User’s Manual of SGS-5240 Series L2+ Stackable Managed Gigabit Ethernet Switch with 10GbE Uplink SGS-5240 Switch Series 1
User’s Manual of SGS-5240 Series Managed Switch Trademarks Copyright © PLANET Technology Corp. 2020. Contents are subject to revision without prior notice. PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their respective owners.
User’s Manual of SGS-5240 Series Managed Switch TABLE OF CONTENTS 1. INTRODUCTION .................................................................................................................. 11 1.1 Packet Contents ......................................................................................................................................... 11 1.2 Product Description ..............................................................................................................................
User’s Manual of SGS-5240 Series Managed Switch 4.2.2.4 Cable Test ................................................................................................................................................. 49 4.2.2.5 Green Ethernet .......................................................................................................................................... 50 4.2.2.6 Port Isolate ..............................................................................................................
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.5 VLAN Information .................................................................................................................................. 109 4.2.11.6 Configure Interface ................................................................................................................................ 112 4.2.11.7 Forwarding Entry ...................................................................................................................
User’s Manual of SGS-5240 Series Managed Switch 4.2.15.11 Show Query Statistics.......................................................................................................................... 147 4.2.15.12 Show VLAN Statistics .......................................................................................................................... 149 4.2.15.13 Show Port Statistics......................................................................................................................
User’s Manual of SGS-5240 Series Managed Switch 4.3.4 Routing Table ................................................................................................................................................... 188 4.4 ACL ............................................................................................................................................................ 189 4.4.1 ACL Configuration ..................................................................................................
User’s Manual of SGS-5240 Series Managed Switch 4.7.4.1 Global Configuration ................................................................................................................................ 221 4.7.4.2 Interface Configuration ............................................................................................................................ 222 4.7.4.3 MAC Filter ..........................................................................................................................
User’s Manual of SGS-5240 Series Managed Switch 4.8.1.4 Group Configuration ................................................................................................................................ 246 4.8.1.5 Local User ............................................................................................................................................... 247 4.8.1.6 Remote User ....................................................................................................................
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.15 Show Remote MEP ............................................................................................................................... 274 4.8.7.16 Show Remote MEP Details ................................................................................................................... 275 4.8.7.17 Show Link Trace Cache.........................................................................................................................
User’s Manual of SGS-5240 Series Managed Switch 1. INTRODUCTION 1.1 Packet Contents Thank you for purchasing PLANET SGS-5240 L2+ Multi-Port Gigabit Stackable Managed Switch series. The descriptions of these models are as follows: SGS-5240-24T4X Layer 2+ 24-Port 10/100/1000T + 4-Port 10G SFP+ Stackable Managed Switch SGS-5240-24P4X Layer 2+ 24-Port 10/100/1000T 802.
User’s Manual of SGS-5240 Series Managed Switch 1.2 Product Description High-density, Resilient Deployment Switch Solution for Gigabit Networks of Enterprises and Campuses PLANET SGS-5240 series is a Layer 2+ Stackable Managed Gigabit Switch that provides high-density performance, Layer 3 static routing with 10Gbps uplink interfaces delivered in a rugged, strong case.
User’s Manual of SGS-5240 Series Managed Switch Central IP Stacking Management Positioned as the distribution or aggregation layer switch for large networks, the SGS-5240 series supports IP stacking function that helps network managers to easily configure up to 16 switches in the same series via one single IP address instead of connecting and setting each unit one by one.
User’s Manual of SGS-5240 Series Managed Switch High Performance 10Gbps Ethernet Capacity The four SFP+ slots built in the SGS-5240 series support dual speed and 10GBASE-SR/LR or 1000BASE-SX/LX. With its 4 ports, 10Gbps and 1Gbps Ethernet link capability, the administrator now can flexibly choose the suitable SFP/SFP+ transceiver according to the transmission distance or the transmission speed required to extend the network efficiently.
User’s Manual of SGS-5240 Series Managed Switch Moreover, the SGS-5240 series offers secure remote management by supporting SSHv2 and SSLv3 connection which encrypts the packet content at each session.
User’s Manual of SGS-5240 Series Managed Switch 16
User’s Manual of SGS-5240 Series Managed Switch 1.3 How to Use This Manual This User’s Manual is structured as follows: Section 2, INSTALLATION The section explains the functions of the Managed Switch and how to physically install the Managed Switch. Section 3, SWITCH MANAGEMENT The section contains the information about the software function of the Managed Switch. Section 4, WEB CONFIGURATION The section explains how to manage the Managed Switch by Web interface.
User’s Manual of SGS-5240 Series Managed Switch 1.
User’s Manual of SGS-5240 Series Managed Switch Quality of Service Input and output rate limit per port bandwidth control 8 priority queues on all switch ports IEEE 802.
User’s Manual of SGS-5240 Series Managed Switch Dual images DHCP Functions: - DHCP Relay - DHCP Option 82 - DHCP Server User Privilege levels control Network Time Protocol (NTP) and SNTP Network Diagnostic - SFP-DDM (Digital Diagnostic Monitor) - Cable diagnostic technology provides the mechanism to detect and report potential cabling issues - ICMPv6/ICMPv4 remote ping Syslog remote alarm System Log Power over Ethernet (SGS-5240-24P4X) Complies with IEEE 802.
User’s Manual of SGS-5240 Series Managed Switch 1.
User’s Manual of SGS-5240 Series Managed Switch Layer 3 Functions IP Interfaces Routing Table Routing Protocols Max.
User’s Manual of SGS-5240 Series Managed Switch Storm Control - Source IP/destination IP/Source + destination IP - Source MAC/destination MAC/Source + destination MAC Broadcast/Multicast/Unicast storm control Rate: 64Kbpss-10,000Mbps Input/Output/Both Bandwidth Control Per port bandwidth control Gigabit port: 64Kbpss-1,000Mbps 10Gigabit port: 64Kbpss-10,000Mbps 8 priority queues on all switch ports Scheduling for priority queues QoS Ring - Weighted Round Robin (WRR) - Strict priority - Hybri
User’s Manual of SGS-5240 Series Managed Switch Web authentication Local/RADIUS authentication Management Functions Console and Telnet System Configuration Web browser SNMP v1, v2c Secure Management Interfaces IPv4/IPv6 SSHv2, SSLv3, SNMPv3 Maximum 8 sessions for SSH and telnet connection IPv4 and IPv6 dual stack management SNMP MIB and TRAP SNMP RMON 1, 2, 3, 9 four groups Firmware upgrade by HTTP/TFTP/FTP protocol through Ethernet network System Management Configuration upload/download through HTTP/T
User’s Manual of SGS-5240 Series Managed Switch RFC 2466 ICMP6 MIB RFC 2573 SNMP v3 notify RFC 2574 SNMP v3 vacm RFC 2674 Bridge MIB Extensions (IEEE 802.1Q MIB) RFC 2674 Bridge MIB Extensions (IEEE 802.1P MIB) Standard Conformance Regulatory Compliance FCC Part 15 Class A, CE IEEE 802.3 10BASE-T IEEE 802.3u 100BASE-TX IEEE 802.3z Gigabit 1000BASE-SX/LX IEEE 802.3ab Gigabit 1000BASE-T IEEE 802.3ae 10Gb/s Ethernet IEEE 802.3x flow control and back pressure IEEE 802.3ad port trunk with LACP IEEE 802.
User’s Manual of SGS-5240 Series Managed Switch 2. INSTALLATION This section describes the hardware features and installation of the Managed Switch on the desktop or rack mount. For easier management and control of the Managed Switch, familiarize yourself with its display indicators, and ports. Front panel illustrations in this chapter display the unit LED indicators. Before connecting any network device to the Managed Switch, please read this chapter completely. 2.1 Hardware Description 2.1.
User’s Manual of SGS-5240 Series Managed Switch ■ Gigabit TP interface 10/100/1000BASE-T Copper, RJ45 twisted-pair: Up to 100 meters ■ 10 Gigabit SFP+ slot 1/10GBASE-SR/LR mini-GBIC slot, SFP+ (Small Factor Pluggable Plus) Transceiver module supports from 300 meters (multi-mode fiber) up to 10 kilometers (single mode fiber) ■ Console port The console port is a RJ45 port connector. It is an interface for connecting a terminal directly.
User’s Manual of SGS-5240 Series Managed Switch 2.1.2 LED Indications The front panel LEDs indicate instant status of power and system status, port links and data activity; they help monitor and troubleshoot when needed. LED Definition LED Color PWR Green Lights to indicate that the Switch has power. SYS Green Lights to indicate that the system is working. LNK/ACT Green Function Lights To indicate the link through that port is successfully established.
User’s Manual of SGS-5240 Series Managed Switch ■ AC Power Receptacle For compatibility with electrical voltages in most areas of the world, the Managed Switch’s power supply can automatically adjust line power in the range of 100-240V AC and 50/60 Hz. Plug the female end of the power cord firmly into the receptacle on the rear panel of the Managed Switch and the other end of the power cord into an electrical outlet and the power will be ready.
User’s Manual of SGS-5240 Series Managed Switch 2.2 Installing the Switch This section describes how to install your Managed Switch and make connections to the Managed Switch. Please read the following topics and perform the procedures in the order being presented. To install your Managed Switch on a desktop or shelf, simply complete the following steps. In the installation steps below, this manual uses the SGS-5240-48T4X as an example. However, the steps for PLANET SGS-5240 series are similar. 2.2.
User’s Manual of SGS-5240 Series Managed Switch 2.2.2 Rack Mounting To install the Managed Switch in a 19-inch standard rack, please follow the instructions described below. Step 1: Place the Managed Switch on a hard flat surface, with the front panel positioned towards the front side. Step 2: Attach the rack-mount bracket to each side of the Managed Switch with supplied screws attached to the package. Figure 2-2-2 shows how to attach brackets to one side of the Managed Switch.
User’s Manual of SGS-5240 Series Managed Switch 2.2.3 Installing the SFP/SFP+ Transceiver The sections describe how to insert an SFP/SFP+ transceiver into an SFP/SFP+ slot. The SFP/SFP+ transceivers are hot-pluggable and hot-swappable. You can plug in and out the transceiver to/from any SFP/SFP+ port without having to power down the Managed Switch, as the Figure 2-2-4 shows..
User’s Manual of SGS-5240 Series Managed Switch Gigabit Ethernet Transceiver (1000BASE-BX, Single Fiber Bi-directional SFP) Model MGB-LA10(V2) MGB-LB10(V2) MGB-LA20(V2) MGB-LB20(V2) MGB-LA40(V2) MGB-LB40(V2) MGB-LA80 MGB-LB80 MGB-TLA10(V2) MGB-TLB10(V2) MGB-TLA20 MGB-TLB20 MGB-TLA40 MGB-TLB40 MGB-TLA80 MGB-TLB80 DDM YES YES YES YES YES YES YES YES Speed Connector Wavelength Wavelength Operating (Mbps) Interface (TX) (RX) Temp.
User’s Manual of SGS-5240 Series Managed Switch 1. Before we connect the PLANET SGS-5240 series to the other network device, we have to make sure both sides of the SFP transceivers are with the same media type, for example: 1000BASE-SX to 1000BASE-SX, 1000BASE-LX to 1000BASE-LX. 2. Check whether the fiber-optic cable type matches with the SFP transceiver requirement. To connect to 1000BASE-SX SFP transceiver, please use the multi-mode fiber cable with one side being the male duplex LC connector type.
User’s Manual of SGS-5240 Series Managed Switch 3. SWITCH MANAGEMENT This chapter explains the methods that you can use to configure management access to the Managed Switch. It describes the types of management applications and the communication and management protocols that deliver data between your management device (workstation or personal computer) and the system. It also contains information about port connection options.
User’s Manual of SGS-5240 Series Managed Switch 3.2 Management Access Overview The Managed Switch gives you the flexibility to access and manage it using any or all of the following methods: An administration console Web browser interface An external SNMP-based network management application The administration console and Web browser interface support are embedded in the Managed Switch software and are available for immediate use. Each of these management methods has their own advantages.
User’s Manual of SGS-5240 Series Managed Switch 3.3 Administration Console The administration console is an internal, character-oriented, and command line user interface for performing system administration such as displaying statistics or changing option settings. Using this method, you can view the administration console from a terminal, personal computer, Apple Macintosh, or workstation connected to the Managed Switch's console (serial) port.
User’s Manual of SGS-5240 Series Managed Switch 3.4 Web Management The Managed Switch offers management features that allow users to manage the Managed Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer. After you set up your IP address for the switch, you can access the Managed Switch's Web interface applications directly in your Web browser by entering the IP address of the Managed Switch.
User’s Manual of SGS-5240 Series Managed Switch 3.5 SNMP-based Network Management You can use an external SNMP-based application to configure and manage the Managed Switch, such as SNMP Network Manager, HP Openview Network Node Management (NNM) or What’s Up Gold. This management method requires the SNMP agent on the switch and the SNMP Network Management Station to use the same community string.
User’s Manual of SGS-5240 Series Managed Switch 3. Press the “Refresh” button for the currently connected devices in the discovery list as the screen shows below: Figure 3-1-7: Planet Smart Discovery Utility Screen 1. This utility shows all necessary information from the devices, such as MAC address, device name, firmware version, and device IP subnet address. It can also assign new password, IP subnet address and description to the devices. 2.
User’s Manual of SGS-5240 Series Managed Switch 4. WEB CONFIGURATION This section introduces the configuration and functions of the Web-based management from Managed Switch. About Web-based Management The Managed Switch provides a built-in browser interface. You can manage it remotely by having a remote host with Web browser, such as Microsoft Internet Explorer, Mozilla Firefox, Google Chrome or Apple Safari.
User’s Manual of SGS-5240 Series Managed Switch Logging in to the Managed Switch from Management Port 1. Use Internet Explorer 8.0 or above Web browser and enter IP address http://192.168.1.1 to access the Web interface. 2. When the following login screen appears, please enter the default username "admin" with password “admin” (or the username/password you have changed via console) to log in the main screen of Managed Switch. The login screen in Figure 4-1-2 appears.
User’s Manual of SGS-5240 Series Managed Switch 1. It is recommended to use Google Chrome to access Managed Switch. 2. The changed IP address takes effect immediately after clicking on the Save button. You need to use the new IP address to access the Web interface. 3. For security reason, please change and memorize the new password after this first setup. 4. Only accept command in lowercase letter under web interface. 4.1 System Information 4.1.
User’s Manual of SGS-5240 Series Managed Switch 4.1.3 User Accounts System Information> User Accounts page to control management access to the switch based on manually configured user names and passwords. User Name – The name of the user. (Maximum length: 32 characters; maximum number of users: 16) Access Level – Specifies the user level.
User’s Manual of SGS-5240 Series Managed Switch 4.2 Switch Management 4.2.1 Jumbo Frame Use the Switch Management > Jumbo Frame page to configure support for layer 2 jumbo frames. The switch provides more efficient throughput for large sequential data transfers by supporting jumbo frames up to 10240 bytes for Gigabit Ethernet. Compared to standard Ethernet frames that run only up to1.5 KB, using jumbo frames significantly reduces the per-packet overhead required to process protocol encapsulation fields.
User’s Manual of SGS-5240 Series Managed Switch Configure Switch Management >Interface > Port > Configure page is used to enable/disable an interface, set auto-negotiation and the interface capabilities to advertise, or manually fix the speed, duplex mode, and flow control. For more information on command usage and a description of the parameters. 4.2.2.2 sFlow Switch Management >Interface > sflow page is used to configure sflow.
User’s Manual of SGS-5240 Series Managed Switch Press ‘New’ button to set the parameters: Receiver Owner Name – The name of the receiver. (Range: 1-256 characters; Default: None) Type – Specifies the polling type as an sFlow polling data source for a specified interface that polls periodically based on a specified time interval, or an sFlow data source instance for a specific interface that takes samples periodically based on the number of packets processed.
User’s Manual of SGS-5240 Series Managed Switch 4.2.2.3 Transceiver Switch Management>Interface>Transceiver page is used to configure thresholds for alarm and warning messages for optical transceivers which support Digital Diagnostic Monitoring (DDM). This page also displays identifying information for supported transceiver types, and operational parameters for transceivers which support DDM. Port – Port number. General – Information on connector type and vendor-related parameters.
User’s Manual of SGS-5240 Series Managed Switch A high-threshold alarm or warning message is sent if the current value is greater than or equal to the threshold, and the last sample value was less than the threshold. After a rising event has been generated, another such event will not be generated until the sampled value has fallen below the high threshold and reaches the low threshold.
User’s Manual of SGS-5240 Series Managed Switch 4.2.2.5 Green Ethernet Switch Management>Interface>Green Ethernet page is used to enable power savings mode on the selected port. These parameters are displayed: Port – Power saving mode only applies to the Gigabit Ethernet ports using copper media. Power Saving Status – Adjusts the power provided to ports based on the length of the cable used to connect to other devices. Only sufficient power is used to maintain connection requirements.
User’s Manual of SGS-5240 Series Managed Switch 4.2.3 Statistics 4.2.3.1 Current Statistics Switch management >Statistics> Current Statistic page is used to display standard statistics on network traffic from the Interfaces Group and Ethernet-like MIBs, as well as a detailed breakdown of traffic based on thermion MIB. Interfaces and Ethernet-like statistics display errors on the traffic passing through each port.
User’s Manual of SGS-5240 Series Managed Switch 4.2.3.3 History Info 4.2.4 VLAN 4.2.4.1 VLAN Overview A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. VLAN can be used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN. VLAN also logically segment the network into different broadcast domains so that packets are forwarded only between ports within the VLAN.
User’s Manual of SGS-5240 Series Managed Switch ■ IEEE 802.1Q VLAN In large networks, routers are used to isolate broadcast traffic for each subnet into separate domains. This Managed Switch provides a similar service at Layer 2 by using VLANs to organize any group of network nodes into separate broadcast domains. VLANs confine broadcast traffic to the originating group, and can eliminate broadcast storms in large networks. This also provides a more secure and cleaner network environment. An IEEE 802.
User’s Manual of SGS-5240 Series Managed Switch 802.1Q Tag User Priority 3 bits TPID (Tag Protocol Identifier) Destination Source Address Address 6 bytes VLAN ID (VID) 1 bit 12 bits TCI (Tag Control Information) 2 bytes Preamble CFI 2 bytes VLAN TAG Ethernet Data FCS Type 6 bytes 4 bytes 2 bytes 46-1500 bytes 4 bytes The Ether Type and VLAN ID are inserted after the MAC source address, but before the original Ether Type/Length or Logical Link Control.
User’s Manual of SGS-5240 Series Managed Switch ■ Assigning Ports to VLANs Before enabling VLANs for the switch, you must first assign each port to the VLAN group(s) in which it will participate. By default all ports are assigned to VLAN 1 as untagged ports. Add a port as a tagged port if you want it to carry traffic for one or more VLANs, and any intermediate network devices or the host at the other end of the connection supports VLANs.
User’s Manual of SGS-5240 Series Managed Switch Frame Income Income Frame is tagged Income Frame is untagged Leave port is tagged Frame remains tagged Tag is inserted Leave port is untagged Tag is removed Frame remains untagged Frame Leave Table 4-3-3-1: Ingress / Egress Port with VLAN VID Tag / Untag Table ■ IEEE 802.1Q Tunneling (Q-in-Q) IEEE 802.1Q Tunneling (Q-in-Q) is designed for service providers carrying traffic for multiple customers across their networks.
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.2 Static VLAN VLAN Management Switch Management >VLAN > Static Vlan > Vlan Management page is used to add, modify or delete static VLAN groups, set administrative status, or specify Remote VLAN type. To propagate information about VLAN groups used on this switch to external network devices, you must specify a VLAN ID for each of these groups. VLAN ID – ID of VLAN or range of VLANs (1-4093). Up to 4093 VLAN groups can be defined.
User’s Manual of SGS-5240 Series Managed Switch Member List Switch Management >VLAN > Static Vlan > Member List by vlan page is used to add/delete multiple port members to/from a special vlan.
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.3 GVRP Switch Management > VLAN > GVRP page is used to enable GVRP globally on the switch, or to enable GVRP and adjust the protocol timers per interface. ◆GVRP Status – GVRP defines a way for switches to exchange VLAN information in order to register VLAN members on ports across the network. VLANs are dynamically configured based on join messages issued by host devices and propagated throughout the network.
User’s Manual of SGS-5240 Series Managed Switch Protocol Mapping Table Switch Management > VLAN > Protocol Vlan page is used to create and delete a protocol vlan entry. Press New button to create a protocol vlan entry: Group ID – Protocol Group ID assigned to the Protocol VLAN Group. (Range: 1-2147483647) Frame Type – Choose either Ethernet, RFC 1042, or LLC Other as the frame type used by this protocol. Protocol Type – Specifies the protocol type to match.
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.5 IP Subnet VLAN Switch Management > VLAN >IP Subnet Vlan page is used to configure IP subnet-based VLANs. Press New button to create a IP subnet vlan entry. ◆IP Address – The IP address for a subnet. Valid IP addresses consist of four decimal numbers, 0 to 255, separated by periods. ◆Subnet Mask – This mask identifies the host address bits of the IP subnet. ◆VLAN – VLAN to which matching IP subnet traffic is forwarded.
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.6 MAC-Based VLAN Switch Management > VLAN > Mac-Based Vlan page is used to configure VLAN based on MAC addresses. To create a Mac based vlan, press New button: MAC Address – A source MAC address which is to be mapped to a specific VLAN. The MAC address must be specified in the format xx-xxxx-xx-xx-xx. VLAN – VLAN to which ingress traffic matching the specified source MAC address is forwarded.
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.7 VLAN Translation Switch Management > VLAN > Vlan Translation page is used to map VLAN IDs between the customer and service provider for networks that do not support IEEE802.1Q tunneling. Press New button to create a vlan translation. These parameters are displayed: ◆Incoming VLAN – The original VLAN ID. (Range: 1-4093) ◆Outgoing VLAN – The new VLAN ID. (Range: 1-4093) To delete an entry, select the entry and press delete button.
User’s Manual of SGS-5240 Series Managed Switch 4.2.4.8 QinQ Switch Management > VLAN > QinQ > QinQ Global Setting page is used to configure the switch to operate in IEEE 802.1Q (QinQ) tunneling mode, which is used for passing Layer 2 traffic across a service provider’s metropolitan area network. You can also globally set the Tag Protocol Identifier (TPID) value of the tunnel port if the attached client is using a nonstandard 2-byte ether type to identify 802.1Q tagged frames.
User’s Manual of SGS-5240 Series Managed Switch Press New button to create new QinQ entry. To delete an entry, select the entry and press delete button. QinQ Interface Switch Management > VLAN > QinQ >QinQ Interface page is used to set the tunnel mode for any participating interface.
User’s Manual of SGS-5240 Series Managed Switch ◆Interface – Displays a list of ports or groups. ◆Port – Port Identifier. (Range: 1-28) ◆Group – Group Identifier. (Range: 1-12) ◆Mode – Sets the VLAN membership mode of the port. None – The port operates in its normal VLAN mode. (This is the default.) Access – Configures QinQ tunneling for a client access port to segregate and preserve customer VLAN IDs for traffic crossing the service provider network.
User’s Manual of SGS-5240 Series Managed Switch To create a OUI, press New button. Telephony OUI – Specifies a MAC address range to add to the list. Enter the MAC address in format 01-23-45-67-89-AB. Mask – Identifies a range of MAC addresses. Setting a mask of FF-FF-FF-00-00-00 identifies all devices with the same OUI (the first three octets). Other masks restrict the MAC address range. Setting a mask of FF-FF-FF-FF-FF-FF specifies a single MAC address.
User’s Manual of SGS-5240 Series Managed Switch All ports are set to VLAN hybrid mode by default. Prior to enabling VoIP for a port (by setting the VoIP mode to Auto or Manual as described below), first ensure that VLAN membership is not set to access mode. ◆Mode – Specifies if the port will be added to the Voice VLAN when VoIP traffic is detected. (Default: None) None – The Voice VLAN feature is disabled on the port. The port will not detect VoIP traffic or be added to the Voice VLAN.
User’s Manual of SGS-5240 Series Managed Switch The Remaining Age starts to count down when the OUI’s MAC address expires from the MAC address table. Therefore, the MAC address aging time should be added to the overall aging time. For example, if you configure the MAC address table aging time to 30 seconds, and the voice VLAN aging time to 5 minutes, then after 5.5 minutes, a port will be removed from voice VLAN when voice vlan traffic is no longer received on the port.
User’s Manual of SGS-5240 Series Managed Switch 4.2.5 MAC Address 4.2.5.1 Dynamic MAC Learning Dynamic MAC Switch Management >MAC Address > Dynamic MAC Learning> Dynamic Mac page is used to display the MAC addresses learned by monitoring the source address for traffic entering the switch. When the destination address for inbound traffic is found in the database, the packets intended for that address are forwarded directly to the associated port. Otherwise, the traffic is flooded to all ports.
User’s Manual of SGS-5240 Series Managed Switch Learning Status Switch Management >MAC Address > Dynamic MAC Learning> Learning status page is used to set learning status on port.
User’s Manual of SGS-5240 Series Managed Switch 4.2.5.2 Static Mac Setting Switch Management > MAC Address > Static Mac Setting page is used to configure static MAC addresses. Astatic address can be assigned to a specific interface on this switch. Static addresses are bound to the assigned interface and will not be moved. When a static address is seen on another interface, the address will be ignored and will not be written to the address table. To configure a static MAC address: 1.
User’s Manual of SGS-5240 Series Managed Switch 4.2.5.3 MAC Notification Switch Management > MAC Address > MAC Notification page is used to send SNMP traps (i.e., SNMP notifications) when a dynamic MAC address is added or removed. ■ Configure Global ◆ Trap Status – Issues a trap when a dynamic MAC address is added or removed. (Default: Disabled) ◆Trap Interval – Specifies the interval between issuing two consecutive traps.
User’s Manual of SGS-5240 Series Managed Switch 4.2.6 Port Mirror 4.2.6.1 Local Port Mirror Switch Management > Port Mirror > Local Port Mirror page is used to mirror traffic from any source port to a target port for real-time analysis. You can then attach a logic analyzer or RMON probe to the target port and study the traffic crossing the source port in a completely unobtrusive manner. Source Port – The port whose traffic will be monitored.
User’s Manual of SGS-5240 Series Managed Switch ◆RSPAN Limitations The following limitations apply to the use of RSPAN on this switch: RSPAN Ports – Only ports can be configured as an RSPAN source, destination, or uplink; static and dynamic trunks are not allowed. A port can only be configured as one type of RSPAN interface –source, destination, or uplink. Also, note that the source port and destination port cannot be configured on the same switch.
User’s Manual of SGS-5240 Series Managed Switch 4.2.7 Static Link Aggregation 4.2.7.1 Static Group Switch Management >Static Link Aggregation > Static Group page is used to create and delete static trunk group. To create a static trunk group, press New button. You can create a new group. ◆Group ID – Trunk identifier. (Range: 1-12) 4.2.7.2 Static Group Member Switch Management >Static Link Aggregation > Static Group member page is used to add and delete static group member.
User’s Manual of SGS-5240 Series Managed Switch 4.2.7.3 Static Trunk Management Switch Management >Static Link Aggregation > Static Group Parameters page is used to configure the parameters of trunk group. To configure the parameters, button configure button.
User’s Manual of SGS-5240 Series Managed Switch 4.2.8 LACP 4.2.8.1 Group Member Switch Management > LACP > Group Member page is used to configure parameters of Group.
User’s Manual of SGS-5240 Series Managed Switch 4.2.8.2 Group Link Configuration Switch Management > LACP > Group Link Configuration page is used to display and configure parameters of LCAP trunk group. 4.2.8.3 Group LACP Configuration Switch Management > LACP > Group LACP Configuration page is used to display and configure System Priority and Timeout Mode of LCAP trunk group.
