Panasonic GA-ML Series Manual Download Page 344

Page: 344 / 496

342

9 Security

9.7.1.3 IP Source Guard 9.7.1.3.1 IP Source Guard Port Settings

9.7.1.3

IP Source Guard

9.7.1.3.1

IP Source Guard Port Settings

Use the following window to implement the settings on an IP source

guard of the port specified and display its settings.

Choose

Security > SAVI > IPv4 > IP Source Guard > IP Source Guard

Port Settings

to display the following window.

Figure 9-52 IP Source Guard Port Settings

You can configure the following parameters.

Click

Apply

to add a new entry.

Parameter

Overview

From Port to Port:
from the Beggining
to the End

Choose the port you use.

State

This parameter enables or disables the state of the IP
source guard for the port specified.

Verification

Choose a verification method of using. The options
available are as follows.

•

- checks the IP address of the received packets.

•

IP-MAC

- checks the IP address and MAC address of

the received packets

Summary of Contents for GA-ML Series

Page 1: ...r PN260493N PN260493H PN260893 PN260893H PN260894 PN261693 PN262492 PN262493 WEB Reference Thank you for purchasing our product This manual provides important information about safe and proper operations of this Switching Hub ...

Page 2: ...PN260493N 3 0 0 00 and above GA MLi4TPoE PN260493H 3 0 0 00 and above GA ML8TPoE PN260893 3 0 0 00 and above GA MLi8TPoE PN260893H 3 0 0 00 and above GA ML8THPoE PN260894 3 0 0 00 and above GA ML16TPoE PN261693 3 0 0 00 and above GA ML24TCPoE PN262492 3 0 0 00 and above GA ML24TPoE PN262493 3 0 0 00 and above ...

Page 3: ...Settings 28 3 4 4 System Log 30 3 4 5 System Attack Log 31 3 4 6 System Authentication Log 32 3 5 Time and SNTP Simple Network Time Protocol 33 3 5 1 Clock Settings 33 3 5 2 Time Zone Settings 34 3 5 3 SNTP Settings 36 3 6 Time Range 37 3 7 PoE Configuration 39 3 7 1 PoE Global Configuration 39 3 7 2 PoE Port Configuration 41 3 7 3 PoE Schedule Configuration 42 3 7 4 PoE Schedule Port List Configu...

Page 4: ...able 86 5 1 4 MAC Notification 87 5 2 VLAN Virtual Local Area Network 89 5 2 1 802 1Q VLAN 89 5 2 2 802 1v Protocol VLAN 91 5 2 2 1 Protocol VLAN Profile 91 5 2 2 2 Protocol VLAN Profile Interface 93 5 2 3 GVRP 94 5 2 3 1 GVRP Global 94 5 2 3 2 GVRP Port 95 5 2 3 3 GVRP Advertise VLAN 96 5 2 3 4 GVRP Forbidden VLAN 97 5 2 3 5 GVRP Statistics Table 98 5 2 4 Asymmetric VLAN 99 5 2 5 MAC VLAN 100 5 2...

Page 5: ...ayer Discovery Protocol 161 5 8 1 LLDP Global Settings 161 5 8 2 LLDP Port Settings 163 5 8 3 LLDP Management Address List 165 5 8 4 LLDP Basic TLVs Settings 166 5 8 5 LLDP Dot1 TLV Settings 167 5 8 6 LLDP Dot3 TLV Settings 169 5 8 7 LLDP MED Port Settings 170 5 8 8 LLDP Statistics Information 171 5 8 9 LLDP Local Port Information 172 5 8 10 LLDP Neighbor Port Information 174 5 9 RRP Ring Redundan...

Page 6: ...LAN Access Map 274 8 5 ACL VLAN Filter 277 9 Security 278 9 1 Port Security 278 9 1 1 Port Security Global Settings 278 9 1 2 Port Security Port Settings 280 9 1 3 Port Security Address Entries 282 9 2 802 1X 283 9 2 1 802 1X Global Settings 283 9 2 2 802 1X Forced Authorized MAC Settings 285 9 2 3 802 1X Unauthorized MAC Settings 286 9 2 4 802 1X Ports Settings 287 9 2 5 EAP Port Config 292 9 2 6...

Page 7: ...CP Snooping Database 331 9 7 1 1 5 DHCP Snooping Binding Entry 333 9 7 1 2 Dynamic ARP Inspection 334 9 7 1 2 1 ARP Access List 334 9 7 1 2 2 ARP Inspection Settings 336 9 7 1 2 3 ARP Inspection Port Settings 339 9 7 1 2 4 ARP Inspection Statistics Information 340 9 7 1 2 5 ARP Inspection Log 341 9 7 1 3 IP Source Guard 342 9 7 1 3 1 IP Source Guard Port Settings 342 9 7 1 3 2 IP Source Guard Bind...

Page 8: ...4 6 CFM Linktrace 388 11 Monitoring 389 11 1 Utilization 389 11 1 1 Port Utilization 389 11 2 Statistics 390 11 2 1 Port 390 11 2 2 Interface Counters 392 11 2 3 Counters 394 11 3 Mirror Settings 396 11 4 Device 399 12 ECO Mode 400 12 1 Power Saving 400 12 2 EEE Energy Efficient Ethernet 401 12 3 LED Base Mode 402 13 sFlow 403 13 1 sFlow 403 13 1 1 sFlow Settings 403 14 Tool Bar 405 14 1 Save 405 ...

Page 9: ... 431 14 3 Language 432 14 4 Log Out 433 15 Appendix System Log Entries 434 15 1 802 1X 434 15 2 AAA 435 15 3 ARP 438 15 4 Authentication 2 Steps 439 15 5 BPDU Guard 441 15 6 Command 442 15 7 Configuration Firmware 443 15 8 DAD 446 15 9 DDM 447 15 10 Debug Error 448 15 11 DHCPv6 Client 449 15 12 Dynamic ARP 451 15 13 Interface 452 15 14 PoE 453 15 15 PoE Scheduler 454 15 16 PoE Auto Reboot 455 15 1...

Page 10: ...ops 480 16 7 MAC Based Access Control 481 16 8 MAC Notification 482 16 9 MSTP 483 16 10 Port Security 484 16 11 Port 485 16 12 RMON 486 16 13 SNMP Authentication 487 16 14 System 488 16 15 Temperature 489 16 16 Traffic Control 490 Troubleshooting 491 LED 491 If the Communication Speed is Slow 492 If Your Device does not Work 492 Warranty and After service 493 ...

Page 11: ... are equipped with an identical set of software features available in the Web UI and will be referred to as the switch in this document Refer to the instruction found on our website Panasonic Life Solutions Networks or the manual of our products regarding the name of each part of them the installation method and the separately sold option 1 1 Related Documentation Not only Web UI but CLI Command L...

Page 12: ...ault an IPv4 address of the switch is set to 0 0 0 0 Use CLI from a console port to configure the IPv4 address of the switch first Refer to CLI reference manual for details Next launch the Web browser Enter the IPv4 address of the switch on the address bar of Uniform Resource Locator URL and then press Enter Figure 2 1 Enter IPv4 Address By default you can enter manager in the spaces provided for ...

Page 13: ...11 2 Web User Interface Web UI 2 1 Connecting to the Web UI Figure 2 3 Main Window of Web UI ...

Page 14: ...vailable in the Web UI of the switch are categorized into folders in frame A above Click on a folder in the frame A e g system and then click on a feature link e g system information settings to access the configuration window in the frame B Next implement the settings and management in the frame B The following chapters describe all the software features in the order they are displayed in the fra...

Page 15: ...Use the following window to display general switch information and utilization or usage As you log into the Web UI of the switch the window is displayed from the beginning Click the GA MLxxT link in Frame A to display the following window Figure 3 1 Device Information ...

Page 16: ...ings In the section of System Information Settings you can configure the following parameters Click Apply to reflect the change made Parameter Overview System Name Enter the system name of a switch Use the name to identify the switch in the network System Location Enter and describe an overview of the switch location System Contact Enter the name of the PIC for a switch In general this means the n...

Page 17: ...following window Figure 3 3 Port Settings In the Port Settings section you can configure the following parameters Parameter Overview From port To Port Choose the port you use Selecting a Media Choose a media type for ports The options available are Automatic RJ45 and SFP SFP stands for Small Form Factor Pluggable Media Type Choose a media type for ports The options available are RJ45 and SFP State...

Page 18: ...duplex mode you use The options available are Automatic and Full Speed Choose the option of a port speed This option allows you to implement the forced settings manually for the connection speed on the port which is selected for connecting with the speed specified If Master Configurations are implemented you can advertise the functions which are related to types of duplex communication the speed a...

Page 19: ...for 100Mbps copper cable connection only 1000M This value sets the port speed to 1Gbps forcefully This option is available for 1Gbps fiber connection only 1000M Master This value sets the port speed to 1Gbps forcefully and functions as the master and facilitates the timing of an operation for sending and receiving This option is available for 1Gbps copper cable connection only 1000M Slave This val...

Page 20: ... Port Status 3 3 2 Port Status Use the following window to display the physical port status and settings of the switch Choose System Port Configuration Port Status to display the following window Figure 3 4 Port Status ...

Page 21: ... the following window to display the information about the transceiver plugged into a physical port of the switch GBIC stands for Gigabit Interface Converter Choose System Port Settings Port GBIC to display the following window Figure 3 5 Port GBIC ...

Page 22: ... 3 3 4 Port Auto Negotiation Use the following window to display an Auto Negotiation table of a port and its information Choose System Port Configuration Port Auto Negotiation to display the following window Figure 3 6 Port Auto Negotiation ...

Page 23: ...sable Recovery you can configure the following parameters Click Apply to reflect the change Parameter Overview ErrDisable Cause Choose the cause of the error disabled condition The options available are All Port Security Storm Control BPDU Attack Protection Dynamic ARP Inspection DHCP Snooping and L2PT Guard Condition This parameter enables or disables the feature of the error disable recovery Int...

Page 24: ... 518 bytes Choose System Port Configuration Jumbo Frame to display the following window Figure 3 8 Jumbo Frame In the Jumbo Frame section you can configure the following parameters Click Apply to reflect the change Parameter Overview From Port To Port Choose the port you use Maximum Receive Frame Size Enter the maximum value of a frame size for receiving The range is from 64 to 9 216 bytes By defa...

Page 25: ...ollowing window Figure 3 9 Port Grouping Configuration In the section of Port Grouping Configuration you can configure the following parameters Click Apply to add a new entry based on the information specified Parameter Overview From Port To Port Choose the range of the port number Port Group ID 1 256 Configure a port group ID Name of a Port Group Configure the name of a port group State Enable or...

Page 26: ...e section of Buffer log Settings you can configure the following parameters Parameter Overview Log State This parameter enables or disables the status of a global system log Parameter Overview Buffer Log State This parameter enables or disables the state of a global buffer log The options available are enable disable and default If you choose Default the state of a global buffer log complies with ...

Page 27: ...elayed writing becomes disabled Parameter Overview Parameter Overview Console log State This parameter enables or disables the state of a global console log Severity Choose the severity of the information type which is logged The values to choose 0 Emergencies 1 Alerts 2 Critical 3 Errors 4 Warnings 5 Notifications 6 Information and 7 Debugging Identification Name Enter an identification name to u...

Page 28: ...the change made Identification Name Enter an identification name to use it The number of characters can be used up to 15 Specify the name of a discriminator profile Based on the filtering standard stipulated on this profile SMTP log messages will be filtered Parameter Overview ...

Page 29: ...ed on the information specified Click Delete to delete the entry Parameter Overview Discriminator Name Enter the name of a discriminator profile The number of characters can be up to 15 Action Choose the facility operation option and a facility type to associate them with an operation selected The options available as an operation are dispose or discard and include Severity Choose the operation op...

Page 30: ...re the following parameters Parameter Overview Host IPv4 Address Enter an IPv4 address of a system log server Host IPv6 Address Enter an IPv6 address of a system log server UDP Port Enter the port number of UDP User Datagram Protocol of a system log server Set the number or value to 514 or specify the value within the range from 1 024 to 65 535 By default the value is set to 514 Severity Choose th...

Page 31: ...rated by the SYSLOG internally 6 lpr Line printer sub system 7 news Network news sub system 8 uucp UUCP sub system 9 clock1 Clock daemon 10 auth2 Security Authentication messages 11 ftp FTP daemon 12 ntp NTP sub system 13 logaudit Log audit 14 logalert Log alert 15 clock2 Clock daemon 16 local0 Local use 0 local0 17 local1 Local use 1 local1 18 local2 Local use 2 local2 19 local3 Local use 3 local...

Page 32: ...and clear system logs Choose System System Log System Log Settings to display the following window Figure 3 13 System Log Click the Clear Log button to clear the log entry from the table above If two or more pages exist enter their page number Then click Go to move to a specific page ...

Page 33: ...Log Use the following window to display and clear the system attack log Choose System System Log System Attack Log to display the following window Figure 3 14 System Attack Log Click the Clear Attack Log button to clear the entry of attack logs from a table ...

Page 34: ...ters Click Apply to reflect the change Click Find to search the entry in a table based on the search condition specified Click Show All to search all the entries available for displaying them Click the Clear Log button to clear the log entry from a table Parameter Overview Authentication Log State This parameter enables or disables an authentication log Write Delay for Authentication Logs Enter th...

Page 35: ... time dependent features of the switch and to display its settings Choose System Time and SNTP Clock Settings to display the following window Figure 3 16 Clock Settings In the section of Clock Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview Time Enter the current time by using HH MM and SS e g 19 20 20 Date DD MM YYYY Enter the current day D...

Page 36: ...he first section you can configure the following parameters Parameter Overview Summer Time State Choose the summer time settings The options available are as follows Disable Disables the summer time settings Recurring Setting Configure so as the summer time starts and ends on the date and month specified Date Settings Configure so as the summer time starts and ends on the date and month specified ...

Page 37: ...nds To Month Select the month when summer time ends To Time Select the time when summer time ends Offset Enter the time to add on the summer time period The default value is 60 and the range of this offset is 30 60 90 and 120 Parameter Overview From Date of Month Select the date when summer time starts From Month Select the month when summer time starts From Year Enter the year when summer time st...

Page 38: ...n the section of SNTP Global Settings you can configure the following parameters Click Apply to reflect the change In the section of SNTP Server Settings you can configure the following parameters Click Add to add the new entry based on the information specified Click Delete to delete an entry Parameter Overview SNTP State This parameter enables or disables SNTP globally Poll Interval Enter the sy...

Page 39: ...c button to delete the periodic entry Click Delete to delete the entries Parameters Overview Range Name Enter the name of a time range profile The number of characters for the name can be up to 32 From Week To Week Select the starting and ending days of the week that will be used for this time profile If you set the Daily option to on the time profile is used for all days When the option of a fina...

Page 40: ...38 3 System 3 6 Time Range If two or more pages exist enter the page number Then click Go to move to the specific page ...

Page 41: ...hreshold for Sending Traps This parameter displays the threshold of the power supply for sending traps The factory default settings is 50 Power Management Method The method of power supply is displayed when the power supply exceeds the power budget The factory default settings is set to denying or rejecting the next port connection Denying the Next Port Connection This option allows you to stop th...

Page 42: ...40 3 System 3 7 PoE Configuration 3 7 1 PoE Global Configuration Click Apply to reflect the change ...

Page 43: ...Click Apply to reflect a change Parameter Overview From Port To Port Choose a port to configure Administrator Mode This parameter enables or disables the power supply for a port The options available are Up and Down The factory default settings is set to Up Priority This parameter configures the priority for the power supply The options available are Crit High and Low The factory default settings ...

Page 44: ... enables or disables the global settings of the PoE scheduler Index This parameter configures the index number of the PoE scheduler State This parameter enables or disables the state of a function of the PoE schedule per index Name This parameter configures the PoE schedule name Classifier This parameter configures the class of the PoE schedule The options available are Daily Weekly Monthly and Da...

Page 45: ...conducted PoE Action This parameter displays an action of the PoE schedule The options available are OFF ON and OFF ON Order By This parameter configures the sequence of displaying the PoE schedule The options available are Index and Next Execution Time Filter by Interface This parameter filters with the interface where displaying the PoE scheduler is selected Parameter Overview ...

Page 46: ...iguration PoE Schedule Port List Configuration to display the following window Figure 3 23 PoE Schedule Port List Configuration In the section of the PoE Schedule Port list Configuration you can configure the following parameters Click Apply to reflect a change Parameter Overview Index This parameter configures the index number of the port list regarding the PoE scheduler Port List This parameter ...

Page 47: ...24 PoE Date List Configuration In the section of PoE Date List Configuration you can configure the following parameters Click Apply to reflect a change Parameter Overview Index This parameter configures the index number of the date list regarding the PoE scheduler Name This parameter configures the name of the date list regarding the PoE scheduler Year This parameter configures the year when the d...

Page 48: ...s used for PoE auto reboot factory default settings 60 Ping Time out 1 30 This parameter configures the time out with seconds as a unit for monitoring the Ping which is used for PoE auto reboot factory default settings 5 Number of Ping Error Retries 1 10 This parameter configures the number of retrials during errors of monitoring the Ping which is used for PoE auto reboot factory default settings ...

Page 49: ...a emails which are done or sent by an SMTP of PoE auto reboot From Port To Port Choose the range of the port number Ping IP Address This parameter configures an IP address of the Ping which is used for the PoE auto reboot LLDP Monitor This parameter enables or disables the settings for monitoring LLDP of PoE auto reboot Condition of Determining Traffics This parameter configures the determination ...

Page 50: ... determines an abnormality of the PoE auto reboot PoE OFF ON Repeat This parameter enables or disables the repeat execution of PoE power supply OFF ON when your switch determines an abnormality of PoE auto reboot PoE OFF ON Repeat Interval This parameter configures the PoE OFF ON repeat interval when your switch determines an abnormality of the PoE auto reboot Parameter Overview ...

Page 51: ... encryption Choose Management User Accounts Encryption to view the following window Figure 4 1 User Accounts Encryption In the section of User Accounts Encryption you can configure the following parameter Click Apply to reflect the change Parameter Overview User Accounts Encryption State This parameter enables or disables the user account encryption ...

Page 52: ...gs Parameter Overview Level Choose the privilege level of user accounts The range is from 1 to 15 Password Type Choose the password type for users The options available are as follows Plain Text Choosing this makes a password to become a plain text form This is the default option Encrypted Choose this to encrypt a password based on SHA 1 Password Enters a password for user accounts The number of c...

Page 53: ...ord when accessing the application specified Log in Local You need to enter a user name and a password to access the application specified Parameter Overview Application Choose an application to configure The options available are Console Telnet and Secure Shell SSH Password Type Choose a password encryption type to use The options available are Plain Text and Encrypted Password Enter a password o...

Page 54: ...on of an IP setup interface Choose Management IP Setup IP Setup Protocol Settings to display the following window Figure 4 3 IP Setup Protocol Settings In the section of IP Setup Protocol State you can configure the following parameter Click Apply to reflect the change Parameter Overview IP Setup Interface This parameter enables or disables an IP setup interface ...

Page 55: ...figure the following parameters Parameter Overview Group Name Enter the name of an SNMP group The number of characters can be up to 32 for the name Do not use any spaces for that Lead View Name Enter the lead view name which allows group users to access User base Security Model Choose a security model below The options available are as follows SNMPv1 This allows you to use the SNMPv1 security mode...

Page 56: ... is not performed AuthNoPriv An authentication is necessary but encrypting packets which are transmitted between a switch and a remote SNMP manager is not implemented AuthPriv An authentication is necessary and encrypting packets which are transmitted between a switch and a remote SNMP manager will be implemented Notification View Name Enter the notification view name which allows group users to a...

Page 57: ...MP version 3 Choose Management SNMP SNMP Engine ID Local Settings to display the following window Figure 4 5 SNMP Engine ID Local Settings In the section of SNMP Engine ID Local Settings you can configure the following parameter Click the Default button to use the default engine ID Click Apply to reflect the change Parameter Overview Engine ID Enter the character strings of SNMP engine ID The numb...

Page 58: ...mber of characters can be up to 32 for the group name Do not use any spaces SNMP Version Choose an SNMP version The values to choose are v1 v2c and v3 SNMP V3 Encryption After choosing v3 from SNMP version choose the encryption type for SNMPv3 The options available are None Password and Key Password Authentication Protocol After choosing v3 from SNMP version and Password from SNMP V3 Encryption ch...

Page 59: ...ersion choose a Key Authentication Protocol The options available are as follows MD5 Use an authentication level of HMAC MD5 96 You need to enter a password or a key in this field SHA Use an authentication protocol of HMAC SHA You need to enter a password or a key in this field Key Enter the key of an authentication protocol The number of characters for the MD5 key must be 32 The number of charact...

Page 60: ...58 4 Management 4 4 3 SNMP User Table Settings Click Add to add new entries based on the information specified Click Delete to delete the entries ...

Page 61: ...ws SNMPv1 this option allows group users to use the SNMPv1 security model SNMPv2c this option allows the group users to use the SNMPv2c security model SNMPv3 this option allows the group users to use the SNMPv3 security model Security Level After choosing SNMPv3 from the user based security model choose the security level The options available are as follows NoAuthNoPriv an authentication is not i...

Page 62: ...te to delete the entry UDP Port Enter the UDP port number The default port number is 162 and the range is from 1 to 65 535 Some port numbers may conflict with other protocols Community Character String SNMPv3 User Name Enter the community character strings to be transmitted with the notification packets Parameter Overview ...

Page 63: ...e Management RMON RMON Global Settings to display the following window Figure 4 8 RMON Global Settings In the section of RMON Global Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview RMON Rising Alarm Trap This parameter enables or disables a function of an RMON rising alarm trap RMON Falling Alarm Trap This parameter enables or disables a fun...

Page 64: ...s Settings you can configure the following parameters Click Add to add a new entry based on the information specified Click Delete to delete the entry Click Show Detail to display details on the entry If two or more pages exist enter the page numbers Then click Go to move to a specific page Click Show Detail to display the following window Parameter Overview Port Choose the port you use Index Ente...

Page 65: ...63 4 Management 4 5 2 RMON Statistics Settings Figure 4 10 RMON Statistics Settings Show Detail Click Back to return to the previous window ...

Page 66: ...the entry Click Show Detail to display details on the entry If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Port Choose the port you use Index Enter the index number of entries for a history group table The range is from 1 to 65 535 Number of Buckets Enter the number of packets which are specified for a RMON collecting history group of ...

Page 67: ...65 4 Management 4 5 3 RMON History Settings Click Show Detail to display the following window Figure 4 12 RMON History Table Show Detail Click Back to return to the previous window ...

Page 68: ...for sampling Type Choose a monitoring type The options available are Absolute and Delta Rising Threshold Enter the rising threshold within the range from 0 to 2 147 483 647 Falling Threshold Enter the falling threshold within the range from 0 to 2 147 483 647 Rising Event Number Enter the index of an event entry to use for notifying the events which exceed the rising threshold The valid range is f...

Page 69: ... associated with the entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Index Enter the index value of an alarm entry The range is from 1 to 65 535 Description Enter the overview and description of the RMON event entries The number of characters in character strings can be up to 127 Type Choose the type of the RMON event en...

Page 70: ...68 4 Management 4 5 5 RMON Event Settings Click View log to display the following window Figure 4 15 RMON Event Settings View Log Click Back to return to the previous window ...

Page 71: ...ings you can configure the following parameters Click Apply to reflect the change Parameter Overview Telnet State This parameter enables or disables a function of a Telnet server Port Enter the TCP port number to use for Telnet management of a device TCP stands for Transmission Control Protocol The TCP port which is typically used for Telnet protocol is 23 Parameter Overview Web State This paramet...

Page 72: ...minutes Console Session Time out Enter the time for console session time out with the minute unit If the default check box is set to on the value returns to the default value The range of values is from 0 to 1 439 minutes If you enter 0 the time out becomes disabled The default value is set to 3 minutes Telnet Session Time out Enter the time for Telnet session time out with the minute unit If the ...

Page 73: ...ration Choose Management DHCP Auto Configuration to display the following window Figure 4 18 DHCP Auto Configuration In the section of DHCP Auto Configuration you can configure the following parameter Click Apply to reflect the change Parameter Overview Auto Configuration State This parameter enables or disables a function of the DHCP auto configuration ...

Page 74: ...ply to reflect the change Parameter Overview Static State for Searching IP DNS This parameter enables or disables the static state for searching IP DNS Cache Condition for Searching IP DNS This parameter enables or disables the cache condition for searching IP DNS Searching IP Domains This parameter enables or disables the condition for searching IP domains IP name Server Timeout Enter the maximum...

Page 75: ...ettings to display the following window Figure 4 20 DNS Name Server Settings In the section of the DNS Name Server Settings you can configure the following parameters Click Apply to add new entries based on the information specified Click Delete to delete the entry Parameter Overview IPv4 Name Server Choose and enter an IPv4 address of a DNS server IPv6 Name Server Choose and enter an IPv6 address...

Page 76: ...t Settings you can configure the following parameters Click Apply to add new entries based on the information specified Click Clear All to clear all the dynamic entries from a table Click Delete to delete the entry If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Host Name Enter the name of a DNS host IP Address Choose and enter an IPv4 ...

Page 77: ... path entered Click Copy to copy a specific file on the File System Click c of a drive link to move to C drive Click c of a drive link to display the following window Figure 4 23 File System c Click Back to return to the previous window Click Create a Directory to create a new directory on the file system Click Boot Up to use the files in the boot up sequence Only a configuration file and a firmwa...

Page 78: ... Source Choose the file type of a source The options available are startup config and Source File Only when you choose the Source File option you can the source file path and filename be entered in the space provided Destination Choose the file type of a destination of a copy The options available are startup config running config and Destination File Only when you choose the Destination File opti...

Page 79: ...s of an SMTP server SMTP IPv6 Server Address Choose IPv6 from SMTP IP and then enter an IPv6 address of an SMTP server SMTP IPv4 Server Port Choose IPv4 from SMTP IP and then enter the port number value of an SMTP server The range is from 1 to 65 535 By default the value is set to 25 SMTP IPv6 Server Port Choose IPv6 from SMTP IP and then enter the port number value of an SMTP server The range is ...

Page 80: ...ange Click Delete All to delete every receiver email address from all the entries Click Delete to delete a receiver email address from the entry specified Parameter Overview Adding an Email Receiver Enter the email address of a receiver The number of characters for this character strings can be up to 254 Parameter Overview Subject Enter the subject of an email The number of characters for this cha...

Page 81: ...ck Delete All to delete all the entries Click Delete to delete the entry If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview NLB Type Choose the NLB type The options available are Unicast and Multicast VID Choose Multicast from NLB type and then enter the VLAN ID you use The range is from 1 to 4 094 MAC Address Enter the Unicast of entries ...

Page 82: ...he section of Unicast Static FDB you can configure the following parameters Click Apply to add new entries based on the information specified Click Delete All to delete all the entries Click Delete to delete the entry Parameter Overview Port Disposal When choosing Port apply the port where a MAC address entered exists When choosing Disposal drop the MAC address from Unicast Static FDB Port Number ...

Page 83: ...81 5 L2 Features 5 1 FDB Forwarding Database 5 1 1 Static FDB 5 1 1 1 Unicast Static FDB If two or more pages exist enter the page numbers Then click Go to move to a specific page ...

Page 84: ... FDB you can configure the following parameters Click Apply to add new entries based on the information specified Click Delete all to delete all the entries Click Delete to delete the entry If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview From Port To Port Choose the port you use VID Enter the VLAN ID you use The range is from 1 to 4 094...

Page 85: ...ngs you can configure the following parameters Click Apply to reflect the change Click the tab of MAC Address Port Learning Settings to display the following window Figure 5 4 MAC Address Table Settings MAC Address Port Learning Settings Parameter Overview Aging Time Enter the aging time value of a MAC address table The range is from 10 to 1 000 000 seconds If you enter 0 the MAC address aging bec...

Page 86: ...ettings you can configure the following parameters Click Apply to add new entries based on the information specified Parameter Overview From Port To Port Choose the port you use State This parameter enables or disables a function of a learning MAC address of the port specified Parameter Overview VID List Enter the VLAN ID you use You can enter its consecutive VLAN IDs by delimiting with a comma or...

Page 87: ...ing parameter Click Find to search and display the entries in a table based on the search condition specified Click See All to search and display all the entries available If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview VID Enter the VLAN ID you use The range is from 1 to 4 094 ...

Page 88: ...ic by VLAN button to clear all the dynamic MAC addresses associated with the VLAN specified Click the Clear Dynamic by MAC button to clear the dynamic MAC address specified from a table Click Find to search and display the entries in a table based on the search condition specified Click Clear All to clear all the entries from a table Click See All to search and display all the entries available If...

Page 89: ...ress Notification This parameter enables or disables to set the MAC notification to global on the switch Interval Enter the time value needed for the notification interval whose range is from 1 to 2 147 483 647 seconds By default the value is set to 1 second History Size Enter the maximum number value of the entries to display a list for the history log which is used for the notification The range...

Page 90: ...88 5 L2 Features 5 1 4 MAC Notification Figure 5 8 MAC Notification MAC Notification History ...

Page 91: ...d new entries based on the information specified Click Delete to delete entries based on the information specified In the section of Searching VLAN you can configure the following parameter Click Find to search and display the entries in the table based on the search condition specified Parameter Overview VID List Enter a VLAN ID to create or delete it You can enter its consecutive VLAN IDs which ...

Page 92: ...etwork 5 2 1 802 1Q VLAN Click See All to search and display all the entries available Click Edit to edit the entry settings Click Delete to delete the entry If two or more pages exist enter the page numbers Then click Go to move to a specific page ...

Page 93: ...AN Profile to display the following window Figure 5 10 Protocol VLAN Profile In the section of Adding Protocol VLAN Profile you can configure the following parameters Parameter Overview Profile ID Enter the profile ID for 802 1v protocol VLAN The range is from 1 to 16 Frame Type Choose an option of a frame type This function allows you to investigate a type octet in the packet header and searches ...

Page 94: ...e is from 0x0 to 0xFFFF The octet character strings includes one of the following values depending on a frame type Regarding Ethernet 2 it is the hex value or hexadecimal number of 16 bits 2 octets Set IPv4 to 0800 IPv6 to 86DD and ARP to 0806 Regarding IEEE802 3 SNAP it is the hex value of 16 bits 2 octets Regarding IEEE802 3 LLC it is a pair of IEEE 802 2 LSAP Link Service Access Point of 2 octe...

Page 95: ...information specified Click Delete to delete the entry Parameter Overview Port Choose the port number of a switch you configure Profile ID Choose the profile ID of 802 1v protocol VLAN VID Enter the VLAN ID you use The range is from 1 to 4 094 Priority Choose the priority value you use Specify the value within the range from 0 to 7 Specify this parameter to rewrite or transcribe 802 1p default pri...

Page 96: ...c Attribute Registration Protocol Choose L2 Features VLAN GVRP GVRP Global to display the following window Figure 5 12 GVRP Global In the section of GVRP Global you can configure the following parameters Click Apply to reflect the change Parameter Overview Global GVRP State This parameter enables or disables the global GVRP state Creating Dynamic VLAN This parameter enables or disables a function ...

Page 97: ...meter enables or disables the GVRP port state Doing so allows a port to become a VLAN member dynamically By default this option is disabled Join Time Enter the value of a join time The range is from 10 to 10 000 centiseconds By default the value is set to 20 centiseconds Leave Time Enter the value for leave time the range is from 10 to 10 000 centi seconds Enter the value of leave time The range i...

Page 98: ...N you can configure the following parameters Click Apply to reflect the change Parameter Overview From Port To Port Choose the port you use Action Choose the advertise VLAN to use for a port mapping action The options available are All Add Delete and Replace If you choose All all the advertise VLANs are used Advertise VID List Enter a VLAN ID to advertise it You can enter its consecutive VLAN IDs ...

Page 99: ...en VLAN you can configure the following parameters Click Apply to reflect the change Parameter Overview From Port To Port Choose the port you use Action Choose the forbidden VLAN to use for a port mapping action The value to choose are All Add Delete and Replace Click All and then all the forbidden VLANS are used Forbidden VID List Enter a VLAN ID to forbid it You can enter its consecutive VLAN ID...

Page 100: ...tistics Table In the section of GVRP Statistics Table you can configure the following parameter Click Find to search and display the entries in a table based on the search condition specified Click Clear to clear the statistics information from the port specified Click See All to search and display all the entries available Click Clear All to clear all the statistics information from all the ports...

Page 101: ...splay its settings Choose L2 Features VLAN Asymmetric VLAN to display the following window Figure 5 17 Asymmetric VLAN In the section of the Asymmetric VLAN you can configure the following parameter Click Apply to reflect the change Parameter Overview Asymmetric VLAN State This parameter enables or disables a function of the asymmetric VLAN ...

Page 102: ...re 5 18 MAC VLAN In the section of MAC VLAN you can configure the following parameters Click Apply to add new entries based on the information specified Click Delete to delete the entry If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview MAC Address Enter the Unicast MAC address VID Enter the VLAN ID you use The range is from 1 to 4 094 Pri...

Page 103: ...N VLAN Interface to display the following window Figure 5 19 VLAN Interface Click Show Detail to display details on the entry Click Edit to edit the entry settings Click Show Detail to display the following window Figure 5 20 VLAN Interface Show Detail Click Back to return to the previous window Click Edit to display the following window Figure 5 21 VLAN Interface Edit and Access ...

Page 104: ...iew VLAN Mode Choose the option of VLAN mode The options available are Access Hybrid Trunk Promiscuous and Host Acceptable Frames Choose an operating option for acceptable frames The options available are Tagged only Untagged only and Admit All Checking Ingress This parameter enables or disables a function of checking ingress VLAN ID Enter the VLAN ID you use for this configuration The range is fr...

Page 105: ...d Admit All Checking Ingress This parameter enables or disables a function of checking Ingress VLAN Precedence Choose an option for VLAN Precedence The options available are MAC based VLAN and Subnet based VLAN Native VLAN If you set this option to on the native VLAN function becomes enabled VID This parameter becomes available if Native VLAN option is set to on Enter the VLAN ID you use The range...

Page 106: ...nly and Admit All Checking Ingress This parameter becomes available if you choose Trunk from VLAN Mode This action enables or disables a function of checking Ingress Native VLAN If you set this option to on the native VLAN function becomes enabled In addition choose Untagged or Tagged as the frame to support on this VLAN VID This parameter will be available if the Native VLAN option is set to on E...

Page 107: ...gged only and Admit All Checking Ingress This parameter enables or disables a function of checking ingresss Clone If you choose this option you need to enable the clone function From Port To Port Choose the port you use Parameter Overview Parameter Overview VLAN Mode Choose the option of VLAN mode The options available are Access Hybrid Trunk Promiscuous and Host Acceptable Frames Choose an operat...

Page 108: ... 26 Subnet VLAN In the section of the Subnet VLAN you can configure the following parameters Click Apply to add new entries based on the information specified Click Delete to delete the entry If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview IPv4 Network Prefix Prefix Length Choose and enter the value of an IPv4 address of the subnet VLAN...

Page 109: ...and and the range is from 2 to 4 094 Voice VLAN CoS Enter CoS of the voice VLAN The range is from 0 to 7 The voice packets arriving at the voice VLAN corresponding ports are marked as the CoS specified You can distinguish between voice VLAN traffics and data traffics of QoS Quality of Service by including annotations for CoS packets Aging Time Enter the aging time This parameter configures the agi...

Page 110: ...108 5 L2 Features 5 2 8 Voice VLAN 5 2 8 1 Voice VLAN Global Click Apply to reflect the change ...

Page 111: ...ice VLAN Port In the section of Audio VLAN Port you can configure the following parameters Parameter Overview From Port To Port Choose the port you use State This parameter enables or disables a voice VLAN function of the port specified If you enable a voice LAN on the port the voice packets received are transferred by the voice VLAN Packets received are determined or evaluated as voice packets wh...

Page 112: ...e device OUI the port automatically participates in the voice VLAN as the tagged member If the voice device transmits tagged packets the switch changes its priority If the voice device transmits untagged packets they are transferred by PVID Port VLAN ID If a port operates as the auto untagged mode and captures the voice device through the device OUI the port automatically participates in the voice...

Page 113: ...r specified because of the duplication Choose L2 Features VLAN Voice VLAN Voice VLAN OUI to display the following window Figure 5 29 Voice VLAN OUI In the section of Voice VLAN OUI you can configure the following parameters Click Apply to add new entries based on the information specified Click Delete to delete the entry Parameter Overview OUI Address Enter one MAC address for voice VLAN OUI Mask ...

Page 114: ... Device 5 2 8 4 Voice LAN Device Use the following window to display a table of the voice VLAN device and its information Choose L2 Features VLAN Voice VLAN Voice VLAN Device to display the following window Figure 5 30 Voice VLAN Device ...

Page 115: ... 5 Voice VLAN LLDP MED Device Use the following window to display a table of the voice VLAN LLDP MED device and its information Choose L2 Features VLAN Voice VLAN Voice VLAN LLDP MED Device to display the following window Figure 5 31 Voice VLAN LLDP MED Device ...

Page 116: ... Private VLAN you can configure the following parameters Click Apply to reflect the change Parameter Overview VID List Enter a private VLAN ID to use You can enter its consecutive VLAN IDs by delimiting with a comma or enter the range of VLAN IDs by delimiting with a hyphen The range is from 1 to 4 094 State This parameter enables or disables the private VLAN state Type Choose a private VLAN type ...

Page 117: ...th a hyphen The range is from 1 to 4 094 Action Choose an action to execute on the private VLAN The options available are Add Delete and Disable Secondary VID List Enter a secondary private VLAN ID to use it You can enter its consecutive VLAN IDs by delimiting with a comma or enter the range of VLAN IDs by delimiting with a hyphen The range is from 1 to 4 094 Parameter Overview From Port To Port C...

Page 118: ...use The range is from 1 to 4 094 Action Click Add to add a new entry based on the information entered Click Remove to remove an entry based on the information entered Secondary VID List Enter the secondary VLAN ID you use You can enter its consecutive VLAN IDs by delimiting with a comma or enter the range of VLAN IDs by delimiting with a hyphen The range is from 1 to 4 094 If an option of Remove M...

Page 119: ...you can configure the following parameter Click Apply to reflect the change In the section of an STP Mode you can configure the following parameter Click Apply to reflect the change In the section of an STP Priority you can configure the following parameter Parameter Overview STP State This parameter enables or disables the global STP state Parameter Overview STP Mode Choose the STP mode you use T...

Page 120: ...ices of a bridge VLAN Bridge Hello Time This parameter becomes available if you choose RSTP or STP on the STP Mode Enter the value of hello time for a bridge The range is from 1 to 2 seconds By default the value is 2 seconds This is the interval for transmitting BPDU Bridge Protocol Data Unit packets whose root bridge is twice to inform that it is a root bridge on all of other switches This field ...

Page 121: ...the value is equal to 20 hops Use the value to configure the number of hops between devices existing in a domain of a spanning tree before removing BPDU packets which are transmitted by a switch Hop counting decreases one by one every time a switch passes until the value reaches 0 After that the switch deletes the BDPU packets and then the information or data retained in the port ages out Paramete...

Page 122: ... 000 the value defines the metric which indicates a relative cost of a forwarding packets to the port list specified The port cost can be set as the metric value or automatically The default value is 0 automatic If you set 0 to the external cost the speed of forwarding packets to the specified port is automatically set on a list of the optimal efficiency The default port of 100Mbps port costs 200 ...

Page 123: ...d time delay occurs Edge If a link up occurs the port directly transits to the state of spanning tree forwarding without waiting for the forward time delay If the interface receives the BPDU later its operation state changes to the non port fast state By default this option is set to Network TCN Filtering This parameter enables or disables an option of Topology Change Notification TCN filtering If...

Page 124: ... the following window Figure 5 35 MST Configuration Identification In the section of MST Configuration Identification you can configure the following parameters Click Apply to reflect the change In the section of the Instance ID Settings you can configure the following parameters Parameter Overview Configuration Name Enter an MST This name identifies an MSTI uniquely If you do not configure a conf...

Page 125: ...ers Then click Go to move to a specific page Parameter Overview Instance ID Enter an Instance ID The range is from 1 to 64 Action Choose the action you perform The options available are Adding VID and Deleting VID VID List Enter the VLAN ID you use You can enter its consecutive VLAN IDs by delimiting with a comma Or you can enter the range of VLAN IDs by delimiting with a hyphen The range is from ...

Page 126: ...following window Figure 5 36 STP Instance In the section of the STP Instance you can configure the following parameter Click Edit to edit the entry settings to move to a specific page If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Instance Priority After you click Edit enter the value of the instance priority The range is from 0 to 61 ...

Page 127: ... the association of the protocol detected from the port specified Click Find to search and display the entries in a table based on the search condition specified Click Edit to edit the entry settings If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Port Choose the port you use Cost Click Edit and then enter the cost value The range is fr...

Page 128: ...e section of Detecting and Blocking the Loop Settings you can configure the following parameters Parameter Overview Global State This parameter enables or disables to set a function of detecting and blocking a loop From Port To Port Choose the port you use State This parameter enables or disables a function of a line loop back of the port specified Mode Choose the mode of detecting and blocking a ...

Page 129: ...e change Recovering Loops This parameter enables or disables a function of recovering loops If the function is set to enabled ports become recovered to a normal condition after the value of time out expires Enter the entry field where the time out value is displayed The range is from 60 to 86 400 seconds Parameter Overview ...

Page 130: ...d clear a loop history log Choose L2 Features Detecting and Blocking Loops Loop History Log to display the following window Figure 5 39 Loop History Log Click the Clear Log button to clear log entries from a table If two or more pages exist enter the page numbers Then click Go to move to a specific page ...

Page 131: ... The range is from 1 to 65 535 By default the value is set to 32 768 The system priority determines the port which enables a port to participate in a port channel and to become the standalone mode The lower the value the higher priority will be If there are two or more ports with the same priority the priority is determined depending on the port number Load Balance Algorithm Choose a load balance ...

Page 132: ...er the channel group number The range is from 1 to 32 If a physical port participates in a channel group for the first time the port channel is automatically created One interface can participate in one channel group only Mode Choose the mode option The options available are Static Active and Passive If the Static mode is specified the channel group type is static If the Active or Passive mode is ...

Page 133: ...ld Enter the drop threshold The range is from 100 to 20 000 By default the value is set to 0 The tunneling of the layer 2 protocol packets consumes the throughput capacity for encrypting decoding and transferring packets Use this option to limit the consumption of CPU processing bandwidth Specify the threshold for the number of all the layer 2 protocol packets which can be processed through the sy...

Page 134: ...ets are tunneled to the address which is configured already Protocol MAC After choosing the MAC option as a Tunneled Protocol choose the destination address which is tunneled on the address configured The options available are 01 00 0C CC CC CC and 01 00 0C CC CC CD MAC Address Enter a MAC address as the tunneling destination for the protocol specified For this MAC address you cannot specify the a...

Page 135: ...formation from the entry Protocol MAC After choosing Protocol MAC as the Tunneled Protocol the following options are available Choose Protocol MAC from it The options available are 01 00 0C CC CC CC and 01 00 0C CC CC CD Threshold If you choose Shutdown or Removal in the Type field this parameter becomes available Enter the threshold value The range is from 1 to 4 096 Parameter Overview ...

Page 136: ...display the following window Figure 5 44 IGMP Snooping Settings In the section of Global Settings you can configure the following parameter Click Apply to reflect the change In the section of VLAN State Settings you can configure the following parameter Click Apply to add new entries based on the information specified In the section of a table of IGMP Snooping you can configure the following param...

Page 137: ...available Click Show Detail to display details on the entry Click Edit to edit the entry settings If two or more pages exist enter the page numbers Click Go to move to a specific page Click Show Detail to display the following window Figure 5 45 IGMP Snooping Settings Show Detail Click Edit to edit the settings Choose Edit or Revise to display the following window Parameter Overview VID Enter the ...

Page 138: ... for an IGMP Snooping querier periodically to transmit general query messages of IGMP The range is from 1 to 31 744 Maximum Response Time Enter the maximum response time in second which is advertised by an IGMP Snooping query The range is from 1 to 25 Robustness Variable Enter the robustness variable to use it for IGMP Snooping The range is from 1 to 7 Final Member Query Interval Enter the transmi...

Page 139: ...pply to add new entries based on the information specified Click Delete to delete the entries based on the information specified In the section of IGMP Snooping Static Group Table you can configure the following parameters Click Find to search and display the entries in a table based on the search condition specified Parameter Overview VID Enter VLAN IDs to use The range is from 1 to 4 094 Group A...

Page 140: ...parameters Click Find to search and display the entries in a table based on the search condition specified Click See All to search and display all the entries available Parameter Overview VID Choose and enter VLAN IDs to use The range is from 1 to 4 094 Group Address Click the radio button and then enter an address of an IP Multicast group Details This parameter displays details for an IGMP group ...

Page 141: ...the section of the settings on IGMP Snooping Bandwidth Limit you can configure the following parameters Click Apply to reflect the change Parameter Overview From Port to Port from the Beggining to the End Choose the port you use This is available only if you choose the port option for the following action Number of Limitations Enter the number of limitations Configure the rate of IGMP control pack...

Page 142: ... recognized when exceeding the limitation The options available are as follows Default The default action is executed Drop A new group is dropped Replace A new group is replaced to the oldest group Except ACL Name Enter the name of the standard IP access list The group G or channel S G which are allowed based on the access list are excluded from the limitation To authorize a channel S G specify S ...

Page 143: ...e Click Show Detail to display the following window Parameter Overview From Port to Port from the Beggining to the End Choose the port you use Action Click Add to add a new entry based on the information entered Click Delete to delete an entry based on the information entered ACL Name Enter the name of the standard IP access list Specify any in the source address field of the access list entry and...

Page 144: ... 1 3 IGMP Snooping Filter Settings Figure 5 49 IGMP Snooping Filter Settings Show Detail If two or more pages exist enter the page numbers Then click Go to move to a specific page Click Back to return to the previous window ...

Page 145: ...nformation In the section of the settings on IGMP Snooping Multicast Router Port you can configure the following parameters Click Apply to add new entries based on the information specified Click Delete to delete entries based on the information specified Parameter Overview VID Enter the VLAN ID you use The range is from 1 to 4 094 Configuration Choose a port configuration The options available ar...

Page 146: ...e the following parameter Click Find to search and display the entries in a table based on the search condition specified Click See All to search and display all the entries available If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview VID Enter the VLAN ID you use The range is from 1 to 4 094 ...

Page 147: ...tings In the section of the IGMP Snooping Statistics Settings you can configure the following parameters Click Clear to clear the statistics information based on the condition specified Parameter Overview Statistics Choose an interface The options available are All VLAN and Port VID Enter the VLAN ID you use The range is from 1 to 4 094 This option is available if you choose VLAN from the Statisti...

Page 148: ...ch condition specified Click See All to search and display all the entries available Parameter Overview Search Type Choose the interface type The options available are VLAN and Port VID Enter the VLAN ID you use The range is from 1 to 4 094 This option is available if you choose VLAN from the Search Type drop down list From Port To Port Choose the port you use This option is available if you choos...

Page 149: ...dow Figure 5 52 MLD Snooping Settings In the section of Global Settings you can configure the following parameter Click Apply to reflect the change In the section of VLAN State Settings you can configure the following parameter Click Apply to add new entries based on the information specified In the section of MLD Snooping Table you can configure the following parameter Parameter Overview Global S...

Page 150: ... Show Detail to display details on the entry Click Edit to edit the entry settings If two or more pages exist enter the page numbers Then click Go to move to a specific page Click Show Detail to display the following window Figure 5 53 MLD Snooping Settings Show Detail Click Edit to edit the settings Click Edit or Revise to display the following window Parameter Overview VID Enter the VLAN ID you ...

Page 151: ...149 5 L2 Features 5 7 2 MLD Snooping 5 7 2 1 MLD Snooping Settings Figure 5 54 MLD Snooping Settings Edit and Revise ...

Page 152: ...ersion Choose the general query packet version transmitted by the MLD Snooping querier The values to choose are 1 and 2 Query Interval Enter the interval at which the MLD Snooping querier periodically sends general MLD query messages The range is from 1 to 31 744 Maximum Response Time Enter the maximum response time in seconds advertised in MLD Snooping queries The range is from 1 to 25 Robustness...

Page 153: ...owing window Figure 5 55 MLD Snooping Group Settings In the section of the settings on MLD Snooping Static Group you can configure the following parameters Click Apply to add new entries based on the information specified Click Delete to delete entries based on the information specified Parameter Overview VID Enter the VLAN ID you use The range is from 1 to 4 094 Group Address Enter a group addres...

Page 154: ...roup Table you can configure the following parameters Click Find to search and display the entries in a table based on the search condition specified Click See All to search and display all the entries available Parameter Overview VID Choose and enter VLAN IDs to use The range is from 1 to 4 094 Group Address Click the Radio button and then enter an address of an IPv6 Multicast Group Parameter Ove...

Page 155: ...ion of the settings on MLD Snooping Band Limitation you can configure the following parameters Click Apply to reflect the change Parameter Overview From Port To Port Choose the port you use This is available only if you select the Port option as the following action Number of Limitations Enter the number of limitations Use the number of limitations to configure the rate of MLD control packets whic...

Page 156: ...ault The default action is executed Drop A new group is dropped Replace A new group is replaced to the oldest group Except ACL Name Enter the name of the standard IP access list The group G or channel S G which are allowed based on the access list are excluded from the limitation To authorize a channel S G specify S in the field of source address of the access list entry and G in the destination a...

Page 157: ...g Filter Settings Show Detail If two or more pages exist enter the page numbers Then click Go to move to a specific page Click Back to return to the previous window ACL Name Enter the name of the standard IP access list Use this parameter to allow users to participate in the group G To authorize a group G specify any in the source address field of the access list entry and G in the destination add...

Page 158: ...ies based on the information specified Click Delete to delete entries based on the information specified In the section of a port table for MLD Snooping Multicast Router you can configure the following parameter Click Find to search and display the entries in a table based on the search condition specified Parameter Overview VID Enter the VLAN ID you use The range is from 1 to 4 094 Configuration ...

Page 159: ...Features 5 7 2 4 MLD Snooping Multicast Router Information Click See All to search and display all the entries available If two or more pages exist enter the page numbers Then click Go to move to a specific page ...

Page 160: ...ings In the section of MLD Snooping Statistics Settings you can configure the following parameters Click Clear to clear the statistics information based on the condition specified Parameter Overview Statistics Choose an interface The options available are All VLAN and Port VID Enter the VLAN ID you use The range is from 1 to 4 094 This option is available when choosing VLAN from the Statistics dro...

Page 161: ...on specified Click See All to search and display all the entries available Parameter Overview Search Type Choose an interface type The options available are VLAN and Port VID Enter the VLAN ID you use The range is from 1 to 4 094 This option is available when you choose VLAN from the Search Type drop down list From Port To Port Choose the port you use This option is available when you choose Port ...

Page 162: ...rameter Overview VID List Enter the VLAN ID you use You can enter its consecutive VLAN IDs by delimiting with a comma or enter the range of VLAN IDs by delimiting with a hyphen The range is from 1 to 4 094 Multicast Filtering Mode Choose the Multicast filtering mode The options available are as follows Forward Unregistered Registered Multicast packets are forwarded based on a forwarding table and ...

Page 163: ... section of LLDP Global Settings you can configure the following parameters Parameter Overview LLDP State This parameter enables or disables an LLDP function LLDP Forward State This parameter enables or disables the LLDP forward state If you disable the LLDP State and enable the LLDP Forward State the LLDP Data Unit LLDPDU Packets which have been received are transferred LLDP Trap State This param...

Page 164: ... interval for consecutive LLDP advertisements on each physical interface The range is from 5 to 32 768 seconds When you choose Default use or apply the default value Message TX Hold Multiplier Enter the multiplier of the LLDPDU transmission interval to use for calculating the value of Time To Live TTL of LLDPDU The range is from 2 to 10 When you choose Default use the default value Relnit Delay En...

Page 165: ...P Port Settings to display the following window Figure 5 62 LLDP Port Settings In the section of LLDP Port Settings you can configure the following parameters Parameter Overview From Port To Port Choose the port you use Notification This enables or disables a notification function Sub type Choose the sub type of LLDP TLV Type Length Value The options available are MAC Address and Local ...

Page 166: ...local LLDP agent can receive LLDP frames only TX and RX The local LLDP agent can transmit and receive LLDP frames Disabled The local LLDP agent cannot transmit or receive LLDP frames The default option is set to TX and RX IP Sub type Choose the information type for the IP address to transmit The options available are Default IPv4 and IPv6 Action Choose the action you perform The options available ...

Page 167: ...owing window Figure 5 63 LLDP Management Address List You can configure the following parameter Click Find to search and display the entries in a table based on the search condition specified Parameter Overview Sub type Enter a sub type The options available are All IPv4 and IPv6 After you choose IPv4 enter it in the entry field where an IPv4 address is displayed After you choose IPv6 enter it in ...

Page 168: ...TLVs Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview From Port To Port Choose the port you use Description of Ports This parameter enables or disables the transmission of port description TLV System Name This parameter enables or disables the transmission of system name TLV Description of Systems This parameter enables or disables the transm...

Page 169: ...rs Parameter Overview From Port To Port Choose the port you use Port VLAN This parameter enables or disables to transmit Port VLAN ID TLV Protocol VLAN This parameter enables or disables to transmit the port and protocol VLAN ID PPVID TLV Enter the ID in the entry field provided VLAN Name This parameter enables or disables to transmit the TLV of a VLAN name Enter a VLAN ID in the entry field provi...

Page 170: ...168 5 L2 Features 5 8 5 LLDP Dot1 TLV Settings Click Apply to reflect the change ...

Page 171: ...ot3 TLV Settings In the section of LLDP Dot3 TLV Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview From Port To Port Choose the port you use MAC PHY Config State This parameter enables or disables to transmit the MAC PHY config state TLV Link Aggregation This parameter enables or disables to transmit the link aggregation TLV Maximum Frame Size...

Page 172: ...t Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview From Port To Port Choose the port you use Notification This parameter enables or disables the transmission of LLDP MED notification TLV Capability This parameter enables or disables the transmission of LLDP MED capability TLV Assets This parameter enables or disables the transmission of LLDP ...

Page 173: ...tures LLDP LLDP Statistics Information to display the following window Figure 5 68 LLDP Statistics Information In the section of LLDP Port Statistics Port Statistics you can configure the following parameter Click Clear to clear the counter information Click Clear All to clear the counter information on all the ports Parameter Overview Port Choose the port you use ...

Page 174: ...tion to display the following window Figure 5 69 LLDP Local Port Information In the section of the LLDP Local Port Summary Table you can configure the following parameter Click Find to search the LLDP local port information which is associated with the port specified Click Show Detail to display details on the LLDP local port which is associated with the port specified Parameter Overview Port Choo...

Page 175: ...Show Detail to display the following window Figure 5 70 LLDP Local Port Information Show Detail Click Individual Link to display the details which are associated with the function specified on the related table above Click Back to return to the previous window ...

Page 176: ...e 5 71 LLDP Neighbor Port Information In the section of a LLDP Neighbor Port Summary Table you can configure the following parameter Click Find to search the information on the LLDP Neighbor Port which is associated with the port specified Click Clear to clear the information on the LLDP Neighbor Port which is associated with the port specified Click Clear All to clear information on all the LLDP ...

Page 177: ...ply to reflect the change In the section of the RRP Domain State you can configure the following parameter Click Create to create a new RRP domain Click Show Detail to display details on the entry Click Delete to delete the entry Click Show Detail to display the following window Parameter Overview RRP State This parameter enables or disables an RRP function Parameter Overview Domain Name Enter the...

Page 178: ...to edit the settings Click Back to return to the previous window Click Edit to display the following window Figure 5 74 RRP Edition In the section of RRP Domain Settings you can configure the following parameters Parameter Overview RRP Domain State Choose to enable or disable an RRP domain ...

Page 179: ...ond port in the RRP domain If you choose the default option the current settings is cleared If you choose the Default option the current settings is cleared Polling Interval Enter the polling interval of hello packets The range is from 1 to 2 seconds The polling interval should be shorter than the failure period Failure Period Enter the disorder period The range is from 2 to 5 seconds The failure ...

Page 180: ...In the section of Searching for ARP Aging Time the following parameters can be configured Click Find to search and display the entries based on the search condition specified Click See All to search and display all the entries available Click Edit to edit the entry settings If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Interface VLAN ...

Page 181: ...e following parameters Click Find to search and display the entries based on the search condition specified Click See All to search and display all the entries available Click Edit to edit the entry settings Parameter Overview IP Address Enter an IP address to associate with a MAC address Hardware Address Enter a MAC address to associate with an IP Address Parameter Overview IP Address Choose and ...

Page 182: ...180 6 L3 Features 6 1 2 Static ARP Click Delete to delete the entry If two or more pages exist enter the page numbers Then click Go to move to a specific page ...

Page 183: ...condition specified Click Clear All to clear all the entries from a table Click Clear to delete entries specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Interface VLAN Choose and enter a VLAN ID of an interface The range is from 1 to 4 094 IP Address Choose and enter an IP address to be displayed Mask Choose and enter a subnet ...

Page 184: ...bal Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview IP Gratuitous ARP State This parameter enables or disables to transmit gratuitous ARP request packets Gratuitous ARP Trap State This parameter enables or disables the trap state of a gratuitous ARP function IP Gratuitous ARP Dad Reply State This parameter enables or disables the IP gratuito...

Page 185: ...al you can configure the following parameter Click Edit to edit the entry settings If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Interval Time After you click Edit enter the time for gratuitous ARP transmission interval seconds ...

Page 186: ...ng parameters Click Apply to add a new entry Click Find to search and display the entries based on the search condition specified Click Clear to clear the information based on the condition specified Click Clear All to clear all the dynamic entires Click Delete to delete the entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overvie...

Page 187: ...face In the section of IPv4 Interface you can configure the following parameter Click Apply to add the new entry Click Find to search and display the entries based on the search condition specified Click Edit to edit the configuration of the entry specified Click Delete to delete the entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Paramete...

Page 188: ...iew State This parameter enables or disables the global state of an IPv4 interface IP MTU Enter the value of Maximum Transmission Unit MTU The range is from 512 to 16 383 bytes By default the value is set to 1 500 bytes IP Directed Broadcast This parameter enables or disables a function of an IP directed broadcast Use this parameter to enable or disable the conversion to a physical broadcast of th...

Page 189: ...a method of obtaining an IP address The options available are as follows Static Enter an IPv4 address configuration of this interface in the entry field provided manually DHCP This interface automatically obtains the IPv4 settings from DHCP servers existing in a local network IP Address Enter an IPv4 address of this interface Mask Enter an IPv4 subnet mask of this interface Secondary If you set th...

Page 190: ...p to 64 Use this parameter to specify the vendor class ID to use as the value of Option 60 of DHCP discovery messages Host Name Enter a host name The number of character strings can be up to 64 Use this parameter to specify the value of the host name option which transmits with DHCP discovery messages Lease Enter the lease period for a DHCP client You can choose that if necessary Enter the number ...

Page 191: ...figure the following parameter Click Apply to add a new entry Click Find to search and display the entries based on the search condition specified Click Show Detail to display details on the entry If two or more pages exist enter the page numbers Then click Go to move to a specific page Click Show Detail to display the following window Figure 6 10 IPv6 Interface Show Detail and IPv6 Interface Sett...

Page 192: ...ed If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview IPv6 MTU Enter the value of IPv6 MTU The range is from 1 280 to 65 534 bytes By default the value is set to 1 500 bytes Use this parameter to configure MTU which can be advertised by a router advertise RA message IPv6 State This parameter enables or disables the global state for IPv6 In...

Page 193: ...alue equivalent to 75 of the maximum value RA Maximum Interval Enter the maximum value of the RA interval time whose range is from 4 to 1 800 seconds RA Lifetime Enter the value of an RA lifetime The range is from 0 to 9 000 seconds The lifetime value of RA conveys the value which regards a router as a default router on the host where RA is received RA Control This parameter enables or disables a ...

Page 194: ...This parameter enables or disables DHCPv6 client services If you choose Rapid Commit exchanging two messages for address delegation continues The high speed commit option is included in solicit messages and two message handshake is required Parameter Overview Client PD State This parameter enables or disables the DHCPv6 client process that requires PD Prefix Delegation through the interface specif...

Page 195: ...193 6 L3 Features 6 4 2 IPv6 Interface Click Apply to reflect the change ...

Page 196: ...4 Default Route to display the following window Figure 6 14 IPv4 Default Route In these section of IPv4 Default Route you can configure the following parameter Click Apply to add a new entry Click Delete to delete the entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Gateway Enter a gateway address of this route ...

Page 197: ... specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview IPv6 Address Prefix Length Enter an IPv6 address and prefix length for this route If you set Default Route to on use this route for a default route Interface Name Enter an interface name to be associated with this route Next Hop IPv6 Address Enter an IPv6 address of the next hop...

Page 198: ...and display the entries based on the search condition specified Click See All to search and display all the entries available Click Delete to delete the entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Interface VLAN Enter a VLAN interface ID to use The range is from 1 to 4 094 Prefix Name Enter the name of an IPv6 genera...

Page 199: ...t Default CoS you can configure the following parameter Click Apply to check the content changed Parameter Overview From Port To Port Choose the port you use Default CoS Choose the default CoS option of the port to be specified The range of values to choose is from 0 to 7 If you choose Override the CoS of packets is ignored The default CoS is applied to all the incoming packets tagged untagged whi...

Page 200: ...ttings on the method for a scheduler function and display its settings Choose QoS Basic Settings Port Scheduler Method to display the following window Figure 7 2 Port Scheduler Method In the section of the Port Scheduler Method you can configure the following parameters Parameter Overview From Port To Port Choose the port you use ...

Page 201: ...of CoS queues reaches zero 0 the queue services stop until the queue is replenished If the weight of all the CoS queues reaches 0 it becomes replenished at the time This is the default option Weight Deficit Round Robin WDRR Service are provided to the unprocessed credit which is accumulated on the transmission queue in a sequential order of the round robin At the beginning each queue sets a credit...

Page 202: ...S queue and display the settinags Choose QoS Basic Settings Queue Settings to display the following window Figure 7 3 Queue Settings In the section of Queue Settings you can configure the following parameters Parameter Overview From Port To Port Choose the port you use Queue ID Enter the value of queue ID The range is from 0 to 7 ...

Page 203: ...equirements of Expedited Forwarding EF always choose the highest queue with Per hop Behavior PHB EF In addition you need to designate the schedule mode of this queue as a strict priority scheduling As long as a differentiate service is available to get supports the weight of last queue must be 0 WDRR Quantum Enter the value of WDRR quantum The range is from 0 to 127 Parameter Overview ...

Page 204: ...to queue mapping and display its settings Choose QoS Basic Settings CoS to Queue Mapping to display the following window Figure 7 4 CoS to Queue Mapping You can configure the following parameter Click Apply to check the content changed Parameter Overview Queue ID Choose a Queue ID to map the corresponding CoS value The range of the values is from 0 to 7 ...

Page 205: ...imiting to display the following window Figure 7 5 Port Rate Limiting In the section of Port Rate Limiting you can configure the following parameters Parameter Overview From Port To Port Choose the port you use Direction Choose a direction option The options available are as follows Input This configures to limit the bandwidth regarding the entry packets Output This configures to limit the bandwid...

Page 206: ...om 0 to 128 000 kilo bytes If you select Percent enter the input output bandwidth using the unit as a percentage The range is from 1 to 100 percent Enter the Burst size value in the entry field displayed The range is from 0 to 128 000 kilo bytes If you select None limiting a band frequency on the specified port is removed The specified limitation cannot exceed the maximum speed of the interface sp...

Page 207: ...Limiting 7 1 6 Queue Rate Limiting Use the following window to implement the settings on limiting queue bandwidth and display its settings Choose QoS Basic Settings Queue Rate Limiting to display the following window Figure 7 6 Queue Rate Limiting ...

Page 208: ... configure the maximum bandwidth packets transmitted from the queues do not exceed the maximum bandwidth If you configure the minimum bandwidth the aggregation of the minimum bandwidth to be configured must be less than 75 of the interface bandwidth Doing so ensures the minimum bandwidth to be configured You do not need to configure the minimally guaranteed bandwidth for the strict priority queue ...

Page 209: ...7 DSCP Mutation Map In the section of a DSCP Mutation Map you can configure the following parameters Click Apply to add a new entry Click Delete to delete the entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Mutation Name Enter the name of the DSCP mutation map The number of characters for the name can be up to 32 Input D...

Page 210: ...7 8 Port Trust State and Mutation Binding In the section of Port Trust State and Mutation Binding you can configure the following parameters Click Apply to check the content changed Parameter Overview From Port To Port Choose the port you use Trust State Choose the port trust state The options available are CoS and DSCP The options available are CoS and DSCP DSCP Conversion Map Choose and enter th...

Page 211: ... display the following window Figure 7 9 DSCP CoS Mapping In the section of the DSCP CoS Mapping you can configure the following parameters Click Apply to check the content changed Parameter Overview From Port To Port Choose the port you use CoS Enter the CoS value for mapping the DSCP list The range of the value to choose is from 0 to 7 DSCP List Enter the DSCP list value to map the CoS value The...

Page 212: ...Mapping to display the following window Figure 7 10 CoS Color Mapping In the section of CoS Color Mapping you can configure the following parameters Click Apply to check the content changed Parameter Overview From Port To Port Choose the port you use CoS List Enter the CoS value to map colors The range is from 0 to 7 Color Choose the color option to map the CoS value The options available are Gree...

Page 213: ...to display the following window Figure 7 11 DSCP Color Mapping In the section of the DSCP Color Mapping you can configure the following parameters Click Apply to check the content changed Parameter Overview From Port To Port Choose the port you use DSCP List Enter the value of DSCP list to map colors The range is from 0 to 63 Color Choose the color option to map the DSCP value The options availabl...

Page 214: ...Click Match to configure the match rule of the entry specified Click Delete to delete the entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Click Match to display the following window Figure 7 13 Class Map Match Parameter Overview Class Map Name Enter the name of a class map The number of characters for the name can be up to 32 Multiple Matc...

Page 215: ...Pv4 to on only IPv4 packets are matched If not specified the reconciliation or cross check targets for both IPv4 and IPv6 packets Precedence List Choose and enter the value of a precedence list that matches with this class map The range is from 0 to 7 If you set the IPv4 option to on IPv4 packets are matched only If not specified the reconciliation targets for both IPv4 and IPv6 packets In the cas...

Page 216: ...te Policer Single Rate Settings In the section of the Single Rate Settings you can configure the following parameters Parameter Overview Aggregate Policer Name Enter the name of the aggregate policer Average Rate Enter the value of the average rate The range is from 0 to 10 000 000 Kbps Normal Burst Size Enter the value of a normal burst size The range is from 0 to 16 384 Kbyte Maximum Burst Size ...

Page 217: ...and transmit the value of new DSCP and IEEE 802 1p to packets Enter the values in the entry field displayed Exceed Action Choose the exceed action The action specifies the action needed on the packets which exceed the bandwidth limitation Regarding a two rate policer if the exceed action is not specified the default action is Drop The options available are as follows Drop This option allows you to...

Page 218: ...comes the exceed action The options available are as follows Nothing No action is taken Drop This option allows you to drop the packets Set DSCP Transmit This option allows you to configure and transmit the value of new DSCP to packets Enter the DSCP value in the entry field displayed Set 1P Transmit This option allows you to configure and transmit the value of new IEEE 802 1p to packets Enter the...

Page 219: ... The certified packet rate is the first token bucket for the two rate metering Burst Confirmation Enter the value of a burst confirmation The range is from 0 to 16 384 Kbyte The value of the confirmation specifies the burst size for the first token bucket in kbps PIR Enter the value of PIR Peak Information Rate The range is from 0 to 10 000 000 Kbps The rate is the second token bucket for the 2 ra...

Page 220: ...SCP and IEEE 802 1p to packets Enter the values of DSCP and IEEE 802 1p in the space provided Exceed Action Choose the exceed action The exceed action specifies an action to be taken on the packets which exceed the rate limit For a two rate policer if the exceed action is not specified the default action is Drop The options available are as follows Drop This option allows you to drop the packets S...

Page 221: ...ptions available are as follows Drop This option allows you to drop the packets Set DSCP Transmit This option allows you to configure and transmit the value of new DSCP to packets Enter the DSCP value in the entry field displayed Set 1P Transmit This option allows you to configure and transmit the value of new IEEE 802 1p to packets Enter the IEEE 802 1p value in the entry field displayed Transmis...

Page 222: ... Then click Go to move to a specific page In the section of Traffic Policy you can configure the following parameters s Click Apply to add a new entry Click Set Action to configure the action of the entries specified Click Policer to configure the police action for the entry specified Parameter Overview Name of a Policy Map Enter the name of a policy map to create or delete The number of character...

Page 223: ... If you do not choose it the precedence for both IPv4 and IPv6 is marked In the case of IPv6 packets the top three bits traffic class for the IPv6 header can be the precedence The precedence configuration does not affect the CoS selection New DSCP Choose the value of new DSCP for packets The range is from 0 to 63 If you choose IPv4 Only the IPv4 DSCP is marked If you do not choose it DSCP for both...

Page 224: ...can configure the following parameters Parameter Overview None If you choose this option a policer is not configured on this entry Specify If you choose this option the following policer configuration is applied on this entry Average Rate Enter a value of the average rate The range is from 0 to 10 000 000 Kbps Normal Burst Size Enter the value of a normal burst size The range is from 0 to 16 384 K...

Page 225: ...it the values of a new DSCP and IEEE 802 1p to packets Enter the values in the entry field displayed Exceed Action Choose the exceed action to be taken This action is taken on the yellow colored packets which exceed the bandwidth limitation The options available are as follows Drop This option allows you to drop the packets Set DSCP Transmit This option allows you to configure and transmit the val...

Page 226: ...lows you to configure and transmit the value of new DSCP to packets Enter the DSCP value in the entry field displayed Set 1P Transmit This option allows you to configure and transmit the value of new IEEE 802 1p to packets Enter the IEEE 802 1p value in the entry field displayed Transmission This option allows you to transmit packets without changing them DSCP 1P Configuration This option allows y...

Page 227: ...rom 0 to 10 000 000 Peak Burst Enter the value of the peak burst This is the size of the second token bucket The range is from 0 to 16 384 kilo bytes Conform Traffic Action Choose the conform traffic action to execute This action is performed on green colored packets The options available are as follows Drop This option allows you to drop the packets Set DSCP Transmit This option allows you to con...

Page 228: ...entry field displayed Violate Action Choose a violate action to be taken This action is executed for the red colored packets The options available are as follows None No violate action is taken Drop This option allows you to drop the packets Set DSCP Transmit This option allows you to configure and transmit the value of new DSCP to packets Enter the DSCP value in the entry field displayed Set 1P T...

Page 229: ...ice Aggregate In the section of Police Action you can configure the following parameters Click Apply to check the content changed Click Back to return to the previous window Parameter Overview None If you choose this option a policer is not configured on this entry Specify If you choose this option the following policer configuration is applied on this entry Aggregate Policer Name Enter the name o...

Page 230: ...ings on a Policy Binding you can configure the following parameters Click Apply to check the content changed Parameter Overview From Port To Port Choose the port you use Direction Choose a direction option The options available are Input and Output Specify the entry traffic for Input and exit traffic for Output respectively Name of a Policy Map Enter the name of a policy map The number of characte...

Page 231: ...ding the environment where the traffics instantaneously exceeding the maximum quantity of communications for a port occur frequently Choose QoS Egress Buffer Settings to display the following window Figure 7 22 Egress Buffer Settings In the section of Egress Buffer Settings you can configure the following parameter Click Apply to reflect the change Parameter Overview Threshold Settings for Egress ...

Page 232: ...ation Wizard Use the following window to configure new and existing ACLs on the ALC configuration wizard Choose ACL ACL Configuration Wizard to display the following window Figure 8 1 ACL Configuration Wizard Create Click Update to display the following window Figure 8 2 ACL Configuration Wizard Update ...

Page 233: ...the following parameters Click Next to proceed to the next step in the wizard Click Back to return to the previous step in the wizard Parameter Overview Create Choose this option to create a new ALC access list using the configuration wizard ACL Name Enter a new ACL name The number of characters for the name can be up to 32 Update Choose this option to update an existing ACL access list Choose the...

Page 234: ...onal Evaluates the optional source traffic according to this rule condition Host Enter a source host MAC address MAC Enter a source MAC address and the Wildcard value in the entry field displayed Destination Choose and enter the destination MAC address information The options available are as follows Optional Evaluates an optional destination traffic according to this rule condition Host Enter a d...

Page 235: ...th hexadecimal value The range is from 0x0 to 0xFFFF If you choose an optional Ethernet type profile from the Specify Ethernet Type drop down list the appropriate hexadecimal value is automatically displayed CoS Choose the CoS value you use The range is from 0 to 7 Mask Enter the CoS mask value The range is from 0x0 to 0x7 VID Enter the VLAN ID you use The range is from 1 to 4 094 Mask Enter the v...

Page 236: ...234 8 ACL Access Control List 8 1 1 MAC ACL Click Apply to check the changes made and return to the ACL Configuration Wizard window Click Back to return to the previous step in the wizard ...

Page 237: ...andard IP ACL the following window is displayed Figure 8 6 ACL Configuration Wizard Configuration of a Standard IP ACL If you choose Update an Extended IP ACL or Create an IPv4 ACL the following window is displayed Figure 8 7 ACL Configuration Wizard Configuration of an Extended IP ACL ...

Page 238: ...ket fragment filtering is included Source Choose and enter the source information The options available are as follows Optional Evaluates optional source traffics according to this rule condition Host Uses and enters an IP address of source host IP Use the bit map of Wildcard and then use and enter a group of the source IP address The bit corresponding to the bit value of 1 is ignored but the bit ...

Page 239: ... number specified only ACL uses all the ports which are greater than the port number specified ACL uses all the ports which are smaller than the port number specified ACL uses all the ports except the port number specified Range ACL uses the port which is specified within the range Mask ACL uses the port within the range of the mask specified Enter the value of a port mask in the entry field displ...

Page 240: ...ype of Service ToS The options available are normal 0 min monetary cost 1 max reliability 2 max throughput 4 and min delay 8 Value You can enter the ToS value manually The range is from 0 to 15 Mask Enter the ToS mask value The range is from 0x0 to 0xF DSCP Choose the DSCP value The options available are default 0 af11 10 af12 12 af13 14 af21 18 af22 20 af23 22 af31 26 af32 28 af33 30 af41 34 af42...

Page 241: ...ation Wizard IPv4 Step 3 You can configure the following parameters Click Apply to check the content changed and return to the ACL Configuration Wizard window Click Back to return to the previous step in the wizard Parameter Overview From Port To Port Choose the port you use Direction Choose a direction The options available are In and Out ...

Page 242: ...If you choose Update an Extended IPv6 ACL or Create an IPv6 ACL the following window is displayed Figure 8 10 ACL Configuration Wizard Configuration of an Extended IPv6 ACL You can configure the following parameters Parameter Overview Sequence Number Enter the ACL rule number The range is from 1 to 65 535 If you choose Auto Allocation the ACL rule number regarding this entry is automatically gener...

Page 243: ...Choose and enter the destination information The options available are as follows Optional Evaluates the optional destination traffic according to this rule condition Host Uses and enters an IPv6 address of a destination host IPv6 Enter the destination IPv6 address and the value of Prefix length in the entry field displayed Source Port Choose and enter the value of the source port The options avai...

Page 244: ...erical value of an ICMP Message Type The range is from 0 to 255 If you choose the ICMP Message Type the numerical value of the message type is automatically entered This parameter is available when you select ICMP as the protocol type Message Code If you do not choose the Specify ICMP Message type enter the numerical value of a message code to use The range is from 0 to 255 If you choose the ICMP ...

Page 245: ...urg This parameter is available only if you choose TCP from the Protocol Type Flow Label Enter the value of a flow label The range is from 0 to 1 048 575 Mask Enter the flow label mask The range is from 0x0 to 0xFFFFF Time Range Enter the name of the time range profile used in this ACL rule The number of characters for the name can be up to 32 Action Choose an action to execute with this rule The ...

Page 246: ...ration Wizard IPv6 Step 3 You can configure the following parameters Click Apply to check the content changed and return to the ACL Configuration Wizard window Click Next to return to the previous step in the wizard Parameter Overview From Port To Port Choose the port you use Direction Choose a direction The options available are In and Out ...

Page 247: ... profile entry Click Edit to edit the configuration of the entry specified Click Delete to delete the entry specified Click Clear All Counters to clear all the counter information Click Clear a Counter to clear the counter information which is related to an ACL profile selected Click Add Rules to add a new ACL rule entry on the ACL profile selected Parameter Overview ACL Type Choose an ACL type to...

Page 248: ...ed Parameter Overview Starting Sequence Number Enter the starting sequence number Step Enter the step of sequence numbers The range of step is from 1 to 32 This specifies the number of steps for the sequence number The default value is 10 For example if the increment step value is 5 and the starting sequence number is 20 the following sequence numbers become 25 30 35 and 40 Counter State This para...

Page 249: ...Choose the Standard IP ACL profile and then click the Add Rules ACL Access list window to display the following window Parameter Overview ACL Type Choose an ACL type to create The options available are Standard IP ACL Extended IP ACL Standard IPv6 ACL Extended IPv6 ACL Extended MAC ACL and Extended Expert ACL This section describes how to configure the standard IP ACL ID Enter an ID of the standar...

Page 250: ...st Uses and enters a source host IP address IP Uses and enters a group of source IP addresses by using a Wildcard bitmap The bit corresponding to the bit value of 1 is ignored but the bit corresponding to the bit value of 0 is checked Destination Choose and enter the destination information The options available are as follows Optional Evaluates the optional destination traffic according to this r...

Page 251: ...249 8 ACL Access Control List 8 2 1 Standard IP ACL Click Apply to add a new ACL rule Click Back to return to the ACL access list window ...

Page 252: ...e following parameters Click Apply to add a new ACL profile Parameter Overview ACL Type Choose the ACL type to create The options available are Standard IP ACL Extended IP ACL Standard IPv6 ACL Extended IPv6 ACL Extended MAC ACL and Extended Expert ACL This section describes how to configure Extended IP ACL ID Enter an ID of the extended IP ACL The range is from 2 000 to 3 999 ACL Name Enter the n...

Page 253: ...5 The number is automatically generated if you do not specify it Action Choose an action to execute with this rule The options available are Permit and Reject Protocol Type Choose a protocol type option The options available are TCP UDP ICMP EIGRP 88 ESP 50 GRE 47 IGMP 2 OSPF 89 PIM 103 VRRP 112 IP in IP 94 PCP 108 Protocol ID and None Value Enter the protocol ID manually The range is from 0 to 25...

Page 254: ...ation host IP address IP Uses and enters a group of destination IP addresses using the Wildcard bitmap The bit corresponding to 1 as the bit value is ignored but the bit corresponding to 0 as the bit value is checked Source Port Choose and enter the value of source port The options available are as follows ACL uses the port number specified only ACL uses all the ports which are greater than the po...

Page 255: ...ge Type Choose an ICMP Message Type to use This parameter is available when you select ICMP from the Protocol Type ICMP Message Type If you do not choose Specify ICMP Message Type enter the numerical value of an ICMP Message Type to use The range is from 0 to 255 If you choose the ICMP Message Type the numerical value of the message type is automatically entered This parameter is available when yo...

Page 256: ...sk Enter the value of ToS mask The range is from 0x0 to 0xF DSCP Choose the DSCP value to use The options available are default 0 af11 10 af12 12 af13 14 af21 18 af22 20 af23 22 af31 26 af32 28 af33 30 af41 34 af42 36 af43 38 cs1 8 cs2 16 cs3 24 cs4 32 cs5 40 cs6 48 cs7 56 and ef 46 Value You can enter the DSCP value manually The range is from 0 to 63 Mask Enter the value of DSCP mask The range is...

Page 257: ...dard IPv6 ACL profile and then click Add Rules ACL Access List Window to display the following window Parameter Overview ACL Type Choose the ACL type to create The options available are Standard IP ACL Extended IP ACL Standard IPv6 ACL Extended IPv6 ACL Extended MAC ACL and Extended Expert ACL This section describes how to implement the settings on the standard IPv6 ACL ID Enter one ID of the stan...

Page 258: ...256 8 ACL Access Control List 8 2 3 Standard IPv6 ACL Figure 8 19 ACL Access List Adding Rules Standard IPv6 ACL v ...

Page 259: ...ons available are as follows Optional Evaluates the optional source traffic according to this rule condition Host Uses and enters a source host IPv6 address IPv6 Enter the value of a source IPv6 address and prefix length in the entry field displayed Destination Choose and enter the destination information The options available are as follows Optional Evaluates the optional destination traffic acco...

Page 260: ...e the Extended IPv6 ACL profile and then click Add Rule in the ACL Access List window to display the following window Parameter Overview ACL Type Choose the ACL type to create The options available are Standard IP ACL Extended IP ACL Standard IPv6 ACL Extended IPv6 ACL Extended MAC ACL and extended Expert ACL This section describes how to configure Extended IPv6 ACL ID Enter the ID of the extended...

Page 261: ...f not specified Action Choose an action to execute with this rule The options available are Permit and Reject Protocol Type Choose the protocol type option The options available are TCP UDP ICMP Protocol ID ESP 50 PCP 108 SCTP 132 and None Value The protocol ID can also manually be entered The range is from 0 to 255 Mask After selecting the Protocol ID option manually enter the protocol mask value...

Page 262: ...and enters the destination host IPv6 address IPv6 Specifies and enter the destination IPv6 address and prefix length value in the spaces provided Source Port Choose and enter the source port value The options available are as follows The ACL uses the port number specified The ACL uses all the ports which are greater than the port number specified The ACL uses all the ports which are smaller than t...

Page 263: ...ect the TCP flag which is evaluated in this ACL The options available are ack fin psh rst syn and urg This parameter is available when you select TCP as the protocol type Specify ICMP Message Type Choose the ICMP Message Type to use This parameter is available when you select ICMP as the protocol type ICMP Message Type When the ICMP Message Type is not specified enter the ICMP message type numeric...

Page 264: ...The DSCP value can be manually entered The range is from 0 to 63 Mask Enter the DSCP mask value The range is from 0x0 to 0x3F Traffic Class Choose and enter the traffic class value The range is from 0 to 255 Mask Enter the value of traffic class mask The range is from 0x0 to 0xFF Flow Label Enter the flow label value The range is from 0 to 1 048 575 Mask Enter the flow label mask The range is from...

Page 265: ...L profile Click Extended MAC ACL profile and Add Rules in the ACL Access List window to display the following window Parameter Overview ACL Type Choose the ACL type to create The options available are Standard IP ACL Extended IP ACL Standard IPv6 ACL Extended IPv6 ACL Extended MAC ACL and Extended Expert ACL This section describes how to configure Extended MAC ACL ID Enter an ID of extended MAC AC...

Page 266: ...lows Optional Evaluates the optional source traffic according to this rule condition Host Enter a source host MAC address MAC Enter the source MAC address and the Wildcard value in the entry fields provided Destination Choose and enter the destination MAC address information The options available are as follows Optional Evaluates the optional destination traffic according to this rule condition Ho...

Page 267: ...e Ethernet type mask as the hexadecimal value The range is from 0x0 to 0xFFFF If you choose an optional Ethernet type profile from the drop down list of Specify Ethernet Type the appropriate hexadecimal value is automatically displayed CoS Choose the CoS value the range is from 0 to 7 Mask Enter the value of CoS mask The range is from 0x0 to 0x7 VID Enter one VLAN ID to use The range is from 1 to ...

Page 268: ...he following parameters Click Apply to add a new ACL profile Parameter Overview ACL Type Choose the ACL type to create The options available are Standard IP ACL ExtendedIP ACL Standard IPv6 ACL Extended IPv6 ACL Extended MAC ACL and Extended Expert ACL This section describes how to configure Extended Expert ACL ID Enter an ID of the Extended Expert ACL The range is from 8 000 to 9 999 ACL Name Ent...

Page 269: ...Figure 8 25 ACL Access List Add Rules Extended Expert ACL In the section of Add ACL Rules you can configure the following parameters Parameter Overview Sequence Number Enter the ACL rule number The range is from 1 to 65 535 If not specified the number is automatically generated Action Choose an action to execute with this rule The options available are Permit and Reject ...

Page 270: ... Destination IP Address Choose and enter the destination information The options available are as follows Optional Evaluates the optional destination traffic according to this rule condition Host Uses and enters a destination host IP Address IP Use the bit map of Wildcard and enter the group of the destination IP address The bit corresponding with 1 of the bit value is ignored but the bit correspo...

Page 271: ...ort number specified only ACL uses all the ports which are greater than the port number specified ACL uses all the ports which are smaller than the port number specified ACL uses all the ports except for the port number specified Range ACL uses the port which is specified within the range Mask ACL uses the port within the range of the mask specified Enter the value of a port mask in the entry fiel...

Page 272: ...ary cost 1 max reliability 2 max throughput 4 and min delay 8 Value You can enter the ToS value manually The range is from 0 to 15 Mask Enter the ToS mask value The range is from 0x0 to 0xF DSCP Choose the DSCP value to use The options available are default 0 af11 10 af12 12 af13 14 af21 18 af22 20 af23 22 af31 26 af32 28 af33 30 af41 34 af42 36 af43 38 cs1 8 cs2 16 cs3 24 cs4 32 cs5 40 cs6 48 cs7...

Page 273: ... Expert ACL Click Apply to add a new ACL rule Click Back to return to the ACL access list window Time Range Enter the name of the time range profile to use in this ACL rule The number of characters for the name can be up to 32 Parameter Overview ...

Page 274: ...ly to check the content changed Click Please Select to display the access control list configured already and use it in this window Click Please Select to display the following window Parameter Overview From Port To Port Choose the port you use Direction Choose a direction The options available are In and Out Action Choose the action you perform The options available are Add and Delete Type Choose...

Page 275: ...ist 8 3 ACL Interface Access Group Figure 8 27 ACL Interface Access Group Please select Click OK to use the access control list selected If two or more pages exist enter the page numbers Then click Go to move to a specific page ...

Page 276: ... information about the specified access map Click Find to search and display the entries based on the search condition specified Click the Binding button to configure the binding for the specified entry Click Delete to delete the entry specified Parameter Overview Access Map Name Enter the name of an access map The number of characters for the name can be up to 32 Sub Map Number Enter the sub map ...

Page 277: ...gure the following parameters Click Please Select to display the configured access control list which can be used in this window Click Apply to check the content changed Click Delete to delete the binding specified Click Please Select to display the following window Parameter Overview Match IP Access List The IP access list to be matched is displayed Match IPv6 Access List The IPv6 access list to ...

Page 278: ...AN Access Map Figure 8 30 ACL VLAN Access Map Please choose a binding Click OK to use the access control list selected Click Go to move a specific page If two or more pages exist enter the page numbers Then click Go to move to a specific page ...

Page 279: ... entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Access Map Name Enter an access map name The number of characters for the name can be up to 32 Action Choose the action you perform The options available are Add and Delete VID List Enter the VLAN ID you use You can enter its consecutive VLAN IDs by delimiting with a comma...

Page 280: ...o display the following window Figure 9 1 Port Security Global Settings In the section of Port Security System Settings you can configure the following parameter Click Apply to check the content changed Parameter Overview Maximum Address of a System Enter the maximum number of secure MAC addresses to be allowed or permitted If not specified the default value is No Restriction The valid range is fr...

Page 281: ...condition specified Parameter Overview VID list Enter the VLAN ID you use You can enter its consecutive VLAN IDs by delimiting with a comma or enter the range of VLAN IDs by delimiting with a hyphen The range is from 1 to 4 094 VLAN Maximum Learning Address Enter the maximum number of MAC addresses to be allowed or permitted which can be learned with the VLAN specified The range is from 1 to 3 328...

Page 282: ...urity function on the port specified Maximum Enter the maximum number of secure MAC addresses to permit on the port s specified The range is from 0 to 3 328 By default the value is set to 32 Violation Action Choose the violation action to conduct The options available are as follows Protect Although all the packets are deleted from the host which is insecure as the port security process level the ...

Page 283: ...hese entries Aging Time Enter the aging time value to use it for the secure dynamic address which automatically learned on the port specified The range is from 0 to 1 440 minutes Aging Type Choose the aging type The options available are as follows Absolute All the secure addresses on this port become age out immediately if the specified time passes and they are deleted from a list of the addresse...

Page 284: ...o delete the entry specified Click the Clear by Port button to delete all the secure MAC addresses for the port specified Click the Clear by Mac button to delete the address specified among the secure MAC addresses on the optional port Click Clear All to clear and delete all the secure MAC addresses for a port If two or more pages exist enter the page numbers Then click Go to move to a specific pa...

Page 285: ...ings In the section of 802 1X Global Settings you can configure the following parameters Click Apply to check the content changed Parameter Overview System Authentication Control This parameter enables or disables the system authentication control This function controls the network access coming from unauthorized hosts NAS ID Enter an ID regarding Network Access Server NAS EAP Request Interval Ent...

Page 286: ...Port Settings you can configure the following parameters Click Apply to check the content changed Parameter Overview Authentication Port Mode Choose the authentication mode to use it on the port specified The options available are Port Based and Mac Based From Port To Port Choose the port you use ...

Page 287: ...ameters Click Apply to add a new entry Click Find to search and display the entries based on the search condition specified Click Delete to delete the entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview From Port To Port Choose the port you use MAC Address Enter a MAC address of supplicant Mask Length Enter the MAC mask bit ...

Page 288: ...ontent changed Click Find to search and display the entries based on the search condition specified Parameter Overview Age Out Time Enter the value of age out time The time is used for aging out a static unauthorized host The range is from 0 to 65 535 seconds From Port To Port Choose the port you use MAC Address Enter a MAC address of an unauthorized host Find By MAC Choose this option to find the...

Page 289: ...802 1X authentication Force Authorized Sets a port to an authorized state forcefully Force Unauthorized Sets a port to the unauthorized state forcefully Admin Control Direction Choose the control direction of traffics on the port s The options available are as follows Both Controls traffics in both directions In Controls traffics in an inbound direction only Quiet Period Enter the quiet or silent ...

Page 290: ...is from 1 to 65 535 seconds Server Time out Enter the value of a server time out This is the number of seconds needed to wait for the response coming from an authentication server When passing this period the connection becomes time out The range is from 1 to 65 535 seconds Re authentication Period Enter the re authentication period This is the number of seconds needed for an interval of re authen...

Page 291: ... directions In controls traffics in Inbound direction only Quiet Period Enter the quiet period This is the number of seconds for a switch to maintain the quiet state after failing an authentication process The range is from 1 to 65 535 seconds Transmission Period Enter the transmission period This is the number of seconds needed for a switch to wait for the EAP requests identity frames which come ...

Page 292: ...is the number of seconds for the interval of re authentication attempts The range is from 1 to 65 535 seconds Maximum Request Enter the maximum number of EAP requests which are allowed from a back end authentication machine When exceeding this an authentication process restarts The range is from 1 to 10 Re authentication Time Local This parameter enables or disables the use of the local settings f...

Page 293: ...o enable or disable the re authentication function Click Initiate to initiate the settings on the MAC based access control on the port specified Click Re authenticate to re authenticate the MAC address connections of the supplicant specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Click Back to return to the previous window ...

Page 294: ...0 EAP Port Config You can configure the following parameters Click Apply to check the content changed Parameter Overview From Port To Port Choose the port you use EAP Request This parameter enables or disables a function of EAP requests on the port specified EAP Forward This parameter enables or disables a function of EAP forward on the port specified You can use it to enable or disable the forwar...

Page 295: ... Figure 9 11 802 1X Authentication Statistics Information In the section of Statistics you can configure the following parameters Click Find to display the information based on the search condition specified Click Reset All to reset all the statistics information Parameter Overview Port Choose the port you use Since Choose the time range The options available are as follows Since Reset displays th...

Page 296: ... accesses Choose Security 802 1X 802 1X Supplicant Global Settings to display the following window Figure 9 12 802 1X Supplicant Global Settings In the section of 802 1X Supplicant Global Settings you can configure the following parameters Encryp Click Apply to reflect the change Parameter Overview User name Configure a user name of the supplicant Password Configure a supplicant password Encryptin...

Page 297: ... supplicant fails to authenticate The range is from 0 to 65 535 The default is 60 seconds Authentication Period This parameter configures the necessary time for waiting the request from an authenticator The range is from 1 to 65 535 The default is 30 seconds Start Period This parameter configures the transmission interval of EAPOL when starting an authentication The range is from 1 to 65 535 The d...

Page 298: ...296 9 Security 9 2 8 802 1X Supplicant Port Settings Click Apply to reflect the change ...

Page 299: ...s information on the port specified Choose Security 802 1X 802 1X Supplicant Statistics to display the following window Figure 9 14 802 1X Supplicant Statistics Information In the section of 802 1X Supplicant Statistics you can configure the following parameter Click Retrieve to display information on the port specified Parameter Overview Port Choose a port to be configured ...

Page 300: ...llowing window to enable or disable to set an AAA function to global Choose Security AAA AAA Global Settings to display the following window Figure 9 15 AAA Global Settings In the section of AAA Condition Settings you can configure the following parameter Click Apply to check the content changed Parameter Overview AAA Condition Enables or disables to set an AAA function to global ...

Page 301: ... RADIUS server as the primary database Local Uses the local database on a switch as the primary database Secondary Database Choose a secondary database to use for Web authentication The options available are as follows None does not use the secondary database RADIUS Uses the database on a RADIUS server as the secondary database Local Uses the local database on a switch as the secondary database Au...

Page 302: ...ch as the primary database Secondary Database Choose a secondary database to use for a MAC authentication The options available are as follows None Does not use the secondary database RADIUS Uses the database on a RADIUS server as the secondary database Local Uses the local database on a switch as the secondary database Authentication Fail Action Choose an action to execute in case of MAC authenti...

Page 303: ...e a secondary database to use for IEEE 802 1X authentication The options available are as follows None Does not use the secondary database RADIUS Uses the database on a RADIUS server as the secondary database Local Uses the local database on a switch as the secondary database Action during an Authentication Failure Choose an action to execute in case of the IEEE 802 1X authentication failure The o...

Page 304: ... for a local authentication account The range is from 1 to 4 094 Password Choose and enter the clear text password for the local authentication account Choose the Encrypt option to enable password encryption for this account The clear text password is saved as the encrypted form on the switch Encrypted Password Choose and enter the encrypted password for the local authentication account Authentica...

Page 305: ...curity 9 3 3 AAA Authentication User Settings Click Apply to add a new entry Click Delete to delete the entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page ...

Page 306: ...MAC address of a local authentication account This is used for a MAC authentication VLAN ID Enter the target VLAN ID of a local authentication account The range is from 1 to 4 094 2 Steps Authentication This parameter enables or disables the 2 steps authentication The options available are as follows No Disables the 2 step authentication of a local authentication account Web Enables the 2 step aut...

Page 307: ...305 9 Security 9 3 4 AAA Authentication MAC Settings If two or more pages exist enter the page numbers Then click Go to move to a specific page ...

Page 308: ...ttings to display the following window Figure 9 19 Application Authentication Settings Click Edit to display the following window Figure 9 20 Application Authentication Settings Edition In the section of Application Authentication Settings you can configure the following parameters Click Edit to edit the configuration of the entry specified Click Apply to check the content changed Parameter Overvi...

Page 309: ...Application Accounting Settings to display the following window Figure 9 21 Application Accounting Settings Click Edit to display the following window Figure 9 22 Application Accounting Settings Edition In the section of Application Accounting Exec Method List you can configure the following parameter Click Apply to check the content changed Parameter Overview Exec Method List Enter the name of th...

Page 310: ...k Delete to delete the entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Application Choose the application you use The options available are Console Telnet and SSH Level Choose the privilege level you use The range of values to choose is from 1 to 15 Command Method List Enter the name of the command method list you use ...

Page 311: ...n Method 1 Method 4 Choose the method list to use for this configuration The options available are as follows None This method specifies as the last method of a list Users are authenticated if the step for the authentication of the previous method is not denied Usually the method specifies as the last method of a list Enable Uses the local enable password for an auth entication Group Uses the serv...

Page 312: ... available are as follows None Users are authenticated if the step for the authentication of the previous method is not denied Usually the method specifies as the last method of a list Local Uses the local database for authentication Group Uses the server group which is defined by using the AAA group server command Enter the name of the AAA group server in the entry field displayed The number of c...

Page 313: ...ly to check the content changed Click the AAA Accounting System tab to display the following window Figure 9 25 Accounting Settings AAA Accounting System In the section of AAA Accounting System you can configure the following parameters Parameter Overview Default This parameter enables or disables the default method list Method 1 Method 4 Choose the method list to use for this configuration The op...

Page 314: ...y specified Click the AAA Accounting Command tab to display the following window Method 1 Method 4 Choose the method list to use for this configuration The options available are None Group RADIUS and TACACS The None option is available for the method 1 Parameter Overview Parameter Overview List Name Enter a method list name to use in the AAA Accounting Exec option Method 1 Method 4 Choose a method...

Page 315: ... If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Level Choose the privilege level you use The range of values to choose is from 1 to 15 level List Name Enter the method list name to use in the AAA Accounting Command option Method 1 Method 4 Choose the method list to use for this configuration The options available are None Group and TAC...

Page 316: ...ick Apply to check the content changed Parameter Overview Accept RADIUS Attribute This parameter enables or disables the acceptance of the RADIUS attribute From Port To Port Choose the port you use Guest VLAN This parameter enables or disables a Guest VLAN If this is enabled hosts are allowed to access to the guest VLAN without any authentication Guest VLAN ID Enter the guest VLAN ID whose range i...

Page 317: ...entication Status Table you can configure the following parameters Click Apply to check the content changed Click Find to search and display the entries based on the search condition specified Parameter Overview Authentication Aging Time Enter the value of time out of the MAC Web authentication session The range is from 0 to 65 535 minutes Sort By MAC If you choose this option an authentication se...

Page 318: ...nformation based on the condition specified Parameter Overview 2 Step Authentication Timeout Enter the time out value If this time passes the second step of an authentication is tried or attempted The range is from 0 to 65 535 minutes From Port To Port Choose the port you use 2 Step Authentication Mode Choose the 2 step authentication mode The options available are as follows MAC Web Both MAC and ...

Page 319: ... the change Parameter Overview Dead Time Enter the dead time value If the system implements an authentication by using an authentication server it attempts a server one by one If the server does not respond the system attempts the next server If the system finds a server that does not respond it marks the server as a down server to start the dead time timer The server on this state is skipped unti...

Page 320: ...ice 9 5 1 RADIUS Global Settings In the section of RADIUS Global IPv6 Source Interface you can configure the following parameter Click Apply to reflect the change Parameter Overview IPv6 RADIUS Source Interface Name Enter the name of the IPv6 RADIUS source interface ...

Page 321: ... port number value you use The range is from 0 to 65 535 By default the value is set to 1 812 If no authentication is used use the value of 0 Accounting Port Enter the accounting port number value you use The range is from 0 to 65 535 By default the value is set to 1 813 If no accounting is used use the value of 0 Retransmission Enter the value regarding the number of retransmissions The range is ...

Page 322: ...r Settings you can configure the following parameters Click Add to add new entries Click Show Detail to display details on the entry Click Delete to delete the entry specified Click Show Detail to display the following window Figure 9 34 RADIUS Group Server Settings Show Detail Parameter Overview Group Server Name Enter the name of a RADIUS group server The number of characters for the name can be...

Page 323: ...Apply to add a new entry Click Delete to delete the entry specified Click Back to return to the previous window Parameter Overview IPv4 RADIUS Source Interface Name Enter the name of the IPv4 RADIUS source interface IPv6 RADIUS Source Interface Name Enter the name of the IPv6 RADIUS source interface ...

Page 324: ...ADIUS Statistics you can configure the following parameter Click Clear the first one to clear the statistics information based on the condition specified Click Clear All to clear all the statistics information If two or more pages exist enter the page numbers Then click Go to move to a specific page Click Clear the second one to clear the statistics information on a table Parameter Overview Group ...

Page 325: ... the global settings which is associated with the TACACS function and display its settings Choose Security TACACS TACACS Global Settings to display the following window 画像なし Figure 9 36 TACACS Global Settings In the section of TACACS Global IPv4 Source Interface you can configure the following parameter Click Apply to reflect the change Parameter Overview IPv4 TACACS Source Interface Name Enter th...

Page 326: ...ick Apply to add a new entry Click Delete to delete the entry specified Parameter Overview IP Address Enter an IPv4 address of a TACACS server Port Enter the port number value you use The range is from 1 to 65 535 By default the value is set to 49 Time out Enter the value of time out The range is from 1 to 255 seconds By default the value is set to 5 seconds Key Type Choose the key type you use Th...

Page 327: ...on of the TACACS Group Servers Settings you can configure the following parameters Click Add to add new entries Click Show Detail to display details on the entry Click Delete to delete the entry specified Click Show Detail to display the following window Figure 9 39 TACACS Group Servers Settings Show Detail Parameter Overview Name of Group Servers Enter the name of a TACACS Group server The number...

Page 328: ...ngs on Group Servers you can configure the following parameter Click Apply to add a new entry Click Delete to delete the entry specified Click Back to return to the previous window Parameter Overview IPv4 TACACS Source Interface Name Enter the name of an IPv4 TACACS source interface ...

Page 329: ...Statistics In the section of the TACACS Statistics you can configure the following parameter Click the first Clear button to clear the statistics information based on the condition specified Click Clear All to clear all the statistics information Click the second Clear button to clear the statistics information on the specified entry Parameter Overview Name of Group Servers Choose the name of a TA...

Page 330: ...rameters Click Apply to reflect the change Parameter Overview DHCP Snooping This parameter enables or disables to set DHCP Snooping to global Information Option Allow Untrusted This parameter enables or disables the option globally to allow DHCP packets where the relay option 82 is configured on the untrusted interface Source MAC Verification This parameter enables or disables a verification a sou...

Page 331: ...er Overview From Port To Port Choose the port you use Entry Limit Enter the entry limit value The range is from 0 to 508 If you set No Limit to on the function becomes disabled Bandwidth Limit Rate Limit Enter the value of bandwidth limitation The range is from 1 to 300 If you set No Limit to on the function becomes disabled Trusted Choose the trusted option The options available are No and Yes Th...

Page 332: ...o display the following window Figure 9 43 DHCP Snooping VLAN Settings In the section of DHCP Snooping VLAN Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview VID List Enter a VLAN ID to use it You can enter its consecutive VLAN IDs by delimiting with a comma or enter the range of VLAN IDs by delimiting with a hyphen The range is from 1 to 4 09...

Page 333: ... Click Reset to reset the DHCP Snooping database Click Apply to reflect the change In the section of Store DHCP Snooping Database you can configure the following parameter Click Reset to reset the stored DHCP Snooping database Click Apply to store or save the DHCP Snooping database Parameter Overview Write Delay Enter the write delay time value The range is from 60 to 86 400 seconds By default the...

Page 334: ...can configure the following parameter Click Apply to load the DHCP Snooping database Click Clear to clear the counter information a Parameter Overview URL Choose a location from the drop down list and enter the URL for loading the DHCP Snooping database The locations to choose are TFTP FTP and Local ...

Page 335: ... Snooping Manual Binding you can configure the following parameters Click Add to add new entries Click Delete to delete the entry specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview MAC Address Enter a MAC address of the DHCP Snooping binding entry VID Enter the VLAN ID you use The range is from 1 to 4 094 IP Address Enter an IP a...

Page 336: ...on ARP Access List to display the following window Figure 9 46 ARP Access List In the section of the ARP Access List you can configure the following parameter ｓ Click Add to add new entries Click Edit to edit the configuration of the entry specified Click Delete to delete the entry specified Click Edit to display the following window Parameter Overview ARP Access List Name Enter the name of the AR...

Page 337: ... IP Choose the type of the sender IP address you use The options available are Any Host and IP and Mask Sender IP If you choose Host or IP and Mask as the IP type enter a sender IP address Sender IP Mask If you choose the IP and Mask option as the IP type enter a sender IP mask MAC Choose the sender MAC address type you use The options available are Optional Host and MAC and Mask Sender MAC If you...

Page 338: ...RP Inspection Items you can configure the following parameters Parameter Overview Src MAC This parameter enables or disables the source MAC option The option checks ARP requests response packets and the consistency between a source MAC address in the Ethernet header and a sender MAC address of the ARP payload Dst MAC This parameter enables or disables the destination MAC option The option checks A...

Page 339: ...fied Packets whose destinations are these IP addresses e g 0 0 0 0 and 255 255 255 255 and all the IP multicast addresses are dropped The sender IP addresses are checked by all the ARP requests and responses Target IP addresses are checked by ARP responses Parameter Overview VID List Enter the VLAN ID you use You can enter its consecutive VLAN IDs by delimiting with a comma or enter the range of V...

Page 340: ... 7 1 2 2 ARP Inspection Settings Click Add to add new entries Click Delete to delete entries based on the information specified If two or more pages exist enter the page numbers Then click Go to move to a specific page ...

Page 341: ...9 49 ARP Inspection Port Settings You can configure the following parameters Click Apply to reflect the change Click Default Configuration to set the trust state to the default settings Parameter Overview From Port To Port Choose the port you use Rate Limit Enter the value of rate limit The range is from 1 to 150 packets per second Burst Interval Enter the value of a burst interval The range is fr...

Page 342: ...dow Figure 9 50 ARP Inspection Statistics Information You can configure the following parameter Click Clear by VLAN to clear the statistics information about the VLAN specified Click Clear All to clear all the statistics information If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview VID List Enter the VLAN ID you use You can enter its cons...

Page 343: ...on Log to display the following window Figure 9 51 ARP Inspection Log In the section of ARP Inspection Log you can configure the following parameter Click Apply to reflect the change Click Clear Log to clear the ARP inspection log If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview Log Buffer Enter the log buffer size value The range is fro...

Page 344: ... display the following window Figure 9 52 IP Source Guard Port Settings You can configure the following parameters Click Apply to add a new entry Parameter Overview From Port to Port from the Beggining to the End Choose the port you use State This parameter enables or disables the state of the IP source guard for the port specified Verification Choose a verification method of using The options ava...

Page 345: ...rce Guard Binding to display the following window Figure 9 53 IP Source Guard Binding In the section of the settings on IP Source Binding you can configure the following parameters Click Apply to reflect the change Parameter Overview MAC Address Enter a MAC address of the binding entry VID Enter the VLAN ID you use The range is from 1 to 4 094 IP Address Enter an IP address of the binding entry Fr...

Page 346: ... specific page Parameter Overview From Port To Port Choose the port you use IP Address Enter an IP address of the binding entry MAC Address Enter a MAC address of the binding entry VID Enter the VLAN ID you use The range is from 1 to 4 094 Type Choose a type of binding entries for searching The options available are as follows All displays all the DHCP binding entries DHCP Snooping displays the IP...

Page 347: ...IPv4 IP Source Guard IP Source Guard HW Entry to display the following window Figure 9 54 IP Source Guard HW Entry You can configure the following parameter Click Find to search and display the entries based on the search condition specified If two or more pages exist enter the page numbers Then click Go to move to a specific page Parameter Overview From Port To Port Choose the port you use ...

Page 348: ...se Security BPDU Guard to display the following window Figure 9 55 BPDU Guard In the section of BPDU Guard Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview BPDU Guard State This parameter enables or disables to set a BPDU guard function to global BPDU Guard Trap State This parameter enables or disables the BPDU guard trap state ...

Page 349: ...arameter enables or disables the BPDU guard on the port specified Mode Choose the BPDU guard mode to be applied to the port specified The options available are as follows Drop drops all the received BPDU packets when detecting attacks on the port Block drops all the packets including BPDU and normal packets when detecting attacks on the port Shutdown shut downs the port when a network device detec...

Page 350: ...figure the following parameters Click Apply to reflect the change Parameter Overview From Port To Port Choose the port you use NetBIOS Filtering State This parameter enables or disables the NetBios filtering state on the port specified Use this to permit or deny NetBIOS packets on the physical port Extensive NetBIOS Filtering State This parameter enables or disables the state of the extensive NetB...

Page 351: ...arameter Click Apply to reflect the change In the section of MAC Format Settings you can configure the following parameters Parameter Overview MAC Authentication State This parameter enables or disables to set a function of MAC authentication to global Parameter Overview Case Choose the format of characters to use for a MAC address The options available are as follows Capital Letters Uses the form...

Page 352: ...AA BB CC DD EE FF None does not use a delimiter for a MAC address e g AABBCCDDEEFF Delimiter Characters Choose the number of delimiters to use for a MAC address The options available are as follows 2 uses one delimiter for a MAC address e g AABBCC DDEEFF 4 uses two delimiters for a MAC address e g AABB CCDD EEFF 6 uses five delimiters for a MAC address e g AA BB CC DD EE FF Parameter Overview Para...

Page 353: ...of Global Settings you can configure the following parameter Click Apply to reflect the change In the section of Authentication Port Settings you can configure the following parameters Click Apply to reflect the change In the section of Authentication Settings you can configure the following parameters Parameter Overview Authentication State This parameter enables or disables to set a Web authenti...

Page 354: ...d to ICMP packets or ARQ requests The IPv4 address for a virtual IPv4 address and a switch needs to use a different subnet The virtual IPv4 address is an indispensable component for the normal operation of the Web authentication HTTP Port Number Enter the port number value of HTTP TCP UDP The range is from 1 to 65 535 By default the value is set to 80 HTTP stands for Hypertext Transfer Protocol Re...

Page 355: ...ta An image file in the progress of using being uploaded is displayed The file can be transferred up to 512KB Click Delete Logo to delete an existing image file Page Title Enter the page title message of a custom The number of characters can be up to 64 for that You can type Japanese on it User Name String Enter the user name title of a custom The number of characters can be up to 32 for that You ...

Page 356: ...new logo Click Apply to reflect the change Description Enter a description message of a custom The number of characters can be up to 256 for it Either Japanese typing or the following HTML tag is available a b i u center right left font h1 h5 div span br p Parameter Overview ...

Page 357: ...gure 9 60 Trusted Host In the section of the Trusted Host you can configure the following parameters Click Apply to add a new entry Click Delete to delete the entry specified Parameter Overview ACL Name Enter the name of ACL The number of characters for the name can be up to 32 Type Enter the type of the trusted host The options available are Telnet SSH Ping HTTP and HTTPS Hyper Text Transfer Prot...

Page 358: ... of Storm Control Polling Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview Polling Interval Enter the value regarding a polling interval to use The range is from 5 to 600 seconds By default the value is 5 seconds Shutdown Retries Enter the value regarding the number of shutdown retrials The range is from 0 to 360 By default the value is 3 If ...

Page 359: ...n action to do The options available are as follows None Does not filter storm packets Shutdown Shutdowns a port when reaching the value which is specified for the rising threshold Drop Drops the packets which exceed the high threshold Level Type Choose the level type option The options available are PPS Packets Per Second Kbps and Level PPS Rise Enter the value of PPS rise This option specifies t...

Page 360: ...option specifies the rising threshold with the rate the number of kilo bits per second The rate receives traffics on the port The range is from 1 to 2 147 483 647 Kbps KBPS Low Enter the value of Kbps low This option specifies the low threshold on the rate the number of kilo bits per second The rate receives traffics on the port The range is from 1 to 2 147 483 647 Kbps If you do not specify the v...

Page 361: ...tion specifies the rising threshold with a percent to all the bandwidth per port which receives traffics The range is from 1 to 100 Level Low Enter the value of level low This option specifies the low threshold with a percent to all the bandwidth per port which receives traffics The range is from 1 to 100 If you do not specify the value of level low the value equivalent to 80 of the specified risi...

Page 362: ... the following parameters Click Apply to reflect the change Parameter Overview IP SSH Server State This parameter enables or disables to set an SSH server to global IP SSH Service Port Enter the SSH service port number value to use The range is from 1 to 65 535 By default the value is set to 22 Authentication Timeout Enter the value of an authentication time out The range is from 30 to 600 seconds...

Page 363: ...d Click Delete to delete a host key based on the content selected In the section of Host key you can configure the following parameter Parameter Overview Encryption Type Choose the encryption key type to use The options available are RSA Rivest Shamir Adleman key type and DSA Digital Signature Algorithm key type Key Module Choose the value of a key module The values to choose are those bits 360 51...

Page 364: ...Connection 9 14 3 SSH Server Connection Use the following window to display the SSH server connection table and its information Choose Security SSH SSH Server Connection to display the following window Figure 9 66 SSH Server Connection ...

Page 365: ...c page Parameter Overview User Name Enter the user name of an SSH user account The number of characters for this can be up to 32 Authentication Method Choose the SSH authentication method The options available are Password Public Key and Host based Key File If you choose Public Key or Host based enter the public key The number of characters for this can be up to 779 Host Name If you choose a host ...

Page 366: ...ect the change In the section of Import File you can configure the following parameters Click Apply to import an SSL file Parameter Overview SSL Status This parameter enables or disables to set the SSL function to global Service Policy Enter the name of the service policy The number of characters for the name can be up to 32 Parameter Overview File Select Select a file type to upload The options a...

Page 367: ...r Overview Trustpoint Enter the name of the trustpoint which is associated with a certificate and key pair imported The number of characters for the name can be up to 32 File System Path Enter a file system path of a certificate and a key pair Password Enter an encrypted password phrase to use for decrypting when a private key is imported The number of characters for the password phrase can be up ...

Page 368: ...he entries based on the search condition specified Parameter Overview Policy Name Enter the name of the SSL service policy The number of characters for the name can be up to 32 Version Choose a version of Transport Layer Security TLC The options available are TLS 1 0 TLS 1 1 and TLS 1 2 Session Cache Time out Enter the time out value of a session cache The range is from 60 to 86 400 seconds By def...

Page 369: ...367 9 Security 9 15 3 SSL Service Policy Click Edit to edit the configuration of the entry specified Click Delete to delete the entry specified ...

Page 370: ...oose OAM Cable Diagnostics to display the following window Figure 10 1 Cable Diagnostics In the section of Cable Diagnostics you can configure the following parameter Click Test to start the cable diagnostic test on the port s specified Click Clear All to clear all the results regarding the cable diagnostic Click Clear to clear the result for the cable diagnostic of the port specified Parameter Ov...

Page 371: ...cified and to display the settings Choose DDM DDM Settings to display the following window Figure 10 2 DDM Settings In the section of DDM Global Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview Transceiver Monitoring Traps Alarm This parameter enables and disables the transmission of the transceiver monitoring traps alarm Transceiver Monitori...

Page 372: ... enables or disables a DDM function on the port specified Shutdown Choose the shutdown operation The value and option to choose are as follows Alarm This option allows you to shutdown a port when the value exceeds the range of the alarm threshold configured Warning This option allows you to shutdown a port when the value exceeds the range of the warning threshold configured None This option does n...

Page 373: ...display the following window Figure 10 3 DDM Temperature Threshold Settings In the section of DDM Temperature Threshold Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview Port Choose the port you use Action Choose an action to execute The options available are Add and Delete Type Choose the type of the temperature threshold The options availabl...

Page 374: ...y the following window Figure 10 4 DDM Voltage Threshold Settings In the section of DDM Voltage Threshold Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview Port Choose the port you use Action Choose an action to execute The options available are Add and Delete Type Choose the type of the voltage threshold The options available are Low Alarm Lo...

Page 375: ...ay the following window Figure 10 5 DDM Bias Current Threshold Settings In the section of the settings on DDM Bias Current Threshold you can configure the following parameters Click Apply to reflect the change Parameter Overview Port Choose the port you use Action Choose an action to execute The options available are Add and Delete Type Choose a type of a bias current threshold The options availab...

Page 376: ...Threshold Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview Port Choose the port you use Action Choose the action you perform The options available are Add and Delete Type Choose the threshold type of a transmission power The options available are Low Alarm Low Warning High Alarm and High Warning Power Unit Choose the power unit The options av...

Page 377: ...f DDM RX Power Threshold Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview Port Choose the port you use Action Choose an action to be executed The options available are Add and Delete Type Choose the type of RX power threshold The options available are Low Alarm Low Warning High Alarm and High Warning Power Unit Choose the power unit The optio...

Page 378: ...ration Management 10 2 7 DDM Status Table 10 2 7 DDM Status Table Use the following window to display the DDM status table and its information Choose DDM DDM Status Table to display the following window Figure 10 8 DDM Status Table ...

Page 379: ...Choose OAM Ethernet OAM Ethernet OAM Configuration to display the following window Figure 10 9 Ethernet OAM Configuration In the section of Ethernet OAM Configuration you can configure the following parameters Parameter Overview Threshold of CRC Errors for Receiving Frames High This parameter displays the upper threshold of the threshold of error frames with CRC errors The range is from 1 to 65 53...

Page 380: ...ion information on the Ethernet OAM Threshold of CRC Errors for Receiving Frames Low This parameter displays the lower threshold of the threshold of error frames with CRC errors exist The range is from 0 to 65 535 The default is one Window for the Threshold of CRC Errors for Receiving Frames This parameter displays the window size of the polling period The range is from 10 to 1 800 The default is ...

Page 381: ...s enabled or disabled Remote MAC Address This parameter displays a remote MAC address of the Internet OAM settings Port This parameter displays the port of the Internet OAM settings Administrator Status This parameter displays if the Internet OAM settings is enabled or disabled Mode This parameter displays if the Internet OAM mode is active or passive The default is active Remote Loop back This pa...

Page 382: ...rview Port This parameter displays the port of the Internet OAM settings OAMPDUTX This parameter displays the number of transmissions for OAM PDU OAMPDURX This parameter displays the number of receptions for OAM PDU Local Failure This parameter displays the number of failures to occur regarding local clients Remote Failure This parameter displays the number of failures to occur of remote clients L...

Page 383: ...isplays a port of the statistics details OAMPDUTX Information This parameter displays the number of transmissions for information OAM PDU OAMPDURX Information This parameter displays the number of receptions for information OAM PDU OAM PDU TX Event Notification This parameter displays the number of transmissions for event notification PDU OAM PDU RX Event Notification This parameter displays the n...

Page 384: ...ays the number of receptions for unsupported PDU Link Failure Record This parameter displays the number of link failures to occur Serious Failure Record This parameter displays the number of dying gasps to occur Error Frame Record This parameter displays the number of error frames Error Frame Period Record This parameter displays a measurement interval of error frames Frame Period Record This para...

Page 385: ... CFM CFM Status to display the following window Figure 10 13 CFM Status Settings In the section of CFM Status you can configure the following parameters Click Apply Create to reflect the change Parameter Overview CFM Status This parameter displays if CFM is enabled or disabled CFM Domain Table You can specify a domain name maintenance domain MD using characters within 43 characters ...

Page 386: ...following window Figure 10 14 CFM Maintenance Intermediate Point In the section of CFM Maintenance Intermediate Point you can configure the following parameters Click Apply to reflect the change Parameter Overview Port This parameter displays a port Level This parameter specifies an MD domain level The range is from 0 to 7 MA Service Name This parameter displays the name of MA maintenance associat...

Page 387: ... following parameters Click Apply to reflect the change Parameter Overview MEPID This parameter displays an ID of MEP Maintenance End Point The range is from 1 to 8191 Port This parameter displays a port Level This parameter displays an MEP level The range is from 0 to 7 MA Service This parameter displays a service name VLAN This parameter displays a VLAN Direction This parameter displays an input...

Page 388: ...e section of the CFM Maintenance Association you can configure the following parameters Click Create to reflect the change Parameter Overview Maintenance Domain Name This parameter displays the name of a maintenance domain Level This parameter displays a maintenance level Maintenance Association Name This parameter displays the name of maintenance association within 12 characters CC Interval This ...

Page 389: ...f CFM loop back Choose CFM CFM Loop back to display the following window Figure 10 17 CFM Loop back In the section of CFM Loop back you can configure the following parameters Click Apply to reflect the change Parameter Overview MAC Address This parameter displays a MAC address MEPDID This parameter displays MEPID The range is from 1 to 8 191 ...

Page 390: ...CFM linktrace Choose CFM CFM Linktrace to display the following window Figure 10 18 CFM Linktrace Settings In the section of CFM Linktrace you can configure the following parameters Click Apply to reflect the change Parameter Overview MAC Address This parameter displays a MAC address MEPDID This parameter displays MEPID The range is from 1 to 8 191 ...

Page 391: ...ose Monitoring Utilization Port Utilization to display the following window Figure 11 1 Port Utilization In the section of the Port Utilization you can configure the following parameter Click Find to display the port utilization information regarding the specified port s Click Refresh to refresh the information displayed in the table above Parameter Overview From Port To Port Choose the port you u...

Page 392: ...toring Statistics Port to display the following window Figure 11 2 Port In the section of Port you can configure the following parameter Click Find to display the statistics information about the port specified Click Refresh to refresh the information displayed in a table Click Show Detail to display the details about the entry Parameter Overview From Port To Port Choose the port you use ...

Page 393: ...ing 11 2 Statistics 11 2 1 Port Click Show Detail to display the following window Figure 11 3 Port Show Detail Click Back to return to the previous window Click Refresh to refresh the information displayed in a table ...

Page 394: ...ers to display the following window Figure 11 4 Interface Counters In the section of the Interface Counters you can configure the following parameter Click Find to display the interface counter regarding the specified port s Click Refresh to refresh the information displayed in a table Click Show Errors to display error details on this entry Parameter Overview From Port To Port Choose the port you...

Page 395: ... 2 2 Interface Counters Click Show Errors to display the following window Figure 11 5 Interface Counters Show Errors Click Back to return to the previous window Click Refresh to refresh the information displayed in a table ...

Page 396: ...nfigure the following parameter Click Find to display the information on the link change counters regarding the specified port s Click Refresh to refresh the information displayed in the table above Click Clear to clear the information on the link change counters regarding the specified port Click Clear ALL to clear information on all the link change counters Click Show Detail to display details o...

Page 397: ...ing 11 2 3 Counters Click Show Detail to display the following window Figure 11 7 Counters Show Detail Click Back to return to the previous window Click Refresh to refresh the information displayed in the table above ...

Page 398: ...re 11 8 Mirror Settings In the section of RSPAN VLAN Settings you can configure the following parameter Click Apply to add the new entry Click Delete to delete entries based on the information specified Parameter Overview VID List Enter the RSPAN VLAN ID you use You can enter its consecutive VLAN IDs by delimiting with a comma or you can enter the range of VLAN IDs by delimiting with a hyphen The ...

Page 399: ...nge of VID is from 2 to 4 094 Source Choose and configure the source settings on this port mirror entry Choose Port ACL or Remote VLAN of the source Port Choose the range of the port number by using From Port to To Port Choose a Frame Type The options to choose from the frame type is as follows oBoth Traffics of both reception and transmission direction are mirrored Traffics in both incoming and o...

Page 400: ... the entry Click Show Detail to display the following window Figure 11 9 Mirror Session Detail Show Detail Click Back to return to the previous window Parameter Overview Session Type Choose the mirror session type of information to be displayed The options available are All Sessions Session Number Remote Session and Local Session If you choose the Session Number option choose the session number fr...

Page 401: ...vice Use the following window to display the value of the current temperature measurement fan condition and power module state in a switch Choose Monitoring Device Environment to display the following window Figure 11 10 Device Environment ...

Page 402: ...ngs you can configure the following parameters Click Apply to reflect the change Parameter Overview From Port To Port Choose the port you use Power Saving Mode Choose the power saving mode to use on the port specified The options available are as follows Disabled Disables the power saving function Full Uses the power saving function maximally Half Uses half of the power saving function This applie...

Page 403: ...ort specified and display its settings Choose ECO Mode EEE to display the following window Figure 12 2 EEE In the section of EEE Settings you can configure the following parameters Click Apply to reflect the change Parameter Overview From Port To Port Choose the port you use State This parameter enables or disables an EEE function on the port specified ...

Page 404: ...se Mode 12 3 LED Base Mode Use the following window to display the settings on the LED base mode Choose OAM Echo Mode LED Base Mode State to display the following window Figure 12 3 LED Base Mode Click Apply to reflect the change ...

Page 405: ...collector is valid or invalid Collector IP This parameter displays the host IPv4 address which is used as the sFlow collector Collector UDP Port This parameter displays the port number of sFlow messages If not specified the port number is set to 6 343 as the default configuration The range is from 1 to 65 535 Sampler Rate Status This parameter displays if the settings on the sampler rate is enable...

Page 406: ...oller Interval Status This parameter displays if the settings on the sampler poller interval is enabled or disabled Sampler Poller interval This parameter displays the sampler poller interval unit seconds The range is from 0 to 86 400 If the number above is set to 0 the sFlow counter sample is not transmitted Sampler Poller Interface This parameter specifies the interface to enable the sFlow count...

Page 407: ... display the follo wing window Figure 14 1 Save Configuration In the section of Save Configuration you can configure the following parameter Click Apply to save the configuration 14 2 Tool 14 2 1 Firmware Upgrade Backup 14 2 1 1 Firmware Upgrade from HTTP Servers Use the following window to upgrade firmware in a switch by using HTTP from a local PC Choose Tools Firmware Upgrade Backup Firmware Upg...

Page 408: ...igure the following parameters Click Upgrade to start upgrading Parameter Overview Source File Click Browse to navigate to the location where a firmware file exists on the local PC for this upgrade Destination File Enter the destination path and location in the switch where new firmware is stored or saved The number of characters for this field can be up to 64 ...

Page 409: ...ck Upgrade to start upgrading Parameter Overview TFTP Server IP Enter an IP address of a TFTP server IPv4 Choose and enter an IPv4 address of a TFTP server IPv6 Choose and enter an IPv6 address of a TFTP server IPv6 Choose and enter an IPv6 address of a TFTP server Source File Enter the source file name and path of a firmware file in a TFTP server The number of characters for this field can be up ...

Page 410: ...view FTP Server IP Enter an IP address of the FTP server TCP Port 1 65535 Enter the TCP port of the FTP connection Username Enter the user name of the FTP connection The number of characters for the name can be up to 32 Password Enter the password of the FTP connection The number of characters for the name can be up to 15 Source File Enter the path and name of a source file of the firmware file ex...

Page 411: ... configure the following parameters Click Upgrade to start upgrading Parameter Overview RCP Server IP Enter an IP address of one RCP server User Name Enter a user name of the RCP connection The number of characters for the name can be up to 32 Source File Enter a source file name and path of a firmware file in an RCP server The number of characters for this field can be up to 64 Destination File E...

Page 412: ...HTTP Choose Tool Firmware Upgrade Backup Firmware Backup to HTTP Servers to display the following window Figure 14 6 Firmware Backup to HTTP Servers You can configure the following parameter Click the Backup button to start the backup Parameter Overview Source File Enter the source file name and path of a firmware file in a switch The number of characters for this field can be up to 64 ...

Page 413: ...nfigure the following parameters Click Backup to start performing a backup Parameter Overview TFTP Server IP Enter an IP address of a TFTP server IPv4 Choose and enter an IPv4 address of a TFTP server IPv6 Choose and enter an IPv6 address of a TFTP server Source File Enter the source file name and path of a firmware file in a switch The number of characters for this field can be up to 64 Destinati...

Page 414: ...view FTP Server IP Enter an IP address of an FTP server TCP Port 1 65535 Enter the TCP port of the FTP connection Username Enter the user name of the FTP connection The number of characters for the name can be up to 32 Password Enter the password of the FTP connection The number of characters for the name can be up to 15 Source File Enter the path and name of a source file of the firmware file exi...

Page 415: ...ure the following parameters Click Backup to start performing a backup Parameter Overview RCP Server IP Enter an IP address of the RCP server User Name Enter the user name of the RCP connection The number of characters for the name can be up to 32 Source File Enter the source file name and its path of a firmware file in a switch The number of characters for this field can be up to 64 Destination F...

Page 416: ...rs Click Restore to start restoring Parameter Overview Source File Click Browse to move to the location where a configuration file on the local PC exists for the purpose of this restoration Destination File Enter a destination path and a location in the switch where a configuration file is saved The number of characters for this field can be up to 64 If you choose the running config option the con...

Page 417: ... an IPv4 address of a TFTP server IPv6 Choose and enter an IPv6 address of a TFTP server Source File Enter the source file name and path of a configuration file in a TFTP server The number of characters for this field can be up to 64 Destination File Enter a destination path and a location in the switch where a configuration file is saved The number of characters for this field can be up to 64 If ...

Page 418: ...ection The number of characters for the name can be up to 32 Password Enter the password of the FTP connection The number of characters for the name can be up to 15 Source File Enter the path and name of a source file of a configuration file existing in an FTP server The number of characters for this field can be up to 64 Destination File Enter the destination path and its location on the switch w...

Page 419: ... Enter the user name of the RCP connection The number of characters for the name can be up to 32 Source File Enter the source file name and path of a configuration file in an RCP server The number of characters for this field can be up to 64 Destination File Enter the destination path and location in a switch that saves a configuration file The number of characters for this field can be up to 64 I...

Page 420: ... following window Figure 14 14 Configuration Backup to HTTP Servers You can configure the following parameter Click Backup to start performing a backup Parameter Overview Source File Enter the source file name and path of a configuration file in a switch The number of characters for this field can be up to 64 If you choose the running config option the configuration file being executed in a switch...

Page 421: ... Server IP Enter an IP address of a TFTP server IPv4 Choose and enter an IPv4 address of a TFTP server IPv6 Choose and enter an IPv6 address of a TFTP server Source File Enter the source file name and path of a configuration file in a switch The number of characters for this field can be up to 64 If you choose the running config option a backup of the configuration file being executed in a switch ...

Page 422: ...t of the FTP connection Username Enter the user name of the FTP connection The number of characters for the name can be up to 32 Password Enter the password of the FTP connection The number of characters for the name can be up to 15 Source File Enter the source file name and its path of a configuration file on a switch The number of characters for this field can be up to 64 If you choose the runni...

Page 423: ...r an IP address of an RCP server User Name Enter the user name of the RCP connection The number of characters for the name can be up to 32 Source File Enter the source file name and path of a configuration file in a switch The number of characters for this field can be up to 64 If you choose the running config option a backup of the configuration file being executed in a switch is made If you choo...

Page 424: ... PC by using HTTP Choose Tool Log Backup Log Backup to HTTP in the tool bar to display the following window Figure 14 18 Log Backup to HTTP You can configure the following parameter Click Backup to start performing a backup Parameter Overview Log Type Choose the log type which is backed up to the local PC by using HTTP System Log Ensures to back up system logs Attack Log Ensures to back up attack ...

Page 425: ...meters Click Backup to start performing a backup Parameter Overview TFTP Server IP Enter an IP address of a TFTP server IPv4 Choose and enter an IPv4 address of the TFTP server IPv6 Choose and enter an IPv6 address of the TFTP server Destination File Enter the destination path and location on the TFTP server where log files are saved The number of characters for this field can be up to 64 Log Type...

Page 426: ...s Click Backup to start performing a backup Parameter Overview RCP Server IP Enter an IP address of the RCP server User Name Enter the user name of the RCP connection The number of characters for the name can be up to 32 Destination File Enter the destination path and location on the RCP server where a log file is saved or stored The number of characters for this field can be up to 64 Log Type Cho...

Page 427: ...he tool bar to display the following window Figure 14 21 Ping In the section of Ping Access Class you can configure the following parameters Click Apply to use the access control list selected Parameter Overview ACL Name Enter the ACL name you use The number of characters for the name can be up to 32 Click Please Select to choose the existing ACL from a related list Action Choose the action you ta...

Page 428: ... a source IPv4 address If two or more IPv4 addresses are allocated to a switch you can enter one of them The IPv4 address entered is used as the source IPv4 address of packets which are transmitted to a remote host Parameter Overview Target IPv6 Address Choose and enter a destination IPv6 address Domain Name Choose and enter the name of a destination domain The number of characters for this can be...

Page 429: ...e 14 22 Ping Result Click Stop to stop the ping process Click Back to return to the previous ping window Click Please Select to display the following window Figure 14 23 Ping Please Select If two or more pages exist enter the page numbers Then click Go to move to a specific page Click OK to use the access control list selected ...

Page 430: ... Name Choose and enter the domain name of a destination The number of characters for it can be up to 255 Max TTL Enter the maximum value for Time To Live TTL of the trace route request This is the maximum number of routers which allow trace route packets to pass or flow The trace route option passes while investigating the network path between two devices The range is from 1 to 255 hops Port Enter...

Page 431: ...stination domain name The number of characters for it can be up to 255 Max TTL Enter the maximum value of TTL of a trace route request This is the maximum number of routers where trace route packets can pass The trace route option passes when seeking the network path between two devices The range is from1 to 255 hops Port Enter the port number whose range is from 1 to 65 535 Time out Enter the tim...

Page 432: ...bar to display the following window Figure 14 26 Reset You can configure the following parameter Click Apply to reset to the factory default settings Parameter Overview Reset Choose one of the following reset options Your switch is reset to the factory default settings to restart This option excludes an IP Address from the reset target Your switch is reset to the factory default settings but does ...

Page 433: ...ous reboot or power on becomes lost if the changes were not saved during the last time Choose Tools Reboot System from the tool bar to display the following window Figure 14 27 Reboot System Click Yes to save the new configurations changed before rebooting Click No to discard the new configurations changed before rebooting Click Reboot to reboot the device ...

Page 434: ...432 14 Tool Bar 14 3 Language 14 3 Language Choose a language of Web UI By default you can choose either English or Japanese Choose a language as illustrated in the screen below Figure 14 28 Language ...

Page 435: ...433 14 Tool Bar 14 4 Log Out 14 4 Log Out Click Log Out on the tool bar to log out from Web UI of a switch Figure 14 29 Log Out ...

Page 436: ... vid the VLAN ID to be allowed Information 2 Overview of events a 802 1X authentication failure occurs Log message 802 1X method Rejected user username macaddr on Port portNum Overview of parameters method indicates either local or RADIUS username the user to be authenticated macaddr a MAC address of a device to be authenticated portNum the port number of a switch Notice 3 Overview of events as th...

Page 437: ...f events session timed out Log message Console Telnet session timed out Username username IP ipaddr ipv6address Overview of parameters ipaddr indicates an IP address username indicates a user name ipv6address indicates an IPv6 address Information 5 Overview of events an SSH server is enabled Log message SSH server is enabled Information 6 Overview of events an SSH server is disabled Log message SS...

Page 438: ...s ipaddr indicates an IP address ipv6address indicates an IPv6 address username indicates a user name Warning 12 Overview of events the migration of administrative privileges failed because of the AAA local authentication or AAA server authentication Log message Enable Admin failed through Console Telnet SSH from ipaddr ipv6address authenticated by AAA local server ipaddr ipv6address Username user...

Page 439: ...led through Console Telnet SSH from ipaddr ipv6address authenticated by AAA local server ipaddr ipv6address Username username Overview of parameters local specifies an AAA local authentication server specifies an AAA server authentication ipaddr indicates an IP address ipv6address indicates an IPv6 address username indicates a user name Warning ID Overview of Logs Severity ...

Page 440: ...evice IP ipaddr MAC macaddr Port portNum Interface ipif_name Overview of parameters ipaddr duplicated IP addresses with the device in the progress of being used macaddr a MAC address of a device with an IP address that overlaps with the device in use portNum this indicates an integer and the logical port number of a device ipif_name the interface name of a switch with a conflicting IP address Warn...

Page 441: ...t portNum Overview of parameters method indicates either local or RADIUS username the user that is being rejected macaddr a MAC address of a device to be authenticated portNum the port number of a switch Notice 4 Overview of events MAC 802 1X authenticaiton failures Log message MAC 802 1X method Rejected at MAC auth macaddr on Port portNum Overview of parameters method indicates either local or RA...

Page 442: ...ures Log message 802 1X WEB method Rejected at WEB auth user username macaddr on Port portNum Overview of parameters method indicates either local or RADIUS username indicates rejected users macaddr a MAC address of a device to be authenticated portNum the port number of a switch Notice ID Overview of Logs Severity ...

Page 443: ...he current condition regarding BPDU Information 2 Overview of events recovering from BPDU attacks automatically is successful Log message Port portNum recovers from BPDU under attacking state automatically Overview of parameters portNum indicates the port number Information 3 Overview of events recovering from BPDU attacks manually is successful Log message Port portNum recovers from BPDU under at...

Page 444: ...w of parameters username the account name that has executed this command command str the command strings which is executed successfully and makes a change to a switch configuration line this parameter indicates the line mode which executes these commands e g console telnet and SSH ip address optional If you type the command from a remote terminal e g telnet and SSH this parameter is needed Informa...

Page 445: ...nt IP address macaddr indicates a client MAC address serverIP indicates a server IP address pathFile indicates a path and the name of a file on a server Warning 3 Overview of events uploading firmware is successful Log message Firmware uploaded by session successfully Username username IP ipaddr MAC macaddr Server IP serverIP File Name pathFile Overview of parameters session indicates a user sessi...

Page 446: ...Username username IP ipaddr MAC macaddr Server IP serverIP File Name pathFile Overview of parameters session indicates a user session username indicates a current log in user ipaddr indicates a client IP address macaddr indicates a client MAC address serverIP indicates a server IP address pathFile indicates a path and the name of a file on a server Information 8 Overview of events a failure of upl...

Page 447: ...tes a current log in user ipaddr indicates a client IP address macaddr indicates a client MAC address Information 11 Overview of events a failure of uploading log messages occurs Log message Log message uploaded by session unsuccessfully Username username IP ipaddr MAC macaddr Overview of parameters session indicates a user session username indicates a current log in user ipaddr indicates a client...

Page 448: ...iew of parameters ipv6address indicates an IPv6 address in neighbor solicitation messages interface id indicates a port interface ID Warning 2 Overview of events as DUT receives Neighbor Advertisement NA messages with duplicated addresses during the DAD period logs are added Log message duplicate address ipv6address on interface id via receiving neighbor advertisement messages Overview of paramete...

Page 449: ...g the alarm threshold exists Log message optical transceiver interface id component high low alarm threshold exceeded Overview of parameters interface id indicates a port interface ID component DDM threshold type one of the following can be this type Temperature Supply voltage Bias current Transmission power Reception power high low indicates the upper threshold or lower threshold Critical 3 Overv...

Page 450: ...everity 1 Overview of events as a vital error of a system occurs you need to restart the system Log message system re start reason system fatal error Urgent 2 Overview of events as an exception of CPU occurs you need to restart the system Log message system re start reason CPU exception Urgent ...

Page 451: ...address obtained from a DHCPv6 server is successful Log message an IPv6 address ipv6address on interface ipif name renews success Overview of parameters ipv6address the IPv6 address obtained from a DHCPv6 server ipif name the name of the DHCPv6 client interface Information 5 Overview of events started to rebind the IPv6 address which is obtained from a DHCPv6 server Log message an IPv6 address ipv...

Page 452: ...gation router is successful Log message an IPv6 prefix ipv6networkaddr on interface intf name renews success Overview of parameters ipv6anetworkaddr the IPv6 prefix obtained from a delegation router intf name the name of the DHCPv6 client PD interface Information 12 Overview of events started to rebind the IPv6 prefix which is obtained from a delegation router Log message an IPv6 prefix ipv6networ...

Page 453: ...ip address indicates an IP address mac address indicates a MAC address vlan id indicates a VLAN ID interface id indicates the interface number Warning 2 Overview of events this log is generated if ARP packets with enabled DAI are detected Log message Legal ARP type packets IP ip address MAC mac address VLAN vlan id on interface id Overview of parameters type ARP packet type This indicates that the...

Page 454: ...t becomes link up Log message Port port link up nway Overview of parameters Port indicates the logical port number nway indicates the link speed and duplex mode Information 2 Overview of events the port becomes link down Log message Port port link down Overview of parameters Port indicates the logical port number Information ...

Page 455: ...ew of Parameters port indicates the logical port number Information 3 Overview of Events the power supply for PoE has exceeded the threshold Log Message Usage power is above the threshold Information 4 Overview of Events the PoE power supply becomes lowered to the value which is less than the threshold after exceeding the threshold Log Message Usage power is below the threshold Information 5 Overv...

Page 456: ...oE Scheduler Overview of Parameters port indicates the logical port number Warning 2 Overview of Events the PoE scheduler has set the PoE power supply to OFF Log Message PoE PoE port is changed to OFF by PoE Scheduler Overview of Parameters port indicates the logical port number Warning 3 Overview of Events the PoE scheduler has set the PoE power supply to OFF ON Log Message PoE PoE port is reset ...

Page 457: ...ed Log Message Detect equipment failure by ICMP IP Overview of Parameters IP indicates an IP address Information 3 Overview of events After monitoring LLDP an abnormality of a PoE terminal is detected Log Message Detect equipment failure by LLDP Port port Overview of Parameters port indicates the logical port number Information 4 Overview of events monitoring traffics After monitoring traffics an ...

Page 458: ... hardware rule resources for setting DHCP Snooping entry to an IPSG table do not exist Log message Failed to set IPSG entry due to no hardware rule resources IP IPADDR MAC MACADDR VID VLANID Interface INTERFACE ID Overview of parameters ipaddr indicates an IP address Macaddr indicates a MAC address VLANID indicates a VLAN ID INTERFACE ID indicates the interface number Warning ...

Page 459: ...Class Overview of parameters portNum indicates the port number chassisType indicates a sub type of chassis Value list 1 chassisComponent 1 2 interfaceAlias 2 3 portComponent 3 4 macAddress 4 5 networkAddress 5 6 interfaceName 6 7 local 7 chassisID indicates a chassis ID portType indicates the port ID sub type value list 1 interfaceAlias 1 2 portComponent 2 3 macAddress 3 4 networkAddress 4 5 inter...

Page 460: ...me 5 6 agentCircuitId 6 7 local 7 portID indicates a port ID deviceClass indicates the LLDP MED device type Notice 3 Overview of events a network device has detected the incompatible LLDP MED TLV set Log message the incompatible LLDP MED TLV set is detected on port portNum chassis id chassisType chassisID port id portType portID device class deviceClass Overview of parameters portNum indicates the...

Page 461: ... becomes link down Information 3 Overview of events a member port belongs to a link aggregation group Log Message ifname attach to Link Aggregation Group group_id Overview of Parameters ifname the interface name of ports that belong to an aggregation group group_id a group ID of the aggregation group where a port belongs to Information 4 Overview of events a member port has deactivated to belong t...

Page 462: ...ge the loop detected on port port channel portNum Overview of parameters portNum indicates the port number or an LACP interface ID Warning 3 Overview of events a loop is detected between a port and an LACP interface Log message the loop detected between port port channel portNum and port port channel portNum Overview of parameters portNum indicates the port number or port channel number Warning 4 ...

Page 463: ...icates the VLAN ID allowed Information 2 Overview of events a MAC authentication failed Log message MAC method Rejected macaddr on Port portNum Overview of parameters method indicates either local or RADIUS macaddr indicates a MAC address of a device to be authenticated portNum indicates the port number of a switch Notice 3 Overview of events as a MAC authentication table is full and a new address...

Page 464: ... id interface id Overview of parameters instance id indicates an instance ID interface id indicates a port ID Notice 6 Overview of events the state of a spanning tree port becomes changed Log message spanning tree port status change Instance instance id interface id old status new status Overview of parameters instance id indicates an instance ID interface id indicates a port ID old_status the sta...

Page 465: ...s deleted Log message spanning tree MST configuration ID VLAN mapping table change instance instance id delete vlan startvlanid endvlanid Overview of parameters instance id indicates an instance ID startvlanid endvlanid indicates a VLAN list Information 13 Overview of events a VLAN mapping table of a spanning tree MST configuration ID is added Log message spanning tree MST configuration ID VLAN ma...

Page 466: ...on a port Log message MAC address mac address causes the port security violation on interface id Overview of parameters macaddr indicates a violative MAC address interface id the interface on which the violation occurs Warning 2 Overview of events an address is full on a system Log message limit on system entry number has been exceeded Warning ...

Page 467: ...ed if RADIUS allocates the effective priority attribute Log message RADIUS server server ip assigned 802 1p default priority priority to port interface id Username username Overview of parameters server ip indicates an IP address of a RADIUS server priority the priority which is allowed and allocated by a RADIUS server interface id indicates the client port number which is authenticated username i...

Page 468: ...erview of events the RRP state of a transit node becomes changed to Link Up Log message RRP ring status was changed to link up Warning 5 Overview of events the RRP state of a transit node becomes changed to Link Down Log message RRP ring status was changed to link down Notice 6 Overview of events the RRP state of a transit node becomes changed to Pre Forwarding Log message RRP ring status was chan...

Page 469: ...ID Overview of Logs Severity 1 Overview of events an SNMP request including the invalid community strings is received Log message SNMP request received from ipaddr with invalid community string Overview of parameters ipaddr indicates an IP address Information ...

Page 470: ...le Username username Overview of parameters username indicates a user name Information 3 Overview of events a system configuration is stored remotely Log message Configuration saved to flash Username user name IP ipaddr username indicates a user name ipaddr indicates an IP address Information 4 Overview of events as the power of a system turned on to start up Log message System cold start Critical...

Page 471: ... Overview of parameters ipaddr indicates an IP address of Telnet client username indicates the user name which is used to log into a Telnet server Warning 3 Overview of events logged out with Telnet Log message logout through Telnet Username username IP ipaddr Overview of parameters ipaddr indicates an IP address of Telnet client username indicates the user name which is used to log into a Telnet ...

Page 472: ...ure temperature Overview of parameters unitID indicates a unit ID sensorID indicates a sensor ID temperature indicates a the current temperature of a sensor Critical 2 Overview of events the temperature has been recovered to a normal temperature Log message Unit unitID Sensor sensorID temperature back to normal Overview of parameters unitID indicates a unit ID sensorID indicates a sensor ID temper...

Page 473: ...ng 2 Overview of events a storm of Broadcast Multicast or Unicast storm is cleared Log message Broadcast Multicast Unicast storm is cleared on interface id Overview of parameters interface id indicates the interface ID where a storm is cleared Information 3 Overview of events the port shutdown has occurred because of a packet storm Log message interface id is currently shut down due to the Broadca...

Page 474: ...2 Overview of events the interface of the automatic voice VLAN mode participates in the voice VLAN Log message interface id add into voice VLAN vid Overview of parameters interface id indicates the name of an interface vid indicates a VLAN ID Information 3 Overview of events this log message is sent if an interface leaves the voice VLAN and does not detect a voice device during the aging period of...

Page 475: ... Warning 2 Overview of events a client host is authenticated successfully Log message WEB RADIUS Local Authorized user string macaddr on Port portNum to VLAN vlanNum Overview of parameters string indicates a user name Macaddr indicates a MAC address portNum indicates the port number vlanNum indicates the VLAN number Information 3 Overview of events a client table is full Log message WEB Rejected m...

Page 476: ...Log message Login failed through Web SSL Username username IP ipaddr Overview of parameters username indicates a user name ipaddr indicates the IP address of the user who accessed to a switch from secure Web Warning 5 Overview of events Uploading a log is successful Log message Log message uploaded by WEB successfully Username username IP ipaddr MAC macaddr Server IP ipaddr File Name filename Over...

Page 477: ...n migrate to the drop block shutdown mode Binding objects mnoBpduProtectionPortIndex Port interface 2 mnoBpduProtectionPortMode drop block shutdown mode 1 3 6 1 4 1 396 5 5 3 4 0 1 2 mnoBpduProtectionRec overyTrap Automatically recovered from BPDU attacks Binding objects mnoBpduProtectionPortIndex Port interface mnoBpduProtectionRecoveryMethod Automatic recovering manual 1 3 6 1 4 1 396 5 5 3 4 0 ...

Page 478: ...4 mnoDdmThresholdExceedOrRecover Check if GBIC exceeds the DDM threshold or becomes recovered to the normal state 1 3 6 1 4 1 396 5 5 1 4 0 1 2 mnoDdmWarningTrap If the parameter value exceeds the warning threshold or recovers to the normal state this trap is sent depending on the configuration of a trap action Binding objects mnoDdmPort port number mnoDdmThresholdType DDM threshold type temperatu...

Page 479: ...nauthorized DHCP servers are detected this trap is transmitted An IP address of the unauthorized DHCP server detected is transmitted to a trap receiver once during the unauthorized period of log stopping Binding objects mnoFilterDetectedIP The IP addresses of unauthorized DHCP servers mnoFilterDetectedport Port interface 1 3 6 1 4 1 396 5 5 3 7 0 1 ...

Page 480: ...tGratuitousARPIpAddr The conflicted IP address received in the gratuitous ARP agentGratuitousARPMacAddr The sender s MAC address of the gratuitous ARP packets agentGratuitousARPPortNumber This indicates the switch port number which received the gratuitous ARP packets agentGratuitousARPInterfaceName This indicates the IP interface name of the switch which received the Gratuitous ARP 1 3 6 1 4 1 396...

Page 481: ...sDeletes 3 lldpStatsRemTablesDrops 4 lldpStatsRemTablesAgeouts 1 0 8802 1 1 2 0 0 1 2 lldpXMedTopologyCha ngeDetected The notification indicates that a new remote device is connected to a local port after the generation done by a local device that detects a topology change In addition the notification indicates that a remote device is disconnected or the device moves among ports Binding objects 1 ...

Page 482: ...cting Loops ID Trap Name Overview of Traps OID 1 mnoLoopDetectNotifica tion This indicates that a network group has occurred 1 3 6 1 4 1 396 5 5 2 1 2 mnoLoopRecoveryNotif ication This indicates that a network group has been deleted or removed 1 3 6 1 4 1 396 5 5 2 2 ...

Page 483: ...VID VLAN ID 1 3 6 1 4 1 396 5 5 3 2 0 1 2 mnoMacBasedAccessC ontrolLoggedFail If you fail to log into the MAC based access control host this trap is sent Binding objects mnoMacBasedAuthInfoMacIndex Host MAC address mnoMacBasedAuthInfoPortIndex Port interface mnoMacBasedAuthVID VLAN ID 1 3 6 1 4 1 396 5 5 3 2 0 2 3 mnoMacBasedAccessC ontrolAgesOut If the MAC based access control host ages out this ...

Page 484: ...nged information regarding a MAC address of a device The details include the following contents Operation Code MAC address Box ID Interface ID Zero Operation code 1 2 One 1 indicates that a new MAC address is learned Two 2 indicates that an old MAC address is deleted Box ID The switch box ID Interface ID The Interface ID learned or deleted on the box Zero Uses to delimit each message operation cod...

Page 485: ... after the expiration of the topology change timer and immediately after choosing The implementation of this trap is optional 1 3 6 1 2 1 17 0 1 2 topologyChange A bridge sends traps if one of the ports configured migrates from the learning state to forwarding state or from the forwarding state to blocking state This trap is not sent if newRoot traps are sent in such a migration as described above...

Page 486: ...erview of Traps OID 1 mnoL2PortSecurityViol ationTrap A new MAC address that violates the port security configuration defined in advance triggers to send trap messages Binding objects mnoPortSecPortIndex Port interface mnoL2PortSecurityViolationMac Host MAC Address 1 3 6 1 4 1 396 5 5 3 3 0 1 ...

Page 487: ...D 1 linkUp This notification is generated if a port becomes link up Binding objects 1 ifIndex 2 if AdminStatus 3 ifOperStatus 1 3 6 1 6 3 1 1 5 4 2 linkDown This notification is generated if a port becomes link down Binding objects 1 ifIndex 2 if AdminStatus 3 ifOperStatus 1 3 6 1 6 3 1 1 5 3 ...

Page 488: ...send SNMP traps is generated Binding objects 1 alarmIndex 2 alarmVariable 3 alarmSampleType 4 alarmValue 5 alarmRisingThreshold 1 3 6 1 2 1 16 0 1 2 fallingAlarm SNMP traps are generated if an alarm entry exceeds the lower threshold Then the event which is configured to send SNMP traps is generated Binding objects 1 alarmIndex 2 alarmVariable 3 alarmSampleType 4 alarmValue 5 alarmFallingThreshold ...

Page 489: ...ailure authenticationFailure traps indicate that the SNMPv2 entity operating as an agent roll has received the protocol message which is not accurately authenticated A function of generating the traps is necessary for all the implementation of SNMPv2 but an object of snmpEnableAuthenTraps shows if the traps are generated 1 3 6 1 6 3 1 1 5 5 ...

Page 490: ...icate the possibility that the SNMPv2 entity operating with an agent role becomes reinitialized and its configuration becomes changed 1 3 6 1 6 3 1 1 5 1 2 warmStart warmStart traps indicate that an SNMPv2 entity operating as the agent role becomes reinitialized so as its configuration does not become changed 1 3 6 1 6 3 1 1 5 2 ...

Page 491: ...ew of Traps OID 1 mnoTemperatureRising Alarm This notification is sent if the current temperature exceeds the upper threshold 1 3 6 1 4 1 396 5 5 1 2 1 2 mnoTemperatureFalling Alarm This notification is sent if the current temperature lowers from the upper threshold 1 3 6 1 4 1 396 5 5 1 2 2 ...

Page 492: ...ing objects mnoPktStormCtrlPortIndex Port Interface 1 3 6 1 4 1 396 5 5 3 5 0 1 2 mnoPktStormCleared If a packet storm is resolved the following is the related information Binding objects mnoPktStormCtrlPortIndex Port interface 1 3 6 1 4 1 396 5 5 3 5 0 2 3 mnoPktStormDisablePo rt If a port becomes disabled because of the packet storm mechanism the following is the related information Binding obje...

Page 493: ...up with the status mode Are cables securely connected to the corresponding port Are appropriate cables used Is the equipment connected to a corresponding port 10BASE T 100BASE TX or 1000BASE T A failure may occur because of an auto negotiation Do you choose the LED display mode of a correct port with the LED display switching button If the port LED right side lights up with an orange color A loop ...

Page 494: ...link up If the power saving mode and EEE IEEE802 3az Ethernet functions with the power saving model are enabled the link of the connected devices may not function depending on the type of devices to connect each other Change the configuration as follows 1 Change the configuration from the power saving mode to Half or Disabled 2 Change the configuration from EEE IEEE802 3az to Dis abled Is the port...

Page 495: ... dealer where your pur chased your product with the following contents Product name Model number Product Serial Number 11 digits alphanumeric characters labeled on the product Firmware version the following number after Ver labeled on the unit package Abnormalities Please describe this as concretely as possible During the warranty period We will be the happiest to repair the product purchased base...

Page 496: ...td 105 0021 2 12 7 Higashi Shimbashi Minato ku Tokyo TEL 03 6402 5301 FAX 03 6402 5304 URL http panasonic co jp ls plsnw P0321 1051 Date of purchase Product Name GA ML Model Number PN Version Important Bootloader Firmware Runtime Serial Number Important 11 alphanumeric characters labeled on the product Dealer Sales company Tel Customer service contact Tel ...

Search results

Summary of Contents for GA-ML Series

Reviews:

Brands by name

Popular brands

Panasonic GA-ML Series, Manual

Search results

Summary of Contents for GA-ML Series

Reviews:

Brands by name

Popular brands