Page 1 User’s Manual of SGS-5240 Series L2+ Stackable Managed Gigabit Ethernet Switch with 10GbE Uplink SGS-5240 Switch Series...
Page 2 User’s Manual of SGS-5240 Series Managed Switch Trademarks Copyright © PLANET Technology Corp. 2020. Contents are subject to revision without prior notice. PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their respective owners. Disclaimer...
Page 3: Table Of Contents
User’s Manual of SGS-5240 Series Managed Switch TABLE OF CONTENTS 1. INTRODUCTION ........................11 1.1 Packet Contents ............................11 1.2 Product Description ........................... 12 1.3 How to Use This Manual ..........................17 1.4 Product Features ............................18 1.5 Product Specifications ..........................21 2.
Page 4 User’s Manual of SGS-5240 Series Managed Switch 4.2.2.4 Cable Test ..............................49 4.2.2.5 Green Ethernet ............................50 4.2.2.6 Port Isolate ..............................50 4.2.3 Statistics................................51 4.2.3.1 Current Statistics ............................51 4.2.3.2 History Management ..........................51 4.2.3.3 History Info ..............................52 4.2.4 VLAN ...................................
Page 5 User’s Manual of SGS-5240 Series Managed Switch 4.2.11.5 VLAN Information ..........................109 4.2.11.6 Configure Interface ..........................112 4.2.11.7 Forwarding Entry ........................... 113 4.2.11.8 Query Statistics............................114 4.2.11.9 VLAN Statistics ............................115 4.2.11.10 Port Statistics ............................116 4.2.11.11 Group Statistics ............................ 117 4.2.12 IGMP Filtering and Throttling ........................
Page 6 User’s Manual of SGS-5240 Series Managed Switch 4.2.15.11 Show Query Statistics .......................... 147 4.2.15.12 Show VLAN Statistics .......................... 149 4.2.15.13 Show Port Statistics..........................150 4.2.15.14 Show Group Statistics ......................... 151 4.2.16 LLDP ................................153 4.2.16.1 Global Configuration ..........................153 4.2.16.2 Interface Configuration .......................... 154 4.2.16.3 Civil Address Type ..........................
Page 7 User’s Manual of SGS-5240 Series Managed Switch 4.3.4 Routing Table ..............................188 4.4 ACL ................................189 4.4.1 ACL Configuration ............................189 4.4.2 Rule Configuration ............................190 Standard Ipv4 Acl ..............................190 Extended Ipv4 Acl ..............................191 Standard Ipv6 Cal ..............................192 Extended Ipv6 Acl ..............................
Page 8 User’s Manual of SGS-5240 Series Managed Switch 4.7.4.1 Global Configuration ..........................221 4.7.4.2 Interface Configuration ..........................222 4.7.4.3 MAC Filter ............................... 222 4.7.4.4 MAC Authentication Information ......................223 4.7.5 HTTPS ................................223 4.7.5.1 Global Configuration ..........................223 4.7.5.2 Update Certificate ............................ 223 4.7.6 SSH ...................................
Page 9 User’s Manual of SGS-5240 Series Managed Switch 4.8.1.4 Group Configuration ..........................246 4.8.1.5 Local User ............................... 247 4.8.1.6 Remote User ............................248 4.8.1.7 Trap ................................. 248 4.8.1.8 Statistics ..............................250 4.8.2 RMON ................................251 4.8.2.1 Alarm Group ............................251 4.8.2.2 Event Group ............................252 4.8.2.3 History Group ............................
Page 10 User’s Manual of SGS-5240 Series Managed Switch 4.8.7.15 Show Remote MEP ..........................274 4.8.7.16 Show Remote MEP Details ........................275 4.8.7.17 Show Link Trace Cache ......................... 276 4.8.7.18 Show Fault Notification Generator ......................276 4.8.7.19 Show Continuity Check Error ........................ 277 4.8.8 Time Setting ..............................
Page 11: Introduction
User’s Manual of SGS-5240 Series Managed Switch 1. INTRODUCTION 1.1 Packet Contents Thank you for purchasing PLANET SGS-5240 L2+ Multi-Port Gigabit Stackable Managed Switch series. The descriptions of these models are as follows: SGS-5240-24T4X Layer 2+ 24-Port 10/100/1000T + 4-Port 10G SFP+ Stackable Managed Switch SGS-5240-24P4X Layer 2+ 24-Port 10/100/1000T 802.3at PoE + 4-Port 10G SFP+ Stackable Managed Switch...
Page 12: Product Description
High Reliability Hardware Stacking Two of the 10G SFP+ ports are used to connect several SGS-5240 series, enabling to build a virtually logical facility. The SGS-5240 series gives the enterprises, service providers and telecoms flexible control over port density, uplinks and switch stack performance.
Page 13 Central IP Stacking Management Positioned as the distribution or aggregation layer switch for large networks, the SGS-5240 series supports IP stacking function that helps network managers to easily configure up to 16 switches in the same series via one single IP address instead of connecting and setting each unit one by one.
Page 14 Powerful Network Security The SGS-5240 series offers comprehensive Layer 2 to Layer 4 Access Control List (ACL) for enforcing security to the edge. It can be used to restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or defined typical network applications.
Page 15 User’s Manual of SGS-5240 Series Managed Switch Moreover, the SGS-5240 series offers secure remote management by supporting SSHv2 and SSLv3 connection which encrypts the packet content at each session. Intelligent SFP Diagnosis Mechanism The SGS-5240 series supports SFP-DDM (Digital Diagnostic Monitor) function that greatly helps network administrator to easily monitor real-time parameters of the SFP and SFP+ transceivers, such as optical output power, optical input power, temperature, laser bias current, and transceiver supply voltage.
Page 16 User’s Manual of SGS-5240 Series Managed Switch...
Page 17: How To Use This Manual
User’s Manual of SGS-5240 Series Managed Switch 1.3 How to Use This Manual This User’s Manual is structured as follows: Section 2, INSTALLATION The section explains the functions of the Managed Switch and how to physically install the Managed Switch.
Page 18: Product Features
User’s Manual of SGS-5240 Series Managed Switch 1.4 Product Features  Physical Ports  24/48 10/100/1000BASE-T RJ45 copper ports  24 100/1000BASE-X SFP slots (SGS-5240-20S4C4XR)  4 10GBASE-SR/LR SFP+ slots, compatible with 1000BASE-SX/LX/BX SFP  RJ45 to DB9 console interface for switch basic management and setup ...
Page 19 User’s Manual of SGS-5240 Series Managed Switch  Quality of Service  Input and output rate limit per port bandwidth control  8 priority queues on all switch ports IEEE 802.1p CoS/DSCP/IP Precedence VLAN ID Policy-based ingress and egress QoS ...
Page 20 User’s Manual of SGS-5240 Series Managed Switch Dual images  DHCP Functions: DHCP Relay DHCP Option 82 DHCP Server  User Privilege levels control  Network Time Protocol (NTP) and SNTP  Network Diagnostic SFP-DDM (Digital Diagnostic Monitor) Cable diagnostic technology provides the mechanism to detect and report potential cabling issues ICMPv6/ICMPv4 remote ping ...
Page 21: Product Specifications
User’s Manual of SGS-5240 Series Managed Switch 1.5 Product Specifications SGS-5240- SGS-5240- SGS-5240- SGS-5240- Product 24T4X 24P4X 20S4C4XR 48T4X Hardware Specifications 10/100/1000BASE-T RJ45 Ports 4 (combo) 1000BASE-X SFP Slots 20+4 4 10GBASE-SR/LR SFP+ interfaces 10GBASE-X SFP+ Slots Compatible with 1000BASE-SX/LX/BX SFP transceiver...
Page 22 User’s Manual of SGS-5240 Series Managed Switch Layer 3 Functions IP Interfaces Max. 32 VLAN interfaces IPv4 256 entries Routing Table IPv6 128 entries IPv4 hardware static routing Routing Protocols IPv6 hardware static routing Layer 2 Functions Port disable/enable Auto-negotiation 10/100/1000Mbps full and half duplex mode selection...
Page 23 User’s Manual of SGS-5240 Series Managed Switch Source IP/destination IP/Source + destination IP Source MAC/destination MAC/Source + destination MAC Broadcast/Multicast/Unicast storm control Storm Control Rate: 64Kbpss-10,000Mbps Input/Output/Both Per port bandwidth control Bandwidth Control Gigabit port: 64Kbpss-1,000Mbps 10Gigabit port: 64Kbpss-10,000Mbps 8 priority queues on all switch ports...
Page 24 User’s Manual of SGS-5240 Series Managed Switch Web authentication Local/RADIUS authentication Management Functions Console and Telnet Web browser System Configuration SNMP v1, v2c IPv4/IPv6 SSHv2, SSLv3, SNMPv3 Secure Management Interfaces Maximum 8 sessions for SSH and telnet connection IPv4 and IPv6 dual stack management...
Page 25 User’s Manual of SGS-5240 Series Managed Switch RFC 2466 ICMP6 MIB RFC 2573 SNMP v3 notify RFC 2574 SNMP v3 vacm RFC 2674 Bridge MIB Extensions (IEEE 802.1Q MIB) RFC 2674 Bridge MIB Extensions (IEEE 802.1P MIB) Standard Conformance Regulatory Compliance FCC Part 15 Class A, CE IEEE 802.3 10BASE-T...
Page 26: Installation
User’s Manual of SGS-5240 Series Managed Switch 2. INSTALLATION This section describes the hardware features and installation of the Managed Switch on the desktop or rack mount. For easier management and control of the Managed Switch, familiarize yourself with its display indicators, and ports. Front panel illustrations in this chapter display the unit LED indicators.
Page 27 Winterm and so on) to enter the startup screen of the device. ■ Reset button The front panel of the SGS-5240 Series comes with a reset button designed for rebooting the Managed Switch without turning off and on the power. The following is the summary table of reset button...
Page 28: Led Indications
User’s Manual of SGS-5240 Series Managed Switch 2.1.2 LED Indications The front panel LEDs indicate instant status of power and system status, port links and data activity; they help monitor and troubleshoot when needed.  LED Definition Color Function Green Lights to indicate that the Switch has power.
Page 29 User’s Manual of SGS-5240 Series Managed Switch ■ AC Power Receptacle For compatibility with electrical voltages in most areas of the world, the Managed Switch’s power supply can automatically adjust line power in the range of 100-240V AC and 50/60 Hz.
Page 30: Installing The Switch
User’s Manual of SGS-5240 Series Managed Switch 2.2 Installing the Switch This section describes how to install your Managed Switch and make connections to the Managed Switch. Please read the following topics and perform the procedures in the order being presented. To install your Managed Switch on a desktop or shelf, simply complete the following steps.
Page 31: Rack Mounting
User’s Manual of SGS-5240 Series Managed Switch 2.2.2 Rack Mounting To install the Managed Switch in a 19-inch standard rack, please follow the instructions described below. Step 1: Place the Managed Switch on a hard flat surface, with the front panel positioned towards the front side.
Page 32: Installing The Sfp/Sfp+ Transceiver
User’s Manual of SGS-5240 Series Managed Switch 2.2.3 Installing the SFP/SFP+ Transceiver The sections describe how to insert an SFP/SFP+ transceiver into an SFP/SFP+ slot. The SFP/SFP+ transceivers are hot-pluggable and hot-swappable. You can plug in and out the transceiver to/from any SFP/SFP+ port without having to power...
Page 33 User’s Manual of SGS-5240 Series Managed Switch Gigabit Ethernet Transceiver (1000BASE-BX, Single Fiber Bi-directional SFP) Speed Connector Wavelength Wavelength Operating Model Fiber Mode Distance (Mbps) Interface (TX) (RX) Temp. 0 ~ 60 ℃ MGB-LA10(V2) 1000 WDM(LC) Single Mode 10km 1310nm...
Page 34 User’s Manual of SGS-5240 Series Managed Switch Before we connect the PLANET SGS-5240 series to the other network device, we have to make sure both sides of the SFP transceivers are with the same media type, for example: 1000BASE-SX to 1000BASE-SX, 1000BASE-LX to 1000BASE-LX.
Page 35: Switch Management
User’s Manual of SGS-5240 Series Managed Switch 3. SWITCH MANAGEMENT This chapter explains the methods that you can use to configure management access to the Managed Switch. It describes the types of management applications and the communication and management protocols that deliver data between your management device (workstation or personal computer) and the system.
Page 36: Management Access Overview
User’s Manual of SGS-5240 Series Managed Switch 3.2 Management Access Overview The Managed Switch gives you the flexibility to access and manage it using any or all of the following methods:  An administration console  Web browser interface ...
Page 37: Administration Console
User’s Manual of SGS-5240 Series Managed Switch 3.3 Administration Console The administration console is an internal, character-oriented, and command line user interface for performing system administration such as displaying statistics or changing option settings. Using this method, you can view the administration console from a terminal, personal computer, Apple Macintosh, or workstation connected to the Managed Switch's console (serial) port.
Page 38: Web Management
User’s Manual of SGS-5240 Series Managed Switch 3.4 Web Management The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer. After you set up your IP address for the switch, you can access the Managed Switch's Web interface applications directly in your Web browser by entering the IP address of the Managed Switch.
Page 39: Snmp-Based Network Management
User’s Manual of SGS-5240 Series Managed Switch 3.5 SNMP-based Network Management You can use an external SNMP-based application to configure and manage the Managed Switch, such as SNMP Network Manager, HP Openview Network Node Management (NNM) or What’s Up Gold. This management method requires the SNMP agent on the switch and the SNMP Network Management Station to use the same community string.
Page 40 User’s Manual of SGS-5240 Series Managed Switch Press the “Refresh” button for the currently connected devices in the discovery list as the screen shows below: Figure 3-1-7: Planet Smart Discovery Utility Screen This utility shows all necessary information from the devices, such as MAC address, device name, firmware version, and device IP subnet address.
Page 41: Web Configuration
User’s Manual of SGS-5240 Series Managed Switch 4. WEB CONFIGURATION This section introduces the configuration and functions of the Web-based management from Managed Switch. About Web-based Management The Managed Switch provides a built-in browser interface. You can manage it remotely by having a remote host with Web browser, such as Microsoft Internet Explorer, Mozilla Firefox, Google Chrome or Apple Safari.
Page 42 User’s Manual of SGS-5240 Series Managed Switch  Logging in to the Managed Switch from Management Port Use Internet Explorer 8.0 or above Web browser and enter IP address http://192.168.1.1 to access the Web interface. When the following login screen appears, please enter the default username "admin" with password “admin” (or the username/password you have changed via console) to log in the main screen of Managed Switch.
Page 43: System Information
User’s Manual of SGS-5240 Series Managed Switch It is recommended to use Google Chrome to access Managed Switch. The changed IP address takes effect immediately after clicking on the Save button. You need to use the new IP address to access the Web interface.
Page 44: User Accounts
User’s Manual of SGS-5240 Series Managed Switch 4.1.3 User Accounts System Information> User Accounts page to control management access to the switch based on manually configured user names and passwords.  User Name – The name of the user. (Maximum length: 32 characters; maximum number of users: 16) ...
Page 45: Switch Management
User’s Manual of SGS-5240 Series Managed Switch 4.2 Switch Management 4.2.1 Jumbo Frame Use the Switch Management > Jumbo Frame page to configure support for layer 2 jumbo frames. The switch provides more efficient throughput for large sequential data transfers by supporting jumbo frames up to 10240 bytes for Gigabit Ethernet.
Page 46: Sflow
User’s Manual of SGS-5240 Series Managed Switch  Configure Switch Management >Interface > Port > Configure page is used to enable/disable an interface, set auto-negotiation and the interface capabilities to advertise, or manually fix the speed, duplex mode, and flow control.
Page 47 User’s Manual of SGS-5240 Series Managed Switch Press ‘New’ button to set the parameters:  Receiver Owner Name – The name of the receiver. (Range: 1-256 characters; Default: None)  Type – Specifies the polling type as an sFlow polling data source for a specified interface that polls periodically based on a specified time interval, or an sFlow data source instance for a specific interface that takes samples periodically based on the number of packets processed.
Page 48: Transceiver
User’s Manual of SGS-5240 Series Managed Switch 4.2.2.3 Transceiver Switch Management>Interface>Transceiver page is used to configure thresholds for alarm and warning messages for optical transceivers which support Digital Diagnostic Monitoring (DDM). This page also displays identifying information for supported transceiver types, and operational parameters for transceivers which support DDM.
Page 49: Cable Test
User’s Manual of SGS-5240 Series Managed Switch  A high-threshold alarm or warning message is sent if the current value is greater than or equal to the threshold, and the last sample value was less than the threshold. After a rising event has been generated, another such event will not be generated until the sampled value has fallen below the high threshold and reaches the low threshold.
Page 50: Green Ethernet
User’s Manual of SGS-5240 Series Managed Switch 4.2.2.5 Green Ethernet Switch Management>Interface>Green Ethernet page is used to enable power savings mode on the selected port. These parameters are displayed:  Port – Power saving mode only applies to the Gigabit Ethernet ports using copper media.
Page 51: Statistics
User’s Manual of SGS-5240 Series Managed Switch 4.2.3 Statistics 4.2.3.1 Current Statistics Switch management >Statistics> Current Statistic page is used to display standard statistics on network traffic from the Interfaces Group and Ethernet-like MIBs, as well as a detailed breakdown of traffic based on thermion MIB. Interfaces and Ethernet-like statistics display errors on the traffic passing through each port.
Page 52: History Info
User’s Manual of SGS-5240 Series Managed Switch 4.2.3.3 History Info 4.2.4 VLAN 4.2.4.1 VLAN Overview A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. VLAN can be used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN.
Page 53 User’s Manual of SGS-5240 Series Managed Switch ■ IEEE 802.1Q VLAN In large networks, routers are used to isolate broadcast traffic for each subnet into separate domains. This Managed Switch provides a similar service at Layer 2 by using VLANs to organize any group of network nodes into separate broadcast domains.
Page 54 User’s Manual of SGS-5240 Series Managed Switch 802.1Q Tag User Priority VLAN ID (VID) 3 bits 1 bit 12 bits TPID (Tag Protocol Identifier) TCI (Tag Control Information) 2 bytes 2 bytes Preamble Destination Source VLAN TAG Ethernet Data Address...
Page 55 User’s Manual of SGS-5240 Series Managed Switch ■ Assigning Ports to VLANs Before enabling VLANs for the switch, you must first assign each port to the VLAN group(s) in which it will participate. By default all ports are assigned to VLAN 1 as untagged ports. Add a port as a tagged port if you want it to carry traffic for one or more VLANs, and any intermediate network devices or the host at the other end of the connection supports VLANs.
Page 56 User’s Manual of SGS-5240 Series Managed Switch Frame Income Income Frame is tagged Income Frame is untagged Frame Leave Leave port is tagged Frame remains tagged Tag is inserted Leave port is untagged Tag is removed Frame remains untagged Table 4-3-3-1: Ingress / Egress Port with VLAN VID Tag / Untag Table ■...
Page 57: Static Vlan
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.2 Static VLAN  VLAN Management Switch Management >VLAN > Static Vlan > Vlan Management page is used to add, modify or delete static VLAN groups, set administrative status, or specify Remote VLAN type.
Page 58 User’s Manual of SGS-5240 Series Managed Switch  Member List Switch Management >VLAN > Static Vlan > Member List by vlan page is used to add/delete multiple port members to/from a special vlan.  Member Setting Switch Management >VLAN > Static Vlan > Member Setting by interface page is used to add/delete an interface member...
Page 59: Gvrp
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.3 GVRP Switch Management > VLAN > GVRP page is used to enable GVRP globally on the switch, or to enable GVRP and adjust the protocol timers per interface. ◆GVRP Status – GVRP defines a way for switches to exchange VLAN information in order to register VLAN members on ports across the network.
Page 60 User’s Manual of SGS-5240 Series Managed Switch  Protocol Mapping Table Switch Management > VLAN > Protocol Vlan page is used to create and delete a protocol vlan entry. Press New button to create a protocol vlan entry:  Group ID – Protocol Group ID assigned to the Protocol VLAN Group. (Range: 1-2147483647) ...
Page 61: Ip Subnet Vlan
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.5 IP Subnet VLAN Switch Management > VLAN >IP Subnet Vlan page is used to configure IP subnet-based VLANs. Press New button to create a IP subnet vlan entry. ◆IP Address – The IP address for a subnet. Valid IP addresses consist of four decimal numbers, 0 to 255, separated by ◆Subnet Mask –...
Page 62: Mac-Based Vlan
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.6 MAC-Based VLAN Switch Management > VLAN > Mac-Based Vlan page is used to configure VLAN based on MAC addresses. To create a Mac based vlan, press New button:  MAC Address – A source MAC address which is to be mapped to a specific VLAN. The MAC address must be specified in the format xx-xxxx-xx-xx-xx.
Page 63: Vlan Translation
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.7 VLAN Translation Switch Management > VLAN > Vlan Translation page is used to map VLAN IDs between the customer and service provider for networks that do not support IEEE802.1Q tunneling. Press New button to create a vlan translation.
Page 64: Qinq
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.8 QinQ Switch Management > VLAN > QinQ > QinQ Global Setting page is used to configure the switch to operate in IEEE 802.1Q (QinQ) tunneling mode, which is used for passing Layer 2 traffic across a service provider’s metropolitan area network. You can also globally set the Tag Protocol Identifier (TPID) value of the tunnel port if the attached client is using a nonstandard 2-byte ether type to identify 802.1Q tagged frames.
Page 65 User’s Manual of SGS-5240 Series Managed Switch Press New button to create new QinQ entry. To delete an entry, select the entry and press delete button.  QinQ Interface Switch Management > VLAN > QinQ >QinQ Interface page is used to set the tunnel mode for any participating interface.
Page 66: Voice Vlan
◆Interface – Displays a list of ports or groups. User’s Manual of SGS-5240 Series Managed Switch ◆Port – Port Identifier. (Range: 1-28) ◆Group – Group Identifier. (Range: 1-12) ◆Mode – Sets the VLAN membership mode of the port.  None – The port operates in its normal VLAN mode. (This is the default.) ...
Page 67 User’s Manual of SGS-5240 Series Managed Switch To create a OUI, press New button.  Telephony OUI – Specifies a MAC address range to add to the list. Enter the MAC address in format 01-23-45-67-89-AB.  Mask – Identifies a range of MAC addresses. Setting a mask of FF-FF-FF-00-00-00 identifies all devices with the same OUI (the first three octets).
Page 68 User’s Manual of SGS-5240 Series Managed Switch All ports are set to VLAN hybrid mode by default. Prior to enabling VoIP for a port (by setting the VoIP mode to Auto or Manual ◆Mode – Specifies if the port will be added to the Voice VLAN when VoIP traffic is detected. (Default: None) as described below), first ensure that VLAN membership is not set to access mode.
Page 69: L2Pt
User’s Manual of SGS-5240 Series Managed Switch The Remaining Age starts to count down when the OUI’s MAC address expires from the MAC address table. Therefore, the MAC address aging time should be added to the overall aging time. For example, if you configure the MAC address table aging time to 30 seconds, and the voice VLAN aging time to 5 minutes, then after 5.5 minutes, a port will be removed from voice VLAN when voice vlan traffic is no longer received on the port.
Page 70: Mac Address
User’s Manual of SGS-5240 Series Managed Switch 4.2.5 MAC Address 4.2.5.1 Dynamic MAC Learning  Dynamic MAC Switch Management >MAC Address > Dynamic MAC Learning> Dynamic Mac page is used to display the MAC addresses learned by monitoring the source address for traffic entering the switch. When the destination address for inbound traffic is found in the database, the packets intended for that address are forwarded directly to the associated port.
Page 71 User’s Manual of SGS-5240 Series Managed Switch  Learning Status Switch Management >MAC Address > Dynamic MAC Learning> Learning status page is used to set learning status on port.
Page 72: Static Mac Setting
User’s Manual of SGS-5240 Series Managed Switch 4.2.5.2 Static Mac Setting Switch Management > MAC Address > Static Mac Setting page is used to configure static MAC addresses. Astatic address can be assigned to a specific interface on this switch. Static addresses are bound to the assigned interface and will not be moved.
Page 73: Mac Notification
User’s Manual of SGS-5240 Series Managed Switch 4.2.5.3 MAC Notification Switch Management > MAC Address > MAC Notification page is used to send SNMP traps (i.e., SNMP notifications) when a dynamic MAC address is added or removed. ■ Configure Global ◆...
Page 74: Port Mirror
User’s Manual of SGS-5240 Series Managed Switch 4.2.6 Port Mirror 4.2.6.1 Local Port Mirror Switch Management > Port Mirror > Local Port Mirror page is used to mirror traffic from any source port to a target port for real-time analysis. You can then attach a logic analyzer or RMON probe to the target port and study the traffic crossing the source port in a completely unobtrusive manner.
Page 75 ◆RSPAN Limitations User’s Manual of SGS-5240 Series Managed Switch The following limitations apply to the use of RSPAN on this switch:  RSPAN Ports – Only ports can be configured as an RSPAN source, destination, or uplink; static and dynamic trunks are not allowed.
Page 76: Static Link Aggregation
User’s Manual of SGS-5240 Series Managed Switch 4.2.7 Static Link Aggregation 4.2.7.1 Static Group Switch Management >Static Link Aggregation > Static Group page is used to create and delete static trunk group. To create a static trunk group, press New button. You can create a new group.
Page 77: Static Trunk Management
User’s Manual of SGS-5240 Series Managed Switch 4.2.7.3 Static Trunk Management Switch Management >Static Link Aggregation > Static Group Parameters page is used to configure the parameters of trunk group. To configure the parameters, button configure button.
Page 78: Lacp
User’s Manual of SGS-5240 Series Managed Switch 4.2.8 LACP 4.2.8.1 Group Member Switch Management > LACP > Group Member page is used to configure parameters of Group.
Page 79: Group Link Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.2.8.2 Group Link Configuration Switch Management > LACP > Group Link Configuration page is used to display and configure parameters of LCAP trunk group. 4.2.8.3 Group LACP Configuration Switch Management > LACP > Group LACP Configuration page is used to display and configure System Priority and Timeout...
Page 80: Counter
User’s Manual of SGS-5240 Series Managed Switch 4.2.8.4 Counter Switch Management > LACP > Counter page is used to display counters, information of local and remote port in LCAP group.  Counters: 4.2.8.5 Show Dynamic Group Member Switch Management > LACP > Show Dynamic Group Member page is used to display the current members of a LACP group.
Page 81: Trunk Group Load Balance
User’s Manual of SGS-5240 Series Managed Switch 4.2.9 Trunk Group Load Balance Switch Management >Trunk Group Load Balance page is used to configure the load balance mode of trunk group. This page applies to all static and dynamic trunks on the switch.
Page 82: Spanning Tree Protocol
User’s Manual of SGS-5240 Series Managed Switch 4.2.10 Spanning Tree Protocol 4.3.10.1 Theory The Spanning Tree protocol can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices in your network to ensure that only one route exists between any two stations on the network, and provide backup links which automatically take over when a primary link goes down.
Page 83 User’s Manual of SGS-5240 Series Managed Switch  One switch is elected as the root switch  The shortest distance to the root switch is calculated for each switch  A designated switch is selected. This is the switch closest to the root switch through which packets will be forwarded to the root.
Page 84 User’s Manual of SGS-5240 Series Managed Switch Figure 4-2-10-1: STP Port State Transitions You can modify each port state by using management software. When you enable STP, every port on every switch in the network goes through the blocking state and then transitions through the states of listening and learning at power up. If properly configured, each port stabilizes to the forwarding or blocking state.
Page 85 User’s Manual of SGS-5240 Series Managed Switch The following are the user-configurable STP parameters for the switch level: Parameter Description Default Value Bridge Identifier(Not user A combination of the User-set priority and 32768 + MAC configurable the switch’s MAC address.
Page 86 User’s Manual of SGS-5240 Series Managed Switch the Root Bridge, the set Hello Time will be used if and when your Switch becomes the Root Bridge. The Hello Time cannot be longer than the Max. Age; otherwise, a configuration error will occur.
Page 87 User’s Manual of SGS-5240 Series Managed Switch Figure 4-2-10-2: Before Applying the STA Rules In this example, only the default STP values are used. Figure 4-2-10-3: After Applying the STA Rules...
Page 88: Stp Global Setting
User’s Manual of SGS-5240 Series Managed Switch The switch with the lowest Bridge ID (switch C) was elected the root bridge, and the ports were selected to give a high port cost between switches B and C. The two (optional) Gigabit ports (default port cost = 20,000) on switch A are connected to one (optional) Gigabit port on both switch B and C.
Page 89: Stp-Rstp
User’s Manual of SGS-5240 Series Managed Switch 4.2.10.3 STP-RSTP Switch Management > STP > STP-RSTP > Global Management page is used to configure global settings for the spanning tree that apply to the entire switch.  Global Management ◆Priority – Bridge priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device.
Page 90 User’s Manual of SGS-5240 Series Managed Switch ◆BPDU Flooding – Configures the system to flood BPDUs to all other ports on the switch or just to all other ports in the same VLAN when spanning tree is disabled globally on the switch or disabled on a specific port.
Page 91 User’s Manual of SGS-5240 Series Managed Switch Configuration Settings for MSTP  Max Instance Numbers – The maximum number of MSTP instances to which this switch can be assigned.  Configuration Digest – An MD5 signature key that contains the VLAN ID to MST ID mapping table. In other words, this key is a mapping of all VLANs to the CIST.
Page 92 User’s Manual of SGS-5240 Series Managed Switch  Interface – Displays a list of ports or groups.  Spanning Tree – Enables/disables STA on this interface. (Default: Enabled)  BPDU Flooding - Enables/disables the flooding of BPDUs to other ports when global spanning tree is disabled or when spanning tree is disabled on a specific port.
Page 93 User’s Manual of SGS-5240 Series Managed Switch Table 12: Recommended STA Path Cost Range Table 13: Default STA Path Costs ◆Admin Link Type – The link type attached to this interface.  Point-to-Point – A connection to exactly one other bridge.
Page 94 User’s Manual of SGS-5240 Series Managed Switch An interface cannot function as an edge port under the following conditions:  If spanning tree mode is set to STP , edge-port mode cannot automatically transition to operational edge-port state using the automatic setting.
Page 95: Mstp
User’s Manual of SGS-5240 Series Managed Switch  Designated Port – The port priority and number of the port on the designated bridging device through which this switch must communicate with the root of the Spanning Tree.  Oper Path Cost – The contribution of this port to the path cost of paths towards the spanning tree root which include this port.
Page 96 User’s Manual of SGS-5240 Series Managed Switch  Global Management...
Page 97 User’s Manual of SGS-5240 Series Managed Switch...
Page 98 User’s Manual of SGS-5240 Series Managed Switch  MST Interface Switch Management > STP > MSTP> MST Interface page is used to configure the STA interface settings for an MST instance. ◆MST ID – Instance identifier to configure. (Default: 0) ◆Interface –...
Page 99 User’s Manual of SGS-5240 Series Managed Switch  Forwarding – Port forwards packets, and continues learning addresses.  Priority – Defines the priority used for this port in the Spanning Tree Protocol. If the path cost for all ports on a switch are the same, the port with the highest priority (i.e., lowest value) will be configured as an active link in the Spanning Tree.
Page 100: Loopback Detection
User’s Manual of SGS-5240 Series Managed Switch 4.2.10.5 Loopback Detection Switch Management > STP > Loopback Detection page is used to configure loopback detection on an interface. When loopback detection is enabled and a port or group receives its own BPDU, the detection agent drops the loopback BPDU, sends an SNMP trap, and places the interface in discarding mode.
Page 101: Igmp Snooping
◆Release Mode – Configures the interface for automatic or manual loopback release. (Default: Auto) User’s Manual of SGS-5240 Series Managed Switch ◆Release – Allows an interface to be manually released from discard mode. This is only available if the interface is configured ◆Action –...
Page 102 User’s Manual of SGS-5240 Series Managed Switch Figure 4-3-5-2: Multicast Flooding Figure 4-3-5-3: IGMP Snooping Multicast Stream Control...
Page 103 User’s Manual of SGS-5240 Series Managed Switch IGMP Versions 1 and 2 Multicast groups allow members to join or leave at any time. IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group. IGMP version 1 is defined in RFC 1112. It has a fixed packet size and no optional data.
Page 104 User’s Manual of SGS-5240 Series Managed Switch Figure 4-3-5-4: IGMP State Transitions  IGMP Querier – A router, or multicast-enabled switch, can periodically ask their hosts if they want to receive multicast traffic. If there is more than one router/switch on the LAN performing IP multicasting, one of these devices is elected “queried” and assumes the role of querying the LAN for group members.
Page 105: Global Setting
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.1 Global Setting Switch Management> IGMP Snooping>Global Setting page is used to configure the switch to forward multicast traffic.  IGMP Snooping Status – When enabled, the switch will monitor network traffic to determine which hosts want to receive multicast traffic.
Page 106: Current Multicast Router
User’s Manual of SGS-5240 Series Managed Switch  Forwarding Priority – Assigns a CoS priority to all multicast traffic. (Range: 0-6, where 6 is the highest priority)  Version Exclusive – Discards any received IGMP messages which use a version different to that currently configured by the IGMP Version attribute.
Page 107: Static Multicast Router
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.3 Static Multicast Router Switch Management> IGMP Snooping> Static Multicast Router page is used to statically attach an interface to a multicast router/switch. To show the static interfaces attached to a multicast router: ◆VLAN –...
Page 108: Static Member
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.4 Static Member Switch Management > IGMP Snooping>Static Member page is used to statically assign a multicast service to an interface. Multicast filtering can be dynamically configured using IGMP Snooping and IGMP Query messages.
Page 109: Vlan Information
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.5 VLAN Information Switch Management > IGMP Snooping>VLAN Information page is used to configure IGMP snooping attributes for a VLAN. ◆VLAN – ID of configured VLANs. ◆IGMP Snooping Status – When enabled, the switch will monitor network traffic on the indicated VLAN interface to determine (Range: 1-4093) which hosts want to receive multicast traffic.
Page 110 ◆Version Exclusive – Discards any received IGMP messages (except for multicast protocol packets) which use a version User’s Manual of SGS-5240 Series Managed Switch different to that currently configured by the IGMP Version attribute. (Default: Disabled) If version exclusive is disabled on a VLAN, then this setting is based on the global setting configured on the Multicast > IGMP ◆Immediate Leave Status –...
Page 111 User’s Manual of SGS-5240 Series Managed Switch is sent to the upstream multicast router. A reduced value will result in reduced time to detect the loss of the last member of a group or source, but may generate more burst traffic. This attribute will take effect only if IGMP snooping proxy reporting is enabled or IGMP querier is enabled .
Page 112: Configure Interface
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.6 Configure Interface Switch Management > IGMP Snooping>Configure Interface page is used to configure an interface to drop IGMP query packets. ◆IGMP Query Drop – Configures an interface to drop any IGMP query packets received on the specified interface. If this switch...
Page 113: Forwarding Entry
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.7 Forwarding Entry Switch Management > IGMP Snooping>Forwarding Entry page is used to display the forwarding entries learned through IGMP Snooping. COMMAND USAGE To display information about multicast groups, IGMP Snooping must first be enabled on the switch .
Page 114: Query Statistics
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.8 Query Statistics Switch Management > IGMP Snooping> Query Statistics page is used to display IGMP snooping protocol-related statistics for the specified interface. ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Port – Port identifier. (Range: 1-28) ◆Group –...
Page 115: Vlan Statistics
User’s Manual of SGS-5240 Series Managed Switch ◆G(-S)-S Query – The number of group specific or group-and-source specific query messages sent from this interface. 4.2.11.9 VLAN Statistics Switch Management > IGMP Snooping>Vlan Statistics page is used to display IGMP snooping protocol-related statistics for the specified interface.
Page 116: Port Statistics
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.10 Port Statistics Switch Management > IGMP Snooping> Port Statistics page is used to display IGMP snooping protocol-related statistics for the specified interface. ◆Port – Port identifier. (Range: 1-28) Query Statistics ◆Querier IP Address – The IP address of the querier on this interface.
Page 117: Group Statistics
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.11 Group Statistics Switch Management > IGMP Snooping> Group Statistics page is used to display IGMP snooping protocol-related statistics for the specified interface. ◆Group – Group identifier. (Range: 1-12) Query Statistics ◆Querier IP Address – The IP address of the querier on this interface.
Page 118: Igmp Filtering And Throttling
User’s Manual of SGS-5240 Series Managed Switch 4.2.12 IGMP Filtering and Throttling 4.2.12.1 Global Setting Switch Management > IGMP Filtering and Throttling>Global Setting page is used to enable IGMP filtering and throttling globally on the switch. ◆IGMP Filter Status – Enables IGMP filtering and throttling globally for the switch. (Default: Disabled) 4.2.12.2 Filter Profile...
Page 119: Filter Range
User’s Manual of SGS-5240 Series Managed Switch To show the IGMP filter profiles: Click Switch Management > IGMP Filtering and Throttling>Filter Profile. 4.2.12.3 Filter Range Switch Management > IGMP Filtering and Throttling>Filter Range page is used to create an IGMP range and set its access mode.
Page 120: Configure Filter Interface
User’s Manual of SGS-5240 Series Managed Switch To show the multicast groups configured for an IGMP filter Range: 4.2.11.4 Configure Filter Interface Switch Management > IGMP Filtering and Throttling>Configure Filter Interface page is used to assign and IGMP filter profile to interfaces on the switch, or to throttle multicast traffic by limiting the maximum number of multicast groups an interface can join at the same time.
Page 121: Mld Snooping
User’s Manual of SGS-5240 Series Managed Switch 4.2.13 MLD Snooping 4.2.13.1 Global Setting Switch Management> MLD Snooping > Global Setting page is used to configure the switch to forward multicast traffic intelligently. ◆MLD Snooping Status – When enabled, the switch will monitor network traffic to determine which hosts want to receive multicast traffic.
Page 122: Immediate Leave Status
◆MLD Snooping Version – The protocol version used for compatibility with other devices on the network. This is the MLD User’s Manual of SGS-5240 Series Managed Switch version the switch uses to send snooping reports. ◆Unknown Multicast Mode – The action for dealing with unknown multicast packets. Options include: (Range: 1-2;...
Page 123: Current Multicast Router
User’s Manual of SGS-5240 Series Managed Switch 4.2.13.3 Current Multicast Router Switch Management > MLD Snooping >Current Multicast Router page is used to statically show an interface to an IPv6 multicast router/switch. ◆VLAN – Selects the VLAN which is to propagate all IPv6 multicast traffic coming ◆Interface –...
Page 124: Current Member
User’s Manual of SGS-5240 Series Managed Switch 4.2.13.5 Current Member Switch Management > MLD Snooping > Current Member page is used to statically show an IPv6 multicast service to an interface. ◆VLAN – Specifies the VLAN which is to propagate the multicast service. (Range: 1-4094) ◆Multicast IPv6 Address –...
Page 125: Group Information
User’s Manual of SGS-5240 Series Managed Switch 4.2.13.7 Group Information Switch Management > MLD Snooping > Group Information page is used to display and set known multicast groups, member ports, the means by which each group was learned, and the corresponding source list.
Page 126: Statistics
User’s Manual of SGS-5240 Series Managed Switch 4.2.13.8 Statistics Switch Management> MLD Snooping >Statistics pages is used to display MLD Snooping protocol related statistics for the specified interface. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Port –...
Page 127 User’s Manual of SGS-5240 Series Managed Switch To display statistics for MLD Snooping input: To display statistics for MLD Snooping output:...
Page 128 User’s Manual of SGS-5240 Series Managed Switch To display statistics for MLD Snooping Query:...
Page 129: Mvr For Ipv4
User’s Manual of SGS-5240 Series Managed Switch 4.2.14 MVR For IPv4 The MVR feature enables multicast traffic forwarding on the Multicast VLANs. ■ In a multicast television application, a PC or a network television or a set-top box can receive the multicast stream.
Page 130: Configure Global
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.1 Configure Global ◆Proxy Switching – Configures MVR proxy switching, where the source port acts as a host, and the receiver port acts as an Switch Management > MVR for IPv4 >Configure Global page is used to configure proxy switching and the robustness variable.
Page 131: Configure Domain
User’s Manual of SGS-5240 Series Managed Switch  Dynamic – When dynamic mode is enabled, the switch only forwards multicast streams which the source port has dynamically joined. In other words, both the receiver port and source port must subscribe to a multicast group before a multicast stream is forwarded to any attached client.
Page 132: Show Configure Profile
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.3 Show Configure Profile Switch Management > MVR for IPv4 > Show Configure Profile pages is used to display the multicast group address for required services to one or more MVR domains. ◆Profile Name – The name of a profile containing one or more MVR group addresses. (Range: 1-21 characters) ◆Start IP Address –...
Page 133: Show Associate Profile
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.5 Show Associate Profile Switch Management > MVR for IPv4 >Show Associate Profile pages is used to show the multicast group address for required services to one or more MVR domains. ◆Profile Name – The name of a profile containing one or more MVR group addresses. (Range: 1-21 characters) ◆Start IP Address –...
Page 134: Configure Interface
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.7 Configure Interface Switch Management > MVR for IPv4 >Configure Interface page is used to configure each interface that participates in the MVR protocol as a source port or receiver port. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆Port/Group –...
Page 135: Show Static Group Member
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.8 Show Static Group Member Switch Management > MVR For IPv4 > Show Static Group Member page is used to statically show multicast groups for a port or trunk which will receive long-term multicast streams associated with a stable set of hosts.
Page 136: Show Member
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.10 Show Member Switch Management > MVR For IPv4 >Show Member page is used to show the multicast groups either statically or dynamically assigned to the MVR receiver groups on each interface. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆Group IP Address –...
Page 137 ◆Domain ID – An independent multicast domain. (Range: 1-5) User’s Manual of SGS-5240 Series Managed Switch ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Port – Port identifier. (Range: 1-28) ◆Group – group identifier. (Range: 1-12) Query Statistics ◆Querier IP Address – The IP address of the querier on this interface.
Page 138: Show Vlan Statistics
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.12 Show VLAN Statistics Switch Management > MVR for IPv4 >Show VLAN Statistics page is used to display MVR protocol related statistics for the specified interface. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆VLAN –...
Page 139: Show Port Statistics
User’s Manual of SGS-5240 Series Managed Switch ◆Group – The number of MVR groups active on this interface. Output Statistics ◆Report – The number of IGMP membership reports sent from this interface. ◆Leave – The number of leave messages sent from this interface.
Page 140: Show Group Statistics
User’s Manual of SGS-5240 Series Managed Switch ◆Report – The number of IGMP membership reports sent from this interface. ◆Leave – The number of leave messages sent from this interface. ◆G Query – The number of general query messages sent from this interface.
Page 141: Mvr For Ipv6
User’s Manual of SGS-5240 Series Managed Switch ◆Join Success – The number of times a multicast group was successfully joined. ◆Group – The number of MVR groups active on this interface. Output Statistics ◆Report – The number of IGMP membership reports sent from this interface.
Page 142: Configure Domain
User’s Manual of SGS-5240 Series Managed Switch  This parameter sets the general query interval at which active receiver ports send out general queries.  This interval is only effective when proxy switching is enabled. ◆Source Port Mode – Configures the switch to forward any multicast streams within the parameters set by a profile, or to only forward multicast streams which the source port has dynamically joined.
Page 143: Show Configure Profile
◆Upstream Source IPv6 – The source IPv6 address assigned to all MVR6 control packets sent upstream on the specified User’s Manual of SGS-5240 Series Managed Switch domain. This parameter must be a full IPv6 address including the network prefix and host address bits. By default, all MVR6 reports sent upstream use a null source IP address.
Page 144: Add Configure Profile
User’s Manual of SGS-5240 Series Managed Switch 4.2.15.4 Add Configure Profile Switch Management > MVR for IPv6 > Add Configure Profile page is used to assign the multicast group address for required services to one or more MVR6 domains. ◆Profile Name – The name of a profile containing one or more MVR6 group addresses. (Range: 1-21 characters) ◆Start IPv6 Address –...
Page 145: Add Associate Profile
User’s Manual of SGS-5240 Series Managed Switch 4.2.15.6 Add Associate Profile Switch Management > MVR for IPv6 > Add Associate Profile page is used to assign the multicast group address for required services to one or more MVR6 domains. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆Profile Name –...
Page 146: Show Static Group Member
User’s Manual of SGS-5240 Series Managed Switch 4.2.15.8 Show Static Group Member Switch Management > MVR For IPv6> Show Static Group Member page is used to statically bind multicast groups to a port which will receive long-term multicast streams associated with a stable set of hosts.
Page 147: Show Member
User’s Manual of SGS-5240 Series Managed Switch 4.2.15.10 Show Member Switch Management > MVR For IPv6>Show Member page is used to show the multicast groups either statically or dynamically assigned to the MVR6 receiver groups on each interface. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆Group IPv6 Address –...
Page 148 ◆Domain ID – An independent multicast domain. (Range: 1-5) User’s Manual of SGS-5240 Series Managed Switch ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Port – Port identifier. (Range: 1-12) ◆Group – Group identifier. (Range: 1-12) Query Statistics ◆Querier IPv6 Address – The IP address of the querier on this interface.
Page 149: Show Vlan Statistics
User’s Manual of SGS-5240 Series Managed Switch 4.2.15.12 Show VLAN Statistics Switch Management > MVR for IPv6>Show VLAN Statistics page is used to display MVR6protocol-related statistics for the specified interface. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Port –...
Page 150: Show Port Statistics
User’s Manual of SGS-5240 Series Managed Switch ◆Group – The number of MVR6 groups active on this interface. Output Statistics ◆Report – The number of MLD membership reports sent from this interface. ◆Leave – The number of leave messages sent from this interface.
Page 151: Show Group Statistics
◆Number of Leaves Sent – The number of leaves sent from this interface. User’s Manual of SGS-5240 Series Managed Switch ◆Report – The number of MLD membership reports received on this interface. VLAN, Port, and Group Statistics Input Statistics ◆Leave – The number of leave messages received on this interface.
Page 152 ◆Specific Query Sent – The number of specific queries sent from this interface. User’s Manual of SGS-5240 Series Managed Switch ◆Number of Reports Sent – The number of reports sent from this interface. ◆Number of Leaves Sent – The number of leaves sent from this interface.
Page 153: Lldp
User’s Manual of SGS-5240 Series Managed Switch 4.2.16 LLDP Link Layer Discovery Protocol Link Layer Discovery Protocol (LLDP) is used to discover basic information about neighboring devices on the local broadcast domain. LLDP is a Layer 2 protocol that uses periodic broadcasts to advertise information about the sending device. Advertised information is represented in Type Length Value (TLV) format according to the IEEE 802.1ab standard, and can include details...
Page 154: Interface Configuration
◆Reinitialization Delay – Configures the delay before attempting to reinitialize after LLDP ports are disabled or the link goes User’s Manual of SGS-5240 Series Managed Switch down. (Range: 1-10 seconds; Default: 2 seconds) When LLDP is re-initialized on a port, all information in the remote systems ◆Notification Interval –...
Page 155 User’s Manual of SGS-5240 Series Managed Switch transmission. An SNMP agent should therefore periodically check the value of lldpStatsRemTableLastChangeTime to detect any lldpRemTablesChange notification-events missed due to throttling or transmission loss. ◆MED Notification – Enables the transmission of SNMP trap notifications about LLDP-MED changes. (Default: Disabled) ◆Basic Optional TLVs –...
Page 156: Civil Address Type
User’s Manual of SGS-5240 Series Managed Switch ◆MED-Location Civic Address – Configures information for the location of the attached device included in the MED TLV field of advertised messages, including the country and the device type.  Country – The two-letter ISO 3166 country code in capital ASCII letters. (Example: DK, DE or US) ...
Page 157: Local Information
User’s Manual of SGS-5240 Series Managed Switch 4.2.16.4 Local Information Switch Management > LLDP > Local Information page is used to display information about the switch, such as its MAC address, chassis ID, management IP address, and port information. ◆Chassis Type – Identifies the chassis containing the IEEE 802 LAN entity associated with the transmitting LLDP agent. There are several ways in which a chassis may be identified and a chassis ID subtype is used to indicate the type of component being referenced by the chassis ID field.
Page 158 User’s Manual of SGS-5240 Series Managed Switch ID Basis Reference Other — Repeater IETF RFC 2108 Bridge IETF RFC 2674 WLAN Access Point IEEE 802.11 MIB Router IETF RFC 1812 Telephone IETF RFC 2011 DOCSIS cable device IETF RFC 2669 and IETF RFC 2670...
Page 159: Peer Information
User’s Manual of SGS-5240 Series Managed Switch 4.2.16.5 Peer Information Switch Management > LLDP >Peer Information page is used to display information about devices connected directly to the switch’s ports which are advertising information through LLDP, or to display detailed information about an LLDP-enabled device connected to a specific port on the local switch.
Page 160 User’s Manual of SGS-5240 Series Managed Switch ◆Port – Port identifier on local switch. ◆Remote Index – Index of remote device attached to this port. ◆Local Port – The local port to which a remote LLDP-capable device is attached. ◆Chassis Type – Identifies the chassis containing the IEEE 802 LAN entity associated with the transmitting LLDP agent. There are several ways in which a chassis may be identified and a chassis ID subtype is used to indicate the type of component being referenced by the chassis ID field.
Page 161 User’s Manual of SGS-5240 Series Managed Switch ID Basis Reference Interface alias IfAlias (IETF RFC 2863) Chassis component EntPhysicalAlias when entPhysClass has a value of ‘chassis(3)’ (IETF RFC 2737) Port component EntPhysicalAlias when entPhysicalClass has a value ‘port(10)’ or ‘backplane(4)’ (IETF RFC 2737)
Page 162 User’s Manual of SGS-5240 Series Managed Switch Capability other or unknown 10BASE-T half duplex mode 10BASE-T full duplex mode 100BASE-T4 100BASE-TX half duplex mode 100BASE-TX full duplex mode 100BASE-T2 half duplex mode 100BASE-T2 full duplex mode PAUSE for full-duplex links...
Page 163 ◆Device Class – Any of the following categories of endpoint devices: User’s Manual of SGS-5240 Series Managed Switch  Class 1 – The most basic class of endpoint devices.  Class 2 – Endpoint devices that supports media stream capabilities.
Page 164: Statistics
User’s Manual of SGS-5240 Series Managed Switch ◆Software Revision – The software revision of the end-point device. ◆Manufacture Name – The manufacturer of the end-point device ◆Asset ID – The asset identifier of the end-point device. End-point devices are typically assigned asset identifiers to facilitate inventory management and assets tracking.
Page 165: Erps
User’s Manual of SGS-5240 Series Managed Switch 4.2.17 ERPS ITU-T G.8032 Ethernet Ring protection switching (ERPS) is a link layer protocol applied on Ethernet loop protection to provide sub-50ms protection and recovery switching for Ethernet traffic in a ring topology.
Page 166: Global Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.2.17.1 Global Configuration Switch Management > ERPS > Global Configuration page is used to globally enable or disable ERPS on the switch. ◆ERPS Status – Enables ERPS on the switch. (Default: Disabled) ERPS must be enabled globally on the switch before it can enabled on an ERPS ring.
Page 167 User’s Manual of SGS-5240 Series Managed Switch ◆Domain Name – Name of a configured ERPS ring. ◆Node State – Shows the following ERPS states:  Init – The ERPS ring has started but has not yet determined the status of the ring.
Page 168 User’s Manual of SGS-5240 Series Managed Switch ◆MEG Level – The maintenance entity group (MEG) level which provides a communication channel for ring automatic protection switching (R-APS) information. (Range: 0-7) This parameter is used to ensure that received R-APS PDUs are directed for this ring.
Page 169 User’s Manual of SGS-5240 Series Managed Switch  Also, the ring ports of the Control VLAN must be tagged. Once the ring has been activated, the configuration of the control VLAN cannot be modified. Use the Admin Status parameter to stop the ERPS ring before making any configuration changes to the control VLAN.
Page 170: Statistics
User’s Manual of SGS-5240 Series Managed Switch 4.2.17.3 Statistics Switch Management > ERPS > Statistics pages is used to display or clear statistics information on ring ports.
Page 171: Loopback Detection
User’s Manual of SGS-5240 Series Managed Switch 4.2.18 Loopback Detection Switch Management >Loopback Detection page is used to configure loopback detection on an interface. When loopback detection is enabled and a port or group receives its own BPDU, the detection agent drops the loopback BPDU, sends an SNMP trap, and places the interface in discarding mode.
Page 172: Interface Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.2.18.2 Interface Configuration Enable/disable port loopback detection...
Page 173: Udld
User’s Manual of SGS-5240 Series Managed Switch 4.2.19 UDLD The switch can be configured to detect general loopback conditions caused by hardware problems or faulty protocol settings. When enabled, a control frame is transmitted on the participating ports, and the switch monitors inbound traffic to see if the frame is looped back.
Page 174: Interface Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.2.19.2 Interface Configuration Switch Management > UDLD > Interface Configuration page is used to enable UDLD and aggressive mode which reduces the shut-down delay after loss of bidirectional connectivity is detected. ◆ Port – Port identifier. (Range: 1-28/52) ◆...
Page 175: Neighbor Info
◆ Operation State – Shows the UDLD operational state (Disabled, Link down, Link up, Advertisement, Detection, Disabled port, User’s Manual of SGS-5240 Series Managed Switch ◆ Port State – Shows the UDLD port state (Unknown, Bidirectional, Unidirectional, Transmit-to-receive loop, Mismatch with...
Page 176: Rate Limit
User’s Manual of SGS-5240 Series Managed Switch 4.2.20 Rate Limit Interface>Congestion Control >Rate Limit page is used to apply rate limiting to ingress or egress ports. This function allows the network manager to control the maximum rate for traffic received or transmitted on an interface. Rate limiting is configured on interfaces at the edge of a network to limit traffic into or out of the network.
Page 177: Storm Control
User’s Manual of SGS-5240 Series Managed Switch 4.2.21 Storm Control Interface>Congestion Control >Storm Control page is used to configure broadcast, multicast, and unknown unicast storm control thresholds. ◆Interface – Displays a list of ports or groups. ◆Type – Indicates interface type. (1000BASE-T or 10GBASE SFP) ◆Unknown Unicast –...
Page 178: Stacking
User’s Manual of SGS-5240 Series Managed Switch 4.2.22 Stacking 4.2.22.1 Global Configuration Switch Management > Stacking > Global Configuration page is used to convert switch mode between stacking and non-stacking and reset unit numbers. Press Change Status button: 4.2.22.2 Master Configuration...
Page 179: Pepo
User’s Manual of SGS-5240 Series Managed Switch 4.2.23 Pepo 4.2.23.1 Global Configuration Switch Management > Pepo > Global Configuration page is used to set the global configuration of Pepo. 4.2.23.2 Interface Configuration Switch Management > Pepo > Interface Configuration page is used to set the parameters of interface for Pepo.
Page 180: Route Management
User’s Manual of SGS-5240 Series Managed Switch 4.3 Route Management 4.3.1 IPv4 Interface Configuration This section describes how to configure an IPv4 interface for management access over the network. Route Management > IPv4 Interface Configuration page is used to configure an IPv4 address for the switch.
Page 181: Ipv6 Interface Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.3.2 IPv6 Interface Configuration This section describes how to configure an IPv6 interface for management access over the network. 4.3.2.1 Global Configuration Route Management > IPv6 Interface Configuration > Global Configuration page is used to configure anIPv6 default gateway for the switch.
Page 182 User’s Manual of SGS-5240 Series Managed Switch ◆Enable IPv6 Explicitly – Enables IPv6 on an interface. Note that when an explicit address is assigned to an interface, IPv6 is automatically enabled, and cannot be disabled until all assigned addresses have been removed. (Default: Disabled) Disabling this parameter does not disable IPv6 for an interface that has been explicitly configured with an IPv6 address.
Page 183: Ra-Guard
User’s Manual of SGS-5240 Series Managed Switch 4.3.2.3 RA-Guard Route Management > IPv6 Interface Configuration > RA-Guard page is used to configure RA guard status on a port or group. ◆Interface – Shows port or trunk configuration page. ◆RA Guard – Blocks incoming Router Advertisement and Router Redirect packets. (Default: Disabled) IPv6 Router Advertisements (RA) convey information that enables nodes to auto-configure on the network.
Page 184: Address Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.3.2.4 Address Configuration Route Management > IPv6 Interface Configuration > Address Configuration page is used to configure anIPv6 interface for management access over the network. ◆VLAN – ID of a configured VLAN which is to be used for management access. By default, all ports on the switch are members of VLAN 1.
Page 185: Neighbor List
User’s Manual of SGS-5240 Series Managed Switch 4.3.2.5 Neighbor List Route Management > IPv6 Interface Configuration > Neighbor List page is used to display the IPv6 addresses detected for neighbor devices. 4.3.2.6 Statistics Route Management > IPv6 Interface Configuration > Statistics page is used to display statistics about IPv6 traffic passing...
Page 186: Mtu
User’s Manual of SGS-5240 Series Managed Switch 4.3.2.7 MTU Route Management > IPv6 Interface Configuration > MTU page is used to display the maximum transmission unit (MTU) cache for destinations that have returned an ICMP packet-too-big message along with an acceptable MTU to this switch.
Page 187: Static Arp
User’s Manual of SGS-5240 Series Managed Switch 4.3.3.3 Static Arp Route Management > ARP > Static Arp page is used to manually map an IP address to the corresponding physical address in the ARP cache. ◆ IP Address – IP address statically mapped to a physical MAC address. (Valid IP addresses consist of four numbers, 0 to 255, separated by periods.)
Page 188: Routing Table
User’s Manual of SGS-5240 Series Managed Switch 4.3.4 Routing Table Route Management > Routing Table > Routing Table page is used to display all routes that can be accessed via local network interfaces, through static routes, or through a dynamically learned route. If route information is available through more than one of these methods, the priority for route selection is local, static, and then dynamic (except when the distance parameter of a dynamic route is set to a value that makes its priority exceed that of a static route).
Page 189: Acl
User’s Manual of SGS-5240 Series Managed Switch by the dynamic unicast routing protocols is 110 for OSPF, 120 for RIP, 20 for eBGP, and 200 for iBGP. (Range: 1-255, Default: 1) 4.4 ACL ACL is an acronym for Access Control List. It is the list table of ACEs, containing access control entries that specify individual users or groups permitted or denied to specific traffic objects, such as a process or a program.
Page 190: Rule Configuration
User’s Manual of SGS-5240 Series Managed Switch  IPv6 Standard: IPv6 ACL mode filters packets based on the source IPv6 address.  IPv6 Extended: IPv6 ACL mode filters packets based on the source or destination IP address, as well as DSCP, and the next header type.
Page 191: Extended Ipv4 Acl
User’s Manual of SGS-5240 Series Managed Switch Extended Ipv4 Acl ACL > Rule Configuration > Ip Extended page is used to configure an Extended IPv4 ACL. ◆ACL Name – Shows the names of ACLs matching the selected type. ◆Action – An ACL can contain any combination of permit or deny rules.
Page 192: Standard Ipv6 Cal
User’s Manual of SGS-5240 Series Managed Switch ◆Time Range – Name of a time range.  SYN valid and ACK invalid, use control-code 2, control bit mask 18 Standard Ipv6 Cal ACL > Rule Configuration > IPv6 Standard page is used to configure a Standard IPv6ACL.
Page 193: Extended Ipv6 Acl
User’s Manual of SGS-5240 Series Managed Switch Extended Ipv6 Acl ACL > Rule Configuration > IPv6 Extended page is used to configure an Extended IPv6 ACL. ◆ACL Name – Shows the names of ACLs matching the selected type. ◆Action – An ACL can contain any combination of permit or deny rules.
Page 194: Mac Acl
User’s Manual of SGS-5240 Series Managed Switch Mac Acl ACL > Rule Configuration > MAC page is used to configure a MAC ACL based on hardware addresses, packet format, and Ethernet type. ◆ACL Name – Shows the names of ACLs matching the selected type.
Page 195 User’s Manual of SGS-5240 Series Managed Switch ◆ACL Name – Shows the names of ACLs matching the selected type. ◆Action – An ACL can contain any combination of permit or deny rules. ◆Packet Type – Indicates an ARP request, ARP response, or either type. (Range: IP, Request, Response; Default: IP) ◆Source/Destination IP Address Type –...
Page 196: Bind Interface
User’s Manual of SGS-5240 Series Managed Switch 4.4.3 Bind Interface ACL > Bind Interface page is used to bind the ports that need to filter traffic to the appropriate ACLs. You can assign one IP access list and one MAC access list to any port.
Page 197: Cos
User’s Manual of SGS-5240 Series Managed Switch 4.5 CoS CoS > Cos page is used to specify the default port priority for each interface on the switch. All untagged packets entering the ◆Port – Displays a list of ports or trunks.
Page 198: Qu's
User’s Manual of SGS-5240 Series Managed Switch 4.6 Qu’s 4.6.1 Egress Queue Qu’s > Egress Queue page is used to set the queue mode for the egress queues on any interface. The switch can be set to service the queues based on a strict rule that requires all traffic in a higher priority queue to be processed before the lower priority queues are serviced, or Weighted Round-Robin (WRR) queuing which specifies a scheduling weight for each queue.
Page 199: Trust Mode
User’s Manual of SGS-5240 Series Managed Switch 4.6.2 Trust Mode The switch allows a choice between using DSCP or CoS priority processing methods. Qu’s> Trust Mode page is used to select the required processing method. ◆Port – Port identifier. (Range: 1-28) ◆Trust Mode...
Page 200: Dhcp To Phb/Dp
User’s Manual of SGS-5240 Series Managed Switch ◆Port – Specifies a port. DHCP to PHB/DP ◆DSCP – DSCP value in ingress packets. (Range: 0-63) ◆PHB – Per-hop behavior, or the priority used for this router hop.(Range: 0-7) ◆Drop Precedence – Drop precedence used for controlling traffic congestion. (Range: 0 - Green, 3 - Yellow, 1 - Red) To show the DHCP to PHB/DP precedence map: ◆Port –...
Page 201: Phb/Dp To Cos
User’s Manual of SGS-5240 Series Managed Switch To show the CoS to PHB/DP precedence map: PHB/DP to CoS PHB/DP to CoS page is used to map internal per-hop behavior and drop precedence value pairs to CoS values used in tagged ◆...
Page 202 User’s Manual of SGS-5240 Series Managed Switch To show the PHB/DP to CoS precedence map:...
Page 203: Ip Precedence To Phb/Dp
User’s Manual of SGS-5240 Series Managed Switch IP Precedence to PHB/DP IP Precedence to PHB/DP page is used to map IP precedence values in incoming packets to per-hop behavior and drop ◆ Port – Specifies a port. precedence values for priority processing.
Page 204: Tcp/Udp Port To Dscp
User’s Manual of SGS-5240 Series Managed Switch TCP/UDP Port to DSCP TCP/UDP Port to DSCP page is used to map network applications designated by a TCP/UDP destination port number in the ◆ Port – Specifies a port. frame header to per-hop behavior and drop precedence values for internal priority processing.
Page 205: Class
User’s Manual of SGS-5240 Series Managed Switch To show the TCP/UDP Port to DSCP precedence map: 4.6.4 Class A class map is used for matching packets to a specified class. Qu’s > Class page is used to configure a class map. Add ◆Class Name –...
Page 206: Class Match
User’s Manual of SGS-5240 Series Managed Switch 4.6.5 Class Match To edit the rules for a class map:...
Page 207: Policy
User’s Manual of SGS-5240 Series Managed Switch 4.6.6 Policy Qu’s> Policy page is used to create a policy map that can be attached to multiple interfaces. A policy map is used to group one or more class map statements, modify service tagging, and enforce bandwidth policing.
Page 208: Policy Map
User’s Manual of SGS-5240 Series Managed Switch 4.6.7 Policy Map To edit the rules for a policy map: ◆Policy Name – Name of policy map. ◆Bound Class Name – Name of a class map that defines a traffic classification upon which a policy can act.
Page 209: Bind Interface
User’s Manual of SGS-5240 Series Managed Switch To show the rules for a policy map: 4.6.8 Bind Interface Qu’s > Bind Interface page is used to bind a policy map to a port. First define a class map, define a policy map, and bind the service policy to the required interface.
Page 210: Security
Overview of User Authentication It is allowed to configure the SGS-5240 series to authenticate users logging into the system for management access using local or remote authentication methods, such as telnet and Web browser. This SGS-5240 series provides secure network...
Page 211 RADIUS and TACACS+ are logon authentication protocols that use software running on a central server to control access to RADIUS-aware or TACACS-aware devices on the network. An authentication server contains a database of multiple user name / password pairs with associated privilege levels for each user that requires management access to the SGS-5240 Series PoE Switch.
Page 212 User’s Manual of SGS-5240 Series Managed Switch  Authentication server—performs the actual authentication of the client. The authentication server validates the identity of the client and notifies the switch whether or not the client is authorized to access the LAN and switch services.
Page 213 User’s Manual of SGS-5240 Series Managed Switch Figure 4-5-2-2: EAP Message Exchange  Ports in Authorized and Unauthorized States The switch port state determines whether or not the client is granted access to the network. The port starts in the unauthorized state.
Page 214: Global Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.7.1.1 Global Configuration Security > AAA > page to set global configuration . Global Configuration ◆Authentication Sequence –set the sequence of authentication. There are three methods of authentication. Local – User authentication is performed only locally by the switch.
Page 215: Server Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.7.1.2 Server Configuration Security>AAA>Server configuration page is used to configure the parameters of RADIUS or TACACS+ server for AAA: 4.7.1.3 Server List Security>AAA>Server List page is used to configure the RADIUS or TACACS+ server groups for accounting and authorization.
Page 216: Accounting Strategy
User’s Manual of SGS-5240 Series Managed Switch 4.7.1.4 Accounting Strategy Security>AAA>Accounting Strategy page is used to configure the strategy for Accounting. 4.7.1.5 Interface Accounting Security>AAA>Interface Accounting page is used to configure the strategy used on the interface.
Page 217: Authorization Strategy
User’s Manual of SGS-5240 Series Managed Switch 4.7.1.6 Authorization Strategy Security>AAA>Authorization Strategy page is used to configure the strategy for authorization. 4.7.1.7 Authorization configuration Security>AAA>Authorization Configuration page is used to configure the authorization strategy for console login and vty (telnet,...
Page 218: Web Authentication
User’s Manual of SGS-5240 Series Managed Switch 4.7.2 Web Authentication 4.7.2.1 Global Configuration Security > Web Authentication > Global Configuration page is used to edit the global parameters for web authentication.  Web Authentication Status – Enables web authentication for the switch. (Default: Disabled) Note that this feature must also be enabled for any port where required under the Configure Interface menu.
Page 219: 219
User’s Manual of SGS-5240 Series Managed Switch 4.7.3 802.1X Overview of 802.1X (Port-Based) Authentication In the 802.1X-world, the user is called the supplicant, the switch is the authenticator, and the RADIUS server is the authentication server. The switch acts as the man-in-the-middle, forwarding requests and responses between the supplicant and the authentication server.
Page 220: Interface Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.7.3.2 Interface Configuration Security > 802.1x > Interface Configuration page is used to configure the parameters of a port. 4.7.3.3 Statistics Security > 802.1x > Statistics page is used to display the statistics of 802.1x.
Page 221: Mac Authentication
User’s Manual of SGS-5240 Series Managed Switch 4.7.4 MAC Authentication Overview of MAC-based Authentication Unlike 802.1X, MAC-based authentication is not a standard, but merely a best-practices method adopted by the industry. In MAC-based authentication, users are called clients, and the switch acts as the supplicant on behalf of clients. The initial frame (any kind of frame) sent by a client is snooped by the switch, which in turn uses the client's MAC address as both username and password in the subsequent EAP exchange with the RADIUS server.
Page 222: Interface Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.7.4.2 Interface Configuration Security > MAC Authentication > Interface Configuration page is used to configure interface. 4.7.4.3 MAC Filter Security > MAC Authentication > MAC Filter page is used to configure Mac Filter.
Page 223: Mac Authentication Information
User’s Manual of SGS-5240 Series Managed Switch 4.7.4.4 MAC Authentication Information Security > MAC Authentication > MAC Authentication Information page is used to show information of MAC Authentication. 4.7.5 HTTPS 4.7.5.1 Global Configuration Security > HTTPS > Global Configuration page is used to enable or disable HTTPS and specify the UDP port used for this service.
Page 224: Ssh
User’s Manual of SGS-5240 Series Managed Switch 4.7.6 SSH 4.7.6.1 Global Configuration Security > SSH > Global Configuration page is used to enable the SSH server and configure basic settings for authentication.  SSH Server Status – Allows you to enable/disable the SSH server on the switch. (Default: Disabled) ...
Page 225: Key Of User
User’s Manual of SGS-5240 Series Managed Switch  Save Host-Key from Memory to Flash – Saves the host key from RAM (i.e., volatile memory) to flash memory. Otherwise, the host key pair is stored to RAM by default. Note that you must select this item prior to generating the host-key pair.
Page 226: Port Security
User’s Manual of SGS-5240 Series Managed Switch 4.7.7 Port Security Port Security allows for limiting the number of users on a given port. A user is identified by a MAC address and VLAN ID. If Port Security is enabled on a port, the limit specifies the maximum number of users on the port. If this number is exceeded, an action is taken depending on violation mode.
Page 227: Dai - Dynamic Arp Inspection
User’s Manual of SGS-5240 Series Managed Switch 4.7.8 DAI – Dynamic ARP Inspection Dynamic ARP Inspection is a secure feature. Several types of attacks can be launched against a host or devices connected to Layer 2 networks by "poisoning" the ARP caches. This feature is used to block such attacks. Only valid ARP requests and responses can go through DUT.
Page 228: Interface Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.7.8.3 Interface Configuration The Security > DAI > Interface Configuration page is used to specify the ports that require ARP inspection, and to adjust the packet inspection rate.  Port – Port or trunk identifier.
Page 229: Statistics
User’s Manual of SGS-5240 Series Managed Switch 4.7.8.4 Statistics The Security > DAI > Statistics page is used to display statistics about the number of ARP packets processed, or dropped for various reasons. 4.7.8.5 Log The Security > DAI > Log page is used to show information about entries stored in the log, including the associated VLAN, port,...
Page 230: Login Ip Management
User’s Manual of SGS-5240 Series Managed Switch 4.7.9 Login IP Management 4.7.9.1 Login IP Management The Security > Login IP Management page is used to create a list of up to 15 IP addresses or IP address groups that are allowed management access to the switch through the web interface, SNMP, or Telnet.
Page 231: Dos Protection
User’s Manual of SGS-5240 Series Managed Switch 4.7.10 DoS Protection The Security > DoS Protection page is used to protect against denial-of-service (DoS) attacks. A DoS attack is an attempt to block the services provided by a computer or network resource.
Page 232: Ipv4 Dhcp Snooping
User’s Manual of SGS-5240 Series Managed Switch 4.7.11 IPv4 DHCP Snooping 4.7.11.1 Global Configuration Security > IPv4 DHCP Snooping > Global Configuration page is used to enable DHCP Snooping globally on the switch, or to configure MAC Address Verification.  DHCP Snooping Status – Enables DHCP snooping globally. (Default: Disabled) ...
Page 233: Vlan Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.7.11.2 VLAN Configuration Security > IPv4 DHCP Snooping > VLAN Configuration page is used to enable or disable DHCP snooping on specific VLANs.  VLAN – ID of a configured VLAN. (Range: 1-4093) ...
Page 234: Legal Client Table
User’s Manual of SGS-5240 Series Managed Switch 4.7.11.4 Legal Client Table Security > IPv4 DHCP Snooping > Legal Client Table page is used to display entries in the binding table.  MAC Address – Physical address associated with the entry.
Page 235: Ipv6 Dhcp Snooping
User’s Manual of SGS-5240 Series Managed Switch 4.7.12 IPv6 DHCP Snooping 4.7.12.1 Global Configuration Security > IPv6 DHCP Snooping > Global Configuration page is used to enable DHCPv6 Snooping globally on the switch, or to configure MAC Address Verification. ◆DHCPv6 Snooping Status–Enables DHCPv6 snooping globally.(Default: Disabled) ◆DHCPv6 Snooping Option Remote ID–Enables the insertion of remote-id option 37 information into DHCPv6 client...
Page 236: Vlan Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.7.12.2 VLAN Configuration Security > IPv6 DHCP Snooping > VLAN Configuration page is used to enable or disable DHCPv6 snooping on specific VLANs.  VLAN–ID of a configured VLAN. (Range: 1-4094)
Page 237: Interface Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.7.12.3 Interface Configuration Security > IPv6 DHCP Snooping > Interface Configuration page is used to configure switch interfaces as trusted or untrusted, and set the maximum number of entries which can be stored in the binding database for an interface.
Page 238: Ipv4 Source Guard
User’s Manual of SGS-5240 Series Managed Switch  Link-layer Address – IPv6 link-layer address associated with the entry.  IPv6 Address–IPv6 address corresponding to the client.  Lifetime – The time (number of seconds) for which this IPv6 address is leased to the client.
Page 239: Static Table
User’s Manual of SGS-5240 Series Managed Switch dynamic entries discovered by DHCP snooping and static entries set by IP source guard. 4.7.13.2 Static Table Security > IPv4 Source Guard > Static Table page is used to bind a valid static IP source guard entry to a port in ACL mode.
Page 240: Ipv6 Source Guard
User’s Manual of SGS-5240 Series Managed Switch 4.7.14 IPv6 Source Guard 4.7.14.1 Interface Configuration Security > IPv6 Source Guard > Interface Configuration page is used to filter inbound traffic based on the source IPv6 address stored in the binding table.
Page 241: Static Table
User’s Manual of SGS-5240 Series Managed Switch 4.7.14.2 Static Table Use the Security > IPv6 Source Guard > Static Table page to bind a static address to a port. Table entries include a MAC address, IPv6 global unicast address, entry type (Static-IPv6-SG-Binding, Dynamic-ND-Binding, Dynamic-DHCPv6-Binding), VLAN identifier, and port identifier.
Page 242: Application Filter
User’s Manual of SGS-5240 Series Managed Switch –  Interface Port to which this entry is bound. –  IPv6 Address IPv6 address corresponding to the client. –  Type Shows the entry type: –  DHCP Dynamic DHCPv6 binding, stateful address.
Page 243: Cpu Guard
User’s Manual of SGS-5240 Series Managed Switch 4.7.16 CPU Guard Use the Security > CPU Guard page to set the CPU utilization high and low watermarks in percentage of CPU time utilized and the CPU high and low thresholds in the number of packets being processed per second.
Page 244: Device Management
User’s Manual of SGS-5240 Series Managed Switch 4.8 Device Management 4.8.1 SNMP The Simple Network Management Protocol (SNMP) is an application layer protocol that facilitates the exchange of management information between network devices. It is part of the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol suite.
Page 245: Global Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.8.1.1 Global Configuration Device Management > SNMP > Global Configuration page is used to enable SNMPv3 service for all management clients (i.e., versions 1, 2c, 3), and to enable trap messages. ◆Agent Status – Enables SNMP on the switch. (Default: Enabled) ◆Invalid Community Authentication Trap –...
Page 246: View Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.8.1.3 View Configuration Device Management > SNMP > View Configuration page is used to configureSNMPv3 views which are used to restrict user access to specified portions of the MIB tree. The predefined view “defaultview” includes access to theentire MIB tree.
Page 247: Local User
◆Security Level – The following security levels are only used for the groups assigned to the SNMP security model: User’s Manual of SGS-5240 Series Managed Switch  noAuthNoPriv – There is no authentication or encryption used in SNMP communications. (This is the default security level.)
Page 248: Remote User
User’s Manual of SGS-5240 Series Managed Switch 4.8.1.6 Remote User Device Management > SNMP > Remote User page is used to identify the source of SNMPv3 inform messages sent from the local switch. Each SNMPv3 user is defined by a unique name. Users must be configured with a specific security level and assigned to a group.
Page 249 User’s Manual of SGS-5240 Series Managed Switch  Inform – Notifications are sent as inform messages. Note that this option is only available for version 2c and 3 hosts. (Default: traps are used)  Timeout – The number of seconds to wait for an acknowledgment before resending an inform message.(Range: 0-2147483647 centiseconds;...
Page 250: Statistics
User’s Manual of SGS-5240 Series Managed Switch 4.8.1.8 Statistics Device Management > SNMP > Statistics page is used to show counters for SNMP input and output protocol data units.  SNMP packets input – The total number of messages delivered to the SNMP entity from the transport service.
Page 251: Rmon
User’s Manual of SGS-5240 Series Managed Switch  No such name errors – The total number of SNMP PDUs which were delivered to, or generated by, the SNMP protocol entity and for which the value of the error-status field is “noSuchName.”...
Page 252: Event Group
User’s Manual of SGS-5240 Series Managed Switch  Falling Threshold – If the current value is less than or equal to the falling threshold, and the last sample value was greater than this threshold, then an alarm will be generated. After a falling event has been generated, another such event will not be generated until the sampled value has risen above the falling threshold, reaches the rising threshold, and again moves back down to the failing threshold.
Page 253: History Group
User’s Manual of SGS-5240 Series Managed Switch 4.8.2.3 History Group Device Management > RMON > History Group page is used to collect statistics on a physical interface to monitor network utilization, packet types, and errors. A historical record of activity can be used to track down intermittent problems.
Page 254: Cluster
User’s Manual of SGS-5240 Series Managed Switch These parameters are displayed:  Port – The port number on the switch.  Index - Index to this entry. (Range: 1-65535)  Owner - Name of the person who created this entry. (Range: 1-127 characters) 4.8.3 Cluster...
Page 255: Member Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.8.3.2 Member Configuration The Device Management > Cluster > Member Configuration page is used to add Candidate switches to the cluster as Members. ◆Member ID – Specify a Member ID number for the selected Candidate switch. (Range: 1-36) ◆MAC Address –...
Page 256: Domain Names
User’s Manual of SGS-5240 Series Managed Switch 4.8.4.2 Domain Names Device Management > DNS > Domain Names page is used to configure a list of name servers to be tried in sequential order. Name Server IP Address – Specifies the IPv4 or IPv6 address of a domain name server to use for name-to-address resolution.
Page 257: Current Dns Information
User’s Manual of SGS-5240 Series Managed Switch 4.8.4.5 Current DNS Information Device Management > DNS > Current DNS Information page is used to display entries in the DNS cachethat have been learned via the designated name servers. ◆ID. – The entry number for each resource record.
Page 258: Relay
User’s Manual of SGS-5240 Series Managed Switch 4.8.5.2 Relay ◆L3 Interface VLAN ID–ID of configured VLAN. ◆Server IP Address–Addresses of DHCP servers or relay servers to be used by the switch’s DHCP relay agent in order of ◆Restart DHCP Relay–Use this button to re-initialize DHCP relay service.
Page 259: Oam
User’s Manual of SGS-5240 Series Managed Switch 4.8.6 OAM 4.8.6.1 Interface The Device Management > OAM > Interface page is used to enable OAM functionality on the selected port. Not all CPEs support operation and maintenance functions, so OAM is therefore disabled by default. If a CPE supports OAM, this functionality must first be enabled on the connected port to gain access to the configuration functions provided under the OAM menu.
Page 260: Statistics
User’s Manual of SGS-5240 Series Managed Switch 4.8.6.2 Statistics The Device Management > OAM > Statistics page is used to display statistics for thevarious types of OAM messages passed across each port. ◆Port – Port identifier. (Range: 1-28) ◆Clear – Clears statistical counters for the selected ports.
Page 261: Loopback Result
User’s Manual of SGS-5240 Series Managed Switch  Port – Port identifier. (Range: 1-28)  MAC Address – MAC address of the OAM peer.  OUI – Organizational Unit Identifier of the OAM peer.  Remote Loopback – Shows if remote loopback is supported by the OAM peer.
Page 262: Loopback Test
User’s Manual of SGS-5240 Series Managed Switch 4.8.6.6 Loopback Test The Device Management > OAM > Loopback Test page is used to initiate a loop back test to the peer device attached to theselected port. Loopback Mode of Remote Device ...
Page 263: Cfm
User’s Manual of SGS-5240 Series Managed Switch 4.8.7 CFM 4.8.7.1 Global Configuration Device Management > CFM > Global Configuration page is used to configure global settings for CFM, such as enabling the CFM process on the switch, setting the start-up delay for cross-check operations, configuring parameters for the link trace cache, and enabling traps for events discovered by continuity check messages or cross-check messages.
Page 264 User’s Manual of SGS-5240 Series Managed Switch from each MIP along the path and from the target MEP. Information stored in the cache includes the maintenance domain name, MA name, MEPID, sequence number, and TTL value.  Link Trace Cache Hold Time – The hold time for CFM link trace cache entries. (Range: 1-65535 minutes; Default: 100 minutes) Before setting the aging time for cache entries, the cache must first be enabled in the Linktrace Cache attribute field.
Page 265: Interface Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.2 Interface Configuration CFM processes are enabled by default for all physical interfaces, both ports and trunks. You can use the Device Management > CFM > Interface Configuration page to change these settings.
Page 266: Md Details
User’s Manual of SGS-5240 Series Managed Switch  MD Index – Domain index. (Range: 1-65535)  MD Name – Maintenance domain name. (Range: 1-43 alphanumeric characters)  MD Level – Authorized maintenance level for this domain. (Range: 0-7)  MIP Creation Type – Specifies the CFM protocol’s creation method for maintenance intermediate points (MIPs) in this domain: ...
Page 267: Ma Management
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.5 MA Management Device Management > CFM > MA Management pages is used to create and configure the Maintenance Associations (MA) which define a unique CFM service instance. Each MA can be identified by its parent MD, the MD’s maintenance level, the VLAN assigned to the MA, and the set of maintenance end points (MEPs) assigned to it.
Page 268: Ma Details
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.6 MA Details Device Management > CFM > MA Details page is used to configure details of specify MA. Configuring Detailed Settings for a Maintenance Association  MD Index – Domain index. (Range: 1-65535) ...
Page 269: Mep Management
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.7 MEP Management Device Management > CFM > MEP Management page is used to configure Maintenance End Points (MEPs). MEPs, also called Domain Service Access Points (DSAPs), must be configured at the domain boundary to provide management access for each maintenance association.
Page 270: Transmit Link Trace
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.9 Transmit Link Trace Device Management > CFM > Transmit Link Trace page is used to transmit link trace messages (LTMs). These messages can isolate connectivity faults by tracing the path through a network to the designated target node (i.e., a remote maintenance end point).
Page 271: Transmit Loopback
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.10 Transmit Loopback Device Management > CFM > Transmit Loopback page is used to transmit Loopback Messages (LBMs). These messages can be used to isolate or verify connectivity faults by submitting a request to a target node (i.e., a remote MEP or MIP) to echo the message back to the source.
Page 272: Transmit Delay Measure
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.11 Transmit Delay Measure Device Management > CFM > Transmit Delay Measure page is used to send periodic delay-measure requests to a specified MEP within a maintenance association.  MD Index – Domain index. (Range: 1-65535) ...
Page 273: Show Local Mep
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.12 Show Local MEP Device Management > CFM > Show Local MEP page is used to show information for the MEPs configured on this device.  MEP ID – Maintenance end point identifier.
Page 274: Show Local Mip
User’s Manual of SGS-5240 Series Managed Switch received or the local MEP record times out, the address will be set to the initial value of all Fs.)  Defect Condition – Shows the defect detected on the MEP.  Received RDI – Receive status of remote defect indication (RDI) messages on the MEP.
Page 275: Show Remote Mep Details
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.16 Show Remote MEP Details Device Management > CFM > Show Remote MEP Details is used page to show detailed information for MEPs located on other devices which have been discovered through continuity check messages, or statically configured in the MEP database and verified through cross-check messages.
Page 276: Show Link Trace Cache
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.17 Show Link Trace Cache Device Management > CFM > Show Link Trace Cache page is used to show information about link trace operations launched from this device.  Hops – The number hops taken to reach the target MEP.
Page 277: Show Continuity Check Error
User’s Manual of SGS-5240 Series Managed Switch  MEP ID – Maintenance end point identifier.  MD Name – Maintenance domain name.  MA Name – Maintenance association name.  Highest Defect – The highest defect that will generate a fault alarm. (This is disabled by default.) ...
Page 278: Time Setting
User’s Manual of SGS-5240 Series Managed Switch 4.8.8 Time Setting 4.8.8.1 Time Configuration The Device Management > Time Setting > Time Configuration page is used to set the system time on the switch manually without using SNTP. ◆Current Time – Shows the current time set on the switch.
Page 279: Ntp Server
User’s Manual of SGS-5240 Series Managed Switch 4.8.8.3 NTP Server The Device Management > Time Setting > NTP Server page is used to add the IP address for up to 50 NTP time servers.  NTP Server IP Address – Adds the IPv4 or IPv6 address for up to 50 time servers. The switch will poll the specified time servers for updates when the clock maintenance type is set to NTP on the System >...
Page 280: Time Zone Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.8.8.5 Time Zone Configuration The Device Management > Time Setting > Time Zone Configuration page is used to set the time zone. ◆Direction: Configures the time zone to be before (east of) or after (west of) UTC.
Page 281: Event Log
User’s Manual of SGS-5240 Series Managed Switch Status option has been set to enabled for the switch.)  Predefined Mode – Configures the summer time status and settings for the switch using predefined configurations for several major regions of the world. To specify the time corresponding to your local time when summer time is in effect, select the predefined summer-time zone appropriate for your location.
Page 282: Remote Log Server
User’s Manual of SGS-5240 Series Managed Switch ◆Status – Enables/disables the logging of debug or error messages to the logging process. (Default: Enabled) ◆History Flash Level – Limits log messages saved to the switch’s permanent flash memory for all levels up to the specified level.
Page 283: Smtp
User’s Manual of SGS-5240 Series Managed Switch 4.8.9.4 SMTP The Device Management > Event Log > SMTP page is used to alert system administrators of problems by sending SMTP (Simple Mail Transfer Protocol) email messages when triggered by logging events of a specified level. The messages are sent to specified SMTP servers on the network and can be retrieved using POP or IMAP clients.
Page 284: File Management
User’s Manual of SGS-5240 Series Managed Switch 4.8.10 File Management Device Management> File Management page is used to manage the file in device. User can upload configuration file to PC, download runtime file to device. Copy a configuration file to another configuration file.
Page 285: Saving Configuration
User’s Manual of SGS-5240 Series Managed Switch 4.8.10.2 Saving Configuration In the Device Management> File Management page, click copy button to save the current configuration settings to a local file on the switch. The configuration settings are not automatically saved by the system for subsequent use when the switch is rebooted.
Page 286: Ping
User’s Manual of SGS-5240 Series Managed Switch 4.8.11 Ping The Device Management > Ping page is used to send ICMP echo request packets to another node on the network.  Host Name/IP Address – IP address or alias of the host.
Page 287: System Reboot
User’s Manual of SGS-5240 Series Managed Switch FE80::7272%1 identifies VLAN 1 as the interface from which the trace route is sent. 4.8.13 System Reboot The Device Management > System Reboot page is used to restart the switch immediately, at a specified time, after a specified...
Page 288: Switch Operation
5.2 Learning When one packet comes in from any port, the SGS-5240 series will record the source address, port no., and the other related information in address table. This information will be used to decide either forwarding or filtering for future packets.
Page 289: Troubleshooting
■ Performance is bad. Solution: Check the full duplex status of the SGS-5240 Series PoE Switch. If the SGS-5240 series is set to full duplex and the partner is set to half duplex, then the performance will be poor. Please also check the in/out rate of the port.
Page 290: Appendix A: Networking Connection
User’s Manual of SGS-5240 Series Managed Switch APPENDIX A: Networking Connection A.1 Switch's Data RJ45 Pin Assignments - 1000Mbps, 1000BASE-T PIN NO MDI-X BI_DA+ BI_DB+ BI_DA- BI_DB- BI_DB+ BI_DA+ BI_DC+ BI_DD+ BI_DC- BI_DD- BI_DB- BI_DA- BI_DD+ BI_DC+ BI_DD- BI_DC- Implicit implementation of the crossover function within a twisted-pair cable, or at a wiring panel, while not expressly forbidden, is beyond the scope of this standard.
Page 291 User’s Manual of SGS-5240 Series Managed Switch The standard cable, RJ45 pin assignment The standard RJ45 receptacle/connector There are 8 wires on a standard UTP/STP cable and each wire is color-coded. The following shows the pin allocation and color of straight-through cable and crossover cable connection:...
Page 292: Appendix B : Glossary
User’s Manual of SGS-5240 Series Managed Switch APPENDIX B : GLOSSARY ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application.
Page 293 User’s Manual of SGS-5240 Series Managed Switch Aggregation Using multiple ports in parallel to increase the link speed beyond the limits of a port and to increase the redundancy for higher availability. (Also Port Aggregation, Link Aggregation). ARP is an acronym for Address Resolution Protocol. It is a protocol that used to convert an IP address into a physical address, such as an Ethernet address.
Page 294 User’s Manual of SGS-5240 Series Managed Switch DHCP Relay DHCP Relay is used to forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain. The DHCP option 82 enables a DHCP relay agent to insert specific information into a DHCP request packets when forwarding client DHCP packets to a DHCP server and remove the specific information from a DHCP reply packets when forwarding server DHCP packets to a DHCP client.
Page 295 User’s Manual of SGS-5240 Series Managed Switch Fast Leave IGMP snooping Fast Leave processing allows the switch to remove an interface from the forwarding-table entry without first sending out group specific queries to the interface. The VLAN interface is pruned from the multicast tree for the multicast group specified in the original leave message.
Page 296 User’s Manual of SGS-5240 Series Managed Switch IGMP Querier A router sends IGMP Query messages onto a particular link. This router is called the Querier. IMAP IMAP is an acronym for Internet Message Access Protocol. It is a protocol for email clients to retrieve email messages from a mail server.
Page 297 User’s Manual of SGS-5240 Series Managed Switch LOC is an acronym for Loss Of Connectivity and is detected by a MEP and is indicating lost connectivity in the network. Can be used as a switch criteria by EPS MAC Table Switching of frames is based upon the DMAC address contained in the frame.
Page 298 User’s Manual of SGS-5240 Series Managed Switch NFS is an acronym for Network File System. It allows hosts to mount partitions on a remote system and use them as though they are local file systems. NFS allows the system administrator to store resources in a central location on the network, providing authorized users continuous access to them, which means NFS supports sharing of files, printers, and other resources as persistent storage over a computer network.
Page 299 User’s Manual of SGS-5240 Series Managed Switch An alternative protocol is Internet Message Access Protocol (IMAP). IMAP provides the user with more capabilities for retaining e-mail on the server and for organizing it in folders on the server. IMAP can be thought of as a remote file server.
Page 300 User’s Manual of SGS-5240 Series Managed Switch given hardware address, such as an Ethernet address. RARP is the complement of ARP. RADIUS RADIUS is an acronym for Remote Authentication Dial In User Service. It is a networking protocol that provides centralized access, authorization and accounting management for people or computers to connect and use a network service.
Page 301 User’s Manual of SGS-5240 Series Managed Switch SPROUT Stack Protocol using ROUting Technology. An advanced protocol for almost instantaneous discovery of topology changes within a stack as well as election of a master switch. SPROUT also calculates parameters for setting up each switch to perform shortest path forwarding within the stack.
Page 302 User’s Manual of SGS-5240 Series Managed Switch Telnet session, the client user must log in to a server by entering a valid username and password. Then, the client user can enter commands through the Telnet program just as if they were entering commands directly on the server console.
Page 303 User’s Manual of SGS-5240 Series Managed Switch one VLAN, set up with this Port VLAN ID, and transmit untagged frames. Provider switching: This is also known as Q-in-Q switching. Ports connected to subscribers are VLAN unaware, members of one VLAN, and set up with this unique Port VLAN ID. Ports connected to the service provider are VLAN aware, members of multiple VLANs, and set up to tag all frames.
Page 304 User’s Manual of SGS-5240 Series Managed Switch WRED WRED is an acronym for Weighted Random Early Detection. It is an active queue management mechanism that provides preferential treatment of higher priority frames when traffic builds up within a queue. A frame's DP level is used as input to WRED.

This manual is also suitable for:

Sgs-5240-24t4x Sgs-5240-24p4x Sgs-5240-48t4x Sgs-5240-20s4c4xr

Planet Networking & Communication SGS-5240 Series User Manual

Quick Links

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Planet Networking & Communication SGS-5240 Series

Summary of Contents for Planet Networking & Communication SGS-5240 Series