CAUTION: SERVICE .................... 8 CAUTION: PHYSICAL ACCESS ................8 GETTING TO KNOW YOUR SWITCH ..............9 About the iES20G Series Intelligent Managed Switch ..............9 Software Features ..........................9 Hardware Features ..........................9 Hardware Overview ..................10 Front Panel ............................10 Rear ..............................
Page 6
Commands Set List — MAC/Filter Table command set ..........88 6.10 Commands Set List — SNMP command set ..............89 6.11 Commands Set List — Port Mirroring command set............90 6.12 Commands Set List — 802.1x command set ..............90 iS5 Communications Inc.
Page 7
Commands Set List — TFTP command set ..............92 6.14 Commands Set List — SYSLOG, SMTP, EVENT command set ........92 6.15 Commands Set List — SNTP command set ..............94 6.16 Commands Set List — iRing command set ..............95 Technical Specifications ................96 iS5 Communications Inc.
This product contains no user-serviceable parts. Attempted service by unauthorized personnel shall render all warranties null and void. Changes or modifications not expressly approved by iS5 Communications Inc. could invalidate specifications, test results, and agency approvals, and void the user's authority to operate the equipment.
Getting to Know Your Switch About the iES20G Series Intelligent Managed Switch The iES20G series switches are powerful, managed industrial grade switches with numerous features. These switches can operate under a wide temperature range, dusty environments, and in humid conditions. The switches can be managed either by using the WEB, TELNET, directly using the Console port on the switch, or any third-party SNMP software.
Use a RS232 to RJ45 cable to manage switch. Reset (7) Push and hold the reset button for 2 to 3 seconds to reset the switch. Push and hold the reset button for 5 seconds to reset the switch into Factory Default. iS5 Communications Inc.
Page 11
Port link up. LNK / ACT Green Blinking Data transmitted. Full Duplex Amber Port works under full duplex. Ports 7 – 8 Optional 10/100Base-T(X) or 100Base-F(X) or 1000Base-X Port link up. Green Blinking Data transmitted. Amber Port link up. iS5 Communications Inc.
The image below shows the 10 position terminal block and ground lug of the iES20G switch. Side The image below shows the side if the switch with the product label displaying switch information. Circled in red are the side mounting holes for the Panel bracket mounting option. iS5 Communications Inc.
1. Install the Panel mounting hardware onto the switch. The user can choose rear mounting or side mounting. Note: To avoid damage to the unit please use the 4 screws provided to install the panel mount brackets onto the switch. iS5 Communications Inc.
#6 ring lug, and a torque setting of 15 in.lbs (1.7Nm). The red outline indicates the location of the chassis ground. Power Connections The iES20G Series Ethernet switch supports 3 different dual redundant power supplies (PWR1 and PWR2): 1. LV: Dual Input 10-48VDC 2. MV: Dual Input 36-75VDC 3.
Page 15
Power supply 2 ground connection. PWR2 : Ground PWR2 (-) : Negative Connected to the negative terminal of the 2 10-48VDC power source. RLY NO Failsafe relay, normally open contact. RLY CM Failsafe relay, common contact. No connection iS5 Communications Inc.
Page 16
88-370VDC power source. Power supply 1 ground connection. PWR1 – Ground PWR1 (-/N) – Neutral or Connected to the neutral terminal of the Negative 85-264VAC power source or the negative terminal of the 88-370VDC power source. iS5 Communications Inc.
Equipment must be installed according to the applicable country wiring codes. Console Connection To manage the switch via console port, connect the console cable (provided with the switch) from a PC serial port (DB9) to the Console port on the front of the switch (RJ45). iS5 Communications Inc.
Cables Ethernet Cables The iES20G series switches have standard Ethernet ports. According to the link type, the switches use either CAT 3, 4, 5, 5e UTP cables to connect to any other network device (PCs, servers, switches, routers, or hubs). See below for cable specifications.
Not used Fiber Optics The iES20G Series Switch is available with optional fiber ports. The fiber optical ports are available in either Multimode or Singlemode, and with either SC or ST type connectors. The transceivers are also available for longer distances as required.
Page 20
Series User’s Manual iS5 Communications Inc.
Preparing for Web Management The default value is as below: IP Address: 192.168.10.1 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.10.254 User Name: admin Password: admin System Login Launch Internet Explorer. Type http:// and the switches IP address. Press “Enter”. iS5 Communications Inc.
Page 22
Series User’s Manual The login screen appears. Login screen Key in the username and password. The default username and password are “admin”. Press “Enter” or click the “OK” button. The main interface of the Web-based management appears. Main interface iS5 Communications Inc.
PWR1 and PWR2 LED’s of the switch will start to flash. Click and the LED’s will stop flashing. 5.1.3 Front Panel Clicking “Front Panel” will display the front panel of iES20G switch. Click “Close” to hide the image. iS5 Communications Inc.
Display’s the switch’s firmware version. Kernel Version Display’s the kernel software version. Device MAC Display’s the unique hardware address assigned by manufacturer (default). Admin Password 5.1.4.2 Change web management login username and password for the management security issue iS5 Communications Inc.
Assigns the subnet mask of the IP address. If the DHCP client function Subnet Mask is enabled, you do not need to assign a subnet mask. Gateway Assigns the network gateway for the switch. The default gateway is iS5 Communications Inc.
Sets up the Daylight Saving beginning time and Daylight Saving ending time. Both times will be different each year. Daylight Saving Offset Sets up the offset time. Switch Timer Displays the switch current time. Apply Click “Apply” to activate the configurations. iS5 Communications Inc.
Page 27
EET - Eastern European, USSR +2 hours 2 pm Zone 1 BT - Baghdad, USSR Zone 2 +3 hours 3 pm ZP4 - USSR Zone 3 +4 hours 4 pm ZP5 - USSR Zone 4 +5 hours 5 pm iS5 Communications Inc.
Auto Provision allows the system administrator to update the switch firmware automatically. The firmware and/or configuration files can be stored on the TFTP server. When the switch is rebooted, it will automatically be upgraded. Before updating, make sure the TFTP server is iS5 Communications Inc.
The current configuration from the switch can either be saved to the TFTP server, or restored from the TFTP server on this page. The configuration file can also be saved to, and restored from a file on a local PC. iS5 Communications Inc.
Page 30
Enter in the TFTP server IP. Restore File Name Enter the file name. Restore Click “restore” to restore the configurations. Restore File Name Enter the file name. Restore Click “restore” to restore the configurations. Backup Click “backup” to backup the configurations. iS5 Communications Inc.
Start IP Address Sets the dynamic IP assign range. A low IP address is the beginning of the dynamic IP assigned range. For example: dynamic IP assigned range is from 192.168.1.100 to 192.168.1.200. The starting IP address will be iS5 Communications Inc.
A specific IP address can be assigned from the dynamic IP range to a specific port. While the device is connecting to the port, it will ask for a dynamic IP to be assigned. The system will automatically assign the IP address assigned before connecting to the device. iS5 Communications Inc.
Series User’s Manual DHCP Server Port and IP Binding interface 5.1.6 Port Setting 5.1.6.1 Port Control With this function, the system administrator can set the state, speed/duplex, flow control, and security of the port. iS5 Communications Inc.
Page 34
Flow Control Supports symmetrical and asymmetrical mode to avoid packet loss when congestion occurs. Security Supports port security function. When enabled, the port will STOP learning the MAC address dynamically. Apply Click “Apply” to activate the configurations. iS5 Communications Inc.
Rate Limit This function allows the system administrator to limit the traffic of all ports, including broadcast, multicast and flooded Unicast. It can also set “Ingress” or “Egress” to limit traffic received or bandwidth transmitted. Rate Limit interface iS5 Communications Inc.
Click “Apply” to activate the configurations. 5.1.6.4 Port Trunk Port Trunk – Setting Static trunk or 802.3ad LACP can be selected to combine several physical links with a logical link to increase bandwidth. Port Trunk - Setting interface iS5 Communications Inc.
Redundant Ring technology. The recovery time of iRing is less than 30ms with over 250 units connected. It can reduce unexpected malfunctions caused by network topology changes. iRing technology supports three Ring topologies for network redundancy: iRing, Coupling Ring and Dual Homing. iS5 Communications Inc.
Note: It is not recommended to set one switch as a Ring Master and a Coupling Ring at the same time due as this will over load the system. 5.1.7.2 iChain iChain can be enabled to provide network redundancy and maximize fault recovery speed by creating multiple redundant networks. iChain Interface iS5 Communications Inc.
Status is Forwarding or Linkdown. Typical iChain Application 5.1.7.3 iBridge iBridge technology can be enabled allowing the addition of iS5Com switches into a network constructed by another vendor’s proprietary ring technology. This allows the interoperability between managed switches. iBridge Interface iS5 Communications Inc.
The Rapid Spanning Tree Protocol (RSTP) is an evolution of the Spanning Tree Protocol (STP). It provides faster convergence of spanning tree after a topology change. The system also supports STP and will detect a connected device that is running STP or RSTP protocol automatically. iS5 Communications Inc.
The RSTP function can be enabled or disabled and parameters set for each port via the RSTP Setting interface. RSTP Setting interface The following table describes the labels for the RSTP Setting screen. Label Description RSTP mode The RSTP function must be enabled or disabled before configuring any of the related parameters. iS5 Communications Inc.
NOTE: Follow this rule to configure the MAX Age, Hello Time, and Forward Delay Time: 2 x (Forward Delay Time value –1) ≥ Max Age value ≥ 2 x (Hello Time value +1) RSTP Information Show RSTP algorithm result at this table. iS5 Communications Inc.
Page 43
The time that the Control Switch sends out the BPDU (Bridge Protocol Data Unit) packet to verify the current status of RSTP. 2 x (Forward Delay Time value –1) ≥ Max Age value ≥ 2 x (Hello Time value +1) iS5 Communications Inc.
VLANs can be mapped to a reduced number of spanning tree instances because most networks do not need more than a few logical topologies. It supports load balancing scheme and the CPU is sparer than PVST (Cisco proprietary technology). iS5 Communications Inc.
BPDU packet to check RSTP current status. Enter a value between 1 and 10. 2 x (Forward Delay Time value –1) ≥ Max Age value ≥ 2 x (Hello Time value +1) Forwarding Delay Time The number of seconds a port waits before changing from its Rapid iS5 Communications Inc.
(i.e. It is served by a point-to-point LAN segment), or it can be connected to two or more bridges (i.e. It is served by a shared medium LAN segment). This iS5 Communications Inc.
If the value changes, You must reboot the switch. The value must be multiple of 4096 according to the protocol standard rule. Apply Click “Apply” to activate the configurations. MSPT Instance Port iS5 Communications Inc.
Tagged-based VLAN is an IEEE 802.1Q specification standard. It allows the creation of VLAN’s across devices from different switch vendors. IEEE 802.1Q VLAN uses a technique which inserts a “tag” into the Ethernet frame. Tags contain a VLAN Identifier (VID) that indicates the VLAN number. iS5 Communications Inc.
Page 49
VLAN Operation Mode Configure VLAN Operation Mode: disable, Port Base, 802.1Q. GVRP Mode Enable/Disable GVRP function. Management VLAN ID Management VLAN provides the network administrator a secured VLAN to management the switch. Only devices on the management iS5 Communications Inc.
VLAN. If the port-based VLAN enabled, the VLAN-tagging is ignored The following table describes the labels in this screen Label Description Click “add” to enter VLAN add interface. Edit Edit exist VLAN Delete Delete exist VLAN Help Show help file. iS5 Communications Inc.
Traffic is forwarded to the member ports of the same VLAN group (Tagged Ports). ports started in the same group can be transmitted as normal packets without any restrictions. The current VLANs and Taggaed Ports are shown here. VLAN Table interface iS5 Communications Inc.
Three SNMP versions are supported: SNMP V1/SNMP V2c, and SNMP V3. The SNMP V1/SNMP V2c agent uses a community string match for authentication, which means SNMP servers access objects with read-only or read/write permissions. The community default string is iS5 Communications Inc.
If no trap manager is defined, no traps will be issued. Create a trap manager by entering the IP address of the station and a community string. To define management stations as trap managers, enter the SNMP community string and select the SNMP version. iS5 Communications Inc.
5.1.10 Traffic Prioritization Traffic Prioritization includes 3 modes: Port base, 802.1p/COS, and TOS/DSCP. With the traffic prioritization function, traffic can be classified into four classes for differential network application. The iES20G Series support 4 priority queues. 5.1.10.1 Policy iS5 Communications Inc.
Page 55
Use the strict priority scheme: the packets in the higher queue will always be transmitted first until a higher queue is empty. Help Show help file. Apply Click “Apply” to activate the configurations. iS5 Communications Inc.
The following table describes the labels for the Port-based Priority screen. Label Description Port-based Priority Assign Port with a priority queue. 4 priority queues can be assigned: High, Middle, Low, and Lowest. Help Show help file. Apply Click “Apply” to activate the configurations. iS5 Communications Inc.
802.1Q VLAN tag. The priority value supported is 0 to 7. The COS value map for 4 priority queues: High, Middle, Low, and Lowest. iS5 Communications Inc.
Services Code Point (DSCP). The output priority of a packet can be determined by this field and the priority value is supported 0 to 63. DSCP value map to 4 priority queues: High, Middle, Low, and Lowest. Apply Click “Apply” to activate the configurations. Help Show help file. iS5 Communications Inc.
The "Auto" mode means that the switch in IGMP query mode is the one with the lowest IP address. IGMP Snooping Table Shows the current IP multicast list. Apply Click “Apply” to activate the configurations. Help Show help file. iS5 Communications Inc.
Check the box beside the port number to include it as a member port in a specific multicast group IP address. Add a Multicast Filter to the list. Enter the IP Address, select the Member Ports, then click “Add”. Delete Delete an entry from table Help Show help file. iS5 Communications Inc.
Enables or Disables the IP security function. Enable WEB Check the box to enable WEB Management. Management Enable Telnet Check the box to enable Telnet Management. Management Enable SNMP Check the box to enable SNMP Management. Management iS5 Communications Inc.
The MAC Blacklist eliminates the forwarding traffic to specific MAC addresses in the list. Any frames forwarded to a MAC address in the list will be discarded. This will stop the device from receiving any such frame. iS5 Communications Inc.
802.1x makes the use of the physical access characteristics of IEEE 802 LAN infrastructures in order to provide an authenticated and authorized device to attach to a LAN port. Please refer to IEEE 802.1x - Port Based Network Access Control. iS5 Communications Inc.
Page 64
Set the period of time the switch waits for a Radius server response to an authentication request. Max Requests Set the maximum number of times to retry sending packets to the supplicant. Re-Auth. Period Set the period of time after which a client that is connected must be iS5 Communications Inc.
Accept: force the port to be authorized. Authorize: the state of the port which was determined by the outcome of the 802.1x authentication. Disable: the port will no longer participate in 802.1x. Apply Click “Apply” to activate the configurations. Help Show help file. iS5 Communications Inc.
When an event occurs, the warning message gets sent to an appointed server, E-MAIL, or relay fault on a switch panel. 5.1.13.1 Fault Alarm When any selected fault event occurs, the Fault LED on the switch panel and the electric relay will turn on at the same time. iS5 Communications Inc.
System Warning – SYSLOG Setting The SYSLOG is a protocol to transmit event notification messages across networks. Please refer to RFC 3164 - The BSD SYSLOG Protocol. System Warning – SYSLOG Setting interface iS5 Communications Inc.
Enables and Disables the transmission system warning events by e-mail. SMTP Server Address The SMTP server IP address (or domain name address). Sender E-mail Address The SMTP server IP address. Mail Subject The Subject of the e-mail. iS5 Communications Inc.
SYSLOG and SMTP are the two warning methods supported by the system. Check the corresponding box to enable the system event warning method required. Please note that the check box cannot be checked while SYSLOG or SMTP is disabled. System Warning – Event Selection interface iS5 Communications Inc.
MAC address, is to be forwarded through a given potential transmission port. MAC Address Table interface The following table describes the labels for the MAC Address Table screen. iS5 Communications Inc.
The MAC Address table aging time can be set between 0 and 3825 seconds. When the time expires, the unused MAC addresses will be cleared from the MAC table. The iES20G Series also supports “Auto Flush MAC Address Table When Ports Link Down”.
Page 72
Shows the number of bad packets received by the port. TX Abort Packet Shows the number of packets aborted by the port. Packet Collision Shows the number of times a collision was detected by the port. Clear Clears all counters. Help Show help file. iS5 Communications Inc.
The frames that leave the switch port and proceed somewhere outside of the network. The frames that originate from outside the network and are received by the switch port within the network. Apply Click “Apply” to activate the configurations. Help Show help file. iS5 Communications Inc.
If not saved, the current configuration will be lost when the switch is powered off or there is a system reset. System Configuration interface The following table describes the labels for the Save Configuration screen. Label Description Save Save all configurations. iS5 Communications Inc.
& password? switch is reset to the factory default Reset Resets configuration to the factory default Help Show help file. 5.1.16 System Reboot The switch will be restarted when the “Reboot” button is pressed. System Reboot interface iS5 Communications Inc.
Command Line Interface Management About CLI Management Besides WEB-based management, iES20G Series also supports CLI management. The switch console port or Telnet can be used to configure the switch via the CLI. CLI Management by RS-232 Serial Console (9600, 8, none, 1, none) Use an RJ45 to DB9-F cable to connect to the switch’s console and to a local...
Page 77
(4) Press “Enter” on the keyboard for the Console login screen to appear. Use the keyboard to enter the Console Username and Password which is same as the Web Browser password (admin for both), then press “Enter”. iS5 Communications Inc.
Page 78
(1) Telnet to the IP address of the switch from the Windows “Run” command (or from the MS-DOS prompt). (2) The Console login screen appears. Use the keyboard to enter the Console Username and Password which is same as the Web Browser password (admin for both), then press “Enter” iS5 Communications Inc.
Page 79
To exit to Use this mode to configuration command (with a global configure parameters specific configuration for the switch and interface)while in mode, Ethernet ports. global configuration Enter exit. mode To exit privileged EXEC mode or end. iS5 Communications Inc.
Symbol of Command Level Mode Symbol of Command Level User EXEC Privileged EXEC Global configuration VLAN database Interface configuration Commands Set List — System Commands Set iES20G Series Commands Level Description Example show config Show switch switch>show config configuration show terminal Show console...
Page 81
Show IP-Binding switch#show dhcpserver ip-binding information of DHCP server no dhcpserver Disable DHCP server switch(config)#no dhcpserver function security enable Enable IP security switch(config)#security enable function security http Enable IP security of switch(config)#security http HTTP server iS5 Communications Inc.
HTTP server no security telnet Disable IP security of switch(config)#no security telnet telnet server Commands Set List — Port Commands Set iES20G Series Commands Level Description Example interface fastEthernet Choose the port for switch(config)#interface fastEthernet 2 [Portid] modification.
Clear interface switch(config)#interface fastEthernet 2 accounting information switch(config-if)#no accounting Commands Set List — Trunk command set iES20G Series Commands Level Description Example aggregator priority G Set port group system switch(config)#aggregator priority 22 [1to65535] priority aggregator activityport...
1 [GroupID] of trunk group no aggregator group G Remove a trunk group switch(config)#no aggregator group 2 [GroupID] Commands Set List—VLAN command set iES20G series Commands Level Description Example vlan database P Enter VLAN configure switch#vlan database mode vlan V To set switch VLAN switch(vlan)# vlanmode 802.1q...
5 tag 6-8 [TaggedVID List] show vlan [VID] Show VLAN information switch(vlan)#show vlan 23 show vlan Commands Set List — RSTP command set iES20G series Commands Level Description Example RSTP enable G Enable RSTP switch(config)#RSTP enable RSTP priority...
Page 86
2 [1to200000000] interface configuration switch(config-if)# rstp path-cost 2 command to set the path cost for RSTP calculations. In the event of a loop, RSTP considers the path cost when selecting an interface to place into iS5 Communications Inc.
Show RSTP Display a summary of the switch>show rstp RSTP states. no RSTP G Disable RSTP. switch(config)#no rstp Commands Set List—QoS command set iES20G Series Commands Level Description Example qos policy Select QOS policy switch(config)#qos policy weighted-fair [weighted-fair|strict] scheduling qos prioritytype...
Series User’s Manual Commands Set List — IGMP command set iES20G Series Commands Level Description Example igmp enable G Enable IGMP snooping switch(config)#igmp enable function Igmp-query auto G Set IGMP query to auto switch(config)#Igmp query auto mode Igmp-query force...
Series User’s Manual 6.10 Commands Set List — SNMP command set iES20G Series Commands Level Description Example snmp agent-mode G Select the agent mode of switch(config)#snmp agent-mode v1v2c [v1v2c | v3] SNMP Snmp trap server G Configure SNMP trap...
Series User’s Manual 6.11 Commands Set List — Port Mirroring command set iES20G Series Commands Level Description Example monitor destination Set destination port of switch(config)#interface fastEthernet 2 [RX|TX|Both] monitor function switch(config-if)# monitor destination RX monitor source [RX|TX|Both] Set source port of...
Page 91
8021x portstate Use the 802.1x port state switch(config)#interface fastethernet 3 [disable | reject | accept | interface configuration switch(config-if)#8021x portstate accept authorize] command to set the state of the selected port. iS5 Communications Inc.
8021x 802.1x properties and also the port sates. no 8021x G Disable 802.1x function switch(config)#no 8021x 6.13 Commands Set List — TFTP command set Defaults iES20G Series Commands Level Description Example TFTP [IP address] backup Save configuration to switch(config)# tftp 192.168.10.66 backup...
Page 93
Disable port event for switch(config)#interface fastethernet 3 system log switch(config-if)#no event syslog no event smtp Disable port event for switch(config)#interface fastethernet 3 SMTP switch(config-if)#no event smtp show syslog Show system log client & switch#show syslog server information iS5 Communications Inc.
Series User’s Manual 6.15 Commands Set List — SNTP command set iES20G Series Commands Level Description Example sntp enable Enable SNTP function switch(config)#sntp enable sntp daylight Enable daylight saving switch(config)#sntp daylight time, if SNTP function is inactive, this command can’t be applied.
Series User’s Manual 6.16 Commands Set List — iRing command set iES20G Series Commands Level Description Example iRing enable G Enable iRing switch(config)# iring enable iRing master G Enable iRing master switch(config)# iring master iRing ring-linking G Enable iRing linking...
Port based network access control (802.1x) VLAN (802.1Q ) to segregate and secure network traffic Supports Q-in-Q VLAN for performance & security to expand the VLAN space Radius centralized password management SNMP v1/v2c/v3 encrypted authentication and access security iS5 Communications Inc.
Page 97
Dimension (W x D x H) 96.4(W)x108.5(D)x154(H) mm (3.8 x 4.27 x 6.06 inch) Weight (g) 1220 g Environmental Operating Temperature -40°C to 85°C (-40°F to 185°F) Storage Temperature -40°C to 85°C (-40°F to 158°F) Operating Humidity 5% to 95% Non-condensing iS5 Communications Inc.
Page 98
Series User’s Manual Regulatory Approvals FCC Part 15, CISPER (EN55022) class A EN61000-4-2 (ESD), EN61000-4-3 (RS), EN61000-4-4 (EFT), EN61000-4-5 (Surge), EN61000-4-6 (CS), EN61000-4-8, EN61000-4-11 Shock IEC60068-2-27 Free Fall IEC60068-2-32 Vibration IEC60068-2-6 Safety EN60950-1 Warranty Warranty 5 years iS5 Communications Inc.
Need help?
Do you have a question about the iES20G Series and is the answer not in the manual?
Questions and answers