IFS NS3601-24P/4S GE-DSSG-244 GE-DSSG-244-POE User Manual P/N 1072570 • REV 00.
Copyright Trademarks and patents Intended use Manufacturer Certification FCC compliance ACMA compliance Canada European Union directives Contact information Contact support © 2013 UTC Fire & Security Americas Corporation, Inc. Interlogix is part of UTC Climate Controls & Security, a unit of United Technologies Corporation. All rights reserved. The IFS NS3601-24P/4S GE-DSSG-244 GE-DSSG-244-POE and logo are trademarks of United Technologies.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual TABLE OF CONTENTS IFS NS3601-24P/4S GE-DSSG-244 GE-DSSG-244-POE 5 USER MANUAL ................. 1 TABLE OF CONTENTS ................................................................................................... 1 5 INTRODUCTION .............................................................................................................. 7 5 Packet Contents .........................................................................................
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Users Privilege Levels ........................................................................................................................ 49 5 NTP Configuration .............................................................................................................................. 51 5 UPnP Configuration ............................................................................................................................
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN Membership Configuration ....................................................................................................... 99 6 VLAN Membership Status for User Static......................................................................................... 100 6 VLAN Port Status for User Static...................................................................................................... 101 6 Port Isolation Configuration ............
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ACE Configuration ............................................................................................................................ 164 7 ACL Ports Configuration ................................................................................................................... 169 7 ACL Rate Limiter Configuration ........................................................................................................
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Neighbor ........................................................................................................................................... 236 8 Port Statistics .................................................................................................................................... 237 8 Network Diagnostics.............................................................................................................................
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Quality of Service Command ............................................................................................................... 363 8 Mirror Command.................................................................................................................................... 369 8 Configuration Command ......................................................................................................................
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual INTRODUCTION The IFS Layer 2 Managed Gigabit Switch series NS3601-24P/4S, GE-DSSG-244, and GE-DSSG-244-POE are 24-port Gigabit Ethernet Switches with SFP fiber ports and robust layer 2 features. The description of these models is shown below: GE-DSSG-244 24-Port 100/1000Base-X with 8 Shared TP Managed Stackable Fiber Switch NS3601-24P/4S 24-Port 10/100/1000Base-T PoE Managed Stackable Switch / 380W / IEEE 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Product Description Cost-effective IPv6 Managed Gigabit Switch solution for SMB Nowadays, lots of electronic products or mobile devices can browse the Internet, which means the need of IP Address increases. However, the current IPv4 network infrastructure is not capable enough to provide IP Address to each single users/Clients. The situation forces the ISP to build up the IPv6 (Internet Protocol version 6) network infrastructure speedily.
Efficient Management For efficient management, the series of Managed Switch is equipped with console, WEB and SNMP management interfaces. With its built-in Web-based management, it offers an easy-to-use, platform-independent management and configuration facility. The Managed Switch supports standard Simple Network Management Protocol (SNMP) and can be managed via any standard-based management software. For text-based management, it can also be accessed via Telnet and the console port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual How to Use This Manual This User Manual is structured as follows: Section 2, INSTALLATION The section explains the functions of the Switch and how to physically install the Managed Switch. Section 3, SWITCH MANAGEMENT The section contains the information about the software function of the Managed Switch. Section 4, WEB CONFIGURATION The section explains how to manage the Managed Switch by Web interface.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Product Features ¾ Physical Port NS3601-24P/4S / GE-DSSG-244-POE 24-Port 10/100/1000Base-T Gigabit Ethernet RJ-45 with IEEE 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ■ DSCP remarking ¾ Multicast ■ Supports IGMP Snooping v1, v2 and v3 ■ Querier mode support ■ IGMP Snooping port filtering ■ Multicast VLAN Registration (MVR) support ¾ Security ■ IEEE 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Product Specification IFS Stackable Fiber Switch Product GE-DSSG-244 Hardware Specification Copper Ports SFP/mini-GBIC Slots Console Port Stacking Ports Switch Fabric Address Table Share data Buffer 8 10/ 100/1000Base-T RJ-45 Auto-MDI/MDI-X ports, shared with Port-1~Port-8 24 100/1000Base-X Dual Speed SFP interfaces 1 x RS-232 DB9 serial port (115200, 8, N, 1) 2 5GbE / Cross-HDMI interface 68Gbps / non-blocking 8K entries, automatic source addres
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Access Control List SNMP MIBs Standards Conformance Regulation Compliance Standards Compliance IP-Based ACL / MAC-Based ACL Up to 256 entries RFC-1213 MIB-II IF-MIB RFC-1493 Bridge MIB RFC-1643 Ethernet MIB RFC-2863 Interface MIB RFC-2665 Ether-Like MIB RFC-2737 Entity MIB RFC-2618 RADIUS Client MIB RFC-2933 IGMP-STD-MIB RFC3411 SNMP-Frameworks-MIB IEEE 802.1X PAE LLDP MAU-MIB FCC Part 15 Class A, CE IEEE 802.3 10Base-T IEEE 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ESD Protection 6KV DC Power over Ethernet PoE Standard PoE Power Supply Type PoE Power Output Power Pin Assignment PoE Power Budget Number of PD @ 7Watts Number of PD @ PoE Ability 15.4Watts Number of PD @ 30.8Watts IEEE 802.3af PoE / PSE End-Span Per Port 48V DC. Max. 15.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Standards Compliance IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX/100Base-FX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000T IEEE 802.3x Flow Control and Back pressure IEEE 802.3ad Port trunk with LACP IEEE 802.1d Spanning tree protocol IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class of service IEEE 802.1Q VLAN Tagging IEEE 802.1x Port Authentication Network Control IEEE 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual INSTALLATION This section describes the hardware features and installation of the Managed Switch on the desktop or rack mount. For easier management and control of the Managed Switch, familiarize yourself with its display indicators, and ports. Front panel illustrations in this chapter display the unit LED indicators. Before connecting any network device to the Managed Switch, please read this chapter completely.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ■ Reset button On the left hand side of the front panel, the reset button is designed for rebooting the Managed Switch without a power cycle. The following is the summary table of Reset button functions: Reset Button Pressed and Released Function < 5 sec: System reboot Reboot the Managed Switch Reset the Managed Switch to Factory Default configuration.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual LED Indications The front panel LEDs indicates instant status of port links, data activity and system power; helps monitor and troubleshoot when needed. Figure 2-3 & Figure 2-4 shows the LED indications of these Managed Switches. NS3601-24P/4S /GE-DSSG-244-POE LED indication Figure 2-3 GE-DSSG-244-POE / NS3601-24P/4S LED panel System LED Color PWR Green Illuminates to indicate that the Switch has power.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Per 10/100/1000Base-T port / SFP interfaces LED Color 1000 LNK/ACT Green 10/100 LNK/ACT Green Function Illuminates: To indicate the link through that port is successfully established with speed 1000Mbps. Blink: To indicate that the Switch is actively sending or receiving data over that port. If 10/100 LNK/ACT LED is light, it indicates that the port is operating at 10Mbps or 100Mbps.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ■ 10/100/1000Base-T interfaces (Shared Port-1~Port-8) LED Color Function illuminates: To indicate the link through that port is successfully established with speed 1000Mbps 1000 LNK/ACT To indicate that the switch is actively sending or receiving data over that port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual NS3601-24P/4S / GE-DSSG-244-POE Rear Panel Figure 2-6 Rear panel of NS3601-24P/4SP and GE-DSSG-244-POE ■ AC Power Receptacle For compatibility with electric service in most areas of the world, the Managed Switch’s power supply automatically adjusts to line power in the range 100-240VAC and 50/60 Hz. Plug the female end of the power cord firmly into the receptalbe on the rear panel of the Managed Switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 2-7 Place the Managed Switch on the desktop Step3: Keep enough ventilation space between the Managed Switch and the surrounding objects. When choosing a location, please keep in mind the environmental restrictions discussed in Chapter 1, Section 5 Product Specification. Step4: Connect the Managed Switch to network devices.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Step5: Supply power to the Managed Switch. Connect one end of the power cable to the Managed Switch. Connect the power plug of the power cable to a standard wall outlet. When the Managed Switch receives power, the Power LED should remain solid Green. Rack Mounting To install the Managed Switch in a 19-inch standard rack, please follows the instructions described below.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 2-8 Mounting IFS-24040 in a Rack Step6: Proceeds with the steps 4 and steps 5 of session 2.2.1 Desktop Installation to connect the network cabling and supply power to the Managed Switch. Installing the SFP transceiver The sections describe how to plug-in an SFP transceiver into an SFP slot. The SFP transceivers are hot-swappable. You can plug-in and out the transceiver to/from any SFP port without a need to power down the Managed Switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 1000Base-SX/LX SFP transceiver: We recommend using IFS SFPs on the Managed Switch. If you insert a SFP transceiver that is not supported, the Managed Switch will not recognize it. Before connecting the other switches, workstation or Media Converter: 1. Make sure both sides use the same SFP transceiver, for example: 1000Base-SX to 1000Base-SX, 1000Base-LX to 1000Base-LX. 2. Make sure the fiber-optic cable type match the SFP transceiver model.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 2-10 Pull out the SFP transceiver Never pull out the module without pull the handle or the push bolts on the module. Direct pull out the module may damage the module and SFP module slot of the Managed Switch. Stack Installation IFS NS3601-24P/4S and GE-DSSG Series The IFS NS3601-24P/4S and GE-DSSG-244 series Managed Switch provides a switch stacking function to manage up to 16 switches using a single IP address.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 2-12 Ring Stack topology Connecting Stacking cable Before attempting to connect stacking ports, verify that you have the required stack cables. The following cables are used to connect stacked switches: • NS-CBL-50: 50cm, Short stack cable –used to connect adjacent IFS switches. • NS-CBL-200: 200cm, Long / Redundant stack cable – used to connect the top and bottom IFS switches of a stack.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The stack port is for management and data packets to be transmitted between other IFS stackable switches, the stack ports can’t be configured with Layer 2 features via management interface. STEP-4: Power up the stack switches. Management Stacking The stack operation of the IFS Managed Switch supports Plug and Play Stacking connection and auto stack configuration.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual It’s allow to build a stack of up to 16 IFS Switches. If there is the space limitation or power issue and you wish to stack all the switches in different racks, use long stack cables “NS-CBL-200” to connect two stacks.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SWITCH MANAGEMENT This chapter explains the methods that you can use to configure management access to the Managed Switch. It describes the types of management applications and the communication and management protocols that deliver data between your management device (workstation or personal computer) and the system. It also contains information about port connection options.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Management Access Overview The Managed Switch gives you the flexibility to access and manage it using any or all of the following methods: An administration console Web browser interface An external SNMP-based network management application The administration console and Web browser interface support are embedded in the Managed Switch software and are available for immediate use. Each of these management methods has their own advantages.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 3-2 Terminal parameter settings You can change these settings, if desired, after you log on. This management method is often preferred because you can remain connected and monitor the system during system reboots. Also, certain error messages are sent to the serial port, regardless of the interface through which the associated action was initiated.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 3-4 Web main screen of Managed Switch SNMP-Based Network Management You can use an external SNMP-based application to configure and manage the Managed Switch, such as SNMPc Network Manager, HP Openview Network Node Management (NNM) or What’s Up Gold. This management method requires the SNMP agent on the switch and the SNMP Network Management Station to use the same community string.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 36
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual WEB CONFIGURATION This section introduces the configuration and functions of the Web-Based management. About Web-based Management The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer. The Web-Based Management supports Internet Explorer 7.0.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 1. Logging on the switch Use Internet Explorer 7.0 or above Web browser. Enter the factory-default IP address to access the Web interface. The factory-default IP Address as following: http://192.168.0.100 2. When the following login screen appears, please enter the default username "admin" with password “admin” (or the username/password you have changed via console) to login the main screen of Managed Switch. The login screen is shown Figure 4-1-2.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-1-3 Default main page Now, you can use the Web management interface to continue the switch management or manage the Managed Switch by Web interface. The Switch Menu on the left of the web page lets you access all the commands and statistics the Managed Switch provides. 1. 2. 3. 4. It is recommended to use Internet Explore 7.0 or above to access Managed Switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Main Web Page The IFS Managed Switch provides a Web-based browser interface for configuring and managing it. This interface allows you to access the Managed Switch using the Web browser of your choice. This chapter describes how to use the Managed Switch’s Web browser interface to configure and manage it.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-1-5 IFS Managed Switch Main Functions Menu 41
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual System Use the System menu items to display and configure basic administrative details of the Managed Switch. Under System the following topics are provided to configure and view the system information: This section has the following items: ■ System Information The switch system information is provided here. ■ IP Configuration Configure the switch-managed IP information on this page.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual System Information The System Info page provides information for the current device information. System Info page helps a switch administrator to identify the hardware MAC address, software version and system uptime. The screen is shown Figure 4-2-1.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Click to refresh the page; any changes made locally will be undone. IP Configuration The IP Configuration includes the IP Address, Subnet Mask and Gateway. The Configured column is used to view or change the IP configuration. Fill up the IP Address, Subnet Mask and Gateway for the device. The screen is shown Figure 4-2-2. Figure 4-2-2 IP Configuration page screenshot The Current column is used to show the active IP configuration.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Click to undo any changes made locally and revert to previously saved values. IPv6 Configuration Configure the switch-managed IPv6 information on this page. The Configured column is used to view or change the IPv6 configuration. The Current column is used to show the active IPv6 configuration. The screen is shown Figure 4-2-3.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Users Configuration It is allowed to configure the Managed Switch to authenticate users logging into the system for management access using local or remote authentication methods, such as telnet and Web browser.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-5 Add / Edit User Configuration page screenshot The page includes the following fields: Object Description • Username The name identifying the user. • Password The password of the user. • Password (again) Confirm the password of the user. • Privilege Level Specifies the privilege level for the user. Options: Master Admin Master Viewer IT Admin IT Viewer Security Admin Security Viewer Buttons : Click to save changes.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-6 User Configuration page screenshot After change the default password, if you forget the password, press the “Reset” button in the front panel of the Managed Switch over 10 seconds and then release. The current settings includeing the VLAN, will be lost and the Managed Switch will restore to factory default.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Users Privilege Levels In addition to the local user account management as configured in “User Configuration”, the Managed Switch allowed to use a remote access authentication server based on RADIUS or TACACS+ protocols. This page provides an overview of the privilege levels for remote user account. After setup completed, please press “Save” button to take effect.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Group Name The name identifying the privilege group. In most cases, a privilege level group consists of a single module (e.g. LACP, RSTP or QoS), but a few of them contains more than one. The following description defines these privilege level groups in details: System: Contact, Name, Location, Timezone, Log.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual NTP Configuration Configure NTP on this page. NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks of computer systems. NTP uses UDP (data grams) as transport layer. You can specify NTP Servers and set GMT Time zone. The NTP Configuration screen is shown Figure 4-2-8.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-9 UPnP Configuration page screenshot The page includes the following fields: Object Description • Mode Indicates the UPnP operation mode. Possible modes are: Enabled: Enable UPnP mode operation. Disabled: Disable UPnP mode operation. When the mode is enabled, two ACEs are added automatically to trap UPNP related packets to CPU. The ACEs are automatically removed when the mode is disabled.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Figure 4-2-10 UPnP devices shows on Windows My Network Places DHCP Relay Configure DHCP Relay on this page. DHCP Relay is used to forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-11 DHCP Relay Configuration page screenshot The page includes the following fields: Object Description • Relay Mode Indicates the DHCP relay mode operation. Possible modes are: Enabled: Enable DHCP relay mode operation. When enable DHCP relay mode operation, the agent forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual DHCP Relay Statistics This page provides statistics for DHCP relay. The DHCP Relay Statistics screen is shown Figure 4-2-12. Figure 4-2-12 DHCP Relay Statistics page screenshot The page includes the following fields: Server Statistics Object Description • Transmit to Server The packets number that relayed from client to server. • Transmit Error The packets number that errors sending packets to clients.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. : Click to refresh the page; any changes made locally will be undone. : Clear all statistics. CPU Load This page displays the CPU load, using a SVG graph. The load is measured as averaged over the last 100ms, 1sec and 10 seconds intervals. The last 120 samles are graphed, and the last numbers are displayed as text as well.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual System Log The switch system log information is provided here. The System Log screen is shown Figure 4-2-14. Figure 4-2-14 System Log page screenshot The page includes the following fields: Object Description • ID The ID (>= 1) of the system log entry. • Level • Time The level of the system log entry. The following level types are supported: Info: Information level of the system log. Warning: Warning level of the system log.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Detailed Log The switch system detailed log information is provided here. The Detailed Log screen is shown Figure 4-2-15. Figure 4-2-15 Detailed Log page screenshot The page includs the following fields: Object Description • ID The ID (>= 1) of the system log entry. • Message The message of the system log entry. Buttons : Download the statistics. : Click to refresh the page; any changes made locally will be undone.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-16 Remote Syslog page screenshot The page includes the following fields: Object Description • Mode Indicates the remote syslog mode operation. Possible modes are: Enabled: Enable remote syslog mode operation. Disabled: Disable remote syslog mode operation. Fill in your remote syslog server IP address. • Syslog Server IP Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved value.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SMTP Configure This page facilitates a SMTP Configure the switch. The SMTP Configure screen is shown Figure 4-2-17. Figure 4-2-17 SMTP Configuration page screenshot The page includes the following fields: Object Description • SMTP Mode Controls whether SMTP is enabled on this switch. • SMTP Server Type the SMTP server name or the IP address of the SMTP server. • SMTP Port Set port number of SMTP service.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Send a test mail to mail server to check this account is available or not. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Web Firmware Upgrade This page facilitates an update of the firmware controlling the switch. The Web Firmware Upgrade screen is shown Figure 4-2-18. Figure 4-2-18 Web Firmware Upgrade page screenshot To open Firmware Upgrade screen perform the folling: 1.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual TFTP Firmware Upgrade The Firmware Upgrade page provides the functions to allow a user to update the Managed Switch firmware from the TFTP server in the network. Before updating, make sure you have your TFTP server ready and the firmware image is on the TFTP server. The TFTP Firmware Upgrade screen is shown Figure 4-2-20.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual and this section must include the correct platform ID and version. The global section is optional and includes configuration which is not related to specific switch ports. The switch section is optional and includes configuration which is related to specific switch ports. Module tags: , , etc. These tags identify a module controlling specific parts of the configuration. Group tags: , etc.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-23 File save screen Configuration Upload This function allows backup and reload the current configuration of the Managed Switch to the local management station. The Configuration Upload screen is shown Figure 4-2-24. Figure 4-2-24 Configuration Upload page screenshot Configuration Upload 1. Click the “ ” button of the main page, the system would pop up the file selection menu to choose saved configuration.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-2-25 Windows file selection menu popup 2. Select on the configuration file then click “ 3. After the upload process is complete, the main screen displays “Transfer Completed”. ”, the bottom of the browser shows the upload status.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Factory Default You can reset the configuration of the stack switch on this page. Only the IP configuration is retained. The new configuration is available immediately, which means that no restart is necessary. The Factory Default screen is shown Figure 4-2-26. Figure 4-2-26 Factory Default page screenshot Buttons : Click to reset the configuration to Factory Defaults. : Click to return to the Port State page without resetting the configuration.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual System Reboot The Reboot page enables the device to be rebooted from a remote location. Once the Reboot button is pressed, user have to re-login the WEB interface about 60 seconds later. The System Reboot screen is shown in Figure 4-2-27. Figure 4-2-27 System Reboot page screenshot Buttons : Click to reboot the system. : Click to return to the Port State page without reboot the system.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual System Information The system information is provides here. Trap Configuration Configure SNMP trap on this page. SNMPv3 Communities Configure SNMPv3 communities table on this page. SNMPv3 Users SNMPv3 Groups Configure SNMPv3 users table on this page. Configure SNMPv3 groups table on this page. SNMPv3 Views Configure SNMPv3 views table on this page. SNMPv3 Accesses Configure SNMPv3 accesses table on this page.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SNMP System Information Configuration The switch system information is provided here. The System Information Configuration screen is shown Figure 4-3-2. Figure 4-3-2 System Information Configuration page screenshot The page includes the following fields: Object Description • System Contact The textual identification of the contact person for this managed node, together with information on how to contact this person.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-3-3 SNMP Trap Configuration page screenshot The page includes the following fields: Object Description • Trap Mode Indicates the SNMP trap mode operation. Possible modes are: Enabled: Enable SNMP trap mode operation. Disabled: Disable SNMP trap mode operation. Indicates the SNMP trap supported version. Possible versions are: SNMP v1: Set SNMP trap supported version 1. SNMP v2c: Set SNMP trap supported version 2c.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. SNMPv3 Configuration SNMPv3 Communities Configuration Configure SNMPv3 communities table on this page. The entry index key is Community. The SNMPv3 Communities Configuration screen is shown in Figure 4-3-4.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SNMPv3 Users Configuration Configure SNMPv3 users table on this page. The entry index key are Engine ID and User Name. The SNMPv3 Users Configuration screen is shown Figure 4-3-5. Figure 4-3-5 SNMPv3 Users Configuration page screenshot The page includes the following fields: Object Description • Delete Check to delete the entry. It will be deleted during the next save.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SNMPv3 Groups Configuration Configure SNMPv3 groups table on this page. The entry index keys are Security Model and Security Name. The SNMPv3 Groups Configuration screen is shown Figure 4-3-6. Figure 4-3-6 SNMPv3 Groups Configuration page screenshot The page includes the following fields: Object Description • Delete Check to delete the entry. It will be deleted during the next save.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Delete Check to delete the entry. It will be deleted during the next save. • View Name A string identifying the view name that this entry should belong to. The allowed string length is 1 to 32, and the allowed content is the ASCII characters from 33 to 126. Indicates the view type that this entry should belong to.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Auth, NoPriv: Authentication and none privacy. Auth, Priv: Authentication and privacy. • Read View Name • Write View Name The name of the MIB view defining the MIB objects for which this request may request the current values. The allowed string length is 1 to 32, and the allowed content is the ASCII characters from 33 to 126. The name of the MIB view defining the MIB objects for which this request may potentially SET new values.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-4-1 Port Configuration page screenshot The page includes the following fields: Object Description • Port This is the logical port number for this row. • Description Indicates the per port description. • Link The current link state is displayed graphically. Green indicates the link is up and red that it is down. • Current Link Speed Indicates the current link speed of the port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Flow Control When Auto Speed is selected for a port, this section indicates the flow control capability that is advertised to the link partner. When a fixed-speed setting is selected, that is what is used. Current Rx column indicates whether pause frames on the port are obeyed. Current Tx column indicates whether pause frames on the port are transmitted. The Rx and Tx settings are determined by the result of the last Auto-Negotiation.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-4-2 Port Statistics Overview page screenshot The displayed counters are: Object Description • Port The logical port for the settings contained in the same row. • Packets The number of received and transmitted packets per port. • Bytes The number of received and transmitted bytes per port. • Errors The number of frames received in error and the number of incomplete transmissions per port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Download the port statistics overview. : Click to refresh the page immediately. : Clears the counters for all ports. : Print out the port statistics overview. Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. Port Statistics Detail This page provides detailed traffic statistics for a specific switch port. Use the port select box to select which switch port details to display.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Receive and Transmit Size Counters The number of received and transmitted (good and bad) packets split into categories based on their respective frame sizes. Receive and Transmit Queue Counters The number of received and transmitted packets per input and output queue. Receive Error Counters Object Description • Rx Drops The number of frames dropped due to lack of receive buffers or egress congestion.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-4-4 SFP Module Information for Switch page screenshot The page includes the following fields: Object Description • Type Display the type of current SFP module, the possible types are: 1000Base-SX 1000Base-LX 100Base-FX • Speed Display the spedd of current SFP module, the speed value or description is get from the SFP module. Different vendors SFP modules might shows different speed information.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Mirroring Configuration Configure port Mirroring on this page. This function provide to monitoring network traffic that forwards a copy of each incoming or outgoing packet from one port of a network Switch to another port where the packet can be studied. It enables the manager to keep close track of switch performance and alter it if necessary.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Mirror Port Configuration The Port Mirror Configuration screen is shown Figure 4-4-6.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Port to mirror to Frames from ports that have either source or destination mirroring enabled are mirrored to this port. Disabled option disables mirroring. • Switch to mirror to Frames from ports that have either source (rx) or destination (tx) mirroring enabled are mirrored to this switch. • Port The logical port for the settings contained in the same row. • Mode Select mirror mode.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-5-1 Link Aggregation The Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Partner Systems that require high speed redundant links. Link aggregation lets you group up to eight consecutive ports into a single dedicated connection. This feature can expand bandwidth to a device on the network. LACP operation requires full-duplex mode, more detail information refer to the IEEE 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Destination MAC • Source and destination IPv4 address. • Source and destination TCP/UDP ports for IPv4 packets Normally, all 5 contributions to the aggregation code should be enabled to obtain the best traffic distribution among the link aggregation member ports. Each link aggregation may consist of up to 16 member ports. Any quantity of link aggregations may be configured for the device (only limited by the quantity of ports on the device.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-5-3 Aggregation Group Configuration page screenshot The page includes the following fields: .Object Description • Locality • Group ID • Port Members Indicates the aggregation group type. This field is only valid for stackable switches. Global: The group members may reside on different units in the stack. The device supports two 8-port global aggregations. Local: The group members reside on the same unit.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-5-4 LACP Port Configuration page screenshot The page includes the following fields: Object Description • Port The switch port number. • LACP Enabled Controls whether LACP is enabled on this switch port. LACP will form an aggregation when 2 or more ports are connected to the same partner. LACP can form max 12 LLAGs per switch and 2 GLAGs per stack. The Key value incurred by the port, range 1-65535 .
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Role same Key value can participate in the same aggregation group, while ports with different keys cannot. The default setting is “Auto” The Role shows the LACP activity status. The Active will transmit LACP packets each second, while Passive will wait for a LACP packet from a partner (speak if spoken to). Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-5-6 LACP Port Status page screenshot The page includes the following fields: Object Description • Port The switch port number. • LACP 'Yes' means that LACP is enabled and the port link is up. 'No' means that LACP is not enabled or that the port link is down. 'Backup' means that the port could not join the aggregation group but will join if other port leaves. Meanwhile it's LACP status is disabled. The key assigned to this port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual LACP Port Statistics This page provides an overview for LACP statistics for all ports. The LACP statistics screen is shown Figure 4-5-7. Figure 4-5-7 LACP Port statistics page screenshot The page includes the following fields: Object Description • Port The switch port number. • LACP Transmitted Shows how many LACP frames have been sent from each port. • LACP Received Shows how many LACP frames have been received at each port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN VLAN Overview A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. VLAN can be used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN. VLAN also logically segment the network into different broadcast domains so that packets are forwarded only between ports within the VLAN.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN allow a network to be segmented in order to reduce the size of broadcast domains. All packets entering a VLAN will only be forwarded to the stations (over IEEE 802.1Q enabled switches) that are members of that VLAN, and this includes broadcast, multicast and unicast packets from unknown sources. VLAN can also provide a level of security to your network. IEEE 802.1Q VLAN will only deliver packets between stations that are members of the VLAN.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLAN to span network devices (and indeed, the entire network – if all network devices are 802.1Q compliant). Every physical port on a switch has a PVID. 802.1Q ports are also assigned a PVID, for use within the switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-6-1 VLAN Basic Information page screenshot The page includes the following fields: Object Description • Mode Display the current VLAN mode used by this Managed Switch Port-Based IEEE 802.1Q VLAN Maximum VLAN ID recognized by this Managed Switch. • Maximum VLAN ID • Maximum Number of Supported VLANs Maximum number of VLANs that can be configured on this Managed Switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Frame Income Frame Leave Income Frame is tagged Income Frame is untagged Leave port is tagged Frame remains tagged Tag is inserted Leave port is untagged Tag is removed Frame remain untagged Table 4-6-1 Ingress/Egress port with VLAN VID Tag/Untag table ■ IEEE 802.1Q Tunneling (Q-in-Q) IEEE 802.1Q Tunneling (QinQ) is designed for service providers carrying traffic for multiple customers across their networks.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN Port Configuration The VLAN Port Configuration screen is shown Figure 4-6-2.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Port This is the logical port number for this row. • PVID Allow assign PVID for selected port. The range for the PVID is 1-4094. The PVID will be inserted into all untagged frames entering the ingress port. The PVID must as same as the VLAN ID that the port belong to VLAN group, or the untagged traffic will be dropped. Enable ingress filtering for a port by checking the box.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN Membership Configuration Adding Static Members to VLANs (VLAN Index) Use the VLAN Static Table to configure port members for the selected VLAN index. The VLAN membership configuration for the selected stack switch / unit switch can be monitored and modified here. Up to 255 VLANs are supported. This page allows for adding and deleting VLANs as well as adding and deleting port members of each VLAN.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Updates the table starting from the first entry in the VLAN Table, i.e. the entry with the lowest VLAN ID. : Updates the table, starting with the entry after the last entry currently displayed. VLAN Membership Status for User Static This page provides an overview of membership status for VLAN users. The VLAN Membership Status for User Static screen is shown Figure 4-6-4.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN Port Status for User Static This page provides VLAN Port Staus. The VLAN Port Status for User Static screen is shown Figure 4-6-5. Figure 4-6-5 VLAN Port Status for User Static page screenshot The page includes the following fields: Object Description • Port The logical port for the settings contained in the same row. • PVID Shows the VLAN identifier for that port. The allowed values are 1 through 4095. The default value is 1.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • UVID Shows UVID (untagged VLAN ID). Port's UVID determines the packet's behavior at the egress side. • Conflicts Shows status of Conflicts whether exists or Not. When a Volatile VLAN User requests to set VLAN membership or VLAN port configuration, the following conflicts can occur: Functional Conflicts between feature. Conflicts due to hardware limitation. Direct conflict between user modules.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual For private VLANs to be applied, the switch must first be configured for standard VLAN operation When this is in place, one or more of the configured VLANs can be configured as private VLANs.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-6-6 Port Isolation Configuration page screenshot The page includes the following fields: Object Description • Port The switch interface. • PVLAN Port Type Displays private VLAN port types. - Isolated: A single stand-alone VLAN that contains one promiscuous port and one or more isolated (or host) ports. This VLAN conveys traffic between the isolated ports and a lone promiscuous port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Private VLAN Membership Configuration In this menu the Private VLAN membership configurations for the switch can be monitored and modified here, private VLANs can be added or deleted, and port members of each Private VLAN can be added or removed here. Private VLANs are based on the source port mask, and there are no connections to VLANs. This means that VLAN IDs and Private VLAN IDs can be identical.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN setting example: - Separate VLAN - 802.1Q VLAN Trunk - Port Isolate Two separate 802.1Q VLAN The diagram shows how the Managed Switch handle Tagged and Untagged traffic flow for two VLANs. VLAN Group 2 and VLAN Group 3 are separated VLAN. Each VLAN isolate network traffic so only members of the VLAN receive traffic from the same VLAN members. The screen is shown Figure 4-6-8 appears.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Untagged packet entering VLAN 3 1. While [PC-4] transmit an untagged packet enters Port-4, the switch will tag it with a VLAN Tag=3. [PC-5] and [PC-6] will received the packet through Port-5 and Port-6. 2. While the packet leaves Port-5, it will be stripped away it tag becoming an untagged packet. 3. While the packet leaves Port-6, it will keep as a tagged packet with VLAN Tag=3.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The Per Port VLAN configuration in Figure 4-6-10.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN Trunking between two 802.1Q aware switch The most cases are used for “Uplink” to other switches. VLANs are separated at different switches, but they need to access with other switches within the same VLAN group. The screen is shown Figure 4-6-11. Setup steps 1. Create VLAN Group Set VLAN Group 1 = Default-VLAN with VID (VLAN ID) =1 Add two VLANs – VLAN 2 and VLAN 3 VLAN Group 2 with VID=2 VLAN Group 3 with VID=3 2.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 4. Assign the VLAN Trunk Port to be the member of each VLAN – which wants to be aggregated. At this sample, add Port-8 to be VLAN 2 and VLAN 3 member port. The screen is shown Figure 4-6-12. 5. Figure 4-6-12 VLAN overlap port setting & VLAN 1 – The public area member assign 6. Specify Port-8 to be the 802.1Q VLAN Trunk port, and the Trunking port must be a Tagged port while egress.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Setup steps 1. Assign Port Mode Set Port-1~Port-4 in Isolate port. Set Port-5 and Port-6 in Promiscuous port. The screen is shown Figure 4-6-15.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-6-15 The configuration of Isolate and Promiscuous port 2. Assign VLAN Member : VLAN 1 : Port-1,Port-2 ,Port-5 and Port-6 VLAN 2 : Port-3~Port-6. The screen is shown Figure 4-6-16.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Spanning Tree Protocol Theory The Spanning Tree protocol can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices in your network to ensure that only one route exists between any two stations on the network, and provide backup links which automatically take over when a primary link goes down.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual network topology to stabilize after a topology change. In addition, STP specifies a series of states a port must transition through to further ensure that a stable network topology is created after a topology change.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 2. STP Parameters STP Operation Levels The Switch allows for two levels of operation: the switch level and the port level. The switch level forms a spanning tree consisting of links between one or more switches. The port level constructs a spanning tree consisting of groups of one or more ports. The STP operates in much the same way for both levels.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The Hello Time cannot be longer than the Max. Age. Otherwise, a configuration error will occur. Max. Age – The Max Age can be from 6 to 40 seconds. At the end of the Max Age, if a BPDU has still not been received from the Root Bridge, your Switch will start sending its own BPDU to all other Switches for permission to become the Root Bridge. If it turns out that your Switch has the lowest Bridge Identifier, it will become the Root Bridge.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-7-5 Before Applying the STA Rules In this example, only the default STP values are used.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual between switches B and C. The two (optional) Gigabit ports (default port cost = 20,000) on switch A are connected to one (optional) Gigabit port on both switch B and C. The redundant link between switch B and C is deliberately chosen as a 100 Mbps Fast Ethernet link (default port cost = 200,000). Gigabit ports could be used, but the port cost should be increased from the default to ensure that the link between switch B and switch C is the blocked link.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Max Age • Maximum Hop Count • Transmit Hold Count The maximum age of the information transmitted by the Bridge when it is the Root Bridge. Valid values are in the range 6 to 200 seconds. -Default: 20 -Minimum: The higher of 6 or [2 x (Hello Time + 1)]. -Maximum: The lower of 40 or [2 x (Forward Delay -1)] This defines the initial value of remaining Hops for MSTI information generated at the boundary of an MSTI region.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Object Description • MSTI The Bridge Instance. This is also a link to the STP Detailed Bridge Status. • Bridge ID The Bridge ID of this Bridge instance. • Root ID The Bridge ID of the currently elected root bridge. • Root Port The switch port currently assigned the root port role. • Root Cost Root Path Cost. For the Root Bridge this is zero. For all other Bridges, it is the sum of the Port Path Costs on the least cost path to the Root Bridge.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-7-9 STP CIST Port Configuration page screenshot The page includes the following fields: Object Description • Port The switch port number of the logical STP port. • STP Enabled Controls whether RSTP is enabled on this switch port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Path Cost • Priority • operEdge (state flag) • AdminEdge • AutoEdge • Restricted Role • Restricted TCN • BPDU Guard • Point2Point Controls the path cost incurred by the port. The Auto setting will set the path cost as appropriate by the physical link speed, using the 802.1D recommended values. Using the Specific setting, a user-defined value can be entered. The path cost is used when establishing the active topology of the network.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Type Link Type Ethernet Half Duplex 100 Full Duplex 95 Trunk 90 Half Duplex 19 Full Duplex 18 Trunk 15 Full Duplex 4 Trunk 3 Table 4-7-2 Recommended STP Path Costs Fast Ethernet Gigabit Ethernet Port Type IEEE 802.1D-1998 Link Type Ethernet Fast Ethernet Gigabit Ethernet IEEE 802.1w-2001 2,000,000 1,999,999 1,000,000 200,000 100,000 50,000 10,000 5,000 IEEE 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. MSTI Configuration This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. The MSTI Configuration screen is shown Figure 4-7-11.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Configuration Revision The revision of the MSTI configuration named above. This must be an integer between 0 and 65535. MSTI Mapping Object Description • MSTI The bridge instance. The CIST is not available for explicit mapping, as it will receive the VLANs not explicitly mapped. • VLANs Mapped The list of VLAN's mapped to the MSTI. The VLANs must be separated with comma and/or space. A VLAN can only be mapped to one MSTI.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-7-13 MST1 MSTI Port Configuration page screenshot 126
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: MSTx MSTI Port Configuration Object Description • Port The switch port number of the corresponding STP CIST (and MSTI) port. • Path Cost Controls the path cost incurred by the port. The Auto setting will set the path cost as appropriate by the physical link speed, using the 802.1D recommended values. Using the Specific setting, a user-defined value can be entered.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Port The switch port number of the logical STP port. • CIST Role The current STP port role of the ICST port. The port role can be one of the following values: AlternatePort BackupPort RootPort DesignatedPort • State The current STP port state of the CIST port .
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Port The switch port number of the logical RSTP port. • RSTP The number of RSTP Configuration BPDU's received/transmitted on the port. • STP The number of legacy STP Configuration BPDU's received/transmitted on the port. • TCN The number of (legacy) Topology Change Notification BPDU's received/transmitted on the port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-1 Multicast Service 130
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-2 Multicast flooding Figure 4-8-3 IGMP Snooping multicast stream control IGMP Versions 1 and 2 Multicast groups allow members to join or leave at any time. IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group. IGMP version 1 is defined in RFC 1112. It has a fixed packet size and no optional data.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual following outlines what is communicated between a multicast router and a multicast group member using IGMP. A host sends an IGMP “report” to join a group A host will never send a report when it wants to leave a group (for version 1). A host will send a “leave” report when it wants to leave a group (for version 2). Multicast routers send IGMP queries (to the all-hosts group address: 224.0.0.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual IGMP Snooping Configuration This page provides IGMP Snooping related configuration. Most of the settings are global, whereas the Router Port configuration is related to the currently selected stack unit, as reflected by the page header. The IGMP Snooping Configuration screen is shown Figure 4-8-5.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-6 IGMP Port Related Configuration page screenshot 134
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Router Port Specify which ports act as IGMP router ports. A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or IGMP querier. The Switch forwards IGMP join or leave packets to an IGMP router port. Auto: Select “Auto” to have the Managed Switch automatically uses the port as IGMP Router port if the port receives IGMP query packets.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-7 IGMP Snooping VLAN Configuration page screenshot The page includes the following fields: Object Description • VLAN ID The VLAN ID of the entry. • IGMP Snooping Enable Enable the per-VLAN IGMP Snooping. Only up to 64 VLANs can be selected. • IGMP Querier Enable the IGMP Querier in the VLAN. The Querier will send out if no Querier received in 255 seconds after IGMP Querier Enabled.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-8 IGMP Snooping Port Group Filtering Configuration page screenshot The page includes the following fields: Object Description • Delete Check to delete the entry. It will be deleted during the next save. • Port The logical port for the settings. • Filtering Group The IP Multicast Group that will be filtered. Buttons : Check to delete the entry. : Click to add a new entry to the Group Filtering table. : Click to save changes.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-9 IGMP Snooping Status page screenshot The page includes the following fields: Object Description • VLAN ID The VLAN ID of the entry. • Groups The present IGMP groups. Max. are 128 groups for each VLAN. • Port Members The ports that are members of the entry. • Querier Status Show the Querier status is "ACTIVE" or "IDLE". • Querier Transmit The number of Transmitted Querier. • Querier Receive The number of Received Querier.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Click to refresh the page immediately. : Clears all Statistics counters. Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. MVR Configuration In multicast VLAN networks, subscribers to a multicast group can exist in more than one VLAN.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-8-10 MVR Configuration page screenshot 140
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • MVR Mode Enable/Disable the Global MVR. • VLAN ID Specify the Multicast VLAN ID. • Mode Enable MVR on the port. • Type Specify the MVR port type on the port. • Immediate Leave Enable the fast leave on the port. Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. MVR Status This page provides MVR status.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to refresh the page immediately. : Clears all Statistics counters. Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. Quality of Service Understand QOS Quality of Service (QoS) is an advanced traffic prioritization feature that allows you to establish control over network traffic.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-1 Welcome to the QCL Configuration Wizard page screenshot The page includes the following fields: Object Description • Set up Port Policies Group ports into several types according to different QCL policies. • Set up Typical Network Application Rules Set up the specific QCL for different typical network application quality control.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-2 Set up Policy Rules page screenshot The page includes the following fields: Object Description • QCL ID Frames that hit this QCE are set to match this specific QCL. • Port Members A row of radio buttons for each port is displayed for each QCL ID. To include a port in a QCL member, click the radio button. Buttons : Click to start the wizard again. : Click to get more information. : Click to continue the wizard.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to start the wizard again. : Click to get more information. Set up Typical Network Application Rules Set up the specific QCL for different typical network application quality control. STEP-1 Set up the specific QCL for different typical network application quality control by selecting the network application type for your rule: The Set up Typical Network Application Rules screen is shown Figure 4-9-3..
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Games Indicates the common games that apply to the specific QCE. • User Definition Indicates the user definition that applies to the specific QCE. The user definitions are: Ethernet Type: Specify the Ethernet Type filter for this QCE. The allowed range is 0x600 to 0xFFFF. VLAN ID: VLAN ID filter for this QCE. The allowed range is 1 to 4095. UDP/TCP Port: Specify the TCP/UDP port filter for this QCE. The allowed range is 0 to 65535.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to cancel the wizard. : Click to go back to the previous wizard step. : Click to continue the wizard. Set up ToS Precedence Mapping Set up the traffic class mapping to the precedence part of ToS (3 bits) when receiving IPv4/IPv6 packets. The Set up ToS Precedence Mapping screen is shown Figure 4-9-5.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Set up VLAN Tag Priority Mapping Set up the traffic class mapping to the User Priority value (3 bits) when receiving VLAN tagged packets. The Set up VLAN Tag Priority Mapping screen is shown Figure 4-9-6. Figure 4-9-6 Set up VLAN Tag Priority Mapping page screenshot The page includes the following fields: Object Description • QCL ID Select the QCL ID to which this QCE applies.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual QoS Control List Configuration This page lists the QCEs for a given QCL. Frames can be classified by 4 different QoS classes: Low, Normal, Medium, and High. The classification is controlled by a QoS assigned to each port. A QCL consists of an ordered list of up to 12 QCEs. Each QCE can be used to classify certain frames to a specific QoS class.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Traffic Class VLAN ID: The field shows the VLAN ID. TCP/UDP Port: The field shows the TCP/UDP port range. DSCP: The field shows the IPv4/IPv6 DSCP value. The QoS class associated with the QCE. • Modification Buttons You can modify each QCE in the table using the following buttons: : Inserts a new QCE before the current row. : Edits the QCE. : Moves the QCE up the list. : Moves the QCE down the list. : Deletes the QCE.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Traffic Class number. The port range allowed is from 0 to 65535. DSCP: The allowed range is 0 to 63. ToS or Tag Priority do not have type value settings. Select a traffic class of Low, Normal, Medium, or High to apply to the QCE. If the QCE type is ToS or Tag Priority, there are 8 rows of traffic class that can be configured for each priority. Buttons : Click to save changes.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-9 Port QoS Configuration page screenshot The page includes the following fields: Object Description • Number of Classes Configure the number of traffic classes as "1", "2", or "4". The default value is "4". • Port The logical port for the settings contained in the same row.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Default Class Configure the default QoS class for the port, that is, the QoS class for frames not matching any of the QCEs in the QCL. • QCL # Select which QCL to use for the port. • Tag Priority Select the default tag priority for this port when adding a Tag to the untagged frames. • Queuing Mode Select which Queuing mode for this port. • Queue Weighted Setting Queue weighted(Low:Normal:Medium:High) if the "Queuing Mode" is "Weighted".
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-10 Rate Limit Configuration page screenshot The page includes the following fields: Object Description • Port The logical port for the settings contained in the same row. • Policer Enabled Enable or disable the port policer. The default value is "Disabled". • Policer Rate Configure the rate for the port policer. The default value is "500".
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Shaper Enabled Enable or disable the port shaper. The default value is "Disabled". • Shaper Rate Configure the rate for the port shaper. The default value is "500". This value is restricted to 500-1000000 when the "Policer Unit" is "kbps", and it is restricted to 1-1000 when the "Policer Unit" is "Mbps" Configure the unit of measure for the port shaper rate as kbps or Mbps. The default value is "kbps".
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-12 QoS Statistics page screenshot The page includes the following fields: Object Description • Port The logical port for the settings contained in the same row. • Low Queue There are 4 QoS queues per port with strict or weighted queuing scheduling. This is the lowest priority queue. • Normal Queue This is the normal priority queue of the 4 QoS queues. It has higher priority than the "Low Queue".
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Clears the counters for all ports. : Check this box to enable an automatic refresh of the page at regular intervals. Auto-refresh DSCP Remarking This page allows you to configure DSCP remarking related settings for each port. Frames can be classified by 4 different QoS classes: Low, Normal, Medium, and High. The classification can be controlled by Port QoS configuration page. And this page is used to configure DSCP remarking.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Port The logical port for the settings contained in the same row. • DSCP Remarking Mode If the QoS remarking mode is set to enabled, it should be with this DSCP remarking/correction function according to RFC2474 on this port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-9-14 Voice VLAN Configuration page screenshot 159
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Mode Indicates the Voice VLAN mode operation. We must disable MSTP feature before we enable Voice VLAN. It can avoid the conflict of ingress filter. Possible modes are: Enabled: Enable Voice VLAN mode operation. Disabled: Disable Voice VLAN mode operation. Indicates the Voice VLAN ID. It should be a unique VLAN ID in the system and cannot equal each port PVID.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Voice VLAN OUI Table Configure VOICE VLAN OUI table on this page. The maximum entry number is 16. Modify OUI table will restart auto detect OUI process. The Voice VLAN OUI Table screen is shown Figure 4-9-15. Figure 4-9-15 Voice VLAN OUI Table page screenshot The page includes the following fields: Object Description • Delete Check to delete the entry. It will be deleted during the next save.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application. Access Control List Status This page shows the ACL status by different ACL users. Each row describes the ACE that is defined.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Access Control List Configuration This page shows the Access Control List (ACL), which is made up of the ACEs defined for this Managed Switch. Each row describes the ACE that is defined. The maximum number of ACEs is 128. Click on the lowest plus sign to add a new ACE to the list. The Access Control List Configuration screen is shown Figure 4-10-2.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Moves the ACE down the list. : Deletes the ACE. : The lowest plus sign adds a new entry at the bottom of the ACE listings. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs at regular intervals. : Click to refresh the page; any changes made locally will be undone. : Click to clear the counters. : Click to remove all ACEs. ACE Configuration Configure an ACE (Access Control Entry) on this page.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Frame Type • Action • Rate Limiter Specify the rate limiter in number of base units. The allowed range is 1 to 15. Disabled indicates that the rate limiter operation is disabled. • Port Copy Frames that hit the ACE are copied to the port number specified here. The allowed range is the same as the switch port number range. Disabled indicates that the port copy operation is disabled. Specify the logging operation of the ACE.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ARP Parameters The ARP parameters can be configured when Frame Type "ARP" is selected. Object Description • ARP/RARP Specify the available ARP/RARP opcode (OP) flag for this ACE. Any: No ARP/RARP OP flag is specified. (OP is "don't-care".) ARP: Frame must have ARP/RARP opcode set to ARP. RARP: Frame must have ARP/RARP opcode set to RARP. Other: Frame has unknown ARP/RARP Opcode flag. Specify the available ARP/RARP opcode (OP) flag for this ACE.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 1: ARP/RARP frames where the PRO is equal to IP (0x800) must match this entry. Any: Any value is allowed ("don't-care"). IP Parameters The IP parameters can be configured when Frame Type "IPv4" is selected. Object Description • IP Protocol Filter • IP Protocol Value • IP TTL • IP Fragment • IP Option • SIP Filter • SIP Address Specify the IP protocol filter for this ACE. Any: No IP protocol filter is specified ("don't-care").
