manualshive.com logo in svg

ORiNG IES-3062 Series, User Manual, Page: 61 / 107

Share
Download
ORiNG IES-3062 Series User Manual Download Page 61

IES-3080 / IES-3062 SERIES   User’s Manual 

 

ORing Industrial Networking Corp 

51 

5.1.8 

  Security 

Five useful functions can enhance security of switch: IP Security, Port Security, MAC 

Blacklist, and MAC address Aging and 802.1x protocol. 

 

5.1.8.1  Management Security 

Only IP in the Secure IP List can manage the switch through your defined management mode.   

( WEB, Telnet, SNMP) 

 

IP Security interface 

The following table describes the labels in this screen. 

Label 

Description 

IP security MODE

 

Enable/Disable the IP security function. 

Enable WEB 

Management

 

Mark the blank to enable WEB Management. 

Enable Telnet 

Management 

Mark the blank to enable Telnet Management. 

Enable SNMP 

Management 

Mark the blank to enable MPSN Management. 

Apply 

Click “

Apply

” to set the configurations. 

Help 

Show help file. 

 

5.1.8.2  Static MAC Forwarding 

Static MAC Forwarding is to add static MAC addresses to hardware forwarding database.    If 

port security is enabled at 

Port Control

 page, only the frames with MAC addresses in this list 

will be forwarded, otherwise will be discarded. 

Summary of Contents for IES-3062 Series

Page 1: ...RIES User s Manual Version 3 1 Aug 2019 ORing Industrial Networking Corp 3F NO 542 2 Jhongjheng Rd Sindian District New Taipei City 231 Taiwan R O C Tel 886 2 2218 1066 Fax 886 2 2218 1014 Website www...

Page 2: ...l Mounting Installation 1 Hardware Overview 0 3 1 Front Panel 0 3 2 Front Panel LEDs 3 3 3 Top view Panel 4 Cables 5 4 1 Ethernet Cables 5 4 1 1 10 100 100BASE TX 10BASE T Pin Assignments 5 4 2 Consol...

Page 3: ...ort Status 34 5 1 3 3 Port Alias 35 5 1 3 4 Rate Limit 35 5 1 3 5 Port Trunk 36 5 1 3 6 Loop Guard 37 5 1 4 VLAN 37 5 1 4 1 VLAN Setting IEEE 802 1Q 38 5 1 4 2 VLAN Setting Port Based 39 5 1 5 Traffic...

Page 4: ...6 1 About CLI Management 71 6 2 Commands Set List System Commands Set 76 6 3 Commands Set List Port Commands Set 78 6 4 Commands Set List Trunk command set 81 6 5 Commands Set List VLAN command set 82...

Page 5: ...IES 3080 IES 3062 SERIES User s Manual ORing Industrial Networking Corp 4 Getting to Know Your Switch...

Page 6: ...at the same time and monitor switches status 1 2 Software Features World s fastest Redundant Ethernet Ring O Ring Recovery time 10ms over 250 units connection Supports Ring Coupling Dual Homing over...

Page 7: ...o DC power inputs Wide Operating Temperature 40 to 70oC Storage Temperature 40 to 85oC Operating Humidity 5 to 95 non condensing Casing IP 30 10 100Base T X Ethernet port Console Port Dimensions W x D...

Page 8: ...ing Switch on DIN Rail Each switch has a DIN Rail kit on rear panel The DIN Rail kit helps switch to fix on the DIN Rail It is easy to install the switch on the DIN Rail 2 1 1 Mount IES 3080 IES 3062...

Page 9: ...ial Networking Corp 1 2 2 Wall Mounting Installation Each switch has another installation method for users to fix the switch A wall mount panel can be found in the package The following steps show how...

Page 10: ...auto negotiation Default Setting Speed auto Duplex auto Flow control disable Gigabit RJ 45 port 2 10 100 1000Base T X Gigabit ports for IES 3062GT Fiber port 2 1000Base X for IES 3062GF Series 2 100B...

Page 11: ...When the LED light on it means that the switch is the ring master of O Ring 5 LED for Ring When the led light on it means the O Ring is activated 6 LED for Fault Relay When the fault occurs the amber...

Page 12: ...eans that the switch is the ring master of O Ring 5 LED for Ring When the led light on it means the O Ring is activated 6 LED for Fault Relay When the fault occurs the amber LED will be light on 7 Con...

Page 13: ...Ring enabled Slowly blinking O Ring topology has problem Fast blinking O Ring work normally Fault Amber On Fault relay Power failure or Port down fail 10 100Base T X Fast Ethernet ports LNK ACT Green...

Page 14: ...ual ORing Industrial Networking Corp 4 3 3 Top view Panel The bottom panel components of IES 3080 IES 3062 SERIES are shown as below 1 Terminal block includes PWR1 PWR2 12 48V DC and Relay output 1A 2...

Page 15: ...hubs Please refer to the following table for cable specifications Cable Types and Specifications Cable Type Max Length Connector 10BASE T Cat 3 4 5 100 ohm UTP 100 m 328 ft RJ 45 100BASE TX Cat 5 100...

Page 16: ...e TD transmit 4 Not used Not used 5 Not used Not used 6 RD receive TD transmit 7 Not used Not used 8 Not used Not used Note and signs represent the polarity of the wires that make up each wire pair 4...

Page 17: ...Based Management function supports Internet Explorer 5 0 or later It is based on Java Applets with an aim to reduce network bandwidth consumption enhance access speed and present an easy viewing scree...

Page 18: ...l Networking Corp 8 3 The login screen appears 4 Key in the username and password The default username and password is admin 5 Click Enter or OK button then the main interface of the Web based managem...

Page 19: ...Information The system information will display the configuration of Basic Setting Switch Setting page Enable Location Alert When click PWR1 PWR2 and PWR3 LEDs of the switch will start to flash togeth...

Page 20: ...ription System Name Assign the name of switch The maximum length is 64 bytes System Description Display the description of switch System Location Assign the switch physical location The maximum length...

Page 21: ...lowing table describes the labels in this screen Label Description DHCP Client To enable or disable the DHCP client function When DHCP client function is enabling the switch will be assigned the IP ad...

Page 22: ...ss DNS2 Assign the secondary DNS IP address Apply Click Apply to activate the configurations 5 1 4 4 Time Setting This page includes configurations of SNTP and system clock System Clock The following...

Page 23: ...om the SNTP server Daylight Saving Time Enable or disable daylight saving time function When daylight saving time is enabling you need to configure the daylight saving time period UTC Time zone Set th...

Page 24: ...tandard 10 hours 2 am Nome Alaska 11 hours 1 am CET Central European FWT French Winter MET Middle European MEWT Middle European Winter SWT Swedish Winter 1 hour 1 pm EET Eastern European USSR Zone 1 2...

Page 25: ...ght Saving ending time Both will be different each year Daylight Saving Offset Set up the offset time Switch Timer Display the switch current time Apply Click Apply to activate the configurations PTP...

Page 26: ...able describes the labels in this screen Label Description LLDP Protocol Enable or Disable LLDP function LLDP Interval The interval of resend LLDP by default at 30 seconds Apply Click Apply to set the...

Page 27: ...uration file on TFTP server When you reboot the switch it will upgrade automatically Before updating make sure you have your TFTP server ready and the firmware image and configuration file is on the T...

Page 28: ...ss Fill in the TFTP server IP Restore File Name Fill the file name Restore Click restore to restore the configurations Form Local PC User can select file restore not need TFTP server Restore File Name...

Page 29: ...ou have your TFTP server ready and the firmware image is on the TFTP server Update Firmware interface 5 1 1 Redundancy 5 1 1 1 O Ring O Ring is the most powerful Ring in the world The recovery time of...

Page 30: ...ts of four switches will be run at active backup mode Control Port Link to Control Port of the switch in the same ring Control Port used to transmit control signals Enable Dual Homing Mark to enable D...

Page 31: ...nnect to the ring 2nd Ring Port Choosing the port which connect to the ring Edge Port In the O Chain application the head and tail of two Switch Port must start the Edge MAC smaller Switch Edge port w...

Page 32: ...to topology of network 5 1 1 4 Fast Recovery The Fast Recovery Mode can be set to connect multiple ports to one or more switches The IES 3080 3062 SERIES with its fast recovery mode will provide redu...

Page 33: ...sable RSTP function and set parameters for each port RSTP Setting interface The following table describes the labels in this screen Label Description RSTP mode You must enable or disable RSTP function...

Page 34: ...lay Time 4 30 The number of seconds a port waits before changing from its Rapid Spanning Tree Protocol learning and listening states to the forwarding state Enter a value between 4 through 30 Apply Cl...

Page 35: ...a shared medium LAN segment This function allows the P2P status of the link to be manipulated administratively True means P2P enabling False means P2P disabling Admin Edge The port directly connected...

Page 36: ...IES 3080 IES 3062 SERIES User s Manual ORing Industrial Networking Corp 26...

Page 37: ...e the same MST configuration name Revision Level 0 65535 The same MST Region must have the same revision level Priority 0 61440 A value used to identify the root bridge The bridge with the lowest valu...

Page 38: ...to those specified for RSTP A single value applies to all Spanning Trees within an MST Region the CIST and all MSTIs for which the Bridge is the Regional Root Apply Click Apply to activate the configu...

Page 39: ...disabling Admin Edge Label Admin Non STP Label Apply Click Apply to activate the configurations MSTP Instance interface Label Description Instance Set the instance from 1 to 15 State Enable or disabl...

Page 40: ...bridge from this transmitting bridge at the specified port Enter a number 1 through 200000000 Apply Click Apply to set the configurations 5 1 2 Multicast 5 1 2 1 IGMP Snooping Internet Group Manageme...

Page 41: ...ulticast list IGMP Protocol Enable Disable IGMP snooping IGMP Query Switch will be IGMP querier or not There should exist one and only one IGMP querier in an IGMP application The Auto mode means that...

Page 42: ...active Receiver Source Immediate Leave Enable or disable Immediate leave 5 1 2 3 Static Multicast Filtering Static Multicast filtering is the system by which end stations only receive multicast traffi...

Page 43: ...roup IP address in the range of 224 0 0 0 239 255 255 255 Member Ports Tick the check box beside the port number to include them as the member ports in the specific multicast group IP address Add Show...

Page 44: ...Flow Control Support symmetric and asymmetric mode to avoid packet loss when congestion occurred Security Enabled port security will disable MAC address learning in this port Thus only the frames with...

Page 45: ...dcast multicast and flooded unicast You can also set Ingress or Egress to limit traffic received or transmitted bandwidth Rate Limit interface The following table describes the labels in this screen L...

Page 46: ...he labels in this screen Label Description Group ID Select port to join a trunk group Type Support static trunk and 802 3ad LACP Work Port Select the number of active ports in dynamic group LACP The d...

Page 47: ...Description Active Loop Guard Enable or Disable Port Status Port work status 5 1 4 VLAN A Virtual LAN VLAN is a logical network grouping that limits the broadcast domain which allows you to isolate ne...

Page 48: ...1Q VLAN the all ports on the switch belong to default VLAN VID is 1 The default VLAN cannot be deleted GVRP allows automatic VLAN configuration between the switch and nodes If the switch is connected...

Page 49: ...ailable Hybrid QinQ Link enable QinQ mode allow you to insert one more VLAN tag in a original VLAN frame Untagged VID Set the port default VLAN ID for untagged devices that connect to the port The ran...

Page 50: ...interface Edit Edit exist VLAN Delete Delete exist VLAN Help Show help file VLAN Configuration Port Base interface 2 The following table describes the labels in this screen Label Description Group Na...

Page 51: ...t priority is determined by COS only TOS only the output priority is determined by TOS only COS first the output priority is determined by COS and TOS but COS first TOS first the output priority is de...

Page 52: ...ort based Priority interface The following table describes the labels in this screen Port base Priority Assign Port with a priority queue 4 priority queues can be assigned High Middle Low and Lowest A...

Page 53: ...N tag a default priority value is considered and determined by ingress port Apply Click Apply to set the configurations Help Show help file 5 1 5 4 TOS DSCP TOS DSCP interface The following table desc...

Page 54: ...n range Low IP address is the beginning of the dynamic IP assigns range For example dynamic IP assign range is from 192 168 1 100 to 192 168 1 200 192 168 1 100 will be the Start IP address End IP Add...

Page 55: ...en the device is connecting to the port and asks for dynamic IP assigning the system will assign the IP address that has been assigned before in the connected device DHCP Server Port and IP Binding in...

Page 56: ...Keep 0 0 0 0 means server is inactive DHCP Option 82 Remote ID Option 82 Remote ID provides a identifier for the remote server There are 4 types supported IP MAC Client ID and Other DHCP Option 82 Cir...

Page 57: ...t related information by Agent Setting Function SNMP Agent setting interface The following table describes the labels in this screen Label Description SNMP agent Version Three SNMP versions are suppor...

Page 58: ...ill issue Create a trap manager by entering the IP address of the station and a community string To define management stations as trap manager and enter SNMP community strings and selects the SNMP ver...

Page 59: ...IES 3080 IES 3062 SERIES User s Manual ORing Industrial Networking Corp 49 5 1 7 3 SNMPV3...

Page 60: ...user name that you have set up in user table 3 Group Name set up the group name 4 Click Add to add context name 5 Click Remove to remove unwanted context name Access Table 1 Configure SNMP v3 access t...

Page 61: ...labels in this screen Label Description IP security MODE Enable Disable the IP security function Enable WEB Management Mark the blank to enable WEB Management Enable Telnet Management Mark the blank...

Page 62: ...dress to a specific port Port NO Select port of switch Add Add an entry of MAC and port information Delete Delete the entry Help Show help file 5 1 8 3 MAC Blacklist MAC Blacklist can eliminate the tr...

Page 63: ...NO Select port of switch Add Add an entry to Blacklist table Delete Delete the entry Help Show help file 5 1 8 4 802 1x 802 1x Radius Server 802 1x makes the use of the physical access characteristic...

Page 64: ...iod Set the time interval between authentication failure and the start of a new authentication attempt Tx Period Set the time that the switch can wait for response to an EAP request identity frame fro...

Page 65: ...802 1x authentication Disable this port will not participate in 802 1x Apply Click Apply to set the configurations Help Show help file 802 1x Port Authorized Mode Show 802 1x port authorized state 802...

Page 66: ...fic Security mode function is enabled the illegal IP traffic will be blocked Apply Click Apply to set the configurations Help Show help file IP Guard Allow List IP Guard is an intelligent and easy use...

Page 67: ...he IP traffic Suspend Block the IP traffic Delete If you want to delete the entry please check this box and apply it IP Guard Super IP List IP Guard is an intelligent and easy use function for IP secu...

Page 68: ...to Allow List If you want to allow the IP traffic please check this box and apply it 5 1 9 Warning Warning function is very important for managing switch You can manage switch by SYSLOG E MAIL and Fau...

Page 69: ...e BSD SYSLOG Protocol System Warning SYSLOG Setting interface The following table describes the labels in this screen Label Description SYSLOG Mode Disable disable SYSLOG Client Only log to local syst...

Page 70: ...nable Disable transmission system warning events by e mail SMTP Server IP Address Setting up the mail server IP address Mail Subject The Subject of the mail Sender Set up the email account to send the...

Page 71: ...llowing table describes the labels in this screen Label Description Device cold start When the device executes cold start the system will issue a log event Device warm start When the device executes w...

Page 72: ...describes the labels in this screen Label Description Page Select LOG page Reload To get the newest event logs and refresh this page Clear Clear log Help Show help file 5 1 10 2 MAC Address Table Ref...

Page 73: ...selected port in table Flush MAC Table Clear all MAC addresses in table MAC Address Aging Time Assign aging time MUST be multiple of 15 Auto Flush Table When Ports Link Down Enable this function when...

Page 74: ...s port TX Bad Packet The number of bad packets sent by this port RX GOOD Packet The number of good packets received by this port RX Bad Packet The number of bad packets received by this port TX Abort...

Page 75: ...d The total number of successfully transmitted frames that experienced no collisions bu are delayed because the medium was busy during the first attempt This counter is applicable in half duplex only...

Page 76: ...r of good Flow Control frames sent InPause The number of good Flow Control frames received Multiple The total number of successfully transmitted frames that experienced more than one collision This co...

Page 77: ...ld have gone Note that keep all source ports unchecked in order to disable port monitoring Port monitoring interface The following table describes the labels in this screen Label Description Destinati...

Page 78: ...cribes the labels in this screen Label Description Monitored Counter Select monitor type Time Interval Setting Interval time Increasing Quantity Setting alarm Quantity Event Alarm Select alarm functio...

Page 79: ...nfiguration data to the permanent flash memory Otherwise the current configuration will be lost when power off or system reset System Configuration interface The following table describes the labels i...

Page 80: ...IES 3080 IES 3062 SERIES User s Manual ORing Industrial Networking Corp 70 5 1 13 System Reboot System Reboot interface...

Page 81: ...u can use console or telnet to management switch by CLI CLI Management by RS 232 Serial Console 9600 8 none 1 none Before Configuring by RS 232 serial console use an RJ45 to DB9 F cable to connect the...

Page 82: ...IES 3080 IES 3062 SERIES User s Manual ORing Industrial Networking Corp 72 Step 2 Input a name for new connection Step 3 Select to use COM port number...

Page 83: ...e COM port properties setting 9600 for Bits per second 8 for Data bits None for Parity 1 for Stop bits and none for Flow control Step 5 The Console login screen will appear Use the keyboard to enter t...

Page 84: ...bnet Mask 255 255 255 0 Default Gateway 192 168 10 254 User Name admin Password admin Follow the steps below to access the console via Telnet Step 1 Telnet to the IP address of the switch from the Win...

Page 85: ...to Display advance function status save configures Global configuration Enter the configure command while in privileged EXEC mode switch co nfig To exit to privileged EXEC mode enter exit or end Use t...

Page 86: ...lash rom switch write memory system name System Name G Configure system name switch config system name xxx system location System Location G Set switch system location string switch config system loca...

Page 87: ...igh IP G Configure high IP address for IP pool switch config dhcpserver highip 192 168 1 50 dhcpserver subnetmask Subnet mask G Configure subnet mask for DHCP clients switch config dhcpserver subnetma...

Page 88: ...ty G Disable IP security function switch config no security no security http G Disable IP security of HTTP server switch config no security http no security telnet G Disable IP security of telnet serv...

Page 89: ...y bandwidth type all I Set interface ingress limit frame type to accept all frame switch config interface fastEthernet 2 switch config if bandwidth type all bandwidth type broadcast multicast floo ded...

Page 90: ...interface fastEthernet 2 switch config if show bandwidth state Enable Disable I Use the state interface configuration command to specify the state mode of operation for Ethernet ports Use the disable...

Page 91: ...typort 2 aggregator group GroupID Port list lacp workp Workport G Assign a trunk group with LACP active GroupID 1to3 Port list Member port list This parameter could be a port range ex 1 4 or a port li...

Page 92: ...h vlan no vlan 2 no gvrp V Disable GVRP switch vlan no gvrp IEEE 802 1Q VLAN vlan 8021q port PortNumber access link untag UntaggedVID V Assign a access link for VLAN by port if the port belong to a tr...

Page 93: ...r VLAN by trunk group switch vlan vlan 8021q aggreator 3 hybrid link untag 4 tag 3 6 8 or switch vlan vlan 8021q aggreator 3 hybrid link untag 5 tag 6 8 show vlan VID or show vlan V Show VLAN informat...

Page 94: ...nits BPDUs switch config spanning tree hello time 3 spanning tree forward time seconds G Use the spanning tree forward time global configuration command to set the forwarding time for the specified sp...

Page 95: ...switch config if stp path priority 127 stp admin p2p Auto True False I Admin P2P of STP priority on this interface switch config interface fastEthernet 2 switch config if stp admin p2p Auto stp admin...

Page 96: ...riority lowest low mid dle high G Configure COS Priority switch config qos priority cos 22 middle qos priority tos Priority lowest low mid dle high G Configure TOS Priority switch config qos priority...

Page 97: ...MAC G Configure MAC address table filter switch config mac address table filter hwaddr 000012348678 show mac address table P Show all MAC address table switch show mac address table show mac address t...

Page 98: ...unity string right switch config snmp community strings public right RO or switch config snmp community strings public right RW snmp snmpv3 user User Name password Authentication Password Privacy Pass...

Page 99: ...how monitor monitor RX TX Both I Configure source port of monitor function switch config interface fastEthernet 2 switch config if monitor RX show monitor I Show port monitor information switch config...

Page 100: ...802 1x system share key global configuration command to change the shared key value switch config 8021x system sharekey 123456 8021x system nasid words G Use the 802 1x system nasid global configurati...

Page 101: ...uests switch config 8021x misc maxrequest 3 8021x misc reauthperiod sec G Use the 802 1x misc reauth period global configuration command to set the reauth period switch config 8021x misc reauthperiod...

Page 102: ...d need to specify the IP of TFTP server and the file name of image switch config upgrade lash upgrade_fw 6 14 Commands Set List SYSLOG SMTP EVENT command set IES 3080 IES 3062 SERIES Commands Level De...

Page 103: ...SMTP Both G Set Authentication failure event type switch config event authentication failure both event O Ring topology change Systemlog SMTP Both G Set s ring topology changed event type switch conf...

Page 104: ...nable G Enable SNTP function switch config sntp enable sntp daylight G Enable daylight saving time if SNTP function is inactive this command can t be applied switch config sntp daylight sntp daylight...

Page 105: ...ng master switch config ring master Ring couplering G Enable couple ring switch config ring couplering Ring dualhoming G Enable dual homing switch config ring dualhoming Ring ringport 1st Ring Port 2n...

Page 106: ...EEE 802 3ab for 1000Base T IEEE 802 3ad for LACP Link Aggregation Control Protocol IEEE 802 3x for Flow control IEEE 802 1D for STP Spanning Tree Protocol IEEE 802 1p for COS Class of Service IEEE 802...

Page 107: ...Duplex Collision 10 100 1000Base T X Fiber Port Indicator Green for port Link Act Amber for Link Fault contact Relay Relay output to carry capacity of 1A at 24VDC Power Redundant Input Power Triple DC...

Reviews:

No comments