background image

Advanced  Settings  37 

VLAN Configuration 

  Select 

Advanced > Configuration > Security > ARP Inspection > VLAN 

Step 1

Configuration

The VLAN Configuration interface is displayed. See Figure 4-50. 

 VLAN mode configuration (1) 

Figure 4-50

 

  Click

 Add New Entry

Step 2

A new record is added. See Figure 4-51. 

 VLAN mode configuration (2) 

Figure 4-51

 

  Input the VLAN ID, and select the Log Type from the drop-down list. 

Step 3

  Click 

Save

Step 4

Static Table 

The static table is manually configured and maintained. It will not ageing, and it will not be 

covered by dynamic ARP table. 

Static table can enhance the security performance of communicaiton. Static table can regulate 

that only the specific MAC address can be used in communication between network devices, 

and the attack packet can not modify the mapping between the IP address and the physical 

address of the table. Communication between the device and the other device is protected.   

  Select 

Advanced > Configuration > Security > ARP Inspection > Static Table

Step 1

The Static Table interface is displayed. See Figure 4-52. 

 Static table 

Figure 4-52

 

Summary of Contents for PFS4218-16GT-190

Page 1: ...16 24 Port PoE Gigabit Managed Switch Web Config Manual V1 0 0...

Page 2: ...nge of numbers to the device Do not DMZ the device s IP address You do not need to forward any ports for individual cameras if they are all connected to a recorder on site just the NVR is needed 3 Lim...

Page 3: ...if not avoided will result in death or serious injury Indicates a medium or low potential hazard which if not avoided could result in slight or moderate injury Indicates a potential risk which if not...

Page 4: ...ailed information see the paper User s Manual CD ROM QR code or our official website If there is inconsistency between paper User s Manual and the electronic version the electronic version shall preva...

Page 5: ...nstall the device in the well ventilated environment Do not block the air vent of the device Use the device at rated input and output voltage Do not dissemble the device without professional instructi...

Page 6: ...1 System 9 4 1 2 Port 13 4 1 3 DHCP 14 4 1 4 Security 19 4 1 5 Aggregation 41 4 1 6 Spanning Tree 43 4 1 7 IGMP Snooping 49 4 1 8 LLDP 51 4 1 9 PoE 54 4 1 10 MAC Table 55 4 1 11 VLANs 56 4 1 12 Mirro...

Page 7: ...Table of Contents VI 4 4 1 Restart Device 76 4 4 2 Factory Defaults 77 4 4 3 Software 77 4 4 4 Configuration 78...

Page 8: ...Overview 1 1 Overview The 16 24 Port PoE Gigabit Managed Switch supports web access You can visit the switch on web browser and configure and manage the switch...

Page 9: ...ddress is 192 168 1 110 by default and press Enter key on the keyboard See Figure 2 1 for login interface Web login interface Figure 2 1 Input user name and password The user name and the password are...

Page 10: ...ort information Parameter Description Port Display all the ports This switch contains 16 24 ports Port quantity might vary depending on the model you purchased and the actual product shall govern Port...

Page 11: ...General Settings 4 Local Figure 3 2 VLAN 3 3 Add the port to the VLAN and configure the VLAN By default the port belongs to VLAN1 Select General Vlan Step 1 VLAN interface is displayed See Figure 3 3...

Page 12: ...ion parameter Parameter Description Port Display all the ports Mode Three modes Access Hybrid and Trunk Port VLAN Add the port to a VLAN By default the port belongs to VLAN 1 It ranges from 1 through...

Page 13: ...See Figure 3 4 Aggregation Figure 3 4 Add the port member to the static group For example add port 1 and port 2 to Static Step 1 Group 1 See Figure 3 5 Up to 13 static groups can be set at the same ti...

Page 14: ...6 VLAN interface Figure 3 6 Add the VLAN interface Step 2 1 Click Add Interface A new record is added See Figure 3 7 VLAN interface Figure 3 7 2 Set the parameters See Table 3 3 Table 3 3 VLAN interf...

Page 15: ...tination address of the IP packet Mask Length Mask length with destination address is to identify the IP address of the destination host or the route After logical AND between destination address and...

Page 16: ...or forwarding The switch supports layer 3 forwarding through VLAN interface VLAN interface is the virtual interface of layer 3 mode for layer 3 communication between the VLANs It is not the physical e...

Page 17: ...t the parameters See Table 4 2 Table 4 2 IP routes Parameter Description Network It is the destination address of the IP packet Mask Length Mask length with destination address is to identify the IP a...

