background image

65

11

Chapter 12 IP Route

11.1 IP Route

In addition to the layer 3 switches can be the same as the layer 2 switches through a

MAC address in a LAN to pass data packets, but also can be the same as the router through

the IP address in multiple LAN packets. Both can achieve network routing function, but also

according to different network conditions to achieve optimal network performance.

VLANs are usually associated with IP networks. All working terminals in a specific IP

subnet belong to the same VLAN. Different VLANs must communicate through a router or a

router with a router function.

In general, routing information that directs IP forwarding can be obtained in three

different ways:

Static routing - The only path that is manually configured by the system administrator to

the destination network, which must also be manually modified by the system

administrator when the network structure changes. But the rational use of static routing

can improve the performance of the network, for important applications to save

bandwidth.

Default routing - A special route manually configured by the system administrator. You

can forward all packets that do not match the route to the specified default gateway.

Summary of Contents for IAR-7SH1024MMA

Page 1: ...EN User Manual Gigabit Switch Managed 390W 4x SFP 10G 24x PoE 10 100 1000 Mbps 19 1HE IAR 7SH1024MMA...

Page 2: ...Guide 18 4 1 Quick Guide 18 5 Interface Management 22 5 1 port settings 22 5 2 Storm suppression 25 5 3 bandwidth settings 27 5 4 Port Protection 29 5 5 loop detection 32 5 6 MAC Address Table 34 5 7...

Page 3: ...11 2Routing table configuration 66 12 System Management 68 12 1 IP Address 68 12 2 Username and password 70 12 3 SNMP Setup 71 12 4 Log Output 74 12 5 File Management 75 13 Console Interface Settings...

Page 4: ...orts PoE Gigabit managed Ethernet switch abbreviated to 16P switch is similar to 24P switch only the downlink ports quantity is 16 and the power watts is 320W but the 24P switch s is 450W The 24P swit...

Page 5: ...24 1 3 5 7 2 4 6 8 9 11 13 15 1 0 12 14 16 1 3 5 7 2 4 6 8 9 11 13 15 1 0 12 14 16 1 3 5 7 9 1 1 1 3 1 5 1 2 4 6 8 1 0 1 2 1 4 1 6 3 2 2 1 0 G B A S E X 2 10G BASE X P o w e r 1 2 16 Port s sw i t ch...

Page 6: ...ion Products are subject to change without prior notice 2 Installation Caution Anti counterfeiting label is attached to switch s cover Product damage caused by unauthorized disassembly is not covered...

Page 7: ...ion This is level A product which may cause radio disturbance in living environment Users may need to take corresponding and effective measures to solve the problem Pull out the power plug before clea...

Page 8: ...gh space larger than 10cm for air outlet so as to facilitate the heating dissipation Good ventilation system for cabinets and workbench is preferred Ensure the Cabinet and workbench is sturdy enough t...

Page 9: ...ning can greatly increase the protection level of the switch please connect the grounding terminal to the earth area by using at least wire 20 Instruction The diagram is for reference only the product...

Page 10: ...t this product on clean stable grounded workbench The installation procedure as below 1 Carefully put the device upside down clean the grooves on the chassis backplane with soft cloth to make sure the...

Page 11: ...k cable or cross over cable to connect PC or other device with switch s Ethernet port 2 4 2 Configuration Cable Connection If web management use a network cable to connect the OOB port and the compute...

Page 12: ...ter Use network cable connect Ethernet ports with network card of PC Except the console port 3 2Set Up Network Connection Instruction 1 You need to set the IP of the PC and the switch in the same netw...

Page 13: ...by yourself 3 2 1 Set Static IP for the Management Computer al connection property windoOperation steps take Windows XP as sample 1 Click start to enter the start menu select control panel Double cli...

Page 14: ...mask 255 255 255 0 Click OK to finish the configuration Instruction DNS server address can be empty or be filled in with the real server address 3 2 2 Confirm the Network Connection by Ping Command O...

Page 15: ...f this management PC use proxy server to visit the internet then you must prohibit the proxy service following is the operation 1 In browser select tool Internet option enter Internet option window 2...

Page 16: ...corresponding setting The following will explain the function of each option 3 3Web Page Configuration Guide The browser version recommend IE7 and later Firefox browser Chrome 360 browser IE7 and late...

Page 17: ...be 192 168 1 x x range is 1 254 and x can not be 200 otherwise it will conflict with the product IP address 192 168 1 200 subnet mask 255 255 255 0 3 Whether the computer s port VLAN ID is 1 By defau...

Page 18: ...1 Port VLAN setting Enter the Quick Guide page you can see port range link type PVID VLAN forwarding table click configuration button to modify the settings After setting click the Save button at the...

Page 19: ...LAN 2 includes port 1 2 VLAN 3 includes port 3 4 VLAN 11 includes port 5 and management port is port 6 Port 1 belongs to VLAN 2 so packets without VLAN TAG are set as the default VID PVID is 2 VLAN fo...

Page 20: ...ng you can not configure the IP address in turn to be layer 3 forwarding IP address must be configured It is currently recommended that each port directly use static IP because a well planned network...

