Planet Networking & Communication IGS-5225-8T2S2X User Manual
  1. Manuals
  2. Brands
  3. Planet Networking & Communication Manuals
  4. Switch
  5. IGS-5225-8T2S2X
  6. User manual

Planet Networking & Communication IGS-5225-8T2S2X User Manual

Hide thumbs
1
2
Table Of Contents
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
Table of Contents

Advertisement

Quick Links

Download this manual
User's Manual of IGS-5225-8T2S2X & 8P2S2X series
1

Advertisement

Table of Contents
loading

Related Manuals for Planet Networking & Communication IGS-5225-8T2S2X

Summary of Contents for Planet Networking & Communication IGS-5225-8T2S2X

  • Page 1 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series...
  • Page 2 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Trademarks Copyright © PLANET Technology Corp. 2018. Contents are subject to revision without prior notice. PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their respective owners. Disclaimer...

  • Page 3: Table Of Contents

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series TABLE OF CONTENTS INTRODUCTION ....................... 11 1.1 Packet Contents ............................11 1.2 Product Description ........................... 12 1.3 How to Use This Manual ..........................16 1.4 Product Features ............................17 1.5 Product Specifications ..........................21 2.
  • Page 4 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4. WEB CONFIGURATION ...................... 52 4.1 Main Web Page ............................55 4.2 System ................................. 57 4.2.1 Management ................................ 58 4.2.1.1 System Information ............................ 58 4.2.1.2 IP Configuration ............................59 4.2.1.3 IP Status ..............................62 4.2.1.4 Users Configuration ...........................
  • Page 5 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.3.7 RMON Statistics Configuration ........................ 104 4.2.3.8 RMON Statistics Status ........................... 105 4.2.4 DHCP server ..............................107 4.2.4.1 DHCP Server Mode Configuration ......................107 4.2.4.2 DHCP Server excluded IP Configuration ....................108 4.2.4.3 DHCP Server pool Configuration ......................109 4.2.4.4 DHCP Server pool Configuration ......................
  • Page 6 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.3.11 Protocol-based VLAN ..........................159 4.3.3.12 Protocol-based VLAN Membership ....................... 161 4.3.4 Spanning Tree Protocol ............................. 163 4.3.4.1 Theory ..............................163 4.3.4.2 STP System Configuration ........................169 4.3.4.3 Bridge Status ............................171 4.3.4.4 CIST Port Configuration .......................... 172 4.3.4.5 MSTI Priorities ............................
  • Page 7 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.9 MAC Address Table ............................225 4.3.9.1 MAC Table Configuration ......................... 225 4.3.9.2 MAC Address Table Status ........................227 4.3.10 Loop Protection ............................... 229 4.3.10.1 Configuration ............................229 4.3.10.2 Loop Protection Status .......................... 230 4.3.11 UDLD ................................
  • Page 8 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.1 Access Security ..............................271 4.5.1.1 Access Management ..........................271 4.5.1.2 Access Management Statistics ........................ 272 4.5.1.3 SSH ................................. 273 4.5.1.4 HTTPs ..............................273 4.5.2 AAA ................................... 276 4.5.2.1 Authentication Configuration ........................280 4.5.2.2 RADIUS ..............................
  • Page 9 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.6.1.3 Power over Ethernet Configuration......................341 4.6.1.4 Port Configuration............................ 343 4.6.1.5 PoE Status .............................. 345 4.6.1.6 Port Sequential ............................346 4.6.1.7 PoE Schedule ............................347 4.6.1.8 PoE Alive Check Configuration ........................ 350 4.6.1.9 LLDP PoE Neighbors ..........................351 4.7 Ring ................................
  • Page 10 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 5.1 Address Table ............................385 5.2 Learning ..............................385 5.3 Forwarding & Filtering ..........................385 5.4 Store-and-Forward ........................... 385 5.5 Auto-Negotiation ............................386 6. TROUBLESHOOTING ....................... 387 APPENDIX A: Networking Connection ................388 A.1 Switch's Data RJ45 Pin Assignments - 1000Mbps, 1000BASE-T ............

  • Page 11: Introduction

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 1. INTRODUCTION The descriptions of PLANET L3 Industrial Managed Switch series, such as IGS-5225-8T2S2X and IGS-5225-8P2S2X, is as follows: Industrial L3 8-Port 10/100/1000T Managed Ethernet Switch with 2-Port 100/1000X SFP + 2-Port IGS-5225-8T2S2X 10G SFP+ Industrial L3 8-Port 10/100/1000T 802.3at PoE Managed Ethernet Switch with 2-Port 100/1000X...

  • Page 12: Product Description

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 1.2 Product Description PLANET Industrial Managed Switch is specially designed to build a full Gigabit backbone to transmit reliable and high-speed data in heavy industrial demanding environments and forward data to remote network through fiber optic cabling. It comes with an IP30 rugged case and redundant power system.
  • Page 13 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Intelligent Powered Device Alive Check (IGS-5225-8P2S2X) The Industrial Managed PoE Switch can be configured to monitor connected PD (powered device) status in real-time via ping action. Once the PD stops working and responding, the Industrial Managed PoE Switch will recycle the PoE port power and bring the PD back to work.
  • Page 14 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series PoE Schedule for Energy Saving (IGS-5225-8P2S2X) Under the trend of energy saving worldwide and contributing to environment protection on the Earth, the Industrial Managed PoE Switch can effectively control the power supply along with its capability of giving high watts power over Ethernet. The “PoE schedule”...
  • Page 15 Flexible and Extendable 10Gb Ethernet Solution 10G Ethernet is a big leap in the evolution of Ethernet. Each of the 10G SFP+ slots in the IGS-5225-8T2S2X/IGS-5225-8P2S2X supports dual speed and 10GBASE-SR/LR or 1000BASE-SX/LX, providing broad bandwidth and powerful processing capacity.

  • Page 16: How To Use This Manual

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 1.3 How to Use This Manual This User’s Manual is structured as follows: Section 2, INSTALLATION The section explains the functions of the Industrial Managed Switch and how to physically install the Industrial Managed Switch.

  • Page 17: Product Features

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 1.4 Product Features  Physical Port  8 10/100/1000BASE-T Gigabit Ethernet RJ45 ports  2 100/1000BASE-X mini-GBIC/SFP slots for SFP type auto detection  2 10GBASE-SR/LR SFP+ slots, backward compatible with 1000BASE-SX/LX/BX SFP ...
  • Page 18 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  Integrate sensors into auto alarm system  Transfer alarm to IP network via email and SNMP trap  Layer 2 Features  Prevents packet loss with back pressure (half-duplex) and IEEE 802.3x pause frame flow control (full-duplex) ...
  • Page 19 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series IP TCP/UDP port number Typical network application  Strict priority and Weighted Round Robin (WRR) CoS policies  Supports QoS and In/Out bandwidth control on each port  Traffic-policing policies on the switch port ...
  • Page 20 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  System Maintenance - Firmware upload/download via HTTP/TFTP - Reset button for system reboot or reset to factory default - Dual Images  DHCP Server  DHCP Relay  DHCP Option 82  User Privilege levels control ...

  • Page 21: Product Specifications

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 1.5 Product Specifications Product IGS-5225-8T2S2X IGS-5225-8P2S2X Hardware Specifications Hardware Version Copper Ports 8 10/100/1000BASE-T RJ45 auto-MDI/MDI-X ports 2 1000BASE-SX/LX/BX SFP interfaces (Port-9 to Port-10) SFP/mini-GBIC Slots Compatible with 100BASE-FX SFP 2 10GbBASE-SR/LR SFP+ interfaces (Port-11 and Port-12)
  • Page 22 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series DIDO (Red) DIDO (Red) Per 10/100/1000T RJ45 Ports: Per 10/100/1000T RJ45 Ports: 100 LNK/ACT (Orange) LNK/ACT (Green) 1000 LNK/ACT (Green) PoE In-Use (Orange) Per SFP Interface: Per SFP Interface: 100 LNK/ACT (Orange) 100 LNK/ACT (Orange)
  • Page 23 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series - 802.1Q VLAN tag - DSCP/TOS field in IP packet IGMP (v1/v2/v3) snooping, up to 255 multicast groups IGMP Snooping IGMP querier mode support MLD (v1/v2) snooping, up to 255 multicast groups MLD Snooping...
  • Page 24 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series RFC 2737 Entity MIB RFC 2618 RADIUS Client MIB RFC 2933 IGMP-STD-MIB RFC 3411 SNMP-Frameworks-MIB IEEE 802.1X PAE LLDP MAU-MIB Environment Operating Temperature -40 ~ 75 degrees C Storage Temperature -40 ~ 85 degrees C...

  • Page 25: Installation

    Managed Switch, familiarize yourself with its display indicators and ports. Front panel illustrations in this chapter display the unit LED indicators. Before connecting any network device to the Industrial Managed Switch, read this chapter carefully. 2.1 Hardware Description 2.1.1 Physical Dimensions IGS-5225-8T2S2X  IGS-5225-8T2S2X  Dimensions (W x D x H) : 72 x 107 x 152mm...
  • Page 26 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series IGS-5225-8P2S2X  IGS-5225-8P2S2X  Dimensions (W x D x H) : 72 x 107 x 152mm...

  • Page 27: Front Panel

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 2.1.2 Front Panel IGS-5225-8T2S2X IGS-5225-8P2S2X Figure 2-1: Figure 2-2: IGS-5225-8T2S2X Switch Front Panel IGS-5225-8P2S2X Switch Front Panel ■ Gigabit TP Interface 10/100/1000BASE-T Copper, RJ45 Twisted-pair: Up to 100 meters. ■ SFP Slot 100/1000BASE-X mini-GBIC slot, SFP (Small-form Factor Pluggable) transceiver module: From 550 meters to 2km (multi-mode fiber) and to 10/20/30/40/50/70/120 kilometers (single-mode fiber).
  • Page 28 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The console port is an RJ45 port connector. It is an interface for connecting a terminal directly. Through the console port, it provides rich diagnostic information including IP address setting, factory reset, port management, link status and system setting.

  • Page 29: Led Indications

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 2.1.3 LED Indications IGS-5225-8T2S2X  System Color Function Green Indicates power 1 has power. Green Indicates power 2 has power. Fault Indicates either power 1 or power 2 has no power. Ring Green Lights to indicate that the ERPS Ring has been created successfully.
  • Page 30 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series IGS-5225-8P2S2X  System Color Function Green Indicates power 1 has power. Green Indicates power 2 has power. Fault Indicates either power 1 or power 2 has no power. Ring Green Lights to indicate that the ERPS Ring has been created successfully.

  • Page 31: Switch Rear Panel

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 2.1.4 Switch Rear Panel The Upper Panel of the Industrial Managed Switch comes with a DC inlet power socket and one terminal block connector with 6 contacts. Insert positive/negative DC power wires into contacts 1 and 2 for DC Power 1, or 5 and 6 for DC Power 2.

  • Page 32: Wiring The Fault Alarm Contact

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Tighten the wire-clamp screws for preventing the wires from loosening. DC 1 DC 2 Figure 2-6: 6-Pin Terminal Block Power Wiring Inpu Model Name Positive (+) Pin Negative (-) Pin Input Voltage IGS-5225-8T2S2X...

  • Page 33: Wiring The Digital Input/Output

    The 6-contact terminal block connector on the rear panel of IGS Series is used for Digital Input and Digital Output. Please follow the steps below to insert wire. The IGS-5225-8T2S2X/IGS-5225-8P2S2X offers two DI and DO groups. 1 and 2 are DI groups; 3 and 4 are DO groups; and 5 and 6 are GND (ground).
  • Page 34 Figure 2-9 Wires DI0 and DI1 to Open Detector There are two Digital Output groups for you to sense IGS-5225-8T2S2X/IGS-5225-8P2S2X port failure or power failure and issue a high or low signal to external device. The following topology shows how to wire DO0 and DO1.

  • Page 35: Installing The Industrial Managed Switch

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 2.2 Installing the Industrial Managed Switch This section describes how to install your Industrial Managed Switch and make connections to the Industrial Managed Switch. Please read the following topics and perform the procedures in the order being presented. To install your Industrial Managed Switch on a desktop or shelf, simply complete the following steps.

  • Page 36: Din-Rail Mounting

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 2.2.2 DIN-rail Mounting This section describes how to install the Industrial Managed Switch. There are two methods to install the Industrial Managed Switch -- DIN-rail mounting and wall-mount plate mounting. Please read the following topics and perform the procedures in the order being presented.
  • Page 37 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Step 3: Check whether the DIN-rail bracket is tightly on the track. Please refer to the following procedure to remove the Industrial Managed Switch from the track. Step 4: Lightly remove the unit from the track by pulling out the bottom part first.

  • Page 38: Wall Mount Plate Mounting

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 2.2.3 Wall Mount Plate Mounting To install the Industrial Managed Switch on the wall, please follow the instructions below. Follow all the DIN-rail installation steps as shown in the example. Step 1: Remove the DIN-rail bracket from the Industrial Managed Switch. Use the screwdriver to loosen the screws to remove the DIN-rail bracket.

