8 port 10/100/1000base-t with 1 combo 1000base-x sfp port web managed switch (41 pages)
Summary of Contents for Transition Networks S4224
Page 1
S4224 Managed 10 Gigabit Ethernet Access/Aggregation Switch Web User Guide 33558 Rev. C 33558 Rev. C https://www.transition.com Page 1 of 669...
Anyone using this product in such an application without express written consent of an officer of Transition Networks does so at their own risk, and agrees to fully indemnify Transition Networks for any damages that may result from such use or sale.
Pool Setting ............................. 36 Configuration > DHCP > DHCP Snooping .................... 41 Configuration > DHCP > DHCP Relay ....................42 S4224 DHCP Configuration Process ......................44 A. At Configuration > System > IP ..................... 44 B. At Configuration > DHCP ....................... 44 Web Interface Screen Examples......................
Page 4
Transition Networks S4224 Web User Guide SNMP v2 Traps ........................... 70 SNMP v3 Traps ........................... 70 SNMP v3 Configuration Process ......................70 SNMP System Configuration ........................71 SNMP Trap Configuration ........................72 SNMP Trap Event ............................ 74 Specific Trap Event Configuration ...................... 75 SNMPv3 Community Configuration ......................
Page 7
Transition Networks S4224 Web User Guide Static MAC Table Configuration......................262 VLAN Translation Configuration ..................... 264 Port to Group Mapping ........................264 VLAN Translation Mapping ........................266 VLANs Configuration ........................268 Global VLAN Configuration....................... 268 Port VLAN Configuration ........................269 VLAN Name Configuration .......................
Page 8
Transition Networks S4224 Web User Guide RED Drop Probability Function ......................347 Mirroring & Remote Mirroring Configuration .................. 348 Mirroring & Remote Mirroring Configuration ..................349 Source VLAN(s) Configuration ......................349 Port Configuration (Remote Mirroring) ................... 349 Configuration Guideline for All Features..................350 PTP Clock Configuration .........................
Page 9
Transition Networks S4224 Web User Guide Monitor > DHCP > Relay Statistics ....................416 Monitor > DHCP > Detailed Statistics ....................418 Receive and Transmit Packets ......................419 Monitor > Security > Access Management ................... 421 Monitor > Security > Network > Port Security ..................422 Port Security >...
Page 10
Transition Networks S4224 Web User Guide Monitor > Ethernet Services ......................... 490 Service Frame (Traffic) Colors - Green / Yellow / Red ..............490 > EVC Statistics ..........................490 ECE Statistics ............................ 492 Monitor > Performance Monitor ......................494 Performance Monitor Loss Measurement Statistics ................ 494 Performance Monitor Delay Measurement Statistics ..............
Page 11
Appendix B - Licenses ........................603 Appendix C: Application Notes ...................... 615 S4224 Applications Support ......................... 615 Available TN S4224 Application Notes ..................... 615 Appendix D: Service, Warranty & Compliance Information ............. 616 Appendix E: SNMP Traps and MIBs ....................617 MIBs Supported ............................
Page 12
Transition Networks S4224 Web User Guide Glossary............................632 Index ............................. 668 Figures Figure 1.SNMP v3 Users, Groups, and Views ....................69 Figure 2. Spanning Tree Example ......................157 Figure 3. Multiple Spanning Tree Example ....................157 Figure 4. 802.1Q EtherTypes (excerpt from IEEE 802.1ad 2005) .............. 274 Figure 5.
1. Introduction The S4224 switch is a 1RU height product and can be mounted in a 19” rack mount. The S4224 has a hot swappable fan. The S4224 can have one or two hot-swappable power supplies, either AC or DC.
Transition Networks S4224 Web User Guide 2. Web Interface Menu System The S4224 Web interface menu system is shown below in terms of its sub-menus and functions. Main Menu Configuration Monitor Diagnostics sub- Maintenance sub- sub-menu sub-menu menu menu The four Main menu selections are: Configuration - lets you define system operating parameters for the available S4224 features.
Page 15
Logout Show Help Home: Displays the S4224 Startup Screen from the Monitor > Ports > State menu path. Logout: Display the confirmation message “Do you want to log out of the web site?”. Click the OK button to clear the web page message, perform a logout, and re-display the login (Username/Password) screen.
Configuration Main Menu Configuration > System The S4224 system information is configured from the Configuration > System menu path. Here you can configure S4224 device level Information, IP, NTP, time, and logging. The S4224 system information parameters are explained below.
Character Support Note The S4224 supports the Space * < > : % / \ “ ? |, and all other keyboard characters. The S4224 supports an individual "dot" character, but does not support consecutive dots (e.g., it supports A.B.C.bin, but does not support ABC….bin).
Transition Networks S4224 Web User Guide IP Configuration Configure IP basic settings, control IP interfaces and IP routes from the Configuration > System > IP menu path. The maximum number of interfaces supported is 128 and the maximum number of routes is 32.
Transition Networks S4224 Web User Guide DNS Proxy When DNS proxy is enabled, system will relay DNS requests to the currently configured DNS server, and reply as a DNS resolver to the client devices on the network. Only IPv4 DNS proxy is now supported.
Transition Networks S4224 Web User Guide IPv6 Address The IPv6 address of the interface. An IPv6 address is in 128-bit records represented as eight fields of up to four hexadecimal digits with a colon separating each field (:). For example, fe80::215:c5ff:fe03:4dc7.
Page 21
When DNS Proxy is enabled, the S4224 will relay DNS requests to the currently configured DNS server on the S4224, and reply as a DNS resolver to the client device on the network. Note that setting these fields does not provide the full set of IP, BootP, VLAN, DNS server, and Management VLAN / member ports configuration.
Page 22
Transition Networks S4224 Web User Guide Message: No any network address/netmask input. Please enable DHCP or give a valid IPv4 or IPv6 network address and netmask. Recovery: 1. Click the OK button to clear the message. 2. Re-enter a parameter per the instructions.
NTP uses UDP (datagrams) as transport layer. The S4224 uses NTP for real time clock synchronization with the network time server. The NTP is compliant with RFC 5905. The S4224 takes care of daylight saving options where used.
Transition Networks S4224 Web User Guide Time Configuration This page allows you to configure the Time Zone and Daylight Savings Time (DST) parameters from the Configuration > System > Time menu path. The Time Zone and Daylight Savings Time (DST) parameters are described below.
Page 25
Transition Networks S4224 Web User Guide Recurring Configurations Start Time Settings Week - Select the starting week number (1-5). Day - Select the starting day ( , or Month - Select the starting month ( , or Hours - Select the starting hour (0 - 23).
Transition Networks S4224 Web User Guide Time Zones List The various Time Zone selections available worldwide are listed below. None (GMT-12:00) International Date Line West (GMT-11:00) Midway Island, Samoa (GMT-10:00) Hawaii (GMT-09:00) Alaska (GMT-08:00) Pacific Time (US and Canada) (GMT-08:00) Tijuana, Baja California...
Configure System Logging (Syslog) on this page from Configuration > System > Log. The Syslog data is stored in S4224 RAM by default. Syslog data will be lost with an S4224 reboot unless other provisions are made to save it.
192.168.1.110 15/10 09:00:37.647 <14>1 1970-01-01T00:39:52+00:00 192.168.1.110 syslog - ID15 [S4224-24] Authentication for 'admin' successful via 'http' 192.168.1.110 15/10 09:08:25.635 Note: At S4224 v2.2.9.3 the total number of syslog records stored on the S4224 has been limited to 1000. 33558 Rev. C https://www.transition.com...
Configure the FPGA Shared Port on this page. The parameters are: Shared Port (24) Mode This switch contains one port that is 'Shared'. On the S4224 products, port 24 is shared. The Shared Port has two modes. In External mode, the port can work as normal port.
Transition Networks S4224 Web User Guide Configuration > Ports > Configuration The S4224 ports can be configured here in terms of speed, flow control, max. frame size, excessive collision control, and port description. The Port Configuration parameters are explained below.
"disabled". Maximum Frame Size Enter the maximum frame size to be allowed for the S4224 port, including FCS. The valid range is 1518-10056 bytes. The default is 10056 bytes for all ports. Excessive Collision Mode Configure port transmit collision behavior: wild card character selects all.
Page 32
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Refresh: Click to refresh the page. Any changes made locally will be undone. Messages : Are you sure you want to switch the mode about the shared port? 33558 Rev.
Note: after power up, the S4224 has DHCP enabled. If a DHCP server is available, the S4224 will obtain an IP address from the DHCP server. If no DHCP server is available, after 70 seconds, the S4224 will fall back to the default IP address of 192.168.0.1/24.
Transition Networks S4224 Web User Guide Global Mode Configure operation mode to enable/disable DHCP server per system. Mode Configure the operation mode per system. Possible modes are: Enabled: Enable DHCP server per system. Disabled: Disable DHCP server per system. VLAN Mode Configure operation mode to enable/disable DHCP server per VLAN.
Page 35
Transition Networks S4224 Web User Guide > DHCP Excluded IP This page configures excluded IP addresses. The DHCP server will not allocate these excluded IP addresses to DHCP client. Click the Add IP Range button to display the DHCP Server Excluded IP Configuration entry fields.
Transition Networks S4224 Web User Guide > DHCP Pool This page lets you manage DHCP pools. According to the DHCP pool, the DHCP server will allocate IP address and deliver configuration parameters to the DHCP client. Click the Add New Pool button to display the entry fields.
Page 37
Transition Networks S4224 Web User Guide Buttons Add New Pool: Click to add a new DHCP pool. Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Example Click the linked Name (e.g., DSPC100 below) to display the full DHCP Pool Configuration settings.
Transition Networks S4224 Web User Guide Pool Select a DHCP pool to configure the settings. Name Select a DHCP pool by the pool name. Setting Configure the DHCP pool settings. Pool Name Displays the selected pool name. Type Specify which type the pool is.
Transition Networks S4224 Web User Guide networked computer which relates to the way it resolves NetBIOS names to IP addresses. The node types are: None: no node. B-node: B- node type (0x01 Broadcast). P-node: P- node type (0x02 Peer (WINS only).
Page 40
Transition Networks S4224 Web User Guide Messages Message: Pool type is defined so IP must be inputted. Pool type is defined so subnet mask must be inputted. Client identifier type is defined so value must be inputted. The value of Broadcast Address, 222.333.444.555, must be a valid IP address in dotted decimal notation (“x.y.z.w”), where x, y, z, and w are decimal numbers between 0 and 255.
Transition Networks S4224 Web User Guide Configuration > DHCP > DHCP Snooping Configure DHCP Snooping on this page. DHCP Snooping is used to block an intruder on the untrusted switch ports when it tries to intervene by injecting a bogus DHCP reply packet to a legitimate conversation between the DHCP client and server.
Transition Networks S4224 Web User Guide Configuration > DHCP > DHCP Relay A DHCP relay agent is used to forward and to transfer DHCP messages between the clients and the server when they are not in the same subnet domain. It stores the incoming interface IP address in the GIADDR field of the DHCP packet.
Page 43
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Messages Message Please make sure the DHCP server connected on trust port? Meaning: A warning message to make sure that the DHCP Server is connected on a port that is configured as “trusted”.
Transition Networks S4224 Web User Guide S4224 DHCP Configuration Process Notes: 1. Software releases supporting DHCP Server: S3290 v 2.1.x and S42240, S4140 v 2.2.x. 2. To configure DHCP server you must have a VLAN interface setup with a valid IP address.
Transition Networks S4224 Web User Guide 7. Configure DHCP Options: set DHCP Forwarding Configuration as required. 8. Once the server has been configured check Monitor > DHCP pages for activity on the server. The counters under the Statistics page and the Bindings page allow you to click on each IP address the server has handed out and view its associated MAC address.
Page 46
Transition Networks S4224 Web User Guide B. Configuration > DHCP > Server > Pool B. Configuration > DHCP > Server > Pool Click on linked Pool Name once added. 33558 Rev. C https://www.transition.com Page 46 of 669...
5. The maximum number of Pools/addresses that can be served per Port depends on available memory on the device, so simpler setups can handle more IP addresses; devices with more memory can handle more IP addresses (the S3290 has 82MB; the S4224 has 73MB). DHCP Options Used See the IANA web site at http://www.iana.org/assignments/bootp-dhcp-parameters/bootp-dhcp-...
Page 48
Transition Networks S4224 Web User Guide Vendor i Class Identifier: DHCP option 60. Specify to be used by DHCP client to optionally identify the vendor type and configuration of a DHCP client. DHCP server will deliver the corresponding option 43 specific information to the client that sends option 60 vendor class identifier.
The Configuration > Security > Switch > Users menu path lets you view and configure the system users that are allowed to access the web pages or log in from CLI. You can also access the S4224 System Password page from the Configuration > Security > Switch > Users menu path.
Transition Networks S4224 Web User Guide Edit User (Edit the Default admin User) To edit the default admin user, click the admin link to display the Edit User page. This page lets you configure the system password required to access the web pages or log in from CLI.
Transition Networks S4224 Web User Guide Privilege Level The privilege level of the user. The allowed range is 1 to 15. If the privilege level value is 15, it can access all groups, i.e. that is granted the fully control of the device. But other values may be needed to refer to each group privilege level.
This page lets you view and edit users’ privilege (access) levels from the Configuration ->Security > Switch > Privilege Levels menu path. Note: this feature only works for web users. The Group Name column lists the S4224 main functions, including Aggregation, DDMI, Debug, DHCP, DHCPv6_Client, Diagnostics, EPS, ERPS, ETH_LINK_OAM, EtherSAT, EVC, IP, IPMC_Snooping,...
Page 53
Transition Networks S4224 Web User Guide The Privilege Level parameters are explained below. Group Name The name identifying the privilege group. In most cases, a privilege level group consists of a single module (e.g. LACP, RSTP or QoS), but some groups contain more than one module.
Page 54
Transition Networks S4224 Web User Guide Message: Must explicitly add case for module ID: %d Meaning: A user privilege level was not defined for a module. Recovery: 1. Define a privilege level for the module (e.g., crw = 10). 33558 Rev. C https://www.transition.com...
Transition Networks S4224 Web User Guide Authentication Method Configuration Configuration > Security > Switch > Auth Method The authentication section allows you to configure how a user is authenticated when he logs into the switch via one of the management client interfaces. Access this page from the Configuration > Security >...
Transition Networks S4224 Web User Guide Methods that involve remote servers are timed out if the remote servers are offline. In this case, the next method is tried. Each method is tried from left to right and continues until a method either approves or rejects a user.
Page 57
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Messages Warning: When setting first method for ‘telnet’ to other than ‘local’, you may lose ‘telnet’...
Page 58
Transition Networks S4224 Web User Guide A sample Auth Method config screen is shown below: Note that AAA is also configurable from the Configuration > Security > AAA > TACACS+.menu path. 33558 Rev. C https://www.transition.com Page 58 of 669...
Transition Networks S4224 Web User Guide SSH Configuration Configure SSH on this page from the Configuration - Security - Switch - SSH menu path. The SSH (Secure Shell) network protocol allows data to be exchanged using a secure channel between two networked devices.
HTTPS provides authentication and encrypted communication. The S4224 has an embedded web server for managing the device without any additional software. The web server also provides a secure interface using HTTPS. The validity period will be based on the validity period of the uploaded cert.
Transition Networks S4224 Web User Guide Certificate Maintain This field only can be configured when HTTPS is disabled. It is used to maintain the certification. Possible actions are: None: No action for certification. Delete: To delete a certification. Upload: To upload a certification, there are two kind of upload method can be selected: Web Browser or URL.
Page 62
Transition Networks S4224 Web User Guide Certificate upload via Web Browser (No File Selected): Certificate upload via Web Browser (File Selected): Certificate upload via URL (valid path format shown in URL field): Switch secure HTTP certificate is generating ...: 33558 Rev. C https://www.transition.com...
Page 63
Transition Networks S4224 Web User Guide Messages Message: conf_sec_open failed , creating defaults version mismatch, creating defaults version mismatch (upgrade). Retaining the existing certificate. HTTPS invalid certificate HTTPS invalid URL parameter Meaning: An invalid HTTPS configuration was detected. Recovery: 1. Clear the error message. 2. Re-configure the HTTPS / certificate using the procedures above.
Management. You can add up to 16 entries. If the application's type matches any one of the access management entries, it will allow access to the S4224. Click the Add New Entry button to start configuring a new Access Management entry. Note: Save each new entry individually.
Page 65
Transition Networks S4224 Web User Guide HTTP/HTTPS Check to allow the host access to the S4224 from the HTTP/HTTPS interface if the host IP address matches the IP address range provided in the entry. SNMP When checked, indicates that the host can access the switch from SNMP interface if the host IP address matches the IP address range provided in the entry.
SNMP. The SNMP agent embedded in the S4224 is capable of version 1, 2c, or v3 support to access all management information from the device. The community strings for v1 and v2c and the USM/VACM for SNMPv3 are supported.
Page 67
Transition Networks S4224 Web User Guide SNMPv3 Simple Network Management Protocol Version 3 (SNMPv3) is an interoperable standards-based protocol for network management. SNMPv3 provides secure access to devices by a combination of authenticating and encrypting packets over the network. Although SNMPv3 makes no changes to the protocol aside from the addition of cryptographic security, its developers have managed to make things look much different by introducing new textual conventions, concepts, and terminology.
Page 68
Note: the concept of SNMP communities that was introduced in SNMPv2 is not relevant to SNMPv3, and has been replaced by SNMP groups/users. However, you can configure an S4224 to respond to both SNMPv2 and SNMPv3 commands. If both SNMPv2 and SNMPv3 are to be used, you must configure SNMP communities and SNMP groups and users.
Transition Networks S4224 Web User Guide Summary: You can create multiple Views. You can then create multiple Groups, and associate them with a View. You can configure multiple Groups (each with a different Group name and security level) and associate them with a particular View. You can also configure more than one View associated with a Group (e.g., a Group with read access to the entire MIB tree, but with only write access to certain...
NMS packages. SNMP v2 Traps All S4224 SNMP Trap messages conform to SNMPv2 MIB RFC-2573. See the “Supported MIBs” section on page Error! Bookmark not defined. for information on support for public (standard) and private MIBs.
Transition Networks S4224 Web User Guide SNMP System Configuration The default Configuration > Security > Switch > SNMP > System page is shown below. Note that the SNMP parameters displayed will vary depending on the SNMP Trap version selected. The Configuration > Security > Switch > SNMP > System parameters are explained below.
Transition Networks S4224 Web User Guide Engine ID Indicates the SNMPv3 engine ID. The string must contain an even number (in hexadecimal format) with number of digits between 10 and 64, but all-zeros and all-'F's are not allowed (e.g., 800007e5017f000001). Changing the Engine ID clears (deletes) all original local users. This field is grayed out unless ‘SNMP V3’...
Transition Networks S4224 Web User Guide Trap Config Name Indicates which trap Configuration's name for configuring. The allowed string length is 1 to 32, and the allowed content is ASCII characters from 33 to 126. Trap Mode Sets the SNMP trap mode operation. The valid selections are: Enabled: Enable SNMP trap mode operation.
Transition Networks S4224 Web User Guide Trap Inform Retry Times Sets the SNMP trap inform retry times. Not configurable in SNMP v1 mode. The valid range is 0 - 255. The default is 5. Trap Probe Security Engine ID Sets the SNMP V3 trap probe security engine ID mode of operation. The valid values are: Enabled: Enable SNMP trap probe security engine ID mode of operation (default).
Transition Networks S4224 Web User Guide Switch Indicates that the Switch group's traps. Possible traps are: STP: Enable/disable STP trap. RMON: Enable/disable RMON trap. Specific Trap Event Configuration If you select the ‘specific’ radio button for the SNMP Trap Events ‘Link up’, ‘Link down’, and ‘LLDP’, the port-specific table displays.
Page 76
Transition Networks S4224 Web User Guide Messages Message: The value of “Trap Destination Address’ is 0.0.0.0. Do you want to proceed anyway? Message: After saving configuration, remember select the correct trap security name Recovery: 1. Click the OK button to clear the message. 2. Enter the parameter as described above.
Transition Networks S4224 Web User Guide SNMPv3 Community Configuration Configure SNMPv3 community table on this page from the Configuration > Security > Switch > SNMP > Communities menu path. The entry index key is Community. SNMP V1 and V2c use a community string match for authentication.
Transition Networks S4224 Web User Guide SNMPv3 User Configuration Configure SNMPv3 user table on this page from the Configuration - Security - Switch - SNMP > User menu path. The entry index keys are Engine ID and User Name. The USM is supported per standard with a variety of user access levels and privacy protocols.
Transition Networks S4224 Web User Guide Authentication Protocol Indicates the authentication protocol that this entry should belong to. Possible authentication protocols are: None: No authentication protocol. MD5: An optional flag to indicate that this user uses MD5 authentication protocol. SHA: An optional flag to indicate that this user uses SHA authentication protocol.
Transition Networks S4224 Web User Guide SNMPv3 Group Configuration Configure SNMPv3 group table on this page from the Configuration > Security > Switch > SNMP > Group menu path. The entry index keys are Security Model and Security Name. SNMP v3 configuration involves setting up SNMP v3 Users, Groups, and Views. SNMP Groups are basically access control policies to which users can be added.
Transition Networks S4224 Web User Guide SNMPv3 Views Configuration Configure SNMPv3 view table on this page from the Configuration > Security > Switch > SNMP > Group menu path. The entry index keys are View Name and OID Subtree. SNMP v3 configuration involves setting up SNMP v3 Users, Groups, and Views. SNMP MIB Views are defined lists of objects within a MIB that can be used to control which parts of a MIB can be accessed by Users belonging to the SNMP Group associated with that particular View.
Transition Networks S4224 Web User Guide SNMPv3 Access Configuration Configure the SNMPv3 access table on this page from the Configuration > Security > Switch > SNMP > Access menu path. The entry index keys are Group Name, Security Model and Security Level.
Page 83
Transition Networks S4224 Web User Guide Buttons Add New Entry: Click to add a new access entry to the table. Add the Group Name, Security Model, Security Level, Read View Name, and Write View Name as described above. Save: Click to save changes.