Page 18: ...2 Disabled Set the IP address of the NTP server See Figure 4 6 Step 3 NTP configuration 2 Figure 4 6 Click Save Step 4 The switch can synchronize with the time of server 1 4 1 1 4 Time You can set the...

Page 19: ...Address and System Log Level Select Advanced Configuration System Log Step 1 The System Log Configuration interface is displayed See Figure 4 8 System log configuration Figure 4 8 Set the parameters S...

Page 20: ...erface is displayed See Figure 4 9 Port configuration Figure 4 9 Set the parameters See Table 4 4 Step 2 Table 4 4 Port parameter Parameter Description Port Display all the ports Link If the port link...

Page 21: ...e manually before Generally in the following scenes DHCP Server is adopted to allocate IP address The network scale is large The workload is too heavy if manually configured and centralized management...

Page 22: ...15 Add a new pool Figure 4 11 2 Input the pool name For example vlan2_test2 3 Click Save 4 Click the pool name link See Figure 4 12 DHCP Pool Configuration interface is displayed See Figure 4 13 Name...

Page 23: ...P pool configuration Figure 4 13 5 Set the parameters in DHCP Pool Configuration interface See Figure 4 13 And see Table 4 5 for details about the parameters Table 4 5 DHCP pool configuration paramete...

Page 24: ...gateway of the address pool DNS Server Configure the server IP address of the domain name system NTP Server Configure the NTP server IP address 6 Click Save Configure the mode Step 3 1 Click Mode tab...

Page 25: ...server built up privately in the network the DCHP client might acquire wrong IP address and network configuration parameter and communication will fail To make sure that the DHCP client acquires the...

Page 26: ...ooping configuration Figure 4 18 Select the Snooping Mode as Enabled to enable DHCP Snooping Step 2 Set the port as Trusted or Untrusted Step 3 Click Save Step 4 4 1 4 Security 4 1 4 1 Users You can a...

Page 27: ...and input the password again to confirm it The Step 2 password can be set from 8 characters through 32 characters and contains at least two types from number letter and special characters excluding an...

Page 28: ...And SSL TLS are needed for encryption HTTPS is the URI scheme and the syntax is similar to HTTP It is used for security HTTP data transmission Built in the web Netscape Navigator it provides authenti...

Page 29: ...e managed device independent to manage the devices from different manufacturers SNMP network provides two element NMS and Agent NMS Network Management System is the manager in SNMP network and it prov...

Page 30: ...ion Configurations Step 2 The SNMP Trap Configuration interface is displayed See Figure 4 27 SNMP Trap configuration Figure 4 27 Set the parameters See Table 4 6 Step 3 Table 4 6 NMP Trap configuratio...

Page 31: ...name Only version SNMP v3 supports the function Click Save Step 4 Communities Add the community and set the authority for NMS accessing Agent using the community Select Advanced Configuration Security...

Page 32: ...Password Private Protocol and the Private Password If you select NoAuth NoPriv you do not need to set the protocol and password If you select Auth NoPriv you need to set the Authentication Protocol a...

Page 33: ...e group name Click Save Step 4 Views After SNMP views configured you can specify the SNMP views for the SNMP group to limit the MIB target that the SNMP group can visit Select Advanced Configuration S...

Page 34: ...old for example the port rate reached the specific value or the ratio of broadcasting packet reaches the specific value it can automatically record the log and send Trap packet to the management devic...

Page 35: ...38 History Figure 4 38 Click Add New Entry and set the ID and the data source Step 2 Click Save Step 3 Alarm RMON alarm management can monitor the specific alarm variable for example the packet quanti...

Page 36: ...e number and the processing mode The events defined in event group are applied in the alarm configuration When the monitored target reaches the alarm condition alarm event is triggered There are sever...

Page 37: ...a series of matching conditions to classify the packets The conditions can be the source address destination address and the port number of the packet When the device port receives the packet it can...

Page 38: ...Advanced Settings 31 Ports Figure 4 42 Set the parameters including Policy ID Action Rate Limiter ID and so on Step 2 Click Save Step 3 Rate Limiters...

Page 39: ...limiters Figure 4 43 Set the parameters including Rate and Unit Step 2 Click Save Step 3 Access Control List Select Advanced Configuration Security ACL Access Control List Step 1 The Access Control Li...

Page 40: ...ction the packet forwarded in the port can be filtered and controlled and the illegal packet cannot pass through the port The illicit use of network resource is limited and security performance of the...

Page 41: ...See Table 4 11 Step 3 Table 4 11 IP source guard parameter Parameter Description Translate dynamic to static Click the button to switch dynamic static The premise is that the IGMP Snooping is enabled...

Page 42: ...he IP address into Ethernet MAC address the physical address In LAN when the host or other network device needs to forward data to another host or other network device the IP address of the target hos...

Page 43: ...n Set the parameters See Table 4 12 Step 3 Table 4 12 ARP inspection parameter Parameter Description Translate dynamic to static Click the button to switch dynamic static Port Mode Configuration Mode...

Page 44: ...static table is manually configured and maintained It will not ageing and it will not be covered by dynamic ARP table Static table can enhance the security performance of communicaiton Static table ca...

Page 45: ...maintained by ARP through ARP packet It can be aging and it can be covered by new ARP packet or static ARP table When reaching ageing and the port is down the corresponding dynamic table will be delet...

Page 46: ...authentication Enabled Reauthentication Period Step 3 EAPOL Timeout Aging Period and so on in System Configuration Set the parameters including Admin State Port State and so on in Port Configuration S...

Page 47: ...ew Server in Server Configuration Step 3 A new record is added See Figure 4 57 Server configuration Figure 4 57 Set the parameters including Hostname Timeout Retransmit and so on Step 4 Click Save Ste...

Page 48: ...Mode Step 3 Click Save Step 4 4 1 5 Aggregation Aggregation is to form the multiple physical ports of the switch into the logical port The multiple links in the same group can be regarded as a logical...

Page 49: ...n MAC address Destination MAC Address the aggregation load balancing algorithm based on destination MAC address IP Address the aggregation load balancing algorithm based on source IPv4 address and des...

Page 50: ...the features of STP RSTP and MSTP and the relationship between them progressively in this section 4 1 6 1 Bridge Settings There must be the root in tree model network and the concept of Root Bridge is...

Page 51: ...priority The smaller the value is the higher the priority level is And the value of bridge priority should be the multiple of 4096 Hello Time Set the period for sending packet Forward Delay Set the d...

Page 52: ...e independent Every spanning tree can be regarded as an MSTI Multiple Spanning Tree Instance VLAN mapping table is one of the MST domain properties for describing the mapping relationship between VLAN...

Page 53: ...multiple spanning tree instances 7 instances totally VLANs Mapped Input the VLAN number For example VLAN 1 Click Save Step 3 4 1 6 3 MSTI Priorities Set the MSTI priorities By default it is 32768 Sel...

Page 54: ...able If you select Spedific you can set the path cost value manually Priority Set the priority By default it is 128 Ad min Edge Select from the drop down list Non Edge and Edge are selectable Auto Edg...

Page 55: ...MSTI Ports Step 1 The MST1 MSTI Port Configuration interface is displayed See Figure 4 65 MST1 MSTI port configuration 1 Figure 4 65 Select MSTI from the drop down list 7 types are selectable For exa...

Page 56: ...t and the Priority in MSTI Normal Ports Configuration Step 5 Click Save Step 6 4 1 7 IGMP Snooping IGMP Snooping Internet Group Management Protocol Snooping is the multicast constraint mechanism runni...

Page 57: ...Configuration Select Advanced Configuration IGMP Snooping Basic Configuration Step 1 The IGMP Snooping Configuration is displayed See Figure 4 67 IGMP snooping configuration Figure 4 67 Set the globa...

Page 58: ...en the switch receives the IGMP specific group query packet for the multicast the switch will not forward it to that port You can enable the port fast leave to reduce bandwidth and resource cost Throt...

Page 59: ...twork management system to quiry and judge the link communication status LLDP Select Advanced Configuration LLDP Step 1 The LLDP Configuration interface is displayed See Figure 4 70 LLDP configuration...

Page 60: ...t Step 2 Set the Transmit TLVs and the Device Type in LLDP MED Interface Configuration Step 3 Set the location information in Coordinates Location Step 4 Set the parameters including Country code Stat...

Page 61: ...lize power supply and facilitate backup The network terminal does not need the external power source anymore and one network cable is enough It conforms to the standards of IEEE 802 3af and IEEE 802 3...

Page 62: ...ded through the port in the table directly And if the destination MAC address of the packet is not contained in the MAC address table the device adopts broadcasting to forward the packet to all the po...

Page 63: ...2 Set the parameters including VLAN ID MAC address and port members Click Save Step 5 4 1 11 VLANs Select Advanced Configuration VLANs The Port VLAN Configuration interface is displayed See Figure 4...

Page 64: ...copied to a specific port mirroring destination port The mirroring destination port connects to a PC that data package analyzing software is installed and it can analyze the received data package for...

Page 65: ...Serial Config interface is displayed See Figure 4 78 Serial Config Figure 4 78 Monitor 4 2 4 2 1 System 4 2 1 1 Information You can view the system information of the device including system hardware...

