background image

168 

 

Click “

Edit

” button to view the Edit ACE menu. 

 

Figure 126 - ACL > Edit ACE 

 

Item 

Description 

ACL Name 

Display the ACL name to which an ACE is being added.. 

Sequence 

Specify the sequence of the ACE. ACEs with higher sequence are 
processed first (1 is the highest priority). Only available on Add 
Dialog. 

Action 

Select the action after ACE match packet. 

 

Permit: Forward packets that meet the ACE criteria. 

 

Deny: Drop packets that meet the ACE criteria. 

 

Shutdown: Drop packets that meet the ACE criteria, and disable 
the port from where the packets were received. Such ports can 
be reactivated from the Port Settings page. 

Source MAC 

Select the type for source MAC address.   

 

Any: All source addresses are acceptable.   

 

User Defined: Only a source address or a range of source 
addresses which users define are acceptable. Enter the source 
MAC address and mask to which will be matched. 

Destination MAC 

Select the type for Destination MAC address.   

Summary of Contents for GS-5424PLC

Page 1: ...GS 5424PLC Switch User Manual 12 2017 v1 0...

Page 2: ...ting to Network 24 III 1 3 Power over Ethernet PoE Considerations 25 III 1 4 Starting the Web based Configuration Utility 26 III 1 5 Logging In 27 III 1 6 Logging Out 28 IV Web based Switch Configurat...

Page 3: ...ion 66 IV 5 1 3 Membership 67 IV 5 1 4 Port Setting 69 IV 5 2 Voice VLAN 72 IV 5 2 1 Property 72 IV 5 2 2 Voice OUI 74 IV 5 3 MAC VLAN 75 IV 5 3 1 MAC Group 75 IV 5 3 2 Group Binding 76 IV 6 MAC Addre...

Page 4: ...IV 10 2 1 Management Service 127 IV 10 2 2 Management ACL 128 IV 10 2 3 Management ACE 129 IV 10 3 Authentication Manager 133 IV 10 3 1 Property 133 IV 10 3 2 Port Setting 138 IV 10 3 3 Sessions 141 I...

Page 5: ...1 2 Remote Server 188 IV 13 2 Mirroring 189 IV 13 3 Ping 191 IV 13 4 Traceroute 192 IV 13 5 Copper Test 193 IV 13 6 Fiber Module 194 IV 13 7 UDLD 195 IV 13 7 1 Property 195 IV 13 7 2 Neighbor 197 IV...

Page 6: ...xt Arguments for which you supply values are in italic Square brackets mean optional elements Braces group required choices and vertical bars separate the alternative elements Braces and vertical bars...

Page 7: ...all of the package contents available and a PC with a web browser for using web based system management tools I 1 Overview The Edimax GS 5424PLC is 24 Port Gigabit PoE Smart Managed Switch with 4 RJ4...

Page 8: ...witch capacity PG28CB 56Gbps Forwarding rate 41 6Mbps Supports IGMP Snooping V1 V2 V3 8K MAC address table and 10K jumbo frames 19 inch rack mountable metal case I 4 Product Components I 4 1 Ports The...

Page 9: ...ew LED Indicators No Name Description 1 Power Off power off On power on 2 System Off system not ready On system ready Blinking system boot up 3 Port LED LINK ACT bi color LED Off port disconnected or...

Page 10: ...eating do not operate it in an area that exceeds an ambient temperature of 122 F 50 C Air Flow Be sure that there is adequate air flow around the switch Mechanical Loading Be sure that the switch is l...

Page 11: ...switch using the screws provided in the kit and have two holes that are used to then screw the switch into the rack An example of one type of these extension brackets is shown in the following figure...

Page 12: ...22 2 Secure the switch on the equipment rack with the screws provided Figure 6 Rack Installation...

Page 13: ...d off The device only supports the voltage outlined in the type plate Do not use any other power components except those specifically designated for the switch Disconnect the power cord before install...

Page 14: ...using CAT 5E or better cable to connect network devices When connecting network devices do not exceed the maximum cabling distance of 100 meters 328 feet It can take up to one minute for attached devi...

Page 15: ...apable of supplying DC power to attached PDs such as VoIP phones IP cameras and wireless access points APs PoE switches Additionally PoE switches are capable of detecting and supplying power to pre st...

Page 16: ...ccess the device from your browser Launching the Configuration Utility To open the web based configuration utility 1 Open a Web browser 2 Enter the IP address of the device you are configuring in the...

Page 17: ...ord admin 2 If this is the first time that you logged on with the default user ID admin and the default password admin it is recommended that you change your password immediately See 4 9 3 Administrat...

Page 18: ...lt the application logs out after ten minutes of inactivity To manually logout click Logout in the top right corner of any page When a timeout occurs or you intentionally log out of the system a messa...

Page 19: ...of this manual the user interface is separated into four sections as shown in the following figure Figure 11 User Interface No Name Description 1 Configuration menu Navigate to locate specific switch...

Page 20: ...n To display the Device Information web page click Status System Information Figure 12 Status System Information Item Description Model Model name of the switch System Name System name of the switch T...

Page 21: ...e state SSH Current SSH service enable disable state HTTP Current HTTP service enable disable state HTTPS Current HTTPS service enable disable state SNMP Current SNMP service enable disable state Clic...

Page 22: ...escription Log ID The log identifier Time The time stamp for the logging message Severity The severity for the logging message Description The description of logging message Viewing RAM Show the loggi...

