Installation Manual

ManualsBrandsComnet ManualsNetworkTraffic Detector Rack Industrially Hardened Managed Switch Kit with (8) 10/100/1000Base-TX & (4) 100/1000Base-FX Ports & PoE+

INSTALLATION AND OPERATION MANUAL

CNGE12FX4TX8MS[POE]/TS

TRAFFIC DETECTOR RACK INDUSTRIALLY HARDENED

MANAGED SWITCH WITH (8) 10/100/1000BASE-TX

& (4) 100/1000BASE-FX PORTS & OPTIONAL POE+

The ComNet CNGE12FX4TX8MS[POE]/TS is a twelve port, managed Ethernet switch.

The switch is mechanically designed to fit into the input file of a NEMA TS2 traffic

detector rack and derives power and ground from the backplane. The small form factor

allows the user to take advantage of existing rack space already dedicated within an

already space limited traffic cabinet making installation clean and easy. The four SFP

ports are 100/1000Mbps capable, allowing single-mode or multimode optical fiber

transmission with the use of optional SFPs. The density of the SFP ports allows for

an optical drop-and-repeat, ring or star (north-south-east-west) topology to address

the majority of traffic applications. The remaining eight RJ-45 ports allow for high-

throughput 10/100/1000TX Gigabit connectivity on the local copper Ethernet access

ports. The CNGE12FX4TX8MSPOE/TS features IEEE 802.3at (30W) PoE on all eight

RJ-45 Ethernet ports for PoE-compliant devices such as wireless radios or IP cameras.

The ideal solution when footprint within the traffic cabinet is limited.

This manual serves the following

ComNet Model Numbers:

CNGE12FX4TX8MS/TS

CNGE12FX4TX8MSPOE/TS

Summary of content (153 pages)

PAGE 1
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS TRAFFIC DETECTOR RACK INDUSTRIALLY HARDENED MANAGED SWITCH WITH (8) 10/100/1000BASE-TX & (4) 100/1000BASE-FX PORTS & OPTIONAL POE+ This manual serves the following ComNet Model Numbers: CNGE12FX4TX8MS/TS CNGE12FX4TX8MSPOE/TS The ComNet CNGE12FX4TX8MS[POE]/TS is a twelve port, managed Ethernet switch. The switch is mechanically designed to fit into the input file of a NEMA TS2 traffic detector rack and derives power and ground from the backplane.
PAGE 2
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Contents About This Guide 5 Related Documentation 5 About ComNet 5 Website 5 Support 5 Safety 5 Overview 6 Introduction 6 Software Features 7 Hardware Features 7 Hardware Overview 8 Front Panel 8 Ethernet Cables 9 1000/100BASE-TX/10BASE-T Pin Assignments 9 SFP 11 Console Cable 12 WEB Management 13 Configuration by Web Browser 13 About Web-based Management 13 Basic Setting 16 System Information 16 Admin & Pas
PAGE 3
INSTALLATION AND OPERATION MANUAL TECH SUPPORT: 1.888.678.9427 CNGE12FX4TX8MS[POE]/TS DHCP Server 26 Port Setting 30 Port Alias 31 Port Trunk 32 LACP 33 Loop Protection 37 Loop Protection Status Help 38 Redundancy 39 Legacy Ring 40 G.8032 - MEP 41 G.
PAGE 4
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS SFP Monitor 124 Ping 125 Syncronization-PTP 126 PoE Configuration (PoE Models Only) 128 Status 130 Factory Defaults 131 System Reboot 131 Command Line Interface Management 132 About CLI Management 132 Commander Groups 136 Technical Specifications 150 TECH SUPPORT: 1.888.678.
PAGE 5
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS About This Guide This guide is intended for different users such as engineers, integrators, developers, IT managers, and technicians.
PAGE 6
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Overview Introduction The ComNet CNGE12FX4TX8MS[POE]/TS is a twelve port, managed Ethernet switch. The switch is mechanically designed to fit into the input file of a NEMA TS2 traffic detector rack and derives power and ground from the backplane. The small form factor allows the user to take advantage of existing rack space already dedicated within an already space limited traffic cabinet making installation clean and easy.
PAGE 7
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Software Features »» C-Ring (recovery time < 30ms over 250 units of connection) »» MSTP (RSTP/STP compatible) for Ethernet Redundancy »» G.8032 Ethernet Ring protection System (ERPS) »» Optional 8 ports PSE fully compliant with IEEE802.
PAGE 8
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Hardware Overview Front Panel The following table describes the labels on the CNGE12FX4TX8MS[POE]/TS series switches. Port Description Gigabit SFP ports 4 x 100/1000Base-X on SFP port Gigabit Ethernet Ports 8 x 10/100/1000Base–T(X) Console Use RS-232 with RJ-45 connecter to manage switch. 1 2 4 5 6 7 3 8 CNGE12FX4TX8MSPOE/TS - Typical Front Panel 1. 100/1000Base-X SFP Ports 2. Indicator LEDs for SFP Ports Link/Activity 3.
PAGE 9
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Ethernet Cables The CNGE12FX4TX8MS[POE]/TS series switches have standard Ethernet ports. According to the link type, the switches use CAT 3, 4, 5,5e UTP cables to connect to any other network device (PCs, servers, switches, routers, or hubs). Please refer to the following table for cable specifications. Cable Types and Specifications Cable Type Max. Length Connector 10BASE-T Cat. 3, 4, 5 100-ohm UTP 100 m (328 ft) RJ-45 100BASE-TX Cat.
PAGE 10
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS 1000Base-T PSE RJ-45 port Pin Number Assignment #1 BI_DA+ with PoE Power input + #2 BI_DA – with PoE Power input + #3 BI_DB+ with PoE Power input – #4 BI_DC+ #5 BI_DC- #6 BI_DB – with PoE Power input – #7 BI_DD+ #8 BI_DD1000 Base-T RJ-45 Pin Assignments Pin Number Assignment 1 BI_DA+ 2 BI_DA- 3 BI_DB+ 4 BI_DC+ 5 BI_DC- 6 BI_DB- 7 BI_DD+ 8 BI_DD- The CNGE12FX4TX8MS[POE]/TS series switches support auto MDI/MDI-X op
PAGE 11
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS 1000 Base-T MDI/MDI-X pins assignment Pin Number MDI port MDI-X port 1 BI_DA+ BI_DB+ 2 BI_DA- BI_DB- 3 BI_DB+ BI_DA+ 4 BI_DC+ BI_DD+ 5 BI_DC- BI_DD- 6 BI_DB- BI_DA- 7 BI_DD+ BI_DC+ 8 BI_DD- BI_DC- Note: “+” and “-” signs represent the polarity of the wires that make up each wire pair. SFP The Switch has fiber optical ports with SFP connectors.
PAGE 12
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Console Cable CNGE12FX4TX8MS[POE]/TS series switches can be managed via a console port located on the front of the switch. The RJ-45 to DB-9 cable can be found in the package. You can connect them to PC via a RS-232 cable with DB-9 female connector and the other end (RJ-45 male connector) connects to console port of switch.
PAGE 13
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS WEB Management Attention: W hile installing and upgrading firmware, please remove physical loop connection first. DO NOT power off equipment while the firmware is upgrading! Configuration by Web Browser This section introduces the configuration by Web browser. About Web-based Management An embedded HTML web site resides in flash memory on the CPU board.
PAGE 14
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS System Login 1. Launch Internet Explorer. 2. Type http:// and the IP address of the switch. Press “Enter”. 3. The login screen appears. Login screen 4. Key in the username and password. The default username and password is admin. 5. Press OK button, then the main interface of the Web-based management appears. TECH SUPPORT: 1.888.678.
PAGE 15
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Main Interface Main interface TECH SUPPORT: 1.888.678.
PAGE 16
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Basic Setting System Information The switch system information is provided here. System Information interface Label Description System Name An administratively assigned name for this managed node. By convention, this is the node’s fully-qualified domain name. A domain name is a text string drawn from the alphabet (A-Za-z), digits (0-9), minus sign (-). No space characters are permitted as part of a name.
PAGE 17
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Admin & Password This page allows you to configure the system password required to access the web pages or log in from CLI. Label Description Old Password Enter the current system password. If this is incorrect, the new password will not be set. New Password The system password. The allowed string length is 0 to 31, and the allowed content is the ASCII characters from 32 to 126. Confirm password Re-type the new password.
PAGE 18
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Auth Method This page allows you to configure how a user is authenticated when he logs into the switch via one of the management client interfaces. Label Description Client The management client for which the configuration below applies. Authentication Method Authentication Method can be set to one of the following values: none: authentication is disabled and login is not possible.
PAGE 19
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS IPv6 Setting Configure the switch-management IPv6 information on this page. Label Description Auto Configuration Enable IPv6 auto-configuration by checking this box. If the system cannot obtain the stateless address in time, the configured IPv6 settings will be used. The router may delay responding to a router solicitation for a few seconds, the total time needed to complete auto-configuration can be significantly longer.
PAGE 20
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS IP Setting Configure the switch-managed IP information on this page. Label Description DHCP Client Enable the DHCP client by checking this box. If DHCP fails and the configured IP address is zero, DHCP will retry. If DHCP fails and the configured IP address is nonzero, DHCP will stop and the configured IP settings will be used. The DHCP client will announce the configured System Name as hostname to provide DNS lookup.
PAGE 21
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS HTTPS Label Description Mode Indicates the HTTPS mode operation. When the current connection is HTTPS, to apply HTTPS disabled mode operation will automatically redirect web browser to an HTTP connection. Possible modes are: Enabled: Enable HTTPS mode operation. Disabled: Disable HTTPS mode operation. Save Click to save changes. Reset Click to undo any changes made locally and revert to previously saved values.
PAGE 22
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS LLDP LLDP Configuration This page allows the user to inspect and configure the current LLDP port settings. Label Description Port The switch port number of the logical LLDP port. Mode Select LLDP mode. Disabled The switch will not send out LLDP information, and will drop LLDP information received from neighbors. Enabled The switch will send out LLDP information, and will analyze LLDP information received from neighbors. TECH SUPPORT: 1.888.
PAGE 23
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS LLDP Neighbor Information This page provides a status overview for all LLDP neighbors. The displayed table contains a row for each port on which an LLDP neighbor is detected. The columns hold the following information: LLDP Neighbor Information Label Description Local Port The port on which the LLDP frame was received. Chassis ID The Chassis ID is the identification of the neighbor’s LLDP frames.
PAGE 24
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS LLDP Neighbor Information This page provides an overview of all LLDP traffic. Two types of counters are shown. Global counters are counters that refer to the whole stack, switch, while local counters refer to counters for the currently selected switch. Port Statistics Global Counters Label Description Neighbor entries were last changed at Shows the time for when the last entry was last deleted or added.
PAGE 25
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Local Counters Label Description Local Port The port on which LLDP frames are received or transmitted. Tx Frames The number of LLDP frames transmitted on the port. Rx Frames The number of LLDP frames received on the port. Rx Errors The number of received LLDP frames containing some kind of error. Frames Discarded If an LLDP frame is received on a port, and the switch’s internal table has run full, the LLDP frame is counted and discarded.
PAGE 26
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Modbus TCP This page shows Modbus TCP support of the switch. (For more information regarding Modbus, please visit http://www.modbus.org/) Label Description Mode Shows the existing status of the Modbus TCP function Backup/Restore Configuration You can save/view or load the switch configuration.
PAGE 27
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS DHCP Dynamic Client List When the DHCP server function is activated, the system will collect the DHCP client information and display in here. DHCP Client List You can assign the specific IP address which is in the assigned dynamic IP range to the specific port. When the device is connecting to the port and asks for dynamic IP assigning, the system will assign the IP address that has been assigned before in the connected device.
PAGE 28
INSTALLATION AND OPERATION MANUAL Label CNGE12FX4TX8MS[POE]/TS Description Relay Information Indicates the DHCP relay information mode option operation. The option 82 circuit Mode ID format as “[vlan_id][module_id][port_no]”. The first four characters represent the VLAN ID, the fifth and sixth characters are the module ID(in standalone device it always equal 0, in stackable device it means switch ID). ), and the last two characters are the port number.
PAGE 29
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Relay Statistics Label Description Transmit to Server The number of packets that are relayed from client to server. Transmit Error The number of packets that resulted in errors while being sent to clients. Receive from Server The number of packets received from server. Receive Missing Agent Option The number of packets received without agent information options.
PAGE 30
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Port Setting Port Control This page displays current port configurations. Ports can also be configured here. Label Description Port This is the logical port number for this row. Link The current link state is displayed graphically. Green indicates the link is up and red that it is down. Current Link Speed Provides the current link speed of the port. Configured Link Selects any available link speed for the given switch port.
PAGE 31
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Power Control The Usage column shows the current percentage of the power consumption per port. The Configured column allows for changing the power savings mode parameters per port. Disabled: All power savings mechanisms disabled. ActiPHY: Link down power savings enabled. PerfectReach: Link up power savings enabled. Enabled: Both link up and link down power savings enabled. Save Click to save changes.
PAGE 32
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Port Trunk Trunk Configuration This page is used to configure the Aggregation hash mode and the aggregation group. Label Description Source MAC Address The Source MAC address can be used to calculate the destination port for the frame. Check to enable the use of the Source MAC address, or uncheck to disable. By default, Source MAC Address is enabled.
PAGE 33
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS LACP Port Configuration This page allows the user to inspect the current LACP port configurations, and possibly change them as well. Label Description Port Indicates the group ID for the settings contained in the same row. Group ID “Normal” indicates there is no aggregation. Only one group ID is valid per port. LACP Enabled Each switch port is listed for each group ID.
PAGE 34
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS LACP System Status This page provides a status overview for all LACP instances. Label Description Aggr ID The Aggregation ID associated with this aggregation instance. For LLAG the id is shown as ‘isid:aggr-id’ and for GLAGs as ‘aggr-id’ Partner System ID The system ID (MAC address) of the aggregation partner. Partner Key The Key that the partner has assigned to this aggregation ID. Last Changed The time since this aggregation changed.
PAGE 35
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS LACP Status This page provides a status overview for LACP status for all ports. Label Description Port The switch port number. LACP ‘Yes’ means that LACP is enabled and the port link is up. ‘No’ means that LACP is not enabled or that the port link is down. ‘Backup’ means that the port could not join the aggregation group but will join if other port leaves. Meanwhile it’s LACP status is disabled. Key The key assigned to this port.
PAGE 36
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS LACP Statistics This page provides an overview for LACP statistics for all ports. Label Description Port The switch port number LACP Transmitted Shows how many LACP frames have been sent from each port LACP Received Shows how many LACP frames have been received at each port. Discarded Shows how many unknown or illegal LACP frames have been discarded at each port. Refresh Click to refresh the page immediately.
PAGE 37
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Loop Protection This feature prevents the loop attack. When the port receives loop packet. This port will auto disable, prevent the “loop attack” affect other network devices. Label Description Enable Loop Protection Controls whether loop protections is enabled (as a whole). Transmission Time The interval between each loop protection PDU sent on each port. valid values are 1 to 10 seconds.
PAGE 38
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Loop Protection Status Help This page displays the loop protection port status the ports of the switch. Loop protection port status is: Label Description Port The switch port number of the logical port. Action The currently configured port action. Transmit The currently configured port transmit mode. Loops The number of loops detected on this port. Status The current loop protection status of the port.
PAGE 39
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Redundancy C-Ring C-Ring is one of the most powerful Ring technologies in the world. The recovery time of C-Ring is less than 30 ms. It can reduce unexpected damage caused by network topology change. C-Ring supports 3 different Ring topologies: Ring, Coupling Ring and Dual Homing. C-Ring interface The following table describes the labels in this screen. Label Description C-Ring Mark to enable Ring.
PAGE 40
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Legacy Ring Legacy ring provides support for the switch to be used in an existing ring of ComNet X-Ring enabled switches. X-Ring provides a faster redundant recovery than Spanning Tree topology. The action is similar to STP or RSTP, but the algorithms between them are not the same. In the X-Ring topology, every switch should be enabled with X-Ring or Legacy Ring function and two ports should be assigned as the member ports in the ring.
PAGE 41
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS G.8032 - MEP The Maintenance Entity Point instances are configured here. Label Description Delete This box is used to mark a MEP for deletion in next Save operation. Instance The ID of the MEP. Click on the ID of a MEP to enter the configuration page. Domain Port: This is a MEP in the Port Domain. ‘Flow Instance’ is a Port. Esp: Future use Evc: This is a MEP in the EVC Domain.
PAGE 42
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS G.8032 - ERPS The Ethernet Ring Protection Switch instances are configured here. Label Description Delete This box is used to mark an ERPS for deletion in next Save operation. Protection group The ID of the created Protection group. Click on the ID of an Protection group to enter ID the configuration page. Port 0 This will create a Port 0 of the switch in the ring. Port 1 This will create “Port 1” of the switch in the Ring.
PAGE 43
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS MSTP Bridge Settings This page allows you to configure RSTP system settings. The settings are used by all RSTP Bridge instances in the Switch Stack. Label Description Protocol Version The STP protocol version setting. Valid values are STP, RSTP and MSTP. Forward Delay The delay used by STP Bridges to transition Root and Designated Ports to Forwarding (used in STP compatible mode). Valid values are in the range 4 to 30 seconds.
PAGE 44
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS MSTI Mapping This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. Label Description Configuration Name The name identifying the VLAN to MSTI mapping. Bridges must share the name and revision (see below), as well as the VLAN-to-MSTI mapping configuration in order to share spanning trees for MSTI’s. (Intra-region). The name is at most 32 characters.
PAGE 45
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS MSTI Priorities This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. Label Description MSTI The bridge instance. The CIST is the default instance, which is always active. Priority Controls the bridge priority. Lower numerical values have better priority.
PAGE 46
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS CIST Ports This page allows the user to inspect the current STP CIST port configurations, and possibly change them as well. This page contains settings for physical and aggregated ports. The aggregation settings are stack global. Label Description Port The switch port number of the logical STP port. STP Enabled Controls whether STP is enabled on this switch port. Path Cost Controls the path cost incurred by the port.
PAGE 47
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Restricted TCN If enabled, causes the port not to propagate received topology change notifications and topology changes to other ports. If set it can cause temporary loss of connectivity after changes in a spanning trees active topology as a result of persistent incorrectly learned station location information.
PAGE 48
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS MSTI Ports This page allows the user to inspect the current STP MSTI port configurations, and possibly change them as well. A MSTI port is a virtual port, which is instantiated separately for each active CIST (physical) port for each MSTI instance configured and applicable for the port. The MSTI instance must be selected before displaying actual MSTI port configuration options. This page contains MSTI port settings for physical and aggregated ports.
PAGE 49
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS STP STP Bridges This page provides a status overview for all STP bridge instances. The displayed table contains a row for each STP bridge instance, where the column displays the following information: Label Description MSTI The Bridge Instance. This is also a link to the STP Detailed Bridge Status. Bridge ID The Bridge ID of this Bridge instance. Root ID The Bridge ID of the currently elected root bridge.
PAGE 50
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS STP Port Status This page displays the STP CIST port status for port physical ports in the currently selected switch. Label Description Port The switch port number of the logical STP port. CIST Role The current STP port role of the CIST port. The port role can be one of the following values: AlternatePort BackupPort RootPort DesignatedPort. State The current STP port state of the CIST port.
PAGE 51
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS STP Statistics This page displays the RSTP port statistics counters for bridge ports in the currently selected switch. Label Description Port The switch port number of the logical RSTP port. RSTP The number of RSTP Configuration BPDU’s received/transmitted on the port. STP The number of legacy STP Configuration BPDU’s received/transmitted on the port.
PAGE 52
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Fast Recovery mode The Fast Recovery Mode can be set to connect multiple ports to one or more switches. The CNGE12FX4TX8MS[POE]/TS with its fast recovery mode will provide redundant links. Fast Recovery mode supports 12 priorities, only the first priority will be the active port, the other ports configured with other priorities will be the backup ports. Fast Recovery Mode interface Label Description Active Activate the fast recovery mode.
PAGE 53
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS VLAN VLAN Membership Configuration The VLAN membership configuration for the selected stack switch unit switch can be monitored and modified here. Up to 256 VLANs are supported. This page allows for adding and deleting VLANs as well as adding and deleting port members of each VLAN. Label Description Delete Check to delete the entry. It will be deleted during the next save. VLAN ID The VLAN ID for the entry.
PAGE 54
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS VLAN Port Configuration Label Description Ethertype for This field specifies the ether type used for Custom S-ports. This is a global setting for customer S-Ports all the Custom S-ports. Port This is the logical port number of this row.
PAGE 55
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Port VLAN ID Configures the VLAN identifier for the port. The allowed values are from 1 through 4095. The default value is 1. Note: The port must be a member of the same VLAN as the Port VLAN ID. Tx Tag Determines egress tagging of a port. Untag_pvid – All VLANs except the configured PVID will be tagged. Tag_all – All VLANs are tagged. Untag_all – All VLANs are untagged. TECH SUPPORT: 1.888.678.
PAGE 56
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS How to use Unaware / C-Port / S-Port / S-Custom-Port Port can be one of the following types: Unaware, C-port, S-port, and S-custom-port. Ingress action Egress action Unaware The function of Unaware can be used for 802.1QinQ (double tag). When the port received untagged frames, an untagged frame obtain a tag (based on PVID) and is forwarded. When the port received tagged frames, 1.
PAGE 57
INSTALLATION AND OPERATION MANUAL Packet No VLAN Packet No VLAN Packet VID: 5 TPID: 8100 QinQ Packet VID: 5 TPID: 8100 CNGE12FX4TX8MS[POE]/TS Unaware Packet VID: 5 TPID: 88A8 Packet Discarded Packet No VLAN Packet No VLAN Packet VID: 5 TPID: 8100 Packet VID: 5 TPID: 88A8 TECH SUPPORT: 1.888.678.9427 CNGE12FX4TX8MS[POE]/TS CNGE12FX4TX8MS[POE]/TS S-custom-port S-custom-port is used for user defined TPID.
PAGE 58
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS VLAN Setting Example VLAN Access Mode Setting VLAN 10 VLAN 10 P8 P2 P7 VLAN Trunk 10,20 P1 P2 VLAN 20 CNGE12FX4TX8MS[POE]/TS Switch A VLAN Trunk 10,20 P1 P8 P7 VLAN 20 CNGE12FX4TX8MS[POE]/TS Switch B CNGE12FX4TX8MS[POE]/TS Switch C In the topology above, for Switch A, Port 7 is VLAN Access mode = Untagged 20 Port 8 is VLAN Access mode = Untagged 10 Configure the VLAN for Switch A as shown TECH SUPPORT: 1.888.678.
PAGE 59
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS VLAN 1Q Trunk mode VLAN 10 VLAN 10 P8 P2 P7 P1 VLAN Trunk 10,20 P2 VLAN 20 CNGE12FX4TX8MS[POE]/TS Switch A VLAN Trunk 10,20 P1 P8 P7 VLAN 20 CNGE12FX4TX8MS[POE]/TS Switch B CNGE12FX4TX8MS[POE]/TS Switch C In the topology above, for Switch B, Port 1 = VLAN 1Qtrunk mode = tagged 10,20 Port 2 = VLAN 1Qtrunk mode = tagged 10,20 Configure the VLAN for Switch B as shown TECH SUPPORT: 1.888.678.
PAGE 60
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS VLAN Hybrid mode To set Port 1 VLAN Hybrid mode = untagged 10 Tagged 10,20 Configure the VLAN for the Switch as shown VLAN QinQ mode Below is an example of the VLAN QinQ Mode, which is typically used in an environment with unknown VLAN. VLAN “X” = Unknown VLAN CNGE12FX4TX8MS[POE]/TS Switch A CNGE12FX4TX8MS[POE]/TS Switch A CNGE12FX4TX8MS[POE]/TS Switch A Setting VLAN QinQ 200 VLAN “X” P1 Tagged 200 tagged X packet TECH SUPPORT: 1.888.678.
PAGE 61
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS VLAN Management VLAN ID Setting If Management VLAN is set, only the same VLAN ID port can control the switch. TECH SUPPORT: 1.888.678.
PAGE 62
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Private VLAN The Private VLAN membership configurations for the switch can be monitored and modified here. Private VLANs can be added or deleted here. Port members of each Private VLAN can be added or removed here. Private VLANs are based on the source port mask, and there are no connections to VLANs. This means that VLAN IDs and Private VLAN IDs can be identical.
PAGE 63
INSTALLATION AND OPERATION MANUAL Label Description Port Number A check box is provided for each port of a private VLAN. When checked, port isolation is enabled for that port. When unchecked, port isolation is disabled for that port. By default, port isolation is disabled for all ports. TECH SUPPORT: 1.888.678.
PAGE 64
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Voice VLAN - Configuration The Voice VLAN feature enables voice traffic forwarding on the Voice VLAN, then the switch can classify and schedule network traffic. It is recommended that there be two VLANs on a port one for voice, one for data. Before connecting the IP device to the switch, the IP phone should configure the voice VLAN ID correctly. It should be configured through its own GUI. TECH SUPPORT: 1.888.678.
PAGE 65
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Mode Indicates the Voice VLAN mode operation. We must disable MSTP feature before we enable Voice VLAN. It can avoid the conflict of ingress filtering. Possible modes are: Enabled: Enable Voice VLAN mode operation. Disabled: Disable Voice VLAN mode operation. VLAN ID Indicates the Voice VLAN ID. It should be a unique VLAN ID in the system and cannot equal each port PVID.
PAGE 66
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Voice VLAN - OUI Configure VOICE VLAN OUI table on this page. The maximum number of entries is 16. Modifying the OUI table will restart auto detection of the OUI process. Label Description Delete Check to delete the entry. It will be deleted during the next save. Telephony OUI A telephony OUI address is a globally unique identifier assigned to a vendor by IEEE.
PAGE 67
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS SNMP SNMP-System Label Description Mode Indicates the SNMP mode operation. Possible modes are: Enabled: Enable SNMP mode operation. Disabled: Disable SNMP mode operation. Version Indicates the SNMP supported version. Possible versions are: SNMP v1: Set SNMP supported version 1. SNMP v2c: Set SNMP supported version 2c. SNMP v3: Set SNMP supported version 3.
PAGE 68
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Trap Mode Indicates the SNMP trap mode operation. Possible modes are: Enabled: Enable SNMP trap mode operation. Disabled: Disable SNMP trap mode operation. Trap Version Indicates the SNMP trap supported version. Possible versions are: SNMP v1: Set SNMP trap supported version 1. SNMP v2c: Set SNMP trap supported version 2c. SNMP v3: Set SNMP trap supported version 3.
PAGE 69
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Trap Security Engine ID Indicates the SNMP trap security engine ID. SNMPv3 sends traps and informs using USM for authentication and privacy. A unique engine ID for these traps and informs is needed. When “Trap Probe Security Engine ID” is enabled, the ID will be probed automatically. Otherwise, the ID specified in this field is used.
PAGE 70
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS SNMP-Users Configure SNMPv3 users table on this page. The entry index keys are Engine ID and User Name. Label Description Delete Check to delete the entry. It will be deleted during the next save. Engine ID An octet string identifying the engine ID that this entry should belong to. The string must contain an even number between 10 and 64 hexadecimal digits, but all-zeros and all-’F’s are not allowed.
PAGE 71
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS SNMP-Groups Configure SNMPv3 groups table on this page. The entry index keys are Security Model and Security Name. Label Description Delete Check to delete the entry. It will be deleted during the next save. Security Model Indicates the security model that this entry should belong to. Possible security models are: v1: Reserved for SNMPv1. v2c: Reserved for SNMPv2c. usm: User-based Security Model (USM).
PAGE 72
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS SNMP-Accesses Configure SNMPv3 accesses table on this page. The entry index keys are Group Name, Security Model and Security Level. Label Description Delete Check to delete the entry. It will be deleted during the next save. Group Name A string identifying the group name that this entry should belong to. The allowed string length is 1 to 32, and the allowed content is the ASCII characters from 33 to 126.
PAGE 73
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Traffic Prioritization Storm Control There is a unicast storm rate control, multicast storm rate control, and a broadcast storm rate control. These only affect flooded frames, i.e. frames with a (VLAN ID, DMAC) pair not present on the MAC Address table. The rate is 2^n, where n is equal to or less than 15, or “No Limit”. The unit of the rate can be either pps (packets per second) or kpps (kilopackets per second).
PAGE 74
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Port Classification QoS is an acronym for Quality of Service. It is a method to guarantee a bandwidth relationship between individual applications or protocols. Label Description Port The port number for which the configuration below applies QoS Class Controls the default QoS class. All frames are classified to a QoS class. There is a one to one mapping between QoS class, queue and priority. A QoS class of 0 (zero) has the lowest priority.
PAGE 75
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description DEI Controls the default DEI value. All frames are classified to a DEI value. If the port is VLAN aware and the frame is tagged, then the frame is classified to the DEI value in the tag. Otherwise the frame is classified to the default DEI value. Tag Class Shows the classification mode for tagged frames on this port. Disabled: Use default QoS class and DP level for tagged frames.
PAGE 76
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Port DSCP This page allows you to configure the basic QoS Port DSCP Configuration settings for all switch ports. Label Description Port The Port column shows the list of ports for which you can configure dscp ingress and egress settings. Ingress In Ingress settings you can change ingress translation and classification settings for individual ports. There are two configuration parameters available in Ingress: 1. Translate 2. Classify 1.
PAGE 77
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Port Policing This page allows you to configure the Policer settings for all switch ports. Label Description Port The port number for which the configuration below applies Enable Controls whether the policer is enabled on this switch port. Rate Controls the rate for the policer. The default value is 500.
PAGE 78
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Queue Policing This page allows you to configure the Queue Policer settings for all switch ports. Label Description Port The port number for which the configuration below applies. Enable(E) Controls whether the queue policer is enabled on this switch port. Rate Controls the rate for the queue policer. The default value is 500.
PAGE 79
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Port Shaping This page provides an overview of QoS Egress Port Shapers for all switch ports. Label Description Port The logical port for the settings contained in the same row. Click on the port number in order to configure the shapers. Mode Shows “disabled” or actual queue shaper rate – e.g. “800 Mbps”. Qn Shows “disabled” or actual port shaper rate – e.g. “800 Mbps”.
PAGE 80
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS DSCP Translation This page allows you to configure the basic QoS DSCP Translation settings for all switches. DSCP translation can be done in Ingress or Egress. Label Description DSCP Maximum number of supported DSCP values are 64 and valid DSCP value ranges from 0 to 63. Ingress Ingress side DSCP can be first translated to new DSCP before using the DSCP for QoS class and DPL map. There are two configuration parameters for DSCP Translation – 1.
PAGE 81
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS DSCP Classification This page allows you to configure the mapping of QoS class and Drop Precedence Level to DSCP value. Label Description QoS Class Actual QoS class DPL Actual Drop Precedence Level. DSCP Select the classified DSCP value (0-63). TECH SUPPORT: 1.888.678.
PAGE 82
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS QoS Control List This page allows to edit|insert a single QoS Control Entry at a time. A QCE consists of several parameters. These parameters vary according to the frame type that you select. Label Description Port Members Check the checkbox button to include the port in the QCL entry. By default all ports are included. Key Parameters Key configuration is described as below: Tag Value of Tag field can be ‘Any’, ‘Untag’ or ‘Tag’.
PAGE 83
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description 3. LLC SSAP Address Valid SSAP(Source Service Access Point) can vary from 0x00 to 0xFF or ‘Any’, the default value is ‘Any’. DSAP Address Valid DSAP(Destination Service Access Point) can vary from 0x00 to 0xFF or ‘Any’, the default value is ‘Any’. Control Valid Control field can vary from 0x00 to 0xFF or ‘Any’, the default value is ‘Any’. 4. SNAP PID Valid PID(a.k.
PAGE 84
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS QoS Counters This page provides statistics for the different queues for all switch ports. Label Description Port The logical port for the settings contained in the same row. Qn There are 8 QoS queues per port. Q0 is the lowest priority queue. Rx / Tx The number of received and transmitted packets per queue. TECH SUPPORT: 1.888.678.
PAGE 85
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS QCL Status This page shows the QCL status by different QCL users. Each row describes the QCE that is defined. It is a conflict if a specific QCE is not applied to the hardware due to hardware limitations. The maximum number of QCEs is 256 on each switch. Label Description User Indicates the QCL user. QCE# Indicates the index of QCE. Frame Type Indicates the type of frame to look for incoming frames.
PAGE 86
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Multicast IGMP Snooping This page provides IGMP Snooping related configuration. Label Description Snooping Enabled Enable the Global IGMP Snooping. Unregistered Enable unregistered IPMC traffic flooding. IPMCv4Flooding enabled Router Port Specify which ports act as router ports. A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or IGMP querier.
PAGE 87
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS IGMP Snooping – VLAN Configuration Each page shows up to 99 entries from the VLAN table, default being 20, selected through the “entries per page” input field. When first visited, the web page will show the first 20 entries from the beginning of the VLAN Table. The first displayed will be the one with the lowest VLAN ID found in the VLAN Table. The “VLAN” input fields allow the user to select the starting point in the VLAN Table.
PAGE 88
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS IGMP Snooping Status This page provides IGMP Snooping status. Label Description VLAN ID The VLAN ID of the entry. Querier Version Working Querier Version currently. Host Version Working Host Version currently. Querier Status Show the Querier status is “ACTIVE” or “IDLE”. Querier Receive The number of Transmitted Querier. V1 Reports Receive The number of Received V1 Reports. V2 Reports Receive The number of Received V2 Reports.
PAGE 89
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS IGMP Snooping Groups Information Entries in the IGMP Group Table are shown on this page. The IGMP Group Table is sorted first by VLAN ID, and then by group. Label Description VLAN ID VLAN ID of the group. Groups Group address of the group displayed. Port Members Ports under this group.. TECH SUPPORT: 1.888.678.
PAGE 90
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Security Remote Control Remote Control Security allows you limit the remote access of management interface. When enabled, the request of client which is not in the allow list will be rejected. Label Description Port Port number of remote client. IP Address IP address of remote client. Keeps this field “0.0.0.0” means “Any IP”. Web Check this item to enable Web management interface.
PAGE 91
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Device Binding This page provides Device Binding related configuration. Device Binding is a powerful monitor for devices and network security. Label Description Mode Indicates the per-port Device Binding operation. Possible modes are: ---: Disable. Scan: Scan IP/MAC automatically, but no binding function. Binding: Enable binding function. Under this mode, any IP/MAC doesn’t match the entry will not be allowed to access the network.
PAGE 92
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Advanced Configuration Alias IP Address This page provides Alias IP Address related configuration. Some devices might have more than one IP address, you could specify the other IP address here. Label Description Alias IP Address Specify Alias IP address. Keep “0.0.0.0” if the device doesn’t have alias IP address. Alive Check Using a constant ping command the switch will check for a possible port link failure.
PAGE 93
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS DDoS Prevention This page provides DDOS Prevention related configuration. The switch monitors the ingress packets and will take the selected action when a DDOS attack happens on the particular port. Label Description Mode Enable/Disable DDOS Prevention of the port. Sensibility Indicates the level of DDOS detection. Possible levels are: Low: Low sensibility. Normal: Normal sensibility. Medium: Medium sensibility. High: High sensibility.
PAGE 94
INSTALLATION AND OPERATION MANUAL Label Description Status Indicates the DDOS Prevention status. Possible statuses are: ---: Disable. Analysing: Analyse the packet throughput for initialization. Running: Function ready. Attacked: DDOS attack happened. CNGE12FX4TX8MS[POE]/TS Device Description This page provides Device Description related configuration. Label Description Device Type Indicates the type of device. Possible types are: ---: No specification. IP Camera: IP Camera. IP Phone: IP Phone.
PAGE 95
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Stream Check This page provides Stream Check related configuration. Label Description Mode Enable/Disable stream monitor of the port. Action Indicates the action when stream getting low. Possible actions are: ---: Do nothing. Log it: Just log the event TECH SUPPORT: 1.888.678.
PAGE 96
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Security ACL Ports Configure the ACL parameters (ACE) of each switch port. These parameters will affect frames received on a port unless the frame matches a specific ACE. Label Description Port The logical port for the settings contained in the same row. Policy ID Select the policy to apply to this port. The allowed values are 1 through 8. The default value is 1. Action Select whether forwarding is permitted (“Permit”) or denied (“Deny”).
PAGE 97
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Rate Limiters Configure the rate limiter for the ACL of the switch. Label Description Rate Limiter ID The rate limiter ID for the settings contained in the same row. Rate The rate unit is packet per second (pps), configure the rate as 1, 2, 4, 8, 16, 32, 64, 128, 256, 512, 1K, 2K, 4K, 8K, 16K, 32K, 64K, 128K, 256K, 512K, or 1024K. The 1 kpps is actually 1002.1 pps. ACL Control List Configure an ACE (Access Control Entry) on this page.
PAGE 98
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Ingress Port Select the ingress port for which this ACE applies. Any: The ACE applies to any port. Port n: The ACE applies to this port number, where n is the number of the switch port. Policy n: The ACE applies to this policy number, where n can range from 1 through 8. Frame Type Select the frame type for this ACE. These frame types are mutually exclusive. Any: Any frame can match this ACE.
PAGE 99
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description VLAN ID Filter Specify the VLAN ID filter for this ACE. Any: No VLAN ID filter is specified. (VLAN ID filter status is “don’t-care”.) Specific: If you want to filter a specific VLAN ID with this ACE, choose this value. A field for entering a VLAN ID number appears. VLAN ID When “Specific” is selected for the VLAN ID filter, you can enter a specific VLAN ID number. The allowed range is 1 to 4095.
PAGE 100
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS RADIUS Authentication Server Configuration The table has one row for each RADIUS Authentication Server and a number of columns, which are: Label Description # The RADIUS Authentication Server number for which the configuration below applies. Enabled Enable the RADIUS Authentication Server by checking this box. IP Address The IP address or hostname of the RADIUS Authentication Server. IP address is expressed in dotted decimal notation.
PAGE 101
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS RADIUS Overview This page provides an overview of the status of the RADIUS servers configurable on the Authentication configuration page. RADIUS Authentication Servers Label Description # The RADIUS server number. Click to navigate to detailed statistics for this server. IP Address The IP address and UDP port number (in : notation) of this server. Status The current status of the server.
PAGE 102
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS RADIUS Details The statistics map closely to those specified in RFC4668 – RADIUS Authentication Client MIB. Use the server select box to switch between the backend servers to show details for. The statistics map closely to those specified in RFC4668 – RADIUS Authentication Client MIB. Use the server select box to switch between the backend servers to show details for. Label Description Packet Counters RADIUS authentication server packet counter.
PAGE 103
INSTALLATION AND OPERATION MANUAL Label CNGE12FX4TX8MS[POE]/TS Description Packet Counters RADIUS accounting server packet counter. There are five receive and four transmit counters. Other Info This section contains information about the state of the server and the latest NAS(802.1x) This page allows you to configure the IEEE 802.1X and MAC-based authentication system and port settings. The IEEE 802.
PAGE 104
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Overview of 802.1X (Port-Based) Authentication In the 802.1X-world, the user is called the supplicant, the switch is the authenticator, and the RADIUS server is the authentication server. The switch acts as the man-in-the-middle, forwarding requests and responses between the supplicant and the authentication server. Frames sent between the supplicant and the switch are special 802.1X frames, known as EAPOL (EAP Over LANs) frames.
PAGE 105
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS authentication, and that the clients don’t need special supplicant software to authenticate. The disadvantage is that MAC addresses can be spoofed by malicious users, equipment whose MAC address is a valid RADIUS user can be used by anyone, and only the MD5-Challenge method is supported. The 802.1X and MAC-Based Authentication configuration consists of two sections, a system – and a port-wide Label Description Mode Indicates if 802.
PAGE 106
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Age Period This setting applies to the following modes, i.e. modes using the Port Security functionality to secure MAC addresses: • MAC-Based Auth. When the NAS module uses the Port Security module to secure MAC addresses, the Port Security module needs to check for activity on the MAC address in question at regular intervals and free resources if no activity is seen within a given period of time.
PAGE 107
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Admin State If NAS is globally enabled, this selection controls the port’s authentication mode. The following modes are available: Force Authorized In this mode, the switch will send one EAPOL Success frame when the port link comes up, and any client on the port will be allowed network access without authentication.
PAGE 108
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Port State The current state of the port. It can undertake one of the following values: Globally Disabled: NAS is globally disabled. Link Down: NAS is globally enabled, but there is no link on the port. Authorized: The port is in Force Authorized or a single-supplicant mode and the supplicant is authorized.
PAGE 109
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Switch This page provides an overview of the current NAS port states. Label Description Port The switch port number. Click to navigate to detailed 802.1X statistics for this port. Admin State The port’s current administrative state. Refer to NAS Admin State for a description of possible values. Port State The current state of the port. Refer to NAS Port State for a description of the individual states.
PAGE 110
INSTALLATION AND OPERATION MANUAL Label CNGE12FX4TX8MS[POE]/TS Description EAPOL Counters These supplicant frame counters are available for the following administrative states: • Force Authorized • Force Unauthorized • 802.1X Backend Server Counters These backend (RADIUS) frame counters are available for the following administrative states: • 802.1X • MAC-based Auth. TECH SUPPORT: 1.888.678.
PAGE 111
INSTALLATION AND OPERATION MANUAL Label CNGE12FX4TX8MS[POE]/TS Description Last Supplicant/ Information about the last supplicant/client that attempted to authenticate. This Client Info information is available for the following administrative states: • 802.1X • MAC-based Auth. TECH SUPPORT: 1.888.678.
PAGE 112
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS System Warning SYSLOG Setting The SYSLOG is a protocol to transmit event notification messages across networks. Please refer to RFC 3164 – The BSD SYSLOG Protocol System Warning – SYSLOG Setting interface The following table describes the labels in this screen. Label Description Server Mode Indicates the server mode operation. When the mode operation is enabled, the syslog message will send out to syslog server.
PAGE 113
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS SMTP Setting The SMTP is Short for Simple Mail Transfer Protocol. It is a protocol for e-mail transmission across the Internet. Please refer to RFC 821 - Simple Mail Transfer Protocol. System Warning – SMTP Setting interface Label Description E-mail Alarm Enable/Disable transmission system warning events by e-mail.
PAGE 114
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Event Selection SYSLOG and SMTP are the two warning methods that supported by the system. Check the corresponding box to enable system event warning method you wish to choose. Please note that the checkbox cannot be checked when SYSLOG or SMTP is disabled. System Warning – Event Selection interface The following table describes the labels in this screen.
PAGE 115
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Monitor and Diag MAC Table Configuration The MAC Address Table is configured on this page. Set timeouts for entries in the dynamic MAC Table and configure the static MAC table here. Aging Configuration By default, dynamic entries are removed from the MAC after 300 seconds. This removal is also called aging. Configure aging time by entering a value here in seconds; for example, Age time ______ seconds. The allowed range is 10 to 1000000 seconds.
PAGE 116
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS MAC Table Learning If the learning mode for a given port is grayed out, another module is in control of the mode, so that it cannot be changed by the user. An example of such a module is the MAC-Based Authentication under 802.1X. Each port can do learning based upon the following settings: Label Description Auto Learning is done automatically as soon as a frame with unknown SMAC is received. Disable No learning is done.
PAGE 117
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS MAC Table Each page shows up to 999 entries from the MAC table, default being 20, selected through the “entries per page” input field. When first visited, the web page will show the first 20 entries from the beginning of the MAC Table. The first displayed will be the one with the lowest VLAN ID and the lowest MAC address found in the MAC Table.
PAGE 118
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Port Statistic Traffic Overview This page provides an overview of general traffic statistics for all switch ports. Label Description Port The logical port for the settings contained in the same row. Packets The number of received and transmitted packets per port. Bytes The number of received and transmitted bytes per port. Errors The number of frames received in error and the number of incomplete transmissions per port.
PAGE 119
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Detailed Statistics This page provides detailed traffic statistics for a specific switch port. Use the port select box to select which switch port details to display. The displayed counters are the totals for receive and transmit, the size counters for receive and transmit, and the error counters for receive and transmit.
PAGE 120
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Rx Fragments The number of short 1 frames received with invalid CRC. Rx Jabber The number of long 2 frames received with invalid CRC. Rx Filtered The number of received frames filtered by the forwarding process. Tx Drops The number of frames dropped due to output buffer congestion. Tx Late / Exc. Coll. The number of frames dropped due to excessive or late collisions.
PAGE 121
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Port Monitoring Configure port Mirroring on this page. To debug network problems, selected traffic can be copied, or mirrored, to a mirror port where a frame analyzer can be attached to analyze the frame flow. The traffic to be copied to the mirror port is selected as follows: All frames received on a given port (also known as ingress or source mirroring). All frames transmitted on a given port (also known as egress or destination mirroring).
PAGE 122
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS System Log Information The switch system log information is provided here. Label Description ID The ID (>= 1) of the system log entry. Level The level of the system log entry. The following level types are supported: Info: Information level of the system log. Warning: Warning level of the system log. Error: Error level of the system log. All: All levels. Time The time of the system log entry. Message The MAC Address of this switch.
PAGE 123
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Cable Diagnostics This page is used for running the VeriPHY Cable Diagnostics. Press Start to run the diagnostics. This will take approximately 5 seconds. If all ports are selected, this can take approximately 15 seconds. When completed, the page refreshes automatically, and you can view the cable diagnostics results in the cable status table. Note that VeriPHY is only accurate for cables of length 7 – 140 meters.
PAGE 124
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS SFP Monitor DDM function, can pass SFP module which supports DDM function, measure the temperature of the apparatus and manage and set up event alarm module through DDM WEB TECH SUPPORT: 1.888.678.
PAGE 125
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Ping This page allows you to issue ICMP PING packets to troubleshoot IP connectivity issues. After you press Start, 5 ICMP packets are transmitted, and the sequence number and roundtrip time are displayed upon reception of a reply. The page refreshes automatically until responses to all packets are received, or until a timeout occurs. PING6 server ::10.10.132.20 64 bytes from ::10.10.132.20: icmp_seq=0, time=0ms 64 bytes from ::10.10.132.
PAGE 126
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Syncronization-PTP Overview of MAC-Based Authentication This page allows the user to configure and inspect the current PTP clock settings. PTP External Clock Mode Label Description One_pps_mode This Selection box will allow you to select the One_pps_mode configuration. The following values are possible: 1. Output : Enable the 1 pps clock output 2. Input : Enable the 1 pps clock input 3.
PAGE 127
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS PTP Clock Configuration Label Description Delete Check this box and click on ‘Save’ to delete the clock instance. Clock Instance Indicates the Instance of a particular Clock Instance [0..3]. Click on the Clock Instance number to edit the Clock details. Device Type Indicates the Type of the Clock Instance. There are five Device Types. 1. Ord-Bound – clock’s Device Type is Ordinary-Boundary Clock. 2.
PAGE 128
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS PoE Configuration (PoE Models Only) PoE is an acronym for Power Over Ethernet. Power Over Ethernet is used to transmit electrical power, to remote devices over standard Ethernet cable. It could for example be used for powering IP telephones, wireless LAN access points and other equipment, where it would be difficult or expensive to connect the equipment to main power supply.
PAGE 129
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Label Description Power Management Mode There are 2 modes for configuring when to shut down the ports: 1. Actual Consumption: In this mode the ports are shut down when the actual power consumption for all ports exceeds the amount of power that the power supply can deliver or if the actual power consumption for a given port exceeds the reserved power for that port. The ports are shut down according to the ports priority.
PAGE 130
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Status This page allows the user to inspect the current status for all PoE ports. Label Description Local Port This is the logical port number for this row. PD Class Each PD is classified according to a class that defines the maximum power the PD will use. The PD Class shows the PDs class. Five Classes are defined: Class 0: Max. power 15.4 W Class 1: Max. power 4.0 W Class 2: Max. power 7.0 W Class 3: Max. power 15.4 W Class 4: Max. power 30.
PAGE 131
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Factory Defaults You can reset the configuration of the stack switch on this page. Only the IP configuration is retained. Label Description Yes Click to reset the configuration to Factory Defaults. No Click to return to the Port State page without resetting the configuration System Reboot You can reset the stack switch on this page. After reset, the system will boot normally as if you had powered up the devices.
PAGE 132
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Command Line Interface Management About CLI Management In addition to WEB-base management, the switch also supports CLI management. You can use console or telnet to management the switch by CLI. CLI Management by RS-232 Serial Console (115200, 8, none, 1, none) Before Configuring by RS-232 serial console, use an DB-9-M to RJ-45 cable to connect the switches’ RS-232 Console port to your PC COM port.
PAGE 133
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Step 2. Input a name for new connection Step 3. Select to use COM port number TECH SUPPORT: 1.888.678.
PAGE 134
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Step 4. The COM port properties setting, 115200 for baud rate, 8 for Data bits, None for Parity, 1 for Stop bits and none for Flow control. Step 5. The Console login screen will appear. Use the keyboard to enter the Username and Password (these are the same as the credentials for Web Browser), and then press Enter. TECH SUPPORT: 1.888.678.
PAGE 135
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS CLI Management by Telnet Users can use “TELNET” to configure the switches. The default value is as below: IP Address: 192.168.10.1 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.10.254 User Name: admin Password: admin Follow the steps below to access the console via Telnet. Step 1. Telnet to the IP address of the switch from the Windows Run command (or from the MS-DOS prompt) as below. Step 2. The Login screen will appear.
PAGE 136
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Commander Groups System Configuration [all] [] Reboot Restore Default [keep_ip] Contact [] Name [] System> Location [] Description [] Password Username [] Timezone [] Log [] [all|info|warning|error] [clear] TECH SUPPORT: 1.888.678.
PAGE 137
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS IP Configuration DHCP [enable|disable] IP> Setup [] [] [] [] Ping [] SNTP [] Port Configuration [] [up|down] State [] [enable|disable] Mode [] [auto|10hdx|10fdx|100hdx|100fdx|1000fdx|sfp_auto_ams] Flow Control [] [enable|disable] Port> MaxFrame [] [] Power [] [enable|disable|actiphy|dynamic]
PAGE 138
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS VLAN Configuration [] PVID [] [|none] FrameType [] [all|tagged|untagged] IngressFilter [] [enable|disable] tx_tag [] [untag_pvid|untag_all|tag_all] PortType [] [unaware|c-port|s-port|s-custom-port] EtypeCustomSport [] Add | [] VLAN> Forbidden Add | [] Delete | Forbidden Delete | Forbidden Lookup [] [(
PAGE 139
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Security Switch Password Auth Authentication Security/switch> SSH Secure Shell HTTPS Hypertext Transfer Protocol over Secure Socket Layer RMON Remote Network Monitoring Security Switch Authentication Security/switch/auth> Configuration Method [console|telnet|ssh|web] [none|local|radius] [enable|disable] Security Switch SSH Security/switch/ssh> Configuration Mode [enable|disable] Security Switch HTTPS Security/switch/ssh> Configurat
PAGE 140
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Security Network Psec Port Security Status Security/Network> NAS Network Access Server (IEEE 802.
PAGE 141
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Security Network ACL Configuration [] Action [] [permit|deny] [][] [] [] [] Policy [] [] Rate [] [] [] Security/Network/ACL> Add [] [][(port )] [(policy )][] [] [] [][(etype [] [] []) | (arp [] []
PAGE 142
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS STP Configuration Version [] Non-certified release, v Txhold []lt 15:15:15, Dec 6 2007 MaxAge [] FwdDelay [] bpduFilter [enable|disable] bpduGuard [enable|disable] recovery [] CName [] [] Status [] [] Msti Priority [] [] Msti Map [] [clear] STP> Msti Add Port Configuration [] Port Mode [] [enable|disable]
PAGE 143
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS LACP Configuration [] Mode [] [enable|disable] Key [] [] LACP> Role [] [active|passive] Status [] Statistics [] [clear] LLDP Configuration [] LLDP> Mode [] [enable|disable] Statistics [] [clear] Info [] PoE Configuration [] Mode [] [disabled|poe|poe+] Priority [] [low|high|critical] Mgmt_mode [class
PAGE 144
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS QoS DSCP Map [] [] [] DSCP Translation [] [] DSCP Trust [] [enable|disable] DSCP Classification Mode [] [enable|disable] DSCP Classification Map [] [] [] DSCP EgressRemap [] [] [] Storm Unicast [enable|disable] [] Storm Multicast [enable|disable] [] QoS> Storm Broadcast [enable|disable] []
PAGE 145
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS IGMP Configuration [] Mode [enable|disable] State [] [enable|disable] Querier [] [enable|disable] IGMP> Fastleave [] [enable|disable] Router [] [enable|disable] Flooding [enable|disable] Groups [] Status [] ACL Configuration [] Action [] [permit|deny] [] [][] [] Policy [] [] Rate [] [
PAGE 146
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Firmware Firmware> Load SNMP Trap Inform Retry Times [] Trap Probe Security Engine ID [enable|disable] Trap Security Engine ID [] Trap Security Name [] Engine ID [] Community Add [] [] Community Delete Community Lookup [] User Add [MD5|SHA] [] [DES] [] User Delete SNMP>
PAGE 147
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS PTP Configuration [] PortState [] [enable|disable|internal] ClockCreate [] [] [] [] [] [] [] [] ClockDelete [] DefaultDS [] [] [] CurrentDS ParentDS Timingproperties [] [] [] [] [] [] [<
PAGE 148
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS IPMC Configuration [igmp] Mode [igmp] [enable|disable] Flooding [igmp] [enable|disable] VLAN Add [igmp] VLAN Delete [igmp] IPMC> State [igmp] [] [enable|disable] Querier [igmp] [] [enable|disable] Fastleave [igmp] [] [enable|disable] Router [igmp] [] [enable|disable] Status [igmp] [] Groups [igmp] [] Version [igmp] [] Fault Fault> Alarm PortLinkDown [] [enable|disable] Alarm Po
PAGE 149
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Ring Mode [enable|disable] Master [enable|disable] 1stRingPort [] Ring> 2ndRingPort [] Couple Mode [enable|disable] Couple Port [] Dualhoming Mode [enable|disable] Dualhoming Port [] SFP syslog [enable|disable] SFP> temp [] Info TECH SUPPORT: 1.888.678.
PAGE 150
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS Technical Specifications ComNet Switch Model CNGE12FX4TX8MS/TS CNGE12FX4TX8MSPOE/TS RJ-45 ports 8 10/100/1000Base-T(X) Auto MDI/ MDIX 8 10/100/1000Base-T(X) Auto MDI/ MDIX with PSE Ports SFP ports 4 100/1000Base-X Physical Ports Technology Ethernet Standards IEEE 802.3 for 10Base-T IEEE 802.3u for 100Base-TX and 100Base-FX IEEE 802.3ab for 1000Base-T IEEE 802.z for 1000Base-X IEEE 802.3x for Flow control IEEE 802.
PAGE 151
INSTALLATION AND OPERATION MANUAL ComNet Switch Model CNGE12FX4TX8MS/TS CNGE12FX4TX8MS[POE]/TS CNGE12FX4TX8MSPOE/TS Security Features Device Binding security feature Enable/disable ports, MAC based port security Port based network access control (802.1x) Single 802.1x and Multiple 802.1x MAC-based authentication QoS assignment Guest VLAN MAC address limit TACACS+ VLAN (802.
PAGE 152
INSTALLATION AND OPERATION MANUAL ComNet Switch Model CNGE12FX4TX8MS/TS CNGE12FX4TX8MS[POE]/TS CNGE12FX4TX8MSPOE/TS LED indicators Power (PWR) Green: Power indicator Ring Master (R.M.) Green: Indicates that the system is operating in C-Ring Master mode C-Ring (Ring) Green: Indicates that the system operating in C-Ring mode Green Blinking: Indicates that the Ring is broken. RJ-45 Port Green for Link/Act indicator SFP Port Green for port Link/Act.
PAGE 153
INSTALLATION AND OPERATION MANUAL CNGE12FX4TX8MS[POE]/TS ComNet Customer Service Customer Care is ComNet Technology’s global service center, where our professional staff is ready to answer your questions at any time. Email ComNet Global Service Center: customercare@comnet.net 3 CORPORATE DRIVE | DANBURY, CT 06810 | USA T: 203.796.5300 | F: 203.796.5303 | TECH SUPPORT: 1.888.678.9427 | INFO@COMNET.