Page 66: ...status including IP interfaces IP routes and neighbour cache Select Advanced Monitor System IP Status The IP Status interface is displayed See Figure 4 81 IP Status Figure 4 81 4 2 1 4 Log You can vie...

Page 67: ...re 4 83 Detailed system log information Figure 4 83 4 2 2 Ports 4 2 2 1 State You can view the port information including link speed duplex media type and VLAN If the port link is displayed as green i...

Page 68: ...r Fiber Copper is the RJ 45 port and Fiber is the fiber port VLAN Display the port VLAN By default it is VLAN 1 4 2 2 2 Traffic Overview You can view the packers bytes errors drops and filerd informat...

Page 69: ...onitor Ports QCL Status The QoS Control List Status interface is displayed See Figure 4 87 QoS control list status Figure 4 87 4 2 2 5 Detailed Statistics You can view the detailed statistics of the p...

Page 70: ...tatistics You can view the DHCP server statistics including database counters binding counters DHCP packet received counters and DHCP packet sent counters Select Advanced Monitor DHCP Server The DHCP...

Page 71: ...face is displayed See Figure 4 91 Declined IP Figure 4 91 4 2 3 2 Snooping Table You can view the dynamic DHCP snooping table Select Advanced Monitor DHCP Snooping Table The Dynamic DHCP Snooping Tabl...

Page 72: ...You can view the port security switch status Select Advanced Monitor Security Port Security The Port Security Switch Status interface is displayed See Figure 4 94 Port security switch status Figure 4...

Page 73: ...er switch status Select Advanced Monitor Security NAS The Network Access Server Switch Status interface is displayed See Figure 4 96 Network access server switch status Figure 4 96 Port You can view t...

Page 74: ...s displayed See Figure 4 99 Dynamic ARP inspection table Figure 4 99 4 2 4 5 IP Source Guard You can view the dynamic IP source guard table Select Advanced Monitor Security IP Source Guard The Dynamic...

Page 75: ...ect Advanced Monitor Security RMON The RMON Statistics Status Overview interface is displayed See Figure 4 102 RMON statistics status overview Figure 4 102 History You can view the RMON history Select...

Page 76: ...4 Event You can view the RMON event information Select Advanced Monitor Security RMON Event The RMON Event Overview interface is displayed See Figure 4 105 RMON event overview Figure 4 105 4 2 4 8 Loo...

Page 77: ...ee 4 2 6 1 Bridge Status You can view the STP bridge status including MSTI bridge ID root topology flag and topology change last Select Advanced Monitor Spanning Tree Bridge Status The STP Bridge inte...

Page 78: ...2 7 IGMP Snooping 4 2 7 1 Status You can view the IGMP Snooping status Select Advanced Monitor IGMP Snooping Status The IGMP Snooping Status interface is displayed See Figure 4 111 IGMP Snooping statu...

Page 79: ...2 8 1 Neighbors You can view the LLDP neighbor information Select Advanced Monitor LLDP Neighbors The LLDP Neighbor Information interface is displayed See Figure 4 114 LLDP neighbor information Figure...

Page 80: ...iew the LLDP neighbors EEE information Select Advanced Monitor LLDP EEE The LLDP Neighbors EEE Information interface is displayed See Figure 4 117 LLDP neighbors EEE information Figure 4 117 4 2 8 5 P...

Page 81: ...r PoE The Power Over Ethernet Status interface is displayed See Figure 4 119 PoE status Figure 4 119 4 2 10 MAC Table You can view the MAC table of the switch Select Advanced Monitor MAC Table The MAC...

Page 82: ...s Figure 4 121 4 2 11 2 Ports You can view the VLAN port status including port type ingress filtering frame type and so on Select Advanced Monitor VLANs Ports The VLAN Port Status interface is display...

Page 83: ...elect Advanced Diagnostics Ping6 Step 1 The ICMPv6 Ping interface is displayed See Figure 4 124 ICMPv6 Ping Figure 4 124 Input the IPv6 address and click Start Step 2 Maintenance 4 4 4 4 1 Restart Dev...

Page 84: ...load You can upgrade the software of the switch Select Advanced Maintenance Software Upload Step 1 The Software Upload interface is displayed See Figure 4 127 Software upload Figure 4 127 Click Browse...

Page 85: ...2 4 4 4 2 Download You can download the configuration file Select Advanced Maintenance Configuration Download Step 1 The Download Configuration interface is displayed See Figure 4 130 Download configu...

Page 86: ...Activate Step 1 The Activate Configuration interface is displayed See Figure 4 132 Activate configuration Figure 4 132 Select the File Name default config and startup config are selectable Step 2 Cli...

Reviews: