Comtrol WR7802-XT Series User Manual Download Page 103

Page: 103 / 128

RocketLinx WR7802-XT Series User Guide

: 2000638 Rev. A

Security - Port Security Page - 101

Configuration Using the Web User Interface

Security - Port Security Page

The Port Security feature allows you to stop the MAC address learning for a specific port. After stopping MAC
learning, only the MAC address listed in the

Port Security List

can access the switch and transmit/receive

traffic.

Beta

Version

Summary of Contents for WR7802-XT Series

Page 1: ...WR7802 XT Series Industrial Managed PoE Cellular Router 2 Gigabit PoE Plus Ports 2 Gigabit SFP Ports User Guide B e t a V e r s i o n ...

Page 2: ...r respective owners First Edition June 27 2018 Copyright 2017 2018 Comtrol Corporation All Rights Reserved Comtrol Corporation makes no representations or warranties with regard to the contents of this document or to the suitability of the Comtrol product for any particular purpose Specifications are subject to change without notice Some software or features may not be available at the time of pub...

Page 3: ...ternal Antenna 12 How to Select an External Antenna 12 Antenna Alignment 13 Lightning Arrestor 13 Connect the Power 13 Connect the Digital Output Dry Relay Output 14 Ground the WR7802 XT 14 Connect the Ethernet Ports 15 Connect SFP Transceivers Ports 3 4 16 Mount the WR7802 XT 16 LED Descriptions 17 Reset Button 17 Using PortVision DX 19 PortVision DX Overview 19 PortVision DX Requirements 20 Inst...

Page 4: ...ltering Page 54 System Outbound Firewall Dest Destination IP Filtering Page 54 System Outbound Firewall Src Source Port Filtering Page 55 System Outbound Firewall Dest Destination Port Filtering Page 55 System Inbound Filtering Page 56 System NAT Settings Submenu 57 System NAT Settings Port Forwarding Page 57 System NAT Settings DMZ Page 58 System NAT Settings Advanced Page 59 Power Over Ethernet ...

Page 5: ...ng Page 97 VPN VPN Certificate Page 98 VPN IPsec Settings Page 98 Security Port Security Page 101 Management Pages 102 Management OPCUA Settings Page 103 Management Remote Settings Page 104 Management SMTP Settings Page 107 Management Login Settings Page 108 Management Firmware Upgrade Page 110 Management Configuration File Page 111 Management LLDP Configuration Page 112 Tools Pages 113 Tools Syst...

Page 6: ...4 RocketLinx WR7802 XT Series User Guide 2000638 Rev A Table of Contents Table of Contents B e t a V e r s i o n ...

Page 7: ...gy and 1 1 OpenVPN Server for secure M2M connectivity The WR7802 XT supports dual 54V 48 57VDC input Digital Output and a wide operating temperature of 40 75 with an IP30 enclosure Basic Factory Default Settings The following table provides an overview of the default settings on the WR7802 XT Standard Details Cellular Standard 3GPP Release 9 Long Term Evolution LTE 2x2 DL MIMO LTE category 3 Maxim...

Page 8: ...this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from th...

Page 9: ...onnect a power supply that corresponds to the type of your device For power connection make sure the following requirements are met The DC power circuit of the product is usually not an isolated design circuit In practice it is suggested to use an isolated DC power design PSU for field installations Besides the PSU selection good digital earth grounding is also important before powering on the sys...

Page 10: ...ot use a metal ladder Do not work on a wet or windy day Wear shoes with rubber soles and heels rubber gloves long sleeved shirt or jacket If you are installing the equipment in an indoor office or factory make sure that the device and power source are properly grounded A professional wireless IT Engineer can provide advice for the AP location channel and field plan to get better performance and co...

Page 11: ...ifications Adhere to the these general notifications Only operate the WR7802 XT according to the technical specifications You can find this information in the product data sheet on the web site Quick Installation Guide and this User Guide Read the installation instructions before connecting the WR7802 XT to the power source Only trained and qualified personnel should be allowed to install replace ...

Page 12: ...he radio signals Use an extended antenna cable and install the external antenna in a free space that helps provide a better radio signal Only technicians authorized by the manufacturer are permitted to open the WR7802 XT housing Without the manufacturer s permission opening the housing means the product is not covered under warranty and not responsible for any unexpected risk Installation Notifica...

Page 13: ... startup or backup SIM socket using the Cellular Basic Settings web page Note The Cellular Redundant option is only available if you insert two SIM cards into the sockets If you only insert one DO NOT enable Cellular Redundant Use the following procedure to insert the SIM card Note The WR7802 XT cannot be powered on when inserting the SIM cards Later when you power on the WR7802 XT it takes approx...

Page 14: ...ternal antenna you must choose the correct frequency band of the antenna and it must conform to the radio band you connected The WR7802 XT requires an N Type external antenna which is an SMA to N Type connector or RF cable Remember that the WR7802 XT antenna connector is an RP SMA female that connects to RP SMA male cable How to Select an External Antenna Normally the antenna that is shipped with ...

Page 15: ...e to outside the box to avoid the Radio lost Connect the Power The following table provides WR7802 XT electrical specifications The WR7802 XT supports redundant power supplies if you connect both PWR1 and PWR2 The WR7802 XT accepts a positive power source If both power inputs are connected the WR7802 XT is powered from the highest connected voltage The WR7802 XT does not support reverse polarity p...

Page 16: ... specifications 1 Insert the positive and negative wires 12 24 AWG into V and V 2 Tighten the wire clamp screws to prevent the wires from coming loose 3 Make sure that you tighten the power connector screws into the housing so that the power connector is secure Ground the WR7802 XT Connect a ground wire between the chassis and earth ground using 12 24AWG wire to ensure that the WR7802 XT is not da...

Page 17: ...pposite end Connect one side of an Ethernet cable into any switch port and connect the other side to your attached device The LNK ACT LED is lit when the cable is correctly connected Always make sure that the cables between the switches and attached devices for example switch hub or workstation are less than 100 meters 328 feet and meet these requirements 10BASE T Category 3 or higher cable 100BAS...

Page 18: ...s 1000Mbps If you want to use a 100M SFP Fiber transceiver you MUST change the speed to 100Mbp in management interface first Multi Mode cables should not exceed 2KM and Single Mode cables should not exceed 30km Mount the WR7802 XT You can use the following procedure to mount the WR7802 XT on a DIN rail or on the wall The DIN rail clip is already attached to the WR7802 XT If the DIN rail clip is no...

Page 19: ...applied No power GF Fiber Port GF1 GF2 Status GF is activating GF is linked up No link PoE PoE Output Status N A Delivering PoE power No PD is attached ETH Eth1 Eth2 Status Port is activating Port is linked up Port not linked up DO Digital Output Status N A The Relay is ON It may indicate the alarm of specific events The Relay is OFF R Boot Status Booting LTE connected Boot finished SYS System Sta...

Page 20: ...18 Reset Button RocketLinx WR7802 XT Series User Guide 2000638 Rev A Hardware Installation B e t a V e r s i o n ...

Page 21: ...onfiguring multiple installations with the same features Page 28 Using the LED Tracker Page 29 Organize how PortVision DX displays your Comtrol Ethernet attached products Page 28 Access the latest documentation for your Comtrol Ethernet attached product PortVision DX Overview PortVision DX automatically detects Comtrol Ethernet attached products physically attached to the local network segment so ...

Page 22: ...omatically during the configuration process Installing PortVision DX During initial configuration PortVision DX automatically detects and identifies WR7802 XT switches if they are in the same network segment You can download the latest version of PortVision DX from http downloads comtrol com rocketlinx portvision_dx 1 Execute the PortVision_DX version msi file Note Depending on your operating syst...

Page 23: ... 10 Go the next subsection to use PortVision DX to program the network information Configuring the Network Settings The WR7802 XT has the following default values for the LAN IP address when shipped from the factory IP address 192 168 250 250 Subnet mask 255 255 255 0 Gateway address 192 168 250 1 Use the following procedure to change the default network settings on the WR7802 XT for your network ...

Page 24: ...the Properties screen using one of these methods Double click the WR7802 XT in the Device Tree or Device List pane Highlight the WR7802 XT in the Device Tree or Device List pane and click the Properties button Right click the WR7802 XT in the Device Tree or Device List pane and click Properties in the popup menu Highlight the WR7802 XT click the Manage menu and then Properties 5 Optionally rename ...

Page 25: ...lose to exit the Properties window 11 You should verify that you have the latest firmware loaded on the WR7802 XT because a newer version typically includes feature enhancements and bug fixes Refer to Checking the Firmware Version on Page 23 and if necessary Uploading the Latest Firmware on Page 25 12 If you have the latest firmware you can begin feature configuration see one of these sections Con...

Page 26: ...e Under Software Version The first number reflects the firmware version 4 Check the Comtrol download site for the latest firmware Simply click your product type and click the Software link and check the latest version against the version on the WR7802 XT Use the next subsection for procedures to upload the firmware web interface B e t a V e r s i o n ...

Page 27: ... click Advanced Upload firmware 3 Navigate to the location of the firmware files select the appropriate file and then click Open 4 Click Yes to the Upload Firmware message 5 Click Ok to the message notifying you that you should wait to use the WR7802 XT when the status returns to ON LINE 6 Right click the WR7802 XT in the Device List pane and click Refresh Optionally you can click the Refresh butt...

Page 28: ... click the Scan button 3 Shift click the multiple WR7802 XT switches on the Main screen that you want to update and right click and then click Advanced Upload Firmware 4 Browse click the firmware img file Open Please locate the new firmware and then click Yes Upload Firmware It may take a few minutes for the firmware to upload onto all of the WR7802 XT switches The WR7802 XT reboots itself during ...

Page 29: ...n DX help system for additional information about adding unmanaged RocketLinx switches or third party devices or switches Use the following procedure to add a remote WR7802 XT to PortVision DX 1 Access the New Device window using one of these methods Click Add New Device in the Manage menu Right click a folder or a RocketLinx switch in the Device Tree pane and click Add New Device 2 Select the app...

Page 30: ...ghlight the WR7802 XT in the Device List pane and use one of the following methods Click the Save button Right click and then click Configuration Save 2 Browse to the location you want to save the file enter a file name and click Save 3 Click Ok to close the Save Configuration Completed message Loading a Configuration File Use the following procedure to load a previously saved a WR7802 XT configur...

Page 31: ...e on off the LEDs on a specific device so that you can locate the physical unit Use this procedure to toggle the LED Tracker feature on RocketLinx switches 1 Right click the WR7802 XT in the Device List pane click Tracker and then click ON The WR7802 XT SYS LED will flash for five seconds 2 If necessary you may need to click Tracker and ON several times to catch the flashing SYS LED B e t a V e r ...

Page 32: ...to other applications using Tools Applications Customize feature The following illustrates how you can customize your view See the PortVision DX Help system for detailed information about modifying the view For example the above screen shot illustrates devices layered in folders Accessing RocketLinx Documentation from PortVision DX You can use this procedure in PortVision DX to download and open t...

Page 33: ...ton to make sure that the latest documentation is available to PortVision DX 4 Select the product Category from the drop list 5 Select the document you want to download from the Documentation drop list Note This image may not reflect your RocketLinx 6 Click the Download the latest edition from the web button Note It may take a few minutes to download depending on your connection speed The document...

Page 34: ...ision DX Start Programs Comtrol PortVision DX PortVision DX or use the desktop shortcut 2 Click Help Documentation 3 Click the Open the local copy of the document button to view the document Note This image may not reflect your RocketLinx Note If the document fails to open it may be that your browser has been disabled You can still access the document by clicking the Browse the folder for already ...

Page 35: ...ss of your system to use a static IP address of 192 168 250 x X cannot be 0 1 250 or 255 The WR7802 XT default IP address is 192 168 250 250 Connect the system to one of the LAN ports GT1 or GT2 How to Log Into the WR7802 XT You can log into the WR7802 XT using a standard http connection or through a secure connection https Use the appropriate discussion for your environment Web User Interface on ...

Page 36: ...uration Using the Web User Interface 2 Launch the web browser on the PC using one of these methods Right click the WR7802 XT in PortVision DX and click Webpage Open your browser enter the IP address of the switch and then press Enter For example http 10 0 0 140 B e t a V e r s i o n ...

Page 37: ...r name and password are both admin The first web page that displays is the Information page which provides overall status of the WR7802 XT Note If you cannot log into the WR7802 XT refer to Diagnosing a Login Failure on Page 39 4 If you have not done so you can change the WR7802 XT IP address to meet your network environment using the System IP Settings page B e t a V e r s i o n ...

Page 38: ...using PortVision DX Configuring the Network Settings on Page 21 you need to change your computer IP address to 192 168 250 x Network Mask 255 255 255 0 The default IP address for the WR7802 XT is 192 168 250 250 1 Open a command prompt window and ping the IP address for the WR7802 XT to verify a normal response time 2 Launch the web browser and type https 192 168 250 250 or the IP address of the W...

Page 39: ...Series User Guide 2000638 Rev A Secure Web User Interface 37 Configuration Using the Web User Interface 4 Enter the user name and the password and click OK The default name and password are both admin B e t a V e r s i o n ...

Page 40: ...web page that displays is the Information page which provides overall status of the WR7802 XT Note If you cannot log into the WR7802 XT refer to Diagnosing a Login Failure on Page 39 5 If you have not done so you can change the WR7802 XT IP address to meet your network environment using the System IP Settings page B e t a V e r s i o n ...

Page 41: ...The WR7802 XT provides these top level menus with the corresponding web pages Status Web Pages on Page 41 Status Information Page on Page 42 Status Network Flow Page on Page 44 Status ARP Table Page on Page 45 Status DHCP Client List Page on Page 45 System Web Pages on Page 46 System Basic Settings Page on Page 46 System IP Settings Page on Page 47 System Time Settings Page on Page 50 System Relay...

Page 42: ...t Filtering Pages on Page 73 Multicast Filtering IGMP Snooping Page on Page 74 Multicast Filtering IGMP Query Page on Page 75 Network Redundancy Pages on Page 76 Network Redundancy STP Configuration Page on Page 77 Network Redundancy STP Port Configuration Page on Page 79 Network Redundancy STP Information Page on Page 80 Network Redundancy Redundant Ring Configuration Page on Page 81 Network Redu...

Page 43: ...e Upgrade Page on Page 110 Management Configuration File Page on Page 111 Management LLDP Configuration Page on Page 112 Tools Pages on Page 113 Tools System Log Page on Page 113 Tools Ping Watchdog Page on Page 114 Tools Ping Page on Page 115 Save Page on Page 115 Logout Page on Page 115 Reboot Page on Page 115 Status Web Pages The Status menu provides these web pages Status Information Page on P...

Page 44: ...RocketLinx WR7802 XT Series User Guide 2000638 Rev A Configuration Using the Web User Interface Status Information Page The Information page provides current status and some basic settings for the WR7802 XT B e t a V e r s i o n ...

Page 45: ...name Some ISPs require a specific APN which should be configured on the Cellular Basic Setting page Service Type Displays the type of service After 3G LTE connects the connected ISP updates the service type here The possible types are GSM UMTS GSM w EGPRS UMTS w HSDPA UMTS w HSDPA and HSUPA E UTRAN Unknown No Service default value Typically Cellular service is mainly HSPA LTE data communications T...

Page 46: ... resolve the issue SIM is deactivated The SIM card may have some problem Please check with your ISP to resolve the issue Connection Status Connected The 3G LTE interface is connected to the base station Not Connected The 3G LTE interface is not connected to the base station IP Address This is the Cellular IP address assigned by the ISP Network Flow Page Poll Interval The Poll Interval time setting...

Page 47: ...rface MAC Address The MAC Address learnt from the interface Interface The interface that learnt the ARP packet IP and MAC Address Refresh Click to refresh the table DHCP Client List Page IP Address The assigned IP address of the connected DHCP client device MAC Address The MAC address of the connected DHCP client device Time Expired s The DHCP expiration timer of the connected DHCP client device T...

Page 48: ...tem Relay Settings Page on Page 51 System DDNS Settings Page on Page 51 System Traffic Shaping Page on Page 53 System Outbound Firewall Submenu on Page 53 System Inbound Filtering Page on Page 56 System NAT Settings Submenu on Page 57 System Basic Settings Page The System Basic Settings page allows you to give a name to identify an access point name It allows maximum 15 characters and no spaces No...

Page 49: ...ystem IP Settings Page 47 Configuration Using the Web User Interface System IP Settings Page Use the IP Settings page to configure the IP related parameters for LAN interfaces which connects to the LAN port of your router Access Point B e t a V e r s i o n ...

Page 50: ...st importantly it translates domain names meaningful into the numerical identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide IPv6 Address This field allows you to enter an IPv6 address to add to the management VLAN By default the management interface automatically configures with a link local address Click the Add button to add the ent...

Page 51: ...connections per session is 64 DHCP IP Address Range Start This is the starting IP address that DHCP will assign The default is 192 168 250 100 DHCP IP Address Range End This is the ending IP address that DHCP will assign The default is 192 168 250 200 DHCP Subnet Mask This is the DHCP subnet mask The default is 255 255 255 0 DHCP Gateway This is the DHCP gateway address The default is 192 168 250 ...

Page 52: ... from your PC or Cellular module If you click the Get PC Time button the current time is updated according to your PC s time If you click Get Cellular Time the current time is updated according to your module s RTC real time clock This button is hidden if a Cellular network is not detected Time Zone Select the time zone of your country from the drop down list NTP You can select the Enable NTP clie...

Page 53: ...tings Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted System DDNS Settings Page Use the DDNS Settings page to configure the parameters for DDNS Dynamic Domain Name System client Since not all carrier providers provide a fixed IP service and the dynamic IP address of Cellular interface may change often making it difficult to remotely manage t...

Page 54: ... Select this option if you want to enable a DDNS domain name instead of a fixed IP address Server The WR7802 XT supports dyndns org freedns afraid org and no ip com services Domain Name This is the domain name provided by the Cellular carrier User Name This is user name provided by the Cellular carrier Password This is the password for the DDNS client Confirm Password You must confirm the DDNS cli...

Page 55: ...ugh the gateway Src Port Filtering Page 55 Source port filtering from the LAN to Internet through the gateway Dest Port Filtering Page 55 Destination ports filtering from the LAN to Internet through the gateway Traffic Shaping Page Enable Traffic Shaping Select the item to activate the feature After enabling traffic shaping you can configure the Incoming Traffic Limit Incoming Traffic Burst Outgoi...

Page 56: ...y to activate the settings you can then see the entries you configured in the table below Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted System Outbound Firewall Dest Destination IP Filtering Page Entries in this table are used to restrict the computers in the LAN from accessing certain websites in the WAN according to IP address Select Ena...

Page 57: ... you can then see the entries you configured in the table below Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted System Outbound Firewall Dest Destination Port Filtering Page Use the entries in this table to restrict certain ports of data packets from your local network to the Internet through the gateway Use of such filters can be helpful in...

Page 58: ...all the IP address from the Internet can NOT access the LAN through the gateway You can configure Remote Management Exception for exceptional items that includes Web Telnet SSH and SNMP Inbound Filtering Page Exception The Exception table allows you to configure the exception list Src IP Address The entry allows you to configure the source IP address from the Internet Src Port Range The source por...

Page 59: ...etwork is for Wide Area Network Internet Use the NAT Settings pages to configure the NAT settings System NAT Settings Port Forwarding Page on Page 57 System NAT Settings DMZ Page on Page 58 System NAT Settings Advanced Page on Page 59 System NAT Settings Port Forwarding Page Entries in the Port Forwarding table allows you to automatically redirect common network services to a specific machine behi...

Page 60: ...sible to Internet traffic such as Web HTTP servers FTP servers SMTP e mail servers and DNS servers Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted Protocol Configure the protocol type TCP UDP or Both TCP and UDP Port Range Configure the port range of the LAN the traffic from the public port is redirected to these port Comment Add supporting ...

Page 61: ...Configuration pages to configure Power over Ethernet PoE Control Page on Page 59 Power over Ethernet PoE Schedule Page on Page 62 Power over Ethernet PoE Status Page on Page 63 Power over Ethernet PoE Control Page This page is used to configure the Power over Ethernet parameters for the ports Note During the PoE operation the surface accumulates heat and causes the surface temperature to become hi...

Page 62: ...ection for the attached PoE devices a Enter the IP Address of the device attached to the port b Enter the Cycle Time which is the time reserved per duration of the PD reboot The range is from 10 3600 seconds c Click the Apply button Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted PoE Control System Configuration PoE System Enable or Disable ...

Page 63: ...system turns off the low priority port first then high and critical are the last PD Status Detection Enable PD Status Detection You can detect the connected PD status If the connected device is failing the system resets the PoE of the port as the first step to assist the field engineer IP address The IP address of the connected PD of the port Cycle time s This is the time reserved per duration of ...

Page 64: ...function The Power over Ethernet schedule supports hourly and weekly base PoE schedule configuration Select the target port and select the time frames and then click Apply to activate the PoE scheduling function The PoE port works with the predefined behavior and follows the system clock As this result be sure the system clock have configured as your local time for the reference of scheduling cont...

Page 65: ...e Power over Ethernet PoE Status Page The PoE Status page shows the operating status of each PoE Port The information includes PoE mode Powering Status PD class Power Budget W Power Consumption W Voltage and Current of the connected device The following screen illustrates that there is a PoE IP camera on Port 1 B e t a V e r s i o n ...

Page 66: ...Configuration Port Status Page This page displays the current status of the ports Port Status Page Link This is the link status with is either Up or Down Speed Duplex This is the port speed 10 100 or 1000 and duplex Full or half Flow Control The status of flow control SFP Vendor Vendor name of the SFP transceiver connected to the port Most SFP transceivers provide vendor information which allows y...

Page 67: ... default is AutoNegotiation it will based on transmission to auto negotiate the speed and duplex mode You can also select 10 Full 10 Half 100 Full or 100 Half Ports 3 and 4 The ports represent the SFP fiber ports Factory default is 1000 which means that the port is in Gigabit speed You will need to configure to 100 if you use 100M SFP transceiver Note It is necessary to reset system if the SFP con...

Page 68: ...ches IEEE 802 1Q tag based VLAN makes use of VLAN control information stored in a VLAN header attached to IEEE 802 3 packet frames This tag contains a VLAN Identifier VID that indicates which VLAN a frame belongs to Since each switch only has to check a frame s tag without the need to dissect the contents of the frame this also saves a lot of computing resources within the switch VLAN Configuratio...

Page 69: ...two PVIDs Click the Apply button to activate the PVID settings Management VLAN ID The management VLAN ID is the VLAN ID of the CPU interface so that only member ports of the management VLAN can ping and access the router The default management VLAN ID is 1 Add Static VLAN Assign VLAN ID for a new VLAN and specify the egress outgoing rule to be Untag or Tag on each port Untag Indicates that egress ...

Page 70: ...es Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted Rate Control Packet type You can select the packet type that you want to filter The packet types of the Ingress Rule listed here include All Broadcast Only Broadcast Multicast and Broadcast Multicast Unknown Unicast The packet types of the Egress Rule outgoing only support all packet types R...

Page 71: ...ntifier Link Indicates the link status Up or Down RX Good The count of good frames received which is the total number of received unicast broadcast multicast and pause frames RX Bad The count of bad frames received which is the total number of undersize fragment oversize jabber RXErr and FCSErr frames RX Abort The count of aborted frames received which is the total number of discarded and filtered...

Page 72: ...rial network This group includes these page Traffic Prioritization QoS Setting Page on Page 70 Traffic Prioritization CoS Queue Mapping Page on Page 71 Traffic Prioritization DSCP Queue Mapping Page on Page 72 Traffic Prioritization QoS Setting Page The QoS Setting page provides a method to queue scheduling You can select one of the Queue Scheduling rules QoS Setting 8 4 2 1 weighted fair queuing ...

Page 73: ... mapped to physical Queue 2 the middle physical queue CoS values 6 and 7 are mapped to physical Queue 3 the high physical queue Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted Port Settings CoS This column indicates the default port priority value for untagged or priority tagged frames When the WR7802 XT receives the frames it attaches the v...

Page 74: ...de Point values for the Physical Queue mapping table The switch fabric of the WR7802 XT supports 4 physical queues Lowest Low Middle and High You should therefore assign how to map DSCP value to the level of the physical queue You can freely change the mapping table to follow the Upper Layer 3 switch or routers DSCP setting Note You must Save Page 115 settings if you want to maintain these setting...

Page 75: ... routers and hosts that support IGMP Enabling IGMP Snooping allows the ports to detect IGMP queries report packets and manage multicast traffic through the switch IGMP has three fundamental types of messages as shown below You will see the information of the IGMP Snooping function in this section including different multicast groups VID and member ports and IP multicast addresses that range from 2...

Page 76: ...maintain these settings if the WR7802 XT is rebooted IGMP Snooping Enable IGMP Snooping Click the check box and the Apply button to enable the IGMP Snooping feature VLAN Overview You can assign IGMP Snooping to for specific VLAN You can enable IGMP Snooping for some VLANs so that some of the VLANs will support IGMP Snooping and others will not Click the check box in the Select column and then sele...

Page 77: ...ress becomes the IGMP querier Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted IGMP Query IGMP Query Version You can select V1 V2 or Disable V1 means IGMP V1 General Query V2 means IGMP V2 General Query The query is forwarded to all multicast groups in the VLAN Disable allows you to disable IGMP Query Query Interval s The period of query sent...

Page 78: ... gateway failure backup mechanism you may want to review the following information VRRP requires all gateway participants to run VRRP protocol and it detects a gateway failure using IP multicast Redundant Gateway detects a gateway failure with Redundant Ring status and ICMP packets Since VRRP and Redundant Gateway use different protocols you can use one or the other but not both Redundant Gateway ...

Page 79: ...the bridge with the lowest MAC address will then become the root bridge Note The bridge priority value must be in multiples of 4096 A device with a lower number has a higher bridge priority Ex 4096 is higher than 32768 Note The Web GUI allows you to select the priority number directly If you configure the value through the CLI or SNMP you may need to type the value directly Make sure that you foll...

Page 80: ... 10 seconds This is a periodic timer that drives the router to send out BPDU Bridge Protocol Data Unit packet to check current STP status The root bridge of the spanning tree topology periodically sends out a hello message to other devices on the network to check if the topology is healthy The hello time is the amount of time the root has waited during sending hello messages Forward Delay Time 4 3...

Page 81: ...TP or RSTP Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted STP Port Configuration Port This is the port number STP State Enable or Disable the STP RSTP of the port The default is Enabled Use the STP Configuration page to enable and set the STP or RSTP mode Path Cost Enter a number between 1 and 200 000 000 This value represents the cost of t...

Page 82: ...ion Page This page allows you to see the information of the root switch and port status Root Information You can see Root Bridge Address Root Priority Root Port Root Path Cost and the Max Age Hello Time and Forward Delay of BPDU sent from the root switch Port Information You can see Port Role Port State Path Cost and Port Priority of the STP ports B e t a V e r s i o n ...

Page 83: ...a maximum 32 rings Name Type the name of the Ring If it is not filled in when creating it is automatically named Ring and the Ring ID number for example Ring2 Priority The switch with highest priority highest value is automatically selected as the Ring Master If all of the switches have the same priority then the switch with the highest MAC address is selected as the Ring Master Ring Port 1 Ring P...

Page 84: ...onRM Emigrant or Disabled Status If this field is Normal which means the redundancy is approved If any one of the link in this Ring is broken then the status will be Abnormal RM MAC The MAC address of Ring Master of this Ring It helps to find the redundant path Blocking Port This field shows which is blocked port of RM Role Transition count This means how many times this switch has changed its Rol...

Page 85: ...ovides a Cellular interface for external network transmission If there are two link failures this would mean that the other devices cannot transmit data to the external network You would manually need to change the settings on each device to recover external access To solve this problem you can use the Redundant Gateway If two links fail the Redundant Gateway device creates an internal virtual gat...

Page 86: ...it is changed to Master mode Redundant gateway You can Enable or Disable the Redundant Gateway function Gateway Address Type the IP address of the main gateway of the Redundant Ring Ring ID The redundant gateway checks the ring status of this Ring ID ARP Miss Count Default 5 Type the number of ARP missed packets count When Ring status is abnormal system transmits ARP packets in the Ring to check w...

Page 87: ... from 1 255 The device within the same VRRP domain should have the same Virtual Router ID Virtual IP This is the virtual IP of the VRRP domain This is the Gateway IP of the clients Priority VRRP priority is 0 to 255 The greater the number the higher the priority In a VRRP domain the VRRP device should have the same Virtual Router ID and Virtual IP and choose who should be the VRRP Master The devic...

Page 88: ...P Backup takes over its job immediately However if the VRRP master link is recovered who should be the Master The preempt mode determines whether the VRRP master should be recovered or not If the Preempt is Enabled and the interface is the VRRP Master the interface is recovered If the Preempt is Disabled and the interface is VRRP Master there is no change while the link is recovered The VRRP Backu...

Page 89: ...on Page 90 Cellular Cellular Basic Settings Page The WR7802 XT supports a dual SIM socket You can select SIM 1 or SIM 2 as the startup SIM socket and configure whether the second SIM socket will function redundantly with each other or not For Cellular SIM settings normally you can connect the Cellular Gateway to the ISP Cellular network without configuring Cellular settings However in some countri...

Page 90: ... primary Cellular connection fails The selected SIM number is the primary SIM the other one is backup SIM The redundant timer is based on your settings of Reconnection Delay and Retries Note Adjust the Reconnection Delay and Retires based on your application if you requests shorter redundant time you can modify the delay time or retires times APN Every ISP has a specific APN Access Point Name assi...

Page 91: ...ently selected SIM slot SIM Status The current SIM status of the selected SIM slot Number of Retries Remaining Displays how many retries of entering the PIN on a SIM card before it locks out SIM PIN This is a pin code that locks the SIM card until you enter the correct code Use the pin to protect your account The default code is set by the Service Provider Remember PIN Save the PIN code on this de...

Page 92: ...port TCP port then the device will automatically update the current IP address and the new IP address once it is changed to the server Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted Mobile Manager Server You can Enable or Disable this function The default value is disabled Server Address Enter the Mobile Manager s IP address in this field w...

Page 93: ... CA certificate and key that are used to sign each of the server and client certificates In static encryption mode each VPN client shares the same static key with OpenVPN server In TLS encryption mode each VPN client needs 3 keys while VPN server needs 4 keys The description of the 7 keys listed below If the WR7802 XT acts as an OpenVPN client the ca crt client crt and client key are needed to est...

Page 94: ...is successful Tx Rx Bytes The transmission data volume in bytes displays after the VPN client connects OpenVPN Server Information Enabled yes The VPN function is enabled no The VPN function not enabled Connection Status Connected The VPN connection is successfully connected Disconnected The VPN has not connected Tx Rx Bytes The transmission data volume in bytes displays after the VPN client connec...

Page 95: ...ch the VPN server settings for most parameters Check with the administrator of the VPN server to determine the parameters for this web page OpenVPN Client Settings Encryption Mode Select the encryption mode Static or TLS Static Use a pre shared static key TLS Use SSL TLS certificates for authentication and key exchange Server IP 1 Enter the IP address of the remote VPN server Server IP 2 Optionall...

Page 96: ...t occurs The default value is Enable Persist key Select enable or disable the persist key function that keeps the first key to use if the VPN restarts after the Keepalive timeout occurs The default value is Enable Use LZO Compression You can choose to select LZO Compression or not This function compresses data to decrease the traffic but it also needs more CPU The default value is Disable Keepaliv...

Page 97: ...e the Ethernet ports specific IP as the default gateway for the connected devices for example PCs For VPN Tunnel you can choose Cellular interface Enter the connected IP in the ifconfig field and apply save the settings You can use the following steps to create the one to one VPN Tunnel 1 Define the IP of both ends and secure tunnel 2 Select the general VPN settings a Encryption Mode Port Tunnel p...

Page 98: ...nt when the network fails Persist tun Select to enable or disable the persist tun function which keeps the tun Layer 3 tap Layer 2 device linked up after the Keepalive timeout occurs The default value is Enable Persist key Select to enable or disable the persist key function which keeps the first key to use if VPN restart after Keepalive timeout default value is Enable Use LZO Compression Select w...

Page 99: ... click Delete Selected to delete selected entries Click Delete All to delete all entries Press Refresh to update the table VPN Port Forwarding Enable VPN Port Forwarding Select the Enable VPN Port Forwarding check box if you want to configure this feature Complete the remaining fields and click Apply Protocol Configure Both TCP and UDP TCP or UDP protocol type Source IP Address Enter a specific so...

Page 100: ...nnel has two participants on its ends called the left and right Which participant is considered the left or the right is arbitrary You can configure various parameters for these two ends using this page The following image shows a simple example of an IPsec connection Open VPN Mode VPN Certificate File Name OpenVPN Server TLS Mode ca crt server key server crt dh1024 pem OpenVPN Client TLS Mode ca ...

Page 101: ...te a new public key by pressing the Generate key button The Public key is used when the authentication method set to RSA key in the configuration below Current Public Key The content of the current public key is displayed Enable IPsec Connection Use this check box to enable or disable the IPSec function Configure the appropriate fields below B e t a V e r s i o n ...

Page 102: ...he right endpoint For example a WAN port IP address or Cellular IP address Left Source IP Address As Left IP of network interface enter the LAN port interface IP address of the left endpoint Left Subnet network netmask Enter the subnet mask of the left endpoint in CIDR notation for example 192 168 10 0 24 Left RSA Key The attribute is only required when using the RSA key authentication method usin...

Page 103: ...Using the Web User Interface Security Port Security Page The Port Security feature allows you to stop the MAC address learning for a specific port After stopping MAC learning only the MAC address listed in the Port Security List can access the switch and transmit receive traffic B e t a V e r s i o n ...

Page 104: ...ecurity State Port The port identifier State Enable or disable port security on the corresponding port Click the Apply button to apply the configuration changes Add Port Security Entry Port The port ID Select the appropriate from the Port drop list VLAN ID The VLAN ID If you want to insert a new MAC entry the VLAN ID must be correct when creating a new entry MAC Address MAC address of the entry Cl...

Page 105: ...e You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted OPC UA Server Settings Enable OPCUA Server Click the check box to enable the OPC UA Server function Clear Certificate Key Click to clear the certificate key saved on the system Port Specifies the port number range which is from 1 to 65535 The default value is 48020 Change Password Click the check ...

Page 106: ...igure SNMP settings V2c and V3 Make sure that the SNMP configuration matches between the device and SNMP server Remote Settings Remote Management Privacy Select which remote services are permitted to be opened in your environment The services include Telnet SNMP SNMP Trap SSH and Force HTTPS E mail Alert and PortVision DX Event Warning Type Authentication Fail The failure of authentication event C...

Page 107: ...same port to use that service for remote management Get Community Specify the password for the incoming Get and GetNext requests from the management station By default it is set to public and allows all requests Set Community Specify the password for the incoming Set requests from the management station By default it is set to private Trap Destination Specify the IP address of the station to which...

Page 108: ...Pv3 user profile User Name Specify a user name for the SNMPv3 administrator or user Only the SNMP commands carrying this user name are allowed to access the device Password Specify a password for the SNMPv3 administrator or user Only the SNMP commands carrying this password are allowed to access the device Access Type Select Read Only or Read and Write accordingly Authentication Protocol Select an...

Page 109: ...maintain these settings if the WR7802 XT is rebooted SMTP Settings SMTP Server IP The IP address of the SMTP Server Email Account The sender s Email Account Authentication Protocol If the SMTP server requires authentication select the Authentication Protocol and enter the User Name and Password User Name The User Name of the Sender Email account Password The Password of the Sender Email account Rc...

Page 110: ... Web User Interface Management Login Settings Page Use this page to set the user name and password for this device Login Settings User Name The username to login to this device Password The password to login to this device Authentication Mode Local The local account to login to this device B e t a V e r s i o n ...

Page 111: ...fic characters for server authentication verification Server Port Sets the communication port of an external RADIUS server as the authentication database TACPLUS Authentication Setting Authentication Type Choose the authentication protocol ASCII PAP CHAP Authentication Timeout Set the length of time in seconds that the device waits for a response from the primary server before sending the request ...

Page 112: ...upgrading the firmware Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted Firmware Upgrade Local File Select File Type the path of the firmware in Select File field or click Browse to browse the firmware file Press Upgrade to upload the firmware file to the AP After finishing transmitting the firmware the system will copy the firmware file and ...

