ORing warrants that all ORing products are free from defects in material and workmanship for a specified warranty period from the invoice date (5 years for most products). ORing will repair or replace products found by ORing to be defective within this warranty period, with shipment expenses apportioned by ORing and the distributor.
IGS-9844/9848GPF series are managed Ethernet switches with eight 10/100/1000Base-T(X) ports, four 100/1000Base-X SFP ports, and four (IGS-9844 GPF series) or eight (IGS-9848GPF series) 1000Base-X optical fiber ports with SC connectors. With complete support for Ethernet redundancy protocols such as O-Ring (recovery time < 30ms over 250 units of...
4 x 100/1000Base-X SFP ports 4 x 1000Base-X optical fiber ports (IGS-9844 GPF series) or 8 x 1000Base-X (IGS-9848GPF series) optical fiber ports 1 x console port Dimensions: 96.4 (W) x 105.5 (D) x 154 (H) mm (3.8 x 4.15 x 6.06 inch)
Copper port 4 x 100/1000Base-X SFP port 4 x 1000Base-X (IGS-9844GPF series) or 8 x 1000Base-X Fiber port (IGS-9848GPF series), SC connector 1 console port Console port Reset button Press reset button 2 to 3 seconds to reset the switch.
(power failure port Fault Amber malfunctioning) 10/100/1000Base-T(X) Fast Ethernet ports Green Ethernet running at 1000Mbps Link/Act Amber Ethernet running at 10/100Mbps SFP & 100Base-FX or 1000Base-X Fiber Port Port link up Link/Act Green Transmitting data ORing Industrial Networking Corp...
Din-rail installation (blue box in the figure below). For more information on installation, please refer to 23.1 Din-rail Installation. 1. Wall-mount screw holes 2. Din-rail screw holes ORing Industrial Networking Corp...
Installing the switch on the DIN-rail is easy. First, screw the Din-rail kit onto the back of the switch, right in the middle of the back panel. Then slide the switch onto a DIN-rail from the Din-rail kit and make sure the switch clicks into the rail firmly. ORing Industrial Networking Corp...
To mount the switch onto the wall, follow the steps: 1. Screw the two pieces of wall-mount kits onto both ends of the rear panel of the switch. A total of six screws are required, as shown below. ORing Industrial Networking Corp...
Page 14
Tighten the four screws for added stability. Note: Instead of screwing the screws in all the way, leave about 2 mm to allow room for sliding the wall mount panel between the wall and the screws. ORing Industrial Networking Corp...
The switch has two sets of power inputs, power input 1 and power input 2. The top two contacts and the bottom two contacts of the 6-pin terminal block connector on the switch‟s top panel are used for the two digital inputs. Follow the steps below to wire redundant power ORing Industrial Networking Corp...
With 10/100/1000Base-T(X) cables, pins 1 and 2 are used for transmitting data, and pins 3 and 6 are used for receiving data. 10/100 Base-T(X) RJ-45 Pin Assignments: Pin Number Assignment Not used Not used Not used Not used ORing Industrial Networking Corp...
Page 17
RD-(receive) TD-(transmit) Not used Not used Not used Not used 1000Base-T(X) MDI/MDI-X Pin Assignments: Pin Number MDI port MDI-X port BI_DA+ BI_DB+ BI_DA- BI_DB- BI_DB+ BI_DA+ BI_DC+ BI_DD+ BI_DC- BI_DD- BI_DB- BI_DA- BI_DD+ BI_DC+ BI_DD- BI_DC- ORing Industrial Networking Corp...
The fiber optical ports are in multi-mode and single-mode with LC connectors. Please remember that the TX port of Switch A should be connected to the RX port of Switch B. Switch A Switch B Fiber cord ORing Industrial Networking Corp...
For more inforamtion on port setting, please refer to 4.1.2 Configurations. Once the setting is completed, one of the connections will act as the main path while the other will act as the backup path . ORing Industrial Networking Corp...
Page 20
RSTP network (core switches). The connection of one of the switches (Switch A or B) will act as the primary path, while the other will act as the backup path that is activated when the primary path connection fails. ORing Industrial Networking Corp...
Page 21
(see 4.1.2 Configurations). 3. Once the setting is completed, one of the connections will act as the main path, and the ohter as the back up path. ORing Industrial Networking Corp...
4.1 O-Ring 4.1.1 Introduction O-Ring is ORing's proprietary redundant ring technology, with recovery time of less than 30 milliseconds (in full-duplex Gigabit operation) or 10 milliseconds (in full-duplex Fast Ethernet operation) and up to 250 nodes. The ring protocols identify one switch as the master of the network, and then automatically block packets from traveling through any of the network‟s...
Page 23
RSTP mode. Click to apply the configurations. Apply Note: due to heavy computing loading, setting one switch as ring master and coupling ring at the same time is not recommended. ORing Industrial Networking Corp...
IGS-9844/9848GPF Series User Manual 4.2 O-Chain 4.2.1 Introduction O-Chain is ORing‟s revolutionary network redundancy technology which enhances network redundancy for any backbone networks, providing ease-of-use and maximum fault-recovery swiftness, flexibility, compatibility, and cost-effectiveness in a set of network redundancy topologies. The self-healing Ethernet technology designed for distributed and complex...
(Advanced mode) converge more rapidly. This function only can be set in MRP manager switch. Ring Port Chooses the port which connects to the MRP ring Ring Port Chooses the port which connects to the MRP ring ORing Industrial Networking Corp...
The current state of the Topology Change Flag for the bridge Topology Flag instance. Topology Change Last The time since last Topology Change occurred. Refresh Click to refresh the page immediately. Check this box to enable an automatic refresh of the page at Auto-refresh regular intervals. ORing Industrial Networking Corp...
Page 27
Refresh Click to refresh the page immediately. Check this box to enable an automatic refresh of the page at Auto-refresh regular intervals. STP Statistics This page displays the STP port statistics for the currently selected switch. ORing Industrial Networking Corp...
Page 28
The range of valid values is 6 to 40 seconds, and Max Age must be <= (FwdDelay-1)*2. This defines the initial value of remaining hops for MSTI Maximum Hop Count information generated at the boundary of an MSTI region. It ORing Industrial Networking Corp...
MSTI instance configured and applicable for the port. The MSTI instance must be selected before MSTI port configuration options are displayed. This page contains MSTI port settings for physical and aggregated ports. The aggregation settings are stack global. ORing Industrial Networking Corp...
Page 30
This page allows you to examine and change the configurations of current STP MSTI bridge instance. Label Description The name which identifies the VLAN to MSTI mapping. Bridges Configuration Name must share the name and revision (see below), as well as the ORing Industrial Networking Corp...
Page 31
Reset saved values. Priority This page allows you to examine and change the configurations of current STP MSTI bridge instance priority. Label Description The bridge instance. CIST is the default instance, which is always MSTI active. ORing Industrial Networking Corp...
The path cost is used when establishing an active topology for the network. Lower path cost ports are chosen as forwarding ports in favor of higher path cost ports. The range of valid values is 1 to 200000000. ORing Industrial Networking Corp...
Page 33
Transiting to forwarding state is faster for point-to-point LANs than for shared media. Save Click to save changes. Click to undo any changes made locally and revert to previously Reset saved values. ORing Industrial Networking Corp...
Active Activate fast recovery mode port Ports can be set to 12 priorities. Only the port with the highest priority will be the active port. 1st Priority is the highest. Apply Click to activate the configurations. ORing Industrial Networking Corp...
Type in the username and password. The default username and password is admin. Press Enter or click OK, the management page appears. Note: you can use the following default values: IP Address: 192.168.10.1 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.10.254 ORing Industrial Networking Corp...
5.1 Basic Settings The Basic Settings page allows you to configure the basic functions of the switch. 5.1.1 System Information This page shows the general information of the switch. ORing Industrial Networking Corp...
Click to undo any changes made locally and revert to previously Reset saved values. 5.1.2 Admin & Password This page allows you to configure the system password required to access the web pages or log in from CLI. ORing Industrial Networking Corp...
This is only possible if Authentication Method is set to a value other than none or local. Save Click to save changes Click to undo any changes made locally and revert to previously Reset saved values ORing Industrial Networking Corp...
Click to undo any changes made locally and revert to previously Reset saved values 5.1.5 IPv6 Settings IPv6 is the next-generation IP that uses a 128-bit address standard. It is developed to supplement, and eventually replace the IPv4 protocol. You can configure IPv6 information of ORing Industrial Networking Corp...
Page 40
It can also represent a legally valid IPv4 address. For example, '::192.1.2.34'. Save Click to save changes Click to undo any changes made locally and revert to previously Reset saved values ORing Industrial Networking Corp...
Label Description Indicates the selected SSH mode. The modes include: Mode Enabled: enable SSH. Disabled: disable SSH. Save Click to save changes Click to undo any changes made locally and revert to previously Reset saved values ORing Industrial Networking Corp...
LLDP information received from its neighbors. LLDP Neighbor Information This page provides a status overview for all LLDP neighbors. The following table contains information for each port on which an LLDP neighbor is detected. The columns include the following information: ORing Industrial Networking Corp...
Page 43
LLDP Statistics This page provides an overview of all LLDP traffic. Two types of counters are shown. Global counters will apply settings to the whole switch stack, while local counters will apply settings to specified switches. ORing Industrial Networking Corp...
Page 44
Chassis ID or Remote Port ID is not included in the table. Entries are removed from the table when a given port links down, an LLDP shutdown frame is ORing Industrial Networking Corp...
(HMI) and programmable logic controllers. This page enables you to enable and disable Modbus TCP support of the switch. Label Description Mode Shows the existing status of the Modbus TCP function ORing Industrial Networking Corp...
This page allows you to set up DHCP settings for the switch. You can check the Enabled checkbox to activate the function. Once the box is checked, you will be able to input information in each column. ORing Industrial Networking Corp...
You can configure the function in this page. Label Description Relay Mode Indicates the existing DHCP relay mode. The modes include: Enabled: activate DHCP relay. When DHCP relay is enabled, the ORing Industrial Networking Corp...
Page 48
Keep: keep the original relay information when a DHCP message containing the information is received. Drop: drop the package when a DHCP message containing the information is received. The relay statistics shows the information of relayed packets of the switch. ORing Industrial Networking Corp...
Page 49
The number of received packets containing relay agent information Replace Agent Option The number of packets replaced when received messages contain relay agent information. Keep Agent Option The number of packets whose relay agent information is retained ORing Industrial Networking Corp...
Auto selects the highest speed supported by the link partner Speed Disabled disables switch port configuration <> configures all ports When Auto is selected for the speed, the flow control will be Flow Control negotiated to the capacity advertised by the link partner. ORing Industrial Networking Corp...
In addition, it is useful when a single physical link between the devices is insufficient to handle the traffic load. This page allows you to configure the aggregation hash mode and the aggregation group. ORing Industrial Networking Corp...
Page 52
By default, no ports belong to any aggregation group. Only full duplex ports can join an aggregation and the ports must be in the same speed in each group. ORing Industrial Networking Corp...
Indicates LACP activity status. Active will transmit LACP packets every second, while Passive will wait for a LACP packet from a partner (speak if spoken to). Save Click to save changes Reset Click to undo changes made locally and revert to previous values ORing Industrial Networking Corp...
Page 54
Auto-refresh intervals LACP Status This page provides an overview of the LACP status for all ports. Label Description Port Switch port number LACP Yes means LACP is enabled and the port link is up. No means ORing Industrial Networking Corp...
Page 55
The number of unknown or illegal LACP frames discarded at each port. Refresh Click to refresh the page immediately Check to enable an automatic refresh of the page at regular Auto-refresh intervals Clear Click to clear the counters for all ports ORing Industrial Networking Corp...
Label Description Port Switch port number Enable Activate loop protection functions (as a whole) Action Configures the action to take when a loop is detected. Valid values include Shutdown Port, Shutdown Port, and Log or ORing Industrial Networking Corp...
After clicking Save, the new VLAN will be enabled on the selected Add New VLAN switch stack but contains no port members. A VLAN without any port members on any stack will be deleted when you click Save. Click Delete to undo the addition of new VLANs. ORing Industrial Networking Corp...
VLAN of the frame, the frame will be discarded. By default, ingress filtering is disabled (no check mark). Determines whether the port accepts all frames or only Frame Type tagged/untagged frames. This parameter affects VLAN ingress processing. If the port only accepts tagged frames, untagged ORing Industrial Networking Corp...
Page 59
2. If the TPID of tagged frame is not 0x8100 the Egress Rule. (ex. 0x88A8), it will be discarded. C-port When the port receives untagged frames, an The TPID of a frame ORing Industrial Networking Corp...
Page 60
0x8100, it will be forwarded. user 2. If the TPID of tagged frame is not 0x88A8 Ethertype for Custom (ex. 0x8100), it will be discarded. S-ports. Below are the illustrations of different port types: ORing Industrial Networking Corp...
Page 61
IGS-9844/9848GPF Series User Manual ORing Industrial Networking Corp...
Page 62
IGS-9844/9848GPF Series User Manual Examples of VLAN Settings VLAN Access Mode: Switch Port 7 is VLAN Access mode = Untagged 20 Port 8 is VLAN Access mode = Untagged 10 Below are the switch settings. ORing Industrial Networking Corp...
Page 63
IGS-9844/9848GPF Series User Manual VLAN 1Q Trunk Mode: Switch Port 1 = VLAN 1Qtrunk mode = tagged 10, 20 Port 2 = VLAN 1Qtrunk mode = tagged 10, 20 Below are the switch settings. ORing Industrial Networking Corp...
Page 64
IGS-9844/9848GPF Series User Manual VLAN Hybrid Mode: Port 1 VLAN Hybrid mode = untagged 10 Tagged 10, 20 Below are the switch settings. ORing Industrial Networking Corp...
Page 65
IGS-9844/9848GPF Series User Manual VLAN QinQ Mode: VLAN QinQ mode is usually adopted when there are unknown VLANs, as shown in the figure below VLAN “X” = Unknown VLAN 9000 Series Port 1 VLAN Settings: ORing Industrial Networking Corp...
VLAN 1 and private VLAN 1. Label Description Delete Check to delete the entry. It will be deleted during the next save. Private VLAN ID Indicates the ID of this particular private VLAN. ORing Industrial Networking Corp...
Page 67
A check box is provided for each port of a private VLAN. When checked, port isolation is enabled for that port. Port Members When unchecked, port isolation is disabled for that port. By default, port isolation is disabled for all ports. ORing Industrial Networking Corp...
The allowed string length is 0 to 255, and only ASCII characters from 33 to 126 are allowed. Write Community The field only suits to SNMPv1 and SNMPv2c. SNMPv3 uses USM for authentication and privacy and the community string will be associated with SNMPv3 community table. ORing Industrial Networking Corp...
Page 69
128 bits represented as eight groups of four Trap Destination hexadecimal digits with a colon separating each field (:). For IPv6 Address example, in 'fe80::215:c5ff:fe03:4dc7', the symbol '::' is a special syntax that can be used as a shorthand way of representing multiple ORing Industrial Networking Corp...
SNMP community. It will not respond to requests from management stations that do not belong to one of its commun ities. This page allows you to configure SNMPv3 community table. The entry index key is Community. ORing Industrial Networking Corp...
ID is the same as system engine ID, then it is local user; otherwise it's remote user. A string identifying the user name that this entry should belong to. User Name The allowed string length is 1 to 32, and only ASCII characters from ORing Industrial Networking Corp...
SNMP group should match the security model of the SNMP group. These parameters specify what type of authentication and privacy a user within an SNMP group uses. Each SNMP group name and security model pair must be unique. This page allows you to configure the SNMPv3 ORing Industrial Networking Corp...
You can specify specific areas of the MIB that can be accessed or denied based on the entr ies or create and delete entries in the View table in this page. The entry index keys are View Name and OID Subtree. ORing Industrial Networking Corp...
The allowed string length is 1 to 32, and only ASCII characters from 33 to 126 are allowed. Indicates the security model that this entry should belong to. Possible Security Model security models include: any: Accepted any security model (v1|v2c|usm). ORing Industrial Networking Corp...
Note: frames sent to the CPU of the switch are always limited to approximately 4 kpps. For example, broadcasts in the management VLAN are limited to this rate. The management VLAN is configured on the IP setup page. ORing Industrial Networking Corp...
If the port is VLAN aware and the frame is tagged, then the frame is classified to a QoS class that is based on the PCP value in the tag as shown below. Otherwise the frame is classified to the ORing Industrial Networking Corp...
Page 77
Disabled: Use default QoS class and DP level for tagged frames Enabled: Use mapped versions of PCP and DEI for tagged Tag Class frames Click on the mode to configure the mode and/or mapping Note: this setting has no effect if the port is VLAN unaware. ORing Industrial Networking Corp...
Click on the port number to configure tag remarking Shows the tag remarking mode for this port Classified: use classified PCP/DEI values Mode Default: use default PCP/DEI values Mapped: use mapped versions of QoS class and DP level ORing Industrial Networking Corp...
There are two configuration parameters available in Ingress: Translate: check to enable the function Ingress Classify: includes four values Disable: no Ingress DSCP classification DSCP=0: classify if incoming (or translated if enabled) DSCP is 0. Selected: classify only selected DSCP whose classification is ORing Industrial Networking Corp...
When the traffic rate exceeds the configured maximum rate, policing drops or remarks the excess traffic. This page allows you to configure Policer for all switch ports. Port Policing ORing Industrial Networking Corp...
Port scheduling can solve performance degradation during network congestions. The schedulers allow switches to maintain separate queues for packets from each source and prevent specific traffic to use up all bandwidth. This page allows you to configure Scheduler and Shapers for individual ports. ORing Industrial Networking Corp...
Page 82
500. This value is restricted to 100 to 1000000 whn the Unit is kbps", and it is restricted to 1 to 3300 when the Unit is Mbps. Queues Shaper Unit Configures the rate for each queue shaper. The default value is ORing Industrial Networking Corp...
Page 83
A queue is given an amount of bandwidth regardless of the incoming traffic on that port. Queue with larger weights will have more guaranteed bandwidth than others with smaller weights. ORing Industrial Networking Corp...
Configures the unit of measurement for each port shaper rate as Port Shaper Unit kbps or Mbps. The default value is kbps. 5.6.7 Port Scheduler This page provides an overview of QoS Egress Port Schedulers for all switch ports . ORing Industrial Networking Corp...
Shows disabled or actual queue shaper rate - e.g. "800 Mbps" Q0~Q7 Shows disabled or actual port shaper rate - e.g. "800 Mbps" 5.6.9 DSCP-based QoS This page allows you to configure DSCP-based QoS Ingress Classification settings for all ports. ORing Industrial Networking Corp...
QoS class value can be any number from 0-7. Drop Precedence Level (0-1) 5.6.10 DSCP Translation This page allows you to configure basic QoS DSCP translation settings for all switches. DSCP translation can apply to Ingress or Egress. ORing Industrial Networking Corp...
This page allows you to configure the mapping of QoS class and Drop Precedence Level to DSCP value. Label Description QoS Class Actual QoS class Actual Drop Precedence Level DSCP Select the classified DSCP value (0-63) ORing Industrial Networking Corp...
SMAC: Source MAC Address, can be 24 MS bits (OUI) or Any DMAC Type: Destination MAC type, can be unicast (UC), multicast (MC), broadcast (BC) or Any Frame Type can be the following values: Any, Ethernet, LLC, ORing Industrial Networking Corp...
Page 89
DSCP (Differentiated Code Point): can be a specific value, a range, or Any. DSCP values are in the range 0-63 including BE, CS1-CS7, EF or AF11-AF43. Sport Source TCP/UDP port: (0-65535) or Any, specific value or port range applicable for IP protocol UDP/TCP ORing Industrial Networking Corp...
This page shows the QCL status by different QCL users. Each row describes the QCE that is defined. A conflict will occur if a specific QCE is not applied to the hardware due to hardware limitations. The maximum number of QCEs is 256 on each switch. ORing Industrial Networking Corp...
Page 91
QCE may not be available. In that case, it shows conflict Conflict status as Yes, otherwise it is always No. Please note that conflict can be resolved by releasing the hardware resources required to add the QCL entry by pressing Resolve Conflict button. ORing Industrial Networking Corp...
Ethernet switch that leads towards the Layer 3 multicast device or Router Port IGMP querier. If an aggregation member port is selected as a router port, the whole aggregation will act as a router port. Fast Leave Check to enable fast leave on the port ORing Industrial Networking Corp...
VLAN ID The VLAN ID of the entry IGMP Snooping Check to enable IGMP snooping for individual VLAN. Up to 32 Enable VLANs can be selected. IGMP Querier Check to enable the IGMP Querier in the VLAN ORing Industrial Networking Corp...
Indicates whether a specific port is a router port or not 5.7.4 Groups Information of IGMP Snooping Information about entries in the IGMP Group Table is shown in this page. The IGMP Group Table is sorted first by VLAN ID, and then by group. ORing Industrial Networking Corp...
IP address of the remote client. 0.0.0.0 means "any IP". Check to enable management via a Web interface Telnet Check to enable management via a Telnet interface SNMP Check to enable management via a SNMP interface Delete Check to delete entries ORing Industrial Networking Corp...
IGS-9844/9848GPF Series User Manual 5.8.2 Device Binding Device binding is ORing's proprietary technology which binds the IP/MAC address of a device with a specified Ethernet port. If the IP/MAC address of the device connected to the Ethernet port does not conform to the binding requirements, the device will be locked for security concerns.
Page 97
Alive Checking monitors the real-time status of the device connected to the port. Alive-checking packets will be sent to the device to probe if the device is running. If the switch receives no response from the device, actions will be taken according to your configurations. ORing Industrial Networking Corp...
Page 98
When network traffic from a specific device increases significantly in a short period of time, the switch will lock the IP address of that device to protect the network from attacks. You can configure DDoS prevention on this page to achieve maximum protection. ORing Industrial Networking Corp...
Page 99
Reboot Device : if PoE is supported, the device can be rebooted. The event will be logged. Indicates the DDOS prevention status. Possible statuses are: Status ---: disables DDOS prevention Analyzing: analyzes packet throughput for initialization ORing Industrial Networking Corp...
Page 100
Stream check monitors the consistency of real-time network traffic from the device bound with the port. When the traffic changes sharply all of a sudden, an alert will be issued. This page allows you to configure stream check settings. ORing Industrial Networking Corp...
An ACL (Access Control List) is a list of permissions attached to an object. An ACL specifies which users or system processes are authorized to access the objects and what operations are allowed on given objects. Port Configuration ORing Industrial Networking Corp...
Page 102
Disabled: port shut down is disabled. The default value is Disabled. Counter Counts the number of frames that match this ACE. Rate Limiters This page allows you to define the rate limits applied to a port. ORing Industrial Networking Corp...
Page 103
IEEE 802.3 descripts the value of length/types should be greater than or equal to 1536 decimal (equal to 0600 hexadecimal). ARP: only ARP frames can match the ACE. Notice the ARP frames will not match the ACE with Ethernet type. ORing Industrial Networking Corp...
Page 104
(Only displayed when the frame type is Ethernet Type or ARP.) Specifies the source MAC filter for the ACE. SMAC Filter Any: no SMAC filter is specified (SMAC filter status is "don't-care"). Specific: if you want to filter a specific source MAC address with the ORing Industrial Networking Corp...
Page 105
When Specific is selected for the VLAN ID filter, you can enter a VLAN ID specific VLAN ID number. The allowed range is 1 to 4095. Frames matching the ACE will use this VLAN ID value. ORing Industrial Networking Corp...
Page 106
Specific allows you to enter a specific value. The allowed range is 0 IP Protocol Value to 255. Frames matching the ACE will use this IP protocol value. IP TTL Specifies the time-to-live settings for the ACE ORing Industrial Networking Corp...
Page 107
Host: destination IP filter is set to Host. Specify the destination IP address in the DIP Address field that appears. Network: destination IP filter is set to Network. Specify the destination IP address and destination IP mask in the DIP Address ORing Industrial Networking Corp...
Page 108
When Host or Network is selected for the sender IP filter, you can Sender IP Address enter a specific sender IP address in dotted decimal notation. Sender IP Mask When Network is selected for the sender IP filter, you can enter a ORing Industrial Networking Corp...
Page 109
0: ARP/RARP frames where the HLD is equal to Ethernet (1) must not match this entry. 1: ARP/RARP frames where the HLD is equal to Ethernet (1) must match this entry. Any: any value is allowed ("don't-care"). ORing Industrial Networking Corp...
Page 110
When Specific is selected for the ICMP code filter, you can enter a ICMP Code Value specific ICMP code value. The allowed range is 0 to 255. A frame matching the ACE will use this ICMP code value. ORing Industrial Networking Corp...
Page 111
Specific: if you want to filter a specific TCP/UDP destination filter Destination Filter with the ACE, you can enter a specific TCP/UDP destination value. A field for entering a TCP/UDP destination value appears. Range: if you want to filter a specific range TCP/UDP destination ORing Industrial Networking Corp...
Page 112
0: TCP frames where the ACK field is set must not be able to match TCP ACK this entry. 1: TCP frames where the ACK field is set must be able to match this entry. Any: any value is allowed ("don't-care"). ORing Industrial Networking Corp...
The dead time, which can be set to a number between 0 and 3600 Dead Time seconds, is the period during which the switch will not send new requests to a server that has failed to respond to a previous request. ORing Industrial Networking Corp...
Page 114
IP Address address is expressed in dotted decimal notation. The UDP port to use on the RADIUS authentication server. If the port Port is set to 0 (zero), the default port (1812) is used on the RADIUS ORing Industrial Networking Corp...
Page 115
The secret - up to 29 characters long - shared between the RADIUS authentication server and the switch stack. Authentication and Accounting Server Status This page provides information about the status of the RADIUS server configurable on the authentication configuration page. ORing Industrial Networking Corp...
Page 116
The server has temporarily been disabled, but will be re-enabled when the dead-time expires. The number of seconds left before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled. ORing Industrial Networking Corp...
Page 117
This page shows the access statistics of the authentication and accounting servers. Use the server drop-down list to switch between the backend servers to show related details. Label Description Packet Counters RADIUS authentication server packet counters. There are seven ORing Industrial Networking Corp...
Page 118
„receive‟ and four „transmit‟ counters. This section contains information about the state of the server and the latest round-trip time. Other Info Label Description RADIUS accounting server packet counters. There are five „receive‟ Packet Counters „transmit‟ four counters. ORing Industrial Networking Corp...
802.1X authentication. Overview of 802.1X (Port-Based) Authentication In an 802.1X network environment, the user is called the supplicant, the switch is the authenticator, and the RADIUS server is the authentication server. The switch acts as the ORing Industrial Networking Corp...
Page 120
When authentication is complete, the RADIUS server sends a success or failure indication, which in turn causes the switch to open up or block traffic for that particular client, using static entries into the MAC Table. Only then will frames from the client be forwarded on the switch. ORing Industrial Networking Corp...
Page 121
If checked, clients are reauthenticated after the interval specified Reauthentication Period. Reauthentication Reauthentication 802.1X-enabled ports can be used to detect if a new device is Enabled plugged into a switch port. For MAC-based ports, reauthentication is only useful if the ORing Industrial Networking Corp...
Page 122
Unauthorized state. The hold timer does not count during an on-going authentication. The switch will ignore new frames coming from the client during the hold time. The hold time can be set to a number between 10 and 1000000 ORing Industrial Networking Corp...
Page 123
Besides forwarding the result to the supplicant, the switch uses it to open up or block traffic on the switch port connected to the supplicant. Note: in an environment where two backend servers are enabled, ORing Industrial Networking Corp...
Page 124
MAC address once successfully authenticated. b. Multi 802.1X In port-based 802.1X authentication, once a supplicant is successfully authenticated on a port, the whole port is opened for network traffic. This allows other clients connected to the port (for ORing Industrial Networking Corp...
Page 125
"xx-xx-xx-xx-xx-xx", that is, a dash (-) is used as separator between the lower-cased hexadecimal digits. The switch only supports the MD5-Challenge authentication method, so the RADIUS server must be configured accordingly. When authentication is complete, the RADIUS server sends a ORing Industrial Networking Corp...
Page 126
Admin State is in an EAPOL-based or MAC-based mode. Restart Clicking these buttons will not cause settings changed on the page to take effect. Reauthenticate: schedules a reauthentication whenever the ORing Industrial Networking Corp...
Page 127
MAC-based authentication. The user name (supplicant identity) carried in the most recently Last ID received Response Identity EAPOL frame for EAPOL-based authentication, and the source MAC address from the most recently ORing Industrial Networking Corp...
Page 128
The current state of the port. Refer to NAS Port State for more details regarding each value. These supplicant frame counters are available for the following administrative states: • Force Authorized • Force Unauthorized • 802.1X EAPOL Counters Backend Server These backend (RADIUS) frame counters are available for the ORing Industrial Networking Corp...
• 802.1X • MAC-based Auth. Last Supplicant/Client Info 5.9 Alerts 5.9.1 Fault Alarm When any selected fault event happens, the Fault LED on the switch panel will light up and the ORing Industrial Networking Corp...
UDP packet will be resent. Label Description Server Mode Indicates existing server mode. When the mode operation is enabled, the syslog message will be sent to syslog ORing Industrial Networking Corp...
Page 131
By setting up SMTP alert, the device will send a notification e-mail when a user-defined event occurs. Label Description E-mail Alarm Enables or disables transmission of system warnings by e-mail Sender E-mail SMTP server IP address ORing Industrial Networking Corp...
Page 132
Please note that the checkboxes will gray out if SYSLOG or SMTP is disabled. Label Description System Cold Start Sends out alerts when the system is restarted Power Status Sends out alerts when power is up or down ORing Industrial Networking Corp...
Aging enables the switch to track only active MAC addresses on the network and flush out MAC addresses that are no longer used, thereby keeping the table current. By default, aged entries are removed after 300 seconds. You can configure aging time by entering a value in the ORing Industrial Networking Corp...
Page 134
MAC address entries can reduce broadcast packets remarkably and are suitable for networks where network devices seldom change. You can manage the entries in this page. The MAC table is sorted first by VLAN ID and then by MAC address. ORing Industrial Networking Corp...
Page 135
The >> button will use the last entry of the currently displayed VLAN/MAC address pairs as a basis for the next lookup. When it reaches the end, the text "no more entries" is shown in the displayed table. Use the |<< button to start over. ORing Industrial Networking Corp...
This page provides an overview of general traffic statistics for all switch ports. Label Description The switch port number to which the following settings will be Port applied. Packets The number of received and transmitted packets per port ORing Industrial Networking Corp...
Page 137
The displayed counters include the total number for receive and transmit, the size for receive and transmit, and the errors for receive and transmit. Detailed Statistics – Total Receive & Transmit ORing Industrial Networking Corp...
The traffic to be copied to the mirror port can be all frames received on a given port (also known as ingress or source mirroring) or all frames transmitted on a given port (also known as egress or destination mirroring). The port to which the monitored traffic is copied is called mirror port. ORing Industrial Networking Corp...
Tx frames to the mirror port. In this case, mode for the selected mirror port is limited to Disabled or Rx nly. 5.10.4 System Log Information This page provides switch system log information. ORing Industrial Networking Corp...
Note that VeriPHY diagnostics is only accurate for cables 7 - 140 meters long. 10 and 100 Mbps ports will be disconnected while running VeriPHY diagnostics. Therefore, running VeriPHY on a 10 or 100 Mbps management port will cause the switch to stop responding until VeriPHY is completed. ORing Industrial Networking Corp...
SFP modules with DDM (Digital Diagnostic Monitoring) function can measure the temperature of the apparatus, helping you monitor the status of connection and detect errors immediately. You can manage and set up event alarms through DDM Web interface. ORing Industrial Networking Corp...
You can configure the following properties of the issued ICMP packets Label Description IP Address The destination IP Address Ping Size The payload size of the ICMP packet. Values range from 8 to 1400 bytes. IPv6 Ping PING6 server ::192.168.10.1 sendto ORing Industrial Networking Corp...
The following values are possible: True: enable external VCXO rate adjustment False: disable external VCXO rate adjustment Clock Frequency The box allows you to set clock frequency. The range of values is 1 - 25000000 (1 - 25MHz). ORing Industrial Networking Corp...
Page 144
PTP over IPv4 unicast Note: IPv4 unicast protocol only works in Master Only and Slave Only clocks For more information, please refer to Device Type. In a unicast Slave Only clock, you also need to configure which ORing Industrial Networking Corp...
Click to return to the Port State page without resetting 5.12.2 System Reboot You can reset the stack switch on this page. After reset, the system will boot normally as if you have powered on the devices ORing Industrial Networking Corp...
Com port using a RJ45 to DB9-F cable. Follow the steps below to access the console via RS-232 serial cable. Step 1: On Windows desktop, click on Start -> Programs -> Accessories -> Communications -> Hyper Terminal ORing Industrial Networking Corp...
Page 147
IGS-9844/9848GPF Series User Manual Step 2. Input a name for the new connection. Step 3. Select a COM port in the drop-down list. ORing Industrial Networking Corp...
Page 148
Step 5. The console login screen will appear. Use the keyboard to enter the Username and Password (same as the password for Web browsers), then press Enter. ORing Industrial Networking Corp...
Page 149
Step 1. Telnet to the IP address of the switch from the Run window by inputingcommands (or from the MS-DOS prompt) as below. Step 2. The Login screen will appear. Use the keyboard to enter the Username and Password (same as the password for Web browser), and then press Enter. ORing Industrial Networking Corp...
Page 150
IGS-9844/9848GPF Series User Manual Commander Groups ORing Industrial Networking Corp...
Page 164
Port Alive Mode [<port_list>] [enable|disable] Port Alive Action [<port_list>] [do_nothing|link_change|shutdown|only_log|reboot_device] Port Alive Status [<port_list>] Port Stream Mode [<port_list>] [enable|disable] Port Stream Action [<port_list>] [do_nothing|only_log] Port Stream Status [<port_list>] Port Addr [<port_list>] [<ip_addr>] [<mac_addr>] Port Alias [<port_list>] [<ip_addr>] ORing Industrial Networking Corp...
Radius cen tral ized pas sword ma nagemen t SNMPv3 en cryp ted aut henti catio n and ac cess secu rity Https / SSH enhan ce network secu rity Software Featu res STP/RSTP/M STP (IE EE 80 2.1 D/w/s) ORing Industrial Networking Corp...
Need help?
Do you have a question about the IGS-9848GPF and is the answer not in the manual?
Questions and answers