Gigabit Management Switch User's Manual Rev. 0.
We make no warranties with respect to this documentation and disclaim any implied warranties of merchantability, quality, or fitness for any particular purpose. The information in this document is subject to change without notice. We reserve the right to make revisions to this publication without obligation to notify any person or entity of any such changes. Trademarks or brand names mentioned herein are trademarks or registered trademarks of their respective companies.
About this manual … This manual is a general manual for different models of our Gigabit Web Smart Switch. They are similar in operation but have different hardware configurations. These models are 1. 8 * TX + 2 * SFP (10G) ports model This model supports eight TX ports and two extra SFP ports for Giagbit Ethernet connections. 2. 16 * TX + 4 * SFP (16G) ports model This model supports sixteen TX ports and four share SFP ports. Port 13~16 are 1000TX RJ45 port / SFP port optional for Gigabit connection.
Contents 1. INTRODUCTION.............................................................................................3 1.1 PACKAGE CONTENTS ....................................................................................3 2. WHERE TO PLACE THE SWITCH.................................................................4 3. CONFIGURE NETWORK CONNECTION.........................................................5 3.1 CONNECTING DEVICES TO THE SWITCH ............................................................
C. WARRANTY ...............................................................................................
1. Introduction There are three models for the Gigabit Web Smart Switch Series – 8TX+2SFP(10G) model, 16TX+2SFP(18G) model and 24TX+4SFP(24G) model. This Gigabit Web Smart Switch is a Layer2 Web Smart switch with lots of advanced network functions including VLAN, trunking, spanning tree, mirror port, rate limit and port configuration. Console is supported for some basic settings. Web interface is for switch management. IEEE 802.1x is supported for port security application.
2. Where To Place the Switch This Switch can be placed on a flat surface (your desk, shelf or table). Place the Switch at a location with these connection considerations in mind: z The switch configuration does not break the rules as specified in Section 3. z The switch is accessible and cables can be connected easily to it. z The cables connected to the switch are away from sources of electrical interference such as radio, computer monitor, and light fixtures.
3. Configure Network Connection 3.
about where to send network traffic based on the destination address of the packet. As a result, the switch can significantly reduce unnecessary traffic. The example below demonstrates the switch ability to segment the network. The number of nodes on each segment is reduced thereby minimizing network contention (collisions) and boosting the available bandwidth per port. With Web Smart function of the switch, network administrator is easy to monitor network status and configure for different applications.
4. Adding Module This switch supports SFP (for 1000SX/LX/…) connectors for gigabit ports. Because the SFP slots support hot-swap function, you can plug/unplug the SFP transceiver to/from the SFP slot directly. The switch can auto-detect the gigabit connection from SFP slot. Follow the steps for module adding and removing. [ Add SFP Transceiver ] 1. Plug in the SFP Transceiver to SFP slot directly. 2. Connect network cable to the SFP Transceiver.
5. LEDs Conditions Definition The LEDs provide useful information about the switch and the status of all individual ports. [ For 8TX+2SFP / 16TX+2SFP / 24TX+4SFP Models ] LED Power STATUS ON CONDITION Switch is receiving power. System OFF System is booting. Yellow System is initializing. Green System is running. ON Port has established a valid link. Flashing Data packets being received or sent. Green The connection speed is 1000Mbps. Yellow The connection speed is 10/100Mbps.
6. Manage / Configure the Switch 6.1 Introduction of the management functions This switch is a L2 Web Smart switch. It supports in-band management function from Http interface. Console is supported for some basic settings. It supports network configuration functions, like VLAN, Trunking, Port Mirror, QoS, spanning tree and software backup/update. Users can configuration these functions for different network applications.
monitor network traffic from another connection port. But the port mirror function can copy packets from some monitored port to another port for network monitor. 5. QoS For Quality of Service request in a network, packets could be classified to different forwarding priorities. For real-time network traffic (like video, audio), it needs higher priority than normal network traffic. With the definition of packet priority, it could have 8 priority levels (from 0 to 7).
enable the port for network access. This function is very useful for network security application to prevent illegal users access network through the switch. 9. Rate Control This function can limit the traffic rate for physical ports. The traffic could be ingress traffic or egress traffic. This function can limit the network bandwidth utilization of users. 10. Private VLAN Three kinds of VLAN are defined for this application – Primary VLAN, Community VLAN, and Isolated VLAN.
6.2 Settings with Console Connection 6.2.1 Basic of the Console Interface Please follow the steps to complete the console hardware connection first. 1. Connect from the console port of the switch to COM port of PC with the console cable. 2. Start the terminal program of Windows. Create a new connection and select COM port of PC used for the console. Set the configuration of the terminal as [9600,8,N,1].
