manualshive.com logo in svg

Hirschmann MS30, Power MICE, MACH 4000, OCTOPUS, User Manual

Share
Download
Hirschmann MS30, Power MICE, MACH 4000, OCTOPUS User Manual Download Page 81

Protection from unauthorized access

Layer 2 Enhanced with Layer 2 Professional

Release 1.0 10/05

6.4 Port access control

81

  

Fig. 23:

Port Security dialog

 

Note: 

This entry in the port configuration table is part of the configuration 

(

“Loading/saving settings” on page 51

) and is saved together with the 

configuration.

Note: 

An alarm (trap) can only be sent if at least one recipient is entered 

under 

“Configuring traps” on page 135

 and both the appropriate status 

and “Port Security” are marked.

Summary of Contents for MS30, Power MICE, MACH 4000, OCTOPUS

Page 1: ...hanced with Layer 2 Professional Release 1 0 10 05 Technical Support HAC Support hirschmann de User Manual Basic Configuration Industrial ETHERNET Gigabit Switch RS20 RS30 MS20 MS30 Power MICE MACH 40...

Page 2: ...r own use The performance features described here are binding only if they have been expressly guaranteed in the contract This publication has been created by Hirschmann Automation and Control GmbH ac...

Page 3: ...ics IP parameter 27 2 1 1 IP address version 4 27 2 1 2 Network mask 28 2 1 3 Example of how the network mask is used 30 2 2 Entering the IP parameters via CLI 32 2 3 Entering the IP parameters via Hi...

Page 4: ...e software available 60 4 1 2 Starting the software 62 4 1 3 Performing a cold start 62 4 2 Loading the Software from the tftp Server 63 4 3 Loading Software via HTTP 65 5 Configuring ports 67 6 Prote...

Page 5: ...02 8 1 1 Store and forward 102 8 1 2 Multi address capability 102 8 1 3 Aging of learned addresses 103 8 1 4 Entering static address entries 104 8 2 Multicast application 106 8 2 1 Description multica...

Page 6: ...of band signaling 137 9 2 1 Manual setting the signal contact 138 9 2 2 Monitoring correct operation via the signal contact 139 9 3 Port status indication 141 9 4 Event counter on port level 143 9 5...

Page 7: ...mpetence 172 B 2 FAQ 173 B 3 Management Information BASE MIB 174 B 4 Used abbreviations 177 B 5 List of RFC s 178 B 6 Based IEEE standards 180 B 7 Technical Data 181 B 8 Copyright of integrated softwa...

Page 8: ...Contents 8 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Page 9: ...D Function diagnosis The Installation user manual contains a device description safety instructions a description of the display and all the other information that you need to install the device befor...

Page 10: ...About this Manual 10 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Page 11: ...Work step U Subheading Indicates a cross reference with a stored link Note A note emphasizes an important fact or draws your attention to a dependency Courier font ASCII representation in user interf...

Page 12: ...Key 12 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Hub A random computer Configuration computer Server...

Page 13: ...Introduction The Switch has been developed for practical application in a harsh industrial environment Accordingly the installation process has been kept simple Thanks to the selected default settings...

Page 14: ...Introduction 14 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Page 15: ...1 Access to the user interfaces The Switch has three user interfaces which you can access via different interfaces D System monitor via the V 24 interface out of band D Command Line Interface CLI via...

Page 16: ...otcode information U Opening the system monitor V Using a terminal cable see accessories connect the V 24 RJ11 socket to either a terminal or a COM port of a PC with terminal emulation according to VT...

Page 17: ...r 2 Professional Release 1 0 10 05 1 1 System monitor 17 Fig 1 Screenshot during the boot process V Press within one second the 1 key to start system monitor 1 PowerMICE MS4128 5 Boot Release 1 00 Bui...

Page 18: ...lay V Select the desired menu by entering the number V To leave a sub menu and return to the main menu of system monitor 1 press ESC System Monitor Selected OS L3P 01 0 00 K16 2005 10 31 19 32 1 Selec...

Page 19: ...Line Interface The Command Line Interface can be accessed via D the V 24 out of band port or D Telnet in band Note To facilitate making entries the CLI offers the option of abreviating keywords Type...

Page 20: ...te on delivery value for the password is private Press the Enter key You can change the username and the password later in the Com mand Line Interface Note that these entries are case sensitive The st...

Page 21: ...1 0 10 05 1 2 Command Line Interface 21 Fig 4 CLI screen after login NOTE Enter for Command Help Command help displays all options that are valid for the normal and no command forms For the syntax of...

Page 22: ...e the Switch U Opening the Web based Interface To open the Web based interface you will need a Web browser a pro gram that can read hypertext for example Mozilla Firefox version 1 or higher or Microso...

Page 23: ...ser V Establish the connection by entering the IP address of the Switch that you want to administer via the Web based network management in the address field of the Web browser Enter the address in th...

Page 24: ...to access the Switch with write per mission then highlight the contents of the password field and overwri te it with the password private state on delivery Changing the password protects the Switch ag...

Page 25: ...ers via HiDiscovery on page 35 D Using the AutoConfiguration Adapter ACA Choose this method if you are replacing the Switch with a Switch of the same type and have already saved the configuration on a...

Page 26: ...using DHCP Option 82 You need a DHCP server with Option 82 for this The DHCP server assigns the configuration data to the Switch using its physical connection see System Configuration via DHCP Option...

Page 27: ...eed an IP address block contact your Internet Service Provider Internet Service Providers should contact their local higher level organization D APNIC Asia Pacific Network Information Centre Asia Paci...

Page 28: ...responsible for the uniqueness of the IP addresses he assigns 2 1 2 Network mask Routers and gateways subdivide large networks into subnetworks The net work mask assigns the IP addresses of the indivi...

Page 29: ...ove sub net mask is applied 255 255 192 0 Decimal notation 11111111 11111111 11000000 00000000 Binary notation Subnetwork mask bits Class B 129 218 65 17 Decimal notation 10000001 11011010 01000001 00...

Page 30: ...nows Juliet s IP address and also knows that the router Lorenzo knows the way to Juliet Romeo therefore puts his message in an envelope and writes Juliet s IP ad dress as the destination address For t...

Page 31: ...nner envelope with Romeo s IP address Opening the inner envelope and reading its contents corresponds to transferring the message to the higher protocol layers of the ISO OSI layer model Juliet would...

Page 32: ...art for entering IP addresses If there is no terminal or PC with terminal emulation available in the vicinity of the installation location the IP parameters can also be entered in your wor king enviro...

Page 33: ...parms IP Adresse Netzmaske Gateway and press the Enter key D Locale IP address On delivery the local IP address of the Switch is 0 0 0 0 D Network mask If your network has been divided up into subnetw...

Page 34: ...config nvram startup config and then press the Enter key Confirm that you want to save the configuration by pressing y After entering the IP parameters you can easily configure the Switch via the Web...

Page 35: ...oftware is on the CD sup plied with the Switch V To install it you start the installation program on the CD Note The installation of HiDiscovery involves installing the WinPcap Version 3 0 software pa...

Page 36: ...the symbol with the two green dots in the tool bar to set the LEDs for the selected device flashing To Switch off the flashing click on the symbol again By double clicking a line you open a window in...

Page 37: ...itch failure the ACA enables a very simple configuration data transfer by means of a substitute Switch of the same type When you start the switch it checks for an ACA If it detects an ACA with a valid...

Page 38: ...5 Fig 12 Flow chart loading configuration data from ACA ACA vorhanden Ja Konfiguration vom ACA laden ACA LEDs blinken synchron Nein Passwort im Switch und ACA identisch Ja Nein Voreingestelltes Passwo...

Page 39: ...System configu ration via the Web based Interface on page 47 or see in the CLI V Make the following data for the Switch available to the BOOTP server etc bootptab for BOOTP daemon bootpd gw gateways...

Page 40: ...r are comment lines The lines under global make the configuration of several devices easier With the template tc you allocate the global configuration data tc global The direct allocation of hardware...

Page 41: ...or the BOOTP DHCP process part 1 see note on page 54 2 DHCP or BOOTP Send DHCP BOOTP Requests Reply from DHCP BOOTP server Yes Yes Save IP parameter and config file URL locally initialize IP stack wit...

Page 42: ...Flow chart for the BOOTP DHCP process part 2 see note on page 54 Load transferred config file No Yes Load remote configuration from URL of DHCP No Yes Start tftp process with config file URL of DHCP...

Page 43: ...the Command Line Interface On startup an Switch receives its configuration data according to the BOOTP DHCP process flow chart see Fig 13 The Switch sends its system name to the DHCP server The DHCP s...

Page 44: ...om IP address whichever one happens to be availa ble is assigned On delivery DHCP is enabled As long as DHCP is activated the Switch attempts to obtain an IP address If it cannot find a DHCP server af...

Page 45: ...r hugo option dhcp client identifier 00 68 75 67 6f fixed address 149 218 112 83 server name 149 218 112 11 filename agent config dat Lines that start with a character are comment lines The lines prec...

Page 46: ...l on the device being configured see System configuration via DHCP on page 43 Option 82 is based on the network topology This procedure gives you the option of always assigning the same IP address to...

Page 47: ...assign IP parameters and VLAN ID and configure the HiDiscovery access Fig 16 Dialog network parameter V Under Modus you enter where the Switch is to obtain its IP parameters D In the BOOTP mode the co...

Page 48: ...a Netmask and a Gateway Address to the Switch V With the VLAN ID frame you can assign a VLAN to the Switch V The HiDiscovery protocol see Entering the IP parameters via HiDiscov ery on page 35 allows...

Page 49: ...a Switch of the same type Faulty Device Replacement D First you can configure the new switch using an AutoConfiguration Adapter see Loading the system configuration from the ACA on page 37 or D Secon...

Page 50: ...Entering the IP parameters 50 2 9 Faulty Device Replacement Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Page 51: ...witch saves settings such as the IB parameters and the port configuration in the temporary memory These settings are lost when you switch off or reboot the device The Switch enables you to D save sett...

Page 52: ...itch enables you to load settings from the following sources D the local non volatile memory D the AutoConfiguration Adapter If an ACA is connected to the Switch the Switch always loads its configurat...

Page 53: ...he AutoConfiguration Adapter If an ACA is connected to the Switch the Switch always loads its configura tion from the ACA For information on how to save a configuration file onto an ACA refer to Sa vi...

Page 54: ...Switch loads the configuration file The URL is in the form tftp IP address of the tftp server path name file name e g tftp 149 218 112 5 switch config dat Example of loading a file from the TFTPServe...

Page 55: ...ding settings 55 Fig 17 Dialog Load Save V Enter the enable command to change to the Priviledged EXEC mode V Enter the command copy tftp 149 218 112 159 switch config dat nv ram startup config if you...

Page 56: ...the state on delivery After restarting the IP address is also in the original delivery state Setting in the System Monitor V Select 5 Erase main configuration file This menu offers you the possibility...

Page 57: ...the local permanent memory and the ACA V Select the Basics Load Save dialog V Click in the Save frame Local V Click Save configuration As a result the Switch saves the current configuration data into...

Page 58: ...figuration The URL marks the path to the tftp server on which the Switch saves the configuration file The URL is written as follows tftp IP address of the tftp server path name file name e g tftp 149...

Page 59: ...hmann Internet site than the release the you have on your Switch U Checking the software release installed U Loading the software The Switch gives you three options for loading the software D From the...

Page 60: ...the system monitor on page 16 V Select 2 and press the ENTER key to copy the software from the ACA 21 USB into the local memory of the Switch On concluding the update the System Monitor prompts you t...

Page 61: ...ersion Select 1 to load the other software with the next reboot U Copy image to backup Select 2 to save a copy of the active software U Test stored images in flash memory Select 3 to test if the store...

Page 62: ...codes U Apply and store selection Select 5 to apply and store the selection of the software U Cancel selection Select Sie 6 to cancel selection and leave this dialogue without changes 4 1 2 Starting...

Page 63: ...e to be loaded is stored see tftp server for software updates on page 165 V Select the Basics Software dialog The URL identifies the path to the software stored on the tftp server The URL is in the fo...

Page 64: ...Layer 2 Professional Release 1 0 10 05 V After the loading procedure has been completed successfully activa te the new software as follows Select the Basics Restart dialog und and perform a cold start...

Page 65: ...e http Update browser window V Click Browse or Search to select the software switch bin on your PC for the update V Click Update to transfer the software to the Switch The end of the update is indicat...

Page 66: ...Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 V After the software procedure has been completed successfully go to Basics Restart and perform a cold start Restart Switch V Click Reload...

Page 67: ...o connect U Selecting the Operation Mode In the state on delivery all ports are switched to the Automatic Configu ration mode V Select the Basics Port Configuration dialog V Select in the Port on colu...

Page 68: ...on error via the signal contact and the LED display The Switch allows you to disable the displaying of connection error messages for instance to prevent a device that has been turned off from being in...

Page 69: ...access Protect your network from unauthorized access The Switch provides you with the following functions for protecting against unauthorized access D Password for SNMP access D Setting the Telnet Web...

Page 70: ...er and the password with the entries in the MIB of the Switch see Management Information BASE MIB on page 174 If the password has the appropriate access right and if the IP address of the sending com...

Page 71: ...se note that passwords are case sensitive For security reasons the read password and the read write pass word must not be identical The Web based Interface and the User Interface communicate via SNMP...

Page 72: ...write access restart the Web in terface in order to access the Switch Note For security reasons the passwords are not displayed Make a note of every change You cannot access the Switch without a valid...

Page 73: ...select SNMPv1 or SNMPv2 in the table you can determine which IP addresses are allowed to access the Switch and which kind of pass words are to be used The table allows up to 8 entries For security rea...

Page 74: ...1 Password for SNMP access Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Abb 22 Dialog SNMPv1 v2 access V To create a new line in the table click Create entry V To delete an entry selec...

Page 75: ...Telnet server has been switched off the Switch can no longer be accessed via a Telnet connection Note The telnet server may be reactivated via the command line interface out of band or via the Securi...

Page 76: ...dialog V Switch off the server to which you wish to disable access V Enter the command enable to switch to the privileged EXEC mode V Enter the command transport input telnet to switch on the telnet s...

Page 77: ...overy function 6 3 1 Description HiDiscovery protocol The HiDiscovery protocol see Entering the IP parameters via HiDiscovery on page 35 allows you to assign an IP address to the Switch on the basis o...

Page 78: ...y Protocol frame or limit access to read only V Enter the command enable to switch to the privileged EXEC mode V Enter the command network protocol hidiscovery off to switch off the HiDiscovery functi...

Page 79: ...ine by his MAC address or his IP address D What should happen after an unauthorized access attempt The Switch can respond in three selectable ways to an unauthorized access attempt non no response tra...

Page 80: ...ess column shows the MAC address of the device from which data was last received By pressing the left mouse button you can copy an entry from the Current MAC address column into the Allowed MAC addres...

Page 81: ...urity dialog Note This entry in the port configuration table is part of the configuration Loading saving settings on page 51 and is saved together with the configuration Note An alarm trap can only be...

Page 82: ...witch The authentication and authorization is carried out by the Authenticator in this case the Switch This authenticates or does not authenticate the supplicant the querying device e g a PC which mea...

Page 83: ...cation server replies concerning the autherization D The Switch evaluates the reply and allows access to the supplicant at this port or leaves the port in the blocked state 6 5 3 Preparing the switch...

Page 84: ...the Shared secret column you enter the character string which you get as a key from the administrator of your Radius server V With Primary server you name this server as the first server which the Swi...

Page 85: ...in the order of milliseconds the Simple Net work Time Protocol SNTP offers a low cost solution Accuracy depends on signal running time Areas of application of this protocol are log entries time stampi...

Page 86: ...ccount D The System time uses IEEE 1588 SNTPtime allowing for the lo cal time difference from IEEE 1588 SNTPtime System time IEEE 1588 SNTPtime Local offset D Time Source displays the origin of the fo...

Page 87: ...ter the command enable to switch to the privileged EXEC mode V Enter the command configure to change to the configuration mo de V Enter the command sntp time YYYY MM DD HH MM SS to set the Switch syst...

Page 88: ...Coordinated at disposal The UTC is the time which is refe renced to Universal Time Coordinated The display is the same worldwide Local time differences are not taken into account The SNTP Client obta...

Page 89: ...tch on the SNTP function on all devices whose time you want to set using SNTP V If you do not have a reference clock at your disposal use a Switch as the reference clock and set its system time as acc...

Page 90: ...packages U SNTP Status D The Status message displays conditions such as Server cannot be reached U Configuration SNTP Server V In Anycast destination address you enter the IP address to which the SNT...

Page 91: ...nswer from the ex ternal server address 0 5 seconds after making a request Note If you are receiving the system time from an external redun dant server address you do not accept any SNTP broadcasts se...

Page 92: ...218 112 2 149 218 112 3 Function on on on Anycast destination address 224 0 1 1 224 0 1 1 224 0 1 1 Server VLAN ID 1 1 1 Anycast send interval 120 120 120 Client External server address 149 218 112 0...

Page 93: ...cks according to their accuracy An algorithm that measures the accuracy of the available clocks in the network determines the most accurate time for the grandmaster clock Stratum number Specification...

Page 94: ...al clock into consideration in relationship to the reference clock Fig 27 Delay and jitter problems when synchronizing clocks To get around the delay and jitter in the protocol stack IEEE 1588 recom m...

Page 95: ...t are integrated into the devices These clocks are synchronized on the one side of the signal path and on the other side of the signal path are used to synchronize the subsequent clocks ordinary clock...

Page 96: ...fficient for most applications V Draw a network plan showing all devices involved in PTP to get an overview of the distribution of the clocks Note Connect all connections you need to distribute PTP in...

Page 97: ...to the ports individually U PTP Global V Select the Time PTP dialog V Switch on the function ind the Operation IEEE 1588 PTP frame V If you have designated this Switch to be the PTP reference clock c...

Page 98: ...nce clock PTP SubdomainName Name of the PTP subdomain which the local clock belongs to By selecting Reinitialize you accept the changes PTP PreferredMaster Defines the local clock as the Prefer red Ma...

Page 99: ...ock see Table 6 on page 91 PTP ClockIdentifier Properties of the clock e g accuracy epoch etc Fig 30 PTP Global dialog U PTP port D PTP Port enalble Port sends receives PTP synchronization messages di...

Page 100: ...d PTP function on this port is disabled passive Port is in the PTP passive mode listening Port has no information available and is awaiting synchronization messages D PTP port burst disable During a s...

Page 101: ...ely from one source If you want the switch to receive the system time using PTP enter the external server address 0 0 0 0 and do not accept any SNTP broadcasts when performing the SNTP client configur...

Page 102: ...nization PTP is active in all three switches ensuring that relative to each other the system times of the switches are synchronized precisely As the con nectable terminal devices in the example exclus...

Page 103: ...Traffic control To optimize the data transmission the Switch provides you with the following functions for controlling the network load D Settings for directed frame forwarding MAC address filter D Mu...

Page 104: ...address entries 8 1 1 Store and forward All data received by the Switch is stored and its validity is checked Invalid and defective data packets 1 522 Bytes or CRC errors as well as frag ments 64 Byt...

Page 105: ...the learned addresses Address entries which exceed a certain age 30 seconds aging time are deleted by the Switch from its address table The Switch floods data packets with an unknown target address Th...

Page 106: ...l filters are stored in the filter table Forwarding Database FDB The table has three parts a static part and two dynamic parts D The management administrator describes the static part of the filter ta...

Page 107: ...he receiving port to all other ports In the Create static entry dialog you can set up new filters The following status settings are possible D learned the filter was created automatically by the Switc...

Page 108: ...ll the data packets with a Multicast address to all the ports This leads to an increased bandwidth re quirement Protocols such as GMRP and processes such as IGMP Snooping enable the Switches to exchan...

Page 109: ...IP transmission a camera sends its image data with a multicast address over the network To prevent the many images from slowing down the entire network the Switch uses the GMRP to distribute multicast...

Page 110: ...rship by means of a Leave message from IGMP version 2 and they do not transmit any more Report messages In IGMP versions 1 and 2 the router removes the routing table entry if it does not receive any R...

Page 111: ...id of the GMRP For a Switch registration involves entering the multicast address in the filter table When a multicast address is entered in the filter table the Switch sends this information in a GMRP...

Page 112: ...entire Switch If the GMRP is switched off then D the Switch does not generate any GMRP packets D it does not evaluate any GMRP packets received discards them and D it sends streams received data pack...

Page 113: ...P report messages to the ports at which it receives IGMP queries This column allows you to also send IGMP report messages to other selected ports U Learned Query Port A Switch sends IGMP report messag...

Page 114: ...Traffic control 112 8 2 Multicast application Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 34 IGMP GMRP dialog...

Page 115: ...a second If more than the maximum entered number of broadcasts are sent within a second the Switch rejects all subsequent broadcasts destined for this port A global setting activates deactivates the b...

Page 116: ...queues traffic classes in compliance with IEEE 802 1D 1998 The assignment of received data packets to these clas ses depends on D the priority of the data packet contained in the VLAN tag priority ov...

Page 117: ...her data packets waiting in the queue 8 4 3 Tagging The VLAN tag is integrated into the MAC data frame for the VLAN and prio ritization functions in accordance with the IEEE 802 1 Q standard The VLAN...

Page 118: ...min 64 max 1522 Octets Pream ble Field Start Fram e Delim iter Field Destination Address Field Source Address Field Tag Field Data Field Length Type Field Data Field Pad Field Fram e Check Sequence Fi...

Page 119: ...05 8 4 Prioritization 117 8 4 4 Setting Prioritization V Select the Basics Port Configuration dialog V In the Port Priority column you can specify the priority low normal high admin with which the Swi...

Page 120: ...usly transmit a large amount of data to Workstation 4 The combined bandwidth of Workstations 1 2 and 3 is larger than the bandwidth of Workstation 4 to the Switch This leads to an overflow of the send...

Page 121: ...f duplex link between Work station 2 and the Switch Before the send queue of Port 2 overflows the Switch sends data so that workstation 2 detects a collision and thus interrupts the transmis sion 8 5...

Page 122: ...6 1 Description VLANs A virtual LAN VLAN consists of a group of network participants in one or more network segments who can communicate with each other as if they be longed to the same LAN Fig 38 Exa...

Page 123: ...ture of the VLAN tag see Fig 36 to 4094 Key words often used in association with VLANs are U Ingress Rule The ingress rules stipulate how incoming data is to be handled by the Switch U Egress Rule The...

Page 124: ...ctions complying with IEEE 802 1Q standard Note When configuring the VLAN ensure that the port to which your management station is connected can still send the data of the mana gement station after sa...

Page 125: ...re that supports this function namely D Power MICE D MICE Rel 3 0 and higher D RS2 Rel 7 0 and higher D RS2 16M Rel 7 1 and higher D MACH 3000 Note In the HIPER Ring configuration select for the ring...

Page 126: ...AN V Define the affiliation of the ports you require not a member of the VLAN M a member of the VLAN packet is transmitted with tag F not a member of the VLAN even not dynamically via GVRP U a member...

Page 127: ...ctice The configuration is explained step by step V Select the Switching VLAN Current dialog The Current table displays all configured VLANs All refers to the local VLANs configured by GVRP V Select t...

Page 128: ...l 126 8 6 VLANs Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 39 Example of a VLAN 149 218 112 208 149 218 112 76 h H h H h H h H VLAN Yellow VLAN Green VLAN Brown ID 1 Network Mana...

Page 129: ...c control Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 8 6 VLANs 127 Fig 40 Creating a VLAN Fig 41 Entering a VLAN ID V Repeat the steps Creating a VLAN and Entering a VLAN ID for all...

Page 130: ...Traffic control 128 8 6 VLANs Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 42 Assigning a VLAN any name and saving it...

Page 131: ...to 1 3 are assigned to the terminal devices of the yellow VLAN and ports 2 1 to 2 4 to the terminal devices of the green VLAN As termi nal devices normally do not sent data packets with a tag the sett...

Page 132: ...Traffic control 130 8 6 VLANs Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 44 Saving the VLAN configuration...

Page 133: ...igned to the terminal devices of the yellow VLAN and therefore VLAN ID 2 and ports 2 1 to 2 4 are assigned to the termi nal devices of the green VLAN and hence VLAN ID 3 Port 1 4 serves as an uplink p...

Page 134: ...Traffic control 132 8 6 VLANs Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 46 Saving the configuration to non volatile memory...

Page 135: ...tch provides you with the following diagnostic tools for the function diagnosis D Sending traps D Out of band signaling via signal contact D Port status indication D Event counter on port level D SFP...

Page 136: ...uerying the data stations at regular intervals Traps make it possible to react quickly to critical situations Examples of such events are D a hardware reset D changing the basic device configuration D...

Page 137: ...ot of the spanning tree topologyChange is sent if the transmission mode of a port changes risingAlarm is sent if an RMON alarm input exceeds the upper threshold fallingAlarm is sent if an RMON alarm i...

Page 138: ...Operation Diagnostics 134 9 1 Sending traps Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 9 1 2 SNMP traps when booting The ColdStart trap is sent during every boot procedure...

Page 139: ...n alarm trap and to whom these alarms should be sent V In the IP Address column enter the IP address of a network management station to which the traps should be sent V In the Active column you mark t...

Page 140: ...wer Supply The status of a supply voltage has changed see the System dialog Signaling Relay The status of the signal contact has changed To cosider this event enable generate Trap in the Diagno stics...

Page 141: ...indica tion of link status can be masked by the management for each port see Verbindungsfehler melden auf Seite 68 Link status is not monitored in the delivery condition D HIPER Ring event the loss of...

Page 142: ...ividually Application options D Simulation of an error during SPS error monitoring D Remote control of a device via SNMP such as switching on a camera V Select the Diagnostics Signal Contact 1 2 dialo...

Page 143: ...he command line interface V Select the Diagnostics Signal Contact dialog V Select Monitoring correct operation in the frame Mode Signal con tact to use the contact for function monitoring V Select in...

Page 144: ...Operation Diagnostics 140 9 2 Out of band signaling Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 49 Signal contact dialog...

Page 145: ...ice view displays the Switch with the current configuration The symbols underneath the device view represent the status of the individu al ports Abb 50 Eaxample for a device view Meaning of the symbol...

Page 146: ...Operation Diagnostics 142 9 3 Port status indication Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 The port is in autonegotiation mode...

Page 147: ...ter Possible Problems Received Fragments The controller of the connected device is faulty Electromagnetic interference is injected into transfer medium CRC error The controller of the connected device...

Page 148: ...Operation Diagnostics 144 9 4 Event counter on port level Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 51 Port statistic table...

Page 149: ...g the SFP status displayed you can view the current connection to the SFP modules and their properties The properties include D module type D support provided in the media module D temperature in degr...

Page 150: ...or then the Distance row contains the distance of the port from the cable error Prerequisites for a proper cable diagnosis D 1000BASE T port is connected via an 8 core cable with a 1000BASE T port or...

Page 151: ...devices that have LLDP activated The connection information contains as its most significant element the precise and unique ID of a connection endpoint MSAP MAC Service Access Point This is composed...

Page 152: ...y switches without LLDP support drop the LLDP packets Consequently a non LLDP capable device between two LLDP capable devices prevents the exchange of LLDP infor mation To avoid this Hirschmann Switch...

Page 153: ...s dialogue offers you the possibility to switch on off the function for topology discovery LLDP The topology table shows you the selected information to neighbour devices The option View LLDP entries...

Page 154: ...active topology discovery function are connected to a port the topology table hides the devices without ac tive topology discovery If D only devices without active topology discovery are connected to...

Page 155: ...ch records all important device internal events D System Information The system information in an HTML file containing all system relevant data These reports are available for diagnosis purposes In se...

Page 156: ...management tool connected to the destination port such as an RMON probe can thus observe the data traffic at the source port The destination port forwards data to be sent and blocks received data Fig...

Page 157: ...rt traffic port mirroring 153 V Select enabled to enable the function The Delete button in the dialog allows you to restore all the default port mirroring settings state on delivery Note In active por...

Page 158: ...Operation Diagnostics 154 9 9 Monitoring port traffic port mirroring Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Page 159: ...Setting up DHCP Server and TFTP Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 153 Apendix A Setting up DHCP Server and TFTP...

Page 160: ...nstallation and then decide whether you want to purchase a license V To install the DHCP server on your PC insert the CD ROM into the CD drive of your PC and under Additional Software select haneWIN D...

Page 161: ...gram settings in the menu bar Options Preferences and select the DHCP tab page Enter the settings shown in the illustration and click on OK Fig 57 DHCP setting V To enter the configuration profiles se...

Page 162: ...ase 1 0 10 05 V Enter the network mask and click on Accept Fig 59 Network mask in the configuration profile V Select the Boot tab page V Enter the IP address of your tftp server V Enter the path and t...

Page 163: ...a profile for each device type If devices of the same type have different configurations then you add a profile for each configuration To complete the addition of the configuration profiles click on O...

Page 164: ...d with Layer 2 Professional Release 1 0 10 05 V Click on New Fig 63 Adding static addresses V Enter the MAC address of the switch V Enter the IP address of the switch V Select the configuration profil...

Page 165: ...r and TFTP Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 A 1 Setting up DHCP BOOTP Server 159 V Add an entry for each device that will get its parameters from the DHCP server Fig 65 DHC...

Page 166: ...t installation and then decide whether you want to purchase a license V To install the DHCP server on your PC insert the CD ROM into the CD drive of your PC and under Additional Software select haneWI...

Page 167: ...Setting up DHCP Server Option 82 161 V Select static Fig 67 Static address input V Open the window for the program settings in the menu bar Options Preferences and select the DHCP tab page V Select th...

Page 168: ...rver Option 82 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 V To enter the static addresses click on Add Fig 69 Adding static addresses V Select Circuit Identifier and Remote Identifie...

Page 169: ...g form ciclhhvvvvssmmpprirlxxxxxxxxxxxx D ci sub identifier for the type of the circuit ID D cl length of the circuit ID D hh Hirschmann identifier 01 if a Hirschmann switch is connected to the port o...

Page 170: ...Option 82 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 72 Application example of using Option 82 PLC Switch Option 82 IP 149 218 112 100 IP 149 218 112 100 MAC address 00 80 63 10...

Page 171: ...ttp update saves you having to configure the tftp server The Switch requires the following information to be able to make a software update from the tftp server D its own IP address entered permanentl...

Page 172: ...d HP V First check whether the tftp daemon background process is running i e whether the file etc inetd conf contains the following line siehe Abb 73 and whether the status of this process is IW SunOS...

Page 173: ...tp daemon alt hough it is actually running Special steps for HP workstations V During installation on an HP workstation enter the user tftp in the etc passwd file For example tftp 510 20 tftp server u...

Page 174: ...server Edit the file etc inetd conf No Delete the comment character from this line Yes Re initialize inetd conf by entering kill 1 PID Is tftp commented out tftp dgram udp wait root usr etc in tftpd...

Page 175: ...tp server Once Switch software has been installed the tftp server should have the following directory structure with the stated access rights d directory r read w write x execute 1st position designat...

Page 176: ...Setting up DHCP Server and TFTP 170 A 3 tftp server for software updates Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Page 177: ...General Information Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 171 Appendix B General Information...

Page 178: ...ove the competition with its comprehensive spectrum of innovative services D Consulting incorporates comprehensive technical advice from system evaluation through network planning to project planning...

Page 179: ...y asked questions can be found at the Hirschmann Website www hirschmann com Under Products Support inside Automation and Network Soluti ons is located on the pages Products the area FAQ For detailed i...

Page 180: ...iption or the object ID OID identifies the object class The subidentifier SID is used for instantiation Example The generic object class hmPSState OID 1 3 6 1 4 1 248 14 1 2 1 3 is the description of...

Page 181: ...ss 12 digit hexadecimal number in accordance with ISO IEC 8802 3 Object Identifier x x x x e g 1 3 6 1 1 4 1 248 Octet String ASCII character string PSID Power Supply Identification number of the powe...

Page 182: ...scription of the MIB can be found on the CD ROM that is included with the device 1 internet 1 iso 3 org 6 dod 2 mgmt 1 enterprises 248 hirschmann 4 private 3 modules 10 Framework 6 snmp V2 1 mib 2 4 i...

Page 183: ...Internet Group Management Protocol IP Internet Protocoll LED Light Emitting Diode LLDP Link Layer Discovery Protocoll LWL Lichtwellenleiter MAC Media Access Control NTP Network Time Protocol PC Person...

Page 184: ...901 Community based SNMP v2 D RFC 1905 Protocol Operations for SNMP v2 D RFC 1906 Transport Mappings for SNMP v2 D RFC 1907 Management Information Base for SNMP v2 D RFC 1908 Coexistence between SNMP...

Page 185: ...ual Conventions for SMI v2 D RFC 2580 Conformance statements for SMI v2 D RFC 2613 SMON D RFC 2618 RADIUS Authentication Client MIB D RFC 2620 RADIUS Accounting MIB D RFC 2674 Dot1p Q D RFC 2818 HTTP...

Page 186: ...802 1 D 1998 Media access control MAC bridges includes IEEE 802 1p Priority and Dynamic Multi cast Filtering GARP GMRP D IEEE 802 1 Q 1998 Virtual Bridged Local Area Networks VLAN Tagging Port Based V...

Page 187: ...Release 1 0 10 05 B 7 Technical Data 181 B 7 Technical Data Switch MAC address table up to 8000 entries Static address filter up to 100 entries VLAN VLAN ID 1 to 4042 MACH 4000 3966 Number of VLANs ma...

Page 188: ...r sell copies of the Software and to permit persons to whom the Software is furnished to do so subject to the following conditions The above copyright notice and this permission notice shall be includ...

Page 189: ...rtant information that will ensure trouble free operation Your comments and suggestions help us to further improve the quality of our documentation Your assessment of this manual excellent good satisf...

Page 190: ...ent and additional information General comments Company Department Name Telephone number Street Zip code City Date Signature Dear User Please fill out and return this page by fax to the number 49 0 71...

Page 191: ...ss field 102 Destination port 151 DHCP 25 33 DHCP client 43 DHCP Option 82 46 DHCP server 154 160 E Egress rule 119 Erlaubte IP Adresse 80 Event counters 143 F FAQ 173 Faulty Device Replacement 49 FDB...

Page 192: ...queues 112 Priority tagged frames 113 Protocol stack 92 PTP 91 PTP Abs Max Offset 96 PTP Delay To Master 96 PTP Grandmaster UUID 96 PTP is Synchronized 96 PTP Offset To Master 96 PTP Parent UUID 96 P...

Page 193: ...es 112 Transmission security 132 Trap 80 132 135 Trap destination table 132 Trivial File Transfer Protocol 165 Type field 113 U Unicast 106 Unique Universal Identifier 96 Universal Time Coordinated 86...

Page 194: ...188 Index Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Page 195: ......

Page 196: ......

Reviews:

No comments

Brands by name

Popular brands

Load more brands