manualshive.com logo in svg

Digisol DG-GS1512HP, User Manual, Page: 131 / 234

Share
Download
Digisol DG-GS1512HP User Manual Download Page 131

                                                                                  

        DG-GS1512HP User Manual

 

 

 

 

129 

authenticated. It is the same as Multi-auth mode with max 
hosts number configure to be 1. 

Order 

Support following authentication type order combinations. 
Web Authentication should always be the last type. The 
authentication manager will go to next type if current type is 
not enabled or authenticated fail.    

●

 

802.1x    

●

 

MAC-Based    

●

 

WEB-Based    

●

 

802.1x MAC-Based    

●

 

802.1x WEB-Based    

●

 

MAC-Based 802.1x    

●

 

WEB-Based 802.1x    

●

 

802.1x MAC-Based WEB-Based    

●

 

802.1x WEB-Based MAC-Based 

Method 

Support following authentication method order 
combinations. 

These orders only available on MAC-Based authentication 
and WEB-Based authentication. 802.1x only support Radius 
method. 

•

 

Local: Use DUT

’

s local database to do authentication 

•

 

Radius: Use remote RADIUS server to do authentication 

•

 

Local Radius 

•

 

Radius Local 

Guest VLAN 

Port guest VLAN enable state 

•

 

Enabled: Guest VLAN is enabled on port. 

Summary of Contents for DG-GS1512HP

Page 1: ...S1512HP 8 Port Giga PoE Ethernet WEB Smart Switch with 4 SFP Ports User Manual V1 0 2018 05 31 As our products undergo continuous development the specifications are subject to change without prior not...

Page 2: ...possible that information in this document is not up to date Please check with your local distributors for latest information No part of this document can be copied or reproduced in any form without...

Page 3: ...Installation 13 2 1 Mounting the Switch 13 2 1 1 Placement Tips 13 2 1 2 Rack Mounting 15 3 Getting Started 17 3 1 Power 17 3 1 1 Connecting to Power 17 3 1 2 Connecting to the Network 18 3 1 3 Power...

Page 4: ...able 33 4 2 Network 34 4 2 1 IP Address 34 4 2 2 System Time 36 4 3 Port 39 4 3 1 Port Setting 39 4 3 2 Error Disable 42 4 3 3 Link Aggregation 44 4 3 3 1 Group 44 4 3 3 2 Port Setting 46 4 3 3 3 LACP...

Page 5: ...4 5 4 1 MAC Group 69 4 5 4 2 Group Binding 70 4 6 MAC Address Table 72 4 6 1 Dynamic Address 72 4 6 2 Static Address 72 4 6 3 Filtering Address 73 4 7 Spanning Tree 74 4 7 1 Property 74 4 7 2 Port Se...

Page 6: ...106 4 9 2 2 Querier 110 4 9 2 3 Statistics 111 4 9 4 MVR 113 4 9 4 1 Property 113 4 9 4 2 Port Setting 115 4 9 4 3 Group Address 116 4 10 Security 118 4 10 1 RADIUS 118 4 10 2 Management Access 121 4...

Page 7: ...Option82 Property 151 4 10 8 4 Option82 Circuit ID 153 4 10 9 IP Source Guard 155 4 10 9 1 Port Setting 155 4 10 9 2 IMPV Binding 157 4 10 9 3 Save Database 159 4 11 ACL 161 4 11 1 MAC ACL 161 4 11 2...

Page 8: ...4 13 4 Traceroute 186 4 14 Management 187 4 14 1 User Account 187 4 14 2 Firmware 189 4 14 2 1 Upgrade Backup 189 4 14 2 2 Active Image 193 4 14 3 Configuration 194 4 14 3 1 Upgrade Backup 194 4 14 3...

Page 9: ...DG GS1512HP User Manual 7 4 14 5 1 Statistics 217 4 14 5 2 History 220 4 14 5 3 Event 223 4 14 5 4 Alarm 226...

Page 10: ...xt Arguments for which you supply values are in italic Square brackets mean optional elements Braces group required choices and vertical bars separate the alternative elements Braces and vertical bars...

Page 11: ...Digisol DG GS1512HP is a WEB Smart PoE switch with 8 Gigabit PoE ports 4 SFP Ports respectively 1 2 Package contents Before using the product check that the items listed below are included and in good...

Page 12: ...h rack mountable metal case 1 4 Product Components 1 4 1 Ports The following view applies to DG GS1512HP 1 2 Figure 1 Front View No Name Description 1 10 100 1000Mbps RJ 45 ports 1 12 Designed to conn...

Page 13: ...ure 2 Rear View No Name Description 1 AC power in Supports AC 100 240V 50 60Hz 1 4 2 LED Indicators The following view applies to DG GS1512HP 3 4 1 2 Figure 3 Front View LED Indicators No Name Descrip...

Page 14: ...on 3 Port LED LINK ACT bi color LED Off port disconnected or link fail Green on 1000Mbps connected PoE power output on Amber on 10 100Mbps connected Blinking sending or receiving data 4 SFP LED Off p...

Page 15: ...nt the switch from overheating do not operate it in an area that exceeds an ambient temperature of 122 F 50 C Air Flow Be sure that there is adequate air flow around the switch Mechanical Loading Be s...

Page 16: ...DG GS1512HP User Manual 14 Figure 4 Desktop Installation...

Page 17: ...unted on the switch using the screws provided in the kit and have two holes that are used to then screw the switch into the rack An example of one type of these extension brackets is shown in the foll...

Page 18: ...DG GS1512HP User Manual 16 2 Secure the switch on the equipment rack with the screws provided Figure 6 Rack Installation...

Page 19: ...ting the web based configuration utility 3 1 Power 3 1 1 Connecting to Power Power down and disconnect the power cord before servicing or wiring a switch Do not disconnect modules or cabling unless th...