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ICMP Parameters Object Description • ICMP Type Filter Specify the ICMP filter for this ACE. Any: No ICMP filter is specified (ICMP filter status is "don't-care"). Specific: If you want to filter a specific ICMP filter with this ACE, you can enter a specific ICMP value. A field for entering an ICMP value. When "Specific" is selected for the ICMP filter, you can enter a specific ICMP value. The allowed range is 0 to 255.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • TCP PSH • TCP ACK • TCP URG Specify the TCP "Push Function" (PSH) value for this ACE. 0: TCP frames where the PSH field is set must not be able to match this entry. 1: TCP frames where the PSH field is set must be able to match this entry. Any: Any value is allowed ("don't-care"). Specify the TCP "Acknowledgment field significant" (ACK) value for this ACE. 0: TCP frames where the ACK field is set must not be able to match this entry.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-10-4 ACL Ports Configuration page screenshot The page includes the following fields: Object Description • Port The logical port for the settings contained in the same row. • Policy ID Select the policy to apply to this port. The allowed values are 1 through 8. The default value is 1. Select whether forwarding is permitted ("Permit") or denied ("Deny"). The default value is "Permit".
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Please note that the System Log memory size and logging rate is limited. • Shutdown Specify the port shut down operation of this port. The allowed values are: Enabled: If a frame is received on the port, the port will be disabled. Disabled: Port shut down is disabled. The default value is "Disabled". Counts the number of frames that match this ACE. • Counter Buttons : Click to save changes.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.11 Authentication This section is to control the access of the Managed Switch, includes the user access and management control. The Authentication section contains links to the following main topics: IEEE 802.1X Port-Based Network Access Control MAC-Based Authentication User Authentication Overview of 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Understanding IEEE 802.1X Port-Based Authentication The IEEE 802.1X standard defines a client-server-based access control and authentication protocol that restricts unauthorized clients from connecting to a LAN through publicly accessible ports. The authentication server authenticates each client connected to a switch port before making available any services offered by the switch or the LAN. Until the client is authenticated, 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual switch acts as an intermediary (proxy) between the client and the authentication server, requesting identity information from the client, verifying that information with the authentication server, and relaying a response to the client. The switch includes the RADIUS client, which is responsible for encapsulating and decapsulating the Extensible Authentication Protocol (EAP) frames and interacting with the authentication server.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual If a client that does not support 802.1X is connected to an unauthorized 802.1X port, the switch requests the client's identity. In this situation, the client does not respond to the request, the port remains in the unauthorized state, and the client is not granted access to the network. In contrast, when an 802.1X-enabled client connects to a port that is not running the 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Network Access Server Configuration This page allows you to configure the IEEE 802.1X and MAC-based authentication system and port settings. The IEEE 802.1X standard defines a port-based access control procedure that prevents unauthorized access to a network by requiring users to first submit credentials for authentication. One or more central servers, the backend servers, determine whether the user is allowed access to the network.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-11-4 Network Access Server Configuration page screenshot 177
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: System Configuration Object Description • Mode Indicates if NAS is globally enabled or disabled on the switch. If globally disabled, all ports are allowed forwarding of frames. • Reauthentication Enabled If checked, successfully authenticated supplicants/clients are reauthenticated after the interval specified by the Reauthentication Period. Reauthentication for 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual QoS Class is enabled for that port. When unchecked, RADIUS-server assigned QoS Class is disabled for all ports. • RADIUS-Assigned VLAN Enabled RADIUS-assigned VLAN provides a means to centrally control the VLAN on which a successfully authenticated supplicant is placed on the switch. Incoming traffic will be classified to and switched on the RADIUS-assigned VLAN.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual authenticator, and the RADIUS server is the authentication server. The authenticator acts as the man-in-the-middle, forwarding requests and responses between the supplicant and the authentication server. Frames sent between the supplicant and the switch are special 802.1X frames, known as EAPOL (EAP Over LANs) frames. EAPOL frames encapsulate EAP PDUs (RFC3748). Frames sent between the switch and the RADIUS server are RADIUS packets.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual supplicant, since that would cause all supplicants attached to the port to reply to requests sent from the switch. Instead, the switch uses the supplicant's MAC address, which is obtained from the first EAPOL Start or EAPOL Response Identity frame sent by the supplicant. An exception to this is when no supplicants are attached.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • RADIUS-Assigned VLAN Enabled -When RADIUS-Assigned VLAN is both globally enabled and enabled (checked) for a given port, the switch reacts to VLAN ID information carried in the RADIUS Access-Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual an EAPOL Success frame when entering the Guest VLAN. While in the Guest VLAN, the switch monitors the link for EAPOL frames, and if one such frame is received, the switch immediately takes the port out of the Guest VLAN and starts authenticating the supplicant according to the port mode. If an EAPOL frame is received, the port will never be able to go back into the Guest VLAN if the "Allow Guest VLAN if EAPOL Seen" is disabled.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Network Access Overview This page provides an overview of the current NAS port states for the selected switch. The Network Access Overview screen is shown Figure 4-11-5. Figure 4-11-5 Network Access Overview page screenshot The page includes the following fields: Object Description • Port The switch port number. Click to navigate to detailed NAS statistics for this port. • Admin State The port's current administrative state.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Port VLAN ID The VLAN ID that NAS has put the port in. The field is blank, if the Port VLAN ID is not overridden by NAS. If the VLAN ID is assigned by the RADIUS server, "(RADIUS-assigned)" is appended to the VLAN ID. Read more about RADIUS-assigned VLANs here. If the port is moved to the Guest VLAN, "(Guest)" is appended to the VLAN ID. Read more about Guest VLANs here. Buttons : Click to refresh the page immediately.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Counters Object Description • EAPOL Counters These supplicant frame counters are available for the following administrative states: Force Authorized Force Unauthorized Port-based 802.1X Single 802.1X Multi 802.1X Direction Rx Name Total IEEE Name dot1xAuthEapolFrames Rx Description The number of valid EAPOL frames of any type that have been received by the switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Backend Server Counters These backend (RADIUS) frame counters are available for the following administrative states: Port-based 802.1X Single 802.1X Multi 802.1X MAC-based Auth. Direction Rx Name Access Challenges IEEE Name dot1xAuthBackendAcce ssChallenges Description 802.1X-based: Counts the number of times that the switch receives the first request from the backend server following the first response from the supplicant.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual for a given port (left-most table) or client (right-most table). Possible retransmissions are not counted. • Last Supplicant/Client Info Information about the last supplicant/client that attempted to authenticate. This information is available for the following administrative states: Port-based 802.1X Single 802.1X Multi 802.1X MAC-based Auth.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual unauthenticated. If an authentication fails for one or the other reason, the client will remain in the unauthenticated state for Hold Time seconds. • Last Authentication Buttons Auto-refresh Shows the date and time of the last authentication of the client (successful as well as unsuccessful). : Check this box to enable an automatic refresh of the page at regular intervals. : Click to refresh the page immediately.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Authentication Server Configuration This page allows you to configure the Authentication Servers. The Authentication Server Configuration screen is shown Figure 4-11-7.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Port State These setting are common for all of the Authentication Servers. Object Description • Timeout The Timeout, which can be set to a number between 3 and 3600 seconds, is the maximum time to wait for a reply from a server. If the server does not reply within this timeframe, we will consider it to be dead and continue with the next enabled server (if any).
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual TACACS+ Authentication Server Configuration The table has one row for each TACACS+ Authentication Server and a number of columns, which are: Object Description • # The TACACS+ Authentication Server number for which the configuration below applies. • Enabled Enable the TACACS+ Authentication Server by checking this box. • IP Address/Hostname The IP address or hostname of the TACACS+ Authentication Server.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual RADIUS Authentication Servers Object Description • # The RADIUS server number. Click to navigate to detailed statistics for this server. • IP Address The IP address and UDP port number (in : notation) of this server. • State The current state of the server. This field takes one of the following values: Disabled: The server is disabled. Not Ready: The server is enabled, but IP communication is not yet up and running.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual RADIUS Details This page provides detailed statistics for a particular RADIUS server. The RADIUS Authentication/Accounting for Server Overview screen is shown Figure 4-11-9. Figure 4-11-9 RADIUS Authentication/Accounting for Server Overview page screenshot The page includes the following fields: RADIUS Authentication Servers The statistics map follows details specified in RFC4668 - RADIUS Authentication Client MIB.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual server. Rx Access Challenges radiusAuthClientExtA ccessChallenges The number of RADIUS Access-Challenge packets (valid or invalid) received from the server. Rx Malformed Access Responses radiusAuthClientExt MalformedAccessRe sponses The number of malformed RADIUS Access-Response packets received from the server. Malformed packets include packets with an invalid length.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. • Other Info This section contains information about the state of the server and the latest round-trip time. Name State RFC4668 Name - Description Shows the state of the server. It takes one of the following values: Disabled: The selected server is disabled.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Other Info Rx Packets Dropped radiusAccClientExt PacketsDropped The number of RADIUS packets that were received from the server on the accounting port and dropped for some other reason. Tx Requests radiusAccClientExt Requests The number of RADIUS packets sent to the server. This does not include retransmissions. Tx Retransmissions radiusAccClientExt Retransmissions The number of RADIUS packets retransmitted to the RADIUS accounting server.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Windows Platform RADIUS Server Configuration Setup the RADIUS server and assign the client IP address to the Managed switch. In this case, field in the default IP Address of the Managed Switch with 192.168.0.100. And also make sure the shared secret key is as same as the one you had set at the Managed Switch’s 802.1x system configuration – 12345678 at this case. 1. Configure the IP Address of remote RADIUS server and secret key.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-11-11 Windows Server – add new RADIUS client setting 3. Assign the client IP address to the Managed switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 4. The shared secret key should be as same as the key configured on the Managed Switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 5. Configure ports attribute of 802.1X, the same as “802.1X Port Configuration”. Figure 4-11-14 802.1x Port Configuration 6. Create user data. The establishment of the user data needs to be created on the Radius Server PC.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 5.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Set the Ports Authenticate Status to “Force Authorized” if the port is connected to the RADIUS server or the port is an uplink port that is connected to another switch. Or once the 802.1X stat to work, the switch might not be able to access the RADIUS server. 4.11.10 802.1X Client Configuration Windows XP supports 802.1X. Previously released operating systems (windows 98SE, ME, 2000), an 802.1X client utility is needed.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-11-19 7. 8. Click “OK”. When client has associated with the Managed Switch, a user authentication notice appears in system tray. Click on the notice to continue.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 9. Enter the user name, password and the logon domain that your account belongs. 10. Click “OK” to complete the validation process. Figure 4-11-21 Security This section is to control the access of the Managed Switch, and includes the user access and management control.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-12-1 Port Limit Control Configuration Overview page screenshot 206
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: System Configuration Object Description • Mode Indicates if Limit Control is globally enabled or disabled on the switchstack. If globally disabled, other modules may still use the underlying functionality, but limit checks and corresponding actions are disabled. • Aging Enabled If checked, secured MAC addresses are subject to aging as discussed under Aging Period.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Trap & Shutdown: If Limit + 1 MAC addresses is seen on the port, both the "Trap" and the "Shutdown" actions described above will be taken. • State This column shows the current state of the port as seen from the Limit Control's point of view. The state takes one of four values: Disabled: Limit Control is either globally disabled or disabled on the port. Ready: The limit is not yet reached. This can be shown for all actions.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • SNMP Indicates the host can access the switch from SNMP interface that the host IP address matched the entry. • TELNET/SSH Indicates the host can access the switch from TELNET/SSH interface that the host IP address matched the entry. Buttons : Click to add a new access management entry. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual HTTPs Configure HTTPS on this page. The HTTPS Configuration screen is shown Figure 4-12-4. Figure 4-12-4 HTTPS Configuration screen page screenshot The page includes the following fields: Object Description • Mode Indicates the HTTPS mode operation. Possible modes are: Enabled: Enable HTTPS mode operation. Disabled: Disable HTTPS mode operation. • Automatic Redirect Indicates the HTTPS redirect mode operation.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Port Security Status This page shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly from the user modules. When a user module has enabled port security on a port, the port is set-up for software-based learning.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: User Module Legend The legend shows all user modules that may request Port Security services. Object Description • User Module Name The full name of a module that may request Port Security services. • Abbr A one-letter abbreviation of the user module. This is used in the Users column in the port status table.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Security Detail This page shows the MAC addresses secured by the Port Security module. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the port is set-up for software-based learning.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-12-8 DHCP Snooping Configuration screen page screenshot 214
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Snooping Mode Indicates the DHCP snooping mode operation. Possible modes are: Enabled: Enable DHCP snooping mode operation. When DHCP snooping is enabled, the requested DHCP messages will be forwarded to trusted ports and only allowed reply packets from trusted ports. Disabled: Disable DHCP snooping mode operation. • Port Mode Indicates the DHCP snooping port mode.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Rx and Tx Discover The number of discover (option 53 with value 1) packets received and transmitted. • Rx and Tx Offer The number of offer (option 53 with value 2) packets received and transmitted. • Rx and Tx Request The number of request (option 53 with value 3) packets received and transmitted.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual IP Source Guard Configuration IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host. This page provides IP Source Guard related configuration. The IP Source Guard Configuration screen is shown Figure 4-12-10.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Mode of IP Source Guard Configuration Enable the Global IP Source Guard or disable the Global IP Source Guard. All configured ACEs will be lost when the mode is enabled. • Port Mode Configuration Specify IP Source Guard is enabled on which ports. Only when both Global Mode and Port Mode on a given port are enabled, IP Source Guard is enabled on this given port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual ARP Inspection ARP Inspection is a secure feature. Several types of attacks can be launched against a host or devices connected to Layer 2 networks by "poisoning" the ARP caches. This feature is used to block such attacks. Only valid ARP requests and responses can go through DUT. This page provides ARP Inspection related configuration. The ARP Inspection Configuration screen is shown Figure 4-12-12.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Mode of ARP Inspection Configuration • Port Mode Configuration Enable the Global ARP Inspection or disable the Global ARP Inspection. ARP Inspection is only enabled on this given port, when both Global Mode and Port Mode on a given port are enabled. Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to add a new entry. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Address Table Switching of frames is based upon the DMAC address contained in the frame. The Managed Switch builds up a table that maps MAC addresses to switch ports for knowing which ports the frames should go to (based upon the DMAC address in the frame ). This table contains both static and dynamic entries.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-13-2 Static MAC Table Configuration page screenshot The page includes the following fields: Object Description • Delete Check to delete the entry. It will be deleted during the next save. • VLAN ID The VLAN ID for the entry. • MAC Address The MAC address for the entry. • Port Members Checkmarks indicate which ports are members of the entry. Check or uncheck as needed to modify the entry. Buttons : Click to add new entry.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual MAC Address Table Status Dynamic MAC Table Entries in the MAC Table are shown on this page. The MAC Table contains up to 8192 entries, and is sorted first by VLAN ID, then by MAC address. The MAC Address Table screen is shown Figure 4-13-3. Figure 4-13-3 MAC Address Table Status Navigating the MAC Table Each page shows up to 999 entries from the MAC table, default being 20, selected through the "entries per page" input field.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals. : Refreshes the displayed table starting from the "Start from MAC address" and "VLAN" input fields. : Flushes all dynamic entries. : Updates the table starting from the first entry in the MAC Table, i.e. the entry with the lowest VLAN ID and MAC address. : Updates the table, starting with the entry after the last entry currently displayed.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Dynamic ARP Inspection Table Entries in the Dynamic ARP Inspection Table are shown on this page. The Dynamic ARP Inspection Table contains up to 1024 entries, and is sorted first by port, then by VLAN ID, then by MAC address, and then by IP address. The Dynamic ARP Inspection Table screen is shown Figure 4-13-5.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Dynamic IP Source Guard Table Entries in the Dynamic IP Source Guard Table are shown on this page. The Dynamic IP Source Guard Table is sorted first by port, then by VLAN ID, then by IP address, and then by IP mask. The Dynamic IP Source Guard Table screen is shown Figure 4-13-6.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual LLDP Link Layer Discovery Protocol Link Layer Discovery Protocol (LLDP) is used to discover basic information about neighboring devices on the local broadcast domain. LLDP is a Layer 2 protocol that uses periodic broadcasts to advertise information about the sending device. Advertised information is represented in Type Length Value (TLV) format according to the IEEE 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: LLDP Parameters Object Description • Tx Interval The switch is periodically transmitting LLDP frames to its neighbors for having the network discovery information up-to-date. The interval between each LLDP frame is determined by the Tx Interval value. Valid values are restricted to 5 32768 seconds.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Port Descr CDP TLV "Port ID" is mapped into the LLDP "Port ID" field. CDP TLV "Version and Platform" is mapped into the LLDP "System Description" field. Both the CDP and LLDP supports "system capabilities", but the CDP capabilities cover capabilities that are not part of the LLDP. These capabilities are shown as "others" in the LLDP neighbors table.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-14-2 LLDPMED Configuration page screenshot The page includes the following fields: Fast start repeat count Object Description • Fast start repeat count Rapid startup and Emergency Call Service Location Identification Discovery of endpoints is a critically important aspect of VoIP systems in general.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Coordinates Location Object Description • Latitude Latitude SHOULD be normalized to within 0-90 degrees with a maximum of 4 digits. It is possible to specify the direction to either North of the equator or South of the equator. Longitude SHOULD be normalized to within 0-180 degrees with a maximum of 4 digits. It is possible to specify the direction to either East of the prime meridian or West of the prime meridian.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • House no.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual the same Network Connectivity Device may advertise different sets of policies, based on the authenticated user identity or port configuration. It should be noted that LLDP-MED is not intended to run on links other than between Network Connectivity Devices and Endpoints, and therefore does not need to advertise the multitude of network policies that frequently run on an aggregated link interior to the LAN.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Policies Configuration Every port may advertise a unique set of network policies or different attributes for the same network policies, based on the authenticated user identity or port configuration. Object Description • Port The port number for which the configuration applies. • Policy ID The set of policies that shall apply for a given port.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • LLDP-MED Capabilities • Application Type also support all aspects of TIA-1057 applicable to Generic Endpoints (Class I), and any LLDP-MED Endpoint Device claiming compliance as a Communication Device (Class III) will also support all aspects of TIA-1057 applicable to both Media Endpoints (Class II) and Generic Endpoints (Class I).
