Page 2
(3) Product is used in an extra hazardous environment or activities, (4) any serial number on the Product has been removed or defaced, (5) this warranty will be of no effect if the repair is via anyone other than LevelOne or the approved...
Page 3
License shall remain in full force and effect. Neither the License nor this Agreement is assignable or transferable by Licensee without LevelOne’s prior written consent; any attempt to do so shall be void. This License constitutes the entire License between the parties with respect to the use of the Software.
Caution Circuit devices are sensitive to static electricity, which can damage their delicate electronics. Dry weather conditions or walking across a carpeted floor may cause you to acquire a static electrical charge. To protect your device, always: • Touch the metal chassis of your computer to ground the static electrical charge before you pick up the circuit device.
Page 5
In this user’s manual, it will not only tell you how to install and connect your network system but configure and monitor the GSW-2496 through the built-in CLI and web by RS-232 serial interface and Ethernet ports step-by-step. Many explanation in detail of hardware and software functions are shown as well as the examples of the operation for web-based interface and command-line interface (CLI).
2-1-3-1. Cabling Requirements for TP Ports---------------------------------------------------------------- 11 2-1-3-2. Cabling Requirements for 1000SX/LX SFP Module ------------------------------------------- 11 2-1-3-3. Switch Cascading in Topology ---------------------------------------------------------------------- 12 2-1-4. Configuring the Management Agent-------------------------------------------------------- 15 2-1-4-1. Configuring the Management Agent through the Serial RS-232 Port --------------------- 16 2-1-4-2.
Page 7
3-12. MAC T -------------------------------------------------------------------------------------------- 89 ABLE 3-13. GVRP C ONFIGURATION 3-14. STP C ONFIGURATION 3-14-1. STP Status -------------------------------------------------------------------------------------102 3-14-2. STP Configuration----------------------------------------------------------------------------104 3-14-3. STP Port Configuration ---------------------------------------------------------------------106 3-15. T RUNKING ONFIGURATION 3-16. 802.1X C ONFIGURATION 3-17. A LARM ONFIGURATION 3-18. C --------------------------------------------------------------------------------------129 ONFIGURATION 3-18-1.
Ethernet port using CLI or Web-based management unit, associated with SNMP agent. With the SNMP agent, the network administrator can logon the switch to monitor, configure and control each port’s activity in a friendly way. The overall network management is enhanced and the network efficiency is also improved to accommodate high bandwidth applications.
Page 10
• Key Features QoS: Support Quality of Service by the IEEE 802.1P standard. There are two priority queue and packet transmission schedule. Spanning Tree: Support IEEE 802.1D, IEEE 802.1w (RSTP: Rapid Spanning Tree Protocol) standards. VLAN: Support Port-based VLAN and IEEE802.1Q Tag VLAN. Support 256 active VLANs and VLAN ID 1~4094.
1-2. Checklist Before you start installing the switch, verify that the package contains the following: - GSW-2496 - Power Cord - Console Cable - Rack-mounted Kit - CD Manual Please notify your sales representative immediately if any of the aforementioned items is missing or damaged.
Page 12
• Supports 802.1X port security on a VLAN • Supports user management and only first login administrator can configure the device. The rest of users can only view the switch • SNMP access can be disabled and prevent from illegal SNMP access •...
There are 8 TP Gigabit Ethernet ports and 16 SFP fiber ports for optional removable modules on the front panel of the switch. LED display area, locating on the left side of the panel, contains a Power LED, which indicates the power status and 24 ports working status of the switch.
• LED Indicators Color System LED POWER Green CPU LED Green 10/100/1000Ethernet TP Port 1 to 8 LED LINK/ACT Green Green/ SPEED Ember 1000SX/LX Gigabit Fiber Port 9 to 24 LED SFP(LINK/ACT) Green 1-4-2. User Interfaces on the Rear Panel One RS-232 DB-9 interface is offered for configuration or management.
1-5. Optional SFP Transceiver Modules In the switch,1000Mbps SFP Fiber transceiver is used for high-speed connection expansion; the following are optional SFP types provided for the switch: Note: GSW-2496 only supports the following vendor’s SFP Transceiver 1. LevelOne (HW Ver.: 3.0 or up) 2.
At the beginning, please do first: ⇒ Wear a grounding device to avoid the damage from electrostatic discharge ⇒ Be sure that power switch is OFF before you insert the power cord to power source • Installing Optional SFP Fiber Transceivers to the GSW-2496 L2 Managed Switch Note: If you have no modules, please skip this section.
Page 17
It means you do not have to tell from them, just plug it. ⇒ Use Cat. 5 grade RJ-45 TP cable to connect to a TP port of the switch and the other end is connected to a network-aware device such as a workstation or a server.
⇒ Wear a grounding device for electrostatic discharge. ⇒ Screw the mounting accessory to the front side of the switch (See Fig. 2-2). ⇒ Place the Chassis into the 19-inch wiring closet rail and locate it at the proper position. Then, fix the Chassis by screwing it.
2-1-3-1. Cabling Requirements for TP Ports ⇒ For Fast Ethernet TP network connection ⎯ The grade of the cable must be Cat. 5 or Cat. 5e with a maximum length of 100 meters. ⇒ Gigabit Ethernet TP network connection ⎯ The grade of the cable must be Cat. 5 or Cat. 5e with a maximum length of 100 meters.
If more than two switches are connected in the same network, select one switch as Level 1 switch and connect all other switches to it at Level 2. Server/Host is recommended to connect to the Level 1 switch.
Page 21
Case1: All switch ports are in the same local area network. Every port can access each other (See Fig. 2-3). Fig. 2-3 No VLAN Configuration Diagram If VLAN is enabled and configured, each node in the network that can communicate each other directly is bounded in the same VLAN area.
Page 22
Case 2b: Port-based VLAN (See Fig.2-5). Fig. 2-5 Port-based VLAN Diagram 1. VLAN1 members could not access VLAN2, VLAN3 and VLAN4 members. 2. VLAN2 members could not access VLAN1 and VLAN3 members, but they could access VLAN4 members. VLAN3 members could not access VLAN1, VLAN2 and VLAN4. 4.
2-1-4. Configuring the Management Agent We offer you three ways to startup the switch management function. They are RS-232 console, CLI, and Web. Users can use any one of them to monitor and configure the switch. You can touch them through the following procedures.
RS-232 cable with DB-9 connector. Next, run a terminal emulator with the default setting of the switch’s serial port. With this, you can communicate with the switch. In the switch, RS-232 interface only supports baud rate 57.6k bps with 8 data bits, 1 stop bit, no parity check and no flow control.
Page 25
• Set IP Address, Subnet Mask and Default Gateway IP Address Please refer to Fig. 2-7 CLI Management for details about LevelOne’s setting. They are default setting of IP address. You can first either configure your PC IP address or change IP address of the switch, next to change the IP address of default gateway and subnet mask.
IP address or to know the IP address of the switch. Then, follow the procedures listed below. 1. Set up a physical path between the configured the switch and a PC by a qualified UTP Cat. 5 cable with RJ-45 connector.
2-1-5. IP Address Assignment For IP address configuration, there are three parameters needed to be filled in. They are IP address, Subnet Mask, Default Gateway and DNS. IP address: The address of the network device in the network is used for internetworking communication.
Page 28
With the classful addressing, it divides IP address into three classes, class A, class B and class C. The rest of IP addresses are for multicast and broadcast. The bit length of the network prefix is the same as that of the subnet mask and is denoted as IP address/X, for example, 192.168.1.0/24.
Page 29
Class D and E: Class D is a class with first 4 MSB (Most significance bit) set to 1-1-1-0 and is used for IP Multicast. See also RFC 1112. Class E is a class with first 4 MSB set to 1-1-1-1 and is used for IP broadcast. According to IANA (Internet Assigned Numbers Authority), there are three specific IP address blocks reserved and able to be used for extending internal network.
Page 30
In this diagram, you can see the subnet mask with 25-bit long, 255.255.255.128, contains 126 members in the sub-netted network. Another is that the length of network prefix equals the number of the bit with 1s in that subnet mask. With this, you can easily count the number of IP addresses matched.
Page 31
Basically, it is a routing policy. The gateway setting is used for Trap Events Host only in the switch. For assigning an IP address to the switch, you just have to check what the IP address of the network will be connected with the switch. Use the same network address and append your host address to it.
2-2. Typical Applications The GSW-2496 L2 Managed Switch implements 8 Gigabit Ethernet TP ports with auto MDIX and 16 slots for the removable module supporting comprehensive fiber types of connection, including LC SFP modules. For more details on the specification of the switch, please refer to Appendix A.
Ethernet switch. With this facility, you can easily access and monitor through any one port of the switch all the status of the switch, including MIBs status, each port activity, Spanning tree status, port aggregation status, multicast traffic, VLAN and priority status, even illegal access record and so on.
