CTC Union GSW-3208M User Manual Download Page 100

Page: 100 / 148

Chapter 6. Manage / Configure the Switch

100

[Security Policy]

This is used to setup the IP addresses that can manage this switch. They have different access rights set in “Mode”.

And the remote management interfaces (Http/Telnet/SNMP) could be enable/disable for different administrators. This

function is for security policy of switch management.

Note:

Remember to enable at least one IP/Subnet with Modify right for Http/ Telnet/SNMP interface. Otherwise,

configuring switch from remote will become impossible. In that case, you can manage the switch from console only.

2). Mac Security Configuration

There are two Mac ID security modes for the switch. One is Static Mac ID Filter on Port, another is Dynamic Mac ID

Number Limit on Port.

Summary of Contents for GSW-3208M

Page 1: ...GSW 3208M GSW 3416M GSW 3424M L2 Managed Gigabit Ethernet Switch ...

Page 2: ......

Page 3: ...h claim alleges that CTC Union Technologies was negligent regarding the design or manufacture of said product TRADEMARKS Microsoft is a registered trademark of Microsoft Corp HyperTerminal is a registered trademark of Hilgraeve Inc WARNING This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are designed t...

Page 4: ...re 1000TX RJ45 port SFP port for Gigabit connection 3 GSW 3424M This model supports twenty four TX ports and four shared SFP ports Port 21 24 are 1000TX RJ45 port SFP port optional for Gigabit connection And they can auto detect the connection from 1000TX RJ45 port or SFP port This document is the current official release manual Please check CTC Union s website for any updated manual or contact us...

Page 5: ...le Interface 18 6 2 2 General Basic Commands 23 6 2 3 Configure Mode Commands 28 6 2 4 Interface Configuring Commands 47 6 2 5 VLAN Configuring Commands 64 6 2 6 Show Commands 69 6 3 ABOUT TELNET AND SNMP MANAGEMENT INTERFACES 90 6 3 1 About Telnet Management Interface 90 6 3 2 About SNMP Management Interface 90 6 4 MANAGEMENT WITH HTTP CONNECTION 91 6 4 1 System 93 6 4 2 SNMP 97 6 4 3 Security 99...

Page 6: ...Table of Contents ii ...

Page 7: ...ate limit IGMP and port configuration Console is supported for command line settings Web Telnet and SNMP interfaces are for remote switch management through network IEEE 802 1x is supported for port security application These functions can meet most of the management request for current network 1 1 Package Contents z One Gigabit Management Switch z One AC power cord for AC power model only z One c...

Page 8: ...o specifications outside of the temperature range of 0 to 50 degrees C For GSW 3416M GSW 34224M model you can also install the switch on a 19 rack with the rack mount kits as pictured Rack Mount Installation Before rack mounting the switch please pay attention to the following factors 1 Temperature Because the temperature in a rack assembly could be higher than the ambient room temperature check t...

Page 9: ...through the mounting bracket holes into the switch There could have two or four screws for one bracket That depends on the model that installed 4 Repeat Step 1 3 to install another bracket to the switch 5 Now it is ready to mount to a rack Mount the Switch on a Rack 1 Position a bracket that is already attached to the switch on one side of the rack 2 Line up the screw holes on the bracket with the...

Page 10: ...s 1000BaseSX 1000BaseLX connections you can connect long distance fiber optic cable to the switch z Because this switch supports Auto MDI MDI X detection on each TX port you can use normal straight through cable for both workstation connection and hub switch cascading 3 2 Connecting to Another Ethernet Switch Hub This Switch can be connected to existing 10Mbps 100Mbps 1000Mbps hubs switches Becaus...

Page 11: ...n the destination address of the packet As a result the switch can significantly reduce unnecessary traffic The example below demonstrates the switch ability to segment the network The number of nodes on each segment is reduced thereby minimizing network contention collisions and boosting the available bandwidth per port With Management function of the switch network administrator is easy to monit...

Page 12: ...r to from the SFP slot directly The switch can auto detect the gigabit connection from SFP slot Follow the steps for module adding and removing Add SFP Transceiver 1 Plug in the SFP Transceiver to SFP slot directly 2 Connect network cable to the SFP Transceiver If the connected devices are working the Link Act LED will be ON Remove SFP Transceiver Unplug the SFP Transceiver from SFP slot directly ...

Page 13: ...424M LED STATUS CONDITION Power ON Switch is receiving power OFF System is booting Yellow System is initializing System Green System is running ON Port has established a valid link Flashing Data packets being received or sent Green The connection speed is 1000Mbps Link Act Yellow The connection speed is 10 100Mbps ON The connection is Full Duplex FDX Col Flashing Collisions happen for Half Duplex ...

Page 14: ...g function for 802 1Q tag based VLAN is supported It allows two VLAN tags in a packet for 802 1Q VLAN tunneling application through a central network Q in Q 2 Trunk If two switches are cascaded together the bottleneck will happen at the cascading connection If more cables could be used for the cascading connection it will reduce the bottleneck problem In normal case switches will become unstable b...

Page 15: ...ic like video audio it needs higher priority than normal network traffic With the definition of packet priority it could have 8 priority levels from 0 to 7 This switch supports four priority level queues on each port It could be configured for port based 802 1P tagged based or DiffServ of IP packets priority User can define the mapping of priority values to the priority queues 6 Static Mac ID in A...

Page 16: ... users accessing network through the switch It will need a RADIUS server for the authentication function Users will be asked for username and password before network access If the RADIUS server authenticates it the switch will enable the port for network access This function is very useful for network security application to prevent illegal users access network through the switch 9 Rate Control Th...

Page 17: ...gned DHCP server Based on those information DHCP server will assign an IP configuration in the DHCP reply This is a security function 14 IP Filtering This function can limit the IP address and the subnet for accessing network from switch port That can prevent illegal IP problem in network 15 Software Backup Update This switch supports backup and update functions for its internal software and its n...

Page 18: ...Windows Installation Disk Please refer to your Windows user manual for the installation 3 Power on the switch If everything is correct the booting screen will appear in the terminal program when the switch is powered on It will stop at the following screen after some initializing messages Booting Program Version 1 04 04 SI PI built at 12 04 53 Sep 17 2008 RAM 0x00000000 0x00800000 0x0000cc78 0x007...

Page 19: ...Chapter 6 Manage Configure the Switch 19 ...

Page 20: ... Shows information calendar Data and time information configure Enter configuration mode copy Copies from one file to another These are the basic system commands for the switch For system configuring configure command can enter the configure mode And the prompt will become configure xxxx config In the configure mode the general configuration of switch can be done And exit command can leave this mo...

Page 21: ...n guest mode it is allowed to view the switch configuration only No setup configure commands are supported Function Keys Here is the function keys for console interface Tab key this key can help to get the full command keyword with just several beginning letters For example cal Tab will get the full calendar command word Esc key this key can use to break message display and go back to command prom...

Page 22: ...settings And its prompt is config 3 Interface Configuring Commands for Port VLAN Group If the settings are for ports it is done with interface ethernet 1 x command in configure mode And the prompt will become config if For example interface ethernet 1 5 is for settings on Port 5 If the settings are for VLAN group it is done with interface vlan x command in configure mode And the prompt will become...

Page 23: ...s to other network nodes quit Quit commands reload Halts and performs a warm restart show Shows information calendar Data and time information configure Enter configuration mode copy Copies from one file to another 1 exit command This command is used to leave current operation mode It will do logout at this basic command interface 2 help command This is a help command and the console will prompt w...

Page 24: ... between 64 8148 t Ping the specified host until stopped by ESC key w Timeout in milliseconds to wait for each reply ip IP address xxx xxx xxx xxx For example ping 192 168 1 80 Esc can be used to break continuous ping operation 6 quit command This command is used to quit the console interface 7 reload command This command is used to reset switch It will halt and perform a warm restart Enter reload...

Page 25: ...er map Maps priority mvr Show MVR Status port Port characteristics queue Priority queue information radius server RADIUS server information running config Information on the running configuration rate limit Configures rate limits snmp Simple Network Management Protocol statistis sntp Simple Network Time Protocol configuration spanning tree Spanning tree configuration system System information trun...

Page 26: ...reak the display For the details please refer to section 6 2 6 Show commands 9 calendar command This command is used to set the system time It is entered in hour minute second month day year order For example calendar set 10 30 0 october 15 2008 show calendar Current Time 2008 10 15 10 30 18 It is 18 seconds passby after the setting command 10 configure command This command will change the console...

Page 27: ... xxx xxx xxx yyy command is used to restore binary configuration file yyy from TFTP Server at IP xxx xxx xxx xxx copy config running config tftp xxx xxx xxx xxx yyy command is used to backup current switch running configuration to TFTP Server at IP xxx xxx xxx xxx as file name yyy in text format copy config tftp running config xxx xxx xxx xxx yyy command is used to restore text configuration file ...

Page 28: ...available commands history Show a list of previously run commands logout Disconnect quit Quit commands automode Set Auto Negotiation or Auto Detect mode default Restore to factory default setting dhcp relay DHCP relay setting dot1x Configures 802 1x port based access control end Exit from configure mode hostname Sets system s network name interface Enters privileged interface configuration ip Glob...

Page 29: ...er name authentication vlan Switch Virtual LAN interface 1 exit command This command is used to leave current operation mode Go back to last mode 2 help command This command is used to show all the available commands in this mode 3 history command This command is used to show the history of entering commands 4 logout command This command is used to logout from console interface 5 quit command This...

Page 30: ... it is called forced mode sometimes Some old TX FX Converters needs to work in this mode because FX supports 100 Full forced mode only For most applications Auto Detect mode is OK With automode the sub commands will be shown config automode detect Auto Detect mode negotiation Auto Negotiation mode automode detect command will set it to auto detect mode automode negotiation command will set it to a...

Page 31: ...to enable adding the additional string to Option 82 no dhcp relay option command is used to disable it 9 dot1x command This command is used configure the general settings of 802 1x function of the switch Entering dot1x the sub commands will be shown config dot1x authcount Set 802 1x Re authentication Max Count dynamic vlan VLANs are assigned based on a MAC address guest vlan Migrating end users to...

Page 32: ...rts dot1x system auth control command is used to enable 802 1x function on the switch And no dot1x system auth control command can be used to disable it dot1x timeout command is used to setup timeout values in 802 1x operation Entering dot1x timeout the sub command will be shown config dot1x timeout quiet period Time after Max Request Count before gets new client re authperiod Time after connected...

Page 33: ...lid value of x is 0 65535 dot1x timeout tx period x command is used to set the timeout value for the identification request from the switch to users The request will be re tried until the authcount is met After that authentication fail message will be sent The valid value of x is 0 65535 Note 1 Setting 802 1x function on ports use dot1x command in interface configuring mode 2 Setting for RADIUS se...

Page 34: ... assignment For example the console will enter interface configuring mode for Port 5 with interface ethernet 1 5 command And the prompt will become config interface ethernet 1 5 config if With interface ethernet 1 5 6 10 13 the console will enter interface configuring mode for Port 5 6 10 11 12 13 And all the settings will be applied to those ports at the same time The description of commands in i...

Page 35: ...ommand can be used to disable it Because hacker or worm virus like ColdRed often attacks http server this command is provided to enable disable http service to prevent it If this switch is installed in public Internet without any firewall protection we suggest users to disable the http interface and use Telnet or SNMP instead ip igmp command is used to configure IGMP operation of the switch Enteri...

Page 36: ... time interval of router port expire time x is the time interval and its valid value is 255 500 ip igmp snooping unregflood command is used to enable IGMP unregister traffic flooding function And no ip igmp snooping unregflood can be used to disable it If it is enable the unregistered not joined IP multicast traffic will be flooded to every port If it is disable the unregistered not joined IP mult...

Page 37: ...gging function can record events at local flash or remote log server Entering logging the sub commands will be shown config logging log level Log level on Enable logging to all supported destination remote log Enable logging to remote host logging log level x command is used define the log level of events The valid value of x is 0 7 logging on command is used to enable the logging function And no ...

Page 38: ...trators could have different rights to manage this switch This is for security of this management switch Four user groups are supported for this function Entering management the sub commands will be shown config management 1 4 Index config management 2 enable Set enable for a specified set ipaddr Set IP and net mask for a specified set mode Set mode for a specified set protocol Set protocol for a ...

