Page 2
In addition, we refer to the conditions of use specified in the license contract. You can find the current version of this manual on the Internet, on the Hirschmann product pages (www.hirschmann-ac.de). Printed in Germany Hirschmann Automation and Control GmbH Stuttgarter Str.
Content Content Content About this Manual Opening the Web-based Interface Basic Settings System Network Software 1.3.1 View the software versions present on the device 1.3.2 Update via file selection 1.3.3 tftp update Port configuration Power over ETHERNET Load/Save 1.6.1 Loading the configuration 1.6.2 Saving the configuration 1.6.3 URL 1.6.4 Deleting a configuration...
Page 4
Content Time SNTP configuration PTP (IEEE 1588) 3.2.1 PTP Global (MS20/MS30, PowerMICE) 3.2.2 PTP Version 1 (MS20/MS30, Power MICE) 3.2.3 PTP Version 2 (BC) (MS20/MS30, PowerMICE) 3.2.4 PTP Version 2 (TC) (MS20/MS30, PowerMICE) Switching Switching Global Filters for MAC addresses Rate Limiter 4.3.1 Rate Limiter settings Multicasts...
Page 5
Content Redundancy Ring Redundancy 6.1.1 Configuring the HIPER-Ring 6.1.2 Configuring the MRP-Ring Ring/Network coupling 6.2.1 Preparing a Ring/Network coupling Rapid Spanning Tree 6.3.1 Rapid Spanning Tree Global 6.3.2 Rapid Spanning Tree Port Diagnosis Event log Ports 7.2.1 Statistics table 7.2.2 Utilization 7.2.3 SFP modules Topology Discovery Port Mirroring...
Page 6
Content Advanced DHCP Relay Agent Industrial Protocols 8.2.1 PROFINET IO 8.2.2 EtherNet/IP Command Line Appendix Technical Data List of RFCs Based specifications and standards Copyright of integrated software A.4.1 Bouncy Castle Crypto APIs (Java) A.4.2 LVL7 Systems, Inc. Readers’ comments Index Further support RM Web L2E...
About this Manual About this Manual The "Web-based Interface" reference manual contains detailed information on using the Web interface to operate the individual functions of the device. The "Command Line Interface" reference manual contains detailed informa- tion on using the Command Line Interface to operate the individual functions of the device.
Page 8
About this Manual RM Web L3P+ Release 5.0 04/09...
The designations used in this manual have the following meanings: List Work step Subheading Link Indicates a cross-reference with a stored link Note: A note emphasizes an important fact or draws your attention to a dependency. ASCII representation in user interface Courier Symbols used: Router with firewall...
Page 10
A random computer Configuration Computer Server PLC - Programmable logic controller I/O - Robot RM Web L3P+ Release 5.0 04/09...
Opening the Web-based Interface Opening the Web-based Interface To open the Web-based interface, you will need a Web browser (a program that can read hypertext), for example Mozilla Firefox version 1 or later, or Mi- crosoft Internet Explorer version 6 or later. Note: The Web-based interface uses the Java software version 5 or later (Ja- va™...
Page 12
Opening the Web-based Interface Establish the connection by entering the IP address of the device which you want to administer via the Web-based management in the address field of the Web browser. Enter the address in the following form: http://xxx.xxx.xxx.xxx The login window appears on the screen.
Page 13
Opening the Web-based Interface Note: The changes you make in the dialogs are copied to the device when you click on “Set”. Click on “Load” to update the display. Note: You can block your access to the device by entering an incorrect con- figuration.
Page 14
Opening the Web-based Interface The menu section displays the menu items. By placing the mouse pointer in the menu section and clicking the right mouse button you can use “Back” to return to a menu item you have already selected, or “Forward” to jump to a menu item you have already selected.
Basic Settings 1 Basic Settings The basic settings menu contains the dialogs, displays and tables for basic settings configuration: System Network Software Port configuration Power over Ethernet Load/Save Restart RM Web L3P+ Release 5.0 04/09...
Basic Settings 1.1 System 1.1 System The „System“ submenu in the basic settings menu is structured as follows: Device status System data Device view Reloading data Figure 4: "System" submenu Device status This section of the website provides information on the device status and the alarm state of the device.
Page 17
Basic Settings 1.1 System Figure 5: Device status and alarm display 1 - Symbol indicates the Device Status 2 - Cause of the oldest existing alarm 3 - Time of the oldest existing alarm System data This area of the website displays the system parameters of the device. Here you can change, –...
Page 18
Basic Settings 1.1 System 1 2 3 Figure 6: Availability of the media modules 1 - Module present 2 - Empty slot 3 - Module was removed. Click this check mark to define this slot as an empty slot. Device view The device view shows the device with the current configuration.
Page 19
Basic Settings 1.1 System Figure 7: Device view Meaning of the symbols: The port (10, 100 Mbit/s, 1, 10 Gbit/s) is enabled and the connection is OK. The port is disabled by the management and it has a connection. The port is disabled by the management and it has no connection.
Page 20
Basic Settings 1.1 System Figure 8: Time until update RM Web L3P+ Release 5.0 04/09...
Basic Settings 1.2 Network 1.2 Network With the Basic Settings:Network dialog you define the source from which the device gets its IP parameters after starting, and you assign the IP parameters and VLAN ID and configure the HiDiscovery access. Figure 9: Network parameters dialog Under “Mode”, you enter where the device gets its IP parameters: In the BOOTP mode, the configuration is via a BOOTP or DHCP server on the basis of the MAC address of the device...
Page 22
Basic Settings 1.2 Network You enter the name applicable to the DHCP protocol in the “Name” line in the system dialog of the Web-based interface. The “VLAN ID” frame enables you to assign a VLAN to the agent. If you enter the VLAN ID “0”...
Basic Settings 1.3 Software 1.3 Software The software dialog enables you to view the software versions present on the device and to carry out a software update of the device via tftp or file selec- tion. Figure 10: Software dialog 1.3.1 View the software versions present on the device You can view:...
Basic Settings 1.3 Software 1.3.2 Update via file selection For an update via a file selection window, the device software must be on a data carrier that you can access via your PC. In the file selection frame, click on “...”. In the file selection window, select the device software (device.bin) and click on “Open”.
Basic Settings 1.4 Port configuration 1.4 Port configuration This configuration table allows you to configure every port of the device. In the “Name” column, you can enter a name for every port. In the “Ports on” column, you can switch on the port by selecting it here. In the “Propagate connection error”...
Page 26
Basic Settings 1.4 Port configuration Note: If you have set up VLANs, pay attention to the “Transparent mode” (see on page 83 „VLAN Global“). Note: The active automatic configuration has priority over the manual configuration. Note: The following settings are required for the ring ports in a HIPER-Ring: Bit rate 100 Mbit/s 1000 Mbit/s...
Basic Settings 1.5 Power over ETHERNET 1.5 Power over ETHERNET Devices with Power over ETHERNET (PoE) media modules or PoE ports en- able you to supply current to terminal devices such as IP phones via the twist- ed-pair cable. PoE media modules and PoE ports support Power over ETHERNET according to IEEE 802.3af.
Page 28
Basic Settings 1.5 Power over ETHERNET “Reserved Power” displays the maximum power that the device provides to all the connected PoE devices together on the basis of their classi- fication. “Delivered Power” shows how large the current power requirement is at all PoE ports.
Basic Settings 1.6 Load/Save 1.6 Load/Save With this dialog you can: load a configuration, save a configuration, enter a URL, restore the delivery configuration, use the ACA for configuring, cancel a configuration change. Figure 13: Load/Save dialog RM Web L3P+ Release 5.0 04/09...
Basic Settings 1.6 Load/Save 1.6.1 Loading the configuration In the "Load" frame, you have the option to load a configuration saved on the device, load a configuration stored under the specified URL, load a configuration stored on the specified URL and save it on the device, load a configuration saved on a PC in binary format.
Basic Settings 1.6 Load/Save If you change the current configuration (for example, by switching a port off), the load/save symbol in the menu area changes from a disk symbol into a yellow triangle. After saving the configuration, the load/save symbol changes back into the disk symbol.
Basic Settings 1.6 Load/Save 1.6.5 Using the AutoConfiguration Adapter (ACA) The ACAs are devices for saving the configuration data of a device. In the case of a device failure, an ACA enables the configuration data to be trans- ferred easily by means of a substitute device of the same type. Note: If you replace a device with DIP switches, please ensure that the DIP switch settings are identical.
Basic Settings 1.6 Load/Save Status Meaning notPresent No ACA present. The configuration data from the ACA and the device are consistent. removed The ACA has been removed after booting. notInSync The configuration data from the ACA and the device are not consistent. outOfMemory The local configuration data is too extensive to be stored on the ACA.
Page 34
Basic Settings 1.6 Load/Save Watchdog IP address "Watchdog IP address" shows you the IP address of the PC from which you have activated the (watchdog) function. The device monitors the link to the PC with this IP address, checking for interruptions. RM Web L3P+ Release 5.0 04/09...
Basic Settings 1.7 Restart 1.7 Restart With this dialog you can: Cold start the device. In a cold start, the device reloads the software from the non-volatile memory, restarts, and performs a self-test. Warm start the device. In this case the device checks the software in the volatile memory and restarts.
Security 2 Security The security menu contains the dialogs, displays and tables for configuring the security settings: Password SNMPv1/v2 access Telnet/Web access Port security RM Web L2E Release 5.0 04/09...
Security 2.1 Password / SNMP Access 2.1 Password / SNMP Access This dialog gives you the option of changing the read and read/write pass- words for access to the device via the Web-based interface/CLI/SNMP. Please note that passwords are case-sensitive. For security reasons, the read password and the read/write password should not be identical.
Page 39
Security 2.1 Password / SNMP Access Note: For security reasons, the passwords are not displayed. Make a note of every change! You cannot access the device without a valid password! Note: For security reasons, SNMP version 3 encrypts the password. With the “SNMPv1”...
Security 2.2 SNMPv1/v2 Access Settings 2.2 SNMPv1/v2 Access Settings With this dialog you can select access via SNMPv1 or SNMPv2. In the state on delivery, both protocols are activated. You can thus manage the device with HiVision and communicate with earlier versions of SNMP.
Page 41
Security 2.2 SNMPv1/v2 Access Settings Binary notation of the mask 255.255.255.240: 1111 1111 1111 1111 1111 1111 1111 0000 mask bits Binary notation of the IP address 172.168.23.20: 1010 1100 1010 1000 0001 0111 0001 0100 The binary representation of the mask with the IP address yields an address range of: 1010 1100 1010 1000 0001 0111 0001 0000 bis...
Security 2.3 Telnet/Web Access 2.3 Telnet/Web Access This dialog allows you to switch off the Telnet server and the Web server on the device. Figure 17: Telnet/Web access dialog 2.3.1 Description of Telnet access The Telnet server of the device allows you to configure the device by using the Command Line Interface (in-band).
Security 2.3 Telnet/Web Access Note: The Command Line Interface (out-of-band) and the Security:Tel- net/Web access dialog in the Web-based interface allow you to reactivate the Telnet server. 2.3.2 Description of Web access The Web server of the device allows you to configure the device by using the Web-based interface.
Security 2.4 Port Security 2.4 Port Security The device protects every port from unauthorized access. Depending on your selection, the device checks the MAC address or the IP address of the connected device. MAC-Based Port Security Check source MAC address of a received data packet. IP-Based Port Security Check source IP address of a received data packet.
Page 46
Security 2.4 Port Security Name Meaning Current MAC Address Shows the MAC address of the device from which the port last re- ceived data. The Web-based interface allows you to copy an entry from the “Current MAC Address” column into the “Allowed MAC Addresses”...
Page 47
Security 2.4 Port Security Figure 18: Port Security dialog Note: Since the device is a layer 2 device, it translates the IP addresses en- tered into MAC addresses. For this, exactly one IP address must be assigned to a MAC address. Please keep in mind that when using a router, for example, several IP ad- dresses can be assigned to one MAC address, namely that of the router.
Page 48
Security 2.4 Port Security RM Web L2E Release 5.0 04/09...
Time 3 Time With this dialog you can enter time-related settings independently of the time synchronization protocol selected. The “IEEE/SNTP time” displays the time with reference to Universal Time Coordinated (UTC). The time displayed is the same worldwide. Local time differences are not taken into account.
Page 50
Time The PTP reference clock gets its time either via SNTP or from its own clock. All other clocks favor using the PTP time as the source. Figure 19: Time dialog RM Web L2E Release 5.0 04/09...
Time 3.1 SNTP configuration 3.1 SNTP configuration The Simple Network Time Protocol (SNTP) enables you to synchronize the system time in your network. The device supports the SNTP Server and SNTP Client functions. The SNTP server makes the UTC (Universal Time Coordinated) available. UTC is the time relating to the coordinated world time measurement.
Page 52
Time 3.1 SNTP configuration Parameter Meaning Anycast destination ad- Enter the IP address to which the SNTP server on the device sends the dress SNTP packets. VLAN ID Enter the VLAN to which the device may periodically send SNTP packets. Anycast send interval Enter the time interval at which the device sends SNTP packets (valid entries: 1 second to 3600 seconds, on delivery: 120 seconds).
Page 53
Time 3.1 SNTP configuration Note: If you are receiving the system time from an external/redundant server address, you do not accept any SNTP Broadcasts (see “Accept SNTP Broadcasts”). Otherwise you can never distinguish whether the device is displaying the time from the server entered, or that of an SNTP Broadcast packet.
Time 3.2 PTP (IEEE 1588) 3.2 PTP (IEEE 1588) Precise time management is required for running time-critical applications via a LAN. The IEEE 1588 standard with the Precision Time Protocol (PTP) describes a procedure that assumes one clock is the most accurate and thus enables precise synchronization of all clocks in an LAN.
Time 3.2 PTP (IEEE 1588) 3.2.1 PTP Global (MS20/MS30, PowerMICE) The table below helps you to select the PTP version and the PTP mode. Version Mode Reference clock Device with PTP messages used timestamp Version 1 v1-simple-mode Version 1 — v1-boundary-clock Version 1 Process...
Page 56
Time 3.2 PTP (IEEE 1588) Parameter Meaning Value range Default setting PTP version/ Version and mode of the local clock. v1-boundary- mode clock Boundary Clock function based on v1-boundary-clock IEEE1588-2002 (PTPv1). Support for PTPv1 without special v1-simple-mode hardware. The device synchronizes itself with received PTPv1 messag- es.
Time 3.2 PTP (IEEE 1588) Parameter Meaning Value range Default setting Bottom synchro- Bottom PTP synchronization thresh- 0-999999999 nization thresh- old value, specified in nanoseconds. old [ns] If the result of (reference time - local time) is lower than the value of the bottom PTP synchronization thresh- old, then the local clock is deemed as synchronous with the reference...
Page 58
Time 3.2 PTP (IEEE 1588) PTP Version 1, Global Settings Parameter Meaning Value range Default setting Sync Interval Period for sending synchronization - sec-1 sec-2 messages. - sec-2 Entered in seconds. - sec-8 - sec-16 - sec-64 Subdomain Name of the PTP subdomain to 5 ASCII characters _DFLT name...
Page 59
Time 3.2 PTP (IEEE 1588) PTP Version 1, Port Settings Parameter Meaning Value range Default setting Module Module number for modular devices, otherwise 1. Port Port to which this entry applies. The table remains empty if the de- vice does not support the PTP mode selected PTP on Port sends/receives PTP synchroni-...
Time 3.2 PTP (IEEE 1588) 3.2.3 PTP Version 2 (BC) (MS20/MS30, PowerMICE) PTP version 2 provides considerably more setting options. These enable - faster reconfiguration of the PTP network than in PTP version 1 - greater precision in some environments. You select the PTP version you want to use in the Time:PTP:Global dialog.
Page 61
Time 3.2 PTP (IEEE 1588) Parameter Meaning Value range Default setting Clock identifier Own UUID (unique identification number) Parent port UUID of the direct master identifier Grandmaster UUID of the reference clock identifier Table 20: Identifiers Parameter Meaning Value range Default setting Priority 1 Display priority 1 of the current refer-...
Page 62
Time 3.2 PTP (IEEE 1588) Parameter Meaning Value range Default setting Time source Source selected for own clock. atomicClock internalOscilla- terrestrialRadio handset other internalOscillator UTC Offset [s] Current difference between the PTP -2147483648 to time scale (see below) and the UTC. 2147483647 UTC Offset valid Specifies whether value of UTC off- Yes, No...
Page 63
Time 3.2 PTP (IEEE 1588) PTP Version 2 (TC), Port Settings Parameter Meaning Value range Default setting Module Module number for modular devices, otherwise 1. Port Port to which this entry applies. The table remains empty if the de- vice does not support the PTP mode selected PTP on Port sends/receives PTP synchroni-...
Page 64
Time 3.2 PTP (IEEE 1588) Parameter Meaning Value range Default setting Announce Announce interval timeout for PTP 2-10 Timeout topology discovery in number of an- nounce intervals. The standard settings of announce interval = 2 (2 per second) and an- nounce timeout = 3 lead to a timeout of 3 x 2 seconds = 6 seconds.
Time 3.2 PTP (IEEE 1588) Parameter Meaning Value range Default setting V1 Hardware Some devices from other manufac- auto, on, off auto Compatibility turers require PTP messages of specific length. If the UDP/IPv4 network protocol is selected and the function is active, the device extends the PTP mes- sages.
