CTS FOS-3126-PLUS SERIES User Manual Download Page 49

Page: 49 / 205

Switch(config)# ip igmp
snooping query-interval [1-6000]
secs

[1-6000]

Specify Query time interval. This is used to
set the time interval between transmitting
IGMP queries.

Switch(config)# ip igmp
snooping vlan [1-4094]

[1-4094]

Specify a VLAN ID. This enables IGMP
Snooping on a specified VLAN.

Switch(config)# ip igmp
snooping vlan [1-4094] query

[1-4094]

Enable a querier on the specified VLAN.

No command

Switch(config)# no ip igmp
snooping

Disable IGMP Snooping function.

Switch(config)# no ip igmp
snooping flooding

Disable flooding function. Traffic will
forward to router-ports only when disabled.

Switch(config)# no ip igmp
snooping immediate-leave

Disable IGMP immediate leave function.

Switch(config)# no ip igmp
snooping max-response-time

Reset maximum response time back to the
factory default.

Switch(config)# no ip igmp
snooping mcast-router [port_list]

[port_list]

Remove the selected ports from the router
port list.

Switch(config)# no ip igmp
snooping query-interval

Reset Query interval value back to the
factory default.

Switch(config)# no ip igmp
snooping vlan [1-4094]

[1-4094]

Disable IGMP Snooping on the specified
VLAN.

Switch(config)# no ip igmp
snooping vlan [1-4094] query

[1-4094]

Disable a querier on the specified VLAN.

Show command

Switch(config)#show ip igmp
snooping

Show current IGMP snooping status
including immediate leave function.

Switch(config)#show ip igmp
snooping groups

Show IGMP group table.

Switch(config)#show ip igmp
snooping status

Show IGMP Snooping status.

5. Configure IGMP Filtering policies.

IGMP Filtering command

Parameter

Description

Switch(config)# ip igmp filter

Enable IGMP Filtering function.

Switch(config)# ip igmp
segment [1-400]

[1-400]

Specify a segment ID.

Switch(config-segment-ID)#
name [segment_name]

[segment_name] Specify a name for this segment.

Switch(config-segment-ID)#
range [E.F.G.H] [E.F.G.H]

[E.F.G.H]
[E.F.G.H]

Specify a multicast IP range.

Switch(config)# ip igmp profile
[profile_name]

[profile_name]

Specify a name for this profile.

Switch(config-profile-ID)#
segment [1-400]

[1-400]

Specify an existing segment ID.

No command

Switch(config)# no ip igmp filter

Disable IGMP Filtering function.

Switch(config)# no ip igmp
segment [1-400]

[1-400]

Delete the specified segment. Only
the segment that does not belong to
any profiles can be deleted.

Summary of Contents for FOS-3126-PLUS SERIES

Page 1: ...FOS 3126 PLUS SERIES 24 PORTS COMBO SFP 10 100 1000BASE T 100BASE FX 1000BASE X AND UPLINK 2 PORTS COMBO SFP 1000BASE T 1000BASE X SLOTS MANAGEMENT SWITCH Network Management User s Manual Version 1 4...

Page 2: ...s cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of th...

Page 3: ...Password 17 2 4 User Mode 18 2 4 1 Ping Command 18 2 5 Privileged Mode 18 2 5 1 Copy cfg Command 19 2 5 2 Firmware Command 20 2 5 3 Ping Command 20 2 5 4 Reload Command 20 2 5 5 Write Command 20 2 5 6...

Page 4: ...onfig Command 82 3 SNMP NETWORK MANAGEMENT 83 4 WEB MANAGEMENT 84 4 1 System Information 86 4 2 User Authentication 87 4 2 1 RADIUS Configuration 88 4 3 Network Management 89 4 3 1 Network Configurati...

Page 5: ...ept 114 4 4 7 3 Introduction to Q in Q 117 4 4 7 4 802 1Q VLAN 118 4 4 7 4 1 Configure VLAN 118 4 4 7 4 2 VLAN Interface 119 4 4 7 4 3 Management VLAN 120 4 4 8 QoS Configuration 120 4 4 8 1 QoS Port...

Page 6: ...ort Packet Analysis Statistics 160 4 5 5 LACP Monitor 161 4 5 5 1 LACP Port Status 161 4 5 5 2 LACP Statistics 162 4 5 6 RSTP Monitor 162 4 5 6 1 RSTP VLAN Bridge Overview 163 4 5 6 2 RSTP Port Status...

Page 7: ...Factory Settings Except Network Configuration 176 4 6 5 Backup Configuration 177 4 7 Save Configuration 178 4 8 Reset System 178 APPENDIX A Free RADIUS readme 179 APPENDIX B Set Up DHCP Auto Provision...

Page 8: ...the best of this user s manual and maximize the Managed Switch s performance for your personalized networking environment 1 1 Interface There are 4 models in this series Descriptions and interface fi...

Page 9: ...tolen for remote management You can use PuTTY a free and open source terminal emulator application which can act as a client for the SSH to gain access to the Managed Switch SNMP Management SNMP is al...

Page 10: ...based network management system is used to manage the Managed Switch through the network remotely When you use a SNMP based network management system the Managed Switch becomes one of the managed dev...

Page 11: ...ded twisted pair networking cable SFP slot for 3 3V mini GBIC module supports hot swappable SFP fiber transceiver Before connecting the other switches workstation or Media Converter make sure both sid...

