Download Print this page

Planet XGSW-28040 User Manual

24-port gigabit with 4 shared sfp 4-port 10g sfp+ managed switch

Hide thumbs Also See for XGSW-28040:

Quick installation manual (12 pages)

,

Command manual (433 pages)

Table Of Contents

Table of Contents

Advertisement

Quick Links

Download this manual See also: Command Manual

User's Manual of XGSW-28040

1

Table of Contents

Advertisement

Table of Contents

Need help?

Need help?

Do you have a question about the XGSW-28040 and is the answer not in the manual?

Questions and answers

Summary of Contents for Planet XGSW-28040

Page 1 User’s Manual of XGSW-28040...
Page 2: Fcc Warning
PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their respective owners. Disclaimer PLANET Technology does not warrant that the hardware will work properly in all environments and applications, and makes no warranty and representation, either implied or expressed, with respect to the quality, performance, merchantability, or fitness for a particular purpose.
Page 3: Table Of Contents
User’s Manual of XGSW-28040 TABLE OF CONETNTS 1. INTRODUTION ........................20 1.1 Packet Contents ............................20 1.2 Product Description ...........................20 1.3 How to Use This Manual ..........................22 1.4 Product Features............................23 1.5 Product Specification ..........................26 2. INSTALLATION ........................29 2.1 Hardware Description ..........................29 2.1.1 Switch Front Panel ..............................29...
Page 4 User’s Manual of XGSW-28040 4.2.5 Privilege Levels ..............................55 4.2.6 NTP Configuration ...............................57 4.2.7 UPnP ...................................58 4.2.8 DHCP Relay ................................59 4.2.9 DHCP Relay Statistics ............................61 4.2.10 CPU Load ................................63 4.2.11 System Log ................................64 4.2.12 Detailed Log ..............................65 4.2.13 Remote Syslog ..............................66 4.2.14 SMTP Configuration ............................67...
Page 5 User’s Manual of XGSW-28040 4.6 VLAN................................106 4.6.1 VLAN Overview ..............................106 4.6.2 IEEE 802.1Q VLAN ............................107 4.6.3 VLAN Basic Information............................. 110 4.6.4 VLAN Port Configuration ........................... 111 4.6.5 VLAN Membership ............................115 4.6.6 VLAN Membership Status..........................116 4.6.7 VLAN Port Status............................... 118 4.6.8 Private VLAN ..............................
Page 6 User’s Manual of XGSW-28040 4.8.10 MLD Snooping Port Group Filtering.........................169 4.8.11 MLD Snooping Status ............................170 4.8.12 MLD Group Information ...........................171 4.8.13 MLDv2 Information ............................172 4.8.14 MVR.................................173 4.8.15 MVR Status..............................176 4.8.16 MVR Groups Information ..........................177 4.8.17 MVR SFM Information .............................178 4.9 Quality of Service .............................180 4.9.1 Understand QOS ...............................180...
Page 7 User’s Manual of XGSW-28040 4.11.4 Network Access Overview ..........................238 4.11.5 Network Access Statistics ..........................239 4.11.6 Authentication Server Configuration.........................245 4.11.7 RADIUS Overview ............................249 4.11.8 RADIUS Details ...............................250 4.11.9 Windows Platform RADIUS Server Configuration....................257 4.11.10 802.1X Client Configuration ...........................262 4.12 Security ..............................265 4.12.1 Port Limit Control .............................265...
Page 8 User’s Manual of XGSW-28040 4.16 Loop Protection............................313 4.16.1 Configuration ..............................313 4.16.2 Loop Protection Status.............................314 4.17 sFlow ...............................315 4.17.1 sFlow Configuration ............................316 4.17.2 sFlow Status ..............................318 4.18 RMON...............................321 4.18.1 RMON Alarm Configuration ..........................321 4.18.2 RMON Alarm Detail ............................323 4.18.3 RMON Alarm Status............................324 4.18.4 RMON Event Configuration ..........................325...
Page 9 User’s Manual of XGSW-28040 System Log Lookup.............................347 System Log Clear ..............................347 System Reboot..............................348 System Restore Default............................348 System Load ...............................349 6.2 IP Command..............................350 IP Configuration..............................350 IP DHCP................................351 IP Setup................................351 IP Ping.................................352 IP DNS ................................352 IP DNS Proxy ..............................353 IPv6 AUTOCINFIG ..............................353 IPv6 Setup................................354...
Page 10 User’s Manual of XGSW-28040 MAC Dump................................368 MAC Statistics ..............................368 MAC Flush................................369 6.5 VLAN Configuration Command ......................370 VLAN Configuration.............................370 VLAV PVID ................................370 VLAN Frame Type ...............................371 VLAN Ingress Filter .............................372 VLAN Mode .................................372 VLAN Link Type..............................373 VLAN Q-in-Q Mode .............................373 VLAN Ethernet Type............................374 VLAN Add................................374...
Page 11 User’s Manual of XGSW-28040 Security Switch HTTPs Configuration .........................389 Security Switch HTTPs Mode..........................389 Security Switch HTTPs Redirect .........................390 Security Switch Access Configuration .........................390 Security Switch Access Mode..........................391 Security Switch Access Add ..........................391 Security Switch Access IPv6 Add ........................392 Security Switch Access Delete ..........................393 Security Switch Access Lookup...........................393...
Page 12 User’s Manual of XGSW-28040 Security Switch SNMP View Add.........................409 Security Switch SNMP View Delete........................410 Security Switch SNMP View Lookup ........................410 Security Switch SNMP Access Add ........................411 Security Switch SNMP Access Delete ......................... 411 Security Switch SNMP Access Lookup........................412 Security Switch RMON Statistics Add........................412 Security Switch RMON Statistics Delete......................413...
Page 13 User’s Manual of XGSW-28040 Security Network NAS Statistics..........................430 Security Network ACL Configuration ........................431 Security Network ACL Action ..........................431 Security Network ACL Policy ..........................432 Security Network ACL Rate ..........................432 Security Network ACL Add ..........................433 Security Network ACL Delete ..........................434 Security Network ACL Lookup ..........................435 Security Network ACL Clear ..........................435...
Page 14 User’s Manual of XGSW-28040 Security AAA Statistics............................452 6.8 Spanning Tree Protocol Command ......................453 STP Configuration ...............................453 STP Version ................................453 STP Tx Hold ................................454 STP MaxHops ..............................454 STP MaxAge ...............................455 STP FwdDelay ..............................455 STP CName ................................456 STP BPDU Filter..............................456 STP BPDU Guard..............................457 STP Recovery ..............................457...
Page 15 User’s Manual of XGSW-28040 LACP Role................................471 LACP Status ................................472 LACP Statistics ..............................473 6.11 LLDP Command............................474 LLDP Configuration .............................474 LLDP Mode .................................474 LLDP Optional TLV..............................475 LLDP Interval...............................476 LLDP Hold ................................476 LLDP Delay .................................477 LLDP Reinit .................................477 LLDP Statistics ..............................478 LLDP Info ................................479 LLDP CDP Aware ..............................479...
Page 16 User’s Manual of XGSW-28040 QoS Port QueueShaper Excess..........................492 QoS Port TagRemarking Mode..........................493 QoS Port TagRemarking PCP ..........................493 QoS Port TagRemarking DEI..........................494 QoS Port TagRemarking DPL..........................494 QoS Port TagRemarking Map..........................495 QoS Port DSCP Translation ..........................495 QoS Port DSCP Classification..........................496 QoS Port DSCP EgressRemark ..........................497 QoS DSCP Map ..............................497...
Page 17 User’s Manual of XGSW-28040 UPnP TTL................................510 UPnP Advertising Duration ..........................510 6.18 MVR Command............................511 MVR Configuration .............................. 511 MVR Mode ................................511 MVR VLAN Setup..............................512 MVR VLAN Port ..............................512 MVR VLAN LLQI ..............................513 MVR VLAN Channel............................513 MVR VLAN Priority..............................514 MVR Immediate Leave ............................514 MVR Status .................................514...
Page 18 User’s Manual of XGSW-28040 IPMC Flooding..............................527 IPMC Leave Proxy ..............................527 IPMC Proxy .................................528 IPMC SSM................................528 IPMC State ................................529 IPMC Querier ..............................529 IPMC Compatibility ..............................530 IPMC Fastleave..............................531 IPMC Throttling ..............................531 IPMC Filtering..............................532 IPMC Router................................532 IPMC Status ................................533 IPMC Group ................................533 IPMC Version ..............................534 IPMC SFM................................534...
Page 19 User’s Manual of XGSW-28040 VCL Protocol-based VLAN Delete........................543 VCL Protocol-based VLAN Configuration ......................544 VCL IP-based VLAN Configuration........................544 VCL IP-based VLAN Add.............................544 VCL IP-based VLAN Delete ..........................545 6.24 SMTP Command .............................546 SMTP Configuration ............................546 SMTP Mode ................................546 SMTP Server...............................546 SMTP Auth ................................547 SMTP Auth_user ..............................547...
Page 20: Introdution
Layer 3 Switch but Layer 3 Switch could be too expensive to SMB. The four 10Gbps interface in the XGSW-28040 is 10G SFP+ that is in the same size as commonly seen Gigabit SFP slot and also is the main standard for 10Gbps transceiver.
Page 21 (IPv6) in the future. With easy and friendly management interfaces and plenty of management functions included, the XGSW-28040 is the best choice for ISP to build the IPv6 FTTx edge service and for SMB to connect with the IPv6 network.
Page 22: How To Use This Manual
User’s Manual of XGSW-28040 applications within the enterprise data centers and distributions. 1.3 How to Use This Manual This User Manual is structured as follows: Section 2, INSTALLATION The section explains the functions of the Switch and how to physically install the Managed Switch.
Page 23: Product Features
User’s Manual of XGSW-28040 1.4 Product Features  Physical Port  24-Port 10/100/1000Base-T RJ-45 copper  4 100/1000Base-X mini-GBIC/SFP slots , shared with Port-21 to Port-24 4 10GBase-SR/LR SFP+ slots, compatible with 1000Base-SX/LX/BX SFP   RS-232 DB9 console interface for basic management and setup ...
Page 24 User’s Manual of XGSW-28040 IP TOS / DSCP / IP Precedence IP TCP/UDP port number Typical network application  Strict priority and Weighted Round Robin (WRR) CoS policies  Traffic-policing policies on the switch port  DSCP remarking  Multicast ...
Page 25 User’s Manual of XGSW-28040  User Privilege levels control  NTP (Network Time Protocol)  Link Layer Discovery Protocol (LLDP) Protocol  Cable Diagnostic technology provides the mechanism to detect and report potential cabling issues  Reset button for system reboot or reset to factory default...
Page 26: Product Specification
User’s Manual of XGSW-28040 1.5 Product Specification Product XGSW-28040 Hardware Specification 24 10/ 100/1000Base-T RJ-45 Auto-MDI/MDI-X ports Copper Ports 4 1001000Base-X SFP interfaces, shared with Port-21 to Port-24 SFP/mini-GBIC Slots Compatible with 100Base-FX SFP 4 10GBase-SR/LR SFP+ interface (Port-25 to Port-28)
Page 27 User’s Manual of XGSW-28040 802.1Q Tagged Based VLAN, up to 256 VLAN groups Q-in-Q tunneling Private VLAN Edge (PVE) MAC-Based VLAN VLAN Protocol-Based VLAN Voice VLAN MVR (Multicast VLAN Registration) Up to 256 VLAN groups, out of 4094 VLAN IDs IEEE 802.3ad LACP / Static Trunk...
Page 28 User’s Manual of XGSW-28040 IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1D Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class of service IEEE 802.1Q VLAN Tagging IEEE 802.1x Port Authentication Network Control...
Page 29: Installation
The unit front panel provides a simple interface monitoring the switch. Figure 2-1 show the front panel of the Managed Switches. XGSW-28040 Front Panel Figure 2-1 XGSW-28040 front panel. ■ Gigabit TP interface 10/100/1000Base-T Copper, RJ-45 Twist-Pair: Up to 100 meters. ■ SFP slots 100/1000Base-X mini-GBIC slot, SFP (Small Factor Pluggable) transceiver module: From 550 meters (Multi-mode fiber), up to 10/30/50/70/120 kilometers (Single-mode fiber).
Page 30: Led Indications
The front panel LEDs indicates instant status of port links, data activity and system power; helps monitor and troubleshoot when needed. Figure 2-2 & Figure 2-3 shows the LED indications of these Managed Switches. XGSW-28040 LED indication Figure 2-2 XGSW-28040 LED for Front Panel Figure 2-3 XGSW-28040 LED Rear Panel...
Page 31: Switch Rear Panel
The rear panel of the Managed Switch indicates an AC inlet power socket, which accepts input power from 100 to 240V AC, 50-60Hz. Figure 2-4 shows the rear panel of these Managed Switches XGSW-28040 Rear Panel Figure 2-4 Rear panel of XGSW-28040...
Page 32: Install The Switch
User’s Manual of XGSW-28040 ■ AC Power Receptacle For compatibility with electric service in most areas of the world, the Managed Switch’s power supply automatically adjusts to line power in the range 100-240VAC and 50/60 Hz. Plug the female end of the power cord firmly into the receptalbe on the rear panel of the Managed Switch. Plug the other end of the power cord into an electric service outlet then the power will be ready.
Page 33: Rack Mounting
User’s Manual of XGSW-28040 Figure 2-5 Place the Managed Switch on the desktop Keep enough ventilation space between the Managed Switch and the surrounding objects. Step3: When choosing a location, please keep in mind the environmental restrictions discussed in Chapter 1, Section 4, and Specification.
Page 34 After the brackets are attached to the Managed Switch, use suitable screws to securely attach the brackets to the rack, Step5: as shown in Figure 2-7. Figure 2-7 Mounting XGSW-28040 in a Rack Proceeds with the steps 4 and steps 5 of session 2.2.1 Desktop Installation to connect the network cabling and supply Step6:...
Page 35: Installing The Sfp / Sfp+ Transceiver
User’s Manual of XGSW-28040 power to the Managed Switch. 2.2.3 Installing the SFP / SFP+ transceiver The sections describe how to insert an SFP / SFP+ transceiver into an SFP / SFP+ slot. The SFP /SFP+ transceivers are hot-pluggable and hot-swappable. You can plug-in and out the transceiver to/from any SFP / SFP+ port without having to power down the Managed Switch.
Page 36 User’s Manual of XGSW-28040  SFP-Port 1000Base-LX (WDM,TX:1310nm) -40KM MGB-LA40  SFP-Port 1000Base-LX (WDM,TX:1550nm) -40KM MGB-LB40 Fast Ethernet SFP Transceiver modules  SFP-Port 100Base-FX Transceiver -2KM MFB-FX  SFP-Port 100Base-FX Transceiver -20KM MFB-F20  SFP-Port 100Base-FX Transceiver -60KM MFB-F60 SFP-Port 100Base-BX Transceiver (WDM,TX:1310nm) -20KM ...
Page 37 User’s Manual of XGSW-28040 interface of the switch/converter (if available) to disable the port in advance. Remove the Fiber Optic Cable gently. Turn the handle of the MGB module to horizontal. Pull out the module gently through the handle. Figure 2-11 Pull out the SFP transceiver Never pull out the module without pull the handle or the push bolts on the module.
Page 38: Switch Management
User’s Manual of XGSW-28040 3. SWITCH MANAGEMENT This chapter explains the methods that you can use to configure management access to the Managed Switch. It describes the types of management applications and the communication and management protocols that deliver data between your management device (workstation or personal computer) and the system.
Page 39: Management Access Overview
User’s Manual of XGSW-28040 3.2 Management Access Overview The Managed Switch gives you the flexibility to access and manage it using any or all of the following methods:  An administration console  Web browser interface  An external SNMP-based network management application The administration console and Web browser interface support are embedded in the Managed Switch software and are available for immediate use.
Page 40 User’s Manual of XGSW-28040 Figure 3-1 Console management Direct Access Direct access to the administration console is achieved by directly connecting a terminal or a PC equipped with a terminal-emulation program (such as HyperTerminal) to the Managed Switch console (serial) port.
Page 41: Web Management
User’s Manual of XGSW-28040 3.4 Web Management The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer. After you set up your IP address for the switch, you can access the Managed Switch's Web interface applications directly in your Web browser by entering the IP address of the Managed Switch.
Page 42: Snmp-Based Network Management
User’s Manual of XGSW-28040 3.5 SNMP-Based Network Management You can use an external SNMP-based application to configure and manage the Managed Switch, such as SNMPc Network Manager, HP Openview Network Node Management (NNM) or What’s Up Gold. This management method requires the SNMP agent on the switch and the SNMP Network Management Station to use the same community string.
Page 43: Web Configuration
User’s Manual of XGSW-28040 4. WEB CONFIGURATION This section introduces the configuration and functions of the Web-Based management. About Web-based Management The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer.
Page 44 User’s Manual of XGSW-28040  Logging on the switch Use Internet Explorer 7.0 or above Web browser. Enter the factory-default IP address to access the Web interface. The factory-default IP Address as following: http://192.168.0.100 When the following login screen appears, please enter the default username "admin" with password “admin” (or the username/password you have changed via console) to login the main screen of Managed Switch.
Page 45 User’s Manual of XGSW-28040 Figure 4-1-3 Default main page Now, you can use the Web management interface to continue the switch management or manage the Managed Switch by Web interface. The Switch Menu on the left of the web page let you access all the commands and statistics the Managed Switch provides.
Page 46: Main Web Page
User’s Manual of XGSW-28040 4.1 Main Web Page The SGSW Managed Switch provides a Web-based browser interface for configuring and managing it. This interface allows you to access the Managed Switch using the Web browser of your choice. This chapter describes how to use the Managed Switch’s Web browser interface to configure and manage it.
Page 47 User’s Manual of XGSW-28040 Figure 4-1-5 Managed Switch Main Functions Menu...
Page 48: System
User’s Manual of XGSW-28040 4.2 System Use the System menu items to display and configure basic administrative details of the Managed Switch. Under System the following topics are provided to configure and view the system information: This section has the following items: The switch system information is provided here.
Page 49: System Information
User’s Manual of XGSW-28040 4.2.1 System Information The System Info page provides information for the current device information. System Info page helps a switch administrator to identify the hardware MAC address, software version and system uptime. The screen in Figure 4-2-1 appears.
Page 50: Ip Configuration
User’s Manual of XGSW-28040 4.2.2 IP Configuration The IP Configuration includes the IP Address, Subnet Mask and Gateway. The Configured column is used to view or change the IP configuration. Fill up the IP Address, Subnet Mask and Gateway for the device. The screen in Figure 4-2-2 appears.
Page 51: Ipv6 Configuration
User’s Manual of XGSW-28040 : Click to undo any changes made locally and revert to previously saved values. : Click to renew DHCP. This button is only available if DHCP is enabled. 4.2.3 IPv6 Configuration Configure the switch-managed IPv6 information on this page.
Page 52: Users Configuration
User’s Manual of XGSW-28040 16-bit groups of contiguous zeros; but it can only appear once. It also used a following legally IPv4 address. For example, '::192.1.2.34'. Provide the IPv6 SNTP Server address of this switch. IPv6 address is in 128-bit records represented as eight fields of up to four hexadecimal digits with a colon separates each field (:).
Page 53 User’s Manual of XGSW-28040 access of that group. By default setting, most groups privilege level 5 has the read-only access and privilege level 10 has the read-write access. And the system maintenance (software upload, factory defaults and etc.) need user privilege level 15.
Page 54 User’s Manual of XGSW-28040 administrator account, privilege level 10 for a standard user account and privilege level 5 for a guest account. Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
Page 55: Privilege Levels
User’s Manual of XGSW-28040 4.2.5 Privilege Levels This page provides an overview of the privilege levels. After setup completed, please press “Save” button to take effect. Please login web interface with new user name and password, the screen in Figure 4-2-7 appears.
Page 56 User’s Manual of XGSW-28040 The page includes the following fields: Object Description  Group Name The name identifying the privilege group. In most cases, a privilege level group consists of a single module (e.g. LACP, RSTP or QoS), but a few of them contains more than one.
Page 57: Ntp Configuration
User’s Manual of XGSW-28040 4.2.6 NTP Configuration Configure NTP on this page. NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks of computer systems. NTP uses UDP (data grams) as transport layer. You can specify NTP Servers and set GMT Time zone. The NTP Configuration...
Page 58: Upnp
User’s Manual of XGSW-28040 4.2.7 UPnP Configure UPnP on this page. UPnP is an acronym for Universal Plug and Play. The goals of UPnP are to allow devices to connect seamlessly and to simplify the implementation of networks in the home (data sharing, communications, and entertainment) and in corporate environments for simplified installation of computer components.
Page 59: Dhcp Relay