Page 39: ...t VLAN to be shared by subscribers in different VLANs That can reduce the multicast traffic for VLANs Before configuring MVR function complete the VLAN setting first Using MVR function you have to enable IGMP snooping function first This switch supports three MVR VLANs They are referred with their VLAN ID For any MVR setting you have to assign the VLAN ID in the command Entering mvr x the sub comm...

Page 40: ...ible mode In Dynamic mode the switch will send IGMP reports to every MVR source port in the MVR VLAN In Compatible mode the switch will not send IGMP reports x is the MVR VLAN ID mvr x name yyy command is used to assign a name to the MVR VLAN x is the MVR VLAN ID yyy is the name string After MVR VLAN is created source port of IP multicast traffic and receiver ports of subscribers will be assigned ...

Page 41: ...y will put it to factory default setting 192 168 1 254 22 prompt command This command is used to set the prompt word for console For example config prompt AAA AAA config 23 qos command This command is used to enable QoS function of the switch And no qos can be used to disable it The traffic scheduling mode strict priority ST or weight round robin WRR is selected in queue command And the weighting ...

Page 42: ...figure the settings for RADIUS Server The settings will be used in 802 1x operation Entering radius server the sub commands will be shown config radius server host Sets the port as a host port key Sets the RADIUS encryption key port Sets the RADIUS server network port radius server host x x x x command is used to set the IP address of RADIUS Server for 802 1x operation x x x x is the IP address ra...

Page 43: ...ll be shown config snmp server 1 5 Index of Trap community Defines SNMP community access string contact Sets the system contact string location Sets the system location string snmp server community get xxx command is used to set the community string of get command for SNMP operation xxx is the community string snmp server community set xxx command is used to set the community string of set command...

Page 44: ...ion Range 4 30 seconds hello time Global STA hello time configuration Range 1 10 seconds max age Global STA maximum age configuration Range 6 40 seconds priority Specifies spanning tree priority cr spanning tree command is used to enable spanning tree protocol function And no spanning tree command is used to disable it spanning tree compatible command is used to change its operation to 802 1D STP ...

Page 45: ...g traffic And the rate is counted with packet per second pps not bit per second bps storm control bc rate x command is used to set rate limit for broadcast traffic x is the limit rate number and its valid value is 0 7 0 disable 1 1Kpps 2 2Kpps 3 4Kpps 4 8Kpps 5 16Kpps 6 32Kpps 7 64Kpps storm control mc rate x command is used to set rate limit for multicast traffic x is the limit rate number and it...

Page 46: ...e username and password for guest yyy is the new username zzz is the new password Administrator is the user who has the right to do configuration modification Guest is the user who has the right to view configuration only 33 vlan command This command is used to enter VLAN configuring mode And the prompt will become config vlan database config vlan The operations for VLAN are configured in VLAN con...

Page 47: ...e x is the VLAN ID Please refer to section 6 2 4 2 Interface Configuring Commands for VLAN for the details Both commands will change the prompt from config to config if Note The general VLAN settings are done with vlan database command Please refer to section 6 2 5 VLAN Configuring Commands for the details And interface vlan x command is used to assign characteristics to a VLAN interface For examp...

Page 48: ...settings after this command will be applied to Port 4 Port 5 Port 6 and Port 7 Port 4 7 4 interface ethernet 1 w x y z and w x y z are port number All the settings after this command will be applied to those ports For example interface ethernet 1 1 2 4 7 and the settings after this command will be applied to Port 1 Port 2 Port 4 Port 5 Port 6 and Port 7 Port 4 7 Entering interface ethernet 1 5 and...

Page 49: ... consumption qos Configuration of QoS rate limit Configures rate limits shutdown Shuts down the selected interface spanning tree Specifies spanning tree configuration speed Configures speed operation switchport Configures switching mode characteristics 1 exit command This command is used to leave current operation mode Go back to last mode 2 help command This command is used to show all the availa...

Page 50: ...ommand This command is used to configure 802 1x function for the interface port s dot1x port control auto command is used to set the interface port s to need dot1x aware client RADIUS server authorization dot1x port control force authorized command is used to set the interface port s to grant access to all clients dot1x port control force unauthorized command is used to set the interface port s to...

Page 51: ...onfig if interface ethernet Ethernet port vlan Switch Virtual LAN interface For example config interface ethernet 1 5 will set current setup interface to Port 5 and all the commands will be applied to Port 5 config if interface ethernet 1 6 7 will change current setup interface to Port 6 7 and all the commands will be applied to Port 6 7 If vlan sub command is used current setup interface will be ...

Page 52: ...erface port s no lacp command will disable LACP protocol working on the interface port s If the interface port s are already assigned to trunk by channel group command its LACP function will be ignored 15 map command For a IP packet there is priority information in ToS field of IP header The priority could be 3 bit precedence 0 7 or 6 bit DSCP 0 63 For DSCP this switch supports seven DSCP values f...

Page 53: ...ax packet length 9216 9600 max packet length 9600 17 mdi mdix command This command is used to set the MDI MDI X mode of port s This switch supports Auto MDi MDIX function And this command can force it MDI or MDI X mode MDI is for hub switch cascading MDI X is for PC device connecting mdi mdix mdi command is used to set the port s to MDI mode mdi mdix mdix command is used to set the port s to MDI X...

Page 54: ...h of the port mdi mdix Configures the MDI or MDIX of the port mvr Multicast VLAN Registration port Configures the characteristics of the port port vlan Configures Port Based VLAN power saving Decrease energy consumption qos Configuration of QoS rate limit Configures rate limits shutdown Shuts down the selected interface spanning tree Specifies spanning tree configuration speed Configures speed ope...

Page 55: ...t the interface port s to accept mode In accept mode only devices PC with static Mac addresses assigned on the interface port s can access network through the interface port s Other devices PC will be rejected port security max mac count x command is used to set the maximum Mac address number allowed on the interface port s x is the maximum number and its valid value is 0 8192 For example x 5 will...

Page 56: ...set port based priority on the interface port s And enable 802 1P priority DSCP priority on the interface port s config if qos dscp enable IP DSCP priority port Port priority map precedence enable IP precedence priority qos dscp command is used to enable DSCP priority operation on the interface port s And no qos dscp command is used to disable it qos precedence command is used to enable 802 1P pri...

Page 57: ...down command This command is used to disable the interface port s shutdown command is used to disable the interface port s no shutdown command is used to enable it 26 spanning tree command This command is used to configure spanning tree function on interface port s config if spanning tree cost Specifies spanning tree cost edge port Specifies spanning tree edge port port priority Specifies spanning...

Page 58: ...arded when looping happens If more than one port have the same highest priority the port with lowest port number will be forwarded spanning tree spanning disabled command is used to disable spanning tree function on the interface port s And no spanning tree spanning disabled command will enable it 27 speed command This command is used to set the operation speed of the interface port s config if sp...

Page 59: ...ypes tagged command is used to allow the interface port s to accept tagged frame only Other frame type will be rejected VLAN Port Assignment switchport allowed vlan add x command will add the interface port s to VLAN x x is the VLAN ID and its valid value is 2 4094 switchport allowed vlan remove x command will remove the interface port s from VLAN x x is the VLAN ID and its valid value is 2 4094 V...

Page 60: ...tch to switch cascading It is a VLAN trunk connection because there could be more than one VLAN working through it switchport mode access command will set the interface port s as untag port s for 802 1Q VLAN operation Untag port will always send untagged packets and is used for switch to users connection And its role is a access connection for users Port VLAN ID Setting switchport native vlan x co...

Page 61: ...setting will follow the settings in 802 1Q VLAN switchport vlan stacking access command is used to set the port s as access port s for VLAN stacking operation It will strip a tag from tagged or double tagged packets before forwarding It is for downward connection of VLAN stacking operation switchport vlan stacking tunnel command is used to set the port as tunnel port for VLAN stacking operation It...

Page 62: ... run commands logout Disconnect quit Quit commands interface Enters privileged interface configuration ip Internet protocol no Negates a command or sets its defaults 1 exit command This command is used to leave current operation mode Go back to last mode 2 help command This command is used to show all the available commands in this mode 3 history command This command is used to show the history of...

Page 63: ... interface to Port 6 7 and all the following commands will be applied to Port 6 7 If vlan sub command is used the setup interface will be changed to some VLAN groups For example config if interface vlan 100 will change the setup interface to VLAN 100 and all following commands will be applied to VLAN 100 The description of commands in interface configuring mode is put in Section 6 2 4 Interface Co...

Page 64: ...P configuration is not got when boot up this command will try to get IP configuration again ip address release command is used to release current IP address got by DHCP Then you can try to get the IP configuration again by ip address renew command 8 no command This command is used to disable a function or restore a setting to factory default of the switch config if no ip Internet protocol For exam...

Page 65: ...he prompt the sub command list will be shown config vlan exit Exit from current mode help Show available commands history Show a list of previously run commands logout Disconnect quit Quit commands end Exit from vlan mode 1q vlan Configures 802 1Q VLAN no Negates a command or sets its defaults port vlan Configures Port Based VLAN private vlan Private VLAN vlan Switch Virtual LAN interface 1 exit c...

Page 66: ... VLAN characteristics config vlan 1q vlan gvrp Enables GVRP globally for the switch ingress filtering Configures frame filtering base on VLAN membership cr 1q vlan command can enable 802 1Q VLAN function And no 1q vlan command can disable it 1q vlan gvrp command is used to enable GVRP function of 802 1Q VLAN This command works only if 802 1Q VLAN is enabled And GVRP will be disable automatically w...

Page 67: ...an 100 command will remove VLAN 100 9 port vlan command This command is used to enable Port base VLAN And 802 1Q VLAN function will be disable at the same time port vlan command is used to enable Port base VLAN no port vlan command is used to disable it 10 private vlan command This command is used to create VLAN groups for Private VLAN and create the associations between Primary VLAN and Community...

Page 68: ... yyy isolated command is used to create a Isolated VLAN with VLAN ID x VLAN name yyy for Private VLAN application private vlan x name yyy primary command is used to create a Primary VLAN with VLAN ID x VLAN name yyy for Private VLAN application no private vlan x command can be used delete a Private VLAN x x is the VLAN ID 11 vlan command This command is used to create a 802 1Q VLAN In this command...

Page 69: ...tistics line TTY line information log Log records mac address table Configuration of the address table mac security MAC Security Configuration management Management IP filter map Maps priority mvr Show MVR Status port Port characteristics queue Priority queue information radius server RADIUS server information running config Information on the running configuration rate limit Configures rate limit...

Page 70: ...isable Add additional option82 information Disable Relay Agent information DHCP Server IP Address 3 show dot1x command This command is used to show 802 1x configuration and status show dot1x command is used to show current 802 1x configuration and status of each port For example show dot1x Port Authentication Configuration Port Status Authentication Mode 1 1 Force Authorized 1 2 Force Authorized 1...

Page 71: ...tion Max Count 2 Max Request Count 2 Server Timeout Period 30 seconds Supplicant Timeout Period 30 seconds Quiet Timeout Period 60 seconds Tx Timeout Period 30 seconds Supplicant Allowed In Guest Vlan Disable Dynamic vlan Disable 4 show gvrp command This command is used to show current GVRP configuration show gvrp configuration command will show current GVRP configuration show gvrp configuration G...

Page 72: ...statistics counters for all ports show interface counters ethernet 1 x command will show statistics counters for Port x x is the port number For example show interface counters ethernet 1 3 Port 1 3 Rx Counter Statistics Good Unicast Frame 4109 Good Broadcast Frame 9946 Good Multicast Frame 158 Discarded Frame 0 Errors 0 Total Receive Byte Count 1549816 Tx Counter Statistics Good Unicast Frame 200...

Page 73: ...abilities 10half 10full 100half 100full 1000full Broadcast storm Disable Flooded unicast storm Disable Multicast storm Disable Flow control Disable Power saving Disable LACP Disable Max MAC count 0 Maximum Packet Length 9600 IPaddress Filter 1 Current status Link status Up Operation speed duplex 100Half MDI MDI X Auto show interface switchport command will show function configuration of all ports ...