  • Page 39: Cabling

    User’s Manual of WGSW-48040HP 2.3 Cabling  10/100/1000BASE-T All 10/100/1000BASE-T ports come with auto-negotiation capability. They automatically support 1000BASE-T, 100BASE-TX and 10BASE-T networks. Users only need to plug a working network device into one of the 10/100/1000BASE-T ports, and then turn on the Industrial Managed Switch. The port will automatically run in 10Mbps, 20Mbps, 100Mbps or 200Mbps and 1000Mbps or 2000Mbps after negotiating with the connected device.

  • Page 40: Installing The Sfp/Sfp+ Transceiver

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 2.3.1 Installing the SFP/SFP+ Transceiver The sections describe how to insert an SFP/SFP+ transceiver into an SFP/SFP+ slot. The SFP/SFP+ transceivers are hot-pluggable and hot-swappable. You can plug in and out the transceiver to/from any SFP/SFP+ port without having to power...
  • Page 41 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Fast Ethernet Transceiver (100BASE-BX, Single Fiber Bi-directional SFP) Connector Wavelength Wavelength Model Speed (Mbps) Fiber Mode Distance Operating Temp. Interface (TX) (RX) MFB-FA20 WDM(LC) Single Mode 20km 1310nm 1550nm 0 ~ 60 degrees C...
  • Page 42 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series -40 ~ 75 ℃ MGB-TLB20 1000 WDM(LC) Single Mode 20km 1550nm 1310nm -40 ~ 75 ℃ MGB-TLA40 1000 WDM(LC) Single Mode 40km 1310nm 1550nm MGB-TLB40 -40 ~ 75 ℃ 1000 WDM(LC) Single Mode...

  • Page 43: Removing The Sfp/Sfp+ Transceiver

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 2.3.2 Removing the SFP/SFP+ Transceiver Make sure there is no network activity by consulting or checking with the network administrator. Or through the management interface of the switch/converter (if available) to disable the port in advance.

  • Page 44: Requirements

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series This chapter covers the following topics:  Requirements  Management Access Overview  Administration Console Access  Web Management Access  SNMP Access  Standards, Protocols, and Related Reading 3.1 Requirements  Workstations running Windows 2000/XP, 2003, Vista/7/8/10, 2008, MAC OS9 or later, or Linux, UNIX , or other platforms compatible with TCP/IP protocols.

  • Page 45: Management Access Overview

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 3.2 Management Access Overview The Industrial Managed Switch gives you the flexibility to access and manage it using any or all of the following methods:  An administration console  Web browser interface ...

  • Page 46: Administration Console

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 3.3 Administration Console There are two ways for CLI mode management, one is remote telnet and the other operated from console port. Remote telnet is an IP-based protocol and console port is for user to operate the Industrial Managed Switch locally only; however, their operations are the same.
  • Page 47 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  115200 bps  8 data bits  No parity  1 stop bit Figure 3-2: Terminal Parameter Settings You can change these settings, if desired, after you log on. This management method is often preferred because you can remain connected and monitor the system during system reboots.

  • Page 48: Web Management

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 3.4 Web Management The Industrial Managed Switch offers management features that allow users to manage the Industrial Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer. After you set up your IP address for the Industrial Managed Switch, you can access the Industrial Managed Switch’s Web interface applications directly in your...

  • Page 49: Snmp-Based Network Management

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 3.5 SNMP-based Network Management You can use an external SNMP-based application to configure and manage the Industrial Managed Switch, such as SNMP Network Manager, HP Openview Network Node Management (NNM) or What’s Up Gold. This management method requires the SNMP agent on the Industrial Managed Switch and the SNMP Network Management Station to use the same community string.

  • Page 50: Planet Smart Discovery Utility

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 3.6 PLANET Smart Discovery Utility For easily listing the Industrial Managed Switch in your Ethernet environment, the Planet Smart Discovery Utility from user’s manual CD-ROM is an ideal solution. The following installation instructions are to guide you to running the Planet Smart Discovery Utility.
  • Page 51 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series This utility shows all necessary information from the devices, such as MAC address, device name, firmware version, and device IP subnet address. It can also assign new password, IP subnet address and description to the devices.

  • Page 52: Web Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4. WEB CONFIGURATION This section introduces the configuration and functions of the Web-based management from Industrial Managed Switch. About Web-based Management The Industrial Managed Switch offers management features that allow users to manage the Industrial Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer..
  • Page 53 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series When the following login screen appears, please enter the default username "admin" with password “admin” (or the username/password you have changed via console) to login the main screen of Industrial Managed Switch. The login...
  • Page 54 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Now, you can use the Web management interface to continue the switch management or manage the Industrial Managed Switch by Web interface. The Switch Menu on the left of the web page lets you access all the commands and statistics the Industrial Managed Switch provides.

  • Page 55: Main Web Page

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.1 Main Web Page The Industrial Managed Switch provides a Web-based browser interface for configuring and managing it. This interface allows you to access the Industrial Managed Switch using the Web browser of your choice. This chapter describes how to use the Industrial Managed Switch’s Web browser interface to configure and manage it.
  • Page 56 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-1-5: Industrial Managed Switch Main Functions Menu...

  • Page 57: System

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2 System Use the System menu items to display and configure basic administrative details of the Industrial Managed Switch. Under the System, the following topics are provided to configure and view the system information. This section has the following items: ■...

  • Page 58: Management

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1 Management 4.2.1.1 System Information The System Infomation page provides information for the current device information. System Information page helps a switch administrator to identify the hardware MAC address, software version and system uptime. The screen in Figure 4-2-1 appears.

  • Page 59: Ip Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.2 IP Configuration The IP Configuration includes the IP Configuration, IP Interface and IP Routes. The configured column is used to view or change the IP configuration. The maximum number of interfaces supported is 128 and the maximum number of routes is 32.
  • Page 60 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  Configured IPv6 Explicitly provide the valid IPv6 unicast (except linklocal) address of the DNS Server. Make sure the configured DNS server could be reachable (e.g. via PING6) for activating DNS service.  From any DHCPv4 interfaces The first DNS server offered from a DHCPv4 lease to a DHCPv4-enabled interface will be used.
  • Page 61 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The IPv4 network mask, in number of bits (prefix length). Valid values Mask Length are between 0 and 30 bits for a IPv4 address. If DHCP is enabled, this field configures the fallback address network mask.

  • Page 62: Ip Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series same type. The VLAN ID (VID) of the specific IPv6 interface associated with the Next Hop VLAN gateway. The given VID ranges from 1 to 4095 and will be effective only when the corresponding IPv6 interface is valid.

  • Page 63: Users Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • IP Interfaces Interface The name of the interface. Type The address type of the entry. This may be LINK or IPv4. Address The current address of the interface (of the given type).
  • Page 64 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series By default setting, most groups privilege level 5 has the read-only access and privilege level 10 has the read-write access. And the system maintenance (software upload, factory defaults and etc.) needs user privilege level 15.
  • Page 65 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series By default setting, most groups privilege level 5 has the read-only access and privilege level 10 has the read-write access. And the system maintenance (software upload, factory defaults and etc.) needs user privilege level 15.

  • Page 66: Privilege Levels

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.5 Privilege Levels This page provides an overview of the privilege levels. After setup is completed, please press the “Apply” button to take effect. Please login web interface with new user name and password and the screen in Figure 4-2-7 appears.

  • Page 67: Ntp Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  Security: Authentication, System Access Management, Port (contains Dot1x port, MAC based and the MAC Address Limit), ACL, HTTPS, SSH, ARP Inspection and IP source guard.  IP: Everything except 'ping'.  Port: Everything except 'VeriPHY'.
  • Page 68 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-2-8: NTP Configuration Page Screenshot The page includes the following fields: Object Description • Mode Indicates the NTP mode operation. Possible modes are:  Enabled: Enable NTP mode operation. When enabling NTP mode operation, the agent forward and transfer NTP messages between the clients and the server when they are not on the same subnet domain.

  • Page 69: System Time Correction Manually

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.6.1 System Time Correction Manually Configure NTP on this page. NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks of computer systems. NTP uses UDP (data grams) as transport layer. You can specify NTP Servers. The NTP Configuration...

  • Page 70: Time Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.7 Time Configuration Configure Time Zone on this page. A Time Zone is a region that has a uniform standard time for legal, commercial, and social purposes. It is convenient for areas in close commercial or other communication to keep the same time, so time zones tend to follow the boundaries of countries and their subdivisions.
  • Page 71 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 'Non-Recurring' and configure the Daylight Saving Time duration for single time configuration. ( Default: Disabled ). • • Week - Select the starting week number. Start Time Settings • Day - Select the starting day.

  • Page 72: Upnp

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.8 UPnP Configure UPnP on this page. UPnP is an acronym for Universal Plug and Play. The goals of UPnP are to allow devices to connect seamlessly and to simplify the implementation of networks in the home (data sharing, communications, and entertainment) and in corporate environments for simplified installation of computer components.

  • Page 73: Dhcp Relay

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Static VLAN Interface The index of the specific IP VLAN interface. It will only be applied when IP Addressing Mode is static. Valid configurable values ranges from 1 to 4095. Default value is 1.
  • Page 74 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Object Description • Relay Mode Indicates the DHCP relay mode operation. Possible modes are:  Enabled: Enable DHCP relay mode operation. When enabling DHCP relay mode operation, the agent forwards and transfers DHCP messages between the clients and the server when they are not on the same subnet domain.

  • Page 75: Dhcp Relay Statistics

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.10 DHCP Relay Statistics This page provides statistics for DHCP relay. The DHCP Relay Statistics screen in Figure 4-2-13 appears. Figure 4-2-13: DHCP Relay Statistics Page Screenshot The page includes the following fields:...
  • Page 76 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Client Statistics Object Description • Transmit to Client The packets number that relayed packets from server to client. • Transmit Error The packets number that erroneously sent packets to servers. • Receive from Client The packets number that received packets from server.

  • Page 77: Cpu Load

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.11 CPU Load This page displays the CPU load, using an SVG graph. The load is measured as average over the last 100ms, 1 sec and 10 seconds intervals. The last 120 samples are graphed, and the last numbers are displayed as text as well. In order to display the SVG graph, your browser must support the SVG format.

  • Page 78: System Log

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.12 System Log The Industrial Managed Switch system log information is provided here. The System Log screen in Figure 4-2-15 appears. Figure 4-2-15: System Log Page Screenshot The page includes the following fields:...

  • Page 79: Detailed Log

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series : Updates the system log entries, starting from the first available entry ID. : Updates the system log entries, ending at the last entry currently displayed. : Updates the system log entries, starting from the last entry currently displayed.

  • Page 80: Remote Syslog

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.14 Remote Syslog Configure remote syslog on this page. The Remote Syslog screen in Figure 4-2-17 appears. Figure 4-2-17: Remote Syslog Page Screenshot The page includes the following fields: Object Description • Mode Indicates the server mode operation.

  • Page 81: Smtp Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.15 SMTP Configuration This page facilitates an SMTP Configuration on the switch. The SMTP Configure screen in Figure 4-2-18 appears. Figure 4-2-18: SMTP Configuration Page Screenshot The page includes the following fields: Object Description •...

  • Page 82: Fault Alarm

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.16 Fault Alarm This page facilitates an update of the firmware controlling the switch. The Web Firmware Upgrade screen in Figure 4-2-19 appears. Figure 4-2-19: Fault Alarm Control Configuration page Screenshot The page includes the following fields:...

  • Page 83: Digital Input/Output

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.1.17 Digital Input/Output Digital Input allows user to log external device (such as industrial cooler) dead or alive or something else. System will log a user customized message into system log and syslog, and issue SNMP trap or issue an alarm E-mail.
  • Page 84 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Allows user to record alarm message to System log, syslog or issues out via SNMP Trap or SMTP. As default SNMP Trap and SMTP are disabled, please enable them first if you want to issue alarm message via them.

  • Page 85: Simple Network Management Protocol

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.2 Simple Network Management Protocol 4.2.2.1 SNMP Overview The Simple Network Management Protocol (SNMP) is an application layer protocol that facilitates the exchange of management information between network devices. It is part of the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol suite.

  • Page 86: Snmp System Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series default communities are: 。 Write = private 。 Read = public Use the SNMP Menu to display or configure the Industrial Managed Switch 's SNMP function. This section has the following items: ...
  • Page 87 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The allowed string length is 0 to 255, and the allowed content is the ASCII characters from 33 to 126. The field is applicable only when SNMP version is SNMPv1 or SNMPv2c. If SNMP version is SNMPv3, the community string will be associated with SNMPv3 communities table.

  • Page 88: Snmp Trap Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.2.3 SNMP Trap Configuration Configure SNMP trap on this page. The SNMP Trap Configuration screen in Figure 4-2-2-3 appears. Figure 4-2-2-3: SNMP Trap Configuration Page Screenshot The page includes the following fields: Object Description •...
  • Page 89 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  SNMP v2c: Set SNMP trap supported version 2c.  SNMP v3: Set SNMP trap supported version 3. • Trap Community Indicates the community access string when send SNMP trap packet. The allowed string length is 0 to 255, and the allowed content is the ASCII characters from 33 to 126.

  • Page 90: Snmp System Information

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  STP: Enable/disable STP trap.  RMON: Enable/disable RMON trap. Buttons : Click to apply changes : Click to undo any changes made locally and revert to previously saved values. 4.2.2.4 SNMP System Information The switch system information is provided here.

  • Page 91: Snmpv3 Communities

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.2.5 SNMPv3 Communities Configure SNMPv3 communities table on this page. The entry index key is Community. The SNMPv3 Communities screen in Figure 4-2-2-5 appears. Figure 4-2-2-5: SNMPv3 Communities Configuration Page Screenshot The page includes the following fields:...

  • Page 92: Snmpv3 Users

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.2.6 SNMPv3 Users Configure SNMPv3 users table on this page. The entry index keys are Engine ID and User Name. The SNMPv3 Users screen in Figure 4-2-2-6 appears. Figure 4-2-2-6: SNMPv3 Users Configuration Page Screenshot...

  • Page 93: Snmpv3 Groups

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series protocol.  SHA: An optional flag to indicate that this user using SHA authentication protocol. The value of security level cannot be modified if entry already exist. That means must first ensure that the value is set correctly.

  • Page 94: Snmpv3 Views

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Delete Check to delete the entry. It will be deleted during the next save. • Indicates the security model that this entry should belong to. Possible security...

  • Page 95: Snmpv3 Access

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Delete Check to delete the entry. It will be deleted during the next save. • A string identifying the view name that this entry should belong to. The allowed...
  • Page 96 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Delete Check to delete the entry. It will be deleted during the next save. • A string identifying the group name that this entry should belong to. The allowed...

  • Page 97: Rmon

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.3 RMON RMON is the most important expansion of the standard SNMP. RMON is a set of MIB definitions, used to define standard network monitor functions and interfaces, enabling the communication between SNMP management terminals and remote monitors.
  • Page 98 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  InNUcastPkts: The number of broadcast and multi-cast packets delivered to a higher-layer protocol.  InDiscards: The number of inbound packets that are discarded even the packets are normal.  InErrors: The number of inbound packets that contains errors preventing them from being deliverable to a higher-layer protocol.

  • Page 99: Rmon Alarm Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.3.2 RMON Alarm Status This page provides an overview of RMON Alarm entries. Each page shows up to 99 entries from the Alarm table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the Alarm table.

  • Page 100: Rmon Event Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.3.3 RMON Event Configuration Configure RMON Event table on this page. The entry index key is ID; screen in Figure 4-2-3-3 appears. Figure 4-2-3-3 RMON Event Configuration Page Screenshot The page includes the following fields:...

  • Page 101: Rmon Event Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.3.4 RMON Event Status This page provides an overview of RMON Event table entries. Each page shows up to 99 entries from the Event table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the Event table.

  • Page 102: Rmon History Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.3.5 RMON History Configuration Configure RMON History table on this page. The entry index key is ID; screen in Figure 4-2-3-5 appears. Figure 4-2-3-5: RMON History Configuration Page Screenshot The page includes the following fields:...

  • Page 103: Rmon History Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.3.6 RMON History Status This page provides an detail of RMON history entries; screen in Figure 4-2-3-6 appears. Figure 4-2-3-6: RMON History Overview Page Screenshot The page includes the following fields: Object Description •...

  • Page 104: Rmon Statistics Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Utilization The best estimate of the mean physical layer network utilization on this interface during this sampling interval, in hundredths of a percent. Buttons : Click to refresh the page immediately. Auto-refresh Check this box to refresh the page automatically.

  • Page 105: Rmon Statistics Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.3.8 RMON Statistics Status This page provides an overview of RMON Statistics entries. Each page shows up to 99 entries from the Statistics table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the Statistics table.
  • Page 106 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • 64 Bytes The total number of packets (including bad packets) received that were 64 octets in length. • 65~127 The total number of packets (including bad packets) received that were between 65 to 127 octets in length.

  • Page 107: Dhcp Server

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.4 DHCP server 4.2.4.1 DHCP Server Mode Configuration Configure DHCP server mode on this page. The entry index key is ID.; screen in Figure 4-2-4-1 appears. Figure 4-2-4-1: DHCP server mode Page Screenshot...

  • Page 108: Dhcp Server Excluded Ip Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Mode  Indicate the operation mode per VLAN. Possible modes are: Enabled: Enable DHCP server per VLAN. Disabled: Disable DHCP server pre VLAN. Buttons : Click to add a new VLAN range.

  • Page 109: Dhcp Server Pool Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.4.3 DHCP Server pool Configuration This page manages DHCP pools. According to the DHCP pool, DHCP server will allocate IP address and deliver configuration parameters to DHCP client. screen in Figure 4-2-4-3 appears.

  • Page 110: Dhcp Server Pool Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.4.4 DHCP Server pool Configuration This page displays the database counters and the number of DHCP messages sent and received by DHCP server. screen in Figure 4-2-4-4 appears. Figure 4-2-4-4: DHCP server Statistics Page Screenshot...

  • Page 111: Dhcp Server Binding Ip Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series the pool is of host type. • Expired Binding Number of bindings that their lease time expired or they are cleared from Automatic/Manual type bindings. DHCP message Received Counters Object Description • Discover Number of DHCP DISCOVER messages received.

  • Page 112: Dhcp Server Declined Ip

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-2-4-5: DHCP server Binding IP page Screenshot The page includes the following fields: Object Description • IP Display IP address allocated to DHCP client. • Type Display type of binding. Possible types are Automatic, Manual, Expired.

  • Page 113: Dhcp Detail Statistics

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-2-4-6: DHCP server Declined IP Page Screenshot The page includes the following fields: Object Description • Delined IP Display List of IP addresses declined. Buttons : Check this box to refresh the page automatically Click to refresh the page immediately.
  • Page 114 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Rx and Tx Discover Display the number of discover (option 53 with value 1) packets received and transmitted. • Rx and Tx Offer Display the number of offer (option 53 with value 2) packets received and transmitted.

  • Page 115: Industrial Protocol

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.2.5 Industrial Protocol With the supported Modbus TCP/IP protocol, the IGS-5225 series can easily integrate with SCADA systems, HMI systems and other data acquisition systems in factory floors. It enable administrators to remotely monitor the industrial Ethernet switch’s operating information, port information and communication status, thus easily achieving enhanced monitoring...

  • Page 116: Switching

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3 Switching 4.3.1 Port Management Use the Port Menu to display or configure the Industrial Managed Switch's ports. This section has the following items:  Port Configuration Configures port connection settings  Port Statistics Overview Lists Ethernet and RMON port statistics ...
  • Page 117 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Select any available link speed for the given switch port. Draw the menu bar to Configured Link Speed select the mode.  Auto – Set up Auto negotiation for copper interface. ...

  • Page 118: Port Statistics Overview

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.1.2 Port Statistics Overview This page provides an overview of general traffic statistics for all switch ports. The Port Statistics Overview screen in Figure 4-3-1-2 appears. Figure 4-3-1-2: Port Statistics Overview Page Screenshot...
  • Page 119 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series to display. The displayed counters are the totals for receive and transmit, the size counters for receive and transmit, and the error counters for receive and transmit. The Detailed Port Statistics screen in Figure 4-3-1-3 appears.

  • Page 120: Sfp Module Information

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Receive and Transmit Queue Counters The number of received and transmitted packets per input and output queue. Receive Error Counters Object Description • Rx Drops The number of frames dropped due to lack of receive buffers or egress congestion.
  • Page 121 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series also use the hyperlink of port no. to check the statistics on a specific interface. The SFP Module Information screen in Figure 4-3-1-4 appears. Figure 4-3-1-4: SFP Module Information for Switch Page Screenshot...

  • Page 122: Port Mirror

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons SFP Monitor Event Alert: send trap Warning Temperature: degrees C Check SFP Monitor Event Alert box; it will be in accordance with your warning temperature setting and allows users to record message out via SNMP Trap.
  • Page 123 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Mirror Port Configuration The Port Mirror screen in Figure 4-3-1-6 appears.and click the session ID to Figure 4-3-1-7 Figure 4-3-1-6: Mirror Configuration Page Screenshot Figure 4-3-1-7: Mirror Configuration Page Screenshot...
  • Page 124 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Session Select session id to configure. • Mode To Enabled/Disabled the mirror or Remote Mirroring function • Type Mirror The switch is running on mirror mode.
  • Page 125 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series This checkbox is designed for mirror or Remote Mirroring. The destination port is a switched port that you receive a copy of traffic from the source port. For a given port, a frame is only transmitted once. It is therefore not possible to mirror Tx frames on the mirror port.

  • Page 126: Link Aggregation

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.2 Link Aggregation Port Aggregation optimizes port usage by linking a group of ports together to form a single Link Aggregated Groups (LAGs). Port Aggregation multiplies the bandwidth between the devices, increases port flexibility, and provides link redundancy.
  • Page 127 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Partner Systems that require high speed redundant links. Link aggregation lets you group up to eight consecutive ports into a single dedicated connection.

  • Page 128: Static Aggregation

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.2.1 Static Aggregation This page is used to configure the Aggregation hash mode and the aggregation group. The aggregation hash mode settings are global. Hash Code Contributors The Static Aggregation screen in Figure 4-3-2-2 appears.

  • Page 129: Static Aggregation Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-2-3: Aggregation Group Configuration Page Screenshot The page includes the following fields: .Object Description • Group ID Indicates the group ID for the settings contained in the same row. Group ID "Normal" indicates there is no aggregation. Only one group ID is valid per port.

  • Page 130: Lacp Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Aggr ID Display the Aggregation ID associated with this aggregation instance. • Name Display the Name of the Aggregation group ID. • Type Display the type of the Aggregation group(Static or LACP).
  • Page 131 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-2-5 : LACP Port Configuration Page Screenshot The page includes the following fields: Object Description • Port The switch port number. • Controls whether LACP is enabled on this switch port. LACP will form an LACP Enabled aggregation when 2 or more ports are connected to the same partner.

  • Page 132: Lacp System Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series LACP packets each second, while Slow will wait for 30 seconds before sending a LACP packet. • Priority The Priority controls the priority of the port. If the LACP partner wants to form a larger group than is supported by this device then this parameter will control which ports will be active and which ports will be in a backup role.

  • Page 133: Lacp Port Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons : Click to refresh the page immediately. Auto-refresh : Automatic refresh occurs every 3 seconds. 4.3.2.5 LACP Port Status This page provides a status overview of LACP status for all ports. The LACP Port Status screen in Figure 4-5-2-7 appears.

  • Page 134: Lacp Port Statistics

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons : Click to refresh the page immediately. Auto-refresh : Automatic refresh occurs every 3 seconds. 4.3.2.6 LACP Port Statistics This page provides an overview for LACP statistics for all ports. The LACP Port Status screen in Figure 4-5-2-8 appears.

  • Page 135: Vlan

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.3 VLAN 4.3.3.1 VLAN Overview A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. VLAN can be used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN.

  • Page 136: Ieee 802.1Q Vlan

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.3.2 IEEE 802.1Q VLAN In large networks, routers are used to isolate broadcast traffic for each subnet into separate domains. This Industrial Managed Switch provides a similar service at Layer 2 by using VLANs to organize any group of network nodes into separate broadcast domains.
  • Page 137 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series ■ 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the Ether Type field. When a packet's Ether Type field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
  • Page 138 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Every physical port on a switch has a PVID. 802.1Q ports are also assigned a PVID, for use within the switch. If no VLAN are defined on the switch, all ports are then assigned to a default VLAN with a PVID equal to 1. Untagged packets are assigned the PVID of the port on which they were received.

  • Page 139: Vlan Port Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series ■ Port Overlapping Port overlapping can be used to allow access to commonly shared network resources among different VLAN groups, such as file servers or printers. Note that if you implement VLANs which do not overlap, but still need to communicate, you can connect them by enabled routing on this switch.
  • Page 140 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series ■ IEEE 802.1Q Tunneling (Q-in-Q) IEEE 802.1Q Tunneling (Q-in-Q) is designed for service providers carrying traffic for multiple customers across their networks. Q-in-Q tunneling is used to maintain customer-specific VLAN and Layer 2 protocol configurations even when different customers use the same internal VLAN IDs.
  • Page 141 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Global VLAN Configuration The Global VLAN Configuration screen in Figure 4-3-3-1 appears. Figure 4-3-3-1 : Global VLAN Configuration Screenshot The page includes the following fields: Object Description • This field shows the allowed Access VLANs, it only affects ports configured as...
  • Page 142 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-3-2 : Port VLAN Configuration Screenshot The page includes the following fields: Object Description • Port This is the logical port number for this row. • Mode Access Access ports are normally used to connect to end stations. Dynamic features like Voice VLAN may add the port to more VLANs behind the scenes.
  • Page 143 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Tagging configuration is set to untag Port VLAN. The Port VLAN is called an "Access VLAN" for ports in Access mode and Native VLAN for ports in Trunk or Hybrid mode. • Port Type...
  • Page 144 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series ■ Untagged Only Only untagged frames are accepted on ingress. Tagged frames are discarded. Egress Tagging This option is only available for ports in Hybrid mode. Ports in Trunk and Hybrid mode may control the tagging of frames on egress.

  • Page 145: Vlan Membership Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.3.4 VLAN Membership Status This page provides an overview of membership status for VLAN users. The VLAN Membership Status screen in Figure 4-3-3-3 appears. Figure 4-3-3-3: VLAN Membership Status for Static User Page Screenshot...

  • Page 146: Vlan Port Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series information for all the VLAN Users, and this is by default. VLAN membership allows the frames classified to the VLAN ID to be forwarded on the respective VLAN member ports. Buttons : Select VLAN Users from this drop down list.

  • Page 147: Private Vlan

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series tags are not removed. • Ingress Filtering Show the ingress filtering for a port. This parameter affects VLAN ingress processing. If ingress filtering is enabled and the ingress port is not a member of the classified VLAN of the frame, the frame is discarded.
  • Page 148 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-3-5: Private VLAN Membership Configuration page screenshot The page includes the following fields: Object Description • Delete To delete a private VLAN entry, check this box. The entry will be deleted during the next save.

  • Page 149: Port Isolation

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.3.7 Port Isolation Overview When a VLAN is configured to be a private VLAN, communication between ports within that VLAN can be prevented. Two application examples are provided in this section: • Customers connected to an ISP can be members of the same VLAN, but they are not allowed to communicate with each other within that VLAN.
  • Page 150 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series in a private VLAN, the VLAN mask from the VLAN table is applied. When traffic comes in on an isolated port, the private VLAN mask is applied in addition to the VLAN mask from the VLAN table. This reduces the ports to which forwarding can be done to just the promiscuous ports within the private VLAN.

  • Page 151: Vlan Setting Example

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.3.8 VLAN setting example:  Separate VLAN  802.1Q VLAN Trunk  Port Isolate 4.3.3.8.1 Two Separate 802.1Q VLANs The diagram shows how the Industrial Managed Switch handle Tagged and Untagged traffic flow for two VLANs. VLAN Group 2 and VLAN Group 3 are separated VLAN.
  • Page 152 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series While [PC-1] transmit an untagged packet enters Port-1, the Industrial Managed Switch will tag it with a VLAN Tag=2. [PC-2] and [PC-3] will received the packet through Port-2 and Port-3. [PC-4],[PC-5] and [PC-6] received no packet.

  • Page 153: Vlan Trunking Between Two 802.1Q Aware Switches

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-3-9: Change Port VLAN of Port 1~3 to be VLAN2 and Port VLAN of Port 4~6 to be VLAN3 Enable VLAN Tag for specific ports Link Type: Port-3 (VLAN-2) and Port-6 (VLAN-3) Change Port 3 Mode as Trunk, Selects Egress Tagging as Tag All and Types 2 in the Allowed VLANs column.
  • Page 154 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-3-11: VLAN Trunking Diagram Setup steps Add VLAN Group Add two VLANs – VLAN 2 and VLAN 3 Type 1-3 in Allowed Access VLANs column, the 1-3 is including VLAN1 and 2 and 3.
  • Page 155 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-3-13: Changes Port VLAN of Port 1~3 to be VLAN2 and Port VLAN of Port 4~6 to be VLAN3 For the VLAN ports connecting to the hosts, please refer to 4.6.10.1 examples. The following steps will focus on the VLAN Trunk port configuration.

  • Page 156: Port Isolate

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series That is, although the VLAN 2 members: Port-1 to Port-3 and VLAN 3 members: Port-4 to Port-6 also belongs to VLAN 1. But with different PVID settings, packets form VLAN 2 or VLAN 3 is not able to access to the other VLAN.

  • Page 157: Mac-Based Vlan

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.3.9 MAC-based VLAN The MAC-based VLAN entries can be configured here. This page allows for adding and deleting MAC-based VLAN entries and assigning the entries to different ports. This page shows only static entries. The MAC-based VLAN screen in Figure 4-3-3-16 appears.

  • Page 158: Ip Subnet-Based Vlan Membership Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series : Click to apply changes : Click to undo any changes made locally and revert to previously saved values. Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.

  • Page 159: Protocol-Based Vlan

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Adding a New IP Click to add a new IP subnet to VLAN ID mapping entry. An empty row is added subnet-based VLAN to the table, and the mapping can be configured as needed. Any IP address/mask can be configured for the mapping.
  • Page 160 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series SNAP Note: On changing the Frame type field, valid value of the following text field will vary depending on the new frame type you selected. • Value Valid value that can be entered in this text field depends on the option selected from the preceding Frame Type selection menu.

  • Page 161: Protocol-Based Vlan Membership

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series : Click to undo any changes made locally and revert to previously saved values. Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Click to refresh the page immediately.
  • Page 162 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons : Click to apply changes : Click to undo any changes made locally and revert to previously saved values. Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.

  • Page 163: Spanning Tree Protocol

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.4 Spanning Tree Protocol 4.3.4.1 Theory The Spanning Tree protocol can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices in your network to ensure that only one route exists between any two stations on the network, and provide backup links which automatically take over when a primary link goes down.
  • Page 164 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  The path cost to the root from the transmitting port  The port identifier of the transmitting port The switch sends BPDUs to communicate and construct the spanning-tree topology. All switches connected to the LAN on which the packet is transmitted will receive the BPDU.
  • Page 165 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  From forwarding to disabled  From disabled to blocking Figure 4-3-4-1: STP Port State Transitions You can modify each port state by using management software. When you enable STP, every port on every switch in the network goes through the blocking state and then transitions through the states of listening and learning at power up.
  • Page 166 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The following are the user-configurable STP parameters for the switch level: Parameter Description Default Value Bridge Identifier(Not user A combination of the User-set priority and 32768 + MAC configurable the switch’s MAC address.
  • Page 167 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series User-Changeable STA Parameters The Switch’s factory default setting should cover the majority of installations. However, it is advisable to keep the default settings as set at the factory; unless, it is absolutely necessary. The user changeable parameters in the Switch are as follows: Priority –...
  • Page 168 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-4-2: Before Applying the STA Rules In this example, only the default STP values are used. Figure 4-3-4-3: After Applying the STA Rules...

  • Page 169: Stp System Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The switch with the lowest Bridge ID (switch C) was elected the root bridge, and the ports were selected to give a high port cost between switches B and C. The two (optional) Gigabit ports (default port cost = 20,000) on switch A are connected to one (optional) Gigabit port on both switch B and C.
  • Page 170 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-4-4: STP Bridge Configuration Page Screenshot The page includes the following fields: Basic Settings Object Description • Protocol Version The STP protocol version setting. Valid values are:  STP (IEEE 802.1D Spanning Tree Protocol) ...

  • Page 171: Bridge Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Control whether a port explicitly configured as Edge will disable itself upon Edge Port BPDU Guard reception of a BPDU. The port will enter the error-disabled state, and will be removed from the active topology.

  • Page 172: Cist Port Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • The switch port currently assigned the root port role. Root Port • Root Cost Root Path Cost. For the Root Bridge this is zero. For all other Bridges, it is the sum of the Port Path Costs on the least cost path to the Root Bridge.
  • Page 173 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Port The switch port number of the logical STP port. • STP Enabled Controls whether RSTP is enabled on this switch port. • Controls the path cost incurred by the port. The Auto setting will set the path cost Path Cost as appropriate by the physical link speed, using the 802.1D recommended...
  • Page 174 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series medium. This can be automatically determined, or forced either true or false. Transitions to the forwarding state is faster for point-to-point LANs than for shared media. Buttons : Click to apply changes : Click to undo any changes made locally and revert to previously saved values.

  • Page 175: Msti Priorities

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.4.5 MSTI Priorities This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. The MSTI Priority screen in Figure 4-3-4-7 appears. Figure 4-3-4-7: MSTI Priority Page Screenshot...

  • Page 176: Msti Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.4.6 MSTI Configuration This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. The MSTI Configuration screen in Figure 4-3-4-8 appears. Figure 4-3-4-8: MSTI Configuration Page Screenshot...

  • Page 177: Msti Ports Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series MSTI Mapping Object Description • MSTI The bridge instance. The CIST is not available for explicit mapping, as it will receive the VLANs not explicitly mapped. • VLANs Mapped The list of VLAN's mapped to the MSTI. The VLANs must be separated with comma and/or space.
  • Page 178 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-4-10 : MST1 MSTI Port Configuration Page Screenshot The page includes the following fields: MSTx MSTI Port Configuration Object Description • Port The switch port number of the corresponding STP CIST (and MSTI) port.

  • Page 179: Port Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.4.8 Port Status This page displays the STP CIST port status for port physical ports in the currently selected switch. The STP Port Status screen in Figure 4-3-4-11 appears. Figure 4-3-4-11: STP Port Status Page Screenshot...

  • Page 180: Port Statistics

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.4.9 Port Statistics This page displays the STP port statistics counters for port physical ports in the currently selected switch. The STP Port Statistics screen in Figure 4-3-4-12 appears. Figure 4-3-4-12: STP Statistics Page Screenshot...

  • Page 181: Multicast

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.5 Multicast 4.3.5.1 IGMP Snooping The Internet Group Management Protocol (IGMP) lets host and routers share information about multicast groups memberships. IGMP snooping is a switch feature that monitors the exchange of IGMP messages and copies them to the CPU for feature processing.
  • Page 182 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-5-2: Multicast Flooding Figure 4-3-5-3: IGMP Snooping Multicast Stream Control...
  • Page 183 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series IGMP Versions 1 and 2 Multicast groups allow members to join or leave at any time. IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group. IGMP version 1 is defined in RFC 1112. It has a fixed packet size and no optional data.

  • Page 184: Profile Table

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The states a computer will go through to join or to leave a multicast group are shown below: Figure 4-3-5-4: IGMP State Transitions  IGMP Querier – A router, or multicast-enabled switch, can periodically ask their hosts if they want to receive multicast traffic. If there is more than one router/switch on the LAN performing IP multicasting, one of these devices is elected “querier”...
  • Page 185 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-5-5: IPMC Profile Configuration Page The page includes the following fields: Object Description • Global Profile Mode Enable/Disable the Global IPMC Profile. System starts to do filtering based on profile settings only when the global profile mode is enabled.

  • Page 186: Address Entry

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Click to undo any changes made locally and revert to previously saved values. 4.3.5.3 Address Entry This page provides address range settings used in . The address entry is used to specify the address...

  • Page 187: Igmp Snooping Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Updates the table starting from the first entry in the IPMC Profile Address Configuration. Updates the table, starting with the entry after the last entry currently displayed. 4.3.5.4 IGMP Snooping Configuration This page provides IGMP Snooping related configuration. The IGMP Snooping Configuration screen in Figure 4-3-5-7 appears.

  • Page 188: Igmp Snooping Vlan Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Proxy Enable Enable IGMP Proxy. This feature can be used to avoid forwarding unnecessary join and leave messages to the router side. • Router Port Specify which ports act as IGMP router ports. A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or IGMP querier.
  • Page 189 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-5-8: IGMP Snooping VLAN Configuration Page Screenshot The page includes the following fields: Object Description • Delete Check to delete the entry. The designated entry will be deleted during the next save.

  • Page 190: Igmp Snooping Port Group Filtering

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series packet loss on a network. The allowed range is 1 to 255, default robustness variable value is 2. • QI Query Interval. The Query Interval is the interval between General Queries sent by the Querier. The allowed range is 1 to 31744 seconds, default query interval is 125 seconds.
  • Page 191 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series IGMP filtering enables you to assign a profile to a switch port that specifies multicast groups that are permitted or denied on the port. An IGMP filter profile can contain one or more, or a range of multicast addresses; but only one profile can be assigned to a port.

  • Page 192: Igmp Snooping Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.5.7 IGMP Snooping Status This page provides IGMP Snooping status. The IGMP Snooping Status screen in Figure 4-3-5-10 appears. Figure 4-3-5-10: IGMP Snooping Status Page Screenshot The page includes the following fields: Object Description •...

  • Page 193: Igmp Group Information

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons : Click to refresh the page immediately. : Clears all Statistics counters. Auto-refresh : Automatic refresh occurs every 3 seconds. 4.3.5.8 IGMP Group Information Entries in the IGMP Group Table are shown on this Page. The IGMP Group Table is sorted first by VLAN ID, and then by group.

  • Page 194: Mld Snooping

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.6 MLD Snooping 4.3.6.1 MLD Snooping Configuration This page provides MLD Snooping related configuration. The MLD Snooping Configuration screen in Figure 4-3-6-1 appears. Figure 4-3-6-1: MLD Snooping Configuration Page Screenshot The page includes the following fields:...

  • Page 195: Mld Snooping Vlan Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Proxy Enable Enable MLD Proxy. This feature can be used to avoid forwarding unnecessary join and leave messages to the router side. • Router Port Specify which ports act as router ports. A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or MLD querier.
  • Page 196 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • VLAN ID The VLAN ID of the entry. • MLD Snooping Enable Enable the per-VLAN MLD Snooping. Up to 32 VLANs can be selected for MLD Snooping. • Querier Election Enable to join MLD Querier election in the VLAN. Disable to act as a MLD Non-Querier.

  • Page 197: Mld Snooping Port Group Filtering

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series : Click to apply changes : Click to undo any changes made locally and revert to previously saved values. 4.3.6.3 MLD Snooping Port Group Filtering In certain switch applications, the administrator may want to control the multicast services that are available to end users. For example, an IP/TV service based on a specific subscription plan.

  • Page 198: Mld Snooping Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Filtering Group Select the IPMC Profile as the filtering condition for the specific port. Summary about the designated profile will be shown by clicking the view button. Buttons : Click to apply changes : Click to undo any changes made locally and revert to previously saved values.

  • Page 199: Mld Group Information

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Querier Received The number of Received Querier. • V1 Reports Received The number of Received V1 Reports. • V2 Reports Received The number of Received V2 Reports. • V1 Leave Received The number of Received V1 Leaves.

