manualshive.com logo in svg

Planet Networking & Communication MGSD-10080F, User Manual

Share
Download
Planet Networking & Communication MGSD-10080F User Manual Download Page 300

User’s Manual of MGSW-MGSD Series 

 

4.12.10 IP Source Guard Configuration 

IP Source Guard

 is a secure feature used to restrict IP traffic on 

DHCP snooping

 untrusted ports by filtering traffic based on 

the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to 

spoof and use the IP address of another host.   

 

 

This page provides IP Source Guard related configuration. The IP Source Guard Configuration screen in 

Figure 4-12-10

 

appears. 

 

300 

 

Summary of Contents for MGSD-10080F

Page 1: ...User s Manual of MGSW MGSD Series 1 ...

Page 2: ...s These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the Instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is li...

Page 3: ... 4 Wiring the DC Power Input 28 2 1 5 Wiring the Faulty Alarm Contact 29 2 1 6 Wiring the Digital Input Output 30 2 2 Installing the Managed Switch 33 2 2 1 Desktop Installation 33 2 2 2 Rack Mounting 34 2 3 Cabling 36 2 3 1 Installing the SFP SFP Transceiver 37 2 3 2 Removing the Module 39 3 SWITCH MANAGEMENT 41 3 1 Requirements 41 3 2 Management Access Overview 42 3 3 CLI Mode Management 43 3 4 ...

Page 4: ... 75 4 2 17 Faulty Alarm 77 4 2 18 Web Firmware Upgrade 78 4 2 19 TFTP Firmware Upgrade 79 4 2 20 Save Startup Config 79 4 2 21 Configuration Download 80 4 2 22 Configuration Upload 81 4 2 23 Configuration Activate 81 4 2 24 Configuration Delete 82 4 2 25 Image Select 82 4 2 26 Factory Default 84 4 2 27 System Reboot 84 4 3 Simple Network Management Protocol 86 4 3 1 SNMP Overview 86 4 3 2 SNMP Sys...

Page 5: ... 6 4 VLAN Membership Status 128 4 6 5 VLAN Port Status 130 4 6 6 Prvivate VLAN 131 4 6 7 Port Isolation 132 4 6 8 VLAN Setting Example 135 4 6 8 1 Two separate 802 1Q VLANs 135 4 6 8 2 VLAN Trunking between two 802 1Q aware Switches 139 4 6 8 3 Port Isolate 141 4 6 9 MAC based VLAN 143 4 6 10 MAC based VLAN Status 144 4 6 11 Protocol based VLAN 144 4 6 12 Protocol based VLAN Mambership 146 4 7 Spa...

Page 6: ...formation 190 4 8 16 MVR Multicaset VLAN Registration 192 4 8 17 MVR Status 196 4 8 18 MVR Groups Information 197 4 8 19 MVR SFM Information 198 4 9 Quality of Service 199 4 9 1 Understand QOS 199 4 9 2 Port Policing 200 4 9 3 Port Shaping 202 4 9 3 1 QoS Egress Port Schedule and Shapers 203 4 9 4 Port Classification 205 4 9 4 1 QoS Ingress Port Tag Classification 206 4 9 5 Port Scheduler 208 4 9 ...

Page 7: ...work Access Statistics 265 4 11 6 RADIUS 272 4 11 7 TACACS 274 4 11 8 RADIUS Overview 276 4 11 9 RADIUS Details 277 4 12 Security 285 4 12 1 Port Limit Control 285 4 12 2 Access Management 289 4 12 3 Access Management Statistics 290 4 12 4 HTTPs 291 4 12 5 SSH 291 4 12 6 Port Security Status 292 4 12 7 Port Security Detail 295 4 12 8 DHCP Snooping 296 4 12 9 DHCP Snooping Statistics 298 4 12 10 IP...

Page 8: ...338 4 17 2 RMON Alarm Status 340 4 17 3 RMON Event Configuration 341 4 17 4 RMON Event Status 342 4 17 5 RMON History Configuration 343 4 17 6 RMON History Status 343 4 17 7 RMON Statistics Configuration 345 4 17 8 RMON Statistics Status 345 4 18 PTP MGSW 28240F Only 348 4 18 1 PTP Configuration 348 4 18 2 PTP Status 349 4 19 Ring For MGSD 10080F and MGSW 28240F 351 4 19 1 MEP Configuration 352 4 ...

Page 9: ... 3 Forwarding Filtering 366 5 4 Store and Forward 366 5 5 Auto Negotiation 367 6 TROUBLESHOOTING 368 APPENDIX A 370 A 1 Switch s Data RJ45 Pin Assignments 1000Mbps 1000BASE T 370 A 2 10 100Mbps 10 100BASE TX 370 APPENDIX B GLOSSARY 372 9 ...

Page 10: ...P 4 port 10G SFP L2 L4 Managed Metro Ethernet Switch 10 60 degrees C Managed Switch is used as an alternative name in this user s manual 1 1 Packet Contents Open the box of the Managed Switch and carefully unpack it The box should contain the following items The Managed Metro Switch x 1 Quick Installation Guide x 1 DB9 to RJ45 Consol Cable x 1 Rubber Feet x 4 Rack Mount Accessory Kit x 1 AC Power ...

Page 11: ...prises telecoms campuses and service providers Flexible and Extendable Solution The multi mini GBIC slots built in the MGSW MGSD series support dual speed as it features 100BASE FX and 1000BASE SX LX SFP Small Form factor Pluggable fiber optic modules meaning the administrator can flexibly choose the suitable SFP transceiver according to the transmission distance or the transmission speed required...

Page 12: ...ch facilities requiring the highest power integrity Furthermore with the 36 60V DC power supply implemented the MGSW MGSD series can be applied as the telecom level device that could be located in the electronic room Optimized Design for Metropolitan Area Network Redundant Ring with Fast Recovery The MGSW 28240F and MGSD 10080F support redundant ring technology and features strong rapid self recov...

Page 13: ... VLANs and different IP addresses for the purpose of having a highly secure flexible management and simpler networking application Layer 2 Layer 4 Fully functional Managed Switch for Building Automation Networking The MGSW MGSD series is ideal for applications in the factory data centers and distributions It provides advanced Layer 2 to Layer 4 data switching and redundancy Quality of Service traf...

Page 14: ...n about the software function of the Managed Switch Section 4 WEB CONFIGURATION The section explains how to manage the Managed Switch by Web interface Section 5 SWITCH OPERATION The chapter explains how to do the switch operation of the Managed Switch Section 6 TROUBLESHOOTING The chapter explains how to do troubleshooting of the Managed Switch Appendix A The section contains cable information of ...

Page 15: ...l and SNMP trap Hardware Design 36 to 60V DC redundant power with polarity reverse protect function 10 to 60 degrees C operating temperature For MGSW 28240F and MGSD 10080F 0 to 60 degrees C operating temperature For MGSW 24160F 19 inch rack mountable Relay alarm for port breakdown power failure Built in thermal fans Layer 2 Features Prevents packet loss with back pressure half duplex and IEEE 802...

Page 16: ...or MGSW 24160F and MGSW 28240F Port mirroring monitors the incoming or outgoing traffic on a particular port Loop protection to avoid broadcast loops Supports G 8032 Ethernet Ring Protection Switching E R P S For MGSW 28240F and MGSD 10080F Quality of Service Ingress Shaper and Egress Rate Limit per port bandwidth control 8 priority queues on all switch ports Traffic Classification IEEE 802 1p CoS...

Page 17: ...nt Switch Management Interfaces Console and Telnet Command Line Interface Web Switch Management SNMP v1 and v2c Switch Management SSH SSL and SNMP v3 Secure Access Four RMON Groups history statistics alarms and events IPv6 IP address NTP and DNS management Built in Trivial File Transfer Protocol TFTP Client BOOTP and DHCP for IP address assignment Firmware Upload Download via HTTP TFTP DHCP Relay ...

Page 18: ...ure for half duplex Jumbo Frame 9Kbytes Reset Button 5 seconds System reboot 10 seconds Factory default Connector Removable 6 pin terminal block for power input Pin 1 2 for Power 1 Pin 3 4 for fault alarm Pin 5 6 for Power 2 Removable 6 pin terminal block for DI DO interface Pin 1 2 for DI 1 2 Pin 3 4 for DO 1 2 Pin 5 6 for GND Dimensions W x D x H 330 x 155 x 43 5 mm 1U high 440 x 200 x 44 5 mm 1...

Page 19: ... LACP static trunk 5 groups of 8 port trunk supported QoS Traffic classification based Strict priority and WRR 8 level priority for switching Port Number 802 1p priority 802 1Q VLAN tag DSCP ToS field in IP packet IGMP Snooping IGMP v1 v2 v3 Snooping up to 255 multicast groups IGMP Querier mode support MLD Snooping MLD v1 v2 Snooping up to 255 multicast groups MLD Querier mode support Access Contr...

Page 20: ... flow control and back pressure IEEE 802 3ad port trunk with LACP IEEE 802 1D Spanning Tree Protocol IEEE 802 1w Rapid Spanning Tree Protocol IEEE 802 1s Multiple Spanning Tree Protocol IEEE 802 1p Class of Service IEEE 802 1Q VLAN Tagging IEEE 802 1x Port Authentication Network Control IEEE 802 1ab LLDP RFC 768 UDP RFC 793 TFTP RFC 791 IP RFC 792 ICMP RFC 2068 HTTP RFC 1112 IGMP version 1 RFC 223...

Page 21: ...ardware Descriptions 2 1 1 Front Panel The front panel provides a simple interface monitoring the Managed Switch Figures 2 1 1 to 2 1 3 show the front panel of the Managed Switch MGSD 10080F Front Panel Figure 2 1 1 MGSD 10080F Switch Front Panel MGSW 24160F Front Panel Figure 2 1 2 MGSW 24160F Switch Front Panel MGSW 28240F Front Panel Figure 2 1 3 MGSW 28240F Switch Front Panel Gigabit TP interf...

Page 22: ...W 28240F comes with a reset button designed for rebooting the Managed Switch without turning off and on the power The following is the summary table of reset button functions Reset Button Press and Release Function 5 sec System Reboot Reboot the Managed Switch 5 sec Factory Default Reset the Managed Switch to Factory Default configuration The Managed Switch will then reboot and load the default se...

Page 23: ...s DC power input voltage from 36V to 60V DC Connect the power cable to the Managed Switch at the input terminal block The size of the two screws in the terminal block is M3 5 Digital Input The digitail input of the Managed Switch can be activated by the external sensor that senses physical changes These changes can include intrusion detection or certain physical change in the monitored area For ex...

Page 24: ... through that port is successfully established with speed of 100Mbps Blinks To indicate that the switch is actively sending or receiving data over that port 100 LNK ACT Orange Off If 1000 LNK ACT LED is lit it indicates that the port is operating at 1000Mbps If 1000 LNK ACT LED is Off it indicates that the port is linkdown Per 10 100 1000BASE T Interface LED Color Function Lights To indicate the l...

Page 25: ...peed 1000Mbps 1000 LNK ACT Green Blink To indicate that the switch is actively sending or receiving data over that port Lights To indicate the link through that port is successfully established with speed of 10Mbps or 100Mbps 10 100 LNK ACT Orange Blink To indicate that the switch is actively sending or receiving data over that port 100 1000BASE SX LX SFP Interfaces Port 9 Port 24 LED Color Functi...

Page 26: ...icates that Fan 2 has stopped Fault Green Lights Indicates that Switch AC DC or port has failed Lights Indicates that the Switch is powered on PWR Green Blinks Indicates the system is running under booting procedure 10 100 1000BASE T Interfaces for Port1 to Port24 SFP slot LED Color Function Lights Indicates the link through that SFP port is successfully established with speed of 1000Mbps Blinks I...

Page 27: ...port is successfully established with speed of 10Mbps or 100Mbps LNK ACT Orange Off Indicates that the port is linkdown 10BASE SR LR SFP Interfaces for port25 to port28 LED Color Function Lights Indicates the link through that SFP port is successfully established with 10Gbps Green Off Indicates that the SFP port is linkdown Lights Indicates the link through that SFP port is successfully establishe...

Page 28: ...s input power from 100 to 240V AC 50 60Hz 2 1 4 Wiring the DC Power Input The 6 contact terminal block connector on the front panel of MGSW MGSD Series is used for two DC redundant power input Please follow the steps below to insert the power wire 1 Insert positive negative DC power wires into contacts 1 and 2 for DC POWER 1 or 5 and 6 for DC POWER 2 28 ...

Page 29: ...ures like inserting the wires or tighten the wire clamp screws make sure the power is OFF to prevent from getting an electric shock 2 1 5 Wiring the Faulty Alarm Contact The fault alarm contacts are in the middle 3 4 of the terminal block connector as the picture shows below Inserting the wires the Managed Switch will detect the fault status of the power failure or port link failure available for ...

Page 30: ...power is OFF to prevent from getting an electric shock 2 1 6 Wiring the Digital Input Output The 6 contact terminal block connector on the front panel of MGSW MGSD Series Managed Switch is used for Digital Input and Digital Output Please follow the steps below to insert wire 1 The MGSW MGSD Series Managed Switch offers two DI and DO groups 1 and 2 are DI groups 3 and 4 are DO groups and 5 and 6 ar...

Page 31: ...es from loosening 1 2 3 4 5 6 DI0 DI1 DO0 DO1 GND GND Figure 2 1 10 6 Pin Terminal Block DI DO Wiring Input 3 There are two Digital Input groups for you to monitor two different devices The following topology shows how to wire DI0 and DI1 Figure 2 1 11 Wires DI0 and DI1 to Open Detector 31 ...

Page 32: ...gital Output groups for you to sense MGSW MGSD Series Managed Switch port failure or power failure and issue a high or low signal to external device The following topology shows how to wire DO0 and DO1 Figure 2 1 12 Wires DO0 and DO1 to Open Detector 32 ...

Page 33: ...hese steps Step 1 Attach the rubber feet to the recessed areas on the bottom of the Managed Switch Step 2 Place the Managed Switch on the desktop or the shelf near an AC power source as shown in Figure 2 2 1 Figure 2 2 1 Placing the Managed Switch on the Desktop Step 3 Keep enough ventilation space between the Managed Switch and the surrounding objects When choosing a location please keep in mind ...

Page 34: ...Step 1 Place the Managed Switch on a hard flat surface with the front panel positioned towards the front side Step 2 Attach the rack mount bracket to each side of the Managed Switch with supplied screws attached to the package Figure 2 2 2 shows how to attach brackets to one side of the Managed Switch Figure 2 2 2 Attaching Brackets to the Managed Switch You must use the screws supplied with the m...

Page 35: ... of MGSW MGSD Series Figure 2 2 3 Mounting the Managed Switch on a Rack Step6 Proceed with Steps 4 and 5 of session 2 2 1 Desktop Installation to connect the network cabling and supply power to the Managed Switch 35 ...

Page 36: ...E 802 3 802 3u 802 3ab Fast Gigabit Ethernet standard requires Category 5 UTP for 100Mbps 100BASE TX 10BASE T networks can use Cat 3 4 5 or 1000BASE T use 5 5e 6 UTP see table below Maximum distance is 100 meters 328 feet The 100BASE FX 1000BASE SX LX SFP slot is used as LC connector with optional SFP module Please see table below and know more about the cable specifications Port Type Cable Type C...

Page 37: ...MFB FX 100 LC Multi Mode 2km 1310nm 0 60 degrees C MFB F20 100 LC Single Mode 20km 1310nm 0 60 degrees C MFB F40 100 LC Single Mode 40km 1310nm 0 60 degrees C MFB F60 100 LC Single Mode 60km 1310nm 0 60 degrees C MFB F120 100 LC Single Mode 120km 1550nm 0 60 degrees C MFB TFX 100 LC Multi Mode 2km 1310nm 40 75 degrees C MFB TF20 100 LC Single Mode 20km 1550nm 40 75 degrees C Fast Ethernet Transcei...

