AAxeon LNX-1002NM-67-T User Manual

8-port 10/100tx + 2-port 100fx ip-67 managed industrial ethernet switch

Advertisement

Quick Links

8-port 10/100TX + 2-port 100FX IP-67
Managed Industrial Ethernet Switch
User Manual

Advertisement

Table of Contents
loading

Summary of Contents for AAxeon LNX-1002NM-67-T

  • Page 1 8-port 10/100TX + 2-port 100FX IP-67 Managed Industrial Ethernet Switch User Manual...
  • Page 2: Table Of Contents

    May-2011 Content Overview ............1 Introduction .............. 1 Features – 8 10/100TX + 2 100FX ......3 Features – 8 10/100TX ..........3 Technical Specifications – 8 10/100TX + 2 100FX .. 4 Technical Specifications – 8 10/100TX ....7 Packing List ............
  • Page 3 Fast Ethernet Ports ..........16 Wiring the Power Inputs ......... 17 Wiring the P-Fail Alarm Contacts ......18 Wall Mounting ............19 Grounding the Ethernet Switch ......20 Installation Steps ............ 21 Configuration ............ 22 RS-232 Console ............. 22 Pin Assignments ............. 22 Login in the Console Interface .........
  • Page 4 SNTP Configuration ............51 IP Security ............... 55 User Authentication ............57 N-Key Transaction ............58 Port Statistics ..............59 Port Control ..............61 Port Trunk ............... 63 Port Mirroring ..............71 Rate Limiting ..............72 VLAN Configuration ............73 Rapid Spanning Tree ............
  • Page 5 Troubleshooting ..........112 Appendix A—Command Sets ......113 Command Level ........... 113 System Commands Set ..........114 Port Commands Set ............116 Trunk Commands Set ........... 119 VLAN Commands Set ........... 120 Spanning Tree Commands Set ........122 QOS Commands Set ............ 125 IGMP Commands Set ...........
  • Page 6: Overview

    Overview Introduction To create the reliability in your network, the IP-67 Managed Industrial Switch comes equipped with a proprietary redundant network protocol—X-Ring II, which provides users with an easy way to establish a redundant Ethernet network with ultra high-speed recovery time less than 10ms.
  • Page 7 Flexible Mounting The IP-67 Managed Industrial Switch is compact and can be mounted on the wall, so it is suitable for any space-constrained environment. Wide Operating Temperature The operating temperature of the IP-67 Managed Industrial Switch is between -40 and 75 C.
  • Page 8: Features - 8 10/100Tx + 2 100Fx

    Features – 8 10/100TX + 2 100FX  2Gbps back-plane (switching fabric)  2 x 100Base-FX waterproof LC-type single/multi mode fiber ports  X-Ring II path redundant supported  IPv6 supported  Wide-range redundant power  TFTP firmware update and system configuration restoration/backup ...
  • Page 9: Technical Specifications - 8 10/100Tx + 2 100Fx

    Technical Specifications – 8 10/100TX + 2 100FX The technical specifications of 8 10/100TX + 2 100FX IP-67 Managed Industrial Switch are listed as follows. Communications Standard IEEE 802.3, 802.3u, 802.3x, 802.3ad IEEE 802.1d, 802.1p, 802.1Q, 802.1w, 802.1x 10/100BaseTX, 100BaseFX Up to 100 Mbps Transmission Speed Interface...
  • Page 10 Traffic Control Port trunking with LACP, rate limit and storm control, IGMP Snooping/Query for multicast group, multicast filtering, IEEE 802.3x flow control, IEEE 802.1p QoS Diagnostics Port mirroring, real-time traffic statistics, MAC address table, system event log, E-mail alert, SNMP trap, RMON, LLDP/LLDP-MED Power Power Consumption 8.1 watts max.
  • Page 11 CE EN61000-4-4 (EFT) CE EN61000-4-5 (Surge) CE EN61000-4-6 (CS) CE EN61000-4-8 (Magnetic Field) Free Fall IEC60068-2-32 Shock IEC61373 IEC61373 Vibration...
  • Page 12: Technical Specifications - 8 10/100Tx

    Technical Specifications – 8 10/100TX The technical specifications of 8 10/100TX IP-67 Managed Industrial Switch are listed as follows. Communications Standard IEEE 802.3, 802.3u, 802.3x, 802.3ad IEEE 802.1d, 802.1p, 802.1Q, 802.1w, 802.1x 10/100BaseTX Transmission Speed Up to 100 Mbps Interface 8 x M12, 4-pole D-coded, female (10/100TX) Ethernet Console...
  • Page 13 IGMP Snooping/Query for multicast group, multicast filtering, IEEE 802.3x flow control, IEEE 802.1p QoS Diagnostics Port mirroring, real-time traffic statistics, MAC address table, system event log, E-mail alert, SNMP trap, RMON, LLDP/LLDP-MED Power Power Consumption 4.8 watts max. @ 48 V Power Input 2 x unregulated +12 ~ 48 V Mechanism...
  • Page 14 CE EN61000-4-5 (Surge) CE EN61000-4-6 (CS) CE EN61000-4-8 (Magnetic Field) Free Fall IEC60068-2-32 Shock IEC61373 Vibration IEC61373...
  • Page 15: Packing List

    Packing List  1 x IP-67 Managed Industrial Switch  1 x M12 to D-sub 9 female console cable  1 x User Manual (CD-ROM) Compare the contents of the industrial switch with the standard checklist above. If any item is damaged or missing, please contact the local dealer for service.
  • Page 16: Hardware Description

    Hardware Description This section is intended to introduce the industrial switch’s hardware specification, port, cabling and wiring information. Physical Dimensions 8 10/100TX + 2 100FX The figure below illustrates the dimensions 193mm x 176mm x 62.5mm (W x H x D) for the 8 10/100TX + 2 100FX IP-67 Managed Industrial Switch.
  • Page 17: 10/100Tx

    8 10/100TX The figure below illustrates the dimensions 193mm x 176mm x 62.5mm (W x H x D) for the 8 10/100TX IP-67 Managed Industrial Switch. Mechanical Dimensions...
  • Page 18: Bottom View

    Bottom View The 8 10/100TX + 2 100FX IP-67 Managed Industrial Switch, as the figure shown below, is equipped with two LC type fiber connectors located on the bottom. The bottom side of the 8 10/100TX + 2 100FX IP-67 Managed Industrial Switch...
  • Page 19: Led Indicators

    LED Indicators 8 10/100TX + 2 100FX LED indicators located on the front panel display the power status and network status of the 8 10/100TX + 2 100FX IP67 Managed Industrial Switch. Please refer to the following table for further details. Color Description Power input 1 is active...
  • Page 20: 10/100Tx

    8 10/100TX LED indicators located on the front panel display the power status and network status of the 8 10/100TX IP67 Managed Industrial Switch. Please refer to the following table for further details. Color Description Power input 1 is active PWR1 Green Power input 1 is inactive...
  • Page 21: Installation

    Installation Fast Ethernet Ports The M-12 D-coded Fast Ethernet ports are auto-sensing for 10Base-T or 100Base-TX devices connections. Auto MDI/MDIX means that you can connect to another switch or workstation without changing straight through or crossover cabling.  M12 D-coded Connector Pin Assignments Pin Number Assignments Note...
  • Page 22: Wiring The Power Inputs

    Wiring the Power Inputs Connect the positive and negative wires to PWR1 (V1+, V1-) and PWR2 (V2+, V2-) as the power pin assignments shown below. Power1 & Power2 Contacts of the M12 Connector...
  • Page 23: Wiring The P-Fail Alarm Contacts

    Wiring the P-Fail Alarm Contacts The “P-Fail” alarm relay is provided to signal critical error conditions that may occur on the switch. The contacts are energized upon powering up of the switch and remain energized until a critical error occurs including power failure, Ethernet port disconnection and MAC violation.
  • Page 24: Wall Mounting

    Wall Mounting Besides desktop installation, the industrial switch is specially designed to hang on the wall for space-constrained environments. The drawing below illustrates the wall-mounting installation to hang the switch on the wall via the four mounting holes on the sides. Hang the switch on the wall Grounding screw holes...
  • Page 25: Grounding The Ethernet Switch

    Grounding the Ethernet Switch As the figure illustrated above, you can use an M3 screw to secure a grounding wire to the side screw holes near the ground mark or to the grounding lug at the corner of the front panel. Note To earth the switch to ground with the grounding lug, please prepare an M8 wrench to hold the grounding contact from...
  • Page 26: Installation Steps

    Installation Steps 1. Unpack the Industrial switch 2. To hang the Industrial switch on the wall, please refer to the Wall Mounting section. 3. Use an M8 wrench to hold the grounding contact and remove the fixing screw above the contact. 4.
  • Page 27: Configuration

    Configuration RS-232 Console One end of the supplied console cable is D-sub 9 female connector and the other end is M12, 8-pole A-coded male connector. Attach the D-sub end to a PC or terminal and the of M12 end to the console port of the switch. The connected terminal or PC must support the terminal emulation program.
  • Page 28: Login In The Console Interface

    Login in the Console Interface After the connection between Switch and PC is ready, turn on the PC and run a terminal emulation program like Hyper Terminal and configure its communication parameters to match the following default characteristics of the console port: Baud Rate: 9600 bps Data Bits: 8 Parity: none...
  • Page 29 Having finished the parameter settings, click ‘OK’. When the blank screen shows up, press Enter to have the login prompt appear. Key in ‘root’ (default value) for both User Name and Password (press Enter to switch between); and then press Enter to have the Main Menu of console management show up.
  • Page 30: Ssh

    The Ethernet switch also supports SSH (Secure Shell) which allows the user to log in from a remote computer over the network. The next section is intended to guide users on how to use an SSH client—PuTTY to make a connection to the Ethernet switch. Configuring PuTTY Launch PuTTy, and you will see a dialog box which allows you to control everything PuTTY can do.
  • Page 31 3. Click the Connection SSH node of the tree-menu to configure options for controlling SSH connections. 4. Tick the check box labeled ‘Don’t start a shell or command at all’. Options Controlling SSH Connections 5. Click the Connection SSHTunnel node of the tree-menu to configure options for controlling SSH port forwarding.
  • Page 32 8. After filling in, click the Add button. And you will see an entry added to the list box. Entry of Port Forwarding Added 9. You can also save your preferred PuTTY options for quick connection the next time. Just go back to the Session node, and click the Save button with a session name filled. When you see the saved session in the list box, the session is saved.
  • Page 33 10. To connect to the SSH server, select the session name and click the Open button. And then you will see a window shows up with prompt message ‘login as:’. Type ‘guest’ for both user name and password. Logging-in interface 11.
  • Page 34 12. When finished, a telnet session is successfully made using the SSH protocol. Console via SSH...
  • Page 35: Web-Based Management

    Web-Based Management This industrial switch provides a convenient configuring way via web browser. You can follow the steps below to access the equipment. Your host PC should be in the same VLAN setting with the industrial Note switch, or the management will not be configured. Connect the industrial switch to the Ethernet then your host PC could be configured via Ethernet.
  • Page 36: Ssl

    Login dialog box The Ethernet switch also provides an option for you to connect with your browser via HTTP over SSL, called HTTPS. The SSL (Secure Socket Layer) protocol allows users to make a secured session between the browser (client) and the Ethernet switch (server). You can then type the prefix “https://“...
  • Page 37 In the main page, you can find the tree menu structure of the Ethernet switch in the left side. Click the “+” symbol to unroll the hiding hyperlink, and click any one of the hyperlinks to open its function page.
  • Page 38: System Information

    System Information Here you can view the system information and assign the system name and location to make this switch more easily identified on your network.  System Name: Assign the name of the switch. The maximum length is 64 bytes. ...
  • Page 39: Ip Configuration

    IP Configuration Due to the foreseeable address exhaustion of IPv4, the IP configuration of the Ethernet switch is designed to provide an interface for users to configure the switch running both IPv4 and IPv6 architecture. IPv4 The IPv4 tab allows users to configure the switch to receive an IP address from DHCP server or manually fill in IP Address, Subnet Mask, Gateway, IP addresses of the primary and the secondary DNS servers.
  • Page 40  DNS2: The backup for DNS1. When DNS1 cannot function, DNS2 will then replace DNS1.  When finished, click Apply to have the configuration take effect. IP configuration—IPv4...
  • Page 41 IPv6 The IPv6 tab mainly features two fields displaying the Ethernet switch’s Global Unicast Address and Link-Local Address. Global Unicast Address: A display-only field. When this Ethernet switch is connected to a network segment where one or more routers connected, the Ethernet switch will be assigned an address known as Global Unicast Address by the router(s).
  • Page 42: Dhcp Server

    DHCP Server DHCP is the abbreviation of Dynamic Host Configuration Protocol that is a protocol for assigning dynamic IP addresses to devices on a network. With dynamic addressing, a device can have a different IP address every time it connects to the network. In some systems, the device's IP address can even change while it is still connected.
  • Page 43 System Configuration  DHCP Server: This pull-down menu allows you to configure the switch to be the DHCP server on your local network.  Low IP Address: Type in an IP address as the beginning of a range of the dynamic IP address.
  • Page 44 Client Entries When the DHCP Server function is enabled, the system will collect the DHCP client information including the assigned IP address, the MAC address of the client device, the IP assigning type, states and lease time. DHCP Client Entries interface...
  • Page 45 Port and IP Bindings As the figure shown below, the switch will assign the IP address to the connected client according to the Port-IP binding table. The user is allowed to fill each port with one particular IP address. When the device is connecting to the port and asks for IP assigning, the system will assign the IP address bound with the port to the device.
  • Page 46: Tftp

    TFTP It provides the functions allowing the user to update the switch firmware via the Trivial File Transfer Protocol (TFTP) server. Before updating, make sure the TFTP server is ready and the firmware image is located on the TFTP server. Update Firmware ...
  • Page 47 Restore Configuration You can restore a previous backup configuration from the TFTP server to recover the settings. Before doing that, you must locate the image file on the TFTP server first for the switch to download back the flash image. ...
  • Page 48 Backup Configuration You can back up the current configuration from flash ROM to the TFTP server for the purpose of recovering the configuration later. It helps you avoid wasting time on configuring the settings by backing up the entire configuration. ...
  • Page 49: System Event Log

    System Event Log This page allows the user to decide whether to send the system event log, and select the mode which the system event log will be sent to client only, server only, or both client and server. What kind of event log will be issued to the client/server depends on the selection on the Event Configuration tab.
  • Page 50 Syslog Configuration interface...
  • Page 51 System Event Log—SMTP Configuration Simple Mail Transfer Protocol (SMTP) is the standard for email transmissions across the network. You can configure the SMTP server IP address, sender mail account, password, and the recipient email account to which the e-mail alert will send. Besides, this page provides the authentication mechanism including authentication steps through which the client effectively logs in to the SMTP server during the process of sending e-mail alert.
  • Page 52 SMTP Configuration interface...
  • Page 53 System Event Log—Event Configuration The checkboxes and pull-down menus are not available unless the Syslog Client Mode on the Syslog Configuration tab and the E-mail Alert on the SMTP Configuration tab are enabled first. This tab mainly controls whether an event notification is to be sent to the Syslog/SMTP server.
  • Page 54  Link UP & Link Down: The system will issue a log message at the time when port connection is link-up and link-down. Event Configuration interface...
  • Page 55: Fault Relay Alarm

    Fault Relay Alarm The Fault Relay Alarm function provides the Power Failure, Port Link Down/Broken and MAC Violation detection. Tick the checkbox to enable the relay alarming function. Please refer to the segment of ‘Wiring the Fault Alarm Contacts’ for the external warning device installation.
  • Page 56: Sntp Configuration

    SNTP Configuration SNTP (Simple Network Time Protocol) is a simplified version of NTP which is an Internet protocol used to synchronize the clocks of computers with some time reference. Because time usually just advances, the time on different node stations might be different. With the communicating programs running on those devices, it would cause time to jump forward and back, a non-desirable effect.
  • Page 57 MST - Mountain Standard -7 hours 5 am PDT - Pacific Daylight PST - Pacific Standard -8 hours 4 am ADT - Alaskan Daylight ALA - Alaskan Standard -9 hours 3 am HAW - Hawaiian -10 hours 2 am Standard Nome, Alaska -11 hours 1 am...
  • Page 58 EAST - East Australian Standard GST +10 hours 10 pm Guam Standard, USSR Zone 9 IDLE - International Date Line NZST - New Zealand +12 hours Midnight Standard NZT - New Zealand  SNTP Sever URL: Specify the SNTP server IP address. You can assign a local network time server IP address or an internet time server IP address.
  • Page 59 SNTP Configuration interface...
  • Page 60: Ip Security

    IP Security IP security function allows the user to assign up to 10 specific IP addresses that have permission to manage the switch through the http and telnet services for securing switch management. The purpose of giving permission to limited IP addresses is to allow only the authorized personnel/device to do the management task on the switch.
  • Page 61 IP Security interface...
  • Page 62: User Authentication

    User Authentication The User Authentication interface allows users to configure different login accounts for security reasons. The Admin User account is given administrative privileges. If you want others to access the Ethernet switch with a restricted account, configure the Guest User account for login authentication.
  • Page 63: N-Key Transaction

    N-Key Transaction Users can back up or restore configuration from/to the switch via this interface.  Auto mode: Tick this check box and click Apply to enable the function that with the N-Key device connected to the RS-232 console port, the switch will automatically load the system configuration from N-Key when booting up.
  • Page 64: Port Statistics

    Port Statistics The following chart provides the current statistics information which displays the real-time packet transfer states for each port. The user might use the information to plan and implement the network, or check and find the problem when the collision or heavy traffic occurs.
  • Page 65 Port Statistics interface...
  • Page 66: Port Control

    Port Control In Port Control you can configure the parameters of the connection for each port.  Port: Scroll up/down the scroll bar and click on the port number to choose a particular port to be configured.  State: Enable/disable the port. If the port state is set on ‘Disable’, the port will not be able to receive or transmit any packet.
  • Page 67 Port Control interface...
  • Page 68: Port Trunk

    Port Trunk Port trunking is the combination of several ports or network cables to expand the connection speed beyond the limits of any one single port or network cable. Link Aggregation Control Protocol (LACP), which is a protocol running on layer 2, provides a standardized means in accordance with IEEE 802.3ad to bundle several physical ports together to form a single logical channel.
  • Page 69  The system allows a maximum of four ports to be aggregated in a trunk group. Having configured the parameters above, highlight the ports in the right list box to join the trunk group. Click the Add button and the ports highlighted in the right list box will be shifted to the left list box.
  • Page 70 Aggregator Information  LACP Disabled Having configured the aggregator setting with LACP disabled, you can check the static trunk group information on the Aggregator Information tab. Assigning 2 ports to a trunk group with LACP disabled Static Trunking Group Information tab ...
  • Page 71  LACP Enabled Having configured the aggregator setting with LACP enabled, you can check the trunking group information between two switches on the Aggregator Information tab.  Configuration for Switch 1 Set System Priority of the trunk group. The field displays with ‘1’ by default. Select a trunk group ID by clicking the pull-down menu.
  • Page 72 Aggregation Information of Switch 1 Click on the Aggregator Information tab to check the trunked group information as the illustration shown above after the two switches configured.
  • Page 73  Configuration for Switch 2 Switch 2 configuration interface Set System Priority of the trunk group. The field displays with ‘1’ by default. Select a trunk group ID by clicking the pull-down menu. Enable LACP. Include the member ports by highlighting the ports in the right list box and then click the Add button.
  • Page 74 Aggregation Information of Switch 2 Click on the Aggregator Information tab to check the trunked group information as the illustration shown above after the two switches configured.
  • Page 75 State Activity Having configured the LACP aggregator on the Aggregator Setting tab, you may want to change the state activity for the members of the LACP trunk group. You can tick/un-tick the checkbox beside the state label. If you remove the tick mark of the corresponding port and click the Apply button, the port state activity will change to Passive.
  • Page 76: Port Mirroring

    Port Mirroring Port Mirroring is a method for monitoring of network traffic on switched networks. Traffic through ports can be monitored by one specific port, which means traffic going in or out the monitored (source) ports will be duplicated into the mirroring (destination) port. ...
  • Page 77: Rate Limiting

    Rate Limiting You can respectively configure the ingress limitation type and ingress/egress rate for each port.  Ingress Limit Frame Type: Select the limit type for ingress frames. Four options are available as follows:   Broadcast/Multicast/Flooded Unicast  Broadcast/Multicast ...
  • Page 78: Vlan Configuration

    VLAN Configuration A Virtual LAN (VLAN) is a logical network grouping that limits the broadcast domain, which allows you to isolate network traffic. Therefore only the members of the same VLAN will receive traffic from the ones among the same VLAN. Basically, creating a VLAN on a switch is logically equivalent of reconnecting a group of network devices to another Layer 2 switch;...
  • Page 79  Port-based VLAN A port-based VLAN normally consists of its members—ports, which means the VLAN is created by grouping the selected ports. This method provides the convenience for users to configure a simple VLAN easily without complicated steps. Packets can go among only members of the same VLAN group.
  • Page 80 Add a Port Based VLAN  Enter the group name and VLAN ID. Select the port number available in the left list box, and click the Add button to move the highlighted ports to the right list box. Or you can select any of the ports listed in the right field and click Remove to remove port(s) from the VLAN.
  • Page 81 Edit/Delete Port Based VLAN  With the VLAN list box showing up, select VLAN(s) and click the Delete button to get rid of the VLAN(s).  Highlight a VLAN and click the Edit button to change group name, VLAN ID, or to add/remove the members of the existing VLAN group.
  • Page 82  802.1Q VLAN When the VLAN operation mode is set on 802.1Q, all ports on the switch belong to the default VLAN of VID 1, which means they logically are regarded as members of the same broadcast domain. The valid VLAN ID is in the range of number between 1 and 4094.
  • Page 83 802.1Q Configuration Please follow the instructions below to configure the 802.1Q VLAN.  Click the pull-down menu to select 802.1Q and click Apply to configure the VLAN Operation Mode on 802.1Q.  Enable GVRP Protocol: Tick this checkbox to enable GVRP protocol. This checkbox is available while the VLAN Operation Mode is set on 802.1Q.
  • Page 84 want to configure within the VLAN.  Link Type: Three options are available. Click the pull-down menu to select the link type.  Access Link: A segment which provides the link path for one or more stations to the VLAN-aware device like switches. An Access Port (untagged port) connecting to the access link has an untagged VID (also called PVID).
  • Page 85 [NOTE] 1. It’s not necessary to type ‘1’ in the tagged VID field. The hybrid port will forward the frames of VLAN 1. 2. The trunk port has to be connected to a trunk/hybrid port of the other switch. Both the tagged VID of the two ports have to be the same. ...
  • Page 86 Group Configuration interface  After clicking the Edit button, you can change group name and VLAN ID of the selected VLAN group. Group Configuration interface  When finished, click Apply to have the modification take effect.
  • Page 87: Rapid Spanning Tree

    Rapid Spanning Tree The Rapid Spanning Tree Protocol (RSTP) is an evolution of the Spanning Tree Protocol providing for faster spanning tree convergence after a topology change. The system also supports STP and will auto-detect the connected device running STP or RSTP. RSTP System Configuration This tab allows users to configure parameters for RSTP and displays the spanning tree information of the root bridge.
  • Page 88  Bridge ID: This field displays the bridge ID by showing the MAC address of this switch.  Root Priority: This field displays the numerical value indicating bridge priority of the switch. Generally, the switch with the lowest numerical value in the network is set as the root bridge.
  • Page 89 Port Configuration This tab offers the interface for RSTP port configuration where you can assign parameters to each port. The rapid spanning tree protocol will have the port with the higher priority in forwarding state and block other ports to make certain that there is no loop in the LAN.
  • Page 90 RSTP Port Configuration interface...
  • Page 91: Snmp Configuration

    SNMP Configuration Simple Network Management Protocol (SNMP) is the protocol developed to manage nodes (servers, workstations, routers, switches and hubs etc.) on an IP network. SNMP enables network administrators to manage network performance, find and solve network problems, and plan for network growth. Network management systems (NMS) learn of problems by receiving traps or change notices from network devices implementing SNMP.
  • Page 92 SNMP System Configuration interface...
  • Page 93 Trap Configuration A trap manager is a management station that receives trap messages generated by the switch. If no trap manager is defined, no traps will be issued. To define a management station as a trap manager, assign an IP address, enter the SNMP community strings, and select the SNMP trap version.
  • Page 94 SNMPV3 Configuration This tab allows users to configure the SNMPv3 settings for communications via SNMPv3. ►Context Table Configure the SNMPv3 context table. Assign the context name in the field. Click Apply to add the context name added or changed. ►User Table Configure the SNMPv3 user table.
  • Page 95 SNMPv3 configuration interface ►Access Table Configure the SNMPv3 access table.  Context Prefix: In this filed type in the prefix letters of the context name that is assigned in the context table.  Group Name: Type in the group name that is assigned in the group table. ...
  • Page 96 AuthPriv: Communications are made with authentication and encryption.  Context Match Rule: Select the radio button to determine the context matching rule. You can configure it as a complete matching or prefix matching condition.  Read View Name: Assign permission of reading to a user ID typed that exists in the User Table.
  • Page 97: Qos Configuration

    QoS Configuration In general, traffic on networks is treated as the same priority and delivered equally. With QoS enabled, users can classify frames or packets into different priority to ensure specific network traffic is delivered on a foundation of best-effort. The incoming frames or packets can be sent to different priority queues for different priority service according to the configured polices.
  • Page 98 QoS Configuration interface ►Port-based Priority Configure the priority level for each port. Any packet received from a single port is sent to the ‘Lowest’ queue by default. This item allows users to change the priority level for each port respectively.
  • Page 99  Port x: Four priority levels, High, Middle, Low, and Lowest, are available.  Click the Apply button to have the configuration take effect. ►COS Configuration Configure this item to allocate the identified packet to different queues according to the packet’s 3-bit 802.1p priority classification field that is embedded in the 4-byte 802.1q VLAN tag field.
  • Page 100: X-Ring2

    X-Ring2 X-Ring provides a faster redundant recovery than the Spanning Tree topology. The action is similar to STP or RSTP, but the algorithms between them are not the same. To configure an X-Ring group, the X-Ring function has to be enabled on each switch whose two ports connecting to the ring group in which should be assigned as the member ports.
  • Page 101  Rdn Port: Click the pull-down menu to select a port as the second redundant port.  Rdn Port ID: Specify a number ranging from 0 to 99 for identifying the second redundant port.  When finished, click the Apply button to have the configuration take effect. X-Ring2 Interface ►Legacy_Ring Mode Setting the X-Ring2 Operation Mode on Legacy-Ring mode means the switch is...
  • Page 102 Legacy-Ring Interface [NOTE] 1. When the X-Ring function is enabled, the user must disable the RSTP function. The X-Ring and RSTP functions cannot work simultaneously on a switch. 2. Remember to execute the “Save Configuration” action, otherwise the new configuration will lose when the switch powers off.
  • Page 103: Lldp Configuration

    LLDP Configuration Link Layer Discovery Protocol (LLDP), a one way protocol, specified in the IEEE 802.1AB standard allows stations attached to the same IEEE 802 LAN to advertise their information to neighbors and store the information received from adjacent stations. Receivers on the same physical LAN will store the information distributed via LLDP in a standard Management Information Base (MIB) where the information can be accessed by a Network Management System (NMS) using a protocol like the Simple Network...
  • Page 104: 802.1X/Radius

    802.1X/Radius 802.1x is an IEEE authentication specification that allows a client to connect to a wireless access point or wired switch but prevents the client from gaining access to the Internet until it provides authority, like a user name and password that are verified by a separate server.
  • Page 105 802.1x System Configuration interface...
  • Page 106 Port Configuration You can configure the 802.1x authentication state for each port. The state provides Disable, Accept, Reject, and Authorize.  Reject: The specified port is required to be held in the unauthorized state.  Accept: The specified port is required to be held in the authorized state. ...
  • Page 107 Misc Configuration  Quiet Period: Set the period which the port doesn’t try to acquire a supplicant.  TX Period: Set the period the port waits for retransmitting the next EAPOL PDU during an authentication session.  Supplicant Timeout: Set the period of time the switch waits for a supplicant response to an EAP request.
  • Page 108: Mac Address Table

    MAC Address Table Here users can determine whether the incoming traffic passes through the particular ports or is blocked in accordance with the MAC address filtering table. Static MAC Address Configure the static MAC address tab to make a list in which traffic from devices with the MAC address included will pass the port.
  • Page 109 Static MAC Addresses interface...
  • Page 110 MAC Filtering Traffic from devices with the MAC address listed in this table will be block by the switch. MAC Filtering interface  MAC Address: Enter the MAC address up to 256 entries.  Click the Add button.  If you want to delete the MAC address from the table, select the MAC address entry and click the Delete button.
  • Page 111 All MAC Addresses This tab displays dynamic and static MAC addresses on each port.  Port No: Click the pull-down menu to select a particular port to show its MAC address information.  Click the Clear MAC Table button to clear the listed entries of the current MAC address information.
  • Page 112: Igmp/Mld Snooping

    IGMP/MLD Snooping IGMP is the protocol used by IPv4 systems to report their IP multicast group memberships to neighboring multicast routers. IGMPv3 adds support for "source filtering", that is, the ability for a system to report interest in receiving packets only from specific source addresses, or from all but specific source addresses, sent to a particular multicast address.
  • Page 113: Static Filtering

    Static Filtering Multicasts are similar to broadcasts, they are sent to all end stations on a LAN or VLAN. Static filtering is the function for users to configure a list of multicast groups by specifying the multicast MAC address and member ports for each entry. A multicast MAC address is expressed in the format with a 24-bit prefix: 01-00-5E (Hexadecimal).
  • Page 114: Factory Default

    Factory Default Click the Reset button to reset the switch back to factory defaults. Before resetting, you can tick the checkboxes to keep the current IP address and user name/password. Factory Default interface...
  • Page 115: Save Configuration

    Save Configuration Save all changes you have made in the system. To ensure the configurations you have made will be implemented the next time you power on the switch, remember to click the Save button to save all configurations into the flash memory. Save Configuration interface...
  • Page 116: System Reboot

    System Reboot Reboot the switch under software control. Click the Reboot button to restart the system. System Reboot interface...
  • Page 117: Troubleshooting

    Troubleshooting  Verify that you are using the right power cord/adapter. Don’t use the power adapter with DC output higher than the rated voltage of the switch. Or it will burn this switch down.  Select the proper network cable to construct your network. Please check that you are using the right cable.
  • Page 118: Appendix A-Command Sets

    Appendix A—Command Sets Command Level User EXEC Privileged EXEC Global configuration VLAN database Interface configuration Access Exit Modes Prompt About This Model Method Method The user commands available at the user level are a subset of those available at the privileged Begin a session Enter logout User EXEC...
  • Page 119: System Commands Set

    EXEC mode. Enter the interface To return to command with a Use this mode to configure Interface switch the previous specific interface parameters for the switch configuration (config-if)# mode, enter while in global and Ethernet ports. exit or end. configuration mode System Commands Set Commands...
  • Page 120 ip dhcp Enable DHCP client switch(config)#ip dhcp function of switch show ip Show IP information of switch#show ip switch no ip dhcp Disable DHCP client switch(config)#no ip dhcp function of switch Halt and perform a cold reload switch(config)#reload restart default Restore to default switch(config)#default admin username...
  • Page 121: Port Commands Set

    configuration DHCP server configuration show dhcpserver clients Show client entries of switch#show dhcpserver clients DHCP server show dhcpserver Show IP-Binding switch#show dhcpserver ip-binding information of DHCP ip-binding server no dhcpserver Disable DHCP server switch(config)#no dhcpserver function security enable Enable IP security switch(config)#security enable function security http...
  • Page 122 command to specify switch(config-if)#duplex full the duplex mode of operation for Fast Ethernet. speed Use the speed switch(config)#interface [10|100|1000|auto] configuration fastEthernet 2 command to specify switch(config-if)#speed 100 the speed mode of operation for Fast Ethernet., the speed can’t be set to 1000 if the port isn’t a giga port..
  • Page 123 multicast frame’ broadcast-multicast bandwidth type Set interface ingress switch(config)#interface broadcast-only limit frame type to ‘only fastEthernet 2 accept broadcast switch(config-if)#bandwidth type frame’ broadcast-only bandwidth in Set interface input switch(config)#interface [Value] bandwidth. Rate fastEthernet 2 Range is from 100 switch(config-if)#bandwidth in 100 kbps to 102400 kbps or to 256000 kbps for giga ports, and zero...
  • Page 124: Trunk Commands Set

    configuration show interface status show interface actual switch(config)#interface status fastEthernet 2 (config-if)#show interface status show interface show interface statistic switch(config)#interface accounting counter fastEthernet 2 (config-if)#show interface accounting no accounting Clear interface switch(config)#interface accounting information fastEthernet 2 switch(config-if)#no accounting Trunk Commands Set Commands Level Description Example...
  • Page 125: Vlan Commands Set

    of member ports. aggregator group Assign a static trunk switch(config)#aggregator group [GroupID] [Port-list] group. 1 2-4 nolacp nolacp [GroupID] :1~4 [Port-list]:Member port switch(config)#aggregator group list, This parameter 1 3,1,2 nolacp could be a port range(ex.1-4) or a port list separate by a comma(ex.2, 3, 6) show aggregator Show the information...
  • Page 126 vlan port-based Add new port based switch(vlan)#vlan port-based grpname VALN grpname test grpid 2 port 2-4 [Group Name] grpid switch(vlan)#vlan port-based [GroupID] grpname test grpid 2 port 2,3,4 port [PortNumbers] show vlan [GroupID] Show VLAN switch(vlan)#show vlan 23 information show vlan no vlan group Delete port base group switch(vlan)#no vlan group 2...
  • Page 127: Spanning Tree Commands Set

    access-link untag for VLAN by trunk access-link untag 33 [UntaggedVID] group vlan 8021q trunk Assign a trunk link for switch(vlan)#vlan 8021q trunk 3 [PortNumber] VLAN by trunk group trunk-link tag 2,3,6,99 trunk-link tag [TaggedVID List] switch(vlan)#vlan 8021q trunk 3 trunk-link tag 3-20 vlan 8021q trunk Assign a hybrid link for switch(vlan)#vlan 8021q trunk 3...
  • Page 128 protocol data unit (BPDU) message from the root switch within this interval, it recomputed the Spanning Tree Protocol (STP) topology. spanning-tree Use the spanning-tree switch(config)#spanning-tree hello-time [seconds] hello-time global hello-time 3 configuration command to specify the interval between hello bridge protocol data units (BPDUs).
  • Page 129 path cost for Spanning Tree Protocol (STP) calculations. In the event of a loop, spanning tree considers the path cost when selecting an interface to place into the forwarding state. stp-path-priority Use the spanning-tree switch(config)#interface [Port Priority] port-priority interface fastEthernet 2 configuration switch(config-if)#stp-path-priority command to configure...
  • Page 130: Qos Commands Set

    states. no spanning-tree Disable spanning-tree. switch(config)#no spanning-tree QOS Commands Set Commands Level Description Example qos policy Select QOS policy switch(config)#qos policy [weighted-fair|strict] scheduling weighted-fair qos prioritytype Setting of QOS priority switch(config)#qos prioritytype [port-based|cos-only|tos type -only|cos-first|tos-first] qos priority portbased Configure Port-based switch(config)#qos priority [Port] Priority...
  • Page 131: Mac / Filter Table Commands Set

    igmp unregister Set unregister stream switch(config)#igmp unregister blocking blocking blocking show igmp Displays the details of switch#show igmp configuration configuration an IGMP configuration. show igmp multi Displays the details of switch#show igmp multi an IGMP snooping entries. no igmp Disable IGMP switch(config)#no igmp snooping function no igmp query...
  • Page 132: Snmp Commands Set

    filter hwaddr MAC address table mac-address-table filter hwaddr [MAC] (filter) 000012348678 no mac-address-table Remove dynamic entry switch(config)#no of MAC address table mac-address-table SNMP Commands Set Commands Level Description Example snmp system-name Set SNMP agent switch(config)#snmp [System Name] system name system-name l2switch snmp system-location Set SNMP agent switch(config)#snmp...
  • Page 133 password could be empty. [Authentication Password] [Privacy Password] snmpv3 access Configure the access switch(config)#snmpv3 access context-name [Context table of SNMPV3 context-name Test group G1 Name ] agent security-level AuthPriv group match-rule Exact views V1 V1 V1 [Group Name ] security-level [NoAuthNoPriv|AuthNoP riv|AuthPriv] match-rule...
  • Page 134: Port Mirroring Commands Set

    no snmpv3 access Remove specified switch(config)#no snmpv3 access context-name [Context access table of context-name Test group G1 Name ] SNMPv3 agent. security-level AuthPr group iv match-rule Exact views V1 V1 [Group Name ] security-level [NoAuthNoPriv|AuthNoP riv|AuthPriv] match-rule [Exact|Prifix] views [Read View Name] [Write View Name] [Notify View Name] no snmpv3 mibview...
  • Page 135: 802.1X Commands Set

    show monitor Show port monitor switch(config)#interface information fastEthernet 2 switch(config-if)#show monitor no monitor Disable source port of switch(config)#interface monitor function fastEthernet 2 switch(config-if)#no monitor 802.1x Commands Set Commands Level Description Example 8021x enable Use the 802.1x global switch(config)# 8021x enable configuration command to enable 802.1x protocols.
  • Page 136 8021x system nasid Use the 802.1x system switch(config)# 8021x system [words] nasid global nasid test1 configuration command to change the NAS ID 8021x misc quietperiod Use the 802.1x misc switch(config)# 8021x misc [sec.] quiet period global quietperiod 10 configuration command to specify the quiet period value of the switch.
  • Page 137: Tftp Commands Set

    configuration command to set the reauth period. 8021x portstate Use the 802.1x port switch(config)#interface [disable | reject | accept | state interface fastethernet 3 authorize] configuration switch(config-if)#8021x portstate command to set the accept state of the selected port. show 8021x Displays a summary of switch>show 8021x the 802.1x properties...
  • Page 138: Systemlog, Smtp And Event Commands Set

    SystemLog, SMTP and Event Commands Set Commands Level Description Example systemlog ip Set System log server switch(config)# systemlog ip [IP address] IP address. 192.168.1.100 systemlog mode Specified the log mode switch(config)# systemlog mode [client|server|both] both show systemlog Displays system log. Switch>show systemlog show systemlog Show system log client...
  • Page 139: Sntp Commands Set

    ring-topology-change changed event type ring-topology-change both [Systemlog|SMTP|Both] event systemlog Set port event for switch(config)#interface [Link-UP|Link-Down|Bot system log fastethernet 3 switch(config-if)#event systemlog both event smtp Set port event for switch(config)#interface [Link-UP|Link-Down|Bot SMTP fastethernet 3 switch(config-if)#event smtp both show event Show event selection switch#show event no event Disable cold start switch(config)#no event...
  • Page 140 command can’t be applied. sntp daylight-period Set period of daylight switch(config)# sntp [Start time] [End time] saving time, if SNTP daylight-period 20060101-01:01 function is inactive, 20060202-01-01 this command can’t be applied. Parameter format: [yyyymmdd-hh:mm] sntp daylight-offset Set offset of daylight switch(config)#sntp [Minute] saving time, if SNTP...
  • Page 141: X-Ring Commands Set

    X-ring Commands Set Commands Level Description Example ring enable Enable X-ring switch(config)#ring enable ring master Enable ring master switch(config)#ring master ring couplering Enable couple ring switch(config)#ring couplering ring dualhoming Enable dual homing switch(config)#ring dualhoming ring ringport Configure 1st/2nd switch(config)#ring ringport 7 8 [1st Ring Port] [2nd Ring Ring Port Port]...

Table of Contents