Page 1
LIG1014A LIE1014A Industrial Managed Gigabit Ethernet Switch User Manual Order toll-free in the U.S. or for FREE technical support: Call 877-877-BBOX Contact (outside U.S. call 724-746-5500) Information www.blackbox.com • info@blackbox.com...
Page 2
Industrial Managed Gigabit Ethernet Switch User Manual Trademarks Used in this Manual Black Box and the Double Diamond logo are registered trademarks of BB Technologies, Inc. Any other trademarks mentioned in this manual are acknowledged to be the property of the trademark owners.
Page 3
Disclaimer: Black Box Network Services shall not be liable for damages of any kind, including, but not limited to, punitive, consequential or cost of cover damages, resulting from any errors in the product information or specifications set forth in this document and Black Box Network Services may revise this document at any time without notice.
Industrial Managed Gigabit Ethernet Switch User Manual Instrucciones de Seguridad (Normas Oficiales Mexicanas Electrical Safety Statement) 1. Todas las instrucciones de seguridad y operación deberán ser leídas antes de que el aparato eléctrico sea operado. 2. Las instrucciones de seguridad y operación deberán ser guardadas para referencia futura. 3.
Page 5
Disclaimer: Black Box Network Services shall not be liable for damages of any kind, including, but not limited to, punitive, consequential or cost of cover damages, resulting from any errors in the product information or specifications set forth in this document and Black Box Network Services may revise this document at any time without notice.
What's Included ........................... 12 Additional Items You May Need ......................12 Hardware Description .......................... 12 2.5.1 LIG1014A ..........................12 2.5.2 LIE1014A ........................... 13 Connecting to Your Industrial Managed Gigabit Ethernet Switch ..............14 Connecting to Your Switch via a Serial Console .................. 14 Connecting to the Switch via Telnet ....................
Page 7
Table of Contents Hardware Quick Setup Guide ........................77 What's Included ........................... 77 Mounting the Switch on a DIN Rail ..................... 77 Mounting the Switch on a Wall ......................78 Ethernet Interface ..........................78 5.4.1 RJ-45 ............................78 5.4.2 Fiber SFP ........................... 79 Connecting the Power Terminal Block ....................
IP and MAC-based access control, IEEE 802.1x authentication Network Access Control Power Power Input Redundant Input Terminals Input Voltage Range LIG1014A, LIE1014A (without PoE): 12–58 VDC LIE1014A (with PoE): 46–58 VDC Maximum Power LIG1014A: 17 W, Consumption LIE1014A (without PoE): 14 W, LIE1014A (with PoE): 265 W 877-877-2269 | blackbox.com...
Page 9
IP30 Installation Options DIN-Rail mounting, Wallmounting Dimensions LIG1014A: 6"H x 2.4"W x 4.3"D (15.4 x 6 x 10.9 cm); LIE1014A: 6.1"H x 3.0"W x 5"D (15.4 x 7.7 x 12.8 cm) Weight LIG1014A: 2.4 lb. (1.1 kg); LIE1014A: 3.1 lb. (1.4 kg) 877-877-2269 | blackbox.com...
Page 10
Chapter 1: Specifications System Statistics Function Name System Maximum Value VLAN ID 4096 VLAN Limitation 1024 Privilege Level of User RMON Statistic Entry 65535 RMON Alarm Entry RMON Event Entry 65535 IPMC Profile IPMC Rule / Address Entry ICMP Type / Code RADIUS Server TACACS+ Server MAC-based VLAN Entry...
The Industrial Managed Gigabit Ethernet Switch is a high-quality switch that operates in a wide temperature range and an extended power input range. The switch features advanced VLAN and QoS features. It’s ideal for harsh environments and mission-critical applications. Table 2-1. Available models Component LIG1014A LIE1014A (PoE) Total Gigabit Ethernet Ports 10/100/1000BASE-T(X)
Chapter 2: Overview 2.3 What's Included Your package should contain the following items. If anything is missing or damaged, contact Black Box Technical Support at 877-877-2269 or info@blackbox.com. LIG1014A: • Industrial Managed Gigabit Ethernet Switch with (10) 10/100/1000BASE-T(X) ports and (4) 100/1000BASE SFP ports.
