User’s Manual of WSD-800 / WGSD-910/WGSD-1022C User's Manual WSD-800 8-Port 10/100Mbps WGSD-910 8-Port 10/100Mbps + 1 Gigabit TP/SFP Combo WGSD-1022C 8-Port 10/100Mbps + 2 Gigabit TP/SFP Combo Managed Ethernet Switch -1-
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Trademarks Copyright © PLANET Technology Corp. 2008. Contents subject to which revision without prior notice. PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their respective owners.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Table of Contents 1. INTRODUCTION................................................................................................................................. 6 1.1 PACKET CONTENTS .........................................................................................................................6 1.2 HOW TO USE THIS MANUAL .............................................................................................................6 1.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.4.8 Load Default ........................................................................................................................34 4.4.9 Reboot .................................................................................................................................34 4.5 PORT MANAGEMENT ......................................................................................................................35 4.5.1 Port Configuration ...........
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 6.1 CONSOLE PORT PIN ASSIGNMENTS ................................................................................................96 6.2 100BASE-TX/10BASE-T PIN ASSIGNMENTS ................................................................................97 7. APPENDIX-B ....................................................................................................................................98 802.1Q VLAN MULTI-UNTAGGED VLAN SETTING SAMPLE 1 ...........
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 1. INTRODUCTION 1.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 1.3 Product Feature ▫ Complies with IEEE 802.3, 10Base-T, IEEE 802.3u, 100Base-TX, IEEE 802.3ab, 1000Base-T, IEEE 802.3z, 1000Base-SX/LX ▫ 8-Port 10/100Mbps TP interfaces (WSD-800) ▫ 8-Port 10/100Mbps TP interfaces with 1 port Gigabit combo (WGSD-910) ▫ 8-Port 10/100Mbps TP interfaces with 2 port Gigabit combo (WGSD-1022C) ▫ High back-plane bandwidth 1.6Gbps / 3.6Gbps / 5.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Switch Throughput 1.19Mpps 2.67Mpps 4.16Mpps Switch Architecture Store-and-Forward Address Table 8K entries Share data Buffer 1Mbit Maximum Frame Size 1522 Bytes packet Flow Control Back pressure for half duplex, IEEE 802.3x Pause Frame for full duplex LED Power, Link/Act and speed per port Console Interface One RS-232 DB-9 male connector for Switch management Power requirement 110~240V AC, 50/60Hz Power Consumption 12.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Security MAC filtering and Binding, up to 400 rules RFC-1213 MIB-II RFC-2863 Interface MIB RFC-2665 EtherLike MIB RFC-1493 Bridge MIB SNMP MIBs RFC-2674 Extended Bridge MIB RFC-2819 RMON MIB (Group 1, 2, 3,9) RFC-2737 Entity MIB RFC-2618 RADIUS Client MIB Standards Conformance Regulation Compliance FCC Part 15 Class A, CE IEEE 802.3 10Base-T IEEE 802.3u 100Base-TX IEEE 802.3z Gigabit SX/LX IEEE 802.3ab Gigabit 1000Base-T IEEE 802.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 2. INSTALLATION This section describes the functionalities of the Switch's components and guides how to install it on the desktop or shelf. Basic knowledge of networking is assumed. Please read this chapter completely before continuing. 2.1 Product Description 2.1.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Figure 2-3 shows the front panel of WGSD-1022C. Figure 2-3 WGSD-1022C front panel. 2.1.3 LED Indications ■ WSD-800 ■ System LED Color Function PWR Green Lights to indicate that the Switch is powered on. SYS Green Lights to indicate the system is working. ■ Per 10/100Base-TX RJ-45 Port ( Port-1 to Port-8) LED Color Function LNK/ACT Orange Blink to indicate that the Switch is actively sending or receiving data over that port.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C ■ Gigabit TP/SFP interface (Port-9, WGSD-910), (Port-9, Port-10, WGSD-1022C) LED Color Function Lights to indicate the link through that port is successfully established. LNK/ACT Green Blink: indicate that the Switch is actively sending or receiving data over that port. SPEED Lights to indicate the port is running in 1000Mbps speed. Orange Off: indicate that the port is operating at 10Mbps or 100Mbps. 2.1.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 2.2 Install the Switch This section describes how to install the Ethernet Switch and make connections to it. Please read the following topics and perform the procedures in the order being presented. 2.2.1 Desktop Installation To install the Switch on desktop or shelf, please follows these steps: Step1: Attach the rubber feet to the recessed areas on the bottom of the Switch. Step2: Place the Switch on the desktop or the shelf near an AC power source.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 2.2.2 Rack Mounting To install the Switch in a 19-inch standard rack, please follows the instructions described below. Step1: Place the Switch on a hard flat surface, with the front panel positioned towards the front side. Step2: Attach the rack-mount bracket to each side of the Switch with supplied screws attached to the package. Figure 2-7 shows how to attach brackets to one side of the Switch. Figure 2-7 Attach brackets to the Switch.