With “?” command, you can find the command list as follow.
-------------------------------------------------------------------------------------------->? exit help history logout ping quit show > Exit from current mode Show available commands Show a list of previously run commands Disconnect Sends ICMP echo packets to other network nodes Quit commands Show the counters that the system uses --------------------------------------------------------------------------------------------In guest mode, it is allowed to view the switch configuration only.
6.2.2 General Basic Commands When “admin” / “admin” is used for username/password, the console will enter administrator mode. Enter “?”, command list will be shown.
Enter “ping ?” at the prompt, the command syntax will be shown. # ping ? Syntax: ping [-n count] [-l length] [-t] [-w timeout] ip -n count : Number of echo requests to send. -l length : Send buffer size, and length is between 64~8148 -t : Ping the specified host until stopped by key. -w : Timeout in milliseconds to wait for each reply. ip : IP address (xxx.xxx.xxx.xxx) For example, “ping 192.168.1.80”. “Esc” can be used to break continuous ping operation. 6.
logging mac-address-table mac-security management map port queue radius-server rate-limit snmp sntp spanning-tree system trunk version vlan Login setting Configuration of the address table MAC Security Configuration Management IP filter Maps priority Port characteristics Priority queue information RADIUS server information Configures rate-limits Simple Network Management Protocol statistis Simple Network Time Protocol configuration Spanning-tree configuration System information Trunk information System har
It is 18 seconds passby after the setting command. 12. configure command This command will change the console interface to configure mode. And the prompt will become “(configure)#”. In this mode, administrator can do system configuration of the switch. The operation of configure mode will be describe in next section. “exit” command can be used to quit this operation mode. 13.
6.2.3 Configure Mode Commands Entering “configure” command at console interface, the prompt will become ... “(configure)#”. All the general settings for the switch can be done in this mode. If the settings are for ports, it is done with “interface” command in configure mode. For example, “interface ethernet 1/5” is for settings on Port 5 and “interface ethernet 1/5,6,10-15” is for settings on Port 5, 6, 10, 11, 12, 13, 14, 15. Please refer to next section for the details of this command.
2. help command This command is used to show all the available commands in this mode. 3. history command This command is used to show the entering command history. 4. logout command This command is used to logout from console interface. 5. quit command This command is used to quit from console interface. It has the same function as logout. 6. automode command With the command, user can select the operation mode of port when “auto” is set to disabled.
8. dot1x command This command is used configure the general settings of 802.1x function of the switch. Entering “dot1x ?”, the sub-commands will be shown. (config)# dot1x ? authcount Set 802.1x Re-authentication Max Count max-req Max EAP request/identity packet retransmissions re-authentication Forces re-authentication on all ports/interfaces system-auth-control Enables/disables 802.
Note: Setting 802.1x function on ports, “dot1x” command in interface configuring mode is used. Setting for RADIUS server, “radius-server” command is used. Please refer to sections for the commands. 9. end command This command is used to exit from configure mode. 10. hostname command This command is used to set the name of the switch in network. This name is also used as the hostname for SNMP agent function of the switch. 11. interface command This command is used to entering interface configuring mode.
ip default-gateway x.x.x.x command is used to specify the default gateway for IP configuration of the switch. x.x.x.x is the IP address of the gateway device. ip http ... comand is used to configure http service of the switch. Entering “ip http ?”, the sub-command will be shown. (config)# ip http ? secure-server server Enable secure HTTP server Enable HTTP server ip http secure-server command is used to enable the SSL function of http service (https) of the switch.
will be flooded to every port. If it is disable, the unregistered (not joined) IP multicast traffic will be flood to IGMP member ports only. 13. lacp command This command is used to configure LACP function of the switch. Entering “lacp ?”, the sub-commands will be shown. (config)# lacp ? system-priority Combined with MAC address to form LAG identifie lacp system-priority x command is used to configure the system priority for LACP operation of the switch.
mac-address-table aging-time x command is used to set to aging time of the switch. The valid value of “x”(aging time in seconds) is 10-1000000 and 0. If x=0, the aging operation will be disable. mac-address-table static x-x-x-x-x-x interface ethernet 1/y command is used to assign a static Mac address x-x-x-x-x-x to Port y of the switch. The static mac address will not be aging out by the switch. 16. management command This command is used to setup the management interface security function.
18. no command This command is used to disable a function or restore a setting to factory default of the switch. (config)# no ? automode dot1x hostname ip lacp logging mac-address-table management mirror qos queue radius-server rate-limit snmp-server sntp spanning-tree storm-control trunk Set Auto Negotiation or Auto Detect mode Configures 802.
21. queue command This command is used to select traffic scheduling mode (strict priority or weight round robin). If WRR is selected, weighting of each queue is also set with this command. Entering “queue ?”, the sub-commands will be shown. (config)# queue ? bandwidth mode Assigns WRR weights to QoS priority queues Assigns priority queues queue bandwidth x y z command is used to set the weighting of Normal, Medium, and High priority queues for WRR operation. (Low priority queue is always weight1).
Entering “snmp-server ?”, the sub-commands will be shown. (config)# snmp-server ? <1-5> Index of Trap community Defines SNMP community access string contact Sets the system contact string location Sets the system location string snmp-server community get xxx command is used to set the community string of get command for SNMP operation. “xxx” is the community string. snmp-server community set xxx command is used to set the community string of set command for SNMP operation. “xxx” is the community string.
spanning-tree compatible command is used to change its operation to 802.1D STP instead of 802.1w RSTP. And no spanning-tree complatible command is used to set it back. spanning-tree forward-time x command is used to set the forwarding delay of spanning tree operation. It is the maximum waiting time before changing states. This delay is required because every device must receive information about topology changes before it starts to forward frames.
The trunk function for the switch works with LACP protocol. The system priority of LACP is set by “lacp” command. And the settings on ports is done in “interface” command. 29. username command This command is used to set the username and password for administrator and guest. username admin www xxx yyy zzz command is used to set the username and password for administrator. “www” is the old username. “xxx” is the old password. “yyy” is the new username. “zzz” is the new password.
6.2.4 Interface Configuring Commands Commands in Configuring Mode are for general switch settings. is “(configure)#”. And its prompt The port interface and VLAN interface are set with “interface” command. (config)# interface ? ethernet vlan Ethernet port Switch Virtual LAN interface interface ethernet 1/x command is used to configure settings for Port x. Please refer to section 6.2.4.1 Interface Configuring Commands for Port for the details.
“interface ethernet 1/1,2,4-7” and the settings after this command will be applied to Port 1, Port 2, Port 4, Port 5, Port 6, and Port 7. (Port 4~7) Entering “interface ethernet 1/5”, and its prompt will become ... (config)# interface ethernet 1/5 (config-if)# Enter “?” at the prompt, the sub-command list will be shown.
5. quit command This command is used to quit from console interface. It has the same function as logout. 6. channel-group command This command is used to add the interface port(s) to a trunk group. This is a static port-trunk assignment. And the static assigned port(s) will be ignored by LACP protocol. channel-group x will add the interface port(s) to the trunk group “x”. trunk group number, and its valid value is 1-8. “x” is the no channel-group will remove the interface port(s) from any trunk group.
10. end command This command is used to exit from interface mode. (config-if)# end (config)# 11. flowcontrol command This command is used to enable flow control function of the interface port(s). flowcontrol command is used to enable flow control function of the interface port(s). no flowcontrol command is used to disable flow control function of the interface port(s). 12. interface command This command is used to change the interface port(s) or interface VLAN groups for next setup commands.
14. map command For a IP packet, there is priority information in ToS field of IP header. The priority could be 3-bit precedence (0~7) or 6-bit DSCP (0~63). For DSCP, this switch supports seven DSCP values for QoS operation and other values will be assigned to one priority. This command is used to map 802.1P priority values and DSCP priority values to priority queues on the interface port(s). There are four priority queues for each port. They are Low, Normal, Medium, and High priority queues.
shutdown spanning-tree speed switchport Shuts down the selected interface Specifies spanning tree configuration Configures speed operation Configures switching mode characteristics For example, “lacp” command can enable the LACP function on the interface port(s) and “no lacp” command can disable it. “maximum-packet-length 9600” will set the maximum packet size to 9600, and “no maximum-packet-length” will put it to factory default setting 1518. 17.
19. qos command This command is used to set port-based priority on the interface port(s). And enable 802.1P priority, DSCP priority on the interface port(s). (config-if)# qos ? dscp port precedence enable IP DSCP priority Port priority map enable IP precedence priority qos dscp command is used to enable DSCP priority operation on the interface port(s). And no qos dscp command is used to disable it. qos precedence command is used to enable 802.1P priority operation on the interface port(s).
(config-if)# spanning-tree ? cost Specifies spanning tree cost edge-port Specifies spanning tree edge port port-priority Specifies spanning tree port priority spanning-disabled Disables the spanning tree spanning-tree cost x command is used to set spanning tree port path cost value on the interface port(s). It is used to determine the best path between devices if looping happens. Lower values will be forwarded and should be assigned to ports with fast connections.
mode native private-vlan untag-vid Configures the port mode Configures the PVID of the port Private VLAN Configures the port untag vid [ Accept Frame Type ] switchport acceptable-frame-types all command is used to allow the interface port(s) to accept all types of frame. switchport acceptable-frame-types tagged command is used to allow the interface port(s) to accept tagged frame only. Other frame type will be rejected.
When untagged packet is received, PVID of the ingress port will be used as the its VLAN ID. PVID is also used as the VLAN ID for tag adding when untagged packet is translated to tagged packet. switchport untag-vid x command is used to set untag-VID of the port. It is used when this port is set to “hybrid” role for 802.1Q function. And packets for this untag-VLAN will be forwarded with untagged. Other packets will be forwarded with tagged. “x” is the VLAN ID and its valid value is 1~4094.
(config-if)# ? exit help history logout quit interface ip no Exit from current mode Show available commands Show a list of previously run commands Disconnect Quit commands Enters privileged interface configuration Internet protocol Negates a command or sets its defaults ---------------------------------------------------------------------------------------------- 1. exit command This command is used to leave current operation mode. mode. Go back to last 2.
and all next commands will be applied to VLAN 100. The description of commands in interface configuring mode is put in Section 6.2.4 Interface Configuring Commands. Please refer to the section for the details. 7. ip command This command is used to set IP address of the switch on this VLAN. And only users in this VLAN can access this switch with the IP address remotely. ip address dhcp command is used to enable DHCP client function.
6.2.5 VLAN Configuring Commands Commands in Configuring Mode are for general switch settings. is “(configure)#”. And its prompt If the settings are for VLANs, it is done with “vlan database” command in configure mode. And its prompt will become “(config-vlan)#”. Entering “vlan database”, and its prompt will become ... (config)# vlan database (config-vlan)# Enter “?” at the prompt, the sub-command list will be shown.
6. end command This command is used to exit from interface mode. (config-if)# end (config)# 7. 1q-vlan command This command is used to configure 802.1Q VLAN characteristics. (config-vlan)# 1q-vlan ? gvrp Enables GVRP globally for the switch ingress-filtering Configures frame filtering base on VLAN membership 1q-vlan command can enable 802.1Q VLAN function. And no 1q-vlan command can disable it. 1q-vlan gvrp command is used to enable GVRP function of 802.1Q VLAN. This command works only if 802.
10. private-vlan command This command is used to create VLAN groups for Private VLAN and create the associations between Primary VLAN and Community VLAN. (config-vlan)# private-vlan 100 ? association Association name VLAN interface name private-vlan x association y command is used to create the association between Primary VLAN “x” and Community VLAN “y” private-vlan x association add y command is used to add the association between Primary VLAN “x” and Community VLAN “y”.
6.2.6 Show Commands Show command is put in General Basic Commands for viewing system configuration and information. Enter “show ?” at the prompt, the sub-command list will be shown. # show ? calendar dot1x gvrp history interface ip lacp line logging mac-address-table mac-security management map port queue radius-server rate-limit snmp sntp spanning-tree system trunk version vlan Date and time information 802.
1/6 1/7 1/8 1/9 1/10 Force-Authorized Force-Authorized Force-Authorized Force-Authorized Force-Authorized show dot1x configuration command is used to show 802.1x configuration and status of the switch. For example, # show dot1x configuration [802.1x Configuration] 802.
========================================== Rx Counter Statistics Good Unicast Frame 4109 Good Broadcast Frame 9946 Good Multicast Frame 158 Discarded Frame 0 Errors 0 Total Receive Byte Count 1549816 ========================================== Tx Counter Statistics Good Unicast Frame 2001 Good Broadcast Frame 18 Good Multicast Frame 0 Discarded Frame 0 Errors 0 Total Transmit Byte Count 873047 show interface status command will show port status of all ports (one after another).
Ingress rule: Disable Acceptable frame type: All frames Native VLAN: 100 Priority for untagged traffic:Low GVRP status: Disable Private-VLAN mode: Normal 6. show ip command This command is used to show current IGMP configuration and switch IP configuration. # show ip ? igmp interface redirects IGMP snooping Interface information Default gateway configured for this device show ip igmp snooping command will show current switch IGMP configuration.
internal portstatus sysid Shows config settings/operational state for local side Shows LACP Port Status Shows channel groups system priority/MAC address show lacp internal command is used to show system priority and protocol enable/disable status of ports.
9. show logging command This command is used to show current system log and system log configuration. # show logging ? configuration logging configuration show logging command is used to show current system log content.
Eth 1/3 Eth 1/3 Eth 1/3 00-C0-F6-01-15-87 00-90-CC-82-A5-D6 00-00-E2-82-8C-E6 Learned Learned Learned show mac-address-table aging-time command will show aging time of mac address table. For example, # show mac-address-table aging-time Status: Enable Aging time: 300 sec show mac-address-table address x-x-x-x-x-x command will show the mac address table for mac address “x-x-x-x-x-x”.
Eth 1/ 3 Eth 1/ 4 Eth 1/ 5 Eth 1/ 6 Eth 1/ 7 Eth 1/ 8 Eth 1/ 9 Eth 1/10 0 0 10 0 0 0 0 0 N/A N/A 0 N/A N/A N/A N/A N/A No Security No Security Limited by MAC no No Security Accept function No Security No Security No Security 12. show management command This command is used to show switch management security settings. The IP/subnet, access mode, and protocol functions security settings will be shown.
For example, # show port monitor Destination port: 6 Source port: Eth1/2 Eth1/7 Mode : Disable 15. show queue command This command is used to show traffic scheduling settings for queues on ports. # show queue ? bandwidth mode Shows weighted round-robin (WRR) bandwidth Priority queue information show queue bandwidth command is used to show weighting of priority queues for bandwitdh sharing of WRR operation. show queue mode command is used to show traffic scheduling mode for priority queues.
============================================== 1/1 No Limit No Limit 1/2 No Limit No Limit 1/3 No Limit No Limit 1/4 No Limit No Limit 1/5 No Limit No Limit 1/6 No Limit No Limit 1/7 No Limit No Limit 1/8 No Limit No Limit 1/9 No Limit No Limit 1/10 No Limit No Limit 18. show snmp command This command is used to show SNMP configuration of the switch. For example, # show snmp [SNMP Configuration] Object ID : 1.3.6.1.4.1.655.100.2.
show spanning-tree command is used to show all spanning tree configuration (for bridge and ports). show spanning-tree ethernet 1/x command is used show spanning tree configuration of Port x. (“x” is the port number.) For example, # show spanning-tree ethernet 1/5 Bridge Port Number: 5 Port Priority (0..255): 128 Port State: Linked Down Port Enable : Enabled Is edge : No Port Path Cost(1..
show trunk group x command is used to show port member settings of Trunk Group x. (“x” is the trunk group index.) 23. show version command This command is used to show system version information and model information. For example, # show version Serial number:: Firmware Version: Number of Ports: Model Name: 0000000001 1.01.09 (built at Aug 6 2008 14:38:24) 10 Gigabit L2 Management Switch 24. show vlan command This command is used to show VLAN configuration of the switch.
Eth 1/ 1 Eth 1/ 2 Eth 1/ 3 Eth 1/ 4 Eth 1/ 4 Eth 1/ 6 Eth 1/ 7 Eth 1/ 8 Eth 1/ 9 Eth 1/10 Normal Normal Normal Normal Normal Normal Normal Normal Normal Normal none none none none 100 none none none none none none none none none none none none none none none 58 none none none none none none none none none none
6.3 About Telnet and SNMP Management Interfaces 6.3.1 About Telnet Management Interface If you want to use Telnet to manage the switch from remote site, you have to set the IP/Mask/Gateway address to the switch first from console. Then use "telnet " command to connect to the switch. Its operation interface is the same as console interface. 6.3.
6.4 Management with Http Connection Users can manage the switch with Http Web Browser connection. Before http connection, IP address configuration of the switch should be done first. Please follow the instruction in Section 6.2 to complete the console connection and use “show ip interface” command to check IP address of the switch first. If users want to change the IP address of the switch, use “ip address xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy” (xxx.xxx.xxx.xxx is the IP address and yyy.yyy.yyy.
6.4.1 System “System Information” is the homepage of the switch. functions for it. And there are four sub- 1). System Information This function lists the system information about the switch. You can find the firmware version, Mac address, connection port number, and maximum VLAN group number here. 2). IP Configuration This function is used to setup the IP configuration of the switch. You can enable DHCP client function to get IP configuration from DHCP server automatically.
remotely. For example, setting it to “5” will allow the users in the VLAN with VLAN ID 5 to manage the switch remotely. It works only 802.1Q VLAN function is enable. About DHCP Client [renew] and [release] button ... [renew] button: If DHCP client function is enabled, you can click [renew] button to refresh the lease time of the IP address. If IP configuration is not got when bootup, clicking [renew] button will try to get IP configuration again.
Users can configure System Log function and view log records here. If this function is enabled, the switch will record events to a log file and put the log file to flash. Up to 512 records are allowed for local logging. If more than 512 events happen, the records will be overwritten from beginning. And if remote syslog server is applied, the switch will also send event record to the syslog server. About log function configuration ... System Log Status : This can enable/disable system logging function.
You can view log content here. There could be more than one page. You may change the page or go to a page by its operation icons. Clicking [clear log] button will clear the local log table.
6.4.2 SNMP This function is used to configure SNMP function of the switch. This switch supports SNMP v1 & v2c agent function and MIB II(Interface), Bridge MIB, 802.1Q MIB and Private MIB. [System Information] Object ID: this is the SNMP Object ID of the switch for SNMP management. Up Time: this is the power-up running time of the switch. Name: this the host name of the switch. Contact: this is the contact information for the switch. Location: this is the location information of the switch.
Trap function will send notice message to SNMP management station when some events happen. Up to five SNMP management stations are supported for Trap function. The community string and enable/disable setting for each trap are set here.
6.4.3 Security This function is used to configure security functions of the switch. Those security functions are Administrator Management Security, Mac ID Access Security, and 802.1x Authentication Security. 1). User Accounts (Administrator Management Security) Administrator Username/Password : This is for network administrator to change his/her username and password. (Default is admin/admin.
(Http) could be enable/disable for different administrators. This is for security policy for switch management. Note: Remember to enable at least one IP/Subnet with Modify right for Http interface. Otherwise, configuring switch from remote will become impossible. In that case, you have to use the “default” command from console to restore settings to factory default for switch management. 2). Mac Security Configuration There two Mac ID security modes for the switch.
b. Then click [Apply]. The switch will learn users automatically and show current user number at “Learned no.”. 3). 802.1x Configuration If 802.1x function is enabled, the switch will act as an authenticator for users accessing network through the switch. It will need a RADIUS server for the authentication function. Users will be asked for username and password before network access. If the RADIUS server authenticates it, the switch will enable the port for network access.
5. 6. Quiet Timeout Period: This is the quiet time value between the switch and the user before next authentication process when authentication fails. Tx Timeout Period: This is the timeout value for the identification request from the switch to users. The request will be re-tried until the Re-authentication Max Count is met. After that, authentication fail message will be sent. The valid value is 0~65535. [Radius Server Configuration] This function is for configuration between switch and RADIUS server.
6.4.4 Port This section is about configurations for ports. For port speed setting, maximum packet size setting, mirror port setting, port bandwidth limit, and port statistics. 1). Port Configuration This function is used to configure port settings of the switch. You can enable /disable a port, set it to fixed 10M or 100M or 1000M ... and so on. Auto Mode : User can select the operation mode of port when “auto” is set to disabled.
1. 2. 3. 4. 5. 6. 7. 8. Select the port that you want to modify in “Port#” first. Fill the name of the port. Select Enable/Disable state in “Admin”. If Disable is selected, this port will be disabled for any network access. Select the Enable/Disable state of Auto function of port. The auto mode could be auto-negotiation or auto-detect operation when auto is set to disable. If Auto is disabled, select the operation speed and duplex mode of the port in “Speed/Duplex”.
This switch supports Jumbo Frame function. And the maximum packet size could be up to 9600 byte/packet. You can select the maximum packet size for each port here. 4). Mirror Port Configuration This switch operates in store-and-forward algorithm so it is not possible to monitor network traffic from another connection port. But the port mirror function can copy packets from some monitored port to another port for network monitor. Mode: This is used to enable/disable Mirror function.
5). Rate Control Two traffic rates could be controlled by the switch. One is the ingress/egress traffic of each port. Another is Broadcast/Multicast/Unicast Storm Control. 5-1) Rate Control Configuration This function can setup the ingress and egress rate limit of ports. Follow the steps to configure ... a. Set “Unit” first. It could be selected from pre-defined units, or define by user. Click [Apply] after the setting. b. Select the Port Number. c.
Please follow the rules in table to setup the maximum storm rates. Note: The storm rate is counted by pps (packet per second). 6). Port Statistics Port statistics counters could be read here. Select a port to get its counters. [ Refresh ] The counters will be refreshed automatically. You can modify the refresh interval. And you can click [Refresh] to refresh the counters immediatelly. [ Reset Counters ] Click [Reset Statistics] can reset the counters to “0”.
6.4.5 Address Table These are functions about Mac address table. One is “Static Address Assign” and another is “Aging Time Setup”. 1). Static Addresses This switch supports static Mac address assignment. You can assign static Mac addresses by the following steps ... a. Give an Entry ID. This ID is used as the index of the entry in Static Address Table. b. Give the VLAN ID. If 802.1Q is disable, the VID will always be 1. This VID will put the static Mac address in some VLAN for 802.1Q VLAN operation. c.
port access security with Mac address. application.. Select “Accept” for such security 2). Dynamic Addresses This function can show the dynamic Mac addresses learned by the switch. This table will refresh every 30 seconds. The address table could be more than one page. You can click [Previous Page], [Next Page] to change page. Or, give the page number directly. Query function is supported by the switch. It could be queried by Port or queried by Mac Address.
The switch will learn Mac addresses to an ARL table automatically. And follow the table to do packet store-and-forward operation. If Mac addresses are not received for some time, those Mac addresses will be removed from the table. This operation is called aging. The aging operation could be disable here. will not be removed from the ARL table. And all the learned Mac addresses And the time for aging operation could be modified here. It is 300 seconds by default.
6.4.6 Spanning Tree Spanning Protocol can prevent traffic looping in network. It can be configured for switch unit (bridge) and port unit. If spanning tree function is enabled, any link down to link up will have several seconds delay for the port going to forwarding state. [Setting of Bridge] Here are the parameters for Spanning Tree operation on the switch. Enable/Disable : enable/disable spanning tree operation Force Version : It will operate as Rapid Spanning Tree in “Normal” state.
Bridge Port Number is the Ethernet port that will be configured. Port Priority (0~240) : If the path cost for all ports on a switch are the same, the port with the highest priority (lowest value) will be forwarded when looping happens. If more than one port have the same highest priority, the port with lowest port number will be forwarded. Port State : It is current spanning tree operation state of the port. Port Enable : enable/disable spanning tree function on the port.
6.4.7 VLAN This switch supports 802.1Q VLAN, Port-based VLAN, and Private VLAN. 1). 802.1Q VLAN 1-1). 802.1Q VLAN 802.1Q VLAN : This is used to enable/disable 802.1Q VLAN function. GVRP : The GVRP protocol can learn remote 802.1Q VLAN on other switches and add to dynamic 802.1Q VLAN table. You can enable/disable the operation of this protocol. Ingress Filter : This is used to enable/disable doing VLAN filtering function at ingress port.
For 802.1Q VLAN, every port could be tag port or untag port. Tag port will always send tagged packets and is used for switch-to-switch cascading. It is a VLAN trunk connection because there could be more than one VLAN working through it. And its role is a “Trunk” for 802.1Q VLAN groups operation between switches. Untag port will always send untagged packets and is used for switch to users connection. And its role is a “Access” connection for users.
This function is used to maintain 802.1Q static VLAN. Create an 802.1Q VLAN: 1. Input the VLAN ID and VLAN Name in “Create New Static VLAN”. Click [Create] to create the VLAN. The valid VLAN ID is 1 ~ 4094. 2. Select the VLAN in “Modify Static VLAN Table”. The new VLAN is empty by default. You can select ports for the VLAN. After that, click [Apply] to complete the VLAN configuration. Modify an 802.1Q VLAN: 1. Select the VLAN in “Modify Static VLAN Table”. 2.
This table will show the activity of 802.1Q VLAN. 802.1Q VLAN will be shown in the table. Both static and dynamic For ports, “S” means static member and “D” means dynamic member. If GVRP protocol is enabled, this table will also show the learned remote 802.1Q VLAN. 2). Private VLAN Three kinds of VLAN are defined for this application – Primary VLAN, Community VLAN, and Isolated VLAN. Community VLAN and Isolated VLAN can communicate with Primary VLAN, but they cannot communicate with each other.
Creating Private VLAN, do the steps first. a. Create VLAN groups, and define as “Primary”, “Community”, or “Isolated”. b. Associate Community VLAN with Primary VLAN. If more than one Primary VLAN, select Primary VLAN first and then do the association. See the following picture. 2-2). Port Configuration After VLANs are created, assign ports to VLANs.
There are three types for a port - Normal, Host, and Promiscuous. “Normal” is for ports doing normal operation instead of Private VLAN. “Host” is for ports that could be in Community VLAN or Isolated VLAN. “Promiscuous” is for ports that could be in Primary VLAN or Isolated VLAN. Follow the steps to do the port assignment. a. Select the type for a port. b. If it is “Host”, you can select a VLAN from Community VLAN or mark Isolated VLAN and select from it. c.
3). Port-based VLAN Follow the steps to configure Port-based VLAN. a. Enable Port-based VLAN. And click [Apply] button. b. Give VLAN name. c. Select ports for each VLAN. d. Click [Apply] button.
6.4.8 QoS This switch supports Port-based priority, 802.1P priority, and DSCP priority. These priority operations could be enable/disable on each port. For 802.1P and DSCP priority operations, their priority values can be mapped to four priority queues of the switch for QoS operation. 1). QoS Information QoS : this is for QoS function enable/disable. Port Priority : this is used to define the priority setting of each port. It will map to the four priority queues of the switch. 802.
[802.1P Priority Mapping] For 802.1P priority, priority value (0~7) in VLAN tag will be used for QoS operation. And the mapping of priority values to priority queues (High/Middle /Normal/Low) could be defined here. If 802.1P priority function is enabled, these settings will be followed for QoS operation.
