ORiNG RGS-R9004GP+ME-HV User Manual
  1. Manuals
  2. Brands
  3. ORiNG Manuals
  4. Network Router
  5. RGS-R9004GP+ME-HV
  6. User manual

ORiNG RGS-R9004GP+ME-HV User Manual

Rack mount managed gigabit ethernet switch
Hide thumbs Also See for RGS-R9004GP+ME-HV:
Table of Contents

Advertisement

Quick Links

Download this manual
R
G
S
R
G
S
M
\
a
n
a
g
e
M
\
a
n
a
g
e
ORing Industrial Networking Corp
-
R
9
0
0
4
G
P
-
R
9
0
0
4
G
P
R
a
c
k
m
o
u
R
a
c
k
m
o
u
d
G
i
g
a
b
i
t
E
t
h
d
G
i
g
a
b
i
t
E
t
U
s
e
r
M
a
n
U
s
e
r
M
a
n
V
e
r
s
i
o
n
1
.
V
e
r
s
i
o
n
1
.
J
a
n
,
2
0
1
9
J
a
n
,
2
0
1
9
+
M
E
-
H
V
+
M
E
-
H
V
n
t
n
t
e
r
n
e
t
s
w
i
t
c
h
e
r
n
e
t
s
w
i
t
c
u
a
l
u
a
l
0
0
w
w
w
w
w
w
h
h
.
o
r
i
n
g
n
e
t
.
c
o
m
.
o
r
i
n
g
n
e
t
.
c
o
m

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the RGS-R9004GP+ME-HV and is the answer not in the manual?

Questions and answers

Related Manuals for ORiNG RGS-R9004GP+ME-HV

Summary of Contents for ORiNG RGS-R9004GP+ME-HV

  • Page 1 ORing Industrial Networking Corp...
  • Page 2 ORing warrants that all ORing products are free from defects in material and workmanship for a specified warranty period from the invoice date (5 years for most products). ORing will repair or replace products found by ORing to be defective within this warranty period, with shipment expenses apportioned by ORing and the distributor.

  • Page 3: Table Of Contents

    Introduction ........................21 4.2.2 Configurations ........................21 Open-Ring .......................... 22 4.3.1 Introduction ........................22 4.3.2 Configurations ........................22 MSTP ..........................23 4.4.1 STP Configurations ......................23 4.4.2 MSTI Mapping ........................24 Priority ............................... 25 4.4.3 CIST ............................ 26 ORing Industrial Networking Corp...
  • Page 4 Port Setting ......................83 5.3.1 Port Control....................83 5.3.2 Port Trunk ...................... 86 5.3.3 Loop Protection ..................... 91 VLAN ........................92 5.4.1 VLAN Membership ..................92 5.4.2 Membership Status ..................97 5.4.3 Port Status ..................... 98 ORing Industrial Networking Corp...
  • Page 5 IGMP Snooping ................... 136 5.7.2 MLD Snooping ..................... 141 5.7.3 MVR ......................146 Security ........................ 151 5.8.1 Device Binding ..................... 151 5.8.2 Access Management ................... 156 5.8.3 IP Source Guard ..................157 5.8.4 ACL ......................159 ORing Industrial Networking Corp...
  • Page 6 IPv6 Ping ........................206 5.11 Configuration ......................206 5.11.1 Activate ....................206 5.11.2 Delete ...................... 207 5.12 Save ........................207 5.13 Troubleshooting ....................207 5.13.1 Factory Defaults ..................207 5.13.2 System Reboot ..................208 TECHNICAL SPECIFICATIONS ..............0 ORing Industrial Networking Corp...

  • Page 7: Getting Started

    Started 1.1 About the RGS-R9004GP+ME RGS-R9004GP+ME-HV is Layer-3 modular managed redundant ring Ethernet switch with 6 slots, up to 48 ports, and has 4 fixed 10G SFP+ ports. With such high port density and modular design, it makes network planning easier. With completely support of Ethernet Redundancy protocol, O-Ring (recovery time <...

  • Page 8: Hardware Specifications

    Operating temperature: 0 to 60  Storage temperature: -40 to 85  Operating humidity: 5% to 95%, non-condensing  Casing: IP-30  DIN-Rail and wall mounting enabled  Dimensions: 440 (W) x 460 (D) x 88 (H)mm ORing Industrial Networking Corp...

  • Page 9: Hardware Overview

    4 x 1G /10GBase-X + 1 x Console Port Main Host Copper Module 1. Copper port 10/100/1000 M 2. Port Link LED 3. Port ACT LED Fiber Module 1. Copper port 10/100/1000 M 2. Port Link / ACT LED ORing Industrial Networking Corp...

  • Page 10: Front Panel Led

    DC power module 2 activated Green Device operating in Ring Master mode Ring enabled Ring Green Blinking Ring structure is broken Errors occur (i.e. power failure or port Fault Amber malfunctioning) Gigabit Ethernet ports Link/Act Green Port is linked ORing Industrial Networking Corp...
  • Page 11 RGS-R9004GP+ME User Manual Port is downlinked Green Port is running at 1000Mbps Amber Port is running at 100Mbps Speed Green/Amber Port is running at 10Mbps SFP ports Port is linked LNK/ACT Green Blinking Transmitting data ORing Industrial Networking Corp...

  • Page 12: Hardware Installation

    RGS-R9004GP+ME User Manual ardware Installation The switch comes with two rack-mount kits to allow you to fasten the switch to a rack in any environments.(2U) ORing Industrial Networking Corp...

  • Page 13: Wiring

    Step 1: insert the negative/positive wires into the V-/V+ terminals, respectively. Step 2: to keep the DC wires from pulling loose, use a small flat-blade screwdriver to tighten the wire-clamp screws on the front of the terminal block connector. ORing Industrial Networking Corp...

  • Page 14: Connection

    With 10/100/1000Base-T(X) cables, pins 1 and 2 are used for transmitting data, and pins 3 and 6 are used for receiving data. 10/100Base-T(X) RJ-45 Port Pin Assignments: Pin Number Assignment 1000Base-T RJ-45 Port Pin Assignments: Pin Number Assignment BI_DA+ BI_DA- BI_DB+ BI_DC+ BI_DC- BI_DB- BI_DD+ BI_DD- ORing Industrial Networking Corp...

  • Page 15: Console Port Wiring

    PC pin out (male) assignment RS-232 with DB9 female connector DB9 to RJ 45 Pin #2 RD Pin #2 TD Pin #2 Pin #3 TD Pin #3 RD Pin #3 Pin #5 GD Pin #5 GD Pin #5 ORing Industrial Networking Corp...

  • Page 16: Sfp

    For information about the port setting, please refer to 4.1.2 Configurations. 3. Connect the last switch to the first switch to form a ring topology. ORing Industrial Networking Corp...
  • Page 17 For more information on port setting, please refer to 4.1.2 Configurations. Once the setting is completed, one of the connections will act as the main path while the other will act as the backup path. ORing Industrial Networking Corp...
  • Page 18 (see 4.1.2 Configurations). 3. Once the setting is completed, one of the connections will act as the main path, and the other as the backup path. ORing Industrial Networking Corp...
  • Page 19 RGS-R9004GP+ME User Manual ORing Industrial Networking Corp...

  • Page 20: Redundancy

    4.1 O-Ring 4.1.1 Introduction O-Ring is ORing's proprietary redundant ring technology, with recovery time of less than 10 milliseconds and up to 250 nodes. The ring protocols identify one switch as the master of the network, and then automatically block packets from traveling through any of the network’s redundant loops.
  • Page 21 RSTP mode. Click to apply the configurations. Apply Note: due to heavy loading, setting one switch as ring master and coupling ring at the same time is not recommended. ORing Industrial Networking Corp...

  • Page 22: O-Chain

    RGS-R9004GP+ME User Manual 4.2 O-Chain 4.2.1 Introduction O-Chain is ORing’s revolutionary network redundancy technology which enhances network redundancy for any backbone networks, providing ease-of-use and maximum fault-recovery swiftness, flexibility, compatibility, and cost-effectiveness in a set of network redundancy topologies. The self-healing Ethernet technology designed for distributed and complex industrial networks enables the network to recover in less than 10ms for up to 250 switches if at any time a segment of the chain fails.

  • Page 23: Open-Ring

    4.3 Open-Ring 4.3.1 Introduction Open-Ring is a technology developed by ORing to enhance ORing switches’ interoperability with other vendors’ products. With this technology, you can add any ORing switches to the network based on other ring technologies. 4.3.2 Configurations ORing Industrial Networking Corp...

  • Page 24: Mstp

    Compared to STP which recovers a link in 30 to 50 seconds, RSTP can shorten the time to 5 to 6 seconds. Label Description The version of the STP protocol. Valid values include STP, RSTP Protocol Version and MSTP. ORing Industrial Networking Corp...

  • Page 25: Msti Mapping

    This page allows you to examine and change the configurations of current MSTI ports. A MSTI port is a virtual port, which is instantiated separately for each active CIST (physical) port for each MSTI instance configured and applicable for the port. The MSTI instance must be ORing Industrial Networking Corp...

  • Page 26: Priority

    A VLAN can only be VLANS Mapped mapped to one MSTI. An unused MSTI will be left empty (ex. without any mapped VLANs). Priority This page allows you to examine and change the configurations of current STP MSTI bridge ORing Industrial Networking Corp...

  • Page 27: Cist

    CIST, even if it is assigned to an MSTI. All VLANs that are not members of particular MSTIs are members of the CIST. ORing Industrial Networking Corp...

  • Page 28: Port Settings

    If set, spanning trees will lose connectivity. It can be set by a network administrator to prevent bridges outside a core region of the network from influencing the active spanning tree topology because those bridges are not under the full control of the administrator. This ORing Industrial Networking Corp...

  • Page 29: Msti Ports

    This page allows you to configure STA attributes for interfaces in a specific MSTI, including path cost, and port priority. You may use a different priority or path cost for ports of the same media type to indicate the preferred path. ORing Industrial Networking Corp...

  • Page 30: Bridge Status

    Root ID: A unique identifier of the device in the Spanning Tree that this switch has been accepted as the root device, consisting of the priority and MAC address. Root Port: the number of the port on this switch that is closest ORing Industrial Networking Corp...
  • Page 31 Internal Root Bridge. Note that these parameters only apply to the CIST instance. Label Description Port The port identifier. The port identifier used by the RSTP protocol, consisting of Port ID the priority and the logical port index of the bridge port. ORing Industrial Networking Corp...

  • Page 32: Port Status

    RSTP states. Uptime The time since the bridge port was last initialized. 4.4.6 Port Status This page shows the STA functional status of participating ports. ORing Industrial Networking Corp...
  • Page 33 Forward Delay parameter without receiving contradictory information. The port address table will be cleared, and the port will learn addresses. Forwarding: The port will forward packets while learning addresses. Uptime The time since the bridge port was last initialized. ORing Industrial Networking Corp...

  • Page 34: Port Statistics

    Fast recovery mode can be set to connect multiple ports to one or more switches. The device with fast recovery mode will provide redundant links. Fast recovery mode supports 12 priorities. Only the first priority will be the active port, and the other ports with different priorities will be backup ports. ORing Industrial Networking Corp...
  • Page 35 Enable Activate fast recovery mode Port Ports can be set to 20 priorities. Only the port with the highest priority will be the active port. 1 is the highest priority. Apply Click to activate the configurations. ORing Industrial Networking Corp...

  • Page 36: Management

    Type http:// and the IP address of the switch. Press Enter. A login screen appears. Type in the username and password. The default username and password is admin. Click Enter or OK button, the management Web page appears. ORing Industrial Networking Corp...
  • Page 37 After logging in, you can see the information of the switch as below. On the left hand side of the management interface shows links to various settings. You can click on the links to access the configuration pages of different functions. ORing Industrial Networking Corp...

  • Page 38: Basic Settings

    The allowed string length is 0 to 255, and only ASCII characters from 32 to 126 are allowed. Click to save changes. Save Click to undo any changes made locally and revert to previously Reset saved values. ORing Industrial Networking Corp...

  • Page 39: Auth Method

    The management client for which the configuration below applies. Methods Method can be set to one of the following values: ．no: Command authorization is disabled. User is granted access to CLI commands according to his privilege level. ORing Industrial Networking Corp...

  • Page 40: Users

    Enable exec (login) accounting. 5.1.3 Users Configuration This page provides an overview of the current users. Currently the only way to login as another user on the web server is to close and reopen the browser. ORing Industrial Networking Corp...
  • Page 41 15 can be used for an administrator account, privilege level 10 for a standard user account and privilege level 5 for a guest account. Privilege Levels This page provides an overview of the privilege levels. ORing Industrial Networking Corp...
  • Page 42 Every group has an authorization Privilege level for the following Privilege Levels groups: configuration read-only, configuration/execute read-write, status/statistics read-only, status/statistics read-write (e.g. for clearing of statistics). User Privilege should be same or greater than the authorization Privilege level to have the access to that group. ORing Industrial Networking Corp...

  • Page 43: Ip Settings

    From this DHCPv4 interface: Specify from which DHCPv4-enabled interface a provided DNS server should be preferred. Configured IPv6: Explicitly provides the valid IPv6 unicast (except linklocal) address of the DNS Server. Make sure the configured DNS server is reachable (e.g. via ORing Industrial Networking Corp...
  • Page 44 The IPv4 address of the interface in dotted decimal notation. IPv4 Address If DHCP is enabled, this field configures the fallback address. The field may be left blank if IPv4 operation on the interface is not ORing Industrial Networking Corp...
  • Page 45 Once the DAD (Duplicate Address Detection) detects the address duplication, the operation on the interface SHOULD be disabled. At this moment, manual intervention is required to resolve the ORing Industrial Networking Corp...
  • Page 46 ( Only For IPv6) If the IPv6 gateway address is link-local, it must specify the next hop VLAN for the gateway. If the IPv6 gateway address is not link-local, system ignores the next hop VLAN for the gateway. ORing Industrial Networking Corp...

  • Page 47: Ip Status

    The gateway address of this route. Gateway Status The status flags of the route. Neighbor Cache The IP address of the entry. IP Address The Link (MAC) address for which a binding to the IP address given Link Address exist. ORing Industrial Networking Corp...

  • Page 48: Daylight Saving Time

    'Non-Recurring' and configure the daylight saving time duration for single time configuration. ( Default : Disabled ). Start Time Settings: Set up the start time of the daylight saving time period. End Time Settings: Set up the ending time of the daylight ORing Industrial Networking Corp...
  • Page 49 MEWT - Middle European Winter SWT - Swedish Winter EET - Eastern European, USSR +2 hours 2 pm Zone 1 BT - Baghdad, USSR Zone 2 +3 hours 3 pm ZP4 - USSR Zone 3 +4 hours 4 pm ORing Industrial Networking Corp...

  • Page 50: Rip

    Using a virtual router ID (VRID) address and virtual router IP (VRIP) address to represent itself, a virtual router consists of two or more physical routers, including one master router and one or more backup routers. All routers in the virtual router group share ORing Industrial Networking Corp...
  • Page 51 VRID: Belongs to the VRRP Group with this ID (Zero means no group) VRRP Member VRIP: Virtual Router IP. DefaultIP: If this VLAN turns to backup state from master state, this interface will recover with this IP. ORing Industrial Networking Corp...

  • Page 52: Https

    Generate: Generate a new self-signed RSA certificate. Display the current status of certificate on the switch. Possible statuses are: Certificate Status Switch secure HTTP certificate is presented. Switch secure HTTP certificate is not presented. Switch secure HTTP certificate is generating. ORing Industrial Networking Corp...

  • Page 53: Ssh

    The LLDP information valid period is set to Tx Hold multiplied by Tx Interval seconds. Valid values must be between 2 - 10 times. Tx Delay When a setting is changed (e.g. the IP address), a new LLDP ORing Industrial Networking Corp...
  • Page 54 Optional TLV: When checked, the "system name" is included Sys Name in LLDP information transmitted. Optional TLV: When checked, the "system description" is included Sys Descr in LLDP information transmitted. Sys Capa Optional TLV: When checked, the "system capability" is included ORing Industrial Networking Corp...
  • Page 55 Click to refresh the page immediately. Refresh Check to enable an automatic refresh of the page at regular Auto-refresh intervals. Port Statistics This page provides an overview of all LLDP traffic. Two types of counters are shown. Global ORing Industrial Networking Corp...
  • Page 56 If a port receives an LLDP frame, and the switch's internal table is Frames Discarded full, the LLDP frame will be counted and discarded. This situation is known as "too many neighbors" in the LLDP standard. LLDP ORing Industrial Networking Corp...
  • Page 57 (for example only advertise the voice network Count policy to permitted voice-capable devices), both in order to conserve the limited LLDPU space and to reduce security and system integrity issues that can come with inappropriate knowledge of the network policy. ORing Industrial Networking Corp...
  • Page 58 Network Connectivity Devices, or other types of links. Transmit TLVS It is possible to select which LLDP-MED information that shall be transmitted to the neighbors. When the checkbox is checked the information is included in the frame transmitted to the neighbor. ORing Industrial Networking Corp...
  • Page 59 It is possible to specify the direction to either East of the prime meridian or West of the prime meridian. Altitude should be normalized to within -2097151.9 to 2097151.9 with a maximum of 1 digits. Altitude It is possible to select between two altitude types (floors or ORing Industrial Networking Corp...
  • Page 60 The total number of characters for the combined civic address information must not exceed 250 characters. Note that a non-empty civic address location will use 2 extra characters in addition to the civic address location text. The 2 letter country code is not part of the 250 characters limitation. ORing Industrial Networking Corp...
  • Page 61 Room number - Example: 450F. Room no. Place Type Place type - Example: Office. Postal community name Postal community name - Example: Leonia. P.O Box Post office box (P.O. BOX) - Example: 12345. Additional code Additional code - Example: 1320300003. ORing Industrial Networking Corp...
  • Page 62 6. Control / Signalling (conditionally support a separate network policy for the media types above) A large network may support multiple VoIP policies across the entire organization, and different policies per application type. LLDP-MED allows multiple policies to be advertised per port, ORing Industrial Networking Corp...
  • Page 63 3. Guest Voice - support a separate 'limited feature-set' voice service for guest users and visitors with their own IP Telephony handsets and other similar appliances supporting interactive voice services. 4. Guest Voice Signalling (conditional) - for use in network ORing Industrial Networking Corp...
  • Page 64 Untagged indicates that the device is using an untagged frame format and as such does not include a tag header as defined by IEEE 802.1Q-2003. In this case, both the VLAN ID and the Layer 2 priority fields are ignored and only the DSCP ORing Industrial Networking Corp...
  • Page 65 LLDP neighbor is detected. This function applies to VoIP devices which support LLDP-MED. The columns hold the following information: Label Description Interface The interface on which the LLDP frame was received. ORing Industrial Networking Corp...
  • Page 66 Class. For-example will any LLDP-MED Endpoint Device claiming compliance as a Media Endpoint (Class II) also support all aspects of TIA-1057 applicable to Generic Endpoints (Class I), and any LLDP-MED Endpoint Device claiming compliance as a Communication Device (Class III) ORing Industrial Networking Corp...
  • Page 67 LLDP-MED Communication Endpoint (Class III) The LLDP-MED Communication Endpoint (Class III) definition is applicable to all endpoint products that act as end user communication appliances supporting IP media. Capabilities include all of the capabilities defined for the previous Generic ORing Industrial Networking Corp...
  • Page 68 2. Voice Signalling - for use in network topologies that require a different policy for the voice signalling than for the voice media. 3. Guest Voice - to support a separate limited feature-set voice service for guest users and visitors with their own IP ORing Industrial Networking Corp...
  • Page 69 TAG is indicative of whether the specified application type is using a tagged or an untagged VLAN. Can be Tagged or Untagged. Untagged: The device is using an untagged frame format and as such does not include a tag header as defined by IEEE ORing Industrial Networking Corp...

  • Page 70: Ntp

    When the NTP client is enabled, the switch regularly sends a request for a time update to a configured time server. A maximum of five time servers are supported. The switch will attempt to poll each server in the configured sequence. ORing Industrial Networking Corp...

  • Page 71: Upnp

    Enabled: Enable UPnP mode operation. Disabled: Disable UPnP mode operation. When the mode is enabled, two ACEs are added automatically to trap UPNP related packets to CPU. The ACEs are automatically removed when the mode is disabled. ORing Industrial Networking Corp...

  • Page 72: Modbus Tcp

    100 to 86400. 5.1.14 Modbus TCP This page shows Modbus TCP support of the switch. (For more information regarding Modbus, http://www.modbus.org/ please visit Label Description Shows the existing status of the Modbus TCP function Mode ORing Industrial Networking Corp...

  • Page 73: Ethernet / Ip

    Indicates the EtherNet/IP mode operation. Possible modes are: Enabled: Enable EtherNet/IP mode operation. Disabled: Disable EtherNet/IP mode operation. Download EDS File Download to EDS File . 5.1.16 Backup/Restore Configurations You can save/view or load switch configurations. ORing Industrial Networking Corp...

  • Page 74: Firmware Update

    This page allows you to update the firmware of the switch. 5.2 DHCP 5.2.1 DHCP Server This page configures global mode and VLAN mode to enable/disable DHCP server per system and per VLAN.and per VLAN. Mode ORing Industrial Networking Corp...
  • Page 75 Indicate the operation mode per VLAN. Possible modes are: Mode Enabled: Enable DHCP server per VLAN. Disabled: Disable DHCP server pre VLAN. Excluded IP This page configures excluded IP addresses. DHCP server will not allocate these excluded IP addresses to DHCP client Label Description ORing Industrial Networking Corp...
  • Page 76 Display network number of the DHCP address pool. If "-" is displayed, it means not defined. Display subnet mask of the DHCP address pool. Subnet Mask If "-" is displayed, it means not defined. Lease Time Display lease time of the pool. ORing Industrial Networking Corp...
  • Page 77 Number of DHCP REQUEST messages received. REQUEST DECLINE Number of DHCP DECLINE messages received. Number of DHCP RELEASE messages received. RELEASE INFORM Number of DHCP INFORM messages received. DHCP Message Sent Counters OFFER Number of DHCP OFFER messages sent. ORing Industrial Networking Corp...
  • Page 78 State of binding. Possible states are Committed, Allocated, Expired. Pool Name The pool that generates the binding. Server ID Server IP address to service the binding. Declined IP Display IP addresses declined by DHCP clients. Label Description Declined IP List of IP addresses declined. ORing Industrial Networking Corp...

  • Page 79: Dhcp Relay

    ID 1, and port No. 8. The option 82 remote ID value equals to the switch MAC address. The modes include: Enabled: activate DHCP relay information. When DHCP relay information is enabled, the agent inserts specific information (option 82) into a DHCP message when forwarding to a DHCP ORing Industrial Networking Corp...
  • Page 80 Remote ID missing. The number of packets whose Circuit ID do not match the Receive Bad Circuit ID known circuit ID The number of packets whose Remote ID do not match the Receive Bad Remote ID ORing Industrial Networking Corp...

  • Page 81: Dhcp Snooping

    Enabled: Enable DHCP snooping mode operation. When DHCP snooping mode operation is enabled, the DHCP request messages will be forwarded to trusted ports and only allow reply packets from trusted ports. Disabled: Disable DHCP snooping mode operation. ORing Industrial Networking Corp...
  • Page 82 This page provides statistics for DHCP snooping. Notice that the normal forward per-port TX statistics isn't increased if the incoming DHCP packet is done by L3 forwarding mechanism. And clear the statistics on specific port may not take effect on global statistics since it gathers the different layer overview. ORing Industrial Networking Corp...
  • Page 83 The number of lease query (option 53 with value 10) packets Query received and transmitted. The number of lease unassigned (option 53 with value 11) Lease Unassigned packets received and transmitted. The number of lease unknown (option 53 with value 12) packets Lease ORing Industrial Networking Corp...

  • Page 84: Port Setting

    Possible speeds are: Configured Link Speed Disabled - Disables the switch port operation. Auto - Port auto negotiating speed with the link partner and selects the highest speed that is compatible with the link partner. ORing Industrial Networking Corp...
  • Page 85 Advertise Speed (10M 100M 1G) to the link partner. By default port will advertise all the supported speeds if speed is set as Auto. Flow Control When Auto Speed is selected on a port, this section ORing Industrial Networking Corp...
  • Page 86 (indicating which protocol is encapsulated in the payload of the frame). If "frame length check" is enabled, frames with payload size less than 1536 bytes are dropped, if the EtherType/Length field doesn't match the actually payload length. If "frame ORing Industrial Networking Corp...

  • Page 87: Port Trunk

    IP address, or uncheck to disable. By default, IP Address is enabled. TCP/UDP Port Calculates the destination port of the frame. You can check this Number box to enable the TCP/UDP port number, or uncheck to disable. By default, TCP/UDP Port Number is enabled. ORing Industrial Networking Corp...
  • Page 88 This page allows you to enable LACP functions to group ports together to form single virtual links and change associated settings, thereby increasing the bandwidth between the switch and other LACP-compatible devices. ORing Industrial Networking Corp...
  • Page 89 Lower number means greater priority. LACP System Status This page provides a status overview for all LACP instances. ORing Industrial Networking Corp...
  • Page 90 LACP is not enabled or the port link is down. Backup means the port cannot join in the aggregation group unless other ports are removed. The LACP status is disabled. The key assigned to the port. Only ports with the same key can be ORing Industrial Networking Corp...
  • Page 91 The number of unknown or illegal LACP frames discarded at each port. Refresh Click to refresh the page immediately Check to enable an automatic refresh of the page at regular Auto-refresh intervals Clear Click to clear the counters for all ports ORing Industrial Networking Corp...

  • Page 92: Loop Protection

    Configures the action to take when a loop is detected. Valid values include Shutdown Port, Shutdown Port, and Log or Log Only. Tx Mode Controls whether the port is actively generating loop protection PDUs or only passively look for looped PDUs. ORing Industrial Networking Corp...

  • Page 93: Vlan

    200, and 300: 1,10-13,200,300. Spaces are allowed in between the delimiters. This field specifies ethertype/TPID (specified Ethertype for Custom hexadecimal) used for Custom S-ports. The setting is in force S-ports for all ports whose Port Type is set to S-Custom-Port. Port VLAN Configuration ORing Industrial Networking Corp...
  • Page 94  By default, a trunk port is member of all VLANs (1-4095)  The VLANs that a trunk port is member of may be limited by the use of Allowed VLANs ORing Industrial Networking Corp...
  • Page 95 VLAN tag is used to classify the frame on Port Type ingress to a particular VLAN, and if so, which TPID it reacts on. Likewise, on egress, the Port Type determines the TPID of the tag, if a tag is required. ORing Industrial Networking Corp...
  • Page 96 VLAN that the port is not a member of get Ingress Filtering discarded. If ingress filtering is disabled, frames classified to a VLAN that the port is not a member of are accepted and forwarded to the ORing Industrial Networking Corp...
  • Page 97 A port may be configured to never become member of one or more VLANs. This is particularly useful when dynamic VLAN Forbidden VLANs protocols like MVRP and GVRP must be prevented from dynamically adding ports to VLANs. ORing Industrial Networking Corp...

  • Page 98: Membership Status

    If a port is in the forbidden port list and at the same time attempted included in the VLAN, the following image will be displayed: . The port will not be a member of the VLAN in this case. ORing Industrial Networking Corp...

  • Page 99: Port Status

    Frame Type a given user wants to configure on the port. The field is empty if not overridden by the selected user. Port VLAN ID Shows the Port VLAN ID (PVID) that a given user wants the ORing Industrial Networking Corp...

  • Page 100: Private Vlan

    VLAN unaware and members of VLAN 1 and private VLAN 1. A VLAN-unaware port can only be a member of one VLAN, but it can be a member of multiple private VLANs. ORing Industrial Networking Corp...
  • Page 101 Click OK to discard the incorrect entry, or click Cancel to return to the editing and make a correction. The private VLAN is enabled when you click Save. The Delete button can be used to undo the addition of new private VLANs. ORing Industrial Networking Corp...

  • Page 102: Gvrp

    The default is 60cs. LeaveAll-time is a value in the range of 1000-5000cs, i.e. in units of one hundredth of a second. The default is 1000cs. Max number of VLANs When GVRP is enabled, a maximum number of VLANs ORing Industrial Networking Corp...

  • Page 103: Snmp

    The logical port that is to be configured. Mode can be either 'Disabled' or 'GVRP enabled'. These values turn the Mode GVRP feature off or on respectively for the port in question. 5.5 SNMP 5.5.1 SNMP System Configurations ORing Industrial Networking Corp...

  • Page 104: Trap

    Indicates the SNMPv3 engine ID. The string must contain an even number between 10 and 64 hexadecimal digits, but all-zeros and Engine ID all-'F's are not allowed. Change of the Engine ID will clear all original local users. 5.5.2 Trap SNMP Trap Detailed Configuration ORing Industrial Networking Corp...
  • Page 105 Indicates the SNMP trap destination IPv6 address. IPv6 address is in 128-bit records represented as eight fields of up to four hexadecimal ORing Industrial Networking Corp...
  • Page 106 10 and 64, but all-zeros and all-'F's are not allowed. Indicates the SNMP trap security name. SNMPv3 traps and informs Trap Security using USM for authentication and privacy. A unique security name is Name needed when traps and informs are enabled. SNMP Trap Event ORing Industrial Networking Corp...

  • Page 107: Snmp Community Configurations

    Indicates the Switch group's traps. Possible traps are: Switch STP: Enable/disable STP trap. RMON: Enable/disable RMON trap. 5.5.3 SNMP Community Configurations This page allows you to configure SNMPv3 community table. The entry index key is Community. ORing Industrial Networking Corp...

  • Page 108: Snmp User Configurations

    User Name to. The allowed string length is 1 to 32, and only ASCII characters from 33 to 126 are allowed. Indicates the security model that this entry should belong to. Security Level Possible security models include: ORing Industrial Networking Corp...

  • Page 109: Snmp Group Configurations

    8 to 32, and only ASCII characters from 33 to 126 are allowed. 5.5.5 SNMP Group Configurations This page allows you to configure SNMPv3 group table. The entry index keys are Security Model and Security Name. ORing Industrial Networking Corp...

  • Page 110: Snmp View Configurations

    SNMP View Configurations This page allows you to configure SNMPv3 view table. The entry index keys are View Name and OID Subtree. Label Description Delete Check to delete the entry. It will be deleted during the next save. ORing Industrial Networking Corp...

  • Page 111: Snmp Access Configurations

    33 to 126 are allowed. Indicates the security model that this entry should belong to. Possible security models include: any: Accepted any security model (v1|v2c|usm). Security Model v1: Reserved for SNMPv1. v2c: Reserved for SNMPv2c. usm: User-based Security Model (USM). ORing Industrial Networking Corp...

  • Page 112: Rmon

    1000000*(switch ID-1), for example, if the port is switch 3 port 5, the value is 2000005. History Configuration Label Description Delete Check to delete the entry. It will be deleted during the next save. ORing Industrial Networking Corp...
  • Page 113 InUnknownProtos: the number of the inbound packets that were discarded because of the unknown or un-support protocol. OutOctets: The number of octets transmitted out of the interface , ORing Industrial Networking Corp...
  • Page 114 (default). Rising Threshold Rising threshold value (-2147483648-2147483647). Rising Index Rising event index (1-65535). Falling Threshold Falling threshold value (-2147483648-2147483647) Falling Index Falling event index (1-65535). Event Configuration Label Description ORing Industrial Networking Corp...
  • Page 115 FCS octets) of between 64 and 1518 CRC Errors octets, inclusive, but had either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a ORing Industrial Networking Corp...
  • Page 116 The value of sysUpTime at the start of the interval over which this Sample Start sample was measured. The total number of events in which packets were dropped by the Drop probe due to lack of resources. ORing Industrial Networking Corp...
  • Page 117 Coll. segment. The best estimate of the mean physical layer network utilization on Utilization this interface during this sampling interval, in hundredths of a percent. Alarm Status Label Description Indicates the index of Alarm control entry. ORing Industrial Networking Corp...

  • Page 118: Traffic Prioritization

    The rate is 2^n, where n is equal to or less than 15, or "No Limit". The unit of the rate can be either pps (packets per second) or kpps (kilopackets per second). The configuration indicates ORing Industrial Networking Corp...

  • Page 119: Port Classification

    2K, 4K, 8K, 16K, 32K, 64K, 128K, 256K, 512K, or 1024K. Rate The 1 kpps is actually 1002.1 pps. 5.6.2 Port Classification QoS is an acronym for Quality of Service. It is a method to achieve efficient bandwidth utilization between individual applications or protocols. ORing Industrial Networking Corp...
  • Page 120 If the port is VLAN aware and the frame is tagged, then the frame is classified to the PCP value in the tag. Otherwise the frame is classified to the default PCP value. Controls the default DEI value ORing Industrial Networking Corp...

  • Page 121: Port Tag Remaking

    Classified: use classified PCP/DEI values Mode Default: use default PCP/DEI values Mapped: use mapped versions of QoS class and DP level 5.6.4 Port DSCP This page allows you to configure basic QoS Port DSCP settings for all switch ports. ORing Industrial Networking Corp...
  • Page 122 DSCP value. The remapped DSCP value is always taken from the 'DSCP Translation->Egress Remap DP0' table. Remap DP Aware: DSCP from the analyzer is remapped and the frame is remarked with a remapped DSCP value. ORing Industrial Networking Corp...

  • Page 123: Port Policing

    If Flow Control is enabled and the port is in Flow Control Flow Control mode, then pause frames are sent instead of being discarded. 5.6.6 Queue Policing This page allows you to configure Queue Policer settings for all switch ports. ORing Industrial Networking Corp...

  • Page 124: Qos Egress Port Scheduler And Shapers

    This field is only shown if at least one of the queue policers is enabled. 5.6.7 QoS Egress Port Scheduler and Shapers This page allows you to configure Scheduler and Shapers for a specific port. Strict Priority ORing Industrial Networking Corp...
  • Page 125 Check to enable port shaper for individual switch ports Configures the rate of each port shaper. The default value is 500 Port Shaper Rate This value is restricted to 100 to 1000000 when the Unit is kbps, ORing Industrial Networking Corp...
  • Page 126 1 to 3300 when the Unit is Mbps. Configures the rate of each queue shaper. The default value is Queues Shaper Unit 500. This value is restricted to 100 to 1000000 when the Unit" is ORing Industrial Networking Corp...

  • Page 127: Port Scheduler

    Click on the port number to configure the schedulers Mode Shows the scheduling mode for this port Shows the weight for this queue and port 5.6.9 Port Shaping This page provides an overview of QoS Egress Port Shapers for all switch ports. ORing Industrial Networking Corp...

  • Page 128: Dscp-Based Qos

    DSCP values are mapped to a specific QoS class and drop Trust precedence level. Frames with untrusted DSCP values are treated as a non-IP frame. QoS Class QoS class value can be any number from 0-7. Drop Precedence Level (0-1) ORing Industrial Networking Corp...

  • Page 129: Dscp Translation

    DSCP value ranges from 0 to 63. Remap DP1: controls the remapping for frames with DP level 1. You can select the DSCP value from a selected menu to which you want to remap. DSCP value ranges from 0 to 63. ORing Industrial Networking Corp...

  • Page 130: Dscp Classification

    Select the classified DSCP value (0-63) 5.6.13 QoS Control List This page allows you to edit or insert a single QoS control entry at a time. A QCE consists of several parameters. These parameters vary with the frame type you select. ORing Industrial Networking Corp...
  • Page 131 Point) values can range from 0x00 to 0xFF or Any. The default value is Any. Control Valid Control: valid values can range from 0x00 to 0xFF or Any. The default value is Any. SNAP PID: valid PID (a.k.a ethernet type) values can range from ORing Industrial Networking Corp...

  • Page 132: Qos Counters

    Valid DSCP value can be (0-63, BE, CS1-CS7, EF or AF11-AF43) or Default. Default means that the default classified value is not modified by this QCE. 5.6.14 QoS Counters This page provides the statistics of individual queues for all switch ports. ORing Industrial Networking Corp...

  • Page 133: Qcl Status

    Indicates the type of frame to look for incoming frames. Possible frame types are: Any: the QCE will match all frame type. Frame Type Ethernet: Only Ethernet frames (with Ether Type 0x600-0xFFFF) are allowed. LLC: Only (LLC) frames are allowed. ORing Industrial Networking Corp...

  • Page 134: Wred

    This page allows you to configure the Random Early Detection (RED) settings. Through different RED configuration for the queues (QoS classes) it is possible to obtain Weighted Random Early Detection (WRED) operation between queues. The settings are global for all ports in the switch. ORing Industrial Networking Corp...
  • Page 135 1-100%. Selects the unit for Max. Possible values are: Drop Probability: Max controls the drop probability just below 100% Max Unit fill level. Fill Level: Max controls the fill level where drop probability reaches 100%. ORing Industrial Networking Corp...
  • Page 136 (100 - Max) %. Frames marked with Drop Precedence Level 0 (green frames) are never dropped. The drop probability for frames increases linearly from zero (at Min average queue filling level) to Max Drop Probability or Fill Level. ORing Industrial Networking Corp...

  • Page 137: Multicast

    Ethernet switch that leads towards the Layer 3 multicast device or IGMP querier. Router Port If an aggregation member port is selected as a router port, the whole aggregation will act as a router port. Fast Leave Check to enable fast leave on the port ORing Industrial Networking Corp...
  • Page 138 When the Querier address is not set, system uses IPv4 management Querier Address address of the IP interface associated with this VLAN. When the IPv4 management address is not set, system uses the first available IPv4 management address. ORing Industrial Networking Corp...
  • Page 139 Unsolicited Report Interval. The Unsolicited Report Interval is the time between repetitions of a host's initial report of membership in a group. The allowed range is 0 to 31744 seconds, default unsolicited report interval is 1 second. ORing Industrial Networking Corp...
  • Page 140 Indicates whether a specific port is a router port or not Groups Information of IGMP Snooping Entries in the IGMP Group Table are shown on this page. The IGMP Group Table is sorted first by VLAN ID, and then by group. ORing Industrial Networking Corp...
  • Page 141 Group Address) basis. It can be either Include or Exclude. IP Address of the source. Currently, the maximum number of IPv4 source address for filtering Source Address (per group) is 8. When there is no any source filtering address, the text "None" is ORing Industrial Networking Corp...

  • Page 142: Mld Snooping

    You can inspect the rules of the designated profile by using the Management following button: Button : List the rules associated with the designated profile. 5.7.2 MLD Snooping This page provides IGMP Snooping related configurations. Label Description ORing Industrial Networking Corp...
  • Page 143 The >> will use the last entry of the currently displayed entry as a basis for the next lookup. When the end is reached, the text No more entries is shown in the displayed table. Use the |<< button to start over. ORing Industrial Networking Corp...
  • Page 144 The allowed range is 0 (best effort) to 7 (highest), default interface priority value is 0. Robustness Variable. The Robustness Variable allows tuning for the expected packet loss on a network. The allowed range is 1 to 255, default robustness variable value is 2. Query Interval. ORing Industrial Networking Corp...
  • Page 145 Description The VLAN ID of the entry VLAN ID Querier Version Active Querier version Active Host version Host Version Querier Status Shows the Querier status as ACTIVE or IDLE Querier Receive The number of transmitted Querier ORing Industrial Networking Corp...
  • Page 146 (Source-Filtered Multicast) Information Table also contains the SSM (Source-Specific Multicast) information. This table is sorted first by VLAN ID, then by group, and then by Port. Different source addresses belong to the same group are treated as single entry. ORing Industrial Networking Corp...

  • Page 147: Mvr

    : List the rules associated with the designated profile. 5.7.3 MVR This page provides MVR related configurations.The MVR feature enables multicast traffic forwarding on the Multicast VLANs. In a multicast television application, a PC or a network television or a set-top box can receive ORing Industrial Networking Corp...
  • Page 148 MVR VLAN name can be edited for the existing MVR VLAN entries or it can be added to the new entries. IGMP Address Define the IPv4 address as source address used in IP header ORing Industrial Networking Corp...
  • Page 149 Receiver: Configure a port as a receiver port if it is a subscriber port and should only receive multicast data. It does not receive data unless it becomes a member of the multicast group by issuing ORing Industrial Networking Corp...
  • Page 150 Report’s Received respectively. The number of Received IGMPv1 Join's and MLDv2 Report's, IGMPv3 / MLDv2 Report’s Received respectively. IGMPv2 / MLDv1 The number of Received IGMPv2 Leave's and MLDv1 Done's, Leave’s Received respectively. MVR Channel Group ORing Industrial Networking Corp...
  • Page 151 Source Address field. Type Indicates the Type. It can be either Allow or Deny. Indicates whether data plane destined to the specific group address Hardware Filter from the source IPv4/IPv6 address could be handled by chip or not. ORing Industrial Networking Corp...

  • Page 152: Security

    Active Indicates stream check status. Possible statuses are: Stream Check ---: disable Status Normal: the stream is normal. Low: the stream is getting low. Check to enable DDOS prevention. When enabled, the switch will DDoS Prevention ORing Industrial Networking Corp...
  • Page 153 Specifies alias IP address. Keep 0.0.0.0 if the device does not have Alias IP Address an alias IP address. Alive Check You can use ping commands to check port link status. If port link fails, you can set actions from the drop-down list. ORing Industrial Networking Corp...
  • Page 154 DDOS attack occurred on this port. You can configure the setting to achieve maximum protection. Label Description Mode Enables or disables DDOS prevention of the port Indicates the level of DDOS detection. Possible levels are: Low: low sensibility Sensibility Normal: normal sensibility Medium: medium sensibility ORing Industrial Networking Corp...
  • Page 155 Indicates the DDOS prevention status. Possible statuses are: ---: disables DDOS prevention Status Analyzing: analyzes packet throughput for initialization Running: analysis completes and ready for next move Attacked: DDOS attacks occur Device Description This page allows you to configure device description settings. ORing Industrial Networking Corp...
  • Page 156 IP Camera, IP Phone, Access Point, PC, PLC, and Network Video Recorder Indicates location information of the device. The information can Location Address be used for Google Mapping. Description Device descriptions Stream Check This page allows you to configure stream check settings. ORing Industrial Networking Corp...

  • Page 157: Access Management

    Check to delete the entry. It will be deleted during the next save. VLAN ID The VLAN ID for the access management entry. Start IP Address The start IP address for the access management entry. End IP Address The end IP address for the access management entry. ORing Industrial Networking Corp...

  • Page 158: Ip Source Guard

    You can enable IP source guard when DHCP snooping is enabled on an untrusted interface. With this function enabled, the switch blocks all IP traffic received on the interface except for DHCP packets allowed by DHCP snooping. Configuration ORing Industrial Networking Corp...
  • Page 159 The Start from port address, VLAN, MAC address, and IP address input fields allow you to select the starting point in the table. Label Description Port The logical port for the settings. VLAN ID The vlan id for the settings. ORing Industrial Networking Corp...

  • Page 160: Acl

    Disabled: frames received on the port are not logged The default value is Disabled. Please note that system log memory capacity and logging rate is limited. Specifies the shutdown operation of this port. The allowed values Shutdown ORing Industrial Networking Corp...
  • Page 161 These parameters vary with the frame type you have selected. First select the ingress port for the ACE, and then the frame type. Different parameter options are displayed according to the frame type you have selected. A frame matching the ACE can be configured here. ORing Industrial Networking Corp...
  • Page 162 The allowed range is the same as the switch port number range. Disabled means the port copy operation is disabled. Specifies the logging operation of the ACE. The allowed values are: Logging Enabled: frames matching the ACE are stored in the system log. ORing Industrial Networking Corp...
  • Page 163 Specific: If you want to filter a specific destination MAC address with the ACE, choose this value. A field for entering a DMAC value appears. DMAC Value When Specific is selected for the DMAC filter, you can enter a ORing Industrial Networking Corp...
  • Page 164 Specifies the tag priority for the ACE. A frame matching the ACE will Tag Priority use this tag priority. The allowed number range is 0 to 7. Any means that no tag priority is specified (tag priority is "don't-care"). ORing Industrial Networking Corp...
  • Page 165 Zero: IPv4 frames with a time-to-live value greater than zero must not be able to match this entry. IP TTL Non-zero: IPv4 frames with a time-to-live field greater than zero must be able to match this entry. Any: any value is allowed ("don't-care"). ORing Industrial Networking Corp...
  • Page 166 When Host or Network is selected for the destination IP filter, you DIP Address can enter a specific DIP address in dotted decimal notation. When Network is selected for the destination IP filter, you can enter DIP Mask a specific DIP mask in dotted decimal notation. ORing Industrial Networking Corp...
  • Page 167 When Network is selected for the sender IP filter, you can Sender IP Mask enter a specific sender IP mask in dotted decimal notation. Target IP Filter Specifies the target IP filter for the specific ACE ORing Industrial Networking Corp...
  • Page 168 Specifies whether frames will meet the action according to their ARP/RARP hardware address space (HRD) settings. 0: ARP/RARP frames where the HLD is equal to Ethernet (1) must not match this entry. 1: ARP/RARP frames where the HLD is equal to Ethernet (1) ORing Industrial Networking Corp...
  • Page 169 When Specific is selected for the ICMP code filter, you can ICMP Code Value enter a specific ICMP code value. The allowed range is 0 to 255. A frame matching the ACE will use this ICMP code value. ORing Industrial Networking Corp...
  • Page 170 Specific: if you want to filter a specific TCP/UDP destination filter Destination Filter with the ACE, you can enter a specific TCP/UDP destination value. A field for entering a TCP/UDP destination value appears. Range: if you want to filter a specific range TCP/UDP destination ORing Industrial Networking Corp...
  • Page 171 0: TCP frames where the ACK field is set must not be able to match TCP ACK this entry. 1: TCP frames where the ACK field is set must be able to match this entry. Any: any value is allowed ("don't-care"). ORing Industrial Networking Corp...

  • Page 172: Aaa

    This algorithm causes the RADIUS server to be queried up to 3 times before it is considered to be dead. The number of times the switch tries to connect to a RADIUS Retransmit server. ORing Industrial Networking Corp...
  • Page 173 RADIUS accounting server. The shared secret between the switch and the RADIUS server. The time to wait for the RADIUS server to respond. Timeout The number of times the switch tries to connect to a RADIUS Retransmit server. ORing Industrial Networking Corp...

  • Page 174: Tacacs

    The shared secret between the switch and the TACACS+ server. Specifies the host name of the server. The TACACS+ Hostname maximum supported length for the AAA RADIUS hostname is ORing Industrial Networking Corp...
  • Page 175 The number of seconds left before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled. RADIUS Details This page shows the access statistics of the authentication and accounting servers. Use the ORing Industrial Networking Corp...

  • Page 176: Nas (802.1X)

    802.1X software installed on their system. The switch uses the users' MAC addresses to authenticate against the backend server. As intruders can create counterfeit MAC addresses, MAC-based authentication is less secure than 802.1X authentication. ORing Industrial Networking Corp...
  • Page 177 EAP exchange with the RADIUS server. The 6-byte MAC address is converted to a string in the following form "xx-xx-xx-xx-xx-xx", that is, a dash (-) is used as separator between the lower-cased hexadecimal digits. The switch only ORing Industrial Networking Corp...
  • Page 178 The disadvantage is that MAC addresses can be spoofed by malicious users, equipment whose MAC address is a valid RADIUS user can be used by anyone, and only the MD5-Challenge method is supported. 802.1X and MAC-Based authentication configurations consist of two sections: system- and port-wide. ORing Industrial Networking Corp...
  • Page 179 If checked, clients are reauthenticated after the interval specified Reauthentication Period. Reauthentication Reauthentication 802.1X-enabled ports can be used to detect if a new device is Enabled plugged into a switch port. For MAC-based ports, reauthentication is only useful if the ORing Industrial Networking Corp...
  • Page 180 Unauthorized state. The hold timer does not count during an on-going authentication. The switch will ignore new frames coming from the client during the hold time. The hold time can be set to a number between 10 and 1000000 ORing Industrial Networking Corp...
  • Page 181 When authentication is complete, the RADIUS server sends a special packet containing a success or failure indication. Besides forwarding the result to the supplicant, the switch uses it to open up or block traffic on the switch port connected to the supplicant. ORing Industrial Networking Corp...
  • Page 182 Port Security module is used to secure a supplicant's MAC address once successfully authenticated. b. Multi 802.1X In port-based 802.1X authentication, once a supplicant is successfully authenticated on a port, the whole port is opened for ORing Industrial Networking Corp...
  • Page 183 "xx-xx-xx-xx-xx-xx", that is, a dash (-) is used as separator between the lower-cased hexadecimal digits. The switch only supports the MD5-Challenge authentication method, so the RADIUS server must be configured accordingly. ORing Industrial Networking Corp...
  • Page 184 Two buttons are available for each row. The buttons are only enabled when authentication is globally enabled and the port's Restart Admin State is in an EAPOL-based or MAC-based mode. Clicking these buttons will not cause settings changed on the page to take effect. ORing Industrial Networking Corp...
  • Page 185 The user name (supplicant identity) carried in the most recently received Response Identity EAPOL frame for EAPOL-based Last ID authentication, and the source MAC address from the most recently received frame from a new client for MAC-based authentication. QoS Class Shows the level of QoS. ORing Industrial Networking Corp...
  • Page 186 These supplicant frame counters are available for the following administrative states: • Force Authorized • Force Unauthorized • 802.1X EAPOL Counters These backend (RADIUS) frame counters are available for the Backend Server following administrative states: Counters • 802.1X ORing Industrial Networking Corp...
  • Page 187 RGS-R9004GP+ME User Manual • MAC-based Auth. Information about the last supplicant/client that attempts to authenticate. This information is available for the following administrative states: • 802.1X • MAC-based Auth. Last Supplicant/Client Info ORing Industrial Networking Corp...

  • Page 188: Port Security

    Mode port security features without enabling Limit Control on a given port. The maximum number of MAC addresses that can be secured on Limit this port. The maximum allowed value is 1024. If the limit is ORing Industrial Networking Corp...
  • Page 189 Re-open Note that clicking the Re-open button causes the page to be refreshed, so non-committed changes will be lost. Switch This page allows you to review the port security status. ORing Industrial Networking Corp...
  • Page 190 Shows the current state of the port which includes the following values:
 State Disabled: No user modules are currently using the Port Security service. Ready: The Port Security service is in use by at least one user ORing Industrial Networking Corp...
  • Page 191 Indicates whether the corresponding MAC address is blocked or State forwarding. If blocked, it will not be allowed to transmit or receive traffic. Shows the date and time when this MAC address was first seen Time of Addition on the port. ORing Industrial Networking Corp...

  • Page 192: Warning

    When any selected fault event happens, the Fault LED on the switch panel will light up and the electric relay will signal at the same time. 5.9.2 System Warning SYSLOG Setting The SYSLOG is a protocol that transmits event notifications across networks. ORing Industrial Networking Corp...
  • Page 193 Notice: Log messages that represent significant condition but not errors. Informational: Log informational messages. SMTP Setting SMTP (Simple Mail Transfer Protocol) is a protocol for transmitting e-mails across the Internet. For more information, please refer to RFC 821 - Simple Mail Transfer Protocol. ORing Industrial Networking Corp...
  • Page 194 SYSLOG and SMTP are two warning methods supported by the system. Check the corresponding box to enable the system event warning method you want. Please note that the checkbox cannot be checked when SYSLOG or SMTP is disabled. ORing Industrial Networking Corp...

  • Page 195: Monitor And Diag

    Shows help file 5.10 Monitor and Diag 5.10.1 MAC Table The MAC address table can be configured on this page. You can set timeouts for entries in the dynamic MAC table and configure the static MAC table here. ORing Industrial Networking Corp...
  • Page 196 An example of such a module is MAC-Based authentication under 802.1X. You can configure the port to dynamically learn the MAC address based upon the following settings: ORing Industrial Networking Corp...
  • Page 197 Entries Per Page input field. When first visited, the web page will show the first 20 entries from the beginning of the MAC Table. The first displayed will be the one with the lowest VLAN ID and the lowest MAC address found in the MAC Table. ORing Industrial Networking Corp...
  • Page 198 Type Indicates whether the entry is a static or dynamic entry The MAC address of the entry MAC Address VLAN The VLAN ID of the entry Port Members The ports that are members of the entry. ORing Industrial Networking Corp...

  • Page 199: Port Statistics

    The displayed counters include the total number for receive and transmit, the size for receive and transmit, and the errors for receive and transmit. ORing Industrial Networking Corp...
  • Page 200 The number of MAC Control frames received or transmitted on this Rx and Tx Pause port that have an opcode indicating a PAUSE operation Rx Drops The number of frames dropped due to insufficient receive buffer or ORing Industrial Networking Corp...

  • Page 201: Port Monitoring

    All frames transmitted on a given port (also known as egress or destination mirroring). Port to mirror is also known as the mirror port. Frames from ports that have either source (rx) or destination (tx) mirroring enabled are mirrored to this port. Disabled option disables mirroring. ORing Industrial Networking Corp...
  • Page 202 Select a reflector port. This port carries all the mirrored traffic at Reflector Port source switch. The switch can support VLAN-based mirroring. If you want to monitor some VLANs on the switch, you can set the selected VLANs on this Source VLANs field. ORing Industrial Networking Corp...

  • Page 203: System Log Information

    This page provides switch system log information. Label Description The ID (>= 1) of the system log entry The level of the system log entry. The following level types are supported: Level Notice: Log messages that represent significant condition but not errors. ORing Industrial Networking Corp...

  • Page 204: Veriphy Cable Diagnostics

    Updates system log entries, starting from the last entry currently >> displayed. >>| Updates system log entries, ending at the last available entry ID. 5.10.5 VeriPHY Cable Diagnostics This page allows you to perform VeriPHY cable diagnostics ORing Industrial Networking Corp...

  • Page 205: Sfp Monitor

    SFP modules with DDM (Digital Diagnostic Monitoring) function can measure the temperature of the apparatus, helping you monitor the status of connection and detect errors immediately. You can manage and set up event alarms through DDM Web interface. ORing Industrial Networking Corp...

  • Page 206: Sfp Type

    64 bytes from ::10.10.132.20: icmp_seq=0, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=1, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=2, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=3, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=4, time=0ms Sent 5 packets, received 5 OK, 0 bad ORing Industrial Networking Corp...

  • Page 207: Ipv6 Ping

    Sent 5 packets, received 0 OK, 0 bad 5.11 Configuration This setting allows you to activate or delete configuration files. Simply select the files to be activated or deleted and press the button. 5.11.1 Activate ORing Industrial Networking Corp...

  • Page 208: Delete

    You can reset the configuration of the stack switch on this page. Only the IP configuration is retained. Label Description Click to reset the configuration to factory defaults Click to return to the Port State page without resetting ORing Industrial Networking Corp...

  • Page 209: System Reboot

    You can reset the stack switch on this page. After reset, the system will boot normally as if you have powered on the devices Label Description Click to reboot device Click to return to the Port State page without rebooting ORing Industrial Networking Corp...

  • Page 210: Technical Specifications

    Quality of Service (802.1p) for real-time traffic Software Features VLAN (802.1Q) with VLAN tagging IGMP v2/v3 Snooping Application-based QoS management DOS/DDOS auto prevention Port configuration, status, statistics, monitoring, security DHCP Server/Client/Relay Modbus TCP SMTP Client NTP server ORing Industrial Networking Corp...
  • Page 211 EN 55024 (IEC/EN 61000-4-2 (ESD), IEC/EN 61000-4-3 (RS), IEC/EN 61000-4-4 (EFT), IEC/EN 61000-4-5 (Surge), IEC/EN 61000-4-6 (CS), IEC/EN 61000-4-8 (PFMF), IEC/EN 61000-4-11 (DIP)) IEC60068-2-27 Shock IEC 60068-2-31 Free Fall IEC60068-2-6 Vibration Safety EN60950-1 MTBF 412139 hrs Warranty 5 years ORing Industrial Networking Corp...

Table of Contents