Page 1: User Guide
Simply Connected User Guide XMS-1024P 24 Port Gigabit Managed PoE/PoE+ Switch Use the XMS-1024P to: Cost-effectively Add 802.3af/at PoE Capability to Your Network „ Deliver Power and Data for up to 24 PoE-Enabled Network „ Devices with a Maximum Output of 320 Watts Simplify PoE Device Installation, Including IP Sercurity „...
Page 2: Document Conventions
No part of this publication may be modified or adapted in any way, for any purposes without permission in writing from Luxul. The material in this manual is subject to change without notice. Luxul reserves the right to make changes to any product to improve reliability, function, or design.
Page 3: Table Of Contents
6.6 Application Example for Protocol VLAN 6.7 GVRP 7 SPANNING TREE 7.1 STP Config 7.2 Port Config 7.3 MSTP Instance 7.4 STP Security © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 4 13.2 SNMP Notification 13.3 RMON 14 LLDP 14.1 LLDP Config 14.2 Device Info 14.3 Device Statistics 14.4 LLDP-Media 15 CLUSTER 15.1 NDP 15.2 NTDP a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 5 16.1 System Monitor 16.2 System Logs 16.3 Device Diagnostics 16.4 Network Diagnostics 17 SAVE CONFIG 18 REGULATORY COMPLIANCE APPENDIX A: SPECIFICATIONS GLOSSARY © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 6: About This Guide
This Guide is intended for users or installers familiar with IP concepts and Network terminologies. 1.2 Conventions In this Guide the following conventions are used: The Switch mentioned in this Guide refers to the XMS-1024P Managed PoE Switch „ Menu Name>>Submenu Name>>Tab indicates the location being illustrated in the „...
Page 7 Switch Ports. MSTP Instance: Configure MSTP instances. „ STP Security: Configure STP protection to prevent „ devices from any malicious attack against STP. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 8 Time-Range: The effective time for ACL Rules. „ ACL Config: ACL Rules. „ Policy Config: Policy operational parameters. „ Policy Binding: Bind the policy to a Port or VLAN. „ a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 9 NTDP: NTDP functions of the commander Switch to „ collect NDP information. Cluster: Cluster setup to establish and maintain „ the Cluster. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 10: Introduction
Switch support Power over Ethernet, which can automatically detect and supply power to Powered Devices complying with the IEEE 802.3af and IEEE 802.3at standards. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 11: Main Features
Telnet, CLI, SNMP v1/v2c/v3, RMON and Web Management access provides excel- „ lent Administration flexibility. Port Mirroring enables monitoring of selected Ingress/Egress traffic. „ © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 12: Description
Switch. 24 Port LEDs The XMS-1024P has a LED mode button which is for Switching the LED status type. When the Speed LED is lit, the Port LED indicates link/link activity. When the PoE LED is lit, the Port LED indicates the power supply status.
Page 13 Yellow Overload or short circuit is detected Flashing PD Power-On self-test has failed No PoE power is being provided on the Port © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 14: Logging On To The Switch
XMS-1024P 2.3.2 Rear Panel The rear panel of XMS-1024P features a power socket and a Grounding Terminal. 0 H z 5 .0 0 V - 5 0 /6 1 0 0 - 2 4 Figure 2-2 Rear Panel 1 Grounding Terminal: The XMS-1024P already comes with a grounding mechanism in the provided three prong power cable and power supply.
Page 15: Configuration
If the Switch becomes inoperable after an Apply action you can reboot the Switch to return it to the previous state. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 16: System
4 SFP Ports of the Switch. Ports labeled as 1-24 are 10/100/1000Mbps Ports and Ports labeled as 21F-24F are SFP Ports. Choose System>>System Settings>>Status to load the following page. Figure 4-1 Status a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 17 Displays the confi gured type of the Port Speed: Displays the maximum transmission rate of the Port. Status: Displays the connection status of the Port. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 18 On this page you can confi gure the description of the Switch, including Device Name, Device Location and System Contact. Choose System>>System Settings>>Device Description to load the following page. Figure 4-4 Device Description a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 19 PC’ s clock. Choose System>>System Settings>>System Time to load the following page. Figure 4-5 System Time The following entries are displayed on this screen: © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 20 Switch will get it’ s time from the time Server of the Default Gateway in the Network.. 4.1.4 Daylight Savings Time On this page you can configure the Daylight Savings Time settings of the Switch. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 21 Offset: Specifi es the change of time in minutes when a DST event occurs. „ Start Time/End Time: Set the Starting and Ending week, day and month „ for DST in your geographical location. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 22 IP Address. On this page you can config- ure the system IP of the Switch. Choose the menu System>>System Settings>>System IP to load the following page. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 23 Static IP option you will be able to modify this address as desired. If DHCP or BOOTP is selected they will confi gure the Default Gateway. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 24: User Management
On this page you can view the information about the current confi gured users of the Switch. Choose the menu System>>User Management>>User Table to load the following page. Figure 4-8 User Table a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 25 Enable or Disable the User confi guration. (Typically you would use this function on a previously confi gured user.) Password: Enter a Password for the Users login. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 26: System Tools
The System Tools menu allows you to manage the system functions of the Switch in- cluding; Config Restore, Config Backup, Firmware Upgrade, System Reboot and Restore Factory Defaults. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 27 Switch to become unresponsive, if this occurs please power down the Switch and power back up to restore to the previous settings. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 28 The Switch Firmware can be upgraded via the Web Management page. Upgrades to the system Firmware can add more functionality, better performance, and/or resolve any known issues. Visit http://luxul.com to download the current fi rmware. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 29 CAUTION: Do not interrupt the upgrade. To avoid damage to the Switch please do not power down the Switch while an Upgrade operation is in process. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 30 NOTE: We recommend making a Confi g Backup before any Reboot. CAUTION: To avoid damage to the Switch please do not power down the Switch while a Reboot operation is in process. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 31: Access Control
NOTE: After the system reboots, the Switch will be reset to default settings. 4.4 Access Control Access Control provides different security measures for remote login to enhance Management security. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 32 „ MAC-based: Limit the MAC Addresses of the Users allowed to login. „ Port-based: Limit the Ports of the Users allowed to login. „ a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 33 The first time you use an HTTPS connection to log onto the Switch with the default certificate you will be prompted “The security certificate presented © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 34 Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non- volatile memory. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 35 The SSH key can be Uploaded to the Switch. If the key is successfully Uploaded, Certificate Authentication will be preferred for SSH all connections to the Switch. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 36 Key File: Select the desired key fi le to upload. Upload: Click the Upload button to upload the desired key fi le to the Switch. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 37 22 in the Port fi eld and select SSH as the Connection type. Figure 4-18 SSH Login © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 38: Switching