Page 34
If there are two or more users using administrator’s identity, the switch will allow the only one who logins first to configure the system. The rest of users, even with administrator’s identity, can only monitor the system.
3-1. Web Management Home Overview After you login, the switch shows you the system information as Fig. 3-2. This page is default and tells you the basic information of the system, including “Model Name”, “System Description”, “Location”, “Contact”, “Device Name”, “System Up Time”, “Current Time”, “BIOS Version”, “Firmware Version”, “Hardware-Mechanical...
Page 36
The Information of Page Layout ⎯ On the top side, it shows the front panel of the switch. In the front panel, the linked ports will display green; as to the ports, which are link off, they will be dark. For the optional modules, the slot will show only a cover plate if no module exists and will show a module if a module is present.
Page 37
Root System Mirror SNMP Max. Packet Length VLAN GVRP Trunk Alarm Diagnostics Reboot Port Bandwidth Loop Detection IGMP Snooping DHCP Boot MAC Table 802.1X Configuration TFTP Server Firmware Upgrade Logout...
Parameter description: Model name: The model name of this device. System description: As it is, this tells what this device is. Here, it is “L2 Managed Switch”. Location: Basically, it is the location where this switch is put. User-defined. Contact: For easily managing and maintaining device, you may write down the contact person and phone here for getting help soon.
Page 39
Host IP address: The IP address of the switch. Host MAC address: It is the Ethernet MAC address of the management agent in this switch. Device Port: Show all types and numbers of the port in the switch. RAM size: The size of the DRAM in this switch.
The switch supports both manual IP address setting and automatic IP address setting via DHCP server. When IP address is changed, you must reboot the switch to have the setting taken effect and use the new IP to browse for web management and CLI management.
Page 41
IP address: Users can configure the IP settings and fill in new values if users set the DHCP function “Disable”. Then, click <Apply> button to update. When DHCP is disabled, Default: 192.168.1.1 If DHCP is enabled, this field is filled by DHCP server and will not allow user manually set it any more.
Page 42
The switch supports DNS client function to re-route the mnemonic name address to DNS server to get its associated IP address for accessing Internet. User can specify a DNS IP address for the switch. With this, the switch can translate a mnemonic name address into an IP address.
“Minute” and “Second” within the valid value range indicated in each item. If you input an invalid value, for example, 61 in minute, the switch will clamp the figure to NTP is a well-known protocol used to synchronize the clock of the switch system time over a network.
Page 44
Greenwich Mean Time (GMT). If use the NTP mode and select a built-in NTP time server or manually specify an user-defined NTP server as well as Time Zone, the switch will sync the time in a short after pressing <Apply> button. Though it synchronizes the time automatically, NTP does not update the time periodically without user’s processing.
Page 45
Day Light Saving End : This is used to set when to stop performing the daylight saving time. Mth: Range is 1 ~ 12. Default: 1 Day: Range is 1 ~ 31. Default: 1 Hour: Range is 0 ~ 23. Default: 0 Fig.
3-1-4. Account Configuration In this function, only administrator can create, modify or delete the username and password. Administrator can modify other guest identities’ password without confirming the password but it is necessary to modify the administrator-equivalent identity. Guest-equivalent identity can modify his password only. Please note that you must confirm administrator/guest identity in the field of Authorization in advance before configuring the username and password.
3-1-5. Management Policy Through the management security configuration, the manager can do the strict setup to control the switch and limit the user to access this switch. The following rules are offered for the manager to manage the switch: Rule 1) : When no lists exists, then it will accept all connections.
Page 48
VLAN VID is able to be accepted or denied by the switch, the IP range of the user could be accepted or denied by the switch, the port that the user is allowed or not allowed to connect with the switch, or the way of controlling and connecting to the switch via Http, Telnet or SNMP.
Page 49
The switch supports two kinds of options including “Deny” and “Accept”. Default is “Deny”. When you choose “Deny” action, you will be restricted and refused to manage the switch due to the “Access Type” you choose. However, while you select “Accept” action, you will have the authority to manage the switch.
Master machine. Instead of SNMP or Telnet UI, VSM is only available in Web UI. While one switch become the Master, two rows of buttons for group device will appear on the top of its Web UI.
Page 51
It is used for the activation or de-activation of VSM. Default is Enable. Role: The role that the switch would like to play in virtual stack. Two types of roles, including master and slave are offered for option. Default is Master.
3-2. Port Configuration Five functions, including Port Status, Port Configuration, Port Description, Simple Counter and Detail Counter are contained in this function folder for port monitor and management. Each of them will be described in detail orderly in the following sections. Port Configuration 3-2-1.Port Status The function Port Status gathers the information of all ports’...
Page 53
Port Status Function Description: Report the latest updated status of all ports in this switch. When any one of the ports in the switch changes its parameter displayed in the page, it will be automatically refreshed the port current status about every 5 seconds.
Page 54
Default: None, depends on the result of the negotiation. Flow Control: Show each port’s flow control status. There are two types of flow control in Ethernet, Backpressure for half- duplex operation and Pause flow control (IEEE802.3x) for full-duplex operation. The switch supports both of them. Default: Disabled...
Page 55
Parameter description of Port 9~24: Connector Type: Display the connector type, for instance, UTP, SC, ST, LC and so on. Fiber Type: Display the fiber mode, for instance, Multi-Mode, Single-Mode. Tx Central Wavelength: Display the fiber optical transmitting central wavelength, for instance, 850nm, 1310nm, 1550nm and so on.
Page 56
Vendor SN (Serial Number): Show the serial number assigned by the manufacturer. Date Code: Show the date this SFP module was made. Temperature: Show the current temperature of SFP module. Vcc: Show the working DC voltage of SFP module. Mon1(Bias) mA: Show the Bias current of SFP module.
Function name: Port Configuration Function description: It is used to set each port’s operation mode. The switch supports 3 parameters for each port. They are state, mode and flow control. Parameter description: State: Set the communication capability of the port is Enabled or Disabled. When enabled, traffic can be transmitted and received via this port.
Page 58
Mode: Set the speed and duplex of the port. In speed, if the media is 1Gbps fiber, it is always 1000Mbps and the duplex is full only. If the media is TP, the Speed/Duplex is comprised of the combination of speed mode, 10/100/1000Mbps, and duplex mode, full duplex and half duplex.
3-2-3. Port Description Port Description is applied to add name for each port. In this function, you can set the following functions. All of them are described in detail below. Function name: Port Description Function description: It is used to set each port’s name. It is convenient way to show each port’s connection instead by Port Number only.
3-2-4. Simple Counter The function of Simple Counter collects any information and provides the counting about the traffic of the port, no matter the packet is good or bad. In the Fig. 3-13, the window can show all ports’ counter information at the same time.
Page 61
Rx Packet: The counting number of the packet received. Tx Collision: Number of collisions transmitting frames experienced. Rx Error Packet: Number of bad packets received.
3-2-5. Detail Counter The function of Detail Counter collects any information and provides the counting about the traffic of the port, no matter the packet is good or bad. In the Fig. 3-14, the window can show only one port counter information at the same time.
Page 63
Rx Low Priority Packets: Number of Rx packets classified as low priority. Rx Broadcast: Show the counting number of the received broadcast packet. Rx Multicast: Show the counting number of the received multicast packet. Tx Packets: The counting number of the packet transmitted. TX Octets: Total transmitted bytes.
Page 64
Tx 65-127 Bytes: Number of 65 ~ 126-byte frames in good and bad packets transmitted. Tx 128-255 Bytes: Number of 127 ~ 255-byte frames in good and bad packets transmitted. Tx 256-511 Bytes: Number of 256 ~ 511-byte frames in good and bad packets transmitted. Tx 512-1023 Bytes: Number of 512 ~ 1023-byte frames in good and bad packets transmitted.
3-3. Mirror Function name: Mirror Configuration Function description: Mirror Configuration is to monitor the traffic of the network. For example, we assume that Port A and Port B are Monitoring Port and Monitored Port respectively, thus, the traffic received by Port B will be copied to Port A for monitoring.
Bandwidth Management function is used to set up the limit of Ingress and Egress bandwidth for each port. Note: Each port of the switch owns 16KB packet buffer. The packet buffer size will be reduced when the bandwidth rate limitation is enabled, which may cause that jumbo frame cannot be forwarded.
Page 67
Broadcast & Multicasat for Ingress Rate Limiting (Policing): Set up the limit of Ingress bandwidth for the port you choose. Incoming traffic will be discarded if the rate exceeds the value you set up in Data Rate field. The format of the packet limits to broadcast and multicast. Valid range is 0~1000.
3-5. QoS(Quality of Service) Configuration offers powerful 5 kinds of QoS functions. There are Per Port switch Priority that you can assign each port to different precedence, VLAN Tag priority that can make precedence of 8 priorities, IP TOS Classification, IP TCP/UDP Port Classification and IP DiffServe Classification.