User’s Manual of SGS-5240 Series Managed Switch 4.2.8.4 Counter Switch Management > LACP > Counter page is used to display counters, information of local and remote port in LCAP group. Counters: 4.2.8.5 Show Dynamic Group Member Switch Management > LACP > Show Dynamic Group Member page is used to display the current members of a LACP group.
User’s Manual of SGS-5240 Series Managed Switch 4.2.9 Trunk Group Load Balance Switch Management >Trunk Group Load Balance page is used to configure the load balance mode of trunk group. This page applies to all static and dynamic trunks on the switch.
User’s Manual of SGS-5240 Series Managed Switch 4.2.10 Spanning Tree Protocol 4.3.10.1 Theory The Spanning Tree protocol can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices in your network to ensure that only one route exists between any two stations on the network, and provide backup links which automatically take over when a primary link goes down.
User’s Manual of SGS-5240 Series Managed Switch One switch is elected as the root switch The shortest distance to the root switch is calculated for each switch A designated switch is selected. This is the switch closest to the root switch through which packets will be forwarded to the root. A port for each switch is selected. This is the port providing the best path from the switch to the root switch. Ports included in the STP are selected.
User’s Manual of SGS-5240 Series Managed Switch Figure 4-2-10-1: STP Port State Transitions You can modify each port state by using management software. When you enable STP, every port on every switch in the network goes through the blocking state and then transitions through the states of listening and learning at power up. If properly configured, each port stabilizes to the forwarding or blocking state.
User’s Manual of SGS-5240 Series Managed Switch The following are the user-configurable STP parameters for the switch level: Parameter Description Default Value Bridge Identifier(Not user A combination of the User-set priority and 32768 + MAC configurable the switch’s MAC address.
User’s Manual of SGS-5240 Series Managed Switch the Root Bridge, the set Hello Time will be used if and when your Switch becomes the Root Bridge. The Hello Time cannot be longer than the Max. Age; otherwise, a configuration error will occur. Max. Age – The Max Age can be from 6 to 40 seconds. At the end of the Max Age, if a BPDU has still not been received from the Root Bridge, your Switch will start sending its own BPDU to all other Switches for permission to become the Root Bridge.
User’s Manual of SGS-5240 Series Managed Switch Figure 4-2-10-2: Before Applying the STA Rules In this example, only the default STP values are used.
User’s Manual of SGS-5240 Series Managed Switch The switch with the lowest Bridge ID (switch C) was elected the root bridge, and the ports were selected to give a high port cost between switches B and C. The two (optional) Gigabit ports (default port cost = 20,000) on switch A are connected to one (optional) Gigabit port on both switch B and C. The redundant link between switch B and C is deliberately chosen as a 100 Mbps Fast Ethernet link (default port cost = 200,000).
User’s Manual of SGS-5240 Series Managed Switch 4.2.10.3 STP-RSTP Switch Management > STP > STP-RSTP > Global Management page is used to configure global settings for the spanning tree that apply to the entire switch. Global Management ◆Priority – Bridge priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device.
User’s Manual of SGS-5240 Series Managed Switch ◆BPDU Flooding – Configures the system to flood BPDUs to all other ports on the switch or just to all other ports in the same VLAN when spanning tree is disabled globally on the switch or disabled on a specific port. To VLAN: Floods BPDUs to all other ports within the receiving port’s native VLAN (i.e., as determined by port’s PVID). This is the default. To All: Floods BPDUs to all other ports on the switch.
User’s Manual of SGS-5240 Series Managed Switch Configuration Settings for MSTP Max Instance Numbers – The maximum number of MSTP instances to which this switch can be assigned. Configuration Digest – An MD5 signature key that contains the VLAN ID to MST ID mapping table. In other words, this key is a mapping of all VLANs to the CIST. Region Revision4 – The revision for this MSTI. (Range: 0-65535; Default: 0) Region Name4 – The name for this MSTI.
User’s Manual of SGS-5240 Series Managed Switch Interface – Displays a list of ports or groups. Spanning Tree – Enables/disables STA on this interface. (Default: Enabled) BPDU Flooding - Enables/disables the flooding of BPDUs to other ports when global spanning tree is disabled or when spanning tree is disabled on a specific port.
User’s Manual of SGS-5240 Series Managed Switch Table 12: Recommended STA Path Cost Range Table 13: Default STA Path Costs ◆Admin Link Type – The link type attached to this interface. Point-to-Point – A connection to exactly one other bridge. Shared – A connection to two or more bridges. Auto – The switch automatically determines if the interface is attached to a point-to-point link or to shared media. (This is the default setting.
User’s Manual of SGS-5240 Series Managed Switch An interface cannot function as an edge port under the following conditions: If spanning tree mode is set to STP , edge-port mode cannot automatically transition to operational edge-port state using the automatic setting. If loopback detection is enabled and a loopback BPDU is detected, the interface cannot function as an edge port until the loopback state is released.
User’s Manual of SGS-5240 Series Managed Switch Designated Port – The port priority and number of the port on the designated bridging device through which this switch must communicate with the root of the Spanning Tree. Oper Path Cost – The contribution of this port to the path cost of paths towards the spanning tree root which include this port. Oper Link Type – The operational point-to-point status of the LAN segment attached to this interface.
User’s Manual of SGS-5240 Series Managed Switch Global Management 96
User’s Manual of SGS-5240 Series Managed Switch 97
User’s Manual of SGS-5240 Series Managed Switch MST Interface Switch Management > STP > MSTP> MST Interface page is used to configure the STA interface settings for an MST instance. ◆MST ID – Instance identifier to configure. (Default: 0) ◆Interface – Displays a list of ports or groups. ◆STA Status – Displays the current state of this interface within the Spanning Tree. Discarding – Port receives STA configuration messages, but does not forward packets.
User’s Manual of SGS-5240 Series Managed Switch Forwarding – Port forwards packets, and continues learning addresses. Priority – Defines the priority used for this port in the Spanning Tree Protocol. If the path cost for all ports on a switch are the same, the port with the highest priority (i.e., lowest value) will be configured as an active link in the Spanning Tree. This makes a port with higher priority less likely to be blocked if the Spanning Tree Protocol is detecting network loops.
User’s Manual of SGS-5240 Series Managed Switch 4.2.10.5 Loopback Detection Switch Management > STP > Loopback Detection page is used to configure loopback detection on an interface. When loopback detection is enabled and a port or group receives its own BPDU, the detection agent drops the loopback BPDU, sends an SNMP trap, and places the interface in discarding mode. This loopback state can be released manually or automatically.
User’s Manual of SGS-5240 Series Managed Switch ◆Release Mode – Configures the interface for automatic or manual loopback release. (Default: Auto) ◆Release – Allows an interface to be manually released from discard mode. This is only available if the interface is configured for manual release mode. ◆Action – Sets the response for loopback detection to block user traffic or shut down the interface. (Default: Block) ◆Shutdown Interval – The duration to shut down the interface.
User’s Manual of SGS-5240 Series Managed Switch Figure 4-3-5-2: Multicast Flooding Figure 4-3-5-3: IGMP Snooping Multicast Stream Control 102
User’s Manual of SGS-5240 Series Managed Switch IGMP Versions 1 and 2 Multicast groups allow members to join or leave at any time. IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group. IGMP version 1 is defined in RFC 1112. It has a fixed packet size and no optional data.
User’s Manual of SGS-5240 Series Managed Switch Figure 4-3-5-4: IGMP State Transitions IGMP Querier – A router, or multicast-enabled switch, can periodically ask their hosts if they want to receive multicast traffic. If there is more than one router/switch on the LAN performing IP multicasting, one of these devices is elected “queried” and assumes the role of querying the LAN for group members.
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.1 Global Setting Switch Management> IGMP Snooping>Global Setting page is used to configure the switch to forward multicast traffic. IGMP Snooping Status – When enabled, the switch will monitor network traffic to determine which hosts want to receive multicast traffic. This is referred to as IGMP Snooping. (Default: Disabled) When IGMP snooping is enabled globally, the per VLAN interface settings for IGMP snooping take precedence.
User’s Manual of SGS-5240 Series Managed Switch Forwarding Priority – Assigns a CoS priority to all multicast traffic. (Range: 0-6, where 6 is the highest priority) Version Exclusive – Discards any received IGMP messages which use a version different to that currently configured by the IGMP Version attribute. (Default: Disabled) IGMP Unsolicited Report Interval – Specifies how often the upstream interface should transmit unsolicited IGMP reports when proxy reporting is enabled.
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.3 Static Multicast Router Switch Management> IGMP Snooping> Static Multicast Router page is used to statically attach an interface to a multicast router/switch. To show the static interfaces attached to a multicast router: ◆VLAN – Selects the VLAN which is to propagate all multicast traffic coming from the attached multicast router. (Range: 1-4093) ◆Interface – Activates the Port or Trunk scroll down list.
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.4 Static Member Switch Management > IGMP Snooping>Static Member page is used to statically assign a multicast service to an interface. Multicast filtering can be dynamically configured using IGMP Snooping and IGMP Query messages. To show the static interfaces assigned to a multicast service: VLAN – Specifies the VLAN which is to propagate the multicast service. (Range: 1-4093) Interface – Activates the Port or Trunk scroll down list.
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.5 VLAN Information Switch Management > IGMP Snooping>VLAN Information page is used to configure IGMP snooping attributes for a VLAN. ◆VLAN – ID of configured VLANs. (Range: 1-4093) ◆IGMP Snooping Status – When enabled, the switch will monitor network traffic on the indicated VLAN interface to determine which hosts want to receive multicast traffic. This is referred to as IGMP Snooping.
User’s Manual of SGS-5240 Series Managed Switch ◆Version Exclusive – Discards any received IGMP messages (except for multicast protocol packets) which use a version different to that currently configured by the IGMP Version attribute. (Default: Disabled) If version exclusive is disabled on a VLAN, then this setting is based on the global setting configured on the Multicast > IGMP Snooping > General page. If it is enabled on a VLAN, then this setting takes precedence over the global setting.
User’s Manual of SGS-5240 Series Managed Switch is sent to the upstream multicast router. A reduced value will result in reduced time to detect the loss of the last member of a group or source, but may generate more burst traffic. This attribute will take effect only if IGMP snooping proxy reporting is enabled or IGMP querier is enabled .
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.6 Configure Interface Switch Management > IGMP Snooping>Configure Interface page is used to configure an interface to drop IGMP query packets. ◆IGMP Query Drop – Configures an interface to drop any IGMP query packets received on the specified interface. If this switch is acting as a Querier, this prevents it from being affected by messages received from another Querier.
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.7 Forwarding Entry Switch Management > IGMP Snooping>Forwarding Entry page is used to display the forwarding entries learned through IGMP Snooping. COMMAND USAGE To display information about multicast groups, IGMP Snooping must first be enabled on the switch . ◆VLAN – An interface on the switch that is forwarding traffic to downstream ports for the specified multicast group address.
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.8 Query Statistics Switch Management > IGMP Snooping> Query Statistics page is used to display IGMP snooping protocol-related statistics for the specified interface. ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Port – Port identifier. (Range: 1-28) ◆Group – Group identifier. (Range: 1-12) Query Statistics ◆Querier IP Address – The IP address of the querier on this interface.
User’s Manual of SGS-5240 Series Managed Switch ◆G(-S)-S Query – The number of group specific or group-and-source specific query messages sent from this interface. 4.2.11.9 VLAN Statistics Switch Management > IGMP Snooping>Vlan Statistics page is used to display IGMP snooping protocol-related statistics for the specified interface. ◆VLAN – VLAN identifier. (Range: 1-4093) Query Statistics ◆Querier IP Address – The IP address of the querier on this interface.
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.10 Port Statistics Switch Management > IGMP Snooping> Port Statistics page is used to display IGMP snooping protocol-related statistics for the specified interface. ◆Port – Port identifier. (Range: 1-28) Query Statistics ◆Querier IP Address – The IP address of the querier on this interface. ◆Querier Expire Time – The time after which this querier is assumed to have expired.
User’s Manual of SGS-5240 Series Managed Switch 4.2.11.11 Group Statistics Switch Management > IGMP Snooping> Group Statistics page is used to display IGMP snooping protocol-related statistics for the specified interface. ◆Group – Group identifier. (Range: 1-12) Query Statistics ◆Querier IP Address – The IP address of the querier on this interface. ◆Querier Expire Time – The time after which this querier is assumed to have expired.
User’s Manual of SGS-5240 Series Managed Switch 4.2.12 IGMP Filtering and Throttling 4.2.12.1 Global Setting Switch Management > IGMP Filtering and Throttling>Global Setting page is used to enable IGMP filtering and throttling globally on the switch. ◆IGMP Filter Status – Enables IGMP filtering and throttling globally for the switch. (Default: Disabled) 4.2.12.2 Filter Profile Switch Management > IGMP Filtering and Throttling>Filter Profile page is used to create an IGMP profile and set its access mode.
User’s Manual of SGS-5240 Series Managed Switch To show the IGMP filter profiles: 1. Click Switch Management > IGMP Filtering and Throttling>Filter Profile. 4.2.12.3 Filter Range Switch Management > IGMP Filtering and Throttling>Filter Range page is used to create an IGMP range and set its access mode. Then use the (new Multicast Group Range) page to configure the multicast groups to filter. ◆Start Multicast IP Address – Specifies the starting address of a range of multicast groups.
User’s Manual of SGS-5240 Series Managed Switch To show the multicast groups configured for an IGMP filter Range: 4.2.11.4 Configure Filter Interface Switch Management > IGMP Filtering and Throttling>Configure Filter Interface page is used to assign and IGMP filter profile to interfaces on the switch, or to throttle multicast traffic by limiting the maximum number of multicast groups an interface can join at the same time. ◆Interface – Port or group identifier.
User’s Manual of SGS-5240 Series Managed Switch 4.2.13 MLD Snooping 4.2.13.1 Global Setting Switch Management> MLD Snooping > Global Setting page is used to configure the switch to forward multicast traffic intelligently. ◆MLD Snooping Status – When enabled, the switch will monitor network traffic to determine which hosts want to receive multicast traffic. (Default: Disabled) ◆Querier Status – When enabled, the switch can serve as the querier for MLDv2 snooping if elected.
User’s Manual of SGS-5240 Series Managed Switch ◆MLD Snooping Version – The protocol version used for compatibility with other devices on the network. This is the MLD version the switch uses to send snooping reports. (Range: 1-2; Default: 2) ◆Unknown Multicast Mode – The action for dealing with unknown multicast packets. Options include: Flood – Floods any received IPv6 multicast packets that have not been requested by a host to all ports in the VLAN.
User’s Manual of SGS-5240 Series Managed Switch 4.2.13.3 Current Multicast Router Switch Management > MLD Snooping >Current Multicast Router page is used to statically show an interface to an IPv6 multicast router/switch. ◆VLAN – Selects the VLAN which is to propagate all IPv6 multicast traffic coming from the attached multicast router. (Range: 1-4094) ◆Interface – Activates the Port or group scroll down list. 4.2.13.
User’s Manual of SGS-5240 Series Managed Switch 4.2.13.5 Current Member Switch Management > MLD Snooping > Current Member page is used to statically show an IPv6 multicast service to an interface. ◆VLAN – Specifies the VLAN which is to propagate the multicast service. (Range: 1-4094) ◆Multicast IPv6 Address – The IP address for a specific multicast service. ◆Interface – Activates the Port or Trunk scroll down list. ◆Port or Group – Specifies the interface assigned to a multicast group.
User’s Manual of SGS-5240 Series Managed Switch 4.2.13.7 Group Information Switch Management > MLD Snooping > Group Information page is used to display and set known multicast groups, member ports, the means by which each group was learned, and the corresponding source list. ◆VLAN – VLAN identifier. (Range: 1-4094) ◆Interface – Port or group identifier. ◆Group Address – The IP address for a specific multicast service. ◆Type – The means by which each group was learned – MLD Snooping or Multicast Data.
User’s Manual of SGS-5240 Series Managed Switch 4.2.13.8 Statistics Switch Management> MLD Snooping >Statistics pages is used to display MLD Snooping protocol related statistics for the specified interface. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Port – Port identifier. (Range: 1-28) ◆Group – group identifier. (Range: 1-12) Query Statistics ◆Querier IP Address – The IP address of the querier on this interface.
User’s Manual of SGS-5240 Series Managed Switch To display statistics for MLD Snooping input: To display statistics for MLD Snooping output: 127
User’s Manual of SGS-5240 Series Managed Switch To display statistics for MLD Snooping Query: 128
User’s Manual of SGS-5240 Series Managed Switch 4.2.14 MVR For IPv4 The MVR feature enables multicast traffic forwarding on the Multicast VLANs. ■ In a multicast television application, a PC or a network television or a set-top box can receive the multicast stream. ■ Multiple set-top boxes or PCs can be connected to one subscriber port, which is a switch port configured as an MVR receiver port.
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.1 Configure Global Switch Management > MVR for IPv4 >Configure Global page is used to configure proxy switching and the robustness variable. ◆Proxy Switching – Configures MVR proxy switching, where the source port acts as a host, and the receiver port acts as an MVR router with querier service enabled.
User’s Manual of SGS-5240 Series Managed Switch Dynamic – When dynamic mode is enabled, the switch only forwards multicast streams which the source port has dynamically joined. In other words, both the receiver port and source port must subscribe to a multicast group before a multicast stream is forwarded to any attached client. Note that the requested streams are still restricted to the address range which has been specified in a profile and bound to a domain. 4.2.14.
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.3 Show Configure Profile Switch Management > MVR for IPv4 > Show Configure Profile pages is used to display the multicast group address for required services to one or more MVR domains. ◆Profile Name – The name of a profile containing one or more MVR group addresses. (Range: 1-21 characters) ◆Start IP Address – Starting IP address for an MVR multicast group. (Range: 224.0.1.0 - 239.255.255.
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.5 Show Associate Profile Switch Management > MVR for IPv4 >Show Associate Profile pages is used to show the multicast group address for required services to one or more MVR domains. ◆Profile Name – The name of a profile containing one or more MVR group addresses. (Range: 1-21 characters) ◆Start IP Address – Starting IP address for an MVR multicast group. (Range: 224.0.1.0 - 239.255.255.
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.7 Configure Interface Switch Management > MVR for IPv4 >Configure Interface page is used to configure each interface that participates in the MVR protocol as a source port or receiver port. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆Port/Group – Interface identifier. ◆Type – The following interface types are supported: Source – An uplink port that can send and receive multicast data for the groups assigned to the MVR VLAN.
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.8 Show Static Group Member Switch Management > MVR For IPv4 > Show Static Group Member page is used to statically show multicast groups for a port or trunk which will receive long-term multicast streams associated with a stable set of hosts. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆Interface – Port or group identifier. ◆VLAN – VLAN identifier.
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.10 Show Member Switch Management > MVR For IPv4 >Show Member page is used to show the multicast groups either statically or dynamically assigned to the MVR receiver groups on each interface. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆Group IP Address – Multicast groups assigned to the MVR VLAN. ◆VLAN – The VLAN through which the service is received.
User’s Manual of SGS-5240 Series Managed Switch ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Port – Port identifier. (Range: 1-28) ◆Group – group identifier. (Range: 1-12) Query Statistics ◆Querier IP Address – The IP address of the querier on this interface. ◆Querier Expire Time – The time after which this querier is assumed to have expired. ◆General Query Received – The number of general queries received on this interface.
User’s Manual of SGS-5240 Series Managed Switch 4.2.14.12 Show VLAN Statistics Switch Management > MVR for IPv4 >Show VLAN Statistics page is used to display MVR protocol related statistics for the specified interface. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Port – Port identifier. (Range: 1-28) ◆Group – Group identifier. (Range: 1-12) Query Statistics ◆Querier IP Address – The IP address of the querier on this interface.
User’s Manual of SGS-5240 Series Managed Switch ◆Group – The number of MVR groups active on this interface. Output Statistics ◆Report – The number of IGMP membership reports sent from this interface. ◆Leave – The number of leave messages sent from this interface. ◆G Query – The number of general query messages sent from this interface. ◆G(-S)-S Query – The number of group specific or group-and-source specific query messages sent from this interface. 4.2.14.
User’s Manual of SGS-5240 Series Managed Switch ◆Report – The number of IGMP membership reports sent from this interface. ◆Leave – The number of leave messages sent from this interface. ◆G Query – The number of general query messages sent from this interface. ◆G(-S)-S Query – The number of group specific or group-and-source specific query messages sent from this interface. 4.2.14.
User’s Manual of SGS-5240 Series Managed Switch ◆Join Success – The number of times a multicast group was successfully joined. ◆Group – The number of MVR groups active on this interface. Output Statistics ◆Report – The number of IGMP membership reports sent from this interface. ◆Leave – The number of leave messages sent from this interface. ◆G Query – The number of general query messages sent from this interface.
User’s Manual of SGS-5240 Series Managed Switch This parameter sets the general query interval at which active receiver ports send out general queries. This interval is only effective when proxy switching is enabled. ◆Source Port Mode – Configures the switch to forward any multicast streams within the parameters set by a profile, or to only forward multicast streams which the source port has dynamically joined.
User’s Manual of SGS-5240 Series Managed Switch ◆Upstream Source IPv6 – The source IPv6 address assigned to all MVR6 control packets sent upstream on the specified domain. This parameter must be a full IPv6 address including the network prefix and host address bits. By default, all MVR6 reports sent upstream use a null source IP address. All IPv6 addresses must be according to RFC 2373 “IPv6 Addressing Architecture,” using 8 colon-separated 16-bit hexadecimal values.
User’s Manual of SGS-5240 Series Managed Switch 4.2.15.4 Add Configure Profile Switch Management > MVR for IPv6 > Add Configure Profile page is used to assign the multicast group address for required services to one or more MVR6 domains. ◆Profile Name – The name of a profile containing one or more MVR6 group addresses. (Range: 1-21 characters) ◆Start IPv6 Address – Starting IP address for an MVR6 multicast group.
User’s Manual of SGS-5240 Series Managed Switch 4.2.15.6 Add Associate Profile Switch Management > MVR for IPv6 > Add Associate Profile page is used to assign the multicast group address for required services to one or more MVR6 domains. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆Profile Name – The name of a profile to be assigned to this domain. (Range: 1-20 characters) 4.2.15.
User’s Manual of SGS-5240 Series Managed Switch 4.2.15.8 Show Static Group Member Switch Management > MVR For IPv6> Show Static Group Member page is used to statically bind multicast groups to a port which will receive long-term multicast streams associated with a stable set of hosts. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆Interface – Port or group identifier. ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Group IPv6 Address – Defines a multicast service sent to the selected port.
User’s Manual of SGS-5240 Series Managed Switch 4.2.15.10 Show Member Switch Management > MVR For IPv6>Show Member page is used to show the multicast groups either statically or dynamically assigned to the MVR6 receiver groups on each interface. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆Group IPv6 Address – Multicast groups assigned to the MVR6 VLAN. ◆VLAN – The VLAN through which the service is received.
User’s Manual of SGS-5240 Series Managed Switch ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Port – Port identifier. (Range: 1-12) ◆Group – Group identifier. (Range: 1-12) Query Statistics ◆Querier IPv6 Address – The IP address of the querier on this interface. ◆Querier Expire Time – The time after which this querier is assumed to have expired. ◆General Query Received – The number of general queries received on this interface.
User’s Manual of SGS-5240 Series Managed Switch 4.2.15.12 Show VLAN Statistics Switch Management > MVR for IPv6>Show VLAN Statistics page is used to display MVR6protocol-related statistics for the specified interface. ◆Domain ID – An independent multicast domain. (Range: 1-5) ◆VLAN – VLAN identifier. (Range: 1-4093) ◆Port – Port identifier. (Range: 1-12) ◆Group – Group identifier. (Range: 1-12) Query Statistics ◆Querier IPv6 Address – The IP address of the querier on this interface.
User’s Manual of SGS-5240 Series Managed Switch ◆Group – The number of MVR6 groups active on this interface. Output Statistics ◆Report – The number of MLD membership reports sent from this interface. ◆Leave – The number of leave messages sent from this interface. ◆G Query – The number of general query messages sent from this interface. ◆G(-S)-S Query – The number of group specific or group-and-source specific query messages sent from this interface. 4.2.15.
User’s Manual of SGS-5240 Series Managed Switch ◆Number of Leaves Sent – The number of leaves sent from this interface. VLAN, Port, and Group Statistics Input Statistics ◆Report – The number of MLD membership reports received on this interface. ◆Leave – The number of leave messages received on this interface. ◆G Query – The number of general query messages received on this interface. ◆G(-S)-S Query – The number of group specific or group-and-source specific query messages received on this interface.
User’s Manual of SGS-5240 Series Managed Switch ◆Specific Query Sent – The number of specific queries sent from this interface. ◆Number of Reports Sent – The number of reports sent from this interface. ◆Number of Leaves Sent – The number of leaves sent from this interface. VLAN, Port, and Trunk Statistics Input Statistics ◆Report – The number of MLD membership reports received on this interface. ◆Leave – The number of leave messages received on this interface.
User’s Manual of SGS-5240 Series Managed Switch 4.2.16 LLDP Link Layer Discovery Protocol Link Layer Discovery Protocol (LLDP) is used to discover basic information about neighboring devices on the local broadcast domain. LLDP is a Layer 2 protocol that uses periodic broadcasts to advertise information about the sending device. Advertised information is represented in Type Length Value (TLV) format according to the IEEE 802.
User’s Manual of SGS-5240 Series Managed Switch ◆Reinitialization Delay – Configures the delay before attempting to reinitialize after LLDP ports are disabled or the link goes down. (Range: 1-10 seconds; Default: 2 seconds) When LLDP is re-initialized on a port, all information in the remote systems LLDP MIB associated with this port is deleted. ◆Notification Interval – Configures the allowed interval for sending SNMP notifications about LLDP MIB changes.
User’s Manual of SGS-5240 Series Managed Switch transmission. An SNMP agent should therefore periodically check the value of lldpStatsRemTableLastChangeTime to detect any lldpRemTablesChange notification-events missed due to throttling or transmission loss. ◆MED Notification – Enables the transmission of SNMP trap notifications about LLDP-MED changes. (Default: Disabled) ◆Basic Optional TLVs – Configures basic information included in the TLV field of advertised messages.
User’s Manual of SGS-5240 Series Managed Switch ◆MED-Location Civic Address – Configures information for the location of the attached device included in the MED TLV field of advertised messages, including the country and the device type. Country – The two-letter ISO 3166 country code in capital ASCII letters. (Example: DK, DE or US) Device entry refers to – The type of device to which the location applies: Location of DHCP server. Location of network element closest to client.
User’s Manual of SGS-5240 Series Managed Switch 4.2.16.4 Local Information Switch Management > LLDP > Local Information page is used to display information about the switch, such as its MAC address, chassis ID, management IP address, and port information. ◆Chassis Type – Identifies the chassis containing the IEEE 802 LAN entity associated with the transmitting LLDP agent.
User’s Manual of SGS-5240 Series Managed Switch ID Basis Reference Other — Repeater IETF RFC 2108 Bridge IETF RFC 2674 WLAN Access Point IEEE 802.11 MIB Router IETF RFC 1812 Telephone IETF RFC 2011 DOCSIS cable device IETF RFC 2669 and IETF RFC 2670 End Station Only IETF RFC 2011 ◆System Capabilities Enabled – The primary function(s) of the system which are currently enabled. Refer to the preceding table. ◆Management Address – The management address associated with the local system.
User’s Manual of SGS-5240 Series Managed Switch 4.2.16.5 Peer Information Switch Management > LLDP >Peer Information page is used to display information about devices connected directly to the switch’s ports which are advertising information through LLDP, or to display detailed information about an LLDP-enabled device connected to a specific port on the local switch. ■ Port’s peer brief ◆Local Port – The local port to which a remote LLDP-capable device is attached.
User’s Manual of SGS-5240 Series Managed Switch ◆Port – Port identifier on local switch. ◆Remote Index – Index of remote device attached to this port. ◆Local Port – The local port to which a remote LLDP-capable device is attached. ◆Chassis Type – Identifies the chassis containing the IEEE 802 LAN entity associated with the transmitting LLDP agent.
User’s Manual of SGS-5240 Series Managed Switch ID Basis Reference Interface alias IfAlias (IETF RFC 2863) Chassis component EntPhysicalAlias when entPhysClass has a value of ‘chassis(3)’ (IETF RFC 2737) Port component EntPhysicalAlias when entPhysicalClass has a value ‘port(10)’ or ‘backplane(4)’ (IETF RFC 2737) MAC address MAC address (IEEE Std 802-2001) Network address networkAddress Interface name ifName (IETF RFC 2863) Agent circuit ID agent circuit ID (IETF RFC 3046) Locally assigned
User’s Manual of SGS-5240 Series Managed Switch Bit Capability 0 other or unknown 1 10BASE-T half duplex mode 2 10BASE-T full duplex mode 3 100BASE-T4 4 100BASE-TX half duplex mode 5 100BASE-TX full duplex mode 6 100BASE-T2 half duplex mode 7 100BASE-T2 full duplex mode 8 PAUSE for full-duplex links 9 Asymmetric PAUSE for full-duplex links 10 Symmetric PAUSE for full-duplex links 11 Asymmetric and Symmetric PAUSE for full-duplex links 12 1000BASE-X, -LX, -SX, -CX half duplex mode
User’s Manual of SGS-5240 Series Managed Switch ◆Device Class – Any of the following categories of endpoint devices: Class 1 – The most basic class of endpoint devices. Class 2 – Endpoint devices that supports media stream capabilities. Class 3 – Endpoint devices that directly supports end users of the IP communication systems. Network Connectivity Device – Devices that provide access to the IEEE 802 based LAN infrastructure for LLDP-MED endpoint devices.
User’s Manual of SGS-5240 Series Managed Switch ◆Software Revision – The software revision of the end-point device. ◆Manufacture Name – The manufacturer of the end-point device ◆Asset ID – The asset identifier of the end-point device. End-point devices are typically assigned asset identifiers to facilitate inventory management and assets tracking. ◆Firmware Revision – The firmware revision of the end-point device. ◆Serial Number – The serial number of the end-point device.
User’s Manual of SGS-5240 Series Managed Switch 4.2.17 ERPS ITU-T G.8032 Ethernet Ring protection switching (ERPS) is a link layer protocol applied on Ethernet loop protection to provide sub-50ms protection and recovery switching for Ethernet traffic in a ring topology. ERPS provides a faster redundant recovery than Spanning Tree topology. The action is similar to STP or RSTP, but the algorithms between them are not the same.
User’s Manual of SGS-5240 Series Managed Switch 4.2.17.1 Global Configuration Switch Management > ERPS > Global Configuration page is used to globally enable or disable ERPS on the switch. ◆ERPS Status – Enables ERPS on the switch. (Default: Disabled) ERPS must be enabled globally on the switch before it can enabled on an ERPS ring. 4.2.17.2 Domain Configuration Switch Management > ERPS > Domain Configuration pages is used to add ERPS domain and configure domain details.
User’s Manual of SGS-5240 Series Managed Switch ◆Domain Name – Name of a configured ERPS ring. ◆Node State – Shows the following ERPS states: Init – The ERPS ring has started but has not yet determined the status of the ring. Idle – If all nodes in a ring are in this state, it means that all the links in the ring are up. This state will switch to protection state if a link failure occurs. Protection – If a node in this state, it means that a link failure has occurred.
User’s Manual of SGS-5240 Series Managed Switch ◆MEG Level – The maintenance entity group (MEG) level which provides a communication channel for ring automatic protection switching (R-APS) information. (Range: 0-7) This parameter is used to ensure that received R-APS PDUs are directed for this ring. A unique level should be configured for each local ring if there are many R-APS PDUs passing through this switch. ◆Node ID – A MAC address unique to the ring node.
User’s Manual of SGS-5240 Series Managed Switch Also, the ring ports of the Control VLAN must be tagged. Once the ring has been activated, the configuration of the control VLAN cannot be modified. Use the Admin Status parameter to stop the ERPS ring before making any configuration changes to the control VLAN. ◆Propagate TC – Enables propagation of topology change messages from a secondary ring to the primary ring.
User’s Manual of SGS-5240 Series Managed Switch 4.2.17.3 Statistics Switch Management > ERPS > Statistics pages is used to display or clear statistics information on ring ports.
User’s Manual of SGS-5240 Series Managed Switch 4.2.18 Loopback Detection Switch Management >Loopback Detection page is used to configure loopback detection on an interface. When loopback detection is enabled and a port or group receives its own BPDU, the detection agent drops the loopback BPDU, sends an SNMP trap, and places the interface in discarding mode. This loopback state can be released manually or automatically.
User’s Manual of SGS-5240 Series Managed Switch 4.2.18.
User’s Manual of SGS-5240 Series Managed Switch 4.2.19 UDLD The switch can be configured to detect general loopback conditions caused by hardware problems or faulty protocol settings. When enabled, a control frame is transmitted on the participating ports, and the switch monitors inbound traffic to see if the frame is looped back. 4.2.19.
User’s Manual of SGS-5240 Series Managed Switch 4.2.19.2 Interface Configuration Switch Management > UDLD > Interface Configuration page is used to enable UDLD and aggressive mode which reduces the shut-down delay after loss of bidirectional connectivity is detected. ◆ Port – Port identifier. (Range: 1-28/52) ◆ UDLD – Enables UDLD on a port.
User’s Manual of SGS-5240 Series Managed Switch ◆ Operation State – Shows the UDLD operational state (Disabled, Link down, Link up, Advertisement, Detection, Disabled port, Advertisement - Single neighbor, Advertisement - Multiple neighbors) ◆ Port State – Shows the UDLD port state (Unknown, Bidirectional, Unidirectional, Transmit-to-receive loop, Mismatch with neighbor state reported, Neighbor's echo is empty) The state is Unknown if the link is down or not connected to a UDLD-capable device.
User’s Manual of SGS-5240 Series Managed Switch 4.2.20 Rate Limit Interface>Congestion Control >Rate Limit page is used to apply rate limiting to ingress or egress ports. This function allows the network manager to control the maximum rate for traffic received or transmitted on an interface. Rate limiting is configured on interfaces at the edge of a network to limit traffic into or out of the network. Packets that exceed the acceptable amount of traffic are dropped.
User’s Manual of SGS-5240 Series Managed Switch 4.2.21 Storm Control Interface>Congestion Control >Storm Control page is used to configure broadcast, multicast, and unknown unicast storm control thresholds. ◆Interface – Displays a list of ports or groups. ◆Type – Indicates interface type. (1000BASE-T or 10GBASE SFP) ◆Unknown Unicast – Specifies storm control for unknown unicast traffic. ◆Multicast – Specifies storm control for multicast traffic. ◆Broadcast – Specifies storm control for broadcast traffic.
User’s Manual of SGS-5240 Series Managed Switch 4.2.22 Stacking 4.2.22.1 Global Configuration Switch Management > Stacking > Global Configuration page is used to convert switch mode between stacking and non-stacking and reset unit numbers. Press Change Status button: 4.2.22.2 Master Configuration Switch Management > Stacking > Master Configuration page is used to set master button on the switch.
User’s Manual of SGS-5240 Series Managed Switch 4.2.23 Pepo 4.2.23.1 Global Configuration Switch Management > Pepo > Global Configuration page is used to set the global configuration of Pepo. 4.2.23.2 Interface Configuration Switch Management > Pepo > Interface Configuration page is used to set the parameters of interface for Pepo. 4.2.23.3 Statistics Switch Management > Pepo > Statistics page is used to display the counters of Pepo.
User’s Manual of SGS-5240 Series Managed Switch 4.3 Route Management 4.3.1 IPv4 Interface Configuration This section describes how to configure an IPv4 interface for management access over the network. Route Management > IPv4 Interface Configuration page is used to configure an IPv4 address for the switch. ◆VLAN – ID of the configured VLAN (1-4093). By default, all ports on the switch are members of VLAN 1.
User’s Manual of SGS-5240 Series Managed Switch 4.3.2 IPv6 Interface Configuration This section describes how to configure an IPv6 interface for management access over the network. 4.3.2.1 Global Configuration Route Management > IPv6 Interface Configuration > Global Configuration page is used to configure anIPv6 default gateway for the switch. ◆Default Gateway – Sets the IPv6 address of the default next hop router.
User’s Manual of SGS-5240 Series Managed Switch ◆Enable IPv6 Explicitly – Enables IPv6 on an interface. Note that when an explicit address is assigned to an interface, IPv6 is automatically enabled, and cannot be disabled until all assigned addresses have been removed. (Default: Disabled) Disabling this parameter does not disable IPv6 for an interface that has been explicitly configured with an IPv6 address. ◆MTU – Sets the size of the maximum transmission unit (MTU) for IPv6 packets sent on an interface.
User’s Manual of SGS-5240 Series Managed Switch 4.3.2.3 RA-Guard Route Management > IPv6 Interface Configuration > RA-Guard page is used to configure RA guard status on a port or group. ◆Interface – Shows port or trunk configuration page. ◆RA Guard – Blocks incoming Router Advertisement and Router Redirect packets. (Default: Disabled) IPv6 Router Advertisements (RA) convey information that enables nodes to auto-configure on the network.
User’s Manual of SGS-5240 Series Managed Switch 4.3.2.4 Address Configuration Route Management > IPv6 Interface Configuration > Address Configuration page is used to configure anIPv6 interface for management access over the network. ◆VLAN – ID of a configured VLAN which is to be used for management access. By default, all ports on the switch are members of VLAN 1. However, the management station can be attached to a port belonging to any VLAN, as long as that VLAN has been assigned an IP address.
User’s Manual of SGS-5240 Series Managed Switch 4.3.2.5 Neighbor List Route Management > IPv6 Interface Configuration > Neighbor List page is used to display the IPv6 addresses detected for neighbor devices. 4.3.2.6 Statistics Route Management > IPv6 Interface Configuration > Statistics page is used to display statistics about IPv6 traffic passing through this switch.
User’s Manual of SGS-5240 Series Managed Switch 4.3.2.7 MTU Route Management > IPv6 Interface Configuration > MTU page is used to display the maximum transmission unit (MTU) cache for destinations that have returned an ICMP packet-too-big message along with an acceptable MTU to this switch. 4.3.3 ARP 4.3.3.1 Global Configuration Route Management > ARP > Global Configuration page is used to set the timeout for ARP entry. ◆Age time–Sets the aging time for dynamic entries in the ARP cache.
User’s Manual of SGS-5240 Series Managed Switch 4.3.3.3 Static Arp Route Management > ARP > Static Arp page is used to manually map an IP address to the corresponding physical address in the ARP cache. ◆ IP Address – IP address statically mapped to a physical MAC address. (Valid IP addresses consist of four numbers, 0 to 255, separated by periods.) ◆ MAC Address – MAC address statically mapped to the corresponding IP address.
User’s Manual of SGS-5240 Series Managed Switch 4.3.4 Routing Table Route Management > Routing Table > Routing Table page is used to display all routes that can be accessed via local network interfaces, through static routes, or through a dynamically learned route.
User’s Manual of SGS-5240 Series Managed Switch by the dynamic unicast routing protocols is 110 for OSPF, 120 for RIP, 20 for eBGP, and 200 for iBGP. (Range: 1-255, Default: 1) 4.4 ACL ACL is an acronym for Access Control List. It is the list table of ACEs, containing access control entries that specify individual users or groups permitted or denied to specific traffic objects, such as a process or a program. Each accessible traffic object contains an identifier to its ACL.
User’s Manual of SGS-5240 Series Managed Switch IPv6 Standard: IPv6 ACL mode filters packets based on the source IPv6 address. IPv6 Extended: IPv6 ACL mode filters packets based on the source or destination IP address, as well as DSCP, and the next header type. MAC – MAC ACL mode filters packets based on the source or destination MAC address and the Ethernet frame type. ARP – ARP ACL specifies static IP-to-MAC address bindings used for ARP inspection. 4.4.
User’s Manual of SGS-5240 Series Managed Switch Extended Ipv4 Acl ACL > Rule Configuration > Ip Extended page is used to configure an Extended IPv4 ACL. ◆ACL Name – Shows the names of ACLs matching the selected type. ◆Action – An ACL can contain any combination of permit or deny rules. ◆Source/Destination Address Type – Specifies the source or destination IP address type.
User’s Manual of SGS-5240 Series Managed Switch SYN valid and ACK invalid, use control-code 2, control bit mask 18 ◆Time Range – Name of a time range. Standard Ipv6 Cal ACL > Rule Configuration > IPv6 Standard page is used to configure a Standard IPv6ACL. ◆ACL Name – Shows the names of ACLs matching the selected type. ◆Action – An ACL can contain any combination of permit or deny rules. ◆Source Address Type – Specifies the source IP address.
User’s Manual of SGS-5240 Series Managed Switch Extended Ipv6 Acl ACL > Rule Configuration > IPv6 Extended page is used to configure an Extended IPv6 ACL. ◆ACL Name – Shows the names of ACLs matching the selected type. ◆Action – An ACL can contain any combination of permit or deny rules. ◆Source/Destination Address Type – Specifies the source or destination IP address type. Use “Any” to include all possible addresses, or “IPv6-Prefix” to specify a range of addresses.
User’s Manual of SGS-5240 Series Managed Switch Mac Acl ACL > Rule Configuration > MAC page is used to configure a MAC ACL based on hardware addresses, packet format, and Ethernet type. ◆ACL Name – Shows the names of ACLs matching the selected type. ◆Action – An ACL can contain any combination of permit or deny rules.
User’s Manual of SGS-5240 Series Managed Switch ◆ACL Name – Shows the names of ACLs matching the selected type. ◆Action – An ACL can contain any combination of permit or deny rules. ◆Packet Type – Indicates an ARP request, ARP response, or either type. (Range: IP, Request, Response; Default: IP) ◆Source/Destination IP Address Type – Specifies the source or destination IPv4 address.
User’s Manual of SGS-5240 Series Managed Switch 4.4.3 Bind Interface ACL > Bind Interface page is used to bind the ports that need to filter traffic to the appropriate ACLs. You can assign one IP access list and one MAC access list to any port. ◆Type – Selects the type of ACLs to bind to a port. ◆Port – Port identifier. ◆ACL – ACL used for ingress or egress packets. ◆Time Range – Name of a time range.
User’s Manual of SGS-5240 Series Managed Switch 4.5 CoS CoS > Cos page is used to specify the default port priority for each interface on the switch. All untagged packets entering the switch are tagged with the specified default port priority, and then sorted into the appropriate priority queue at the output port. ◆Port – Displays a list of ports or trunks. ◆CoS – The priority that is assigned to untagged frames received on the specified interface.
User’s Manual of SGS-5240 Series Managed Switch 4.6 Qu’s 4.6.1 Egress Queue Qu’s > Egress Queue page is used to set the queue mode for the egress queues on any interface. The switch can be set to service the queues based on a strict rule that requires all traffic in a higher priority queue to be processed before the lower priority queues are serviced, or Weighted Round-Robin (WRR) queuing which specifies a scheduling weight for each queue.
User’s Manual of SGS-5240 Series Managed Switch 4.6.2 Trust Mode The switch allows a choice between using DSCP or CoS priority processing methods. Qu’s> Trust Mode page is used to select the required processing method. ◆Port – Port identifier. (Range: 1-28) ◆Trust Mode CoS – Maps layer 3/4 priorities using Class of Service values. (This is the default setting.) DSCP – Maps layer 3/4 priorities using Differentiated Services Code Point values. 4.6.
User’s Manual of SGS-5240 Series Managed Switch DHCP to PHB/DP ◆Port – Specifies a port. ◆DSCP – DSCP value in ingress packets. (Range: 0-63) ◆PHB – Per-hop behavior, or the priority used for this router hop.(Range: 0-7) ◆Drop Precedence – Drop precedence used for controlling traffic congestion. (Range: 0 - Green, 3 - Yellow, 1 - Red) To show the DHCP to PHB/DP precedence map: CoS to PHB/DP ◆Port – Specifies a port. ◆CoS – CoS value in ingress packets. (Range: 0-7) ◆CFI – Canonical Format Indicator.
User’s Manual of SGS-5240 Series Managed Switch To show the CoS to PHB/DP precedence map: PHB/DP to CoS PHB/DP to CoS page is used to map internal per-hop behavior and drop precedence value pairs to CoS values used in tagged egress packets on a Layer 2 interface. ◆ Port – Specifies a port. ◆ PHB – Per-hop behavior, or the priority used for this router hop. (Range: 0-7) ◆ Drop Precedence – Drop precedence used for controlling traffic congestion.
User’s Manual of SGS-5240 Series Managed Switch To show the PHB/DP to CoS precedence map: 202
User’s Manual of SGS-5240 Series Managed Switch IP Precedence to PHB/DP IP Precedence to PHB/DP page is used to map IP precedence values in incoming packets to per-hop behavior and drop precedence values for priority processing. ◆ Port – Specifies a port. ◆ IP Precedence – IP Precedence value in ingress packets. (Range: 0-7) ◆ PHB – Per-hop behavior, or the priority used for this router hop. (Range: 0-7) ◆ Drop Precedence – Drop precedence used for controlling traffic congestion.
User’s Manual of SGS-5240 Series Managed Switch TCP/UDP Port to DSCP TCP/UDP Port to DSCP page is used to map network applications designated by a TCP/UDP destination port number in the frame header to per-hop behavior and drop precedence values for internal priority processing. ◆ Port – Specifies a port. ◆ IP Protocol ■ TCP – Transport Control Protocol ■ UDP – User Datagram Protocol ◆ Destination Port Number – 16-bit TCP/UDP destination port number.
User’s Manual of SGS-5240 Series Managed Switch To show the TCP/UDP Port to DSCP precedence map: 4.6.4 Class A class map is used for matching packets to a specified class. Qu’s > Class page is used to configure a class map. Add ◆Class Name – Name of the class map. (Range: 1-32 characters) ◆Type – The criteria specified by the match command. Match Any – Match any condition within a class map. ◆Description – A brief description of a class map.
User’s Manual of SGS-5240 Series Managed Switch 4.6.
User’s Manual of SGS-5240 Series Managed Switch 4.6.6 Policy Qu’s> Policy page is used to create a policy map that can be attached to multiple interfaces. A policy map is used to group one or more class map statements, modify service tagging, and enforce bandwidth policing. A policy map can then be bound by a service policy to one or more interfaces. New ◆Policy Name – Name of policy map. (Range: 1-32 characters) ◆Description – A brief description of a policy map.
User’s Manual of SGS-5240 Series Managed Switch 4.6.7 Policy Map To edit the rules for a policy map: ◆Policy Name – Name of policy map. ◆Bound Class Name – Name of a class map that defines a traffic classification upon which a policy can act. ◆Action – This attribute is used to set an internal Qu’s value in hardware for matching packets.
User’s Manual of SGS-5240 Series Managed Switch To show the rules for a policy map: 4.6.8 Bind Interface Qu’s > Bind Interface page is used to bind a policy map to a port. First define a class map, define a policy map, and bind the service policy to the required interface. ◆Port – Specifies a port. ◆Policy for Ingress – Applies the selected rule to ingress traffic. ◆Policy for Egress – Applies the selected rule to egress traffic.
User’s Manual of SGS-5240 Series Managed Switch 4.7 Security 4.7.1 AAA This section is to control the access to the Managed Switch, including the user access and management control. The Authentication section contains links to the following main topics: User Authentication IEEE 802.1X Port-based Network Access Control MAC-based Authentication Overview of 802.1X (Port-Based) Authentication In the 802.
User’s Manual of SGS-5240 Series Managed Switch Remote Authentication Dial-in User Service (RADIUS) Terminal Access Controller Access Control System Plus Local user name and Privilege Level control (TACACS+) RADIUS and TACACS+ are logon authentication protocols that use software running on a central server to control access to RADIUS-aware or TACACS-aware devices on the network.
User’s Manual of SGS-5240 Series Managed Switch Authentication server—performs the actual authentication of the client. The authentication server validates the identity of the client and notifies the switch whether or not the client is authorized to access the LAN and switch services. Because the switch acts as the proxy, the authentication service is transparent to the client.
User’s Manual of SGS-5240 Series Managed Switch Figure 4-5-2-2: EAP Message Exchange Ports in Authorized and Unauthorized States The switch port state determines whether or not the client is granted access to the network. The port starts in the unauthorized state. While in this state, the port disallows all ingress and egress traffic except for 802.1X protocol packets.
User’s Manual of SGS-5240 Series Managed Switch 4.7.1.1 Global Configuration Security > AAA > Global Configuration page to set global configuration . ◆Authentication Sequence –set the sequence of authentication. There are three methods of authentication. Local – User authentication is performed only locally by the switch. RADIUS – User authentication is performed using a RADIUS server only. TACACS – User authentication is performed using a TACACS+ server only.
User’s Manual of SGS-5240 Series Managed Switch 4.7.1.2 Server Configuration Security>AAA>Server configuration page is used to configure the parameters of RADIUS or TACACS+ server for AAA: 4.7.1.3 Server List Security>AAA>Server List page is used to configure the RADIUS or TACACS+ server groups for accounting and authorization. Server list includes a list of servers.
User’s Manual of SGS-5240 Series Managed Switch 4.7.1.4 Accounting Strategy Security>AAA>Accounting Strategy page is used to configure the strategy for Accounting. 4.7.1.5 Interface Accounting Security>AAA>Interface Accounting page is used to configure the strategy used on the interface.
User’s Manual of SGS-5240 Series Managed Switch 4.7.1.6 Authorization Strategy Security>AAA>Authorization Strategy page is used to configure the strategy for authorization. 4.7.1.7 Authorization configuration Security>AAA>Authorization Configuration page is used to configure the authorization strategy for console login and vty (telnet, ssh) login.
User’s Manual of SGS-5240 Series Managed Switch 4.7.2 Web Authentication 4.7.2.1 Global Configuration Security > Web Authentication > Global Configuration page is used to edit the global parameters for web authentication. Web Authentication Status – Enables web authentication for the switch. (Default: Disabled) Note that this feature must also be enabled for any port where required under the Configure Interface menu.
User’s Manual of SGS-5240 Series Managed Switch 4.7.3 802.1X Overview of 802.1X (Port-Based) Authentication In the 802.1X-world, the user is called the supplicant, the switch is the authenticator, and the RADIUS server is the authentication server. The switch acts as the man-in-the-middle, forwarding requests and responses between the supplicant and the authentication server. Frames sent between the supplicant and the switch are special 802.1X frames, known as EAPOL (EAP Over LANs) frames.
User’s Manual of SGS-5240 Series Managed Switch 4.7.3.2 Interface Configuration Security > 802.1x > Interface Configuration page is used to configure the parameters of a port. 4.7.3.3 Statistics Security > 802.1x > Statistics page is used to display the statistics of 802.1x.
User’s Manual of SGS-5240 Series Managed Switch 4.7.4 MAC Authentication Overview of MAC-based Authentication Unlike 802.1X, MAC-based authentication is not a standard, but merely a best-practices method adopted by the industry. In MAC-based authentication, users are called clients, and the switch acts as the supplicant on behalf of clients.
User’s Manual of SGS-5240 Series Managed Switch 4.7.4.2 Interface Configuration Security > MAC Authentication > Interface Configuration page is used to configure interface. 4.7.4.3 MAC Filter Security > MAC Authentication > MAC Filter page is used to configure Mac Filter.
User’s Manual of SGS-5240 Series Managed Switch 4.7.4.4 MAC Authentication Information Security > MAC Authentication > MAC Authentication Information page is used to show information of MAC Authentication. 4.7.5 HTTPS 4.7.5.1 Global Configuration Security > HTTPS > Global Configuration page is used to enable or disable HTTPS and specify the UDP port used for this service. HTTPS Status – Allows you to enable/disable the HTTPS server feature on the switch.
User’s Manual of SGS-5240 Series Managed Switch 4.7.6 SSH 4.7.6.1 Global Configuration Security > SSH > Global Configuration page is used to enable the SSH server and configure basic settings for authentication. SSH Server Status – Allows you to enable/disable the SSH server on the switch. (Default: Disabled) Version – The Secure Shell version number. Version 2.0 is displayed, but the switch supports management access via either SSH Version 1.5 or 2.0 clients.
User’s Manual of SGS-5240 Series Managed Switch Save Host-Key from Memory to Flash – Saves the host key from RAM (i.e., volatile memory) to flash memory. Otherwise, the host key pair is stored to RAM by default. Note that you must select this item prior to generating the host-key pair. (Default: Disabled) 4.7.6.3 Key of User Security > SSH > Key of User page is used to upload a user’s public key to the switch.
User’s Manual of SGS-5240 Series Managed Switch 4.7.7 Port Security Port Security allows for limiting the number of users on a given port. A user is identified by a MAC address and VLAN ID. If Port Security is enabled on a port, the limit specifies the maximum number of users on the port. If this number is exceeded, an action is taken depending on violation mode.
User’s Manual of SGS-5240 Series Managed Switch 4.7.8 DAI – Dynamic ARP Inspection Dynamic ARP Inspection is a secure feature. Several types of attacks can be launched against a host or devices connected to Layer 2 networks by "poisoning" the ARP caches. This feature is used to block such attacks. Only valid ARP requests and responses can go through DUT. 4.7.8.
User’s Manual of SGS-5240 Series Managed Switch 4.7.8.3 Interface Configuration The Security > DAI > Interface Configuration page is used to specify the ports that require ARP inspection, and to adjust the packet inspection rate. Port – Port or trunk identifier. Mode – Configures the port as trusted or untrusted. (Default: Untrusted) By default, all untrusted ports are subject to ARP packet rate limiting, and all trusted ports are exempt from ARP packet rate limiting.
User’s Manual of SGS-5240 Series Managed Switch 4.7.8.4 Statistics The Security > DAI > Statistics page is used to display statistics about the number of ARP packets processed, or dropped for various reasons. 4.7.8.5 Log The Security > DAI > Log page is used to show information about entries stored in the log, including the associated VLAN, port, and address components.
User’s Manual of SGS-5240 Series Managed Switch 4.7.9 Login IP Management 4.7.9.1 Login IP Management The Security > Login IP Management page is used to create a list of up to 15 IP addresses or IP address groups that are allowed management access to the switch through the web interface, SNMP, or Telnet. Login Type Web – Configures IP address(es) for the web group. SNMP – Configures IP address(es) for the SNMP group. Telnet – Configures IP address(es) for the Telnet group.
User’s Manual of SGS-5240 Series Managed Switch 4.7.10 DoS Protection The Security > DoS Protection page is used to protect against denial-of-service (DoS) attacks. A DoS attack is an attempt to block the services provided by a computer or network resource. Echo/Chargen Attack – Attacks in which the echo service repeats anything sent to it, and the chargen (character generator) service generates a continuous stream of data.
User’s Manual of SGS-5240 Series Managed Switch 4.7.11 IPv4 DHCP Snooping 4.7.11.1 Global Configuration Security > IPv4 DHCP Snooping > Global Configuration page is used to enable DHCP Snooping globally on the switch, or to configure MAC Address Verification. DHCP Snooping Status – Enables DHCP snooping globally. (Default: Disabled) DHCP Snooping MAC-Address Verification – Enables or disables MAC address verification.
User’s Manual of SGS-5240 Series Managed Switch 4.7.11.2 VLAN Configuration Security > IPv4 DHCP Snooping > VLAN Configuration page is used to enable or disable DHCP snooping on specific VLANs. VLAN – ID of a configured VLAN. (Range: 1-4093) DHCP Snooping Status – Enables or disables DHCP snooping for the selected VLAN. When DHCP snooping is enabled globally on the switch, and enabled on the specified VLAN, DHCP packet filtering will be performed on any untrusted ports within the VLAN.
User’s Manual of SGS-5240 Series Managed Switch 4.7.11.4 Legal Client Table Security > IPv4 DHCP Snooping > Legal Client Table page is used to display entries in the binding table. MAC Address – Physical address associated with the entry. IP Address – IP address corresponding to the client. Lease Time – The time for which this IP address is leased to the client. Type – Entry types include: DHCP-Snooping – Dynamically snooped. Static-DHCPSNP – Statically configured.
User’s Manual of SGS-5240 Series Managed Switch 4.7.12 IPv6 DHCP Snooping 4.7.12.1 Global Configuration Security > IPv6 DHCP Snooping > Global Configuration page is used to enable DHCPv6 Snooping globally on the switch, or to configure MAC Address Verification. ◆DHCPv6 Snooping Status–Enables DHCPv6 snooping globally.(Default: Disabled) ◆DHCPv6 Snooping Option Remote ID–Enables the insertion of remote-id option 37 information into DHCPv6 client messages.
User’s Manual of SGS-5240 Series Managed Switch 4.7.12.2 VLAN Configuration Security > IPv6 DHCP Snooping > VLAN Configuration page is used to enable or disable DHCPv6 snooping on specific VLANs. VLAN–ID of a configured VLAN.
User’s Manual of SGS-5240 Series Managed Switch 4.7.12.3 Interface Configuration Security > IPv6 DHCP Snooping > Interface Configuration page is used to configure switch interfaces as trusted or untrusted, and set the maximum number of entries which can be stored in the binding database for an interface. ◆ Interface–Port or group identifier. ◆Trust Status –Enables or disables an interface as trusted.
User’s Manual of SGS-5240 Series Managed Switch Link-layer Address–IPv6 link-layer address associated with the entry. IPv6 Address–IPv6 address corresponding to the client. Lifetime–The time (number of seconds) for which this IPv6 address is leased to the client. VLAN–VLAN to which this entry is bound. Interface–Port or group to which this entry is bound. Type–Entry types include: NA–Non-temporary address. TA –Temporary address.
User’s Manual of SGS-5240 Series Managed Switch dynamic entries discovered by DHCP snooping and static entries set by IP source guard. 4.7.13.2 Static Table Security > IPv4 Source Guard > Static Table page is used to bind a valid static IP source guard entry to a port in ACL mode. ◆Port–The port to which a static entry is bound. ◆VLAN–ID of a configured VLAN (Range: 1-4094) ◆ MAC Address–A valid unicast MAC address. ◆IP Address –A valid unicast IP address, including classful types A, B or C. 4.7.13.
User’s Manual of SGS-5240 Series Managed Switch 4.7.14 IPv6 Source Guard 4.7.14.1 Interface Configuration Security > IPv6 Source Guard > Interface Configuration page is used to filter inbound traffic based on the source IPv6 address stored in the binding table. ◆Port –Port identifier. ◆Filter Type–Configures the switch to filter inbound traffic based on the following options. (Default: Disabled) Disabled–Disables IPv6 source guard filtering on the port.
User’s Manual of SGS-5240 Series Managed Switch 4.7.14.2 Static Table Use the Security > IPv6 Source Guard > Static Table page to bind a static address to a port. Table entries include a MAC address, IPv6 global unicast address, entry type (Static-IPv6-SG-Binding, Dynamic-ND-Binding, Dynamic-DHCPv6-Binding), VLAN identifier, and port identifier. ◆Port–The port to which a static entry is bound. ◆VLAN–ID of a configured VLAN (Range: 1-4094) ◆MAC Address–A valid unicast MAC address.
User’s Manual of SGS-5240 Series Managed Switch –Port to which this entry is bound. IPv6 Address–IPv6 address corresponding to the client. Type –Shows the entry type: DHCP–Dynamic DHCPv6 binding, stateful address. ND–Dynamic Neighbor Discovery binding, stateless address. Interface 4.7.15 Application Filter Use the Security > Application Filter page to forward CDP or PVST packets.
User’s Manual of SGS-5240 Series Managed Switch 4.7.16 CPU Guard Use the Security > CPU Guard page to set the CPU utilization high and low watermarks in percentage of CPU time utilized and the CPU high and low thresholds in the number of packets being processed per second. CPU Guard Status–Enables CPU Guard.
User’s Manual of SGS-5240 Series Managed Switch 4.8 Device Management 4.8.1 SNMP The Simple Network Management Protocol (SNMP) is an application layer protocol that facilitates the exchange of management information between network devices. It is part of the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol suite. SNMP enables network administrators to manage network performance, find and solve network problems, and plan for network growth.
User’s Manual of SGS-5240 Series Managed Switch 4.8.1.1 Global Configuration Device Management > SNMP > Global Configuration page is used to enable SNMPv3 service for all management clients (i.e., versions 1, 2c, 3), and to enable trap messages. ◆Agent Status – Enables SNMP on the switch. (Default: Enabled) ◆Invalid Community Authentication Trap – Issues a notification message to specified IP trap managers whenever an invalid community string is submitted during the SNMP access authentication process.
User’s Manual of SGS-5240 Series Managed Switch 4.8.1.3 View Configuration Device Management > SNMP > View Configuration page is used to configureSNMPv3 views which are used to restrict user access to specified portions of the MIB tree. The predefined view “defaultview” includes access to theentire MIB tree. Add View View Name – The name of the SNMP view. (Range: 1-64 characters) OID Subtree – Specifies the initial object identifier of a branch within the MIB tree.
User’s Manual of SGS-5240 Series Managed Switch ◆Security Level – The following security levels are only used for the groups assigned to the SNMP security model: noAuthNoPriv – There is no authentication or encryption used in SNMP communications. (This is the default security level.) AuthNoPriv – SNMP communications use authentication, but the data is not encrypted. AuthPriv – SNMP communications use both authentication and encryption. ◆Read View – The configured view for read access.
User’s Manual of SGS-5240 Series Managed Switch 4.8.1.6 Remote User Device Management > SNMP > Remote User page is used to identify the source of SNMPv3 inform messages sent from the local switch. Each SNMPv3 user is defined by a unique name. Users must be configured with a specific security level and assigned to a group. The SNMPv3 group restricts users to a specific read, write, and notify view. User Name – The name of user connecting to the SNMP agent.
User’s Manual of SGS-5240 Series Managed Switch Inform – Notifications are sent as inform messages. Note that this option is only available for version 2c and 3 hosts. (Default: traps are used) Timeout – The number of seconds to wait for an acknowledgment before resending an inform message.(Range: 0-2147483647 centiseconds; Default: 1500 centiseconds) Retry times – The maximum number of times to resend an inform message if the recipient does not acknowledge receipt.
User’s Manual of SGS-5240 Series Managed Switch 4.8.1.8 Statistics Device Management > SNMP > Statistics page is used to show counters for SNMP input and output protocol data units. SNMP packets input – The total number of messages delivered to the SNMP entity from the transport service. Bad SNMP version errors – The total number of SNMP messages which were delivered to the SNMP entity and were for an unsupported SNMP version.
User’s Manual of SGS-5240 Series Managed Switch No such name errors – The total number of SNMP PDUs which were delivered to, or generated by, the SNMP protocol entity and for which the value of the error-status field is “noSuchName.” Bad values errors – The total number of SNMP PDUs which were delivered to, or generated by, the SNMP protocol entity and for which the value of the error-status field is “badValue.
User’s Manual of SGS-5240 Series Managed Switch Falling Threshold – If the current value is less than or equal to the falling threshold, and the last sample value was greater than this threshold, then an alarm will be generated. After a falling event has been generated, another such event will not be generated until the sampled value has risen above the falling threshold, reaches the rising threshold, and again moves back down to the failing threshold.
User’s Manual of SGS-5240 Series Managed Switch 4.8.2.3 History Group Device Management > RMON > History Group page is used to collect statistics on a physical interface to monitor network utilization, packet types, and errors. A historical record of activity can be used to track down intermittent problems. Port – The port number on the switch. Index - Index to this entry. (Range: 1-65535) Interval - The polling interval.
User’s Manual of SGS-5240 Series Managed Switch These parameters are displayed: Port – The port number on the switch. Index - Index to this entry. (Range: 1-65535) Owner - Name of the person who created this entry. (Range: 1-127 characters) 4.8.3 Cluster Clustering is a method of grouping switches together to enable centralized management through a single unit.
User’s Manual of SGS-5240 Series Managed Switch 4.8.3.2 Member Configuration The Device Management > Cluster > Member Configuration page is used to add Candidate switches to the cluster as Members. ◆Member ID – Specify a Member ID number for the selected Candidate switch. (Range: 1-36) ◆MAC Address – Select a discovered switch MAC address from the Candidate Table, or enter a specific MAC address of a known switch. 4.8.3.
User’s Manual of SGS-5240 Series Managed Switch 4.8.4.2 Domain Names Device Management > DNS > Domain Names page is used to configure a list of name servers to be tried in sequential order. Name Server IP Address – Specifies the IPv4 or IPv6 address of a domain name server to use for name-to-address resolution. Up to six IP addresses can be added to the name server list. 4.8.4.
User’s Manual of SGS-5240 Series Managed Switch 4.8.4.5 Current DNS Information Device Management > DNS > Current DNS Information page is used to display entries in the DNS cachethat have been learned via the designated name servers. ◆ID. – The entry number for each resource record. ◆Type – This field includes CNAME which specifies the host address for the owner, and ALIAS which specifies an alias. ◆IP address– The IP address associated with this record.
User’s Manual of SGS-5240 Series Managed Switch 4.8.5.2 Relay ◆L3 Interface VLAN ID–ID of configured VLAN. ◆Server IP Address–Addresses of DHCP servers or relay servers to be used by the switch’s DHCP relay agent in order of preference. ◆Restart DHCP Relay–Use this button to re-initialize DHCP relay service. 4.8.5.3 Relay Option82 ◆Insertion of Relay Information–Enable DHCP Option 82 information relay.
User’s Manual of SGS-5240 Series Managed Switch 4.8.6 OAM 4.8.6.1 Interface The Device Management > OAM > Interface page is used to enable OAM functionality on the selected port. Not all CPEs support operation and maintenance functions, so OAM is therefore disabled by default. If a CPE supports OAM, this functionality must first be enabled on the connected port to gain access to the configuration functions provided under the OAM menu. ◆Port – Port identifier.
User’s Manual of SGS-5240 Series Managed Switch 4.8.6.2 Statistics The Device Management > OAM > Statistics page is used to display statistics for thevarious types of OAM messages passed across each port. ◆Port – Port identifier. (Range: 1-28) ◆Clear – Clears statistical counters for the selected ports. ◆OAMPDU – Message types transmitted and received by the OAM protocol, including Information OAMPDUs, unique Event OAMPDUs, Loopback Control OAMPDUs, and Organization Specific OAMPDUs. 4.8.6.
User’s Manual of SGS-5240 Series Managed Switch Port – Port identifier. (Range: 1-28) MAC Address – MAC address of the OAM peer. OUI – Organizational Unit Identifier of the OAM peer. Remote Loopback – Shows if remote loopback is supported by the OAM peer. Unidirectional Function – Shows if this function is supported by the OAM peer.
User’s Manual of SGS-5240 Series Managed Switch 4.8.6.6 Loopback Test The Device Management > OAM > Loopback Test page is used to initiate a loop back test to the peer device attached to theselected port. Loopback Mode of Remote Device Port – Port identifier. (Range: 1-28) Loopback Mode – Shows if loop back mode is enabled on the peer. This attribute must be enabled before starting the loopback test. Loopback Status – Shows if loopback testing is currently running.
User’s Manual of SGS-5240 Series Managed Switch 4.8.7 CFM 4.8.7.1 Global Configuration Device Management > CFM > Global Configuration page is used to configure global settings for CFM, such as enabling the CFM process on the switch, setting the start-up delay for cross-check operations, configuring parameters for the link trace cache, and enabling traps for events discovered by continuity check messages or cross-check messages.
User’s Manual of SGS-5240 Series Managed Switch from each MIP along the path and from the target MEP. Information stored in the cache includes the maintenance domain name, MA name, MEPID, sequence number, and TTL value. Link Trace Cache Hold Time – The hold time for CFM link trace cache entries. (Range: 1-65535 minutes; Default: 100 minutes) Before setting the aging time for cache entries, the cache must first be enabled in the Linktrace Cache attribute field.
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.2 Interface Configuration CFM processes are enabled by default for all physical interfaces, both ports and trunks. You can use the Device Management > CFM > Interface Configuration page to change these settings. 4.8.7.3 MD Management Device Management > CFM > MD Management pages is used to create and configure a Maintenance Domain (MD) which defines a portion of the network for which connectivity faults can be managed.
User’s Manual of SGS-5240 Series Managed Switch MD Index – Domain index. (Range: 1-65535) MD Name – Maintenance domain name. (Range: 1-43 alphanumeric characters) MD Level – Authorized maintenance level for this domain.
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.5 MA Management Device Management > CFM > MA Management pages is used to create and configure the Maintenance Associations (MA) which define a unique CFM service instance. Each MA can be identified by its parent MD, the MD’s maintenance level, the VLAN assigned to the MA, and the set of maintenance end points (MEPs) assigned to it. Creating a Maintenance Association MD Index – Domain index. (Range: 1-65535) MA Index – MA identifier.
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.6 MA Details Device Management > CFM > MA Details page is used to configure details of specify MA. Configuring Detailed Settings for a Maintenance Association MD Index – Domain index. (Range: 1-65535) MA Index – MA identifier. (Range: 1-2147483647) MA Name Format – Specifies the name format for the maintenance association as IEEE 802.1ag character based, or ITU-T SG13/SG15 Y.1731 defined ICC-based format. Character String – IEEE 802.
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.7 MEP Management Device Management > CFM > MEP Management page is used to configure Maintenance End Points (MEPs). MEPs, also called Domain Service Access Points (DSAPs), must be configured at the domain boundary to provide management access for each maintenance association. MD Index – Domain index. (Range: 1-65535) MA Index – MA identifier. (Range: 1-2147483647) MEP ID – Maintenance end point identifier.
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.9 Transmit Link Trace Device Management > CFM > Transmit Link Trace page is used to transmit link trace messages (LTMs). These messages can isolate connectivity faults by tracing the path through a network to the designated target node (i.e., a remote maintenance end point). MD Index – Domain index. (Range: 1-65535) MA Index – MA identifier.
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.10 Transmit Loopback Device Management > CFM > Transmit Loopback page is used to transmit Loopback Messages (LBMs). These messages can be used to isolate or verify connectivity faults by submitting a request to a target node (i.e., a remote MEP or MIP) to echo the message back to the source. MD Index – Domain index. (Range: 1-65535) MA Index – MA identifier.
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.11 Transmit Delay Measure Device Management > CFM > Transmit Delay Measure page is used to send periodic delay-measure requests to a specified MEP within a maintenance association. MD Index – Domain index. (Range: 1-65535) MA Index – MA identifier. (Range: 1-2147483647) Source MEP ID – The identifier of a source MEP that will send the delay-measure message.
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.12 Show Local MEP Device Management > CFM > Show Local MEP page is used to show information for the MEPs configured on this device. MEP ID – Maintenance end point identifier. MD Name – Maintenance domain name. Level – Authorized maintenance level for this domain.
User’s Manual of SGS-5240 Series Managed Switch received or the local MEP record times out, the address will be set to the initial value of all Fs.) Defect Condition – Shows the defect detected on the MEP. Received RDI – Receive status of remote defect indication (RDI) messages on the MEP. AIS Status – Shows if MEPs within the specified MA are enabled to send frames with AIS information following detection of defect conditions. AIS Period – The interval at which AIS information is sent.
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.16 Show Remote MEP Details Device Management > CFM > Show Remote MEP Details is used page to show detailed information for MEPs located on other devices which have been discovered through continuity check messages, or statically configured in the MEP database and verified through cross-check messages. MD Index – Domain index. (Range: 1-65535) MA Index – MA identifier. (Range: 1-2147483647) MEP ID – Maintenance end point identifier.
User’s Manual of SGS-5240 Series Managed Switch 4.8.7.17 Show Link Trace Cache Device Management > CFM > Show Link Trace Cache page is used to show information about link trace operations launched from this device. Hops – The number hops taken to reach the target MEP. MA – Maintenance association name. IP/Alias – IP address or DNS alias of the target device’s CPU. Forwarded – Shows whether or not this link trace message was forwarded. A message is not forwarded if received by the target MEP.
User’s Manual of SGS-5240 Series Managed Switch MEP ID – Maintenance end point identifier. MD Name – Maintenance domain name. MA Name – Maintenance association name. Highest Defect – The highest defect that will generate a fault alarm. (This is disabled by default.) Lowest Alarm – The lowest defect that will generate a fault alarm. Alarm Time – The time a defect must exist before a fault alarm is issued.
User’s Manual of SGS-5240 Series Managed Switch 4.8.8 Time Setting 4.8.8.1 Time Configuration The Device Management > Time Setting > Time Configuration page is used to set the system time on the switch manually without using SNTP. ◆Current Time – Shows the current time set on the switch. ◆Hours – Sets the hour. (Range: 0-23) ◆Minutes – Sets the minute value. (Range: 0-59) ◆Seconds – Sets the second value. (Range: 0-59) ◆Month – Sets the month. (Range: 1-12) ◆Day – Sets the day of the month.
User’s Manual of SGS-5240 Series Managed Switch 4.8.8.3 NTP Server The Device Management > Time Setting > NTP Server page is used to add the IP address for up to 50 NTP time servers. NTP Server IP Address – Adds the IPv4 or IPv6 address for up to 50 time servers. The switch will poll the specified time servers for updates when the clock maintenance type is set to NTP on the System > Time (Configure General) page. It issues time synchronization requests at a fixed interval of 1024 seconds.
User’s Manual of SGS-5240 Series Managed Switch 4.8.8.5 Time Zone Configuration The Device Management > Time Setting > Time Zone Configuration page is used to set the time zone. ◆Direction: Configures the time zone to be before (east of) or after (west of) UTC. ◆Name – Assigns a name to the time zone. (Range: 1-30 characters) ◆Hours (0-13) – The number of hours before/after UTC. The maximum value before UTC is 12. The maximum value after UTC is 13.
User’s Manual of SGS-5240 Series Managed Switch Status option has been set to enabled for the switch.) Predefined Mode – Configures the summer time status and settings for the switch using predefined configurations for several major regions of the world. To specify the time corresponding to your local time when summer time is in effect, select the predefined summer-time zone appropriate for your location.
User’s Manual of SGS-5240 Series Managed Switch ◆Status – Enables/disables the logging of debug or error messages to the logging process. (Default: Enabled) ◆History Flash Level – Limits log messages saved to the switch’s permanent flash memory for all levels up to the specified level. For example, if level 3 is specified, all messages from level 0 to level 3 will be logged to flash.
User’s Manual of SGS-5240 Series Managed Switch 4.8.9.4 SMTP The Device Management > Event Log > SMTP page is used to alert system administrators of problems by sending SMTP (Simple Mail Transfer Protocol) email messages when triggered by logging events of a specified level. The messages are sent to specified SMTP servers on the network and can be retrieved using POP or IMAP clients. SMTP Status – Enables/disables the SMTP function.
User’s Manual of SGS-5240 Series Managed Switch 4.8.10 File Management Device Management> File Management page is used to manage the file in device. User can upload configuration file to PC, download runtime file to device. Copy a configuration file to another configuration file. 4.8.10.1 File download In the Device Management> File Management page, click copy button to download firmware or configuration settings using FTP, TFTP or HTTP.
User’s Manual of SGS-5240 Series Managed Switch 4.8.10.2 Saving Configuration In the Device Management> File Management page, click copy button to save the current configuration settings to a local file on the switch. The configuration settings are not automatically saved by the system for subsequent use when the switch is rebooted. You must save these settings to the current startup file, or to another file which can be subsequently set as the startup file. 4.8.10.
User’s Manual of SGS-5240 Series Managed Switch 4.8.11 Ping The Device Management > Ping page is used to send ICMP echo request packets to another node on the network. Host Name/IP Address – IP address or alias of the host. Probe Count – Number of packets to send. (Range: 1-16) Packet Size – Number of bytes in a packet. (Range: 32-512 bytes) The actual packet size will be eight bytes larger than the size specified because the switch adds header information. 4.8.
User’s Manual of SGS-5240 Series Managed Switch FE80::7272%1 identifies VLAN 1 as the interface from which the trace route is sent. 4.8.13 System Reboot The Device Management > System Reboot page is used to restart the switch immediately, at a specified time, after a specified delay, or at a periodic interval.
User’s Manual of SGS-5240 Series Managed Switch 5. SWITCH OPERATION 5.1 Address Table The SGS-5240 series is implemented with an address table. This address table is composed of many entries. Each entry is used to store the address information of some nodes in the network, including MAC address, port no, etc. This information comes from the learning process of SGS-5240 Series switch. 5.2 Learning When one packet comes in from any port, the SGS-5240 series will record the source address, port no.
User’s Manual of SGS-5240 Series Managed Switch 6. TROUBLESHOOTING This chapter contains information to help you solve issues. If the SGS-5240 series is not functioning properly, make sure the SGS-5240 series was set up according to instructions in this manual. ■ The Link LED is not lit. Solution: Check the cable connection and remove duplex mode of the SGS-5240 Series PoE Switch. ■ Some stations cannot talk to other stations located on the other port.
User’s Manual of SGS-5240 Series Managed Switch APPENDIX A: Networking Connection A.1 Switch's Data RJ45 Pin Assignments - 1000Mbps, 1000BASE-T PIN NO MDI MDI-X 1 BI_DA+ BI_DB+ 2 BI_DA- BI_DB- 3 BI_DB+ BI_DA+ 4 BI_DC+ BI_DD+ 5 BI_DC- BI_DD- 6 BI_DB- BI_DA- 7 BI_DD+ BI_DC+ 8 BI_DD- BI_DC- Implicit implementation of the crossover function within a twisted-pair cable, or at a wiring panel, while not expressly forbidden, is beyond the scope of this standard. A.
User’s Manual of SGS-5240 Series Managed Switch The standard cable, RJ45 pin assignment 6 32 1 6 321 6 3 21 The standard RJ45 receptacle/connector There are 8 wires on a standard UTP/STP cable and each wire is color-coded.
User’s Manual of SGS-5240 Series Managed Switch APPENDIX B : GLOSSARY A ACE ACE is an acronym for Access Control Entry. It describes access permission associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, and IPv4) and two ACE actions (permit and deny). The ACE also contains many detailed, different parameter options that are available for individual application. ACL ACL is an acronym for Access Control List.
User’s Manual of SGS-5240 Series Managed Switch Aggregation Using multiple ports in parallel to increase the link speed beyond the limits of a port and to increase the redundancy for higher availability. (Also Port Aggregation, Link Aggregation). ARP ARP is an acronym for Address Resolution Protocol. It is a protocol that used to convert an IP address into a physical address, such as an Ethernet address.
User’s Manual of SGS-5240 Series Managed Switch DHCP Relay DHCP Relay is used to forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain. The DHCP option 82 enables a DHCP relay agent to insert specific information into a DHCP request packets when forwarding client DHCP packets to a DHCP server and remove the specific information from a DHCP reply packets when forwarding server DHCP packets to a DHCP client.
User’s Manual of SGS-5240 Series Managed Switch Fast Leave IGMP snooping Fast Leave processing allows the switch to remove an interface from the forwarding-table entry without first sending out group specific queries to the interface. The VLAN interface is pruned from the multicast tree for the multicast group specified in the original leave message. Fast-leave processing ensures optimal bandwidth management for all hosts on a switched network, even when multiple multicast groups are in use simultaneously.
User’s Manual of SGS-5240 Series Managed Switch IGMP Querier A router sends IGMP Query messages onto a particular link. This router is called the Querier. IMAP IMAP is an acronym for Internet Message Access Protocol. It is a protocol for email clients to retrieve email messages from a mail server. IMAP is the protocol that IMAP clients use to communicate with the servers, and SMTP is the protocol used to transport mail to an IMAP server. The current version of the Internet Message Access Protocol is IMAP4.
User’s Manual of SGS-5240 Series Managed Switch LOC LOC is an acronym for Loss Of Connectivity and is detected by a MEP and is indicating lost connectivity in the network. Can be used as a switch criteria by EPS M MAC Table Switching of frames is based upon the DMAC address contained in the frame. The switch builds up a table that maps MAC addresses to switch ports for knowing which ports the frames should go to (based upon the DMAC address in the frame).
User’s Manual of SGS-5240 Series Managed Switch NFS NFS is an acronym for Network File System. It allows hosts to mount partitions on a remote system and use them as though they are local file systems. NFS allows the system administrator to store resources in a central location on the network, providing authorized users continuous access to them, which means NFS supports sharing of files, printers, and other resources as persistent storage over a computer network.
User’s Manual of SGS-5240 Series Managed Switch An alternative protocol is Internet Message Access Protocol (IMAP). IMAP provides the user with more capabilities for retaining e-mail on the server and for organizing it in folders on the server. IMAP can be thought of as a remote file server. POP and IMAP deal with the receiving of e-mail and are not to be confused with the Simple Mail Transfer Protocol (SMTP). You send e-mail with SMTP, and a mail handler receives it on your recipient's behalf.
User’s Manual of SGS-5240 Series Managed Switch given hardware address, such as an Ethernet address. RARP is the complement of ARP. RADIUS RADIUS is an acronym for Remote Authentication Dial In User Service. It is a networking protocol that provides centralized access, authorization and accounting management for people or computers to connect and use a network service. RDI RDI is an acronym for Remote Defect Indication.
User’s Manual of SGS-5240 Series Managed Switch SPROUT Stack Protocol using ROUting Technology. An advanced protocol for almost instantaneous discovery of topology changes within a stack as well as election of a master switch. SPROUT also calculates parameters for setting up each switch to perform shortest path forwarding within the stack. SSID Service Set Identifier is a name used to identify the particular 802.11 wireless LANs to which a user wants to attach.
User’s Manual of SGS-5240 Series Managed Switch Telnet session, the client user must log in to a server by entering a valid username and password. Then, the client user can enter commands through the Telnet program just as if they were entering commands directly on the server console. TFTP TFTP is an acronym for Trivial File Transfer Protocol.
User’s Manual of SGS-5240 Series Managed Switch one VLAN, set up with this Port VLAN ID, and transmit untagged frames. Provider switching: This is also known as Q-in-Q switching. Ports connected to subscribers are VLAN unaware, members of one VLAN, and set up with this unique Port VLAN ID. Ports connected to the service provider are VLAN aware, members of multiple VLANs, and set up to tag all frames. Untagged frames received on a subscriber port are forwarded to the provider port with a single VLAN tag.
User’s Manual of SGS-5240 Series Managed Switch WRED WRED is an acronym for Weighted Random Early Detection. It is an active queue management mechanism that provides preferential treatment of higher priority frames when traffic builds up within a queue. A frame's DP level is used as input to WRED. A higher DP level assigned to a frame results in a higher probability that the frame is dropped during times of congestion. WTR WTR is an acronym for Wait To Restore.