Page 23: ...ONMIB Interfaces and Ethernet like counters display errors on the traffic passing through each port RMON counters provide a total count of different frame types and sizes passing through each port The...

Page 24: ...34...

Page 25: ...cs MIB Counter Select the MIB counter to show different counter type All All counters Interface Interface related MIB counters Etherlike Ethernet like related MIB counters RMON RMON related MIB counte...

Page 26: ...Error Disabled Figure 16 Status Port Error Disabled Item Description Select one or more port to operate Port Interface or port number Reason Port will be disabled by one of the following error reason...

Page 27: ...3 3 Bandwidth Utilization This page allow user to browse ports bandwidth utilization in real time This page will refresh automatically in every refresh period To display Bandwidth Utilization web page...

Page 28: ...rt description Type The type of the LAG Static The group of ports assigned to a static LAG are always active members LACP The group of ports assigned to dynamic LAG are candidate ports LACP determines...

Page 29: ...MAC address entries and show them on page To display the MAC Address Table web page click Status MAC Address Table Figure 19 Status MAC Address Table Item Description VLAN VLAN ID of the mac address M...

Page 30: ...r the switch network interface and how the switch connects to a remote server to get services IV 2 1 IP Address This section allows you to edit the IP address Netmask Gateway and DNS server of the swi...

Page 31: ...c IP configured by users will be used Dynamic Enable the DHCP to obtain the IP address from a DHCP server IP Address Specify the switch static IP address on the static configuration Subnet Mask Specif...

Page 32: ...y the secondary user defined IPv4 DNS server configuration Table 3 2 IPv6 Address fields IPv4 Address The operational IPv4 address of the switch IPv4 Gateway The operational IPv4 gateway of the switch...

Page 33: ...atic time time zone and daylight saving settings Time zone and daylight saving takes effect both static time or time from SNTP server To display System Time page click Network System Time Figure 21 Ne...

Page 34: ...n the United States that starts on the second Sunday of March and ends on the first Sunday of November European Using daylight saving time in the Europe that starts on the last Sunday in March and end...

Page 35: ...page shows port current status and allow user to edit port configura tions Select port entry and click Edit button to edit port configurations To display Port Setting web page click Port Port Setting...

Page 36: ...uration and link duplex status Flow Control Current port flow control configuration and link flow control status Click Edit button to edit Port Setting menu Figure 23 Port Port Setting Port Setting It...

Page 37: ...M Force speed with 100M ability 1000M Force speed with 1000M ability Duplex Port duplex capabilities Auto Auto duplex with all capabilities Half Auto speed with 10M and 100M ability only Full Auto spe...

Page 38: ...his page shows port current status and Enable long range mode will double the cabling distance but reduce the speed to 10Mbps To display Long Range Mode web page click Port Long Range Mode Setting Fig...

Page 39: ...ed broadcast storm control rate Unknown Multicast Flood Enabled to auto shutdown port when Unknown Multicast Flood reason occur This reason caused by unknown multicast rate exceed unknown multicast st...

Page 40: ...Aggregation Group Figure 26 Port Link Aggregation Group Item Description Load Balance Algorithm LAG load balance distribution algorithm src dst mac Based on MAC address src dst mac ip Based on MAC add...

Page 41: ...it Link Aggregation Group Item Description LAG Selected LAG group ID Name LAG port description Type The type of the LAG Static The group of ports assigned to a static LAG are always active members LAC...

Page 42: ...ion Port Setting Item Description LAG LAG Port Name Type LAG Port media type Description LAG Port description State LAG Port admin state Enabled Enable the port Disabled Disable the port Link Status C...

Page 43: ...lities Auto Auto speed with all capabilities Auto 10M Auto speed with 10M ability only Auto 100M Auto speed with 100M ability only Auto 1000M Auto speed with 1000M ability only Auto 10M 100M Auto spee...

Page 44: ...Port Link Aggregation LACP Figure 30 Port Link Aggregation LACP Item Description System Priority Configure the system priority of LACP This decides the system priority field in LACP PDU Port Port Name...

Page 45: ...gregation LACP Edit LACP Port Setting Item Description Port Selected port list Port Priority Enter the LACP priority value of the port Timeout The periodic transmissions type of LACP PDUs Long Transmi...

Page 46: ...ettings To display the EEE web page click Port EEE Figure 32 Port EEE Item Description Port Port Name State Port EEE admin state Enabled EEE is enabled Disabled EEE is disabled Operational Status Port...

Page 47: ...disabled IV 3 5 Jumbo Frame This page allow user to configure switch jumbo frame size To display Jumbo Frame web page click Port Jumbo Frame Figure 34 Port Jumbo Frame Item Description Jumbo Frame En...

Page 48: ...58 IV 4 PoE Port security can set port isolation and specific behavior IV 4 1 Global Setting To display the Global web page click PoE Global Setting Figure 35 PoE Global Setting...

Page 49: ...esignated schedule index Schedule Status The current schedule status Click Edit to view PoE Schedule List menu Figure 36 PoE Priority Setting Edit PoE Schedule Edit Item Description Index The serial n...

Page 50: ...y of PoE ports Individual ports can be assigned critical high or low power supply priority To display the Priority Setting web page click PoE Priority Setting Figure 37 PoE Priority Setting Click the...