Page 38: ...10 1000 WDM LC Single Mode 10km 1550nm 1310nm 0 60 degrees C MGB LA20 1000 WDM LC Single Mode 20km 1310nm 1550nm 0 60 degrees C MGB LB20 1000 WDM LC Single Mode 20km 1550nm 1310nm 0 60 degrees C MGB LA40 1000 WDM LC Single Mode 40km 1310nm 1550nm 0 60 degrees C MGB LB40 1000 WDM LC Single Mode 40km 1550nm 1310nm 0 60 degrees C MGB LA60 1000 WDM LC Single Mode 60km 1310nm 1550nm 0 60 degrees C MGB ...

Page 39: ...le 1000BASE SX to 1000BASE SX 1000Bas LX to 1000BASE LX 2 Check whether the fiber optic cable type matches with the SFP transceiver requirement To connect to 1000BASE SX SFP transceiver please use the multi mode fiber cable with one side being the male duplex LC connector type To connect to 1000BASE LX SFP transceiver please use the single mode fiber cable with one side being the male duplex LC co...

Page 40: ...ow to Pull Out the SFP Transceiver Module Never pull out the module without lifting up the lever of the module and turning it to a horizontal position Directly pulling out the module could damage the module and the SFP module slot of the Managed Switch ...

Page 41: ...erview Remote Telnet Access Web Management Access SNMP Access Standards Protocols and Related Reading 3 1 Requirements Workstations running Windows 2000 XP 2003 Vista 7 8 2008 MAC OS9 or later or Linux UNIX or other platforms compatible with TCP IP protocols Workstation is installed with Ethernet NIC Network Interface Card Serial Port connect Terminal The above PC comes with COM port DB9 RS 232 or...

Page 42: ...sed Telnet functionality built into Windows XP 2003 Vista Windows 7 operating systems Can be accessed from any location Security can be compromised hackers need only know the IP address Web Browser Ideal for configuring the switch remotely Compatible with all popular browsers Can be accessed from any location Most visually appealing Security can be compromised hackers need only know the IP address...

Page 43: ...erforming system administration such as displaying statistics or changing option settings Using this method you can access the Managed Switch remote Telnet interface from personal computer or workstation in the same Ethernet environment as long as you know the current IP address of the Managed Switch Figure 3 1 Remote Telnet and Console Port Interface Management In Windows system you may click Sta...

Page 44: ...ual of MGSW MGSD Series 44 Figure 3 2 Remote Telnet Interface Main Screen of Managed Switch For more information about using the remote Telnet interface refer to Chapter 5 under Remote Telnet Interface Management ...

Page 45: ...t up your IP address for the Managed Switch you can access the Managed Switch s Web interface applications directly in your Web browser by entering the IP address of the Managed Switch Figure 3 3 Web Management You can then use your Web browser to list and manage the Managed Switch configuration parameters from one central location the Web Management requires Microsoft Internet Explorer 7 0 or lat...

Page 46: ...nagement Station only knows the set community string it can read and write to the MIBs However if it only knows the get community string it can only read MIBs The default getting and setting community strings for the Managed Switch is public Figure 3 5 SNMP Management 3 6 PLANET Smart Discovery Utility For easily listing the Managed Switch in your Ethernet environment the Planet Smart Discovery Ut...

Page 47: ...ription for the devices 2 After setup is completed press the Update Device Update Multi or Update All button to take effect The meaning of the 3 buttons above are shown below Update Device use current setting on one single device Update Multi use current setting on choose multi devices Update All use current setting on whole devices in the list The same functions mentioned above also can be findin...

Page 48: ...ow Java Applets to open sockets The user has to explicitly modify the browser setting to enable Java Applets to use network ports The Managed Switch can be configured through an Ethernet connection making sure the manager PC must be set on the same IP subnet address with the Managed Switch For example the default IP address of the Managed Switch is 192 168 0 100 then the manager PC should be set a...

Page 49: ...ws http 192 168 0 100 2 When the following login screen appears please enter the default username admin with password admin or the username password you have changed via console to login the main screen of Managed Switch The login screen in Figure 4 1 2 appears Figure 4 1 2 Login Screen Default User name admin Default Password admin After entering the username and password the main screen appears ...

Page 50: ...ess all the commands and statistics the Managed Switch provides 1 It is recommended to use Internet Explore 7 0 or above to access Managed Switch 2 The changed IP address takes effect immediately after clicking on the Save button you need to use the new IP address to access the Web interface 3 For security reason please change and memorize the new password after this first setup 4 Only accept comm...

Page 51: ...Web browser interface to configure and manage it Copper Port Link Status Main Functions Menu SFP Port Link Status Main Screen Help Button Figure 4 1 4 Main Page Panel Display The web agent displays an image of the Managed Switch s ports The Mode can be set to display different information for the ports including Link up or Link down Clicking on the image of a port opens the Port Statistics page Th...

Page 52: ...s manage and control the Managed Switch and all its ports or monitor network conditions Via the Web Management the administrator can setup the Managed Switch by selecting the functions those listed in the Main Function The screen in Figure 4 1 5 appears Figure 4 1 5 Managed Switch Main Functions Menu 52 ...

Page 53: ...in Figure 4 2 1 appears Figure 4 2 1 System Information Page Screenshot The page includes the following fields Object Description The system contact configured in Configuration System Information System Contact Contact The system name configured in Configuration System Information System Name Name The system location configured in Configuration System Information System Location Location The MAC A...

Page 54: ...ate Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Click to refresh the page 4 2 2 IP Configuration The IP Configuration includes the IP Address Subnet Mask and Gateway The Configured column is used to view or change the IP configuration Fill up the IP Address Subnet Mask and Gateway for the device The screen in Figure 4 2 2 appears F...

Page 55: ... devices on the network Select this option to delete an existing IP interface Delete VLAN The VLAN associated with the IP interface Only ports in this VLAN will be able to access the IP interface This field is only available for input when creating an new interface Enabled Enable the DHCP client by checking this box Fallback The number of seconds for trying to obtain a DHCP lease IPv4 DHCP Current...

Page 56: ...sk Length The IP address of the IP gateway Valid format is dotted decimal notation or a valid IPv6 notation Gateway and Network must be of the same type Gateway The VLAN ID VID of the specific IPv6 interface associated with the gateway Next Hop VLAN Buttons Click to add a new IP interface A maximum of 128 interfaces is supported Click to add a new IP route A maximum of 32 routes is supported Click...

Page 57: ...escription The name of the interface Interface Type The address type of the entry This may be LINK or IPv4 Address The current address of the interface of the given type IP Interfaces Status The status flags of the interface and or address The destination IP network or host address of this route Network Gateway The gateway address of this route IP Routes Status The status flags of the route The IP...

Page 58: ...des the following fields Object Description The name identifying the user User Name The privilege level of the user The allowed range is 1 to 15 If the privilege level value is 15 it can access all groups i e that is granted the fully control of the device But others value need to refer to each group privilege level User s privilege should be same or greater than the group privilege level to have ...

Page 59: ...oups i e that is granted the fully control of the device But others value need to refer to each group privilege level User s privilege should be same or greater than the group privilege level to have the access of that group By default setting most groups privilege level 5 has the read only access and privilege level 10 has the read write access And the system maintenance software upload factory d...

Page 60: ...re 4 2 6 User Configuration Page Screenshot If you forget the new password after changing the default password please press the Reset button on the front panel of the Managed Switch for over 10 seconds and then release it The current setting including VLAN will be lost and the Managed Switch will restore to the default mode 60 ...

Page 61: ...provides an overview of the privilege levels After setup is completed please press the Save button to take effect Please login web interface with new user name and password and the screen in Figure 4 2 7 appears Figure 4 2 7 Privilege Levels Configuration Page Screenshot ...

Page 62: ...Everything except ping Port Everything except VeriPHY Diagnostics ping and VeriPHY Maintenance CLI System Reboot System Restore Default System Password Configuration Save Configuration Load and Firmware Load Web Users Privilege Levels and everything in Maintenance Debug Only present in CLI Privilege Level Every group has an authorization Privilege level for the following sub groups Configuration r...

Page 63: ...gent forwards NTP messages between the clients and the server when they are not on the same subnet domain Disabled Disable NTP mode operation Allow select the time zone according to current location of switch Timezone Server Provide the NTP IPv4 or IPv6 address of this switch IPv6 address is in 128 bit records represented as eight fields of up to four hexadecimal digits with a colon separating eac...

Page 64: ...s Figure 4 2 9 Time Configuration Page Screenshot The page includes the following fields Object Description Lists various Time Zones world wide Select appropriate Time Zone from the drop down and click Save to set Time Zone User can set the acronym of the time zone This is a user configurable acronym to identify the time zone Range Up to 16 characters Acronym Daylight Saving Time This is used to s...

Page 65: ...nth Hours Select the ending hour Minutes Select the ending minute Enter the number of minutes to add during Daylight Saving Time Range 1 to 1440 Offset Settings Buttons Click to apply changes Click to undo any changes made locally and revert to previously saved values 4 2 8 UPnP Configure UPnP on this page UPnP is an acronym for Universal Plug and Play The goals of UPnP are to allow devices to con...

Page 66: ... inform a control point or control points how often it or they should receive a SSDP advertisement message from this switch If a control point does not receive any message within the duration it will think that the switch no longer exists Due to the unreliable nature of UDP in the standard it is recommended that such refreshing of advertisements to be done at less than one half of the advertising ...

Page 67: ...e host end of the circuit The definition of Circuit ID in the switch is 4 bytes in length and the format is vlan_id module_id port_no The parameter of vlan_id is the first two bytes representing the VLAN ID The parameter of module_id is the third byte for the module ID in standalone switch it always equals 0 in stackable switch it means switch ID The parameter of port_no is the fourth byte and it ...

Page 68: ...tion Relay Information Policy Indicates the DHCP relay information option policy When enable DHCP relay information mode operation if agent receive a DHCP message that already contains relay agent information It will enforce the policy And it only works under DHCP relay information operation mode enabled Possible policies are Replace Replace the original relay information when receiving a DHCP mes...

Page 69: ...rcuit ID Receive Bad Remote ID The number of packets whose Remote ID option did not match known Remote ID Client Statistics Object Description The number of relayed packets from server to client Transmit to Client The number of packets that resulted in error while being sent to servers Transmit Error The number of received packets from server Receive form Client Receive Agent Option The number of ...

Page 70: ...st support the SVG format Consult the SVG Wiki for more information on browser support Specifically at the time of writing Microsoft Internet Explorer will need to have a plugin installed to support SVG The CPU Load screen in Figure 4 2 14 appears Figure 4 2 13 CPU Load Page Screenshot Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds If...

Page 71: ...ng level of the system log Error Error level of the system log All All levels The time of the system log entry Time The message of the system log entry Message Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Click to updates the system log entries starting from the current entry ID Flushes the selected log entries Hide system log accor...

Page 72: ...g screen in Figure 4 2 16 appears Figure 4 2 16 Detailed Log Page Screenshot The page includes the following fields Object Description The ID 1 of the system log entry ID The message of the system log entry Message Buttons Click this button could download system log with CSV format file Updates the system log entry to the current entry ID Updates the system log entry to the first available entry I...

Page 73: ...acknowledgments back sender since UDP is a connectionless protocol and it does not provide acknowledgments The syslog packet will always send out even if the syslog server does not exist Possible modes are Enabled Enable server mode operation Disabled Disable server mode operation Indicates the IPv4 host address of syslog server If the switch provide DNS feature it also can be a host name Server A...

Page 74: ...r IP address at IP configuration page SMTP Port It is for you to input the SMTP server port number As default is 25 SMTP Authentication Enabled As usual SMTP server is denied to relay a mail from a different domain so you have to enable this option and input your mail account and password for SMTP sever authorizing to forward a mail from different domain For example you want a SMTP server which lo...

Page 75: ...ved values 4 2 16 Digital Input Output Digital Input allows user can log external device such as industrial cooler dead or alive or something else system will logs a user cistomize message into system log syslog issue SNMP trap or issue an alarm E mail Digital Output allows user to monitor the switch port and power and let system issue a high or low signal to an external device such as alarm when ...

Page 76: ...ignal to an external device such as an alarm Allows user setting a customize message for Digital Input function alarming Event Description Event As Digital Input Allows user to record alarm message to System log syslog or issues out via SNMP Trap or SMTP As default SNMP Trap and SMTP are disabled please enable them first if you want to issue alarm message via them As Digital Output Allows user to ...

Page 77: ...rm Contact for the failure detection The Configuration screen in Figure 4 2 20 appears Figure 4 2 20 Windows File Selection Menu Popup The page includes the following fields Object Description Allows user to enable Fault Alarm function Enable Record Allows user to record alarm message to System log syslog or issues out via SNMP Trap or SMTP As default SNMP Trap and SMTP are disabled please enable ...

Page 78: ...e the system would pop up the file selection menu to choose firmware 4 Select on the firmware and then click The Software Upload Progress would show the file upload status 5 Once the software be loaded to the system successfully the following screen appears The system will load the new software after reboot Figure 4 2 21 Software successfully Loaded Notice Screen DO NOT Power OFF the Managed Switc...

Page 79: ...TFTP Server IP Firmware File Name The name of firmware image Maximum length 24 characters Buttons Click to upgrade firmware DO NOT Power OFF the Managed Switch until the update progress is complete Do not quit the Firmware Upgrade page without pressing the OK button after the image is loaded Or the system won t apply the new firmware User has to repeat the firmware upgrade processes again 4 2 20 S...

Page 80: ...he switch This file is volatile startup config The startup configuration for the switch read at boot time default config A read only file with vendor specific configuration This file is read when the system is restored to default settings It is also possible to store up to two other files and apply them to running config thereby switching configuration Configuration Download page allows the downlo...

Page 81: ...current configuration is fully replaced with the configuration in the uploaded file Merge mode The uploaded file is merged into running config If the file system is full i e contains the three system files mentioned above plus two other files it is not possible to create new files but an existing file must be overwritten or another deleted first 4 2 23 Configuration Activate Configuration Activate...

Page 82: ...ow Figure 4 2 29 Configuration Delete Page Screenshot 4 2 25 Image Select This Page provides information about the active and alternate backup firmware images in the device and allows you to revert to the alternate image The web Page displays two tables with information about the active and alternate firmware images The Image Select screen in Figure 4 2 30 appears In case the active firmware image...

Page 83: ...ollowing fields Object Description The flash index name of the firmware image The name of primary preferred image is image the alternate image is named image bk Image The version of the firmware image Version The date where the firmware was produced Date Button Click to choose Alternate Image as Activate Image 83 ...

Page 84: ...lick to return to the Port State Page without resetting the configuration To reset the Managed Switch to the Factory default setting you can also press the hardware reset button at the front panel about 10 seconds After the device be rebooted You can login the management WEB interface within the same subnet of 192 168 0 xx 4 2 27 System Reboot The Reboot page enables the device to be rebooted from...

Page 85: ...User s Manual of MGSW MGSD Series Buttons Click to reboot the system Click to return to the web main page without reboot the system 85 ...

Page 86: ...and store management information such as the number of error packets received by a network element Management information base MIB A MIB is a collection of managed objects residing in a virtual information store Collections of related managed objects are defined in specific MIB modules network management protocol A management protocol is used to convey management information between agents and NMS...

Page 87: ...NMP System Configuration screen in Figure 4 3 1 appears Figure 4 3 1 SNMP System Configuration Page Screenshot The SNMP System Configuration page includes the following fields Object Description Mode Indicates the SNMP mode operation Possible modes are Enabled Enable SNMP mode operation Disabled Disable SNMP mode operation Version Indicates the SNMP supported version Possible versions are SNMP v1 ...

Page 88: ... If SNMP version is SNMPv3 the community string will be associated with SNMPv3 communities table It provides more flexibility to configure security name than a SNMPv1 or SNMPv2c community string In addition to community string a particular range of source addresses can be used to restrict source subnet Indicates the SNMPv3 engine ID The string must contain an even number in hexadecimal format with...

Page 89: ...n alpha character and the first and last characters must not be a dot or a dash Indicates the SNMP trap destination IPv6 address IPv6 address is in 128 bit records represented as eight fields of up to four hexadecimal digits with a colon separating each field For example fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be used as a shorthand way of representing multiple 16 bit group...

Page 90: ... and privacy A unique security name is needed when traps and informs are enabled Trap Security Name System Enable disable that the Interface group s traps Possible traps are Warm Start Enable disable Warm Start trap Cold Start Enable disable Cold Start trap Interface Indicates that the Interface group s traps Possible traps are Link Up Enable disable Link up trap Link Down Enable disable Link down...

Page 91: ...26 System Contact An administratively assigned name for this managed node By convention this is the node s fully qualified domain name A domain name is a text string drawn from the alphabet A Za z digits 0 9 minus sign No space characters are permitted as part of a name The first character must be an alpha character And the first or last character must not be a minus sign The allowed string length...

Page 92: ...the community access string to permit access to SNMPv3 agent The allowed string length is 1 to 32 and the allowed content is ASCII characters from 33 to 126 The community string will be treated as security name and map a SNMPv1 or SNMPv2c community string Community Indicates the SNMP access source address A particular range of source addresses can be used to restrict source subnet when combined wi...

Page 93: ...eID is always that agent s own snmpEngineID value The value can also take the value of the snmpEngineID of a remote SNMP engine with which this user can communicate In other words if user engine ID equal system engine ID then it is local user otherwise it s remote user Engine ID A string identifying the user name that this entry should belong to The allowed string length is 1 to 32 and the allowed...

Page 94: ...ivacy Protocol Indicates the privacy protocol that this entry should belong to Possible privacy protocol are None None privacy protocol DES An optional flag to indicate that this user using DES authentication protocol A string identifying the privacy pass phrase The allowed string length is 8 to 32 and the allowed content is the ASCII characters from 33 to 126 Privacy Password Buttons Click to add...

Page 95: ... to The allowed string length is 1 to 32 and the allowed content is the ASCII characters from 33 to 126 Group Name A string identifying the group name that this entry should belong to The allowed string length is 1 to 32 and the allowed content is the ASCII characters from 33 to 126 Buttons Click to add a new group entry Click to save changes Click to undo any changes made locally and revert to pr...

Page 96: ...his view subtree should be excluded General if a view entry s view type is excluded it should be exist another view entry which view type is included and it s OID subtree overstep the excluded view entry The OID defining the root of the subtree to add to the named view The allowed OID length is 1 to 128 The allowed string content is digital number or asterisk OID Subtree Buttons Click to add a new...

Page 97: ...ates the security model that this entry should belong to Possible security models are NoAuth NoPriv None authentication and none privacy Auth NoPriv Authentication and none privacy Auth Priv Authentication and privacy The name of the MIB view defining the MIB objects for which this request may request the current values The allowed string length is 1 to 32 and the allowed content is the ASCII char...

Page 98: ...tics Overview Lists Ethernet and RMON port statistics Lists Ethernet and RMON port statistics Port Statistics Detail Displays SFP information SFP Information Sets the source and target ports for mirroring Port Mirror 4 4 1 Port Configuration This page displays current port configurations Ports can also be configured here The Port Configuration screen in Figure 4 4 1 appears Figure 4 4 1 Port Confi...

Page 99: ... automatically Auto Fiber Setup 1G fiber port for negotiation automatically Auto Setup Auto negotiation When Auto Speed is selected on a port this section indicates the flow control capability that is advertised to the link partner When a fixed speed setting is selected that is what is used The Current Rx column indicates whether pause frames on the port are obeyed and the Current Tx column indica...

Page 100: ...bled Enabled Both link up and link down power savings enabled When setting each port to run at 100M Full 100M Half 10M Full and 10M Half speed modes the Auto MDIX function will disable Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values Click to refresh the page Any changes made locally will be undone 100 ...

Page 101: ...yed counters are Object Description The logical port for the settings contained in the same row Port The number of received and transmitted packets per port Packets The number of received and transmitted bytes per port Bytes The number of frames received in error and the number of incomplete transmissions per port Errors The number of frames discarded due to ingress or egress congestion Drops The ...

Page 102: ... statistics for a specific switch port Use the port select box to select which switch port details to display The selected port belongs to the currently selected stack unit as reflected by the page header The displayed counters are the totals for receive and transmit the size counters for receive and transmit and the error counters for receive and transmit The Detailed Port Statistics screen in Fi...

Page 103: ...ve frame sizes Receive and Transmit Queue Counters The numeric of received and transmitted packet is per input and output queue Receive Error Counters Object Description The numeric of frames is dropped due to lack of receive buffers or egress congestion Rx Drops The number of frames received with CRC or alignment errors Rx CRC Alignment The number of short 1 frame received with valid CRC Rx Under...

Page 104: ...ble an automatic refresh of the page at regular intervals 4 4 4 SFP Information You can check the physical or operational status of an SFP module via the SFP Module Information page This page shows the operational status such as the transceiver type speed and wavelength and supports distance of SFP module on a specific interface You can also use the hyperlink of port no to check the statistics on ...

Page 105: ... failed Wave Length nm Display the support distance of current SFP module The distance value is gotten from the SFP module Distance m Display the temperature of current SFP module The temperature value is gotten from the SFP module Temperature C Display the voltage of current SFP module The voltage value is gotten from the SFP module Voltage V Display the ampere of current SFP module The ampere va...

Page 106: ...d to a mirror port where a frame analyzer can be attached to analyze the frame flow The Managed Switch can unobtrusively mirror traffic from any port to a monitor port You can then attach a protocol analyzer or RMON probe to this port to perform traffic analysis and verify connection integrity Figure 4 4 5 Port Mirror Application The traffic to be copied to the mirror port is selected as follows A...

Page 107: ...User s Manual of MGSW MGSD Series Figure 4 4 6 Mirror Configuration Page Screenshot 107 ...

Page 108: ...at this port are mirrored to the mirroring port Frames transmitted are not mirrored Tx only Frames transmitted from this port are mirrored to the mirroring port Frames received are not mirrored Disabled Neither frames transmitted nor frames received are mirrored Both Frames received and frames transmitted are mirrored to the mirror port For a given port a frame is only transmitted once It is there...

Page 109: ...assigned manually Port Trunk or automatically by enabling Link Aggregation Control Protocol LACP on the relevant links Aggregated Links are treated by the system as a single logical port Specifically the Aggregated Link has similar port attributes to a non aggregated port including auto negotiation speed Duplex setting etc The device supports the following Aggregation links Static LAGs Port Trunk ...

Page 110: ...fore making any physical connections between devices use the Link aggregation The ports used in a link aggregation must all be of the same media type RJ45 100 Mbps fiber The ports that can be assigned to the same link aggr Ports can only be assigned to one link aggregation The ports at both ends of a connection must be configured as link aggregation ports None of the ports in a link aggregation ca...

Page 111: ...ion port for the frame Check to enable the use of the Source MAC address or uncheck to disable By default Source MAC Address is enabled Destination MAC Address The Destination MAC Address can be used to calculate the destination port for the frame Check to enable the use of the Destination MAC Address or uncheck to disable By default Destination MAC Address is disabled IP Address The IP address ca...

Page 112: ... ID Normal indicates there is no aggregation Only one group ID is valid per port Group ID Each switch port is listed for each group ID Select a radio button to include a port in an aggregation or clear the radio button to remove the port from the aggregation By default no ports belong to any aggregation group Only full duplex ports can join an aggregation and ports must be in the same speed in eac...

Page 113: ...pears Figure 4 5 4 LACP Port Configuration Page Screenshot The page includes the following fields Object Description The switch port number means selection of all ports of Managed Switch Port Controls whether LACP is enabled on this switch port LACP will form an aggregation when 2 or more ports are connected to the same partner LACP can form max 12 LLAGs per switch and 2 GLAGs per stack LACP Enabl...

Page 114: ...ority Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 4 5 3 LACP System Status This page provides a status overview for all LACP instances The LACP Status page display the current LACP aggregation Groups and LACP Port status The LACP System Status screen in Figure 4 5 5 appears Figure 4 5 5 LACP System Status Page Screenshot The page inclu...

Page 115: ...esh the page immediately Auto refresh Automatic refresh occurs every 3 seconds 4 5 4 LACP Port Status This page provides a status overview for LACP status for all ports The LACP Port Status screen in Figure 4 5 6 appears Figure 4 5 6 LACP Status Page Screenshot ...

Page 116: ...is disabled The key assigned to this port Only ports with the same key can aggregate together Key Aggr ID The Aggregation ID assigned to this aggregation group IDs 1 and 2 are GLAGs while IDs 3 14 are LLAGs The partners System ID MAC address Partner System ID The partner port number connected to this port Partner Port Buttons Click to refresh the page immediately Auto refresh Automatic refresh occ...

Page 117: ...ws how many LACP frames have been sent from each port LACP Received Shows how many LACP frames have been received at each port LACP Transmitted Shows how many unknown or illegal LACP frames have been discarded at each port Discarded Buttons Auto refresh Automatic refresh occurs every 3 seconds Click to refresh the page immediately Clears the counters for all ports 117 ...

Page 118: ...end nodes and assign these nodes VLAN membership packets cannot cross VLAN without a network device performing a routing function between the VLANs 2 The Managed Switch supports IEEE 802 1Q VLAN The port untagging function can be used to remove the 802 1 tag from packet headers to maintain compatibility with devices that are tag unaware 3 The Switch s default is to assign all ports to a single 802...

Page 119: ... supports the following VLAN features Up to 255 VLANs based on the IEEE 802 1Q standard Port overlapping allowing a port to participate in multiple VLANs End stations can belong to multiple VLANs Passing traffic between VLAN aware and VLAN unaware devices Priority tagging IEEE 802 1Q Standard IEEE 802 1Q tagged VLAN are implemented on the Switch 802 1Q VLAN requires tagging which enables them to s...

Page 120: ...nformation originally contained in the packet is retained 802 1Q Tag User Priority CFI VLAN ID VID 3 bits 1 bits 12 bits TPID Tag Protocol Identifier TCI Tag Control Information 2 bytes 2 bytes Preamble Destination Address Source Address VLAN TAG Ethernet Type Data FCS 6 bytes 6 bytes 4 bytes 2 bytes 46 1500 bytes 4 bytes The Ether Type and VLAN ID are inserted after the MAC source address but bef...

Page 121: ...nnected to a tag aware device the packet should be tagged Default VLANs The Switch initially configures one VLAN VID 1 called default The factory default setting assigns all ports on the Switch to the default As new VLAN are configured in Port based mode their respective member ports are removed from the default Assigning Ports to VLANs Before enabling VLANs for the switch you must first assign ea...

Page 122: ...erstand nomenclature of the Switch IEEE 802 1Q Tagged and Untagged Every port on an 802 1Q compliant switch can be configured as tagged or untagged Tagged Ports with tagging enabled will put the VID number priority and other VLAN information into the header of all packets that flow into those ports If a packet has previously been tagged the port will not alter the packet thus keeping the VLAN info...

Page 123: ...VLAN limit of 4096 The Managed Switch supports multiple VLAN tags and can therefore be used in MAN applications as a provider bridge aggregating traffic from numerous independent customer LANs into the MAN Metro Access Network space One of the purposes of the provider bridge is to recognize and use VLAN tags so that the VLANs in the MAN space can be used independent of the customers VLANs This is ...

Page 124: ...d By default only VLAN 1 is enabled More VLANs may be created by using a list syntax where the individual elements are separated by commas Ranges are specified with a dash separating the lower and upper bound The following example will create VLANs 1 10 11 12 13 200 and 300 1 10 13 200 300 Spaces are allowed in between the delimiters Ethertype for Custome S ports This field specifies the ethertype...

Page 125: ...is is the logical port number for this row Port Mode Access Access ports are normally used to connect to end stations Dynamic features like Voice VLAN may add the port to more VLANs behind the scenes Access ports have the following characteristics Member of exactly one VLAN the Port VLAN Access VLAN which by default is 1 Accepts untagged and C tagged frames Discards all frames that are not classif...

Page 126: ...VLAN tag unaware C tag aware S tag aware or S custom tag aware Ingress filtering can be controlled Ingress acceptance of frames and configuration of egress tagging can be configured independently Port VLAN Determines the port s VLAN ID PVID Allowed VLANs are in the range 1 through 4095 default being 1 On ingress frames get classified to the Port VLAN if the port is configured as VLAN unaware the f...

Page 127: ...orts always have ingress filtering enabled If ingress filtering is enabled checkbox is checked frames classified to a VLAN that the port is not a member of get discarded If ingress filtering is disabled frames classified to a VLAN that the port is not a member of are accepted and forwarded to the switch engine However the port will never transmit frames classified to VLANs that it is not a member ...

Page 128: ... This is particularly useful when dynamic VLAN protocols like MVRP and GVRP must be prevented from dynamically adding ports to VLANs The trick is to mark such VLANs as forbidden on the port in question The syntax is identical to the syntax used in the Enabled VLANs field By default the field is left blank which means that the port may become a member of all possible VLANs The port must be a member...

Page 129: ... row of check boxes for each port is displayed for each VLAN ID If a port is included in a VLAN an image will be displayed If a port is included in a Forbidden port list an image will be displayed If a port is included in a Forbidden port list and dynamic VLAN user register VLAN on same Forbidden port then conflict port will be displayed as conflict port The VLAN Membership Status Page shall show ...

Page 130: ...ort Status for Static User Page Screenshot The Page includes the following fields Object Description The logical port for the settings contained in the same row Port Port Type Show the VLAN Awareness for the port If VLAN awareness is enabled the tag is removed from tagged frames received on the port VLAN tagged frames are classified to the VLAN ID in the tag 130 ...

Page 131: ...ser requests to set VLAN membership or VLAN port configuration the following conflicts can occur Functional Conflicts between feature Conflicts due to hardware limitation Direct conflict between user modules Buttons Select VLAN Users from this drop down list Auto refresh Check this box to refresh the Page automatically Automatic refresh occurs every 3 seconds Click to refresh the Page immediately ...

Page 132: ...tons Click to add new VLAN Click to save changes Click to undo any changes made locally and revert to previously saved values Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Click to refresh the page immediately 4 6 7 Port Isolation Overview When a VLAN is configured to be a private VLAN communication between ports within that VLAN can be prev...

Page 133: ...LAN Ports which can receive traffic from only promiscuous ports in the private VLAN The configuration of promiscuous and isolated ports applies to all private VLANs When traffic comes in on a promiscuous port in a private VLAN the VLAN mask from the VLAN table is applied When traffic comes in on an isolated port the private VLAN mask is applied in addition to the VLAN mask from the VLAN table This...

Page 134: ...ecked port isolation is enabled on that port When unchecked port isolation is disabled on that port By default port isolation is disabled on all ports Port Members Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Click to refresh the page ...

Page 135: ...roup 3 are separated VLAN Each VLAN isolate network traffic so only members of the VLAN receive traffic from the same VLAN members The screen in Figure 4 6 8 appears and Table 4 1 describes the port configuration of the Managed Switch Figure 4 6 8 Two Separate VLAN Diagrams VLAN Group VID Untagged Members Tagged Members VLAN Group 1 1 Port 7 Port 10 N A VLAN Group 2 2 Port 1 Port 2 Port 3 VLAN Gro...

