GeoVision GV-POE0812 User Manual Download Page 4

Page: 4 / 360

4.1.5.3 Security - Switch - Authentication Method ....................................... 49

4.1.5.4 Security - Switch - SSH .................................................................. 50

4.1.5.5 Security - Switch - HTTPS .............................................................. 51

4.1.5.6 Security - Switch - Access Management .......................................... 52

4.1.5.7 Security - Switch - SNMP ............................................................... 53

4.1.5.7.1 Security - Switch - SNMP - System ........................................... 53

4.1.5.7.2 Security - Switch - SNMP - Trap ............................................... 57

4.1.5.7.3 Security - Switch - SNMP - Community ..................................... 59

4.1.5.7.4 Security - Switch - SNMP - User ............................................... 60

4.1.5.7.5 Security - Switch - SNMP - Groups ........................................... 62

4.1.5.7.6 Security - Switch - SNMP - Views ............................................. 63

4.1.5.7.7 Security - Switch - SNMP - Access ........................................... 64

4.1.5.8 Security - Switch - RMON ............................................................... 65

4.1.5.8.1 Security - Switch - RMON - Statistics ........................................ 65

4.1.5.8.2 Security - Switch - RMON - History ........................................... 66

4.1.5.8.3 Security - Switch - RMON - Alarm ............................................. 67

4.1.5.8.4 Security - Switch - RMON - Event ............................................. 69

4.1.5.9 Security - Network - Limit Control ................................................... 70

4.1.5.10 Security - Network - NAS (Network Access Server) ....................... 73

4.1.5.11 Security - Network - ACL .............................................................. 83

4.1.5.11.1 Security - Network - ACL - Ports ................................................. 83

4.1.5.11.2 Security - Network - ACL - Rate Limiter ................................... 85

4.1.5.11.3 Security - Network - ACL - Access Control List ........................ 86

4.1.5.12 Security - Network - IP Source Guard ......................................... 100

4.1.5.12.1. Security - Network - IP Source Guard - Configuration ........... 100

4.1.5.12.2 Security - Network - IP Source Guard - Static Table .............. 101

4.1.5.13 Security - Network - ARP Inspection ........................................... 102

4.1.5.13.1 Security - Network - ARP Inspection

Port Configuration ...... 102

4.1.5.13.2 Security - Network - ARP Inspection – VLAN Configuration ... 104

4.1.5.13.3 Security - Network - ARP Inspection - Static Table ................ 105

4.1.5.13.4 Security - Network - ARP Inspection - Dynamic Table ............ 106

4.1.5.14 Security – AAA ........................................................................... 108

4.1.5.14.1 Security - AAA - RADIUS ...................................................... 108

4.1.5.14.2 Security - AAA - .................................................... 111

4.1.6 Configuration - Aggregation ................................................................ 113

4.1.6.1 Aggregation - Static ...................................................................... 113

4.1.6.2 Aggregation - LACP...................................................................... 115

4.1.7 Configuration - Loop Protection .......................................................... 117

4.1.8 Configuration - Spanning Tree ............................................................ 119

iii

Summary of Contents for GV-POE0812

Page 1: ...GV POE0812 User s Manual GV PoE Switch POE0812 A Before attempting to connect or operate this product please read these instructions carefully and save this manual for future use...

Page 2: ...errors or omissions No liability is assumed for incidental or consequential damages arising from the use of the information or products contained herein Features and specifications are subject to cha...

Page 3: ...face 20 4 Web Management 22 4 1 Web Management Configure 23 4 1 1 Configuration System 25 4 1 1 1 System Information 25 4 1 1 2 System IP 26 4 1 1 3 System NTP 29 4 1 1 4 System Time 30 4 1 1 5 System...

Page 4: ...S Network Access Server 73 4 1 5 11 Security Network ACL 83 4 1 5 11 1 Security Network ACL Ports 83 4 1 5 11 2 Security Network ACL Rate Limiter 85 4 1 5 11 3 Security Network ACL Access Control List...

Page 5: ...ion 141 4 1 11 2 2 IPMC MLD Snooping VLAN Configuration 143 4 1 11 2 3 IPMC MLD Snooping Port Filtering Profile 146 4 1 12 Configuration LLDP 147 4 1 12 1 LLDP LLDP 147 4 1 12 2 LLDP LLDP MED 150 4 1...

Page 6: ...Monitor System 214 4 2 1 1 System Information 214 4 2 1 2 System CPU Load 216 4 2 1 3 System IP Status 217 4 2 1 4 System Log 219 4 2 1 5 System Detailed Log 220 4 2 2 Monitor Green Ethernet 221 4 2...

Page 7: ...Alarm 268 4 2 5 4 4 Security Switch RMON Events 270 4 2 6 Monitor LACP 271 4 2 6 1 LACP System Status 271 4 2 6 2 LACP Port Status 272 4 2 6 3 LACP Port Statistics 273 4 2 7 Monitor Loop Protection 27...

Page 8: ...cs Ping 316 4 3 2 Diagnostics Ping6 317 4 3 3 Diagnostics VeriPHY 319 4 4 Web Management Maintenance 321 4 4 1 Maintenance Restart Device 321 4 4 2 Maintenance Factory Defaults 322 4 4 3 Maintenance S...

Page 9: ...Starting 1 1 1 Before Starting In Before Starting This section contains introductory information which includes Safety Precautions Intended Readers Icons for Note Caution and Warning Product Package C...

Page 10: ...e will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is...

Page 11: ...and terminologies 1 3 Icons for Caution and Warning To install configure use and maintain this product properly please pay attention when you see these icons in this manual A Note icon indicates impo...

Page 12: ...e which should include the following items 1 GV POE0812 x 1 2 Screw x 8 Rack Mount Kit x 1 3 AC Power Cord x 1 4 Console cable x 1 5 Software CD x 1 6 GV POE0812 Quick Start Guide x 1 Note If any item...

Page 13: ...nformation GV LC and GV LC10 The SFP Transceiver is designed to plug into the SFP port of the GV POE Switch and is the interface between the switch and optical fiber cables This product complies with...

Page 14: ...t Overview This section will give you an overview of this product including its feature functions and hardware software specifications Product Brief Description Product Specification Hardware Descript...

Page 15: ...t af compliant network accessories It also features PoE awareness to verify whether the network device receive power is IEEE 802 3at af compliant or only the data will be sent through LAN cable By add...

Page 16: ...lity on Powered Device Powered Device Alive Check Powered Device Classification Enable Disable PoE Per Port Priority Setting Per Port Power Level Setting Per Port Power Management per port Overloading...

Page 17: ...ation HTTP SSL Secure Web SSH v2 0 Secured Telnet Session MAC IP Filter Management Command Line Interface CLI Web Based Management Telnet SNMP WEB SSH TELNET Access Management Filtering Firmware Upgra...

Page 18: ...net PoE IEEE 802 3az Energy Efficient Ethernet EEE IEEE 802 3x Flow Control IEEE 802 1Q VLAN IEEE802 1v Protocol VLAN IEEE 802 1p Class of Service IEEE 802 1D Spanning Tree IEEE 802 1w Rapid Spanning...

Page 19: ...Full Management PoE switch and gives a physical and functional overview on the certain switch Front Panel The front panel of the Full Management PoE switch consists of 8 10 100 1000 Base TX RJ 45 port...

Page 20: ...f No Powered Device connected On Linked Up SFP Green Blinking 9TX 9FX 10TX 10FX Data activating Note If a new powered device is connected to the PoE switch and the PoE budget is depleted the PoE LED w...

Page 21: ...Product Overview 2 Rear Panel The rear panel of the Full Management PoE switch contains a power switch and an IEC 60320 plug for power supply 13...

Page 22: ...nd the transmission distance wavelength fiber cable can meet your request It is suggested to purchase the SFP transceiver with the switch provider to avoid any incompatible issue The way to connect th...

Page 23: ...figure the switch via RS232 console cable without having the switch or your PC connecting to a network Out of band management provides a dedicated and secure way for switch management In Band Manageme...

Page 24: ...CLI Command Line Interface your PC must have terminal emulator software such as HyperTerminal or PuTTY installed Some operating systems such as Microsoft Windows XP have HyperTerminal already installe...

Page 25: ...t 17 3 4 Set the serial port settings as Baud Rate 115200 Data Bit 8 Parity None Stop Bit 1 Row Control None 5 The system will prompt you to login the out of band management CLI The default username p...

Page 26: ...o configure your PC properly 1 Verify that the network interface card NIC of your PC is operational and properly installed and that your operating system supports TCP IP protocol 2 Connect your PC wit...