The parameters you set will affect the operating mode of the Port, please set the parameters appropriately according to your needs and the capability of connected devices. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 39 Control is enabled the Switch will attempt to synchronize the speed with its peer to avoid the packet loss caused by congestion. LAG: Displays the LAG Group number the Port belongs to. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 40 The mirroring Port is connected to a Data diagnosis device, which is used to analyze the mirrored packets for monitoring and troubleshooting the Network. Choose the menu Switching>>Port Settings>>Port Mirror to load the following page. Figure 5-2 Mirroring Port a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 41 Displays the Mirrored Ports and whether they are mirroring Ingress, Egress or Both. Operation: Click Edit to confi gure the mirror group. Edit to displays the following page. Figure 5-3 Mirroring Port © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 42 CAUTION: A Port cannot be set as a Mirrored Port and a Mirroring Port simultaneously. NOTE: The Port Mirror function will span multiple VLANs. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 43 Network via this Port. Choose the menu Switching>>Port Settings>>Port Security to load the following page. Figure 5-4 Port Security © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 44 Port Isolation (sometimes referred to as Port based VLAN) provides a method of restricting traffic flow and to improve Network security. By not allowing the selected a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 45 Select the Allowed Port(s) for the selected Port to Forward too. Port Isolation List Port: Display the Port number. Allowed Ports: Display the Allowed Ports List for the corresponding Port. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 46 Choose the menu Switching>>Port Settings>>Loopback Detection to load the following page. Figure 5-6 Loopback Detection Conﬁ g The following entries are displayed on this screen: a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 47 Switch is restarted and you have not selected Save Config from the main menu and saved your running configuration to non- volatile memory. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 48: Lag
Member Ports. If the connection of one or several Ports are lost, the traffic using these Ports will be forwarded by the remaining Member Ports of the LAG maintaining redundancy. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 49 Allows you to view or modify the information for each LAG Group. Edit: Click to modify the settings of the LAG Group. „ Detail: Click to get the information of the LAG. „ © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 50 Ports of any manually added Static LAG. Choose the menu Switching>>LAG>>Static LAG to load the following page. Figure 5-9 Manual Conﬁ g a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 51 Link Aggregation by exchanging LACP packets with a partner. The Switch can dynami- cally group similarly configured Ports into a single logical link, dynamically creating a LAG Group. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 52 Choose the menu Switching>>LAG>>LACP Confi g to load the following page. Figure 5-10 LACP Conﬁ g The following entries are displayed on this screen: a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 53: Traffic Monitor
5.3.1 Traffic Summary Traffic Summary screen displays the traffic information of each Port enabling you to monitor the traffic and analyze any Network abnormities. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 54 XMS-1024P Choose the menu Switching>>Traffi c Monitor>>Traffi c Summary to load the following page. Figure 5-11 Trafﬁ c Summary a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 55 Choose the menu Switching>>Traffi c Monitor>>Traffi c Statistics to load the following page. Figure 5-12 Trafﬁ c Statistics © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 56 Displays the number of Collisions experienced by a Port during Packet Transmissions. Collisions can indicate a Network loop, duplicate MAC Addresses or other Network abnormalities. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 58 Static: Displays only the Static MAC Address entries. „ Dynamic: Displays only the Dynamic MAC Address entries. „ Filtering: Displays only the Filtered MAC Address entries. „ a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 59 Choose the menu Switching>>MAC Settings>>Static MAC to load the following page. Figure 5-14 Static MAC © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 60 Table, connecting the device to another Port will cause its MAC Address not to be recognized dynamically by the Switch. This will result in packets not forwarding to the connected device. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 61 On this page, you can confi gure the Dynamic MAC parameters. Choose the menu Switching>>MAC Address>>Dynamic MAC to load the following page. Figure 5-15 Dynamic MAC © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 62 Switch may remove valid MAC address entries, causing the Switch to require re-learning of the deleted MAC entry, decreasing the forwarding performance of the Switch. We recommended keeping the default value. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 63 Filtering entries act on all Ports and in all corresponding VLANs. Choose the menu Switching>>MAC Address>>MAC Filtering to load the following page. Figure 5-16 MAC Filtering © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 64: Vlan
LAN, you can divide the LAN into multiple logical LANs, each of which has a broadcast domain of its own. Hosts in the same VLAN communicate with one another a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 65 VLAN modes, 802.1Q based VLAN, MAC based VLAN and Protocol based VLAN. VLAN tags are used to allow the Switch to identify packets of different VLANs. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 66: Q Vlan
VLAN tag with the default VLAN ID of the Ingress Port, the packet will be assigned to the default VLAN of the Ingress Port for transmission. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 67 Tagged and untagged will be processed in different ways after being received by Ports of different link types, as illustrated in the following table. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 68 On this page, you can view the current created 802.1Q VLAN. Choose the menu VLAN»802.1Q VLAN»VLAN Confi g to load the following page. Figure 6-3 VLAN Table a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 69 Detail: Click to get detailed information on a VLAN. „ Click Create button to create a new VLAN. Figure 6-4 Create or Edit 802.1Q VLAN © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 70 When creating an 802.1Q VLAN please survey all the devices connected to the Switch in order to configure the Port Link Type properly for the connected device. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 71 Displays the LAG Group the Port belongs to. VLAN: Click the Details link to view the information of the VLAN the Port belongs to. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 72: Mac Vlan
On the following page, you can create a MAC VLAN and view the current MAC VLANs in the table. Choose the menu VLAN>>MAC VLAN to load the following page. Figure 6-6 Create and View MAC VLAN a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 73 Save Config from the main menu and saved your running configuration to non- volatile memory. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 74: Protocol Vlan
