manualshive.com logo in svg

GE MultiLink ML1200, Instruction Manual

Share
Download
GE MultiLink ML1200 Instruction Manual Download Page 135

CHAPTER 7: ACCESS USING RADIUS

ACCESS USING RADIUS

MULTILINK ML1200 MANAGED FIELD SWITCH – INSTRUCTION MANUAL

7–11

Ensure that the port which has the RADIUS server is force authorized and asserted. For 
other ports (user ports), it is best to leave the 

Control

 on auto and 

Initialize

 on de-asserted.

To change the port access characteristics when authenticating with a RADIUS server, 

Z

Select the 

Configuration > Radius > Port > Access

 menu item.

The 

Quiet Period

 column represents the time, in seconds, the supplicant is held after an 

authentication failure before the authenticator retries the supplicant for connection. The 
value ranges from 0 to 65535 seconds, with a default of 60.

Summary of Contents for MultiLink ML1200

Page 1: ...538 Copyright 2009 GE Multilin GE Multilin 215 Anderson Avenue Markham Ontario Canada L6E 1B3 Tel 905 294 6222 Fax 905 201 2098 Internet http www GEmultilin com 1601 9095 A1 IISO9001 2000 G E M ULTILI N R E GISTERE D GE Multilin s Quality Management System is registered to ISO9001 2000 QMI 005094 UL A3775 Digital Energy Multilin ...

Page 2: ...iate frequency energy and if not installed and used properly in strict accordance with the manufacturer s instructions may cause interference to radio communication It has been tested and found to comply with the limits for a Class A computing device in accordance with the specifications in Subpart J of Part 15 of FCC rules which are designed to provide reasonable protection against such interfere...

Page 3: ...ILINK ML1200 FIRMWARE 1 24 SELECTING THE PROPER VERSION 1 24 UPDATING THROUGH THE COMMAND LINE 1 24 UPDATING THROUGH THE ENERVISTA SECURE WEB MANAGEMENT SOFTWARE 1 26 2 PRODUCT DESCRIPTION OVERVIEW 2 1 FOUR PORT SFF FIBER MODULES CC MODULE CD MODULE 100MB FIBER 2 3 FOUR PORT COPPER MODULE C1 MODULE MDIX 2 4 POE POWER PASS THROUGH C2 MODULE MDIX 10 100MB 4 PORT 2 4 TWO PORT FIBER MODULES 2 100MB FI...

Page 4: ...P ADDRESS AND SYSTEM INFORMATION 5 1 OVERVIEW 5 1 IMPORTANCE OF AN IP ADDRESS 5 3 DHCP AND BOOTP 5 3 BOOTP DATABASE 5 3 CONFIGURING DHCP BOOTP MANUAL AUTO 5 3 USING TELNET 5 5 SETTING PARAMETERS 5 8 SETTING SERIAL PORT PARAMETERS 5 8 SYSTEM PARAMETERS 5 8 DATE AND TIME 5 9 NETWORK TIME 5 10 SYSTEM CONFIGURATION 5 14 SAVING AND LOADING COMMAND LINE 5 14 CONFIG FILE 5 14 DISPLAYING CONFIGURATION 5 1...

Page 5: ... TACACS FLOW 8 2 TACACS PACKET 8 2 CONFIGURING TACACS THROUGH THE COMMAND LINE INTERFACE 8 4 COMMANDS 8 4 EXAMPLE 8 4 CONFIGURING TACACS WITH ENERVISTA SECURE WEB MANAGEMENT SOFTWARE 8 6 9 PORT MIRRORING AND SETUP PORT MIRRORING 9 1 DESCRIPTION 9 1 PORT MIRRORING USING THE COMMAND LINE INTERFACE 9 2 COMMANDS 9 2 PORT SETUP 9 3 COMMANDS 9 3 FLOW CONTROL 9 5 BACK PRESSURE 9 5 BROADCAST STORMS 9 7 LI...

Page 6: ...1 9 12 SPANNING TREE PROTOCOL STP OVERVIEW 12 1 DESCRIPTION 12 1 FEATURES AND OPERATION 12 1 CONFIGURING STP 12 3 13 RAPID SPANNING TREE PROTOCOL OVERVIEW 13 1 DESCRIPTION 13 1 RSTP CONCEPTS 13 1 TRANSITION FROM STP TO RSTP 13 2 CONFIGURING RSTP THROUGH THE COMMAND LINE INTERFACE 13 4 NORMAL RSTP 13 4 SMART RSTP RING ONLY MODE THROUGH THE COMMAND LINE INTERFACE CLI 13 13 CONFIGURING STP RSTP WITH ...

Page 7: ...P THROUGH THE COMMAND LINE INTERFACE 16 5 COMMANDS 16 5 EXAMPLE 16 6 CONFIGURING SNMP WITH ENERVISTA SECURE WEB MANAGEMENT SOFTWARE 16 11 EXAMPLE 16 11 CONFIGURING RMON 16 15 DESCRIPTION 16 15 COMMANDS 16 15 17 MISCELLANEOUS COMMANDS E MAIL 17 1 DESCRIPTION 17 1 COMMANDS 17 2 EXAMPLE 17 3 STATISTICS 17 5 VIEWING PORT STATISTICS WITH ENERVISTA SECURE WEB MANAGEMENT SOFTWARE 17 5 SERIAL CONNECTIVITY...

Page 8: ...T A 2 APPENDIX B DC POWER INPUT SPECIFICATIONS FOR MULTILINK ML1200 SWITCHES DC POWER AT 24 V AND 48 V AND 125 V DC POWER INPUT B 2 48 V DC 24 V DC AND 125 V DC POWER THEORY OF OPERATION B 3 APPLICATIONS FOR DC POWERED ETHERNET SWITCHES B 4 ML1200 48 V 24 V 125 V DC INSTALLATION B 5 UL REQUIREMENTS FOR DC POWERED UNITS B 6 OPERATION B 7 APPENDIX C INTERNAL DC DUAL SOURCE POWER INPUT OPTION SPECIFI...

Page 9: ...aged Field Switch base unit configured with user selected port module options installed 1 Set of two metal vertical mounting brackets with screws to the case 1 Installation and User Guide this manual 1 Product Registration Card Remove the items from the shipping container Be sure to keep the shipping container should you need to re ship the unit at a later date To validate the product warranty ple...

Page 10: ... SC sm Fiber 40km CC CC CC 4x 100Mbit MTRJ mm Fiber CD CD CD 4x 100Mbit LC mm Fiber CE CE CE 4x 100Mbit LC sm Fiber 15km CF 1x 100Mbit ST mm Fiber CG 1x 100Mbit SC mm Fiber CH 1x 100Mbit SC sm Fiber 20km CI 1x 100Mbit SC sm Fiber 40km CJ 2x 100Mbit MTRJ mm Fiber CK 2x 100Mbit LC mm Fiber CL 2x 100Mbit LC sm Fiber 15km H1 2x 1000Mbit LC mm Fiber H2 2x 1000Mbit LC mm 2km Fiber H3 2x 1000Mbit LC sm F...

Page 11: ...b 1000BASE X Ethernet IEEE 802 1p Priority protocol IEEE 802 1d Spanning tree protocol IEEE 802 1w Rapid Spanning tree protocol IEEE 802 1q VLAN Tagging IEEE 802 3x Flow Control IEEE 802 3ad Link Aggregation Trunking IEEE 802 1x Port based Network access control IEEE 802 3af Power over Ethernet MAXIMUM 10 MBPS ETHERNET SEGMENT LENGTHS Unshielded twisted pair 100 m 328 ft Shielded twisted pair 150 ...

Page 12: ...00Mbps speedOFF 10 Mbps OPERATING ENVIRONMENT Ambient Temperature 40 to 140 F 40 to 60 C for UL60950 and Component Parts rating 60 to 195 F 50 to 85 C for IEC 60068 Type Test short term rating Storage Temperature 60 to 210 F 50 to 100 C Ambient Relative Humidity 5 to 95 non condensing Altitude 200 to 13 000 ft 60 to 4000m Conformal Coating humidity protection option Request quote ALARM RELAY CONTA...

Page 13: ...r wall or DIN Rail mounting ML1200 TYPE TESTS TEST REFERENCE STANDARD TEST LEVEL Electrostatic Discharge EN61000 4 2 Level 4 RF immunity EN61000 4 3 Level 3 Fast Transient Disturbance EN61000 4 4 Level 3 4 Surge Immunity EN61000 4 5 Level 4 Conducted RF Immunity EN61000 4 6 Level 3 Power magnetic Immunity IEC61000 4 8 Level 2 Voltage Dip interruption IEC61000 4 11 0 40 70 dips 250 300cycle interru...

Page 14: ...OVALS WARRANTY Three years per UL 60950 temperature rating Made in USA Applicable Council Directive According to CE Compliance Low voltage directive EN60950 1 EMC Directive EN61000 6 2 EN61000 6 4 North America cULus UL60950 1 C22 2 No 60950 1 ISO Manufactured under a registered quality program ISO9001 ...

Page 15: ...ed with an IP address the command line interface or CLI is also accessible using telnet as well as the serial port Access to the switch can be either through the console interface or remotely over the network Simultaneous access that is through the console port as well as through the network to the MultiLink ML1200 Managed Field Switch switch is not permitted The Command Line Interface CLI enables...

Page 16: ...In for the First Time For the first time use the default user name and passwords assigned by GE They are Username manager Password manager Username operator Password operator We recommend you login as manager for the first time to set up the IP address as well as change user passwords or create new users 1 4 5 Automatic IP Address Configuration The ML1200 is operational immediately after it is pow...

Page 17: ...sign itself an IP address The ML1200 will check to see if IP address 192 168 1 2 with a network mask of 255 255 255 0 is free If so it will assume these values If this IP address is assigned to another device the ML1200 will repeat steps 1 through 3 to find a DCHP or BOOTP server or wait for the 192 168 1 2 address to become free Once connected the browser will display a login prompt The default l...

Page 18: ... connectivity to ensure network connectivity Syntax ipconfig ip ip address mask subnet mask dgw gateway An example is shown below ML1200 ipconfig ip 3 94 247 41 mask 255 255 252 0 dgw 3 94 244 41 ML1200 save Note This manual assumes the reader is familiar with IP addressing schemes as well as how net mask is used and how default gateways and routers are used in a network Reboot gives an opportunit...

Page 19: ...ions for changing them or optionally keeping them the same 1 4 7 Privilege Levels Two privilege levels are available manager and operator Operator is at privilege level 1 and the manager is at privilege level 2 the privilege increases with the levels For example to set up a user for basic monitoring capabilities use lower number or operator level privilege level 1 The Manager level provides all op...

Page 20: ...ete command as shown below delete user name The following example deletes the user peter ML1200 user delete user peter Confirm User Deletion Y N Y User successfully deleted ML1200 user The syntax to modify a password is shown below passwd user name The following example changes the password for user peter ML1200 user passwd user peter Enter New Password Confirm New Password Password has been modif...

Page 21: ...the set time command ML1200 help set time set time Sets the device Time Usage set time hour 0 23 min 0 59 sec 0 59 zone GMT hh mm ML1200 The options for a specific command can be displayed by typing the command and pressing enter The following syntax applies command Enter For example the options for the show command are ML1200 show Enter Usage show active stp show active snmp show active vlan show...

Page 22: ...ow ML1200 In the following example the TAB key completes the command ML1200 se TAB password timeout vlan ML1200 set 1 4 10 Exiting To exit from the CLI interface and terminate the console session use the logout command This command prompts to ensure that the logout was not mistakenly typed The following syntax applies logout The following example illustrates logging out from a session ML1200 logou...

Page 23: ...ned to the switch Note Make sure you use HTTPS secure HTTP and not HTTP in the URL In the example shown in the previous section the URL is https 3 94 247 41 If your site uses name services you can use a name instead of the IP address Please make sure that the name is resolved to the IP address assigned to the switch The secure site will issue the certificate check shown below FIGURE 1 2 Security c...

Page 24: ...first time Z Login with the name manager and password manager Z Click on Login After a successful login the welcome screen is shown Note the different information provided on the screen and different areas The menus are used to configure settings on the switch Users can click on a specific port to open the port configuration view ...

Page 25: ...er prompt or for global configuration as well as specific configuration 1 5 3 User Management A maximum of five users can be added per switch Users can be added deleted or changed from a manager level account There can be more than one manager account subject to the maximum number of users on the switch being restricted to five Z Select the Administration User Mgmt User Accounts menu item Z To add...

Page 26: ...18 MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL INTRODUCTION CHAPTER 1 INTRODUCTION In the following example below the user peter was added with manager privilege after clicking the add button ...

Page 27: ...RODUCTION MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL 1 19 After successfully adding a user the added user is displayed in the list of users as shown below Z To delete a user click on the delete icon as shown below ...

Page 28: ...200 MANAGED FIELD SWITCH INSTRUCTION MANUAL INTRODUCTION CHAPTER 1 INTRODUCTION The firmware will prompt to verify the delete command Z To modify the password view the users as described above and click on the edit icon ...

Page 29: ...ple the user ID peter was selected for modification The password for peter will be modified after the new password is entered 1 5 4 Modifying the Privilege Level Privilege levels cannot be changed from the EnerVista Secure Web Management SWM firmware This can only be done through the CLI interface or alternately by deleting the user and adding the same user with the proper privilege level ...

Page 30: ...H INSTRUCTION MANUAL INTRODUCTION CHAPTER 1 INTRODUCTION 1 5 5 Help Help for the EnerVista Secure Web Management software can be obtained by clicking on the Help icon as shown below 1 5 6 Exiting Z To exit or logout click on the logout button ...

Page 31: ...CHAPTER 1 INTRODUCTION INTRODUCTION MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL 1 23 Z Confirm the logout by selecting OK in the pop up window ...

Page 32: ...available as a download from the GE Multilin web site To determine the version of firmware currently installed on your Switch proceed as follows Z Using the EnerVista web interface log into the Switch using the procedure described earlier The firmware version installed on the switch will appear on the lower left corner of the screen 1 6 3 Updating through the Command Line Use the following procedu...

Page 33: ...xmodem command Once the upgrade is started the terminal emulation firmware will ask for the installation file location Z Indicate the file location to begin the file transfer Z Make sure the Xmodem protocol is also selected in this file location dialog window In some operating systems it maybe necessary to select the transfer option In this case Z Return to the HyperTerminal window used in step 5 ...

Page 34: ... Save this file on FTP or TFTP Ensure the FTP or TFTP path is configured If using FTP record the FTP login name and password Z Select the switch to upgrade Ensure you have system administration privileges available on the switch Z Open an EnerVista Secure Web Management software session with the switch by typing in the following URL https IP address of the switch If using FTP save the configuratio...

Page 35: ...eding GE Multilin recommends a two step update first save the configuration to the TFTP server then load the new image and restart the switch refer to section 5 4 4 Saving Configuration for details on saving the configuration Z Load the new firmware as shown below As the file is being loaded the firmware will display the transfer in progress window Z Reboot the switch when the transfer is complete...

Page 36: ...1 28 MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL INTRODUCTION CHAPTER 1 INTRODUCTION ...

Page 37: ...e in industrial applications such as factory floors and control cabinets industrial video surveillance systems with PoE power utility substations tariffed carrier field facilities or transportation and oil and gas the rugged Multilink ML1200 handles stressful workloads mixes of bursty data traffic and priority streaming traffic as well as harsh environmental conditions Advanced thermal design tech...

Page 38: ... Multilink ML1200 Field Switches are provided with LAN management software including SNMP Tag and Port based VLANs IGMP L2 and IGMP Snooping and Port Security with control via GUI and command line interface CLI For high availability LANs using ring topologies Spanning Tree Protocol RSTP Link Loss Alert and Ring Only Mode are available Multilink ML1200 Managed Field Switches have heavy duty aluminu...

Page 39: ... duplex mode for best fiber distance and performance The user may select full or half duplex mode per port through set port command The set up of the software gives the user flexibility to adapt to any FDX or HDX type of Fast Ethernet devices There are three LED s per fiber port The Link LK LED indicates ready for operation on that port when lit The F H LED indicates operation in full duplex mode ...