DSCP priority operation will use the priority setting in ToS field of IP packets for QoS operation. Seven DSCP values (0~63) could be defined and map to priority queues (High /Middle/Normal/Low). If DSCP priority function is enabled, these settings will be followed for QoS operation. 2). Queue Mode This switch supports Strict Priority and WRR (Weight Round Robin) operation for sending out packets from piority queues.
3). Queue Scheduling This function is used to configured the weight of priority queues for WRR operation. And the output bandwidth will be shared with the ratio of weight between priority queues.
6.4.9 IGMP This switch supports IGMP Snooping function for IP Multicast traffic. Switch will learn IP Multicast Groups from IGMP protocol packets. Here is for IGMP function configuration settings. [IGMP Configuration] IGMP Status: this is used to enable/disable IGMP function. IGMP Querying: this is used to enable/disable IGMP Query function. The switch will send IGMP Query at a fixed interval if it is enable.
[IP Multicast Registration Table] This table will show the learned IP multicast groups.
6.4.10 Trunk This switch supports up to eight trunk groups. And the trunk could be configured with static assigned or by LACP (Link Aggregation Control Protocol) protocol. 1). Trunk Information This table is used to assign ports to Trunk groups statically. Follow the steps to do it. (*Don’t connect trunk cables until this function is set.) a. Enable Trunk function first. Then click [Apply]. b. Select a Trunk Group at “Grp#”. c. Select the member ports. d. Click [Apply]. e. Repeat b.~d.
This page is used to configure LACP function. With LACP protocol, switches can learn trunk connections automatically. Follow the steps to do it. (*Don’t connect trunk cables until this function is set.) a. Enable Trunk function at “Trunk Information” page first. Then click [Apply]. b. Assign System Priority. (Its value is 1~65535 and higher numbers have lower priority. Combining with the Mac address of the switch, it is used to identify this switch in LACP protocol operation.) c.
96
6.4.11 Tools The follow functions are used for system maintenance. They are Software Upgrade, Configuration Backup/Restore, Restore Factory Default, Reset System, and Ping functions. 1). Tools Information Four functions are supported as the system maintenance tools. System Upgrade : This function will upgrade the system operation software from the web management PC. Config Backup/Restore : Clicking [Backup Setting] button, the switch can backup the configuration of the switch to the web management PC.
This function is used to ping network devices from the switch. verify network connection. It can be used to Target IP address : This is the target IP address for the ping operation. Count : This is the repeat count for the ping operation. Time Out : This is the timeout value for the ping operation. After the above items are set, click [Apply] to start the ping operation. Then the result of ping operation will be shown.
7. Software Update and Backup This switch supports software update and configuration backup/update/restore functions. It could be done in two ways. 1. From console when booting: by Xmodem protocol and doing by terminal program. This function can be used for run-time code and boot code updating. (Boot code works only at boot time - before the main program starts.) Press Ctrl-C when the switch is booting, the following message will be shown.
A. Product Specifications [ 8TX+2SFP Model ] Access Method Standards Conformance Number of Ports Dimensions Certification Temperature Humidity Ethernet, CSMA/CD IEEE 802.3 10BASE-T, IEEE 802.3u 100BASE IEEE 802.3z, IEEE 802.3ab (1000Base) 10/100/1000Mbps, Full / Half duplex (auto-negotiation) Auto-detect for each TX port LEDs for each unit : Power, System each port : Link/Act(Green:1000M, Yellow:10/100M), FDX/Col.
[ 16TX+4SFP Model ] Access Method Standards Conformance Dimensions Certification Temperature Humidity Ethernet, CSMA/CD IEEE 802.3 10BASE-T, IEEE 802.3u 100BASE IEEE 802.3z, IEEE 802.3ab (1000Base) 10/100/1000Mbps, Full / Half duplex (auto-negotiation) Auto-detect for each TX port LEDs for each unit : Power, System each port : Link/Act(Green:1000M, Yellow:10/100M), FDX/Col.
102
[ 24TX+4SFP Model ] Access Method Standards Conformance Dimensions Certification Temperature Humidity Ethernet, CSMA/CD IEEE 802.3 10BASE-T, IEEE 802.3u 100BASE IEEE 802.3z, IEEE 802.3ab (1000Base) 10/100/1000Mbps, Full / Half duplex (auto-negotiation) Auto-detect for each TX port LEDs for each unit : Power, System each port : Link/Act(Green:1000M, Yellow:10/100M), FDX/Col.
B. EMI Certification Compliances FCC Class A Certification (USA) Warning: This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause interference to radio communications.
C. Warranty We warrant to the original owner that the product delivered in this package will be free from defects in material and workmanship for a period of warranty time from the date of purchase from us or the authorized reseller. The warranty does not cover the product if it is damaged in the process of being installed. We recommend that you have the company from whom you purchased this product install it.