Page 51: ...61 IV 4 3 Power Limit To display the Power Limit web page click PoE Power Limit Figure 38 PoE Power Limit Item Description Port Port name Power Limit The max supply power for this port...

Page 52: ...k Edit to view Power Limit Setting menu Figure 39 PoE Power Setting Power Limit Setting Table Item Description Port List Selected port list Power Limit Enter max supply power value for the selected po...

Page 53: ...63 IV 4 4 PoE Status To display the PoE Status web page click PoE Power Status Figure 40 PoE Power Stauts Per Port PoE Status Checked Port PoE status is enabled Unchecked Port PoE status is disabled...

Page 54: ...VLAN membership can be configured through software instead of physically relocating devices or connections IV 5 1 VLAN Use the VLAN pages to configure settings of VLAN IV 5 1 1 Create VLAN This page...

Page 55: ...ht box then move to left box to delete VLAN The VLAN ID Name The VLAN Name Type The VLAN Type Static Port base VLAN Dynamic 802 1q VLAN Click Edit button to view Edit VLAN Name menu Figure 42 VLAN VLA...

Page 56: ...AN VLAN VLAN Configuration Figure 43 VLAN VLAN VLAN Configuration Item Description VLAN Select specified VLAN ID to configure VLAN configuration Port Display the interface of port entry Mode Display t...

Page 57: ...agged Specify the port is untagged member in the VLAN PVID Display if it is PVID of interface IV 5 1 3 Membership This page allow user to view membership information for each port and edit membership...

Page 58: ...45 VLAN VLAN Membership Edit Port Setting Item Description Port Display the interface Mode Display the VLAN mode of interface Membership Select VLANs of left box and select one of following membershi...

Page 59: ...differ settings IV 5 1 4 Port Setting This page allow user to configure ports VLAN settings such as VLAN port mode PVID etc The attributes depend on different VLAN port mode To display Port Setting pa...

Page 60: ...Display selected port to be edited Mode Select the VLAN mode of the interface Forbidden Set VLAN as forbidden VLAN Hybrid Support all functions as defined in IEEE 802 1Q specification Access Accepts o...

Page 61: ...71 Filtering Hybrid mode Uplink Set checkbox to enable disable uplink mode It s only available with trunk mode TPID Select TPID used of interface It s only available with trunk mode...

Page 62: ...N pages to configure settings of Voice VLAN IV 5 2 1 Property This page allow user to configure global and per interface settings of voice VLAN To display Property Web page click VLAN Voice VLAN Prope...

Page 63: ...bled status of interface Mode Display voice VLAN mode QoS Policy Display voice VLAN remark will effect which kind of packet Click Edit button to view Edit Port Setting menu Figure 49 VLAN Voice VLAN P...

Page 64: ...OUI MAC To display the Voice OUI Web page click VLAN Voice VLAN Voice OUI Figure 50 VLAN Voice VLAN Voice OUI Item Description OUI Display OUI MAC address Description Display description of OUI entry...

Page 65: ...onfigure settings of MAC VLAN IV 5 3 1 MAC Group This page allow user to add or edit groups settings of MAC VLAN To display the MAC page click VLAN MAC VLAN MAC Group Figure 52 VLAN MAC VLAN MAC Group...

Page 66: ...ange from 1 to 2147483647 Only available on Add Dialog MAC Address Input mac address for classifying packets Mask Input mask of mac address IV 5 3 2 Group Binding This page allow user to bind MAC VLAN...

Page 67: ...55 VLAN MAC VLAN Add Edit Group Binding Item Description Port Select ports in left box then move to right to binding with MAC group Or select ports in right box then move to left to unbind with MAC gr...

Page 68: ...k MAC Address Table Dynamic Address Figure 56 MAC Address Table Dynamic Address Item Description Aging Time The time in seconds that an entry remains in the MAC address table Its valid range is from 1...

Page 69: ...MAC entries Port Interface or port number IV 6 3 Filtering Address To display the Filtering Address web page click MAC Address Table Filtering Address Figure 58 MAC Address Table Filtering Address Ite...

Page 70: ...ng Tree Protocol STP is a network protocol that ensures a loop free topology for any bridged Ethernet local area network IV 7 1 Property To display the Property web page click Spanning Tree Property F...

Page 71: ...t its hello message to other bridges by Designated Ports Its valid range is from 1 to 10 seconds Max Age Specify the time interval in seconds for a switch to wait the configuration messages without at...

Page 72: ...d port BPDU Filter The states of BPDU filter on the specified port BPDU Guard The states of BPDU guard on the specified port Operational Edge The operational edge port status on the specified port Ope...

Page 73: ...ecific interface Click Edit button to view Edit Port Setting menu Figure 61 Spanning Tree Port Setting Edit Port Setting Item Description Port Selected port ID State Enable Disable the STP on the spec...

Page 74: ...DU from the specified ports Enable Enable BPDU filter function Disable Disable BPDU filter function BPDU Guard The BPDU Guard configuration to drop the received BPDU directly Enable Enable BPDU guard...

Page 75: ...ion of remaining hop on the specified MSTI VLAN The VLAN configuration on the specified MSTI Click Edit button to view Edit MST Instance menu Figure 63 Spanning Tree MST Instance Edit MST Instance Set...

Page 76: ...specified MSTI Priority The port priority on the specified MSTI Port Role The current port role on the specified port The possible values are Disabled Master Root Designated Alternative and Backup Por...

Page 77: ...switch Designated Cost The path cost of the designated port on the switch Remaining Hop The remaining hops count on the specified port Click Edit button to view Edit MST Port Setting menu Figure 65 Sp...

Page 78: ...ts of the received CONFIG BPDU Receive BPDU TCN The counts of the received TCN BPDU Receive BPDU MSTP The counts of the received MSTP BPDU Transmit BPDU Config The counts of the transmitted CONFIG BPD...

Page 79: ...view the STP Port Statistic menu Figure 67 Spanning Tree Statistics STP Port Statistic Item Description Refresh Rate The option to refresh the statistics automatically Clear Clear the statistics for...

Page 80: ...es IV 8 1 1 Property To display LLDP Property Setting web page click Discovery LLDP Property Figure 68 Discovery LLDP Property Item Description State Enable Disable LLDP protocol on this switch LLDP H...

Page 81: ...val to assign to TTL range 2 10 default 4 Reinitialization Delay Select the delay before a re initialization range 1 10 seconds default 2 Transmit Delay Select the delay after an LLDP frame is sent ra...

Page 82: ...1 2 Port Setting To display LLDP Port Setting click Discovery LLDP Port Setting Figure 69 Discovery LLDP Port Setting Item Description Port Port Name Mode The port LLDP mode Selectde TLV The Selected...

Page 83: ...of LLDP port interface Disable Disable the transmission of LLDP PDUs RX Only Receive LLDP PDUs only TX Only Transmit LLDP PDUs only TX And RX Transmit and receive LLDP PDUs both Optional TLV Select t...

Page 84: ...802 1 VLAN Name Select the VLAN Name ID to be carried multiple selection is allowed IV 8 1 3 Packet View To display LLDP Overloading click Discovery LLDP Packet View Figure 71 Discovery LLDP Packet Vi...

Page 85: ...Total number of bytes of LLDP information in each packet Available Bytes Total number of available bytes left for additional LLDP information in each packet Operational Status Overloading or not Clic...

Page 86: ...Network Policy Total MED Network Policy byte size Status is sent or overloading MED Inventory Total MED Inventory byte size Status is sent or overloading MED Extended Power via MDI Total MED Extended...

Page 87: ...97 IV 8 1 4 Local Information Use the LLDP Local Information to view LLDP local device information To display LLDP Local Device click Discovery LLDP Local Information...

Page 88: ...ID such as the MAC address Chassis ID Identifier of chassis Where the chassis ID subtype is a MAC address the MAC address of the switch is displayed System Name Name of switch System Description Descr...

Page 89: ...nabled functions of the device Port ID Subtype Type of the port identifier that is shown LLDP Status LLDP Tx and Rx abilities LLDP Med Status LLDP MED enable state Click Detail button on the page to v...

Page 90: ...Discovery LLDP Local Information Detail IV 8 1 5 Neighbor Use the LLDP Neighbor page to view LLDP neighbors information To display LLDP Remote Device click Discovery LLDP Neighbor Figure 75 Discovery...

Page 91: ...cted Chassis ID Subtype Type of chassis ID for example MAC address Port ID Subtype Type of the port identifier that is shown Port ID Identifier of port System Name Published name of the switch Time to...

Page 92: ...102 Click detail to view selected neighbor detail information...

Page 93: ...103 Figure 76 LLDP Neighbor Detail Page...

Page 94: ...104 IV 8 1 6 Statistics The Link Layer Discovery Protocol LLDP Statistics page displays summary and per port information for LLDP frames transmitted and received on the switch...

Page 95: ...105 To display LLDP Statistics status click Discovery LLDP Statistics Figure 77 Discovery LLDP Statistics...

Page 96: ...the remote systems because the information timeliness interval has expired Statistics Table Port Interface or port number Transmit Frame Total Number of LLDP frames transmitted on the corresponding p...

Page 97: ...t General Property Figure 78 Multicast General Property Item Description Unknown Multicast Action Set the unknown multicast action Flood flood the unknown multicast data Drop drop the unknown multicas...

Page 98: ...b page click Multicast General Group Address Figure 79 Multicast General Group Address Item Description IP Version IP Version IPv4 ipv4 multicast group IPv6 ipv6 multicast group VLAN The VLAN ID of gr...

Page 99: ...ess menu Figure 80 Multicast General Group Address Add Edit Group Address Item Description VLAN The VLAN ID of group IP Version IP Version IPv4 ipv4 multicast group IPv6 ipv6 multicast group Group Add...

Page 100: ...icast router port table web page click Multicast General Router Port Figure 81 Multicast General Router Port Item Description IP Version IP Version IPv4 ipv4 multicast router IPv6 ipv6 multicast route...

Page 101: ...111 Click Add or Edit button to view Add Edit Router Port menu Figure 82 Multicast General Router Port Add Edit Router Port...

Page 102: ...t member Port The member ports of router entry Available Port Optional router port member Selected Port Selected router port member IV 9 2 IGMP Snooping Use the IGMP Snooping pages to configure settin...

Page 103: ...Learn The enabling status of IGMP snooping router port auto learning Query Robustness The Query Robustness allows tuning for the expected packet loss on a subnet Query Interval The interval of querier...

Page 104: ...e is Disabled IGMP Snooping VLAN Router Port Auto Learn Set the enabling status of IGMP Snooping router port learning Enable If checked Enable learning router port by query and PIM DVRMP else Disable...