Page 12: ...esses were obtained Remember that an address can be assigned to only one device on a network If you connect to the outside network you must change all the arbitrary IP addresses to comply with those y...

Page 13: ...tch cannot be reached by any other means You also need the Local Console Management to setup the Switch network configuration for the first time You can setup the IP address and change the default con...

Page 14: ...thorized username and password and then you will be directed to User mode In CLI management the User mode only provides users with basic functions to operate the Managed Switch If you would like to co...

Page 15: ...perform several functions The following table summarizes the most frequently used quick keys in CLI Keys Purpose tab Enter an unfinished command and press Tab key to complete the command Press key in...

Page 16: ...Brackets represent that this is a required field s size r repeat t timeout These three parameters are used in ping command and are optional which means that you can ignore these three parameters if th...

Page 17: ...ssword you can delete the default username admin to prevent unauthorized accesses Enable Mode Password Enable mode is password protected When you try to enter Enable mode a password prompt will appear...

Page 18: ...nter the packet size that would be sent The allowable packet size is from 8 to 4000 bytes optional r repeat 1 99 times Enter the number of times that ping packets are sent The allowable repeat number...

Page 19: ...600_file conf misadmin1 abcxyz Switch copy cfg from tftp 192 168 1 198 HS_0600_file conf 2 Backup a configuration file to FTP or TFTP server Command Parameter Description Switch copy cfg to ftp A B C...

Page 20: ...192 168 1 198 HS_0600_file bin 2 5 3 Ping Command Command Parameter Description Switch ping A B C D s size r repeat t timeout A B C D Enter the IP address that you would like to ping s size Enter the...

Page 21: ...nt authenticates via the Switch exit Exit the configuration mode help Display a list of available commands in Configuration mode history Show commands that have been used lldp Set up LLDP Link Layer D...

Page 22: ...itch config interface 1 3 5 Switch config if 1 3 5 Enter a single interface number together with a range of interface numbers Use both comma and hypen to signify the combination of different interface...

Page 23: ...ay the product s model name Firmware Version Display the firmware version used in this device M B Version Display the main board version Fiber Type Display information about the slide in or fixed fibe...

Page 24: ...f PORT PORT description description description Specify a descriptive name for the selected interfaces Switch config if PORT PORT media type sfp sfp Set the selected interfaces type to fiber Switch co...

Page 25: ...s to full duplex mode Switch config if 1 3 flowcontrol Enable the selected interfaces flow control function Switch config if 1 3 speed 1000 Set the selected ports speed to 1000Mbps Switch config if 1...

Page 26: ...eck ip Ethernet source_mac Define source MAC address any Specify any to apply ACL rule to any source MAC addresses xx xx xx xx xx xx Specify the specific source MAC address mac_mask Specify MAC mask a...

Page 27: ...function any Specify any to filter frames to any destination IP addresses x x x x Specify either a host IP address or a network address ip_mask Define destination IP mask any Specify any to mean any I...

Page 28: ...to IP 0x800 1 Specify 1 to indicate that Protocol Address Space is equal to IP 0x800 Ethernet any Specify any to indicate a match and not a match 0 Specify 0 to indicate that Hardware Address Space fi...

Page 29: ...ly ACL rule to any Ether types 0xXXXX Enter the specific Ether Type Switch config acl RULE frame type icmp dest_mac icmp_type icmp_code source_ip ip_mask dest_ip ip_mask ip_ttl ip_fragment ip_option d...

Page 30: ...is destination IP filtering function any Specify any to filter frames to any target IP addresses x x x x Specify a host IP address ip_mask Define destination IP mask any Specify any to mean any IP ma...

Page 31: ...ly ACL rule to broadcast traffic protocol_id This parameter is to show the protocol number defined in the protocol field of the IPv4 packet Specify any to denote any protocols specify 1 255 to denote...

Page 32: ...header is bigger than 5 bytes Switch config acl RULE frame type tcp dest_mac source_port dest_port source_ip ip_mask dest_ip ip_mask ip_ttl ip_fragment ip_option tcp_fin tcp_syn tcp_rst tcp_psh tcp_ac...

Page 33: ...ender IP addresses Or specify a host IP address x x x x ip_mask Define source IP mask any Specify any to mean any IP mask 255 255 0 0 Specify a specific IP mask dest_ip This is destination IP filterin...

Page 34: ...that the SYN value in TCP header is zero 1 to indicate the SYN value in TCP header is one Specify any to indicate that the value either 1 or 0 tcp_rst Specify 0 to indicate that the RST value in TCP...

Page 35: ...s For example 1000 2000 means that port numbers from 1000 to 200 are specified The starting source port number is100 whereas the ending source port number is 2000 dest_port any Specify any to filter f...

Page 36: ...Specify 0 to indicate that the TTL filed in IPv4 header is 0 1 If the value in TTL field is not 0 use 1 to indicate that ip_fragment Specify IP fragment bit any Specify any to denote the value which...

Page 37: ...94 Specify an existing VLAN ID Switch config acl rate limiter 1 14 rate_pps 1 14 Specify the rate limiter ID that you would like to assign a rate value to it rate_pps Assign the rate to this specified...

Page 38: ...e limiter 1 14 1 14 Show the specified rate limiter s setting Switch show acl interface port_list Switch config show acl interface port_list Show the specified interfaces access control list rule Use...

