Table of Contents
Advertisement
Quick Links
I
G
S
I
G
S
I
n
d
u
s
t
r
i
a
l
M
I
n
d
u
s
t
r
i
a
l
M
U
s
U
s
-
9
0
8
4
G
P
-
F
-
9
0
8
4
G
P
-
F
a
n
a
g
e
d
E
t
h
e
a
n
a
g
e
d
E
t
h
e
e
r
M
a
n
u
a
e
r
M
a
n
u
V
e
r
s
i
o
n
1
.
1
V
e
r
s
i
o
n
1
.
1
M
a
y
,
2
0
1
4
M
a
y
,
2
0
1
4
B
2
B
2
r
n
e
t
S
w
i
t
c
h
r
n
e
t
S
w
i
t
c
h
l
a
l
w
w
w
.
o
r
i
n
g
-
n
e
w
w
w
.
o
r
i
n
g
-
n
e
t
w
o
r
k
i
n
g
.
c
o
m
t
w
o
r
k
i
n
g
.
c
o
m
Advertisement
Table of Contents
Related Manuals for ORiNG IGS-9084GP-FB2-SS
Summary of Contents for ORiNG IGS-9084GP-FB2-SS
- Page 2 ORing warrants that all ORing products are free from defects in material and workmanship for a specified warranty period from the invoice date (5 years for most products). ORing will repair or replace products found by ORing to be defective within this warranty period, with shipment expenses apportioned by ORing and the distributor.
-
Page 3: Table Of Contents
Bypass Ports ..........................17 3.4.2 O-Ring/O-Chain ......................18 O-Ring ............................ 18 Redundancy ....................21 O-Ring .......................... 21 4.1.1 Introduction........................21 4.1.2 Configurations ......................21 OPEN-Ring........................23 4.2.1 Introduction........................23 4.2.2 Configurations ......................23 O-Chain ........................24 ORing Industrial Networking Corp... - Page 4 Dynamic Client List ..................53 5.2.3 Client List ....................53 5.2.4 DHCP Relay ....................53 Port Setting ....................56 5.3.1 Port Control ....................56 5.3.2 Port Trunk ....................57 5.3.4 Loop Gourd ....................62 VLAN ......................63 ORing Industrial Networking Corp...
- Page 5 IGMP Snooping Status ................100 5.7.4 Groups Information of IGMP Snooping ............. 101 Security ......................102 5.8.1 Remote Control Security Configurations ........... 102 5.8.2 Device Binding ..................102 5.8.3 ACL ......................108 5.8.4 Authentication, Authorization, and Accounting ........... 119 ORing Industrial Networking Corp...
- Page 6 Cable Diagnostics ................146 5.10.6 SFP Monitor ..................147 5.10.7 Ping ..................... 148 5.11 Synchronization .................... 149 5.12 Troubleshooting .................... 151 5.12.1 Factory Defaults ..................151 5.12.2 System Reboot ..................152 Command Line Management ..............153 ORing Industrial Networking Corp...
-
Page 7: Getting Started
C to 70 C, the device can be managed centrally via ORing’s proprietary Open-Vision platform as well as via Web-based interfaces, Telnet, and console (CLI). The switch is one of the most reliable choices for highly-managed and fiber Ethernet applications. -
Page 8: Hardware Specifications
Rigid IP-30 housing design DIN-Rail and wall mounting supported Operating temperature: -40 to 70 Storage temperature: -40 to 85 Operating humidity: 5% to 95%, non-condensing Casing: IP-30 Dimensions: 96.4 (W) x 105.5 (D) x 154 (H) mm ORing Industrial Networking Corp... -
Page 9: Hardware Overview
11. Link/action LED for SFP port 12. Bypass network port 13. Bypass monitor port 14. Console port 2.1.2 LED Color Status Description Green System power on Green Power module 1 activated Green Power module 2 activated ORing Industrial Networking Corp... -
Page 10: Top Panel
Din-rail installation. For more information on installation, please refer to 3.1 Din-rail Installation. ORing Industrial Networking Corp... - Page 11 IGS-9084GP-FB2 Series User Manual 1. Wall-mount screw holes 2. Din-rail screw holes ORing Industrial Networking Corp...
-
Page 12: Hardware Installation
Installing the switch on the DIN-rail is easy. First, screw the Din-rail kit onto the back of the switch, right in the middle of the back panel. Then slide the switch onto a DIN-rail from the Din-rail kit and make sure the switch clicks into the rail firmly. ORing Industrial Networking Corp... -
Page 13: Wall Mounting
2. Use the switch, with wall mount plates attached, as a guide to mark the correct locations of the four screws. 3. Insert four screw heads through the large parts of the keyhole-shaped apertures, and then ORing Industrial Networking Corp... -
Page 14: Wiring
8. It is advised to label the wiring to all devices in the system 3.3.1 Grounding Grounding and wire routing help limit the effects of noise due to electromagnetic interference (EMI). Run the ground connection from the ground screw to the grounding surface prior to connecting devices. ORing Industrial Networking Corp... -
Page 15: Fault Relay
Cat. 5/Cat. 5e 100-ohm UTP UTP 100 m (328ft) RJ-45 With 10/100/1000Base-T(X) cables, pins 1 and 2 are used for transmitting data, and pins 3 and 6 are used for receiving data. 10/100 Base-T(X) RJ-45 Pin Assignments: ORing Industrial Networking Corp... - Page 16 10/100 Base-T(X) MDI/MDI-X Pin Assignments: Pin Number MDI port MDI-X port TD+(transmit) RD+(receive) TD-(transmit) RD-(receive) RD+(receive) TD+(transmit) Not used Not used Not used Not used RD-(receive) TD-(transmit) Not used Not used Not used Not used 1000Base-T(X) MDI/MDI-X Pin Assignments: ORing Industrial Networking Corp...
-
Page 17: Console Port Wiring
(0 to 550M, 850 nm with 50/125 µm, 62.5/125 µm fiber) and single-mode with LC connectors. Please remember that the TX port of Switch A should be connected to the RX port of Switch B. Switch A Switch B ORing Industrial Networking Corp... -
Page 18: Bypass Ports
The IGS-9084GP-FB2 provides two sets of bypass fiber ports, giving the SFP fiber ports addition redundancy capabilities. Connect a LC fiber cable from a fiber port to a monitor port on the front panel and another LC fiber cable from the corresponding network port to another switch. ORing Industrial Networking Corp... -
Page 19: O-Ring/O-Chain
For information about the port setting, please refer to 4.1.2 Configurations. 3. Connect the last switch to the first switch to form a ring topology. ORing Industrial Networking Corp... - Page 20 RSTP network (core switches). The connection of one of the switches (Switch A or B) will act as the primary path, while the other will act as the backup path that is activated when the primary path connection fails. ORing Industrial Networking Corp...
- Page 21 (see 4.1.2 Configurations). 3. Once the setting is completed, one of the connections will act as the main path, and the other as the backup path. ORing Industrial Networking Corp...
-
Page 22: Redundancy
4.1 O-Ring 4.1.1 Introduction O-Ring is ORing's proprietary redundant ring technology, with recovery time of less than 30 milliseconds (in full-duplex Gigabit operation) or 10 milliseconds (in full-duplex Fast Ethernet operation) and up to 250 nodes. The ring protocols identify one switch as the master of the network, and then automatically block packets from traveling through any of the network’s... - Page 23 RSTP mode. Apply Click to activate the configurations. due to heavy loading, setting one switch as ring master and coupling ring at the same Note: time is not recommended. ORing Industrial Networking Corp...
-
Page 24: Open-Ring
4.2 OPEN-Ring 4.2.1 Introduction Open-Ring is a technology developed by ORing to enhance ORing switches’ interoperability with other vendors’ products. With this technology, you can add any ORing switches to the network based on other ring technologies. 4.2.2 Configurations Label... -
Page 25: O-Chain
Ring Port 4.3 O-Chain 4.3.1 Introduction O-Chain is ORing’s revolutionary network redundancy technology which enhances network redundancy for any backbone networks, providing ease-of-use and maximum fault-recovery swiftness, flexibility, compatibility, and cost-effectiveness in a set of network redundancy topologies. The self-healing Ethernet technology designed for distributed and complex... -
Page 26: Bypass
Figure 2 shows the topology consisting of switches with bypass functions. When one of the devices is unavailable, the network traffic will bypass the inactive device and continue to flow to other active devices, ensuring consistent connections. ORing Industrial Networking Corp... -
Page 27: Bypass & Ring Topology
Data will bypass the inactive switches during transmission as if they do not exist. In this case, the backup path will remain inactive and the ring topology will remain unchanged (see below). ORing Industrial Networking Corp... - Page 28 Fast Ethernet Networks Fiber Networks When a link between two switches fails following the breakdown of the switch, the backup link will be activated. Data will then be transmitted via the backup path (see below). Fast Ethernet Networks ORing Industrial Networking Corp...
-
Page 29: Mrp
Note: The maximum cable length for copper ports is 100 meters and 10km to 70km for fiber ports depending on the SFP module you install (the example here uses ORing’s SFP 1G modules which supports up to 20km). When data bypasses the inactive switch(s) to another active switch, the distance between the two active switches must be within the maximum length, otherwise transmission will fail. -
Page 30: Configurations
Network loops occur frequently in large networks as when two or more paths run to the same destination, broadcast packets may get in to an infinite loop and hence causing congestion in the network. STP can identify the best path to the destination, ORing Industrial Networking Corp... - Page 31 The second port connecting to the RSTP network Edge Port Only the edge device (connected to RSTP device) needs to specify edge port. The user must specify the edge port according to topology of network. RSTP Bridge Setting ORing Industrial Networking Corp...
- Page 32 NOTE: the calculation of the MAX Age, Hello Time, and Forward Delay Time is as follows: 2 x (Forward Delay Time value –1) > = Max Age value >= 2 x (Hello Time value +1) The following pages show the information of the root bridge, including its port status. ORing Industrial Networking Corp...
- Page 33 Specify whether this port is an edge port or a nonedge port. An edge port is not connected to any other bridge. Only edge ports and point-to-point links can rapidly transition to forwarding state. To configure the port as an edge port, set the port to True. ORing Industrial Networking Corp...
- Page 34 MSTI, even if it has the best spanning tree priority vector. Such a port will be selected as an alternate port after the root port has been selected. If set, spanning trees will lose connectivity. It ORing Industrial Networking Corp...
-
Page 35: Mstp
CIST (physical) port for each MSTI instance configured and applicable for the port. The MSTI instance must be selected before MSTI port configuration options are displayed. ORing Industrial Networking Corp... - Page 36 The valid value is between 6 through 40. Hello Time (1-10) The time interval a switch sends out the BPDU packet to check RSTP current status. The time is measured in seconds and the ORing Industrial Networking Corp...
- Page 37 To configure the port as an edge port, set the port to True. Admin Non STP The port includes the STP mathematic calculation. True is not including STP mathematic calculation, false is including the STP mathematic calculation. ORing Industrial Networking Corp...
- Page 38 The value must be a multiple of 4096 according to the protocol standard Apply Click to apply the configurations. Port Priority This page allows you to change the configurations of current MSTI bridge instance priority. ORing Industrial Networking Corp...
-
Page 39: Fast Recovery
Activate fast recovery mode Port.01 - 05 Ports can be set to 12 priorities. Only the port with the highest priority will be the active port. 1st Priority is the highest. Apply Click to activate the configurations. ORing Industrial Networking Corp... -
Page 40: Management
The login screen appears. Type in the username and password. The default username and password is admin. Click Enter or OK button and the main interface of the management page appears. Note: you can use the following default values: ORing Industrial Networking Corp... -
Page 41: Basic Settings
5.1 Basic Settings The Basic Settings page allows you to configure the basic functions of the switch. 5.1.1 System Information This page shows the general information of the switch. ORing Industrial Networking Corp... -
Page 42: Admin & Password
This page allows you to configure the system password required to access the web pages or log in from CLI. Label Description Old Password The existing password. If this is incorrect, you cannot set the new password. ORing Industrial Networking Corp... -
Page 43: Authentication
Reset saved values 5.1.4 IP Settings This page allows you to configure IP information for the switch. You can specify configure the settings manually by disabling DHCP Client. After inputting the values, click Renew and the ORing Industrial Networking Corp... -
Page 44: Ipv6 Settings
5.1.5 IPv6 Settings IPv6 is the next-generation IP that uses a 128-bit address standard. It is developed to supplement, and eventually replace the IPv4 protocol. You can configure IPv6 information of the switch on the following page. ORing Industrial Networking Corp... - Page 45 It can also represent a legally valid IPv4 address. For example, '::192.1.2.34'. Save Click to save changes Click to undo any changes made locally and revert to previously Reset saved values ORing Industrial Networking Corp...
-
Page 46: Daylight Saving Time
Select 'Recurring' and configure the Daylight Saving Time duration to repeat the configuration every year. Select 'Non-Recurring' and configure the Daylight Saving Time duration for single time configuration. ( Default : Disabled ) Start Time Settings ORing Industrial Networking Corp... - Page 47 Select the ending month. Hours Select the ending hour. Minutes Select the ending minute. Offset Settings Label Description ter the number of minutes to add during Daylight Saving Time. Week ( Range: 1 to 1440 ) ORing Industrial Networking Corp...
-
Page 48: Ttps
Label Description Indicates the selected SSH mode. The modes include: Mode Enabled: enable SSH. Disabled: disable SSH. Save Click to save changes Click to undo any changes made locally and revert to previously Reset saved values ORing Industrial Networking Corp... -
Page 49: Lldp
LLDP information received from its neighbors. LLDP Neighbor Information This page provides a status overview for all LLDP neighbors. The following table contains information for each port on which an LLDP neighbor is detected. The columns include the following information: ORing Industrial Networking Corp... - Page 50 LLDP Statistics This page provides an overview of all LLDP traffic. Two types of counters are shown. Global counters will apply settings to the whole switch stack, while local counters will apply settings to specified switches. ORing Industrial Networking Corp...
- Page 51 Chassis ID or Remote Port ID is not included in the table. Entries are removed from the table when a given port links down, an LLDP shutdown frame is ORing Industrial Networking Corp...
-
Page 52: Modbus Tcp
This page enables you to enable and disable Modbus TCP support of the switch. Label Description Mode Shows the existing status of the Modbus TCP function 5.1.11 Backup/Restore Configurations You can save/view or load switch configurations through the following pages. The configuration file is in XML format. ORing Industrial Networking Corp... -
Page 53: Firmware Update
This page allows you to set up DHCP settings for the switch. You can check the Enabled checkbox to activate the function. Once the box is checked, you will be able to input information in each column. ORing Industrial Networking Corp... -
Page 54: Dynamic Client List
You can configure the function in this page. Label Description Relay Mode Indicates the existing DHCP relay mode. The modes include: Enabled: activate DHCP relay. When DHCP relay is enabled, the ORing Industrial Networking Corp... - Page 55 Keep: keep the original relay information when a DHCP message containing the information is received. Drop: drop the package when a DHCP message containing the information is received. The relay statistics shows the information of relayed packets of the switch. ORing Industrial Networking Corp...
- Page 56 The number of received packets containing relay agent information Replace Agent Option The number of packets replaced when received messages contain relay agent information. Keep Agent Option The number of packets whose relay agent information is ORing Industrial Networking Corp...
-
Page 57: Port Setting
Auto selects the highest speed supported by the link partner Speed Disabled disables switch port configuration <> configures all ports When Auto is selected for the speed, the flow control will be Flow Control negotiated to the capacity advertised by the link partner. ORing Industrial Networking Corp... -
Page 58: Port Trunk
In addition, it is useful when a single physical link between the devices is insufficient to handle the traffic load. This page allows you to configure the aggregation hash mode and the aggregation group. ORing Industrial Networking Corp... - Page 59 By default, no ports belong to any aggregation group. Only full duplex ports can join an aggregation and the ports must be in the same speed in each group. ORing Industrial Networking Corp...
- Page 60 (10Mb = 1, 100Mb = 2, 1Gb = 3). Specific allows you to enter a user-defined value. Ports with the same key value can join in the same aggregation group, while ORing Industrial Networking Corp...
- Page 61 The format is: "Switch ID:Port". Refresh Click to refresh the page immediately Check to enable an automatic refresh of the page at regular Auto-refresh intervals LACP Status This page provides an overview of the LACP status for all ports. ORing Industrial Networking Corp...
- Page 62 The partner’s port number associated with the port Refresh Click to refresh the page immediately Check to enable an automatic refresh of the page at regular Auto-refresh intervals LACP Statistics This page provides an overview of the LACP statistics for all ports. ORing Industrial Networking Corp...
-
Page 63: Loop Gourd
Clear Click to clear the counters for all ports 5.3.4 Loop Gourd This feature prevents loop attack. When receiving loop packets, the port will be disabled automatically, preventing the loop attack from affecting other network devices. ORing Industrial Networking Corp... -
Page 64: Vlan
A VLAN can be created by partitioning a physical LAN into multiple logical LANs using a VLAN ID. You can assign switch ports to a VLAN and add new VLANs in this page. ORing Industrial Networking Corp... - Page 65 After clicking Save, the new VLAN will be enabled on the selected Add New VLAN switch stack but contains no port members. A VLAN without any port members on any stack will be deleted when you click Save. Click Delete to undo the addition of new VLANs. ORing Industrial Networking Corp...
-
Page 66: Port Configurations
VLAN of the frame, the frame will be discarded. By default, ingress filtering is disabled (no check mark). Determines whether the port accepts all frames or only Frame Type tagged/untagged frames. This parameter affects VLAN ingress processing. If the port only accepts tagged frames, untagged ORing Industrial Networking Corp... - Page 67 2. If the TPID of tagged frame is not 0x8100 the Egress Rule. (ex. 0x88A8), it will be discarded. C-port When the port receives untagged frames, an The TPID of a frame ORing Industrial Networking Corp...
- Page 68 2. If the TPID of tagged frame is not 0x88A8 the user via Ethertype (ex. 0x8100), it will be discarded. for Custom S-ports. Below are the illustrations of different port types: ORing Industrial Networking Corp...
- Page 69 IGS-9084GP-FB2 Series User Manual ORing Industrial Networking Corp...
-
Page 70: Examples Of Vlan Settings
IGS-9084GP-FB2 Series User Manual Examples of VLAN Settings VLAN Access Mode: Switch Port 7 is VLAN Access mode = Untagged 20 Port 8 is VLAN Access mode = Untagged 10 Below are the switch settings. ORing Industrial Networking Corp... - Page 71 IGS-9084GP-FB2 Series User Manual VLAN 1Q Trunk Mode: Switch Port 1 = VLAN 1Qtrunk mode = tagged 10, 20 Port 2 = VLAN 1Qtrunk mode = tagged 10, 20 Below are the switch settings. ORing Industrial Networking Corp...
