background image

 

iES24G Series User’s Manual 

 

 
 

iS5 Communications Inc.

 

 

 

FCC Statement and Cautions

 

Federal Communications Commission Radio Frequency Interference Statement

 

 

This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to 

Part  15  of  the  FCC  Rules.  These  limits  are  designed  to  provide  reasonable  protection  against  harmful 

interference  when  the  equipment  is  operated  in  a  commercial  environment.  This  equipment can generate, 

use, and radiate radio frequency energy. If not installed and used in accordance with the instruction manual, 

may cause harmful interference to radio communications. Operation of this equipment in a residential area 

is  likely  to  cause  harmful  interference  in  which  case  the  user  will  at  his/her  own  expense,  be  required  to 

correct the interference. 

 

Caution: LASER

 

 

This  product  contains  a  laser  system  and  is  classified  as  a  CLASS  1  LASER  PRODUCT.  Use  of  controls  or 

adjustments  or  performance  of  procedures  other  than those specified herein  may  result  in  hazardous radiation 

exposure.

 

 

 

Caution: Service

 

 

This  product  contains  no  user-serviceable  parts.  Attempted  service  by  unauthorized  personnel  shall  render  all 

warranties null and void.

 

 

Changes  or  modifications  not  expressly  approved  by  iS5  Communications  Inc.  could  invalidate  specifications,  test 

results,  and  agency  approvals,  and  void  the  user's  authority  to operate the equipment.

 

 

Should this device require service, please contact [email protected].

 

 

Caution: Physical Access

 

 

This product should be installed in a restricted access location.  Access should only  be gained by qualified  service 

personnel or users who have been instructed on the reasons for the restrictions applied at the location, and any 

precautions that have been taken. Access  must  only be via  the  use  of  a  tool  or  lock  and  key,  or  other  means  of 

security, and is controlled by the authority responsible for the location. 

 

 

 

Summary of Contents for iES24G

Page 1: ...ement Ethernet Switch iES24G User s Manual Version 1 0 September 2013 iS5 Communications Inc 3 7490 Pacific Circle Mississauga Ontario L5T 2A3 Tel 905 670 0004 Fax 289 401 5206 Website www iS5Com com...

Page 2: ...any errors or omissions contained herein or for consequential damages in connection with the furnishing performance or use of this material The information given in this document is reviewed regularl...

Page 3: ...Caution Service 5 Caution Physical Access 5 Getting to Know Your Switch 6 1 1 About the iES24G Series Industrial Switch 6 1 2 Software Features 6 1 3 Hardware Features 6 Hardware Overview 7 2 1 Front...

Page 4: ...27 4 1 5 Redundant Ring 34 4 1 6 VLAN 44 4 1 7 SNMP 55 4 1 8 Traffic Prioritization 62 4 1 9 Multicast 66 4 1 10 Security 68 4 1 11 Warning 76 4 1 12 Monitor and Diag 78 4 1 13 Factory Defaults 86 4...

Page 5: ...laser system and is classified as a CLASS 1 LASER PRODUCT Use of controls or adjustments or performance of procedures other than those specified herein may result in hazardous radiation exposure Cauti...

Page 6: ...nsole CLI configuration Therefore the switch is one of the most reliable choices for highly managed and Gigabit Fiber Ethernet application 1 2 Software Features Fastest Redundant Ethernet Ring Recover...

Page 7: ...econds for factory default 5 LED for Ethernet ports Link 100M status 6 LED for Ethernet ports Link 1000M status 7 LED for SFP ports link status 8 Front Panel LED Status Run System is operating continu...

Page 8: ...ntinuously RMT System is accessed remotely Fault Indicates unexpected event occurred DEF System resets to default configuration Ping System is processing PING request R M Ring master When on this swit...

Page 9: ...el LED Status Run System is operating continuously RMT System is accessed remotely Fault Indicates unexpected event occurred DEF System resets to default configuration Ping System is processing PING r...

Page 10: ...er s Manual iS5 Communications Inc 10 2 3 Rack Mount Kit Assembly You can find the rack mount kit and the screws in the packing box Please assemble the rack mount kit on the switch with screws provide...

Page 11: ...s unexpected event occurred 10 100 1000Base T X Giga Ethernet ports 10 100 LINK Amber On Port speed 10 100 link up 1000 LINK Green On Port speed 1000 link up ACT Amber Blinking Data transmitted SFP LN...

Page 12: ...wer supply 2 or backup DC power source 6 PWR2 G Ground Power supply 2 or backup DC power source ground connection 7 PWR2 N Neutral Connect to the Neutral terminal of Power supply 2 the second or backu...

Page 13: ...pe Max Length Connector 10BASE T CAT 3 4 5 100 ohm UTP 100 m 328 ft RJ 45 100BASE TX CAT 100 ohm UTP UTP 100 m 328 ft RJ 45 1000BASE TX CAT 5 5e 100 ohm UTP UTP 100 m 328 ft RJ 45 3 1 1 10 100 1000BAS...

Page 14: ...MDI X pin assignments Pin Number MDI port MDI X port 1 TD transmit RD receive 2 TD transmit RD receive 3 RD receive TD transmit 4 Not used Not used 5 Not used Not used 6 RD receive TD transmit 7 Not u...

Page 15: ...th LC connector Please remember that the TX port of Switch A should be connected to the RX port of Switch B Switch A Switch B Fiber cord 3 3 Console Cable Each iES24G Series switch can be managed thro...

Page 16: ...to manage the switch from anywhere on the network through a standard web browser such as Microsoft Internet Explorer The Web Based Management function supports Internet Explorer 5 0 or later It is ba...

Page 17: ...0 Default Gateway 192 168 10 254 User Name admin Password admin System Login 1 Launch the Internet Explorer 2 Type http and the IP address of the switch Press Enter 3 The login screen appears 4 Key in...

Page 18: ...provided here Label Description System Name An administratively assigned name for this managed node By convention this is the node s fully qualified domain name a text string 0 to 255 characters drawn...

Page 19: ...e allowed contents are the ASCII characters from 32 to 126 Time Zone Offset Enter the name of contact person or organization Provide the time zone offset relative to UTC GMT The offset is given in min...

Page 20: ...o assign the IP address The network DHCP server will assign the IP address for the switch and it will be display in this column The default IP is 192 168 10 1 IP Mask Assign the subnet mask of the IP...

Page 21: ...ither Enabled or Disabled Click to save changes Click to undo any changes made locally and revert to previously saved configuration 4 1 2 5 SSH Description Mode Indicates if the switch is operating in...

Page 22: ...al value Valid values are restricted to 5 32768 seconds Port The switch port number of the logical LLDP port Mode Enable or disable LLDP Click to save changes Click to undo any changes made locally an...

Page 23: ...only 9 Reserved When a capability is enabled the capability is followed by If the capability is disabled the capability is followed by Management Address Management Address is the neighbor unit s addr...

Page 24: ...Rx Errors The number of received LLDP frames containing some kind of error Frames Discarded If an LLDP frame is received on a port and the switch s internal table has run full the LLDP frame is count...

Page 25: ...n automatic refresh of the page at regular intervals 4 1 2 7 Backup Configuration You can save view the switch configuration The configuration file is in XML format with a hierarchy of tags 4 1 2 8 Re...

Page 26: ...namic Client List When the DHCP server function is activated the system will collect the DHCP client information and display in here 4 1 3 3 DHCP Static Client List You can assign the specific IP addr...

Page 27: ...ith a link partner Disabled disables the switch port operation Flow Control When Auto Speed is selected for a port this section indicates the flow control capability that is advertised to the link par...

Page 28: ...h link up and link down power savings enabled Total Power Usage Total power usage in board measured in percent Click to save changes Click to undo any changes made locally and revert to the previously...

Page 29: ...to configure the Aggregation hash mode and the aggregation group Label Description Source MAC Address The Source MAC address can be used to calculate the destination port for the frame Check to enable...

Page 30: ...dio button to include a port in an aggregation or clear the radio button to remove the port from the aggregation By default no ports belong to any aggregation group Only full duplex ports can join an...

Page 31: ...ue can be entered Ports with the same Key value can participate in the same aggregation group while ports with different keys cannot Role The Role shows the LACP activity status The Active will transm...

Page 32: ...s that LACP is not enabled or that the port link is down Backup means that the port could not join the aggregation group but will join if other port leaves Meanwhile it s LACP status is disabled Key T...

Page 33: ...r LACP Transmitted Shows how many LACP frames have been sent from each port LACP Received Shows how many LACP frames have been received at each port Discarded Shows how many unknown or illegal LACP fr...

Page 34: ...switches that are set as Ring Masters the switch with the lowest MAC address will be the actual Ring Master and others will be Backup Masters 1st Ring Port The primary port when this switch is Ring Ma...

Page 35: ...STP mode Click to save changes Click to refresh the page immediately Note We suggest you don t set a switch as a Ring Master and a Ring Link at the same time due to heavy traffic load 4 1 5 2 iChain U...

Page 36: ...e in the range 6 to 40 seconds and MaxAge must be FwdDelay 1 2 Maximum Hop Count This defines the initial value of remaining Hops for MSTI information generated at the boundary of an MSTI region It de...

Page 37: ...or MSTI s Intra region The name is at most 32 characters Configuration Revision The revision of the MSTI configuration named above This must be an integer between 0 and 65535 MSTI The bridge instance...

Page 38: ...he bridge priority Lower numerical values have better priority The bridge priority plus the MSTI instance number concatenated with the 6 byte MAC address of the switch forms a Bridge Identifier Click...

Page 39: ...irectly to edge devices No Bridges attached Transitioning to the forwarding state is faster for edge ports having OpenEdge true than for other ports AdminEdge Controls whether the OpenEdge flag should...

Page 40: ...uently Point2Point Controls whether the port connects to a point to point LAN rather than a shared medium This can be automatically determined or forced either true or false Transition to the forwardi...

Page 41: ...when establishing the active topology of the network Lower path cost ports are chosen as forwarding ports in favor of higher path cost ports Valid values are in the range 1 to 200000000 Priority Cont...

Page 42: ...oot Path Cost For the Root Bridge this is zero For all other Bridges it is the sum of the Port Path Costs on the least cost path to the Root Bridge Topology Flag The current state of the Topology Chan...

Page 43: ...e displays the RSTP port statistics counters for bridge ports in the currently selected switch Label Description Port The switch port number of the logical RSTP port MSTP The number of MSTP Configurat...

Page 44: ...mbers of the VLAN ID Check or uncheck as needed to modify the entry Adding a New Static Entry Click to add a new VLAN ID An empty row is added to the table and the VLAN can be configured as needed Leg...

Page 45: ...ts which frames will be routed based on the VLAN Select All or Tagged Port VLAN Mode Select Specific or None Port VLAN ID Enter the VLAN ID to which the Port will be a member Example Port based VLAN S...

Page 46: ...iES24G Series User s Manual iS5 Communications Inc 46...

Page 47: ...l iS5 Communications Inc 47 For egress port 1 VLAN Membership Configuration setting port 2 VID 50 2 VLAN Port 2 Configuration disable VLAN Aware 3 VLAN Port 2 Configuration Mode specific ID 50 any pac...

Page 48: ...EE 802 1Q Access port Setting For ingress port 1 VLAN Membership Configuration setting port VID 50 2 VLAN Port Configuration Enable VLAN Aware 3 VLAN Port Configuration Mode specific ID 50 For egress...

Page 49: ...2 VLAN Port Configuration Disable VLAN Aware 3 VLAN Port Configuration Mode specific ID 50 untagged tag 50 packets can enter egress port IEEE 802 1Q Trunk port setting multi tag For ingress port 1 VL...

Page 50: ...Enable VLAN Aware 3 VLAN Port Configuration Mode specific ID 11 When the entering packet is an untagged frame tag 11 is added When entering the tagged frame only VID 11 22 33 three kinds of packets ca...

Page 51: ...ser s Manual iS5 Communications Inc 51 2 VLAN Port Configuration Enable VLAN Aware 3 VLAN Port Configuration Mode none egress port can receive tag 11 22 33 packet In addition only tag 11 packet can en...

Page 52: ...r s Manual iS5 Communications Inc 52 QinQ VLAN Setting Ingress Port 1 Egress Port 2 For ingress port Port 1 1 VLAN Membership Configuration setting port 1 2 3 VID 50 2 VLAN Port Configuration Disable...

Page 53: ...Port Configuration Port 1 Mode specific ID 50 For egress port Port 2 1 VLAN Membership Configuration setting port VID 50 2 VLAN Port Configuration Enable Port 2 and Port 3 VLAN Aware 3 VLAN Port Conf...

Page 54: ...the ID of this particular private VLAN MAC Address The MAC address for the entry Port Members A row of check boxes for each port is displayed for each private VLAN ID To include a port in a Private V...

Page 55: ...n is disabled for all ports Click to save changes Click the Reset button to undo the addition of new isolated ports 4 1 7 SNMP 4 1 7 1 SNMP System Label Description Mode Indicates the SNMP mode operat...

Page 56: ...d privacy and the community string will associate with the SNMPv3 communities table Engine ID Indicates the SNMPv3 engine ID The string must contain an even number between 10 and 64 hexadecimal digits...

Page 57: ...es the SNMP trap inform mode operation Possible modes are Enabled Enable SNMP trap inform mode operation Disabled Disable SNMP trap inform mode operation Trap Inform Timeout seconds Indicates the SNMP...

Page 58: ...e the entry s keys In a simple agent usmUserEngineID is always that agent s own snmpEngineID value The value can also take the value of the snmpEngineID of a remote SNMP engine with which this user ca...

Page 59: ...For MD5 authentication protocol the allowed string length is 8 to 32 For SHA authentication protocol the allowed string length is 8 to 40 The allowed content is the ASCII characters from 33 to 126 Pri...

Page 60: ...4 1 7 6 SNMP Views Configure SNMPv3 views table on this page The entry index keys are View Name and OID Subtree Label Description Delete Check to delete the entry It will be deleted during the next s...

Page 61: ...odel that this entry should belong to Possible security models are Any Accepted any security model v1 v2c usm v1 Reserved for SNMPv1 v2c Reserved for SNMPv2c usm User based Security Model USM Security...

Page 62: ...te The management VLAN is configured on the IP setup page Label Description Frame Type The settings in a particular row apply to the frame type listed here unicast multicast or broadcast Status Enable...

Page 63: ...g mode for this port Queue Weighted Setting Queue weighted Low Normal Medium High if the Queuing Mode is Weighted 4 1 8 3 QoS Control List This page lists the QCEs for a given QCL Frames can be classi...

Page 64: ...precedence bit in the ToS byte of the IPv4 IPv6 header also known as DS field Tag Priority User Priority Only applicable if the frame is VLAN tagged or priority tagged Type Value Indicates the value a...

Page 65: ...e storm control status for the given frame type 4 1 8 4 Queuing Counters This page displays the Queuing Counters They can be monitored and cleared from this screen 4 1 8 5 QCL Configuration Wizard Thi...

Page 66: ...eiving IPv4 IPv6 packets Set up VLAN Tag Priority Mapping Set up the traffic class mapping to the User Priority value 3 bits when receiving VLAN tagged packets 4 1 9 Multicast 4 1 9 1 IGMP Snooping Th...

Page 67: ...regation member port is selected as a router port the whole aggregation will act as a router port Fast Leave Enable the fast leave on the port 4 1 9 2 IGMP Snooping Status Label Description VLAN ID Th...

Page 68: ...te Limiter ID Select which rate limiter to apply to this port The allowed values are Disabled or the values 1 through 15 The default value is Disabled Port Copy Select which port frames are copied to...

Page 69: ...K 4K 8K 16K 32K 64K 128K 256K 512K or 1024K The 1 kpps is actually 1002 1 pps Select whether forwarding is permitted Permit or denied Deny The default value is Permit Select which rate limiter to appl...

Page 70: ...ed or Port 1 through 24 Logging Select Disabled or Enabled Shutdown Select Disabled or Enabled Counter Modification Buttons You can modify each ACE in the table using the following buttons Inserts a n...

Page 71: ...iES24G Series User s Manual iS5 Communications Inc 71 ACL Configuration Wizard This handy wizard helps you set up a ACL quickly...

Page 72: ...4 1 10 2 IEEE 802 1x 802 1X Port Security Configuration The Port Security Configuration screen for the switch can be monitored and modified here 802 1X Port Security Status The Port Security Status sc...

Page 73: ...stics screen displays each of the 24 ports The statistics can be Refreshed and Cleared as needed with the buttons 802 1X Authentication Configuration This page allows you to configure how an administr...

Page 74: ...t Configuration The table has one row for each Client and a number of columns which are Label Description Client The Client for which the configuration below applies Authentication Method Authenticati...

Page 75: ...status of the RADIUS Authentication and Accounting Servers 802 1X RADIUS Authentication Accounting Server Statistics This screen displays the statistics of the RADIUS Authentication and Accounting Ser...

Page 76: ...lure Mark the box of PWR 1 and or PWR 2 to monitor Port Link Down Broken Mark the box of port 1 to port 8 to monitor Apply Click Apply to set the configurations 4 1 11 2 System Warning System Warning...

Page 77: ...ection Select which events will generate an event notification Check the SYSLOG box for the System Events that should generate an event notification For each port use the drop down menu to choose betw...

Page 78: ...e Learning If the learning mode for a given port is grayed out another module is in control of the mode so that it cannot be changed by the user An example of such a module is the MAC Based Authentica...

Page 79: ...New Static Entry Click to add a new entry to the static MAC table Specify the VLAN ID MAC address and port members for the new entry Click Save Static MAC Table Configuration The static entries in the...

Page 80: ...ops The number of frames discarded due to ingress or egress congestion Filtered The number of received frames filtered by the forwarding process Check this box to enable an automatic refresh of the pa...

Page 81: ...ndicating a PAUSE operation Rx Drops The number of frames dropped due to lack of receive buffers or egress congestion Rx CRC Alignment The number of frames received with CRC or alignment errors Rx Und...

Page 82: ...er source rx or destination tx mirroring enabled are mirrored to this port Disabled disables mirroring Label Description Port The logical port for the settings contained in the same row Mode Select mi...

Page 83: ...system log All All levels Time The time of the system log entry Message The MAC Address of this switch Check this box to enable an automatic refresh of the page at regular intervals Updates the system...

Page 84: ...d you can view the cable diagnostics results in the cable status table Note that VeriPHY is only accurate for cables of length 7 140 meters 10 and 100 Mbps ports will be linked down while running Veri...

Page 85: ...dtrip time are displayed upon reception of a reply The page refreshes automatically until responses to all packets are received or until a timeout occurs You can configure the following properties of...

Page 86: ...t to the default Keep User Password When this box is checked the User and Password will not be reset to the default Click to reset the configuration to Factory Defaults Click to return to the Port Sta...

Page 87: ...115200 8 none 1 none Before Configuring by RS 232 serial console use DB9 cable to connect the Switches RS 232 Console port to your PC s COM port Follow the steps below to access the console via RS 23...

Page 88: ...Manual iS5 Communications Inc 88 4 Press Enter for the Console login screen to appear Use the keyboard to enter the Console Username and Password which is same as the Web Browser password admin for b...

Page 89: ...168 10 1 Subnet Mask 255 255 255 0 Default Gateway 192 168 10 254 User Name root Password root Console Access via Telnet 1 Telnet to the IP address of the switch from the Windows Run command or from...

Page 90: ..._limiter_list packet_rate Add ace_id ace_id_next switch port port policy policy vid tag_prio dmac_type etype etype smac dmac arp sip dip smac arp_opcode arp_flags ip sip dip protocol ip_flags icmp sip...

Page 91: ...T_RADIUS server_index enable disable ip_addr_string secret server_port Client console telnet ssh web none local radius enable disable Statistics server_index Chain Configuration Chain Mode enable disa...

Page 92: ...t enable disable Syslog PowerStatus enable disable Syslog SnmpAuthenticationFailure enable disable Syslog RingTopologyChange enable disable Syslog Port port_list disable linkup linkdown both Fault Ala...

Page 93: ...nfiguration port_list Mode port_list enable disable Key port_list key LACP Role port_list active passive Status port_list Statistics port_list clear LLDP Configuration port_list Mode port_list enable...

Page 94: ...e port_list max_frame Power port_list enable disable actiphy dynamic Excessive port_list discard restart Statistics port_list command VeriPHY port_list PVLAN Configuration port_list Add pvlan_id port_...

Page 95: ...t Ring 2ndRingPort port Ring Linking Mode enable disable Ring Ring Linking Port port Ring Dualhoming Mode enable disable Ring Dualhoming Port port SNMP Configuration Mode enable disable Version 1 2c 3...

Page 96: ...security_name group_name Group Delete index Group Lookup index View Add view_name included excluded oid_subtree View Delete index View Lookup index Access Add group_name security_model security_level...

Page 97: ...disable Port RestrictedTcn port_list enable disable Port bpduGuard port_list enable disable Port Statistics port_list Port Mcheck port_list Msti Port Configuration msti port_list Msti Port Cost msti...

Page 98: ...uration port_list Aware port_list enable disable PVID port_list vid none VLAN FrameType port_list all tagged Add vid port_list Delete vid Lookup vid iBridge Configuration Mode enable disable 1stRingPo...

Page 99: ...t rate limiting User Define Jumbo frame Up to 9K Bytes Security Features IP Police security feature Enable disable ports MAC based port security Port based network access control 802 1x VLAN 802 1Q to...

Page 100: ...n System is processing PING request 10 100 1000Base T X RJ45 Port Indicator Left Green for 1000Mbps Link Act indicator Amber for 10 100Mbps Link Act indicator Right Amber for full duplex indicator 100...

Reviews: