Page 1 GUI USER MANUAL LGB1152A GIGABIT MANAGED ENET SWITCH 24/7 TECHNICAL SUPPORT AT 1.877.877.2269 OR VISIT BLACKBOX.COM 52-PORT GbE Managed Switch System Reset Console...
Page 2: Table Of Contents
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 TABLE OF CONTENTS TECHNICAL SUPPORT 1.877.877.2269 ABOUT THIS MANUAL ..................................7 Purpose ...........................................7 Audience .........................................7 Revision History ......................................7 Additional Documentation .....................................7 INTRODUCTION ....................................8 1. OPERATION OF WEB=BASED MANAGEMENT .......................... 10 2.
Page 3 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 TABLE OF CONTENTS TECHNICAL SUPPORT 1.877.877.2269 4. VLAN MANAGEMENT ................................. 55 4.1 VLAN Configuration ....................................55 4.2 VLAN Membership ....................................58 4.3 VLAN Port Status ....................................59 4.4 MAC-Based VLAN ....................................61 4.4.1 Configuration ........................................61 4.4.2 Status ..........................................63 4.5 Protocol-Based VLAN ....................................64 4.5.1 Protocol to Group ......................................64...
Page 4 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 TABLE OF CONTENTS TECHNICAL SUPPORT 1.877.877.2269 7. MAC ADDRESS TABLES ................................105 7.1 Configuration ......................................105 7.2 Information ......................................107 8. MULTICAST ....................................109 8.1 IGMP Snooping .....................................109 8.1.1 Basic Configuration ......................................109 8.1.2 VLAN Configuration .......................................111 8.1.3 Status ..........................................112 8.1.4 Group Information ......................................113 8.1.5 IGMP SFM Information ....................................114...
Page 5 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 TABLE OF CONTENTS TECHNICAL SUPPORT 1.877.877.2269 10.2 802.1x ........................................145 10.2.1 Configuration ........................................145 10.2.2 Status ..........................................151 10.3 802.1x ........................................153 10.3.1 Configuration ........................................153 10.3.2 Static Table ........................................154 10.3.3 Dynamic Table ......................................155 10.4 ARP Inspection ....................................156 10.4.1 Configuration ........................................156 10.4.2 VLAN Configuration ....................................158 10.4.3 Static Table ........................................159...
Page 6 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 TABLE OF CONTENTS TECHNICAL SUPPORT 1.877.877.2269 12.6 Event ........................................201 12.6.1 Configuration ....................................... 201 12.6.2 Status ..........................................202 13. EVENT NOTIFICATION ................................204 13.1 SNMP Trap ......................................204 13.2 email ........................................206 13.3 Log ........................................
Page 7: About This Manual
SUPPORT 1.877.877.2269 PURPOSE This GUI user guide gives specific information on how to operate and use the management functions of the LGB1152A via HTTP/ HTTPs web browser. AUDIENCE The manual is intended for use by network administrators who are responsible for operating and maintaining network equipment;...
Page 8: Introduction
This User Guide explains how to install and connect your network system. It includes step-by-step instructions for configuring and monitoring the LGB1152A through the web via the switch’s RJ-45 serial interface and Ethernet ports. It also contains detailed explanations of hardware and software functions as well as examples of the web-based interface operation.
Page 9 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 INTRODUCTION TECHNICAL SUPPORT 1.877.877.2269 Š Chapter 11: Access Control Š Š Chapter 12: SNMP Š Š Chapter 13: Event Notification Š Š Chapter 14: Diagnostics Š Š Chapter 15: Maintenance Š 1.877.877.2269 BLACKBOX.COM...
Page 10: Operation Of Web=Based Management
1024 x 768. The switch supports a neutral web browser interface. NOTE: The LGB1152A has dhcp enabled by default, so If you do not have a DHCP server to provide ip addresses to the switch, use the Switch’s default ip address: 192.168.1.1...
Page 11: System
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 This chapter describes basic configuration tasks, including System Information and management functions of the Switch (Time, Account, IP, Syslog and NTP). 2.1 SYSTEM INFORMATION You can identify the system by configuring system name, location and the contact of the switch. The switch system’s contact information is provided here.
Page 12: Ip Address
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Š Hardware Version: Displays the hardware version of the device. Š Š Mechanical Version: Displays the mechanical version of the device. Š Š Series Number: The serial number of this switch. Š...
Page 13 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 FIGURE 2-2. THE IP SETTINGS Parameter description: Š IPv4 DHCP Client Enable: Enable the DHCP client by checking this box. If this option is enabled, the system will configure the IPv4 Š...
Page 14: Advanced Settings
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 2.2.2 ADVANCED SETTINGS Configure the switch-managed IP information on this page Configure IP basic settings, control IP interfaces and IP routes. The maximum number of interfaces supported is 8 and the maximum number of routes is 8. WEB INTERFACE To configure Advanced Settings in the web interface: 1.
Page 15 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 – From any DHCPv4 interfaces: The first DNS server offered from a DHCPv4 lease to a DHCPv4-enabled interface will be used. – From this DHCPv4 interface: Specify from which DHCPv4-enabled interface a provided DNS server should be preferred. –...
Page 16: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Š Gateway: The IP address of the IP gateway. Valid format is dotted decimal notation or a valid IPv6 notation. Gateway and Network Š must be of the same type. Š...
Page 17 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 FIGURE 2-4. IP STATUS Parameter description: IP Interfaces Š Interface: Show the name of the interface. Š Š Type: Show the address type of the entry. This may be LINK or IPv4. Š...
Page 18: System Time
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 2.3 SYSTEM TIME The switch provides manual and automatic ways to set the system time via NTP. Manual setting is simple and you just input “Year,” “Month,”...
Page 19 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Daylight Saving Time Configuration Daylight Saving Time: This is used to set the clock forward or backward according to the configurations set below for a defined Daylight Saving Time duration.
Page 20: Lldp
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 FIGURE 2-8. SNTP CONFIGURATION NTP is Network Time Protocol and is used to sync the network time based Greenwich Mean Time (GMT). If using the NTP mode, select a built-in NTP time server or manually specify an user-defined NTP server as well as Time Zone, and the switch will sync the time shortly after you press the <Apply>...
Page 21 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 WEB INTERFACE To configure LLDP: 1. Click System, LLDP and LLDP configuration. 2. Modify LLDP timing parameters. 3. Set the required mode for transmitting or receiving LLDP messages. 4.
Page 22 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 LLDP Port Configuration The LLDP port settings relate to the currently selected, as reflected by the page header. Š Port: The switch port number of the logical LLDP port. Š...
Page 23: Lldp-Med Configuration
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 2.4.2 LLDP-MED CONFIGURATION Media Endpoint Discovery is an enhancement of LLDP, known as LLDP-MED, that provides the following facilities: Š Auto-discovery of LAN policies (such as VLAN, Layer 2 Priority and Differentiated services [Diffserv] settings), enabling plug and play Š...
Page 24 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 FIGURE 2-11. LLDP-MED CONFIGURATION, PART 2 1.877.877.2269 BLACKBOX.COM...
Page 25 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Parameter description: Fast start repeat count: Rapid startup and Emergency Call Service Location Identification Discovery of endpoints is a critically important aspect of VoIP systems in general. In addition, it is best to advertise only those pieces of information that are specifically relevant to particular endpoint types (for example, only advertise the voice network policy to permitted voice-capable devices), both in order to conserve the limited LLDPU space and to reduce security and system integrity issues that can come with inappropriate knowledge of the network policy.
Page 26 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Coordinates Location Š Latitude: Latitude SHOULD be normalized to within 0-90 degrees with a maximum of 4 digits. You can specify the direction to either Š...
Page 27 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Š Postal community name: Postal community name - Example: Leonia. Š Š P.O. Box: Post office box (P.O. BOX) - Example: 12345. Š Š Additional code: Additional code - Example: 1320300003. Š...
Page 28 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 3. Guest Voice - support a separate “limited feature-set” voice service for guest users and visitors with their own IP Telephony handsets and other similar appliances supporting interactive voice services. 4.
Page 29: Lldp Neighbor
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 2.4.3 LLDP NEIGHBOR This page provides a status overview for all LLDP neighbors. The displayed table contains a row for each port on which an LLDP neighbor is detected.
Page 30: Lldp-Med Neighbor
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Buttons Auto-refresh Refresh FIGURE 2-13. AUTO-REFRESH/REFRESH BUTTONS Š Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Š Š Refresh: Click to refresh the page immediately. Š...
Page 31 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 3. IEEE 802.3 Repeater (included for historical reasons) 4. IEEE 802.11 Wireless Access Point 5. Any device that supports the IEEE 802.1AB and MED extensions defined by TIA-1057 and can relay IEEE 802 frames via any method.
Page 32 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Š Application Type: Application Type indicating the primary function of the application(s) defined for this network policy, advertised Š by an Endpoint or Network Connectivity Device. The possible application types are shown below. 1.
Page 33: Lldp Neighbor Eee
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Š Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Š Š Refresh: Click to refresh the page immediately. Š...
Page 34: Lldp Statistics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Š Resolved Rx Tw: The resolved Rx Tw for this link. NOTE : NOT the link partner Š The resolved value that is the actual “tx wakeup time” used for this link (based on EEE information exchanged via LLDP). Š...
Page 35 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 FIGURE 2-18. LLDP STATISTICS INFORMATION Parameter description: Global Counters Š Neighbor entries were last changed at: Shows the time when the last entry was last deleted or added. It also shows the time elapsed Š...
Page 36: Upnp
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Š Age-Outs: Each LLDP frame contains information about how long time the LLDP information is valid (age-out time). If no new LLDP Š frame is received within the age out time, the LLDP information is removed, and the Age-Out counter is incremented. Buttons Auto-refresh Refresh...
Page 37 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 2: SYSTEM TECHNICAL SUPPORT 1.877.877.2269 Parameter description: These parameters are displayed on the UPnP Configuration page: Š Mode: Indicates the UPnP operation mode. Possible modes are: Š – on: Enable UPnP mode operation. –...
Page 38: Port Management
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 The section describes how to configure the Port detail parameters of the switch. You can use the Port configure to enable or disable the switch port and monitor the port’s content or status. 3.1 PORT CONFIGURATION This page displays current port configurations.
Page 39 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 – Auto - Port auto negotiating speed with the link partner and selects the highest speed that is compatible with the link partner. – 10 Mbps HDX - Forces the copper port in 10 Mbps half-duplex mode. –...
Page 40: Port Statistics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 3.2 PORT STATISTICS The section describes the Port statistics information and provides overview of general traffic statistics for all switch ports. WEB INTERFACE To Display the Port Statistics Overview in the web interface: 1.
Page 41 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Buttons Auto-refresh Refresh Clear FIGURE 3-3. AUTO-REFRESH/REFRESH/CLEAR BUTTONS Š Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Š...
Page 42 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 FIGURE 3-5. DETAILED PORT STATISTICS Parameter description: Š Upper left scroll bar: To scroll to the port to display the Port statistics with “Port-1”, “Port-2”, ... Š...
Page 43: Sfp Port Info
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Š Rx Jabber: The number of long 2 frames received with invalid CRC. Š Transmit Error Counters Š Tx Drops: The number of frames dropped due to output buffer congestion. Š...
Page 44: Energy Efficient Ethernet
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Parameter description: Š Upper left scroll bar: To scroll to the specific port to display the Port statistics. Š Š Connector Type: Display the connector type, for instance, UTP, SC, ST, LC and so on. Š...
Page 45: Link Aggregation
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 WEB INTERFACE To configure an Energy Efficient Ethernet in the web interface: 1. Click Port Management and Energy Efficient Ethernet. 2. Select enable or disable Energy Efficient Ethernet by the port. 3.
Page 46 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 FIGURE 3-10. STATIC CONFIGURATION Parameter description : Hash Code Contributors Š Source MAC Address: Use the Source MAC address to calculate the destination port for the frame. Check to enable the use of the Š...
Page 47: Lacp Configuration
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 3.5.2 LACP CONFIGURATION This page allows the user to inspect the current LACP port configurations, and possibly change them as well. WEB INTERFACE To configure the LACP Port Configuration in the web interface: 1.
Page 48: System Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Buttons Š Apply: Click to save changes. Š Š Reset: Click to undo any changes made locally and revert to previously saved values Š 3.5.3 SYSTEM STATUS This section describes how to set LACP function on the switch to provide a status overview for all LACP instances.
Page 49: Port Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 3.5.4 PORT STATUS This section describes how to set LACP function on the switch to provide a Port Status overview for all LACP instances. WEB INTERFACE To display the LACP Port status in the web interface: 1.
Page 50: Loop Protection
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 3.6 LOOP PROTECTION 3.6.1 CONFIGURATION Loop Protection is used to detect the presence of traffic. When a switch receives a packet’s (looping detection frame) with a MAC address the same as its own from a port, show Loop Protection happens.
Page 51: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Port Configuration Š Port: The switch port number of the port. Š Š Enable: Controls whether loop protection is enabled on this switch port. Š...
Page 52: Udld
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Auto-refresh Refresh FIGURE 3-18. AUTO-REFRESH/REFRESH BUTTONS Buttons: Š Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Š Š...
Page 53: Udld Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Parameter description: Š Port: Port number of the switch. Š Š UDLD Mode: Configures the UDLD mode on a port. Valid values are Disable, Normal and Aggressive. Default mode is Disable. Š...
Page 54 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 3: PORT MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Parameter description: UDLD port status Š UDLD Admin State: The current port state of the logical port, Enabled if any of state (Normal,Aggressive) is Enabled. Š...
Page 55: Vlan Management
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 4.1 VLAN CONFIGURATION You can assign a specific VLAN for management purpose. The management VLAN is used to establish an IP connection to the switch from a workstation connected to a port in the VLAN.
Page 56 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 TECHNICAL CHAPTER 4: VLAN MANAGEMENT SUPPORT 1.877.877.2269 Parameter description: Global VLAN Configuration Š Allowed Access VLANs: This field shows the VLANs that are created on the switch. Š – By default, only VLAN 1 exists. More VLANs may be created by using a list syntax where the individual elements are separated by commas.
Page 57 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Š Port Type: Ports in hybrid mode allow for changing the port type, that is, whether a frame’s VLAN tag is used to classify the frame on Š...
Page 58: Vlan Membership
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 4.2 VLAN MEMBERSHIP This page provides an overview of membership status of VLAN users. The ports belong to the currently selected stack unit, as reflected by the page header WEB INTERFACE To configure VLAN membership configuration in the web interface: 1.
Page 59: Vlan Port Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Š VLAN ID: VLAN ID for which the Port members are displayed. Š Š Port Members: A row of check boxes for each port is displayed for each VLAN ID. If a port is included in a VLAN, an image U and Š...
Page 60 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 FIGURE 4-4. VLAN PORT STATUS Parameter description: Š VLAN USER: VLAN User module uses services of the VLAN management functionality to configure VLAN memberships and VLAN Š...
Page 61: Mac-Based Vlan
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Š Conflicts: Two users may have conflicting requirements for a port’s configuration. For instance, one user may require all frames to Š be tagged on egress while another requires all frames to be untagged on egress. Since both users cannot win, this gives rise to a conflict, which is solved in a prioritized way.
Page 62 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 FIGURE 4-6. MAC-BASED VLAN CONFIGURATION Parameter description: Š MAC Address: Indicates the MAC address. Š Š VLAN ID: Indicates the VLAN ID. Š Š Port Members: A row of check boxes for each port is displayed for each MAC to VLAN ID mapping entry. To include a port in the Š...
Page 63: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Š Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Š Š Refresh: Click to refresh the page. Š...
Page 64: Protocol-Based Vlan
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 4.5 PROTOCOL-BASED VLAN This section describes Protocol-based VLANs. The switch’s supported protocols include Ethernet LLC SNAP Protocol. Š LLC: The Logical Link Control (LLC) data communication protocol layer is the upper sub-layer of the Data Link Layer (which is itself Š...
Page 65: Group To Vlan
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Parameter description: Š Frame Type: Frame Type can have one of the following values: Š 1. Ethernet 2. LLC 3. SNAP NOTE: On changing the Frame type field, a valid value of the following text field will vary depending on the new frame type you selected.
Page 66 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 FIGURE 4-11. GROUP NAME TO VLAN MAPPING TABLE Parameter description: Š Group Name: A valid Group Name is a string of up to 16 characters. Š...
Page 67: Ip Subnet-Based Vlan
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 4.6 IP SUBNET-BASED VLAN The IP subnet-based VLAN entries can be configured here. This page allows for adding, updating and deleting IP subnet-based VLAN entries. WEB INTERFACE To configure IP subnet-based VLAN Membership in the web interface: 1.
Page 68: Gvrp
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 The IP subnet-based VLAN entry is enabled on the selected stack switch unit when you click on “Save.” The Delete” button can be used to undo the addition of new IP subnet-based VLANs. The maximum possible IP subnet-based VLAN entries are limited to 128. Š...
Page 69: Private Vlan
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Parameter description: Š Enable GVRP globally: The GVRP feature is enabled by setting the check mark in the checkbox named Enable GVRP. Š Š GVRP protocol timers: Join-time is a value in the range 1-20 in the units of centiseconds, i.e. in units of one hundredth of a second. Š...
Page 70: Port Isolation
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 FIGURE 4-15. PRIVATE VLAN CONFIGURATION Parameter description: Š Delete: To delete a private VLAN entry, check this box. The entry will be deleted during the next apply. Š...
Page 71: Voice Vlan
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 WEB INTERFACE To configure Port Isolation configuration in the web interface: 1. Click VLAN Management and Port Isolation. 2. Select the port you want to enable Port Isolation. 3.
Page 72 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 5. Specify Mode, Security, Discovery Protocol in the Port Configuration. 6. Click Apply to save the setting. 7. To cancel the setting, click the Reset button. It will revert to previously saved values. FIGURE 4-17.
Page 73: Oui
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Š Port Security: Indicates the Voice VLAN port security mode. When the function is enabled, all non-telephonic MAC addresses in the Š Voice VLAN will be blocked for 10 seconds. Possible port modes are: –...
Page 74 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 4: VLAN MANAGEMENT TECHNICAL SUPPORT 1.877.877.2269 Parameter description: Š Delete: Check to delete the entry. It will be deleted during the next save. Š Š Telephony OUI: A telephony OUI address is a globally unique identifier assigned to a vendor by IEEE. It must be 6 characters long and Š...
Page 75: Quality Of Service
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 The switch supports four QoS queues per port with strict or weighted fair queuing scheduling. It supports QoS Control Lists (QCL) for advance programmable QoS classification, based on IEEE 802.1p, Ethertype, VID, IPv4/IPv6 DSCP and UDP/TCP ports and ranges.
Page 76 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 Parameter description: Š Port: The port number for which the configuration below applies. Š Š Queue Priority: Controls the default CoS value. Š –...
Page 77: Port Policers
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 FIGURE 5-2. PORT PCP CLASSIFICATION Parameter description: Š PCP Classification: Controls the classification mode for tagged frames on this port. Š – Disabled: Use default CoS and DPL for tagged frames. –...
Page 78: Port Shapers
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 FIGURE 5-3. QOS INGRESS PORT POLICERS CONFIGURATION Parameter description: Š Port: The logical port for the settings contained in the same row. Click on the port number to configure the schedulers. Š...
Page 79 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 FIGURE 5-4. QOS EGRESS PORT SHAPER Parameter description: Š Port: The logical port for the settings contained in the same row. Click on the port number to configure the shapers. Š...
Page 80: Storm Control
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 Š Port Shaper Enable: Controls whether the port shaper is enabled for this switch port. Š Š Port Shaper Rate: Controls the rate for the port shaper. This value is restricted to 100-13107100 when “Unit” is kbps, and 1-13107 Š...
Page 81 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 FIGURE 5-5. STORM CONTROL CONFIGURATION Parameter description: Global Storm Policer Configuration: Global storm policers for the switch are configured on this page. There is a unicast storm policer, multicast storm policer, and a broadcast storm policer. These only affect flooded frames, i.e.
Page 82: Port Scheduler
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 5.5 PORT SCHEDULER This section provides an overview of QoS Egress Port Scheduler for all switch ports and the ports belonging to the currently selected stack unit, as reflected by the page header.
Page 83 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 Š Scheduler Mode: Controls how many of the queues are scheduled as strict and how many are scheduled as weighted on this switch Š...
Page 84: Port Pcp Remarking
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 5.6 PORT PCP REMARKING This section describes QoS Egress Port PCP Remarking for all switch ports. The ports belong to the currently selected stack unit, as reflected by the page header.
Page 85 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 FIGURE 5-8. EGRESS PORT PCP REMARKING, SCREEN 2 Parameter description: Š Port: The logical port for the settings contained in the same row. Click on the port number to configure PCP remarking. Š...
Page 86: Dscp
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 5.7 DSCP 5.7.1 PORT DSCP This section explains how to set the QoS Port DSCP configuration for all switch ports. The settings relate to the currently selected stack unit, as reflected by the page header.
Page 87: Dscp Translation
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 Š Egress: Port Egress Rewriting can be one of the parameters below: Š – Disable: No Egress rewrite. – Enable: Rewrite enable without remapping. –...
Page 88: Dscp Classification
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 There are two configuration parameters for DSCP Translation – – Translate: DSCP at Ingress side can be translated to any of (0-63) DSCP values. –...
Page 89: Dscp-Based Qos
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 Š DSCP DP3: Select the classified DSCP value (0-63) for Drop Precedence Level 3. Š Buttons Š Apply: Click to save changes. Š Š...
Page 90: Qos Control List
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 5.8 QOS CONTROL LIST 5.8.1 CONFIGURATION This section shows the QoS Control List (QCL), which is made up of the QCEs. Each row describes a QCE that is defined. The maximum number of QCEs is 256 on each switch.
Page 91 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 FIGURE 5-14. QOS CONTROL LIST CONFIGURATION, SCREEN 2 Parameter description: Š QCE: Indicates the index of QCE. Š Š Port: Indicates the list of ports configured with the QCE. Š...
Page 92 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 – IPv4: The QCE will match only IPV4 frames. – IPv6: The QCE will match only IPV6 frames. Š Action: Indicates the classification action taken on ingress frame if parameters configured are matched with the frame’s content. Š...
Page 93 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 NOTE: All frame types are explained below. Š Any: Allow all types of frames. Š Š EtherType: Ether Type Valid Ether Type can be 0x600-0xFFFF excluding 0x800(IPv4) and 0x86DD(IPv6) or ‘Any’. Š...
Page 94: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 5.8.2 STATUS This section will explain how to configure and show the QCL status by different QCL users. Each row describes the QCE that is defined.
Page 95: Qos Statistics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 – Ingress Map: Classify Ingress Map ID. Š Conflict: Displays Conflict status of QCL entries. It may happen that resources required to add a QCE may not available, in that case Š...
Page 96 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 5: QUALITY OF SERVICE TECHNICAL SUPPORT 1.877.877.2269 Parameter description: Š Port: The logical port for the settings contained in the same row. Š Š Qn: Qn is the Queue number. There are 8 QoS queues per port. Q0 is the lowest priority queue. Š...
Page 97: Spanning Tree
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: SPANNING TREE TECHNICAL SUPPORT 1.877.877.2269 The Spanning Tree Protocol (STP) can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices (that is, an STP-compliant switch, bridge or router) in your network to ensure that only one route exists between any two stations on the network, and provide backup links that automatically take over when a primary link goes down.
Page 98 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: SPANNING TREE TECHNICAL SUPPORT 1.877.877.2269 FIGURE 6-2. STP BRIDGE CONFIGURATION SCREEN PARAMETER DESCRIPTION Basic Settings Š Protocol Version: The MSTP/RSTP/STP protocol version setting. Valid values are STP, RSTP and MSTP. Š...
Page 99: Msti Configuration
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: SPANNING TREE TECHNICAL SUPPORT 1.877.877.2269 Š Port Error Recovery Timeout: The time to pass before a port in the error-disabled state can be enabled. Valid values are between 30 Š...
Page 100 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: SPANNING TREE TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Configuration Identification Š Configuration Name: The name identifying the VLAN to MSTI mapping. Bridges must share the name and revision (see below), as well Š...
Page 101: Stp Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: SPANNING TREE TECHNICAL SUPPORT 1.877.877.2269 Š Priority: Controls the port priority. This can be used to control priority of ports that have identical port cost. (See above). Š Š AdminEdge: Controls whether the operEdge flag should start as set or cleared. (The initial operEdge state when a port is initialized). Š...
Page 102 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: SPANNING TREE TECHNICAL SUPPORT 1.877.877.2269 FIGURE 6-5. STP STATUS SCREEN PARAMETER DESCRIPTION Š MSTI: The Bridge Instance. This is also a link to the STP Detailed Bridge Status. Š Š...
Page 103 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: SPANNING TREE TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION STP Bridge Status Š Bridge Instance: The Bridge instance - CIST, MST1, ... Š Š Bridge ID: The Bridge ID of this Bridge instance. Š...
Page 104: Port Statistics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 6: SPANNING TREE TECHNICAL SUPPORT 1.877.877.2269 6.4 PORT STATISTICS This page displays the STP port statistics counters of bridge ports in the switch WEB INTERFACE To display the STP Port Statistic in the web interface: 1.
Page 105: Mac Address Tables
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 7: MAC ADDRESS TABLES TECHNICAL SUPPORT 1.877.877.2269 7.1 CONFIGURATION Switching of frames is based upon the DMAC address contained in the frame. The switch builds a table that maps MAC addresses to switch ports for knowing which ports the frames should go to (based upon the DMAC address in the frame).
Page 106 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 7: MAC ADDRESS TABLES TECHNICAL SUPPORT 1.877.877.2269 FIGURE 7-2. MAC ADDRESS TABLE CONFIGURATION SCREEN #2 PARAMETER DESCRIPTION Š Aging Configuration: By default, dynamic entries are removed from the MAC table after 300 seconds. This removal is also called Š...
Page 107: Information
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 7: MAC ADDRESS TABLES TECHNICAL SUPPORT 1.877.877.2269 Buttons Š Add a New Static Entry: Click to add a new entry to the static MAC table. Specify the VLAN ID, MAC address, and port members for Š...
Page 108 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 7: MAC ADDRESS TABLES TECHNICAL SUPPORT 1.877.877.2269 Š First Page: Updates the system log entries, turn to the first page. Š Š Next Page: Updates the system log entries, turn to the next page. Š...
Page 109: Multicast
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 8.1 IGMP SNOOPING This function is used to establish the multicast groups to forward the multicast packet to the member ports. It avoids wasting the bandwidth while IP multicast packets are running over the network.
Page 110 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 FIGURE 8-1. IGMP SNOOPING CONFIGURATION PARAMETER DESCRIPTION Global Configuration Š Snooping Enabled: Enable Global IGMP Snooping. Š Š Unregistered IPMCv4 Flooding enabled: Enable unregistered IPMCv4 traffic flooding. Unregistered IPMCv4 traffic is so-called Š...
Page 111: Vlan Configuration
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 8.1.2 VLAN CONFIGURATION This section describes the VLAN configuration setting process integrated with the IGMP Snooping function. Each setting page shows up to 99 entries from the VLAN table, default is 20, selected through the “entries per page” input field. When first visited, the web page will show the first 20 entries from the beginning of the VLAN Table.
Page 112: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 Š QRI (0.1 sec): Query Response Interval. The Max Response Time used to calculate the Max Resp Code inserted into the periodic Š General Queries. The allowed range is 0 to 31744 in tenths of seconds; default query response interval is 100 in tenths of seconds (10 seconds).
Page 113: Group Information
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Statistic Š VLAN ID: The VLAN ID of the entry. Š Š Querier Version: Working Querier Version currently. Š Š Host Version: Working Host Version currently. Š...
Page 114: Igmp Sfm Information
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 FIGURE 8-4. IGMP SNOOPING GROUP INFORMATION PARAMETER DESCRIPTION Navigating the IGMP Group Table Each page shows up to 99 entries from the IGMP Group table, default is 20, selected through the “entries per page” input field. When first visited, the web page will show the first 20 entries from the beginning of the IGMP Group Table.
Page 115 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 WEB INTERFACE To display the IGMP SFM Information in the web interface: 1. Click Multicast, IGMP Snooping and IGMP SFM Information 2. To auto-refresh the information, select “Auto-refresh.” 3.
Page 116: Mld Snooping
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 Š First Page: Updates the system log entries, turn to the first page. Š Š Next Page: Updates the group information entries, turn to the next page. Š...
Page 117 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 5. Scroll to set the Profile. 6. Click the apply to save the setting. 7. To cancel the setting, click the Reset button. It will revert to previously saved values. FIGURE 8-7.
Page 118: Vlan Configuration
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 Š Reset: Click to undo any changes made locally and revert to previously saved values. Š 8.2.2 VLAN CONFIGURATION When MLD snooping is enabled on a VLAN, the switch minimizes unnecessary multicast traffic. If the switch receives multicast traffic destined for a given multicast address, it forwards that traffic only to ports on the VLAN that have MLD hosts for that address.
