User Manual

ManualsBrandsPLANET Technology ManualsIndustrial SwitchesIP30 Industrial SNMP Switch 8-Port 100/1000FX + 2-Port 10/100/1000TX (SFP) (-40 ~ 75C)

Table Of Contents

User’s Manual of IGS-10080MFT

Summary of content (576 pages)

PAGE 1
User’s Manual of IGS-10080MFT 1
PAGE 2
User’s Manual of IGS-10080MFT Trademarks Copyright © PLANET Technology Corp. 2013. Contents subject to which revision without prior notice. PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their respective owners.
PAGE 3
User’s Manual of IGS-10080MFT TABLE OF CONETNTS 1. INTRODUCTION.................................................................................................................. 20 1.1 Packet Contents .........................................................................................................................................20 1.2 Product Description ...................................................................................................................................20 1.
PAGE 4
User’s Manual of IGS-10080MFT 4. WEB CONFIGURATION ...................................................................................................... 50 4.1 Main Web Page ...........................................................................................................................................53 4.2 System.........................................................................................................................................................55 4.2.1 System Information....
PAGE 5
User’s Manual of IGS-10080MFT 4.4.2 Port Statistics Overview .....................................................................................................................................101 4.4.3 Port Statistics Detail...........................................................................................................................................102 4.4.4 SFP Information..........................................................................................................................
PAGE 6
User’s Manual of IGS-10080MFT 4.8 Multicast ....................................................................................................................................................163 4.8.1 IGMP Snooping .................................................................................................................................................163 4.8.2 IGMP Snooping Configuration .................................................................................................................
PAGE 7
User’s Manual of IGS-10080MFT 4.10 Access Control Lists..............................................................................................................................211 4.10.1 Access Control List Status ............................................................................................................................... 211 4.10.2 Access Control List Configuration....................................................................................................................
PAGE 8
User’s Manual of IGS-10080MFT 4.14.2 LLDP Configuration .........................................................................................................................................296 4.14.3 LLDP-MED Configuration ................................................................................................................................299 4.14.4 LLDP-MED Neighbor ................................................................................................................................
PAGE 9
User’s Manual of IGS-10080MFT System Version ...................................................................................................................................................341 System Log Server Mode ....................................................................................................................................341 System Name..................................................................................................................................................
PAGE 10
User’s Manual of IGS-10080MFT MAC Configuration ..............................................................................................................................................362 MAC Add .............................................................................................................................................................362 MAC Delete ..........................................................................................................................................
PAGE 11
User’s Manual of IGS-10080MFT Security Switch Privilege Level Group.................................................................................................................383 Security Switch Privilege Level Current...............................................................................................................383 Security Switch Auth Configuration .....................................................................................................................
PAGE 12
User’s Manual of IGS-10080MFT Security Switch SNMP Community Lookup.........................................................................................................403 Security Switch SNMP User Add .........................................................................................................................404 Security Switch SNMP User Delete.....................................................................................................................
PAGE 13
User’s Manual of IGS-10080MFT Security Network ACL Rate .................................................................................................................................427 Security Network ACL Add ..................................................................................................................................427 Security Network ACL Delete ..............................................................................................................................
PAGE 14
User’s Manual of IGS-10080MFT STP FwdDelay ....................................................................................................................................................449 STP CName ........................................................................................................................................................449 STP BPDU Filter........................................................................................................................................
PAGE 15
User’s Manual of IGS-10080MFT LLDP Interval.......................................................................................................................................................471 LLDP Hold ...........................................................................................................................................................471 LLDP Delay ......................................................................................................................................
PAGE 16
User’s Manual of IGS-10080MFT QoS Port Shaper Rate ........................................................................................................................................491 QoS Port TagRemarking Mode............................................................................................................................492 QoS Port TagRemarking PCP .............................................................................................................................
PAGE 17
User’s Manual of IGS-10080MFT MVR Configuration ..............................................................................................................................................509 MVR Group .........................................................................................................................................................510 MVR Status ............................................................................................................................................
PAGE 18
User’s Manual of IGS-10080MFT IPMC Router........................................................................................................................................................527 IPMC Status ........................................................................................................................................................528 IPMC Group ........................................................................................................................................
PAGE 19
User’s Manual of IGS-10080MFT PTP ClockCreate.................................................................................................................................................542 PTP ClockDelete .................................................................................................................................................543 PTP DefaultDS ...........................................................................................................................................
PAGE 20
User’s Manual of IGS-10080MFT 1.
PAGE 21
User’s Manual of IGS-10080MFT automation network connectivity with reliable switching recovery capability that is suitable for implementing fault tolerant and mesh network architectures. Fast Recovery to a Redundant Ethernet Network The IGS-10080MFT features strong and self-recovery capability to prevent interruptions and outside intrusions.
PAGE 22
User’s Manual of IGS-10080MFT 1.3 How to Use This Manual This User Manual is structured as follows: Section 2, INSTALLATION The section explains the functions of the Industrial Managed Switch and how to physically install the Industrial Managed Switch. Section 3, SWITCH MANAGEMENT The section contains the information about the software function of the Industrial Managed Switch. Section 4, WEB CONFIGURATION The section explains how to manage the Industrial Managed Switch by Web interface.
PAGE 23
User’s Manual of IGS-10080MFT 1.
PAGE 24
User’s Manual of IGS-10080MFT   8 priority queues on all switch ports  Traffic classification: - IEEE 802.
PAGE 25
User’s Manual of IGS-10080MFT  User Privilege levels control  NTP (Network Time Protocol)  PTP (Precision Time Protocol)  Link Layer Discovery Protocol (LLDP) Protocol  Cable Diagnostic technology provides the mechanism to detect and report potential cabling issues  Reset button for system reboot or reset to factory default  PLANET Smart Discovery Utility for deploy management 25
PAGE 26
User’s Manual of IGS-10080MFT 1.5 Product Specification Model Name IGS-10080MFT Hardware Specification SFP/mini-GBIC Slots Copper Ports 8 100/1000Base-SX/LX mini-GBIC SFP slots 2 10/100/1000Base-T Ethernet interface Switch Architecture Store-and-Forward Switch Fabric Throughput (packet per second) Address Table Flow Control Jumbo Frame 20Gbps / non-blocking 14.8Mpps 8K entries, automatic source address learning and ageing IEEE 802.3x Pause Frame for Full-Duplex.
PAGE 27
User’s Manual of IGS-10080MFT QoS IGMP Snooping MLD Snooping Access Control List Bandwidth Control SNMP MIBs Standards Conformance Regulation Compliance Stability Testing Standards Compliance Support 5 groups of 10-Port trunk support Traffic classification based, Strict priority and WRR 8-level priority for switching - Port Number - 802.1p priority - 802.
PAGE 28
User’s Manual of IGS-10080MFT 2. INSTALLATION 2.1 Hardware Description The Industrial Managed Switch provides three different running speeds – 10Mbps, 100Mbps and 1000Mbps in the same Switch and automatically distinguishes the speed of incoming connection. This section describes the hardware features of Industrial Managed Switch. For easier management and control of the Industrial Managed Switch, familiarize yourself with its display indicators, and ports.
PAGE 29
User’s Manual of IGS-10080MFT 2.1.2 Front Panel Figure 2-1 shows a front panel of Industrial Managed Switch.
PAGE 30
User’s Manual of IGS-10080MFT ■ Reset Button At the left of front panel, the reset button is designed for reboot the Industrial Managed Switch without turn off and on the power, also can reset the Industrial Managed Switch to factory default mode. Figure 2-2: Reset button of Industrial Managed Switch 1. Press the RESET button once. The Industrial Managed Switch will reboot automatically. 2. Press the RESET button for 5 seconds.
PAGE 31
User’s Manual of IGS-10080MFT 2.1.3 LED Indicators  System LED Color Function P1 Green Indicate the power 1 has power. P2 Green Indicate the power 2 has power. Fault Green Indicate the either power 1 or power 2 has no power. On Indicate the ERPS Ring has been created successfully. **Note Off Indicate the ERPS Ring hasn’t been created. **Note Ring Green Indicate the Switch has been enabledRing Owner. **Note R.O. Off Indicate the Ring Owner hasn’t be enabled.
PAGE 32
User’s Manual of IGS-10080MFT 2.1.4 Switch Upper Panel The Upper Panel of the Industrial Managed Switch indicates a DC inlet power socket and consist one terminal block connector within 6-contacts. It accepts input power from 12 to 48V DC, also AC 24V.
PAGE 33
User’s Manual of IGS-10080MFT 2.2 Install the Industrial Managed Switch This section describes how to install your Industrial Managed Switch and make connections to the Industrial Managed Switch. Please read the following topics and perform the procedures in the order being presented. To install your Industrial Managed Switch on a desktop or shelf, simply complete the following steps.
PAGE 34
User’s Manual of IGS-10080MFT 2.2.2 DIN-Rail Mounting This section describes how to install the Industrial Managed Switch. There have two methods to install the Industrial Managed Switch. DIN-Rail Mounting and Wall Mount Plate Mounting. Please read the following topics and perform the procedures in the order being presented. As following all DIN-Rail installation steps we use an example device to show how we install DIN-Rail kit, procedure of the IGS-10080MFT is same as the example device.
PAGE 35
User’s Manual of IGS-10080MFT Step 3: Check the DIN-Rail is tightly on the track. Please refer to following procedures to remove the Industrial Managed Switch from the track. Step 4: Lightly press the button of DIN-Rail for remove it from the track.
PAGE 36
User’s Manual of IGS-10080MFT 2.2.3 Wall Mount Plate Mounting To install the Industrial Managed Switch on the wall. Please follow the instructions below. As following all DIN-Rail installation steps we use an example device to show how we install DIN-Rail kit, procedure of the IGS-10080MFT is same as the example device. Step 1: Remove the DIN-Rail from the Industrial Managed Switch. Use the screwdriver to loose the screws and remove the DIN-Rail.
PAGE 37
User’s Manual of IGS-10080MFT 2.3 Wiring the Power Inputs The 6-contacts terminal block connector on the top panel of Industrial Managed Switch is used for two DC redundant power inputs. Please follow the steps to insert the power wire. The PWR1 is 1(+) & 2(-) and PWR2 is 5(+) & 6(-) contact. Remember: Tighten the wire-clamp screws for preventing the wires from loosing. 1 2 Power 1 + 3 4 Fault - 5 6 Power 2 + - Figure 2-4: 6-Contacts of Terminal Block Connector 1.
PAGE 38
User’s Manual of IGS-10080MFT 1. The wire gauge for the terminal block should be in the range between 12 ~ 24 AWG. 2. Performing any of the procedures like inserting the wires or tighten the wire-clamp screws. Ensure the power is OFF to prevent to get an electric shock. 2.5 Cabling  10/100/1000Base-T and 100Base-FX / 1000Base-SX/LX All 10/100/1000Base-T ports come with Auto-Negotiation capability. They automatically support 1000Base-T, 100Base-TX and 10Base-T networks.
PAGE 39
User’s Manual of IGS-10080MFT 2.5.1 Installing the SFP Transceiver The sections describe how to insert an SFP transceiver into an SFP slot. The SFP transceivers are hot-pluggable and hot-swappable. You can plug-in and out the transceiver to/from any SFP port without having to power down the Industrial Managed Switch. As the Figure 2-5 appears.
PAGE 40
User’s Manual of IGS-10080MFT MGB-LB20 SFP-Port 1000Base-LX (WDM,TX:1550nm) mini-GBIC module-20km MGB-LA40 SFP-Port 1000Base-LX (WDM,TX:1310nm) mini-GBIC module-40km MGB-LB40 SFP-Port 1000Base-LX (WDM,TX:1550nm) mini-GBIC module-40km MGB-TSX SFP-Port 1000Base-SX mini-GBIC module - 550m (-40~75℃) MGB-TLX SFP-Port 1000Base-LX mini-GBIC module - 10km (-40~75℃) MGB-TL30 SFP-Port 1000Base-LX mini-GBIC module - 30km (-40~75℃) MGB-TL70 SFP-Port 1000Base-LX mini-GBIC module - 70km (-40~75℃) Fast Ethe
PAGE 41
User’s Manual of IGS-10080MFT Converter. 3. Check the LNK/ACT LED of the SFP slot on the front of the Industrial Managed Switch. Ensure that the SFP transceiver is operating correctly. 100Base-FX: Before connect the other switches, workstation or Media Converter. 1. Make sure both side of the SFP transceiver are with the same media type or WDM pair, for example: 100Base-FX to 100Base-FX, 100Base-BX20-U to 100Base-BX20-D. 2. Check the fiber-optic cable type match the SFP transceiver model.
PAGE 42
User’s Manual of IGS-10080MFT Never pull out the module without pull the handle or the push bolts on the module. Direct pull out the module with violent could damage the module and SFP module slot of the device.
PAGE 43
User’s Manual of IGS-10080MFT 3. SWITCH MANAGEMENT This chapter explains the methods that you can use to configure management access to the Industrial Managed Switch. It describes the types of management applications and the communication and management protocols that deliver data between your management device (workstation or personal computer) and the system. It also contains information about port connection options.
PAGE 44
User’s Manual of IGS-10080MFT 3.2 Management Access Overview The Industrial Managed Switch gives you the flexibility to access and manage it using any or all of the following methods:  Remote Telnet Interface  Web browser Interface  An external SNMP-based network management application The Remote Telnet and Web browser interface support are embedded in the Industrial Managed Switch software and are available for immediate use. Each of these management methods has their own advantages.
PAGE 45
User’s Manual of IGS-10080MFT 3.3 CLI Mode Management There are two ways fot CLI mode management, one is remote telnet, another one is operated from console port. Remote telnet is an IP-based protocol, console port is for user opaerate IGS-10080MFT on locol only, however their operation are the same. The command line user interface is for performing system administration, such as displaying statistics or changing option settings.
PAGE 46
User’s Manual of IGS-10080MFT 3.4 Web Management The Industrial Managed Switch offers management features that allow users to manage the Industrial Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer. After you set up your IP address for the Industrial Managed Switch, you can access the Industrial Managed Switch’s Web interface applications directly in your Web browser by entering the IP address of the Industrial Managed Switch.
PAGE 47
User’s Manual of IGS-10080MFT 3.5 SNMP-Based Network Management You can use an external SNMP-based application to configure and manage the Industrial Managed Switch, such as SNMPc Network Manager, HP Openview Network Node Management (NNM) or What’s Up Gold. This management method requires the SNMP agent on the Industrial Managed Switch and the SNMP Network Management Station to use the same community string.
PAGE 48
User’s Manual of IGS-10080MFT 3.6 PLANET Smart Discovery Utility For easily list the Industrial Managed Switch in your Ethernet environment, the Planet Smart Discovery Utility from user’s manual CD-ROM is an ideal solution. The following install instructions guiding you for run the Planet Smart Discovery Utility. 1. Deposit the Planet Smart Discovery Utility in administrator PC. 2. Run this utility and the following screen appears.
PAGE 49
User’s Manual of IGS-10080MFT 1. This utility show all necessary information from the devices, such as MAC Address, Device Name, firmware version, Device IP Subnet address, also can assign new password, IP Subnet address and description for the devices. 2. After setup completed, press “Update Device”, “Update Multi” or “Update All” button to take affect. The meaning of the 3 buttons above are shown as below:    Update Device: use current setting on one single device.
PAGE 50
User’s Manual of IGS-10080MFT 4. WEB CONFIGURATION This section introduces the configuration and functions of the Web-Based management. About Web-based Management The Industrial Managed Switch offers management features that allow users to manage the Industrial Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer. The Web-Based Management supports Internet Explorer 7.0.
PAGE 51
User’s Manual of IGS-10080MFT  1. Logging on the Industrial Managed Switch Use Internet Explorer 7.0 or above Web browser. Enter the factory-default IP address to access the Web interface. The factory-default IP Address as following: http://192.168.0.100 2. When the following login screen appears, please enter the default username "admin" with password “admin” (or the username/password you have changed via console) to login the main screen of Industrial Managed Switch.
PAGE 52
User’s Manual of IGS-10080MFT Figure 4-1-3: Default Main Page Now, you can use the Web management interface to continue the switch management or manage the Industrial Managed Switch by Web interface. The Switch Menu on the left of the web page let you access all the commands and statistics the Managed Switch provides. 1. It is recommended to use Internet Explore 7.0 or above to access Industrial Managed Switch. 2.
PAGE 53
User’s Manual of IGS-10080MFT 4.1 Main Web Page The Industrial Managed Switch provides a Web-based browser interface for configuring and managing it. This interface allows you to access the Industrial Managed Switch using the Web browser of your choice. This chapter describes how to use the Industrial Managed Switch’s Web browser interface to configure and manage it.
PAGE 54
User’s Manual of IGS-10080MFT Main Menu Using the onboard web agent, you can define system parameters, manage and control the Industrial Managed Switch, and all its ports, or monitor network conditions. Via the Web-Management, the administrator can setup the Industrial Managed Switch by select the functions those listed in the Main Function. The screen in Figure 4-1-5 appears.
PAGE 55
User’s Manual of IGS-10080MFT 4.2 System Use the System menu items to display and configure basic administrative details of the Industrial Managed Switch. Under System the following topics are provided to configure and view the system information. 4.2.1 System Information The System Info page provides information for the current device information. System Info page helps a switch administrator to identify the hardware MAC address, software version and system uptime. The screen in Figure 4-2-1 appears.
PAGE 56
User’s Manual of IGS-10080MFT  System Uptime The period of time the device has been operational.  Software Version The software version of the Industrial Managed Switch.  Software Date The date when the switch software was produced. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Click to refresh the page. 4.2.2 IP Configuration The IP Configuration includes the IP Address, Subnet Mask and Gateway.
PAGE 57
User’s Manual of IGS-10080MFT  IP Mask Provide the IP mask of this switch dotted decimal notation.  IP Router Provide the IP address of the router in dotted decimal notation.  VLAN ID Provide the managed VLAN ID. The allowed range is 1 through 4095.  DNS Server Provide the IP address of the DNS Server in dotted decimal notation.
PAGE 58
User’s Manual of IGS-10080MFT represented as eight fields of up to four hexadecimal digits with a colon separating each field (:). For example, 'fe80::215:c5ff:fe03:4dc7'. The symbol '::' is a special syntax that can be used as a shorthand way of representing multiple 16-bit groups of contiguous zeros; but it can appear only once. It can also represent a legally valid IPv4 address. For example, '::192.1.2.34'.  Prefix Provide the IPv6 Prefix of this switch. The allowed range is 1 to 128.
PAGE 59
User’s Manual of IGS-10080MFT device. But others value need to refer to each group privilege level. User's privilege should be same or greater than the group privilege level to have the access of that group. By default setting, almost group privilege level 5 has the read-only access and privilege level 10 has the read-write access. And the system maintenance (software upload, factory defaults and etc.) need user privilege level 15.
PAGE 60
User’s Manual of IGS-10080MFT administrator account, privilege level 10 for a standard user account and privilege level 5 for a guest account. Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. : Click to undo any changes made locally and return to the Users. : Delete the current user.
PAGE 61
User’s Manual of IGS-10080MFT 4.2.5 Privilege Levels This page provides an overview of the privilege levels. After setup completed, please press “Save” button to take effect. Please login web interface with new user name and password, the screen in Figure 4-2-7 appears.
PAGE 62
User’s Manual of IGS-10080MFT The page includes the following fields: Object Description  Group Name The name identifying the privilege group. In most cases, a privilege level group consists of a single module (e.g. LACP, RSTP or QoS), but a few of them contains more than one. The following description defines these privilege level groups in details:  System: Contact, Name, Location, Timezone, Log.
PAGE 63
User’s Manual of IGS-10080MFT Figure 4-2-8: NTP Configuration Page Screenshot The page includes the following fields: Object Description  Mode Indicates the NTP mode operation. Possible modes are:  Enabled: Enable NTP mode operation. When NTP mode operation is enabled, the agent forwards NTP messages between the clients and the server when they are not on the same subnet domain.  Disabled: Disable NTP mode operation.  Timezone Allow select the time zone according to current location of switch.
PAGE 64
User’s Manual of IGS-10080MFT environments for simplified installation of computer components. The UPnP Configuration screen in Figure 4-2-9 appears. Figure 4-2-9: UPnP Configuration Page Screenshot The page includes the following fields: Object Description  Mode Indicates the UPnP operation mode. Possible modes are:  Enabled: Enable UPnP mode operation.  Disabled: Disable UPnP mode operation. When the mode is enabled, two ACEs are added automatically to trap UPNP related packets to CPU.
PAGE 65
User’s Manual of IGS-10080MFT Figure 4-2-10: UPnP Devices shows on Windows My Network Places 4.2.8 DHCP Relay Configure DHCP Relay on this page. DHCP Relay is used to forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain.
PAGE 66
User’s Manual of IGS-10080MFT The Remote ID is 6 bytes in length, and the value is equal the DHCP relay agent’s MAC address. The DHCP Relay Configuration screen in Figure 4-2-11 appears. Figure 4-2-11: DHCP Relay Configuration Page Screenshot The page includes the following fields: Object Description  Relay Mode Indicates the DHCP relay mode operation. Possible modes are:  Enabled: Enable DHCP relay mode operation.
PAGE 67
User’s Manual of IGS-10080MFT  Drop: Drop the package when receive a DHCP message that already contains relay information. Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.2.9 DHCP Relay Statistics This page provides statistics for DHCP relay. The DHCP Relay Statistics screen in Figure 4-2-12 appears.
PAGE 68
User’s Manual of IGS-10080MFT Client Statistics Object Description  Transmit to Client The number of relayed packets from server to client.  Transmit Error The number of packets that resulted in error while being sent to servers.  Receive form Client The number of received packets from server.  Receive Agent Option The number of received packets with relay agent information option.  Replace Agent Option The number of packets which were replaced with relay agent information option.
PAGE 69
User’s Manual of IGS-10080MFT 4.2.10 CPU Load This page displays the CPU load, using a SVG graph. The load is measured as averaged over the last 100ms, 1sec and 10 seconds intervals. The last 120 samles are graphed, and the last numbers are displayed as text as well. In order to display the SVG graph, your browser must support the SVG format. Consult the SVG Wiki for more information on browser support.
PAGE 70
User’s Manual of IGS-10080MFT 4.2.11 System Log The switch system log information is provided here. The System Log screen in Figure 4-2-14 appears. Figure 4-2-14: System Log Page Screenshot The page includes the following fields: Object Description  ID The ID (>= 1) of the system log entry.  Level The level of the system log entry. The following level types are supported:  Info: Information level of the system log.  Warning: Warning level of the system log.
PAGE 71
User’s Manual of IGS-10080MFT : Updates the system log entries, ending at the last entry currently displayed. : Updates the system log entries, starting from the last entry currently displayed. : Updates the system log entries, ending at the last available entry ID. 4.2.12 Detailed Log The switch system detailed log information is provided here. The Detailed Log screen in Figure 4-2-15 appears.
PAGE 72
User’s Manual of IGS-10080MFT 4.2.13 Remote Syslog Configure remote syslog on this page. The Remote Syslog screen in Figure 4-2-16 appears. Figure 4-2-16: Remote Syslog Page Screenshot The page includes the following fields: Object Description  Server Mode Indicates the server mode operation. When the mode operation is enabled, the syslog message will send out to syslog server.
PAGE 73
User’s Manual of IGS-10080MFT 4.2.14 SMTP Configuration Configure SMTP Configuration on this page. The SMTP Configuration screen in Figure 4-2-17 appears. Figure 4-2-17: SMTP Configuration Page Screenshot The page includes the following fields: Object Description  SMTP Mode Enabled It is for you to enable SMTP mode function.
PAGE 74
User’s Manual of IGS-10080MFT  E-mail 2 To It is for you to input secondary recipient mail address. Buttons : Click to test SMTP server address. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.2.15 EEE Power Reduction This page allows the user to configure the current EEE port settings. EEE is a power saving option that reduces the power usage when there is low or no traffic utilization.
PAGE 75
User’s Manual of IGS-10080MFT Figure 4-2-18: EEE Configuration Page Screenshot The page includes the following fields: Object Description  Port The switch port number of the logical EEE port, * means to select all ports of Industrial Managed Switch.  EEE Enable Controls whether EEE is enabled for this switch port.  EEE Urgent Queues Queues set will activate transmition of frames as soon as any data is available.
PAGE 76
User’s Manual of IGS-10080MFT 4.2.16 Web Firmware Upgrade This page facilitates an update of the firmware controlling the Industrial Managed Switch. The Web Firmware Upgrade screen in Figure 4-2-19 appears. Figure 4-2-19: Web Firmware Upgrade Page Screenshot To open Firmware Upgrade screen perform the folling: 1. Click System -> Web Firmware Upgrade. 2. The Firmware Upgrade screen is displayed as in Figure 4-2-19. 3. Click the “ 4. Select on the firmware then click “ 5.
PAGE 77
User’s Manual of IGS-10080MFT 4.2.17 TFTP Firmware Upgrade The Firmware Upgrade page provides the functions to allow a user to update the Industrial Managed Switch firmware from the TFTP server in the network. Before updating, make sure you have your TFTP server ready and the firmware image is on the TFTP server. The TFTP Firmware Upgrade screen in Figure 4-2-21 appears.
PAGE 78
User’s Manual of IGS-10080MFT Save configuration except IP Address feature is almost the same with Save configuration, except the IP address will not be saved. You can save/view or load the switch configuration. The configuration file is in XML format with a hierarchy of tags: Header tags: and . These tags are mandatory and must be present at the beginning of the file. Section tags: , and .
PAGE 79
User’s Manual of IGS-10080MFT 2. Chose the file save path in management workstation.
PAGE 80
User’s Manual of IGS-10080MFT 4.2.19 Configuration Upload This function allows backup and reload the current configuration of the Industrial Managed Switch to the local management station. The Configuration Upload screen in Figure 4-2-25 appears. Figure 4-2-25: Configuration Upload Page Screenshot  Configuration Upload 1. Click the “ ” button of the main page, the system would pop up the file selection menu to choose saved configuration. Figure 4-2-26: Windows File Selection Menu Popup 2.
PAGE 81
User’s Manual of IGS-10080MFT 4.2.20 Image Select This function provides dual image deposit in the Industrial Managed Switch, user can select any one of the image as Active image of Industrial Managed Switch. The Image Select screen in Figure 4-2-27 appears. Figure 4-2-27: Image Select Page Screenshot Button : Click to choose Alternate Image as Activate Image.
PAGE 82
User’s Manual of IGS-10080MFT Figure 4-2-30: Image Select Page Screenshot Figure 4-2-31: Image Select Page Screenshot After the system reboot, you can use the Alternate Image of Industrial Managed Switch.