Configuration > Security > Switch > RMON Configure RMON Statistics, History, Alarms, and Events from the Configuration > Security > Switch > RMON menu path. The S4224 RMON (Remote Network Monitoring) function supports the monitoring and protocol analysis of a LAN per IETF RFC 1271.
Transition Networks S4224 Web User Guide RMON > History The Configuration > Security > Switch > RMON > History menu path displays the RMON History Configuration table. Configure RMON History table on this page. The entry index key is ID.
Page 86
Transition Networks S4224 Web User Guide Buttons Add New Entry: Click to add a new community entry to the table. Enter the ID, Data Source, Interval, Buckets, and Buckets Granted parameters. Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values.
Transition Networks S4224 Web User Guide RMON > Alarm The Configuration > Security > Switch > SNMP > RMON > Alarm menu path displays the RMON Alarm Configuration table. Configure RMON Alarm table on this page. The entry index key is ID.
Page 88
Transition Networks S4224 Web User Guide Sample Type The method of sampling the selected variable and calculating the value to be compared against the thresholds, possible sample types are: Absolute: Get the sample directly. Delta: Calculate the difference between samples (default).
Transition Networks S4224 Web User Guide RMON > Event The Configuration > Security > Switch > SNMP > RMON > Event menu path displays the RMON Alarm Configuration table. Configure RMON Event table on this page. The entry index key is ID.
Page 90
Transition Networks S4224 Web User Guide An RMON Event Configuration table with four entries is shown below (IDs 1-4). Note that you can monitor the related RMON Statistics, History, Alarm, and Event data from the Monitor > Security > Switch > RMON > Event menu path.
System Configuration Mode Indicates if Limit Control is globally enabled or disabled on the S4224. If globally disabled, other modules may still use the underlying functionality, but limit checks and corresponding actions are disabled. Aging Enabled If checked, secured MAC addresses are subject to aging as discussed under ‘Aging Period’...
The maximum number of MAC addresses that can be secured on this port. Enter a number from 1 - 1024. If this limit is exceeded, the corresponding action is taken. The S4224 is "born" with a total number of MAC addresses from which all ports draw whenever a new MAC address is seen on a Port Security-enabled port.
Page 93
There are three ways to re-open the shutdown port: 1) Boot the S4224. 2) Disable and re-enable Limit Control on the port or the S4224, or 3) Click the Reopen button. Trap & Shutdown: If ‘Limit’ + 1 MAC addresses is seen on the port, both the "Trap" and the "Shutdown"...
MAC-based authentication less secure than 802.1X authentication. IEEE 802.1X Port-based Network Access Control provides a standard for authenticating and authorizing devices attached to a LAN port. Generally, IEEE 802.1X is port-based; however, the S4224 also supports MAC-based network access control.
S4224 Web User Guide NAS System Configuration Mode Indicates if NAS is globally enabled or disabled on the S4224. If globally disabled, all ports are allowed forwarding of frames. Reauthentication Enabled If checked, successfully authenticated supplicants/clients are reauthenticated after the interval specified by the Reauthentication Period.
Page 96
Transition Networks S4224 Web User Guide In MAC-based Auth. mode, the switch will ignore new frames coming from the client during the hold time. The Hold Time can be set to a number between 10 and 1000000 seconds. RADIUS-Assigned QoS Enabled RADIUS-assigned QoS provides a means to centrally control the traffic class to which traffic coming from a successfully authenticated supplicant is assigned on the switch.
S4224 Web User Guide NAS Port Configuration The table has one row for each S4224 port and a number of columns, which are explained below. Port The port number for which the configuration below applies. The * in the Port column acts as a ‘wild card’...
Page 98
Transition Networks S4224 Web User Guide more than one supplicant is connected to a port, the one that comes first when the port's link comes up will be the first one considered. If that supplicant doesn't provide valid credentials within a certain amount of time, another supplicant will get a chance.
Page 99
Transition Networks S4224 Web User Guide RADIUS attributes used in identifying a QoS Class: The User-Priority-Table attribute defined in RFC4675 forms the basis for identifying the QoS Class in an Access-Accept packet. Only the first occurrence of the attribute in the packet will be considered, and to be valid, it must follow this rule: •...
Page 100
Transition Networks S4224 Web User Guide VLAN. The interval between transmissions of EAPOL Request Identity frames is configured with ‘EAPOL Timeout. If Allow Guest VLAN if EAPOL Seen’ enabled, the port will now be placed in the Guest VLAN. If disabled, the switch will first check its history to see if an EAPOL frame has previously been received on the port (this history is cleared if the port link goes down or the port's ‘Admin State...
Page 101
Transition Networks S4224 Web User Guide Example In the sample Configuration > Security > NAS setup below, Port 3 shows “Single 802.1X”, RADIUS- assigned QoS disabled / VLAN disabled, Guest VLAN enabled, Authorized port state, with “Reauthenticate” and “Reinitialize” restart enabled.
Access Controls Lists The S4224 can ‘peek’ into the frames at line rate and is capable of deep packet inspection; this ability gives a wide range of access controls. The rules or the access control lists can look at any field in the Layer 2 to Layer 4 headers to make the decision of allowing, discarding, mirroring, logging or even shutdown the port that the frame came through.
Transition Networks S4224 Web User Guide Port The logical port for the settings contained in the same row. The * in the Port column acts as a ‘wild card’ character which causes the selections in this row to be applied to all other rows in the table for which this selection is valid.
Page 104
Transition Networks S4224 Web User Guide Disabled: To close ports by changing the volatile port configuration of the ACL user module. The default value is " Enabled ". Counter A count of the number of frames that match this ACE. This is a read only field.
S4224 Web User Guide ACL Rate Limiter Configuration Configure the rate limiter for the ACL of the S4224 from the Configuration > Security > Network > ACL > Rate Limiters menu path. The Configuration > Security > Network > ACL > Rate Limiters page parameters are explained below.
The Configuration > Security > Network > ACL > Access Control List menu path displays the Access Control List Configuration table, which is made up of the ACEs defined on this S4224. Each row describes the ACE that is defined. The maximum number of ACEs is 512 on each S4224.
Transition Networks S4224 Web User Guide Rate Limiter Indicates the rate limiter number of the ACE. The allowed range is 1 to 16. When Disabled is displayed, the rate limiter operation is disabled. Port Redirect Indicates the port redirect operation of the ACE. Frames matching the ACE are redirected to the port number.
Page 108
Transition Networks S4224 Web User Guide Ingress Port Select the ingress port for which this ACE applies. All: The ACE applies to all port. Port n: The ACE applies to this port number, where n is the number of the switch port.
Page 109
Transition Networks S4224 Web User Guide Disabled: Frames matching the ACE are not logged. Note: The logging feature only works when the packet length is less than 1518 (without VLAN tags) and the System Log memory size and logging rate is limited.
Page 110
Transition Networks S4224 Web User Guide When you click the button to edit an existing ACE row, the ACE row edit screen displays to let you edit the above parameters for an existing ACE entry. The parameters displayed depend on the config selections. For example, the config screen above...
Page 111
Transition Networks S4224 Web User Guide The configuration screen below displays if you select Frame Type = The configuration screen below displays if you select Frame Type = IPv4 33558 Rev. C https://www.transition.com Page 111 of 669...
Page 112
Transition Networks S4224 Web User Guide The configuration screen below displays if you select Frame Type = IPv6 The various ACL parameters are explained below. 33558 Rev. C https://www.transition.com Page 112 of 669...
Transition Networks S4224 Web User Guide ACE Configuration Parameters The ACE Configuration parameters let you configure the Access Control List Configuration table parameters as described earlier in this section. MAC Parameters SMAC Filter Specify the source MAC filter for this ACE. (Only displayed when the frame type is Ethernet Type or ARP.)
Transition Networks S4224 Web User Guide VLAN Parameters VLAN ID Filter Specify the VLAN ID filter for this ACE. Any: No VLAN ID filter is specified. (VLAN ID filter status is "don't- care".) Specific: If you want to filter a specific VLAN ID with this ACE, choose this value. A field for entering a VLAN ID number displays.
Transition Networks S4224 Web User Guide Network: Sender IP filter is set to Network. Specify the sender IP address and sender IP mask in the SIP Address and SIP Mask fields that appear. Sender IP Address When "Host" or "Network" is selected for the sender IP filter, you can enter a specific sender IP address in dotted decimal notation.
Transition Networks S4224 Web User Guide Specify whether frames can hit the action according to their ARP/RARP hardware address space (HRD) settings. 0: ARP/RARP frames where the HLD is not equal to Ethernet (1). 1: ARP/RARP frames where the HLD is equal to Ethernet (1).
Page 117
Transition Networks S4224 Web User Guide able to match this entry. Any: Any value is allowed ("don't-care"). IP Option Specify the options flag setting for this ACE. No: IPv4 frames where the options flag is set must not be able to match this entry.
Transition Networks S4224 Web User Guide IPv6 Parameters The IPv6 parameters can be configured when Frame Type "IPv6" is selected. Next Header Filter Specify the IPv6 next header filter for this ACE. Any: No IPv6 next header filter is specified ("don't-care").
Transition Networks S4224 Web User Guide ICMP Parameters ICMP Type Filter Specify the ICMP filter for this ACE. Any: No ICMP filter is specified (ICMP filter status is "don't-care"). Specific: If you want to filter a specific ICMP filter with this ACE, you can enter a specific ICMP value.
Transition Networks S4224 Web User Guide TCP Parameters Source Port Filter Specify the TCP/UDP source filter for this ACE. Any: No TCP/UDP source filter is specified (TCP/UDP source filter status is "don't-care"). Specific: If you want to filter a specific TCP/UDP source filter with this ACE, you can enter a specific TCP/UDP source value.
Page 121
Transition Networks S4224 Web User Guide TCP SYN One of several TCP flag names used only when filtering TCP (urg, ack, psh, rst, syn, and fin). Specify the TCP "Synchronize sequence numbers" (SYN) value for this ACE. 0: TCP frames where the SYN field is set must not be able to match this entry.
Transition Networks S4224 Web User Guide UDP Parameters Source Port Filter Specify the TCP/UDP source filter for this ACE. Any: No TCP/UDP source filter is specified (TCP/UDP source filter status is "don't-care"). Specific: If you want to filter a specific TCP/UDP source filter with this ACE, you can enter a specific TCP/UDP source value.
Transition Networks S4224 Web User Guide Ethernet Type Parameters The Ethernet Type parameters can be configured when Frame Type "Ethernet Type" is selected. EtherType Filter Specify the Ethernet type filter for this ACE. Any: No EtherType filter is specified (EtherType filter status is "don't-care").
Bandwidth Profile using ACE (Access Control Entry) Apart from MEF specified layer-2 services, the S4224 can associate the bandwidth profile parameters of < CIR, CBS, EIR, EBS, CM, CF> with any kind of traffic flow. The web interface provides the option of Layer 2 to Layer 4 flows to be associated with a bandwidth profile.
Transition Networks S4224 Web User Guide IP Source Guard Configuration IP Source Guard is a security feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host.
Transition Networks S4224 Web User Guide IP Source Guard > Configuration Here you can configure IP Source Guard Mode and Port Mode, and translate all dynamic entries to static entries for both ARP Inspection and Dynamic ARP Inspection. It is also possible to add a new entry to the Static ARP Inspection table and/or IP Source Guard by specifying the Port, VLAN ID, MAC address, and IP address for the new entry.
Transition Networks S4224 Web User Guide IP Source Guard > Static Table The default Static IP Source Guard Table displays no saved entries. When you click the Add New Entry button, initial entry fields display. The Static IP Source Guard Table parameters are described below.
Page 128
Transition Networks S4224 Web User Guide Example The Static IP Source Guard Table shown below shows four new saved entries. The example above has Port 1 with two entries with the same VLAN ID, different IP Addresses, and different MAC address. Port 3 has two entries for two different VLAN IDs with the same IP Address, and the same MAC address.
Transition Networks S4224 Web User Guide ARP Inspection Configuration ARP Inspection is a security feature. Several types of attacks can be launched against a host or devices connected to Layer 2 networks by "poisoning" the ARP caches. The ARP Inspection feature is used to block such attacks.
Page 130
Transition Networks S4224 Web User Guide Permit: Log permitted entries. ALL: Log all entries. Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Translate dynamic to static: Click to translate all dynamic entries to static entries.
Transition Networks S4224 Web User Guide VLAN Configuration The Configuration > Security > Network > ARP Inspection > VLAN Configuration menu path provides ARP Inspection related configuration. ARP Inspection is a security feature. Several types of attacks can be launched against a host or devices connected to Layer 2 networks by "poisoning" the ARP caches.
Transition Networks S4224 Web User Guide Static ARP Inspection The Configuration > Security > Network > ARP Inspection > Static Table menu path provides the default Static ARP Inspection rules. The switch supports a maximum of 256 rules. Click the Add New Entry button to display the entry table.
Page 133
Transition Networks S4224 Web User Guide Example The Static ARP Inspection Table shown below shows three saved entries. Note that you can create multiple entries and then Save them in one Save operation. You can also cut and paste information between fields. Use the keyboard Tab key to move from one field to the next.
Transition Networks S4224 Web User Guide Dynamic ARP Inspection The Configuration > Security > Network > ARP Inspection > Dynamic Table menu path displays the Dynamic ARP Inspection Table. The Dynamic ARP Inspection Table contains up to entries, and is sorted first by port, then by VLAN ID, then by MAC address, and then by IP address.
Page 135
Transition Networks S4224 Web User Guide Buttons Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Refresh: Refreshes the displayed table starting from the input fields. Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values.
Transition Networks S4224 Web User Guide AAA Security Configuration This page lets you configure the AAA (Authentication, Authorization and Accounting) Servers. You can configure the optional RADIUS and/or TACACS+ servers from the Configuration > Security > AAA menu path. RADIUS (Remote Authentication Dial In User Service) networking protocol provides centralized access, authorization and accounting management for computers to connect and use a network service.
Transition Networks S4224 Web User Guide Config > Security > AAA > RADIUS The RADIUS Server Configuration page lets you configure RADIUS Global and Server configuration. Click the Add New Server button to display the new RADIUS server config parameters.
Transition Networks S4224 Web User Guide NAS-IP-Address (Attribute 4) The IPv4 address to be used as attribute 4 in RADIUS Access-Request packets. If this field is left blank, the IP address of the outgoing interface is used. Must be a valid IP v4 address in dotted decimal notation (“x.y.z.w”), where x, y, z, and w are decimal numbers between 0 and 255.
Transition Networks S4224 Web User Guide Config > Security > AAA > TACACS+ This page lets you configure the TACACS+ server(s) and global parameters. Click the Add New Server button to add an empty row is added to the table.
Transition Networks S4224 Web User Guide Port The TCP port to use on the TACACS+ server for authentication. Timeout This optional setting overrides the global timeout value. Leaving it blank will use the global timeout value. This optional setting overrides the global key. Leaving it blank will use the global key.
For best traffic distribution among LAG member ports, enable all six contributions to the AC. Each LAG can consist of up to 16 member ports. Any quantity of LAGs may be configured for the S4224 (only limited by the number of device ports). To configure a proper traffic distribution, the ports within a LAG must use the same link speed.
Transition Networks S4224 Web User Guide Static Aggregation This page is used to configure the Aggregation hash mode and the aggregation group from the Configuration > Aggregation > Static menu path. Aggregation involves using multiple ports in parallel to increase the link speed beyond the limits of a port, and to increase the redundancy for higher availability (aka ‘Port Aggregation’...
Port Members Each S4224 port is listed for each group ID. Select a radio button to include a port in an aggregation, or clear the radio button to remove the port from the aggregation. By default, no ports belong to any aggregation group.
Page 144
Recovery: Verify that all ports are FDX and same speed. The S4224 does not allow ports with different speeds and half duplex to be aggregated. 1. At Configuration > Ports > Configuration, configure Ports at identical speeds and also as Full Duplex.
The S4224 supports Link aggregation per IEEE 802.1AX-2008. The Link aggregation supports several physical links bundled into a single logical link for resiliency and load sharing. The S4224 uses LACP PDUs to negotiate with peer devices and to exchange information about the links to be bundled automatically when enabled on the physical port.
Page 146
Port The S4224 port number. The * in the Port column acts as a ‘wild card’ character which causes the selections in this row to be applied to all other rows in the table for which this selection is valid.
Page 147
Transition Networks S4224 Web User Guide Role The Role shows the LACP activity status. The Active will transmit LACP packets each second, while Passive will wait for a LACP packet from a partner (i.e., ‘speak if spoken to’). The default is Active.
802.3ah and also Flow OAM requirements from IEEE 802.1ag as well as the IEEE standards, ITU-T G.1731 and ITU-T G.8021. The S4224 supports Point-to-point link level OAM per 802.3ah to monitor the link operations in both Active and Passive mode. Mechanisms to support the following are implemented: 1.
OAM > Port Settings menu path. Port The S4224 port number. Click on a specific port number in the table to display that port’s ‘Detailed Link OAM Status’. The * in the Port column acts as a ‘wild card’ character which causes the selections in this row to be applied to all other rows in the table for which this selection is valid.
Page 150
S4224 Web User Guide MIB Retrieval Support Controls whether the MIB Retrieval Support is enabled for the S4224 port. On enabling MIB retrieval support, the DTE supports polling of various Link OAM based MIB variables' contents. Note that if MIB Retrieval Support is enabled, ‘Loopback Operation’ must be disabled. If both are enabled, the message “OAM Error - Error while configuring the OAM loopback”...
The Link Event Configuration parameters are explained below. Port x The S4224 port number. The port select box determines which port is affected by clicking the buttons. The * in the Port column acts as a ‘wild card’ character which causes the selections in this row to be applied to all other rows in the table for which this selection is valid.
Page 152
Transition Networks S4224 Web User Guide generated if the number of errored frame seconds is equal to or greater than the specified threshold for that period. An errored frame second is a one second interval wherein at least one frame error was detected.
Transition Networks S4224 Web User Guide Detailed Link OAM Status After a ‘Save’, at the Link OAM Port Configuration page, click on a linked Port number in the “Port” column to display that particular port’s “Detailed Link OAM Status’ information.
Page 154
Transition Networks S4224 Web User Guide MTU Size Represents the largest OAMPDU, in octets, supported by the DTE. This value is compared to the remote’s Maximum PDU Size and the smaller of the two is used (e.g., 1500). Multiplexer State When Forwarding displays, the device is forwarding non-OAMPDUs to the lower sublayer.
The Configuration > Loop Protection menu path lets you view and/or change the current global and port-level Loop Protection configuration. Note: If you will be using the S4224 Loop Protection function, enable Loop Protection here, both globally and at the port level, as one of the first overall configuration steps.
Page 156
The switch port number of the port. Note that loop protection is not supported on the MGMT/data port. Enable Controls whether loop protection is enabled on this S4224 port. Action Configures the action to be performed when a loop is detected on a port. The valid Actions are: Sets the action to be performed when a loop is detected on a port.
802.1D for STP, 802.1w for RSTP and 802.1s for MSTP. The S4224 can act in the role of a root bridge or as a designated bridge by the process of election. The priorities for the bridge instance that is used in BPDU frames can be configured. For MSTP, each MSTI (Multiple Spanning Tree Instance) priority can be configured for the Common and Internal Spanning Tree (CIST) instance.
Bridge Settings S4224 STP Bridge configuration is done from the Configuration > Spanning Tree > Bridge Settings menu path. This page lets you configure STP system settings, which are used by all S4224 STP Bridge instances. Basic Settings Protocol Version The STP protocol version setting.
The bridge priority plus the MSTI instance number, concatenated with the 6-byte MAC address of the S4224 forms a Bridge Identifier. For MSTP operation, this is the priority of the CIST (Common and Internal Spanning Tree).
Page 160
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. 33558 Rev. C https://www.transition.com Page 160 of 669...
Transition Networks S4224 Web User Guide MSTI Mapping MSTI (Multiple Spanning Tree Instance) configuration is done from the Configuration > Spanning Tree > MSTI Mapping menu path. MSTP enables the grouping and mapping of VLANs to different spanning tree instances. An MSTI (MST Instance) is a particular set of VLANs that use the same spanning tree.
Page 162
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. 33558 Rev. C https://www.transition.com Page 162 of 669...
Sets the bridge priority. Lower numeric values have better priority. The bridge priority plus the MSTI instance number, concatenated with the 6-byte S4224 MAC address forms a Bridge Identifier. Select 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, or 61440.
Port The S4224 port number of the logical STP port. The * in the Port column acts as a ‘wild card’ character which causes the selections in this row to be applied to all other Ports (rows) in the table for which this selection is valid.
Transition Networks S4224 Web User Guide Path Cost Controls the path cost incurred by the port (dropdown and entry field). The Auto setting will set the path cost as appropriate by the physical link speed, using the 802.1D recommended values. This is the default setting.
Page 166
Transition Networks S4224 Web User Guide BPDU Guard is provided as part of the STP Configuration advanced global bridge settings. It controls whether a port explicitly configured as Edge will disable itself upon reception of a BPDU. The port will enter the error-disabled state, and will be removed from the active topology.
MSTI port configuration options: This page contains MSTI port settings for physical and aggregated ports. Port The S4224 port number of the corresponding STP CIST (and MSTI) port. Path Cost Controls the path cost incurred by the port. The Auto setting will set the path cost as appropriate by the physical link speed, using the 802.1D recommended values.
Page 168
Transition Networks S4224 Web User Guide Using the Specific setting, a user-defined value can be entered. The path cost is used when establishing the active topology of the network. Lower path cost ports are chosen as forwarding ports in favor of higher path cost ports. Valid values are 1 to 200,000,000.
64 Profiles with at maximum 128 corresponding rules for each. Global Profile Mode This dropdown lets you Enable/Disable the Global IPMC Profile. When enabled, the S4224 starts to do filtering based on the profile settings only. When you click the Add New IPMC Profile button the “IPMC Profile [IPMCaddr1]Rule Settings (In Precedence Order)”...