Page 27: ...s of the switch in the web browser s URL field and press Enter 6 The web browser will prompt you to sign in The default username password for the configuration web page is admin admin For more informa...

Page 28: ...twork environment according to the previous chapter 3 2 Preparation for Web Interface Telnet interface can be accessed via Microsoft CMD command However SSH interface can only be accessed via dedicate...

Page 29: ...time a PuTTY Security Alert window will pop up Please press Yes to continue This window won t pop up if you re using telnet to connect to the in band management CLI 4 PuTTY will prompt you to login af...

Page 30: ...in the management web page can be divided into the following 4 categories which will be discussed in detail in this chapter Web Management Configure Web Management Monitor Web Management Diagnostic W...

Page 31: ...can enable loop protection function here to prevent network loop Spanning Tree Spanning Tree Protocol is a network designed to ensure a loop free network and provide redundant links that serve as aut...

Page 32: ...d voice quality QoS QoS stands for Quality of Service which allows you to control the network priority which packet gets top priority to transmit and which gets low priority via IEEE 802 1p or DSCP Mi...

Page 33: ...this is the switch s fully qualified domain name A domain name is a text string drawn from the alphabet A Z a z digits 0 9 minus sign No space characters are permitted as part of a name The first cha...

Page 34: ...switch The following modes are supported From any DHCP interfaces The first DNS server offered from a DHCP lease to a DHCP enabled interface will be used No DNS server No DNS server will be used Confi...

Page 35: ...e in dotted decimal notation If DHCP is enabled this field configures the fallback address The field may be left blank if IPv4 operation on the interface is not desired or no DHCP fallback address is...

Page 36: ...it will match anything Gateway The IP address of the IP gateway Valid format is dotted decimal notationor a valid IPv6 notation Gateway and Network must be of the same type Next Hop VLAN Only for IPv6...

Page 37: ...28 bit records represented as eight fields of up to four hexadecimal digits with a colon separating each field For example fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be used as a...

Page 38: ...tem Time Setting You can either input the current time manually in the field or you can click the Time Sync button to synchronize your PC s current time to the switch Daylight Saving Time Configuratio...

Page 39: ...inute End time settings Week Select the ending week number Day Select the ending day Month Select the ending month Hours Select the ending hour Minutes Select the ending minute Offset settings Offset...

Page 40: ...et will always send out even if the system log server does not exist Possible modes are Enabled Enable server mode operation Disabled Disable server mode operation Server Address Indicates the IPv4 ho...

Page 41: ...device has all circuits powered up when traffic is transmitted The devices can exchange wakeup time information using the LLDP protocol EEE works for ports in auto negotiation mode where the port is n...

Page 42: ...ine if cable is inserted PerfectReach Cable length power savings enabled PerfectReach works by determining the cable length and lowering the power for ports with short cables EEE Enable or disable the...

Page 43: ...e port Configured Link Speed Selects any available link speed for the given switch port Only speeds supported by the specific port is shown Possible speeds are Disabled Disables the switch port operat...

Page 44: ...the result of the last Auto Negotiation Check the configured column to use flow control This setting is related to the setting for Configured Link Speed Maximum Frame Size Enter the maximum frame size...

Page 45: ...disable DHCP server per VLAN VLAN Range Indicate the VLAN range in which DHCP server is enabled or disabled The first VLAN ID must be smaller than or equal to the second VLAN ID BUT if the VLAN range...

Page 46: ...sible modes are Enabled Enable DHCP server per VLAN Disabled Disable DHCP server pre VLAN Buttons Add VLAN Range Click to add a new VLAN range Save Click to save changes Reset Click to undo any change...

Page 47: ...efine the IP range to be excluded IP addresses The first excluded IP must be smaller than or equal to the second excluded IP BUT if the IP range contains only 1 excluded IP then you can just input it...

Page 48: ...Configure the pool name that accepts all printable characters except white space If you want to configure the detail settings you can click the pool name to go into the configuration page Type Displa...

Page 49: ...ent 41 4 Lease Time Display lease time of the pool Buttons Add New Pool Click to add a new DHCP pool Save Click to save changes Reset Click to undo any changes made locally and revert to previously sa...

Page 50: ...arded to trusted ports and only allow reply packets from trusted ports Disabled Disable DHCP snooping mode operation Port Mode Configuration Indicates the DHCP snooping port mode Possible port modes a...

Page 51: ...isabled Disable DHCP relay mode operation Relay Server Indicates the DHCP relay server IP address Relay Information Mode Indicates the DHCP relay information mode option operation The option 82 circui...

Page 52: ...hen relay information mode is disabled Possible policies are Replace Replace the original relay information when a DHCP message that already contains it is received Keep Keep the original relay inform...

Page 53: ...ink to configure user account Privilege Level The privilege level of the user The allowed range is 1 to 15 If the privilege level value is 15 it can access all groups i e that is granted the fully con...

Page 54: ...should be same or greater than the group privilege level to have the access of that group By default setting most groups privilege level 5 has the read only access and privilege level 10 has the read...

Page 55: ...Web Management 4 4 1 5 2 Security Switch Privilege Level This page provides an overview of the privilege levels 47...

Page 56: ...ept VeriPHY Diagnostics ping and VeriPHY Maintenance CLI System Reboot System Restore Default System Password Configuration Save Configuration Load and Firmware Load Web Users Privilege Levels and eve...

Page 57: ...ote servers are offline In this case the next method is tried Each method is tried from left to right and continues until a method either approves or rejects a user If a remote server is used for prim...

Page 58: ...age Mode Indicates the SSH mode operation Possible modes are Enabled Enable SSH mode operation Disabled Disable SSH mode operation Buttons Save Click to save changes Reset Click to undo any changes ma...

Page 59: ...ed Enable HTTPS mode operation Disabled Disable HTTPS mode operation Automatic Redirect Indicates the HTTPS redirect mode operation Automatically redirects web browser to an HTTPS connection when both...

Page 60: ...ess management entry End IP address Indicates the end IP address for the access management entry HTTP HTTPS Indicates that the host can access the switch from HTTP HTTPS interface if the host IP addre...

Page 61: ...xibility to configure security name than a SNMPv1 or SNMPv2c community string In addition to community string a particular range of source addresses can be used to restrict source subnet Write Communi...

Page 62: ...trap supported version 3 Trap Community Indicates the community access string when sending SNMP trap packet The allowed string length is 0 to 255 and the allowed content is ASCII characters from 33 to...

Page 63: ...le modes are Enabled Enable SNMP trap inform mode operation Disabled Disable SNMP trap inform mode operation Trap Inform Timeout seconds Indicates the SNMP trap inform timeout The allowed range is 0 t...

Page 64: ...56 Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved values...

Page 65: ...ion Configurations Name Indicates the trap Configuration s name Indicates the trap destination s name Enable Indicates the trap destination mode operation Possible modes are Enabled Enable SNMP trap m...

Page 66: ...ecords represented as eight fields of up to four hexadecimal digits with a colon separating each field For example fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be used as a shorthan...

Page 67: ...llowed content is ASCII characters from 33 to 126 The community string will be treated as security name and map a SNMPv1 or SNMPv2c community string Source IP Indicates the SNMP access source address...

Page 68: ...keys In a simple agent usmUserEngineID is always that agent s own snmpEngineID value The value can also take th value of the snmpEngineID of a remote SNMP engine with which this user can communicate I...

Page 69: ...phrase For MD5 authentication protocol the allowed string length is 8 to 32 For SHA authentication protocol the allowed string length is 8 to 40 The allowed content is ASCII characters from 33 to 126...

Page 70: ...Mod Se rity Name cu g the security name that this entry should belong to The allowed string length is 1 A string identifyin to 32 and the allowed content is ASCII characters from 33 to 126 Group Name...

Page 71: ...d In general if included An optional flag to indicate that this view subtree should be include excluded An optional flag to indicate that this view subtree should be excluded a view entry s view type...

Page 72: ...y model that this entry should belong to Possible security models are NoAuth NoPriv No authentication and no privacy Auth NoPriv Authentication and no privacy Auth Priv Authentication and privacy Read...

Page 73: ...t save ID Indicates the index of the entry The range is from 1 to 65535 Data Source switch the value must add D 1 for example if the port is switch 3 port 5 the value is 2005 Indicates the port ID whi...

Page 74: ...mple if the port is switch 3 port 5 the value is 2005 Interval Indicates the interval in seconds for sampling the history statistics data The range is from 1 to 3600 default value is 1800 seconds Buck...

Page 75: ...umber of uni cast packets delivered to a higher lay InNUcastPkts The number of broad cast and multi cast packets delivered to a higher layer protocol InDiscards The number of inbound packets that are...

Page 76: ...value is larger than the rising threshold FallingTrigger alarm when the first RisingOrFallingTrigger alarm when the first value is larger than the rising th the falling threshold default Ri g Threshol...

Page 77: ...ace including framing characters r layer protocol mal Log The number of uni cast packets delivered to a highe snmptrap The number of broad cast and multi cast packets delivered to a higher layer proto...

Page 78: ...bled other s may still use the underlying functionality but limit checks and corresponding actions are Indicates if Limit Control module disabled Aging Enabled If checked secured MAC addresses are sub...

Page 79: ...ceeded the corresponding action is taken ew w from the same pool it exceed The stack is born with a total number of MAC addresses from which all ports draw whenever a n MAC address is seen on a Port S...

Page 80: ...state c Action is set to None or Trap Shutdown Indicates that the port is shut down by the Limit Control module This state can only be shown if Action is set to Shu Re open Button If a port is shutdow...

Page 81: ...one user on the same port and doesn t require the user to have special 802 1X supplicant software installed on his sy switch uses the user s MAC address to authenticate against the backend server Int...

Page 82: ...C Based Auth When the NAS module use module needs to check for activity on the MAC address in question at regular intervals and free resources if no activity is seen within a given period of time This...

Page 83: ...DIUS assigned VLAN provides a means to centrally control the VLAN on which a successfully elow ed checkbox provides a quick way to globally enable disable authenticated supplicant is placed on the swi...

Page 84: ...Valid values are in the range 1 255 Allow Guest VLAN if EAPOL Seen The switch remembers if an EAPOL frame has been received on the port for the life time of the port if an e e Guest VLAN option is gl...

Page 85: ...s and responses between the supplicant and the authentication server Frames sent between the supplicant and the switch are special 802 1X frames known as EAPOL EAP Over LANs frames EAPOL frames encaps...

Page 86: ...the Single 802 1X variant Single 802 1X is really not an IEEE standard but features many of the same characteristics as does port based 802 1X In Single 802 1X at most one supplicant can get authenti...

Page 87: ...ation which in turn causes the switch to open up or block traffic for that particular client using the Port Security module Only then will frames from the client be forwarded on the switch There are n...

Page 88: ...be a member of that VLAN ID and the port will be forced into VLAN unaware mode Once assigned all traffic arriving on the port will be classified and switched on the RADIUS assigned VLAN ID If re auth...

Page 89: ...st VLAN enabled port s link comes up the switch starts transmitting EAPOL Request Identity frames If the number of transmissions of such frames exceeds Max Reauth Count and no EAPOL frames have been r...

Page 90: ...are available for each row The buttons are only enabled when authentication is globally enabled and the port s Admin State is in an EAPOL based or MAC based mode Clicking these buttons will not cause...

Page 91: ...e default value is Permit Rate Limiter ID Select which rate limiter to apply on this port The allowed values are Disabled or the values 1 through 16 The default value is Disabled Port Redirect Select...

Page 92: ...t state of this port The allowed values are Enabled To reopen ports by changing the volatile port configuration of the ACL user module Disabled To close ports by changing the volatile port configurati...

Page 93: ...ID The rate limiter ID for the settings contained in the same row Rate The allowed values are 0 131071 in pps Unit Specify the rate unit The allowed values are pps packets per second kbps Kbits per s...

Page 94: ...the ACE Frame Type Indicates the frame type of the ACE Possible values are Any The ACE will match any frame type EType The ACE will match Ethernet Type frames Note that an Ethernet Type based ACE wil...

Page 95: ...Buttons You can modify each ACE Access Control Entry in the table using the following buttons Inserts a new ACE before the current row Edits the ACE row Moves the ACE up the list Moves the ACE down th...

Page 96: ...he number of the switch port Policy Filter Specify the policy number filter for this ACE Any No policy filter is specified policy filter status is don t care Specific If you want to filter a specific...

Page 97: ...t hits this ACE is dropped Rate Limiter Specify the rate limiter in number of base units The allowed range is 1 to 16 Disabled indicates that the rate limiter operation is disabled Port Redirect Frame...

Page 98: ...xxxxxxxxxxxx x is a hexadecimal digit A frame that hits this ACE matches this SMAC value DMAC Filter Specify the destination MAC filter for this ACE Any No DMAC filter is specified DMAC filter status...

Page 99: ...pecify the tag priority for this ACE A frame that hits this ACE matches this tag priority The allowed number range is 0 to 7 The value Any means that no tag priority is specified tag priority is don t...

Page 100: ...s specific ACE Any No target IP filter is specified Target IP filter is don t care Host Target IP filter is set to Host Specify the target IP address in the Target IP Address field that appears Networ...

Page 101: ...P frames where the HLN is equal to Ethernet 0x06 and the PLN is equal to IPv4 0x04 Any Any value is allowed don t care IP Specify whether frames can hit the action according to their ARP RARP hardware...

Page 102: ...4 TCP protocol frames Extra fields for defining TCP parameters will appear These fields are explained later in this help file IP Protocol Value When Specific is selected for the IP protocol value you...

Page 103: ...SIP Address and SIP Mask fields that appear SIP Address When Host or Network is selected for the source IP filter you can enter a specific SIP address in dotted decimal notation SIP Mask When Network...

Page 104: ...ue The allowed range is 0 to 255 A frame that hits this ACE matches this ICMP value ICMP Code Filter Specify the ICMP code filter for this ACE Any No ICMP code filter is specified ICMP code filter sta...

Page 105: ...er you can enter a specific TCP UDP source value The allowed range is 0 to 65535 A frame that hits this ACE matches this TCP UDP source value TCP UDP Source Range When Range is selected for the TCP UD...

Page 106: ...are TCP SYN Specify the TCP Synchronize sequence numbers SYN value for this ACE 0 TCP frames where the SYN field is set must not be able to match this entry 1 TCP frames where the SYN field is set mus...

Page 107: ...s ACE Any No EtherType filter is specified EtherType filter status is don t care Specific If you want to filter a specific EtherType filter with this ACE you can enter a specific EtherType value A fie...

Page 108: ...l Mode and Port Mode on a given port are enabled IP Source Guard is enabled on this given port Max Dynamic Clients Specify the maximum number of dynamic clients that can be learned on given port This...

Page 109: ...ort The logical port for the settings VLAN ID The vlan id for the settings IP Address Allowed Source IP address MAC Address Allowed Source MAC address Buttons Add New Entry Click to add a new entry to...

Page 110: ...is enabled on this given port Possible modes are Enabled Enable ARP Inspection operation Disabled Disable ARP Inspection operation If you want to inspect the VLAN configuration you have to enable the...

Page 111: ...to the port setting There are four log types and possible types are None Log nothing Deny Log denied entries Permit Log permitted entries ALL Log all entries Buttons Save Click to save changes Reset C...

Page 112: ...try of the currently displayed VLAN entry as a basis for the next lookup When the end is reached the warning message is shown in the displayed table Use the button to start over VLAN Mode Configuratio...

Page 113: ...r the settings VLAN ID The vlan id for the settings MAC Address Allowed Source MAC address in ARP request packets IP Address Allowed Source IP address in ARP request packets Buttons Add New Entry Clic...

Page 114: ...the Refresh button will update the displayed table starting from that or the closest next Dynamic ARP Inspection Table match In addition the two input fields will upon a Refresh button click assume t...

Page 115: ...fields Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved values Updates the table starting from the first entry in the Dynamic ARP Inspection Table...

Page 116: ...server has not responded after the last retransmit it is considered to be dead Deadtime Deadtime which can be set to a number between 0 to 1440 minutes is the period during which the switch will not...

Page 117: ...not included in the packet Server Configuration The table has one row for each RADIUS server and a number of columns which are Delete To delete a RADIUS server entry check this box The entry will be...

Page 118: ...added to the table and the RADIUS server can be configured as needed Up to 5 servers are supported The Delete button can be used to undo the addition of the new server Buttons Save Click to save chan...

Page 119: ...espond to a previous request This will stop the switch from continually trying to contact a server that it has already determined as dead Setting the Deadtime to a value greater than 0 zero will enabl...

Page 120: ...he global key Adding a New Server Click Add New Server button to add a new TACACS server An empty row is added to the table and the TACACS server can be configured as needed Up to 5 servers are suppor...

Page 121: ...s The Destination MAC Address can be used to calculate the destination port for the frame Check to enable the use of the Destination MAC Address or uncheck to disable By default Destination MAC Addres...

Page 122: ...for the settings contained in the same row Group ID Normal indicates there is no aggregation Only one group ID is valid per port Port Members Each switch port is listed for each group ID Select a rad...

Page 123: ...1 100Mb 2 1Gb 3 Using the Specific setting a user defined value can be entered Ports with the same Key value can participate in the same aggregation group while ports with different keys cannot Role...

Page 124: ...Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved values 116...

Page 125: ...r loop protections is enabled as a whole Transmission Time The interval between each loop protection PDU sent on each port valid values are 1 to 10 seconds Shutdown Time The period in seconds for whic...

Page 126: ...ormed when a loop is detected on a port Valid values are Shutdown Port Shutdown Port and Log or Log Only Tx Mode Controls whether the port is actively generating loop protection PDU s or whether it is...

Page 127: ...te MAC address of the switch forms a Bridge Identifier For MSTP operation this is the priority of the CIST Otherwise this is the priority of the STP RSTP bridge Forward Delay The delay used by STP Bri...

Page 128: ...l disable itself upon reception of a BPDU The port will enter the error disabled state and will be removed from the active topology Port Error Recovery Control whether a port in the error disabled sta...

Page 129: ...MSTI mapping Bridges must share the name and revision see below as well as the VLAN to MSTI mapping configuration in order to share spanning trees for MSTI s Intra region The name is at most 32 chara...

Page 130: ...range xx yy each of which must be separated with comma and or space A VLAN can only be mapped to one MSTI An unused MSTI should just be left empty I e not having any VLANs mapped to it Example 2 5 20...

Page 131: ...e instance The CIST is the default instance which is always active Priority Controls the bridge priority Lower numeric values have better priority The bridge priority plus the MSTI instance number con...

Page 132: ...rols whether STP is enabled on this switch port Path Cost Controls the path cost incurred by the port The Auto setting will set the path cost as appropriate by the physical link speed using the 802 1D...

Page 133: ...to a core region of the network influence the spanning tree active topology possibly because those bridges are not under the full control of the administrator This feature is also known as Root Guard...

Page 134: ...tion to the forwarding state is faster for point to point LANs than for shared media Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved valu...

Page 135: ...ggregation settings are stack global Apart from the selected MSTI the STP MSTI port settings also relate to the currently selected stack unit as reflected by the page header Port The switch port numbe...

Page 136: ...e used to control priority of ports having identical port cost See above Buttons Get Click to retrieve settings for a specific MSTI Save Click to save changes Reset Click to undo any changes made loca...

Page 137: ...based on profile settings only when the global profile mode is enabled Delete Check to delete the entry The designated entry will be deleted during the next save Profile Name The name used for indexin...

Page 138: ...he rules of the designated profile by using the following buttons Navigate List the rules associated with the designated profile Edit Adjust the rules associated with the designated profile Buttons Ad...

Page 139: ...characters At least one alphabet must be present Start Address The starting IPv4 IPv6 Multicast Group Address that will be used as an address range End Address The ending IPv4 IPv6 Multicast Group Ad...

Page 140: ...sends an IGMP MLD report message to Switch A to join the appropriate multicast group address Uplink ports that send and receive multicast data to and from the multicast VLAN are called MVR source port...

Page 141: ...l frames will be sent as Untagged or Tagged with MVR VID The default is Tagged Priority Specify how the traversed IGMP MLD control frames will be sent in prioritized manner The default Priority is 0 L...

Page 142: ...and should only receive multicast data It does not receive data unless it becomes a member of the multicast group by issuing IGMP MLD messages Note MVR source ports are not recommended to be overlapp...

Page 143: ...l takes effect only when IGMP Snooping is enabled When IGMP Snooping is disabled unregistered IPMCv4 traffic flooding is always active in spite of this setting IGMP SSM Range SSM Source Specific Multi...

Page 144: ...router port the whole aggregation will act as a router port Fast Leave Enable the fast leave on the port Throttling Enable to limit the number of multicast groups to which a switch port can belong But...

Page 145: ...rrently displayed entry as a basis for the next lookup When the end is reached the text No more entries is shown in the displayed table Use the button to start over IGMP Snooping VLAN Table Columns De...

Page 146: ...rity value is 0 RV Robustness Variable The Robustness Variable allows tuning for the expected packet loss on a network The allowed range is 1 to 255 default robustness variable value is 2 QI Query Int...

Page 147: ...d Buttons Refresh Refreshes the displayed table starting from the VLAN input fields Updates the table starting from the first entry in the VLAN Table i e the entry with the lowest VLAN ID Updates the...

Page 148: ...port Summary about the designated profile will be shown by clicking the view button Profile Management Button You can inspect the rules of the designated profile by using the following button Navigat...

Page 149: ...affic flooding The flooding control takes effect only when MLD Snooping is enabled When MLD Snooping is disabled unregistered IPMCv6 traffic flooding is always active in spite of this setting MLD SSM...

Page 150: ...an aggregation member port is selected as a router port the whole aggregation will act as a router port Fast Leave Enable the fast leave on the port Throttling Enable to limit the number of multicast...

Page 151: ...sest VLAN Table match The button will use the last entry of the cu the next lookup When the end is reached the text No more entries is shown in the displayed table Use the button to start over MLD Sno...

Page 152: ...imum Response Code seconds default query response The Maximum Response D inserted into the periodic General Queries The allowed range is 0 to 31744 in tenths of interval is 100 in tenths of seconds 10...

Page 153: ...ntly AN Click to add new MLD VLAN Specify the VID and s ges made locally and revert to previously Updates the table starting from the first entry in the VLAN Table i e the entry with the lowest VLAN I...

Page 154: ...ort Summary about the designated profile will be shown by clicking the view button Profile Management Button You can inspect the rules of the designated profile by using the following button List the...

Page 155: ...s are restricted to 5 32768 seconds Tx Hold Each LLDP frame contains information about how long the information in the t to LLDP frame shall be considered valid The LLDP information valid period is se...

Page 156: ...information Disabled The switch will not send out LLDP information and will drop LLDP information received from neighbors Enabled The switch will send out LLDP information and will analyze LLDP infor...

Page 157: ...eness on a port is disabled the CDP information isn t removed immediately but gets removed when the hold time is exceeded Port Descr Optional TLV When checked the port description is included in LLDP...

Page 158: ...this in mind LLDP MED defines an LLDP MED Fast Start interaction between the protocol and the application layers on top of the protocol in order to achieve these related properties Initially a Network...

Page 159: ...or or South of the equator Longitude Longitude SHOULD be normalized to within 0 180 degrees with a maximum of 4 digits It is possible to specify the direction to either East of the prime meridian or W...

Page 160: ...an Civic Address Location IETF Geopriv Civic Address based Location Configuration Information Civic Address LCI Country code The two letter ISO 3166 country code in capital ASCII letters Example DK DE...

Page 161: ...Room number Example 450F Place type Place type Example Office Postal community name Postal community name Example Leonia P O Box Post office box P O BOX Example 12345 Additional code Additional code E...

Page 162: ...sets of application types supported on a given port The application types specifically addressed are 1 Voice 2 Guest Voice 3 Softphone Voice 4 Video Conferencing 5 Streaming Video 6 Control Signaling...

Page 163: ...ype should not be advertised if all the same network policies apply as those advertised in the Guest Voice application policy 5 Softphone Voice for use by softphone applications on typical data centri...

Page 164: ...2 Priority is the Layer 2 priority to be used for the specified application type L2 Priority may specify one of eight priority levels 0 through 7 as defined by IEEE 802 1D 2004 A value of 0 represents...

Page 165: ...at shall apply to a given port The set of policies is selected by check marking the checkboxes that corresponds to the policies Buttons Save Click to save changes Reset Click to undo any changes made...

Page 166: ...e class the connected PD belongs to and reserves the power accordingly Four different port classes exist and one for 4 7 15 4 or 30 Watts In this mode the Maximum Power fields have no effect 3 LLDP ME...

Page 167: ...ary and Backup Power Source Some switches support having two PoE power supplies One is used as primary power source and one as backup power source If the switch doesn t support backup power supply onl...

Page 168: ...device The maximum allowed value is 30 W PD Alive IP Address Here you can input the network device s IP address connected to a specific port The system will try to ping using the IP address input her...

Page 169: ...Web Management 4 It is recommended to set the Power Management Mode to Actual Consumption and set the ports that connect to crucial devices to High or Critical as shown in the figures down below 161...

Page 170: ...seconds The allowed range is 10 to 1000000 seconds Disable the automatic aging of dynamic entries by checking the Disable automatic aging checkbox MAC Table Learning If the learning mode for a given p...

Page 171: ...ntries The maximum of 64 entries is for the whole stack and not per switch The MAC table is sorted first by VLAN ID and then by MAC address Delete Check to delete the entry It will be deleted during t...

Page 172: ...d with a dash separating the lower and upper bound The following example will create VLANs 1 10 11 12 13 200 and 300 1 10 13 200 300 Spaces are allowed in between the delimiters Ethertype for Custom S...

Page 173: ...that a trunk port is member of may be limited by the use of Allowed VLANs Frames classified to a VLAN that the port is not a member of are discarded By default all frames but frames classified to the...

Page 174: ...the VLAN ID embedded in the tag If a frame is untagged or priority tagged the frame gets classified to the Port VLAN If frames must be tagged on egress they will be tagged with a C tag S Port On ingre...

Page 175: ...t VLAN are transmitted untagged Other frames are transmitted with the relevant tag Tag All All frames whether classified to the Port VLAN or not are transmitted with a tag Untag All All frames whether...

Page 176: ...in question The syntax is identical to the syntax used in the Enabled VLANs field By default the field is left blank which means that the port may become a member of all possible VLANs Buttons Save Cl...

Page 177: ...lete a private VLAN entry check this box The entry will be deleted during the next save Private VLAN ID Indicates the ID of this particular private VLAN Port Members A row of check boxes for each port...

Page 178: ...Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Refresh Click to refresh the page immediately Save Click to save changes Reset Click to...

Page 179: ...works across the stack Configuration Port Members A check box is provided for each port of a private VLAN When checked port isolation is enabled on that port When unchecked port isolation is disabled...

Page 180: ...om the MAC based VLAN make sure the box is unchecked By default no ports are members and all boxes are unchecked Adding a New MAC based VLAN Click Adding New Entry to add a new MAC based VLAN entry An...

Page 181: ...efresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Refresh Click to refresh the page immediately Updates the table starting from the first entry in the MA...

Page 182: ...ll vary depending on the new frame type you selected Value Valid value that can be entered in this text field depends on the option selected from the the preceding Frame Type selection menu Below is t...

Page 183: ...character long string for every entry which consists of a combination of alphabets a z or A Z and integers 0 9 Note special character and underscore _ are not allowed Adding a New Group to VLAN mappin...

Page 184: ...mbers A row of check boxes for each port is displayed for each Group Name to VLAN ID mapping To include a port in a mapping check the box To remove or exclude the port from the mapping make sure the b...

Page 185: ...tes the VLAN ID VLAN ID can be changed for the existing entries Port Members A row of check boxes for each port is displayed for each IP subnet based VLAN entry To include a port in a IP subnet based...

Page 186: ...ges Reset Click to undo any changes made locally and revert to previously saved values Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Refresh Re...

Page 187: ...Possible modes are Enabled Enable Voice VLAN mode operation Disabled Disable Voice VLAN mode operation VLAN ID Indicates the Voice VLAN ID It should be a unique VLAN ID in the system and cannot equal...

Page 188: ...Enable Voice VLAN security mode operation Disabled Disable Voice VLAN security mode operation Port Discovery Protocol Indicates the Voice VLAN port discovery protocol It will only work when auto detec...

Page 189: ...OUI address is a globally unique identifier assigned to a vendor by IEEE It must be 6 characters long and the input format is xx xx xx x is a hexadecimal digit Description The description of OUI addr...

Page 190: ...s enabled then the frame is classified to a CoS that is mapped from the PCP and DEI value in the tag Otherwise the frame is classified to the default CoS The classified CoS can be overruled by a QCL e...

Page 191: ...Class Shows the classification mode for tagged frames on this port Disabled Use default CoS and DPL for tagged frames Enabled Use mapped versions of PCP and DEI for tagged frames Click on the mode in...

Page 192: ...Disabled Use default QoS class and Drop Precedence Level for tagged frames Enabled Use mapped versions of PCP and DEI for tagged frames PCP DEI to QoS class DP level Mapping Controls the mapping of th...

Page 193: ...ntrols the rate for the policer The default value is 500 This value is restricted to 100 1000000 when the Unit is kbps or fps and it is restricted to 1 3300 when the Unit is Mbps or kfps Unit Controls...

Page 194: ...der Port The logical port for the settings contained in the same row Click on the port number in order to configure the schedulers Mode Shows the scheduling mode for this port Qn Shows the weight for...

Page 195: ...this queue The default value is 17 This value is to restricted to 1 100 This parameter is only shown if Scheduler Mode is set Weighted Queue Scheduler Percent Shows the weight in percent for this queu...

Page 196: ...led for this queue on this switch port Queue Shaper Rate Controls the rate for the queue shaper The default value is 500 This value is restricted to 100 1000000 when the Unit is kbps and it is restric...

Page 197: ...port Port Shaper Rate Controls the rate for the port shaper The default value is 500 This value is restricted to 100 1000000 when the Unit is kbps and it is restricted to 1 3300 when the Unit is Mbps...

Page 198: ...al port for the settings contained in the same row mber in order to configure the shapers Click on the port nu Qn Shows disabled or actual queue shaper rate e g 800 Mbps Port Shows disabled or actual...

Page 199: ...this queue The default value is 17 This value is Mode is set to Weighted restricted to 1 100 This parameter is only shown if Scheduler Queue Scheduler Percent Shows the weight in percent for this que...

Page 200: ...a Controls whether th ble e queue shaper is enabled for this queue on this switch port Queue Shaper Rate Controls the rate for the queue shaper The default value is 500 This value is restricted to 100...

Page 201: ...ether the port shaper is enabled for this switch port Port Shaper Rate Controls the rate for the port shaper The default value is 500 This value is restricted to 100 1000000 when the Unit is kbps and...

Page 202: ...d by the page ports The ports belong to header Port The logical port for the settings contained in the same row mber in order to configure tag remarking Click on the port nu Mode Shows the tag remarki...

Page 203: ...is page Mode Controls the tag remarking mode for this port Classified Use classified PCP DEI values Default Use default PCP DEI values Mapped Use mapped versions of QoS class and DP level PCP DEI Conf...

Page 204: ...the QoS class DP level to PCP DEI mapping process ifie QoS class DP level to PCP DEI Mapping Controls the mapping of the classified QoS class DP level to PCP DEI values when the mode is set to Mapped...

Page 205: ...s you can change ingress translation and classification settings r individual ports here are two configuration parameters available in Ingress Translate Classify In fo T 1 2 1 Translate o Enable the I...

Page 206: ...ss rewrite Enable Rewrite enabled without remapping Remap DSCP from analyzer is remapped and frame is remarked with remapped DSCP value Buttons Save Click to save changes Reset Click to undo any chang...

Page 207: ...t ontrols whether a specific DSCP value is trusted Only frames with trusted SCP values are mapped to a specific QoS class and Drop Precedence Level rames with untrusted DSCP values are treated as a no...

Page 208: ...ed to new DSC for QoS There are two configuration parameters for DSCP Translation 1 Translate 2 Classify 1 Translate ed to any of 0 63 DSCP values DSCP at Ingress side can be translat 2 Classify t Ing...

Page 209: ...DP1 Select the DSCP value from select menu to which you want to remap DSCP value ranges form 0 to 63 Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to prev...

Page 210: ...DSCP value he settings relate to the currently selected stack unit as reflected by the page eader T h QoS Class ctual QoS class A DSCP elect the classified DSCP value 0 63 S Buttons Save Click to save...

Page 211: ...ach swit Click on the lowest plus sign to add QCE cates the QCE Indi id Port dicates the list of ports configured with the QCE In DMAC es the destination MAC address Possible values are Any Match any...

Page 212: ...frame Possible Any Match any frame type Ethernet Match EtherType frames LLC Match LLC frames SNAP Match SNAP frames Match IPv4 frames IP Action tes the classification action taken on ingress frame if...

Page 213: ...the configuration below applies Enabled Controls whether the storm control is enabled on this switch port Rate Controls the rate for the storm control The default value is 500 This value is the Unit i...

Page 214: ...received on a given port also known as ingress or so Al mirroring Port to mirror to Port to source rx or destination tx mirroring enabled are mirrored on this port Disabled disables mirroring Mirror...

Page 215: ...once It is therefore not possible to mirror mirror port Tx frames Because of this mode for the selected mirror port is limited to Disabled or Rx only Buttons Save Click to save changes Reset Click to...

Page 216: ...o inform a control point or control oints how often it or they should receive an SSDP advertisement message from is switch If a control point does not receive any message within the duration it ill th...

Page 217: ...of centi seconds i e in f a second The default is 60 En ble GVRP globally Enable GVRP GVRP pro one hundredth of a second The default is 20 Leave time is a value in the range units of one hundredth o L...

Page 218: ...4 1 22 2 GVRP Port Config This page allows you to enable a port for GVRP Button changes Save Click to save Reset Click to undo any changes made locally and revert to previously saved values 210...

Page 219: ...of er port flow and counter samplers Flow configuration is not persisted to non volatile memory which means that a eboot or master change will disable sFlow sampling gent Configuration C p s r A IP A...

Page 220: ...igured through SNMP the release must be confirmed a confirma n request will appear tio IP Address Hostname The IP address or hostname of the sFlow receiver Both IPv4 and IPv6 addresses are supported U...

Page 221: ...th not take into account the maximum header the sFlow datagram Valid range is 14 to 200 bytes with default being 128 by e maximum datagram size does size samples may be dropped Counter Poller Enabled...

Page 222: ...iguration System Information System Contact Name The system name configured in Configuration System Information System m Na e Location he system location configured in Configuration System Information...

Page 223: ...ftware version of this switch Software Date The date when the switch software was produced Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 second...

Page 224: ...s are displayed s text as well order to display the SVG graph your browser must support the SVG format onsult the SVG Wiki for more information on browser support Specifically at e time of writing Mic...

Page 225: ...f the entry This may be LINK or IPv4 Address The current address of the interface of the given type Status e Th status flags of the interface and or address outes IP R Network he destination IP networ...

Page 226: ...Refresh Click to refresh the page immediately Auto refresh Check this box to refresh the page automatically 218...

Page 227: ...T Message he message of the system log entry T Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Refresh Updates the system log entries st...

Page 228: ...sage of the system log entry Buttons Refresh Updates the system log entry to the current entry ID t available entry ID he previous available entry ID system log entry to the next available entry ID Up...

Page 229: ...rt Power Savings configuration page LP S EEE hows if the link partner is EEE capable cap EEE In power save hows if the system is currently saving power due to EEE When EEE is enabled e system will pow...

Page 230: ...current switch port states tes are illustrated as follows Status Disabl Dow Link The port sta ed n RJ45 ports SFP ports X2 ports Buttons esh Check this box to refresh the page automatically Automatic...

Page 231: ...per port ved and trans Bytes er of received and transmitted bytes per port The numb Errors The number of frames received in error and missions per port the number of incomplete trans Drops he number o...

Page 232: ...t The logical port for the settings contained in the same row Qn There are 8 QoS queues per port Q0 is the lowest priority queue Rx Tx The number of received and transmitted packets per queue Buttons...

Page 233: ...therType frames SNAP Match SNAP frames IPv4 Match IPv4 frames IPv6 Match IPv6 frames Action Indicates the classification action taken on ingress frame if parameters onfigured are matched with the fram...

Page 234: ...resh Check this box to refresh the page automa y Automatic fresh Click to refresh the page ticall refresh occurs every 3 seconds Resolve Conflict Click to release the resources required to add QCL ent...

Page 235: ...Total and Transmit Total s T p T fo R R T x and Tx Packets he number of received and transmitted good and bad packets Rx and Tx Octets he number of received and transmitted good and bad bytes Include...

Page 236: ...Rx CRC Alignment The number of frames received with CRC or alignment errors Rx Undersize The number of short 1 frames received with valid CRC Rx Oversize The number of long 2 frames received with val...

Page 237: ...ames dropped due to excessive or late collisions Buttons sh the page immediately Clears the counters for the selected port omatic ccurs every 3 seconds by clicking Refresh Click to refre Clear Auto re...

Page 238: ...Declined IP Address umber of seclined IP addresses inding Counters isplay counters of various databases N B D A N utomatic Binding umber of bindings with network type pools Manual Binding umber of bin...

Page 239: ...ved DHCP Message Sent Counters Display counters of DHCP messages sent by DHCP server OFFER Number of DHCP OFFER messages sent ACK messages sent Number of DHCP ACK NAK er of DHCP NAK messages sent Numb...

Page 240: ...binding Buttons Refresh Click to refresh the page immediately Auto refresh Check this box to refresh the page automatically Automatic g is it is changed to be Expired If the selected binding is Expir...

Page 241: ...addresses Declined IP Addresses declined by DHCP clients Display IP addresses Declined IP List of IP addresses declined Buttons lly Automatic resh occurs every 3 seconds Auto refresh Check this box to...

Page 242: ...e first displayed entry allowing for continuous efresh with the same start address he will use the last entry of the currently displayed table as a basis for the ext lookup When the end is reached the...

Page 243: ...shes the displayed table starting from the input fields Clear Flushes all dynamic entries tly Updates the table starting from the first entry in the Dynamic DHCP snooping Table Updates the table start...

Page 244: ...ceived with the Circuit ID option missing T Receive Missing Remote ID he number of packets received with the Remote ID option missing T R The n eceive Bad Circuit ID umber of packets whose Circuit ID...

Page 245: ...packets whose relay agent information was retained Drop Agent Option The number of packets that were dropped which were received with relay agent information Buttons Auto refresh Check this box to re...

Page 246: ...ith value 2 packets received and transmitted T Rx and Tx Request he number of request option 53 with value 3 packets received and transmitted T Rx and Tx Decline he number of decline option 53 with va...

Page 247: ...mber of lease active option 53 with value 13 packets received and transmitted Rx Discarded checksum error The number of discard packet that IP UDP checksum is error Rx Discarded from Untrusted The num...

Page 248: ...m the interface when access management mode is enabled Allowed Packets f allowed packets from the interface when access management mode is Number o enabled Discarded Packets Nu ber of discarded packet...

Page 249: ...n Conf modules When a user module has enabled port security on a port the port is set up for addresses are passe modules whether to allow this new MAC address to forward or block it For a MAC address...

Page 250: ...limit is reached rol and no more MAC addresses should be taken in Shutdown The Port Security service is enabled by at least the Limit Cont user module and that module has indicated that the limit is...

Page 251: ...ddress ned a single row stating No MAC addresses attached is State Indicates whether the corresponding MAC address is blocked or forwarding the blocked state it will not be allowed to transmit or rece...

Page 252: ...of the port Refer to NAS Port State for a description of the The cu individual states Last Source ddress carried in the most recently received EAPOL frame for w AC based authentication The source MAC...

Page 253: ...NAS If the VLAN ID is assigned by the RADIUS server RADIUS assigned is appended to the VLAN ID Read more about RADIUS assigned VLANs here If the port is moved to the Guest VLAN Guest is appended to th...

Page 254: ...administrative state Refer to NAS Admin State for a escription of possible values d Port State he current state of the port Refer to NAS Port State for a description of the dividual states T in QoS Cl...

Page 255: ...gement 4 Port Counters EAPOL Counters These supplicant frame counters are available for the following administrative states Single 802 1X Force Authorized Force Unauthorized Port based 802 1X Multi 80...

Page 256: ...Backend Server Counters These backend RADIUS frame counters are available for the following t based 802 1X administrative states Por Single 802 1X Multi 802 1X MAC based Auth 248...

Page 257: ...lti 802 1X MAC based Auth The table is identical to and is placed next to the Port Counters table and will be empty if no MAC address is currently selected To populate the table select one of the atta...

Page 258: ...is unauthenticated If an authentication fails for one or the other reason the client will remain in the unauthenticated state for Hold Time seconds Last Authentication Shows the date and time of the l...

Page 259: ...ARP frames Pv4 frames with ICMP protocol protocol otocol atch IPv4 frames which are not ICMP UDP TCP v6 standard frames EType The ACE will match Ethernet Type frames Note that an Ethernet Type based A...

Page 260: ...tes the hardware status of the specific ACE The specific ACE is not applied to the hardware due to hardware limitations Buttons The select box determines which ACL user is affected by clicking the but...

Page 261: ...ry allowing for continuous refresh with the same start address he button will use the last entry of the currently displayed table as a basis r the next lookup When the end is reached the text No more...

Page 262: ...s every 3 seconds Refresh Refreshes the displayed table starting from the input fields Clear Flushes all dynamic entries rrently Updates the table starting from the first entry in the Dynamic ARP Insp...

Page 263: ...the closest ext Dynamic IP Source Guard Table match In addition the two input fields will pon a Refresh button click assume the value of the first displayed entry llowing for continuous refresh with t...

Page 264: ...Updates the table starting from the first entry in the Dynamic IP Source Guard Table Updates the table starting with the entry after the last entry currently displayed 256...

Page 265: ...y The server is enabled but IP communication is not yet up and running Ready The server is enabled IP communication is up and running and the RADIUS module is ready to accept access attempts Dead X se...

Page 266: ...ng attempts Dead X seconds left Accounting attempts were made to this server but it did not reply within the configured timeout The server has temporarily been disabled but will get re enabled when th...

