Table of Contents Introduction and Scope Models & Specifications SD Switch Rugged, 8-Port SD Switch Rugged, 16-Port SD Switch Rugged, 24-Port SD Switch, 24-Port SD Switch, 48-Port Features Quick Start Functions Connect Ethernet Connect SFP/SFP+ Connect to the Management Port Connect to the Console Port InControl Configuration Add the Switch to InControl...
Page 3
Standalone menu options > Configure > Access Control Standalone menu options > Configure > Port Mirroring Standalone menu options > IP Multicast > IGMP Snooping Standalone menu options > Configure > Interfaces > Switch Ports LACP (802.3ad) Configuration Standalone menu options > Configure > Interfaces > External Access Standalone menu options >...
Introduction and Scope The Peplink SD Switch range is fully managed, PoE+ Gigabit switches with Cloud Intelligence to allow easy configuration and troubleshooting. Switch management is hosted on our InControl cloud management platform (public and private versions available) to allow you to configure your switch from any web browser.
Page 6
SD Switch Rugged, 8-Port Specifications LAN Interface 8x 802.3at (PoE+) GE Ports 2x SFP Ports VLAN Groups Fiber Module 2x 1 Gbps AC Adapter AC Input 100V-240V DC Output 54V# Power Input DC Power DIN 2x 54V Terminal Block: 12V - 56V DC Power Consumption 20W System, 90W PoE+ Power Budget (supports up to 240W# )
Page 8
SD Switch Rugged, 16-Port Specifications LAN Interface 8x 802.3at (PoE+) GE Ports, 8x GE Ports 2x SFP Ports VLAN Groups Fiber Module: 2x 1 Gbps Power Input AC Input 100V-240V DC Output 54V# Power Consumption 20W System, 90W PoE+ Power Budget (supports up to 240W# ) Dimensions 7.5 x 9.0 x 1.5 inches...
Page 10
SD Switch Rugged, 24-Port Specifications LAN Interface 24x 802.3at (PoE+) GE Ports, 2x SFP+ Ports VLAN Groups Fiber Module: 2x 10 Gbps Power Input Redundant DC Power DIN: 54V Terminal Block: 12V - 54V DC% Power Consumption 50W System, 120W PoE+ Power Budget (supports up to 250W%) Dimensions 10.5 x 19.1 x 1.7 inches...
Page 12
SD Switch, 24-Port Specifications LAN Interface 24x 802.3at (PoE+) GE Ports, 2x SFP+ Ports VLAN Groups Power Input 2x 100V – 240V AC Input, With Power Redundancy Integrated Power Source 850W: 3x Redundant PSU 550W: 2x Redundant PSU Power Consumption 50W System, 850W or 550W PoE+ Power Budget Dimensions...
Page 14
SD Switch, 48-Port Specifications LAN Interface 48x 802.3at (PoE+) GE Ports, 4x SFP+ Ports VLAN Groups Fiber Module 4x 10 Gbps Power Input 2x 100V – 240V AC Input, With Power Redundancy Integrated Power source 3 x Redundant PSU Power Consumption 100W System, 800W PoE+ Power Budget Dimensions...
Features Networking ● Link Aggregation (LACP) ● Spanning Tree Protocol ● Port mirroring ● Inter-VLAN routing ● DHCP snooping ● Ingress Access Control LIst ● IEEE 802.1X Port-Based Authentication ● LAN Bypass (supported on 16 port switch only) ● IGMP Hardware ●...
Functions Connect Ethernet Connect an RJ45 cable from an Internet-enabled router to a port on the Peplink SD Switch. The uplink port can be either an ethernet or SFP port. Connect an RJ45 cable from any client device to a port on the Peplink SD Switch.
Login with the default credentials: Username: admin Password: admin (This is the default admin user login of the Peplink SD Switch The admin and read-only user password can be changed at System>Admin Security.) Connect to the Console Port Access the SD-Switch via this port with CLI to get the status and info of the switch.
Through InControl, Peplink’s cloud-based device management and monitoring application, or through the web admin interface. This section describes an overview of the InControl settings and information specific to the Peplink Switch. For a complete overview of InControl options, please refer to our InControl documentation.
-has-an-internet-connection/ Enable InControl Cloud Management InControl management needs to be enabled to allow the Peplink Switch to be configured through InControl.This setting is enabled by default. The settings can be changed in the local web interface of the Switch.
Click the “ A pply Changes ” text on the top-right corner to save your changes. When InControl management has been enabled you can access the web admin interface of the switch using InControl. Select: S ettings > Remote Web Admin to connect to the Switch’s web admin interface. InControl Group Settings ...
InControl DHCP Snooping Organization > Group >Settings > Device Management Actions > DHCP Snooping Prevent u nauthorized DHCP servers offering IP addresses to DHCP clients. When this is enabled, DHCP server discovery messages will only be forwarded to switch ports that are configured with the "Allow DHCP Server"...
InControl STP Bridge Priority Spanning Tree Protocol (STP) uses Spanning Tree Algorithm to avoid network loops in layer 2 devices. STP works when multiple switches are used with redundant links avoiding Broadcast Storms, Multiple Frame Copies & Database instability. The priority field specifies the bridge priority for root switch election. The switch with the lowest bridge priority is elected as the root switch (Default value: 32768).
Page 24
VLANs configured on a device but not on InControl are "device managed", which means that InControl will not manage them. VLANs configured on both a device and InControl are "InControl managed", which means that: InControl will control their Name and Captive Portal settings. Their IP and DHCP settings will be kept intact.
Define a new VLAN To add a new VLAN click on the “Add VLAN Network” button in the Network settings > VLAN Networks section of InControl. Enter the desired parameters and click “Save” to apply the settings. Copyright & Trademarks Specifications are subject to change without notice.
By default, the default VLAN ID is set to 1. When any untagged frames or frames tagged as 1 enter into any Peplink SD Switch's trunk ports which are configured with Accept Frame Type option set to "All", the frames will be assigned to VLAN 1.
InControl Device Details The Device Details page shows the following detailed information about the the SD-Switch: Device Name Firmware Clients Serial Number Warranty Expiry Date Power Consumption Model Management port IP Fan Speed Tags Management VLAN IP Temperature Uptime Connected GE ports Power source Online Connected SFP/SFP+ ports...
Page 28
Device name, tags, location, and notes can be changed through the “Edit” link: Select the Save button on the bottom of this page to save the settings and return to the device details page. Or Cancel to discard changes and return to the Device Settings page. ...
Port details The Port List shows the available switch ports and their status. When hovering over an individual port additional information is shown for that particular port. Port 1 through 24 are RJ45 ports (ethernet) Port 25 and 26 are SFP+ ports (fibre) Port Icons Glossary port down port up - PoE not drawing power...
Port Details and Configuration Additional port details appear when clicking on an individual port from the device details page. Single or multiple ports can be selected and edited. Configurable options (port 1 - 24) Enable / disable Enable or disable the switch port PoE enable / disable Enable or disable PoE on the port Speed^...
Accept Frame Type Frame Types the port accepts (VLAN tagged only, or All) RSTP Enable or disable RSTP (Rapid Spanning Tree Protocol) Allow DHCP server* Enable or disable IP assigned by DHCP Notes Add additional notes LACP Link Aggregation ^ Configurable options on SFP+ ports are similar as above;...
LACP - Link Aggregation IEEE 802.3ad link aggregation enables you to group Ethernet interfaces to form a single link layer interface, also known as a link aggregation group (LAG). The maximum interfaces per LAG is 24. The advantages of link aggregation in contrast with connections using an individual port include: ●...
Enable Link Aggregation by selecting the checkbox next to L ink Aggregation. The LAG can be set to Active or Passive. LACP needs to be set to active on 1 side at least for LACP to work. Details of Connected Clients and Hourly, Daily, or Monthly Power Usage for each Port is shown in a graph on the same page.
View client details from client devices connected to the SD Switch. InControl Settings The InControl Settings section gives access to the Remote Web Interface of the Switch. You can also control firmware management for all devices in this InControl group and Device Tools. Settings >...
Standalone Configuration When configuring the Switch in Stand Alone mode, InControl Management needs to be disabled. After connecting to the management port and logging on to the Web Interface of the Switch, browse to System > InControl a nd configure the InControl settings to be disabled. Your device will not be allowed to communicate with InControl.
Standalone menu options > Dashboard The Device Details page shows the following detailed information about the the SD-Switch. Port Overview Firmware Fan Speed Management port IP Uptime Temperature Management VLAN IP CPU Load Power source status Model Power Consumption Port List When hovering over a port, a popup window with port details displays the following information: Copyright &...
RSTP State Link Status Traffic Link Negotiation details Standalone menu options > Configure > Network Settings VLANs are configured in the C onfigure > Network Settings s ection of the Switch web interface. The default VLAN is marked with a * in the overview. VLANs that are managed by InControl are marked with a cogwheel.
Page 38
On the following screen, enter your desired parameters. Name Lan name VLAN ID VLAN ID (1 - 4094) Default VLAN Tick checkbox to enable as default ⚠ VLAN IP Address Optional The IP address is used for accessing the web admin interface. Inter-VLAN routing ...
Subnet Mask Subnet Mask ⚠ This is a global value; when the VLAN is saved as Default VLAN it will be synchronised with InControl and applied to all the devices with a tag “SD switches” in the same InControl group! ...
Standalone menu options > Configure > DHCP Snooping When DHCP Snooping is enabled, the DHCP request messages will be forwarded to trusted ports only and only allow reply packets from trusted ports. When DHCP snooping is enabled all ports are either configured to be “trusted” or “untrusted” ports by default.
Page 41
Configurable Rule options: Name Name Enable Tickbox to enable / disable the rule Port Traffic to any port Custom Select One or more custom ports VLAN Network Select any or a specific VLAN Source Mac Address Specify one or more MAC addresses Action Allow - Deny...
After configuring your radius server with the required authentication methods, enable port authentication on the Peplink switch by selecting the checkbox and configuring the other required fields A new configurable option " Authentication Method " will appear in "Port Settings" w hen this option is ...
Standalone menu options > IP Multicast > IGMP Snooping IGMP snooping allows us to constrain our multicast traffic by listening to IGMP traffic between the router and hosts. The switch maintains a map of which links need which IP multicast streams. Multicasts may be filtered from the links which do not need them and thus controls which ports receive specific multicast traffic.
Standalone menu options > Configure > Interfaces > Switch Ports For each port, you can set PoE scheduling, port type (Trunk and Access), as well as the VLAN which they belong to. Navigate to C onfigure > Switch Ports and then click the pen icon for the port you wish to configure. Copyright &...
Page 45
On the following screen, enter your desired parameters. Configurable settings are: Name Port Name Enable checkbox Enable /Disable Port PoE Enable checkbox enable , disable PoE Port Speed Auto, 10 Mbps or 100 Mbps half-full duplex, 1GB full duplex Port Type Trunk or Access The “Accept Frame Type”...
Page 46
Authentication Method** Select authentication method** RSTP enable or disable Rapid Spanning Tree Protocol DHCP snooping Default, Trusted or untrusted Effective only when DHCP snooping is enabled Mirror Port Enable port mirroring, select what traffic gets copied to the configured Port Mirroring port; INgress, Egress or both.
LACP (802.3ad) Configuration LACP is part of the IEEE specification 802.3ad and allows you to bundle several physical ports to form a single logical channel. Bundling multiple physical ports into a single logical link allows you to increase throughput beyond the limitations of a single connection and provides redundancy in case one link goes down.
OOBM (Out-of-band-management) when it has lost all other external network access. The connected USB Modem will remain in cold standby mode until the external access connection fails to contact the Peplink InControl server. This option is only enabled when the SD Switch is configured through InControl.
Standalone menu options > System > Admin Security The Admin Security page allows you to configure the following settings: Switch Name Switch hostname Admin Username Admin username Admin Password Admin password Read-only username Read-only username User password User password Web Session Timeout A web login session will be logged out automatically when it has been idle longer than Copyright &...
Page 51
the Web Session Timeout. Before the session expires, you may click the Logout button in the Web Admin to exit the session. 0 hours 0 minutes signifies an unlimited session time. This setting should be used only in special situations as it will lower the system security level if users do not logout before closing the browser.
Page 52
Authentication by RADIUS When this option is enabled, the web admin will authenticate using an external RADIUS server. Authenticated users are treated as "admin" users with full read-write permission. Local "admin" and "user" accounts will be disabled. However, when the device fails to communicate with the RADIUS server, local accounts are enabled to allow emergency access.
You can either click the C heck for Firmware button to contact the firmware server to check for new firmware or manually upgrade the SD-Switch with a downloaded firmware file. Firmware can be downloaded from the Peplink website: https://www.peplink.com/support/downloads/ Standalone menu options >...
Page 55
The following screen will appear. Enter the desired name and click the grid to define your schedule and then click “ S ave ” . Click the “ A pply Changes ” text on the top-right corner to save your changes. Copyright &...
Standalone menu options > System > Email Notification The feature Email Notification allows email to be sent to the listed recipient email addresses when the following events take place: ● Email notification test ● A new firmware version is available ●...
The default Syslog port used and configured is UDP 514; this is an option that can be configured to use a different port. Standalone menu options > System > SNMP SNMP or Simple Network Management Protocol is an open standard that can be used to collect information about the Sd Switch..
Page 58
To add a community for either SNMPv1 or SNMPv2, click the Add SNMP Community button in the Community Name table, upon which the following screen is displayed: SNMP Community Settings Community Name This setting specifies the SNMP community name. Allowed Source Subnet Address This setting specifies a subnet from which access to the SNMP server is allowed.
Standalone menu options > System > InControl InControl is a cloud-based service which allows you to manage all of your Peplink and Pepwave devices with one unified system. With it, you can generate reports, gather statistics, and configure your devices automatically. All of this is now possible with InControl.
Standalone menu options > System > Configuration Backing up the Peplink SD Switch settings immediately after successful completion of initial setup is strongly recommended. The functionality to download and upload Peplink Switch settings is found at S ystem>Configuration .
Standalone menu options > System > Reboot Reboot the switch. For maximum reliability, the Peplink SD Switch Series stores two copies of firmware, and each copy can be a different version of firmware. You can select the firmware version you would like to reboot the device with. T he firmware marked with ...
Standalone menu options > System > Tools > Ping The ping test tool sends pings to a destination of choice. You can specify the number of pings in the field N umber of times to a maximum number of 10 times. Packet Size...
Standalone menu options > System > Tools > Wake-on-LAN Wake-on-LAN is a technology that allows a network professional to remotely power on a computer or to wake it up from sleep mode (if this is supported by the client device) Select a client from the drop-down list and click ...
field located at S ystem>Admin Security . Model This shows the model name of the device. Hardware Revision This shows the hardware version of this device. Serial Number This shows the serial number of this device. Firmware This shows the firmware version this device is currently running.
This page lists all clients on LANs accessible to the SD-Switch. It lists client IP addresses from one or more VLANs, names, current download and upload rate, MAC address, VLAN, and Port used. Assign a name to a client by clicking on the N ame field of the client and inputting a name. Standalone menu options >...
Additional information Restoration of Factory Defaults To restore the factory default settings on your Peplink SD-Switch unit, follow the steps below: 1. Locate the reset button on the back panel of the Peplink SD-Switch. 2. With a paperclip, press and keep the reset button pressed.
Important Note All previous configurations and bandwidth usage data will be lost after restoring factory default settings. Regular backup of configuration settings is strongly recommended. Additional troubleshooting resources Peplink Knowledge Base: https://forum.peplink.com/c/knowledgebase Peplink Community Forums: h ttps://forum.peplink.com/ Contact Us ...
Need help?
Do you have a question about the PEPWAVE SD Switch Series and is the answer not in the manual?
Questions and answers