Page 39: ...acl interface port_list Show the specified interfaces access control list rule 2 6 6 Archive Command Backup a copy of configuration file to FTP or TFTP server automatically Archive command Parameter D...

Page 40: ...aggregation group LAG Command Parameter Description Switch config channel group trunking group_name group_name Specify a name for this link aggregation group Switch config interface port_list Switch...

Page 41: ...255 Specify a key to the selected interfaces Switch config if PORT PORT channel group lacp type active active Specify the selected interfaces to active LACP type No command Switch config if PORT PORT...

Page 42: ...time interval fromo 1440 minutes Switch config loop detection vlan id 1 4094 1 4094 Set up Loop Dtection VLAN ID No command Switch config no loop detection Disable Loop Detection function Switch confi...

Page 43: ...on server In other words the Managed Switch requests identifying information from the client verifies that information with the authentication server and relays the response to the client Switch confi...

Page 44: ...rt_list port_list Show or verify the selected interfaces 802 1x settings including port status and authentication status Switch config show dot1x statistics Show or verify 802 1x statistics Switch con...

Page 45: ...RT PORT dot1x reauthenticate Re authenticate the selected interfaces No command Switch config interface port_list port_list Enter several discontinuous port numbers separated by commas or a range of p...

Page 46: ...s IP address Switch config no ip address dhcp Disable DHCP mode Show command Switch config show ip address Show the current IP configurations or verify the configured IP settings IP command example Sw...

Page 47: ...ated 10 Specify the time value that packets might be received to 10 seconds Switch config ip dhcp snooping leased 240 Specify packets expired time to 240 seconds Switch config ip dhcp snooping option...

Page 48: ...network When a switch hears an IGMP report from a host for a given multicast group the switch adds the host s port number to the multicast list for that group And when the switch hears an IGMP Leave...

Page 49: ...onfig no ip igmp snooping vlan 1 4094 1 4094 Disable IGMP Snooping on the specified VLAN Switch config no ip igmp snooping vlan 1 4094 query 1 4094 Disable a querier on the specified VLAN Show command...

Page 50: ...ame Silver Specify a name Silver for this segment 50 Switch config segment 50 range 224 10 0 2 229 10 0 1 Specify a multicast IP range 224 10 0 2 to 229 10 0 1 Switch config ip igmp profile Silverprof...

Page 51: ...PORT no ip igmp filter profile profile_name profile_name Remove the selected ports from the specified profile Switch config if PORT PORT no ip igmp max groups Set the maximum number of multicast stre...

Page 52: ...to 400 Switch config if 1 3 ip igmp static multicast ip 224 10 0 5 vlan 50 Create a static multicast IP to VLAN entry 2 6 11 LLDP Command LLDP stands for Link Layer Discovery Protocol and runs over da...

Page 53: ...ault setting Switch config no lldp tlv select capability Disable Capability attribute to be sent Switch config no lldp tlv select management address Disable Management Address attribute to be sent Swi...

Page 54: ...associated ports will be deleted if they are not accessed within aging time MAC Command Parameter Description Switch config mac address table aging time 0 4080 0 4080 Enter the aging time for MAC addr...

Page 55: ...RT PORT no mac learning Disable MAC learning function Show command Switch config show mac address table Show MAC addresses learned by the Managed Switch Switch config show mac address table clear Clea...

Page 56: ...timeout 600 The console management will timeout logout automatically when it is inactive for 600 seconds Switch config management telnet Enable Telnet management Switch config management telnet port 2...

Page 57: ...nfig show mvr group Show or verify MVR group settings MVR command example Switch config mvr Enable MVR function Switch config mvr vlan 50 Create a MVR VLAN 50 Switch config mvr group 50 224 10 0 10 23...

Page 58: ...erver Switch config no ntp daylight saving Disable the daylight saving function Switch config no ntp offset Set the offset value back to the default setting Switch config no ntp server1 Delete the pri...

Page 59: ...classify data packets Switch config qcl LIST vlan id 1 4094 low normal medium high vlan id 1 4094 Specify the VID to this QoS rule low normal medium high Specify one priority level to classify data pa...

Page 60: ...Switch config qos remarking dscp 0 7 queue_list 0 63 0 7 queue_list Specify a queue value 0 63 Specify a DSCP value Switch config qos remarking 802 1p 0 7 queue_list 0 7 0 7 queue_list Specify a queu...

Page 61: ...d interfaces Switch config if PORT PORT qos remarking user priority 0 7 0 7 Specify the default priority bit to the selected interfaces Switch config if PORT PORT qos queue weighted 1 2 4 8 1 2 4 8 Sp...

Page 62: ...ate to each other Switch config security upnp filter Enable UPnP filter function No command Switch config no security anti broadcast polling interval Set the anti broadcast polling interval back to th...

Page 63: ...icast packets exceeding the specified threshold will then be dropped The packet rates that can be specified are listed below 1 2 4 8 16 32 64 128 256 512 1k 2k 4k 8k 16k 32k 64k 128k 256k 512k 1024k N...

Page 64: ...threshold will then be dropped 2 Use Interface command to configure a group of ports security settings Security Interface command Parameter Description Switch config interface port_list port_list Ent...

Page 65: ...e each designated bridge proposes to its neighbors to determine if it can make a rapid transition This is one of the major elements which allow RSTP to achieve faster convergence times than STP Spanni...

Page 66: ...ed_true Switch config no spanning tree delay time Reset the Forward Delay time back to the factory default Switch config no spanning tree hello time Reset the Hello Time back to the factory default Sw...

Page 67: ...gregated ports priority to 0 Switch config spanning tree aggregated port edge Set the aggregated ports to edge ports Switch config spanning tree aggregated port p2p forced_true Set the aggregated port...

Page 68: ...on aggregated ports Switch config show spanning tree interface Show each interface s STP information including port state path cost priority edge port state and p2p port state Switch config show span...

Page 69: ...e range is between 0 and 70 degrees Celsius Switch config switch sfp tx bias 400 400 Set up slide in SFP modules TX bias value Switch config switch sfp tx power low_rx_power high_rx_power low_rx_power...

Page 70: ...afety temperature rang to 0 70 degrees Celsius Switch config switch sfp tx bias 400 Set the slide in SFP safety TX Bias to 400 Switch config switch sfp voltage 3 3 6 Set the slide in SFP safety voltag...

Page 71: ...ion Remove the SNMP community descriptions for mycomm Switch config community NAME no level Remove the configured access privilege This will set this community s level to access denied Show command Sw...

Page 72: ...nfig trap ACCOUNT no description Delete the configured trap destination description Show command Switch config show snmp server trap destination Show SNMP trap destination account information Switch c...

Page 73: ...r is down anti bcast A trap will be sent when broadcast packets exceed the specified threshold value auth fail A trap will be sent when any unauthorized user attempts to login case fan A trap will be...

Page 74: ...ters for this Managed Switch Switch config switch info system contact sys_contact sys_contact Enter contact information for this Managed switch up to 55 alphanumeric characters Switch config switch in...

Page 75: ...system location 13thfloor Set the system location field to 13thfloor Switch config switch info system name backbone1 Set the system name field to backbone1 Switch config switch info host name edgeswit...

Page 76: ...user NAME no ip security Disable IP security function Switch config user NAME no level Reset access level privilege back to the factory default access denied Show command Switch config show user name...

Page 77: ...er radius radius port Set the radius port setting back to the factory default Switch config no user radius retry time Set the retry time setting back to the factory default Switch config no user radiu...

Page 78: ...show log Show event logs currently stored in the Managed Switch These event logs will be saved to the system log server that you specify Syslog command example Switch config syslog Enable System log f...

Page 79: ...ip Switch config show vlan port based Show port based VLAN table Switch config show vlan interface port_list port_list Show the selected ports VLAN assignment and VLAN mode Exit command Switch config...

Page 80: ...no vlan dot1q vlan mode Remove VLAN dot1q mode Switch config if PORT PORT no vlan dot1q vlan mode trunk native Disable native VLAN for untagged traffic Switch config if PORT PORT no vlan dot1q vlan t...

Page 81: ...lay error packets statistics events for the selected ports Switch config show interface statistics error rate Display error packets statistics rates for each port Switch config show interface statisti...

Page 82: ...ations assigned to the Manged Switch by the factory Switch config show running config Show configurations currently used in the Manged Switch Please note that you must save running configurations into...

Page 83: ...ory resources required for the complete network management SNMP Manager is often composed by desktop computer work station and software program such like HP OpenView Totally 4 types of operations are...

Page 84: ...e the RS 232 DB 9 console port or one of the 10 100 1000Base TX RJ 45 ports as the temporary RJ 45 Management console port to set up the assigned IP parameters of the Managed Switch including IP addre...

Page 85: ...view the IP address and related information of the Managed Switch required for network management applications 4 Switch Management Set up switch port configuration VLAN configuration and other functio...

Page 86: ...of the Managed Switch location Like the name the location is for reference only for example 13th Floor Model Name View only field that shows the product s model name Firmware Version View only field t...

Page 87: ...er and then the following screen page appears Click Edit to view and edit a registered user setting Click Delete to remove a current registered user setting Click RADIUS Configuration for authenticati...

Page 88: ...Four operation privileges are available in the Managed Switch Administrator Full access right including maintaining user account system information loading factory settings etc Read Write Partial acc...

Page 89: ...k Configuration Set up the required IP configuration of the Managed Switch 2 System Service Management Enable or disable the specified network services 3 RS232 Telnet Console Configuration View the RS...

Page 90: ...ut how to set up a DHCP server please refer to APPENDIX B IP Address Enter the unique IP address of this Managed Switch You can use the default IP address or specify a new one when the situation of ad...

Page 91: ...sabled SNMP Service To enable or Disable the SNMP Management service Web Service To enable or Disable the Web Management service 4 3 3 RS232 Telnet Console Configuration Click the option RS232 Telnet...

Page 92: ...ress 2nd Time Server Address When the default time server is down the Managed Switch will automatically connect to the 2nd time server Synchronization Interval The time interval to synchronize from NT...

Page 93: ...urrent Total Max Agents View only field Current This shows the number of currently registered communities Total This shows the number of total registered community users Max Agents This shows the numb...

Page 94: ...privilege for the SNMP operation NOTE When the community browses the Managed Switch without proper access right the Managed Switch will not respond For example if a community only has Read Write priv...

Page 95: ...ged Switch to send port link up link down trap Broadcast Storm Trap Enable or disable broadcast storm trap sending from the Managed Switch when broadcast packets reach the upper limit Upper Limit Maxi...

Page 96: ...efault Log server IP address Log Server IP 2 Specify the second Log server IP address When the default Log Server is down the Managed Switch will automatically contact the second or third Log server L...

Page 97: ...SCP Remarking 802 1p remarking and queue remarking 10 Port Mirroring Set up target port mirrors source port to enable traffic monitoring 11 IGMP Snooping Enable or disable IGMP and set up IGMP VLAN ID...

Page 98: ...ias Enter the specific Bias for the Managed Switch to detect the SFP DMI safety range Default 400mA SFP Normal TX Porwer range Enter the TX power value The allowable range is between 9999 and 99999 SF...

Page 99: ...address ranging from 0180C2000020 to 0180C200002F will be dropped Multicast addresses from 0180C2000020 to 0180C2000022 are for GMRP GVRP and GARP respectively 0180C2000010 Select either Not Filter or...

Page 100: ...the cost of the cable and running extra cable reduces future labor costs if networking needs changes Link aggregation can allow the use of these extra cables to increase backbone speeds with little o...

Page 101: ...t Trunk Configuration from the Link Aggregation menu and then the following screen page appears The Managed Switch allows users to create 13 trunking groups Each group consists of 2 to 16 links ports...

Page 102: ...3ad Static trunks have to be manually configured at both ends of the link In other words LACP configured ports can automatically negotiate a trunked link with LACP configured ports on other devices Yo...

Page 103: ...ve LACP ports are capable of processing and sending LACP control frames This allows LACP compliant devices to negotiate the aggregated link so that the group may be changed dynamically as required In...

Page 104: ...tic backup paths if an active link fails without the danger of bridge loops or the need for manually enabling disabling these backup links To provide faster spanning tree convergence after a topology...

Page 105: ...st priority will be selected as the root bridge The root bridge is the central bridge in the spanning tree Hello Time Periodically a hello packet is sent out by the Root Bridge and the Designated Brid...

Page 106: ...ed to an end device that doesn t support RSTP then set it as an edge port to ensure maximum performance This will tell the switch to immediately start forwarding traffic on the port and not bother try...

Page 107: ...the following screen page appears Configure Port State Select State from the pull down menu of Select Setting This allows ports to be enabled or disabled When it is On RSTP is enabled Configure Port...

Page 108: ...pull down menu of Select Setting You can choose Port Priority value between 0 and 240 The default value is 0 Configure Port Edge Select Edge from the pull down menu of Select Setting Set the port to e...

Page 109: ...Initially ports are in the authorized state which means that ingress and egress traffic are not allowed to pass through except 802 1X protocol traffic When the authentication is successful with the a...

Page 110: ...ber assigned to each RADIUS authentication server with which the client shares a secret Reauthentication Enabled Enable or disable Reauthentication Reauthentication Period Specify a period of authenti...

Page 111: ...enticate from the 802 1X Configuration menu and then the following screen page appears This allows users to enable or disable port Reauthenticate When enabled the authentication message will be sent i...

Page 112: ...on Static MAC Table Configuration from the MAC Address Table menu and then the following screen page appears NOTE The Managed Switch only supports switch based MAC security and does not support port b...

Page 113: ...prove security by limiting traffic to specific domains A VLAN is a collection of end nodes grouped by logics instead of physical locations End nodes that frequently communicate with each other are ass...

Page 114: ...ers If you select V from the pull down menu it denotes that the port selected belongs to the specified VLAN 4 4 7 2 802 1Q VLAN Concept Port Based VLAN is simple to implement and use but it cannot be...

Page 115: ...hat will assign the VID to untagged traffic from that port The VLAN ID VID specifies the set of VLAN that a given port is allowed to receive and send labeled packets Both variables can be assigned to...

Page 116: ...me will be forwarded Tagging Every port on an 802 1Q compliant switch can be configured as tagging or un tagging Ports with a tagging will put the VID number priority and other VLAN information into t...

Page 117: ...G TCI P C VID Type LEN PAYLOAD FCS 802 1q Frame Preamble SFD D A S A Outer Tag or SP Tag Inner Tag or C Tag TCI P C VID Type LEN PAYLOAD FCS Double tagged Frame Double Tagged Frame As shown below in Q...

Page 118: ...he selected port 3 Management VLAN To set up management VLAN and management ports 4 4 7 4 1 Configure VLAN The following screen page appears if you choose Configure VLAN Click New to add a new VLAN en...

Page 119: ...the selected port Dot1q Tunnel Enable Q in Q function on the selected port Mode Port Behavior Access Receive untagged packets only Drop tagged packets Send untagged packets only Trunk Receive tagged...

Page 120: ...is ensures that network traffic is prioritized according to specified criteria and receives preferential treatments QoS enables you to assign various grades of network service to different types of tr...

Page 121: ...following screen page appears Configure Default Class Click the pull down menu to choose the class level Low Normal Medium or High The default class level of each port is Low Configure QCL A QCL numb...

Page 122: ...e Priority Level normal low low normal medium Medium High high 802 1p Value 0 1 2 3 4 5 6 7 Configure Queuing Mode There are two different queuing modes Strict This indicates that services to the egre...

Page 123: ...n select QoS Control List QCL Select a QCL number 1 26 QCE Type View only filed that shows QCL s current QCE type Type Value View only field that shows QCL s current type value Traffic Class View only...

Page 124: ...cify VLAND ID value from 1 to 4094 TCP UDP Port When you choose UDP TCP Port as your preferred QCE Type you can further specify TCP UDP Port by selecting Specific or Range from the pull down menu Spec...