PAGE 83
User’s Manual of IGS-10080MFT 4.2.21 Factory Default You can reset the configuration of the stack switch on this page. Only the IP configuration is retained. The new configuration is available immediately, which means that no restart is necessary. The Factory Default screen in Figure 4-2-32 appears. Figure 4-2-32: Factory Default Page Screenshot Buttons : Click to reset the configuration to Factory Defaults.
PAGE 84
User’s Manual of IGS-10080MFT 4.2.22 System Reboot The Reboot page enables the device to be rebooted from a remote location. Once the Reboot button is pressed, user will re-access the WEB interface about 60 seconds later, the System Reboot screen in Figure 4-2-34 appears. Figure 4-2-34: System Reboot Page Screenshot Buttons : Click to reboot the system. : Click to return to the web main page without reboot the system.
PAGE 85
User’s Manual of IGS-10080MFT 4.2.23 Daylight Saving The Reboot page enables the device to be rebooted from a remote location. Once the Reboot button is pressed, user will re-access the WEB interface about 60 seconds later, the System Reboot screen in Figure 4-2-35 appears. Figure 4-2-35: System Reboot Page Screenshot The page includes the following fields: Object Description  Time Zone Allow select the time zone according to current location of switch.
PAGE 86
User’s Manual of IGS-10080MFT Daylight Saving Time duration for single time configuration. ( Default : Disabled ) Daylight Saving Rime – Recurring Mode Object Description  Week (Start Time Setting) Select the starting week number.  Day (Start Time Setting) Select the starting day.  Month (Start Time Setting) Select the starting month.  Hours (Start Time Setting) Select the starting hour.  Minutes (Start Time Setting) Select the starting minute.
PAGE 87
User’s Manual of IGS-10080MFT 4.3 Simple Network Management Protocol 4.3.1 SNMP Overview The Simple Network Management Protocol (SNMP) is an application layer protocol that facilitates the exchange of management information between network devices. It is part of the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol suite. SNMP enables network administrators to manage network performance, find and solve network problems, and plan for network growth.
PAGE 88
User’s Manual of IGS-10080MFT  SNMPv3 Groups Configure SNMPv3 groups table on this page.  SNMPv3 Views Configure SNMPv3 views table on this page.  SNMPv3 Accesses Configure SNMPv3 accesses table on this page. 4.3.2 SNMP System Configuration Configure SNMP on this page. The SNMP System Configuration screen in Figure 4-3-1 appears.
PAGE 89
User’s Manual of IGS-10080MFT  Read Community Indicates the community read access string to permit access to SNMP agent. The allowed string length is 0 to 255, and the allowed content is the ASCII characters from 33 to 126. The field is applicable only when SNMP version is SNMPv1 or SNMPv2c. If SNMP version is SNMPv3, the community string will be associated with SNMPv3 communities table. It provides more flexibility to configure security name than a SNMPv1 or SNMPv2c community string.
PAGE 90
User’s Manual of IGS-10080MFT  Trap Destination IPv6 Address Indicates the SNMP trap destination IPv6 address. IPv6 address is in 128-bit records represented as eight fields of up to four hexadecimal digits with a colon separating each field (:). For example, 'fe80::215:c5ff:fe03:4dc7'. The symbol '::' is a special syntax that can be used as a shorthand way of representing multiple 16-bit groups of contiguous zeros; but it can appear only once. It can also represent a legally valid IPv4 address.
PAGE 91
User’s Manual of IGS-10080MFT 4.3.3 SNMP System Information The switch system information is provided here. The SNMP System Information screen in Figure 4-3-2 appears. Figure 4-3-2: System Information Configuration Page Screenshot The page includes the following fields: Object Description  System Contact The textual identification of the contact person for this managed node, together with information on how to contact this person.
PAGE 92
User’s Manual of IGS-10080MFT 4.3.4 SNMPv3 Configuration 4.3.4.1 SNMPv3 Communities Configure SNMPv3 communities table on this page. The entry index key is Community. The SNMPv3 Communities screen in Figure 4-3-3 appears. Figure 4-3-3: SNMPv3 Communities Configuration Page Screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.  Community Indicates the community access string to permit access to SNMPv3 agent.
PAGE 93
User’s Manual of IGS-10080MFT 4.3.4.2 SNMPv3 Users Configure SNMPv3 users table on this page. The entry index keys are Engine ID and User Name. The SNMPv3 Users screen in Figure 4-3-4 appears. Figure 4-3-4: SNMPv3 Users Configuration Page Screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.  Engine ID An octet string identifying the engine ID that this entry should belong to.
PAGE 94
User’s Manual of IGS-10080MFT  SHA: An optional flag to indicate that this user using SHA authentication protocol.  The value of security level cannot be modified if entry already exists. That means must first ensure that the value is set correctly.  Authentication Password A string identifying the authentication pass phrase. For MD5 authentication protocol, the allowed string length is 8 to 32. For SHA authentication protocol, the allowed string length is 8 to 40.
PAGE 95
User’s Manual of IGS-10080MFT 4.3.4.3 SNMPv3 Groups Configure SNMPv3 groups table on this page. The entry index keys are Security Model and Security Name. The SNMPv3 Groups screen in Figure 4-3-5 appears. Figure 4-3-5: SNMPv3 Groups Configuration Page Screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.  Security Model Indicates the security model that this entry should belong to.
PAGE 96
User’s Manual of IGS-10080MFT 4.3.4.4 SNMPv3 Views Configure SNMPv3 views table on this page. The entry index keys are View Name and OID Subtree. The SNMPv3 Views screen in Figure 4-3-6 appears. Figure 4-3-6: SNMPv3 Views Configuration Page Screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.  View Name A string identifying the view name that this entry should belong to.
PAGE 97
User’s Manual of IGS-10080MFT 4.3.4.5 SNMPv3 Access Configure SNMPv3 accesses table on this page. The entry index keys are Group Name, Security Model and Security Level. The SNMPv3 Access screen in Figure 4-3-7 appears. Figure 4-3-7: SNMPv3 Accesses Configuration Page Screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.  Group Name A string identifying the group name that this entry should belong to.
PAGE 98
User’s Manual of IGS-10080MFT Buttons : Click to add a new access entry. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
PAGE 99
User’s Manual of IGS-10080MFT 4.4 Port Management Use the Port Menu to display or configure the Managed Switch's ports.
PAGE 100
User’s Manual of IGS-10080MFT  Configured Link Speed Select any available link speed for the given switch port. Draw the menu bar to select the mode.  All- Setup whole ports with the same setting.  Auto Copper - Setup Auto negotiation.  Auto Fiber - Setup Auto negotiation.  10 Half - Force sets 10Mbps/Half-Duplex mode.  10 Full - Force sets 10Mbps/Full-Duplex mode.  100 Half - Force sets 100Mbps/Half-Duplex mode.  100 Full - Force sets 100Mbps/Full-Duplex mode.
PAGE 101
User’s Manual of IGS-10080MFT Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. : Click to refresh the page. Any changes made locally will be undone. 4.4.2 Port Statistics Overview This page provides an overview of general traffic statistics for all switch ports. The Port Statistics Overview screen in Figure 4-4-2 appears.
PAGE 102
User’s Manual of IGS-10080MFT 4.4.3 Port Statistics Detail This page provides detailed traffic statistics for a specific switch port. Use the port select box to select which switch port details to display. The selected port is belonging to the currently selected stack unit, as reflected by the page header. The displayed counters are the totals for receive and transmit, the size counters for receive and transmit, and the error counters for receive and transmit.
PAGE 103
User’s Manual of IGS-10080MFT Receive and Transmit Size Counters The number of received and transmitted (good and bad) packets split into categories based on their respective frame sizes. Receive and Transmit Queue Counters The numeric of received and transmitted packet is per input and output queue. Receive Error Counters Object Description  Rx Drops The numeric of frames is dropped due to lack of receive buffers or egress congestion.
PAGE 104
User’s Manual of IGS-10080MFT 4.4.4 SFP Information You can check the physical or operational status of an SFP module via the SFP Module Information page. This page shows the operational status, such as the transceiver type, speed, and wavelength and supports distance of SFP module on a specific interface. You can also use the hyperlink of port no. to check the statistics on a speficic interface. The SFP Module Information screen in Figure 4-4-4 appears.
PAGE 105
User’s Manual of IGS-10080MFT 4.4.5 Port Mirror Configure port Mirroring on this page. This function provide to monitoring network traffic that forwards a copy of each incoming or outgoing packet from one port of a network Switch to another port where the packet can be studied. It enables the manager to keep close track of switch performance and alter it if necessary.
PAGE 106
User’s Manual of IGS-10080MFT  Mirror Port Configuration The Port Mirror screen in Figure 4-4-6 appears. Figure 4-4-6: Mirror Configuration Page Screenshot The page includes the following fields: Object Description  Port to mirror on Port to mirror also known as the mirror port. Frames from ports that have either source (rx) or destination (tx) mirroring enabled are mirrored on this port. Disabled disables mirroring.  Port The logical port for the settings contained in the same row.
PAGE 107
User’s Manual of IGS-10080MFT Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.5 Link Aggregation Port Aggregation optimizes port usage by linking a group of ports together to form a single Link Aggregated Groups (LAGs). Port Aggregation multiplies the bandwidth between the devices, increases port flexibility, and provides link redundancy. Each LAG is composed of ports of the same speed, set to full-duplex operations.
PAGE 108
User’s Manual of IGS-10080MFT Figure 4-5-1: Link Aggregation Topology The Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Partner Systems that require high speed redundant links. Link aggregation lets you group up to eight consecutive ports into a single dedicated connection. This feature can expand bandwidth to a device on the network. LACP operation requires full-duplex mode, more detail information refer to the IEEE 802.3ad standard.
PAGE 109
User’s Manual of IGS-10080MFT It allows a maximum of 10 ports to be aggregated at the same time. The Managed Switch support Gigabit Ethernet ports (up to 5 groups). If the group is defined as a LACP static link aggregationing group, then any extra ports selected are placed in a standby mode for redundancy if one of the other ports fails. If the group is defined as a local static link aggregationing group, then the number of ports must be the same as the group member ports.
PAGE 110
User’s Manual of IGS-10080MFT 4.5.1 Static Aggregation This page is used to configure the Aggregation hash mode and the aggregation group. The aggregation hash mode settings are global, whereas the aggregation group relate to the currently selected stack unit, as reflected by the page header. Hash Code Contributors The Static Aggeration screen in Figure 4-5-2 appears.
PAGE 111
User’s Manual of IGS-10080MFT Static Aggregation Group Configuration The Aggregation Group Configuration screen in Figure 4-5-3 appears. Figure 4-5-3: Aggregation Group Configuration Page Screenshot The page includes the following fields: .Object Description  Group ID Indicates the group ID for the settings contained in the same row. Group ID "Normal" indicates there is no aggregation. Only one group ID is valid per port.  Port Members Each switch port is listed for each group ID.
PAGE 112
User’s Manual of IGS-10080MFT 4.5.2 LACP Configuration Link Aggregation Control Protocol (LACP) - LACP LAG negotiate Aggregated Port links with other LACP ports located on a different device. LACP allows switches connected to each other to discover automatically whether any ports are member of the same LAG. This page allows the user to inspect the current LACP port configurations, and possibly change them as well.
PAGE 113
User’s Manual of IGS-10080MFT different keys cannot. The default setting is “Auto”  Role The Role shows the LACP activity status. The Active will transmit LACP packets each second; while Passive will wait for a LACP packet from a partner (speak if spoken to).  Timeout The Timeout controls the period between BPDU transmissions. Fast will transmit LACP packets each second, while Slow will wait for 30 seconds before sending a LACP packet.  Prio The Prio controls the priority of the port.
PAGE 114
User’s Manual of IGS-10080MFT Buttons : Click to refresh the page immediately. Auto-refresh : Automatic refresh occurs every 3 seconds. 4.5.4 LACP Port Status This page provides a status overview for LACP status for all ports. The LACP Port Status screen in Figure 4-5-6 appears. Figure 4-5-6: LACP Status Page Screenshot The page includes the following fields: Object Description  Port The switch port number.  LACP 'Yes' means that LACP is enabled and the port link is up.
PAGE 115
User’s Manual of IGS-10080MFT Buttons : Click to refresh the page immediately. Auto-refresh : Automatic refresh occurs every 3 seconds. 4.5.5 LACP Port Statistics This page provides an overview for LACP statistics for all ports. The LACP Port Statistics screen in Figure 4-5-7 appears. Figure 4-5-7: LACP Statistics Page Screenshot The page includes the following fields: Object Description  Port The switch port number.  LACP Received Shows how many LACP frames have been sent from each port.
PAGE 116
User’s Manual of IGS-10080MFT 4.6 VLAN 4.6.1 VLAN Overview A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. VLAN can be used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN. VLAN also logically segment the network into different broadcast domains so that packets are forwarded only between ports within the VLAN.
PAGE 117
User’s Manual of IGS-10080MFT 4.6.2 IEEE 802.1Q VLAN In large networks, routers are used to isolate broadcast traffic for each subnet into separate domains. This Managed Switch provides a similar service at Layer 2 by using VLANs to organize any group of network nodes into separate broadcast domains. VLANs confine broadcast traffic to the originating group, and can eliminate broadcast storms in large networks. This also provides a more secure and cleaner network environment. An IEEE 802.
PAGE 118
User’s Manual of IGS-10080MFT - Untagging - The act of stripping 802.1Q VLAN information out of the packet header. ■ 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the Ether Type field. When a packet's Ether Type field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
PAGE 119
User’s Manual of IGS-10080MFT ■ Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLAN to span network devices (and indeed, the entire network – if all network devices are 802.1Q compliant). Every physical port on a switch has a PVID. 802.1Q ports are also assigned a PVID, for use within the switch.
PAGE 120
User’s Manual of IGS-10080MFT ■ VLAN Classification When the switch receives a frame, it classifies the frame in one of two ways. If the frame is untagged, the switch assigns the frame to an associated VLAN (based on the default VLAN ID of the receiving port). But if the frame is tagged, the switch uses the tagged VLAN ID to identify the port broadcast domain of the frame.
PAGE 121
User’s Manual of IGS-10080MFT  VLAN Learning Display the VLAN learning mode. The Industrial Managed Switch supports IVL (IVL Independent vlan learning).  Configurable PVID Indicates whether or not configurable PVID tagging is implemented. Tagging 4.6.4 VLAN Port Configuration This page is used for configuring the Managed Switch port VLAN. The VLAN per Port Configuration page contains fields for managing ports that are part of a VLAN.
PAGE 122
User’s Manual of IGS-10080MFT A service provider’s customers may have specific requirements for their internal VLAN IDs and number of VLANs supported. VLAN ranges required by different customers in the same service-provider network might easily overlap, and traffic passing through the infrastructure might be mixed.
PAGE 123
User’s Manual of IGS-10080MFT VLAN Port Configuration The VLAN Port Configuration screen in Figure 4-6-2 appears. Figure 4-6-2 : VLAN Port Configuration Page Screenshot The page includes the following fields: Object Description  Port This is the logical port number for this row.  PVID Allow assign PVID for selected port. The range for the PVID is 1-4094. The PVID will be inserted into all untagged frames entering the ingress port.
PAGE 124
User’s Manual of IGS-10080MFT frames, untagged frames received on the port are discarded. By default, the field is set to All.  Link Type Allow 802.1Q Untagged or Tagged VLAN for selected port. When adding a VLAN to selected port, it tells the switch whether to keep or remove the tag from a frame on egress.  Untag: outgoing frames without VLAN-Tagged.  Tagged: outgoing frames with VLAN-Tagged.  Q-in-Q Mode Sets the Managed Switch to QinQ mode, and allows the QinQ tunnel port to be configured.
PAGE 125
User’s Manual of IGS-10080MFT 4.6.5 VLAN Membership  Adding Static Members to VLANs (VLAN Index) Use the VLAN Static Table to configure port members for the selected VLAN index. The VLAN membership configuration for the selected stack switch / unit switch can be monitored and modified here. Up to 255 VLANs are supported. This page allows for adding and deleting VLANs as well as adding and deleting port members of each VLAN. The VLAN Membership screen in Figure 4-6-3 appears.
PAGE 126
User’s Manual of IGS-10080MFT A VLAN without any port members on any stack unit will be deleted when you click "Save". The button can be used to undo the addition of new VLANs. Buttons : Click to add new VLAN. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. : Refreshes the displayed table starting from the "VLAN ID" input fields. : Updates the table starting from the first entry in the VLAN Table, i.e. the entry with the lowest VLAN ID.
PAGE 127
User’s Manual of IGS-10080MFT for all VLANs configured by a selected VLAN User (selection shall be allowed by a Combo Box). When ALL VLAN Users is selected, it shall show this information for all the VLAN Users, and this is the default. VLAN membership allows the frames Classified to the VLAN ID to be forwarded to the respective VLAN member ports.
PAGE 128
User’s Manual of IGS-10080MFT 4.6.7 VLAN Port Status This page provides VLAN Port Staus. The VLAN Port Status screen in Figure 4-6-5 appears. Figure 4-6-5: VLAN Port Status for Static User Page Screenshot The page includes the following fields: Object Description  Port The logical port for the settings contained in the same row.  PVID Shows the VLAN identifier for that port. The allowed values are 1 through 4095. The default value is 1.  Ingress Filtering Show the ingress filtering for a port.
PAGE 129
User’s Manual of IGS-10080MFT 4.6.8 Private VLAN The Private VLAN membership configurations for the switch can be monitored and modified here. Private VLANs can be added or deleted here. Port members of each Private VLAN can be added or removed here. Private VLANs are based on the source port mask, and there are no connections to VLANs. This means that VLAN IDs and Private VLAN IDs can be identical. A port must be a member of both a VLAN and a Private VLAN to be able to forward packets.
PAGE 130
User’s Manual of IGS-10080MFT Buttons : Click to add new VLAN. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Click to refresh the page immediately. 4.6.9 Port Isolation Overview When a VLAN is configured to be a private VLAN, communication between ports within that VLAN can be prevented.
PAGE 131
User’s Manual of IGS-10080MFT For private VLANs to be applied, the switch must first be configured for standard VLAN operation When this is in place, one or more of the configured VLANs can be configured as private VLANs.
PAGE 132
User’s Manual of IGS-10080MFT 4.6.10 VLAN setting example: - Separate VLAN - 802.1Q VLAN Trunk - Port Isolate 4.6.10.1 Two separate 802.1Q VLAN The diagram shows how the Industrial Managed Switch handle Tagged and Untagged traffic flow for two VLANs. VLAN Group 2 and VLAN Group 3 are separated VLAN. Each VLAN isolate network traffic so only members of the VLAN receive traffic from the same VLAN members.
PAGE 133
User’s Manual of IGS-10080MFT  2. [PC-4],[PC-5] and [PC-6] received no packet. 3. While the packet leaves Port-2, it will be stripped away it tag becoming an untagged packet. 4. While the packet leaves Port-3, it will keep as a tagged packet with VLAN Tag=2. Tagged packet entering VLAN 2 5. While [PC-3] transmit a tagged packet with VLAN Tag=2 enters Port-3, [PC-1] and [PC-2] will received the packet through Port-1 and Port-2. 6.
PAGE 134
User’s Manual of IGS-10080MFT Figure 4-6-9: Add new VLAN group, assign VLAN members for VLAN 2 and VLAN 3 and remove specify ports from VLAN 1 member It’s import to remove the VLAN members from VLAN 1 configuration. Or the ports would become overlap setting. ( About the overlapped VLAN configuration, see next VLAN configure sample) 4. Assign PVID for each port: Port-1,Port-2 and Port-3 : PVID=2 Port-4,Port-5 and Port-6 : PVID=3 Port-7~Port-24 : PVID=1 5.
PAGE 135
User’s Manual of IGS-10080MFT 4.6.10.2 VLAN Trunking between two 802.1Q aware Switch The most cases are used for “Uplink” to other switches. VLANs are separated at different switches, but they need to access with other switches within the same VLAN group. The screen in Figure 4-6-11 appears. Setup steps 1. Create VLAN Group Set VLAN Group 1 = Default-VLAN with VID (VLAN ID) =1 Add two VLANs – VLAN 2 and VLAN 3 VLAN Group 2 with VID=2 VLAN Group 3 with VID=3 2.
PAGE 136
User’s Manual of IGS-10080MFT 1. Specify Port-8 to be the 802.1Q VLAN Trunk port. 2. Assign Port-8 to both VLAN 2 and VLAN 3 at the VLAN Member configuration page. 3. Define a VLAN 1 as a “Public Area” that overlapping with both VLAN 2 members and VLAN 3 members. 4. Assign the VLAN Trunk Port to be the member of each VLAN – which wants to be aggregated. At this sample, add Port-8 to be VLAN 2 and VLAN 3 member port. The screen in Figure 4-6-12 appears.
PAGE 137
User’s Manual of IGS-10080MFT 4.6.10.3 Port Isolate The diagram shows how the Managed Switch handles isolate and promiscuous ports, and the each PCs are not able to access each other PCs of each isolate port. But they all need to access with the same server/AP/Printer. The screen in Figure 4-6-14 appears. This section will show you how to configure the port for the server – that could be accessed by each isolate port. Figure 4-6-14: The Port Isolate VLAN Diagram Setup steps 1.
PAGE 138
User’s Manual of IGS-10080MFT 4.6.11 MAC-based VLAN The MAC-based VLAN enties can be configured here. This page allows for adding and deleting MAC-based VLAN entries and assigning the entries to different ports. This page shows only static entries. The MAC-based VLAN screen in Figure 4-6-17 appears. Figure 4-6-17: MAC-based VLAN Membership Configuration Page Screenshot The page includes the following fields: Object Description  Delete To delete a MAC-based VLAN entry, check this box and press save.
PAGE 139
User’s Manual of IGS-10080MFT 4.6.12 MAC-based VLAN Status This page shows MAC-based VLAN entries configured by various MAC-based VLAN users. The MAC-based VLAN Status screen in Figure 4-6-18 appears. Figure 4-6-18: MAC-based VLAN Membership Configuration for User Static Page Screenshot The page includes the following fields: Object Description  MAC Address Indicates the MAC address.  VLAN ID Indicates the VLAN ID.  Port Members Port members of the MAC-based VLAN entry.
PAGE 140
User’s Manual of IGS-10080MFT The page includes the following fields: Object Description  Delete To delete an IP subnet-based VLAN entry, check this box and press save. The entry will be deleted in the stack.  VEC ID Indicates the index of the entry. It is user configurable. It's value ranges from 0-256. If a VCE ID is 0, application will auto-generate the VCE ID for that entry. Deletion and lookup of IP subnet-based VLAN are based on VCE ID.  IP Address Indicates the IP address.
PAGE 141
User’s Manual of IGS-10080MFT The page includes the following fields: Object Description  Delete To delete a Protocol to Group Name map entry, check this box. The entry will be deleted on the switch during the next Save.  Frame Type Frame Type can have one of the following values: 1. Ethernet 2. LLC 3. SNAP Note: On changing the Frame type field, valid value of the following text field will vary depending on the new frame type you selected.
PAGE 142
User’s Manual of IGS-10080MFT Buttons : Click to add a new entry in mapping table. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Click to refresh the page immediate 4.6.15 Protocol-based VLAN Mambership This page allows you to map a already configured Group Name to a VLAN for the switch.
PAGE 143
User’s Manual of IGS-10080MFT are members, and all boxes are unchecked. Buttons : Click to add a new entry in mapping table. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
PAGE 144
User’s Manual of IGS-10080MFT 4.7 Spanning Tree Protocol 4.7.1 Theory The Spanning Tree protocol can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices in your network to ensure that only one route exists between any two stations on the network, and provide backup links which automatically take over when a primary link goes down.
PAGE 145
User’s Manual of IGS-10080MFT The switch sends BPDUs to communicate and construct the spanning-tree topology. All switches connected to the LAN on which the packet is transmitted will receive the BPDU. BPDUs are not directly forwarded by the switch, but the receiving switch uses the information in the frame to calculate a BPDU, and, if the topology changes, initiates a BPDU transmission.
PAGE 146
User’s Manual of IGS-10080MFT Figure 4-7-1: STP Port State Transitions You can modify each port state by using management software. When you enable STP, every port on every switch in the network goes through the blocking state and then transitions through the states of listening and learning at power up. If properly configured, each port stabilizes to the forwarding or blocking state.
PAGE 147
User’s Manual of IGS-10080MFT Parameter Description Default Value Bridge Identifier(Not user A combination of the User-set priority and 32768 + MAC configurable the switch’s MAC address.
PAGE 148
User’s Manual of IGS-10080MFT User-Changeable STA Parameters The Switch’s factory default setting should cover the majority of installations. However, it is advisable to keep the default settings as set at the factory; unless, it is absolutely necessary. The user changeable parameters in the Switch are as follows: Priority – A Priority for the switch can be set from 0 to 65535. 0 is equal to the highest Priority. Hello Time – The Hello Time can be from 1 to 10 seconds.
PAGE 149
User’s Manual of IGS-10080MFT Figure 4-7-2: Before Applying the STA Rules In this example, only the default STP values are used.
PAGE 150
User’s Manual of IGS-10080MFT The switch with the lowest Bridge ID (switch C) was elected the root bridge, and the ports were selected to give a high port cost between switches B and C. The two (optional) Gigabit ports (default port cost = 20,000) on switch A are connected to one (optional) Gigabit port on both switch B and C. The redundant link between switch B and C is deliberately chosen as a 100 Mbps Fast Ethernet link (default port cost = 200,000).
PAGE 151
User’s Manual of IGS-10080MFT The page includes the following fields: Basic Settings Object Description  Protocol Version The STP protocol version setting. Valid values are STP, RSTP and MSTP.  Bridge Priority Controls the bridge priority. Lower numeric values have better priority. The bridge priority plus the MSTI instance number, concatenated with the 6-byte MAC address of the switch forms a Bridge Identifier. For MSTP operation, this is the priority of the CIST.
PAGE 152
User’s Manual of IGS-10080MFT re-enabled for normal STP operation. The condition is also cleared by a system reboot.  Port Error Recovery The time that has to pass before a port in the error-disabled state can be enabled. Valid values are between 30 and 86400 seconds (24 hours). Timeout The Industrial Managed Switch implement the Rapid Spanning Protocol as the default spanning tree protocol. While select “Compatibles” mode, the system use the RSTP (802.
PAGE 153
User’s Manual of IGS-10080MFT Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Click to refresh the page immediate 4.7.4 CIST Port Configuration This page allows the user to inspect the current STP CIST port configurations, and possibly change them as well. The CIST Port Configuration screen in Figure 4-7-6 appears.
PAGE 154
User’s Manual of IGS-10080MFT  Priority Controls the port priority. This can be used to control priority of ports having identical port cost. (See above). Default: 128 Range: 0-240, in steps of 16 All means all ports will have one specific setting.  operEdge (state flag) Operational flag describing whether the port is connecting directly to edge devices. (No Bridges attached). Transition to the forwarding state is faster for edge ports (having operEdge true) than for other ports.
PAGE 155
User’s Manual of IGS-10080MFT Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. By default, the system automatically detects the speed and duplex mode used on each port, and configures the path cost according to the values shown below. Path cost “0” is used to indicate auto-configuration mode. When the short path cost method is selected and the default path cost recommended by the IEEE 802.
PAGE 156
User’s Manual of IGS-10080MFT 4.7.5 MSTI Priorities This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. The MSTI Priority screen in Figure 4-7-7 appears. Figure 4-7-7: MSTI Priority Page Screenshot The page includes the following fields: Object Description  MSTI The bridge instance. The CIST is the default instance, which is always active.
PAGE 157
User’s Manual of IGS-10080MFT 4.7.6 MSTI Configuration This page allows the user to inspect the current STP MSTI bridge instance priority configurations, and possibly change them as well. The MSTI Configuration screen in Figure 4-7-8 appears.
PAGE 158
User’s Manual of IGS-10080MFT The page includes the following fields: Configuration Identification Object Description  Configuration Name The name identifiying the VLAN to MSTI mapping. Bridges must share the name and revision (see below), as well as the VLAN-to-MSTI mapping configuration in order to share spanning trees for MSTI's. (Intra-region). The name is at most 32 characters.  Configuration Revision The revision of the MSTI configuration named above.
PAGE 159
User’s Manual of IGS-10080MFT The page includes the following fields: MSTI Port Configuration Object Description  Select MSTI Select the bridge instance and set more detail configuration. Figure 4-7-10: MST1 MSTI Port Configuration Page Screenshot The page includes the following fields: MSTx MSTI Port Configuration Object Description  Port The switch port number of the corresponding STP CIST (and MSTI) port.  Path Cost The Configuration All with available values will assign to whole items.
PAGE 160
User’s Manual of IGS-10080MFT cost ports are chosen as forwarding ports in favor of higher path cost ports. Valid values are in the range 1 to 200000000. All means all ports will have one specific setting.  Priority The Configuration All with available values will assign to whole items. Controls the port priority. This can be used to control priority of ports having identical port cost. (See above). All means all ports will have one specific setting.
PAGE 161
User’s Manual of IGS-10080MFT  BackupPort  RootPort  DesignatedPort  CIST State The current STP port state of the CIST port . The port state can be one of the following values:  Disabled  Blocking  Learning  Forwarding  Non-STP  Uptime The time since the bridge port was last initialized. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Click to refresh the page immediate 4.7.
PAGE 162
User’s Manual of IGS-10080MFT  TCN The number of (legacy) Topology Change Notification BPDU's received/transmitted on the port.  Discarded Unknown The number of unknown Spanning Tree BPDU's received (and discarded) on the port.  Discarded Illegal The number of illegal Spanning Tree BPDU's received (and discarded) on the port. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
PAGE 163
User’s Manual of IGS-10080MFT 4.8 Multicast 4.8.1 IGMP Snooping The Internet Group Management Protocol (IGMP) lets host and routers share information about multicast groups memberships. IGMP snooping is a switch feature that monitors the exchange of IGMP messages and copies them to the CPU for feature processing. The overall purpose of IGMP Snooping is to limit the forwarding of multicast frames to only ports that are a member of the multicast group.
PAGE 164
User’s Manual of IGS-10080MFT Figure 4-8-2: Multicast Flooding Figure 4-8-3: IGMP Snooping Multicast Stream Control 164
PAGE 165
User’s Manual of IGS-10080MFT IGMP Versions 1 and 2 Multicast groups allow members to join or leave at any time. IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group. IGMP version 1 is defined in RFC 1112. It has a fixed packet size and no optional data.
PAGE 166
User’s Manual of IGS-10080MFT message, and query messages that are specific to a given group. The states a computer will go through to join or to leave a multicast group are shown below: Figure 4-8-4: IGMP State Transitions  IGMP Querier – A router, or multicast-enabled switch, can periodically ask their hosts if they want to receive multicast traffic.
PAGE 167
User’s Manual of IGS-10080MFT 4.8.2 IGMP Snooping Configuration This page provides IGMP Snooping related configuration. The IGMP Snooping Configuration screen in Figure 4-8-5 appears. Figure 4-8-5: IGMP Snooping Configuration Page Screenshot The page includes the following fields: Object Description  Snooping Enabled Enable the Global IGMP Snooping.  Unregistered IPMCv4 Enable unregistered IPMCv4 traffic flooding.
PAGE 168
User’s Manual of IGS-10080MFT If an aggregation member port is selected as a router port, the whole aggregation will act as a router port. All means all ports will have one specific setting.  Fast Leave Enable the fast leave on the port.  Throtting The Configuration All with available values will assign to whole items. Enable to limit the number of multicast groups to which a switch port can belong. All means all ports will have one specific setting. Buttons : Click to save changes.
PAGE 169
User’s Manual of IGS-10080MFT network. The allowed selection is IGMP-Auto, Forced IGMPv1, Forced IGMPv2, Forced IGMPv3, default compatibility value is IGMP-Auto.  RV Robustness Variable. The Robustness Variable allows tuning for the expected packet loss on a network. The allowed range is 1 to 255, default robustness variable value is 2.  QI Query Interval. The Query Interval is the interval between General Queries sent by the Querier.
PAGE 170
User’s Manual of IGS-10080MFT 4.8.4 IGMP Snooping Port Group Filtering In certain switch applications, the administrator may want to control the multicast services that are available to end users. For example, an IP/TV service is based on a specific subscription plan. The IGMP filtering feature fulfills this requirement by restricting access to specified multicast services on a switch port, and IGMP throttling limits the number of simultaneous multicast groups a port can join.
PAGE 171
User’s Manual of IGS-10080MFT 4.8.5 IGMP Snooping Status This page provides IGMP Snooping status. The IGMP Snooping Status screen in Figure 4-8-8 appears. Figure 4-8-8: IGMP Snooping Status Page Screenshot The page includes the following fields: Object Description  VLAN ID The VLAN ID of the entry.  Querier Version Working Querier Version currently.  Host Version Working Host Version currently.  Querier Status Show the Querier status is "ACTIVE" or "IDLE".
PAGE 172
User’s Manual of IGS-10080MFT 4.8.6 IGMP Group Information Entries in the IGMP Group Table are shown on this page. The IGMP Group Table is sorted first by VLAN ID, and then by group. Each page shows up to 99 entries from the IGMP Group table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the IGMP Group Table.
PAGE 173
User’s Manual of IGS-10080MFT 4.8.7 IGMPv3 Information Entries in the IGMP SFM Information Table are shown on this page. The IGMP SFM (Souce-Filtered Multicast) Information Table also contains the SSM (Source-Specific Multicast) information. This table is sorted first by VLAN ID, then by group, and then by Port No. Diffrent source addresses belong to the same group are treated as single entry.
PAGE 174
User’s Manual of IGS-10080MFT 4.8.8 MLD Snooping Configuration This page provides MLD Snooping related configuration. The MLD Snooping Configuration screen in Figure 4-8-11 appears. Figure 4-8-11: MLD Snooping Configuration Page Screenshot The page includes the following fields: Object Description  Snooping Enabled Enable the Global MLD Snooping.  Unregistered IPMCv6 Enable unregistered IPMCv6 traffic flooding.
PAGE 175
User’s Manual of IGS-10080MFT  Router Port Specify which ports act as router ports. A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or MLD querier. If an aggregation member port is selected as a router port, the whole aggregation will act as a router port. All means all ports will have one specific setting.  Fast Leave Enable the fast leave on the port.  Throtting The Configuration All with available values will assign to whole items.
PAGE 176
User’s Manual of IGS-10080MFT  Compatibility Compatibility is maintained by hosts and routers taking appropriate actions depending on the versions of MLD operating on hosts and routers within a network. The allowed selection is MLD-Auto, Forced MLDv1, Forced MLDv2, default compatibility value is MLD-Auto.  RV Robustness Variable. The Robustness Variable allows tuning for the expected packet loss on a link. The allowed range is 1 to 255, default robustness variable value is 2.  QI Query Interval.
PAGE 177
User’s Manual of IGS-10080MFT 4.8.10 MLD Snooping Port Group Filtering In certain switch applications, the administrator may want to control the multicast services that are available to end users. For example, an IP/TV service is based on a specific subscription plan. The MLD filtering feature fulfills this requirement by restricting access to specified multicast services on a switch port, and MLD throttling limits the number of simultaneous multicast groups a port can join.
PAGE 178
User’s Manual of IGS-10080MFT 4.8.11 MLD Snooping Status This page provides MLD Snooping status. The IGMP Snooping Status screen in Figure 4-8-14 appears. Figure 4-8-14: MLD Snooping Status Page Screenshot The page includes the following fields: Object Description  VLAN ID The VLAN ID of the entry.  Querier Version Working Querier Version currently.  Host Version Working Host Version currently.  Querier Status Show the Querier status is "ACTIVE" or "IDLE".
PAGE 179
User’s Manual of IGS-10080MFT 4.8.12 MLD Groups Information Entries in the MLD Group Table are shown on this page. The MLD Group Table is sorted first by VLAN ID, and then by group. Each page shows up to 99 entries from the MLD Group table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the MLD Group Table.
PAGE 180
User’s Manual of IGS-10080MFT 4.8.13 MLDv2 Information Entries in the MLD SFM Information Table are shown on this page. The MLD SFM (Souce-Filtered Multicast) Information Table also contains the SSM (Source-Specific Multicast) information. This table is sorted first by VLAN ID, then by group, and then by Port No. Diffrent source addresses belong to the same group are treated as single entry.
PAGE 181
User’s Manual of IGS-10080MFT 4.8.14 MVR The MVR feature enables multicast traffic forwarding on the Multicast VLANs. In a multicast television application, a PC or a network television or a set-top box can receive the multicast stream. Multiple set-top boxes or PCs can be connected to one subscriber port, which is a switch port configured as an MVR receiver port.
PAGE 182
User’s Manual of IGS-10080MFT  MVR Name MVR Name is an optional attribute to indicate the name of the specific MVR VLAN. Maximum length of the MVR VLAN Name string is 32. MVR VLAN Name can only contain alphabets or numbers. When the optional MVR VLAN name is given, it should contain at least one alphabet. MVR VLAN name can be edited for the existing MVR VLAN entries or it can be added to the new entries.  Mode Specify the MVR mode of operation.
PAGE 183
User’s Manual of IGS-10080MFT Buttons : Click to add new MVR VLAN. Specify the VID and configure the new entry. Click "Save" : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.8.15 MVR Status This page provides MVR status. The MVR Status screen in Figure 4-8-18 appears. Figure 4-8-18: MVR Status Page Screenshot The page includes the following fields: Object Description  VLAN ID The Multicast VLAN ID.
PAGE 184
User’s Manual of IGS-10080MFT 4.8.16 MVR Groups Information Entries in the MVR Group Table are shown on this page. The MVR Group Table is sorted first by VLAN ID, and then by group. Each page shows up to 99 entries from the MVR Group table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the MVR Group Table.
PAGE 185
User’s Manual of IGS-10080MFT 4.8.17 MVR SFM Information Entries in the MVR SFM Information Table are shown on this page. The MVR SFM (Source-Filtered Multicast) Information Table also contains the SSM (Source-Specific Multicast) information. This table is sorted first by VLAN ID, then by group, and then by Port. Different source addresses belong to the same group are treated as single entry. The MVR Groups Information screen in Figure 4-8-20 appears.
PAGE 186
User’s Manual of IGS-10080MFT 4.9 Quality of Service 4.9.1 Understand QOS Quality of Service (QoS) is an advanced traffic prioritization feature that allows you to establish control over network traffic. QoS enables you to assign various grades of network service to different types of traffic, such as multi-media, video, protocol-specific, time critical, and file-backup traffic. QoS reduces bandwidth limitations, delay, loss, and jitter.
PAGE 187
User’s Manual of IGS-10080MFT 4.9.2 Port Policing This page allows you to configure the Policer settings for all switch ports. The Port Policing screen in Figure 4-9-1 appears. Figure 4-9-1: QoS Ingress Port Policers Page Screenshot The page includes the following fields: Object Description  Port The port number for which the configuration below applies.  Enabled Controls whether the policer is enabled on this switch port, * means selection all ports of Industrial Managed Switch.
PAGE 188
User’s Manual of IGS-10080MFT 4.9.3 Port Classification This page allows you to configure the basic QoS Ingress Classification settings for all switch ports. The Port Classification screen in Figure 4-9-2 appears. Figure 4-9-2 : QoS Ingress Port Classification Page Screenshot The page includes the following fields: Object Description  Port The port number for which the configuration below applies.  QoS Class The Configuration All with available values will assign to whole ports.
PAGE 189
User’s Manual of IGS-10080MFT  Tag Class Shows the classification mode for tagged frames on this port.  Disabled: Use default QoS class and DP level for tagged frames.  Enabled: Use mapped versions of PCP and DEI for tagged frames. Click on the mode in order to configure the mode and/or mapping. For more detail information, please refer to chapter 4.9.3.1.  DSCP Based Click to Enable DSCP Based QoS Ingress Port Classification. Buttons : Click to save changes.
PAGE 190
User’s Manual of IGS-10080MFT The page includes the following fields: Object Description  Tag Classification Controls the classification mode for tagged frames on this port.  Disabled: Use default QoS class and DP level for tagged frames.  Enabled: Use mapped versions of PCP and DEI for tagged frames.  (PCP, DEI) to (QoS The Configuration All with available values will assign to whole items.
PAGE 191
User’s Manual of IGS-10080MFT For more detail, please refer to chapter 4.9.5.1.  Mode Shows the scheduling mode for this port.  Q0 ~ Q5 Shows the weight for this queue and port. 4.9.5 Port Shaping This page provides an overview of QoS Egress Port Shapers for all switch ports. The Port Shapping screen in Figure 4-9-5 appears.
PAGE 192
User’s Manual of IGS-10080MFT 4.9.5.1 QoS Egress Port Schedule and Shapers The Port Scheduler and Shapers for a specific port are configured on this page. The QoS Egress Port Schedule and Shaper sscreen in Figure 4-9-6 appears. Figure 4-9-6: QoS Egress Port Schedule and Shapers Page Screenshot The page includes the following fields: Object Description  Schedule Mode Controls whether the scheduler mode is "Strict Priority" or "Weighted" on this switch port.
PAGE 193
User’s Manual of IGS-10080MFT  Queue Scheduler Shows the weight in percent for this queue. This parameter is only shown if "Scheduler Mode" is set to "Weighted". Percent  Port Shaper Enable Controls whether the port shaper is enabled for this switch port.  Port Shaper Rate Controls the rate for the port shaper. The default value is 500. This value is restricted to 100-1000000 when the "Unit" is "kbps", and it is restricted to 1-3300 when the "Unit" is "Mbps".
PAGE 194
User’s Manual of IGS-10080MFT  Default: Use default PCP/DEI values.  Mapped: Use mapped versions of QoS class and DP level. 4.9.6.1 QoS Egress Port Tag Remarking The QoS Egress Port Tag Remarking for a specific port are configured on this page. The QoS Egress Port Tag Remarking sscreen in Figure 4-9-8 appears. Figure 4-9-8: QoS Egress Port Tag Remarking Page Screenshot The page includes the following fields: Object Description  Mode Controls the tag remarking mode for this port.
PAGE 195
User’s Manual of IGS-10080MFT 4.9.7 Port DSCP This page allows you to configure the basic QoS Port DSCP Configuration settings for all switch ports. The Port DSCP screen in Figure 4-9-9 appears. Figure 4-9-9 : QoS Port DSCP Configuration Page Screenshot The page includes the following fields: Object Description  Port The Port coulmn shows the list of ports for which you can configure dscp ingress and egress settings.
PAGE 196
User’s Manual of IGS-10080MFT   Egress All: Classify all DSCP. The Configuration All with available options will assign to whole ports. Port Egress Rewriting can be one of –. All means all ports will have one specific setting.  Disable: No Egress rewrite.  Enable: Rewrite enabled without remapping.  Remap DP Unaware: DSCP from analyzer is remapped and frame is remarked with remapped DSCP value. The remapped DSCP value is always taken from the 'DSCP Translation->Egress Remap DP0' table.
PAGE 197
User’s Manual of IGS-10080MFT 4.9.8 DSCP-Based QoS This page allows you to configure the basic QoS DSCP based QoS Ingress Classification settings for all switches. The DSCP-Based QoS screen in Figure 4-9-10 appears. Figure 4-9-10: DSCP-Based QoS Ingress Classification Page Screenshot The page includes the following fields: Object Description  DSCP Maximum number of support ed DSCP values are 63.  Trust Click to check if the DSCP value is trusted.
PAGE 198
User’s Manual of IGS-10080MFT  QoS Class The Configuration All with available values will assign to whole DSCP values. QoS Class value can be any of (0-7)  DPL The Configuration All with available values will assign to whole DSCP values. Drop Precedence Level (0-1) Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.9.9 DSCP Translation This page allows you to configure the basic QoS DSCP Translation settings for all switches.
PAGE 199
User’s Manual of IGS-10080MFT The page includes the following fields: Object Description  DSCP Maximum numbers of supported DSCP values are 64 and valid DSCP value ranges from 0 to 63.  Ingress Ingress side DSCP can be first translated to new DSCP before using the DSCP for QoS class and DPL map. There are two configuration parameters for DSCP Translation –  Translate  Classify  Translate The Configuration All with available values will assign to whole DSCP values.
PAGE 200
User’s Manual of IGS-10080MFT 4.9.10 DSCP Classification This page allows you to map DSCP value to a QoS Class and DPL value. The DSCP Classification screen in Figure 4-9-12 appears. Figure 4-9-12: DSCP Classification Page Screenshot The page includes the following fields: Object Description  QoS Class Available QoS Class value ranges from 0 to 7. QoS Class (0-7) can be mapped to followed parameters.  DPL Drop Precedence Level (0-1) can be configured for all available QoS Classes.
PAGE 201
User’s Manual of IGS-10080MFT 4.9.11 QoS Control List This page shows the QoS Control List (QCL), which is made up of the QCEs. Each row describes a QCE that is defined. The maximum number of QCEs is 256 on each switch. Click on the lowest plus sign to add a new QCE to the list. The QoS Control List screen in Figure 4-9-13 appears. Figure 4-9-13: QoS Control List Configuration Page Screenshot The page includes the following fields: Object Description  QCE# Indicates the index of QCE.
PAGE 202
User’s Manual of IGS-10080MFT  DEI Drop Eligible Indicator: Valid value of DEI can be any of values between 0, 1 or 'Any'.  Action Indicates the classification action taken on ingress frame if parameters configured are matched with the frame's content. There are three action fields: Class, DPL and DSCP.  Class: Classified QoS Class; if a frame matches the QCE it will be put in the queue.
PAGE 203
User’s Manual of IGS-10080MFT The page includes the following fields: Object Description  Port Members Check the checkbox button in case you what to make any port member of the QCL entry. By default all ports will be checked  Key Parameters Key configuration is described as below:  Tag Value of Tag field can be 'Any', 'Untag' or 'Tag'.  VID Valid value of VLAN ID can be any value in the range 1-4095 or 'Any'; user can enter either a specific value or a range of VIDs.
PAGE 204
User’s Manual of IGS-10080MFT DSCP Diffserv Code Point value(DSCP): It can be specific value, range of value or 'Any'.
PAGE 205
User’s Manual of IGS-10080MFT Figure 4-9-15: QoS Control List Status Page Screenshot The page includes the following fields: Object Description  User Indicates the QCL user.  QCE# Indicates the index of QCE.  Frame Type Indicates the type of frame to look for incomming frames. Possible frame types are:  Any: The QCE will match all frame type.  Ethernet: Only Ethernet frames (with Ether Type 0x600-0xFFFF) are allowed.  LLC: Only (LLC) frames are allowed.
PAGE 206
User’s Manual of IGS-10080MFT Buttons : Select the QCL status from this drop down list. Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Click to release the resources required to add QCL entry, incase conflict status for any QCL entry is 'yes'. : Click to refresh the page immediate 4.9.13 Storm Control Configuration Storm control for the switch is configured on this page.
PAGE 207
User’s Manual of IGS-10080MFT Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.9.14 QoS Statistics This page provides statistics for the different queues for all switch ports. The QoS Statistics screen in Figure 4-9-17 appears. Figure 4-9-17: Queuing Counters Page Screenshot The page includes the following fields: Object Description  Port The logical port for the settings contained in the same row.
PAGE 208
User’s Manual of IGS-10080MFT 4.9.15 Voice VLAN Configuration The Voice VLAN feature enables voice traffic forwarding on the Voice VLAN, then the switch can classify and schedule network traffic. It is recommended that there be two VLANs on a port - one for voice, one for data. Before connecting the IP device to the switch, the IP phone should configure the voice VLAN ID correctly. It should be configured through its own GUI. The Voice VLAN Configuration screen in Figure 4-9-18 appears.
PAGE 209
User’s Manual of IGS-10080MFT  Age Time Indicates the Voice VLAN secure learning age time. The allowed range is 10 to 10000000 seconds. It used when security mode or auto detect mode is enabled. In other cases, it will based hardware age time. The actual age time will be situated in the [age_time; 2 * age_time] interval.  Traffic Class Indicates the Voice VLAN traffic class. All traffic on Voice VLAN will apply this class.  Port Mode Indicates the Voice VLAN port mode.
PAGE 210
User’s Manual of IGS-10080MFT 4.9.16 Voice VLAN OUI Table Configure VOICE VLAN OUI table on this page. The maximum entry number is 16. Modifying the OUI table will restart auto detection of OUI process. The Voice VLAN OUI Table screen in Figure 4-9-19 appears. Figure 4-9-19 : Voice VLAN OUI Table Page Screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.
PAGE 211
User’s Manual of IGS-10080MFT 4.10 Access Control Lists ACL is an acronym for Access Control List. It is the list table of ACEs, containing access control entries that specify individual users or groups permitted or denied to specific traffic objects, such as a process or a program. Each accessible traffic object contains an identifier to its ACL. The privileges determine whether there are specific traffic object access rights.
PAGE 212
User’s Manual of IGS-10080MFT  ARP: The ACE will match ARP/RARP frames.  IPv4: The ACE will match all IPv4 frames.  IPv4/ICMP: The ACE will match IPv4 frames with ICMP protocol.  IPv4/UDP: The ACE will match IPv4 frames with UDP protocol.  IPv4/TCP: The ACE will match IPv4 frames with TCP protocol.  IPv4/Other: The ACE will match IPv4 frames, which are not ICMP/UDP/TCP.  IPv6: The ACE will match all IPv6 standard frames.  Action Indicates the forwarding action of the ACE.
PAGE 213
User’s Manual of IGS-10080MFT 4.10.2 Access Control List Configuration This page shows the Access Control List (ACL), which is made up of the ACEs defined on this switch. Each row describes the ACE that is defined. The maximum number of ACEs is 256 on each switch. Click on the lowest plus sign to add a new ACE to the list. The reserved ACEs used for internal protocol, cannot be edited or deleted, the order sequence cannot be changed and the priority is highest.
PAGE 214
User’s Manual of IGS-10080MFT  Port Redirect Indicates the port redirect operation of the ACE. Frames matching the ACE are redirected to the port number. The allowed values are Disabled or a specific port number. When Disabled is displayed, the port redirect operation is disabled.  Mirror Specify the mirror operation of this port. Frames matching the ACE are mirrored to the destination mirror port. The allowed values are:  Enabled: Frames received on the port are mirrored.
PAGE 215
User’s Manual of IGS-10080MFT 4.10.3 ACE Configuration Configure an ACE (Access Control Entry) on this page. An ACE consists of several parameters. These parameters vary according to the frame type that you select. First select the ingress port for the ACE, and then select the frame type. Different parameter options are displayed depending on the frame type selected. A frame that hits this ACE matches the configuration that is defined here. The ACE Configuration screen in Figure 4-10-3 appears.
PAGE 216
User’s Manual of IGS-10080MFT value. Two field for entering an policy value and bitmask appears.  Policy Value When "Specific" is selected for the policy filter, you can enter a specific policy value. The allowed range is 0 to 255.  Policy Bitmask When "Specific" is selected for the policy filter, you can enter a specific policy bitmask. The allowed range is 0x0 to 0xff.  Frame Type Select the frame type for this ACE. These frame types are mutually exclusive.  Any: Any frame can match this ACE.
PAGE 217
User’s Manual of IGS-10080MFT  MAC Parameters Object Description  SMAC Filter (Only displayed when the frame type is Ethernet Type or ARP.) Specify the source MAC filter for this ACE.  Any: No SMAC filter is specified. (SMAC filter status is "don't-care".)  Specific: If you want to filter a specific source MAC address with this ACE, choose this value. A field for entering an SMAC value appears.
PAGE 218
User’s Manual of IGS-10080MFT is specified (tag priority is "don't-care".)  ARP Parameters The ARP parameters can be configured when Frame Type "ARP" is selected. Object Description  ARP/RARP Specify the available ARP/RARP opcode (OP) flag for this ACE.  Any: No ARP/RARP OP flag is specified. (OP is "don't-care".)  ARP: Frame must have ARP/RARP opcode set to ARP.  RARP: Frame must have ARP/RARP opcode set to RARP.  Other: Frame has unknown ARP/RARP Opcode flag.
PAGE 219
User’s Manual of IGS-10080MFT address field (SHA) settings.  0: ARP frames where SHA is not equal to the SMAC address.  1: ARP frames where SHA is equal to the SMAC address.  Any: Any value is allowed ("don't-care").  RARP SMAC Match Specify whether frames can hit the action according to their target hardware address field (THA) settings.  0: RARP frames where THA is not equal to the SMAC address.  1: RARP frames where THA is equal to the SMAC address.  Any: Any value is allowed ("don't-care").
PAGE 220
User’s Manual of IGS-10080MFT this help file.  TCP: Select TCP to filter IPv4 TCP protocol frames. Extra fields for defining TCP parameters will appear. These fields are explained later in this help file.  IP Protocol Value When "Specific" is selected for the IP protocol value, you can enter a specific value. The allowed range is 0 to 255. A frame that hits this ACE matches this IP protocol value.  IP TTL Specify the Time-to-Live settings for this ACE.
PAGE 221
User’s Manual of IGS-10080MFT  Any: No destination IP filter is specified. (Destination IP filter is "don't-care".)  Host: Destination IP filter is set to Host. Specify the destination IP address in the DIP Address field that appears.  Network: Destination IP filter is set to Network. Specify the destination IP address and destination IP mask in the DIP Address and DIP Mask fields that appear.
PAGE 222
User’s Manual of IGS-10080MFT ACE, you can enter a specific TCP/UDP source value. A field for entering a TCP/UDP source value appears.  Range: If you want to filter a specific TCP/UDP source range filter with this ACE, you can enter a specific TCP/UDP source range value. A field for entering a TCP/UDP source value appears.  TCP/UDP Source No. When "Specific" is selected for the TCP/UDP source filter, you can enter a specific TCP/UDP source value. The allowed range is 0 to 65535.
PAGE 223
User’s Manual of IGS-10080MFT  0: TCP frames where the RST field is set must not be able to match this entry.  1: TCP frames where the RST field is set must be able to match this entry.  Any: Any value is allowed ("don't-care").  TCP PSH Specify the TCP "Push Function" (PSH) value for this ACE.  0: TCP frames where the PSH field is set must not be able to match this entry.  1: TCP frames where the PSH field is set must be able to match this entry.  Any: Any value is allowed ("don't-care").
PAGE 224
User’s Manual of IGS-10080MFT : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. : Return to the previous page. 4.10.4 ACL Ports Configuration Configure the ACL parameters (ACE) of each switch port. These parameters will affect frames received on a port unless the frame matches a specific ACE. The ACL Ports Configuration screen in Figure 4-10-4 appears.
PAGE 225
User’s Manual of IGS-10080MFT  Mirror Specify the mirror operation of this port. The allowed values are: Enabled: Frames received on the port are mirrored. Disabled: Frames received on the port are not mirrored. The default value is "Disabled". All means all ports will have one specific setting.  Logging Specify the logging operation of this port. The allowed values are: Enabled: Frames received on the port are stored in the System Log. Disabled: Frames received on the port are not logged.
PAGE 226
User’s Manual of IGS-10080MFT 4.10.5 ACL Rate Limiter Configuration Configure the rate limiter for the ACL of the switch. The ACL Rate Limiter Configuration screen in Figure 4-10-5 appears. Figure 4-10-5: ACL Rate Limiter Configuration Page Screenshot The page includes the following fields: Object Description  Rate Limiter ID The rate limiter ID for the settings contained in the same row.  Rate The allowed values are: 0-3276700 in pps or 0, 100, 200, 300, ..., 1000000 in kbps.
PAGE 227
User’s Manual of IGS-10080MFT : Click to undo any changes made locally and revert to previously saved values.
PAGE 228
User’s Manual of IGS-10080MFT 4.11 Authentication This section is to control the access of the Managed Switch, includes the user access and management control. The Authentication section contains links to the following main topics:  IEEE 802.1X Port-Based Network Access Control  MAC-Based Authentication  User Authentication Overview of 802.1X (Port-Based) Authentication In the 802.
PAGE 229
User’s Manual of IGS-10080MFT is a valid RADIUS user can be used by anyone, and only the MD5-Challenge method is supported. The 802.1X and MAC-Based Authentication configuration consists of two sections, a system- and a port-wide. Overview of User Authentication It is allowed to configure the Managed Switch to authenticate users logging into the system for management access using local or remote authentication methods, such as telnet and Web browser.
PAGE 230
User’s Manual of IGS-10080MFT  Device Roles With 802.1X port-based authentication, the devices in the network have specific roles as shown below. Figure 4-11-1  Client—the device (workstation) that requests access to the LAN and switch services and responds to requests from the switch. The workstation must be running 802.1X-compliant client software such as that offered in the Microsoft Windows XP operating system. (The client is the supplicant in the IEEE 802.1X specification.
PAGE 231
User’s Manual of IGS-10080MFT The switch includes the RADIUS client, which is responsible for encapsulating and decapsulating the Extensible Authentication Protocol (EAP) frames and interacting with the authentication server. When the switch receives EAPOL frames and relays them to the authentication server, the Ethernet header is stripped and the remaining EAP frame is re-encapsulated in the RADIUS format.
PAGE 232
User’s Manual of IGS-10080MFT Figure 4-11-2: EAP Message Exchange  Ports in Authorized and Unauthorized States The switch port state determines whether or not the client is granted access to the network. The port starts in the unauthorized state. While in this state, the port disallows all ingress and egress traffic except for 802.1X protocol packets. When a client is successfully authenticated, the port transitions to the authorized state, allowing all traffic for the client to flow normally.
PAGE 233
User’s Manual of IGS-10080MFT 4.11.2 Authentication Configuration This page allows you to configure how a user is authenticated when he logs into the switch via one of the management client interfaces. The Authentication Method Configuration screen in Figure 4-11-3 appears. Figure 4-11-3: Authentication Method Configuration Page Screenshot The page includes the following fields: Object Description  Client The management client for which the configuration below applies.
PAGE 234
User’s Manual of IGS-10080MFT 4.11.3 Network Access Server Configuration This page allows you to configure the IEEE 802.1X and MAC-based authentication system and port settings. The IEEE 802.1X standard defines a port-based access control procedure that prevents unauthorized access to a network by requiring users to first submit credentials for authentication. One or more central servers, the backend servers, determine whether the user is allowed access to the network.
PAGE 235
User’s Manual of IGS-10080MFT The page includes the following fields: System Configuration Object Description  Mode Indicates if NAS is globally enabled or disabled on the switch. If globally disabled, all ports are allowed forwarding of frames.  Reauthentication Enabled If checked, successfully authenticated supplicants/clients are reauthenticated after the interval specified by the Reauthentication Period. Reauthentication for 802.
PAGE 236
User’s Manual of IGS-10080MFT communication between the switch and the client, so this will not detect whether the client is still attached or not, and the only way to free any resources is to age the entry.  Hold Time This setting applies to the following modes, i.e. modes using the Port Security functionality to secure MAC addresses:  Single 802.1X  Multi 802.1X  MAC-Based Auth.
PAGE 237
User’s Manual of IGS-10080MFT is disabled for all ports.  Guest VLAN Enabled A Guest VLAN is a special VLAN - typically with limited network access - on which 802.1X-unaware clients are placed after a network administrator-defined timeout. The switch follows a set of rules for entering and leaving the Guest VLAN as listed below. The "Guest VLAN Enabled" checkbox provides a quick way to globally enable/disable Guest VLAN functionality.
PAGE 238
User’s Manual of IGS-10080MFT Force Authorized In this mode, the switch will send one EAPOL Success frame when the port link comes up, and any client on the port will be allowed network access without authentication. Force Unauthorized In this mode, the switch will send one EAPOL Failure frame when the port link comes up, and any client on the port will be disallowed network access. Port-based 802.1X In the 802.
PAGE 239
User’s Manual of IGS-10080MFT EAPOL Start frame retransmission rate. Single 802.1X In port-based 802.1X authentication, once a supplicant is successfully authenticated on a port, the whole port is opened for network traffic. This allows other clients connected to the port (for instance through a hub) to piggy-back on the successfully authenticated client and get network access even though they really aren't authenticated. To overcome this security breach, use the Single 802.1X variant. Single 802.
PAGE 240
User’s Manual of IGS-10080MFT Identity frame sent by the supplicant. An exception to this is when no supplicants are attached. In this case, the switch sends EAPOL Request Identity frames using the BPDU multicast MAC address as destination - to wake up any supplicants that might be on the port. The maximum number of supplicants that can be attached to a port can be limited using the Port Security Limit Control functionality. MAC-based Auth. Unlike port-based 802.
PAGE 241
User’s Manual of IGS-10080MFT supplicant is successfully authenticated. If present and valid, traffic received on the supplicant's port will be classified to the given QoS Class.
PAGE 242
User’s Manual of IGS-10080MFT (temporarily) overridden the current Port VLAN configuration. RADIUS attributes used in identifying a VLAN ID: RFC2868 and RFC3580 form the basis for the attributes used in identifying a VLAN ID in an Access-Accept packet. The following criteria are used: - The Tunnel-Medium-Type, Tunnel-Type, and Tunnel-Private-Group-ID attributes must all be present at least once in the Access-Accept packet.
PAGE 243
User’s Manual of IGS-10080MFT Guest VLAN, but continue transmitting EAPOL Request Identity frames at the rate given by EAPOL Timeout. Once in the Guest VLAN, the port is considered authenticated, and all attached clients on the port are allowed access on this VLAN. The switch will not transmit an EAPOL Success frame when entering the Guest VLAN.
PAGE 244
User’s Manual of IGS-10080MFT 4.11.4 Network Access Overview This page provides an overview of the current NAS port states for the selected switch. The Network Access Overview screen in Figure 4-11-5 appears. Figure 4-11-5: Network Access Server Switch Status Page Screenshot The page includes the following fields: Object Description  Port The switch port number. Click to navigate to detailed NAS statistics for this port.  Admin State The port's current administrative state.
PAGE 245
User’s Manual of IGS-10080MFT If the port is moved to the Guest VLAN, "(Guest)" is appended to the VLAN ID. Read more about Guest VLANs here. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Click to refresh the page immediate 4.11.5 Network Access Statistics This page provides detailed NAS statistics for a specific switch port running EAPOL-based IEEE 802.1X authentication.
PAGE 246
User’s Manual of IGS-10080MFT Read more about Guest VLANs here. Port Counters Object Description  EAPOL Counters These supplicant frame counters are available for the following administrative states: Force Authorized Force Unauthorized Port-based 802.1X Single 802.1X Multi 802.1X Direction Name IEEE Name Description Rx Total dot1xAuthEapolFrames The number of valid EAPOL Rx frames of any type that have been received by the switch.
PAGE 247
User’s Manual of IGS-10080MFT Rx Invalid Length dot1xAuthEapLengthErr The number of EAPOL orFramesRx frames that have been received by the switch in which the Packet Body Length field is invalid. Tx Total dot1xAuthEapolFrames The number of EAPOL Tx frames of any type that have been transmitted by the switch. Tx Request ID dot1xAuthEapolReqIdFr The number of EAPOL amesTx Request Identity frames that have been transmitted by the switch.
PAGE 248
User’s Manual of IGS-10080MFT server for this port (left-most table) or client (right-most table). Rx Other dot1xAuthBackendOther 802.1X-based: Requests RequestsToSupplicant Counts the number of times that the switch sends an EAP Request packet following the first to the supplicant. Indicates that the backend server chose an EAP-method. MAC-based: Not applicable. Rx Auth. dot1xAuthBackendAuth 802.
PAGE 249
User’s Manual of IGS-10080MFT MAC-based: Counts all the backend server packets sent from the switch towards the backend server for a given port (left-most table) or client (right-most table). Possible retransmissions are not counted.  Last Supplicant/Client Info Information about the last supplicant/client that attempted to authenticate. This information is available for the following administrative states: Port-based 802.1X Single 802.1X Multi 802.1X MAC-based Auth.
PAGE 250
User’s Manual of IGS-10080MFT Selected Counters Object Description  Selected Counters The Selected Counters table is visible when the port is one of the following administrative states: Multi 802.1X MAC-based Auth. The table is identical to and is placed next to the Port Counters table, and will be empty if no MAC address is currently selected. To populate the table, select one of the attached MAC Addresses from the table below.
PAGE 251
User’s Manual of IGS-10080MFT : This button is available in the following modes: • Force Authorized • Force Unauthorized • Port-based 802.1X • Single 802.1X Click to clear the counters for the selected port. : This button is available in the following modes: • Multi 802.1X • MAC-based Auth.X Click to clear both the port counters and all of the attached client's counters. The "Last Client" will not be cleared, however. : This button is available in the following modes: • Multi 802.1X • MAC-based Auth.
PAGE 252
User’s Manual of IGS-10080MFT 4.11.6 Authentication Server Configuration This page allows you to configure the Authentication Servers. The Authentication Server Configuration screen in Figure 4-11-7 appears.
PAGE 253
User’s Manual of IGS-10080MFT The page includes the following fields: Port State These setting are common for all of the Authentication Servers. Object Description  Timeout The Timeout, which can be set to a number between 3 and 3600 seconds, is the maximum time to wait for a reply from a server. If the server does not reply within this timeframe, we will consider it to be dead and continue with the next enabled server (if any). RADIUS servers are using the UDP protocol, which is unreliable by design.
PAGE 254
User’s Manual of IGS-10080MFT RADIUS Accounting Server Configuration The table has one row for each RADIUS Accounting Server and a number of columns, which are: Object Description  # The RADIUS Accounting Server number for which the configuration below applies.  Enabled Enable the RADIUS Accounting Server by checking this box.  IP Address/Hostname The IP address or hostname of the RADIUS Accounting Server. IP address is expressed in dotted decimal notation.
PAGE 255
User’s Manual of IGS-10080MFT 4.11.7 RADIUS Overview This page provides an overview of the status of the RADIUS servers configurable on the Authentication configuration page. The RADIUS Authentication/Accounting Server Overview screen in Figure 4-11-8 appears. Figure 4-11-8: RADIUS Authentication/Accounting Server Overview Page Screenshot The page includes the following fields: RADIUS Authentication Server Object Description  # The RADIUS server number.
PAGE 256
User’s Manual of IGS-10080MFT temporarily been disabled, but will get re-enabled when the dead-time expires. The number of seconds left before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled. RADIUS Accounting Server Object Description  # The RADIUS server number. Click to navigate to detailed statistics for this server.  IP Address The IP address and UDP port number (in : notation) of this server.
PAGE 257
User’s Manual of IGS-10080MFT 4.11.8 RADIUS Details This page provides detailed statistics for a particular RADIUS server. The RADIUS Authentication/Accounting for Server Overview screen in Figure 4-11-9 appears. Figure 4-11-9: RADIUS Authentication/Accounting for Server Overview Page Screenshot The page includes the following fields: RADIUS Authentication Servers The statistics map closely to those specified in RFC4668 - RADIUS Authentication Client MIB.
PAGE 258
User’s Manual of IGS-10080MFT Rx Access radiusAuthClientExtA The number of RADIUS Accepts ccessAccepts Access-Accept packets (valid or invalid) received from the server. Rx Access Rejects radiusAuthClientExtA The number of RADIUS ccessRejects Access-Reject packets (valid or invalid) received from the server. Rx Access radiusAuthClientExtA The number of RADIUS Challenges ccessChallenges Access-Challenge packets (valid or invalid) received from the server.
PAGE 259
User’s Manual of IGS-10080MFT authentication port and dropped for some other reason. Tx Access radiusAuthClientExtA The number of RADIUS Requests ccessRequests Access-Request packets sent to the server. This does not include retransmissions. Tx Access radiusAuthClientExtA The number of RADIUS Retransmissio ccessRetransmission Access-Request packets ns s retransmitted to the RADIUS authentication server.
PAGE 260
User’s Manual of IGS-10080MFT IP Address - IP address and UDP port for the accounting server in question. State - Shows the state of the server. It takes one of the following values: Disabled: The selected server is disabled. Not Ready: The server is enabled, but IP communication is not yet up and running. Ready: The server is enabled, IP communication is up and running, and the RADIUS module is ready to accept access attempts.
PAGE 261
User’s Manual of IGS-10080MFT RADIUS Accounting Servers The statistics map closely to those specified in RFC4670 - RADIUS Accounting Client MIB. Use the server select box to switch between the backend servers to show details for. Object Description  Packet Counters RADIUS accounting server packet counter. There are five receive and four transmit counters.
PAGE 262
User’s Manual of IGS-10080MFT retransmissions. Tx Retransmissions radiusAccClientExt The number of RADIUS Retransmissions packets retransmitted to the RADIUS accounting server. Tx Pending radiusAccClientExt The number of RADIUS Requests PendingRequests packets destined for the server that have not yet timed out or received a response. This variable is incremented when a Request is sent and decremented due to receipt of a Response, timeout, or retransmission.
PAGE 263
User’s Manual of IGS-10080MFT Dead (X seconds left): Accounting attempts were made to this server, but it did not reply within the configured timeout. The server has temporarily been disabled, but will get re-enabled when the dead-time expires. The number of seconds left before this occurs is displayed in parentheses. This state is only reachable when more than one server is enabled.
PAGE 264
User’s Manual of IGS-10080MFT 4.11.9 Windows Platform RADIUS Server Configuration Setup the RADIUS server and assign the client IP address to the Managed switch. In this case, field in the default IP Address of the Managed Switch with 192.168.0.100. And also make sure the shared secret key is as same as the one you had set at the Managed Switch’s 802.1x system configuration – 12345678 at this case. 1. Configure the IP Address of remote RADIUS server and secret key.
PAGE 265
User’s Manual of IGS-10080MFT 2. Add New RADIUS Cleint on the Windows 2003 server Figure 4-11-11: Windows Server – Add New RADIUS Client Setting 3. Assign the client IP address to the Industrial Managed Switch.
PAGE 266
User’s Manual of IGS-10080MFT 4. The shared secret key should be as same as the key configured on the Industrial Managed Switch. Figure 4-11-13: Windows Server RADIUS Server Setting 5. Configure ports attribute of 802.1X, the same as “802.1X Port Configuration”. Figure 4-11-14: 802.1x Port Configuration 6. Create user data. The establishment of the user data needs to be created on the Radius Server PC.
PAGE 267
User’s Manual of IGS-10080MFT Figure 4-11-15: Windows 2003 AD Server Setting Path 267
PAGE 268
User’s Manual of IGS-10080MFT 7.
PAGE 269
User’s Manual of IGS-10080MFT Set the Ports Authenticate Status to “Force Authorized” if the port is connected to the RADIUS server or the port is a uplink port that is connected to another switch. Or once the 802.1X stat to work, the switch might not be able to access the RADIUS server. 4.11.10 802.1X Client Configuration Windows XP is originally 802.1X support. As to other operating systems (windows 98SE, ME, 2000), an 802.1X client utility is needed. The following procedures show how to configure 802.
PAGE 270
User’s Manual of IGS-10080MFT 4. Select “Authentication” tab. 5. Select “Enable network access control using IEEE 802.1X” to enable 802.1x authentication. 6. Select “MD-5 Challenge” from the drop-down list box for EAP type. Figure 4-11-19 7. Click “OK”. 8. When client has associated with the Managed Switch, a user authentication notice appears in system tray. Click on the notice to continue.
PAGE 271
User’s Manual of IGS-10080MFT Figure 4-11-20: Windows Client Popup Login Request Message 9. Enter the user name, password and the logon domain that your account belongs. 10. Click “OK” to complete the validation process.
PAGE 272
User’s Manual of IGS-10080MFT 4.12 Security This section is to control the access of the Industrial Managed Switch, includes the user access and management control.
PAGE 273
User’s Manual of IGS-10080MFT Figure 4-12-1: Port Limit Control Configuration Overview Page Screenshot The page includes the following fields: System Configuration Object Description  Mode Indicates if Limit Control is globally enabled or disabled on the switchstack. If globally disabled, other modules may still use the underlying functionality, but limit checks and corresponding actions are disabled.
PAGE 274
User’s Manual of IGS-10080MFT To understand why aging may be desired, consider the following scenario: Suppose an end-host is connected to a 3rd party switch or hub, which in turn is connected to a port on this switch on which Limit Control is enabled. The end-host will be allowed to forward if the limit is not exceeded. Now suppose that the end-host logs off or powers down. If it wasn't for aging, the end-host would still take up resources on this switch and will be allowed to forward.
PAGE 275
User’s Manual of IGS-10080MFT This implies that all secured MAC addresses will be removed from the port, and no new will be learned. Even if the link is physically disconnected and reconnected on the port (by disconnecting the cable), the port will remain shut down. There are three ways to re-open the port: 1) Boot the stack or elect a new masterthe switch, 2) Disable and re-enable Limit Control on the port or the stackswitch, 3) Click the Reopen button.
PAGE 276
User’s Manual of IGS-10080MFT 4.12.2 Access Management Configure access management table on this page. The maximum entry number is 16. If the application's type match any one of the access management entries, it will allow access to the switch. The Access Management Configuration screen in Figure 4-12-2 appears. Figure 4-12-2: Access Management Configuration Overview Page Screenshot The page includes the following fields: Object Description  Mode Indicates the access management mode operation.
PAGE 277
User’s Manual of IGS-10080MFT 4.12.3 Access Management Statistics This page provides statistics for access management. The Access Management Statistics screen in Figure 4-12-3 appears. Figure 4-12-3: Access Management Statistics Overview Page Screenshot The page includes the following fields: Object Description  Interface The interface that allowed remote host can access the Industrial Managed Switch.
PAGE 278
User’s Manual of IGS-10080MFT 4.12.4 HTTPs Configure HTTPS on this page. The HTTPS Configuration screen in Figure 4-12-4 appears. Figure 4-12-4: HTTPS Configuration Screen Page Screenshot The page includes the following fields: Object Description  Mode Indicates the HTTPS mode operation. Possible modes are: Enabled: Enable HTTPS mode operation. Disabled: Disable HTTPS mode operation.  Automatic Redirect Indicates the HTTPS redirect mode operation.
PAGE 279
User’s Manual of IGS-10080MFT 4.12.5 SSH Configure SSH on this page. This page shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the port is set-up for software-based learning.
PAGE 280
User’s Manual of IGS-10080MFT 4.12.6 Port Security Status This page shows the Port Security status. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the port is set-up for software-based learning.
PAGE 281
User’s Manual of IGS-10080MFT Port Status The table has one row for each port on the selected switch in the switch and a number of columns, which are: Object Description  Port The port number for which the status applies. Click the port number to see the status for this particular port.  Users Each of the user modules has a column that shows whether that module has enabled Port Security or not.
PAGE 282
User’s Manual of IGS-10080MFT 4.12.7 Port Security Detail This page shows the MAC addresses secured by the Port Security module. Port Security is a module with no direct configuration. Configuration comes indirectly from other modules - the user modules. When a user module has enabled port security on a port, the port is set-up for software-based learning.
PAGE 283
User’s Manual of IGS-10080MFT 4.12.8 DHCP Snooping DHCP Snooping is used to block intruder on the untrusted ports of DUT when it tries to intervene by injecting a bogus DHCP reply packet to a legitimate conversation between the DHCP client and server. Configure DHCP Snooping on this page. The DHCP Snooping Configuration screen in Figure 4-12-8 appears.
PAGE 284
User’s Manual of IGS-10080MFT Buttons : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.12.9 DHCP Snooping Statistics This page provides statistics for DHCP snooping. The statistics only counter packet under DHCP snooping mode is enabled and relay mode is disabled. And it doesn't count the DHCP packets for system DHCP client. The DHCP Snooping Port Statistics screen in Figure 4-12-9 appears.
PAGE 285
User’s Manual of IGS-10080MFT  Rx and Tx Release The number of release (option 53 with value 7) packets received and transmitted.  Rx and Tx Inform The number of inform (option 53 with value 8) packets received and transmitted.  Rx and Tx Lease Query The number of lease query (option 53 with value 10) packets received and transmitted.
PAGE 286
User’s Manual of IGS-10080MFT 4.12.10 IP Source Guard Configuration IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host. This page provides IP Source Guard related configuration. The IP Source Guard Configuration screen in Figure 4-12-10 appears.
PAGE 287
User’s Manual of IGS-10080MFT that are matched in static entries on the specific port. All means all ports will have one specific setting. Buttons : Click to translate all dynamic entries to static entries. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.12.11 IP Source Guard Static Table This page provides Static IP Source Guard Table. The Static IP Source Guard Table screen in Figure 4-12-11 appears.
PAGE 288
User’s Manual of IGS-10080MFT 4.12.12 ARP Inspection ARP Inspection is a secure feature. Several types of attacks can be launched against a host or devices connected to Layer 2 networks by "poisoning" the ARP caches. This feature is used to block such attacks. Only valid ARP requests and responses can go through DUT. This page provides ARP Inspection related configuration. The ARP Inspection Configuration screen in Figure 4-12-12 appears.
PAGE 289
User’s Manual of IGS-10080MFT Buttons : Click to translate all dynamic entries to static entries. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.12.13 ARP Inspection Static Table This page provides Static ARP Inspection Table. The Static ARP Inspection Table screen in Figure 4-12-13 appears.
PAGE 290
User’s Manual of IGS-10080MFT 4.13 MAC Address Table Switching of frames is based upon the DMAC address contained in the frame. The Managed Switch builds up a table that maps MAC addresses to switch ports for knowing which ports the frames should go to (based upon the DMAC address in the frame ). This table contains both static and dynamic entries. The static entries are configured by the network administrator if the administrator wants to do a fixed mapping between the DMAC address and switch ports.
PAGE 291
User’s Manual of IGS-10080MFT The page includes the following fields: Aging Configuration By default, dynamic entries are removed from the MAC table after 300 seconds. This removal is also called aging. Object Description  Disable Automatic Enables/disables the the automatic aging of dynamic entries Aging  Aging Time The time after which a learned entry is discarded. By default, dynamic entries are removed from the MAC after 300 seconds. This removal is also called aging.
PAGE 292
User’s Manual of IGS-10080MFT Buttons : Click to add a new entry. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.13.2 MAC Address Table Status Dynamic MAC Table Entries in the MAC Table are shown on this page. The MAC Table contains up to 8192 entries, and is sorted first by VLAN ID, then by MAC address. The MAC Address Table screen in Figure 4-13-2 appears.
PAGE 293
User’s Manual of IGS-10080MFT The page includes the following fields: Object Description  Type Indicates whether the entry is a static or dynamic entry.  VLAN The VLAN ID of the entry.  MAC Address The MAC address of the entry.  Port Members The ports that are members of the entry. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds.
PAGE 294
User’s Manual of IGS-10080MFT closest next Dynamic ARP Inspection Table match. In addition, the two input fields will - upon a “Refresh” button click - assume the value of the first displayed entry, allowing for continuous refresh with the same start address. The “>>” will use the last entry of the currently displayed as a basis for the next lookup. When the end is reached the text "No more entries" is shown in the displayed table. Use the “|<<” button to start over.
PAGE 295
User’s Manual of IGS-10080MFT starting point in the Dynamic IP Source Guard Table. Clicking the “Refresh” button will update the displayed table starting from that or the closest next Dynamic IP Source Guard Table match. In addition, the two input fields will - upon a “Refresh” button click - assume the value of the first displayed entry, allowing for continuous refresh with the same start address. The “>>” will use the last entry of the currently displayed as a basis for the next lookup.
PAGE 296
User’s Manual of IGS-10080MFT 4.14 LLDP 4.14.1 Link Layer Discovery Protocol Link Layer Discovery Protocol (LLDP) is used to discover basic information about neighboring devices on the local broadcast domain. LLDP is a Layer 2 protocol that uses periodic broadcasts to advertise information about the sending device. Advertised information is represented in Type Length Value (TLV) format according to the IEEE 802.
PAGE 297
User’s Manual of IGS-10080MFT The page includes the following fields: LLDP Parameters Object Description  Tx Interval The switch is periodically transmitting LLDP frames to its neighbors for having the network discovery information up-to-date. The interval between each LLDP frame is determined by the Tx Interval value. Valid values are restricted to 5 32768 seconds.
PAGE 298
User’s Manual of IGS-10080MFT Rx only The switch will not send out LLDP information, but LLDP information from neighbor units is analyzed. Tx only The switch will drop LLDP information received from neighbors, but will send out LLDP information. Disabled The switch will not send out LLDP information, and will drop LLDP information received from neighbors. Enabled The switch will send out LLDP information, and will analyze LLDP information received from neighbors.  CDP Aware Select CDP awareness.
PAGE 299
User’s Manual of IGS-10080MFT whether or not these primary functions are enabled. The information advertised by this TLV is described in IEEE 802.1AB.  Management Address Optional TLV: When checked the "management address" is included in LLDP information transmitted. The management address protocol packet includes the IPv4 address of the switch. If no management address is available, the address should be the MAC address for the CPU or for the port sending this advertisement.
PAGE 300
User’s Manual of IGS-10080MFT The page includes the following fields: Fast start repeat count Object Description  Fast start repeat count Rapid startup and Emergency Call Service Location Identification Discovery of endpoints is a critically important aspect of VoIP systems in general.
PAGE 301
User’s Manual of IGS-10080MFT equator.  Longitude Longitude SHOULD be normalized to within 0-180 degrees with a maximum of 4 digits. It is possible to specify the direction to either East of the prime meridian or West of the prime meridian.  Altitude Altitude SHOULD be normalized to within -32767 to 32767 with a maximum of 4 digits. It is possible to select between two altitude types (floors or meters). Meters: Representing meters of Altitude defined by the vertical datum specified.
PAGE 302
User’s Manual of IGS-10080MFT  Leading street Leading street direction - Example: N direction  Trailing street suffix Trailing street suffix - Example: SW  Street suffix Street suffix - Example: Ave, Platz  House no. House number - Example: 21  House no.
PAGE 303
User’s Manual of IGS-10080MFT voice and/or video services. The network policy attributes advertised are: 1. Layer 2 VLAN ID (IEEE 802.1Q-2003) 2. Layer 2 priority value (IEEE 802.1D-2004) 3. Layer 3 Diffserv code point (DSCP) value (IETF RFC 2474) This network policy is potentially advertised and associated with multiple sets of application types supported on a given port. The application types specifically addressed are: 1. Voice 2. Guest Voice 3. Softphone Voice 4. Video Conferencing 5.
PAGE 304
User’s Manual of IGS-10080MFT a different policy for the guest voice signaling than for the guest voice media. This application type should not be advertised if all the same network policies apply as those advertised in the Guest Voice application policy. Softphone Voice - for use by softphone applications on typical data centric devices, such as PCs or laptops.
PAGE 305
User’s Manual of IGS-10080MFT Port Policies Configuration Every port may advertise a unique set of network policies or different attributes for the same network policies, based on the authenticated user identity or port configuration. Object Description  Port The port number for which the configuration applies.  Policy ID The set of policies that shall apply for a given port.
PAGE 306
User’s Manual of IGS-10080MFT 2. IEEE 802.1 Bridge 3. IEEE 802.3 Repeater (included for historical reasons) 4. IEEE 802.11 Wireless Access Point 5. Any device that supports the IEEE 802.1AB and MED extensions defined by TIA-1057 and can relay IEEE 802 frames via any method. LLDP-MED Endpoint Device Definition Within the LLDP-MED Endpoint Device category, the LLDP-MED scheme is broken into further Endpoint Device Classes, as defined in the following.
PAGE 307
User’s Manual of IGS-10080MFT expected to adhere to this class include (but are not limited to) end user communication appliances, such as IP Phones, PC-based softphones, or other communication appliances that directly support the end user. Discovery services defined in this class include provision of location identifier (including ECS / E911 information), embedded L2 switch support, inventory management  LLDP-MED Capabilities LLDP-MED Capabilities describes the neighbor unit's LLDP-MED capabilities.
PAGE 308
User’s Manual of IGS-10080MFT  Policy Policy Unknown: The network policy for the specified application type is currently unknown. Defined: The network policy is defined.  TAG TAG is indicating whether the specified application type is using a tagged or an untagged VLAN. Can be Tagged ot Untagged Untagged: The device is using an untagged frame format and as such does not include a tag header as defined by IEEE 802.1Q-2003. Tagged: The device is using the IEEE 802.
PAGE 309
User’s Manual of IGS-10080MFT Figure 4-14-4: LLDP Neighbor Information Page Screenshot The page includes the following fields: Object Description  Local Port The port on which the LLDP frame was received.  Chassis ID The Chassis ID is the identification of the neighbor's LLDP frames.  Remote Port ID The Remote Port ID is the identification of the neighbor port.  System Name System Name is the name advertised by the neighbor unit.
PAGE 310
User’s Manual of IGS-10080MFT 4.14.6 Port Statistics This page provides an overview of all LLDP traffic. Two types of counters are shown. Global counters are counters that refer to the whole stack, switch, while local counters refer to counters for the currently selected switch. The LLDP Statistics screen in Figure 4-14-5 appears.
PAGE 311
User’s Manual of IGS-10080MFT Local Counters The displayed table contains a row for each port. The columns hold the following information: Object Description  Local Port The port on which LLDP frames are received or transmitted.  Tx Frames The number of LLDP frames transmitted on the port.  Rx Frames The number of LLDP frames received on the port.  Rx Errors The number of received LLDP frames containing some kind of error.
PAGE 312
User’s Manual of IGS-10080MFT 4.15 Diagnostics This section provide the Physical layer and IP layer network diagnostics tools for troubleshoot. The diagnostic tools are designed for network manager to help them quickly diagnose problems between point to point and better service customers. Use the Diagnastics menu items to display and configure basic administrative details of the Managed Switch.
PAGE 313
User’s Manual of IGS-10080MFT Figure 4-15-1: ICMP Ping Page Screenshot The page includes the following fields: Object Description  IP Address The destination IP Address.  Ping Length The payload size of the ICMP packet. Values range from 2 bytes to 1452 bytes.  Ping Count The count of the ICMP packet. Values range from 1 time to 60 times.  Ping Interval The interval of the ICMP packet. Values range from 0 second to 30 seconds.
PAGE 314
User’s Manual of IGS-10080MFT Figure 4-15-2: ICMPv6 Ping Page Screenshot The page includes the following fields: Object Description  IP Address The destination IP Address.  Ping Length The payload size of the ICMP packet. Values range from 2 bytes to 1452 bytes.  Ping Count The count of the ICMP packet. Values range from 1 time to 60 times.  Ping Interval The interval of the ICMP packet. Values range from 0 second to 30 seconds. Button : Click to start transmitting ICMP packets.
PAGE 315
User’s Manual of IGS-10080MFT Figure 4-15-3: Remote IP Ping Test Page Screenshot The page includes the following fields: Object Description  Port The logical port for the settings.  Remote IP Address The destination IP Address.  Ping Size The payload size of the ICMP packet. Values range from 8 bytes to 1400 bytes.  Result Display the ping result. Buttons : Click to start ping process. : Click to save changes. : Click to undo any changes made locally and revert to previously saved values.
PAGE 316
User’s Manual of IGS-10080MFT 4.15.4 Cable Diagnostics This page is used for running the Cable Diagnostics. Press to run the diagnostics. This will take approximately 5 seconds. If all ports are selected, this can take approximately 15 seconds. When completed, the page refreshes automatically, and you can view the cable diagnostics results in the cable status table. Note that Cable Diagnostics is only accurate for cables of length 7 - 140 meters.
PAGE 317
User’s Manual of IGS-10080MFT 4.16 Loop Protection This page allows the user to inspect the current Loop Protection configurations, and possibly change them as well. 4.16.1 Configuration This page allows the user to inspect the current Loop Protection configurations, Figure 4-16-1: Loop Protection Configuration Page Screenshot The page includes the following fields: General Settings: Object Description  Enable Loop Controls whether loop protections is enabled (as a whole).
PAGE 318
User’s Manual of IGS-10080MFT 604800 seconds (7 days). A value of zero will keep a port disabled (until next device restart). Port Configuration: Object Description  Port The switch port number of the port.  Enable Controls whether loop protection is enabled on this switch port.  Action Configures the action performed when a loop is detected on a port. Valid values are Shutdown Port, Shutdown Port and Log or Log Only.
PAGE 319
User’s Manual of IGS-10080MFT  Loop Whether a loop is currently detected on the port.  Time of Last Loop The time of the last loop event detected. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 3 seconds. : Click to refresh the page immediate.
PAGE 320
User’s Manual of IGS-10080MFT 4.17 RMON RMON is the most important expansion of the standard SNMP. RMON is a set of MIB definitions, used to define standard network monitor functions and interfaces, enabling the communication between SNMP management terminals and remote monitors. RMON provides a highly efficient method to monitor actions inside the subnets. MID of RMON consists of 10 groups.
PAGE 321
User’s Manual of IGS-10080MFT protocol.  InNUcastPkts: The number of broad-cast and multi-cast packets delivered to a higher-layer protocol.  InDiscards: The number of inbound packets that are discarded even the packets are normal.  InErrors: The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.  InUnknownProtos: the number of the inbound packets that were discarded because of the unknown or un-support protocol.
PAGE 322
User’s Manual of IGS-10080MFT : Click to save changes. : Click to undo any changes made locally and revert to previously saved values. 4.17.2 RMON Alarm Detail This page provides an Detail of a specific RMON statistics entry; screen in Figure 4-17-2 appears. Figure 4-17-2: Detailed RMON Alarm ID page screenshot The page includes the following fields: Object Description  Interval Indicates the interval in seconds for sampling and comparing the rising and falling threshold.
PAGE 323
User’s Manual of IGS-10080MFT 4.17.3 RMON Alarm Status This page provides an overview of RMON Alarm entries. Each page shows up to 99 entries from the Alarm table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the Alarm table. The first displayed will be the one with the lowest ID found in the Alarm table; screen in Figure 4-17-3 appears.
PAGE 324
User’s Manual of IGS-10080MFT 4.17.4 RMON Event Configuration Configure RMON Event table on this page. The entry index key is ID; screen in Figure 4-17-4 appears. Figure 4-17-4: RMON event configuration page screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.  ID Indicates the index of the entry. The range is from 1 to 65535.
PAGE 325
User’s Manual of IGS-10080MFT 4.17.5 RMON Event Detail This page provides an overview of RMON event entries; screen in Figure 4-17-5 appears. Figure 4-17-5: Detailed RMON Event ID page screenshot The page includes the following fields: Object Description  Event Index Indicates the index of the event entry.  Log Index Indicates the index of the log entry.  LogTime Indicates Event log time  LogDescription Indicates the Event description.
PAGE 326
User’s Manual of IGS-10080MFT 4.17.6 RMON Event Status This page provides an overview of RMON Event table entries.Each page shows up to 99 entries from the Event table, default being 20, selected through the "entries per page" input field. When first visited, the web page will show the first 20 entries from the beginning of the Event table. The first displayed will be the one with the lowest Event Index and Log Index found in the Event table table; screen in Figure 4-17-6 appears.
PAGE 327
User’s Manual of IGS-10080MFT 4.17.7 RMON History Configuration Configure RMON History table on this page. The entry index key is ID; screen in Figure 4-17-7 appears. Figure 4-17-7: RMON history configuration page screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.  ID Indicates the index of the entry. The range is from 1 to 65535.  Data Source Indicates the port ID which wants to be monitored.
PAGE 328
User’s Manual of IGS-10080MFT 4.17.8 RMON History Detail This page provides an detail of RMON history entries; screen in Figure 4-17-8 appears. Figure 4-17-8: RMON history Detail page screenshot The page includes the following fields: Object Description  History Index Indicates the index of History control entry.
PAGE 329
User’s Manual of IGS-10080MFT  Undersize The total number of packets received that were less than 64 octets.  Oversize The total number of packets received that were longer than 1518 octets.  Fragments The number of frames which size is less than 64 octets received with invalid CRC.  Jabber The number of frames which size is larger than 64 octets received with invalid CRC.  Collisions The best estimate of the total number of collisions on this Ethernet segment.
PAGE 330
User’s Manual of IGS-10080MFT lack of resources.  Drops The total number of events in which packets were dropped by the probe due to lack of resources.  Octets The total number of octets of data (including those in bad packets) received on the network.  Pkts The total number of packets (including bad packets, broadcast packets, and multicast packets) received.  Broadcast The total number of good packets received that were directed to the broadcast address.
PAGE 331
User’s Manual of IGS-10080MFT 4.17.10 RMON Statistics Configuration Configure RMON Statistics table on this page. The entry index key is ID; screen in Figure 4-17-10 appears. Figure 4-17-10: RMON Statistics Configuration Page screenshot The page includes the following fields: Object Description  Delete Check to delete the entry. It will be deleted during the next save.  ID Indicates the index of the entry. The range is from 1 to 65535.
PAGE 332
User’s Manual of IGS-10080MFT 4.17.11 RMON Statistics Detail This page provides an Detail of a specific RMON statistics entry; screen in Figure 4-17-11 appears. Figure 4-17-11: Loop protection configuration page screenshot The page includes the following fields: Object Description  Data Source The port ID which wants to be monitored.  Drop The total number of events in which packets were dropped by the probe due to lack of resources.
PAGE 333
User’s Manual of IGS-10080MFT  Under-size The total number of packets received that were less than 64 octets.  Over-size The total number of packets received that were longer than 1518 octets.  Frag. The number of frames which size is less than 64 octets received with invalid CRC.  Jabb. The number of frames which size is larger than 64 octets received with invalid CRC.  Coll. The best estimate of the total number of collisions on this Ethernet segment.
PAGE 334
User’s Manual of IGS-10080MFT 4.18 Precision Time Protocol 4.18.1 PTP Configuration This section allows the user to configure and inspect the current Precision Time Protocol (PTP) clock settings. Figure 4-18-1: PTP Clock configuration page screenshot The page includes the following fields: Object Description  One_PPS_Mode This Selection box will allow you to select the One_pps_mode configuration. The following values are possible: 1. Output : Enable the 1 pps clock output 2.
PAGE 335
User’s Manual of IGS-10080MFT Figure 4-18-2: PTP Clock configuration page screenshot The page includes the following fields: Object Description  Delete Check this box and click on 'Save' to delete the clock instance.  Clock Instance Indicates the Instance of a particular Clock Instance [0..3]. Click on the Clock Instance number to edit the Clock details.  Device Type Indicates the Type of the Clock Instance. There are five Device Types. 1.
PAGE 336
User’s Manual of IGS-10080MFT 4.18.2 PTP Status This section allows the user to inspect the current Precision Time Protocol (PTP) clock settings. Figure 4-18-3: PTP Clock Status page screenshot The page includes the following fields: Object Description  One_pps_mode Shows the current One_pps_mode configured. 1. Output : Enable the 1 pps clock output 2. Input : Enable the 1 pps clock input 3.
PAGE 337
User’s Manual of IGS-10080MFT 3. E2e Transp - Clock's Device Type is End to End Transparent Clock. 4. Master Only - Clock's Device Type is Master Only. 5. Slave Only - Clock's Device Type is Slave Only.  Port List Shows the ports configured for that Clock Instance. Buttons Auto-refresh : Check this box to refresh the page automatically. Automatic refresh occurs every 6 seconds. : Click to refresh the page immediately.
PAGE 338
User’s Manual of IGS-10080MFT 5. COMMAND LINE INTERFACE 5.1 Accessing the CLI When accessing the management interface for the Industrial Managed Switch via a Telnet connection, the Industrial Managed Switch can be managed by entering command keywords and parameters at the prompt. Using the Industrial Managed Switch's command-line interface (CLI) is very similar to entering commands on a UNIX system. This chapter describes how to use the Command Line Interface (CLI). 5.
PAGE 339
User’s Manual of IGS-10080MFT 6. COMMAND LINE MODE The CLI groups all the commands in appropriate modes according to the nature of the command. A sample of the CLI command modes are described below. Each of the command modes supports specific software commands.
PAGE 340
User’s Manual of IGS-10080MFT 6.1 System Command System Configuration Description: Show system configuration.
PAGE 341
User’s Manual of IGS-10080MFT Example: To display system log information: IGS-10080MFT:/>System log configuration System Log Configuration: ========================= System Log Server Mode : Disabled System Log Server Address : System Log Level : Info IGS-10080MFT:/> System Version Description: Show system version information. Syntax: System Version Example: To display system version: IGS-10080MFT:/>System version Version : 1.
PAGE 342
User’s Manual of IGS-10080MFT Default Setting: disable Example: To show the log server mode: IGS-10080MFT:/>System log server mode System Log Server Mode : Disabled System Name Description: Set or show the system name. Syntax: System Name [] [clear] Parameters: : System name string. (1-255) Use 'clear' or "" to clear the string System name is a text string drawn from the alphabet (A-Za-z), digits (0-9), minus sign (-). In CLI, no blank or space characters are permitted as part of a name.
PAGE 343
User’s Manual of IGS-10080MFT Parameters: : System contact string. (1-255) Use 'clear' or "" to clear the string In CLI, No blank or space characters are permitted as part of a contact. clear : Clear system contact Default Setting: empty Example: To set device contact: IGS-10080MFT:/>System contact : System Log Server Address Description: Show or set the system log server address. Syntax: System Log Server Address [] Parameters: : IP host address (a.b.c.
PAGE 344
User’s Manual of IGS-10080MFT Parameters: : System location string. (1-255) Use 'clear' or "" to clear the string In CLI, no blank or space characters are permitted as part of a location. : Clear system location clear Default Setting: empty Example: To set device location: IGS-10080MFT:/>System location MyOffice System Log Level Description: Show or set the system log level. It uses to determine what kind of message will send to syslog server.
PAGE 345
User’s Manual of IGS-10080MFT System Timezone Description: Set or show the system timezone offset. Syntax: System Timezone [] Parameters: : Time zone offset in minutes (-720 to 720) relative to UTC Default Setting: 0 Example: To set timezone: IGS-10080MFT:/>system timezone 0 System Log Lookup Description: Show or clear the system log.
PAGE 346
User’s Manual of IGS-10080MFT Example: To show system log: IGS-10080MFT:/>system log lookup Number of entries: Info :2 Warning: 0 Error : 0 All :2 ID Level ---- ------ Time ------------------------- Message ------- 1 Info - Switch just made a cold boot. 2 Info 1970-01-01T00:00:05+00:00 Link up on port 8 IGS-10080MFT:/> System Reboot Description: Reboot the system.
PAGE 347
User’s Manual of IGS-10080MFT Example: To restore default value but not reset IP address: IGS-10080MFT:/>system restore default keep_ip System Load Description: Show current CPU load: 100ms, 1s and 10s running average (in percent, zero is idle). Syntax: System Load Example: To show current CPU load: IGS-10080MFT:/>system load Load average(100ms, 1s, 10s): 1%, 1%, 1% 6.2 IP Command IP Configuration Description: Show IP configuration.
PAGE 348
User’s Manual of IGS-10080MFT VLAN ID :1 DNS Proxy : Disabled IPv6 AUTOCONFIG mode : Disabled IPv6 Link-Local Address: fe80::6082:cdb9:19ab:c0e2 IPv6 Address : ::192.168.0.100 IPv6 Prefix : 96 IPv6 Router : :: IP DHCP Description: Set or show the DHCP client mode.
PAGE 349
User’s Manual of IGS-10080MFT Parameters: : IP address (a.b.c.d), default: Show IP address : IP subnet mask (a.b.c.d), default: Show IP mask : IP router (a.b.c.d), default: Show IP router : VLAN ID (1-4095), default: Show VLAN ID Default Setting: IP Address : 192.168.0.100 IP Mask : 255.255.255.0 IP Router : 192.168.0.1 DNS Server : 0.0.0.0 VLAN ID :1 Example: Set IP address: IGS-10080MFT:/>ip setup 192.168.0.100 255.255.255.
PAGE 350
User’s Manual of IGS-10080MFT IP DNS Description: Set or show the DNS server address. Syntax: IP DNS [] Parameters: : IP address (a.b.c.d), default: Showdne IP address Default Setting: 0.0.0.0 Example: Set DNS IP address: IGS-10080MFT:/>ip dns 168.95.1.1 IP DNS Proxy Description: Set or show the IP DNS Proxy mode.
PAGE 351
User’s Manual of IGS-10080MFT IPv6 AUTOCINFIG Description: Set or show the IPv6 AUTOCONFIG mode. Syntax: IP IPv6 AUTOCONFIG [enable|disable] Parameters: enable : Enable IPv6 AUTOCONFIG mode disable: Disable IPv6 AUTOCONFIG mode Default Setting: disable Example: Enable IPv6 autoconfig function: IGS-10080MFT:/>ip ipv6 autoconfig enable IPv6 Setup Description: Set or show the IPv6 setup.
PAGE 352
User’s Manual of IGS-10080MFT Default Setting: IPv6 AUTOCONFIG mode : Disabled IPv6 Link-Local Address: fe80::6082:cdb9:19ab:c0e2 IPv6 Address : ::192.168.0.100 IPv6 Prefix : 96 IPv6 Router : :: Example: Set IPv6 address: IGS-10080MFT:/>ip ipv6 setup 2001::0002 64 2100::0001 IPv6 Ping Description: Ping IPv6 address (ICMPv6 echo). Syntax: IP IPv6 Ping6 [] Parameters: : IPv6 host address.
PAGE 353
User’s Manual of IGS-10080MFT IP NTP Configuration Description: Show NTP configuration. Syntax: IP NTP Configuration Default Setting: IP NTP Configuration: ===================== NTP Mode : Disabled Idx --- Server IP host address (a.b.c.d) or a host name string ------------------------------------------------------ 1 pool.ntp.org 2 europe.pool.ntp.org 3 north-america.pool.ntp.org 4 asia.pool.ntp.org 5 oceania.pool.ntp.org IP NTP Mode Description: Set or show the NTP mode.
PAGE 354
User’s Manual of IGS-10080MFT Example: Enable NTP mode: IGS-10080MFT:/>ip ntp mode enable IP NTP Server Add Description: Add NTP server entry. Syntax: IP NTP Server Add Parameters: : The server index (1-5) : IP host address (a.b.c.d) or a host name string Example: To add NTP server: IGS-10080MFT:/>ip ntp server add 1 60.249.136.151 IP NTP Server IPv6 Add Description: Add NTP server IPv6 entry.
PAGE 355
User’s Manual of IGS-10080MFT Example: To add IPv6 NTP server: IGS-10080MFT:/>ip ntp server ipv6 add 1 2001:7b8:3:2c::123 IP NTP Server Delete Description: Delete NTP server entry.
PAGE 356
User’s Manual of IGS-10080MFT 6.3 Port Management Command Port Configuration Description: Show port configuration.
PAGE 357
User’s Manual of IGS-10080MFT Parameters: : Port list or 'all', default: All ports auto : Auto negotiation of speed and duplex 10hdx : 10 Mbps, half duplex 10fdx : 10 Mbps, full duplex 100hdx : 100 Mbps, half duplex 100fdx : 100 Mbps, full duplex 1000fdx : 1 Gbps, full duplex (default: Show configured and current mode) Default Setting: Auto Example: Set 10Mbps (half duplex) speed for port1 IGS-10080MFT:/>port mode 1 10hdx Port Flow Control Description: Set or show the port flow con
PAGE 358
User’s Manual of IGS-10080MFT Port State Description: Set or show the port administrative state. Syntax: Port State [] [enable|disable] Parameters: : Port list or 'all', default: All ports enable : Enable port disable : Disable port (default: Show administrative mode) Default Setting: Enable Example: Disable port1 IGS-10080MFT:/>port state 1 disable Port Maximum Frame Description: Set or show the port maximum frame size.
PAGE 359
User’s Manual of IGS-10080MFT Port Power Description: Set or show the port PHY power mode.
PAGE 360
User’s Manual of IGS-10080MFT Example: IGS-10080MFT:/>port excessive 1 restart Port Statistics Description: Show port statistics. Syntax: Port Statistics [] [] [up|down] Parameters: : Port list or 'all', default: All ports clear : The command parameter takes the following values: : Clear port statistics packets : Show packet statistics bytes : Show byte statistics errors : Show error statistics discards : Show discard statistics filtered 0..
PAGE 361
User’s Manual of IGS-10080MFT Port SFP Description: Show SFP port information.
PAGE 362
User’s Manual of IGS-10080MFT 6.4 MAC Address Table Command MAC Configuration Description: Show MAC address table configuration.
PAGE 363
User’s Manual of IGS-10080MFT Syntax: MAC Add [] Parameters: : MAC address (xx-xx-xx-xx-xx-xx) : Port list or 'all' or 'none' : VLAN ID (1-4095), default: 1 Example: Add Mac address 00-30-4F-01-01-02 in port1 and vid1 IGS-10080MFT:/>mac add 00-30-4f-01-01-02 1 1 MAC Delete Description: Delete MAC address entry.
PAGE 364
User’s Manual of IGS-10080MFT Example: Lookup state of Mac address 00-30-4F-01-01-02 IGS-10080MFT:/>mac lookup 00-30-4f-01-01-02 MAC Age Time Description: Set or show the MAC address age timer. Syntax: MAC Agetime [] Parameters: : MAC address age time (0,10-1000000) 0=disable, (default: Show age time) Default Setting: 300 Example: Set agetime value in 30 IGS-10080MFT:/>mac agetime 30 MAC Learning Description: Set or show the port learn mode.
PAGE 365
User’s Manual of IGS-10080MFT Default Setting: Auto Example: Set secure learning mode in port1 IGS-10080MFT:/>mac learning 1 secure MAC Dump Description: Show sorted list of MAC address entries.
PAGE 366
User’s Manual of IGS-10080MFT MAC Statistics Description: Show MAC address table statistics. Syntax: MAC Statistics [] Parameters: : Port list or 'all', (default: All ports) Example: Set all of MAC statistics IGS-10080MFT:/>mac statistics Port ---- Dynamic Addresses ----------------- 1 1 2 0 3 0 4 0 5 0 6 0 7 0 8 0 9 0 10 0 Total Dynamic Addresses: 1 Total Static Addresses : 6 IGS-10080MFT:/> MAC Flush Description: Flush all learned entries.
PAGE 367
User’s Manual of IGS-10080MFT 6.5 VLAN Configuration Command VLAN Configuration Description: Show VLAN configuration. Syntax: VLAN Configuration [] Parameters: : Port list or 'all', (default: All ports) Example: Show VLAN status of port1 IGS-10080MFT:/>vlan configuration 1 VLAN Configuration: =================== Mode : IEEE 802.
PAGE 368
User’s Manual of IGS-10080MFT VLAV PVID Description: Set or show the port VLAN ID. Syntax: VLAN PVID [] [|none] Parameters: : Port list or 'all', default: All ports |none : Port VLAN ID (1-4095) or 'none', (default: Show port VLAN ID) Default Setting: 1 Example: Set PVID2 for port10 IGS-10080MFT:/>vlan pvid 10 2 VLAN Frame Type Description: Set or show the port VLAN frame type.
PAGE 369
User’s Manual of IGS-10080MFT IGS-10080MFT:/>vlan frametype 10 tagged VLAN Ingress Filter Description: Set or show the port VLAN ingress filter.
PAGE 370
User’s Manual of IGS-10080MFT Example: Set VLAN mode in port base IGS-10080MFT:/>vlan mode portbased VLAN Link Type Description: Set or show the port VLAN link type.
PAGE 371
User’s Manual of IGS-10080MFT Parameters: : Port list or 'all', default: All ports disable : Disable Q-in-Q VLAN Mode man : Q-in-Q MAN Port Mode customer : Q-in-Q Customer Port Mode (default: Show VLAN QinQ Mode) Example: Set port2 in man port IGS-10080MFT:/>vlan qinq 2 man VLAN Ethernet Type Description: Set or show out layer VLAN tag ether type in Q-in-Q VLAN mode.
PAGE 372
User’s Manual of IGS-10080MFT Syntax: VLAN Add | [] Parameters: |: VLAN ID (1-4095) or VLAN Name : Port list or 'all', default: All ports Default Setting: 1 Example: Add port1 to port4 in VLAN10 IGS-10080MFT:/>vlan add 10 1-4 VLAN Forbidden Add Description: Add or modify VLAN entry in forbidden table.
PAGE 373
User’s Manual of IGS-10080MFT Parameters: |: VLAN ID (1-4095) or VLAN Name Example: Delete VLAN10 IGS-10080MFT:/>vlan delete 10 VLAN Forbidden Delete Description: Delete VLAN entry. Syntax: LAN Forbidden Delete | Parameters: |: VLAN ID (1-4095) or VLAN Name Example: Forbidden delete VLAN10 IGS-10080MFT:/>vlan forbidden delete 10 VLAN Forbidden Lookup Description: Lookup VLAN Forbidden port entry.
PAGE 374
User’s Manual of IGS-10080MFT VLAN Lookup Description: Lookup VLAN entry. Syntax: VLAN Lookup [] [(name )] [combined|static|nas|mvr|voice_vlan|all] Parameters: : VLAN ID (1-4095), default: Show all VLANs name : VLAN name string : VLAN name - Maximum of 32 characters. VLAN Name can only contain alphabets or numbers. VLAN name should contain atleast one alphabet.
PAGE 375
User’s Manual of IGS-10080MFT Parameters: : VLAN name - Maximum of 32 characters. VLAN Name can only contain alphabets or numbers. VLAN name should contain atleast one alphabet. : VLAN ID (1-4095) Example: Add VLAN name for VLAN 1 IGS-10080MFT:/>vlan name add test 1 VLAN Name Delete Description: Delete VLAN Name to VLAN ID Mapping. Syntax: VLAN Name Delete Parameters: : VLAN name - Maximum of 32 characters. VLAN Name can only contain alphabets or numbers.
PAGE 376
User’s Manual of IGS-10080MFT Example: To show VLAN Name table IGS-10080MFT:/>vlan name lookup VLAN NAME vid ------------------------------- --- test 1 VLAN Status Description: VLAN Port Configuration Status.
PAGE 377
User’s Manual of IGS-10080MFT 1 Static Unaware 1 All Disabled Untag This 1 NAS No MVR No Voice VLAN No MSTP No Combined Unaware 1 All Disabled No 6.6 Private VLAN Configuration Command PVLAN Configuration Description: Show Private VLAN configuration.
PAGE 378
User’s Manual of IGS-10080MFT 6 Disabled 7 Disabled 8 Disabled 9 Disabled 10 Disabled PVLAN ID Ports -------- ----- 1 1-10 PVLAN Add Description: Add or modify Private VLAN entry. Syntax: PVLAN Add [] Parameters: : Private VLAN ID. The allowed range for a Private VLAN ID is the same as the switch port number range.
PAGE 379
User’s Manual of IGS-10080MFT Example: Delete PVLAN10 IGS-10080MFT:/>pvlan delete 10 PVLAN Lookup Description: Lookup Private VLAN entry. Syntax: PVLAN Lookup [] Parameters: : Private VLAN ID, default: Show all PVLANs. The allowed range for a Private VLAN ID is the same as the switch port number range. Example: Lookup PVLAN IGS-10080MFT:/>pvlan lookup PVLAN ID Ports -------- ----- 1 1-10 PVLAN Isolate Description: Set or show the port isolation mode.
PAGE 380
User’s Manual of IGS-10080MFT Default Setting: disable Example: Enable isolate for port10 IGS-10080MFT:/>pvlan isolate 10 enable 6.7 Security Command Security Switch User Configuration Description: Show users configuration.
PAGE 381
User’s Manual of IGS-10080MFT Syntax: Security Switch Users Add Parameters: : A string identifying the user name that this entry should belong to. The allowed string length is (1-32). The valid user name is a combination of letters, numbers and underscores : The password for this user name. The allowed string length is (0-32).
PAGE 382
User’s Manual of IGS-10080MFT Example: Show privilege level IGS-10080MFT:/>security switch privilege level configuration Privilege Level Configuration: ============================== Privilege Current Level: 15 Group Name Priviliege Level CRO CRW SRO SRW -------------------------------- --- --- --- --Aggregation 5 10 5 Debug 15 15 15 15 Diagnostics 5 10 10 5 10 DualCPU 5 10 5 EEE 5 10 5 10 IP 5 10 5 10 10 LACP 5 10 5 10 LLDP 5 10 5 10 LLDP_MED 5 10 5 10 MAC_Table
PAGE 383
User’s Manual of IGS-10080MFT Security Switch Privilege Level Group Description: Configure a privilege level group.
PAGE 384
User’s Manual of IGS-10080MFT Example: Show authentication configuration. IGS-10080MFT:/>security switch auth configuration Auth Configuration: =================== Client Authentication Method Local Authentication Fallback ------- ---------------------- ----------------------------- console local Disabled telnet local Disabled ssh local Disabled web local Disabled Security Switch Auth Method Description: Set or show Auth method. (default: Show Auth method).
PAGE 385
User’s Manual of IGS-10080MFT Example: Use RADIUS authentication method for telnet. IGS-10080MFT:/>security switch auth method telnet radius enable Security Switch SSH Configuration Description: Show SSH configuration. Syntax: Security Switch SSH Configuration Example: Show SSH configuration. IGS-10080MFT:/>security switch ssh configuration SSH Configuration: ================== SSH Mode : Enable Security Switch SSH Mode Description: Set or show the SSH mode.
PAGE 386
User’s Manual of IGS-10080MFT Example: Enable SSH function. IGS-10080MFT:/>security switch ssh mode enable Security Switch HTTPs Configuration Description: Show HTTPS configuration. Syntax: Security Switch HTTPS Configuration Example: Show HTTPs configuration. IGS-10080MFT:/>security switch https configuration HTTPS Configuration: ==================== HTTPS Mode : Enable HTTPS Redirect Mode : Disabled Security Switch HTTPs Mode Description: Set or show the HTTPS mode.
PAGE 387
User’s Manual of IGS-10080MFT Example: Enable HTTPs function. IGS-10080MFT:/>security switch https mode enable Security Switch HTTPs Redirect Description: Set or show the HTTPS redirect mode. Automatic redirect web browser to HTTPS during HTTPS mode enabled. Syntax: Security Switch HTTPS Redirect [enable|disable] Parameters: enable : Enable HTTPs redirect disable: Disable HTTPs redirect (default: Show HTTPs redirect mode) Default Setting: disable Example: Enable HTTPs redirect function.
PAGE 388
User’s Manual of IGS-10080MFT Access Mgmt Configuration: ========================== System Access Mode : Disabled System Access number of entries: 0 Security Switch Access Mode Description: Set or show the access management mode. Syntax: Security Switch Access Mode [enable|disable] Parameters: enable : Enable access management disable: Disable access management (default: Show access management mode) Default Setting: disable Example: Enable access management function.
PAGE 389
User’s Manual of IGS-10080MFT Access Mgmt Configuration: ========================== System Access Mode : Disabled W: WEB/HTTPS S: SNMP T: TELNET/SSH Idx Start IP Address End IP Address --- ------------------------------- ------------------------------ - - - Security Switch Access Mode Description: Set or show the access management mode.
PAGE 390
User’s Manual of IGS-10080MFT Syntax: Security Switch Access Add [web] [snmp] [telnet] Parameters: : entry index (1-16) : Start IP address (a.b.c.d) : End IP address (a.b.c.
PAGE 391
User’s Manual of IGS-10080MFT telnet : Indicates that the host can access the switch from TELNET/SSH Example: Add access management list from 2001::0001 to 2001::0100 via web interface. IGS-10080MFT:/> security switch access add 2001::0001 2001::0100 web Security Switch Access Delete Description: Delete access management entry.
PAGE 392
User’s Manual of IGS-10080MFT Security Switch Access Clear Description: Clear access management entry. Syntax: Security Switch Access Clear Example: Clear access management entry. IGS-10080MFT:/>security switch access clear Security Switch Access Statistics Description: Show or clear access management statistics. Syntax: Security Switch Access Statistics [clear] Parameters: clear: Clear access management statistics Example: Show access management statistics.
PAGE 393
User’s Manual of IGS-10080MFT Security Switch SNMP Configuration Description: Show SNMP configuration. Syntax: Security Switch SNMP Configuration Security Switch SNMP Mode Description: Set or show the SNMP mode. Syntax: Security Switch SNMP Mode [enable|disable] Parameters: enable : Enable SNMP disable: Disable SNMP (default: Show SNMP mode) Default Setting: enable Example: Disable SNMP mode.
PAGE 394
User’s Manual of IGS-10080MFT Parameters: 1 : SNMP version 1 2c: SNMP version 2c 3 : SNMP version 3 (default: Show SNMP version) Default Setting: 2c Example: Set SNMP in version 3. IGS-10080MFT:/>security switch snmp version 3 Security Switch SNMP Read Community Description: Set or show the community string for SNMP read access. Syntax: Security Switch SNMP Read Community [] Parameters: : Community string.
PAGE 395
User’s Manual of IGS-10080MFT Security Switch SNMP Write Community Description: Set or show the community string for SNMP write access. Syntax: Security Switch SNMP Write Community [] Parameters: : Community string. Use 'clear' or "" to clear the string (default: Show SNMP write community) Default Setting: private Example: Set public value in SNMP write community.
PAGE 396
User’s Manual of IGS-10080MFT Example: Enable SNMP trap mode. IGS-10080MFT:/>security switch snmp trap mode enable Security Switch SNMP Trap Version Description: Set or show the SNMP trap protocol version. Syntax: Security Switch SNMP Trap Version [1|2c|3] Parameters: 1 : SNMP version 1 2c: SNMP version 2c 3 : SNMP version 3 (default: Show SNMP trap version) Default Setting: 1 Example: Set SNMP trap version in version 2c.
PAGE 397
User’s Manual of IGS-10080MFT Default Setting: public Example: Set private value for SNMP trap community. IGS-10080MFT:/>security switch snmp trap community private Security Switch SNMP Trap Destination Description: Set or Show the SNMP trap destination address. Syntax: Security Switch SNMP Trap Destination [] Parameters: : IP host address (a.b.c.d) or a host name string Example: Set SNMP trap destination address for 192.168.0.
PAGE 398
User’s Manual of IGS-10080MFT Example: Set SNMP trap IPv6 destination address for 2001::0001 IGS-10080MFT:/>security switch snmp trap ipv6 destination 2001::0001 Security Switch SNMP Trap Authentication Failure Description: Set or show the SNMP authentication failure trap mode.
PAGE 399
User’s Manual of IGS-10080MFT Default Setting: enable Example: Disable SNMP trap link-up IGS-10080MFT:/>security switch snmp trap link-up disable Security Switch SNMP Trap Inform Mode Description: Set or show the SNMP trap inform mode. Syntax: Security Switch SNMP Trap Inform Mode [enable|disable] Parameters: enable : Enable SNMP trap inform disable: Disable SNMP trap inform (default: Show SNMP inform mode) Default Setting: enable Example: Disable SNMP trap inform mode.
PAGE 400
User’s Manual of IGS-10080MFT Default Setting: 1 Example: Set SNMP trap inform timeout in 20sec. IGS-10080MFT:/>security switch snmp trap inform timeout 20 Security Switch SNMP Trap Inform Retry Times Description: Set or show the SNMP trap inform retry times. Syntax: Security Switch SNMP Trap Inform Retry Times [] Parameters: : SNMP trap inform retransmited times (0-255) (default: Show SNMP trap inform retry times) Default Setting: 5 Example: Set SNMP trap inform retry times in 10.
PAGE 401
User’s Manual of IGS-10080MFT Default Setting: enable Example: Disable SNMP trap probe security engine ID IGS-10080MFT:/>security switch snmp trap probe security engine id disable Security Switch SNMP Trap Security Engine ID Description: Set or show SNMP trap security engine ID.
PAGE 402
User’s Manual of IGS-10080MFT Example: Set the SNMP trap security name IGS-10080MFT:/>security switch snmp trap security name 12345678 Security Switch SNMP Engine ID Description: Set or show SNMPv3 local engine ID.
PAGE 403
User’s Manual of IGS-10080MFT Example: Add SNMPv3 community entry. IGS-10080MFT:/>security switch snmp community add public 192.168.0.20 255.255.255.0 Security Switch SNMP Community Delete Description: Delete SNMPv3 community entry. Syntax: Security Switch SNMP Community Delete Parameters: : entry index (1-64) Example: Delete SNMPv3 community entry IGS-10080MFT:/>security switch snmp community delete 3 Security Switch SNMP Community Lookup Description: Lookup SNMPv3 community entry.
PAGE 404
User’s Manual of IGS-10080MFT 2 private 0.0.0.0 0.0.0.0 Number of entries: 2 Security Switch SNMP User Add Description: Add SNMPv3 user entry. The entry index key are and and it doesn't allow modify.
PAGE 405
User’s Manual of IGS-10080MFT Syntax: Security Switch SNMP User Delete Parameters: : entry index (1-64) Example: Delete SNMPv3 user entry IGS-10080MFT:/>security switch snmp user delete 1 Security Switch SNMP User Changekey Description: Change SNMPv3 user password.
PAGE 406
User’s Manual of IGS-10080MFT Parameters: : entry index (1-64) Example: Lookup SNMPv3 user entry IGS-10080MFT:/>security switch snmp user lookup Idx Engine ID User Name --- --------- -------------------------------- 1 Remote admin_snmpv3 Level Auth Priv -------------- ---- ---- Auth, Priv MD5 DES Number of entries: 1 Security Switch SNMP Group Add Description: Add or modify SNMPv3 group entry. The entry index key are and .
PAGE 407
User’s Manual of IGS-10080MFT Security Switch SNMP Group Delete Description: Delete SNMPv3 group entry. Syntax: Security Switch SNMP Group Delete Parameters: : entry index (1-64) Example: Delete SNMPv3 group entry IGS-10080MFT:/>security switch snmp group delete 1 Security Switch SNMP Group Lookup Description: Lookup SNMPv3 group entry.
PAGE 408
User’s Manual of IGS-10080MFT Security Switch SNMP View Add Description: Add or modify SNMPv3 view entry. The entry index key are and . Syntax: Security Switch SNMP View Add [included|excluded] Parameters: : A string identifying the view name that this entry should belong to.
PAGE 409
User’s Manual of IGS-10080MFT Security Switch SNMP View Lookup Description: Lookup SNMPv3 view entry. Syntax: Security Switch SNMP View Lookup [] Parameters: : entry index (1-64) Example: Lookup SNMPv3 view entry IGS-10080MFT:/>security switch snmp view lookup Idx View Name View Type OID Subtree --- -------------------------------- --------- -------------------------------- 1 default_view included .1 2 snmpv3_viwe included .
PAGE 410
User’s Manual of IGS-10080MFT : The name of the MIB view defining the MIB objects for which this request may request the current values. The name of "None" is reserved. The allowed string length is (1-32), and the allowed content is ASCII characters from 33 to 126 : The name of the MIB view defining the MIB objects for which this request may potentially SET new values. The name of "None" is reserved.
PAGE 411
User’s Manual of IGS-10080MFT Parameters: : entry index (1-64) Example: Lookup SNMPv3 access entry IGS-10080MFT:/>security switch snmp access lookup Idx Group Name Model Level --- -------------------------------- ----- -------------1 default_ro_group any NoAuth, NoPriv 2 default_rw_group any NoAuth, NoPriv Number of entries: 2 Security Network Psec Switch Description: Show Port Security status.
PAGE 412
User’s Manual of IGS-10080MFT 4 ---- No users 0 5 ---- No users 0 6 ---- No users 0 7 ---- No users 0 8 ---- No users 0 9 ---- No users 0 10 ---- No users 0 Security Network Psec Port Description: Show MAC Addresses learned by Port Security.
PAGE 413
User’s Manual of IGS-10080MFT Parameters: : Port list or 'all', default: All ports Example: Show Limit Control configuration.
PAGE 414
User’s Manual of IGS-10080MFT Default Setting: disable Example: Enable the limit mode IGS-10080MFT:/>security network limit mode enable Security Network Limit Aging Description: Set or show aging enabledness.
PAGE 415
User’s Manual of IGS-10080MFT Default Setting: 3600 Example: Set age time in 100sec. IGS-10080MFT:/>security network limit agetime 100 Security Network Limit Port Description: Set or show per-port enabledness.
PAGE 416
User’s Manual of IGS-10080MFT Default Setting: 4 Example: Set limit in 5 IGS-10080MFT:/>security network limit limit 1-10 5 Security Network Limit Action Description: Set or show the action involved with exceeding the limit.
PAGE 417
User’s Manual of IGS-10080MFT Syntax: Security Network Limit Reopen [] Parameters: : Port list or 'all', default: All ports Example: Reopen port 1 IGS-10080MFT:/>security network limit reopen 1 Security Network NAS Configuration Description: Show 802.1X configuration. Syntax: Security Network NAS Configuration [] Parameters: : Port list or 'all', default: All ports Example: Show 802.
PAGE 418
User’s Manual of IGS-10080MFT Guest VLAN ID :1 Max. Reauth Count: 2 Allow Guest VLAN if EAPOL Frame Seen: Disabled Port ---- Admin State ------------------ 1 Port State --------------------- Force Authorized ----------------- Last Source Last ID ------------------ Globally Disabled - - Security Network NAS Mode Description: Set or show the global NAS enabledness. Syntax: Security Network NAS Mode [enable|disable] Parameters: enable : Globally enable 802.1X disable: Globally disable 802.
PAGE 419
User’s Manual of IGS-10080MFT auto : Port-based 802.1X Authentication authorized : Port access is allowed unauthorized: Port access is not allowed single : Single Host 802.1X Authentication multi : Multiple Host 802.1X Authentication macbased : Switch authenticates on behalf of the client (default: Show 802.1X state) Default Setting: none Example: Show the port 1 security state.
PAGE 420
User’s Manual of IGS-10080MFT Security Network NAS ReauthPeriod Description: Set or show either global enabledness (use the global keyword) or per-port enabledness of RADIUS-assigned VLAN.
PAGE 421
User’s Manual of IGS-10080MFT Example: Set the time between EAPOL retransmissions for 100sec. IGS-10080MFT:/>security network nas eapoltimeout 100 Security Network NAS Agetime Description: Time in seconds between check for activity on successfully authenticated MAC addresses.
PAGE 422
User’s Manual of IGS-10080MFT Example: Set NAS hold time in 100sec IGS-10080MFT:/>security network nas holdtime 100 Security Network NAS RADIUS_QoS Description: Set or show either global enabledness (use the global keyword) or per-port enabledness of RADIUS-assigned QoS.
PAGE 423
User’s Manual of IGS-10080MFT (default: Show current per-port RADIUS-assigned VLAN enabledness) enable : Enable RADIUS-assigned VLAN either globally or on one or more ports disable: Disable RADIUS-assigned VLAN either globally or on one or more ports (default: Show current RADIUS-assigned VLAN enabledness) Default Setting: disable Example: Enable NAS RADIUS VLAN IGS-10080MFT:/>security network nas radius_vlan enable Security Network NAS Guest_VLAN Description: Set or show either global enabledness and pa
PAGE 424
User’s Manual of IGS-10080MFT Example: Enable NAS guest VLAN IGS-10080MFT:/>security network nas guest_vlan enable Security Network NAS Authenticate Description: Refresh (restart) 802.1X authentication process. Syntax: Security Network NAS Authenticate [] [now] Parameters: : Port list or 'all', default: All ports now: Force reauthentication immediately Example: Start NAS authentication now for port 1.
PAGE 425
User’s Manual of IGS-10080MFT Port 1 EAPOL Statistics: Rx Total: 0 Rx Response/Id: Tx Total: 0 Rx Response: Tx Request/Id: 0 0 0 Tx Request: 0 Rx Access Challenges: 0 Tx Responses: 0 Rx Other Requests: 0 Rx Auth. Successes: 0 Rx Start: Rx Logoff: 0 0 Rx Invalid Type: 0 Rx Invalid Length: 0 Port 1 Backend Server Statistics: Rx Auth. Failures: 0 Security Network ACL Configuration Description: Show ACL Configuration.
PAGE 426
User’s Manual of IGS-10080MFT Parameters: : Port list or 'all', default: All ports permit : Permit forwarding (default) deny : Deny forwarding : Rate limiter number (1-15) or 'disable' : Port number for copy of frames or 'disable' : System logging of frames: log|log_disable : Shut down ingress port: shut|shut_disable Example: Show ACL action in port 1 IGS-10080MFT:/>security network acl action 1 Port ---- Action ------ 1 Rate Limiter
PAGE 427
User’s Manual of IGS-10080MFT Security Network ACL Rate Description: Set or show the ACL rate limiter. Syntax: Security Network ACL Rate [] [] [] Parameters: : Rate limiter list (1-16), default: All rate limiters : IP flags: pps|kbps, default: pss : Rate in pps (0-100) or kbps (0, 100, 2*100, 3*100, ...
PAGE 428
User’s Manual of IGS-10080MFT []) | (udp [] [] [] [] []) | (tcp [] [] [] [] [] [])] [permit|deny] [] [] [] [] [] Parameters: : ACE ID (1-256), default: Next available ID : Next ACE ID (1-256), default: Add ACE last switch : Switch ACE keyword port : Port ACE keyword : Port list or 'all', default: All ports policy : Policy AC
PAGE 429
User’s Manual of IGS-10080MFT : Mirror of frames: enable|disable : System logging of frames: log|log_disable : Shut down ingress port: shut|shut_disable Security Network ACL Delete Description: Delete ACE. Syntax: Security Network ACL Delete Parameters: : ACE ID (1-256) Example: Delete ACE 1 IGS-10080MFT:/>security network acl delete 1 Security Network ACL Lookup Description: Show ACE, default: All ACEs.
PAGE 430
User’s Manual of IGS-10080MFT Security Network ACL Clear Description: Clear all ACL counters. Syntax: Security Network ACL Clear Example: Clear all ACL counters. IGS-10080MFT:/>security network acl clear Security Network ACL Status Description: Show ACL status.
PAGE 431
User’s Manual of IGS-10080MFT Syntax: Security Network DHCP Relay Configuration Example: Show DHCP relay configuration. IGS-10080MFT:/>security network dhcp relay configuration DHCP Relay Configuration: ========================= DHCP Relay Mode : Disabled DHCP Relay Server : NULL DHCP Relay Information Mode : Disabled DHCP Relay Information Policy : replace Security Network DHCP Relay Mode Description: Set or show the DHCP relay mode.
PAGE 432
User’s Manual of IGS-10080MFT Security Network DHCP Relay Server Description: Show or set DHCP relay server. Syntax: Security Network DHCP Relay Server [] Parameters: : IP address (a.b.c.d), default: Show IP address Default Setting: null Example: Set DHCP relay server in 192.168.0.20 IGS-10080MFT:/>security network dhcp relay server 192.168.0.20 Security Network DHCP Relay Information Mode Description: Set or show DHCP relay agent information option mode.
PAGE 433
User’s Manual of IGS-10080MFT Example: Enable DHCP relay agent information option mode. IGS-10080MFT:/>security network dhcp relay information mode enable Security Network DHCP Relay Information Policy Description: Set or show the DHCP relay mode. When enable DHCP relay information mode operation, if agent receive a DHCP message that already contains relay agent information. It will enforce the policy.
PAGE 434
User’s Manual of IGS-10080MFT Example: Show DHCP relay statistics. IGS-10080MFT:/>security network dhcp relay statistics Security Network DHCP Snooping Configuration Description: Show DHCP snooping configuration. Syntax: Security Network DHCP Snooping Configuration Security Network DHCP Snooping Mode Description: Set or show the DHCP snooping mode. Syntax: Security Network DHCP Snooping Mode [enable|disable] Parameters: enable : Enable DHCP snooping mode.
PAGE 435
User’s Manual of IGS-10080MFT Security Network DHCP Snooping Port Mode Description: Set or show the DHCP snooping port mode.
PAGE 436
User’s Manual of IGS-10080MFT Rx Discover: Rx Offer: Rx Request: Rx Decline: 0 Tx Discover: 0 Tx Offer: 0 0 0 Tx Request: 0 Tx Decline: 0 0 Rx ACK: 0 Tx ACK: 0 Rx NAK: 0 Tx NAK: 0 Rx Release: 0 Tx Release: Rx Inform: 0 Tx Inform: Rx Lease Query: 0 Tx Lease Query: Rx Lease Unassigned: 0 Tx Lease Unassigned: Rx Lease Unknown: Rx Lease Active: 0 0 0 0 0 0 Tx Lease Unknown: Tx Lease Active: Security Network IP Source Guard Configuration Description: Show IP source guard confi
PAGE 437
User’s Manual of IGS-10080MFT Example: Enable IP source guard mode IGS-10080MFT:/>security network ip source guard mode enable Security Network IP Source Guard Port Mode Description: Set or show the IP Source Guard port mode.
PAGE 438
User’s Manual of IGS-10080MFT Default Setting: unlimited Example: Set IP source guard limit IGS-10080MFT:/>security network ip source guard 1 1 Security Network IP Source Guard Entry Description: Add or delete IP source guard static entry.
PAGE 439
User’s Manual of IGS-10080MFT Example: Show IP source guard static and dynamic entries. IGS-10080MFT:/>security network ip source guard status Security Network ARP Inspection Configuration Description: Show ARP inspection configuration. Syntax: Security Network ARP Inspection Configuration Example: Show ARP inspection configuration. IGS-10080MFT:/>security network arp inspection configuration Security Network ARP Inspection Mode Description: Set or show ARP inspection mode.
PAGE 440
User’s Manual of IGS-10080MFT Security Network ARP Inspection Port Mode Description: Set or show the ARP Inspection port mode.
PAGE 441
User’s Manual of IGS-10080MFT IGS-10080MFT:/>security network arp inspection entry 1 add 1 00-30-4f-00-00-11 192.168.0.11 Security Network ARP Inspection Status Description: Show ARP inspection static and dynamic entries. Syntax: Security Network ARP Inspection Status [] Parameters: : Port list or 'all', default: All ports Example: Show ARP inspection static and dynamic entries.
PAGE 442
User’s Manual of IGS-10080MFT =========================================== Server Mode IP Address Secret Port ------ --------------- ------------------------------ ----- -------- 1 Disabled 1812 2 Disabled 1812 3 Disabled 1812 4 Disabled 1812 5 Disabled 1812 RADIUS Accounting Server Configuration: ======================================= Server Mode IP Address Secret Port ------ -------- --------------- ------------------------------ ----- 1 Disabled 1813 2 Disabled 1813
PAGE 443
User’s Manual of IGS-10080MFT Parameters: : Server response timeout (3-3600 seconds) (default: Show server timeout configuration) Default Setting: 15 Example: Set 30sec for server timeout IGS-10080MFT:/>security aaa timeout 30 Security AAA Deadtime Description: Set or show server dead time.
PAGE 444
User’s Manual of IGS-10080MFT Parameters: The server index (1-5) (default: Show RADIUS authentication server configuration) enable : Enable RADIUS authentication server disable : Disable RADIUS authentication server (default: Show RADIUS server mode) : IP host address (a.b.c.d) or a host name string : Secret shared with external authentication server. To set an empty secret, use two quotes (""). To use spaces in secret, enquote the secret. Quotes in the secret are not allowed.
PAGE 445
User’s Manual of IGS-10080MFT Example: Set RADIUS accounting server configuration. IGS-10080MFT:/>security acct_radius 1 enable 192.168.0.20 12345678 1813 Security AAA TACACS+ Description: Set or show TACACS+ authentication server setup.
PAGE 446
User’s Manual of IGS-10080MFT Parameters: The server index (1-5) (default: Show statistics for all servers) Example: Show RADIUS statistics. IGS-10080MFT:/>security aaa statistics 6.8 Spanning Tree Protocol Command STP Configuration Description: Show STP configuration. Syntax: STP Configuration Example: Show STP configuration.
PAGE 447
User’s Manual of IGS-10080MFT STP Version Description: Set or show the STP Bridge protocol version. Syntax: STP Version [] Parameters: : mstp|rstp|stp Default Setting: MSTP Example: Set the STP Bridge protocol version. IGS-10080MFT:/> stp version rstp STP Tx Hold Description: Set or show the STP Bridge Transmit Hold Count parameter.
PAGE 448
User’s Manual of IGS-10080MFT STP MaxHops Description: Set or show the MSTP Bridge Max Hop Count parameter. Syntax: STP MaxHops [] Parameters: : STP BPDU MaxHops (6-40)) Default Setting: 20 Example: Set STP maximum hops in 25 IGS-10080MFT:/>stp maxhops 25 STP MaxAge Description: Set or show the bridge instance maximum age.
PAGE 449
User’s Manual of IGS-10080MFT STP FwdDelay Description: Set or show the CIST/MSTI bridge forward delay. Syntax: STP FwdDelay [] Parameters: : MSTP forward delay (4-30, and max_age <= (forward_delay-1)*2)) Default Setting: 15 Example: Set STP forward delay value in 25 IGS-10080MFT:/>stp fwddelay 25 STP CName Description: Set or Show MSTP configuration name and revision. Syntax: STP CName [] [] Parameters: : MSTP Configuration name.
PAGE 450
User’s Manual of IGS-10080MFT STP BPDU Filter Description: Set or show edge port BPDU Filtering. Syntax: STP bpduFilter [enable|disable] Parameters: enable|disable: enable or disable BPDU Filtering for Edge ports Default Setting: Disable Example: Set edge port BPDU filtering IGS-10080MFT:/>stp bpdufilter enable STP BPDU Guard Description: Set or show edge port BPDU Guard.
PAGE 451
User’s Manual of IGS-10080MFT STP Recovery Description: Set or show edge port error recovery timeout. Syntax: STP recovery [] Parameters: : Time before error-disabled ports are reenabled (30-86400 seconds, 0 disables) (default: Show recovery timeout) Default Setting: Disable Example: Set STP recovery value in 30 sec. IGS-10080MFT:/>stp recovery 30 STP Status Description: Show STP Bridge status.
PAGE 452
User’s Manual of IGS-10080MFT Example: Show STP Bridge status. IGS-10080MFT:/>stp status CIST Bridge STP Status Bridge ID : 80:00-00:30:4F:24:04:D1 Root ID : 80:00-00:30:4F:24:04:D1 Root Port :- Root PathCost: 0 Regional Root: 80:00-00:30:4F:24:04:D1 Int.
PAGE 453
User’s Manual of IGS-10080MFT STP MSTI Map Description: Show or clear MSTP MSTI VLAN mapping configuration. Syntax: STP Msti Map [] [clear] Parameters: : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...) Clear : Clear VID to MSTI mapping Example: Add MST1 priority value in 48. IGS-10080MFT:/>stp msti priority 1 48 STP MSTI Add Description: Add a VLAN to a MSTI. Syntax: STP Msti Add Parameters: : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...
PAGE 454
User’s Manual of IGS-10080MFT STP Port Configuration Description: Show STP Port configuration. Syntax: STP Port Configuration [] Parameters: : Port list or 'all'. Port zero means aggregations.
PAGE 455
User’s Manual of IGS-10080MFT STP Port Edge Description: Set or show the STP adminEdge port parameter. Syntax: STP Port Edge [] [enable|disable] Parameters: : Port list or 'all', default: All ports Enable : Configure MSTP adminEdge to Edge Disable : Configure MSTP adminEdge to Non-edge Default: disable Example: Enable STP edge function on port1 IGS-10080MFT:/>stp port edge 1 enable STP Port AutoEdge Description: Set or show the STP autoEdge port parameter.
PAGE 456
User’s Manual of IGS-10080MFT STP Port P2P Description: Set or show the STP point2point port parameter.
PAGE 457
User’s Manual of IGS-10080MFT Default: auto Example: Disable STP P2P function on port1 IGS-10080MFT:/>stp port p2p 1 disable STP Port RestrictedRole Description: Set or show the MSTP restrictedRole port parameter.
PAGE 458
User’s Manual of IGS-10080MFT Parameters: : Port list or 'all', default: All ports enable : Enable MSTP restricted TCN disable : Disable MSTP restricted TCN Default: disable Example: Eisable STP restricted TCN on port1 IGS-10080MFT:/>stp port restrictedtcn 1 enable STP Port bpduGuard Description: Set or show the bpduGuard port parameter.
PAGE 459
User’s Manual of IGS-10080MFT STP Port Statistic Description: Show STP port statistics. Syntax: STP Port Statistics [] [clear] Parameters: : Port list or 'all', default: All ports clear : Clear the selected port statistics Example: Show STP port statistics. IGS-10080MFT:/>stp port statistics Port Tx TCN --------- Rx MSTP Rx Ill. Tx MSTP Rx RSTP Tx RSTP Rx STP Tx STP Rx Unk.
PAGE 460
User’s Manual of IGS-10080MFT STP MSTI Port Configuration Description: Show the STP port instance configuration. Syntax: STP Msti Port Configuration [] [] Parameters: : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...) : Port list or 'all', default: All ports Default: auto STP MSTI Port Cost Description: Set or show the STP port instance path cost.
PAGE 461
User’s Manual of IGS-10080MFT STP MSTI Port Priority Description: Set or show the STP port instance priority. Syntax: STP Msti Port Priority [] [] [] Parameters: : STP bridge instance no (0-7, CIST=0, MSTI1=1, ...) : Port list or 'all'. Port zero means aggregations. : STP port priority (0/16/32/48/...
PAGE 462
User’s Manual of IGS-10080MFT 6.9 Link Aggregation Command Aggregation Configuration Description: Show link aggregation configuration. Syntax: Aggr Configuration Aggregation Add Description: Add or modify link aggregation. Syntax: Aggr Add [] Parameters: : Port list or 'all', default: All ports : Aggregation ID Example: Add port 1~4 in Group1 IGS-10080MFT:/>aggr add 1-4 1 Aggregation Delete Description: Delete link aggregation.
PAGE 463
User’s Manual of IGS-10080MFT Example: Delete Group2 IGS-10080MFT:/>aggr delete 2 Aggregation Lookup Description: Lookup link aggregation. Syntax: Aggr Lookup [] Parameters: : Aggregation ID Aggregation Mode Description: Set or show the link aggregation traffic distribution mode.
PAGE 464
User’s Manual of IGS-10080MFT Example: Disable SMAC mode IGS-10080MFT:/>Aggr mode smac disable 464
PAGE 465
User’s Manual of IGS-10080MFT 6.10 Link Aggregation Control Protocol Command LACP Configuration Description: Show LACP configuration.
PAGE 466
User’s Manual of IGS-10080MFT disable: Disable LACP protocol (default: Show LACP mode) Default Setting: disable Example: Enable LACP for port1~4 IGS-10080MFT:/>lacp mode 1-4 enable LACP Key Description: Set or show the LACP key. Syntax: LACP Key [] [] Parameters: : Port list or 'all', default: All ports : LACP key (1-65535) or 'auto' Default Setting: auto Example: Set key1 for port1~4 IGS-10080MFT:/>lacp key 1-4 1 LACP Role Description: Set or show the LACP role.
PAGE 467
User’s Manual of IGS-10080MFT passive: Listen for LACP packets (default: Show LACP role) Default Setting: active Example: Set passive for port1~4 IGS-10080MFT:/>lacp role 1-4 passive LACP Status Description: Show LACP Status.
PAGE 468
User’s Manual of IGS-10080MFT LACP Statistics Description: Show LACP Statistics.
PAGE 469
User’s Manual of IGS-10080MFT 6.11 LLDP Command LLDP Configuration Description: Show LLDP configuration.
PAGE 470
User’s Manual of IGS-10080MFT Parameters: : Port list or 'all', default: All ports enable : Enable LLDP reception and transmission disable: Disable LLDP rx : Enable LLDP reception only tx : Enable LLDP transmission only (default: Show LLDP mode) Default Setting: disable Example: Enable port1 LLDP function. IGS-10080MFT:/>lldp mode 1 enable LLDP Optional TLV Description: Show or Set LLDP Optional TLVs.
PAGE 471
User’s Manual of IGS-10080MFT System capabilities: Enable Master's IP address: Enable Example: Disable description of the port for port1 IGS-10080MFT:/>lldp optional_tlv 1 port_descr disable LLDP Interval Description: Set or show LLDP Tx interval. Syntax: LLDP Interval [] Parameters: : LLDP transmission interval (5-32768) Default Setting: 30 Example: Set transmission interval in 10 IGS-10080MFT:/>lldp interval 10 LLDP Hold Description: Set or show LLDP Tx hold value.
PAGE 472
User’s Manual of IGS-10080MFT Example: Set LLDP hold value in 10 IGS-10080MFT:/>lldp hold 10 LLDP Delay Description: Set or show LLDP Tx delay. Syntax: LLDP Delay [] Parameters: : LLDP transmission delay (1-8192) Default Setting: 2 Example: Set LLDP delay value in 1 IGS-10080MFT:/>lldp delay 1 LLDP Reinit Description: Set or show LLDP reinit delay.
PAGE 473
User’s Manual of IGS-10080MFT Example: Set LLDP reinit delay value in 3 IGS-10080MFT:/>lldp reinit 3 LLDP Statistics Description: Show LLDP Statistics. Syntax: LLDP Statistics [] [clear] Parameters: : Port list or 'all', default: All ports : Clear LLDP statistics clear Example: Show LLDP Statistics of port 1 IGS-10080MFT:/>lldp statistics 1 LLDP global counters Neighbor entries was last changed at - (18819 sec. ago).
PAGE 474
User’s Manual of IGS-10080MFT LLDP Info Description: Show LLDP neighbor device information.
PAGE 475
User’s Manual of IGS-10080MFT 6.12 LLDP MED Command LLDP MED Configuration Description: Show LLDP-MED configuration. Syntax: LLDPMED Configuration [] Parameters: : Port list or 'all', default: All ports Example: Show LLDP-MED configuration of port1~4 IGS-10080MFT:/>lldpmed configuration 1-4 LLDP-MED Configuration: ======================= Fast Start Repeast Count : 4 Location Coordinates : Latitude - 0.0000 North Longitude - 0.0000 East Altitude - 0.
PAGE 476
User’s Manual of IGS-10080MFT LLDPMED Civic Description: Set or show LLDP-MED Civic Address Location.
PAGE 477
User’s Manual of IGS-10080MFT LLDPMED ECS Description: Set or show LLDP-MED Emergency Call Service. Syntax: LLDPMED ecs [] Parameters: : lldpmed The value for the Emergency Call Service LLDPMED Policy Delete Description: Delete the selected policy.
PAGE 478
User’s Manual of IGS-10080MFT interactive voice services. These devices are typically deployed on a separate VLAN for ease of deployment and enhanced security by isolation from data applications : Voice Signaling (conditional) for use in network topologies that require a different policy for the voice_signaling voice signaling than for the voice media.
PAGE 479
User’s Manual of IGS-10080MFT LLDPMED Coordinates Description: Set or show LLDP-MED Location. Syntax: LLDPMED Coordinates [latitude|longitude|altitude] [north|south|west|east|meters|floor] [coordinate_value] Parameters: : Latitude, 0 to 90 degress with max. 4 digits (Positive numbers are north of the equator and negative latitude numbers are south of the equator). : Longitude,0 to 180 degress with max.
PAGE 480
User’s Manual of IGS-10080MFT Parameters: wgs84|nad83_navd88|nad83_mllw: : WGS84 wgs84 nad83_navd88 : NAD83_NAVD88 nad83_mllw : NAD83_MLLW lldpmed Coordinate datum LLDPMED Fast Description: Set or show LLDP-MED Fast Start Repeat Count. Syntax: LLDPMED Fast [] Parameters: : The number of times the fast start LLDPDU are being sent during the activation of the fast start mechanism defined by LLDP-MED (1-10). LLDPMED Info Description: Show LLDP-MED neighbor device information.
PAGE 481
User’s Manual of IGS-10080MFT 6.13 EEE Command EEE Configuration Description: Show eee configuration. Syntax: EEE Configuration [] Parameters: : Port list or 'all', default: All ports Example: Show EEE configuration of port1~4 IGS-10080MFT:/>eee configuration 1-4 EEE Configuration: ================== Port ---- Mode ------- Urgent queues ------------- 1 Disabled none 2 Disabled none 3 Disabled none 4 Disabled none EEE Mode Description: Set or show the eee mode.
PAGE 482
User’s Manual of IGS-10080MFT disable: Disable EEE (default: Show eee mode) Default Setting: Disabled Example: Enable EEE mode for port1~4 IGS-10080MFT:/>eee mode enable 1-4 EEE Urgent Queues Description: Set or show EEE Urgent queues.
PAGE 483
User’s Manual of IGS-10080MFT 6.14 Quality of Service Command QoS Configuration Description: Show QoS Configuration. Syntax: QoS Configuration [] Parameters: : Port list or 'all', default: All ports QoS Port Classification Class Description: Set or show the default QoS class.
PAGE 484
User’s Manual of IGS-10080MFT QoS Port Classification DPL Description: Set or show the default Drop Precedence Level. Syntax: QoS Port Classification DPL [] [] Parameters: : Port list or 'all', default: All ports : Drop Precedence Level (0-1) Default Setting: 0 Example: Set the default Drop Precedence Level in 1 for port1 IGS-10080MFT:/>qos Port Classification dpl 1 1 QoS Port Classification PCP Description: Set or show the default PCP for an untagged frame.
PAGE 485
User’s Manual of IGS-10080MFT QoS Port Classification DEI Description: Set or show the default DEI for an untagged frame. Syntax: QoS Port Classification DEI [] [] Parameters: : Port list or 'all', default: All ports : Drop Eligible Indicator (0-1) Default Setting: 0 Example: Set the default DEI for an untagged frame in 1 for port1.
PAGE 486
User’s Manual of IGS-10080MFT QoS Port Classification Map Description: Set or show the port classification map. This map is used when port classification tag is enabled,and the purpose is to translate the Priority Code Point (PCP) and Drop Eligible Indicator (DEI) from a tagged frame to QoS class and DP level.
PAGE 487
User’s Manual of IGS-10080MFT QoS Port Policer Mode Description: Set or show the port policer mode Syntax: QoS Port Policer Mode [] [enable|disable] Parameters: : Port list or 'all', default: All ports enable : Enable port policer disable : Disable port policer (default: Show port policer mode) Default Setting: disable Example: Enable QoS port policer IGS-10080MFT:/>qos Port Policer Mode 1-10 enable QoS Port Policer Rate Description: Set or show the port policer rate.
PAGE 488
User’s Manual of IGS-10080MFT QoS Port Policer Unit Description: Set or show the port policer unit. Syntax: QoS Port Policer Unit [] [kbps|fps] Parameters: : Port list or 'all', default: All ports kbps : Unit is kilo bits per second fps : Unit is frames per second (default: Show port policer unit) Default Setting: kbps Example: Set the port policer unit in fps IGS-10080MFT:/>qos Port Policer unit 1-10 fps QoS Port Scheduler Mode Description: Set or show the port scheduler mode.
PAGE 489
User’s Manual of IGS-10080MFT Example: Set the port schedule mode in weighted mode IGS-10080MFT:/>qos Port Scheduler Mode 1-10 weighted QoS Port Scheduler Weight Description: Set or show the port scheduler weight.
PAGE 490
User’s Manual of IGS-10080MFT QoS Port QueueShaper Rate Description: Set or show the port queue shaper rate.
PAGE 491
User’s Manual of IGS-10080MFT Example: Enable the port queue excess bandwidth mode. IGS-10080MFT:/>qos Port QueueShaper Excess 1-10 0-7 enable QoS Port Shaper Mode Description: Set or show the port shaper mode. Syntax: QoS Port Shaper Mode [] [enable|disable] Parameters: : Port list or 'all', default: All ports enable : Enable port shaper disable : Disable port shaper (default: Show port shaper mode) Default Setting: Enable Example: Enable port shaper mode.
PAGE 492
User’s Manual of IGS-10080MFT Default Setting: 500kbps Example: Set the port shaper rate in 1000. IGS-10080MFT:/>qos Port Shaper Rate 1-10 1000 QoS Port TagRemarking Mode Description: Set or show the port tag remarking mode.
PAGE 493
User’s Manual of IGS-10080MFT Parameters: : Port list or 'all', default: All ports : Priority Code Point (0-7) Default Setting: 0 Example: Set the default PCP in 1. IGS-10080MFT:/>qos Port TagRemarking PCP 1-10 1 QoS Port TagRemarking DEI Description: Set or show the default DEI. This value is used when port tag remarking mode is set to 'default'.
PAGE 494
User’s Manual of IGS-10080MFT Syntax: QoS Port TagRemarking Map [] [] [] [] [] Parameters: : Port list or 'all', default: All ports : QoS class list or 'all', default: All QoS classes (0-7) : DP level list or 'all', default: All DP levels (0-1) : Priority Code Point (0-7) : Drop Eligible Indicator (0-1) QoS Port DSCP Translation Description: Set or show DSCP ingress translation mode.
PAGE 495
User’s Manual of IGS-10080MFT QoS Port DSCP Classification Description: Set or show DSCP classification based on QoS class and DP level. This enables per port to map new DSCP value based on QoS class and DP level. Syntax: QoS Port DSCP Classification [] [none|zero|selected|all] Parameters: : Port list or 'all', default: All ports : No DSCP ingress classification none zero : Classify DSCP if DSCP = 0 selected : Classify DSCP for which class.
PAGE 496
User’s Manual of IGS-10080MFT Default Setting: disable Example: Enable DSCP egress rewrite IGS-10080MFT:/> QoS Port DSCP EgressRemark 1-10 enable QoS DSCP Map Description: Set or show DSCP mapping table. This table is used to map QoS class and DP level based on DSCP value. DSCP value used to map QoS class and DPL is either translated DSCP value or incoming frame DSCP value.
PAGE 497
User’s Manual of IGS-10080MFT QoS DSCP Trust Description: Set or show trusted DSCP value which is used for QoS classification. The DSCP value to be checked for trust is either translated value ifDSCP translation is enabled for the ingress port or incoming frame DSCPvalue if translation is disabled for the port. Trusted DSCP value is onlyused for QoS classification.
PAGE 498
User’s Manual of IGS-10080MFT QoS DSCP EgressRemap Description: Set or show DSCP egress remap table. This table is used if the port egress remarking mode is 'remap' and the purpose is to map the DSCP and DP level to a new DSCP value.
PAGE 499
User’s Manual of IGS-10080MFT QoS Storm Multicast Description: Set or show the multicast storm rate limiter. Syntax: QoS Storm Multicast [enable|disable] [] Parameters: enable : Enable multicast storm control disable : Disable multicast storm control : Rate in fps (1, 2, 4, ..., 512, 1k, 2k, 4k, ...
PAGE 500
User’s Manual of IGS-10080MFT Parameters: : QCE ID (1-256), default: Next available ID : Next QCE ID: "next_id (1-256) or 'last'" : Port List: "port or 'all'", default: All ports : Frame tag: untag|tag|any : VID: 1-4095 or 'any', either a specific VID or range of VIDs : Priority Code Point: specific(0, 1, 2, 3, 4, 5, 6, 7) or range(0-1, 2-3, 4-5, 6-7, 0-3, 4-7) or 'any' : Drop Eligible Indicator: 0-1 or 'any' : Sour
PAGE 501
User’s Manual of IGS-10080MFT Parameters: : QCE ID (1-256), default: Next available ID Default Setting: disable Example: Enable multicast storm control in 2fps IGS-10080MFT:/> QoS Storm multicast enable 2 QoS QCL Lookup Description: Lookup QoS Control List.
PAGE 502
User’s Manual of IGS-10080MFT Parameters: : Shows the combined status combined|static|voice_vlan|conflicts: combined static : Shows the static user configured status : Shows the status by Voice VLAN voice_vlan conflicts : Shows all conflict status (default : Shows the combined status) QoS QCL Refresh Description: Resolve QCE conflict status. Same H/W resource is shared by multiple applications and it may not be available even before MAX QCE entry.
PAGE 503
User’s Manual of IGS-10080MFT 6.15 Mirror Command Mirror Configuration Description: Show mirror configuration. Syntax: Mirror Configuration [] Parameters: : Port list or 'all', default: All ports Example: Show mirror configuration. IGS-10080MFT:/>mirror configuration Mirror Port Description: Set or show the mirror port.
PAGE 504
User’s Manual of IGS-10080MFT Mirror Mode Description: Set or show the mirror mode. Syntax: Mirror Mode [] [enable|disable|rx|tx] Parameters: : Port list or 'all', default: All ports enable : Enable Rx and Tx mirroring disable: Disable Mirroring rx : Enable Rx mirroring tx : Enable Tx mirroring (default: Show mirror mode) Default Setting: disable Example: Enable the mirror mode for port 1-4.
PAGE 505
User’s Manual of IGS-10080MFT 6.16 Configuration Command Configuration Save Description: Save configuration to TFTP server. Syntax: Config Save Parameters: : TFTP server IP address (a.b.c.d) : Configuration file name Configuration Load Description: Load configuration from TFTP server. Syntax: Config Load [check] Parameters: : TFTP server IP address (a.b.c.
PAGE 506
User’s Manual of IGS-10080MFT 6.17 Firmware Command Firmware Load Description: Load new firmware from TFTP server. Syntax: Firmware Load Parameters: : IP host address (a.b.c.d) or a host name string : Firmware file name Firmware IPv6 Load Description: Load new firmware from IPv6 TFTP server.
PAGE 507
User’s Manual of IGS-10080MFT Syntax: Firmware Swap 6.18 UPnP Command UPnP Configuration Description: Show UPnP configuration. Syntax: UPnP Configuration Example: Show UPnP configuration. IGS-10080MFT:/>upnp configuration UPnP Configuration: =================== UPnP Mode : Disabled UPnP TTL :4 UPnP Advertising Duration : 100 UPnP Mode Description: Set or show the UPnP mode.
PAGE 508
User’s Manual of IGS-10080MFT Example: Enable the UPnP mode. IGS-10080MFT:/>upnp mode enable UPnP TTL Description: Set or show the TTL value of the IP header in SSDP messages. Syntax: UPnP TTL [] Parameters: : ttl range (1..255), default: Show UPnP TTL Default Setting: 4 Example: Set the value 10 for TTL value of the IP header in SSDP messages. IGS-10080MFT:/>upnp ttl 10 UPnP Advertising Duration Description: Set or show UPnP Advertising Duration.
PAGE 509
User’s Manual of IGS-10080MFT Example: Set value 1000 for UPnP Advertising Duration. IGS-10080MFT:/>upnp advertising duration 1000 6.19 MVR Command MVR Configuration Description: Show the MVR configuration. Syntax: MVR Configuration Example: Show the MVR configuration.
PAGE 510
User’s Manual of IGS-10080MFT MVR Group Description: Show the MVR group. Syntax: MVR Group MVR Status Description: Show the MVR status. Syntax: MVR Status MVR Mode Description: Set or show the MVR mode. Syntax: MVR Mode [enable|disable] Parameters: enable : Enable MVR mode disable : Disable MVR mode (default: Show MVR mode) Default Setting: disable Example: Enable MVR mode.
PAGE 511
User’s Manual of IGS-10080MFT MVR Port Mode Description: Set or show the MVR port mode. Syntax: MVR Port Mode [] [enable|disable] Parameters: : Port list or 'all', default: All ports enable : Enable MVR mode disable : Disable MVR mode (default: Show MVR mode) Default Setting: disable Example: Enable the MVR port mode for port 1-4. IGS-10080MFT:/>mvr port mode 1-4 enable MVR Multicast VLAN Description: Set or show MVR multicast VLAN ID.
PAGE 512
User’s Manual of IGS-10080MFT MVR Port Type Description: Set or show MVR port type. Syntax: MVR Port Type [] [source|receiver] Parameters: : Port list or 'all', default: All ports source : Enable source mode receiver : Disable receiver mode (default: Show MVR port type) Default Setting: receive Example: Set source type for MVR port type of port 1. IGS-10080MFT:/>mvr port type 1 source MVR Immediate Leave Description: Set or show MVR port state about immediate leave.
PAGE 513
User’s Manual of IGS-10080MFT Example: Enable MVR port state about immediate leave for port 1. IGS-10080MFT:/>mvr immediate leave 1 enable 6.20 Voice VLAN Command Voice VLAN Configuration Description: Show Voice VLAN configuration. Syntax: Voice VLAN Configuration Example: Show Voice VLAN configuration.
PAGE 514
User’s Manual of IGS-10080MFT 00-01-E3 Siemens AG phones Voice VLAN Port Configuration: ============================== Port ---- Mode -------- Security Discovery Protocol -------- ------------------ 1 Disabled Disabled OUI 2 Disabled Disabled OUI 3 Disabled Disabled OUI 4 Disabled Disabled OUI 5 Disabled Disabled OUI 6 Disabled Disabled OUI 7 Disabled Disabled OUI 8 Disabled Disabled OUI 9 Disabled Disabled OUI 10 Disabled Disabled OUI Voice VLAN Mode Descript
PAGE 515
User’s Manual of IGS-10080MFT Example: Enable the Voice VLAN mode. IGS-10080MFT:/>voice vlan mode enable Voice VLAN ID Description: Set or show Voice VLAN ID. Syntax: Voice VLAN ID [] Parameters: : VLAN ID (1-4095) Default Setting: 1000 Example: Set ID 2 for Voice VLAN ID. IGS-10080MFT:/>voice vlan id 2 Voice VLAN Agetime Description: Set or show Voice VLAN age time.
PAGE 516
User’s Manual of IGS-10080MFT Example: Set Voice VLAN age time in 100sec. IGS-10080MFT:/>voice valn agetime 100 Voice VLAN Traffic Class Description: Set or show Voice VLAN ID. Syntax: Voice VLAN Traffic Class [] Parameters: : Traffic class (0-7) Default Setting: 7 Example: Set 4 traffic class for voice VLAN IGS-10080MFT:/>voice vlan traffic class4 Voice VLAN OUI Add Description: Add Voice VLAN OUI entry. Modify OUI table will restart auto detect OUI process.
PAGE 517
User’s Manual of IGS-10080MFT Example: Add Voice VLAN OUI entry. IGS-10080MFT:/>voice vlan oui add 00-11-22 test Voice VLAN OUI Delete Description: Delete Voice VLAN OUI entry. Modify OUI table will restart auto detect OUI process. Syntax: Voice VLAN OUI Delete Parameters: : OUI address (xx-xx-xx). The null OUI address isn't allowed Example: Delete Voice VLAN OUI entry. IGS-10080MFT:/>voice vlan oui delete 00-11-22 Voice VLAN OUI Clear Description: Clear Voice VLAN OUI entry.
PAGE 518
User’s Manual of IGS-10080MFT Voice VLAN OUI Lookup Description: Clear Voice VLAN OUI entry. Modify OUI table will restart auto detect OUI process. Syntax: Voice VLAN OUI Clear Example: Lookup Voice VLAN OUI entry. IGS-10080MFT:/>voice vlan oui lookup Voice VLAN Port Mode Description: Set or show the Voice VLAN port mode. When the port mode isn't disabled, we must disable MSTP feature before we enable Voice VLAN. It can avoid the conflict of ingress filter.
PAGE 519
User’s Manual of IGS-10080MFT Voice VLAN Security Description: Set or show the Voice VLAN port security mode. When the function is enabled, all non-telephone MAC address in Voice VLAN will be blocked 10 seconds. Syntax: Voice VLAN Security [] [enable|disable] Parameters: : Port list or 'all', default: All ports enable : Enable Voice VLAN security mode.
PAGE 520
User’s Manual of IGS-10080MFT Parameters: enable : Enable Loop Protection disable: Disable Loop Protection Default Setting: enable Loop Protect Transmit Description: Set or show the Loop Protection transmit interval. Syntax: Loop Protect Transmit [] Parameters: Transmit time interval (1-10 seconds) Default Setting: 5 Loop Protect Shutdown Description: Set or show the Loop Protection shutdown time.
PAGE 521
User’s Manual of IGS-10080MFT Loop Protect Port Configuration Description: Show Loop Protection port configuration. Syntax: Loop Protect Port Configuration [] Parameters: : Port list or 'all', default: All ports Loop Protect Port Mode Description: Set or show the Loop Protection port mode.
PAGE 522
User’s Manual of IGS-10080MFT 6.22 IPMC Command IPMC Configuration Description: Show IPMC snooping configuration. Syntax: IPMC Configuration [mld|igmp] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP IPMC Mode Description: Set or show the IPMC snooping mode.
PAGE 523
User’s Manual of IGS-10080MFT Syntax: IPMC Flooding [mld|igmp] [enable|disable] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP enable : Enable IPMC flooding disable: Disable IPMC flooding (default: Show global IPMC flooding mode) Default Setting: enable Example: Enable IGMP flooding IGS-10080MFT:/>ipmc flooding igmp enable IPMC Leave Proxy Description: Set or show the mode of IPMC Leave Proxy.
PAGE 524
User’s Manual of IGS-10080MFT IPMC Proxy Description: Set or show the mode of IPMC Proxy. Syntax: IPMC Proxy [mld|igmp] [enable|disable] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP enable : Enable IPMC Proxy disable: Disable IPMC Proxy (default: Show global IPMC Proxy mode) Default Setting: disable Example: Enable IGMP Proxy IGS-10080MFT:/>ipmc proxy igmp enable IPMC State Description: Set or show the IPMC snooping state for VLAN.
PAGE 525
User’s Manual of IGS-10080MFT Default Setting: disable Example: Enable IGMP snooping state for VLAN 1 IGS-10080MFT:/>ipmc state igmp 1 enable IPMC Querier Description: Set or show the IPMC snooping querier mode for VLAN.
PAGE 526
User’s Manual of IGS-10080MFT igmp: IPMC for IPv4 IGMP : Port list or 'all', default: All ports enable : Enable MLD fast leave disable: Disable MLD fast leave (default: Show IPMC fast leave mode) Default Setting: disable Example: Enable IGMP fast leave for all port IGS-10080MFT:/>ipmc fastleave igmp 1-10 enable IPMC Throttling Description: Set or show the IPMC port throttling status.
PAGE 527
User’s Manual of IGS-10080MFT IPMC Filtering Description: Set or show the IPMC port group filtering list.
PAGE 528
User’s Manual of IGS-10080MFT IPMC Status Description: Show IPMC operational status, accordingly. Syntax: IPMC Status [mld|igmp] [] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs Example: Show VLAN 1 IPMC operational status IGS-10080MFT:/>ipmc status igmp 1 IPMC Group Description: Show IPMC group addresses, accordingly.
PAGE 529
User’s Manual of IGS-10080MFT IPMC Version Description: Show IPMC Versions. Syntax: IPMC Version [mld|igmp] [] Parameters: mld|igmp: mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs Example: Show VLAN 1 IPMC Versions. IGS-10080MFT:/>ipmc version igmp 1 IPMC SSM Description: Show SSM related information for IPMC.
PAGE 530
User’s Manual of IGS-10080MFT IPMC Parameter RV Description: Set or show the IPMC Robustness Variable. Syntax: IPMC Parameter RV [mld|igmp] [] [ipmc_param_rv] Parameters: mld|igmp : mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs ipmc_param_rv: -1 1~255 : Default Value (2) : Robustness Variable (default: Show IPMC Interface Robustness Variable IPMC Parameter QI Description: Set or show the IPMC Query Interval.
PAGE 531
User’s Manual of IGS-10080MFT IPMC Parameter QRI Description: Set or show the IPMC Query Response Interval.
PAGE 532
User’s Manual of IGS-10080MFT IPMC Parameter URI Description: Set or show the IPMC Unsolicited Report Interval. Syntax: IPMC Parameter URI [mld|igmp] [] [ipmc_param_uri] Parameters: mld|igmp : mld : IPMC for IPv6 MLD igmp: IPMC for IPv4 IGMP : VLAN ID (1-4095) or 'any', default: Show all VLANs ipmc_param_uri: -1 : Default Value (1) 0~31744 : Unsolicited Report Interval in seconds (default: Show IPMC Interface Unsolicited Report Interval 6.
PAGE 533
User’s Manual of IGS-10080MFT Example: Add 00-11-22-33-44-55-66 in VLAN 20 for all port IGS-10080MFT:/>vcl macvlan add 00-11-22-33-44-55-66 20 1-10 VCL MAC-based VLAN Delete Description: Delete VCL MAC-based VLAN entry. Syntax: VCL Macvlan Del Parameters: : MAC address (xx-xx-xx-xx-xx-xx) Example: Delete 00-11-22-33-44-55-66 in MAC-based VLAN list IGS-10080MFT:/> vcl macvlan del 00-11-22-33-44-55-66 VCL Stasus Description: Show VCL MAC-based VLAN users configuration.
PAGE 534
User’s Manual of IGS-10080MFT Parameters: |arp|ip|ipx|at: Ether Type (0x0600 - 0xFFFF) : Protocol group ID VCL Protocol-based VLAN Add SNAP Description: Add VCL protocol-based VLAN SNAP protocol to group mapping. Syntax: VCL ProtoVlan Protocol Add Snap |rfc_1042|snap_8021h Parameters: |rfc_1042|snap_8021h: OUI value (Hexadecimal 00-00-00 to FF-FF-FF). : PID value (0x0-0xFFFF). If OUI is 00-00-00, valid range of PID is from 0x0600-0xFFFF.
PAGE 535
User’s Manual of IGS-10080MFT Parameters: |arp|ip|ipx|at: Ether Type (0x0600 - 0xFFFF) VCL Protocol-based VLAN Delete SNAP Description: Delete VCL protocol-based VLAN SNAP protocol to group mapping. Syntax: VCL ProtoVlan Protocol Delete Snap |rfc_1042|snap_8021h Parameters: |rfc_1042|snap_8021h: OUI value (Hexadecimal 00-00-00 to FF-FF-FF). : PID value (0x0-0xFFFF). If OUI is 00-00-00, valid range of PID is from 0x0600-0xFFFF.
PAGE 536
User’s Manual of IGS-10080MFT VCL Protocol-based VLAN Delete Description: Delete VCL protocol-based VLAN group to VLAN mapping. Syntax: VCL ProtoVlan Vlan Delete [] Parameters: : Port list or 'all', default: All ports : Protocol group ID VCL Protocol-based VLAN Configuration Description: Show VCL protocol-based VLAN entries. Syntax: VCL ProtoVlan Conf 6.24 SMTP Command SMTP Configuration Description: Show SMTP configure.
PAGE 537
User’s Manual of IGS-10080MFT Syntax: SMTP Mode [enable|disable] Parameters: enable : Enable SMTP mode disable : Disable SMTP mode (default: Show SMTP mode) Default Setting: disable SMTP Server Description: Set or show SMTP server configure. Syntax: SMTP Server [] [] Parameters: : SMTP server address : SMTP server port Default Setting: disable SMTP Auth Description: Enable or disable SMTP authentication configure.
PAGE 538
User’s Manual of IGS-10080MFT Default Setting: disable SMTP Auth_user Description: Set or show SMTP authentication user name configure. Syntax: SMTP Auth_user [] Parameters: : SMTP Authentication User Name Default Setting: disable SMTP Auth_pass Description: Set or to show SMTP authentication password configure.
PAGE 539
User’s Manual of IGS-10080MFT Parameters: : SMTP E-mail From address Default Setting: disable SMTP Mailsubject Description: Set or to show SMTP e-mail subject configure. Syntax: SMTP Mailsubject [] Parameters: : SMTP E-mail Subject Default Setting: disable SMTP Mailto1 Description: Set or show SMTP e-mail 1 to configure.
PAGE 540
User’s Manual of IGS-10080MFT Default Setting: disable SMTP Test Description: Test the status for linking to SMTP server Syntax: SMTP Test 540
PAGE 541
User’s Manual of IGS-10080MFT 6.25 PTP Command PTP Configuration Description: Set or show PTP configuration. Syntax: PTP Configuration [] Parameters: : Clock instance number [0…3] Default Setting: disable PTP PortState Description: Set or show PTP port state. Syntax: PTP PortState [] [enable|disable|internal] Parameters: : Clock instance number [0…3] : Port list or “all”, default: All ports Enable: Enable PTP port.
PAGE 542
User’s Manual of IGS-10080MFT PTP ClockCreate Description: Create or show a PTP clock instance data.. Syntax: PTP ClockCreate [] [] [] [] [] [] [] [] Parameters: : clock instance number [0..
PAGE 543
User’s Manual of IGS-10080MFT 0 - 7: The range of Priorities ptp can use in the tagged frames PTP ClockDelete Description: Delete a PTP clock instance. Syntax: PTP ClockDelete [] Parameters: : clock instance number [0..
PAGE 544
User’s Manual of IGS-10080MFT PTP CurrentDS Description: Show PTP clock Current Data set. Syntax: PTP CurrentDS Parameters: : clock instance number [0..3] PTP ParentDS Description: Show PTP clock Parent Data set. Syntax: PTP ParentDS Parameters: : clock instance number [0..3] PTP Timingproperties Description: Set or show PTP clock Timing properties Data set.
PAGE 545
User’s Manual of IGS-10080MFT : The leap61 parameter takes the following values: false: no leap61 in current day true: last minute of current day contains 61 sec. : The timetraceable parameter takes the following values: false: timing is not traceable true: timing is traceable. : The freqtraceable parameter takes the following values: False: frequency is not traceable true: frequency is traceable.
PAGE 546
User’s Manual of IGS-10080MFT : [-7..5] Log2 of min delay req interval in sec. : path delay asymmetry measured in ns : ingress latency measured in ns : egress latency measured in ns PTP LocalClock Description: Update or show PTP current time, or set master clock ratio. Syntax: PTP LocalClock [update|show|ratio] [] Parameters: : clock instance number [0..
PAGE 547
User’s Manual of IGS-10080MFT PTP Servo Description: Set or show PTP clock servo data. Syntax: PTP Servo [] [] [] [] [] [] [] Parameters: : clock instance number [0..
PAGE 548
User’s Manual of IGS-10080MFT PTP SlaveTableUnicast Description: Set or show the Unicast Slave configuration. Syntax: PTP UniConfig [] [] [] Parameters: : clock instance number [0..3] : [0..4] Index in the slave table. : [10..1000] Number of seconds for which the Announce/Sync messages are requested. : IPv4 address of requested master clock. PTP ForeignMasters Description: Show PTP port foreign masters data set.
PAGE 549
User’s Manual of IGS-10080MFT PTP MasterTableUnicast Description: Show the Unicast master table of the slaves that have requested unicast communication. Syntax: PTP MasterTableUnicast Parameters: : clock instance number [0..3] PTP ExtClockMode Description: Update or show the 1PPS and External clock output configuration and vcxo frequency rate adjustment option. Luton26 has only one physical port, i.e.
PAGE 550
User’s Manual of IGS-10080MFT PTP OnePpsAction Description: Show [and clear] One PPS statistics. Syntax: PTP OnePpsAction [] Parameters: : default Dump statistics [1] Clear statistics.
PAGE 551
User’s Manual of IGS-10080MFT 7. SWITCH OPERATION 7.1 Address Table The Industrial Managed Switch is implemented with an address table. This address table composed of many entries. Each entry is used to store the address information of some node in network, including MAC address, port no, etc. This in-formation comes from the learning process of Industrial Managed Switch. 7.2 Learning When one packet comes in from any port, the Industrial Managed Switch will record the source address, port no.
PAGE 552
User’s Manual of IGS-10080MFT 7.5 Auto-Negotiation The STP ports on the Industrial Managed Switch have built-in “Auto-negotiation”. This technology automatically sets the best possible bandwidth when a connection is established with another network device (usually at Power On or Reset). This is done by detect the modes and speeds at the second of both device is connected and capable of, both 10Base-T and 100Base-TX devices can connect with the port in either Half- or Full-Duplex mode.
PAGE 553
User’s Manual of IGS-10080MFT 8. TROUBLE SHOOTING This chapter contains information to help you solve problems. If the Industrial Managed Switch is not functioning properly, make sure the Ethernet Switch was set up according to instructions in this manual. The per port LED is not lit Solution: Check the cable connection of the Industrial Managed Switch. Performance is bad Solution: Check the speed duplex mode of the partner device.
PAGE 554
User’s Manual of IGS-10080MFT  While IP Address be changed or forgotten admin password – To reset the IP address to the default IP Address “192.168.0.100” or reset the password to default value. Press the hardware reset button at the front panel about 5 seconds. After the device is rebooted, you can login the management WEB interface within the same subnet of 192.168.0.xx.
PAGE 555
User’s Manual of IGS-10080MFT APPENDEX A A.1 Switch's Data RJ-45 Pin Assignments - 1000Mbps, 1000Base-T PIN NO MDI MDI-X 1 2 3 4 5 6 7 8 BI_DA+ BI_DABI_DB+ BI_DC+ BI_DCBI_DBBI_DD+ BI_DD- BI_DB+ BI_DBBI_DA+ BI_DD+ BI_DDBI_DABI_DC+ BI_DC- Implicit implementation of the crossover function within a twisted-pair cable, or at a wiring panel, while not expressly forbidden, is beyond the scope of this standard. A.
PAGE 556
User’s Manual of IGS-10080MFT The standard cable, RJ-45 pin assignment The standard RJ-45 receptacle/connector There are 8 wires on a standard UTP/STP cable and each wire is color-coded.
PAGE 557
User’s Manual of IGS-10080MFT APPENDEX B: GLOSSARY A ACE ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application. ACL ACL is an acronym for Access Control List.
PAGE 558
User’s Manual of IGS-10080MFT Rate Limiter ID to the ACE(s) or ingress port(s). AES AES is an acronym for Advanced Encryption Standard. The encryption key protocol is applied in 802.1i standard to improve WLAN security. It is an encryption standard by the U.S. government, which will replace DES and 3DES. AES has a fixed block size of 128 bits and a key size of 128, 192, or 256 bits. AMS AMS is an acronym for Auto Media Select.
PAGE 559
User’s Manual of IGS-10080MFT transmitting CCM frames to a peer MEP. CCM CCM is an acronym for Continuity Check Message. It is a OAM frame transmitted from a MEP to it's peer MEP and used to implement CC functionality. CDP CDP is an acronym for Cisco Discovery Protocol. D DEI DEI is an acronym for Drop Eligible Indicator. It is a 1-bit field in the VLAN tag. DES DES is an acronym for Data Encryption Standard.
PAGE 560
User’s Manual of IGS-10080MFT The DHCP option 82 enables a DHCP relay agent to insert specific information into a DHCP request packets when forwarding client DHCP packets to a DHCP server and remove the specific information from a DHCP reply packets when forwarding server DHCP packets to a DHCP client. The DHCP server can use this information to implement IP address or other assignment policies. Specifically the option works by setting two sub-options: Circuit ID (option 1) and Remote ID (option2).
PAGE 561
User’s Manual of IGS-10080MFT E EEE EEE is an abbreviation for Energy Efficient Ethernet defined in IEEE 802.3az. EPS EPS is an abbreviation for Ethernet Protection Switching defined in ITU/T G.8031. Ethernet Type Ethernet Type, or EtherType, is a field in the Ethernet MAC header, defined by the Ethernet networking standard. It is used to indicate which protocol is being transported in an Ethernet frame. F FTP FTP is an acronym for File Transfer Protocol.
PAGE 562
User’s Manual of IGS-10080MFT HTTPS HTTPS is an acronym for Hypertext Transfer Protocol over Secure Socket Layer. It is used to indicate a secure HTTP connection. HTTPS provide authentication and encrypted communication and is widely used on the World Wide Web for security-sensitive communication such as payment transactions and corporate logons. HTTPS is really just the use of Netscape's Secure Socket Layer (SSL) as a sublayer under its regular HTTP application layering.
PAGE 563
User’s Manual of IGS-10080MFT IMAP is the protocol that IMAP clients use to communicate with the servers, and SMTP is the protocol used to transport mail to an IMAP server. The current version of the Internet Message Access Protocol is IMAP4. It is similar to Post Office Protocol version 3 (POP3), but offers additional and more complex features. For example, the IMAP4 protocol leaves your email messages on the server rather than downloading them to your computer.
PAGE 564
User’s Manual of IGS-10080MFT The IEEE 802.2 Logical Link Control (LLC) protocol provides a link mechanism for upper layer protocols. It is the upper sub-layer of the Data Link Layer and provides multiplexing mechanisms that make it possible for several network protocols (IP, IPX) to coexist within a multipoint network. LLC header consists of 1 byte DSAP (Destination Service Access Point), 1 byte SSAP (Source Service Access Point), 1 or 2 bytes Control field followed by LLC information.
PAGE 565
User’s Manual of IGS-10080MFT MEP is an acronym for Maintenance Entity Endpoint and is an endpoint in a Maintenance Entity Group (ITU-T Y.1731). MD5 MD5 is an acronym for Message-Digest algorithm 5. MD5 is a message digest algorithm, used cryptographic hash function with a 128-bit hash value. It was designed by Ron Rivest in 1991. MD5 is officially defined in RFC 1321 - The MD5 Message-Digest Algorithm.
PAGE 566
User’s Manual of IGS-10080MFT The NetBIOS giving each computer in the network both a NetBIOS name and an IP address corresponding to a different host name, provides the session and transport services described in the Open Systems Interconnection (OSI) model. NFS NFS is an acronym for Network File System. It allows hosts to mount partitions on a remote system and use them as though they are local file systems.
PAGE 567
User’s Manual of IGS-10080MFT PD is an acronym for Powered Device. In a PoE system the power is delivered from a PSE (power sourcing equipment ) to a remote device. The remote device is called a PD. PHY PHY is an abbreviation for Physical Interface Transceiver and is the device that implements the Ethernet physical layer (IEEE-802.3). PING ping is a program that sends a series of packets over a network or the Internet to a specific computer in order to generate a response from that computer.
PAGE 568
User’s Manual of IGS-10080MFT PPPoE PPPoE is an acronym for Point-to-Point Protocol over Ethernet. It is a network protocol for encapsulating Point-to-Point Protocol (PPP) frames inside Ethernet frames. It is used mainly with ADSL services where individual users connect to the ADSL transceiver (modem) over Ethernet and in plain Metro Ethernet networks (Wikipedia). Private VLAN In a private VLAN, PVLANs provide layer 2 isolation between ports within the same broadcast domain.
PAGE 569
User’s Manual of IGS-10080MFT Achieving the required QoS becomes the secret to a successful end-to-end business solution. Therefore, QoS is the set of techniques to manage network resources. QoS class Every incoming frame is classified to a QoS class, which is used throughout the device for providing queuing, scheduling and congestion control guarantees to the frame according to what was configured for that specific QoS class. There is a one to one mapping between QoS class, queue and priority.
PAGE 570
User’s Manual of IGS-10080MFT Samba can also register itself with the master browser on the network so that it would appear in the listing of hosts in Microsoft Windows "Neighborhood Network". sFlow sFlow is an industry standard technology for monitoring switched networks through random sampling of packets on switch ports and time-based sampling of port counters.
PAGE 571
User’s Manual of IGS-10080MFT SSID Service Set Identifier is a name used to identify the particular 802.11 wireless LANs to which a user wants to attach. A client device will receive broadcast messages from all access points within range advertising their SSIDs, and can choose one to connect to base on pre-configuration, or by displaying a list of SSIDs in range and asking the user to select one (wikipedia). SSH SSH is an acronym for Secure SHell.
PAGE 572
User’s Manual of IGS-10080MFT The TCP protocol guarantees reliable and in-order delivery of data from sender to receiver and distinguishes data for multiple connections by concurrent applications (for example, Web server and e-mail server) running on the same host. The applications on networked hosts can use TCP to create connections to one another.
PAGE 573
User’s Manual of IGS-10080MFT UDP UDP is an acronym for User Datagram Protocol. It is a communications protocol that uses the Internet Protocol (IP) to exchange the messages between computers. UDP is an alternative to the Transmission Control Protocol (TCP) that uses the Internet Protocol (IP). Unlike TCP, UDP does not provide the service of dividing a message into packet datagrams, and UDP doesn't provide reassembling and sequencing of the packets.
PAGE 574
User’s Manual of IGS-10080MFT forwarded to the provider port with a single VLAN tag. Tagged frames received on a subscriber port are forwarded to the provider port with a double VLAN tag. VLAN ID VLAN ID is a 12-bit field specifying the VLAN to which the frame belongs. Voice VLAN Voice VLAN is VLAN configured specially for voice traffic.
PAGE 575
User’s Manual of IGS-10080MFT for use with an IEEE 802.1X authentication server, which distributes different keys to each user. Personal WPA utilizes less scalable 'pre-shared key' (PSK) mode, where every allowed computer is given the same passphrase. In PSK mode, security depends on the strength and secrecy of the passphrase. The design of WPA is based on a Draft 3 of the IEEE 802.11i standard (Wikipedia) WPS WPS is an acronym for Wi-Fi Protected Setup.
PAGE 576
EC Declaration of Conformity For the following equipment: *Type of Product : : *Model Number * Produced by: Manufacturer‘s Name Manufacturer‘s Address Industrial 8 100/1000X SFP + 2-Port 10/100/1000T Managed Switch IGS-10080MFT : Planet Technology Corp. : 10F., No.96, Minquan Rd., Xindian Dist., New Taipei City 231, Taiwan (R.O.C.