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 2.2.3 Installing the SFP transceiver The sections describe how to insert an SFP transceiver into an SFP slot. The SFP transceivers are hot-pluggable and hot-swappable. You can plug-in and out the transceiver to/from any SFP port without having to power down the Switch. As the Figure 2-9 appears. Figure 2-9 Plug-in the SFP transceiver Approved PLANET SFP Transceivers PLANET WGSD-910 / WGSD-1022C support both single mode and multi mode SFP transceiver.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Connect the fiber cable 1. Attach the duplex LC connector on the network cable into the SFP transceiver. 2. Connect the other end of the cable to a device – switches with SFP installed, fiber NIC on a workstation or a Media Converter. 3. Check the LNK/ACT LED of the SFP slot on the front of the Switch. Ensure that the SFP transceiver is operating correctly. 4. Check the Link mode of the SFP port if the link failed.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 3. CONSOLE MANAGEMENT 3.1 Connecting to the Switch The console port is a female DB-9 connector that enables a connection to a PC or terminal for monitoring and configuring the Switch. Use the supplied RS-232 cable with a male DB-9 connector to connect a terminal or PC to the Console port. The Console configuration (out of band) allows you to set Switch for remote terminal as if the console terminal were directly connected to it. 3.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C After finished the parameter settings, click “OK“. When the prompt shows “Switch>”, type “?” for help or type “enable” for further configuration. The system needs password for further configuration. After the “enable” command, the system asks for password, please enter “admin” for the default password. As shows in the following screen: Console login screen 3.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 3.4 Telnet login The Switch also supports telnet for remote management. The Switch asks for user name and password for remote login when using telnet, please use “admin” for username and “admin” for password. 3.5 Commands There are two levels for console commands. The first level provides commands to show system informations and current configurations. The second level (privileged mode) provides commands to set clear and show the configuration. 3.5.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C show qos map dot1p-cos-map Show qos map cos-queue-map show qos map mac-cos-map Show qos map mac-cos-map show qos map port-cos-map Show each port's cos show qos map vlan-cos-map Show qos map vlan-cos-map show qos queue egress-policy Show qos queue egress-policy show radius Show radius information show security MAC-aging Show MAC aging time show security filter-MAC Show MAC filter entry show security mac-learning Show port security status show s
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C clear port spantree portpri Restore spanning tree port priority to default value clear port storm-limit Clear strom limit of all ports clear qos map cos-queue-map Reset cos-queue map to default clear qos map dot1p-cos-map Reset dot1p_cos map to default clear qos map mac-cos-map Clear qos map mac-cos-map clear qos map vlan-cos-map Clear qos map vlan-cos-map clear radius key Clear radius share key clear security filter-MAC Clear MAC filter entry c
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 3.5.2.4 Reboot command Reboot command is to reboot the Switch, please beware to check if the configuration is saved.. Command Description Reboot Reboot system 3.5.2.5 Set command Set command is to change the parameter of the Switch functions. The follow table lists the set commands and the equivalent usages.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C set ipstack disable Set ipstack disable set ipstack group Set ipstack group STR set ipstack mac-addr Set ipstack mac-addr set ipstack mode Set ipstack mode master/client set ipstack system-priority Set ipstack system-priority set mirror Enable/Disable mirror function set mirror capture-port Set a port to capture traffic set mirror monitored-port egress Capture egress traffic set mirror monitored-port ingress Capture ingress traffic set multica
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C set security mac-learning Set port leanrning MAC (enable|disable) set security static-MAC Create static MAC entry set snmp Enable/Disable snmp agent set snmp community Set snmp community string set snmp rmon Enable/Disable rmon state set snmp trap Set snmp trap receive host set spantree disable Disable spanning tree set spantree enable Enable spaning tree set spantree fwddelay Set the forward delay for the spanning tree set spantree hello Set
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C show igmp-snooping Show igmp snooping information show ip http server Show http server information show ip telnet server Show telnet server information show ipstack info Show ipstack info show mirror Show mirror information show multicast router Show multicast router port information show port counter Show port counter information show port dot1x Show dot1x information show port mac-learning Show MACs on certain port show port rate-shaping Sh
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4. WEB-BASED MANAGEMENT This section introduces the configuration and functions of the Web-Based management. 4.1 About Web-based Management The Switch offers management features that allow users to manage the Switch from anywhere on the network through a standard browser such as Microsoft Internet Explorer. The Web-Based Management supports Internet Explorer 6.0.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C WSD-800 Web Management Interface 4.4 System 4.4.1 IP Configuration The Switch can be managed by the Web/Telnet/SNMP interfaces. Administrators can access the management interface via the IP address of the Switch. The default IP address of the Switch is 192.168.0.100. You can change the IP address to be in the same IP segment as your LAN network for convinence. To change the IP address, click on the System / IP Address menu button.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C IP Address Configuration NOTE: 1. The Switch’s factory-default IP address is 192.168.0.100 with Submask 255.255.255.0 and a default gateway of 192.168.0.254 2. The changed IP address take effect immediately after click on the OK button, you need to use the new IP address to access the Web interface. 3. The changed IP address remains the original after reboot the Switch unless the configuration is saved.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C SNMP Operations SNMP itself is a simple request/response protocol. NMSs can send multiple requests without receiving a response. 。 Get -- Allows the NMS to retrieve an object instance from the agent. 。 Set -- Allows the NMS to set values for object instances within an agent. 。 Trap -- Used by the agent to asynchronously inform the NMS of some event. The SNMPv2 trap message is designed to replace the SNMPv1 trap message.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 2. System Options This table is to define the system name, system location and the contact person of the Switch. These informations show in the SNMP software of the management workstation which helps to identify the Switch that is looking into. There are three fields in the “system options” configuration block: 。 System Name: The system name of the Switch which would show in the SNMP software.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4. Management Station Configuration A trap manager is a management station (SNMP application) that receives traps (the system alerts generated by the Switch). If no trap manager is defined, no traps are issued. Create a trap manager by entering the IP address of the station and a community string. 。 Enter Network management stations IP address: 192.168.0.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.4.3 Password The Password management menu is to set or change the password of the Web Management Interface. Click on System/Password menu button, and the Modify Password table shows in the main web page. Enter “old password “, “new password”, “confirm password” Click “OK” to change the password. 4.4.4 CONSOLE This function shows the connection parameters for the Console Management Interface.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.4.6 Saving Parameters It takes effect immediately when you change the parameters of the management function when the Switch is running. But the parameters would not be saved after reboot the Switch. To keep the changed parameters, Click on the System/Saving Parameters menu button, and click on the “Save” button on the web main page as show in the following. 4.4.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.4.8 Load Default This function is to reset the configuration of Switch to the factory default. Click on the System/Load Default menu button, and the following table shows in the web main page. CAUTION: This operation will result in all the parameters losing. 4.4.9 Reboot This function is to reboot the system.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.5 Port Management 4.5.1 Port Configuration This function is to configure and to view the configured port management status, port negotiation mode and the port flow control function. 。 Management Status: Display port status: Enable or Disable. Disable is to turn off the port. 。 Link Status: “Up” to indicate the port is linked while “Down” to indicate the port is not connectd. 。 Speed: Shows the negotiation mode and the running speed on the port.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.5.3 Port Band Restrict The function provides the In-Band and Out-Band connection speed restriction on the ports. The Band of the connection speed rangs from 64Kbps to 80000Kbps. Ingress Port List/Egress Port List field can be filled in distinct number or a port range. For example, you can fill with “1, 3” for port 1 and port 3 and “3-5” for port 3 to port 5. Band(64~80000Kbps) field can be filled with any number between 64 and 80000.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Spanning Tree Algorithm and protocol are a complicated and complex subject and must be fully researched and understood. It is possible to cause serious degradation of the performance of the network if the Spanning Tree is incorrectly configured. Please read the following before making any changes from the default values. The Switch STP performs the following functions: 。 Creates a single spanning tree from any combination of switching or bridging elements.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C STP Port States The BPDUs take some time to pass through a network. This propagation delay can result in topology changes where a port that transitioned directly from a Blocking state to a Forwarding state could create temporary data loops. Ports must wait for new network topology information to propagate throughout the network before starting to forward packets.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C You can modify each port state by using management software. When you enable STP, every port on every switch in the network goes through the blocking state and then transitions through the states of listening and learning at power up. If properly configured, each port stabilizes to the forwarding or blocking state. No packets (except BPDUs) are forwarded from, or received by, STP enabled ports until the forwarding state is enabled for that port. 2.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C The following are the user-configurable STP parameters for the port or port group level: Variable Description Default Value Port Priority A relative priority for each 32768 port –lower numbers give a higher priority and a greater chance of a given port being elected as the root port Port Cost A value used by STP to evaluate paths – 19-100Mbps Fast Ethernet ports STP calculates path costs and selects the 4-1000Mbps Gigabit Ethernet ports path with the
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Max. Age _ 2 x (Hello Time + 1 second) Port Priority – A Port Priority can be from 0 to 255. The lower the number, the greater the probability the port will be chosen as the Root Port. Port Cost – A Port Cost can be set from 0 to 65535. The lower the number, the greater the probability the port will be chosen to forward packets. 3. Illustration of STP A simple illustration of three switches connected in a loop is depicted in Figure 5-7.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C LAN 1 A Port 3 Root Bridge Port 1 Port 2 Designated Port Designated Port Root Port B Root Port C Port 1 Port 1 Designated Bridge Port 2 Blocked Port 3 LAN 2 Port 2 Port 3 LAN 3 After Applying the STA Rules The switch with the lowest Bridge ID (switch C) was elected the root bridge, and the ports were selected to give a high port cost between switches B and C.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 2. Bridge Information The informations of the STP Root show in the Bridge Information table. 3. STP Port Configuration On the STP port configuration, the settings are implemented on a. per user-defined Group of ports. The following fields can be set for STP port configuration: Edge Port: Defines if this port connected directly to a single workstation, or this port that is directly connected to a LAN segment where a loop cannot be created.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C unless manually overridden through configuration. The link type attached to this port could be selected as following: 。 Auto - The switch automatically determines if the interface is attached to a point-to-point link or to shared media 。 True – A connection to exactly one other bridge. 。 False - A connection to two or more bridges. Port Priority: Defines if this port is more or less likely to become the root port.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.6.3 Link Aggregation Link aggregation can be used to increase the bandwidth of a network connection or to ensure fault recovery. Link aggregation lets you group up consecutive ports into a single dedicated connection between any two of the Switches or other Layer 2 switches. However, before making any physical connections between devices, use the Link Aggregation menu to specify the link aggregation on the devices at both ends.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.7 Security 4.7.1 VLAN 4.7.1.1 Theory Understanding IEEE 802.1p Priority Priority tagging is a function defined by the IEEE 802.1p standard designed to provide a means of managing traffic on a network where many different types of data may be transmitted simultaneously. It is intended to alleviate problems associated with the delivery of time critical data over congested networks.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C that packets are forwarded only between ports within the VLAN. Typically, a VLAN corresponds to a particular subnet, although not necessarily. VLAN can enhance performance by conserving bandwidth, and improve security by limiting traffic to specific domains. A VLAN is a collection of end nodes grouped by logic instead of physical location.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C headers. The tagging feature allows VLAN to span multiple 802.1Q-compliant switches through a single physical connection and allows Spanning Tree to be enabled on all ports and work normally. Any port can be configured as either tagging or untagging. The untagging feature of IEEE 802.1Q VLAN allow VLAN to work with legacy switches that don’t recognize VLAN tags in packet headers. The tagging feature allows VLAN to span multiple 802.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 802.1Q Tag User Priority CFI 3 bits TPID (Tag Protocol Identifier) 1 bits Destination Source Address Address 6 bytes 12 bits TCI (Tag Control Information) 2 bytes Preamble VLAN ID (VID) 2 bytes VLAN TAG Ethernet Data FCS Type 6 bytes 4 bytes 2 bytes 46-1517 bytes 4 bytes The Ether Type and VLAN ID are inserted after the MAC source address, but before the original Ether Type/Length or Logical Link Control.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Because some devices on a network may be tag-unaware, a decision must be made at each port on a tag-aware device before packets are transmitted – should the packet to be transmitted have a tag or not? If the transmitting port is connected to a tag-unaware device, the packet should be untagged. If the transmitting port is connected to a tag-aware device, the packet should be tagged.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 6. Click on the “Close” button and back to the Port-based VLAN main page. The “Show VLAN Member” button is to list the valid VLANs. You can also remove the added VALN by click on this button. 802.1Q VLAN Configuration There are up to 256 configurable VLAN groups. By default when 802.1Q is enabled, all ports on the switch belong to default VLAN (VID 1). The default VLAN cannot be deleted.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C only used internally within the Switch). Untagging is used to send packets from an 802.1Q-compliant network device to a non-compliant network device. Frame Income Income Frame is tagged Income Frame is untagged Leave port is tagged Frame remains tagged Tag is inserted Leave port is untagged Tag is removed Frame remain untagged Frame Leave Here pay attention to the explainion of “Access”, ”Always Untag”and “Trunk”. 。 Access: Ports will strip the 802.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C The main page then changes to the 802.1Q VLAN table which displays the VLAN configuration of each port. 2. If you want to configure port #2 to be in a VLAN other than default VLAN. Double click on “port2” to enter into VLAN port configuration window. 3. Choose the Link Type in the drop drop down menu: Access , Always Untag or Trunk. Note that if the Access type is chosen, it will strip the 802.1Q tag from all packets that out of this port.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 5. Trunk configuration: If the Trunk type is chosen, please follow the steps to set the Trunk of the port. 5.1 Add and define the names and VIDs for new VLANs. The VID number ranges from 2 to 4094. Fill the VID field and the VLAN Name field in the Set VLAN’s VID & Name table and click on the “Add/Modify” button to save. 5.2 The added new VLAN then shows the the VLAN Table field in the Set Trunk Port for VLAN table. 5.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.7.2 MAC Address Bind This function is based upon for the Switch security. When you add one MAC Address is bind with one port. It remains in the Switch's address table, regardless of whether the device is physically connected to the Switch. This saves the Switch from having to re-learn a device's MAC address after it has been disconnected or powered-off from the network, and then reconnected at some time later.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.7.3 MAC Address Filtering MAC address filtering allows the Switch to drop unwanted traffic. Traffic is filtered based on the destination addresses. To filter the MAC Address, click on the Security/MAC Address Filtering menu button, the main web page then shows the MAC Address Filtering function table. 1. Fill the MAC Address field with MAC address in the format “xx-xx-xx-xx-xx-xx “. 2. Click on the “Add” button to add. 3.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.7.4 MAC Address Learning The Switch is able to disable MAC Address learning function on ports. 1. Fill the Port List field in the MAC Address Learning table and select Enable/Disable in the MAC Address Learning field. 2. Click on the “OK” button to save. 4.7.5 MAC Address Aging Time The Aging Time affects the learning process of the Switch.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C percentage of received packets whose source addresses cannot be found in the forwarding table, in which case the Switch will broadcast the packet to all ports, negating many of the benefits of having a Switch. Static forwarding entries are not affected by the aging time. To set the Aging Time, enter the number in the MAC Address Aging Time field, and click on the “OK” button to save. The valid range is 30~1000 seconds. Default is 300 seconds. 4.7.6 802.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Device Roles With 802.1X port-based authentication, the devices in the network have specific roles as shown below. z Client—the device (workstation) that requests access to the LAN and switch services and responds to requests from the Switch. The workstation must be running 802.1X-compliant client software such as that offered in the Microsoft Windows XP operating system. (The client is the supplicant in the IEEE 802.1X specification.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Authentication Initiation and Message Exchange The Switch or the client can initiate authentication. If you enable authentication on a port by using the dot1x port-control auto interface configuration command, the Switch must initiate authentication when it determines that the port link state transitions from down to up.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Ports in Authorized and Unauthorized States The Switch port state determines whether or not the client is granted access to the network. The port starts in the unauthorized state. While in this state, the port disallows all ingress and egress traffic except for 802.1X protocol packets. When a client is successfully authenticated, the port transitions to the authorized state, allowing all traffic for the client to flow normally.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C If the link state of a port transitions from up to down, or if an EAPOL-logoff frame is received, the port returns to the unauthorized state. 4.7.6.2 802.1X Configuration This Switch has two 802.1X Mode: Radius Server & Local Authenticate choose one you need ● Local Authenticate — In this situation, do not need Radius server in the network, all authentication completed by 802.1x Switch，the normal topologies as below 1. Enter“802.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 。 Auto: enables 802.1X authentication and causes the port to begin in the unauthorized state, allowing only EAPOL frames to be sent and received through the port. It’s a default status 。 Force authorized: disables 802.1X authentication and causes the port to transition to the authorized state without any authentication exchange required. The port transmits and receives normal traffic without 802.1X-based authentication of the client.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C ● Radius Server — In this situation, need a Radius server in the network, the normal topologies as below 1. Select the “Radius Server” mode. 2.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C • RADIUS Server IP The IP address of the RADIUS server being added. Address • Authentication Port(1-65535) • Account Port(1-65535) The UDP port used by this server. The valid range is 0 - 65535. The default UDP Port No. is 1812 The UDP port used by accounting server. The valid range is 0 65535. The default UDP Port No. is 1813 • Share Key Indicates if the shared secret for this server has been configured. 3.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4. Configure ports attribute of 802.1X, the same as “802.1X Port Status Configuration”. NOTE: Set the Ports Authenticate Status to “Force Authorized” if the port is connected to the RADIUS server or the port is a uplink port that is connected to another switch. Or once the 802.1X stat to work, the switch might not be able to access the RADIUS server. 5. Create user data.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Enter ” Active Directory Users and Computers”, create legal user data, the next, right-click a user what you created to enter properties, and what to be noticed: -67-
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 6. The last, run your 802.1X Client 4.7.6.3 802.1X Client Configuration Windows XP is originally 802.1X support. As to other operating systems (windows 98SE, ME, 2000), an 802.1X client utility is needed. The following procedures show how to configure 802.1X Authentication in Windows XP. Please note that if you want to change the 802.1x authentication type of a wireless client, i.e.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4. Select “Authentication” tab. 5. Select “Enable network access control using IEEE 802.1X” to enable 802.1x authentication. 6. Select “MD-5 Challenge” from the drop-down list box for EAP type. 7. Click “OK”. 8. When wireless client has associated with WSD-800 / WGSD-910, a user authentication notice appears in system tray. Click on the notice to continue.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 9. Enter the user name, password and the logon domain that your account belongs. 10. Click “OK” to complete the validation process.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.8 QoS 4.8.1 Understand QOS Quality of Service (QoS) is an advanced traffic prioritization feature that allows you to establish control over network traffic. QoS enables you to assign various grades of network service to different types of traffic, such as multi-media, video, protocol-specific, time critical, and file-backup traffic. QoS reduces bandwidth limitations, delay, loss, and jitter.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 2. Apply a classifier to determine how the incoming traffic will be classified and thus treated by the Switch. 3. Create a QoS profile which associates a service level and a classifier. 4. Apply a QoS profile to a port(s). 4.8.2 QOS Configuration QoS settings allow customization of packet priority in order to facilitate delivery of data traffic that might be affected by latency problems. The IEEE 802.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 2. VLAN-COS Mapping QoS settings allow customization of VLAN ID to Traffic classifiers 1. Fill the VID (1-2094) field in the VLAN-CoS Mapping Table. 2. Fill the mapping number in the CoS (0-7) field. 3. Click on the “OK” button to save. 4. To remove the VLAN-CoS mapping item, simply click on the “Delete” button in the Show VLAN-CoS Mapping table.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 3. 802.1p-CoS Mapping QoS settings allow customization of packet priority in order to facilitate delivery of data traffic that might be affected by latency problems. The IEEE 802.1p Priority specification uses 8 priority levels to classify data packets. In 802.1p compliant devices, a tag inserted into the packet header is used to identify the priority level of data packets. 1. Fill the 802.1p Priority (0-7) field in the 802.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4. Port-COS Mapping QoS settings allow customization of VLAN ID to Traffic classifiers 1. Fill the Port List (e.g. 1-3,7) field in the port-based QoS Configuration Table. 2. Fill the mapping number in the CoS (0-7) field. 3. Click on the “OK” button to save. 5. COS-Queue Mapping 1. Fill the CoS (0-7) field in the CoS-Queue Mapping Configuration Table. 2. Fill the mapping number in the Queue (0-3) field. 3. Click on the “OK” button to save.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 6. Queue Management There are two rules for the Priority Queue: Weighted Round Robin (WRR) and Always Hight. To configure Queue Rule, select the Queue Policy drop down menu in the Queue Rule Configuration table. And Click on the “OK” button to save. If the WRR was chosen as the Queue Policy, the page would show in the main page.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.9 Multicast 4.9.1 IGMP Snooping Theory Computers and network devices that want to receive multicast transmissions need to inform nearby routers that they will become members of a multicast group. The Internet Group Management Protocol (IGMP) is used to communicate this information. IGMP is also used to periodically check the multicast group for members that are no longer active.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C A host will never send a report when it wants to leave a group (for version 1). A host will send a “leave” report when it wants to leave a group (for version 2). Multicast routers send IGMP queries (to the all-hosts group address: 224.0.0.1) periodically to see whether any group members exist on their sub networks. If there is no response from a particular group, the router assumes that there are no group members on the network.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.9.3 IGMP Port Policy For the security and management issue, the Switch is allowed to limiti the number of multicast groups by a specific port. With system default setting, all the learned Multicast groups are accepted and forwarded. Atter the IGMP Port Policy be configured on a specific port, the Switch will restrict the number of IGMP groups according to the parameter.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Configure Sample: 1. Select the Port field in the Set IGMP Port Policy Table, in this case, Port-2 be selected. 2. Fill the accepted number in the Group Number field. ( For this case, 4 multicast groups are allowed) 3. Click on the “OK” button to save. 4. The worksatation that connect to Port-2 start to send IGMP Join/Report packets. 5. Select “IGMP Snooping Configuration” page to show the Multicast Group Table.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C The maximum number of IGMP multicast groups are restricting to 4 entries; the more IGMP Join packets will be filtered. 4.9.4 IGMP Group Policy The IGMP Group Policy allowed the networl administrator to assigning a specificy Multicast Group to a port. The port is configured to send and receive all traffic for a particular mulcast group.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C IGMP Group-Policy Application Delete: Delete an exist Multicast Group entry IGMP Group-Policy Application Port: Indicates the port , assigned to send and receive all traffic for particular multicast groups Index: Field in the index number that mapping to the multicast group. A port can be assigned up to 24 static Multicast groups. 0 means to delete all policy Configure Sample: 1.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C -83-
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.9.5 Static Routing Port This function is to configure ports to be the member of IGMP Groups in VLANs. To do this, fill the Port List field and the VID field for the static routing and click on the “Add” button to save. Static Routing Port Configuration Port List: Manual specifies the ports which send and receive multicast traffic (e.g. 1-3,7) VID: The VLAN-ID of the Static Routing Port.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Static Routing Port and Multicast group VLAN member configue 1. Enable IGMP Snooping, as the following screenshot: 2. Assign the member VLANs which will receive Multicast group traffic cross different but source VLAN. In this case, we add VLAN 2 and VLAN 3 as the Multicast group memebers. 3. Assign the Static Routing Port, here we assign Port-2 as the Static Routing Port of VLAN 6. As following screen appears.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C NOTE: The Multicast group VLAN member must be configured first, and then setup the Static Routing Port. Or the function will not work properly. VLAN configure 4. Set the VLAN mode to be 802.1Q VLAN 5. At Step-3, we had set Port-2 as VLAN 6 Static Routing Port, so we have to configure Port-2 as VLAN 6 member port. 6. Cooperate with IGMP Snooping,and 802.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.10 Port Analysis 4.10.1 Port Analysis This function shows the statistical information of each port, it helps to diagnose the network malfunction. The following example shows the statistic table of port #6. 4.10.2 Port Mirror Port Mirroring is a method of monitoring network traffic that forwards a copy of each incoming and/or outgoing packet from one port of a network switch to another port where the packet can be studied.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.11 Storm Control This function is to control the Braodcast Storm, Multicast Storm and Flooded Storm packet on each port. To configure the Storm Control, click on the Storm Control menu button. The web main page then shows the Strom Restricting function table. 1. Fill the Port List field in the Broadcast Storm Restricting table, select the type in the Restricting Type drop down menu and enter the packet size in the Flow field. 2.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 4.12 IP Stacking 4.12.1 About IP Stacking IP Stacking function enables you to use a single IP address and standard network cabling to manage a group of up to 8 PLANET WSD-800 / WGSD-910 / WGSD-1022C / WSW-2401A / WGSW-2840 / WGSW-5240 Switches in the same IP subnet (broadcast domain). Once one switch had been operated as the Master of a stack, additional switches can join the IP stack by manual methods to setting with the same group name.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C • Master – The IP Stacking Management status is enabled and the current switch is a Master switch at this IP Stack Group. • Client.- The IP Stacking Management status is enabled and the current switch is a Client switch at this IP Stack Group. Manamement status: This filed is to Enable or Disable the IP Stack function. Management mode: Identify the management mode of the current switch.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C WGSW-5240 Switches as Master in Management mode field, the following screen appears. 3. Enter a string in the “IP Stacking Group” field; the default string of the WSD-800 / WGSD-910 / WGSD-1022C / WSW-2401A / WGSW-2840 / WGSW-5240 Switches is “planet_switch”. This string must be the same with the Client switches that to be assigned to the same IP Stack group. 4. Modify the “System priority” and “Stack name” if necessary.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 8. Enter a string in the “IP Stacking Group” field; the default string of the WSD-800 / WGSD-910 / WGSD-1022C / WSW-2401A / WGSW-2840 / WGSW-5240 Switches is “planet_switch”. This string must be the same with the Master switch that to be assigned to the same IP Stack group. 9. Modify the “System priority” and “Stack name” if necessary. At this sample we change the Stack name of the Client to “Switch-2” 10. Click “OK” if the configuration is down. 11.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C NOTE: Please do not assign role for whole stack member Switch as client, it cannot detect the Master device with minimum MAC address.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 5. TROUBLE SHOOTING This section is intended to help you solve the most common problems on the WSD-800 / WGSD-910 Managed Ethernet Switch 5.1 Incorrect connections The switch port can auto detect straight or crossover cable when you link switch with other Ethernet device. For the RJ-45 connector should use correct UTP or STP cable, 10/100Mbps port use 2 pairs twisted cable. If the RJ-45 connector is not correct pin on right position then the link will fail.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 5.2.1 Cabling RJ-45 ports: use unshielded twisted-pair (UTP) or shield twisted-pair (STP) cable for RJ-45 connections: 100Ω Category 3, 4 or 5 cable for 10Mbps connections or 100Ω Category 5 cable for 100Mbps connections. Also be sure that the length of any twisted-pair connection does not exceed 100 meters (328 feet).