Page 125: ...en page appears Configure Policer Rate This allows users to specify each port s inbound bandwidth The excess traffic will be dropped Specifying 0 is to disable this function Configure Shaper Rate This...

Page 126: ...l down menu of Select Setting This allows you to enable or disable DSCP remarking for each port The default setting is disabled Configure 802 1p Remark Select 802 1p Remark from the pull down menu of...

Page 127: ...Port Mirroring from the Switch Management menu and then the following screen page appears Source Port Choose Y enable or N disable from the pull down menu to enable or disable Target Port s mirroring...

Page 128: ...e host s port from the table entry IGMP snooping can reduce multicast traffic from streaming and make other bandwidth intensive IP applications run more effectively A switch using IGMP snooping will o...

Page 129: ...ult value 125 One Unit 1 second Query Response Interval This determines the maximum amount of time allowed before sending an IGMP response report Default value 100 One Unit 0 1 second Immediate Leave...

Page 130: ...from the IGMP Snooping menu and then the following screen page with the ability information of IPMC Segment ID Name and IP Range appears ID View only field that shows the current registered ID number...

Page 131: ...ent The IP range is from 224 0 1 0 238 255 255 255 4 4 11 4 IPMC Profile Select the option IPMC Profile from the IGMP Snooping menu and then the following screen page with the ability information of I...

Page 132: ...4 11 5 IGMP Filtering Select the option IGMP Filtering from the IGMP Snooping menu and then the following screen page appears IGMP Filter This option may enable or disable the IGMP filter The default...

Page 133: ...s IP Address View only field that shows the current source IP address of multicast stream VLAN View only field that shows the specified VLAN ID for current multicast stream Forwarding port View only f...

Page 134: ...server MVR Configuration Guidelines and Limitations Guidelines Enable IGMP global setting Enable MVR global setting Create MVR VLAN and indicate the Source port and Receive port Create MVR Groups who...

Page 135: ...m would belong to MVR VLAN 4 4 13 1 MVR Settings Select the option MVR Settings from the MVR Configuration menu and then the following screen page appears MVR To enable or disable MVR global settings...

Page 136: ...m the MVR Configuration menu and then the following screen page appears VLAN View only field that shows the current MVR VLAN ID Group Range View only field that shows the MVR Group Range Click New to...

Page 137: ...appropriate security configurations This section provides several security mechanisms to protect your network from unauthorized access to a network or redirect traffic for malicious purposes such as S...

Page 138: ...ings from the Security Configuration menu and then the following screen page appears Relay Agent To enable or disable DHCP Option 82 Relay Agent Global setting When enabled Relay Agent Information opt...

Page 139: ...en the Managed Switch will forward it B If a DHCP request is without Opt82 Agent information and then the Managed Switch will add Opt82 Agent information and forward it A DHCP request is from Port 2 t...

Page 140: ...ion for further information 4 4 14 3 Filter Configuration Select the option Filter Configuration from the Security Configuration menu and then the following screen page appears DHCP Snooping Enable or...

Page 141: ...iew only field that shows the current Mask address VLAN ID View only field that shows the VLAN ID Port View only field that shows the connection port number Click New to register a new Static IP addre...

Page 142: ...our clients to the Managed Switch After you complete Step 1 2 connect your clients to the Managed Switch Your clients will send a DHCP Request out to DHCP Server soon after they receive a DHCP offer W...

Page 143: ...h port Any broadcast packet exceeding the specified threshold will then be dropped see Anti broadcast Configuration Three options of frame traffic are provided to allow users to enable or disable the...

Page 144: ...next polling interval 4 4 15 Access Control List Management ACLM Creating an access control list allows users to define who has the authority to access information or perform tasks on the network In t...

Page 145: ...to MAC and VLAN parameters OK Click OK to save the port configurations Reflash Click Reflash to show the number of packets that conform to the default ACL rule Clear Click Clear to delete the number...

Page 146: ...is shows the maximum number available for registering ACL rule The maximum default number is 110 Ingress Port Select a Policy ID or a port number as the ingress port Frame Type Select Any Ethernet Typ...

Page 147: ...from the pull down menu for destination MAC filtering Select Any to filter any kind of traffic Select UC to filter unicast traffic Select MC to filter multicast traffic Select BC to filter broadcast...

Page 148: ...traffic Select UC to filter unicast traffic Select MC to filter multicast traffic Select BC to filter broadcast traffic DMAC Value Specify a destination MAC address VLAN Parameters VLAN ID Filter Sele...

Page 149: ...to filter any kind of traffic Select UC to filter unicast traffic Select MC to filter multicast traffic Select BC to filter broadcast traffic VLAN Parameters VLAN ID Filter Select Any or Specific for...

Page 150: ...dicate that the THA Target Hardware Address field in the ARP RARP frame is not equal to source MAC address Select 1 to indicate that THA field in the ARP RARP frame is equal to source MAC address Sele...

Page 151: ...or Other protocol from the pull down menu for IP Protocol filtering IP TTL Select 0 to indicate that the TTL filed in IPv4 header is 0 If the value in TTL field is not 0 use 1 to indicate that You ca...

Page 152: ...any code If Specific is selected you need to further specify an ICMP code value ICMP Code Value Specify an ICMP code value UDP Parameters Source Port Filter Select Any to filter frames from any sourc...

Page 153: ...CP header is one Select any to indicate either 1 or 0 TCP SYN Select 0 to indicate that the SYN value in TCP header is zero 1 to indicate the SYN value in TCP header is one Select any to indicate eith...

Page 154: ...ation from the Switch Management menu and then the following screen page appears Port Tick the checkbox to enable LLDP Receiver Hold Time TTL Enter the amount of time for receiver hold time in seconds...

Page 155: ...le or disable Loop Detection function Detection Interval Specify the time interval of performing Loop Detection The maximum time interval is 180 seconds Looped port unlock interval Specify the time in...

Page 156: ...View each port s traffic condition of error packets e g RX TX frames of Multicast and Broadcast etc 5 LACP Monitor View the LACP port status and statistics 6 RSTP Monitor View RSTP VLAN Bridge Port St...

Page 157: ...earning A port in this state prepares to participate in frame relay Frame relay is temporarily disabled in order to prevent temporary loops which may occur in a Bridged LAN during the lifetime of this...

Page 158: ...received from each port Received Utilization The ratio of each port receiving traffic and current port s total bandwidth Bytes Sent The total bytes sent from current port Frames Sent The total frames...

Page 159: ...ng screen page appears Select Choose the Packet Error Statistics from the pull down menu RX CRC Align Error CRC Align Error frames received RX Undersize Frames Undersize frames received RX Fragments F...

Page 160: ...mes 64 Bytes 64 bytes frames received Frames 65 127 Bytes 65 127 bytes frames received Frames 128 255 Bytes 128 255 bytes frames received Frames 256 511 Bytes 256 511 bytes frames received Frames 512...

Page 161: ...t sends LACPDUs to notify the remote system of its system LACP priority system MAC address port LACP priority port number and operational key Upon receipt of an LACPDU the remote system compares the r...

Page 162: ...ets LACPDU transmitted or received from current port LACP Transmitted Packets transmitted from current port LACP Received Packets received form current port Illegal Received Illegal packets received f...

Page 163: ...RSTP VLAN bridge Update Update the current status VLAN ID VID of the specific VLAN Bridge ID RSTP Bridge ID of the Managed Switch in a specific VLAN Max Age Max Age setting of the Managed Switch in a...

Page 164: ...Number The number of the port VLAN ID The VID of the VLAN to which this port belongs Path Cost The Path Cost of the port Edge Port Yes is displayed if the port is the Edge port connecting to an end st...

Page 165: ...ed The total transmitted STP packets from current port TCN Transmitted The total transmitted TCN Topology Change Notification packets from current port RSTP Received The total received RSTP packets fr...

Page 166: ...mation Select 802 1X port status from the 802 1x Monitor menu and then the following screen page appears In this page you can find the following information about 802 1X ports Port The number of the p...

Page 167: ...status of the Managed Switch select 802 1x Statistics from the 802 1x Monitor menu and then the following screen page shows up Select the port number from the pull down menu to view statistics 4 5 8 I...

Page 168: ...queries to all hosts and routers 224 0 0 1 on the local subnet to find out whether active multicast group members exist on the subnet Upon receiving an IGMP general query the Managed Switch forwards...

Page 169: ...ble VLAN ID VID of the specific VLAN Group The multicast IP address of IGMP querier Port The port s grouped in the specific multicast group 4 5 9 MAC Address Table MAC Address Table displays MAC addre...

Page 170: ...SN and detection Temperature Voltage TX Bias etc Select SFP Port Info from the SFP Information menu and then the following screen page appears Port The number of the port Speed Data rate of the slide...

Page 171: ...r The number of the SFP module slide in port Temperature C The Slide in SFP module operation temperature Voltage V The Slide in SFP module operation voltage TX Bias mA The Slide in SFP module operatio...

Page 172: ...binding port is VID View only field that shows the VLAN ID of the client port CliIP Addr View only field that shows client IP address Cli MAC Addr View only field that shows client MAC address TimeLe...

Page 173: ...the port description of the remote port System Capabilities View only field that shows the capability of the neighboring device Management Address View only field that shows the IP address of the neig...

Page 174: ...lose when the system is shut down or rebooted 2 Update This allows users to update the latest firmware save current configuration or restore previous configuration to the Managed Switch 3 Load Factor...

Page 175: ...configuration and update their Firmware on line Select Update from the System Utility menu and then the following screen page appears Protocol Select the preferred protocol either FTP or TFTP File Typ...

Page 176: ...will set all the configurations of the Managed Switch back to the factory default settings including the IP and Gateway address Load Factory Setting is useful when network administrators would like to...

Page 177: ...ed Backup Time Set up the time 24 hr clock to automatically backup once a day If the remote server fails or does not exist this function allows the system to retry around once per minute until the sys...

Page 178: ...Switch Select Save Configuration from the Console main menu and then the following screen page appears Click OK to save the configuration 4 8 Reset System After any configuration change Reset System...

Page 179: ...he directory raddb and modify these three files users clients conf and dictionary which are on the disc shipped with this product Please use any text editing software e g Notepad to carry out the foll...

Page 180: ...visioning process are described below for your reference A Setup Procedures Follow the steps below to set up Auto Provisioning server modify dhcpd conf file and generate a copy of configuration file S...

Page 181: ...n Server Update DHCP Client Linux Fedora 12 supports yum function by default First of all update DHCP client function by issuing yum install dhclient command Install DHCP Server Issue yum install dhcp...

Page 182: ...ease note that each vendor has their own way to define auto provisioning Make sure to use the file provided by the vendor Enable and run DHCP service 1 Choose dhcpd 2 Enable DHCP service 3 Start runni...

Page 183: ...183 Step 3 Modify dhcpd conf file Open dhcpd conf file in etc dhcp directory Double click dhcpd conf placed in etc dhcp directory to open it...

Page 184: ...oes not request a specific IP lease time the server will assign a default lease time value Maximum lease time This is the maximum length of time that the server will lease for 2 Define subnet subnet m...

Page 185: ...MD5 for firmware image 13 Specify the configuration filename 14 Specify the MD5 for configuration file NOTE 1 The text beginning with a pound sign will be ignored by the DHCP server For example in th...

Page 186: ...186 Restart DHCP service...

Page 187: ...be equal to DHCP when provisioning and it results in MD5 never matching and causing the device to reboot endless In order for your Managed Switch to retrieve the correct configuration image in TFTP FT...

Page 188: ...ration 2 The device will compare the firmware and configuration MD5 code form of DHCP option every time when it communicates with DHCP server 3 If MD5 code is different the device will then upgrade th...

Page 189: ...y The Managed Switch supports Port based VLAN implementation and IEEE 802 1Q standard tagging mechanism that enables the switch to differentiate frames based on a 12 bit VLAN ID VID field Besides the...

Page 190: ...PCs or other workstations Switch 1 also connects to Port 1 in Managed Switch Client PCs in the Marketing Department can access the Server 1 and Public Server Switch 2 is used in the RD Department to...

Page 191: ...port based RD OK 7 Return to Global Configuration mode and show currently configured port based VLAN membership SWH config if 2 22 23 26 exit SWH config show vlan port based Port Based VLAN Index VLAN...

Page 192: ...VLAN Configure VLAN Click OK to apply the settings 4 Click New to add a new Port Based VLAN Switch Management VLAN Configuration Port Based VLAN Configure VLAN 5 Add Port 2 22 23 and 26 in a group and...

Page 193: ...to member port 21 23 and 26 2 A untagged packet arrives at Port 2 Untagged packets received on the Managed Switch will be forwarded out untagged Therefore in this example the Managed Switch will look...

Page 194: ...packets to the Managed Switch to be routed in Carrier Ethernet For this example IEEE 802 1Q tagging mechanism can be used to forward data from the Managed Switch to the destination PC Data VLAN Netwo...

Page 195: ...n dot1q vlan access vlan 11 OK SWH config if 1 exit 8 Show currently configured VLAN tag settings SWH config show vlan interface IEEE 802 1q Tag VLAN Interface Port Mode PVID VLAN Member 1 access 11 1...

Page 196: ...By default all ports are member ports of the Default_VLAN Before removing the Deafult_VLAN from the VLAN table make sure you have correct management VLAN and PVID configurations otherwise incorrect co...

Page 197: ...t arrives at Port 1 port 1 s Port VLAN ID 11 will be added to the original port Because port 26 is set as a trunk port it will forward the packet with tag 11 out to the Carrier Ethernet 2 A tagged pac...

Page 198: ...WH config vlan 10 3 Name VLAN 10 to Management SWH config vlan 10 name Management OK SWH config vlan 10 exit 4 Assign Port 26 to VLAN 10 SWH config interface 26 SWH config if 26 vlan dot1q vlan trunk...

Page 199: ...gement VLAN 10 that includes only Port 26 as a member port Switch Management VLAN Configuration IEEE 802 1q Tag VLAN Configure VLAN 3 Check Management VLAN 10 settings Switch Management VLAN Configura...

Page 200: ...ag VLAN Management VLAN Click OK to apply the settings 5 Check Management VLAN 10 settings again Switch Management VLAN Configuration IEEE 802 1q Tag VLAN Configure VLAN Now Port 26 and CPU are member...

Page 201: ...nfiguration mode SWH enable Password SWH config SWH config 2 Create a VLAN 15 SWH config vlan dot1q vlan 15 OK 3 Name VLAN 15 to S VLAN SWH config vlan 15 name S VLAN OK SWH config vlan 15 exit 4 Assi...

Page 202: ...EEE 802 1q Tag VLAN Interface Port Mode PVID VLAN Member 1 dot1q tunnel 15 1 15 2 access 1 1 3 access 1 1 4 access 1 1 5 access 1 1 6 access 1 1 7 access 1 1 8 access 1 1 9 access 1 1 10 access 1 1 11...

Page 203: ...By default all ports are member ports of the Default_VLAN Before removing the Deafult_VLAN from the VLAN table make sure you have correct management VLAN and PVID configurations otherwise incorrect c...

Page 204: ...original tag will be kept intact and then added an outer tag 15 by Port 1 which is set as a tunnel port When this packet is forwarded to Port 26 two tags will be forwarded out because Port 26 is set a...

Page 205: ...0 Add and revise WEB management section Revise VLAN section on WEB GUI Draft new CISCO LIKE CLI section 1 07 B0 1 07 A2 1 07 92 2011 05 2011 04 2011 01 0 95 Modify LOGO image and product description...

Search results

Summary of Contents for FOS-3126-PLUS SERIES

Reviews:

Related manuals for FOS-3126-PLUS SERIES

Brands by name

Popular brands

CTS FOS-3126-PLUS SERIES, User Manual

Search results

Summary of Contents for FOS-3126-PLUS SERIES

Reviews:

Related manuals for FOS-3126-PLUS SERIES

Brands by name

Popular brands