IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual TABLE OF CONTENTS I FS NS3601-24P/4S GE-DSSG-244 GE-DSSG-244-POE USER MANUAL ....1 T ABLE OF CONTENTS ....................1 I NTRODUCTION ......................7 P acket Contents ............................7 P roduct Description ..........................9 H ow to Use This Manual ......................... 11 P roduct Features.............................
Page 4
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual U sers Privilege Levels ........................49 N TP Configuration ..........................51 U PnP Configuration ..........................51 D HCP Relay............................53 D HCP Relay Statistics ........................55 C PU Load ............................56 S ystem Log ............................57 D etailed Log............................
Page 5
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual V LAN Membership Configuration ....................... 99 V LAN Membership Status for User Static..................100 V LAN Port Status for User Static...................... 101 P ort Isolation Configuration ......................102 P rivate VLAN Membership Configuration ..................105 V LAN setting example: ........................
Page 6
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual A CE Configuration ..........................164 A CL Ports Configuration ........................169 A CL Rate Limiter Configuration ......................171 U nderstanding IEEE 802.1X Port-Based Authentication..............173 A uthentication Configuration......................175 N etwork Access Server Configuration ....................176 N etwork Access Overview ........................
Page 7
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual N eighbor ............................236 P ort Statistics ............................ 237 N etwork Diagnostics..........................239 P ing ..............................239 I Pv6 Ping............................240 R emote IP Ping Test......................... 241 C able Diagnostics ..........................242 P ower over Ethernet (GE-DSSG-244-POE / NS3601-24P/4S) ............243 P ower over Ethernet Powered Device....................
Page 8
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Q uality of Service Command ....................... 363 M irror Command............................ 369 C onfiguration Command ........................370 F irmware Command..........................371 U PnP Command ............................ 371 M VR Command ............................372 V oice VLAN Command ......................... 375 S MTP Command ............................
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual INTRODUCTION The IFS Layer 2 Managed Gigabit Switch series NS3601-24P/4S, GE-DSSG-244, and GE-DSSG-244-POE are 24-port Gigabit Ethernet Switches with SFP fiber ports and robust layer 2 features. The description of these models is shown below:...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Product Description Cost-effective IPv6 Managed Gigabit Switch solution for SMB Nowadays, lots of electronic products or mobile devices can browse the Internet, which means the need of IP Address increases. However, the current IPv4 network infrastructure is not capable enough to provide IP Address to each single users/Clients. The situation forces the ISP to build up the IPv6 (Internet Protocol version 6) network infrastructure speedily.
Page 12
Efficient Management For efficient management, the series of Managed Switch is equipped with console, WEB and SNMP management interfaces. With its built-in Web-based management, it offers an easy-to-use, platform-independent management and configuration facility. The Managed Switch supports standard Simple Network Management Protocol (SNMP) and can be managed via any standard-based management software.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual How to Use This Manual This User Manual is structured as follows: Section 2, INSTALLATION The section explains the functions of the Switch and how to physically install the Managed Switch. Section 3, SWITCH MANAGEMENT The section contains the information about the software function of the Managed Switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Product Features Physical Port NS3601-24P/4S / GE-DSSG-244-POE 24-Port 10/100/1000Base-T Gigabit Ethernet RJ-45 with IEEE 802.3af PoE Injector 4 100/1000Base-X SFP slots, shared with Port-21 to Port-24 RS-232 DB9 console interface for Switch basic management and setup...
Page 15
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ■ DSCP remarking Multicast ■ Supports IGMP Snooping v1, v2 and v3 ■ Querier mode support ■ IGMP Snooping port filtering ■ Multicast VLAN Registration (MVR) support Security ■ IEEE 802.1x Port-Based / MAC-Based network access authentication ■...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Product Specification IFS Stackable Fiber Switch Product GE-DSSG-244 Hardware Specification 8 10/ 100/1000Base-T RJ-45 Auto-MDI/MDI-X ports, shared with Port-1~Port-8 Copper Ports 24 100/1000Base-X Dual Speed SFP interfaces SFP/mini-GBIC Slots 1 x RS-232 DB9 serial port (115200, 8, N, 1)
Page 17
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual IP-Based ACL / MAC-Based ACL Access Control List Up to 256 entries RFC-1213 MIB-II IF-MIB RFC-1493 Bridge MIB RFC-1643 Ethernet MIB RFC-2863 Interface MIB RFC-2665 Ether-Like MIB RFC-2737 Entity MIB SNMP MIBs RFC-2618 RADIUS Client MIB...
Page 18
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 6KV DC ESD Protection Power over Ethernet IEEE 802.3af PoE / PSE PoE Standard End-Span PoE Power Supply Type Per Port 48V DC. PoE Power Output Max. 15.4 watts 1/2(+), 3/6(-) Power Pin Assignment...
Page 19
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100Base-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol...
Switches. GE-DSSG-244 Front Panel Figure 2-1 GE-DSSG-244 front panel. IFS NS3601-24P/4S / GE-DSSG-244-POE Front Panel Figure 2-2 IFS NS3601-24P/4S / GE-DSSG-244-POE front panel. ■ Gigabit TP interface 10/100/1000Base-T Copper, RJ-45 Twist-Pair: Up to 100 meters. ■ Gigabit SFP slots 1000Base-SX/LX mini-GBIC slot, SFP (Small Factor Pluggable) transceiver module: From 550 meters (Multi-mode fiber), up to 10/30/5060//70 kilometers (Single-mode fiber).
Page 21
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ■ Reset button On the left hand side of the front panel, the reset button is designed for rebooting the Managed Switch without a power cycle. The following is the summary table of Reset button...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual LED Indications The front panel LEDs indicates instant status of port links, data activity and system power; helps monitor and troubleshoot when needed. Figure 2-3 & Figure 2-4 shows the LED indications of these Managed Switches.
Page 23
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Per 10/100/1000Base-T port / SFP interfaces Color Function Illuminates: To indicate the link through that port is successfully established with speed 1000Mbps. To indicate that the Switch is actively sending or receiving data over that port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ■ 10/100/1000Base-T interfaces (Shared Port-1~Port-8) Color Function illuminates: To indicate the link through that port is successfully established with speed 1000Mbps 1000 To indicate that the switch is actively sending or receiving data over that...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual NS3601-24P/4S / GE-DSSG-244-POE Rear Panel Figure 2-6 Rear panel of NS3601-24P/4SP and GE-DSSG-244-POE ■ AC Power Receptacle For compatibility with electric service in most areas of the world, the Managed Switch’s power supply automatically adjusts to line power in the range 100-240VAC and 50/60 Hz.
Page 26
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 2-7 Place the Managed Switch on the desktop Keep enough ventilation space between the Managed Switch and the surrounding objects. Step3: When choosing a location, please keep in mind the environmental restrictions discussed in Chapter 1, Section 5 Product Specification.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Supply power to the Managed Switch. Step5: Connect one end of the power cable to the Managed Switch. Connect the power plug of the power cable to a standard wall outlet. When the Managed Switch receives power, the Power LED should remain solid Green.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 2-8 Mounting IFS-24040 in a Rack Step6: Proceeds with the steps 4 and steps 5 of session 2.2.1 Desktop Installation to connect the network cabling and supply power to the Managed Switch.
Page 29
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 1000Base-SX/LX SFP transceiver: We recommend using IFS SFPs on the Managed Switch. If you insert a SFP transceiver that is not supported, the Managed Switch will not recognize it. Before connecting the other switches, workstation or Media Converter: Make sure both sides use the same SFP transceiver, for example: 1000Base-SX to 1000Base-SX, 1000Base-LX to 1000Base-LX.
IP address. And up to 384 Gigabit Ethernet ports can be managed by a stacking group and you can add ports and functionality as needed. You can add IFS NS3601-24P/4S and GE-DSSG-244 series switches as needed to support more network clients, knowing that your switching fabric will scale to meet increasing traffic demands.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 2-12 Ring Stack topology Connecting Stacking cable Before attempting to connect stacking ports, verify that you have the required stack cables. The following cables are used to connect stacked switches: • NS-CBL-50: 50cm, Short stack cable –used to connect adjacent IFS switches.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The stack port is for management and data packets to be transmitted between other IFS stackable switches, the stack ports can’t be configured with Layer 2 features via management interface. STEP-4: Power up the stack switches.
Page 33
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual It’s allow to build a stack of up to 16 IFS Switches. If there is the space limitation or power issue and you wish to stack all the switches in different racks, use long stack cables “NS-CBL-200” to connect two stacks.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SWITCH MANAGEMENT This chapter explains the methods that you can use to configure management access to the Managed Switch. It describes the types of management applications and the communication and management protocols that deliver data between your management device (workstation or personal computer) and the system.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Management Access Overview The Managed Switch gives you the flexibility to access and manage it using any or all of the following methods: An administration console Web browser interface An external SNMP-based network management application The administration console and Web browser interface support are embedded in the Managed Switch software and are available for immediate use.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 3-2 Terminal parameter settings You can change these settings, if desired, after you log on. This management method is often preferred because you can remain connected and monitor the system during system reboots. Also, certain error messages are sent to the serial port, regardless of the interface through which the associated action was initiated.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 3-4 Web main screen of Managed Switch SNMP-Based Network Management You can use an external SNMP-based application to configure and manage the Managed Switch, such as SNMPc Network Manager, HP Openview Network Node Management (NNM) or What’s Up Gold. This management method requires the SNMP agent on the switch and the SNMP Network Management Station to use the same community string.
Page 38
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual WEB CONFIGURATION This section introduces the configuration and functions of the Web-Based management. About Web-based Management The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer.
Page 40
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Logging on the switch Use Internet Explorer 7.0 or above Web browser. Enter the factory-default IP address to access the Web interface. The factory-default IP Address as following: http://192.168.0.100 When the following login screen appears, please enter the default username "admin" with password “admin” (or the username/password you have changed via console) to login the main screen of Managed Switch.
Page 41
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-1-3 Default main page Now, you can use the Web management interface to continue the switch management or manage the Managed Switch by Web interface. The Switch Menu on the left of the web page lets you access all the commands and statistics the Managed Switch provides.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Main Web Page The IFS Managed Switch provides a Web-based browser interface for configuring and managing it. This interface allows you to access the Managed Switch using the Web browser of your choice. This chapter describes how to use the Managed Switch’s Web browser interface to configure and manage it.
Page 43
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-1-5 IFS Managed Switch Main Functions Menu...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual System Use the System menu items to display and configure basic administrative details of the Managed Switch. Under System the following topics are provided to configure and view the system information: This section has the following items: The switch system information is provided here.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual System Information The System Info page provides information for the current device information. System Info page helps a switch administrator to identify the hardware MAC address, software version and system uptime. The screen is shown Figure 4-2-1.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Click to refresh the page; any changes made locally will be undone. IP Configuration The IP Configuration includes the IP Address, Subnet Mask and Gateway. The Configured column is used to view or change the IP configuration.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Click to undo any changes made locally and revert to previously saved values. IPv6 Configuration Configure the switch-managed IPv6 information on this page. The Configured column is used to view or change the IPv6 configuration. The Current column is used to show the active IPv6 configuration.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Users Configuration It is allowed to configure the Managed Switch to authenticate users logging into the system for management access using local or remote authentication methods, such as telnet and Web browser. This Managed Switch provides secure network management...
Page 49
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-5 Add / Edit User Configuration page screenshot The page includes the following fields: Object Description • Username The name identifying the user. • Password The password of the user. • Password (again) Confirm the password of the user.
Page 50
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-6 User Configuration page screenshot After change the default password, if you forget the password, press the “Reset” button in the front panel of the Managed Switch over 10 seconds and then release. The current settings...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Users Privilege Levels In addition to the local user account management as configured in “User Configuration”, the Managed Switch allowed to use a remote access authentication server based on RADIUS or TACACS+ protocols.
Page 52
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Group Name The name identifying the privilege group. In most cases, a privilege level group consists of a single module (e.g. LACP, RSTP or QoS), but a few of them contains more than one.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual NTP Configuration Configure NTP on this page. NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks of computer systems. NTP uses UDP (data grams) as transport layer. You can specify NTP Servers and set GMT Time zone. The NTP Configuration screen is...
Page 54
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-9 UPnP Configuration page screenshot The page includes the following fields: Object Description • Mode Indicates the UPnP operation mode. Possible modes are: Enabled: Enable UPnP mode operation. Disabled: Disable UPnP mode operation.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Figure 4-2-10 UPnP devices shows on Windows My Network Places DHCP Relay Configure DHCP Relay on this page. DHCP Relay is used to forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain.
Page 56
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-11 DHCP Relay Configuration page screenshot The page includes the following fields: Object Description • Relay Mode Indicates the DHCP relay mode operation. Possible modes are: Enabled: Enable DHCP relay mode operation. When enable DHCP relay mode operation, the agent forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual DHCP Relay Statistics This page provides statistics for DHCP relay. The DHCP Relay Statistics screen is shown Figure 4-2-12. Figure 4-2-12 DHCP Relay Statistics page screenshot The page includes the following fields: Server Statistics...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. : Click to refresh the page; any changes made locally will be undone. : Clear all statistics.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual System Log The switch system log information is provided here. The System Log screen is shown Figure 4-2-14. Figure 4-2-14 System Log page screenshot The page includes the following fields: Object Description • ID The ID (>= 1) of the system log entry.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Detailed Log The switch system detailed log information is provided here. The Detailed Log screen is shown Figure 4-2-15. Figure 4-2-15 Detailed Log page screenshot The page includs the following fields: Object Description •...
Page 61
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-16 Remote Syslog page screenshot The page includes the following fields: Object Description • Mode Indicates the remote syslog mode operation. Possible modes are: Enabled: Enable remote syslog mode operation. Disabled: Disable remote syslog mode operation.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SMTP Configure This page facilitates a SMTP Configure the switch. The SMTP Configure screen is shown Figure 4-2-17. Figure 4-2-17 SMTP Configuration page screenshot The page includes the following fields: Object Description • SMTP Mode Controls whether SMTP is enabled on this switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Send a test mail to mail server to check this account is available or not. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual TFTP Firmware Upgrade The Firmware Upgrade page provides the functions to allow a user to update the Managed Switch firmware from the TFTP server in the network. Before updating, make sure you have your TFTP server ready and the firmware image is on the TFTP server. The...
Page 65
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual and this section must include the correct platform ID and version. The global section is optional and includes configuration which is not related to specific switch ports. The switch section is optional and includes configuration which is related to specific switch ports.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-23 File save screen Configuration Upload This function allows backup and reload the current configuration of the Managed Switch to the local management station. The Configuration Upload screen is shown Figure 4-2-24.
Page 67
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-25 Windows file selection menu popup Select on the configuration file then click “ ”, the bottom of the browser shows the upload status. After the upload process is complete, the main screen displays “Transfer Completed”.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Factory Default You can reset the configuration of the stack switch on this page. Only the IP configuration is retained. The new configuration is available immediately, which means that no restart is necessary. The Factory Default screen is shown Figure 4-2-26.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual System Reboot The Reboot page enables the device to be rebooted from a remote location. Once the Reboot button is pressed, user have to re-login the WEB interface about 60 seconds later. The System Reboot screen is shown in Figure 4-2-27.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The system information is provides here. System Information Configure SNMP trap on this page. Trap Configuration Configure SNMPv3 communities table on this page. SNMPv3 Communities Configure SNMPv3 users table on this page. SNMPv3 Users Configure SNMPv3 groups table on this page.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SNMP System Information Configuration The switch system information is provided here. The System Information Configuration screen is shown Figure 4-3-2. Figure 4-3-2 System Information Configuration page screenshot The page includes the following fields:...
Page 72
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-3-3 SNMP Trap Configuration page screenshot The page includes the following fields: Object Description • Indicates the SNMP trap mode operation. Possible modes are: Trap Mode Enabled: Enable SNMP trap mode operation.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. SNMPv3 Configuration SNMPv3 Communities Configuration Configure SNMPv3 communities table on this page. The entry index key is Community. The SNMPv3 Communities Configuration...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SNMPv3 Users Configuration Configure SNMPv3 users table on this page. The entry index key are Engine ID and User Name. The SNMPv3 Users Configuration screen is shown Figure 4-3-5. Figure 4-3-5 SNMPv3 Users Configuration page screenshot...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SNMPv3 Groups Configuration Configure SNMPv3 groups table on this page. The entry index keys are Security Model and Security Name. The SNMPv3 Groups Configuration screen is shown Figure 4-3-6. Figure 4-3-6 SNMPv3 Groups Configuration page screenshot...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Check to delete the entry. It will be deleted during the next save. Delete • A string identifying the view name that this entry should belong to. The allowed...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Auth, NoPriv: Authentication and none privacy. Auth, Priv: Authentication and privacy. • The name of the MIB view defining the MIB objects for which this request may Read View Name request the current values. The allowed string length is 1 to 32, and the allowed content is the ASCII characters from 33 to 126.
Page 78
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-4-1 Port Configuration page screenshot The page includes the following fields: Object Description • This is the logical port number for this row. Port • Description Indicates the per port description. •...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • When Auto Speed is selected for a port, this section indicates the flow control Flow Control capability that is advertised to the link partner. When a fixed-speed setting is selected, that is what is used.
Page 80
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-4-2 Port Statistics Overview page screenshot The displayed counters are: Object Description • The logical port for the settings contained in the same row. Port • The number of received and transmitted packets per port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Download the port statistics overview. : Click to refresh the page immediately. : Clears the counters for all ports. : Print out the port statistics overview. Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Receive and Transmit Size Counters The number of received and transmitted (good and bad) packets split into categories based on their respective frame sizes. Receive and Transmit Queue Counters The number of received and transmitted packets per input and output queue.
Page 83
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-4-4 SFP Module Information for Switch page screenshot The page includes the following fields: Object Description • Type Display the type of current SFP module, the possible types are: 1000Base-SX 1000Base-LX 100Base-FX •...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Mirroring Configuration Configure port Mirroring on this page. This function provide to monitoring network traffic that forwards a copy of each incoming or outgoing packet from one port of a network Switch to another port where the packet can be studied. It enables the manager to keep close track of switch performance and alter it if necessary.
Page 85
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Mirror Port Configuration The Port Mirror Configuration screen is shown Figure 4-4-6. Figure 4-4-6 Port Mirror Configuration page screenshot...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Port to mirror to Frames from ports that have either source or destination mirroring enabled are mirrored to this port. Disabled option disables mirroring.
Page 87
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-5-1 Link Aggregation The Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Partner Systems that require high speed redundant links. Link aggregation lets you group up to eight consecutive ports into a single dedicated connection.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Destination MAC • Source and destination IPv4 address. • Source and destination TCP/UDP ports for IPv4 packets Normally, all 5 contributions to the aggregation code should be enabled to obtain the best traffic distribution among the link aggregation member ports.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-5-3 Aggregation Group Configuration page screenshot The page includes the following fields: .Object Description • Indicates the aggregation group type. This field is only valid for stackable Locality switches. Global: The group members may reside on different units in the stack. The device supports two 8-port global aggregations.
Page 90
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-5-4 LACP Port Configuration page screenshot The page includes the following fields: Object Description • The switch port number. Port • Controls whether LACP is enabled on this switch port. LACP will form an LACP Enabled aggregation when 2 or more ports are connected to the same partner.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual same Key value can participate in the same aggregation group, while ports with different keys cannot. The default setting is “Auto” • The Role shows the LACP activity status. The Active will transmit LACP packets...
Page 92
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-5-6 LACP Port Status page screenshot The page includes the following fields: Object Description • The switch port number. Port • 'Yes' means that LACP is enabled and the port link is up. 'No' means that LACP is LACP not enabled or that the port link is down.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual LACP Port Statistics This page provides an overview for LACP statistics for all ports. The LACP statistics screen is shown Figure 4-5-7. Figure 4-5-7 LACP Port statistics page screenshot The page includes the following fields:...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN VLAN Overview A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. VLAN can be used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN allow a network to be segmented in order to reduce the size of broadcast domains. All packets entering a VLAN will only be forwarded to the stations (over IEEE 802.1Q enabled switches) that are members of that VLAN, and this includes broadcast, multicast and unicast packets from unknown sources.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLAN to span network devices (and indeed, the entire network – if all network devices are 802.1Q compliant).
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-6-1 VLAN Basic Information page screenshot The page includes the following fields: Object Description • Mode Display the current VLAN mode used by this Managed Switch Port-Based IEEE 802.1Q VLAN • Maximum VLAN ID Maximum VLAN ID recognized by this Managed Switch.
Page 98
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Frame Income Income Frame is tagged Income Frame is untagged Frame Leave Leave port is tagged Frame remains tagged Tag is inserted Leave port is untagged Tag is removed Frame remain untagged Table 4-6-1 Ingress/Egress port with VLAN VID Tag/Untag table ■...
Page 99
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN Port Configuration The VLAN Port Configuration screen is shown Figure 4-6-2. Figure 4-6-2 VLAN Port Configuration page screenshot...
Page 100
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • This is the logical port number for this row. Port • PVID Allow assign PVID for selected port. The range for the PVID is 1-4094.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN Membership Configuration Adding Static Members to VLANs (VLAN Index) Use the VLAN Static Table to configure port members for the selected VLAN index. The VLAN membership configuration for the selected stack switch / unit switch can be monitored and modified here. Up to 255 VLANs are supported. This page allows for adding and deleting VLANs as well as adding and deleting port members of each VLAN.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Updates the table starting from the first entry in the VLAN Table, i.e. the entry with the lowest VLAN ID. : Updates the table, starting with the entry after the last entry currently displayed.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN Port Status for User Static This page provides VLAN Port Staus. The VLAN Port Status for User Static screen is shown Figure 4-6-5. Figure 4-6-5 VLAN Port Status for User Static page screenshot...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • UVID Shows UVID (untagged VLAN ID). Port's UVID determines the packet's behavior at the egress side. • Conflicts Shows status of Conflicts whether exists or Not. When a Volatile VLAN User requests to set VLAN membership or VLAN port configuration, the following conflicts can occur: Functional Conflicts between feature.
Page 105
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual For private VLANs to be applied, the switch must first be configured for standard VLAN operation When this is in place, one or more of the configured VLANs can be configured as private VLANs. Ports in a private VLAN fall into one of these two groups: Promiscuous ports —...
Page 106
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-6-6 Port Isolation Configuration page screenshot The page includes the following fields: Object Description • Port The switch interface. • PVLAN Port Type Displays private VLAN port types. - Isolated: A single stand-alone VLAN that contains one promiscuous port and one or more isolated (or host) ports.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Private VLAN Membership Configuration In this menu the Private VLAN membership configurations for the switch can be monitored and modified here, private VLANs can be added or deleted, and port members of each Private VLAN can be added or removed here.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN setting example: - Separate VLAN - 802.1Q VLAN Trunk - Port Isolate Two separate 802.1Q VLAN The diagram shows how the Managed Switch handle Tagged and Untagged traffic flow for two VLANs. VLAN Group 2 and VLAN Group 3 are separated VLAN.
Page 109
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Untagged packet entering VLAN 3 While [PC-4] transmit an untagged packet enters Port-4, the switch will tag it with a VLAN Tag=3. [PC-5] and [PC-6] will received the packet through Port-5 and Port-6.
Page 110
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The Per Port VLAN configuration in Figure 4-6-10. Figure 4-6-10 Port 1-Port 6 VLAN Configuration...
Page 111
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN Trunking between two 802.1Q aware switch The most cases are used for “Uplink” to other switches. VLANs are separated at different switches, but they need to access with other switches within the same VLAN group. The screen is shown Figure 4-6-11.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Assign the VLAN Trunk Port to be the member of each VLAN – which wants to be aggregated. At this sample, add Port-8 to be VLAN 2 and VLAN 3 member port. The screen is shown Figure 4-6-12.
Page 113
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Setup steps Assign Port Mode Set Port-1~Port-4 in Isolate port. Set Port-5 and Port-6 in Promiscuous port. The screen is shown Figure 4-6-15.
Page 114
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-6-15 The configuration of Isolate and Promiscuous port Assign VLAN Member : VLAN 1 : Port-1,Port-2 ,Port-5 and Port-6 VLAN 2 : Port-3~Port-6. The screen is shown Figure 4-6-16. Figure 4-6-16 Private VLAN port setting...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Spanning Tree Protocol Theory The Spanning Tree protocol can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices in your network to ensure that only one route exists between any two stations on the network, and provide backup links which automatically take over when a primary link goes down.
Page 116
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual network topology to stabilize after a topology change. In addition, STP specifies a series of states a port must transition through to further ensure that a stable network topology is created after a topology change.
Page 117
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 2. STP Parameters STP Operation Levels The Switch allows for two levels of operation: the switch level and the port level. The switch level forms a spanning tree consisting of links between one or more switches. The port level constructs a spanning tree consisting of groups of one or more ports. The STP operates in much the same way for both levels.
Page 118
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The Hello Time cannot be longer than the Max. Age. Otherwise, a configuration error will occur. Max. Age – The Max Age can be from 6 to 40 seconds. At the end of the Max Age, if a BPDU has still not been received from the Root Bridge, your Switch will start sending its own BPDU to all other Switches for permission to become the Root Bridge.
Page 119
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-7-5 Before Applying the STA Rules In this example, only the default STP values are used. Figure 4-7-6 After Applying the STA Rules The switch with the lowest Bridge ID (switch C) was elected the root bridge, and the ports were selected to give a high port cost...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual between switches B and C. The two (optional) Gigabit ports (default port cost = 20,000) on switch A are connected to one (optional) Gigabit port on both switch B and C. The redundant link between switch B and C is deliberately chosen as a 100 Mbps Fast Ethernet link (default port cost = 200,000).
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • The maximum age of the information transmitted by the Bridge when it is the Max Age Root Bridge. Valid values are in the range 6 to 200 seconds. -Default: -Minimum: The higher of 6 or [2 x (Hello Time + 1)].
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Object Description • The Bridge Instance. This is also a link to the STP Detailed Bridge Status. MSTI • The Bridge ID of this Bridge instance. Bridge ID • The Bridge ID of the currently elected root bridge.
Page 123
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-7-9 STP CIST Port Configuration page screenshot The page includes the following fields: Object Description • The switch port number of the logical STP port. Port • Controls whether RSTP is enabled on this switch port.
Page 124
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Controls the path cost incurred by the port. The Auto setting will set the path cost Path Cost as appropriate by the physical link speed, using the 802.1D recommended values. Using the Specific setting, a user-defined value can be entered. The path cost is used when establishing the active topology of the network.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Type Link Type IEEE 802.1D-1998 IEEE 802.1w-2001 Half Duplex 2,000,000 Ethernet Full Duplex 1,999,999 Trunk 1,000,000 Half Duplex 200,000 Fast Ethernet Full Duplex 100,000 Trunk 50,000 Full Duplex 10,000 Gigabit Ethernet Trunk...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. MSTI Configuration This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Configuration Revision The revision of the MSTI configuration named above. This must be an integer between 0 and 65535. MSTI Mapping Object Description • MSTI The bridge instance. The CIST is not available for explicit mapping, as it will receive the VLANs not explicitly mapped.
Page 128
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-7-13 MST1 MSTI Port Configuration page screenshot...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: MSTx MSTI Port Configuration Object Description • Port The switch port number of the corresponding STP CIST (and MSTI) port. • Path Cost Controls the path cost incurred by the port. The Auto setting will set the path cost as appropriate by the physical link speed, using the 802.1D recommended...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • The switch port number of the logical STP port. Port • The current STP port role of the ICST port. The port role can be one of...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • The switch port number of the logical RSTP port. Port • The number of RSTP Configuration BPDU's received/transmitted on the port. RSTP • The number of legacy STP Configuration BPDU's received/transmitted on the port.
Page 132
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-1 Multicast Service...
Page 133
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-2 Multicast flooding Figure 4-8-3 IGMP Snooping multicast stream control IGMP Versions 1 and 2 Multicast groups allow members to join or leave at any time. IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group.
Page 134
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual following outlines what is communicated between a multicast router and a multicast group member using IGMP. A host sends an IGMP “report” to join a group A host will never send a report when it wants to leave a group (for version 1).
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual IGMP Snooping Configuration This page provides IGMP Snooping related configuration. Most of the settings are global, whereas the Router Port configuration is related to the currently selected stack unit, as reflected by the page header. The IGMP Snooping Configuration screen is shown Figure 4-8-5.
Page 136
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-6 IGMP Port Related Configuration page screenshot...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Specify which ports act as IGMP router ports. A router port is a port on the Router Port Ethernet switch that leads towards the Layer 3 multicast device or IGMP querier.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-7 IGMP Snooping VLAN Configuration page screenshot The page includes the following fields: Object Description • The VLAN ID of the entry. VLAN ID • IGMP Snooping Enable Enable the per-VLAN IGMP Snooping. Only up to 64 VLANs can be selected.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-8 IGMP Snooping Port Group Filtering Configuration page screenshot The page includes the following fields: Object Description • Check to delete the entry. It will be deleted during the next save. Delete •...
Page 140
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-9 IGMP Snooping Status page screenshot The page includes the following fields: Object Description • The VLAN ID of the entry. VLAN ID • The present IGMP groups. Max. are 128 groups for each VLAN.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Click to refresh the page immediately. : Clears all Statistics counters. Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. MVR Configuration In multicast VLAN networks, subscribers to a multicast group can exist in more than one VLAN. If the VLAN boundary restrictions in...
Page 142
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-10 MVR Configuration page screenshot...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • MVR Mode Enable/Disable the Global MVR. • VLAN ID Specify the Multicast VLAN ID. • Mode Enable MVR on the port. • Type Specify the MVR port type on the port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to refresh the page immediately. : Clears all Statistics counters. Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. Quality of Service Understand QOS Quality of Service (QoS) is an advanced traffic prioritization feature that allows you to establish control over network traffic.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-1 Welcome to the QCL Configuration Wizard page screenshot The page includes the following fields: Object Description • Group ports into several types according to different QCL policies. Set up Port Policies •...
Page 146
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-2 Set up Policy Rules page screenshot The page includes the following fields: Object Description • Frames that hit this QCE are set to match this specific QCL. QCL ID • A row of radio buttons for each port is displayed for each QCL ID. To include a Port Members port in a QCL member, click the radio button.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to start the wizard again. : Click to get more information. Set up Typical Network Application Rules Set up the specific QCL for different typical network application quality control. STEP-1...
Page 148
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Indicates the common games that apply to the specific QCE. Games • Indicates the user definition that applies to the specific QCE. The user definitions User Definition are: Ethernet Type: Specify the Ethernet Type filter for this QCE. The allowed range is 0x600 to 0xFFFF.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to cancel the wizard. : Click to go back to the previous wizard step. : Click to continue the wizard. Set up ToS Precedence Mapping Set up the traffic class mapping to the precedence part of ToS (3 bits) when receiving IPv4/IPv6 packets. The Set up ToS...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Set up VLAN Tag Priority Mapping Set up the traffic class mapping to the User Priority value (3 bits) when receiving VLAN tagged packets. The Set up VLAN Tag Priority Mapping screen is shown Figure 4-9-6.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual QoS Control List Configuration This page lists the QCEs for a given QCL. Frames can be classified by 4 different QoS classes: Low, Normal, Medium, and High. The classification is controlled by a QoS assigned to each port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN ID: The field shows the VLAN ID. TCP/UDP Port: The field shows the TCP/UDP port range. DSCP: The field shows the IPv4/IPv6 DSCP value. • The QoS class associated with the QCE.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual number. The port range allowed is from 0 to 65535. DSCP: The allowed range is 0 to 63. ToS or Tag Priority do not have type value settings. • Select a traffic class of Low, Normal, Medium, or High to apply to the QCE.
Page 154
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-9 Port QoS Configuration page screenshot The page includes the following fields: Object Description • Number of Classes Configure the number of traffic classes as "1", "2", or "4". The default value is "4".
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Configure the default QoS class for the port, that is, the QoS class for frames not Default Class matching any of the QCEs in the QCL. • Select which QCL to use for the port.
Page 156
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-10 Rate Limit Configuration page screenshot The page includes the following fields: Object Description • The logical port for the settings contained in the same row. Port • Enable or disable the port policer. The default value is "Disabled".
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Enable or disable the port shaper. The default value is "Disabled". Shaper Enabled • Shaper Rate Configure the rate for the port shaper. The default value is "500". This value is restricted to 500-1000000 when the "Policer Unit" is "kbps", and it is restricted to 1-1000 when the "Policer Unit"...
Page 158
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-12 QoS Statistics page screenshot The page includes the following fields: Object Description • The logical port for the settings contained in the same row. Port • There are 4 QoS queues per port with strict or weighted queuing scheduling. This Low Queue is the lowest priority queue.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Clears the counters for all ports. Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. DSCP Remarking This page allows you to configure DSCP remarking related settings for each port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • The logical port for the settings contained in the same row. Port • If the QoS remarking mode is set to enabled, it should be with this DSCP DSCP Remarking remarking/correction function according to RFC2474 on this port.
Page 161
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-14 Voice VLAN Configuration page screenshot...
Page 162
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Mode Indicates the Voice VLAN mode operation. We must disable MSTP feature before we enable Voice VLAN. It can avoid the conflict of ingress filter. Possible modes are: Enabled: Enable Voice VLAN mode operation.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Voice VLAN OUI Table Configure VOICE VLAN OUI table on this page. The maximum entry number is 16. Modify OUI table will restart auto detect OUI process. The Voice VLAN OUI Table screen is shown Figure 4-9-15.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Access Control List Configuration This page shows the Access Control List (ACL), which is made up of the ACEs defined for this Managed Switch. Each row describes the ACE that is defined. The maximum number of ACEs is 128.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Moves the ACE down the list. : Deletes the ACE. : The lowest plus sign adds a new entry at the bottom of the ACE listings. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs at regular intervals.
Page 167
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Select the frame type for this ACE. Frame Type Any: Any frame can match this ACE. Ethernet Type: Only Ethernet Type frames can match this ACE. ARP: Only ARP frames can match this ACE.
Page 168
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ARP Parameters The ARP parameters can be configured when Frame Type "ARP" is selected. Object Description • Specify the available ARP/RARP opcode (OP) flag for this ACE. ARP/RARP Any: No ARP/RARP OP flag is specified. (OP is "don't-care".) ARP: Frame must have ARP/RARP opcode set to ARP.
Page 169
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 1: ARP/RARP frames where the PRO is equal to IP (0x800) must match this entry. Any: Any value is allowed ("don't-care"). IP Parameters The IP parameters can be configured when Frame Type "IPv4" is selected.
Page 170
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ICMP Parameters Object Description • Specify the ICMP filter for this ACE. ICMP Type Filter Any: No ICMP filter is specified (ICMP filter status is "don't-care"). Specific: If you want to filter a specific ICMP filter with this ACE, you can enter a specific ICMP value.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • TCP PSH Specify the TCP "Push Function" (PSH) value for this ACE. 0: TCP frames where the PSH field is set must not be able to match this entry. 1: TCP frames where the PSH field is set must be able to match this entry.
Page 172
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-10-4 ACL Ports Configuration page screenshot The page includes the following fields: Object Description • The logical port for the settings contained in the same row. Port • Select the policy to apply to this port. The allowed values are 1 through 8. The Policy ID default value is 1.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Please note that the System Log memory size and logging rate is limited. • Shutdown Specify the port shut down operation of this port. The allowed values are: Enabled: If a frame is received on the port, the port will be disabled.
Page 174
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.11 Authentication This section is to control the access of the Managed Switch, includes the user access and management control.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Understanding IEEE 802.1X Port-Based Authentication The IEEE 802.1X standard defines a client-server-based access control and authentication protocol that restricts unauthorized clients from connecting to a LAN through publicly accessible ports. The authentication server authenticates each client connected to a switch port before making available any services offered by the switch or the LAN.
Page 176
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual switch acts as an intermediary (proxy) between the client and the authentication server, requesting identity information from the client, verifying that information with the authentication server, and relaying a response to the client. The switch includes the RADIUS client, which is responsible for encapsulating and decapsulating the Extensible Authentication Protocol (EAP) frames and interacting with the authentication server.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual If a client that does not support 802.1X is connected to an unauthorized 802.1X port, the switch requests the client's identity. In this situation, the client does not respond to the request, the port remains in the unauthorized state, and the client is not granted access to the network.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Network Access Server Configuration This page allows you to configure the IEEE 802.1X and MAC-based authentication system and port settings. The IEEE 802.1X standard defines a port-based access control procedure that prevents unauthorized access to a network by requiring users to first submit credentials for authentication.
Page 179
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-11-4 Network Access Server Configuration page screenshot...
Page 180
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: System Configuration Object Description • Mode Indicates if NAS is globally enabled or disabled on the switch. If globally disabled, all ports are allowed forwarding of frames.
Page 181
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual QoS Class is enabled for that port. When unchecked, RADIUS-server assigned QoS Class is disabled for all ports. • RADIUS-Assigned RADIUS-assigned VLAN provides a means to centrally control the VLAN on which a successfully authenticated supplicant is placed on the switch. Incoming VLAN Enabled traffic will be classified to and switched on the RADIUS-assigned VLAN.
Page 182
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual authenticator, and the RADIUS server is the authentication server. The authenticator acts as the man-in-the-middle, forwarding requests and responses between the supplicant and the authentication server. Frames sent between the supplicant and the switch are special 802.1X frames, known as EAPOL (EAP Over LANs) frames.
Page 183
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual supplicant, since that would cause all supplicants attached to the port to reply to requests sent from the switch. Instead, the switch uses the supplicant's MAC address, which is obtained from the first EAPOL Start or EAPOL Response Identity frame sent by the supplicant.
Page 184
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • RADIUS-Assigned - When RADIUS-Assigned VLAN is both globally enabled and enabled (checked) for a given port, the switch reacts to VLAN ID information VLAN Enabled carried in the RADIUS Access-Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated.
Page 185
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual an EAPOL Success frame when entering the Guest VLAN. While in the Guest VLAN, the switch monitors the link for EAPOL frames, and if one such frame is received, the switch immediately takes the port out of the Guest VLAN and starts authenticating the supplicant according to the port mode.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Network Access Overview This page provides an overview of the current NAS port states for the selected switch. The Network Access Overview screen is shown Figure 4-11-5. Figure 4-11-5 Network Access Overview page screenshot...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Port VLAN ID The VLAN ID that NAS has put the port in. The field is blank, if the Port VLAN ID is not overridden by NAS. If the VLAN ID is assigned by the RADIUS server, "(RADIUS-assigned)" is appended to the VLAN ID.
Page 188
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Counters Object Description • EAPOL Counters These supplicant frame counters are available for the following administrative states: Force Authorized Force Unauthorized Port-based 802.1X Single 802.1X Multi 802.1X Direction Name IEEE Name Description...
Page 189
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Backend Server These backend (RADIUS) frame counters are available for the following administrative Counters states: Port-based 802.1X Single 802.1X Multi 802.1X MAC-based Auth. Direction Name IEEE Name Description dot1xAuthBackendAcce Access 802.1X-based: ssChallenges...
Page 190
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual for a given port (left-most table) or client (right-most table). Possible retransmissions are not counted. • Last Supplicant/Client Information about the last supplicant/client that attempted to authenticate. This information is available for the following administrative states: Info Port-based 802.1X...
Page 191
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual unauthenticated. If an authentication fails for one or the other reason, the client will remain in the unauthenticated state for Hold Time seconds. • Last Authentication Shows the date and time of the last authentication of the client (successful as well as unsuccessful).
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Authentication Server Configuration This page allows you to configure the Authentication Servers. The Authentication Server Configuration screen is shown Figure 4-11-7. Figure 4-11-7 Authentication Server Configuration page screenshot...
Page 193
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Port State These setting are common for all of the Authentication Servers. Object Description • Timeout The Timeout, which can be set to a number between 3 and 3600 seconds, is the maximum time to wait for a reply from a server.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual TACACS+ Authentication Server Configuration The table has one row for each TACACS+ Authentication Server and a number of columns, which are: Object Description • # The TACACS+ Authentication Server number for which the configuration below applies.
Page 195
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual RADIUS Authentication Servers Object Description • # The RADIUS server number. Click to navigate to detailed statistics for this server. • IP Address The IP address and UDP port number (in <IP Address>:<UDP Port> notation) of this server.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual RADIUS Details This page provides detailed statistics for a particular RADIUS server. The RADIUS Authentication/Accounting for Server Overview screen is shown Figure 4-11-9. Figure 4-11-9 RADIUS Authentication/Accounting for Server Overview page screenshot The page includes the following fields: RADIUS Authentication Servers The statistics map follows details specified in RFC4668 - RADIUS Authentication Client MIB.
Page 197
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual server. radiusAuthClientExtA The number of RADIUS Access ccessChallenges Access-Challenge packets Challenges (valid or invalid) received from the server. radiusAuthClientExt The number of malformed Malformed MalformedAccessRe RADIUS Access-Response Access sponses packets received from the Responses server.
Page 198
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. • Other Info This section contains information about the state of the server and the latest round-trip time.
Page 199
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual radiusAccClientExt The number of RADIUS Packets Dropped PacketsDropped packets that were received from the server on the accounting port and dropped for some other reason. radiusAccClientExt The number of RADIUS Requests Requests packets sent to the server.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Windows Platform RADIUS Server Configuration Setup the RADIUS server and assign the client IP address to the Managed switch. In this case, field in the default IP Address of the Managed Switch with 192.168.0.100. And also make sure the shared secret key is as same as the one you had set at the Managed Switch’s 802.1x system configuration –...
Page 201
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-11-11 Windows Server – add new RADIUS client setting Assign the client IP address to the Managed switch. Figure 4-11-12 Windows Server RADIUS Server setting...
Page 202
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The shared secret key should be as same as the key configured on the Managed Switch. Figure 4-11-13 Windows Server RADIUS Server setting...
Page 203
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Configure ports attribute of 802.1X, the same as “802.1X Port Configuration”. Figure 4-11-14 802.1x Port Configuration Create user data. The establishment of the user data needs to be created on the Radius Server PC. For example, the...
Page 204
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Enter ” Active Directory Users and Computers”, create legal user data, the next, right-click a user what you created to enter properties, and what to be noticed: Figure 4-11-16 Add User Properties screen...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Set the Ports Authenticate Status to “Force Authorized” if the port is connected to the RADIUS server or the port is an uplink port that is connected to another switch. Or once the 802.1X stat to work, the switch might not be able to access the RADIUS server.
Page 206
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-11-19 Click “OK”. When client has associated with the Managed Switch, a user authentication notice appears in system tray. Click on the notice to continue. Figure 4-11-20 Windows client popup login request message...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Enter the user name, password and the logon domain that your account belongs. 10. Click “OK” to complete the validation process. Figure 4-11-21 Security This section is to control the access of the Managed Switch, and includes the user access and management control.
Page 208
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-12-1 Port Limit Control Configuration Overview page screenshot...
Page 209
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: System Configuration Object Description • Mode Indicates if Limit Control is globally enabled or disabled on the switchstack. If globally disabled, other modules may still use the underlying functionality, but limit checks and corresponding actions are disabled.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Trap & Shutdown: If Limit + 1 MAC addresses is seen on the port, both the "Trap" and the "Shutdown" actions described above will be taken. • State This column shows the current state of the port as seen from the Limit Control's point of view.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • SNMP Indicates the host can access the switch from SNMP interface that the host IP address matched the entry. • TELNET/SSH Indicates the host can access the switch from TELNET/SSH interface that the host IP address matched the entry.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual HTTPs Configure HTTPS on this page. The HTTPS Configuration screen is shown Figure 4-12-4. Figure 4-12-4 HTTPS Configuration screen page screenshot The page includes the following fields: Object Description • Mode Indicates the HTTPS mode operation. Possible modes are: Enabled: Enable HTTPS mode operation.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Port Security Status This page shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly from the user modules.
Page 214
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: User Module Legend The legend shows all user modules that may request Port Security services. Object Description • User Module Name The full name of a module that may request Port Security services.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Security Detail This page shows the MAC addresses secured by the Port Security module. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the port is set-up for software-based learning.
Page 216
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-12-8 DHCP Snooping Configuration screen page screenshot...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Snooping Mode Indicates the DHCP snooping mode operation. Possible modes are: Enabled: Enable DHCP snooping mode operation. When DHCP snooping is enabled, the requested DHCP messages will be forwarded to trusted ports and only allowed reply packets from trusted ports.
Page 218
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Rx and Tx Discover The number of discover (option 53 with value 1) packets received and transmitted. • Rx and Tx Offer The number of offer (option 53 with value 2) packets received and transmitted.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual IP Source Guard Configuration IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Mode of IP Source Enable the Global IP Source Guard or disable the Global IP Source Guard. All configured ACEs will be lost when the mode is enabled.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ARP Inspection ARP Inspection is a secure feature. Several types of attacks can be launched against a host or devices connected to Layer 2 networks by "poisoning" the ARP caches. This feature is used to block such attacks. Only valid ARP requests and responses can go through DUT.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Mode of ARP Enable the Global ARP Inspection or disable the Global ARP Inspection. Inspection Configuration • Port Mode when both Global Mode ARP Inspection is only enabled on this given port and Port Mode on a given port are enabled.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to add a new entry. : Click to save changes. Click to undo any changes made locally and revert to previously saved values. Address Table Switching of frames is based upon the DMAC address contained in the frame. The Managed Switch builds up a table that maps MAC addresses to switch ports for knowing which ports the frames should go to (based upon the DMAC address in the frame ).
Page 224
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-13-2 Static MAC Table Configuration page screenshot The page includes the following fields: Object Description • Check to delete the entry. It will be deleted during the next save. Delete • The VLAN ID for the entry.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual MAC Address Table Status Dynamic MAC Table Entries in the MAC Table are shown on this page. The MAC Table contains up to 8192 entries, and is sorted first by VLAN ID, then by MAC address.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. : Refreshes the displayed table starting from the "Start from MAC address" and "VLAN" input fields.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. Click to undo any changes made locally and revert to previously saved values. Dynamic ARP Inspection Table Entries in the Dynamic ARP Inspection Table are shown on this page. The Dynamic ARP Inspection Table contains up to 1024 entries, and is sorted first by port, then by VLAN ID, then by MAC address, and then by IP address.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Dynamic IP Source Guard Table Entries in the Dynamic IP Source Guard Table are shown on this page. The Dynamic IP Source Guard Table is sorted first by port, then by VLAN ID, then by IP address, and then by IP mask. The Dynamic IP Source Guard Table screen is shown Figure 4-13-6.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual LLDP Link Layer Discovery Protocol Link Layer Discovery Protocol (LLDP) is used to discover basic information about neighboring devices on the local broadcast domain. LLDP is a Layer 2 protocol that uses periodic broadcasts to advertise information about the sending device. Advertised information is represented in Type Length Value (TLV) format according to the IEEE 802.1ab standard, and can include details...
Page 230
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: LLDP Parameters Object Description • The switch is periodically transmitting LLDP frames to its neighbors for having the Tx Interval network discovery information up-to-date. The interval between each LLDP frame is determined by the Tx Interval value.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual CDP TLV "Port ID" is mapped into the LLDP "Port ID" field. CDP TLV "Version and Platform" is mapped into the LLDP "System Description" field. Both the CDP and LLDP supports "system capabilities", but the CDP capabilities cover capabilities that are not part of the LLDP.
Page 232
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-14-2 LLDPMED Configuration page screenshot The page includes the following fields: Fast start repeat count Object Description • Rapid startup and Emergency Call Service Location Identification Discovery of Fast start repeat count endpoints is a critically important aspect of VoIP systems in general.In addition, it...
Page 233
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Coordinates Location Object Description • Latitude Latitude SHOULD be normalized to within 0-90 degrees with a maximum of 4 digits. It is possible to specify the direction to either North of the equator or South of the equator.
Page 234
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • House no. suffix House number suffix - Example: A, 1/2 • Landmark Landmark or vanity address - Example: Columbia University • Additional location Additional location info - Example: South Wing info • Name Name (residence and office occupant) - Example: Flemming Jahn •...
Page 235
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual the same Network Connectivity Device may advertise different sets of policies, based on the authenticated user identity or port configuration. It should be noted that LLDP-MED is not intended to run on links other than between Network Connectivity Devices and Endpoints, and therefore does not need to advertise the multitude of network policies that frequently run on an aggregated link interior to the LAN.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Policies Configuration Every port may advertise a unique set of network policies or different attributes for the same network policies, based on the authenticated user identity or port configuration. Object Description • Port The port number for which the configuration applies.
Page 237
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual also support all aspects of TIA-1057 applicable to Generic Endpoints (Class I), and any LLDP-MED Endpoint Device claiming compliance as a Communication Device (Class III) will also support all aspects of TIA-1057 applicable to both Media Endpoints (Class II) and Generic Endpoints (Class I).
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual with buffering would not be an intended use of this application type. Video Signaling - for use in network topologies that require a separate policy for the video signaling than for the video media.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 2. Repeater 3. Bridge 4. WLAN Access Point 5. Router 6. Telephone 7. DOCSIS cable device 8. Station only 9. Reserved When a capability is enabled, the capability is followed by (+). If the capability is disabled, the capability is followed by (-).
Page 240
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Global Counters Object Description • Shows the time for when the last entry was last deleted or added. It is also shows Neighbor entries were the time elapsed since last change was detected.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Network Diagnostics This section provide the Physical layer and IP layer network diagnostics tools for troubleshooting. The diagnostic tools are designed for network manager to help them quickly diagnose problems between point to point and better service customers.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Be sure the target IP Address is within the same network subnet of the switch, or you had setup the correct gateway IP address. Buttons : Click to transmit ICMP packets. IPv6 Ping This page allows you to issue ICMPv6 PING packets to troubleshoot IPv6 connectivity issues.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Remote IP Ping Test This page allows you to issue ICMP PING packets to troubleshoot IP connectivity issues on special port. After you press “Test”, 5 ICMP packets are transmitted, and the sequence number and roundtrip time are displayed upon reception of a reply.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Port The logical port for the settings. • The destination IP Address. Remote IP Address • The payload size of the ICMP packet. Values range from 8 bytes to 1400 bytes.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • The port where you are requesting Cable Diagnostics. Port • Description Display per port description. • Port: Port number. Cable Status Pair: The status of the cable pair.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Power over Ethernet Powered Device Voice over IP phones Enterprise can install POE VoIP Phone, ATA and other Ethernet/non-Ethernet end-devices to the central where UPS is installed for un-interrupt power system and power control system.
Page 247
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual In this mode the Maximum Power fields have no effect. Allocation mode In this mode the user allocates the amount of power that each port may reserve. The allocated/reserved power for each port/PD is specified in the Maximum Power fields.
Page 248
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. For IFS GE-DSSG-244-Poe, the total PoE power reservation from Port-1~24 is up to 220W...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Configuration This section allows the user to inspect and configure the current PoE port settings , screen is shown Figure 4-16-3. Figure 4-16-3 Power over Ethernet Configuration screenshot The page includes the following fields:...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Power Allocation It limits the port PoE supply. Per port maximum value must be less than 15.4 watts, and total ports values must be less than the Power Reservation value if current PoE mode is 802.3af. Once power overload is detected, the port will automatically shut down and keep on detection mode until PD’s power...
Page 251
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • This is the logical port number for this row. Local Port • Display the class of the PD attached to the port, as established by the classification PD Class process. Class 0 is the default for PDs. The PD is classified based on power. The classification of the PD is the maximum power that the PD will draw across all input voltages and operational modes.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual PoE Schedule This page allows the user to define PoE schedule. The screen is shown Figure 4-16-5. Figure 4-16-5 PoE Schedule screenshot The page includes the following fields Object Description • Profile Set the schedule profile mode. Possible porifles are: Profile1 / Profile2 / Profile3 / Profile4 •...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Click to save changes. : Check to delete the entry. LLDP Neighbor Power Over Ethernet This page provides a status overview for all LLDP PoE neighbors. The displayed table contains a row for each port on which an LLDP PoE neighbor is detected.
Page 254
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 4.17 Stack Using Stacking, it is possible to connect a number of switches together in a stack, which behaves as a single switch as seen from outside the stack. Two types of stack topologies are supported:...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-17-2 Ring Stack topology Back-to-Back Stack : Two switches interconnected on both stacking ports. Figure 4-17-3 Back to back Stack topology Stack This section provides information for understand stacking architecture, include the below items: Switch IDs •...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual (see "Replacing a Switch" above). Deleting a switch will remove any configuration pertaining to it. Deleting an active switch will leave it with an unassigned Switch ID until rebooted or manually assigning a Switch ID.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-17-5 True Ring Topology Stack Configuration This page is used for configure the stack, include assign Switch ID, master priority and display the current stack member information. The screen is shown Figure 4-17-6appears.
Page 258
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Object Description • Deletes this switch from the stack configuration. Delete • The MAC address of the switch. Stack Member • The Switch ID (1-16) assigned to a switch. For more information, see description...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Start Master Election By checking this option, the "Save" operation will also start the master election process. This is done by clicking "Start Master Election", followed by "Save". This causes the first two criteria to be ignored, thereby basing master election only on master priority and MAC address.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • The time of the last topology change in the stack. Last Topology Change • The MAC address of the current stack master switch. Master Switch • The time of the last master change in the stack.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SWITCH ID MASTER Port Link status Stack Port Link status Figure 4-17-10 Port State Overview page screenshot Stack Example Stacking function is convenient for administrator to manage multiple switches by single IP. Basically, you got to have min. 2 units.
Page 262
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-17-12 Stack Configuration Step 5: We wish to make the IFS switch with MAC “00-30-4f-7b-9c-b2” / Switch ID=2 to become the Stack Master and swap the Switch ID to 1. Select the switch with ID=1 and assign a new ID for this unit, for example: ID=4 Figure 4-17-13 Assing new ID for current master Select the target switch and set up with lower priority “1”, also re-assing the Switch ID=1 for it.
Page 263
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-17-14 Assing lower priority value fo the target switch Reflash the web browser, the switch with MAC address “00-30-4f-7b-9e-b2” become the stack master now. Figure 4-17-15 The result after master election Step 6: After the Stack Master and Members have been configured, any switch in the stack can be managed from the web agent by choosing the desired Member ID from the Switch drop down menu.
Page 264
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-17-16 To manage the member switch Slave switch IP will be covered by Master one, and disappear temporarily. The slave IP address can be the same as Master IP address. Thus, if master switch is malfunction, you can still access the other switch by same IP address.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual COMMAND LINE INTERFACE Accessing the CLI When accessing the management interface for the switch over a direct connection to the server’s console port, or via a Telnet connection, the switch can be managed by entering command keywords and parameters at the prompt. Using the switch's command-line interface (CLI) is very similar to entering commands on a UNIX system.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Configure IP address The IFS Managed Switch is shipped with default IP address as following. IP Address: 192.168.0.100 Subnet Mask: 255.255.255.0 To check the current IP address or modify a new IP address for the Switch, please use the procedures as follow: Show the current IP address On ”Switch/>...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 5-3 Set IP address screen Repeat Step 1 to check if the IP address is changed. If the IP address is successfully configured, the Managed Switch will apply the new IP address setting immediately. You can access the Web interface of IFS Managed Switch through the new IP address.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Command Line Mode The CLI groups all the commands in appropriate modes according to the nature of the command. A sample of the CLI command modes are described below. Each of the command modes supports specific software commands.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual System Command System Configuration Description: Show system configuration. Syntax: System Configuration [all] [<port_list>] Parameters: : Show all switch configuration, default: Show system configuration <port_list>: Port list or 'all', default: All ports Example: To display system information: SWITCH/>System configuration...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: <contact>: System contact string. Use 'clear' or "" to clear the string. No blank or space characters are permitted as part of a contact. (only in CLI) Default Setting: empty Example: To set device contact: Switch/>System contact IFS-Test...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Default Setting: SWITCH Example: To change CLI title: Switch/>system prompt IFS GE-DSSG-244 IFS-24040/> System Reboot Description: Reboot the system. Syntax: System Reboot Example: To reboot device without changing any of the settings: Switch/>system reboot...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: <log_id>: System log ID or range (default: All entries) : Show all levels (default) : Show informations info warning : Show warnings : Show errors error : Clear log clear Example: To show system log: Switch/>system log...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Switch/> Stack Master Reelect Description: Force master reelection (ignoring master time). Syntax: Stack Master Reelect Example: Force master reelection. Switch/>stack master reelect Switch/> Stack Select Description: Set or show the selected switch ID.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: <sid>: Switch ID (1-16) Example: Delete stack SID 10. Switch/>stack sid delete 10 Switch/> Stack SID Assign Description: Assign SID and associated configuration to switch. SID must be unassigned, switch must be present and switch must not already be assigned to a SID.
Page 275
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual IP DHCP Description: Set or show the DHCP client mode. Syntax: IP DHCP [enable|disable] Parameters: enable : Enable or renew DHCP client disable: Disable DHCP client Default Setting: Disable Example: Disable DHCP sever: SWITCH/>ip dhcp disable...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Default Setting: disable Example: Enable IPv6 autoconfig function: SWITCH/>ip ipv6 autoconfig enable IPv6 Setup Description: Set or show the IPv6 setup. Syntax: IP IPv6 Setup [<ipv6_addr>] [<ipv6_prefix>] [<ipv6_router>] [<vid>] Parameters: <ipv6_addr> : IPv6 address is in 128-bit records represented as eight fields of up to four hexadecimal digits with a colon separates each field (:).
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual IP NTP Server Add <server_index> <ip_addr_string> Parameters: <server_index> : The server index (1-5) <ip_addr_string>: IP host address (a.b.c.d) or a host name string Example: To add NTP server: SWITCH/>ip ntp server add 1 60.249.136.151...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: <port_list>: Port list or 'all', default: All ports : Show ports, which are up : Show ports, which are down down (default: Show all ports) Example: Display port1~4 status SWITCH/>port configuration 1-4...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Disable Example: Enable flow control function for port1 SWITCH/>port flow control 1 enable Port State Description: Set or show the port administrative state. Syntax: Port State [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual actiphy: Enable ActiPHY power control dynamic: Enable Dynamic power control Default Setting: Enable Example: Disable port power function for port1-4 SWITCH/>port power 1-4 disable Port SFP Description: Show SFP port information. Syntax: Port SFP [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: <port_list>: Port list or 'all', default: All ports <command> : The command parameter takes the following values: : Clear port statistics clear : Show packet statistics packets : Show byte statistics bytes...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto MAC Add Description: Add MAC address table entry. Syntax: MAC Add <mac_addr> <port_list> [<vid>] Parameters: <mac_addr> : MAC address (xx-xx-xx-xx-xx-xx) <port_list>: Port list or 'all' or 'none'...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: <mac_addr>: MAC address (xx-xx-xx-xx-xx-xx) : VLAN ID (1-4095), default: 1 <vid> Example: Lookup state of Mac address 00-30-4F-01-01-02 SWITCH/>mac lookup 00-30-4f-01-01-02 MAC Age Time Description: Set or show the MAC address age timer.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: <mac_max> : Maximum number of MAC addresses 1-8192, default: Show all addresses <mac_addr>: First MAC address (xx-xx-xx-xx-xx-xx), default: MAC address zero : First VLAN ID (1-4095), default: 1 <vid> Example: Show all of MAC table SWITCH/>mac dump...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual MAC Flush Description: Flush all learned entries. Syntax: MAC Flush VLAN Configuration Command VLAN Configuration Description: Show VLAN configuration. Syntax: VLAN Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', (default: All ports) Example: Show VLAN status of port1 SWITCH/>vlan configuration 1...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN Frame Type Description: Set or show the port VLAN frame type. Syntax: VLAN FrameType [<port_list>] [all|tagged] Parameters: <port_list>: Port list or 'all', default: All ports : Allow tagged and untagged frames : Allow tagged frames only...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SWITCH/>vlan mode portbased VLAN Link Type Description: Set or show the port VLAN link type. Syntax: VLAN LinkType [<port_list>] [untagged|tagged] Parameters: <port_list>: Port list or 'all', default: All ports : VLAN Link Type Tagged...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Example: Set out layer VLAN tag Ethernet type for port 10 in man Ethernet type SWITCH/>vlan ethtype 10 man VLAN Add Description: Add or modify VLAN entry. Syntax: VLAN Add <vid> [<port_list>] Parameters: : VLAN ID (1-4095) <vid>...
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Example: Show VLAN status SWITCH/>vlan lookup Ports ---- ----- 1-24 None VLAN Status Description: VLAN Port Configuration Status. Syntax: VLAN Status [<port_list>] [combined|static|nas|mvr|voice_vlan|mstp|all|conflicts] Parameters: <port_list>: Port list or 'all', default: All ports : combined VLAN Users configuration...
User’s Manual of NS3601-24P/4S Series Security Command Security Switch User Configuration Description: Show users configuration. Syntax: Security Switch Users Configuration Default Setting: User Privilege Name admin guest Example: Enable isolate for port10 SWITCH/>security switch user configuration Users Configuration: ==================== User Name Privilege Level -------------------------------- ----------------...
User’s Manual of NS3601-24P/4S Series IPv6 address is in 128-bit records represented as eight fields of up to four hexadecimal digits with a colon separates each field (:). For example, 'fe80::215:c5ff:fe03:4dc7'. The symbol '::' is a special syntax that can be used as a shorthand way of representing multiple 16-bit groups of contiguous zeros;...
User’s Manual of NS3601-24P/4S Series SNMPv3 Engine ID : 800007e5017f000001 SNMPv3 Communities Table: Idx Community Source IP Source Mask --- -------------------------------- --------------- --------------- public 0.0.0.0 0.0.0.0 private 0.0.0.0 0.0.0.0 Number of entries: 2 SNMPv3 Users Table: Idx Engine ID User Name Level Auth Priv --- --------- -------------------------------- -------------- ---- ----...
User’s Manual of NS3601-24P/4S Series Security Switch SNMP Version Description: Set or show the SNMP protocol version. Syntax: Security Switch SNMP Version [1|2c|3] Parameters: 1 : SNMP version 1 2c: SNMP version 2c 3 : SNMP version 3 (default: Show SNMP version) Default Setting: Example: Set SNMP in version 3.
User’s Manual of NS3601-24P/4S Series Security Switch SNMP Trap Destination Description: Set or Show the SNMP trap destination address. Syntax: Security Switch SNMP Trap Destination [<ip_addr_string>] Parameters: <ip_addr_string>: IP host address (a.b.c.d) or a host name string Example: Set SNMP trap destination address for 192.168.0.20 SWITCH/>security switch snmp trap destination 192.168.0.20 Security Switch SNMP Trap IPv6 Destination Description:...
User’s Manual of NS3601-24P/4S Series (default: Show SNMP trap security name) Example: Set the SNMP trap security name SWITCH/>security switch snmp trap security name 12345678 Security Switch SNMP Engine ID Description: Set or show SNMPv3 local engine ID. Syntax: Security Switch SNMP Engine ID [<engineid>] Parameters: <engineid>: Engine ID, the format may not be all zeros or all 'ff'H and is restricted to 5 - 32 octet string Default Setting:...
User’s Manual of NS3601-24P/4S Series Security Switch SNMP Community Lookup Description: Lookup SNMPv3 community entry. Syntax: Security Switch SNMP Community Lookup [<index>] Parameters: <index>: entry index (1-64) Example: Lookup SNMPv3 community entry SWITCH/>security switch snmp community lookup Idx Community Source IP Source Mask --- -------------------------------- ---------------...
User’s Manual of NS3601-24P/4S Series Security Switch SNMP User Changekey Description: Change SNMPv3 user password. Syntax: Security Switch SNMP User Changekey <engineid> <user_name> <auth_password> [<priv_password>] Parameters: : Engine ID, the format may not be all zeros or all 'ff'H and is restricted to 5 - 32 octet string <engineid>...
User’s Manual of NS3601-24P/4S Series Security Switch SNMP Group Delete Description: Delete SNMPv3 group entry. Syntax: Security Switch SNMP Group Delete <index> Parameters: <index>: entry index (1-64) Example: Delete SNMPv3 group entry SWITCH/>security switch snmp group delete 1 Security Switch SNMP Group Lookup Description: Lookup SNMPv3 group entry.
User’s Manual of NS3601-24P/4S Series ---- No users ---- No users ---- No users ---- No users ---- No users ---- No users ---- No users ---- No users ---- No users ---- No users ---- No users ---- No users ---- No users ----...
User’s Manual of NS3601-24P/4S Series disable : Disable aging (default: Show current enabledness of aging) Default Setting: disable Example: Enable limit aging SWITCH/>security network limit aging enable Security Network Limit Agetime Description: Time in seconds between check for activity on learned MAC addresses. Syntax: Security Network Limit Agetime [<age_time>] Parameters:...
User’s Manual of NS3601-24P/4S Series <port_list>: Port list or 'all', default: All ports : Max. number of MAC addresses on this port <limit> (default: Show current limit) Default Setting: Example: Set limit in 5 SWITCH/>security network limit limit 1-24 5 Security Network Limit Action Description: Set or show the action involved with exceeding the limit.
User’s Manual of NS3601-24P/4S Series Parameters: <port_list>: Port list or 'all', default: All ports Example: Show 802.1X configuration of port 1 SWITCH/>security network nas configuration 1 802.1X Configuration: ===================== Mode : Disabled Reauth. : Disabled Reauth. Period : 3600 EAPOL Timeout : 30 Age Period : 300...
User’s Manual of NS3601-24P/4S Series (default: Show 802.1X state) Default Setting: none Example: Show the port 1 security state. SWITCH/>security network nas state 1 Port Admin State Port State Last Source Last ID ---- ------------------ --------------------- ----------------- ------------------ Force Authorized Link Down Security Network NAS Reauthentication Description:...
User’s Manual of NS3601-24P/4S Series Parameters: <eapol_timeout>: Time between EAPOL retransmissions (1-65535 seconds) (default: Show current EAPOL retransmission timeout) Default Setting: Example: Set the time between EAPOL retransmissions for 100sec. SWITCH/>security network nas eapoltimeout 100 Security Network NAS Agetime Description: Time in seconds between check for activity on successfully authenticated MAC addresses.
Page 321
User’s Manual of NS3601-24P/4S Series <port_list>: Select the per-port RADIUS-assigned QoS setting (default: Show current per-port RADIUS-assigned QoS enabledness) enable : Enable RADIUS-assigned QoS either globally or on one or more ports disable: Disable RADIUS-assigned QoS either globally or on one or more ports (default: Show current RADIUS-assigned QoS enabledness) Default Setting: disable...
User’s Manual of NS3601-24P/4S Series enable :The Guest VLAN can be entered even if an EAPOL frame has been received during the lifetime of the port (default: Show current setting) Default Setting: disable Example: Enable NAS guest VLAN SWITCH/>security network nas guest_vlan enable Security Network NAS Authenticate Description: Refresh (restart) 802.1X authentication process.
User’s Manual of NS3601-24P/4S Series Security Network ACL Action Description: Set or show the ACL port default action. Syntax: Security Network ACL Action [<port_list>] [permit|deny] [<rate_limiter>] [<port_copy>] [<logging>] [<shutdown>] Parameters: : Port list or 'all', default: All ports <port_list> : Permit forwarding (default) permit : Deny forwarding deny...
User’s Manual of NS3601-24P/4S Series Example: Set rate limit value in 1024k for port 1 SWITCH/>security network acl rate 1 1024k Security Network ACL Add Description: Add or modify Access Control Entry (ACE). If the ACE ID parameter <ace_id> is specified and an entry with this ACE ID already exists, the ACE will be modified. Otherwise, a new ACE will be added.
User’s Manual of NS3601-24P/4S Series <ip_addr>: IP address (a.b.c.d), default: Show IP address Default Setting: null Example: Set DHCP relay server in 192.168.0.20 SWITCH/>security network dhcp relay server 192.168.0.20 Security Network DHCP Relay Information Mode Description: Set or show DHCP relay agent information option mode. When enable DHCP relay information mode operation, the agent insert specific information (option 82) into a DHCP message when forwarding to DHCP server and remote it from a DHCP message when transferring to DHCP client.
User’s Manual of NS3601-24P/4S Series Security Network DHCP Snooping Mode [enable|disable] Parameters: enable : Enable DHCP snooping mode. When enable DHCP snooping mode operation, the request DHCP messages will be forwarded to trusted ports and only allowed reply packets from trusted ports. disable: Disable DHCP snooping mode (default: Show flow DHCP snooping mode) Default Setting:...
User’s Manual of NS3601-24P/4S Series enable : Enable IP Source Guard disable: Disable IP Source Guard Default Setting: disable Example: Enable IP source guard mode SWITCH/>security network ip source guard mode enable Security Network IP Source Guard Port Mode Description: Set or show the IP Source Guard port mode.
User’s Manual of NS3601-24P/4S Series <port_list> : Port list or 'all', default: All ports : Add new port IP source guard static entry delete : Delete existing port IP source guard static entry : VLAN ID (1-4095) <vid> <allowed_ip>: IP address (a.b.c.d), IP address allowed for doing ARP request : IP mask (a.b.c.d), IP mask for allowed IP address <ip_mask>...
User’s Manual of NS3601-24P/4S Series Security Network ARP Inspection Port Mode Description: Set or show the ARP Inspection port mode. Syntax: Security Network ARP Inspection Port Mode [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports enable : Enable ARP Inspection port disable : Disable ARP Inspection port (default: Show ARP Inspection port mode) Default Setting:...
User’s Manual of NS3601-24P/4S Series Security AAA Configuration Description: Show Auth configuration. Syntax: Security AAA Configuration Example: Show Auth configuration. SWITCH/>security aaa configuration AAA Configuration: ================== Server Timeout : 15 seconds Server Dead Time : 300 seconds RADIUS Authentication Server Configuration: =========================================== Server Mode IP Address...
User’s Manual of NS3601-24P/4S Series Example: Set 30sec for server timeout SWITCH/>security aaa timeout 30 Security AAA Deadtime Description: Set or show server dead time. Syntax: Security AAA Deadtime [<dead_time>] Parameters: <dead_time>: Time that a server is considered dead if it doesn't answer a request (0-3600 seconds) (default: Show server dead time configuration) Default Setting: Example:...
User’s Manual of NS3601-24P/4S Series The server index (1-5) (default: Show RADIUS accounting server configuration) : Enable RADIUS accounting server enable : Disable RADIUS accounting server disable (default: Show RADIUS server mode) <ip_addr_string>: IP host address (a.b.c.d) or a host name string : Secret shared with external accounting server.
User’s Manual of NS3601-24P/4S Series Spanning Tree Protocol Command STP Configuration Description: Show STP configuration. Syntax: STP Configuration Example: Show STP configuration. SWITCH/>stp cofiguration STP Configuration: ================== Protocol Version: MSTP Max Age : 20 Forward Delay : 15 Tx Hold Count Max Hop Count : 20 STP Version...
User’s Manual of NS3601-24P/4S Series STP MaxHops Description: Set or show the MSTP Bridge Max Hop Count parameter. Syntax: STP MaxHops [<maxhops>] Parameters: <maxhops>: STP BPDU MaxHops (6-40)) Default Setting: 20 Example: Set STP maximum hops in 25 SWITCH/>stp maxhops 25 STP MaxAge Description: Set or show the CIST/MSTI bridge maximum age.
User’s Manual of NS3601-24P/4S Series Parameters: <config-name>: MSTP Configuration name. A text string up to 32 characters long. Use quotes (") to embed spaces in name. : Integer value <integer> Default Setting: Configuration name: MAC address Configuration rev.: 0 Example: Set MSTP configuration name and revision.
User’s Manual of NS3601-24P/4S Series <timeout>: Time before error-disabled ports are reenabled (30-86400 seconds, 0 disables) (default: Show recovery timeout) Default Setting: Disable Example: Set STP recovery value in 30 sec. SWITCH/>stp recovery 30 STP Status Description: Show STP Bridge status. Syntax: STP Status [<msti>] [<port_list>] Parameters:...
User’s Manual of NS3601-24P/4S Series STP Port Mode Description: Set or show the STP enabling for a port. Syntax: STP Port Mode [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all'. Port zero means aggregations. : Enable MSTP protocol Enable : Disable MSTP protocol Disable Default: Enable...
User’s Manual of NS3601-24P/4S Series SWITCH/>stp port autoedge 1 disable STP Port P2P Description: Set or show the STP point2point port parameter. Syntax: STP Port P2P [<port_list>] [enable|disable|auto] Parameters: <port_list>: Port list or 'all', default: All ports : Enable MSTP point2point enable : Disable MSTP point2point disable...
User’s Manual of NS3601-24P/4S Series Example: Eisable STP restricted TCN on port1 SWITCH/>stp port restrictedtcn 1 enable STP Port bpduGuard Description: Set or show the bpduGuard port parameter. Syntax: STP Port bpduGuard [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Enable port BPDU Guard enable : Disable port BPDU Guard...
User’s Manual of NS3601-24P/4S Series STP MSTI Port Configuration Description: Show the STP CIST/MSTI port configuration. Syntax: STP Msti Port Configuration [<msti>] [<port_list>] Parameters: : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...) <msti> <port_list>: Port list or 'all', default: All ports Default: auto Example:...
User’s Manual of NS3601-24P/4S Series Default: Multicast Configuration Command IGMP Configuration Description: Show IGMP snooping configuration. Syntax: IGMP Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Example: Show IGMP snooping configuration. SWITCH/>igmp configuration IGMP Mode Description: Set or show the IGMP snooping mode. Syntax: IGMP Mode [enable|disable] Parameters:...
User’s Manual of NS3601-24P/4S Series Enable IGMP leave proxy SWITCH/>igmp leave proxy enable IGMP State Description: Set or show the IGMP snooping state for VLAN. Syntax: IGMP State [<vid>] [enable|disable] Parameters: <vid>: VLAN ID (1-4095), default: Show all VLANs enable : Enable IGMP snooping disable: Disable IGMP snooping (default: Show IGMP snooping mode) Default Setting:...
User’s Manual of NS3601-24P/4S Series disable Example: Enable the IGMP snooping fast leave port mode. SWITCH/>igmp fastleave 1 enable IGMP Throttling Description: Set or show the IGMP port throttling status. Syntax: IGMP Throttling [<port_list>] [limit-group-number] Parameters: <port_list>: Port list or 'all', default: All ports : No limit : Group learn limit 1~10...
User’s Manual of NS3601-24P/4S Series enable : Enable IGMP router port disable : Disable IGMP router port (default: Show IGMP router port mode) Default Setting: disable Example: Enable IGMP snooping function for port1~4 SWITCH/>igmp router 1-4 enable IGMP Flooding Description: Set or show the IGMP snooping unregistered flood operation.
User’s Manual of NS3601-24P/4S Series Aggr Lookup [<aggr_id>] Parameters: <aggr_id>: Aggregation ID , global: 1-2, local: 3-14 Example: Show aggregation status SWITCH/>aggr lookup 1 Aggr ID Name Type Ports ----------- ------- ------- ------- GLAG1 Static Aggregation Mode Description: Set or show the link aggregation traffic distribution mode. Syntax: Aggr Mode [smac|dmac|ip|port] [enable|disable] Parameters:...
User’s Manual of NS3601-24P/4S Series Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active Disabled Auto Active...
User’s Manual of NS3601-24P/4S Series Set key1 for port1~4 SWITCH/>lacp key 1-4 1 LACP Role Description: Set or show the LACP role. Syntax: LACP Role [<port_list>] [active|passive] Parameters: <port_list>: Port list or 'all', default: All ports active : Initiate LACP negotiation passive: Listen for LACP packets (default: Show LACP role) Default Setting:...
User’s Manual of NS3601-24P/4S Series SWITCH/>lldp mode 1 enable LLDP Optional TLV Description: Show or Set LLDP Optional TLVs. Syntax: LLDP Optional_TLV [<port_list>] [port_descr|sys_name|sys_descr|sys_capa|mgmt_addr] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Description of the port port_descr : System name sysm_name : Description of the system...
User’s Manual of NS3601-24P/4S Series Parameters: <hold>: LLDP hold value (2-10) Default Setting: Example: Set LLDP hold value in 10 SWITCH/>lldp hold 10 LLDP Delay Description: Set or show LLDP Tx delay. Syntax: LLDP Delay [<delay>] Parameters: <delay>: LLDP transmission delay (1-8192) Default Setting: Example: Set LLDP delay value in 1...
User’s Manual of NS3601-24P/4S Series Show LLDP Statistics of port 1 SWITCH/>lldp statistics 1 LLDP global counters Neighbor entries was last changed at - (323592 sec. ago). Total Neighbors Entries Added Total Neighbors Entries Deleted 0. Total Neighbors Entries Dropped 0. Total Neighbors Entries Aged Out 0.
User’s Manual of NS3601-24P/4S Series Parameters: <port_list>: Port list or 'all', default: All ports Example: Show LLDP-MED configuration of port1~4 SWITCH/>lldpmed configuration 1-4 LLDP-MED Configuration: ======================= Fast Start Repeast Count : 4 Location Coordinates : Latitude - 0.0000 North Longitude - 0.0000 East Altitude - 0.0000 meter(s)
User’s Manual of NS3601-24P/4S Series LLDPMED ECS Description: Set or show LLDP-MED Emergency Call Service. Syntax: LLDPMED ecs [<ecs_value>] Parameters: <ecs_value>: lldpmed The value for the Emergency Call Service LLDPMED Policy Delete Description: Delete the selected policy. Syntax: LLDPMED policy delete [<policy_list>] Parameters: <policy_list>: List of policies to delete Example:...
User’s Manual of NS3601-24P/4S Series : This field shall contain the DSCP value to be used to provide Diffserv node behavior for the specified <dscp> application type as defined in IETF RFC 2474 [5]. This 6 bit field may contain one of 64 code point values (0 through 63).
User’s Manual of NS3601-24P/4S Series LLDPMED Fast [<count>] Parameters: <count>: The number of times the fast start LLDPDU are being sent during the activation of the fast start mechanism defined by LLDP-MED (1-10). LLDPMED Info Description: Show LLDP-MED neighbor device information. Syntax: LLDPMED Info [<port_list>] Parameters:...
User’s Manual of NS3601-24P/4S Series Enabled High 15.4 15.4 Enabled High 15.4 15.4 Enabled High 15.4 15.4 Enabled High 15.4 15.4 Enabled High 15.4 15.4 Enabled High 15.4 15.4 Enabled High 15.4 15.4 Enabled High 15.4 15.4 Enabled High 15.4 15.4 Enabled High 15.4...
User’s Manual of NS3601-24P/4S Series PoE Management Mode Description: Show / Set PoE management mode. Syntax: PoE Mgmt_mode [mgt_class|mgt_alloc|mgt_consumption|mgt_priority] Parameters: mgt_class: handle power allocation according to PD class mgt_alloc: power allocated according to values entered in power allocate mgt_consumption: allocated according to PD actual need , with a maximum of 15.4 W per port mgt_priority: max.
User’s Manual of NS3601-24P/4S Series SWITCH/>poe alloc_power 1-4 10 PoE Power Supply Description: Set or show the value of the power supply. Syntax: PoE Power_Supply [<supply_power>] Parameters: <supply_power>: PoE power for a power supply Example: Set 200 watts of power supply. SWITCH/>poe power_supply 200 PoE Status Description:...
User’s Manual of NS3601-24P/4S Series QoS Classes Description: Set or show the number of traffic classes. Syntax: QoS Classes [<class>] Parameters: <class>: Number of traffic classes (1,2 or 4) Default Setting: Example: Set QoS classes 2 SWITCH/>qos classes 2 QoS Default Description: Set or show the default port priority.
User’s Manual of NS3601-24P/4S Series QoS QCL Port Description: Set or show the port QCL ID. Syntax: QoS QCL Port [<port_list>] [<qcl_id>] Parameters: <port_list>: Port list or 'all', default: All ports : QCL ID <qcl_id> Default Setting: Example: Set QCL ID5 for port10 SWITCH/>qos qcl port 10 5 QoS QCL Add Description:...
User’s Manual of NS3601-24P/4S Series QoS QCL Lookup Description: Lookup QCE. Syntax: QoS QCL Lookup [<qcl_id>] [<qce_id>] Parameters: <qcl_id>: QCL ID <qce_id>: QCE ID (1-24) QoS Mode Description: Set or show the port egress scheduler mode. Syntax: QoS Mode [<port_list>] [strict|weighted] Parameters: <port_list>: Port list or 'all', default: All ports strict : Strict mode...
User’s Manual of NS3601-24P/4S Series Disabled, 500kbps Example: Set 1000kbps rate limiter for port17~24 SWITCH/>qos rate limiter 17-24 enable 1000 QoS Shaper Description: Set or show the port shaper. Syntax: QoS Shaper [<port_list>] [enable|disable] [<bit_rate>] Parameters: <port_list>: Port list or 'all', default: All ports : Enable shaper enable : Disable shaper...
User’s Manual of NS3601-24P/4S Series : Traffic class low/normal/medium/high or 1/2/3/4 <class> : QoS DSCP Remarking Value 0/8/16/24/32/40/48/56/46 <dscp> Mirror Command Mirror Configuration Description: Show mirror configuration. Syntax: Mirror Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Default Setting: disable Example:...
User’s Manual of NS3601-24P/4S Series SWITCH/>mirror sid 2 Mirror Mode Description: Set or show the mirror mode. Syntax: Mirror Mode [<port_list>] [enable|disable|rx|tx] Parameters: <port_list>: Port list or 'all', default: All ports enable : Enable Rx and Tx mirroring disable: Disable Mirroring : Enable Rx mirroring : Enable Tx mirroring (default: Show mirror mode)
User’s Manual of NS3601-24P/4S Series Firmware Command Firmware Load Description: Load new firmware from TFTP server. Syntax: Firmware Load <ip_addr_string> <file_name> Parameters: <ip_addr_string>: IP host address (a.b.c.d) or a host name string : Firmware file name <file_name> Firmware IPv6 Load Description: Load new firmware from IPv6 TFTP server.
User’s Manual of NS3601-24P/4S Series enable : Enable UPnP disable: Disable UPnP (default: Show UPnP mode) Default Setting: disable Example: Enable the UPnP mode. SWITCH/>upnp mode enable UPnP TTL Description: Set or show the TTL value of the IP header in SSDP messages. Syntax: UPnP TTL [<ttl>] Parameters:...
User’s Manual of NS3601-24P/4S Series : Disable MVR mode disable (default: Show MVR mode) Default Setting: disable Example: Enable MVR mode. SWITCH/>mvr mode enable MVR Port Mode Description: Set or show the MVR port mode. Syntax: MVR Port Mode [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Enable MVR mode...
User’s Manual of NS3601-24P/4S Series <port_list>: Port list or 'all', default: All ports : Enable source mode source : Disable receiver mode receiver (default: Show MVR port type) Default Setting: receive Example: Set source type for MVR port type of port 1. SWITCH/>mvr port type 1 source MVR Immediate Leave Description:...
User’s Manual of NS3601-24P/4S Series Voice VLAN ID Description: Set or show Voice VLAN ID. Syntax: Voice VLAN ID [<vid>] Parameters: <vid>: VLAN ID (1-4095) Default Setting: 1000 Example: Set ID 2 for Voice VLAN ID. SWITCH/>voice vlan id 2 Voice VLAN Agetime Description: Set or show Voice VLAN age time.
User’s Manual of NS3601-24P/4S Series Modify OUI table will restart auto detect OUI process. Syntax: Voice VLAN OUI Add <oui_addr> [<description>] Parameters: : OUI address (xx-xx-xx) <oui_addr> <description>: Entry description. Use 'clear' or "" to clear the string No blank or space characters are permitted as part of a contact.(only in CLI) Example: Add Voice VLAN OUI entry.
User’s Manual of NS3601-24P/4S Series Voice VLAN Port Mode Description: Set or show the Voice VLAN port mode. When the port mode isn't disabled, we must disable MSTP feature before we enable Voice VLAN. It can avoid the conflict of ingress filter. Syntax: Voice VLAN Port Mode [<port_list>] [disable|auto|force] Parameters:...
User’s Manual of NS3601-24P/4S Series SMTP Mode Description: Enable or disable SMTP configure. Syntax: SMTP Mode [enable|disable] Parameters: : Enable SMTP mode enable : Disable SMTP mode disable (default: Show SMTP mode) Default Setting: disable SMTP Server Description: Set or show SMTP server configure. Syntax: SMTP Server [<server>] [<port>] Parameters:...
User’s Manual of NS3601-24P/4S Series SMTP Auth_pass Description: Set or show SMTP authentication password configure. Syntax: SMTP Auth_pass [<auth_pass_text>] Parameters: <auth_pass_text>: SMTP Authentication Password Default Setting: disable SMTP Mailfrom Description: Set or show SMTP e-mail from configure. Syntax: SMTP Mailfrom [<mailfrom_text>] Parameters: <mailfrom_text>: SMTP E-mail From address Default Setting:...
User’s Manual of NS3601-24P/4S Series Parameters: <mailto1_text>: SMTP e-mail 2 to address Default Setting: disable Show Command Show ACL Configuration Description: Show ACL Configuration. Syntax: Show acl Show Link Aggregation Configuration Description: Show link aggregation configuration. Syntax: Show aggr Show IGMP Configuration Description: Show IGMP snooping configuration.
Page 385
User’s Manual of NS3601-24P/4S Series Show MAC Configuration Description: Show MAC address table configuration. Syntax: Show MAC Show Mirror Configuration Description: Show mirror configuration. Syntax: Show mirror Show PoE Configuration Description: Show PoE configuration. Syntax: Show PoE Show Port Configuration Description: Show port configuration.
Page 386
User’s Manual of NS3601-24P/4S Series Syntax: Show stack Show System Configuration Description: Show system configuration. Syntax: Show system Show VLAN Configuration Description: Show VLAN configuration. Syntax: Show vlan Show STP Configuration Description: Show STP Port configuration. Syntax: Show STP...
User’s Manual of NS3601-24P/4S Series SWITCH OPERATION Address Table The Switch is implemented with an address table. This address table composed of many entries. Each entry is used to store the address information of some node in network, including MAC address, port no, etc. This in-formation comes from the learning process of Ethernet Switch.
User’s Manual of NS3601-24P/4S Series POWER OVER ETHERNET OVERVIEW What is PoE? Based on the global standard IEEE 802.3af, PoE is a technology for wired Ethernet, the most widely installed local area network technology adopted today. PoE allows the electrical power necessary for the operation of each end-device to be carried by data cables rather than by separate power cords.
User’s Manual of NS3601-24P/4S Series Figure 8-2 - Power Supplied over the Data Pins When to install PoE? Consider the following scenarios: • • You're planning to install the latest VoIP Phone system to minimize cabling building costs when your company moves into new offices next month.
User’s Manual of NS3601-24P/4S Series Stages of powering up a PoE link Volts specified Volts managed Stage Action per 802.3af by chipset Measure whether powered device has the correct signature 2.7-10.0 1.8–10.0 Detection resistance of 15–33 kΩ Measure which power level class the resistor indicates 14.5-20.5 12.5–25.0 Classification...
Page 392
User’s Manual of NS3601-24P/4S Series DC Disconnect detection involves measurement of current. Naturally, a disconnected PD stops consuming current, which can be inspected by the PSE. The PSE must therefore disconnect power within 300 to 400 ms from the current flow stop. The lower time boundary is important to prevent shutdown due to random fluctuations.
User’s Manual of NS3601-24P/4S Series TROUBLE SHOOTING This chapter contains information to help you solve problems. If the Ethernet Switch is not functioning properly, make sure the Ethernet Switch was set up according to instructions in this manual. ■ The Link LED is not lit Solution: Check the cable connection and remove duplex mode of the Ethernet Switch ■...
User’s Manual of NS3601-24P/4S Series APPENDEX A Switch's RJ-45 Pin Assignments 1000Mbps, 1000Base T Contact MDI-X BI_DA+ BI_DB+ BI_DA- BI_DB- BI_DB+ BI_DA+ BI_DC+ BI_DD+ BI_DC- BI_DD- BI_DB- BI_DA- BI_DD+ BI_DC+ BI_DD- BI_DC- Implicit implementation of the crossover function within a twisted-pair cable, or at a wiring panel, while not expressly forbidden, is beyond the scope of this standard.
Page 395
User’s Manual of NS3601-24P/4S Series There are 8 wires on a standard UTP/STP cable and each wire is color-coded. The following shows the pin allocation and color of straight cable and crossover cable connection: Straight Cable SIDE 1 SIDE2 SIDE 1 1 = White / Orange 1 = White / Orange 2 = Orange...
User’s Manual of NS3601-24P/4S Series APPENDEX B : GLOSSARY ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application.
Page 397
User’s Manual of NS3601-24P/4S Series ARP is an acronym for Address Resolution Protocol. It is a protocol that used to convert an IP address into a physical address, such as an Ethernet address. ARP allows a host to communicate with other hosts when only the Internet address of its neighbors is known.
Page 398
User’s Manual of NS3601-24P/4S Series Dynamic addressing simplifies network administration because the software keeps track of IP addresses rather than requiring an administrator to manage the task. This means that a new computer can be added to a network without the hassle of manually assigning it a unique IP address.
Page 399
User’s Manual of NS3601-24P/4S Series and provides file writing and reading. It also provides directory service and security features. Fast Leave IGMP snooping Fast Leave processing allows the switch to remove an interface from the forwarding-table entry without first sending out group specific queries to the interface. The VLAN interface is pruned from the multicast tree for the multicast group specified in the original leave message.
Page 400
User’s Manual of NS3601-24P/4S Series IMAP is an acronym for Internet Message Access Protocol. It is a protocol for email clients to retrieve email messages from a mail server. IMAP is the protocol that IMAP clients use to communicate with the servers, and SMTP is the protocol used to transport mail to an IMAP server.
Page 401
User’s Manual of NS3601-24P/4S Series LLDP-MED LLDP-MED is an extendsion of IEEE 802.1ab and is defined by the telecommunication industry association (TIA-1057). LOC is an acronym for Loss Of Connectivity and is detected by a MEP and is indicating lost connectivity in the network. Can be used as a switch criteria by EPS MAC Table Switching of frames is based upon the DMAC address contained in the frame.
Page 402
User’s Manual of NS3601-24P/4S Series NAS is an acronym for Network Access Server. The NAS is meant to act as a gateway to guard access to a protected source. A client connects to the NAS, and the NAS connects to another resource asking whether the client's supplied credentials are valid.
Page 403
User’s Manual of NS3601-24P/4S Series PD is an acronym for Powered Device. In a PoE> system the power is delivered from a PSE ( power sourcing equipment ) to a remote device. The remote device is called a PD. PHY is an abbreviation for Physical Interface Transceiver and is the device that implement the Ethernet physical layer (IEEE-802.3).
Page 404
User’s Manual of NS3601-24P/4S Series There are six QCE frame types: Ethernet Type, VLAN, UDP/TCP Port, DSCP, TOS, and Tag Priority. Frames can be classified by one of 4 different QoS classes: "Low", "Normal", "Medium", and "High" for individual application. QCL is an acronym for QoS Control List.
Page 405
User’s Manual of NS3601-24P/4S Series SAMBA Samba is a program running under UNIX-like operating systems that provides seamless integration between UNIX and Microsoft Windows machines. Samba acts as file and print servers for Microsoft Windows, IBM OS/2, and other SMB client machines. Samba uses the Server Message Block (SMB) protocol and Common Internet File System (CIFS), which is the underlying protocol used in Microsoft Windows networking.
Page 406
User’s Manual of NS3601-24P/4S Series Switch IDs (1-16) are used to uniquely identify the switches within a stack. The Switch ID of each switch is shown on the display on the front of the switch and is used widely in the web pages as well as in the CLI commands. SyncE SyncE Is an abbreviation for Synchronous Ethernet.
Page 407
User’s Manual of NS3601-24P/4S Series UDP is an acronym for User Datagram Protocol. It is a communications protocol that uses the Internet Protocol (IP) to exchange the messages between computers. UDP is an alternative to the Transmission Control Protocol (TCP) that uses the Internet Protocol (IP). Unlike TCP, UDP does not provide the service of dividing a message into packet datagrams, and UDP doesn't provide reassembling and sequencing of the packets.
Page 408
User’s Manual of NS3601-24P/4S Series WiFi WiFi is an acronym for Wireless Fidelity. It is meant to be used generically when referring of any type of 802.11 network, whether 802.11b, 802.11a, dual-band, etc. The term is promulgated by the Wi-Fi Alliance. WPA is an acronym for Wi-Fi Protected Access.
User’s Manual of NS3601-24P/4S Series APPENDIX C: Local User Privilege Level Table GE-DSSG-244 Model GE-DSSG-244-POE NS3601-24P/4S Group Name Master Security User Level Admin Viewer Admin Viewer Admin Viewer Main Function System Information Change Change Change View Only View Only Not Accessable IP Configuration Change Change...
Page 410
User’s Manual of NS3601-24P/4S Series User Name Admin Viewer Admin Viewer Admin Viewer Main Function Port Configuration Change Change Change View Only Not Accessable Not Accessable Port Statistics Overview Change Change Change View Only Not Accessable Not Accessable Port Port Statistics Detail Change Change Change...
Page 411
User’s Manual of NS3601-24P/4S Series Group Name Master Security User Name Admin Viewer Admin Viewer Admin Viewer Main Function Statistics Change Change Change View Only Not Accessable Not Accessable DSCP Remarking Change Change Change View Only Not Accessable Not Accessable Voice VLAN Configuration Change Change...
Page 412
User’s Manual of NS3601-24P/4S Series Group Name Master Security User Name Admin Viewer Admin Viewer Admin Viewer Main Function Dynamic IP Source Guard MAC Address Change Change Change View Only Change View Only Table Table Configuration Change Change Change View Only Change View Only LLDP-MED...
Need help?
Do you have a question about the IFS NS3601-24P and is the answer not in the manual?
Questions and answers