manualshive.com logo in svg

ICP DAS USA FSM-510G series, User Manual, Page: 98 / 99

Share
Download
ICP DAS USA FSM-510G series User Manual Download Page 98

 

 

98

 

 

 

Configuration 

 

 

 

Supplicant’s NIC Setting

 

Step 1: Configure a static IP address 20.20.20.10 and net mask 255.255.255.0 for supplicant.   

(If there is a DHCP server to assign IP address for supplicant, this step can be ignored.) 

 

Step 2: Select the IEEE802.1x Authentication Enable check box, then to configure EAP type to 

MD5-Challenge. 

After setting this function in NIC, supplicant should enter a correct pair of account and 

password in order to use this Ethernet port service from FSM-510G. 

 

 

configure 
interface vlan 1   
ip address 20.20.20.120 255.0.0.0exit 
exit 
radius-server host 20.20.20.20 timeout 5 retransmit 3 key a1b2c3d4 
dot1x re-authentication 
dot1x system-auth-control 
exit 
interface GigabitEthernet 1/1 
dot1x auth-port-control auto 
 

Summary of Contents for FSM-510G series

Page 1: ...1 FSM 510G series 10 Port Managed Industrial Ethernet Switch User Guide Version Number Issue 1 0 Dec 2014...

Page 2: ...owngrade Software 22 Reset to Default and Save Configure 23 LED STATUS INDICATIONS 26 VLAN Application Guide 29 Example 1 Default VLAN Settings 29 Example 2 Port based VLANs 30 Example 3 IEEE 802 1Q T...

Page 3: ...able 1 LED Status Indicators 26 LIST OF FIGURES Figure 1 FSM 510G DIN Rail Mounting 10 Figure 2 FSM 510G Wall Mounting 11 Figure 3 LED Indicators 26 Preface Scope Audience Safety Instructions Document...

Page 4: ...primary hazards of exposure to laser radiation from an optical fiber communication system are Damage to the eye by accidental exposure to a beam emitted by a laser source Damage to the eye from viewin...

Page 5: ...5 Overview Overview Faceplate Panel Introduction Technical Specifications...

Page 6: ...re range extended power input range and advanced VLAN QoS features It s ideal for harsh environments and mission critical applications Faceplate 10 Port series Front Panel Introduction Front Panel Sys...

Page 7: ...510G 2F FSM 510G 4F Total Gigabit Ethernet Ports 10 10 10 100 1000 BaseT X 8 6 100 1000 Base SFP 2 4 Top Panel Introduction Top Panel Power Input Dual 6P Terminal Block Console RS232 RJ45 Reset Push B...

Page 8: ...TP IEEE 802 1s MSTP Port Trunk with LACP Static trunk or Dynamic via LACP Link Aggregation Control Protocol Bridge VLANs Protocols Flow control IEEE 802 3x Full Duplex and Back Pressure Half Duplex VL...

Page 9: ...P Client Server Relay Snooping Option 82 NTP SNTP Yes Environmental Compliances Operating temperature range 40 to 75 C cold startup at 40 C Storage temperature range 40 to 85 C Humidity non condensing...

Page 10: ...10 Quick Installation Equipment Mounting Cable Connecting Equipment Configuration...

Page 11: ...ail Mounting step 1 Screw the DIN Rail bracket on with the bracket and screws in the accessory kit 2 Hook the unit over the DIN rail 3 Push the bottom of the unit towards the DIN Rail until it snaps i...

Page 12: ...12 Mounting the FSM 510G Wall mount Mounting step 1 Screw on the wall mounting plate on with the plate and screws in the accessory kit Figure 2 FSM 510G Wall Mounting...

Page 13: ...13 Ground Connections FSM 510G must be properly grounded for optimum system performance...

Page 14: ...onnect to a PC use a straight through or a cross over Ethernet cable To connect the FSM 510G copper Port to an Ethernet device use UTP Unshielded Twisted Pair or STP Shielded Twisted Pair Ethernet cab...

Page 15: ...connector Refer to Table 1 for the normal operational LED status Fiber optics cable with LC duplex connector Connect the optical fiber to the SFP socket DANGER Never attempt to view optical connectors...

Page 16: ...input range 12V 58V The DC power connector is a 6 pin terminal block There is alarm contact on the middle terminal block Refer to Table 1 for the normal operational LED status Note 1 The DC power shou...

Page 17: ...nsole port is for local management by using a terminal emulator or a computer with terminal emulation software DB9 connector connect to computer COM port Baud rate 115200bps 8 data bits 1 stop bit Non...

Page 18: ...M 510G the DB9 connector of the cable is connected to the PC COM port The pin assignment of the Console cable is shown below SYSTEM RESET The Reset button is provided to reboot the system without the...

Page 19: ...d Web page font Times New Roman Plain text font Courier New Encoding Unicode UTF 8 Text size Medium Firefox with the following default settings is recommended Web page font Times New Roman Encoding Un...

Page 20: ...20 Connect Login to FSM 510G 1 Connecting to FSM 510G Ethernet port RJ45 Ethernet port 2 Factory default IP 192 0 2 1 3 Login with default account and password Username admin Password none...

Page 21: ...J45 Ethernet port 2 Key in the command under Telnet telnet 192 0 2 1 3 Login with default account and password Username admin Password none 4 Change the IP with commands listed below CLI Command enabl...

Page 22: ...tus By SFP Refer to Figure 3 for monitoring 4 Gigabit Ethernet with SFP connector Also refer to Table 1 for the normal operational LED status Up Downgrade Software 1 In Web UI go to Maintenance Softwa...

Page 23: ...command reload defaults keep ip 2 check interface VLAN and IP address confirm only management IP setting kept 3 Execute this command copy running config startup config If manager want to reset the al...

Page 24: ...utton 2 Go to Maintenance Configuration Save startup config pagination then click Save Configuration button then reset successfully If manager want to reset the all configuration to default completely...

Page 25: ...25 3 Change WEB s IP be 192 0 2 1 default IP to login PC s Web UI 4 Go to Maintenance Configuration Save startup config pagination then click Save Configuration button then reset successfully...

Page 26: ...nk down On Yellow A 100 Mbps or a 1000Mbps connection is detected Copper ports Speed Off No link or a 10 Mbps connection is detected O On n G Gr re ee en n E Et th he er rn ne et t l li in nk k u up p...

Page 27: ...27 Figure 3 LED Indicators PWR LED Indicator ALM LED Indicator Copper Link Act LED Copper Speed LED SFP Speed LED SFP Link LED Indicator...

Page 28: ...28 Application Guide VLAN Application Guide Security Application Guide Ring Protection Application Guide QoS Application Guide Link Fail Alarm Application Guide 802 1x Authentication Application Guide...

Page 29: ...only to ports in the same VLAN Example 1 Default VLAN Settings Each port in the FSM 510G has a configurable default VLAN number known as its PVID This places all ports on the same VLAN initially alth...

Page 30: ...ollowing figure the untagged packet is marked tagged as it leaves the FSM 510G through Port 2 which is configured as a tagged member of VLAN100 The untagged packet remains unchanged as it leaves the F...

Page 31: ...ep4 Transmit untagged unicast packets from Port 1 to Port 2 and Port 7 The FSM 510G should tag it with VID 100 The packet has access to Port2 and Port 7 The outgoing packet is stripped of its tag to l...

Page 32: ...k vlan tag native switchport mode trunk exit interface GigabitEthernet 1 2 switchport access vlan 100 switchport trunk native vlan 100 switchport trunk allowed vlan 1 100 switchport trunk vlan tag nat...

Page 33: ...200 because of the tag assignment in the packet Port 2 is configured as a tagged member of VLAN 100 and Port 7 is configured as an untagged member of VLAN 200 Hosts in the same VLAN communicate with...

Page 34: ...tag it with VID 200 The packet only has access to Port7 The outgoing packet on Port 7 is stripped of its tag as an untagged packet Step4 Transmit unicast packets with VLAN tag 100 from Port 2 to Port...

Page 35: ...runk vlan tag native switchport mode trunk exit interface GigabitEthernet 1 1 switchport access vlan 100 switchport trunk allowed vlan 1 100 switchport trunk vlan tag native switchport mode trunk exit...

Page 36: ...ut permit frames set in ACL entry h Deny all frames i Deny all frames j Deny all frames but to copy frame which set in ACL entry to a defined GE port Case 1 ACL for MAC address For MAC address ACL it...

Page 37: ...ional MAC address with one VLAN deny filtering Step 1 Create a new ACL Profile Profile Name DenySomeMac Step 2 Create a new ACL Entry rule under this ACL profile Deny MAC 11 and VLAN 4 Step 3 Bind thi...

Page 38: ...ess list ace 1 ingress interface GigabitEthernet 1 4 policy 1 vid 4 frametype etype smac 00 00 00 00 00 11 action deny exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 switchport t...

Page 39: ...al MAC address with all VLAN deny filtering Step 1 Create a new ACL Profile Profile Name DenySomeMac Step 2 Create a new ACL Entry rule under this ACL profile Deny SrcMAC 13 and DesMAC 11 Step 3 Bind...

Page 40: ...ace 2 ingress interface GigabitEthernet 1 3 policy 0 frametype etype smac 00 00 00 00 00 13 dmac 00 00 00 00 00 11 action deny exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 swi...

Page 41: ...port Case 1 d User can set default ACL Rule of GE port as Permit then to bind a suitable profile with CoS Marking action for some ACL function It means GE port can remark CoS of the VLAN frame receiv...

Page 42: ...ess list ace 1 next 2 ingress interface GigabitEthernet 1 4 policy 1 vid 4 frametype etype smac 00 00 00 00 00 11 action deny exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 switc...

Page 43: ...ill copy frames from binding GE Port to analyzer port Two directional MAC address with Copy Frame action Don t care VLAN ID Ether Type Step 1 Create a new ACL Profile Profile Name CopyFrameTest Step 2...

Page 44: ...terface GigabitEthernet 1 3 policy 0 frametype etype smac 00 00 00 00 00 13 dmac 00 00 00 00 00 11 action deny mirror redirect interface GigabitEthernet 1 5 exit interface GigabitEthernet 1 3 switchpo...

Page 45: ...file with Permit action for ACL It means GE port can not pass through all packets but ACL entry of the profile binding One directional MAC address with one VLAN permit filtering Step 1 Create a new AC...

Page 46: ...access list ace 4 ingress interface GigabitEthernet 1 4 policy 3 tag tagged vid 4 frametype etype smac 00 00 00 00 00 11 exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 switchpor...

Page 47: ...MAC address with all VLAN permit filtering Step 1 Create a new ACL Profile Profile Name AllowSomeMac Step 2 Create a new ACL Entry rule under this ACL profile Allow SrcMAC 13 and DesMAC 11 Step 3 Bin...

Page 48: ...ss list ace 5 ingress interface GigabitEthernet 1 3 policy 5 frametype etype smac 00 00 00 00 00 13 dmac 00 00 00 00 00 11 exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 switchpo...

Page 49: ...file with Copy Frame action for mirror analyzer used It means the system will copy frames from binding GE Port to analyzer port There is no frame received from the denied GE port but the mirror analyz...

Page 50: ...QoS Application Guide 50 Step 5 Send frames between PORT 3 and PORT 4 see test result FSM510G FSM510G FSM510G...

Page 51: ...ac 00 00 00 00 00 13 dmac 00 00 00 00 00 11 Exit monitor destination interface GigabitEthernet 1 5 monitor source cpu both exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 switchpo...

Page 52: ...it should select exact one Protocol from UDP or TCP When it filters on both directional IP address and L4 port packets coincident with both rules will take effect In other words it does not do filter...

Page 53: ...important to Ethernet applications especially in Industrial domain Tailyn s FSM 510G provides a mini second grade failover ring protection this feature offers a seamless working network even if encou...

Page 54: ...te When role is ring slave both ring ports are forward port Group 2 It support configuration of the ring coupling and dual homing Ring it could be master or slave Coupling it could be primary and back...

Page 55: ...n and balancing chain Chain it could be head tail or member When role is chain head one ring port is head port and another is member port Both ring ports are forwarded in normal state When role is cha...

Page 56: ...cing chain terminal 1 2 one ring port is terminal port and another is member port Both ring ports are forwarded in normal state When role is balancing chain member both ring ports are member port Both...

Page 57: ...T 2 that means PORT 1 is one of the ports connected with other switch so is PORT 2 Then choose one of ring connection devices be Master which you can accept the Node 2 port be blocking port id 1 node1...

Page 58: ...re include ring coupling dual homing chain and balancing chain Note 1 It must enable group1 before configure group2 as coupling Note 2 When group1 or group2 is enabled the configuration of group3 is i...

Page 59: ...QoS Application Guide 5 First Step Disable RSTP on All Ring Port 1 Go to Configuration Spanning Tree CIST ports Web page 2 Do not enable STP global 3 Click Save bottom...

Page 60: ...nable Group1 and Select Role be Ring Master 3 Select one port link to neighbor devices be Forward Port another is Block Port Ring Slave 1 Go to Configuration Ringv2 Web page 2 Enable Group1 and Select...

Page 61: ...nk to above ring be Primary Port Coupling Backup 1 Go to Configuration Ringv2 Web page 2 Enable Group1 and Select Role be Ring Slave 3 Select two port link to neighbor devices be Forward Port 4 Enable...

Page 62: ...page 2 Enable Group3 and Select Role be Chain Head 3 Select one port link to other ring or networks be Head Port Chain Tail 1 Go to Configuration Ringv2 Web page 2 Enable Group3 and Select Role be Cha...

Page 63: ...Select Role be Balance Chain Central Block 3 Select one port be Block Port which could distribute traffic loading Balance Chain Terminal 1 Go to Configuration Ringv2 Web page 2 Enable Group3 and Sele...

Page 64: ...its CoS queue User needs to bind VLAN priority queue mapping profile to each port for every VLAN priority need assign a traffic descriptor for it The traffic descriptor defines the shapping parameter...

Page 65: ...bps Expected Result We expect PORT 2 only can receive 100Mbps of Stream1 and Stream0 will be discarded This case will help user to know how SPQ works on the FSM 510G Gigabit port VLAN Priority Queue m...

Page 66: ...rt 2 link speed to 100Mbps full duplex Step2 Select Configuration VLANs Create a VLAN with VLAN ID 100 Enter a VLAN name in the Name field Here we set tagged VLAN100 on PORT 1 and PORT 2 CLI configura...

Page 67: ...traffic are not flooding Expected Result We expect PORT 2 only can receive 20Mbps of Stream1 and 80Mbps of Stream0 This case will help user to know how SPQ works on the FSM 510G VDSL port VLAN Priorit...

Page 68: ...length 1518bytes Stream4 for Learning Dst Mac 00 00 00 00 10 02 Src Mac 00 00 00 00 20 02 Vlan 100 Vlan prio 0 Send rate 10Mbps Packet length 1518bytes Web management Step1 Go to Configuration Qos Por...

Page 69: ...Application Guide 6 CLI configuration command vlan 100 v100 interface gigabit 1 vlan 100 tag exit interface gigabit 2 qos shaper 100000 qos queue shaper queue 0 80000 qos queue shaper queue 7 20000 e...

Page 70: ...ic are not flooding WRR support weight assignment the range of weight value is from 1 to 255 Bye the way FSM 510G applies WRR scheduling and weight 1 for all the Gigabit Ethernet Port In the following...

Page 71: ...0 08 Src Mac 00 00 00 00 10 08 Vlan 100 Vlan prio 7 Send rate 100Mbps Packet length 1518bytes Stream3 for Learning Dst Mac 00 00 00 00 10 01 Src Mac 00 00 00 00 20 01 Vlan 100 Vlan prio 0 Send rate 10...

Page 72: ...n Guide 72 Web management Step1 Go to Configuration Qos Port shaping and click on PORT 2 to create a Qos profile Step2 Select schedule mode be Weighted and set weight value for queue 0 queue 3 and que...

Page 73: ...hybrid allowed vlan 1 100 switchport trunk vlan tag native switchport mode trunk exit interface GigabitEthernet 1 2 switchport trunk allowed vlan 1 100 switchport trunk vlan tag native switchport mod...

Page 74: ...way FSM 510G applies WRR scheduling and weight 1 for all the Gigabit Ethernet Port In the following case we will assign Weight 1 for Priority0 Weight 2 for Priority1 Weight3 for Priority2 and Weight4...

Page 75: ...100Mbps Packet length 1518bytes Stream3 Dst Mac 00 00 00 00 20 04 Src Mac 00 00 00 00 10 04 Vlan 100 Vlan prio 7 Send rate 100Mbps Packet length 1518bytes Stream5 for Learning Dst Mac 00 00 00 00 10...

Page 76: ...ps Packet length 1518bytes Web management Step1 Go to Configuration Qos Port shaping and click on PORT 2 to create a Qos profile Step2 Select schedule mode be Weighted and set weight value for queue 0...

Page 77: ...hport trunk allowed vlan 1 100 switchport hybrid allowed vlan 100 4095 switchport trunk vlan tag native switchport mode trunk qos shaper 100000 qos queue shaper queue 0 500 qos queue shaper queue 1 50...

Page 78: ...Queue mapping Stream0 Dst Mac 00 00 00 00 20 01 Src Mac 00 00 00 00 10 01 Vlan 100 Vlan prio 0 Send rate 100Mbps Packet length 1518bytes Stream1 Dst Mac 00 00 00 00 20 02 Src Mac 00 00 00 00 10 02 Vla...

Page 79: ...ps Packet length 1518bytes Stream5 for Learning Dst Mac 00 00 00 00 10 01 Src Mac 00 00 00 00 20 01 Vlan 100 Vlan prio 0 Send rate 10Mbps Packet length 1518bytes Stream6 for Learning Dst Mac 00 00 00...

Page 80: ...20 07 Vlan 100 Vlan prio 0 Send rate 10Mbps Packet length 1518bytes Web management Step1 Go to Configuration Qos Port shaping and click on PORT 2 to create a Qos profile Step2 Select schedule mode be...

Page 81: ...configuration command interface GigabitEthernet 1 2 switchport trunk allowed vlan 1 100 switchport hybrid allowed vlan 100 4095 switchport trunk vlan tag native switchport mode trunk qos shaper 10000...

Page 82: ...routers to establish multicast group memberships It is an integral part of the IP multicast specification like ICMP for unicast connections IGMP can be used for online video and gaming and allows mor...

Page 83: ...8...

Page 84: ...of Snooping Enable 2 Un select the check box of Unregistered IPMCv4 Flooding Enabled 3 If Multicast stream is from L3 switch then the uplink port have to be Router Port Notice If an aggregation member...

Page 85: ...8 4 Go to Configuration IPMC VLAN Configuration to select the check box of Snooping Enable and set VLAN ID of port14...

Page 86: ...86...

Page 87: ...io these clients belong to multiple vlans you have to create more one vlan to be the agent for all client vlans 1 To create a vlan go to Configuration VLANs Allow Access VLANs then set port 14 be vlan...

Page 88: ...the check box of Snooping Enable and set VLAN ID of port14 3 If there is no querier on the L3 switch you have to select Querier Election and set the Querier Address the IP address is in the same netwo...

Page 89: ...8 How to Configuration VLC VLC Configure on IGMP Server 1 In Media area of top tool bar to select Stream 2 Select a video or voiced file to play...

Page 90: ...90 3 Confirm the file is right then click Next twice...

Page 91: ...9 4 Select stream type as UDP and click Add button 5 Set stream IP the range is 224 0 0 1 to 239 255 255 254 and protocol port is 1234 Here I set stream IP is 255 0 0 1...

Page 92: ...92 6 Select Sort out all stream and click Stream button then the stream start to send to switch VLC Configure on IGMP Client 1 In Media area of top tool bar to select open network stream...

Page 93: ...otocol port as previous setting on server the protocol type is UDP the format should as below circle then click PLAY button Back to management switch Go to Monitor IPMC Groups Information you will see...

Page 94: ...he network Please see the following description 802 1x Timer in FSM 510G Item Parameter sec Description 1 ReAuth Period FSM 510G will restart authentication after each Reauth Period when authenticatio...

Page 95: ...9 client 20 20 20 0 24 secret a1b2c3d4 The secret in the IVS500 should be the same with this one...

Page 96: ...Authentication via FSM 510G to be authenticated by RADIUS server In a basic example we take port 1 as a testing port which enables 802 1x in FSM 510G With default configuration use the following Web U...

Page 97: ...9 Step1 Go to Configuration Security AAA Radius Click Add New Server Input 20 20 20 20 for server and a1b2c3d4 for secret key Then click Save button CLI Command...

Page 98: ...nable check box then to configure EAP type to MD5 Challenge After setting this function in NIC supplicant should enter a correct pair of account and password in order to use this Ethernet port service...

Page 99: ...should pass authentication process in order to use any service After supplicant enters correct account and password which stored in RADIUS server it can be authenticated successfully The authenticati...

Reviews:

No comments