Download Print this page
GeoVision GV-APOE0812 User Manual
GeoVision GV-APOE0812 User Manual

GeoVision GV-APOE0812 User Manual

Hide thumbs Also See for GV-APOE0812:

Advertisement

Quick Links

GV-PoE Switch
GV-APOE0812
GV-APOE1612
GV-APOE2412
Before attempting to connect or operate this product,
please read these instructions carefully and save this manual for future use.
User's Manual
APOE2-UM-A

Advertisement

loading
Need help?

Need help?

Do you have a question about the GV-APOE0812 and is the answer not in the manual?

Questions and answers

Summary of Contents for GeoVision GV-APOE0812

  • Page 1 GV-PoE Switch User's Manual GV-APOE0812 GV-APOE1612 GV-APOE2412 Before attempting to connect or operate this product, please read these instructions carefully and save this manual for future use. APOE2-UM-A...
  • Page 2 GeoVision. Every effort has been made to ensure that the information in this manual is accurate. GeoVision, Inc. makes no expressed or implied warranty of any kind and assumes no responsibility for errors or omissions. No liability is assumed for incidental or consequential damages arising from the use of the information or products contained herein.
  • Page 3: Table Of Contents

    Contents Getting Started ....................1 Web-based Switch Configuration ..............4 Console Port Interface ..................5 1.System Config....................6 1.1.System Homepage ................6 1.2.Device Info ..................7 1.3.IP Config ..................... 7 1.3.1.IPv4 Config ................7 1.3.2.IPv6 Config ................8 1.4.Web Config ..................9 1.4.1.Web Timeout ................
  • Page 4 2.1.SSH Config ..................19 2.2.Telnet Config ..................19 2.3.Port Statistics ..................20 2.4.DDMI Status ..................21 2.5.Ping ....................22 2.6.Traceroute ..................22 2.7.Cable Diagnostics ................23 2.8.SNMP Config ..................23 2.8.1.Global Config ................ 23 2.8.2.User Config ................24 2.8.3.Group Config ................ 25 2.8.4.Community Config ..............
  • Page 5 3.8.MAC Address Config ................ 43 3.8.1.Static MAC ................43 3.8.2.Black Hole MAC ..............43 3.8.3.Aging-time ................44 3.8.4.MAC Address List ..............45 3.9.AM ....................45 3.10.AAA ....................46 3.10.1.Radius .................. 46 3.10.2.Radius Accounting ............. 47 3.10.3.Tacacs .................. 48 4.VLAN Config ....................50 4.1.VLAN Config ..................
  • Page 6 5.2.2.VLAN Config ................. 65 5.2.3.Static User Binding ............... 66 5.2.4.Helper-server Config ............67 5.2.5.Port Binding ................68 5.2.6.Trust Port ................69 5.3.DHCP Relay Config ................69 5.3.1.DHCP Relay Config ............... 69 6.ACL Config ....................70 6.1.Time Range Config ................70 6.2.IP ACL ....................
  • Page 7 9.2.1.Basic Config ................94 9.2.2.Static Router Port ..............94 9.2.3.VLAN Config ................. 95 9.2.4.Querier Config............... 96 9.2.5.Multicast Table ..............97 10.QoS Config ....................97 10.1.Port Config ..................97 10.1.1.Trust Config ................ 97 10.1.2.Weight Config ..............98 10.1.3.CoS-To-IntP Config ............100 10.1.4.DSCP-To-IntP Config ............
  • Page 8: Getting Started

    ⚫ Getting Started This section introduces the web-based configuration utility, and covers the following topics: • Powering on the device • Connecting to the network • Starting the web-based configuration utility ⚫ Power Connecting to Power Power down and disconnect the power cord before servicing or wiring a switch.
  • Page 9: Connecting To The Network

    ⚫ Connecting to the Network To connect the switch to the network: 1. Connect an Ethernet cable to the Ethernet port of a computer 2. Connect the other end of the Ethernet cable to one of the numbered Ethernet ports of the switch. The LED of the port lights if the device connected is active.
  • Page 10 When the device is using the factory default IP address, its power LED flashes continuously. When the device is using a DHCP assigned IP address or an administrator-configured static IP address, the power LED is lit a solid color. Your computer’s IP address must be in the same subnet as the switch.
  • Page 11: Logging Out

    When the login attempt is successful, the System Information window displays. System Information If you entered an incorrect username or password, an error message appears and the Login page remains displayed on the window. If you are having problems logging in, please see the Launching the Configuration Utility section in the Administration Guide for additional information.
  • Page 12: Console Port Interface

    Console Port Interface The PoE smart switch has a monitor port (Console port). Rate 9600bps, standard RJ45 plug. Use a dedicated monitoring cable to lead the port to the PC serial port connection, as follows: The RJ45 connector used by the Console port is shown in the figure below, and the RJ45 plug corresponds to the RJ45 socket, from left to right numbered from 1 to 8.
  • Page 13: System Config

    25-hole plug(DB25) and 9-hole plug(DB9), RJ45 head into the switch’s console port socket, DB25 and DB9 can be used according to the requirements of the terminal serial port, the cable internal connection schematic as follows: 1.System Config 1.1.System Homepage The system homepage contains Device Info and Port Status Click on Device Info or Port Status to enter the corresponding page.
  • Page 14: Device Info

    1.2.Device Info The Device Info page allows you to view device information and also set the Hostname, Device Contact, Device Location of the device and the Current System Time. Hostname Fill in the new Hostname of the switch to be changed, 1-64 characters Device Contact Fill in the new Device Contact of the switch to be...
  • Page 15: Ipv6 Config

    VLAN Interface VLAN ID of layer 3 interface created IP Mode Static IP:User self configuration Dynamic : dhcp-client Automatic acquisition IP Address IP Address, e.g. A.B.C.D Netmask Netmask:for example :255.255.255.0 Operation Action: Apply/Delete 1.3.2.IPv6 Config The page can be used to configure IPv6 address and subnet mask for the VLAN interface.
  • Page 16: Web Config

    1.4.Web Config 1.4.1.Web Timeout The page can be used to configure Web Login Timeout time. Web Login Timeout Login Timeout: 1-60 minutes,default 10 minutes 1.4.2.HTTP HTTP Server Config module, the user can start or stop the HTTP service of the switch by using this module again.
  • Page 17: Security Ip

    1.4.4.Security IP Login user security IP configuration module, where users can configure the security IPv4 address login switch. Login methods include Telnet/HTTP/HTTPS. Security Fill in the specified security IPv4 address address Operation Apply Add address or list number Delete Delete address or list number 1.4.5.ACL Login user login access control list module, where users can configure the IPV4 access control list.
  • Page 18: User Management

    1.5.User Management 1.5.1.User Management User Management module, users in this module can add or delete user operations. Username User name to operate ,1-32 characters Password User password, choose the password encryption, otherwise no encryption of 1-32 characters Priority Used to specify permission level. WEB Privilege Config module, users can configure permissions for user accounts to login in the web.
  • Page 19: Authentication Method

    1.5.2.Authentication Method User Login Authentication Method Configure module, the user can configure console.vty.web authentication method used in login, authentication method can be any one or combination of Local.RADIUS and TACACS preferences from left to right when the login method is combined configuration. If the user has passed the authentication method, the authentication method of the lower preference is ignored.
  • Page 20: Firmware Upgrade

    1.6.Firmware Upgrade 1.6.1.TFTP Service TFTP client service module, the user can upload or download files by TFTP way, and can upgrade the firmware of the switch by this method. Server TFTP address IP peer server, point decimal address Server File name Source name to upload or download ,1-100 characters Operation type Upload...
  • Page 21: Http Upgrade

    Type ascii Transfer files in ascii format 1.6.3.HTTP Upgrade HTTP Upgrade module, the user can select file by HTTP way, and can upgrade the firmware of the switch by this method. 1.7.Management Config 1.7.1.TFTP TFTP module, the user can import or export switch configuration by tftp. Server TFTP address IP peer server, point decimal Address...
  • Page 22: Http

    1.7.2.HTTP HTTP module, the user can Download or Upload switch Running Configuration or Startup Configuration by http. Operation Type Download To download files Upload To upload files File Type Running Configuration Switch running configuration Startup Configuration Switch startup configuration 1.8.NTP 1.8.1.NTP Config NTP Config module, user can NTP service global switch operation.
  • Page 23: Ntp Authentication Config

    1.8.2.NTP Authentication Config NTP verification configuration module, the user can configure the switch NTP authentication related items. Disable Close NTP validation (default) authenticate Enable Enable NTP validation switch Key ID Secret key value, range 1-4294967295 MD5 For Key ID The MD5 value of the secret key, which ranges from 1-16 of ascii code Operation Apply...
  • Page 24: Time Zone Config

    1.9.2.Time Zone Config SNTP the time zone and UTC time difference setting module where the client is located, the user can set the switch's current time zone and name it. Time zone Time zone name ,1-16 characters Time difference After-utc Increased time zone behavior Before-utc Reduced time zone behavior Time value...
  • Page 25: View System Config

    1.10.3.View System Config This module is used to display configuration information in the current system run. 1.10.4.View Logging Buffer This module is used to display system logging information in the current system run. 1.10.5.View Logging Flash This module is used to display system flash log information in the current system run.
  • Page 26: Monitor Management

    2.Monitor Management 2.1.SSH Config SSH Config module, the user can configure the SSH status and SSH timeout. Enabled Off: Close operation(default) Operation On: Start Timeout Timeout of exit SSH login status ,10-600 seconds(default 180 s) Time Maximum Maximum number of connections logged in by SSH, range Connection 1-16(default 5) Operation...
  • Page 27: Port Statistics

    2.3.Port Statistics This page displays port statistics information. Port physical ports Link Status Link Status: Connected; Disconnect Rate(bps) Rate(bps): (R/T) Received/Transmit; Rate(pps) Rate(pps): (R/T) Received/Transmit; Unicast packets(R/T) Unicast packets: Received/Transmit; multicast packets(R/T) multicast packets: Received/Transmit; brocast packets(R/T) brocast packets: Received/Transmit; Input errors Input erros output errors...
  • Page 28: Ddmi Status

    overrun (R) Overrun Received; ignored (R) Ignored Received; abort (R) Abort Received; length error (R) Length error Received; undersize (R) Undersize Received; jabber (R) Jabber Received; fragments (R) Fragments Received; collisions (T) Collisions Transmit; late collisions (T) Late Collisions Transmit; pause frame (R/T) Pause Frame Received/Transmit;...
  • Page 29: Ping

    Port fiber ports Temperature (℃) Display the temperature of the fiber module Bias (mA) Display the Bias of the fiber module. RX Power (dBm) Display the RX Power of the fiber module. TX Power (dBm) Display the TX Power of the fiber module.
  • Page 30: Cable Diagnostics

    2.7.Cable Diagnostics This chapter can be used to detect port link lines. To display the “Cable Diagnostics” page,click Monitor Management ->Cable Diagnostics,click "Apply" to configure. 2.8.SNMP Config 2.8.1.Global Config SNMP network management function switch module, users can enable or disable SNMP functions. SNMP Agent State and Trap state default is disable. Security IP state...
  • Page 31: User Config

    2.8.2.User Config SNMP user management module, users can add or delete SNMP user operations in this module. Username User name to operate ,1-32 characters Group Name User group to join ,1-32 characters Security Level noAuthNoPriv Uncertified non-encrypted level authNoPriv Authentication but not encryption level authpriv Authentication and encryption level Authentication...
  • Page 32: Group Config

    2.8.3.Group Config SNMP group management module in which users can add or delete SNMP group operations. Group Name User group name to operate ,1-32 characters Security level noAuthNoPriv Uncertified non-encrypted level authNoPriv Authentication but not encryption level authpriv Authentication and encryption level Read SNMP view Name of readable view, including 1-32 characters Write SNMP view Name of writable view, including 1-32 characters Notify...
  • Page 33: Trap Config

    2.8.5.Trap Config The trap config where users can configure trap management settings. Trap Receiver Recipient IPv4/IPv6 address of Trap information Community Community string name, V1/V2 version :1-255 characters, Name V3 version :1-24 characters Version Three versions:V1/V2C/V3 Security level noAuthNoPriv Uncertified non-encrypted level version authNoPriv Authentication but not encryption level...
  • Page 34: Security Ip Config

    SNMP Engineid configuration module, the user can configure SNMP Engineid operation in this module. Engineid Engine id,Hex ,1-32 characters Operation configuration Configuration operations Default Restore default (default is company ID plus local MAC address) 2.8.7.Security IP Config The administrator IP the address setting module, where the user can add or delete the SNMP manager's safe IP address.
  • Page 35: Onvif Config

    2.9.Onvif Config 2.9.1.Server Config Onvif server global switch configuration module, user can Onvif server global switch operation. Server config Off: Close operation(default) Operation On: Start 2.9.2.Detect Config Onvif detect config module, Click the Send button to send an Onvif detection packet to discover the device.
  • Page 36: Vlan Loopback

    Port Ethernet port name Operation in case of loop: Loopback-detection mode No: no control mode Shutdown:Disable port block :Block port Operation Operation loop detection function: Apply:Configure control mode Port Ethernet port name Loopback-detection mode Shutdown:Disable port block :Block port No:Disable port loop detection 2.10.2.VLAN Loopback This page can be used to configure VLAN loop detection function enabled or disabled.
  • Page 37: Interval Time

    2.10.3.Interval Time This page can be used to configure the loop detection interval. To display the “Interval Time” page,click Monitor Management ->Loopback Detection-> Interval Time,click "Apply" to configure. Loopback-detection interval time Interval time between loops, size 5-300 seconds, default is 5. No Loopback-detection interval loop interval,...
  • Page 38: Lldp Config

    2.11.LLDP Config 2.11.1.Global Config This page can be configured to enable or disable LLDP functionality, configure the interval between sending updates, configure the value of the message aging time multiplier, configure the sending delay time of the update message, configure the interval between sending Trap messages. Status(lldp enable) Enable:Global On LLDP Function Disable:Global Off LLDP Function...
  • Page 39: Port Config

    2.11.2.Port Config This page can be configured to enable or disable LLDP Port functionality. Port Ethernet port name LLDP port Enable type Enable or disable LLDP functions LLDP port Trap enable type Enable or disable Trap functions LLDP mode Agent State: Send;...
  • Page 40: Tlv Config

    2.11.3.TLV Config This page can configure port TLV properties. Port Ethernet port name LLDP Port Description Port description name information needs to be configured LLDP System Capability Information describing system capabilities LLDP System Description Message describing the system LLDP System Name System name information 2.11.4.Neighbor Info This page can be used to view LLDP configuration messages.
  • Page 41: Switch Config

    3.Switch Config 3.1.Port Config 3.1.1.Port Config This page is mainly used to configure the basic of physical ports. To display the “Port Config” page,click Switch Config->Port Config->Port Config,click "Apply" to configure. Ports Select physical ports Port Alias Set port alias name, value 1-200 Admin status Port status: Enabled...
  • Page 42 Port physical ports Port Alias Port alias description Admin status Port status: Enabled Disabled Speed Port rate: 10:10M 100:100M 1000:1000M Auto:Automatic negotiation rate Duplex: Duplex Auto:Automatic negotiation mode Half:Half duplex mode Full:Full duplex mode Flow control Port Flow Control Status: Mdi: auto, across, normal, default is auto.
  • Page 43: Port Combo Mode(Specific)

    3.1.2.Port Combo Mode(Specific) This page is mainly used to configure the basic of combo ports. Port Select physical ports Port Combo Mode copper: select copper fiber: select fiber sfp-preferred-auto: auto mode 3.1.3.Port 10G Mode(Specific) This page is mainly used to configure the basic of 10G ports. Port Select physical ports Port 10G Mode...
  • Page 44: Port Mirror

    3.2.Port Mirror This section can be used for port mirroring function configuration. To display the “Port Mirror” page,click Switch Config ->Port Mirror,click "Apply" to configure. Session Mirror Session Destination port Mirror destination port Source port Mirror Source Port CPU Source CPU Source: Disabled Enabled...
  • Page 45: Port Isolate

    3.3.Port Isolate This page is mainly used to configure the port isolation. Isolate-Port Group Name name isolate-port Group,value 1-32 character Isolation Ports Select isolation ports to add isolate group 3.4.Port Channel 3.4.1.Port Channel Group This section can be used to create convergent groups. To display the “Port Channel Group”...
  • Page 46 dst-src-ip:Execute load balancing according to target IP source dst-src-mac-ip : Perform load balancing based on target and source Mac and source IP ingress-port :ingress port. To create a convergent group number, value 1-8. Name The name of LAG group, value 1-32 character mode On:force port to join port channel...
  • Page 47: Lacp

    3.4.2.LACP This page is available with setting system priority and port priority. To display the “LACP” page,click Switch Config -> Port channel->LACP, LACP system priority Range :0-65535 Port list Ethernet port name added to convergence group LACP port priority Range :0-65535 Timeout long short...
  • Page 48: Port Rate

    3.6.Port Rate The page is configured for Port Rate. To display the “Port Rate” page,click Switch Config -> Port Rate,click "Apply" to configure. Ports Ethernet port name Limit Type Limit type: Egress:send Ingress :receive All:send and receive Status Disabled Enabled Rate Bandwidth control rate in the range of Kbps 1-1000000...
  • Page 49: Storm Control

    3.7.Storm Control This page can be configured for the storm control function of the port. To display the “Storm Control” page, click Switch Config -> Storm Control, click "Apply" to configure. Port Ethernet port name Type Broadcast/Multicast/Unicast Status Disabled: Disable Storm Control Enabled: Turn on the storm control function and configure the speed limit...
  • Page 50: Mac Address Config

    3.8.MAC Address Config 3.8.1.Static MAC Configure Static MAC addresses, and establish the mapping relationship between MAC addresses and ports and VLANs. Hexadecimal MAC address, the format is xx-xx-xx-xx-xx-xx address VLAN ID Created VLAN ID Port Mapped port Operation The mapping relationship between MAC address and port and VLAN will be added Remove Delete the mapping relationship of the specified...
  • Page 51: Aging-Time

    Hexadecimal MAC address, the format is xx-xx-xx-xx-xx-xx, address packets with this address will be discarded and will not be forwarded to the network by the switch VLAN ID Created VLAN ID Blackhole source Source based on source address filter based type destination Target based on target address filter both...
  • Page 52: Mac Address List

    3.8.4.MAC Address List Quickly query the MAC address in the switch. VLAN ID The created VLAN ID, showing the address in the VLAN Hexadecimal MAC address, the format is xx-xx-xx-xx-xx-xx Address Type MAC address type Creator MAC address creator Port Find the MAC address by port Note: Check the small box at the back to make the condition take effect.
  • Page 53: Aaa

    3.10.AAA 3.10.1.Radius Radius Global Configuration module, users in this module can configure the global Radius function services. Key Type Plain Key: 1-64 character Cipher Key: 1-64 character, input plaintext application to encrypt ciphertext. Radius Global Key string ,1-64 characters, select Use default and click Apply can set Radius Key default.
  • Page 54: Radius Accounting

    Authentication The address of IPv4 or IPv6 of the radius authentication Server IP server Authentication Port number radius authentication Server port server(optional),0-65535 Key Type Plain Key: 1-64 character Cipher Key: 1-64 character, input plaintext application to encrypt ciphertext. Radius Key Key string ,1-64 characters Access Mode None: All services can use current RADIUS server by...
  • Page 55: Tacacs

    Cipher Key: 1-64 character, input plaintext application to encrypt ciphertext. Radius Key Key string ,1-64 characters Primary Primary Specify radius server as primary Accounting accounting accounting server Server server Non-Primary Specify radius server as non-primary accounting accounting server server 3.10.3.Tacacs Tacacs global configuration module, users in this module can configure the global Tacacs function services.
  • Page 56 Tacacs server configuration module, users in this module can configure the Tacacs authentication server. Authentication Tacacs authentication server IPv4 address, decimal point Server IP Authentication Tacacs authentication server port number Server Port (optional),0-65535 Key Type Plain Key: 1-64 character Cipher Key: 1-64 character, input plaintext application to encrypt ciphertext.
  • Page 57: Vlan Config

    4.VLAN Config 4.1.VLAN Config 4.1.1.VLAN ID VLAN configuration function module, users add or delete VLANs in this module。 VLAN ID The serial number of the VLAN, range: 2-4094 VLAN name By default, the default is VLAN plus four-digit serial number, range: 1-64 characters.
  • Page 58: Port Config

    4.1.3.Port Config Switch port type setting, the user can change the switch port type in this module. Port Port name Mode Access Trunk Hybrid Native Vlan Port PVID Ingress Enabled When a data packet enters the switch, the VLAN Check ingress filter checks whether the ingress port of the data packet belongs to the given (forwarded) VLAN...
  • Page 59: Gvrp Config

    4.2.GVRP Config 4.2.1.GVRP Config The switch starts the global GVRP setting, and the user turns on or off the global GVRP. Enable/Disable Enable Start the global GVRP module function global GVRP Disable Disable the global GVRP module function The switch configures GARP parameters, and the user sets the value of various timers to manage GARP.
  • Page 60: Qinq

    4.3.QINQ 4.3.1.Enable Dot1q Tunnel Switch dot1q tunnle configuration, the user configures the port to enable the dot1q tunnel function. Port Port name Operation Apply Enable dot1q tunnel Delete Disable dot1q tunnel 4.3.2.Dot1q Tunnel TPID Switch port dot1q tunnle tpid configuration, users configure port dot1q tunnel tpid parameters.
  • Page 61: Protocol Vlan

    4.4.Protocol VLAN The switch protocol vlan settings, and the user can config the protocol vlan. Mode ethernetII Configure EthernetII Encapsulation snap Configure LLC Encapsulation Configure SNAP Encapsulation Ethernet Packet protocol type, Configure Packet protocol type number, Type 1536-65535 VLAN Name Configure the VLAN ID.
  • Page 62: Port Config

    The voice oui configure module, and the user can set voice oui MAC address voice equipment address, shown xx-xx-xx-xx-xx-xx format. MAC Mask The last eight digit of the mask code of the MAC address, the valid values are: 0xff, 0xfe, 0xfc, 0xf8, 0xf0, 0xe0, 0xc0,0x80, Priority The priority of the voice traffic, the valid range is 0–7 Name...
  • Page 63: Mac Vlan

    4.6.MAC VLAN 4.6.1.VLAN Config The mac vlan configure module, and the user can select vlan to add mac vlan MAC VLAN Select vlan to add mac vlan 4.6.2.VLAN Member the user can set mac vlan MAC address The MAC address which is shown in the form of XX-XX-XX-XX-XX-XX MAC Mask The MAC address mask which is shown in the form of...
  • Page 64: Port Config

    4.6.3.Port Config The mac vlan port config module, and the user can select port to enable mac vlan Port Port name Status Enable Enable mac vlan Disable Disable mac vlan 5.DHCP Config 5.1.DHCP Server 5.1.1.Global Config DHCP status configuration and query, the user configures the DHCP server status in this module, and checks the DHCP server status DHCP Close DHCP server...
  • Page 65: Create Address Pool

    5.1.2.Create Address Pool DHCP server address pool name configuration, user settings add and delete the address pool name. DHCP The name of the created address pool Address pool name Operation Add pool Add the address pool of the DHCP server type Delete Delete the address pool of the DHCP server...
  • Page 66 DHCP pool The name of the created address pool name DHCP pool The domain name of the currently selected address pool. domain After configuration, you need to tick the box at the back to name apply the domain name to the switch during application. Address IP address Network number of the address pool...
  • Page 67: Manual Pool

    5.1.4.Manual Pool Switch static address pool configuration, and manually bind client parameters. Address The name of the created address pool Pool Name IP address IP address assigned by the DHCP server to the client Netmask The subnet mask assigned by the DHCP server to the client Binding Hardware Address Type...
  • Page 68: Default Gateway

    5.1.5.Default Gateway The switch DHCP client default gateway configuration, the user configures the gateway parameters of the DHCP address pool. DHCP pool The name of the created address pool name Gateway0-7 Gateway IP address in dotted decimal format. Gateway 0 has the highest priority.
  • Page 69: Dns Server

    5.1.6.DNS Server The switch DHCP client DNS server configuration, the user configures the DNS server parameters of the DHCP address pool. DHCP pool The name of the created address pool name DNS server For the IP address in dotted decimal format, DNS server 0 has the highest priority.
  • Page 70: Packet Statistics

    Starting Start address not used for dynamic allocation address Ending End address not used for dynamic allocation address Operation Apply Add the address range that is not used and type dynamically allocated to the switch Delete Delete the address range that is not used and dynamically allocated from the switch Display the address range currently not used for dynamic allocation 5.1.8.Packet Statistics...
  • Page 71: Client List

    5.1.9.Client List The DHCP server's IP and MAC binding status, the user can view the binding entries and the relationship between the bound IP and MAC. IP address Client's IP address Hardware The hardware address or MAC address of the client address Lease Client IP expiration time...
  • Page 72: Vlan Config

    DHCP Snooping Set the maximum number of defense actions to action Num avoid exhaustion of switch resources caused by attacks. Limit Rate(Packet Range: 0-100 per second) Operation Apply Configure the number of defense actions filled in above, default is 10, Configure the number of packets per second Display the current number of DHCP Snooping defense actions...
  • Page 73: Static User Binding

    5.2.3.Static User Binding When DHCP Snooping binding is enabled and disabled, users can view and operate the status of DHCP Snooping. When configuring this binding, users must ensure that the binding status is in the on state. DHCP Snooping Disable DHCP Snooping binding function binding status Enable DHCP Snooping binding function Shows whether the current DHCP Snooping binding status function is enabled.
  • Page 74: Helper-Server Config

    5.2.4.Helper-server Config DHCP SNOOPING will send the monitored binding information to HELPER SERVER for storage. If the switch starts abnormally, you can recover the bound data from the HELPER SERVER Helper-server HELPER server address address Helper-server DHCP SNOOPING and HELPER SERVER use UDP UDP port protocol for communication, the port range is 1-65535.
  • Page 75: Port Binding

    5.2.5.Port Binding DHCP SNOOPING will notify the DOT1X module of the binding information captured by the user controlled by the DOT1X. DHCP Snooping port binding dot1x function needs to enable DHCP Snooping binding configuration first. Port Port name DHCP Snooping Enable Enable dot1x...
  • Page 76: Trust Port

    5.2.6.Trust Port When a port changes from an untrusted port to a trusted port, the original defense action of the port will be automatically deleted; all security history records will be cleared. Port Port name DHCP Snooping Enable Enable DHCP Snooping port trust...
  • Page 77: Acl Config

    DHCP On: Enable DHCP broadcast suppress function Broadcast Off: Disable DHCP broadcast suppress function Suppress Default is off DHCP Relay On: Sets DHCP relay to forward UPD broadcast packets on Forwarding the port Off: Disable DHCP Relay Forwarding Defaul is off Interface Established Layer 3 interface Helper-server...
  • Page 78: Ip Acl

    Time range Time period names must begin with alphabetic or numeric name characters ,1-64 characters Time range absolute Absolutely type absolute-periodic Absolute-periodic periodic periodic Week Start or end weeks, "1-7":"monday-sunday"; "31":"daily"; "96":"weekdays"; "127":"weekend" Time Start or end time,HH:MM:SS Date Start or end date,YYYY.MM.DD, range2001.1.1-2038.12.31 Operation type Apply Add operations...
  • Page 79: Ip Extended Acl

    VLAN ID,1-4094 VLANID VLAN mask,0-4095 VLANID mask dcsp IP message priority ,0-63 6.2.2.IP Extended ACL Digital extension IP access list configuration module, where users can create or modify parameters for digital extension IP access list. List name Digital extensions IP access list numbers ,100-199 Operation Extended operation type...
  • Page 80: Mac Acl

    address Specified IP Match IP specified address type Host IP Match the specified host IP Destination Destination IP,decimal points Reverse Destination IPaddress mask,decimal point network mask IP priority ,0-7 precedence Service type ,0-15 Time range Time period names to be applied must begin with alphabetic or name numeric characters ,1-64 characters ICMP type...
  • Page 81: Mac Extended Acl

    Source MAC Source MAC address Reverse source MAC address inverse mask network mask 6.3.2.MAC Extended ACL Name extension MAC access list configuration module, where users can create or modify parameters for named extension MAC access list. List name Digital Extension MAC-IP Access List Number ,3100-3199 ACL Action permit Rule permit...
  • Page 82: Mac-Ip Extended Acl

    tagged-eth2 Format of marked Ethernet II packets untagged-802-3 Format of unmarked Ethernet 802-3 packets untagged-eth2 Format of unmarked Ethernet II packets cos,0-7 cos mask cos mask,0-7 VLANID VLAN ID,1-4094 VLANID mask VLAN mask,0-4095 etherType Ethernet type field value,1536-65535 etherType Ethernet type field value mask,0-65535 mask 6.4.MAC-IP Extended ACL Name extension MAC-IP access list configuration module, where users can...
  • Page 83 Source Any MAC Match any MAC address address type Specified Match MAC specified address Host MAC Match the specified host MAC Source MAC Source MAC address Reverse source MAC address inverse mask network mask Destination Any MAC Match any MAC address address type Specified Match MAC specified address...
  • Page 84: Acl Binding

    6.5.ACL Binding 6.5.1.Binding Port ACL port binding module, the user can bind and delete the access list of the specified port. Port Designated port number ACL type IP type MAC type MAC-IP MAC-IP type List name Specify access list name ,1-64 characters ACL Attached Application ACL only Direction...
  • Page 85: Ring Network

    VLAN interface Specifies the VLAN number to operate on ACL type Specifies the type of ACL to bind: IP.MAC.MAC-IP List name Specify access list name ,1-64 characters ACL Attached Application ACL only Direction in and traffic-statistics Application ACL and flow monitoring Operation type Add operations...
  • Page 86 Generating tree protocol type: Mode Mstp.Stp.Rstp Cost Format Path cost format:Dot1t.Dot1d Forward Time Size range :4-30, in seconds,the following conditions shall be met: 2 * (Bridge_Forward_Delay - 1.0 seconds) >= Bridge_Max_Age Bridge_Max_Age >= 2 * (Bridge_Hello_Time + 1.0 seconds) Hello Time Size range :1-10, in seconds,the following conditions shall be met: 2 * (Bridge_Forward_Delay - 1.0...
  • Page 87: Instance Mapping

    7.1.2.Instance Mapping This page can be used to configure the mapping relationship between the spanning tree instance and the VLAN. entry describe Generating tree instance ID, Instance name range 0-64 Add:Add the above configuration Operation information Delete:Delete the above configuration information VLAN ID,range :1-4094 VLAN name entry...
  • Page 88: Instance Properties

    7.1.3.Instance Properties This page can be used to configure MSTP domain name and MSTP revision level. entry describe Field name MSTP domain name,the length is 1-32 characters Revision-level Range :0-65535 Operation Apply: Use the above configuration 7.1.4.Port Config This page can be used to configure enable or disable the tree generation function under the port.
  • Page 89: Port Instance

    BPDU Disabled; VLAN:1-4094 Edge Port Disabled; Enabled; BPDU Filter; BPDU Guard; Point-to-Point Auto; Disabled; Enabled; Packet Format Auto; Privacy; Standard; Digest Snooping Disabled; Enabled; TC Flush no Flush; Flush; Limit Operation Apply Protocol Migration Check 7.1.5.Port Instance This page can be used for configuration of instance port priority.
  • Page 90: Status

    Instance name Generate tree instance name Port Ethernet port name Cost Size range :0-200000000 Priority The size range is :0-240, multiple of 16 Priority Auto; Root Guard; Loop Guard; Configuration:Apply the above Operation configuration 7.1.6.Status This page can be used to view information for the spanning-tree status.
  • Page 91: Erps

    7.2.ERPS 7.2.1.ERPS Ring Config This page can be used for configuration of ERPS Ring. Topology Change Propagation None; ERPS; STP; Ring Name The ERPS ring name created,1-64 character Version If configured ERPS ring to support v1, this ring will not support multi-instance.
  • Page 92 amendment (2009-04) V2: Means to support v2 which is released in 2010-03 and the amendment (2010-06) Ring-topo major-ring: Configure the ERPS ring as the major ring open-ring: Configure the ERPS ring as the open ring Port1 Configure No: Port1 is not allowed to be configured.
  • Page 93: Erps Instance Config

    7.2.2.ERPS Instance Config This page can be used for configuration of ERPS Instance. Ring Name Select the ERPS ring you created Instance ID Create the ERPS ring instance ID, id of ERPS ring, the range is 1 to Control Vlan vlan id of R-APS packets, range is from 2 to 4094 Ring ID...
  • Page 94 WTR Timer WTR timer is used to avoid the frequent protection switching of RPL owner node because of the periodic (intermittent) default.The interval is 1min and the range is from 1 to 12min, default is 5min. Guard Timer The guard timer is used for the Ethernet node to avoid the error handling close...
  • Page 95: View Erps Statistics

    7.2.3.View ERPS Statistics This page can be used for configuration of ERPS Statistics. Ring Name The ERPS ring name whe you created Instance ID The ERPS ring instance ID when you create Intance Port The ERPS ring member ports Port Role ERPS ring node roles: RPL Owner, RPL neighbor, Common Port States...
  • Page 96: Route Config

    8.Route Config 8.1.Static Route This page can be used for the basic configuration of static routing. Destination IP address IP address, format :10.10.11.11 Network mask or prefix-length Subnet mask in the following format :255.255.255.0; or mask length Nexthop or Interface null0 IP address, format :10.10.11.11.
  • Page 97: Multicast Manage

    9.Multicast Manage 9.1.IGMP Snooping Config 9.1.1.Basic Config Switch IGMP Snooping global switch, snooping IGMP messages Switch Enable Turn on the global switch of IGMP Snooping on-off IGMP on the switch Snooping Disable Turn off the global switch of IGMP Snooping on the switch VLAN ID Created VLAN ID...
  • Page 98: Static Router Port

    9.1.2.Static Router Port IGMP Snooping mrouter port parameter configuration. VLAN ID Created VLAN ID Mrouter port Port name Mrouter port Time to live of the port, range: 1-65535 alive time Operation Apply Add the mrouter port parameter configuration type checked under the selected VLAN Display current configuration information 9.1.3.VLAN Config Configure IGMP Snooping based on VLAN interface.
  • Page 99: Querier Config

    VLAN ID Created VLAN ID Immediate leave IGMP fast leave function in VLAN configuration L2-general-querier Used to send regular queries regularly to help switches configuration in this network segment learn the mrouter port Group number The upper limit of the total number of groups. When the number of joined groups reaches the limit, the newly joined groups will be rejected to prevent hostile attacks.
  • Page 100: Multicast Table

    VLAN ID Created VLAN ID Query-Interval IGMP Snooping query interval, range: 1-65535 Query-mrsp Maximum response time for group query configuration Query-robustness IGMP Snooping robustness, range: 2-10 configuration Suppression-query-time Prohibited query time, range: 1-65535 configuration Operation type Apply Add the mrouter port parameter configuration checked under...
  • Page 101: Mld Snooping Config

    9.2.MLD Snooping Config 9.2.1.Basic Config Switch MLD Snooping global switch, MLD snooping messages Switch Enable Turn on the global switch of IGMP Snooping on-off IGMP on the switch Snooping Disable Turn off the global switch of IGMP Snooping on the switch VLAN ID Created VLAN ID Display the current existing VLAN interface and the running status of IGMP...
  • Page 102: Vlan Config

    VLAN ID Created VLAN ID Mrouter port Port name Mrouter port Time to live of the port, range: 1-65535 alive time Operation Apply Add the mrouter port parameter configuration type checked under the selected VLAN Display current configuration information 9.2.3.VLAN Config Configure MLD Snooping based on VLAN interface.
  • Page 103: Querier Config

    Note: Whether it is to configure parameters or restore the default state, it is required to check the box at the back to take effect. The group number and the number of source table entries are unified functions, so the two function parameters will take effect together (when one parameter is set, the other will be set to the default value).
  • Page 104: Multicast Table

    9.2.5.Multicast Table The page displayed multicast table information. 10.QoS Config 10.1.Port Config 10.1.1.Trust Config Configure port trust rules Port To configure the port name, click to expand the remaining ports Trust class Cos to int mapping based on intp field DSCP Intp field based on dscp to intp mapping Operation...
  • Page 105: Weight Config

    10.1.2.Weight Config Configure the port to process the priority of packets according to different queue scheduling algorithms Port To configure the port name, click to expand the remaining ports Queue Strict queuing priority, packet transmission in schedule order of priority. algorithm Weighted round-robin...
  • Page 106 Port To configure the port name, click to expand the remaining ports Weight1 The weight value of queue 1, the range is 0-127 Weight2 The weight value of queue 2, the range is 0-127 Weight3 The weight value of queue 3, the range is 0-127 Weight4 The weight value of queue 4, the range is 0-127 Weight5...
  • Page 107: Cos-To-Intp Config

    Port To configure the port name, click to expand the remaining ports Weight1 The weight value of queue 1, the range is 0-32767 Weight2 The weight value of queue 2, the range is 0-32767 Weight3 The weight value of queue 4, the range is 0-32767 Weight4 The weight value of queue 8, the range is 0-32767 Weight5...
  • Page 108: Dscp-To-Intp Config

    10.1.4.DSCP-To-IntP Config Configure the value mapped from the DSCP value to the IntP value. DSCP Up to eight DSCP values can be configured to the new value1-DSCP IntP value, among which DSCP value1 is required, DSCP value8(optional) valuce2-8 is optional, range: 0-63 IntP value New IntP value, range: 0-7 Operation type...
  • Page 109: Class-Map Config

    Port To configure the port name, click to expand the remaining ports Policy map The name of the policy table, added by the policy table name configuration Operation policy for adding ports Delete Delete port policy 10.2.Class-Map Config 10.2.1.Class-Map Config Create and delete classification tables, view the currently configured classification tables Class-map...
  • Page 110: Class-Map Rule Config

    10.2.2.Class-Map Rule Config Set the rules and corresponding parameters for classification matching Classification accesss-group Match the specified IP ACL, MAC ACL or criteria rule IPv6 standard ACL or MAC-IP ACL Class-map The name of the created class-matching table, select by name clicking the drop-down ACL list...
  • Page 111 Classification Match the specified ip priority, this parameter criteria rule precedence is the IP priority list Class-map The name of the created class-matching table, select by name clicking the drop-down One or more ip priority values can be set, the list contains up precedence0-7 to 8 IP priority values, and the valid range is 0~7;...
  • Page 112 Classification Match the specified CoS value, this parameter criteria rule is a list of vlan id Class-map The name of the created class-matching table, select by name clicking the drop-down Cos 0-7 One or more cos values can be set, the parameter is a CoS list composed of up to 8 CoS, the range is 0~7;...
  • Page 113: Policy-Map Config

    Classification ipv6 Match the specified IPv6 flow label, this criteria rule flowlabel parameter is the value of the IPv6 flow label DSCP list Class-map The name of the created class-matching table, select by name clicking the drop-down IPv6 One or more IPv6 flowlabel values can be set, ranging from flowlabel0-7 0 to 1048575;...
  • Page 114: Policy Class Config

    Policy-map Policy-map name,range:1-64 character name Operation Apply Add policy-map Delete Remove policy-map Display the currently created policy-map. 10.3.2.Policy Class Config Apply the class-map to the policy-map. policy-map The name of the created policy-map name class-map The name of the classification table created by the name classification matching table, this table will be applied to the policy -map...
  • Page 115: Policy Mark Config

    10.3.3.Policy Mark Config Configure the priority of packets in the policy mapping configuration mode. Assign a new DSCP and IP priority to the classified traffic. Only the classified traffic that meets the matching criteria will be assigned a new value. Classification ip dscp DSCP...
  • Page 116: Policy Bandwidth

    10.3.4.Policy Bandwidth Configure the new aggregation strategy and the information rate and burst id of the aggregation strategy. Aggregate New aggregate policer name, range: 1-64 character. policer name Committed Information Rate, range: 1-10000000kbit/s Information Rate Policy burst Burst id configuration, range: 1-2 configuration Operation Add aggregate policer...
  • Page 117: Poe Config

    Policy-map The name of the created strategy, select by clicking the name drop-down VLAN List VLAN ID, range: 1-4094 Operation Add VLAN-based policy Remove Remove VLAN-based policy 11.PoE Config 11.1.PoE Global Config This page can be used to globally configure poe properties and view poe global property information.
  • Page 118: Poe Port Config

    PoE Police Enable status of priority power supply policy: Off:disable On:enable PoE Legacy Current status standard detection function: Off:disable On:enable PoE High-inrush Status Enable/Disable PoE Reset Interval Port reset time range :1-600 per second 11.2.PoE Port Config This page can be used to configure PoE properties under ports. To display the “PoE Port Config”...
  • Page 119: Pd Alive

    11.3.PD Alive This page can be used to configure poe pd alive under ports. Interface Current configured Ethernet ports PoE Monitor Interval Check whether the PD connected to the current port is in the detection interval of normal communication, range: 30-36000 seconds PoE Monitor Status Disabled:disable port monitoring Enabled:Enable port monitoring...

This manual is also suitable for:

Gv-apoe1612Gv-apoe2412