Page 2
ORing warrants that all ORing products are free from defects in material and workmanship for a specified warranty period from the invoice date (5 years for most products). ORing will repair or replace products found by ORing to be defective within this warranty period, with shipment expenses apportioned by ORing and the distributor.
Started 1.1 About the RGS-R9004GP+ME RGS-R9004GP+ME-HV is Layer-3 modular managed redundant ring Ethernet switch with 6 slots, up to 48 ports, and has 4 fixed 10G SFP+ ports. With such high port density and modular design, it makes network planning easier. With completely support of Ethernet Redundancy protocol, O-Ring (recovery time <...
4 x 1G /10GBase-X + 1 x Console Port Main Host Copper Module 1. Copper port 10/100/1000 M 2. Port Link LED 3. Port ACT LED Fiber Module 1. Copper port 10/100/1000 M 2. Port Link / ACT LED ORing Industrial Networking Corp...
DC power module 2 activated Green Device operating in Ring Master mode Ring enabled Ring Green Blinking Ring structure is broken Errors occur (i.e. power failure or port Fault Amber malfunctioning) Gigabit Ethernet ports Link/Act Green Port is linked ORing Industrial Networking Corp...
Page 11
RGS-R9004GP+ME User Manual Port is downlinked Green Port is running at 1000Mbps Amber Port is running at 100Mbps Speed Green/Amber Port is running at 10Mbps SFP ports Port is linked LNK/ACT Green Blinking Transmitting data ORing Industrial Networking Corp...
RGS-R9004GP+ME User Manual ardware Installation The switch comes with two rack-mount kits to allow you to fasten the switch to a rack in any environments.(2U) ORing Industrial Networking Corp...
Step 1: insert the negative/positive wires into the V-/V+ terminals, respectively. Step 2: to keep the DC wires from pulling loose, use a small flat-blade screwdriver to tighten the wire-clamp screws on the front of the terminal block connector. ORing Industrial Networking Corp...
With 10/100/1000Base-T(X) cables, pins 1 and 2 are used for transmitting data, and pins 3 and 6 are used for receiving data. 10/100Base-T(X) RJ-45 Port Pin Assignments: Pin Number Assignment 1000Base-T RJ-45 Port Pin Assignments: Pin Number Assignment BI_DA+ BI_DA- BI_DB+ BI_DC+ BI_DC- BI_DB- BI_DD+ BI_DD- ORing Industrial Networking Corp...
For information about the port setting, please refer to 4.1.2 Configurations. 3. Connect the last switch to the first switch to form a ring topology. ORing Industrial Networking Corp...
Page 17
For more information on port setting, please refer to 4.1.2 Configurations. Once the setting is completed, one of the connections will act as the main path while the other will act as the backup path. ORing Industrial Networking Corp...
Page 18
(see 4.1.2 Configurations). 3. Once the setting is completed, one of the connections will act as the main path, and the other as the backup path. ORing Industrial Networking Corp...
Page 19
RGS-R9004GP+ME User Manual ORing Industrial Networking Corp...
4.1 O-Ring 4.1.1 Introduction O-Ring is ORing's proprietary redundant ring technology, with recovery time of less than 10 milliseconds and up to 250 nodes. The ring protocols identify one switch as the master of the network, and then automatically block packets from traveling through any of the network’s redundant loops.
Page 21
RSTP mode. Click to apply the configurations. Apply Note: due to heavy loading, setting one switch as ring master and coupling ring at the same time is not recommended. ORing Industrial Networking Corp...
RGS-R9004GP+ME User Manual 4.2 O-Chain 4.2.1 Introduction O-Chain is ORing’s revolutionary network redundancy technology which enhances network redundancy for any backbone networks, providing ease-of-use and maximum fault-recovery swiftness, flexibility, compatibility, and cost-effectiveness in a set of network redundancy topologies. The self-healing Ethernet technology designed for distributed and complex industrial networks enables the network to recover in less than 10ms for up to 250 switches if at any time a segment of the chain fails.
4.3 Open-Ring 4.3.1 Introduction Open-Ring is a technology developed by ORing to enhance ORing switches’ interoperability with other vendors’ products. With this technology, you can add any ORing switches to the network based on other ring technologies. 4.3.2 Configurations ORing Industrial Networking Corp...
Compared to STP which recovers a link in 30 to 50 seconds, RSTP can shorten the time to 5 to 6 seconds. Label Description The version of the STP protocol. Valid values include STP, RSTP Protocol Version and MSTP. ORing Industrial Networking Corp...
This page allows you to examine and change the configurations of current MSTI ports. A MSTI port is a virtual port, which is instantiated separately for each active CIST (physical) port for each MSTI instance configured and applicable for the port. The MSTI instance must be ORing Industrial Networking Corp...
A VLAN can only be VLANS Mapped mapped to one MSTI. An unused MSTI will be left empty (ex. without any mapped VLANs). Priority This page allows you to examine and change the configurations of current STP MSTI bridge ORing Industrial Networking Corp...
CIST, even if it is assigned to an MSTI. All VLANs that are not members of particular MSTIs are members of the CIST. ORing Industrial Networking Corp...
If set, spanning trees will lose connectivity. It can be set by a network administrator to prevent bridges outside a core region of the network from influencing the active spanning tree topology because those bridges are not under the full control of the administrator. This ORing Industrial Networking Corp...
This page allows you to configure STA attributes for interfaces in a specific MSTI, including path cost, and port priority. You may use a different priority or path cost for ports of the same media type to indicate the preferred path. ORing Industrial Networking Corp...
Root ID: A unique identifier of the device in the Spanning Tree that this switch has been accepted as the root device, consisting of the priority and MAC address. Root Port: the number of the port on this switch that is closest ORing Industrial Networking Corp...
Page 31
Internal Root Bridge. Note that these parameters only apply to the CIST instance. Label Description Port The port identifier. The port identifier used by the RSTP protocol, consisting of Port ID the priority and the logical port index of the bridge port. ORing Industrial Networking Corp...
RSTP states. Uptime The time since the bridge port was last initialized. 4.4.6 Port Status This page shows the STA functional status of participating ports. ORing Industrial Networking Corp...
Page 33
Forward Delay parameter without receiving contradictory information. The port address table will be cleared, and the port will learn addresses. Forwarding: The port will forward packets while learning addresses. Uptime The time since the bridge port was last initialized. ORing Industrial Networking Corp...
Fast recovery mode can be set to connect multiple ports to one or more switches. The device with fast recovery mode will provide redundant links. Fast recovery mode supports 12 priorities. Only the first priority will be the active port, and the other ports with different priorities will be backup ports. ORing Industrial Networking Corp...
Page 35
Enable Activate fast recovery mode Port Ports can be set to 20 priorities. Only the port with the highest priority will be the active port. 1 is the highest priority. Apply Click to activate the configurations. ORing Industrial Networking Corp...
Type http:// and the IP address of the switch. Press Enter. A login screen appears. Type in the username and password. The default username and password is admin. Click Enter or OK button, the management Web page appears. ORing Industrial Networking Corp...
Page 37
After logging in, you can see the information of the switch as below. On the left hand side of the management interface shows links to various settings. You can click on the links to access the configuration pages of different functions. ORing Industrial Networking Corp...
The allowed string length is 0 to 255, and only ASCII characters from 32 to 126 are allowed. Click to save changes. Save Click to undo any changes made locally and revert to previously Reset saved values. ORing Industrial Networking Corp...
The management client for which the configuration below applies. Methods Method can be set to one of the following values: .no: Command authorization is disabled. User is granted access to CLI commands according to his privilege level. ORing Industrial Networking Corp...
Enable exec (login) accounting. 5.1.3 Users Configuration This page provides an overview of the current users. Currently the only way to login as another user on the web server is to close and reopen the browser. ORing Industrial Networking Corp...
Page 41
15 can be used for an administrator account, privilege level 10 for a standard user account and privilege level 5 for a guest account. Privilege Levels This page provides an overview of the privilege levels. ORing Industrial Networking Corp...
Page 42
Every group has an authorization Privilege level for the following Privilege Levels groups: configuration read-only, configuration/execute read-write, status/statistics read-only, status/statistics read-write (e.g. for clearing of statistics). User Privilege should be same or greater than the authorization Privilege level to have the access to that group. ORing Industrial Networking Corp...
From this DHCPv4 interface: Specify from which DHCPv4-enabled interface a provided DNS server should be preferred. Configured IPv6: Explicitly provides the valid IPv6 unicast (except linklocal) address of the DNS Server. Make sure the configured DNS server is reachable (e.g. via ORing Industrial Networking Corp...
Page 44
The IPv4 address of the interface in dotted decimal notation. IPv4 Address If DHCP is enabled, this field configures the fallback address. The field may be left blank if IPv4 operation on the interface is not ORing Industrial Networking Corp...
Page 45
Once the DAD (Duplicate Address Detection) detects the address duplication, the operation on the interface SHOULD be disabled. At this moment, manual intervention is required to resolve the ORing Industrial Networking Corp...
Page 46
( Only For IPv6) If the IPv6 gateway address is link-local, it must specify the next hop VLAN for the gateway. If the IPv6 gateway address is not link-local, system ignores the next hop VLAN for the gateway. ORing Industrial Networking Corp...
The gateway address of this route. Gateway Status The status flags of the route. Neighbor Cache The IP address of the entry. IP Address The Link (MAC) address for which a binding to the IP address given Link Address exist. ORing Industrial Networking Corp...
'Non-Recurring' and configure the daylight saving time duration for single time configuration. ( Default : Disabled ). Start Time Settings: Set up the start time of the daylight saving time period. End Time Settings: Set up the ending time of the daylight ORing Industrial Networking Corp...
Page 49
MEWT - Middle European Winter SWT - Swedish Winter EET - Eastern European, USSR +2 hours 2 pm Zone 1 BT - Baghdad, USSR Zone 2 +3 hours 3 pm ZP4 - USSR Zone 3 +4 hours 4 pm ORing Industrial Networking Corp...
Using a virtual router ID (VRID) address and virtual router IP (VRIP) address to represent itself, a virtual router consists of two or more physical routers, including one master router and one or more backup routers. All routers in the virtual router group share ORing Industrial Networking Corp...
Page 51
VRID: Belongs to the VRRP Group with this ID (Zero means no group) VRRP Member VRIP: Virtual Router IP. DefaultIP: If this VLAN turns to backup state from master state, this interface will recover with this IP. ORing Industrial Networking Corp...
Generate: Generate a new self-signed RSA certificate. Display the current status of certificate on the switch. Possible statuses are: Certificate Status Switch secure HTTP certificate is presented. Switch secure HTTP certificate is not presented. Switch secure HTTP certificate is generating. ORing Industrial Networking Corp...
The LLDP information valid period is set to Tx Hold multiplied by Tx Interval seconds. Valid values must be between 2 - 10 times. Tx Delay When a setting is changed (e.g. the IP address), a new LLDP ORing Industrial Networking Corp...
Page 54
Optional TLV: When checked, the "system name" is included Sys Name in LLDP information transmitted. Optional TLV: When checked, the "system description" is included Sys Descr in LLDP information transmitted. Sys Capa Optional TLV: When checked, the "system capability" is included ORing Industrial Networking Corp...
Page 55
Click to refresh the page immediately. Refresh Check to enable an automatic refresh of the page at regular Auto-refresh intervals. Port Statistics This page provides an overview of all LLDP traffic. Two types of counters are shown. Global ORing Industrial Networking Corp...
Page 56
If a port receives an LLDP frame, and the switch's internal table is Frames Discarded full, the LLDP frame will be counted and discarded. This situation is known as "too many neighbors" in the LLDP standard. LLDP ORing Industrial Networking Corp...
Page 57
(for example only advertise the voice network Count policy to permitted voice-capable devices), both in order to conserve the limited LLDPU space and to reduce security and system integrity issues that can come with inappropriate knowledge of the network policy. ORing Industrial Networking Corp...
Page 58
Network Connectivity Devices, or other types of links. Transmit TLVS It is possible to select which LLDP-MED information that shall be transmitted to the neighbors. When the checkbox is checked the information is included in the frame transmitted to the neighbor. ORing Industrial Networking Corp...
Page 59
It is possible to specify the direction to either East of the prime meridian or West of the prime meridian. Altitude should be normalized to within -2097151.9 to 2097151.9 with a maximum of 1 digits. Altitude It is possible to select between two altitude types (floors or ORing Industrial Networking Corp...
Page 60
The total number of characters for the combined civic address information must not exceed 250 characters. Note that a non-empty civic address location will use 2 extra characters in addition to the civic address location text. The 2 letter country code is not part of the 250 characters limitation. ORing Industrial Networking Corp...
Page 61
Room number - Example: 450F. Room no. Place Type Place type - Example: Office. Postal community name Postal community name - Example: Leonia. P.O Box Post office box (P.O. BOX) - Example: 12345. Additional code Additional code - Example: 1320300003. ORing Industrial Networking Corp...
Page 62
6. Control / Signalling (conditionally support a separate network policy for the media types above) A large network may support multiple VoIP policies across the entire organization, and different policies per application type. LLDP-MED allows multiple policies to be advertised per port, ORing Industrial Networking Corp...
Page 63
3. Guest Voice - support a separate 'limited feature-set' voice service for guest users and visitors with their own IP Telephony handsets and other similar appliances supporting interactive voice services. 4. Guest Voice Signalling (conditional) - for use in network ORing Industrial Networking Corp...
Page 64
Untagged indicates that the device is using an untagged frame format and as such does not include a tag header as defined by IEEE 802.1Q-2003. In this case, both the VLAN ID and the Layer 2 priority fields are ignored and only the DSCP ORing Industrial Networking Corp...
Page 65
LLDP neighbor is detected. This function applies to VoIP devices which support LLDP-MED. The columns hold the following information: Label Description Interface The interface on which the LLDP frame was received. ORing Industrial Networking Corp...
Page 66
Class. For-example will any LLDP-MED Endpoint Device claiming compliance as a Media Endpoint (Class II) also support all aspects of TIA-1057 applicable to Generic Endpoints (Class I), and any LLDP-MED Endpoint Device claiming compliance as a Communication Device (Class III) ORing Industrial Networking Corp...
Page 67
LLDP-MED Communication Endpoint (Class III) The LLDP-MED Communication Endpoint (Class III) definition is applicable to all endpoint products that act as end user communication appliances supporting IP media. Capabilities include all of the capabilities defined for the previous Generic ORing Industrial Networking Corp...
Page 68
2. Voice Signalling - for use in network topologies that require a different policy for the voice signalling than for the voice media. 3. Guest Voice - to support a separate limited feature-set voice service for guest users and visitors with their own IP ORing Industrial Networking Corp...
Page 69
TAG is indicative of whether the specified application type is using a tagged or an untagged VLAN. Can be Tagged or Untagged. Untagged: The device is using an untagged frame format and as such does not include a tag header as defined by IEEE ORing Industrial Networking Corp...
When the NTP client is enabled, the switch regularly sends a request for a time update to a configured time server. A maximum of five time servers are supported. The switch will attempt to poll each server in the configured sequence. ORing Industrial Networking Corp...
Enabled: Enable UPnP mode operation. Disabled: Disable UPnP mode operation. When the mode is enabled, two ACEs are added automatically to trap UPNP related packets to CPU. The ACEs are automatically removed when the mode is disabled. ORing Industrial Networking Corp...
100 to 86400. 5.1.14 Modbus TCP This page shows Modbus TCP support of the switch. (For more information regarding Modbus, http://www.modbus.org/ please visit Label Description Shows the existing status of the Modbus TCP function Mode ORing Industrial Networking Corp...
This page allows you to update the firmware of the switch. 5.2 DHCP 5.2.1 DHCP Server This page configures global mode and VLAN mode to enable/disable DHCP server per system and per VLAN.and per VLAN. Mode ORing Industrial Networking Corp...
Page 75
Indicate the operation mode per VLAN. Possible modes are: Mode Enabled: Enable DHCP server per VLAN. Disabled: Disable DHCP server pre VLAN. Excluded IP This page configures excluded IP addresses. DHCP server will not allocate these excluded IP addresses to DHCP client Label Description ORing Industrial Networking Corp...
Page 76
Display network number of the DHCP address pool. If "-" is displayed, it means not defined. Display subnet mask of the DHCP address pool. Subnet Mask If "-" is displayed, it means not defined. Lease Time Display lease time of the pool. ORing Industrial Networking Corp...
Page 77
Number of DHCP REQUEST messages received. REQUEST DECLINE Number of DHCP DECLINE messages received. Number of DHCP RELEASE messages received. RELEASE INFORM Number of DHCP INFORM messages received. DHCP Message Sent Counters OFFER Number of DHCP OFFER messages sent. ORing Industrial Networking Corp...
Page 78
State of binding. Possible states are Committed, Allocated, Expired. Pool Name The pool that generates the binding. Server ID Server IP address to service the binding. Declined IP Display IP addresses declined by DHCP clients. Label Description Declined IP List of IP addresses declined. ORing Industrial Networking Corp...
ID 1, and port No. 8. The option 82 remote ID value equals to the switch MAC address. The modes include: Enabled: activate DHCP relay information. When DHCP relay information is enabled, the agent inserts specific information (option 82) into a DHCP message when forwarding to a DHCP ORing Industrial Networking Corp...
Page 80
Remote ID missing. The number of packets whose Circuit ID do not match the Receive Bad Circuit ID known circuit ID The number of packets whose Remote ID do not match the Receive Bad Remote ID ORing Industrial Networking Corp...
Enabled: Enable DHCP snooping mode operation. When DHCP snooping mode operation is enabled, the DHCP request messages will be forwarded to trusted ports and only allow reply packets from trusted ports. Disabled: Disable DHCP snooping mode operation. ORing Industrial Networking Corp...
Page 82
This page provides statistics for DHCP snooping. Notice that the normal forward per-port TX statistics isn't increased if the incoming DHCP packet is done by L3 forwarding mechanism. And clear the statistics on specific port may not take effect on global statistics since it gathers the different layer overview. ORing Industrial Networking Corp...
Page 83
The number of lease query (option 53 with value 10) packets Query received and transmitted. The number of lease unassigned (option 53 with value 11) Lease Unassigned packets received and transmitted. The number of lease unknown (option 53 with value 12) packets Lease ORing Industrial Networking Corp...
Possible speeds are: Configured Link Speed Disabled - Disables the switch port operation. Auto - Port auto negotiating speed with the link partner and selects the highest speed that is compatible with the link partner. ORing Industrial Networking Corp...
Page 85
Advertise Speed (10M 100M 1G) to the link partner. By default port will advertise all the supported speeds if speed is set as Auto. Flow Control When Auto Speed is selected on a port, this section ORing Industrial Networking Corp...
Page 86
(indicating which protocol is encapsulated in the payload of the frame). If "frame length check" is enabled, frames with payload size less than 1536 bytes are dropped, if the EtherType/Length field doesn't match the actually payload length. If "frame ORing Industrial Networking Corp...
IP address, or uncheck to disable. By default, IP Address is enabled. TCP/UDP Port Calculates the destination port of the frame. You can check this Number box to enable the TCP/UDP port number, or uncheck to disable. By default, TCP/UDP Port Number is enabled. ORing Industrial Networking Corp...
Page 88
This page allows you to enable LACP functions to group ports together to form single virtual links and change associated settings, thereby increasing the bandwidth between the switch and other LACP-compatible devices. ORing Industrial Networking Corp...
Page 89
Lower number means greater priority. LACP System Status This page provides a status overview for all LACP instances. ORing Industrial Networking Corp...
Page 90
LACP is not enabled or the port link is down. Backup means the port cannot join in the aggregation group unless other ports are removed. The LACP status is disabled. The key assigned to the port. Only ports with the same key can be ORing Industrial Networking Corp...
Page 91
The number of unknown or illegal LACP frames discarded at each port. Refresh Click to refresh the page immediately Check to enable an automatic refresh of the page at regular Auto-refresh intervals Clear Click to clear the counters for all ports ORing Industrial Networking Corp...
Configures the action to take when a loop is detected. Valid values include Shutdown Port, Shutdown Port, and Log or Log Only. Tx Mode Controls whether the port is actively generating loop protection PDUs or only passively look for looped PDUs. ORing Industrial Networking Corp...
200, and 300: 1,10-13,200,300. Spaces are allowed in between the delimiters. This field specifies ethertype/TPID (specified Ethertype for Custom hexadecimal) used for Custom S-ports. The setting is in force S-ports for all ports whose Port Type is set to S-Custom-Port. Port VLAN Configuration ORing Industrial Networking Corp...
Page 94
By default, a trunk port is member of all VLANs (1-4095) The VLANs that a trunk port is member of may be limited by the use of Allowed VLANs ORing Industrial Networking Corp...
Page 95
VLAN tag is used to classify the frame on Port Type ingress to a particular VLAN, and if so, which TPID it reacts on. Likewise, on egress, the Port Type determines the TPID of the tag, if a tag is required. ORing Industrial Networking Corp...
Page 96
VLAN that the port is not a member of get Ingress Filtering discarded. If ingress filtering is disabled, frames classified to a VLAN that the port is not a member of are accepted and forwarded to the ORing Industrial Networking Corp...
Page 97
A port may be configured to never become member of one or more VLANs. This is particularly useful when dynamic VLAN Forbidden VLANs protocols like MVRP and GVRP must be prevented from dynamically adding ports to VLANs. ORing Industrial Networking Corp...
If a port is in the forbidden port list and at the same time attempted included in the VLAN, the following image will be displayed: . The port will not be a member of the VLAN in this case. ORing Industrial Networking Corp...
Frame Type a given user wants to configure on the port. The field is empty if not overridden by the selected user. Port VLAN ID Shows the Port VLAN ID (PVID) that a given user wants the ORing Industrial Networking Corp...
VLAN unaware and members of VLAN 1 and private VLAN 1. A VLAN-unaware port can only be a member of one VLAN, but it can be a member of multiple private VLANs. ORing Industrial Networking Corp...
Page 101
Click OK to discard the incorrect entry, or click Cancel to return to the editing and make a correction. The private VLAN is enabled when you click Save. The Delete button can be used to undo the addition of new private VLANs. ORing Industrial Networking Corp...
The default is 60cs. LeaveAll-time is a value in the range of 1000-5000cs, i.e. in units of one hundredth of a second. The default is 1000cs. Max number of VLANs When GVRP is enabled, a maximum number of VLANs ORing Industrial Networking Corp...
The logical port that is to be configured. Mode can be either 'Disabled' or 'GVRP enabled'. These values turn the Mode GVRP feature off or on respectively for the port in question. 5.5 SNMP 5.5.1 SNMP System Configurations ORing Industrial Networking Corp...
Indicates the SNMPv3 engine ID. The string must contain an even number between 10 and 64 hexadecimal digits, but all-zeros and Engine ID all-'F's are not allowed. Change of the Engine ID will clear all original local users. 5.5.2 Trap SNMP Trap Detailed Configuration ORing Industrial Networking Corp...
Page 105
Indicates the SNMP trap destination IPv6 address. IPv6 address is in 128-bit records represented as eight fields of up to four hexadecimal ORing Industrial Networking Corp...
Page 106
10 and 64, but all-zeros and all-'F's are not allowed. Indicates the SNMP trap security name. SNMPv3 traps and informs Trap Security using USM for authentication and privacy. A unique security name is Name needed when traps and informs are enabled. SNMP Trap Event ORing Industrial Networking Corp...
Indicates the Switch group's traps. Possible traps are: Switch STP: Enable/disable STP trap. RMON: Enable/disable RMON trap. 5.5.3 SNMP Community Configurations This page allows you to configure SNMPv3 community table. The entry index key is Community. ORing Industrial Networking Corp...
User Name to. The allowed string length is 1 to 32, and only ASCII characters from 33 to 126 are allowed. Indicates the security model that this entry should belong to. Security Level Possible security models include: ORing Industrial Networking Corp...
8 to 32, and only ASCII characters from 33 to 126 are allowed. 5.5.5 SNMP Group Configurations This page allows you to configure SNMPv3 group table. The entry index keys are Security Model and Security Name. ORing Industrial Networking Corp...
SNMP View Configurations This page allows you to configure SNMPv3 view table. The entry index keys are View Name and OID Subtree. Label Description Delete Check to delete the entry. It will be deleted during the next save. ORing Industrial Networking Corp...
33 to 126 are allowed. Indicates the security model that this entry should belong to. Possible security models include: any: Accepted any security model (v1|v2c|usm). Security Model v1: Reserved for SNMPv1. v2c: Reserved for SNMPv2c. usm: User-based Security Model (USM). ORing Industrial Networking Corp...
1000000*(switch ID-1), for example, if the port is switch 3 port 5, the value is 2000005. History Configuration Label Description Delete Check to delete the entry. It will be deleted during the next save. ORing Industrial Networking Corp...
Page 113
InUnknownProtos: the number of the inbound packets that were discarded because of the unknown or un-support protocol. OutOctets: The number of octets transmitted out of the interface , ORing Industrial Networking Corp...
Page 114
(default). Rising Threshold Rising threshold value (-2147483648-2147483647). Rising Index Rising event index (1-65535). Falling Threshold Falling threshold value (-2147483648-2147483647) Falling Index Falling event index (1-65535). Event Configuration Label Description ORing Industrial Networking Corp...
Page 115
FCS octets) of between 64 and 1518 CRC Errors octets, inclusive, but had either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a ORing Industrial Networking Corp...
Page 116
The value of sysUpTime at the start of the interval over which this Sample Start sample was measured. The total number of events in which packets were dropped by the Drop probe due to lack of resources. ORing Industrial Networking Corp...
Page 117
Coll. segment. The best estimate of the mean physical layer network utilization on Utilization this interface during this sampling interval, in hundredths of a percent. Alarm Status Label Description Indicates the index of Alarm control entry. ORing Industrial Networking Corp...
The rate is 2^n, where n is equal to or less than 15, or "No Limit". The unit of the rate can be either pps (packets per second) or kpps (kilopackets per second). The configuration indicates ORing Industrial Networking Corp...
2K, 4K, 8K, 16K, 32K, 64K, 128K, 256K, 512K, or 1024K. Rate The 1 kpps is actually 1002.1 pps. 5.6.2 Port Classification QoS is an acronym for Quality of Service. It is a method to achieve efficient bandwidth utilization between individual applications or protocols. ORing Industrial Networking Corp...
Page 120
If the port is VLAN aware and the frame is tagged, then the frame is classified to the PCP value in the tag. Otherwise the frame is classified to the default PCP value. Controls the default DEI value ORing Industrial Networking Corp...
Classified: use classified PCP/DEI values Mode Default: use default PCP/DEI values Mapped: use mapped versions of QoS class and DP level 5.6.4 Port DSCP This page allows you to configure basic QoS Port DSCP settings for all switch ports. ORing Industrial Networking Corp...
Page 122
DSCP value. The remapped DSCP value is always taken from the 'DSCP Translation->Egress Remap DP0' table. Remap DP Aware: DSCP from the analyzer is remapped and the frame is remarked with a remapped DSCP value. ORing Industrial Networking Corp...
If Flow Control is enabled and the port is in Flow Control Flow Control mode, then pause frames are sent instead of being discarded. 5.6.6 Queue Policing This page allows you to configure Queue Policer settings for all switch ports. ORing Industrial Networking Corp...
This field is only shown if at least one of the queue policers is enabled. 5.6.7 QoS Egress Port Scheduler and Shapers This page allows you to configure Scheduler and Shapers for a specific port. Strict Priority ORing Industrial Networking Corp...
Page 125
Check to enable port shaper for individual switch ports Configures the rate of each port shaper. The default value is 500 Port Shaper Rate This value is restricted to 100 to 1000000 when the Unit is kbps, ORing Industrial Networking Corp...
Page 126
1 to 3300 when the Unit is Mbps. Configures the rate of each queue shaper. The default value is Queues Shaper Unit 500. This value is restricted to 100 to 1000000 when the Unit" is ORing Industrial Networking Corp...
Click on the port number to configure the schedulers Mode Shows the scheduling mode for this port Shows the weight for this queue and port 5.6.9 Port Shaping This page provides an overview of QoS Egress Port Shapers for all switch ports. ORing Industrial Networking Corp...
DSCP values are mapped to a specific QoS class and drop Trust precedence level. Frames with untrusted DSCP values are treated as a non-IP frame. QoS Class QoS class value can be any number from 0-7. Drop Precedence Level (0-1) ORing Industrial Networking Corp...
DSCP value ranges from 0 to 63. Remap DP1: controls the remapping for frames with DP level 1. You can select the DSCP value from a selected menu to which you want to remap. DSCP value ranges from 0 to 63. ORing Industrial Networking Corp...
Select the classified DSCP value (0-63) 5.6.13 QoS Control List This page allows you to edit or insert a single QoS control entry at a time. A QCE consists of several parameters. These parameters vary with the frame type you select. ORing Industrial Networking Corp...
Page 131
Point) values can range from 0x00 to 0xFF or Any. The default value is Any. Control Valid Control: valid values can range from 0x00 to 0xFF or Any. The default value is Any. SNAP PID: valid PID (a.k.a ethernet type) values can range from ORing Industrial Networking Corp...
Valid DSCP value can be (0-63, BE, CS1-CS7, EF or AF11-AF43) or Default. Default means that the default classified value is not modified by this QCE. 5.6.14 QoS Counters This page provides the statistics of individual queues for all switch ports. ORing Industrial Networking Corp...
Indicates the type of frame to look for incoming frames. Possible frame types are: Any: the QCE will match all frame type. Frame Type Ethernet: Only Ethernet frames (with Ether Type 0x600-0xFFFF) are allowed. LLC: Only (LLC) frames are allowed. ORing Industrial Networking Corp...
This page allows you to configure the Random Early Detection (RED) settings. Through different RED configuration for the queues (QoS classes) it is possible to obtain Weighted Random Early Detection (WRED) operation between queues. The settings are global for all ports in the switch. ORing Industrial Networking Corp...
Page 135
1-100%. Selects the unit for Max. Possible values are: Drop Probability: Max controls the drop probability just below 100% Max Unit fill level. Fill Level: Max controls the fill level where drop probability reaches 100%. ORing Industrial Networking Corp...
Page 136
(100 - Max) %. Frames marked with Drop Precedence Level 0 (green frames) are never dropped. The drop probability for frames increases linearly from zero (at Min average queue filling level) to Max Drop Probability or Fill Level. ORing Industrial Networking Corp...
Ethernet switch that leads towards the Layer 3 multicast device or IGMP querier. Router Port If an aggregation member port is selected as a router port, the whole aggregation will act as a router port. Fast Leave Check to enable fast leave on the port ORing Industrial Networking Corp...
Page 138
When the Querier address is not set, system uses IPv4 management Querier Address address of the IP interface associated with this VLAN. When the IPv4 management address is not set, system uses the first available IPv4 management address. ORing Industrial Networking Corp...
Page 139
Unsolicited Report Interval. The Unsolicited Report Interval is the time between repetitions of a host's initial report of membership in a group. The allowed range is 0 to 31744 seconds, default unsolicited report interval is 1 second. ORing Industrial Networking Corp...
Page 140
Indicates whether a specific port is a router port or not Groups Information of IGMP Snooping Entries in the IGMP Group Table are shown on this page. The IGMP Group Table is sorted first by VLAN ID, and then by group. ORing Industrial Networking Corp...
Page 141
Group Address) basis. It can be either Include or Exclude. IP Address of the source. Currently, the maximum number of IPv4 source address for filtering Source Address (per group) is 8. When there is no any source filtering address, the text "None" is ORing Industrial Networking Corp...
You can inspect the rules of the designated profile by using the Management following button: Button : List the rules associated with the designated profile. 5.7.2 MLD Snooping This page provides IGMP Snooping related configurations. Label Description ORing Industrial Networking Corp...
Page 143
The >> will use the last entry of the currently displayed entry as a basis for the next lookup. When the end is reached, the text No more entries is shown in the displayed table. Use the |<< button to start over. ORing Industrial Networking Corp...
Page 144
The allowed range is 0 (best effort) to 7 (highest), default interface priority value is 0. Robustness Variable. The Robustness Variable allows tuning for the expected packet loss on a network. The allowed range is 1 to 255, default robustness variable value is 2. Query Interval. ORing Industrial Networking Corp...
Page 145
Description The VLAN ID of the entry VLAN ID Querier Version Active Querier version Active Host version Host Version Querier Status Shows the Querier status as ACTIVE or IDLE Querier Receive The number of transmitted Querier ORing Industrial Networking Corp...
Page 146
(Source-Filtered Multicast) Information Table also contains the SSM (Source-Specific Multicast) information. This table is sorted first by VLAN ID, then by group, and then by Port. Different source addresses belong to the same group are treated as single entry. ORing Industrial Networking Corp...
: List the rules associated with the designated profile. 5.7.3 MVR This page provides MVR related configurations.The MVR feature enables multicast traffic forwarding on the Multicast VLANs. In a multicast television application, a PC or a network television or a set-top box can receive ORing Industrial Networking Corp...
Page 148
MVR VLAN name can be edited for the existing MVR VLAN entries or it can be added to the new entries. IGMP Address Define the IPv4 address as source address used in IP header ORing Industrial Networking Corp...
Page 149
Receiver: Configure a port as a receiver port if it is a subscriber port and should only receive multicast data. It does not receive data unless it becomes a member of the multicast group by issuing ORing Industrial Networking Corp...
Page 150
Report’s Received respectively. The number of Received IGMPv1 Join's and MLDv2 Report's, IGMPv3 / MLDv2 Report’s Received respectively. IGMPv2 / MLDv1 The number of Received IGMPv2 Leave's and MLDv1 Done's, Leave’s Received respectively. MVR Channel Group ORing Industrial Networking Corp...
Page 151
Source Address field. Type Indicates the Type. It can be either Allow or Deny. Indicates whether data plane destined to the specific group address Hardware Filter from the source IPv4/IPv6 address could be handled by chip or not. ORing Industrial Networking Corp...
Active Indicates stream check status. Possible statuses are: Stream Check ---: disable Status Normal: the stream is normal. Low: the stream is getting low. Check to enable DDOS prevention. When enabled, the switch will DDoS Prevention ORing Industrial Networking Corp...
Page 153
Specifies alias IP address. Keep 0.0.0.0 if the device does not have Alias IP Address an alias IP address. Alive Check You can use ping commands to check port link status. If port link fails, you can set actions from the drop-down list. ORing Industrial Networking Corp...
Page 154
DDOS attack occurred on this port. You can configure the setting to achieve maximum protection. Label Description Mode Enables or disables DDOS prevention of the port Indicates the level of DDOS detection. Possible levels are: Low: low sensibility Sensibility Normal: normal sensibility Medium: medium sensibility ORing Industrial Networking Corp...
Page 155
Indicates the DDOS prevention status. Possible statuses are: ---: disables DDOS prevention Status Analyzing: analyzes packet throughput for initialization Running: analysis completes and ready for next move Attacked: DDOS attacks occur Device Description This page allows you to configure device description settings. ORing Industrial Networking Corp...
Page 156
IP Camera, IP Phone, Access Point, PC, PLC, and Network Video Recorder Indicates location information of the device. The information can Location Address be used for Google Mapping. Description Device descriptions Stream Check This page allows you to configure stream check settings. ORing Industrial Networking Corp...
Check to delete the entry. It will be deleted during the next save. VLAN ID The VLAN ID for the access management entry. Start IP Address The start IP address for the access management entry. End IP Address The end IP address for the access management entry. ORing Industrial Networking Corp...
You can enable IP source guard when DHCP snooping is enabled on an untrusted interface. With this function enabled, the switch blocks all IP traffic received on the interface except for DHCP packets allowed by DHCP snooping. Configuration ORing Industrial Networking Corp...
Page 159
The Start from port address, VLAN, MAC address, and IP address input fields allow you to select the starting point in the table. Label Description Port The logical port for the settings. VLAN ID The vlan id for the settings. ORing Industrial Networking Corp...
Disabled: frames received on the port are not logged The default value is Disabled. Please note that system log memory capacity and logging rate is limited. Specifies the shutdown operation of this port. The allowed values Shutdown ORing Industrial Networking Corp...
Page 161
These parameters vary with the frame type you have selected. First select the ingress port for the ACE, and then the frame type. Different parameter options are displayed according to the frame type you have selected. A frame matching the ACE can be configured here. ORing Industrial Networking Corp...
Page 162
The allowed range is the same as the switch port number range. Disabled means the port copy operation is disabled. Specifies the logging operation of the ACE. The allowed values are: Logging Enabled: frames matching the ACE are stored in the system log. ORing Industrial Networking Corp...
Page 163
Specific: If you want to filter a specific destination MAC address with the ACE, choose this value. A field for entering a DMAC value appears. DMAC Value When Specific is selected for the DMAC filter, you can enter a ORing Industrial Networking Corp...
Page 164
Specifies the tag priority for the ACE. A frame matching the ACE will Tag Priority use this tag priority. The allowed number range is 0 to 7. Any means that no tag priority is specified (tag priority is "don't-care"). ORing Industrial Networking Corp...
Page 165
Zero: IPv4 frames with a time-to-live value greater than zero must not be able to match this entry. IP TTL Non-zero: IPv4 frames with a time-to-live field greater than zero must be able to match this entry. Any: any value is allowed ("don't-care"). ORing Industrial Networking Corp...
Page 166
When Host or Network is selected for the destination IP filter, you DIP Address can enter a specific DIP address in dotted decimal notation. When Network is selected for the destination IP filter, you can enter DIP Mask a specific DIP mask in dotted decimal notation. ORing Industrial Networking Corp...
Page 167
When Network is selected for the sender IP filter, you can Sender IP Mask enter a specific sender IP mask in dotted decimal notation. Target IP Filter Specifies the target IP filter for the specific ACE ORing Industrial Networking Corp...
Page 168
Specifies whether frames will meet the action according to their ARP/RARP hardware address space (HRD) settings. 0: ARP/RARP frames where the HLD is equal to Ethernet (1) must not match this entry. 1: ARP/RARP frames where the HLD is equal to Ethernet (1) ORing Industrial Networking Corp...
Page 169
When Specific is selected for the ICMP code filter, you can ICMP Code Value enter a specific ICMP code value. The allowed range is 0 to 255. A frame matching the ACE will use this ICMP code value. ORing Industrial Networking Corp...
Page 170
Specific: if you want to filter a specific TCP/UDP destination filter Destination Filter with the ACE, you can enter a specific TCP/UDP destination value. A field for entering a TCP/UDP destination value appears. Range: if you want to filter a specific range TCP/UDP destination ORing Industrial Networking Corp...
Page 171
0: TCP frames where the ACK field is set must not be able to match TCP ACK this entry. 1: TCP frames where the ACK field is set must be able to match this entry. Any: any value is allowed ("don't-care"). ORing Industrial Networking Corp...
This algorithm causes the RADIUS server to be queried up to 3 times before it is considered to be dead. The number of times the switch tries to connect to a RADIUS Retransmit server. ORing Industrial Networking Corp...
Page 173
RADIUS accounting server. The shared secret between the switch and the RADIUS server. The time to wait for the RADIUS server to respond. Timeout The number of times the switch tries to connect to a RADIUS Retransmit server. ORing Industrial Networking Corp...
The shared secret between the switch and the TACACS+ server. Specifies the host name of the server. The TACACS+ Hostname maximum supported length for the AAA RADIUS hostname is ORing Industrial Networking Corp...
Page 175
The number of seconds left before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled. RADIUS Details This page shows the access statistics of the authentication and accounting servers. Use the ORing Industrial Networking Corp...
802.1X software installed on their system. The switch uses the users' MAC addresses to authenticate against the backend server. As intruders can create counterfeit MAC addresses, MAC-based authentication is less secure than 802.1X authentication. ORing Industrial Networking Corp...
Page 177
EAP exchange with the RADIUS server. The 6-byte MAC address is converted to a string in the following form "xx-xx-xx-xx-xx-xx", that is, a dash (-) is used as separator between the lower-cased hexadecimal digits. The switch only ORing Industrial Networking Corp...
Page 178
The disadvantage is that MAC addresses can be spoofed by malicious users, equipment whose MAC address is a valid RADIUS user can be used by anyone, and only the MD5-Challenge method is supported. 802.1X and MAC-Based authentication configurations consist of two sections: system- and port-wide. ORing Industrial Networking Corp...
Page 179
If checked, clients are reauthenticated after the interval specified Reauthentication Period. Reauthentication Reauthentication 802.1X-enabled ports can be used to detect if a new device is Enabled plugged into a switch port. For MAC-based ports, reauthentication is only useful if the ORing Industrial Networking Corp...
Page 180
Unauthorized state. The hold timer does not count during an on-going authentication. The switch will ignore new frames coming from the client during the hold time. The hold time can be set to a number between 10 and 1000000 ORing Industrial Networking Corp...
Page 181
When authentication is complete, the RADIUS server sends a special packet containing a success or failure indication. Besides forwarding the result to the supplicant, the switch uses it to open up or block traffic on the switch port connected to the supplicant. ORing Industrial Networking Corp...
Page 182
Port Security module is used to secure a supplicant's MAC address once successfully authenticated. b. Multi 802.1X In port-based 802.1X authentication, once a supplicant is successfully authenticated on a port, the whole port is opened for ORing Industrial Networking Corp...
Page 183
"xx-xx-xx-xx-xx-xx", that is, a dash (-) is used as separator between the lower-cased hexadecimal digits. The switch only supports the MD5-Challenge authentication method, so the RADIUS server must be configured accordingly. ORing Industrial Networking Corp...
Page 184
Two buttons are available for each row. The buttons are only enabled when authentication is globally enabled and the port's Restart Admin State is in an EAPOL-based or MAC-based mode. Clicking these buttons will not cause settings changed on the page to take effect. ORing Industrial Networking Corp...
Page 185
The user name (supplicant identity) carried in the most recently received Response Identity EAPOL frame for EAPOL-based Last ID authentication, and the source MAC address from the most recently received frame from a new client for MAC-based authentication. QoS Class Shows the level of QoS. ORing Industrial Networking Corp...
Page 186
These supplicant frame counters are available for the following administrative states: • Force Authorized • Force Unauthorized • 802.1X EAPOL Counters These backend (RADIUS) frame counters are available for the Backend Server following administrative states: Counters • 802.1X ORing Industrial Networking Corp...
Page 187
RGS-R9004GP+ME User Manual • MAC-based Auth. Information about the last supplicant/client that attempts to authenticate. This information is available for the following administrative states: • 802.1X • MAC-based Auth. Last Supplicant/Client Info ORing Industrial Networking Corp...
Mode port security features without enabling Limit Control on a given port. The maximum number of MAC addresses that can be secured on Limit this port. The maximum allowed value is 1024. If the limit is ORing Industrial Networking Corp...
Page 189
Re-open Note that clicking the Re-open button causes the page to be refreshed, so non-committed changes will be lost. Switch This page allows you to review the port security status. ORing Industrial Networking Corp...
Page 190
Shows the current state of the port which includes the following values: State Disabled: No user modules are currently using the Port Security service. Ready: The Port Security service is in use by at least one user ORing Industrial Networking Corp...
Page 191
Indicates whether the corresponding MAC address is blocked or State forwarding. If blocked, it will not be allowed to transmit or receive traffic. Shows the date and time when this MAC address was first seen Time of Addition on the port. ORing Industrial Networking Corp...
When any selected fault event happens, the Fault LED on the switch panel will light up and the electric relay will signal at the same time. 5.9.2 System Warning SYSLOG Setting The SYSLOG is a protocol that transmits event notifications across networks. ORing Industrial Networking Corp...
Page 193
Notice: Log messages that represent significant condition but not errors. Informational: Log informational messages. SMTP Setting SMTP (Simple Mail Transfer Protocol) is a protocol for transmitting e-mails across the Internet. For more information, please refer to RFC 821 - Simple Mail Transfer Protocol. ORing Industrial Networking Corp...
Page 194
SYSLOG and SMTP are two warning methods supported by the system. Check the corresponding box to enable the system event warning method you want. Please note that the checkbox cannot be checked when SYSLOG or SMTP is disabled. ORing Industrial Networking Corp...
Shows help file 5.10 Monitor and Diag 5.10.1 MAC Table The MAC address table can be configured on this page. You can set timeouts for entries in the dynamic MAC table and configure the static MAC table here. ORing Industrial Networking Corp...
Page 196
An example of such a module is MAC-Based authentication under 802.1X. You can configure the port to dynamically learn the MAC address based upon the following settings: ORing Industrial Networking Corp...
Page 197
Entries Per Page input field. When first visited, the web page will show the first 20 entries from the beginning of the MAC Table. The first displayed will be the one with the lowest VLAN ID and the lowest MAC address found in the MAC Table. ORing Industrial Networking Corp...
Page 198
Type Indicates whether the entry is a static or dynamic entry The MAC address of the entry MAC Address VLAN The VLAN ID of the entry Port Members The ports that are members of the entry. ORing Industrial Networking Corp...
The displayed counters include the total number for receive and transmit, the size for receive and transmit, and the errors for receive and transmit. ORing Industrial Networking Corp...
Page 200
The number of MAC Control frames received or transmitted on this Rx and Tx Pause port that have an opcode indicating a PAUSE operation Rx Drops The number of frames dropped due to insufficient receive buffer or ORing Industrial Networking Corp...
All frames transmitted on a given port (also known as egress or destination mirroring). Port to mirror is also known as the mirror port. Frames from ports that have either source (rx) or destination (tx) mirroring enabled are mirrored to this port. Disabled option disables mirroring. ORing Industrial Networking Corp...
Page 202
Select a reflector port. This port carries all the mirrored traffic at Reflector Port source switch. The switch can support VLAN-based mirroring. If you want to monitor some VLANs on the switch, you can set the selected VLANs on this Source VLANs field. ORing Industrial Networking Corp...
This page provides switch system log information. Label Description The ID (>= 1) of the system log entry The level of the system log entry. The following level types are supported: Level Notice: Log messages that represent significant condition but not errors. ORing Industrial Networking Corp...
Updates system log entries, starting from the last entry currently >> displayed. >>| Updates system log entries, ending at the last available entry ID. 5.10.5 VeriPHY Cable Diagnostics This page allows you to perform VeriPHY cable diagnostics ORing Industrial Networking Corp...
SFP modules with DDM (Digital Diagnostic Monitoring) function can measure the temperature of the apparatus, helping you monitor the status of connection and detect errors immediately. You can manage and set up event alarms through DDM Web interface. ORing Industrial Networking Corp...
Sent 5 packets, received 0 OK, 0 bad 5.11 Configuration This setting allows you to activate or delete configuration files. Simply select the files to be activated or deleted and press the button. 5.11.1 Activate ORing Industrial Networking Corp...
You can reset the configuration of the stack switch on this page. Only the IP configuration is retained. Label Description Click to reset the configuration to factory defaults Click to return to the Port State page without resetting ORing Industrial Networking Corp...
You can reset the stack switch on this page. After reset, the system will boot normally as if you have powered on the devices Label Description Click to reboot device Click to return to the Port State page without rebooting ORing Industrial Networking Corp...
Need help?
Do you have a question about the RGS-R9004GP+ME-HV and is the answer not in the manual?
Questions and answers