For example the length of a Source MAC Address is 12 bytes. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 75 IP, ARP and RARP protocols, but not sup- ported in all other protocols. The Switch identifi es the protocol of the packet by matching values of the encapsulation format. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 76 Some Protocol Templates have been preset for use in the Switch, you can create a custom Protocol VLAN using the corresponding Protocol Template. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 77 On this page, you can create a Protocol VLAN and view the information of the defi ned Protocol VLANs. Choose the menu VLAN>>Protocol VLAN>>Protocol Group Table to load the following page. Figure 6-12 Protocol Group Table © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 78 On this page, you can create a Protocol Group. Choose the menu VLAN>>Protocol VLAN>>Protocol Group to load the following page. Figure 6-13 Create Protocol VLAN a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 79 AT Protocols. You can add more Protocol Templates via this page. Choose the menu VLAN>>Protocol VLAN>>Protocol Template to load the following page. Figure 6-14 Create and View Protocol Template © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 80 Create a Protocol VLAN. On the VLAN>>Protocol VLAN>>Protocol VLAN page select the Protocol Type and enter the VLAN ID to create a Protocol VLAN. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 81: Application Example For 802.1Q Vlan
PC B and Server B are in the same VLAN; „ PCs in the two VLANs cannot communicate with each other. „ Network Diagram Figure 6-15 Network Diagram 802.1Q VLAN © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 82: Application Example For Mac Vlan
Server of their own departments; The MAC address of Notebook A is 00-19-56-8A-4C-71, Notebook B’ s MAC address is „ 00-19-56-82-3B-70. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 83: Network Diagram
MAC Address of 00-19-56-8A-4C-71. Confi gure MAC VLAN 20 On VLAN>>MAC VLAN page create MAC VLAN20 with a MAC Address of 00-19-56-82-3B-70. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 84: Application Example For Protocol Vlan
IP host, in VLAN10, is served by IP Server while AppleTalk host is served by „ AppleTalk Server; Switch B is connected to IP Server and AppleTalk Server. „ a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 85 VLANID of 20 with members being Port 11 and Port 12 and confi gure the Egress Rule of Port 12 as Untag. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 86: Gvrp
Join message. When receiving a Join Message from another entity or configuring attributes statically, the device also sends out a Join Message to register changes to the other GARP entities. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 87 Switched Network can have the same VLAN information. The VLAN registration infor- mation includes not only the static registration information configured locally, but also © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 88 NOTE: If the GVRP feature is enabled on a member Port of a LAG, please ensure all the member Ports of this LAG are set to the same Status and Registration Mode. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 89 Timer ranges from 60 to 3000 centiseconds (0.60 to 30.00 seconds) the default is 60 centiseconds LAG: Displays the LAG Group to which the Port belongs. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 90: Spanning Tree
Network the priority and MAC address of the Switch are used to calculate the Bridge ID. The Bridge ID can be configured, the Switch with lowest bridge ID has the highest priority. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 91 Designated Port of Switch A and Port 4 is the Designated Port of Switch B; Port 6 of Switch C and Port 2 of Switch A are blocked to prevent a Network loop. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 92: Stp Timers
If the Root Bridge ID of X is smaller than that of Y, X is superior to Y and X will become the Root Bridge. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 93 For each Switch (except the Switch chosen as the Root Bridge) in a Network, the Port that receives the BPDU with the highest priority is chosen as the Root Port of the Switch. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 94 Edge Port: Indicates a Port connected directly to a Layer 3 device such as a Router. P2P Link: Indicates a link between two directly connected Switches. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 95 Spanning Tree in a Switched Network that connects all Switches in the Network. The following fi gure shows the Network diagram of an MSTP Topology. Figure 7-2 Basic MSTP diagram © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 96 Backup Port: The Port that is the backup Port of a Designated Port. „ Disabled: The Port is not participating in the STP. „ The following diagram shows the different Port roles. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 97: Stp Config
Choose the menu Spanning Tree>>STP Confi g>>STP Confi g to load the following page. Figure 7-4 STP Conﬁ g © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 98 CAUTION: It is not recommended to change the Parameter settings without first consulting a Network Administrator with advanced understanding of Spanning Tree functions. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 99 Network resources. Keeping the default value is recommended. 7.1.2 STP Summary On this page you can view the active parameters of the Spanning Tree configuration. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 100: Port Config
On this page you can confi gure the parameters of the Ports for STP, RSTP and MSTP. Choose the menu Spanning Tree>>Port STP Confi g to load the following page. Figure 7-6 Port Conﬁ g a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 101 Backup Port: Indicates the Port is the Backup Port of a Designated Port. „ Disabled: Indicates the Port is not participating in the STP. „ © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 102: Mstp Instance
When Switches have the same MST Region Name, MST Region Revision and VLAN-to- Instance mapping table the Switches are considered to be in the same MST Region. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 103 You can assign VLANs to different instances according to your needs. Every Instance is a VLAN group independent of other Instances and CIST. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 104 Enter the desired VLAN ID(s). The new VLAN ID will be added to the corresponding Instance ID and any previously entered VLAN ID will not be replaced. Instance ID: Enter the corresponding Instance ID. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 105 Ports in the specifi ed Instance. Choose the menu Spanning Tree>>MSTP Instance>>Instance Port Confi g to load the following page. Figure 7-9 Instance Port Conﬁ g © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 106 MSTP parameters on Spanning Tree>>STP Config>>STP parameters Config page. Configure the MSTP Configure MSTP parameters for Ports on Spanning parameters for the Ports Tree>>Port STP Config>>Port Config page. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 107: Stp Security
Instances, is always set to Blocking state when the Port does not receive BPDU packets from the Upstream Switch. This allows Spanning Trees to be regenerated, and prevents Loops from occuring. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 108 Switch shuts down the edge Ports that receive BPDUs and reports the issue to the Network Administrator. If a Port is shut down in this method, only an Administrator can restore it. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 109 Prevents loops in the Network caused by recalculating STP brought on by link failures and Network congestion. Root Protect: Prevents Network topology changes caused by a role change of the current Root Bridge. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 110 20 packets. TC Protect Cycle: Enter a value from 1-10 seconds to specify the TC Protect Cycle. The default value is 5 seconds. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 111: Application Example For Stp Function