Page 113: ...ttings if the WR7802 XT is rebooted Configuration File Local Load Setting from File Restore Either enter the path of the configuration file or click Browse to browse the configuration file Press the Upload button after selecting the configuration file Save Setting to File Backup Press Save to backup the configuration file to specific path folder in your computer Reset Settings to Default If you se...

Page 114: ...02 XT is rebooted LLDP Configuration Enable LLDP Set this to Enable to enable LLDP on the router or to Disable to disable the LLDP function LLDP Timer This setting determines how frequently in seconds the router sends out LLDP discovery packets Valid values are 5 to 254 and default is 30 LLDP Holdtime This setting determines how long in seconds the WR7802 XT retains LLDP neighbor information Valid...

Page 115: ...ocal log file Click the Refresh button to reload the log table Click the Clear button to delete log information Click the Save button to download log information to your PC Note You must Save Page 115 settings if you want to maintain these settings if the WR7802 XT is rebooted System Log Enable Remote Syslog Server Select this check box to enable the remote system log The default is to log locally...

Page 116: ...atchdog Enable Ping Watchdog If you select this check box the ping watchdog feature is enabled IP Address to Ping This is the target IP address that you want to ping Ping Interval Ping this IP every ping interval in second Startup Delay System boot up time The startup delay uses to buffer to prevent it continue to reboot itself Failure Count To Reboot When the ping failed time reaches the failure ...

Page 117: ...age to save configuration to flash Every time you finish changing the WR7802 XT configuration you must save the changes to flash if you want the changes to be permanent Logout Page After you completed configuration and have saved the configuration if desired you should logout the system If you do not log out of the system the login session does not timeout for couple minutes There is a risk that o...

Page 118: ...the system by keying in commands If you have not done so you need to program the WR7802 XT IP address to meet your network requirements The easiest way to configure the IP address is using a Windows system and PortVision DX which is discussed in Configuring the Network Settings on Page 21 This section provides the following information Accessing the CLI through an SSH Client below Accessing the CL...

Page 119: ... DX The next discussion provides procedures to use PortVision DX with a Telnet or SSH connection to access the CLI 1 If you have not done so install PortVision DX Installing PortVision DX on Page 20 2 Start PortVision DX 3 Right click the WR7802 XT in the Device List pane lower and click Telnet SSH 4 Select either Telnet or SSH and leave the default port number B e t a V e r s i o n ...

Page 120: ...t setting and status of the WR7802 XT set This is the write command to change the current setting del This is Delete command to delete the applied settings exit To exit the CLI Note Use the TAB key can help you find the correct command and complete the command to make the read or write easier Command List You can view the available command by pressing the TAB key The commands have these definition...

Page 121: ...rd IPv4 ping command ping6 ping IPv6 address reboot this reboots the WR7802 XT reset this resets the WR7802 XT back to the factory defaults including the IP address set sets the setting in the WR7802 XT refer to Using SET Commands on Page 123 for more information show shows you the current settings a configuration setting refer to Using SHOW Commands on Page 120 for more information B e t a V e r ...

Page 122: ...CLI Using SHOW Commands Type Show and press the TAB key to see the show command sets The following command lines are available Next we will examine how to find out more information about one of the supported commands cellular Type show cellular and the TAB key to see all the show cellular command lines B e t a V e r s i o n ...

Page 123: ...cellular information The console prints all the information for reference The following example illustrates how to use the TAB key to complete a command 1 Type show Cellular A and the TAB key to complete the command which displays the following result 2 Type show Cellular AP and the TAB key 3 Type show Cellular APN and the Enter key The command responds with internet B e t a V e r s i o n ...

Page 124: ...tion Using the Command Line Interface CLI The following examples illustrate how to use the show poe command set to view the current settings 1 Type show poe and the TAB key 2 Type show poe status and press the ENTER key 3 Type show poe port 1 and press the ENTER key B e t a V e r s i o n ...

Page 125: ...how to use the set command to configure settings To determine commands associated to the set command type set and the TAB key to see all the write command sets The following command lines are available Most set command lines have the same functionality as the Web GUI How to Set the Device Name This screen shot shows how to change the device name B e t a V e r s i o n ...

Page 126: ...hows the set cellular commands the second entry shows applicable cellular enable commands and third entry shows enabling the cellular interface Set the PoE Settings This example shows how to use the set poe command set The first entry shows the set poe commands the second entry displays the settings for Port 1 the third entry shows how to set the powering mode and the last entry verifies that the ...

Page 127: ... switch settings command The first entry shows the set switch commands the second entry shows the commands for gi3 the third entry shows the commands for the state command the fourth entry shows enabling the gi3 port and the last entry verifies that the change has been made This example shows how to add VLAN 2 to Ports 1 and 2 as untagged and Ports 3 and 5 as tagged B e t a V e r s i o n ...

Page 128: ... Commands RocketLinx WR7802 XT Series User Guide 2000638 Rev A Configuration Using the Command Line Interface CLI The following example shows how to remove Port 1 from VLAN 1 Using DELETE Commands B e t a V e r s i o n ...

Search results

Summary of Contents for WR7802-XT Series

Reviews:

Related manuals for WR7802-XT Series

Brands by name

Popular brands

Comtrol WR7802-XT Series, User Manual

Search results

Summary of Contents for WR7802-XT Series

Reviews:

Related manuals for WR7802-XT Series

Brands by name

Popular brands