Page 40: ...ndicate the half duplex mode A twisted pair cable must be connected into an RJ 45 port and the Link LK indicator for that port must be ON indicating there is a powered up device at the other end of the cable in order for a LK LED to provide valid indications of operating conditions on that port Using the ML1200 management software the user may disable auto negotiation and fix the desired operation...

Page 41: ...ics These fiber modules may be factory configured with a choice of them in slots B C and D only The fiber port s LEDs indicate status the same as the SFF fiber modules Color coding on the panel of the module shows which LEDs belong to which port 2 1 5 Two Port 10 Mb mm Fiber ST Modules The 2 port 10Mb ST fiber modules behave the same as the 2 100Mb ST fiber modules except for the 10Mb speed The de...

Page 42: ...s as well as a Gigabit copper option There are three LEDs mounted on each Gigabit port module The Gigabit fiber has LEDs that indicate F H Full Half duplex LK Link status and ACT receiving activity on that port when lit The copper Gigabit ports come with speeds indicating 10 100 1000Mb LEDs also The operation of the Gigabit SFP and 10 100 1000 RJ 45 ports is as described for those port types above...

Page 43: ... result of store and forward operation is that more bandwidth is available for good packets when the traffic load is greatest When the Multilink ML1200 Switch detects that its free buffer queue space is low the Switch sends industry standard full duplex only PAUSE packets out to the devices sending it packets to cause flow control This tells the sending devices to temporarily stop sending traffic ...

Page 44: ...ing internal power and user defined software events Two Alarm Relay contacts monitor basic operations One is for hardware and will signal loss of power internally The other is software controllable and will signal user defined software events such as a security violation or an RSTP Topology Change condition Vertical mounting for efficient convection cooling no fans extended temp Mounting brackets ...

Page 45: ...ULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL 2 9 QoS Port and tag based VLANs GVRP IGMP Snooping SNMPc GUI support Event Log SNTP client for time of day BootP and DHCP client for IP configuring and password security and Secured Web interface ...

Page 46: ...ltilink ML1200 Managed switch for any Industrial factory floor traffic control transportation system or power utility application The several operated features qualifies this managed switch to operate and perform securely and reliably in all critical applications The addition of Ring Only Mode and the Link Loss Learn software features allow this Managed switch to provide a very secure highly avail...

Page 47: ...itch can be reconfigured and up and running in milliseconds The ring topology of the network consists of high speed LAN segments supported by 100Mbps full duplex future proof fiber media to provide a secure long distance LAN connection The entire network is sharing a higher bandwidth Gigabit enabled data mining server for the vital database located in a separate secured building The copper ports a...

Page 48: ...k managed field switch easily qualifies for this requirement with the various features and modularity it has Loaded with management software the field switch provides a very effective and economical solution for the video vignette environment The security features e g port security VLANs SNMPv3 secure telnet etc also boost the Multilink managed switches to provide a very effective and reliable sol...

Page 49: ...closed or multiple rack assembly verify the equipment s power requirements to prevent overloading of the building s electrical circuits 5 If the equipment is mounted in an enclosed or multiple rack assembly verify that the equipment has a reliable and uncompromised earthing path 3 1 1 Locating Multilink ML1200 Switches For vertical panel mounting and wall mounting see Section 3 3 For vertical DIN ...

Page 50: ...in the connectors are clean before connecting Note One strand of the duplex fiber optic cable is coded using color bands at regular intervals you must use the color coded strand on the associated ports at each end of the fiber optic segment 3 Connect the Transmit TX port light colored post on the Multilink PM to the Receive RX port of the remote device Begin with the color coded strand of the cabl...

Page 51: ...mmended that high quality CAT 5 cable be used whenever possible in order to provide flexibility in a mixed speed network since 10 100 copper switched ports are auto sensing for either 10 and 100Mb s The following procedure describes how to connect a 10BASE T or 100BASE TX twisted pair segment to the RJ 45 port The procedure is the same for both unshielded and shielded twisted pair cables 1 Using s...

Page 52: ... a compact optical transceiver used in optical communications for both telecommunication and data communications applications Due to its compact hot pluggable characteristics SFPs are becoming a very popular choice for various applications The small chassis Multilink ML1200 is designed for industry standard Gb SFPs and Gb SFPCU copper for user selection of the SFP gigabit media type as desired All...

Page 53: ...n and then insert the SFP transceiver carefully until the transceiver connector snap into the place in the socket connector 5 Connect the Transmit TX port on the Multilink PM to the Receive RX port of the remote device Connect the Receive RX port on the PM to the Transmit TX port of the remote device The LINK LED on the front of the PM will illuminate and turn Green when a proper connection has be...

Page 54: ...s to a vertical position The DIN Rail latches and brackets are heavy duty and will hold the ML1200 securely in position even with cabling attached to the unit To release the ML1200 from the DIN Rail mounting press the top of the two DIN Rail latches down simultaneously to release the ML1200 so that it can be dismounted by pulling the bottom out Once the bottom of the ML1200 is rotated out the DIN ...

Page 55: ...brackets and into the metal support structure Since the ML1200 has special internal thermal techniques patent pending to move the heat generated by the electronic components inside into the case the case may be quite warm to the touch during normal operation The unit is mounted using the brackets as shown in the illustration above The spacing for the mounting screws into the supporting wall or pan...

Page 56: ...minal block When this option is present the terminal block for Alarm Contacts is part of the Power Input panel in the ML1200 case The DC power input connection is in the same panel The first NC Alarm Contact top position switch vertically mounted is a Software Alarm operated by user settings in the management software The user can disable the Software Alarm feature with a software configuration co...

Page 57: ...Switches are normally received from the factory with all required Port Modules installed Note There may be situations where the PMs need to be added or replaced Any change in configuration of the modules can be done only via factory installation There is no field upgrade option for ML1200 port modules Please contact Tech Support for changing modules The ML1200 port modules are not compatible with ...

Page 58: ...description here CONSOLE CBLQD Console attachment cable serial null modem cable with one side RJ 45 for the ML1200 and a male DB 9 Female connector on the other end CONSOLE CBLQU Console attachment cable serial null modem cable Combo with one serial RJ 45 for the ML1200 side and a USB cable connector option on the other end e g computer Note For Power Substations In support of the IEEE 1613 Class ...

Page 59: ...NK Switch resides inside the unit on the ML1200 RJ 45 There is an optional Half Full duplex mode and 10Mbps or 100Mbps selection for the switched ports which must be configured through management software per unit as per the requirement The internal functions of both are described below 4 1 1 1 Filtering and Forwarding Each time a packet arrives on one of the switched ports the decision is taken t...

Page 60: ...tion is according to the IEEE 802 3u standard The Managed ML1200 s Fast Ethernet copper ports can be set for either fixed 100Mb speed or for 10 100 F H N way auto negotiation per the IEEE802 3u standard The selection is made via MNS software The factory default setting is for auto negotiation At 10Mb or 100Mb fixed speed the user may select half or full duplex mode by management Software for each ...

Page 61: ...or Multilink ML1200 Fast Ethernet switched ports operating at 100Mb half duplex the bit time delay is 50BT 4 1 4 Flow control IEEE 802 3x standard Multilink ML1200 Switches incorporate a flow control mechanism for Full Duplex mode The purpose of flow control is to reduce the risk of data loss if a long burst of activity causes the switch to save frames until its buffer memory is full This is most ...

Page 62: ...125 Single mode is 0 25 dB km ZX40 and the Cable Loss for 9 125 Single mode is 0 2 dB km ZX70 The following data has been collected from component manufacturer s Agilent s and Lucent s web sites and catalogs to provide guidance to network designers and installers Fiber Port Module Speed Std Mode Std km fdx hdx Wavelength nm Cable Size μm X mitr Output PT dB R cvr Sens PR dB Worst OPB dB Worst dist...

Page 63: ...er segment must operate in full duplex FDX mode i e the full duplex factory default setting for 100Mbps fiber ports must be used and The worst case OPB of the fiber link must be greater than the fiber cable s passive Attenuation Attenuation Cable loss LED aging loss Insertion loss safety factor H4 HH 1000 Mb FX Gigabit Single Mode 25 1310 9 125 3 0 21 16 40 18 45 H5 HI 1000 Mb FX Gigabit Single Mo...

Page 64: ... ML1200 Modules An important feature of the Multilink ML1200 is the use of Port Modules for flexible mixed media connectivity to RJ 45 copper and various fiber media The first four ports 1 2 3 4 of the Multilink ML1200 Switches are fixed RJ 45 copper ports with dual speed 10 100Mbps auto negotiating capability Additionally the switch can accept up to three Port Modules to provide the user with up ...

Page 65: ...dule The ST connector functions as a fiber optic transceiver to support 10BASE FX network segments When installed in a Multilink ML1200 Managed Switch the fiber port supports fiber optic cable distances up the IEEE standard 10Mbps distance limits i e typically 2km at full duplex and half duplex Each port has an Activity ACT LED indicating packets being received a Link LK LED that indicates proper ...

Page 66: ...ty ACT LED indicating packets being received a Link LK LED indicating proper connectivity with the remote device when lit and a FDX HDX LED indicating full duplex mode when lit or half duplex when off 4 2 2 5 C6 Module COMBO 2 10 100Mbps RJ 45 Ports and 1 100Mbps Multi mode FX SC type snap in connector The C6 Module is also a Combo module equipped with 2 dual speed copper ports and 1 Multi mode SC...

Page 67: ... Link LK and FDX or HDX operation 4 2 2 7 C3 Module COMBO 2 10 100Mbps RJ 45 and 2 100Mb multi mode FX MTRJ Small FF The C3 Module is a combo module with copper and fiber Small Form Factor MTRJ type ports The small size of MTRJ connectors provides an advantage of placing more ports on one module The C3 Module is equipped with Two 10 100 RJ 45 ports and Two MTRJ fiber ports When installed in a Mult...

Page 68: ...on one module The C4 Module is equipped with two 10 100 RJ 45 ports and two LC multi mode fiber ports When installed in a Multilink ML1200 Switch it supports the standard distances as per the media Each port has an Activity ACT LED indicating packets being received a Link LK LED that indicates proper connectivity with the remote device when lit and a FDX HDX LED to indicate full duplex mode when l...

Page 69: ...kigh greater than 2500V levels of ground potential rise GPR during line to ground fault conditions The ML1200 passes the 1613specifications for zero packet loss with fiber ports with RJ 45 ports used as indicated here 4 2 2 11 PoE power pass through Base unit Model ML1200 48P 10 100Mb 4 port The LEDs on PoE ports are slightly different compared to regular non PoE RJ 45 modules When the PoE port is...

Page 70: ...ML1200 are normally set factory default to operate at AUTO mode for best fiber distance and performance Only two Gigabit ports can be configured on a Mangum ML1200 managed switch in slot D There are three LEDs provided on each SFP Gigabit port module The SFP Gigabit fiber has LEDs that indicate LK Link status and ACT receiving activity when lit and F H on for Full and OFF for half duplex for that ...

Page 71: ...erly connected and the cables wires have not been crimped or in some way impaired during installation About 90 of network downtime can be attributed to wiring and connector problems 3 Make sure that DC power is properly attached to each Multilink ML1200 Switch unit Use the PWR LEDs to verify each unit is receiving power 4 If the problem is isolated to a network device other than the Multilink ML12...

Page 72: ...4 14 MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL OPERATION CHAPTER 4 OPERATION ...

Page 73: ...TP server to synchronize the time on the switch Use TFTP or FTP to download the configurations or upload software updates Run ping tests to test connectivity To set the IP address please refer to section 1 5 6 Setting the IP Parameters Once the IP address is set the CLI can be accessed via telnet as well as the console interface From now on all commands discussed are accessible from the command li...

Page 74: ...NSTRUCTION MANUAL IP ADDRESSING CHAPTER 5 IP ADDRESSING Z Edit the IP address information Besides manually assigning IP addresses there are other means to assign an IP address automatically The two most common procedures are using DHCP and bootp ...

Page 75: ...ted in a database a simple text file On most systems the bootp service is not started as a default and has to be enabled A sample entry by which the bootp software will look up the database and update the IP address and subnet mask of the switch would be as follows ML1200 ht ether ha 002006250065 ip 3 94 247 41 sm 255 255 252 0 gw 3 94 244 1 hn vm rfc1048 where ML1200 is a user defined symbolic na...

Page 76: ... from the bootp server This is useful when a new switch is put on a network and the specific configurations are loaded from a centralized bootp server The following example changes the boot mode of the switch ML1200 set bootmode type bootp bootimg enable bootcfg disable Network application image download is enabled Network application config download is disabled Save Configuration and Restart Syst...

Page 77: ...ient can be disabled through the command line interface by using the telnet disable command with the following syntax telnet enable disable Telnet can also be disabled for specific users with the useraccess command Refer to section 1 5 8 User Management for details Multiple telnet sessions started from the CLI interface or the command line are serviced by the ML1200 in a round robin fashion that i...

Page 78: ... sec 3 Baud Rate 38400 Flow Control None Session Inactivity Time min 10 ML1200 Users can telnet to a remote host from the MultiLink family of switches using the following syntax telnet ipaddress port port number The default port for telnet is 23 To start a telnet session through the EnerVista Secure Web Management software Z Select the Administration Telnet menu item The default port for telnet is...

Page 79: ...switch This is shown using the show session command The user operator session is then terminated using the kill session command Note A maximum of four simultaneous telnet sessions are allowed at any time on the switch The commands in these telnet windows are executed in a round robin fashion that is if one window takes a long time to finish a command the other windows may encounter a delay before ...

Page 80: ...l will also have to be changed to match the new settings To see the current settings of the serial port use the show serial command to query the serial port settings as illustrated below ML1200 show serial Baud Rate 38400 Data 8 Parity No Parity Stop 1 Flow Control None 5 3 2 System Parameters The system parameters can be queried and changed To query the system parameters two commands are frequent...

Page 81: ... the switch and for identifying the locations of individual switches To set these variables change the mode to be SNMP configuration mode from the manager mode using the following syntax snmp setvar sysname syscontact syslocation string The following command sequence sets the system name system location and system contact information ML1200 snmp ML1200 snmp setvar setvar Configures system name con...

Page 82: ...ht savings to the given location country Canada ML1200 show daylight Daylight savings location name Canada ML1200 The date and time can only be set through the command line interface software 5 3 4 Network Time Many networks synchronize the time using a network time server The network time server provides time to the different machines using the Simple Network Time Protocol SNTP To specify the SNT...

Page 83: ...ntp sync hour 5 ML1200 sntp sntp enable SNTP is already enabled ML1200 sntp exit ML1200 sntp SNTP parameters can be configured through the EnerVista Secure Web Management software with the Configuration SNTP menu item The SNTP menu allows the time zone hours from GMT to be defined along with other appropriate parameters on setting the time and synchronizing clocks on network devices The edit butto...

Page 84: ...ess of an SNTP server the time out in seconds and the number of retries before the time synchronization effort is aborted The Sync Now button allows synchronization as soon as the server information is added Note If your site has internet access there are several SNTP servers available online A quick search will yield information about these servers You can use the IP address of these servers howe...

Page 85: ...UCTION MANUAL 5 13 The Time Out value is in seconds Note the time server can be a NTP server available on the Internet Ensure the IP parameters are configured for the switch and the device can be pinged by the switch Once the server is added it is listed with the other SNTP servers ...

Page 86: ...s can be used In most situations the filename must be a unique since overwriting files is not permitted by most ftp and tftp servers or services Only alphanumeric characters are allowed in the filename The following example illustrated how to save the configuration on a tftp server ML1200 saveconf mode tftp 3 94 240 9 file ml1200set Do you wish to upload the configuration Y or N Y The saveconf and...

Page 87: ...ation of GE MultiLink switches settings GE Multilin Inc recommends that modifications of this file and the commands should be verified by the User in a test environment prior to use in a live production network All modifications are made at the User s own risk and are subject to the limitations of the GE MultiLink software End User License Agreement EULA Incorrect usage may result in network shutd...