Chapter 2: Overview LIE1014A Front Figure 2-2. LIE1014A, Front Panel and Top Panel. Table 2-3. Components of the LIG1014A and LIE1014A. Number in Figures Component LIG1014A LIE1014A (PoE) Function 2-1 and 2-2 (2) Power LEDs (1) P1, (1) P2 (1) P1, (1) P2...
Chapter 3: Connecting to Your Industrial Managed Gigabit Ethernet Switch 3. Connecting to Your Industrial Managed Gigabit Ethernet Switch You can connect to your switch in three ways: 1. Via a serial console. 2. Via a Telnet console. 3. Via a Web browser. NOTE: You can’t connect to a serial console and a Telnet console at the same time.
Page 15
Chapter 3: Connecting to Your Industrial Managed Gigabit Ethernet Switch STEP 3: Once you go back to the session, select the Connection type as Serial. Fill in the Serial line and Speed fields with COM port and speed to be used. Click Only on clean exit, then click Open. Figure 3-2.
Page 16
Chapter 3: Connecting to Your Industrial Managed Gigabit Ethernet Switch Enter these values in the screen: • Serial line: the COM port you are using • Speed (baud) rate: 115,200 bps • Data bits: 8 • Stop bits: 1 • Parity: None •...
Chapter 3: Connecting to Your Industrial Managed Gigabit Ethernet Switch 3.2 Connecting to the Switch via Telnet NOTE: The PC host and the switch must be on the same logical subnet. See the table below. Table 3-2. Default IP addresses of the switch and PC host. IP Address Subnet Mask Switch...
Chapter 3: Connecting to Your Industrial Managed Gigabit Ethernet Switch 3.3 Connecting to the Switch via a Web Browser NOTE: The PC host and the switch must be on the same logical subnet. See the table below. Table 3-3. Default IP addresses of the switch and PC host. IP Address Subnet Mask Switch...
4.1.2 Example 1: Default VLAN Settings Each port in the LIG1014A/LIE1014A Switch has a configurable default VLAN number, known as its PVID. This places all ports on the same VLAN initially, although each port PVID is configurable to any VLAN number between 1 and 4094.
Chapter 4: Switch Functions 4.1.3 Example 2: Port-based VLANs When the LIG1014/LIE1014A receives an untagged VLAN packet, it will add a VLAN tag to the frame according to the PVID setting on a port. As shown in the following figure, the untagged packet is marked (tagged) as it leaves the LIG1014/LIE1014A through Port 2, which is configured as a tagged member of VLAN100.
Page 21
Chapter 4: Switch Functions Here we set tagged VLAN100 on Port 1 and Port 2, untagged VLAN100 on Port 7. Figure 4-4. Set tagged and untagged VLAN on ports. STEP 4: Transmit untagged unicast packets from Port 1 to Port 2 and Port 7. The LIG1014/LIE1014A should tag a packet with VID 100.
2. The hosts from Group B can communicate with each other. 3. The hosts of Group A and Group B can’t communicate with each other. 4. Both the Group A and Group B can go to the Internet through the LIE1014A/LIG1014A. 877-877-2269 | blackbox.com...
Page 23
Chapter 4: Switch Functions Configuration: STEP 1: Go to Configuration -> VLANs -> Port VLAN configuration page and specify the VLAN membership as follows: Figure 4-6. Specify VLAN membership. STEP 2: Transmit unicast packets with VLAN tag 100 from Port 1 to Port 2 and Port 7. The LIG1014/LIE1014A should tag a packet with VID 100.
IP protocols, and more. ACL examines these values to permit or access a packet. The LIG1014A/LIE1014A's ACL function supports access control security for MAC address, IP address, Layer 4 Port, and Type of Service. Each has five actions: Deny, Permit, Queue Mapping, CoS Marking, and Copy Frame. You can set the default ACL rule to Permit or Deny.
Page 25
Chapter 4: Switch Functions • Case 1: Permit all frames, but deny frames set in ACL entry. Set the default ACL Rule of GE port to “Permit”, then bind a suitable profile with “deny” for ACL. The GE port can pass through all packets except for the ACL entry of the bound profile.
Page 26
Chapter 4: Switch Functions STEP 4: Send frames between Port 3 and Port 4, and see the test result. LIE1014A LIE1014A LIE1014A Figure 4-9. Test result: frames sent betwen Port 3 and Port 4. CLI Commands: access-list ace 1 ingress interface GigabitEthernet 1/4 policy 1 vid 4 frametype etype smac 00-00-00-00-00-11 action deny exit interface GigabitEthernet 1/3...
Page 27
Chapter 4: Switch Functions STEP 2: Create a new ACL Entry rule under this ACL profile. (Deny SrcMAC: 13 and DesMAC: 11) STEP 3: Bind this ACL profile to a GE port. (Port 3) Figure 4-11. Bind ACL profile to a Gigabit Ethernet port. STEP 4: Send frames between Port 3 and Port 4, and see the test result.
Page 28
Chapter 4: Switch Functions • Case 1: (b) Permit all frames. In this case, ACL function is disabled. All frames will pass through. • Case 1: (c) Permit all frames, and map queues of the transmitting frames. Set the default Gigabit Ethernet port ACL Rule to “Permit”, then bind a suitable profile with “Queue Mapping” for some ACL functions.
Page 30
Chapter 4: Switch Functions STEP 5: Send frames between Port 3 and Port 4, and see the test result. LIE1014A LIE1014A LIE1014A Figure 4-16. CLI Commands: access-list ace 2 next 3 ingress interface GigabitEthernet 1/3 policy 0 frametype etype smac 00-00-00-00-00-13 dmac 00-00-00-00-00-11 action deny mirror redirect interface GigabitEthernet 1/5 exit...
Page 31
Chapter 4: Switch Functions STEP 3: Bind this ACL profile to a GE port. (Port 4) Figure 4-17. STEP 4: Send frames between Port 3 and Port 4, and see the test result. LIE1014A LIE1014A LIE1014A Figure 4-18. CLI Commands: access-list ace 4 ingress interface GigabitEthernet 1/4 policy 3 tag tagged vid 4 frametype etype smac 00-00-00-00-00-11 exit...
Page 32
Chapter 4: Switch Functions STEP 1: Create a new ACL Profile. (Profile Name: AllowSomeMac) STEP 2: Create a new ACL Entry rule under this ACL profile. (Allow SrcMAC: 13 and DesMAC: 11) STEP 3: Bind this ACL profile to a GE port. (PORT-3) Figure 4-19.
Page 33
Chapter 4: Switch Functions • Case 1: (h) Deny all frames. The default ACL Rule of GE port is “Deny”, so Queue Mapping is not needed in this case. • Case 1: (i) Deny all frames. Deny all frames. The default ACL Rule of GE port is “Deny”, so CoS Marking action is not needed in this case. •...
Page 34
Chapter 4: Switch Functions STEP 4: Set the analyzer port to enable and mirror the analyzer port. Figure 4-22. STEP 5: Send frames between Port 3 and Port 4, and see the test result. LIE1014A LIE1014A LIE1014A Figure 4-23. CLI Commands: access-list ace 5 next 6 ingress interface GigabitEthernet 1/3 policy 5 frametype etype smac 00-00-00-00-00-13 dmac 00-00-00-00-00-11 Exit...
Chapter 4: Switch Functions 4.2.3 Case 2: ACL for IP address For IP address ACL, the switch can filter source IP address, destination IP address, or both. You can set an IP range ACL. When the switch filters both IP addresses, packets that coincide with both rules will take effect. In other words, the switch does filter ACL for IP address if it only coincides with one rule.
4.3.1 Explanation of Ring Protection A reliable network is very important in industrial Ethernet applications. The LIG1014A/LIE1014A switch provides millisecond-grade failover ring protection; this feature offers a seamless working network even if connections create issues. Ring Protection works with both Ethernet and fiber cable.
Chapter 4: Switch Functions 4.3.2 Configuration (Console) To configure ring protection on the LIG1014A/LIE1014A switch: 1. Login as “admin” in the console interface. 2. Go to Configure mode via the ”configure terminal” command. 3. Go to Configure Ring Protection via the “ring protect” command.
Chapter 4: Switch Functions 4.3.3 Configuration (Web UI) Figure 4-26. STEP 1: Set RSTP on the central switch. NOTE: The administrator must configure STP mode on the central switch “SWM.” Figure 4-27. 1. Go to the “Configuration—>Spanning Tree—>Bridge Setting” Web page. 2.
Page 39
Chapter 4: Switch Functions Figure 4-28. 1. Go to the “Configuration—>Spanning Tree—>CIST ports” Web page. 2. Do not enable Port 7 or 8, check box for ring 1. 3. Do not enable Port 9 or 10, check box for ring 2. 4.
Page 40
Chapter 4: Switch Functions 4. Click the “Save” button. Figure 4-30. 1. Go to the “Configuration—>Ring” Web page. 2. Select “Ring Group 2.” 3. Ring ID 2 Check “Ring Enable,”, and ”Master.” Set Port 9 as Node 1 and Port 10 as Node 2. 4.
Page 41
Chapter 4: Switch Functions STEP 3: Configure ring protection on switches SW11, SW12, SW13, and SW14. Figure 4-32. 1. Go to the Configuration —>Spanning Tree—>CIST ports Web page. 2. Do not enable the STP check box for ring configuration. 3. Click the “Save” button. Figure 4-33.
Page 42
Chapter 4: Switch Functions STEP 4: Configure ring protection on switches SW21, SW22, SW23, and SW24. Figure 4-34. 1. Go to the Configuration —>Spanning Tree—>CIST ports Web page. 2. Do not enable the STP check box for ring configuration. 3. Click the “Save” button. Figure 4-35.
Chapter 4: Switch Functions 4.3.4 Dual Ring Feature: Interconnection ports can belong to two neighbor ring groups. Advantage: You can run the ring function on just one port. Figure 4-36. Configure Steps: 1. Disable RSTP on all ring ports. 2. Select a master port in every ring group. 3.
Page 44
Chapter 4: Switch Functions 4. Click the “Save” button. Figure 4-37. On devices 3, 5, and 6 (ring 2 slave): 1. Select “Ring Group 2.” 3. Ring ID 2 Check “Ring Enable” and ”Interconnection,” NSF is on “Node 1 (port 9).” Node 1 is “Port 9,”...
Page 45
Chapter 4: Switch Functions Configure ring protection on the side ring group (ring 1 and 3). On device 2 and 7 (master): 1. Select “Ring Group 1 (or 3)” 2. Ring ID 1 (or 3) Check “Ring Enable”, and ”Master”. Protect Port is on “Node1 (port 9)”...
Chapter 4: Switch Functions 4.3.5 Dual Homing Feature: Dual homing devices (switch 6) enable two ring groups. Advantage: Recovery time is less than “dual ring,” and you can connect two dual ring systems. Figure 4-39. Configure Steps: 1. Disable RSTP on all ring ports. 2.
4.4.2 SP/SPWRR/WRR The LIG1014A/LIE1014A can be configured to have 8 output Class of Service (CoS) queues (Q0–Q7) per port, into which each packet is placed. Q0 is the highest priority Queue. Each packet’s 802.1p priority determines its CoS queue. You need to bind VLAN priority/queue mapping profile to each port, and, for every VLAN priority, assign a traffic descriptor.
Page 49
Chapter 4: Switch Functions Step 2. Select Configuration—> VLANs —>Create a VLAN with VLAN ID 100. Enter a VLAN name in the Name field. Here we set tagged VLAN 100 on Port 1 and Port 2. Figure 4-42. CLI configuration commands: interface GigabitEthernet 1/2 speed 100 duplex full...
Chapter 4: Switch Functions 4.4.4 Example 2: SPQ with Shaping Send two Streams (Stream 0, Stream 1) from port 1 to port 2. Both streams are running at 100 Mbps. Stream 0 includes VLAN Priority 0, Stream 1 includes VLAN Priority 7. Stream 3 and Stream 4 are used only for learning which to make sure the traffic does not flood.
WRR supports weight assignment; the range of weight value is from 1 to 255. LIG1014A/LIE1014A applies WRR scheduling and weight 1 for all the Gigabit Ethernet ports. In the following case, assign Weight 2 for Priority 0, Weight 3 for Priority 3, and Weight 5 for Priority 7.
Page 55
Chapter 4: Switch Functions Web management: STEP 1: Go to Configuration—> Qos—> Port shaping, and click on Port 2 to create a Qos profile. Figure 4-47. STEP 2: Select schedule mode to “”Weighted” and set weight value for queue 0, queue 3, and queue 7 as described next. Figure 4-48.
3, and Stream 4 includes VLAN Priority 6. Stream 5, Stream 6, Stream 7, Stream 8, and Stream 9 are used only for learning to make sure traffic is not flooding. WRR supports a range of weight values from 1 to 255. LIG1014A/LIE1014A applies WRR scheduling and weight 1 for all the Gigabit Ethernet Port.
Page 63
Chapter 4: Switch Functions STEP 2: Select schedule mode to “”Weighted” and set the weight value for queue 0, and set weight value for queue 0–queue 3 as described next. Figure 4-54. CLI configuration command: interface GigabitEthernet 1/2 switchport trunk allowed vlan 1,100 switchport hybrid allowed vlan 100,4095 switchport trunk vlan tag native switchport mode trunk...
Chapter 4: Switch Functions 4.5 IGMP Application Guide 4.5.1 Explanation of IGMP IGMP is an acronym for Internet Group Management Protocol. It is a communications protocol used to manage the membership of Internet Protocol multicast groups. IGMP is used by IP hosts and adjacent multicast routers to establish multicast group memberships.
Page 65
Chapter 4: Switch Functions Example 2: LIE1014A Figure 4-57. 1. Go to “Configuration—>IPMC—>Basic Configuration” to select the “Snooping Enable” checkbox 2. De-select the ”Unregistered IPMCv4 Flooding Enabled” checkbox. 3. If the Multicast stream is from an L3 switch, then the uplink port must be “Router Port.” NOTE: If an aggregation member port is selected as a router port, the whole aggregation will act as a router port.
Page 66
Chapter 4: Switch Functions 4. Go to “Configuration—>IPMC—>VLAN Configuration” to select the “Snooping Enable” checkbox and set Port 14's VLAN ID. Figure 4-59. Example 3: LIE1014A Figure 4-60. In this scenario, these clients belong to multiple vlans, so you have to create more than one vlan to be the agent for all client vlans.
Page 67
Chapter 4: Switch Functions 2. Go to “Configuration—>IPMC—>VLAN Configuration” to select the ”Snooping Enable” checkbox and set Port 14’s VLAN ID. Figure 4-62. 3. If there is no querier on the L3 switch, select “Querier Election,” and set the “Querier Address.” The IP address is in the same network as the uplink interface.
Chapter 4: Switch Functions 4.5.2 Configuring VLC on an IGMP Server 1. In the Media area of the top tool bar, select “Stream.” Figure 4-64. 2. Select a video or voice file to play. Figure 4-65. 877-877-2269 | blackbox.com Page 68...
Page 69
Chapter 4: Switch Functions 3. Confirm that the file is correct, then click “Next” twice. Figure 4-66. 4. Select the stream type as “UDP” and click the “Add” button. Figure 4-67. 877-877-2269 | blackbox.com Page 69...
Page 70
Chapter 4: Switch Functions 5. Set the stream IP; the range is 224.0.0.1 to 239.255.255.254, and the protocol port is 1234. For this example, we set stream IP as 255.0.0.1. Figure 4-68. 6. Select ”Sort out all stream” and click the “Stream” button, then the stream starts sending to switch. Figure 4-69.
Chapter 4: Switch Functions 4.5.3 Configuring VLC on an IGMP Client 1. In the Media area of the top tool bar, select Open Network Stream. Figure 4-70. 2. Set the stream IP and protocol port as the previous setting on the server. The protocol type is “UDP,” and the format should be the same as below the circle, then click the “PLAY”...
