User's Manual
Table Of Contents
- 1. INTRODUCTION
- 2. INSTALLATION
- 3. SWITCH MANAGEMENT
- 4. WEB CONFIGURATION
- 4.1 Main Web page
- 4.2 System
- 4.2.1 System Information
- 4.2.2 IP Configuration
- 4.2.3 IP Status
- 4.2.4 Users Configuration
- 4.2.5 Privilege Levels
- 4.2.6 NTP Configuration
- 4.2.7 Time Configuration
- 4.2.8 UPnP
- 4.2.9 DHCP Relay
- 4.2.10 DHCP Relay Statistics
- 4.2.11 CPU Load
- 4.2.12 System Log
- 4.2.13 Detailed Log
- 4.2.14 Remote Syslog
- 4.2.15 SMTP Configuration
- 4.2.16 Fault Alarm
- 4.2.17 Web Firmware Upgrade
- 4.2.18 TFTP Firmware Upgrade
- 4.2.19 Save Startup Config
- 4.2.20 Configuration Download
- 4.2.21 Configuration Upload
- 4.2.22 Configuration Activate
- 4.2.23 Configuration Delete
- 4.2.24 Image Select
- 4.2.25 Factory Default
- 4.2.26 System Reboot
- 4.3 Simple Network Management Protocol
- 4.4 Port Management
- 4.5 Link Aggregation
- 4.6 VLAN
- 4.7 Spanning Tree Protocol
- 4.8 Multicast
- 4.8.1 IGMP Snooping
- 4.8.2 Profile Table
- 4.8.3 Address Entry
- 4.8.4 IGMP Snooping Configuration
- 4.8.5 IGMP Snooping VLAN Configuration
- 4.8.6 IGMP Snooping Port Group Filtering
- 4.8.7 IGMP Snooping Status
- 4.8.8 IGMP Group Information
- 4.8.9 IGMPv3 Information
- 4.8.10 MLD Snooping Configuration
- 4.8.11 MLD Snooping VLAN Configuration
- 4.8.12 MLD Snooping Port Group Filtering
- 4.8.13 MLD Snooping Status
- 4.8.14 MLD Group Information
- 4.8.15 MLDv2 Information
- 4.8.16 MVR (Multicast VLAN Registration)
- 4.8.17 MVR Status
- 4.8.18 MVR Groups Information
- 4.8.19 MVR SFM Information
- 4.9 Quality of Service
- 4.9.1 Understanding QoS
- 4.9.2 Port Policing
- 4.9.3 Port Classification
- 4.9.4 Port Scheduler
- 4.9.5 Port Shaping
- 4.9.6 Port Tag Remarking
- 4.9.7 Port DSCP
- 4.9.8 DSCP-based QoS
- 4.9.9 DSCP Translation
- 4.9.10 DSCP Classification
- 4.9.11 QoS Control List
- 4.9.12 QCL Status
- 4.9.13 Storm Control Configuration
- 4.9.14 QoS Statistics
- 4.9.15 Voice VLAN Configuration
- 4.9.16 Voice VLAN OUI Table
- 4.10 Access Control List
- 4.11 Authentication
- 4.11.1 Understanding IEEE 802.1X Port-based Authentication
- 4.11.2 Authentication Configuration
- 4.11.3 Network Access Server Configuration
- 4.11.4 Network Access Overview
- 4.11.5 Network Access Statistics
- 4.11.6 RADIUS
- 4.11.7 TACACS+
- 4.11.8 RADIUS Overview
- 4.11.9 RADIUS Details
- 4.11.10 Windows Platform RADIUS Server Configuration
- 4.11.11 802.1X Client Configuration
- 4.12 Security
- 4.12.1 Port Limit Control
- 4.12.2 Access Management
- 4.12.3 Access Management Statistics
- 4.12.4 HTTPs
- 4.12.5 SSH
- 4.12.6 Port Security Status
- 4.12.7 Port Security Detail
- 4.12.8 DHCP Snooping
- 4.12.9 Snooping Table
- 4.12.10 IP Source Guard Configuration
- 4.12.11 IP Source Guard Static Table
- 4.12.12 Dynamic IP Source Guard Table
- 4.12.13 ARP Inspection
- 4.12.14 ARP Inspection Static Table
- 4.12.15 Dynamic ARP Inspection Table
- 4.13 MAC Address Table
- 4.14 LLDP
- 4.15 Network Diagnostics
- 4.16 Power over Ethernet
- 4.17 Loop Protection
- 4.18 RMON
- 4.19 PTP
- 4.20 Ring
- 5. SWITCH OPERATION
- 6. TROUBLESHOOTING
- APPENDIX A: Networking Connection
- APPENDIX B : GLOSSARY
User’s Manual of IGS-604HPT-RJ
IPv6/IPv4 Dual S
tack
Supporting both IPv6 and IPv4 protocols, the IGS-604HPT-RJ helps data centers, campuses, telecoms, and more to experience
the IPv6 era with the lowest investment as its network facilities need not be replaced or overhauled if the IPv6 FTTx edge
network is set up.
Layer 3 IPv4 and IPv6 VLAN Routing for Secure and Flexible Management
The IGS-604HPT-RJ not only provides ultra high transmission performance, and excellent layer 2 and layer 4 technologies, but
also layer 3 IPv4/IPv6 VLAN routing feature which allows to crossover different VLANs and different IP addresses for the
purpose of having a highly-secure, flexibly-managed and simple networking application.
Robust Layer 2 Features
The IGS-604HPT-RJ can be programmed for advanced switch management functions such as dynamic port link aggregation,
Q-in-Q VLAN, private VLAN, Multiple Spanning Tree Protocol (MSTP), Layer 2 to Layer 4 QoS, bandwidth control and
IGMP/MLD Snooping. Via the link aggregation of supporting ports, the IGS-604HPT-RJ allows the operation of a high-speed
trunk to combine with multiple fiber ports and supports fail-over as well.
Powerful Security
The IGS-604HPT-RJ offers a comprehensive layer 2 to layer 4 Access Control List (ACL) for enforcing security to the edge. It
can be used to restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or
defined typical network applications. Its protection mechanism also comprises 802.1X Port-based and MAC-based user, and
device authentication. With the private VLAN function, communication between edge ports can be prevented to ensure user
privacy. The IGS-604HPT-RJ also provides DHCP Snooping, IP Source Guard and Dynamic ARP Inspection functions to
prevent IP snooping from attack and discard ARP packets with invalid MAC address. The network administrators can now
construct highly-secure corporate networks with considerably less time and effort than before.
Excellent Traffic Control
The IGS-604HPT-RJ is loaded with powerful traffic management and QoS features to enhance connection services by telecoms
and ISPs. The QoS features include wire-speed Layer 4 traffic classifiers and bandwidth limit that are particularly useful for
multi-tenant units, multi-business units, Telco and network service providers’ applications. It also empowers the industrial
environment to take full advantage of the limited network resources and guarantees the best performance in VoIP and video
conferencing transmission.
Efficient and Secure Management
With built-in Web-based management interface, the IGS-604HPT-RJ L2+ Managed Switch offers an easy-to-use,
platform-independent management and configuration facility which includes Web and SNMP management interfaces. The
SNMP can be managed via any management software based on the standard of SNMP Protocol. For reducing product learning
time, it offers Cisco-like command via Telnet and customer does not need to learn new console command. Moreover, it also
offers secure remote management by supporting SSH, SSL and SNMP v3 connections which encrypt the packet content at
each session.
15