Page 74: ... of IP Filter 7 show ip command This command is used to show current IGMP configuration and switch IP configuration show ip igmp IGMP snooping interface Interface information redirects Default gateway configured for this device show ip igmp snooping command will show current switch IGMP configuration show ip igmp snooping mrouter command will show current IGMP multicast router setting For example ...

Page 75: ...show ip filter command This command is used to show current IP Filter function status of the switch show ip filter IP Filter Configuration IP Address Filter Disable For showing filter IP address show interface switchport command will show port settings one after another And show interface switchport ethernet 1 x command will show Port x settings 9 show lacp command This command is used to show cur...

Page 76: ...ble Eth 1 3 Disable Eth 1 4 Disable Eth 1 5 Disable Eth 1 6 Disable Eth 1 7 Disable Eth 1 8 Disable Eth 1 9 Disable Eth 1 10 Disable show lacp portstatus command is used to show LACP working status of ports show lacp portstatus LACP Port Status Port Protocol Active Partner Port Number Operational Port Key 1 no 2 no 3 no 4 no 5 no 6 no 7 no 8 no 9 no 10 no show lacp sysid command is used to show sy...

Page 77: ...D MARK SPACE Stopbits 1 11 show log command This command is used to show current system log and system log configuration show log configuration logging configuration cr show log command is used to show current system log content For example show log 5 Thu Jan 01 09 00 02 1970 Level 4 System Started port 0 4 Thu Jan 01 09 08 20 1970 Level 4 Link down port 8 3 Thu Jan 01 09 07 50 1970 Level 4 Link u...

Page 78: ... show mac address table command This command is used to set Mac address table and configuration about it show mac address table aging time Aging time for entries in the address table address Address information interface Ethernet or port channel interface multicast Knowns multicast addresses cr show mac address table command will show mac address table content For example show mac address table In...

Page 79: ...le address x x x x x x command will show the mac address table for mac address x x x x x x For example show mac address table address 00 00 e2 82 8c e6 Interface MAC Address VLAN Type Eth 1 3 00 00 E2 82 8C E6 Learned show mac address table interface ethernet 1 x command will show the mac address table for Port x x is the port number For example show mac address table interface ethernet 1 3 Interf...

Page 80: ...her is limit by mac no function and up to a limit number of mac addresses are allowed to access network from the port For example show mac security MAC Security Configuration Port Max MAC no Learned no Security Control Eth 1 1 0 N A No Security Eth 1 2 0 N A No Security Eth 1 3 0 N A No Security Eth 1 4 0 N A No Security Eth 1 5 10 0 Limited by MAC no Eth 1 6 0 N A No Security Eth 1 7 0 N A Accept...

Page 81: ...map dscp IP DSCP priority map port IP port priority priority 802 1p priorities map show map dscp command is used to show IP DSCP QoS function enable disable status and DSCP values 0 63 to priority queue mapping on each port show map dscp ethernet 1 x command is used to show DSCP values 0 63 to priority queues mapping on Port x x is the port number show map port command is used to show connection p...

Page 82: ...mple show mvr 11 Active Yes Name MVLAN 11 802 1p Priority 0 Mode Dynamic Source Port Eth1 10 Receiver Port Eth1 5 Eth1 6 Eth1 7 MVR Group Configuration Name Start Address End Address abc 224 0 0 1 224 0 0 2 abcd 224 0 0 3 224 0 0 4 17 show port command This command is used to show port mirror function setting show port monitor command is used to show port mirror function setting For example show p...

Page 83: ...ation show queue mode command is used to show traffic scheduling mode for priority queues One is Strict Priority higher priority always get bandwidth service first another is WRR Weight Round Robin bandwidth is shared between priority queues with weighting For example show queue bandwidth Queue Scheduling WRR Setting Table Priority Weight Traffic Class 0 1 Traffic Class 1 2 Traffic Class 2 4 Traff...

Page 84: ... config command This command is used to show current running configuration of the switch For example show running config building running config please wait calendar set 9 30 14 january 1 1970 interface VLAN 1 IP address 192 168 1 1 255 255 255 0 SNTP server 220 130 158 54 interface ethernet 1 10 port vlan 1 Default_VLAN end 21 show rate limit command This command is used to show rate limit settin...

Page 85: ...it 1 4 No Limit No Limit 1 5 No Limit No Limit 1 6 No Limit No Limit 1 7 No Limit No Limit 1 8 No Limit No Limit 1 9 No Limit No Limit 1 10 No Limit No Limit 22 show snmp command This command is used to show SNMP configuration of the switch For example show snmp SNMP Configuration Object ID 1 3 6 1 4 1 655 100 2 1 System up Time 4015 seconds System Name Location Contact name Get Community public S...

Page 86: ...lly Time Server 220 130 158 54 Time Zone Japan 9 37 Current Time 1970 01 01 10 08 38 24 show spanning tree command This command is used to show spanning tree configuration of the switch show spanning tree command is used to show all spanning tree configuration for bridge and ports show spanning tree ethernet 1 x command is used show spanning tree configuration of Port x x is the port number For ex...

Page 87: ...ation configuration of the switch For example show system System Configuration Main Board Information Firmware Version 1 04 14 Mac Address 00 11 22 33 44 55 Number of Ports 10 1Q VLAN Max Group 1024 DHCP Client Disable Time Server Disable System Log Status Enable Remote Log Disable Web server Enable Web server port 80 Web secure server Disable Web secure server port 443 26 show trunk command This ...

Page 88: ... version command This command is used to show system version information and model information For example show version Firmware Version 1 05 00 Number of Ports 10 Model Name 10G Switch SNMP Management 28 show vlan command This command is used to show VLAN configuration of the switch show vlan private vlan Private VLAN id VLAN interface name VLAN interface name port based Port Based Virtual LAN Co...

Page 89: ...is used to show Private VLAN settings For example show vlan private vlan Private VLAN Port Configuration Port Port Type Primary VLAN Community VLAN Isolated VLAN Eth 1 1 Normal none none none Eth 1 2 Normal none none none Eth 1 3 Normal none none none Eth 1 4 Normal none none none Eth 1 4 Normal 100 none none Eth 1 6 Normal none none none Eth 1 7 Normal none none none Eth 1 8 Normal none none none...

Page 90: ...on interface is the same as console interface 6 3 2 About SNMP Management Interface If you want to use NMS to management the switch from remote site you have to set the IP NetMask Gateway address to the switch and configure the SNMP setting of the switch from console first Then you can use SNMP management program to manage this switch This switch supports SNMP v1 v2c agent function and MIB II Inte...

Page 91: ...nd the prompt will become config if 4 3 Enter ip address xxx xxx xxx xxx yyy yyy yyy yyy command xxx xxx xxx xxx is the IP address and yyy yyy yyy yyy is the netmask to modify IP address of the switch 4 4 Enter exit command to go back to config prompt 4 5 If IP Gateway will be set enter ip default gateway xxx xxx xxx xxx command to set the IP gateway of the switch xxx xxx xxx xxx is the IP address...

Page 92: ...witch configuration Upper part of the homepage is the link status of the switch Three different colors are used to show different status of ports Link Up Link Down and Port Disable Middle part of homepage is the main operation area for each function The details about management with http connection will be shown in the following sub sections ...

Page 93: ...s the system information about the switch You can find the firmware version Mac address connection port number and maximum VLAN group number here 2 IP Configuration This function is used to setup IP configuration of the switch You can enable DHCP client function to get IP configuration from DHCP server automatically Or disable DHCP client function and set IP configuration manually ...

Page 94: ...p clicking renew button will try to get IP configuration again release button If DHCP client function is enabled and IP configuration is got clicking release button will release current IP configuration After that you can click renew button to get the IP configuration again 3 Time Configuration There are two ways to get the system time a Get time from Time Server This switch support NTP protocol t...

Page 95: ...ch will record events to a log file and put the log file to flash Up to 512 records are allowed for local logging If more than 512 events happen the records will be overwritten from beginning And if remote syslog server is applied the switch will also send event record to the syslog server About log function configuration System Log Status This can enable disable system logging function Log Level ...

Page 96: ...l Informational messages 7 Debug Debug level messages Remote Log This can enable disable remote syslog function Remote Log Server IP This is the syslog server IP for remote logging Up to five syslog servers is supported Event logs will be sent to those syslog servers at the same time Log Table You can view log content here There could be more than one page You may change the page or go to a page b...

Page 97: ...itch for SNMP management Up Time this is the power up running time of the switch Name this the host name of the switch Contact this is the contact information for the switch Location this is the location information of the switch SNMP Communities Get this is the community string of GET command for SNMP operation GET command is used to read switch configuration information Set this is the community...

Page 98: ...IP Trap Manager Trap function will send notice message to SNMP management station when some events happen Up to five SNMP management stations are supported for Trap function The community string and enable disable setting for each trap are set here ...

Page 99: ... Security Mac ID Access Security and 802 1x Authentication Security 1 User Accounts Administrator Management Security Administrator Username Password This is for network administrator to change his her username and password Default is admin admin Guest Username Password This is used to setup the username password of guest right user who just can view the setting of the switch ...

Page 100: ...erent administrators This function is for security policy of switch management Note Remember to enable at least one IP Subnet with Modify right for Http Telnet SNMP interface Otherwise configuring switch from remote will become impossible In that case you can manage the switch from console only 2 Mac Security Configuration There are two Mac ID security modes for the switch One is Static Mac ID Fil...

Page 101: ...e allowed for Port 2 That means up to five users are allowed but don t care who the users are Follow the steps to configure it a Set the Security Control to Limited by MAC no on those ports that will apply dynamic Mac ID number security And set the Max MAC no to the users number allowed on the ports b Then click Apply The switch will learn users automatically and show current user number at Learne...

Page 102: ...he maximum re try count between the switch and users before authentication fail 3 Max Request Count and Server Timeout Period The Server Timeout Period is the timeout period for the request between the switch and RADIUS server The Max Request Count is the maximum re try count between the switch and RADIUS server before authentication fail 4 Supplicant Timeout Period This is the timeout value betwe...

Page 103: ...VLAN This function will assign user to a VLAN that are indicated by RADIUS Server when 802 1x authentication is pass That is VLAN for users are assigned from RADIUS Server Radius Server Configuration This function is for the configuration between switch and RADIUS server You can assign the IP address of Radius Server the protocol port number and the security key Port Authentication Configuration T...

Page 104: ... this port And you can see current 802 1x status on each port 4 IP Filter Configuration This function is used to configure IP Filtering function of port An IP address with a subnet mask can be defined for each port If this function is enabled only devices with IP address in the subnet can access network through the port Because it is a subnet specified by IP address Network ID Number 0 32 or calle...

Page 105: ... auto function of port in Port Configuration setting is enabled disabled For Auto Detect mode the switch will always keep port auto negotiation function ON but just modify its attribution if auto function of port in Port Configuration setting is disabled For applications you should select Auto Detect mode if the connected device is auto negotiation enabled For example customer s PC is auto negotia...

Page 106: ... disable 5 If Auto is disabled select the operation speed and duplex mode of the port in Speed Duplex 6 Select the Enable Disable state of Flow Control function of port 7 Select the Enable Disable state of Power Saving function of port If it is enabled port will go to low power state when link down 8 Select MDI MDI X operation mode It could be Auto MDI or MDI X Auto can auto detect and get the cor...

Page 107: ...ows current Power Saving enable disable status of ports MDI MDI X It shows current MDI MDI X setting of ports Link It shows the link status of each port 3 Max Packet Length This switch supports Jumbo Frame function And the maximum packet size could be up to 9600 byte packet You can select the maximum packet size for each port here 4 Mirror Port Configuration This switch operates in store and forwa...

Page 108: ... port if Mirror function is enabled Monitored Port This is the monitored port The switch will copy the traffic from this port to Monitoring Port 5 Rate Control Two traffic rates could be controlled by the switch One is the ingress egress traffic of each port Another is Broadcast Multicast Unicast Storm Control 5 1 Rate Control Configuration This function can setup the ingress and egress rate limit...

Page 109: ...ngress traffic rate exceeds Ingress Rate Limit the switch can drop packets or pause the traffic If packet drop is enabled flow control of ports will be disabled and packets could be dropped If packet drop is disabled flow control of ports will be enabled and pause frame will be sent when ingress traffic rate exceeds the limit 5 2 Storm Control Configuration This function can setup the broadcast mu...

Page 110: ...ounters could be read here Select a port to get its counters Refresh The counters will be refreshed automatically You can modify the refresh interval And you can click Refresh to refresh the counters immediatelly Reset Counters Click Reset Statistics can reset the counters to 0 ...

Page 111: ...operation c Fill the Mac address This is the Static Mac Address for this entry d Select the port for this Static Address e Click Confirm Add Change button Then this entry will be added to the table In Current Static Address Setting table you can edit and delete an entry Different Mac Address will be another entry Mac Address is not allowed to edit for an entry The switch will not age out these sta...

Page 112: ... for port access security with Mac address Select Accept for such security application 2 Dynamic Addresses This function can show the dynamic Mac addresses learned by the switch This table will refresh every 30 seconds The address table could be more than one page You can click Previous Page Next Page to change page Or give the page number directly Query function is supported by the switch It coul...

Page 113: ...et forwarding operation If Mac addresses are not received for some time the Mac addresses will be removed from the table This operation is called aging The aging operation could be disable here And all the learned Mac addresses will not be removed from the ARL table The time interval for aging operation could be modified here It is 300 seconds by default ...

Page 114: ... Bridge Priority 0 61440 Bridge priority is for selecting the root device root port and designated port The device with the highest priority lowest value becomes the STA root device If all devices have the same priority the device with the lowest MAC address will then become the root device Hello Time 1 10 the period to send the spanning tree maintenance packet if the switch is the root of the spa...

Page 115: ...alue will be forwarded when looping happens If more than one port have the same highest priority the port with lowest port number will be forwarded Port State It is current spanning tree operation state of the port Port Enable enable disable spanning tree function on the port Is edge If this switch is at edge of the network tree please select Yes If there are another switches connected please sele...

Page 116: ...t Designated Bridge This shows the switch s bridge ID and its bridge priority setting Designated Port This shows the port number and its port priority Port Forward Transitions This is the forwarding transition counter on the port Port Role It is the role of the port for the STP operation It could be Root Designated Backup or Alternated If the port is link down the port role will be Nonstp Point To...

Page 117: ...ol Ingress Filter This is used to enable disable doing VLAN filtering function at ingress port If it is enable the ingress port must be in the same VLAN for packet forwarding If it is disable VLAN filtering function will be done at egress port Frame Control This function could be used to drop non 802 1Q frames untagged packets Port VLAN ID Setting PVID is used to set Port VLAN ID When untagged pac...

Page 118: ...l always send untagged packets and is used for switch to users connection And its role is a Access connection for users You can define ports as Trunk or Access according to their connection devices and your applications If a port is defined as Hybrid it is a tag port basically But it will act as an untag port for packets working in VLAN defined in Untag VID So it is called a hybrid port For exampl...

Page 119: ...nd the tagged untagged setting will follow the settings in 802 1Q VLAN Access It will set the port s as access port s for VLAN stacking operation It will strip a tag from tagged or double tagged packets before forwarding It is for downward connection of VLAN stacking operation Tunnel It will set the port as tunnel port for VLAN stacking operation It will add a tag and allow two 802 1Q VLAN tags in...

Page 120: ...alid VLAN ID is 1 4094 2 Select the VLAN in Modify Static VLAN Table The new VLAN is empty by default You can select ports for the VLAN After that click Apply to complete the VLAN configuration Modify an 802 1Q VLAN 1 Select the VLAN in Modify Static VLAN Table 2 Modify its setting and click Apply to activate the new setting Delete an 802 1Q VLAN 1 Select the VLAN in Modify Static VLAN Table 2 Cli...

Page 121: ... GVRP protocol is enabled this table will also show the learned remote 802 1Q VLAN 2 Private VLAN Three kinds of VLAN are defined for this application Primary VLAN Community VLAN and Isolated VLAN Community VLAN and Isolated VLAN can communicate with Primary VLAN but they cannot communicate with each other And users in Isolated VLAN cannot communicate with each other This is a special 802 1Q VLAN ...

Page 122: ...y VLAN If more than one Primary VLAN select Primary VLAN first and then do the association See the following picture 2 2 Port Configuration After VLANs are created assign ports to VLANs There are three types for a port Normal Host and Promiscuous Normal is for ports doing normal 802 1Q operation instead of Private VLAN Host is for ports that could be in Community VLAN or Isolated VLAN ...

Page 123: ...e type for a port b If it is Host you can select a VLAN from Community VLAN or mark Isolated VLAN and select from it Community VLAN must be associated first c If it is Promiscuous you can select a VLAN from Primary VLAN or mark Isolated VLAN and select from it d Repeat a c to complete the port assigment e Click Apply Please see the following picture 3 Port based VLAN ...

Page 124: ...ble Port based VLAN And click Apply button b Give VLAN name c Select ports for each VLAN d Click Apply button Note About Concentration VLAN This is a very popular application for VLAN setting Port 10 is the uplink port Port 1 9 are isolated to each other but communicate with Port 10 uplink port ...

Page 125: ...to define the priority setting of each port It will map to the four priority queues of the switch 802 1P Enable this is for 802 1P priority operation enable diable on each port 802 1P priority operation will use the priority setting in tag of packets for QoS operation The mapping of 802 1P priority values 0 7 to priority queue could be defined at VLAN Tag Priority page by clicking Configure VLAN T...

Page 126: ...g setting Configure DSCP Priority button Click this button can go to the IP Differential Service DiffServ Configuration page for DSCP priority values 0 63 to priority queue mapping setting 802 1P Priority Mapping For 802 1P priority priority value 0 7 in VLAN tag will be used for QoS operation And the mapping of priority values to priority queues High Middle Normal Low could be defined here This m...

Page 127: ...n DSCP values 0 63 could be defined and map to priority queues High Middle Normal Low This mapping is done by port And All could be selected for every port If DSCP priority function is enabled these settings will be followed for QoS operation 2 Queue Mode This switch supports Strict Priority and WRR Weight Round Robin operation for sending out packets from piority queues ...

Page 128: ...e when higher priority queues are empty If WRR is selected priority queues will be served with the weighting of priorities And the setting of weight could be configured at Queue Scheduling 3 Queue Scheduling This function is used to configured the weighting of priority queues for WRR operation And the output bandwidth will be shared with the ratio of weighting between priority queues ...

Page 129: ...port if this setting is enable If it is disable the unregistered IP multicast traffic will be flooded to IP multicast members only IGMP Query Interval this is used to set the IGMP query packet sending interval if IGMP Query function is enable IGMP Report Delay this is used to set the delay time to send report after receiving a query When a host receives a Query it doesn t send a report immediately...

Page 130: ...unction will isolate traffic between VLAN groups But it will also isolate IP multicast traffic for subscribers in different VLANs The MVR function allows one multicast VLAN to be shared by subscribers in different VLANs That can reduce the multicast traffic for VLANs Before configure MVR complete the following two functions configuration first 1 Complete 802 1Q VLAN setting first 2 Enable IGMP sno...

Page 131: ...MVR VLAN In Compatible mode the switch will not send IGMP reports Source Port this is the uplink port of this MVR VLAN to the IGMP traffic source It could be tagged port or untagged port Receiver Port this is the ports connecting to subscribers receiving IP multicast traffic in the MVR VLAN After the MVR VLAN is configured you can assign IP multicast groups video channels to the MVR VLAN in MVR Gr...

Page 132: ...ticast group for identification Start Address this is the start IP multicast address for the IP multicast group End Address this is the end IP multicast address for the IP multicast group Then click Apply After both MVR VLAN and IP multicast groups are configured subscribers at the receive ports can receive IP multicast traffic in the IP multicast groups from source port even they are in differenc...

Page 133: ...Trunk Information This table is used to assign ports to Trunk groups statically Follow the steps to do it Don t connect trunk cables until this function is set a Enable Trunk function first Then click Apply b Select a Trunk Group at Grp c Select the member ports d Click Apply e Repeat b d for another Trunk group setting Note If a port are used as static port for any Trunk group its LACP function w...

Page 134: ...rst Then click Apply b Assign System Priority Its value is 1 65535 and higher number has lower priority Combining with the Mac address of the switch it is used to identify this switch in LACP protocol operation c Select ports that will run LACP protocol d Click Apply Note If ports are already in static trunk group they are not allowed to apply as LACP ports If static ports are selected as LACP por...

Page 135: ...LACP trunk is created another port groups message will be shown Click Refresh can update the status information The following table will show the LACP enable disable status of each port Port number and port key of the partner switch will also be shown in the table when LACP Trunk is running ...

Page 136: ...function This page is used to configure DHCP Relay Option 82 function DHCP Relay Option 82 function will add the following information to DHCP request packet 1 Connection port number that the DHCP request packet comes from 2 Mac address of the switch 3 A additional string as information Adding information must be enabled first DHCP Relay Status is used to enable disable DHCP Relay function Relay A...

Page 137: ...nt PC Config Backup Restore Backup Setting Clicking this button the switch will backup the configuration of the switch to the web management PC Backup Setting to text file Clicking this button the switch will backup the configuration of the switch to the web management PC in text format Restore Setting The configuration of the switch can be restored to switch by clicking this button after the conf...

Page 138: ...o verify network connection Target IP address This is the target IP address for the ping operation Count This is the repeat count for the ping operation Time Out This is the timeout value for the ping operation After the above items are set click Apply to start the ping operation Then the result of ping operation will be shown ...

Page 139: ...Run time code This option will continue the booting process b Upgrade Run time code This option will try to update run time code main code from terminal program with Xmodem protocol If this option is selected the following message will be shown Waiting to receive file by Xmodem Then user can select Send File function of terminal program and select Xmodem protocol and the update file then start the...

Page 140: ...Chapter 7 Software Update and Backup 140 3 From console telnet command Doing by tftp protocol and done by copy command Please refer to the description of copy command in Section 6 2 2 ...

Page 141: ... Stacking Yes QoS 4 transmit priorities per ports for port based 802 1P tagged based DSCP priority operation Spanning Tree Support RSTP STP protocol Trunking 8 groups max Static and LACP are supported Mirror Port Yes IGMP Snooping Yes for IP multicast traffic MVR Yes Mac ID Security on Port Static Mac address access limit on port and Dynamic Mac address number limit on port IP Filter on Port Yes I...

Page 142: ...ng Yes QoS 4 transmit priorities per ports for port based 802 1P tagged based DSCP priority operation Spanning Tree Support RSTP STP protocol Trunking 8 groups max Static and LACP are supported Mirror Port Yes IGMP Snooping Yes for IP multicast traffic MVR Yes Mac ID Security on Port Static Mac address access limit on port and Dynamic Mac address number limit on port IP Filter on Port Yes IP Subne...

Page 143: ...ng Yes QoS 4 transmit priorities per ports for port based 802 1P tagged based DSCP priority operation Spanning Tree Support RSTP STP protocol Trunking 8 groups max Static and LACP are supported Mirror Port Yes IGMP Snooping Yes for IP multicast traffic MVR Yes Mac ID Security on Port Static Mac address access limit on port and Dynamic Mac address number limit on port IP Filter on Port Yes IP Subne...

Page 144: ...ment in a residential area is likely to cause interference in which case the user at his own expense will be required to take whatever measures are required to correct the interference CE Mark Declaration of Conformance for EMI and Safety EEC This is to certify that this product complies with ISO IEC Guide 22 and EN45014 It conforms to the following specifications EMC EN55022 1988 CISPR 22 1985 cl...

Page 145: ...ree from defects in material and workmanship for a period of warranty time from the date of purchase from us or the authorized reseller The warranty does not cover the product if it is damaged in the process of being installed We recommend that you have the company from whom you purchased this product install it ...

Page 146: ......

Page 147: ......

Page 148: ......

Search results

Summary of Contents for GSW-3208M

Reviews:

Related manuals for GSW-3208M

Brands by name

Popular brands

CTC Union GSW-3208M, User Manual

Search results

Summary of Contents for GSW-3208M

Reviews:

Related manuals for GSW-3208M

Brands by name

Popular brands