Page 72
Chapter 4: Switch Functions To return to the management switch: Go to “Monitor—>IPMC—>Groups Information,” and you will see the IP stream in the table. Figure 4-72. 877-877-2269 | blackbox.com Page 72...
IEEE 802.1x derives keys that you can use to provide per-packet authentication, integrity, and confidentialily. Typically, you would use the keys along with well-known key derivation algorithms (e.g., TLS, SRP, MD5-Challenge, etc.). The LIG1014A/LIE1014A switch supports the 802.1x authentication function per port (Port 1–Port 10). Enable the system's 802.1x function, then choose the ports and type you want to apply.
Page 74
Chapter 4: Switch Functions Example: To learn how to activate 802.1x Authentication via LIG1014A/LIE1014A to be authenticated by a RADIUS server, read the following example. In this basic example, Port 1 is a testing port that enables 802.1x in the LIG1014A/LIE1014A.
Page 75
STEP 2: Select the IEE E802.1x Authentication Enable check box, then configure the EAP type as MD5-Challenge. After setting this function in the NIC, the supplicant should enter a correct pair of account and password to use this Ethernet port service from the LIG1014A/LIE1014A. 877-877-2269 | blackbox.com...
Page 76
Chapter 4: Switch Functions Authentication Behavior The supplicant should pass authentication process to use any service. After the supplicant enters the correct account and password stored in RADIUS server, it can be authenticated successfully. The authentication process is described in the following diagram.
5. Hardware Quick Setup Guide 5.1 What’s Included Your package should contain the following items. If anything is missing or damaged, contact Black Box Technical Support at 877-877-2269 or info@blackbox.com. • (1) Industrial Managed Gigabit Ethernet Switch - (10) RJ-45, (4) SFP (LIG1014A) (1) Industrial Managed Gigabit Ethernet PoE+ Switch - (8) RJ-45, (4) SFP (LIE1014A) •...
Chapter 5: Hardware Quick Setup Guide 5.3 Mounting the Switch on a Wall Screw the wall mount brackets on using the included M3 screws. M4 screw P1 P2 ALM Figure 5-2. Wallmounting. 5.4 Ethernet Interface The switch has two types of Ethernet interfaces: electrical (RJ-45) and optical (SFP) interfaces. 5.4.1 RJ-45 •...
V- contacts on the terminal block respectively and tighten the wire-clamp screws to prevent the wires from loosening. LIG1014A Second power supply First power supply PWR1 ALM PWR2 Reset Console Figure 5-4. Terminal block, LIG1014A. 877-877-2269 | blackbox.com Page 79...
The alarm relay out is “Normal Open”, and it will be closed when detected any predefined failure such as power failures or Ethernet link failures. The relay output has current carrying capacity of 0.5 A @ 24 VDC. Extra power system Alarm system PWR1 ALM PWR2 Ground connector Console Figure 5-6. Alarm relay, LIG1014A or LIE1014A. 877-877-2269 | blackbox.com Page 80...
Reset Console Figure 5-7. Console connector, LIG1014A or LIE1014A. An RJ-45 (male) connector-to-RS-232 DB9 (female) connector cable is required. The RJ-45 connector of the cable is connected to the console connector on the switch. The pin assignment of the console cable is shown on the next page.
Chapter 5: Hardware Quick Setup Guide 5.10 Indicators Table 5-3. Front-panel LEDs on the LIG1014A. LED Name Status Condition (1) P1 LED ON, Green P1 power line has power P1 power line is disconnected or does not have power (1) P2 LED...
Page 83
Chapter 5: Hardware Quick Setup Guide Table 5-4. Front-panel LEDs on the LIE1014A. LED Name Status Condition (8) PoE LEDs ON, Green PoE is working PoE is not working (1) P1 LED ON, Green P1 power line has power P1 power line is disconnected or does not have power (1) P2 LED ON, Green P2 power line has power...
Page 84
About Black Box Black Box provides an extensive range of networking and infrastructure products. You’ll find everything from cabinets and racks and power and surge protection products to media converters and Ethernet switches all supported by free, live 24/7 Tech support available in 60 seconds or less.
Need help?
Do you have a question about the LIG1014A and is the answer not in the manual?
Questions and answers