Page 105: ...cific Queries when it receives a Leave Group message for a group Operational Status Status Operational IGMP snooping status must both IGMP snooping global and IGMP snooping enable the status will be e...

Page 106: ...the VLAN Click Edit button to view Edit Querier menu Figure 86 Multicast IGMP Snooping Querier Edit Querier Item Description VLAN The Selected Edit IGMP Snooping querier VLAN List State Set the enabli...

Page 107: ...RX igmp packet include ipv4 multicast data to CPU Valid The valid igmp snooping process packet InValid The invalid igmp snooping process packet Other The ICMP protocol is not 2 and is not ipv4 multic...

Page 108: ...ort packet General Query IGMP general query packet include querier transmit general query packet Special Group Query IGMP special group query packet include querier transmit special group query packet...

Page 109: ...tion State Enable if checked enable the MVR state else disable the MVR state VLAN The MVR VLAN ID Mode Set the MVR mode Compatible compatible mode Dynamic learn group member on source port Group Start...

Page 110: ...t Setting This page allow user to configure port role and port immediate leave To display MVR port role and immediate leave state setting web page click Multicast MVR Port Setting Figure 89 Multicast...

Page 111: ...dit button to view Edit Port Setting menu Figure 90 Multicast MVR Port Setting Edit Port Setting Item Description Port Display the selected port list Role MVR port role None port role is none Receiver...

Page 112: ...Group Address Figure 91 Multicast MVR Group Address Item Description VLAN The VLAN ID of MVR group Group Address The MVR group IP address Member The member ports of MVR group Type The type of MVR grou...

Page 113: ...oup Group Address The MVR group IP address Member The member ports of MVR group Available Port Optional port member it is only receiver port when MVR mode is compatible it include source port when mod...

Page 114: ...ult timeout value Key String Set default RADIUS key string RADIUS Table Server Address RADIUS server address Server Port RADIUS server port Priority RADIUS server priority smaller value has higher pri...

Page 115: ...5 keep trying until timeout Usage RADIUS server usage type Login For login authentifation 802 1x For 802 1x authentication All For all types Click Add or Edit button to view Add Edit RADIUS Server men...

Page 116: ...RADIUS server port Priority Set RADIUS server priority smaller value has higher priority RADIUS session will try to establish with the server setting which has highest priority If failed it will try t...

Page 117: ...e settings of management access IV 10 2 1 Management Service This page allow user to change management services related configurations To display Management Service click Security Management Access Ma...

Page 118: ...error tolerance count After input error password exceeds this count the CLI will freeze after silent time Silent Time After input error password exceeds password retry count the CLI will freeze after...

Page 119: ...ACL under active To display Management ACE page click Security Management Access Management ACE Figure 97 Security Management Access Management ACE Item Description ACL Name Select the ACL name to whi...

Page 120: ...130 Click Add or Edit button to view Add Edit Management ACE menu...

Page 121: ...ACE ACEs with higher sequence are processed first 1 is the highest priority Only available on Add Dialog Service Select the type service of rule All All services HTTP Only HTTP service HTTPs Only HTT...

Page 122: ...sion Select the type of source IP address All All IP addresses can access IPv4 Specify IPv4 address ca access IPv6 Specify IPv6 address ca access IPv4 Enter the source IPv4 address value and mask to w...

Page 123: ...n manager Property web page click Security Authentication Manager Property Figure 99 Security Authentication Manager Property Item Description Authentication Type Set checkbox to enable disable follow...

Page 124: ...ate Enabled 802 1X is enabled Disabled 802 1X is disabled Authentication Type MAC Based MAC Based authentication type state Enabled MAC Based authentication is enabled Disabled MAC Based authenticatio...

Page 125: ...802 1x only support Radius method Local Use DUT s local database to do authentication Radius Use remote RADIUS server to do authentication Local Radius Radius Local Guest VLAN Port guest VLAN enable s...

Page 126: ...e Select authenticating host mode Multiple Authentication In this mode every client need to pass authenticate procedure individually Multiple Hosts In this mode only one client need to be authenticate...

Page 127: ...ion and WEB Based authentication 802 1x only support Radius method Local Use DUT s local database to do authentication Radius Use remote RADIUS server to do authentication Local Radius Radius Local Gu...

Page 128: ...tion port control types Disable Disable authentication function and all clients have network accessibility Force Authorized Port is force authorized and all clients have network accessibility Force Un...

Page 129: ...od the host is allowed to authenticate again 802 1X Params TX Period Number of seconds that the device waits for a response to an Extensible Authentication Protocol EAP request identity frame from the...

Page 130: ...ontrol types Disable Disable authentication function and all clients have network accessibility Force Authorized Port is force authorized and all clients have network accessibility Force Unauthorized...

Page 131: ...that the device waits for a response to an Extensible Authentication Protocol EAP request identity frame from the supplicant client before resending the request Supplicant Timeout The maximum number...

Page 132: ...etwork accessibility UnAuthorized Authentication is not passed and not getting network accessibility Locked Host is locked and do not allow to do authenticating until quiet period Guest Host is in the...

Page 133: ...figure port security settings for each interface When port security is enabled on interface action will be perform once learned MAC address over limitation To display Port Security web page click Secu...

Page 134: ...a packet whose SMAC is new to system and exceed the learning limit number Click Edit button to view Edit Port Security menu Figure 105 Security Port Security Edd Port Security Item Description Port S...

Page 135: ...ected ports from communication with each other Protected port is only allowed to communicate with unprotected port In other words protected port is not allowed to communicate with another protected po...

Page 136: ...ted Unprotected Port is unprotected Click Edit button to view Edit Protected Port menu Figure 107 Security Protected Port Edit Protected Port Item Description Port Selected port list State Port protec...

Page 137: ...y Storm Control Item Description Mode Unit Select the unit of storm control Packet Sec storm control rate calculates by packet based Kbits Sec storm control rate calculates by octet based IFG Select t...

Page 138: ...per second range16 1000000 depends on global mode setting Unknown Multicast Enable Enable the storm control function of Unknown multicast packet Value of storm control rate Unit pps packet per second...

Page 139: ...s saturate the device with external communication requests so that it cannot respond to legitimate traffic These attacks usually lead to a device CPU overload The DoS protection feature is a set of pr...

Page 140: ...lick Security Dos Property Figure 110 Security DoS Property Item Description POD Avoids ping of death attack Land Drops the packets if the source IP address is equal to the destination IP address UDP...

Page 141: ...YN and RST bits set ICMP Fragment Drops the fragmented ICMP packets TCP SYN SPORT 1024 Drops SYN packets with sport less than 1024 TCP Fragment Offset 1 Drops the TCP fragment packets with offset equa...

Page 142: ...igure and display the state of DoS protection for interfaces click Security DoS Port Setting Figure 111 Security DoS Port Setting Item Description Port Interface or port number State Enable Disable th...

Page 143: ...es to configure settings of DHCP Snooping IV 10 8 1 Property This page allow user to configure global and per interface settings of DHCP Snooping To display property page click Security DHCP Snooping...

Page 144: ...terface Click Edit button to view Edit Port Setting menu Figure 113 Security DHCP Snooping Property Edit Port Setting Item Description Port Display selected port to be edited Trust Set checkbox to ena...

Page 145: ...tatistics that recorded by DHCP snooping function To view the Statistics menu navigate to Security DHCP Snooping Statistics Figure 114 Security DHCP Snooping Statistics Item Description Port Display p...

Page 146: ...Untrusted Port Drop Display how many DHCP server packets that are received by untrusted port dropped Untrusted Port with Option82 Drop Display how many packets dropped by untrusted port with option82...

Page 147: ...ring will attach in option82 if option inserted To display Option82 Property page click Security DHCP Snooping Option82 Property Figure 115 Security DHCP Snooping Option82 Property Item Description Us...

Page 148: ...button to view Edit Port Setting menu Figure 116 DHCP Snooping Option82 Property Edit Port Setting Item Description Port Display selected port to be edited State Set checkbox to enable disable option...

Page 149: ...click Security DHCP Snooping Option82 Circuit ID Figure 117 Security DHCP Snooping Option82 Circuit ID Item Description Port Display port ID of entry VLAN Display associate VLAN of entry Circuit ID Di...

Page 150: ...associate to CID entry Only available on Add dialog VLAN Input VLAN ID to associate to circuit ID entry VLAN ID is not mandatory Only available on Add dialog Circuit ID Input String as circuit ID Pack...

Page 151: ...to configure settings of IP Source Guard IV 10 9 1 Port Setting Use the IP Source Guard pages to configure settings of IP Source Guard To display Port Setting page click Security IP Source Guard Port...

Page 152: ...Port Setting menu Figure 120 Security IP Source Guard Port Setting Edit Port Setting Item Description Port Display selected port to be edited Status Set checkbox to enable or disable IP Source Guard...

Page 153: ...Display port ID of entry VLAN Display VLAN ID of entry MAC Address Display MAC address of entry Only available of IP MAC binding entry IP Address Display IP address of entry Mask always to be 255 255...

Page 154: ...a binding entry VLAN Specify a VLAN ID of a binding entry Binding Select matching mode of binding entry IP MAC Port VLAN packet must match IP address MAC address Port and VLAN ID IP Port VLAN packet...

Page 155: ...amic binding entries to flash TFTP Save DHCP dynamic binding entries to remote TFTP server Filename Input filename for backup file Only available when selecting type flash and TFTP Address Type Select...

Page 156: ...e allow user to add or delete ACL rule A rule cannot be deleted if under binding To display MAC ACL page click ACL MAC ACL Figure 124 ACL MAC ACL Item Description ACL Name Input MAC ACL name ACL Name...

Page 157: ...tem Description ACL Name Select the ACL name to which an ACE is being added Sequence Display the sequence of ACE Action Display the action of ACE Source MAC Display the source MAC address and mask of...

Page 158: ...ackets that meet the ACE criteria Deny Drop packets that meet the ACE criteria Shutdown Drop packets that meet the ACE criteria and disable the port from where the packets were received Such ports can...

Page 159: ...rame type value to which will be matched VLAN Select the type for VLAN ID Any All VLAN ID is acceptable User Defined Only a VLAN ID which users define is acceptable Enter the VLAN ID to which will be...

Page 160: ...he sequence of ACE Action Display the action of ACE Protocol Display the protocol value of ACE Source IP Display the source IP address and mask of ACE Destination IP Display the destination IP address...

Page 161: ...171 Click Add or Edit button to view the Add Edit ACE menu Figure 129 ACL Add Edit ACE...

Page 162: ...addresses which users define are acceptable Enter the source IP address value and mask to which will be matched Destination IP Select the type for destination IP address Any All destination addresses...

Page 163: ...ce Select the type of service for a match Any All types of service are acceptable DSCP to match Enter a Differentiated Serves Code Point DSCP to match IP Precedence to match Enter a IP Precedence to m...

Page 164: ...nding This page allow user to bind or unbind ACL rule to or from interface IPv4 and Ipv6 ACL cannot be bound to the same port simultaneously To display ACL Binding page click ACL ACL Binding Figure 13...

Page 165: ...ce Empty means no rule bound IPv6 ACL Display ipv6 ACL name that bound of interface Empty means no rule bound Click Edit button to view the Edit ACL Binding menu Figure 131 ACL Edit ACL Binding Item D...

Page 166: ...176 IV 12 QoS Use the QoS pages to configure settings for the switch QoS interface IV 12 1 General Use the QoS general pages to configure settings for general purpose...

Page 167: ...177 IV 12 1 1 Property To display Property web page click QoS General Property Figure 132 QoS General Property...

Page 168: ...e actual mapping of the IP precedence to queue can be configured on the IP Precedence mapping page Port Setting Table Port Port name CoS Port default CoS priority value for the selected ports Trust Po...

Page 169: ...ault CoS 802 1p priority value for the selected ports Trust Set checkbox to enable disable port trust state Remarking CoS Set checkbox to enable disable port CoS remarking Remarking IP Precedence Set...

Page 170: ...ht the more frames are sent The queuing modes can be selected on the Queue page When the queuing mode is by Strict Priority the priority sets the order in which queues are serviced starting with queue...

Page 171: ...12 1 3 CoS Mapping The CoS to Queue table determines the egress queues of the incoming packets based on the 802 1p priority in their VLAN tags For incoming untagged packets the 802 1p priority will b...

Page 172: ...ng Queue Queue ID CoS Select CoS value for the queue id IV 12 1 4 IP Precedence Mapping This page allow user to configure IP Precedence to Queue mapping and Queue to IP Precedence mapping To display I...

Page 173: ...on IP Precedence to Queue Mapping IP Precedence IP Precedence value Queue Queue value which IP Precedence is mapped Queue to IP Precedence Mapping Queue Queue ID IP Precedence IP Precedence value whic...

Page 174: ...eue IV 12 2 1 Ingress Egress Port This page allow user to configure ingress port rate limit and egress port rate limit The ingress rate limit is the number of bits per second that can be received from...

Page 175: ...State Port ingress rate limit state Enabled Ingress rate limit is enabled Disabled Ingress rate limit is disabled Ingress Rate Port ingress rate limit value if ingress rate state is enabled IP Preced...

Page 176: ...view the Ingress Egress Port menu Figure 138 QoS Rate Limit Ingress Egress Port Item Description Port Select port list Ingress Set checkbox to enable disable ingress rate limit If ingress rate limit...

Page 177: ...State Enable Disable the global logging services When the logging service is enabled logging configuration of each destination rule can be individually configured If the logging service is disabled n...

Page 178: ...ts The port number of the remote logging server Facility The facility of the logging messages It can be one of the following values local0 local1 local2 local3 local4 local5 local6 and local7 Minimum...

Page 179: ...or session ID State Select mirror session state port base mirror or disable Enabled Enable port based mirror Disabled Disable mirror Monitor Port Select mirror session monitor port and select whether...

Page 180: ...ion ID State Select mirror session state port base mirror or disable Enabled Enable port based mirror Disabled Disable mirror Monitor Port Select mirror session monitor port and select whether normal...

Page 181: ...Diagnostic Ping Figure 143 Diagnostics Ping Item Description Address Type Specify the address type to Hostname or IPv4 Server Address Specify the Hostname IPv4 address for the remote logging server Co...

Page 182: ...nostic Traceroute Figure 144 Diagnostics Traceroute Item Description Address Type Specify the address type to Hostname or IPv4 Server Address Specify the Hostname IPv4 address for the remote logging s...

Page 183: ...copper test Copper Test Result Port The interface for the copper test Result The status of copper test It include OK Correctly terminated pair Short Cable Shorted pair Open Cable Open pair no link pa...

Page 184: ...le Figure 146 Diagnostics Logging Fiber Module Item Description Port Interface or port number Temperature Internally measured transceiver temperature Voltage Internally measured supply voltage Current...

Page 185: ...ule Status menu Figure 147 Diagnostics Logging Fiber Module Fiber Module Status IV 13 7 UDLD Use the UDLD pages to configure settings of UDLD function IV 13 7 1 Property This page allow user to config...

Page 186: ...196 To display Property page click Diagnostics UDLD Property Figure 148 Diagnostics UDLD Property...

Page 187: ...e Click Edit button to view the Fiber Module Status menu Figure 149 Diagnostics UDLD Property Edit Item Description Port Display selected port to be edited Mode Select UDLD running mode of interface D...

Page 188: ...figure settings for the switch management features IV 14 1 User Account The default username password is admin admin And default account is not able to be deleted Use this page to add additional users...

Page 189: ...Username User name of the account Password Set password of the account Confirm Password Set the same password of the account as in Password field Privilege Select privilege level for new account Admin...

Page 190: ...Figure 153 Management Fireware Upgrate Backup Item Description Action Firmware operations Upgrade Upgrade firmware from remote host to DUT Backup Backup firmware image from DUT to remote host Method...

Page 191: ...ckup Backup firmware image from DUT to remote host Method Firmware upgrade backup method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backup firmware Address Type Speci...

Page 192: ...ackup firmware image from DUT to remote host Method Firmware upgrade backup method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backup firmware Firmware Firmware partit...

Page 193: ...HTTP Using WEB browser to upgrade backup firmware Firmware Firmware partition need to backup Image0 Firmware image in flash partition 0 Image1 Firmware image in flash partition 1 Address Type Specify...

Page 194: ...ns To display the Active Image web page click Management Firmware Active Image Figure 157 Management Fireware Active Image Item Description Active Image Select firmware image to use on next booting Fi...

Page 195: ...Upgrade firmware from remote host to DUT Backup Backup firmware image from DUT to remote host Method Configuration upgrade backup method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB brows...

Page 196: ...ing TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backup firmware Configuration Configuration types Running Configuration Merge to current running configuration file Startup Config...

Page 197: ...kup firmware image from DUT to remote host Method Configuration upgrade backup method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backup firmware Configuration Configu...

Page 198: ...re HTTP Using WEB browser to upgrade backup firmware Configuration Configuration types Running Configuration Backup running configuration file Startup Configuration Backup start configuration file Bac...

Page 199: ...cription Source File Source file types Running Configuration Copy running configuration file to destination Startup Configuration Copy startup configuration file to destination Backup Configuration Co...

Page 200: ...maximum length is 30 characters Version Specify SNMP version SNMPv1 SNMP Version 1 SNMPv2 Community based SNMP Version 2 SNMPv3 User security model SNMP version 3 Security Level Specify SNMP security...

Page 201: ...utton to view the Add Edit Group menu Figure 165 Management SNMP Group Add Edit Group Item Description Group Specify SNMP group name and the maximum length is 30 characters Version Spedify SNMP versio...

Page 202: ...Read is checked Write Select write view name if Write is checked Notify Select notify view name if Notify is checked IV 14 4 3 Community To configure and display the SNMP community settings click Mana...

Page 203: ...20 characters Type SNMP Community mode Basic SNMP community specifies view and access right Advanced SNMP community specifies group View Specify the SNMP view to define the object available to the com...

Page 204: ...lege mode No Security Specify that no packet authentication is performed Authentication Specify that no packet authentication without encryption is performed Authentication and Privacy Specify that no...

Page 205: ...215 Click Add or Edit button to view Add Edit User menu Figure 169 Management SNMP User Add Edit User...

Page 206: ...Privacy Specify that no packet authentication with encryption is performed Authentication Method Authentication Protocol which is available when Privilege Mode is Authentication or Authentication and...

Page 207: ...ocal engine ID is configure by user else use the default Engine ID which is made up of MAC and Enterprise ID The user defined engine ID is range 10 to 64 hexadecimal characters and the hexadecimal num...

Page 208: ...Remote SNMP engine ID The engine ID is range10 to 64 hexadecimal characters and the hexadecimal number must be divided by 2 Click Edit button to view Edit Remote Engine ID menu Figure 172 Management...

Page 209: ...reboot configure by user trap Warm Start Device reboot by power down trap IV 14 4 7 Notification To configure the hosts to receive SNMPv1 v2 v3 notification click Management SNMP Notification Figure 1...

Page 210: ...nity name UDP Port Specify the UDP port number Timeout Specify the SNMP informs timeout Security Level SNMP trap packet security level No Security Specify that no packet authentication is performed Au...

Page 211: ...ame else is community name Security Level SNMP notification packet security level the security level must less than or equal to the community user name No Security Specify that no packet authenticatio...

Page 212: ...s to the host version 1 have no inform Community User SNMP community user name for notification If version is SNMPv3 the name is user name else is community name Community Level SNMP notification pack...

Page 213: ...user configure Timeout Specify the SNMP informs timeout if use default checked the value is 15 else user configure Retry Specify the SNMP informs retry count if use default checked the value is 3 else...

Page 214: ...ld or licensed as is Should the programs prove defective following their purchase the buyer and not this company its distributor or its dealer assumes the entire cost of all necessary servicing repair...

Page 215: ...osure limits human proximity to the antenna shall not be less than 2 5cm 1 inch during normal operation Federal Communications Commission FCC RF Exposure Requirements SAR compliance has been establish...

Page 216: ...gen gem den Richtlinien 1995 5 EC 2009 125 EC 2006 95 EC 2011 65 EC Espa ol El presente equipo cumple los requisitos esenciales de la Directiva 1995 5 EC 2009 125 EC 2006 95 EC 2011 65 EC Italiano Que...

Page 217: ...o GS 5424PLC The following European standards for essential requirements have been followed Directives 2014 30 EU EMC EN55032 2015 EN55024 2010 EN61000 3 2 2014 class A EN61000 3 3 2013 Safety LVD EN...

Page 218: ...t you have You must make sure that they too receive or can get the source code And you must show them these terms so they know their rights We protect your rights with two steps 1 copyright the softwa...

Page 219: ...ived as to the offer to distribute corresponding source code This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with...

Page 220: ...and any later version you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation If the Program does not specify...

Page 221: ...8...

Reviews: