Lantech IES-2008B-DNV User Manual Download

Page: 88 / 127

6.26.5 Port Security

You can block the un-authorized MAC by oer port in this function.

Summary of Contents for IES-2008B-DNV

Page 1: ...Lantech IES 2008B DNV 8 10 100TX Managed Industrial Switch User Manual V2 01 Jul 2016...

Page 2: ...Installation 12 3 1 Installation Steps 12 3 2 Wiring the Power Inputs 13 3 3 Wiring the Fault Alarm Contact 14 3 4 Cabling 15 Chapter 4 Network Application 16 4 1 Pro Ring2s Application 17 Chapter 5 C...

Page 3: ...em Alert Relay Alarm 36 6 8 1 System Alert SMTP 36 6 8 2 System Alert Event 38 6 11 DHCP Server 40 6 6 1 DHCP Server Server configuration 40 6 6 2 Client Table 41 6 6 3 IP Bindings 41 6 12 Port Config...

Page 4: ...6 25 1 Global Settings 69 6 25 2 Port Priority 70 6 25 3 COS Mapping to Queue 71 6 25 4 DSCP mapping to queue 72 6 25 Port Mirroring 74 6 26 Security 75 6 26 1 IP Source Guard Configuration 75 6 26 2...

Page 5: ...ds Set 94 Port Control Commands Set 96 Port Status Commands Set 98 Rate Limit Commands Set 98 Trunk Commands Set 99 PRO RING IIS Commands Set 101 RSTP Commands Set 101 VLAN Commands Set 103 SNMP Comma...

Page 6: ...ands Set 117 Port Statistics Commands Set 118 Port Monitoring Commands Set 118 System Event Log Commands Set 119 Ping Commands Set 119 Loading Average Commands Set 119 System Reboot Commands Set 120 L...

Page 7: ...occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encourage...

Page 8: ...e TX FX IEEE802 3x Flow Control and Back Pressure IEEE802 3ad Port trunk with LACP IEEE802 1d Spanning Tree IEEE802 1w Rapid Spanning Tree IEEE802 1p Class of Service IEEE802 1Q VLAN Tag IEEE 802 1x U...

Page 9: ...ty Green Full duplex Collision Amber Power Supply External Power Supply DC 12 48V Redundant power DC 12 48V and connective removable terminal block for master and slave power Power Consumption 7 86 W...

Page 10: ...3 Safety UL cUL CE EN60950 1 Stability Testing IEC60068 2 32 Free fall IEC60068 2 27 Shock IEC60068 2 6 Vibration...

Page 11: ...upports LLDP allowing switch to advertise its identification and capability on the LAN Spanning tree IEEE802 1d spanning tree IEEE802 1w rapid spanning tree Pro Ring2s Supports Pro Ring2s Provides red...

Page 12: ...ype combination rules are Broadcast Multicast Unknown Unicast packet Broadcast Multicast packet Broadcast packet only and all of packet The packet filter rate can be set from 100K 102400Kbps 10 100 Fl...

Page 13: ...nchronize system clock in Internet Firmware Update Supports TFTP firmware update TFTP backup and restore Configuration Upload Download Supports binary format configuration file for system quick instal...

Page 14: ...st the checklist 8 10 100TX Managed Industrial Switch x 1 User manual x 1 Pluggable Terminal Block x 1 RJ 45 to DB9 Female cable x 1 Compare the contents of the industrial switch with the standard che...

Page 15: ...In this paragraph it will describe the Industrial switch s hardware spec port cabling information and wiring installation 2 1 Physical Dimension 74 5mm x 105mm x 182mm W x D x H 2 2 Front Panel Front...

Page 16: ...9 2 3 Top View The top panel of the Industrial Managed Industrial Switch has one terminal block connector of two DC power inputs and one fault alarm Bottom Panel of the industrial switch...

Page 17: ...power R M Green On The industrial switch is the master of Pro Ring2s group Off The industrial switch is not a ring master in Pro Ring2s group PWR1 Green On Power 1 is active Off Power 1 is inactive PW...

Page 18: ...f The port is in half duplex mode or no device is attached FWD P1 P8 Green Green A powered device is connected utilizing Power over Ethernet on the port Off No device is connected or power forwarding...

Page 19: ...of LED lights 3 Prepare the twisted pair straight through Category 5 cable for Ethernet connection 4 Insert one side of RJ 45 cable category 5 into the Industrial switch Ethernet port RJ 45 port and...

Page 20: ...insert the power wire 1 Insert AC or DC power wires into the contacts 1 and 2 for power 1 or 5 and 6 for power 2 Tighten the wire clamp screws for preventing the wires from loosing NOTE The wire gauge...

Page 21: ...e switch will detect the fault status of the power failure or port link failure available for managed model and then forms an open circuit The following illustration shows an application example for w...

Page 22: ...4 Cabling Use four twisted pair Category 5 or above cabling for RJ 45 port connection The cable between the switch and the link partner switch hub workstation etc must be less than 100 meters 328 ft...

Page 23: ...r 4 Network Application This chapter provides some sample applications to help user to have more actual idea of industrial switch function application A sample application of the industrial switch is...

Page 24: ...o pre set the Master switch in old Pro Ring and yet to protect the network by much secure topologies than ever Pro Ring II works as a Ring Chain to reduce the risk of master switch linking down wherea...

Page 25: ...Attach the end of RS 232 connector to PC or terminal and the other end of RJ 45 connector to the console port of the switch The connected terminal or PC must support the terminal emulation program 5...

Page 26: ...le port Baud Rate 9600 bps Data Bits 8 Parity none Stop Bit 1 Flow control None The settings of communication parameters Having finished the parameter settings click OK When the blank screen shows up...

Page 27: ...Management The system supports the console management CLI command After you log in on to the system you will see a command prompt To enter CLI management interface type in enable command CLI command...

Page 28: ...anagement supports Internet Explorer 6 0 or later version And it is applied for Java Applets for reducing network bandwidth consumption enhance access speed and present an easy viewing screen 6 2 Prep...

Page 29: ...ress of the switch and then Press Enter 3 The login screen will appear right after 4 Key in the user name and password The default user name and password are the same as root 5 Press Enter or click th...

Page 30: ...cription Describes the switch System Location Assign the switch physical location The maximum length is 64 bytes System Contact Enter the name of contact person or organization System OID SNMP OID of...

Page 31: ...Average Sometimes the user was worry about that Could my switch process too many network packets So the network throughput was keeping decreasing In this option you can monitor the CPU of switch to s...

Page 32: ...25...

Page 33: ...ght saving time DST is the convention of advancing clocks so that afternoons have more daylight and mornings have less Typically clocks are adjusted forward one hour near the start of spring and are a...

Page 34: ...iddle European MEWT Middle European Winter SWT Swedish Winter 1 hour 1 pm EET Eastern European USSR Zone 1 2 hours 2 pm BT Baghdad USSR Zone 2 3 hours 3 pm ZP4 USSR Zone 3 4 hours 4 pm ZP5 USSR Zone 4...

Page 35: ...riod and Daylight Saving Offset again Daylight Saving Period Set up the Daylight Saving beginning date time and Daylight Saving ending date time Please key in the value in the format of YYYYMMDD and H...

Page 36: ...login user name and password for the management security issue User name Type in the new user name The default is root New Password Type in the new password The default is root Confirm password Re typ...

Page 37: ...the new IP on the DHCP server IP Address Assign the IP address that the network is using If DHCP client function is enabled this switch is configured as a DHCP client The network DHCP server will assi...

Page 38: ...31 IP Addressing interface...

Page 39: ...uration Syslog Configuration interface Syslog Mode Select the system log mode Client Only Server Only or Both Client Only means the system event log will only be sent to this interface of the switch b...

Page 40: ...es from network devices implementing SNMP SNMP Agent Agent Mode Select the SNMP version V1 V2c or V3 that you want to use it And then click Change to switch to the selected SNMP version mode SNMP V1V2...

Page 41: ...34 SNMP Agent Configuration interface...

Page 42: ...a trap manager assign an IP address enter the SNMP community strings and select the SNMP trap version Server IP Enter the IP address of the trap manager Community Enter the community string for the t...

Page 43: ...of Wiring the Fault Alarm Contact for the failure detection Power Failure Setting Tick the check box to enable the function of lighting up the FAULT LED on the panel when power fails Port Link Down B...

Page 44: ...as of the switch in complete email address format e g switch101 123 com to identify where the e mail alert comes from Mail Subject Input the subject of Email Authentication Having ticked this checkbox...

Page 45: ...3 event types Device Cold Start Authentication Failure and X ring Topology Change The checkboxes are not available for ticking unless the Syslog Client Mode on the Syslog Configuration tab and the E m...

Page 46: ...39 respectively SNMP Authentication Failure When the SNMP authentication fails the system will issue the event log email alert to the system log SMTP server respectively Event Configuration interface...

Page 47: ...DHCP server 6 6 1 DHCP Server Server configuration DHCP Server Enable or Disable the DHCP Server function Enable the switch will be the DHCP server on your local network Start IP Address Type in an IP...

Page 48: ...ss of the client device the IP assigning type status and lease time 6 6 3 IP Bindings Assign the dynamic IP address bound with the port to the connected client The user is allowed to fill each port co...

Page 49: ...42...

Page 50: ...t speed and negotiated way manually Flow Control Whether or not the receiving node sends feedback to the sending node is determined by this item When enabled once the device exceeds the input data rat...

Page 51: ...44 6 13 Port Status It will show you the status of port configuration setting...

Page 52: ...Good Packet The counts of transmitting good packets via this port Tx Bad Packet The counts of transmitting bad packets including undersize less than 64 octets oversize CRC Align errors fragments and...

Page 53: ...46 Port Statistics interface...

Page 54: ...ntication Failure When the SNMP authentication fails the system will issue the event log email alert to the system log SMTP server respectively MAC Violation When the MAC address has violated the syst...

Page 55: ...tion type All the ports support port egress rate control For example assume port 1 is 10Mbps users can set it s effective egress rate is 1Mbps ingress rate is 500Kbps The switch performs the ingress r...

Page 56: ...es for selecting All Broadcast Multicast Flooded Unicast Broadcast Multicast Broadcast only Broadcast Multicast Flooded Unicast Broadcast Multicast and Bbroadcast only types are only for ingress frame...

Page 57: ...CP which is a protocol running on layer 2 provides a standardized means in accordance with IEEE 802 3ad to bundle several physical ports together to form a single logical channel All the ports within...

Page 58: ...ns the trunk group without any handshaking with its member ports but member ports won t know that they should be aggregated together to form a logic trunk group Work ports This column field allows the...

Page 59: ...52 Port Trunk Aggregator Setting interface four ports are added to the left field with LACP enabled...

Page 60: ...53 6 17 2Aggregator Status You can check the setting of Port aggregation in Status...

Page 61: ...The value must be a multiple of 4096 according to the protocol standard rule Max Age The number of seconds a switch waits without receiving Spanning tree Protocol configuration messages before attemp...

Page 62: ...ows the P2P status of the link to be manipulated administratively True means the port is regarded as a point to point link False means the port is regarded as a shared link Auto means the link type is...

Page 63: ...56 6 18 2 RSTP Information This web page provides the port and switch information about RSTP RSTP System Configuration interface...

Page 64: ...h as Enable or Backup Enable means this switch will play the role of root switch Backup means this switch will take over the role of root switch when the original root switch fail Port setting set the...

Page 65: ...r to indicate that the host wants to be or is a member of a given group indicated in the report message Leave Group A message sent by a host to the querier to indicate that the host has quit being a m...

Page 66: ...the specific multicast groups With multicast filtering network devices only forward multicast traffic to the ports that are connected to the registered end stations IP Address Assign a multicast grou...

Page 67: ...60 field and click Delete to remove it...

Page 68: ...ation about themselves to other nodes on the network and store the information they discover LLDP runs on all 802 media The protocol runs over the data link layer only allowing two systems running dif...

Page 69: ...62 6 22 1 LLDP Neighbors It will show you the information about Port Neighbor via LLDP protocol...

Page 70: ...23 1 Configuration MAC Address Configuration Set the Aging time of MAC address table and define the event about port fail will influent the MAC table automatically or not Port Setting Define which por...

Page 71: ...64 You can monitor the learning status of MAC address table in this function...

Page 72: ...a switch is logically equivalent of reconnecting a group of network devices to another Layer 2 switch However all the network devices are still plugged into the same switch physically This switch supp...

Page 73: ...te tag in the frame The contents of the last 12 bit of the tag is untagged VID When this frame is sent out through any of the access port of the same PVID the switch will remove the tag from the frame...

Page 74: ...nces security between customer each home by dis communication between the sub VLANs even they are located in the same LAN and have the same IP subnet mask Better yet the configuration is simple than a...

Page 75: ...68 6 24 2Switch Status You can see the status of VLAN setting in this function...

Page 76: ...oose to use an 8 4 2 1 queuing scheme or a strict priority scheme or select the priority type to configure QoS policy Qos Policy Select the QoS policy rule Using the 8 4 2 1 weight fair queue scheme T...

Page 77: ...own selection item of Priority Type above being selected as Port based this control item will then be available to set the queuing policy for each port Port x Each port has 4 priority levels High Midd...

Page 78: ...l With the drop down selection item of Priority Type above being selected as COS only COS first this control item will then be available to set the queuing policy for each port COS priority Set up the...

Page 79: ...es 0 63 DSCP priority level Each level has 4 types of priority High Middle Low and Lowest The default value is Lowest priority for each level When the IP packet is received the system will check the D...

Page 80: ...73 highest priority Click Apply to have the configuration take effect...

Page 81: ...t can be selected to be destination mirror port for monitoring both RX and TX traffic which come from source port Or use one of two ports for monitoring RX traffic only and the other one for TX traffi...

Page 82: ...eckboxes and the ten security IP column fields will then be available If not those items will appear in grey Enable HTTP Server Having ticked this checkbox the devices whose IP addresses match any one...

Page 83: ...r access security Only these 10 IP addresses can access and manage the switch through the HTTP Telnet service once IP Security Mode is enabled And then click Apply to have the configuration take effec...

Page 84: ...the specified RADIUS Server Shared Key Set an encryption key for using during authentication sessions with the specified RADIUS server This key must match the encryption key used on the RADIUS Server...

Page 85: ...ld in the unauthorized state Accept The specified port is required to be held in the authorized state Authorize The specified port is set to the Authorized or Unauthorized state in accordance with the...

Page 86: ...79 6 26 3 3 Port Status You can monitor the port Authorized state in this function...

Page 87: ...80 6 26 4 MAC Filtering You can block the un authorized MAC by switch in this function...

Page 88: ...81 6 26 5 Port Security You can block the un authorized MAC by oer port in this function...

Page 89: ...Save Configuration Save the current setting of switch 6 27 2 Restart Device Make the switch warm start 6 27 3 Factory Defaults Reset switch to default configuration Click Reset to reset all configura...

Page 90: ...Upgrade TFTP Server IP Address Type in your TFTP server IP Firmware File Name Type in the name of the firmware image file to be updated Click Upgrade You can also browser the firmware on your hard dr...

Page 91: ...erver IP Address Type in the TFTP server IP Restore File Name Type in the correct file name for restoring Click Restore You can back up the current configuration from flash ROM to the TFTP server for...

Page 92: ...85 6 27 6 Diagnostics 6 27 6 1 Ping You can ping other network device in this function...

Page 93: ...length of any twisted pair connection does not exceed 100 meters 328 feet Diagnosing LED Indicators To assist in identifying problems the switch can be easily monitored through panel indicators which...

Page 94: ...d crossover cable schematic 10 100BASE TX Pin outs With10 100BASE TX cable pins 1 and 2 are used for transmitting data and pins 3 and 6 for receiving data RJ 45 Pin Assignments Pin Number Assignment 1...

Page 95: ...ng two figures show the 10 100Base TX cable schematic Straight through cable schematic Cross over cable schematic 10 100 1000Base TX Pin outs The following figure shows the 10 100 1000 Ethernet RJ 45...

Page 96: ...89 Straight through cables schematic Cross over cables schematic...

Page 97: ...onfig uptime E Show system up time switch uptime disable P Leave Privileged EXEC mode switch enable switch disable configure P Enter Global configuration mode switch enable switch configure end G Leav...

Page 98: ...system contact xxx show system info E Show system information switch show system info Admin Password Commands Set Lantech Commands Level Description Example admin username Username G Changes a login u...

Page 99: ...n Example sntp enable G Enable SNTP function switch enable switch configure switch config sntp enable sntp ip IP G Set SNTP server IP if SNTP function is inactive this command can t be applied switch...

Page 100: ...ion switch enable switch show sntp show sntp timezone P Show index number of time zone list switch enable switch show sntp timezone no sntp G Disable SNTP function switch enable switch configure switc...

Page 101: ...r and need to specify the IP of TFTP server and the file name of image switch enable switch configure switch config tftp 192 168 16 120 restore 123 bin Upgrade Firmware Commands Set Lantech Commands L...

Page 102: ...8 1 254 dhcpserver dnsip DNS IP G Configure DNS IP for DHCP clients switch enable switch configure switch config dhcpserver dnsip 192 168 1 1 dhcpserver leasetime Hours G Configure lease time Hours sw...

Page 103: ...on command to specify the state mode of operation for Ethernet ports Use the disable form of this command to disable the port switch enable switch configure switch config interface fastEthernet 2 swit...

Page 104: ...switch enable switch configure switch config interface fastEthernet 2 switch config if security enable no security I Disable security of interface switch enable switch configure switch config interfa...

Page 105: ...ble switch configure switch config interface fastEthernet 2 switch config if ratelimit type all ratelimit type broadcast multicast flooded unicast I Set interface ingress limit frame type to accept br...

Page 106: ...ro means no limit switch enable switch configure switch config interface fastEthernet 2 switch config if ratelimit out 160 show ratelimit I Show interfaces bandwidth control switch enable switch confi...

Page 107: ...ort 1 2 aggregator group GroupID Port list nolacp G Assign a static trunk group GroupID 1 3 Port list Member port list This parameter could be a port range ex 1 4 or a port list separate by a comma ex...

Page 108: ...ackup G Configure PRO RING IIS ROOT switch enable switch configure switch config prorstp root enable no prorstp I Disable PRO RING IIS for this interface switch enable switch configure switch config i...

Page 109: ...gure switch config rstp forward time 4 rstp path cost 0 auto 1 200000000 I Path cost on this interface switch enable switch configure switch config interface fastEthernet 2 switch config if rstp path...

Page 110: ...fig no rstp VLAN Commands Set Lantech Commands Level Description Example vlan database P Enter VLAN configure mode switch enable switch vlan database vlanmode portbase 802 1q diable gvrp V To set swit...

Page 111: ...e applied switch enable switch vlan database switch vlan vlan 8021q name test vid 22 vlan 8021q port PortNumber access link untag UntaggedVID V Assign a access link for VLAN by port if the port belong...

Page 112: ...5 tag 6 8 vlan 8021q aggreator PortNumber access link untag UntaggedVID V Assign a access link for VLAN by trunk group switch enable switch vlan database switch vlan vlan 8021q aggreator 3 access link...

Page 113: ...t base group ID switch enable switch vlan database switch vlan no vlan 2 SNMP Commands Set Lantech Commands Level Description Example snmp agent mode v1v2c v3 G Select the agent mode of SNMP switch en...

Page 114: ...password Authentication Password Privacy Password G Remove SNMPv3 user profile switch enable switch configure switch config no snmp snmpv3 user root password 123 123 Traffic Prioritization Commands S...

Page 115: ...tion switch enable switch configure switch show qos no qos G Disable QoS function switch enable switch configure switch config no qos IGMP Commands Set Lantech Commands Level Description Example igmp...

Page 116: ...tch show igmp configuration show igmp table P Show IGMP snooping table switch enable switch show igmp table no igmp G Disable IGMP snooping function switch enable switch configure switch config no igm...

Page 117: ...net server switch enable switch configure switch config security telnet security snmp G Enable IP security of SNMP server switch enable switch configure switch config security snmp security ip Index 1...

Page 118: ...switch enable switch show mac address table static no mac address table static hwaddr HW Addr I Remove an entry of MAC address table of interface static switch enable switch configure switch config in...

Page 119: ...e 802 1x system server port global configuration command to change the radius server port switch enable switch configure switch config 8021x system serverport 1815 8021x system accountport Port Number...

Page 120: ...ch configure switch config 8021x misc supptimeout 20 8021x misc servertimeout Seconds G Use the 802 1x misc server timeout global configuration command to set the server timeout switch enable switch c...

Page 121: ...Relay Alarm for Power Failure switch enable switch configure switch config fault relay power 1 enable fault relay enable disable I Configure Relay Alarm for Port Link Down Broken switch enable switch...

Page 122: ...config smtp enable smtp serverip IP address G Configure SMTP server IP switch enable switch configure switch config smtp serverip 192 168 1 5 smtp sender sendername G Configure sender of mail switch e...

Page 123: ...t device restart Syslog SMTP Both G Set device restart event type switch enable switch configure switch config event device restart both event authentication failure Sysog SMTP Both G Set Authenticati...

Page 124: ...switch configure switch config interface fastethernet 3 switch config if no event syslog no event smpt I Disable port event for SMTP switch enable switch configure switch config interface fastetherne...

Page 125: ...witch configure switch config interface fastEthernet 2 switch switch config if show interface accounting no accounting I Clear interface accounting information switch enable switch configure switch co...

Page 126: ...fastEthernet 2 switch config if no monitor System Event Log Commands Set Lantech Commands Level Description Example show syslog P Show SYSLOG configuration and log table switch enable switch show sys...

Page 127: ...lt configuration switch enable switch configure switch config default both System Reboot Commands Set Lantech Commands Level Description Example reload G Reboot switch switch enable switch configure s...

Search results

Summary of Contents for IES-2008B-DNV

Reviews:

Related manuals for IES-2008B-DNV

Brands by name

Popular brands

Lantech IES-2008B-DNV, User Manual

Search results

Summary of Contents for IES-2008B-DNV

Reviews:

Related manuals for IES-2008B-DNV

Brands by name

Popular brands