important: If you do not know a password with read/write access, you will not have write access to the device! Note: After changing the password for write access, restart the Web interface in order to access the device. Note: For security reasons, the passwords are not displayed.

  • Page 42: Snmpv1/V2 Access Setting

    Security 3.2 SNMPv1/v2 Access Setting 3.2 SNMPv1/v2 Access Setting With this dialog you can select access via SNMPv1 or SNMPv2. In the state on delivery, both protocols are activated. You can thus manage the device with HiVision and communicate with earlier versions of SNMP. Note: You need read-write access for this dialog.
  • Page 43 Security 3.2 SNMPv1/v2 Access Setting Binary notation of the mask 255.255.255.240: 1111 1111 1111 1111 1111 1111 1111 0000 mask bits Binary notation of the IP address 172.168.23.20: 1010 1100 1010 1000 0001 0111 0001 0100 The binary representation of the mask with the IP address yields an address range of: 1010 1100 1010 1000 0001 0111 0001 0000 bis...
  • Page 44 Security 3.2 SNMPv1/v2 Access Setting Figure 16: SNMPv1/v2 access dialog RM Web L3P Release 4.1 03/08...

  • Page 45: Telnet/Web/Ssh Access

    Security 3.3 Telnet/Web/SSH Access 3.3 Telnet/Web/SSH Access This dialog allows you to switch off the Telnet server, the Web server and the SSH server on the device. Figure 17: Telnet/Web/SSH access dialog 3.3.1 Description of Telnet access The Telnet server of the device allows you to configure the device by using the Command Line Interface (in-band).

  • Page 46: Description Of Web Access

    Security 3.3 Telnet/Web/SSH Access Note: The Command Line Interface (out-of-band) and the Security:Tel- net/Web access dialog in the Web-based interface allow you to reactivate the Telnet server. 3.3.2 Description of Web access The Web server of the device allows you to configure the device by using the Web-based interface.
  • Page 47 Security 3.3 Telnet/Web/SSH Access Note: The Command Line Interface (out-of-band) and the Security:Tel- net/Web access dialog in the Web-based interface allow you to reactivate the SSH server. Note: To be able to access the device via SSH, you require a key that has to be installed on the device (see the "Basic Configuration"...

  • Page 48: Port Security

    Security 3.4 Port Security 3.4 Port Security In this dialog you can specify for each port from which terminal devices data can be received and sent to other ports. This function protects the network from unauthorized access. First select whether you want MAC-based or IP-based port security. If you have selected MAC-based security, you enter the MAC addresses of the devices with which a data exchange at this port is permitted in the "Allowed Mac Address"...
  • Page 49 Security 3.4 Port Security The port is switched off if "portDisable" is selected under "Action" and an unauthorized address at- tempts to access the port. In the "Action" column you select whether an unauthorized access at- tempt should be followed by no action (none) or the sending of an alarm (trap) (trapOnly) or the disabling of the port by the corresponding entry in the port config-...
  • Page 50 Security 3.4 Port Security Figure 18: Port Security dialog Note: Since the device is a layer 2 device, it translates the IP addresses en- tered into MAC addresses. For this, exactly one IP address must be assigned to a MAC address. Please keep in mind that when using a router, for example, several IP ad- dresses can be assigned to one MAC address, namely that of the router.

  • Page 51: Port Authentication

    Security 3.5 802.1x port authentication 3.5 802.1x port authentication The Global dialog gives you the option of switching port authentication on or off. With "Function" you enable or disable the function. With "Radius Request Retransmissions” you specify, how often the device retransmits an unanswered request to the radius server before the device transmits the request to another radius server.

  • Page 52: Preparing The Device For The 802.1X Port Authentication

    Security 3.5 802.1x port authentication 3.5.1 Preparing the device for the 802.1X port authentication Configure your own IP parameters (for the device). Globally enable the 802.1X port authentication function. Set the 802.1X port control to "auto". The default setting is "force-autho- rized".
  • Page 53 Security 3.5 802.1x port authentication Entries in the configuration table Variable Meaning Possible values State on delivery Port For resetting the initialization true, false false Initializa- function. Setting this attribute to tion "true" causes the device to re- set this function. When the re- setting process is concluded, the value is reset to "false".
  • Page 54 Security 3.5 802.1x port authentication Variable Meaning Possible values State on delivery Idle Period Period in seconds in which the 0-65535 authentication process does not expect authentication from the supplicants. Transmit Wait period before the device 1-65535 Period sends an EAP packet again. Supplicant Excess time in seconds for the 1-65535...

  • Page 55: Statistics Table

    Security 3.5 802.1x port authentication 3.5.3 Statistics table Figure 21: Statistics table RM Web L3P Release 4.1 03/08...
  • Page 56 Security 3.5 802.1x port authentication Variable Meaning EAPOL received Number of EAPOL frames (both valid and invalid) of any type that frames have been received at this port. EAPOL transmitted Number of EAPOL frames of any type that have been received at this frames port.

  • Page 57: Radius Server

    Security 3.5 802.1x port authentication 3.5.4 Radius server Figure 22: RADIUS server dialog This dialog allows you to enter the data for one, two or three RADIUS serv- ers. Click on "Create entry" to open the dialog window for entering the IP address of a RADIUS server.
  • Page 58 Security 3.5 802.1x port authentication "Selected server" shows which server the device actually sends its queries to. With "Delete entry" you delete the selected row in the table. RM Web L3P Release 4.1 03/08...

  • Page 59: Time

    Time 4 Time With this dialog you can enter time-related settings independently of the time synchronization protocol selected. The "IEEE 1588 time" displays the time determined using PTP. The "SNTP time" displays the time with reference to Universal Time Co- ordinated (UTC).

  • Page 60: Interaction Of Ptp And Sntp

    Time 4.1 Interaction of PTP and SNTP 4.1 Interaction of PTP and SNTP According to PTP and SNTP, both protocols can exist in parallel in the same network. However, since both protocols affect the system time of the device, situations may occur in which the two protocols compete with each other. Note: There may be a maximum of one device with an enabled PTP function and enabled SNTP function in an SNTP cascade.

  • Page 61: Sntp Configuration

    Time 4.2 SNTP configuration 4.2 SNTP configuration The Simple Network Time Protocol (SNTP) enables you to synchronize the system time in your network. The device supports the SNTP Server and SNTP Client functions. The SNTP server makes the UTC (Universal Time Coordinated) available. UTC is the time relating to the coordinated world time measurement.
  • Page 62 Time 4.2 SNTP configuration IP destination Send SNTP packets address periodically to 0.0.0.0 Nobody Unicast Unicast 224.0.1.1 Multicast 255.255.255.255 Broadcast Table 6: Periodic sending of SNTP packets In "VLAN ID" you specify the VLAN to which the device may periodically send SNTP packages.
  • Page 63 Time 4.2 SNTP configuration With "Disable client after successful synchronization" you disable fur- ther time synchronizations once the device has synchronized its time with the server. Note: For the most accurate system time distribution possible, avoid having network components (routers,switches, hubs) which do not support SNTP in the signal path between the SNTP server and the SNTP client.