Page 21: ...atic routes Enter the Quick Guide page you can set the routing table configuration such as turning on off dynamic RIP routing target network subnet mask next hop address network port etc and click the...

Page 22: ...hop who will send you a message 5 Interface Management 5 1port settings Go to the Interface Management Port Settings menu bar In the Port Settings page you can enable disable the port set the port ra...

Page 23: ...check boxes The range of the port is 1 to 26 If you set a port enter the corresponding port in the port range If you set a set of ports you can use or separated Is used to set a set of discrete ports...

Page 24: ...rol function Configuration steps method 1 Go to Interface Management Port Settings menu bar select Enable Port select Auto Negotiation Port Rate select Enable Flow Control set the port range to 1 2 4...

Page 25: ...vent but when the storm is generated you need to set the broadcast traffic bandwidth ratio or the maximum broadcast packet limit on the network port Assuming that the broadcast limit on a port is 3000...

Page 26: ...ion function is enabled only when set Range 64 64000Kbps Multicast Packet Traffic Limits The amount of multicast packet traffic that is suppressed by the entry restricts the flow of multicast packets...

Page 27: ...ng Select to enable disable bandwidth setting function Note The following parameter settings can be set only when the bandwidth control function is enabled Port Range Enter the port number to be modif...

Page 28: ...urrent port Inlet Speed Displays the current port s entry speed Exit Speed Displays the exit speed of the current port 5 3 1 Example of bandwidth setting Configure the requirements Restrict the switch...

Page 29: ...rt pair the frames sent or received by the source port of the mirror port are sent to the destination port of the mirror port according to the setting of the mirror port So it is best not to set the d...

Page 30: ...port can communicate properly Port Range Enter the port number to be modified enter a port or a group of ports or select from the check boxes below If you set a port enter the corresponding port numbe...

Page 31: ...case the product is placed in residential buildings of which 1 to 6 ports In connection with the user the other port for the uplink connection Configure the topology Configuration steps method 1 Enter...

Page 32: ...Interface Management Loopback Detection menu bar On the loopback detection page you can enable disable the loopback detection function enable disable the protection and recovery function disable the...

Page 33: ...is restarted after port protection Disable Loop Port Time The disable loop port time refers to the time it takes to shut down the port when the loop occurs that is the port protection time This parame...

Page 34: ...ble contains the address information used for packet forwarding between the ports The MAC address table is divided into three types of addresses static MAC address dynamic MAC address and filter MAC a...

Page 35: ...n enter one or a group of ports If you set a port enter the corresponding port number in the port range if you set a group of ports you can use or separated Used to set a group of non contiguous ports...

Page 36: ...he type of the current MAC address The port shows the corresponding port number Processing method Display processing method 5 7Traffic Statistics The traffic statistics of a device are divided into re...

Page 37: ...tes Since it is logically partitioned rather than physically partitioned the individual workstations in the same VLAN are not restricted to the same physical scope ie they can be on different physical...

Page 38: ...AN 3 Therefore you need to set the link type of Device A and Device B to trunk and allow VLAN 2 and VLAN 3 to pass Hybrid connection Packets sent by a port can be tagged in some VLANs according to the...

Page 39: ...enter a port or a group of ports or select from the check boxes below If you set a port enter the corresponding port number in the port range if you set a group of ports you can use or separated Used...

Page 40: ...Link Type Displays the link type of the current port PVID Displays the PVID number corresponding to the current port 6 2QinQ settings In the VLAN Setting QinQ Setting menu you can set the PVID in the...

Page 41: ...ertain VID owned by a physical port Therefore a physical port can be a Untagged Port on one VID and a Tagged on another VID Port A physical port can only have one PVID When a physical port has a PVID...

Page 42: ...the configuration The interface items are as follows Interface item description VID Enter the VLAN ID number to be set VLAN Name Set the name of the VLAN to be configured In VLAN Forwarding Table pag...

Page 43: ...he usage of other services may be affected Therefore network managers need to make rational planning and distribution of network resources according to the characteristics of various services so that...

Page 44: ...the simplest way to queue a service that first serves a queue with the highest priority until it is empty then serves the next highest priority queue and so on The advantage of this approach is that...

Page 45: ...priority 802 1p QoS Settings Select Enable Disable 802 1p QoS feature TIP The following parameter settings can be set only when the 802 1p QoS feature is enabled 802 1p ID Range Configure 802 1p QoS...

Page 46: ...ion item can be configured only after the QoS function is enabled on the QoS Settings page Enter the QoS Management DSCP QoS menu bar On the DSCP QoS page you can enable DSCP or disable this function...

Page 47: ...en DSCP is selected In the DSCP QoS page you can view the configuration of DSCP QoS The interface items are as follows Interface item description DSCP ID Shows the ID of the current DSCP Priority Disp...

Page 48: ...reate or delete the aggregation dynamic aggregation group within the port to add and delete LACP protocol is done automatically Only the same basic configuration the same rate and duplex attributes co...

Page 49: ...he configuration As shown below The interface items are as follows Interface item description Trunk Configuration Select to enable disable port aggregation Note The following parameter settings can be...

Page 50: ...gation configuration information As shown below The interface items are as follows Interface item description Number Displays the serial number of the current aggregation group Trunk Name Displays the...

Page 51: ...me Set the port range to 25 26 Click Add to add a setting and click Save to make the configuration take effect 8 2Port Mirroring Port mirroring Ports a switch s data on one or more ports VLANs to one...

Page 52: ...rror the data stream of the mirror port to the traffic analyzer connected to the monitoring port Tip The monitoring port must be a unique value that is it can not be a group of ports Mirroring Port Ra...

Page 53: ...ta Monitor the data received and sent by the mirrored port Import Data Monitor the data received by the mirror port Export Data Monitor the data sent by the mirror port In the Port Mirroring page you...

Page 54: ...guration steps Go to Network Management Port Mirroring menu bar In the port mirroring configuration page enable port mirroring first set monitoring port to 26 set mirror port range to 1 10 and choose...

Page 55: ...e disable the RSTP spanning tree function set the RSTP parameters etc and click the Modify button to modify the settings After setting click the bottom of the page Save the Save button to save the con...

Page 56: ...guration BPDUs are stored for the longest period of time The default is 20 seconds Delay in port status migration Configure the delay in the change of port status The default is 15 seconds This bridge...

Page 57: ...rt is not connected to any bridge After the port is set to be an edge port and the port receives BPDUs again the port automatically changes to a non edge port In RSTP Spanning Tree page you can view t...

Page 58: ...ng set the IGMP Snooping multicast table and click Add to add the settings Click the Modify button Set click the Delete button to delete the settings click the Save button at the bottom of the page to...

Page 59: ...Display the number of the current static multicast address Multicast address Display the current static multicast MAC address VLAN ID Display the VLAN ID of the current static multicast address Port I...

Page 60: ...authentication function on the port security authentication page set the port security authentication parameters and click the Configure button to modify the settings Save the configuration under the...

Page 61: ...the most common case Mandatory Authorization Mode Indicates that the port is always in an authorized state Forced Unauthorized mode Indicates that the port is always in an unauthorized state Port con...

Page 62: ...ch Port Sign Display the identity of the current port Control Mode Display the control mode of current ports Control Type Display the control type of the current port Maximum number of users Display t...

Page 63: ...other PC received this port can not communicate This function is the 802 1x authentication described earlier Enter the Network Security Static Address Lock menu bar in the static address latch page yo...

Page 64: ...ress to be locked VLAN ID Set the VLAN to which the MAC address is to be locked Port Set the port number to be locked In the static lock address page you can view the locked MAC address of the relevan...

Page 65: ...VLAN Different VLANs must communicate through a router or a router with a router function In general routing information that directs IP forwarding can be obtained in three different ways Static rout...

Page 66: ...nu bar In the port routing configuration page you can select the dynamic RTP route to enable the Layer 3 switch function set the target network subnet mask next hop Address Network Interface Click the...

Page 67: ...uting table Network port Network equipment of the various ports Currently used are Ethernet ports To enter the System Management Routing Interface menu bar in the routing interface page you can choose...

Page 68: ...onnected to the Internet The IP address consists of two fields the network number field net id and the host number field host id The IP address is assigned by the Network Information Center NIC of the...

Page 69: ...al number separated by a decimal point with each integer corresponding to one byte such as 10 110 50 101 Enter the System Management IP Address menu bar in the IP address page you can choose to set th...

Page 70: ...s of the current device The interface item is described as follows Interface Item Description No Display the serial number of the corresponding device address IP Address Display the IP address of the...

Page 71: ...e switch Customer Only the switch can be configured easily Username Set the login user s name Type in password Set the password for the login user Confirm password Re enter the user s password for the...

Page 72: ...mple and there are more security flaws SNMPv1 uses community name authentication The role of the community name is similar to the password used to restrict access to the Agent by the NMS If the commun...

Page 73: ...ateway SNMP Trap is part of SNMP When a specific event is detected it may be a performance problem Even if the network device interface is off the proxy will send an alarm event to the management stat...

Page 74: ...nable disable the log function according to the different log type query log you can click the download all information button to log export or click Delete all information button to delete the log cl...

Page 75: ...enerated Event Display the specific information of the log 12 5File Management Go to the System Management File Management menu bar In the file management page you can import export the configuration...

Page 76: ...wnload the latest upgrade file www feixun com cn by logging into our website Use the Update button to select the latest upgrade file and click the Upgrade button to complete the upgrade Restore to fac...

Page 77: ...1 Enter a name in the pop up new connection and select an icon for the connection After the configuration is complete click OK to make the configuration take effect 2 Select the COM port to use 1 Set...

Page 78: ...may obtain the complete corresponding source code from eneo for a period of three years after the last shipment of this product by sending email to opensource eneo security com If you want to obtain...

Page 79: ...ribution through specialised trade channels only VIDEOR E Hartig GmbH Carl Zeiss Stra e 8 63322 R dermark Germany Tel 49 0 6074 888 0 Fax 49 0 6074 888 100 www videor com www eneo security com Technic...

Reviews: