Planet WGSW-20160HP User Manual

Planet WGSW-20160HP User Manual

16-port gigabit 802.3at poe+ 4g tp/sfp combo managed switch
Hide thumbs Also See for WGSW-20160HP:
Table of Contents

Advertisement

User's Manual of WGSW-20160HP
1

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the WGSW-20160HP and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Planet WGSW-20160HP

  • Page 1 User’s Manual of WGSW-20160HP...
  • Page 2: Fcc Warning

    PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their respective owners. Disclaimer PLANET Technology does not warrant that the hardware will work properly in all environments and applications, and makes no warranty and representation, either implied or expressed, with respect to the quality, performance, merchantability, or fitness for a particular purpose.
  • Page 3: Table Of Contents

    User’s Manual of WGSW-20160HP TABLE OF CONETNTS 1. INTRODUTION ........................21 1.1 Packet Contents ............................21 1.2 Product Description ...........................21 1.3 How to Use This Manual ..........................24 1.4 Product Features............................25 1.5 Product Specification ..........................28 2. INSTALLATION ........................31 2.1 Hardware Description ..........................31 2.1.1 Switch Front Panel ..............................31...
  • Page 4 User’s Manual of WGSW-20160HP 4.2.4 Users Configuration .............................54 4.2.5 Privilege Levels ..............................57 4.2.6 NTP Configuration ...............................59 4.2.7 UPnP ...................................60 4.2.8 DHCP Relay ................................61 4.2.9 DHCP Relay Statistics ............................63 4.2.10 CPU Load ................................65 4.2.11 System Log ................................66 4.2.12 Detailed Log ..............................67 4.2.13 Remote Syslog ..............................68...
  • Page 5 User’s Manual of WGSW-20160HP 4.5.4 LACP Port Status...............................105 4.5.5 LACP Port Statistics............................106 4.6 VLAN................................107 4.6.1 VLAN Overview ..............................107 4.6.2 IEEE 802.1Q VLAN ............................108 4.6.3 VLAN Basic Information............................. 111 4.6.4 VLAN Port Configuration ........................... 112 4.6.5 VLAN Membership ............................116 4.6.6 VLAN Membership Status..........................117 4.6.7 VLAN Port Status...............................
  • Page 6 User’s Manual of WGSW-20160HP 4.8.8 MLD Snooping Configuration..........................169 4.8.9 MLD Snooping VLAN Configuration ........................170 4.8.10 MLD Snooping Port Group Filtering.........................172 4.8.11 MLD Snooping Status ............................173 4.8.12 MLD Group Information ...........................174 4.8.13 MLDv2 Information ............................175 4.8.14 MVR (Multicaset VLAN Registration).......................176 4.8.15 MVR Status..............................179 4.8.16 MVR Groups Information ..........................180...
  • Page 7 User’s Manual of WGSW-20160HP 4.11.3 Network Access Server Configuration......................230 4.11.4 Network Access Overview ..........................240 4.11.5 Network Access Statistics ..........................242 4.11.6 Authentication Server Configuration.........................249 4.11.7 RADIUS Overview ............................252 4.11.8 RADIUS Details ...............................254 4.11.9 Windows Platform RADIUS Server Configuration....................261 4.11.10 802.1X Client Configuration ...........................266 4.12 Security ..............................269...
  • Page 8 User’s Manual of WGSW-20160HP 4.15.4 Cable Diagnostics............................315 4.16 Power over Ethernet ..........................317 4.16.1 Power over Ethernet Powered Device ......................317 4.16.2 System Configuration ............................319 4.16.3 Port Configuration............................322 4.16.4 PoE Status...............................324 4.16.5 PoE Schedule..............................325 4.16.6 LLDP PoE Neighbours.............................327 4.16.7 PoE Alvie Check Configuration........................328 4.17 Loop Protection............................330...
  • Page 9 User’s Manual of WGSW-20160HP System Log Server Mode ............................354 System Name..............................354 System Contact ..............................355 System Log Server Address ..........................355 System Location..............................356 System Log Level..............................356 System Timezone..............................357 System Log Lookup.............................357 System Log Clear ..............................358 System Reboot..............................358 System Restore Default............................358 System Load ...............................358 6.2 IP Command..............................359...
  • Page 10 User’s Manual of WGSW-20160HP 6.4 MAC Address Table Command .......................371 MAC Configuration ..............................371 MAC Add ................................371 MAC Delete .................................371 MAC Lookup................................372 MAC Age Time ..............................372 MAC Learning ..............................373 MAC Dump................................373 MAC Statistics ..............................374 MAC Flush................................374 6.5 VLAN Configuration Command ......................375 VLAN Configuration.............................375...
  • Page 11 User’s Manual of WGSW-20160HP Security Switch Privilege Level Configuration .....................387 Security Switch Privilege Level Group.........................387 Security Switch Privilege Level Current.......................387 Security Switch Authentication Configuration ......................388 Security Switch Authentication Method .......................388 Security Switch SSH Configuration ........................389 Security Switch SSH Mode..........................389 Security Switch HTTPs Configuration .........................389 Security Switch HTTPs Mode..........................390...
  • Page 12 User’s Manual of WGSW-20160HP Security Switch SNMP User Add .........................403 Security Switch SNMP User Delete........................403 Security Switch SNMP User Changekey ......................404 Security Switch SNMP User Lookup ........................404 Security Switch SNMP Group Add........................405 Security Switch SNMP Group Delete ........................405 Security Switch SNMP Group Lookup .........................405 Security Switch SNMP View Add.........................406...
  • Page 13 User’s Manual of WGSW-20160HP Security Network NAS EapolTimeout ........................419 Security Network NAS Agetime ...........................420 Security Network NAS Holdtime..........................420 Security Network NAS RADIUS_QoS .........................421 Security Network NAS RADIUS_VLAN .......................421 Security Network NAS Guest_VLAN ........................422 Security Network NAS Authenticate ........................423 Security Network NAS Statistics..........................423 Security Network ACL Configuration ........................423...
  • Page 14 User’s Manual of WGSW-20160HP Security Network ARP Inspection Translation .....................437 Security AAA Configuration ..........................437 Security AAA Timeout ............................437 Security AAA Deadtime ............................438 Security AAA RADIUS ............................438 Security AAA ACCT_RADIUS..........................439 Security AAA TACACS+ ............................439 Security AAA Statistics............................440 6.8 Spanning Tree Protocol Command ......................441 STP Configuration ...............................441...
  • Page 15 User’s Manual of WGSW-20160HP Aggregation Delete..............................452 Aggregation Lookup ............................453 Aggregation Mode ...............................453 6.10 Link Aggregation Control Protocol Command..................454 LACP Configuration.............................454 LACP Mode .................................454 LACP Key................................455 LACP Priority...............................455 LACP System Priority ............................456 LACP Role................................456 LACP Status ................................456 LACP Statistics ..............................457 LACP Timeout ..............................457 6.11 LLDP Command............................458...
  • Page 16 User’s Manual of WGSW-20160HP AF/AT Mode.................................467 PoE Priority .................................468 PoE Mamagement Mode.............................468 PoE Allocated Power ............................468 PoE Power Supply ..............................469 PoE Status................................469 6.14 Quality of Service Command ........................470 QoS Configuration...............................470 QoS Port Classification Class..........................470 QoS Port Classification DPL..........................471 QoS Port Classification PCP ..........................471 QoS Port Classification DEI..........................471...
  • Page 17 User’s Manual of WGSW-20160HP QoS Port Storm Multicast ............................486 QoS Port Storm Broadcast ..........................486 QoS QCL Add..............................487 QoS QCL Delete..............................488 QoS QCL Lookup ..............................488 QoS QCL Status ..............................489 QoS QCL Refresh ...............................489 6.15 Mirror Command ............................490 Mirror Configuration.............................490 Mirror Port ................................490 Mirror Mode .................................491...
  • Page 18 User’s Manual of WGSW-20160HP 6.20 Voice VLAN Command...........................501 Voice VLAN Configuration ...........................501 Voice VLAN Mode ...............................501 Voice VLAN ID..............................502 Voice VLAN Agetime ............................502 Voice VLAN Traffic Class.............................502 Voice VLAN OUI Add............................503 Voice VLAN OUI Delete............................503 Voice VLAN OUI Clear ............................503 Voice VLAN OUI Lookup .............................504...
  • Page 19 User’s Manual of WGSW-20160HP IPMC Status ................................516 IPMC Groups...............................517 IPMC Version ..............................517 IPMC SFM................................517 IPMC Parameter RV............................518 IPMC Parameter QI.............................518 IPMC Parameter QRI ............................519 IPMC Parameter LLQI ............................519 IPMC Parameter URI ............................520 6.23 VLAN Control List Command........................521 VCL MAC-based VLAN Configuration .........................521 VCL MAC-based VLAN Add ..........................521...
  • Page 20 User’s Manual of WGSW-20160HP 7.1 Address Table ............................529 7.2 Learning ..............................529 7.3 Forwarding & Filtering ..........................529 7.4 Store-and-Forward ...........................529 7.5 Auto-Negotiation ............................530 8. Power over Ethernet Overview..................531 9. TROUBLE SHOOTING...................... 533 APPENDEX A: Networking Connection................535 A.1 PoE RJ-45 Port Pin Assignments......................535 A.2 Switch's Data RJ-45 Pin Assignments - 1000Mbps, 1000Base-T ............535...
  • Page 21: Introdution

    16-Port 10/100/1000Mbps 802.3at PoE + 4-Port Gigabit TP / SFP Combo Managed Switch WGSW-20160HP Terms of “Managed Switch” means the Switch mentioned titled in the cover Page of this user’s manual, i.e. WGSW-20160HP. 1.1 Packet Contents Open the box of the Managed Switch and carefully unpack it. The box should contain the following items: Check the contents of your package for following parts: ...
  • Page 22 High-Performance / Cost-effective Gigabit solution for Enterprise backbone and Data Center Networking The WGSW-20160HP is the Layer 2 Managed Gigabit Switch which can handle extremely large amounts of data in a secure topology linking to an Enterprise backbone or high capacity network server with 40Gbps switching fabric. The powerful features of QoS and network security make WGSW-20160HP to offer effective data traffic control for ISPs and Enterprises, such as VoIP, video streaming and multicast applications.
  • Page 23 Powerful Security The WGSW-20160HP offers comprehensive Layer 2 to Layer 4 Access Control List (ACL) for enforcing security to the edge. It can be used to restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or defined typical network applications.
  • Page 24: How To Use This Manual

    User’s Manual of WGSW-20160HP 1.3 How to Use This Manual This User’s Manual is structured as follows: Section 2, INSTALLATION The section explains the functions of the Managed Switch and how to physically install the Managed Switch. Section 3, SWITCH MANAGEMENT The section contains the information about the software function of the Managed Switch.
  • Page 25: Product Features

    User’s Manual of WGSW-20160HP 1.4 Product Features  Physical Port  16-Port 10/100/1000Base-T RJ-45 copper with IEEE 802.3at / 802.3af Power over Ethernet Injector function  4 10/100/1000Mbps TP and SFP shared combo interfaces, SFP(Mini-GBIC) supports 100/1000Mbps Dual mode, shared with Port-17 to Port-20 ...
  • Page 26 User’s Manual of WGSW-20160HP ■ Support Spanning Tree Protocol  STP, IEEE 802.1D Spanning Tree Protocol  RSTP, IEEE 802.1w Rapid Spanning Tree Protocol  MSTP, IEEE 802.1s Multiple Spanning Tree Protocol, spanning tree by VLAN  BPDU Guard ■ Support Link Aggregation ...
  • Page 27 User’s Manual of WGSW-20160HP  IP-Based Access Control List (ACL)  MAC-Based Access Control List  Source MAC / IP address binding  DHCP Snooping to filter untrusted DHCP messages  Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding ...
  • Page 28: Product Specification

    User’s Manual of WGSW-20160HP 1.5 Product Specification Product WGSW-20160HP Hardware Specification 16 10/ 100/1000Base-T RJ-45 Auto-MDI/MDI-X ports Copper Ports 10/100/1000Mbps / SFP Combo 4 10/100/1000Mbps TP and SFP shared combo interfaces, SFP(Mini-GBIC) supports 100/1000Mbps Dual mode, shared with Port-17 to Port-20...
  • Page 29 User’s Manual of WGSW-20160HP Number of PD @ 15.4 Watts Number of PD @ 30.8 Watts Layer 2 Management Function Console, Telnet, Web Browser, SNMP v1, v2c Basic Management Interfaces SSH, SSL, SNMP v3 Secure Management Interfaces Port disable / enable...
  • Page 30 User’s Manual of WGSW-20160HP RFC-2933 IGMP-STD-MIB RFC-3411 SNMP-Frameworks-MIB IEEE 802.1X PAE LLDP MAU-MIB Standards Conformance FCC Part 15 Class A, CE Regulation Compliance IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100Base-FX IEEE 802.3z 1000Base-SX/LX IEEE 802.3ab 1000Base-T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP...
  • Page 31: Installation

    Figure 2-1 shows the front panel of the Managed Switch. WGSW-20160HP Front Panel Figure 2-1: WGSW-20160HP Front Panel ■ Gigabit TP interface 10/100/1000Base-T Copper, RJ-45 Twist-Pair: Up to 100 meters. ■ SFP slots 100/1000Base-X mini-GBIC slot, SFP (Small Factor Pluggable) transceiver module: From 550 meters to 2km (Multi-mode fiber), up to above 10/20/30/40/50/70/120 kilometers (Single-mode fiber).
  • Page 32: Led Indications

    The front panel LEDs indicates instant status of power and system status, fan status, port links / PoE In-Use, data activity; helps monitor and troubleshoot when needed. Figure 2-2 shows the LED indications of the Managed Switch. WGSW-20160HP LED Indication Figure 2-2: WGSW-20160HP LED at Front Panel ■ System Color Function Lights to indicate that the Switch has power.
  • Page 33: Switch Rear Panel

    Figure 2-3 shows the rear panel of the Managed Switch. WGSW-20160HP Rear Panel Figure 2-3: Rear Panel of WGSW-20160HP ■ AC Power Receptacle For compatibility with electric service in most areas of the world, the Managed Switch’s power supply automatically adjusts to line power in the range 100-240V AC and 50/60 Hz.
  • Page 34: Install The Switch

    User’s Manual of WGSW-20160HP 2.2 Install the Switch This section describes how to install your Managed Switch and make connections to the Managed Switch. Please read the following topics and perform the procedures in the order being presented. To install your Managed Switch on a desktop or shelf, simply complete the following steps.
  • Page 35: Rack Mounting

    User’s Manual of WGSW-20160HP Supply power to the Managed Switch. Step5: Connect one end of the power cable to the Managed Switch. Connect the power plug of the power cable to a standard wall outlet. When the Managed Switch receives power, the Power LED should remain solid Green.
  • Page 36: Installing The Sfp Transceiver

    User’s Manual of WGSW-20160HP Figure 2-6: Mounting Managed Switch in a Rack Proceeds with the steps 4 and steps 5 of session 2.2.1 Desktop Installation to connect the network cabling and supply Step6: power to the Managed Switch. 2.2.3 Installing the SFP Transceiver The sections describe how to insert an SFP transceiver into an SFP slot.
  • Page 37 User’s Manual of WGSW-20160HP  Approved PLANET SFP Transceivers PLANET Managed Switch supports both Single mode and Multi-mode SFP transceiver. The following list of approved PLANET SFP transceivers is correct at the time of publication: Gigabit SFP Transceiver Modules ...
  • Page 38 User’s Manual of WGSW-20160HP  Connect the Fiber Cable Attach the duplex LC connector on the network cable into the SFP transceiver. Connect the other end of the cable to a device – switches with SFP installed, fiber NIC on a workstation or a Media Converter.
  • Page 39: Switch Management

    User’s Manual of WGSW-20160HP 3. SWITCH MANAGEMENT This chapter explains the methods that you can use to configure management access to the Managed Switch. It describes the types of management applications and the communication and management protocols that deliver data between your management device (workstation or personal computer) and the system.
  • Page 40: Management Access Overview

    User’s Manual of WGSW-20160HP 3.2 Management Access Overview The Managed Switch gives you the flexibility to access and manage it using any or all of the following methods:  An administration console  Web browser interface  An external SNMP-based network management application The administration console and Web browser interface support are embedded in the Managed Switch software and are available for immediate use.
  • Page 41 User’s Manual of WGSW-20160HP Figure 3-1: Console Management Direct Access Direct access to the administration console is achieved by directly connecting a terminal or a PC equipped with a terminal-emulation program (such as HyperTerminal) to the Managed Switch console (serial) port.
  • Page 42: Web Management

    User’s Manual of WGSW-20160HP 3.4 Web Management The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer. After you set up your IP address for the switch, you can access the Managed Switch's Web interface applications directly in your Web browser by entering the IP address of the Managed Switch.
  • Page 43: Snmp-Based Network Management

    User’s Manual of WGSW-20160HP 3.5 SNMP-Based Network Management You can use an external SNMP-based application to configure and manage the Managed Switch, such as SNMPc Network Manager, HP Openview Network Node Management (NNM) or What’s Up Gold. This management method requires the SNMP agent on the switch and the SNMP Network Management Station to use the same community string.
  • Page 44 User’s Manual of WGSW-20160HP If there are two LAN cards or above in the same administrator PC, choose different LAN card by use the “Select Adapter” tool. 3. Press “Refresh” button for list current connected devices in the discovery list, the screen is shown as follow.
  • Page 45: Web Configuration

    User’s Manual of WGSW-20160HP 4. WEB CONFIGURATION This section introduces the configuration and functions of the Web-Based management from Managed Switch. About Web-based Management The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer.
  • Page 46 User’s Manual of WGSW-20160HP  Logging on the Managed Switch Use Internet Explorer 7.0 or above Web browser. Enter the factory-default IP address to access the Web interface. The factory-default IP Address as following: http://192.168.0.100 When the following login screen appears, please enter the default username "admin" with password “admin” (or the username/password you have changed via console) to login the main screen of Managed Switch.
  • Page 47 User’s Manual of WGSW-20160HP Figure 4-1-3: Web Main Page Now, you can use the Web management interface to continue the switch management or manage the Managed Switch by Web interface. The Switch Menu on the left of the web Page let you access all the commands and statistics the Managed Switch provides.
  • Page 48: Main Web Page

    User’s Manual of WGSW-20160HP 4.1 Main Web Page The Managed Switch provides a Web-based browser interface for configuring and managing it. This interface allows you to access the Managed Switch using the Web browser of your choice. This chapter describes how to use the Managed Switch’s Web browser interface to configure and manage it.
  • Page 49 User’s Manual of WGSW-20160HP Figure 4-1-5: Managed Switch Main Functions Menu...
  • Page 50: System

    User’s Manual of WGSW-20160HP 4.2 System Use the System menu items to display and configure basic administrative details of the Managed Switch. Under System the following topics are provided to configure and view the system information: This section has the following items: The Managed Switch system information is provided here.
  • Page 51: System Information

    User’s Manual of WGSW-20160HP 4.2.1 System Information The System Infomation Page provides information for the current device information. System Information Page helps a switch administrator to identify the hardware MAC address, software version and system uptime. The screen in Figure 4-2-1 appears.
  • Page 52: Ip Configuration

    User’s Manual of WGSW-20160HP 4.2.2 IP Configuration The IP Configuration includes the IP Address, Subnet Mask and Gateway. The Configured column is used to view or change the IP configuration. Fill up the IP Address, Subnet Mask and Gateway for the device. The screen in Figure 4-2-2 appears.
  • Page 53: Ipv6 Configuration

    User’s Manual of WGSW-20160HP Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. : Click to renew DHCP. This button is only available if DHCP is enabled. 4.2.3 IPv6 Configuration Configure the switch-managed IPv6 information on this Page.
  • Page 54: Users Configuration

    User’s Manual of WGSW-20160HP 128-bit records represented as eight fields of up to four hexadecimal digits with a colon separates each field (:). For example, 'fe80::215:c5ff:fe03:4dc7'. The symbol '::' is a special syntax that can be used as a shorthand way of representing multiple 16-bit groups of contiguous zeros;...
  • Page 55 User’s Manual of WGSW-20160HP device. But others value need to refer to each group privilege level. User's privilege should be same or greater than the group privilege level to have the access of that group. By default setting, most groups privilege level 5 has the read-only access and privilege level 10 has the read-write access.
  • Page 56 User’s Manual of WGSW-20160HP system maintenance (software upload, factory defaults and etc.) need user privilege level 15. Generally, the privilege level 15 can be used for an administrator account, privilege level 10 for a standard user account and privilege level 5 for a guest account.
  • Page 57: Privilege Levels

    User’s Manual of WGSW-20160HP 4.2.5 Privilege Levels This Page provides an overview of the privilege levels. After setup completed, please press “Save” button to take effect. Please login web interface with new user name and password, the screen in Figure 4-2-7 appears.
  • Page 58 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Group Name The name identifying the privilege group. In most cases, a privilege level group consists of a single module (e.g. LACP, RSTP or QoS), but a few of them contains more than one.
  • Page 59: Ntp Configuration

    User’s Manual of WGSW-20160HP 4.2.6 NTP Configuration Configure NTP on this Page. NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks of computer systems. NTP uses UDP (data grams) as transport layer. You can specify NTP Servers and set GMT Time zone. The...
  • Page 60: Upnp

    User’s Manual of WGSW-20160HP 4.2.7 UPnP Configure UPnP on this Page. UPnP is an acronym for Universal Plug and Play. The goals of UPnP are to allow devices to connect seamlessly and to simplify the implementation of networks in the home (data sharing, communications, and entertainment) and in corporate environments for simplified installation of computer components.
  • Page 61: Dhcp Relay

    User’s Manual of WGSW-20160HP Figure 4-2-10: UPnP devices shows on Windows My Network Places 4.2.8 DHCP Relay Configure DHCP Relay on this Page. DHCP Relay is used to forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain.
  • Page 62 User’s Manual of WGSW-20160HP The Remote ID is 6 bytes in length, and the value is equal the DHCP relay agent’s MAC address. The DHCP Relay Configuration screen in Figure 4-2-11 appears. Figure 4-2-11 DHCP Relay Configuration Page Screenshot The Page includes the following fields:...
  • Page 63: Dhcp Relay Statistics

    User’s Manual of WGSW-20160HP  Drop: Drop the package when receive a DHCP message that already contains relay information. Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.2.9 DHCP Relay Statistics This Page provides statistics for DHCP relay.
  • Page 64 User’s Manual of WGSW-20160HP Client Statistics Object Description  Transmit to Client The packets number that relayed packets from server to client.  Transmit Error The packets number that error sending packets to servers.  Receive from Client The packets number that received packets from server.
  • Page 65: Cpu Load

    User’s Manual of WGSW-20160HP 4.2.10 CPU Load This Page displays the CPU load, using a SVG graph. The load is measured as averaged over the last 100ms, 1sec and 10 seconds intervals. The last 120 samles are graphed, and the last numbers are displayed as text as well.
  • Page 66: System Log

    User’s Manual of WGSW-20160HP 4.2.11 System Log The Managed Switch system log information is provided here. The System Log screen in Figure 4-2-14 appears. Figure 4-2-14: System Log Page Screenshot The Page includes the following fields: Object Description  ID The ID (>= 1) of the system log entry.
  • Page 67: Detailed Log

    User’s Manual of WGSW-20160HP : Updates the system log entries, starting from the first available entry ID. : Updates the system log entries, ending at the last entry currently displayed. : Updates the system log entries, starting from the last entry currently displayed.
  • Page 68: Remote Syslog

    User’s Manual of WGSW-20160HP 4.2.13 Remote Syslog Configure remote syslog on this Page. The Remote Syslog screen in Figure 4-2-16 appears. Figure 4-2-16: Remote Syslog Page Screenshot The Page includes the following fields: Object Description  Mode Indicates the server mode operation. When the mode operation is enabled, the syslog message will send out to syslog server.
  • Page 69: Smtp Configuration

    User’s Manual of WGSW-20160HP 4.2.14 SMTP Configuration This Page facilitates a SMTP Configure the switch. The SMTP Configure screen in Figure 4-2-17 appears. Figure 4-2-17: SMTP Configuration Page Screenshot The Page includes the following fields: Object Description  SMTP Mode Controls whether SMTP is enabled on this switch.
  • Page 70: Web Firmware Upgrade

    User’s Manual of WGSW-20160HP 4.2.15 Web Firmware Upgrade This Page facilitates an update of the firmware controlling the switch. The Web Firmware Upgrade screen in Figure 4-2-18 appears. Figure 4-2-18: Web Firmware Upgrade Page Screenshot To open Firmware Upgrade screen perform the folling: Click System ->...
  • Page 71: Tftp Firmware Upgrade

    User’s Manual of WGSW-20160HP 4.2.16 TFTP Firmware Upgrade The Firmware Upgrade Page provides the functions to allow a user to update the Managed Switch firmware from the TFTP server in the network. Before updating, make sure you have your TFTP server ready and the firmware image is on the TFTP server.
  • Page 72 User’s Manual of WGSW-20160HP Figure 4-2-21: Configuration Save Page Screenshot You can save/view or load the switch configuration. The configuration file is in XML format with a hierarchy of tags: <?xml version="1.0"?> and <configuration>. These tags are mandatory and must be present Header tags: at the beginning of the file.
  • Page 73 User’s Manual of WGSW-20160HP Figure 4-2-22: File Download Screen Chose the file save path in management workstation. Figure 4-2-23: File Save Screen...
  • Page 74: Configuration Upload

    User’s Manual of WGSW-20160HP 4.2.18 Configuration Upload This function allows backup and reload the current configuration of the Managed Switch to the local management station. The Configuration Upload screen in Figure 4-2-24 appears. Figure 4-2-24: Configuration Upload Page Screenshot ...
  • Page 75: Image Select

    User’s Manual of WGSW-20160HP 4.2.19 Image Select This Page provides information about the active and alternate (backup) firmware images in the device, and allows you to revert to the alternate image. The web Page displays two tables with information about the active and alternate firmware images. The...
  • Page 76: Factory Default

    User’s Manual of WGSW-20160HP 4.2.20 Factory Default You can reset the configuration of the Managed Switch on this Page. Only the IP configuration is retained. The new configuration is available immediately, which means that no restart is necessary. The Factory Default screen in Figure 4-2-27 appears.
  • Page 77: System Reboot

    User’s Manual of WGSW-20160HP 4.2.21 System Reboot The Reboot Page enables the device to be rebooted from a remote location. Once the Reboot button is pressed, user have to re-login the WEB interface about 60 seconds later, the System Reboot screen in Figure 4-2-28 appears.
  • Page 78: Simple Network Management Protocol

    User’s Manual of WGSW-20160HP 4.3 Simple Network Management Protocol 4.3.1 SNMP Overview The Simple Network Management Protocol (SNMP) is an application layer protocol that facilitates the exchange of management information between network devices. It is part of the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol suite.
  • Page 79: Snmp System Configuration

    User’s Manual of WGSW-20160HP  Configure SNMPv3 communities table on this Page. SNMPv3 Communities  Configure SNMPv3 users table on this Page. SNMPv3 Users  Configure SNMPv3 groups table on this Page. SNMPv3 Groups  Configure SNMPv3 views table on this Page.
  • Page 80: Snmp Trap Configuration

    User’s Manual of WGSW-20160HP characters from 33 to 126. The field is applicable only when SNMP version is SNMPv1 or SNMPv2c. If SNMP version is SNMPv3, the community string will be associated with SNMPv3 communities table. It provides more flexibility to configure security name than a SNMPv1 or SNMPv2c community string.
  • Page 81 User’s Manual of WGSW-20160HP  Indicates the community access string when send SNMP trap packet. The Trap Community allowed string length is 0 to 255, and the allowed content is the ASCII characters from 33 to 126.  Indicates the SNMP trap destination address. It allow a valid IP address in dotted Trap Destination decimal notation ('x.y.z.w').
  • Page 82: Snmp System Information

    User’s Manual of WGSW-20160HP between 10 and 64, but all-zeros and all-'F's are not allowed.  Trap Security Name Indicates the SNMP trap security name. SNMPv3 traps and informs using USM for authentication and privacy. A unique security name is needed when traps and informs are enabled.
  • Page 83: Snmpv3 Configuration

    User’s Manual of WGSW-20160HP Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.3.5 SNMPv3 Configuration 4.3.5.1 SNMPv3 Communities Configure SNMPv3 communities table on this Page. The entry index key is Community. The SNMPv3 Communities screen in Figure 4-3-4 appears.
  • Page 84: Snmpv3 Users

    User’s Manual of WGSW-20160HP 4.3.5.2 SNMPv3 Users Configure SNMPv3 users table on this Page. The entry index keys are Engine ID and User Name. The SNMPv3 Users screen Figure 4-3-5 appears. Figure 4-3-5: SNMPv3 Users Configuration Page Screenshot The Page includes the following fields:...
  • Page 85: Snmpv3 Groups

    User’s Manual of WGSW-20160HP protocol.  SHA: An optional flag to indicate that this user using SHA authentication protocol.  The value of security level cannot be modified if entry already exist. That means must first ensure that the value is set correctly.
  • Page 86: Snmpv3 Views

    User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Check to delete the entry. It will be deleted during the next save. Delete  Indicates the security model that this entry should belong to. Possible security...
  • Page 87: Snmpv3 Access

    User’s Manual of WGSW-20160HP string length is 1 to 32, and the allowed content is the ASCII characters from 33 to 126.  Indicates the view type that this entry should belong to. Possible view type are: View Type ...
  • Page 88 User’s Manual of WGSW-20160HP  Indicates the security model that this entry should belong to. Possible security Security Model models are:  any: Accepted any security model (v1|v2c|usm).  v1: Reserved for SNMPv1.  v2c: Reserved for SNMPv2c.  usm: User-based Security Model (USM) ...
  • Page 89: Port Management

    User’s Manual of WGSW-20160HP 4.4 Port Management Use the Port Menu to display or configure the Managed Switch's ports. This section has the following items:  Configures port connection settings Port Configuration  Lists Ethernet and RMON port statistics Port Statistics Overview ...
  • Page 90 User’s Manual of WGSW-20160HP red that it is down.  Provides the current link speed of the port. Current Link Speed  Select any available link speed for the given switch port. Draw the menu bar to Configured Link Speed select the mode.
  • Page 91: Port Statistics Overview

    User’s Manual of WGSW-20160HP Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. : Click to refresh the Page. Any changes made locally will be undone. 4.4.2 Port Statistics Overview This Page provides an overview of general traffic statistics for all switch ports.
  • Page 92: Port Statistics Detail

    User’s Manual of WGSW-20160HP Buttons : Click to refresh the Page immediately. : Clears the counters for all ports. Auto-refresh : Check this box to enable an automatic refresh of the Page at regular intervals. 4.4.3 Port Statistics Detail This Page provides detailed traffic statistics for a specific switch port. Use the port select box to select which switch port details to display.
  • Page 93 User’s Manual of WGSW-20160HP excludes framing bits.  The number of received and transmitted (good and bad) unicast packets. Rx and Tx Unicast  The number of received and transmitted (good and bad) multicast packets. Rx and Tx Multicast ...
  • Page 94: Sfp Information

    User’s Manual of WGSW-20160HP Transmit Error Counters Object Description  The number of frames dropped due to output buffer congestion. Tx Drops  The number of frames dropped due to excessive or late collisions. Tx Late/Exc. Coll. Buttons : Click to refresh the Page immediately.
  • Page 95: Port Mirror

    User’s Manual of WGSW-20160HP  Wave Length(nm) Display the wavelength of current SFP module, the wavelength value is get from the SFP module. Use this column to check if the wavelength values of two nodes are the matched while the fiber connection is failed.
  • Page 96 User’s Manual of WGSW-20160HP The traffic to be copied to the mirror port is selected as follows:  All frames received on a given port (also known as ingress or source mirroring).  All frames transmitted on a given port (also known as egress or destination mirroring).
  • Page 97 User’s Manual of WGSW-20160HP Tx only: Frames transmitted from this port are mirrored to the mirroring port. Frames received are not mirrored. Disabled: Neither frames transmitted or frames received are mirrored. Both: Frames received and frames transmitted are mirrored to the mirror port.
  • Page 98: Link Aggregation

    User’s Manual of WGSW-20160HP 4.5 Link Aggregation Port Aggregation optimizes port usage by linking a group of ports together to form a single Link Aggregated Groups (LAGs). Port Aggregation multiplies the bandwidth between the devices, increases port flexibility, and provides link redundancy.
  • Page 99 User’s Manual of WGSW-20160HP The Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Partner Systems that require high speed redundant links. Link aggregation lets you group up to eight consecutive ports into a single dedicated connection. This feature can expand bandwidth to a device on the network. LACP operation requires full-duplex mode, more detail information refer to the IEEE 802.3ad standard.
  • Page 100: Static Aggregation

    User’s Manual of WGSW-20160HP 4.5.1 Static Aggregation This Page is used to configure the Aggregation hash mode and the aggregation group. The aggregation hash mode settings are global, whereas the aggregation group relate to the currently selected stack unit, as reflected by the Page header.
  • Page 101 User’s Manual of WGSW-20160HP Figure 4-5-3: Aggregation Group Configuration Page Screenshot The Page includes the following fields: .Object Description  Indicates the group ID for the settings contained in the same row. Group ID Group ID "Normal" indicates there is no aggregation. Only one group ID is valid per port.
  • Page 102: Lacp Configuration

    User’s Manual of WGSW-20160HP 4.5.2 LACP Configuration Link Aggregation Control Protocol (LACP) - LACP LAG negotiate Aggregated Port links with other LACP ports located on a different device. LACP allows switches connected to each other to discover automatically whether any ports are member of the same LAG.
  • Page 103 User’s Manual of WGSW-20160HP  The Key value incurred by the port, range 1-65535 . The Auto setting will set the key as appropriate by the physical link speed, 10Mb = 1, 100Mb = 2, 1Gb = 3. Using the Specific setting, a user-defined value can be entered. Ports with the same Key value can participate in the same aggregation group, while ports with different keys cannot.
  • Page 104: Lacp System Status

    User’s Manual of WGSW-20160HP 4.5.3 LACP System Status This Page provides a status overview for all LACP instances. The LACP Status Page display the current LACP aggregation Groups and LACP Port status. The LACP System Status screen in Figure 4-5-5 appears.
  • Page 105: Lacp Port Status

    User’s Manual of WGSW-20160HP 4.5.4 LACP Port Status This Page provides a status overview for LACP status for all ports. The LACP Port Status screen in Figure 4-5-6 appears. Figure 4-5-6: LACP Status Page Screenshot The Page includes the following fields:...
  • Page 106: Lacp Port Statistics

    User’s Manual of WGSW-20160HP Buttons : Click to refresh the Page immediately. Auto-refresh : Automatic refresh occurs every 3 seconds. 4.5.5 LACP Port Statistics This Page provides an overview for LACP statistics for all ports. The LACP Port Statistics screen in Figure 4-5-7 appears.
  • Page 107: Vlan

    User’s Manual of WGSW-20160HP 4.6 VLAN 4.6.1 VLAN Overview A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. VLAN can be used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN.
  • Page 108: Ieee 802.1Q Vlan

    User’s Manual of WGSW-20160HP 4.6.2 IEEE 802.1Q VLAN In large networks, routers are used to isolate broadcast traffic for each subnet into separate domains. This Managed Switch provides a similar service at Layer 2 by using VLANs to organize any group of network nodes into separate broadcast domains.
  • Page 109 User’s Manual of WGSW-20160HP ■ 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the Ether Type field. When a packet's Ether Type field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
  • Page 110 User’s Manual of WGSW-20160HP Every physical port on a switch has a PVID. 802.1Q ports are also assigned a PVID, for use within the switch. If no VLAN are defined on the switch, all ports are then assigned to a default VLAN with a PVID equal to 1. Untagged packets are assigned the PVID of the port on which they were received.
  • Page 111: Vlan Basic Information

    User’s Manual of WGSW-20160HP ■ Port Overlapping Port overlapping can be used to allow access to commonly shared network resources among different VLAN groups, such as file servers or printers. Note that if you implement VLANs which do not overlap, but still need to communicate, you can connect them by enabled routing on this switch.
  • Page 112: Vlan Port Configuration

    User’s Manual of WGSW-20160HP 4.6.4 VLAN Port Configuration This Page is used for configuring the Managed Switch port VLAN. The VLAN per Port Configuration Page contains fields for managing ports that are part of a VLAN. The port default VLAN ID (PVID) is configured on the VLAN Port Configuration Page.
  • Page 113 User’s Manual of WGSW-20160HP The Managed Switch supports multiple VLAN tags and can therefore be used in MAN applications as a provider bridge, aggregating traffic from numerous independent customer LANs into the MAN (Metro Access Network) space. One of the purposes of the provider bridge is to recognize and use VLAN tags so that the VLANs in the MAN space can be used independent of the customers’...
  • Page 114 User’s Manual of WGSW-20160HP VLAN Port Configuration The VLAN Port Configuration screen in Figure 4-6-2 appears. Figure 4-6-2 : VLAN Port Configuration Page Screenshot The Page includes the following fields: Object Description  This is the logical port number for this row.
  • Page 115 User’s Manual of WGSW-20160HP frames, untagged frames received on the port are discarded. By default, the field is set to All.  Allow 802.1Q Untagged or Tagged VLAN for selected port. Link Type When adding a VLAN to selected port, it tells the switch whether to keep or remove the tag from a frame on egress.
  • Page 116: Vlan Membership

    User’s Manual of WGSW-20160HP 4.6.5 VLAN Membership  Adding Static Members to VLANs (VLAN Index) Use the VLAN Static Table to configure port members for the selected VLAN index. The VLAN membership configuration for the selected stack switch / unit switch can be monitored and modified here. Up to 255 VLANs are supported. This Page allows for adding and deleting VLANs as well as adding and deleting port members of each VLAN.
  • Page 117: Vlan Membership Status

    User’s Manual of WGSW-20160HP Buttons : Click to add new VLAN. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. : Refreshes the displayed table starting from the "VLAN ID" input fields.
  • Page 118 User’s Manual of WGSW-20160HP typically originating from IP phones. - MVR : MVR is used to eliminate the need to duplicate multicast traffic for subscribers in each VLAN. Multicast traffic for all channels is sent only on a single (multicast) VLAN.
  • Page 119: Vlan Port Status

    User’s Manual of WGSW-20160HP 4.6.7 VLAN Port Status This Page provides VLAN Port Staus. The VLAN Port Status screen in Figure 4-6-5 appears. Figure 4-6-5: VLAN Port Status for Static User Page Screenshot The Page includes the following fields: Object Description ...
  • Page 120: Private Vlan

    User’s Manual of WGSW-20160HP  Tx Tag Shows egress filtering frame status whether tagged or untagged.  UVID Shows UVID (untagged VLAN ID). Port's UVID determines the packet's behavior at the egress side.  Conflicts Shows status of Conflicts whether exists or Not. When a Volatile VLAN User...
  • Page 121 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Delete To delete a private VLAN entry, check this box. The entry will be deleted during the next save.  Private VLAN ID Indicates the ID of this particular private VLAN.
  • Page 122: Port Isolation

    User’s Manual of WGSW-20160HP 4.6.9 Port Isolation Overview When a VLAN is configured to be a private VLAN, communication between ports within that VLAN can be prevented. Two application examples are provided in this section:  Customers connected to an ISP can be members of the same VLAN, but they are not allowed to communicate with each other within that VLAN.
  • Page 123 User’s Manual of WGSW-20160HP The configuration of promiscuous and isolated ports applies to all private VLANs. When traffic comes in on a promiscuous port in a private VLAN, the VLAN mask from the VLAN table is applied. When traffic comes in on an isolated port, the private VLAN mask is applied in addition to the VLAN mask from the VLAN table.
  • Page 124: Vlan Setting Example

    User’s Manual of WGSW-20160HP 4.6.10 VLAN setting example:  Separate VLAN  802.1Q VLAN Trunk  Port Isolate 4.6.10.1 Two separate 802.1Q VLAN The diagram shows how the Managed Switch handle Tagged and Untagged traffic flow for two VLANs. VLAN Group 2 and VLAN Group 3 are separated VLAN.
  • Page 125 User’s Manual of WGSW-20160HP [PC-4],[PC-5] and [PC-6] received no packet. While the packet leaves Port-2, it will be stripped away it tag becoming an untagged packet. While the packet leaves Port-3, it will keep as a tagged packet with VLAN Tag=2.
  • Page 126 User’s Manual of WGSW-20160HP Figure 4-6-9: Add New VLAN Group, assign VLAN Members for VLAN 2 and VLAN 3 and Remove Specify Ports from VLAN 1 Member It’s import to remove the VLAN members from VLAN 1 configuration. Or the ports would become overlap setting.
  • Page 127: Vlan Trunking Between Two 802.1Q Aware Switch

    User’s Manual of WGSW-20160HP 4.6.10.2 VLAN Trunking between two 802.1Q aware switch The most cases are used for “Uplink” to other switches. VLANs are separated at different switches, but they need to access with other switches within the same VLAN group. The screen in Figure 4-6-11 appears.
  • Page 128 User’s Manual of WGSW-20160HP Specify Port-8 to be the 802.1Q VLAN Trunk port. Assign Port-8 to both VLAN 2 and VLAN 3 at the VLAN Member configuration Page. Define a VLAN 1 as a “Public Area” that overlapping with both VLAN 2 members and VLAN 3 members.
  • Page 129: Port Isolate

    User’s Manual of WGSW-20160HP 4.6.10.3 Port Isolate The diagram shows how the Managed Switch handles isolate and promiscuous ports, and the each PCs are not able to access each other PCs of each isolate port. But they all need to access with the same server/AP/Printer. The screen in Figure 4-6-14 appears.
  • Page 130: Mac-Based Vlan

    User’s Manual of WGSW-20160HP Figure 4-6-16: Private VLAN Port Setting 4.6.11 MAC-based VLAN The MAC-based VLAN enties can be configured here. This Page allows for adding and deleting MAC-based VLAN entries and assigning the entries to different ports. This Page shows only static entries. The MAC-based VLAN screen in Figure 4-6-17 appears.
  • Page 131: Mac-Based Vlan Status

    User’s Manual of WGSW-20160HP The MAC-based VLAN entry is enabled when you click on "Save". A MAC-based VLAN without any port members will be deleted when you click "Save". The “Delete” button can be used to undo the addition of new MAC-based VLANs.
  • Page 132: Ip Subnet-Based Vlan

    User’s Manual of WGSW-20160HP 4.6.13 IP Subnet-based VLAN The IP subnet-based VLAN enties can be configured here. This Page allows for adding, updating and deleting IP subnet-based VLAN entries and assigning the entries to different ports. This Page shows only static entries. The IP-based VLAN screen in Figure 4-6-19 appears.
  • Page 133: Protocol-Based Vlan

    User’s Manual of WGSW-20160HP Buttons : Click to add a new entry in mapping table. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Auto-refresh : Check this box to refresh the Page automatically. Automatic refresh occurs every 3 seconds.
  • Page 134 User’s Manual of WGSW-20160HP 0x0600-0xffff For LLC: Valid value in this case is comprised of two different sub-values. a. DSAP: 1-byte long string (0x00-0xff) b. SSAP: 1-byte long string (0x00-0xff) For SNAP: Valid value in this case also is comprised of two different sub-values.
  • Page 135: Protocol-Based Vlan Membership

    User’s Manual of WGSW-20160HP 4.6.15 Protocol-based VLAN Membership This Page allows you to map a already configured Group Name to a VLAN for the switch. The Group Name to VLAN Mapping Table screen in Figure 4-6-21 appears. Figure 4-6-21: Group Name to VLAN Mapping Table Page Screenshot...
  • Page 136: Spanning Tree Protocol

    User’s Manual of WGSW-20160HP 4.7 Spanning Tree Protocol 4.7.1 Theory The Spanning Tree protocol can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices in your network to ensure that only one route exists between any two stations on the network, and provide backup links which automatically take over when a primary link goes down.
  • Page 137 User’s Manual of WGSW-20160HP The switch sends BPDUs to communicate and construct the spanning-tree topology. All switches connected to the LAN on which the packet is transmitted will receive the BPDU. BPDUs are not directly forwarded by the switch, but the receiving switch uses the information in the frame to calculate a BPDU, and, if the topology changes, initiates a BPDU transmission.
  • Page 138 User’s Manual of WGSW-20160HP Figure 4-7-1: STP Port State Transitions You can modify each port state by using management software. When you enable STP, every port on every switch in the network goes through the blocking state and then transitions through the states of listening and learning at power up. If properly configured, each port stabilizes to the forwarding or blocking state.
  • Page 139 User’s Manual of WGSW-20160HP The following are the user-configurable STP parameters for the switch level: Parameter Description Default Value A combination of the User-set priority and 32768 + MAC Bridge Identifier(Not user the switch’s MAC address. configurable The Bridge Identifier consists of two parts:...
  • Page 140 User’s Manual of WGSW-20160HP User-Changeable STA Parameters The Switch’s factory default setting should cover the majority of installations. However, it is advisable to keep the default settings as set at the factory; unless, it is absolutely necessary. The user changeable parameters in the Switch are as follows: Priority –...
  • Page 141 User’s Manual of WGSW-20160HP Figure 4-7-2: Before Applying the STA Rules In this example, only the default STP values are used. Figure 4-7-3: After Applying the STA Rules...
  • Page 142: Stp System Configuration

    User’s Manual of WGSW-20160HP The switch with the lowest Bridge ID (switch C) was elected the root bridge, and the ports were selected to give a high port cost between switches B and C. The two (optional) Gigabit ports (default port cost = 20,000) on switch A are connected to one (optional) Gigabit port on both switch B and C.
  • Page 143 User’s Manual of WGSW-20160HP The Page includes the following fields: Basic Settings Object Description  The STP protocol version setting. Valid values are STP, RSTP and MSTP. Protocol Version  Bridge Priority Controls the bridge priority. Lower numeric values have better priority. The bridge priority plus the MSTI instance number, concatenated with the 6-byte MAC address of the switch forms a Bridge Identifier.
  • Page 144: Bridge Status

    User’s Manual of WGSW-20160HP reboot.  The time that has to pass before a port in the error-disabled state can be Port Error Recovery enabled. Valid values are between 30 and 86400 seconds (24 hours). Timeout The Managed Switch implement the Rapid Spanning Protocol as the default spanning tree protocol.
  • Page 145: Cist Port Configuration

    User’s Manual of WGSW-20160HP Buttons Auto-refresh : Check this box to refresh the Page automatically. Automatic refresh occurs every 3 seconds. : Click to refresh the Page immediately. 4.7.4 CIST Port Configuration This Page allows the user to inspect the current STP CIST port configurations, and possibly change them as well. The CIST...
  • Page 146 User’s Manual of WGSW-20160HP as appropriate by the physical link speed, using the 802.1D recommended values. Using the Specific setting, a user-defined value can be entered. The path cost is used when establishing the active topology of the network. Lower path cost ports are chosen as forwarding ports in favor of higher path cost ports.
  • Page 147 User’s Manual of WGSW-20160HP Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. By default, the system automatically detects the speed and duplex mode used on each port, and configures the path cost according to the values shown below.
  • Page 148: Msti Priorities

    User’s Manual of WGSW-20160HP 4.7.5 MSTI Priorities This Page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. The MSTI Priority screen in Figure 4-7-7 appears. Figure 4-7-7: MSTI Priority Page Screenshot...
  • Page 149: Msti Configuration

    User’s Manual of WGSW-20160HP 4.7.6 MSTI Configuration This Page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. The MSTI Configuration screen in Figure 4-7-8 appears. Figure 4-7-8: MSTI Configuration Page Screenshot...
  • Page 150 User’s Manual of WGSW-20160HP The Page includes the following fields: Configuration Identification Object Description  Configuration Name The name identifiying the VLAN to MSTI mapping. Bridges must share the name and revision (see below), as well as the VLAN-to-MSTI mapping configuration in order to share spanning trees for MSTI's.
  • Page 151: Msti Ports Configuration

    User’s Manual of WGSW-20160HP 4.7.7 MSTI Ports Configuration This Page allows the user to inspect the current STP MSTI port configurations, and possibly change them as well. A MSTI port is a virtual port, which is instantiated separately for each active CIST (physical) port for each MSTI instance configured and applicable for the port.
  • Page 152 User’s Manual of WGSW-20160HP Figure 4-7-10 : MST1 MSTI Port Configuration Page Screenshot The Page includes the following fields: MSTx MSTI Port Configuration Object Description  Port The switch port number of the corresponding STP CIST (and MSTI) port.  Path Cost Controls the path cost incurred by the port.
  • Page 153: Port Status

    User’s Manual of WGSW-20160HP values are in the range 1 to 200000000.  Priority Controls the port priority. This can be used to control priority of ports having identical port cost. Buttons : Click to set MSTx configuration : Click to save changes.
  • Page 154 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  The switch port number of the logical STP port. Port  The current STP port role of the ICST port. The port role can be one of the...
  • Page 155: Port Statistics

    User’s Manual of WGSW-20160HP 4.7.9 Port Statistics This Page displays the STP port statistics counters for port physical ports in the currently selected switch. The STP Port Statistics screen in Figure 4-7-12 appears. Figure 4-7-12: STP Statistics Page Screenshot The Page includes the following fields:...
  • Page 156: Multicast

    User’s Manual of WGSW-20160HP 4.8 Multicast 4.8.1 IGMP Snooping The Internet Group Management Protocol (IGMP) lets host and routers share information about multicast groups memberships. IGMP snooping is a switch feature that monitors the exchange of IGMP messages and copies them to the CPU for feature processing.
  • Page 157 User’s Manual of WGSW-20160HP Figure 4-8-2: Multicast Flooding Figure 4-8-3: IGMP Snooping Multicast Stream Control...
  • Page 158 User’s Manual of WGSW-20160HP IGMP Versions 1 and 2 Multicast groups allow members to join or leave at any time. IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group. IGMP version 1 is defined in RFC 1112. It has a fixed packet size and no optional data.
  • Page 159 User’s Manual of WGSW-20160HP message, and query messages that are specific to a given group. The states a computer will go through to join or to leave a multicast group are shown below: Figure 4-8-4: IGMP State Transitions  IGMP Querier –...
  • Page 160: Igmp Snooping Configuration

    User’s Manual of WGSW-20160HP 4.8.2 IGMP Snooping Configuration This Page provides IGMP Snooping related configuration. The IGMP Snooping Configuration screen in Figure 4-8-5 appears. Figure 4-8-5: IGMP Snooping Configuration Page Screenshot The Page includes the following fields: Object Description ...
  • Page 161 User’s Manual of WGSW-20160HP  IGMP SSM Range SSM (Source-Specific Multicast) Range allows the SSM-aware hosts and routers run the SSM service model for the groups in the address range.  Leave Proxy Enable Enable IGMP Leave Proxy. This feature can be used to avoid forwarding unnecessary leave messages to the router side.
  • Page 162: Igmp Snooping Vlan Configuration

    User’s Manual of WGSW-20160HP 4.8.3 IGMP Snooping VLAN Configuration Each Page shows up to 99 entries from the VLAN table, default being 20, selected through the "entries per Page" input field. When first visited, the web Page will show the first 20 entries from the beginning of the VLAN Table. The first displayed will be the one with the lowest VLAN ID found in the VLAN Table.
  • Page 163: Igmp Snooping Port Group Filtering

    User’s Manual of WGSW-20160HP  LLQI (LMQI for IGMP) Last Member Query Interval. The Last Member Query Time is the time value represented by the Last Member Query Interval, multiplied by the Last Member Query Count. The allowed range is 0 to 31744 in tenths of seconds, default last member query interval is 10 in tenths of seconds (1 second).
  • Page 164 User’s Manual of WGSW-20160HP Figure 4-8-7: IGMP Snooping Port Group Filtering Configuration Page Screenshot The Page includes the following fields: Object Description  Check to delete the entry. It will be deleted during the next save. Delete  Port The logical port for the settings.
  • Page 165: Igmp Snooping Status

    User’s Manual of WGSW-20160HP 4.8.5 IGMP Snooping Status This Page provides IGMP Snooping status. The IGMP Snooping Status screen in Figure 4-8-8 appears. Figure 4-8-8: IGMP Snooping Status Page Screenshot The Page includes the following fields: Object Description  The VLAN ID of the entry.
  • Page 166: Igmp Group Information

    User’s Manual of WGSW-20160HP  V3 Reports Received The number of Received V3 Reports.  V2 Leave Received The number of Received V2 Leave.  Router Port Display which ports act as router ports. A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or IGMP querier.
  • Page 167: Igmpv3 Information

    User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  VLAN ID of the group. VLAN ID  Groups Group address of the group displayed.  Port Members Ports under this group. Buttons Auto-refresh : Automatic refresh occurs every 3 seconds.
  • Page 168 User’s Manual of WGSW-20160HP  Port Switch port number.  Indicates the filtering mode maintained per (VLAN ID, port number, Group Mode Address) basis. It can be either Include or Exclude.  Source Address IP Address of the source. Currently, system limits the total number of IP source addresses for filtering to be 128.
  • Page 169: Mld Snooping Configuration

    User’s Manual of WGSW-20160HP 4.8.8 MLD Snooping Configuration This Page provides MLD Snooping related configuration. The MLD Snooping Configuration screen in Figure 4-8-11 appears. Figure 4-8-11: MLD Snooping Configuration Page Screenshot The Page includes the following fields: Object Description ...
  • Page 170: Mld Snooping Vlan Configuration

    User’s Manual of WGSW-20160HP  Proxy Enable Enable MLD Proxy. This feature can be used to avoid forwarding unnecessary join and leave messages to the router side.  Router Port Specify which ports act as router ports. A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or MLD querier.
  • Page 171 User’s Manual of WGSW-20160HP  MLD Snooping Enable Enable the per-VLAN MLD Snooping. Only up to 32 VLANs can be selected.  MLD Querier Enable the MLD Querier in the VLAN.  Compatibility Compatibility is maintained by hosts and routers taking appropriate actions depending on the versions of MLD operating on hosts and routers within a network.
  • Page 172: Mld Snooping Port Group Filtering

    User’s Manual of WGSW-20160HP 4.8.10 MLD Snooping Port Group Filtering In certain switch applications, the administrator may want to control the multicast services that are available to end users. For example, an IP/TV service based on a specific subscription plan. The MLD filtering feature fulfills this requirement by restricting access to specified multicast services on a switch port, and MLD throttling limits the number of simultaneous multicast groups a port can join.
  • Page 173: Mld Snooping Status

    User’s Manual of WGSW-20160HP 4.8.11 MLD Snooping Status This Page provides MLD Snooping status. The IGMP Snooping Status screen in Figure 4-8-14 appears. Figure 4-8-14: MLD Snooping Status Page Screenshot The Page includes the following fields: Object Description  The VLAN ID of the entry.
  • Page 174: Mld Group Information

    User’s Manual of WGSW-20160HP  V1 Leave Received The number of Received V1 Leaves.  Router Port Display which ports act as router ports. A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or IGMP querier.
  • Page 175: Mldv2 Information

    User’s Manual of WGSW-20160HP Buttons Auto-refresh : Automatic refresh occurs every 3 seconds. : Click to refresh the Page immediately. : Updates the table, starting with the first entry in the IGMP Group Table. : Updates the table, starting with the entry after the last entry currently displayed.
  • Page 176: Mvr (Multicaset Vlan Registration)

    User’s Manual of WGSW-20160HP  Hardware Filter/Switch Indicates whether data plane destined to the specific group address from the source IPv6 address could be handled by chip or not. Buttons Auto-refresh : Automatic refresh occurs every 3 seconds. : Refreshes the displayed table starting from the input fields.
  • Page 177 User’s Manual of WGSW-20160HP This Page provides MVR related configuration. The MVR screen in Figure 4-8-17 appears. Figure 4-8-17: MVR Configuration Page Screenshot The Page includes the following fields: Object Description  MVR Mode Enable/Disable the Global MVR. The Unregistered Flooding control depends on the current configuration in IGMP/MLD Snooping.
  • Page 178 User’s Manual of WGSW-20160HP Be Caution: MVR source ports are not recommended to be overlapped with management VLAN ports.  MVR Name MVR Name is an optional attribute to indicate the name of the specific MVR VLAN. Maximum length of the MVR VLAN Name string is 32. MVR VLAN Name can only contain alphabets or numbers.
  • Page 179: Mvr Status

    User’s Manual of WGSW-20160HP Buttons : Click to add new MVR VLAN. Specify the VID and configure the new entry. Click "Save" : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
  • Page 180: Mvr Groups Information

    User’s Manual of WGSW-20160HP 4.8.16 MVR Groups Information Entries in the MVR Group Table are shown on this Page. The MVR Group Table is sorted first by VLAN ID, and then by group. Each Page shows up to 99 entries from the MVR Group table, default being 20, selected through the "entries per Page" input field.
  • Page 181: Mvr Sfm Information

    User’s Manual of WGSW-20160HP 4.8.17 MVR SFM Information Entries in the MVR SFM Information Table are shown on this Page. The MVR SFM (Source-Filtered Multicast) Information Table also contains the SSM (Source-Specific Multicast) information. This table is sorted first by VLAN ID, then by group, and then by Port.
  • Page 182 User’s Manual of WGSW-20160HP Buttons Auto-refresh : Automatic refresh occurs every 3 seconds. : Refreshes the displayed table starting from the input fields. : Updates the table starting from the first entry in the MVR SFM Information Table. : Updates the table, starting with the entry after the last entry currently displayed.
  • Page 183: Quality Of Service

    User’s Manual of WGSW-20160HP 4.9 Quality of Service 4.9.1 Understand QOS Quality of Service (QoS) is an advanced traffic prioritization feature that allows you to establish control over network traffic. QoS enables you to assign various grades of network service to different types of traffic, such as multi-media, video, protocol-specific, time critical, and file-backup traffic.
  • Page 184: Port Policing

    User’s Manual of WGSW-20160HP 4.9.2 Port Policing This Page allows you to configure the Policer settings for all switch ports. The Port Policing screen in Figure 4-9-1 appears. Figure 4-9-1: QoS Ingress Port Policers Page Screenshot The Page includes the following fields:...
  • Page 185: Port Classification

    User’s Manual of WGSW-20160HP Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.9.3 Port Classification This Page allows you to configure the basic QoS Ingress Classification settings for all switch ports. The Port Classification...
  • Page 186 User’s Manual of WGSW-20160HP A QoS class of 0 (zero) has the lowest priority. Note: If the QoS class has been dynamically changed, then the actual QoS class is shown in parentheses after the configured QoS class.  DP Level Controls the default Drop Precedence Level, i.e., the DP level for frames not...
  • Page 187: Port Scheduler

    User’s Manual of WGSW-20160HP 4.9.4 Port Scheduler This Page provides an overview of QoS Egress Port Schedulers for all switch ports. The Port Scheduler screen in Figure 4-9-3 appears. Figure 4-9-3: QoS Egress Port Schedule Page Screenshot The Page includes the following fields:...
  • Page 188: Port Shaping

    User’s Manual of WGSW-20160HP 4.9.5 Port Shaping This Page provides an overview of QoS Egress Port Shapers for all switch ports. The Port Shapping screen in Figure 4-9-4 appears. Figure 4-9-4: QoS Egress Port Shapers Page Screenshot The Page includes the following fields:...
  • Page 189: Qos Egress Port Schedule And Shapers

    User’s Manual of WGSW-20160HP 4.9.5.1 QoS Egress Port Schedule and Shapers The Port Scheduler and Shapers for a specific port are configured on this Page. The QoS Egress Port Schedule and Shaper sscreen in Figure 4-9-5 appears. Figure 4-9-5: QoS Egress Port Schedule and Shapers Page Screenshot...
  • Page 190: Port Tag Remarking

    User’s Manual of WGSW-20160HP  Port Shaper Enable Controls whether the port shaper is enabled for this switch port.  Port Shaper Rate Controls the rate for the port shaper. The default value is 500. This value is restricted to 100-1000000 when the "Unit" is "kbps", and it is restricted to 1-13200 when the "Unit"...
  • Page 191: Qos Egress Port Tag Remarking

    User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Port The logical port for the settings contained in the same row. Click on the port number in order to configure tag remarking. For more detail, please refer to chapter 4.9.6.1.
  • Page 192: Port Dscp

    User’s Manual of WGSW-20160HP Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. : Click to undo any changes made locally and return to the previous Page. 4.9.7 Port DSCP This Page allows you to configure the basic QoS Port DSCP Configuration settings for all switch ports.
  • Page 193 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Port The Port coulmn shows the list of ports for which you can configure dscp ingress and egress settings.  Ingress In Ingress settings you can change ingress translation and classification settings for individual ports.
  • Page 194: Dscp-Based Qos

    User’s Manual of WGSW-20160HP 4.9.8 DSCP-Based QoS This Page allows you to configure the basic QoS DSCP based QoS Ingress Classification settings for all switches. The DSCP-Based QoS screen in Figure 4-9-9 appears. Figure 4-9-9: DSCP-Based QoS Ingress Classification Page Screenshot...
  • Page 195 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  DSCP Maximum number of support ed DSCP values are 64.  Trust Controls whether a specific DSCP value is trusted. Only frames with trusted DSCP values are mapped to a specific QoS class and Drop Precedence Level.
  • Page 196: Dscp Translation

    User’s Manual of WGSW-20160HP 4.9.9 DSCP Translation This Page allows you to configure the basic QoS DSCP Translation settings for all switches. DSCP translation can be done in Ingress or Egress. The DSCP Translation screen in Figure 4-9-10 appears. Figure 4-9-10: DSCP Translation Page Screenshot...
  • Page 197 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  DSCP Maximum number of supported DSCP values are 64 and valid DSCP value ranges from 0 to 63.  Ingress Ingress side DSCP can be first translated to new DSCP before using the DSCP for QoS class and DPL map.
  • Page 198: Dscp Classification

    User’s Manual of WGSW-20160HP 4.9.10 DSCP Classification This Page allows you to map DSCP value to a QoS Class and DPL value. The DSCP Classification screen in Figure 4-9-11 appears. Figure 4-9-11: DSCP Classification Page Screenshot The Page includes the following fields:...
  • Page 199: Qos Control List

    User’s Manual of WGSW-20160HP 4.9.11 QoS Control List This Page shows the QoS Control List(QCL), which is made up of the QCEs. Each row describes a QCE that is defined. The maximum number of QCEs is 256 on each switch.
  • Page 200: Qos Control Entry Configuration

    User’s Manual of WGSW-20160HP  Drop Eligible Indicator: Valid value of DEI can be any of values between 0, 1 or 'Any'.  Indicates the classification action taken on ingress frame if parameters Action configured are matched with the frame's content.
  • Page 201 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Check the checkbox button in case you what to make any port member of the Port Members QCL entry. By default all ports will be checked ...
  • Page 202 User’s Manual of WGSW-20160HP DSCP Diffserv Code Point value(DSCP): It can be specific value, range of value or 'Any'. DSCP values are in the range 0-63 including BE, CS1-CS7, EF or AF11-AF43 IP Fragment IPv4 frame fragmented option: yes|no|any Sport Source TCP/UDP port:(0-65535) or 'Any', specific or port range applicable...
  • Page 203: Qcl Status

    User’s Manual of WGSW-20160HP 4.9.12 QCL Status This Page shows the QCL status by different QCL users. Each row describes the QCE that is defined. It is a conflict if a specific QCE is not applied to the hardware due to hardware limitations. The maximum number of QCEs is 256 on each switch. The...
  • Page 204: Storm Control Configuration

    User’s Manual of WGSW-20160HP Please note that conflict can be resolved by releasing the H/W resources required to add QCL entry on pressing 'Resolve Conflict' button. Buttons : Select the QCL status from this drop down list. Auto-refresh : Check this box to refresh the Page automatically. Automatic refresh occurs every 3 seconds.
  • Page 205: Qos Statistics

    User’s Manual of WGSW-20160HP 4.9.14 QoS Statistics This Page provides statistics for the different queues for all switch ports. The QoS Statistics screen in Figure 4-9-16 appears. Figure 4-9-16: Queuing Counters Page Screenshot The Page includes the following fields: Object Description ...
  • Page 206: Voice Vlan Configuration

    User’s Manual of WGSW-20160HP 4.9.15 Voice VLAN Configuration The Voice VLAN feature enables voice traffic forwarding on the Voice VLAN, then the switch can classify and schedule network traffic. It is recommended that there be two VLANs on a port - one for voice, one for data. Before connecting the IP device to the switch, the IP phone should configure the voice VLAN ID correctly.
  • Page 207 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Mode Indicates the Voice VLAN mode operation. We must disable MSTP feature before we enable Voice VLAN. It can avoid the conflict of ingress filter. Possible modes are: Enabled: Enable Voice VLAN mode operation.
  • Page 208: Voice Vlan Oui Table

    User’s Manual of WGSW-20160HP Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.9.16 Voice VLAN OUI Table Configure VOICE VLAN OUI table on this Page. The maximum entry number is 16. Modifying the OUI table will restart auto detection of OUI process.
  • Page 209: Access Control Lists

    User’s Manual of WGSW-20160HP 4.10 Access Control Lists ACL is an acronym for Access Control List. It is the list table of ACEs, containing access control entries that specify individual users or groups permitted or denied to specific traffic objects, such as a process or a program.
  • Page 210 User’s Manual of WGSW-20160HP IPv4: The ACE will match all IPv4 frames. IPv4/ICMP: The ACE will match IPv4 frames with ICMP protocol. IPv4/UDP: The ACE will match IPv4 frames with UDP protocol. IPv4/TCP: The ACE will match IPv4 frames with TCP protocol.
  • Page 211: Access Control List Configuration

    User’s Manual of WGSW-20160HP 4.10.2 Access Control List Configuration This Page shows the Access Control List (ACL), which is made up of the ACEs defined on this switch. Each row describes the ACE that is defined. The maximum number of ACEs is 256 on each switch.
  • Page 212 User’s Manual of WGSW-20160HP  Mirror Specify the mirror operation of this port. Frames matching the ACE are mirrored to the destination mirror port. The allowed values are: Enabled: Frames received on the port are mirrored. Disabled: Frames received on the port are not mirrored.
  • Page 213: Ace Configuration

    User’s Manual of WGSW-20160HP 4.10.3 ACE Configuration Configure an ACE (Access Control Entry) on this Page. An ACE consists of several parameters. These parameters vary according to the frame type that you select. First select the ingress port for the ACE, and then select the frame type. Different parameter options are displayed depending on the frame type selected.
  • Page 214 User’s Manual of WGSW-20160HP  Policy Bitmask When "Specific" is selected for the policy filter, you can enter a specific policy bitmask. The allowed range is 0x0 to 0xff.  Select the frame type for this ACE. These frame types are mutually exclusive.
  • Page 215 User’s Manual of WGSW-20160HP  MAC Parameters Object Description  (Only displayed when the frame type is Ethernet Type or ARP.) SMAC Filter Specify the source MAC filter for this ACE. Any: No SMAC filter is specified. (SMAC filter status is "don't-care".) Specific: If you want to filter a specific source MAC address with this ACE, choose this value.
  • Page 216 User’s Manual of WGSW-20160HP  ARP Parameters The ARP parameters can be configured when Frame Type "ARP" is selected. Object Description  Specify the available ARP/RARP opcode (OP) flag for this ACE. ARP/RARP Any: No ARP/RARP OP flag is specified. (OP is "don't-care".) ARP: Frame must have ARP/RARP opcode set to ARP.
  • Page 217 User’s Manual of WGSW-20160HP address field (THA) settings. Match 0: RARP frames where THA is not equal to the SMAC address. 1: RARP frames where THA is equal to the SMAC address. Any: Any value is allowed ("don't-care").  IP/Ethernet Length Specify whether frames can hit the action according to their ARP/RARP hardware address length (HLN) and protocol address length (PLN) settings.
  • Page 218 User’s Manual of WGSW-20160HP  IP TTL Specify the Time-to-Live settings for this ACE. zero: IPv4 frames with a Time-to-Live field greater than zero must not be able to match this entry. non-zero: IPv4 frames with a Time-to-Live field greater than zero must be able to match this entry.
  • Page 219 User’s Manual of WGSW-20160HP DIP mask in dotted decimal notation.  ICMP Parameters Object Description  Specify the ICMP filter for this ACE. ICMP Type Filter Any: No ICMP filter is specified (ICMP filter status is "don't-care"). Specific: If you want to filter a specific ICMP filter with this ACE, you can enter a specific ICMP value.
  • Page 220 User’s Manual of WGSW-20160HP  Specify the TCP/UDP destination filter for this ACE. TCP/UDP Destination Any: No TCP/UDP destination filter is specified (TCP/UDP destination filter Filter status is "don't-care"). Specific: If you want to filter a specific TCP/UDP destination filter with this ACE, you can enter a specific TCP/UDP destination value.
  • Page 221 User’s Manual of WGSW-20160HP  Ethernet Type Parameters The Ethernet Type parameters can be configured when Frame Type "Ethernet Type" is selected. Object Description  Specify the Ethernet type filter for this ACE. EtherType Filter Any: No EtherType filter is specified (EtherType filter status is "don't-care").
  • Page 222: Acl Ports Configuration

    User’s Manual of WGSW-20160HP 4.10.4 ACL Ports Configuration Configure the ACL parameters (ACE) of each switch port. These parameters will affect frames received on a port unless the frame matches a specific ACE. The ACL Ports Configuration screen in Figure 4-10-4 appears.
  • Page 223 User’s Manual of WGSW-20160HP  Mirror Specify the mirror operation of this port. The allowed values are: Enabled: Frames received on the port are mirrored. Disabled: Frames received on the port are not mirrored. The default value is "Disabled".  Logging Specify the logging operation of this port.
  • Page 224: Acl Rate Limiter Configuration

    User’s Manual of WGSW-20160HP 4.10.5 ACL Rate Limiter Configuration Configure the rate limiter for the ACL of the switch. The ACL Rate Limiter Configuration screen in Figure 4-10-5 appears. Figure 4-10-5: ACL Rate Limiter Configuration Page Screenshot The Page includes the following fields:...
  • Page 225: Authentication

    User’s Manual of WGSW-20160HP 4.11 Authentication This section is to control the access of the Managed Switch, includes the user access and management control. The Authentication section contains links to the following main topics:  IEEE 802.1X Port-Based Network Access Control ...
  • Page 226: Understanding Ieee 802.1X Port-Based Authentication

    User’s Manual of WGSW-20160HP to authenticate. The disadvantage is that MAC addresses can be spoofed by malicious users, equipment whose MAC address is a valid RADIUS user can be used by anyone, and only the MD5-Challenge method is supported. The 802.1X and MAC-Based Authentication configuration consists of two sections, a system- and a port-wide.
  • Page 227 User’s Manual of WGSW-20160HP Figure 4-11-1  Client—the device (workstation) that requests access to the LAN and switch services and responds to requests from the switch. The workstation must be running 802.1X-compliant client software such as that offered in the Microsoft Windows XP operating system.
  • Page 228 User’s Manual of WGSW-20160HP authentication server, the server's frame header is removed, leaving the EAP frame, which is then encapsulated for Ethernet and sent to the client.  Authentication Initiation and Message Exchange The switch or the client can initiate authentication. If you enable authentication on a port by using the dot1x port-control auto interface configuration command, the switch must initiate authentication when it determines that the port link state transitions from down to up.
  • Page 229: Authentication Configuration

    User’s Manual of WGSW-20160HP  Ports in Authorized and Unauthorized States The switch port state determines whether or not the client is granted access to the network. The port starts in the unauthorized state. While in this state, the port disallows all ingress and egress traffic except for 802.1X protocol packets. When a client is successfully authenticated, the port transitions to the authorized state, allowing all traffic for the client to flow normally.
  • Page 230: Network Access Server Configuration

    User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Client The management client for which the configuration below applies.  Authentication Method Authentication Method can be set to one of the following values: None: authentication is disabled and login is not possible.
  • Page 231 User’s Manual of WGSW-20160HP Figure 4-11-4: Network Access Server Configuration Page Screenshot The Page includes the following fields: System Configuration Object Description  Mode Indicates if NAS is globally enabled or disabled on the switch. If globally disabled, all ports are allowed forwarding of frames.
  • Page 232 User’s Manual of WGSW-20160HP switch port or if a supplicant is no longer attached. For MAC-based ports, reauthentication is only useful if the RADIUS server configuration has changed. It does not involve communication between the switch and the client, and therefore doesn't imply that a client is still present on a port.
  • Page 233 User’s Manual of WGSW-20160HP on hold in the Unauthorized state. The hold timer does not count during an on-going authentication. In MAC-based Auth. mode, the The switch will ignore new frames coming from the client during the hold time. The Hold Time can be set to a number between 10 and 1000000 seconds.
  • Page 234 User’s Manual of WGSW-20160HP this setting. The value can only be changed if the Guest VLAN option is globally enabled. Valid values are in the range [1; 255].  Allow Guest VLAN if The switch remembers if an EAPOL frame has been received on the port for the life-time of the port.
  • Page 235 User’s Manual of WGSW-20160HP switch's IP address, name, and the supplicant's port number on the switch. EAP is very flexible, in that it allows for different authentication methods, like MD5-Challenge, PEAP, and TLS. The important thing is that the authenticator...
  • Page 236 User’s Manual of WGSW-20160HP successfully authenticated. Multi 802.1X Multi 802.1X is - like Single 802.1X - not an IEEE standard, but a variant that features many of the same characteristics. In Multi 802.1X, one or more supplicants can get authenticated on the same port at the same time. Each supplicant is authenticated individually and secured in the MAC table using the Port Security module.
  • Page 237 User’s Manual of WGSW-20160HP don't need special supplicant software to authenticate. The advantage of MAC-based authentication over 802.1X-based authentication is that the clients don't need special supplicant software to authenticate. The disadvantage is that MAC addresses can be spoofed by malicious users - equipment whose MAC address is a valid RADIUS user can be used by anyone.
  • Page 238 User’s Manual of WGSW-20160HP a VLAN ID or it's invalid, or the supplicant is otherwise no longer present on the port, the port's VLAN ID is immediately reverted to the original VLAN ID (which may be changed by the administrator in the meanwhile without affecting the RADIUS-assigned).
  • Page 239 User’s Manual of WGSW-20160HP EAPOL Request Identity frames. If the number of transmissions of such frames exceeds Max. Reauth. Count and no EAPOL frames have been received in the meanwhile, the switch considers entering the Guest VLAN. The interval between transmission of EAPOL Request Identity frames is configured with EAPOL Timeout.
  • Page 240: Network Access Overview

    User’s Manual of WGSW-20160HP reauthentication immediately. The clients will transfer to the unauthorized state while the reauthentication is in progress. Buttons Click to refresh the Page. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
  • Page 241 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Port The switch port number. Click to navigate to detailed NAS statistics for this port.  Admin State The port's current administrative state. Refer to NAS Admin State for a description of possible values.
  • Page 242: Network Access Statistics

    User’s Manual of WGSW-20160HP 4.11.5 Network Access Statistics This Page provides detailed NAS statistics for a specific switch port running EAPOL-based IEEE 802.1X authentication. For MAC-based ports, it shows selected backend server (RADIUS Authentication Server) statistics, only. Use the port select box to select which port details to be displayed.
  • Page 243 User’s Manual of WGSW-20160HP Port Counters Object Description  EAPOL Counters These supplicant frame counters are available for the following administrative states: Force Authorized Force Unauthorized Port-based 802.1X Single 802.1X Multi 802.1X Direction Name IEEE Name Description dot1xAuthEapolFrames The number of valid EAPOL...
  • Page 244 User’s Manual of WGSW-20160HP received by the switch in which the Packet Body Length field is invalid. dot1xAuthEapolFrames The number of EAPOL Total frames of any type that have been transmitted by the switch. dot1xAuthEapolReqIdFr The number of EAPOL Request ID...
  • Page 245 User’s Manual of WGSW-20160HP table). dot1xAuthBackendOther Other 802.1X-based: RequestsToSupplicant Counts the number of times Requests that the switch sends an EAP Request packet following the first to the supplicant. Indicates that the backend server chose an EAP-method. MAC-based: Not applicable.
  • Page 246 User’s Manual of WGSW-20160HP packets sent from the switch towards the backend server for a given port (left-most table) or client (right-most table). Possible retransmissions are not counted.  Last Supplicant/Client Information about the last supplicant/client that attempted to authenticate. This...
  • Page 247 User’s Manual of WGSW-20160HP Selected Counters Object Description  Selected Counters The Selected Counters table is visible when the port is one of the following administrative states: Multi 802.1X MAC-based Auth. The table is identical to and is placed next to the Port Counters table, and will be empty if no MAC address is currently selected.
  • Page 248 User’s Manual of WGSW-20160HP Buttons Auto-refresh : Check this box to refresh the Page automatically. Automatic refresh occurs every 3 seconds. Click to refresh the Page immediately. : This button is available in the following modes: • Force Authorized • Force Unauthorized •...
  • Page 249: Authentication Server Configuration

    User’s Manual of WGSW-20160HP 4.11.6 Authentication Server Configuration This Page allows you to configure the Authentication Servers. The Authentication Server Configuration screen in Figure 4-11-7 appears. Figure 4-11-7: Authentication Server Configuration Page Screenshot...
  • Page 250 User’s Manual of WGSW-20160HP The Page includes the following fields: Common Server Configuration These setting are common for all of the Authentication Servers. Object Description  Timeout The Timeout, which can be set to a number between 3 and 3600 seconds, is the maximum time to wait for a reply from a server.
  • Page 251 User’s Manual of WGSW-20160HP RADIUS Accounting Server Configuration The table has one row for each RADIUS Accounting Server and a number of columns, which are: Object Description  # The RADIUS Accounting Server number for which the configuration below applies.
  • Page 252: Radius Overview

    User’s Manual of WGSW-20160HP 4.11.7 RADIUS Overview This Page provides an overview of the status of the RADIUS servers configurable on the Authentication configuration Page. The RADIUS Authentication/Accounting Server Overview screen in Figure 4-11-8 appears. Figure 4-11-8: RADIUS Authentication/Accounting Server Overview Page Screenshot...
  • Page 253 User’s Manual of WGSW-20160HP RADIUS Accounting Server Status Overview Object Description  # The RADIUS server number. Click to navigate to detailed statistics for this server.  IP Address The IP address and UDP port number (in <IP Address>:<UDP Port> notation) of this server.
  • Page 254: Radius Details

    User’s Manual of WGSW-20160HP 4.11.8 RADIUS Details This Page provides detailed statistics for a particular RADIUS server. The RADIUS Authentication/Accounting for Server Overview screen in Figure 4-11-9 appears. Figure 4-11-9: RADIUS Authentication/Accounting for Server Overview Page Screenshot...
  • Page 255 User’s Manual of WGSW-20160HP The Page includes the following fields: RADIUS Authentication Statistics The statistics map closely to those specified in RFC4668 - RADIUS Authentication Client MIB. Use the server select box to switch between the backend servers to show details for.
  • Page 256 User’s Manual of WGSW-20160HP radiusAuthClientExtU The number of RADIUS Unknown nknownTypes packets that were received Types from the server on the authentication port and dropped for some other reason. radiusAuthClientExtP The number of RADIUS Packets acketsDropped packets that were received...
  • Page 257 User’s Manual of WGSW-20160HP retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.  Other Info This section contains information about the state of the server and the latest round-trip time.
  • Page 258 User’s Manual of WGSW-20160HP RADIUS Accounting Statistics The statistics map closely to those specified in RFC4670 - RADIUS Accounting Client MIB. Use the server select box to switch between the backend servers to show details for. Object Description  Packet Counters RADIUS accounting server packet counter.
  • Page 259 User’s Manual of WGSW-20160HP radiusAccClientExt The number of RADIUS Retransmissions Retransmissions packets retransmitted to the RADIUS accounting server. radiusAccClientExt The number of RADIUS Pending PendingRequests packets destined for the server Requests that have not yet timed out or received a response. This...
  • Page 260 User’s Manual of WGSW-20160HP within the configured timeout. The server has temporarily been disabled, but will get re-enabled when the dead-time expires. The number of seconds left before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled.
  • Page 261: Windows Platform Radius Server Configuration

    User’s Manual of WGSW-20160HP 4.11.9 Windows Platform RADIUS Server Configuration Setup the RADIUS server and assign the client IP address to the Managed switch. In this case, field in the default IP Address of the Managed Switch with 192.168.0.100. And also make sure the shared secret key is as same as the one you had set at the Managed Switch’s 802.1x system configuration –...
  • Page 262 User’s Manual of WGSW-20160HP Add New RADIUS Cleint on the Windows 2003 server Figure 4-11-11: Windows Server – Add New RADIUS Client Setting Assign the client IP address to the Managed Switch Figure 4-11-12: Windows Server RADIUS Server Setting...
  • Page 263 User’s Manual of WGSW-20160HP The shared secret key should be as same as the key configured on the Managed Switch. Figure 4-11-13: Windows Server RADIUS Server Setting Configure ports attribute of 802.1X, the same as “802.1X Port Configuration”. Figure 4-11-14: 802.1x Port Configuration Create user data.
  • Page 264 User’s Manual of WGSW-20160HP Figure 4-11-15: Windows 2003 AD Server Setting Path Enter ” Active Directory Users and Computers”, create legal user data, the next, right-click a user what you created to enter properties, and what to be noticed:...
  • Page 265 User’s Manual of WGSW-20160HP Figure 4-11-16: Add User Properties Screen Figure 4-11-17: Add User Properties Screen Set the Ports Authenticate Status to “Force Authorized” if the port is connected to the RADIUS server or the port is a uplink port that is connected to another switch. Or once the 802.1X stat to...
  • Page 266: Client Configuration

    User’s Manual of WGSW-20160HP 4.11.10 802.1X Client Configuration Windows XP is originally 802.1X support. As to other operating systems (windows 98SE, ME, 2000), an 802.1X client utility is needed. The following procedures show how to configure 802.1X Authentication in Windows XP.
  • Page 267 User’s Manual of WGSW-20160HP Figure 4-11-19 Click “OK”. When client has associated with the Managed Switch, a user authentication notice appears in system tray. Click on the notice to continue. Figure 4-11-20: Windows Client Popup Login Request Message...
  • Page 268 User’s Manual of WGSW-20160HP Enter the user name, password and the logon domain that your account belongs. 10. Click “OK” to complete the validation process. Figure 4-11-21...
  • Page 269: Security

    User’s Manual of WGSW-20160HP 4.12 Security This section is to control the access of the Managed Switch, includes the user access and management control. The Security Page contains links to the following main topics:  Port Limit Control  Access Management ...
  • Page 270 User’s Manual of WGSW-20160HP Figure 4-12-1: Port Limit Control Configuration Overview Page Screenshot The Page includes the following fields: System Configuration Object Description  Mode Indicates if Limit Control is globally enabled or disabled on the switchstack. If globally disabled, other modules may still use the underlying functionality, but limit checks and corresponding actions are disabled.
  • Page 271 User’s Manual of WGSW-20160HP  Aging Period If Aging Enabled is checked, then the aging period is controlled with this input. If other modules are using the underlying port security for securing MAC addresses, they may have other requirements to the aging period. The underlying port security will use the shorter requested aging period of all modules that use the functionality.
  • Page 272 User’s Manual of WGSW-20160HP Trap: If Limit + 1 MAC addresses is seen on the port, send an SNMP trap. If Aging is disabled, only one SNMP trap will be sent, but with Aging enabled, new SNMP traps will be sent everytime the limit gets exceeded.
  • Page 273: Access Management

    User’s Manual of WGSW-20160HP 4.12.2 Access Management Configure access management table on this Page. The maximum entry number is 16. If the application's type match any one of the access management entries, it will allow access to the switch. The Access Management Configuration screen in...
  • Page 274: Access Management Statistics

    User’s Manual of WGSW-20160HP 4.12.3 Access Management Statistics This Page provides statistics for access management. The Access Management Statistics screen in Figure 4-12-3 appears. Figure 4-12-3: Access Management Statistics Overview Page Screenshot The Page includes the following fields: Object Description ...
  • Page 275: Https

    User’s Manual of WGSW-20160HP 4.12.4 HTTPs Configure HTTPS on this Page. The HTTPS Configuration screen in Figure 4-12-4 appears. Figure 4-12-4: HTTPS Configuration Screen Page Screenshot The Page includes the following fields: Object Description  Mode Indicates the HTTPS mode operation. When the current connection is HTTPS, to apply HTTPS disabled mode operation will automatically redirect web browser to an HTTP connection.
  • Page 276: Ssh

    User’s Manual of WGSW-20160HP 4.12.5 SSH Configure SSH on this Page. This Page shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the port is set-up for software-based learning.
  • Page 277: Port Security Status

    User’s Manual of WGSW-20160HP 4.12.6 Port Security Status This Page shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the port is set-up for software-based learning.
  • Page 278 User’s Manual of WGSW-20160HP The Page includes the following fields: User Module Legend The legend shows all user modules that may request Port Security services. Object Description  User Module Name The full name of a module that may request Port Security services.
  • Page 279: Port Security Detail

    User’s Manual of WGSW-20160HP Buttons : Click to refresh the Page immediately. Auto-refresh Check this box to refresh the Page automatically. Automatic refresh occurs every 3 seconds. 4.12.7 Port Security Detail This Page shows the MAC addresses secured by the Port Security module. Port Security is a module with no direct configuration.
  • Page 280: Dhcp Snooping

    User’s Manual of WGSW-20160HP Buttons : Click to refresh the Page immediately. Auto-refresh Check this box to refresh the Page automatically. Automatic refresh occurs every 3 seconds. 4.12.8 DHCP Snooping DHCP Snooping is used to block intruder on the untrusted ports of DUT when it tries to intervene by injecting a bogus DHCP reply packet to a legitimate conversation between the DHCP client and server.
  • Page 281: Dhcp Snooping Statistics

    User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Snooping Mode Indicates the DHCP snooping mode operation. Possible modes are: Enabled: Enable DHCP snooping mode operation. When enable DHCP snooping mode operation, the request DHCP messages will be forwarded to trusted ports and only allowed reply packets from trusted ports.
  • Page 282 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Rx and Tx Discover The number of discover (option 53 with value 1) packets received and transmitted.  Rx and Tx Offer The number of offer (option 53 with value 2) packets received and transmitted.
  • Page 283: Ip Source Guard Configuration

    User’s Manual of WGSW-20160HP 4.12.10 IP Source Guard Configuration IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host.
  • Page 284 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Mode of IP Source Enable the Global IP Source Guard or disable the Global IP Source Guard. All configured ACEs will be lost when the mode is enabled.
  • Page 285: Ip Source Guard Static Table

    User’s Manual of WGSW-20160HP 4.12.11 IP Source Guard Static Table This Page provides Static IP Source Guard Table. The Static IP Source Guard Table screen in Figure 4-12-11 appears. Figure 4-12-11: Static IP Source Guard Table Screen Page Screenshot The Page includes the following fields:...
  • Page 286: Arp Inspection

    User’s Manual of WGSW-20160HP 4.12.12 ARP Inspection ARP Inspection is a secure feature. Several types of attacks can be launched against a host or devices connected to Layer 2 networks by "poisoning" the ARP caches. This feature is used to block such attacks. Only valid ARP requests and responses can go through DUT.
  • Page 287 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Mode of ARP Inspection Enable the Global ARP Inspection or disable the Global ARP Inspection. Configuration  Port Mode Configuration Specify ARP Inspection is enabled on which ports. Only when both Global Mode and Port Mode on a given port are enabled, ARP Inspection is enabled on this given port.
  • Page 288: Arp Inspection Static Table

    User’s Manual of WGSW-20160HP 4.12.13 ARP Inspection Static Table This Page provides Static ARP Inspection Table. The Static ARP Inspection Table screen in Figure 4-12-13 appears. Figure 4-12-13: Static ARP Inspection Table Screen Page Screenshot The Page includes the following fields:...
  • Page 289: Address Table

    User’s Manual of WGSW-20160HP 4.13 Address Table Switching of frames is based upon the DMAC address contained in the frame. The Managed Switch builds up a table that maps MAC addresses to switch ports for knowing which ports the frames should go to (based upon the DMAC address in the frame ).
  • Page 290 User’s Manual of WGSW-20160HP The Page includes the following fields: Aging Configuration By default, dynamic entries are removed from the MAC table after 300 seconds. This removal is also called aging. Object Description  Disable Automatic Enables/disables the the automatic aging of dynamic entries Aging ...
  • Page 291: Mac Address Table Status

    User’s Manual of WGSW-20160HP Buttons : Click to save changes. Click to undo any changes made locally and revert to previously saved values. 4.13.2 MAC Address Table Status Dynamic MAC Table Entries in the MAC Table are shown on this Page. The MAC Table contains up to 8192 entries, and is sorted first by VLAN ID, then by MAC address.
  • Page 292: Dynamic Arp Inspection Table

    User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  Indicates whether the entry is a static or dynamic entry. Type  The VLAN ID of the entry. VLAN  The MAC address of the entry. MAC Address ...
  • Page 293: Dynamic Ip Source Guard Table

    User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  The port number for which the status applies. Click the port number to see the Port status for this particular port.  The VLAN ID of the entry.
  • Page 294 User’s Manual of WGSW-20160HP The “>>” will use the last entry of the currently displayed as a basis for the next lookup. When the end is reached the text "No more entries" is shown in the displayed table. Use the “|<<” button to start over.
  • Page 295: Lldp

    User’s Manual of WGSW-20160HP 4.14 LLDP 4.14.1 Link Layer Discovery Protocol Link Layer Discovery Protocol (LLDP) is used to discover basic information about neighboring devices on the local broadcast domain. LLDP is a Layer 2 protocol that uses periodic broadcasts to advertise information about the sending device. Advertised information is represented in Type Length Value (TLV) format according to the IEEE 802.1ab standard, and can include details...
  • Page 296 User’s Manual of WGSW-20160HP The Page includes the following fields: LLDP Parameters Object Description  The switch is periodically transmitting LLDP frames to its neighbors for having the Tx Interval network discovery information up-to-date. The interval between each LLDP frame is determined by the Tx Interval value. Valid values are restricted to 5 - 32768 seconds.
  • Page 297 User’s Manual of WGSW-20160HP from neighbor units is analyzed. Tx only The switch will drop LLDP information received from neighbors, but will send out LLDP information. Disabled The switch will not send out LLDP information, and will drop LLDP information received from neighbors.
  • Page 298: Lldp Med Configuration

    User’s Manual of WGSW-20160HP Buttons : Click to save changes. Click to undo any changes made locally and revert to previously saved values. 4.14.3 LLDP MED Configuration This Page allows you to configure the LLDP-MED. The LLDPMED Configuration screen in Figure 4-14-2 appears.
  • Page 299 User’s Manual of WGSW-20160HP With this in mind LLDP-MED defines an LLDP-MED Fast Start interaction between the protocol and the application layers on top of the protocol, in order to achieve these related properties. Initially, a Network Connectivity Device will only transmit LLDP TLVs in an LLDPDU.
  • Page 300 User’s Manual of WGSW-20160HP building, and represents ground level at the given latitude and longitude. Inside a building, 0.0 represents the floor level associated with ground level at the main entrance.  Map Datum The Map Datum used for the coordinates given in this Option WGS84: (Geographical 3D) - World Geodesic System 1984, CRS Code 4327, Prime Meridian Name: Greenwich.
  • Page 301 User’s Manual of WGSW-20160HP  Name Name (residence and office occupant) - Example: Flemming Jahn  Zip code Postal/zip code - Example: 2791  Building Building (structure) - Example: Low Library  Apartment Unit (Apartment, suite) - Example: Apt 42 ...
  • Page 302 User’s Manual of WGSW-20160HP 3. Softphone Voice 4. Video Conferencing 5. Streaming Video 6. Control / Signaling (conditionally support a separate network policy for the media types above) A large network may support multiple VoIP policies across the entire organization, and different policies per application type.
  • Page 303 User’s Manual of WGSW-20160HP other similar appliances supporting real-time interactive video/audio services. Streaming Video - for use by broadcast or multicast based video content distribution and other similar applications supporting streaming video services that require specific network policy treatment. Video applications relying on TCP with buffering would not be an intended use of this application type.
  • Page 304: Lldp-Med Neighbor

    User’s Manual of WGSW-20160HP Port Policies Configuration Every port may advertise a unique set of network policies or different attributes for the same network policies, based on the authenticated user identity or port configuration. Object Description  Port The port number for which the configuration applies.
  • Page 305 User’s Manual of WGSW-20160HP access to the IEEE 802 based LAN infrastructure for LLDP-MED Endpoint Devices. An LLDP-MED Network Connectivity Device is a LAN access device based on any of the following technologies: 1. LAN Switch/Router 2. IEEE 802.1 Bridge 3.
  • Page 306 User’s Manual of WGSW-20160HP endpoint products that act as end user communication appliances supporting IP media. Capabilities include all of the capabilities defined for the previous Generic Endpoint (Class I) and Media Endpoint (Class II) classes, and are extended to include aspects related to end user devices.
  • Page 307 User’s Manual of WGSW-20160HP with buffering would not be an intended use of this application type. Video Signaling - for use in network topologies that require a separate policy for the video signaling than for the video media.  Policy Policy indicates that an Endpoint Device wants to explicitly advertise that the policy is required by the device.
  • Page 308: Neighbor

    User’s Manual of WGSW-20160HP 4.14.5 Neighbor This Page provides a status overview for all LLDP neighbors. The displayed table contains a row for each port on which an LLDP neighbor is detected. The LLDP Neighbor Information screen in Figure 4-14-4 appears.
  • Page 309: Port Statistics

    User’s Manual of WGSW-20160HP 4.14.6 Port Statistics This Page provides an overview of all LLDP traffic. Two types of counters are shown. Global counters are counters that refer to the whole stack, switch, while local counters refers to counters for the currently selected switch. The LLDP Statistics screen in Figure 4-14-5 appears.
  • Page 310 User’s Manual of WGSW-20160HP LLDP Statistics Local Counters The displayed table contains a row for each port. The columns hold the following information: Object Description  The port on which LLDP frames are received or transmitted. Local Port  The number of LLDP frames transmitted on the port.
  • Page 311: Network Diagnostics

    User’s Manual of WGSW-20160HP 4.15 Network Diagnostics This section provide the Physical layer and IP layer network diagnostics tools for troubleshoot. The diagnostic tools are designed for network manager to help them quickly diagnose problems between point to point and better service customers.
  • Page 312: Ping

    User’s Manual of WGSW-20160HP 4.15.1 Ping This Page allows you to issue ICMP PING packets to troubleshoot IP connectivity issues. After you press “Start”, 5 ICMP packets are transmitted, and the sequence number and roundtrip time are displayed upon reception of a reply. The Page refreshes automatically until responses to all packets are received, or until a timeout occurs. The...
  • Page 313: Ipv6 Ping

    User’s Manual of WGSW-20160HP 4.15.2 IPv6 Ping This Page allows you to issue ICMPv6 PING packets to troubleshoot IPv6 connectivity issues. After you press “Start”, 5 ICMPv6 packets are transmitted, and the sequence number and roundtrip time are displayed upon reception of a reply.
  • Page 314: Remote Ip Ping Test

    User’s Manual of WGSW-20160HP 4.15.3 Remote IP Ping Test This Page allows you to issue ICMP PING packets to troubleshoot IP connectivity issues on special port. After you press “Test”, 5 ICMP packets are transmitted, and the sequence number and roundtrip time are displayed upon reception of a reply.
  • Page 315: Cable Diagnostics

    User’s Manual of WGSW-20160HP 4.15.4 Cable Diagnostics This Page is used for running the Cable Diagnostics. Press to run the diagnostics. This will take approximately 5 seconds. If all ports are selected, this can take approximately 15 seconds. When completed, the Page refreshes automatically, and you can view the cable diagnostics results in the cable status table.
  • Page 316 User’s Manual of WGSW-20160HP The Page includes the following fields: Object Description  The port where you are requesting Cable Diagnostics. Port  Description Display per port description.  Port: Cable Status Port number. Pair: The status of the cable pair.
  • Page 317: Power Over Ethernet

    4.16 Power over Ethernet Providing up to 16 PoE, in-line power interfaces, the WGSW-20160HP PoE Switch can easily build a power central-controlled IP phone system, IP Camera system, AP group for the enterprise. For instance, 16 camera / AP can be easily installed around the corner in the company for surveillance demands or build a wireless roaming environment in the office.
  • Page 318 AC sockets. 30 Watts Since the WGSW-20160HP per PoE port supports 56V DC PoE power output, please check and assure the Powered Device (PD) acceptable DC power range is from 56V DC. Otherwise, it will...
  • Page 319: System Configuration

    User’s Manual of WGSW-20160HP 4.16.2 System Configuration In a power over Ethernet system, operating power is applied from a power source (PSU-power supply unit) over the LAN infrastructure to powered devices (PDs), which are connected to ports. Under some conditions, the total output power required by PDs can exceed the maximum available power provided by the PSU.
  • Page 320 User’s Manual of WGSW-20160HP  Allocation mode In this mode the user allocates the amount of power that each port may reserve. The allocated/reserved power for each port/PD is specified in the Maximum Power fields. The ports are shut down when total reserved powered exceeds the amount of power that the power supply can deliver.
  • Page 321 : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. For WGSW-20160HP, the total PoE power reservation from Port-1~16 is up to 230 Watts. PD Classifications A PD may be classified by the PSE based on the classification information provided by the PD. The intent of PD classification is to provide information about the maximum power required by the PD during operation.
  • Page 322: Port Configuration

    User’s Manual of WGSW-20160HP A PD shall return Class 0 to 4 in accordance with the maximum power draw as specified by Table 4-16-1. Class Usage Range of maximum power used by the PD Class Dsecription Default 0.44 to 12.95 Watts...
  • Page 323 User’s Manual of WGSW-20160HP The page includes the following fields: Object Description  PoE Mode There are three modes for PoE mode. Enable: enable PoE function.. Disable: disable PoE function. Schedule: enable PoE function in schedule mode.  Schedule Indicates the schedule profile mode. Possible porifles are:...
  • Page 324: Poe Status

    User’s Manual of WGSW-20160HP 4.16.4 PoE Status This page allows the user to inspect the total power consumption, total power reserved and current status for all PoE ports. The screen in Figure 4-16-4 appears. Figure 4-16-4:PoE Status Screenshot The page includes the following fields:...
  • Page 325: Poe Schedule

    User’s Manual of WGSW-20160HP  The Power Used shows how much power the PD currently is using. Power Used [W]  The Power Used shows how much current the PD currently is using. Current Used [mA]  Priority The Priority shows the port's priority configured by the user.
  • Page 326 User’s Manual of WGSW-20160HP Object Description  Profile Set the schedule profile mode. Possible porifles are: Profile1 Profile2 Profile3 Profile4  Week Day Allows user to set week day for defining PoE function should be enabled on the day.  Start Hour Allows user to set what hour does PoE function enables.
  • Page 327: Lldp Poe Neighbours

    User’s Manual of WGSW-20160HP 4.16.6 LLDP PoE Neighbours This page provides a status overview for all LLDP PoE neighbors. The displayed table contains a row for each port on which an LLDP PoE neighbor is detected. The columns hold the following information: The screen in Figure 4-16-6 appears.
  • Page 328: Poe Alvie Check Configuration

    4.16.7 PoE Alvie Check Configuration The WGSW-20160HP PoE Switch can be configured to monitor connected PD’s status in real-time via ping action. Once the PD stops working and without response, WGSW-20160HP PoE Switch is going to restart PoE port port power, and bring the PD back to work.
  • Page 329 PD Alive-check is not a defining standard, so the PoE device on the market doesn’t report reboots done information to WGSW-20160HP PoE Switch, so user has to make sure how long the PD will be finished to boot, and then set the time value to this column.
  • Page 330: Loop Protection

    User’s Manual of WGSW-20160HP 4.17 Loop Protection This chapter describes enabling loop protection function that provides loop protection to prevent broadcast loops in Managed Switch. 4.17.1 Configuration This Page allows the user to inspect the current Loop Protection configurations, and possibly change them as well; screen in Figure 4-17-1 appears.
  • Page 331 User’s Manual of WGSW-20160HP The Page includes the following fields: General Settings Object Description  Controls whether loop protections is enabled (as a whole). Enable Loop Protection  Transmission Time The interval between each loop protection PDU sent on each port. valid values are 1 to 10 seconds.
  • Page 332: Loop Protection Status

    User’s Manual of WGSW-20160HP 4.17.2 Loop Protection Status This Page displays the loop protection port status the ports of the switch, screen in Figure 4-17-2 appears. Figure 4-17-2: Loop Protection Status Screenshot The Page includes the following fields: Object Description ...
  • Page 333: Rmon

    User’s Manual of WGSW-20160HP 4.18 RMON RMON is the most important expansion of the standard SNMP. RMON is a set of MIB definitions, used to define standard network monitor functions and interfaces, enabling the communication between SNMP management terminals and remote monitors.
  • Page 334 User’s Manual of WGSW-20160HP to a higher-layer protocol.  InDiscards: The number of inbound packets that are discarded even the packets are normal.  InErrors: The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.
  • Page 335: Rmon Alarm Detail

    User’s Manual of WGSW-20160HP 4.18.2 RMON Alarm Detail This Page provides an Detail of a specific RMON statistics entry; screen in Figure 4-18-2 appears. Figure 4-18-2: Detailed RMON Alarm ID Page Screenshot The Page includes the following fields: Object Description ...
  • Page 336: Rmon Alarm Status

    User’s Manual of WGSW-20160HP 4.18.3 RMON Alarm Status This Page provides an overview of RMON Alarm entries. Each Page shows up to 99 entries from the Alarm table, default being 20, selected through the "entries per Page" input field. When first visited, the web Page will show the first 20 entries from the beginning of the Alarm table.
  • Page 337: Rmon Event Configuration

    User’s Manual of WGSW-20160HP 4.18.4 RMON Event Configuration Configure RMON Event table on this Page. The entry index key is ID; screen in Figure 4-18-4 appears. Figure 4-18-4: RMON Event Configuration Page Screenshot The Page includes the following fields: Object Description ...
  • Page 338: Rmon Event Status

    User’s Manual of WGSW-20160HP Figure 4-18-5: Detailed RMON Event ID Page Screenshot The Page includes the following fields: Object Description  LogTime Indicates Event log time.  LogDescription Indicates the Event description. Buttons : Click to refresh the Page immediately.
  • Page 339: Rmon History Configuration

    User’s Manual of WGSW-20160HP  Log Index Indicates the index of the log entry.  LogTime Indicates Event log time.  LogDescription Indicates the Event description. Buttons : Click to refresh the Page immediately. Auto-refresh Check this box to refresh the Page automatically. Automatic refresh occurs every 3 seconds.
  • Page 340: Rmon History Detail

    User’s Manual of WGSW-20160HP Buttons : Click to add a new community entry. : Click to save changes. Click to undo any changes made locally and revert to previously saved values. 4.18.8 RMON History Detail This Page provides an detail of RMON history entries; screen in Figure 4-18-8 appears.
  • Page 341: Rmon History Status

    User’s Manual of WGSW-20160HP  Broadcast The total number of good packets received that were directed to the broadcast address.  Multicast The total number of good packets received that were directed to a multicast address.  CRC/Alignment The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets.
  • Page 342 User’s Manual of WGSW-20160HP Object Description  History Index Indicates the index of History control entry.  Sample Index Indicates the index of the data entry associated with the control entry  Sample Start The total number of events in which packets were dropped by the probe due to lack of resources.
  • Page 343: Rmon Statistics Configuration

    User’s Manual of WGSW-20160HP 4.18.10 RMON Statistics Configuration Configure RMON Statistics table on this Page. The entry index key is ID; screen in Figure 4-18-10 appears. Figure 4-18-10: RMON Statistics configuration Page Screenshot The Page includes the following fields: Object Description ...
  • Page 344: Rmon Statistics Detail

    User’s Manual of WGSW-20160HP 4.18.11 RMON Statistics Detail This Page provides an Detail of a specific RMON statistics entry; screen in Figure 4-18-11 appears. Figure 4-18-11: RMON Statistics Detail Page Screenshot The Page includes the following fields: Object Description  Data Source The port ID which wants to be monitored.
  • Page 345 User’s Manual of WGSW-20160HP  Oversize The total number of packets received that were longer than 1518 octets.  Fragements The number of frames which size is less than 64 octets received with invalid CRC.  Jabb. The number of frames which size is larger than 64 octets received with invalid CRC.
  • Page 346: Rmon Statistics Status

    User’s Manual of WGSW-20160HP 4.18.12 RMON Statistics Status This Page provides an overview of RMON Statistics entries. Each Page shows up to 99 entries from the Statistics table, default being 20, selected through the "entries per Page" input field. When first visited, the web Page will show the first 20 entries from the beginning of the Statistics table.
  • Page 347 User’s Manual of WGSW-20160HP  64 Bytes The total number of packets (including bad packets) received that were 64 octets in length.  65~127 The total number of packets (including bad packets) received that were between 65 to 127 octets in length.
  • Page 348: Command Line Interface

    User’s Manual of WGSW-20160HP 5. COMMAND LINE INTERFACE 5.1 Accessing the CLI When accessing the management interface for the Managed Switch over a direct connection to the server’s console port, or via a Telnet connection, the Managed Switch can be managed by entering command keywords and parameters at the prompt.
  • Page 349: Configure Ip Address

    5-2. Figure 5-2: Show IP Information Screen  Configure IP address On ”WGSW-20160HP:/> ” prompt, enter the following command and press <Enter>. As show in Figure 5-3. WGSW-20160HP:/IP> setup 192.168.1.100 255.255.255.0 192.168.1.1 The previous command would apply the follow settings for the Managed Switch.
  • Page 350 User’s Manual of WGSW-20160HP Figure 5-3: Set IP Address Screen Repeat Step 1 to check if the IP address is changed. If the IP is successfully configured, the Managed Switch will apply the new IP address setting immediately. You can access the Web interface of Managed Switch through the new IP address.
  • Page 351: Telnet Login

    User’s Manual of WGSW-20160HP 5.2 Telnet Login The Managed Switch also supports telnet for remote management. The Managed Switch asks for user name and password for remote login when using telnet, please use “admin” for username & password. Figure 5-4: Remote Telent Screen...
  • Page 352: Command Line Mode

    User’s Manual of WGSW-20160HP 6. Command Line Mode The CLI groups all the commands in appropriate modes according to the nature of the command. A sample of the CLI command modes are described below. Each of the command modes supports specific software commands.
  • Page 353: System Command

    User’s Manual of WGSW-20160HP 6.1 System Command System Configuration Description: Show system configuration. Syntax: System Configuration [all | (port <port_list>)] Parameters: : Show all switch configuration, default: Show system configuration : Show switch port configuration port <port_list>: Port list or 'all', default: All ports...
  • Page 354: System Log Server Mode

    User’s Manual of WGSW-20160HP System Log Server Mode Description: Show or set the system log server mode. Syntax: System Log Server Mode [enable|disable] Parameters: enable : Enable system log server mode disable: Disable system log server mode (default: Show system Log server mode)
  • Page 355: System Contact

    User’s Manual of WGSW-20160HP System Contact Description: Set or show the system contact. Syntax: System Contact [<contact>] Parameters: <contact>: System contact string. (1-255) Use "" to clear the string In CLI, No blank or space characters are permitted as part of a contact.
  • Page 356: System Location

    User’s Manual of WGSW-20160HP System Location Description: Set or show the system location. Syntax: System Location [<location>] Parameters: <location>: System location string. (1-255) Use "" to clear the string In CLI, no blank or space characters are permitted as part of a location.
  • Page 357: System Timezone

    User’s Manual of WGSW-20160HP System Timezone Description: Set or show the system timezone offset. Syntax: System Timezone [<offset>] Parameters: <offset>: Time zone offset in minutes (-720 to 720) relative to UTC Default Setting: System Log Lookup Description: Show or clear the system log.
  • Page 358: System Log Clear

    User’s Manual of WGSW-20160HP System Log Clear Description: Clear the system log. Syntax: System Log Clear [all|info|warning|error] Parameters: : Show all levels (default) : Show informations info warning : Show warnings : Show errors error System Reboot Description: Reboot the system.
  • Page 359: Ip Command

    User’s Manual of WGSW-20160HP 6.2 IP Command IP Configuration Description: Show IP configuration. Syntax: IP Configuration IP DHCP Description: Set or show the DHCP client mode. Syntax: IP DHCP [enable|disable] Parameters: enable : Enable or renew DHCP client disable: Disable DHCP client...
  • Page 360: Ip Setup

    User’s Manual of WGSW-20160HP IP Setup Description: Set or show the IP setup. Syntax: IP Setup [<ip_addr>] [<ip_mask>] [<ip_router>] [<vid>] Parameters: <ip_addr> : IP address (a.b.c.d), default: Show IP address <ip_mask> : IP subnet mask (a.b.c.d), default: Show IP mask <ip_router>: IP router (a.b.c.d), default: Show IP router...
  • Page 361: Ip Dns

    User’s Manual of WGSW-20160HP IP DNS Description: Set or show the DNS server address. Syntax: IP DNS [<ip_addr>] Parameters: <ip_addr>: IP address (a.b.c.d), default: Showdne IP address Default Setting: 0.0.0.0 IP DNS Proxy Description: Set or show the IP DNS Proxy mode.
  • Page 362: Ipv6 Autocinfig

    User’s Manual of WGSW-20160HP IPv6 AUTOCINFIG Description: Set or show the IPv6 AUTOCONFIG mode. Syntax: IP IPv6 AUTOCONFIG [enable|disable] Parameters: enable : Enable IPv6 AUTOCONFIG mode disable: Disable IPv6 AUTOCONFIG mode Default Setting: disable IPv6 Setup Description: Set or show the IPv6 setup.
  • Page 363: Ipv6 State

    User’s Manual of WGSW-20160HP IPv6 State Description: Disable or enable IPv6 State function Syntax: IP IPv6 State <ipv6_addr> [enable|disable] Parameters: enable : Enable IPv6 State function disable: Disable IPv6 State function Default Setting: disable IPv6 Ping Description: Ping IPv6 address (ICMPv6 echo).
  • Page 364: Ip Ntp Configuration

    User’s Manual of WGSW-20160HP IP NTP Configuration Description: Show NTP configuration. Syntax: IP NTP Configuration Default Setting: IP NTP Configuration: ===================== NTP Mode : Disabled Server IP host address (a.b.c.d) or a host name string ------------------------------------------------------ pool.ntp.org europe.pool.ntp.org north-america.pool.ntp.org asia.pool.ntp.org oceania.pool.ntp.org...
  • Page 365: Ip Ntp Server Add

    User’s Manual of WGSW-20160HP IP NTP Server Add Description: Add NTP server entry. Syntax: IP NTP Server Add <server_index> <ip_addr_string> Parameters: <server_index> : The server index (1-5) <ip_addr_string>: IP host address (a.b.c.d) or a host name string IP NTP Server IPv6 Add Description: Add NTP server IPv6 entry.
  • Page 366: Port Management Command

    User’s Manual of WGSW-20160HP 6.3 Port Management Command Port Configuration Description: Show port configuration. Syntax: Port Configuration [<port_list>] [up|down] Parameters: <port_list>: Port list or 'all', default: All ports : Show ports, which are up : Show ports, which are down...
  • Page 367: Port Flow Control

    User’s Manual of WGSW-20160HP Port Flow Control Description: Set or show the port flow control mode. Syntax: Port Flow Control [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Enable flow control enable : Disable flow control...
  • Page 368: Port Maximum Frame

    User’s Manual of WGSW-20160HP Port Maximum Frame Description: Set or show the port maximum frame size. Syntax: Port MaxFrame [<port_list>] [<max_frame>] Parameters: <port_list>: Port list or 'all', default: All ports <max_frame>: Port maximum frame size (1518-9600), default: Show maximum frame size...
  • Page 369: Port Excessive

    User’s Manual of WGSW-20160HP Port Excessive Description: Set or show the port excessive collision mode. Syntax: Port Excessive [<port_list>] [discard|restart] Parameters: <port_list>: Port list or 'all', default: All ports : Discard frame after 16 collisions discard : Restart backoff algorithm after 16 collisions...
  • Page 370: Port Veriphy

    User’s Manual of WGSW-20160HP Port VeriPHY Description: Run cable diagnostics. Syntax: Port VeriPHY [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Port Description Description: Set or show Port Description. Syntax: Port Description [<port_list>] [<descr_text>] Parameters: <port_list> : Port list or 'all', default: All ports <descr_text>: Text of port description...
  • Page 371: Mac Address Table Command

    User’s Manual of WGSW-20160HP 6.4 MAC Address Table Command MAC Configuration Description: Show MAC address table configuration. Syntax: MAC Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports MAC Add Description: Add MAC address table entry. Syntax: MAC Add <mac_addr> <port_list> [<vid>] Parameters: <mac_addr>...
  • Page 372: Mac Lookup

    User’s Manual of WGSW-20160HP MAC Lookup Description: Lookup MAC address entry. Syntax: MAC Lookup <mac_addr> [<vid>] Parameters: <mac_addr>: MAC address ('xx-xx-xx-xx-xx-xx' or 'xx.xx.xx.xx.xx.xx' or 'xxxxxxxxxxxx', x is a hexadecimal digit) : VLAN ID (1-4095), default: 1 <vid> MAC Age Time Description: Set or show the MAC address age timer.
  • Page 373: Mac Learning

    User’s Manual of WGSW-20160HP MAC Learning Description: Set or show the port learn mode. Syntax: MAC Learning [<port_list>] [auto|disable|secure] Parameters: <port_list>: Port list or 'all', default: All ports : Automatic learning auto disable: Disable learning secure : Secure learning (default: Show learn mode)
  • Page 374: Mac Statistics

    User’s Manual of WGSW-20160HP MAC Statistics Description: Show MAC address table statistics. Syntax: MAC Statistics [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports MAC Flush Description: Flush all learned entries. Syntax: MAC Flush...
  • Page 375: Vlan Configuration Command

    User’s Manual of WGSW-20160HP 6.5 VLAN Configuration Command VLAN Configuration Description: Show VLAN configuration. Syntax: VLAN Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports VLAV PVID Description: Set or show the port VLAN ID. Syntax: VLAN PVID [<port_list>] [<vid>|none] Parameters: <port_list>: Port list or 'all', default: All ports...
  • Page 376: Vlan Frame Type

    User’s Manual of WGSW-20160HP VLAN Frame Type Description: Set or show the port VLAN frame type. Syntax: VLAN FrameType [<port_list>] [all|tagged] Parameters: <port_list>: Port list or 'all', default: All ports : Allow tagged and untagged frames : Allow tagged frames only...
  • Page 377: Vlan Mode

    User’s Manual of WGSW-20160HP VLAN Mode Description: Set or show the VLAN Mode. Syntax: VLAN Mode [portbased|dot1q] Parameters: : Port-Based VLAN Mode portbased : 802.1Q VLAN Mode dot1q (default: Show VLAN Mode) Default Setting: IEEE 802.1Q VLAN Link Type Description: Set or show the port VLAN link type.
  • Page 378: Vlan Q-In-Q Mode

    User’s Manual of WGSW-20160HP VLAN Q-in-Q Mode Description: Set or show the port Q-in-Q mode. Syntax: VLAN QinQ [<port_list>] [disable|man|customer] Parameters: <port_list>: Port list or 'all', default: All ports : Disable Q-in-Q VLAN Mode disable : Q-in-Q MAN Port Mode...
  • Page 379: Vlan Add

    User’s Manual of WGSW-20160HP VLAN Add Description: Add or modify VLAN entry. Syntax: VLAN Add <vid>|<name> [<port_list>] Parameters: <vid>|<name>: VLAN ID (1-4095) or VLAN Name <port_list> : Port list or 'all', default: All ports Default Setting: VLAN Forbidden Add Description: Add or modify VLAN entry in forbidden table.
  • Page 380: Vlan Forbidden Delete

    User’s Manual of WGSW-20160HP VLAN Forbidden Delete Description: Delete VLAN entry. Syntax: LAN Forbidden Delete <vid>|<name> Parameters: <vid>|<name>: VLAN ID (1-4095) or VLAN Name VLAN Forbidden Lookup Description: Lookup VLAN Forbidden port entry. Syntax: VLAN Forbidden Lookup [<vid>] [(name <name>)] Parameters: <vid>...
  • Page 381: Vlan Lookup

    User’s Manual of WGSW-20160HP VLAN Lookup Description: Lookup VLAN entry. Syntax: VLAN Lookup [<vid>] [(name <name>)] [combined|static|nas|mvr|voice_vlan|all] Parameters: <vid> : VLAN ID (1-4095), default: Show all VLANs name : VLAN name string <name>: VLAN name - Maximum of 32 characters. VLAN Name can only contain alphabets or numbers.
  • Page 382: Vlan Name Delete

    User’s Manual of WGSW-20160HP VLAN Name Delete Description: Delete VLAN Name to VLAN ID Mapping. Syntax: VLAN Name Delete <name> Parameters: <name>: VLAN name - Maximum of 32 characters. VLAN Name can only contain alphabets or numbers. VLAN name should contain atleast one alphabet.
  • Page 383: Vlan Status

    User’s Manual of WGSW-20160HP VLAN Status Description: VLAN Port Configuration Status. Syntax: VLAN Status [<port_list>] [combined|static|nas|mvr|voice_vlan|mstp|all|conflicts] Parameters: <port_list>: Port list or 'all', default: All ports : combined VLAN Users configuration combined : static port configuration static : NAS port configuration...
  • Page 384: Private Vlan Configuration Command

    User’s Manual of WGSW-20160HP 6.6 Private VLAN Configuration Command PVLAN Configuration Description: Show Private VLAN configuration. Syntax: PVLAN Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports PVLAN Add Description: Add or modify Private VLAN entry. Syntax: PVLAN Add <pvlan_id> [<port_list>] Parameters: <pvlan_id>...
  • Page 385: Pvlan Lookup

    User’s Manual of WGSW-20160HP PVLAN Lookup Description: Lookup Private VLAN entry. Syntax: PVLAN Lookup [<pvlan_id>] Parameters: <pvlan_id>: Private VLAN ID, default: Show all PVLANs. The allowed range for a Private VLAN ID is the same as the switch port number range.
  • Page 386: Security Command

    User’s Manual of WGSW-20160HP 6.7 Security Command Security Switch User Configuration Description: Show users configuration. Syntax: Security Switch Users Configuration Default Setting: User Name Privilege admin Security Switch User Add Description: Add or modify users entry. Syntax: Security Switch Users Add <user_name> <password> <privilege_level>...
  • Page 387: Security Switch Privilege Level Configuration

    User’s Manual of WGSW-20160HP Security Switch Privilege Level Configuration Description: Show privilege configuration. Syntax: Security Switch Privilege Level Configuration Security Switch Privilege Level Group Description: Configure a privilege level group. Syntax: Security Switch Privilege Level Group <group_name> [<cro>] [<crw>] [<sro>] [<srw>] Parameters: <group_name>: Privilege group name...
  • Page 388: Security Switch Authentication Configuration

    User’s Manual of WGSW-20160HP Security Switch Authentication Configuration Description: Show Auth configuration. Syntax: Security Switch Auth Configuration Security Switch Authentication Method Description: Set or show Auth method. (default: Show Auth method). Syntax: Security Switch Auth Method [console|telnet|ssh|web] [none|local|radius|tacacs+] [enable|disable] Parameters:...
  • Page 389: Security Switch Ssh Configuration

    User’s Manual of WGSW-20160HP Security Switch SSH Configuration Description: Show SSH configuration. Syntax: Security Switch SSH Configuration Security Switch SSH Mode Description: Set or show the SSH mode. Syntax: Security Switch SSH Mode [enable|disable] Parameters: enable : Enable SSH disable: Disable SSH...
  • Page 390: Security Switch Https Mode

    User’s Manual of WGSW-20160HP Security Switch HTTPs Mode Description: Set or show the HTTPS mode. Syntax: Security Switch HTTPS Mode [enable|disable] Parameters: enable : Enable HTTPs disable: Disable HTTPs (default: Show HTTPs mode) Default Setting: enable Security Switch HTTPs Redirect Description: Set or show the HTTPS redirect mode.
  • Page 391: Security Switch Access Configuration

    User’s Manual of WGSW-20160HP Security Switch Access Configuration Description: Show access management configuration. Syntax: Security Switch Access Configuration Security Switch Access Mode Description: Set or show the access management mode. Syntax: Security Switch Access Mode [enable|disable] Parameters: enable : Enable access management...
  • Page 392: Security Switch Access Ipv6 Add

    User’s Manual of WGSW-20160HP Security Switch Access IPv6 Add Description: Add access management IPv6 entry, default: Add all supported protocols. Syntax: Security Switch Access Ipv6 Add <access_id> <start_ipv6_addr> <end_ipv6_addr> [web] [snmp] [telnet] Parameters: : entry index (1-16) <access_id> <start_ipv6_addr>: Start IPv6 address.
  • Page 393: Security Switch Access Lookup

    User’s Manual of WGSW-20160HP Security Switch Access Lookup Description: Lookup access management entry. Syntax: Security Switch Access Lookup [<access_id>] Parameters: : entry index (1-16) <access_id> Security Switch Access Clear Description: Clear access management entry. Syntax: Security Switch Access Clear Security Switch Access Statistics Description: Show or clear access management statistics.
  • Page 394: Security Switch Snmp Mode

    User’s Manual of WGSW-20160HP Security Switch SNMP Mode Description: Set or show the SNMP mode. Syntax: Security Switch SNMP Mode [enable|disable] Parameters: enable : Enable SNMP disable: Disable SNMP (default: Show SNMP mode) Default Setting: enable Security Switch SNMP Version Description: Set or show the SNMP protocol version.
  • Page 395: Security Switch Snmp Read Community

    User’s Manual of WGSW-20160HP Security Switch SNMP Read Community Description: Set or show the community string for SNMP read access. Syntax: Security Switch SNMP Read Community [<community>] Parameters: <community>: Community string. Use 'clear' or "" to clear the string Maximum length allowed is upto 256 characters.
  • Page 396: Security Switch Snmp Trap Mode

    User’s Manual of WGSW-20160HP Security Switch SNMP Trap Mode Description: Set or show the SNMP trap mode. Syntax: Security Switch SNMP Trap Mode [enable|disable] Parameters: enable : Enable SNMP traps disable: Disable SNMP traps (default: Show SNMP trap mode) Default Setting:...
  • Page 397: Security Switch Snmp Trap Community

    User’s Manual of WGSW-20160HP Security Switch SNMP Trap Community Description: Set or show the community string for SNMP traps. Syntax: Security Switch SNMP Trap Community [<community>] Parameters: <community>: Community string. Use 'clear' or "" to clear the string Maximum length allowed is upto 256 characters.
  • Page 398: Security Switch Snmp Trap Authentication Failure

    User’s Manual of WGSW-20160HP Security Switch SNMP Trap Authentication Failure Description: Set or show the SNMP authentication failure trap mode. Syntax: Security Switch SNMP Trap Authentication Failure [enable|disable] Parameters: enable : Enable SNMP trap authentication failure disable: Disable SNMP trap authentication failure...
  • Page 399: Security Switch Snmp Trap Inform Mode

    User’s Manual of WGSW-20160HP Security Switch SNMP Trap Inform Mode Description: Set or show the SNMP trap inform mode. Syntax: Security Switch SNMP Trap Inform Mode [enable|disable] Parameters: enable : Enable SNMP trap inform disable: Disable SNMP trap inform (default: Show SNMP inform mode)
  • Page 400: Security Switch Snmp Trap Inform Retry Times

    User’s Manual of WGSW-20160HP Security Switch SNMP Trap Inform Retry Times Description: Set or show the SNMP trap inform retry times. Syntax: Security Switch SNMP Trap Inform Retry Times [<retries>] Parameters: <retries>: SNMP trap inform retransmited times (0-255) (default: Show SNMP trap inform retry times)
  • Page 401: Security Switch Snmp Trap Security Engine Id

    User’s Manual of WGSW-20160HP Security Switch SNMP Trap Security Engine ID Description: Set or show SNMP trap security engine ID. Syntax: Security Switch SNMP Trap Security Engine ID [<engineid>] Parameters: <engineid>: Engine ID, the format may not be all zeros or all 'ff'H and is restricted to 5 - 32 octet string...
  • Page 402: Security Switch Snmp Community Add

    User’s Manual of WGSW-20160HP Security Switch SNMP Community Add Description: Add or modify SNMPv3 community entry. The entry index key is <community>. Syntax: Security Switch SNMP Community Add <community> [<ip_addr>] [<ip_mask>] Parameters: <community>: Community string <ip_addr> : IP address (a.b.c.d), default: Show IP address <ip_mask>...
  • Page 403: Security Switch Snmp User Add

    User’s Manual of WGSW-20160HP Security Switch SNMP User Add Description: Add SNMPv3 user entry. The entry index key are <engineid> and <user_name> and it doesn't allow modify. Syntax: Security Switch SNMP User Add <engineid> <user_name> [MD5|SHA] [<auth_password>] [DES] [<priv_password>] Parameters: : Engine ID, the format may not be all zeros or all 'ff'H and is restricted to 5 - 32 octet string <engineid>...
  • Page 404: Security Switch Snmp User Changekey

    User’s Manual of WGSW-20160HP Security Switch SNMP User Changekey Description: Change SNMPv3 user password. Syntax: Security Switch SNMP User Changekey <engineid> <user_name> <auth_password> [<priv_password>] Parameters: : Engine ID, the format may not be all zeros or all 'ff'H and is restricted to 5 - 32 octet string <engineid>...
  • Page 405: Security Switch Snmp Group Add

    User’s Manual of WGSW-20160HP Security Switch SNMP Group Add Description: Add or modify SNMPv3 group entry. The entry index key are <security_model> and <security_name>. Syntax: Security Switch SNMP Group Add <security_model> <security_name> <group_name> Parameters: <security_model>: v1 - Reserved for SNMPv1...
  • Page 406: Security Switch Snmp View Add

    User’s Manual of WGSW-20160HP Security Switch SNMP View Add Description: Add or modify SNMPv3 view entry. The entry index key are <view_name> and <oid_subtree>. Syntax: Security Switch SNMP View Add <view_name> [included|excluded] <oid_subtree> Parameters: <view_name> : A string identifying the view name that this entry should belong to. The allowed string length is (1-32),...
  • Page 407: Security Switch Snmp Access Add

    User’s Manual of WGSW-20160HP Security Switch SNMP Access Add Description: Add or modify SNMPv3 access entry. The entry index key are <group_name>, <security_model> and <security_level>. Syntax: Security Switch SNMP Access Add <group_name> <security_model> <security_level> [<read_view_name>] [<write_view_name>] Parameters: : A string identifying the group name that this entry should belong to. The allowed string length is <group_name>...
  • Page 408: Security Switch Snmp Access Lookup

    User’s Manual of WGSW-20160HP Security Switch SNMP Access Lookup Description: Lookup SNMPv3 access entry. Syntax: Security Switch SNMP Access Lookup [<index>] Parameters: <index>: entry index (1-64) Security Switch RMON Statistics Add Description: Add or modify RMON Statistics entry. The entry index key is <stats_id>.
  • Page 409: Security Switch Rmon Statistics Lookup

    User’s Manual of WGSW-20160HP Security Switch RMON Statistics Lookup Description: Show RMON Statistics entries. Syntax: Security Switch RMON Statistics Lookup [<stats_id>] Parameters: <stats_id>: Statistics ID (1-65535). Security Switch RMON History Add Description: Add or modify RMON Hisotry entry. The entry index key is <history_id>.
  • Page 410: Security Switch Rmon History Lookup

    User’s Manual of WGSW-20160HP Security Switch RMON History Lookup Description: Show RMON History entries. Syntax: Security Switch RMON History Lookup [<history_id>] Parameters: <history_id> : History ID (1-65535). Security Switch RMON Alarm Add Description: Add or modify RMON Alarm entry. The entry index key is <alarm_id>.
  • Page 411: Security Switch Rmon Alarm Delete

    User’s Manual of WGSW-20160HP : Rising threshold value (-2147483648–2147483647). <rising_threshold> <rising_event_index> : Rising event index (1-65535). <falling_threshold> : Falling threshold value (-2147483648–2147483647). <falling_event_index>: Falling event index (1-65535). : Trigger alarm when the first value is larger than the rising threshold.
  • Page 412: Security Switch Rmon Event Add

    User’s Manual of WGSW-20160HP Security Switch RMON Event Add Description: Add or modify RMON Event entry. The entry index key is <event_id>. Syntax: Security Switch RMON Event Add <event_id> [none|log|trap|log_trap] [<community>] [<description>] Parameters: : Event ID (1-65535). <event_id> : Get the sample directly.
  • Page 413: Security Network Psec Switch

    User’s Manual of WGSW-20160HP Security Network Psec Switch Description: Show Port Security status. Syntax: Security Network Psec Switch [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Security Network Psec Port Description: Show MAC Addresses learned by Port Security.
  • Page 414: Security Network Limit Mode

    User’s Manual of WGSW-20160HP Security Network Limit Mode Description: Set or show global state. Syntax: Security Network Limit Mode [enable|disable] Parameters: enable : Globally enable port security disable : Globally disable port security (default: Show current global enabledness of port security limit control)
  • Page 415: Security Network Limit Agetime

    User’s Manual of WGSW-20160HP Security Network Limit Agetime Description: Time in seconds between check for activity on learned MAC addresses. Syntax: Security Network Limit Agetime [<age_time>] Parameters: <age_time>: Time in seconds between checks for activity on a MAC address (10-10000000 seconds)
  • Page 416: Security Network Limit Limit

    User’s Manual of WGSW-20160HP Security Network Limit Limit Description: Set or show the max. number of MAC addresses that can be learned on this set of ports. Syntax: Security Network Limit Limit [<port_list>] [<limit>] Parameters: <port_list>: Port list or 'all', default: All ports : Max.
  • Page 417: Security Network Limit Reopen

    User’s Manual of WGSW-20160HP Security Network Limit Reopen Description: Reopen one or more ports whose limit is exceeded and shut down. Syntax: Security Network Limit Reopen [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Security Network NAS Configuration Description: Show 802.1X configuration.
  • Page 418: Security Network Nas State

    User’s Manual of WGSW-20160HP Security Network NAS State Description: Set or show the port security state. Syntax: Security Network NAS State [<port_list>] [auto|authorized|unauthorized|single|multi|macbased] Parameters: <port_list>: Port list or 'all', default: All ports : Port-based 802.1X Authentication auto authorized : Port access is allowed unauthorized: Port access is not allowed : Single Host 802.1X Authentication...
  • Page 419: Security Network Nas Reauthperiod

    User’s Manual of WGSW-20160HP Security Network NAS ReauthPeriod Description: Set or show the period between reauthentication attempts. Syntax: Security Network NAS ReauthPeriod [<reauth_period>] Parameters: <reauth_period>: Period between reauthentication attempts (1-3600 seconds) (default: Show current reauthentication period) Default Setting: 3600 Security Network NAS EapolTimeout Description: Set or show the time between EAPOL retransmissions.
  • Page 420: Security Network Nas Agetime

    User’s Manual of WGSW-20160HP Security Network NAS Agetime Description: Time in seconds between check for activity on successfully authenticated MAC addresses. Syntax: Security Network NAS Agetime [<age_time>] Parameters: <age_time>: Time between checks (10-1000000 seconds) (default: Show current age time) Default Setting:...
  • Page 421: Security Network Nas Radius_Qos

    User’s Manual of WGSW-20160HP Security Network NAS RADIUS_QoS Description: Set or show either global state (use the global keyword) or per-port state of RADIUS-assigned QoS. Syntax: Security Network NAS RADIUS_QoS [global|<port_list>] [enable|disable] Parameters: : Select the global RADIUS-assigned QoS setting global <port_list>: Select the per-port RADIUS-assigned QoS setting...
  • Page 422: Security Network Nas Guest_Vlan

    User’s Manual of WGSW-20160HP Security Network NAS Guest_VLAN Description: Set or show either global state and parameters (use the global keyword) or per-port state of Guest VLAN. Unless the 'global' keyword is used, the <reauth_max> and <allow_if_eapol_seen> parameters will not be unused.
  • Page 423: Security Network Nas Authenticate

    User’s Manual of WGSW-20160HP Security Network NAS Authenticate Description: Refresh (restart) 802.1X authentication process. Syntax: Security Network NAS Authenticate [<port_list>] [now] Parameters: <port_list>: Port list or 'all', default: All ports : Force reauthentication immediately (default: Schedule a reauthentication) Security Network NAS Statistics Description: Show or clear 802.1X statistics.
  • Page 424: Security Network Acl Action

    User’s Manual of WGSW-20160HP Security Network ACL Action Description: Set or show the ACL port default action. Syntax: Security Network ACL Action [<port_list>] [permit|deny] [<rate_limiter>] [<port_redirect>] [<logging>] [<shutdown>] Parameters: : Port list or 'all', default: All ports <port_list> : Permit forwarding (default)
  • Page 425: Security Network Acl Rate

    User’s Manual of WGSW-20160HP Security Network ACL Rate Description: Set or show the ACL rate limiter. Syntax: Security Network ACL Rate [<rate_limiter_list>] [<rate>] Parameters: <rate_limiter_list>: Rate limiter list (1-16), default: All rate limiters : Rate in pps (0-131071) <rate> Default Setting:...
  • Page 426 User’s Manual of WGSW-20160HP : Policy number (0-255) <policy> <policy_bitmask>: Policy number bitmask (0x0-0xFF) : VLAN ID (1-4095) or 'any' <vid> : VLAN tag priority (0-7) or 'any' <tag_prio> : DMAC type: any|unicast|multicast|broadcast <dmac_type> : Ethernet Type keyword etype : Ethernet Type: 0x600 - 0xFFFF or 'any' but excluding 0x800(IPv4) 0x806(ARP) and 0x86DD(IPv6) <etype>...
  • Page 427: Security Network Acl Delete

    User’s Manual of WGSW-20160HP Security Network ACL Delete Description: Delete ACE. Syntax: Security Network ACL Delete <ace_id> Parameters: <ace_id>: ACE ID (1-512) Security Network ACL Lookup Description: Show ACE, default: All ACEs. Syntax: Security Network ACL Lookup [<ace_id>] Parameters: <ace_id>: ACE ID (1-512)
  • Page 428: Security Network Acl Status

    User’s Manual of WGSW-20160HP Security Network ACL Status Description: Show ACL status. Syntax: Security Network ACL Status [combined|static|loop_protect|dhcp|upnp|arp_inspection|ipmc|ip_source_guard|conflicts] Parameters: : Show combined status combined : Show static user configured status static : Shows the status by Loop Protect loop_protect : Show DHCP status...
  • Page 429: Security Network Dhcp Relay Configuration

    User’s Manual of WGSW-20160HP Security Network DHCP Relay Configuration Description: Show DHCP relay configuration. Syntax: Security Network DHCP Relay Configuration Security Network DHCP Relay Mode Description: Set or show the DHCP relay mode. Syntax: Security Network DHCP Relay Mode [enable|disable] Parameters: enable : Enable DHCP relaly mode.
  • Page 430: Security Network Dhcp Relay Information Mode

    User’s Manual of WGSW-20160HP Security Network DHCP Relay Information Mode Description: Set or show DHCP relay agent information option mode. When enable DHCP relay information mode operation, the agent insert specific information (option 82) into a DHCP message when forwarding to DHCP server and remote it from a DHCP message when transferring to DHCP client. It only works under DHCP relay operation mode enabled.
  • Page 431: Security Network Dhcp Relay Statistics

    User’s Manual of WGSW-20160HP Security Network DHCP Relay Statistics Description: Show or clear DHCP relay statistics. Syntax: Security Network DHCP Relay Statistics [clear] Parameters: clear: Clear DHCP relay statistics Security Network DHCP Snooping Configuration Description: Show DHCP snooping configuration. Syntax:...
  • Page 432: Security Network Dhcp Snooping Port Mode

    User’s Manual of WGSW-20160HP Security Network DHCP Snooping Port Mode Description: Set or show the DHCP snooping port mode. Syntax: Security Network DHCP Snooping Port Mode [<port_list>] [trusted|untrusted] Parameters: <port_list>: Port list or 'all', default: All ports trusted : Configures the port as trusted sources of the DHCP message...
  • Page 433: Security Network Ip Source Guard Configuration

    User’s Manual of WGSW-20160HP Security Network IP Source Guard Configuration Description: Show IP source guard configuration. Syntax: Security Network IP Source Guard Configuration Security Network IP Source Guard Mode Description: Set or show IP source guard mode. Syntax: Security Network IP Source Guard Mode [enable|disable]...
  • Page 434: Security Network Ip Source Guard Limit

    User’s Manual of WGSW-20160HP Security Network IP Source Guard Limit Description: Set or show the IP Source Guard port limitation for dynamic entries. Syntax: Security Network IP Source Guard limit [<port_list>] [<dynamic_entry_limit>|unlimited] Parameters: : Port list or 'all', default: All ports <port_list>...
  • Page 435: Security Network Ip Source Guard Translation

    User’s Manual of WGSW-20160HP Security Network IP Source Guard Translation Description: Translate IP source guard dynamic entries into static entries. Syntax: Security Network IP Source Guard Translation Security Network ARP Inspection Configuration Description: Show ARP inspection configuration. Syntax: Security Network ARP Inspection Configuration...
  • Page 436: Security Network Arp Inspection Port Mode

    User’s Manual of WGSW-20160HP Security Network ARP Inspection Port Mode Description: Set or show the ARP Inspection port mode. Syntax: Security Network ARP Inspection Port Mode [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports enable : Enable ARP Inspection port...
  • Page 437: Security Network Arp Inspection Status

    User’s Manual of WGSW-20160HP Security Network ARP Inspection Status Description: Show ARP inspection static and dynamic entries. Syntax: Security Network ARP Inspection Status [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Security Network ARP Inspection Translation Description: Translate ARP inspection dynamic entries into static entries.
  • Page 438: Security Aaa Deadtime

    User’s Manual of WGSW-20160HP Security AAA Deadtime Description: Set or show server dead time. Syntax: Security AAA Deadtime [<dead_time>] Parameters: <dead_time>: Time that a server is considered dead if it doesn't answer a request (0-3600 seconds) (default: Show server dead time configuration)
  • Page 439: Security Aaa Acct_Radius

    User’s Manual of WGSW-20160HP Security AAA ACCT_RADIUS Description: Set or show RADIUS accounting server setup. Syntax: Security AAA ACCT_RADIUS [<server_index>] [enable|disable] [<ip_addr_string>] [<secret>] [<server_port>] Parameters: The server index (1-5) (default: Show RADIUS accounting server configuration) : Enable RADIUS accounting server...
  • Page 440: Security Aaa Statistics

    User’s Manual of WGSW-20160HP Security AAA Statistics Description: Show RADIUS statistics. Syntax: Security AAA Statistics [<server_index>] Parameters: The server index (1-5) (default: Show statistics for all servers)
  • Page 441: Spanning Tree Protocol Command

    User’s Manual of WGSW-20160HP 6.8 Spanning Tree Protocol Command STP Configuration Description: Show STP Bridge configuration. Syntax: STP Configuration STP Version Description: Set or show the STP Bridge protocol version. Syntax: STP Version [<stp_version>] Parameters: <stp_version>: mstp|rstp|stp Default Setting: MSTP...
  • Page 442: Stp Tx Hold

    User’s Manual of WGSW-20160HP STP Tx Hold Description: Set or show the STP Bridge Transmit Hold Count parameter. Syntax: STP Txhold [<holdcount>] Parameters: <holdcount>: STP Transmit Hold Count (1-10) Default Setting: STP MaxHops Description: Set or show the MSTP Bridge Max Hop Count parameter.
  • Page 443: Stp Maxage

    User’s Manual of WGSW-20160HP STP MaxAge Description: Set or show the bridge instance maximum age. Syntax: STP MaxAge [<max_age>] Parameters: <max_age>: STP maximum age time (6-40, and max_age <= (forward_delay-1)*2) Default Setting: STP FwdDelay Description: Set or show the bridge instance forward delay.
  • Page 444: Stp Cname

    User’s Manual of WGSW-20160HP STP CName Description: Set or Show MSTP configuration name and revision. Syntax: STP CName [<config-name>] [<integer>] Parameters: <config-name>: MSTP Configuration name. A text string up to 32 characters long. Use quotes (") to embed spaces in name.
  • Page 445: Stp Bpdu Guard

    User’s Manual of WGSW-20160HP STP BPDU Guard Description: Set or show edge port BPDU Guard. Syntax: STP bpduGuard [enable|disable] Parameters: enable|disable: enable or disable BPDU Guard for Edge ports Default Setting: Disable STP Recovery Description: Set or show edge port error recovery timeout.
  • Page 446: Stp Msti Priority

    User’s Manual of WGSW-20160HP STP MSTI Priority Description: Set or show the bridge instance priority. Syntax: STP Msti Priority [<msti>] [<priority>] Parameters: : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...) <msti> <priority> : STP bridge priority (0/4096/8192/12288/.../53248/57344/61440) Default: 32768...
  • Page 447: Stp Port Configuration

    User’s Manual of WGSW-20160HP STP Port Configuration Description: Show STP Port configuration. Syntax: STP Port Configuration [<stp_port_list>] Parameters: <port_list>: Port list or 'all'. Port zero means aggregations. STP Port Mode Description: Set or show the STP enabling for a port.
  • Page 448: Stp Port Autoedge

    User’s Manual of WGSW-20160HP STP Port AutoEdge Description: Set or show the STP autoEdge port parameter. Syntax: STP Port AutoEdge [<stp_port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Enable MSTP autoEdge Enable : Disable MSTP autoEdge...
  • Page 449: Stp Port Restrictedrole

    User’s Manual of WGSW-20160HP STP Port RestrictedRole Description: Set or show the MSTP restrictedRole port parameter. Syntax: STP Port RestrictedRole [<stp_port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Enable MSTP restricted role enable : Disable MSTP restricted role...
  • Page 450: Stp Port Bpduguard

    User’s Manual of WGSW-20160HP STP Port bpduGuard Description: Set or show the bpduGuard port parameter. Syntax: STP Port bpduGuard [<stp_port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Enable port BPDU Guard enable : Disable port BPDU Guard...
  • Page 451: Stp Msti Port Configuration

    User’s Manual of WGSW-20160HP STP MSTI Port Configuration Description: Show the STP port instance configuration. Syntax: STP Msti Port Configuration [<msti>] [<stp_port_list>] Parameters: : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...) <msti> <port_list>: Port list or 'all', default: All ports...
  • Page 452: Link Aggregation Command

    User’s Manual of WGSW-20160HP 6.9 Link Aggregation Command Aggregation Configuration Description: Show link aggregation configuration. Syntax: Aggr Configuration Aggregation Add Description: Add or modify link aggregation. Syntax: Aggr Add <port_list> [<aggr_id>] Parameters: <port_list>: Port list or 'all', default: All ports <aggr_id>...
  • Page 453: Aggregation Lookup

    User’s Manual of WGSW-20160HP Aggregation Lookup Description: Lookup link aggregation. Syntax: Aggr Lookup [<aggr_id>] Parameters: <aggr_id>: Aggregation ID: 1-14 Aggregation Mode Description: Set or show the link aggregation traffic distribution mode. Syntax: Aggr Mode [smac|dmac|ip|port] [enable|disable] Parameters: : Source MAC address...
  • Page 454: Link Aggregation Control Protocol Command

    User’s Manual of WGSW-20160HP 6.10 Link Aggregation Control Protocol Command LACP Configuration Description: Show LACP configuration. Syntax: LACP Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports LACP Mode Description: Set or show LACP mode. Syntax: LACP Mode [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports...
  • Page 455: Lacp Key

    User’s Manual of WGSW-20160HP LACP Key Description: Set or show the LACP key. Syntax: LACP Key [<port_list>] [<key>] Parameters: <port_list>: Port list or 'all', default: All ports : LACP key (1-65535) or 'auto' <key> Default Setting: auto LACP Priority Description: Set or show the LACP prio.
  • Page 456: Lacp System Priority

    User’s Manual of WGSW-20160HP LACP System Priority Description: Set or show the LACP System prio. Syntax: LACP System Prio [<sysprio>] Parameters: <sysprio>: LACP System Prio (0-65535) Default Setting: 32768 LACP Role Description: Set or show the LACP role. Syntax: LACP Role [<port_list>] [active|passive] Parameters: <port_list>: Port list or 'all', default: All ports...
  • Page 457: Lacp Statistics

    User’s Manual of WGSW-20160HP LACP Statistics Description: Show LACP Statistics. Syntax: LACP Statistics [<port_list>] [clear] Parameters: <port_list>: Port list or 'all', default: All ports : Clear LACP statistics clear LACP Timeout Description: Set or show the LACP timeout. Syntax: LACP Timeout [<port_list>] [fast|slow] Parameters: <port_list>: Port list or 'all', default: All ports...
  • Page 458: Lldp Command

    User’s Manual of WGSW-20160HP 6.11 LLDP Command LLDP Configuration Description: Show LLDP configuration. Syntax: LLDP Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports LLDP Mode Description: Set or show LLDP mode. Syntax: LLDP Mode [<port_list>] [enable|disable|rx|tx] Parameters: <port_list>: Port list or 'all', default: All ports...
  • Page 459: Lldp Optional Tlv

    User’s Manual of WGSW-20160HP LLDP Optional TLV Description: Show or Set LLDP Optional TLVs. Syntax: LLDP Optional_TLV [<port_list>] [port_descr|sys_name|sys_descr|sys_capa|mgmt_addr] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Description of the port port_descr : System name sysm_name : Description of the system...
  • Page 460: Lldp Hold

    User’s Manual of WGSW-20160HP LLDP Hold Description: Set or show LLDP Tx hold value. Syntax: LLDP Hold [<hold>] Parameters: <hold>: LLDP hold value (2-10) Default Setting: LLDP Delay Description: Set or show LLDP Tx delay. Syntax: LLDP Delay [<delay>] Parameters: <delay>: LLDP transmission delay (1-8192)
  • Page 461: Lldp Statistics

    User’s Manual of WGSW-20160HP LLDP Statistics Description: Show LLDP Statistics. Syntax: LLDP Statistics [<port_list>] [clear] Parameters: <port_list>: Port list or 'all', default: All ports : Clear LLDP statistics clear LLDP Info Description: Show LLDP neighbor device information. Syntax: LLDP Info [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports...
  • Page 462: Lldpmed Command

    User’s Manual of WGSW-20160HP 6.12 LLDPMED Command LLDPMED Configuration Description: Show LLDP-MED configuration. Syntax: LLDPMED Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports LLDPMED Civic Description: Set or show LLDP-MED Civic Address Location. Syntax: LLDPMED Civic [country|state|county|city|district|block|street|leading_street_direction|trailing_street_suffix|str_suf|house_no|house_no_s uffix|landmark|additional_info|name|zip_code|building|apartment|floor|room_number|place_type|postal_com_name|p_o_ box|additional_code] [<civic_value>]...
  • Page 463: Lldpmed Ecs

    User’s Manual of WGSW-20160HP : Postal/zip code zip_code : Building (structure) building : Unit (apartment, suite) apartment : Floor floor : Room number room_number : Placetype place_type : Postal community name postal_com_name : Post office box (P.O. Box) p_o_box : Addtional code...
  • Page 464: Lldpmed Policy Add

    User’s Manual of WGSW-20160HP LLDPMED Policy Add Description: Adds a policy to the list of polices. Syntax: LLDPMED policy add <policy_type> [tagged|untagged] [<vlan_id>] [<l2_priority>] [<dscp>] Parameters: <policy_type>: The policy_type parameter takes the following values: : Voice for use by dedicated IP Telephony handsets and other similar appliances supporting interactive voice voice services.
  • Page 465: Lldpmed Port Policies

    User’s Manual of WGSW-20160HP LLDPMED Port Policies Description: Set or show LLDP-MED port polcies. Syntax: LLDPMED port policies [<port_list>] [<policy_list>] Parameters: <port_list> : Port list or 'all', default: All ports <policy_list>: List of policies to delete LLDPMED Coordinates Description: Set or show LLDP-MED Location.
  • Page 466: Lldpmed Datum

    User’s Manual of WGSW-20160HP LLDPMED Datum Description: Set or show LLDP-MED Coordinates map datum. Syntax: LLDPMED Datum [<datum_type>] Parameters: <datum_type>: The datum_type parameter takes the following values: : WGS84 wgs84 nad83_navd88 : NAD83_NAVD88 : NAD83_MLLW nad83_mllw LLDPMED Fast Description: Set or show LLDP-MED Fast Start Repeat Count.
  • Page 467: Poe Command

    User’s Manual of WGSW-20160HP 6.13 PoE Command PoE Configuration Description: Show PoE configuration. Syntax: PoE Configuration PoE Mode Description: Set or show the PoE mode. Syntax: PoE Mode [<port_list>] [enable|disable] [af|at] Parameters: <port_list>: Port list or 'all', default: All ports...
  • Page 468: Poe Priority

    User’s Manual of WGSW-20160HP PoE Priority Description: Show / Set PoE Priority. Syntax: PoE Priority [<port_list>] [low|high|critical] Parameters: <port_list>: Port list or 'all', default: All ports : Set priority to low : Set priority to high high critical: Set priority to critical...
  • Page 469: Poe Power Supply

    User’s Manual of WGSW-20160HP PoE Power Supply Description: Set or show the value of the power supply. Syntax: PoE Power_Supply [<supply_power>] Parameters: <supply_power>: PoE power for a power supply PoE Status Description: Show PoE status. Syntax: PoE Status...
  • Page 470: Quality Of Service Command

    User’s Manual of WGSW-20160HP 6.14 Quality of Service Command QoS Configuration Description: Show QoS Configuration. Syntax: QoS Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports QoS Port Classification Class Description: Set or show the default QoS class.
  • Page 471: Qos Port Classification Dpl

    User’s Manual of WGSW-20160HP QoS Port Classification DPL Description: Set or show the default Drop Precedence Level. Syntax: QoS Port Classification DPL [<port_list>] [<dpl>] Parameters: <port_list>: Port list or 'all', default: All ports : Drop Precedence Level (0-1) <dpl> Default Setting:...
  • Page 472: Qos Port Classification Tag

    User’s Manual of WGSW-20160HP QoS Port Classification Tag Description: Set or show if the classification is based on the PCP and DEI values in tagged frames. Syntax: QoS Port Classification Tag [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports...
  • Page 473: Qos Port Classification Dscp

    User’s Manual of WGSW-20160HP QoS Port Classification DSCP Description: Set or show if the classification is based on DSCP value in IP frames. Syntax: QoS Port Classification DSCP [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports : Enable DSCP based classification...
  • Page 474: Qos Port Policer Rate

    User’s Manual of WGSW-20160HP QoS Port Policer Rate Description: Set or show the port policer rate. Syntax: QoS Port Policer Rate [<port_list>] [<rate>] Parameters: <port_list>: Port list or 'all', default: All ports : Rate in kbps or fps (100-13200000) <rate>...
  • Page 475: Qos Port Policer Flow Control

    User’s Manual of WGSW-20160HP QoS Port Policer Flow Control Description: Set or show the port policer flow control. If policer flow control is enabled and the port is in flow control mode, then pause frames are sent instead of discarding frames.
  • Page 476: Qos Port Scheduler Weight

    User’s Manual of WGSW-20160HP QoS Port Scheduler Weight Description: Set or show the port scheduler weight. Syntax: QoS Port Scheduler Weight [<port_list>] [<queue_list>] [<weight>] Parameters: <port_list> : Port list or 'all', default: All ports <queue_list>: Weighted queue list or 'all', default: All weighted queues (0-5) : Scheduler weight (1-100) <weight>...
  • Page 477: Qos Port Shaper Rate

    User’s Manual of WGSW-20160HP QoS Port Shaper Rate Description: Set or show the port queue shaper rate. Syntax: QoS Port Shaper Rate [<port_list>] [<bit_rate>] Parameters: <port_list> : Port list or 'all', default: All ports <queue_list>: Queue list or 'all', default: All queues (0-7) <bit_rate>...
  • Page 478: Qos Port Queueshaper Rate

    User’s Manual of WGSW-20160HP QoS Port QueueShaper Rate Description: Set or show the port QueueShaper rate. Syntax: QoS Port QueueShaper Rate [<port_list>] [<queue_list>] [<bit_rate>] Parameters: <port_list>: Port list or 'all', default: All ports <queue_list>: Queue list or 'all', default: All queues (0-7) : Rate in kbps or fps (100-13200000) <rate>...
  • Page 479: Qos Port Tagremarking Mode

    User’s Manual of WGSW-20160HP QoS Port TagRemarking Mode Description: Set or show the port tag remarking mode. Syntax: QoS Port TagRemarking Mode [<port_list>] [classified|default|mapped] Parameters: <port_list>: Port list or 'all', default: All ports classified: Use classified PCP/DEI values : Use default PCP/DEI values...
  • Page 480: Qos Port Tagremarking Dei

    User’s Manual of WGSW-20160HP QoS Port TagRemarking DEI Description: Set or show the default DEI. This value is used when port tag remarking mode is set to 'default'. Syntax: QoS Port TagRemarking DEI [<port_list>] [<dei>] Parameters: <port_list>: Port list or 'all', default: All ports : Drop Eligible Indicator (0-1) <dei>...
  • Page 481: Qos Port Dscp Translation

    User’s Manual of WGSW-20160HP QoS Port DSCP Translation Description: Set or show DSCP ingress translation mode. If translation is enabled for a port, incoming frame DSCP value is translated and translated value is used for QoS classification. Syntax: QoS Port DSCP Translation [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports...
  • Page 482: Qos Port Dscp Egressremark

    User’s Manual of WGSW-20160HP QoS Port DSCP EgressRemark Description: Set or show the port DSCP remarking mode. Syntax: QoS Port DSCP EgressRemark [<port_list>] [disable|enable|remap_dp_unaware|remap_dp_aware] Parameters: <port_list>: Port list or 'all', default: All ports disable : Disable DSCP egress rewrite enable : Enable DSCP egress rewrite with the value received from analyzer...
  • Page 483: Qos Dscp Translation

    User’s Manual of WGSW-20160HP QoS DSCP Translation Description: Set or show global ingress DSCP translation table. If port DSCP translation is enabled, translation table is used to translate incoming frames DSCP value and translated value is used to map QoS class and DP level.
  • Page 484: Qos Dscp Classification Mode

    User’s Manual of WGSW-20160HP QoS DSCP Classification Mode Description: Set or show DSCP ingress classification mode. If port DSCP classification is 'selected', DSCP will be classified based on QoS class and DP level only for DSCP value with classification mode 'enabled'. DSCP may be translated DSCP if translation is enabled for the port.
  • Page 485: Qos Dscp Egressremap

    User’s Manual of WGSW-20160HP QoS DSCP EgressRemap Description: Set or show DSCP egress remap table. This table is used if the port egress remarking mode is 'remap' and the purpose is to map the classified DSCP to a new DSCP value.
  • Page 486: Qos Port Storm Multicast

    User’s Manual of WGSW-20160HP QoS Port Storm Multicast Description: Set or show the port storm rate limiter for broadcast frames. Syntax: QoS Storm Multicast [enable|disable] [<packet_rate>] Parameters: <port_list>: Port list or 'all', default: All ports : Enable storm policing of broadcast frames...
  • Page 487: Qos Qcl Add

    User’s Manual of WGSW-20160HP QoS QCL Add Description: Add or modify QoS Control Entry (QCE). If the QCE ID parameter <qce_id> is specified and an entry with this QCE ID already exists, the QCE will be modified. Otherwise, a new QCE will be added. If the QCE ID is not specified, the next available QCE ID will be used. If the next QCE ID parameter <qce_id_next>...
  • Page 488: Qos Qcl Delete

    User’s Manual of WGSW-20160HP : IPv4 frame fragmented: yes|no|any <fragment> : Source TCP/UDP port:(0-65535) or 'any', specific or port range <sport> : Dest. TCP/UDP port:(0-65535) or 'any', specific or port range <dport> : IPv6 keyowrd ipv6 : IPv6 source address: (a.b.c.d/n) or 'any', 32 LS bits <sip_v6>...
  • Page 489: Qos Qcl Status

    User’s Manual of WGSW-20160HP QoS QCL Status Description: Show QCL status. This can be used to display if there is any conflict in QCE for differnet user types. Syntax: QoS QCL status [combined|static|voice_vlan|conflicts] Parameters: : Shows the combined status combined|static|voice_vlan|conflicts: combined...
  • Page 490: Mirror Command

    User’s Manual of WGSW-20160HP 6.15 Mirror Command Mirror Configuration Description: Show mirror configuration. Syntax: Mirror Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Mirror Port Description: Set or show the mirror port. Syntax: Mirror Port [<port>|disable] Parameters: <port>|disable: Mirror port or 'disable', default: Show port...
  • Page 491: Mirror Mode

    User’s Manual of WGSW-20160HP Mirror Mode Description: Set or show the mirror mode. Syntax: Mirror Mode [<port_cpu_list>] [both|disable|rx|tx] Parameters: <port_cpu_list>: Port list or CPU or 'all', default: All ports and CPU both : Enable Rx and Tx mirroring disable: Disable Mirroring...
  • Page 492: Configuration Command

    User’s Manual of WGSW-20160HP 6.16 Configuration Command Configuration Save Description: Save configuration to TFTP server. Syntax: Config Save <ip_server> <file_name> Parameters: <ip_server>: TFTP server IP address (a.b.c.d) <file_name>: Configuration file name Configuration Load Description: Load configuration from TFTP server. Syntax: Config Load <ip_server>...
  • Page 493: Firmware Command

    User’s Manual of WGSW-20160HP 6.17 Firmware Command Firmware Load Description: Load new firmware from TFTP server. Syntax: Firmware Load <ip_addr_string> <file_name> Parameters: <ip_addr_string>: IP host address (a.b.c.d) or a host name string : Firmware file name <file_name> Firmware IPv6 Load Description: Load new firmware from IPv6 TFTP server.
  • Page 494: Upnp Command

    User’s Manual of WGSW-20160HP 6.18 UPnP Command UPnP Configuration Description: Show UPnP configuration. Syntax: UPnP Configuration UPnP Mode Description: Set or show the UPnP mode. Syntax: UPnP Mode [enable|disable] Parameters: enable : Enable UPnP disable: Disable UPnP (default: Show UPnP mode)
  • Page 495: Upnp Advertising Duration

    User’s Manual of WGSW-20160HP UPnP Advertising Duration Description: Set or show UPnP Advertising Duration. Syntax: UPnP Advertising Duration [<duration>] Parameters: <duration>: duration range (100..86400), default: Show UPnP duration range Default Setting:...
  • Page 496: Mvr Command

    User’s Manual of WGSW-20160HP 6.19 MVR Command MVR Configuration Description: Show the MVR configuration. Syntax: MVR Configuration MVR Mode Description: Set or show the MVR mode. Syntax: MVR Mode [enable|disable] Parameters: : Enable MVR mode enable : Disable MVR mode...
  • Page 497: Mvr Vlan Mode

    User’s Manual of WGSW-20160HP MVR VLAN Mode Description: Set or show per MVR VLAN mode. Syntax: MVR VLAN Mode [<vid>|<mvr_name>] [dynamic|compatible] Parameters: <vid>|<mvr_name>: MVR VLAN ID (1-4095) or Name (Maximum of 32 characters) : Dynamic MVR mode dynamic compatible: Compatible MVR mode...
  • Page 498: Mvr Vlan Llqi

    User’s Manual of WGSW-20160HP MVR VLAN LLQI Description: Set or show per MVR VLAN LLQI (Last Listener Query Interval). Syntax: MVR VLAN LLQI [<vid>|<mvr_name>] [mvr_param_llqi] Parameters: <vid>|<mvr_name>: MVR VLAN ID (1-4095) or Name (Maximum of 32 characters) mvr_param_llqi : : Default Value (5)
  • Page 499: Mvr Vlan Priority

    User’s Manual of WGSW-20160HP MVR VLAN Priority Description: Set or show per MVR VLAN priority and VLAN tag. Syntax: MVR VLAN Priority [<vid>|<mvr_name>] [priority] [tagged|untagged] Parameters: <vid>|<mvr_name>: MVR VLAN ID (1-4095) or Name (Maximum of 32 characters) : CoS priority value ranges from 0 ~ 7...
  • Page 500: Mvr Groups

    User’s Manual of WGSW-20160HP MVR Groups Description: Show MVR group addresses. Syntax: MVR Groups [<vid>] Parameters: <vid>: VLAN ID (1-4095) MVR SFM Description: Show SFM (including SSM) related information for MVR. Syntax: MVR SFM [<vid>] [<port_list>] Parameters: : VLAN ID (1-4095) <vid>...
  • Page 501: Voice Vlan Command

    User’s Manual of WGSW-20160HP 6.20 Voice VLAN Command Voice VLAN Configuration Description: Show Voice VLAN configuration. Syntax: Voice VLAN Configuration Voice VLAN Mode Description: Set or show the Voice VLAN mode. We must disable MSTP feature before we enable Voice VLAN.
  • Page 502: Voice Vlan Id

    User’s Manual of WGSW-20160HP Voice VLAN ID Description: Set or show Voice VLAN ID. Syntax: Voice VLAN ID [<vid>] Parameters: <vid>: VLAN ID (1-4095) Default Setting: 1000 Voice VLAN Agetime Description: Set or show Voice VLAN age time. Syntax: Voice VLAN Agetime [<age_time>] Parameters: <age_time>: MAC address age time (10-10000000) default: Show age time...
  • Page 503: Voice Vlan Oui Add

    User’s Manual of WGSW-20160HP Voice VLAN OUI Add Description: Add Voice VLAN OUI entry. Modify OUI table will restart auto detect OUI process. The maximum entry number is (16). Syntax: Voice VLAN OUI Add <oui_addr> [<description>] Parameters: : OUI address (xx-xx-xx). The null OUI address isn't allowed <oui_addr>...
  • Page 504: Voice Vlan Oui Lookup

    User’s Manual of WGSW-20160HP Voice VLAN OUI Lookup Description: Lookup Voice VLAN OUI entry. Syntax: Voice VLAN OUI Lookup [<oui_addr>] Parameters: <oui_addr>: OUI address (xx-xx-xx), default: Show OUI address Voice VLAN Port Mode Description: Set or show the Voice VLAN port mode.
  • Page 505: Voice Vlan Security

    User’s Manual of WGSW-20160HP Voice VLAN Security Description: Set or show the Voice VLAN port security mode. When the function is enabled, all non-telephone MAC address in Voice VLAN will be blocked 10 seconds. Syntax: Voice VLAN Security [<port_list>] [enable|disable] Parameters: <port_list>: Port list or 'all', default: All ports...
  • Page 506: Loop Protect Command

    User’s Manual of WGSW-20160HP 6.21 Loop Protect Command Loop Protect Configuration Description: Show Loop Protection configuration. Syntax: Loop Protect Configuration Loop Protect Mode Description: Set or show the Loop Protection mode. Syntax: Loop Protect Mode [enable|disable] Parameters: enable : Enable Loop Protection...
  • Page 507: Loop Protect Shutdown

    User’s Manual of WGSW-20160HP Loop Protect Shutdown Description: Set or show the Loop Protection shutdown time. Syntax: Loop Protect Shutdown [<shutdown-time>] Parameters: Shutdown time interval (0-604800 seconds) A value of zero disables re-enabling the port Default Setting: Loop Protect Port Configuration Description: Show Loop Protection port configuration.
  • Page 508: Loop Protect Port Action

    User’s Manual of WGSW-20160HP Loop Protect Port Action Description: Set or show the Loop Protection port action. Syntax: Loop Protect Port Action [<port_list>] [shutdown|shut_log|log] Parameters: <port_list>: Port list or 'all', default: All ports shutdown : Shutdown the port shut_log : Shutdown the port and Log event...
  • Page 509: Ipmc Command

    User’s Manual of WGSW-20160HP 6.22 IPMC Command IPMC Configuration Description: Show IPMC snooping configuration. Syntax: IPMC Configuration [mld|igmp] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP IPMC Mode Description: Set or show the IPMC snooping mode.
  • Page 510: Ipmc Flooding

    User’s Manual of WGSW-20160HP IPMC Flooding Description: Set or show the IPMC unregistered addresses flooding operation. Syntax: IPMC Flooding [mld|igmp] [enable|disable] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP enable : Enable IPMC flooding disable: Disable IPMC flooding...
  • Page 511: Ipmc Proxy

    User’s Manual of WGSW-20160HP IPMC Proxy Description: Set or show the mode of IPMC Proxy. Syntax: IPMC Proxy [mld|igmp] [enable|disable] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP enable : Enable IPMC Proxy disable: Disable IPMC Proxy...
  • Page 512: Ipmc Vlan Add

    User’s Manual of WGSW-20160HP IPMC VLAN Add Description: Add the IPMC snooping VLAN interface. Syntax: IPMC VLAN Add [mld|igmp] <vid> Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) <vid> IPMC VLAN Delete Description: Delete the IPMC snooping VLAN interface.
  • Page 513: Ipmc State

    User’s Manual of WGSW-20160HP IPMC State Description: Set or show the IPMC snooping state for VLAN. Syntax: IPMC State [mld|igmp] [<vid>] [enable|disable] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs <vid>...
  • Page 514: Ipmc Compatibility

    User’s Manual of WGSW-20160HP IPMC Compatibility Description: Set or show the IPMC Compatibility. Syntax: IPMC Compatibility [mld|igmp] [<vid>] [auto|v1|v2|v3] Parameters: mld|igmp mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs <vid>...
  • Page 515: Ipmc Throttling

    User’s Manual of WGSW-20160HP IPMC Throttling Description: Set or show the IPMC port throttling status. Syntax: IPMC Throttling [mld|igmp] [<port_list>] [limit_group_number] Parameters: mld|igmp mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP <port_list>: Port list or 'all', default: All ports...
  • Page 516: Ipmc Router

    User’s Manual of WGSW-20160HP IPMC Router Description: Set or show the IPMC snooping router port mode. Syntax: IPMC Router [mld|igmp] [<port_list>] [auto|fix|none] Parameters: mld|igmp mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP <port_list>: Port list or 'all', default: All ports...
  • Page 517: Ipmc Groups

    User’s Manual of WGSW-20160HP IPMC Groups Description: Show IPMC group addresses, accordingly. Syntax: IPMC Groups [mld|igmp] [<vid>] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs <vid>...
  • Page 518: Ipmc Parameter Rv

    User’s Manual of WGSW-20160HP IPMC Parameter RV Description: Set or show the IPMC Robustness Variable. Syntax: IPMC Parameter RV [mld|igmp] [<vid>] [ipmc_param_rv] Parameters: mld|igmp mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs <vid>...
  • Page 519: Ipmc Parameter Qri

    User’s Manual of WGSW-20160HP IPMC Parameter QRI Description: Set or show the IPMC Query Response Interval. Syntax: IPMC Parameter QRI [mld|igmp] [<vid>] [ipmc_param_qri] Parameters: mld|igmp mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs <vid>...
  • Page 520: Ipmc Parameter Uri

    User’s Manual of WGSW-20160HP IPMC Parameter URI Description: Set or show the IPMC Unsolicited Report Interval. Syntax: IPMC Parameter URI [mld|igmp] [<vid>] [ipmc_param_uri] Parameters: mld|igmp mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs <vid>...
  • Page 521: Vlan Control List Command

    User’s Manual of WGSW-20160HP 6.23 VLAN Control List Command VCL MAC-based VLAN Configuration Description: Show VCL MAC-based VLAN configuration. Syntax: VCL Macvlan Configuration VCL MAC-based VLAN Add Description: Add or modify VCL MAC-based VLAN entry. Syntax: VCL Macvlan Add <mac_addr> <vid> [<port_list>] Parameters: <mac_addr>...
  • Page 522: Vcl Stasus

    User’s Manual of WGSW-20160HP VCL Stasus Description: Show VCL MAC-based VLAN users configuration. Syntax: VCL Status [combined|static|nas|all] Parameters: combined|static|nas|all: VCL User VCL Protocol-based VLAN Add Ethernet II Description: Add VCL protocol-based VLAN Ethernet-II protocol to group mapping. Syntax: VCL ProtoVlan Protocol Add Eth2 <ether_type>|arp|ip|ipx|at <group_id>...
  • Page 523: Vcl Protocol-Based Vlan Add Llc

    User’s Manual of WGSW-20160HP VCL Protocol-based VLAN Add LLC Description: Add VCL protocol-based VLAN LLC protocol to group mapping. Syntax: VCL ProtoVlan Protocol Add Llc <dsap> <ssap> <group_id> Parameters: : DSAP value (0x00-0xFF) <dsap> : SSAP value (0x00-0xFF) <ssap> <group_id>: Protocol group ID...
  • Page 524: Vcl Protocol-Based Vlan Delete Llc

    User’s Manual of WGSW-20160HP VCL Protocol-based VLAN Delete LLC Description: Delete VCL protocol-based VLAN LLC protocol to group mapping. Syntax: VCL ProtoVlan Protocol Delete Llc <dsap> <ssap> Parameters: <dsap>: DSAP value (0x00-0xFF) <ssap>: SSAP value (0x00-0xFF) VCL Protocol-based VLAN Add Description: Add VCL protocol-based VLAN group to VLAN mapping.
  • Page 525: Vcl Protocol-Based Vlan Configuration

    User’s Manual of WGSW-20160HP VCL Protocol-based VLAN Configuration Description: Show VCL protocol-based VLAN entries. Syntax: VCL ProtoVlan Conf VCL IP-based VLAN Configuration Description: Show VCL IP Subnet-based VLAN configuration. Syntax: VCL IPVlan Configuration [<vce_id>] Parameters: <vce_id>: Unique VCE ID for each VCL entry...
  • Page 526: Smtp Command

    User’s Manual of WGSW-20160HP 6.24 SMTP Command SMTP Configuration Description: Show SMTP configure. Syntax: SMTP Configuration SMTP Mode Description: Enable or disable SMTP configure. Syntax: SMTP Mode [enable|disable] Parameters: : Enable SMTP mode enable : Disable SMTP mode disable (default: Show SMTP mode)
  • Page 527: Smtp Auth

    User’s Manual of WGSW-20160HP SMTP Auth Description: Enable or disable SMTP authentication configure. Syntax: SMTP Auth [enable|disable] Parameters: : Enable SMTP authentication enable : Disable SMTP authentication disable (default: Show SMTP authentication) SMTP Auth_user Description: Set or show SMTP authentication user name configure.
  • Page 528: Smtp Mail From

    User’s Manual of WGSW-20160HP SMTP Mail From Description: Set or show SMTP E-mail from configure. Syntax: SMTP Mailfrom [<mailfrom_text>] Parameters: <mailfrom_text>: SMTP E-mail from address SMTP Mail Subject Description: Set or show SMTP E-mail subject configure. Syntax: SMTP Mailsubject [<mailsubject_text>] Parameters: <mailsubject_text>: SMTP E-mail subject...
  • Page 529: Switch Operation

    User’s Manual of WGSW-20160HP 7. SWITCH OPERATION 7.1 Address Table The Managed Switch is implemented with an address table. This address table composed of many entries. Each entry is used to store the address information of some node in network, including MAC address, port no, etc. This in-formation comes from the learning process of Managed Switch.
  • Page 530: Auto-Negotiation

    User’s Manual of WGSW-20160HP 7.5 Auto-Negotiation The STP ports on the Switch have built-in "Auto-negotiation". This technology automatically sets the best possible bandwidth when a connection is established with another network device (usually at Power On or Reset). This is done by detect the modes and speeds at the second of both device is connected and capable of, both 10Base-T and 100Base-TX devices can connect with the port in either Half- or Full-Duplex mode.
  • Page 531: Power Over Ethernet Overview

    User’s Manual of WGSW-20160HP 8. Power over Ethernet Overview What is PoE? The PoE is an abbreviation of Power over Ethernet; the PoE technology means a system to pass electrical power safely, along with data on Ethernet UTP cable. The IEEE standard for PoE technology requires Category 5 cable or higher for high power PoE levels, but can operate with category 3 cable for low power levels.
  • Page 532 User’s Manual of WGSW-20160HP Figure 8-1: Power Supplied over the Spare Pins The data pairs are used. Since Ethernet pairs are transformer coupled at each end, it is possible to apply DC power to the center tap of the isolation transformer without upsetting the data transfer. In this mode of operation the pair on pins 3 and 6 and the pair on pins 1 and 2 can be of either polarity.
  • Page 533: Trouble Shooting

    User’s Manual of WGSW-20160HP 9. TROUBLE SHOOTING This chapter contains information to help you solve issues. If the Managed Switch is not functioning properly, make sure the Managed Switch was set up according to instructions in this manual. ■ The Link LED is not lit...
  • Page 534 User’s Manual of WGSW-20160HP ■ While IP Address be changed or forgotten admin password – To reset the IP address to the default IP Address “192.168.0.100” or reset the password to default value. Press the hardware reset button at the front panel about 10 seconds. After the device is rebooted, you can login the management Web interface within the same subnet of 192.168.0.xx.
  • Page 535: Appendex A: Networking Connection

    User’s Manual of WGSW-20160HP APPENDEX A: Networking Connection A.1 PoE RJ-45 Port Pin Assignments PIN NO RJ-45 POWER ASSIGNMENT  Power +  Power +  Power -  Power - A.2 Switch's Data RJ-45 Pin Assignments - 1000Mbps, 1000Base-T...
  • Page 536 User’s Manual of WGSW-20160HP The standard cable, RJ-45 pin assignment The standard RJ-45 receptacle/connector There are 8 wires on a standard UTP/STP cable and each wire is color-coded. The following shows the pin allocation and color of straight cable and crossover cable connection:...
  • Page 537: Appendex B : Glossary

    User’s Manual of WGSW-20160HP APPENDEX B : GLOSSARY ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application.
  • Page 538 User’s Manual of WGSW-20160HP ranging from 1-1024K packets per seconds. Under "Ports" and "Access Control List" web-Pages you can assign a Rate Limiter ID to the ACE(s) or ingress port(s). AES is an acronym for Advanced Encryption Standard. The encryption key protocol is applied in 802.1i standard to improve WLAN security.
  • Page 539 User’s Manual of WGSW-20160HP CC is an acronym for Continuity Check. It is a MEP functionality that is able to detect loss of continuity in a network by transmitting CCM frames to a peer MEP. CCM is an acronym for Continuity Check Message. It is a OAM frame transmitted from a MEP to it's peer MEP and used to implement CC functionality.
  • Page 540 User’s Manual of WGSW-20160HP Dynamic addressing simplifies network administration because the software keeps track of IP addresses rather than requiring an administrator to manage the task. This means that a new computer can be added to a network without the hassle of manually assigning it a unique IP address.
  • Page 541 User’s Manual of WGSW-20160HP DSCP DSCP is an acronym for Differentiated Services Code Point. It is a field in the header of IP packets for packet classification purposes. EEE is an abbreviation for Energy Efficient Ethernet defined in IEEE 802.3az.
  • Page 542 User’s Manual of WGSW-20160HP connection to a particular port on a remote host (port 80 by default). An HTTP server listening on that port waits for the client to send a request message. HTTPS HTTPS is an acronym for Hypertext Transfer Protocol over Secure Socket Layer. It is used to indicate a secure HTTP connection.
  • Page 543 User’s Manual of WGSW-20160HP from a mail server. IMAP is the protocol that IMAP clients use to communicate with the servers, and SMTP is the protocol used to transport mail to an IMAP server. The current version of the Internet Message Access Protocol is IMAP4. It is similar to Post Office Protocol version 3 (POP3), but offers additional and more complex features.
  • Page 544 User’s Manual of WGSW-20160HP LLDP is an IEEE 802.1ab standard protocol. The Link Layer Discovery Protocol(LLDP) specified in this standard allows stations attached to an IEEE 802 LAN to advertise, to other stations attached to the same IEEE 802 LAN, the major capabilities provided by the system...
  • Page 545 User’s Manual of WGSW-20160HP For debugging network problems or monitoring network traffic, the switch system can be configured to mirror frames from multiple ports to a mirror port. (In this context, mirroring a frame is the same as copying the frame.) Both incoming (source) and outgoing (destination) frames can be mirrored to the mirror port.
  • Page 546 User’s Manual of WGSW-20160HP NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks of computer systems. NTP uses UDP (datagrams) as transport layer. OAM is an acronym for Operation Administration and Maintenance. It is a protocol described in ITU-T Y.1731 used to implement carrier ethernet functionality. MEP functionality like CC and RDI is based on this.
  • Page 547 User’s Manual of WGSW-20160HP PING ping is a program that sends a series of packets over a network or the Internet to a specific computer in order to generate a response from that computer. The other computer responds with an acknowledgment that it received the packets.
  • Page 548 User’s Manual of WGSW-20160HP QCE is an acronym for QoS Control Entry. It describes QoS class associated with a particular QCE ID. There are six QCE frame types: Ethernet Type, VLAN, UDP/TCP Port, DSCP, TOS, and Tag Priority. Frames can be classified by one of 4 different QoS classes: "Low", "Normal", "Medium", and "High"...
  • Page 549 User’s Manual of WGSW-20160HP RADIUS is an acronym for Remote Authentication Dial In User Service. It is a networking protocol that provides centralized access, authorization and accounting management for people or computers to connect and use a network service. RDI is an acronym for Remote Defect Indication. It is a OAM functionallity that is used by a MEP to indicate defect...
  • Page 550 User’s Manual of WGSW-20160HP SNAP The SubNetwork Access Protocol (SNAP) is a mechanism for multiplexing, on networks using IEEE 802.2 LLC, more protocols than can be distinguished by the 8-bit 802.2 Service Access Point (SAP) fields. SNAP supports identifying protocols by Ethernet type field values; it also supports vendor-private protocol identifier.
  • Page 551 User’s Manual of WGSW-20160HP TACACS+ TACACS+ is an acronym for Terminal Acess Controller Access Control System Plus. It is a networking protocol which provides access control for routers, network access servers and other networked computing devices via one or more centralized servers.
  • Page 552 User’s Manual of WGSW-20160HP determine the priority from the 6-bit ToS field in the IP header. The most significant 6 bits of the ToS field are fully decoded into 64 possibilities, and the singular code that results is compared against the corresponding bit in the IPv4 ToS priority control bit (0~63).
  • Page 553 User’s Manual of WGSW-20160HP Virtual LAN. A method to restrict communication between switch ports. VLANs can be used for the following applications: VLAN unaware switching: This is the default configuration. All ports are VLAN unaware with Port VLAN ID 1 and members of VLAN 1.
  • Page 554 User’s Manual of WGSW-20160HP necessarily with first generation wireless access points. WPA2 implements the full standard, but will not work with some older network cards (Wikipedia). WPA-PSK WPA-PSK is an acronym for Wi-Fi Protected Access - Pre Shared Key. WPA was designed to enhance the security of wireless networks.
  • Page 555: Ec Declaration Of Conformity

    16-Port 10/100/1000Mbps 802.3at PoE + 4-Port Gigabit TP/SFP Combo Managed Switch * Produced by: Manufacturer‘s Name : Planet Technology Corp. Manufacturer‘s Address: 10F., No.96, Minquan Rd., Xindian Dist., New Taipei City 231, Taiwan (R.O.C.). is herewith confirmed to comply with the requirements set out in the Council Directive on the Approximation of the Laws of the Member States relating to Electromagnetic Compatibility Directive on (2004/108/EC).

Table of Contents