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual with buffering would not be an intended use of this application type. Video Signaling - for use in network topologies that require a separate policy for the video signaling than for the video media. Policy Unknown: The network policy for the specified application type is currently unknown. Defined: The network policy is defined. TAG is indicating whether the specified application type is using a tagged or an untagged VLAN.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Management Address 2. Repeater 3. Bridge 4. WLAN Access Point 5. Router 6. Telephone 7. DOCSIS cable device 8. Station only 9. Reserved When a capability is enabled, the capability is followed by (+). If the capability is disabled, the capability is followed by (-). Management Address is the neighbor unit's address that is used for higher layer entities to assist the discovery by the network management.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Global Counters Object Description • Neighbor entries were last changed at Shows the time for when the last entry was last deleted or added. It is also shows the time elapsed since last change was detected. • Total Neighbors Entries Added Shows the number of new entries added since switch reboot. • Total Neighbors Entries Deleted Shows the number of new entries deleted since switch reboot.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Network Diagnostics This section provide the Physical layer and IP layer network diagnostics tools for troubleshooting. The diagnostic tools are designed for network manager to help them quickly diagnose problems between point to point and better service customers. Use the Diagnastics menu items to display and configure basic administrative details of the Managed Switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Be sure the target IP Address is within the same network subnet of the switch, or you had setup the correct gateway IP address. Buttons : Click to transmit ICMP packets. IPv6 Ping This page allows you to issue ICMPv6 PING packets to troubleshoot IPv6 connectivity issues. After you press “Start”, 5 ICMPv6 packets are transmitted, and the sequence number and roundtrip time are displayed upon reception of a reply.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Remote IP Ping Test This page allows you to issue ICMP PING packets to troubleshoot IP connectivity issues on special port. After you press “Test”, 5 ICMP packets are transmitted, and the sequence number and roundtrip time are displayed upon reception of a reply. The page refreshes automatically until responses to all packets are received, or until a timeout occurs. The ICMP Ping screen is shown Figure 4-15-3.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Port The logical port for the settings. • Remote IP Address The destination IP Address. • Ping Size The payload size of the ICMP packet. Values range from 8 bytes to 1400 bytes. • Result Display the ping result. Cable Diagnostics This page is used for running the Cable Diagnostics. Press to run the diagnostics. This will take approximately 5 seconds.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual The page includes the following fields: Object Description • Port The port where you are requesting Cable Diagnostics. • Description Display per port description. • Cable Status Port: Port number. Pair: The status of the cable pair. Length: The length (in meters) of the cable pair. Buttons : Download the diagnostics. : Click to run the diagnostics. : Print out the cable diagnostics information.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Power over Ethernet Powered Device Voice over IP phones Enterprise can install POE VoIP Phone, ATA and other Ethernet/non-Ethernet end-devices to the central where UPS is installed for un-interrupt power system and power control system.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual In this mode the Maximum Power fields have no effect. Allocation mode In this mode the user allocates the amount of power that each port may reserve. The allocated/reserved power for each port/PD is specified in the Maximum Power fields. The ports are shut down when total reserved powered exceeds the amount of power that the power supply can deliver. In this mode the port power is not turned on if the PD requests more power the available.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. For IFS GE-DSSG-244-Poe, the total PoE power reservation from Port-1~24 is up to 220W For NS3601-24P/4S, the total PoE power reservation from Port-1~24 is up to 380W PD Classifications A PD may be classified by the PSE based on the classification information provided by the PD.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Port Configuration This section allows the user to inspect and configure the current PoE port settings, screen is shown Figure 4-16-3. Figure 4-16-3 Power over Ethernet Configuration screenshot The page includes the following fields: Object Description • PoE Mode There are three modes for PoE mode. Enable: enable PoE function.. Disable: disable PoE function. Schedule: enable PoE function in schedule mode. Indicates the schedule profile mode.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Power Allocation It limits the port PoE supply. Per port maximum value must be less than 15.4 watts, and total ports values must be less than the Power Reservation value if current PoE mode is 802.3af. Once power overload is detected, the port will automatically shut down and keep on detection mode until PD’s power consumption is lower than the power limit value Buttons : Click to save changes.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Local Port This is the logical port number for this row. • PD Class • Power Used [W] Display the class of the PD attached to the port, as established by the classification process. Class 0 is the default for PDs. The PD is classified based on power. The classification of the PD is the maximum power that the PD will draw across all input voltages and operational modes.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual PoE Schedule This page allows the user to define PoE schedule. The screen is shown Figure 4-16-5. Figure 4-16-5 PoE Schedule screenshot The page includes the following fields Object Description • Profile Set the schedule profile mode. Possible porifles are: Profile1 / Profile2 / Profile3 / Profile4 • Week Day Show the PoE schedule mode usage of week day. • Start Hour Allow choosing specific hour for PoE port enable and feed PoE power.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual : Click to save changes. : Check to delete the entry. LLDP Neighbor Power Over Ethernet This page provides a status overview for all LLDP PoE neighbors. The displayed table contains a row for each port on which an LLDP PoE neighbor is detected. The columns hold the following information: The screen is shown Figure 4-16-6.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 4.17 Stack Using Stacking, it is possible to connect a number of switches together in a stack, which behaves as a single switch as seen from outside the stack. Two types of stack topologies are supported: Ring topology Chain topology (same as a disconnected ring) Multiple IFS series devices may be connected together to constitute a ring or chain stack topology using the STX / 5Gbps ports as interconnect links.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-17-2 Ring Stack topology Back-to-Back Stack : Two switches interconnected on both stacking ports.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 5. 6. (see "Replacing a Switch" above). Deleting a switch will remove any configuration pertaining to it. Deleting an active switch will leave it with an unassigned Switch ID until rebooted or manually assigning a Switch ID. 4.17.1.2 Master Election Within a managed stack, one master switch (or just "master") must be elected. Any switch not being master is a slave switch (or just "slave").
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-17-5 True Ring Topology Stack Configuration This page is used for configure the stack, include assign Switch ID, master priority and display the current stack member information. The screen is shown Figure 4-17-6appears.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Object Description • Delete Deletes this switch from the stack configuration. • Stack Member The MAC address of the switch. • Switch ID The Switch ID (1-16) assigned to a switch. For more information, see description of Switch IDs Assigning and Swapping Switch IDs When a switch is added to the stack, a Switch ID is automatically assigned to the switch.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Start Master Election By checking this option, the "Save" operation will also start the master election process. This is done by clicking "Start Master Election", followed by "Save". This causes the first two criteria to be ignored, thereby basing master election only on master priority and MAC address. When master election is enforced, the first two criteria are ignored for a period of 10-15 seconds.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual • Last Topology Change The time of the last topology change in the stack. • Master Switch The MAC address of the current stack master switch. • Last Master Change The time of the last master change in the stack. Stack List For each switch in the stack, the following information is shown: The MAC address, Switch ID, product name and version, and master election state. The master election state is normally "No".
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SWITCH ID MASTER LED Port Link status Stack Port Link status Figure 4-17-10 Port State Overview page screenshot Stack Example Stacking function is convenient for administrator to manage multiple switches by single IP. Basically, you got to have min. 2 units. The IFS Switch supports auto stack configuration.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-17-12 Stack Configuration Step 5: We wish to make the IFS switch with MAC “00-30-4f-7b-9c-b2” / Switch ID=2 to become the Stack Master and swap the Switch ID to 1. Select the switch with ID=1 and assign a new ID for this unit, for example: ID=4 Figure 4-17-13 Assing new ID for current master Select the target switch and set up with lower priority “1”, also re-assing the Switch ID=1 for it.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-17-14 Assing lower priority value fo the target switch Reflash the web browser, the switch with MAC address “00-30-4f-7b-9e-b2” become the stack master now. Figure 4-17-15 The result after master election Step 6: After the Stack Master and Members have been configured, any switch in the stack can be managed from the web agent by choosing the desired Member ID from the Switch drop down menu.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 4-17-16 To manage the member switch Slave switch IP will be covered by Master one, and disappear temporarily. The slave IP address can be the same as Master IP address. Thus, if master switch is malfunction, you can still access the other switch by same IP address.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual COMMAND LINE INTERFACE Accessing the CLI When accessing the management interface for the switch over a direct connection to the server’s console port, or via a Telnet connection, the switch can be managed by entering command keywords and parameters at the prompt. Using the switch's command-line interface (CLI) is very similar to entering commands on a UNIX system. This chapter describes how to use the Command Line Interface (CLI).
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Configure IP address The IFS Managed Switch is shipped with default IP address as following. IP Address: 192.168.0.100 Subnet Mask: 255.255.255.0 To check the current IP address or modify a new IP address for the Switch, please use the procedures as follow: Show the current IP address 1. On ”Switch/> ” prompt, enter “ip configuration”. 2. The screen displays the current IP address, Subnet Mask and Gateway. As show in Figure 5-2.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Figure 5-3 Set IP address screen 4. Repeat Step 1 to check if the IP address is changed. If the IP address is successfully configured, the Managed Switch will apply the new IP address setting immediately. You can access the Web interface of IFS Managed Switch through the new IP address. If you do not familiar with console command or the related parameter, enter “help” anytime in console to get the help description.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Command Line Mode The CLI groups all the commands in appropriate modes according to the nature of the command. A sample of the CLI command modes are described below. Each of the command modes supports specific software commands.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual System Command System Configuration Description: Show system configuration.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: : System contact string. Use 'clear' or "" to clear the string. No blank or space characters are permitted as part of a contact. (only in CLI) Default Setting: empty Example: To set device contact: Switch/>System contact IFS-Test System Location Description: Set or show the system location. Syntax: System Location [] Parameters: : System location string.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Default Setting: SWITCH Example: To change CLI title: Switch/>system prompt IFS GE-DSSG-244 IFS-24040/> System Reboot Description: Reboot the system. Syntax: System Reboot Example: To reboot device without changing any of the settings: Switch/>system reboot System Restore Default Description: Restore factory default configuration.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: : System log ID or range (default: All entries) all : Show all levels (default) info : Show informations warning : Show warnings error : Show errors clear : Clear log Example: To show system log: Switch/>system log Number of entries: Info :2 Warning: 0 Error : 0 All :2 ID ---- Level Time Message ------ ------------------------- ------1 Info - Switch just made a cold boot.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Switch/> Stack Master Reelect Description: Force master reelection (ignoring master time). Syntax: Stack Master Reelect Example: Force master reelection. Switch/>stack master reelect Switch/> Stack Select Description: Set or show the selected switch ID. Syntax: Stack Select [|all] Parameters: |all: Switch ID (1-16) or all switch Default Setting: Switch ID: All Example: Select the switch ID.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: : Switch ID (1-16) Example: Delete stack SID 10. Switch/>stack sid delete 10 Switch/> Stack SID Assign Description: Assign SID and associated configuration to switch. SID must be unassigned, switch must be present and switch must not already be assigned to a SID.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual IP DHCP Description: Set or show the DHCP client mode. Syntax: IP DHCP [enable|disable] Parameters: enable : Enable or renew DHCP client disable: Disable DHCP client Default Setting: Disable Example: Disable DHCP sever: SWITCH/>ip dhcp disable IP Setup Description: Set or show the IP setup. Syntax: IP Setup [] [] [] [] Parameters: : IP address (a.b.c.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SWITCH/>ip ping 192.168.0.21 PING server 192.168.0.21 60 bytes from 192.168.0.21: icmp_seq=0, time=0ms 60 bytes from 192.168.0.21: icmp_seq=1, time=0ms 60 bytes from 192.168.0.21: icmp_seq=2, time=0ms 60 bytes from 192.168.0.21: icmp_seq=3, time=10ms 60 bytes from 192.168.0.21: icmp_seq=4, time=0ms Sent 5 packets, received 5 OK, 0 bad IP DNS Description: Set or show the DNS server address.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Default Setting: disable Example: Enable IPv6 autoconfig function: SWITCH/>ip ipv6 autoconfig enable IPv6 Setup Description: Set or show the IPv6 setup. Syntax: IP IPv6 Setup [] [] [] [] Parameters: : IPv6 address is in 128-bit records represented as eight fields of up to four hexadecimal digits with a colon separates each field (:). For example, four hexadecimal digits with a colon separates each field (:).
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Example: SWITCH/>ip ipv6 ping 2001::0002 PING6 server 2001::2 68 bytes from 2001::2: icmp_seq=0, time=0ms 68 bytes from 2001::2: icmp_seq=1, time=0ms 68 bytes from 2001::2: icmp_seq=2, time=0ms 68 bytes from 2001::2: icmp_seq=3, time=0ms 68 bytes from 2001::2: icmp_seq=4, time=0ms Sent 5 packets, received 5 OK, 0 bad IP NTP Configuration Description: Show NTP configuration.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual IP NTP Server Add Parameters: : The server index (1-5) : IP host address (a.b.c.d) or a host name string Example: To add NTP server: SWITCH/>ip ntp server add 1 60.249.136.151 IP NTP Server IPv6 Add Description: Add NTP server IPv6 entry. Syntax: IP NTP Server Ipv6 Add Parameters: : The server index (1-5) : IPv6 server address.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: : Port list or 'all', default: All ports up : Show ports, which are up down : Show ports, which are down (default: Show all ports) Example: Display port1~4 status SWITCH/>port configuration 1-4 Port Configuration: =================== Port ---1 2 3 4 State Mode ------------Enabled Auto Enabled Auto Enabled Auto Enabled Auto Flow Control MaxFrame Power -------------------------Disabled 9600 Enabled Disabled 9600 Enabled Disabled
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Disable Example: Enable flow control function for port1 SWITCH/>port flow control 1 enable Port State Description: Set or show the port administrative state.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual actiphy: Enable ActiPHY power control dynamic: Enable Dynamic power control Default Setting: Enable Example: Disable port power function for port1-4 SWITCH/>port power 1-4 disable Port SFP Description: Show SFP port information.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: : Port list or 'all', default: All ports : The command parameter takes the following values: clear : Clear port statistics packets : Show packet statistics bytes : Show byte statistics errors : Show error statistics discards : Show discard statistics filtered : Show filtered statistics low : Show low priority statistics normal : Show normal priority statistics medium : Show medium priority statistics high : Show high prio
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto MAC Add Description: Add MAC address table entry.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: : MAC address (xx-xx-xx-xx-xx-xx) : VLAN ID (1-4095), default: 1 Example: Lookup state of Mac address 00-30-4F-01-01-02 SWITCH/>mac lookup 00-30-4f-01-01-02 MAC Age Time Description: Set or show the MAC address age timer.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Parameters: : Maximum number of MAC addresses 1-8192, default: Show all addresses : First MAC address (xx-xx-xx-xx-xx-xx), default: MAC address zero : First VLAN ID (1-4095), default: 1 Example: Show all of MAC table SWITCH/>mac dump Type VID MAC Address -----------------------Static 1 00-30-00-33-22-55 Static 1 00-30-4f-24-04-d1 Static 1 33-33-ff-24-04-d1 Static 1 33-33-ff-a8-00-64 Dynamic 1 40-61-86-04-18-69 Static 1 ff-ff-ff
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual MAC Flush Description: Flush all learned entries. Syntax: MAC Flush VLAN Configuration Command VLAN Configuration Description: Show VLAN configuration. Syntax: VLAN Configuration [] Parameters: : Port list or 'all', (default: All ports) Example: Show VLAN status of port1 SWITCH/>vlan configuration 1 VLAN Configuration: =================== Mode : IEEE 802.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual VLAN Frame Type Description: Set or show the port VLAN frame type.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual SWITCH/>vlan mode portbased VLAN Link Type Description: Set or show the port VLAN link type.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Example: Set out layer VLAN tag Ethernet type for port 10 in man Ethernet type SWITCH/>vlan ethtype 10 man VLAN Add Description: Add or modify VLAN entry. Syntax: VLAN Add [] Parameters: : VLAN ID (1-4095) : Port list or 'all', default: All ports Default Setting: 1 Example: Add port17 to port24 in VLAN10 SWITCH/>vlan add 10 17-24 VLAN Delete Description: Delete VLAN entry.
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual Example: Show VLAN status SWITCH/>vlan lookup VID Ports ---- ----1 1-24 200 None VLAN Status Description: VLAN Port Configuration Status.
User’s Manual of NS3601-24P/4S Private VLAN Configuration Command PVLAN Configuration Description: Show Private VLAN configuration.
User’s Manual of NS3601-24P/4S Series Example: Add port17 to port24 in PVLAN10 SWITCH/>pvlan add 10 17-24 PVLAN Delete Description: Delete Private VLAN entry. Syntax: PVLAN Delete Parameters: : Private VLAN ID Example: Delete PVLAN10 SWITCH/>pvlan delete 10 PVLAN Lookup Description: Lookup Private VLAN entry.
User’s Manual of NS3601-24P/4S Series Security Command Security Switch User Configuration Description: Show users configuration. Syntax: Security Switch Users Configuration Default Setting: User Privilege Name admin 15 guest 5 Example: Enable isolate for port10 SWITCH/>security switch user configuration Users Configuration: ==================== User Name -------------------------------admin guest Privilege Level ---------------15 5 Security Switch User Add Description: Add or modify users entry.
User’s Manual of NS3601-24P/4S Series SWITCH/>security switch users delete user Security Switch Privilege Level Configuration Description: Show privilege configuration.
User’s Manual of NS3601-24P/4S Series SWITCH/>security switch privilege level group mvr 15 15 15 15 Security Switch Privilege Level Current Description: Show the current privilege level. Syntax: Security Switch Privilege Level Current Default Setting: 15 Security Switch Auth Configuration Description: Show Auth configuration. Syntax: Security Switch Auth Configuration Default Setting: Authentication Method: local Fallback: disable Example: Show authentication configuration.
User’s Manual of NS3601-24P/4S Series Default Setting: Authentication Method: local Fallback: disable Example: Use RADIUS authentication method for telnet. SWITCH/>security switch auth method telnet radius enable Security Switch SSH Configuration Description: Show SSH configuration. Syntax: Security Switch SSH Configuration Example: Show SSH configuration.
User’s Manual of NS3601-24P/4S Series SWITCH/>security switch https configuration HTTPS Configuration: ==================== HTTPS Mode : Disabled HTTPS Redirect Mode : Disabled Security Switch HTTPs Mode Description: Set or show the HTTPS mode. Syntax: Security Switch HTTPS Mode [enable|disable] Parameters: enable : Enable HTTPs disable: Disable HTTPs (default: Show HTTPs mode) Default Setting: disable Example: Enable HTTPs function.
User’s Manual of NS3601-24P/4S Series SWITCH/>security switch access configuration Access Mgmt Configuration: ========================== System Access Mode : Disabled System Access number of entries: 0 Security Switch Access Mode Description: Set or show the access management mode.
User’s Manual of NS3601-24P/4S Series IPv6 address is in 128-bit records represented as eight fields of up to four hexadecimal digits with a colon separates each field (:). For example, 'fe80::215:c5ff:fe03:4dc7'. The symbol '::' is a special syntax that can be used as a shorthand way of representing multiple 16-bit groups of contiguous zeros; but it can only appear once. It also used a following legally IPv4 address. For example,'::192.1.2.34'. : End IPv6 address.
User’s Manual of NS3601-24P/4S Series Clear access management entry. SWITCH/>security switch access clear Security Switch Access Statistics Description: Show or clear access management statistics. Syntax: Security Switch Access Statistics [clear] Parameters: clear: Clear access management statistics Default Setting: disable Example: Show access management statistics.
User’s Manual of NS3601-24P/4S Series SNMPv3 Engine ID : 800007e5017f000001 SNMPv3 Communities Table: Idx Community Source IP --- -------------------------------- --------------- --------------1 public 0.0.0.0 2 private 0.0.0.0 Source Mask 0.0.0.0 0.0.0.
User’s Manual of NS3601-24P/4S Series Security Switch SNMP Version Description: Set or show the SNMP protocol version. Syntax: Security Switch SNMP Version [1|2c|3] Parameters: 1 : SNMP version 1 2c: SNMP version 2c 3 : SNMP version 3 (default: Show SNMP version) Default Setting: 2c Example: Set SNMP in version 3. SWITCH/>security switch snmp version 3 Security Switch SNMP Read Community Description: Set or show the community string for SNMP read access.
User’s Manual of NS3601-24P/4S Series Security Switch SNMP Trap Mode Description: Set or show the SNMP trap mode. Syntax: Security Switch SNMP Trap Mode [enable|disable] Parameters: enable : Enable SNMP traps disable: Disable SNMP traps (default: Show SNMP trap mode) Default Setting: disable Example: Enable SNMP trap mode. SWITCH/>security switch snmp trap mode enable Security Switch SNMP Trap Version Description: Set or show the SNMP trap protocol version.
User’s Manual of NS3601-24P/4S Series Security Switch SNMP Trap Destination Description: Set or Show the SNMP trap destination address. Syntax: Security Switch SNMP Trap Destination [] Parameters: : IP host address (a.b.c.d) or a host name string Example: Set SNMP trap destination address for 192.168.0.20 SWITCH/>security switch snmp trap destination 192.168.0.20 Security Switch SNMP Trap IPv6 Destination Description: Set or Show the SNMP trap destination IPv6 address.
User’s Manual of NS3601-24P/4S Series Syntax: Security Switch SNMP Trap Link-up [enable|disable] Parameters: enable : Enable SNMP trap link-up and link-down disable: Disable SNMP trap link-up and link-down (default: Show SNMP trap link-up and link-down mode) Default Setting: enable Example: Disable SNMP trap link-up SWITCH/>security switch snmp trap link-up disable Security Switch SNMP Trap Inform Mode Description: Set or show the SNMP trap inform mode.
User’s Manual of NS3601-24P/4S Series Syntax: Security Switch SNMP Trap Inform Retry Times [] Parameters: : SNMP trap inform retransmited times (0-255) (default: Show SNMP trap inform retry times) Default Setting: 5 Example: Set SNMP trap inform retry times in 10. SWITCH/>security switch snmp trap inform retry times 10 Security Switch SNMP Trap Probe Security Engine ID Description: Show SNMP trap security engine ID probe mode.
User’s Manual of NS3601-24P/4S Series (default: Show SNMP trap security name) Example: Set the SNMP trap security name SWITCH/>security switch snmp trap security name 12345678 Security Switch SNMP Engine ID Description: Set or show SNMPv3 local engine ID.
User’s Manual of NS3601-24P/4S Series Security Switch SNMP Community Lookup Description: Lookup SNMPv3 community entry. Syntax: Security Switch SNMP Community Lookup [] Parameters: : entry index (1-64) Example: Lookup SNMPv3 community entry SWITCH/>security switch snmp community lookup Idx Community Source IP --- ---------------------------------------------1 public 192.168.0.20 2 private 0.0.0.0 Source Mask --------------255.255.255.0 0.0.0.
User’s Manual of NS3601-24P/4S Series Security Switch SNMP User Changekey Description: Change SNMPv3 user password.
User’s Manual of NS3601-24P/4S Series Security Switch SNMP Group Delete Description: Delete SNMPv3 group entry. Syntax: Security Switch SNMP Group Delete Parameters: : entry index (1-64) Example: Delete SNMPv3 group entry SWITCH/>security switch snmp group delete 1 Security Switch SNMP Group Lookup Description: Lookup SNMPv3 group entry.
User’s Manual of NS3601-24P/4S Series Delete SNMPv3 view entry. Syntax: Security Switch SNMP View Delete Parameters: : entry index (1-64) Example: Delete SNMPv3 view entry SWITCH/>security switch snmp view delete 3 Security Switch SNMP View Lookup Description: Lookup SNMPv3 view entry.
User’s Manual of NS3601-24P/4S Series Security Switch SNMP Access Delete Description: Delete SNMPv3 access entry. Syntax: Security Switch SNMP Access Delete Parameters: : entry index (1-64) Example: Delete SNMPv3 access entry SWITCH/>security switch snmp access delete 3 Security Switch SNMP Access Lookup Description: Lookup SNMPv3 access entry.
User’s Manual of NS3601-24P/4S Series 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 ------------------------------------------------------------------------- No users No users No users No users No users No users No users No users No users No users No users No users No users No users No users No users No users No users No users No users No users No users No users No users 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Security Network Psec Port Description: Show MAC Addresses learned by
User’s Manual of NS3601-24P/4S Series ========================================== Mode : Disabled Aging : Disabled Age Period: 3600 Port Mode ----------1 Disabled 2 Disabled 3 Disabled 4 Disabled 5 Disabled 6 Disabled 7 Disabled 8 Disabled 9 Disabled 10 Disabled 11 Disabled 12 Disabled 13 Disabled 14 Disabled 15 Disabled 16 Disabled 17 Disabled 18 Disabled 19 Disabled 20 Disabled 21 Disabled 22 Disabled 23 Disabled 24 Disabled Limit ----4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 Action --------------N
User’s Manual of NS3601-24P/4S Series disable : Disable aging (default: Show current enabledness of aging) Default Setting: disable Example: Enable limit aging SWITCH/>security network limit aging enable Security Network Limit Agetime Description: Time in seconds between check for activity on learned MAC addresses.
User’s Manual of NS3601-24P/4S Series : Port list or 'all', default: All ports : Max. number of MAC addresses on this port (default: Show current limit) Default Setting: 4 Example: Set limit in 5 SWITCH/>security network limit limit 1-24 5 Security Network Limit Action Description: Set or show the action involved with exceeding the limit.
User’s Manual of NS3601-24P/4S Series Parameters: : Port list or 'all', default: All ports Example: Show 802.1X configuration of port 1 SWITCH/>security network nas configuration 1 802.1X Configuration: ===================== Mode : Disabled Reauth. : Disabled Reauth. Period : 3600 EAPOL Timeout : 30 Age Period : 300 Hold Time : 10 RADIUS QoS : Disabled RADIUS VLAN : Disabled Guest VLAN : Disabled Guest VLAN ID :1 Max.
User’s Manual of NS3601-24P/4S Series (default: Show 802.1X state) Default Setting: none Example: Show the port 1 security state. SWITCH/>security network nas state 1 Port Admin State ---- -----------------1 Force Authorized Port State --------------------Link Down Last Source ----------------- Security Network NAS Reauthentication Description: Set or show Reauthentication enabledness.
User’s Manual of NS3601-24P/4S Series Parameters: : Time between EAPOL retransmissions (1-65535 seconds) (default: Show current EAPOL retransmission timeout) Default Setting: 30 Example: Set the time between EAPOL retransmissions for 100sec. SWITCH/>security network nas eapoltimeout 100 Security Network NAS Agetime Description: Time in seconds between check for activity on successfully authenticated MAC addresses.
User’s Manual of NS3601-24P/4S Series : Select the per-port RADIUS-assigned QoS setting (default: Show current per-port RADIUS-assigned QoS enabledness) enable : Enable RADIUS-assigned QoS either globally or on one or more ports disable: Disable RADIUS-assigned QoS either globally or on one or more ports (default: Show current RADIUS-assigned QoS enabledness) Default Setting: disable Example: Enable NAS RADIUS QoS SWITCH/>security network nas radius_qos enable Security Network NAS RADIUS_VLAN D
User’s Manual of NS3601-24P/4S Series enable :The Guest VLAN can be entered even if an EAPOL frame has been received during the lifetime of the port (default: Show current setting) Default Setting: disable Example: Enable NAS guest VLAN SWITCH/>security network nas guest_vlan enable Security Network NAS Authenticate Description: Refresh (restart) 802.1X authentication process.
User’s Manual of NS3601-24P/4S Series Security Network ACL Configuration Description: Show ACL Configuration. Syntax: Security Network ACL Configuration [] Parameters: : Port list or 'all', default: All ports Example: Show ACL Configuration.
User’s Manual of NS3601-24P/4S Series Security Network ACL Action Description: Set or show the ACL port default action.
User’s Manual of NS3601-24P/4S Series 1 Example: Set rate limit value in 1024k for port 1 SWITCH/>security network acl rate 1 1024k Security Network ACL Add Description: Add or modify Access Control Entry (ACE). If the ACE ID parameter is specified and an entry with this ACE ID already exists, the ACE will be modified. Otherwise, a new ACE will be added. If the ACE ID is not specified, the next available ACE ID will be used.
User’s Manual of NS3601-24P/4S Series : Shut down ingress port: shut|shut_disable Security Network ACL Delete Description: Delete ACE. Syntax: Security Network ACL Delete Parameters: : ACE ID (1-128) Example: Delete ACE 1 SWITCH/>security network acl delete 1 Security Network ACL Lookup Description: Show ACE, default: All ACEs.
User’s Manual of NS3601-24P/4S Series (default : Shows the combined status) Example: Show ACL status. SWITCH/>security network acl status Security Network DHCP Relay Configuration Description: Show DHCP relay configuration. Syntax: Security Network DHCP Relay Configuration Example: Show DHCP relay configuration.
User’s Manual of NS3601-24P/4S Series : IP address (a.b.c.d), default: Show IP address Default Setting: null Example: Set DHCP relay server in 192.168.0.20 SWITCH/>security network dhcp relay server 192.168.0.20 Security Network DHCP Relay Information Mode Description: Set or show DHCP relay agent information option mode.
User’s Manual of NS3601-24P/4S Series Show or clear DHCP relay statistics. Syntax: Security Network DHCP Relay Statistics [clear] Parameters: clear: Clear DHCP relay statistics Example: Show DHCP relay statistics. SWITCH/>security network dhcp relay statistics Security Network DHCP Snooping Configuration Description: Show DHCP snooping configuration.
User’s Manual of NS3601-24P/4S Series Security Network DHCP Snooping Mode [enable|disable] Parameters: enable : Enable DHCP snooping mode. When enable DHCP snooping mode operation, the request DHCP messages will be forwarded to trusted ports and only allowed reply packets from trusted ports.
User’s Manual of NS3601-24P/4S Series Rx Lease Query: Rx Lease Unassigned: Rx Lease Unknown: Rx Lease Active: 0 Tx Lease Query: 0 Tx Lease Unassigned: 0 Tx Lease Unknown: 0 Tx Lease Active: Security Network IP Source Guard Configuration Description: Show IP source guard configuration. Syntax: Security Network IP Source Guard Configuration Example: Show IP source guard configuration.
User’s Manual of NS3601-24P/4S Series enable : Enable IP Source Guard disable: Disable IP Source Guard Default Setting: disable Example: Enable IP source guard mode SWITCH/>security network ip source guard mode enable Security Network IP Source Guard Port Mode Description: Set or show the IP Source Guard port mode.
User’s Manual of NS3601-24P/4S Series : Port list or 'all', default: All ports add : Add new port IP source guard static entry delete : Delete existing port IP source guard static entry : VLAN ID (1-4095) : IP address (a.b.c.d), IP address allowed for doing ARP request : IP mask (a.b.c.d), IP mask for allowed IP address Example: Add IP source guard static entry. SWITCH/>security network ip source guard entry 1 add 1 192.168.0.20 255.255.255.
User’s Manual of NS3601-24P/4S Series Security Network ARP Inspection Port Mode Description: Set or show the ARP Inspection port mode.
User’s Manual of NS3601-24P/4S Series Security AAA Configuration Description: Show Auth configuration. Syntax: Security AAA Configuration Example: Show Auth configuration.
User’s Manual of NS3601-24P/4S Series Example: Set 30sec for server timeout SWITCH/>security aaa timeout 30 Security AAA Deadtime Description: Set or show server dead time.
User’s Manual of NS3601-24P/4S Series The server index (1-5) (default: Show RADIUS accounting server configuration) enable : Enable RADIUS accounting server disable : Disable RADIUS accounting server (default: Show RADIUS server mode) : IP host address (a.b.c.d) or a host name string : Secret shared with external accounting server. To set an empty secret, use two quotes (""). To use spaces in secret, enquote the secret. Quotes in the secret are not allowed.
User’s Manual of NS3601-24P/4S Series Spanning Tree Protocol Command STP Configuration Description: Show STP configuration. Syntax: STP Configuration Example: Show STP configuration. SWITCH/>stp cofiguration STP Configuration: ================== Protocol Version: MSTP Max Age : 20 Forward Delay : 15 Tx Hold Count :6 Max Hop Count : 20 STP Version Description: Set or show the STP Bridge protocol version.
User’s Manual of NS3601-24P/4S Series STP MaxHops Description: Set or show the MSTP Bridge Max Hop Count parameter. Syntax: STP MaxHops [] Parameters: : STP BPDU MaxHops (6-40)) Default Setting: 20Example: Set STP maximum hops in 25 SWITCH/>stp maxhops 25 STP MaxAge Description: Set or show the CIST/MSTI bridge maximum age.
User’s Manual of NS3601-24P/4S Series Parameters: : MSTP Configuration name. A text string up to 32 characters long. Use quotes (") to embed spaces in name. : Integer value Default Setting: Configuration name: MAC address Configuration rev.: 0 Example: Set MSTP configuration name and revision. SWITCH/>stp cname 9f_IFS-24040 1 STP BPDU Filter Description: Set or show edge port BPDU Filtering.
User’s Manual of NS3601-24P/4S Series : Time before error-disabled ports are reenabled (30-86400 seconds, 0 disables) (default: Show recovery timeout) Default Setting: Disable Example: Set STP recovery value in 30 sec. SWITCH/>stp recovery 30 STP Status Description: Show STP Bridge status. Syntax: STP Status [] [] Parameters: : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...
User’s Manual of NS3601-24P/4S Series MST4 MST5 MST6 MST7 128 128 128 128 Example: Set MST1 priority value in 48. SWITCH/>stp msti priority 1 48 STP MSTI Map Description: Show or clear MSTP MSTI VLAN mapping configuration. Syntax: STP Msti Map [] [clear] Parameters: : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...) Clear : Clear VID to MSTI mapping Example: Add MST1 priority value in 48. SWITCH/>stp msti priority 1 48 STP MSTI Add Description: Add a VLAN to a MSTI.
User’s Manual of NS3601-24P/4S Series STP Port Mode Description: Set or show the STP enabling for a port. Syntax: STP Port Mode [] [enable|disable] Parameters: : Port list or 'all'. Port zero means aggregations. Enable : Enable MSTP protocol Disable : Disable MSTP protocol Default: Enable Example: Disable STP function on port1 SWITCH/>stp port mode 1 disable STP Port Edge Description: Set or show the STP adminEdge port parameter.
User’s Manual of NS3601-24P/4S Series SWITCH/>stp port autoedge 1 disable STP Port P2P Description: Set or show the STP point2point port parameter.
User’s Manual of NS3601-24P/4S Series Example: Eisable STP restricted TCN on port1 SWITCH/>stp port restrictedtcn 1 enable STP Port bpduGuard Description: Set or show the bpduGuard port parameter.
User’s Manual of NS3601-24P/4S Series STP MSTI Port Configuration Description: Show the STP CIST/MSTI port configuration. Syntax: STP Msti Port Configuration [] [] Parameters: : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...
User’s Manual of NS3601-24P/4S Series Default: 128 Multicast Configuration Command IGMP Configuration Description: Show IGMP snooping configuration. Syntax: IGMP Configuration [] Parameters: : Port list or 'all', default: All ports Example: Show IGMP snooping configuration. SWITCH/>igmp configuration IGMP Mode Description: Set or show the IGMP snooping mode.
User’s Manual of NS3601-24P/4S Series Enable IGMP leave proxy SWITCH/>igmp leave proxy enable IGMP State Description: Set or show the IGMP snooping state for VLAN.
User’s Manual of NS3601-24P/4S Series disable Example: Enable the IGMP snooping fast leave port mode. SWITCH/>igmp fastleave 1 enable IGMP Throttling Description: Set or show the IGMP port throttling status. Syntax: IGMP Throttling [] [limit-group-number] Parameters: : Port list or 'all', default: All ports 0 : No limit 1~10 : Group learn limit (default: Show IGMP Port Throttling) Default Setting: unlimited Example: Set the IGMP port throttling status for port 1.
User’s Manual of NS3601-24P/4S Series enable : Enable IGMP router port disable : Disable IGMP router port (default: Show IGMP router port mode) Default Setting: disable Example: Enable IGMP snooping function for port1~4 SWITCH/>igmp router 1-4 enable IGMP Flooding Description: Set or show the IGMP snooping unregistered flood operation.
User’s Manual of NS3601-24P/4S Series Link Aggregation Command Aggregation Configuration Description: Show link aggregation configuration. Syntax: Aggr Configuration Example: SWITCH/>aggr configuration Aggregation Mode: SMAC : Enabled DMAC : Disabled IP : Enabled Port : Enabled Aggregation Add Description: Add or modify link aggregation.
User’s Manual of NS3601-24P/4S Series Aggr Lookup [] Parameters: : Aggregation ID , global: 1-2, local: 3-14 Example: Show aggregation status SWITCH/>aggr lookup 1 Aggr ID Name Type ----------- ------------1 GLAG1 Static Ports ------1-4 Aggregation Mode Description: Set or show the link aggregation traffic distribution mode.
User’s Manual of NS3601-24P/4S Series 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Auto Active Active Active Active Active Active Active Active Active Active Ac
User’s Manual of NS3601-24P/4S Series Set key1 for port1~4 SWITCH/>lacp key 1-4 1 LACP Role Description: Set or show the LACP role. Syntax: LACP Role [] [active|passive] Parameters: : Port list or 'all', default: All ports active : Initiate LACP negotiation passive: Listen for LACP packets (default: Show LACP role) Default Setting: active Example: Set passive for port1~4 SWITCH/>lacp role 1-4 passive LACP Status Description: Show LACP Status.
User’s Manual of NS3601-24P/4S Series SWITCH/>lacp statistics 1-4 Port Rx Frames ------ --------------1 0 2 0 3 0 4 0 Tx Frames --------------0 0 0 0 Rx Unknown --------------0 0 0 0 Rx Illegal ---------0 0 0 0 LLDP Command LLDP Configuration Description: Show LLDP configuration.
User’s Manual of NS3601-24P/4S Series SWITCH/>lldp mode 1 enable LLDP Optional TLV Description: Show or Set LLDP Optional TLVs.
User’s Manual of NS3601-24P/4S Series Parameters: : LLDP hold value (2-10) Default Setting: 3 Example: Set LLDP hold value in 10 SWITCH/>lldp hold 10 LLDP Delay Description: Set or show LLDP Tx delay. Syntax: LLDP Delay [] Parameters: : LLDP transmission delay (1-8192) Default Setting: 2 Example: Set LLDP delay value in 1 SWITCH/>lldp delay 1 LLDP Reinit Description: Set or show LLDP reinit delay.
User’s Manual of NS3601-24P/4S Series Show LLDP Statistics of port 1 SWITCH/>lldp statistics 1 LLDP global counters Neighbor entries was last changed at - (323592 sec. ago). Total Neighbors Entries Added 0. Total Neighbors Entries Deleted 0. Total Neighbors Entries Dropped 0. Total Neighbors Entries Aged Out 0. LLDP local counters Rx Tx Rx Port Frames Frames Errors ------------------1 0 0 0 Rx Rx TLV Discards Errors ------------0 0 Rx TLV Rx TLV Unknown Organz.
User’s Manual of NS3601-24P/4S Series Parameters: : Port list or 'all', default: All ports Example: Show LLDP-MED configuration of port1~4 SWITCH/>lldpmed configuration 1-4 LLDP-MED Configuration: ======================= Fast Start Repeast Count : 4 Location Coordinates : Latitude Longitude Altitude Map datum Civic Address Location : Port 1 2 3 4 - 0.0000 North - 0.0000 East - 0.
User’s Manual of NS3601-24P/4S Series LLDPMED ECS Description: Set or show LLDP-MED Emergency Call Service. Syntax: LLDPMED ecs [] Parameters: : lldpmed The value for the Emergency Call Service LLDPMED Policy Delete Description: Delete the selected policy.
User’s Manual of NS3601-24P/4S Series : This field shall contain the DSCP value to be used to provide Diffserv node behavior for the specified application type as defined in IETF RFC 2474 [5]. This 6 bit field may contain one of 64 code point values (0 through 63). A value of 0 represents use of the default DSCP value as defined in RFC 2475. LLDPMED Port Policy Description: Set or show LLDP-MED port polcies.
User’s Manual of NS3601-24P/4S Series LLDPMED Fast [] Parameters: : The number of times the fast start LLDPDU are being sent during the activation of the fast start mechanism defined by LLDP-MED (1-10). LLDPMED Info Description: Show LLDP-MED neighbor device information.
User’s Manual of NS3601-24P/4S Series 13 14 15 16 17 18 19 20 21 22 23 24 Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled High High High High High High High High High High High High 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 15.4 Power management mode ---------------------Power management mode : automode PoE Mode Description: Set or show the PoE mode.
User’s Manual of NS3601-24P/4S Series PoE Management Mode Description: Show / Set PoE management mode. Syntax: PoE Mgmt_mode [mgt_class|mgt_alloc|mgt_consumption|mgt_priority] Parameters: mgt_class: handle power allocation according to PD class mgt_alloc: power allocated according to values entered in power allocate mgt_consumption: allocated according to PD actual need , with a maximum of 15.4 W per port mgt_priority: max.
User’s Manual of NS3601-24P/4S Series SWITCH/>poe alloc_power 1-4 10 PoE Power Supply Description: Set or show the value of the power supply. Syntax: PoE Power_Supply [] Parameters: : PoE power for a power supply Example: Set 200 watts of power supply. SWITCH/>poe power_supply 200 PoE Status Description: Show PoE status. Syntax: PoE Status Quality of Service Command QoS Configuration Description: Show QoS Configuration.
User’s Manual of NS3601-24P/4S Series QoS Classes Description: Set or show the number of traffic classes. Syntax: QoS Classes [] Parameters: : Number of traffic classes (1,2 or 4) Default Setting: 4 Example: Set QoS classes 2 SWITCH/>qos classes 2 QoS Default Description: Set or show the default port priority.
User’s Manual of NS3601-24P/4S Series QoS QCL Port Description: Set or show the port QCL ID. Syntax: QoS QCL Port [] [] Parameters: : Port list or 'all', default: All ports : QCL ID Default Setting: 1 Example: Set QCL ID5 for port10 SWITCH/>qos qcl port 10 5 QoS QCL Add Description: Add or modify QoS Control Entry (QCE). If the QCE ID parameter is specified and an entry with this QCE ID already exists, the QCE will be modified.
User’s Manual of NS3601-24P/4S Series QoS QCL Lookup Description: Lookup QCE. Syntax: QoS QCL Lookup [] [] Parameters: : QCL ID : QCE ID (1-24) QoS Mode Description: Set or show the port egress scheduler mode.
User’s Manual of NS3601-24P/4S Series Disabled, 500kbps Example: Set 1000kbps rate limiter for port17~24 SWITCH/>qos rate limiter 17-24 enable 1000 QoS Shaper Description: Set or show the port shaper.
User’s Manual of NS3601-24P/4S Series Default Setting: Disabled, 1pps Example: Enable multicast storm rate limiter in 1kpps SWITCH/>qos storm multicast enable 1k QoS Strom Broadcast Description: Set or show the multicast storm rate limiter. Syntax: QoS Storm Broadcast [enable|disable] [] Parameters: enable : Enable broadcast storm control disable : Disable broadcast storm control : Rate in pps (1, 2, 4, ..., 512, 1k, 2k, 4k, ...
User’s Manual of NS3601-24P/4S Series : Traffic class low/normal/medium/high or 1/2/3/4 : QoS DSCP Remarking Value 0/8/16/24/32/40/48/56/46 Mirror Command Mirror Configuration Description: Show mirror configuration. Syntax: Mirror Configuration [] Parameters: : Port list or 'all', default: All ports Default Setting: disable Example: Show mirror configuration. SWITCH/>mirror configuration Mirror Port Description: Set or show the mirror port.
User’s Manual of NS3601-24P/4S Series SWITCH/>mirror sid 2 Mirror Mode Description: Set or show the mirror mode. Syntax: Mirror Mode [] [enable|disable|rx|tx] Parameters: : Port list or 'all', default: All ports enable : Enable Rx and Tx mirroring disable: Disable Mirroring rx : Enable Rx mirroring tx : Enable Tx mirroring (default: Show mirror mode) Default Setting: disable Example: Enable the mirror mode for port 1-4.
User’s Manual of NS3601-24P/4S Series Firmware Command Firmware Load Description: Load new firmware from TFTP server. Syntax: Firmware Load Parameters: : IP host address (a.b.c.d) or a host name string : Firmware file name Firmware IPv6 Load Description: Load new firmware from IPv6 TFTP server.
User’s Manual of NS3601-24P/4S Series enable : Enable UPnP disable: Disable UPnP (default: Show UPnP mode) Default Setting: disable Example: Enable the UPnP mode. SWITCH/>upnp mode enable UPnP TTL Description: Set or show the TTL value of the IP header in SSDP messages. Syntax: UPnP TTL [] Parameters: : ttl range (1..255), default: Show UPnP TTL Default Setting: 4 Example: Set the value 10 for TTL value of the IP header in SSDP messages.
User’s Manual of NS3601-24P/4S Series Example: Show the MVR configuration.
User’s Manual of NS3601-24P/4S Series disable : Disable MVR mode (default: Show MVR mode) Default Setting: disable Example: Enable MVR mode. SWITCH/>mvr mode enable MVR Port Mode Description: Set or show the MVR port mode. Syntax: MVR Port Mode [] [enable|disable] Parameters: : Port list or 'all', default: All ports enable : Enable MVR mode disable : Disable MVR mode (default: Show MVR mode) Default Setting: disable Example: Enable the MVR port mode for port 1-4.
User’s Manual of NS3601-24P/4S Series : Port list or 'all', default: All ports source : Enable source mode receiver : Disable receiver mode (default: Show MVR port type) Default Setting: receive Example: Set source type for MVR port type of port 1. SWITCH/>mvr port type 1 source MVR Immediate Leave Description: Set or show MVR port state about immediate leave.
User’s Manual of NS3601-24P/4S Series 00-03-6B 00-0F-E2 00-60-B9 00-D0-1E 00-E0-75 00-E0-BB 00-01-E3 Cisco phones H3C phones Philips and NEC AG phones Pingtel phones Polycom phones 3Com phones Siemens AG phones Voice VLAN Port Configuration: ============================== Port Mode ----------1 Disabled 2 Disabled 3 Disabled 4 Disabled 5 Disabled 6 Disabled 7 Disabled 8 Disabled 9 Disabled 10 Disabled 11 Disabled 12 Disabled 13 Disabled 14 Disabled 15 Disabled 16 Disabled 17 Disabled 18 Disabled 19 Disabl
User’s Manual of NS3601-24P/4S Series Voice VLAN ID Description: Set or show Voice VLAN ID. Syntax: Voice VLAN ID [] Parameters: : VLAN ID (1-4095) Default Setting: 1000 Example: Set ID 2 for Voice VLAN ID. SWITCH/>voice vlan id 2 Voice VLAN Agetime Description: Set or show Voice VLAN age time. Syntax: Voice VLAN Agetime [] Parameters: : MAC address age time (10-10000000) default: Show age time Default Setting: 86400sec Example: Set Voice VLAN age time in 100sec.
User’s Manual of NS3601-24P/4S Series Modify OUI table will restart auto detect OUI process. Syntax: Voice VLAN OUI Add [] Parameters: : OUI address (xx-xx-xx) : Entry description. Use 'clear' or "" to clear the string No blank or space characters are permitted as part of a contact.(only in CLI) Example: Add Voice VLAN OUI entry. SWITCH/>voice vlan oui add 00-11-22 test Voice VLAN OUI Delete Description: Delete Voice VLAN OUI entry.
User’s Manual of NS3601-24P/4S Series Voice VLAN Port Mode Description: Set or show the Voice VLAN port mode. When the port mode isn't disabled, we must disable MSTP feature before we enable Voice VLAN. It can avoid the conflict of ingress filter. Syntax: Voice VLAN Port Mode [] [disable|auto|force] Parameters: : Port list or 'all', default: All ports disable : Disjoin from Voice VLAN. auto : Enable auto detect mode.
User’s Manual of NS3601-24P/4S Series SMTP Mode Description: Enable or disable SMTP configure. Syntax: SMTP Mode [enable|disable] Parameters: enable : Enable SMTP mode disable : Disable SMTP mode (default: Show SMTP mode) Default Setting: disable SMTP Server Description: Set or show SMTP server configure.
User’s Manual of NS3601-24P/4S Series SMTP Auth_pass Description: Set or show SMTP authentication password configure. Syntax: SMTP Auth_pass [] Parameters: : SMTP Authentication Password Default Setting: disable SMTP Mailfrom Description: Set or show SMTP e-mail from configure. Syntax: SMTP Mailfrom [] Parameters: : SMTP E-mail From address Default Setting: disable SMTP Mailsubject Description: Set or show SMTP e-mail subject configure.
User’s Manual of NS3601-24P/4S Series Parameters: : SMTP e-mail 2 to address Default Setting: disable Show Command Show ACL Configuration Description: Show ACL Configuration. Syntax: Show acl Show Link Aggregation Configuration Description: Show link aggregation configuration. Syntax: Show aggr Show IGMP Configuration Description: Show IGMP snooping configuration. Syntax: Show igmp Show IP Configuration Description: Show IP configuration.
User’s Manual of NS3601-24P/4S Series Show MAC Configuration Description: Show MAC address table configuration. Syntax: Show MAC Show Mirror Configuration Description: Show mirror configuration. Syntax: Show mirror Show PoE Configuration Description: Show PoE configuration. Syntax: Show PoE Show Port Configuration Description: Show port configuration. Syntax: Show port Show Private VLAN Configuration Description: Show Private VLAN configuration.
User’s Manual of NS3601-24P/4S Series Syntax: Show stack Show System Configuration Description: Show system configuration. Syntax: Show system Show VLAN Configuration Description: Show VLAN configuration. Syntax: Show vlan Show STP Configuration Description: Show STP Port configuration.
User’s Manual of NS3601-24P/4S Series SWITCH OPERATION Address Table The Switch is implemented with an address table. This address table composed of many entries. Each entry is used to store the address information of some node in network, including MAC address, port no, etc. This in-formation comes from the learning process of Ethernet Switch. Learning When one packet comes in from any port, the Switch will record the source address, port no. And the other related information in address table.
User’s Manual of NS3601-24P/4S Series 386
User’s Manual of NS3601-24P/4S Series POWER OVER ETHERNET OVERVIEW What is PoE? Based on the global standard IEEE 802.3af, PoE is a technology for wired Ethernet, the most widely installed local area network technology adopted today. PoE allows the electrical power necessary for the operation of each end-device to be carried by data cables rather than by separate power cords. New network applications, such as IP Cameras, VoIP Phones, and Wireless Networking, can help enterprises improve productivity.
User’s Manual of NS3601-24P/4S Series Figure 8-2 - Power Supplied over the Data Pins When to install PoE? Consider the following scenarios: • • You're planning to install the latest VoIP Phone system to minimize cabling building costs when your company moves into new offices next month. • • The company staff has been clamoring for a wireless access point in the picnic area behind the building so they can work on their laptops through lunch, but the cost of electrical power to the outside is not affordable.
User’s Manual of NS3601-24P/4S Series Stages of powering up a PoE link Stage Action Volts specified per 802.3af Volts managed by chipset Detection Measure whether powered device has the correct signature resistance of 15–33 kΩ 2.7-10.0 1.8–10.0 Classification Measure which power level class the resistor indicates 14.5-20.5 12.5–25.0 Startup Where the powered device will startup >42 >38 Normal operation Supply power to device 36-57 25.0–60.
User’s Manual of NS3601-24P/4S Series DC Disconnect detection involves measurement of current. Naturally, a disconnected PD stops consuming current, which can be inspected by the PSE. The PSE must therefore disconnect power within 300 to 400 ms from the current flow stop. The lower time boundary is important to prevent shutdown due to random fluctuations.
User’s Manual of NS3601-24P/4S Series TROUBLE SHOOTING This chapter contains information to help you solve problems. If the Ethernet Switch is not functioning properly, make sure the Ethernet Switch was set up according to instructions in this manual.
User’s Manual of NS3601-24P/4S Series APPENDEX A Switch's RJ-45 Pin Assignments 1000Mbps, 1000Base T Contact 1 2 3 4 5 6 7 8 MDI BI_DA+ BI_DABI_DB+ BI_DC+ BI_DCBI_DBBI_DD+ BI_DD- MDI-X BI_DB+ BI_DBBI_DA+ BI_DD+ BI_DDBI_DABI_DC+ BI_DC- Implicit implementation of the crossover function within a twisted-pair cable, or at a wiring panel, while not expressly forbidden, is beyond the scope of this standard.
User’s Manual of NS3601-24P/4S Series There are 8 wires on a standard UTP/STP cable and each wire is color-coded.
User’s Manual of NS3601-24P/4S Series APPENDEX B : GLOSSARY A ACE ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application. ACL ACL is an acronym for Access Control List.
User’s Manual of NS3601-24P/4S Series ARP ARP is an acronym for Address Resolution Protocol. It is a protocol that used to convert an IP address into a physical address, such as an Ethernet address. ARP allows a host to communicate with other hosts when only the Internet address of its neighbors is known. Before using IP, the host sends a broadcast ARP request containing the Internet address of the desired destination system. ARP Inspection ARP Inspection is a secure feature.
User’s Manual of NS3601-24P/4S Series Dynamic addressing simplifies network administration because the software keeps track of IP addresses rather than requiring an administrator to manage the task. This means that a new computer can be added to a network without the hassle of manually assigning it a unique IP address. DHCP Relay DHCP Relay is used to forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain.
User’s Manual of NS3601-24P/4S Series and provides file writing and reading. It also provides directory service and security features. Fast Leave IGMP snooping Fast Leave processing allows the switch to remove an interface from the forwarding-table entry without first sending out group specific queries to the interface. The VLAN interface is pruned from the multicast tree for the multicast group specified in the original leave message.
User’s Manual of NS3601-24P/4S Series IMAP is an acronym for Internet Message Access Protocol. It is a protocol for email clients to retrieve email messages from a mail server. IMAP is the protocol that IMAP clients use to communicate with the servers, and SMTP is the protocol used to transport mail to an IMAP server. The current version of the Internet Message Access Protocol is IMAP4. It is similar to Post Office Protocol version 3 (POP3), but offers additional and more complex features.
User’s Manual of NS3601-24P/4S Series LLDP-MED LLDP-MED is an extendsion of IEEE 802.1ab and is defined by the telecommunication industry association (TIA-1057). LOC LOC is an acronym for Loss Of Connectivity and is detected by a MEP and is indicating lost connectivity in the network. Can be used as a switch criteria by EPS M MAC Table Switching of frames is based upon the DMAC address contained in the frame.
User’s Manual of NS3601-24P/4S Series N NAS NAS is an acronym for Network Access Server. The NAS is meant to act as a gateway to guard access to a protected source. A client connects to the NAS, and the NAS connects to another resource asking whether the client's supplied credentials are valid. Based on the answer, the NAS then allows or disallows access to the protected resource. An example of a NAS implementation is IEEE 802.1X. NetBIOS NetBIOS is an acronym for Network Basic Input/Output System.
User’s Manual of NS3601-24P/4S Series PD PD is an acronym for Powered Device. In a PoE> system the power is delivered from a PSE ( power sourcing equipment ) to a remote device. The remote device is called a PD. PHY PHY is an abbreviation for Physical Interface Transceiver and is the device that implement the Ethernet physical layer (IEEE-802.3). PING ping is a program that sends a series of packets over a network or the Internet to a specific computer in order to generate a response from that computer.
User’s Manual of NS3601-24P/4S Series There are six QCE frame types: Ethernet Type, VLAN, UDP/TCP Port, DSCP, TOS, and Tag Priority. Frames can be classified by one of 4 different QoS classes: "Low", "Normal", "Medium", and "High" for individual application. QCL QCL is an acronym for QoS Control List. It is the list table of QCEs, containing QoS control entries that classify to a specific QoS class on specific traffic objects. Each accessible traffic object contains an identifier to its QCL.
User’s Manual of NS3601-24P/4S Series S SAMBA Samba is a program running under UNIX-like operating systems that provides seamless integration between UNIX and Microsoft Windows machines. Samba acts as file and print servers for Microsoft Windows, IBM OS/2, and other SMB client machines. Samba uses the Server Message Block (SMB) protocol and Common Internet File System (CIFS), which is the underlying protocol used in Microsoft Windows networking.
User’s Manual of NS3601-24P/4S Series Switch IDs (1-16) are used to uniquely identify the switches within a stack. The Switch ID of each switch is shown on the display on the front of the switch and is used widely in the web pages as well as in the CLI commands. SyncE SyncE Is an abbreviation for Synchronous Ethernet. This functionality is used to make a network 'clock frequency' synchronized. Not to be confused with real time clock synchronized (IEEE 1588).
User’s Manual of NS3601-24P/4S Series U UDP UDP is an acronym for User Datagram Protocol. It is a communications protocol that uses the Internet Protocol (IP) to exchange the messages between computers. UDP is an alternative to the Transmission Control Protocol (TCP) that uses the Internet Protocol (IP). Unlike TCP, UDP does not provide the service of dividing a message into packet datagrams, and UDP doesn't provide reassembling and sequencing of the packets.
User’s Manual of NS3601-24P/4S Series WiFi WiFi is an acronym for Wireless Fidelity. It is meant to be used generically when referring of any type of 802.11 network, whether 802.11b, 802.11a, dual-band, etc. The term is promulgated by the Wi-Fi Alliance. WPA WPA is an acronym for Wi-Fi Protected Access. It was created in response to several serious weaknesses researchers had found in the previous system , Wired Equivalent Privacy (WEP). WPA implements the majority of the IEEE 802.
User’s Manual of NS3601-24P/4S Series APPENDIX C: Local User Privilege Level Table GE-DSSG-244 GE-DSSG-244-POE NS3601-24P/4S Model Group Name Master User Level SNMP Group Name Security Admin Viewer Admin Viewer Admin Viewer System Information Change Change Change View Only View Only Not Accessable IP Configuration Change Change Change View Only Not Accessable Not Accessable IPv6 Configuration Change Change Change View Only Not Accessable Not Accessable Users Configuration S
User’s Manual of NS3601-24P/4S Series User Name Admin Viewer Admin Viewer Port Configuration Change Change Change View Only Not Accessable Not Accessable Port Statistics Overview Change Change Change View Only Not Accessable Not Accessable Port Statistics Detail Change Change Change View Only Not Accessable Not Accessable SFP Module Information Change Change Change View Only Port Mirror Change Change Change View Only Not Accessable Not Accessable Static Aggregation Change
User’s Manual of NS3601-24P/4S Series Group Name Master User Name IT Security Admin Viewer Admin Viewer Statistics Change Change Change View Only Not Accessable Not Accessable DSCP Remarking Change Change Change View Only Not Accessable Not Accessable Voice VLAN Configuration Change Change Change View Only Not Accessable Not Accessable Voice VLAN OUI Change Change Change View Only Not Accessable Not Accessable ACL Status Change Change Change View Only ACL Configuration
User’s Manual of NS3601-24P/4S Series Group Name Master User Name LLDP Diagnostics PoE Stack 1. 2. 3.