Page 267: ...IUS Authentication Statistics D he statistics map closely to those specified in RFC4668 RADIUS uthentication Client MIB se the server select box to switch between the backend servers to show details r...

Page 268: ...260...

Page 269: ...p time RADIUS Accounting Statistics The statistics map closely to those specified in RFC4670 RADIUS Accounting Client MIB Use the server select box to switch between the backend servers to show detail...

Page 270: ...x determines which server is affected by clicking the buttons Auto re fresh Check this box to refresh the page automatically Automatic Refresh Click to refresh the page immediately he counters for the...

Page 271: ...r o more entries is shown in e Statistics t starting from that or the next closest Statistics table match The button will use the last entry o the next lookup When the end is reached the text N th dis...

Page 272: ...arger than 64 octets received with invalid CRC Coll The best estimate of the total number of collisions on this Ethernet segment 64 The total number of packets including bad packets received that were...

Page 273: ...lly Automatic refresh occurs every 3 seconds Refresh Click to refresh the page immediately Updates the table starting from the first entry in the Statistics table i e with the lowest ID currently d th...

Page 274: ...the last entry of the currently displayed entry as a basis for the ext lookup When the end is reached the text No more entries is shown in the isplayed table Use the button to start over p fr lo T s...

Page 275: ...ag The number of frames which size is less than 64 octets received with invalid CRC Jabb The number of frames which size is larger than 64 octets received with invalid CRC Coll The best estimate of th...

Page 276: ...e Clicking the Refresh button will update the displayed table starting from that or the next closest Alarm table match The will use the last entry of the currently displayed entry as a basis for th ne...

Page 277: ...the page automatically Automatic refresh occurs every 3 seconds Refresh Click to refresh the page immediately Updates the table starting from the first entry in the Alarm Table i e the entry with the...

Page 278: ...layed table Use the button to start over up to 99 entries from the Event table default being 20 selected through the entries per page input field 20 entries from the beginning of the Event table The f...

Page 279: ...Partner System ID The system ID MAC address of the aggregation partner Partner Key The Key that the partner has assigned to this aggregation ID Last changed The time since this aggregation changed Lo...

Page 280: ...CP join the aggre status is disabled Key ssigned to this port Only ports with the same key can aggregate The key a together Ag r ID g he Aggregation ID assigned to this aggregation group IDs 1 and 2 a...

Page 281: ...any LACP frames have been received at each port LACP Transmitted s how many LACP frames have been sent from each port Show Discarded Shows how many unknown or illegal LACP frames have been discarded a...

Page 282: ...ransmit The currently configured port transmit mode Loops The number of loops detected on this port Status The current loop protection status of the port Loop Whether a loop is currently detected on t...

Page 283: ...ce Root ID The Bridge ID of the currently elected root bridge Root Port The switch port currently assigned the root port role Root Cost r all other Bridges it is the sum ts on the least cost path to t...

Page 284: ...of the AlternatePort BackupPort RootPort DesignatedPort Disabled following values CIST State P port state of the CIST port The port state can be one of the The current ST following values Discarding L...

Page 285: ...umber of legacy STP Configuration BPDU s received transmitted on the port TCN The number of legacy Topology Change Notification BPDU s transmitted on the port received Discarded Unknown er of unknown...

Page 286: ...MP and MLD respectively IGMPv1 Joins Received The number of Received IGMPv1 Join s IGMPv2 MLDv1 Report s Received GMPv2 Join s and MLDv1 Report s respectively The number of Received I IGMPv3 MLDv2 Rep...

Page 287: ...elected through the entries per page input field When first visited Groups Information Table The Start from VLAN and Group Address input fields allow the use the starting point in the MV Refresh butto...

Page 288: ...e beginning of the MVR SFM Information Table The Start from VLAN and Group Address input fields allow the user to select the starting point in the MVR SFM Information Table Clicking the Refresh butto...

Page 289: ...ither Allow or Deny Hardware Filter Switch Indicates whether data plane destined to the specific group address from the source IPv4 IPv6 address could be handled by chip or not Buttons Auto refresh Au...

Page 290: ...Hos W t Version orking Host Version currently Querier Status ws the Querier status is ACTIVE or IDLE DISABLE denotes the specific interface is administratively disabled Sho Queries Transmitted he numb...

Page 291: ...enotes the specific port is learnt to be a router port Both denote the specific port is configured or learnt to be a router port switch that leads towards the Layer 3 multica Port Switch port number S...

Page 292: ...tart address he will use the last entry of the currently displayed table as a basis for the ext lookup When the end is reached the text No more entries is shown in the isplayed table Use the button to...

Page 293: ...tion table default being 20 selected through the entries per page input field When first visited the web page will show the first 20 entries from the beginning of the IGMP S Information Table The Star...

Page 294: ...ether data plane destined to the specific group address from t source IPv4 address could be handled by chip or not he Buttons Auto refresh Automatic refresh occurs every 3 seconds rting from the input...

Page 295: ...currently rier Versio W Hos W t Version orking Host Version currently Querier Status ws the Querier status is ACTIVE or IDLE DISABLE denotes the specific interface is administratively disabled Sho Qu...

Page 296: ...nfigured to be a router port Dynamic denotes the specific port is learnt to be a router port Both denote the specific port is configured or learnt to be a router port Port Switch port number Status In...

Page 297: ...okup When the end is reached the text No more entries is shown in the isplayed table Use the button to start over LD Group Table Columns sorted first by VLAN ID and then by group Navigating the MLD Ea...

Page 298: ...SFM Information table defa being 20 selected through the entries per page input field When first visited the web page will show the first 20 entries from the beginning of the MLD SFM Information Tabl...

Page 299: ...icates whether data plane destined to the specific group address f source IPv6 address could be handled by chip or not rom the Buttons Auto refresh Automatic refresh occurs every 3 seconds Refresh Ref...

Page 300: ...Port ID is the identification of the neighbour port t ID T Port Description ort Description is the port description advertised by the neighbour unit P System Name ystem Name is the name advertised by...

Page 301: ...hat is used for higher layer entities to assist discovery by the network management This could for instance hold the neighbour s IP address Buttons Auto refresh Check this box to refresh the page auto...

Page 302: ...orical reasons IEEE 802 11 Wireless Access Point Any device that supports the IEEE 802 1AB and MED extensions defined by TIA 1057 and can relay IEEE 802 frames via any method LDP MED Endpoint Device D...

Page 303: ...ass include LA LLDP MED Media Endpoint Class II The LLDP MED Media Endpoint Class II definiti products that have IP media capabilities however may o with a particular end user Capabilities include all...

Page 304: ...ervice for guest ntric ve video audio services at require specific network policy treatment Video applications relying on TCP with buffering would not be an intended use of this application type 2 Voi...

Page 305: ...1 through 4094 is used to define a valid VLAN ID A value of 0 Priority Tagged is used if the device is using priority tagged frames as defined by IEEE 802 1Q 2003 meaning that only the IEE 2003 E 802...

Page 306: ...es negotiation Capabilities shows the link partners Auto MAC PHY capabilities Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Refresh Cli...

Page 307: ...SE device it can either run on its Primary Power Source or its ackup Power Source If it is unknown whether the PSE device is using its rimary Power Source or its Backup Power Source it is indicated as...

Page 308: ...r a PSE device is capable of sourcing over a maximum length cable based on its current configuration The maximum allowed value is 102 3 W If the device indicates value higher han t 102 3 W it is repre...

Page 309: ...uld like the transmitter to hold off to allow me for the receiver to wake from sleep T ti F T allback Receive Tw he link partner s fallback receive Tw receiving link partner may inform the transmitter...

Page 310: ...lved Tw Rx Tw for this link equipment linked to this port to support LLDP the number here indicates the value of Note It is NOT the link partner Instead of the value of the this particular port on the...

Page 311: ...ntries added since switch reboot Total Neighbours Entries Deleted Shows the number of new entries deleted since switch reboot Total Neighbours Entries Dropped Shows the number of LLDP frames dropped d...

Page 312: ...rmation known as TLVs TLV ed it is counted and is short for Type Length Value If a TLV is malform discarded TLVs Unrecognized The number of well formed TLVs but with an unknown type value Org Discarde...

Page 313: ...Classes are defined 0 0 W Class 0 Max power 15 4 W Class 1 Max power 4 0 W Class 2 Max power 7 0 W Class 3 Max power 15 4 W Class 4 Max power 3 Pow T er Requested he Power Requested shows the request...

Page 314: ...al requested or used power by the PDs exceeds the maximum power the Power Supply can deliver and port s with the lowest priority is are powered down No PD detected No PD detected for the port PoE turn...

Page 315: ...l upon a Refresh button click assume the value of the rst displayed entry allowing for continuous refresh with the same start address he will use the last entry of the currently displayed VLAN MAC add...

Page 316: ...shes the displayed table starting from the Start from MAC address and VLAN input fields Clear Flushes all dynamic entries Updates the table starting from the first entry in the MAC Table i e the entry...

Page 317: ...layed for each VLAN ID If a port is included in a VLAN the following image will be displayed If a port is in the forbidden port list the following image will be displayed If a port is in the forbidden...

Page 318: ...the selected user is shown in the table Use the button to start over basis for the next lookup When the end is Buttons Select VLAN Users from this drop down list Auto refresh Check this box to refresh...

Page 319: ...e given software modules hasn t overridden any of the port settings the text data exists for the selected user is shown in the table V c The d me of th T s in If a No Port he logical port for the sett...

Page 320: ...n the drop down list The higher in the ed user and the ing software module hardware Two users may have conflicting requirements to a port s configuration For instance one user may require all frames t...

Page 321: ...gured through Web or CLI Owner contains Configured throug identifying the sFlow receiver IP Address Hostname The IP address or hostname of the sFlow receiver Timeout Th ning before sampling stops and...

Page 322: ...ere Rx flow samples contains the number of packets that were sa ed upon reception umber of packets that were sampled upon transmission egress on the port mpl ingress on the port and Tx flow samples co...

Page 323: ...Web Management 4 4 3 Web Management Diagnostics This section of the management web page provides you tools for diagnosing your network 315...

Page 324: ...10 10 132 20 icmp_seq 0 time 0ms 4 bytes from 10 10 132 20 icmp_seq 1 time 0ms 4 bytes from 10 10 132 20 icmp_seq 2 time 0ms 4 bytes from 10 10 132 20 icmp_seq 3 time 0ms 4 bytes from 10 10 132 20 icm...

Page 325: ...ver 10 10 132 20 56 bytes of data 64 bytes from 10 10 132 20 icmp_seq 0 time 0ms 64 bytes from 10 10 132 20 icmp_seq 1 time 0ms 64 bytes from 10 10 132 2 64 bytes from 10 10 132 20 icmp_seq 3 time 0 6...

Page 326: ...ly when the corresponding IPv6 interface is valid When the egress interface is not given PING6 finds the best match interface for s interface for loopback address destination Do not specify egres Do s...

Page 327: ...rt will cause the switch to top responding until VeriPHY is complete he ports belong to the currently selected stack unit as reflected by the page eader copper po Pr s the Start button to run the diag...

Page 328: ...Cross D Abnormal cross pair coupling with pair D Length The length in meters of the cable pair The resolution is 3 meters 320...

Page 329: ...download all system settings art Device Here you can make system maintenance such rebooting the PoE switch settings firmware 4 4 1 Maintenance Rest You can restart the stack on this page After restar...

Page 330: ...licking Yes on the Web UI select Maintenance Configuration and Save Startup config Click Save Configuration The switch is restored to its default onfiguration is available immediately which means that...

Page 331: ...u need to re 2 Turn off and then turn on the switch in the back of GV POE0812 3 When rt LED light one and two start blinking unplug the Ethernet cable from L 5 Select Maintenance Configuration and Sav...

Page 332: ...pload Click this button to start upload the firmware The system will inform you when the new firmware is uploaded to the switch After updating the firmware the switch will reboot Warning The managemen...

Page 333: ...firmware releases This does not constitute an error button is also disabled If the alternate image is active due to a corrup manual intervention uploading a new firmware image to the device will autom...

Page 334: ...artup config The startup configuration for the switch which will be read This file 5 1 Configuration Save Startup config when the switch is booting Default config A read only file with vendor specific...

Page 335: ...ownload File Name Here you can choose the configuration file you would like to save to your PC ding inclu Running config Startup config Default config Buttons Download Configuration Click this button...

Page 336: ...config the file will be applied to the current switch onfiguration in two ways Replace mode The current configuration is fully replaced with the configuration in the uploaded file Merge mode The uplo...

Page 337: ...e activated immediately Please note that although the configuration file you choose here will be activated and run as the current configuration setting it will not be saved as the startup config autom...

Page 338: ...re you can delete the configuration files saved on the switch File Name Choose the configuration file that you would like to delete here Buttons Delete Configuration File Click this button to delete t...

Page 339: ...water or liquid DO NOT stack this product with other network devices directly on top of one another Stacking network devices directly without applying a mounting rack will cause this product to overhe...

Page 340: ...powering up this product please make sure that the electric power ers source meets this product s requirement DO NOT use other power adapt if this product comes with its own power adapter in the pack...

Page 341: ...ess properly in a Microsoft indows 8 environment Setting IP address in other Microsoft operating system such as Windows Vista or Windows 7 is quite the same and can be related Open Network and Sharing...

Page 342: ...he figure down below n 4 An Ethernet Properties window will pop up Please double click on the Internet Protocol Version 4 TCP IPv4 5 An Internet Protocol Version 4 TCP IPv4 Properties window will pop...

Page 343: ...ess as long as it s not the same with IP a your product s IP address and is in the same network segment with your product s IP address Press OK to apply the TCP IPv4 settings you just made Now you can...

Page 344: ...n In networking the ACL refers to a list of ervice ports or network services that are available on a host or server each with list of hosts or servers permitted or denied to use the service ACL can en...

Page 345: ...parallel to increase the link speed beyond the limits of a Using port and to increase the redundancy for higher availability ARP ARP is an acronym for Address Resolution Protocol It is a protocol tha...

Page 346: ...ers from a DHCP server The DHCP server ensures that all IP addresses are unique for example no IP address is assigned to a second client while the first client s assign the server and not by a human n...

Page 347: ...s and associates many types of information with domain names Most importantly DNS translates human friendly domain names and computer hostnames into computer friendly IP addresses For example the doma...

Page 348: ...ansfer Protocol It is a protocol that used to ansmitted and what actions r browser this actually sends an HTTP cting it to fetch and transmit the requested Web nd TP client sending s to server machine...

Page 349: ...802 1X IEEE 802 1X is an IEEE standard for port based Network Access Control It s authentication to devices attached to a LAN port establishing a ed from a server which means that authorized users ca...

Page 350: ...no packet of information sent over is assured to reach its destination in the same condition it was sent Each device connected to a Local Area Network LAN or Wide Area Network WAN is given an Internet...

Page 351: ...he management address or addresses of the entity o entities that provide management of those capabilities and the identific r ation of the stations point of attachment to the IEEE 802 LAN required by...

Page 352: ...ports to a mirror port In this context mirroring a frame is the same as copying the frame Both incoming source and outgoing destination frames can be mirrored to the mirror port em MLD MLD is an acro...

Page 353: ...de Point It is a 3 bit field storing the priority level for the 802 1Q frame It is also known as User Priority PD PD is an acronym for Powered Device In a PoE system the power is delivered from a PSE...

Page 354: ...r synchronizing the clocks of computer systems Q QCE QCE is an acronym for QoS Control Entry It describes QoS class associated with a particular QCE ID There are six QCE frame types Ethernet Type VLAN...

Page 355: ...m for R RARP everse Address Resolution Protocol It is a protocol the complement of ARP that is used to obtain an IP address for a given hardware address such as an Ethernet address RARP is RADIUS RADI...

Page 356: ...col 8 p identifier SNMP SNMP is an acronym for Simple Network Management Protocol It is part of the Transmission Control Protocol Internet Protocol TCP IP protocol for network management SNMP allow di...

Page 357: ...frame TCP TCP is an acronym for Transmission Control Protocol It is a communications protocol that uses the Internet Protocol IP to exchange the messages betwe computers en The TCP protocol guarantee...

Page 358: ...in The most significant 6 bits of the ToS field are fully decoded into 64 ponding bit in the IPv4 ToS priority control bit 0 63 the IP header possibilities and the singular code that results is compar...

Page 359: ...witching This is the default configuration All ports are VLAN are with Port VLAN ID 1 and members of VLAN 1 This means that MAC N AN aware switching This is based on the IEEE 802 1Q standard All ports...

Page 360: ...AN configured specially for voice traffic By adding the ports with voice devices attached to voice VLAN we can perform QoS related d configuration for voice data ensuring the transmission priority of...

Search results

Summary of Contents for GV-POE0812

Reviews:

Brands by name

Popular brands

GeoVision GV-POE0812, User Manual

Search results

Summary of Contents for GV-POE0812

Reviews:

Brands by name

Popular brands