User Manual User Manual
Table Of Contents
- INTRODUCTION
- INSTALLATION
- SWITCH MANAGEMENT
- WEB CONFIGURATION
- Main Web Page
- System
- System Information
- IP Configuration
- IPv6 Configuration
- Users Configuration
- Users Privilege Levels
- NTP Configuration
- UPnP Configuration
- DHCP Relay
- DHCP Relay Statistics
- CPU Load
- _
- System Log
- Detailed Log
- Remote Syslog
- SMTP Configure
- Web Firmware Upgrade
- TFTP Firmware Upgrade
- Configuration Backup
- Configuration Upload
- _
- Factory Default
- _
- System Reboot
- Simple Network Management Protocol
- Port Management
- Link Aggregation
- VLAN
- Spanning Tree Protocol
- Multicast
- Quality of Service
- Access Control Lists
- Access Control List Status
- Access Control List Configuration
- ACE Configuration
- ACL Ports Configuration
- ACL Rate Limiter Configuration
- Understanding IEEE 802.1X Port-Based Authentication
- Authentication Configuration
- Network Access Server Configuration
- Network Access Overview
- Network Access Statistics
- _
- Authentication Server Configuration
- RADIUS Overview
- _
- RADIUS Details
- Windows Platform RADIUS Server Configuration
- 4.11.10 802.1X Client Configuration
- Security
- Address Table
- _
- LLDP
- Network Diagnostics
- Power over Ethernet (GE-DSSG-244-POE / NS3601-24P/4S)
- _
- COMMAND LINE INTERFACE
- Command Line Mode
- _
- System Command
- Stack
- IP Command
- Port Management Command
- MAC Address Table Command
- VLAN Configuration Command
- _
- Private VLAN Configuration Command
- Security Command
- Security Switch User Configuration
- Security Switch User Add
- Security Switch User Delete
- Security Switch Privilege Level Configuration
- Security Switch Privilege Level Group
- Security Switch Privilege Level Current
- Security Switch Auth Configuration
- Security Switch Auth Method
- Security Switch SSH Configuration
- Security Switch SSH Mode
- Security Switch HTTPs Configuration
- Security Switch HTTPs Mode
- Security Switch HTTPs Redirect
- Security Switch Access Configuration
- Security Switch Access Mode
- Security Switch Access Add
- Security Switch Access IPv6 Add
- Security Switch Access Delete
- Security Switch Access Lookup
- Security Switch Access Clear
- Security Switch Access Statistics
- Security Switch SNMP Configuration
- Security Switch SNMP Mode
- Security Switch SNMP Version
- Security Switch SNMP Read Community
- Security Switch SNMP Write Community
- Security Switch SNMP Trap Mode
- Security Switch SNMP Trap Version
- Security Switch SNMP Trap Community
- Security Switch SNMP Trap Destination
- Security Switch SNMP Trap IPv6 Destination
- Security Switch SNMP Trap Authentication Failure
- Security Switch SNMP Trap Link-up
- Security Switch SNMP Trap Inform Mode
- Security Switch SNMP Trap Inform Timeout
- Security Switch SNMP Trap Inform Retry Times
- Security Switch SNMP Trap Probe Security Engine ID
- Security Switch SNMP Trap Security Engine ID
- Security Switch SNMP Trap Security Name
- Security Switch SNMP Engine ID
- Security Switch SNMP Community Add
- Security Switch SNMP Community Delete
- Security Switch SNMP Community Lookup
- Security Switch SNMP User Add
- Security Switch SNMP User Delete
- Security Switch SNMP User Changekey
- Security Switch SNMP User Lookup
- Security Switch SNMP Group Add
- Security Switch SNMP Group Delete
- Security Switch SNMP Group Lookup
- Security Switch SNMP View Add
- Security Switch SNMP View Delete
- Security Switch SNMP View Lookup
- Security Switch SNMP Access Add
- Security Switch SNMP Access Delete
- Security Switch SNMP Access Lookup
- Security Network Psec Switch
- Security Network Psec Port
- Security Network Limit Configuration
- Security Network Limit Mode
- Security Network Limit Aging
- Security Network Limit Agetime
- Security Network Limit Port
- Security Network Limit Limit
- Security Network Limit Action
- Security Network Limit Reopen
- Security Network NAS Configuration
- Security Network NAS Mode
- Security Network NAS State
- Security Network NAS Reauthentication
- Security Network NAS ReauthPeriod
- Security Network NAS EapolTimeout
- Security Network NAS Agetime
- Security Network NAS Holdtime
- Security Network NAS RADIUS_QoS
- Security Network NAS RADIUS_VLAN
- Security Network NAS Guest_VLAN
- Security Network NAS Authenticate
- Security Network NAS Statistics
- Security Network ACL Configuration
- Security Network ACL Action
- Security Network ACL Policy
- Security Network ACL Rate
- Security Network ACL Add
- Security Network ACL Delete
- Security Network ACL Lookup
- Security Network ACL Clear
- Security Network ACL Status
- Security Network DHCP Relay Configuration
- Security Network DHCP Relay Mode
- Security Network DHCP Relay Server
- Security Network DHCP Relay Information Mode
- Security Network DHCP Relay Information Policy
- Security Network DHCP Relay Statistics
- Security Network DHCP Snooping Configuration
- Security Network DHCP Snooping Mode
- Security Network DHCP Snooping Port Mode
- Security Network DHCP Snooping Statistics
- Security Network IP Source Guard Configuration
- Security Network IP Source Guard Mode
- Security Network IP Source Guard Port Mode
- Security Network IP Source Guard Limit
- Security Network IP Source Guard Entry
- Security Network IP Source Guard Status
- Security Network ARP Inspection Configuration
- Security Network ARP Inspection Mode
- Security Network ARP Inspection Port Mode
- Security Network ARP Inspection Entry
- Security Network ARP Inspection Status
- Security AAA Configuration
- Security AAA Timeout
- Security AAA Deadtime
- Security AAA RADIUS
- Security AAA ACCT_RADIUS
- Security AAA TACACS+
- Security AAA Statistics
- Security Switch User Configuration
- Spanning Tree Protocol Command
- STP Configuration
- STP Version
- STP Tx Hold
- STP MaxHops
- STP MaxAge
- STP FwdDelay
- STP CName
- STP BPDU Filter
- STP BPDU Guard
- STP Recovery
- STP Status
- STP MSTI Priority
- STP MSTI Map
- STP MSTI Add
- STP Port Configuration
- STP Port Mode
- STP Port Edge
- STP Port AutoEdge
- STP Port P2P
- STP Port RestrictedRole
- STP Port RestrictedTcn
- STP Port bpduGuard
- STP Port Statistic
- STP Port Mcheck
- STP MSTI Port Configuration
- STP MSTI Port Cost
- STP MSTI Port Priority
- STP Configuration
- Multicast Configuration Command
- Link Aggregation Command
- Link Aggregation Control Protocol Command
- LLDP Command
- LLDPMED Command
- Power over Ethernet Command
- Quality of Service Command
- Mirror Command
- Configuration Command
- Firmware Command
- UPnP Command
- MVR Command
- Voice VLAN Command
- SMTP Command
- Show Command
- Show ACL Configuration
- Show Link Aggregation Configuration
- Show IGMP Configuration
- Show IP Configuration
- Show LACP Configuration
- Show LLDP Configuration
- Show MAC Configuration
- Show Mirror Configuration
- Show PoE Configuration
- Show Port Configuration
- Show Private VLAN Configuration
- Show QoS Configuration
- Show SNMP Configuration
- Show Stack Configuration
- Show System Configuration
- Show VLAN Configuration
- Show STP Configuration
- Show ACL Configuration
- SWITCH OPERATION
- POWER OVER ETHERNET OVERVIEW
- TROUBLE SHOOTING
- APPENDEX A
- APPENDEX B : GLOSSARY
- APPENDIX C: Local User Privilege Level Table
IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual
106
VLAN setting example:
- Separate VLAN
- 802.1Q VLAN Trunk
- Port Isolate
Two separate 802.1Q VLAN
The diagram shows how the Managed Switch handle Tagged and Untagged traffic flow for two VLANs. VLAN Group 2 and VLAN
Group 3 are separated VLAN. Each VLAN isolate network traffic so only members of the VLAN receive traffic from the same VLAN
members. The screen is shown Figure 4-6-8 appears. Table 4-1 describes the port configuration of the Managed Switches.
Figure 4-6-8 two separate VLAN diagram
VLAN Group VID Untagged Members Tagged Members
VLAN Group 1 1 Port-7~Port-24 N/A
VLAN Group 2 2 Port-1,Port-2 Port-3
VLAN Group 3 3 Port-4,Port-5 Port-6
Table 4-1 VLAN and Port Configuration
The scenario described as follow:
Untagged packet entering VLAN 2
1. While [PC-1] transmit an untagged packet enters Port-1, the Managed Switch will tag it with a VLAN Tag=2. [PC-2]
and [PC-3] will received the packet through Port-2 and Port-3.
2. [PC-4],[PC-5] and [PC-6] received no packet.
3. While the packet leaves Port-2, it will be stripped away it tag becoming an untagged packet.
4. While the packet leaves Port-3, it will keep as a tagged packet with VLAN Tag=2.
Tagged packet entering VLAN 2
5. While [PC-3] transmit a tagged packet with VLAN Tag=2 enters Port-3, [PC-1] and [PC-2] will received the packet
through Port-1 and Port-2.
6. While the packet leaves Port-1 and Port-2, it will be stripped away it tag becoming an untagged packet.