Black Box LIG1014A User Manual
  1. Manuals
  2. Brands
  3. Black Box Manuals
  4. Switch
  5. LIG1014A
  6. User manual

Black Box LIG1014A User Manual

Industrial ethernet switches
Hide thumbs Also See for LIG1014A:
Table of Contents

Advertisement

Quick Links

USER MANUAL
LIG1014A, LIG1080A, LIG1082A, LIE1014A, LIE1080A, LIE1082A
INDUSTRIAL
ETHERNET
SWITCHES
24/7 TECHNICAL SUPPORT AT 1.877.877.2269 OR VISIT BLACKBOX.COM
P1 P2 ALM
1
2
3
4
5
6
7
8
P1 P2 ALM
POE
1
1
2
2
3
3
4
4
5
6
8
7
9
10
RR
11
12
RS
13
14
P1
P2 ALM
1
2
3
4
5
6
7
8

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the LIG1014A and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Black Box LIG1014A

Summary of Contents for Black Box LIG1014A

  • Page 1 USER MANUAL LIG1014A, LIG1080A, LIG1082A, LIE1014A, LIE1080A, LIE1082A INDUSTRIAL ETHERNET SWITCHES 24/7 TECHNICAL SUPPORT AT 1.877.877.2269 OR VISIT BLACKBOX.COM P2 ALM P1 P2 ALM P1 P2 ALM...

  • Page 2: Table Of Contents

    LIVE 24/7 TABLE OF CONTENTS TECHNICAL SUPPORT 1.877.877.2269 SAFETY INSTRUCTIONS .................................. 4 1. SPECIFICATIONS ................................... 5 1.1 LIG1014A ........................................5 1.2 LIG1080A ........................................6 1.3 LIG1082A ........................................7 1.4 LIE1014A ........................................8 1.5 LIE1080A ........................................9 1.6 LIE1082A .........................................10 1.7 System Statistics....................................11 2. OVERVIEW ....................................12 2.1 Introduction ......................................12...
  • Page 3 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 1: HEADLINE TECHNICAL SUPPORT 1.877.877.2269 5. SECURITY APPLICATION ................................42 5.1 Case 1: ACL for MAC Address ................................42 5.2 Case 2: ACL for IP Address ...................................55 5.3 Case 3: ACL for L4 Port ..................................55 5.4 Case 4: ACL for ToS....................................55 6.

  • Page 4: Safety Instructions

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 SAFETY INSTRUCTIONS TECHNICAL SUPPORT 1.877.877.2269 SAFETY WARNING CAUTION: YOUR EYES MIGHT BE DAMAGED! When a connector is removed during installation, testing, or servicing, or when an energized fiber is broken, a risk of ocular exposure to optical energy that may be potentially hazardous occurs, depending on the laser output power.

  • Page 5: Specifications

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 1: SPECIFICATIONS TECHNICAL SUPPORT 1.877.877.2269 1.1 LIG1014A 1.877.877.2269 BLACKBOX.COM...

  • Page 6: Lig1080A

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 1: SPECIFICATIONS TECHNICAL SUPPORT 1.877.877.2269 1.2 LIG1080A 1.877.877.2269 BLACKBOX.COM...

  • Page 7: Lig1082A

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 1: SPECIFICATIONS TECHNICAL SUPPORT 1.877.877.2269 1.3 LIG1082A 1.877.877.2269 BLACKBOX.COM...

  • Page 8: Lie1014A

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 1: SPECIFICATIONS TECHNICAL SUPPORT 1.877.877.2269 1.4 LIE1014A 1.877.877.2269 BLACKBOX.COM...

  • Page 9: Lie1080A

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 1: SPECIFICATIONS TECHNICAL SUPPORT 1.877.877.2269 1.5 LIE1080A 1.877.877.2269 BLACKBOX.COM...

  • Page 10: Lie1082A

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 1: SPECIFICATIONS TECHNICAL SUPPORT 1.877.877.2269 1.6 LIE1082A 1.877.877.2269 BLACKBOX.COM...

  • Page 11: System Statistics

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 1: SPECIFICATIONS TECHNICAL SUPPORT 1.877.877.2269 1.7 SYSTEM STATISTICS 1.877.877.2269 BLACKBOX.COM...

  • Page 12: Overview

    2.2 AVAILABLE MODELS Six models of the Industrial Gigabit Ethernet Switches are available: Š Industrial Gigabit Ethernet Switch - Managed, Extreme Temperature, (10) RJ-45, (4) SFP (LIG1014A) Š Š Industrial Gigabit Ethernet Managed L2+ Switch - Extreme Temperature, (8) RJ-45 (LIG1080A) Š...

  • Page 13: Features

    Š Š Unmanaged models (LIE401A and LIG401A) offer (4) 10/100/1000 plus (1) multi-rate SFP Š Š Managed models (LIE1014A, LIE1080A, LIE1082A, LIG1014A, LIG1080A and LIG1082A) provide (6), (8) or (10) 10/100/1000 plus (2) Š or (4) multi-rate SFPs Š Models with Power over Ethernet Plus deliver 30 watts power per port to remote PD devices Š...
  • Page 14 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: OVERVIEW TECHNICAL SUPPORT 1.877.877.2269 LIG1082A: Š (1) Industrial Managed Gigabit Ethernet Switch Š Š (2) Wallmount plates Š Š (1) DIN rail clip Š Š (1) DC power terminal block Š...

  • Page 15: Hardware Description

    LIVE 24/7 CHAPTER 2: OVERVIEW TECHNICAL SUPPORT 1.877.877.2269 2.5 HARDWARE DESCRIPTION 2.5.1 LIG1014A FIGURE 2-1. LIG1014A TOP PANEL 3, 4, 5 FIGURE 2-2. LIG1014A FRONT PANEL TABLE 2-1. LIG1014A COMPONENTS NUMBER IN FIGURES 2-1 AND 2-2 COMPONENT DESCRIPTION (1) RJ-45 connector...

  • Page 16: Lig1080A

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: OVERVIEW TECHNICAL SUPPORT 1.877.877.2269 2.5.2 LIG1080A 3, 4, 5 FIGURE 2-3. LIG1080A TOP AND FRONT PANELS TABLE 2-2. LIG1080A COMPONENTS NUMBER IN FIGURE 2-3 COMPONENT DESCRIPTION (1) 6-pin terminal block Power 1, Power 2 and Alarm connections (1) RJ-45 connector Links to console for management...

  • Page 17: Lig1082A

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: OVERVIEW TECHNICAL SUPPORT 1.877.877.2269 2.5.3 LIG1082A 3, 4, 5 FIGURE 2-4. LIG1082A FRONT PANEL TABLE 2-3. LIG1082A COMPONENTS NUMBER IN FIGURES 2-4 COMPONENT DESCRIPTION 1 (not shown) (1) RJ-45 connector Links to console for management 2 (not shown) (1) 6-pin terminal block...

  • Page 18: Lie1014A

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: OVERVIEW TECHNICAL SUPPORT 1.877.877.2269 2.5.4 LIE1014A FIGURE 2-5. LIE1014A TOP PANEL 5, 6, 7 FIGURE 2-6. LIE1014A FRONT PANEL TABLE 2-4. LIE1014A COMPONENTS NUMBER IN FIGURES 2-5 AND 2-6 COMPONENT DESCRIPTION (1) RJ-45 connector...

  • Page 19: Lie1080A

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: OVERVIEW TECHNICAL SUPPORT 1.877.877.2269 2.5.5 LIE1080A 5, 6, 7 FIGURE 2-7. LIE1080A FRONT PANEL TABLE 2-5. LIE1080A COMPONENTS NUMBER IN FIGURE 2-7 COMPONENT DESCRIPTION 1 (not shown) (1) RJ-45 connector Links to console for management 2 (not shown) (1) 6-pin terminal block...

  • Page 20: Lie1082A

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: OVERVIEW TECHNICAL SUPPORT 1.877.877.2269 2.5.6 LIE1082A 5, 6, 7 FIGURE 2-8. LIE1082A FRONT PANEL TABLE 2-6. LIE1082A COMPONENTS NUMBER IN FIGURE 2-7 COMPONENT DESCRIPTION 1 (not shown) (1) RJ-45 connector Links to console for management 2 (not shown) (1) 6-pin terminal block...

  • Page 21: Installation

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 3.1 DIN RAIL MOUNTING Follow these steps to mount the switch on a DIN rail. 1. Screw the DIN-Rail bracket on with the bracket and screws in the accessory kit. FIGURE 3-1.

  • Page 22: Wallmounting

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 3.2 WALLMOUNTING Follow these steps to mount the switch on a wall. 1. Screw the wall-mount brackets on with screws in the accessory kit. P2 ALM –...

  • Page 23: Connecting The Ethernet Interface (Rj-45 Ethernet)

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 EXTRA POWER SYSTEM ALARM SYSTEM + – – + PWR1 ALM PWR2 GROUND CONNECTOR RESET CONSOLE FIGURE 3-4. ALARM RELAY AND GROUND 3.4 CONNECTING THE ETHERNET INTERFACE (RJ-45 ETHERNET) The switch provides two types of Ethernet interfaces: electrical (RJ-45) and optical (SFP) interfaces.

  • Page 24: Connecting The Ethernet Interface (Fiber, Sfp)

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 3.5 CONNECTING THE ETHERNET INTERFACE (FIBER, SFP) For both 100/1000 Mbps fiber speed connections, the SFP slots are available. The SFP slot accepts the fiber transceivers that typically have an LC connector.
  • Page 25 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 MANAGED SERIES FIRST POWER SUPPLY SECOND POWER SUPPLY + – – + PWR1 ALM PWR2 RESET CONSOLE FIGURE 3-7. MANAGED SERIES POE MANAGED SERIES SECOND POWER SUPPLY FIRST POWER SUPPLY + –...

  • Page 26: Alarm Relay And Ground

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 3.7 ALARM RELAY AND GROUND The alarm relay output contacts are in the middle of the DC terminal block connector as shown in the figure below. The alarm relay out is “Normal Open,”...

  • Page 27: Console Connection

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 EXTRA POWER SYSTEM ALARM SYSTEM + – – + PWR1 ALM PWR2 RESET CONSOLE RESET BUTTON FIGURE 3-10. RESET BUTTON 3.9 CONSOLE CONNECTION The Console port is for local management by using a terminal emulator or a computer with terminal emulation software. The DB9 connector connects to the computer’s COM port.

  • Page 28: Web Interface Initialization (Optional)

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 To connect the host PC to the Console port, an RJ-45 (male) connector-to-RS232 DB9 (female) connector cable is required. The RJ-45 connector of the cable is connected to the Console port of the switch; the DB9 connector of the cable is connected to the PC COM port.

  • Page 29: Cli Initialization And Configuration (Optional)

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 CONNECT AND LOGIN Connecting to the RJ-45 Ethernet port. Factory default IP: 192.0.2.1 Login with default account and password. Username: admin Password: (none) 3.11 CLI INITIALIZATION AND CONFIGURATION (OPTIONAL) 1.

  • Page 30: Upgrade/Downgrade Software

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 3.12 UPGRADE/DOWNGRADE SOFTWARE 1. In the Web UI, go to the Maintenance —> Software —> Upload page. 2. Select software file and click the Upload button. FIGURE 3-15.
  • Page 31 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 FIGURE 3-17. RESET CONFIGURATION BUT KEEP MANAGEMENT IP SETTING To reset all configurations to default: 1. Execute this command: reload defaults 2. Check the interface VLAN and IP address, confirm that they all changed to the default setting. 3.
  • Page 32 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 CONFIGURATION VIA WEB UI If the manager wants to reset the configuration to default but keep the management IP setting: 1. Go to Maintenance —> Factory Defaults page and click the Yes button. FIGURE 3-19.
  • Page 33 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 2. Change the PC’s IP address to an address in the 192.0.2.X network. 3. Change the Web’s IP to 192.0.2.1 (default IP). 4. Go to the Maintenance —> Configuration —> Save startup-config page, then click the Save Configuration button to reset. FIGURE 3-22.

  • Page 34: Led Status Indicators

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: INSTALLATION TECHNICAL SUPPORT 1.877.877.2269 3.14 LED STATUS INDICATORS TABLE 3-2. LED STATUS INDICATORS LED NAME INDICATOR /COLOR CONDITION On Green P1 power line has power P1 power line is disconnected or does not have supply power On Green P2 power line has power P2 power line is disconnected or does not have supply power...

  • Page 35: Vlan Application

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN APPLICATION TECHNICAL SUPPORT 1.877.877.2269 This chapter describes how to configure Virtual LANs (VLANs) in the switch. The switch supports up to 2048 VLANs. Ports are grouped into broadcast domains by assigning them to the same VLAN. Frames received in on VLAN can only be forwarded within that VLAN, and multicast frames and unknown unicast frames are flooded only to ports in the same VLAN.

  • Page 36: Example 2: Port-Based Vlans

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN APPLICATION TECHNICAL SUPPORT 1.877.877.2269 4.2 EXAMPLE 2: PORT-BASED VLANS When the switch receives an untagged VLAN packet, it will add a VLAN tag to the frame according to the PVID setting on a port. As shown in the following figure, the untagged packet is marked (tagged) as it leaves switch through Port 2, which is configured as a tagged member of VLAN100.
  • Page 37 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN APPLICATION TECHNICAL SUPPORT 1.877.877.2269 STEP 2: Select Configuration -> VLAN -> Static VLAN. Create a VLAN with VLAN ID 100. Enter a VLAN name in the Name field. STEP 3: Assign VLAN tag setting to or remove it from a port by toggling the check box under an individual port number.
  • Page 38 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CLI COMMAND vlan 1 vlan 100 interface GigabitEthernet 1/1 switchport access vlan 100 switchport trunk native vlan 100 switchport trunk allowed vlan 1,100 switchport trunk vlan tag native switchport mode trunk exit interface GigabitEthernet 1/2...

  • Page 39: Example 3: Ieee 802.1Q Tagging

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN APPLICATION TECHNICAL SUPPORT 1.877.877.2269 4.3 EXAMPLE 3: IEEE 802.1Q TAGGING The switch is able to construct a layer-2 broadcast domain by identifying VLAN ID specified by IEEE 802.1Q. It forwards a frame between bridge ports assigned to the same VLAN ID and can set multiple VLANs on each bridge port.
  • Page 40 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CONFIGURATION STEP 1: Go to C configuration -> VLANs -> Port VLAN configuration page specify the VLAN membership as follows: FIGURE 4-6. EXAMPLE 3 CONFIGURATION SCREEN STEP 2: Transmit unicast packets with VLAN tag 100 from Port 1 to Port 2 and Port 7.
  • Page 41 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CLI COMMAND vlan 100 vlan 200 interface GigabitEthernet 1/1 switchport access vlan 100 switchport trunk allowed vlan 1,100,200 switchport trunk vlan tag native switchport mode trunk exit interface GigabitEthernet 1/1 switchport access vlan 100...

  • Page 42: Security Application

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 ACL function supports access control security for MAC address, IP address, Layer4 Port, and Type of Service. Each has five actions: Deny, Permit, Queue Mapping, CoS Marking, and Copy Frame. The user can set the default ACL rule to Permit or Deny. TABLE 5-1.
  • Page 43 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 FIGURE 5-1. CREATE A NEW ACL PROFILE SCREEN STEP 2: Create a new ACL Entry rule under this ACL profile. (Deny MAC: 11 and VLAN: 4) STEP 3: Bind this ACL profile to a GE port.
  • Page 44 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 STEP 4: Send frames between PORT-3 and PORT-4, and see the test result. FIGURE 5-3. TEST RESULT SCREEN CLI COMMAND access-list ace 2 ingress interface GigabitEthernet 1/3 policy 0 frametype etype smac 00-00-00-00- 00-13 dmac 00-00-00-00-00-11 action deny exit interface GigabitEthernet 1/3...
  • Page 45 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 Two directional MAC address with all VLANs denying filtering. STEP 1: Create a new ACL Profile. (Profile Name: DenySomeMac) FIGURE 5-4. ACL CONFIGURATION SCREEN STEP 2: Create a new ACL Entry rule under this ACL profile.
  • Page 46 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 Step 4: Send frames between PORT-3 and PORT-4, and see test result. FIGURE 5-6. TEST RESULT CLI COMMAND access-list ace 2 ingress interface GigabitEthernet 1/3 policy 0 frametype etype smac 00-00-00-00- 00-13 dmac 00-00-00-00-00-11 action deny exit interface GigabitEthernet 1/3...
  • Page 47 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CASE 1D User can set default ACL Rule of GE port as “Permit”, then bind a suitable profile with “CoS Marking” action for some ACL function. It means the GE port can remark CoS of the VLAN frame received from this port.
  • Page 48 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CLI COMMAND access-list ace 1 next 2 ingress interface GigabitEthernet 1/4 policy 1 vid 4 frametype etype smac 00-00-00- 00-00-11 action deny exit interface GigabitEthernet 1/3 switchport trunk allowed vlan 4,5 switchport trunk vlan tag native interface GigabitEthernet 1/4...
  • Page 49 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 STEP 5: Send frames between PORT-3 and PORT-4, and see test result. FIGURE 5-10. TEST RESULT CLI COMMAND access-list ace 2 next 3 ingress interface GigabitEthernet 1/3 policy 0 frametype etype smac 00-00-00-00-00-13 dmac 00-00-00-00-00-11 action deny mirror redirect interface GigabitEthernet 1/5 exit interface GigabitEthernet 1/3...
  • Page 50 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CASE 1G User can set default ACL Rule of GE port as “Deny”, then bind a suitable profile with “Permit” action for ACL. It means the GE port cannot pass through all packets but the ACL entry of the profile binding.
  • Page 51 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CLI COMMAND access-list ace 4 ingress interface GigabitEthernet 1/4 policy 3 tag tagged vid 4 frametype etype smac 00-00-00- 00-00-11 exit interface GigabitEthernet 1/3 switchport trunk allowed vlan 4,5 switchport trunk vlan tag native interface GigabitEthernet 1/4...
  • Page 52 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 STEP 4: Send frames between PORT-3 and PORT-4, see test result. FIGURE 5-14. CLI COMMAND access-list ace 5 ingress interface GigabitEthernet 1/3 policy 5 frametype etype smac 00-00-00-00-00-13 dmac 00-00-00-00-00-11 exit interface GigabitEthernet 1/3...
  • Page 53 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CASE 1J User can set default ACL Rule of GE port as “Deny”, then bind a suitable profile with “Copy Frame” action for mirror analyzer used. It means the system will copy frames from the binding GE Port to the analyzer port.
  • Page 54 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 FIGURE 5-16. STEP 5: Send frames between PORT-3 and PORT-4, see test result. FIGURE 5-17. TEST RESULT 1.877.877.2269 BLACKBOX.COM...

  • Page 55: Case 2: Acl For Ip Address

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CLI COMMAND access-list ace 5 next 6 ingress interface GigabitEthernet 1/3 policy 5 frametype etype smac 00-00-00-00-00-13 dmac 00-00-00-00-00-11 Exit monitor destination interface GigabitEthernet 1/5 monitor source cpu both exit interface GigabitEthernet 1/3...
  • Page 56 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: SECURITY APPLICATION TECHNICAL SUPPORT 1.877.877.2269 The value (7) is reserved and set to 0. Ex: Pre (001) means 1 Pre (100) means 4 Precedence Type of Service ToS (00010) means 1 ToS (10000) means 8 DSCP (000001) means 1 DSCP (100000) means 32...

  • Page 57: Ring Version 2 Application

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 For a reliable network industrial Ethernet applications, the switch provides a mini-second grade failover ring protection; this feature offers a seamless working network even if encountering some issues with connections. This works with twisted-pair and fiber cable.
  • Page 58 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 P1 P2 ALM Central management switch IP address: 192.168.0.1/24 P1 P2 ALM P1 P2 ALM P1 P2 ALM P1 P2 ALM P1 P2 ALM P1 P2 ALM Ring 2 Ring 1...
  • Page 59 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 Dual-Homing  When the role is dual-homing, one ring port is the primary port and another is the backup port. This backup port is a redundant port. In normal state, it is blocked.

  • Page 60: How To Configure Ringv2

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 Balancing Chain - The switch can be central-block, terminal-1/2 or member.  LAN network Terminal 1 Terminal 2 P1 P2 ALM P1 P2 ALM P1 P2 ALM P1 P2 ALM P1 P2 ALM...
  • Page 61 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 To finish the configuration, enable ring protection status using the “mode enable” command. NOTE: Please pay attention to the status of “Previous Command Result” after every action. configure terminal ring protect group1 mode disable...
  • Page 62 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 STEP 1: Disable RSTP on All Ring Ports 1. Go to “Configuration —> Spanning Tree —> CIST ports” Web page. FIGURE 6-8. STP CIST PORT CONFIGURATION SCREEN 2.
  • Page 63 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 RING SLAVE 1. Go to “Configuration —> “RingV2” Web page. 2. Enable Index1, and Select Role as Ring(Slave) 3. Select two ports as “Forward Port.” FIGURE 6-10.
  • Page 64 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 COUPLING BACKUP 1. Go to “Configuration —> “RingV2” Web page. 2. Enable Index1, and Select Role as Ring(Slave). 3. Select two ports as a “Forward Port.” 4.
  • Page 65 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CHAIN CONFIGURATION Chain (Member) Chain (Tail) Chain (Head) P1 P2 ALM P1 P2 ALM P1 P2 ALM P1 P2 ALM P1 P2 ALM Head port Tail port Ring/Switch/...
  • Page 66 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CHAIN - HEAD 1. Go to “Configuration —> “RingV2” Web page. 2. Disable Index1 and Index2, then enable Index3. 3. Select Role to “Chain(Head).” 4.
  • Page 67 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 BALANCE CHAIN CONFIGURATION Balancing Chain Balancing Chain (Member) (Member) Balancing Chain (Central Block) P1 P2 ALM P1 P2 ALM P1 P2 ALM P1 P2 ALM P1 P2 ALM Balance Chain Balance Chain...
  • Page 68 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: RING VERSION2 APPLICATION TECHNICAL SUPPORT 1.877.877.2269 BALANCE CHAIN - TERMINAL 1 AND 2 1. Go to “Configuration —> “RingV2” Web page. 2. Disable Index1 and Index2, then enable Index3. 3.

  • Page 69: Qos Application

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 7: QOS APPLICATION TECHNICAL SUPPORT 1.877.877.2269 Quality of Service (QoS) features allow you to allocate network resources to mission-critical applications at the expense of applications that are less sensitive to such factors as time delays or network congestion. You can configure your network to prioritize specific types of traffic, ensuring that each type receives the appropriate Quality of Service (QoS) level.
  • Page 70 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 7: QOS APPLICATION TECHNICAL SUPPORT 1.877.877.2269 Stream0 Stream0 P0, 100 Mbps, 1518 bytes Stream1 P0, 100 Mbps, 1518 bytes P7, 100 Mbps, 1518 bytes Stream1 P7, 100 Mbps, 1518 bytes FIGURE 7-2.
  • Page 71 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 7: QOS APPLICATION TECHNICAL SUPPORT 1.877.877.2269 WEB MANAGEMENT STEP 1: Go to Configuration —> Ports —> set port 2 link speed to 100 Mbps full duplex. FIGURE 7-3. STEP 2: Select Configuration —> VLANs —> Create a VLAN with VLAN ID 100. Enter a VLAN name in the Name field. Here we set tagged VLAN100 on PORT-1 and PORT-2.

  • Page 72: Example 2: Sfq With Shaping

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 7: QOS APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CLI CONFIGURATION COMMAND interface GigabitEthernet 1/1 switchport trunk native vlan 100 switchport trunk allowed vlan 1,100 switchport trunk vlan tag native switchport mode trunk interface GigabitEthernet 1/2 switchport trunk native vlan 100 switchport trunk allowed vlan 1,100...
  • Page 73 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 7: QOS APPLICATION TECHNICAL SUPPORT 1.877.877.2269 Š Stream0: Š Dst Mac: 00:00:00:00:20:01 Src Mac: 00:00:00:00:10:01 Vlan: 100 Vlan prio: 0 Send rate: 100 Mbps Packet length: 1518 bytes Š Stream1: Š...
  • Page 74 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 7: QOS APPLICATION TECHNICAL SUPPORT 1.877.877.2269 WEB MANAGEMENT STEP 1: Go to Configuration —> Qos —> Port Shaping, to create a Qos profile on Port-2. FIGURE 7-7. STEP 2: Select schedule mode to be “”Strict Priority” and set shaping rate for queue 0 and queue 7 as below. FIGURE 7-8.
  • Page 75 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 7: QOS APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CLI CONFIGURATION COMMAND interface GigabitEthernet 1/2 switchport trunk native vlan 100 switchport trunk allowed vlan 1,100 switchport trunk vlan tag native switchport mode trunk qos queue-shaper queue 0 80000 qos queue-shaper queue 7 20000 1.877.877.2269...

  • Page 76: Igmp Application

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: IGMP APPLICATION TECHNICAL SUPPORT 1.877.877.2269 IGMP is an acronym for Internet Group Management Protocol. It is a communications protocol used to manage the membership of Internet Protocol multicast groups. IGMP is used by IP hosts and adjacent multicast routers to establish multicast group memberships.

  • Page 77: Example 2

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: IGMP APPLICATION TECHNICAL SUPPORT 1.877.877.2269 8.2 EXAMPLE 2 Multicast server L3 switch querier Industrial Ethernet Switch Client 1 Client 2 Client 3 FIGURE 8-3. EXAMPLE 2 1. Go to “Configuration —> IPMC —> Basic Configuration” to select the “Snooping Enable” check box. 2.

  • Page 78: Example 3

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: IGMP APPLICATION TECHNICAL SUPPORT 1.877.877.2269 4. Go to “Configuration —> IPMC —> VLAN Configuration” to select the “Snooping Enable” check box and set the VLAN ID of port14. FIGURE 8-5. 8.3 EXAMPLE 3 Multicast server L3 switch querier...

  • Page 79: How To Configure Vlc

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: IGMP APPLICATION TECHNICAL SUPPORT 1.877.877.2269 2. Go to “Configuration —> IPMC —> VLAN Configuration” to select the “Snooping Enable” check box and set the VLAN ID of port14. FIGURE 8-8. 3.
  • Page 80 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: IGMP APPLICATION TECHNICAL SUPPORT 1.877.877.2269 VLC CONFIGURATION ON AN IGMP CLIENT 1. In the Media area of the top tool bar, select open network stream. 2. Set the stream IP and protocol port to be the same as the previous setting on the server. The protocol type is “UDP.“ Then click the “PLAY”...

  • Page 81: Authentication Application

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: 802.1X AUTHENTICATION APPLICATION TECHNICAL SUPPORT 1.877.877.2269 IEEE 802.1x derives keys that can be used to provide per-packet authentication, integrity and confidentially. It is typically used along with well-known key derivation algorithms (e.g. TLS, SRP, MD5-Challenge, etc.). The Industrial Ethernet Switch supports 802.1x authentication function per port (port1–port10).

  • Page 82: Example

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: 802.1X AUTHENTICATION APPLICATION TECHNICAL SUPPORT 1.877.877.2269 9.3 EXAMPLE Here we take an example of 802.1x Authentication via the Industrial Ethernet Switch to be authenticated by RADIUS server. In a basic example, we take port 1 as a testing port which enables 802.1x in the switch.
  • Page 83 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: 802.1X AUTHENTICATION APPLICATION TECHNICAL SUPPORT 1.877.877.2269 CLI COMMAND Configure ter interface vlan 1 ip address 20.20.20.120 255.0.0.0 exit exit radius-server host 20.20.20.20 timeout 5 retransmit 3 key a1b2c3d4 dot1x re-authentication dot1x system-auth-control interface GigabitEthernet 1/1 dot1x port-control auto...
  • Page 84 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: 802.1X AUTHENTICATION APPLICATION TECHNICAL SUPPORT 1.877.877.2269 Authentication Behavior The supplicant should pass the authentication process in order to use any service. After the supplicant enters a correct account and password stored in RADIUS server, it can be authenticated successfully.

  • Page 85: Power Over Ethernet Application (For Lie1014A, Lie1080A And Lie1082A Models Only)

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: POWER OVER ETHERNET APPLICATION TECHNICAL SUPPORT 1.877.877.2269 NOTE: This chapter applies only to PoE managed models (LIE401A, LIE1014A, LIE1080A and LIE1082A). These switches support the PoE function for connected powered devices. The operation mode contains 802.3af (15.4W), 802.3at (30W), and 802.3at with 4 pair used (60W).

  • Page 86: Other Settings

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 TECHNICAL CHAPTER 10: POWER OVER ETHERNET APPLICATION SUPPORT 1.877.877.2269 10.3 OTHER SETTINGS 1. PoE Power Supply: To determine the amount of power the PD may use, you must define what amount of power a power source can deliver.

  • Page 87: Example 1

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: POWER OVER ETHERNET APPLICATION TECHNICAL SUPPORT 1.877.877.2269 1. Day: Checkmarks indicate which day are members of the set. From Sunday to Saturday. 2. Interval: Start - Select the start hour and minute. End - Select the end hour and minute. There are 48 time intervals in one day. Each interval has 30 minutes.

  • Page 88: Example 2

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: POWER OVER ETHERNET APPLICATION TECHNICAL SUPPORT 1.877.877.2269 5. Test Result: PoE port status can be monitored by Web: Monitor —> PoE The following table shows that if the system budget is not enough for all PoE devices, the port with higher priority port will be fed power first.
  • Page 89 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: POWER OVER ETHERNET APPLICATION TECHNICAL SUPPORT 1.877.877.2269 4. Web Configuration FIGURE 10-5. WEB CONFIGURATION 5. Test Result: PoE port status can be monitored by Web: Monitor —> PoE Since power is reserved for each port in advance, each powered device can use the power budget of its corresponding port without exceeding its maximum power.

  • Page 90: Appendix A. Regulatory Information

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 APPENDIX A: REGULATORY INFORMATION TECHNICAL SUPPORT 1.877.877.2269 A.1 FCC STATEMENT This equipment has been found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.

  • Page 91: Nom Statement

    NEED HELP? LEAVE THE TECH TO US LIVE 24/7 APPENDIX A: REGULATORY INFORMATION TECHNICAL SUPPORT 1.877.877.2269 A.2 NOM STATEMENT 1. Todas las instrucciones de seguridad y operación deberán ser leídas antes de que el aparato eléctrico sea operado. 2. Las instrucciones de seguridad y operación deberán ser guardadas para referencia futura. 3.

  • Page 92: Appendix B. Trademarks/Disclaimer

    B.1 DISCLAIMER Black Box Corporation shall not be liable for damages of any kind, including, but not limited to, punitive, consequential or cost of cover damages, resulting from any errors in the product information or specifications set forth in this document and Black Box Corporation may revise this document at any time without notice.
  • Page 93 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 NOTES TECHNICAL SUPPORT 1.877.877.2269 __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ _________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________\ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ _________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ 1.877.877.2269 BLACKBOX.COM...
  • Page 94 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 NOTES TECHNICAL SUPPORT 1.877.877.2269 __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ _________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________\ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ _________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ 1.877.877.2269 BLACKBOX.COM...
  • Page 95 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 NOTES TECHNICAL SUPPORT 1.877.877.2269 __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ _________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________\ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ _________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ ____ 1.877.877.2269 BLACKBOX.COM...
  • Page 96 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 TECHNICAL SUPPORT 1.877.877.2269 © COPYRIGHT 2018 BLACK BOX CORPORATION. ALL RIGHTS RESERVED.

This manual is also suitable for:

Lig1080aLig1082aLie1014aLie1080aLie1082a

Table of Contents