Transition Networks S4224 Web User Guide When you add and save a new IPMC profile, click the Navigate icon to display the Profile table shown below: The Profile table parameters are described below. > Profile Table The “IPMC Profile Rule Settings Table” page provides the filtering rule settings for a specific IPMC profile.
Page 171
Transition Networks S4224 Web User Guide Rule Management Buttons You can manage rules and the corresponding precedence order by using these buttons: : Insert a new rule before the current entry of rule. : Delete the current rule entry. : Moves the current entry of rule up in the list.
Transition Networks S4224 Web User Guide > Address Entry The Configuration > IPMC Profile > Address Entry menu path displays the “IPMC Profile Address Configuration” page. When you click the Add New Address (Range Entry” button, the editable “IPMC Profile Address Configuration”...
Page 173
Transition Networks S4224 Web User Guide IPMC Profile > Address Entry Example Messages Please input valid IPv4/IPv6 multicast start address for <entry name> Enter valid starting and ending IPv4/IPv6 Multicast Group Addresses. http://www.iana.org/assignments/multicast-addresses/multicast-addresses.xhtml for valid address information. 33558 Rev. C https://www.transition.com...
Page 174
Transition Networks S4224 Web User Guide IPMC Parameters Summary Configurable Parameter Allowed Range Default Global Profile Mode Enabled/Disabled Disabled Profile name Up to 16 characters blank Profile description Up to 64 characters blank An address entry can be created by specifying a name and a Start and End valid IPv4/IPv6 Multicast address.
Transition Networks S4224 Web User Guide MVR Configuration This page provides MVR related configurations from the Configuration > MVR menu path. You can view Statistics, MVR Channel Groups, and MVR SFM Information from the Monitor > MVR menu path. Most of the settings are global, whereas the Immediate Leave and MVR Port-Role configuration is related to the current selecting stack unit, as reflected by the page header.
Page 176
Transition Networks S4224 Web User Guide MVR VID Specify the Multicast VLAN ID. Caution: MVR source ports are not recommended to be overlapped with management VLAN ports. MVR Name MVR Name is an optional attribute to indicate the name of the specific MVR VLAN. Maximum length of the MVR VLAN Name string is 16.
Transition Networks S4224 Web User Guide Port The logical port for the settings. Port Role Configure an MVR port of the designated MVR VLAN as one of the following roles. Inactive: The designated port does not participate MVR operations. Source: Configure uplink ports that receive and send multicast data as source ports. Subscribers cannot be directly connected to source ports.
The S4224 also supports IGMP/MLD snooping at VLAN levels. A maximum of 64 VLANs can be chosen for IGMP snooping. Typically the router is the IGMP querier but an option to enable IGMP querier on each VLAN is provided as well on this device.
IGMP snooping allows the S4224 dynamically determine which hosts connected to a particular VLAN in the switch need to receive a particular multicast transmission. The S4224 basically listens (snoops) to the various IGMP messages (e.g., ‘Query’ or ‘Leave’) and other multicast protocol transmissions. It then dynamically determines which egress ports are associated with each multicast transmission.
Page 180
When you enable IGMP fast-leave processing, the S4224 immediately removes a port when it detects an IGMP v2 leave message on that port. Throttling Select unlimited or a value from 1 - 10 to limit the number of multicast groups to which an S4224 port can belong. The default is unlimited. 33558 Rev. C https://www.transition.com...
Page 181
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. 33558 Rev. C https://www.transition.com Page 181 of 669...
Querier Address Define the IPv4 address as source address used in IP header for IGMP Querier election. When the Querier address is not set, the S4224 uses the IPv4 management address of the IP interface associated with this VLAN. When the IPv4 management address is not set, the S4224 uses the first available IPv4 management address.
Page 183
Transition Networks S4224 Web User Guide Compatibility Select IGMP-Auto, Forced IGMPv1, Forced IGMPv2, or Forced IGMPv3. Compatibility is maintained by hosts and routers taking appropriate actions depending on the versions of IGMP operating on hosts and routers within a network. The default value is IGMP-Auto.
Page 184
Transition Networks S4224 Web User Guide Buttons Refresh: Refreshes the displayed table starting from the "VLAN" input fields. |<<: Updates the table starting at the first VLAN Table entry (the entry with the lowest VLAN ID). >>: Updates the table, starting with the entry after the last entry currently displayed.
Transition Networks S4224 Web User Guide Port Filtering Profile From the Configuration > IPMC > IGMP Snooping > Port Filtering Profile menu path you can view and edit the IGMP Snooping Port Filtering Profile Configuration table. An IPMC (IP MultiCast) Profile is used to deploy the access control on IP multicast streams.
Transition Networks S4224 Web User Guide MLD Snooping The MLD Snooping menu provides for Basic Configuration, VLAN Configuration, and Port Group Filtering configuration from the sub-menus from the Configuration > IPMC > MLD Snooping menu path.. Multicast Listener Discovery for IPv6 (MLD) is used by IPv6 routers to discover multicast listeners on a directly attached link, much as IGMP is used in IPv4.
Page 187
Router Port Check to specify which ports act as router ports. A router port is a port on the S4224 that leads towards the Layer 3 multicast device or MLD querier. If an aggregation member port is selected as a router port, the whole aggregation will act as a router port.
Page 188
When you enable MLD fast-leave processing, the S4224 immediately removes a port when it detects an IGMP v2 leave message on that port. Throttling Used to limit the number of multicast groups to which a S4224 port can belong. Select unlimited or 1-10 multicast groups as the limit. The default is unlimited. Buttons Save: Click to save changes (required to be able to edit all fields).
Transition Networks S4224 Web User Guide VLAN Configuration From the Configuration > IPMC > MLD Snooping > VLAN Configuration menu path you can view and edit the MLD Snooping VLAN Configuration parameters. Click the Add New MLD VLAN button to display the MLD Snooping VLAN Configuration table.
Page 190
Transition Networks S4224 Web User Guide Compatibility Select MLD-Auto, Forced or Forced MLDv2. Compatibility is maintained by hosts and MLDv1, routers taking appropriate actions depending on the versions of MLD operating on hosts and routers within a network. The default compatibility value is MLD-Auto.
Page 191
Transition Networks S4224 Web User Guide Buttons Refresh: Refreshes the displayed table starting from the "VLAN" input fields. |<<: Updates the table starting from the first entry in the VLAN Table (i.e., the entry with the lowest VLAN >>: Updates the table, starting with the entry after the last entry currently displayed.
Transition Networks S4224 Web User Guide Port Filtering Profile From the Configuration > IPMC > MLD Snooping > Port Filtering Profile menu path you can view and edit the MLD Snooping Port Filtering Profile parameters. The Port Filtering Profile table columns are explained below.
Transition Networks S4224 Web User Guide L2CP Configuration This page displays current EVC L2CP configurations and lets you configure the settings. For each service, L2CP protocols are configured to ‘peer’, ‘forward’ or ‘discard’. Note that while L2CP configuration is performed from the Configuration > L2CP menu path, the L2CP command applies not just to Ethernet Services, but to all BPDU handling.
Transition Networks S4224 Web User Guide LLDP Configuration The S4224 Configuration > LLDP menu path lets you configure LLDP at the device level and at the port level. The Configuration > LLDP menu path also lets you configure LLDP-MED. LLDP Configuration From the Configuration >...
1/4 of the Tx Interval value. Valid values are 1 - 8192 seconds. The default is 2 seconds. Tx Reinit When a port is disabled, LLDP is disabled or the S4224 is rebooted, an LLDP shutdown frame is transmitted to the neighboring units, signaling that the LLDP information isn't valid anymore. Tx Reinit controls the amount of seconds between the shutdown frame and a new LLDP initialization.
Page 196
Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. The S4224 maintains LLDP port and protocol statistics and a table of neighbors that were discovered. See Monitor > LLDP for more information.
Transition Networks S4224 Web User Guide LLDP-MED Configuration From the Configuration > LLDP > LLDP-MED menu path you can view and edit the LLDP-MED parameters. LLDP-MED is an extension of IEEE 802.1ab and is defined by the telecommunication industry association (TIA-1057). This function applies to VoIP devices which support LLDP-MED.
Transition Networks S4224 Web User Guide times the fast start transmission would be repeated. The recommended value is 4 times, given that 4 LLDP frames with a 1 second interval will be transmitted, when an LLDP frame with new information is received.
Transition Networks S4224 Web User Guide Map Datum The Map Datum is used for the coordinates given in these options: WGS84: (Geographical 3D) - World Geodesic System 1984, CRS Code 4327, Prime Meridian Name: Greenwich. NAD83/NAVD88: North American Datum 1983, CRS Code 4269, Prime Meridian Name: Greenwich; The associated vertical datum is the North American Vertical Datum of 1988 (NAVD88).
Page 200
Transition Networks S4224 Web User Guide House no. House number (e.g., 21). House no. suffix House number suffix (e.g., A, ½). Landmark Landmark or vanity address (e.g., Columbia University). Additional location info Additional location info (e.g., South Wing). Name Name (residence and office occupant) (e.g., Flemming Jahn).
Transition Networks S4224 Web User Guide Emergency Call Service Emergency Call Service (e.g. E911 and others), such as defined by TIA or NENA. Emergency Call Service Emergency Call Service ELIN identifier data format is defined to carry the ELIN identifier as used during emergency call setup to a traditional CAMA or ISDN trunk-based PSAP.
Page 202
Transition Networks S4224 Web User Guide Policy ID ID for the policy. This is auto generated and shall be used when selecting the policies that shall be mapped to the specific ports. Application Type Intended use of the application types: 1.
Transition Networks S4224 Web User Guide DSCP DSCP value to be used to provide Diffserv node behaviour for the specified application type as defined in IETF RFC 2474. DSCP may contain one of 64 code point values (0 - 63). A value of 0 represents use of the default DSCP value as defined in IETF RFC 2475.
Transition Networks S4224 Web User Guide EPS Configuration The Ethernet (Linear) Protection Switch (EPS) instances are configured from the Configuration > EPS menu path. Linear Protection is implemented for maintaining connectivity via alternate path in case the current data path fails. Two or more parallel instances are configured between ports of a unit pair. Two of the paths are configured into an Ethernet Protection switching group as a pair of Working-Protecting instances.
Page 205
Transition Networks S4224 Web User Guide Architecture Select the linear protection switching architecture; either 1+1 protection switching or 1:1 protection switching architecture. 1+1: This will create a 1+1 EPS. The linear 1+1 protection switching architecture operates with either unidirectional or bidirectional switching. In a 1+1 architecture, a protection transport entity is used to protect the normal traffic signal.
Transition Networks S4224 Web User Guide EPS Configuration When you click on the ID of an EPS, its configuration page displays. For example, if you click on EPS ID 2 on the screen above, the EPS ID 2 configuration screen displays: This screen lets you configure the EPS Instance Data, Instance Configuration, and Instance Command parameters as well as display the current Instance State.
Transition Networks S4224 Web User Guide EPS Instance Configuration If configured, the possible Protection Types are: 1+1 Unidirectional, no APS communication. 1+1 Unidirectional with APS communication. 1+1 Bidirectional with APS communication. 1:1 Bidirectional with APS communication. Protection Type Select Unidirectional or Bidirectional protection mode: Unidirectional: EPS in the two ends can select traffic from different working/protecting flow.
Page 208
Transition Networks S4224 Web User Guide optimized (i.e., in terms of delay and resourcing) than the protection transport entity, it is better to revert and glitch the traffic when the working transport entity is repaired. In general, the choice of revertive / non-revertive will be the same at both ends of the protection group.
Page 209
A Lockout command on a resource makes the resource not available for protection of other resources. The specific S4224 Command dropdown selections are explained below. None: There is no active local command on this instance. This EPS is only created and has not yet been configured - is not active.
Page 210
Transition Networks S4224 Web User Guide EPS Instance State Protection State: displays the current EPS state per the State Transition Tables in the G.8031 standard. Disabled: Protection state currently disabled. NoReqW: Currently in No request (NR) on working state (lowest priority).
Transition Networks S4224 Web User Guide degree of interworking in spite of the mismatch, or Mismatches that do not prevent interworking. An example is the revertive / non-revertive mismatch. APS on working: Indicates whether the APS is received on the working flow. Displays a green dot for Up, or a red dot for Down.
Page 212
Transition Networks S4224 Web User Guide 1+1 Port Protection Two ports on a unit are paired with two ports on a Peer-Unit to create a Working-Protecting pair between the units. After the initialization of Protection Group, Both links are active and transmit data. When a link- failure is detected, the Protecting Link is used to continue data transmission.
Transition Networks S4224 Web User Guide MEP Configuration S4224 MEP (Maintenance Entity Group End Point) configuration is done from the Configuration > MEP menu path. A MEP (MEG End Point) is an endpoint in a Maintenance Entity Group (per ITU-T Y.1731).
Transition Networks S4224 Web User Guide ITU-T support is implemented by supporting the following features: 1. Continuity Check – is used for detecting loss of continuity between a MEP and its peer MEP(s). It can also detect unintended connection to other MEG (Maintenance Groups), unintended connection to peer MEP, unexpected period and more.
Page 215
Transition Networks S4224 Web User Guide The MEP Configuration page for MEP Instance 1 is shown below. The MEP parameters are described below. Delete This checkbox is used to mark a MEP for deletion in the next Save operation. Instance The ID of the MEP.
Page 216
S4224 Web User Guide Direction The S4224 MEP direction naming conventions include Down/Ingress and Up/Egress. Down/Ingress: This is an Ingress/Down MEP - monitoring ingress traffic on the 'Residence Port'. Up/Egress: This is an Egress/Up MEP - monitoring egress traffic on the 'Residence Port'.
Page 217
Transition Networks S4224 Web User Guide Buttons Add New MEP: Click to add a new MEP entry. Refresh: Click to refresh the page immediately. Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values.
Transition Networks S4224 Web User Guide MEP Instance Configuration When you click on the Instance of an MEP in the table, its configuration page displays. For example, if you click on 2 in the Instance column on the screen above, the MEP Instance 2...
Page 219
Transition Networks S4224 Web User Guide Format This is the configuration of the two possible Maintenance Association Identifier formats. ITU ICC: This is defined by ITU (Y1731 Fig. A3). 'Domain Name' is not used. 'MEG id' must be max. 13 characters.
Transition Networks S4224 Web User Guide cSSF Fault Cause indicating that server layer is indicating Signal Fail. aBLK The consequent action of blocking service frames in this flow is active. aTSF The consequent action of indicating Trail Signal Fail towards protection is active.
Transition Networks S4224 Web User Guide MEP Functional Configuration Continuity Check Continuity Check based on transmitting/receiving CCM PDU can be enabled/disabled. Continuity Check Messages (CCMs) are ‘heartbeat’ messages exchanged periodically between the MEPs in a service. Each MEP sends out multicast CCMs, and receives CCMs from all the other MEPs in the service (its ‘peer’...
Page 222
Transition Networks S4224 Web User Guide APS Protocol APS information is carried within the APS OAM PDU, which is one of a several Ethernet OAM PDUs. OAM PDU formats for each type of Ethernet OAM operation are as defined in Y.1731.
Transition Networks S4224 Web User Guide Fault Management Click the Fault Management button to view and configure the Fault Management (FM) of the current MEP Instance. Note that after a system reboot, the MEP PM and FM become disabled. The parameters are described in the following sections.
Transition Networks S4224 Web User Guide Loop Back Enable Loop Back based on transmitting/receiving LBM/LBR PDU can be enabled or disabled. Loop Back is automatically disabled when all 'To Send' LBM PDUs have been transmitted - waiting 5 seconds for all LBR from the end.
Transition Networks S4224 Web User Guide Loop Back State Transaction ID The transaction id of the first LBM transmitted. For each LBM transmitted (To Send) the transaction id in the PDU is incremented. Transmitted The total number of LBM PDU transmitted.
Page 226
Transition Networks S4224 Web User Guide Link Trace State Transaction ID The transaction ID is incremented for each LTM send. This value is inserted the transmitted LTM PDU and is expected to be received in the LTR PDU. Received LTR with wrong transaction id is ignored.
Page 227
Transition Networks S4224 Web User Guide Test Signal The Ethernet test signal function (ETH-Test) is used to perform one-way on-demand in-service or out-of- service diagnostics tests. This includes verifying bandwidth throughput, frame loss, bit errors, etc. When configured to perform such tests, a MEP inserts frames with ETH-Test information with specified throughput, frame size and transmission patterns.
Page 228
Transition Networks S4224 Web User Guide Test Signal State TX frame count The number of transmitted TST frames since the last 'Clear'. Note: The VOE checkbox must be checked under “Instance Configuration” in order for Test Signal TX frame count to display RX frame count The number of received TST frames since the last 'Clear'.
Transition Networks S4224 Web User Guide Client Configuration Only a Port MEP is able to be a server MEP with flow configuration. The Priority in the client flow is always the highest priority configured in the EVC. Domain The domain of the client layer flow.
Page 230
Transition Networks S4224 Web User Guide AIS (Alarm Indication Signal) Alarm Indication Signal (AIS) messages are used to rapidly notify MEPs when a fault is detected in the middle of a domain, in an event driven way. With AIS, MEPs can learn of a fault much sooner than if they rely on detecting a loss of continuity, etc.
Transition Networks S4224 Web User Guide Performance Monitoring Click the Performance Monitoring button to view and configure the current MEP Instance Performance Monitoring in terms of LM (Loss Measurement) and DM (Delay measurement). Note that after a system reboot, the MEP PM and FM become disabled.
Page 232
Transition Networks S4224 Web User Guide Loss Measurement Loss Measurement (LM) offers a way for operators to determine the amount of frame loss in an Ethernet network (e.g., over an EVC). Specifically, LM is the ratio between undelivered OAM frames and the total number of OAM frames transmitted during a specific time interval.
Page 233
Transition Networks S4224 Web User Guide Flow Counting Traffic (service frames) are counted per flow - all priority in one. Oam Counting Loss Measurement can count OAM frames in different ways. Y1731: Loss Measurement is counting OAM frames as service frames as described in ITU-T Y1731.
Page 234
Transition Networks S4224 Web User Guide Delay Measurement Delay Measurement (DM) can be used for measuring delay in a Carrier Ethernet network. The unit of measurement is the round trip delay of a frame, measured from its first transmitted bit, until the reception of its last bit.
Page 235
Transition Networks S4224 Web User Guide Flow: The frame delay calculated by the transmitting and receiving timestamps of initiators and remotes. Frame Delay = (RxTimeb-TxTimeStampf)-(TxTimeStampb-RxTimeStampf). The gap between transmitting 1DM/DMM PDU in 10 millisecond increments. The valid range is 10 to 65535 milliseconds.
Page 236
Transition Networks S4224 Web User Guide Delay Measurement State table For one-way ETH-DM, only the receiver MEP (on the remote system) collects ETH-DM statistics. One-way DM performs one-way ETH-DM, which is based on the difference between the time at which the initiator MEP sends a one-way ETH-DM delay measurement request (1DM) frame and the time at which the receiver MEP receives the frame.
Page 237
Transition Networks S4224 Web User Guide Delay Max. The maximum delay - since last 'clear'. Av Delay-Var Tot The average total delay variation - since last 'clear'. Av Delay-Var last N The average delay variation of the last n packets - since last 'clear'.
Page 238
Transition Networks S4224 Web User Guide Delay Measurement Bins A Measurement Bin is a counter that stores the number of delay measurements falling within a specified range, during a Measurement Interval. Measurement Bins for FD Configures the number of Frame Delay Measurement Bins per Measurement Interval.
Page 239
Transition Networks S4224 Web User Guide Delay Measurement Bins for IFDV A Measurement Bin is a counter that stores the number of delay measurements falling within a specified range, during a Measurement Interval. The IFDV is the Inter-Frame Delay Variation per MEF 10.2.
Transition Networks S4224 Web User Guide TLV Configuration Configuration of the OAM PDU TLV. Currently only TLV in the CCM is supported. Organization Specific - OUI First The transmitted first value in the OS TLV OUI field. Organization Specific - OUI Second The transmitted second value in the OS TLV OUI field.
Transition Networks S4224 Web User Guide OS TLV was received in the last received CCM PDU. CC Port Status - Value The last received value in the PS TLV Value field. CC Port Status - Last RX PS TLV was received in the last received CCM PDU.
Transition Networks S4224 Web User Guide Add a New Peer MEP Procedure A maximum of 5 Peer MEPs can be added to an instance by clicking the Add New Peer MEP button at Configuration > MEP. Only one peer MEP can be added per Save operation.
Page 243
Transition Networks S4224 Web User Guide Verify your new MEP peer configurations (e.g., Peer MEP IDs 0 and 1 shown below). Messages If the message “Peer Unicast MAC must be known to do HW based CCM on SW MEP” displays, click the OK button, then verify that hardware-based CCM is set on the (software) MEP.
Transition Networks S4224 Web User Guide Delete a Peer MEP Procedure Check an existing Peer MEP’s checkbox in the Delete column and then click the Save button. Verify that the Peer MEP was deleted from the table. Click the Refresh button if necessary.
Page 245
Transition Networks S4224 Web User Guide Message: Invalid number of peer’s for this configuration. Meaning: You enabled too many FM functions; only one is allowed at a time. Recovery: 1. Click the OK button to clear the webpage message. 2. Re-configure or disable all but one of the Fault Management functions (Loopback, Link Trace, Test Signal, Client Configuration , AIS, and/or LOCK).
Transition Networks S4224 Web User Guide ERPS Configuration S4224 ERPS (G.8032 Ethernet Ring Protection Switching) is configured from the Configuration > ERPS menu path. Ethernet Ring Protection is implemented as per the requirements in ITU-T.G.8032 specification. It uses the Continuity Check Message and other OAM frame formats as defined in ITU-T.Y.1731 (specification for Ethernet Operation, Administration and Maintenance-OAM).
Page 247
Transition Networks S4224 Web User Guide Port 0 APS MEP This is the Port 0 APS PDU handling MEP. Assign an integer value of 1-x. The Port 0 APS MEP and Port 1 APS MEP cannot be the same. Note that the number refers to the MEP instance number and not the MEP ID (which may or may not be the same).