  • Page 64: Ptp Configuration

    Time 4.3 PTP configuration 4.3 PTP configuration Precise time management is required for running time-critical applications via a LAN. The IEEE 1588 standard with the Precision Time Protocol (PTP) describes a procedure that assumes one clock is the most accurate and thus enables precise synchronization of all clocks in an LAN.
  • Page 65 Time 4.3 PTP configuration SyncUpperBound: Top PTP synchronization threshold value, specified in nanoseconds. If the sum of (reference time - local time) is greater than the value of the top PTP synchronization threshold, then the local clock is deemed as not being synchronous with the reference clock. Subdomain Name: Name of the PTP subdomain to which the local clock belongs.

  • Page 66: Ptp Port

    Time 4.3 PTP configuration Figure 25: PTP-Global (with MS 20/30 and PowerMICE) 4.3.2 PTP port This dialog – Allows you to make port-related PTP settings and – Displays port-related PTP statuses. PTP enable enable: Port sends/receives PTP synchronization messages, disable: Port blocks PTP synchronization messages. PTP Port Burst enable enable: 2 to 8 synchronization runs take place during the synchroniza- tion interval.
  • Page 67 Time 4.3 PTP configuration PTP Status initializing: Port is in the initialization phase. faulty: Port fault. Error in the PTP protocol. disabled: PTP function is switched off at this port. listening: Port has not received any information and is waiting for synchronization messages.
  • Page 68 Time 4.3 PTP configuration RM Web L3P Release 4.1 03/08...

  • Page 69: Switching

    Switching 5 Switching The switching menu contains the dialogs, displays and tables for configuring the security settings: Switching Global Filters for MAC addresses Rate Limiter Multicasts VLAN RM Web L3P Release 4.1 03/08...

  • Page 70: Switching Global

    Switching 5.1 Switching Global 5.1 Switching Global This dialog is used to display the MAC address of the device enter the aging time for all dynamic entries in the range from 10 to 630 s (unit: 1 s; default setting: 30 s). In connection with the router redundancy (see MACH 3000), select a time greater than/equal to 30 seconds.

  • Page 71: Filters For Mac Addresses

    Switching 5.2 Filters for MAC addresses 5.2 Filters for MAC addresses The filter table for MAC addresses is used to display and edit filters. Each row represents one filter. Filters specify the way in which data packets are sent. They are set automatically by the device (learned status) or manually. Data packets whose destination address is entered in the table are sent from the receiving port to the ports marked in the table.
  • Page 72 Switching 5.2 Filters for MAC addresses Figure 28: Filter table dialog Note: This filter table allows you to create up to 100 filters for Multicast addresses. RM Web L3P Release 4.1 03/08...

  • Page 73: Rate Limiter

    Switching 5.3 Rate Limiter 5.3 Rate Limiter To ensure reliable data exchange during heavy traffic, the device can limit the traffic. Entering a limit rate for each port specifies the amount of traffic the device is permitted to transmit and receive. If the data load transmitted at this port exceeds the maximum load entered, the device will discard the excess data at this port.

  • Page 74: Rate Limiter Settings

    Switching 5.3 Rate Limiter 5.3.1 Rate Limiter settings "Ingress Limiter (kbit/s)" allows you to enable or disable the ingress limiter function for all ports and to select the ingress limitation on all ports (either broadcast packets only or broadcast packets and Multicast packets). "Egress Limiter (Pkt/s)"...

  • Page 75: Multicasts

    Switching 5.4 Multicasts 5.4 Multicasts The Internet Group Management Protocol (IGMP) describes the distribution of Multicast information between routers and terminal devices on Layer 3. Routers with an active IGMP function periodically send queries () to find out which IP Multicast group members are connected to the LAN. Multicast group members reply with a Report message.
  • Page 76 Switching 5.4 Multicasts Switches know that they have to send this Multicast address to this Switch. The GMRP enables packets with a Multicast address in the destination ad- dress field to be sent to the ports entered. The other ports are not affected by these packets.

  • Page 77: Global Settings

    Switching 5.4 Multicasts 5.4.1 Global settings "IGMP Snooping" allows you to enable IGMP Snooping globally for the entire device. If IGMP Snooping is disabled, then the device does not evaluate Query and Report packets received, and it sends (floods) received data packets with a Multicast address as the destination address to all ports.

  • Page 78: Igmp Settings

    Switching 5.4 Multicasts 5.4.3 IGMP settings “Current querier IP address” shows you the IP address of the router that has the query function. In “Response Time” you specify the period within which the Multicast group members respond to a query (valid values: 1-3598 s, default setting: 10 s). The Multicast group members select a random value within the response time for their response, to prevent all the Multicast group members respond- ing to the query at the same time.

  • Page 79: Known Multicasts

    Switching 5.4 Multicasts Note: The way in which unlearned Multicast addresses are handled also applies to the reserved addresses from the "Local Network Control Block" (224.0.0.0 - 224.0.0.255). This can have an effect on higher-level rout- ing protocols. 5.4.5 Known Multicasts In this frame you can determine how the device in IGMP mode sends packets with known MAC/IP Multicast addresses that were learned through IGMP Snooping.
  • Page 80 IGMP queries (disable = default setting). This column allows you to also send IGMP report messages to other selected ports (enable) or to connected Hirschmann devices (automatic). Learned Query Port This table column shows you at which ports the device has received IGMP queries, if "disable"...
  • Page 81 Switching 5.4 Multicasts enabling IGMP on the ring ports and globally, and enabling "IGMP Forward All" per port on the ring ports enabling GMRP on the ring ports and globally, and enabling "Forward all groups" on the ring ports. RM Web L3P Release 4.1 03/08...

  • Page 82: Vlan

    Note: In a HIPER-Ring with VLANs, you should only operate devices with the software that supports this function: RS2 xx/xx (from vers. 7.00), RS2-16M, RS 20, RS 30, RS 40 (L2E, L2P) MICE (from rel. 3.0) or Power MICE MS 20, MS 30 RSR20, RSR30 MACH 1000 MACH 4000 RM Web L3P...
  • Page 83 Switching 5.5 VLAN MACH 3000 (from rel. 3.3) OCTOPUS Note: In the HIPER-Ring configuration, select for the ring ports VLAN ID 1 and "Ingress Filtering" in the port table and VLAN membership U in the static VLAN table. Note: In the Network/Ring Coupling configuration, select for the coupling and partner coupling ports VLAN ID 1 and "Ingress Filtering"...

  • Page 84: Setting Up The Vlan

    Switching 5.5 VLAN 5.5.1 Setting up the VLAN You will find an example configuration in the Basic Configuration user man- ual. To set up VLANs, you first create the desired VLANs in the VLAN static table: Figure 31: VLAN Static table After clicking "Create entry", you enter the corresponding VLAN ID.
  • Page 85 Switching 5.5 VLAN After creating the VLANs, you specify the rules for received data in the port table (Port): Figure 32: VLAN Port table Port VLAN ID specifies to which VLAN a received untagged data pack- et is assigned. Acceptable Frame Types specifies whether data packets without a tag may also be received.
  • Page 86 IEEE802.1D/p but that do not require any VLANs in accordance with IEEE802.1Q. Note: For Power MICE and MACH 4000 in "transparent mode", the devices ignore the VLAN tags and the tag priority when they receive data. Set the VLAN membership of the ports of all VLANs to "untagged".
  • Page 87 Switching 5.5 VLAN destination port if the receiving port is also a member of the VLAN group of the destination port. Application area: In the case of overlapping VLANs, the device can dis- tribute directly across VLANs, as long as the ports involved belong to one group of VLANs.

  • Page 88: Displaying The Vlan Configuration

    Switching 5.5 VLAN 5.5.2 Displaying the VLAN configuration The Current table shows all the configured VLANs and the VLANs config- ured with GVRP. Status: Other: This entry only appears for VLAN 1. VLAN 1 is specified by the sys- tem and always exists. Permanent: This entry is permanent and is kept after the next reset of the device.

  • Page 89: Deleting Vlan Settings

    Switching 5.5 VLAN 5.5.3 Deleting VLAN settings The "Delete" button in the VLAN Global dialog allows you to reset all the VLAN settings of the device to the state on delivery. The "Delete" button in the VLAN Static dialog allows you to delete a row se- lected in the table.
  • Page 90 Switching 5.5 VLAN RM Web L3P Release 4.1 03/08...

  • Page 91: Qos/Priority

    QoS/Priority 6 QoS/Priority The device enables you to set how it evaluates the QoS/prioritizing information of incoming data packets: VLAN priority based on IEEE 802.1Q/ 802.1D (Layer 2) Type of Service (ToS) or DiffServ (DSCP) for IP packets (Layer 3) which QoS/prioritizing information it writes to outgoing data packets (e.g.

  • Page 92: Global

    QoS/Priority 6.1 Global 6.1 Global With this dialog you can: enter the VLAN priority for management packets in the range 0 to 7 (default setting: 0). In order for you to have full access to the management of the device, even when there is a high network load, the device enables you to prioritize management packets.
  • Page 93 QoS/Priority 6.1 Global Figure 35: Global dialog RM Web L3P Release 4.1 03/08...

  • Page 94: Port Configuration

    QoS/Priority 6.2 Port configuration 6.2 Port configuration This dialog allows you to configure the ports. You can: assign a port priority to a port, select the trust mode for a port, display the untrusted traffic class, assign a shaping rate to a port. Parameter Meaning Module...

  • Page 95: Entering The Port Priority

    QoS/Priority 6.2 Port configuration Figure 36: Port configuration dialog 6.2.1 Entering the port priority Double-click on a cell in the "Port priority" column and enter the priority (0-7). According to the priority entered, the device assigns the data packets that it receives at this port to a traffic class (see table Requirement:...

  • Page 96: Selecting The Trust Mode

    QoS/Priority 6.2 Port configuration Port Traffic class (de- IEEE 802.1D traffic type priority fault setting) Best effort (default) Background Standard Excellent effort (business critical) Controlled load (streaming multimedia) Video, less than 100 milliseconds of latency and jitter Voice, less than 10 milliseconds of latency and jitter Network control reserved traffic Table 8: Assigning the port priority to the traffic classes 6.2.2 Selecting the trust mode...

  • Page 97: Displaying The Untrusted Traffic Class

    QoS/Priority 6.2 Port configuration In VLAN priority remarking, the device modifies the VLAN priority of the IP packets if the packets are to be sent with a VLAN tag (see on page 84 „Setting up the VLAN“). Based on the traffic class to which the IP packet was assigned (see above), the device assigns the new VLAN priority to the IP packet in accordance with table...

  • Page 98: D/P Mapping

    QoS/Priority 6.3 802.1D/p Mapping 6.3 802.1D/p Mapping The 802.1D/p mapping table allows you to assign a traffic class to every VLAN priority. Figure 37: 802.1D/p mapping table Enter the desired value from 0 to 7 in the Traffic Class field for every VLAN priority.
  • Page 99 QoS/Priority 6.3 802.1D/p Mapping VLAN Traffic class (de- IEEE 802.1D traffic type priority fault setting) Best effort (default) Background Standard Excellent effort (business critical) Controlled load (streaming multimedia) Video, less than 100 milliseconds of latency and jitter Voice, less than 10 milliseconds of latency and jitter Network control reserved traffic Table 9: Assigning the VLAN priority to the eight traffic classes Note: Network protocols and redundancy mechanisms use the highest traffic...

  • Page 100: Ip Dscp Mapping

    QoS/Priority 6.4 IP DSCP mapping 6.4 IP DSCP mapping The IP DSCP mapping table allows you to assign a traffic class to every DSCP value. Enter the desired value from 0 to 7 in the Traffic Class field for every DSCP value (0-63).
  • Page 101 QoS/Priority 6.4 IP DSCP mapping Assured Forwarding (AF): Provides a differentiated schema for handling different data traffic (RFC 2597). Default Forwarding/Best Effort: No particular prioritizing. DSCP Value DSCP Name Traffic Class (default setting) Best Effort /CS0 9,11,13,15 10,12,14 AF11,AF12,AF13 17,19,21,23 18,20,22 AF21,AF22,AF23 25,27,29,31...

  • Page 102: Queue Management

    QoS/Priority 6.5 Queue Management 6.5 Queue Management For every traffic class, the Queue Management table allows you to enable Strict Priority (= disable Weighted Fair Queuing), disable Strict Priority (= enable Weighted Fair Queuing), enter a value for the minimum bandwidth, enter a value for the maximum bandwidth.

  • Page 103: Strict Priority

    QoS/Priority 6.5 Queue Management 6.5.1 Strict Priority With the Strict Priority setting, the device first transmits all data packets that have a higher traffic class before transmitting a data packet with the next highest traffic class. The device transmits a data packet with the lowest traffic class only when there are no other data packets remaining in the queue.

  • Page 104: Maximum Bandwidth

    QoS/Priority 6.5 Queue Management 6.5.3 Maximum bandwidth By entering a maximum bandwidth you can limit the bandwidth for each traffic class to a maximum value, regardless of whether you selected "Weighted Fair Queuing" or "Strict Priority". Weighted Fair Queuing (see page 103) requires that the maximum band- width is at least as big as the minimum bandwidth.

  • Page 105: Routing

    Routing 7 Routing A router is a node for exchanging data on the layer 3 level of the ISO/OSI layer model (network layer). The Routing section contains the dialogs for configuring the routing function. RM Web L3P Release 4.1 03/08...

  • Page 106: Global

    Routing 7.1 Global 7.1 Global With this dialog you can: Switch on the routing function globally. Display the default TTL (Time To Live). TTL is a value in an IP data packet. Every router that passes on a data packet reduces this value by 1. The router that receives a data packet with the value 1 rejects the data packet and reports it to the sender, whose IP source address is contained in the IP packet.

  • Page 107: Configuring Router Interfaces

    Routing 7.2 Configuring Router Interfaces 7.2 Configuring Router Interfaces With these dialogs you can: Configure port-based and VLAN-based router interfaces. Assign a number of IP addresses for each router interface (multinetting). 7.2.1 Configuration This dialog allows you to configure the router interfaces. You can: Assign an IP address/network mask to a router interface.
  • Page 108 Routing 7.2 Configuring Router Interfaces Configuring the port-based router interface Double-click on a cell in the "IP Address" column and enter the IP address for this router interface. Double-click on a cell in the "Network mask" column and enter the network mask for this router interface.

  • Page 109: Configuring Secondary Addresses

    Routing 7.2 Configuring Router Interfaces Deleting a router interface Select a row and click "Delete". By doing this, – you delete the row if it is a VLAN-based entry, or – you reset the values in the row if it is a port-based entry. Note: The prerequisite for resetting the values is the prior deletion of other entries (if present) in the "Secondary Addresses"...

  • Page 110: Arp

    Routing 7.3 ARP 7.3 ARP The Address Resolution Protocol (ARP) determines the MAC address that belongs to an IP address. With this dialog you can: set parameters for the ARP, view statistical values and view the table of the ARP entries, delete the dynamic entries in the ARP table, and configure static entries.

  • Page 111: Setting Arp Parameters

    Routing 7.3 ARP 7.3.1 Setting ARP parameters Parameter Meaning Value range Default setting Aging Time With “Aging Time” you specify the time for 15-21600 s 1200 which an entry remains before being delet- ed from the table. If there is a data transfer with the device within this time period, then the time measuring begins from the start again.

  • Page 112: Arp Statistics Display

    Routing 7.3 ARP 7.3.2 ARP statistics display Parameter Meaning Total entry current count Current number of ARP entries in the ARP table Total entry peak count Highest number of ARP entries in the ARP table Static entry current count Current number of static ARP entries in the ARP table Static entry max count Maximum possible number of static ARP entries in the ARP table Table 13: ARP statistics...

  • Page 113: Editing The Arp Table

    Routing 7.3 ARP 7.3.4 Editing the ARP table Deleting dynamic entries By clicking on "Reset" you delete the dynamic entries from the ARP table. Editing static entries Using an assistant, you can add, edit and delete static entries. Click on "Wizard" to open the Wizard window. To create a new entry, enter the IP address in the format 0.0.0.0 and the MAC address in the format 00:00:00:00:00:00 for a new entry and click on "Accept".

  • Page 114: Router Discovery Configuration

    Routing 7.4 Router Discovery Configuration 7.4 Router Discovery Configura- tion ICMP Router Discovery is a procedure for locating possible routers in the net- work for data transmission. The Switch supports this procedure by transfer- ring presence messages when the function is active. Parameter Meaning Value range...

  • Page 115: Rip

    Routing 7.5 RIP 7.5 RIP The Routing Information Protocol (RIP) is a routing protocol based on the dis- tance vector algorithm. It is used for the dynamic creation of the routing table for routers. 7.5.1 Configuration With this dialog you can enter both general settings and settings for each port for the routing information protocol.
  • Page 116 Routing 7.5 RIP Update interval Maximum number of routes 1000 Table 16: Recommendation for setting the update interval. Split Horizon: Select the split horizon mode. The split horizon mode is used to avoid the count-to-infinity problem. – none: Switch off the split horizon. –...

  • Page 117: Route Distribution

    Routing 7.5 RIP Settings per port Parameter Meaning Module Module of the Switch Port Port of the module of the Switch Operation Switch the RIP function at this port on and off VLAN ID VLAN membership of the port Send Version RIP version that the Switch uses at this port to send RIP information.

  • Page 118: Statistics

    Routing 7.5 RIP Parameter Meaning Source Source from which RIP takes over routing information: – connected: The route points to a subnetwork that is connected direct- ly to the interface. – static: The route is in the static routing table. –...
  • Page 119 Routing 7.5 RIP Parameter Meaning Global Route Changes Number of route changes caused by RIP in the routing table Global Queries Number of responses sent to queries from other systems Module Module of the Switch Port Port to which this entry applies Received Bad Packets Number of received routing data packets that the Switch rejected for various reasons, such as different protocol version, unknown...

  • Page 120: Routing Table

    Routing 7.6 Routing table 7.6 Routing table The routing table contains all the routes known by the Switch. If there are a number of routes to a destination, then the Switch chooses the route with the lowest value in the Metric column. Under Routing Table, you will find the following dialogs: Current Static...

  • Page 121: Static

    Routing 7.6 Routing table Parameter Meaning Module Module of the Switch Port Router interface Network Address IP address of the destination network Network Mask Network mask for the IP address of the destination network Next Hop IP Address IP address of the next router on the path to the destination network. Type Displays the type of the entry: –...

  • Page 122: Preferences

    Routing 7.6 Routing table Parameter Meaning Destination IP address of the destination network Destination Network mask for the IP address of the destination network Mask Next Hop IP address of the next router on the path to the destination network. Preference The importance of this entry, on the basis of which this route is considered in selecting the best route.
  • Page 123 Routing 7.6 Routing table Source Meaning Default setting connected Entry for routes/interfaces connected directly to the Switch. static Entry for routes from the static routing table. ospf-intra Entry for routes from the Open Shortest Path First protocol within an area ospf-inter Entry for routes from the Open Shortest Path First protocol be- tween areas...

  • Page 124: Tracking

    Routing 7.7 Tracking 7.7 Tracking The tracking function gives you the option of monitoring certain objects, such as the availability of an interface. A special feature of this function is that it forwards an object status change to an application, e.g. VRRP, which previously registered as an interested party for this information.

  • Page 125: Applications

    Routing 7.7 Tracking Click "Set" at the bottom of the input dialog, then click "Back". The interface goes back to the Routing:Tracking:Configuration dialog and sets up the new tracking object. Changing an existing tracking object Select the Routing:Tracking:Configuration dialog. Double-click the field for the entry to be changed. Make the change and save it by clicking "Set".
  • Page 126 Routing 7.7 Tracking RM Web L3P Release 4.1 03/08...

  • Page 127: Redundancy

    Redundancy 8 Redundancy The device contains a range of redundancy functions: Link aggregation HIPER-Ring Redundant coupling of HIPER-Rings and network segments Rapid Spanning Tree Algorithm (RSTP) VRRP/HiVRRP RM Web L3P Release 4.1 03/08...

  • Page 128: Link Aggregation

    Redundancy 8.1 Link aggregation 8.1 Link aggregation Any combination of twisted pair and LWL cables can be used as the connec- tion lines of a trunk. The only requirement is that for all the connections, the transmission speed and the duplex settings of the related ports are the same. You can use link aggregation to combine up to 8 (optimally up to 4) connec- tion lines between devices into a trunk.
  • Page 129 Redundancy 8.1 Link aggregation Figure 40: Setting the link aggregation Select Allow static link aggregation if the partner device does not support the Link Aggregation Control Protocol (LACP) (e.g. MACH 3000). Devices that support LACP prevent loops when they are coupled via mul- tiple connection lines.
  • Page 130 Redundancy 8.1 Link aggregation “Type” shows you whether this link aggregation connection was created manually (Allow static link aggregation is selected) or dynamically using LACP (Allow static link aggregation is not selected). Comment: If there are multiple connections between devices that support LACP, and if Allow static link aggregation is nevertheless se- lected, dynamic is still displayed, because in this case the devices auto- matically switch to dynamic.

  • Page 131: Hiper Ring And Link Aggregation

    Redundancy 8.1 Link aggregation Note: For redundancy security reasons, a combination of network/ring coupling and link aggregation is not possible. 8.1.2 HIPER ring and link aggregation For PowerMICE and MACH 4000: To increase the security on particularly critical connections, you can combine the HIPER-Ring Version 1 redundancy functions (see on page 132 „HIPER-Ring“) and Link aggregation.

  • Page 132: Hiper-Ring

    Redundancy 8.2 HIPER-Ring 8.2 HIPER-Ring The concept of the HIPER-Ring enables the construction of high-availability, ring-shaped network structures. Using the RM function (Redundancy Manager) of a device with the L2E, L2P, L3E or L3P software, you can close both ends of a backbone in a line struc- ture to a redundant ring, the HIPER-Ring.

  • Page 133: Configuring Hiper-Ring Version

    Redundancy 8.2 HIPER-Ring 8.2.1 Configuring HIPER-Ring Version 1 Set up the network to meet your requirements. Note: Before you connect the redundant line, you must complete the configuration of HIPER-Ring Version 1. You thus avoid loops during the configuration phase. Note: Configure each HIPER-Ring device.
  • Page 134 Redundancy 8.2 HIPER-Ring Note: When using 100 Mbit/s with twisted pair cables, avoid the combination of autonegotiation “off” and cable crossing “automatic”. Use crossover cables with 100 Mbit/s. Display in “Operation” field: Active: this port is switched on and has a link. Inactive: this port is switched off or has no link.
  • Page 135 Redundancy 8.2 HIPER-Ring Figure 42: Selecting HIPER-Ring version, entering ring ports, enabling/disabling redundancy manager and selecting ring recovery Note: Deactivate the Spanning Tree protocol for the ports connected to the redundant ring, because the Spanning Tree and the Ring Redundancy work with different reaction times.
  • Page 136 Redundancy 8.2 HIPER-Ring The displays in the “Information” frame mean: – „“Redundancy guaranteed”: One of the lines affected by the function can fail, whereby the redundant line will then take over the function of the failed line. – „“Configuration failure”: The function is incorrectly configured or there is an error on ringport link.
  • Page 137 Redundancy 8.2 HIPER-Ring Note: When you switch from a normal port to a ring port with the DIP switch, the device makes the required settings for the ring ports in the configuration table. The port which has been switched from a ring port to a normal port keeps the ring port settings.

  • Page 138: Configuring Hiper-Ring Version 2 (Mrp Draft)

    Redundancy 8.2 HIPER-Ring 8.2.2 Configuring HIPER-Ring Version 2 (MRP Draft) Set up the network to meet your requirements. Note: Before you connect the redundant line, you must complete the configuration of HIPER-Ring Version 2. You thus avoid loops during the configuration phase. Note: Configure each HIPER-Ring device.
  • Page 139 If a device in the ring does not support the advanced mode for fast switch- ing times, you deactivate the advanced mode in the redundancy manag- er, in the “Configuration Redundancy Manager” frame. All Hirschmann devices that support the HIPER-Ring Version 2 (MRP Draft) also support the advanced mode. RM Web L3P...
  • Page 140 Redundancy 8.2 HIPER-Ring Note: Deactivate the Spanning Tree protocol for the ports connected to the redundant ring, because the Spanning Tree and the Ring Redundancy work with different reaction times. The “VLAN” frame enables you to assign HIPER-Ring Version 2 to a VLAN. If VLANs are configured, then in the “VLAN”...
  • Page 141 Redundancy 8.2 HIPER-Ring The displays in the “Information” frame mean: – „“Redundancy guaranteed”: One of the lines affected by the function can fail, whereby the redundant line will then take over the function of the failed line. – „“Configuration failure”: The function is incorrectly configured or there is an error on ringport link.

  • Page 142: Redundant Coupling

    Redundancy 8.3 Redundant coupling 8.3 Redundant coupling 8.3.1 Configuring the redundant coupling STAND-BY switch The Switches have a STAND-BY switch for selecting between the main coupling and the redundant coupling. Depending on the Switch, this switch is a DIP switch or a software switch (Redundancy:Ring/Net- work Coupling dialog), or you can use a switch to select one of the two options.
  • Page 143 Redundancy 8.3 Redundant coupling Switch with Choice of main coupling or redundant coupling DIP switch “STAND-BY” on DIP switch DIP switch/software switch According to the option selected option - “Stand-by” on the DIP switch or in the - Redundancy:Ring/Network Coupling dialog, by selecting in “Select configuration”.
  • Page 144 Redundancy 8.3 Redundant coupling Note: One-Switch coupling: The redundancy function is assigned to the Switch via the “STAND-BY” setting in the DIP switch, or via the Management. Note: Two-Switch coupling: The redundancy function is assigned to the Switch in the redundant line via the “STAND-BY” setting in the DIP switch, or via the Management.
  • Page 145 Redundancy 8.3 Redundant coupling One-Switch coupling Select the Redundancy:Ring/Network Coupling dialog. Select one-Switch coupling (see fig. 47). Partner Coupling coupling port port STAND-BY Figure 47: One-Switch coupling The following settings apply to the Switch displayed in blue in the selected graphic.
  • Page 146 Redundancy 8.3 Redundant coupling Switch Coupling port RS2-../.. Not possible RS2-16M Adjustable for all ports (default setting: port 1) RS20 Adjustable for all ports (default setting: port 1.4) RS30 Adjustable for all ports (default setting: port 1.4) RS40 Adjustable for all ports (default setting: port 1.4) MICE Adjustable for all ports (default setting: port 1.4) PowerMICE...
  • Page 147 Redundancy 8.3 Redundant coupling Figure 48: Selecting the port and enabling/disabling operation Note: The following settings are required for the coupling ports (you select the Basic Settings:Port Configuration dialog): – Port: on – Automatic configuration (autonegotiation): on for twisted-pair connections –...
  • Page 148 Redundancy 8.3 Redundant coupling In the “Redundancy Mode” frame, select (see fig. 49) – “Redundant Ring/Network Coupling” or – “Extended Redundancy”. Figure 49: Selecting the redundancy mode With the “Redundant Ring/Network Coupling” setting, either the main line or the redundant line is active. Both lines are never active simultaneously. With the “Extended Redundancy”...
  • Page 149 Redundancy 8.3 Redundant coupling Coupling mode The coupling mode indicates the type of the connected network. In the “Coupling Mode” frame, select (see fig. 51) – “Ring Coupling” or – “Network Coupling” Figure 51: Selecting the coupling mode Select “Ring coupling” if you are connecting a HIPER-Ring. Select “Network Coupling”...
  • Page 150 Redundancy 8.3 Redundant coupling Two-Switch coupling Connect the two partners via their ring ports. Select the Redundancy:Ring/Network Coupling dialog. Select two-Switch main coupling (see fig. 52). Coupling Partner port coupling port STAND-BY Figure 52: Two-Switch coupling The following settings apply to the Switch displayed in blue in the selected graphic.
  • Page 151 Redundancy 8.3 Redundant coupling Activate the function in the “Operation” frame (see fig. 53). You now connect the redundant line. The displays in the “Select port” frame mean (see fig. 53): – “Port mode”: The port is either active or in stand-by mode. –...
  • Page 152 Redundancy 8.3 Redundant coupling – Port: on – Automatic configuration (autonegotiation): on for twisted-pair connections – Manual configuration: 100 Mbit/s FDX for glass fiber connections Note: If VLANS are configured, note the VLAN configuration of the coupling and partner coupling ports. In the Network/Ring Coupling configuration, select for the coupling and partner coupling ports –...
  • Page 153 Redundancy 8.3 Redundant coupling – “Port state”: The port is either connected or not connected. – “IP Address”: The IP address of the partner, if the partner is already operating in the network. The displays in the “Information” frame mean (see fig.
  • Page 154 Redundancy 8.3 Redundant coupling Redundancy mode In the “Redundancy Mode” frame, select (see fig. 55) – “Redundant Ring/Network Coupling” or – “Extended Redundancy”. Figure 55: Selecting the redundancy mode With the “Redundant Ring/Network Coupling” setting, either the main line or the redundant line is active. Both lines are never active simultaneously. With the “Extended Redundancy”...
  • Page 155 Redundancy 8.3 Redundant coupling Figure 56: Extended redundancy Coupling mode The coupling mode indicates the type of the connected network. In the “Coupling Mode” frame, select (see fig. 57) – “Ring Coupling” or – “Network Coupling” Figure 57: Selecting the coupling mode Select “Ring coupling”...
  • Page 156 Redundancy 8.3 Redundant coupling The “Delete coupling configuration” button in the dialog allows you to reset all the coupling settings of the device to the state on delivery. RM Web L3P Release 4.1 03/08...
  • Page 157 Redundancy 8.3 Redundant coupling Two-Switch coupling with control line Connect the two partners via their ring ports. Select the Redundancy:Ring/Network Coupling dialog. Select two-Switch main coupling with control line (see fig. 58). Control port Partner coupling Coupling port port STAND-BY Figure 58: Two-Switch coupling with control line The following settings apply to the Switch displayed in blue in the selected graphic.
  • Page 158 Redundancy 8.3 Redundant coupling Switch Coupling port Control port RS2-../.. Port 1 Stand-by port (can only be combined with RS2-../.. ) RS2-16M Adjustable for all ports Adjustable for all ports (default setting: port 1) (default setting: port 2) RS20 Adjustable for all ports Adjustable for all ports (default setting: port 1.4) (default setting: port 1.3)
  • Page 159 Redundancy 8.3 Redundant coupling Figure 59: Selecting the port and enabling/disabling operation To avoid continuous loops, the Switch sets the port state of the coupling port to “off” if you: – switch off operation or – change the configuration while the connections are in operation at these ports. Note: The following settings are required for the coupling ports (you select the Basic Settings:Port Configuration dialog): –...
  • Page 160 Redundancy 8.3 Redundant coupling Select two-Switch redundant coupling with control line (see fig. 60). Control port Partner coupling Coupling port port STAND-BY Figure 60: Two-Switch coupling with control line The following settings apply to the Switch displayed in blue in the selected graphic.
  • Page 161 Redundancy 8.3 Redundant coupling To avoid continuous loops, the Switch sets the port state of the coupling port to “off” if you: – switch off operation or – change the configuration while the connections are in operation at these ports. Note: The following settings are required for the coupling ports (you select the Basic Settings:Port Configuration dialog): –...
  • Page 162 Redundancy 8.3 Redundant coupling Redundancy mode In the “Redundancy Mode” frame, select (see fig. 61) – “Redundant Ring/Network Coupling” or – “Extended Redundancy”. Figure 61: Selecting the redundancy mode With the “Redundant Ring/Network Coupling” setting, either the main line or the redundant line is active. Both lines are never active simultaneously. With the “Extended Redundancy”...
  • Page 163 Redundancy 8.3 Redundant coupling Figure 62: Extended redundancy Coupling mode The coupling mode indicates the type of the connected network. In the “Coupling Mode” frame, select (see fig. 63) – “Ring Coupling” or – “Network Coupling” Figure 63: Selecting the coupling mode Select “Ring coupling”...
  • Page 164 Redundancy 8.3 Redundant coupling The “Delete coupling configuration” button in the dialog allows you to reset all the coupling settings of the device to the state on delivery. RM Web L3P Release 4.1 03/08...

  • Page 165: Rapid Spanning Tree

    Redundancy 8.4 Rapid Spanning Tree 8.4 Rapid Spanning Tree Note: The Spanning Tree protocol and the Rapid Spanning Tree protocol are protocols for MAC bridges. They are described in the standards IEEE 802.1D-2004 and IEEE 802.1w. For this reason, the following description of these protocols usually employs the term bridge instead of switch.

  • Page 166: Configuring The Rapid Spanning Tree

    Redundancy 8.4 Rapid Spanning Tree 8.4.1 Configuring the Rapid Spanning Tree Set up the network to meet your requirements. Note: Before you connect the redundant lines, you must complete the configuration of the RSTP. You thus avoid loops during the configuration phase. Select the Redundancy:Rapid Spanning Tree:Global dialog.
  • Page 167 Redundancy 8.4 Rapid Spanning Tree Define the desired Switch as the root Switch by assigning it the lowest pri- ority in the bridge information among all the Switches in the network, in the “Protocol Configuration/Information” frame. Note that only multiples of 4096 can be entered for this value (see table 33).
  • Page 168 Redundancy 8.4 Rapid Spanning Tree – MAC Address: Displays the MAC address of this Switch – Topology Changes: Displays the number of changes since the start of RSTP – Time since last change: Displays the time that has elapsed since the last network reconfiguration Figure 66: Display: Priority, MAC Address, Topology Changes and Time since last change...
  • Page 169 Redundancy 8.4 Rapid Spanning Tree Figure 67: Assigning Hello Time, Forward Delay und Max. Age The times entered in the dialog are in units of 1 s. Example: Max Age = 20 corresponds to 20 seconds. RM Web L3P Release 4.1 03/08...
  • Page 170 Redundancy 8.4 Rapid Spanning Tree Variable Meaning Possible values State on deliv- Priority Priority and MAC address together 0 < n*4 096 < 61 440 32 768 make up the bridge identifier. Hello Time The Switch periodically sends config- 1 - 10 uration messages (Hello packets, Configuration Bridge Protocol Data Units, CBPDU) if it is the root Switch.
  • Page 171 Redundancy 8.4 Rapid Spanning Tree Variable Meaning Possible values State on deliv- STP status on Switch RSTP on/off at this port. Switch STP off when connecting a terminal device in order to avoid un- necessary waiting times. Port state Display of the port state disabled, forwarding, discarding,...
  • Page 172 Redundancy 8.4 Rapid Spanning Tree You now connect the redundant lines. You can avoid loops and network failures during the configuration phase by first configuring the Switches and only then connecting the redundant lines. RM Web L3P Release 4.1 03/08...

  • Page 173: Vrrp/Hivrrp

    If the default gateway fails, VRRP ensures that the terminal devices find a redundant gateway. The Hirschmann company has further developed the VRRP into the Hirschmann Virtual Router Redundancy Protocol (HiVRRP). With the appropriate configuration, HiVRRP guarantees maximum switching times of 400 ms.
  • Page 174 Redundancy 8.5 VRRP/HiVRRP Parameter Meaning Send VRRP Master As soon as the router takes over the VRRP master function, it sends a Trap master trap Send VRRP Authen- As soon as the router receives a VRRP message with an incorrect tication Failure Trap authentication, it sends a VRRP authentication error trap.
  • Page 175 Redundancy 8.5 VRRP/HiVRRP Parameter Meaning Priority VRRP priority set (value: 1-255; default: 100). The router with the highest value is the master. If the virtual router IP address is the same as the IP address of the router interface, then this router is the “owner”.
  • Page 176 Redundancy 8.5 VRRP/HiVRRP In the table in the Wizard dialog, select a port row and enter the virtual router ID in the VRID row. You can configure up to 8 virtual routers per interface. Click on “Continue”. Under “Edit entry” in the “Basic configuration” frame, enter: –...

  • Page 177: Hivrrp Domains

    Redundancy 8.5 VRRP/HiVRRP Note: You activate the preempt mode so that, after the decrementation of the VRRP priority of the master via the tracking function, the backup router can take over the master role. Click on “Finished” to transfer the VRRP router interface into the VRRP router interface table Click on “Continue”...
  • Page 178 Redundancy 8.5 VRRP/HiVRRP Displaying HiVRRP domains Parameter Meaning Domain ID Identification of the domains Status Status of the supervisor of the domains noError: supervisor is active SupervisorDown: supervisor is not active noSupervisor: no supervisor defined Supervisor Port HiVRRP instance (module and port, written as <Slot>.<Port>) that was defined as the supervisor Supervisor VRID VRID of the supervisor...

  • Page 179: Statistics

    Redundancy 8.5 VRRP/HiVRRP Figure 69: HiVRRP domain dialog 8.5.3 Statistics The VRRP statistics window displays the numbers on counters that count events relevant to VRRP. Parameter Meaning Checksum errors Number of VRRP advertisements received with the wrong checksum. Version errors Number of VRRP advertisements received with an unknown or unsup- ported version number.
  • Page 180 Redundancy 8.5 VRRP/HiVRRP Parameter Meaning Module Module of the device. Port Port of the module of the device. VRID Virtual router ID. Become Master Number of times the Switch has become the master. Advertise receives Number of VRRP advertisements received. Advertise interval errors Number of VRRP advertisements received by the router outside the advertisement interval.

  • Page 181: Tracking

    Redundancy 8.5 VRRP/HiVRRP Figure 70: VRRP Statistics dialog 8.5.4 Tracking The VRRP Tracking window displays the status of all the tracking objects assigned to VRRP objects. RM Web L3P Release 4.1 03/08...
  • Page 182 Redundancy 8.5 VRRP/HiVRRP Parameter Meaning Port Port to which this entry applies, in the form <Slot>.<Port> VRID Virtual router ID of the assigned virtual router. TrackId ID number of the tracking object. Decrement Value by which the current VRRP priority of the assigned VRRP priority is reduced when the tracking object gets the status “down”.

  • Page 183: Diagnostics

    Diagnostics 9 Diagnostics The diagnostics menu contains the following tables and dialogs: Event log Ports (statistics, utilization, SFP modules, TP cable diagnosis) Topology discovery Port mirroring Device status Signal contact Alarms (traps) Report (log file, system information) IP address conflict detection In service situations, they provide the technician with the necessary information.

  • Page 184: Event Log

    Diagnostics 9.1 Event log 9.1 Event log The table under Event Log lists all the events with a time stamp. The "Delete" button allows you to delete the contents of the Event Log window. Figure 72: Event log table RM Web L3P Release 4.1 03/08...

  • Page 185: Ports

    Diagnostics 9.2 Ports 9.2 Ports The port menu contains displays and tables for the individual ports: Statistics table Utilization SFP modules TP cable diagnosis 9.2.1 Statistics table This table shows you the contents of various event counters. In the Restart menu item, you can reset all the event counters to zero using "Warm start", "Cold start"...

  • Page 186: Utilization

    Diagnostics 9.2 Ports Figure 73: Port statistics table 9.2.2 Utilization This table displays the network load of the individual ports. In the “Upper Threshold[%]” column you enter the top threshold value for net- work load. If this threshold value is exceeded, the device sets a check mark in the “Alarm”...

  • Page 187: Sfp Modules

    Diagnostics 9.2 Ports Figure 74: Network load dialog 9.2.3 SFP modules The SFP status display allows you to look at the current connections to the SFP modules and their properties. The properties include: module type support provided in media module temperature in degrees Celsius transmission power in milliwatts reception power in milliwatts...

  • Page 188: Tp Cable Diagnosis

    Diagnostics 9.2 Ports Figure 75: SFP Modules dialog 9.2.4 TP cable diagnosis The TP cable diagnosis allows you to check the connected cables for short circuits or interruptions. Note: While the check is being carried out, the data traffic at this port is suspended.
  • Page 189 Diagnostics 9.2 Ports Figure 76: TP cable diagnosis dialog The check takes a few seconds. After the check, the "Result" row contains the result of the cable diagnosis. If the result of the check shows a cable er- ror, then the "Distance" row contains the distance of the port from the cable error.
  • Page 190 Diagnostics 9.2 Ports Prerequisites for correct TP cable diagnosis: 1000BASE-T port is connected with 1000BASE-T port via 8-core cable or 10BASE-T/100BASE-TX port is connected with 10BASE-T/100BASE-TX port. RM Web L3P Release 4.1 03/08...

  • Page 191: Topology Discovery

    Diagnostics 9.3 Topology Discovery 9.3 Topology Discovery This dialog allows you to switch on/off the topology discovery function (LL- DP). The topology table shows you the collected information for neighboring devices. This information enables the network management station to map the structure of your network.
  • Page 192 Diagnostics 9.3 Topology Discovery devices with active topology discovery function and devices without active topology discovery function are connected to a port, the topology table hides the devices without ac- tive topology discovery. only devices without active topology discovery are connected to a port, the table will contain one line for this port to represent all devices.

  • Page 193: Port Mirroring

    Diagnostics 9.4 Port Mirroring 9.4 Port Mirroring This dialog allows you to configure and activate the port mirroring function of the device. In port mirroring, the valid data packets of one port, the source port, are cop- ied to another, the destination port. The data traffic at the source port is not influenced by port mirroring.
  • Page 194 Diagnostics 9.4 Port Mirroring Figure 78: Port Mirroring dialog RM Web L3P Release 4.1 03/08...

  • Page 195: Device Status

    Many process visualization systems record the device status for a device in order to present its condition in graphic form. Figure 79: Device State dialog (for power MICE) In the "Monitoring" field, you select the events you want to monitor.
  • Page 196 Diagnostics 9.5 Device Status The events which can be selected are: Name Meaning Power supply ... Monitor/ignore supply voltage(s). Temperature Monitor/ignore the temperature threshold setting (see on page 18 „Sys- tem“) for temperatures that are too high/too low. Module removal Monitor/ignore the removal of a module (for modular devices).

  • Page 197: Signal Contact

    Diagnostics 9.6 Signal contact 9.6 Signal contact The signal contacts are used for controlling external devices by manually setting the signal contacts, monitoring the functions of the device, reporting the device state of the device. 9.6.1 Manual setting Select the tab page "Alarm 1" or "Alarm 2" (for devices with two signal contacts).
  • Page 198 Diagnostics 9.6 Signal contact In the “Mode Signal contact” field, you select the “Monitoring correct operation” mode. In this mode the signal contacts monitor the functions of the device, thus enabling remote diagnosis. A break in contact is reported via the potential-free signal contact (relay contact, closed circuit): Error during self-test (the contact remains open).

  • Page 199: Device Status

    Diagnostics 9.6 Signal contact 9.6.3 Device status Select the tab page “Alarm 1” or “Alarm 2” (for devices with two signal contacts). In the “Mode Signal Contact” field, you select the “Device status” mode. In this mode, the signal contact is used to monitor the status of the device (see on page 193 „Device Status“) and thereby makes remote diagnosis possible.

  • Page 200: Alarms (Traps)

    Diagnostics 9.7 Alarms (Traps) 9.7 Alarms (Traps) This dialog allows you to determine which events trigger an alarm (trap) and where these alarms should be sent. Select "Create entry". In the "Address" column, enter the IP address of the management station to which the traps should be sent.
  • Page 201 Diagnostics 9.7 Alarms (Traps) Figure 81: Alarms dialog RM Web L3P Release 4.1 03/08...

  • Page 202: Report

    Diagnostics 9.8 Report 9.8 Report The following reports are available for the diagnostics: Log file The log file is an HTML file in which the device writes all the important device-internal events System information. The system information is an HTML file containing all system-relevant data.

  • Page 203: Ip Address Conflict Detection

    Diagnostics 9.9 IP address conflict detection 9.9 IP address conflict detection This dialog allows you to detect address conflicts the device is having with its own IP address and rectify them (Address Conflict Detection, ACD). Select IP address conflict detection on/off under “Status” or select the mode (see table 44).
  • Page 204 Diagnostics 9.9 IP address conflict detection Figure 82: IP Address Conflict Detection dialog RM Web L3P Release 4.1 03/08...

  • Page 205: Self-Test

    Diagnostics 9.10 Self-test 9.10Self-test This dialog allows you to activate/deactivate the RAM test when cold-starting the device. Deactivating the RAM tests shortens the booting time for a cold start of the device. Figure 83: Self-test dialog RM Web L3P Release 4.1 03/08...
  • Page 206 Diagnostics 9.10 Self-test RM Web L3P Release 4.1 03/08...

  • Page 207: Advanced

    Advanced 10 Advanced The advanced menu contains the dialogs, displays and tables for: DHCP Relay Agent DHCP Server Industry Protocols Command Line RM Web L3P Release 4.1 03/08...

  • Page 208: Dhcp Relay Agent

    This results in the entry for the "Hardware address" in the DHCP server: B306000001000101000600806300061E In the "Option 82 on/off" column, you can switch this function on/off for each port. In the "Hirschmann Device" column, you mark the ports to which a Hirschmann device is connected. RM Web L3P Release 4.1 03/08...
  • Page 209 Advanced 10.1 DHCP Relay Agent Figure 84: DHCP Relay Agent dialog RM Web L3P Release 4.1 03/08...

  • Page 210: Dhcp Server

    Advanced 10.2 DHCP Server 10.2DHCP Server With this dialog you can very easily include new devices (clients) in your network or exchange them in your network: When you select DHCP as the configuration mode for the client, the client gets the configuration data from the DHCP server.
  • Page 211 This device displays the MAC address of the client served. MAC address Hirschmann Device Checkmark the ports to which a Hirschmann device is connected. You thus ensure that the DHCP server assigns the same IP address to a Hirschmann switching device again.
  • Page 212 Advanced 10.2 DHCP Server Note: Further settings for this function you can make in the Command Line Interface (CLI). Figure 85: DHCP Server dialog RM Web L3P Release 4.1 03/08...

  • Page 213: Industry Protocols

    Advanced 10.3 Industry Protocols 10.3Industry Protocols For RS20/RS30/RS40 and MS20/MS30, this dialog enables you to activate and deactivate the PROFINET IO or EtherNet/IP industry protocols download files for configuring the SPS from the Switch to your PC You will find detailed information on the industry protocols and on the configuration of the SPS in the "Industry Protocols"...

  • Page 214: 1Profinet Io

    Advanced 10.3 Industry Protocols 10.3.1 PROFINET IO To integrate this into a control system, activate the function in the "ProfinetIO" frame click on "Download GSDML File" to load the GSDML file onto your PC in the Basic Settings:Network dialog, check whether Local is selected in the "Mode"...

  • Page 215: Command Line

    Advanced 10.4 Command Line 10.4Command Line This window enables you to access the Command Line Interface (CLI) using the web interface. You will find detailed information on CLI in the "Command Line Interface" reference manual. RM Web L3P Release 4.1 03/08...
  • Page 216 Advanced 10.4 Command Line RM Web L3P Release 4.1 03/08...

  • Page 217: A Technical Data

    Technical Data A Technical Data VLAN VLAN ID 1 to 4042 (MACH 4000: 3966) Number of VLANs max. 256 simultaneously per device max. 256 simultaneously per port Number of VLANs in GMRP in VLAN 1 max. 256 simultaneously per device max.
  • Page 218 Technical Data RM Web L3P Release 4.1 03/08...

  • Page 219: B Reader´s Comments

    Reader´s comments B Reader´s comments What is your opinion of this manual? We are always striving to provide as comprehensive a description of our product as possible, as well as important information that will ensure trouble-free operation. Your comments and sug- gestions help us to further improve the quality of our documentation.
  • Page 220 Zip code / City: Date / Signature: Dear User, Please fill out and return this page by fax to the number +49 (0)7127/14-1798 or by mail to Hirschmann Automation and Control GmbH Department AMM Stuttgarter Str. 45-51 72654 NeckartenzlingenGermany Germany RM Web L3P...

  • Page 221: Index

    Index C Index EtherNet/IP Address Conflict Detection Event Log Address Resolution Protocol Expedited Forwarding Administrative distance Aging time Alarm 48, 49 alarm Allowed IP addresses GMRP per Port Allowed MAC addresses ARP parameters HIPER-Ring 127, 131, 132 ARP statistics HiVision ARP table HiVRRP Assured Forwarding...
  • Page 222 Index Network load Security data sheet Network Management Software Self-test SFP module SFP status display Shaping rate 94, 97 Option 82 Signal contact 195, 198 OSPF routes SNMP SNTP client SNTP request Password 14, 40, 41 SNTP server Source port Port configuration Split horizon Port mirroring...
  • Page 223 Index VRRP VRRP advertisement interval VRRP instance VRRP router instance VRRP statistics VRRP Tracking Web-based Interface Web-based management Website Weighted Fair Queuing 97, 103 Weighted Round Robin Write access RM Web L3P Release 4.1 03/08...
  • Page 224 Index RM Web L3P Release 4.1 03/08...

  • Page 225: D Further Support

    Further support D Further support Technical questions and training courses In the event of technical queries, please talk to the Hirschmann contract partner responsible for looking after your account or directly to the Hirschmann office. You can find the addresses of our contract partners on the Internet: www.hirschmann-ac.com.

This manual is also suitable for:

Mach 4000

Table of Contents