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 6. APPENDIX 6.1 Console Port Pin Assignments The DB-9 serial port on the front panel is used to connect to the switch for out-of-band console configuration. The console menu-driven configuration program can be accessed from a terminal or a PC running a terminal emulation program. The pin assignments used to connect to the serial port are provided in the following tables.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 100BASE-TX Cat. 5 100-ohm UTP 100 m (328 ft) RJ-45 100BASE-FX 50/125 or 62.5/125 micron core multimode fiber (MMF) 2 km (1.24 miles) SC or ST 6.2 100BASE-TX/10BASE-T Pin Assignments With 100BASE-TX/10BASE-T cable, pins 1 and 2 are used for transmitting data, and pins 3 and 6 for receiving data.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 7. APPENDIX-B 802.1Q VLAN Multi-Untagged VLAN setting sample 1 The version V.1.4.27 of PLANET IP Stackable series had added the multiple untagged VLAN function on a port. The function could be applied at if the members of two or more different VLAN groups all have to access the same server/AP/Printer. But the two VLAN groups are separated and can’t access to each other. The graphic in Figure 7-1 appears.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Figure 7-2 802.1Q VLAN page screen 3. Move the mouse course to the port, which had be assigned to be connect to the server/AP/printer, then click on the port. For this case, we set the Port-1 to be the multiple untagged port. The screen in Figure 7-3 appears. 4. At the Link Type, select “Always Untag” at the draw bar. Click “OK” to apply. Figure 7-3 802.1Q VLAN Port Configuration – Port1 screen 5.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Figure 7-4 Assign Port-1 to be VLAN 2 and VLAN 3 member. 7. After the down the Port 1 VLAN configuration, press “close” to back to the 802.1Q VLAN main screen. And check if the setting be applied to Port 1 at the “Egress Policy” column. The screen in Figure 7-5 appears. Figure 7-5 Port 1 VLA N status 8. Assign the VLAN 2 and VLAN 3 group member.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Figure 7-6 Port 1, Port 2 and Port 3 VLAN configuration Although Port 2 and Port 3 are VLAN 1 members, with different PVID setting, the two ports are not able to access each other. But they all can access with the server/AP/Printer which connect to the Port 1 now. 802.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C VLAN Group Membership VLAN ID VLAN Define Major Member VLAN 1 Public VLAN WGSW-2840_220 WGSW-2840_10 WGSW-2840_20 WGSW-2840_30 Server Network_Printer_1 Network_Printer_2 VLAN 2 Clinets connect to [192.168.0.10] VLAN 3 Clinets connect to [192.168.0.20] VLAN 4 Clinets connect to [192.168.0.30] WGSW-2840_192.168.0.222 Core-Switch VLAN Configuration 192.168.0.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C Port3 Always Untag 1 Untag=1,2,3,4 NtworkPrinter Port28 Trunk 1 Tag=1,2,3,4 Core-2840 WGSW-2840_192.168.0.30 Edge-Switch VLAN Configuration 192.168.0.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C 802.1Q VLAN - Multi-Untagged VLAN setting sample 3 VLAN Group Membership VLAN ID VLAN Define Major Member VLAN 1 Public VLAN WGSW-2840_220 WGSW-2840_10 WGSW-2840_20 WGSW-2840_30 Server Network_Printer_1 Network_Printer_2 VLAN 2 Client connect to Ports those be assigned to VLAN 2 ,at [192.168.0.10] switch Client connect to Ports those be assigned to VLAN 2 ,at [192.168.0.20] switch Client connect to Ports those be assigned to VLAN 2 ,at [192.168.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C [192.168.0.20] switch Client connect to Ports those be assigned to VLAN 3 ,at [192.168.0.30] switch VLAN 4 Client connect to Ports those be assigned to VLAN 4 ,at [192.168.0.10] switch Client connect to Ports those be assigned to VLAN 4 ,at [192.168.0.20] switch Client connect to Ports those be assigned to VLAN 4 ,at [192.168.0.30] switch WGSW-2840_192.168.0.222 Core-Switch VLAN Configuration 192.168.0.
User’s Manual of WSD-800 / WGSD-910/WGSD-1022C WGSW-2840_192.168.0.30 Edge-Switch VLAN Configuration 192.168.0.30 VLAN Configuration Port Link Type Port1 Always Untag Port2 PVID Egress Link Partner 2 Untag=1,2 PC Always Untag 3 Untag=1,3 PC Port3 Always Untag 4 Untag=1,4 PC Port28 Trunk 1 Tag=1,2,3,4 Core-2840 Part No.