Transition Networks S4224 Web User Guide transmitted, with a frequency of one message every five seconds. Typically, R-APS messages are transmitted on both ring ports. Major Ring ID This is the Major ring group ID for the interconnected sub-ring. It is used to send topology change updates on major ring.
Transition Networks S4224 Web User Guide This screen lets you configure the ERPS Instance Data, Instance Configuration, RPL Configuration, Sub- Ring Configuration, and Instance Command, and view the ERPS Instance State parameters. These parameters are explained below. ERPS Instance Data ERPS ID The ID of the new Protection group.
Transition Networks S4224 Web User Guide indicates that no Port 1 SF MEP is associated with this instance. Assign an integer value of 1-32. Port 0 SF MEP and Port 1 SF MEP cannot be the same. Note that the number refers to the MEP instance number and not the MEP ID (which may or may not be the same).
Page 251
Transition Networks S4224 Web User Guide Hold Off Time The timing value to be used to make persistent check on Signal Fail (SF) before switching. The Hold off timer valid range is 0 to 10 seconds in steps of 100 ms. The default is 0.
This dropdown lets you select the east port or west port as the RPL block. None: Nothing selected as the RPL block. Port0: This selects the East port of the S4224 in the ring as the RPL block. Port1: This selects the West port of the S4224 in the ring.
Transition Networks S4224 Web User Guide ERPS Instance Command Command A port (e.g., Port0 or Port1) can be administratively configured to be in either Manual switch or Forced switch state or None (neither Forced or Manual) from the Command dropdown, or you can Clear the active local administrative selection.
Page 254
Transition Networks S4224 Web User Guide Port 1 OK: State of West port is ok. SF: State of West port is Signal Fail. Transmit APS The transmitted APS according to the State Transition Tables in G.8032. Signal Fail (SF) is declared when ETH trail signal fail condition is detected.
Page 255
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Refresh: Click to refresh the page immediately. Auto-refresh: Click to automatically refresh the page every three seconds.
Ring Protection and MEP Configuration The S4224 lets you configure the RPL port so it can act in the role of Owner or Neighbor on that ring instance. The WTR time and Hold off timer serve the same purpose as EPS. The Guard timer on the EPRS instance is configurable and helps in ignoring aged R-APS messages that circulate around the ring.
Transition Networks S4224 Web User Guide ERPS VLAN Configuration VLAN config: click the VLAN Config link in the ERPS Instance Configuration table to display the related ERPS VLAN Configuration page. ERPS VLANs are used because Ethernet ring protection configured as a single instance only works at the physical level (adjacent nodes must be directly connected).
Ethernet ring. Each ERP instance is independent of other ERP instances that may be configured on the physical Ethernet ring. The S4224 implements the ITU G.8032 standard for ERPS, which uses the APS automatic protection protocol for protection in ring and interconnected ring topology.
Transition Networks S4224 Web User Guide ETH_FF functions on all Ethernet Ring Nodes. An APS protocol is used to coordinate the protection actions over the ring. Note: The SOAM MEP configuration must be successfully completed before configuring Ethernet Ring Protection Switching (ERPS) using the functions in this section. See “MEP...
Aging Configuration, MAC Table Learning, and Static MAC table Configuration. Switching of frames is based on the DMAC address contained in the frame. The S4224 builds up a table that maps MAC addresses to S4224 ports for knowing to which ports the frames should go, based on the DMAC (Destination MAC) address in the frame.
All S4224 learning and switching is based on the MAC forwarding and filtering database (FDB). The S4224 web interface provides a way to purge all dynamic-only or static and dynamic entries out of the FDB. The S4224 FDB can be configured with static MAC entries for filtering or forwarding. The static entries are not aged out and remain in the device even after a power cycle.
If selected, only static MAC entries are learned, all other frames are dropped. Note: Make sure that the link used for managing the S4224 is added to the Static Mac Table before changing to secure learning mode, otherwise the management link is lost and can only be restored by using another non-secure port or by connecting to the S4224 via the serial interface.
Page 263
Transition Networks S4224 Web User Guide Note: If you do not select any Port Members and then click the "Save" button, a message displays warning you that this will block the MAC address for all ports. If this is the configuration you want, click the OK button. Otherwise click the Cancel button and select one or more Port Members.
Transition Networks S4224 Web User Guide VLAN Translation Configuration The S4224 lets you configure VLAN translation (mapping) from the Configuration > VLAN Translation Configuration menu path. Here you can configure the Port to Group Mapping and the VID Translation Mapping functions.
Page 265
Transition Networks S4224 Web User Guide Refresh: Click to refresh the page immediately. Auto-refresh: Click to automatically refresh the page every three seconds. 33558 Rev. C https://www.transition.com Page 265 of 669...
Note: By default, each port is set to use the group with Group ID (GID) equal to the port number. For example, S4224 Port 1 is by default set to use the group with GID = 1. Indicates the VLAN of the mapping (i.e. 'source' VLAN). A valid VLAN ID ranges from 1 to 4095.
Page 267
Transition Networks S4224 Web User Guide Modification Buttons You can modify each VLAN Translation mapping in the table using the following buttons: : Edits the mapping row. : Deletes the mapping. : Adds a new mapping. Buttons Auto-refresh: Click to automatically refresh the page every three seconds.
S4224 Web User Guide VLANs Configuration The S4224 lets you configure VLANs from the Configuration > VLANs > VLANs menu path. Here you can configure the ‘VLAN Membership’ and the ‘Ports’ sub-menu functions. You can also configure VLAN Names from Configuration > VLANs > VLAN Names.
Transition Networks S4224 Web User Guide Ethertype for Custom S-ports This field specifies the ethertype/TPID (specified in hexadecimal) used for Custom S-ports. The setting is in force for all ports whose Port Type is set to S-Custom-Port. It takes effect on the egress side.
Page 270
Transition Networks S4224 Web User Guide On egress, frames classified to the Port VLAN do not get tagged if Egress Tagging configuration is set to untag Port VLAN. The Port VLAN is called an "Access VLAN" for ports in Access mode and “Native VLAN” for ports in Trunk or Hybrid mode.
Page 271
Transition Networks S4224 Web User Guide The field's syntax is identical to the syntax used in the Forbidden VLANs field. By default, a Trunk or Hybrid port will become member of all VLANs, and is therefore set to 1-4094. The field may be left empty, which means that the port will not become member of any VLANs.
Transition Networks S4224 Web User Guide VLAN Name Configuration The VLAN Name configuration for the selected switch unit can be monitored and modified at Configuration > VLANs > VLAN Names. Up to 4096 VLANs are supported. This page allows for adding and deleting VLANs as well as adding and deleting port members of each VLAN.
Page 273
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Refresh: Refreshes the displayed table starting from the "VLAN ID" input fields. |<<: Updates the table starting from the first entry in the VLAN Table (the entry with the lowest VLAN ID).
Figure 4. 802.1Q EtherTypes (excerpt from IEEE 802.1ad 2005) The S4224 can be an SVLAN bridge, C-bridge, or both bridge types, and the hardware can support inspection of both the tags. The S4224 can push and pop one or both tag types.
Transition Networks S4224 Web User Guide Figure 6. S-VLAN with multiple trunks (EPL service at 3 different UNIs) 2. Another case is shown below, with one S-Tag uplink or S-Tag trunk. Figure 7. S-VLAN with one trunk (Multiple UNI bundled at the Operator domain) 33558 Rev.
S4224 Web User Guide Private VLANs Configuration The S4224 lets you configure Private VLANs from the Configuration > Private VLANs menu path. Here you can configure the ‘PVLAN Membership’ and the ‘Port Isolation’ sub-menu functions. In a private VLAN, PVLANs provide layer 2 isolation between ports within the same broadcast domain.
Page 277
VLAN can be configured as needed. The allowed range for a private VLAN ID is the same as the S4224 port number range. Any values outside this range are not accepted, and a warning message appears. Click "OK" to discard the incorrect entry, or click "Cancel" to return to the editing and make a correction.
Transition Networks S4224 Web User Guide Port Isolation You can configure port isolation from the Configuration > Private VLANs > Port Isolation menu path. This page is used for enabling or disabling port isolation on ports in a Private VLAN. Port isolation offers isolation of that Port from the VLAN forwarding on the VLAN that it is a member of.
S4224 Web User Guide VCL (VLAN Control List) The Configuration > VCL (VLAN Control List) menu path lets you configure the S4224 for MAC-based VLAN mappings and Protocol-based VLAN mapping. A VCL is used for assigning a particular flow to a particular VLAN.
Page 280
Transition Networks S4224 Web User Guide Port Members A row of check boxes for each port is displayed for each MAC-based VLAN entry. To include a port in a MAC-based VLAN, check the box ( ). To remove or exclude the port from the MAC-based VLAN, make sure the box is unchecked ( ).
Protocol to Group This page lets you add new protocols to Group Name (unique for each Group) mapping entries and lets you view and delete already mapped entries for the S4224. At default, the table displays “No Group entry found!”.
Page 282
Transition Networks S4224 Web User Guide Value The valid value that you can enter in this text field depends on the option selected from the preceding ‘Frame Type’ selection menu. The criteria for the three Frame Types are explained below.
Page 283
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
The Configuration > VCL > Protocol-based VLAN > Group to VLAN menu path lets you configure the S4224 ‘Group Name to VLAN mapping table’ settings. This page lets you map an existing, configured Group Name to a VLAN for the selected switch. At default, the table displays “No Group entries”.
Page 285
Transition Networks S4224 Web User Guide Buttons Auto-refresh: Check this box to refresh the page automatically every 3 seconds. Refresh: Click to refresh the page immediately. Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values.
Transition Networks S4224 Web User Guide IP Subnet-based VLAN IP subnet-based VLAN entries can be configured from the Configuration > VCL > IP Subnet-based VLAN menu path. With this method, a VLAN membership is defined by the subnet to which a device's IP address belongs.
Page 287
Transition Networks S4224 Web User Guide The IP subnet to VLAN ID mapping entry is enabled when you click on "Save". The button can be used to undo the addition of new mappings. The maximum possible IP subnet to VLAN ID mappings are limited to 128.
Ethernet Services Configuration Configuration > Ethernet Services From the Configuration > Ethernet Services menu path you can configure S4224 Ethernet services in terms of ports, bandwidth profiles, EVCs (Ethernet Virtual Circuits) and ECEs (EVC Control Entries). These pages configure Ethernet Virtual Connections (EVCs) and their configurations using the ECEs.
Transition Networks S4224 Web User Guide Configuration > Ethernet Services > Ports This page lets you display and change current EVC port configuration settings. The Ethernet Services > Ports configuration settings are explained below. Port The logical port for the settings contained in the same row.
Transition Networks S4224 Web User Guide Configuration > Ethernet Services > Bandwidth Profiles This page displays current EVC ingress bandwidth profile configurations. The policers configured here can be used to limit the traffic received on UNI ports. A policer can limit the bandwidth of received frames.
Page 291
Transition Networks S4224 Web User Guide Policer Mode The colour mode of the bandwidth profile. The allowed values are: Coupled: Colour-aware mode with coupling enabled. Aware: Colour-aware mode with coupling disabled. Blind: Colour-blind mode. Rate Type The rate type of the bandwidth profile. The allowed values are: Data: Specify that this bandwidth profile operates on data rate.
Page 292
Transition Networks S4224 Web User Guide BWP Parameters Summary Parameter Valid Range Default Policer ID 1 to 128. Two policer IDs are reserved and cannot be changed. None (Readonly) Enabled or Disabled State Disabled MEF or Single Type Coupled or Aware...
Transition Networks S4224 Web User Guide Configuration > Ethernet Services > EVCs The Configuration > Ethernet Services > EVCs menu path displays current EVC configurations. The EVC settings can also be configured here. On this system, only Provider Bridge based EVCs are supported.
Transition Networks S4224 Web User Guide Configuration Prerequisites 1. E-LINE is supported; you must disable MAC Learning first for E-LINE support. 2. E-LAN is supported; you must remove each VLAN and enable MAC Learning for E-LAN support. Configuration > Ethernet Services > EVCs This menu path displays the EVC Control List Configuration table.
Page 295
Transition Networks S4224 Web User Guide The VLAN ID in the PB (provider bridging) network. It may be inserted in a C-tag, S-tag or S- custom tag depending on the NNI port VLAN configuration. The range is 0 - 4095.
Transition Networks S4224 Web User Guide Configuration > Ethernet Services > ECEs This menu path displays the EVC Control Entries (ECEs). You can add, edit, and delete ECEs here. The default ECE Control List Configuration page is shown below. The ECE Control List Configuration parameters are explained below.
Page 297
Transition Networks S4224 Web User Guide Frame Type The frame type for the ECE. The possible values are: Any: The ECE will match any frame type. IPv4: The ECE will match IPv4 frames only. IPv6: The ECE will match IPv6 frames only.
Page 298
Transition Networks S4224 Web User Guide Egress Outer Tag Mode The outer tag for nni-to-uni direction for the ECE. The possible values are: Enable: Enable outer tag for nni-to-uni direction for the ECE. Disable: Disable outer tag for nni-to-uni direction for the ECE.
Page 299
Transition Networks S4224 Web User Guide Buttons Auto-refresh: Check the checkbox to refresh the page automatically every three seconds. Refresh: Click to refresh the page. Remove All: Click to remove all ECEs. At the Confirm prompt, click the OK button to proceed or click the Cancel button to cancel.
Transition Networks S4224 Web User Guide ECE Configuration Page When you click a plus ) sign to add a new entry to the ECE listings, the ECE Configuration page displays. Configure the new ECE’s UNI Ports, UNI Matching, Actions, MAC Parameters, IPv4, IPv6, NNI Outer Tag, and/or NNI Inner Tag parameters as explained above.
Page 301
Transition Networks S4224 Web User Guide Inner Tag Type The tag type for matching the ECE. The possible values are: Any: The ECE will match both tagged and untagged frames. Untagged: The ECE will match untagged frames only. C-Tagged: The ECE will match custom tagged frames only.
Page 302
Transition Networks S4224 Web User Guide When "Specific" is selected for the VLAN ID filter, you can enter a specific value. The allowed value is 0 - 4095. When "Range" is selected for the VLAN ID filter, you can enter a specific range. The allowed range is 0 - 4095.
Page 303
Transition Networks S4224 Web User Guide DSCP Value When "Specific" is selected for the DSCP filter, you can enter a specific value. The allowed value is from 0 through 63. DSCP Range When "Range" is selected for the DSCP filter, you can enter a specific range. The allowed range is from 0 through 63.
Page 304
Transition Networks S4224 Web User Guide for entering a specific value displays. Discard: All received frames are discarded for the ECE. None: All received frames are forwarded for the ECE. EVC: The bandwidth profile for the specified EVC ID is used.
Page 305
Transition Networks S4224 Web User Guide Egress Inner Tag Type The inner type for the ECE determines whether an inner tag is inserted in frames forwarded to NNI ports. Possible values are: None: An inner tag is not inserted. C-tag: An inner C-tag is inserted.
Transition Networks S4224 Web User Guide Ethernet Services Application Example E-Line services are typically used to replace TDM private lines and use two dedicated UNI ports. It is the most common type of Ethernet Service type. The transport-oriented Ethernet Private Line service provides an interconnection between switching or routing equipment in a private data network.
Page 307
Transition Networks S4224 Web User Guide Subscribers with multiple sites that need to be on the same LAN would configure an E-LAN Service. In an Ethernet Private LAN service CE-VLAN ID and Class of Service preservation applies so typically no coordination with a Service Provider is needed.
Page 308
Transition Networks S4224 Web User Guide Note: MAC learning is enabled for EVCs with more than two ports so that source addresses are learned for frames matching the EVC. An Ethernet Private Tree service can give subscribers the opportunity to interconnect multiple sites to provide services other than those resembling a LAN.
Page 309
Transition Networks S4224 Web User Guide Configure EVC ECE 1 for UNI port GigabitEthernet 1/2. Tagged frames are matched with vid 0-1 with PCP 5 in OVC 5: (config)#evc ece 1 interface GigabitEthernet 1/2 outer-tag match type tagged vid 0-1 add pcp 5 evc 3 Configure EVC ECE 2 also for UNI port GigabitEthernet 1/2.
Page 310
Transition Networks S4224 Web User Guide Configure both ports GigabitEthernet 1/2 and 2.5GigabitEthernet 1/2 as S-ports. Allow both S-VLAN IDs 11 and 22 on these ports. In this configuration, OVC 5 is represented by OVC End Points 1 and 2 and OVC6 by OVC End Points 3 and 4.
Transition Networks S4224 Web User Guide Performance Monitor Configuration S4224 Performance Monitor configuration is performed from the Configuration > Performance Monitor menu path. Here you can set PM Session and Storage configuration and Transfer Mode parameters. PM Session and Storage Configuration Configure Perf Mon PM Session and storage from Configuration >...
Transition Networks S4224 Web User Guide PM Transfer Configuration Configure Perf Mon(PM) transfers from Configuration > Performance Monitor > Transfer Mode. The parameters are described below. Type The data type of performance monitor. PM Transfer Mode Configure the operation mode per system. Possible modes are: Enabled: Enable PM Transfer Mode.
Page 313
Transition Networks S4224 Web User Guide Scheduled Minutes Select one or more of the four 15 minute parts of an hour when PM data transfer will occur. 00:00 00:15 00:30 00:45 Default is none selected. Scheduled Offset It is possible to configure a fixed offset that is added to the scheduled transfer time.
3. Ingress bandwidth profile per Cos per EVC per UNI For options 2 and 3, the S4224 can provide an overall UNI bandwidth profile as well. Configuration is performed from the Ethernet Services > Bandwidth Policies menu path. The types are 1.
Figure 11. Example SLA for Bandwidth profiling QoS Configuration Sub-menus S4224 QoS configuration sub-menus include Port Classification, Port Policing, Queue Policing, Port Scheduler, Port Shaping, Port Tag Remarking, Port DSCP, DSCP-Based QoS, DSCP Translation, DSCP Classification, QoS Control List, and Storm Policing configuration.
Transition Networks S4224 Web User Guide Port Classification The Configuration > QoS > Port Classification menu path displays the QoS Ingress Port Classification page. This page lets you configure the basic QoS Ingress Classification settings for all switch ports. The displayed Port Classification settings are explained below.
Transition Networks S4224 Web User Guide Controls the default drop precedence level (DPL 0-3). All frames are classified to a drop precedence level. The default is DPL = 1. If the port is VLAN aware, the frame is tagged and Tag Class. is enabled, then the frame is classified to a DPL that is mapped from the PCP and DEI value in the tag.
Page 318
Transition Networks S4224 Web User Guide Example When you click the Disabled link in the Tag Class. column in a row for a port, the Tag Classification page displays for that port. Here you can: Set Tag Classification to Enabled or Disabled (the default is Disabled), ...
The Configuration > QoS > Port Policing menu path displays the QoS Ingress Port Policers table. This page allows you to configure the Policer settings for all S4224 ports. The policer can limit the bandwidth of received frames. It is located in front of the Ingress queue. From the default page, check an Enable checkbox to begin configuration of Rate and Unit for Queue 0.
The Configuration > QoS > Queue Policing menu path lets you configure the Queue Policer settings for all S4224 ports. Each policer can limit the bandwidth of received frames. A policer is located in front of the ingress queue. The default QoS Ingress Queue Policers page is shown below. From the default page, check an Enable checkbox to enable one or more Queue Policers starting at Queue 0.
Page 321
Transition Networks S4224 Web User Guide Example The screen below shows multiple Queue Policers configured for port 2. The configuration below shows Port 2 with Queues 0, 1, and 2 enabled and Queue 0 is set for a rate of 10 Mbps and Queues 1 and 2 are set for 100Mbps.
Transition Networks S4224 Web User Guide Port Scheduler The Configuration > QoS > Port Scheduler menu path displays the QoS Egress Port Schedulers table. Egress Scheduler and Shaper: Each port has an egress scheduler and a set of egress shapers.
Page 323
2. For any other queue Qn with cost Cn, set the corresponding weight Wn to Wn = Chighest / Cn. The Configuration > QoS > Port Scheduler menu path provides an overview of QoS Egress Port Schedulers for all S4224 ports. The displayed QoS Egress Port Schedulers settings are described below.
Page 324
Transition Networks S4224 Web User Guide When you click on the Port number in a row, the QoS Egress Port Scheduler and Shapers for that Port display (e.g., for Port 1 in the screen sample below). If Scheduler Mode is set to “6 Queues...
Page 325
Scheduler Mode Controls how many of the queues are scheduled as strict and how many are scheduled as weighted on this S4224 port. The dropdown options are Strict Priority or 6 Queues Weighted. Queue Shaper Enable Controls whether the queue shaper is enabled for this queue on this switch port.
S4224 Web User Guide Port Shaping The Configuration > QoS > Port Shaping menu path displays the QoS Egress Port Shapers page. This page provides an overview of QoS Egress Port Shapers for all S4224 ports. The displayed settings are explained below. Port The logical port number for the settings contained in the same row.
Port Tag Remarking The Configuration > QoS > Port Tag Remarking menu path displays the QoS Egress Port Remarking page. This page provides an overview of QoS Egress Port Tag Remarking for all S4224 ports. The displayed settings are explained below.
Page 328
Transition Networks S4224 Web User Guide PCP/DEI Configuration Controls the default PCP (0 - 7) and DEI (0, 1) values that display only when Tag Remarking Mode is set to Default, as shown below. Default PCP (Priority Code Point) is a 3-bit field storing the priority level for the 802.1Q frame. It is also known as User Priority.
Page 329
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Cancel: Click to undo any changes made locally and return to the previous page.
S4224 Web User Guide Port DSCP You can configure S4224 QoS Port DSCP from the Configuration > QoS > Port DSCP menu path. This page lets you configure the basic QoS Port DSCP Configuration settings for all S4224 ports. DSCP (Differentiated Services Code Point) is a field in the header of IP packets for packet classification purposes.
Page 331
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. 33558 Rev. C https://www.transition.com Page 331 of 669...
S4224 Web User Guide DSCP-Based QoS The S4224 DSCP-based QoS Ingress Classification page is available from the Configuration > QoS > DSCP-Based QoS menu path. DSCP (Differentiated Services Code Point) is a field in the header of IP packets for packet classification purposes.
Page 333
Transition Networks S4224 Web User Guide Three fundamental forwarding behaviors are defined for general use by IETF 4594: basic Default Forwarding (DF) behavior for elastic traffic, Assured Forwarding (AF) behavior, and Expedited Forwarding (EF) behavior for real-time (inelastic) traffic. For additional information see the RFC at http://tools.ietf.org/html/rfc4594.
DSCP (Differentiated Services Code Point) is a field in the header of IP packets for packet classification purposes. The S4224 can operate as a DS boundary which can translate different domains’ DSCP values. It provides classification to a remapped DSCP value or translates to a new DSCP value on ingress and also at egress it can remap to a DSCP value along with the ability to set the drop precedence level.
Page 335
Transition Networks S4224 Web User Guide Ingress Ingress side DSCP can be first translated to new DSCP before using the DSCP for QoS class and DPL map. There are two configuration parameters for DSCP Translation on the Ingress side: Translate: DSCP at the Ingress side can be translated to DSCP values of 0-63.
Transition Networks S4224 Web User Guide DSCP Classification The DSCP Classification page is available from the Configuration > QoS > DSCP Classification menu path. The DSCP Classification page lets you configure the mapping of QoS class and Drop Precedence Level to DSCP value.
The QoS Control List configuration page shows the QoS Control List (QCL), which is made up of the QCEs. Each row describes a QCE that is defined. The S4224 supports up to 1024 QCEs. From the default QoS Control List Configuration page, click on the plus sign ( ) to add a new QCE to the list.
Page 338
Transition Networks S4224 Web User Guide SMAC Match a Specific source MAC address or 'Any'. If a port is configured to match on DMAC/DIP, this field indicates the DMAC. Tag Type Indicates/sets the tag type. Possible values are: Any: Match tagged and untagged frames.
Page 339
Transition Networks S4224 Web User Guide Action Parameters Indicates the classification action taken on ingress frame if parameters configured are matched with the frame's content. Possible actions are: CoS: Class of Service (0-7) or 'Default'. DPL: Drop Precedence Level (0-3) or 'Default'.
Page 340
Transition Networks S4224 Web User Guide Examples You can click the browser’s Back button to return to the QoS Control List page, or edit the parameters and click Save. 33558 Rev. C https://www.transition.com Page 340 of 669...
Transition Networks S4224 Web User Guide Sample Parameters Note that not all of the parameters will display in all situations. The Frame Type selection (in the Key Parameters table) determines which specific subset of parameters display. Frame Types Key Parameter...
Transition Networks S4224 Web User Guide Protocol = Any, UDP, TCP, Other SIP = Any or Specific Frame Type = IPv4 IP Fragment = Any, Yes, or No DSCP = Any, Specific or Range Protocol = Any, UDP, TCP, or Other...
Page 343
Transition Networks S4224 Web User Guide 1. Any Allow all types of frames. 2. EtherType Ether Type Valid EtherTypes are 0x600-0xFFFF excluding 0x800 (IPv4) and 0x86DD (IPv6) or 'Any'. 3. LLC SSAP Address Valid SSAP (Source Service Access Point) can vary from 0x00 to 0xFF or 'Any'.
A higher rate allows more packets to pass through without dropping traffic. Note: Frames sent to the S4224 CPU are limited to approximately 4 kpps (e.g., Management VLAN broadcasts are limited to this rate). The Management VLAN is configured at Configuration > System >...
Page 345
Transition Networks S4224 Web User Guide Storm control only works on Inbound packets; it does not prevent a port from being overwhelmed with broadcasts from the core or from other access switches. Note: Follow your organization’s policies and procedures and best practices for implementing storm control (e.g., if you should set the Multicast limit higher than the Broadcast limit, or at least set them...
Transition Networks S4224 Web User Guide WRED (Weighted Random Early Detection) Configuration The Configuration > QoS > WRED menu path lets you configure the Random Early Detection (RED) settings for queues 0 to 5. RED cannot be applied to queue 6 and 7. Through different RED configuration for the queues (QoS classes) it is possible to obtain Weighted Random Early Detection (WRED) operation between queues.
Transition Networks S4224 Web User Guide RED Drop Probability Function The following illustration shows the drop probability function with associated parameters. Max DP 1-3 is the drop probability when the average queue filling level is 100%. Frames marked with Drop Precedence Level 0 are never dropped. Min is the average queue filling level where the queues randomly start dropping frames.
S4224 Web User Guide Mirroring & Remote Mirroring Configuration For debugging network problems or monitoring network traffic, the S4224 system can be configured to mirror frames from multiple ports to a mirror port. (In this context, mirroring a frame is the same as copying the frame.)
Transition Networks S4224 Web User Guide Mirroring & Remote Mirroring Configuration Mode Select to Enable or Disable the Mirror or Remote Mirroring function. Type Select the switch type: Mirror: The switch is running in mirror mode. The source port(s) and destination port are located on this switch.
The Destination port is a switched port that receives a copy of traffic from the Source port. Note 1: In Mirror mode, the S4224 only supports one destination port. Note 2: The destination port requires you to disable MAC Table learning (at the Configuration > MAC Table menu path).
Page 351
Transition Networks S4224 Web User Guide Buttons Apply: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Messages Message: The reflector port needs to select on source switch. Meaning: The reflector port requires you to select “Source” as the switch “Type” (see above).
S4224 Web User Guide PTP Clock Configuration You can configure S4224 PTP clocking from the Configuration > PTP menu path. The Precision Time Protocol (PTP) is a network protocol for synchronizing computer systems’ clocks. Precise time information is especially important for distributed systems in automation technology. With PTP as described in IEEE 1588, it is possible to synchronize distributed clocks to an accuracy of less than 1 microsecond on Ethernet networks.
S4224 Web User Guide Note: at S4224 v 1.0.2, PTP is available over Ethernet and IPv4 only. PTP under IPv6 will be supported at a future release. Note: you must have a PTP clock instance configured for accurate RFC 2544 Latency test step timestamps.
Transition Networks S4224 Web User Guide PTP Clock Configuration Delete Check this box and click on 'Save' to delete the clock instance. Clock Instance Indicates the Instance of a particular Clock Instance [0..3]. Click on the linked Clock Instance number to edit the Clock details for the selected instance.
Transition Networks S4224 Web User Guide Priority Code Point value used for PTP frames. Buttons Add New PTP Clock: Click to create a new clock instance. Save: Click to save the page immediately. Reset: Click to reset the page immediately.
Page 356
Transition Networks S4224 Web User Guide 2 Step Flag Static member: defined by the system, True if two-step Sync events and Pdelay_Resp events are used, otherwise False. Clock Identity Displays the unique clock identifier (e.g., 00:c0:f2:ff:fe:56:08:b0). One Way If True, one way measurements are used. This parameter applies only to a slave. In one way mode, no delay measurements are performed (i.e., this is applicable only if frequency synchronization is...
Page 357
Transition Networks S4224 Web User Guide Example The screen below shows the maximum of four PTP Clock configuration (PTP Clock Instances = 0 to 3). PTP Clock's Configuration Click on a linked Clock Instance in the PTP Clock Configuration section at the Configuration > PTP menu path to display a PTP Clock's Configuration page.
Page 358
Transition Networks S4224 Web User Guide Local Clock Current Time table PTP Time Shows the actual PTP time with nanosecond resolution (e.g., 2012-01-03T19:52:44+00:00 541,523,780). Clock Adjustment method Shows the actual clock adjustment method. The method depends on the available hardware (e.g., Software, Internal Timer, or External Timing (ET) Board).
Transition Networks S4224 Web User Guide Clock Default DataSet table The clock default data set is defined in the IEEE 1588 Standard. It holds three groups of data: the static members defined at clock creation time, the Dynamic members defined by the system, and the configurable members which can be set here.
Page 360
Transition Networks S4224 Web User Guide Protocol Transport protocol used by the PTP protocol engine: Ethernet: PTP over Ethernet multicast EthernetMixed: PTP using a combination of Ethernet multicast and unicast IPv4Multi: PTP over IPv4 multicast IPv4Mixed: PTP using a combination of IPv4 multicast and unicast...
Page 361
Transition Networks S4224 Web User Guide Filter Parameters The Filter Parameters table displays the current DelayFilter, Period, and Distance information. DelayFilter The default delay filter is a low pass filter, with a time constant of 2**DelayFilter*DelayRequestRate. If the DelayFilter parameter is set to 0, the delay filter uses the same algorithm as the offset filter.
Page 362
Transition Networks S4224 Web User Guide Clock Parent DataSet table The Clock Parent DataSet is defined in the IEEE 1588 standard. The parent data set is dynamic. Parent Port Identity Clock identity for the parent clock; if the local clock is not a slave, the value is the clocks own ID (e.g., 00:c0:f2:ff:fe:00:00:01).
Page 363
Transition Networks S4224 Web User Guide Clock Time Properties DataSet The clock time properties data set is defined in the IEEE 1588 Standard. The data set is both configurable and dynamic (i.e., the parameters can be configured for a grandmaster). In a slave clock, the parameters are overwritten by the grandmasters timing properties.
Page 364
Transition Networks S4224 Web User Guide Servo Parameters The default clock servo uses a PID regulator to calculate the current clock rate using the formula: clockAdjustment = OffsetFromMaster/ P constant + Integral(OffsetFromMaster)/ I constant + Differential OffsetFromMaster)/ D constant A Proportional - Integral - Derivative controller (PID controller) is a control loop feedback mechanism widely used in industrial control systems.
Page 365
Transition Networks S4224 Web User Guide Unicast Slave Configuration When operating in IPv4 Unicast mode, the slave is configured up to five master IP addresses. The slave then requests Announce messages from all the configured masters. The slave uses the BMC algorithm to select one as the master clock;...
Page 366
The related The PTP Clock's Port Data Set Configuration table parameters are explained below. Port Static member port Identity: Port number (2-6). This is the S4224 port number. Note that PTP configuration of the S4224 MGMT port is not supported.
Page 367
Transition Networks S4224 Web User Guide Configurable member delayMechanism: the delay mechanism used for the port (e.g., p2pt for Peer to Peer Transparent), where: e2e: End to end delay measurement. p2p: Peer to peer delay measurement. dsbl: Delay is disabled.
S4224 Web User Guide GVRP Configuration You can configure S4224 GVRP globally and at the port level from the Configuration > GVRP menu path. Generic VLAN Registration (GVRP) is specified in IEEE 802.1Q-2005 clause 11 and IEEE 802.1D Clause 12. A small number of GVRP parameters can be configured.
Page 369
Transition Networks S4224 Web User Guide GVRP Port Configuration The Configuration > GVRP > Port config menu path lets you to enable one or more ports for GVRP. This configuration can be performed either before or after GVRP is configured globally - the protocol operation will be the same.
Transition Networks S4224 Web User Guide Service Activation Configuration The Configuration > Service Activation menu path lets you configure Service Activation System Settings, Profiles, and Tests. Service Activation Configuration Configuration > Service Activation > System Navigate to the Configuration > Service Activation > System menu path to display the Service Activation (SA) System Settings.
Transition Networks S4224 Web User Guide Configuration > Service Activation > Profiles Navigate to the Configuration > Service Activation > Profiles menu path to display the default Service Activation Profiles Configuration page. Click the Add New Profile button to display the configurable parameters.
Page 372
Transition Networks S4224 Web User Guide CBS Line Rate (Mbps) Line rate at which burst traffic should be sent for the Back-to-back frames test. In Mbps. FLR (%) Acceptable frame loss ratio (expressed in percentage, with 2 decimals (i.e. 99.99 %).
Page 373
Transition Networks S4224 Web User Guide Dest IP The Destination IP address. Enter a valid IP address in dotted decimal notation (x.y.z.w), with these restrictions: 1) x, y, z, and w must be decimal numbers from 0-255, 2) x must not be 0 unless x, y, and w are also 0, 3) x must not be 127, and 4) x must not be greater than 223.
Transition Networks S4224 Web User Guide DM Threshold Configuration Delay Measurement threshold values in usec. DM Threshold must be sorted and last value must be 5000000. DMV Threshold Configuration Delay Measurement Variation threshold values in usec. DMV Threshold must be sorted and last value must be 5000000.
Transition Networks S4224 Web User Guide Configuration > Service Activation > Tests Navigate to the Configuration > Service Activation > Tests menu path to display the default Service Activation Tests Configuration page. Click the Add New Test button to display the configurable parameters.
Page 376
Transition Networks S4224 Web User Guide Ingress Port The Ingress port number. Collector's Ingress Port Collector's ingress port number. Egress Port The Egress port number. EVC/ECE The EVC and ECE associated with test (e.g., 1/1). Ingress Tag configuration Ingress Tag Encapsulation VLAN tag encapsulation type (Untagged, C-tag, S-tag, CC-tag, or SC-tag).
Page 377
Transition Networks S4224 Web User Guide Bandwidth configuration CIR (bps) The Committed Information Rate in bps. The average bandwidth for a virtual circuit guaranteed to work under normal conditions. CBS (bytes) The Committed Burst Rate in bytes. EIR (bps) The Excess Information Rate in bps.
Transition Networks S4224 Web User Guide DDMI Configuration The Configuration > DDMI menu path lets you configure DDMI mode and DDMI threshold parameters. DDMI (Digital Diagnostics Monitoring Interface) provides an enhanced digital diagnostic monitoring interface for optical transceivers which allows real time access to device operating parameters.
Page 379
Configuration > DDMI > General on page see Configuration > DDMI > Thresholds on page 378. Note: S4224 v2.2.5.2 added support for TN OTDR SFPs new CLI, Text Config file, and TACACS+ Accounting. 33558 Rev. C https://www.transition.com Page 379 of 669...
Transition Networks S4224 Web User Guide UDLD Configuration The UDLD Port Configuration page lets you view and configure the current UDLD (Uni Directional Link Detection) from the Configuration > UDLD menu path. The UDLD protocol monitors the physical configuration of the links between devices and ports that support UDLD.
Page 381
Transition Networks S4224 Web User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. 33558 Rev. C https://www.transition.com Page 381 of 669...
(The related operating functions are defined at the Configuration main menu path.) Each of the Monitor sub-menu functions is described below. Monitor > System > Information S4224 system information is displayed at the Monitor > System > Information menu path. (System Configuration > System > Information information is entered from the menu path.)
Page 383
Serial # The S4224 device’s unique serial number (e.g., # 3012). Board Rev The revision of the S4224 PCB (printed circuit board) (e.g., 3). FPGA Version The current version of the FPGA (field programmable gate array) (e.g., v2.3). Board Temp The PCB temperature in degrees C.
Transition Networks S4224 Web User Guide Monitor > System > CPU Load This page displays the CPU load, using an SVG graph. The load is measured as averaged over the last 100 milliseconds, 1 second and 10 seconds intervals. The last 120 samples are graphed, and the last numbers are displayed as text as well.
Page 385
If you want to run the plugin without installing it, perform the steps below. At the information / message bar above the S4224 web page, click “This website wants to run the following add-on: ‘SVG Viewer 3.0.2 for Netscape’ from ‘Adobe Systems, Inc.’ (unverified publisher)’.
Page 386
Transition Networks S4224 Web User Guide Example The screen below shows a workload introduced at 500 ms intervals that creates transient spikes in the graphs to 89% load. For troubleshooting High CPU utilization conditions, see “Troubleshooting High CPU Load Conditions” on page 555.
Transition Networks S4224 Web User Guide Monitor > System > IP Status The Monitor > System > IP Status page displays the status of the IP protocol layer. The status is defined by the IP interfaces, the IP routes and the neighbour cache (ARP cache) status.
Page 388
Transition Networks S4224 Web User Guide Neighbour cache IP Address The IP address of the entry. Link Address The Link (MAC) address for which a binding to the IP address given exists. For example VLAN1:00-c0-f2-56-19-08. Buttons Refresh: Click to refresh the page immediately.
S4224 Web User Guide Monitor > System > Log The Monitor > System > Log menu path displays the System Log Information page. The S4224 system log information is provided here. (System Logging is configured from the Configuration > System > Log menu path.)
Page 390
: Last page; updates the system log entries, ending at the last available entry ID. Note: At v2.2.9 the S4224 syslog history was reduced to 1000 records, and a delay of 150 msec was added in the web interface. “System Log Messages”...
The System Log information is summarized below in terms of syslog level, message, and description. Level Sample Message Description The S4224 was restarted. See “Maintenance > Restart Info Switch just made a cool boot. Device”. The most recent link status on the port x is ‘link up’.
Monitor > Ports > State From the Monitor > Ports > State menu path you can view the Port State Overview table. This page provides an overview of the current S4224 port states. The S4224 port states are shown and explained below.
Transition Networks S4224 Web User Guide Detailed Port Statistics Left mouse click on a port to display that port’s ‘Detailed Port Statistics’ page. (You can also reach this page from the Monitor > Ports > Detailed Statistics menu path.) See “Detailed Port...
Monitor > Ports > Traffic Overview From the Monitor > Ports > Traffic Overview menu path you can view the Port Statistics Overview table. This page provides an overview of general traffic statistics for all S4224 ports. The displayed counters are explained below.
Page 395
Transition Networks S4224 Web User Guide Buttons Refresh: Click to refresh the page immediately. Clear: Clears the counters for all ports. Auto-refresh: Check this checkbox to automatically refresh the page every three seconds. . Left mouse click on a port to display that port’s ‘Detailed Port Statistics’ page. (You can also reach this page from the Monitor >...
This page provides statistics for the various queues for all S4224 ports. The S4224 supports eight transmission queues per port based on user priority of each frame. This gives you the option to change the output queue mapping based on priority. Statistics for each output queue on each port are available.
Page 397
Transition Networks S4224 Web User Guide Buttons Auto-refresh: Click to refresh the page immediately. Refresh: Clears the counters for all ports. Auto-refresh: Check this checkbox to automatically refresh this page every three seconds. ‘Detailed Port Statistics” on page for more information on the ‘Detailed Port Statistics’...
Each row describes the QCE that is defined. It is a conflict if a specific QCE is not applied to the hardware due to hardware limitations. The S4224 supports up to 256 QCEs. The displayed QoS Control List Status table parameters are explained below.
Page 399
Transition Networks S4224 Web User Guide Conflict Displays Conflict status of QCL entries. As H/W resources are shared by multiple applications, it may happen that resources required to add a QCE may not be available. In that case it shows conflict status as 'Yes', otherwise it is always 'No'.
The Monitor > Ports > Detailed Statistics menu path displays the Detailed Port Statistics page for a Port. This page provides detailed traffic statistics for a specific S4224 port. Use the port select box ( to select which port details to display.
Transition Networks S4224 Web User Guide Rx and Tx Multicast The number of received and transmitted (good and bad) multicast packets. Rx and Tx Broadcast The number of received and transmitted (good and bad) broadcast packets. Rx and Tx Pause A count of the MAC Control frames received or transmitted on this port that have an opcode indicating a PAUSE operation.
Page 402
Transition Networks S4224 Web User Guide Transmit Error Counters Tx Drops The number of frames dropped due to output buffer congestion. Tx Late/Exc. Coll. The number of frames dropped due to excessive or late collisions. Buttons : The port select box determines which port is affected.
The Monitor > Link OAM > Statistics menu path displays the Detailed Link OAM Statistics for a Port. This page provides detailed LOAM traffic statistics for a specific S4224 port. Use the port select box to select which S4224 port details to display.
Page 404
Rx and Tx Dying Gasp A count of the number of Dying Gasp events received and transmitted on this interface (Last Gasp). The S4224 is equipped with the last gasp circuit for triggering a notification in the event of a power failure.
S4224 Web User Guide Monitor > Link OAM > Port Status The Monitor > Link OAM > Port Status menu path displays the Detailed Link OAM Status for an S4224 port. This page provides Link OAM configuration and operational status.
Page 406
Maximum PDU Size and the smaller of the two is used. Multiplexer State When in ‘Forwarding’ state, the S4224 is forwarding non-OAMPDUs to the lower sublayer. In the case of discarding, the S4224 discards all the non-OAMPDUs. Parser State When in ‘Forwarding’...
The left pane displays the Event status for the Local OAM unit while the right pane displays the status for the Peer for the respective port. Port dropdown Use to select the S4224 port number. Frame Error Event Timestamp This two-octet field indicates the time reference when the event was generated, in terms of 100 ms intervals.
Page 408
Transition Networks S4224 Web User Guide Frame errors This four-octet field indicates the number of detected errored frames in the period. Total frame errors This eight-octet field indicates the sum of errored frames that have been detected since the OAM sublayer was reset.
Page 409
Transition Networks S4224 Web User Guide Symbol frame period error events This four-octet field indicates the number of Errored Symbol Period Event TLVs that have been generated since the OAM sublayer was reset. Event Seconds Summary Time Stamp This two-octet field indicates the time reference when the event was generated, in terms of 100 ms intervals, encoded as a 16-bit unsigned integer.
Transition Networks S4224 Web User Guide Monitor > DHCP > Server A DHCP server can provide optional configuration parameters to the client. IETF RFC 2132 describes the available DHCP options. Monitor > DHCP > Server > Statistics The Monitor > DHCP > Server > Statistics page displays the database counters and the number of DHCP messages sent and received by DHCP server.
Page 411
Transition Networks S4224 Web User Guide Expired Binding Number of bindings that their lease time expired or they are cleared from Automatic/Manual type bindings. DHCP Message Received Counters Display counters of DHCP messages received by DHCP server. DISCOVER Number of DHCP DISCOVER messages received.
Transition Networks S4224 Web User Guide Monitor > DHCP > Server > Binding The Monitor > DHCP > Server > Binding page displays bindings generated for DHCP clients. The parameters are described below. Binding IP Address Displays all bindings. IP address allocated to DHCP client.
Transition Networks S4224 Web User Guide Monitor > DHCP > Server > Declined IP The Monitor > DHCP > Server > Declined IP page displays declined IP addresses. Declined IP Addresses Displays IP addresses declined by DHCP clients, if any exist.