Page 88: ...hould you want to edit edit the System portion of the file only GE Multilin Inc recommends editing the script file see below 2 File names cannot have special characters such as space and control characters SYSTEM Edit below this line only system_name ML1200 system_contact support gemultilin com system_location Markham Ontario boot_mode manual system_ip 192 168 5 5 system_subnet 0 0 0 0 system_gate...

Page 89: ...on or to view specific modules configured the show config command is used as described below Syntax show config module module name Where module name can be If the module name is not specified the whole configuration is displayed Name Areas affected system IP Configuration Boot mode Users settings e g login names passwords event Event Log and Alarm settings port Port settings Broadcast Protection a...

Page 90: ...stem Manager This area configures System related information SYSTEM Edit below this line only system_name Main system_contact someone joe com system_location Markham Ontario boot_mode manual system_ip 192 168 1 15 system_subnet 0 0 0 0 system_gateway 192 168 1 11 idle_timeout 10 telnet_access enable snmp_access enable web_access enable more ...

Page 91: ...fig command ML1200 show config module snmp HARDWARE type ML1200 slotB 8 Port TP Module Network Management This area configures the SNMPv3 agent SNMP engineid LE_v3Engine defreadcomm public defwritecomm private deftrapcomm public authtrap disable com2sec_count 0 group_count 0 view_count 1 view1_name all view1_type included view1_subtree 1 view1_mask ff more ...

Page 92: ...tion Without a reboot the ML1200 used the previous configuration When reboot is selected the user is prompted as follows Reboot Y or N Select Y The ML1200 will prompt Save Current Configuration Select N ML1200 show config module snmp system HARDWARE type ML1200 slotB 8 Port TP Module System Manager This area configures System related information SYSTEM Edit below this line only system_name Main sy...

Page 93: ...v2 format and new v3 format The v3 format must be used to utilize the ASCII and CLI Script capability save format v2 v3 Note With release 1 7 and higher the configuration can be saved in the older format binary object or in a new format as an ASCII file The new format is recommended by GE Multilin Use the old format only if there are multiple MultiLink switches on the network running different ver...

Page 94: ...ation or disclosure is subject to U S Government restrictions as set forth in Sub division b 3 ii of the rights in Technical Data and Computer Software clause at 52 227 7013 This file is provided as a sample template to create a backup of GE MultiLink switches configurations As such this script provides insights into the configuration of GE MultiLink switch s settings GE Multilin Inc recommends th...

Page 95: ... on the receiving Switch before connecting to the network After configuration changes are made all the changes are automatically saved It is a good practice to save the configuration on another server on the network using the tftp or ftp protocols Once the configuration is saved the saved configuration can be reloaded to restore the settings At this time the saved or loaded configuration parameter...

Page 96: ...rade the ML1200 image on the switch 2 Config Download or Config Upload Save the configuration of the switch on the server or load the saved configuration from the server to the switch This option is used to save a backup of the ML1200 configuration or restore the configuration in case of a disaster 3 Script Download or Script Upload Save the necessary CLI commands used for configuration of the swi...

Page 97: ... OK The following figures illustrate saving changes made after adding an SNTP server This is done by clicking on the Save icon to save current configuration 5 4 7 Host Names Instead of typing in IP addresses of commonly reached hosts the ML1200 allows hosts to be created with the necessary host names IP addresses user names and passwords Z Use the Configuration Access Host menu to create host entr...

Page 98: ... 26 MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL IP ADDRESSING CHAPTER 5 IP ADDRESSING Z To add a host click the Add button Z Fill in all the fields below to create the necessary host entries ...

Page 99: ... shown above 5 4 8 Erasing Configuration Kill Config option using SWM To erase the configuration and reset the configurations to factory defaults you can use the kill config option from Administration tab by selecting kill config Note User also has the option to save one module from defaulting back to factory defaults by checking the module box before issuing kill Config command ...

Page 100: ...issued by pressing the OK button the Switch will perform a factory dump restoring all the Switch settings back to factory defaults except for the System settings which will be retained When the OK button is pressed the Switch will issue the following warning messages and reboot the switch for it to revert back to the factory default settings with the exceptions of modules opted not to be defaulted...

Page 101: ...ve module command The kill Config command will default all the Switch settings back to factory defaults while the kill config save module will default all with the exception of module selected Available modules are system user acces port vlan ps mirror lacp slp and igmp Name Areas affected System IP Configuration Boot mode User Users settings e g login names passwords Port Port settings Broadcast ...

Page 102: ...figuration using the kill config command and the second example illustrates how to erase all the Switch s configuration with the exception of system configuration ML1200 kill config Do you want to erase the configuration Y or N Y Successfully erased configuration Please reboot ML1200 kill config save system Do you want to erase the configuration Y or N Y Successfully erased configuration Please re...

Page 103: ...IPv4 Its deployment strategy is designed to have no dependencies IPv6 is designed to run well on high performance networks e g Gigabit Ethernet OC 12 ATM etc and at the same time still be efficient on low bandwidth networks e g wireless In addition it provides a platform for the new level of internet functionality that will be required in the near future IPv6 includes a transition mechanism design...

Page 104: ...in all implementations 5 5 3 IPv6 Addressing IPv6 addresses are 128 bits long and are identifiers for individual interfaces and sets of interfaces IPv6 addresses of all types are assigned to interfaces not nodes Since each interface belongs to a single node any of that node s interface s unicast addresses may be used as an identifier for the node A single interface may be assigned multiple IPv6 ad...

Page 105: ...x show ipv6 displays the IPv6 information To configure IPv6 the following sequence of commands can be used FIGURE 5 5 Configuring IPv6 In addition to the commands listed above the commands which support IPv6 addressing are Syntax ftp IPv6 address ftp to an IPv6 station Example ftp fe80 220 6ff fe25 ed80 ML1200 ipconfig ipconfig Configures the system IP address subnet mask and gateway Usage ipconfi...

Page 106: ...shown in the example below http fe80 220 6ff fe25 ed80 5 5 5 List of commands in this chapter Syntax ipconfig ip ip address mask subnet mask dgw gateway add del configure an IPv6 address The add delete option can be used to add or delete IPv4 IPv6 addresses Syntax show ipconfig display the IP configuration information including IPv6 address Syntax ping6 IPv6 address pings an IPv6 station Syntax sh...

Page 107: ...Note It is assumed here that the user is familiar with issues concerning security as well as securing access for users and computers on a network Secure access on a network can be provided by authenticating against an allowed MAC address as well as IP address 6 1 2 Passwords The MultiLink ML1200 Managed Field Switch has a factory default password for the manager as well as the operator account Pas...

Page 108: ...MultiLink ML1200 Managed Field Switch If there is an insecure access on the secondary device the MultiLink ML1200 Managed Field Switch allows the authorized users to continue to access the network the unauthorized packets are dropped preventing access to the network Note Network security hinges on the ability to allow or deny access to network resources This aspect of secure network services invol...

Page 109: ... to 1 Auto learn the MAC addresses 2 Specify individual MAC addresses to allow access to the network 3 Validate or change the settings The command syntax for the above actions are allow mac address list range port num list range learn port number list enable disable show port security action port num list range none disable drop signal port num list range none log trap logandtrap ps enable disable...

Page 110: ...hat a maximum of 200 MAC addresses can be learned per port to a maximum of 500 per switch Also the action on the port must be set to none before the port learns the MAC address information ML1200 port security action port 1 2 none ML1200 port security learn port 1 2 enable The following command sequence enables and disables port security ML1200 port security ps enable Port Security is already enab...

Page 111: ...00 01 03 e2 27 89 00 07 50 ef 31 40 00 e0 29 22 15 85 00 03 47 ca ac 45 00 30 48 70 71 23 2 ENABLE NONE NONE DISABLE 0 Not Configured 3 ENABLE NONE NONE DISABLE 0 Not Configured 4 ENABLE NONE NONE DISABLE 0 Not Configured 5 ENABLE NONE NONE DISABLE 0 Not Configured 6 ENABLE NONE NONE DISABLE 0 Not Configured ML1200 port security Example 6 2 Enabling learning on a port ML1200 port security learn po...

Page 112: ... security command Z Enable port security use the enable ps command Z Enable learning on the required ports for example use the learn port 3 enable command for port 3 Z Verify learning is enables and MAC addresses are being learnt on required ports use the show port security port 3 command Z Save the port security configuration use the save command Example 6 3 Allowing specific MAC addresses on spe...

Page 113: ...gnated devices to access the network use the add mac 00 c1 00 7f ec 00 port 3 5 command Z Disable access to the network for unauthorized devices Use action port 3 diable drop depending on whether the port should be disabled or the packed dropped Follow that with a show port security command to verify the setting Z Optional step Set the notification to notify the management station on security brea...

Page 114: ...rt 3 enable Port Learning Enabled on selected port s ML1200 port security show port security PORT STATE SIGNAL ACTION LEARN COUNT MAC ADDRESS 1 ENABLE LOG NONE ENABLE 6 00 e0 29 2a f1 bd 00 01 03 e2 27 89 00 07 50 ef 31 40 00 e0 29 22 15 85 00 03 47 ca ac 45 00 30 48 70 71 23 2 ENABLE NONE NONE DISABLE 0 Not Configured 3 ENABLE NONE NONE ENABLE 0 00 c1 00 7f ec 00 4 ENABLE NONE NONE DISABLE 0 Not ...

Page 115: ... for that port and makes the intrusion information available The default log size is 50 rows To change the log size use the set logsize command Example 6 6 Security log commands ML1200 show log S Date Time Log Description I 12 07 2004 9 01 34 A M CLI manager console login I 12 07 2004 5 54 23 P M SNTP Date and Time updated from SNTP server I 12 08 2004 6 09 00 P M SNTP Date and Time updated from S...

Page 116: ...cates the activity on the switch D debug severity level 3 is reserved for GE Multilin internal diagnostic information C critical severity level 4 indicates that a severe switch error has occurred F fatal severity level 5 indicates that a service has behaved unexpectedly 6 2 4 Authorized Managers Just as port security allows and disallows specific MAC addresses from accessing a network the ML1200 s...

Page 117: ...dress 3 94 245 25 is allowed again note how the subnet mask is used An older station with IP address 3 94 245 15 is removed Example 6 7 Allowing blocking specific IP addresses ML1200 access ML1200 access allow ip 3 94 245 10 mask 255 255 255 0 service t Service s allowed for specified address ML1200 access allow ip 3 94 245 25 mask 255 255 255 255 service Service s allowed for specified address ML...

Page 118: ...ta Secure Web Management software Z Select the Configuration Port Security menu item to configure port security as shown below From the menu shown above each individual port can be configured for the proper action on the port auto learn MAC addresses and specify individual MAC addresses Z To edit each port click on the edit icon Z To enable or disable port security use the Status drop down menu as...

Page 119: ... be specified to create a log entry or send a trap do both or do nothing This is done through the Signal Status drop down menu 2 The port can be specified to drop the connection disable the port or do nothing This is indicated by the Action Status drop down menu 3 The port can be put in the learn mode or the learning can be disabled This is indicated by the Learn Status drop down menu Additionally...

Page 120: ...er port and 500 MAC addresses per switch for port security After clicking on the Add button the following screen appears allowing the entry of a specific MAC address Once port security is setup it is important to manage the log and review it often If the signals are sent to the trap receiver the traps should also be reviewed for intrusion and other infractions ...

Page 121: ...ntrusion on a port it sets an alert flag for that port and makes the intrusion information available Note The default log size is 50 rows To change the log size select the Configuration Statistics Log Statistics menu item When the switch detects an intrusion attempt on a port it records the date and time stamp the MAC address the port on which the access was attempted and the action taken by the M...

Page 122: ...vice has behaved unexpectedly 6 3 3 Authorized Managers Just as port security allows and disallows specific MAC addresses from accessing a network the EnerVista Secure Web Management software can allow or block specific IP addresses or a range of IP addresses to access the switch Z Access this functionality via the Configuration Access IP Access menu item The window above show the authorized acces...

Page 123: ...owing example any computer on 10 10 10 0 sub network is allowed note how the subnet mask is used to indicate that Also a specific station with IP address 192 168 15 25 is allowed again note how the subnet mask is used to allow only one specific station in the network and an older station with IP address 192 168 15 15 is removed ...

Page 124: ...6 18 MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL ACCESS CONSIDERATIONS CHAPTER 6 ACCESS CONSIDERATIONS ...

Page 125: ...e RADIUS server for authenticating users connecting into a network For example if a user connects PC into the network whether the PC should be allowed access or not provides the same issues as to whether or not a dial in user should be allowed access into the network or not A user has to provide a user name and password for authenticated access A RADIUS server is well suited for controlling access...

Page 126: ...o RADIUS packets for relaying to RADIUS authentication servers The details of the 802 1x authentication are as follows 1 The supplicant host is initially blocked from accessing the network The supplicant wanting to access these services starts with an EAPOL Start frame 2 The authenticator MultiLink ML1200 Managed Field Switch upon receiving an EAPOL start frame sends a response with an EAP Request...

Page 127: ...g all the state machines needed for port based authentication The ML1200 software authenticator supports both EAPOL and EAP over RADIUS to communicate to a standard 802 1x supplicant and RADIUS authentication server The ML1200 software authenticator has the following characteristics Allows control on ports using STP based hardware functions EAPOL frames are Spanning Tree Protocol STP link Bridge P...

Page 128: ...vertimeout 1 240 maxreq 1 10 The port argument is mandatory and represents the port s to be configured The supptimeout argument is optional and represents the timeout in seconds the authenticator waits for the supplicant to respond back The default value is 30 seconds and values can range from 1 to 240 seconds The servertimeout argument is optional and represents the timeout in seconds the authent...

Page 129: ...ntication with the supplicant or PC reauth port num list range status enable disable period 10 86400 The port argument is mandatory and sets the ports to be configured The status argument is optional and enables disables re authentication The period argument is optional and represents the re authentication period This is the time in seconds the authenticator waits before a re authentication proces...

Page 130: ...nabled ML1200 auth show auth ports Port Status Control Initialize Current State 1 Enabled Auto Deasserted Authorized 2 Enabled ForcedAuth Asserted Unauthorized 3 Enabled Auto Deasserted Authorized 4 Enabled Auto Deasserted Unauthorized 5 Enabled Auto Deasserted Unauthorized 6 Enabled Auto Deasserted Unauthorized Port not available ML1200 auth show auth config 802 1X Authenticator Configuration Sta...

Page 131: ...nued on following page This command sets timeout characteristics and the number of requests before access is denied The authenticator waits for the supplicant to respond back for 45 seconds the authenticator waits for 60 seconds for the back end RADIUS server to respond back and the authenticator will retransmit an EAP request packet 5 times to the Supplicant before it times out the authentication...

Page 132: ...AuthSuccessesWhileAuthenticating 2 authAuthTimeoutsWhileAuthenticating 0 authAuthFailWhileAuthenticating 0 authAuthReauthsWhileAuthenticating 0 authAuthEapStartsWhileAuthenticating 1 authAuthEapLogoffWhileAuthenticating 0 authAuthReauthsWhileAuthenticated 0 authAuthEapStartsWhileAuthenticated 0 authAuthEapLogoffWhileAuthenticated 0 backendResponses 5 backendAccessChallenges 2 backendOtherRequestsT...

Page 133: ...t the server Do not enable RADIUS capabilities until you have ensured that the ports are configured properly After the ports are configured enable RADIUS Also ensure that the port connected to the RADIUS server or the network where the RADIUS server is connected to is not an authenticated port The following window shows the configuration of a RADIUS Server Initially the RADIUS Services are disable...

Page 134: ...ing of information for the RADIUS server Note the UDP port number can be left blank and the default port 1812 is used After configuring the server information specific port information is configured Z Select the Configuration Radius Port Set menu item to configure the RADIUS characteristics of each port Z To edit the port settings click on the edit icon ...

Page 135: ... to leave the Control on auto and Initialize on de asserted To change the port access characteristics when authenticating with a RADIUS server Z Select the Configuration Radius Port Access menu item The Quiet Period column represents the time in seconds the supplicant is held after an authentication failure before the authenticator retries the supplicant for connection The value ranges from 0 to 6...

Page 136: ... of 30 The backend or communication characteristics between the ML1200 and the RADIUS Server are defined through the Configuration Radius Port Access Backend menu item The Supp Timeout column represents the timeout the authenticator waits for the supplicant to respond The values range from 1 to 240 seconds with a default of 30 The Server Timeout column represents the timeout the authenticator wait...

Page 137: ...entication with the supplicant or PC These are defined through the Configuration Radius Port Access Reauth menu item The Reauth Period represents the time the authenticator waits before a re authentication process will be done again to the supplicant Values range from 10 to 86400 seconds with a default of 3600 1 hour The Configuration Radius Port Stats menu item illustrates the radius statistics f...

Page 138: ...CH INSTRUCTION MANUAL ACCESS USING RADIUS CHAPTER 7 ACCESS USING RADIUS After all the port characteristics are enabled Z Do not forget to save the configuration using the save icon and enabling RADIUS from the Configuration Radius Server menu ...

Page 139: ...s control protocol originally developed by BBN for the MILNET Military Network XTACACS is now replaced by TACACS TACACS is a TCP based access control protocol TCP offers a reliable connection oriented transport while UDP offers best effort delivery TACACS improves on TACACS and XTACACS by separating the functions of authentication authorization and accounting and by encrypting all traffic between ...

Page 140: ...er has operator access or manager privileges 8 1 3 TACACS Packet Packet encryption is a supported and is a configurable option for the ML1200 software When encrypted all authentication and authorization TACACS packets are encrypted and are not readable by protocol capture and sniffing devices such as EtherReal or others Packet data is hashed and shared using MD5 and secret string defined between t...

Page 141: ...mpatibility Packet type Possible values are TAC_PLUS_AUTHEN 0x01 authentication TAC_PLUS_AUTHOR 0x02 authorization TAC_PLUS_ACCT 0x03 accounting Sequence number The sequence number of the current packet for the current session Flags This field contains various flags in the form of bitmaps The flag values signify whether the packet is encrypted Session ID The ID for this TACACS session Length The t...

Page 142: ...ers tacserver add delete id num ip ip addr port tcp port encrypt enable disable key string The add delete argument is mandatory and specifies whether to add or delete a TACACS server The id argument is mandatory and sets the order to poll the TACACS servers for authentication The ip argument is mandatory for adding and defines the IP address of the TACACS server The port argument is mandatory for ...

Page 143: ...sabled ML1200 user tacplus enable TACACS Tunneling is enabled ML1200 user tacserver add id 2 ip 10 21 1 123 encrypt enable ke TACACS server is added ML1200 user show tacplus servers ID TACACS Server Port Encrypt Key 1 10 21 1 170 1 Enabled secret 2 10 21 1 123 1 Enabled some 3 4 5 ML1200 user tacserver delete id 2 TACACS server is deleted ML1200 user show tacplus servers ID TACACS Server Port Encr...

Page 144: ...erVista Secure Web Management software Z To access the TACACS servers select the Administration User Mgmt TACACS menu item By default no TACACS servers are defined Z To add a server click on the Add button as shown below Note that the TCP port field can be left blank port 49 is used as a default port Up to five TACACS servers can be defined ...

Page 145: ...S USING TACACS ACCESS USING TACACS MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL 8 7 After the configuration is completed Z Save the settings Z Enable the TACACS services by using the Status drop down menu ...

Page 146: ...8 8 MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL ACCESS USING TACACS CHAPTER 8 ACCESS USING TACACS ...

Page 147: ...evention thresholds An Ethernet switch sends traffic from one port to another port Unlike a switch a hub or a shared network device the traffic is broadcast on each and every port Capturing traffic for protocol analysis or intrusion analysis can be impossible on a switch unless all the traffic from a specific port is reflected on another port typically a monitoring port The MultiLink ML1200 Manage...

Page 148: ... port mirroring prtmr enable disable The sequence below illustrates how port 1 is mirrored on port 2 Any traffic on port 1 is also sent on port 2 ML1200 show port mirror Sniffer Port 0 Monitor Port 0 Mirroring State disabled ML1200 port mirror ML1200 port mirror setport monitor 1 sniffer 2 Port 1 set as Monitor Port Port 2 set as Sniffer Port ML1200 port mirror prtmr enable Port Mirroring Enabled ...

Page 149: ...able disable lla enable disable The arguments for the setport command are defined as follows The device argument sets up the MultiLink ML1200 Managed Field Switch in the device configuration mode The name argument assigns a specific name to the port This name is a designated name for the port and can be a server name user name or any other name The speed argument sets the speed to be 10 or 100 Mbp...

Page 150: ...o match the port configuration on the other device Possible port setting combinations for copper ports are 10HDx 10 Mbps half duplex 10FDx 10 Mbps full duplex 100HDx 100 Mbps half duplex 100FDx 100 Mbps full duplex Possible port settings for 100FX fiber ports are 100FDx default 100 Mbps full duplex 100HDx 100 Mbps half duplex Note To change the port speed on a transceiver port it is required to re...

Page 151: ...trol mechanisms The default state is disabled When enabled the port uses 802 3 Layer 2 back off algorithms Back pressure based congestion control is possible only on half duplex 10 Mbps Ethernet ports Other technologies are not supported on the MultiLink ML1200 Managed Field Switch backpressure rxthreshold value where the rxthreshold value can be from 4 to 30 default is 28 Back pressure and flow c...

Page 152: ...ed Part Auto VlanID GVRP STP 1 B1 E H 10Tx UP 10 No E 1 2 B2 E H 10Tx DOWN 10 No E 1 3 JohnDoe E H 10Tx DOWN 10 No E 1 4 JaneDoe E H 10Tx DOWN 10 No E 1 5 B5 E F 100Tx UP 100 No E 1 6 B6 E H 10Tx DOWN 10 No E 1 ML1200 device show port 11 Configuration details of port 11 Port Name JohnDoe Port Link State DOWN Port Type TP Port Port Admin State Enable Port VLAN ID 1 Port Speed 10Mbps Port Duplex Mod...

Page 153: ...ped until the storm is determined to be over The storm is determined to be over when a one second period elapses with no broadcast packets received Back pressure and flow control continued ML1200 device show port Keys E Enable D Disable H Half Duplex F Full Duplex M Multiple VLAN s NA Not Applicable LI Listening LE Learning F Forwarding B Blocking Port Name Control Dplx Media Link Speed Part Auto ...

Page 154: ...abilities broadcast protect enable disable The rate threshold command set the rate limit in frames per second rate threshold port port list range rate frames sec The show broadcast protect command displays the broadcast storm protection settings show broadcast protect In Example 9 3 the broadcast protection is turned on The threshold for port 11 is then set to a lower value of 3500 broadcast frame...

Page 155: ...ple 9 3 Preventing broadcast storms ML1200 device ML1200 device show broadcast protect PORT STATUS THRESHOLD frms sec CURR RATE frms sec ACTIVE 1 Disabled 19531 0 NO 2 Disabled 19531 0 NO 3 Disabled 19531 0 NO 4 Disabled 19531 0 NO 5 Disabled 19531 0 NO 6 Disabled 19531 0 NO ML1200 device broadcast protect enable Broadcast Storm Protection enabled ML1200 device show broadcast protect PORT STATUS T...

Page 156: ...vice show port 3 Configuration details of port 3 Port Name JohnDoe Port Link State DOWN Port Type TP Port Port Admin State Enable Port VLAN ID 1 Port Speed 100Mbps Port Duplex Mode half duplex Port Auto negotiation State Enable Port STP State NO STP Port GVRP State No GVRP Port Priority Type None Port Security Enable Port Flow Control Enable Port Back Pressure Enable Port Link Loss Alert Disable M...

Page 157: ...agement software 9 4 1 Commands Monitoring a specific port can be done by port mirroring Mirroring traffic from one port to another port allows analysis of the traffic on that port To enable port mirroring as well as setting up the ports to be sniffed Z Select the Configuration Port Mirroring menu item Z Set the sniffer port and the port on which the traffic is reflected ...

Page 158: ...he port mirroring be disabled using the Edit button and setting the Mirror Status to off once port monitoring is completed Note that 1 Only one port can be set to port mirror at a time 2 Both the ports monitored port and mirrored port have to belong to the same VLAN 3 The mirrored port shows both incoming as well as outgoing traffic 9 4 2 Port Setup With the ML1200 the specific characteristics of ...

Page 159: ...ILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL 9 13 Z Select a specific port by using the edit icon in the Configuration Port Settings menu Z Click the edit icon to open the following window In these windows Port Number represents the port number on the switch ...

Page 160: ...ys the priority set for the port This value cannot be edited in this window The VLAN ID displays the VLAN set for the port This value cannot be edited in this window The STP State displays the STP settings for the port This value cannot be edited in this window The Tagged State displays the Tag settings on the port This value cannot be edited in this window The GVRP State displays the GVRP setting...

Page 161: ...educe network performance and cause bridges routers workstations servers and PCs to slow down or even crash The ML1200 is capable of detecting and limiting storms on each port A network administrator can also set the maximum rate of broadcast packets frames that are permitted from a particular interface If the maximum number is exceeded a storm condition is declared Once it is determined that a st...

Page 162: ...AND SETUP CHAPTER 9 PORT MIRRORING AND SETUP See details in Broadcast Storms on page 9 7 to determine the threshold level Z After changes are made do not forget to save the changes using the save icon If the switch is rebooted before the changes are made the changes will be lost ...

Page 163: ...EEE 802 1Q specification establishes a standard method for inserting VLAN membership information into Ethernet frames VLANs provide the capability of having two or more Ethernet segments co exist on common hardware The reason for creating multiple segments in Ethernet is to isolate broadcast domains VLANs can isolate groups of users or divide up traffic for security bandwidth management etc VLANs ...

Page 164: ... is saved by not allowing packets to flood out on all ports For many reasons a port may be configured to belong to multiple VLANs As shown below ports can belong to multiple VLANs In this figure a simplistic view is presented where some ports belong to VLANs 1 2 and other ports belong to VLANs 2 3 Ports can belong to VLANs 1 2 and 3 This is not shown in the figure FIGURE 10 2 Ports assigned to mul...

Page 165: ...t VLAN sets a specific port or group of ports to belong to a VLAN Port VLANs do not look for VLAN identifier VID information nor does it manipulate the VID information It thus works transparently and propagates the VLAN information along In the tag VLAN an identifier called the VLAN identifier VID is either inserted or manipulated This manipulated VLAN tag allows VLAN information to be propagated ...

Page 166: ...d port trunking or 802 1Q trunks There is one important caveat administrators must ensure ports with non 802 1Q compliant devices attached are configured to transmit untagged frames Many network interface cards such as those for PCs printers and other dumb switches are not 802 1Q compliant If they receive a tagged frame they will not understand the VLAN tag and will drop the frame In situations li...

Page 167: ...ill result from configuring VLANs Include consideration for the interaction between VLANs 2 Configure at least one VLAN in addition to the default VLAN 3 Assign the desired ports to the VLANs 4 Decide on trunking strategy how will the VLAN information be propagated from one switch to another and also what VLAN information will be propagated across 5 Layer 3 consideration check to see if the routin...

Page 168: ...ommand sequence shows how to configure VLANs on a MultiLink ML1200 Managed Field Switch ML1200 vlan type port ML1200 port vlan add id 2 name test port 1 7 ML1200 port vlan start vlan all ML1200 port vlan save Saving current configuration Configuration saved To move Management Control on any VLAN add id vlan Id name vlan name port number list range Forbid number list range mgt nomgt To enable or di...

Page 169: ...result from configuring VLANs Include consideration for the interaction between VLANs 2 Configure at least one VLAN in addition to the default VLAN 3 Assign the desired ports to the VLANs 4 Decide on trunking strategy how will the VLAN information be propagated from one switch to another and also what VLAN information will be propagated across 5 Layer 3 consideration check to see if the routing be...

Page 170: ...10 8 MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL VLAN CHAPTER 10 VLAN The currently assigned Port VLANs are displayed as follows Z Select the Configuration VLAN Port Based menu item ...

Page 171: ... ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL 10 9 As discussed above ports 1 2 3 5 6 7 and 8 still belong to default VLAN We will now add another VLAN with VID 40 and VLAN name Support Z Add the ports Z Define the VLAN Z Click OK ...

Page 172: ...After adding the VLAN the VLAN is not active Activating the VLAN has to be done manually Z To activate the VLAN click on the Status button Z Select VLAN ID Z Select VLAN Status Start A specific VLAN can be activated or all VLANs can be activated or disabled Z Click OK to activate VLAN ...

Page 173: ... INSTRUCTION MANUAL 10 11 After activation note that ports 1 to 3 belong to the new VLAN The VLAN membership of the ports assigned to VLAN 40 now indicates that they are only members of VLAN 40 The default VLAN membership has been terminated on VLAN activation ...

Page 174: ...ge filter status enable disable The tagging id and status parameters define whether the outgoing packets from a port will be tagged or untagged This definition is on a per VLAN basis For example the command set port port 1 tagging id 10 status tagged will instruct the switch to tag all packets going out of port 1 to belong to VLAN 10 set port port number list range tagging id number status tagged ...

Page 175: ...LAN filtering is enabled there can be serious connectivity repercussions the only way to recover from that it is to reload the switch without saving the configuration or by modifying the configuration from the console serial port 2 There can be either Tag VLAN or Port VLAN Both VLANs cannot co exit at the same time 3 There can only be one default VLAN for the switch The default is set to VLAN 1 an...

Page 176: ...e PORT STATUS 2 DOWN VLAN ID 30 Name marketing Status Active PORT STATUS 3 DOWN VLAN ID 40 Name Support Status Active PORT STATUS 4 UP ML1200 port vlan stop vlan all All active VLAN s stopped ML1200 port vlan exit ML1200 set vlan type tag VLAN set to Tag based ML1200 show active vlan Tag VLAN is currently active ML1200 show vlan type tag Continued on next page To switch to Tag VLAN the port VLAN h...

Page 177: ...ering port 3 5 Tag based vlan edited Successfully Vlan id 10 Vlan name engineering Ports 3 5 ML1200 tag vlan add id 20 name sales port 3 5 Tag based vlan Added Successfully Vlan id 20 Vlan name sales Ports 3 5 ML1200 tag vlan add id 20 name marketing port 3 5 ERROR Duplicate Vlan Id ML1200 tag vlan add id 30 name marketing port 3 5 Tag based vlan Added Successfully Vlan id 30 Vlan name marketing P...

Page 178: ...OWN 4 UNTAGGED DOWN 5 UNTAGGED DOWN VLAN ID 20 Name sales Status Pending PORT MODE STATUS 3 UNTAGGED DOWN 4 UNTAGGED DOWN 5 UNTAGGED DOWN VLAN ID 30 Name marketing Status Pending PORT MODE STATUS 3 UNTAGGED DOWN 4 UNTAGGED DOWN 5 UNTAGGED DOWN ML1200 tag vlan start vlan all All pending VLAN s started ML1200 tag vlan set port port 3 5 filter status enable Ingress Filter Enabled ML1200 tag vlan show...

Page 179: ...atus Active PORT MODE STATUS 3 UNTAGGED DOWN 4 UNTAGGED DOWN 5 UNTAGGED DOWN ML1200 tag vlan set port port 3 5 tagging id 10 status tagged Port tagging enabled ML1200 tag vlan set port port 3 5 tagging id 20 status tagged Port tagging enabled ML1200 tag vlan set port port 3 5 tagging id 30 status tagged Port tagging enabled ML1200 tag vlan show vlan type tag VLAN ID 1 Name Default VLAN Status Acti...

Page 180: ...TAGGED UP 2 UNTAGGED DOWN 6 UNTAGGED DOWN 7 UNTAGGED UP VLAN ID 10 Name engineering Status Active PORT MODE STATUS 3 TAGGED DOWN 4 TAGGED DOWN 5 TAGGED DOWN VLAN ID 20 Name sales Status Active PORT MODE STATUS 3 TAGGED DOWN 4 TAGGED DOWN 5 TAGGED DOWN VLAN ID 30 Name marketing Status Active PORT MODE STATUS 3 TAGGED DOWN 4 TAGGED DOWN 5 TAGGED DOWN ...

Page 181: ... status is shown as DOWN There can be serious connectivity repercussions when Tag VLAN filtering is enabled The only way to recover from this it is to reload the switch without saving the configuration or by modifying the configuration from the console serial port The ML1200 can be configured for either Tag VLAN or Port VLAN Both VLANs cannot co exit at the same time There can only be one default ...

Page 182: ...ANs needed To do that Z Click On Configuration vlan tag based Menu Z Click on the Add button Z Now add the necessary VLANs In the example below add the VLANs in the following manner VLAN 1 All ports default VLAN VLAN 10 Engineering VLAN ports 2 3 4 VLAN 20 Support VLAN ports 4 5 note that port 4 belongs to VLAN 10 20 ...

Page 183: ...CH INSTRUCTION MANUAL 10 21 VLAN 30 Marketing VLAN ports 5 6 note that port 5 belongs to VLAN 20 30 Z After adding the ports and defining the VLAN click OK Z Click on Port Settings in the Configuration VLAN Tag Based menu and enable the tagging for each port ...

Page 184: ...t the last two steps for each of the ports and each of the VLANs click on port settings and enable the tag on the port After all the ports are tagged the tagged column should change to Yes for all VLANs To check the status of the tagging Z Select the Configuration VLAN Tag Based Tagging menu ...

Page 185: ...nu Z Click OK Tagged VLANs can be viewed from the Configuration VLAN Tag Based Tagging menu To add or delete specific ports from a VLAN Z Click on Join Leave button from the Configuration VLAN Tag Based Settings menu and specify the action In the example below we will take port 2 and assign it to leave VLAN 10 After the action is completed note that port 2 will belong to VLAN 1 only ...

Page 186: ...INSTRUCTION MANUAL VLAN CHAPTER 10 VLAN To enable the filter capability for each port use the Configuration VLAN Tag Based Settings menu as shown below Use the Configuration VLAN Tag Based Filter menu to view the filter information for the ports ...

Page 187: ...ned With GVRP this process can be automated It is critical that all switches share a common VLAN This VLAN typically is the default VLAN VID 1 on most switches and other devices GVRP uses GVRP Bridge Protocol Data Units GVRP BPDUs to advertise static VLANs We refer to GVRP BPDU is as an advertisement GVRP enables the MultiLink ML1200 Managed Field Switch to dynamically create 802 1q compliant VLAN...

Page 188: ...nt for that VLAN is received on that specific port FIGURE 11 1 GVRP operation Switch 1 with static VLANs VID 1 2 and 3 Port 2 is a member of VIDs 1 2 and 3 1 Port 2 advertises VIDs 1 2 and 3 2 On Switch 2 Port 1 receives advertisement of VIDs 1 2 and 3 AND becomes a member of VIDs 1 2 and 3 3 As discussed above a GVRP enabled port can forward advertisement for a VLAN it learnt about So port 3 adve...

Page 189: ...ld become a member when advertisements for VLAN 22 were received from switch A GVRP provides a per port join request option which can be configured VLANs must be disabled in GVRP unaware devices to allow tagged packets to pass through A GVRP aware port receiving advertisements has these options If there is no static VLAN with the advertised VID on the receiving port then dynamically create a VLAN ...

Page 190: ...atic VLAN with the static command static vlan VID Note The show vlan type tag command will display VID in case the VID is not known Example 11 1 illustrates how to convert a dynamic VLAN into a static VLAN As the following table indicates a port that has a tagged or untagged static VLAN has the option for both generating advertisements and dynamically joining other VLANs Table 11 1 Port settings f...

Page 191: ...t static VLAN options Tagged or untagged Auto Forbid Learn Generate advertisements Forward advertisements for other VLANs Receive advertisements and dynamically join any advertised VLAN Receive advertisements and dynamically join any advertised VLAN that has the same VID as the static VLAN Do not allow the port to become a member of this VLAN Block Generate advertisements Forward advertisements re...

Page 192: ...N REGISTRATION OVER GARP CHAPTER 11 VLAN REGISTRATION OVER GARP The time to live for dynamic VLANs is 10 seconds That is if a port has not received an advertisement for an existing dynamic VLAN during the last 10 seconds the port removes itself from that dynamic VLAN ...

Page 193: ...ust be converted to a static VLAN before it can have an IP address After converting a dynamic VLAN to a static VLAN use the save command to save the changes made on a reboot the changes can be lost without the save command Within the same broadcast domain a dynamic VLAN can pass through a device that is not GVRP aware This is because a hub or a switch that is not GVRP aware will flood the GVRP mul...

Page 194: ... GVRP is now disabled ML1200 gvrp gvrp enable GVRP enabled ML1200 gvrp show vlan VLAN ID NAME VLAN STATUS 1 Default VLAN Static Active 2 Blue Static Active 6 dyn6 Dynamic Active ML1200 gvrp static vlan 10 ML1200 gvrp show vlan VLAN ID NAME VLAN STATUS 1 Default VLAN Static Active 2 Blue Static Active 6 dyn6 Static Active ML1200 gvrp set forbid vlan 2 forbid 3 5 ML1200 gvrp show forbid VLAN ID FORB...

Page 195: ...LAN context Since dynamic VLANs operate as tagged VLANs and it is possible that a tagged port on one device may not communicate with an untagged port on another device GE Multilin recommends that you use tagged VLANs for the static VLANs A dynamic VLAN continues to exist on a port for as long as the port continues to receive advertisements of that VLAN from another device connected to that port or...

Page 196: ...11 10 MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL VLAN REGISTRATION OVER GARP CHAPTER 11 VLAN REGISTRATION OVER GARP ...

Page 197: ...e is active between any two nodes on the network In networks where more than one physical path exists between two nodes STP ensures only a single path is active by blocking all redundant paths Enabling STP is necessary to avoid loops and duplicate messages This duplication leads to a broadcast storm or other erratic behavior that can bring down the network As recommended in the IEEE 802 1Q VLAN st...

Page 198: ...s the new active path for as long as the original active path is down The table below lists the default values of the STP variables Refer to the following section for detailed explanation on the variables By default STP is disabled To use STP it has to be manually enabled Table 12 1 STP default values Variable or attribute Default value STP capabilities Disabled Reconfiguring general operation pri...

Page 199: ...ts from listening to learning states and from learning to forwarding states The value ranges from 4 to 30 seconds with a default of 15 Bridge Hello Time When the switch is the root device this is the time between messages being transmitted The value is from 1 to 10 seconds with a default of 2 Bridge Max Age This is the maximum time a message with STP information is allowed by the switch before the...

Page 200: ...s Port indicates the port number Value ranges from 01 to max number of ports in the switch Type indicates the type of port TP indicates Twisted Pair Example 12 1 Viewing STP configuration ML1200 show stp config RSTP CONFIGURATION Rapid STP STP Enabled Global NO RSTP STP Enabled Ports 1 2 3 4 5 6 7 Protocol Normal RSTP Bridge ID 80 00 00 00 00 00 00 00 Bridge Priority 32768 Bridge Forward Delay 15 ...

Page 201: ...e via the stp command and use the stp enable or stp disable command To stp command enters STP configuration mode stp The enable and disable parameters start enable or stop disable STP stp enable disable The stp and rstp parameters set the spanning tree protocol to be IEEE 802 1d or 802 1w Rapid Spanning Tree Protocol set stp type stp rstp The show active stp command display which version of STP is...

Page 202: ...itch in the network is the root device Lower values mean higher priority The default value is 32768 Example 12 3 Enabling STP ML1200 show active stp Current Active Mode RSTP RSTP is Disabled ML1200 stp ERROR Invalid Command ML1200 set stp type stp STP Mode set to STP ML1200 stp ML1200 stp stp enable Successfully set the STP status ML1200 stp show stp config STP CONFIGURATION Spanning Tree Enabled ...

Page 203: ... discovery Its best to only allow trunk ports to participate in STP End stations need not participate in STP process port port number list range status enable disable The timers command changes the STP forward delay hello timer and aging timer values The forward delay parameter indicates the time duration the switch will wait from listening to learning states and from learning to forwarding states...

Page 204: ... 5 6 7 Protocol Normal STP Bridge ID 80 00 00 20 06 2b e1 54 Bridge Priority 32768 Bridge Forward Delay 15 Bridge Hello Time 2 Bridge Max Age 20 Root Port 0 Root Path Cost 0 Designated Root 80 00 00 20 06 2b e1 54 Designated Root Priority 32768 Root Bridge Forward Delay 15 Root Bridge Hello Time 2 Root Bridge Max Age 20 ML1200 stp show stp ports STP Port Configuration Port Type Priority Path Cost ...

Page 205: ...B Fiber 128 100 Disabled 80 00 00 20 06 2b e1 54 80 06 07 TP 10 100 128 100 Disabled 80 00 00 20 06 2b e1 54 80 07 ML1200 stp priority value 15535 Successfully set the bridge priority ML1200 stp show stp config STP CONFIGURATION Spanning Tree Enabled Global YES Spanning Tree Enabled Ports YES 1 2 3 4 5 6 7 Protocol Normal STP Bridge ID 3c af 00 20 06 2b e1 54 Bridge Priority 15535 Bridge Forward D...

Page 206: ... 00 00 20 06 2b e1 54 80 06 07 TP 10 100 128 100 Disabled 80 00 00 20 06 2b e1 54 80 07 ML1200 stp port port 1 status disable Successfully set the STP status for port 1 ML1200 stp show stp ports STP Port Configuration Port Type Priority Path Cost State Des Bridge Des Port 01 TP 10 100 128 100 Forwarding 80 00 00 20 06 2b e1 54 80 01 02 TP 10 100 20 20 Forwarding 80 00 00 20 06 2b e1 54 80 02 03 10...

Page 207: ...er 128 100 Disabled 80 00 00 20 06 2b e1 54 80 04 05 100MB Fiber 128 100 Disabled 80 00 00 20 06 2b e1 54 80 05 06 100MB Fiber 128 100 Disabled 80 00 00 20 06 2b e1 54 80 06 07 TP 10 100 128 100 Disabled 80 00 00 20 06 2b e1 54 80 07 ML1200 stp show stp config STP CONFIGURATION Spanning Tree Enabled Global YES Spanning Tree Enabled Ports YES 1 2 3 4 5 6 7 Protocol Normal STP Bridge ID 80 00 00 20 ...

Page 208: ...ed ML1200 stp show stp config STP CONFIGURATION Spanning Tree Enabled Global YES Spanning Tree Enabled Ports YES 1 2 3 4 5 6 7 Protocol Normal STP Bridge ID 80 00 00 20 06 2b e1 54 Bridge Priority 15535 Bridge Forward Delay 20 Bridge Hello Time 5 Bridge Max Age 30 Root Port 0 Root Path Cost 0 Designated Root 80 00 00 20 06 2b e1 54 Designated Root Priority 15535 ...

Page 209: ...bridges in the network are sure to be aware of the new topology Using STP IEEE 802 1d recommended values this period lasts 30 seconds The Rapid Spanning Tree Protocol IEEE 802 1w is a further evolution of the 802 1d Spanning Tree Protocol It replaces the settling period with an active handshake between switches bridges that guarantees topology information to be rapidly propagated through the netwo...

Page 210: ...port in the forwarding state While in this state the port both learns addresses and participates in frame transfer while in this state The result of these enhanced states is that the IEEE 802 1d version of spanning tree STP can take a fairly long time to resolve all the possible paths and to select the most efficient path through the network The IEEE 802 1w Rapid reconfiguration of Spanning Tree s...

Page 211: ...sequence frames RSTP may have to be explicitly set to be compatible with STP This requires setting the Force Protocol Version parameter to be STP compatible This parameter should be set to all ports on a given switch 2 As indicated above one of the benefits of RSTP is the implementation of a larger range of port path costs that accommodates higher network speeds New default values have been implem...

Page 212: ...r list range status enable disable migration enable edge enable disable p2p on off auto The p2p parameter sets the point to point value to off on all ports connected to shared LAN segments i e connections to hubs The default value is auto P2P ports would typically be end stations or computers on the network The edge parameter enables disables all ports connected to other hubs bridges and switches ...

Page 213: ...ority Values range from 0 to 65535 with a default of 0 Bridge Forward Delay Indicates the time duration the switch will wait from listening to learning states and from learning to forwarding states The value ranges from 4 to 30 seconds with a default of 15 Bridge Hello Time When the switch is the root device this is the time between messages being transmitted The value is from 1 to 10 seconds with...

Page 214: ...m the listening to the forwarding state This value can be set between 4 to 30 seconds with a default of 15 Root Bridge Hello Time Indicates the designated root bridge s hello time Hello information is sent out every 2 seconds Root Bridge Max Age Indicates the designated root bridge s maximum age after which it discards the information as being old and receives new updates Topology Change Count Sin...

Page 215: ...ports 9 and 10 have a path cost of 20000 and are the least cost paths These ports are connected to other switches and the ports are enabled as forwarding ports Ports 6 and 7 are also connected to other switches From the state column it indicates that port 7 is in a standby state as that port is discarding all traffic More CLI commands associated with RSTP in the RSTP configuration mode are shown b...

Page 216: ...rt command assigns ports for RSTP Note that specific ports may not need to participate in RSTP process These ports typically would be end stations If unsure it is best to let the software make the decisions port port number list range status enable disable The status parameter enables or disables a port from participating in RSTP discovery Its best to only allow trunk ports to participate in RSTP ...

Page 217: ... Bridge Hello Time 02 Bridge Max Age 20 Root Port 0 Root Path Cost 0 Designated Root 80 00 00 20 06 2b e1 55 Designated Root Priority 32768 Root Bridge Forward Delay 15 Root Bridge Hello Time 02 Root Bridge Max Age 20 Topology Change count 0 Time Since topology Chg 935 ML1200 rstp show active stp Current Active Mode RSTP RSTP is Disabled ML1200 rstp rstp enable Successfully set the RSTP status ML1...

Page 218: ...ion rstp Error Force Version already set to Normal RSTP ML1200 rstp forceversion stp ML1200 rstp show forceversion Force Version Force to STP only ML1200 rstp show stp config RSTP CONFIGURATION Rapid STP STP Enabled Global YES RSTP STP Enabled Ports 1 2 3 4 5 6 7 Protocol Force to STP only Bridge ID 80 00 00 20 06 2b e1 55 Bridge Priority 32768 Bridge Forward Delay 15 Bridge Hello Time 02 Bridge M...

Page 219: ...ot Bridge Forward Delay 15 Root Bridge Hello Time 02 Root Bridge Max Age 20 Topology Change count 0 Time Since topology Chg 1371 ML1200 rstp show timers Forward Delay Timer 15 sec Hello Timer 2 sec Max Age 20 sec ML1200 rstp show stp ports RSTP Port Configuration Port Type Priority Path Cost State Des Bridge Des Port 01 TP 10 100 128 2000000 Forwarding 80 00 00 20 06 2b e1 55 00 01 02 TP 10 100 12...

Page 220: ... TP 10 100 128 2000000 Disabled 00 07 ML1200 rstp port port 1 status disable ML1200 rstp show stp ports RSTP Port Configuration Port Type Priority Path Cost State Des Bridge Des Port 01 TP 10 100 128 2000000 NO STP 00 01 02 TP 10 100 100 250000 Forwarding 80 00 00 20 06 2b e1 55 00 02 03 100MB Fiber 128 200000 Disabled 00 03 04 100MB Fiber 128 200000 Disabled 00 04 05 100MB Fiber 128 200000 Disabl...

Page 221: ... a single fault In many situations RSTP will recover in seconds whereas smart RSTP ring only mode will recover in milliseconds To configure Ring Only mode ensure the first three of the four situations described above are met RSTP mode has to be enabled before any configuration to the ring only mode The RSTP command enters the RSTP configuration mode and enables disables RSTP By default RSTP is dis...

Page 222: ...ing smart RSTP ring only mode ML1200 rstp ML1200 rstp rstp enable Successfully set the RSTP status ML1200 rstp romode show RO MODE status Disabled RO MODE set on ports NONE ML1200 rstp romode add port 1 2 Added Ports 1 2 ML1200 rstp romode enable RSTP Ring Only Mode Enabled ML1200 rstp romode show RO MODE status Enabled RO MODE set on ports 1 2 ML1200 rstp romode disable RSTP Ring Only Mode Disabl...

Page 223: ...hen STP is not enabled the switch designates itself as the root switch Root Path Cost A path cost is assigned to individual ports for the switch to determine which ports are the forwarding points A higher cost means more loops a lower cost fewer loops More loops equal more traffic and a tree which takes a long time to converge resulting in a slower system Root Port Indicates the port number which ...

Page 224: ...ble again The value ranges from 6 to 40 seconds with a default 20 Hold Time This is the minimum time period to elapse between the transmissions of configuration BPDUs through a given LAN Port At most one configuration BPDU shall be transmitted in any hold time period This parameter is a fixed parameter with values as specified in RSTP standard 3 seconds Topology Change A counter indicating the num...

Page 225: ... INSTRUCTION MANUAL 13 17 Once again if you are not familiar with the STP or RSTP parameter settings is best to use the default values Z Simply enable RSTP or STP and let the system default values prevail After RSTP is enabled the fields are updated Z Note the Status Time since TC and Designated Root values ...

Page 226: ...off Values can be Listening Learning Forwarding Blocking and Disabled Path Cost This is the assigned port cost value used for the switch to determine the forwarding points Values range from 1 to 2000000 The lower the value the lower the cost and hence the preferred route The costs for different Ethernet speeds are shown below The STP path cost is compared to the RSTP path cost Priority STP uses th...

Page 227: ...RSTP services Status is normally enabled in certain cases the Status can be set to disabled to turn off RSTP or STP on that port 13 3 2 Smart RSTP Ring Only Mode with EnerVista Secure Web Management Software A ring is a special case mesh structure In many networks network managers prefer to create a ring structure for topological redundancy and simplicity In a ring structure 1 All switches in the ...

Page 228: ...OTOCOL To configure ring only mode ensure the first three of the four situations described above are met To enable ring only mode first Z Enable RSTP by setting the STP Type to RSTP in the Administration Set STP Type menu Z Select the Configuration RSTP Bridge RSTP menu as shown below Z Click the Edit button to configure RSTP ...

Page 229: ... the Status to Enable Z Save Configuration To reset RSTP back to normal mode select Normal RSTP for the Protocol setting Save the configuration by clicking on the icon Z Select the Configuration RSTP RO Mode menu as shown below Z Click the Edit button to configure RO Mode Z Select the desired ports as shown below then click OK to exit ENABLE STATUS THEN SAVE ...

Page 230: ...RUCTION MANUAL RAPID SPANNING TREE PROTOCOL CHAPTER 13 RAPID SPANNING TREE PROTOCOL Note Only 2 ports can be selected to Ring Only Mode Z Select the Enabled option for the Status setting as shown below Z Save the configuration by clicking on the icon ...

Page 231: ...re there are time critical applications such as voice transmission or video conferencing which can be adversely effected by packet transfer delays or other latency in a network Most switches today implement buffers to queue incoming packets as well as outgoing packets In a queue mechanism normally the packet which comes in first leaves first FIFO and all the packets are serviced accordingly Imagin...

Page 232: ...ed in the LAN MAN and WAN DiffServ works by tagging each packet at the originating device or an intermediate switch for the requested level of service it requires across the network FIGURE 14 1 ToS and DSCP DiffServ inserts a 6 bit DiffServ code point DSCP in the Type of Service ToS field of the IP header as shown in the picture above Information in the DSCP allows nodes to determine the Per Hop B...

Page 233: ...n a packet allows each queue to have different service levels MultiLink ML1200 Managed Field Switch QoS implementations provide mapping of ToS or IP precedence to Class of Service CoS A CoS setting in an Ethernet Frame is mapped to the ToS byte of the IP packet and vice versa A ToS level of 1 equals a CoS level of 1 This provides end to end priority for the traffic flow when MultiLink ML1200 Manag...

Page 234: ...alculated from the IP precedence setting for a packet This weight is used in an algorithm to determine when the packet will be serviced The show portweight command displays the weight settings on a port show portweight As mentioned previously the switch is capable of detecting higher priority packets marked with precedence by the IP forwarder and can schedule them faster providing superior respons...

Page 235: ...nsmitted as tagged from the priority queue set untag port port list range priority high low tag 0 7 Table 14 1 Port weight settings Value Hardware traffic queue behavior 0 No priority traffic is sent alternately from each queue and packets are queued alternately in each queue 1 Two packets are sent from the HIGH priority queue and one packet from LOW priority queue 2 Four packets are sent from the...

Page 236: ...TP 1 A1 E H 10Tx DOWN No 10 No E 1 2 A2 E H 10Tx DOWN No 10 No E 1 3 A3 E F 100Fx DOWN No 100 No D 1 4 A4 E F 100Fx DOWN No 100 No D 1 5 A5 E F 100Fx DOWN No 100 No D 1 6 A6 E F 100Fx DOWN No 100 No D 1 7 A7 E H 10Tx DOWN No 10 No E 1 ML1200 qos ML1200 qos setqos type port port 1 priority high Successfully set QOS ML1200 qos show qos PORT QOS STATUS 1 Port DOWN 2 None DOWN 3 None DOWN 4 None DOWN ...

Page 237: ... None DOWN 5 None DOWN 6 None DOWN 7 None DOWN ML1200 qos show qos type tag PORT Tag STATUS 1 DOWN 2 6 DOWN 3 DOWN 4 DOWN 5 DOWN 6 DOWN 7 DOWN ML1200 qos setqos port 3 priority high type tag tag 5 Successfully set QOS ML1200 qos show qos type tag PORT Tag STATUS 1 DOWN 2 6 DOWN 3 5 DOWN 4 DOWN 5 DOWN 6 DOWN 7 DOWN The queue behavior is set so that 8 high priority packets and 1 low priority packet ...

Page 238: ... SERVICE Configuring QoS continued Port priority Weight set to 1 High 1 Low ML1200 qos set weight weight 4 ML1200 qos show portweight Port priority Weight set to 8 High 1 Low ML1200 qos show qos PORT QOS STATUS 1 Port DOWN 2 Tag DOWN 3 Tag DOWN 4 None DOWN 5 None DOWN 6 None DOWN 7 None DOWN ML1200 qos ...

Page 239: ...QUALITY OF SERVICE MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL 14 9 14 3 Configuring QoS with EnerVista Secure Web Management software 14 3 1 Description To access QoS settings Z Select the Configuration QoS menu items ...

Page 240: ...and the type of QoS ToS settings The following window illustrates the setting of port 1 for port based QoS with a high priority Note the sections on Tag and TOS are ignored for Port settings After the port QoS settings are completed the changes are reflected on the QoS menu screen The port 1 QoS settings indicate high priority set ...

Page 241: ...LTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL 14 11 Next a tag based QoS is enabled on port 3 Note that only the menu area for the tag setting is relevant After the Tag QoS settings are completed the changes are reflected on the QoS menu screen ...

Page 242: ...CE In the following window a ToS is enabled on Port 5 As before only the ToS level settings are relevant Note that the different settings are clear from the window below Port 1 has port based QoS port 3 has tag based QoS and port 5 is using ToS Z After all changes are made save the changes using the save icon ...

Page 243: ... is defined as the transmission of an IP datagram to a host group a set of zero or more hosts identified by a single IP destination address A multicast datagram is delivered to all members of its destination host group with the same best efforts reliability as regular unicast IP datagrams i e the datagram is not guaranteed to arrive at all members of the destination group or in the same order rela...

Page 244: ... same multicast group address The multicast group running version 2 of IGMP uses three fundamental types of messages to communicate Query A message sent from the querier multicast router or switch asking for a response from each host belonging to the multicast group If a multicast router supporting IGMP is not present then the switch must assume this function in order to elicit group membership in...

Page 245: ...non members Thus sends large amounts of unwanted multicast traffic to PCs 2 and 3 Switch 2 is recognizing IGMP traffic and learns that PC 4 is in the IP multicast group receiving multicast data from the video server PC X Switch 2 then sends the multicast data only to PC 4 thus avoiding unwanted multicast traffic on the ports for PCs 5 and 6 The next figure below shows a network running IP multicas...

Page 246: ...IP multicast traffic on all ports of switches 1 and 2 IGMP must be configured on both switches 1 and 2 and the port on switch 3 that connects to switch 1 must be unblocked 15 1 3 IP Multicast Filters IP multicast addresses occur in the range from 224 0 0 0 through 239 255 255 255 which corresponds to the Ethernet multicast address range of 01005e 000000 through 01005e 7fffff in hexadecimal Devices...

Page 247: ...ip information Hosts on the network that are members of a multicast group send report messages When a host leaves a group it sends a leave group message The difference between Version 1 and Version 2 is that version 1 does not have a Leave mechanism for the host The MultiLink ML1200 Managed Field Switch does pruning when there is a leave message or a time expires on a port we prune the multicast g...

Page 248: ...er Interval 125 Querier Response Interval 10 Multicasting Unknown Streams Enable ML1200 igmp The output of the show igmp command provides the following useful information IGMP State shows if IGMP is turned on Enable or off Disable Immediate Leave provides a mechanism for a particular host that wants to leave a multicast group It disables the port where the leave message is received ability to tran...

Page 249: ...cs use the set port command in the IGMP configuration mode set port port port list range mode auto forward block The show port command displays the port characteristics for IGMP show port The show router command displays detected IGMP enabled router ports show router The set leave command enables or disables the switch to immediately process a host sending a leave message rather that wait for the ...

Page 250: ...g example shows how to configure IGMP Example 15 1 Configuring IGMP ML1200 igmp set port port 2 4 mode forward Port mode is set ML1200 igmp show port Port Mode 1 Auto 2 Forwarding 3 Forwarding 4 Forwarding 5 Auto 6 Auto 7 Auto ML1200 igmp show router RouterIp PortNo Timer 10 21 1 250 1 25 continued on next page ...

Page 251: ...200 igmp set querier enable IGMP querier status is enabled ML1200 igmp show igmp IGMP State Enabled ImmediateLeave Disabled Querier Enabled Querier Interval 125 Querier Response Interval 10 Multicasting Unknown Streams Enabled ML1200 igmp set querier disable IGMP querier status is disabled ML1200 igmp show igmp IGMP State Enabled ImmediateLeave Disabled Querier Disabled Querier Interval 125 Querie...

Page 252: ...ting Unknown Streams Enabled ML1200 igmp mcast disable MCAST is disabled ML1200 igmp show igmp IGMP State Enabled ImmediateLeave Disabled Querier Disabled Querier Interval 127 Querier Response Interval 11 Multicasting Unknown Streams Disabled ML1200 igmp mcast enable MCAST is enabled ML1200 igmp show igmp IGMP State Enabled ImmediateLeave Disabled Querier Disabled Querier Interval 127 Querier Resp...

Page 253: ...b Management software 15 3 1 Example For configuring IGMP Z Select the Configuration IGMP menu item The menu allows the IGMP parameters to be set and provides information on IGMP groups and routers The menu allows the IGMP parameters described earlier to be set It also provides the necessary information of IGMP groups and routers ...

Page 254: ... the Edit button to edit the IGMP parameters This screen also enables and disables IGMP Changes are reflected on the Configuration IGMP Information screen The groups and routers screen displays the IGMP Groups and IGMP Routers information All edits to IGMP are done through the Information screen ...

Page 255: ... years since 1988 using the RFC process Several RFCs define the SNMP standards The most common standards for SNMP are SNMP v1 the original version of SNMP SNMP v2 and finally SNMP v3 SNMP is a poll based mechanism SNMP manager polls the managed device for information and display the information retrieved in text or graphical manner Some definitions related to SNMP are Authentication The process of...

Page 256: ...ented from being disclosed on a network Encryption is performed with an algorithm called CBC DES DES 56 Read view A view name not to exceed 64 characters for each group that defines the list of object identifiers OIDs that are accessible for reading by users belonging to the group Security level A type of security algorithm performed on each SNMP packet The three levels are noauth auth and priv no...

Page 257: ...ng SNMP MNS supports the following RFC s and standards SNMPv1 standards Security via configuration of SNMP communities Event reporting via SNMP Managing the switch with an SNMP network management tool Supported Standard MIBs include SNMP MIB II RFC 1213 Bridge MIB RFC 1493 ifGeneralGroup ifRcvAddressGroup ifStackGroup RMON MIB RFC 1757 RMON groups 1 2 3 and 9 Statistics Events Alarms and History V...

Page 258: ...nagement Framework SNMPv2 Working Group RFC 2271 2275 SNMPv3 RFC 2104 Keyed Hashing for Message Authentication RFC 2271 An Architecture for Describing SNMP Management Frameworks RFC 2272 Message Processing and Dispatching for the Simple Network Management Protocol SNMP RFC 2273 SNMPv3 Applications RFC 2274 User Based Security Model USM for version 3 of the Simple Network Management Protocol SNMPv3...

Page 259: ...he quickcfg command automatically configures a default VACM view based access control model This allows any manager station to access the ML1200 either via SNMP v1 v2c or v3 The community name is public This command is only intended for first time users and values can be changed by administrators who want more strict access quickcfg The engineid command allows the user to change the engine ID Ever...

Page 260: ...group entries The id argument is optional and is the number corresponding to the group entry number in the table show group id id The view command defines a manager or group or manager stations what it can access inside the MIB object tree Up to 10 entries can be specified This part of the View based Access Control Model VACM as defined in RFC 2275 view add delete id id viewname name type included...

Page 261: ...e ML1200 System Location Markham ON System Contact multilin tech ge com Authentication Trap Disabled Default Trap Comm public V3 Engine ID Multi_Switch_Engine ML1200 snmpv3 ML1200 snmpv3 setvar sysname ml1200 syscontact admin syslocati ML1200 snmpv3 quickcfg This will enable default VACM Do you wish to proceed Y or N Y Quick configuration done default VACM enabled ML1200 snmpv3 engineid string Mul...

Page 262: ...ML1200 snmpv3 com2sec add id 1 secname public source default c Entry is added successfully ML1200 snmpv3 com2sec add id 2 ERROR secname parameter is required for add directive ML1200 snmpv3 com2sec add id 2 secname BCM Entry is added successfully ML1200 snmpv3 show com2sec ID Sec Name Source Community 1 public default public 2 BCM default public 3 4 5 6 7 8 9 10 ML1200 snmpv3 show com2sec id 2 Com...

Page 263: ...roup ID 1 Group Name v1 Model v1 Com2Sec ID 1 ML1200 snmpv3 view add id 1 viewname all type included subtree 1 Entry is added successfully ML1200 snmpv3 show view ID View Name Type Subtree Mask 1 all included 1 ff 2 3 4 5 6 7 8 9 10 ML1200 snmpv3 show view id 1 View ID 1 View Name all Type included Subtree 1 Mask ff ML1200 snmpv3 access add id 1 accessname v1 model v1 level noauth read 1 wri notif...

Page 264: ...auth Read View ID 1 Write View ID none Notify View ID none Context Prefix exact ML1200 snmpv3 user add id 1 username jsmith usertype readwrite authpass something Entry is added successfully ML1200 snmpv3 show user ID User Name UType AuthPass PrivPass AType Level Subtree 1 jsmith RW something MD5 auth 2 3 4 5 ML1200 snmpv3 show user id 2 ERROR Entry is not active ML1200 snmpv3 show user id 1 User I...

Page 265: ... Web Management software For SNMP v2 and v3 parameters please refer to Configuring SNMP through the Command Line Interface on page 16 5 SNMP variables are used in conjunction with Alert definitions Alert Definitions are covered in the next chapter To configure SNMP Z Select the Configuration SNMP menu item Z Use the Edit button to change the SNMP community parameters Z Use the Add buttons to add t...

Page 266: ...ed to change the community strings from the default values of public and private to other values Z When done changing the community strings click OK Multiple managers can be added as shown below Z When adding SNMP manager stations click on the Add button on the SNMP menu screen Z Make sure that each station can be pinged from the switch by using the Configuration Ping menu ...

Page 267: ...en adding SNMP trap receivers click on the Add button on the SNMP menu screen Z Make sure that each station can be pinged from the switch by using the Administration Ping menu Z Determine which sorts of traps each station will receive as shown above If not sure select all three types Z When done adding trap receivers click OK ...

Page 268: ... SNMP Note the different types of trap receivers added Stations can be deleted using the delete icon To change the stations characteristics or IP addresses it is recommended to delete the station and add a new one Z After all changes are made save the changes using the save icon ...

Page 269: ...s are generated when RMON alarms are triggered 16 4 2 Commands The following RMON communities when defined enable the specific RMON group as show above The rmon command enter the RMON configuration mode to setup RMON groups and communities rmon The history command defines the RMON history group and the community string associated with the group history def owner string def comm string The statisti...

Page 270: ... 16 MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL SNMP CHAPTER 16 SNMP ML1200 rmon show rmon event RMON Event Default Owner test RMON Event Default Community somestring ML1200 rmon exit ML1200 ...

Page 271: ...ransports for sending and receiving e mails it is extremely beneficial for a network administrator to receive e mails in case of faults and alerts The MultiLink ML1200 Managed Field Switch can be setup to send and e mail alert when a trap is generated If this capability is used please ensure that SPAM filters and other filters are not set to delete these e mails GE Multilin recommends that a rule ...

Page 272: ...e I A C F D ip ip addr port 1 65535 domain domain The add command has the following additional parameters The email parameter is the e mail address of the recipient The optional traps parameter represents the trap filter If value is all all traps of any type will be sent to this recipient If value is none no traps are sent to this recipient Value can also be a combination of S SNMP R RMON and E en...

Page 273: ...l addr from email addr subject string body string The server command configures the global SMTP server settings server ip ip addr port 1 65535 retry 0 3 domain domain For this command ip represents the SMTP server IP address port the TCP port to be used for SMTP communications default is 25 and retry specifies how many times to retry if an error occurs when sending e mail from 0 to 3 with default ...

Page 274: ...r Port 25 Retry Count 3 ML1200 smtp add id 1 email jsmith ge com traps s events CF Recipient successfully added ML1200 smtp add id 2 email xyz abc com traps all events all ip 3 30 154 28 port 25 domain abc com Recipient successfully added ML1200 smtp show smtp recipients ID E mail Address SMTP Server From Domain Port Traps Events 1 jsmith ge com 3 94 210 25 ge com 25 S FC 2 xyz abc com 3 30 154 28...

Page 275: ... The EnerVista Secure Web Management software allows for the display of several statistics in a graphical format These are described below To view statistics Z Select the Configuration Statistics menu item To view port specific statistics Z Select the Configuration Statistics Port Statistics menu item Each port can be viewed by clicking on the back or forward buttons Each group represents differen...

Page 276: ...0 MANAGED FIELD SWITCH INSTRUCTION MANUAL MISCELLANEOUS COMMANDS CHAPTER 17 MISCELLANEOUS COMMANDS The following figure displays the port statistics for group 2 The following figure displays the port statistics for group 3 ...

Page 277: ... in the MultiLink ML1200 Managed Field Switch is not overrun The important parameters to set for any serial connectivity software is to set the line delay to be 500 ms and the character delay to be 50 ms For example using HyperTerminal this can be set under File Properties When the Properties window is open click on the ASCII Setup button and in the Line Delay entry box enter in 500 and in the Cha...

Page 278: ...repeats the last command The 1 2 n commands repeat the nth command as indicated by a show history n The show history command displays the last 25 executed commands If less than 25 commands were executed only those commands executed are shown show history The history is cleared if the user logs out or if the switch times out The history count restarts when the user logs in The show version command ...

Page 279: ...ve count 1 time 20ms 3 94 248 61 is alive count 2 time 20ms 3 94 248 61 is alive count 3 time 40ms ML1200 Many devices do not respond to ping or block ping commands Make sure that the target device responds or the network allows the ping packets to propagate 17 5 2 Ping through EnerVista Secure Web Management software The ping command can be used from EnerVista Secure Web Management software to te...

Page 280: ... used to set the prompt These are n system name c system contact l system location i system IP address m system MAC address v version the dollar sign character r new line b space A few examples on how the system prompt can be setup are shown below ML1200 snmp ML1200 snmp setvar sysname Core System variable s set successfully ML1200 snmp exit ML1200 set prompt n Core set prompt n b i Core 192 168 5...

Page 281: ... event message Once the log has received 1000 entries it discards the current oldest line with information level severity only each time a new line is received The event log window contains 22 log entry lines and can be positioned to any location in the log 17 7 2 Command Line Interface Example The following example illustrates a typical event log Example 17 2 Typical system event log ML1200 show ...

Page 282: ...or example html for an HTML file ML1200 exportlog mode tftp 192 168 5 2 file eventlog doctype html Do you wish to export the event logs Y or N Y Successfully uploaded the event log file ML1200 exportlog mode tftp 192 168 5 2 file eventlog txt doctype raw Do you wish to export the event logs Y or N Y Successfully uploaded the event log file 17 7 3 EnerVista Example The EnerVista Secure Web Manageme...

Page 283: ...c type of log can be viewed by using the drop down menu as shown below In this example only informational logs are displayed The Clear button clears all the logs To prevent accidental erasures you will be prompted again if the logs should be deleted The Event Log records operating events as single line entries listed in chronological order For details on event log records refer to Chapter 17 Descr...

Page 284: ...lays the configured daylight savings settings show gateway displays the gateway of the system show gvrp displays the GVRP parameters show host displays the host table for FTP users show igmp displays the IGMP parameters show interfaces display the interface information show ip displays the system IP address show ip access displays the IP address access list show ipconfig displays the IP configurat...

Page 285: ...show timeout displays the system inactivity time out show timezone displays the configured time zone of the device show uptime displays up time of the system show users displays all configured users show version displays current version of the software show vlan displays the VLAN parameters of a specified type show web The set commands are listed below set bootmode set date year set daylight count...

Page 286: ...quests tftp telnet connects to the remote system through telnet terminal to set the terminal size xmodem 17 8 2 Configuration commands The access commands are shown below allow allows the IP address deny denies the IP address dhcp enables or disables the DHCP modbus enables or disables access to Modbus map remove removeall snmp enables or disables SNMP ssl telnet web The alarm commands are shown b...

Page 287: ...P parameters for dynamic VLAN set forbid sets forbidden ports for a tag based VLAN show ports show ports current GVRP state show forbid show forbidden ports for tag based VLAN set ports set GVRP port state usage show vlan shows dynamic static tag based VLANs static convert dynamic VLAN to static VLAN The IGMP commands are shown below Refer to Chapter 15 IGMP for additional details mcast set leave ...

Page 288: ...s setqos configures QOS configuration usage set untag set weight sets the port priority weights for all the ports in all the device show portweight displays the current port weight priority The remote monitoring RMON commands are shown below Refer to Chapter 16 Configuring RMON for additional details alarm sets the owner for the alarm group event sets the owner for the event group help rmon histor...

Page 289: ... adds or deletes the SNMP manager IP setvar configures system name contact or location traps adds or deletes a trap receiver The Simple Network Time Protocol SNTP commands are shown below Refer to Chapter 5 Network Time for additional details delete deletes the SNTP server from SNTP server database help sntp setsntp adds SNTP server into the SNTP server database sntp configures parameters for SNTP...

Page 290: ...ION MANUAL MISCELLANEOUS COMMANDS CHAPTER 17 MISCELLANEOUS COMMANDS The VLAN commands are shown below Refer to Chapter 10 VLAN for additional details add delete edit save set egress set ingress set port show egress show ingress show port start stop vlan ...

Page 291: ...age fields The Modbus protocol thus operates at the layer 7 of the OSI 7 layer stack Additional information on Modbus can be found at http www modbus org and other related sites RFC 1122 Requirements for Internet Hosts Communication Layers defines how Modbus packets can be carried over a TCP IP transport and how Modicon controllers or other PLC devices can communicate over a TCP IP network To faci...

Page 292: ...ss to Modbus disabaled Modbus is Using Port 502 Modbus is Using Device 5 ML1200 access ML1200 access modbus enable Enabling Access to Modbus ML1200 access show modbus Access to Modbus enabled Modbus is Using Port 502 Modbus is Using Device 5 ML1200 access modbus port 602 Modbus Port is set ML1200 access show modbus Access to Modbus enabled Modbus is Using Port 602 Modbus is Using Device 5 ML1200 a...

Page 293: ...DBUS PROTOCOL MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL 18 3 18 1 3 EnerVista Settings To modify the Modbus settings through EnerVista Secure Web Management software Z Select the Configuration Access Modbus menu item ...

Page 294: ...30 Netmask byte 2 1 to 254 1 F1 0 0031 Netmask byte 3 1 to 254 1 F1 0 0032 Gateway byte 0 1 to 254 1 F1 0 0033 Gateway byte 1 1 to 254 1 F1 0 0034 Gateway byte 2 1 to 254 1 F1 0 0035 Gateway byte 3 1 to 254 1 F1 0 0036 MAC address 3 registers String Varies 0039 Order code 16 registers String Varies 0049 Power alarm 1 0 to 1 1 F2 0 004A Power alarm 2 0 to 1 1 F2 0 004B Stp State 0 to 1 1 F3 0 004C ...

Page 295: ... 0 to 1 1 F3 0 0077 Port 2 link status 0 to 1 1 F3 0 0078 Port 3 link status 0 to 1 1 F3 0 0079 Port 4 link status 0 to 1 1 F3 0 007A Port 5 link status 0 to 1 1 F3 0 007B Port 6 link status 0 to 1 1 F3 0 007C Port 7 link status 0 to 1 1 F3 0 007D Port 8 link status 0 to 1 1 F3 0 007E Port 9 link status 0 to 1 1 F3 0 007F Port 10 link status 0 to 1 1 F3 0 0080 Port 11 link status 0 to 1 1 F3 0 008...

Page 296: ... 1 F3 0 00A4 Port 15 STP state 0 to 1 1 F3 0 00A5 Port 16 STP state 0 to 1 1 F3 0 00A6 Port 17 STP state 0 to 1 1 F3 0 00A7 Port 18 STP state 0 to 1 1 F3 0 00A8 Port 19 STP state 0 to 1 1 F3 0 00A9 Port 20 STP state 0 to 1 1 F3 0 00AA Port 21 STP state 0 to 1 1 F3 0 00AB Port 22 STP state 0 to 1 1 F3 0 00AC Port 23 STP state 0 to 1 1 F3 0 00AD Port 24 STP state 0 to 1 1 F3 0 00AE Port 25 STP state...

Page 297: ...0 to 1 1 F3 0 00D3 Port 30 activity 0 to 1 1 F3 0 00D4 Port 31 activity 0 to 1 1 F3 0 00D5 Port 32 activity 0 to 1 1 F3 0 00D6 Port 1 Number of bytes received 0 to 4294967295 1 F9 0 00D8 Port 1 Number of bytes sent 0 to 4294967295 1 F9 0 00DA Port 1 Number of frames received 0 to 4294967295 1 F9 0 00DC Port 1 Number of frames sent 0 to 4294967295 1 F9 0 00DE Port 1 Total bytes received 0 to 429496...

Page 298: ...od CRC 0 to 4294967295 1 F9 0 0108 Port 2 Number of bytes received 0 to 4294967295 1 F9 0 010A Port 2 Number of bytes sent 0 to 4294967295 1 F9 0 010C Port 2 Number of frames received 0 to 4294967295 1 F9 0 010E Port 2 Number of frames sent 0 to 4294967295 1 F9 0 0110 Port 2 Total bytes received 0 to 4294967295 1 F9 0 0112 Port 2 Total frames received 0 to 4294967295 1 F9 0 0114 Port 2 Number of b...

Page 299: ...sent 0 to 4294967295 1 F9 0 0142 Port 3 Total bytes received 0 to 4294967295 1 F9 0 0144 Port 3 Total frames received 0 to 4294967295 1 F9 0 0146 Port 3 Number of broadcast frames received 0 to 4294967295 1 F9 0 0148 Port 3 Number of multicast frames received 0 to 4294967295 1 F9 0 014A Port 3 Number of frames with CRC error 0 to 4294967295 1 F9 0 014C Port 3 Number of oversized frames received 0 ...

Page 300: ... multicast frames received 0 to 4294967295 1 F9 0 017C Port 4 Number of frames with CRC error 0 to 4294967295 1 F9 0 017E Port 4 Number of oversized frames received 0 to 4294967295 1 F9 0 0180 Port 4 Number of bad fragments received 64 bytes 0 to 4294967295 1 F9 0 0182 Port 4 Number of jabber frames received 0 to 4294967295 1 F9 0 0184 Port 4 Number of collisions occurred 0 to 4294967295 1 F9 0 01...

Page 301: ...agments received 64 bytes 0 to 4294967295 1 F9 0 01B4 Port 5 Number of jabber frames received 0 to 4294967295 1 F9 0 01B6 Port 5 Number of collisions occurred 0 to 4294967295 1 F9 0 01B8 Port 5 Number of late collisions occurred 0 to 4294967295 1 F9 0 01BA Port 5 Number of 64 byte frames received sent 0 to 4294967295 1 F9 0 01BC Port 5 Number of 65 to 127 byte frames received sent 0 to 4294967295 ...

Page 302: ...Number of late collisions occurred 0 to 4294967295 1 F9 0 01EC Port 6 Number of 64 byte frames received sent 0 to 4294967295 1 F9 0 01EE Port 6 Number of 65 to 127 byte frames received sent 0 to 4294967295 1 F9 0 01F0 Port 6 Number of 128 to 255 byte frames received sent 0 to 4294967295 1 F9 0 01F2 Port 6 Number of 256 to 511 byte frames received sent 0 to 4294967295 1 F9 0 01F4 Port 6 Number of 5...

Page 303: ...s received sent 0 to 4294967295 1 F9 0 0222 Port 7 Number of 128 to 255 byte frames received sent 0 to 4294967295 1 F9 0 0224 Port 7 Number of 256 to 511 byte frames received sent 0 to 4294967295 1 F9 0 0226 Port 7 Number of 512 to 1023 byte frames received sent 0 to 4294967295 1 F9 0 0228 Port 7 Number of 1023 to maximum byte frames received sent 0 to 4294967295 1 F9 0 022A Port 7 Number of MAC e...

Page 304: ...967295 1 F9 0 0258 Port 8 Number of 512 to 1023 byte frames received sent 0 to 4294967295 1 F9 0 025A Port 8 Number of 1023 to maximum byte frames received sent 0 to 4294967295 1 F9 0 025C Port 8 Number of MAC error packets 0 to 4294967295 1 F9 0 025E Port 8 Number of dropped received packets 0 to 4294967295 1 F9 0 0260 Port 8 Number of multicast frames sent 0 to 4294967295 1 F9 0 0262 Port 8 Numb...

Page 305: ...kets 0 to 4294967295 1 F9 0 0290 Port 9 Number of dropped received packets 0 to 4294967295 1 F9 0 0292 Port 9 Number of multicast frames sent 0 to 4294967295 1 F9 0 0294 Port 9 Number of broadcast frames sent 0 to 4294967295 1 F9 0 0296 Port 9 Number of 64 byte fragments with good CRC 0 to 4294967295 1 F9 0 0298 Port 10 Number of bytes received 0 to 4294967295 1 F9 0 029A Port 10 Number of bytes s...

Page 306: ... 0 to 4294967295 1 F9 0 02C8 Port 10 Number of 64 byte fragments with good CRC 0 to 4294967295 1 F9 0 02CA Port 11 Number of bytes received 0 to 4294967295 1 F9 0 02CC Port 11 Number of bytes sent 0 to 4294967295 1 F9 0 02CE Port 11 Number of frames received 0 to 4294967295 1 F9 0 02D0 Port 11 Number of frames sent 0 to 4294967295 1 F9 0 02D2 Port 11 Total bytes received 0 to 4294967295 1 F9 0 02D...

Page 307: ...12 Number of frames received 0 to 4294967295 1 F9 0 0302 Port 12 Number of frames sent 0 to 4294967295 1 F9 0 0304 Port 12 Total bytes received 0 to 4294967295 1 F9 0 0306 Port 12 Total frames received 0 to 4294967295 1 F9 0 0308 Port 12 Number of broadcast frames received 0 to 4294967295 1 F9 0 030A Port 12 Number of multicast frames received 0 to 4294967295 1 F9 0 030C Port 12 Number of frames w...

Page 308: ...er of broadcast frames received 0 to 4294967295 1 F9 0 033C Port 13 Number of multicast frames received 0 to 4294967295 1 F9 0 033E Port 13 Number of frames with CRC error 0 to 4294967295 1 F9 0 0340 Port 13 Number of oversized frames received 0 to 4294967295 1 F9 0 0342 Port 13 Number of bad fragments received 64 bytes 0 to 4294967295 1 F9 0 0344 Port 13 Number of jabber frames received 0 to 4294...

Page 309: ...sized frames received 0 to 4294967295 1 F9 0 0374 Port 14 Number of bad fragments received 64 bytes 0 to 4294967295 1 F9 0 0376 Port 14 Number of jabber frames received 0 to 4294967295 1 F9 0 0378 Port 14 Number of collisions occurred 0 to 4294967295 1 F9 0 037A Port 14 Number of late collisions occurred 0 to 4294967295 1 F9 0 037C Port 14 Number of 64 byte frames received sent 0 to 4294967295 1 F...

Page 310: ... 15 Number of collisions occurred 0 to 4294967295 1 F9 0 03AC Port 15 Number of late collisions occurred 0 to 4294967295 1 F9 0 03AE Port 15 Number of 64 byte frames received sent 0 to 4294967295 1 F9 0 03B0 Port 15 Number of 65 to 127 byte frames received sent 0 to 4294967295 1 F9 0 03B2 Port 15 Number of 128 to 255 byte frames received sent 0 to 4294967295 1 F9 0 03B4 Port 15 Number of 256 to 51...

Page 311: ...94967295 1 F9 0 03E2 Port 16 Number of 65 to 127 byte frames received sent 0 to 4294967295 1 F9 0 03E4 Port 16 Number of 128 to 255 byte frames received sent 0 to 4294967295 1 F9 0 03E6 Port 16 Number of 256 to 511 byte frames received sent 0 to 4294967295 1 F9 0 03E8 Port 16 Number of 512 to 1023 byte frames received sent 0 to 4294967295 1 F9 0 03EA Port 16 Number of 1023 to maximum byte frames r...

Page 312: ...t 17 Number of 256 to 511 byte frames received sent 0 to 4294967295 1 F9 0 041A Port 17 Number of 512 to 1023 byte frames received sent 0 to 4294967295 1 F9 0 041C Port 17 Number of 1023 to maximum byte frames received sent 0 to 4294967295 1 F9 0 041E Port 17 Number of MAC error packets 0 to 4294967295 1 F9 0 0420 Port 17 Number of dropped received packets 0 to 4294967295 1 F9 0 0422 Port 17 Numbe...

Page 313: ...received sent 0 to 4294967295 1 F9 0 0450 Port 18 Number of MAC error packets 0 to 4294967295 1 F9 0 0452 Port 18 Number of dropped received packets 0 to 4294967295 1 F9 0 0454 Port 18 Number of multicast frames sent 0 to 4294967295 1 F9 0 0456 Port 18 Number of broadcast frames sent 0 to 4294967295 1 F9 0 0458 Port 18 Number of 64 byte fragments with good CRC 0 to 4294967295 1 F9 0 045A Port 19 N...

Page 314: ...sent 0 to 4294967295 1 F9 0 0488 Port 19 Number of broadcast frames sent 0 to 4294967295 1 F9 0 048A Port 19 Number of 64 byte fragments with good CRC 0 to 4294967295 1 F9 0 048C Port 20 Number of bytes received 0 to 4294967295 1 F9 0 048E Port 20 Number of bytes sent 0 to 4294967295 1 F9 0 0490 Port 20 Number of frames received 0 to 4294967295 1 F9 0 0492 Port 20 Number of frames sent 0 to 429496...

Page 315: ...7295 1 F9 0 04C0 Port 21 Number of bytes sent 0 to 4294967295 1 F9 0 04C2 Port 21 Number of frames received 0 to 4294967295 1 F9 0 04C4 Port 21 Number of frames sent 0 to 4294967295 1 F9 0 04C6 Port 21 Total bytes received 0 to 4294967295 1 F9 0 04C8 Port 21 Total frames received 0 to 4294967295 1 F9 0 04CA Port 21 Number of broadcast frames received 0 to 4294967295 1 F9 0 04CC Port 21 Number of m...

Page 316: ...FA Port 22 Total frames received 0 to 4294967295 1 F9 0 04FC Port 22 Number of broadcast frames received 0 to 4294967295 1 F9 0 04FE Port 22 Number of multicast frames received 0 to 4294967295 1 F9 0 0500 Port 22 Number of frames with CRC error 0 to 4294967295 1 F9 0 0502 Port 22 Number of oversized frames received 0 to 4294967295 1 F9 0 0504 Port 22 Number of bad fragments received 64 bytes 0 to ...

Page 317: ... with CRC error 0 to 4294967295 1 F9 0 0534 Port 23 Number of oversized frames received 0 to 4294967295 1 F9 0 0536 Port 23 Number of bad fragments received 64 bytes 0 to 4294967295 1 F9 0 0538 Port 23 Number of jabber frames received 0 to 4294967295 1 F9 0 053A Port 23 Number of collisions occurred 0 to 4294967295 1 F9 0 053C Port 23 Number of late collisions occurred 0 to 4294967295 1 F9 0 053E ...

Page 318: ...ber of jabber frames received 0 to 4294967295 1 F9 0 056C Port 24 Number of collisions occurred 0 to 4294967295 1 F9 0 056E Port 24 Number of late collisions occurred 0 to 4294967295 1 F9 0 0570 Port 24 Number of 64 byte frames received sent 0 to 4294967295 1 F9 0 0572 Port 24 Number of 65 to 127 byte frames received sent 0 to 4294967295 1 F9 0 0574 Port 24 Number of 128 to 255 byte frames receive...

Page 319: ...A2 Port 25 Number of 64 byte frames received sent 0 to 4294967295 1 F9 0 05A4 Port 25 Number of 65 to 127 byte frames received sent 0 to 4294967295 1 F9 0 05A6 Port 25 Number of 128 to 255 byte frames received sent 0 to 4294967295 1 F9 0 05A8 Port 25 Number of 256 to 511 byte frames received sent 0 to 4294967295 1 F9 0 05AA Port 25 Number of 512 to 1023 byte frames received sent 0 to 4294967295 1 ...

Page 320: ...to 255 byte frames received sent 0 to 4294967295 1 F9 0 05DA Port 26 Number of 256 to 511 byte frames received sent 0 to 4294967295 1 F9 0 05DC Port 26 Number of 512 to 1023 byte frames received sent 0 to 4294967295 1 F9 0 05DE Port 26 Number of 1023 to maximum byte frames received sent 0 to 4294967295 1 F9 0 05E0 Port 26 Number of MAC error packets 0 to 4294967295 1 F9 0 05E2 Port 26 Number of dr...

Page 321: ... 0 to 4294967295 1 F9 0 0610 Port 27 Number of 1023 to maximum byte frames received sent 0 to 4294967295 1 F9 0 0612 Port 27 Number of MAC error packets 0 to 4294967295 1 F9 0 0614 Port 27 Number of dropped received packets 0 to 4294967295 1 F9 0 0616 Port 27 Number of multicast frames sent 0 to 4294967295 1 F9 0 0618 Port 27 Number of broadcast frames sent 0 to 4294967295 1 F9 0 061A Port 27 Numb...

Page 322: ...ed packets 0 to 4294967295 1 F9 0 0648 Port 28 Number of multicast frames sent 0 to 4294967295 1 F9 0 064A Port 28 Number of broadcast frames sent 0 to 4294967295 1 F9 0 064C Port 28 Number of 64 byte fragments with good CRC 0 to 4294967295 1 F9 0 064E Port 29 Number of bytes received 0 to 4294967295 1 F9 0 0650 Port 29 Number of bytes sent 0 to 4294967295 1 F9 0 0652 Port 29 Number of frames rece...

Page 323: ... CRC 0 to 4294967295 1 F9 0 0680 Port 30 Number of bytes received 0 to 4294967295 1 F9 0 0682 Port 30 Number of bytes sent 0 to 4294967295 1 F9 0 0684 Port 30 Number of frames received 0 to 4294967295 1 F9 0 0686 Port 30 Number of frames sent 0 to 4294967295 1 F9 0 0688 Port 30 Total bytes received 0 to 4294967295 1 F9 0 068A Port 30 Total frames received 0 to 4294967295 1 F9 0 068C Port 30 Number...

Page 324: ...ent 0 to 4294967295 1 F9 0 06BA Port 31 Total bytes received 0 to 4294967295 1 F9 0 06BC Port 31 Total frames received 0 to 4294967295 1 F9 0 06BE Port 31 Number of broadcast frames received 0 to 4294967295 1 F9 0 06C0 Port 31 Number of multicast frames received 0 to 4294967295 1 F9 0 06C2 Port 31 Number of frames with CRC error 0 to 4294967295 1 F9 0 06C4 Port 31 Number of oversized frames receiv...

Page 325: ...multicast frames received 0 to 4294967295 1 F9 0 06F4 Port 32 Number of frames with CRC error 0 to 4294967295 1 F9 0 06F6 Port 32 Number of oversized frames received 0 to 4294967295 1 F9 0 06F8 Port 32 Number of bad fragments received 64 bytes 0 to 4294967295 1 F9 0 06FA Port 32 Number of jabber frames received 0 to 4294967295 1 F9 0 06FC Port 32 Number of collisions occurred 0 to 4294967295 1 F9 ...

Page 326: ...umber of multicast frames sent 0 to 4294967295 1 F9 0 0712 Port 32 Number of broadcast frames sent 0 to 4294967295 1 F9 0 0714 Port 32 Number of 64 byte fragments with good CRC 0 to 4294967295 1 F9 0 0716 Serial Number String Varies Table 18 1 Modbus memory map Sheet 33 of 33 Address Description Range Step Format Default ...

Page 327: ...ers Encoded in big endian F1 16 bit unsigned integer F2 Enumeration power alarm 0 power supply good 1 power supply fail F3 Enumeration OFF ON 0 Off 1 On F4 Enumeration port type 0 Giga GBIC 1 Copper TP 2 Fiber 10 3 Fiber 100 4 Giga 10 100 1000 triple speed 5 Giga Copper 1000 TP 6 Giga SFP F9 32 bit unsigned long String A sequence of octets packed 2 to one register in sequence ...

Page 328: ...18 38 MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL MODBUS PROTOCOL CHAPTER 18 MODBUS PROTOCOL ...

Page 329: ...A Digital Energy Multilin AppendixA A 1 Revision History A 1 1 Change Notes A 1 2 Changes to the Manual Table A 1 Revision history Part Number Revision Release Date 1601 9095 A1 3 3 0 3 June 2009 Table A 2 Updates for Manual Revision A1 Section Description General New Manual A1 General Firmware release 3 3 0 ...

Page 330: ...ve and it is returned with all transportation charges prepaid to an authorized service centre or the factory Repairs or replacement under warranty will be made without charge Warranty shall not apply to any relay which has been subject to misuse negligence accident incorrect installation or use not in accordance with instructions nor any unit that has been altered outside a GE Multilin authorized ...

Page 331: ...MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL B 1 Multilink ML1200 Managed Field Switch Appendix B DC Power Input Digital Energy Multilin DCPowerInput ...

Page 332: ...24VDC 48VDC as well as 125VDC applications in different industries DC Power Terminals are internally floating so that user may ground either GND ground wire connection to the ML1200 chassis screw Power Consumption 35 watts typical for a fully loaded fiber model 12 watts typical for a small 4 port copper only model 24 V DC Power Input nominal 18 to 36VDC range 48 V DC Power Input nominal 36 to 60 V...

Page 333: ...ower input line behind the two external power connection terminals so that the power from an external source can only flow into the hub This allows the Switch to operate only whenever DC power is correctly applied to the two inputs It protects the Switch from incorrect DC input connections An incorrect polarity connection for example will neither affect the Switch its internal power supply nor wil...

Page 334: ...lephone service providers Internet Service Providers ISPs and other communication companies In addition many high availability equipment services such as broadcasters publishers newspaper operations brokerage firms and other facilities often use a battery backup system to maintain operations in the event of a power failure It is also frequently used for computer system backup management and operat...

Page 335: ...itive and negative screws The use of Ground GND connects to the Switch chassis screw provided under the DC terminal Ensure that each lead is securely tightened Note Always use a voltmeter to measure the voltage of the incoming power supply and figure out the ve potential lead or ve potential lead The more ve potential lead will connect to the post labeled ve and the rest to the ve The GND can be h...

Page 336: ...o a Centralized DC power source 2 Minimum 14AWG cable for connection to a earth wiring 3 Use only with Listed 10 A circuit breaker provided in building installation 4 Complies with FDA radiation performance standards 21 CFR subchapter J or equivalent 5 Fastening torque of the lugs on the terminal block 9 inch pound max 6 To secure a centralized DC Power Source cable use at least four cable ties to...

Page 337: ...00 MANAGED FIELD SWITCH INSTRUCTION MANUAL B 7 B 6 Operation Operation of Multilink ML1200 Switches with the optional 48 V DC 12 V DC 24 V DC 125 V DC or 250 V DC dual source power input is identical to that of the standard single source DC powered models ...

Page 338: ...B 8 MULTILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL DC POWER INPUT CHAPTER B DC POWER INPUT ...

Page 339: ...TILINK ML1200 MANAGED FIELD SWITCH INSTRUCTION MANUAL C 1 Multilink ML1200 Managed Field Switch Appendix C Internal DC Dual Source Power Input Digital Energy Multilin InternalDCDual SourcePowerInputOption ...

Page 340: ...nd Source B B GND ground wire connection to the hub chassis screw Input Two separate sources each at 18 36 VDC Power Supply Internal 125VDC Dual Source model Dual Src 125V DC Power Connector First Source A A 2nd Source B B GND ground wire connection to the hub chassis screw Input Two separate sources each at 88 150 VDC Power Supply Internal 250VDC Dual Source model Dual Src 250V DC Power Connector...

Page 341: ... 250VDC Dual Source power supply are designed for installations where a battery plant is the power source and where two separate power sources are utilized in order to increase operational uptime and to simplify maintenance The functionality of the Multilink ML1200 Switch 48VDC 12VDC 24VDC 125VDC and 250VDC Dual Source Option units is identical to the standard AC powered models Refer to the main s...

Page 342: ...Operation The Dual Source DC power option is designed using diodes inside of the chassis on each DC power input line A diode is placed in each of the four input lines behind the four external power connection terminals so that power from an external source can only flow into the unit This allows the unit to operate whenever DC power is correctly applied to either or both of the two inputs ...

Page 343: ...er sources are not mixed together by the hub When one correct DC input is present the Switch will receive power if the other DC input is absent or even if it is connected with reverse polarity or shorted or grounded Reverse polarity connections if they should accidentally occur on either input will not damage the Switch or power supply internally nor will it blow the fuse in the internal power sup...

Page 344: ... negative B positive B The chassis is earth ground GND The Dual Source terminal block for the 12 24 48 125 and 250VDC are the same Note The GND should be hooked up first The ML1200 unit has a floating ground so the user may elect to Ground either or terminal to suit the customer s use Before connecting live power lines to the terminal block always use a digital voltmeter to measure the output volt...

Reviews:

No comments

Brands by name

Popular brands

Load more brands