ORiNG TRGPS-9084GT-M12X-BP2-MV User Manual Download Page 102

Page: 102 / 178

TRGPS-9084GT-M12X-BP2-MV User

Manual

ORing Industrial Networking Corp

101

Attacked

: DDOS attacks occur

Device IP Address

Specifies IP address of the device

Device MAC

Address

Specifies MAC address of the device

Advanced Configurations

Alias IP Address

This page provides alias IP address configuration. Some devices might have more than one IP

addresses. You could specify other IP addresses here.

Label

Description

Alias IP Address

Specifies alias IP address. Keep

0.0.0.0

if the device does not have

an alias IP address.

Alive Check

Alive Check monitors the real-time status of the device connected to the port. live-checking

packets will be sent to the device to probe if the device is running. If the switch receives no

response from the device, actions will be taken according to your configurations.

Summary of Contents for TRGPS-9084GT-M12X-BP2-MV

Page 1: ... X B BP P2 2 M MV V I In nd du us st tr ri ia al l M Ma an na ag ge ed d E Et th he er rn ne et t S Sw wi it tc ch h U Us se er r M Ma an nu ua al l V Ve er rs si io on n 1 1 1 1 N No ov v 2 20 01 19 9 w ww ww w o or ri in ng gn ne et t c co om m ...

Page 2: ...t expenses apportioned by ORing and the distributor This warranty does not cover product modifications or repairs done by persons other than ORing approved personnel and this warranty does not apply to ORing products that are misused abused improperly installed or damaged by accidents Please refer to the Technical Specifications section for the actual warranty period s of the product s associated ...

Page 3: ...l mount Installation 11 3 2 Wiring 12 3 2 1 Grounding 12 3 2 2 Fault Relay 12 3 2 3 Power Input 13 3 3 Connection 13 3 3 1 Cables 13 1000 100BASE TX 10BASE T Pin Assignments 13 Console port wiring 15 3 3 2 O Ring O Chain 16 O Ring 16 Redundancy 19 4 1 O Ring 19 4 1 1 Introduction 19 4 1 2 Configurations 19 4 2 O Chain 21 4 2 1 Introduction 21 4 2 2 Configurations 21 4 3 Bypass 22 4 3 1 Introductio...

Page 4: ...ord 37 5 1 3 Authentication Methods 38 5 1 4 IP Settings 38 5 1 5 IPv6 Settings 39 5 1 6 Daylight Saving Time 41 5 1 7 HTTPS 43 5 1 8 SSH 43 5 1 9 LLDP 44 5 1 10 Modbus TCP 47 5 1 11 Backup Restore Configurations 48 5 1 12 Firmware Update 48 5 2 DHCP Server 48 5 2 1 Basic Settings 48 5 2 2 Dynamic Client List 49 5 2 3 Client List 49 5 2 4 Relay Agent 50 5 3 Port Setting 52 5 3 1 Port Control 52 5 ...

Page 5: ... 5 6 1 Storm Control 79 5 6 2 Port Classification 80 5 6 3 Port Tag Remaking 82 5 6 4 Port DSCP 82 5 6 5 Policing 84 Queue Policing 85 5 6 7 Scheduling and Shaping 85 5 6 8 Port Scheduler 88 5 6 9 Port Shaping 89 5 6 10 DSCP based QoS 89 5 6 11 DSCP Translation 90 5 6 12 DSCP Classification 91 5 6 13 QoS Control List 91 5 6 14 QoS Counters 94 5 6 15 QCL Status 94 5 7 Multicast 95 5 7 1 IGMP Snoopi...

Page 6: ...4 5 10 Monitor and Diag 137 5 10 1 MAC Table 137 5 10 2 Port Statistics 140 5 10 3 Port Mirroring 142 5 10 4 System Log Information 143 5 10 5 Cable Diagnostics 144 5 10 6 SFP Monitor 145 5 10 7 Ping 146 IPv6 Ping 147 5 11 Synchronization 147 5 12 PoE 149 5 12 1 Configurations 149 5 12 2 Status 152 5 12 3 PoE Schedule 153 5 12 4 PoE Auto Ping 153 5 13 Troubleshooting 154 5 13 1 Factory Defaults 15...

Page 7: ...0 100 1000Base T X P S E Power Sourcing Equipment ports P S E is a device switch or hub for instance that will provide power in a PoE connection TRGPS 9084GT M12X BP2 MV includes 2 sets of bypass ports that protect the network from failures and Network maintenance by ensuring network integrity during power loss And support wide operating temperature from 40oC to 75oC TRGPS 9084GT M12X BP2 MV can a...

Page 8: ...le notifications during unexpected events Configuration via Web based Telnet Console CLI and Windows utility Open Vision Supports LLDP Protocol 1 3 Hardware Specifications 8x10 100 1000Base T X P S E ports provide up to 30 Watts per port with 60Watts total power budget 4 x 10 100 1000Base T X ports 1 x console port 2 sets of bypass ports EN50155 compliance Supports 72 110 50 4 137 5 VDC power inpu...

Page 9: ...tor with 4 pin M12 male S coding connector Ethernet ports 8 x 10 100 1000Base T X P S E coppoer ports with 8 pin M12 female X coding connector 4 x 10 100 1000Base T X non PoE ports with bypass function with 8 pin M12 female X coding connector Console 1 x console port with 5 pin M12 female A coding connector Relay output 1 x relay output with 5 pin M12 female A coding connector Reset button 1 x res...

Page 10: ...bps 10 100 1000Base T X Ethernet ports LNK ACT Green On Port is linked Blinking Transmitting data Speed Green On Port is running at 1000Mbps Amber On Port is running at 100Mbps Green Amber Off Port is running at 10Mbps 2 3 Bypass Technology When a device connected to other devices through a switch without bypass function the device will lose connection if the switch loses power as traffic will not...

Page 11: ...TRGPS 9084GT M12X BP2 MV User Manual ORing Industrial Networking Corp 10 ...

Page 12: ...o mount the switch to the wall Step 1 Install left and right front mounting brackets to the switch using 4 M3 screws on each side provided with switch Step 2 With front brackets orientated in front of the rack nest front and rear brackets together Fasten together using remaining M4 screws into counter sunk holes Step 3 Fasten the front mounting bracket to the front of the rack ...

Page 13: ...ferent signal characteristics should be routed separately 6 You can use the type of signal transmitted through a wire to determine which wires should be kept separate The rule of thumb is that wiring sharing similar electrical characteristics can be bundled together 7 You should separate input wiring from output wiring 8 It is advised to label the wiring to all devices in the system 3 2 1 Groundin...

Page 14: ...e device Step 2 Rotate the outer ring of the cable connector until a snug ﬁt is achieved Make sure the connection is tight 3 3 Connection 3 3 1 Cables 1000 100BASE TX 10BASE T Pin Assignments The device provides Ethernet ports in M12 connector type According to the link type the switch uses CAT 3 4 5 5e UTP cables to connect to any other network devices PCs servers switches routers or hubs Please ...

Page 15: ...12 A coding connector Below is the pin assignment for the Ethernet ports 10 100 1000Base T X M12 port Pin Number Assignment 1 BI_DA 2 BI_DA 3 BI_DB 4 BI_DB 5 BI_DD 6 BI_DD 7 BI_DC 8 BI_DC 10 100 1000Base T X P S E M12 port Pin Number Assignment 1 BI_DA with PoE Vout 2 BI_DA with PoE Vout 3 BI_DB with PoE Vout 4 BI_DB with PoE Vout 5 BI_DD 6 BI_DD 7 BI_DC 8 BI_DC The device supports auto MDI MDI X ...

