Comnet CNGE8FX4TX4MS Installation And Operation Manual Download Page 107

Page: 107 / 115

101

802.1x Per Port Configuration

You can configure a 802.1x authentication state for each port. This state provides Disable,

Accept, Reject and Authorize. Use

Space

key to change the state value.



Reject:

the specified port is required to be held in the unauthorized state.



Accept:

the specified port is required to be held in the authorized state.



Authorized:

the specified port is set to the authorized or unauthorized state in

accordance with the outcome of an authentication exchange between the Supplicant

and the authentication server.



Disable:

The specified port is required to be held in the authorized state



Select

802.1x Per Port Setting interface

Summary of Contents for CNGE8FX4TX4MS

Page 1: ...rts 1 4 support the 10 100 1000 Mbps Ethernet IEEE 802 3 protocol and auto negotiating and auto MDI MDIX features are provided for simplicity and ease of installation Ports 5 8 are 10 100 1000 configu...

Page 2: ...Safety Precaution 8 Hardware Description 9 Front Panel 9 Top View 10 Wiring the Power Inputs 10 LED Indicators 12 Ports 13 Cabling 14 DIN Rail Mounting Installation 17 Wall Mount Plate Mounting 19 Ha...

Page 3: ...0 IGMP Commands Set 41 Mac Filter Table Commands Set 41 SNMP Commands Set 42 Port Mirroring Commands Set 45 802 1x Commands Set 45 TFTP Commands Set 47 SystemLog SMTP and Event Commands Set 48 SNTP Co...

Page 4: ...68 User Authentication 69 Port Statistics 70 Port Control 71 Port Trunk 72 Aggregator setting 72 Aggregator Information 73 State Activity 74 Port Mirroring 75 Rate Limiting 76 DMI Digital Monitoring...

Page 5: ...ty 94 COS Configuration 94 TOS Configuration 94 IGMP Configuration 95 X Ring 97 LLDP Configuration 99 Security 100 802 1X Radius Configuration 100 MAC Address Table 103 Factory Default 107 Save Config...

Page 6: ......

Page 7: ...fit the field request flexibility Also the long MTBF Mean Time Between Failures ensures that the CNGE8FX4TX4MS will continue to operate until a Gigabit network infrastructure has been established wit...

Page 8: ...X4MS is with power reserve protection to prevent the switch from being damaged by using the wrong power source When one of power input has failed the P Fail LED will turn on and send an alarm through...

Page 9: ...ndicators make troubleshooting quick and easy Each 10 100 1000 Base TX port has 2 LEDs that display the link status and transmission speed The three power indicators PWR1 PWR2 and P Fail assist in dia...

Page 10: ...ESD protection Power Supply Wide range Redundant Power Design Reverse Power Polarity Protection Current Overload Protection Case Installation IP 30 Protection DIN Rail and Wall Mount Design Spanning T...

Page 11: ...lert Relay Alarm Output System Events Security Port Security MAC address entries filter IP Security IP address security management to prevent unauthorized intruder Login Security IEEE802 1X RADIUS SNM...

Page 12: ...r Ethernet port Link Active 1000M SFP Link Active Network Management Configuration Web browser Telnet Serial Console Windows Utility TFTP SNMP v1 v2c v3 Port Speed Duplex Configuration VLAN IEEE 802 1...

Page 13: ...shell with solid mounting kits Mounting DIN Rail Wall Mount Protection ESD Ethernet 6 000 VDC Surge EFT for power 3 000 VDC Reverse Power Protection Yes Current Overload Protection Yes Environment Ope...

Page 14: ...ltage Fluctuation Flickers Free Fall IEC60068 2 32 Shock IEC60068 2 27 Vibration IEC60068 2 6 Packing List 1 x 4 10 100 1000T 4 SFP Managed Switch 1 x RS232 Cable 1 x User Manual 2 x Wall Mounting Bra...

Page 15: ...is section we will introduce the CNGE8FX4TX4MS s hardware spec port cabling information and wiring installation Front Panel The Front Panel of the CNGE8FX4TX4MS is shown as follows Front Panel of the...

Page 16: ...terminal block connector for two DC power inputs Top panel of the 4 10 100 1000T 4 SFP Switch Wiring the Power Inputs Primary Secondary Redundant Voltage Input Power Input Insert the positive and nega...

Page 17: ...11 Tighten the wire clamp screws to prevent the wires from loosening Note The wire gauge for the terminal block should be in the range between 12 20 AWG...