Page 119: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 Š LLQI (LMQI for IGMP): Last Member Query Interval. The Last Member Query Time is the time value represented by the Last Member Š Query Interval, multiplied by the Last Member Query Count. The allowed range is 0 to 31744 in tenths of seconds; the default last member query interval is 10 in tenths of seconds (1 second).
Page 120: Groups Information
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 Š Queries Transmitted: The number of Transmitted Queries. Š Š Queries Received: The number of Received Queries. Š Š V1 Reports Received: The number of Received V1 Reports. Š...
Page 121: Mld Sfm Information
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 Š Show entries: You can choose how many items you want to show up. Š Buttons Š Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Š...
Page 122: Mvr
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 Š VLAN ID: VLAN ID of the group. Š Š Group: IP Multicast Group address. Š Š Port: Switch port number. Š Š Mode: Indicates the filtering mode maintained per (VLAN ID, port number, Group Address) basis. It can be either Include or Exclude. Š...
Page 123 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 FIGURE 8-11. MVR CONFIGURATION PARAMETER DESCRIPTION Š MVR Mode: Enable/Disable the Global MVR. The Unregistered Flooding control depends on the current configuration in IGMP/MLD Š Snooping.
Page 124: Statistics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 Source: Configure uplink ports that receive and send multicast data as source ports. Subscribers cannot be directly connected to source ports. Receiver: Configure a port as a receiver port if it is a subscriber port and should only receive multicast data. It does not receive data unless it becomes a member of the multicast group by issuing IGMP/MLD messages.
Page 125: Mvr Groups Information
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 Š IGMPv2/MLDv1 Reports Received: The number of Received IGMPv2 Joins and MLDv1 Reports, respectively. Š Š IGMPv3/MLDv2 Reports Received: The number of Received IGMPv3 Joins and MLDv2 Reports, respectively. Š...
Page 126: Mvr Sfm Information
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 MVR Channels (Groups) Information Table Columns Š Show entries: You can choose how many items you want to show up. Š Š VLAN ID: VLAN ID of the group. Š...
Page 127: Multicast Filtering Profile
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 MVR SFM Information Table Columns Š Show entries: You can choose how many items you want to show up. Š Š VLAN ID: VLAN ID of the group. Š...
Page 128 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 FIGURE 8-15. MULTICAST FILTERING PROFILE CONFIGURATION FIGURE 8-16. IPMC PROFILE CONFIGURATION PARAMETER DESCRIPTION Š Multicast Filtering Profile Mode: Enable/Disable the Multicast Filtering Profile. System starts to do filtering based on profile settings Š...
Page 129: Filtering Address Entry
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 Š Profile Name & Index: The name of the designated profile to be associated. This field is not editable. Š Š Entry Name: The name used in specifying the address range used for this rule. Only the existing profile address entries will be Š...
Page 130 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 8: MULTICAST TECHNICAL SUPPORT 1.877.877.2269 7. Click First Entry/Next Entry to change the Entry. FIGURE 8-17. IPMC PROFILE ADDRESS CONFIGURATION PARAMETER DESCRIPTION Š Entry Name: The name used for indexing the address entry table. Each entry has the unique name which is composed of up to 16 Š...
Page 131: Dhcp
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: DHCP TECHNICAL SUPPORT 1.877.877.2269 This section describes how to configure and display the DHCP Snooping parameters of the switch. The DHCP Snooping can prevent attackers from adding their own DHCP servers to the network. 9.1 DHCP 9.1.1 CONFIGURATION DHCP Snooping is used to block intruders on the untrusted ports of the switch device when they try to intervene by injecting a...
Page 132: Snooping Table
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: DHCP TECHNICAL SUPPORT 1.877.877.2269 Š Port Mode Configuration: Indicates the DHCP snooping port mode. Possible port modes are: Š - Trusted: Configures the port as trusted source of the DHCP messages. A trusted port can forward DHCP packets normally. - Untrusted: Configures the port as untrusted source of the DHCP messages.
Page 133: Detailed Statistics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: DHCP TECHNICAL SUPPORT 1.877.877.2269 Buttons Š Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Š Š Refresh: Click to refresh the page immediately. Š...
Page 134: Relay
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: DHCP TECHNICAL SUPPORT 1.877.877.2269 Š Rx and Tx Release: The number of release (option 53 with value 7) packets received and transmitted. Š Š Rx and Tx Inform: The number of inform (option 53 with value 8) packets received and transmitted. Š...
Page 135 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: DHCP TECHNICAL SUPPORT 1.877.877.2269 FIGURE 9-4. DHCP RELAY CONFIGURATION PARAMETER DESCRIPTION Š Relay Mode: Indicates the DHCP relay mode operation. Š Possible modes are: - on: Enable DHCP relay mode operation. When DHCP relay mode operation is enabled, the agent forwards and transfers DHCP messages between the clients and the server when they are not in the same subnet domain.
Page 136: Statistics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: DHCP TECHNICAL SUPPORT 1.877.877.2269 9.2.2 STATISTICS This page provides statistics for DHCP relay. WEB INTERFACE To monitor a DHCP Relay statistics in the web interface: 1. Click DHCP, Relay and Statistics. 2.
Page 137: Server
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: DHCP TECHNICAL SUPPORT 1.877.877.2269 Š Keep Agent Option: The number of packets whose relay agent information was retained. Š Š Drop Agent Option: The number of packets that were dropped that were received with relay agent information. Š...
Page 138: Statistics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: DHCP TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š VLAN: Configure the VLAN for which the DHCP server is enabled or disabled. Allowed VLANs are in the range 1 through 4095. Š...
Page 139 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 9: DHCP TECHNICAL SUPPORT 1.877.877.2269 Š Subnet Mask: Display the subnet mask of the DHCP address. Š Š Default router: Display the destination IP network or host address of this route. Š...
Page 140: Security
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 This section shows you how to configure the Port Security settings of the Switch. You can use the Port Security feature to restrict input to an interface by limiting and identifying MAC addresses. 10.1 MANAGEMENT 10.1.1 ACCOUNT This page provides an overview of the current users.
Page 141: Privilege Levels
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š User Name: The name identifying the user. The field can be input 31 characters. This is also a link to Add/Edit User. Š...
Page 142: Auth Method
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š Group Name: The name identifying the privilege group. In most cases, a privilege level group consists of a single module (e.g. LACP, Š...
Page 143 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Authentication Method Configuration Š Client: The management client for which the configuration below applies. Š Š Method: Authentication Method can be set to one of the following values: Š...
Page 144: Access Method
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 10.1.4 ACCESS METHOD This section explains how to configure access management table of the Switch including HTTP/HTTPS, SNMP, and TELNET/SSH. You can manage the Switch over an Ethernet LAN or over the Internet. WEB INTERFACE To configure an Access Method Configuration in the web interface: 1.
Page 145: 145
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 Buttons Š Add New Entry: Click to add a new access management entry. Š Š Apply: Click to save changes. Š Š Reset: Click to undo any changes made locally and revert to previously saved values. Š...
Page 146 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 FIGURE 10-5. NETWORK ACCESS SERVER CONFIGURATION PARAMETER DESCRIPTION System Configuration Š Mode: on or off. Indicates if IEEE 802.1X is globally enabled or disabled on the switch. If globally disabled, all ports are allowed to Š...
Page 147 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 When the NAS module uses the Port Security module to secure MAC addresses, the Port Security module needs to check for activity on the MAC address in question at regular intervals and free resources if no activity is seen within a given period of time. This parameter controls exactly this period and can be set to a number between 10 and 1000000 seconds.
Page 148 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 Š Allow Guest VLAN if EAPOL Seen: The switch remembers if an EAPOL frame has been received on the port for the lifetime of the Š...
Page 149 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 Š Multi 802.1X: In port-based 802.1X authentication, once a supplicant is successfully authenticated on a port, the whole port Š is opened for network traffic. This allows other clients connected to the port (for instance through a hub) to piggyback on the successfully authenticated client and get network access even though they really aren’t authenticated.
Page 150 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 Only the first occurrence of the attribute in the packet will be considered, and to be valid, it must follow this rule: - All 8 octets in the attribute’s value must be identical and consist of ASCII characters in the range 0–7, which translates into the desired QoS Class in the range [0;...
Page 151: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 Once in the Guest VLAN, the port is considered authenticated, and all attached clients on the port are allowed access on this VLAN. The switch will not transmit an EAPOL Success frame when entering the Guest VLAN. While in the Guest VLAN, the switch monitors the link for EAPOL frames, and if one such frame is received, the switch immediately takes the port out of the Guest VLAN and starts authenticating the supplicant according to the port mode.
Page 152 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 FIGURE 10-6. IEEE 802.1X STATUS PARAMETER DESCRIPTION 802.1X Status Š Port: The switch port number. Click to navigate to detail 802.1X statistics for this port. Š...
Page 153: 153
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 Buttons: Š Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Š Š Refresh: Click to refresh the page. Š...
Page 154: Static Table
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š Mode of IP Source Guard Configuration: Enable the Global IP Source Guard or disable the Global IP Source Guard. All configured Š ACEs will be lost when the mode is enabled.
Page 155: Dynamic Table
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š Port: The logical port for the settings. Š Š VLAN ID: The vlan id for the settings. Š Š IP Address: Allowed Source IP address. Š...
Page 156: Arp Inspection
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š Navigating the IP Source Guard Table: Each page shows up to 99 entries from the Dynamic IP Source Guard table, default being 20, Š...
Page 157 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 FIGURE 10-11. ARP INSPECTION CONFIGURATION PARAMETER DESCRIPTION Š Mode of ARP Inspection Configuration: Enable the Global ARP Inspection or disable the Global ARP Inspection. Š Š...
Page 158: Vlan Configuration
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 - Permit: Log permitted entries. - ALL: Log all entries. Buttons Š Apply: Click to save changes. Š Š Reset: Click to undo any changes made locally and revert to previously saved values. Š...
Page 159: Static Table
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š Navigating the VLAN Configuration: Each page shows up to 9999 entries from the VLAN table, default is 20, selected through the Š “entries per page”...
Page 160: Dynamic Table
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 FIGURE 10-13. STATIC ARP INSPECTION TABLE PARAMETER DESCRIPTION Š Port: The logical port for the settings. Š Š VLAN ID: The vlan id for the settings. Š...
Page 161 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 WEB INTERFACE To configure a Dynamic ARP Inspection Table Configuration in the web interface: 1. Click Security, ARP Inspection and Dynamic Table. 2. Check “Auto-refresh.” 3.
Page 162: Port Security
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 10.5 PORT SECURITY 10.5.1 CONFIGURATION This section shows you how to configure the Port Security settings of the Switch. You can use the Port Security feature to restrict input to an interface by limiting and identifying MAC addresses.
Page 163 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 To understand why aging may be desired, consider the following scenario: Suppose an end-host is connected to a third-party switch or hub, which in turn is connected to a port on this switch on which Port Security is enabled. The end-host will be allowed to forward if the limit is not exceeded.
Page 164: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 10.5.2 STATUS This section shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules— the user modules. When a user module has enabled port security on a port, the port is set-up for software- based learning.
Page 165 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 - Shutdown: The Port Security service is enabled by at least the Limit Control user module, and that module has indicated that the limit is exceeded. No MAC addresses can be learned on the port until it is administratively re-opened on the Limit Control configuration Web-page.
Page 166: Radius
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 10.6 RADIUS 10.6.1 CONFIGURATION WEB INTERFACE To configure a RADIUS in the web interface: 1. Click Security, RADIUS and Configuration. 2. Set Timeout, Retransmit, Deadtime, Key, NAS-IP-Address, NAS IPv6-Address, NAS-Identifier. 3.
Page 167: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 Š Deadtime: Deadtime, which can be set to a number between 0 to 1440 minutes, is the period during which the switch will not send Š...
Page 168 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 FIGURE 10-19. RADIUS SERVER STATUS OVERVIEW PARAMETER DESCRIPTION Š #: The RADIUS server number. Click to navigate to detailed statistics for this server. Š Š IP Address: The IP address and UDP port number (in <IP Address>:<UDP Port> notation) of this server. Š...
Page 169 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 If you select Server#1 to display RADIUS Statistics: FIGURE 10-20. RADIUS STATISTICS FOR SERVER PARAMETER DESCRIPTION Š server: You can select the server for which you want to display RADIUS. Š...
Page 170 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 Š Pending Requests: The number of RADIUS Access-Request packets destined for the server that have not yet timed out or received Š a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject, Access-Challenge, timeout, or retransmission.
Page 171: Tacacs
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 - Dead (X seconds left): Accounting attempts were made to this server, but it did not reply within the configured timeout. The server has temporarily been disabled, but will get re-enabled when the dead-time expires. The number of seconds left before this occurs is displayed in parentheses.
Page 172 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 10: SECURITY TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Global Configuration These setting are common for all of the TACACS+ servers. Š Timeout: Timeout is the number of seconds, in the range 1 to 1000, to wait for a reply from a TACACS+ server before it is considered Š...
Page 173: Access Control
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 11.1 PORTS CONFIGURATION Configure the ACL parameters (ACE) of each switch port. These parameters will affect frames received on a port unless the frame matches a specific ACE.
Page 174: Rate Limiters
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 Š Logging: Specify the logging operation of this port. The allowed values are: Š - Enabled: Frames received on the port are stored in the System Log. - Disabled: Frames received on the port are not logged.
Page 175: Access Control List
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 FIGURE 11-2. ACL RATE LIMITER CONFIGURATION PARAMETER DESCRIPTION Š Rate Limiter ID: The rate limiter ID for the settings contained in the same row and its range is 1 to 16. Š...
Page 176 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 6. When editing an entry on the ACE Configuration page, note that the Items displayed depend on various selections, such as Frame Type and IP Protocol Type. Specify the relevant criteria to be matched for this rule, and set the actions to take when a rule is matched (such as Rate Limiter, Port Copy, Logging, and Shutdown).
Page 177 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 Filter: Frames matching the ACE are filtered. Š Rate Limiter: Indicates the rate limiter number of the ACE. The allowed range is 1 to 16. When Disabled is displayed, the rate limiter Š...
Page 178 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 Action: Specify the action to take with a frame that hits this ACE. Permit: The frame that hits this ACE is granted permission for the ACE operation. Deny: The frame that hits this ACE is dropped.
Page 179 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 Š DMAC Value: When “Specific” is selected for the DMAC filter, you can enter a specific destination MAC address. The legal format is Š “xx-xx-xx-xx-xx-xx”...
Page 180 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 Network: Target IP filter is set to Network. Specify the target IP address and target IP mask in the Target IP Address and Target IP Mask fields that appear.
Page 181 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 Any: Any value is allowed (“don’t-care”). Š IP Fragment: Specify the fragment offset settings for this ACE. This involves the settings for the More Fragments (MF) bit and the Š...
Page 182 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 Specific: Source IPv6 filter is set to Network. Specify the source IPv6 address and source IPv6 mask in the SIP Address fields that appear. Š...
Page 183 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 Š TCP/UDP Destination Number: When “Specific” is selected for the TCP/UDP destination filter, you can enter a specific TCP/UDP Š destination value. The allowed range is 0 to 65535. A frame that hits this ACE matches this TCP/UDP destination value. Š...
Page 184: Acl Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 Š Auto-refresh: Select auto-refresh to refresh the information automatically. Š Š Refresh, clear, Remove All: Click to refresh the ACL configuration or clear manually. Click Remove All to clean up all ACL Š...
Page 185 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 11: ACCESS CONTROL TECHNICAL SUPPORT 1.877.877.2269 Š Action: Indicates the forwarding action of the ACE. Š Permit: Frames matching the ACE may be forwarded and learned. Deny: Frames matching the ACE are dropped. Filter: Frames matching the ACE are filtered.
Page 186: Snmp
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 Any Network Management System (NMS) running the Simple Network Management Protocol (SNMP) can manage the Managed devices equipped with SNMP agent, provided that the Management Information Base (MIB) is installed correctly on the managed devices.
Page 187: Snmpv3
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 The field is applicable only when SNMP version is SNMPv1 or SNMPv2c. If SNMP version is SNMPv3, the community string will be associated with SNMPv3 communities table. It provides more flexibility to configure security name than a SNMPv1 or SNMPv2c community string.
Page 188: Users
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š Community: Indicates the security name to map the community to the SNMP Groups configuration. The allowed string length is 1 to Š 32, and the allowed content is ASCII characters from 33 to 126.
Page 189 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š Engine ID: An octet string identifying the engine ID that this entry should belong to. The string must contain an even number (in Š...
Page 190: Groups
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 12.2.3 GROUPS This function is used to configure an SNMPv3 group. The Entry index keys are Security Model and Security Name. To create a new group account, check <Add new group>...
Page 191: Views
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 Buttons Š Add New Entry: Click to add a new entry. Specify the name and configure the new entry. Click “Apply.” Š Š Delete: Check to delete the entry. It will be deleted during the next save. Š...
Page 192: Access
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š View Name: A string identifying the view name that this entry should belong to. The allowed string length is 1 to 31, and the allowed Š...
Page 193 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 FIGURE 12-6. SNMP ACCESS CONFIGURATION PARAMETER DESCRIPTION Š Group Name: A string identifying the group name that this entry should belong to. The allowed string length is 1 to 31, and the allowed Š...
Page 194: Statistics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 12.3 STATISTICS 12.3.1 CONFIGURATION Configure RMON Statistics table on this page. The entry index key is ID. WEB INTERFACE To configure the RMON Statistics Configuration in the web interface: 1.
Page 195: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 12.3.2 STATUS This page provides an overview of RMON Statistics entries. Each page shows up to 99 entries from the Statistics table, default is 20, selected through the “entries per page”...
Page 196: History
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 Š Jabb.: The number of frames with size larger than 64 octets received with invalid CRC. Š Š Coll.: The best estimate of the total number of collisions on this Ethernet segment. Š...
Page 197: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 FIGURE 12-9. RMON HISTORY CONFIGURATION PARAMETER DESCRIPTION Š ID: Indicates the index of the entry. The range is from 1 to 65535. Š Š Data Source: Indicates the port ID to be monitored. If in stacking switch, the value must add 1000*(switch ID-1), for example, if the port Š...
Page 198 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 WEB INTERFACE To display a RMON History Status in the web interface: 1. Click SNMP, History and Status. 2. Check “Auto-refresh.” 3. Click “Refresh” to refresh the port detailed statistics. 4.
Page 199: Alarm
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 12.5 ALARM 12.5.1 CONFIGURATION Configure RMON Alarm table on this page. The entry index key is ID. WEB INTERFACE To configure the RMON Alarm Configuration in the web interface: 1.
Page 200: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 OutDiscards: The number of outbound packets that are discarded even if the packets are normal. OutErrors: The The number of outbound packets that could not be transmitted because of errors. OutQLen: The length of the output packet queue (in packets).
Page 201: Configuration
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 FIGURE 12-12. RMON ALARM STATUS PARAMETER DESCRIPTION Š ID: Indicates the Alarm control entry index. Š Š Interval: Indicates the interval in seconds for sampling and comparing the rising and falling threshold. Š...
Page 202: Status
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 FIGURE 12-13. RMON EVENT CONFIGURATION PARAMETER DESCRIPTION These parameters are displayed on the RMON History Configuration page: Š ID: Indicates the index of the entry. The range is from 1 to 65535. Š...
Page 203 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 12: SNMP TECHNICAL SUPPORT 1.877.877.2269 WEB INTERFACE To display an RMON Event Status in the web interface: 1. Click SNMP, Event and Status. 2. Check “Auto-refresh.” 3. Click “ Refresh“ to refresh the port’s detailed statistics. 4.
Page 204: Event Notification
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 13: EVENT NOTIFICATION TECHNICAL SUPPORT 1.877.877.2269 13.1 SNMP TRAP Configure Trap on this page. WEB INTERFACE To configure SNMP Trap Configuration in the web interface: 1. Click Event Notification and SNMP Trap. 2.
Page 205 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 13: EVENT NOTIFICATION TECHNICAL SUPPORT 1.877.877.2269 Š Destination Address: Indicates the SNMP trap destination address. It allows a valid IP address in dotted decimal notation (‘x.y.z.w’). Š It also allows a valid hostname. A valid hostname is a string drawn from the alphabet (A-Za-z), digits (0-9), dot (.), dash (-). Spaces are not allowed, the first character must be an alpha character, and the first and last characters must not be a dot or a dash.
Page 206: Email
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 13: EVENT NOTIFICATION TECHNICAL SUPPORT 1.877.877.2269 13.2 EMAIL Configure SMTP (Simple Mail Transfer Protocol) on this page. Simple Mail Transfer Protocol is the message-exchange standard for the Internet. The Switch is to be configured as a client of SMTP while the server is a remote device that will receive messages from the switch that alarm events occurred.
Page 207: Log
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 13: EVENT NOTIFICATION TECHNICAL SUPPORT 1.877.877.2269 13.3 LOG 13.3.1 SYSLOG The Syslog Configuration is a standard for logging program messages. It allows separation of the software that generates messages from the system that stores them and the software that reports and analyzes them. It can be used as well for general information, analysis and debugging messages.
Page 208: View Log
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 13: EVENT NOTIFICATION TECHNICAL SUPPORT 1.877.877.2269 13.3.2 VIEW LOG This section describes how to display the system log information of the switch. WEB INTERFACE To display the log Information in the web interface: 1.
Page 209: Event Configuration
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 13: EVENT NOTIFICATION TECHNICAL SUPPORT 1.877.877.2269 Š Show entries: You can choose how many items you want to show. Š Buttons Š Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Š...