Transition Networks S4224 Web User Guide Monitor > DHCP > Snooping Table The Monitor > DHCP > Snooping Table displays the dynamic IP assigned information after DHCP Snooping mode is disabled. All DHCP clients obtained the dynamic IP address from the DHCP server will be listed in this table except for local VLAN interface IP addresses.
Page 415
Transition Networks S4224 Web User Guide Buttons Auto-refresh : Check this box to refresh the page automatically every three seconds. Refresh: Refreshes the displayed table starting from the input fields. Clear: Flushes all dynamic entries. |<<: Updates the table starting from the first entry in the Dynamic DHCP Snooping Table.
Transition Networks S4224 Web User Guide Monitor > DHCP > Relay Statistics This page provides statistics for DHCP Relay. DHCP Relay is used to forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain.
Page 417
Transition Networks S4224 Web User Guide Client Statistics Transmit to Client: The number of relayed packets from server to client. Transmit Error: The number of packets that resulted in error while being sent to servers. Receive from Client: The number of received packets from server.
Transition Networks S4224 Web User Guide Monitor > DHCP > Detailed Statistics The Monitor > DHCP > Detailed Statistics page displays the DHCP detailed statistics for the selected switch port for DHCP snooping. Notice that the normal forward per-port TX statistics isn't increased if the incoming DHCP packet is done by L3 forwarding mechanism.
Transition Networks S4224 Web User Guide Receive and Transmit Packets Rx and Tx Discover The number of discover (DHCP option 53 with value 1) packets received and transmitted. Rx and Tx Offer The number of offer (DHCP option 53 with value 2) packets received and transmitted.
Page 420
Transition Networks S4224 Web User Guide Buttons The DHCP user select box determines which user is affected by clicking the buttons. Port select box defines which port is affected by clicking the buttons. Auto-refresh : Check this box to refresh the page automatically every three seconds.
The remote host can access the S4224 via HTTP, HTTPS, SNMP, TELNET, and/or SSH. The Access Management Statistics table parameters are explained below. Interface The interface type through which the remote host can access the S4224 (HTTP, HTTPS, SNMP, TELNET, and/or SSH). Received Packets Number of received packets from the interface when access management mode is enabled.
User Module Name The full name of a module that may request Port Security services. Abbr A one-letter abbreviation of the security user modules defined for the S4224 ports. Limit Control - L 802.1X - 8 DHCP Snooping - D The abbreviation is used in the ‘Users’...
S4224 Web User Guide Port Status The table has one row for each S4224 port and a number of columns. The columns are explained below. Port The port number for which the status applies. Click the linked port number to see the status for this particular port.
In the Port Status section, when you click on a port in the table’s Port column, the Port Security Port Status table displays for the specified S4224 port (e.g., Port 1 below). This page is also available from the Monitor > Security > Network > Port Security > Port menu path.
The NAS switch status parameters are explained below. Port Displays the S4224 port number. Click to display detailed NAS statistics for this port. Admin State Displays the he port's current administrative state. If NAS is globally enabled, this selection controls the port's authentication mode.
Page 426
Transition Networks S4224 Web User Guide When authentication is complete, the RADIUS server sends a special packet containing a success or failure indication. Besides forwarding this decision to the supplicant, the switch uses it to open up or block traffic on the switch port connected to the supplicant.
Page 427
Transition Networks S4224 Web User Guide supported. The maximum number of clients that can be attached to a port can be limited using the Port Security Limit Control functionality. RADIUS-Assigned QoS Enabled: When RADIUS-Assigned QoS is both globally enabled and...
Page 428
Transition Networks S4224 Web User Guide Guest VLAN Enabled: When Guest VLAN is both globally enabled and enabled (checked) for a given port, the switch considers moving the port into the Guest VLAN according to the rules outlined below. This option is only available for EAPOL-based modes, i.e.: •...
Page 429
Transition Networks S4224 Web User Guide Port VLAN ID Displays the VLAN ID that NAS has put the port in. The field is blank, if the Port VLAN ID is not overridden by NAS. If the VLAN ID is assigned by the RADIUS server, "(RADIUS-assigned)" is appended to the VLAN ID.
Transition Networks S4224 Web User Guide NAS > Port This page provides detailed NAS statistics for a specific switch port running EAPOL-based IEEE 802.1X authentication. For MAC-based ports, it shows the selected backend server (e.g., RADIUS Authentication Server) statistics only.
Page 431
Transition Networks S4224 Web User Guide In Multi 802.1X it is not possible to use the multicast BPDU MAC address as destination MAC address for EAPOL frames sent from the switch towards the supplicant, since that would cause all supplicants attached to the port to reply to requests sent from the switch. Instead, the switch uses the supplicant's MAC address, which is obtained from the first EAPOL Start or EAPOL Response Identity frame sent by the supplicant.
S4224. The number of EAPOL frames received by Invalid Type dot1xAuthInvalidEapolFramesRx the S4224 in which the frame type is not recognized. The number of EAPOL frames received by Invalid Length dot1xAuthEapLengthErrorFramesRx the S4224 in which the Packet Body Length field is invalid.
Table 2. Backend Server Counters Direction Name IEEE Name Description 802.1X-based: Counts the number of times the S4224 receives the first request from the backend server following the first response from the supplicant. Indicates that the backend server has communication with Access Challenges dot1xAuthBackendAccessChallenges the S4224.
Transition Networks S4224 Web User Guide Last Supplicant/Client Info This field provides information about the last supplicant / client that attempted to authenticate (for the administrative states of Port-based 802.1X, Single 802.1X, Multi 802.1X, and MAC-based Auth.) as described in the table below.
Page 435
Transition Networks S4224 Web User Guide server hasn't successfully authenticated the client, it is unauthenticated. If an authentication fails for one or the other reason, the client will remain in the unauthenticated state for ‘Hold Time ’seconds. Last Authentication Shows the date and time of the last authentication of the client (successful as well as unsuccessful).
S4224 Web User Guide Monitor > Security > Network > ACL Status You can display the current S4224 ACL Status table from the Monitor > Security > Network > ACL Status menu path. This page shows the ACL status by the various ACL users. (The related configuration is done at the Configuration >...
Page 437
Transition Networks S4224 Web User Guide Indicates the rate limiter number of the ACE. The allowed range is 1 to 16. When Disabled is displayed, the rate limiter operation is disabled. Forward packet that matched the specific ACE to CPU.
Page 438
Transition Networks S4224 Web User Guide Examples Static: MEP: PTP: Combined: 33558 Rev. C https://www.transition.com Page 438 of 669...
Transition Networks S4224 Web User Guide Monitor > Security > Network > ARP Inspection The Monitor > Security > Network > ARP Inspection menu path displays the Dynamic ARP Inspection Table. Entries in the Dynamic ARP Inspection Table are shown on this page. The Dynamic ARP Inspection Table contains up to 1024 entries, and is sorted first by port, then by VLAN ID, then by MAC address, and then by IP address.
Page 440
Transition Networks S4224 Web User Guide Buttons Auto-refresh: Check this checkbox to enable an automatic refresh of this page at 3 second intervals. Refresh: Refreshes the displayed table starting from the input fields. Clear: Flushes all dynamic entries. |<<: Updates the table starting from the first entry in the Dynamic ARP Inspection Table.
Transition Networks S4224 Web User Guide Monitor > Security > Network > IP Source Guard The Monitor > Security > Network > IP Source Guard menu path displays the Dynamic ARP Inspection Table. The Dynamic IP Source Guard Table is sorted first by port, then by VLAN ID, then by IP address, and then by MAC address.
Transition Networks S4224 Web User Guide Monitor > Security > AAA The Monitor > Security > AAA menu path provides RADIUS Overview and RADIUS Details data. > RADIUS Overview The RADIUS Authentication Overview page provides an overview of the status of the RADIUS servers configurable on the Authentication configuration page.
Page 443
Transition Networks S4224 Web User Guide Accounting Status The current status of the server. This field takes one of the following values: Disabled: The server is disabled. Not Ready: The server is enabled, but IP communication is not yet up and running.
Transition Networks S4224 Web User Guide > RADIUS Details The Monitor > Security > AAA > RADIUS Details menu path provides detailed RADIUS Authentication Statistics for a particular RADIUS server. The statistics map closely to those specified in RFC4668 - RADIUS Authentication Client MIB.
Page 445
Transition Networks S4224 Web User Guide Direction Name RFC4668 Name Description The number of malformed RADIUS Access-Response packets received from the server. Malformed packets Malformed radiusAuthClientExtMalformed include packets with an invalid Access AccessResponses length. Bad authenticators or Responses Message Authenticator attributes or unknown types are not included as malformed access responses.
Transition Networks S4224 Web User Guide Other Info This section contains information about the state of the server and the latest round-trip time. RFC4668 Name Description Name IP Address IP address and UDP port for the authentication server in question.
Page 447
Transition Networks S4224 Web User Guide Direction Name RFC4670 Name Description port. The number of RADIUS packets that were received from the server on the radiusAccClientExtPackets Packets Dropped Dropped accounting port and dropped for some other reason. The number of RADIUS packets sent Requests to the server.
Transition Networks S4224 Web User Guide Other Info This section contains information about the state of the server and the latest round-trip time. Name RFC4670 Name Description IP address and UDP port for the accounting server in IP Address question.
Transition Networks S4224 Web User Guide Monitor > Security > Switch > RMON This page lets you display RMON (Remote Monitoring) statistics, history, alarms, and events. You configure RMON at the Configuration > Security > Switch > RMON menu path.
Page 450
Transition Networks S4224 Web User Guide CRC Errors The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets. Under-size The total number of packets received that were less than 64 octets.
Page 451
Transition Networks S4224 Web User Guide Detailed RMON Statistics When you click an ID from the RMON Statistics Status Overview page, the “Detailed RMON Statistics” display for the selected instance. Buttons : Use the ID select dropdown box to select which port’s detailed RMON statistics display.
Transition Networks S4224 Web User Guide RMON > History This page provides an overview of RMON history entries. The RMON History Overview page provides an overview of RMON History entries. Each page shows up to 99 entries from the History table, default being 20, selected through the entries per page input field.
Page 453
Transition Networks S4224 Web User Guide CRC Errors The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets. Undersize The total number of packets received that were less than 64 octets.
Transition Networks S4224 Web User Guide RMON > Alarm This page provides an overview of RMON Alarm entries. Each page shows up to 99 entries from the Alarm table (the default is 20) as selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the Alarm table.
Page 455
Transition Networks S4224 Web User Guide Rising Threshold Rising threshold value. Rising Index Rising event index. Falling Threshold Falling threshold value. Falling Index Falling event index. Buttons Refresh: Click to refresh the page immediately. Auto-refresh: Check this box to automatically refresh the page every three seconds.
Transition Networks S4224 Web User Guide RMON > Event The Monitor > Security > Switch > RMON > Event menu path displays the RMON Event Overview table. This page provides an overview of RMON Event table entries. Each page shows up to 99 entries from the Event table, default being 20, selected through the "entries per page"...
Last changed The time since this aggregation changed. Local Ports Shows which ports are a part of this aggregation for this S4224. Buttons Refresh: Click to refresh this page immediately. Auto-refresh: Check this checkbox to enable automatic refreshes of the page at 3 second intervals.
Monitor > LACP > Port Status The LACP System Status table displays from the Monitor > LACP > Port Status menu path. This page provides a status overview for LACP status for all S4224 ports. The LACP status table parameters are explained below.
Transition Networks S4224 Web User Guide Monitor > LACP > Port Statistics The LACP Statistics table displays from the Monitor > LACP > Port Statistics menu path. This page provides an overview for LACP statistics for all ports. The LACP Statistics table parameters are explained below.
S4224 Web User Guide Monitor > Loop Protection The Monitor > Loop Protection menu path displays the loop protection port status of the S4224 ports in the form of the Loop Protection Status table. Loop protection port status parameters are explained below.
The Bridge ID of the currently elected root bridge. Root Port The S4224 port currently assigned the root port role. Root Cost Root Path Cost. For the Root Bridge it is zero. For all other Bridges, it is the sum of the Port Path Costs on the least cost path to the Root Bridge.
Transition Networks S4224 Web User Guide Bridge Status Details At Monitor > Spanning Tree > Bridge Status click on “CIST” in the MSTI column to display its details. At Monitor > Spanning Tree > Bridge Status click on “MISTIx” in the MSTI column to display its details.
Page 463
Transition Networks S4224 Web User Guide Topology Change Count The number of times the topology change flag has been set (during a one-second interval) (e.g., 0). Topology Change Last The time passed since the Topology Flag was last set (e.g., 0d 01:15:55, or - indicating none encountered).
The Monitor > Spanning Tree > Port Status menu path displays the STP Port Status table, which provides the STP CIST port status for the S4224 physical ports. An MSTn instance is local to a region. ISTs in different regions are interconnected via a Common Spanning Tree (CST).
Page 465
Transition Networks S4224 Web User Guide CIST State The current STP port state of the CIST port. The port state can be one of the following values: Learning, Forwarding, Discarding. STP per IEEE 802.1d proceeds through various states to establish the topology.
Monitor > Spanning Tree > Port Statistics The Monitor > Spanning Tree > Port Statistics menu path displays the STP Port Status table, which provides the STP port statistics counters of S4224 bridge ports. STP statistics are provided for STP, MSTP, and RSTP.
Page 467
Transition Networks S4224 Web User Guide Buttons Refresh: Click to refresh the page immediately. Auto-refresh: Check this checkbox to enable automatic page refreshes at 3 second intervals. Clear: Click to reset the counters. 33558 Rev. C https://www.transition.com Page 467 of 669...
Transition Networks S4224 Web User Guide Monitor > MVR You can view Statistics, MVR Channel Groups, and MVR SFM Information from the Monitor > MVR menu path. MVR is configured from the Configuration > MVR menu path. Statistics This page provides MVR Statistics information from the Monitor > MVR > Statistics menu path.
Transition Networks S4224 Web User Guide MVR Channel Groups This page provides MVR Channel (Groups) information from the Monitor > MVR > MVR Channel Groups menu path. Entries in the MVR Channels (Groups) Information Table are shown on this page.
Transition Networks S4224 Web User Guide MVR SFM Information This page provides MVR Channel (Groups) information from the Monitor > MVR > MVR SFM Information menu path. The MVR SFM (Source-Filtered Multicast) Information Table also contains the SSM (Source-Specific Multicast) information. This table is sorted first by VLAN ID, then by group, and then by Port. Different source addresses belong to the same group are treated as single entry.
Transition Networks S4224 Web User Guide Source Address The IP Address of the source. Currently, system limits the total number of IP source addresses for filtering to be 128. When there is no any source filtering address, the text "None" displays in the Source Address field.
Transition Networks S4224 Web User Guide Monitor > IPMC > IGMP Snooping The Monitor > IPMC > IGMP Snooping menu path provides the Status, Groups Information, and IPv4 SFM Information sub-menus. The IGMP (Internet Group Management Protocol) communications protocol is used to manage the membership of Internet Protocol multicast groups.
Page 473
Transition Networks S4224 Web User Guide receive multicast frames and removes it from the membership list of the multicast group. In v2, a host node exits from a multicast group by sending a leave request. After receiving a leave request from a host node, the router removes the node from appropriate membership list. The router also stops sending multicast packets from the port if it determines there are no further host nodes on the port.
Page 474
Transition Networks S4224 Web User Guide Buttons Refresh: Click to refresh the page immediately. Clear: Clears all Statistics counters. Auto-refresh: Check this checkbox to enable automatic page refreshes at 3 second intervals. 33558 Rev. C https://www.transition.com Page 474 of 669...
Transition Networks S4224 Web User Guide IGMP Snooping > Groups Information Entries in the IGMP Group Table are displayed on this page. The IGMP Group Table is sorted first by VLAN ID, and then by Group. Each page shows up to 99 entries from the IGMP Group table selected through the "entries per page"...
Transition Networks S4224 Web User Guide IGMP Snooping IPv4 SFM Information Entries in the IGMP SFM Information table are shown on this page. The IGMP SFM (Source-Filtered Multicast) Information table also contains the SSM (Source-Specific Multicast) information. This table is sorted first by VLAN ID, then by group, and then by Port.
Page 477
Transition Networks S4224 Web User Guide Hardware Filter/Switch Indicates whether the data plane destined to the specific group address from the source IPv4 address could be handled by the chip. Buttons Auto-refresh: Check this box to automatically refresh the page every three seconds.
Transition Networks S4224 Web User Guide Monitor > IPMC > MLD Snooping The Monitor > IPMC > MLD Snooping menu path provides the Status, Groups Information, and IPv6 SSM Information sub-menus. MLD (Multicast Listener Discovery) for IPv6 is used by IPv6 routers to discover multicast listeners on a directly-attached link (much as IGMP is used in IPv4).
Page 479
Transition Networks S4224 Web User Guide IPv6 in Windows Server 2008 and Windows Vista uses MLDv2 by default, but will use MLD if it receives an MLD message. You can configure IPv6 to use MLD with the “ netsh interface ipv6 set ”...
Transition Networks S4224 Web User Guide MLD Snooping > Groups Information The MLD Snooping > Groups Information menu path displays entries in the MLD Group Table. The MLD Groups Table is sorted first by VLAN ID, and then by group.
Transition Networks S4224 Web User Guide MLD Snooping > IPv6 SFM Information The MLD Snooping > IPv6 SFM Information menu path displays entries in the MLD SFM Information Table are shown on this page. The MLD SFM (Source-Filtered Multicast) Information Table also contains the SSM (Source-Specific Multicast) information.
Page 482
Transition Networks S4224 Web User Guide Buttons Auto-refresh: Check this box to automatically refresh the page every three seconds. Refresh: Refreshes the displayed table starting from the input fields. |<<: Updates the table starting from the first entry in the MLD SSM Information Table.
Transition Networks S4224 Web User Guide Monitor > LLDP The Monitor > LLDP menu path displays the Neighbours, LLDP-MED Neighbours and Port Statistics sub-menus. The IEEE 802.1ab Link Layer Discovery Protocol (LLDP) standard allows stations attached to an IEEE 802 LAN to advertise, to other stations attached to the same IEEE 802 LAN, the major capabilities...
Page 484
The neighbor device is a Transition Networks Inc. INDURA Switch in the example above. You can click the browser Back button to return to the S4224 LLDP Neighbour Information page. At the INDURA switch, you can also view the Port Statistics from the Monitor > LLDP menu path, and click the Management Address link to display the INDURA neighbor’s startup screen (i.e., go...
Transition Networks S4224 Web User Guide Monitor > LLDP-MED > Neighbours The Monitor > LLDP > Neighbours menu path provides a status overview of all LLDP-MED neighbors. The displayed table contains a row for each port on which an LLDP neighbor is detected. This function applies to VoIP devices which support LLDP-MED.
Page 486
Transition Networks S4224 Web User Guide LLDP-MED Media Endpoint (Class II) The LLDP-MED Media Endpoint (Class II) definition is applicable to all endpoint products that have IP media capabilities however may or may not be associated with a particular end user. Capabilities include all of the capabilities defined for the previous Generic Endpoint Class (Class I), and are extended to include aspects related to media streaming.
Page 487
Transition Networks S4224 Web User Guide Policy Policy indicates that an Endpoint Device wants to explicitly advertise that the policy is required by the device. Can be either Defined or Unknown Unknown: The network policy for the specified application type is currently unknown.
The Monitor > LLDP > Port Statistics menu path provides an overview of all LLDP traffic. Two types of LLDP counters are shown. Global Counters are counters that refer to the S4224 at the device level, while Local Counters refer to per port counters for the currently selected S4224.
Page 489
The number of received LLDP frames containing some kind of error. Frames Discarded If an LLDP frame is received on a port, and the S4224's internal table has run full, the LLDP frame is counted and discarded. This situation is known as "Too Many Neighbours" in the LLDP standard.
Transition Networks S4224 Web User Guide Monitor > Ethernet Services Service Frame (Traffic) Colors - Green / Yellow / Red The MEF specifies traffic “coloring” as a way to mark traffic as ‘in profile’ or ‘out of profile’ as it leaves the ingress UNI.
Page 491
Transition Networks S4224 Web User Guide Tx Yellow The number of yellow frames (or bytes) transmitted. Rx Red The number of red frames (or bytes) received. Rx Discarded The number of discarded frames (or bytes) in the ingress queue system.
Transition Networks S4224 Web User Guide ECE Statistics The Monitor > Ethernet Services > EVC Statistics menu path provides UNI port traffic statistics for available ECE. It also shows counters for NNI ports of the EVC to which the ECE is mapped.
Page 493
Transition Networks S4224 Web User Guide Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Refresh: Click to refresh the page immediately. Clear: Clears the counters for selected ports. Clear All: Clears the counters for all ports. Displays the message “All EVCs statistics will be cleared. Do you want to proceed anyway?”.
Transition Networks S4224 Web User Guide Monitor > Performance Monitor The Monitor > Performance Monitor menu path displays the performance monitor DM, LM and EVC traffic statistics and measurement Interval information for the selected measurement interval and/or MEP instance. The screen below shows Measurement Interval ID 2 and MEP Instance 1 statistics with no MEP Detailed Info shown.
Page 495
Transition Networks S4224 Web User Guide Far End Loss Ratio The far end loss ratio. Domain Port: This is a MEP in the Port Domain. 'Flow Instance' is a Port. Evc: This is a MEP in the EVC Domain. 'Flow Instance' is a EVC.
Transition Networks S4224 Web User Guide Performance Monitor Delay Measurement Statistics This page provides the performance monitor loss measurement traffic statistics for the selected measurement interval ID and Delay Measurement instance. The Monitor > Performance Monitor > DM Statistics parameters are described below.
Page 497
Transition Networks S4224 Web User Guide One-way Far to Near Min. Delay The minimum one-way near to far delay. One-way Far to Near Max. Delay The maximum one-way near to far delay. One-way Near to Far Average Delay The number of red received.
Page 498
Transition Networks S4224 Web User Guide MEP ID This value will become the transmitted two byte CCM MEP ID. MAC Address The MAC of this MEP - can be used by other MEP when unicast is selected (Info only). Peer MEP ID This value will become an expected MEP ID in a received CCM - see 'cMEP'.