Page 16: ... used Not used 8 Not used Not used 1000Base T X MDI MDI X Pin Assignments Pin Number MDI port MDI X port 1 BI_DA BI_DB 2 BI_DA BI_DB 3 BI_DB BI_DA 4 BI_DB BI_DA 5 BI_DD BI_DC 6 BI_DD BI_DC 7 BI_DC BI_DD 8 BI_DC BI_DD Note and signs represent the polarity of the wires that make up each wire pair Console port wiring The switch has one RS 232 with 5 pin M12 female A coding console port located on the...

Page 17: ...ology Coupling Ring If you already have two O Ring topologies and would like to connect the rings you can form them into a coupling ring All you need to do is select two switches from each ring to be connected for example switch A and B from Ring 1 and switch C and D from ring 2 Decide which port on each switch to be used as the coupling port and then link them together for example port 1 of switc...

Page 18: ...P network environment you can use dual homing Choose two switches Switch A B from the ring for connecting to the switches in the RSTP network core switches The connection of one of the switches Switch A or B will act as the primary path while the other will act as the backup path that is activated when the primary path connection fails ...

Page 19: ...s from the chain Switch A B that you want to connect to the O Ring and connect them to the switches in the ring Switch C D 2 In correspondence to the port connected to the ring configure an edge port for both of the connected switches in the chain by checking the box in the management page see 4 1 2 Configurations 3 Once the setting is completed one of the connections will act as the main path and...

Page 20: ...e of less than 30 milliseconds in full duplex Gigabit operation or 10 milliseconds in full duplex Fast Ethernet operation and up to 250 nodes The ring protocols identify one switch as the master of the network and then automatically block packets from traveling through any of the network s redundant loops In the event that one branch of the ring gets disconnected from the rest of the network the p...

Page 21: ...divide a big ring into two smaller rings to avoid network topology changes affecting all switches It is a good method for connecting two rings Coupling Port Ports for connecting multiple rings A coupling ring needs four switches to build an active and a backup link Links formed by the coupling ports will run in active backup mode Dual Homing Check to enable Dual Homing When Dual Homing is enabled ...

Page 22: ...works enables the network to recover in less than 30 milliseconds in full duplex Gigabit operation or 10 milliseconds in full duplex Fast Ethernet operation for up to 250 switches if at any time a segment of the chain fails O Chain allows multiple redundant rings of different redundancy protocols to join and function together as a large and the most robust network topologies It can create multiple...

Page 23: ... up 4 3 Bypass 4 3 1 Introduction Bypass provides reliable and uninterrupted connections of inline network devices when any of the devices encounter hardware failure such as power outage Figure 1 shows the topology consisting of switches without bypass function When any of the devices breaks down the network will lose connection Figure 1 Figure 2 shows the topology consisting of switches with bypa...

Page 24: ...ink will be activated immediately when one of the links is down thereby ensuring uninterrupted data transmission However if any inline device fails the network will be disconnected see below By using bypass enabled switches in a ring topology data will continue to flow to the next active switch through the same route when one or more inlay devices fail Data will bypass the inactive switches during...

Page 25: ...strial Networking Corp 24 Fiber Networks When a link between two switches fails following the breakdown of the switch the backup link will be activated Data will then be transmitted via the backup path see below Fast Ethernet Networks Fiber Networks ...

Page 26: ...2439 can support up to 50 devices and will enable a back up link in 80ms adjustable to max 200ms 500ms 4 4 2 Configurations Label Description Enable Enables the MRP function Manager Every MRP topology needs a MRP manager One MRP topology can only have a Manager If two or more switches are set to be Manager the MRP topology will fail React on Link Change Advanced mode Faster mode Enabling this func...

Page 27: ...econds STP Bridge Status This page shows the status for all STP bridge instance Label Description MSTI The bridge instances You can also link to the STP detailed bridge status Bridge ID The bridge ID of this bridge instance Root ID The bridge ID of the currently selected root bridge Root Port The switch port currently assigned the root port role Root Cost Root path cost For a root bridge this is z...

Page 28: ...rt role of the CIST port The values include AlternatePort BackupPort RootPort and DesignatedPort State The current STP port state of the CIST port The values include Blocking Learning and Forwarding Uptime The time since the bridge port is last initialized Refresh Click to refresh the page immediately Auto refresh Check this box to enable an automatic refresh of the page at regular intervals STP S...

Page 29: ...DUs received and discarded on the port Refresh Click to refresh the page immediately Auto refresh Check to enable an automatic refresh of the page at regular intervals STP Bridge Configurations Label Description Protocol Version The version of the STP protocol Valid values include STP RSTP and MSTP Forward Delay The delay used by STP bridges to transit root and designated ports to forwarding used ...

Page 30: ...s multiple spanning trees within a network by grouping and mapping multiple VLANs into different spanning tree instances known as MSTIs to form individual MST regions Each switch is assigned to an MST region Hence each MST region consists of one or more MSTP switches with the same VLANs at least one MST instance and the same MST region name Therefore switches can use different paths in the network...

Page 31: ...s you to enter a user defined value The path cost is used when establishing an active topology for the network Lower path cost ports are chosen as forwarding ports in favor of higher path cost ports The range of valid values is 1 to 200000000 Priority Configures the priority for ports having identical port costs See above Save Click to save changes Reset Click to undo any changes made locally and ...

Page 32: ...ed above This must be an integer between 0 and 65535 MSTI The bridge instances The CIST is not available for explicit mapping as it will receive the VLANs not explicitly mapped VLANS Mapped The list of VLANs mapped to the MSTI The VLANs must be separated with commas and or space A VLAN can only be mapped to one MSTI An unused MSTI will be left empty ex without any mapped VLANs Save Click to save c...

Page 33: ...ions and with any RSTP and STP single instance spanning trees in the network Any boundary port that is if it is connected to another region will automatically belongs solely to CIST even if it is assigned to an MSTI All VLANs that are not members of particular MSTIs are members of the CIST Port Settings Label Description Port The switch port number to which the following settings will be applied S...

Page 34: ...selected If set spanning trees will lose connectivity It can be set by a network administrator to prevent bridges outside a core region of the network from influencing the active spanning tree topology because those bridges are not under the full control of the administrator This feature is also known as Root Guard Restricted TCN When enabled the port will not propagate received topology change no...

Page 35: ...hes The device with fast recovery mode will provide redundant links Fast recovery mode supports 12 priorities Only the first priority will be the active port and the other ports with different priorities will be backup ports Label Description Active Activate fast recovery mode port Ports can be set to 12 priorities Only the port with the highest priority will be the active port 1st Priority is the...

Page 36: ... a user friendly viewing screen Note By default IE5 0 or later version do not allow Java applets to open sockets You need to modify the browser setting separately in order to enable Java applets for network ports Management via Web Browser Follow the steps below to manage your switch via a Web browser System Login 1 Launch an Internet Explorer 2 Type http and the IP address of the switch Press Ent...

Page 37: ...licking on the links will bring you to individual configuration pages 5 1 Basic Settings The Basic Settings page allows you to configure the basic functions of the switch 5 1 1 System Information This page shows the general information of the switch Label Description System Name An administratively assigned name for the managed node By convention this is the node s fully qualified domain name A do...

Page 38: ...ation of the contact person for this managed node together with information on how to contact this person The allowed string length is 0 to 255 and only ASCII characters from 32 to 126 are allowed Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved values 5 1 2 Admin Password This page allows you to configure the system password required to access...

Page 39: ...ed for authentication Radius a remote RADIUS server is used for authentication Fallback Check to enable fallback to local authentication If none of the configured authentication servers are active the local user database is used for authentication This is only possible if Authentication Method is set to a value other than none or local Save Click to save changes Reset Click to undo any changes mad...

Page 40: ...The default IP is 192 168 10 1 IP Mask Assigns the subnet mask of the IP address If DHCP client function is enabled you do not need to assign the subnet mask IP Router Assigns the network gateway for the switch The default gateway is 192 168 10 254 VLAN ID Provides the managed VLAN ID The allowed range is 1 through 4095 DNS Server Enter the IP address of the DNS server in dotted decimal notation S...

Page 41: ... special syntax that can be used as a shorthand way of representing multiple 16 bit groups of contiguous zeros but it can appear only once It can also represent a legally valid IPv4 address For example 192 1 2 34 Prefix Specify an IPv6 prefix for the switch The allowed range is 1 to 128 Router Specify an IPv6 address for the switch IPv6 address consists of 128 bits represented as eight groups of f...

Page 42: ...n click Save Acronym You can set an acronym for the time zone for identification up to 16 alpha numeric characters are allowed and can contain _ or Label Description Daylight Saving Time This is used to set the clock forward or backward according to the configurations set below for a defined Daylight Saving Time duration Select Disable to disable the Daylight Saving Time configuration Select Recur...

Page 43: ...te Select the ending date Year Select the ending year Hours Select the ending hour Minutes Select the ending minute Recurring Configurations Offset settings Label Description offset Enter the number of minutes to add during Daylight Saving Time Range from 1 to 1440 Non Recurring Configurations Start Time settings Label Description Month Select the starting month Date Select the starting date Year ...

Page 44: ...n the current connection is HTTPS disabling HTTPS will automatically redirect web browser to an HTTP connection The modes include Enabled enable HTTPS Disabled disable HTTPS Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved values 5 1 8 SSH SSH Secure Shell is a cryptographic network protocol intended for secure data transmission and remote acce...

Page 45: ...t are also using the protocols and to store the information that is learned about other devices This page allows you to examine and configure current LLDP port settings Label Description Port The switch port number to which the following settings will be applied Mode Indicates the selected LLDP mode Rx only the switch will not send out LLDP information but LLDP information from its neighbors will ...

Page 46: ... The description of the port advertised by the neighbor System Capabilities Description of the neighbor s capabilities The capabilities include 1 Other 2 Repeater 3 Bridge 4 WLAN Access Point 5 Router 6 Telephone 7 DOCSIS Cable Device 8 Station Only 9 Reserved When a capability is enabled a will be displayed If the capability is disabled a will be displayed Management Address The neighbor s addres...

Page 47: ...umber of entries deleted due to expired time to live Local Counters Label Description Local Port The port that receives or transmits LLDP frames Tx Frames The number of LLDP frames transmitted on the port Rx Frames The number of LLDP frames received on the port Rx Errors The number of received LLDP frames containing errors Frames Discarded If a port receives an LLDP frame and the switch s internal...

Page 48: ...ge out time the LLDP information will be removed and the value of the age out counter will be incremented Refresh Click to refresh the page immediately Clear Click to clear the local counters All counters including global counters are cleared upon reboot Auto refresh Check to enable an automatic refresh of the page at regular intervals 5 1 10 Modbus TCP Modbus TCP uses TCP IP and Ethernet to carry...

Page 49: ...update the firmware of the switch 5 2 DHCP Server The switch provides DHCP server functions By enabling DHCP the switch will become a DHCP server and dynamically assigns IP addresses and related IP information to network clients 5 2 1 Basic Settings This page allows you to set up DHCP settings for the switch You can check the Enabled checkbox to activate the function Once the box is checked you wi...

Page 50: ...isplay in the following table You can select the entries and add them to a static table by clicking Add to static Table 5 2 3 Client List You can assign a specific IP address within the dynamic IP range to a specific port When a device is connected to the port and requests for dynamic IP assigning the switch will assign the IP address that has previously been assigned to the connected device ...

Page 51: ...s used to forward and transfer DHCP messages between the clients and the server when they are not in the same subnet domain Relay Information Mode Indicates the existing DHCP relay information mode The format of DHCP option 82 circuit ID format is vlan_id module_id port_no The first four characters represent the VLAN ID and the fifth and sixth characters are the module ID In stand alone devices th...

Page 52: ...essage containing the information is received Drop drop the package when a DHCP message containing the information is received The relay statistics shows the information of relayed packets of the switch Label Description Transmit to Sever The number of packets relayed from the client to the server Transmit Error The number of packets with errors when being sent to clients Receive from Server The n...

Page 53: ...ived packets containing relay agent information Replace Agent Option The number of packets replaced when received messages contain relay agent information Keep Agent Option The number of packets whose relay agent information is retained Drop Agent Option The number of packets dropped when received messages contain relay agent information 5 3 Port Setting Port Setting allows you to manage individua...

Page 54: ...Current Tx indicates whether pause frames on the port are transmitted The Rx and Tx settings are determined by the result of the last auto negotiation You can check the Configured column to use flow control This setting is related to the setting of Configured Link Speed Maximum Frame You can enter the maximum frame size allowed for the switch port in this column including FCS The allowed range is ...

Page 55: ...n Source MAC Address Calculates the destination port of the frame You can check this box to enable the source MAC address or uncheck to disable By default Source MAC Address is enabled Destination MAC Address Calculates the destination port of the frame You can check this box to enable the destination MAC address or uncheck to disable By default Destination MAC Address is disabled IP Address Calcu...

Page 56: ... to any aggregation group Only full duplex ports can join an aggregation and the ports must be in the same speed in each group 5 3 3 LACP LACP Link Aggregation Control Protocol trunks are similar to static port trunks but they are more flexible because LACP is compliant with the IEEE 802 3ad standard Hence it is interoperable with equipment from other vendors that also comply with the standard Thi...

Page 57: ...ined value Ports with the same key value can join in the same aggregation group while ports with different keys cannot Role Indicates LACP activity status Active will transmit LACP packets every second while Passive will wait for a LACP packet from a partner speak if spoken to Save Click to save changes Reset Click to undo changes made locally and revert to previous values LACP System Status This ...

Page 58: ...nk is up No means LACP is not enabled or the port link is down Backup means the port cannot join in the aggregation group unless other ports are removed The LACP status is disabled Key The key assigned to the port Only ports with the same key can be aggregated Aggr ID The aggregation ID assigned to the aggregation group Partner System ID The partner s system ID MAC address Partner Port The partner...

Page 59: ...number of LACP frames received at each port Discarded The number of unknown or illegal LACP frames discarded at each port Refresh Click to refresh the page immediately Auto refresh Check to enable an automatic refresh of the page at regular intervals Clear Click to clear the counters for all ports 5 3 4 Loop Gourd This feature prevents loop attack When receiving loop packets the port will be disab...

Page 60: ... be kept disabled when a loop is detected shutting down the port The valid value is 0 to 604800 seconds 7 days A value of zero will keep a port disabled permanently until the device is restarted Label Description Port Switch port number Enable Activate loop protection functions as a whole Action Configures the action to take when a loop is detected Valid values include Shutdown Port Shutdown Port ...

Page 61: ...ed to those ports traffic for the same VLAN can be sent between switches Label Description Delete Check to delete the entry It will be deleted during the next save VLAN ID The VLAN ID for a tagged port VLAN Name The name of the VLAN Port Members Check to select the ports belonging to individual VLAN Add New VLAN Click to add a new VLAN ID An empty row is added to the table and the VLAN can be conf...

Page 62: ...his is a global setting for all custom S ports Custom Ethertype enables you to change the Ethertype value on a port to any value to support network devices that do not use the standard 0x8100 Ethertype field value on 802 1Q tagged or 802 1p tagged frames When Port Type is set to S custom port the EtherType also known as TPID of all frames received on the port is changed to the specified value By d...

Page 63: ...ssing If ingress filtering is enabled and the ingress port is not a member of the classified VLAN of the frame the frame will be discarded By default ingress filtering is disabled no check mark Frame Type Determines whether the port accepts all frames or only tagged untagged frames This parameter affects VLAN ingress processing If the port only accepts tagged frames untagged frames received on the...

Page 64: ...When the port receives tagged frames 1 If the tagged frame contains a TPID of 0x8100 it will become a double tag frame and will be forwarded 2 If the TPID of tagged frame is not 0x8100 ex 0x88A8 it will be discarded The TPID of a frame transmitted by Unaware port will be set to 0x8100 The final status of the frame after egressing will also be affected by the Egress Rule C port When the port receiv...

Page 65: ...ains a tag based on PVID and is forwarded When the port receives tagged frames 1 If the tagged frame contains a TPID of 0x8100 it will be forwarded 2 If the TPID of tagged frame is not 0x88A8 ex 0x8100 it will be discarded The TPID of a frame transmitted by S custom port will be set to a self customized value which can be set by the user via Ethertype for Custom S ports Below are the illustrations...

Page 66: ...TRGPS 9084GT M12X BP2 MV User Manual ORing Industrial Networking Corp 65 ...

Page 67: ...2X BP2 MV User Manual ORing Industrial Networking Corp 66 Examples of VLAN Settings VLAN Access Mode Switch A Port 7 is VLAN Access mode Untagged 20 Port 8 is VLAN Access mode Untagged 10 Below are the switch settings ...

Page 68: ...GPS 9084GT M12X BP2 MV User Manual ORing Industrial Networking Corp 67 VLAN 1Q Trunk Mode Switch B Port 1 VLAN 1Qtrunk mode tagged 10 20 Port 2 VLAN 1Qtrunk mode tagged 10 20 Below are the switch settings ...

Page 69: ...TRGPS 9084GT M12X BP2 MV User Manual ORing Industrial Networking Corp 68 VLAN Hybrid Mode Port 1 VLAN Hybrid mode untagged 10 Tagged 10 20 Below are the switch settings ...

Page 70: ...9 VLAN QinQ Mode VLAN QinQ mode is usually adopted when there are unknown VLANs as shown in the figure below VLAN X Unknown VLAN 9000 Series Port 1 VLAN Settings VLAN ID Settings When setting the management VLAN only the same VLAN ID port can be used to control the switch ...

Page 71: ...f VLAN ID or destination MAC address A port must be a member of both a VLAN and a private VLAN to be able to forward packets This page allows you to configure private VLAN memberships for the switch By default all ports are VLAN unaware and members of VLAN 1 and private VLAN 1 Label Description Delete Check to delete the entry It will be deleted during the next save Private VLAN ID Indicates the I...

Page 72: ...ction The private VLAN is enabled when you click Save The Delete button can be used to undo the addition of new private VLANs A private VLAN is defined as a pairing of a primary VLAN with a secondary VLAN A promiscuous port is a port that can communicate with all other private VLAN port types via the primary VLAN and any associated secondary VLANs whereas isolated ports can communicate only with a...

Page 73: ...ed string length is 0 to 255 and only ASCII characters from 33 to 126 are allowed The field only suits to SNMPv1 and SNMPv2c SNMPv3 uses USM for authentication and privacy and the community string will be associated with SNMPv3 community table Write Community Indicates the write community string to permit access to SNMP agent The allowed string length is 0 to 255 and only ASCII characters from 33 ...

Page 74: ...racters from 33 to 126 are allowed Trap Destination Address Indicates the SNMP trap destination address Trap Destination IPv6 Address Provides the trap destination IPv6 address of this switch IPv6 address consists of 128 bits represented as eight groups of four hexadecimal digits with a colon separating each field For example in fe80 215 c5ff fe03 4dc7 the symbol is a special syntax that can be us...

Page 75: ...55 5 5 2 SNMP Community Configurations You can define access to the SNMP data on your devices by creating one or more SNMP communities An SNMP community is the group that devices and management stations running SNMP belong to It helps define where information is sent A SNMP device or agent may belong to more than one SNMP community It will not respond to requests from management stations that do n...

Page 76: ...ty Model USM for message security and View based Access Control Model VACM for access control For the USM entry the usmUserEngineID and usmUserName are the entry keys In a simple agent usmUserEngineID is always that agent s own snmpEngineID value The value can also take the value of the snmpEngineID of a remote SNMP engine with which this user can communicate In other words if user engine ID is th...

Page 77: ...8 to 40 Only ASCII characters from 33 to 126 are allowed Privacy Protocol Indicates the privacy protocol that this entry should belong to Possible privacy protocols include None no privacy protocol DES an optional flag to indicate that this user is using DES authentication protocol Privacy Password A string identifying the privacy pass phrase The allowed string length is 8 to 32 and only ASCII cha...

Page 78: ...haracters from 33 to 126 are allowed Group Name A string identifying the group name that this entry should belong to The allowed string length is 1 to 32 and only ASCII characters from 33 to 126 are allowed 5 5 5 SNMP View Configurations The SNMP v3 View table specifies the MIB object access requirements for each View Name You can specify specific areas of the MIB that can be accessed or denied ba...

Page 79: ...e allowed OID length is 1 to 128 The allowed string content is digital number or asterisk 5 5 6 SNMP Access Configurations This page allows you to configure SNMPv3 access table The entry index keys are Group Name Security Model and Security Level Label Description Delete Check to delete the entry It will be deleted during the next save Group Name A string identifying the group name that this entry...

Page 80: ...c and degrading network performance Errors in the protocol stack implementation mistakes in network configuration or users issuing a denial of service attack can cause a storm Storm control prevents traffic on a LAN from being disrupted by a broadcast multicast or unicast storm on a port In this page you can specify the rate at which packets are received for unicast multicast and broadcast traffic...

Page 81: ...s receive a bigger slice of bandwidth than those in a lower priority queue Label Description Port The port number for which the configuration below applies QoS Class Controls the default QoS class All frames are classified to a QoS class There is a one to one mapping between QoS class queue and priority A QoS class of 0 zero has the lowest priority If the port is VLAN aware and the frame is tagged...

Page 82: ...pped from the PCP and DEI value in the tag Otherwise the frame is classified to the default DP level The classified DP level can be overruled by a QCL entry PCP Controls the default PCP value All frames are classified to a PCP value If the port is VLAN aware and the frame is tagged then the frame is classified to the PCP value in the tag Otherwise the frame is classified to the default PCP value D...

Page 83: ...d Click on the port number to configure tag remarking Mode Shows the tag remarking mode for this port Classified use classified PCP DEI values Default use default PCP DEI values Mapped use mapped versions of QoS class and DP level 5 6 4 Port DSCP DSCP Differentiated Services Code Point is a measure of QoS It can classify data packets by using the 6 bit DS field in the IP header so you can manage e...

Page 84: ...late check to enable the function Classify includes four values Disable no Ingress DSCP classification DSCP 0 classify if incoming or translated if enabled DSCP is 0 Selected classify only selected DSCP whose classification is enabled as specified in DSCP Translation window for the specific DSCP All classify all DSCP Egress Port egress rewriting can be one of the following options Disable no Egres...

Page 85: ...le 5 6 5 Policing Policing is a traffic regulation mechanism for limiting the rate of traffic streams thereby controlling the maximum rate of traffic sent or received on an interface When the traffic rate exceeds the configured maximum rate policing drops or remarks the excess traffic This page allows you to configure Policer for all switch ports Port Policing Label Description Port The port numbe...

Page 86: ... and is restricted to 1 to 3300 when the Unit is Mbps This field is only shown if at least one of the queue policers is enabled Unit Configures the unit of measurement for each queue policer rate as kbps or Mbps The default value is kbps This field is only shown if at least one of the queue policers is enabled 5 6 7 Scheduling and Shaping Port scheduling can solve performance degradation during ne...

Page 87: ...es are available Strict Priority or Weighted Queue Shaper Enable Check to enable queue shaper for individual switch ports Queue Shaper Rate Configures the rate of each queue shaper The default value is 500 This value is restricted to 100 to 1000000 whn the Unit is kbps and it is restricted to 1 to 3300 when the Unit is Mbps Queues Shaper Unit Configures the rate for each queue shaper The default v...

Page 88: ...Unit Configures the unit of measurement for each port shaper rate as kbps or Mbps The default value is kbps Weighted Weighted scheduling will deliver traffic on a rotating basis It can guarantee each queue s minimum bandwidth based on their bandwidth weight when there is traffic congestion Only when a port has more traffic than it can handle will this mode be activated A queue is given an amount o...

Page 89: ...Scheduler Weight Configures the weight of each queue The default value is 17 This value is restricted to 1 to 100 This parameter is only shown if Scheduler Mode is set to Weighted Queue Scheduler Percent Shows the weight of the queue in percentage This parameter is only shown if Scheduler Mode is set to Weighted Port Shaper Enable Check to enable port shaper for individual switch ports Port Shaper...

Page 90: ... that is less than the line rate for that interface When configuring port shaping on an interface you specify a value indicating the maximum amount of traffic allowable for the interface This value must be less than the maximum bandwidth for that interface Label Description Port The switch port number to which the following settings will be applied Click on the port number to configure the shapers...

Page 91: ...CP Translation This page allows you to configure basic QoS DSCP translation settings for all switches DSCP translation can apply to Ingress or Egress Label Description DSCP Maximum number of supported DSCP values is 64 and valid DSCP value ranges from 0 to 63 Ingress Ingress DSCP can be first translated to new DSCP before using the DSCP for QoS class and DPL map There are two configuration paramet...

Page 92: ...a drop precedence with a high priority You can select the DSCP value from a selected menu to which you want to remap DSCP value ranges from 0 to 63 5 6 12 DSCP Classification This page allows you to configure the mapping of QoS class and Drop Precedence Level to DSCP value Label Description QoS Class Actual QoS class DPL Actual Drop Precedence Level DSCP Select the classified DSCP value 0 63 5 6 1...

Page 93: ...ange of VIDs PCP Priority Code Point can be specific numbers 0 1 2 3 4 5 6 7 a range 0 1 2 3 4 5 6 7 0 3 4 7 or Any DEI Drop Eligible Indicator can be any of values between 0 and 1 or Any SMAC Source MAC Address can be 24 MS bits OUI or Any DMAC Type Destination MAC type can be unicast UC multicast MC broadcast BC or Any Frame Type can be the following values Any Ethernet LLC SNAP IPv4 and IPv6 No...

Page 94: ... from left to right all bits following the first zero must also be zero DSCP Differentiated Code Point can be a specific value a range or Any DSCP values are in the range 0 63 including BE CS1 CS7 EF or AF11 AF43 IP Fragment Ipv4 frame fragmented options include yes no and any Sport Source TCP UDP Port 0 65535 or Any specific value or port range applicable for IP protocol UDP TCP Dport Destination...

Page 95: ...ceived at each queue Label Description Port The switch port number to which the following settings will be applied Qn There are 8 QoS queues per port Q0 is the lowest priority Rx Tx The number of received and transmitted packets per queue 5 6 15 QCL Status This page shows the QCL status by different QCL users Each row describes the QCE that is defined A conflict will occur if a specific QCE is not...

Page 96: ...s the QCE then DP level will set to a value displayed under DPL column DSCP if a frame matches the QCE then DSCP will be classified with the value displayed under DSCP column Conflict Displays the conflict status of QCL entries As hardware resources are shared by multiple applications resources required to add a QCE may not be available In that case it shows conflict status as Yes otherwise it is ...

Page 97: ...rt Fast Leave Check to enable fast leave on the port 5 7 2 VLAN Configurations of IGMP Snooping If a VLAN is not IGMP snooping enabled it floods multicast data and control packets to the entire VLAN in hardware When snooping is enabled IGMP packets are trapped to the CPU Data packets are mirrored to the CPU in addition to being VLAN flooded The CPU then installs hardware resources so that subseque...

Page 98: ...d entry as a basis for the next lookup When the end is reached the text No more entries is shown in the displayed table Use the button to start over Label Description Delete Check to delete the entry The designated entry will be deleted during the next save VLAN ID The VLAN ID of the entry IGMP Snooping Enable Check to enable IGMP snooping for individual VLAN Up to 32 VLANs can be selected IGMP Qu...

Page 99: ...The number of received V2 reports V3 Reports Receive The number of received V3 reports V2 Leave Receive The number of received V2 leave packets Refresh Click to refresh the page immediately Clear Clear all statistics counters Auto refresh Check to enable an automatic refresh of the page at regular intervals Port Switch port number Status Indicates whether a specific port is a router port or not 5 ...

Page 100: ... remote client IP Address IP address of the remote client 0 0 0 0 means any IP Web Check to enable management via a Web interface Telnet Check to enable management via a Telnet interface SNMP Check to enable management via a SNMP interface Delete Check to delete entries 5 8 2 Device Binding Device binding is ORing s proprietary technology which binds the IP MAC address of a device with a specified...

Page 101: ... are disable Got Reply receive ping reply from device meaning the device is still alive Lost Reply not receiving ping reply from device meaning the device might have been dead Stream Check Active Check to enable stream check When enabled the switch will detect the stream change getting low from the device Stream Check Status Indicates stream check status Possible statuses are disable Normal the st...

Page 102: ...ion Some devices might have more than one IP addresses You could specify other IP addresses here Label Description Alias IP Address Specifies alias IP address Keep 0 0 0 0 if the device does not have an alias IP address Alive Check Alive Check monitors the real time status of the device connected to the port live checking packets will be sent to the device to probe if the device is running If the ...

Page 103: ...rt Reboot Device Disables or enables PoE power DDoS Prevention The switch can monitor ingress packets and perform actions when DDOS attack occurred on this port When network traffic from a specific device increases significantly in a short period of time the switch will lock the IP address of that device to protect the network from attacks You can configure DDoS prevention on this page to achieve ...

Page 104: ... socket number here The socket number can be a range from low to high If the socket number is only one please fill the same number in the low and high fields Filter If packet type is UDP or TCP please choose the socket direction Destination Source Action Indicates the action to take when DDOS attacks occur Possible actions are no action Blocking 1 minute blocks the forwarding for 1 minute and log ...

Page 105: ...pe Indicates device types Possible types are no specification IP Camera IP Phone Access Point PC PLC Network Video Recorder Location Address Indicates location information of the device The information can be used for Google Mapping Description Device descriptions Stream Check Stream check monitors the consistency of real time network traffic from the device bound with the port When the traffic ch...

Page 106: ...oring of the port Action Indicates the action to take when the stream gets low Possible actions are no action Log it simply logs the event 5 8 3 ACL An ACL Access Control List is a list of permissions attached to an object An ACL specifies which users or system processes are authorized to access the objects and what operations are allowed on given objects Port Configuration ...

Page 107: ...pied to The allowed values are Disabled or a specific port number The default value is Disabled Logging Specifies the logging operation of the port The allowed values are Enabled frames received on the port are stored in the system log Disabled frames received on the port are not logged The default value is Disabled Please note that system log memory capacity and logging rate is limited Shutdown S...

Page 108: ... ACE consists of several parameters which vary with the frame type you have selected Label Description Ingress Port Indicates the ingress port to which the ACE will apply Any the ACE applies to any port Port n the ACE applies to this port number where n is the number of the switch port Policy n the ACE applies to this policy number where n can range from 1 to 8 Frame Type Indicates the frame type ...

Page 109: ...logging operation of the ACE The allowed values are Enabled frames matching the ACE are stored in the system log Disabled frames matching the ACE are not logged Please note that system log memory capacity and logging rate is limited Shutdown Specifies the shutdown operation of the ACE The allowed values are Enabled if a frame matches the ACE the ingress port will be disabled Disabled port shutdown...

Page 110: ...u can enter a specific destination MAC address The legal format is xx xx xx xx xx xx Frames matching the ACE will use this DMAC value Label Description VLAN ID Filter Specifies the VLAN ID filter for the ACE Any no VLAN ID filter is specified VLAN ID filter status is don t care Specific if you want to filter a specific VLAN ID with the ACE choose this value A field for entering a VLAN ID number ap...

Page 111: ... for defining UDP parameters will appear For more details of these fields please refer to the help file TCP selects TCP to filter IPv4 TCP protocol frames Extra fields for defining TCP parameters will appear For more details of these fields please refer to the help file IP Protocol Value Specific allows you to enter a specific value The allowed range is 0 to 255 Frames matching the ACE will use th...

Page 112: ...eld that appears Network source IP filter is set to Network Specify the source IP address and source IP mask in the SIP Address and SIP Mask fields that appear SIP Address When Host or Network is selected for the source IP filter you can enter a specific SIP address in dotted decimal notation SIP Mask When Network is selected for the source IP filter you can enter a specific SIP mask in dotted dec...

Page 113: ...er is specified sender IP filter is don t care Host sender IP filter is set to Host Specify the sender IP address in the SIP Address field that appears Network sender IP filter is set to Network Specify the sender IP address and sender IP mask in the SIP Address and SIP Mask fields that appear Sender IP Address When Host or Network is selected for the sender IP filter you can enter a specific send...

Page 114: ...ARP frames where THA is equal to the SMAC address Any any value is allowed don t care IP Ethernet Length Specifies whether frames will meet the action according to their ARP RARP hardware address length HLN and protocol address length PLN settings 0 ARP RARP frames where the HLN is equal to Ethernet 0x06 and the PLN is equal to IPv4 0x04 must not match this entry 1 ARP RARP frames where the HLN is...

Page 115: ...lected for the ICMP filter you can enter a specific ICMP value The allowed range is 0 to 255 A frame matching the ACE will use this ICMP value ICMP Code Filter Specifies the ICMP code filter for the ACE Any no ICMP code filter is specified ICMP code filter status is don t care Specific if you want to filter a specific ICMP code filter with the ACE you can enter a specific ICMP code value A field f...

Page 116: ...ic is selected for the TCP UDP source filter you can enter a specific TCP UDP source value The allowed range is 0 to 65535 A frame matching the ACE will use this TCP UDP source value TCP UDP Source Range When Range is selected for the TCP UDP source filter you can enter a specific TCP UDP source range value The allowed range is 0 to 65535 A frame matching the ACE will use this TCP UDP source value...

Page 117: ...frames where the FIN field is set must not be able to match this entry 1 TCP frames where the FIN field is set must be able to match this entry Any any value is allowed don t care TCP SYN Specifies the TCP SYN synchronize sequence numbers value for the ACE 0 TCP frames where the SYN field is set must not be able to match this entry 1 TCP frames where the SYN field is set must be able to match this...

Page 118: ...d the authentication server This page allows you to configure common settings for an authentication server Label Description Timeout The timeout which can be set to a number between 3 and 3600 seconds is the maximum time to wait for a reply from a server If the server does not reply within this time frame we will consider it to be dead and continue with the next enabled server if any RADIUS server...

Page 119: ... server sends an accept message to the client to grant access If a match is not found or a problem is found with the user s credentials the server returns a reject message to deny access The NAD then establishes or terminates the user s connection The NAD may then forward accounting information to the RADIUS server to document the transaction the RADIUS server may store or forward this information...

Page 120: ...e RADIUS accounting server IP address is expressed in dotted decimal notation Port The UDP port to use on the RADIUS accounting server If the port is set to 0 zero the default port 1813 is used on the RADIUS accounting server Secret The secret is a text string used by RADIUS to encrypt the client and server authenticator field during exchanges between the router and a RADIUS authentication server ...

Page 121: ...the server is disabled Not Ready the server is enabled but IP communication is not yet up and running Ready the server is enabled IP communications are built and the RADIUS module is ready to accept access attempts Dead X seconds left access attempts are made to this server but it does not reply within the configured timeout The server has temporarily been disabled but will be re enabled when the ...

Page 122: ...le is ready to accept accounting attempts Dead X seconds left accounting attempts are made to this server but it does not reply within the configured timeout The server has temporarily been disabled but will be re enabled when the dead time expires The number of seconds left before this occurs is displayed in parentheses This state is only reachable when more than one server is enabled Authenticat...

Page 123: ...al Networking Corp 122 Other Info This section contains information about the state of the server and the latest round trip time Label Description Packet Counters RADIUS accounting server packet counters There are five receive and four transmit counters ...

Page 124: ... that prevents unauthorized access to a network by requiring users to first submit credentials for authentication One or more backend servers RADIUS determine whether the user is allowed access to the network MAC based authentication allows for authentication of more than one user on the same port and does not require the users to have special 802 1X software installed on their system The switch u...

Page 125: ... is currently down but not considered dead if the supplicant retransmits EAPOL Start frames at a rate faster than X seconds it will never be authenticated because the switch will cancel on going backend authentication server requests whenever it receives a new EAPOL Start frame from the supplicant Since the server has not failed because the X seconds have not expired the same server will be contac...

Page 126: ...es can be spoofed by malicious users equipment whose MAC address is a valid RADIUS user can be used by anyone and only the MD5 Challenge method is supported 802 1X and MAC Based authentication configurations consist of two sections system and port wide Label Description Mode Indicates if 802 1X and MAC based authentication is globally enabled or disabled on the switch If globally disabled all port...

Page 127: ...y module needs to check for activity on the MAC address in question at regular intervals and free resources if no activity is seen within a given period of time This parameter controls exactly this period and can be set to a number between 10 and 1000000 seconds For ports in MAC based Auth mode reauthentication does not cause direct communications between the switch and the client so this will not...

Page 128: ...t between the supplicant and the switch are special 802 1X frames known as EAPOL EAP Over LANs frames which encapsulate EAP PDUs RFC3748 Frames sent between the switch and the RADIUS server is RADIUS packets RADIUS packets also encapsulate EAP PDUs together with other attributes like the switch s IP address name and the supplicant s port number on the switch EAP is very flexible as it allows for d...

Page 129: ...rough a hub to piggy back on the successfully authenticated client and get network access even though they are not authenticated individually To overcome this security breach use the Single 802 1X variant Single 802 1X is not yet an IEEE standard but features many of the same characteristics as port based 802 1X In Single 802 1X at most one supplicant can get authenticated on the port at a time No...

Page 130: ... frame sent by the supplicant An exception to this is when no supplicants are attached In this case the switch sends EAPOL Request Identity frames using the BPDU multicast MAC address as destination to wake up any supplicants that might be on the port The maximum number of supplicants that can be attached to a port can be limited using the Port Security Limit Control functionality MAC based Auth U...

Page 131: ...ers equipment whose MAC address is a valid RADIUS user can be used by anyone Also only the MD5 Challenge method is supported The maximum number of clients that can be attached to a port can be limited using the Port Security Limit Control functionality Port State The current state of the port It can undertake one of the following values Globally Disabled NAS is globally disabled Link Down NAS is g...

Page 132: ...rrent NAS port statuses Label Description Port The switch port number Click to navigate to detailed 802 1X statistics of each port Admin State The port s current administrative state Refer to NAS Admin State for more details regarding each value Port State The current state of the port Refer to NAS Port State for more details regarding each value Last Source The source MAC address carried in the m...

Page 133: ...t details to be displayed Label Description Admin State The port s current administrative state Refer to NAS Admin State for more details regarding each value Port State The current state of the port Refer to NAS Port State for more details regarding each value EAPOL Counters These supplicant frame counters are available for the following administrative states Force Authorized Force Unauthorized 8...

Page 134: ...supplicant client that attempts to authenticate This information is available for the following administrative states 802 1X MAC based Auth 5 9 Alerts 5 9 1 Fault Alarm When any selected fault event happens the Fault LED on the switch panel will light up and the electric relay will signal at the same time The following pages allow you to set up alert ...

Page 135: ... collectors It permits separation of the software that generates messages from the system that stores them and the software that reports and analyzes them As Syslog messages are UDP based the sender and receiver will not be aware of it if the packet is lost due to network disconnection and no UDP packet will be resent Label Description Server Mode Indicates existing server mode When the mode opera...

Page 136: ... the IPv4 host address of syslog server If the switch provides DNS functions it also can be a host name SMTP Setting SMTP Simple Mail Transfer Protocol is a protocol for transmitting e mails across the Internet By setting up SMTP alert the device will send a notification e mail when a user defined event occurs Label Description E mail Alarm Enables or disables transmission of system warnings by e ...

Page 137: ... alerts Check the corresponding box to enable the system event warning method you want Please note that the checkboxes will gray out if SYSLOG or SMTP is disabled Label Description System Cold Start Sends out alerts when the system is restarted Power Status Sends out alerts when power is up or down SNMP Authentication Failure Sends out alert when SNMP authentication fails O Ring Topology Change Se...

Page 138: ...es dynamic and static entries Entries in a static MAC table are added or removed manually and cannot age out by themselves Entries in a dynamic MAC tablet will age out after a configured aging time Such entries can be added by learning or manual configuration Aging Configuration Aging enables the switch to track only active MAC addresses on the network and flush out MAC addresses that are no longe...

Page 139: ...2 1X Label Description Auto Learning is done automatically as soon as a frame with unknown SMAC is received Disable No learning is done Secure Only static MAC entries are learned all other frames are dropped Note make sure the link used for managing the switch is added to the static Mac table before changing to secure learning mode otherwise the management link will be lost and can only be restore...

Page 140: ...ntries Per Page input field When first visited the web page will show the first 20 entries from the beginning of the MAC Table The first displayed will be the one with the lowest VLAN ID and the lowest MAC address found in the MAC Table The Start from MAC address and VLAN fields allow the user to select the starting point in the MAC table Clicking Refresh will update the displayed table starting f...

Page 141: ... ID of the entry Port Members The ports that are members of the entry 5 10 2 Port Statistics Traffic Overview This page provides an overview of general traffic statistics for all switch ports Label Description Port The switch port number to which the following settings will be applied Packets The number of received and transmitted packets per port Bytes The number of received and transmitted bytes...

Page 142: ...to enable an automatic refresh of the page at regular intervals Refresh Updates the counter entries starting from the current entry ID Clear Flushes all counters entries Detailed Statistics This page provides detailed traffic statistics for a specific switch port Use the port drop down list to decide the details of which switch port to be displayed The displayed counters include the total number f...

Page 143: ...x Fragments The number of short1 frames received with an invalid CRC Rx Jabber The number of long2 frames received with an invalid CRC Rx Filtered The number of received frames filtered by the forwarding process Tx Drops The number of frames dropped due to output buffer congestion Tx Late Exc Coll The number of frames dropped due to excessive or late collisions 1 Short frames are frames smaller th...

Page 144: ...red Tx only only frames transmitted from this port are mirrored to the mirror port Frames received are not mirrored Disabled neither transmitted nor recived frames are mirrored Enabled both received and transmitted frames are mirrored to the mirror port Note for a given port a frame is only transmitted once Therefore you cannot mirror Tx frames to the mirror port In this case mode for the selected...

Page 145: ...lushes all system log entries Updates system log entries starting from the first available entry ID Updates system log entries ending at the last entry currently displayed Updates system log entries starting from the last entry currently displayed Updates system log entries ending at the last available entry ID 5 10 5 Cable Diagnostics You can perform cable diagnostics for all ports or selected po...

Page 146: ... switch to stop responding until VeriPHY is completed Label Description Port The port where you are requesting VeriPHY Cable Diagnostics Cable Status Port port number Pair the status of the cable pair Length the length in meters of the cable pair 5 10 6 SFP Monitor SFP modules with DDM Digital Diagnostic Monitoring function can measure the temperature of the apparatus helping you monitor the statu...

Page 147: ...ackets will be transmitted and the sequence number and roundtrip time will be displayed upon reception of a reply The page refreshes automatically until responses to all packets are received or until a timeout occurs PING6 server 10 10 132 20 64 bytes from 10 10 132 20 icmp_seq 0 time 0ms 64 bytes from 10 10 132 20 icmp_seq 1 time 0ms 64 bytes from 10 10 132 20 icmp_seq 2 time 0ms 64 bytes from 10...

Page 148: ...he payload size of the ICMP packet Values range from 8 to 1400 bytes IPv6 Ping PING6 server 192 168 10 1 sendto sendto sendto sendto sendto Sent 5 packets received 0 OK 0 bad 5 11 Synchronization PTP External Clock Mode PTP External Clock Mode is a protocol for synchronizing clocks throughout a computer network On a local area network it achieves clock accuracy in the sub microsecond range making ...

Page 149: ...s you to configure the external VCXO rate adjustment The following values are possible True enable external VCXO rate adjustment False disable external VCXO rate adjustment Clock Frequency The box allows you to set clock frequency The range of values is 1 25000000 1 25MHz PTP Clock Configurations Label Description Delete Check this box and click Save to delete the clock instance Clock Instance Ind...

Page 150: ... PTP over IPv4 unicast Note IPv4 unicast protocol only works in Master Only and Slave Only clocks For more information please refer to Device Type In a unicast Slave Only clock you also need to configure which master clocks to request Announce and Sync messages from For more information please refer to Unicast Slave Configuration VLAN Tag Enable Enables VLAN tagging for PTP frames Note Packets are...

Page 151: ... port classes are available including 4 7 15 4 and 30 Watts In this mode the maximum power field will gray out LLDP MED this mode is similar to the Class mode expect that each port determines the amount power it wants to reserve by exchanging PoE information using the LLDP protocol If no LLDP information is available for the port the port will reserve power using the Class mode In this mode the ma...

Page 152: ...ings will be shown If the primary power source fails the backup power source will take over To determine the amount of power allowed for the power device you must configure the amount of power the primary and backup power sources can deliver Valid values are in the range 0 to 2000 watts Port The logical port number for this row Ports that are not PoE capable are grayed out and thus unable to be co...

Page 153: ...wer 30 0 W Power Requested Shows the amount of power requested by the power device Power Allocated Shows the amount of power the switch has allocated for the power device Power Used Shows how much power the power device currently is using Current Used Shows how much current the PD currently is using Priority Shows the port s priority configured by the user Port Status Shows the port s status The s...

Page 154: ... 12 3 PoE Schedule You can set the port to activate or deactivate PoE function at a scheduled time in this page Label Description Configure port Select a port for the action Schedule mode Select an action for the port from the drop down list The actions include enabled or disabled Select all Check to apply the action to all time Hour Check to apply the action to a specific hour Sunday Saturday Che...

Page 155: ...etry Time Input a value to specify the number of times for pinging Failure Log Note down the result of the Ping check Failure Action Specify the actions to take when ping fails Reboot Time Input a value to specify the time interval between ping failure and rebooting 5 13 Troubleshooting 5 13 1 Factory Defaults This function is to force the switch back to the original factory settings To reset the ...

Page 156: ... to factory defaults No Click to return to the Port State page without resetting 5 13 2 System Reboot You can reset the stack switch on this page After reset the system will boot normally as if you have powered on the devices Label Description Yes Click to reboot device No Click to return to the Port State page without rebooting ...

Page 157: ...ole or telnet to manage the switch by CLI CLI Management by RS 232 Serial Console 115200 8 none 1 Before configuring RS 232 serial console connect the RS 232 port of the switch to your PC Com port using a M12 to DB9 F cable Follow the steps below to access the console via RS 232 serial cable Step 1 On Windows desktop click on Start Programs Accessories Communications Hyper Terminal ...

Page 158: ...TRGPS 9084GT M12X BP2 MV User Manual ORing Industrial Networking Corp 157 Step 2 Input a name for the new connection Step 3 Select a COM port in the drop down list ...

Page 159: ...4 A pop up window that indicates COM port properties appears including bits per second data bits parity stop bits and flow control Step 5 The console login screen will appear Use the keyboard to enter the Username and Password same as the password for Web browsers then press Enter ...

Page 160: ... Mask 255 255 255 0 Default Gateway 192 168 10 254 User Name admin Password admin Follow the steps below to access console via Telnet Step 1 Telnet to the IP address of the switch from the Run window by inputingcommands or from the MS DOS prompt as below Step 2 The Login screen will appear Use the keyboard to enter the Username and Password same as the password for Web browser and then press Enter...

Page 161: ...TRGPS 9084GT M12X BP2 MV User Manual ORing Industrial Networking Corp 160 Commander Groups ...

Page 162: ...ble disable Setup ip_addr ip_mask ip_router vid Ping ip_addr_string ping_length SNTP ip_addr_string Port port Configuration port_list up down Mode port_list auto 10hdx 10fdx 100hdx 100fdx 1000fdx sfp_auto_ams Flow Control port_list enable disable State port_list enable disable MaxFrame port_list max_frame Power port_list enable disable actiphy dynamic Excessive port_list discard restart Statistics...

Page 163: ...ag_all PortType port_list unaware c port s port s custom port EtypeCustomSport etype Add vid name ports_list Forbidden Add vid name port_list Delete vid name Forbidden Delete vid name Forbidden Lookup vid name name Lookup vid name name combined static nas all Name Add name vid Name Delete name Name Lookup name Status port_list combined static nas mstp all conflicts Private VLAN PVLAN Configuration...

Page 164: ...local radius enable disable Security Switch SSH Security switch ssh Configuration Mode enable disable Security Switch HTTPS Security switch ssh Configuration Mode enable disable Security Switch RMON Security switch rmon Statistics Add stats_id data_source Statistics Delete stats_id Statistics Lookup stats_id History Add history_id data_source interval buckets History Delete history_id History Look...

Page 165: ...authorized macbased Reauthentication enable disable ReauthPeriod reauth_period EapolTimeout eapol_timeout Agetime age_time Holdtime hold_time Authenticate port_list now Statistics port_list clear eapol radius Security Network ACL Security Network ACL Configuration port_list Action port_list permit deny rate_limiter port_redirect mirror logging shutdown Policy port_list policy Rate rate_limiter_lis...

Page 166: ...sable Security Network DHCP Security Network DHCP Configuration Mode enable disable Server ip_addr Information Mode enable disable Information Policy replace keep drop Statistics clear Security Network AAA Security Network AAA Configuration Timeout timeout Deadtime dead_time RADIUS server_index enable disable ip_addr_string secret server_port ACCT_RADIUS server_index enable disable ip_addr_string ...

Page 167: ...isable Port AutoEdge port_list enable disable Port P2P port_list enable disable auto Port RestrictedRole port_list enable disable Port RestrictedTcn port_list enable disable Port bpduGuard port_list enable disable Port Statistics port_list Port Mcheck port_list Msti Port Configuration msti port_list Msti Port Cost msti port_list path_cost Msti Port Priority msti port_list priority Aggr Aggr Config...

Page 168: ...l_con al_res lldp_res lldp_con Maximum_Power port_list port_power Status Primary_Supply supply_power QoS QoS DSCP Map dscp_list class dpl DSCP Translation dscp_list trans_dscp DSCP Trust dscp_list enable disable DSCP Classification Mode dscp_list enable disable DSCP Classification Map class_list dpl_list dscp DSCP EgressRemap dscp_list dpl_list dscp Storm Unicast enable disable packet_rate Storm M...

Page 169: ...e disable rx tx Dot1x Dot1x Configuration port_list Mode enable disable State port_list macbased auto authorized unauthorized Authenticate port_list now Reauthentication enable disable Period reauth_period Timeout eapol_timeout Statistics port_list clear eapol radius Clients port_list all client_cnt Agetime age_time Holdtime hold_time IGMP IGMP Configuration port_list Mode enable disable State vid...

Page 170: ...e smac dmac arp sip dip smac arp_opcode arp_flags ip sip dip protocol ip_flags icmp sip dip icmp_type icmp_code ip_flags udp sip dip sport dport ip_flags tcp sip dip sport dport ip_flags tcp_flags permit deny rate_limiter port_copy logging shutdown Delete ace_id Lookup ace_id Clear Mirror Mirror Configuration port_list Port port disable Mode port_list enable disable rx tx Config Config Save ip_ser...

Page 171: ...ssword User Lookup index Group Add security_model security_name group_name Group Delete index Group Lookup index View Add view_name included excluded oid_subtree View Delete index View Lookup index Access Add group_name security_model security_level read_view_name write_view_name Access Delete index Access Lookup index Firmware Firmware Load ip_addr_string file_name PTP PTP Configuration clockinst...

Page 172: ...kinst UniConfig clockinst index duration ip_addr ForeignMasters clockinst port_list EgressLatency show clear MasterTableUnicast clockinst ExtClockMode one_pps_mode ext_enable clockfreq vcxo_enable OnePpsAction one_pps_clear DebugMode clockinst debug_mode Wireless mode clockinst port_list enable disable Wireless pre notification clockinst port_list Wireless delay clockinst port_list base_delay incr...

Page 173: ... PowerFailure pwr1 pwr2 pwr3 enable disable Event Event Configuration Syslog SystemStart enable disable Syslog PowerStatus enable disable Syslog SnmpAuthenticationFailure enable disable Syslog RingTopologyChange enable disable Syslog Port port_list disable linkup linkdown both SMTP SystemStart enable disable SMTP PowerStatus enable disable SMTP SnmpAuthenticationFailure enable disable SMTP RingTop...

Page 174: ...ble disable 1stUplinkPort port 2ndUplinkPort port EdgePort 1st 2nd none RCS RCS Mode enable disable Add ip_addr port_list web_on web_off telnet_on telnet_off snmp_on snmp_off Del index Configuration FastReocvery FastRecovery Mode enable disable Port port_list fr_priority SFP SFP syslog enable disable temp temperature Info DeviceBinding Devicebinding Mode enable disable Port Mode port_list disable ...

Page 175: ...ve Action port_list do_nothing link_change shutdown only_log reboot_device Port Alive Status port_list Port Stream Mode port_list enable disable Port Stream Action port_list do_nothing only_log Port Stream Status port_list Port Addr port_list ip_addr mac_addr Port Alias port_list ip_addr Port DeviceType port_list unknown ip_cam ip_phone ap pc plc nvr Port Location port_list device_location Port De...

Page 176: ...TRGPS 9084GT M12X BP2 MV User Manual ORing Industrial Networking Corp 175 Parameter MRP_LNKdownT value Parameter MRP_LNKupT value Parameter MRP_LNKNRmax value Modbus Modbus Status Mode enable disable ...

Page 177: ...th 24 Gbps Max Number of Available VLANs 4095 VLAN ID range VID 1 to 4094 IGMP multicast groups 128 for each VLAN Port rate limiting User Define Security Features Device Binding security feature Enable disable ports MAC based port security Port based network access control 802 1x MAC based authentication 802 1x VLAN 802 1Q to segregate and secure network traffic Radius centralized password managem...

Page 178: ...arry capacity of 3A at 30VDC on 5 pin M12 female A coding connector Power power input 72 110 50 4 137 5 VDC on 4 pin M12 male S coding connector PoE Output Power 60Watts Power consumption Typ 20Watts not include PoE output Overload current protection Present Reverse Polarity Protection Present Physical Characteristic Enclosure IP 30 Weight g 3 185 g Dimension W x D x H 438 W x 250 D x 44 H mm 17 2...

Search results

Summary of Contents for TRGPS-9084GT-M12X-BP2-MV

Reviews:

Brands by name

Popular brands

ORiNG TRGPS-9084GT-M12X-BP2-MV, User Manual

Search results

Summary of Contents for TRGPS-9084GT-M12X-BP2-MV

Reviews:

Brands by name

Popular brands