Page 69
Function name: Per Port Priority Function description: We can assign QoS Priority, including High and Low for each port. For example, if we transmit IP packets from Port 2 and Port 3 at the speed of 1Gbps to Port 1, and set the Class of Port 2 as High and Port 3 as Low, then the packets of Port 3 will be dropped when the congestion happens because Port 2 owns higher precedence of transmitting packets.
Page 70
0 0 1 in vlan-tagged field and VID equals 2 from the port 3 into the switch. We let the two kinds of packets be transmitted for port 1 until the port results in congestion. The result is that the packets will be dropped partially from the port 3 because the packets that belong to Low Priority.
Page 71
Bit 0, Bit 1, Bit 2: According to the arrangement of VLAN-tagged priority, it can form 8 kinds of traffics, including 0 0 0, 0 0 1, 0 1 0, 0 1 1, 1 0 0, 1 0 1, 1 1 0 and 1 1 1.
Page 72
Function name: IP ToS Classification Function description: Another QoS function is the application of Layer 3 on network framework. We focus on TOS field of IP header. There are three bits in TOS field. We means bit 5~7 of TOS field that we will use. According to these 3 bits, we could arrange 8 traffics –0 0 0, 0 0 1, 0 1 0, 0 1 1, 1 0 0, 1 0 1, 1 1 0, 1 1 1.
Page 73
Bit 0, Bit 1, Bit 2: According to the arrangement of Bit 5 ~ Bit 7 in TOS Field of IP Header, it can form 8 kinds of traffics, including 0 0 0, 0 0 1, 0 1 0, 0 1 1, 1 0 0, 1, 1 1 0 and 1 1 1.
Page 74
Function name: IP TCP/UDP Port Classification Function description: In L4 QoS Configuration, you can enter one of these special network transmission events, for example we use” Down prioritize web browsing, mail, FTP and news “L4 QoS Configuration and click <Apply> button, and then click <Advance >>>...
Page 75
Prioritize Streaming Audio/Video: Belong to the QoS in L4. Just tick the option button and press <Apply> button to have this function taken affect. Then, click <Advance >>> button set up Special TCP/UDP port for QoS. Prioritize Databases (Oracle, IBM DB2, SQL, Microsoft): Belong to the QoS in L4.
Page 76
Advanced Mode Fig. 3-21 Simple Mode Fig. 3-22 Simple Mode: Press <Simple<<> button is to return to the screen that all L4 port number will disappear (See Fig. 3-22).
Page 77
IP Diffserve Classification function, it can form total 64 (0~63) kinds of Traffic Class based on the arrangement of 6-bit field in DSCP of the IP packet. In the switch, user is allowed to set up these 64 kinds of Class that belong to High or Low Priority.
Detection willprevent the looping from happening. Moreover, it could remove the loopingphenomenon per port. In general, you can unplug the cable connection to stop thelooping when a port causes the looping. The switch has powerful Looping Detectioncapability, which could cease the looping immediately.
Page 79
Parameters description: State: Open the Loop Detection capability per port. The list has “Enable” and “Disable”. Default is “Disable”. Current Status: Show the looping status per port. It could be “Unlocked or Locked”. Default is “Unlocked”. When some port happens looping, it will show “Locked” Resume Action: Remove the looping status per port.
Basically, it is passive except issuing the trap information. The switch supports a switch to turn on or off the SNMP agent. If you set the field SNMP “Enable”, SNMP agent will be started up. All supported MIB OIDs, including RMON MIB, can be accessed via SNMP manager.
Page 81
Default port number :162 Trap: In the switch, there are 6 trap hosts supported. Each of them has its own community name and IP address; is user-definable. To set up a trap host means to create a trap manager by assigning an IP address to host the trap message.
IP multicast packets are running over the network. This is because a switch that does not support IGMP or IGMP Snooping can not tell the multicast packet from the broadcast packet, so it can only treat them all as the broadcast packet.
Page 83
Passive: In Passive Snooping mode, the IGMP snooping will not periodically poll the hosts in the groups. The switch will send a Membership Query message to all hosts only when it has received a Membership Query message from a router.
Page 84
Parameter description: IP Range: The switch supports two kinds of options for managed valid IP range, including “Any” and “Custom”. Default is “Any”. In case that” Custom” had been chosen, you can assigned effective IP range. The valid range is 224.0.0.0~239.255.255.255.
Page 85
Add: A new entry of parameters as mentioned above had been setup and then press <Add> button. Edit: The existed entry also can be modified after pressing <Edit> button. Delete: Remove the existed entry of allowed group configuration from the allowed group.
Parameter description: Jumbo Frame(bytes): Set up the maximum length of the packet that each port of the switch can accept. Maximum length can be up to 1532 bytes or 9216 bytes. The default is 1532 bytes.
At this moment, a bunch of switch or other network device on the LAN will try its best to find the server to get the services or try to set up the predefined links, they will issue many broadcast packets in the network.
Parameter description: VLAN Mode: Disable: Stop VLAN function on the switch. In this mode, no VLAN is applied to the switch. This is the default setting. Port-based: Port-based VLAN is defined by port. Any packet coming in or outgoing from any one port of a port-based VLAN will be accepted.
Page 89
Metro Mode: The Metro Mode is a quick configuration VLAN environment method on Port-based VLAN. It will create 22 or 23 Port-based VLAN groups. Double-tag: Double-tag mode belongs to the tag-based mode, however, it would treat all frames as the untagged ones, which means that tag with PVID will be added into all packets.
Page 90
2 members are formed. 23&24: Except Port 23 and Port 24, each port of the switch cannot transmit packets with each other. Each port groups a VLAN with Port 23 and Port 24, thus, total 22 groups consisting of 3 members are formed.
3-11-2. Tag-based Group Function name: Tag-based Group Configuration Function description: It shows the information of existed Tag-based VLAN Groups, You can also easily create, edit and delete a Tag-based VLAN group by pressing <Add>, <Edit> and <Delete> function buttons. User can add a new VLAN group by inputting a new VLAN name and VLAN ID.
Page 92
Add Group: Create a new Tag-based VLAN. Input the VLAN name as well as VID, configure the SYM-VLAN function and choose the member by ticking the check box beside the port No., then, press the <Apply> button to have the setting taken effect.
3-11-3. Port-based Group Function name: Port-based Group Configuration Function description: It shows the information of the existed Port-based VLAN Groups. You can easily create, edit and delete a Port-based VLAN group by pressing <Add>, <Edit> and <Delete> function buttons. User can add a new VLAN group by inputting a new VLAN name.
Page 94
Add Group: Create a new Port-based VLAN. Input the VLAN name and choose the member by ticking the check box beside the port No., then, press the <Apply> button to have the setting taken effect. Delete Group: Just press the <Delete> button to remove the selected group entry from the Port-based group table.
For example, if port 1 receives a tagged packet with VID=100 (VLAN name=VLAN100), and if Rule 1 is enabled, the switch will check if port 1 is a member of VLAN100. If yes, the received packet is forwarded; otherwise, the received packet is dropped.
Page 96
Role: This is an egress rule of the port. Here you can choose Access, Trunk or Hybrid. Trunk means the outgoing packets must carry VLAN tag header. Access means the outgoing packets carry no VLAN tag header. If packets have double VLAN tags, one will be dropped and the other will still be left. As to Hybrid, it is similar to Trunk, and both of them will tag-out.
3-12. MAC Table MAC Table Configuration gathers many functions, including MAC Table Information, MAC Table Maintenance, Static Forward, Static Filter and MAC Alias, which cannot be categorized to some function type. They are described below. Function name: MAC Table Information Function Description: Display the static or dynamic learning MAC entry and the state for the selected port.
Page 98
Port: The port that exists in the searched MAC Entry. VID: VLAN Group that MAC Entry exists. State: Display the method that this MAC Entry is built. It may show “Dynamic MAC” or “Static MAC”. Fig. 3-38...
Page 99
Function Name: MAC Table Maintenance Function Description: This function can allow the user to set up the processing mechanism of MAC Table. An idle MAC address exceeding MAC Address Age-out Time will be removed from the MAC Table. The range of Age-out Time is 10-65535 seconds, and the setup of this time will have no effect on static MAC addresses.
Page 100
Static Forward is a function that allows the user in the static forward table to access a specified port of the switch. Static Forward table associated with a specified port of a switch is set up by manually inputting MAC address and its alias name.
Page 101
Function name: Static Filter Function Description: Static Filter is a function that denies the packet forwarding if the packet’s MAC Address is listed in the filtering Static Filter table. User can very easily maintain the table by filling in MAC Address, VID (VLAN ID) and Alias fields individually. User also can delete the existed entry by clicking <Delete>...
Page 102
Function name: MAC Alias Function description: MAC Alias function is used to let you assign MAC address a plain English name. This will help you tell which MAC address belongs to which user in the illegal access report. At the initial time, it shows all pairs of the existed alias name and MAC address.
Page 103
Parameter description: MAC Address: It is a six-byte long Ethernet hardware address and usually expressed by hex and separated by hyphens. For example, 00 – 11 – 6B – D6 – 00 – 01 Alias: MAC alias name you assign. Note: If there are too many MAC addresses learned in the table, we recommend you inputting the MAC address and alias name directly.
3-13. GVRP Configuration GVRP is an application based on Generic Attribute Registration Protocol (GARP), mainly used to automatically and dynamically maintain the group membership information of the VLANs. The GVRP offers the function providing the VLAN registration service through a GARP application. It makes use of GARP Information Declaration (GID) to maintain the ports associated with their attribute database and GARP Information Propagation (GIP) to communicate among switches and end stations.
Page 105
A time period for announcement that all registered device is going to be de-registered. If someone still issues a new join, then a registration will be kept in the switch. Valid range: 1000-5000 unit time, Default: 1000 unit time. Default Applicant Mode: The mode here means the type of participant.
Page 106
GVRP PDU. There are two modes, disable and enable, provided for the user’s choice. Disabled: In this mode, the switch dynamic VLAN will be created when this port received GVRP PDU. The default setting is Normal. Enabled: In this mode, the switch does not create dynamic VLAN when this port received GVRP PDU.
Page 107
Function name: GVRP Counter Function description: All GVRP counters are mainly divided into Received and Transmitted two categories to let you monitor the GVRP actions. Actually, they are GARP packets. Parameter description: Received: Total GVRP Packets: Total GVRP BPDU is received by the GVRP application. Invalid GVRP Packets: Number of invalid GARP BPDU is received by the GARP application.
Page 108
LeaveEmpty Message Packets: Number of GARP BPDU with Leave Empty message is received by the GARP application. Empty Message Packets: Number of GARP BPDU with Empty message is received by the GARP application. Transmitted: Total GVRP Packets: Total GARP BPDU is transmitted by the GVRP application. Invalid GVRP Packets: Number of invalid GARP BPDU is transmitted by the GVRP application.
Page 109
Function name: GVRP Group Information Function description: To show the dynamic group member and their information. Parameter description: VID: VLAN identifier. When GVRP group creates, each dynamic VLAN group owns its VID. Valid range is 1 ~ 4094. Member Port: Those are the members belonging to the same dynamic VLAN group.
Bridge Priority: Show this switch’s current bridge priority setting. Default is 32768. Designated Root: Show root bridge ID of this network segment. If this switch is a root bridge, the “Designated Root” will show this switch’s bridge ID. Designated Priority: Show the current root bridge priority.
Page 111
All bridges in the LAN will re-learn and determine which the root bridge is. Maximum Age time is assigned by root bridge in unit of seconds. Default is 20 seconds. Current Forward Delay: Show the current root bridge forward delay time. The value of Forward Delay time is set by root.
Function description: User can set the following Spanning Tree parameters to control STP function enable/disable, select mode RSTP/STP and affect STP state machine behavior to send BPDU in this switch. The default setting of Spanning Tree Protocol is “Disable”. Parameter description: Spanning Tree Protocol: Set 802.1W Rapid STP function Enable / Disable.
Page 113
Two options are offered for the user’s choosing STP algorithm. One is RSTP and the other is STP. If STP is chosen, RSTP will run as a legacy STP. The switch supports RSTP (802.1w) which is backward compatible with STP (802.1d).
Root Port more possibly. Configured Path Cost: The range is 0 – 200,000,000. In the switch, if path cost is set to be zero, the STP will get the recommended value resulted from auto-negotiation of the link accordingly and display this value in the field of Path Cost Status.
Page 115
802.1w RSTP recommended value: (Valid range: 1 – 200,000,000) 10 Mbps : 2,000,000 100 Mbps : 200,000 1 Gbps Default: 0 Priority: Priority here means Port Priority. Port Priority and Port Number are mixed to form the Port ID. Port IDs are often compared in order to determine which port of a bridge would become the Root Port.
Page 116
M Check: Migration Check. It forces the port sending out an RSTP BPDU instead of a legacy STP BPDU at the next transmission. The only benefit of this operation is to make the port quickly get back to act as an RSTP port. Click <M Check>...
As to system restrictions about the port aggregation function on the switch, In the management point of view, the switch supports maximum 8 trunk groups for LACP and additional 8 trunk groups for Static Trunk. But in the system capability view, only 8 “real trunked”...
Page 118
Per Trunking Group supports a maximum of 12 ready member-ports. Please note that some decisions will automatically be made by the system while you are configuring your trunking ports. Some configuration examples are listed below: a) 12 ports have already used Static Trunk Group ID 1, the 13th port willing to use the same Static Trunk Group ID will be automatically set to use the “None”...
Page 119
Function name: Port Setting/Status Function description: Port setting/status is used to configure the trunk property of each and every port in the switch system. Parameter description: Method: This determines the method a port uses to aggregate with other ports. None: A port does not want to aggregate with any other port should choose this default setting.
Page 120
Aggtr: Aggtr is an abbreviation of “aggregator”. Every port is also an aggregator, and its own aggregator ID is the same as its own Port No. We can regard an aggregator as a representative of a trunking group. Ports with same Group ID and using same trunking method will have the opportunity to aggregate to a particular aggregator port.
Page 121
Function name: Aggregator View Function description: To display the current port trunking information from the aggregator point of view. Parameter description: Aggregator: It shows the aggregator ID (from 1 to 24) of every port. In fact, every port is also an aggregator, and its own aggregator ID is the same as its own Port No..
Page 122
LACP Detail (LACP Aggregator Detailed Information) Function description: Show the detailed information of the LACP trunking group. Parameter description: Actor: The switch you are watching on. Partner: The peer system from this aggregator’s view. System Priority: Show the System Priority part of a system ID.
Page 123
Function name: LACP System Priority Function description: It is used to set the priority part of the LACP system ID. LACP will only aggregate together the ports whose peer link partners are all on a single system. Each system supports LACP will be assigned a globally unique System Identifier for this purpose.
3-16. 802.1X Configuration 802.1X port-based network access control provides a method to restrict users to access network resources via authenticating user’s information. This restricts users from gaining access to the network resources through a 802.1X- enabled port without authentication. If a user wishes to touch the network through a port under 802.1X control, he (she) must firstly input his (her) account name for authentication and waits for gaining authorization before sending or receiving any packets from a 802.1X-enabled port.
Page 125
PC A, then, is allowed to access B and C via the switch. If there are two switches directly connected together instead of single one, for the link connecting two switches, it may have to act two port roles at the end of the link: authenticator and supplicant, because the traffic is bi-directional.
Page 126
EAPOL and the left side is EAP. At the initial stage, the supplicant A is unauthenticated and a port on switch acting as an authenticator is in unauthorized state. So the access is blocked in this stage.
Page 127
If user ID and password is correct, the authentication server will send a Radius-Access-Accept to the authenticator. If not correct, the authentication server will send a Radius-Access-Reject. When the authenticator PAE receives a Radius-Access-Accept, it will send an EAP-Success to the supplicant. At this time, the supplicant is authorized and the port connected to the supplicant and under 802.1X control is in the authorized state.
Page 128
Only Normal 802.1X is the type of authentication supported in the switch. In this mode, for the devices connected to this port, once a supplicant is authorized, the devices connected to this port can access the network resource through this port.
Page 129
Function name: 802.1X State Setting Function description: This function is used to configure the global parameters for RADIUS authentication in 802.1X port security application. Parameter description: Radius Server: RADIUS server IP address for authentication. Default: 192.168.1.1 Port Number: The port number to communicate with RADIUS server for the authentication service.
Page 130
Function name: 802.1X Mode Setting Function description: Set the operation mode of 802.1X for each port. In this device, it supports only Normal operation mode. Parameter description: Port Number: Indicate which port is selected to configure the 802.1X operation mode. 802.1X Mode: 802.1X operation mode.
Page 131
Function name: Port Security Management Function description: Shows each port status. In Normal mode, it shows the port number and its status, authorized or unauthorized. Parameter description: Disable Mode: When selecting Disable mode for a port in the function 802.1X Port Mode Configuration, the port is in the uncontrolled port state and does not apply 802.1X authenticator on it.
Page 132
Function name: Param. Setting Function description: This function is used to configure the parameters for each port in 802.1X port security application. Refer to the following parameters description for details. Parameter description: Port: It is the port number to be selected for configuring its associated 802.1X parameters which are Port control, reAuthMax, txPeriod, Quiet Period, reAuthEnabled, reAuthPeriod, max.
Page 133
reAuthEnabled: Choose whether regular authentication will take place in this port. Default: ON reAuthPeriod(1-65535 s): A non-zero number seconds between the periodic re-authentication of the supplicant. Default: 3600 max. Request(1-10): The maximum of number times that the authenticator will retransmit an EAP Request to the supplicant before it times out the authentication session.
Events Configuration Function description: The Trap Events Configuration function is used to enable the switch to send out the trap information while pre-defined trap events occurred. The switch offers 23 different trap events to users for switch management. The trap information can be sent out in three ways, including email, mobile phone SMS (short message system) and trap.
Page 135
Function name: Email/SMS Configuration Function description: Alarm configuration is used to configure the persons who should receive the alarm message via either email or SMS, or both. It depends on your settings. An email address or a mobile phone number has to be set in the web page of alarm configuration (See Fig.
Page 136
Parameter description: Email: Mail Server: the IP address of the server transferring your email. Username: your username on the mail server. Password: your password on the mail server. Email Address 1 – 6: email address that would like to receive the SMS: SMS Server: the IP address of the server transferring your SMS.
All of them are listed and described below respectively. Default Configuration: This is LevelOne’s setting and cannot be altered. In Web UI, two restore default functions are offered for the user to restore to the default setting of the switch.
3-18-1. Save/Restore Function name: Save As Start Configuration Function description: Save the current configuration as a start configuration file in flash memory. Function name: Save As User Configuration Function description: Save the current configuration as a user configuration file in flash memory. Fig.
Page 139
Function name: Restore Default Configuration (includes default IP address) Function description: Restore Default Configuration function can retrieve LevelOne’s setting to replace the start configuration. And the IP address of the switch will also be restored to 192.168.1.1. Function name: Restore Default Configuration (excludes current IP address) Function description: Restore Default Configuration function can retrieve LevelOne’s setting to...
Page 140
Function name: Restore User Configuration Function description: Restore User Configuration function can retrieve the previous confirmed working configuration stored in the flash memory to update start configuration. When completing to restore the configuration, the system’s start configuration is updated and will be changed its system settings after rebooting the system. Fig.
3-18-2. Config File Function name: Config File Function description: With this function, user can back up or reload the config files of Save As Start or Save As User via TFTP. Parameter description: Export File Path: Export Start: Export Save As Start’s config file stored in the flash. Export User-Conf: Export Save As User’s config file stored in the flash.
3-19. Diagnostics Three functions, including Diagnostics, Loopback Test and Ping Test are contained in this function folder for device self-diagnostics. Each of them will be described in detail orderly in the following sections. Diagnostics Function name: Diagnostics Function description: Diagnostics function provides a set of basic system diagnosis. It let users know that whether the system is health or needs to be fixed.
Page 143
The test signal only wraps around in the switch box. As to the latter test function, it will send the test signal to its link partner. If you do not have them connected to active network devices, i.e.
Page 144
Ping Test function to let you know that if the target device is available or not. You can simply fill in a known IP address and then click <Ping> button. After a few seconds later, the switch will report you the pinged device is alive or dead in the field of Ping Result.
3-20. TFTP Server Function name: TFTP Server Function description: Set up IP address of TFTP server. Parameter description: Specify the IP address where the TFTP server locates. Fill in the IP address of your TFTP server, then press <Apply> button to have the setting taken effect. Fig.
This function shows the log data. The switch provides system log data for users. There are 18 private trap logs, 5 public trap logs. The switch supports total 120 log entries. For more details on log items, please refer to the section of Trap/Alarm Configuration and SNMP Configuration.
3-22. Firmware Upgrade Software upgrade tool is used to help upgrade the software function in order to fix or improve the function. The switch provides a TFTP client for software upgrade. This can be done through Ethernet. Function name: Firmware Upgrade Function description: The switch supports TFTP upgrade tool for upgrading software.
Function name: Reboot Function description: Reboot the switch. Reboot takes the same effect as the RESET button on the front panel of the switch. It will take around thirty (30) seconds to complete the system boot. Parameter description: Save and Reboot: Save the current settings as start configuration before rebooting the switch.
Logout Function description: The switch allows you to logout the system to prevent other users from the system without the permission. If you do not logout and exit the browser, the switch will automatically have you logout. Besides this manually logout and implicit logout, you can pull down the <Auto Logout>...
-- Locate the correct DB-9 null modem cable with female DB-9 connector. Null modem cable comes with the management switch. Refer to the Appendix B for null modem cable configuration. -- Attach the DB-9 female connector to the male DB-9 serial port connector on the Management board.
The same command with the same command name may occur but perform totally different function in different modes. For example, “show” in IP mode performs displaying the IP information; however, it performs displaying the system information in system mode. L2 Managed Switch - GSW-2496 Login: admin Password: GSW-2496# ? 802.1X...
4-2-1. Global Commands of CLI Syntax: Description: Back to the top mode. When you enter this command, your current position would move to the top mode. If you use this command in the top mode, you are still in the position of the top mode. Argument: None.
Page 154
help Syntax: help Description: To show available commands. Some commands are the combination of more than two words. When you enter this command, the CLI would show the complete commands. Besides, the command would help you classify the commands between the local commands and the global ones.
Page 155
history Syntax: history [#] Description: To show a list of previous commands that you had ever run. When you enter this command, the CLI would show a list of commands which you had typed before. The CLI supports up to 256 records. If no argument is typed, the CLI would list total records up to 256.
Page 156
logout Syntax: logout Description: When you enter this command via Telnet connection, you would logout the system and disconnect. If you connect the system through direct serial port with RS-232 cable, you would logout the system and be back to the initial login prompt when you run this command.
Page 157
restore user Syntax: restore user Description: To restore the startup configuration as user defined configuration. If restoring default successfully, the CLI would prompt if reboot immediately or not. If you press Y or y, the system would reboot immediately; others would back to the CLI system. After restoring user-defined configuration, all the changes in the startup configuration would be lost.
Page 158
save user Syntax: save user Description: To save the current configuration as the user-defined configuration. When you enter this command, the CLI would save your current configuration into the non-volatile FLASH as user-defined configuration. Argument: None. Possible value: None. Example: GSW-2496# save user Saving user...
4-2-2. Local Commands of CLI 802.1X set max-request Syntax: set max-request <port-range> <times> Description: The maximum number of times that the state machine will retransmit an EAP Request packet to the Supplicant before it times out the authentication session. Argument: <port range>...
Page 160
set port-control Syntax: set port-control <port-range> <authorized> Description: To set up 802.1X status of each port. Argument: <port range> : syntax 1,5-7, available from 1 to 24 <authorized> : Set up the status of each port 0:ForceUnauthorized 1:ForceAuthorized 2:Auto Possible value: <port range>...
Page 161
Syntax: set reAuthMax <port-range> <max> Description: The number of reauthentication attempts that are permitted before the port becomes Unauthorized. Argument: <port range> : syntax 1,5-7, available from 1 to 24 <max> : max. value , range 1-10 Possible value: <port range> : 1 to 24 <max>...
Page 162
set state <ip> <port-number> <secret-key> Description: To configure the settings related with 802.1X Radius Server. Argument: <ip> : the IP address of Radius Server <port-number> : the service port of Radius Server(Authorization port) <secret-key> : set up the value of secret-key, and the length of secret-key is from 1 to 31 Possible value: <port-number>...
Page 163
To display the mode of each port. Argument: None Possible value: None Example: GSW-2496(802.1X)# show mode Port Mode ====== ============ Disable Normal Disable Disable Disable Disable show parameter Syntax: show parameter Description: To display the parameter settings of each port. Argument: None.
Page 164
port 2) port control : Auto reAuthMax txPeriod : 30 Quiet Period : 60 reAuthEnabled : ON reAuthPeriod : 3600 max. Request : 2 suppTimeout : 30 serverTimeout : 30 show security Syntax: show security Description: To display the authentication Argument: None.
Page 165
Syntax: add <name> Description: To create a new guest user. When you create a new guest user, you must type in password and confirm password. Argument: <name> : new account name Possible value: A string must be at least 5 character. Example: GSW-2496(account)# add aaaaa Password:...
Page 166
modify Syntax: modify <name> Description: To change the username and password of an existing account. Argument: <name> : existing user account Possible value: None. Example: GSW-2496(account)# modify aaaaa username/password: the length is from 5 to 15. Current username (aaaaa):bbbbb New password: Confirm password: Username changed successfully.
Page 167
alarm <<email>> del mail-address Syntax: del mail-address <#> Description: To remove the configuration of E-mail address. Argument: <#>: email address number, range: 1 to 6 Possible value: <#>: 1 to 6 Example: GSW-2496(alarm-email)# del mail-address 2 del server-user Syntax: del server-user Description: To remove the configuration of server, user account and password.
Page 168
set server Syntax: set server <ip> Description: To set up the IP address of the email server. Argument: <ip>:email server ip address or domain name Possible value: None. Example: GSW-2496(alarm-email)# set server 192.168.1.6 set user Syntax: set user <username> Description: To set up the account and password of the email server.
Page 169
<<events>> del all Syntax: del all <range> Description: To disable email, sms and trap of events. Argument: <range>:del the range of events, syntax 1,5-7 Possible value: <range>: 1~23 Example: GSW-2496(alarm-events)# del all 1-3 del email Syntax: del email <range> Description: To disable the email of the events.
Page 170
del trap Syntax: del trap <range> Description: To disable the trap of the events. Argument: <range>:del the range of trap, syntax 1,5-7 Possible value: <range>: 1~23 Example: GSW-2496(alarm-events)# del trap 1-3 set all Syntax: set all <range> Description: To enable email, sms and trap of events. Argument: <range>:set the range of events, syntax 1,5-7 Possible value:...
Page 171
set sms Syntax: set sms <range> Description: To enable the sms of the events. Argument: <range>:set the range of sms, syntax 1,5-7 Possible value: <range>: 1~23 Example: GSW-2496(alarm-events)# set sms 1-3 set trap Syntax: set trap <range> Description: To enable the trap of the events. Argument: <range>:set the range of trap, syntax 1,5-7 Possible value:...
Page 172
Example: GSW-2496(alarm-events)# show Events ----------------------------------------- 1 Cold Start 2 Warm Start 3 Link Down 4 Link Up 5 Authentication Failure 6 User Login 7 User Logout 8 STP Topology Changed 9 STP Disabled 10 STP Enabled 11 LACP Disabled 12 LACP Enabled 13 LACP Member Added 14 LACP Port Failure 15 GVRP Disabled...
Page 173
show (alarm) Syntax: show Description: The Show for alarm here is used to display the configuration of Trap, SMS or E-mail. Argument: None. Possible value: None. Example: GSW-2496(alarm)# show events GSW-2496(alarm)# show email GSW-2496(alarm)# show sms <<sms>> del phone-number Syntax: del phone-number <#>...
Page 174
set phone-number Syntax: set phone-number <#> <phone-number> Description: To add sms phone number. Argument: <#>: mobile phone number, range: 1 to 6 <phone-number>: phone number Possible value: <#>: 1 to 6 Example: GSW-2496(alarm-sms)# set phone-number 1 0968777777 set server Syntax: set server <ip>...
Page 175
show Syntax: show Description: To display the configuration of SMS trap event. Argument: None. Possible value: None. Example: GSW-2496(alarm-sms)# show SMS Server : 192.168.1.7 Username : ABC Password : **************** Mobile Phone 1: 0968777777 Mobile Phone 2: Mobile Phone 3: Mobile Phone 4: Mobile Phone 5: Mobile Phone 6:...
Page 176
bandwidth disable egress-rate Syntax: disable egress-rate <range> Description: To cancel the egress-rate of the port. Argument: <range>:syntax 1,5-7, available from 1 to 24 Possible value: <range>: 1 to 24 Example: GSW-2496(bandwidth)# disable egress-rate 1-8 disable ingress-rate Syntax: disable ingress-rate <range> Description: To cancel the Ingress-rate of the port.
Page 177
enable egress-rate Syntax: enable egress-rate <range> <data_rate> Description: To set up the egress-rate of the port. Argument: <range>:syntax 1,5-7, available from 1 to 24 <data_rate>: 0-1000 Possible value: <range>: 1 to 24 <data_rate>: 0-1000 Example: GSW-2496(bandwidth)# enable egress-rate 1-16 200 enable ingress-rate Syntax: enable ingress-rate <range>...
Page 178
Syntax: show Description: To display all current settings of the bandwidth. Argument: None. Possible value: None. Example: GSW-2496(bandwidth)# show Ingress Port ================================================= ====================== All State All Rate ====== =========== ========== ============= ============ =========== ========== Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled...
Page 179
config-file export start Syntax: export start Description: To run the export start function. Argument: None. Possible value: None. Example: GSW-2496(config-file)# export start Export successful. export user-conf Syntax: export user-conf Description: To run the export user-conf function. Argument: None Possible value: None Example: GSW-2496(config-file)# export user-conf...
Page 180
import user-conf Syntax: import user-conf Description: To run the import user-conf function. Argument: None Possible value: None Example: GSW-2496(config-file)# import user-conf Import successful. set export-path Syntax: set export-path <filepath> Description: To set up the filepath and filename that will be exported. Argument: <filepath>:filepath and filename Possible value:...
Page 181
show Syntax: show Description: To display the config-file information. Argument: None. Possible value: None. Example: GSW-2496(config-file)# show TFTP Server IP Address: 192.168.3.111 Export Path and Filename: nmap/123.ts Import Path and Filename: user123.txt...
Page 182
dhcp-boot set dhcp-boot Syntax: set dhcp-boot <sec> Description: To set up the delay time for DHCP Boot. Argument: <sec>:range syntax: 0, 1-30. The value “0” is to disable dhcp-boot delay Possible value: <sec>:0-30 Example: GSW-2496(dhcp-boot)# set dhcp-boot 30 show Syntax: show Description: To display the status of DHCP Boot.
Page 183
19 20 21 22 23 24 Fail ping Syntax: ping <ip> Description: To confirm that whether the remote end-station or switch itself is alive or not. Argument: <ip> : ip address or domain name Possible value: IP address, e.g. 192.168.2.65 or domain name, e.g. tw.yahoo.com Example: GSW-2496(diag)# ping 192.168.1.115...
Page 184
firmware set upgrade-path Syntax: set upgrade-path <filepath> Description: To set up the image file that will be upgraded. Argument: <filepath>: upgrade file path Possible value: <filepath>: upgrade file path Example: GSW-2496(firmware)# set upgrade-path gs2124c_GSW-2496_v2.03.img show Syntax: show Description: To display the information of tftp server and upgrade-path. Argument: None.
Page 185
gvrp disable Syntax: disable Description: To disable the gvrp function. Argument: None. Possible value: None. Example: GSW-2496(gvrp)# disable enable Syntax: enable Description: To enable the gvrp function. Argument: None. Possible value: None. Example: GSW-2496(gvrp)# enable group Syntax: group <group number> Description: To enter any of gvrp group for changing gvrp group setting.
Page 186
GSW-2496(gvrp)# group 2 GSW-2496(gvrp-group-2)# set applicant 1-6 non-participant GSW-2496(gvrp-group-2)# show GVRP group VID: 2 Port Applicant Registrar ---- --------------- --------- Non-Participant Normal Non-Participant Normal Non-Participant Normal Non-Participant Normal Non-Participant Normal Non-Participant Normal Normal Normal Normal Normal Normal Normal Normal Normal Normal Normal Normal...
Page 187
set applicant Syntax: set applicant <range> <normal|non-participant> Description: To set default applicant mode for each port. Argument: <range>: port range, syntax 1,5-7, available from 1 to 24 <normal>: set applicant as normal mode <non-participant>: set applicant as non-participant mode Possible value: <range>: 1 to 24 <normal|non-participant>: normal or non-participant Example:...
Page 188
set restricted Syntax: set restricted <range> <enable|disable> Description: To set the restricted mode for each port. Argument: <range>: port range, syntax 1,5-7, available from 1 to 24 <enable>: set restricted enabled <disable>: set restricted disabled Possible value: <range>: 1 to 24 <enable|disable>: enable or disable Example: GSW-2496(gvrp)# set restricted 1-10 enable...
Page 189
set timer Syntax: set timer <range> <join> <leave> <leaveall> Description: To set gvrp join time, leave time, and leaveall time for each port. Argument: <range> : port range, syntax 1,5-7, available from 1 to 24 <join>: join timer, available from 20 to 100 <leave>: leave timer, available from 60 to 300 <leaveall>: leaveall timer, available from 1000 to 5000 Leave Time must equal double Join Time at least.
Page 190
show counter Syntax: show counter <port> Description: To display the counter number of the port. Argument: <port>: port number Possible value: <port>: available from 1 to 24 Example: GSW-2496(gvrp)# show counter 2 GVRP Counter port: 2 Counter Name Received Transmitted -------------------- -------- ----------- Total GVRP Packets...
Page 191
Syntax: hostname <name> Description: To set up the hostname of the switch. Argument: <name>: hostname, max. 40 characters. Possible value: <name>: hostname, max. 40 characters. Example: GSW-2496# hostname Company Company# igmp-snooping add allowed-group Syntax: add allowed-group <ip-multicast> <vid> <port-range>...
Page 192
set mode Syntax: set mode <status> Description: To set up the mode of IGMP Snooping. Argument: <status>: 0:disable, 1:active, 2:passive Possible value: <status>: 0,1or 2 Example: GSW-2496(igmp-snooping)# set mode 2 show igmp-snooping Syntax: show igmp-snooping Description: To display IGMP snooping mode and allowed IP multicast entry. Argument: None.
Page 193
disable dhcp Syntax: disable dhcp Description: To disable the DHCP function of the system. Argument: None. Possible value: None. Example: GSW-2496(ip)# disable dhcp enable dhcp Syntax: enable dhcp <manual|auto> Description: To enable the system DHCP function and set DNS server via manual or auto mode. Argument: <manual|auto>...
Page 194
set ip Syntax: set ip <ip> <mask> <gateway> Description: To set the system IP address, subnet mask and gateway. Argument: <ip> : ip address <mask> : subnet mask <gateway> : default gateway Possible value: <ip> : 192.168.1.2 or others <mask> : 255.255.255.0 or others <gateway>...
Page 195
clear Syntax: clear Description: To clear the log data. Argument: None. Possible value: None. Example: GSW-2496(log)# clear disable auto-upload Syntax: disable auto-upload Description: To disable the auto-upload function. Argument: None. Possible value: None. Example: GSW-2496(log)# disable auto-upload enable auto-upload Syntax: enable auto-upload Description: To enable the auto-upload function.
Page 196
show Syntax: show Description: To show a list of trap log events. When any of log events happens, it will be recorded and using show command in log function to query. Up to 120 log records are supported. Argument: None. Possible value: None.
Page 197
mac-table <<alias>> Syntax: del <mac> Description: To delete the mac alias entry. Argument: <mac> : mac address, format: 00-02-03-04-05-06 Possible value: <mac> : mac address Example: GSW-2496(mac-table-alias)# del 00-44-33-44-55-44 Syntax: set <mac> <alias> Description: To set up the mac alias entry. Argument: <mac>...
Page 198
search Syntax: search <port> <mac> <vid> Description: To look for the relative mac information in mac table. Argument: <port> : set up the range of the ports to search for, syntax 1,5-7, available form 1 to 24 <mac> : mac address, format: 01-02-03-04-05-06, '?' can be used <vid>...
Page 199
<<maintain>> set aging Syntax: set aging <#> Description: To set up the age out time of dynamic learning mac. Argument: <#>: age-timer in seconds, 0, 10 to 65535. The value “0” means to disable aging Possible value: <#>: 0, 10 to 65535. Example: GSW-2496(mac-table-maintain)# set aging 300 set flush...
Page 200
<<static-mac>> Syntax: add <mac> <port> <vid> [alias] Description: To add the static mac entry. Argument: <mac> : mac address, format: 00-02-03-04-05-06 <port> : 0-24. The value “0” means this entry is filtering entry <vid> : vlan id. 0, 1-4094. VID must be zero if vlan mode is not tag-based [alias] : mac alias name, max.
Page 201
show filter Syntax: show filter Description: To display the static filter table. Argument: None Possible value: None Example: GSW-2496(mac-table-static-mac)# show filter Static Filtering Etnry: (Total 1 item(s)) 1) mac: 00-33-03-04-05-06, vid: -, alias: ccc show forward Syntax: show forward Description: To display the static forward table.
Page 202
management Syntax: Usage: set [<name> <value>] [<vid> <value>] [<ip> <value>] [<port> <value>] [<type> <value>] <action> <value> Synopsis: set name Mary vid 20 ip 192.168.1.1-192.168.1.90 port 2-5,8 type h,s action a Synopsis: set name Mary vid 20 ip 192.168.1.1-192.168.1.90 Description: To save the adding management policy records. When you don’t know how to set the management policy records, you can use this command as follows: GSW-2496 (management-add)# set...
Page 203
delete Syntax: delete # Description: To delete a specific record or range. Argument: <#>: a specific or range management security entry(s) Possible value: None. Example: GSW-2496(management)# show #: 1 Name : Tom Type : SNMP GSW-2496(management)# delete 1 GSW-2496(management)# show Security rule list is empty now VlanID : 2 IP : 192.168.1.30-192.168.1.80...
Page 204
edit [#]: the specific management policy entry. Available range: 1 to 65536. Syntax: Usage: set [<name> <value>] [<vid> <value>] [<ip> <value>] [<port> <value>] [<type> <value>] <action> <value> Synopsis: set name Mary vid 20 ip 192.168.1.1-192.168.1.90 port 2-5,8 type h,s action a Synopsis: set name Mary vid 20 ip 192.168.1.1-192.168.1.90 Description: To edit management policy record.
Page 205
show Syntax: show Description: To show the specific management policy record. Argument: None. Possible value: None. Example: GSW-2496(management)# show #: 1 Name : Tom Type : SNMP VlanID : 2 IP : 192.168.1.30-192.168.1.80 Action : Deny Port : 1,2...
Page 206
Syntax: set len <range> <length> Description: To set up the maximum length of the packet that each port of the switch can accept. Argument: <range>: port range, syntax 1,5-7, available from 1 to 24 <length (bytes)>: maximum packet length Possible value: <range>...
Page 207
mirror set mirror-mode Syntax: set mirror-mode <rx|disable> Description: To set up the mode of mirror (rx mode or disable). Argument: <rx | disable>: rx : enable the mode of mirror(Only mirror the packets that is received) disable: end the function of mirror Possible value: <rx | disable>: rx or disable Example:...
Page 208
show Syntax: show Description: To display the setting status of Mirror function. Argument: None. Possible value: None. Example: GSW-2496(mirror)# show Mirror Mode : rx Monitoring Port : 2 Monitored Port : 3 4 5 7 10...
Page 209
port clear counter Syntax: clear counter Description: To clear all ports’ counter (include simple and detail port counter) information. Argument: None. Possible value: None. Example: GSW-2496 (port)# clear counter disable flow-control Syntax: disable flow-control <range> Description: To disable the flow control function of the port. Argument: <range>: syntax 1,5-7, available from 1 to 24 Possible value:...
Page 210
enable flow-control Syntax: enable flow-control <range> Description: To enable the flow control function of the port. Argument: <range>: syntax 1,5-7, available from 1 to 24 Possible value: <range>: 1 ~ 24 Example: GSW-2496 (port)# enable flow-control 3-8 enable state Syntax: enable state <range>...
Page 211
GSW-2496 (port)# show detail-counter 5 show sfp Syntax: show sfp <port> Description: To display the SFP module information. Argument: <port>: SFP port of the switch, available from 9 to 24 Possible value: <port>: 9 to 24 Example: GSW-2496 (port)# show sfp 9...
Page 212
: SFP - LC Fiber Type : Multi-mode (MM) Tx Central Wavelength : 850 Baud Rate : 1G Vendor OUI : 00:11:6b Vendor Name : LevelOne Vendor PN : GVT-0300 Vendor Rev : 0000 Vendor SN : 5425010728 Date Code : 070430...
Page 213
set advance-layer4 Syntax: set advance-layer4 <port-range> <#> <tcp/udp port> <default> <match> Description: To set class of ports on advanced mode of Layer 4 qos. Argument: <port-range>: port range, syntax 1,5-7, available from 1 to 24 <#>: special UDP/TCP port selection, range: 1-10 <tcp/udp port range>: 0-65535.
Page 214
Example: GSW-2496(qos)# set diffserv 0-20 1 set mode Syntax: set mode <port/pri_tag/tos/layer4/diffserv> Description: To set qos priority mode of the switch. Argument: <port>: per port priority <pri_tag>: vlan tag priority <tos>: ip tos classification <layer4>: ip tcp/udp port classification <diffserv>: ip diffserv classification...
Page 215
set pri-tag Syntax: set pri_tag <port-range> <tag-range> <class> Description: To set class of ports on vlan tag-based qos. Argument: <port-range>: port range, syntax 1,5-7, available from 1 to 24 <tag-range>: tag priority level, syntax: 1,5-7, available from 0 to 7 <class>: class of service setting.
Page 216
set tos Syntax: set tos <port-range> <tos-range> <class> Description: To set class of ports on IP TOS qos. Argument: <port-range>: port range, syntax: 1,5-7, available from 1 to 24 <tos-range>: tos precedence field, syntax 1,5-7, available from 0 to 7 <class>: class of service setting.
Page 217
reboot reboot Syntax: reboot Description: To reboot the system. Argument: None. Possible value: None. Example: GSW-2496# reboot snmp disable Syntax: disable set-ability disable snmp Description: The Disable here is used for the de-activation of snmp or set-community. Argument: None. Possible value: None.
Page 218
Syntax: set get-community <community> set set-community <community> set trap <#> <ip> [port] [community] Description: The Set here is used for the setup of get-community, set-community, trap host ip, host port and trap-community. Argument: <#>: trap number <ip>: ip address or domain name <port>: trap port <community>:trap community name Possible value:...
Page 219
MCheck Syntax: MCheck <range> Description: To force the port to transmit RST BPDUs. Argument: <range>: syntax 1,5-7, available from 1 to 24 Possible value: <range>: 1 to 24 Example: GSW-2496(stp)# Mcheck 1-8 disable Syntax: disable Description: To disable the STP function. Argument: None.
Page 220
set config Syntax: set config <Bridge Priority> <Hello Time> <Max. Age> <Forward Delay> Description: To set up the parameters of STP. Argument: <Bridge Priority>:priority must be a multiple of 4096, available from 0 to 61440. <Hello Time>: available from 1 to 10. <Max.
Page 221
set version Syntax: set version <stp|rstp> Description: To set up the version of STP. Argument: <stp|rstp>:stp / rstp Possible value: <stp|rstp>:stp / rstp Example: GSW-2496(stp)# set version rstp show config Syntax: show config Description: To display the configuration of STP. Argument: None.
Page 222
show port Syntax: show port Description: To display the port information of STP. Argument: None. Possible value: None. Example: GSW-2496# stp GSW-2496(stp)# show port Port Port Status Path Cost Priority Admin Edge Port Admin Point To Point ==== =========== ========= ======== =============== ==================== 1 DISCARDING 2000000 2 DISCARDING...
Page 223
show status Syntax: show status Description: To display the status of STP. Argument: None. Possible value: None. Example: GSW-2496(stp)# show status STP Status : STP State Bridge ID Bridge Priority Designated Root Designated Priority Root Port Root Path Cost Current Max. Age(sec) Current Forward Delay(sec) Hello Time(sec) STP Topology Change Count...
Page 224
Syntax: set device-name <device-name string> Description: To set the device name description of the switch. Argument: <device-name>: string length up to 40 characters. Possible value: <device-name>: A, b, c, d, ... ,z and 1, 2, 3, …. etc.
Page 225
Syntax: show Description: To display the basic information of the switch. Argument: None. Possible value: None. Example: GSW-2496(system)# show Model Name System Description Location Contact Device Name System Up Time Current Time BIOS Version Firmware Version Hardware-Mechanical Version : v65535.65535-v65535.65535...
Page 226
tftp set server Syntax: set server <ip> Description: To set up the IP address of tftp server. Argument: <ip>: the IP address of tftp server Possible value: <ip>: tftp server ip Example: GSW-2496(tftp)# set server 192.168.3.111 show Syntax: show Description: To display the information of tftp server.
Page 227
time set daylightsaving Syntax: set daylightsaving <hr> <MM/DD/HH> <mm/dd/hh> Description: To set up the daylight saving. Argument: : daylight saving hour, range: -5 to +5 : daylight saving start Month (01-12) : daylight saving start Day (01-31) : daylight saving start Hour (00-23) : daylight saving end Month (01-12) : daylight saving end Day (01-31) : daylight saving end Hour (00-23)
Page 228
Syntax: set ntp <ip> <timezone> Description: To set up the current time via NTP server. Argument: <ip>: ntp server ip address or domain name <timezone>: time zone (GMT), range: -12 to +13 Possible value: <timezone>: -12,-11…,0,1…,13 Example: GSW-2496(time)# set ntp clock.via.net 8 Synchronizing...(1) Synchronization success show...
Page 229
trunk del trunk Syntax: del trunk <port-range> Description: To delete the trunking port. Argument: <port-range>: port range, syntax 1,5-7, available from 1 to 24 Possible value: <port-range>: 1 to 24 Example: GSW-2496(trunk)# del trunk 1 set priority Syntax: set priority <range> Description: To set up the LACP system priority.
Page 230
show aggtr-view Syntax: show aggtr-view Description: To display the aggregator list. Argument: None. Possible value: None. Example: GSW-2496(trunk)# show aggtr-view Aggregator 1) Method: None Member Ports: 1 Ready Ports:1 Aggregator 2) Method: LACP Member Ports: 2 Ready Ports: show lacp-detail Syntax: show lacp-detail <aggtr>...
Page 231
Syntax: show lacp-priority Description: To display the value of LACP Priority. Argument: None. Possible value: None. Example: GSW-2496(trunk)# show lacp-priority LACP System Priority : 32768 show status Syntax: show status Description: To display the aggregator status and the settings of each port. Argument: None.
Page 232
vlan del port-group Syntax: del port-group <name> Description: To delete the port-based vlan group. Argument: <name>: which vlan group you want to delete. Possible value: <name>: port-vlan name Example: GSW-2496(vlan)# del port-group VLAN-2 del tag-group Syntax: del tag-group <vid> Description: To delete the tag-based vlan group.
Page 233
disable sym-vlan Syntax: disable sym-vlan <range> Description: To drop frames from the non-member port. Argument: <range>: which port(s) you want to set, syntax 1,5-7, available from 1 to 24 Possible value: <range>: 1 to 24 Example: GSW-2496(vlan)# disable sym-vlan 5-10 enable drop-untag Syntax: enable drop-untag <range>...
Page 234
Syntax: set mode <disable|port|tag|metro|double-tag> [up-link] Description: To switch VLAN mode, including disable, port-based, tag-based, metro and double- tag modes. Argument: <disable>: vlan disable <tag>: set tag-based vlan <port>: set port-based vlan <metro>: set metro mode vlan <double-tag>: enable Q-in-Q function <up-link>: syntax 1,5-7, available from 23 to 24, only for metro mode vlan...
Page 235
set port-role Syntax: set port-role <range> <access|trunk|hybrid> [vid] Description: To set egress rule: configure the port roles. Argument: <range> :which port(s) you want to set, syntax 1,5-7, available from 1 to 24 <access>: Do not tag frames <trunk>: Tag all frames <hybrid>: Tag all frames except a specific VID <vid>: untag-vid for hybrid port Possible value:...
Page 236
set tag-group Syntax: set tag-group <vid> <name> <range> <#> Description: To add or edit the tag-based vlan group. Argument: <vid>: vlan ID, range from 1 to 4094 <name>: tag-vlan name <range>: vlan group members, syntax 1,5-7, available from 1 to 24 <#>: sym/asym vlan setting.
Page 237
show pvid Syntax: show pvid Description: To display pvid, ingress/egress rule. Argument: None. Possible value: None. Example: GSW-2496(vlan)# show pvid Port PVID Rule1 ------ ------ --------- --------- ----------- ----------- Disable Disable Disable Disable Enable Enable Enable Enable Enable Enable Disable Disable Disable Rule2...
Page 238
disable Syntax: disable Description: To disable the virtual stack. Argument: None. Possible value: None. Example: GSW-2496(vs)# disable enable Syntax: enable Description: To enable the virtual stack. Argument: None. Possible value: None. Example: GSW-2496(vs)# enable set gid Syntax: set gid <gid> Description: To set the group id.
Page 239
set role Syntax: set role <master|slave> Description: To set role. Argument: <master|slave>: master: act as master, slave : act as slave Possible value: <master|slave>: master or slave Example: GSW-2496(vs)# set role master show Syntax: show Description: To display the configuration of the virtual stack. Argument: None.
The connection ports on another must be connection ports. Please check if connection ports are used on that Managed Switch. Please check the uplink setup of the Managed Switch to verify the uplink function is enabled. 3. The console interface cannot appear on the console port connection.
Supports port-based VLAN, 802.1Q tag-based VLAN. • Efficient self-learning and address recognition mechanism enables forwarding rate at wire speed. • Web-based management provides the ability to completely manage the switch from any web browser. • SNMP/Telnet interface delivers complete in-band management. •...
Page 242
Hardware Specifications Standard Compliance: IEEE802.3/802.3ab / 802.3z / 802.3u / 802.3x Network Interface: Configuration 10/100/1000Mbps Gigabit TP 1000Base-SX Gigabit Fiber 1000Base-LX Gigabit Fiber *Optional SFP module supports LC transceiver Transmission Mode: 10/100Mbps support full or half duplex 1000Mbps support full duplex only Transmission Speed: 10/100/1000Mbps for TP 1000Mbps for Fiber Full Forwarding/Filtering Packet Rate: PPS (packets per second)
Page 243
Diagnostic LED: System LED : Per Port LED: 10/100/1000M TP Port 1 to 8 1000M SFP Fiber Port 9 to 24 Power Requirement Voltage Frequency Consumption Ambient Temperature Humidity Dimensions Comply with FCC Part 15 Class A & CE Mark Approval Power, CPU : LINK/ACT, SPEED : SFP(LINK/ACT)
Page 244
Trunk Connection. SNMP support; MIB II, Bridge MIB, RMON MIB IEEE 802.1D Port-Base / 802.1Q-Tagged, allowed up to 256 active VLANs in one switch. Ports trunk connections allowed IP Multicast Filtering by passively snooping on the IGMP Query. Supports by-port Egress/Ingress rate control Referred as Class of Service (CoS) by the IEEE 802.1P standard ,Classification of packet priority...
Null Modem Cable Specifications The DB-9 cable is used for connecting a terminal or terminal emulator to the Managed Switch’s RS-232 port to access the command-line interface. The table below shows the pin assignments for the DB-9 cable. Function Carrier...
Need help?
Do you have a question about the ProCon GSW-2496 and is the answer not in the manual?
Questions and answers