Page 20: ...the other end of the Ethernet cable to one of the numbered Ethernet ports of the switch The LED of the port lights if the device connected is active 3 Repeat Step 1 and Step 2 for each device to conne...

Page 21: ...can supply power to PDs such as internet phones network cameras wireless access points Connect the switch PoE port directly to the PD port using a network cable When connecting switches capable of su...

Page 22: ...Be sure to disable any pop up blocker Browser Restrictions If you are using older versions of Internet Explorer you cannot directly use an IPv6 address to access the device You can however use the DN...

Page 23: ...r computer s IP address must be in the same subnet as the switch For example if the switch is using the factory default IP address your computer s IP address can be in the following range 192 168 1 x...

Page 24: ...first time that you logged on with the default user ID admin and the default password admin it is recommended that you change your password immediately When the login attempt is successful the System...

Page 25: ...t click Logout in the top right corner of any page The system logs out of the device When a timeout occurs or you intentionally log out of the system a message appears and the Login page appears with...

Page 26: ...r the purposes of this manual the user interface is separated into four sections as shown in the following figure Figure 11 User Interface No Name Description 1 Configuration menu Navigate to locate s...

Page 27: ...ory utilization and other system current information It also allows user to edit some system information To display the Device Information web page click Status System Information Figure 12 Status Sys...

Page 28: ...ent Time Current system time Loader Version Boot loader image version Loader Date Boot loader image build date Firmware Version Current running firmware image version Firmware Date Current running fir...

Page 29: ...MONMIB Interfaces and Ethernet like counters display errors on the traffic passing through each port RMON counters provide a total count of different frame types and sizes passing through each port Th...

Page 30: ...DG GS1512HP User Manual 28 To display the Port Flow Chart web page click Status Port Statistics...

Page 31: ...29 Figure 15 Status Port Statistics Item Description Port Select one port to show counter statistics MIB Counter Select the MIB counter to show different counter type All All counters Interface Interf...

Page 32: ...of specified port 4 1 2 2 Error Disabled To display the Error Disabled web page click Status Port Error Disabled Figure 16 Status Port Error Disabled Item Description Select one or more port to opera...

Page 33: ...Refresh the current page Recover Recover the selected port status 4 1 2 3 Bandwidth Utilization This page allow user to browse ports bandwidth utilization in real time This page will refresh automatic...

Page 34: ...Link Aggregation web page click Status Link Aggregation Figure 18 Status Link Aggregation Item Description LAG LAG Name Name LAG port description Type The type of the LAG Static The group of ports ass...

Page 35: ...or auto learned from hardware The Clear button will clear all dynamic entries and Refresh button will retrieve latest MAC address entries and show them on page To display the MAC Address Table web pa...

Page 36: ...2 Network Use the Network pages to configure settings for the switch network interface and how the switch connects to a remote server to get services 4 2 1 IP Address This section allows you to edit t...

Page 37: ...DG GS1512HP User Manual 35 Figure 20 Network IP Address...

Page 38: ...th switch IP address configuration DNS Server 1 Specify the primary user defined IPv4 DNS server configuration DNS Server 2 Specify the secondary user defined IPv4 DNS server configuration Table 3 2 I...

Page 39: ...DG GS1512HP User Manual 37 SNTP server To display System Time page click Network System Time Figure 21 Network System Time...

Page 40: ...ddress Input IPv4 address or hostname for NTP server This is enabled when time source is SNTP Server Port Input NTP port for NTP server Default is 123 This is enabled when time source is SNTP Manual T...

Page 41: ...curring daylight saving time This field available when selecting Recurring mode Non recurring From Specify the starting time of non recurring daylight saving time This field available when selecting N...

Page 42: ...display Port Setting web page click Port Port Setting Figure 22 Port Port Setting Item Description Port Port Name Type Port media type Description Port Description State Port admin state Enabled Enabl...

Page 43: ...k Edit button to edit Port Setting menu Figure 23 Port Port Setting Port Setting Item Description Port Selected Port list Description Port media type State Port admin state Enabled Enable the port Dis...

Page 44: ...ith 1000M ability Duplex Port duplex capabilities Auto Auto duplex with all capabilities Half Auto speed with 10M and 100M ability only Full Auto speed with 10M 100M 1000M ability only Flow Control Po...

Page 45: ...Multicast Flood reason occur This reason caused by unknown multicast rate exceed unknown multicast storm control rate Unicast Flood Enabled to auto shutdown port when Unicast Flood reason occur This...

Page 46: ...regation Group Figure 25 Port Link Aggregation Group Item Description Load Balance Algorithm LAG load balance distribution algorithm src dst mac Based on MAC address src dst mac ip Based on MAC addres...

Page 47: ...Link Aggregation Group menu Figure 26 Port Link Aggregation Group Edit Link Aggregation Group Item Description LAG Selected LAG group ID Name LAG port description Type The type of the LAG Static The g...

Page 48: ...configurations To display LAG Port Setting web page click Port Link Aggregation Port Setting Figure 27 Port Link Aggregation Port Setting Item Description LAG LAG Port Name Type LAG Port media type De...

Page 49: ...configuration and link duplex status Flow Control Current LAG port flow control configuration and link flow control status Click Edit to view Edit Port Setting menu Figure 28 Port Link Aggregation Po...

Page 50: ...o speed with 10M 100M abilities 10M Force speed with 10M ability 100M Force speed with 100M ability 1000M Force speed with 1000M ability Flow Control Port flow control Auto Auto flow control by negoti...

Page 51: ...ity of LACP This decides the system priority field in LACP PDU Port Port Name Port Priority LACP priority value of the port Timeout The periodic transmissions type of LACP PDUs Long Transmit LACP PDU...

Page 52: ...st Port Priority Enter the LACP priority value of the port Timeout The periodic transmissions type of LACP PDUs Long Transmit LACP PDU with slow periodic 30s Short Transmit LACPP DU with fast periodic...

Page 53: ...EE Item Description Port Port Name State Port EEE admin state Enabled EEE is enabled Disabled EEE is disabled Operational Status Port EEE operational status Enabled EEE is operating Disabled EEE is no...

Page 54: ...is enabled Disabled EEE is disabled 4 3 5 Jumbo Frame This page allow user to configure switch jumbo frame size To display Jumbo Frame web page click Port Jumbo Frame Figure 33 Port Jumbo Frame Item...

Page 55: ...vices over the existing data connection 4 4 1 Global Setting To display the Global web page click PoE Global Setting Figure 34 PoE Global Setting Item Description Nominal Power Maximum supply power Co...

Page 56: ...List menu Figure 35 PoE Priority Setting Edit PoE Schedule Edit Item Description Index The serial number of schedule list Schedule Status Schedule Status Checked Schedule status is enabled Unchecked S...

Page 57: ...er supply priority To display the Priority Setting web page click PoE Priority Setting Figure 36 PoE Priority Setting Item Description L is lower priority H is high priority and C is Critical priority...

Page 58: ...this port Click Edit to view Power Limit Setting menu Figure 38 PoE Power Setting Power Limit Setting Table Item Description Port List Selected port list Power Limit Enter max supply power value for...

Page 59: ...uirements that communicate as if they were attached to the same broadcast domain regardless of their physical location A VLAN has the same attributes as a physical local area network LAN but it allows...

Page 60: ...VLAN entry has a unique name user can edit VLAN name in edit page To display Create VLAN page click VLAN VLAN Create VLAN Figure 40 VLAN VLAN Create VLAN Item Description Available VLAN VLAN has not...

Page 61: ...1q VLAN Click Edit button to view Edit VLAN Name menu Figure 41 VLAN VLAN Create VLAN Edit VLAN Name Item Description Name Input VLAN name 4 5 1 2 VLAN Configuration This page allow user to configure...

Page 62: ...rt entry Mode Display the interface VLAN mode of port Membership Select the membership for this port of the specified VLAN ID Forbidden Specify the port is forbidden in the VLAN Excluded Specify the p...

Page 63: ...3 VLAN VLAN Membership Item Description Port Display the interface of port entry Mode Display the interface VLAN mode of port Administrative VLAN Display the administrative VLAN list of this port Oper...

Page 64: ...to add membership Select VLANs of right box then move to left box to remove membership Tagging membership may not choose in differ VLAN port mode Select the time source Forbidden Set VLAN as forbidden...

Page 65: ...ge click VLAN VLAN Port Setting Figure 45 VLAN VLAN Port Setting Item Description Port Display the interface Mode Display the VLAN mode of interface PVID Display the Port based VLAN ID of port Accept...

Page 66: ...pecification Access Accepts only untagged frames and join an untagged VLAN Trunk An untagged member of one VLAN at most and is a tagged member of zero or more VLANs PVID Specify the port based VLAN ID...

Page 67: ...per interface settings of voice VLAN To display Property Web page click VLAN Voice VLAN Property Figure 47 VLAN Voice VLAN Property Item Description State Set checkbox to enable or disable voice VLAN...

Page 68: ...ime if without any packet pass through Port Setting Table Port Display port entry State Display enable disabled status of interface Mode Display voice VLAN mode QoS Policy Display voice VLAN remark wi...

Page 69: ...ber manually QoS Policy Select port QoS Policy mode Voice Packet QoS attributes are applied to packets with OUIs in the source MAC address All QoS attributes are applied to packets that are classified...

Page 70: ...description of OUI entry Click Add or Edit button to Add Edit Voice OUI menu Figure 50 VLAN Voice VLAN Voice OUI Add Edit Voice OUI Item Description OUI Input OUI MAC address Can t be edited in edit d...

Page 71: ...to add or edit groups settings of MAC VLAN To display the MAC page click VLAN MAC VLAN MAC Group Figure 51 VLAN MAC VLAN MAC Group Item Description Group ID Display group ID of entry MAC Address Disp...

Page 72: ...47 Only available on Add Dialog MAC Address Input mac address for classifying packets Mask Input mask of mac address 4 5 4 2 Group Binding This page allow user to bind MAC VLAN group to each port with...

Page 73: ...ding Item Description Port Select ports in left box then move to right to binding with MAC group Or select ports in right box then move to left to unbind with MAC group Only interface has hybrid VLAN...

Page 74: ...the Dynamic Address web page click MAC Address Table Dynamic Address Figure 55 MAC Address Table Dynamic Address Item Description Aging Time The time in seconds that an entry remains in the MAC addres...

Page 75: ...Specify the VLAN to show or clear MAC entries Port Interface or port number 4 6 3 Filtering Address To display the Filtering Address web page click MAC Address Table Filtering Address Figure 57 MAC Ad...

Page 76: ...e The Spanning Tree Protocol STP is a network protocol that ensures a loop free topology for any bridged Ethernet local area network 4 7 1 Property To display the Property web page click Spanning Tree...

Page 77: ...is disabled Flooding Flood the BPDU when STP is disabled Priority Specify the bridge priority The valid range is from 0 to 61440 and the value should be the multiple of 4096 It ensures the probabilit...

Page 78: ...revision number Its valid rage is from 0 to 65535 Max Hop Specify the number of hops in an MSTP region before the BPDU is discarded The valid range is 1 to 40 Operational Status Bridge Identifier Brid...

Page 79: ...PDU filter on the specified port BPDU Guard The states of BPDU guard on the specified port Operational Edge The operational edge port status on the specified port Operational Point to Point The operat...

Page 80: ...n the switch Designated Cost The path cost of the designated port on the switch Protocol Migration Check Restart the Spanning Tree Protocol STP migration process re negotiate with its neighborhood on...

Page 81: ...he edge mode is enabled for the interface and there are BPDUs received on the interface the loop might be occurred in the short time before the STP state change BPDU Filter The BPDU Filter configurati...

Page 82: ...tion MSTI Designated port number Priority The bridge priority on the specified MSTI Bridge Identifier The bridge identifier on the specified MSTI Designated Root Bridge The designated root bridge iden...

Page 83: ...Instance Edit MST Instance Setting Item Description VLAN Select the VLAN list for the specified MSTI Priority Specify the bridge priority on the specified MSTI The valid range is from 0 to 61440 and t...

Page 84: ...terface ID or the list of interface IDs Path Cost The port path cost on the specified MSTI Priority The port priority on the specified MSTI Port Role The current port role on the specified port The po...

Page 85: ...to a LAN that is not in the same region Designated Bridge The bridge ID of the designated bridge Designated Port ID The designated port ID on the switch Designated Cost The path cost of the designated...

Page 86: ...I Priority Specify the STP port priority on the specified MSTI 4 7 5 Statistics To display the STP statistics click STP Statistics Figure 65 Spanning Tree Statistics Item Description Refresh Rate The...

Page 87: ...U Transmit BPDU Config The counts of the transmitted CONFIG BPDU Transmit BPDU TCN The counts of the transmitted TCN BPDU Transmit BPDU MSTP The counts of the transmitted MSTP BPDU Clear Clear the sta...

Page 88: ...r the statistics for the selected interfaces 4 8 Discovery Use this section to configure LLDP 4 8 1 LLDP LLDP is a one way protocol there are no request response sequences Information is advertised by...

Page 89: ...this switch LLDP Handling Select LLDP PDU handling action to be filtered bridging or flooded when LLDP is globally disabled Filtering Deletes the packet Bridging VLAN aware flooding Forwards the pack...

Page 90: ...elay before a re initialization range 1 10 seconds default 2 Transmit Delay Select the delay after an LLDP frame is sent range 1 8191 seconds default 3 Fast Start Repeat Count Select fast start repeat...

Page 91: ...cted LLDP TLV Click Edit button to view Edit Port Setting menu Figure 69 Discovery LLDP Port Setting Edit Port Setting Item Description Port Select specified port or all ports to configure LLDP state...

Page 92: ...TLVs to be carried multiple selection is allowed System Name Port Description System Description System Capability 802 3 MAC PHY 802 3 Link Aggregation 802 3 Maximum Frame Size Management Address 802...

Page 93: ...on Port Port Name In Use Bytes Total number of bytes of LLDP information in each packet Available Bytes Total number of available bytes left for additional LLDP information in each packet Operational...

Page 94: ...otal mandatory TLV byte size Status is sent or overloading 802 3 TLVs Total 802 3 TLVs byte size Status is sent or overloading Optional TLVs Total Optional TLV byte size Status is sent or overloading...

Page 95: ...tion To display LLDP Local Device click Discovery LLDP Local Information Figure 72 Discovery LLDP Local Information Item Descriptio n Chassis ID Subtype Type of chassis ID such as the MAC address Chas...

Page 96: ...functions of the device such as Bridge WLAN AP or Router Capabilities Enabled Primary enabled functions of the device Port ID Subtype Type of the port identifier that is shown LLDP Status LLDP Tx and...

Page 97: ...2HP User Manual 95 Figure 73 Discovery LLDP Local Information Detail 4 8 1 5 Neighbor Use the LLDP Neighbor page to view LLDP neighbors information To display LLDP Remote Device click Discovery LLDP N...

Page 98: ...ted Chassis ID Subtype Type of chassis ID for example MAC address Port ID Subtype Type of the port identifier that is shown Port ID Identifier of port System Name Published name of the switch Time to...

Page 99: ...Manual 97 Figure 75 LLDP Neighbor Detail Page 4 8 1 6 Statistics The Link Layer Discovery Protocol LLDP Statistics page displays summary and per port information for LLDP frames transmitted and receiv...

Page 100: ...a particular MAC Service Access Point MSAP has been inserted into tables associated with the remote systems Deletions The number of times the complete set of information advertised by MSAP has been d...

Page 101: ...on the corresponding port while the LLDP agent is enabled Receive Frame Discard Number of LLDP frames discarded for any reason by the LLDP agent on the corresponding port Receive Frame Error Number of...

Page 102: ...click Multicast General Property Figure 77 Multicast General Property Item Description Unknown Multicast Action Set the unknown multicast action Flood flood the unknown multicast data Drop drop the u...

Page 103: ...ress This page allow user to browse all multicast groups that dynamic learned or statically added To display Multicast General Group web page click Multicast General Group Address Figure 78 Multicast...

Page 104: ...member ports of group Type The type of group Static or Dynamic Life Sec The life time of this dynamic group Click Add or Edit button to view Add or Edit Group Address menu Figure 79 Multicast General...

Page 105: ...P address Member The member ports of group Available Port Optional port member Selected Port Selected port member 4 9 1 3 Router Port This page allow user to browse all router port information The sta...

Page 106: ...v6 multicast router VLAN The VLAN ID router entry Member Router Port member include static and learned port member Static Port Static router port member Forbidden Port Forbidden router port member Lif...

Page 107: ...AN member Selected VLAN Selected VLAN member IP Version IP Version IPv4 ipv4 multicast router IPv6 ipv6 multicast router Type The router port type Static static router port Forbidden forbidden router...

Page 108: ...re specific VLAN settings of IGMP Snooping To display IGMP Snooping global setting and VLAN Setting web page click Multicast IGMP Snooping Property Figure 82 Multicast IGMP Snooping Property Item Desc...

Page 109: ...the expected packet loss on a subnet Query Interval The interval of querier to send general query Query Max Response Interval In Membership Query Messages it specifies the maximum allowed time before...

Page 110: ...nooping VLAN functionality Enable If Checked Enable IGMP Snooping VLAN else is Disabled IGMP Snooping VLAN Router Port Auto Learn Set the enabling status of IGMP Snooping router port learning Enable I...

Page 111: ...uery Counter The Admin last member query count that Querier switch sends Group Specific Queries when it receives a Leave Group message for a group Last Member Query Interval The Admin last member quer...

Page 112: ...Setting web page click Multicast IGMP Snooping Querier Figure 84 Multicast IGMP Snooping Querier Item Description VLAN IGMP Snooping querier entry VLAN ID State The IGMP Snooping querier Admin State...

Page 113: ...lection on the chose VLANs Enabled if checked Enable IGMP Querier else Disable IGMP Querier Version Set the query version of IGMP Querier Election on the chose VLANs IGMPv2 Querier version 2 IGMPv3 Qu...

Page 114: ...multicast data to CPU Valid The valid igmp snooping process packet Invalid The invalid igmp snooping process packet Other The ICMP protocol is not 2 and is not ipv4 multicast data packet Leave IGMP le...

Page 115: ...l query packet include querier transmit general query packet Special Group Query IGMP special group query packet include querier transmit special group query packet Source specific Group Query IGMP Sp...

Page 116: ...AN The MVR VLAN ID Mode Set the MVR mode Compatible compatible mode Dynamic dynamic mode will learn group member on source port Group Start MVR group range start Group Count MVR group continue count Q...

Page 117: ...MVR port role and immediate leave state setting web page click Multicast MVR Port Setting Figure 88 Multicast MVR Port Setting Item Description Entry Entry of number Port Port Name Role Port Role for...

Page 118: ...s none Receiver port role is receiver Source port role is source Immediate Leave MVR Port immediate leave Enable if checked is enable immediate leave else disable immediate leave 4 9 4 3 Group Address...

Page 119: ...AN ID of MVR group Group Address The MVR group IP address Member The member ports of MVR group Type The type of MVR group Static or Dynamic Life Sec The life time of this dynamic MVR group Click Add b...

Page 120: ...port when MVR mode is compatible it include source port when mode is dynamic Selected Port Selected port member 4 10 Security Use the Security pages to configure settings for the switch security feat...

Page 121: ...ablish with the server setting which has highest priority If failed it will try to connect to the server with next higher priority Retry RADIUS server retry value If it is fail to connect to server it...

Page 122: ...DG GS1512HP User Manual 120 Figure 93 Security RADIUS Add Edit RADIUS Server...

Page 123: ...to establish with the server setting which has highest priority If failed it will try to connect to the server with next higher priority Retry Set RADIUS server retry value If it is fail to connect to...

Page 124: ...ement Service Figure 94 Security Management Access Management Service Item Description Management Service Management service admin state Telnet Connect CLI through telnet SSH Connect CLI through SSH H...

Page 125: ...ill freeze after silent time Silent Time After input error password exceeds password retry count the CLI will freeze after silent time 4 10 2 2 Management ACL This page allow user to add or delete man...

Page 126: ...f ACL under active To display Management ACE page click Security Management Access Management ACE Figure 96 Security Management Access Management ACE Item Description ACL Name Select the ACL name to w...

Page 127: ...iority Specify the priority of the ACE ACEs with higher sequence are processed first 1 is the highest priority Only available on Add Dialog Service Select the type service of rule All All services HTT...

Page 128: ...fy IPv4 address ca access IPv6 Specify IPv6 address ca access IPv4 Enter the source IPv4 address value and mask to which will be matched IPv6 Enter the source IPv6 address value and mask to which will...

Page 129: ...ication MAC Based Use MAC address to do authentication WEB Based Prompt authentication web page for user to do authentication Guest VLAN Set checkbox to enable disable guest VLAN if guest VLAN is enab...

Page 130: ...on is enabled Disabled MAC Based authentication is disabled Authentication Type WEB Based WEB Based authentication type state Enabled WEB Based authentication is enabled Disabled WEB Based authenticat...

Page 131: ...MAC Based WEB Based 802 1x MAC Based 802 1x WEB Based MAC Based 802 1x WEB Based 802 1x 802 1x MAC Based WEB Based 802 1x WEB Based MAC Based Method Support following authentication method order comb...

Page 132: ...p original VLAN of host Reject If get VLAN authorized information just use it However if there is no VLAN authorized information reject the host and make it unauthorized Static If get VLAN authorized...

Page 133: ...the same access accessibility Web auth cannot be enabled in this mode Single Host In this mode only one host is allowed to be authenticated It is the same as Multi auth mode with max hosts number con...

Page 134: ...port following VLAN assign mode and only apply when source is RADIUS Disable Ignore the VLAN authorization result and keep original VLAN of host Reject If get VLAN authorized information just use it H...

Page 135: ...rk accessibility Force Authorized Port is force authorized and all clients have network accessibility Force Unauthorized Port is force unauthorized and all clients have no network accessibility Auto N...

Page 136: ...s allowed to authenticate again 802 1X Params TX Period Number of seconds that the device waits for a response to an Extensible Authentication Protocol EAP request identity frame from the supplicant c...

Page 137: ...following authentication port control types Disable Disable authentication function and all clients have network accessibility Force Authorized Port is force authorized and all clients have network a...

Page 138: ...e the packet is counting on the authorized host only and not all packets on the port Quiet When port is in Locked state after authenticating fail several times the host will be locked in quiet period...

Page 139: ...eb page click Security Authentication Manger Sessions Figure 102 Security Authentication Manager Sessions Item Description Session ID Session ID is unique of each session Port Port name which the host...

Page 140: ...st is in the guest VLAN Operational VLAN Shows host operational VLAN ID Operational Session Time In Authorized state it shows total time after authorized Operational Inactived In Authorized state it s...

Page 141: ...will be perform once learned MAC address over limitation To display Port Security web page click Security Port Security Figure 103 Security Port Security Item Description State Enable Disable the por...

Page 142: ...xceed the learning limit number Shutdown Shutdown this port when receives a packet whose SMAC is new to system and exceed the learning limit number Click Edit button to view Edit Port Security menu Fi...

Page 143: ...AC is new to system and exceed the learning limit number 4 10 5 Protected Port This page allow user to configure protected port setting to prevent the selected ports from communication with each other...

Page 144: ...tected Port menu Figure 106 Security Protected Port Edit Protected Port Item Description Port Selected port list State Port protected admin state Protected Enable protecting function Unprotected Disab...

Page 145: ...rate calculates by packet based Kbits Sec storm control rate calculates by octet based IFG Select the rate calculates w o preamble IFG 20 bytes Excluded exclude preamble IFG 20 bytes when count ingres...

Page 146: ...ble the storm control function of Broadcast packet Value of storm control rate Unit pps packet per second range 1 262143 or Kbps Kbits per second range16 1000000 depends on global mode setting Unknown...

Page 147: ...n when packets exceed storm control rate 4 10 7 DoS A Denial of Service DoS attack is a hacker attempt to make a device unavailable to its users DoS attacks saturate the device with external communica...

Page 148: ...if the source IP address is equal to the destination IP address UDP Blat Drops the packets if the UDP source port equals to the UDP destination port TCP Blat Drops the packages if the TCP source port...

Page 149: ...et 1 Drops the TCP fragment packets with offset equals to one Ping Max Size Specify the maximum size of the ICMPv4 ICMPv6 ping packets The valid range is from 0 to 65535 bytes and the default value is...

Page 150: ...State Enable Disable the DoS protection on the interface 4 10 8 DHCP Snooping Use the DHCP Snooping pages to configure settings of DHCP Snooping 4 10 8 1 Property This page allow user to configure gl...

Page 151: ...ANs in left box then move to right to enable DHCP Snooping Or select VLANs in right box then move to left to disable DHCP Snooping Port Setting Table Port Display port ID Trust Display enable disabled...

Page 152: ...led Verify Chaddr Set checkbox to enable or disable chaddr validation of interface All DHCP packets will be checked whether client hardware mac address is same as source mac in Ethernet header if enab...

Page 153: ...dation Untrusted Port Drop Display how many DHCP server packets that are received by untrusted port dropped Untrusted Port with Option82 Drop Display how many packets dropped by untrusted port with op...

Page 154: ...Set checkbox to enable user defined remote ID By default remote ID is switch mac in byte order Remote ID Input user defined remote ID Only available when enable user define remote ID Port Setting Tab...

Page 155: ...e action perform when untrusted port receive DHCP packet has option82 filed Default is drop Keep Keep original option82 content Replace Replace option82 content by switch setting Drop Drop packets wit...

Page 156: ...Description Port Display port ID of entry VLAN Display associate VLAN of entry Circuit ID Display circuit ID string of entry Click Add button or Edit button to view the Add Edit Option82 Circuit ID m...

Page 157: ...on Add dialog Circuit ID Input String as circuit ID Packets match port and VLAN will be inserted circuit ID 4 10 9 IP Source Guard Use the IP Source Guard pages to configure settings of IP Source Gua...

Page 158: ...Binding Entry Display current binding entries of a interface Max Binding Entry Display the number of maximum binding entry of interface Click Edit button to view the Edit Port Setting menu Figure 119...

Page 159: ...ded Default is un limited on all ports No entry will be bound if limitation reached 4 10 9 2 IMPV Binding This page allow user to add static IP source guard entry and browse all IP source guard entrie...

Page 160: ...y user input Binding Display binding type of entry Type Type of existing binding entry Static Entry added by user Dynamic Entry learned by DHCP snooping Lease Time Lease time of DHCP Snooping learned...

Page 161: ...and VLAN ID IP Port VLAN packet must match IP address or subnet Port and VLAN ID MAC Address Input MAC address Only available on IP MAC Port VLAN mode IP Address Input IP address and mask Mask only a...

Page 162: ...ding entries to remote TFTP server Filename Input filename for backup file Only available when selecting type flash and TFTP Address Type Select the type of TFTP server Hostname TFTP server address is...

Page 163: ...r the switch ACL features 4 11 1 MAC ACL This page allow user to add or delete ACL rule A rule cannot be deleted if under binding To display MAC ACL page click ACL MAC ACL Figure 123 ACL MAC ACL Item...

Page 164: ...CL MAC ACE Item Description ACL Name Select the ACL name to which an ACE is being added Sequence Display the sequence of ACE Action Display the action of ACE Source MAC Display the source MAC address...

Page 165: ...sequence are processed first 1 is the highest priority Only available on Add Dialog Action Select the action after ACE match packet Permit Forward packets that meet the ACE criteria Deny Drop packets...

Page 166: ...nation MAC address and mask to which will be matched Ethertype Select the type for Ethernet frame type Any All Ethernet frame type is acceptable User Defined Only an Ethernet frame type which users de...

Page 167: ...ACL IPv4 ACL Item Description ACL Name Input IPv4 ACL name ACL Name Display IPv4 ACL name Rule Display the number ACE rule of ACL Port Display the port list that bind this ACL 4 11 4 IPv4 ACE This pag...

Page 168: ...estination IP address and mask of ACE Source Port Display single source port or a range of source ports of ACE Only available when protocol is TCP or UDP Destination Port Display single destination po...

Page 169: ...nu Figure 128 ACL Add Edit ACE Item Description ACL Name Display the ACL name to which an ACE is being added Sequence Specify the sequence of the ACE ACEs with higher sequence are processed first 1 is...

Page 170: ...l ID to match Enter the protocol ID Source IP Select the type for source IP address Any All source addresses are acceptable User Defined Only a source address or a range of source addresses which user...

Page 171: ...s that can be configured shared between source and destination ports TCP and UDP protocols each have eight port ranges Destination Port Select the type of protocol for a match Only available when prot...

Page 172: ...r Only available when protocol is ICMP Any All message types are acceptable Select from list Select message type by name Protocol ID to match Enter the number of message type ICMP Code Select the type...

Page 173: ...ame that bound of interface Empty means no rule bound IPv6 ACL Display ipv6 ACL name that bound of interface Empty means no rule bound Click Edit button to view the Edit ACL Binding menu Figure 130 AC...

Page 174: ...to configure settings for general purpose 4 12 1 1 Property To display Property web page click QoS General Property Figure 131 QoS General Property Item Description State Set checkbox to enable disabl...

Page 175: ...IP Precedence mapping page Port Setting Table Port Port name CoS Port default CoS priority value for the selected ports Trust Port trust state Enabled Traffic will follow trust mode in global setting...

Page 176: ...port CoS remarking Remarking IP Precedence Set checkbox to enable disable port IP Precedence remarking 4 12 1 2 Queue Scheduling The switch supports eight queues for each interface Queue number 8 is t...

Page 177: ...e serviced starting with queue_8 the highest priority queue and going to the next lower queue when each queue is completed When the queuing mode is Weighted Round Robin queues are serviced until their...

Page 178: ...bandwidth 4 12 1 3 CoS Mapping The CoS to Queue table determines the egress queues of the incoming packets based on the 802 1p priority in their VLAN tags For incoming untagged packets the 802 1p prio...

Page 179: ...or the CoS value Queue to CoS Mapping Queue Queue ID CoS Select CoS value for the queue id 4 12 1 5 IP Precedence Mapping This page allow user to configure IP Precedence to Queue mapping and Queue to...

Page 180: ...pped 4 12 2 Rate Limit Use the Rate Limit pages to define values that determine how much traffic the switch can receive and send on specific port or queue 4 12 2 1 Ingress Egress Port This page allow...

Page 181: ...s rate limit is disabled Ingress Rate Port ingress rate limit value if ingress rate state is enabled IP Precedence IP Precedence value which queue is mapped Egress State Port egress rate limit state E...

Page 182: ...d rate limit value need to be assigned Egress Set checkbox to enable disable egress rate limit If egress rate limit is enabled rate limit value need to be assigned 4 13 Diagnostics Use the Diagnostics...

Page 183: ...f each destination rule can be individually configured If the logging service is disabled no messages will be sent to these destinations Console Logging State Enable Disable the console logging servic...

Page 184: ...Description Server Address The IP address of the remote logging server Server Ports The port number of the remote logging server Facility The facility of the logging messages It can be one of the fol...

Page 185: ...about an event 4 13 2 Mirroring To display Port Mirroring web page click Diagnostics Mirroring Figure 140 Diagnostics Mirroring Item Description Session ID Select mirror session ID State Select mirro...

Page 186: ...Edit button to view the Edit Mirroring menu Figure 141 Diagnostics Mirroring Edit Mirroring Item Description Session ID Selected mirror session ID State Select mirror session state port base mirror o...

Page 187: ...source tx ports 4 13 3 Ping For the ping functionality click Diagnostic Ping Figure 142 Diagnostics Ping Item Description Address Type Specify the address type to Hostname or IPv4 Server Address Spec...

Page 188: ...click Diagnostic Traceroute Figure 143 Diagnostics Traceroute Item Description Address Type Specify the address type to Hostname or IPv4 Server Address Specify the Hostname IPv4 address for the remot...

Page 189: ...add additional users that are permitted to manage the switch or to change the passwords of existing users To display User Account web page click Management User Account Figure 150 Management User Acc...

Page 190: ...Description Username User name of the account Password Set password of the account Confirm Password Set the same password of the account as in Password field Privilege Select privilege level for new a...

Page 191: ...rade Backup Figure 152 Management Firmware Upgrade Backup Item Description Action Firmware operations Upgrade Upgrade firmware from remote host to DUT Backup Backup firmware image from DUT to remote h...

Page 192: ...st to DUT Backup Backup firmware image from DUT to remote host Method Firmware upgrade backup method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backup firmware Addres...

Page 193: ...re from remote host to DUT Backup Backup firmware image from DUT to remote host Method Firmware upgrade backup method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backu...

Page 194: ...ost Method Firmware upgrade backup method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backup firmware Firmware Firmware partition need to backup Image0 Firmware image...

Page 195: ...Active Image This page allow user to select firmware image on next booting and show firmware information on both flash partitions To display the Active Image web page click Management Firmware Active...

Page 196: ...image size Created Firmware image created date 4 14 3 Configuration 4 14 3 1 Upgrade Backup This page allow user to upgrade or backup configuration file through HTTP or TFTP server To display firmware...

Page 197: ...mware HTTP Using WEB browser to upgrade backup firmware Configuration Configuration types Running Configuration Merge to current running configuration file Startup Configuration Replace startup config...

Page 198: ...method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backup firmware Configuration Configuration types Running Configuration Merge to current running configuration file...

Page 199: ...agement Configuration Upgrade Backup Figure 159 Management Configuration Upgrade Backup Item Description Action Configuration operations Upgrade Upgrade firmware from remote host to DUT Backup Backup...

Page 200: ...e Backup Configuration Backup configuration file RAM Log Backup log file stored in RAM Flash Log Backup log files store in Flash To display firmware upgrade or backup web page click Management Configu...

Page 201: ...figuration file RAM Log Backup log file stored in RAM Flash Log Backup log files store in Flash Address Type Specify TFTP server address type Hostname Use domain name as server address IPv4 Use IPv4 a...

Page 202: ...stination Startup Configuration Copy startup configuration file to destination Backup Configuration Copy backup configuration file to destination Destination File Destination file Startup Configuratio...

Page 203: ...m length is 30 characters OID Subtree Specify the ASN 1 subtree object identifier OID to be included or excluded from the SNMP view Type Include or exclude the selected MIBs in the view 4 14 4 2 Group...

Page 204: ...ty level No Security Specify that no packet authentication is performed Authentication Specify that no packet authentication without encryption is performed Authentication and Privacy Specify that no...

Page 205: ...nt SNMP Group Add Edit Group Item Description Group Specify SNMP group name and the maximum length is 30 characters Version Specify SNMP version SNMPv1 SNMP Version 1 SNMPv2 Community based SNMP Versi...

Page 206: ...vacy Specify that no packet authentication with encryption is performed View Read Select read view name if Read is checked Write Select write view name if Write is checked Notify Select notify view na...

Page 207: ...to define the object available to the community View Specify the SNMP view to define the object available to the community Access SNMP access mode Read Only Read only Read Write Read and write Click A...

Page 208: ...SNMP community specifies group View Specify the SNMP view to define the object available to the community Access SNMP access mode Read Only Read only Read Write Read and write Group Specify the SNMP g...

Page 209: ...d Authentication Specify that no packet authentication without encryption is performed Authentication and Privacy Specify that no packet authentication with encryption is performed Authentication Meth...

Page 210: ...tem Description User Specify the SNMP user name on the host that connects to the SNMP agent The max character is 30 characters Group Specify the SNMP group to which the SNMP user belongs Security Leve...

Page 211: ...r Authentication and Privacy None No authentication required MD5 Specify the HMAC MD5 96 authentication protocol SHA Specify the HMAC SHA 96 authentication protocol Password The authentication passwor...

Page 212: ...hich is made up of MAC and Enterprise ID The user defined engine ID is range 10 to 64 hexadecimal characters and the hexadecimal number must be divided by 2 Remote Engine ID Table Table Server Address...

Page 213: ...host address type for Hostname IPv4 IPv6 Server Address Remote host Engine ID Specify Remote SNMP engine ID The engine ID is range10 to 64 hexadecimal characters and the hexadecimal number must be di...

Page 214: ...display SNMP trap event click Management SNMP Trap Event Figure 172 Management SNMP Trap Event Item Description Authentication Failure SNMP authentication failure trap when community not match or user...

Page 215: ...e SNMP informs timeout Retry Specify the retry counter of the SNMP informs Version Specify SNMP notification version SNMPv1 SNMP Version 1 notification SNMPv2 SNMP Version 2 notification SNMPv3 SNMP V...

Page 216: ...acket authentication is performed Authentication Specify that no packet authentication without encryption is performed Authentication and Privacy Specify that no packet authentication with encryption...

Page 217: ...notification packet security level the security level must less than or equal to the community user name No Security Specify that no packet authentication is performed Authentication Specify that no p...

Page 218: ...SNMPv3 SNMP Version 3 notification Type Notification Type Trap Send SNMP traps to the host Inform Send SNMP informs to the host version 1 have no inform Community User SNMP community user name for no...

Page 219: ...configure Timeout Specify the SNMP informs timeout if use default checked the value is 15 else user configure Retry Specify the SNMP informs retry count if use default checked the value is 3 else use...

Page 220: ...ctets excluding framing bits but including FCS octets received Jabbers Number of received packets that were longer than 1632 octets This number excludes frame bits but includes FCS octets that had eit...

Page 221: ...aining 256 to 511 bytes that were received Frames of 512 to 1023 Bytes Number of frames containing 512 to 1023 bytes that were received Frames Greater than 1024 Bytes Number of frames containing 1024...

Page 222: ...DG GS1512HP User Manual 220 Figure 216 Management RMON Statistics 4 14 5 2 History For the RMON history click Management RMON History Figure 217 Management RMON History Item Description...

Page 223: ...port for the RMON history Interval The number of seconds for each sample Owner The owner name of event 0 31 characters Sample Maximum The maximum number of buckets Sample Current The current number of...

Page 224: ...ON statistics Bytes Received Number of octets received including bad packets and FCS octets but excluding framing bits Drop Events Number of packets that were dropped Packets Received Number of packet...

Page 225: ...r excludes frame bits but includes FCS octets that had either a bad FCS Frame Check Sequence with an integral number of octets FCS Error or a bad FCS with a non integral octet Alignment Error number A...

Page 226: ...ification The notification type for the event and the possible value are None Nothing for notification Event Log Logging the event in the RMON Event Log table Trap Send a SNMP trap Event Log and Trap...

Page 227: ...tification Event Log Logging the event in the RMON Event Log table Trap Send a SNMP trap Event Log and Trap Logging the event and send the SNMP trap Community Specify the SNMP community when the notif...

Page 228: ...e time that the event was triggered Description The description for the event 4 14 5 4 Alarm For the RMON Alarm menu click Management RMON Alarm Figure 223 Management RMON Alarm Item Description Port...

Page 229: ...kets OversizePkts Oversize Packets Number of oversized packets Fragments Fragments Total number of packet fragment Jabbers Jabbers Total number of packet jabber Collisions Collisions Collision Pkts64O...

Page 230: ...esholds at the end of the sampling interval Delta The selected variable value of the last sample is subtracted from the current value and the difference is compared with the thresholds Interval The nu...

Page 231: ...er of events received in which the packets were dropped Received Bytes Octets Octets Received Packets Number of packets Broadcast Packets Received Broadcast packets Multicast Packets Received Multicas...

Page 232: ...ames Greater than 1024 Bytes Number of packets size 1024 to 1518 octets Sampling Specify the sampling type Absolute The selected variable value is compared directly with the thresholds at the end of t...

Page 233: ...DG GS1512HP User Manual 231 Falling Threshold Specify the threshold for firing falling event Event Specify the index of falling event when alarm was fired...

Page 234: ...DG GS1512HP User Manual 232...

Reviews:

No comments