Table of Contents

Advertisement

Falcon Gen-3 M-Class
User Guide
nFalcon-M, Falcon-MX, µFalcon-MX
Software version 7.4.0
www.fibrolan.com

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Falcon-MX and is the answer not in the manual?

Questions and answers

Summary of Contents for FibroLAN Falcon-MX

  • Page 1 Falcon Gen-3 M-Class User Guide nFalcon-M, Falcon-MX, µFalcon-MX Software version 7.4.0 www.fibrolan.com...
  • Page 2: Proprietary Information

    Falcon M-Class | User Guide PROPRIETARY INFORMATION This document contains information, which is proprietary to Fibrolan Ltd. No part of its contents may be used, copied, disclosed or conveyed to a third party in any manner whatsoever without prior written permission from Fibrolan Ltd.
  • Page 3: Table Of Contents

    Falcon M-Class | User Guide Contents ...................... 2 PROPRIETARY INFORMATION Introduction....................... 9 M-Class series overview ....................9 1.1.1 Falcon-MX ...................... 9 1.1.2 µFalcon-MX ..................... 9 1.1.3 nFalcon-M ....................... 9 Interfaces ......................... 10 1.2.1 Falcon-MX ....................10 1.2.2 µFalcon-MX ....................10 1.2.3 nFalcon-M .....................
  • Page 4 Falcon M-Class | User Guide 4.3.9 Events ......................36 DHCP (Dynamic Host Configuration Protocol ............... 37 Ports Configuration and Monitoring ................38 4.5.1 Port State ..................... 41 4.5.2 SFP Information .................... 42 4.5.3 SFP Operational Range .................. 43 4.5.4 SFP Monitoring ....................44 4.5.5 Traffic Overview ....................
  • Page 5 Falcon M-Class | User Guide 4.10.2 Network Security ..................141 4.10.3 Address Resolution Protocol ................. 176 4.10.4 Authentication Server Configuration (AAA) ............ 182 4.11 SyncCenter Configuration ..................193 4.11.1 SyncCenter ....................194 4.11.2 Sync Source ....................194 4.11.3 Sync Center Configuration ................195 4.11.4 196 4.11.5 Sync Output....................
  • Page 6 Falcon M-Class | User Guide 4.18.8 MLD Snooping VLAN Configuration ............... 259 4.18.9 MLD Snooping Port Group Filtering Configuration .......... 262 4.18.10 MLD Snooping Status .................. 263 4.18.11 MLD Snooping Groups Information ............... 264 4.18.12 MLD SFM Information .................. 265 4.19 Link Aggregation .....................
  • Page 7 Falcon M-Class | User Guide 4.32.1 UDLD Port Configuration................363 4.32.2 Detailed UDLD Status forPort 1 ..............364 Management ....................365 General Introduction ....................365 5.1.1 System Information ..................365 5.1.2 System Status ..................... 366 5.1.3 CPU Load....................368 5.1.4 IP Status ....................
  • Page 8 Falcon M-Class | User Guide 5.10.3 RMON History Overview ................414 5.10.4 RMON Statistics Status Overview..............415 Maintenance ....................417 Diagnostics ......................417 6.1.1 ICMP Ping ....................417 6.1.2 Ping 6 ......................418 6.1.3 Link OAM MIB Retrieval ................419 6.1.4 VeriPHY Cable Diagnostics ................
  • Page 9: Introduction

    Among its unique capabilities is 2.5GE support, providing an intermediate step for high-speed access, and advanced timing functions, benefiting from Fibrolan's Timing portfolio and technology. The µFalcon-MX series is equipped with 4x triple-rate SFP ports (100/1000/2500BaseX), 2x tri-speed Copper ports (10/100/1000BaseT) and 2x 1/2.5/10G SFP+ uplink ports.
  • Page 10: Interfaces

    Falcon M-Class | User Guide The device offers advanced Quality of Service (QoS) features including classification and mapping based on layer 1 through layer 4 attributes, rate limiting per service, with highly flexible scheduling, queuing and shaping options (including HQoS). All MEF defined services can be configured on the nFalcon-M series and can also be protected through the use of high-performance mechanisms, based on G.8031, G.8032 for the link, path, and ring resilience.
  • Page 11 Falcon M-Class | User Guide Figure 1-2: µFalcon-MX Interface Capacity Table 1-2: µFalcon-MX Interface Capacity Description Quantity Notes Power indicator LED Sync indicator LED CPU indicator LED Alarm indicator LED Console port RS232 serial management port Synchronization (SMA Connectors) 100BaseFX/1000BaseX/2500BaseX (SFP) 4 UNI SFP ports LEDs indicators Link/Activity (per port) 10/100/1000BaseT (RJ45)
  • Page 12: Nfalcon-M

    Falcon M-Class | User Guide 1.2.3 nFalcon-M Figure 1-3: nFalcon-M Interface Capacity Table 1-3: nFalcon-M Interface Capacity Description Quantity Notes Console port RS232 serial management port 10/100/1000BaseT (RJ45) 2 or 4 Model dependent 100BaseFX/1000BaseX (SFP) UNI SFP ports LEDs indicators Link/Activity (per port) Power indicator LED...
  • Page 13: Models Lists

    Falcon M-Class | User Guide Models lists Table 1-4: Falcon-MX models list Model Part # Description Access Service Aggregator, 24x100/1000BaseX (SFP), 4x10/100/1000BaseT, 4x10GE (SFP+), 1 removable AC Falcon-MX/428/A 7120 power supply (FPS10012/A), CE SW license Falcon-MX/428/D 7121 Access Service Aggregator, 24x100/1000BaseX (SFP), 4x10/100/1000BaseT, 4x10GE (SFP+), 1 removable DC power supply (FPS10012/D), CE SW license Falcon-MX/428/G/A 7122...
  • Page 14: Typical Applications

    Falcon M-Class | User Guide Typical Applications 1.4.1 Falcon-MX Typical Application - Business Ethernet Figure 1-4: Falcon-MX typical application in ring topology 1.4.2 µFalcon-MX Typical Application in Fixed Mobile Convergence Figure 1-5: Falcon-MX typical applications in ring topology and as demarcation device...
  • Page 15: Nfalcon-M Typical Application In Business Access

    Falcon M-Class | User Guide 1.4.3 nFalcon-M Typical Application in Business Access Figure 1-6: nFalcon-MX typical application Scalability The M-Class series provides multiple means of remote field upgrades that result in high levels of scalability, flexibility and future proofing: • Upgrades for enhancements and new features both on the management and control level, and wire speed packet processing level.
  • Page 16: System Description

    Falcon M-Class | User Guide System Description Block Diagram Figure 1-7: M-Class functional block diagram...
  • Page 17: M-Class Series Key Features

    Falcon M-Class | User Guide M-Class series key features • 10G service aggregation/demarcation for business Ethernet and mobile backhaul • Based on 3rd generation Falcon platform with 160Gbps capacity • Full set of MEF CE2.0 compliant services • 2.5Gbps support on optical ports •...
  • Page 18: Netace - Key Features And Benefits

    2.3.3 NetACE – Key features and benefits: Fibrolan offers the NetACE platform along with dedicated integrated tools for managing its products (e.g. Falcon) within a complex network The NetACE Orchestrator is a NetOps-driven Service Lifecycle Orchestration, well-known, widely spread platform for managing various networks. The NetACE...
  • Page 19 Falcon M-Class | User Guide • Linear (G.8031) and Ring (G.8032v2) Ethernet Protection Switching • Power Link ports support the implementation of the following: • RFC2544 traffic generator & analyzer • Dying-Gasp – Power Link ports can send a Dying-Gasp frame upon power failure. The Dying-Gasp frames are SNMP trap frames •...
  • Page 20: Getting Started

    Access the installed device via one of the management options (RS232, CLI, Telnet or Web management) For a general configuration procedure please refer to the Quick Guide located at Fibrolan Web site ( Support > Knowledgebase > Quick Guides) Remote management requires basic IP configuration.
  • Page 21: Console Connection And Configuration

    The system prompts you to log in. Default user name is: moose; Default password is: 1234 The above procedure is also applicable in all M-Class series devices Note: if you experiment difficulty in the connection, contact Fibrolan support (International:support@fibrolan.com; North America : Us-info@fibrolan.com)
  • Page 22: Initial Configuration

    Falcon M-Class | User Guide 3.2.1 Initial Configuration This first configuration is done via the console; it enables the switch to connect to the IP network.. Once the unit IP address is set via console, the system can be accessed through Web, Telnet or any other management options.
  • Page 23: Web User Interface Buttons

    Falcon M-Class | User Guide Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds Refresh: Click to refresh the page 3.2.3 Web user interface buttons HOME LOGOUT HELP...
  • Page 24: Functional Description

    Falcon M-Class | User Guide Functional Description Overview This section provides introduction to the M-Class series functionality and instructions for configuration and monitoring. The configuration and monitoring functionalities can be accessed via various management interfaces. Sections 4 demonstrates the configuration various functions and setting mainly using the Web interface.
  • Page 25: System Information

    Falcon M-Class | User Guide algorithm is being used. The output of the queue is passed to the Shaper. If the Shaper is not selected the frame passes untouched. The frames are then passed to the Rewriter. The Rewriter examines the frame header information and adjusts it if required. From there on the frame is sent to the output port (MAC layer).
  • Page 26: Ip Configuration

    Falcon M-Class | User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. 4.3.2 IP Configuration Configure basic settings, control IP interfaces and IP routes. The maximum number of interfaces supported is 8 and the maximum number of routes is 32.
  • Page 27: Ip Interfaces

    Falcon M-Class | User Guide From this DHCPv6 interface: Specify from which DHCPv6-enabled interface a provided DNS server should be preferred. DNS Proxy When DNS proxy is enabled, system will relay DNS requests to the currently configured DNS server, and reply as a DNS resolver to the client devices on the network.
  • Page 28 Falcon M-Class | User Guide Enable the DHCPv6 client by checking this box. If this option is DHCPv6 enabled, the system will configure the IPv6 address of the interface Enable using the DHCPv6 protocol. Enable the DHCPv6 Rapid-Commit option by checking this box. If DHCPv6 Rapid this option is enabled, the DHCPv6 client terminates the waiting Commit...
  • Page 29: Ip Routes

    Falcon M-Class | User Guide 4.3.4 IP Routes Figure 4-5: IP Routes Table 4-4: IP Routes Parameters Delete Select this option to delete an existing IP route. Network The destination IP network or host address of this route. Valid format is dotted decimal notation or a valid IPv6 notation. A default route can use the value 0.0.0.0or IPv6 :: notation.
  • Page 30: Ntp Configuration

    Falcon M-Class | User Guide 4.3.5 NTP Configuration NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks of computer systems. NTP uses UDP (datagrams) as transport layer Figure 4-6: NTP Server and Client Configuration Table 4-5: NTP Configuration Parameters Sever Configuration Indicates the NTP mode operation.
  • Page 31: Time Zone

    Falcon M-Class | User Guide 4.3.6 Time Zone This section allows us to configure the Time Zone Time Zone Configuration Daylight Saving Time Configuration Start Time /End Time/Offset settings Figure 4-7: Time Zone Configuration Time Zone Configuration Time Zone Lists various Time Zones worldwide. Select appropriate Time Zone from the drop down and click Save to set.
  • Page 32 Falcon M-Class | User Guide Reset: Click to undo any changes made locally and revert to previously saved values. Time Settings Figure 4-9: Time Settings displays...
  • Page 33 Falcon M-Class | User Guide Table 4-8: Time Settings Parameters Recurring Configurations Week - Select the starting week number. Start time Day - Select the starting day. settings Month - Select the starting month. Hours - Select the starting hour. Minutes - Select the starting minute.
  • Page 34: System Log Configuration

    Falcon M-Class | User Guide 4.3.7 System Log Configuration Configure System Log on this section Figure 4-10: System Log Configuration displays Table 4-9: System Log Configuration Parameters System Log Configuration Indicates the server mode operation Server M ode When the mode operation is enabled, the syslog message will send out to syslog server.
  • Page 35: Dying Gasp Configuration

    Falcon M-Class | User Guide 4.3.8 Dying Gasp Configuration This section configures dying gasp parameters. Figure 4-11: Dying Gasp Configuration Table 4-10: Dying Gasp Configuration Parameters System Log Configuration Port Select the port to which the Dying Gasp is applied Mode Enable or disable dying gasp functionality for a port Frame Type...
  • Page 36: Events

    Falcon M-Class | User Guide 4.3.9 Events This page allows the user to change (enable/disable) and their corresponding interfaces to the current events configuration Figure 4-12: Events Configuration Table 4-11: Events Configuration Parameters Event Index Event Unique Name of the Event. Severity Indicates the severity of the event (Notice, Info.Warning) Enable...
  • Page 37: Dhcp

    Falcon M-Class | User Guide DHCP (Dynamic Host Configuration Protocol DHCP is an acronym for Dynamic Host Configuration Protocol. It is a protocol used for assigning dynamic IP addresses to devices on a network. DHCP used by networked computers (clients) to obtain IP addresses and other parameters such as the default gateway, subnet mask, and IP addresses of DNS servers from a DHCP server.DHCP used by networked computers (clients) to obtain IP addresses and other parameters such as the default gateway, subnet mask, and IP addresses of DNS servers from a DHCP server.
  • Page 38: Ports Configuration And Monitoring

    Falcon M-Class | User Guide Ports Configuration and Monitoring This section shows current port configurations. Ports may be configured here. Ports are also monitored here. Figure 4-13: Port Configuration Table 4-12: Port Configuration Parameters Port This is the logical port number for this row. Link The current link state is displayed graphically.
  • Page 39 Falcon M-Class | User Guide Configured Selects any available link speed for the given switch port. Only speeds supported by the specific port are shown. Possible speeds Speed are: Disabled - Disables the switch port operation. Auto - Cu port auto negotiating speed with the link partner and selects the highest speed that is compatible with the link partner.
  • Page 40 Falcon M-Class | User Guide Flow Control When “Auto Speed” is selected for a port, this section indicates the flow control capability that is advertised to the link partner. When a fixed speed setting is selected, traffic that is what is selected.
  • Page 41: Port State

    Falcon M-Class | User Guide 4.5.1 Port State This section provides an overview of the current switch port states (Each M-Class series device has its own Port State display) Figure 4-14: Port State The port states are illustrated as follows: RJ45 ports ports...
  • Page 42: Sfp Information

    Falcon M-Class | User Guide 4.5.2 SFP Information This section shows SFP Information Figure 4-15: SFP information Table 4-13: SFP Information Parameters Indicates vendors name. Vendor # Indicates part number. Part # Indicates module Type. Type Indicates the SFP's nominal optical range. Range Wavelength Indicates the SFP wave length (separately for transmit and...
  • Page 43: Sfp Operational Range

    Falcon M-Class | User Guide 4.5.3 SFP Operational Range This section shows SFP operational range If you insert SFPs into port s 7 and 8 you get the following display which show the operational range. The red indicators under status imply a low Rx error since there is no reception Figure 4-16: Operational Range Table 4-14: SFP Operational Range Parameters...
  • Page 44: Sfp Monitoring

    Falcon M-Class | User Guide 4.5.4 SFP Monitoring This section shows SFP digital diagnostic information Figure 4-17: SFP Monitoring Table 4-15: SFP Monitoring Parameters Module's receive optical power [dBm]. RX Power Module's transmit optical power [dBm]. TX Power Module's internal temperature. Temperature Module's transmitter bias current [mA].
  • Page 45: Traffic Overview

    Falcon M-Class | User Guide 4.5.5 Traffic Overview Figure 4-18: Port Statistics Table 4-16: Port Statistics Overview Parameters The logical port for the settings contained in the same row. Port # The number of received and transmitted packets per port. Packets# The number of received and transmitted bytes per port.
  • Page 46: Qos Statistics

    Falcon M-Class | User Guide 4.5.6 QoS Statistics Figure 4-19: Queuing Counters Display Table 4-17: Queuing Counters Parameters Port The logical port for the settings contained in the same row.. There are 8 QoS queues per port. Q0 is the lowest priority queue. Rx/Tx The number of received and transmitted packets per queue Buttons...
  • Page 47: Qos Control List Status

    Falcon M-Class | User Guide 4.5.7 QoS Control List Status This section shows the QCL status by different QCL users. Each row describes the QCE that is defined. It is a conflict if a specific QCE is not applied to the hardware due to hardware limitations. The maximum number of QCEs is 256 on each switch.
  • Page 48 Falcon M-Class | User Guide Conflict Displays Conflict status of QCL entries. As H/W resources are shared by multiple applications. It may happen that resources required to add a QCE may not be available, in that case it shows conflict status as 'Yes', otherwise it is always 'No'. Please note that conflict can be resolved by releasing the H/W resources required to add QCL entry on pressing 'Resolve Conflict' button.
  • Page 49: Detailed Port Statistics

    Falcon M-Class | User Guide 4.5.8 Detailed Port Statistics This section provides detailed traffic statistics for a specific switch port. Use the port select box to select which switch port details to display The displayed counters are the totals for receive and transmit, the size counters for receive and transmit, and the error counters for receive and transmit Figure 4-21: Detailed Port Statistics Display...
  • Page 50 Falcon M-Class | User Guide Table 4-19: Detailed Port Statistics Parameters Receive Total and Transmit Total Rx and Tx Packets The number of received and transmitted (good and bad) packets. Rx and Tx Octets The number of received and transmitted (good and bad) bytes. Includes FCS, but excludes framing bits.
  • Page 51: Green Ethernet

    Falcon M-Class | User Guide Tx Late/Exc. Coll The number of frames dropped due to excessive or late collisions. Buttons The port select box determines which port is affected by clicking the button. Auto-refresh : Check this box to refresh the page automatically.
  • Page 52: Learn Mac Table

    Falcon M-Class | User Guide Learn MAC Table This section details the MAC Learn Table functionality. Switching of frames is based upon the DMAC address contained in the frame. The switch builds up a table that maps MAC addresses to switch ports for knowing which ports the frames should be delivered to ( based upon the DMAC address in the frame ) This table contains both static and dynamic entries.
  • Page 53 Falcon M-Class | User Guide Table 4-20: MAC Address Table Configuration Parameters Aging Configuration By default, dynamic entries are removed from the MAC after 300 seconds. Aging This removal is also called aging. Configuration Configure aging time by entering a value here in seconds; for example, Age Time: seconds The allowed range is 10 to 10000000 seconds.
  • Page 54: Monitoring The Mac Address Table

    Falcon M-Class | User Guide 4.6.2 Monitoring the MAC Address Table Entries in the MAC Table are shown in the below figure. The MAC Table contains up to 8192 entries, and is sort ed first by VLAN ID, then by MAC address. Figure 4-23: Monitoring MAC Address Table...
  • Page 55: Navigating The Mac Table

    Falcon M-Class | User Guide 4.6.3 Navigating the MAC Table Each page shows up to 999 entries from the MAC table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the MAC Table. The first displayed will be the one with the lowest VLAN ID and the lowest MAC address found in the MAC Table.
  • Page 56 Falcon M-Class | User Guide Virtual LAN, commonly known as VLAN, is a group of hosts with a common set of requirements that communicate as if they were attached to the same LAN, regardless of their physical location. A VLAN has the same attributes as a physical LAN, but allows for end stations to be grouped together even if they are not located on the same LAN segment.
  • Page 57: Vlans And Provider Bridges

    Falcon M-Class | User Guide VLANs and Provider Bridges Virtual LAN, commonly known as VLAN, is a group of hosts with a common set of requirements that communicate as if they were attached to the same LAN, regardless of their physical location. A VLAN has the same attributes as a physical LAN, but allows for end stations to be grouped together even if they are not located on the same LAN segment.
  • Page 58: Vlan Configuration

    Falcon M-Class | User Guide 4.7.1 VLAN Configuration This section allows for controlling configuration on the switch. VLAN The section includes Global VLAN Configuration and –Port VLAN configurations Figure 4-24: Global VLAN Configuration Table 4-22: Global VLAN Configuration Parameters Global VLAN Configuration Allowed This field shows the allowed Access VLANs, i.e.
  • Page 59 Falcon M-Class | User Guide 4.7.1.1 VLAN Port Configuration The VLAN Port Configuration is used to configure per port VLAN related Parameters. Figure 4-25: VLAN Port Configuration Table 4-23: VLAN Port Configuration Table Parameters Global VLAN Configuration Allowed Access This field shows the allowed Access VLANs, i.e. it only affects ports configured as Access ports.
  • Page 60 Falcon M-Class | User Guide Member of exactly one VLAN, the Port VLAN (a.k.a. Access VLAN), which by default is 1 2.Accepts untagged and C-tagged frames 3.Discards all frames that are not classified to the Access VLAN 4.On egress all frames are transmitted untagged Trunk: Trunk ports can carry traffic on multiple VLANs simultaneously, and are normally used to connect to other switches.
  • Page 61 Falcon M-Class | User Guide priority tagged, the frame gets classified to the Port VLAN. If frames must be tagged on egress, they will be tagged with an S-tag. S-Custom-Port: On ingress, frames with a VLAN tag with a TPID = 0x8100 or equal to the Ethertype configured for Custom-S ports get classified to the VLAN ID embedded in the tag.
  • Page 62 Falcon M-Class | User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. 4.7.1.2 VLAN Membership Status and VLAN Name configuration for Combined users This section provides an overview of membership status of VLAN users, and configure VLAN name.
  • Page 63 Falcon M-Class | User Guide Table 4-24: VLAN Membership Status and VLAN Name configuration Parameters VLAN ID VLAN ID for which the Port members are displayed. VLAN Name VLAN Name for which the Port members are displayed. Port Members A row of check boxes for each port is displayed for each VLAN ID If a port is included in a VLAN, the following image will be displayed.
  • Page 64 Falcon M-Class | User Guide 4.7.1.3 VLAN Port Status for Combined users This section provides VLAN Port Status VLAN USER Various internal software modules may use VLAN services to configure VLAN port configuration on the fly. The drop-down list on the right allows for selecting between showing VLAN memberships as configured by an administrator (Admin) or as configured by one of these internal software modules.
  • Page 65 Falcon M-Class | User Guide Table 4-25: VLAN Port Status for Combined Users Parameters Port The logical port for the settings contained in the same row. Shows the port type (Unaware, C-Port, S-Port, S-Custom-Port.) that a Port Type given user wants to configure on the port. The field is empty if not overridden by the selected user.
  • Page 66: Vlan Membership Status For Combined Users

    Falcon M-Class | User Guide 4.7.2 VLAN Membership Status for Combined users This section provides an overview of membership status of VLAN users. VLAN User Various internal software modules may use VLAN services to configure VLAN memberships on the fly. The drop-down list on the right allows for selecting between showing VLAN memberships as configured by an administrator (Admin) or as configured by one of these internal software modules.
  • Page 67 Falcon M-Class | User Guide If a port is in the forbidden port list, an image will be displayed. If a port is in the forbidden port list and at the same time attempted included in the VLAN, the following image will be displayed: .
  • Page 68: Vlan Translation

    Falcon M-Class | User Guide 4.7.3 VLAN Translation This section allows you to perform: VLAN Translation Port Configuration VLAN Translation Mapping Table 4.7.3.1 VLAN Translation Port Configuration This section allows you to configure switch Ports to use a given VLAN Translation Mapping Group. This will enable all VLAN Translation mappings of that group (if any) on the selected switch port.
  • Page 69 Falcon M-Class | User Guide Group ID The VLAN Translation mappings are organized into Groups, identified by the Group ID. This way a port is configured to use a number of VLAN Translation mappings easily by simply configuring it to use a given group. Then number of possible groups in a switch is equal to the number of ports present in this switch.
  • Page 70 Falcon M-Class | User Guide 4.7.3.2 VLAN Translation Mapping Table This section allows you to create mappings of VLANs -> Translated VLANs and organize these mappings into global Groups. Figure 4-30: VLAN Translation Mapping Table Table 4-28: VLAN Translation Mapping Table parameters Group ID The VLAN Translation mappings are organized into Groups, identified by the Group ID.
  • Page 71 Falcon M-Class | User Guide By clicking on button, the Mapping Configuration is displayed The settings can be configured here. Figure 4-31: Mapping Configuration display Table 4-29: Mapping Configuration parameters Group ID The VLAN Translation mappings are organized into Groups, identified by the Group ID.
  • Page 72: Provider Bridges (Qinq)

    Falcon M-Class | User Guide 4.7.4 Provider Bridges (QinQ) The use of an extra VLAN header (service provider tag) as part of the Ethernet frame header to provide differentiation between traffic flows (whether a separate service, or a separate customer) is common in service provider networks.
  • Page 73: Private Vlans (Pvlans)

    Falcon M-Class | User Guide 4.7.5 Private VLANs (PVLANs) A traditional VLAN enables communication to/from all its member ports. A private VLAN is a special VLAN which limits the connectivity between its port members. Each private VLAN contains one or more private ports, and a single uplink port.
  • Page 74 Falcon M-Class | User Guide Table 4-30: Private VLAN Membership Configuration Parameters Delete To delete a private VLAN entry, check this box. The entry will be deleted during the next Save. Private VLAN Indicates the ID of this particular private VLAN. A row of check boxes for each port is displayed for each Port Members private VLAN ID.
  • Page 75 Falcon M-Class | User Guide 4.7.5.2 Port Isolation Configuration This section is used for enabling or disabling port isolation for ports in a Private VLAN. A port member of a VLAN can be isolated to other isolated ports on the same VLAN and Private VLAN.
  • Page 76 Falcon M-Class | User Guide 4.7.5.3 VCL This section includes the following subjects: MAC-based VLAN Membership Configuration Protocol to Group Mapping Table Group Name to VLAN mapping Table IP Subnet-based VLAN Membership Configuration 4.7.5.4 MAC-based VLAN Membership Configuration This section allows adding and deleting MAC-based VLAN Classification List entries and assigning the entries to different ports.
  • Page 77 Falcon M-Class | User Guide Adding a New MAC to VLAN ID mapping entry Click Add New Entry to add a new MAC to VLAN ID mapping entry. An empty row is added to the table, and the mapping can be configured as needed. Any unicast MAC address can be used to configure the mapping.
  • Page 78 Falcon M-Class | User Guide Value Valid value that can be entered in this text field depends on the option selected from the preceding Frame Type selection menu. Below are the criteria for the three different Frame Types: Ethernet: Value in the text field when Ethernet is selected as a Frame Type is called etype.
  • Page 79 Falcon M-Class | User Guide 4.7.5.6 Group Name to VLAN mapping Table This sub section allows you to map a Group Name (already configured or to be configured in the future) to a VLAN for the Figure 4-36: Group Name to VLAN Mapping Table display Table 4-34: Group Name to VLAN Mapping Table parameters Delete To delete a Group Name to VLAN mapping, check this box.
  • Page 80 Falcon M-Class | User Guide Adding a New Group to VLAN mapping entry Click Add New Entry to add a new entry in the mapping table An empty row is added to the table and the Group Name, VLAN ID and port members can be configured as needed.
  • Page 81 Falcon M-Class | User Guide Adding a New IP subnet based VLAN Click Add New Entry: to add a new IP subnet to VLAN ID mapping entry. An empty row is added to the table, and the mapping can be configured as needed. Any IP address/mask can be configured for the mapping.
  • Page 82: Voice Vlan

    Falcon M-Class | User Guide 4.7.6 Voice VLAN The Voice VLAN feature enables voice traffic forwarding on the Voice VLAN, then the switch can classify and schedule network traffic. It is recommended that there be two VLANs on a port - one for voice, one for data.
  • Page 83 Falcon M-Class | User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. 4.7.6.2 Port Configuration Figure 4-39: Port Configuration display Table 4-37: Port Configuration parameters Port Configuration Port The logical port for the settings contained in the same row.
  • Page 84 Falcon M-Class | User Guide Discovery Indicates the Voice VLAN port discovery protocol. Protocol It will only work when auto detect mode is enabled. We should enable LLDP feature before configuring discovery protocol to "LLDP" or "Both". Changing the discovery protocol to "OUI" or "LLDP" will restart auto detect process.
  • Page 85 Falcon M-Class | User Guide Table 4-38: Voice VLAN OUI Table parameters Delete Check to delete the entry. It will be deleted during the next save. Telephony A telephony OUI address is a globally unique identifier assigned to a vendor by IEEE. It must be 6 characters long and the input format is "xx-xx-xx"...
  • Page 86: Multicast Vlan Registration (Mvr)

    Falcon M-Class | User Guide 4.7.7 Multicast VLAN Registration (MVR) This section provides MVR related configurations. The MVR feature enables multicast traffic forwarding on the Multicast VLANs. In a multicast television application, a PC or a network television or a set-top box can receive the multicast stream.
  • Page 87 Falcon M-Class | User Guide 4.7.7.2 VLAN Interface Setting Figure 4-42: VLAN Interface Setting display Table 4-40: VLAN Interface Setting parameters VLAN Interface Setting Check to delete the entry. The designated entry will be deleted during the next save. Delete MVR VID Specify the Multicast VLAN ID.
  • Page 88 Falcon M-Class | User Guide I indicates Inactive; S indicates Source; R indicates Receiver The default Role is Inactive. Buttons Add New Click MVR VLAN: Click to add new MVR VLAN. Specify the VID and configure the new entry. Click "Save". Save: Click to save changes.
  • Page 89 Falcon M-Class | User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. 4.7.7.4 MVR Statistics This section provides MVR Statistics information. Figure 4-44: MVR Statistics display Table 4-42: MVR Statistics parameters MVR Statistics The Multicast VLAN ID.
  • Page 90 Falcon M-Class | User Guide...
  • Page 91 Falcon M-Class | User Guide 4.7.7.5 MVR Channels (Groups) Information Entries in the MVR Channels (Groups) Information Table are shown on this section. The MVR Channels (Groups) Information Table is sorted first by VLAN ID, and then by group. Figure 4-45: MVR Channels (Group) Information display Table 4-43: MVR Channels (Group) Information parameters MVR Channels (Groups) Information Table VLAN ID...
  • Page 92 Falcon M-Class | User Guide 4.7.7.6 MVR SFM Information Figure 4-46: MVR SFM Information display Table 4-44: MVR SFM Information parameters MVR SFM) Information Table ID VLAN VLAN ID of the group Groups Group address of the group displayed Port Switch port number.
  • Page 93: Quality Of Service (Qos)

    Falcon M-Class | User Guide Quality of Service (QoS) QoS is an acronym for Quality of Service. It is a method to guarantee a bandwidth relationship between individual applications or protocols. A communications network transports a multitude of applications and data, including high-quality video and delay-sensitive data such as real-time voice.
  • Page 94 Falcon M-Class | User Guide Table 4-45: QoS Ingress Port Classification parameters QoS Ingress Port Classification Port The port number for which the configuration below applies. Controls the default class of service. All frames are classified to a CoS. There is a one to one mapping between CoS, queue and priority. A CoS of 0zero) has the lowest priority If the port is VLAN aware, the frame is tagged and Tag Class.
  • Page 95: Qos Ingress Port Policers

    Falcon M-Class | User Guide 4.8.2 QoS Ingress Port Policers This section allows you to configure the settings for all switch ports. Policer can limit the bandwidth of received frames. It is located in front of the ingress queue. policer Figure 4-48: QoS Ingress Port Policers Table 4-46: QoS Ingress Port Policers Parameters Port...
  • Page 96: Qos Ingress Queue Policers

    Falcon M-Class | User Guide 4.8.3 QoS Ingress Queue Policers This section permits to configure the Queue Policer settings for all switch ports can limit the bandwidth of received frames. It is located in front of the ingress queue Policer Figure 4-49: QoS Ingress Queue Policers display Table 4-47: QoS Ingress Queue Policers Config parameters Port...
  • Page 97: Qos Egress Port Schedulers

    Falcon M-Class | User Guide 4.8.4 QoS Egress Port Schedulers This section provides an overview of QoS Egress Port Schedulers for all switch ports. Figure 4-50: QoS Egress Port Schedulers Table 4-48: QoS Egress Port Schedulers Parameters Port The logical port for the settings contained in the same row. Click on the port number in order to configure the schedulers.
  • Page 98 Falcon M-Class | User Guide Figure 4-51: QoS Egress Port Schedulers and Shapers Table 4-49: QoS Egress Port Schedulers and Shapers Parameters Scheduler Mode Controls whether the scheduler mode is "Strict Priority" or "Weighted" on this switch port. Queue Shaper Controls whether the queue shaper is enabled for this queue on this switch port.
  • Page 99: Qos Egress Port Shapers

    Falcon M-Class | User Guide Port Shaper Controls whether the port shaper is enabled for this switch port. Enable Port Shaper Controls the rate for the port shaper. The default value is . This value is restricted to 100-1000000 when the "Unit" is "kbps", and it is restricted Rate to 1-3300 when the "Unit"...
  • Page 100 Falcon M-Class | User Guide Figure 4-53: QoS Egress Port Scheduler and Shapers Configuration Table 4-51: QoS Egress Port Scheduler & Shapers Parameters Scheduler Mode Controls whether the scheduler mode is "Strict Priority" or "Weighted" on this switch port. Queue Shaper Controls whether the queue shaper is enabled for this queue on this switch port.
  • Page 101: Qos Egress Port Tag Remarking

    Falcon M-Class | User Guide Queue Shows the weight in percent for this queue. This parameter is only shown if "Scheduler Mode" is set to "Weighted". Scheduler Percent Port Shaper Controls whether the port shaper is enabled for this switch port. Enable Port Shaper Controls the rate for the port shaper.
  • Page 102 Falcon M-Class | User Guide Table 4-52: QoS Egress Port Tag Remarking Parameters Port The logical port for the settings contained in the same row. Click on the port number in order to configure the tag remarking. See example in picture above for port 6 Shows the tag remarking mode for this port.
  • Page 103: Qos Port Dscp Configuration

    Falcon M-Class | User Guide 4.8.7 Qos Port DSCP Configuration This section allows you to configure the basic QoS Port DSCP configuration settings for all switch ports. (Differentiated Services Code Point) is a field in the header of packets for packet DSCP classification purposes.
  • Page 104: Dscp Based Qos Ingress Classification

    Falcon M-Class | User Guide Save: Click to save changes. Buttons Reset: Click to undo any changes made locally and revert to previously saved values 4.8.8 DSCP Based QoS Ingress Classification This section allows you to configure the basic DSCP based QoS Ingress Classification settings for all switches...
  • Page 105 Falcon M-Class | User Guide Figure 4-56: DSCP Based QoS Ingress Classification Table 4-54: DSCP Based QoS Ingress Classification Parameters DSCP DSCP is an acronym for Differentiated Services Code Point. It is a field in the header of IP packets for packet classification purposes Maximum number of supported DSCP values is 64.
  • Page 106: Dscp Translation

    Falcon M-Class | User Guide 4.8.9 DSCP Translation This section allows you to configure the basic DSCP Translation settings for all switches. DSCP translation can be performed in Ingress or Egress...
  • Page 107 Falcon M-Class | User Guide Figure 4-57: DSCP Translation...
  • Page 108 Falcon M-Class | User Guide Table 4-55: DSCP Translation Parameters Maximum number of supported DSCP values is 64. and valid DSCP DSCP value ranges from 0 to 63. Ingress side DSCP can be first translated to new DSCP before Ingress using the DSCP for QoS class and DPL map.
  • Page 109: Qos Control List Configuration

    Falcon M-Class | User Guide 4.8.10 QoS Control List Configuration This section shows the QoS Control List (QCL), which is made up of the QCEs. Each row describes a QCE that is defined. The maximum number of QCEs is 256 on each switch. Click on the lowest plus sign to add a new QCE to the list.
  • Page 110: Qce Configuration

    Falcon M-Class | User Guide Button : The lowest plus sign adds a new QCE before the current row. Modification 4.8.11 QCE Configuration Note: by clicking on the sign in the previous QoS Control List Configuration display, we get the below QCE Configuration display, by means of which we can select the required QCE Parameters This section allows to edit/insert a single QoS Control Entry at a time.
  • Page 111 Falcon M-Class | User Guide Table 4-57: QCE Configuration Parameters Port Check the checkbox button to include the port in the QCL entry. By default all ports are included. Members Key configuration is described as below: DMAC: Type Destination MAC type: possible values are unicast(UC), Parameters multicast(MC), broadcast(BC) or 'Any'.
  • Page 112: Rate Limiters

    Falcon M-Class | User Guide Protocol IP protocol number: (0-255, TCP or UDP) or 'Any'. 6. IPv6 Source IP 32 LS bits of IPv6 source address in value/mask format or 'Any'. If a port is configured to match on DMAC/DIP, this field is the Destination IP address.
  • Page 113 Falcon M-Class | User Guide The dual leaky bucket implementation is named Two-rate Three Color Marker (TrTCM), for which configuration attributes are assigned: • CIR: Committed Information Rate: the rate in bits-per-second which the Policer is committed to pass through. •...
  • Page 114: Global Storm Policer Configuration

    Falcon M-Class | User Guide 4.8.13 Global Storm Policer Configuration Storm control prevents traffic on a LAN from being overloaded by a broadcast, multicast, or unknown-unicast storm. A LAN storm occurs when packets flood the LAN, creating excessive traffic and degrading network performance. Errors in the protocol-stack implementation, mistakes in network configuration, or users issuing a denial-of-service attack can cause a storm.
  • Page 115: Ethernet Services

    Falcon M-Class | User Guide Ethernet Services The Ethernet Services are delivered from UNI to UNI. An Ethernet Service is defined by an abstract construct called the Ethernet Virtual Connection (EVC).This page displays the current EVC port configurations The settings can also be implemented and configured here 4.9.1 EVC Port Configuration...
  • Page 116: L2Cp Port Configuration

    Falcon M-Class | User Guide 4.9.2 L2CP Port Configuration This section displays current EVC L2CP configurations. The settings can also be configured here MEF standards describe services provided to customers at User Network Interfaces (UNIs). Inside provider networks, nodes are connected using Internal Network-to-Network Interfaces (I-NNIs). Connections between service providers are done using External Network-to-Network Interfaces (E- NNIs).
  • Page 117: Bandwidth Profiles Configuration

    Falcon M-Class | User Guide Table 4-60: LCP2 Port Configuration parameters LCP2 Port Configuration The destination BPDU MAC addresses (01-80-C2-00-00-0X) and GARP (01- DMAC 80-C2-00-00-2X) MAC addresses for the settings contained in the same row. The L2CP mode for the specific port. The possible values are: LCP2 Mode Peer: Redirect to CPU to allow 18 peering/tunneling/discard depending on ECE and protocol configuration.
  • Page 118 Falcon M-Class | User Guide Table 4-61: Bandwidth Profiles Configuration parameters Start Policer ID The start Policer ID displays the table entries. The allowed range is from 1 through 256. Number of Entries The number of entries per page. The allowed range is from 2 through Policer ID The Policer ID is used to identify one of the 256 policers.
  • Page 119: Evc Control List Configuration

    Falcon M-Class | User Guide 4.9.4 EVC Control List Configuration This section displays current EVC configurations. On this system, only Provider Bridge based EVCs are supported. An Ethernet virtual connection (EVC) is a logical relationship between Ethernet user-to-network interfaces (UNI) in a provider Ethernet service. When such service provider offers a Metro Ethernet service that is compliant with the Metro Ethernet Forum (MEF) specifications, the service has two basic elements: the UNI by which the service is provided to the customer, and an EVC that establishes a communication relationship between one...
  • Page 120 Falcon M-Class | User Guide Table 4-62: EVC Control List Configuration Parameters EVC ID The EVC ID identifies the EVC. The range is from 1 through 128. The VLAN ID in the PB network. It may be inserted in a C-tag, S-tag or S-custom tag depending on the NNI port VLAN configuration.
  • Page 121: Evc Configuration

    Falcon M-Class | User Guide 4.9.5 EVC Configuration This section displays current EVC configurations. The settings can also be configured here Figure 4-66: EVC Configuration displays Table 4-63: EVC Parameters EVC Configuration The list of Network to Network Interfaces for the EVC NNI Ports EVC Parameters The EVC ID identifies the EVC.
  • Page 122 Falcon M-Class | User Guide The learning mode for the EVC controls whether source MAC addresses Learning are learned for frames matching the EVC. Learning may be disabled if the EVC only includes two UNI/NNI ports. The possible values are: Enabled: Learning is enabled (MAC addresses are learned).
  • Page 123: Ece Control List Configuration

    Falcon M-Class | User Guide 4.9.6 ECE Control List Configuration This section displays the current EVC Control Entries (ECEs). The settings can also be configured here. Figure 4-67: ECE Control List Configuration Table 4-64: ECE Control List Parameters ECE ID The ECE ID identifies the ECE (EVC Control Entry).
  • Page 124 Falcon M-Class | User Guide Actions Direction The EVCs and ECEs are used to setup flows in one or both directions as determined by the ECE Direction parameter. If the ECE is bidirectional, the ingress rules of the NNI ports will be setup to match the traffic being forwarded to NNI ports.
  • Page 125: Ece Configuration

    Falcon M-Class | User Guide 4.9.7 ECE Configuration This section displays current ECE configurations. The settings can also be configured here. Figure 4-68: ECE Configuration...
  • Page 126 Falcon M-Class | User Guide Table 4-65: ECE Configuration Parameters UNI Ports The list of User Network Interfaces for the ECE Ingress Matching The tag type for the ECE. The possible values are: Tag Type Any: The ECE will match both tagged and untagged frames Untagged: The ECE will match untagged frames only C-Tagged: The ECE will match custom tagged frames only.
  • Page 127: Evc Statistics

    Falcon M-Class | User Guide The destination MAC address type for matching the ECE. The possible values DMAC Type are: Any: No DMAC tyoe is specified. (DMAC filter status is "don't-care".) Unicast: Frame must be unicast. Multicast: Frame must be multicast. Broadcast: Frame must be broadcast.
  • Page 128 Falcon M-Class | User Guide Table 4-66: EVC Statistics Parameters Class The traffic class for the EVC. Rx Green The number of green received. Tx Green The number of green transmitted. Rx Yellow The number of yellow received. Tx Yellow The number of yellow transmitted.
  • Page 129: Security Features

    Falcon M-Class | User Guide 4.10 Security Features M-Class series enables a set of security features. Security is realized by several different mechanisms included in the Switch and Network sections 4.10.1 Switch The Switch section contains the following sub-sections: User Configuration Privilege Level Configuration Authentication Method Configuration SSH Configuration...
  • Page 130 Falcon M-Class | User Guide Marcello is a new added User with privilege level 10 By clicking on “Marcello” user you get the following edit display which can be modified: By clicking on “Add New User” on the previous User configuration display, you may add a new user Refer to below display Figure 4-71: Add/Edit User Configurations Table 4-68: Add/Edit User Configuration Parameters...
  • Page 131 Falcon M-Class | User Guide Buttons Add New User : Click to add a new user Marcello is a new added User with privilege level 10 4.10.1.2 Privilege Level Configuration This subsection provides an overview of the privilege levels. Privilege Level Configuration...
  • Page 132 Falcon M-Class | User Guide Figure 4-72: Privilege Level Configuration Table 4-69: Privilege Configuration Level Parameters Group Name The name identifying the privilege group. In most cases, a privilege level group consists of a single module (e.g. LACP, RSTP or QoS), but a few of them contains more than one.
  • Page 133 Falcon M-Class | User Guide 4.10.1.3 Authentication Method Configurations This subsection allows you to configure how a user is authenticated when he logs into the switch via one of the management client interfaces. The figure has one row for each client type and a number of columns.
  • Page 134 Falcon M-Class | User Guide Table 4-70: Authentication Method Configurations Parameters Authentication Method Configuration Client The management client for which the configuration below applies. Authentication Method can be set to one of the following values: Authentication Method • none: authentication is disabled and login is not possible. •...
  • Page 135 Falcon M-Class | User Guide Cmd Lvi Enable accountimg of all all commands with a privilege level higher than or equal to this level. Valid values are in the range 0 to 15. Leave the field empty to disable command accounting. Exec Enable exec (login) accounting.
  • Page 136 Falcon M-Class | User Guide 4.10.1.5 HTTPS Configuration HTTP is an acronym for Hypertext Transfer Protocol. It is a protocol that used to transfer or convey information on the World Wide Web (WWW). HTTP defines how messages are formatted and transmitted, and what actions Web servers and browsers should take in response to various commands.
  • Page 137 Falcon M-Class | User Guide Upload: Upload a certificate PEM file. Possible methods are: Web Browser or URL. Generate: Generate a new self-signed RSA certificate Certificate Enter the pass phrase in this field if your uploading certificate is protected by a specific passphrase. Pass Phrase By choosing the Upload option in the Certificate Maintain, the following display is shown, the parameters of which are explained below...
  • Page 138 Falcon M-Class | User Guide 4.10.1.6 Access Management Configuration In this subsection, you may configure the access management configuration. The maximum number of entries is 16. If the application's type match any one of the access management entries, it will allow access to the switch. Figure 4-76: Access Management Configuration display Table 4-73: Access Management Configuration parameters Mode...
  • Page 139 Falcon M-Class | User Guide...
  • Page 140 Falcon M-Class | User Guide 4.10.1.7 Access Management Statistics This sub-section provides statistics for selected access management Figure 4-77: Access Management Statistics display Table 4-74: Access Management Statistics Parameters Interface The interface type through which the remote host can access the switch. Received Number of received packets from the interface when access Packets...
  • Page 141: Network Security

    Falcon M-Class | User Guide 4.10.2 Network Security The Network Security includes the following subjects: • MAC Limit • Port Security switch and Port Security port status • Network Access Server (NAS) • Access Control List.(ACL) • IP Source Guard ARP Inspection 4.10.2.1 MAC Limit Configuration This section allows you to configure the MAC Limit Control system and port settings.
  • Page 142 Falcon M-Class | User Guide Table 4-75: System and Port Configuration Parameters System Configuration Mode Indicates if Limit Control is globally enabled or disabled on the switch. If globally disabled, other modules may still use the underlying functionality, but limit checks and corresponding actions are disabled. Aging If checked, secured MAC addresses are subject to aging as discussed under Aging Period...
  • Page 143 Falcon M-Class | User Guide If Limit is reached, the switch can take one of the following actions: Action None : Do not allow more than Limit MAC addresses on the port, but take no further action. Trap : If Limit + 1 MAC addresses is seen on the port send an SNMP trap. If Aging is disabled, only one SNMP trap will be sent, but with Aging enabled, new SNMP traps will be sent every time the limit gets exceeded.
  • Page 144 Falcon M-Class | User Guide 4.10.2.2 Port Security Switch Status This section shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the port is set-up for software-based learning.
  • Page 145 Falcon M-Class | User Guide Table 4-76: System and Port Configuration Parameters . User Module Legend User Module The full name of a module that may request Port Security services. Name Abbr A one-letter abbreviation of the user module. This is used in the Users column in the port status table.(see below) .
  • Page 146 Falcon M-Class | User Guide 4.10.2.3 Port Security Port Status This section shows the MAC addresses secured by the Port Security module. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules - the user modules.
  • Page 147 Falcon M-Class | User Guide 4.10.2.4 Network Access Server Configuration This page allows you to configure the IEEE 802.1X and MAC-based authentication system and port settings. The IEEE 802.1X standard defines a port-based access control procedure that prevents unauthorized access to a network by requiring users to first submit credentials for authentication. One or more central servers, the backend servers, determine whether the user is allowed access to the network.
  • Page 148 Falcon M-Class | User Guide Table 4-78: Network Access Server Configuration Parameters System Configuration Mode Indicates if NAS is globally enabled or disabled on the switch If globally disabled, all ports are allowed forwarding of frames. Reauthentication If checked, successfully authenticated supplicants/clients are reauthenticated after the interval specified by the Reauthentication Enabled Period.
  • Page 149 Falcon M-Class | User Guide Hold Time This setting applies to the following modes, i.e. modes using the Port Security functionality to secure MAC addresses: • Single 802.1X • Multi 802.1X • MAC-Based Auth. If a client is denied access - either because the RADIUS server denies the client access or because the RADIUS server request times out (according to the timeout specified on the "Configuration→Security→AAA") the client is put on hold in the...
  • Page 150 Falcon M-Class | User Guide Max. Reauth. The number of times the switch transmits an EAPOL Request Identity frame without response before considering entering the Guest VLAN is Count adjusted with this setting. The value can only be changed if the Guest VLAN option is globally enabled.
  • Page 151 Falcon M-Class | User Guide 3.Port-based In the 802.1X-world, the user is called the supplicant, the switch is the authenticator, and the RADIUS server is the authentication server. The 802.1X authenticator acts as the man-in-the-middle, forwarding requests and responses between the supplicant and the authentication server. Frames sent between the supplicant and the switch are special 802.1X frames, known as EAPOL (EAP Over LANs) frames.
  • Page 152 Falcon M-Class | User Guide 5.Multi 802.1X Multi 802.1X is - like Single 802.1X - not an IEEE standard, but a variant that features many of the same characteristics. In Multi 802.1X, one or more supplicants can get authenticated on the same port at the same time.
  • Page 153 Falcon M-Class | User Guide RADIUS- When RADIUS-Assigned QoS is both globally enabled and enabled (checked) on a given port, the switch reacts to QoS Class information Assigned QoS carried in the RADIUS Access-Accept packet transmitted by the RADIUS Enabled server when a supplicant is successfully authenticated.
  • Page 154 Falcon M-Class | User Guide RADIUS- When RADIUS-Assigned VLAN is both globally enabled and enabled (checked) for a given port, the switch reacts to VLAN ID information Assigned VLAN carried in the RADIUS Access-Accept packet transmitted by the RADIUS Enabled server when a supplicant is successfully authenticated.
  • Page 155 Falcon M-Class | User Guide Guest VLAN When Guest VLAN is both globally enabled and enabled (checked) for a given port, the switch considers moving the port into the Guest VLAN Enabled according to the rules outlined below. This option is only available for EAPOL-based modes, i.e.: •...
  • Page 156 Falcon M-Class | User Guide Restart Two buttons are available for each row. The buttons are only enabled when authentication is globally enabled and the port's Admin State (Refer to beginning of Port Configuration above)is in an EAPOL-based or MAC-based mode.( Refer to f Port Configuration above) Clicking these buttons will not cause settings changed on the page to take effect.
  • Page 157 Falcon M-Class | User Guide Last Source The source MAC address carried in the most recently received EAPOL frame for EAPOL-based authentication, and the most recently received frame from a new client for MAC-based authentication Last ID The user name (supplicant identity) carried in the most recently received Response Identity EAPOL frame for EAPOL-based authentication, and the source MAC address from the most recently received frame from a new client for MAC-based authentication...
  • Page 158 Falcon M-Class | User Guide 4.10.2.6 NAS Port Statistics This section provides detailed NAS statistics for a specific switch port running EAPOL-based IEEE 802.1X authentication. For MAC-based ports, it shows selected backend server (RADIUS Authentication Server) statistics only. Use the port select box to select which port details to be displayed. Figure 4-83: NAS Port Statistics Table 4-80: NAS Port Parameters Port State...
  • Page 159 Falcon M-Class | User Guide EAPOL Counters Direction Name IEEE Name Description The number of valid EAPOL frames of any Total dot1xAuthEapolFramesRx type that have been received by the switch. The number of valid EAPOL Response Identity dot1xAuthEapolRespIdFra Response ID frames that have been received by the mesRx switch.
  • Page 160 Falcon M-Class | User Guide Backend Server Counters These backend (RADIUS) frame counters are available for the following administrative states: • Port-based 802.1X • Single 802.1X • Multi 802.1X • MAC-based Auth Backend Server Counters Direct Name IEEE Name Description 802.1X-based: Counts the number of times that the switch receives the first request from...
  • Page 161 Falcon M-Class | User Guide not authenticated to the backend server. 802.1X-based: Counts the number of times that the switch attempts to send a supplicant's first response packet to the backend server. Indicates the switch attempted communication with the backend server.
  • Page 162 Falcon M-Class | User Guide Last Supplicant/ Client Info Last Supplicant/Client Info Information about the last supplicant/client that attempted to authenticate. This information is available for the following administrative states: (Refer to section 4.9.2.2 Port Configuration) • Port-based 802.1X • Single 802.1X •...
  • Page 163 Falcon M-Class | User Guide Identity Shows the identity of the supplicant, as received in the Response Identity EAPOL frame. Clicking the link causes the supplicant's EAPOL and Backend Server counters to be shown in the Selected Counters table. If no supplicants are attached, it shows No supplicants attached.
  • Page 164 Falcon M-Class | User Guide 4.10.2.7 ACL Ports Configuration Configure the ACL Parameters (ACE) of each switch port. These Parameters will affect frames received on a port unless the frame matches a specific ACE. Note: for an detailed explanation of ACL and ACE terms, refer to the Glossary of Terms at the end of this manual Figure 4-84: ACL Port Configuration Table 4-81: ACL Port Configuration Parameters...
  • Page 165 Falcon M-Class | User Guide Specify the logging operation of this port. The allowed values are: Logging Enabled: Frames received on the port are stored in the System Log. Disabled: Frames received on the port are not logged. The default value is "Disabled". Please note that the System Log memory size and logging rate is limited.
  • Page 166 Falcon M-Class | User Guide 4.10.2.8 Configuration Configure the rate limiter for the ACL of the switch. Figure 4-85: ACL Rate Limiter Configuration Table 4-82: ACL Rate Limiter Parameters Rate Limiter ID The rate limiter ID for the settings contained in the same row. and its range is 1 to 16.
  • Page 167 Falcon M-Class | User Guide 4.10.2.9 Access Control List Configuration This section shows the Access Control List ( ), which is made up of the ACEs defined on this switch. Each row describes the ACE that is defined. The maximum number of ACEs is 256 on each switch.
  • Page 168 Falcon M-Class | User Guide Mirror Specify the mirror operation of this port. Frames matching the ACE are mirrored to the destination mirror port. The allowed values are: Enabled: Frames received on the port are mirrored. Disabled: Frames received on the port are not mirrored. The default value is "Disabled Counter The counter indicates the number of times the ACE was hit by a frame.
  • Page 169 Falcon M-Class | User Guide Figure 4-87: ACE Configuration displays Table 4-84: ACL Configuration Parameters ACE Configuration Ingress Port Select the ingress port for which this ACE applies. All: The ACE applies to all port. Port : The ACE applies to this port number, where is the number of the switch port.
  • Page 170 Falcon M-Class | User Guide Shutdown Specify the port shut down operation of the ACE. The allowed values are: Enabled: If a frame matches the ACE, the ingress port will be disabled. Disabled: Port shut down is disabled for the ACE. Note: The shutdown feature only works when the packet length is less than 1518(without VLAN tags).
  • Page 171 Falcon M-Class | User Guide 4.10.2.11 ACL Status This section shows the ACL status by different ACL users. Each row describes the that is defined. It is a conflict if a specific ACE is not applied to the hardware due to hardware limitations. The maximum number of ACEs is 256 on each switch.
  • Page 172 Falcon M-Class | User Guide Counter The counter indicates the number of times the ACE was hit by a frame. Indicates the hardware status of the specific ACE. The specific ACE is not Conflict applied to the hardware due to hardware limitations. The select box determines which ACL user is affected by clicking the Buttons buttons...
  • Page 173 Falcon M-Class | User Guide 4.10.2.12 IP Source Guard Configuration IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host.
  • Page 174 Falcon M-Class | User Guide Save: Click to save change Buttons Reset: Click to undo any changes made locally and revert to previously saved values Translate dynamic to static: Click to translate all dynamic entries to static entries. 4.10.2.13 Static IP Source Guard Table Figure 4-90: Static IP Source Guard Table Table 4-87: IP Source Guard Table Parameters Delete...
  • Page 175 Falcon M-Class | User Guide 4.10.2.14 Dynamic IP Source Guard Table Entries in the Dynamic IP Source Guard Table are shown on this page. The Dynamic IP Source Guard Table is sorted first by port, then by VLAN ID, then by IP address, and then by MAC address Navigating the IP Source Guard Table Each page shows up to 99 entries from the Dynamic IP Source Guard table, default being 20, selected through the "entries per page"...
  • Page 176: Address Resolution Protocol

    Falcon M-Class | User Guide Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Refresh: Refreshes the displayed table starting from the input fields. Clear: Flushes all dynamic entries <<: Updates the table starting from the first entry in the Dynamic IP Source Guard Table >>: Updates the table, starting with the entry after the last entry currently displayed...
  • Page 177 Falcon M-Class | User Guide Figure 4-92 : ARP Configurations displays Table 4-89::ARP Configuration displays Parameters ARP Inspection Configuration Mode of ARP Enable the Global ARP iInspection or disable the Global ARP Inspection Inspection Configuration Port Mode Configuration...
  • Page 178 Falcon M-Class | User Guide Port Mode Specify ARP Inspection is enabled on which ports. Only when both Global Mode and Port Mode on a given port are Configuration enabled, ARP Inspection is enabled on this given port. Possible modes are: Enabled: Enable ARP Inspection operation Disabled: Disable ARP Inspection operation.
  • Page 179 Falcon M-Class | User Guide 4.10.3.2 VLAN Mode Configuration This section provides ARP enabled on which VLAN. Figure 4-93: VLAN Mode Configurations display Table 4-90: VLAN Mode Configuration Parameters VLAN Mode Configuration Specify ARP Inspection is enabled on which VLANs. First, you have to enable the port setting on Port mode configuration web page.
  • Page 180 Falcon M-Class | User Guide 4.10.3.3 Static ARP Inspection Table This page shows the static ARP Inspection rules. The maximum number of rules is 256 on the switch. Figure 4-94: Static ARP Inspection Table display Table 4-91: Static ARP Inspection Table parameters Static ARP Inspection Table Delete Check to delete the entry.
  • Page 181 Falcon M-Class | User Guide Figure 4-95: Dynamic ARP Inspection Table display Table 4-92: Dynamic ARP Inspection Table parameters Dynamic ARP Inspection Table Port Switch Port Number for which the entries are displayed VLAN ID VLAN-ID in which the ARP traffic is permitted. MAC Address User MAC address of the entry IP Address...
  • Page 182: Authentication Server Configuration (Aaa)

    Falcon M-Class | User Guide 4.10.4 Authentication Server Configuration (AAA) This section allows to configure the various Authentication Servers 4.10.4.1 Radius Server Configuration This section allows you to configure the servers RADIUS Figure 4-96: Radius: Server Configuration Table 4-93: Radius: Server Configuration Parameters Global Configuration Timeout Timeout is the number of seconds, in the range 1 to 1000, to wait for a...
  • Page 183 Falcon M-Class | User Guide NAS IP Address The IPv4 address to be used as attribute 4 in RADIUS Access-Request (Attribute 4) packets. If this field is left blank, the IP address of the outgoing interface is used. NAS IPv6 Address The IPv6 address to be used as attribute 95 in RADIUS Access-Request (Attribute 95) packets.
  • Page 184 Falcon M-Class | User Guide 4.10.4.2 Radius Server Status Overview This page provides an overview of the status of the RADIUS servers configurable on the Global and Server configurations Figure 4-97: RADIUS: Server Status Overview Table 4-94: RADIUS: Server Status Overview parameters RADIUS Servers The RADIUS server number.
  • Page 185 Falcon M-Class | User Guide 4.10.4.3 TACACS+ Sever Configuration This page allows you to configure the TACACS+ servers. TACACS+ is an acronym for Terminal Acess Controller Access Control System Plus. It is a networking protocol which provides access control for routers, network access servers and other networked computing devices via one or more centralized servers.
  • Page 186 Falcon M-Class | User Guide Port The UDP port to use on the TACACS+ server for authentication. This optional setting overrides the global timeout value. Timeout Leaving it blank will use the global timeout value. This optional setting overrides the global key. Leaving it blank will use the global key Adding a New Server Click Add New Server to add a new TACACS+ server...
  • Page 187 Falcon M-Class | User Guide Figure 4-99: RADIUS Statistics for Server...
  • Page 188 Falcon M-Class | User Guide Table 4-96: RADIUS Statistics for Server Parameters RADIUS Authentication Statistics RFC4668 - RADIUS Authentication Client MIB The statistics map closely to those specified in Use the server select box to switch between the backend servers to show details for. RADIUS authentication server packet counter.
  • Page 189 Falcon M-Class | User Guide The number of RADIUS Access-Request Access radiusAuthClientExtAccess packets retransmitted to the RADIUS Retransmissio Retransmissions authentication server. The number of RADIUS Access-Request packets destined for the server that have not yet timed out or received a radiusAuthClientExtPendingReque response.
  • Page 190 Falcon M-Class | User Guide RADIUS Accounting Statistics RFC4670 - RADIUS Accounting The statistics map closely to those specified in Client MIB. Use the server select box to switch between the backend servers to show details for. RADIUS accounting server packet counter. Packet Counters There are five receive and four transmit counters...
  • Page 191 Falcon M-Class | User Guide The number of RADIUS Retransmissio radiusAccClientExtRetransmissions packets retransmitted to the RADIUS accounting server. The number of RADIUS packets destined for the server that have not yet timed out or received a Pending radiusAccClientExtPendingRequests response. This variable is Requests incremented when a Request is sent and decremented due...
  • Page 192 Falcon M-Class | User Guide expires. The number of seconds left before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled. The time interval (measured in milliseconds) between the most recent Response and the Request that Round- matched it from the RADIUS accounting server.
  • Page 193: Synccenter Configuration

    SyncE, PTP, GPS, TDM and External .The SyncCenter will output the required sync clock according to reference quality and priority Note:Refer to n “ ” to find out which Fibrolan units Fibrolan Falcon Products Matrix”2016 support the SyncCenter Block Diagram...
  • Page 194: Synccenter

    Falcon M-Class | User Guide 4.11.1 SyncCenter Table 4-97: Sync Center parameters SyncCenter Visualization of sources feeding the system. A green arrow indicates the Input arrows source is currently selected. The OCXO is the main clock for the Sync Center It will be synchronized to any input clock SyncCenter Provides a visual indication of the current system clock status: Green indicates...
  • Page 195: Sync Center Configuration

    Falcon M-Class | User Guide Save: Click to save changes Buttons Refresh: Click to refresh the page immediately. Monitor: Direct link to the SyncCenter monitoring page. 4.11.3 Sync Center Configuration This section allows the implementation of different settings Figure 4-102: SyncCenter Configuration Table 4-99: SyncCenter Configuration parameters SyncCenter Configuration Allow selection of the required system’s synchronization mode...
  • Page 196: Sync Output

    Falcon M-Class | User Guide Manual State The status of the sync source. When the source provides a valid reference clock, this indicator will be Green. When source is disabled or not applicable, indicator will be Grey. Manual Indicates the sync source's current (clock) quality (QL) as received from the source (e.g. via SSM).
  • Page 197: Synccenter Status

    Falcon M-Class | User Guide 4.11.6 SyncCenter Status Figure 4-104: Sync Center Status...
  • Page 198 Falcon M-Class | User Guide Table 4-101: Sync Center Status parameters Sync Output State Shows the current system's overall synchronization state (e.g. Locked). The state is also evident in the color of the SyncCenter main block diagram. Green indicates system is locked to a sync source, Blue indicates the system is in Holdover state and Yellow indicates Free-running (internal clock) state.
  • Page 199: Synccenter Monitoring

    Falcon M-Class | User Guide 4.12 SyncCenter Monitoring This session allows us to monitor and view the status of the SyncCenter Figure 4-105: Monitoring Sync Center Status displays The following displays allow us to monitor the Sync Center status and activity 4.12.1 SyncCenter Table 4-102: SyncCenter parameters...
  • Page 200: Sync Source Status

    Falcon M-Class | User Guide 4.12.2 Sync Source Status Figure 4-106: Sync Source Status Table 4-103: Sync Source status parameters Sync Source Indicates the sync source priority (1 is highest). Prio Shows which sync source is enabled or disabled. Show the type of sync source. Available options depend on model and Type may include: SyncE, PTP, GPS, TDM and External.
  • Page 201: Synccenter Status

    Falcon M-Class | User Guide Table 4-104: SyncCenter parameters SyncCenter Configuration Shows the current system's overall synchronization mode: Mode Auto Non-Revertive: source is automatically selected based on priority and state. When higher priority source that previously failed, is valid again, no switchover will take place.
  • Page 202: Sync Output

    Falcon M-Class | User Guide Figure 4-108: SyncCenter Status Table 4-105: SyncCenter Status parameters SyncCenter Status Shows the current system's overall synchronization state (e.g. Locked). State The state is also evident in the color of the SyncCenter main block diagram Indicates the sync source (type and port/instance) the system is currently Locked to locked to (e.g.
  • Page 203 Falcon M-Class | User Guide Configuration: Direct link to the SyncCenter configuration page Buttons Refresh: Click to refresh the page immediately. Auto-refresh Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.. GPS Config: click on it,you will go to GPS Configuration Special Buttons Other Buttons: Direct link to relevant pages.
  • Page 204: External Configuration

    Falcon M-Class | User Guide 4.13 External Configuration Note: Refer to section “ ” to find out which Fibrolan Fibrolan Falcon Products Matrix”2016 units support this subject Figure 4-110: External Clock Configuration Table 4-107: External Clock Configuration parameters Port Indicates sync port number.
  • Page 205 Falcon M-Class | User Guide Set the clock quality (QL) when used as an input. This quality will be used (i.e. Quality distributed) when the system is synchronized to this sync port. Quality Clock Level options: QL-PRC (For Primary Reference Clock accuracy) QL-SSU-A (For Synchronization Supply Unit-A accuracy) QL-SSU-B (For Synchronization Supply Unit-B accuracy) QL-EEC1 (For Ethernet Equipment Clock 1 accuracy)
  • Page 206: Gps Receiver

    This section shows the various GPS displays and their functionality.receiver GPS Configuration This section displays the configuration and status info of the GPS receiver. Note:Refer to “ document to find out which Fibrolan Fibrolan Falcon Products Matrix”2016” units support this subject Figure 4-111: GPS Displays 4.14.1...
  • Page 207 Falcon M-Class | User Guide Table 4-108: GPS Antenna Cable Configuration parameters Type Set the type of cable being used for the GPS antenna. When Maual is selected , it is possible to directly configure the cable delay Cable type:RG58, RG6,LMR400, LMR600 OR OTHER Velocity Factor Set the Velocity Factor (VF) of the antenna cable.
  • Page 208: Gps Status

    Falcon M-Class | User Guide 4.14.2 GPS Status Figure 4-113: GPS Status Table 4-109: GPS Status parameters GPS Status Indicates the overall status of the GPS receiver (e.g. Doing Fixes). Status Indicates the current date as received by the GPS. Date Indicates the current time of day as received by the GPS.
  • Page 209: Monitoring Gps Status

    Falcon M-Class | User Guide PPS Not Gen When it lights red the GPS cannot generate 1PPS signal. Refresh: Click to refresh the page immediately. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Clear : Click to clear current status.
  • Page 210: Satellite Status

    Falcon M-Class | User Guide Table 4-112: GPS Alarms parameters GPS Alarms When it lights red there is no antenna or the cable is not connected Ant Open When it lights red there is a short on the antenna cable or in the antenna itself. Ant Shorted No Satellites When it lights red the GPS can see no satellites.
  • Page 211: Gps Antenna Cable Status

    Falcon M-Class | User Guide Table 4-113: Satellite Staus parameters Satellite Status The PRN (satellite number) of the tracked satellites. Satellite PNR The satellite's received signal level in terms of Carrier to Noise ratio [dB- Signal Level Hz]. The accompanying LED indicates whether the satellite receive level is good (green) or fair (orange).
  • Page 212: Sky View

    Falcon M-Class | User Guide 4.14.8 Sky View This section displays the current sky map of the GPS receiver tracked satellites. Figure 4-119: Sky view display Table 4-115: Sky View parameters GPS Sky View Displays the sky view of the tracked satellites. The azimuth angle is the angle between the North ('N') and radial on which the satellite is displayed.
  • Page 213: Satellite Count

    Falcon M-Class | User Guide 4.14.9 Satellite Count This section displays a graph of the tracked satellites count. Figure 4-120: Satellite Count display Table 4-116 Satellite Count parameters GPS Satellite Count The type of cable being used for the GPS antenna. Satellite Count Selection of type of graph to show: Graph type...
  • Page 214 Falcon M-Class | User Guide...
  • Page 215: 4.14.10 Rubidium Module

    Rubidium Module Info Module Type Indicates the type of the module. Module P/N Indicates the Fibrolan Part Number of the module Module S/N Indicates the Fibrolan Serial Number of the module Module H/W Indicates the Hardware revision of the module.
  • Page 216 Falcon M-Class | User Guide Module Status Plugged In Indicates whether the Rb module is plugged into the system or not. Indicates whether the Rb clock has achieved an internal atomic locked Locked state (different than system lock to GPS). State Indicates the current state of the Rb module Current...
  • Page 217: Ieee1588 Precision Time Protocol

    If Auto non-revertive mode is selected and a secondary clock source is active (due to a previous degradation of the primary clock source), the primary clock source is not reactivated even after its quality has been improved. Note:Refer to “ ” document to find out which Fibrolan Fibrolan Falcon Products Matrix”2016 units support this subject...
  • Page 218 Falcon M-Class | User Guide Methods of Operation Note: the following modes of operation can be selected under SyncCenter Configuration Auto Revertive: In this mode, the highest priority qualified reference clock is selected. If this selected clock fails or it is degraded, the next priority qualified clock is selected and the lock acquisition will begin.
  • Page 219: Ptp External Clock Mode

    Falcon M-Class | User Guide 4.15.1 PTP External Clock Mode This section allows the user to configure the PTP External clock mode settings Figure 4-122: PTP External Clock Mode Table 4-118: PTP External Clock Configuration Parameters PTP External Clock Configuration One_pps_mode This Selection box will allow you to select the One_pps_mode configuration.
  • Page 220: Ptp Clock Configuration

    Falcon M-Class | User Guide 4.15.2 PTP Clock Configuration This section allows the user to configure the PTP clock configuration settings Figure 4-123: PTP Clock Configuration Note: By clicking on PTP Config/“Add New PTP Clock” you get the following additional display Figure 4-124: PTP Clock expanded Configuration display Table 4-119: PTP Clock Configuration Parameters (for both above displays)
  • Page 221 Falcon M-Class | User Guide Cloxk Type Indicates the Type of the Clock Instance. There are five Device Types: 1.Boundary - clock's Type is Ordinary-Boundary Clock. 2. Transparent (P2P) - clock's Type is Peer to Peer Transparent Clock. 3. Transparent (E2E) - clock's Type is End to End Transparent Clock. 4.
  • Page 222 Falcon M-Class | User Guide VLAN Tag Enable Enables the VLAN tagging for the PTP frames. Note: Packets are only tagged if the port is configured for vlan tagging for the configured VLAN.i.e the VLAN Tag Enable parameter is ignored: VLAN Identifier used for tagging the PTP frames.
  • Page 223: Ptp Monitoring

    Falcon M-Class | User Guide 4.15.3 PTP Monitoring This section allows the user to inspect the current PTP clock settings Two status displays are shown: PTP External Clock Mode PTP Clock Configuration 4.15.3.1 PTP External Clock Mode Figure 4-125: PTP External Clock Mode Table 4-120: PTP External Clock mode parameters PTP External Clock Mode Shows the current configured One_pps_mode.
  • Page 224 Falcon M-Class | User Guide 4.15.3.2 PTP Clock Configuration Figure 4-126: PTP Clock Configuration Table 4-121: PTP Clock Configuration Parameters PTP Clock Configuration Indicates the Instance of a particular Clock Instance [0...3]. Clock Click on the Clock Instance number to monitor the Clock details. Instance Clock Type Indicates the Type of the Clock Instance.
  • Page 225 Falcon M-Class | User Guide 4.15.3.3 PTP Slave Table This section shows the Ptp Slave Table Figure 4-127: PTP Slave Table Table 4-122: PTP Slave Table Parameters PTP Slave Table Indicates the port number of the slave device IP Address Indicates the IP address of the slave device MAC Address Indicates the MAC address of the slave device...
  • Page 226: Synchronous Ethernet (Synce)

    The device internal state logic (clock selector) monitors all reference clocks and automatically selects the best available reference clock based on configured priority and revertive priorities. Note:Refer to section ” to find out which Fibrolan “Fibrolan Falcon Products Matrix”2016 units support this subject...
  • Page 227 Falcon M-Class | User Guide...
  • Page 228: Synce Ethernet Port Configuration

    Falcon M-Class | User Guide SyncE Basic mechanism The master switch receives the external clock which is a high precision clock. In a synchronous Ethernet network, Ethernet data is carried over layer 2 whereas the sync timing signals over physical layer 1. All internal clocks should be synchronized by the external reference clock.
  • Page 229 Falcon M-Class | User Guide Figure 4-129: SyncE Ethernet Port Configuration- second display Table 4-123: PTP Clock Configuration Parameters Ethernet Port Configuration Indicates Ethernet port list The Auto-negotiation operating mode (master or slave, in the SyncE context) 1000BaseT of the port. Applicable to fixed Copper ports only, operating in 1000BaseT AutoNego Mode mode.
  • Page 230 Falcon M-Class | User Guide This quality (QL) value will be used as the received SSM quality, when no SSM SSM RX Default messages are received on the port.Quality Level options are: QL-PRC (For Primary Reference Clock accuracy) QL-SSU-A (For Synchronization Supply Unit-A accuracy) QL-SSU-B (For Synchronization Supply Unit-B accuracy) QL-SEC (For SDH Equipment Clock accuracy) QL-EEC1 (For Ethernet Equipment Clock 1 accuracy)
  • Page 231: Spanning Tree

    Falcon M-Class | User Guide 4.17 Spanning Tree Spanning Tree Protocol was developed in order to protect Ethernet networks from the bad effects of network loops: a loop is a circular path in the network which causes frame storms that overloads the Ethernet network.
  • Page 232 Falcon M-Class | User Guide If another RSTP device receives this information and determines that this is the superior root information, it starts a synchronizing operation to ensure all of its ports are in sync with the new information. This device may send an “agreement” to the first RSTP device confirming its superior spanning tree information.
  • Page 233 Falcon M-Class | User Guide VLANs in the region except those VLANs assigned to MSTI. In all µFalcon models, the IST instance is not supported. The CISTI performs the functions of the IST instance • Multiple Spanning Tree Instance (MSTI). This type of configurable STP instance includes assigned VLANs which operate as part of the same single spanning tree topology.
  • Page 234 Falcon M-Class | User Guide...
  • Page 235: Bridge Settings

    Falcon M-Class | User Guide 4.17.2 Bridge settings Spanning Tree protocol version (STP, RSTP or MSTP) is selected according to the networking environment. M-Class series devices allows STP, RSTP, MSTP system settings configuration as detailed below. Figure 4-130: STP Bridge Configuration Table 4-124: STP Bridge Configuration Parameters Basic Settings Protocol...
  • Page 236 Falcon M-Class | User Guide Transmit Hold The number of BPDU's a bridge port can send per second. Count When exceeded, transmission of the next BPDU will be delayed. Valid values are in the range 1 to 10 BPDU's per second. Advanced Settings explicitly Edge Port...
  • Page 237: Msti Configuration

    Falcon M-Class | User Guide 4.17.3 MSTI Configuration This section allows the user to inspect the current STP MSTI bridge instance (group of VLANs) priority configurations, and possibly change them as well. Add VLANs separated by spaces or comma. Figure 4-131: MSTI Configuration Table 4-125: MSTI Configuration Parameters Configuration Identification Configuration...
  • Page 238: Msti Priority Configuration

    Falcon M-Class | User Guide 4.17.4 MSTI Priority Configuration The user is allowed to inspect the current STP MSTP bridge instance priority configurations and possibly change them as well Figure 4-132: STP MSTI Priority Configuration Table 4-126: STP MSTI Priority Configuration Parameters MSTI The bridge instance (group of VLANs).
  • Page 239: Cist Port Configuration

    Falcon M-Class | User Guide 4.17.6 CIST Port Configuration The user is allowed to inspect the current STP CIST port configurations, and possibly change them as well. This section contains settings for physical and aggregated ports. Figure 4-133: CIST Port Configuration displays Table 4-127: CIST Port Configuration displays Parameters CIST Aggregated and Normal Port Configurations Port...
  • Page 240 Falcon M-Class | User Guide OperEdge Operational flag describing whether the port is connecting directly to edge (state flag) devices. (No Bridges attached). operEdge Transitioning to the forwarding state is faster for edge ports (having true) than for other ports. The value of this flag is based on AdminEdge and AutoEdge fields.
  • Page 241: Msti Port Configuration

    Falcon M-Class | User Guide 4.17.7 MSTI Port Configuration This section allows the user to inspect the current STP MSTI port configurations, and possibly change them as well. A MSTI port is a virtual port, which is instantiated separately for each active CIST (physical) port for each MSTI instance configured and applicable for the port.
  • Page 242: Spanning Tree Monitoring

    Falcon M-Class | User Guide 4.17.8 Spanning Tree Monitoring This section provides various STP monitoring displays 4.17.8.1 STP Bridges Status This display provides a status overview of all STP bridge instances Figure 4-135: STP Bridges Table 4-129: STP Bridges Parameters MSTI The Bridge Instance.
  • Page 243 Falcon M-Class | User Guide 4.17.8.2 STP Detailed Bridge Status This section provides detailed information on a single bridge instance, along with port state for all active ports associated. Figure 4-136: STP Detailed Bridge Status Table 4-130: STP Detailed Bridge Status Parameters STP Bridge Status Bridge Instance The Bridge instance - CIST, MST1, ..
  • Page 244 Falcon M-Class | User Guide The switch port number of the logical STP port Port The port id as used by the STP protocol. This is the priority part and the logical port Port ID index of the bridge port. The current STP port role.
  • Page 245 Falcon M-Class | User Guide 4.17.8.3 STP Port Status This section displays the STP CIST port status for physical ports switch. Figure 4-137: STP Port Status Table 4-131: STP Port Status Parameters Port The switch port number of the logical STP port The current STP port role of the CIST port.
  • Page 246 Falcon M-Class | User Guide 4.17.8.4 STP Port Statistics This page displays the STP port statistics counters of bridge ports in the switch. Figure 4-138: STP Statistics Table 4-132: STP Statistics Parameters Port The switch port number of the logical STP port. The number of MSTP BPDU's received/transmitted on the port.
  • Page 247: Ip Multicast

    Falcon M-Class | User Guide 4.18 IP Multicast Multicast is the delivery of information to a group of destinations simultaneously using the most efficient strategy to deliver the messages over each link of the network only once, creating copies only when the links to the destinations split. Internet Group Management Protocol (IGMP) is an IP (Layer 3) protocol used for signaling of multicast group membership (adding or removing clients to/from a multicast group) IGMP snooping analyze all IGMP packets between hosts connected to the M-Class series and...
  • Page 248 Falcon M-Class | User Guide Table 4-133: IGMP Snooping Configuration Parameters Global Configuration Snooping Enables the Global IGMP Snooping. Enabled Unregistered Enables unregistered IPMCv4 traffic flooding. The flooding control takes effect only when IGMP Snooping is enabled. IPMCv4 When IGMP Snooping is disabled, unregistered IPMCv4 traffic flooding Flooding enabled is always active in spite of this setting IGMP SSM...
  • Page 249: Igmp Snooping Vlan Configuration

    Falcon M-Class | User Guide 4.18.2 IGMP Snooping VLAN Configuration Navigating the IGMP Snooping VLAN Table Each page shows up to 99 entries from the VLAN table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the VLAN Table.
  • Page 250 Falcon M-Class | User Guide Querier Define the IPv4 address as source address used in IP header for IGMP Querier election. Address When the Querier address is not set, system uses IPv4 management address of the IP interface associated with this VLAN. When the IPv4 management address is not set, system uses the first available IPv4 management address.
  • Page 251: Igmp Snooping Port Group Filtering Configuration

    Falcon M-Class | User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Add New IGMP VLAN: Click to add new IGMP VLAN. Specify the VID and configure the new entry. Click "Save". The specific IGMP VLAN starts working after the corresponding static VLAN is also created.
  • Page 252 Falcon M-Class | User Guide Table 4-135: IGMP Snooping Port Group Filtering Configuration Parameters Port The logical port for the settings. Filtering Profile Select the IPMC Profile as the filtering condition for the specific port. Summary about the designated profile will be shown by clicking the view button.
  • Page 253: Igmp Snooping Status

    Falcon M-Class | User Guide 4.18.4 IGMP Snooping Status This section provides IGMP Snooping status. Figure 4-142: IGMP Snooping Status Table 4-136: IGMP Snooping Status Parameters Statistics The VLAN ID of the entry. VLAN ID Querier Version Currently Working Querier Version. HostVersion Currently Working Host Version Querier Status...
  • Page 254: Igmp Snooping Groups Information

    Falcon M-Class | User Guide 4.18.5 IGMP Snooping Groups Information Entries in the IGMP Group Table are shown on this section. The IGMP Group Table is sorted first by VLAN ID, and then by group. Navigating the IGMP Group Table Each page shows up to 99 entries from the IGMP Group table, default being 20, selected through the "entries per page"...
  • Page 255: Igmp Sfm Information

    Falcon M-Class | User Guide 4.18.6 IGMP SFM Information Entries in the IGMP SFM Information Table are shown on this section. The IGMP SFM (Source-Filtered Multicast) Information Table also contains the SSM (Source- Specific Multicast) information. This table is sorted first by VLAN ID, then by group, and then by Port.
  • Page 256 Falcon M-Class | User Guide Table 4-138: IGMP SFM Information Parameters VLAN ID VLAN ID of the group. Group Group address of the group displayed. Port Switch port number. Mode Indicates the filtering mode maintained per (VLAN ID, port number, Group Address) basis.
  • Page 257: Mld Snooping Configuration

    Falcon M-Class | User Guide 4.18.7 MLD Snooping Configuration This section provides MLD Snooping related configuration. MLD is an acronym for Multicast Listener Discovery for IPv6. MLD is used by IPv6 routers to discover multicast listeners on a directly attached link, much as IGMP is used in IPv4. The protocol is embedded in ICMPv6 instead of using a separate protocol.
  • Page 258 Falcon M-Class | User Guide Table 4-139: MLD Snooping Configurations Parameters MLD Snooping Configuration Snooping Enables the Global MLD Snooping. Enabled Unregistered Enables unregistered IPMCv6 traffic flooding. The flooding control takes effect only when MLD Snooping is enabled. IPMCv6 When MLD Snooping is disabled, unregistered IPMCv6 traffic flooding is Flooding enabled always active in spite of this setting MLD SSM Range...
  • Page 259: Mld Snooping Vlan Configuration

    Falcon M-Class | User Guide 4.18.8 MLD Snooping VLAN Configuration Navigating the MLD Snooping VLAN Table Each page shows up to 99 entries from the VLAN table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the VLAN Table.
  • Page 260 Falcon M-Class | User Guide Compatib Compatibility is maintained by hosts and routers taking appropriate actions depending on the versions of MLD operating on hosts and routers within a ility network. The allowed selection is MLD -Auto, Forced MLD v1, Forced MLD v2, Default compatibility value is MLD-Auto.
  • Page 261 Falcon M-Class | User Guide Note: By clicking on the “Add New MLD VLAN”, we get the following display: Refer to previous table for terminology...
  • Page 262: Mld Snooping Port Group Filtering Configuration

    Falcon M-Class | User Guide 4.18.9 MLD Snooping Port Group Filtering Configuration Figure 4-147: MLD Snooping Port Group Filtering Configuration Table 4-141: MLD Snooping Port Group Filtering Configuration Parameters Port The logical port for the settings. Filtering Profile Select the IPMC Profile as the filtering condition for the specific port. Summary about the designated profile will be shown by clicking the view button.
  • Page 263: 4.18.10 Mld Snooping Status

    Falcon M-Class | User Guide 4.18.10 MLD Snooping Status this section provides MLD Snooping status Figure 4-148: MLD Snooping Port Group Filtering Configuration Table 4-142 MLD Snooping Status Parameters Statistics VLAN ID The VLAN ID of the entry. Querier Version Currently Working Querier Version.
  • Page 264: 4.18.11 Mld Snooping Groups Information

    Falcon M-Class | User Guide Display which ports act as router ports. A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or MLD querier. Static denotes the specific port is configured to be a router port. Dynamic denotes the specific port is learnt to be a router port.
  • Page 265: 4.18.12 Mld Sfm Information

    Falcon M-Class | User Guide Table 4-143: MLD Snooping Groups Information Parameters VLAN ID VLAN ID of the group. Groups Group address of the group displayed. Port Members Ports under this group. Buttons Refresh: Refreshes the displayed table starting from the input fields. Auto-refresh : Automatic refresh occurs every 3 seconds .<<: Updates the table starting from the first entry in the MLD Group...
  • Page 266 Falcon M-Class | User Guide VLAN ID VLAN ID of the group. Group Group address of the group displayed. Port Switch port number. Mode Indicates the filtering mode maintained per (VLAN ID, port number, Group Address) basis. It can be either Include or Exclude Source Address IP Address of the source.
  • Page 267: Link Aggregation

    Falcon M-Class | User Guide 4.19 Link Aggregation LACP is an IEEE 802.3ad standard protocol. The Link Aggregation Control Protocol, allows bundling several physical ports together to form a single logical port. Link aggregation bundles multiple ports (member ports) together into a single logical link. It is primarily used to increase available bandwidth without introducing loops in the network and to improve resiliency against faults.
  • Page 268: Static Link Aggregation

    Falcon M-Class | User Guide 4.19.1 Static Link Aggregation M-Class series allows set up of the Aggregation Mode Configuration and the Aggregation Group. This section is used to configure the Aggregation hash mode and the aggregation group. The aggregation hash code contributors settings are global (hashes are calculated when the first connection is established and then kept in the device memory for the session lifetime).
  • Page 269 Falcon M-Class | User Guide Table 4-145: Mode and Group Aggregation Configuration Parameters Aggregation Mode Configuration Hash Code Contributors Source MAC Address The Source MAC ADDRESS can be used to calculate the destination port for the frame. Check to enable the use of the Source MAC address, or uncheck to disable.
  • Page 270: Link Aggregation Control Protocol (Lacp) Port Configuration)

    Falcon M-Class | User Guide 4.19.2 Link Aggregation Control Protocol (LACP) Port Configuration) Figure 4-152: LACP Port Configuration Port The switch port number. LACP Controls LACP is enabled on this switch port. Enabled LACP will form an aggregation when two (2) or more ports are connected to the same partner.
  • Page 271: Lacp Monitoring

    Falcon M-Class | User Guide 4.19.3 LACP Monitoring LACP System Status LACP Port Status LACP Port Statistics 4.19.3.1 LACP System Status This section provides a status overview for all LACP instances Figure 4-153: LACP System Status Table 4-146: LACP System Status Parameters Aggr ID The Aggregation ID associated with this aggregation instance.
  • Page 272 Falcon M-Class | User Guide 4.19.3.2 LACP Port Status This section provides a status overview for LACP status for all ports. Figure 4-154: LACP Status Table 4-147: LACP Status Parameters Port The switch port number. LACP 'Yes' means that LACP is enabled and the port link is up. 'No' means that LACP is not enabled or that the port link is down.
  • Page 273 Falcon M-Class | User Guide 4.19.3.3 LACP Statistics This sub-section provides an overview for LACP statistics for all ports Figure 4-155: LACP Statistics Table 4-148: LACP Statistics Parameters Port The switch port number. LACP Received Shows how many LACP frames have been received at each port. LACP Shows how many LACP frames have been sent from each port.
  • Page 274: Lldp-Link Discovery

    Falcon M-Class | User Guide 4.20 LLDP-Link Discovery LLDP is an IEEE 802.1ab standard protocol. The Link Layer Discovery Protocol is used for network discovery, and works by having the units in the network exchanging information with their neighbors using LLDP frames. Link discovery specifies a method and associated procedures that automatically discover transmission links and paths between network devices.
  • Page 275: Lldp Configuration

    Falcon M-Class | User Guide 4.20.1 LLDP Configuration This section allows the user to inspect and configure the current LLDP port settings. Figure 4-156: LLDP Configuration Table 4-149: LLDP Configuration Parameters LLDP Parameters Tx Interval The switch is periodically transmitting LLDP frames to its neighbors for having the network discovery information up-to- date.
  • Page 276 Falcon M-Class | User Guide Tx Reinit When a port is disabled, LLDP is disabled or if the switch is rebooted, a LLDP shutdown frame is transmitted to the neighbor units for signaling that the LLDP information is not valid anymore. Tx Reinit controls the amount of seconds between the shutdown frame and a new LLDP initialization.
  • Page 277 Falcon M-Class | User Guide Select CDP awareness. CDP Aware The CDP operation is restricted to decoding incoming CDP frames (The switch doesn't transmit CDP frames). CDP frames are only decoded if LLDP for the port is enabled. Only CDP TLVs that can be mapped into a corresponding field in the LLDP neighbors table are decoded.
  • Page 278: Lldp-Med Configuration

    Falcon M-Class | User Guide Sys Descr Optional TLV: When checked the "system description" is included in LLDP information transmitted Sys Capa Optional TLV: When checked the "system capability" is included in LLDP information transmitted Mgmt Addr Optional TLV: When checked the "management address" is included in LLDP information transmitted.
  • Page 279 Falcon M-Class | User Guide Table 4-150: LLDP MED Configuration Parameters Fast start repeat count Fast start repeat count Rapid startup and Emergency Call Service Location Identification Discovery of endpoints is a critically important aspect of VoIP systems in general. it is best to advertise only those pieces of information which are specifically relevant to particular endpoint types (for example only advertise the voice network policy to permitted voice-capable devices), both in order to conserve the limited LLDPU space...
  • Page 280 Falcon M-Class | User Guide Coordinates Location Latitude Latitude SHOULD be normalized to within 0-90 degrees with a maximum of 4 digits. It is possible to specify the direction to either North of the equator or South of the equator. Longitude Longitude SHOULD be normalized to within 0-180 degrees with a maximum of 4 digits .It is possible to specify the direction to either East...
  • Page 281 Falcon M-Class | User Guide Leading street Leading street direction - Example: N. direction Trailing street Trailing street suffix - Example: SW. suffix Street suffix Street suffix - Example: Ave, Platz. House no. House number - Example: 21. House no. suffix House number suffix - Example: A, 1/2 Landmark Landmark or vanity address - Example: Columbia University.
  • Page 282 Falcon M-Class | User Guide 6. Control / Signalling (conditionally support a separate network policy for the media types above) A large network may support multiple VoIP policies across the entire organization, and different policies per application type. LLDP-MED allows multiple policies to be advertised per port, each corresponding to a different application type.
  • Page 283: Lldp Monitoring

    Falcon M-Class | User Guide Tag indicating whether the specified application type is using a 'tagged' or an 'untagged' VLAN. Untagged indicates that the device is using an untagged frame format and as such does not include a tag header as defined by IEEE 802.1Q-2003. In this case, both the VLAN ID and the Layer 2 priority fields are ignored and only the DSCP value has relevance.
  • Page 284 Falcon M-Class | User Guide • LLDP Neighbour Information • LLDP-MED Neighbour Information • • Port Statistics 4.20.3.1 LLDP Neighbour Information Falcon devices provide a status overview for all LLDP neighbors. The displayed table contains a row for each port on which an LLDP neighbor is detected. Figure 4-158: LLDP –...
  • Page 285 Falcon M-Class | User Guide Buttons Refresh: Click to refresh the screen immediately. Auto-refresh : Automatic refresh occurs every 3 seconds. Check this box to enable an automatic refresh of the screen at regular intervals. 4.20.3.2 LLDP-MED Neighbour Information This section provides a status overview of all LLDP-MED neighbours. The displayed table contains a row for each port on which an LLDP 285eighbor is detected.
  • Page 286 Falcon M-Class | User Guide LLDP-MED Devices are comprised of two primary Device Types: Network Connectivity Devices and Endpoint Devices. Device Type LLDP-MED Network Connectivity Device Definition LLDP-MED Network Connectivity Devices, as defined in TIA-1057, provide access to the IEEE 802 based LAN infrastructure for LLDP-MED Endpoint Devices.
  • Page 287 Falcon M-Class | User Guide Discovery services defined in this class include media-type-specific network layer policy discovery. LLDP-MED Communication Endpoint (Class III) The LLDP-MED Communication Endpoint (Class III) definition is applicable to all endpoint products that act as end user communication appliances supporting IP media.
  • Page 288 Falcon M-Class | User Guide Policy Policy indicates that an Endpoint Device wants to explicitly advertise that the policy is required by the device. Can be either Defined or Unknown Unknown: The network policy for the specified application type is currently unknown.
  • Page 289 Falcon M-Class | User Guide 4.20.3.3 LLDP Neighbours EEE Information By using EEE power savings can be achieved at the expense of traffic latency. This latency occurs due to that the circuits EEE turn off to save power, need time to boot up before sending traffic over the link.
  • Page 290 Falcon M-Class | User Guide Echo Tx Tw The link partner’s fallback receive Tw The respective echo values shall be defined as the local link partners reflection (echo) of the remote link partners respective values. When a local link partner receives its echoed values from the remote link partner it can determine whether or not the remote link partner has received, registered and processed its most recent values.
  • Page 291 Falcon M-Class | User Guide 4.20.3.4 LLDP Port Statistics The M-Class series unit provides an overview of all LLDP traffic. Two types of counters are shown: Global counters are counters that refer to the whole switch, while local counters (LLDP Statistics) refer to counters for the currently selected switch port.
  • Page 292 Falcon M-Class | User Guide Rx Errors The number of received LLDP frames containing some kind of error. Frames If an LLDP frame is received on a port, and the switch's internal table is full, the LLDP frame is counted and discarded. This situation is known Discarded as "Too Many Neighbors"...
  • Page 293: Link Oam

    Falcon M-Class | User Guide 4.21 Link OAM The 802.3ah OAM standard provides the operation, administration and maintenance tools and mechanisms for monitoring link operation, fault detection and remote loopback control. The 802.3ah is a complete standard for Ethernet in the first mile, which contains a link level (as opposed to service level) OAM mechanism.
  • Page 294: Link Oam Port Configuration

    Falcon M-Class | User Guide 4.21.1 Link OAM Port Configuration This section allows the user to inspect the current Link OAM port configurations, and change them as well. Figure 4-163: Link OAM Port Configuration Table 4-155: Link OAM Port Configuration Parameters Port The switch port number.
  • Page 295: Link Event Configuration For Selected Port

    Falcon M-Class | User Guide Loopback Controls whether the loopback support is enabled for the switch port. Support Link OAM remote loopback can be used for fault localization and link performance testing. Enabling the loopback support will allow the DTE to execute the remote loopback command that helps in the fault detection Link Monitor Controls whether the Link Monitor support is enabled for the...
  • Page 296 Falcon M-Class | User Guide for 'Error Frame Event' must be an integer value between 1-60 and its default value is '1'. Whereas Error Threshold must be between 0-0xffffffff and its default value is '0'. Symbol Period Controls whether the MIB Retrieval Support is enabled for the switch port.
  • Page 297: Detailed Link Oam Statistics For Selected Port

    Falcon M-Class | User Guide 4.21.3 Detailed Link OAM Statistics for selected port This section provides detailed OAM traffic statistics for a specific switch port. Use the port select box to select which switch port details to display. The displayed counters represent the total number of OAM frames received and transmitted for the selected port.
  • Page 298 Falcon M-Class | User Guide Rx and Tx A count of the number of Loopback Control OAMPDUs received and transmitted on this interface. Loopback Control Rx and Tx A count of the number of Variable Request OAMPDUs received and transmitted on this interface. Variable Request Rx and Tx...
  • Page 299: Detailed Link Oam Status For Selected Port

    Falcon M-Class | User Guide 4.21.4 Detailed Link OAM Status for selected port This page provides Link OAM configuration operational status. The displayed fields show the active configuration status for the selected port. Figure 4-166: Detailed Link OAM Status for selected port Table 4-158: Detailed Link OAM Status for selected port Parameters Local and Peer Mode...
  • Page 300 Falcon M-Class | User Guide Parser State When in forwarding state, Device is forwarding non- OAMPDUs to higher sublayer. When in loopback, Device is looping back non-OAMPDUs to the lower sublayer. When in discarding state, Device is discarding non-OAMPDUs. Organizational 24-bit Organizationally Unique Identifier of the vendor.
  • Page 301: Detailed Link Oam Link Events Status For Selected Port

    Falcon M-Class | User Guide 4.21.5 Detailed Link OAM Link Events Status for selected port This section allows the user to inspect the current Link OAM Link Event configurations, and change them as well. The left pane displays the Event status for the Local OAM unit while the right pane displays the status for the Peer for the respective port.
  • Page 302 Falcon M-Class | User Guide Frame errors This four-octet field indicates the number of detected errored frames in the period. Total frame This eight-octet field indicates the sum of errored frames that have been detected since the OAM sublayer was reset. errors Total frame error This four-octet field indicates the number of Errored Frame...
  • Page 303 Falcon M-Class | User Guide Event Seconds This two-octet field indicates the time reference when the event was generated, in terms of 100 ms intervals, encoded Summary Time as a 16-bit unsigned integer Stamp Event Seconds This two-octet field indicates the duration of the period in terms of 100 ms intervals, encoded as a 16-bit unsigned Summary integer...
  • Page 304: Service Oam Standards

    Falcon M-Class | User Guide 4.22 Service OAM Standards Service OAM” is a common term for the ITU-T Y.1731, IEEE802.1ag, all covering Operation, Administration and Maintenance These standards cover monitoring and error detection functionalities, which are key weaknesses in the standard Ethernet. Service Level Agreement (SLA) Management is a necessary tool for carriers, required to ensure that customers are getting the service they have purchased.
  • Page 305: Oam Service Multi-Domain Levels

    Falcon M-Class | User Guide 4.22.1 OAM Service Multi-Domain Levels A Service Instant creates a Maintenance Association (MA, or MEG: Maintenance Entity Group) between various end paths which consist of “Maintenance End Points” (MEPs) located at the edge of each domain and Ethernet hops or ports referred to as Maintenance Intermediate points (MIP). There are eight levels defined and classified: Classification ME (or MEG ) Level...
  • Page 306: Ethernet Connectivity Fault Management

    Falcon M-Class | User Guide 4.22.2 Ethernet Connectivity Fault Management Ethernet Fault Management is an end-to-end per-service Ethernet layer OAM protocol that includes proactive connectivity monitoring, fault verification, and fault isolation. Monitoring and troubleshooting carrier networks offering Ethernet Layer 2 services is challenging. Customers contract with service providers for end-to-end Ethernet service, and service providers may subcontract with operators to provide equipment and networks.
  • Page 307 Falcon M-Class | User Guide 4.22.2.1 Maintenance Domain A maintenance domain is a management space for the purpose of managing and administering a network. A domain is owned and operated by a single entity and defined by the set of devices and ports internal to it and at its boundary.
  • Page 308 Falcon M-Class | User Guide communicated among the administering organizations. For example, one approach would be to have the service provider assign maintenance levels to operators. Service OAM exchanges messages and performs operations on a per-domain basis. For example: running Service OAM at the operator level does not allow discovery of the network by the higher provider and customer levels.
  • Page 309 Falcon M-Class | User Guide Outward facing means that the MEP communicates through the wire. Outward facing MEPs use the port MAC address, not the Bridge-Brain MAC address used by inward facing MEPs. An outward facing MEP performs the following functions: •...
  • Page 310 Falcon M-Class | User Guide Maintenance Intermediate Points (MIP) MIPs have the following characteristics: • Per maintenance domain (level) and for all enabled or allowed S-VLANs on a port. • Internal to a domain, not at the boundary. • Service OAM frames received from MEPs and other MIPs are cataloged and forwarded, using both the wire and the relay function.
  • Page 311 Falcon M-Class | User Guide 4.22.2.3 OAM Messages Service OAM uses standard Ethernet frames Service OAM frames are distinguishable by Ether Type and for multicast messages by MAC address. Service OAM frames are sourced, terminated, processed, and relayed by bridges. Routers can support only limited Service OAM functions. Bridges that cannot interpret Service OAM messages forward them as normal data frames.
  • Page 312 Falcon M-Class | User Guide Link trace is used to discover and monitor the path from one MEP to another MEP or MIP by its MAC address, and to all MIPs at the same domain level A MEP sends link trace frames (LTM) and when received by a MIP, the MIP responds to the transmitting MEP and forwards the link trace frame.
  • Page 313 Falcon M-Class | User Guide 4.22.2.4 MEP/MIP Hierarchical View The drawing below shows an example of a service provider network built of two operator networks (operator A and operator B) with a single point-to-point customer service. Figure 4-173: Typical MEP/MIP Hierarchical View Recall that level values follows the convention where levels 5, 6, 7 are assigned to customers, levels 3, 4 are assigned to service providers, and levels 0, 1, 2 are assigned to operators (level 0 is assigned to link-level).
  • Page 314: Mep Configuration Management

    Falcon M-Class | User Guide 4.22.3 MEP Configuration Management The following functions are described in this section: Maintenance Entity Point MEP Configuration which includes the following displays Instance Data Instance Configuration Peer MEP Configuration Functional Configuration TLV Configuration TLV Status Link State Tracking 4.22.3.1 Maintenance Entity Point...
  • Page 315 Falcon M-Class | User Guide Flow Instance The MEP is related to this flow - See 'Domain'. This is not relevant and not shown in case of Port MEP. Tagged VID Port MEP: An outer C/S-tag (depending on VLAN Port Type) is added with this VID.
  • Page 316: Mep Configuration Displays

    Falcon M-Class | User Guide 4.22.4 MEP Configuration Displays This section allows the user to inspect and configure the current MEP Instance. Figure 4-176: MEP Configuration Display The above configurations are explained in the next pages...
  • Page 317 Falcon M-Class | User Guide 4.22.4.1 Instance Data This section allows the user to inspect and configure the current MEP Instance Figure 4-177: Instance Data Table 4-161: Instance Data Parameters The table allows the user to inspect and configure the current MEP Instance. Instance The ID of the MEP.
  • Page 318 Falcon M-Class | User Guide Domain Name This is the IEEE Maintenance Domain Name and is only used in case of 'IEEE String' format. This string can be empty giving Maintenance Domain Name Format 1 - Not present. This can be max 16 char. MEG Id This is either ITU MEG ID or IEEE Short MA Name - depending on 'Format'.
  • Page 319 Falcon M-Class | User Guide 4.22.4.3 Peer MEP Configuration Figure 4-179: Peer MEP Configuration Table 4-163: I Peer MEP e Configuration Parameters Delete This box is used to mark a Peer MEP for deletion in next Save operation Peer MEP ID This value will become an expected MEP ID in a received CCM - see 'cMEP'.
  • Page 320 Falcon M-Class | User Guide 4.22.4.4 Functional Configuration Figure 4-180: Functional Configuration Table 4-164: Functional Configuration Parameters Continuity Check Continuity Check based on transmitting/receiving CCM PDU can be Enable enabled/disabled. The CCM PDU is always transmitted as Multi-cast Class 1. The priority to be inserted as PCP bits in TAG (if any).
  • Page 321 Falcon M-Class | User Guide 4.22.4.5 TLV Configuration TLV is an acronym for Type Length Value. A LLDP frame can contain multiple pieces of information. Each of these pieces of information is known as TLV. Configuration of the OAM PDU TLV. Currently only TLV in the CCM is supported. Figure 4-181: TLV Configuration Table 4-165: TLV Configuration Parameters OUI First...
  • Page 322 Falcon M-Class | User Guide 4.22.4.6 TLV Status Figure 4-182: TLV Status Table 4-166: TLV Status Parameters Peer MEP ID Peer MEP Identifier CC Organization Specific OUI First The last received first value in the OUI field. OUI Second The last received second value in the OS TLV OUI field. The last received third value in the OS TLV OUI field.
  • Page 323: Ethernet Continuity Check

    Falcon M-Class | User Guide 4.22.5 Ethernet Continuity Check Ethernet Continuity Check (ETH-CC) is used for fault detection and protection switching. It is used to detect Loss of continuity (LOC) between any pair of MEPs in a MEG. A MEP periodically transmits CCM frames according to the configured transmission period. A MEP periodically transmits CCM frames as often as the configured transmission period.
  • Page 324: Continuity Check Messages With Network Fault

    Falcon M-Class | User Guide The Continuity Check is configured via the Functional Configuration The drawing below shows the CCM Continuity Check Messages operation Figure 4-185: Continuity Check Messages 4.22.6 Continuity Check Messages with Network Fault The drawing below illustrates a fault in the network. Figure 4-186: Continuity Check Messages with Network Fault The fault in this case, is uni-directional or one way fault and its location is unknown.
  • Page 325: Fault Detection Management

    Falcon M-Class | User Guide 4.22.7 Fault Detection Management This section allows the user to inspect and configure the Fault Management of the current MEP Instance. By clicking on ‘Fault Management” button located in the display Functional Configuration you get the following Fault Management Configuration displays: Loop Back, Link Trace, Test Signal, Client Configuration, AIS, and LOCK.
  • Page 326 Falcon M-Class | User Guide OAM loopback is used to verify connectivity with a MIP or peer MEP and is similar to the ping” command in an IP network. Loopback frames are transmitted from a MEP either as multicast or unicast and the receiving MIP/MEP will send back a reply.
  • Page 327 Falcon M-Class | User Guide The LBM frame size. This is entered as the wanted size (in bytes) of a un- Size tagged frame containing LBM OAM PDU - including CRC (four bytes). Example when 'Size' = 64=> Un-tagged frame size = DMAC(6) + SMAC(6) + TYPE(2) + LBM PDU LENGTH(46) + CRC(4) = 64 bytes The transmitted frame will be four bytes longer for each tag added - 8 bytes in case of a tunnel EVC.
  • Page 328 Falcon M-Class | User Guide Figure 4-189: Connectivity check to a MIP and MEP using Loopback function...
  • Page 329 Falcon M-Class | User Guide 4.22.7.2 Link Trace Link trace is used to discover and monitor the path between two MEPs A MEP sends link trace frames (LTM) and when received by a MIP, the MIP responds to the transmitting MEP and forwards the link trace frame. The receiving MEP will also send a link trace reply (LTR), so the transmitting MEP is able to build a list of MAC addresses of the MIPs and MEF reached.
  • Page 330 Falcon M-Class | User Guide It is a MEP functionality that is able to detect loss of continuity in a network by transmitting CCM frames to a peer MEP. Last MAC The MAC identifying the last sender of the LBM causing this LTR - initiating MEP or previous MIP forwarding.
  • Page 331 Falcon M-Class | User Guide 4.22.7.3 Ethernet Test Signal This function is used to perform one-way demand diagnostics tests. Thus it is possible to verify bandwidth throughput, frame loss, bit errors, etc. When configured to implement such tests, a MEP inserts suitable frames with ETH Test information with specified throughput, frame size and transmission patters.
  • Page 332 Falcon M-Class | User Guide CPU RX frame MAX size: The MAX frame size (all inclusive) possible to copy to CPU of 1526 Bytes Consider that the Peer MEP must be able to handle the selected frame size. Consider that in order to calculate the 'RX rate' a received TST PDU must be copied to CPU Warning will be given if selected frame size exceeds the CPU RX frame MAX size...
  • Page 333 Falcon M-Class | User Guide 4.22.7.4 Client Configuration Only a Port MEP is able to be a server MEP with flow configuration. The Priority in the client flow is always the highest priority configured in the EVC. Figure 4-193: Client Configurationl display Table 4-171: Client Configuration parameters Flow Domain...
  • Page 334 Falcon M-Class | User Guide 4.22.7.5 Ethernet Alarm Indicator Signal (IAS) It is important for the customer/service provider to know if a fault has occurred in his domain or it is due to a fault that has occurred in another domain Let us assume that a fault has occurred in the operator’s domain, which also results in service provider domain MEPs detecting faults.
  • Page 335 Falcon M-Class | User Guide 4.22.7.6 Ethernet Locked Signal In the same way that AIS is used to distribute fault conditions, Ethernet Locked signal is used to block reaction to a fault situation. ETH-LCK is normally used in test situations where a change to the network should not result in a protected switch.
  • Page 336: Performance Monitor

    Falcon M-Class | User Guide 4.22.8 Performance Monitor This section allows the user to inspect and configure the performance monitor of the current MEP Instance. ITU-T Y.1731 has added performance measurement and monitoring in order to provide the Service providers the tools to measure frame loss, frame delay and frame delay variation The following performance Parameters are described in this section: •...
  • Page 337 Falcon M-Class | User Guide Figure 4-197: Performance Monitor Displays 4.22.8.1 Performance Monitoring Data Set Enable When enabled this MEP instance will contribute to the 'PM Data Set' gathered by the PM Session. 4.22.8.2 Loss Measurement LM A MEP has two local counters: a TX frame counter and an RX frame counter. Frame loss measurement is performed by two peer MEPs exchanging these counters.
  • Page 338 Falcon M-Class | User Guide Dual ended LM This method is a proactive tool to measure the frame loss. MEPs use CCM messages to deliver the information on number of service frames transmitted and received. Each MEP measures Near-end loss and Far-end loss based on the counters contained in CCM message from its peer and the local counters.
  • Page 339 Falcon M-Class | User Guide Near End Loss Ratio The near end frame loss ratio calculated based on the near end frame loss count and far end frame transmitted - in the latest 'FLR Interval'. The result is given in percent. Far End Loss Ratio The far end frame loss ratio calculated based on the far end frame loss count and near end frame transmitted - in the...
  • Page 340 Falcon M-Class | User Guide 4.22.8.3 Delay Measurement Frame Delay (FD) and Frame Delay Variation (FDV) are important factors in QoS. The FD and FDV requirements will be different for each service> Frame Delay is defined as the time elapsed since the start of transmission of the first bit from the source until the reception of last bit of the frame at the destination.
  • Page 341 Falcon M-Class | User Guide Figure 4-200: Delay Measurement Table 4-175: Delay Measurement Parameters Delay Measurement Enable Delay Measurement based on transmitting 1DM/DMM PDU can be enabled/disabled. Delay Measurement based on receiving and handling 1DM/DMR PDU is always enabled. The priority to be inserted as PCP bits in TAG (if any). Priority Cast Selection of 1DM/DMM PDU transmitted unicast or multicast.
  • Page 342 Falcon M-Class | User Guide Counter The action to counter when overflow happens. Overflow Action Buttons Refresh: Click to refresh the page immediately Save: Click to save changes Reset: Click to undo any changes made locally and revert to previously saved values Back: Click to go back to this MEP instance main page Delay Measurement State The accumulated transmit count - since last 'clear'.
  • Page 343: Delay Measurements Bins

    Falcon M-Class | User Guide 4.22.9 Delay Measurements Bins A Measurement Bin is a counter that stores the number of delay measurements falling within a specified range, during a Measurement Interval. Figure 4-201: Delay Measurement Bins Table 4-176: Delay Measurement Bins Parameters Measurement Bins for FD Configurable number of Inter-Frame Delay Variation Measurement Bins per Measurement Interval.
  • Page 344: 4.22.10 Delay Measurements Bins Forfd

    Falcon M-Class | User Guide 4.22.10 Delay Measurements Bins forFD A Measurement Bin is a counter that stores the number of delay measurements falling within a specified range, during a Measurement Interval. Figure 4-202: Delay Measurement Bins for FD Threshold Range Bin0 0 us...
  • Page 345: Rmon (Remote Network Monitoring)

    Falcon M-Class | User Guide 4.23 RMON (Remote Network Monitoring) The Remote Network Monitoring (RMON) MIB was developed by the IETF to support monitoring and protocol analysis of LANs. M-Class series support RMON 1 (RFC2819) groups 1, 2, 3 and 9. 4.23.1 ARMON Alarm Configuration This section provides configuration of RMON Alarm table.
  • Page 346: Rmon Event Configuration

    Falcon M-Class | User Guide Sample Type The method of sampling the selected variable and calculating the value to be compared against the thresholds, possible sample types are: Absolute: Get the sample directly. Delta: Calculate the difference between samples (default). Value The value of the statistic during the last sampling period.
  • Page 347: Rmon Statistics Configuration

    Falcon M-Class | User Guide Type Indicates the notification of the event, the possible types are: none: The total number of octets received on the interface, including framing characters. log The number of uni-cast packets delivered to a higher-layer protocol. snmptrap: The number of broad-cast and multi-cast packets delivered to a higher-layer protocol.
  • Page 348: Rmon History Configuration

    Falcon M-Class | User Guide 4.23.4 RMON History Configuration Configure RMON History table on this section. The entry index key is ID. Figure 4-207: RMON History Configuration Table 4-180: RMON History Configuration Parameters Delete Check to delete the entry. It will be deleted during the next save. Indicates the index of the entry.
  • Page 349: Loop Guard

    Falcon M-Class | User Guide 4.24 Loop Guard This section allows the user to inspect the current Loop Guard (Loop protection) configurations, and possibly change them as well. Figure 4-208: Loop Guard Configuration Table 4-181: Loop Guard Configuration Parameters General Settings Global Configuration Enable Loop Controls whether loop guard is enabled (as a whole).
  • Page 350: Loop Guard Status

    Falcon M-Class | User Guide Configures the action performed when a loop is detected on a Action port. Valid values are Shutdown Port, Shutdown Port and Log or Log Only. Controls whether the port is actively generating loop guard PDU's, Tx Mode or whether it is just passively looking for looped PDU's.
  • Page 351: Eps (Ethernet Protection Switching)

    Falcon M-Class | User Guide 4.25 EPS (Ethernet Protection Switching) The Ethernet (Linear) Protection Switch instances are configured here The EPS is supported by the G.8031 standard Figure 4-210: Ethernet Protection Switching Table 4-183: Ethernet Protection Switching Parameters Delete This box is used to mark an EPS for deletion in next Save operation. EPS ID The ID of the EPS.
  • Page 352: Ethernet Ring Protection Switching

    Falcon M-Class | User Guide 4.26 Ethernet Ring Protection Switching The ERPS (Ethernet Ring Protection Switch) instances are configured here. The ERPS is supported by the G.8032v2 standard Figure 4-211: Ethernet Ring Protection Switching Table 4-184: Ethernet Ring Protection Switching Parameters Delete This box is used to mark an ERPS for deletion in next Save operation.
  • Page 353: Loopback Configuration

    Falcon M-Class | User Guide 4.27 Loopback Configuration This section displays current loopback configuration. (L2 and/or L3 frame type) Loopbacks can also be configured here. Figure 4-212: Loopback configuration Table 4-185: Loopback configuration Parameters Delete If marked and save button is pressed, the loopback is deleted Mode The Loopback mode;...
  • Page 354: Link Protection

    Falcon M-Class | User Guide 4.28 Link Protection This section allows the user to configure the Link Protection Parameters and check the status 4.28.1 Link Protection Configuration Figure 4-213: Link Protection Configuration Table 4-186: Link Protection Configuration Parameters Mode Enable or Disable the Link Protection function. Main Port Select the uplink port that will serve as main (the other will be automatically assigned as backup).
  • Page 355: Link Protection Status

    Falcon M-Class | User Guide 4.28.2 Link Protection Status Figure 4-214: Link Protection Status Table 4-187: Link Protection Status Parameters Port Status Indicates the current state of the main and backup ports. States can be: Active, Standby or Down. Indicates the current time left on the WTR timer, when counting down Force Switch Overrides the WTR timer and forces switch back to main link.
  • Page 356: Gvrp Configuration

    Falcon M-Class | User Guide 4.29 GVRP Configuration This section allows you to configure the global GVRP configuration settings that are commonly applied to all GVRP enabled ports. GVRP is an acronym for GARP VLAN Registration Protocol. It is a protocol for dynamicaly registering VLANs on ports, and is specified in IEEE 802.1Q-2005, clause 11.
  • Page 357: Sflow Consideration

    Falcon M-Class | User Guide 4.30 sFlow Consideration SFlow is an industry standard technology for monitoring switched networks through random sampling of packets on switch ports and time-based sampling of port counters. The sampled packets and counters (referred to as flow samples and counter samples, respectively) are sent as sFlow UDP datagrams to a central network traffic monitoring server.
  • Page 358 Falcon M-Class | User Guide Figure 4-216: sFlow Configuration displays...
  • Page 359 Agent Configuration The IP address used as Agent IP address in sFlow datagrams. IP Address Falcon M-Class | User Guide It serves as a unique key that will identify this agent over extended periods of time.Both IPv4 and IPv6 addresses are supported. Receiver Configuration Owner.
  • Page 360: Sflow Statistics

    Falcon M-Class | User Guide With counter polling enabled, this specifies the interval - in seconds - between Counter Poller counter poller samples. Valid range is 1 to 3600 seconds. Interval Buttons Refresh: Click to refresh this sub-section. Note that unsaved changes will be lost. Save: Click to save changes.
  • Page 361 Falcon M-Class | User Guide Table 4-190: sFlow Statistics parameters Receiver Statistics Owner. This field shows the current owner of the sFlow configuration. It assumes one of three values as follows: • If sFlow is currently unconfigured /unclaimed, Owner contains <none>. •...
  • Page 362: Upnp Configuration

    Falcon M-Class | User Guide 4.31 UPnP Configuration UPnP is an acronym for Universal Plug and Play. The goals of UPnP are to allow devices to connect seamlessly and to simplify the implementation of networks in the home (data sharing, communications, and entertainment) and in corporate environments for simplified installation of computer components Configure UPnP on this section.
  • Page 363: Udld Configuration

    Falcon M-Class | User Guide 4.32 UDLD Configuration UDLD is an acronym for Uni Directional Link Detection. UDLD protocol monitors the physical configuration of the links between devices and ports that support UDLD.It detects the existence of unidirectional links. Its functionality is to provide mechanisms useful for detecting one way connections before they create a loop or other protocol malfunction.
  • Page 364: Detailed Udld Status Forport 1

    Falcon M-Class | User Guide Save: Click to save changes. Buttons Reset: Click to undo any changes made locally and revert to previously saved values. 4.32.2 Detailed UDLD Status forPort 1 This section displays the status of the selected port UDLD Figure 4-220: UDLD Status for Port 1 Table 4-193: UDLD Status for Port 1 parameters...
  • Page 365: Management

    Falcon M-Class | User Guide Management General Introduction The M-Class series can be remotely or locally managed via a variety of mechanisms/platforms with virtually no integration effort: 1. IP Based (in-band): SNMP (v1/v2/v3), Telnet (CLI), SSH, Web – HTTP/HTTPS. 2. Console (RJ-45): RS-232 (150000Bd) CLI (Cisco like).
  • Page 366: System Status

    Falcon M-Class | User Guide Table 5-1: System Information Parameters Contact The system contact configured in Configuration | System | Information | System Contact. Name The system name configured in Configuration | System | Information | System Name. Location The system location configured in Configuration | System | Information | System Location MAC Address The MAC Address of this switch.
  • Page 367 Falcon M-Class | User Guide Table 5-2: System Status Parameters System Status Time The current (GMT) system time and date. The system time is obtained through the Timing server running on the switch, if any. Uptime The period of time the device has been operational. Device Temperature .
  • Page 368: Cpu Load

    Falcon M-Class | User Guide 5.1.3 CPU Load This section displays the CPU load, using an SVG graph. The load is measured as averaged over the last 100ms, 1sec and 10 seconds intervals. The last 120 samples are graphed, and the last numbers are displayed as text as well. In order to display the SVG graph, your browser must support the SVG format.
  • Page 369: Ip Status

    Falcon M-Class | User Guide 5.1.4 IP Status This section displays the status of the IP protocol layer. The status is defined by the IP interfaces, the IP routes and the neighbour cache (ARP cache) status. Figure 5-4: IP Status displays Table 5-3: IP Status displays Parameters IP Interfaces Interface...
  • Page 370: System Log Information

    Falcon M-Class | User Guide 5.1.5 System Log Information The switch system log information is provided here. System Log Information Figure 5-5: System log information Table 5-4: System Log Information Parameters System Log Information Entry Columns The identification of the system log entry. Level The level of the system log entry.
  • Page 371 Falcon M-Class | User Guide Message The detail message of the system log entry. Buttons Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. Refresh: Updates the system log entries, starting from the current entry ID. Clear: Flushes the selected log entries.
  • Page 372: Detailed System Log Information

    Falcon M-Class | User Guide 5.1.6 Detailed System Log Information The switch system detailed log information is provided here Figure 5-6: Detailed system log information Table 5-5: Detailed System Log Information Parameters Detailed System Log Information Level The severity level of the system log entry The ID (>= 1) of the system log entry.
  • Page 373: Dhcp (Dynamic Host Configuration Protocol)

    Falcon M-Class | User Guide DHCP (Dynamic Host Configuration Protocol) DHCP is an acronym for Dynamic Host Configuration Protocol. It provides a complete description of a mathematical algorithm for encrypting (enciphering) and decrypting (deciphering) binary coded information. DHCP used by networked computers (clients) to obtain IP addresses and other parameters such as the default gateway, subnet mask, and IP addresses of DNS servers from a DHCP server.
  • Page 374: Dhcp Serverexcluded Ip Configuration

    Falcon M-Class | User Guide VLAN Mode Configure operation mode to enable/disable DHCP server per VLAN. Delete VLAN Mode Indicate the VLAN range in which DHCP server is enabled or disabled. The first VLAN ID must be smaller than or equal to the second VLAN ID. BUT, if the VLAN range contains only 1 VLAN ID, then you can just input it into either one of the first and second VLAN ID or both.
  • Page 375: Dhcp Server Pool Configuration

    Falcon M-Class | User Guide Buttons Save: Click to save changes. Reset: Click to undo any changes made locally and revert to previously saved values. Add IP Range: Click to add anew exclude IP range.. 5.2.3 DHCP Server Pool Configuration This page manages DHCP pools.
  • Page 376 Falcon M-Class | User Guide...
  • Page 377: Dhcp Snooping Configuration

    Falcon M-Class | User Guide 5.2.4 DHCP Snooping Configuration Configure DHCP Snooping on this section Figure 5-10: DHCP Server Pool Configuration Table 5-9: DHCP Server Pool Configuration Parameters DHCP Snooping Configuration Snooping Indicates the DHCP Snooping mode of operation.Possible modes are Enabled: Enable DHCP snooping mode operation mode When DHCP snooping mode operation is enabled, the DHCP request...
  • Page 378: Dynamic Dhcp Snooping Table

    Falcon M-Class | User Guide 5.2.5 Dynamic DHCP Snooping Table This page display the dynamic IP assigned information after DHCP Snooping mode is disabled. All DHCP clients obtained the dynamic IP address from the DHCP server will be listed in this table except for local VLAN interface IP addresses.
  • Page 379: Dhcp Relay Configuration

    Falcon M-Class | User Guide 5.2.6 DHCP Relay Configuration A DHCP relay agent is used to forward and to transfer DHCP messages between the clients and the server when they are not in the same subnet domain It stores the incoming interface IP address in the GIADDR field of the DHCP packet. The DHCP server can use the value of GIADDR field to determine the assigned subnet.
  • Page 380: Dhcp Relay Statistics Configuration

    Falcon M-Class | User Guide Drop: Drop the package when a DHCP message that already contains relay information is received. Drop: Drop the package when a DHCP message that already contains relay information is received. Save: Click to save changes. Buttons Reset: Click to undo any changes made locally and revert to previously saved values.
  • Page 381: Dhcp Server Statistics

    Falcon M-Class | User Guide Receive Bad Remote ID The packets number of which the Remote ID option did not match known Remote ID. Client Statistics Transmit to Client The number of relayed packets from server to client. Transmit Error The number of packets that resulted in error while being sent to servers.
  • Page 382 Falcon M-Class | User Guide Table 5-13: DHCP Server Statistics Parameters . Data base Counters Pool Number of pools Excluded IP Number of excluded IP address ranges Address Declined IP Number of declined IP addresses. Address Binding Counters Automatic Number of bindings with network-type pools. NumberBinding Manual Binding Number of bindings that administrator assigns an IP address to a client.
  • Page 383: Dchp Server Binding Ip

    Falcon M-Class | User Guide 5.2.9 DCHP Server Binding IP This section displays bindings generated for DHCP clients Figure 5-15: DHCP Server Binding IP Table 5-14: DHCP Server Binding IP Parameters Binding IP Address IP address allocated to DHCP client. Type Type of binding.
  • Page 384: Dhcp Server Declined Ip

    Falcon M-Class | User Guide 5.2.10 DHCP Server Declined IP This section displays declined IP addresses. Figure 5-16: DHCP Server Declined IP Table 5-15: DHCP Server Declined IP Parameters Declined IP IP Address Display IP addresses declined by DHCP clients. Declined IP List of IP addresses declined Buttons...
  • Page 385 Falcon M-Class | User Guide Table 5-16: DHCP Detailed Statistics Port 1 DHCP Detailed Statistics Port 1 Rx and Tx The number of of discover (option 53 with value 1) packets received and transmitted. Discover Rx and Tx Offer The number of offer (option 53 with value 2) packets received and transmitted.
  • Page 386: Green Ethernet And Thermal Protection

    Falcon M-Class | User Guide Green Ethernet and Thermal Protection 5.3.1 Port Power Savings Configuration This section allows the user to configure the port power savings capability For more info, refer to Green Ethernet Configuration Figure 5-18: Port Power Savings Configuration display Optimize EEE for Power or latency The switch device can be set to optimize EEE for either best power saving or least traffic latency.
  • Page 387 Falcon M-Class | User Guide Table 5-17: Port Power Savings Configuration Parameters Port Power Savings Configuration Port The device logical port number ActiPHY Link down power savings mode is enabled. ActiPHY works by lowering the power for a port when there is no link.
  • Page 388 Falcon M-Class | User Guide 5.3.1.1 Green Ethernet Status This section provides the status of EEE Shows if EEE is enabled for the port (reflects the settings at the Port Power Savings configuration page) Figure 5-19: Port Power Savings Status display Table 5-18: Port Power Savings Status Parameters Port Power Savings Status Logical port number for this row...
  • Page 389: Thermal Protection Configuration

    Falcon M-Class | User Guide 5.3.2 Thermal Protection Configuration Each group can be given a temperature at which the corresponding ports shall be turned off. This page allows the user to inspect and configure the current setting for controlling thermal protection. Thermal protection is used to protect the chip from getting overheated.
  • Page 390 Falcon M-Class | User Guide 5.3.2.1 Thermal Protection Status This section allows the user to inspect status information related to thermal protection Figure 5-21: Thermal Protection Port Status display Table 5-20: Thermal Protection Port Status Parameters Thermal Protection Port Status The switch port number.
  • Page 391: Dying Gasp Configuration

    Falcon M-Class | User Guide Dying Gasp Configuration The M-Class series is capable of transmitting a dying gasp event notification when it senses loss of power. The notification can be an SNMP trap to a selected destination. This feature is available on the device’s Power Link ports: The dying gasp feature can be configured on a per-port basis.
  • Page 392: Simple Network Management Protocol (Snmp)

    Falcon M-Class | User Guide Simple Network Management Protocol (SNMP) M-Class series supports SNMP management, inspection and configuration. The following screens are used to set SNMP System Configuration and SNMP Trap settings. • SNMP System Configuration • SNMPv3 Trap Configuratio •...
  • Page 393: Trap Configuration

    Falcon M-Class | User Guide Indicates the community write access string to permit access to SNMP Write agent.The allowed string length is 0 to 255, and the allowed content is Community the ASCII characters from 33 to 126. The field is applicable only when SNMP version is SNMPv1 or SNMPv2c. If If SNMP version is SNMPv3, the community string will be associated with SNMPv3 communities table.
  • Page 394 Falcon M-Class | User Guide Table 5-23: SNMP Trap Configuration Parameters Global Settings Indicate the SNMP trap mode operation. Mode Possible modes are: “Enabled”: Enable SNMP trap mode operation. “Disabled”: Disable SNMP trap mode operation. Trap Destination Configuration Delete Check to delete the entry. It will be deleted during the next save. Indicates the trap Configuration‘s name Name Indicates the trap destination's name.
  • Page 395: Snmpv3 Community Configuration

    Falcon M-Class | User Guide 5.5.3 SNMPv3 Community Configuration Configure SNMPv3 community table. The entry index key is “Community”. Figure 5-25: SNMPv3 Community Configuration Table 5-24: SNMPv3 Community Configuration Parameters Delete Check to delete the entry. It will be deleted during the next save. Community Indicates the community access string to permit access to SNMPv3 agent.
  • Page 396: Snmpv3 User Configuration

    Falcon M-Class | User Guide 5.5.4 SNMPv3 User Configuration Configure SNMPv3 users table. The entry index keys are “Engine ID” and “User Name”. Figure 5-26: SNMPv3 User Configuration Table 5-25: SNMPv3 User Configuration Parameters SNMPv3 User Configuration Delete Check to delete the entry. It will be deleted during the next save. Engine ID An octet string identifying the engine ID that this entry should belong to.
  • Page 397 Falcon M-Class | User Guide Authenticati A string identifying the authentication password phrase. For MD5 authentication protocol, the allowed string length is 8 to 32. For SHA on Password authentication protocol, the allowed string length is 8 to 40. The allowed content is ASCII characters from 33 to 126.
  • Page 398: Snmpv3 Group Configuration

    Falcon M-Class | User Guide 5.5.5 SNMPv3 Group Configuration Configure SNMPv3 groups table. The entry index keys are "Security Model" and "Security Name". Figure 5-27: SNMPv3 Group Configuration Table 5-26: SNMPv3 Group Configuration Parameters SNMPv3 Group Configuration Delete Check the box to delete the entry. It will be deleted during the next save.
  • Page 399: Snmpv3 View Configuration

    Falcon M-Class | User Guide 5.5.6 SNMPv3 View Configuration Configure SNMPv3 views table. The entry index keys are “View Name” and “OID Subtree”. Figure 5-28: SNMPv3 View Configuration Table 5-27: SNMPv3 View Configuration Parameters SNMPv3 View Configuration Delete Check to delete the entry. It will be deleted during the next save. View Name A string identifying the view name that this entry should belong to.
  • Page 400: Snmpv3 Access Configuration

    Falcon M-Class | User Guide 5.5.7 SNMPv3 Access Configuration Configure SNMPv3 accesses table. The entry index keys are "Group Name", "Security Model" and "Security Level". Figure 5-29: SNMPv3 Access Configuration Table 5-28: SNMPv3 Access Configuration Parameters SNMPv3 Access Configuration Delete Check to delete the entry.
  • Page 401: Supported Snmp Mibs

    Supported SNMP MIBs The M-Class series support a variety of MIBs Future software versions will extend this list adding support for new features. Note: In order to retrieve the required MIB, you have to access Fibrolan Web site/Support section BRIDGE-MIB.txt FIBROLAN-SFP-MIB.mib FIBROLAN-SYNC-CENTER-MIB.mib...
  • Page 402: Command Line Interface (Cli)

    Falcon M-Class | User Guide Command Line Interface (CLI) CLI commands are used to manage the M-Class series for displaying and modifying configuration of the various elements within the system. Use one of the following methods to open a CLI session with the M-Class series: •...
  • Page 403 Falcon M-Class | User Guide...
  • Page 404: Events Configuration

    Falcon M-Class | User Guide Events Configuration In this section, the user may change (enable/disable) the current events configuration 5.8.1 Events Configuration table Figure 5-30: Events Configuration...
  • Page 405 Falcon M-Class | User Guide Table 5-29 Events Configuration Parameters Events Configuration Event Index. Event Unique Name of the Event. The severity level of the listed events The following lseveritytypes Severity are supported: Informational : Information level of the system log. Warning: Warning level of the system log.
  • Page 406: Web Interface

    Falcon M-Class | User Guide Web Interface To Access the M-Class series through the Web Browser: • Enter the IP address of the relevant µFalcon/Falcon URL and press enter. The Log in prompt window displays. • Type the user name and the password in the dialog box. Default Username :moose Password: 1 2 3 4 •...
  • Page 407 Falcon M-Class | User Guide The left pane of the screen shows the expandable menu tree and the right pane shows the M-Class series front panel with its port state. Figure 5-32: M-Class series Web management front panel overview • Click on the top right corner Help button to get M-Class series help screens.
  • Page 408: Port Configuration

    Falcon M-Class | User Guide 5.9.1 Port Configuration The various M-Class devices ports can be configured using the procedure described in the Port and Monitoring Configuration 5.9.2 User Configuration & Edit User This subsection provides an overview of the current users. Currently the only way to login as another user on the web server is to close and reopen the browser Figure 5-33: Users Configuration Table 5-31: Users Configuration Parameters...
  • Page 409 Falcon M-Class | User Guide Table 5-32: Edit Users Configuration Parameters User Name A string identifying the user name that this entry should belong to. The allowed string length is 1 to 31. The valid user name is a combination of letters, numbers and underscores. Password The password of the user.
  • Page 410: Authentication Method Configuration

    Falcon M-Class | User Guide 5.9.3 Authentication Method Configuration The M-Class series support multiple methods for user login authentication. The configured authentication method is applied to all user interfaces (console, Telnet/SSH and Web). The available methods in current version are shown in the following display: Figure 5-36: Authentication Method Configuration To access the related setup go to: Authentication Method Configuration...
  • Page 411: Authentication Servers Configuration

    Falcon M-Class | User Guide 5.9.4 Authentication Servers Configuration This section allow the user to configure the different RADIUS Authentication Servers To access this section, go to Authentication Server Configuration (AAA) 5.9.5 Access Management Configuration In this section, you may configure the access management configuration The maximum number of entries is 16.
  • Page 412: Rmon Overview

    Falcon M-Class | User Guide 5.10 RMON Overview The RMON Overview includes the following displays: • RMON Alarm Overview • RMON Event Overview • RMON History Overview • RMON Statistics Status Overview 5.10.1 RMON Alarm Overview This section provides an overview of RMON Alarm entries Figure 5-37: Rmon Alarm Overview Table 5-33: Rmon Alarm Overview Parameters RMON Alarm Overview...
  • Page 413: Rmon Event Overview

    Falcon M-Class | User Guide Each page shows up to 99 entries from the Event table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the Event table The "Start from Event Index and Log Index"...
  • Page 414: Rmon History Overview

    Falcon M-Class | User Guide Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds Refresh: Click to refresh the page immediately. <<: Updates the the table starting from the first entry in the Alarm Table, i.e.
  • Page 415: Rmon Statistics Status Overview

    Falcon M-Class | User Guide Pkts The total number of packets (including bad packets, broadcast packets, and multicast packets) received. Broadcast The total number of good packets received that were directed to the broadcast address. Multicast The total number of good packets received that were directed to a multicast address. CECErrors The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had either a bad...
  • Page 416 Falcon M-Class | User Guide Figure -40: Rmon Statistics Status Overview Table 5-36: Rmon Statistics Status Overview Parameters RMON Statistics Status Overview Indicates the index of History control entry. Data Source The port ID which has to be monitored. (ifIndexif (Index) Drop The value of sysUpTime at the start of the interval over which this sample was measured.
  • Page 417: Maintenance

    Falcon M-Class | User Guide Maintenance Diagnostics Diagnostics include the following procedures: • Ping • Ping6 • Link OAM MIB Retrieval • Copper Link Test • RFC2544 • Falcon Report Configuration 6.1.1 ICMP Ping This section allows the user to issue ICMP PING packets to troubleshoot IP connectivity issues After you press, Start ICMP packets are transmitted, and the sequence number and round trip time are displayed upon reception of a reply.
  • Page 418: Ping 6

    Falcon M-Class | User Guide 6.1.2 Ping 6 M-Class series allow you to issue ICMPv6 PING packets to troubleshoot IPv6 connectivity issues. After you press Start, ICMPv6 packets are transmitted, and the sequence number and roundtrip time are displayed upon reception of a reply. The page refreshes automatically until responses to all packets are received, or until a timeout occurs Figure 6-2: ICMPv6 PING Configuration PING6 server ff02::2, 56 bytes of data.
  • Page 419: Link Oam Mib Retrieval

    Falcon M-Class | User Guide Egress Interface The VLAN ID (VID) of the specific egress IPv6 interface which ICMP packet goes. (Only for IPv6) The The given VID ranges from 1 to 4094 and will be effective only when the corresponding IPv6 interface is valid. When the egress interface is not given, PING6 finds the best match interface for destination.
  • Page 420 Falcon M-Class | User Guide Figure 6-4 Copper Link Test Cable Status Diagnostics Press Start to run the diagnostics. This will take approximately 5 seconds. If all ports are selected, this can take approximately 15 seconds. When completed, the page refreshes automatically, and you can view the cable diagnostics results in the cable status table.
  • Page 421 Falcon M-Class | User Guide Table 6-2: Copper Link Test Cable Diagnostics Parameters Port The port where the Cable Diagnostics is requested. Cable Status “Port”: Port number. “Pair”: The status of the cable pair. OK - Correctly terminated pair Open - Open pair Short - Shorted pair Short A - Cross-pair short to pair A Short B - Cross-pair short to pair B...
  • Page 422: Rfc2544

    Falcon M-Class | User Guide RFC2544 The Internet Engineering Task Force RFC 2544 is a benchmarking methodology for network interconnects devices RFC 2544 provides engineers and network technicians with a common language and results format. The RFC 2544 for the current release implements the following subtests: Throughput: measures the maximum rate at which none of the offered frames are dropped by the device/system under test Frame loss: defines the percentage of frames that should have been forwarded by a network...
  • Page 423: Test Configuration

    Falcon M-Class | User Guide 6.2.1 Test Configuration This section allows the user to configure RFC2544 Test Parameters Figure 6-5: RFC2544 Test Configuration...
  • Page 424 Falcon M-Class | User Guide Table 6-3: RFC2544 Test Configuration Parameters Test Configuration Trial Time Set test trial duration. Trial duration in msec/sec (100 mSec,300 mSec,500 mSec,1 sec,5 sec,10 sec,60 sec). Default: 10 sec. Check which MTU (frame sizes) the test to run for (64, 128, 256, 512, 1024, 1280, 1518, 9600, all).
  • Page 425: Rfc2544 Test

    Falcon M-Class | User Guide 6.2.2 RFC2544 Test. This section is used for running the RFC2544 Test Figure 6-6: RFC2544 Test Figure 6-7: RFC2544 Test Result Table 6-4: RFC2544 Test Parameters RFC2544 Test Test Test Type (Throughput/Latency/frame-loss/Back to Back). Default: Throughput. RFC2544 Test Results Port: Port number.
  • Page 426: Falcon Report Configuration

    Falcon M-Class | User Guide Falcon Report Configuration Figure 6-8: Falcon Report Configuration Table 6-5: Falcon Report Configuration Parameters Falcon Report Configuration 0.0.0.0 Insert the IP of your computer in which you will receive Falcon reports ( status, Test results, etc ) for MDB,RFC2544 and GPS) Click on MBD box,you enable to receive the Micro Burst Detection...
  • Page 427: Mirroring

    Falcon M-Class | User Guide Mirroring Mirroring is a feature for switched port analyzer.The The administrator can use the Mirroring to debug network problems. The selected traffic can be mirrored or copied on a destination port where a network analyzer can be attached to analyze the network traffic. Remote Mirroring is an extend function of Mirroring.
  • Page 428 Falcon M-Class | User Guide Table 6-6: Mirroring displays parameters Mirroring & Remote Mirroring Configuration To Enabled/Disabled the mirror or Remote Mirroring function. Mode Mirror: The switch is running on mirror mode. Type The source port(s) and destination port are located on this switch. Source:(RMirror) The switch is a source node for monitor flow.
  • Page 429 Falcon M-Class | User Guide Source Select mirror mode: Disabled: Neither frames transmitted nor frames received are mirrored Both: Frames received and frames transmitted are mirrored on the Intermediate/Destination port Rx only: Frames received on this port are mirrored on the Intermediate/Destination port.
  • Page 430: Maintenance

    Falcon M-Class | User Guide Maintenance The Maintenance includes the following procedure: Restart Device Factory Default System Update Configuration (Save/Upload) 6.5.1 Restart Device You can restart the switch here. After restart, the switch will boot normally. Figure 6-10: Restart Device Screen Table 6-7: Restart Device Parameters Yes: Click to restart device.
  • Page 431: Factory Defaults

    Falcon M-Class | User Guide 6.5.2 Factory Defaults You can reset the configuration of the switch. Only the IP configuration is retained. The new configuration is available immediately, which means that no restart is necessary. Figure 6-11: Restore to Factory Defaults Screen Table 6-8: Restore to Factory Defaults Parameters Yes: Click to reset the configuration to Factory Defaults.
  • Page 432: Software

    Falcon M-Class | User Guide 6.5.3 Software This section facilitates an update of the firmware controlling the switch. Figure 6-12: Software Upload Table 6-9: Software Upload Parameters Browse: to the location of a software image and click Upload After the software image is uploaded, a page announces that the firmware update is initiated. After about a minute, the firmware is updated and the switch restarts.
  • Page 433 Falcon M-Class | User Guide 6.5.3.1 Software Image Select This section provides information about the active and alternate (backup) firmware images in the device, and allows you to revert to the alternate image. The web page displays two tables with information about the active and alternate firmware images.
  • Page 434 Falcon M-Class | User Guide Table 6-10: Software Image Selection Parameters Image The file name of the firmware image, from when the image was last updated. Version The version of the firmware image. Date The date where the firmware was produced. Buttons Activate Alternate Image: Click to use the alternate image.
  • Page 435: Configuration

    Falcon M-Class | User Guide 6.5.4 Configuration The switch stores its configuration in a number of text files in CLI format. The files are either virtual (RAM-based) or stored in flash on the switch. The available files are: Running-config: A virtual file that represents the currently active configuration on the switch. This file is volatile.
  • Page 436 Falcon M-Class | User Guide 6.5.4.2 Download Configuration It is possible to download any of the files on the switch to the web browser. Select the file and click .Download Configuration Download of running-config may take a little while to complete, as the file must be prepared for download.
  • Page 437 Falcon M-Class | User Guide If the flash file system is full (i.e. contains default-config and 32 other files, usually including startup-config), it is not possible to create new files. Instead an existing file must be overwritten or another file must be deleted. 6.5.4.4 Activate It is possible to activate any of the configuration files present on the switch, except for running- config which represents the currently active configuration.
  • Page 438: Power Supply Overview

    Falcon M-Class | User Guide Power Supply Overview Warning ONLY the Fibrolan Power Supply (AC or DC) is suitable to be used with the M-Class series unit. Any other PS module (Fibrolan products or other), even if mechanically matching, may cause irreversible damage to the system.
  • Page 439: Dc Power Supplies

    Falcon M-Class | User Guide Figure 6-18: µFalcon-MX AC rear panel connector 6.6.2 DC Power Supplies Connect DC line voltage using the power supply cords provided (alternatively you may use other 18AWG three wire cord). M-Class devices will accept any line voltage from 20 to ̶ 60VDCThere is no ON/OFF switch on the device.
  • Page 440 Falcon M-Class | User Guide DC powered models: Required current rating = 2A CAUTION DOUBLE POLE FUSING Verify that the DC-Mains provide a 2 Amp double pole circuit breaker. Required power conductor size = at least 0.75mm² for flexible cable or 1mm² for non flexible Power Consumption (AC and DC Power Supplies): µFalcon-MX o Maximum <12W...
  • Page 441: Laser Safety

    Falcon M-Class | User Guide Laser Safety Laser CAUTION! Radiation emitted from fiber optic ports may be hazardous to human vision. Therefore the following rules must Warning be strictly observed: 1. All single-mode (SM) models are CLASS I LASER PRODUCT that may endanger your eyes and must be handled with special care.
  • Page 442: Warranty Information

    In such case report to Fibrolan the serial number of the device, date purchased, full details of reseller from whom the device was purchase and a copy of an invoice or another proof of the purchase.
  • Page 443: Glossary Of Terms

    Falcon M-Class | User Guide Glossary of Terms General Glossary of Terms General Glossary of Terms Acronym Description Access Control List Alarm Indication Signal Autonomous Link Discovery Address Resolution Protocol Bridge Protocol Data Unit BPDU Frame Lost Weighted Fair Queuing CBWFQ Continuity Check Continuity Check Message...
  • Page 444 Falcon M-Class | User Guide General Glossary of Terms Acronym Description Carrier Sense Multiple Access with Collision Detection CSMA/CD Data Encryption Standard Dynamic Host Configuration Protocol DHCP Delay measurement Destination MAC address DMAC Delay Measurement Message Delay Measurement Reply Domain Name System Differentiated Services Code Point DSCP Extensible Authentication Protocol...
  • Page 445 Falcon M-Class | User Guide General Glossary of Terms Acronym Description Far End Fault Fault Propagation File Transfer Protocol Broadband Access Over Fiber FTTB Broadband Access Over Fiber Multi Dwelling Unit FTTB MDU Gigabits per second Gbps High-Level Data Link Control HDLC Half Duplex Full Duplex...
  • Page 446 Falcon M-Class | User Guide General Glossary of Terms Acronym Description 802.3u – Fast Ethernet 802.3z – Gigabit Ethernet 802.1ab – LLDP= Link Layer Discovery Protocol 802.3ad – LACP=Link Aggregation Control Protocol 802.3ah – Link OAM Internet Engineering Task Force IETF International Telecommunication Union Telecommunication ITU-T...
  • Page 447 Falcon M-Class | User Guide General Glossary of Terms Acronym Description Locked Signal Label Distribution Protocol Logical Link Control Link Layer Discovery Protocol LLDP Loss measurement Loss of continuity Loss Measurement Message Loss Measurement Reply Link Trace Message Link Trace Reply Loss of Signal Link Segmentation Test Link Trace Message...
  • Page 448 Falcon M-Class | User Guide General Glossary of Terms Acronym Description Media Attachment Unit Maintenance Domain Multi Dwelling Unit Metro Ethernet Forum Maintenance Entity Group MEG Level Maintenance Entity Point Management information base Maintenance Immediate Point Maximum Number of Cells Packed MNCP Multi-Protocol Label Switching MPLS...
  • Page 449 Falcon M-Class | User Guide General Glossary of Terms Acronym Description Network Management System Network Time Protocol Network Termination Unit Node Unit Operation and Administration, Operation, Administration, Management Open Data-link Interface Operating Expenditures OpEx A LLDP frame contains multiple TLVs Optional TLVs Open System Interconnection Open Shortest Path First...
  • Page 450 Falcon M-Class | User Guide General Glossary of Terms Acronym Description Pseudowire Quality of Service Control List Entries Quality of Service Control List Selective Q-in-Q per IEEE802.1ad Provider Bridging Q-in-Q Quality of Service Remote Authentication Dial In User Service RADIUS Reverse Address Resolution Protocol RARP Remote Defect Indication...
  • Page 451 Falcon M-Class | User Guide General Glossary of Terms Acronym Description Spanning Tree Algorithm Spanning Tree Protocol Subscriber Unit Is an abbreviation for Synchronous Ethernet. This SyncE functionality is used to make a network 'clock frequency' synchronized. Not to be confused with real time clock synchronized (IEEE 1588) Terminal Access Controller Access Control System Plus TACACS+...
  • Page 452 Falcon M-Class | User Guide General Glossary of Terms Acronym Description User Interface User Network Interface It is an acronym for Universal Plug and Play. The goals of UPnP UPnP are to allow devices to connect seamlessly and to simplify the implementation of networks in the home (data sharing, communications, and entertainment) and in corporate environments for simplified installation of computer components...
  • Page 453: Alphabetical Glossary Of Terms

    Falcon M-Class | User Guide Alphabetical Glossary of Terms is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. Ethernet Type There are three ACE frame types ( , and IPv4) and two ACE actions (permit and deny).
  • Page 454 Falcon M-Class | User Guide There can be 15 different rate limiters, each ranging from 1-1024K packets per seconds. Under "Ports" and "Access Control List" web-pages you can assign a Rate Limiter ID to the ACE(s) or ingress port(s). is an acronym for Advanced Encryption Standard. The encryption key protocol is applied in 802.1i standard to improve WLAN security.
  • Page 455 Falcon M-Class | User Guide Auto-negotiation is the process where two different devices establish the mode of operation and the speed settings that can be shared by those devices for a link. is an acronym for Continuity Check. It is a functionality that is able to detect loss of continuity in a network by transmitting frames...
  • Page 456 Falcon M-Class | User Guide Dynamic addressing simplifies network administration because the software keeps track of IP addresses rather than requiring an administrator to manage the task. This means that a new computer can be added to a network without the hassle of manually assigning it a unique IP address.
  • Page 457 Falcon M-Class | User Guide An IPv4 dotted decimal address has the form x.y.z.w, where x, y, z, and w are decimal numbers between 0 and 255. Drop Precedence Level Every incoming frame is classified to a Drop Precedence Level (DP level), which is used throughout the device for providing congestion control guarantees to the frame according to what was configured for that...
  • Page 458 Falcon M-Class | User Guide HTTP HTTP is an acronym for Hypertext Transfer Protocol. It is a protocol that used to transfer or convey information on the World Wide Web (WWW). HTTP defines how messages are formatted and transmitted, and what actions Web servers and browsers should take in response to various commands.
  • Page 459 Falcon M-Class | User Guide can use the same credentials for authentication from any point within the network. is an acronym for Internet Group Management Protocol. It is a communications protocol used to manage the membership of Internet Protocol multicast groups. MLD is used by IP hosts and adjacent multicast routers to establish multicast group memberships.
  • Page 460 Falcon M-Class | User Guide IPMC supports IPv4 and IPv6 multicasting. IPMCv4 denotes multicast for IPv4. IPMCv6 denotes multicast for IPv6. IP Source Guard IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings.
  • Page 461 Falcon M-Class | User Guide is an acronym for Loss Of Connectivity and is detected by a is indicating lost connectivity in the network. Can be used as a switch criteria byEPS MAC Table Switching of frames is based upon the DMAC address contained in the frame.
  • Page 462 Falcon M-Class | User Guide Multicast VLAN Registration (MVR) is a protocol for Layer 2 (IP)-networks that enables multicast-traffic from a source VLAN to be shared with subscriber-VLANs. The main reason for using MVR is to save bandwidth by preventing duplicate multicast streams being sent in the core network, instead the stream(s) are received on the MVR- VLAN and forwarded to the VLANs where hosts have requested it/them(Wikipedia).
  • Page 463 Falcon M-Class | User Guide is an acronym for Operation Administration and Maintenance. It is a protocol described in ITU-T Y.1731 used to implement carrier ethernet functionality. functionality like is based on this Optional TLVs. TLVs A LLDP frame contains multiple For some TLVs it is configurable if the switch shall include the...
  • Page 464 Falcon M-Class | User Guide is an acronym for Power Over Ethernet. Power Over Ethernet is used to transmit electrical power, to remote devices over standard Ethernet cable. It could for example be used for powering IP telephones, wireless LAN access points and other equipment, where it would be difficult or expensive to connect the equipment to main power supply.
  • Page 465 Falcon M-Class | User Guide is an acronym for QoS Control Entry. It describes class associated with a particular QCE ID. Ethernet Type VLAN DSCP There are six QCE frame types: Port, Tag Priority , and . Frames can be classified by one of 4 different QoS classes: "Low", "Normal", "Medium", and "High"...
  • Page 466 Falcon M-Class | User Guide RADIUS is an acronym for Remote Authentication DialIn User Service. It is a networking protocol that provides centralized access, authorization and accounting management for people or computers to connect and use a network service. is an acronym for Remote Defect Indication. It is a functionallity that is used by a to indicate defect detected to the remote peer MEP...
  • Page 467 Falcon M-Class | User Guide shaper can limit the bandwidth of transmitted frames. It is located after the ingress queues. SMTP SMTP is an acronym for Simple Mail Transfer Protocol. It is a text-based protocol that uses the Transmission Control Protocol (TCP) and provides a mail service modeled on the file transfer service.
  • Page 468 Falcon M-Class | User Guide is an acronym for Secure SHell. It is a network protocol that allows data to be exchanged using a secure channel between two networked devices. The encryption used by SSH provides confidentiality and integrity of data over an insecure network. The goal of SSH was to replace the earlier rlogin, TELNET and rsh protocols, which did not...
  • Page 469 Falcon M-Class | User Guide Tag Priority is a 3-bit field storing the priority level for the 802.1Q frame. is an acronym for Transmission Control Protocol. It is a communications protocol that uses the Internet Protocol (IP) to exchange the messages between computers. The TCP protocol guarantees reliable and in-order delivery of data from sender to receiver and distinguishes data for multiple connections by concurrent applications (for example, Web server and e-mail server) running on the same host.
  • Page 470 Falcon M-Class | User Guide TKIP TKIP is an acronym for Temporal Key Integrity Protocol. It used in WPA to replace WEP with a new encryption algorithm. TKIP comprises the same encryption engine and RC4 algorithm defined for WEP. The key used for encryption in TKIP is 128 bits and changes the key used for each packet.
  • Page 471 Falcon M-Class | User Guide VLAN unaware switching: This is the default configuration. All ports are VLAN unaware VLAN ID with Port 1 and members of VLAN 1. This means that MAC addresses are learned in VLAN 1, and the switch does not remove or insert VLAN tags. VLAN aware switching: This is based on the IEEE 802.1Q standard.
  • Page 472 Falcon M-Class | User Guide wireless network interface cards (through firmware upgrades), but not necessarily with first generation wireless access points. WPA2 implements the full standard, but will not work with some older network cards (Wikipedia). WPA-PSK WPA-PSK is an acronym for Wi-Fi Protected Access - Pre Shared Key. WPA was designed to enhance the security of wireless networks.
  • Page 473 Falcon M-Class | User Guide Intl. Headquarters North America Central-Eastern Europe Fibrolan Ltd. Fibrolan Inc. Fibrolan CEE GmbH. Tel: +972-4-959-1717 Tel: +1-201-843-1626 Tel: +43-2622-90-990-0 Fax: +972-4-959-1718 Fax: +1-201-843-1628 Fax: +43-2622-90-990-99 info@fibrolan.com us.info@fibrolan.com office@fibrolan.at www.fibrolan.com www.fibrolan.com www.fibrolan.at ©2020 Fibrolan. All Rights Reserved...

Table of Contents