- Page 72 IGS-9084GP-FB2 Series User Manual VLAN Hybrid Mode: Port 1 VLAN Hybrid mode = untagged 10 Tagged 10, 20 Below are the switch settings. ORing Industrial Networking Corp...
- Page 73 IGS-9084GP-FB2 Series User Manual VLAN QinQ Mode: VLAN QinQ mode is usually adopted when there are unknown VLANs, as shown in the figure below VLAN “X” = Unknown VLAN 9000 Series Port 1 VLAN Settings: ORing Industrial Networking Corp...
-
Page 74: Private Vlan
VLAN memberships for the switch. By default, all ports are VLAN unaware and members of VLAN 1 and private VLAN 1. Label Description Delete Check to delete the entry. It will be deleted during the next save. ORing Industrial Networking Corp... - Page 75 A check box is provided for each port of a private VLAN. When checked, port isolation is enabled for that port. Port Members When unchecked, port isolation is disabled for that port. By default, port isolation is disabled for all ports. ORing Industrial Networking Corp...
-
Page 76: Snmp
SNMPv3 community table. Indicates the SNMPv3 engine ID. The string must contain an even Engine ID number between 10 and 64 hexadecimal digits, but all-zeros and ORing Industrial Networking Corp... - Page 77 IPv6 Address syntax that can be used as a shorthand way of representing multiple 16-bit groups of contiguous zeros; but it can only appear once. It also uses a following legally IPv4 address. For example, '::192.1.2.34'. ORing Industrial Networking Corp...
-
Page 78: Snmp Community Configurations
Check to delete the entry. It will be deleted during the next save. Indicates the community access string to permit access to SNMPv3 Community agent. The allowed string length is 1 to 32, and only ASCII characters from 33 to 126 are allowed. ORing Industrial Networking Corp... -
Page 79: Snmp User Configurations
33 to 126 are allowed. Indicates the security model that this entry should belong to. Possible security models include: Security Level NoAuth, NoPriv: no authentication and none privacy Auth, NoPriv: Authentication and no privacy Auth, Priv: Authentication and privacy ORing Industrial Networking Corp... -
Page 80: Snmp Group Configurations
SNMP group uses. Each SNMP group name and security model pair must be unique. This page allows you to configure the SNMPv3 group table. The entry index keys are Security Model and Security Name. ORing Industrial Networking Corp... -
Page 81: Snmp View Configurations
View table in this page. The entry index keys are View Name and OID Subtree. Label Description Delete Check to delete the entry. It will be deleted during the next save. ORing Industrial Networking Corp... -
Page 82: Snmp Access Configurations
Accepted any security model (v1|v2c|usm). Security Model v1: Reserved for SNMPv1. v2c: Reserved for SNMPv2c. usm: User-based Security Model (USM). Security Level Indicates the security model that this entry should belong to. Possible ORing Industrial Networking Corp... -
Page 83: Traffic Prioritization
Frame types supported by the Storm Control function, including Frame Type Unicast, Multicast, and Broadcast. Status Enables or disables the given frame type Rate The rate is packet per second (pps), configure the rate as 1K, 2K, ORing Industrial Networking Corp... -
Page 84: Port Classification
QoS class that is based on the PCP value in the tag as shown below. Otherwise the frame is classified to the default QoS class. PCP value: 0 1 2 3 4 5 6 7 QoS class: 1 0 2 3 4 5 6 7 ORing Industrial Networking Corp... - Page 85 Note: this setting has no effect if the port is VLAN unaware. Tagged frames received on VLAN-unaware ports are always classified to the default QoS class and DP level. DSCP Based Click to enable DSCP-based QoS Ingress Port Classification ORing Industrial Networking Corp...
-
Page 86: Port Tag Remaking
DSCP value of the data packet and put the packet into different queues before transmission, such as high priority and most efficient transmission. With such QoS functions, you can ensure low-latency for critical traffic. This page allows you to configure DSCP settings for each port. ORing Industrial Networking Corp... - Page 87 Port egress rewriting can be one of the following options: Disable: no Egress rewrite Egress Enable: rewrite enabled without remapping Remap DP Unaware: DSCP from the analyzer is remapped and the frame is remarked with a remapped DSCP value. The ORing Industrial Networking Corp...
-
Page 88: Policing
Enable Check to enable the policer for individual switch ports Configures the rate of each policer. The default value is 500. This Rate value is restricted to 100 to 1000000 when the Unit is kbps or ORing Industrial Networking Corp... -
Page 89: Queue Policing
This page allows you to configure Scheduler and Shapers for individual ports. QoS Egress Port Scheduler and Shaper Strict Priority Strict Priority uses queues based only priority. When traffic arrives the device, traffic on the ORing Industrial Networking Corp... - Page 90 Configures the rate for each queue shaper. The default value is Queues Shaper Unit 500. This value is restricted to 100 to 1000000 when the Unit is kbps, and it is restricted to 1 to 3300 when the Unit is Mbps. ORing Industrial Networking Corp...
- Page 91 A queue is given an amount of bandwidth regardless of the incoming traffic on that port. Queue with larger weights will have more guaranteed bandwidth than others with smaller weights. ORing Industrial Networking Corp...
-
Page 92: Port Scheduler
Mbps. The default value is kbps. 5.6.7 Port Scheduler This page provides an overview of QoS Egress Port Schedulers for all switch ports. Label Description Port The switch port number to which the following settings will be ORing Industrial Networking Corp... -
Page 93: Port Shaping
Shows disabled or actual queue shaper rate - e.g. "800 Mbps" Q0~Q7 Shows disabled or actual port shaper rate - e.g. "800 Mbps" 5.6.9 DSCP-based QoS This page allows you to configure DSCP-based QoS Ingress Classification settings for all ports. ORing Industrial Networking Corp... -
Page 94: Dscp Translation
Ingress 1. Translate: Enables ingress translation of DSCP values based on the specified classification method. DSCP can be translated to any of (0-63) DSCP values. 2. Classify: Enable Classification at ingress side as defined in the ORing Industrial Networking Corp... -
Page 95: Dscp Classification
This page shows all the QCE (Quality Control Entries) for a given QCL. You can edit or add new QoS control entries in this page. A QCE consists of several parameters. These parameters vary with the frame type you select. ORing Industrial Networking Corp... - Page 96 Frame Type can be the following values: Any, Ethernet, LLC, SNAP, IPv4, and IPv6 Note: all frame types are explained below. Allow all types of frames Ethernet Valid Ethernet values can range from 0x600 to 0xFFFF or Any' but ORing Industrial Networking Corp...
- Page 97 IP protocol UDP/TCP Dport Destination TCP/UDP port: (0-65535) or Any, specific value or port range applicable for IP protocol UDP/TCP Action Parameters Class QoS class: (0-7) or Default Valid Drop Precedence Level value can be (0-1) or Default. ORing Industrial Networking Corp...
-
Page 98: Qos Counters
This page shows the QCL status by different QCL users. Each row describes the QCE that is defined. A conflict will occur if a specific QCE is not applied to the hardware due to hardware limitations. The maximum number of QCEs is 256 on each switch. ORing Industrial Networking Corp... -
Page 99: Multicast
VLAN. This page allows you to set up IGMP snooping configurations. ORing Industrial Networking Corp... -
Page 100: Vlan Configurations Of Igmp Snooping
Per Page field. By default, the page will show the first 20 entries from the beginning of the VLAN table. The first displayed will be the one with the lowest VLAN ID found in the VLAN Table. ORing Industrial Networking Corp... -
Page 101: Igmp Snooping Status
Check to enable IGMP snooping for individual VLAN. Up to 32 Enable VLANs can be selected. IGMP Querier Check to enable the IGMP Querier in the VLAN 5.7.3 IGMP Snooping Status This page provides IGMP snooping status. ORing Industrial Networking Corp... -
Page 102: Groups Information Of Igmp Snooping
Information about entries in the IGMP Group Table is shown in this page. The IGMP Group Table is sorted first by VLAN ID, and then by group. Label Description VLAN ID The VLAN ID of the group Groups The group address of the group displayed ORing Industrial Networking Corp... -
Page 103: Security
Check to delete entries 5.8.2 Device Binding Device binding is ORing's proprietary technology which binds the IP/MAC address of a device with a specified Ethernet port. If the IP/MAC address of the device connected to the Ethernet port does not conform to the binding requirements, the device will be locked for security concerns. - Page 104 Device Specifies MAC address of the device Address Advanced Configurations Alias IP Address This page provides alias IP address configuration. Some devices might have more than one IP addresses. You could specify other IP addresses here. ORing Industrial Networking Corp...
- Page 105 Label Description Link Change Disables or enables the port Only log it Simply sends logs to the log server Shunt Down the Disables the port Port Reboot Device Disables or enables PoE power ORing Industrial Networking Corp...
- Page 106 If packet type is UDP (or TCP), please choose the socket direction Filter (Destination/Source). Action Indicates the action to take when DDOS attacks occur. Possible ORing Industrial Networking Corp...
- Page 107 Indicates the DDOS prevention status. Possible statuses are: ---: disables DDOS prevention Status Analyzing: analyzes packet throughput for initialization Running: analysis completes and ready for next move Attacked: DDOS attacks occur Device Description This page allows you to configure device description settings. ORing Industrial Networking Corp...
- Page 108 Label Description Mode Enables or disables stream monitoring of the port Indicates the action to take when the stream gets low. Possible actions are: Action ---: no action Log it: simply logs the event ORing Industrial Networking Corp...
-
Page 109: Acl
Shutdown Enabled: if a frame is received on the port, the port will be disabled. Disabled: port shut down is disabled. The default value is Disabled. Counter Counts the number of frames that match this ACE. ORing Industrial Networking Corp... - Page 110 Label Description Indicates the ingress port to which the ACE will apply. Ingress Port Any: the ACE applies to any port Port n: the ACE applies to this port number, where n is the number of ORing Industrial Networking Corp...
- Page 111 Specifies the shutdown operation of the ACE. The allowed values are: Shutdown Enabled: if a frame matches the ACE, the ingress port will be disabled. Disabled: port shutdown is disabled for the ACE. Counter Indicates the number of times the ACE matched by a frame. ORing Industrial Networking Corp...
- Page 112 ACE, choose this value. A field for entering a DMAC value appears. When Specific is selected for the DMAC filter, you can enter a specific destination address. legal format DMAC Value "xx-xx-xx-xx-xx-xx". Frames matching the ACE will use this DMAC value. ORing Industrial Networking Corp...
- Page 113 UDP: selects UDP to filter IPv4 UDP protocol frames. Extra fields for defining UDP parameters will appear. For more details of these fields, please refer to the help file. TCP: selects TCP to filter IPv4 TCP protocol frames. Extra fields for ORing Industrial Networking Corp...
- Page 114 When Network is selected for the source IP filter, you can enter a SIP Mask specific SIP mask in dotted decimal notation. Specifies the destination IP filter for the ACE DIP Filter Any: no destination IP filter is specified (destination IP filter is ORing Industrial Networking Corp...
- Page 115 Any: no sender IP filter is specified (sender IP filter is "don't-care"). Sender IP Filter Host: sender IP filter is set to Host. Specify the sender IP address in the SIP Address field that appears. Network: sender IP filter is set to Network. Specify the sender IP ORing Industrial Networking Corp...
- Page 116 1: ARP/RARP frames where the HLN is equal to Ethernet (0x06) and the (PLN) is equal to IPv4 (0x04) must match this entry. Any: any value is allowed ("don't-care"). Specifies whether frames will meet the action according to their ARP/RARP hardware address space (HRD) settings. ORing Industrial Networking Corp...
- Page 117 Specific: if you want to filter a specific ICMP code filter with the ACE, you can enter a specific ICMP code value. A field for entering an ICMP code value appears. ICMP Code Value When Specific is selected for the ICMP code filter, you can enter a ORing Industrial Networking Corp...
- Page 118 Specifies the TCP/UDP destination filter for the ACE TCP/UDP Any: no TCP/UDP destination filter is specified (TCP/UDP Destination Filter destination filter status is "don't-care"). Specific: if you want to filter a specific TCP/UDP destination filter ORing Industrial Networking Corp...
- Page 119 Any: any value is allowed ("don't-care"). Specifies the TCP ACK ("acknowledgment field significant") value for the ACE TCP ACK 0: TCP frames where the ACK field is set must not be able to match this entry. ORing Industrial Networking Corp...
-
Page 120: Authentication, Authorization, And Accounting
This algorithm causes the RADIUS server to be queried up to 3 times before it is considered to be dead. Dead Time The dead time, which can be set to a number between 0 and 3600 ORing Industrial Networking Corp... - Page 121 Check to enable the RADIUS authentication server. The IP address or hostname of the RADIUS authentication server. IP IP Address address is expressed in dotted decimal notation. Port The UDP port to use on the RADIUS authentication server. If the port ORing Industrial Networking Corp...
- Page 122 The secret - up to 29 characters long - shared between the RADIUS authentication server and the switch stack. Authentication and Accounting Server Status This page provides information about the status of the RADIUS server configurable on the authentication configuration page. ORing Industrial Networking Corp...
- Page 123 The number of seconds left before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled. Label Description The RADIUS server number. Click to navigate to detailed statistics of ORing Industrial Networking Corp...
- Page 124 This page shows the access statistics of the authentication and accounting servers. Use the server drop-down list to switch between the backend servers to show related details. Label Description RADIUS authentication server packet counters. There are seven Packet Counters ‘receive’ and four ‘transmit’ counters. ORing Industrial Networking Corp...
- Page 125 IGS-9084GP-FB2 Series User Manual This section contains information about the state of the server and the latest round-trip time. Other Info Label Description RADIUS accounting server packet counters. There are five ‘receive’ Packet Counters four ‘transmit’ counters. ORing Industrial Networking Corp...
-
Page 126: Nas (802.1X)
802.1X authentication. Overview of 802.1X (Port-Based) Authentication In an 802.1X network environment, the user is called the supplicant, the switch is the authenticator, and the RADIUS server is the authentication server. The switch acts as the ORing Industrial Networking Corp... - Page 127 When authentication is complete, the RADIUS server sends a success or failure indication, which in turn causes the switch to open up or block traffic for that particular client, using static entries into the MAC Table. Only then will frames from the client be forwarded on the switch. ORing Industrial Networking Corp...
- Page 128 If checked, clients are reauthenticated after the interval specified Reauthentication Period. Reauthentication Reauthentication 802.1X-enabled ports can be used to detect if a new device is Enabled plugged into a switch port. For MAC-based ports, reauthentication is only useful if the ORing Industrial Networking Corp...
- Page 129 Unauthorized state. The hold timer does not count during an on-going authentication. The switch will ignore new frames coming from the client during the hold time. The hold time can be set to a number between 10 and 1000000 ORing Industrial Networking Corp...
- Page 130 Besides forwarding the result to the supplicant, the switch uses it to open up or block traffic on the switch port connected to the supplicant. Note: in an environment where two backend servers are enabled, ORing Industrial Networking Corp...
- Page 131 MAC address once successfully authenticated. b. Multi 802.1X In port-based 802.1X authentication, once a supplicant is successfully authenticated on a port, the whole port is opened for network traffic. This allows other clients connected to the port (for ORing Industrial Networking Corp...
- Page 132 "xx-xx-xx-xx-xx-xx", that is, a dash (-) is used as separator between the lower-cased hexadecimal digits. The switch only supports the MD5-Challenge authentication method, so the RADIUS server must be configured accordingly. When authentication is complete, the RADIUS server sends a ORing Industrial Networking Corp...
- Page 133 Admin State is in an EAPOL-based or MAC-based mode. Restart Clicking these buttons will not cause settings changed on the page to take effect. Reauthenticate: schedules a reauthentication whenever the ORing Industrial Networking Corp...
- Page 134 The user name (supplicant identity) carried in the most recently received Response Identity EAPOL frame for EAPOL-based Last ID authentication, and the source MAC address from the most recently received frame from a new client for MAC-based authentication. ORing Industrial Networking Corp...
- Page 135 These supplicant frame counters are available for the following administrative states: • Force Authorized • Force Unauthorized • 802.1X EAPOL Counters These backend (RADIUS) frame counters are available for the Backend Server following administrative states: Counters • 802.1X • MAC-based Auth. ORing Industrial Networking Corp...
-
Page 136: Alerts
The following pages allow you to set up alert conditions based on your needs for individual switch ports, including actions to be taken during disconnection and power failure. ORing Industrial Networking Corp... -
Page 137: System Warning
UDP port 514 and the syslog server will not send acknowledgments back to the sender since UDP is a connectionless protocol and it does not provide acknowledgments. The syslog packet will ORing Industrial Networking Corp... - Page 138 Subject of the mail Authentication Username: the authentication username Password: the authentication password Confirm Password: re-enter password Recipient E-mail The recipient's e-mail address. A mail allows for 6 recipients. Address Apply Click to activate the configurations ORing Industrial Networking Corp...
- Page 139 Sends out alert when SNMP authentication fails Failure O-Ring Topology Sends out alerts when O-Ring topology changes Change Port Event Disable SYSLOG SMTP Link Up event Link Down Link Up & Link Down Apply Click to activate the configurations ORing Industrial Networking Corp...
-
Page 140: Monitor And Diag
300 seconds. You can configure aging time by entering a value in the Age Time box in seconds. The allowed range is 10 to 1000000 seconds. You can also disable the automatic aging of dynamic entries by checking Disable Automatic Aging. ORing Industrial Networking Corp... - Page 141 MAC address entries can reduce broadcast packets remarkably and are suitable for networks where network devices seldom change. You can manage the entries in this page. The MAC table is sorted first by VLAN ID and then by MAC address. ORing Industrial Networking Corp...
- Page 142 The >> button will use the last entry of the currently displayed VLAN/MAC address pairs as a basis for the next lookup. When it reaches the end, the text "no more entries" is shown in the displayed table. Use the |<< button to start over. ORing Industrial Networking Corp...
-
Page 143: Port Statistics
This page provides an overview of general traffic statistics for all switch ports. Label Description The switch port number to which the following settings will be Port applied. Packets The number of received and transmitted packets per port ORing Industrial Networking Corp... - Page 144 The displayed counters include the total number for receive and transmit, the size for receive and transmit, and the errors for receive and transmit. Detailed Statistics – Total Receive & Transmit ORing Industrial Networking Corp...
-
Page 145: Port Mirroring
The traffic to be copied to the mirror port can be all frames received on a given port (also known as ingress or source mirroring) or all frames transmitted on a given port (also known as egress or destination mirroring). The port to which the monitored traffic is copied is called mirror port. ORing Industrial Networking Corp... -
Page 146: System Log Information
Tx frames to the mirror port. In this case, mode for the selected mirror port is limited to Disabled or Rx nly. 5.10.4 System Log Information This page provides switch system log information. ORing Industrial Networking Corp... -
Page 147: Cable Diagnostics
Start to run the diagnostics. This will take approximately 5 seconds. If all ports are selected, this can take approximately 15 seconds. When completed, the page refreshes automatically, and you can view the cable diagnostics results in the cable status ORing Industrial Networking Corp... -
Page 148: Sfp Monitor
SFP modules with DDM (Digital Diagnostic Monitoring) function can measure the temperature of the apparatus, helping you monitor the status of connection and detect errors immediately. You can manage and set up event alarms through DDM Web interface. ORing Industrial Networking Corp... -
Page 149: Ping
64 bytes from ::10.10.132.20: icmp_seq=0, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=1, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=2, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=3, time=0ms 64 bytes from ::10.10.132.20: icmp_seq=4, time=0ms Sent 5 packets, received 5 OK, 0 bad ORing Industrial Networking Corp... -
Page 150: Synchronization
On a local area network, it achieves clock accuracy in the sub-microsecond range, making it suitable for measurement and control systems. Label Description One_pps_mode The box allows you to select One_pps_mode configurations. The following values are possible: Output: enable the 1 pps clock output ORing Industrial Networking Corp... - Page 151 Slave Only: slave only Port List Set check mark for each port configured for this Clock Instance. 2 Step Flag Static member defined by the system; true if two-step Sync events and Pdelay_Resp events are used ORing Industrial Networking Corp...
-
Page 152: Troubleshooting
5.12.1 Factory Defaults This function is to force the switch back to the original factory settings. To reset the switch, select Reset to Factory Defaults from the drop-down list and click Yes. Only the IP configuration is retained. ORing Industrial Networking Corp... -
Page 153: System Reboot
You can reset the stack switch on this page. After reset, the system will boot normally as if you have powered on the devices Label Description Click to reboot device Click to return to the Port State page without rebooting ORing Industrial Networking Corp... -
Page 154: Command Line Management
Follow the steps below to access the console via RS-232 serial cable. Step 1: On Windows desktop, click on Start -> Programs -> Accessories -> Communications -> Hyper Terminal Step 2. Input a name for the new connection. ORing Industrial Networking Corp... - Page 155 IGS-9084GP-FB2 Series User Manual Step 3. Select a COM port in the drop-down list. Step 4. A pop-up window that indicates COM port properties appears, including bits per second, data bits, parity, stop bits, and flow control. ORing Industrial Networking Corp...
- Page 156 Step 5. The console login screen will appear. Use the keyboard to enter the Username and Password (same as the password for Web browsers), then press Enter. CLI Management by Telnet You can can use TELNETto configure the switch. The default values are: ORing Industrial Networking Corp...
- Page 157 Step 1. Telnet to the IP address of the switch from the Run window by inputingcommands (or from the MS-DOS prompt) as below. Step 2. The Login screen will appear. Use the keyboard to enter the Username and Password (same as the password for Web browser), and then press Enter. ORing Industrial Networking Corp...
- Page 158 IGS-9084GP-FB2 Series User Manual Commander Groups System Configuration [all] [<port_list>] Reboot Restore Default [keep_ip] Contact [<contact>] Name [<name>] System> Location [<location>] Description [<description>] Password <password> Username [<username>] Timezone [<offset>] ORing Industrial Networking Corp...
- Page 159 SFP [<port_list>] Configuration [<port_list>] Add <mac_addr> <port_list> [<vid>] Delete <mac_addr> [<vid>] Lookup <mac_addr> [<vid>] MAC> Agetime [<age_time>] Learning [<port_list>] [auto|disable|secure] Dump [<mac_max>] [<mac_addr>] [<vid>] Statistics [<port_list>] Flush VLAN Configuration [<port_list>] VLAN> PVID [<port_list>] [<vid>|none] FrameType [<port_list>] [all|tagged|untagged] ORing Industrial Networking Corp...
- Page 160 Switch security setting Security > Network Network security setting Authentication, Authorization and Accounting setting Security Switch Password <password> Auth Authentication Secure Shell Security/switch> HTTPS Hypertext Transfer Protocol over Secure Socket Layer RMON Remote Network Monitoring Security Switch Authentication ORing Industrial Networking Corp...
- Page 161 <falling_threshold> <falling_event_index> [rising|falling|both] Alarm Delete <alarm_id> Alarm Lookup [<alarm_id>] Security Network Psec Port Security Status Network Access Server (IEEE 802.1X) Security/Network> Access Control List DHCP Dynamic Host Configuration Protocol Security Network Psec Switch [<port_list>] Security/Network/Psec> Port [<port_list>] ORing Industrial Networking Corp...
- Page 162 (ip [<sip>] [<dip>] [<protocol>] [<ip_flags>]) | (icmp [<sip>] [<dip>] [<icmp_type>] [<icmp_code>] [<ip_flags>]) | (udp [<sip>] [<dip>] [<sport>] [<dport>] [<ip_flags>]) | (tcp [<sip>] [<dip>] [<sport>] [<dport>] [<ip_flags>] [<tcp_flags>])] [permit|deny] [<rate_limiter>] [<port_redirect>] [<mirror>] [<logging>][<shutdown>] Delete <ace_id> Lookup [<ace_id>] Clear ORing Industrial Networking Corp...
- Page 163 Version [<stp_version>] Non-certified release, v Txhold [<holdcount>]lt 15:15:15, Dec 6 2007 MaxAge [<max_age>] FwdDelay [<delay>] bpduFilter [enable|disable] STP> bpduGuard [enable|disable] recovery [<timeout>] CName [<config-name>] [<integer>] Status [<msti>] [<port_list>] Msti Priority [<msti>] [<priority>] Msti Map [<msti>] [clear] ORing Industrial Networking Corp...
- Page 164 Delete <aggr_id> Aggr> Lookup [<aggr_id>] Mode [smac|dmac|ip|port] [enable|disable] LACP Configuration [<port_list>] Mode [<port_list>] [enable|disable] Key [<port_list>] [<key>] LACP> Role [<port_list>] [active|passive] Status [<port_list>] Statistics [<port_list>] [clear] LLDP Configuration [<port_list>] Mode [<port_list>] [enable|disable] LLDP> Statistics [<port_list>] [clear] ORing Industrial Networking Corp...
- Page 165 (LLC [<DSAP>] [<SSAP>] [<control>]) | (SNAP [<PID>]) | (ipv4 [<protocol>] [<sip>] [<dscp>] [<fragment>] [<sport>] [<dport>]) (ipv6 [<protocol>] [<sip_v6>] [<dscp>] [<sport>] [<dport>])] [<class>] [<dp>] [<classified_dscp>] QCL Delete <qce_id> QCL Lookup [<qce_id>] QCL Status [combined|static|conflicts] QCL Refresh Mirror ORing Industrial Networking Corp...
- Page 166 Mode [enable|disable] State [<vid>] [enable|disable] Querier [<vid>] [enable|disable] IGMP> Fastleave [<port_list>] [enable|disable] Router [<port_list>] [enable|disable] Flooding [enable|disable] Groups [<vid>] Status [<vid>] Configuration [<port_list>] Action [<port_list>] [permit|deny] [<rate_limiter>] [<port_copy>] ACL> [<logging>] [<shutdown>] Policy [<port_list>] [<policy>] Rate [<rate_limiter_list>] [<packet_rate>] ORing Industrial Networking Corp...
- Page 167 Config> Load <ip_server> <file_name> [check] Firmware Firmware Load <ip_addr_string> <file_name> > SNMP Trap Inform Retry Times [<retries>] Trap Probe Security Engine ID [enable|disable] Trap Security Engine ID [<engineid>] SNMP> Trap Security Name [<security_name>] Engine ID [<engineid>] ORing Industrial Networking Corp...
- Page 168 PortState <clockinst> [<port_list>] [enable|disable|internal] ClockCreate <clockinst> [<devtype>] [<twostep>] [<protocol>] [<oneway>] [<clockid>] [<tag_enable>] [<vid>] [<prio>] ClockDelete <clockinst> [<devtype>] PTP> DefaultDS <clockinst> [<priority1>] [<priority2>] [<domain>] CurrentDS <clockinst> ParentDS <clockinst> Timingproperties <clockinst> [<utcoffset>] [<valid>] [<leap59>] [<leap61>] [<timetrac>] [<freqtrac>] [<ptptimescale>] [<timesource>] ORing Industrial Networking Corp...
- Page 169 [<incr_delay>] Loop Protect Configuration Mode [enable|disable] Transmit [<transmit-time>] Shutdown [<shutdown-time>] Loop Protect> Port Configuration [<port_list>] Port Mode [<port_list>] [enable|disable] Port Action [<port_list>] [shutdown|shut_log|log] Port Transmit [<port_list>] [enable|disable] Status [<port_list>] IPMC Configuration [igmp] IPMC> Mode [igmp] [enable|disable] ORing Industrial Networking Corp...
- Page 170 Syslog Port [<port_list>] [disable|linkup|linkdown|both] SMTP SystemStart [enable|disable] SMTP PowerStatus [enable|disable] SMTP SnmpAuthenticationFailure [enable|disable] SMTP RingTopologyChange [enable|disable] SMTP Port [<port_list>] [disable|linkup|linkdown|both] DHCPServer Mode [enable|disable] DHCPServer> Setup [<ip_start>] [<ip_end>] [<ip_mask>] [<ip_router>] [<ip_dns>] [<ip_tftp>] [<lease>] [<bootfile>] Ring Ring> Mode [enable|disable] ORing Industrial Networking Corp...
- Page 171 Del <index> Configuration FastReocvery FastRecovery Mode [enable|disable] > Port [<port_list>] [<fr_priority>] syslog [enable|disable] temp [<temperature>] SFP> Info DeviceBinding Mode [enable|disable] Port Mode [<port_list>] [disable|scan|binding|shutdown] Devicebindin Port DDOS Mode [<port_list>] [enable|disable] g> Port DDOS Sensibility [<port_list>] [low|normal|medium|high] ORing Industrial Networking Corp...
- Page 172 [unknown|ip_cam|ip_phone|ap|pc|plc|nvr] Port Location [<port_list>] [<device_location>] Port Description [<port_list>] [<device_description>] Configuration Mode [enable|disable] Manager [enable|disable] React [enable|disable] 1stRingPort [<mrp_port>] MRP> 2ndRingPort [<mrp_port>] Parameter MRP_TOPchgT [<value>] Parameter MRP_TOPNRmax [<value>] Parameter MRP_TSTshortT [<value>] Parameter MRP_TSTdefaultT [<value>] Parameter MRP_TSTNRmax [<value>] ORing Industrial Networking Corp...
- Page 173 IGS-9084GP-FB2 Series User Manual Parameter MRP_LNKdownT [<value>] Parameter MRP_LNKupT [<value>] Parameter MRP_LNKNRmax [<value>] Modbus Status Modbus> Mode [enable|disable] ORing Industrial Networking Corp...
- Page 174 Port configuration, status, statistics, monitoring, security DHCP Server/Client/Relay SMTP Client Modbus TCP O-Ring Open-Ring Network Redundancy O-Chain MSTP (RSTP/STP compatible) RS-232 Serial Console Port RS-232 in RJ-45 connector with console cable. 115200bps, 8, N, 1 Switch LED indicators ORing Industrial Networking Corp...
- Page 175 5% to 95% Non-condensing Regulatory approvals FCC Part 15, CISPR (EN55022) class A EN61000-4-2 (ESD), EN61000-4-3 (RS), EN61000-4-4 (EFT), EN61000-4-5 (Surge), EN61000-4-6 (CS), EN61000-4-8, EN61000-4-11 Shock IEC60068-2-27 Free Fall IEC60068-2-32 Vibration IEC60068-2-6 Safety EN60950-1 Warranty 5 years ORing Industrial Networking Corp...
Need help?
Do you have a question about the IGS-9084GP-FB2-SS and is the answer not in the manual?
Questions and answers