Page 66
Time 3.2 PTP (IEEE 1588) PTP Version 2 (TC), Global Settings Parameter Meaning Value range Default setting Runtime Mea- Mechanism for measuring the mes- suring Mecha- sage runtime. nism Enter the same mechanism for the PTP device connected to this port. The device itself does not generate E2E (end-to-end): any messages in the runtime mea-...
Page 67
Time 3.2 PTP (IEEE 1588) PTP Version 2 (TC) Port Settings Parameter Meaning Value range Default setting Module Module number for modular devices, otherwise 1. Port Port to which this entry applies. The table remains empty if the de- vice does not support the PTP mode selected PTP on Port sends/receives PTP synchroni-...
Page 68
Time 3.2 PTP (IEEE 1588) RM Web L2E Release 5.0 04/09...
Switching 4 Switching The switching menu contains the dialogs, displays and tables for configuring the switching settings: Switching Global Filters for MAC Addresses Rate Limiter Multicasts VLAN RM Web L2E Release 5.0 04/09...
Switching 4.1 Switching Global 4.1 Switching Global Variable Meaning Possible values State on delivery MAC address Display the MAC address of the device Aging Time (s) Enter the Aging Time for all dynamic 15-3825 entries in seconds. In connection with the router redundancy (see MACH 3000), select a time greater than/equal to 30 seconds.
Switching 4.2 Filters for MAC addresses 4.2 Filters for MAC addresses The filter table for MAC addresses is used to display and edit filters. Each row represents one filter. Filters specify the way in which data packets are sent. They are set automatically by the device (learned status) or manually. Data packets whose destination address is entered in the table are sent from the receiving port to the ports marked in the table.
Page 72
Switching 4.2 Filters for MAC addresses Note: This filter table allows you to create up to 100 filters for Multicast addresses. RM Web L2E Release 5.0 04/09...
Switching 4.3 Rate Limiter 4.3 Rate Limiter To ensure reliable data exchange during heavy traffic, the device can limit the traffic. Entering a limit rate for each port specifies the amount of traffic the device is permitted to transmit and receive. If the data load transmitted at this port exceeds the maximum load entered, the device will discard the excess data at this port.
Page 74
Switching 4.3 Rate Limiter > 0, maximum inbound traffic rate in kbit/s that can be received at this port. Egress Limiter Rate for broadcast packets: = 0, no rate limit for outbound broadcast packets at this port. > 0, maximum number of outbound broadcasts per second that can be sent at this port.
Switching 4.4 Multicasts 4.4 Multicasts With this dialog you can: activate/deactivate the IGMP protocol, configure the IGMP protocol globally and per port. Figure 24: Multicasts dialog 4.4.1 Global Configuration In this frame you can: activate/deactivate the IGMP protocol. RM Web L2E Release 5.0 04/09...
Switching 4.4 Multicasts Parameter Meaning Default setting IGMP Snooping Activate IGMP Snooping globally for the entire device. deselected disabled Deactivate IGMP Snooping globally for the entire device. selected If IGMP Snooping is switched off, then the device does not evaluate Query and Report packets received, and it sends (floods) received data packets with a Multi- cast address as the destination address to all ports.
Page 77
Switching 4.4 Multicasts Parameter Meaning Value range Default setting IGMP Querier IGMP Querier en- Switch query function on/off on/off abled Protocol Version Select IGMP version 1, 2 or 3. 1, 2, 3 Send Interval Enter the interval at which the switch 2-3599 s 125 s sends query packets.
Switching 4.4 Multicasts Parameter Meaning Value range Default setting Send to Query The device sends the packets with an selected/dese- deselected Ports unknown MAC/IP Multicast address to lected all query ports. Send to All Ports The device sends the packets with an selected/dese- selected unknown MAC/IP Multicast address to...
Switching 4.4 Multicasts Parameter Meaning Value range Default setting Send to query and The device sends the packets with a selected/dese- deselected registered ports known MAC/IP Multicast address to all lected query ports and to registered ports. This standard setting sends all Multi- casts to all query ports and to regis- tered ports.
Page 81
Switching 4.4 Multicasts Parameter Meaning Value range Default setting Module Module number for modular devices, otherwise 1. Port Port to which this entry applies. IGMP on Switch IGMP on/off for each port. on/off Switching IGMP off at a port prevents registration for this port.
Page 82
Switching 4.4 Multicasts Parameter Meaning Value range Default setting Static Query Port The device sends IGMP report mes- enable, disable sages to the ports at which it receives disable, IGMP queries (default setting). This automatic column allows you to also send IGMP report messages to: other selected ports (enable) or connected Hir- schmann devices (automatic).
Switching 4.5 VLAN 4.5 VLAN Under VLAN you will find all the dialogs and attributes for configuring and monitoring the VLAN function in accordance with the IEEE 802.1Q standard. 4.5.1 VLAN Global With this dialog you can: display VLAN parameters activate/deactivate the VLAN 0 transparent mode configure and display the learning mode reset the VLAN settings of the device to the state on delivery.
Page 84
IEEE802.1D/p but that do not require any VLANs in accordance with IEEE802.1Q. Note: When using the “Transparent Mode” in this way, note the following: For RS20/RS30/RS40, MS20/MS30, RSR20/RSR30, MACH 100, MACH 1000 and OCTOPUS: In “Transparent mode”, the devices ignore the port VLAN ID set. Set the VLAN membership of the ports of VLAN 1 to U (Untagged) or T (Tagged), (see on page 88 „VLAN...
Page 85
Switching 4.5 VLAN Parameter Meaning Value range Default setting Mode VLAN mode selection. Independent Independent „Independent VLAN“ subdivides the for- VLAN, VLAN warding database (see on page 71 „Filters for Shared VLAN MAC addresses“) virtually into one indepen- dent forwarding database per VLAN. The de- vice cannot assign data packets with a destination address in another VLAN, and so floods it to all ports of the VLAN.
Switching 4.5 VLAN Figure 25: VLAN Global dialog Figure 26: VLAN Global dialog 4.5.2 Current VLAN With this dialog you can: display VLAN parameters The Current VLAN table shows all – manually configured VLANs – VLANs configured via redundancy mechanisms The Current VLAN table is only used for information purposes.
Page 87
Switching 4.5 VLAN Parameter Meaning Value range VLAN ID Displays the ID of the VLAN. Status Displays the VLAN status. other: This entry solely appears for VLAN 1. The system provides VLAN 1. VLAN 1 is always present. permanent: A static entry made by you. This entry is kept when the device is restarted.
Switching 4.5 VLAN 4.5.3 VLAN Static With this dialog you can: Create VLANs Assign names to VLANs Assign ports to VLANs and configure them Delete VLANs Parameter Meaning Value range Default setting VLAN ID Displays the ID of up to 255 1-4042 VLANs that are possible.
Page 89
Switching 4.5 VLAN Figure 28: VLAN Static dialog Note: When configuring the VLAN, ensure that the management station still has access to the device after the VLAN configuration is saved. You achieve this by connecting the management station to a port with the VLAN ID 1.
Switching 4.5 VLAN Redundancy VLAN membership HIPER-Ring VLAN1 MU Network/Ring coupling VLAN1 MU Table 39: Tagging settings of ports integrated into redundant Rings or the Ring/net- work coupling. Note: In a redundant Ring with VLANs, you should only operate devices whose software version supports VLANs: RS2 xx/xx (from vers.
Page 91
Switching 4.5 VLAN Parameter Meaning Value range Default setting Module Module of the device on which the port is located. Port Port to which this entry applies. Port VLAN ID Specifies to which VLAN the port as- All allowed signs a received untagged data pack- VLAN IDs Acceptable Frame Specifies whether the port may also re-...
Page 92
Switching 4.5 VLAN Figure 29: VLAN Port dialog RM Web L2E Release 5.0 04/09...
QoS/Priority 5 QoS/Priority The device enables you to set how it evaluates the QoS/prioritizing information of incoming data packets: VLAN priority based on IEEE 802.1Q/ 802.1D (Layer 2) Type of Service (ToS) or DiffServ (DSCP) for IP packets (Layer 3) which QoS/prioritizing information it writes to outgoing data packets (e.g.
QoS/Priority 5.1 Global 5.1 Global With this dialog you can: enter the VLAN priority for management packets in the range 0 to 7 (default setting: 0). In order for you to have full access to the management of the device, even when there is a high network load, the device enables you to prioritize management packets.
Page 95
QoS/Priority 5.1 Global “trustIpDscp” The device prioritizes received IP packets (assigning them to a traffic class - see „IP DSCP mapping“) according to their DSCP value. The device prioritizes received packets that are not IP packets (assigning them to a traffic class - see „Entering the port priority“) according to the port priority of the receiving port .
Page 96
QoS/Priority 5.1 Global Figure 30: Global dialog RM Web L2E Release 5.0 04/09...
QoS/Priority 5.2 Port configuration 5.2 Port configuration This dialog allows you to configure the ports. You can: assign a port priority to a port, Parameter Meaning Module Module of the device on which the port is located. Port Port to which this entry applies. Port priority Enter the port priority.
QoS/Priority 5.2 Port configuration 5.2.1 Entering the port priority Double-click on a cell in the “Port priority” column and enter the priority (0- According to the priority entered, the device assigns the data packets that it receives at this port to a traffic class (see table 43).
QoS/Priority 5.3 802.1D/p Mapping 5.3 802.1D/p Mapping The 802.1D/p mapping table allows you to assign a traffic class to every VLAN priority. Figure 32: 802.1D/p mapping table Enter the desired value from 0 to 3 in the Traffic Class field for every VLAN priority.
Page 100
QoS/Priority 5.3 802.1D/p Mapping VLAN Traffic class IEEE 802.1D traffic type priority (default setting) Best effort (default) Background Standard Excellent effort (business critical) Table 44: Assigning the VLAN priority to the four traffic classes Controlled load (streaming multimedia) Video, less than 100 milliseconds of latency and jitter Voice, less than 10 milliseconds of latency and jitter Network control reserved traffic Note: Network protocols and redundancy mechanisms use the highest traffic...
QoS/Priority 5.4 IP DSCP mapping 5.4 IP DSCP mapping The IP DSCP mapping table allows you to assign a traffic class to every DSCP value. Enter the desired value from 0 to 3 in the Traffic Class field for every DSCP value (0-63).
Page 102
QoS/Priority 5.4 IP DSCP mapping Default Forwarding/Best Effort: No particular prioritizing. DSCP value DSCP name Traffic class (default setting) Best Effort /CS0 9,11,13,15 10,12,14 AF11,AF12,AF13 17,19,21,23 18,20,22 AF21,AF22,AF23 25,27,29,31 26,28,30 AF31,AF32,AF33 33,35,37,39 34,36,38 AF41,AF42,AF43 41,42,43,44,45,47 49-55 57-63 Table 45: Mapping the DSCP values onto the traffic classes RM Web L2E Release 5.0 04/09...
Redundancy 6 Redundancy Under Redundancy you will find all the dialogs and views for configuring and monitoring the redundancy functions: Ring Redundancy Redundant coupling of Rings and network segments Rapid Spanning Tree Algorithm (RSTP) RM Web L2E Release 5.0 04/09...
Within a HIPER-Ring, you can use any combination of the following devices: – RS1 – RS2-./. – RS2-16M – RS2-4R – RS20, RS30, RS40 – RSR20, RSR30 – OCTOPUS – MICE – MS20, MS30 – Power MICE – MACH 100 –...
Page 105
Redundancy 6.1 Ring Redundancy Depending on the device model, the Ring Redundancy dialog allows you to: Select one of the available Ring Redundancy versions, or change it. Display an overview of the current Ring Redundancy configuration. Create new Ring Redundancies. Configure existing Ring Redundancies.
Note: As an alternative to using software to configure the HIPER-Ring, with devices RS20/30/40 and MS20/30 you can also use a DIP switch to enter a number of settings. You can also use a DIP switch to enter a setting for whether the configuration via DIP switch or the configuration via software has priority.
Page 107
Redundancy 6.1 Ring Redundancy Parameter Meaning Ring Recov- Select the desired value for the device for which you have activated the ring manager. If you have selected Accelerated for the ring recovery and the sta- bility of the ring is not meeting your requirements for your network, then select Standard.
Page 108
Redundancy 6.1 Ring Redundancy Note: If you have configured VLANS, note the VLAN configuration of the ring ports. In the configuration of the HIPER-Ring, you select for the ring ports – VLAN ID 1 and – VLAN membership Untagged in the static VLAN table Note: When you use the DIP switch to switch from a normal port to a ring port, the device makes the required settings for the pre-defined ring ports in the configuration table.
Otherwise you activate the advanced Manager mode. (Ring Manag- Note: All Hirschmann devices that support the MRP-Ring also support the ad- vanced mode. Operation When you have configured all the parameters for the MRP-Ring, you switch the operation on here.
Page 110
Redundancy 6.1 Ring Redundancy Parameter Meaning VLAN ID If you have configured VLANs, you select VLAN ID 0 here if you do not want to assign the MRP-Ring configuration to a VLAN. Note the VLAN configuration of the ring ports: Select for VLAN ID 1 and VLAN membership U in the static VLAN table for the ring ports.
Page 111
Redundancy 6.1 Ring Redundancy Note: Activate the MRP compatibility (Rapid Spanning Tree:Global) on all devices in a MRP-Ring if you want to use RSTP in the MRP-Ring. If this is not possible, e.g, because several devices do not support MRP compatibility, deactivate the Spannung Tree Protocol on the ports connected to the MRP- Ring.
Redundancy 6.2 Ring/Network coupling 6.2 Ring/Network coupling With this dialog you can: display an overview of the existing Ring/Network coupling, configure a Ring/Network coupling, switch a Ring/Network coupling on/off, create a new Ring/Network coupling, and Delete Ring/Network couplings 6.2.1 Preparing a Ring/Network coupling STAND-BY switch The devices have a STAND-BY switch, with which you can define the role of the device within a Ring/Network coupling.
Page 113
STAND-BY switch type RS2-./. DIP switch RS2-16M DIP switch RS20/RS30/RS40 Can be switched between DIP switch and software switch MICE/Power MICE Can be switched between DIP switch and software switch MS20/MS30 Can be switched between DIP switch and software switch...
Page 114
Redundancy 6.2 Ring/Network coupling Figure 36: Software configuration of the STAND-BY switch Depending on the STAND-BY DIP switch position, the dialog displays those configurations that are not possible in gray. If you want to select one of these grayed-out configurations, you put the STAND-BY DIP switch on the Switch into the other position.
Page 115
Redundancy 6.2 Ring/Network coupling Ring/Network Coupling dialog Parameter Meaning Selecting the configu- Depending on your local conditions, select “One-Switch coupling”, ration “Two-Switch coupling” or “Two-Switch coupling with control line”. You use the STAND-BY switch to select whether there is a main connection or a redundant connection.
Page 116
RS2-./. Not possible Not possible RS2-16M All ports (default setting: port 2) All ports (default setting: port 1) RS20, RS30, All ports (default setting: port 1.3) All ports (default setting: port 1.4) RS40 OCTOPUS All ports (default setting: port 1.3) All ports (default setting: port 1.4)
Page 117
Coupling port RS2-./. Not possible RS2-16M Adjustable for all ports (default setting: port 1) RS20, RS30, RS40 Adjustable for all ports (default setting: port 1.4) OCTOPUS Adjustable for all ports (default setting: port 1.4) MICE Adjustable for all ports (default setting: port 1.4) Power MICE Adjustable for all ports (default setting: port 1.4)
Page 118
Redundancy 6.2 Ring/Network coupling Note: For the coupling ports, select the following settings in the Basic Settings:Port Configuration dialog: – Port: on – Automatic configuration (autonegotiation): on for twisted-pair connections – Manual configuration: 100 Mbit/s FDX for glass fiber connections Note: If you have configured VLANS, note the VLAN configuration of the coupling and partner coupling ports.
Redundancy 6.3 Rapid Spanning Tree 6.3 Rapid Spanning Tree With this dialog you can: switch the Rapid Spanning Tree Protocol on/off., view device-specific information on the Rapid Spanning Tree Protocol, configure device-specific parameters of the Rapid Spanning Tree Protocol, and configure port-specific parameters of the Rapid Spanning Tree Protocol.
Page 120
Redundancy 6.3 Rapid Spanning Tree Note: RSTP resolves a given topology to a tree structure (Spanning Tree). The number of devices in a branch (from the root to the branch tip) is limited by the parameter Max Age. The default value for Max Age is 20, it can be increased to 40.
Redundancy 6.3 Rapid Spanning Tree 6.3.1 Rapid Spanning Tree Global Note: Rapid Spanning Tree is enabled by default on all devices and auton- omously begins to resolve the discovered topology to a tree structure. If you disable RSTP on certain devices, avoid loops during the configuration phase. RM Web L2E Release 5.0 04/09...
Page 122
Redundancy 6.3 Rapid Spanning Tree Parameter Meaning Value range Default setting Operation Switch the RSTP function for this device „On” or „Off”. If you disable RSTP globally on a device, it will flood the RSTP frames like normal multicast frames. The device behaves transparently regarding RSTP frames.
Page 123
Redundancy 6.3 Rapid Spanning Tree Parameter Meaning Value range Default setting Hello Time The left column shows the value currently 1 - 2 being used by the root bridge. The device periodically receives configuration frames (Hello frames) from the root bridge. The Hello Time shows the time between two successive configuration frames sent by the root bridge.
Page 124
Redundancy 6.3 Rapid Spanning Tree Parameter Meaning Value range Default setting Time since This field displays the time that has last change elapsed since the last network reconfigu- ration. Information This frame shows if there is a configuration conflict. In this case, a device exists outside the MRP ring with the given MAC address.
Redundancy 6.3 Rapid Spanning Tree Figure 37: RSTP Global dialog 6.3.2 Rapid Spanning Tree Port Note: Deactivate the Spanning Tree protocol on the ports connected to a HIPER-Ring or a Fast HIPER-Ring, because the Spanning Tree and the Ring Redundancy affect each other. Turn on the MRP compatibility in a MRP ring if you want to use RSTP and MRP.
Page 126
Redundancy 6.3 Rapid Spanning Tree Parameter Meaning Value range Default setting STP State En- Here you can turn RSTP on or off able for this port. If you turn RSTP off for this port while RSTP is globally en- abled for the device, the device will discard RSTP frames received on this port.
Page 127
Redundancy 6.3 Rapid Spanning Tree Parameter Meaning Value range Default setting Oper Point- If this port has a full-duplex link to true, false auto ToPoint another RSTP device, the value for (is calculated): Oper PointToPoint will become FDX = true „true“, else it will become „false“...
Page 128
Redundancy 6.3 Rapid Spanning Tree RM Web L2E Release 5.0 04/09...
Diagnosis 7 Diagnosis The diagnosis menu contains the following tables and dialogs: Event Log Ports (statistics, utilization, SFP modules) Topology Discovery Port Mirroring Device Status Signal Contact Alarms (Traps) Report (log file, system information) IP Address Conflict Detection Self Test Service Mode In service situations, they provide the technician with the necessary informa- tion for diagnosis.
Diagnosis 7.1 Event log 7.1 Event log The table under Event Log lists all the events with a time stamp. The "Delete" button allows you to delete the contents of the Event Log window. Figure 39: Event log table RM Web L2E Release 5.0 04/09...
Diagnosis 7.2 Ports 7.2 Ports The port menu contains displays and tables for the individual ports: Statistics table Utilization SFP Modules 7.2.1 Statistics table This table shows you the contents of various event counters. In the Restart menu item, you can reset all the event counters to zero using "Warm start", "Cold start"...
Diagnosis 7.2 Ports 7.2.2 Utilization This table displays the network load of the individual ports. In the “Upper Threshold[%]” column you enter the top threshold value for net- work load. If this threshold value is exceeded, the device sets a check mark in the “Alarm”...
Diagnosis 7.2 Ports 7.2.3 SFP modules The SFP status display allows you to look at the current SFP module connec- tions and their properties. The properties include: Parameter Meaning Module Module of the device on which the port is located. Port Port to which this entry applies.
Diagnosis 7.3 Topology Discovery 7.3 Topology Discovery This dialog allows you to switch on/off the topology discovery function (LL- DP). The topology table shows you the collected information for neighboring devices. This information enables the network management station to map the structure of your network.
Page 135
Diagnosis 7.3 Topology Discovery devices without active topology discovery function are connected to a port, the topology table hides the devices without active topology discovery. only devices without active topology discovery are connected to a port, the table will contain one line for this port to represent all devices. This line contains the number of connected devices MAC addresses of devices that the topology table hides for the sake of clarity, are located in the address table (FDB),...
Diagnosis 7.4 Port Mirroring 7.4 Port Mirroring This dialog allows you to configure and activate the port mirroring function of the device. In port mirroring, the valid data packets of one port, the source port, are copied to another, the destination port. The data traffic at the source port is not influenced by port mirroring.
Page 137
Diagnosis 7.4 Port Mirroring Figure 44: Port Mirroring dialog RM Web L2E Release 5.0 04/09...
Diagnosis 7.5 Device Status 7.5 Device Status The device status provides an overview of the overall condition of the device. Many process visualization systems record the device status for a device in order to present its condition in graphic form. Figure 45: Device State dialog (for power MICE) In the "Monitoring"...
Page 139
Diagnosis 7.5 Device Status The events which can be selected are: Name Meaning Power supply ... Monitor/ignore supply voltage(s). Temperature Monitor/ignore temperature thresholds set (see on page „System“) temperatures that are too high/too low Module removal Monitor/ignore the removal of a module (for modular devices). ACA removal Monitor/ignore the removal of the ACA.
Diagnosis 7.6 Signal contact 7.6 Signal contact The signal contacts are used for controlling external devices by manually setting the signal contacts, monitoring the functions of the device, reporting the device state of the device. 7.6.1 Manual setting Select the tab page "Alarm 1" or "Alarm 2" (for devices with two signal contacts).
Page 141
Diagnosis 7.6 Signal contact In the “Mode Signal contact” field, you select the “Monitoring correct op- eration” mode. In this mode the signal contacts monitor the functions of the device, thus enabling remote diagnosis. A break in contact is reported via the potential-free signal contact (relay contact, closed circuit): Voltage supply 1/2 failure or continuous device malfunction (internal volt- age).
Diagnosis 7.6 Signal contact 7.6.3 Device status Select the tab page “Alarm 1” or “Alarm 2” (for devices with two signal contacts). In the “Mode Signal Contact” field, you select the “Device status” mode. In this mode, the signal contact is used to monitor the status of the device (see on page 138 „Device Status“) and thereby makes remote diagnosis possible.
Diagnosis 7.7 Alarms (Traps) 7.7 Alarms (Traps) This dialog allows you to determine which events trigger an alarm (trap) and where these alarms should be sent. Select „Create entry“. In the „Address“ column, enter the IP address of the management station to which the traps should be sent.
Diagnosis 7.8 Report 7.8 Report The following reports are available for the diagnostics: file. The log file is an HTML file in which the device writes all the important de- vice-internal events. System information. The system information is an HTML file containing all system-relevant da- Security Data Sheet IAONA.
Diagnosis 7.9 IP address conflict detection 7.9 IP address conflict detection This dialog allows you to detect address conflicts the device is having with its own IP address and rectify them (Address Conflict Detection, ACD). Select IP address conflict detection on/off under “Status” or select the mode (see table 62).
Page 147
Diagnosis 7.9 IP address conflict detection Figure 48: IP Address Conflict Detection dialog RM Web L2E Release 5.0 04/09...
Diagnosis 7.10 Self Test 7.10Self Test With this dialog you can: activate/deactivate the RAM test for a cold start of the device. Deactivat- ing the RAM test shortens the booting time for a cold start of the device. allow or prevent a restart due to an undefined software state. Figure 49: Self-test dialog RM Web L2E Release 5.0 04/09...
Diagnosis 7.11 Service mode 7.11Service mode The service mode enables you to divide the device into two transmission areas. You can thus, for example, perform test or service configurations in the field area of a network while the ongoing operation continues in the backbone area.
Page 150
Diagnosis 7.11 Service mode Select the Diagnostics:Service Mode dialog. Activate “Mode”. Enter a number not equal to 0 or 1 in the “VLAN” field. Enter a VLAN ID for a new VLAN in order to keep the settings for existing VLANs. Click on “Set”.
Diagnosis 7.11 Service mode The service mode is now activated, which the device indicates with a check- mark in the “Status” field. Note: Deactivate the service mode (see below) when saving the device con- figuration (dialog: Basics:Load/Save:Save:On the Switch). 7.11.2 Deactivating the service mode Reactivate the redundant voltage.
Page 152
Diagnosis 7.11 Service mode Figure 51: Service Mode dialog - mode deactivated RM Web L2E Release 5.0 04/09...
Advanced 8 Advanced The menu contains the dialogs, displays and tables for: DHCP Relay Agent Industry Protocols Command Line RM Web L2E Release 5.0 04/09...
This results in the entry for the “Hardware address” in the DHCP server: B306000001000101000600806300061E In the “Option 82 on” column, you can switch this function on/off for each port. In the “Hirschmann Device” column, you mark the ports to which a Hir- schmann device is connected. RM Web L2E Release 5.0 04/09...
Advanced 8.2 Industrial Protocols 8.2 Industrial Protocols With this dialog you can: activate and deactivate the PROFINET IO or EtherNet/IP industrial protocols download the GSDML/EDS file for configuring the PLC of this device to your PC. download the GSDML/EDS file for configuring the PLC of another device to your PC.
Advanced 8.2 Industrial Protocols 8.2.1 PROFINET IO To integrate this into a control system, activate the function in the "ProfinetIO" frame click on "Download GSDML File" to load the GSDML file onto your PC in the Basic Settings:Network dialog, check whether Local is selected in the "Mode"...
Advanced 8.3 Command Line 8.3 Command Line This window enables you to access the Command Line Interface (CLI) using the Web interface. You will find detailed information on CLI in the “Command Line Interface” reference manual. RM Web L2E Release 5.0 04/09...
Appendix A.1 Technical Data A.1 Technical Data Switching Size of MAC address table 8000 (incl. static filters) Max. number of statically configured MAC address filters Max. number of MAC address filters learnable via GMRP/IGMP Snooping Max. length of over-long packets 1632 (from 03.0.00) VLAN...
Appendix A.3 Based specifications and standards A.3 Based specifications and standards IEEE 802.1 AB Topology Discovery (LLDP) IEEE 802.1 af Power over Ethernet IEEE 802.1 D Switching, GARP, GMRP, Spanning Tree (Supported via 802.1S implementation) IEEE 802.1 D-1998 Media access control (MAC) bridges (includes IEEE 802.1p Priority and Dynamic Multicast Filtering, GARP, GMRP) IEEE 802.1 Q-1998...
Appendix A.4 Copyright of integrated software A.4 Copyright of integrated software A.4.1 Bouncy Castle Crypto APIs (Java) The Legion Of The Bouncy Castle Copyright (c) 2000 - 2004 The Legion Of The Bouncy Castle (http://www.bouncycastle.org) Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies...
Appendix A.4 Copyright of integrated software A.4.2 LVL7 Systems, Inc. (c) Copyright 1999-2006 LVL7 Systems, Inc. All Rights Reserved. RM Web L2E Release 5.0 04/09...
Page 166
Appendix A.4 Copyright of integrated software RM Web L2E Release 5.0 04/09...
Readers’ comments B Readers’ comments What is your opinion of this manual? We are always striving to provide as comprehensive a description of our product as possible, as well as important information that will ensure trouble-free operation. Your comments and suggestions help us to further improve the quality of our documentation.
Page 168
E-mail: Date / Signature: Dear User, Please fill out and return this page as a fax to the number +49 (0)7127/14-1600 or Hirschmann Automation and Control GmbH Department AED Stuttgarter Str. 45-51 72654 Neckartenzlingen RM Web L2E Release 5.0 04/09...
Index C Index 29, 143 Hello Time Acceptable Frame Types HIPER-Ring HiVision Address Conflict Detection Advanced IAONA Alarm 46, 143 IGMP Querier Assured Forwarding IGMP settings AutoConfiguration Adapter IGMP Snooping Independent VLAN Industry Protocols Broadcast Industry protocols Ingress Filtering IP DSCP mapping 93, 101 Cable crossing IP-DSCP value...
Page 170
Index Precision Time Protocol SNTP server Priority queue Source port PROFINET Statistics table PROFINET IO Supply voltage Switching Switching Global Dialog Symbol QoS/Priority System time RAM test Technical questions Rapid Spanning Tree 103, 119 Time Rapid Spanning Tree dialog Time management Rapid Spanning Tree Port Protocol Timestamp unit Rate Limiter...
Further support D Further support Technical questions and training courses In the event of technical queries, please contact your local Hirschmann distributor or Hirschmann office. You can find the addresses of our distributors on the Internet: www.hirschmann-ac.com. Our support line is also at your disposal: Tel.