  • Page 200: Mldv2 Information

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • VLAN ID VLAN ID of the group. • Groups Group address of the group displayed. • Port Members Ports under this group. Buttons Auto-refresh : Automatic refresh occurs every 3 seconds.
  • Page 201 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Indicates the filtering mode maintained per (VLAN ID, port number, Group Mode Address) basis. It can be either Include or Exclude. • Source Address IP Address of the source. Currently, system limits the total number of IP source addresses for filtering to be 128.

  • Page 202: Mvr (Multicast Vlan Registration)

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.7 MVR (Multicast VLAN Registration) The MVR feature enables multicast traffic forwarding on the Multicast VLANs. ■ In a multicast television application, a PC or a network television or a set-top box can receive the multicast stream.
  • Page 203 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-3-7-1: MVR Configuration Page Screenshot The page includes the following fields: Object Description • MVR Mode Enable/Disable the Global MVR. The Unregistered Flooding control depends on the current configuration in IGMP/MLD Snooping.
  • Page 204 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series given, it should contain at least one alphabet. MVR VLAN name can be edited for the existing MVR VLAN entries or it can be added to the new entries. • IGMP Address Define the IPv4 address as source address used in IP header for IGMP control frames.

  • Page 205: Mvr Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The default Role is Inactive. • Immediate Leave Enable the fast leave on the port. Buttons : Click to add new MVR VLAN. Specify the VID and configure the new entry. Click "Save"...

  • Page 206: Mvr Groups Information

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.7.3 MVR Groups Information Entries in the MVR Group Table are shown on this page. The MVR Group Table is sorted first by VLAN ID, and then by group. Each page shows up to 99 entries from the MVR Group table, default being 20, selected through the "entries per page" input field.
  • Page 207 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Table also contains the SSM (Source-Specific Multicast) information. This table is sorted first by VLAN ID, then by group, and then by Port. Different source addresses belong to the same group are treated as single entry.

  • Page 208: Lldp

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.8 LLDP 4.3.8.1 Link Layer Discovery Protocol Link Layer Discovery Protocol (LLDP) is used to discover basic information about neighboring devices on the local broadcast domain. LLDP is a Layer 2 protocol that uses periodic broadcasts to advertise information about the sending device. Advertised information is represented in Type Length Value (TLV) format according to the IEEE 802.1ab standard, and can include details...
  • Page 209 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • The switch is periodically transmitting LLDP frames to its neighbors for having Tx Interval the network discovery information up-to-date. The interval between each LLDP frame is determined by the Tx Interval value. Valid values are restricted to 5 - 32768 seconds.
  • Page 210 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series information received from neighbors.  Enabled The switch will send out LLDP information, and will analyze LLDP information received from neighbors. • CDP Aware Select CDP awareness. The CDP operation is restricted to decoding incoming CDP frames...

  • Page 211: Lldp Neighbor

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Click to undo any changes made locally and revert to previously saved values. 4.3.8.3 LLDP Neighbor This page provides a status overview for all LLDP neighbors. The displayed table contains a row for each port on which an LLDP neighbor is detected.

  • Page 212: Lldp Med Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series instance hold the neighbor's IP address. : Click to refresh the page immediately. Auto-refresh Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. 4.3.8.4 LLDP MED Configuration This page allows you to configure the LLDP-MED. The LLDPMED Configuration screen in Figure 4-3-8-3 appears.
  • Page 213 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series is best to advertise only those pieces of information which are specifically relevant to particular endpoint types (for example only advertise the voice network policy to permitted voice-capable devices), both in order to conserve the limited LLDPU space and to reduce security and system integrity issues that can come with inappropriate knowledge of the network policy.
  • Page 214 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Device Type Any LLDP-MED Device is operating as a specific type of LLDP-MED Device, which may be either a Network Connectivity Device or a specific Class of Endpoint Device, as defined below.
  • Page 215 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Meters: Representing meters of Altitude defined by the vertical datum specified. Floors: Representing altitude in a form more relevant in buildings which have different floor-to-floor dimensions. An altitude = 0.0 is meaningful even outside a building, and represents ground level at the given latitude and longitude.
  • Page 216 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Name Name (residence and office occupant) - Example: Flemming Jahn • Zip code Postal/zip code - Example: 2791 • Building Building (structure) - Example: Low Library • Apartment Unit (Apartment, suite) - Example: Apt 42 •...
  • Page 217 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 3. Softphone Voice 4. Video Conferencing 5. Streaming Video 6. Control / Signaling (conditionally support a separate network policy for the media types above) A large network may support multiple VoIP policies across the entire organization, and different policies per application type.
  • Page 218 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series VLAN. When a network policy is defined for use with an 'untagged’ VLAN (see Tagged flag below), then the L2 priority field is ignored and only the DSCP value has relevance.  Video Conferencing - for use by dedicated Video Conferencing equipment and other similar appliances supporting real-time interactive video/audio services.

  • Page 219: Lldp-Med Neighbor

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The number of policies supported is 32 Port Policies Configuration Every port may advertise a unique set of network policies or different attributes for the same network policies, based on the authenticated user identity or port configuration.
  • Page 220 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series LLDP-MED Network Connectivity Device Definition LLDP-MED Network Connectivity Devices, as defined in TIA-1057, provide access to the IEEE 802 based LAN infrastructure for LLDP-MED Endpoint Devices. An LLDP-MED Network Connectivity Device is a LAN access device based on any of the following technologies: 1.
  • Page 221 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series LLDP-MED Communication Endpoint (Class III) The LLDP-MED Communication Endpoint (Class III) definition is applicable to all endpoint products that act as end user communication appliances supporting IP media. Capabilities include all of the capabilities defined for the previous Generic Endpoint (Class I) and Media Endpoint (Class II) classes, and are extended to include aspects related to end user devices.
  • Page 222 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  Streaming Video - for use by broadcast or multicast based video content distribution and other similar applications supporting streaming video services that require specific network policy treatment. Video applications relying on TCP with buffering would not be an intended use of this application type.

  • Page 223: Port Statistics

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.8.6 Port Statistics This page provides an overview of all LLDP traffic. Two types of counters are shown. Global counters are counters that refer to the whole switch, while local counters refers to counters for the currently selected switch. The LLDP Statistics screen in...
  • Page 224 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series LLDP Statistics Local Counters The displayed table contains a row for each port. The columns hold the following information: Object Description • Local Port The port on which LLDP frames are received or transmitted.

  • Page 225: Mac Address Table

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.9 MAC Address Table Switching of frames is based upon the DMAC address contained in the frame. The Industrial Managed Switch builds up a table that maps MAC addresses to switch ports for knowing which ports the frames should go to (based upon the DMAC address in the frame ).
  • Page 226 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Aging Configuration By default, dynamic entries are removed from the MAC table after 300 seconds. This removal is also called aging. Object Description • Disable Automatic Enables/disables the automatic aging of dynamic entries Aging •...

  • Page 227: Mac Address Table Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons : Click to apply changes Click to undo any changes made locally and revert to previously saved values. 4.3.9.2 MAC Address Table Status Dynamic MAC Table Entries in the MAC Table are shown on this page. The MAC Table contains up to 8192 entries, and is sorted first by VLAN ID, then by MAC address.
  • Page 228 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series In addition, the two input fields will - upon a “Refresh” button click - assume the value of the first displayed entry, allowing for continuous refresh with the same start address. The “>>” will use the last entry of the currently displayed VLAN/MAC address pairs as a basis for the next lookup. When the end is reached the text "no more entries"...

  • Page 229: Loop Protection

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.10 Loop Protection This chapter describes enabling loop protection function that provides loop protection to prevent broadcast loops in Industrial Managed Switch. 4.3.10.1 Configuration This page allows the user to inspect the current Loop Protection configurations, and possibly change them as well as screen in Figure 4-3-10-1 appears.

  • Page 230: Loop Protection Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Port Configuration Object Description • Port The switch port number of the port. • Enable Controls whether loop protection is enabled on this switch port. • Action Configures the action performed when a loop is detected on a port. Valid values are Shutdown Port, Shutdown Port and Log or Log Only.
  • Page 231 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons : Click to refresh the page immediately. Auto-refresh Check this box to enable an automatic refresh of the page at regular intervals.

  • Page 232: Udld

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.11 UDLD Unidirectional Link Detection (UDLD) is a data link layer protocol from Cisco Systems to monitor the physical configuration of the cables and detect unidirectional links. UDLD complements the Spanning Tree Protocol which is used to eliminate switching loops..

  • Page 233: Udld Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Aggressive: In aggressive mode, unidirectional detected ports will get shutdown. To bring back the ports up, need to disable UDLDon that port • Message Interval Configures the period of time between UDLD probe messages on ports that are in the advertisement phase and are determined to be bidirectional.
  • Page 234 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: UDLD port status Object Description • UDLD Admin State The current port state of the logical port, Enabled if any of state(Normal,Aggressive) is Enabled. • Device ID(local) The ID of Device •...

  • Page 235: Gvrp

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.12 GVRP GVRP (GARP VLAN Registration Protocol or Generic VLAN Registration Protocol) is a protocol that facilitates control of virtual local area networks (VLANs) within a larger network 4.3.12.1 GVRP Configuration This page allows you to configure the global GVRP configuration settings that are commonly applied to all GVRP enabled ports.

  • Page 236: Gvrp Port Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons Click to refresh the page. Note that unsaved changes will be lost. Click to undo any changes made locally and revert to previously saved values. 4.3.12.2 GVRP Port Configuration This configuration can be performed either before or after GVRP is configured globally - the protocol operation will be the same.
  • Page 237 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons Click to refresh the page. Note that unsaved changes will be lost. Click to undo any changes made locally and revert to previously saved values.

  • Page 238: Ptp

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.3.13 PTP The Precision Time Protocol (PTP) is a protocol used to synchronize clocks throughout a computer network. On a local area network, it achieves clock accuracy in the sub-microsecond range, making it suitable for measurement and control systems.
  • Page 239 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Clock.  Master Only - clock's Device Type is Master Only.  Slave Only - clock's Device Type is Slave Only • Port List Set check mark for each port configured for this Clock Instance.
  • Page 240 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • PTP Time Shows the actual PTP time with nanosecond resolution. • Clock Adjustment Shows the actual clock adjustment method. The method depends on the Method available hardware. • Synchronize to System Activate this button to synchronize the System Clock to PTP Time.
  • Page 241 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series delay requests. • VLAN Tag Enable Enables the VLAN tagging for the PTP frames. • VID VLAN Identifier used for tagging the VLAN packets. • PCP Priority Code Point value used for PTP frames.
  • Page 242 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • P-enable If true the P part of the algorithm is included • I-enable If true the I part of the algorithm is included • D-enable If true the D part of the algorithm is included ‘P’...

  • Page 243: Quality Of Service

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.4 Quality of Service 4.4.1 General Quality of Service (QoS) is an advanced traffic prioritization feature that allows you to establish control over network traffic. QoS enables you to assign various grades of network service to different types of traffic, such as multi-media, video, protocol-specific, time critical, and file-backup traffic.

  • Page 244: Qos Port Classification

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.4.1.1 QoS Port Classification This page allows you to configure the basic QoS Classification settings for all switch ports. The Port classification screen in Figure 4-4-1-1 appears. Figure 4-4-1-1: QoS Ingress Port Policers Page Screenshot...
  • Page 245 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • PCP Controls the default value. All frames are classified to a PCP value. If the port is VLAN aware and the frame is tagged, then the frame is classified to the PCP value in the tag. Otherwise the frame is classified to the default PCP value.

  • Page 246: Queue Policing

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.4.1.2 Queue Policing This page allows you to configure the Queue Policer settings for all switch ports.. The Queue Policing screen in Figure 4-4-1-2 appears. Figure 4-4-1-2 : QoS Ingress Port Classification Page Screenshot...

  • Page 247: Port Tag Remarking

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.4.1.3 Port Tag Remarking This page provides an overview of QoS Egress Port Tag Remarking for all switch ports. The Port tag remarking screen in Figure 4-4-1-3 appears. Figure 4-4-1-3: Port Tag Remarking Page Screenshot...
  • Page 248 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-4-1-4: QoS Egress Port Shapers Page Screenshot The page includes the following fields: Object Description • Group The WRED group number for which the configuration below applies. • Queue The queue number (CoS) for which the configuration below applies.

  • Page 249: Statistics

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.4.1.5 Statistics This page provides statistics for the different queues for all switch ports. The statistice screen in Figure 4-4-1-5 appears. Figure 4-4-1-5: QoS statistics Page Screenshot The page includes the following fields:...

  • Page 250: Bandwidth Control

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.4.2 Bandwidth Control 4.4.2.1 Port Policing This page allows you to configure the Policer settings for all switch ports. The Port Policing screen in Figure 4-4-2-1 appears. Figure 4-4-2-1: QoS Ingress Port Policers Page Screenshot...

  • Page 251: Port Schedule

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.4.2.2 Port Schedule The Port Scheduler and Shapers for a specific port are configured on this page. The QoS Egress Port Schedule and Shaper screen in Figure 4-4-2-2 appears. Figure 4-4-2-2: QoS Egress Port Schedule and Shapers Page Screenshot...

  • Page 252: Port Shaping

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Schedule Mode Controls whether the scheduler mode is "Strict Priority" or "Weighted" on this switch port. • Queue Shaper Enable Controls whether the queue shaper is enabled for this queue on this switch port.
  • Page 253 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-4-2-3: QoS Egress Port Schedule and Shapers Page Screenshot The page includes the following fields: Object Description • Schedule Mode Controls whether the scheduler mode is "Strict Priority" or "Weighted" on this switch port.
  • Page 254 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series This value is restricted to 100-1000000 when the "Unit" is "kbps", and it is restricted to 1-13200 when the "Unit" is "Mbps". The default value is 500. • Queue Shaper Unit Controls the unit of measure for the queue shaper rate as "kbps" or "Mbps".

  • Page 255: Storm Control

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.4.3 Storm Control 4.4.3.1 Storm Policing Configuration Storm control for the switch is configured on this page. There is a unicast storm rate control, multicast storm rate control, and a broadcast storm rate control. These only affect flooded frames, i.e. frames with a (VLAN ID, DMAC) pair not present on the MAC Address table.
  • Page 256 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons : Click to apply changes : Click to undo any changes made locally and revert to previously saved values.

  • Page 257: Differentiated Service

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.4.4 Differentiated Service 4.4.4.1 Port DSCP This page allows you to configure the basic QoS Port DSCP Configuration settings for all switch ports. The Port DSCP screen in Figure 4-9-8 appears. Figure 4-4-4-1: QoS Port DSCP Configuration Page Screenshot...

  • Page 258: Dscp-Based Qos

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  Enable: Rewrite enable without remapped.  Remap DP Unaware: DSCP from analyzer is remapped and frame is remarked with remapped DSCP value. The remapped DSCP value is always taken from the 'DSCP Translation->Egress Remap DP0' table.

  • Page 259: Dscp Translation

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • DSCP Maximum number of supported DSCP values are 64. • Trust Controls whether a specific DSCP value is trusted. Only frames with trusted DSCP values are mapped to a specific QoS class and Drop Precedence Level.

  • Page 260: Dscp Classification

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series ranges from 0 to 63. • Ingress Ingress side DSCP can be first translated to new DSCP before using the DSCP for QoS class and DPL map. There are two configuration parameters for DSCP Translation –...
  • Page 261 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • QoS Class Available QoS Class value ranges from 0 to 7. QoS Class (0-7) can be mapped to followed parameters. • DPL Actual Drop Precedence Level.

  • Page 262: Qcl

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.4.5 QCL 4.4.5.1 QoS Control List This page shows the QoS Control List(QCL), which is made up of the QCEs. Each row describes a QCE that is defined. The maximum number of QCEs is 256 on each switch.

  • Page 263: Qos Control Entry Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Drop Eligible Indicator: Valid value of DEI can be any of values between 0, 1 or 'Any'. • Frame Type Indicates the type of frame to look for incoming frames. Possible frame types are: ■...
  • Page 264 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-4-5-2: QCE Configuration Page Screenshot The page includes the following fields: Object Description • Check the checkbox button in case you what to make any port member of the Port Members QCL entry. By default all ports will be checked •...
  • Page 265 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series SNAP IPv4 IPv6 Note: all frame types are explained below. • Any Allow all types of frames. • EtherType Ethernet Type Valid Ethernet type can have value within 0x600-0xFFFF or 'Any' but excluding 0x800(IPv4) and 0x86DD(IPv6), default value is 'Any'.

  • Page 266: Qcl Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Class QoS class: (0-7) or 'Default'. Action Parameters DPL Valid Drop Precedence Level can be (0-3) or 'Default'. DSCP Valid DSCP value can be (0-63, BE, CS1-CS7, EF or AF11-AF43) or 'Default'.

  • Page 267: Voice Vlan Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series ■ Ethernet: Only Ethernet frames (with Ether Type 0x600-0xFFFF) are allowed. ■ LLC: Only (LLC) frames are allowed. ■ SNAP: Only (SNAP) frames are allowed. ■ IPv4: The QCE will match only IPV4 frames.
  • Page 268 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-4-5-4: Voice VLAN Configuration Page Screenshot The page includes the following fields: Object Description • Mode Indicates the Voice VLAN mode operation. We must disable MSTP feature before we enable Voice VLAN. It can avoid the conflict of ingress filter. Possible modes are: ■...
  • Page 269 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The actual age time will be situated in the [age_time; 2 * age_time] interval. • Traffic Class Indicates the Voice VLAN traffic class. All traffic on Voice VLAN will apply this class. • Mode Indicates the Voice VLAN port mode.

  • Page 270: Voice Vlan Oui Table

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.4.5.5 Voice VLAN OUI Table Configure VOICE VLAN OUI table on this page. The maximum entry number is 16. Modifying the OUI table will restart auto detection of OUI process. The Voice VLAN OUI Table screen in Figure 4-4-5-5 appears.

  • Page 271: Security

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5 Security 4.5.1 Access Security 4.5.1.1 Access Management Configure access management table on this page. The maximum entry number is 16. If the application's type match any one of the access management entries, it will allow access to the switch. The Access Management Configuration screen in...

  • Page 272: Access Management Statistics

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons : Click to add a new access management entry. : Click to apply changes : Click to undo any changes made locally and revert to previously saved values. 4.5.1.2 Access Management Statistics This page provides statistics for access management.

  • Page 273: Ssh

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.1.3 SSH Configure SSH on this page. This page shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the port is set-up for software-based learning.
  • Page 274 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-5-1-4: HTTPS Configuration Screen Page Screenshot The page includes the following fields: Object Description • Mode Indicates the HTTPS mode operation. When the current connection is HTTPS, to apply HTTPS disabled mode operation will automatically redirect web browser to an HTTP connection.
  • Page 275 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Certificate Upload Upload a certificate PEM file into the switch. The file should contain the certificate and private key together. If you have two separated files for saving certificate and private key. Use the Linux cat command to combine them into a single PEM file.

  • Page 276: Aaa

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.2 AAA This section is to control the access to the Industrial Managed Switch, including the user access and management control. The Authentication section contains links to the following main topics:  User Authentication ...
  • Page 277 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series address is a valid RADIUS user can be used by anyone, and only the MD5-Challenge method is supported. The 802.1X and MAC-Based Authentication configuration consists of two sections, a system- and a port-wide.
  • Page 278 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-5-2-1  Client—the device (workstation) that requests access to the LAN and switch services and responds to requests from the switch. The workstation must be running 802.1X-compliant client software such as that offered in the Microsoft Windows XP operating system.
  • Page 279 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series authentication server, the server's frame header is removed, leaving the EAP frame, which is then encapsulated for Ethernet and sent to the client.  Authentication Initiation and Message Exchange The switch or the client can initiate authentication. If you enable authentication on a port by using the dot1x port-control auto interface configuration command, the switch must initiate authentication when it determines that the port link state transitions from down to up.

  • Page 280: Authentication Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  Ports in Authorized and Unauthorized States The switch port state determines whether or not the client is granted access to the network. The port starts in the unauthorized state. While in this state, the port disallows all ingress and egress traffic except for 802.1X protocol packets. When a client is successfully authenticated, the port transitions to the authorized state, allowing all traffic for the client to flow normally.
  • Page 281 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-5-2-3: Authentication Method Configuration Page Screenshot The page includes the following fields: Authentication Method Configuration The authentication section allows you to configure how a user is authenticated when he logs into theswitch via one of the management client interfaces.
  • Page 282 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • tacacs: Use remote TACACS+ server(s) for authentication.. Command Authorization Method Configuration The command authorization section allows you to limit the CLI commands available to a user. The table has one row for each client type and a number of columns, which are:...

  • Page 283: Radius

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series accounting. • Exec Enable exec (login) accounting. Buttons : Click to apply changes : Click to undo any changes made locally and revert to previously saved values. 4.5.2.2 RADIUS This page allows you to configure the RADIUS Servers. The RADIUS Configuration screen in Figure 4-5-2-4 appears.
  • Page 284 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Retransmit Retransmit is the number of times, in the range from 1 to 1000; a RADIUS request is retransmitted to a server that is not responding. If the server has not responded after the last retransmit, it is considered to be dead.

  • Page 285: Tacacs

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons d a new RADIUS server. An empty row is added to the table, and the RADIUS : Click to ad server can be configured as needed. Up to 5 servers are supported.

  • Page 286: Radius Overview

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series failed to respond to a previous request. This will stop the switch from continually trying to contact a server that it has already determined as dead. Setting the Dead Time to a value greater than 0 (zero) will enable this feature, but only if more than one server has been configured.
  • Page 287 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-5-2-6: RADIUS Authentication/Accounting Server Overview Page Screenshot The page includes the following fields: RADIUS Authentication Server Status Overview Object Description • # The RADIUS server number. Click to navigate to detailed statistics for this server.

  • Page 288: Radius Details

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series re-enabled when the dead-time expires. The number of seconds left before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
  • Page 289 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: RADIUS Authentication Statistics The statistics map closely to those specified in RFC4668 - RADIUS Authentication Client MIB. Use the server select box to switch between the backend servers to show details for.
  • Page 290 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Unknown radiusAuthClientExtU The number of RADIUS Types nknownTypes packets that were received from the server on the authentication port and dropped for some other reason. Packets radiusAuthClientExtP The number of RADIUS Dropped acketsDropped...
  • Page 291 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. • Other Info This section contains information about the state of the server and the latest round-trip time.
  • Page 292 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Object Description • Packet Counters RADIUS accounting server packet counter. There are five receive and four transmit counters. Direction Name RFC4670 Name Description Responses radiusAccClientExt The number of RADIUS Responses packets (valid or invalid) received from the server.
  • Page 293 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Pending radiusAccClientExt The number of RADIUS Requests PendingRequests packets destined for the server that have not yet timed out or received a response. This variable is incremented when a Request is sent and...
  • Page 294 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series expires. The number of seconds left before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled.  Round-Trip radiusAccClientExtRo The time interval (measured in...

  • Page 295: Port Authentication

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.3 Port Authentication 4.5.3.1 Network Access Server Configuration This page allows you to configure the IEEE 802.1X and MAC-based authentication system and port settings. The IEEE 802.1X standard defines a port-based access control procedure that prevents unauthorized access to a network by requiring users to first submit credentials for authentication.
  • Page 296 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: System Configuration Object Description • Mode Indicates if NAS is globally enabled or disabled on the switch. If globally disabled, all ports are allowed forwarding of frames.
  • Page 297 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series communication between the switch and the client, so this will not detect whether the client is still attached or not, and the only way to free any resources is to age the entry.

  • Page 298: Network Access Overview

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Guest VLAN Enabled A Guest VLAN is a special VLAN - typically with limited network access - on which 802.1X-unaware clients are placed after a network administrator-defined timeout. The switch follows a set of rules for entering and leaving the Guest VLAN as listed below.
  • Page 299 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-5-3-2: Network Access Server Switch Status Page Screenshot The page includes the following fields: Object Description • Port The switch port number. Click to navigate to detailed NAS statistics for this port.

  • Page 300: Network Access Statistics

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.3.3 Network Access Statistics This page provides detailed NAS statistics for a specific switch port running EAPOL-based IEEE 802.1X authentication. For MAC-based ports, it shows selected backend server (RADIUS Authentication Server) statistics, only. Use the port select box to select which port details to be displayed.
  • Page 301 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • EAPOL Counters These supplicant frame counters are available for the following administrative states: ■ Force Authorized ■ Force Unauthorized ■ Port-based 802.1X ■ Single 802.1X ■ Multi 802.1X Direction Name IEEE Name...
  • Page 302 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Total dot1xAuthEapolFrames The number of EAPOL frames of any type that have been transmitted by the switch. Request ID dot1xAuthEapolReqIdFr The number of EAPOL amesTx Request Identity frames that have been transmitted by the switch.
  • Page 303 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series that the switch sends an EAP Request packet following the first to the supplicant. Indicates that the backend server chose an EAP-method. MAC-based: Not applicable. Auth. dot1xAuthBackendAuth 802.1X- and MAC-based: Successes Successes Counts the number of times that the switch receives a success indication.
  • Page 304 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series table). Possible retransmissions are not counted. • Last Supplicant/Client Information about the last supplicant/client that attempted to authenticate. This Info information is available for the following administrative states: ■ Port-based 802.1X ■ Single 802.1X ■...

  • Page 305: Port Security

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.4 Port Security 4.5.4.1 Port Limit Control This page allows you to configure the Port Security global and per-port settings. Port Security allows for limiting the number of users on a given port. A user is identified by a MAC address and VLAN ID. If Port Security is enabled on a port, the limit specifies the maximum number of users on the port.
  • Page 306 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Aging Period If Aging Enabled is checked, then the aging period is controlled with this input. If other modules are using the underlying port security for securing MAC addresses, they may have other requirements to the aging period. The underlying port security will use the shorter requested aging period of all modules that use the functionality.
  • Page 307 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The switch is "born" with a total number of MAC addresses from which all ports draw whenever a new MAC address is seen on a Port Security-enabled port. Since all ports draw from the same pool, it may happen that a configured maximum cannot be granted, if the remaining ports have already used all available MAC addresses.

  • Page 308: Port Security Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons : Click to apply changes Click to undo any changes made locally and revert to previously saved values. : Click to refresh the page. Note that non-committed changes will be lost. 4.5.4.2 Port Security Status This page shows the Port Security status.
  • Page 309 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: User Module Legend The legend shows all user modules that may request Port Security services. Object Description • User Module Name The full name of a module that may request Port Security services.

  • Page 310: Port Security Detail

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series re-opened on the Limit Control configuration web page. • MAC Count The two columns indicate the number of currently learned MAC addresses (Current, Limit) (forwarding as well as blocked) and the maximum number of MAC addresses that can be learned on the port, respectively.
  • Page 311 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Time of Addition Shows the date and time when this MAC address was first seen on the port. • Age/Hold  If at least one user module has decided to block this MAC address, it will stay in the blocked state until the hold time (measured in seconds) expires.

  • Page 312: Access Control Lists

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.5 Access Control Lists ACL is an acronym for Access Control List. It is the list table of ACEs, containing access control entries that specify individual users or groups permitted or denied to specific traffic objects, such as a process or a program.

  • Page 313: Access Control List Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series ■ IPv4: The ACE will match all IPv4 frames. ■ IPv4/ICMP: The ACE will match IPv4 frames with ICMP protocol. ■ IPv4/UDP: The ACE will match IPv4 frames with UDP protocol. ■ IPv4/TCP: The ACE will match IPv4 frames with TCP protocol.
  • Page 314 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • ACE Indicates the ACE ID. • Ingress Port Indicates the ingress port of the ACE. Possible values are: ■ All: The ACE will match all ingress port.

  • Page 315: Ace Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series : Inserts a new ACE before the current row. : Edits the ACE row. : Moves the ACE up the list. : Moves the ACE down the list. : Deletes the ACE. : The lowest plus sign adds a new entry at the bottom of the ACE listings.
  • Page 316 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Ingress Port Select the ingress port for which this ACE applies. ■ Any: The ACE applies to any port. ■ Port n: The ACE applies to this port number, where n is the number of the switch port.
  • Page 317 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Disabled: Frames received on the port are not mirrored. The default value is "Disabled" • Logging Specify the logging operation of the ACE. The allowed values are: ■ Enabled: Frames matching the ACE are stored in the System Log.
  • Page 318 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series  VLAN Parameters Object Description • 802.1Q Tagged Specify whether frames can hit the action according to the 802.1Q tagged. The allowed values are: Any: Any value is allowed ("don't-care"). Enabled: Tagged frame only.
  • Page 319 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series and sender IP mask in the SIP Address and SIP Mask fields that appear. • Sender IP Address When "Host" or "Network" is selected for the sender IP filter, you can enter a specific sender IP address in dotted decimal notation.
  • Page 320 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series address space (PRO) settings. ■ 0: ARP/RARP frames where the PRO is equal to IP (0x800). ■ 1: ARP/RARP frames where the PRO is equal to IP (0x800). ■ Any: Any value is allowed ("don't-care").
  • Page 321 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • IP Option Specify the options flag setting for this ACE. ■ No: IPv4 frames where the options flag is set must not be able to match this entry. ■ Yes: IPv4 frames where the options flag is set must be able to match this entry.
  • Page 322 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series ■ UDP: Select UDP to filter IPv6 UDP protocol frames. Extra fields for defining UDP parameters will appear. These fields are explained later in this help file. ■ TCP: Select TCP to filter IPv6 TCP protocol frames. Extra fields for defining TCP parameters will appear.
  • Page 323 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series value. • ICMP Code Filter Specify the ICMP code filter for this ACE. ■ Any: No ICMP code filter is specified (ICMP code filter status is "don't-care"). ■ Specific: If you want to filter a specific ICMP code filter with this ACE, you can enter a specific ICMP code value.
  • Page 324 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • When "Specific" is selected for the TCP/UDP destination filter, you can enter a TCP/UDP Destination specific TCP/UDP destination value. The allowed range is 0 to 65535. A frame Number that hits this ACE matches this TCP/UDP destination value.

  • Page 325: Acl Ports Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Object Description • EtherType Filter Specify the Ethernet type filter for this ACE. ■ Any: No EtherType filter is specified (EtherType filter status is "don't-care"). ■ Specific: If you want to filter a specific EtherType filter with this ACE, you can enter a specific EtherType value.
  • Page 326 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Port The logical port for the settings contained in the same row. • Select the policy to apply to this port. The allowed values are 0 through 255.

  • Page 327: Acl Rate Limiters

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series : Click to undo any changes made locally and revert to previously saved values. : Click to refresh the page; any changes made locally will be undone. : Click to clear the counters.
  • Page 328 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Rate Limiter ID The rate limiter ID for the settings contained in the same row. • The allowed values are: 0-3276700 in pps or 0, 100, 200, 300, ..., 1000000 in Rate (pps) kbps.

  • Page 329: Dhcp Snooping

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.6 DHCP Snooping DHCP Snooping is used to block intruder on the untrusted ports of DUT when it tries to intervene by injecting a bogus DHCP reply packet to a legitimate conversation between the DHCP client and server.
  • Page 330 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-5-6-1: DHCP Snooping Configuration Screen Page Screenshot The page includes the following fields: Object Description • Snooping Mode Indicates the DHCP snooping mode operation. Possible modes are:  Enabled: Enable DHCP snooping mode operation. When enable DHCP snooping mode operation, the request DHCP messages will be forwarded to trusted ports and only allowed reply packets from trusted ports.

  • Page 331: Snooping Table

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.6.2 Snooping Table This page display the dynamic IP assigned information after DHCP Snooping mode is disabled. All DHCP clients obtained the dynamic IP address from the DHCP server will be listed in this table except for local VLAN interface IP addresses.

  • Page 332: Ip Source Guard

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.7 IP Source Guard 4.5.7.1 IP Source Guard Configuration IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host.

  • Page 333: Static Ip Source Guard Table

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series that are matched in static entries on the specific port. Buttons : Click to translate all dynamic entries to static entries. : Click to apply changes Click to undo any changes made locally and revert to previously saved values.

  • Page 334: Dynamic Ip Source Guard Table

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.7.3 Dynamic IP Source Guard Table This page provides Static IP Source Guard Table. The Static IP Source Guard Table screen in Figure 4-5-7-3 appears. Figure 4-5-7-3: Static IP Source Guard Table Screen Page Screenshot...

  • Page 335: Arp Inspection

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.5.8 ARP Inspection 4.5.8.1 ARP Inspection ARP Inspection is a secure feature. Several types of attacks can be launched against a host or devices connected to Layer 2 networks by "poisoning" the ARP caches. This feature is used to block such attacks. Only valid ARP requests and responses can go through DUT.

  • Page 336: Arp Inspection Static Table

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series If you want to inspect the VLAN configuration, you have to enable the setting of "Check VLAN". The default setting of "Check VLAN" is disabled. When the setting of "Check VLAN" is disabled, the log type of ARP Inspection will refer to the port setting.

  • Page 337: Dynamic Arp Inspection Table

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Delete Check to delete the entry. It will be deleted during the next save. • Port The logical port for the settings. • VLAN ID The VLAN ID for the settings.
  • Page 338 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The “>>” will use the last entry of the currently displayed as a basis for the next lookup. When the end is reached the text "No more entries" is shown in the displayed table. Use the “|<<” button to start over. The page includes the following fields:...

  • Page 339: Power Over Ethernet (Igs-5225-8P2S2X)

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.6 Power over Ethernet (IGS-5225-8P2S2X) 4.6.1 PoE Providing up to 4/8 PoE, in-line power interfaces, the IGS-5225-8P2S2X PoE Switch can easily build a power central-controlled IP phone system, IP Camera system, AP group for the enterprise. For instance, 4/8 cameras/APs can be easily installed around the corners of the company for surveillance demands or a wireless roaming environment in the office can be built.

  • Page 340: Power Over Ethernet Powered Device

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.6.1.1 Power over Ethernet Powered Device Voice over IP phones Enterprises can install PoE VoIP phones, ATA sand other Ethernet/non-Ethernet end-devices in the center where UPS is installed for 3~5 watts un-interruptible power system and power control system.

  • Page 341: Power Over Ethernet Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series system’s aggregated power consumption .The power management concept allows all ports to be active and activates additional ports, as long as the aggregated power of the system is lower than the power level at which additional PDs cannot be connected .When this value is exceeded, ports will be deactivated, according to user-defined priorities.
  • Page 342 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-6-1-2: PoE Configuration Screenshot The page includes the following fields: Object Description • System PoE Admin Allows user to enable or disable PoE function. It will causes all of PoE ports to Mode supply or not supply power.

  • Page 343: Port Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Power Supply Budget Set limit value of the total PoE port providing power to the PDs. • Temperature Allows setting over temperature protection threshold value. If Its system Threshold temperature is over the threshold then system will lower total PoE power budget automatically.
  • Page 344 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-6-1-3: Power over Ethernet Configuration Screenshot The page includes the following fields: Object Description • PoE Mode There are three modes for PoE mode.  Enable: enable PoE function..  Disable: disable PoE function.

  • Page 345: Poe Status

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.6.1.5 PoE Status This page allows the user to inspect the total power consumption, total power reserved and current status for all PoE ports. The screen in Figure 4-6-1-4 appears. Figure 4-6-1-4:PoE Status Screenshot...

  • Page 346: Port Sequential

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Current Budget Displays the current maximum PoE budget. • Current Ports in Use Displays the current PoE ports in use. • Class 1 ~ 4 ports Displays the current ports of PoE class 1 ~ 4.

  • Page 347: Poe Schedule

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-6-1-5: PoE Port Sequential Power Up Interval Configuration Screenshot The PoE port will start up after the whole system program has finished running. The page includes the following fields: Object Description • Sequential Power up Allows user to enable or disable Sequential Power up function.
  • Page 348 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Scheduled Power Recycling The Managed PoE switch allows each of the connected PoE IP cameras to reboot in a specific time each week. Therefore, it will reduce the chance of IP camera crash resulting from buffer overflow. The screen in Figure 4-6-1-6 appears.
  • Page 349 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-6-1-6: PoE Schedule Screenshot Please press the Add New Rule button to start setting PoE Schedule function. You have to set PoE schedule to profile and then go back to PoE Port Configuration, and select “Schedule” mode from per port “PoE Mode” option. You can then indicate which schedule profile could be applied to the PoE port.

  • Page 350: Poe Alive Check Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Please be noticed that if you want to PoE schedule and PoE reboot schedule work at the same time, please use this function, and don’t use Reboot Only function. This function offers administrator to reboot PoE device at indicate time if administrator has this kind of requirement.

  • Page 351: Lldp Poe Neighbors

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series all ports are disabled. • Ping PD IP Address This coulumn allows user to set PoE device IP address here for system making ping to the PoE device. Please be noticed that the PD’s IP address must be set to the same network segment with IGS-5225-4UP1T2S/8P4S/8P2S/8P2S2X PoE Switch.
  • Page 352 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-6-1-8: LLDP PoE Neighbor Screenshot Please note that administrator has to enable LLDP port from LLDP configuration, please refer to the following example (The screen in Figure 4-6-1-9 appears.) To enable LLDP function from port1 to port3, administrator has to plug a PD that supports PoE LLDP function, and then administrator is going to see the PoE information of the PD from LLDP.

  • Page 353: Ring

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.7 Ring 4.7.1 Ring ITU-T G.8032 Ethernet Ring protection switching (ERPS) is a link layer protocol applied on Ethernet loop protection to provide sub-50ms protection and recovery switching for Ethernet traffic in a ring topology.

  • Page 354: Mep Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.7.1.1 MEP Configuration The Maintenance Entity Point instances are configured here; screen in Figure 4-7-1-1 appears. Figure 4-7-1-1: MEP configuration page screenshot The page includes the following fields: Object Description • Delete This box is used to mark a MEP for deletion in next Save operation.

  • Page 355: Detailed Mep Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Port'. Egress: This is a Egress (up) MEP - monitoring egress traffic on 'Residence Port'. • Residence Port The port where MEP is monitoring - see 'Direction'. • Level The MEG level of this MEP.
  • Page 356 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-7-1-2: Detail MEP configuration page screenshot The page includes the following fields: Instance Data: Object Description • Instance The ID of the MEP. • Domain See help on MEP create WEB. • Mode See help on MEP create WEB.
  • Page 357 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series ITU ICC: This is defined by ITU. 'ICC' can be max. 6 char. 'MEG id' can be max. 7 char. IEEE String: This is defined by IEEE. 'Domain Name' can be max. 8 char. 'MEG id' can be max.
  • Page 358 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Buttons : Click to add a new peer MEP. Functional Configuration Continuity Check: Object Description • Enable Continuity Check based on transmitting/receiving CCM PDU can be enabled/disabled. The CCM PDU is always transmitted as Multi-cast Class 1.

  • Page 359: Ethernet Ring Protocol Switch

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Type R-APS: APS PDU is transmitted as R-APS - this is for ERPS. L-APS: APS PDU is transmitted as L-APS - this is for ELPS. • Last Octet This is the last octet of the transmitted and expected RAPS multi-cast MAC. In G.8031 (03/2010) a RAPS multi-cast MAC is defined as 01-19-A7-00-00-XX.

  • Page 360: Ethernet Ring Protocol Switch Configuration

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series ring instances. "0" in this field indicates that no Port 1 SF MEP is associated with this instance. • Port 0 APS MEP The Port 0 APS PDU handling MEP. • Port 1 APS MEP The Port 1 APS PDU handling MEP.
  • Page 361 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-7-1-4: Ethernet Ring Protocol Switch Configuration page screenshot The page includes the following fields: Instance Data: Object Description • ERPS ID The ID of the Protection group. • Port 0 See help on ERPS create WEB.
  • Page 362 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Guard Time Guard timeout value to be used to prevent ring nodes from receiving outdated R-APS messages. The period of the guard timer can be configured in 10 ms steps between 10 ms and 2 seconds, with a default value of 500 ms •...

  • Page 363: Ethernet Ring Protocol Switch

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Instance State: Object Description • Protection State ERPS state according to State Transition Tables in G.8032. • Port 0 OK: State of East port is ok SF: State of East port is Signal Fail •...
  • Page 364 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-7-1-5: Ring Wizard page screenshot The page includes the following fields: Object Description • All Switch Numbers Set all the switch numbers for the ring group. The default number is 3 and maximum number is 30.

  • Page 365: Ring Wizard Example

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.7.1.6 Ring Wizard Example Figure 4-7-1-6: Ring Example Diagram The above topology often occurs on using ERPS protocol. The multi switch constitutes a single ERPS ring; all of the switches only are configured as an ERPS in VLAN 3001, thereby constituting a single MRPP ring.
  • Page 366 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Setup steps Set ERPS Configuration on Switch 1 Connect PC to switch 1 directly; don’t connect to port 1 & 2 Logging on the Switch 1 and click “Ring > Ring Wizard” Set “All Switch Number” = 3 and “Number ID” = 1; click “Next” button to set the ERPS configuration for Switch 1.
  • Page 367 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Set “MEP5” = Port2, “MEP6” = Port1 and VLAN ID = 3001; click “Set” button to save the ERPS configuration for Switch 3. To avoid loop, please don’t connect switch 1, 2 & 3 together in the ring topology before configuring the end of ERPS .

  • Page 368: Onvif

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.8 ONVIF 4.8.1 ONVIF ONVIF (Open Network Video Interface Forum) is a global and open industry forum with the goal of facilitating the development and use of a global open standard for the interface of physical IP-based security products – or, in other words, to create a standard for how IP products within video surveillance and other physical security areas can communicate with each other.

  • Page 369: Onvif Device List

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Manufacturer The ONVIF Device’s Manufacturer of the entry. • Model The ONVIF Device’s Model Name of the entry. • IP Address The ONVIF Device’s IP Address of the entry. • MAC Address The ONVIF Device’s MAC address of the entry.

  • Page 370: Map Upload / Edit

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series • Port This is the logical port number for this row. • Status Red: The ONVIF device is not active. Green: The ONVIF device is active.The ONVIF Device’s Type of the entry. • Device Type The ONVIF Device’s Type of the entry.

  • Page 371: Floor Map

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-8-1-3: Map Upload / Edit Page Screenshot The page includes the following fields: Object Description • MAP Select Allows to select Map1/2/3 for uploading Map. • Description Indicates the map’s description. • File size Shows Map’s size.
  • Page 372 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The page includes the following fields: Object Description • Summary Information Shows the number of Online and Offline ONVIF cameras. • Map Control Allows to choose Location of Map1/2/3 and zoom in/out of Map.

  • Page 373: Maintenance

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.9 Maintenance 4.9.1 Switch Maintenance This chapter is teaching how to upgrade the firmware, how to save the switch running configure and how to download/upload the configure file and etc. 4.9.1.1 Web Firmware Upgrade This page facilitates an update of the firmware controlling the switch.

  • Page 374: Save Startup Config

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series DO NOT Power OFF the Industrial Managed Switch until the update progress is complete. Do not quit the Firmware Upgrade page without pressing the “OK” button after the image is loaded. Or the system won’t apply the new firmware. User has to repeat the firmware upgrade processes.

  • Page 375: Configuration Upload

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-9-1-5: Configuration Download Page Screenshot 4.9.1.4 Configuration Upload Configuration Upload page allows the upload the running-config and startup-config on the switch. Please refer to the Figure 4-9-1-6 shown below. Figure 4-9-1-6: Configuration Upload Page Screenshot If the destination is running-config, the file will be applied to the switch configuration.

  • Page 376: Configuration Activate

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 4.9.1.5 Configuration Activate Thje Configure Activate page allows to activate the startup-config and default-config files present on the switch. Please refer to the Figure 4-9-1-7 shown below. Figure 4-9-1-7: Configuration Activate Page Screenshot It is possible to activate any of the configuration files present on the switch, except for running-config which represents the currently active configuration.

  • Page 377: Factory Default

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series In case the active firmware image is the alternate image, only the "Active Image" table is shown. In this case, the Activate Alternate Image button is also disabled. If the alternate image is active (due to a corruption of the primary image or by manual intervention), uploading a new firmware image to the device will automatically use the primary image slot and activate this.

  • Page 378: Configuration Download

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-9-1-10: Factory Default Page Screenshot Buttons : Click to reset the configuration to Factory Defaults. : Click to return to the Port State page without resetting the configuration. To reset the Industrial Managed Switch to the Factory default setting, you can also press the hardware reset button at the front panel about 10 seconds.

  • Page 379: Diagnostics

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series You can also check the SYS LED on the front panel to identify whether the System is loaded completely or not. If the SYS LED is blinking, then it is in the firmware load stage; if the SYS LED light is on, you can use the Web browser to login the Industrial Managed Switch.

  • Page 380: Ipv6 Ping

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series reception of a reply. The page refreshes automatically until responses to all packets are received, or until a timeout occurs. The ICMP Ping screen in Figure 4-9-2-1 appears. Figure 4-9-2-1: ICMP Ping Page Screenshot...

  • Page 381: Remote Ip Ping Test

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-9-2-2: ICMPv6 Ping Page Screenshot The page includes the following fields: Object Description • The destination IP Address. IP Address • Ping Length The payload size of the ICMP packet. Values range from 2 bytes to 1452 bytes.

  • Page 382: Cable Diagnostics

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Figure 4-9-2-3: Remote IP Ping Test Page Screenshot The page includes the following fields: Object Description • Port The logical port for the settings. • Remote IP Address The destination IP Address. •...
  • Page 383 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 10 and 100 Mbps ports will be linked down while running cable diagnostic. Therefore, running cable diagnostic on a 10 or 100 Mbps management port will cause the switch to stop responding until VeriPHY is complete. The VeriPHY Cable Diagnostics...
  • Page 384 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Cross B - Abnormal cross-pair coupling with pair B Cross C - Abnormal cross-pair coupling with pair C Cross D - Abnormal cross-pair coupling with pair D Length: The length (in meters) of the cable pair. The resolution is 3 meters Buttons : Click to run the diagnostics.

  • Page 385: Switch Operation

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 5. SWITCH OPERATION 5.1 Address Table The Industrial Managed Switch is implemented with an address table. This address table is composed of many entries. Each entry is used to store the address information of some nodes in the network, including MAC address, port no, etc. This information comes from the learning process of Industrial Managed Switch.

  • Page 386: Auto-Negotiation

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series 5.5 Auto-Negotiation The STP ports on the Switch have built-in "Auto-negotiation". This technology automatically sets the best possible bandwidth when a connection is established with another network device (usually at Power On or Reset). This is done by detecting the modes and speeds both connected devices are capable of.

  • Page 387: Troubleshooting

    User’s Manual of WGSW-48040HP 6. TROUBLESHOOTING This chapter contains information to help you solve issues. If the Industrial Managed Switch is not functioning properly, make sure the Industrial Managed Switch was set up according to instructions in this manual. ■ The Link LED is not lit. Solution: Check the cable connection and remove duplex mode of the Industrial Managed Switch.

  • Page 388: Appendix A: Networking Connection

    User’s Manual of WGSW-48040HP APPENDIX A: Networking Connection A.1 Switch's Data RJ45 Pin Assignments - 1000Mbps, 1000BASE-T PIN NO MDI-X BI_DA+ BI_DB+ BI_DA- BI_DB- BI_DB+ BI_DA+ BI_DC+ BI_DD+ BI_DC- BI_DD- BI_DB- BI_DA- BI_DD+ BI_DC+ BI_DD- BI_DC- Implicit implementation of the crossover function within a twisted-pair cable, or at a wiring panel, while not expressly forbidden, is beyond the scope of this standard.
  • Page 389 User’s Manual of WGSW-48040HP The standard cable, RJ45 pin assignment The standard RJ45 receptacle/connector There are 8 wires on a standard UTP/STP cable and each wire is color-coded. The following shows the pin allocation and color of straight-through cable and crossover cable connection: Straight Cable SIDE 1 SIDE 2...

  • Page 390: Appendix B : Glossary

    User’s Manual of IGS-5225-8T2S2X & 8P2S2X series APPENDIX B : GLOSSARY ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application.
  • Page 391 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series ACL|Rate Limiters: On this page, you can configure the rate limiters. There can be 15 different rate limiters, each ranging from 1 to 1024K packets per second. Under "Ports" and "Access Control List", you can assign a Rate Limiter ID to the ACE(s) or ingress port(s).
  • Page 392 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Auto-negotiation is the process where two different devices establish the mode of operation and the speed settings that can be shared by those devices for a link. CC is an acronym for Continuity Check. It is a MEP functionality that is able to detect loss of continuity in a network by transmitting CCM frames to a peer MEP.
  • Page 393 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series The DHCP server ensures that all IP addresses are unique, for example, no IP address is assigned to a second client while the first client's assignment is valid (its lease has not expired). Therefore, IP address pool management is done by the server and not by a human network administrator.
  • Page 394 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Dotted Decimal Notation refers to a method of writing IP addresses using decimal numbers and dots as separators between octets. An IPv4 dotted decimal address has the form x.y.z.w, where x, y, z, and w are decimal numbers between 0 and 255.
  • Page 395 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Any Web server machine contains, in addition to the web page files it can serve, an HTTP daemon, a program that is designed to wait for HTTP requests and handle them when they arrive. The Web browser is an HTTP client, sending requests to server machines.
  • Page 396 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series IMAP IMAP is an acronym for Internet Message Access Protocol. It is a protocol for email clients to retrieve email messages from a mail server. IMAP is the protocol that IMAP clients use to communicate with the servers, and SMTP is the protocol used to transport mail to an IMAP server.
  • Page 397 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series LLDP LLDP is an IEEE 802.1ab standard protocol. The Link Layer Discovery Protocol(LLDP) specified in this standard allows stations attached to an IEEE 802 LAN to advertise, to other stations attached to the same IEEE 802 LAN, the major capabilities provided by the system...
  • Page 398 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series For debugging network problems or monitoring network traffic, the switch system can be configured to mirror frames from multiple ports to a mirror port. (In this context, mirroring a frame is the same as copying the frame.) Both incoming (source) and outgoing (destination) frames can be mirrored to the mirror port.
  • Page 399 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks of computer systems. NTP uses UDP (datagrams) as transport layer. OAM is an acronym for Operation Administration and Maintenance. It is a protocol described in ITU-T Y.1731 used to implement carrier Ethernet functionality.
  • Page 400 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series PING Ping is a program that sends a series of packets over a network or the Internet to a specific computer in order to generate a response from that computer. The other computer responds with an acknowledgment that it received the packets.
  • Page 401 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series QCE is an acronym for QoS Control Entry. It describes QoS class associated with a particular QCE ID. There are six QCE frame types: Ethernet Type, VLAN, UDP/TCP Port, DSCP, TOS, and Tag Priority. Frames can be classified by one of 4 different QoS classes: "Low", "Normal", "Medium", and "High"...
  • Page 402 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series given hardware address, such as an Ethernet address. RARP is the complement of ARP. RADIUS RADIUS is an acronym for Remote Authentication Dial In User Service. It is a networking protocol that provides centralized access, authorization and accounting management for people or computers to connect and use a network service.
  • Page 403 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Protocol (TCP) and provides a mail service modeled on the FTP file transfer service. SMTP transfers mail messages between systems and notifications regarding incoming mail. SNAP The SubNetwork Access Protocol (SNAP) is a mechanism for multiplexing, on networks using IEEE 802.2 LLC, more protocols than can be distinguished by the 8-bit 802.2 Service Access Point (SAP) fields.
  • Page 404 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series SyncE SyncE Is an abbreviation for Synchronous Ethernet. This functionality is used to make a network 'clock frequency' synchronized. Not to be confused with real time clock synchronized (IEEE 1588). TACACS+ TACACS+ is an acronym for Terminal Access Controller Access Control System Plus. It is a networking protocol which provides access control for routers, network access servers and other networked computing devices via one or more centralized servers.
  • Page 405 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series Toss Toss is an acronym for Type of Service. It is implemented as the IPv4 Toss priority control. It is fully decoded to determine the priority from the 6-bit Toss field in the IP header. The most significant 6 bits of the Toss field are fully decoded into 64 possibilities, and the singular code that results is compared against the corresponding bit in the IPv4 ToS priority control bit (0~63).
  • Page 406 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series VLAN A method to restrict communication between switch ports. VLANs can be used for the following applications: VLAN unaware switching: This is the default configuration. All ports are VLAN unaware with Port VLAN ID 1 and members of VLAN 1.
  • Page 407 User’s Manual of IGS-5225-8T2S2X & 8P2S2X series had found in the previous system , Wired Equivalent Privacy (WEP). WPA implements the majority of the IEEE 802.11i standard, and was intended as an intermediate measure to take the place of WEP while 802.11i was prepared. WPA is specifically designed to also work with pre-WPA wireless network interface cards (through firmware upgrades), but not necessarily with first generation wireless access points.

This manual is also suitable for:

Igs-5225 seriesIgs-5225-8p2s2x

Table of Contents