Transition Networks S4224 Web User Guide Performance Monitor EVC Statistics This page provides the performance monitor EVC traffic statistics for the selected measurement interval ID and EVC instance. Navigate to Monitor > Performance Monitor > EVC Statistics. The parameters are described below.
Page 500
Transition Networks S4224 Web User Guide Tx Discarded Frames The number of discarded in the egress queue system. Buttons Frames: Show frames statistics only. Bytes: Show bytes statistics only. Both: Show both frames and bytes statistics. Auto-refresh : Check this box to refresh the page automatically every 3 seconds.
Transition Networks S4224 Web User Guide Performance Monitor Measurement Interval Information This page provides the performance monitor measurement interval information. Navigate to Monitor > Performance Monitor > Interval Information. The parameters are described below. Information Type The type of info to display for the performance monitor data sets (LM, DM, EVC, or ECE).
Transition Networks S4224 Web User Guide Monitor > PTP The Monitor > PTP menu path displays PTP External Clock Mode and PTP Clock Configuration information. PTP (Precision Time Protocol) is a network protocol for synchronizing the clocks of computer systems.
Transition Networks S4224 Web User Guide PTP Clock Configuration Clock Instance Indicates the Instance of a particular Clock Instance [0.-3]. Click on the Clock Instance number (linked) to monitor the Clock details. Device Type Indicates the Type of the Clock Instance. The five Device Types are: Ord-Bound: Clock's Device Type is Ordinary-Boundary Clock.
Transition Networks S4224 Web User Guide PTP Clock's Configuration Click on a linked Clock Instance in the PTP Clock’s Configuration section at the Monitor > PTP menu path to display a PTP Clock's Configuration page. This page lets you view the current PTP clock settings.
Transition Networks S4224 Web User Guide Clock Default Dataset The clock default data set is defined in the IEEE 1588 Standard. It holds three groups of data: the static members defined at clock creation time, the dynamic members defined by the system, and configurable members which can be set here.
Transition Networks S4224 Web User Guide In a unicast Slave only clock you also must configure which master clocks to request Announce and Sync messages from. See ‘Unicast Slave Configuration’. One-Way If True, one-way measurements are used. This parameter applies only to a slave. In one-way mode no delay measurements are performed, i.e.
Transition Networks S4224 Web User Guide Clock Parent Data Set The clock parent data set is defined in the IEEE 1588 standard. The parent data set is dynamic. Parent Port Identity Clock identity for the parent clock, if the local clock is not a slave, the value is the clock’s own id.
Transition Networks S4224 Web User Guide Servo Parameters The default clock servo uses a PID regulator to calculate the current clock rate. The formula is: clockAdjustment = OffsetFromMaster/ P constant + Integral(OffsetFromMaster)/ I constant + Differential OffsetFromMaster)/ D constant Display If true then Offset From Master, MeanPathDelay and clockAdjustment are logged on the debug terminal.
Transition Networks S4224 Web User Guide Unicast Slave Configuration When operating in IPv4 Unicast mode, the slave is configured with up to five master IP addresses. The slave then requests Announce messages from all the configured masters. The slave uses the BMC algorithm to select one as master clock, the slave then request Sync messages from the selected master.
Page 510
Transition Networks S4224 Web User Guide PTP Clock's Port Data Set Configuration Click on the Ports Monitor Page link in the PTP Clock’s Configuration section to display the PTP Clock's Port Data Set Configuration table. The port data set is defined in the IEEE 1588 Standard.
Page 511
Transition Networks S4224 Web User Guide The interval for issuing Delay_Req messages for the port in E2e mode. This value is announced from the master to the slave in an announce message. The value is reflected in the MDR field in the Slave.
8192 entries, and is sorted first by VLAN ID, then by MAC address. Switching of frames is based on the DMAC address contained in the frame. The S4224 builds a table that maps MAC addresses to S4224 ports for knowing which ports the frames should go to (based on the DMAC address in the frame).
Page 513
Transition Networks S4224 Web User Guide Port Members A green check mark ( ) indicates if a port is a member of the entry (CPU, ports 1-6). Buttons Auto-refresh: Check this checkbox to automatically refresh the page every three seconds. .
The Monitor > VLANs menu path displays the VLAN Membership and VLAN Ports sub-menus. The S4224 will be compliant with IEEE 802.1Q standard. The S4224 is capable of VLAN bridging and filtering. By default the devices comes up with all ports belonging to the same VLAN.
Page 515
Transition Networks S4224 Web User Guide Combined: Displays a combination of the administrator and internal software modules configuration, and basically reflects what is actually configured in hardware. Admin: Various internal software modules may use VLAN services to configure VLAN memberships on the fly. The drop-down list on the right allows for selecting between showing VLAN memberships as configured by an administrator (Admin) or as configured by one of these internal software modules.
The Monitor > VLANs > Ports menu path provides VLAN Port Status. The S4224 ports can be configured with a default or native VLAN id, so that all untagged and priority tagged traffic will be classified to this VLAN ID. The native VLAN ID for all ports is set to 1 but is configurable on a per-port basis.
Page 517
Transition Networks S4224 Web User Guide VCL: Displays only the VCL VLAN users’ membership status. RMirror: Displays only the VCL remote mirror users’ membership status. Port The logical port for the settings contained in the same row. Port Type Shows the port type (Unaware, C-Port, S-Port, or S-Custom-Port) that a given user wants to configure on the port.
Page 518
Transition Networks S4224 Web User Guide Examples An example of the VLAN Port Status for “Combined” users is shown below. VLAN Port Status for “MVR” user is shown below. ERPS: EVC: 33558 Rev. C https://www.transition.com Page 518 of 669...
Transition Networks S4224 Web User Guide Monitor > DDMI The Monitor > DDMI menu path lets you display DDMI overview and detailed information. This page display DDMI OTDR data. See the TN-SFP-BC55-I TN-SFP-BC55 manual for OTDR SFP information. DDMI > Overview Port The DDMI port number.
Transition Networks S4224 Web User Guide DDMI > Detailed This page displays detailed SFP data for a selected port. Transceiver Information Vendor Indicates the SFP Vendor’s name (e.g., Transition). Part Number Indicates Vendor Part number (PN) provided by the SFP vendor (TN-SFP-SXD).
Page 521
Transition Networks S4224 Web User Guide Low Warn Threshold The low warn threshold value of temperature, voltage, TX bias, TX power, and RX power. Low Alarm Threshold The low alarm threshold value of temperature, voltage, TX bias, TX power, and RX power.
Transition Networks S4224 Web User Guide Monitor > UDLD The Monitor > UDLD menu path lets you display the UDLD status of the ports and neighbor. Detailed UDLD Status for Port x UDLD Admin State The current port state of the logical port, Enable if any state (Normal, Aggressive) is Enabled.
Transition Networks S4224 Web User Guide Diagnostics Main Menu The Diagnostics main menu lets you select the Ping, Link OAM, Ping6, VeriPHY, and Service Activation sub-menus. Each of these sub-menus is detailed below. Diagnostics > Ping This page lets you issue ICMP PING packets to troubleshoot IPv4 connectivity issues.
Page 524
Transition Networks S4224 Web User Guide A failed ICMP Ping Output is shown below: Click the New Ping button to issue another ping. For example: PING6 server ::10.10.132.20 64 bytes from ::10.10.132.20: icmp_seq=0, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=1, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=2, time=0ms...
3. Select the appropriate radio button to retrieve the content of interest (“Local” or “Peer”). 4. Enter the S4224 Port number. This port must be configured and enabled. 5. Click the Start button to retrieve the MIB content. A typical display is shown below If the Link OAM Mib Retrieve fails, the message “OAM Error - Invalid request on this port”...
Transition Networks S4224 Web User Guide Diagnostics > Ping6 This page lets you issue ICMPv6 PING packets to troubleshoot IPv6 connectivity issues. Ping 6 Procedure 1. Navigate to the Diagnostics > Ping6 menu path. 2. At IP Address, enter a valid IPv6 address. This is the destination IP Address for the ping.
Page 527
Transition Networks S4224 Web User Guide You can configure the following properties of the issued ICMP packets: IP Address The destination IP Address. Ping Length The payload size of the ICMP packet. Values range from 2 bytes to 1452 bytes.
A completed VeriPHY page is shown below. The VeriPHY parameters are described below. Port The port for which you are requesting VeriPHY Cable Diagnostics. S4224 ports All, 1, 2, 3, and 4 are selectable. 33558 Rev. C https://www.transition.com Page 528 of 669...
Transition Networks S4224 Web User Guide Cable Status Port: Rge Port number. Pair: The status of the cable pair. The pair status can be: OK - Correctly terminated pair Open - Open pair Short - Shorted pair Short A - Cross-pair short to pair A...
Transition Networks S4224 Web User Guide Diagnostics > Service Activation This page lets you configure and run a Service Activation Test and Loopback Test and save the test results from the Diagnostics > Service Activation > Test or from the Diagnostics > Service Activation >...
Test Side Port Select the test side port (the test port where loopback will be enabled). Note that at v 2.2, the S4224 or S4140 cannot be used as an Ethersat loopback device. The workaround is to use an S3280 or other NID as the loopback device.
Page 532
Recovery: Set the shared port to internal mode using the (config)# command sharedport internal and try the loopback test again. Problem: The S4224 or S4140 cannot be used as an Ethersat loopback device. Workaround: Use an S3280 or other NID as the loopback device.
2. If you are sure you want to restart the S4224, click the Yes button. If you are not sure you want to restart the S4224, click the No button and continue operation. 3. To restart the S4224, click the Yes button.
Maintenance > Restart Device > Force Cool Restart An error condition may display the Restart Device page with an option to force an S4224 cool restart. If this occurs, at Maintenance > Restart Device > Are you sure you want to perform a Restart? - Force Cool Restart, check or uncheck the checkbox and click the Yes button.
Factory Defaults?” displays. 2. If you are not sure you want to restart the S4224, click the No button and continue operation. If you are sure you want to restart the S4224, click the Yes button. The information message “Configuration Factory Reset Done - The configuration has been reset.
Note: It is a good idea to create a backup of the configuration before upgrading the firmware. The S4224 IP address is reset to default during firmware upgrade.
Software Upload Procedure This procedure transfers the uploaded firmware image to the S4224 flash component. You have the option to activate the image immediately or later. Note: do not reset or power off the S4224 during this process. 1. Navigate to the Maintenance > Software > Upload menu path.
Page 538
7. The “Flashing, please wait ...” series of messages display during the process. After 1-2 minutes, the firmware is updated. If you checked the Activate Image Now checkbox, the S4224 restarts. When the S4224 startup screen displays, continue operation. If you unchecked the Activate Image Now checkbox, the Software Image Selection page displays.
The flash index name of the firmware image. The name of the primary (existing / preferred) image is managed, the alternate image is named mamaged.bk. Version The version of the firmware image (e.g., S4224-24 (standalone) as shown above. 2.2.9.4 Date The date when the firmware was produced (e.g., 2017-05-30T00:31:09-05:00 as shown...
If you are not sure you want to activate the alternate S4224 image, click the Cancel button and continue operation. If you are sure you want to restart the S4224, click the OK button. The S4224 restarts and displays the “System restart in progress” message as shown below: All of the front panel 100/1000 SFP LEDs light momentarily.
1 192.168.1.110/24 Manual You can then access the web GUI via the IP address and netmask entered (e.g., 192.168.1.110 and 255.255.255.0 in the example above). See the S4224 CLI Reference manual for details. 33558 Rev. C https://www.transition.com Page 541 of 669...
Transition Networks S4224 Web User Guide Maintenance > Software > Peripheral Device Upload This page lets you update peripheral device firmware if present. Peripheral Device Firmware Update Browse to the location of a firmware image and click Upload. After the firmware image is uploaded, a page announces that the firmware update is initiated. The switch will automatically reboot when the firmware update is complete.
The S4224 supports an industry-standard configuration where the commands are stored in a text format. The S4224 stores its configuration in a number of text files in CLI format. The files are either virtual (RAM- based) or stored in flash on the switch.
Transition Networks S4224 Web User Guide Save Running Config to Startup-Config The Maintenance > Configuration > Save startup-config menu path lets you copy the running-config to startup-config, thereby ensuring that the currently active configuration will be used at the next reboot.
Transition Networks S4224 Web User Guide Download Configuration File The Maintenance > Configuration > Download menu path lets you download a selected configuration file. The defaults include the running-config, default-config and the startup-config. Note that the download of a running-config may take a little while to complete, as the file must be prepared for download.
Transition Networks S4224 Web User Guide Upload a Configuration File You can upload a file from the web browser to all the files on the switch (except default-config, which is read-only). If the destination is running-config, the file will be applied to the switch configuration. This can be done in two ways: ...
Page 547
The Upload Configuration page displays again with the selected file to upload: 4. Select the Destination File Name. If the destination is running-config, the file will be applied to the S4224 configuration. This can be done in two ways: Replace: The current configuration is fully replaced with the configuration in the uploaded file.
S4224 Web User Guide Activate a Configuration File You can activate any of the configuration files present on the S4224, except for the running-config file, which represents the currently active configuration. Note: the previous configuration will be completely replaced, potentially leading to loss of management connectivity.
Transition Networks S4224 Web User Guide Delete a Configuration File You can delete any of the writable files stored in flash, including startup-config. If this is done and the switch is rebooted without a prior Save operation, the switch resets to its default configuration.
9. In Windows Internet Explorer, try clicking the Tools > Compatibility View option. 10. If you can access the S4224 via PuTTY or HyperTerminal but not via the web interface, enter the reload defaults keep-ip CLI command and try accessing the S4224 web interface again.
Transition Networks S4224 Web User Guide Request State Priorities Request / State Priority 1111 Lockout of protection (LO) 1110 Signal fail for protection (SF-P) Highest 1101 Forced switch (FS) 1011 Signal fail for working (SF) 1001 Signal degrade (SD) (Note)
Transition Networks S4224 Web User Guide ERPS Troubleshooting Failure of protocol defect: due to errors in provisioning, the ERP control process may detect a combination of conditions which should not occur during "normal" conditions. To warn the operator of such an event, a failure of protocol – provisioning mismatch (FOP-PM) is defined. The FOP-PM defect, detected if the RPL owner node receives one or more No Request R-APS message(s) with the RPL Blocked status flag set (NR, RB), and a node ID that differs from its own.
Transition Networks S4224 Web User Guide For Additional Information IPv6 Forum at http://www.ipv6forum.com/ ARIN (American Registry for Internet Numbers) at https://www.arin.net/knowledge/ipv6_info_center.html or ARIN wiki at http://www.getipv6.info/index.php/Main_Page Cisco: http://www.ciscopress.com/articles/article.asp?p=777892&seqNum=7 Troubleshooting IPv6 on Windows 7: http://itexpertvoice.com/home/troubleshooting-ipv6-on-windows- 7-and-why-its-worth-the-bother/ Troubleshooting IPv6 on Windows Servers (Microsoft TechNet): http://technet.microsoft.com/en-...
Switches is Extreme-CLI-Authorization = 1). Recovery: 1. The current security privilege setting for the user must be 15. The S4224 range is 1 to 15 (where 15 is the highest value / fullest possible access to all S4224 functions). 2. See “AAA...
Since background S4224 processes on its switch timers execute multiple times per second, the S4224 never reports CPU utilization at 0%, even for very simple deployments. Normal data traffic packet switching is done in the S4224 hardware without involving the CPU, so it is not affected by an overly busy CPU.
CPU to process network related traffic. Operations with the potential to cause high CPU utilization can include Spanning Tree, IP Routing table updates, encryption via the S4224 software, fragmentation causing the CPU to reassemble numerous packets, or certain CLI commands (e.g., write memory, show config).
4. Verify the parameters entered and re-try the function. See the related section of this manual for specifics. 5. Try using the CLI to perform the function. Refer to the “S4224 CLI Reference Guide” manual. 6. If the “continue y(es) n(o) prompt” displays, type y and press Enter to continue.
Page 558
Transition Networks S4224 Web User Guide 5. For messages that indicate that the number of MAC address entries for the VLAN exceeds the maximum number allowed, have your system administrator configure an action. 6. For messages that indicate that an unauthorized device attempted to connect on a secure port, identify the device that attempted to connect on the secure port and notify your network system administrator of the condition.
Meaning: Confirmation message displayed when you select Maintenance > Factory Defaults. Recovery: None; confirm that you want to reset the S4224 to its factory default settings (click Yes), or clear the message and continue using the current configuration (click No).
Page 560
Transition Networks S4224 Web User Guide Message: Invalid Firmware Image - The uploaded firmware image is invalid. Please use a correct firmware image. Meaning: At Maintenance > Software Upload you entered or selected an unacceptable file (image). Recovery: 1. Click the browser’s Back key to return to the main menu.
Page 561
Meaning: You clicked the Logout ( ) button. Recovery: Confirmation message only; click the webpage OK button to continue to log out of the S4224 web interface session, otherwise, click the Cancel button to continue working in the current S4224 web session.
Page 562
Transition Networks S4224 Web User Guide Message: W_port and E_port cannot be the same Meaning: Recovery: 1. Click the OK button to clear the webpage message. 2. Change the Port 0 or the Port 1 field so that they have different entries.
Page 563
Transition Networks S4224 Web User Guide Message: West MEP and East MEP cannot be the same W_port and E_port cannot be the same Meaning: At Configuration > ERPS you tried to add a new Protection Group, but the operation failed when you clicked the Save button.
Page 564
Transition Networks S4224 Web User Guide Message: ERPDS ID 1 is already in use Meaning: At Configuration > ERPS you tried to add a new Protection Group, but the operation failed when you clicked the Save button. Recovery: 1. Click the OK button to clear the webpage message.
Page 565
Transition Networks S4224 Web User Guide Message: Invalid parameter Example: Meaning: At Configuration > MEP > Add New MEP you selected an unsupported feature (e.g., Mode = MIP). Recovery: 1. Click OK to clear the webpage message. 2. Click the Add a new MEP button, make another (valid / supported) selection, and then click Save.
Page 566
Meaning: At Configuration > VLANs > VLAN Membership, you tried to delete VLAN ID 1 from the ‘VLAN Membership’ table. This is the default VLAN; if you delete it the S4224 connection will drop. Meaning: You tried to delete a non- existent VLAN translation entry from a group.
Page 567
Recovery: 1. Click the OK button to clear the webpage message. The login prompt displays again. 2. Continue operation - if desired, log back in to the S4224 web interface. 3. If a problem persists, contact TN Tech Support. Message: The value of Port Error Recovery Timeout is 30-84600 The value of Port Error Recovery Timeout cannot be empty Meaning: At Configuration >...
Page 568
Transition Networks S4224 Web User Guide Message: OAM Error - Invalid request on this port Example: Meaning: At Diagnostics > Link OAM Mib Retrieve you selected a port that is not ... Recovery: 1. Click the browser’s back button to clear the message, verify your selection. .
Page 569
Transition Networks S4224 Web User Guide Message: The parameter of ‘port_copy’ can’t be set when action is permitted Meaning: At Configuration > Security > Network > ACL > Ports you set the “Action” parameter to “Permit”, which does not allow the “Port Copy” parameter to be set to a Port (Port 3 on the screen above).
Page 570
Transition Networks S4224 Web User Guide 2. Make sure each port has one configuration (either LACP or Static aggregation) enabled. 3. Verify the aggregation path configuration, click Save, and continue operation. See the “Aggregation Configuration” section on page 63. 4. If a problem persists, contact TN Tech Support.
Page 571
Transition Networks S4224 Web User Guide Message: HW Install - cannot start with this user account. Make sure this user account is a member of the Administrators group on this computer. You do not have sufficient security privileges to install hardware on this computer. Please contact your site administrator, or logout and log in again as an administrator and try again.
Page 572
Transition Networks S4224 Web User Guide Message: Using IPv6 unicast address is not allowed here. Meaning: At Configuration > IPMC > MLD Snooping > Port Group Filtering you entered an IPv6 unicast address in the Filtering Groups field. Recovery: 1. Click the OK button to clear the webpage message.
Page 573
Transition Networks S4224 Web User Guide Message: Entry with Group ID: x already exists, Please give other Group ID value. Invalid Group ID value: xx. Group ID must be an integer between 1 to 8. The maximum entries possible is 6 Meaning: At Configuration >...
Page 574
Transition Networks S4224 Web User Guide Message: The value of Path Cost cannot be empty The value of ‘Path Cost’ is restricted to 1 - 200000000 Meaning: At Configuration > Spanning Tree > CIST Ports you selected “Specific” in the Path Cost dropdown, but did not enter a value in the Path Cost entry field.
Page 575
Transition Networks S4224 Web User Guide Message: Warning: When changing parameters on this page, you may lose IP connectivity. This could in turn require reconfiguration of this PC. Do you want to continue? Meaning: At Configuration > System > IP you checked the DHCP Client Configured checkbox and clicked Save.
Page 576
Transition Networks S4224 Web User Guide Message: The value of ‘Gap’ is restricted to 10-65535 Meaning: At Configuration > MEP > Performance Monitor - Instance in the Delay Measurement section in the Gap field, you entered an invalid value. Recovery: 1.
Page 577
Transition Networks S4224 Web User Guide Message: ‘Sample interval’ must be an integer value between 1- 3600 Meaning: At the Configuration > Security > Switch > SNMP > RMON > History menu path in the Interval field, you entered an invalid number.
Page 578
Configuration” on page 50. Message: This browser doesn't support dynamic tables. Meaning: The browser you are using is not supported. Recovery: Use a browser that the S4224 supports. See “Web Browser Support” on page Message: Port %lu does not support this mode\n Meaning: The DMI function is not supported on this port.
Page 579
Recovery: 1. Click the OK button to clear the webpage message. 2. Log back in to the S4224 web interface if your web browser can no longer display the webpage. 3. Retry the operation. 4. Check the CLI for the message “Error: ACL policer and EVC policer cannot both be enabled”.
Page 580
3. Click the Information Bar (“To help protect ...”) and then click “Display Blocked Content”. 4. At the message “There is a problem with this website's security certificate.”, click “Continue to this website (not recommended).” 5. Log back in to the S4224 system. 6. Click on ‘Certificate Error”. 7. Click on “View Certificates”.
Page 581
Recovery: 1. Click the OK button to clear the webpage message. 2. Click the Remove All button. Internet connectivity is likely lost, and the S4224 web interface is temporarily unavailable. 3. From the CLI, enter the command conf default keep_ip and press Enter.
Page 582
Transition Networks S4224 Web User Guide Message: Frame Type: 1 and value: 0800 is already mapped to Group ID: ‘a1’ Meaning: At Configuration > VCL > Protocol-based VLAN > Protocol to Group you tried to Save a second similar configuration.
Page 583
Meaning: High amount of broadcast packets received on a port will cause loss of management of the S4224. This happens, even when STP is blocking the port which is the source of broadcasts, and when QoS Storm Control feature is configured to limit broadcast packets as low as 1pps.
Page 584
S4224 receiving excess broadcast packets causes loss of management. Meaning: S4224 CPU overload and loss of management occur even when STP is discarding all packets from the port that the broadcasts are from, and when QoS Storm Control is configured to limit broadcast packets to rates as low as 1pps.
Page 585
Read request for file <S4224-master.dat>. Mode OCTET [04/01 12:36:07.613] Using local port 3505 [04/01 12:36:07.613] <S4224-master.dat>: sent 6956 blks, 3561330 bytes in 4 s. 0 blk resent [04/01 12:36:11.081] Meaning: Standard messages received from TFTPd32 Log Viewer tab. Recovery: None; information only. Tftpd32 is an open source IPv6 ready application with free DHCP, TFTP, DNS, SNTP and Syslog servers, and a TFTP client.
Page 586
Problem: Management Port EtherType 9100 does not function Meaning: When Management Port Ethertype Customer S-port is set to 9100, S4224 access via the MGMT port is lost. This is a known issue with a fix in process, available at the next S4224 version release.
Page 587
The separate APS MEP is configured with CCM disabled and APS enabled. Meaning: This is a known issue with a fix in process; available at the next S4224 version release. The S4224 boot script runs, and a series of messages displays:...
Page 588
This is a known issue with a fix in process, available at the next S4224 version release. Recovery: 1. Make sure you are running the latest version of S4224 software; upgrade if a newer version is available. 2. If possible, use the existing certificate.
Page 589
Meaning: Information message indicating that you initiated a firmware update from the Maintenance > Software > Upload menu path. This procedure transfers the uploaded firmware image to the S4224 flash component. The S4224 will restart after the update. Note: do not reset or power off the S4224 during this process.
Page 590
Transition Networks S4224 Web User Guide Message: OUI should have 3 digit groups Meaning: At the Configuration > Voice VLAN > OUI menu path, you entered an invalid Telephony OUI. Recovery: 1. Click the OK button to clear the webpage message.
Page 591
Message: >E api 00:28:25 57/vtss_vcap_add#640: Error: VCAP IS1: Could not find ID: 2 E web 00:28:25 57/handler_config_evc_edit#311: Error: evc_mgmt_add(0): failed Meaning: At the S4224 Configuration > Ethernet Services menu path, you tried to set up the ECE before setting up the related EVC.
Page 592
Problem: The "psec_limit" cannot work when configuration "limit" is "1024". The S4224 fails to send the trap only when the limit control reaches ‘1024’ at the 5 packets/sec. rate. Also, some the highwarn and normal DMI traps occur when the limit parameter reaches ‘1023’ or ‘1024’.
Page 593
If you want to proceed anyway, click the OK button. Problem: 'System Restore Default' hangs intermittently and indefinitely. Meaning: This appears to only happen when an EVC/ECE is configured. In S4224 v1.2.1 and above, EVC and ECE configurations are removed when you execute a System Restore via the web (Maintenance >...
Page 594
Warning: FPGA 1.1 required Warning: FPGA 2.x required Meaning: The S4224 does not automatically reboot after FPGA upgrade, but should be rebooted to ensure proper operation. Recovery: We recommend upgrading the FPGA first, then the software, because the unit will automatically reboot after the software upgrade.
Page 595
Transition Networks S4224 Web User Guide Message: Unable to Run PTP clock is not created on Initiator. This is a PTP validation error. If PTP is not created and RFC2544 latency is chosen Meaning: and you run the test, this error displays and the RFC2544 latency test will not run.
S4224 Web User Guide System Log Messages The S4224 displays four levels of syslog messages as explained below. Note that the All level displays all three levels of information that the S4224 can logged (Informational, Warning, Notice, and Error). Informational Level Messages These are the Information level messages of the system log.
Input Alarm 'd' triggered and message is 's'", alarm.description); section. Note that the All level displays all three levels of information that the S4224 can log (Info, Warning, and Error). Notice Level Messages These messages are the Notice level of the system log. These Warning messages are not an error.
S4224 Web User Guide Third Party Program Messages The S4224 displays error and information messages from various third party applications, such as Internet Explorer, HyperTerminal, PuTTY, etc. This section lists the messages, provides an example, and discusses the message meaning of and possible recovery steps.
Page 599
Transition Networks S4224 Web User Guide Message: Authentication Required Meaning: Normal Firefox login screen. Recovery: Enter your S4224 User Name and Password, and click the Log In button. Message: PuTTY Fatal Error - Server unexpectedly closed network connection Meaning: Recovery: 1.
Page 600
2. Continue operation. Message: The Connection has timed out Meaning: The S4224 switch cannot communicate with the PC after enabling Flow Control from the Configuration > Port > Configuration menu path. Increasing the CONSOLE Port Max Frame size to the tagged frame length fixes the problem.
Appendix A - Cables and Connectors Cable Types The cabling specifications are provided for troubleshooting purposes. Copper (TP / UTP) CAT 1 – CAT 7 Cabling ANSI/EIA Standard 568 is one of several standards that specify "categories" (each a "CAT") of twisted pair cabling systems.
Transition Networks S4224 Web User Guide Connector Types The DMI connector type indicates the external optical or electrical cable connector provided as the interface. The information below is from SFF 8472 Rev 11.0. For additional information see the latest SFF-8472 Specification at ftp://ftp.seagate.com/sff/SFF-8472.PDF.
Appendix B - Licenses This appendix provides S4224 license information. At the Monitor > System > Information menu path you can click the Acknowledgments > Details link to display the current set of source code from the various Open-Source components.
Page 604
Transition Networks S4224 Web User Guide The majority of code is written by Matt Johnston, under the license below. Portions of the client-mode work are (c) 2004 Mihnea Stoenescu, under the same license: Copyright (c) 2002-2006 Matt Johnston Portions copyright (c) 2004 Mihnea Stoenescu All rights reserved.
Page 605
Transition Networks S4224 Web User Guide publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
Page 606
Transition Networks S4224 Web User Guide WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
Page 607
Transition Networks S4224 Web User Guide Copyright 1989, 1991, 1992 by Carnegie Mellon University Derivative Work - 1996, 1998-2000 Copyright 1996, 1998-2000 The Regents of the University of California All Rights Reserved Permission to use, copy, modify and distribute this software and its...
Page 608
Transition Networks S4224 Web User Guide * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * The name of Cambridge Broadband Ltd. may not be used to endorse or promote products derived from this software without specific prior written permission.
Page 609
Transition Networks S4224 Web User Guide * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of Sparta, Inc nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
Page 610
Transition Networks S4224 Web User Guide notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
Page 611
Transition Networks S4224 Web User Guide must display the following acknowledgement: This product includes software developed by the University of California, Berkeley and its contributors. 4. Neither the name of the University nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
Page 612
Transition Networks S4224 Web User Guide Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
Page 613
Transition Networks S4224 Web User Guide 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. Neither the name(s) of the above-listed copyright holder(s) nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
Page 614
Transition Networks S4224 Web User Guide this file does not by itself cause the resulting work to be covered by the GNU General Public License. However the source code for this file must still be made available in accordance with section (3) of the GNU General Public License v2.
3. QoS (Quality of Service) 4. L2 Protocols (LACP/LAG/MAC/VLAN/Mirroring/Remote Mirroring Not Intended for Use in Life Support Products: S4224 products are not intended for use in life support products, systems, or environments where failure of an S4224 product could reasonably be expected to result in death or personal injury.
See the related Install Guide manual for: Service Warranty Compliance Information Declaration of Conformity Electrical Safety Warnings Safety Instructions for Rack Mount Installations other related S4224 information. 33558 Rev. C https://www.transition.com Page 616 of 669...
Transition Networks S4224 Web User Guide Appendix E: SNMP Traps and MIBs MIBs Supported The following MIBs are supported per the CE Services spec: RFC1213 MIB II IEEE8021-Q BRIDGE MIB RFC 2819 RMON (Group 1,2,3, 9) RFC 2863 Interface Group MIB using SMIv2...
Transition Networks S4224 Web User Guide tn-mibs-v2.2.1.zip file \tn-mibs-v2.2.x \standards \draft_standards 33558 Rev. C https://www.transition.com Page 618 of 669...
Transition Networks S4224 Web User Guide The S4224 supports public (standard) and private Management Information Bases (MIBs). The S4224 public MIBs are listed below. Table 9: Public MIBs Note MIB for Network Management of TCP/IP-based internets: MIB-II. RFC 1213 MIB II Defines the second version of the MIB-II for use with network management protocols in TCP/IP-based internets.
Page 620
Transition Networks S4224 Web User Guide Note Interfaces Group MIB defines a portion of the Management Information Base (MIB) for use with network management protocols in the Internet RFC 2863 Interface Group MIB community. In particular, it describes managed objects used for managing Network Interfaces.
Page 621
Transition Networks S4224 Web User Guide Note Service OAM Fault Management Definition of Managed Objects; specifies the Fault Management (FM) MIB necessary to implement the Service Operations, Administration, and Maintenance (OAM) that satisfies the Service OAM requirements and framework specified by MEF 17, the Service...
Transition Networks S4224 Web User Guide The S4224 private MIBs are listed below. Table 10: Private MIBs M I B fi l e T ab l e T N -M G M T -M I B . sm i t nE t hI nt erf aceT abl e T N -M G M T -M I B .
Page 623
Transition Networks S4224 Web User Guide M I B fi l e T ab l e T N -E T H S O A M -M I B t nE t hS oam Local C f gT abl e T N -E T H S O A M -M I B...
SNMP Primer at http://www.transition.com/pshelp/snmp.html#indices. The following sections detail S4224 configuration, monitoring, diagnostics, and maintenance via the S4224 web interface (menu system). See the S4224 CLI Reference manual for S4224 configuration, monitoring, diagnostics, and maintenance via the CLI (Command Line Interface).
Table 11: Traps List Trap MIB Variable Binding Cause SNMPv2-MIB:coldStart NULL 1.3.6.1.6.3.1.1.5.1 When the device undergoes a reboot. SNMPv2-MIB:warmStart NULL 1.3.6.1.6.3.1.1.5.2 <Not implemented> 1: ifIndex SNMPv2-MIB:linkDown 2: ifAdminStatus 1.3.6.1.6.3.1.1.5.3 When a port’s link goes down due to adminstate change or due to physical layer connection. 3: ifOperStatus 1: ifIndex SNMPv2-MIB:linkUp...
Transition Networks, Inc. S4224 Web User Guide Glossary This section describes many of the terms and mnemonics used in this manual. Note that the use of or description of a term does not in any way imply support of that feature or of any related function(s).
Page 633
ACL can generally be configured to control inbound traffic, and in this context, they are similar to firewalls. There are three S4224 web pages associated with the manual ACL configuration: ACL|Access Control List: The web page shows the ACEs in a prioritized way, highest (top) to lowest (bottom).
Transition Networks, Inc. S4224 Web User Guide c. Minor - Indicates that a non-service affecting condition has occurred and that corrective action should be taken in order to prevent a more serious fault. d. Warning - Indicates the detection of a potential or impending service affecting fault, before any significant effects have been felt.
Page 635
Transition Networks, Inc. S4224 Web User Guide ARP is an acronym for Address Resolution Protocol. It is a protocol that used to convert an address into a physical address, such as an Ethernet address. ARP allows a host to communicate with other hosts when only the Internet address of its neighbors is known.
Page 636
Transition Networks, Inc. S4224 Web User Guide CC Monitoring (Continuity Checks Monitoring) Fault detection uses the Continuity Check protocol to detect both connectivity failures and unintended connectivity between service instances. Each MEP can periodically transmit a multicast Connectivity Check Message (CCM) announcing the identity of the MEP and its MA, and tracks the CCMs received from the other MEPs.
Page 637
Transition Networks, Inc. S4224 Web User Guide The following list of EtherTypes is unverified information from various sources. EtherType (hex) Protocol 0x000 - 0x05DC IEEE 802.3 length 0x0101-0x01FF Experimental 0x0600 Xerox NS IDP 0x0660, 0x0661 DLOG 0x0800 IP (Internet Protocol) 0x0801 X.75 Internet...
Page 638
Transition Networks, Inc. S4224 Web User Guide 0xFFFF (Reserved) Note: Some well-known EtherTypes are not necessarily listed in the IEEE list of EtherType values. For example, EtherType 0x0806 (used by ARP) is listed by the IEEE only as "Symbolics, Inc., Protocol unavailable."...
Transition Networks, Inc. S4224 Web User Guide Deprecated address In IPv6, an address assigned to an interface whose use is discouraged, but not forbidden. A deprecated address should no longer be used as a source address in new communications, but packets sent from or to deprecated addresses are delivered as expected.
Page 640
Transition Networks, Inc. S4224 Web User Guide Diagnostic Monitoring Interface; the S4224 is capable of supporting connectors with DMI (SFF-8472) capability. All DMI events will trigger notification. An intrusion detection based on Rx Power level is available for triggering any drop in the Rx power.
Page 641
Transition Networks, Inc. S4224 Web User Guide The authenticator acts like a ‘security guard’ to a protected network. The supplicant (client device) is not allowed access through the authenticator to the protected side of the network until the supplicant’s identity has been validated and authorized.
Page 642
Transition Networks, Inc. S4224 Web User Guide links. The mechanisms and protocol defined in G.8032 provide highly reliable and stable protection; and avoid loops which would prove fatal to network operation and service availability. Each Ethernet Ring Node is connected to adjacent Ethernet Ring Nodes participating in the same Ethernet Ring, using two independent links.
Page 643
Transition Networks, Inc. S4224 Web User Guide Ethernet ring node A network element which implements at least the following functionalities: a) One Ethernet connection function (ETH_C) with a dedicated Ethernet flow forwarding function (ETH_FF) for forwarding ring automatic protection switching (R-APS) control traffic.
Transition Networks, Inc. S4224 Web User Guide (Frame Check Sequence) per MEF 8, 11, 12. flow A given type of traffic sent between a producer device through a network to an endpoint known as a consumer. As the traffic goes through the network, it “flows” through the network. See also "Per flow QoS".
Page 645
Transition Networks, Inc. S4224 Web User Guide HQoS ueuing organized into 8 classes for each service on the port. HQoS provides (Hierarchical Quality of Service) Q more granular traffic control and quality assurance services than traditional QoS. HQoS uniformly manages traffic and "hierarchically" schedules traffic by user, network service, and application.
Transition Networks, Inc. S4224 Web User Guide IGMP IGMP (Internet Group Management Protocol) is a communications protocol used to manage the membership of Internet Protocol multicast groups. IGMP is used by IP hosts and adjacent multicast routers to establish multicast group memberships. It is an integral part of the IP multicast specification, like ICMP for unicast connections.
Page 647
Transition Networks, Inc. S4224 Web User Guide Interconnection node An Ethernet ring node which is common to two or more Ethernet rings or to a sub-ring and an interconnected network. At each interconnection node there may be one or more Ethernet rings that can be accessed through a single ring port and not more than one Ethernet ring that is accessed by two ring ports.
Transition Networks, Inc. S4224 Web User Guide IPv6 Header The IPv6 Header format is shown below - from RFC 2460 - IPv6 Specification (Dec. 1998). The IPv6 header fields are: Version: The 4-bit Internet Protocol version number (6). ...
Jumbo frames The S4224 supports jumbo frames. This frame size is set to 10056 bytes or jumbo mode by default. The frame size is configurable to any value from 1500-9600 bytes. The jumbo mode is applicable only for data plane traffic;...
Page 650
LLAG may consist of up to 16 ports. LLAGs are configured the same way as link aggregation groups for a standalone device (e.g., S4224). For both LLAGs and GLAGs, the egress port is chosen based on an ‘aggregation code’ that is calculated for the frame.
Page 651
128-bit hash value. It was designed by Ron Rivest in 1991. MD5 is officially defined in RFC 1321 - The MD5 Message-Digest Algorithm. MD5 is an authentication protocol; one of two cryptography methods used for S4224 user authentication. MD5 is a widely used cryptographic hash function with a 128-bit hash value. Specified in RFC 1321, MD5 is used in a wide range of security applications, and is also commonly used to check file integrity.
Page 652
MEPs. A MIP does not initiate proactive or diagnostic OAM frames. See also “MEP”. Mirroring For debugging network problems or monitoring network traffic, the S4224 can be configured to mirror frames from multiple ports to a mirror port. (In this context, mirroring a frame is the same as copying the frame.) Both incoming (source) and outgoing (destination) frames can be mirrored to the mirror port.
Transition Networks, Inc. S4224 Web User Guide used by IPv6 routers to discover multicast listeners on a directly attached link (much as IGMP is used in IPv4). MLD is embedded in ICMPv6 instead of using a separate protocol. MLDv1 is similar to IGMPv2 and MLDv2 similar to IGMPv3.
Page 654
Transition Networks, Inc. S4224 Web User Guide NENA National Emergency Number Association, the body responsible for evolution of public ECS architectures in North America. NetBIOS NetBIOS (Network Basic Input/Output System) is a program that allows applications on separate computers to communicate within a Local Area Network (LAN), and it is not supported on a Wide Area Network (WAN).
Page 655
A clock that provides time information using a single event message. Optional TLVs An LLDP frame contains multiple TLVs. For some TLVs it is configurable if the S4224 includes the TLV in the LLDP frame. These TLVs are known as optional TLVs. If an optional TLVs is disabled the corresponding information is not included in the LLDP frame.
Page 656
Transition Networks, Inc. S4224 Web User Guide Path Cost A path cost value is given to each port. The cost is usually based on 802.1d guidelines. According to the original specification, cost is 1,000 Mbps (1 gigabit per second) divided by the bandwidth of the segment connected to the port.
Page 657
Transition Networks, Inc. S4224 Web User Guide the packets. Ping was created to verify whether a specific computer on a network or the Internet exists and is connected. uses Internet Control Message Protocol (ICMP) packets. The PING Request is the packet Ping from the origin computer, and the PING Reply is the packet response from the target.
Page 658
Transition Networks, Inc. S4224 Web User Guide QCL (QoS Control List) is the list table of QCEs, containing QoS control entries that classify to a specific QoS class on specific traffic objects. Each accessible traffic object contains an identifier to its QCL. The privileges determine specific traffic object to specific QoS class.
Page 659
Transition Networks, Inc. S4224 Web User Guide RDI (Remote Defect Indication) is an OAM function used by a MEP to indicate a defect detected to the remote peer MEP. The IEEE Remote Defect Indication (RDI) is a single bit carried by the CCM. The absence of RDI in a CCM indicates that the transmitting MEP is receiving CCMs from all configured MEPs.
Page 660
(known as a message digest) of an input data sequence (the message) of any length. SHA is an authentication protocol; one of two cryptography methods used for S4224 user authentication. SHA-1 is a cryptographic hash function designed by the National Security Agency (NSA) and published by the NIST as a U.S.
Page 661
Ethernet networks: continuity check, link trace and loopback protocols. The S4224 supports both Link layer OAM (LOAM, per IEEE 802.3–2005 Clause 57) and Service layer OAM (SOAM, per IEEE 802.1AG and Y.1731).Compare to ‘LOAM’.
Page 662
Transition Networks, Inc. S4224 Web User Guide SPME TCM can be supported by the instantiation of a sub-path maintenance element (SPME) that has a 1:1 relationship with the monitored connection. See IETF RFC 6371 section 3.2. The SPME is then monitored using normal label switched path (LSP) monitoring.
Page 663
Transition Networks, Inc. S4224 Web User Guide interpreted by the server. An example of a stateless protocol is HTTP. The protocol provides no means of storing a user's data between requests. As a work-around, HTTP Servers implement various session management methods, typically utilizing a unique identifier in a cookie or parameter that allows the server to track requests originating from the same client.
Page 664
Throttling An S4224 function used to limit the number of multicast groups to which a switch port can belong. ToS (Type of Service) is implemented as the IPv4 ToS priority control. It is fully decoded to determine the priority from the 6-bit ToS field in the IP header.
Page 665
Transition Networks, Inc. S4224 Web User Guide UDP (User Datagram Protocol) is a communications protocol that uses the Internet Protocol (IP) to exchange the messages between computers. UDP is an alternative to the Transmission Control Protocol (TCP) that uses the Internet Protocol (IP). Unlike TCP, UDP does not provide the service of dividing a message into packet datagrams, and UDP doesn't provide reassembling and sequencing of the packets.
Transition Networks, Inc. S4224 Web User Guide Valid IPv6 address In IPv6, a preferred or deprecated address. A valid address may appear as the source or destination address of a packet, and the internet routing system is expected to deliver packets sent to a valid address to their intended recipients.
Transition Networks, Inc. S4224 Web User Guide In Cases E and F above, the SOAM PDUs that were inserted in the un-tagged or single-tagged portions of the path are invisible to all points that are double tagged (since the double-tagged part of the path (the ‘tunnel’) has hidden the fact that a frame is a SOAM PDU with the addition of a second (outer) tag).
Transition Networks, Inc. S4224 Web User Guide Index 1:1 port protection scheme ....... 212 Loop Protection Configuration ......155 N port protection scheme ........212 Loopback Configuration ........224 1+1 port protection scheme ......212 MAC Address Table Configuration ....260 AAA Configuration ..........
Need help?
Do you have a question about the S4224 and is the answer not in the manual?
Questions and answers