C as the Root Bridge. Network Diagram Figure 7-12 Network Diagram STP Function Confi guration Procedure Confi gure Switch A: „ © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 112 On Spanning Tree>>MSTP Instance>>Instance Config Configure Switch B as the Root Bridge of Instance 1 page, configure the priority of Instance 1 to be 0. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 113 STP on all Ports. On Spanning Tree>>MSTP Instance>>Region Config Configure the Region Name and the Revision of the MST page, configure the region as LUXUL and keep the Region default revision setting. On Spanning Tree>>MSTP Instance>>Instance Config Configure VLAN-to-Instance mapping table of the MST page, configure VLAN-to-Instance mapping table.
Page 114 For Instance 2 (VLAN 102, 104 and 106), the blue paths in the following fi gure are con- „ nected links; the gray paths are the blocked links. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 115 Enable Loop Protect function for all non-edge Ports. „ Enable BPDU Protect function or BPDU Filter function for the edge Ports which are connected to any client device. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 116: Multicast
Network load. In Multicast, the packets are transmitted in the following manner as shown in Figure 8-1. Figure 8-1 Information transmission in the Multicast mode Features of Multicast: a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 117: Multicast Address
Multicast MAC Address will be 01-00-5E while the low-order 23 bits of a Multicast MAC address are the low-order 23 bits of the Multicast IP Address. The mapping relationship is described in Figure 8-2. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 118 IGMP messages transmitted between the client devices and the Multicast Server, this prevents Multicast groups being broadcasted on the Network. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 119: Igmp Snooping
When receiving IGMP Group-Specific-Query messages, the Switch will send the Group- Specific Query Message to the members of the Multicast group being queried. 2. IGMP Report Message © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 120 Member Port Time: Within the time specified if the Switch does not receive any IGMP Report Messages from the member Port, it will no longer consider this Port a member Port. The default value is 260 seconds. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 121 Network. Choose the menu Multicast>>IGMP Snooping>>Snooping Confi g to load the following page. Figure 8-4 Basic Conﬁ g © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 122 On this page you can confi gure the IGMP feature for the Ports of the Switch. Choose the menu Multicast>>IGMP Snooping>>Port Confi g to load the following page. Figure 8-5 Port Conﬁ g a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 123 Multicast groups established by IGMP Snooping are based on VLANs. On this page you can configure different IGMP parameters for different VLANs. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 124 VLAN Table VLAN ID Select: Click the Select button to quick-select the corresponding VLAN ID. Select: Select the desired VLAN ID(s) for confi guration. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 125 Multicast VLAN and also adds security as the Multicast VLAN is isolated from the other VLANs on the Switch. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 126 Switch removing the host from the Multicast Group. Default value is 1 second. Router Port: Select the Static Router Port, used in a Network with stable topology a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 127: Configuration Procedure
Configure the Link Type of the Router Ports as „ TRUNK or configure the Egress Rule as tagged and Link Type as GENERAL. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 128: Application Example For Multicast Vlan
User B: Connected to Port 5 of the Switch. Configure a Multicast VLAN, and user A and B receive Multicast streams through the Multicast VLAN. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 129 Confi gure the VLAN ID of a Multicast VLAN as 3 and keep the other parameters as default on Multicast>>IGMP Snooping>>Multicast VLAN page. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 130: Multicast Ip
Static: Displays all Static Multicast IP entries. „ Dynamic: Displays all Dynamic Multicast IP entries. „ Multicast IP Table Multicast IP Displays Multicast IP Address. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 131 VLAN ID: Enter the VLAN ID of the Multicast IP. Forward Port: Enter the Forward Port of the Multicast Group. Search Option © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 132: Multicast Filter
Port. This allows you to control client devices able to join a Multicast Group. 8.3.1 Multicast IP-Range On this page you can figure the desired IP-Ranges to be filtered. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 133 On this page you can confi gure the Multicast Filter Rules for Ports. The confi guration on this page and the confi guration on the IP-Range page together implement Multicast Filter functions on the Switch. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 134 Specify the Maximum number of Multicast Groups to prevent Ports using up excessive bandwidth. LAG: Displays the LAG Group number the Port belongs to. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 135: Packet Statistics
IGMP Messages in the Network. Choose the menu Multicast>>Packet Statistics to load the following page. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 136 RePort Packet (V3): Displays the number of IGMPv3 Report packets the Port received. Leave Packet: Displays the number of Leave packets the Port received. Error Packet: Displays the number of Error packets the Port received. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 137: Qos
Queue Scheduling. The Switch supports four Priority Schedule Modes: SP (Strict Priority), WRR (Weighted Round Robin), SP+WRR (Strict Priority+Weighted Round Robin) and Equ (Equal). © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 138: Priority Mode
DS fi eld indicate DSCP precedence with a range of 0-63. The last 2 bits (bit 6 and bit 7) are reserved. In the Switch, you can confi gure different DS Field Mappings to a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 139 Lower Priority will expire because they are not forwarded. This requires the Low Priority packets to be resent, further congesting the Network. Figure 9-4 SP-Mode © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 140 The weight value ratio of all the queues is 1:1:1:1. The QoS module is used for Traffi c Control and Priority Confi guration, including three submenus: DiffServ, Bandwidth Control and Voice VLAN. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 141: Diffserv
Displays the Port number of the Switch. Priority: Specifi es the priority of the Port. LAG: Displays the LAG Group to which the Port belongs. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 142 DSCP Priority. Non-IP Datagrams with 802.1Q tags are Mapped to different Priority Levels based on 802.1P Priority Mode. Untagged Non-IP Datagrams are Mapped based on Port Priority Mode. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 143 Save Confi g from the main menu and saved your running confi guration to non- volatile memory. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 144 802.1P Priority Mode. Any Untagged packets are Mapped based on Port Priority Mode. Any packets with the same value in the 802.1P Priority Tag or Port CoS value will be mapped to the same TC-ID. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 145 CoS/TC Queue Mapping settings will be restored to defaults if the Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non-volatile memory. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 146 In this mode, packets in all Queues are sent in order based on the Weight value for each Queue. The weight value ratio of TC0, TC1, TC2 and TC3 is 1:2:4:8. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 147: Bandwidth Control
Rate Limit is used to control the Ingress/Egress traffic rate on each Port by configur- ing the available bandwidth of each Port. In this way the Network bandwidth can be reasonably distributed and utilized. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 148 Upload Rate, the system will automatically select an integral that is a multiple of 64Kbps that is closest to the rate you entered. LAG: Displays the LAG Group number the Port belongs to. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 149 Network. If the transmission rate of these three kinds of packets exceeds the set Bandwidth Limits, the packets will be Automatically Discarded to avoid a Network broadcast storm. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 150 Select the Bandwidth Limit for received Multicast packets on the Port. Any Multicast packet traffi c exceeding the bandwidth will be Discarded. Select Disable to disable the storm control function for the Port. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 151: Voice Vlan
OUIs of several manufacturers. The following OUIs are preset in the Switch by default. Number OUI Vendor 00-01-E3-00-00-00 Siemens phone 00-03-6B-00-00-00 Cisco phone © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 152 Voice VLAN. The Voice VLAN function can be implemented on VoIP VLAN Config, VoIP VLAN Port Config and VoIP OUI Config pages. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 153 Before the Voice VLAN function is enabled the parameters of the Ports in the Voice VLAN should be confi gured on the following page. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 154 „ VLAN Membership: Displays the status of the Port in the current Voice VLAN. LAG: Displays the LAG Group to which the Port belongs. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 155 OUI. The Switch analyzes the Received packets. If the packet is recognized as a Voice packet, the Port will be automatically added to the Voice VLAN. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 156 Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non-volatile memory. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 157: Poe
Flexibility: In compliance with IEEE 802.3af and IEEE 802.3at global organizations can „ deploy PoE companywide without concern for any variance in AC power standards or outlet type. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 158: Poe Config
XMS-1024P The XMS-1024P Managed PoE Switch is a PSE (Power Sourcing Equipment). All RJ45 Ports except the Console Port on the Switch support PoE (Power over Ethernet) which auto- matically detects and supplies power for PDs (Powered Devices) complying with IEEE 802.3af and IEEE 802.3at.
Page 159 Save Config from the main menu and saved your running configuration to non- volatile memory. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 160 Displays the PoE Priority of the Port in the Profi le. Power Limit: Displays the Max power the Port in the Profi le can supply. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 161: Poe Time-Range
Displays the Mode of the Time-Range. Operation: Click Edit to modify this Time-Range. Click Detail to display complete information on this Time-Range. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 162 Select Absolute to confi gure an Absolute Time-Range. The Port using this Time-Range will supply power based on this Time-Range when the System Time is within the confi gured Time-Slice(s). a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 163 Holiday mode is a different Time-Range control policy from the Absolute or Week mode. On this page you can define Holidays according to your local calendar. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 164 Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non-volatile memory. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 165: Acl
The Time-Range configuration can be implemented on ACL Time-Range Table, ACL Time-Range and ACL Holiday Config pages. 11.1.1 ACL Time-Range Table On this page you can view the current ACL Time-Ranges. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 166 11.1.2 ACL Time-Range On this page you can create Time-Ranges. Choose the menu ACL>>ACL Time-Range>>ACL Time-Range to load the following page. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 167 Displays the Start Time of the Time-Slice. End Time: Displays the End Time of the Time-Slice. Delete: Click the Delete button to Delete the corresponding Time-Slice. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 168 On this page you can defi ne Holidays according to your local calendar. Choose the menu ACL>>ACL Time-Range>>ACL Holiday Confi g to load the following page. Figure 11-3 ACL Holiday Conﬁ g a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 169: Acl Config
IP ACL Rule and Extended-IP ACL Rule pages. 11.2.1 ACL Rule Table On this page, you can view the current ACLs configured in the Switch. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 170 Click Edit to modify the ACL selected, click Detail to view the confi gured ACL Rule, click Up to move the Rule Up in the list and click Down to move the Rule Down in the list. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 171 Save Confi g from the main menu and saved your running confi guration to non- volatile memory. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 172 S-MAC: Enter the Source MAC Address to be contained in the Rule. D-MAC: Enter the Destination MAC Address to be contained in the Rule. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 173 They can analyze the Source IP Address and Destination IP Address carried in the packets. Choose the menu ACL>>ACL Confi g>>Standard-IP ACL Rule to load the following page. Figure11-7 Create Standard-IP Rule © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 174 They can analyze the Source IP Address, Destination IP Address, IP Protocol, TCP Flag, Source-Port, Destination-Port, DSCP field values, IP ToS field values and IP Precedence field values. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 175 Enter the Destination IP Address to be contained in the Rule. Mask: Enter IP Address Mask. If it is set to 1 the Switch must Match the Address Exactly. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 176: Acl Policy
ACL Rules and actions together. The possible actions include; Port Mirroring, data Condition, Redirection and QoS re-assignment. Policy Config can be implemented using the ACL Policy Table, ACL Policy and ACL Policy Rule pages. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 177 Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non-volatile memory. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 178 On this page you can add ACLs and create corresponding actions for the Policy. Choose the menu ACL>>ACL Policy>>ACL Policy Rule to load the following page. Figure 11-11 ACL Policy Rule a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 179 Port or VLAN. The Port/VLAN will receive Data packets and process them based on the Policy only when the Policy is Bound to a © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 180 Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non-volatile memory. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 181 Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non-volatile memory. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 182 Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non-volatile memory a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 183: Application Example For Acl
The staff of the Marketing Department can access to the Internet all day but cannot „ visit the Forum during work hours. The R&D Department and Marketing Department cannot communicate with „ each other. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 184 On ACL>>ACL Policy>>ACL Policy Rule page, add ACL 11 to Policy Manager. On ACL>>ACL Policy Binding>>ACL Policy Port Binding page, select Policy Manager to bind to Port 3 a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 185 On ACL>>ACL Policy>>ACL Policy page, add ACL 101 to Policy limit1. On ACL>>ACL Policy Binding>>ACL Policy Port Binding page, select Policy limit2 to bind to Port 4. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 186: Network Security
IP-MAC Binding, ARP IP-MAC Binding and IP-MAC DHCP Snooping pages. 12.1.1 IP-MAC Binding Table On this page, you can view the information of the Bound entries. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 187 Warning: Indicates that a collision may be caused by the MSTP function. „ Critical: Indicates that the Entry has caused a collision with other Entries. „ © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 188 VLAN ID: Enter the VLAN ID. Port: Select the Port Number connected to the Host. Protect Type: Select the Protect Type for the Entry. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 189 ARP Table where the current IP Address-to-MAC Address mapping Entries are stored. When a known device communicates with an unknown device, ARP follows the outline in the figure shown below. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 190 Packet, the Switch can gather the IP Address, MAC Address, VLAN and the connected Port Number of a device by analyzing the packet and can be used to Bind the Entry. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 191 Warning: Indicates that a collision may be caused by the MSTP function. „ Critical: Indicates that the Entry has caused a collision with „ other Entries. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 192 IP Address, Subnet Mask, Gateway, DNS Servers, etc… to the Client. A Server can assign the IP Address for hundreds or even thousands of Clients. This configuration is illustrated in the following figure. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 193 Dynamic IP Address: DHCP Server assigns any open DHCP Pool address to a connect- „ ing Client Device. This can cause the IP Address of Devices in the Network to change from time to time. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 194 DHCP-ACK packet back to the Client. If the DHCP Server does not acknowledge assigning this IP Address, the Server will send the DHCP-NAK packet and refuse assigning this IP Address to the Client. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 195 Server and Client. If there are multiple DHCP Servers in the Network, conflicting IP Addresses and Security breaches can occur. Common causes of Rogue DHCP Servers are: © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 196 DNS Server Address to redirect users to compromised or outright fraudulent Web Sites. The following fi gure illustrates a DHCP Cheat Attack. Figure 12-7 DHCP Cheat Attack a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 197 Global Flow Control: Select the value to specify the maximum number of DHCP messages that can be forwarded by the Switch per second. Any messages in excess of this number will be discarded. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 198 CAUTION: IP-MAC DHCP Snooping settings will be restored to defaults if the Switch is restarted and you have not selected Save Config from the main menu and saved your running configuration to non-volatile memory.. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 199: Arp Inspection
As the above fi gure shows, when the Host tries to communicate with Gateway, the Host will encapsulate the false destination MAC Address, which results in a breakdown of the normal communication. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 200 Host/Server to another terminal Host, which causes that the two terminal Hosts in the same Network segment to lose communication with each other. The ARP Attack Cheating Terminal Hosts is illustrated in the following fi gure: a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 201 Hosts are stolen and the Hosts are unaware of the attack. This is called a Man-In-The-Middle Attack. The Man-In-The-Middle Attack is illustrated in the following fi gure: Figure 12-12 Man-In-The-Middle Attack © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 202 Allows the Switch to detect ARP packets based on the Bound Entries in the IP-MAC Binding Table and filter counterfeit ARP packets to prevent ARP attacks. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 203 NOTE: ARP Detection and ARP Defense cannot be Enabled at the same time. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 204 ARP packets on the Port exceeds the defi ned parameters thus avoiding an ARP Flood attack. Choose the menu Network Security>>ARP Inspection>>ARP Defense to load the following page: Figure 12-14 ARP Defense a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 205 Displays the number of counterfeit ARP packets received on each Port, this helps you to locate the offending device or party and allows you to take the necessary precautions. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 206 Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non-volatile memory. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 207: Dos Defense
Ping Flooding The attacker floods the destination Network with a Ping broadcast storm, causing Network latency and connection issues. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 208 On this page, you can Enable the DoS Defense types appropriate for your Network. Choose the menu Network Security>>DoS Defense>>DoS Defense to load the following page: Figure 12-16 DoS Defense a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 209: X/Radius
With the 802.1X/RADIUS protocol enabled, a Supplicant can access the LAN only when it passes Authentication. Those failing to pass Authentication are denied access. Architecture of 802.1X/RADIUS Authentication © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 210 Authenticator: The Authenticator is usually an 802.1X/RADIUS supported Network „ device such as this Luxul Switch. It provides the physical Port the Supplicant uses to access the LAN and authenticates the Supplicant. Authentication Server: The Authentication Server is an entity that provides „...
Page 211 The Supplicant can also launch an 802.1X/RADIUS Client program to initiate an 802.1X/ RADIUS Authentication process by sending an EAPOL-Start packet to the Switch, This LUXUL Switch can authenticate Supplicants in EAP relay mode or EAP termination mode. The illustration below of these two modes outlines this process.
Page 212 Database, encrypts the Password using a randomly-generated key and sends the key to the Switch using a RADIUS Access-Challenge packet. The Switch then sends the key to the 802.1X/RADIUS Client program. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 213 This Switch supports the PAP termination mode. The Authentication procedure of PAP is illustrated in the following fi gure: Figure 12-19 PAP Authentication Procedure © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 214 802.1X/RADIUS Authentication, will the Port be removed from the Guest VLAN and added to the specified VLAN. The Port will be put back in the Guest VLAN when its Supplicant logs off. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 215 Authentication process by specifying the Authentication Method, Guest VLAN and various Timers. Choose the menu Network Security>>802.1X/RADIUS>>802.1X Confi g to load the following page: Figure 12-20 802.1X Conﬁ g © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 216 CAUTION: 802.1X Config settings will be restored to defaults if the Switch is restarted and you have not selected Save Config from the main menu and saved your running configuration to non-volatile memory. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 217 802.1X/RADIUS Authentication. Force-Unauthorized: In this mode the Port will not work at all as it is „ forced into unauthorized status. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 218 On this page you can confi gure the parameters of the Authentication Server. Choose the menu Network Security>>802.1X/RADIUS>>Radius Server Confi g to load the following page: Figure 12-22 Radius Server a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 219 NOTE: The 802.1X/RADIUS function should not be enabled for Port(s) connected to the Authentication Server. Authentication parameters of the Switch and the Authentication Server should be identical. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 220: Snmp
SNMP Agent: An SNMP Agent is the Server software operating on the Network devices. It handles the responsibility of receiving and processing SNMP Request a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 221 Agent. Any SNMP packets failing to pass the Community Name are discarded. The community name can limit access to SNMP Agent from SNMP Management Station functioning as a Password. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 222 The SNMP View Confi g, is created for an SNMP Management Station to manage MIB objects. The managed object uniquely identifi ed by an OID can be set to allow or a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 223: Snmp Config
To enable SNMP, please confi gure the SNMP function globally on this page. Choose the menu SNMP>>SNMP Confi g>>SNMP Confi g to load the following page: Figure 13-3 SNMP Conﬁ g © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 224 Switch, the MIB (Management Information Base) contains the set of OIDs avail- able on the Switch. The SNMP View Config is created to allow the SNMP Management station to Manage MIB Objects. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 225 On this page you can confi gure SNMP Group Settings to control SNMP access by providing Users in various groups with different Management rights using the Read View, Write View and/or Notify View. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 226 Select the View to be the active Read View. Management Access is restricted to Read-Only, changes cannot be made to the assigned SNMP View Confi g. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 227 User and its Group have the same Security Level and Access Rights. You can configure the SNMP User Config on this page. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 228 Group according to its Group Name, Security Model and Security Level. Security Model: Select the Security Model for the User. Security Level: Select the Security Level for the User. (SNMP v3 only) a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 229 NOTE: The SNMP User and its associated Group must have the same Security Model and Security Level. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 230 Click the Edit button to modify the MIB View and the Access right of the Community, and then click the Modify button to apply. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 231 SNMP User Config assign the User to a Group and configure the Auth/Privacy mode and Auth/Privacy Password for the User. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 232: Snmp Notification
The Inform method employed in SNMPv2c and SNMPv3 has a higher security than the Trap method. On this page you can configure the SNMP Notification functions of SNMP. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 233 Trap: Indicates Trap messages are sent. „ Inform: Indicates Inform messages are sent. Inform messages have „ higher security than Trap type messages. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 234: Rmon
Network Management standard defined by Internet Engineering Task Force (IETF) and is used to monitor the Data traffic across a Network segment up to and including the a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 235 On this page, you can confi gure the History Group for RMON. Choose the menu SNMP>>RMON>>History Control Confi g to load the following page. Figure 13-9 History Control Conﬁ g © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 236 On this page you can confi gure RMON Events. Choose the menu SNMP>>RMON>>Event Confi g to load the following page. Figure 13-10 Event Conﬁ g a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 237 On this page you can confi gure an Alarm Group for RMON. Choose the menu SNMP>>RMON>>Alarm Confi g to load the following page. Figure 13-11 Alarm Conﬁ g © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 238 CAUTION: Alarm Config settings will be restored to defaults if the Switch is restarted and you have not selected Save Config from the main menu and saved your running configuration to non- volatile memory. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 239: Lldp
TLV, Port ID TLV, TTL TLV and End TLV are the four required TLVs in an LLDPDU. Optional TLVs provide various details about the LLDP Agent advertising them and are selected by Network Management. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 240 LLDPDUs and the attached TLVs. Once verifi ed it will save this neighbor information to the local Device, then set the Aging Time for the information according a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 241 LLDPDUs. Any information following an End Of LLDPDU TLV is ignored. Chassis ID Identifi es the Chassis Address of the Mandatory connected Device. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 242 Aggregation TLV and Maximum Frame TLV are defined in IEEE 802.3. Some specific TLVs are for LLDP-MED protocol, such as LLDP-MED Capabilities TLV, Network Policy TLV, a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 243 The LLDP module is used for LLDP function configuration of the Switch and includes three submenus: LLDP Config, Device Info, Device Statistics and LLDP-Media. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 244: Lldp Config
LLDPDUs from being sent frequently. The default value is 2. Reinit Delay: The amount of delay from when LLDP Status becomes “Disable” until re-initialization will be attempted. The default value is 3. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 245 On this page you can confi gure the Port(s) LLDP parameters. Choose the menu LLDP>>LLDP Confi g>>LLDP Port Confi g to load the following page: Figure 14-2 LLDP Port Conﬁ g © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 246: Device Info
14.2 Device Info Here you can view the LLDP information of the local Device and its neighbors on the Local Info and Neighbor Info pages respectively. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 247 Save Confi g from the main menu and saved your running confi guration to non- volatile memory. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 248 Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non-volatile memory. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 249: Device Statistics
Displays the number of Neighbors Dropped by the local Device. Total Ageouts: Displays the number of Neighbors that have Aged Out on local Device. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 250: Lldp-Media
Devices may be a member of any of the Endpoint Device Classes. Endpoint Devices have three defined Classes: Class I, Class II and Class III. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 251 Stream capabilities. Communication Device Endpoint (Class III): This class of Endpoint Device supports end Users of the IP communication system. The following LLDP-MED optional TLVs are supported in XMS-1024P. Network Policy TLV The Network Policy TLV allows both Network Connectivity...
Page 252 Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non-volatile memory. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 253 Select TLVs to be included in outgoing LLDPDU. Details: Click the Detail button to display the included TLVs and to select the desired TLVs. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 254 Switch is restarted and you have not selected Save Confi g from the main menu and saved your running confi guration to non-volatile memory. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 255 Specify the Auto Refresh Rate. Local Info Enter the desired Port number and click Select to display the information of the corresponding Port. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 256 On this page you can view the LLDP-MED information of Neighbor Devices. Choose the menu LLDP>>LLDP-Media>>LLDP-Media Neighbor Info to load the following page: Figure 14-9 LLDP-Media Neighbor Info a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 257: Cluster
Commander Switch. The Commander Switch is the manager of the Cluster and all other Switches are considered member Switches. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 258 The Commander Switch discovers and determines Candidate Switches by collecting „ related information. After being added to the Cluster, a Candidate Switch becomes a Member Switch. „ a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 259: Ndp
The Commander Switch becomes a Candidate Switch only when the Cluster „ is Deleted. NOTE: The XMS-1024P Switch cannot be configured as Commander Switch and cannot manage the Cluster. Introduction to Cluster The Cluster functions used to Configure and Manage the Switches in the Cluster are based on three protocols, NDP, NTDP and CMP (Cluster Management Protocol).
Page 260 Displays the Firmware Version of the Neighbor Switch. Aging Time: Displays the period of time for the Switch to keep the NDP packets from the Neighbor Switch. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 261 Error NDP Packets: Displays the count of Received error NDP packets. Neighbors: Displays the count of connected Neighbors. Detail: Click the Detail link to view the detailed information collected on the Port. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 262 Click the Enable button to enable NDP for the Port you select. Disable: Click the Disable button to disable NDP for the Port you select. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 263: Ntdp
Port forwarding NTDP request packets. The NTDP function can be implemented on NTDP Device Table, NTDP Summary and NTDP Config pages. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 264: Lux-Ug-Xms-1024P Vers
Click the Detail link to view the detailed information for this Device and its Neighbors Collect Topology: Click the Collect Topology button to collect NTDP topology information a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 266 Port forwarding NTDP request packets over. Port Status Port: Displays the Port Number of the Switch. NTDP: Displays NTDP Status (Enabled/Disabled) of the current Port. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 267 On this page you can confi gure NTDP Globally. Choose the menu Cluster>>NTDP>>NTDP Confi g to load the following page: Figure 15-8 NTDP Conﬁ g © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 268 NOTE: The NTDP function is effective only when NTDP is Enabled Globally and on at least one Port. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 269: Cluster
IP Address assigned by the Commander Switch. You can manage and confi gure the member Switch via the Commander Switch. Note: The XMS-1024P cannot be confi gured as a Commander Switch and cannot manage the Cluster. The Cluster function is implemented on the Cluster Summary and Cluster Confi g pages.
Page 270 Current Role Role: Displays the Role the Switch plays in the Cluster. Role Change Individual: Select this option to change the role of the Switch. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 271: Maintenance
Network is under attack or configured improperly. The System Monitor function is implemented on the CPU Monitor and Memory Monitor pages. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 272 Choose the menu Maintenance>>System Monitor>>CPU Monitor to load the following page: Figure 16-1 CPU Monitor Click the Monitor button to enable monitoring and display of the CPU utilization rate every four seconds. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 273: System Logs
The Log system of Switch can record, classify and manage the System Logs effectively, providing powerful support tool for the Network administrator to monitor Network operations and diagnose malfunctions. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 274 Table 16-1 Log Level The System Logs function is implemented on the Log Table, Local Log Config, Syslog Config and Backup Log File pages. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 275 Displays the Severity Level of the log Entry. You can select a Severity Level to display the log information whose Severity Level value is the same or smaller. Content: Displays the Content of the log information. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 276 Indicates the location to which the system log is saved. The information in the Log File will not be lost after the Switch is restarted and can be exported on the Backup Log page. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 277 Server is used to centralize System Logs from various devices for the administrator to monitor and manage the Network. Choose the menu Maintenance>>Log>>Syslog Confi g to load the following page: Figure 16-5 Syslog Conﬁ g © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 278 The Backup Log feature allows the system logs saved in the Switch to be output as a fi le for device diagnosis and statistics analysis. Choose the menu Maintenance>>Log>>Backup Log File to load the following page: Figure 16-6 Backup Log a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 279: Device Diagnostics
Choose the menu Maintenance>>Device Diagnostics>>Cable Test to load the following page: Figure 16-7 Cable Test © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 280 Port of the Switch is available as well as to check and analyze the physical connection status of the Port. Choose the menu Maintenance>>Device Diagnostics>>Loopback to load the following page: Figure 16-8 Loopback a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 281: Network Diagnostics
The Trace Route test function is used to test the connectivity of gateways during the packets journey from the Source to Destination of the test Data. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 282: Save Config
OK: Press the OK button to Save the Running confi guration to Non-Volatile RAM. Cancel: Press the Cancel button to back out of the Save Confi g option. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 283: Regulatory Compliance
„ minimum distance of 20cm is required between personnel and the device or antenna to comply with the radio frequency exposure limit. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 284 Hereby, Luxul, 14203 Minuteman Drive, Suite 201, Draper, Utah, 84020, declares that this Luxul device is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. For a copy of this report send a self addressed stamped envelope to: Luxul CE, 14203 Minuteman Drive, Suite 201, Draper, Utah, 84020.
Page 285 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Other brands and product names are trademarks or registered trademarks of their respective holders. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 286: Appendix A: Specifications
Operating Temperature: 32°F to 104°F (0°C to 40°C) Storage Temperature: -40°C ~ 70°C Operating Humidity: 10% ~ 90% RH Non-condensing Storage Humidity: 5% ~ 90% RH Non-condensing a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 287: Glossary
Switch and are then passed to an Authentication Server (e.g., RADIUS) for verification. EAPOL is implemented as part of the IEEE 802.1X Port Authentication standard. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 288 Port Authentication controls access to the Switch Ports by requiring users to first enter a user ID and Password for Authentication. IEEE 802.3AC Defines frame extensions for VLAN tagging. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 289 Link Aggregation (See Port Trunk). Link Aggregation Control Protocol (LACP) Allows Ports to automatically negotiate a trunked link with LACP-configured Ports on another device. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 290 Rapid Spanning Tree Protocol (RSTP) Reduces the convergence time for Network topology changes to about 10% of that required by the older IEEE 802.1D STP standard. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...
Page 291 Protocol suite that includes TCP as the primary transport protocol, and IP as the Network layer protocol. Trivial File Transfer Protocol (TFTP) A TCP/IP protocol commonly used for software downloads. © 2014 Luxul. All Rights Reserved. Other trademarks and registered trademarks are the property of their respective owners...
Page 292 Information on this document supersedes all previous versions. Products and documents subject to change without notice. Products may be discontinued without notice. © 2014 Luxul. All Rights Reserved. a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450 LUX-UG-XMS-1024P Vers: 081314...

Luxul XMS-1024P User Manual

1 About this Guide

2 Introduction

3 Logging on to the Switch

4 System

5 Switching

6 Vlan

7 Spanning Tree

8 Multicast

9 Qos

10 Poe

11 Acl

12 Network Security

13 Snmp

14 Lldp

15 Cluster

16 Maintenance

17 Save Config

18 Regulatory Compliance

Appendix A: Specifications

Glossary

Quick Links

User Guide

Need help?

Questions and answers

Related Manuals for Luxul XMS-1024P

Summary of Contents for Luxul XMS-1024P

Table of Contents