Page 18: ...is active PWR2 Green Off Power input 2 is inactive On Power input 1 or 2 is inactive or port link down depends on Fault Relay Alarm configuration P Fail Red Off Power input 1 and 2 are both functiona...

Page 19: ...ir All ports on this managed switch support automatic MDI MDI X operation You can use straight through cables See Figure below for all network connections to PCs or servers or to other switches or hub...

Page 20: ...workstation etc must be less than 100 meters 328 ft long The small form factor pluggable SFP devices that are the compact optical transceivers used for optical communication for both telecommunication...

Page 21: ...able of LC connector into the SFP LC connector to the SFP To remove the LC connector from the SFP please follow the steps shown below 1 Press the upper side of the LC connector from the SFP and pull i...

Page 22: ...16 2 Push down the metal loop and pull the SFP out by the plastic part Pull out from the SFP receptacle...

Page 23: ...is attached to the CNGE8FX4TX4MS at the factory If the DIN Rail is not attached to the switch please see the following to attach the DIN Rail to the switch 1 Insert the screws to attach the DIN Rail t...

Page 24: ...ert the top of DIN Rail into the track 2 Lightly push the button of DIN Rail mount into the track 3 Check the switch is held securely on the track 4 To remove the switch from the track reverse the abo...

Page 25: ...s to remove the DIN Rail mount 2 Place the wall mount plate on the rear panel of the switch 3 Use the screws to screw the wall mount plate on the switch 4 Use the hook holes at the corners of the wall...

Page 26: ...l illuminate Please refer to the LED Indicators section for the meaning of the LED lights 5 Prepare the twisted pair straight through Category 5e or above cable for the Ethernet connection and SFP tra...

Page 27: ...recover from network connection failure within 20ms or less and make the network system more reliable The X Ring algorithm is similar to Spanning Tree Protocol STP and Rapid STP RSTP algorithm but its...

Page 28: ...to have more than one X Ring group By using the coupling function it is possible to connect each X Ring for a redundant backup This will ensure the transmission between two ring groups will not fail...

Page 29: ...ning two ports on the switches as Dual Homing ports they will become the designated backup ports in the X Ring group The Dual Homing function only works when the X Ring function is made active Each X...

Page 30: ...e switch has an RS232 connector on one end and the other end is an RJ45 connector Attach the end of the RS232 connector to a PC or terminal and the other end of RJ45 connector to the console port of s...

Page 31: ...25 Pin Assignment DB9 Connector RJ45 Connector NC 1 Orange White 2 2 Orange 3 3 Green White NC 4 Blue 5 5 Blue White NC 6 Green NC 7 Brown White NC 8 Brown...

Page 32: ...ation parameters to match the following default characteristics of the console port Baud Rate 9600 bps Data Bits 8 Parity none Stop Bit 1 Flow control None The settings of communication parameters Aft...

Page 33: ...27 name and Password use Enter key to switch then press Enter key and the Main Menu of console management appears See below figure for login screen Console login interface...

Page 34: ...Management The system supports the console management CLI command After you login to the system you will see a command prompt To enter CLI management interface type in enable command CLI command inte...

Page 35: ...vance function status Save configures Global Configuration Enter the configure command while in privileged EXEC mode switch config To exit to privileged EXEC mode enter exit or end Use this mode to co...

Page 36: ...witch system contact window string switch config system contact xxx show system info E Show system information switch show system info ip address Ip address Subnet mask Gateway G Configure the IP addr...

Page 37: ...ents switch config dhcpserver dnsip 192 168 1 1 dhcpserver leasetime Hours G Configure lease time in hour switch config dhcpserver leasetime 1 dhcpserver ipbinding IP address I Set static IP for DHCP...

Page 38: ...G Choose the port for modification switch config interface fastEthernet 2 duplex full half I Use the duplex configuration command to specify the duplex mode of operation for Fast Ethernet switch conf...

Page 39: ...st and multicast frame switch config interface fastEthernet 2 switch config if bandwidth type broadcast multicast bandwidth type broadcast only I Set interface ingress limit frame type to only accept...

Page 40: ...config interface fastEthernet 2 switch config if show interface status show interface accounting I show interface statistic counter switch config interface fastEthernet 2 switch config if show interfa...

Page 41: ...ign a static trunk group GroupID 1 4 Port list Member port list This parameter could be a port range ex 1 4 or a port list separate by a comma ex 2 3 6 switch config aggregator group 1 2 4 nolacp or s...

Page 42: ...tion vlan port based grpname Group Name grpid GroupID port PortNumbers V Add new port based VALN switch vlan vlan port based grpname test grpid 2 port 2 4 or switch vlan vlan port based grpname test g...

Page 43: ...ybrid link untag 5 tag 6 8 vlan 8021q trunk PortNumber access link untag UntaggedVID V Assign a access link for VLAN by trunk group switch vlan vlan 8021q trunk 3 access link untag 33 vlan 8021q trunk...

Page 44: ...oes not receive a bridge protocol data unit BPDU message from the root switch within this interval it recomputed the Spanning Tree Protocol STP topology switch config spanning tree max age 15 spanning...

Page 45: ...h config if stp path cost 20 stp path priority Port Priority I Use the spanning tree port priority interface configuration command to configure a port priority that is used when two switches tie for p...

Page 46: ...itch config qos policy weighted fair qos prioritytype port based cos only tos only cos first tos first G Setting of QOS priority type switch config qos prioritytype qos priority portbased Port lowest...

Page 47: ...query Mac Filter Table Commands Set Command Level Description Example mac address table static hwaddr MAC I Configure MAC address table of interface static switch config interface fastEthernet 2 swit...

Page 48: ...ation switch config snmp system location lab snmp system contact System Contact G Set SNMP agent system contact switch config snmp system contact where snmp agent mode v1v2c v3 v1v2cv3 G Select the ag...

Page 49: ...SNMPV3 agent switch config snmpv3 access context name Test group G1 security level AuthPriv match rule Exact views V1 V1 V1 snmpv3 mibview view View Name type Excluded Included sub oid OID G Configur...

Page 50: ...Write View Name Notify View Name G Remove specified access table of SNMPv3 agent switch config no snmpv3 access context name Test group G1 security level AuthPr iv match rule Exact views V1 V1 V1 no s...

Page 51: ...fig if show monitor no monitor I Disable source port of monitor function switch config interface fastEthernet 2 switch config if no monitor 802 1x Commands Set Command Level Description Example 8021x...

Page 52: ...tperiod sec G Use the 802 1x misc quiet period global configuration command to specify the quiet period value of the switch switch config 8021x misc quietperiod 10 8021x misc txperiod sec G Use the 80...

Page 53: ...portstate accept show 8021x E Displays a summary of the 802 1x properties and also the port sates switch show 8021x no 8021x G Disable 802 1x function switch config no 8021x TFTP Commands Set Command...

Page 54: ...G Enable SMTP authentication switch config smtp authentication smtp account account G Configure authentication account switch config smtp account User smtp password password G Configure authentication...

Page 55: ...config no event device cold start no event authentication failure G Disable Authentication failure event typ switch config no event authentication failure no event X ring topology change G Disable X r...

Page 56: ...ight offset Minute G Set offset of daylight saving time if SNTP function is inactive this command can t be applied switch config sntp daylight offset 3 sntp ip IP G Set SNTP server IP if SNTP function...

Page 57: ...rt 7 8 ring couplingport Coupling Port G Configure Coupling Port switch config ring couplingport 1 ring controlport Control Port G Configure Control Port switch config ring controlport 2 ring homingpo...

Page 58: ...Explorer 6 0 or later version It is applied for Java Applets to reducing the network bandwidth requirement while enhancing access speed and presenting an easy viewing screen Preparing for Web Manageme...

Page 59: ...address in the browser address bar Press Enter or Return 3 The login screen will appear 4 Enter the user name and password The default user name and password are the same admin 5 Press Enter or OK and...

Page 60: ...54 Main interface Main interface...

Page 61: ...tch This is Read only and cannot be modified System Location Assign the switch physical location The maximum length is 64 bytes System Contact Enter the name of contact person or organization Firmware...

Page 62: ...dress on the DHCP server IP Address Assigning the IP address that the network is using If the DHCP client function is enabled and the user does not need to assign an IP address the network DHCP server...

Page 63: ...ow IP address High IP Address High IP address is the end of the dynamic IP assignment range For example dynamic IP assignment range is from 192 168 10 100 192 168 10 200 In comparison 192 168 10 200 i...

Page 64: ...rface DHCP Server Port and IP Bindings You can assign the specific IP address that is the IP address in dynamic IP address assignment range to the specific port When the device is connected to the por...

Page 65: ...in your TFTP server IP 2 Firmware File Name the name of firmware file 3 Select Update Firmware interface TFTP Restore Configuration You can restore EEPROM value from TFTP server but you must put the f...

Page 66: ...lue from the switch to the TFTP server You can then go to the TFTP restore configuration page to restore the EEPROM value 1 TFTP Server IP Address Enter the TFTP server IP address 2 Backup File Name E...

Page 67: ...ver IP address 1 Syslog Client Mode select the system log mode client only server only or both client and server 2 System Log Server IP Address assigns the system log server IP address 3 Select to ref...

Page 68: ...where the event log comes from 4 Authentication Select the check box to enable and configure the Email account and password needed for authentication when Email Alert enabled this function will then b...

Page 69: ...d start 2 Device warm start 3 SNMP Authentication Failure and 4 Topology change Mark the checkbox to select the events to be monitored When selected events occur the system will log the event s Device...

Page 70: ...m will issue a log message when port connection is down only Link UP Link Down the system will issue a log message when port connection is up and down Fault Relay Alarm Power Failure Select the check...

Page 71: ...Client enable or disable SNTP function to get the time from the SNTP server 2 Daylight Saving Time enable or disable daylight savings time function When daylight saving time is enabling you need to co...

Page 72: ...hours 3 am HAW Hawaiian Standard 10 hours 2 am Nome Alaska 11 hours 1 am CET Central European FWT French Winter MET Middle European MEWT Middle European Winter SWT Swedish Winter 1 hour 1 pm EET East...

Page 73: ...Saving Period set up the Daylight Saving beginning date and Daylight Savings ending date Both will be different in every year 6 Daylight Savings Offset mins set the offset time 7 Switch Timer Displays...

Page 74: ...check box is checked the IP addresses among Security IP1 IP10 will be allowed access via HTTP service Enable Telnet Server when checked the IP addresses among Security IP1 IP10 will be allowed to acce...

Page 75: ...login user name and password for security management 1 User name Enter the new user name The default is admin 2 Password Enter the new password The default is admin 3 Confirm password Re type the new...

Page 76: ...ctets oversize CRC Align errors fragments and jabbers packets via this port Rx Receive Good Packet The counts of receiving good packets via this port Rx Receive Bad Packet The counts of receiving good...

Page 77: ...If the port setting is disabled then it will not receive or transmit any packet 3 Negotiation set auto negotiation status of the port 4 Speed set the link speed of the port 5 Duplex set full duplex or...

Page 78: ...est priority and is selected as the active LACP 2 Group ID There are three trunk groups to provide configure Choose the Group ID and select 3 LACP If enabled the group is LACP static trunk group If di...

Page 79: ...lect the Group ID and select Port Trunk Aggregator Setting interface Aggregator Information When you set the aggregator setting with LACP disabled the local static trunk group information will be disp...

Page 80: ...lly send LACP protocol packets and responds only if it receives LACP protocol packets from the opposite device Note 1 A link having either two active LACP ports or one active port can perform dynamic...

Page 81: ...ination mirror port for monitoring both RX and TX traffic that comes from the source port Or use one of two ports for monitoring RX traffic only and the other port for TX traffic only The user can con...

Page 82: ...t and Bbroadcast only types are only for ingress frames The egress rate only supports All type Rate Limiting interface All the ports support port ingress and egress rate control For example assume por...

Page 83: ...when detecting the exceptional value e mail The port will send an e mail to the administrator when detecting the exceptional value DMI interface Ports 5 to 8 support the DMI function The DMI table ab...

Page 84: ...ic from the same members of VLAN Basically creating a VLAN from a switch is the logical equivalent of reconnecting a group of network devices to another Layer 2 switch However all the network devices...

Page 85: ...ferent VLAN groups it has to be either capable of tagging packets it sends with VLAN tags or attached to a VLAN aware bridge that is capable of classifying and tagging the packet with different VLAN I...

Page 86: ...will see the VLAN displays Use button to delete an unwanted VLAN Use button to modify an existing VLAN group Note Remember to execute the Save Configuration action otherwise the new configuration wil...

Page 87: ...te tag based VLAN and enable or disable the GVRP protocol There are 256 VLAN groups to provide a configuration for Enable 802 1Q VLAN and all ports on the switch belong to a default VLAN VID is 1 The...

Page 88: ...ing the same VID Trunk Link extended application of Access Link allow user to group ports by setting the same VID on 2 or more switches Hybrid Link Both Access Link and Trunk Link are available 4 Unta...

Page 89: ...83 Group Configuration interface 3 You can change the VLAN group name and VLAN ID 4 Select Group Configuration interface...

Page 90: ...t priority and is selected as the root If the value changes the user must reboot the switch The value must be multiple of 4096 according to the protocol standard rule Max Age 6 40 the number of second...

Page 91: ...0000 2 Priority Decide which port should be blocked by priority in LAN Enter a number 0 through 240 The value of priority must be the multiple of 16 3 P2P Some of the rapid state transactions that are...

Page 92: ...d to the end stations cannot create a bridging loop in the network To configure the port as an edge port set the port to True status 5 Non STP The port includes the STP mathematic calculation True is...

Page 93: ...ation Community Strings You can define a new community string set and remove unwanted community string 1 String Enter the name of the string 2 RO Read Only Enables requests accompanied by this string...

Page 94: ...s of the station and a community string To define management stations as a trap manager enter SNMP community strings and select the SNMP version 1 IP Address Enter the IP address of the trap manager 2...

Page 95: ...context name of context table Select to add context name Select to remove unwanted context name User Profile Configure SNMP v3 user table User ID set up the user name Authentication Password set up th...

Page 96: ...terface Group Table Configure SNMP v3 group table Security Name User ID Assign the user name that you have set up in user table Group Name Set up the group name Select to add context name Select to re...

Page 97: ...match rule Read View Name Set up the read view Write View Name Set up the write view Notify View Name Set up the notify view Select to add context name Select to remove unwanted context name MIBview T...

Page 98: ...ce with the 8 4 2 1 policy rule Use the strict priority scheme The higher queue will always be processed first except when the higher queue is empty Priority Type there are five priority type selectio...

Page 99: ...93 QoS Configuration interface...

Page 100: ...evel Each level has four types of priority high middle low and lowest The default value is lowest priority for each level When the IP packet is received the system will check the TOS level value in th...

Page 101: ...ge sent from the querier IGMP router or switch asking for a response from each host belonging to the multicast group Report A message sent by a host to the querier to indicate that the host wants to b...

Page 102: ...Protocol Enable or disable the IGMP protocol IGMP Query Select the IGMP query function as Enable or Auto to set the switch as a querier for IGMP version 2 multicast network Select IGMP Configuration i...

Page 103: ...er switches in the X Ring group If there are 2 or more switches in master mode then software will select the switch with lowest MAC address number as the ring master The X Ring master ring mode will b...

Page 104: ...switch to be the Dual Homing port In an X Ring group the maximum number of Dual Homing ports is one Dual Homing only work when the X Ring function is enabled And then select to apply the configuration...

Page 105: ...and wireless LAN access points to advertise information about themselves to other nodes on the network and store the information they discover LLDP runs on all 802 media The protocol runs over the da...

Page 106: ...ers of this function 1 IEEE 802 1x Protocol enable or disable 802 1x protocol 2 Radius Server IP set the Radius Server IP address 3 Server Port set the UDP destination port for authentication requests...

Page 107: ...quired to be held in the unauthorized state Accept the specified port is required to be held in the authorized state Authorized the specified port is set to the authorized or unauthorized state in acc...

Page 108: ...ime the switch waits for a supplicant response to an EAP request 4 Server Timeout set the period of time the switch waits for a server response to an authentication request 5 Maximum Requests set the...

Page 109: ...onnected or powered off device is active on the network again You can add modify delete a static MAC address Add the Static MAC Address You can add static MAC address in the switch MAC table 1 MAC Add...

Page 110: ...figure MAC addresses and reduce the un safety You can add and delete filtering MAC addresses MAC Filtering interface 1 MAC Address Enter the MAC address that you want to filter 2 Select 3 If you want...

Page 111: ...device s MAC address and related devices MAC addresses 1 Select the port 2 The selected port of the static MAC addresses information will be displayed here 3 Select to clear the current port s static...

Page 112: ...st filtering network devices only forward multicast traffic to the ports that are connected to the registered end stations IP Address Assign a multicast group IP address in the range of 224 0 0 0 239...

Page 113: ...efault interface Save Configuration Save all configuration changes that you have made in the system To ensure that all configuration changes will be saved select to save all the changes to the flash m...

Page 114: ...ir connection does not exceed 100 meters 328 feet LED Diagnostic Indicators Diagnosing LED Indicators the Switch can be easily monitored through LED panel indicators that describe common problems you...

Page 115: ...ark Road Danbury CT 06810 USA Gildersome Morley T 203 796 5300 Leeds LS27 7LE UK F 203 796 5303 T 44 0 113 307 6400 888 678 9427 Tech Support F 44 0 113 253 7462 info ComNet net info europe ComNet net...

Search results

Summary of Contents for CNGE8FX4TX4MS

Reviews:

Related manuals for CNGE8FX4TX4MS

Brands by name

Popular brands

Comnet CNGE8FX4TX4MS, Installation And Operation Manual

Search results

Summary of Contents for CNGE8FX4TX4MS

Reviews:

Related manuals for CNGE8FX4TX4MS

Brands by name

Popular brands