Page 210: Switch2Go
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 13: EVENT NOTIFICATION TECHNICAL SUPPORT 1.877.877.2269 <6> Information: Information messages. <7> Debug: Debug-level messages. Š Syslog: Enable - Select this Group Name in Syslog. Š Š Trap: Enable - Select this Group Name in Trap. Š...
Page 211 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 13: EVENT NOTIFICATION TECHNICAL SUPPORT 1.877.877.2269 FIGURE 13-6. SWITCH2GO SETTING PARAMETER DESCRIPTION Management Setting Configure Switch2go management setting. Š Switch2go Mode: Indicates the Switch2go mode operation. When the mode operation is enabled, the message will send out to (or get Š...
Page 212: Ipush Options
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 13: EVENT NOTIFICATION TECHNICAL SUPPORT 1.877.877.2269 User Mobile Device Link List Display and manage the registered mobile devices. Š Mobile 1¬ 6 : Information about the mobile devices registered with this switch. Š...
Page 213 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 13: EVENT NOTIFICATION TECHNICAL SUPPORT 1.877.877.2269 Š Apply: Click to save changes. Š Š Reset: Click to undo any changes made locally and revert to previously saved values. Š 1.877.877.2269 BLACKBOX.COM...
Page 214: Diagnostics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 14: DIAGNOSTICS TECHNICAL SUPPORT 1.877.877.2269 This chapter provides a set of basic system diagnoses. These include Ping, Traceroute, Cable Diagnostics and port mirror. 14.1 PING This section explains how to issue ICMP Echo packets to troubleshoot Ipv4/6 connectivity issues. WEB INTERFACE To configure a PING in the web interface: 1.
Page 215: Traceroute
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 14: DIAGNOSTICS TECHNICAL SUPPORT 1.877.877.2269 Š Egress Interface (Only for IPv6): The VLAN ID (VID) of the specific egress IPv6 interface where the ICMP packet goes. Š The given VID ranges from 1 to 4094 and will be effective only when the corresponding IPv6 interface is valid. When the egress interface is not given, PING6 finds the best matched interface for destination.
Page 216: Cable Diagnostics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 14: DIAGNOSTICS TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š IP Address: The destination IP Address. Š Š Wait Time: Set the time (in seconds) to wait for a response to a probe (default 5.0 sec). Values range from 1 to 60. The payload size Š...
Page 217: Mirroring
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 14: DIAGNOSTICS TECHNICAL SUPPORT 1.877.877.2269 Link Down: Link down or cable is not correct. Š Test Result: Test Result of the cable. Š OK: Correctly terminated pair. Abnormal: Incorrectly terminated pair or link down. Š...
Page 218: Sflow
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 14: DIAGNOSTICS TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Š Monitor Destination Port: Port to output the mirrored traffic. Also known as the mirror port. Frames from ports that have either Š source (rx) or destination (tx) mirroring enabled are mirrored on this port.
Page 219 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 14: DIAGNOSTICS TECHNICAL SUPPORT 1.877.877.2269 FIGURE 14-5. SFLOW CONFIGURATION PARAMETER DESCRIPTION Agent Configuration Š IP Address: The IP address used as Agent IP address in sFlow datagrams. It serves as a unique key that will identify this agent over Š...
Page 220: Statistics
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 14: DIAGNOSTICS TECHNICAL SUPPORT 1.877.877.2269 Port Configuration Š Port: The port number for which the configuration below applies. Š Š Flow Sampler Enabled: Enables/disables flow sampling on this port. Š Š...
Page 221 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 14: DIAGNOSTICS TECHNICAL SUPPORT 1.877.877.2269 FIGURE 14-6. SFLOW STATISTICS PARAMETER DESCRIPTION Receiver Statistics Š Owner: This field shows the current owner of the sFlow configuration. It assumes one of three values as follows: Š...
Page 222 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 14: DIAGNOSTICS TECHNICAL SUPPORT 1.877.877.2269 Buttons Š Auto-refresh: Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Š Š Refresh: Click to refresh the page immediately. Š...
Page 223: Maintenance
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 15: MAINTENANCE TECHNICAL SUPPORT 1.877.877.2269 This chapter describes the Maintenance configuration tasks including Save/Backup/Restore/Activate/Delete Restart Device, Factory Defaults and Firmware upgrade. 15.1 CONFIGURATION The switch stores its configuration in a number of files in text format. The files are either virtual (RAM-based) or stored in flash on the switch.
Page 224: Backup
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 15: MAINTENANCE TECHNICAL SUPPORT 1.877.877.2269 15.1.2 BACKUP This section describes how to export the Switch Configuration for maintenance. Any current configuration files will be exported as text format. The configuration files on the switch can be backed up and saved on the station running the web browser. You can transfer any of the files on the switch to the web browser.
Page 225: Activate
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 15: MAINTENANCE TECHNICAL SUPPORT 1.877.877.2269 WEB INTERFACE To restore configuration in the web interface: 1. Click Maintenance, Configuration and Restore. 2. Click Restore. FIGURE 15-3. RESTORE CONFIG PARAMETER DESCRIPTION Š running-config: A virtual file that represents the currently active configuration on the switch. This file is volatile. Š...
Page 226: Delete
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 15: MAINTENANCE TECHNICAL SUPPORT 1.877.877.2269 FIGURE 15-4. CONFIGURATION ACTIVATION PARAMETER DESCRIPTION Buttons Š Activate Configuration: Click the “Activate Configuration” button, then the selected file will be activated to be the switch’s running Š...
Page 227: Restart Device
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 15: MAINTENANCE TECHNICAL SUPPORT 1.877.877.2269 PARAMETER DESCRIPTION Buttons Š Delete Configuration File: Click the “Delete Configuration File” button then the selected file will be deleted. Š 15.2 RESTART DEVICE This section describes how to restart the device for maintenance. Any configuration files or scripts that you saved in the switch should still be available afterwards.
Page 228: Firmware
NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 15: MAINTENANCE TECHNICAL SUPPORT 1.877.877.2269 FIGURE 15-7. FACTORY DEFAULTS 15.4 FIRMWARE This section describes how to upgrade (or update) Firmware. 15.4.1 FIRMWARE UPGRADE This page facilitates an update of the firmware controlling the switch. WEB INTERFACE To update firmware of the device in the web interface: 1.
Page 229 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 CHAPTER 15: MAINTENANCE TECHNICAL SUPPORT 1.877.877.2269 FIGURE 15-9. FIRMWARE SELECTION Image Information Š Image: The file name of the firmware image, from when the image was last updated. Š Š Version: The version of the firmware image. Š...
Page 230: Appendix. Disclaimer/Trademarks
A.1 DISCLAIMER Black Box Corporation shall not be liable for damages of any kind, including, but not limited to, punitive, consequential or cost of cover damages, resulting from any errors in the product information or specifications set forth in this document and Black Box Corporation may revise this document at any time without notice.
Page 231 NEED HELP? LEAVE THE TECH TO US LIVE 24/7 NOTES TECHNICAL SUPPORT 1.877.877.2269 __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ _________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________\ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ _________________________________________________________________________________________________ __________________________________________________________________________________________________ __________________________________________________________________________________________________ 1.877.877.2269 BLACKBOX.COM...

Black Box LGB1152A User Manual

Quick Links

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Black Box LGB1152A

Summary of Contents for Black Box LGB1152A

Table of Contents