User’s Manual of XGSW-28040 Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Figure 4-2-10 UPnP devices shows on Windows My Network Places 4.2.8 DHCP Relay Configure DHCP Relay on this page. DHCP Relay is used to forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain.
Page 60 User’s Manual of XGSW-28040 The Remote ID sub-option was designed to carry information relating to the remote host end of the circuit. The definition of Circuit ID in the switch is 4 bytes in length and the format is "vlan_id" "module_id" "port_no". The parameter of "vlan_id"...
Page 61: Dhcp Relay Statistics
User’s Manual of XGSW-28040 contains relay agent information. It will enforce the policy. And it only works under DHCP relay information operation mode enabled. Possible policies are: Replace: Replace the original relay information when receive a DHCP message that already contains it.
Page 62 User’s Manual of XGSW-28040 missing. Circuit ID  Receive Missing The packets number that received packets which Remote ID option was missing. Remote ID  Receive Bad Circuit ID The packets number that the Circuit ID option did not match known circuit ID.
Page 63: Cpu Load
User’s Manual of XGSW-28040 4.2.10 CPU Load This page displays the CPU load, using a SVG graph. The load is measured as averaged over the last 100ms, 1sec and 10 seconds intervals. The last 120 samles are graphed, and the last numbers are displayed as text as well.
Page 64: System Log
User’s Manual of XGSW-28040 4.2.11 System Log The switch system log information is provided here. The System Log screen in Figure 4-2-14 appears. Figure 4-2-14 System Log page screenshot The page includes the following fields: Object Description  ID The ID (>= 1) of the system log entry.
Page 65: Detailed Log
User’s Manual of XGSW-28040 : Downloads the selected log entries. : Updates the system log entries, starting from the first available entry ID. : Updates the system log entries, ending at the last entry currently displayed. : Updates the system log entries, starting from the last entry currently displayed.
Page 66: Remote Syslog
User’s Manual of XGSW-28040 : Print the system log entry to the current entry ID. 4.2.13 Remote Syslog Configure remote syslog on this page. The Remote Syslog screen in Figure 4-2-16 appears. Figure 4-2-16 Remote Syslog page screenshot The page includes the following fields:...
Page 67: Smtp Configuration
User’s Manual of XGSW-28040 4.2.14 SMTP Configuration This page facilitates a SMTP Configure the switch. The SMTP Configure screen in Figure 4-2-17 appears. Figure 4-2-17 SMTP Configuration page screenshot The page includes the following fields: Object Description  SMTP Mode Controls whether SMTP is enabled on this switch.
Page 68: Web Firmware Upgrade
User’s Manual of XGSW-28040 Buttons : Send a test mail to mail server to check this account is available or not. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
Page 69: Tftp Firmware Upgrade
User’s Manual of XGSW-28040 the Managed Switch until the update progress is complete. DO NOT Power OFF Do not quit the Firmware Upgrade page without press the “OK” button - after the image be loaded. Or the system won’t apply the new firmware. User has to repeat the firmware upgrade processes again.
Page 70: Configuration Backup
User’s Manual of XGSW-28040 Do not quit the Firmware Upgrade page without press the “OK” button - after the image be loaded. Or the system won’t apply the new firmware. User has to repeat the firmware upgrade processes again. 4.2.17 Configuration Backup This function allows backup and reload the current configuration of the Managed Switch to the local management station.
Page 71 User’s Manual of XGSW-28040  Save Configuration Press the “Save Configuration” button to save the current configuration in manager workstation. The following screens in Figure 4-2-22 & 4-2-23 appear Figure 4-2-22 File Download screen Chose the file save path in management workstation.
Page 72: Configuration Upload
User’s Manual of XGSW-28040 4.2.18 Configuration Upload This function allows backup and reload the current configuration of the Managed Switch to the local management station. The Configuration Upload screen in Figure 4-2-24 appears. Figure 4-2-24 Configuration Upload page screenshot ...
Page 73: Factory Default
User’s Manual of XGSW-28040 4.2.19 Factory Default You can reset the configuration of the stack switch on this page. Only the IP configuration is retained. The new configuration is available immediately, which means that no restart is necessary. The Factory Default screen in Figure 4-2-26 appears.
Page 74 User’s Manual of XGSW-28040 re-login the WEB interface about 60 seconds later, the System Reboot screen in Figure 4-2-27 appears. Figure 4-2-27 System Reboot page screenshot Buttons : Click to reboot the system. : Click to return to the Port State page without reboot the system.
Page 75: Simple Network Management Protocol
User’s Manual of XGSW-28040 4.3 Simple Network Management Protocol 4.3.1 SNMP Overview The Simple Network Management Protocol (SNMP) is an application layer protocol that facilitates the exchange of management information between network devices. It is part of the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol suite.
Page 76: Snmp System Configuration
User’s Manual of XGSW-28040  Configure SNMPv3 communities table on this page. SNMPv3 Communities  Configure SNMPv3 users table on this page. SNMPv3 Users  Configure SNMPv3 groups table on this page. SNMPv3 Groups  Configure SNMPv3 views table on this page.
Page 77: Snmp Trap Configuration
User’s Manual of XGSW-28040 The allowed string length is 0 to 255, and the allowed content is the ASCII characters from 33 to 126. The field is applicable only when SNMP version is SNMPv1 or SNMPv2c. If SNMP version is SNMPv3, the community string will be associated with SNMPv3 communities table.
Page 78 User’s Manual of XGSW-28040 SNMP v3: Set SNMP trap supported version 3.  Indicates the community access string when send SNMP trap packet. The Trap Community allowed string length is 0 to 255, and the allowed content is the ASCII characters from 33 to 126.
Page 79: Snmp System Information
User’s Manual of XGSW-28040 string must contain an even number(in hexadecimal format) with number of digits between 10 and 64, but all-zeros and all-'F's are not allowed.  Trap Security Name Indicates the SNMP trap security name. SNMPv3 traps and informs using USM for authentication and privacy.
Page 80: Snmpv3 Configuration
User’s Manual of XGSW-28040 Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.3.5 SNMPv3 Configuration 4.3.5.1 SNMPv3 Communities Configure SNMPv3 communities table on this page. The entry index key is Community. The SNMPv3 Communities screen in Figure 4-3-4 appears.
Page 81: Snmpv3 Users
User’s Manual of XGSW-28040 : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.3.5.2 SNMPv3 Users Configure SNMPv3 users table on this page. The entry index keys are Engine ID and User Name. The SNMPv3 Users screen in Figure 4-3-5 appears.
Page 82: Snmpv3 Groups
User’s Manual of XGSW-28040 must first ensure that the value is set correctly.  Indicates the authentication protocol that this entry should belong to. Possible Authentication authentication protocol are: Protocol None: None authentication protocol. MD5: An optional flag to indicate that this user using MD5 authentication protocol.
Page 83: Snmpv3 Views
User’s Manual of XGSW-28040 Figure 4-3-6 SNMPv3 Groups Configuration page screenshot The page includes the following fields: Object Description  Check to delete the entry. It will be deleted during the next save. Delete  Indicates the security model that this entry should belong to. Possible security...
Page 84: Snmpv3 Access
User’s Manual of XGSW-28040 screen in Figure 4-3-7 appears. Figure 4-3-7 SNMPv3 Views Configuration page screenshot The page includes the following fields: Object Description  Check to delete the entry. It will be deleted during the next save. Delete ...
Page 85 User’s Manual of XGSW-28040 Figure 4-3-8 SNMPv3 Accesses Configuration page screenshot The page includes the following fields: Object Description  Check to delete the entry. It will be deleted during the next save. Delete  A string identifying the group name that this entry should belong to. The allowed...
Page 86 User’s Manual of XGSW-28040 : Click to undo any changes made locally and revert to previously saved values.
Page 87: Port Management
User’s Manual of XGSW-28040 4.4 Port Management Use the Port Menu to display or configure the Managed Switch's ports. This section has the following items:  Configures port connection settings Port Configuration  Lists Ethernet and RMON port statistics Port Statistics Overview ...
Page 88 User’s Manual of XGSW-28040  The current link state is displayed graphically. Green indicates the link is up and Link red that it is down.  Provides the current link speed of the port. Current Link Speed  Select any available link speed for the given switch port. Draw the menu bar to Configured Link Speed select the mode.
Page 89: Port Statistics Overview
User’s Manual of XGSW-28040 Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. : Click to refresh the page. Any changes made locally will be undone. 4.4.2 Port Statistics Overview This page provides an overview of general traffic statistics for all switch ports.
Page 90: Port Statistics Detail
User’s Manual of XGSW-28040  Filtered The number of received frames filtered by the forwarding process. Buttons : Click to refresh the page immediately. : Clears the counters for all ports. Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals.
Page 91 User’s Manual of XGSW-28040 Object Description  The number of received and transmitted (good and bad) packets Rx and Tx Packets  The number of received and transmitted (good and bad) bytes. Includes FCS, but Rx and Tx Octets excludes framing bits.
Page 92: Sfp Information
User’s Manual of XGSW-28040 Transmit Error Counters Object Description  The number of frames dropped due to output buffer congestion. Tx Drops  The number of frames dropped due to excessive or late collisions. Tx Late/Exc. Coll. Buttons : Click to refresh the page immediately.
Page 93: Port Mirror
User’s Manual of XGSW-28040  Type Display the type of current SFP module, the possible types are:  1000Base-SX  1000Base-LX  100Base-FX  Speed Display the spedd of current SFP module, the speed value or description is get from the SFP module. Different vendors SFP modules might shows different speed information.
Page 94 User’s Manual of XGSW-28040 Figure 4-4-5 Port Mirror application The traffic to be copied to the mirror port is selected as follows:  All frames received on a given port (also known as ingress or source mirroring).  All frames transmitted on a given port (also known as egress or destination mirroring).
Page 95 User’s Manual of XGSW-28040 Mirror Port Configuration The Port Mirror screen in Figure 4-4-6 appears. Figure 4-4-6 Mirror Configuration page screenshot The page includes the following fields: Object Description  Port to mirror on Frames from ports that have either source (rx) or destination (tx) mirroring enabled are mirrored to this port.
Page 96 User’s Manual of XGSW-28040 Disabled: Neither frames transmitted or frames received are mirrored. Enabled: Frames received and frames transmitted are mirrored to the mirror port. For a given port, a frame is only transmitted once. It is therefore not possible to mirror Tx frames on the mirror port.
Page 97: Link Aggregation
User’s Manual of XGSW-28040 4.5 Link Aggregation Port Aggregation optimizes port usage by linking a group of ports together to form a single Link Aggregated Groups (LAGs). Port Aggregation multiplies the bandwidth between the devices, increases port flexibility, and provides link redundancy.
Page 98 User’s Manual of XGSW-28040 The Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Partner Systems that require high speed redundant links. Link aggregation lets you group up to eight consecutive ports into a single dedicated connection. This feature can expand bandwidth to a device on the network. LACP operation requires full-duplex mode, more detail information refer to the IEEE 802.3ad standard.
Page 99: Static Aggregation
User’s Manual of XGSW-28040 4.5.1 Static Aggregation This page is used to configure the Aggregation hash mode and the aggregation group. The aggregation hash mode settings are global, whereas the aggregation group relate to the currently selected stack unit, as reflected by the page header.
Page 100 User’s Manual of XGSW-28040 Figure 4-5-3 Aggregation Group Configuration page screenshot The page includes the following fields: .Object Description  Indicates the group ID for the settings contained in the same row. Group ID Group ID "Normal" indicates there is no aggregation. Only one group ID is valid per port.
Page 101: Lacp Configuration
User’s Manual of XGSW-28040 4.5.2 LACP Configuration Link Aggregation Control Protocol (LACP) - LACP LAG negotiate Aggregated Port links with other LACP ports located on a different device. LACP allows switches connected to each other to discover automatically whether any ports are member of the same LAG.
Page 102: Lacp System Status
User’s Manual of XGSW-28040  Controls whether LACP is enabled on this switch port. LACP will form an LACP Enabled aggregation when 2 or more ports are connected to the same partner. LACP can form max 12 LLAGs per switch and 2G LAGs per stack.
Page 103: Lacp Port Status
User’s Manual of XGSW-28040 Object Description  The Aggregation ID associated with this aggregation instance. Aggr ID For LLAG the id is shown as 'isid:aggr-id' and for GLAGs as 'aggr-id'  The system ID (MAC address) of the aggregation partner.
Page 104: Lacp Port Statistics
User’s Manual of XGSW-28040 The page includes the following fields: Object Description  The switch port number. Port  'Yes' means that LACP is enabled and the port link is up. 'No' means that LACP is LACP not enabled or that the port link is down. 'Backup' means that the port could not join the aggregation group but will join if other port leaves.
Page 105 User’s Manual of XGSW-28040 Figure 4-5-7 LACP Statistics page screenshot The page includes the following fields: Object Description  The switch port number. Port  Shows how many LACP frames have been sent from each port. LACP Received  Shows how many LACP frames have been received at each port.
Page 106: Vlan
User’s Manual of XGSW-28040 4.6 VLAN 4.6.1 VLAN Overview A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. VLAN can be used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN.
Page 107: Ieee 802.1Q Vlan
User’s Manual of XGSW-28040 Membership 4.6.2 IEEE 802.1Q VLAN In large networks, routers are used to isolate broadcast traffic for each subnet into separate domains. This Managed Switch provides a similar service at Layer 2 by using VLANs to organize any group of network nodes into separate broadcast domains.
Page 108 User’s Manual of XGSW-28040 Some relevant terms: Tagging - The act of putting 802.1Q VLAN information into the header of a packet. Untagging - The act of stripping 802.1Q VLAN information out of the packet header. ■ 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag.
Page 109 User’s Manual of XGSW-28040 ■ Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLAN to span network devices (and indeed, the entire network –...
Page 110: Vlan Basic Information
User’s Manual of XGSW-28040 ■ VLAN Classification When the switch receives a frame, it classifies the frame in one of two ways. If the frame is untagged, the switch assigns the frame to an associated VLAN (based on the default VLAN ID of the receiving port). But if the frame is tagged, the switch uses the tagged VLAN ID to identify the port broadcast domain of the frame.
Page 111: Vlan Port Configuration
User’s Manual of XGSW-28040  Current number of Display the current number of VLANs VLANs  VLAN Learning Display the VLAN learning mode. The Managed Switch supports IVL (IVL Independent vlan learning).  Configurable PVID Indicates whether or not configurable PVID tagging is implemented.
Page 112 User’s Manual of XGSW-28040 QinQ tunneling is used to maintain customer-specific VLAN and Layer 2 protocol configurations even when different customers use the same internal VLAN IDs. This is accomplished by inserting Service Provider VLAN (SPVLAN) tags into the customer’s frames when they enter the service provider’s network, and then stripping the tags when the frames leave the network.
Page 113 User’s Manual of XGSW-28040 VLAN Port Configuration The VLAN Port Configuration screen in Figure 4-6-2 appears. Figure 4-6-2 VLAN Port Configuration page screenshot The page includes the following fields: Object Description  This is the logical port number for this row.
Page 114 User’s Manual of XGSW-28040 a member of the classified VLAN of the frame, the frame is discarded. By default, ingress filtering is disabled (no checkmark).  Determines whether the port accepts all frames or only tagged frames. This Accept Frame Type parameter affects VLAN ingress processing.
Page 115: Vlan Membership
User’s Manual of XGSW-28040 4.6.5 VLAN Membership  Adding Static Members to VLANs (VLAN Index) Use the VLAN Static Table to configure port members for the selected VLAN index. The VLAN membership configuration for the selected stack switch / unit switch can be monitored and modified here. Up to 255 VLANs are supported. This page allows for adding and deleting VLANs as well as adding and deleting port members of each VLAN.
Page 116: Vlan Membership Status
User’s Manual of XGSW-28040 Buttons : Click to add new VLAN. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. : Refreshes the displayed table starting from the "VLAN ID" input fields.
Page 117 User’s Manual of XGSW-28040 typically originating from IP phones. - MVR : MVR is used to eliminate the need to duplicate multicast traffic for subscribers in each VLAN. Multicast traffic for all channels is sent only on a single (multicast) VLAN.
Page 118: Vlan Port Status
User’s Manual of XGSW-28040 4.6.7 VLAN Port Status This page provides VLAN Port Staus. The VLAN Port Status screen in Figure 4-6-5 appears. Figure 4-6-5 VLAN Port Status for Static User page screenshot The page includes the following fields: Object Description ...
Page 119: Private Vlan
User’s Manual of XGSW-28040 frames, untagged frames received on that port are discarded.  Tx Tag Shows egress filtering frame status whether tagged or untagged.  UVID Shows UVID (untagged VLAN ID). Port's UVID determines the packet's behavior at the egress side.
Page 120 User’s Manual of XGSW-28040 Figure 4-6-6 Private VLAN Membership Configuration page screenshot The page includes the following fields: Object Description  Delete To delete a private VLAN entry, check this box. The entry will be deleted during the next save.
Page 121: Port Isolation
User’s Manual of XGSW-28040 4.6.9 Port Isolation Overview When a VLAN is configured to be a private VLAN, communication between ports within that VLAN can be prevented. Two application examples are provided in this section:  Customers connected to an ISP can be members of the same VLAN, but they are not allowed to communicate with each other within that VLAN.
Page 122 User’s Manual of XGSW-28040 The configuration of promiscuous and isolated ports applies to all private VLANs. When traffic comes in on a promiscuous port in a private VLAN, the VLAN mask from the VLAN table is applied. When traffic comes in on an isolated port, the private VLAN mask is applied in addition to the VLAN mask from the VLAN table.
Page 123: Vlan Setting Example
User’s Manual of XGSW-28040 4.6.10 VLAN setting example:  Separate VLAN  802.1Q VLAN Trunk  Port Isolate 4.6.10.1 Two separate 802.1Q VLAN The diagram shows how the Managed Switch handle Tagged and Untagged traffic flow for two VLANs. VLAN Group 2 and VLAN Group 3 are separated VLAN.
Page 124 User’s Manual of XGSW-28040 While the packet leaves Port-2, it will be stripped away it tag becoming an untagged packet. While the packet leaves Port-3, it will keep as a tagged packet with VLAN Tag=2.  Tagged packet entering VLAN 2 While [PC-3] transmit a tagged packet with VLAN Tag=2 enters Port-3, [PC-1] and [PC-2] will received the packet through Port-1 and Port-2.
Page 125 User’s Manual of XGSW-28040 Figure 4-6-9 Add new VLAN group, assign VLAN members for VLAN 2 and VLAN 3 and remove specify ports from VLAN 1 member It’s import to remove the VLAN members from VLAN 1 configuration. Or the ports would become overlap setting.
Page 126: Vlan Trunking Between Two 802.1Q Aware Switch
User’s Manual of XGSW-28040 4.6.10.2 VLAN Trunking between two 802.1Q aware switch The most cases are used for “Uplink” to other switches. VLANs are separated at different switches, but they need to access with other switches within the same VLAN group. The screen in Figure 4-6-11 appears.
Page 127: Port Isolate
User’s Manual of XGSW-28040 About the VLAN ports connect to the hosts, please refer to 4.6.10.1 examples. The following steps will focus on the VLAN Trunk port configuration. Specify Port-8 to be the 802.1Q VLAN Trunk port. Assign Port-8 to both VLAN 2 and VLAN 3 at the VLAN Member configuration page.
Page 128 User’s Manual of XGSW-28040 Setup steps Assign Port Mode Set Port-1~Port-4 in Isolate port. Set Port5 and Port-6 in Promiscuous port. The screen in Figure 4-6-15 appears. Figure 4-6-15 The configuration of Isolate and Promiscuous port Assign VLAN Member : VLAN 1 : Port-1,Port-2 ,Port-5 and Port-3 VLAN 2 : Port-3~Port-6.
Page 129: Mac-Based Vlan
User’s Manual of XGSW-28040 4.6.11 MAC-based VLAN The MAC-based VLAN enties can be configured here. This page allows for adding and deleting MAC-based VLAN entries and assigning the entries to different ports. This page shows only static entries. The MAC-based VLAN screen in Figure 4-6-17 appears.
Page 130: Mac-Based Vlan Status
User’s Manual of XGSW-28040 : Click to undo any changes made locally and revert to previously saved values. Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Click to refresh the page immediately.
Page 131 User’s Manual of XGSW-28040 Figure 4-6-19 Protocol to Group Mapping Table page screenshot The page includes the following fields: Object Description  Delete To delete a Protocol to Group Name map entry, check this box. The entry will be deleted on the switch during the next Save.
Page 132: Protocol-Based Vlan
User’s Manual of XGSW-28040 4.6.14 Protocol-based VLAN This page allows you to add new protocols to Group Name (unique for each Group) mapping entries as well as allow you to see and delete already mapped entries for the switch. The Protocol-based VLAN screen in Figure 4-6-20 appears.
Page 133: Protocol-Based Vlan Mambership
User’s Manual of XGSW-28040 from 0x00-0xff. b. PID: If the OUI is hexadecimal 000000, the protocol ID is the Ethernet type (EtherType) field value for the protocol running on top of SNAP; if the OUI is an OUI for a particular organization, the protocol ID is a value assigned by that organization to the protocol running on top of SNAP.
Page 134 User’s Manual of XGSW-28040 The page includes the following fields: Object Description  Delete To delete a Group Name to VLAN map entry, check this box. The entry will be deleted on the switch during the next Save  Group Name...
Page 135: Spanning Tree Protocol
User’s Manual of XGSW-28040 4.7 Spanning Tree Protocol 4.7.1 Theory The Spanning Tree protocol can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices in your network to ensure that only one route exists between any two stations on the network, and provide backup links which automatically take over when a primary link goes down.
Page 136 User’s Manual of XGSW-28040 The switch sends BPDUs to communicate and construct the spanning-tree topology. All switches connected to the LAN on which the packet is transmitted will receive the BPDU. BPDUs are not directly forwarded by the switch, but the receiving switch uses the information in the frame to calculate a BPDU, and, if the topology changes, initiates a BPDU transmission.
Page 137 User’s Manual of XGSW-28040 Figure 4-7-1 STP Port State Transitions You can modify each port state by using management software. When you enable STP, every port on every switch in the network goes through the blocking state and then transitions through the states of listening and learning at power up. If properly configured, each port stabilizes to the forwarding or blocking state.
Page 138 User’s Manual of XGSW-28040 Parameter Description Default Value A combination of the User-set priority and 32768 + MAC Bridge Identifier(Not user the switch’s MAC address. configurable The Bridge Identifier consists of two parts: except by setting priority a 16-bit priority and a 48-bit Ethernet MAC...
Page 139 User’s Manual of XGSW-28040 User-Changeable STA Parameters The Switch’s factory default setting should cover the majority of installations. However, it is advisable to keep the default settings as set at the factory; unless, it is absolutely necessary. The user changeable parameters in the Switch are as follows: Priority –...
Page 140 User’s Manual of XGSW-28040 Figure 4-7-5 Before Applying the STA Rules In this example, only the default STP values are used. Figure 4-7-6 After Applying the STA Rules...
Page 141: Stp System Configuration
User’s Manual of XGSW-28040 The switch with the lowest Bridge ID (switch C) was elected the root bridge, and the ports were selected to give a high port cost between switches B and C. The two (optional) Gigabit ports (default port cost = 20,000) on switch A are connected to one (optional) Gigabit port on both switch B and C.
Page 142 User’s Manual of XGSW-28040 The page includes the following fields: Basic Settings Object Description  The STP protocol version setting. Valid values are STP, RSTP and MSTP. Protocol Version  Bridge Priority Controls the bridge priority. Lower numeric values have better priority. The bridge priority plus the MSTI instance number, concatenated with the 6-byte MAC address of the switch forms a Bridge Identifier.
Page 143: Bridge Status
User’s Manual of XGSW-28040 re-enabled for normal STP operation. The condition is also cleared by a system reboot.  The time that has to pass before a port in the error-disabled state can be Port Error Recovery enabled. Valid values are between 30 and 86400 seconds (24 hours).
Page 144: Cist Port Configuration
User’s Manual of XGSW-28040  Topology Flag The current state of the Topology Change Flag for this Bridge instance.  Topology Change Last The time since last Topology Change occurred. Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
Page 145 User’s Manual of XGSW-28040 Figure 4-7-9 STP CIST Port Configuration page screenshot The page includes the following fields: Object Description  The switch port number of the logical STP port. Port  Controls whether RSTP is enabled on this switch port.
Page 146 User’s Manual of XGSW-28040 A port entering error-disabled state due to this setting is subject to the bridge Port Error Recovery setting as well.  Point-to-point Controls whether the port connects to a point-to-point LAN rather than a shared medium. This can be automatically determined, or forced either true or false.
Page 147: Msti Priorities
User’s Manual of XGSW-28040 Trunk 50,000 Full Duplex 10,000 Gigabit Ethernet Trunk 5,000 Table 4-7-3 Default STP Path Costs 4.7.5 MSTI Priorities This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well.
Page 148: Msti Configuration
User’s Manual of XGSW-28040 4.7.6 MSTI Configuration This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. The MSTI Configuration screen in Figure 4-7-11 appears. Figure 4-7-11 MSTI Configuration page screenshot...
Page 149: Msti Ports Configuration
User’s Manual of XGSW-28040  Configuration Name The name identifiying the VLAN to MSTI mapping. Bridges must share the name and revision (see below), as well as the VLAN-to-MSTI mapping configuration in order to share spanning trees for MSTI's. (Intra-region). The name is at most 32 characters.
Page 150 User’s Manual of XGSW-28040 MSTI Port Configuration Object Description  Select MSTI Select the bridge instance and set more detail configuration. Figure 4-7-13 MST1 MSTI Port Configuration page screenshot The page includes the following fields: MSTx MSTI Port Configuration...
Page 151: Port Status
User’s Manual of XGSW-28040 Object Description  Port The switch port number of the corresponding STP CIST (and MSTI) port.  Path Cost Controls the path cost incurred by the port. The Auto setting will set the path cost as appropriate by the physical link speed, using the 802.1D recommended values.
Page 152 User’s Manual of XGSW-28040 Figure 4-7-14 STP Port Status page screenshot The page includes the following fields: Object Description  The switch port number of the logical STP port. Port  The current STP port role of the ICST port. The port role can be one of the...
Page 153: Port Statistics
User’s Manual of XGSW-28040 Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. 4.7.9 Port Statistics This page displays the STP port statistics counters for port physical ports in the currently selected switch.
Page 154: Multicast
User’s Manual of XGSW-28040 4.8 Multicast 4.8.1 IGMP Snooping The Internet Group Management Protocol (IGMP) lets host and routers share information about multicast groups memberships. IGMP snooping is a switch feature that monitors the exchange of IGMP messages and copies them to the CPU for feature processing.
Page 155 User’s Manual of XGSW-28040 Figure 4-8-2 Multicast flooding Figure 4-8-3 IGMP Snooping multicast stream control...
Page 156 User’s Manual of XGSW-28040 IGMP Versions 1 and 2 Multicast groups allow members to join or leave at any time. IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group. IGMP version 1 is defined in RFC 1112. It has a fixed packet size and no optional data.
Page 157 User’s Manual of XGSW-28040 message, and query messages that are specific to a given group. The states a computer will go through to join or to leave a multicast group are shown below: Figure 4-8-4 IGMP State Transitions  IGMP Querier –...
Page 158: Igmp Snooping Configuration
User’s Manual of XGSW-28040 4.8.2 IGMP Snooping Configuration This page provides IGMP Snooping related configuration. The IGMP Snooping Configuration screen in Figure 4-8-5 appears. Figure 4-8-5 IGMP Snooping Configuration page screenshot The page includes the following fields: Object Description ...
Page 159: Igmp Snooping Vlan Configuration
User’s Manual of XGSW-28040 The flooding control takes effect only when IGMP Snooping is enabled. Flooding Enabled When IGMP Snooping is disabled, unregistered IPMCv4 traffic flooding is always active in spite of this setting.  IGMP SSM Range SSM (Source-Specific Multicast) Range allows the SSM-aware hosts and routers run the SSM service model for the groups in the address range.
Page 160 User’s Manual of XGSW-28040 Figure 4-8-6 IGMP Snooping VLAN Configuration page screenshot The page includes the following fields: Object Description  The VLAN ID of the entry. VLAN ID  IGMP Snooping Enable Enable the per-VLAN IGMP Snooping. Only up to 64 VLANs can be selected.
Page 161: Igmp Snooping Port Group Filtering
User’s Manual of XGSW-28040 4.8.4 IGMP Snooping Port Group Filtering In certain switch applications, the administrator may want to control the multicast services that are available to end users. For example, an IP/TV service based on a specific subscription plan. The IGMP filtering feature fulfills this requirement by restricting access to specified multicast services on a switch port, and IGMP throttling limits the number of simultaneous multicast groups a port can join.
Page 162: Igmp Snooping Status
User’s Manual of XGSW-28040 4.8.5 IGMP Snooping Status This page provides IGMP Snooping status. The IGMP Snooping Status screen in Figure 4-8-8 appears. Figure 4-8-8 IGMP Snooping Status page screenshot The page includes the following fields: Object Description  The VLAN ID of the entry.
Page 163: Igmp Group Information
User’s Manual of XGSW-28040  V3 Reports Received The number of Received V3 Reports.  V2 Leave Received The number of Received V2 Leave.  Router Port Display which ports act as router ports. A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or IGMP querier.
Page 164: Igmpv3 Information
User’s Manual of XGSW-28040 The page includes the following fields: Object Description  VLAN ID of the group. VLAN ID  Groups Group address of the group displayed.  Port Members Ports under this group. Buttons Auto-refresh : Automatic refresh occurs every 3 seconds.
Page 165: Mld Snooping Configuration
User’s Manual of XGSW-28040  Port Switch port number.  Indicates the filtering mode maintained per (VLAN ID, port number, Group Mode Address) basis. It can be either Include or Exclude.  Source Address IP Address of the source. Currently, system limits the total number of IP source addresses for filtering to be 128.
Page 166 User’s Manual of XGSW-28040 Figure 4-8-11 MLD Snooping Configuration page screenshot The page includes the following fields: Object Description  Enable the Global MLD Snooping. Snooping Enabled  Enable unregistered IPMCv6 traffic flooding. Unregistered IPMCv6 The flooding control takes effect only when MLD Snooping is enabled.
Page 167: Mld Snooping Vlan Configuration
User’s Manual of XGSW-28040  MLD SSM Range SSM (Source-Specific Multicast) Range allows the SSM-aware hosts and routers run the SSM service model for the groups in the address range.  Leave Proxy Enable Enable MLD Leave Proxy. This feature can be used to avoid forwarding unnecessary leave messages to the router side.
Page 168 User’s Manual of XGSW-28040 The page includes the following fields: Object Description  The VLAN ID of the entry. VLAN ID  MLD Snooping Enable Enable the per-VLAN MLD Snooping. Only up to 32 VLANs can be selected.  MLD Querier Enable the MLD Querier in the VLAN.
Page 169: Mld Snooping Port Group Filtering
User’s Manual of XGSW-28040 : Click to undo any changes made locally and revert to previously saved values. 4.8.10 MLD Snooping Port Group Filtering In certain switch applications, the administrator may want to control the multicast services that are available to end users. For example, an IP/TV service based on a specific subscription plan.
Page 170: Mld Snooping Status
User’s Manual of XGSW-28040 : Click to undo any changes made locally and revert to previously saved values. 4.8.11 MLD Snooping Status This page provides MLD Snooping status. The IGMP Snooping Status screen in Figure 4-8-14 appears. Figure 4-8-14 MLD Snooping Status page screenshot...
Page 171: Mld Group Information
User’s Manual of XGSW-28040  The number of Transmitted Querier. Querier Transmitted  Querier Received The number of Received Querier.  V1 Reports Received The number of Received V1 Reports.  V2 Reports Received The number of Received V2 Reports.
Page 172: Mldv2 Information
User’s Manual of XGSW-28040 The page includes the following fields: Object Description  VLAN ID of the group. VLAN ID  Groups Group address of the group displayed.  Port Members Ports under this group. Buttons Auto-refresh : Automatic refresh occurs every 3 seconds.
Page 173: Mvr
User’s Manual of XGSW-28040  VLAN ID VLAN ID of the group.  Group Group address of the group displayed.  Port Switch port number.  Indicates the filtering mode maintained per (VLAN ID, port number, Group Mode Address) basis. It can be either Include or Exclude.
Page 174 User’s Manual of XGSW-28040 Figure 4-8-17 MVR Configuration page screenshot The page includes the following fields: Object Description  MVR Mode Enable/Disable the Global MVR. The Unregistered Flooding control depends on the current configuration in IGMP/MLD Snooping.
Page 175 User’s Manual of XGSW-28040 It is suggested to enable Unregistered Flooding control when the MVR group table is full.  Delete Check to delete the entry. The designated entry will be deleted during the next save.  MVR VID Specify the Multicast VLAN ID.
Page 176: Mvr Status
User’s Manual of XGSW-28040 Select the port role by clicking the Role symbol to switch the setting. I indicates Inactive; S indicates Source; R indicates Receiver The default Role is Inactive.  Immediate Leave Enable the fast leave on the port.
Page 177: Mvr Groups Information
User’s Manual of XGSW-28040 Buttons : Click to refresh the page immediately. : Clears all Statistics counters. Auto-refresh : Automatic refresh occurs every 3 seconds. 4.8.16 MVR Groups Information Entries in the MVR Group Table are shown on this page. The MVR Group Table is sorted first by VLAN ID, and then by group.
Page 178: Mvr Sfm Information
User’s Manual of XGSW-28040 : Updates the table, starting with the entry after the last entry currently displayed. 4.8.17 MVR SFM Information Entries in the MVR SFM Information Table are shown on this page. The MVR SFM (Source-Filtered Multicast) Information Table also contains the SSM (Source-Specific Multicast) information.
Page 179 User’s Manual of XGSW-28040 : Refreshes the displayed table starting from the input fields. : Updates the table starting from the first entry in the MVR SFM Information Table. : Updates the table, starting with the entry after the last entry currently displayed.
Page 180: Quality Of Service
User’s Manual of XGSW-28040 4.9 Quality of Service 4.9.1 Understand QOS Quality of Service (QoS) is an advanced traffic prioritization feature that allows you to establish control over network traffic. QoS enables you to assign various grades of network service to different types of traffic, such as multi-media, video, protocol-specific, time critical, and file-backup traffic.
Page 181: Port Policing
User’s Manual of XGSW-28040 4.9.2 Port Policing This page allows you to configure the Policer settings for all switch ports. The Port Policing screen in Figure 4-9-1 appears. Figure 4-9-1 QoS Ingress Port Policers page screenshot The page includes the following fields:...
Page 182: Port Classification
User’s Manual of XGSW-28040  If flow control is enabled and the port is in flow control mode, then pause frames Flow Control are sent instead of discarding frames. Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
Page 183 User’s Manual of XGSW-28040 Object Description  Port The port number for which the configuration below applies.  QoS Class Controls the default QoS class, i.e., the QoS class for frames not classified in any other way. There is a one to one mapping between QoS class, queue and priority.
Page 184: Port Scheduler
User’s Manual of XGSW-28040 4.9.4 Port Scheduler This page provides an overview of QoS Egress Port Schedulers for all switch ports. The Port Scheduler screen in Figure 4-9-4 appears. Figure 4-9-4 QoS Egress Port Schedule page screenshot The page includes the following fields:...
Page 185: Qos Egress Port Schedule And Shapers
User’s Manual of XGSW-28040 Figure 4-9-5 QoS Egress Port Shapers page screenshot The page includes the following fields: Object Description  Port The logical port for the settings contained in the same row. Click on the port number in order to configure the shapers.
Page 186 User’s Manual of XGSW-28040 Figure 4-9-6 QoS Egress Port Schedule and Shapers page screenshot The page includes the following fields: Object Description  Schedule Mode Controls whether the scheduler mode is "Strict Priority" or "Weighted" on this switch port.  Queue Shaper Enable Controls whether the queue shaper is enabled for this queue on this switch port.
Page 187: Port Tag Remarking
User’s Manual of XGSW-28040 restricted to 100-1000000 when the "Unit" is "kbps", and it is restricted to 1-13200 when the "Unit" is "Mbps".  Controls the unit of measure for the port shaper rate as "kbps" or "Mbps". The Port Shaper Unit default value is "kbps".
Page 188: Qos Egress Port Tag Remarking
User’s Manual of XGSW-28040  Shows the tag remarking mode for this port. Mode Classified: Use classified PCP/DEI values. Default: Use default PCP/DEI values. Mapped: Use mapped versions of QoS class and DP level. 4.9.6.1 QoS Egress Port Tag Remarking The QoS Egress Port Tag Remarking for a specific port are configured on this page.
Page 189: Port Dscp
User’s Manual of XGSW-28040 : Click to undo any changes made locally and return to the previous page. 4.9.7 Port DSCP This page allows you to configure the basic QoS Port DSCP Configuration settings for all switch ports. The Port DSCP screen in Figure 4-9-9 appears.
Page 190: Dscp-Based Qos
User’s Manual of XGSW-28040 for individual ports. There are two configuration parameters available in Ingress:  Translate  Classify  Translate To Enable the Ingress Translation click the checkbox.  Classify Classification for a port have 4 different values. ...
Page 191 User’s Manual of XGSW-28040 Figure 4-9-10 DSCP-Based QoS Ingress Classification page screenshot The page includes the following fields: Object Description  DSCP Maximum number of support ed DSCP values are 64.  Trust Controls whether a specific DSCP value is trusted. Only frames with trusted DSCP values are mapped to a specific QoS class and Drop Precedence Level.
Page 192: Dscp Translation
User’s Manual of XGSW-28040  QoS Class QoS Class value can be any of (0-7)  Drop Precedence Level (0-1) Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
Page 193: Dscp Classification
User’s Manual of XGSW-28040 The page includes the following fields: Object Description  DSCP Maximum number of supported DSCP values are 64 and valid DSCP value ranges from 0 to 63.  Ingress Ingress side DSCP can be first translated to new DSCP before using the DSCP for QoS class and DPL map.
Page 194: Qos Control List
User’s Manual of XGSW-28040 Figure 4-9-12 DSCP Classification page screenshot The page includes the following fields: Object Description  QoS Class Available QoS Class value ranges from 0 to 7. QoS Class (0-7) can be mapped to followed parameters. ...
Page 195: Qos Control Entry Configuration
User’s Manual of XGSW-28040 SNAP: Only (SNAP) frames are allowed. IPv4: The QCE will match only IPV4 frames. IPv6: The QCE will match only IPV6 frames.  SMAC Displays the OUI field of Source MAC address, i.e. first three octet (byte) of MAC address.
Page 196 User’s Manual of XGSW-28040 Figure 4-9-14 QCE Configuration page screenshot The page includes the following fields: Object Description  Check the checkbox button in case you what to make any port member of the Port Members QCL entry. By default all ports will be checked ...
Page 197 User’s Manual of XGSW-28040 Note: all frame types are explained below.  Any Allow all types of frames.  Ethernet Ethernet Type Valid ethernet type can have value within 0x600-0xFFFF or 'Any' but excluding 0x800(IPv4) and 0x86DD(IPv6), default value is 'Any'.
Page 198: Qos Status
User’s Manual of XGSW-28040 Buttons : Click to save the configuration and move to main QCL page : Click to undo any changes made locally and revert to previously saved values : Return to the previous page without saving the configuration change 4.9.12 QoS Status...
Page 199: Storm Control Configuration
User’s Manual of XGSW-28040  Indicates the classification action taken on ingress frame if parameters Action configured are matched with the frame's content. There are three action fields: Class, DPL and DSCP. Class: Classified QoS class; if a frame matches the QCE it will be put in the queue.
Page 200 User’s Manual of XGSW-28040 Figure 4-9-16 Storm Control Configuration page screenshot The page includes the following fields: Object Description  The port number for which the configuration below applies. Port  Controls whether the storm control is enabled on this switch port.
Page 201: Wred
User’s Manual of XGSW-28040 : Click to undo any changes made locally and revert to previously saved values. 4.9.14 WRED This page allows you to configure the Random Early Detection (RED) settings for queue 0 to 5. RED cannot be applied to queue 6 and 7.
Page 202: Qos Statistics
User’s Manual of XGSW-28040 Max. DP 1-3 is the drop probability when the average queue filling level is 100%. Frames marked with Drop Precedence Level 0 are never dropped. Min. Threshold is the average queue filling level where the queues randomly start dropping frames. The drop probability for frames marked with Drop Precedence Level n increases linearly from zero (at Min.
Page 203: Voice Vlan Configuration
User’s Manual of XGSW-28040 Figure 4-9-18 Queuing Counters page screenshot The page includes the following fields: Object Description  The logical port for the settings contained in the same row. Port  There are 8 QoS queues per port. Q0 is the lowest priority queue.
Page 204 User’s Manual of XGSW-28040 Configuration screen in Figure 4-9-19 appears. Figure 4-9-19 Voice VLAN Configuration page screenshot The page includes the following fields: Object Description  Mode Indicates the Voice VLAN mode operation. We must disable MSTP feature before we enable Voice VLAN. It can avoid the conflict of ingress filter. Possible...
Page 205: Voice Vlan Oui Table
User’s Manual of XGSW-28040 Enabled: Enable Voice VLAN mode operation. Disabled: Disable Voice VLAN mode operation.  VLAN ID Indicates the Voice VLAN ID. It should be a unique VLAN ID in the system and cannot equal each port PVID. It is conflict configuration if the value equal management VID, MVR VID, PVID etc.
Page 206 User’s Manual of XGSW-28040 Figure 4-9-20 Voice VLAN OUI Table page screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.  Telephony OUI An telephony OUI address is a globally unique identifier assigned to a vendor by IEEE.
Page 207: Access Control Lists
User’s Manual of XGSW-28040 4.10 Access Control Lists ACL is an acronym for Access Control List. It is the list table of ACEs, containing access control entries that specify individual users or groups permitted or denied to specific traffic objects, such as a process or a program.
Page 208: Access Control List Configuration
User’s Manual of XGSW-28040 based ACE will not get matched by IP and ARP frames. ARP: The ACE will match ARP/RARP frames. IPv4: The ACE will match all IPv4 frames. IPv4/ICMP: The ACE will match IPv4 frames with ICMP protocol.
Page 209 User’s Manual of XGSW-28040 Figure 4-10-2 Access Control List Configuration page screenshot The page includes the following fields: Object Description  Ingress Port Indicates the ingress port of the ACE. Possible values are: All: The ACE will match all ingress port.
Page 210: Ace Configuration
User’s Manual of XGSW-28040 : Moves the ACE down the list. : Deletes the ACE. : The lowest plus sign adds a new entry at the bottom of the ACE listings. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
Page 211 User’s Manual of XGSW-28040 Object Description  Select the ingress port for which this ACE applies. Ingress Port Any: The ACE applies to any port. Port n: The ACE applies to this port number, where n is the number of the switch port.
Page 212 User’s Manual of XGSW-28040  MAC Parameters Object Description  (Only displayed when the frame type is Ethernet Type or ARP.) SMAC Filter Specify the source MAC filter for this ACE. Any: No SMAC filter is specified. (SMAC filter status is "don't-care".) Specific: If you want to filter a specific source MAC address with this ACE, choose this value.
Page 213 User’s Manual of XGSW-28040  Specify the available ARP/RARP opcode (OP) flag for this ACE. ARP/RARP Any: No ARP/RARP OP flag is specified. (OP is "don't-care".) ARP: Frame must have ARP/RARP opcode set to ARP. RARP: Frame must have ARP/RARP opcode set to RARP.
Page 214 User’s Manual of XGSW-28040  IP/Ethernet Length Specify whether frames can hit the action according to their ARP/RARP hardware address length (HLN) and protocol address length (PLN) settings. 0: ARP/RARP frames where the HLN is equal to Ethernet (0x06) and the (PLN) is equal to IPv4 (0x04).
Page 215 User’s Manual of XGSW-28040 Any: Any value is allowed ("don't-care").  IP Fragment Specify the fragment offset settings for this ACE. This involves the settings for the More Fragments (MF) bit and the Fragment Offset (FRAG OFFSET) field for an IPv4 frame.
Page 216 User’s Manual of XGSW-28040  Specify the ICMP filter for this ACE. ICMP Type Filter Any: No ICMP filter is specified (ICMP filter status is "don't-care"). Specific: If you want to filter a specific ICMP filter with this ACE, you can enter a specific ICMP value.
Page 217 User’s Manual of XGSW-28040 Range: If you want to filter a specific range TCP/UDP destination filter with this ACE, you can enter a specific TCP/UDP destination range value. A field for entering a TCP/UDP destination value appears.  When "Specific" is selected for the TCP/UDP destination filter, you can enter a TCP/UDP Destination specific TCP/UDP destination value.
Page 218: Acl Ports Configuration
User’s Manual of XGSW-28040 Specific: If you want to filter a specific EtherType filter with this ACE, you can enter a specific EtherType value. A field for entering a EtherType value appears.  When "Specific" is selected for the EtherType filter, you can enter a specific Ethernet Type Value EtherType value.
Page 219 User’s Manual of XGSW-28040 Figure 4-10-4 ACL Ports Configuration page screenshot The page includes the following fields: Object Description  The logical port for the settings contained in the same row. Port  Select the policy to apply to this port. The allowed values are 0 through 255. The Policy ID default value is 0.
Page 220: Acl Rate Limiter Configuration
User’s Manual of XGSW-28040 Please note that the System Log memory size and logging rate is limited.  Shutdown Specify the port shut down operation of this port. The allowed values are: Enabled: If a frame is received on the port, the port will be disabled.
Page 221 User’s Manual of XGSW-28040 Figure 4-10-5 ACL Rate Limiter Configuration page screenshot The page includes the following fields: Object Description  The rate limiter ID for the settings contained in the same row. Rate Limiter ID  The allowed values are: 0-131071 in pps...
Page 222: Authentication
User’s Manual of XGSW-28040 4.11 Authentication This section is to control the access of the Managed Switch, includes the user access and management control. The Authentication section contains links to the following main topics:  IEEE 802.1X Port-Based Network Access Control ...
Page 223: Understanding Ieee 802.1X Port-Based Authentication
User’s Manual of XGSW-28040 to authenticate. The disadvantage is that MAC addresses can be spoofed by malicious users, equipment whose MAC address is a valid RADIUS user can be used by anyone, and only the MD5-Challenge method is supported. The 802.1X and MAC-Based Authentication configuration consists of two sections, a system- and a port-wide.
Page 224 User’s Manual of XGSW-28040 Figure 4-11-1 Client—the device (workstation) that requests access to the LAN and switch services and responds to requests from  the switch. The workstation must be running 802.1X-compliant client software such as that offered in the Microsoft Windows XP operating system.
Page 225 User’s Manual of XGSW-28040 authentication server must support EAP within the native frame format. When the switch receives frames from the authentication server, the server's frame header is removed, leaving the EAP frame, which is then encapsulated for Ethernet and sent to the client.
Page 226: Authentication Configuration
User’s Manual of XGSW-28040  Ports in Authorized and Unauthorized States The switch port state determines whether or not the client is granted access to the network. The port starts in the unauthorized state. While in this state, the port disallows all ingress and egress traffic except for 802.1X protocol packets. When a client is successfully authenticated, the port transitions to the authorized state, allowing all traffic for the client to flow normally.
Page 227: Network Access Server Configuration
User’s Manual of XGSW-28040 The page includes the following fields: Object Description  Client The management client for which the configuration below applies.  Authentication Method Authentication Method can be set to one of the following values: None: authentication is disabled and login is not possible.
Page 228 User’s Manual of XGSW-28040 Figure 4-11-4 Network Access Server Configuration page screenshot The page includes the following fields: System Configuration...
Page 229 User’s Manual of XGSW-28040 Object Description  Mode Indicates if NAS is globally enabled or disabled on the switch. If globally disabled, all ports are allowed forwarding of frames.  Reauthentication If checked, successfully authenticated supplicants/clients are reauthenticated after the interval specified by the Reauthentication Period. Reauthentication for Enabled 802.1X-enabled ports can be used to detect if a new device is plugged into a...
Page 230 User’s Manual of XGSW-28040 Single 802.1X Multi 802.1X MAC-Based Auth. If a client is denied access - either because the RADIUS server denies the client access or because the RADIUS server request times out (according to the timeout specified on the "Configuration→Security→AAA" page) - the client is put on hold in the Unauthorized state.
Page 231 User’s Manual of XGSW-28040 ditto setting determines whether the port can be moved into Guest VLAN. When unchecked, the ability to move to the Guest VLAN is disabled for all ports.  Guest VLAN ID This is the value that a port's Port VLAN ID is set to if a port is moved into the Guest VLAN.
Page 232 User’s Manual of XGSW-28040 Port-based 802.1X In the 802.1X-world, the user is called the supplicant, the switch is the authenticator, and the RADIUS server is the authentication server. The authenticator acts as the man-in-the-middle, forwarding requests and responses between the supplicant and the authentication server. Frames sent between the supplicant and the switch are special 802.1X frames, known as EAPOL (EAP...
Page 233 User’s Manual of XGSW-28040 Single 802.1X is really not an IEEE standard, but features many of the same characteristics as does port-based 802.1X. In Single 802.1X, at most one supplicant can get authenticated on the port at a time. Normal EAPOL frames are used in the communication between the supplicant and the switch.
Page 234 User’s Manual of XGSW-28040 the RADIUS server must be configured accordingly. When authentication is complete, the RADIUS server sends a success or failure indication, which in turn causes the switch to open up or block traffic for that particular client, using the Port Security module. Only then will frames from the client be forwarded on the switch.
Page 235 User’s Manual of XGSW-28040 range [0; 7].  RADIUS-Assigned When RADIUS-Assigned VLAN is both globally enabled and enabled (checked) for a given port, the switch reacts to VLAN ID information carried in the RADIUS VLAN Enabled Access-Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated.
Page 236 User’s Manual of XGSW-28040 rules outlined below. This option is only available for EAPOL-based modes, i.e.: • Port-based 802.1X • Single 802.1X • Multi 802.1X For trouble-shooting VLAN assignments, use the "Monitor→VLANs→VLAN Membership and VLAN Port" pages. These pages show which modules have (temporarily) overridden the current Port VLAN configuration.
Page 237 User’s Manual of XGSW-28040 authorized and Y are unauthorized.  Restart Two buttons are available for each row. The buttons are only enabled when authentication is globally enabled and the port's Admin State is in an EAPOL-based or MAC-based mode.
Page 238: Network Access Overview
User’s Manual of XGSW-28040 4.11.4 Network Access Overview This page provides an overview of the current NAS port states for the selected switch. The Network Access Overview screen in Figure 4-11-5 appears. Figure 4-11-5 Network Access Server Switch Status page screenshot...
Page 239: Network Access Statistics
User’s Manual of XGSW-28040  QoS Class QoS Class assigned to the port by the RADIUS server if enabled.  Port VLAN ID The VLAN ID that NAS has put the port in. The field is blank, if the Port VLAN ID is not overridden by NAS.
Page 240 User’s Manual of XGSW-28040 is assigned.  Port VLAN ID The VLAN ID that NAS has put the port in. The field is blank, if the Port VLAN ID is not overridden by NAS. If the VLAN ID is assigned by the RADIUS server, "(RADIUS-assigned)" is appended to the VLAN ID.
Page 241 User’s Manual of XGSW-28040 amesRx been received by the switch. dot1xAuthInvalidEapolF The number of EAPOL Invalid Type ramesRx frames that have been received by the switch in which the frame type is not recognized. dot1xAuthEapLengthErr The number of EAPOL Invalid Length...
Page 242 User’s Manual of XGSW-28040 server following the first response from the supplicant. Indicates that the backend server has communication with the switch. MAC-based: Counts all Access Challenges received from the backend server for this port (left-most table) or client (right-most table).
Page 243 User’s Manual of XGSW-28040 send a supplicant's first response packet to the backend server. Indicates the switch attempted communication with the backend server. Possible retransmissions are not counted. MAC-based: Counts all the backend server packets sent from the switch towards the backend server...
Page 244 User’s Manual of XGSW-28040 MAC-based: Not applicable. Selected Counters Object Description  Selected Counters The Selected Counters table is visible when the port is one of the following administrative states: Multi 802.1X MAC-based Auth. The table is identical to and is placed next to the Port Counters table, and will be empty if no MAC address is currently selected.
Page 245: Authentication Server Configuration
User’s Manual of XGSW-28040 Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Click to refresh the page immediately. : This button is available in the following modes: • Force Authorized • Force Unauthorized •...
Page 246 User’s Manual of XGSW-28040 Figure 4-11-7 Authentication Server Configuration page screenshot The page includes the following fields: Port State These setting are common for all of the Authentication Servers. Object Description  Timeout The Timeout, which can be set to a number between 3 and 3600 seconds, is the...
Page 247 User’s Manual of XGSW-28040 If the server does not reply within this timeframe, we will consider it to be dead and continue with the next enabled server (if any). RADIUS servers are using the UDP protocol, which is unreliable by design. In order to cope with lost frames, the timeout interval is divided into 3 subintervals of equal length.
Page 248 User’s Manual of XGSW-28040 applies.  Enabled Enable the RADIUS Accounting Server by checking this box.  IP Address/Hostname The IP address or hostname of the RADIUS Accounting Server. IP address is expressed in dotted decimal notation.  Port The UDP port to use on the RADIUS Accounting Server. If the port is set to 0 (zero), the default port (1813) is used on the RADIUS Accounting Server.
Page 249: Radius Overview
User’s Manual of XGSW-28040 4.11.7 RADIUS Overview This page provides an overview of the status of the RADIUS servers configurable on the Authentication configuration page. The RADIUS Authentication/Accounting Server Overview screen in Figure 4-11-8 appears. Figure 4-11-8 RADIUS Authentication/Accounting Server Overview page screenshot...
Page 250: Radius Details
User’s Manual of XGSW-28040 before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled. RADIUS Accounting Servers Object Description  # The RADIUS server number. Click to navigate to detailed statistics for this server.
Page 251 User’s Manual of XGSW-28040 Figure 4-11-9 RADIUS Authentication/Accounting for Server Overview page screenshot The page includes the following fields: RADIUS Authentication Servers The statistics map closely to those specified in RFC4668 - RADIUS Authentication Client MIB. Use the server select box to switch between the backend servers to show details for.
Page 252 User’s Manual of XGSW-28040 radiusAuthClientExtA The number of RADIUS Access Rejects ccessRejects Access-Reject packets (valid or invalid) received from the server. radiusAuthClientExtA The number of RADIUS Access ccessChallenges Access-Challenge packets Challenges (valid or invalid) received from the server. radiusAuthClientExt The number of malformed...
Page 253 User’s Manual of XGSW-28040 radiusAuthClientExtA The number of RADIUS Access ccessRequests Access-Request packets sent Requests to the server. This does not include retransmissions. radiusAuthClientExtA The number of RADIUS Access ccessRetransmission Access-Request packets Retransmissio retransmitted to the RADIUS authentication server. radiusAuthClientExtP...
Page 254 User’s Manual of XGSW-28040 Shows the state of the server. It takes one of the State following values: Disabled: The selected server is disabled. Not Ready: The server is enabled, but IP communication is not yet up and running. Ready: The server is enabled, IP communication is up and running, and the RADIUS module is ready to accept access attempts.
Page 255 User’s Manual of XGSW-28040 packets include packets with an invalid length. Bad authenticators or or unknown types are not included as malformed access responses. radiusAcctClientExt The number of RADIUS BadAuthenticators packets containing invalid Authenticators authenticators received from the server. radiusAccClientExt...
Page 256 User’s Manual of XGSW-28040 timeout, the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.
Page 257: Windows Platform Radius Server Configuration
User’s Manual of XGSW-28040 communication with the server yet. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Click to refresh the page immediately. : Clears the counters for the selected server. The "Pending Requests" counter will not be cleared by this operation.
Page 258 User’s Manual of XGSW-28040 Figure 4-11-11 Windows Server – add new RADIUS client setting Assign the client IP address to the Managed switch Figure 4-11-12 Windows Server RADIUS Server setting...
Page 259 User’s Manual of XGSW-28040 The shared secret key should be as same as the key configured on the Managed Switch. Figure 4-11-13 Windows Server RADIUS Server setting Configure ports attribute of 802.1X, the same as “802.1X Port Configuration”. Figure 4-11-14 802.1x Port Configuration Create user data.
Page 260 User’s Manual of XGSW-28040 Figure 4-11-15 Windows 2003 AD server setting path Enter ” Active Directory Users and Computers”, create legal user data, the next, right-click a user what you created to enter properties, and what to be noticed:...
Page 261 User’s Manual of XGSW-28040 Figure 4-11-16 Add User Properties screen Figure 4-11-17 Add User Properties screen Set the Ports Authenticate Status to “Force Authorized” if the port is connected to the RADIUS server or the port is a uplink port that is connected to another switch. Or once the 802.1X stat to...
Page 262: Client Configuration
User’s Manual of XGSW-28040 4.11.10 802.1X Client Configuration Windows XP is originally 802.1X support. As to other operating systems (windows 98SE, ME, 2000), an 802.1X client utility is needed. The following procedures show how to configure 802.1X Authentication in Windows XP.
Page 263 User’s Manual of XGSW-28040 Figure 4-11-19 Click “OK”. When client has associated with the Managed Switch, a user authentication notice appears in system tray. Click on the notice to continue. Figure 4-11-20 Windows client popup login request message...
Page 264 User’s Manual of XGSW-28040 Enter the user name, password and the logon domain that your account belongs. 10. Click “OK” to complete the validation process. Figure 4-11-21...
Page 265: Security
User’s Manual of XGSW-28040 4.12 Security This section is to control the access of the Managed Switch, includes the user access and management control. The Security page contains links to the following main topics:  Port Limit Control  Access Management ...
Page 266 User’s Manual of XGSW-28040 Figure 4-12-1 Port Limit Control Configuration Overview page screenshot The page includes the following fields: System Configuration Object Description...
Page 267 User’s Manual of XGSW-28040  Mode Indicates if Limit Control is globally enabled or disabled on the switchstack. If globally disabled, other modules may still use the underlying functionality, but limit checks and corresponding actions are disabled.  Aging Enabled If checked, secured MAC addresses are subject to aging as discussed under Aging Period.
Page 268 User’s Manual of XGSW-28040 ports draw whenever a new MAC address is seen on a Port Security-enabled port. Since all ports draw from the same pool, it may happen that a configured maximum cannot be granted, if the remaining ports have already used all available MAC addresses.
Page 269: Access Management
User’s Manual of XGSW-28040 Click to undo any changes made locally and revert to previously saved values. 4.12.2 Access Management Configure access management table on this page. The maximum entry number is 16. If the application's type match any one of the access management entries, it will allow access to the switch.
Page 270: Access Management Statistics
User’s Manual of XGSW-28040 Buttons : Click to add a new access management entry. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.12.3 Access Management Statistics This page provides statistics for access management. The Access Management Statistics screen in Figure 4-12-3 appears.
Page 271: Https
User’s Manual of XGSW-28040 4.12.4 HTTPs Configure HTTPS on this page. The HTTPS Configuration screen in Figure 4-12-4 appears. Figure 4-12-4 HTTPS Configuration screen page screenshot The page includes the following fields: Object Description  Mode Indicates the HTTPS mode operation. When the current connection is HTTPS, to apply HTTPS disabled mode operation will automatically redirect web browser to an HTTP connection.
Page 272: Port Security Status
User’s Manual of XGSW-28040 Configuration screen in Figure 4-12-5 appears. Figure 4-12-5 SSH Configuration screen page screenshot The page includes the following fields: Object Description  Mode Indicates the SSH mode operation. Possible modes are: Enabled: Enable SSH mode operation.
Page 273 User’s Manual of XGSW-28040 Figure 4-12-6 Port Security Status screen page screenshot The page includes the following fields: User Module Legend The legend shows all user modules that may request Port Security services. Object Description  User Module Name The full name of a module that may request Port Security services.
Page 274: Port Security Detail
User’s Manual of XGSW-28040 Port Status The table has one row for each port on the selected switch in the switch and a number of columns, which are: Object Description  Port The port number for which the status applies. Click the port number to see the status for this particular port.
Page 275: Dhcp Snooping
User’s Manual of XGSW-28040 passed on to the port security module, which in turn asks all user modules whether to allow this new MAC address to forward or block it. For a MAC address to be set in the forwarding state, all enabled user modules must unanimously agree on allowing the MAC address to forward.
Page 276 User’s Manual of XGSW-28040 DHCP Snooping Configuration screen in Figure 4-12-8 appears. Figure 4-12-8 DHCP Snooping Configuration screen page screenshot The page includes the following fields: Object Description  Snooping Mode Indicates the DHCP snooping mode operation. Possible modes are: Enabled: Enable DHCP snooping mode operation.
Page 277: Dhcp Snooping Statistics
User’s Manual of XGSW-28040  Port Mode Indicates the DHCP snooping port mode. Possible port modes are: Trusted: Configures the port as trusted sources of the DHCP message. Untrusted: Configures the port as untrusted sources of the DHCP message. Buttons : Click to save changes.
Page 278: Ip Source Guard Configuration
User’s Manual of XGSW-28040  Rx and Tx Offer The number of offer (option 53 with value 2) packets received and transmitted.  Rx and Tx Request The number of request (option 53 with value 3) packets received and transmitted.
Page 279 User’s Manual of XGSW-28040 Figure 4-12-10 IP Source Guard Configuration screen page screenshot The page includes the following fields: Object Description  Mode of IP Source Enable the Global IP Source Guard or disable the Global IP Source Guard. All configured ACEs will be lost when the mode is enabled.
Page 280: Ip Source Guard Static Table
User’s Manual of XGSW-28040  Max Dynamic Clients Specify the maximum number of dynamic clients can be learned on given ports. This value can be 0, 1, 2 and unlimited. If the port mode is enabled and the value of max dynamic client is equal 0, it means only allow the IP packets forwarding that are matched in static entries on the specific port.
Page 281: Arp Inspection
User’s Manual of XGSW-28040 : Click to save changes. Click to undo any changes made locally and revert to previously saved values. 4.12.12 ARP Inspection ARP Inspection is a secure feature. Several types of attacks can be launched against a host or devices connected to Layer 2 networks by "poisoning"...
Page 282 User’s Manual of XGSW-28040 Figure 4-12-12 ARP Inspection Configuration screen page screenshot The page includes the following fields: Object Description  Mode of ARP Enable the Global ARP Inspection or disable the Global ARP Inspection. Inspection Configuration  Port Mode Specify ARP Inspection is enabled on which ports.
Page 283: Arp Inspection Static Table
User’s Manual of XGSW-28040 Buttons : Click to save changes. Click to undo any changes made locally and revert to previously saved values. : Click to translate all dynamic entries to static entries. 4.12.13 ARP Inspection Static Table This page provides Static ARP Inspection Table. The Static ARP Inspection Table screen in Figure 4-12-13 appears.
Page 284: Address Table
User’s Manual of XGSW-28040 4.13 Address Table Switching of frames is based upon the DMAC address contained in the frame. The Managed Switch builds up a table that maps MAC addresses to switch ports for knowing which ports the frames should go to (based upon the DMAC address in the frame ).
Page 285 User’s Manual of XGSW-28040 Object Description  Disable Automatic Enables/disables the the automatic aging of dynamic entries Aging  Aging Time The time after which a learned entry is discarded. By default, dynamic entries are removed from the MAC after 300 seconds. This removal is also called aging.
Page 286: Mac Address Table Status
User’s Manual of XGSW-28040 Click to undo any changes made locally and revert to previously saved values. 4.13.2 MAC Address Table Status Dynamic MAC Table Entries in the MAC Table are shown on this page. The MAC Table contains up to 8192 entries, and is sorted first by VLAN ID, then by MAC address.
Page 287: Dynamic Arp Inspection Table
User’s Manual of XGSW-28040  The ports that are members of the entry. Port Members Buttons Auto-refresh : Automatic refresh occurs every 3 seconds. : Refreshes the displayed table starting from the "Start from MAC address" and "VLAN" input fields.
Page 288: Dynamic Ip Source Guard Table
User’s Manual of XGSW-28040  The port number for which the status applies. Click the port number to see the Port status for this particular port.  The VLAN ID of the entry. VLAN ID  The MAC address of the entry.
Page 289 User’s Manual of XGSW-28040 The “>>” will use the last entry of the currently displayed as a basis for the next lookup. When the end is reached the text "No more entries" is shown in the displayed table. Use the “|<<” button to start over.
Page 290: Lldp
User’s Manual of XGSW-28040 4.14 LLDP 4.14.1 Link Layer Discovery Protocol Link Layer Discovery Protocol (LLDP) is used to discover basic information about neighboring devices on the local broadcast domain. LLDP is a Layer 2 protocol that uses periodic broadcasts to advertise information about the sending device. Advertised information is represented in Type Length Value (TLV) format according to the IEEE 802.1ab standard, and can include details...
Page 291 User’s Manual of XGSW-28040 Figure 4-14-1 LLDP Configuration page screenshot The page includes the following fields: LLDP Parameters Object Description  The switch is periodically transmitting LLDP frames to its neighbors for having the Tx Interval network discovery information up-to-date. The interval between each LLDP frame is determined by the Tx Interval value.
Page 292 User’s Manual of XGSW-28040 LLDP frame shall be considered valid. The LLDP information valid period is set to Tx Hold multiplied by Tx Interval seconds. Valid values are restricted to 2 - 10 times. TTL in seconds is based on the following rule: (Transmission Interval * Holdtime Multiplier) ≤...
Page 293 User’s Manual of XGSW-28040 neighbours' table are decoded. All other TLVs are discarded (Unrecognized CDP TLVs and discarded CDP frames are not shown in the LLDP statistics.). CDP TLVs are mapped onto LLDP neighbours' table as shown below. CDP TLV "Device ID" is mapped to the LLDP "Chassis ID" field.
Page 294: Lldpmed Configuration
User’s Manual of XGSW-28040 4.14.3 LLDPMED Configuration This page allows you to configure the LLDP-MED. The LLDPMED Configuration screen in Figure 4-14-2 appears. Figure 4-14-2 LLDPMED Configuration page screenshot The page includes the following fields: Fast start repeat count Object Description ...
Page 295 User’s Manual of XGSW-28040 advertise LLDP-MED TLVs in outgoing LLDPDUs on the associated port. The LLDP-MED application will temporarily speed up the transmission of the LLDPDU to start within a second, when a new LLDP-MED neighbour has been detected in order share LLDP-MED information as fast as possible to new neighbours.
Page 296 User’s Manual of XGSW-28040 WGS84: (Geographical 3D) - World Geodesic System 1984, CRS Code 4327, Prime Meridian Name: Greenwich. NAD83/NAVD88: North American Datum 1983, CRS Code 4269, Prime Meridian Name: Greenwich; The associated vertical datum is the North American Vertical Datum of 1988 (NAVD88).
Page 297 User’s Manual of XGSW-28040  Building Building (structure) - Example: Low Library  Apartment Unit (Apartment, suite) - Example: Apt 42  Floor Floor - Example: 4  Room no. Room number - Example: 450F  Place type Place type - Example: Office ...
Page 298 User’s Manual of XGSW-28040 4. Video Conferencing 5. Streaming Video 6. Control / Signaling (conditionally support a separate network policy for the media types above) A large network may support multiple VoIP policies across the entire organization, and different policies per application type.
Page 299 User’s Manual of XGSW-28040 other similar appliances supporting real-time interactive video/audio services. Streaming Video - for use by broadcast or multicast based video content distribution and other similar applications supporting streaming video services that require specific network policy treatment. Video applications relying on TCP with buffering would not be an intended use of this application type.
Page 300: Lldp-Med Neighbor
User’s Manual of XGSW-28040  Port The port number for which the configuration applies.  Policy ID The set of policies that shall apply for a given port. The set of policies is selected by checkmarking the checkboxes that corresponds to the policies Buttons : Click to save changes.
Page 301 User’s Manual of XGSW-28040 5. Any device that supports the IEEE 802.1AB and MED extensions defined by TIA-1057 and can relay IEEE 802 frames via any method. LLDP-MED Endpoint Device Definition Within the LLDP-MED Endpoint Device category, the LLDP-MED scheme is broken into further Endpoint Device Classes, as defined in the following.
Page 302 User’s Manual of XGSW-28040 Discovery services defined in this class include provision of location identifier (including ECS / E911 information), embedded L2 switch support, inventory management  LLDP-MED LLDP-MED Capabilities describes the neighbor unit's LLDP-MED capabilities. The possible capabilities are: Capabilities 1.
Page 303: Neighbor
User’s Manual of XGSW-28040 Defined: The network policy is defined.  TAG TAG is indicating whether the specified application type is using a tagged or an untagged VLAN. Can be Tagged ot Untagged Untagged: The device is using an untagged frame format and as such does not include a tag header as defined by IEEE 802.1Q-2003.
Page 304 User’s Manual of XGSW-28040 Figure 4-14-4 LLDP Neighbor Information page screenshot The page includes the following fields: Object Description  Local Port The port on which the LLDP frame was received.  Chassis ID The Chassis ID is the identification of the neighbor's LLDP frames.
Page 305: Port Statistics
User’s Manual of XGSW-28040 4.14.6 Port Statistics This page provides an overview of all LLDP traffic. Two types of counters are shown. Global counters are counters that refer to the whole stack, switch, while local counters refers to counters for the currently selected switch. The LLDP Statistics screen in Figure 4-14-5 appears.
Page 306 User’s Manual of XGSW-28040  Shows the number of entries deleted due to Time-To-Live expiring. Total Neighbors Entries Aged Out Local Counters The displayed table contains a row for each port. The columns hold the following information: Object Description ...
Page 307: Network Diagnostics
User’s Manual of XGSW-28040 4.15 Network Diagnostics This section provide the Physical layer and IP layer network diagnostics tools for troubleshoot. The diagnostic tools are designed for network manager to help them quickly diagnose problems between point to point and better service customers.
Page 308: Ipv6 Ping
User’s Manual of XGSW-28040 Figure 4-15-1 ICMP Ping page screenshot The page includes the following fields: Object Description  The destination IP Address. IP Address  Ping Length The payload size of the ICMP packet. Values range from 2 bytes to 1452 bytes.
Page 309: Remote Ip Ping Test
User’s Manual of XGSW-28040 Figure 4-15-2 ICMPv6 Ping page screenshot The page includes the following fields: Object Description  The destination IP Address. IP Address  Ping Length The payload size of the ICMP packet. Values range from 2 bytes to 1452 bytes.
Page 310 User’s Manual of XGSW-28040 Figure 4-15-3 Remote IP Ping Test page screenshot The page includes the following fields: Object Description  Port The logical port for the settings.  The destination IP Address. Remote IP Address  The payload size of the ICMP packet. Values range from 8 bytes to 1400 bytes.
Page 311: Cable Diagnostics
User’s Manual of XGSW-28040 4.15.4 Cable Diagnostics This page is used for running the Cable Diagnostics. Press to run the diagnostics. This will take approximately 5 seconds. If all ports are selected, this can take approximately 15 seconds. When completed, the page refreshes automatically, and you can view the cable diagnostics results in the cable status table.
Page 312 User’s Manual of XGSW-28040  Port: Cable Status Port number. Pair: The status of the cable pair. OK - Correctly terminated pair Open - Open pair Short - Shorted pair Short A - Cross-pair short to pair A Short B - Cross-pair short to pair B...
Page 313: Loop Protection
User’s Manual of XGSW-28040 4.16 Loop Protection This chapter describes enabling loop protection function that provides loop protection to prevent broadcast loops in XGSW-28040. 4.16.1 Configuration This page allows the user to inspect the current Loop Protection configurations, and possibly change them as well; screen in Figure 4-16-1 appears.
Page 314: Loop Protection Status
User’s Manual of XGSW-28040 The page includes the following fields: General Settings Object Description  Controls whether loop protections is enabled (as a whole). Enable Loop Protection  Transmission Time The interval between each loop protection PDU sent on each port. valid values are 1 to 10 seconds.
Page 315: Sflow
User’s Manual of XGSW-28040 The page includes the following fields: Object Description  Port The switch port number of the logical port.  Action The currently configured port action.  Transmit The currently configured port transmit mode.  Loops The number of loops detected on this port.
Page 316: Sflow Configuration
User’s Manual of XGSW-28040 4.17.1 sFlow Configuration This page allows for configuring sFlow. The configuration is divided into two parts: Configuration of the sFlow receiver (a.k.a. sFlow collector) and configuration of per-port flow and counter samplers. sFlow configuration is not persisted to non-volatile memory, which means that a reboot will disable sFlow sampling, screen in Figure 4-17-1 appears.
Page 317 User’s Manual of XGSW-28040 Figure 4-17-1 sFlow Configuration page screenshot The page includes the following fields: Receiver Configuration Object Description  Basically, sFlow can be configured in two ways: Through local management Owner using the Web or CLI interface or through SNMP. This read-only field shows the owner of the current sFlow configuration and assumes values as follows: •...
Page 318: Sflow Status
User’s Manual of XGSW-28040 1/Nth of the packets transmitted/received on the port. Sampling Rate Not all sampling rates are achievable. If an unsupported sampling rate is requested, the switch will automatically adjust it to the closest achievable. This will be reported back in this field.
Page 319 User’s Manual of XGSW-28040 Figure 4-17-2 sFlow Statistics page screenshot The page includes the following fields: Receiver Statistics Object Description  This field shows the current owner of the sFlow configuration. It assumes one of Owner three values as follows: •...
Page 320 User’s Manual of XGSW-28040 identifying the sFlow receiver.  IP Address/Hostname The IP address or hostname of the sFlow receiver.  Timeout The number of seconds remaining before sampling stops and the current sFlow owner is released.  Tx Successes The number of UDP datagrams successfully sent to the sFlow receiver.
Page 321: Rmon
User’s Manual of XGSW-28040 4.18 RMON RMON is the most important expansion of the standard SNMP. RMON is a set of MIB definitions, used to define standard network monitor functions and interfaces, enabling the communication between SNMP management terminals and remote monitors.
Page 322 User’s Manual of XGSW-28040 characters. InUcastPkts: The number of uni-cast packets delivered to a higher-layer protocol. InNUcastPkts: The number of broad-cast and multi-cast packets delivered to a higher-layer protocol. InDiscards: The number of inbound packets that are discarded even the packets are normal.
Page 323: Rmon Alarm Detail
User’s Manual of XGSW-28040 : Click to add a new community entry. : Click to save changes. Click to undo any changes made locally and revert to previously saved values. 4.18.2 RMON Alarm Detail This page provides an Detail of a specific RMON statistics entry; screen in Figure 4-18-2 appears.
Page 324: Rmon Alarm Status
User’s Manual of XGSW-28040 Buttons : Click to refresh the page immediately. Auto-refresh Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Updates the table starting from the first entry in the Alarm Table, i.e. the entry with the lowest ID.
Page 325: Rmon Event Configuration
User’s Manual of XGSW-28040  Rising Index Rising event index.  Falling Threshold Falling threshold value.  Falling Index Falling event index. Buttons : Click to refresh the page immediately. Auto-refresh Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
Page 326: Rmon Event Detail
User’s Manual of XGSW-28040  Community Specify the community when trap is sent, the string length is from 0 to 127, default is "public".  Event Last Time Indicates the value of sysUpTime at the time this event entry last generated an event.
Page 327: Rmon Event Status
User’s Manual of XGSW-28040 4.18.6 RMON Event Status This page provides an overview of RMON Event table entries.Each page shows up to 99 entries from the Event table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the Event table.
Page 328: Rmon History Detail
User’s Manual of XGSW-28040 Figure 4-18-7 RMON history configuration page screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.  ID Indicates the index of the entry. The range is from 1 to 65535.
Page 329 User’s Manual of XGSW-28040 Figure 4-18-8 RMON history Detail page screenshot The page includes the following fields: Object Description  History Index Indicates the index of History control entry.  Sample Index Indicates the index of the data entry associated with the control entry ...
Page 330: Rmon History Status
User’s Manual of XGSW-28040  Fragments The number of frames which size is less than 64 octets received with invalid CRC.  Jabber The number of frames which size is larger than 64 octets received with invalid CRC.  Collisions The best estimate of the total number of collisions on this Ethernet segment.
Page 331: Rmon Statistics Configuration
User’s Manual of XGSW-28040  Drops The total number of events in which packets were dropped by the probe due to lack of resources.  Octets The total number of octets of data (including those in bad packets) received on the network.
Page 332: Rmon Statistics Detail
User’s Manual of XGSW-28040 Figure 4-18-10 RMON Statistics configuration page screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.  ID Indicates the index of the entry. The range is from 1 to 65535.
Page 333 User’s Manual of XGSW-28040 Figure 4-18-11 Loop protection configuration page screenshot The page includes the following fields: Object Description  Data Source The port ID which wants to be monitored.  Drop The total number of events in which packets were dropped by the probe due to lack of resources.
Page 334: Rmon Statistics Status
User’s Manual of XGSW-28040 CRC.  Jabb. The number of frames which size is larger than 64 octets received with invalid CRC.  Coll. The best estimate of the total number of collisions on this Ethernet segment.  64 The total number of packets (including bad packets) received that were 64 octets in length.
Page 335 User’s Manual of XGSW-28040 The page includes the following fields: Object Description  ID Indicates the index of Statistics entry.  Data Source (ifIndex) The port ID which wants to be monitored.  Drop The total number of events in which packets were dropped by the probe due to lack of resources.
Page 336 User’s Manual of XGSW-28040 : Click to refresh the page immediately. Auto-refresh Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. Updates the table starting from the first entry in the Alarm Table, i.e. the entry with the lowest ID.
Page 337: Command Line Interface
User’s Manual of XGSW-28040 5. COMMAND LINE INTERFACE 5.1 Accessing the CLI When accessing the management interface for the switch over a direct connection to the server’s console port, or via a Telnet connection, the switch can be managed by entering command keywords and parameters at the prompt. Using the switch's command-line interface (CLI) is very similar to entering commands on a UNIX system.
Page 338: Configure Ip Address
The screen displays the current IP address, Subnet Mask and Gateway. As show in Figure 5-2. Figure 5-2 Show IP information screen  Configure IP address On “XGSW-28040/> ” prompt, enter the following command and press <Enter>. As show in Figure 5-3.
Page 339 User’s Manual of XGSW-28040 XGSW-28040/> ip setup 192.168.0.101 255.255.255.0 192.168.0.253 1 The previous command would apply the follow settings for the Switch. IP: 192.168.0.101 Subnet Mask: 255.255.255.0 Gateway: 192.168.0.253 VLAN ID: 1 Figure 5-3 Set IP address screen Repeat Step 1 to check if the IP address is changed.
Page 340: Telnet Login
User’s Manual of XGSW-28040 5.2 Telnet Login The Managed Switch also supports telnet for remote management. The switch asks for user name and password for remote login when using telnet, please use “admin” for username & password.
Page 341: Command Line Mode
User’s Manual of XGSW-28040 6. Command Line Mode The CLI groups all the commands in appropriate modes according to the nature of the command. A sample of the CLI command modes are described below. Each of the command modes supports specific software commands.
Page 342: System Log Configuration
User’s Manual of XGSW-28040 Syntax: System Configuration [all | (port <port_list>)] Parameters: : Show all switch configuration, default: Show system configuration : Show switch port configuration port <port_list>: Port list or 'all', default: All ports Example: To display system information: XGSW-28040:/>System configuration...
Page 343: System Version
User’s Manual of XGSW-28040 System Log Server Address : System Log Level : Info XGSW-28040:/> System Version Description: Show system version information. Syntax: System Version Example: To display system version: XGSW-28040:/>System version Version : Beta1205281742 Build Date : 2012-05-28T17:42:57+0800 XGSW-28040:/>...
Page 344: System Name
User’s Manual of XGSW-28040 XGSW-28040:/>System log server mode System Log Server Mode : Disabled System Name Description: Set or show the system name. Syntax: System Name [<name>] Parameters: <name>: System name string. (1-255) Use "" to clear the string System name is a text string drawn from the alphabet (A-Za-z), digits (0-9), minus sign (-).
Page 345: System Log Server Address
System Log Server Address [<ip_addr_string>] Parameters: <ip_addr_string>: IP host address (a.b.c.d) or a host name string Default Setting: empty Example: To set log server address: XGSW-28040:/> log server address 192.168.0.21 System Location Description: Set or show the system location. Syntax: System Location [<location>] Parameters: <location>: System location string.
Page 346: System Log Level
User’s Manual of XGSW-28040 Example: To set device location: XGSW-28040:/>System location 9F-LAB System Log Level Description: Show or set the system log level. It uses to determine what kind of message will send to syslog server. Syntax: System Log Level [info|warning|error]...
Page 347: System Log Lookup
User’s Manual of XGSW-28040 Example: To set timezone: XGSW-28040:/>system timezone 120 System Log Lookup Description: Show or clear the system log. Syntax: System Log Lookup [<log_id>] [all|info|warning|error] Parameters: <log_id>: System log ID or range (default: All entries) : Show all levels (default)
Page 348: System Reboot
User’s Manual of XGSW-28040 Syntax: System Log Clear [all|info|warning|error] Parameters: : Show all levels (default) : Show informations info warning : Show warnings : Show errors error Example: To sclear the system log: XGSW-28040:/>system log clear XGSW-28040:/> System Reboot Description: Reboot the system.
Page 349: System Load
User’s Manual of XGSW-28040 Example: To restore default value but not reset IP address: XGSW-28040:/>system restore default keep_ip System Load Description: Show current CPU load: 100ms, 1s and 10s running average (in percent, zero is idle). Syntax: System Load Example: To show current CPU load: XGSW-28040:/>system load...
Page 350: Ip Command
User’s Manual of XGSW-28040 6.2 IP Command IP Configuration Description: Show IP configuration. Syntax: IP Configuration Example: Show IP configuration: XGSW-28040:/>ip configuration IP Configuration: ================= DHCP Client : Disabled IP Address : 192.168.0.101 IP Mask : 255.255.255.0 IP Router : 192.168.0.254 DNS Server : 0.0.0.0...
Page 351: Ip Dhcp
User’s Manual of XGSW-28040 IP DHCP Description: Set or show the DHCP client mode. Syntax: IP DHCP [enable|disable] Parameters: enable : Enable or renew DHCP client disable: Disable DHCP client Default Setting: Disable Example: Disable DHCP sever: XGSW-28040:/>ip dhcp disable...
Page 352: Ip Ping
User’s Manual of XGSW-28040 VLAN ID Example: Set IP address: XGSW-28040:/>ip setup 192.168.0.100 255.255.255.0 IP Ping Description: Ping IP address (ICMP echo). Syntax: IP Ping <ip_addr_string> [(Length <ping_length>)] [(Count <ping_count>)] [(Interval <ping_interval>)] Parameters: <ip_addr_string>: IPv4 host address (a.b.c.d) or a host name string...
Page 353: Ip Dns Proxy
User’s Manual of XGSW-28040 Syntax: IP DNS [<ip_addr>] Parameters: <ip_addr>: IP address (a.b.c.d), default: Showdne IP address Default Setting: 0.0.0.0 Example: Set DNS IP address: XGSW-28040:/>ip dns 168.95.1.1 IP DNS Proxy Description: Set or show the IP DNS Proxy mode.
Page 354: Ipv6 Setup
User’s Manual of XGSW-28040 Syntax: IP IPv6 AUTOCONFIG [enable|disable] Parameters: enable : Enable IPv6 AUTOCONFIG mode disable: Disable IPv6 AUTOCONFIG mode Default Setting: disable Example: Enable IPv6 autoconfig function: XGSW-28040:/>ip ipv6 autoconfig enable IPv6 Setup Description: Set or show the IPv6 setup.
Page 355: Ipv6 Ping
User’s Manual of XGSW-28040 IPv6 Prefix : 96 IPv6 Router : :: Example: Set IPv6 address: XGSW-28040:/>ip ipv6 setup 2001::0002 64 2100::0001 IPv6 Ping Description: Ping IPv6 address (ICMPv6 echo). Syntax: IP IPv6 Ping6 <ipv6_addr> [(Length <ping_length>)] [(Count <ping_count>)] [(Interval <ping_interval>)] Parameters: : IPv6 host address.
Page 356: Ip Ntp Configuration
User’s Manual of XGSW-28040 IP NTP Configuration Description: Show NTP configuration. Syntax: IP NTP Configuration Default Setting: IP NTP Configuration: ===================== NTP Mode : Disabled Server IP host address (a.b.c.d) or a host name string ------------------------------------------------------ pool.ntp.org europe.pool.ntp.org north-america.pool.ntp.org asia.pool.ntp.org oceania.pool.ntp.org...
Page 357: Ip Ntp Server Add
Parameters: <server_index> : The server index (1-5) <ip_addr_string>: IP host address (a.b.c.d) or a host name string Example: To add NTP server: XGSW-28040:/>ip ntp server add 1 60.249.136.151 IP NTP Server IPv6 Add Description: Add NTP server IPv6 entry. Syntax: IP NTP Server Ipv6 Add <server_index>...
Page 358: Ip Ntp Server Delete
User’s Manual of XGSW-28040 XGSW-28040:/>ip ntp server ipv6 add 1 2001:7b8:3:2c::123 IP NTP Server Delete Description: Delete NTP server entry. Syntax: IP NTP Server Delete <server_index> Parameters: <server_index>: The server index (1-5) Example: To delete NTP server: XGSW-28040:/>ip ntp server delete 1...
Page 359: Port Management Command
User’s Manual of XGSW-28040 6.3 Port Management Command Port Configuration Description: Show port configuration. Syntax: Port Configuration [<port_list>] [up|down] Parameters: <port_list>: Port list or 'all', default: All ports : Show ports, which are up : Show ports, which are down...
Page 360: Port Flow Control
Port Flow Control [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Enable flow control enable : Disable flow control disable (default: Show flow control mode) Default Setting: Disable Example: Enable flow control function for port1 XGSW-28040:/>port flow control 1 enable...
Page 361: Port State
User’s Manual of XGSW-28040 Port State Description: Set or show the port administrative state. Syntax: Port State [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Enable port enable : Disable port disable (default: Show administrative mode)
Page 362: Port Power
User’s Manual of XGSW-28040 Port Power Description: Set or show the port PHY power mode. Syntax: Port Power [<port_list>] [enable|disable|actiphy|dynamic] Parameters: <port_list>: Port list or 'all', default: All ports enable : Enable all power control disable: Disable all power control...
Page 363: Port Statistics
User’s Manual of XGSW-28040 Example: XGSW-28040:/>port excessive 1 restart Port Statistics Description: Show port statistics. Syntax: Port Statistics [<port_list>] [<command>] [up|down] Parameters: <port_list>: Port list or 'all', default: All ports <command> : The command parameter takes the following values: : Clear port statistics...
Page 364: Port Sfp
User’s Manual of XGSW-28040 Port SFP Description: Show SFP port information. Syntax: Port SFP [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Show SFP information for port21-22 XGSW-28040:/>port sfp Port Type Speed Wave Length(nm) Distance(m) ---- --------------...
Page 365: Mac Address Table Command
User’s Manual of XGSW-28040 6.4 MAC Address Table Command MAC Configuration Description: Show MAC address table configuration. Syntax: MAC Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Show Mac address state XGSW-28040:/>mac configuration 1 MAC Configuration:...
Page 366: Mac Delete
User’s Manual of XGSW-28040 Example: Add Mac address 00-30-4F-01-01-02 in port1 and vid1 XGSW-28040:/>mac add 00-30-4f-01-01-02 1 1 MAC Delete Description: Delete MAC address entry. Syntax: MAC Delete <mac_addr> [<vid>] Parameters: <mac_addr>: MAC address ('xx-xx-xx-xx-xx-xx' or 'xx.xx.xx.xx.xx.xx' or 'xxxxxxxxxxxx', x is a hexadecimal digit) : VLAN ID (1-4095), default: 1 <vid>...
Page 367: Mac Age Time
User’s Manual of XGSW-28040 MAC Age Time Description: Set or show the MAC address age timer. Syntax: MAC Agetime [<age_time>] Parameters: <age_time>: MAC address age time (0,10-1000000) 0=disable, (default: Show age time) Default Setting: Example: Set agetime value in 30 XGSW-28040:/>mac agetime 30...
Page 368: Mac Dump
User’s Manual of XGSW-28040 XGSW-28040:/>mac learning 1 secure MAC Dump Description: Show sorted list of MAC address entries. Syntax: MAC Dump [<mac_max>] [<mac_addr>] [<vid>] Parameters: <mac_max> : Maximum number of MAC addresses 1-8192, default: Show all addresses <mac_addr>: First MAC address ('xx-xx-xx-xx-xx-xx' or 'xx.xx.xx.xx.xx.xx' or 'xxxxxxxxxxxx', x is a hexadecimal digit),...
Page 369: Mac Flush
User’s Manual of XGSW-28040 Parameters: <port_list>: Port list or 'all', default: All ports Example: Set all of MAC statistics XGSW-28040:/>mac statistics Port Dynamic Addresses ---- ----------------- Total Dynamic Addresses: 1 Total Static Addresses : 6 MAC Flush Description: Flush all learned entries.
Page 370: Vlan Configuration Command
User’s Manual of XGSW-28040 6.5 VLAN Configuration Command VLAN Configuration Description: Show VLAN configuration. Syntax: VLAN Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Show VLAN status of port1 XGSW-28040:/>vlan configuration 1 VLAN Configuration: =================== Mode : IEEE 802.1Q...
Page 371: Vlan Frame Type
User’s Manual of XGSW-28040 Syntax: VLAN PVID [<port_list>] [<vid>|none] Parameters: <port_list>: Port list or 'all', default: All ports <vid>|none : Port VLAN ID (1-4095) or 'none', default: Show port VLAN ID Default Setting: Example: Set PVID2 for port10 XGSW-28040:/>vlan pvid 10 2...
Page 372: Vlan Ingress Filter
User’s Manual of XGSW-28040 VLAN Ingress Filter Description: Set or show the port VLAN ingress filter. Syntax: VLAN IngressFilter [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Enable VLAN ingress filtering enable : Disable VLAN ingress filtering...
Page 373: Vlan Link Type
User’s Manual of XGSW-28040 XGSW-28040:/>vlan mode portbased VLAN Link Type Description: Set or show the port VLAN link type. Syntax: VLAN LinkType [<port_list>] [untagged|tagged] Parameters: <port_list>: Port list or 'all', default: All ports : VLAN Link Type Tagged untagged : VLAN Link Type Untagged...
Page 374: Vlan Ethernet Type
User’s Manual of XGSW-28040 Example: Set port2 in man port XGSW-28040:/>vlan qinq 2 man VLAN Ethernet Type Description: Set or show out layer VLAN tag ether type in Q-in-Q VLAN mode. Syntax: VLAN Ethtype [<port_list>] [man|dot1q] Parameters: <port_list>: Port list or 'all', default: All ports : Set out layer VLAN tag ether type : MAN : Set out layer VLAN tag ether type : 802.1Q...
Page 375: Vlan Forbidden Add
Parameters: <vid>|<name>: VLAN ID (1-4095) or VLAN Name <port_list> : Port list or 'all', default: All ports Example: Frobidden add port1 to port4 in VLAN10 XGSW-28040:/>vlan forbidden add 10 1-4 VLAN Delete Description: Delete VLAN entry. Syntax: VLAN Delete <vid>|<name>...
Page 376: Vlan Forbidden Delete
User’s Manual of XGSW-28040 VLAN Forbidden Delete Description: Delete VLAN entry. Syntax: LAN Forbidden Delete <vid>|<name> Parameters: <vid>|<name>: VLAN ID (1-4095) or VLAN Name Example: Forbidden delete VLAN10 XGSW-28040:/>vlan forbidden delete 10 VLAN Forbidden Lookup Description: Lookup VLAN Forbidden port entry.
Page 377: Vlan Name Add
<name>: VLAN name - Maximum of 32 characters. VLAN Name can only contain alphabets or numbers. VLAN name should contain atleast one alphabet. <vid> : VLAN ID (1-4095) Example: Add VLAN name for VLAN 1 XGSW-28040:/>vlan name add test 1...
Page 378: Vlan Name Delete
User’s Manual of XGSW-28040 VLAN Name Delete Description: Delete VLAN Name to VLAN ID Mapping. Syntax: VLAN Name Delete <name> Parameters: <name>: VLAN name - Maximum of 32 characters. VLAN Name can only contain alphabets or numbers. VLAN name should contain atleast one alphabet.
Page 379: Vlan Status
User’s Manual of XGSW-28040 VLAN Status Description: VLAN Port Configuration Status. Syntax: VLAN Status [<port_list>] [combined|static|nas|mvr|voice_vlan|mstp|all|conflicts] Parameters: <port_list>: Port list or 'all', default: All ports : combined VLAN Users configuration combined : static port configuration static : NAS port configuration...
Page 380: Private Vlan Configuration Command
User’s Manual of XGSW-28040 6.6 Private VLAN Configuration Command PVLAN Configuration Description: Show Private VLAN configuration. Syntax: PVLAN Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Show private VLAN configuration XGSW-28040:/> pvlan configuration Private VLAN Configuration:...
Page 381: Pvlan Delete
User’s Manual of XGSW-28040 <port_list>: Port list or 'all', default: All ports Example: Add port1 to port4 in PVLAN10 XGSW-28040:/>pvlan add 10 1-4 PVLAN Delete Description: Delete Private VLAN entry. Syntax: PVLAN Delete <pvlan_id> Parameters: <pvlan_id>: Private VLAN ID. The allowed range for a Private VLAN ID is the same as the switch port number range.
Page 382: Pvlan Isolate
User’s Manual of XGSW-28040 PVLAN ID Ports -------- ----- 1-10 PVLAN Isolate Description: Set or show the port isolation mode. Syntax: PVLAN Isolate [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Enable port isolation enable : Disable port isolation...
Page 383: Security Command
User’s Manual of XGSW-28040 6.7 Security Command Security Switch User Configuration Description: Show users configuration. Syntax: Security Switch Users Configuration Default Setting: User Name Privilege admin Example: Show users configuration XGSW-28040:/>security switch user configuration Users Configuration: ==================== User Name Privilege Level...
Page 384: Security Switch User Delete
User’s Manual of XGSW-28040 Example: Add new user: username: test, password: test & privilege: 10 XGSW-28040:/>security switch users add test test 10 Security Switch User Delete Description: Delete users entry. Syntax: Security Switch Users Delete <user_name> Parameters: <user_name>: A string identifying the user name that this entry should belong to. The allowed string length is (1-32). The...
Page 385: Security Switch Privilege Level Group
User’s Manual of XGSW-28040 CRO CRW SRO SRW -------------------------------- --- --- --- --- Aggregation 5 10 5 10 Diagnostics 5 10 5 10 5 10 5 10 LACP 5 10 5 10 LLDP 5 10 5 10 LLDP_MED 5 10...
Page 386: Security Switch Privilege Level Current
<sro> : Status/Statistics read-write privilege level (1-15) <srw> Example: Change privilege level of MVR group. XGSW-28040:/>security switch privilege level group mvr 15 15 15 15 Security Switch Privilege Level Current Description: Show the current privilege level. Syntax: Security Switch Privilege Level Current...
Page 387: Security Switch Authentication Method
: Enable local authentication if remote authentication fails enable : Disable local authentication if remote authentication fails disable (The parameter is effective when it is typed) Default Setting: disable Example: Use RADIUS authentication method for telnet. XGSW-28040:/>security switch auth method telnet radius enable...
Page 388: Security Switch Ssh Configuration
Security Switch SSH Mode Description: Set or show the SSH mode. Syntax: Security Switch SSH Mode [enable|disable] Parameters: enable : Enable SSH disable: Disable SSH (default: Show SSH mode) Default Setting: enable Example: Enable SSH function. XGSW-28040:/>security switch ssh mode enable...
Page 389: Security Switch Https Configuration
Security Switch HTTPs Mode Description: Set or show the HTTPS mode. Syntax: Security Switch HTTPS Mode [enable|disable] Parameters: enable : Enable HTTPs disable: Disable HTTPs (default: Show HTTPs mode) Default Setting: enable Example: Enable HTTPs function. XGSW-28040:/>security switch https mode enable...
Page 390: Security Switch Https Redirect
: Enable HTTPs redirect disable: Disable HTTPs redirect (default: Show HTTPs redirect mode) Default Setting: disable Example: Enable HTTPs redirect function. XGSW-28040:/>security switch https redirect enable Security Switch Access Configuration Description: Show access management configuration. Syntax: Security Switch Access Configuration Example: Show access management configuration.
Page 391: Security Switch Access Mode
(default: Show access management mode) Default Setting: disable Example: Enable access management function. XGSW-28040:/>security switch access mode enable Security Switch Access Add Description: Add access management entry, default: Add all supported protocols. Syntax: Security Switch Access Add <access_id> <start_ip_addr> <end_ip_addr> [web] [snmp] [telnet]...
Page 392: Security Switch Access Ipv6 Add
: Indicates that the host can access the switch from TELNET/SSH telnet Example: Add access management list from 192.168.0.1 to 192.168.0.200 via web interface. XGSW-28040:/>security switch access add 1 192.168.0.1 192.168.0.200 web Security Switch Access IPv6 Add Description: Add access management IPv6 entry, default: Add all supported protocols.
Page 393: Security Switch Access Delete
User’s Manual of XGSW-28040 XGSW-28040:/> security switch access add 2001::0001 2001::0100 web Security Switch Access Delete Description: Delete access management entry. Syntax: Security Switch Access Delete <access_id> Parameters: <access_id>: entry index (1-16) Example: Delete access management ID 1 XGSW-28040:/>security switch access delete 1...
Page 394: Security Switch Access Statistics
User’s Manual of XGSW-28040 Syntax: Security Switch Access Clear Example: Clear access management entry. XGSW-28040:/>security switch access clear Security Switch Access Statistics Description: Show or clear access management statistics. Syntax: Security Switch Access Statistics [clear] Parameters: clear: Clear access management statistics Example: Show access management statistics.
Page 395: Security Switch Snmp Mode
: Enable SNMP disable: Disable SNMP (default: Show SNMP mode) Default Setting: enable Example: Disable SNMP mode. XGSW-28040:/>security switch snmp mode disable Security Switch SNMP Version Description: Set or show the SNMP protocol version. Syntax: Security Switch SNMP Version [1|2c|3] Parameters:...
Page 396: Security Switch Snmp Read Community
(default: Show SNMP read community) Default Setting: public Example: Set SNMP read community private. XGSW-28040:/>security switch snmp read community private Security Switch SNMP Write Community Description: Set or show the community string for SNMP write access. Syntax: Security Switch SNMP Write Community [<community>] Parameters: <community>: Community string.
Page 397: Security Switch Snmp Trap Mode
User’s Manual of XGSW-28040 Example: Set public value in SNMP write community. XGSW-28040:/>security switch snmp write community public Security Switch SNMP Trap Mode Description: Set or show the SNMP trap mode. Syntax: Security Switch SNMP Trap Mode [enable|disable] Parameters: enable : Enable SNMP traps...
Page 398: Security Switch Snmp Trap Community
User’s Manual of XGSW-28040 Default Setting: Example: Set SNMP trap version in version 2c. XGSW-28040:/>security switch snmp trap version 2c Security Switch SNMP Trap Community Description: Set or show the community string for SNMP traps. Syntax: Security Switch SNMP Trap Community [<community>] Parameters: <community>: Community string.
Page 399: Security Switch Snmp Trap Ipv6 Destination
16-bit groups of contiguous zeros; but it can only appear once. It also used a following legally IPv4 address. For example,'::192.1.2.34'. Example: Set SNMP trap IPv6 destination address for 2001::0001 XGSW-28040:/>security switch snmp trap ipv6 destination 2001::0001 Security Switch SNMP Trap Authentication Failure Description: Set or show the SNMP authentication failure trap mode.
Page 400: Security Switch Snmp Trap Link-Up
User’s Manual of XGSW-28040 Default Setting: enable Example: Disable SNMP trap authentication failure XGSW-28040:/>security switch snmp trap authentication failure disable Security Switch SNMP Trap Link-up Description: Set or show the port link-up and link-down trap mode. Syntax: Security Switch SNMP Trap Link-up [enable|disable]...
Page 401: Security Switch Snmp Trap Inform Timeout
(default: Show SNMP inform mode) Default Setting: enable Example: Disable SNMP trap inform mode. XGSW-28040:/>security switch snmp trap inform mode disable Security Switch SNMP Trap Inform Timeout Description: Set or show the SNMP trap inform timeout (usecs). Syntax: Security Switch SNMP Trap Inform Timeout [<timeout>] Parameters: <timeout>: SNMP trap inform timeout (0-2147 seconds)
Page 402: Security Switch Snmp Trap Probe Security Engine Id
(default: Show SNMP trap security engine ID probe mode) Default Setting: enable Example: Disable SNMP trap probe security engine ID XGSW-28040:/>security switch snmp trap probe security engine id disable Security Switch SNMP Trap Security Engine ID Description: Set or show SNMP trap security engine ID. Syntax:...
Page 403: Security Switch Snmp Trap Security Name
<engineid>: Engine ID, the format may not be all zeros or all 'ff'H and is restricted to 5 - 32 octet string Example: Set the SNMP trap security engine ID XGSW-28040:/>security switch snmp trap security engine id 800007e5017f000011 Security Switch SNMP Trap Security Name Description: Set or show SNMP trap security name.
Page 404: Security Switch Snmp Community Add
<ip_addr> : IP address (a.b.c.d), default: Show IP address <ip_mask> : IPv4 subnet mask (a.b.c.d), default: Show IP mask Example: Add SNMPv3 community entry. XGSW-28040:/>security switch snmp community add public 192.168.0.20 255.255.255.0 Security Switch SNMP Community Delete Description: Delete SNMPv3 community entry.
Page 405: Security Switch Snmp Community Lookup
User’s Manual of XGSW-28040 XGSW-28040:/>security switch snmp community delete 3 Security Switch SNMP Community Lookup Description: Lookup SNMPv3 community entry. Syntax: Security Switch SNMP Community Lookup [<index>] Parameters: <index>: entry index (1-64) Example: Lookup SNMPv3 community entry XGSW-28040:/>security switch snmp community lookup...
Page 406: Security Switch Snmp User Delete
<priv_password>: A string identifying the privacy pass phrase. The allowed string length is (8-40), and the allowed content is ASCII characters from 33 to 126 Example: Add SNMPv3 user entry XGSW-28040:/>security switch snmp user add 800007e5017f000003 admin_snmpv3 md5 12345678 des abcdefgh Security Switch SNMP User Delete Description: Delete SNMPv3 user entry.
Page 407: Security Switch Snmp User Lookup
<priv_password>: A string identifying the privacy pass phrase. The allowed string length is (8-40), and the allowed content is ASCII characters from 33 to 126 Example: Delete SNMPv3 user entry XGSW-28040:/>security switch snmp user changekey 800007e5017f000003 admin_snmpv3 87654321 12345678 Security Switch SNMP User Lookup Description: Lookup SNMPv3 user entry.
Page 408: Security Switch Snmp Group Delete
: A string identifying the group name that this entry should belong to. The allowed string length is <group_name> (1-32), and the allowed content is ASCII characters from 33 to 126 Example: Add SNMPv3 group entry XGSW-28040:/>security switch snmp group add usm admin_snmpv3 group_snmpv3 Security Switch SNMP Group Delete Description: Delete SNMPv3 group entry. Syntax: Security Switch SNMP Group Delete <index>...
Page 409: Security Switch Snmp View Add
: An optional flag to indicate that this view subtree should excluded excluded <oid_subtree>: The OID defining the root of the subtree to add to the named view Example: Add SNMPv3 view entry XGSW-28040:/>security switch snmp view add snmpv3_view include .1...
Page 410: Security Switch Snmp View Delete
Syntax: Security Switch SNMP View Delete <index> Parameters: <index>: entry index (1-64) Example: Delete SNMPv3 view entry XGSW-28040:/>security switch snmp view delete 3 Security Switch SNMP View Lookup Description: Lookup SNMPv3 view entry. Syntax: Security Switch SNMP View Lookup [<index>] Parameters: <index>: entry index (1-64)
Page 411: Security Switch Snmp Access Add
The name of "None" is reserved. The allowed string length is (1-32), and the allowed content is ASCII characters from 33 to 126 Example: Add SNMPv3 access entry XGSW-28040:/>security switch snmp access add group_snmpv3 usm authpriv snmpv3_view snmpv3_view Security Switch SNMP Access Delete Description: Delete SNMPv3 access entry.
Page 412: Security Switch Snmp Access Lookup
User’s Manual of XGSW-28040 <index>: entry index (1-64) Example: Delete SNMPv3 access entry XGSW-28040:/>security switch snmp access delete 3 Security Switch SNMP Access Lookup Description: Lookup SNMPv3 access entry. Syntax: Security Switch SNMP Access Lookup [<index>] Parameters: <index>: entry index (1-64)
Page 413: Security Switch Rmon Statistics Delete
User’s Manual of XGSW-28040 <data_source>: The OID that indicates that the ifIndex in ifEntry. The value should be like .1.3.6.1.2.1.2.2.1.1.xxx. Security Switch RMON Statistics Delete Description: Delete RMON Statistics entry. The entry index key is <stats_id>. Syntax: Security Switch RMON Statistics Delete <stats_id>...
Page 414: Security Switch Rmon History Delete
User’s Manual of XGSW-28040 : Sampling interval (1-3600) (default: 1800). <interval> : The maximum data entries associated this History control entry stored in RMON(1-65535) (default: 50). <buckets> Security Switch RMON History Delete Description: Delete RMON Hisotry entry. The entry index key is <history_id>.
Page 415: Security Switch Rmon Alarm Delete
User’s Manual of XGSW-28040 : Sampling interval (1-2147483647) (default: 30). <interval> : The MIB OID that need to be referenced. <alarm_vairable> .1.3.6.1.2.1.2.2.1.10.xxx – ifInOctets .1.3.6.1.2.1.2.2.1.11.xxx – ifInUcastPkts .1.3.6.1.2.1.2.2.1.12.xxx – ifInNUcastPkts .1.3.6.1.2.1.2.2.1.13.xxx – ifInDiscards .1.3.6.1.2.1.2.2.1.14.xxx – ifInErrors .1.3.6.1.2.1.2.2.1.15.xxx – ifInUnkownProtos .1.3.6.1.2.1.2.2.1.16.xxx – ifOutOctets .1.3.6.1.2.1.2.2.1.17.xxx –...
Page 416: Security Switch Rmon Alarm Lookup
User’s Manual of XGSW-28040 Security Switch RMON Alarm Lookup Description: Show RMON Alarm entries. Syntax: Security Switch RMON Alarm Lookup [<alarm_id>] Parameters: <alarm_id>: Alarm ID (1-65535). Security Switch RMON Event Add Description: Add or modify RMON Event entry. The entry index key is <event_id>.
Page 417: Security Switch Rmon Event Lookup
User’s Manual of XGSW-28040 Security Switch RMON Event Lookup Description: Show RMON Event entries. Syntax: Security Switch RMON Event Lookup [<event_id>] Parameters: : Event ID (1-65535). <event_id> Security Network Psec Switch Description: Show Port Security status. Syntax: Security Network Psec Switch [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports...
Page 418: Security Network Limit Configuration
Show MAC Addresses learned by Port Security. Syntax: Security Network Psec Port [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Show MAC address learned on port 1 XGSW-28040:/>security network psec port 1 Port 1: ------- MAC Address State Added Age/Hold Time...
Page 419: Security Network Limit Mode
: Globally disable port security (default: Show current global enabledness of port security limit control) Default Setting: disable Example: Enable the limit mode XGSW-28040:/>security network limit mode enable Security Network Limit Aging Description: Set or show aging state. Syntax: Security Network Limit Aging [enable|disable]...
Page 420: Security Network Limit Agetime
(default: Show current enabledness of aging) Default Setting: disable Example: Enable limit aging XGSW-28040:/>security network limit aging enable Security Network Limit Agetime Description: Time in seconds between check for activity on learned MAC addresses. Syntax: Security Network Limit Agetime [<age_time>] Parameters: <age_time>: Time in seconds between checks for activity on a MAC address (10-10000000 seconds)
Page 421: Security Network Limit Limit
Default Setting: disable Example: Enable port limit for port 1 XGSW-28040:/>security network limit port 1 enable Security Network Limit Limit Description: Set or show the max. number of MAC addresses that can be learned on this set of ports. Syntax: Security Network Limit Limit [<port_list>] [<limit>]...
Page 422: Security Network Limit Reopen
(default: Show current action) Default Setting: none Example: Set trap mode for limit action for port 1 XGSW-28040:/>security network limit action 1 trap Security Network Limit Reopen Description: Reopen one or more ports whose limit is exceeded and shut down. Syntax: Security Network Limit Reopen [<port_list>]...
Page 423: Security Network Nas Configuration
Show 802.1X configuration. Syntax: Security Network NAS Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Show 802.1X configuration of port 1 XGSW-28040:/>security network nas configuration 1 802.1X Configuration: ===================== Mode : Disabled Reauth. : Disabled Reauth. Period...
Page 424: Security Network Nas State
Globally disable 802.1X (default: Show current 802.1X global enabledness) Default Setting: disable Example: Enable IEEE802.1X function XGSW-28040:/>security network nas mode enable Security Network NAS State Description: Set or show the port security state. Syntax: Security Network NAS State [<port_list>] [auto|authorized|unauthorized|single|multi|macbased] Parameters: <port_list>: Port list or 'all', default: All ports...
Page 425: Security Network Nas Reauthentication
User’s Manual of XGSW-28040 XGSW-28040:/>security network nas state 1 Port Admin State Port State Last Source Last ID ---- ------------------ --------------------- ----------------- ------------------ Force Authorized Globally Disabled Security Network NAS Reauthentication Description: Set or show Reauthentication state. Syntax: Security Network NAS Reauthentication [enable|disable]...
Page 426: Security Network Nas Eapoltimeout
(default: Show current EAPOL retransmission timeout) Default Setting: Example: Set the time between EAPOL retransmissions for 100sec. XGSW-28040:/>security network nas eapoltimeout 100 Security Network NAS Agetime Description: Time in seconds between check for activity on successfully authenticated MAC addresses. Syntax: Security Network NAS Agetime [<age_time>]...
Page 427: Security Network Nas Holdtime
User’s Manual of XGSW-28040 Default Setting: Example: Set NAS age time in 1000sec XGSW-28040:/>security network nas agetime 1000 Security Network NAS Holdtime Description: Time in seconds before a MAC-address that failed authentication gets a new authentication chance. Syntax: Security Network NAS Holdtime [<hold_time>] Parameters: <hold_time>: Time on hold (10-1000000 seconds)
Page 428: Security Network Nas Radius_Vlan
(default: Show current RADIUS-assigned QoS state) Default Setting: disable Example: Enable NAS RADIUS QoS XGSW-28040:/>security network nas radius_qos enable Security Network NAS RADIUS_VLAN Description: Set or show either global state (use the global keyword) or per-port state of RADIUS-assigned VLAN. Syntax: Security Network NAS RADIUS_VLAN [global|<port_list>] [enable|disable]...
Page 429: Security Network Nas Authenticate
:The Guest VLAN can be entered even if an EAPOL frame has been received during the lifetime of the port (default: Show current setting) Default Setting: disable Example: Enable NAS guest VLAN XGSW-28040:/>security network nas guest_vlan enable Security Network NAS Authenticate Description: Refresh (restart) 802.1X authentication process. Syntax: Security Network NAS Authenticate [<port_list>] [now] Parameters: <port_list>: Port list or 'all', default: All ports...
Page 430: Security Network Nas Statistics
User’s Manual of XGSW-28040 : Force reauthentication immediately (default: Schedule a reauthentication) Example: Start NAS authentication now for port 1. XGSW-28040:/>security network nas authenticate 1 now Security Network NAS Statistics Description: Show or clear 802.1X statistics. Syntax: Security Network NAS Statistics [<port_list>] [clear|eapol|radius] Parameters: <port_list>: Port list or 'all', default: All ports...
Page 431: Security Network Acl Configuration
<logging> : Shut down ingress port: shut|shut_disable <shutdown> Example: Show ACL action in port 1 XGSW-28040:/>security network acl action 1 Port Action Rate Limiter Port Copy Mirror Logging Shutdown Counter ---- ------ ------------ --------- -------- -------- -------- ------- Permit Disabled...
Page 432: Security Network Acl Policy
: Policy number (0-255) <policy> Default Setting: Example: Set ACL policy 2 for port 1 XGSW-28040:/>security network acl policy 1 2 Security Network ACL Rate Description: Set or show the ACL rate limiter. Syntax: Security Network ACL Rate [<rate_limiter_list>] [<rate>] Parameters: <rate_limiter_list>: Rate limiter list (1-16), default: All rate limiters...
Page 433: Security Network Acl Add
User’s Manual of XGSW-28040 Security Network ACL Add Description: Add or modify Access Control Entry (ACE). If the ACE ID parameter <ace_id> is specified and an entry with this ACE ID already exists, the ACE will be modified. Otherwise, a new ACE will be added. If the ACE ID is not specified, the next available ACE ID will be used.
Page 434: Security Network Acl Delete
: System logging of frames: log|log_disable <logging> : Shut down ingress port: shut|shut_disable <shutdown> Security Network ACL Delete Description: Delete ACE. Syntax: Security Network ACL Delete <ace_id> Parameters: <ace_id>: ACE ID (1-512) Example: Delete ACE 1 XGSW-28040:/>security network acl delete 1...
Page 435: Security Network Acl Lookup
Show ACE, default: All ACEs. Syntax: Security Network ACL Lookup [<ace_id>] Parameters: <ace_id>: ACE ID (1-512) Example: Lookup ACE 1 XGSW-28040:/>security network acl lookup 1 Security Network ACL Clear Description: Clear all ACL counters. Syntax: Security Network ACL Clear Example: Clear all ACL counters.
Page 436: Security Network Acl Port State
User’s Manual of XGSW-28040 : Shows the status by Loop Protect loop_protect : Show DHCP status dhcp : Show UPnP status upnp arp_inspection : Show ARP Inspection status : Show IPMC status ipmc ip_source_guard : Show IP Source Guard status...
Page 437: Security Network Dhcp Relay Mode
Disable DHCP relaly mode (default: Show flow DHCP relaly mode) Default Setting: disable Example: Enable DHCP relay mode XGSW-28040:/>security network dhcp relay mode enable Security Network DHCP Relay Server Description: Show or set DHCP relay server.
Page 438: Security Network Dhcp Relay Information Mode
: Enable DHCP relay agent information option mode disable: Disable DHCP relay agent information option mode (default: Show DHCP relay agent information option mode) Default Setting: disable Example: Enable DHCP relay agent information option mode. XGSW-28040:/>security network dhcp relay information mode enable...
Page 439: Security Network Dhcp Relay Information Policy
(default: Show DHCP relay information policy) Default Setting: replace Example: Keep the original relay information when receive a DHCP message that already contains it XGSW-28040:/>security network dhcp relay information policy keep Security Network DHCP Relay Statistics Description: Show or clear DHCP relay statistics. Syntax:...
Page 440: Security Network Dhcp Snooping Configuration
(default: Show flow DHCP snooping mode) Default Setting: disable Example: Enable DHCP snooping mode XGSW-28040:/>security network dhcp snooping mode enable Security Network DHCP Snooping Port Mode Description: Set or show the DHCP snooping port mode. Syntax: Security Network DHCP Snooping Port Mode [<port_list>] [trusted|untrusted]...
Page 441: Security Network Dhcp Snooping Statistics
(default: Show flow DHCP snooping port mode) Default Setting: trusted Example: Set untrusted DHCP snooping port mode in port 1 XGSW-28040:/>security network dhcp snooping port mode 1 untrusted Security Network DHCP Snooping Statistics Description: Show or clear DHCP snooping statistics. Syntax: Security Network DHCP Snooping Statistics [<port_list>] [clear]...
Page 442: Security Network Ip Source Guard Configuration
: Enable IP Source Guard disable: Disable IP Source Guard Default Setting: disable Example: Enable IP source guard mode XGSW-28040:/>security network ip source guard mode enable Security Network IP Source Guard Port Mode Description: Set or show the IP Source Guard port mode.
Page 443: Security Network Ip Source Guard Limit
Disable IP Source Guard Default Setting: disable Example: Enable IP source guard port mode XGSW-28040:/>security network ip source guard port mode enable Security Network IP Source Guard Limit Description: Set or show the IP Source Guard port limitation for dynamic entries. Syntax: Security Network IP Source Guard limit [<port_list>] [<dynamic_entry_limit>|unlimited]...
Page 444: Security Network Ip Source Guard Status
: IPv4 mask (a.b.c.d), IP mask for allowed IP address <ip_mask> Example: Add IP source guard static entry. XGSW-28040:/>security network ip source guard entry 1 add 1 192.168.0.20 Security Network IP Source Guard Status Description: Show IP source guard static and dynamic entries.
Page 445: Security Network Arp Inspection Configuration
Parameters: enable : Enable ARP Inspection disable: Disable ARP Inspection Default Setting: disable Example: Enable ARP inspection mode XGSW-28040:/>security network arp inspection mode enable Security Network ARP Inspection Port Mode Description: Set or show the ARP Inspection port mode. Syntax:...
Page 446: Security Network Arp Inspection Entry
<allowed_mac>: MAC address ('xx-xx-xx-xx-xx-xx' or 'xx.xx.xx.xx.xx.xx' or 'xxxxxxxxxxxx', x is a hexadecimal digit), MAC address allowed for doing ARP request <allowed_ip> : IPv4 address (a.b.c.d), IP address allowed for doing ARP request Example: Add ARP inspection static entry. XGSW-28040:/>security network arp inspection entry 1 add 1 00-30-4f-00-00-11 192.168.0.11...
Page 447: Security Network Arp Inspection Status
Security Network ARP Inspection Status [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Show ARP inspection static and dynamic entries. XGSW-28040:/>security network arp inspection status Security Network ARP Inspection Translation Description: Translate ARP inspection dynamic entries into static entries. Syntax:...
Page 448: Security Aaa Timeout
User’s Manual of XGSW-28040 Server Timeout : 15 seconds Server Dead Time : 300 seconds RADIUS Authentication Server Configuration: =========================================== Server Mode IP Address Secret Port ------ -------- --------------- ------------------------------ ----- Disabled 1812 Disabled 1812 Disabled 1812 Disabled 1812 Disabled...
Page 449: Security Aaa Deadtime
User’s Manual of XGSW-28040 Set or show server timeout. Syntax: Security AAA Timeout [<timeout>] Parameters: <timeout>: Server response timeout (3-3600 seconds) (default: Show server timeout configuration) Default Setting: Example: Set 30sec for server timeout XGSW-28040:/>security aaa timeout 30 Security AAA Deadtime Description: Set or show server dead time.
Page 450: Security Aaa Radius
: Server UDP port. Use 0 to use the default RADIUS port (1812) <server_port> Example: Set RADIUS authentication server configuration. XGSW-28040:/>security aaa radius 1 enable 192.168.0.20 12345678 1812 Security AAA ACCT_RADIUS Description: Set or show RADIUS accounting server setup. Syntax: Security AAA ACCT_RADIUS [<server_index>] [enable|disable] [<ip_addr_string>] [<secret>] [<server_port>]...
Page 451: Security Aaa Tacacs
To use spaces in secret, enquote the secret. Quotes in the secret are not allowed. : Server TCP port. Use 0 to use the default TACACS+ port (49) <server_port> Example: Set TACACS+ authentication server configuration. XGSW-28040:/>security aaa tacacs+ 1 enable 192.168.0.20 12345678 49...
Page 452: Security Aaa Statistics
User’s Manual of XGSW-28040 Security AAA Statistics Description: Show RADIUS statistics. Syntax: Security AAA Statistics [<server_index>] Parameters: The server index (1-5) (default: Show statistics for all servers) Example: Show RADIUS statistics. XGSW-28040:/>security aaa statistics...
Page 453: Spanning Tree Protocol Command
User’s Manual of XGSW-28040 6.8 Spanning Tree Protocol Command STP Configuration Description: Show STP Bridge configuration. Syntax: STP Configuration Example: Show STP configuration. XGSW-28040:/>stp cofiguration STP Configuration: ================== Protocol Version: MSTP Max Age : 20 Forward Delay : 15 Tx Hold Count...
Page 454: Stp Tx Hold
User’s Manual of XGSW-28040 Example: Set the STP Bridge protocol version. XGSW-28040:/> stp version rstp STP Tx Hold Description: Set or show the STP Bridge Transmit Hold Count parameter. Syntax: STP Txhold [<holdcount>] Parameters: <holdcount>: STP Transmit Hold Count (1-10)
Page 455: Stp Maxage
User’s Manual of XGSW-28040 Example: Set STP maximum hops in 25 XGSW-28040:/>stp maxhops 25 STP MaxAge Description: Set or show the bridge instance maximum age. Syntax: STP MaxAge [<max_age>] Parameters: <max_age>: STP maximum age time (6-40, and max_age <= (forward_delay-1)*2)
Page 456: Stp Cname
User’s Manual of XGSW-28040 Set STP forward delay value in 25 XGSW-28040:/>stp fwddelay 25 STP CName Description: Set or Show MSTP configuration name and revision. Syntax: STP CName [<config-name>] [<integer>] Parameters: <config-name>: MSTP Configuration name. A text string up to 32 characters long.
Page 457: Stp Bpdu Guard
User’s Manual of XGSW-28040 Example: Set edge port BPDU filtering XGSW-28040:/>stp bpdufilter enable STP BPDU Guard Description: Set or show edge port BPDU Guard. Syntax: STP bpduGuard [enable|disable] Parameters: enable|disable: enable or disable BPDU Guard for Edge ports Default Setting:...
Page 458: Stp Status
User’s Manual of XGSW-28040 Example: Set STP recovery value in 30 sec. XGSW-28040:/>stp recovery 30 STP Status Description: Show STP Bridge status. Syntax: STP Status [<msti>] [<port_list>] Parameters: : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...) <msti> <port_list>: Port list or 'all', default: All ports Example: Show STP Bridge status.
Page 459: Stp Msti Map
<msti> <priority> : STP bridge priority (0/4096/8192/12288/.../53248/57344/61440) Default: 32768 Example: Set MST1 priority value in 4096. XGSW-28040:/>stp msti priority 1 4096 STP MSTI Map Description: Show or clear MSTP MSTI VLAN mapping configuration. Syntax: STP Msti Map [<msti>] [clear] Parameters: <msti>: STP bridge instance no (0-7, CIST=0, MSTI1=1, ...)
Page 460: Stp Port Configuration
User’s Manual of XGSW-28040 Example: Add MST1 in vlan1. XGSW-28040:/>stp msti add 1 1 STP Port Configuration Description: Show STP Port configuration. Syntax: STP Port Configuration [<port_list>] Parameters: <port_list>: Port list or 'all'. Port zero means aggregations. Example: Show STP status of Port1 XGSW-28040:/>stp port configuration 1...
Page 461: Stp Port Edge
User’s Manual of XGSW-28040 disable Example: Enable STP function on port1 XGSW-28040:/>stp port mode 1 enable STP Port Edge Description: Set or show the STP adminEdge port parameter. Syntax: STP Port Edge [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports...
Page 462: Stp Port P2P
User’s Manual of XGSW-28040 : Disable MSTP autoEdge Disable Default: enable Example: Disable STP edge function on port1 XGSW-28040:/>stp port autoedge 1 disable STP Port P2P Description: Set or show the STP point2point port parameter. Syntax: STP Port P2P [<port_list>] [enable|disable|auto] Parameters: <port_list>: Port list or 'all', default: All ports...
Page 463: Stp Port Restrictedtcn
: Disable MSTP restricted role disable Default: disable Example: Eisable STP restricted role on port1 XGSW-28040:/>stp port restrictedrole 1 enable STP Port RestrictedTcn Description: Set or show the MSTP restrictedTcn port parameter. Syntax: STP Port RestrictedTcn [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports...
Page 464: Stp Port Statistic
: Disable port BPDU Guard disable Default: disable Example: Eisable BPDU guard on port1 XGSW-28040:/>stp port bpduguard 1 enable STP Port Statistic Description: Show STP port statistics. Syntax: STP Port Statistics [<port_list>] [clear] Parameters: <port_list>: Port list or 'all', default: All ports...
Page 465: Stp Msti Port Configuration
User’s Manual of XGSW-28040 Syntax: STP Port Mcheck [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Set the STP mCheck (Migration Check) variable for port 1. XGSW-28040:/>stp port mcheck 1 STP MSTI Port Configuration Description: Show the STP port instance configuration.
Page 466: Stp Msti Port Priority
User’s Manual of XGSW-28040 auto Example: Set MSTI7 in port1 XGSW-28040:/>stp msti port cost 7 1 MSTI Port Path Cost ---- ---- ---------- MST7 1 Auto STP MSTI Port Priority Description: Set or show the STP port instance priority. Syntax: STP Msti Port Priority [<msti>] [<port_list>] [<priority>]...
Page 467: Link Aggregation Command
User’s Manual of XGSW-28040 6.9 Link Aggregation Command Aggregation Configuration Description: Show link aggregation configuration. Syntax: Aggr Configuration Aggregation Add Description: Add or modify link aggregation. Syntax: Aggr Add <port_list> [<aggr_id>] Parameters: <port_list>: Port list or 'all', default: All ports <aggr_id>...
Page 468: Aggregation Lookup
User’s Manual of XGSW-28040 XGSW-28040:/>aggr delete 2 Aggregation Lookup Description: Lookup link aggregation. Syntax: Aggr Lookup [<aggr_id>] Parameters: <aggr_id>: Aggregation ID: 1-14 Aggregation Mode Description: Set or show the link aggregation traffic distribution mode. Syntax: Aggr Mode [smac|dmac|ip|port] [enable|disable] Parameters:...
Page 469: User's Manual Of Xgsw
User’s Manual of XGSW-28040 XGSW-28040:/>Aggr mode smac disable...
Page 470: Link Aggregation Control Protocol Command
User’s Manual of XGSW-28040 6.10 Link Aggregation Control Protocol Command LACP Configuration Description: Show LACP configuration. Syntax: LACP Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Show LACP configuration XGSW-28040:/>lacp configuration Port Mode Role ---- --------...
Page 471: Lacp Key
User’s Manual of XGSW-28040 <port_list>: Port list or 'all', default: All ports enable : Enable LACP protocol disable: Disable LACP protocol (default: Show LACP mode) Default Setting: disable Example: Enable LACP for port1~4 XGSW-28040:/>lacp mode 1-4 enable LACP Key Description: Set or show the LACP key.
Page 472: Lacp Status
User’s Manual of XGSW-28040 LACP Role [<port_list>] [active|passive] Parameters: <port_list>: Port list or 'all', default: All ports active : Initiate LACP negotiation passive: Listen for LACP packets (default: Show LACP role) Default Setting: active Example: Set passive for port1~4 XGSW-28040:/>lacp role 1-4 passive...
Page 473: Lacp Statistics
User’s Manual of XGSW-28040 LACP Statistics Description: Show LACP Statistics. Syntax: LACP Statistics [<port_list>] [clear] Parameters: <port_list>: Port list or 'all', default: All ports : Clear LACP statistics clear Example: Show LACP statistics of port1~4 XGSW-28040:/>lacp statistics 1-4 Port Rx Frames...
Page 474: Lldp Command
User’s Manual of XGSW-28040 6.11 LLDP Command LLDP Configuration Description: Show LLDP configuration. Syntax: LLDP Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Show LLDP configuration of port1~4 XGSW-28040:/>lldp configuration 1-4 LLDP Configuration: =================== Interval : 30...
Page 475: Lldp Optional Tlv
User’s Manual of XGSW-28040 Parameters: <port_list>: Port list or 'all', default: All ports enable : Enable LLDP reception and transmission disable: Disable LLDP : Enable LLDP reception only : Enable LLDP transmission only (default: Show LLDP mode) Default Setting: disable Example: Enable port1 LLDP function.
Page 476: Lldp Interval
User’s Manual of XGSW-28040 System capabilities: Enable Master's IP address: Enable Example: Disable description of the port for port1 XGSW-28040:/>lldp optional_tlv 1 port_descr disable LLDP Interval Description: Set or show LLDP Tx interval. Syntax: LLDP Interval [<interval>] Parameters: <interval>: LLDP transmission interval (5-32768)
Page 477: Lldp Delay
User’s Manual of XGSW-28040 Example: Set LLDP hold value in 10 XGSW-28040:/>lldp hold 10 LLDP Delay Description: Set or show LLDP Tx delay. Syntax: LLDP Delay [<delay>] Parameters: <delay>: LLDP transmission delay (1-8192) Default Setting: Example: Set LLDP delay value in 1 XGSW-28040:/>lldp delay 1...
Page 478: Lldp Statistics
User’s Manual of XGSW-28040 Example: Set LLDP reinit delay value in 3 XGSW-28040:/>lldp reinit 3 LLDP Statistics Description: Show LLDP Statistics. Syntax: LLDP Statistics [<port_list>] [clear] Parameters: <port_list>: Port list or 'all', default: All ports : Clear LLDP statistics clear...
Page 479: Lldp Info
User’s Manual of XGSW-28040 LLDP Info Description: Show LLDP neighbor device information. Syntax: LLDP Info [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports LLDP CDP Aware Description: Set or show if discovery information from received CDP ( Cisco Discovery Protocol ) frames is added to the LLDP neighbor table.
Page 480: Lldpmed Command
User’s Manual of XGSW-28040 6.12 LLDPMED Command LLDPMED Configuration Description: Show LLDP-MED configuration. Syntax: LLDPMED Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Show LLDP-MED configuration of port1~4 XGSW-28040:/>lldpmed configuration 1-4 LLDP-MED Configuration: ======================= Fast Start Repeast Count : 4...
Page 481: Lldpmed Ecs
User’s Manual of XGSW-28040 Syntax: LLDPMED Civic [country|state|county|city|district|block|street|leading_street_direction|trailing_street_suffix|str_suf|house_no|house_no_s uffix|landmark|additional_info|name|zip_code|building|apartment|floor|room_number|place_type|postal_com_name|p_o_ box|additional_code] [<civic_value>] Parameters: : Country country : National subdivisions (state, caton, region, province, prefecture) state : County, parish,gun (JP), district(IN) county : City, townchip, shi (JP) city : City division,borough, city, district, ward,chou (JP)
Page 482: Lldpmed Policy Delete
User’s Manual of XGSW-28040 Syntax: LLDPMED ecs [<ecs_value>] Parameters: <ecs_value>: lldpmed The value for the Emergency Call Service LLDPMED Policy Delete Description: Delete the selected policy. Syntax: LLDPMED policy delete [<policy_list>] Parameters: <policy_list>: List of policies to delete Example: Delete the policy 1 XGSW-28040:/>lldpmed policy delete 1...
Page 483: Lldpmed Port Policy
User’s Manual of XGSW-28040 interactive voice services. guest_voice_signaling : Guest Voice Signaling (conditional) for use in network topologies that require a different policy for the guest voice signaling than for the guest voice media. : Softphone Voice for use by softphone applications on typical data centric devices, such as softphone_voice PCs or laptops.
Page 484: Lldpmed Coordinates
User’s Manual of XGSW-28040 LLDPMED Coordinates Description: Set or show LLDP-MED Location. Syntax: LLDPMED Coordinates [<tude_type>] [<direction>] [coordinate_value] Parameters: : The tude_type parameter takes the following values: <tude_type> latitude : Latitude, 0 to 90 degrees with max. 4 digits (Positive numbers are north of the equator and negative numbers are south of the equator).
Page 485: Lldpmed Fast
User’s Manual of XGSW-28040 LLDPMED Fast Description: Set or show LLDP-MED Fast Start Repeat Count. Syntax: LLDPMED Fast [<count>] Parameters: <count>: The number of times the fast start LLDPDU are being sent during the activation of the fast start mechanism defined by LLDP-MED (1-10).
Page 486: Quality Of Service Command
<port_list>: Port list or 'all', default: All ports : QoS class (0-7) <class> Default Setting: Example: Set default QoS class in 1 for port 1 XGSW-28040:/>qos Port Classification Class 1 1 QoS Port Classification DPL Description: Set or show the default Drop Precedence Level.
Page 487: Qos Port Classification Tag
Default Setting: Example: Set the default Drop Precedence Level in 1 for port1 XGSW-28040:/>qos Port Classification dpl 1 1 QoS Port Classification Tag Description: Set or show if the classification is based on the PCP and DEI values in tagged frames.
Page 488: Qos Port Classification Map
<port_list>: Port list or 'all', default: All ports : Enable DSCP based classification enable : Disable DSCP based classification disable (default: Show DSCP based classification mode) Default Setting: disable Example: Enable QoS port classification DSCP. XGSW-28040:/>qos Port Classification dscp 1-10 enable...
Page 489: Qos Port Policer Mode
(default: Show port policer mode) Default Setting: disable Example: Enable QoS port policer XGSW-28040:/>qos Port Policer Mode 1-10 enable QoS Port Policer Rate Description: Set or show the port policer rate. Syntax: QoS Port Policer Rate [<port_list>] [<rate>] Parameters: <port_list>: Port list or 'all', default: All ports...
Page 490: Qos Port Policer Unit
User’s Manual of XGSW-28040 XGSW-28040:/>qos Port Policer Rate 1-10 1000 QoS Port Policer Unit Description: Set or show the port policer unit. Syntax: QoS Port Policer Unit [<port_list>] [kbps|fps] Parameters: <port_list>: Port list or 'all', default: All ports kbps : Unit is kilo bits per second...
Page 491: Qos Port Scheduler Weight
User’s Manual of XGSW-28040 Default Setting: strict Example: Set the port schedule mode in weighted mode XGSW-28040:/>qos Port Scheduler Mode 1-10 weighted QoS Port Scheduler Weight Description: Set or show the port scheduler weight. Syntax: QoS Port Scheduler Weight [<port_list>] [<queue_list>] [<weight>] Parameters: <port_list>...
Page 492: Qos Port Queueshaper Rate
User’s Manual of XGSW-28040 Example: Enable port queue shaper for all port & queue XGSW-28040:/>qos Port QueueShaper Mode 1-10 0-7 enable QoS Port QueueShaper Rate Description: Set or show the port queue shaper rate. Syntax: QoS Port QueueShaper Rate [<port_list>] [<queue_list>] [<bit_rate>] Parameters: <port_list>...
Page 493: Qos Port Tagremarking Mode
(default: Show port queue excess bandwidth mode) Default Setting: disable Example: Enable the port queue excess bandwidth mode. XGSW-28040:/>qos Port QueueShaper Excess 1-10 0-7 enable QoS Port TagRemarking Mode Description: Set or show the port tag remarking mode. Syntax: QoS Port TagRemarking Mode [<port_list>] [classified|default|mapped] Parameters: <port_list>: Port list or 'all', default: All ports...
Page 494: Qos Port Tagremarking Dei
<pcp> Default Setting: Example: Set the default PCP in 1. XGSW-28040:/>qos Port TagRemarking PCP 1-10 1 QoS Port TagRemarking DEI Description: Set or show the default DEI. This value is used when port tag remarking mode is set to 'default'.
Page 495: Qos Port Tagremarking Map
User’s Manual of XGSW-28040 Precedence level' to a 1 bit 'Drop Precedence level' used in the mapping process. Up to four values (0 or 1) in increasing order is acccepted. Example: 'QoS Port TagRemarking DPL 4 0 0 1 1' sets the table for port 4 to: DP level 0 ->...
Page 496: Qos Port Dscp Classification
: Classify DSCP for which class. mode is 'enable' : Classify all DSCP (default: Show port DSCP ingress classification mode) Default Setting: none Example: Set DSCP classification based on QoS class and DP level in zero XGSW-28040:/> QoS Port DSCP Classification 1-10 zero...
Page 497: Qos Port Dscp Egressremark
Default Setting: disable Example: Enable DSCP egress rewrite XGSW-28040:/> QoS Port DSCP EgressRemark 1-10 enable QoS DSCP Map Description: Set or show DSCP mapping table. This table is used to map QoS class and DP level based on DSCP value.
Page 498: Qos Dscp Translation
User’s Manual of XGSW-28040 QoS DSCP Translation Description: Set or show global ingress DSCP translation table. If port DSCP translation is enabled, translation table is used to translate incoming frames DSCP value and translated value is used to map QoS class and DP level.
Page 499: Qos Dscp Egressremap
User’s Manual of XGSW-28040 If port DSCP classification is 'selected', DSCP will be classified based on QoS class and DP level only for DSCP value with classification mode 'enabled'. DSCP may be translated DSCP if translation is enabled for the port.
Page 500: Qos Port Storm Multicast
: Unit is frames per second Default Setting: disable Example: Enable unicast storm control in 2kbps XGSW-28040:/> QoS Port Storm Unicast enable 2 QoS Port Storm Multicast Description: Set or show the port storm rate limiter for broadcast frames. Syntax: QoS Port Storm Broadcast [<port_list>] [enable|disable] [<rate>] [kbps|fps]...
Page 501: Qos Port Storm Unknownt
User’s Manual of XGSW-28040 QoS Port Storm Unknownt Description: Set or show the port storm mode for unknown frames. Syntax: QoS Port Storm Unknownt [<port_list>] [enable|disable] [<rate>] [kbps|fps] Parameters: <port_list>: Port list or 'all', default: All ports : Enable storm policing of broadcast frames...
Page 502: Qos Qcl Add
User’s Manual of XGSW-28040 QoS QCL Add Description: Add or modify QoS Control Entry (QCE). If the QCE ID parameter <qce_id> is specified and an entry with this QCE ID already exists, the QCE will be modified. Otherwise, a new QCE will be added. If the QCE ID is not specified, the next available QCE ID will be used. If the next QCE ID parameter <qce_id_next>...
Page 503: Qos Qcl Delete
User’s Manual of XGSW-28040 : IPv4 frame fragmented: yes|no|any <fragment> : Source TCP/UDP port:(0-65535) or 'any', specific or port range <sport> : Dest. TCP/UDP port:(0-65535) or 'any', specific or port range <dport> : IPv6 keyowrd ipv6 : IPv6 source address: (a.b.c.d/n) or 'any', 32 LS bits <sip_v6>...
Page 504: Qos Qcl Refresh
User’s Manual of XGSW-28040 QoS QCL status [combined|static|voice_vlan|conflicts] Parameters: : Shows the combined status combined|static|voice_vlan|conflicts: combined : Shows the static user configured status static : Shows the status by Voice VLAN voice_vlan : Shows all conflict status conflicts (default : Shows the combined status)
Page 505: Mirror Port
User’s Manual of XGSW-28040 Mirror Port Description: Set or show the mirror port. Syntax: Mirror Port [<port>|disable] Parameters: <port>|disable: Mirror port or 'disable', default: Show port Default Setting: disable Example: Set port 2 for the mirror port. XGSW-28040:/>mirror port 2...
Page 506: Configuration Command
User’s Manual of XGSW-28040 Enable the mirror mode for port 1-4. XGSW-28040:/>mirror mode 1-4 enable 6.15 Configuration Command Configuration Save Description: Save configuration to TFTP server. Syntax: Config Save <ip_server> <file_name> Parameters: <ip_server>: TFTP server IP address (a.b.c.d) <file_name>: Configuration file name...
Page 507: Firmware Command
User’s Manual of XGSW-28040 6.16 Firmware Command Firmware Load Description: Load new firmware from TFTP server. Syntax: Firmware Load <ip_addr_string> <file_name> Parameters: <ip_addr_string>: IP host address (a.b.c.d) or a host name string : Firmware file name <file_name> Firmware IPv6 Load Description: Load new firmware from IPv6 TFTP server.
Page 508 User’s Manual of XGSW-28040 Activate the alternate firmware image. Syntax: Firmware Swap...
Page 509: Upnp Command
User’s Manual of XGSW-28040 6.17 UPnP Command UPnP Configuration Description: Show UPnP configuration. Syntax: UPnP Configuration Example: Show UPnP configuration. XGSW-28040:/>upnp configuration UPnP Configuration: =================== UPnP Mode : Disabled UPnP TTL UPnP Advertising Duration : 100 UPnP Mode Description: Set or show the UPnP mode.
Page 510: Upnp Ttl
User’s Manual of XGSW-28040 XGSW-28040:/>upnp mode enable UPnP TTL Description: Set or show the TTL value of the IP header in SSDP messages. Syntax: UPnP TTL [<ttl>] Parameters: <ttl>: ttl range (1..255), default: Show UPnP TTL Default Setting: Example: Set the value 10 for TTL value of the IP header in SSDP messages.
Page 511: Mvr Command
User’s Manual of XGSW-28040 6.18 MVR Command MVR Configuration Description: Show the MVR configuration. Syntax: MVR Configuration Example: Show the MVR configuration. XGSW-28040:/>mvr configuration MVR Configuration: ================== MVR Mode: Disabled Muticast VLAN ID: 100 Port Port Mode Port Type Immediate Leave...
Page 512: Mvr Vlan Setup
User’s Manual of XGSW-28040 MVR Mode [enable|disable] Parameters: : Enable MVR mode enable : Disable MVR mode disable (default: Show MVR mode) Default Setting: disable Example: Enable MVR mode. XGSW-28040:/>mvr mode enable MVR VLAN Setup Description: Set or show per MVR VLAN configuration.
Page 513: Mvr Vlan Llqi
User’s Manual of XGSW-28040 Parameters: <vid>|<mvr_name>: MVR VLAN ID (1-4095) or Name (Maximum of 32 characters) : Port list or 'all', default: All ports <port_list> : MVR source port source receiver : MVR receiver port inactive : Disable MVR (default: Show MVR port role)
Page 514: Mvr Vlan Priority
User’s Manual of XGSW-28040 : MVR Name keyword name : MVR Channel name. (Maximum of 32 characters) <grp_name> MVR VLAN Priority Description: Set or show per MVR VLAN priority and VLAN tag. Syntax: MVR VLAN Priority [<vid>|<mvr_name>] [priority] [tagged|untagged] Parameters: <vid>|<mvr_name>: MVR VLAN ID (1-4095) or Name (Maximum of 32 characters)
Page 515: Mvr Group
User’s Manual of XGSW-28040 MVR Status [<vid>] [clear] Parameters: <vid>: VLAN ID (1-4095) : Clear log clear MVR Group Description: Show MVR group addresses. Syntax: MVR Groups [<vid>] Parameters: <vid>: VLAN ID (1-4095) MVR SFM Description: Show SFM (including SSM) related information for MVR.
Page 516: Voice Vlan Command
User’s Manual of XGSW-28040 6.19 Voice VLAN Command Voice VLAN Configuration Description: Show Voice VLAN configuration. Syntax: Voice VLAN Configuration Example: Show Voice VLAN configuration. XGSW-28040:/>voice vlan configuration V oice VLAN Configuration: ========================= Voice VLAN Mode : Disabled Voice VLAN VLAN ID...
Page 517: Voice Vlan Mode
User’s Manual of XGSW-28040 Port Mode Security Discovery Protocol ---- -------- -------- ------------------ Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Voice VLAN Mode Description: Set or show the Voice VLAN mode.
Page 518: Voice Vlan Id
User’s Manual of XGSW-28040 Voice VLAN ID Description: Set or show Voice VLAN ID. Syntax: Voice VLAN ID [<vid>] Parameters: <vid>: VLAN ID (1-4095) Default Setting: 1000 Example: Set ID 2 for Voice VLAN ID. XGSW-28040:/>voice vlan id 2 Voice VLAN Agetime Description: Set or show Voice VLAN age time.
Page 519: Voice Vlan Traffic Class
: OUI address (xx-xx-xx). The null OUI address isn't allowed <oui_addr> <description>: Entry description. Use 'clear' or "" to clear the string No blank or space characters are permitted as part of a contact. (only in CLI) Example: Add Voice VLAN OUI entry. XGSW-28040:/>voice vlan oui add 00-11-22 test...
Page 520: Voice Vlan Oui Delete
Parameters: <oui_addr>: OUI address (xx-xx-xx). The null OUI address isn't allowed Example: Delete Voice VLAN OUI entry. XGSW-28040:/>voice vlan oui delete 00-11-22 Voice VLAN OUI Clear Description: Clear Voice VLAN OUI entry. Modify OUI table will restart auto detect OUI process.
Page 521: Voice Vlan Port Mode
Example: Set auto mode for port 1-4 of Voice VLAN port mode. XGSW-28040:/>voice vlan port mode 1-4 auto Voice VLAN Security Description: Set or show the Voice VLAN port security mode. When the function is enabled, all non-telephone MAC address in Voice VLAN will be blocked 10 seconds.
Page 522: Voice Vlan Discovery Protocol
Example: Enable the Voice VLAN port security mode for port 1-4. XGSW-28040:/>voice vlan security 1-4 enable Voice VLAN Discovery Protocol Description: Set or show the Voice VLAN port discovery protocol mode. It only work under auto detect mode is enabled. We should enable LLDP feature before configure discovery protocol to 'LLDP' or 'Both'.
Page 523: Loop Protect Command
User’s Manual of XGSW-28040 6.20 Loop Protect Command Loop Protect Configuration Description: Show Loop Protection configuration. Syntax: Loop Protect Configuration Loop Protect Mode Description: Set or show the Loop Protection mode. Syntax: Loop Protect Mode [enable|disable] Parameters: enable : Enable Loop Protection...
Page 524: Loop Protect Shutdown
User’s Manual of XGSW-28040 Loop Protect Shutdown Description: Set or show the Loop Protection shutdown time. Syntax: Loop Protect Shutdown [<shutdown-time>] Parameters: Shutdown time interval (0-604800 seconds) A value of zero disables re-enabling the port Default Setting: Loop Protect Port Configuration Description: Show Loop Protection port configuration.
Page 525: Loop Protect Port Action
User’s Manual of XGSW-28040 Loop Protect Port Action Description: Set or show the Loop Protection port action. Syntax: Loop Protect Port Action [<port_list>] [shutdown|shut_log|log] Parameters: <port_list>: Port list or 'all', default: All ports shutdown : Shutdown the port shut_log : Shutdown the port and Log event...
Page 526: Ipmc Command
User’s Manual of XGSW-28040 6.21 IPMC Command IPMC Configuration Description: Show IPMC snooping configuration. Syntax: IPMC Configuration [mld|igmp] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP IPMC Mode Description: Set or show the IPMC snooping mode.
Page 527: Ipmc Flooding
User’s Manual of XGSW-28040 IPMC Flooding Description: Set or show the IPMC unregistered addresses flooding operation. Syntax: IPMC Flooding [mld|igmp] [enable|disable] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP enable : Enable IPMC flooding disable: Disable IPMC flooding...
Page 528: Ipmc Proxy
User’s Manual of XGSW-28040 Default Setting: disable Example: Enable IGMP Leave Proxy XGSW-28040:/>ipmc leave proxy igmp enable IPMC Proxy Description: Set or show the mode of IPMC Proxy. Syntax: IPMC Proxy [mld|igmp] [enable|disable] Parameters: mld|igmp: mld : IPMC for IPv6 MLD...
Page 529: Ipmc State
: Enable MLD snooping disable: Disable MLD snooping Default Setting: disable Example: Enable IGMP snooping state for VLAN 1 XGSW-28040:/>ipmc state igmp 1 enable IPMC Querier Description: Set or show the IPMC snooping querier mode for VLAN. Syntax: IPMC Querier [mld|igmp] [<vid>] [enable|disable]...
Page 530: Ipmc Compatibility
: Enable MLD querier disable: Disable MLD querier Default Setting: enable Example: Enable IGMP querier for VLAN 1 XGSW-28040:/>ipmc querier igmp 1 enable IPMC Compatibility Description: Set or show the IPMC Compatibility. Syntax: IPMC Compatibility [mld|igmp] [<vid>] [auto|v1|v2|v3] Parameters:...
Page 531: Ipmc Fastleave
Disable MLD fast leave (default: Show IPMC fast leave mode) Default Setting: disable Example: Enable IGMP fast leave for all port XGSW-28040:/>ipmc fastleave igmp 1-10 enable IPMC Throttling Description: Set or show the IPMC port throttling status. Syntax: IPMC Throttling [mld|igmp] [<port_list>] [limit_group_number]...
Page 532: Ipmc Filtering
(default: Show IPMC Port Throttling) Default Setting: Unlimited Example: Set the max. learn 10 groups for ICMP port throttling XGSW-28040:/>ipmc throttling igmp 1-10 10 IPMC Filtering Description: Set or show the IPMC port group filtering list. Syntax: IPMC Filtering [mld|igmp] [<port_list>] [add|del] [group_addr]...
Page 533: Ipmc Status
User’s Manual of XGSW-28040 igmp: IPMC for IPv4 IGMP <port_list>: Port list or 'all', default: All ports auto : Enable IGMP router mode auto fix : Enable IGMP router mode fix none : Enable IGMP router mode none IPMC Status Description: Show IPMC operational status, accordingly.
Page 534: Ipmc Version
User’s Manual of XGSW-28040 Example: Show VLAN 1 IPMC group addresses, accordingly. XGSW-28040:/>ipmc groups igmp 1 IPMC Version Description: Show IPMC Versions. Syntax: IPMC Version [mld|igmp] [<vid>] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs <vid>...
Page 535: Ipmc Parameter Rv
User’s Manual of XGSW-28040 IPMC Parameter RV Description: Set or show the IPMC Robustness Variable. Syntax: IPMC Parameter RV [mld|igmp] [<vid>] [ipmc_param_rv] Parameters: mld|igmp mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs <vid>...
Page 536: Ipmc Parameter Qri
User’s Manual of XGSW-28040 IPMC Parameter QRI Description: Set or show the IPMC Query Response Interval. Syntax: IPMC Parameter QRI [mld|igmp] [<vid>] [ipmc_param_qri] Parameters: mld|igmp mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs <vid>...
Page 537: Ipmc Parameter Uri
User’s Manual of XGSW-28040 IPMC Parameter URI Description: Set or show the IPMC Unsolicited Report Interval. Syntax: IPMC Parameter URI [mld|igmp] [<vid>] [ipmc_param_uri] Parameters: mld|igmp mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs <vid>...
Page 538: Sflow Flowsampler
User’s Manual of XGSW-28040 : Release the current owner of the receiver. release The owner can either be "<none>" if the receiver is not currently owned by anyone, it can be "<Configured through local management>" if it's currently set up by CLI or Web, or it can be anything else if is set-up through SNMP.
Page 539: Sflow Statistics Receiver
User’s Manual of XGSW-28040 sFlow CounterPoller [<port_list>] [<interval>] Parameters: <port_list>: Port list or 'all'. Default: All ports. <interval> : Polling interval in range 0 - 3600. Set to 0 to release this port's resources. sFlow Statistics Receiver Description: Get or clear receiver statistics.
Page 540: Vlan Control List Command
: VLAN ID (1-4095) <vid> <port_list>: Port list or 'all', default: All ports Example: Add 00-11-22-33-44-55-66 in VLAN 20 for all port XGSW-28040:/>vcl macvlan add 00-11-22-33-44-55-66 20 1-10 VCL MAC-based VLAN Delete Description: Delete VCL MAC-based VLAN entry. Syntax: VCL Macvlan Del <mac_addr>...
Page 541: Vcl Stasus
User’s Manual of XGSW-28040 Example: Delete 00-11-22-33-44-55-66 in MAC-based VLAN list XGSW-28040:/> vcl macvlan del 00-11-22-33-44-55-66 VCL Stasus Description: Show VCL MAC-based VLAN users configuration. Syntax: VCL Status [combined|static|nas|all] Parameters: combined|static|nas|all: VCL User VCL Protocol-based VLAN Add Ethernet II Description: Add VCL protocol-based VLAN Ethernet-II protocol to group mapping.
Page 542: Vcl Protocol-Based Vlan Add Llc
User’s Manual of XGSW-28040 : PID value (0x0-0xFFFF). If OUI is 00-00-00, valid range of PID is from 0x0600-0xFFFF. <pid> : Protocol group ID <group_id> VCL Protocol-based VLAN Add LLC Description: Add VCL protocol-based VLAN LLC protocol to group mapping.
Page 543: Vcl Protocol-Based Vlan Delete Llc
User’s Manual of XGSW-28040 : PID value (0x0-0xFFFF). If OUI is 00-00-00, valid range of PID is from 0x0600-0xFFFF. <pid> VCL Protocol-based VLAN Delete LLC Description: Delete VCL protocol-based VLAN LLC protocol to group mapping. Syntax: VCL ProtoVlan Protocol Delete Llc <dsap> <ssap>...
Page 544: Vcl Protocol-Based Vlan Configuration
User’s Manual of XGSW-28040 <group_id> : Protocol group ID VCL Protocol-based VLAN Configuration Description: Show VCL protocol-based VLAN entries. Syntax: VCL ProtoVlan Conf VCL IP-based VLAN Configuration Description: Show VCL IP Subnet-based VLAN configuration. Syntax: VCL IPVlan Configuration [<vce_id>] Parameters: <vce_id>: Unique VCE ID for each VCL entry...
Page 545: Vcl Ip-Based Vlan Delete
User’s Manual of XGSW-28040 VCL IP-based VLAN Delete Description: Delete VCL IP Subnet-based VLAN entry. Syntax: VCL IPVlan Delete <vce_id> Parameters: <vce_id>: Unique VCE ID for each VCL entry...
Page 546: Smtp Command
User’s Manual of XGSW-28040 6.24 SMTP Command SMTP Configuration Description: Show SMTP configure. Syntax: SMTP Configuration SMTP Mode Description: Enable or disable SMTP configure. Syntax: SMTP Mode [enable|disable] Parameters: : Enable SMTP mode enable : Disable SMTP mode disable (default: Show SMTP mode)
Page 547: Smtp Auth
User’s Manual of XGSW-28040 SMTP Auth Description: Enable or disable SMTP authentication configure. Syntax: SMTP Auth [enable|disable] Parameters: : Enable SMTP authentication enable : Disable SMTP authentication disable (default: Show SMTP authentication) SMTP Auth_user Description: Set or show SMTP authentication user name configure.
Page 548: Smtp Mail From
User’s Manual of XGSW-28040 SMTP Mail From Description: Set or show SMTP E-mail from configure. Syntax: SMTP Mailfrom [<mailfrom_text>] Parameters: <mailfrom_text>: SMTP E-mail from address SMTP Mail Subject Description: Set or show SMTP E-mail subject configure. Syntax: SMTP Mailsubject [<mailsubject_text>] Parameters: <mailsubject_text>: SMTP E-mail subject...
Page 549 User’s Manual of XGSW-28040 Syntax: SMTP Mailto2 [<mailto2_text>] Parameters: <mailto1_text>: SMTP E-mail 2 to address...
Page 550: Switch Operation
User’s Manual of XGSW-28040 7. SWITCH OPERATION 7.1 Address Table The Switch is implemented with an address table. This address table composed of many entries. Each entry is used to store the address information of some node in network, including MAC address, port no, etc. This in-formation comes from the learning process of Ethernet Switch.
Page 551: Auto-Negotiation
User’s Manual of XGSW-28040 7.5 Auto-Negotiation The STP ports on the Switch have built-in "Auto-negotiation". This technology automatically sets the best possible bandwidth when a connection is established with another network device (usually at Power On or Reset). This is done by detect the modes and speeds at the second of both device is connected and capable of, both 10Base-T and 100Base-TX devices can connect with the port in either Half- or Full-Duplex mode.
Page 552: Trouble Shooting
User’s Manual of XGSW-28040 8. TROUBLE SHOOTING This chapter contains information to help you solve problems. If the Ethernet Switch is not functioning properly, make sure the Ethernet Switch was set up according to instructions in this manual. ■ The Link LED is not lit...
Page 553 User’s Manual of XGSW-28040 If that device works, refer to the next step. If that device does not work, check the AC power  While IP Address be changed or forgotten admin password – To reset the IP address to the default IP Address “192.168.0.100” or reset the password to default value. Press the hardware reset button at the front panel about 10 seconds.
Page 554: Appendex A
User’s Manual of XGSW-28040 APPENDEX A A.1 Switch's RJ-45 Pin Assignments 1000Mbps, 1000Base T Contact MDI-X BI_DA+ BI_DB+ BI_DA- BI_DB- BI_DB+ BI_DA+ BI_DC+ BI_DD+ BI_DC- BI_DD- BI_DB- BI_DA- BI_DD+ BI_DC+ BI_DD- BI_DC- Implicit implementation of the crossover function within a twisted-pair cable, or at a wiring panel, while not expressly forbidden, is beyond the scope of this standard.
Page 555 User’s Manual of XGSW-28040 The standard cable, RJ-45 pin assignment The standard RJ-45 receptacle/connector There are 8 wires on a standard UTP/STP cable and each wire is color-coded. The following shows the pin allocation and color of straight cable and crossover cable connection:...
Page 556: Appendex B : Glossary
User’s Manual of XGSW-28040 APPENDEX B : GLOSSARY ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application.
Page 557 User’s Manual of XGSW-28040 ranging from 1-1024K packets per seconds. Under "Ports" and "Access Control List" web-pages you can assign a Rate Limiter ID to the ACE(s) or ingress port(s). AES is an acronym for Advanced Encryption Standard. The encryption key protocol is applied in 802.1i standard to improve WLAN security.
Page 558 User’s Manual of XGSW-28040 CC is an acronym for Continuity Check. It is a MEP functionality that is able to detect loss of continuity in a network by transmitting CCM frames to a peer MEP. CCM is an acronym for Continuity Check Message. It is a OAM frame transmitted from a MEP to it's peer MEP and used to implement CC functionality.
Page 559 User’s Manual of XGSW-28040 Dynamic addressing simplifies network administration because the software keeps track of IP addresses rather than requiring an administrator to manage the task. This means that a new computer can be added to a network without the hassle of manually assigning it a unique IP address.
Page 560 User’s Manual of XGSW-28040 DSCP DSCP is an acronym for Differentiated Services Code Point. It is a field in the header of IP packets for packet classification purposes. EEE is an abbreviation for Energy Efficient Ethernet defined in IEEE 802.3az.
Page 561 User’s Manual of XGSW-28040 connection to a particular port on a remote host (port 80 by default). An HTTP server listening on that port waits for the client to send a request message. HTTPS HTTPS is an acronym for Hypertext Transfer Protocol over Secure Socket Layer. It is used to indicate a secure HTTP connection.
Page 562 User’s Manual of XGSW-28040 from a mail server. IMAP is the protocol that IMAP clients use to communicate with the servers, and SMTP is the protocol used to transport mail to an IMAP server. The current version of the Internet Message Access Protocol is IMAP4. It is similar to Post Office Protocol version 3 (POP3), but offers additional and more complex features.
Page 563 User’s Manual of XGSW-28040 LLDP is an IEEE 802.1ab standard protocol. The Link Layer Discovery Protocol(LLDP) specified in this standard allows stations attached to an IEEE 802 LAN to advertise, to other stations attached to the same IEEE 802 LAN, the major capabilities provided by the system...
Page 564 User’s Manual of XGSW-28040 For debugging network problems or monitoring network traffic, the switch system can be configured to mirror frames from multiple ports to a mirror port. (In this context, mirroring a frame is the same as copying the frame.) Both incoming (source) and outgoing (destination) frames can be mirrored to the mirror port.
Page 565 User’s Manual of XGSW-28040 NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks of computer systems. NTP uses UDP (datagrams) as transport layer. OAM is an acronym for Operation Administration and Maintenance. It is a protocol described in ITU-T Y.1731 used to implement carrier ethernet functionality. MEP functionality like CC and RDI is based on this.
Page 566 User’s Manual of XGSW-28040 PING ping is a program that sends a series of packets over a network or the Internet to a specific computer in order to generate a response from that computer. The other computer responds with an acknowledgment that it received the packets.
Page 567 User’s Manual of XGSW-28040 QCE is an acronym for QoS Control Entry. It describes QoS class associated with a particular QCE ID. There are six QCE frame types: Ethernet Type, VLAN, UDP/TCP Port, DSCP, TOS, and Tag Priority. Frames can be classified by one of 4 different QoS classes: "Low", "Normal", "Medium", and "High"...
Page 568 User’s Manual of XGSW-28040 RADIUS is an acronym for Remote Authentication Dial In User Service. It is a networking protocol that provides centralized access, authorization and accounting management for people or computers to connect and use a network service. RDI is an acronym for Remote Defect Indication. It is a OAM functionallity that is used by a MEP to indicate defect...
Page 569 User’s Manual of XGSW-28040 SNAP The SubNetwork Access Protocol (SNAP) is a mechanism for multiplexing, on networks using IEEE 802.2 LLC, more protocols than can be distinguished by the 8-bit 802.2 Service Access Point (SAP) fields. SNAP supports identifying protocols by Ethernet type field values; it also supports vendor-private protocol identifier.
Page 570 User’s Manual of XGSW-28040 TACACS+ TACACS+ is an acronym for Terminal Acess Controller Access Control System Plus. It is a networking protocol which provides access control for routers, network access servers and other networked computing devices via one or more centralized servers.
Page 571 User’s Manual of XGSW-28040 determine the priority from the 6-bit ToS field in the IP header. The most significant 6 bits of the ToS field are fully decoded into 64 possibilities, and the singular code that results is compared against the corresponding bit in the IPv4 ToS priority control bit (0~63).
Page 572 User’s Manual of XGSW-28040 Virtual LAN. A method to restrict communication between switch ports. VLANs can be used for the following applications: VLAN unaware switching: This is the default configuration. All ports are VLAN unaware with Port VLAN ID 1 and members of VLAN 1.
Page 573 User’s Manual of XGSW-28040 necessarily with first generation wireless access points. WPA2 implements the full standard, but will not work with some older network cards (Wikipedia). WPA-PSK WPA-PSK is an acronym for Wi-Fi Protected Access - Pre Shared Key. WPA was designed to enhance the security of wireless networks.
Page 574: Ec Declaration Of Conformity
: XGSW-28040 * Produced by: Manufacturer‘s Name : Planet Technology Corp. Manufacturer‘s Address : 10F., No.96, Minquan Rd., Xindian Dist., New Taipei City 231, Taiwan (R.O.C.). is herewith confirmed to comply with the requirements set out in the Council Directive on the Approximation of the Laws of the Member States relating to Electromagnetic Compatibility Directive on (2004/108/EC).