Registered Trademarks iS5Com™, is a trademark of iS5 Communications Inc. Other designations in this manual might be trademarks whose use by third parties for their own purposes would infringe the rights of the owner. Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries.
Installation on DIN-Rail ..........................8 2.1.1 Mount on DIN-Rail ......................... 8 Wall Mounting ............................9 2.2.1 Mount the iES12G on a Wall or Panel ....................9 Hardware Overview ..................10 Front Panel .............................. 10 Front Panel LEDs ........................... 11 Bottom View ............................12 Cables ......................
Page 4
User’s Manual WEB Management ..................17 Configuration by Web Browser ........................ 17 5.1.1 About Web-based Management ..................... 17 5.1.2 Basic Setting ..........................19 5.1.2.1 System Information ......................19 Admin & Password ......................19 5.1.2.2 5.1.2.3 IP Setting ..........................20 Configure the switch-managed IP information on this page.
This product contains no user-serviceable parts. Attempted service by unauthorized personnel shall render all warranties null and void. Changes or modifications not expressly approved by iS5 Communications Inc. could invalidate specifications, test results, and agency approvals, and void the user's authority to operate the equipment.
INTRODUCTION 1.1 About the iES12G Industrial Switch The iES12G is a managed industrial switch capable of operating under wide temperature ranges, dusty environments and humid conditions. It can be managed by a Windows Utility (iManage), WEB interface, TELNET, Console connection or third-party SNMP software.
User’s Manual ardware Installation 2.1 Installation on DIN-Rail Each switch has a DIN-Rail bracket on the rear panel. The DIN-Rail bracket helps secure the switch onto the DIN-Rail. 2.1.1 Mount on DIN-Rail Step 1: Slant the switch and mount the metal spring to Din-Rail.
2.2.1 Mount the iES12G on a Wall or Panel Option 1: Fix mounting brackets to the side of the switch using the 4 screws included in the package. Step 2: Use 6 screws that can be found in the package to combine the wall mount panel. Just like the picture shows below: Note: To avoid damage to the unit please use the screws provided to mount the brackets.
User’s Manual ardware Overview 3.1 Front Panel The following table describes the labels affixed to the iES12G Port Description 4 1000BaseX on SFP port SFP ports 8 100/1000Base-X on SFP port and 8 10/100/1000Base-T(X) COMBO Port Use RS-232 with RJ-45 connector to manage switch.
User’s Manual LED for PWR2 LED for R.M (Ring Master). When the LED is on the switch is the ring master LED for Ring. When the LED is on i-Ring is activated. LED for Fault. When the LED is on a power failure or port down/fail has occurred...
4.1 Ethernet Cables The iES12G switch has standard Ethernet ports and can use CAT 3, 4, 5,5e UTP cables to connect to other network devices (PCs, servers, switches, routers, or hubs). Please refer to the following table for cable specifications.
Page 15
BI_DC- BI_DB- BI_DD+ BI_DD- The iES12G switch supports auto MDI/MDI-X operation. You can use a straight-through cable to connect PC to switch. The following table shows the 10BASE-T/ 100BASE-TX MDI and MDI-X port pin outs. 10/100 Base-T MDI/MDI-X pins assignment...
4.3 Console Cable The iES12G switch can be managed via the console port using the RS232 / DB-9 to RJ-45 cable provided. Connect to the PC via the RS-232/DB9 connector and the RJ45 connector to the console port of the switch.
User’s Manual EB Management 5.1 Configuration by Web Browser This section introduces the configuration by Web browser. 5.1.1 About Web-based Management An embedded HTML web site resides in flash memory on the CPU board. It contains advanced management features and allows you to manage the switch from anywhere on the network through a standard web browser such as Microsoft Internet Explorer.
User’s Manual The login screen appears. Key in the username and password. The default username and password is “admin”. Click “Enter” or ”OK” button, then the main interface of the Web-based management appears. Login screen Main Interface Main interface...
User’s Manual 5.1.2 Basic Setting 5.1.2.1 System Information The switch system information is provided here. System Information interface Label Description The textual identification of the contact person for this managed node, together with information on how to contact this person. The allowed...
User’s Manual Label Description Old Password Enter the current system password. If this is incorrect, the new password will not be set. New Password The system password. The allowed string length is 0 to 31, and the allowed content is the ASCII characters from 32 to 126.
Page 22
User’s Manual Label Description Enable the DHCP client by checking this box. If DHCP fails and the DHCP Client configured IP address is zero, DHCP will retry. If DHCP fails and the configured IP address is non-zero, DHCP will stop and the configured IP settings will be used.
User’s Manual 5.1.2.6 LLDP LLDP Parameters This page allows the user to inspect and configure the current LLDP port settings. Label Description The switch is periodically transmitting LLDP frames to its neighbors for having the network discovery information up-to-date. The interval Tx Interval between each LLDP frame is determined by the Tx Interval value.
Page 25
User’s Manual Enabled The switch will send out LLDP information, and will analyze LLDP information received from neighbors. LLDP Neighbor Information This page provides a status overview for all LLDP neighbors. The displayed table contains a row for each port on which an LLDP neighbor is detected.
User’s Manual Check this box to enable an automatic refresh of the page at regular intervals. Opens information screen in new browser windows LLDP Statistics This page provides an overview of all LLDP traffic. Two types of counters are shown. Global counters are counters that refer to the whole stackswitch, while local counters refer to counters for the currently selected switch.
Page 27
User’s Manual known as "Too Many Neighbors" in the LLDP standard. LLDP frames require a new entry in the table when the Chassis ID or Remote Port ID is not already contained within the table. Entries are removed from the table when a given port links down, an LLDP shutdown frame is received, or when the entry ages out.
User’s Manual 5.1.2.7 Backup/Restore Configuration You can save/view or load the switch configuration. The configuration file is in XML format with a hierarchy of tags: 5.1.2.8 Firmware Update This page facilitates an update of the firmware controlling the switch.
User’s Manual 5.1.3.2 DHCP Dynamic Client List When the DHCP server function is activated, the system will collect the DHCP client information and display in here. 5.1.3.3 DHCP Client List You can assign the specific IP address which is in the assigned dynamic IP range to the specific port. When the device is connecting to the port and asks for dynamic IP assigning, the system will assign the IP address that has been assigned before in the connected device.
Page 30
User’s Manual Label Description Port This is the logical port number for this row. The current link state is displayed graphically. Green indicates the link is Link up and red that it is down. Current Link Speed Provides the current link speed of the port.
User’s Manual power savings mode parameters per port. Disabled: All power savings mechanisms disabled. ActiPHY: Link down power savings enabled. PerfectReach: Link up power savings enabled. Enabled: Both link up and link down power savings enabled. Total Power Usage Total power usage in board, measured in percent.
User’s Manual Configure the unit of measure for the port policer rate as kbps or Mbps. Policer Unit The default value is "kbps". Shaper Enabled Enable or disable the port shaper. The default value is "Disabled". Configure the rate for the port shaper. The default value is "500". This Shaper Rate value is restricted to 500-1000000 when the "Policer Unit"...
Page 33
User’s Manual Label Description Group ID Indicates the group ID for the settings contained in the same row. Group ID "Normal" indicates there is no aggregation. Only one group ID is valid per port. Port Members Each switch port is listed for each group ID. Select a radio button to include a port in an aggregation, or clear the radio button to remove the port from the aggregation.
User’s Manual 5.1.4.3.2 LACP Port Configuration This page allows the user to inspect the current LACP port configurations, and possibly change them as well. Label Description Port Indicates the group ID for the settings contained in the same row. Group ID "Normal"...
User’s Manual Click to save changes. Click to undo any changes made locally and revert to previously saved values. 5.1.4.3.3 LACP System Status This page provides a status overview for all LACP instances. Label Description Aggr ID The Aggregation ID associated with this aggregation instance. For LLAG...
User’s Manual 5.1.4.3.4 LACP Status This page provides a status overview for LACP status for all ports. Label Description Port The switch port number. LACP 'Yes' means that LACP is enabled and the port link is up. 'No' means that LACP is not enabled or that the port link is down.
User’s Manual Label Description Port The switch port number LACP Transmitted Shows how many LACP frames have been sent from each port LACP Received Shows how many LACP frames have been received at each port. Discarded Shows how many unknown or illegal LACP frames have been discarded at each port.
Page 38
User’s Manual The following table describes the labels in this screen. Label Description Mark to enable Ring. Redundant Ring There should be one and only one Ring Master in a ring. However if there are two or more switches which set Ring Leader to enable, the...
User’s Manual 5.1.5.2 iChain iChain provides the ability to add network redundancy to any existing backbone network. iChain allows multiple redundant network rings based on different redundancy protocols to join and function together as a larger and more robust compound network topology.
User’s Manual The secondary (backup) ring port Ring Port Click “Save” to remember the configurations 5.1.5.4 MSTP Bridge Settings This page allows you to configure RSTP system settings. The settings are used by all RSTP Bridge instances in the Switch Stack.
User’s Manual Click to undo any changes made locally and revert to previously saved values. MSTI Mapping This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. Label Description The name identifying the VLAN to MSTI mapping.
User’s Manual The list of VLAN's mapped to the MSTI. The VLANs must be separated with comma and/or space. A VLAN can only be mapped to one MSTI. VLANS Mapped An unused MSTI should just be left empty. (I.e. not having any VLANs mapped to it.)
Page 43
User’s Manual This page contains settings for physical and aggregated ports. The aggregation settings are stack global. Label Description Port The switch port number of the logical STP port. STP Enabled Controls whether STP is enabled on this switch port.
User’s Manual will be selected as an Alternate Port after the Root Port has been selected. If set, it can cause lack of spanning tree connectivity. It can be set by a network administrator to prevent bridges external to a core region of the network influencing the spanning tree active topology, possibly because those bridges are not under the full control of the administrator.
Page 45
User’s Manual Label Description The switch port number of the corresponding STP CIST (and MSTI) Port port. Controls the path cost incurred by the port. The Auto setting will set the path cost as appropriate by the physical link speed, using the 802.1D recommended values.
User’s Manual Click to undo any changes made locally and revert to previously saved values. STP Bridges This page provides a status overview for all STP bridge instances. The displayed table contains a row for each STP bridge instance, where the column displays the...
User’s Manual Label Description Port The switch port number of the logical STP port. The current STP port role of the CIST port. The port role can be one of CIST Role the following values: AlternatePort BackupPort RootPort DesignatedPort.
User’s Manual The number of legacy STP Configuration BPDU's received/transmitted on the port. The number of (legacy) Topology Change Notification BPDU's received/transmitted on the port. The number of unknown Spanning Tree BPDU's received (and discarded) Discarded Unknown on the port.
Page 49
User’s Manual The VLAN is enabled on the selected stack switch unit when you click on "Save". The VLAN is thereafter present on the other stack switch units, but with no port members. A VLAN without any port members on any stack unit will be deleted when you click "Save".
Page 50
User’s Manual (For egress port) 1. VLAN Membership Configuration setting port 2 & VID=50 2. VLAN Port 2 Configuration-->don't care VLAN Aware 3. VLAN Port 2 Configuration-->Mode=specific,ID=50 (any packet can enter egress port ) iS5 Communications Inc.
Page 51
User’s Manual 802.1Q Access port Setting (For ingress port) 1. VLAN Membership Configuration setting port & VID=50 2. VLAN Port Configuration-->Enable VLAN Aware iS5 Communications Inc.
Page 52
User’s Manual 3. VLAN Port Configuration-->Mode=specific,ID=50 (For egress port) 1. VLAN Membership Configuration setting port & VID=50 2. VLAN Port Configuration-->Disable VLAN Aware 3. VLAN Port Configuration-->Mode=specific,ID=50 (untagged & tag=50 packet can enter egress port ) iS5 Communications Inc.
Page 53
User’s Manual 802.1Q Trunk port setting (multi-tag) (For ingress port) 1. VLAN Membership Configuration setting port & VID=11,22,33 2. VLAN Port Configuration-->Enable VLAN Aware iS5 Communications Inc.
Page 54
User’s Manual 3. VLAN Port Configuration-->Mode=specific,ID=11 (when enterring packet is untagged frame, added tag = 11 When entering the tagged frame, only VID = 11,22,33 three kinds of packets can pass) (For egress port) 1. VLAN Membership Configuration setting port, VID=11,22,33...
Page 55
User’s Manual 2. VLAN Port Configuration-->Enable VLAN Aware 3. VLAN Port Configuration-->Mode=none (egress port can receive tag=11,22,33 packet iS5 Communications Inc.
Page 56
User’s Manual In addition ,only tag=11packet can enter egress port ) Q-in-Q VLAN Setting ingress Port 1------------------->egress Port 2 (For ingress port-----Port 1) 1. VLAN Membership Configuration setting port 1、2、3 & VID=50 iS5 Communications Inc.
Page 57
User’s Manual 2. VLAN Port Configuration-->Disable Port 1 VLAN Aware 3. VLAN Port Configuration-->Port 1 Mode=specific,ID=50 iS5 Communications Inc.
Page 58
User’s Manual (For egress port ----Port 2) 1. VLAN Membership Configuration setting port & VID=50 2. VLAN Port Configuration-->Enable Port 2、3 VLAN Aware. 3. VLAN Port Configuration-->Mode=none (only tag=50 packet can enter egress port ) iS5 Communications Inc.
User’s Manual 5.1.6.2 Private VLAN The Private VLAN membership configurations for the switch can be monitored and modified in this section Private VLANs can be added or deleted. Port members of each Private VLAN can be added or removed. Private VLANs are based on the source port mask, and there are no connections to VLANs.
Page 60
User’s Manual Label Description Delete Check to delete the entry. It will be deleted during the next save. Private VLAN ID Indicates the ID of this particular private VLAN. MAC Address The MAC address for the entry. A row of check boxes for each port is displayed for each private VLAN ID.
User’s Manual When unchecked, port isolation is disabled for that port. By default, port isolation is disabled for all ports. 5.1.7 SNMP 5.1.7.1 SNMP-System Label Description Indicates the SNMP mode operation. Possible modes are: Mode Enabled: Enable SNMP mode operation.
Page 62
User’s Manual Label Description Indicates the SNMP trap mode operation. Possible modes are: Trap Mode Enabled: Enable SNMP trap mode operation. Disabled: Disable SNMP trap mode operation. Indicates the SNMP trap supported version. Possible versions are: SNMP v1: Set SNMP trap supported version 1.
User’s Manual Indicates the SNMP trap security engine ID. SNMPv3 sends traps and informs using USM for authentication and privacy. A unique engine ID for Trap Security these traps and informs is needed. When "Trap Probe Security Engine ID" is Engine ID enabled, the ID will be probed automatically.
Page 65
User’s Manual Label Description Delete Check to delete the entry. It will be deleted during the next save. An octet string identifying the engine ID that this entry should belong to. The string must contain an even number between 10 and 64 hexadecimal digits, but all-zeros and all-'F's are not allowed.
User’s Manual protocol, the allowed string length is 8 to 40. The allowed content is the ASCII characters from 33 to 126. Indicates the privacy protocol that this entry should belong to. Possible privacy protocols are: Privacy Protocol None: None privacy protocol.
User’s Manual 5.1.7.5 SNMP-Views Configure SNMPv3 views table on this page. The entry index keys are View Name and OID Subtree. Label Description Delete Check to delete the entry. It will be deleted during the next save. A string identifying the view name that this entry should belong to. The...
User’s Manual Label Description Delete Check to delete the entry. It will be deleted during the next save. A string identifying the group name that this entry should belong to. The Group Name allowed string length is 1 to 32, and the allowed content is the ASCII characters from 33 to 126.
User’s Manual Label Description A check box is provided for each port of a private VLAN. When checked, port isolation is enabled for that port. Port When unchecked, port isolation is disabled for that port. By default, port isolation is disabled for all ports.
Page 70
User’s Manual This classification can be based on parameters such as VLAN ID, UDP/TCP port, IPv4/IPv6 DSCP or Tag Priority. Frames not matching any of the QCEs are classified to the default QoS Class for the port. Label Description...
User’s Manual : Edits the QCE. : Moves the QCE up the list. : Moves the QCE down the list. : Deletes the QCE. : The lowest plus sign adds a new entry at the bottom of the list of QCL.
User’s Manual 64, 128, 256, 512, 1K, 2K, 4K, 8K, 16K, 32K, 64K, 128K, 256K, 512K, or 1024K. The 1 kpps is actually 1002.1 pps. 5.1.8.4 Wizard This handy wizard helps you set up a QCL quickly. Label Description Set up Group ports into several types according to different QCL policies.
User’s Manual Set up VLAN Tag Set up the traffic class mapping to the User Priority value (3 bits) when Priority Mapping receiving VLAN tagged packets. 5.1.9 IGMP Snooping 5.1.9.1 IGMP Snooping This page provides IGMP Snooping related configuration.
User’s Manual Enable the IGMP Querier in the VLAN. The Querier will send out if no Querier received in 255 seconds after IGMP Querier Enabled. Each Querier's IGMP Querier interval is 125 second, and it will stop act as an IGMP Querier if received any Querier from other devices.
User’s Manual Click to refresh the page immediately. Clears all Statistics counters. Check this box to enable an automatic refresh of the page at regular intervals. 5.1.10 Security 5.1.10.1 ACL Configure the ACL parameters (ACE) of each switch port. These parameters will affect frames received on a port unless the frame matches a specific ACE.
User’s Manual Enabled: Frames received on the port are stored in the System Log. Disabled: Frames received on the port are not logged. The default value is "Disabled". Please note that the System Log memory size and logging rate is limited.
Page 77
User’s Manual Label Description Client The Client for which the configuration below applies. Authentication Metohd Authentication Method can be set to one of the following values: none : authentication is disabled and login is not possible. local : use the local user database on the switch stack for authentication.
Page 78
User’s Manual RADIUS Authentication Server Configuration The table has one row for each RADIUS Authentication Server and a number of columns, which are: Label Description The RADIUS Authentication Server number for which the configuration below applies. Enable Enable the RADIUS Authentication Server by checking this box.
User’s Manual 5.1.11 Warning 5.1.11.1 Fault Alarm When any selected fault event is happened, the Fault LED in switch panel will light up and the electric relay will signal at the same time. The following table describes the labels in this screen.
User’s Manual The following table describes the labels in this screen. Label Description The remote SYSLOG Server IP address. IP Address Click “Save” to set the configurations. Save Reset server to 0.0.0.0 Reset 5.1.12 Monitor and Diagnosis 5.1.12.1 MAC Table The MAC Address Table is configured on this page.
Page 81
User’s Manual By default, dynamic entries are removed from the MAC after 300 seconds. This removal is also called aging. Configure aging time by entering a value here in seconds; for example, Age time seconds. The allowed range is 10 to 1000000 seconds.
User’s Manual uncheck as needed to modify the entry. Click to add a new entry to the static Adding a New Static Entry MAC table. Specify the VLAN ID, MAC address, and port members for the new entry. Click "Save".
User’s Manual Note: For a given port, a frame is only transmitted once. It is therefore not possible to mirror Tx frames for the mirror port. Because of this, mode for the selected mirror port is limited to Disabled or Rx only.
User’s Manual 5.1.12.4 Traffic Overview This page provides an overview of general traffic statistics for all switch ports. Label Description Port The logical port for the settings contained in the same row. Packets The number of received and transmitted packets per port.
Page 85
User’s Manual Label Description Rx and Tx Packets The number of received and transmitted (good and bad) packets. The number of received and transmitted (good and bad) bytes. Includes FCS, Rx and Tx Octets but excludes framing bits. Rx and Tx Unicast The number of received and transmitted (good and bad) unicast packets.
User’s Manual 5.1.12.6 Ping This page allows you to issue ICMP PING packets to troubleshoot IP connectivity issues. After you press , 5 ICMP packets are transmitted, and the sequence number and roundtrip time are displayed upon reception of a reply. The page refreshes automatically until responses to all packets are received, or until a timeout occurs.
User’s Manual 5.1.12.7 VeriPHY This page is used for running the VeriPHY Cable Diagnostics. Press to run the diagnostics. This will take approximately 5 seconds. If all ports are selected, this can take approximately 15 seconds. When completed, the page refreshes automatically, and you can view the cable diagnostics results in the cable status table.
User’s Manual Label Description Click to reboot device. Click to return to the Port State page without rebooting. Factory Defaults You can reset the configuration of the stack switch on this page. Only the IP configuration is retained. Label Description Click to reset the configuration to Factory Defaults.
User’s Manual ommand Line Interface Management About CLI Management Along with WEB-based management, the iES12G also supports CLI management. You can use console or telnet to management switch by CLI. CLI Management by RS-232 Serial Console (115200, 8, none, 1, none) Before Configuring by RS-232 serial console, use an RJ45 to DB9-F cable to connect the Switches’...
Page 90
User’s Manual Step 2. Input a name for new connection Step 3. Select to use COM port number iS5 Communications Inc.
Page 91
User’s Manual Step 4. The COM port properties setting, 115200 for Bits per second, 8 for Data bits, None for Parity, 1 for Stop bits and none for Flow control. Step 5. The Console login screen will appear. Use the keyboard to enter the Username and Password (The same with the password for Web Browser), then press “Enter”.
Page 92
User’s Manual CLI Management by Telnet Users can use “TELNET” to configure the switches. The default value is as below: IP Address: 192.168.10.1 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.10.254 User Name: admin Password: admin Follow the steps below to access the console via Telnet.
User’s Manual echnical Specifications Switch Model iES12G Physical Ports Ggiabit Combo Port with 10/100/1000Base-T(X) and 100/1000Base-X SFP ports 1000Base-X SFP Port Technology IEEE 802.3 for 10Base-T, IEEE 802.3u for 100Base-T(X) and 100Base-FX IEEE 802.3z for 1000Base-X IEEE 802.3ab for 1000Base-T, IEEE 802.3x for Flow control...
Page 102
User’s Manual IGMP Snooping IP based bandwidth management Application based QoS management DOS/DDOS auto prevention Port configuration, status, statistics, monitoring, security DHCP Client/Server ITS-Ring Network Redundancy STP / RSTP / MSTP compatible RS-232 Serial Console Port RS-232 in RJ45 connector with console cable. 115200bps, 8, N, 1...
Need help?
Do you have a question about the iES12G and is the answer not in the manual?
Questions and answers