Page 136: ...ng an untagged packet Untagged packet entering VLAN 3 1 While PC 4 transmits an untagged packet enters Port 4 the switch will tag it with a VLAN Tag 3 PC 5 and PC 6 will receive the packet through Port 5 and Port 6 2 While the packet leaves Port 5 it will be stripped away it tag becoming an untagged packet 3 While the packet leaves Port 6 it will keep as a tagged packet with VLAN Tag 3 For this ex...

Page 137: ...User s Manual of MGSW MGSD Series Figure 4 6 10 Change Port VLAN of Port 1 3 to be VLAN2 and Port VLAN of Port 4 6 to be VLAN3 137 ...

Page 138: ...3 Mode as Trunk Selects Egress Tagging as Tag All and Types 2 in the Allowed VLANs column Change Port 6 Mode as Trunk and Selects Egress Tagging as Tag All and Types 3 in the Allowed VLANs column The Per Port VLAN configuration in Figure 4 6 11 appears Figure 4 6 11 Check VLAN 2 and 3 Members on VLAN Membership Page 138 ...

Page 139: ...es within the same VLAN group The screen in Figure 4 6 12 appears Figure 4 6 12 VLAN Trunking Diagram Setup steps 1 Add VLAN Group Add two VLANs VLAN 2 and VLAN 3 Type 1 3 in Allowed Access VLANs column the 1 3 is including VLAN1 and 2 and 3 Figure 4 6 13 Add VLAN 2 and VLAN 3 2 Assign VLAN Member and PVID for each port VLAN 2 Port 1 Port 2 and Port 3 VLAN 3 Port 4 Port 5 and Port 6 VLAN 1 All oth...

Page 140: ...o both VLAN 2 and VLAN 3 at the VLAN Member configuration Page 3 Define a VLAN 1 as a Public Area that overlapping with both VLAN 2 members and VLAN 3 members 4 Assign the VLAN Trunk Port to be the member of each VLAN which wants to be aggregated For this example add Port 7 to be VLAN 2 and VLAN 3 member port 5 Specify Port 7 to be the 802 1Q VLAN Trunk port and the Trunking port must be a Tagged ...

Page 141: ... Trunk port to the VLANs 4 6 8 3 Port Isolate The diagram shows how the Managed Switch handles isolate and promiscuous ports and the each PC is not able to access each other PCs of each isolate port But they all need to access with the same server AP Printer The screen in Figure 4 6 16 appears This section will show you how to configure the port for the server that could be accessed by each isolat...

Page 142: ...4 6 17 The Configuration of Isolated and Promiscuous Port 2 Assign VLAN Member VLAN 1 Port 5 and Port 6 VLAN 2 Port 1 Port 2 Port 5 and Port 6 VLAN 3 Port 3 Port 6 The screen in Figure 4 6 18 appears Figure 4 6 18 Private VLAN Port Setting 142 ...

Page 143: ...ress Indicates the VLAN ID VLAN ID A row of check boxes for each port is displayed for each MAC based VLAN entry To include a port in a MAC based VLAN check the box To remove or exclude the port from the MAC based VLAN make sure the box is unchecked By default no ports are members and all boxes are unchecked Port Members Buttons Click to add a new MAC based VLAN entry Click to save changes Click t...

Page 144: ...ress MAC Address Indicates the VLAN ID VLAN ID Port members of the MAC based VLAN entry Port Members Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Click to refresh the page immediately 4 6 11 Protocol based VLAN This page allows you to add new protocols to Group Name unique for each Group mapping entries as well as allow you to see a...

Page 145: ... different sub values a DSAP 1 byte long string 0x00 0xff b SSAP 1 byte long string 0x00 0xff 3 For SNAP Valid value in this case also is comprised of two different sub values a OUI OUI Organizationally Unique Identifier is value in format of xx xx xx where each pair xx in string is a hexadecimal value ranges from 0x00 0xff b PID If the OUI is hexadecimal 000000 the protocol ID is the Ethernet typ...

Page 146: ... delete a Group Name to VLAN map entry check this box The entry will be deleted on the switch during the next Save Delete A valid Group Name is a string of atmost 16 characters which consists of a combination of alphabets a z or A Z and integers 0 9 no special character is allowed Whichever Group name you try map to a VLAN must be present in Protocol to Group mapping table and must not be preused ...

Page 147: ...try in mapping table Click to save changes Click to undo any changes made locally and revert to previously saved values Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Click to refresh the page immediately 147 ...

Page 148: ...re is also accomplished automatically without operator intervention This automatic network reconfiguration provides maximum uptime to network users However the concepts of the Spanning Tree Algorithm and protocol are a complicated and complex subject and must be fully researched and understood It is possible to cause serious degradation of the performance of the network if the Spanning Tree is inc...

Page 149: ...has a higher number than the current root port can cause a root port change STP Port States The BPDUs take some time to pass through a network This propagation delay can result in topology changes where a port that transitioned directly from a Blocking state to a Forwarding state could create temporary data loops Ports must wait for new network topology information to propagate throughout the netw...

Page 150: ...rom or received by STP enabled ports until the forwarding state is enabled for that port 2 STP Parameters STP Operation Levels The Switch allows for two levels of operation the switch level and the port level The switch level forms a spanning tree consisting of links between one or more switches The port level constructs a spanning tree consisting of groups of one or more ports The STP operates in...

Page 151: ...and ensures that the BPDU is discarded when its age exceeds the value of the maximum age timer 20 seconds Forward Delay Timer The amount time spent by a port in the learning and listening states waiting for a BPDU that may return the port to the blocking state 15 seconds The following are the user configurable STP parameters for the port or port group level Variable Description Default Value Port ...

Page 152: ... setting the above parameters Max Age _ 2 x Forward Delay 1 second Max Age _ 2 x Hello Time 1 second Port Priority A Port Priority can be from 0 to 240 The lower the number the greater the probability the port will be chosen as the Root Port Port Cost A Port Cost can be set from 0 to 200000000 The lower the number the greater the probability the port will be chosen to forward packets 3 Illustratio...

Page 153: ...User s Manual of MGSW MGSD Series Figure 4 7 2 Before Applying the STA Rules In this example only the default STP values are used Figure 4 7 3 After Applying the STA Rules 153 ...

Page 154: ...e STP system settings The settings are used by all STP Bridge instances in the Switch or switch Stack The Managed Switch support the following Spanning Tree protocols Compatiable Spanning Tree Protocol STP Provides a single path between end stations avoiding and eliminating loops Normal Rapid Spanning Tree Protocol RSTP Detects and uses of network topologies that provide faster spanning tree conve...

Page 155: ... or 2 x Hello Time 1 Maximum The lower of 40 or 2 x Forward Delay 1 Maximum Hop Count This defines the initial value of remaining Hops for MSTI information generated at the boundary of an MSTI region It defines how many bridges a root bridge can distribute its BPDU information Valid values are in the range 6 to 40 hops Transmit Hold Count The number of BPDU s a bridge port can send per second When...

Page 156: ...umn displays the following information The Bridge Status screen in Figure 4 7 5 appears Figure 4 7 5 STP Bridge Status Page Screenshot The page includes the following fields Object Description The Bridge Instance This is also a link to the STP Detailed Bridge Status MSTI The Bridge ID of this Bridge instance Bridge ID The Bridge ID of the currently elected root bridge Root ID The switch port curre...

Page 157: ...ort Configuration This page allows the user to inspect the current STP CIST port configurations and possibly change them as well The CIST Port Configuration screen in Figure 4 7 6 appears Figure 4 7 6 STP CIST Port Configuration Page Screenshot 157 ...

Page 158: ...ag is based on AdminEdge and AutoEdge fields This flag is displayed as Edge in Monitor Spanning Tree STP Detailed Bridge Status Controls whether the operEdge flag should start as beeing set or cleared The initial operEdge state when a port is initialized All means all ports will have one specific setting Admin Edge Controls whether the bridge should enable automatic edge detection on the bridge po...

Page 159: ...a All means all ports will have one specific setting Point to Point Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values By default the system automatically detects the speed and duplex mode used on each port and configures the path cost according to the values shown below Path cost 0 is used to indicate auto configuration mode When the short p...

Page 160: ...ns and possibly change them as well The MSTI Priority screen in Figure 4 7 7 appears Figure 4 7 7 MSTI Priority Page Screenshot The page includes the following fields Object Description The bridge instance The CIST is the default instance which is always active MSTI Priority The Configuration All with available values will assign to whole items Controls the bridge priority Lower numerical values h...

Page 161: ...ly and revert to previously saved values 4 7 6 MSTI Configuration This page allows the user to inspect the current STP MSTI bridge instance priority configurations and possibly change them as well The MSTI Configuration screen in Figure 4 7 8 appears Figure 4 7 8 MSTI Configuration Page Screenshot 161 ...

Page 162: ... separated with comma and or space A VLAN can only be mapped to one MSTI A unused MSTI should just be left empty I e not having any VLANs mapped to it VLANs Mapped Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 4 7 7 MSTI Ports Configuration This page allows the user to inspect the current STP MSTI port configurations and possibly change ...

Page 163: ...D Series The page includes the following fields MSTI Port Configuration Object Description Select the bridge instance and set more detail configuration Select MSTI Figure 4 7 10 MST1 MSTI Port Configuration Page Screenshot 163 ...

Page 164: ...defined value can be entered The path cost is used when establishing the active topology of the network Lower path cost ports are chosen as forwarding ports in favor of higher path cost ports Valid values are in the range 1 to 200000000 All means all ports will have one specific setting Priority The Configuration All with available values will assign to whole items Controls the port priority This ...

Page 165: ...STP Port Status screen in Figure 4 7 11 appears Figure 4 7 11 STP Port Status Page Screenshot The page includes the following fields Object Description The switch port number of the logical STP port Port CIST Role The current STP port role of the ICST port The port role can be one of the following values AlternatePort BackupPort RootPort DesignatedPort 165 ...

Page 166: ...e port was last initialized Uptime Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Click to refresh the page immediately 4 7 9 Port Statistics This page displays the STP port statistics counters for port physical ports in the currently selected switch The STP Port Statistics screen in Figure 4 7 12 appears Figure 4 7 12 STP Statistics ...

Page 167: ...uration BPDU s received transmitted on the port STP The number of legacy Topology Change Notification BPDU s received transmitted on the port TCN Discarded Unknown The number of unknown Spanning Tree BPDU s received and discarded on the port The number of illegal Spanning Tree BPDU s received and discarded on the port Discarded Illegal Buttons Auto refresh Check this box to refresh the page automa...

Page 168: ...rs that they will become members of a multicast group The Internet Group Management Protocol IGMP is used to communicate this information IGMP is also used to periodically check the multicast group for members that are no longer active In the case where there is more than one multicast router on a sub network one router is elected as the queried This router then keeps track of the membership of th...

Page 169: ...User s Manual of MGSW MGSD Series Figure 4 8 2 Multicast Flooding Figure 4 8 3 IGMP Snooping Multicast Stream Control 169 ...

Page 170: ...7 Leave a Group version 2 0x12 Membership Report version 1 IGMP packets enable multicast routers to keep track of the membership of multicast groups on their respective sub networks The following outlines what is communicated between a multicast router and a multicast group member using IGMP A host sends an IGMP report to join a group A host will never send a report when it wants to leave a group ...

Page 171: ...lticast enabled switch can periodically ask their hosts if they want to receive multicast traffic If there is more than one router switch on the LAN performing IP multicasting one of these devices is elected querier and assumes the role of querying the LAN for group members It then propagates the service requests on to any upstream multicast switch router to ensure that it will continue to receive...

Page 172: ...ring the next save Delete The name used for indexing the profile table Each entry has the unique name which is composed of at maximum 16 alphabetic and numeric characters At least one alphabet must be present Profile Name Additional description which is composed of at maximum 64 alphabetic and numeric characters about the profile No blank or space characters are permitted as part of description Us...

Page 173: ...ears Figure 4 8 6 IPMC Profile Address Configuration Page The page includes the following fields Object Description Check to delete the entry The designated entry will be deleted during the next save Delete The name used for indexing the address entry table Each entry has the unique name which is composed of at maximum 16 alphabetic and numeric characters At least one alphabet must be present Entr...

Page 174: ...s the table starting from the first entry in the IPMC Profile Address Configuration Updates the table starting with the entry after the last entry currently displayed 4 8 4 IGMP Snooping Configuration This Page provides IGMP Snooping related configuration The IGMP Snooping Configuration screen in Figure 4 8 7 appears Figure 4 8 7 IGMP Snooping Configuration Page Screenshot 174 ...

Page 175: ...ernet switch that leads towards the Layer 3 multicast device or IGMP querier The Switch forwards IGMP join or leave packets to an IGMP router port Auto Select Auto to have the Managed Switch automatically uses the port as IGMP Router port if the port receives IGMP query packets Fix The Managed Switch always uses the specified port as an IGMP Router port Use this mode when you connect an IGMP multi...

Page 176: ...ID IGMP Snooping Enable Enable the per VLAN IGMP Snooping Only up to 32 VLANs can be selected Enable the IGMP Querier election in the VLAN Disable to act as an IGMP Non Querier Querier Election Querier Address Define the IPv4 address as source address used in IP header for IGMP Querier election When the Querier address is not set system uses IPv4 management address of the IP interface associated w...

Page 177: ...Query Interval The Last Member Query Time is the time value represented by the Last Member Query Interval multiplied by the Last Member Query Count The allowed range is 0 to 31744 in tenths of seconds default last member query interval is 10 in tenths of seconds 1 second URI Unsolicited Report Interval The Unsolicited Report Interval is the time between repetitions of a host s initial report of me...

Page 178: ...st addresses but only one profile can be assigned to a port When enabled IGMP join reports received on the port are checked against the filter profile If a requested multicast group is permitted the IGMP join report is forwarded as normal If a requested multicast group is denied the IGMP join report is dropped IGMP throttling sets a maximum number of multicast groups that a port can join at the sa...

Page 179: ...cific port Summary about the designated profile will be shown by clicking the view button Filtering Profile Buttons Click to apply changes Click to undo any changes made locally and revert to previously saved values 4 8 7 IGMP Snooping Status This Page provides IGMP Snooping status The IGMP Snooping Status screen in Figure 4 8 10 appears Figure 4 8 10 IGMP Snooping Status Page Screenshot 179 ...

Page 180: ... Reports Received The number of Received V3 Reports The number of Received V2 Leave V2 Leave Received Display which ports act as router ports A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or IGMP querier Static denotes the specific port is configured to be a router port Dynamic denotes the specific port is learnt to be a router port Both denote the ...

Page 181: ...put fields allow the user to select the starting point in the IGMP Group Table The IGMP Groups Information screen in Figure 4 8 11 appears Figure 4 8 9 IGMP Snooping Groups Information Page Screenshot The Page includes the following fields Object Description VLAN ID of the group VLAN ID Group address of the group displayed Groups Ports under this group Port Members Buttons Auto refresh Automatic r...

Page 182: ...igure 4 8 12 IGMP SSM Information Page Screenshot The Page includes the following fields Object Description VLAN ID of the group VLAN ID Group address of the group displayed Group Switch port number Port Indicates the filtering mode maintained per VLAN ID port number Group Address basis It can be either Include or Exclude Mode IP Address of the source Currently system limits the total number of IP...

Page 183: ...ure 4 8 13 MLD Snooping Configuration Page Screenshot The Page includes the following fields Object Description Enable the Global MLD Snooping Snooping Enabled Unregistered IPMCv6 Flooding enabled Enable unregistered IPMCv6 traffic flooding The flooding control takes effect only when MLD Snooping is enabled When MLD Snooping is disabled unregistered IPMCv6 traffic flooding is always 183 ...

Page 184: ...regation will act as a router port The allowed selection is Auto Fix Fone default compatibility value is Auto Enable the fast leave on the port Fast Leave Enable to limit the number of multicast groups to which a switch port can belong Throtting Buttons Click to apply changes Click to undo any changes made locally and revert to previously saved values 4 8 11 MLD Snooping VLAN Configuration Each Pa...

Page 185: ... 0 RV Robustness Variable The Robustness Variable allows tuning for the expected packet loss on a network The allowed range is 1 to 255 default robustness variable value is 2 QI Query Interval The Query Interval is the interval between General Queries sent by the Querier The allowed range is 1 to 31744 seconds default query interval is 125 seconds QRI Query Response Interval The Max Response Time ...

Page 186: ...n a switch port and MLD throttling limits the number of simultaneous multicast groups a port can join MLD filtering enables you to assign a profile to a switch port that specifies multicast groups that are permitted or denied on the port A MLD filter profile can contain one or more or a range of multicast addresses but only one profile can be assigned to a port When enabled MLD join reports receiv...

Page 187: ... fields Object Description The logical port for the settings Port Select the IPMC Profile as the filtering condition for the specific port Summary about the designated profile will be shown by clicking the view button Filtering Group Buttons Click to apply changes Click to undo any changes made locally and revert to previously saved values 187 ...

Page 188: ... fields Object Description The VLAN ID of the entry VLAN ID Working Querier Version currently Querier Version Working Host Version currently Host Version Shows the Querier status is ACTIVE or IDLE DISABLE denotes the specific interface is administratively disabled Querier Status The number of Transmitted Querier Querier Transmitted The number of Received Querier Querier Received V1 Reports Receive...

Page 189: ...tatus Buttons Click to refresh the Page immediately Clears all Statistics counters Auto refresh Automatic refresh occurs every 3 seconds 4 8 14 MLD Group Information Entries in the MLD Group Table are shown on this Page The MLD Group Table is sorted first by VLAN ID and then by group Each Page shows up to 99 entries from the MLD Group table default being 20 selected through the entries per Page in...

Page 190: ...ource Filtered Multicast Information Table also contains the SSM Source Specific Multicast information This table is sorted first by VLAN ID then by group and then by Port Different source addresses belong to the same group are treated as single entry Each Page shows up to 99 entries from the MLD SFM Information table default being 20 selected through the entries per Page input field When first vi...

Page 191: ...tal number of IP source addresses for filtering to be 128 Source Address Indicates the Type It can be either Allow or Deny Type Hardware Filter Switch Indicates whether data plane destined to the specific group address from the source IPv6 address could be handled by chip or not Buttons Auto refresh Automatic refresh occurs every 3 seconds Refreshes the displayed table starting from the input fiel...

Page 192: ...e subscriber port which is a switch port configured as an MVR receiver port When a subscriber selects a channel the set top box or PC sends an IGMP MLD report message to Switch A to join the appropriate multicast group address Uplink ports that send and receive multicast data to and from the multicast VLAN are called MVR source ports It is allowed to create at maximun 8 MVR VLANs with correspondin...

Page 193: ...guration The MVR screen in Figure 4 8 19 appears Figure 4 8 19 MVR Configuration Page Screenshot The Page includes the following fields Object Description MVR Mode Enable Disable the Global MVR The Unregistered Flooding control depends on the current configuration in IGMP MLD Snooping 193 ...

Page 194: ...en the IPv4 management address is not set system uses the first available IPv4 management address Otherwise system uses a pre defined value By default this value will be 192 168 0 100 Mode Specify the MVR mode of operation In Dynamic mode MVR allows dynamic MVR membership reports on source ports In Compatible mode MVR membership reports are forbidden on source ports The default is Dynamic mode Tag...

Page 195: ...port as a receiver port if it is a subscriber port and should only receive multicast data It does not receive data unless it becomes a member of the multicast group by issuing IGMP MLD messages Caution MVR source ports are not recommended to be overlapped with management VLAN ports Select the port role by clicking the Role symbol to switch the setting I indicates Inactive S indicates Source R indi...

Page 196: ...Transmitted Queries for IGMP and MLD respectively IGMP MLD Queries Transmitted The number of Received IGMPv1 Joins IGMPv1 Joins Received The number of Received IGMPv2 Joins and MLDv1 Reports respectively IGMPv2 MLDv1 Reports Received The number of Received IGMPv1 Joins and MLDv2 Reports respectively IGMPv3 MLDv2 Reports Received IGMPv2 MLDv1 Leaves Received The number of Received IGMPv2 Leaves and...

Page 197: ...t fields allow the user to select the starting point in the MVR Group Table The MVR Groups Information screen in Figure 4 8 21 appears Figure 4 8 21 MVR Groups Information Page Screenshot The Page includes the following fields Object Description VLAN ID of the group VLAN Group ID of the group displayed Groups Ports under this group Port Members Buttons Auto refresh Automatic refresh occurs every 3...

Page 198: ... in Figure 4 8 22 appears Figure 4 8 22 MVR SFM Information Page Screenshot The Page includes the following fields Object Description VLAN ID of the group VLAN ID Group address of the group displayed Group Switch port number Port Indicates the filtering mode maintained per VLAN ID port number Group Address basis It can be either Include or Exclude Mode IP Address of the source Currently system lim...

Page 199: ...sifier classifies the traffic on the network Traffic classifications are determined by protocol application source destination and so on You can create and modify classifications The Switch then groups classified traffic in order to schedule them with the appropriate service level DiffServ Code Point DSCP is the traffic prioritization bits within an IP header that are encoded by certain applicatio...

Page 200: ...GSW MGSD Series 4 9 2 Port Policing This page allows you to configure the Policer settings for all switch ports The Port Policing screen in Figure 4 9 1 appears Figure 4 9 1 QoS Ingress Port Policers Page Screenshot 200 ...

Page 201: ...when the Unit is kbps or fps and it is restricted to 1 3300 when the Unit is Mbps or kfps Rate Unit The Configuration All with available options will assign to whole ports Controls the unit of measure for the policer rate as kbps Mbps fps or kfps The default value is kbps All means all ports will have one specific setting If flow control is enabled and the port is in flow control mode then pause f...

Page 202: ...QoS Egress Port Shapers Page Screenshot The page includes the following fields Object Description Port The logical port for the settings contained in the same row Click on the port number in order to configure the shapers For more detail please refer to chapter 4 9 3 1 Shows disabled or actual queue shaper rate e g 800 Mbps Q0 Q7 Shows disabled or actual port shaper rate e g 800 Mbps Port 202 ...

Page 203: ...scheduler mode is Strict Priority or Weighted on this switch port Schedule Mode Queue Shaper Enable Controls whether the queue shaper is enabled for this queue on this switch port Queue Shaper Rate Controls the rate for the queue shaper The default value is 500 This value is restricted to 100 1000000 when the Unit is kbps and it is restricted to 1 3300 when the Unit is Mbps Controls the unit of me...

Page 204: ...ether the port shaper is enabled for this switch port Port Shaper Enable Port Shaper Rate Controls the rate for the port shaper The default value is 500 This value is restricted to 100 1000000 when the Unit is kbps and it is restricted to 1 3300 when the Unit is Mbps Port Shaper Unit Controls the unit of measure for the port shaper rate as kbps or Mbps The default value is kbps Buttons Click to sa...

Page 205: ... 9 4 Port Classification This page allows you to configure the basic QoS Ingress Classification settings for all switch ports The Port Classification screen in Figure 4 9 4 appears Figure 4 9 4 QoS Ingress Port Classification Page Screenshot ...

Page 206: ...sign to whole ports Controls the default PCP for untagged frames All means all ports will have one specific setting DEI The Configuration All with available values will assign to whole ports Controls the default DEI for untagged frames All means all ports will have one specific setting Tag Class Shows the classification mode for tagged frames on this port Disabled Use default QoS class and DP leve...

Page 207: ...S class and DP level for tagged frames Enabled Use mapped versions of PCP and DEI for tagged frames PCP DEI to QoS class DP level Mapping The Configuration All with available values will assign to whole items Controls the mapping of the classified PCP DEI to QoS class DP level values when Tag Classification is set to Enabled Buttons Click to save changes Click to undo any changes made locally and ...

Page 208: ...rs Figure 4 9 6 QoS Egress Port Schedule Page Screenshot The page includes the following fields Object Description Port The logical port for the settings contained in the same row Click on the port number in order to configure the schedulers For more detail please refer to chapter 4 9 5 1 Shows the scheduling mode for this port Mode Shows the weight for this queue and port Q0 Q5 208 ...

Page 209: ...arking Page Screenshot The page includes the following fields Object Description Port The logical port for the settings contained in the same row Click on the port number in order to configure tag remarking For more detail please refer to chapter 4 9 6 1 Mode Shows the tag remarking mode for this port Classified Use classified PCP DEI values Default Use default PCP DEI values Mapped Use mapped ver...

Page 210: ...ode for this port Classified Use classified PCP DEI values Default Use default PCP DEI values Mapped Use mapped versions of QoS class and DP level PCP DEI Configuration Controls the default PCP and DEI values used when the mode is set to Default QoS class DP level to PCP DEI Mapping Controls the mapping of the classified QoS class DP level to PCP DEI values when the mode is set to Mapped Buttons C...

Page 211: ...eries 4 9 7 Port DSCP This page allows you to configure the basic QoS Port DSCP Configuration settings for all switch ports The Port DSCP screen in Figure 4 9 9 appears Figure 4 9 9 QoS Port DSCP Configuration Page Screenshot 211 ...

Page 212: ...abled DSCP is 0 Selected Classify only selected DSCP for which classification is enabled as specified in DSCP Translation window for the specific DSCP All Classify all DSCP Egress The Configuration All with available options will assign to whole ports Port Egress Rewriting can be one of All means all ports will have one specific setting Disable No Egress rewrite Enable Rewrite enabled without rema...

Page 213: ...ing fields Object Description Maximum number of support ed DSCP values are 63 DSCP Click to check if the DSCP value is trusted means to select all ports of Managed Switch Trust QoS Class The Configuration All with available values will assign to whole DSCP values QoS Class value can be any of 0 7 DPL The Configuration All with available values will assign to whole DSCP values Drop Precedence Level...

Page 214: ...nslation screen in Figure 4 9 11 appears Figure 4 9 11 DSCP Translation Page Screenshot The Page includes the following fields Object Description Maximum number of supported DSCP values are 64 and valid DSCP value ranges from 0 to 63 DSCP Ingress Ingress side DSCP can be first translated to new DSCP before using the DSCP for QoS class and DPL map There are two configuration parameters for DSCP Tra...

Page 215: ...r for Egress side Remap Select the DSCP value from select menu to which you want to remap DSCP value ranges form 0 to 63 Remap DP Buttons Click to apply changes Click to undo any changes made locally and revert to previously saved values 4 9 10 DSCP Classification This Page allows you to map DSCP value to a QoS Class and DPL value The DSCP Classification screen in Figure 4 9 11 appears Figure 4 9 ...

Page 216: ...the QCEs Each row describes a QCE that is defined The maximum number of QCEs is 256 on each switch Click on the lowest plus sign to add a new QCE to the list The QoS Control List screen in Figure 4 9 12 appears Figure 4 9 12 QoS Control List Configuration Page Screenshot The page includes the following fields Object Description Indicates the index of QCE QCE Indicates the list of ports configured ...

Page 217: ... or range 0 1 2 3 4 5 6 7 0 3 4 7 or Any PCP Drop Eligible Indicator Valid value of DEI can be any of values between 0 1 or Any DEI Action Indicates the classification action taken on ingress frame if parameters configured are matched with the frame s content There are three action fields Class DPL and DSCP Class Classified QoS Class if a frame matches the QCE it will be put in the queue DPL Drop ...

Page 218: ...scribed as below Tag Value of Tag field can be Any Untag or Tag VID Valid value of VLAN ID can be any value in the range 1 4095 or Any user can enter either a specific value or a range of VIDs PCP Priority Code Point Valid value PCP are specific 0 1 2 3 4 5 6 7 or range 0 1 2 3 4 5 6 7 0 3 4 7 or Any DEI Drop Eligible Indicator Valid value of DEI can be any of values between 0 1 or Any SMAC Source...

Page 219: ...d 255 When Mask is converted to a 32 bit binary string and read from left to right all bits following the first zero must also be zero DSCP Diffserv Code Point value DSCP It can be specific value range of value or Any DSCP values are in the range 0 63 including BE CS1 CS7 EF or AF11 AF43 IP Fragment IPv4 frame fragmented option yes no any Sport Source TCP UDP port 0 65535 or Any specific or port r...

Page 220: ...onflict if a specific QCE is not applied to the hardware due to hardware limitations The maximum number of QCEs is 256 on each switch The QoS Control List Status screen in Figure 4 9 14 appears Figure 4 9 14 QoS Control List Status Page Screenshot The page includes the following fields Object Description Indicates the QCL user User Indicates the index of QCE QCE Frame Type Indicates the type of fr...

Page 221: ... matches the QCE then DSCP will be classified with the value displayed under DSCP column Displays QCE status It may happen that resources required to add a QCE may not available in that case it shows conflict status as Yes otherwise it is always No Please note that conflict can be resolved by releaseing the resource required by the QCE and pressing Refresh button Conflict Buttons Select the QCL st...

Page 222: ...ntrol and a broadcast storm rate control These only affect flooded frames i e frames with a VLAN ID DMAC pair not present on the MAC Address table The configuration indicates the permitted packet rate for unicast multicast or broadcast traffic across the switch The Storm Control Configuration screen in Figure 4 9 15 appears Figure 4 9 15 Storm Control Configuration Page Screenshot 222 ...

Page 223: ...ick to save changes Click to undo any changes made locally and revert to previously saved values 4 9 14 WRED RED Drop Probability Function Max DP 1 3 is the drop probability when the average queue filling level is 100 Frames marked with Drop Precedence Level 0 are never dropped Min Threshold is the average queue filling level where the queues randomly start dropping frames The drop probability for...

Page 224: ...ether RED is enabled for this queue Enable Controls the lower RED threshold If the average queue filling level is below this threshold the drop probability is zero This value is restricted to 0 100 Min Threshold Controls the drop probability for frames marked with Drop Precedence Level 1 when the average queue filling level is 100 This value is restricted to 0 100 Max DP1 Controls the drop probabi...

Page 225: ...age includes the following fields Object Description The logical port for the settings contained in the same row Port There are 8 QoS queues per port Q0 is the lowest priority queue Q0 Q7 The number of received and transmitted packets per queue Rx Tx Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Click to refresh the page immediately ...

Page 226: ... connecting the IP device to the switch the IP phone should configure the voice VLAN ID correctly It should be configured through its own GUI The Voice VLAN Configuration screen in Figure 4 9 18 appears Figure 4 9 18 Voice VLAN Configuration Page Screenshot The page includes the following fields Object Description Mode Indicates the Voice VLAN mode operation We must disable MSTP feature before we ...

Page 227: ...LAN Auto Enable auto detect mode It detects whether there is VoIP phone attached on the specific port and configure the Voice VLAN members automatically Forced Forced join to Voice VLAN All means all ports will have one specific setting Port Security Indicates the Voice VLAN port security mode When the function is enabled all non telephone MAC address in Voice VLAN will be blocked 10 seconds Possi...

Page 228: ...t Description Check to delete the entry It will be deleted during the next save Delete An telephony OUI address is a globally unique identifier assigned to a vendor by IEEE It must be 6 characters long and the input format is xx xx xx x is a hexadecimal digit Telephony OUI The description of OUI address Normaly it descript which vendor telephony device The allowed string length is 0 to 32 Descript...

Page 229: ... permission associated with a particular ACE ID There are three ACE frame types Ethernet Type ARP and IPv4 and two ACE actions permit and deny The ACE also contains many detailed different parameter options that are available for individual application 4 10 1 Access Control List Status This page shows the ACL status by different ACL users Each row describes the ACE that is defined It is a conflict...

Page 230: ...direct operation of the ACE Frames matching the ACE are redirected to the port number The allowed values are Disabled or a specific port number When Disabled is displayed the port redirect operation is disabled Mirror Specify the mirror operation of this port The allowed values are Enabled Frames received on the port are mirrored Disabled Frames received on the port are not mirrored The default va...

Page 231: ...ific ingress port Indicates the policy number and bitmask of the ACE Policy Bitmask Frame Type Indicates the frame type of the ACE Possible values are Any The ACE will match any frame type EType The ACE will match Ethernet Type frames Note that an Ethernet Type based ACE will not get matched by IP and ARP frames ARP The ACE will match ARP RARP frames IPv4 The ACE will match all IPv4 frames IPv4 IC...

Page 232: ...not mirrored The default value is Disabled The counter indicates the number of times the ACE was hit by a frame Counter Modification Buttons You can modify each ACE Access Control Entry in the table using the following buttons Inserts a new ACE before the current row Edits the ACE row Moves the ACE up the list Moves the ACE down the list Deletes the ACE The lowest plus sign adds a new entry at the...

Page 233: ...gure 4 10 3 appears Figure 4 10 3 ACE Configuration Page Screenshot The page includes the following fields Object Description Ingress Port Select the ingress port for which this ACE applies All The ACE applies to all port Portn The ACE applies to this port number where n is the number of the switch port Policy Filter Specify the policy number filter for this ACE Any No policy filter is specified p...

Page 234: ... the rate limiter operation is disabled Rate Limiter Select whether EVC policer is enabled or disabled The default value is Disabled EVC Policer EVC Policer ID Select which EVC policer ID to apply on this ACE The allowed values are Disabled or the values 1 through 128 Frames that hit the ACE are redirected to the port number specified here The allowed range is the same as the switch port number ra...

Page 235: ...ACE choose this value A field for entering a DMAC value appears When Specific is selected for the DMAC filter you can enter a specific destination MAC address The legal format is xx xx xx xx xx xx A frame that hits this ACE matches this DMAC value DMAC Value VLAN Parameters Object Description 802 1Q Tagged Specify whether frames can hit the action according to the 802 1Q tagged The allowed values ...

Page 236: ... IP address in the SIP Address field that appears Network Sender IP filter is set to Network Specify the sender IP address and sender IP mask in the SIP Address and SIP Mask fields that appear When Host or Network is selected for the sender IP filter you can enter a specific sender IP address in dotted decimal notation Sender IP Address Sender IP Mask When Network is selected for the sender IP fil...

Page 237: ...is allowed don t care IP Specify whether frames can hit the action according to their ARP RARP hardware address space HRD settings 0 ARP RARP frames where the HLD is equal to Ethernet 1 1 ARP RARP frames where the HLD is equal to Ethernet 1 Any Any value is allowed don t care Ethernet Specify whether frames can hit the action according to their ARP RARP protocol address space PRO settings 0 ARP RA...

Page 238: ...s where the MF bit is set or the FRAG OFFSET field is greater than zero must not be able to match this entry Yes IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must be able to match this entry Any Any value is allowed don t care IP Option Specify the options flag setting for this ACE No IPv4 frames where the options flag is set must not be able to match this entr...

Page 239: ...lter status is don t care Specific If you want to filter a specific ICMP filter with this ACE you can enter a specific ICMP value A field for entering an ICMP value appears ICMP Type Value When Specific is selected for the ICMP filter you can enter a specific ICMP value The allowed range is 0 to 255 A frame that hits this ACE matches this ICMP value ICMP Code Filter Specify the ICMP code filter fo...

Page 240: ...er a specific TCP UDP destination value A field for entering a TCP UDP destination value appears Range If you want to filter a specific range TCP UDP destination filter with this ACE you can enter a specific TCP UDP destination range value A field for entering a TCP UDP destination value appears TCP UDP Destination Number When Specific is selected for the TCP UDP destination filter you can enter a...

Page 241: ... is allowed don t care TCP URG Specify the TCP Urgent Pointer field significant URG value for this ACE 0 TCP frames where the URG field is set must not be able to match this entry 1 TCP frames where the URG field is set must be able to match this entry Any Any value is allowed don t care Ethernet Type Parameters The Ethernet Type parameters can be configured when Frame Type Ethernet Type is select...

Page 242: ...User s Manual of MGSW MGSD Series Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values Return to the previous page 242 ...

Page 243: ... Configure the ACL parameters ACE of each switch port These parameters will affect frames received on a port unless the frame matches a specific ACE The ACL Ports Configuration screen in Figure 4 10 4 appears Figure 4 10 4 ACL Ports Configuration Page Screenshot 243 ...

Page 244: ... Disabled Frames received on the port are not mirrored The default value is Disabled All means all ports will have one specific setting Logging Specify the logging operation of this port The allowed values are Enabled Frames received on the port are stored in the System Log Disabled Frames received on the port are not logged The default value is Disabled Please note that the System Log memory size...

Page 245: ...saved values Click to refresh the page any changes made locally will be undone Click to clear the counters 4 10 5 ACL Rate Limiter Configuration Configure the rate limiter for the ACL of the switch The ACL Rate Limiter Configuration screen in Figure 4 10 5 appears Figure 4 10 5 ACL Rate Limiter Configuration Page Screenshot 245 ...

Page 246: ...ow Rate Limiter ID Rate The allowed values are 0 3276700 in pps or 0 100 200 300 1000000 in kbps Unit Specify the rate unit The allowed values are pps packets per second kbps Kbits per second All means all ports will have one specific setting Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 246 ...

Page 247: ...method The switch simply encapsulates the EAP part of the frame into the relevant type EAPOL or RADIUS and forwards it When authentication is complete the RADIUS server sends a special packet containing a success or failure indication Besides forwarding this decision to the supplicant the switch uses it to open up or block traffic on the switch port connected to the supplicant Overview of MAC Base...

Page 248: ...s TACACS Local user name and Priviledge Level control RADIUS and TACACS are logon authentication protocols that use software running on a central server to control access to RADIUS aware or TACACS aware devices on the network An authentication server contains a database of multiple user name password pairs with associated privilege levels for each user that requires management access to the Manage...

Page 249: ...ble Authentication Protocol EAP extensions is the only supported authentication server it is available in Cisco Secure Access Control Server version 3 0 RADIUS operates in a client server model in which secure authentication information is exchanged between the RADIUS server and one or more RADIUS clients Switch 802 1X device controls the physical access to the network based on the authentication ...

Page 250: ...bootup the client does not receive an EAP request identity frame from the switch the client can initiate authentication by sending an EAPOL start frame which prompts the switch to request the client s identity If 802 1X is not enabled or supported on the network access device any EAPOL frames from the client are dropped If the client does not receive an EAP request identity frame after three attem...

Page 251: ...iates the authentication process by sending the EAPOL start frame When no response is received the client sends the request for a fixed number of times Because no response is received the client begins sending frames as if the port is in the authorized state If the client is successfully authenticated receives an Accept frame from the authentication server the port state changes to authorized and ...

Page 252: ... Method Authentication Method can be set to one of the following values None authentication is disabled and login is not possible local use the local user database on the switch stack for authentication RADIUS use a remote RADIUS server for authentication TACACSt use a remote TACACS server for authentication Enable fallback to local authentication by checking this box If none of the configured aut...

Page 253: ...ed on the Configuration Security AAA page The IEEE802 1X standard defines port based operation but non standard variants overcome security limitations as shall be explored below MAC based authentication allows for authentication of more than one user on the same port and doesn t require the user to have special 802 1X supplicant software installed on his system The switch uses the user s MAC addre...

Page 254: ...icates if NAS is globally enabled or disabled on the switch If globally disabled all ports are allowed forwarding of frames Reauthentication Enabled If checked successfully authenticated supplicants clients are reauthenticated after the interval specified by the Reauthentication Period Reauthentication for 802 1X enabled ports can be used to detect if a new device is plugged into a 254 ...

Page 255: ...addresses the Port Security module needs to check for activity on the MAC address in question at regular intervals and free resources if no activity is seen within a given period of time This parameter controls exactly this period and can be set to a number between 10 and 1000000 seconds If reauthentication is enabled and the port is in a 802 1X based mode this is not so criticial since supplicant...

Page 256: ...N on which a successfully authenticated supplicant is placed on the switch Incoming traffic will be classified to and switched on the RADIUS assigned VLAN The RADIUS server must be configured to transmit special RADIUS attributes to take advantage of this feature see RADIUS Assigned VLAN Enabled below for a detailed description The RADIUS Assigned VLAN Enabled checkbox provides a quick way to glob...

Page 257: ...nly be changed if the Guest VLAN option is globally enabled Port Configuration The table has one row for each port on the selected switch in the stack and a number of columns which are Object Description Port The port number for which the configuration below applies Admin State The Configuration All with available options will assign to whole ports If NAS is globally enabled this selection control...

Page 258: ...he first server in the list is currently down but not considered dead Now if the supplicant retransmits EAPOL Start frames at a rate faster than X seconds then it will never get authenticated because the switch will cancel on going backend authentication server requests whenever it receives a new EAPOL Start frame from the supplicant And since the server hasn t yet failed because the X seconds hav...

Page 259: ...e port at the same time Each supplicant is authenticated individually and secured in the MAC table using the Port Security module In Multi 802 1X it is not possible to use the multicast BPDU MAC address as destination MAC address for EAPOL frames sent from the switch towards the supplicant since that would cause all supplicants attached to the port to reply to requests sent from the switch Instead...

Page 260: ...es can be spoofed by malicious users equipment whose MAC address is a valid RADIUS user can be used by anyone Also only the MD5 Challenge method is supported The maximum number of clients that can be attached to a port can be limited using the Port Security Limit Control functionality RADIUS Assigned QoS Enabled When RADIUS Assigned QoS is both globally enabled and enabled checked for a given port...

Page 261: ...r the supplicant is otherwise no longer present on the port the port s VLAN ID is immediately reverted to the original VLAN ID which may be changed by the administrator in the meanwhile without affecting the RADIUS assigned This option is only available for single client modes i e Port based 802 1X Single 802 1X For trouble shooting VLAN assignments use the Monitor VLANs VLAN Membership and VLAN P...

Page 262: ...quest Identity frames is configured with EAPOL Timeout If Allow Guest VLAN if EAPOL Seen is enabled the port will now be placed in the Guest VLAN If disabled the switch will first check its history to see if an EAPOL frame has previously been received on the port this history is cleared if the port link goes down or the port s Admin State is changed and if not the port will be placed in the Guest ...

Page 263: ...port s Admin State is in an EAPOL based or MAC based mode Restart Clicking these buttons will not cause settings changed on the page to take effect Reauthenticate Schedules a reauthentication to whenever the quiet period of the port runs out EAPOL based authentication For MAC based authentication reauthentication will be attempted immediately The button only has effect for successfully authenticat...

Page 264: ...Description Port The switch port number Click to navigate to detailed NAS statistics for this port Admin State The port s current administrative state Refer to NAS Admin State for a description of possible values Port State The current state of the port Refer to NAS Port State for a description of the individual states Last Source The source MAC address carried in the most recently received EAPOL ...

Page 265: ...N ID Read more about RADIUS assigned VLANs here If the port is moved to the Guest VLAN Guest is appended to the VLAN ID Read more about Guest VLANs here Port VLAN ID Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Click to refresh the page immediately 4 11 5 Network Access Statistics This page provides detailed NAS statistics for a spe...

Page 266: ...gned is appended to the VLAN ID Read more about RADIUS assigned VLANs here If the port is moved to the Guest VLAN Guest is appended to the VLAN ID Read more about Guest VLANs here Port VLAN ID Port Counters Object Description These supplicant frame counters are available for the following administrative states Force Authorized Force Unauthorized Port based 802 1X Single 802 1X Multi 802 1X Directi...

Page 267: ...d Length dot1xAuthEapLengthErr orFramesRx The number of EAPOL frames that have been received by the switch in which the Packet Body Length field is invalid Tx dot1xAuthEapolFrames Tx Total The number of EAPOL frames of any type that have been transmitted by the switch Tx dot1xAuthEapolReqIdFr amesTx Request ID The number of EAPOL Request Identity frames that have been transmitted by the switch Tx ...

Page 268: ...d server for this port left most table or client right most table Rx Other Requests dot1xAuthBackendOther RequestsToSupplicant 802 1X based Counts the number of times that the switch sends an EAP Request packet following the first to the supplicant Indicates that the backend server chose an EAP method MAC based Not applicable Rx Auth Successes dot1xAuthBackendAuth Successes 802 1X and MAC based Co...

Page 269: ...sions are not counted MAC based Counts all the backend server packets sent from the switch towards the backend server for a given port left most table or client right most table Possible retransmissions are not counted Information about the last supplicant client that attempted to authenticate This information is available for the following administrative states Port based 802 1X Single 802 1X Mul...

Page 270: ...will be empty if no MAC address is currently selected To populate the table select one of the attached MAC Addresses from the table below Attached MAC Address Object Description Identity Shows the identity of the supplicant as received in the Response Identity EAPOL frame Clicking the link causes the supplicant s EAPOL and Backend Server counters to be shown in the Selected Counters table If no su...

Page 271: ...he date and time of the last authentication of the client successful as well as unsuccessful Last Authentication Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Click to refresh the page immediately This button is available in the following modes Force Authorized Force Unauthorized Port based 802 1X Single 802 1X Click to clear the cou...

Page 272: ... request Retransmit Retransmit is the number of times in the range 1 to 1000 a RADIUS request is retransmitted to a server that is not responding If the server has not responded after the last retransmit it is considered to be dead Dead Time The Dead Time which can be set to a number between 0 and 3600 seconds is the period during which the switch will not send new requests to a server that has fa...

Page 273: ... are Object Description Delete To delete a RADIUS server entry check this box The entry will be deleted during the next Save Hostname The IP address or hostname of the RADIUS server Auth Port The UDP port to use on the RADIUS server for authentication Acct Port The UDP port to use on the RADIUS server for accounting Timeout This optional setting overrides the global timeout value Leaving it blank ...

Page 274: ...000 to wait for a reply from a TACACS server before it is considered to be dead The Dead Time which can be set to a number between 0 to 1440 minutes is the period during which the switch will not send new requests to a server that has failed to respond to a previous request This will stop the switch from continually trying to contact a server that it has already determined as dead Setting the Dead...

Page 275: ...TACACS server for authentication Timeout This optional setting overrides the global timeout value Leaving it blank will use the global timeout value This optional setting overrides the global key Leaving it blank will use the global key Key Buttons Click to add a new TACACS server An empty row is added to the table and the TACACS server can be configured as needed Up to 5 servers are supported Cli...

Page 276: ...e IP address and UDP port number in IP Address UDP Port notation of this server Status The current state of the server This field takes one of the following values Disabled The server is disabled Not Ready The server is enabled but IP communication is not yet up and running Ready The server is enabled IP communication is up and running and the RADIUS module is ready to accept access attempts Dead ...

Page 277: ... RADIUS module is ready to accept accounting attempts Dead X seconds left Accounting attempts were made to this server but it did not reply within the configured timeout The server has temporarily been disabled but will get re enabled when the dead time expires The number of seconds left before this occurs is displayed in parentheses This state is only reachable when more than one server is enable...

Page 278: ...in RFC4668 RADIUS Authentication Client MIB Use the server select box to switch between the backend servers to show details for Object Description RADIUS authentication server packet counter There are seven receive and four transmit counters Direction Packet Counters RFC4668 Name Name Description Rx radiusAuthClientExtA ccessAccepts Access Accepts The number of RADIUS Access Accept packets valid o...

Page 279: ...kets with an invalid length Bad authenticators or Message Authenticator attributes or unknown types are not included as malformed access responses Rx Bad Authenticators radiusAuthClientExtB adAuthenticators The number of RADIUS Access Response packets containing invalid authenticators or Message Authenticator attributes received from the server Rx radiusAuthClientExtU nknownTypes Unknown Types The...

Page 280: ...onse This variable is incremented when an Access Request is sent and decremented due to receipt of an Access Accept Access Reject Access Challenge timeout or retransmission Tx Timeouts radiusAuthClientExtT imeouts The number of authentication timeouts to the server After a timeout the client may retry to the same server send to a different server or give up A retry to the same server is counted as...

Page 281: ...pTim e The time interval measured in milliseconds between the most recent Access Reply Access Challenge and the Access Request that matched it from the RADIUS authentication server The granularity of this measurement is 100 ms A value of 0 ms indicates that there hasn t been round trip communication with the server yet RADIUS Accounting Statistics The statistics map closely to those specified in R...

Page 282: ...IUS packets that were received from the server on the accounting port and dropped for some other reason Tx radiusAccClientExt Requests Requests The number of RADIUS packets sent to the server This does not include retransmissions Tx Retransmissions radiusAccClientExt Retransmissions The number of RADIUS packets retransmitted to the RADIUS accounting server Tx radiusAccClientExt PendingRequests Pen...

Page 283: ...ot yet up and running Ready The server is enabled IP communication is up and running and the RADIUS module is ready to accept accounting attempts Dead X seconds left Accounting attempts were made to this server but it did not reply within the configured timeout The server has temporarily been disabled but will get re enabled when the dead time expires The number of seconds left before this occurs ...

Page 284: ...efresh Check this box to refresh the Page automatically Automatic refresh occurs every 3 seconds Click to refresh the Page immediately Clears the counters for the selected server The Pending Requests counter will not be cleared by this operation 284 ...

Page 285: ... This page allows you to configure the Port Security Limit Control system and port settings Limit Control allows for limiting the number of users on a given port A user is identified by a MAC address and VLAN ID If Limit Control is enabled on a port the limit specifies the maximum number of users on the port If this number is exceeded an action is taken The action can be one of the four different ...

Page 286: ...User s Manual of MGSW MGSD Series Figure 4 12 1 Port Limit Control Configuration Overview Page Screenshot 286 ...

Page 287: ...ort on this switch on which Limit Control is enabled The end host will be allowed to forward if the limit is not exceeded Now suppose that the end host logs off or powers down If it wasn t for aging the end host would still take up resources on this switch and will be allowed to forward To overcome this situation enable aging With aging enabled a timer is started once the end host gets secured Whe...

Page 288: ...ill be learned Even if the link is physically disconnected and reconnected on the port by disconnecting the cable the port will remain shut down There are three ways to re open the port 1 Boot the stack or elect a new masterthe switch 2 Disable and re enable Limit Control on the port or the stackswitch 3 Click the Reopen button Trap Shutdown If Limit 1 MAC addresses is seen on the port both the Tr...

Page 289: ...ew Page Screenshot The Page includes the following fields Object Description Mode Indicates the access management mode operation Possible modes are Enabled Enable access management mode operation Disabled Disable access management mode operation Delete Check to delete the entry It will be deleted during the next apply VLAN ID Indicates the VLAN ID for the access management entry Start IP address I...

Page 290: ...r access management The Access Management Statistics screen in Figure 4 12 3 appears Figure 4 12 3 Access Management Statistics Overview Page Screenshot The page includes the following fields Object Description Interface The interface that allowed remote host can access the Managed Switch Receive Packets The received packets number from the interface under access management mode is enabled Allowed...

Page 291: ...ode operation Automatic redirect web browser to HTTPS during HTTPS mode enabled Possible modes are Enabled Enable HTTPS redirect mode operation Disabled Disable HTTPS redirect mode operation Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 4 12 5 SSH Configure SSH on this page This page shows the Port Security status Port Security is a modu...

Page 292: ...cally and revert to previously saved values 4 12 6 Port Security Status This page shows the Port Security status Port Security is a module with no direct configuration Configuration comes indirectly from other modules the user modules When a user module has enabled port security on a port the port is set up for software based learning In this mode frames from unknown MAC addresses are passed on to...

Page 293: ...owing fields User Module Legend The legend shows all user modules that may request Port Security services Object Description User Module Name The full name of a module that may request Port Security services A one letter abbreviation of the user module This is used in the Users column in the port status table Abbr 293 ...

Page 294: ...ddresses to arrive Limit Reached The Port Security service is enabled by at least the Limit Control user module and that module has indicated that the limit is reached and no more MAC addresses should be taken in Shutdown The Port Security service is enabled by at least the Limit Control user module and that module has indicated that the limit is exceeded No MAC addresses can be learned on the por...

Page 295: ...AN ID The MAC address and VLAN ID that is seen on this port If no MAC addresses are learned a single row stating No MAC addresses attached is displayed State Indicates whether the corresponding MAC address is blocked or forwarding In the blocked state it will not be allowed to transmit or receive traffic Time of Addition Shows the date and time when this MAC address was first seen on the port If a...

Page 296: ... block intruder on the untrusted ports of DUT when it tries to intervene by injecting a bogus DHCP reply packet to a legitimate conversation between the DHCP client and server Configure DHCP Snooping on this page The DHCP Snooping Configuration screen in Figure 4 12 8 appears 296 ...

Page 297: ...User s Manual of MGSW MGSD Series Figure 4 12 8 DHCP Snooping Configuration Screen Page Screenshot 297 ...

Page 298: ...ted Configures the port as trusted sources of the DHCP message Untrusted Configures the port as untrusted sources of the DHCP message Port Mode All means all ports will have one specific setting Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 4 12 9 DHCP Snooping Statistics This page provides statistics for DHCP snooping The statistics onl...

Page 299: ...and transmitted Rx and Tx Release The number of release option 53 with value 7 packets received and transmitted Rx and Tx Inform The number of inform option 53 with value 8 packets received and transmitted Rx and Tx Lease Query The number of lease query option 53 with value 10 packets received and transmitted Rx and Tx Lease Unassigned The number of lease unassigned option 53 with value 11 packets...

Page 300: ...oping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host This page provides IP Source Guard related configuration The IP Source Guard Configuration screen in Figure 4 12 10 appears 300 ...

Page 301: ...onfiguration Enable the Global IP Source Guard or disable the Global IP Source Guard All configured ACEs will be lost when the mode is enabled Port Mode Configuration Specify IP Source Guard is enabled on which ports Only when both Global Mode and Port Mode on a given port are enabled IP Source Guard is enabled on this given port All means all ports will have one specific setting 301 ...

Page 302: ...any changes made locally and revert to previously saved values 4 12 11 IP Source Guard Static Table This page provides Static IP Source Guard Table The Static IP Source Guard Table screen in Figure 4 12 11 appears Figure 4 12 11 Static IP Source Guard Table Screen Page Screenshot The page includes the following fields Object Description Delete Check to delete the entry It will be deleted during th...

Page 303: ...ted configuration The ARP Inspection Configuration screen in Figure 4 12 12 appears Figure 4 12 12 ARP Inspection Configuration Screen Page Screenshot The page includes the following fields Object Description Mode of ARP Inspection Configuration Enable the Global ARP Inspection or disable the Global ARP Inspection Port Mode Configuration Specify ARP Inspection is enabled on which ports Only when b...

Page 304: ...User s Manual of MGSW MGSD Series Buttons Click to translate all dynamic entries to static entries Click to save changes Click to undo any changes made locally and revert to previously saved values 304 ...

Page 305: ...e includes the following fields Object Description Delete Check to delete the entry It will be deleted during the next save Port The logical port for the settings VLAN ID The VLAN ID for the settings MAC Address Allowed Source MAC address in ARP request packets Allowed Source IP address in ARP request packets IP Address Buttons Click to add a new entry Click to save changes Click to undo any chang...

Page 306: ...C address of the equipment sending the frame The SMAC address is used by the switch to automatically update the MAC table with these dynamic MAC addresses Dynamic entries are removed from the MAC table if no frame with the corresponding SMAC address has been seen after a configurable age time 4 13 1 MAC Address Table Configuration The MAC Address Table is configured on this page Set timeouts for e...

Page 307: ...earned all other frames are dropped Note Make sure that the link used for managing the switch is added to the Static Mac Table before changing to secure learning mode otherwise the management link is lost and can only be restored by using another non secure port or by connecting to the switch via the serial interface Secure Static MAC Table Configuration The static entries in the MAC table are sho...

Page 308: ...he MAC Table The Start from MAC address and VLAN input fields allow the user to select the starting point in the MAC Table Clicking the Refresh button will update the displayed table starting from that or the closest next MAC Table match In addition the two input fields will upon a Refresh button click assume the value of the first displayed entry allowing for continuous refresh with the same star...

Page 309: ... 4 13 3 Dynamic ARP Inspection Table Screenshot Navigating the ARP Inspection Table Each page shows up to 999 entries from the Dynamic ARP Inspection table default being 20 selected through the entries per page input field When first visited the web page will show the first 20 entries from the beginning of the Dynamic ARP Inspection Table The Start from port address VLAN MAC address and IP address...

Page 310: ...able is sorted first by port then by VLAN ID then by IP address and then by MAC address The Dynamic IP Source Guard Table screen in Figure 4 13 4 appears Figure 4 13 4 Dynamic IP Source Guard Table Screenshot Navigating the ARP Inspection Table Each page shows up to 99 entries from the Dynamic IP Source Guard table default being 20 selected through the entries per page input field When first visit...

Page 311: ...he entries are displayed VLAN ID VLAN ID in which the IP traffic is permitted IP Address User IP Address of the entry Source MAC Address MAC Address Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Refreshes the displayed table starting from the Start from MAC address and VLAN input fields Updates the table starting from the first entry...

Page 312: ...to store and maintain information gathered about the neighboring network nodes it discovers Link Layer Discovery Protocol Media Endpoint Discovery LLDP MED is an extension of LLDP intended for managing endpoint devices such as Voice over IP phones and network switches The LLDP MED TLVs advertise information such as network policy power inventory and device location details LLDP and LLDP MED inform...

Page 313: ... default TTL is 4 30 120 seconds Tx Delay If some configuration is changed e g the IP address a new LLDP frame is transmitted but the time between the LLDP frames will always be at least the value of Tx Delay seconds Tx Delay cannot be larger than 1 4 of the Tx Interval value Valid values are restricted to 1 8192 seconds This attribute must comply with the rule 4 Delay Interval Transmission Interv...

Page 314: ... the LLDP neighbours table CDP TLV Port ID is mapped to the LLDP Port ID field CDP TLV Version and Platform is mapped to the LLDP System Description field Both the CDP and LLDP support system capabilities but the CDP capabilities cover capabilities that are not part of the LLDP These capabilities are shown as others in the LLDP neighbours table If all ports have CDP awareness disabled the switch f...

Page 315: ...he port sending this advertisement The management address TLV may also include information about the specific interface associated with this address and an object identifier indicating the type of hardware component or protocol entity associated with this address Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 4 14 3 LLDP MED Configuration...

Page 316: ...advertise LLDP MED TLVs in outgoing LLDPDUs on the associated port The LLDP MED application will temporarily speed up the transmission of the LLDPDU to start within a second when a new LLDP MED neighbor has been detected in order share LLDP MED information as fast as possible to new neighbors Because there is a risk that a LLDP frame being lost during transmission between neighbors it is recommend...

Page 317: ...level at the main entrance Map Datum The Map Datum used for the coordinates given in this Option WGS84 Geographical 3D World Geodesic System 1984 CRS Code 4327 Prime Meridian Name Greenwich NAD83 NAVD88 North American Datum 1983 CRS Code 4269 Prime Meridian Name Greenwich The associated vertical datum is the North American Vertical Datum of 1988 NAVD88 This datum pair is to be used when referencin...

Page 318: ...ahn Zip code Postal zip code Example 2791 Building Building structure Example Low Library Apartment Unit Apartment suite Example Apt 42 Floor Floor Example 4 Room no Room number Example 450F Place type Place type Example Office Postal community name Postal community name Example Leonia P O Box Post office box P O BOX Example 12345 Additional code Example 1320300003 Additional code Emergency Call S...

Page 319: ...y for the media types above A large network may support multiple VoIP policies across the entire organization and different policies per application type LLDP MED allows multiple policies to be advertised per port each corresponding to a different application type Different ports on the same Network Connectivity Device may advertise different sets of policies based on the authenticated user identi...

Page 320: ...Video Conferencing Streaming Video for use by broadcast or multicast based video content distribution and other similar applications supporting streaming video services that require specific network policy treatment Video applications relying on TCP with buffering would not be an intended use of this application type Video Signaling conditional for use in network topologies that require a separate...

Page 321: ...s 0 through 63 A value of 0 represents use of the default DSCP value as defined in RFC 2475 DSCP Port Policies Configuration Every port may advertise a unique set of network policies or different attributes for the same network policies based on the authenticated user identity or port configuration Object Description Port The port number for which the configuration applies The set of policies that...

Page 322: ... port on which the LLDP frame was received Device Type LLDP MED Devices are comprised of two primary Device Types Network Connectivity Devices and Endpoint Devices LLDP MED Network Connectivity Device Definition LLDP MED Network Connectivity Devices as defined in TIA 1057 provide access to the IEEE 802 based LAN infrastructure for LLDP MED Endpoint Devices An LLDP MED Network Connectivity Device i...

Page 323: ...es defined in this class include LAN configuration device location network policy power management and inventory management LLDP MED Media Endpoint Class II The LLDP MED Media Endpoint Class II definition is applicable to all endpoint products that have IP media capabilities however may or may not be associated with a particular end user Capabilities include all of the capabilities defined for the...

Page 324: ...VLAN for ease of deployment and enhanced security by isolation from data applications Voice Signaling for use in network topologies that require a different policy for the voice signaling than for the voice media Guest Voice to support a separate limited feature set voice service for guest users and visitors with their own IP Telephony handsets and other similar appliances supporting interactive v...

Page 325: ...the IEEE 802 1D priority level is significant and the default PVID of the ingress port is used instead Priority Priority is the Layer 2 priority to be used for the specified application type One of eight priority levels 0 through 7 DSCP DSCP is the DSCP value to be used to provide Diffserv node behavior for the specified application type as defined in IETF RFC 2474 Contain one of 64 code point val...

Page 326: ...sed by the neighbor unit Port Description Port Description is the port description advertised by the neighbor unit System Capabilities System Capabilities describes the neighbor unit s capabilities The possible capabilities are 1 Other 2 Repeater 3 Bridge 4 WLAN Access Point 5 Router 6 Telephone 7 DOCSIS cable device 8 Station only 9 Reserved When a capability is enabled the capability is followed...

Page 327: ...ics screen in Figure 4 14 5 appears Figure 4 14 5 LLDP Statistics Page Screenshot The page includes the following fields Global Counters Object Description Neighbor entries were last changed at It also shows the time when the last entry was last deleted or added It also shows the time elapsed since the last change was detected Total Neighbors Entries Added Shows the number of new entries added sin...

Page 328: ... standard LLDP frames require a new entry in the table when the Chassis ID or Remote Port ID is not already contained within the table Entries are removed from the table when a given port links down an LLDP shutdown frame is received or when the entry ages out TLVs Discarded Each LLDP frame can contain multiple pieces of information known as TLVs TLV is short for Type Length Value If a TLV is malf...

Page 329: ...The Managed Switch transmits ICMP packets and the sequence number and roundtrip time are displayed upon reception of a reply Cable Diagnostics The Cable Diagnostics is performing tests on copper cables These functions have the ability to identify the cable length and operating conditions and to isolate a variety of common faults that can occur on the Cat5 twisted pair cabling There might be two st...

Page 330: ...pears Figure 4 15 1 ICMP Ping Page Screenshot The page includes the following fields Object Description IP Address The destination IP Address Ping Length The payload size of the ICMP packet Values range from 2 bytes to 1452 bytes Ping Count The count of the ICMP packet Values range from 1 time to 60 times The interval of the ICMP packet Values range from 0 second to 30 seconds Ping Interval Be sur...

Page 331: ...ddress Ping Length The payload size of the ICMP packet Values range from 2 bytes to 1452 bytes Ping Count The count of the ICMP packet Values range from 1 time to 60 times The interval of the ICMP packet Values range from 0 second to 30 seconds Ping Interval Button Click to start transmitting ICMP packets Click to re start diagnostics with PING 4 15 3 Remote IP Ping Test This page allows you to is...

Page 332: ...User s Manual of MGSW MGSD Series Figure 4 15 3 Remote IP Ping Test Page Screenshot 332 ...

Page 333: ...the Cable Diagnostics Press to run the diagnostics This will take approximately 5 seconds If all ports are selected this can take approximately 15 seconds When completed the page refreshes automatically and you can view the cable diagnostics results in the cable status table Note that Cable Diagnostics is only accurate for cables of length 7 140 meters 10 and 100 Mbps ports will be linked down whi...

Page 334: ...ription Port The port where you are requesting Cable Diagnostics Please be noticed that it is only affect to copper port not fiber port Cable Status Port Port number Pair The status of the cable pair Length The length in meters of the cable pair Buttons Click to run the diagnostics 334 ...

Page 335: ...age allows the user to inspect the current Loop Protection configurations and possibly change them as well 4 16 1 Configuration This page allows the user to inspect the current Loop Protection configurations Figure 4 16 1 Loop Protection Configuration Page Screenshot ...

Page 336: ... until next device restart Shutdown Time Port Configuration Object Description Port The switch port number of the port Enable Controls whether loop protection is enabled on this switch port Action Configures the action performed when a loop is detected on a port Valid values are Shutdown Port Shutdown Port and Log or Log Only Controls whether the port is actively generating loop protection PDU s o...

Page 337: ...currently configured port transmit mode Loops The number of loops detected on this port Status The current loop protection status of the port Loop Whether a loop is currently detected on the port The time of the last loop event detected Time of Last Loop Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Click to refresh the page immediat...

Page 338: ... generated by RMON Agent Alarm depends on the implementation of Event Statistics and History display some current or history subnet statistics Alarm and Event provide a method to monitor any integer data change in the network and provide some alerts upon abnormal events sending Trap or record in logs 4 17 1 RMON Alarm Configuration Configure RMON Alarm table on this page The entry index key is ID ...

Page 339: ...mal OutErrors The The number of outbound packets that could not be transmitted because of errors OutQLen The length of the output packet queue in packets Sample Type The method of sampling the selected variable and calculating the value to be compared against the thresholds possible sample types are Absolute Get the sample directly Delta Calculate the difference between samples default Value The v...

Page 340: ...n in Figure 4 17 2 appears Figure 4 17 2 Port Statistics Overview page screenshot The page includes the following fields Object Description ID Indicates the index of Alarm control entry Interval Indicates the interval in seconds for sampling and comparing the rising and falling threshold Variable Indicates the particular variable to be sampled Sample Type The method of sampling the selected variab...

Page 341: ...delete the entry It will be deleted during the next save ID Indicates the index of the entry The range is from 1 to 65535 Desc Indicates this event the string length is from 0 to 127 default is a null string Type Indicates the notification of the event the possible types are none The total number of octets received on the interface including framing characters log The number of uni cast packets de...

Page 342: ...th the lowest Event Index and Log Index found in the Event table table screen in Figure 4 17 4 appears Figure 4 17 4 RMON Event Overview page screenshot The page includes the following fields Object Description Event Index Indicates the index of the event entry Log Index Indicates the index of the log entry LogTime Indicates Event log time Indicates the Event description LogDescription Buttons Aut...

Page 343: ...atistics data The range is from 1 to 3600 default value is 1800 seconds Buckets Indicates the maximum data entries associated this History control entry stored in RMON The range is from 1 to 3600 default value is 50 The number of data shall be saved in the RMON Buckets Granted Buttons Click to add a new community entry Click to save changes Click to undo any changes made locally and revert to prev...

Page 344: ...roadcast The total number of good packets received that were directed to the broadcast address Multicast The total number of good packets received that were directed to a multicast address CRCErrors The total number of packets received that had a length excluding framing bits but including FCS octets of between 64 and 1518 octets Undersize The total number of packets received that were less than 6...

Page 345: ...l be deleted during the next save ID Indicates the index of the entry The range is from 1 to 65535 Indicates the port ID which wants to be monitored If in stacking switch the value must add 1000 switch ID 1 for example if the port is switch 3 port 5 the value is 2005 Data Source Buttons Click to add a new community entry Click to save changes Click to undo any changes made locally and revert to pr...

Page 346: ...d packets received that were directed to a multicast address CRC Errors The total number of packets received that had a length excluding framing bits but including FCS octets of between 64 and 1518 octets inclusive but had either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral number of octets Alignment Error Under size The total number o...

Page 347: ...512 1023 The total number of packets including bad packets received that were from 512 to 1023 octets in length The total number of packets including bad packets received that were from 1024 to 1588 octets in length 1024 1588 Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 6 seconds Click to refresh the page immediate Updates the table starting ...

Page 348: ...w you to select the One_pps_mode configuration The following values are possible 1 Output Enable the 1 pps clock output 2 Input Enable the 1 pps clock input 3 Disable Disable the 1 pps clock in out put External Enable This Selection box will allow you to configure the External Clock output The following values are possible 1 True Enable the external clock output 2 False Disable the external clock ...

Page 349: ...ields Object Description One_pps_mode Shows the current One_pps_mode configured 1 Output Enable the 1 pps clock output 2 Input Enable the 1 pps clock input 3 Disable Disable the 1 pps clock in out put External Enable Shows the current External clock output configuration 1 True Enable the external clock output 2 False Disable the external clock output VCXO_Enable Shows the current VCXO rate adjustm...

Page 350: ...ice Type is Ordinary Boundary Clock 2 P2p Transp Clock s Device Type is Peer to Peer Transparent Clock 3 E2e Transp Clock s Device Type is End to End Transparent Clock 4 Master Only Clock s Device Type is Master Only 5 Slave Only Clock s Device Type is Slave Only Shows the ports configured for that Clock Instance Port List Buttons Auto refresh Check this box to refresh the page automatically Autom...

Page 351: ... Ring function and two ports should be assigned as the member ports in the ERPS Only one switch in the Ring group would be set as the RPL owner switch in which one port called owner port would be blocked and PRL neighbour switch has one port in which one port called neighbour port would be blocked The neighbour port is connected to the owner port directly and this link is called the Ring Protectio...

Page 352: ...ere as screen in Figure 4 19 1 is shown below Figure 4 19 1 MEP configuration page screenshot The page includes the following fields Object Description Delete This box is used to mark an MEP for deletion in next Save operation Instance The ID of the MEP Click on the ID of an MEP to enter the configuration page 352 ...

Page 353: ...e MEP is monitoring see Direction Level The MEG level of this MEP Flow Instance The MEP is related to this flow See Domain Tagged VID Port MEP An outer C S tag depending on VLAN Port Type is added with this VID Entering 0 means no TAG added This MAC The MAC of this MEP can be used by other MEPs when unicast is selected Info only There is an active alarm on the MEP Alarm Buttons Click to add a new ...

Page 354: ...P Instance The ID of the MEP Domain See help on MEP create WEB Mode See help on MEP create WEB Direction See help on MEP create WEB Residence Port See help on MEP create WEB Flow Instance See help on MEP create WEB Tagged VID See help on MEP create WEB See help on MEP create WEB This MAC Instance Configuration Object Description Level See help on MEP create WEB 354 ...

Page 355: ... all Peer MEP ID configured for this MEP cAIS Fault Cause indicating that AIS PDU is received cLCK Fault Cause indicating that LCK PDU is received cSSF Fault Cause indicating that server layer is indicating Signal Fail aBLK The consequent action of blocking service frames in this flow is active aTSF The consequent action of indicating Trail Signal Fail to wards protection is active Delete This box...

Page 356: ...Fault Cause cPeriod is declared if a CCM PDU has been received with different period see cPeriod Selecting 300f sec or 100f sec will configure HW based CCM if possible Selecting other frame rates will configure SW based CCM In case of enabling Continuity Check and Loss Measurement both implemented on SW based CCM Frame Rate has to be the same APS Protocol Object Description Enable Automatic Protec...

Page 357: ...nges Click to undo any changes made locally and revert to previously saved values 4 19 3 Ethernet Ring Protocol Switch The Ethernet Ring Protection Switch instances are configured here screen in Figure 4 19 3 appears Figure 4 19 3 Ethernet Ring Protocol Switch page screenshot The page includes the following fields Object Description Delete This box is used to mark an ERPS for deletion in next Save...

Page 358: ...ield indicates that no Port 1 APS MEP is associated with this instance Ring Type Type of Protecting ring It can be either major ring or sub ring Major Ring ID Major ring group ID for the interconnected sub ring It is used to send topology change updates on major ring If ring is major this value is same as the protection group ID of this ring There is an active alarm on the ERPS Alarm Buttons Click...

Page 359: ...F MEP See help on ERPS create WEB Port 1 SF MEP See help on ERPS create WEB Port 0 APS MEP See help on ERPS create WEB Port 1 APS MEP See help on ERPS create WEB Type of Protected ring It can be either major ring or sub ring Ring Type Instant Configuration Object Description Red This ERPS is only created and has not yet been configured is not active Green This ERPS is configured is active Configur...

Page 360: ...red the traffic channel is restored to the working transport entity i e blocked on the RPL In Non Revertive mode the traffic channel continues to use the RPL if it is not failed after a protection switch condition has cleared VLAN Config VLAN configuration of the Protection Group Click on the VLAN Config link to configure VLANs for this protection group PRL Configuration Object Description PRL Rol...

Page 361: ...imeout in milliseconds RPL Un blocked APS is received on the working flow No APS Received RAPS PDU is not received from the other end Port 0 Block Status Block status for Port 0 Both traffic and R APS block status R APS channel is never blocked on sub rings without virtual channel Port 1 Block Status Block status for Port 1 Both traffic and R APS block status R APS channel is never blocked on sub ...

Page 362: ...hot The page includes the following fields Object Description All Switch Numbers Set all the switch numbers for the ring group The default number is 3 and maximum number is 30 Number ID The switch where you are requesting ERPS Port Configures the port number for the MEP Set the ERPS VLAN VLAN Buttons Click to configure ERPS Click to save changes Click to show the ring topology 362 ...

Page 363: ...witch ID Port MEP ID RPL Type VLAN Group Port 1 1 None 3001 Switch 1 Port 2 2 Owner 3001 Port 1 4 None 3001 Switch 2 Port 2 3 Neighbour 3001 Port 1 6 None 3001 Switch 3 Port 2 5 None 3001 Table 4 2 ERPS Configuration Table The scenario is described as follows 1 Disable DHCP client and set proper static IP for Switch 1 2 3 In this example switch 1 is 192 168 0 101 switch 2 is 192 168 0 102 and swit...

Page 364: ...tch 2 directly don t connect to port 1 2 Log in on the Switch 2 and click Ring Ring Wizard Set All Switch Number 3 and Number ID 2 click Next button to set the ERPS configuration for Switch 2 Set MEP3 Port2 MEP4 Port1 and VLAN ID 3001 click Set button to save the ERPS configuration for Switch 2 Set ERPS Configuration on Switch 3 Connect PC to switch 3 directly don t connect to port 1 2 Log in on t...

Page 365: ...ether in the ring topology before configuring the end of ERPS Follow the configuration or ERPS wizard to connect the Switch 1 2 3 together to establish ERPS application MEP2 MEP3 Switch1 Port2 Switch2 Port2 MEP4 MEP5 Switch2 Port1 Switch3 Port2 MEP1 MEP6 Switch1 Port1 Switch3 Port1 365 ...

Page 366: ...his packet will be filtered Thereby increasing the network throughput and availability 5 4 Store and Forward Store and Forward is one type of packet forwarding techniques A Store and Forward Managed Switch stores the incoming frame in an internal buffer do the complete error checking before transmission Therefore no error packets occurrence it is the best choice when a network needs efficiency and...

Page 367: ... best possible bandwidth when a connection is established with another network device usually at Power On or Reset This is done by detect the modes and speeds at the second of both device is connected and capable of both 10BASE T and 100BASE TX devices can connect with the port in either Half or Full Duplex mode 1000BASE T can be only connected in Full duplex mode ...

Page 368: ...at the attached device is not set to dedicate full duplex Some devices use a physical or software switch to change duplex modes Auto negotiation may not recognize this type of full duplex setting Why the Managed Switch doesn t connect to the network Solution Check per port LED on the Managed Switch Try another port on the Managed Switch Make sure the cable is installed properly Make sure the cable...

Page 369: ...t the IP address to the default IP Address 192 168 0 100 or reset the password to default value Press the hardware reset button at the front panel about 5 seconds After the device is rebooted you can login the management WEB interface within the same subnet of 192 168 0 xx Reset Button 369 ...

Page 370: ...SE TX When connecting your 10 100Mbps Ethernet Switch to another switch a bridge or a hub a straight or crossover cable is necessary Each port of the Switch supports auto MDI MDI X detection That means you can directly connect the Switch to any Ethernet devices without making a crossover cable The following table and diagram show the standard RJ45 receptacle connector and their pin assignments RJ4...

Page 371: ...ite Brown 8 Brown 1 White Orange 2 Orange 3 White Green 4 Blue 5 White Blue 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 6 Green 7 White Brown SIDE 2 8 Brown Crossover Cable SIDE 1 SIDE2 SIDE 1 1 White Orange 2 Orange 3 White Green 4 Blue 5 White Blue 6 Green 7 White Brown 8 Brown 1 White Green 2 Green 3 White Orange 4 Blue 5 White Blue 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 6 Orange 7 White Brown SIDE 2 8 Brown Figu...

Page 372: ... the ACEs in a prioritized way highest top to lowest bottom Default the table is empty An ingress frame will only get a hit on one ACE even though there are more matching ACEs The first matching ACE will take action permit deny on that frame and a counter associated with that ACE is incremented An ACE can be associated with a Policy 1 ingress port or any ingress port the whole switch If an ACE Pol...

Page 373: ...f a port and to increase the redundancy for higher availability Also Port Aggregation Link Aggregation ARP ARP is an acronym for Address Resolution Protocol It is a protocol that used to convert an IP address into a physical address such as an Ethernet address ARP allows a host to communicate with other hosts when only the Internet address of its neighbors is known Before using IP the host sends a...

Page 374: ...nts to obtain IP addresses and other parameters such as the default gateway subnet mask and IP addresses of DNS servers from a DHCP server The DHCP server ensures that all IP addresses are unique for example no IP address is assigned to a second client while the first client s assignment is valid its lease has not expired Therefore IP address pool management is done by the server and not by a huma...

Page 375: ...ypes of information with domain names Most importantly DNS translates human friendly domain names and computer hostnames into computer friendly IP addresses For example the domain name www example com might translate to 192 168 0 1 DoS DoS is an acronym for Denial of Service In a denial of service DoS attack an attacker attempts to prevent legitimate users from accessing information or services By...

Page 376: ...n the original leave message Fast leave processing ensures optimal bandwidth management for all hosts on a switched network even when multiple multicast groups are in use simultaneously This processing applies to IGMP and MLD H HTTP HTTP is an acronym for Hypertext Transfer Protocol It is a protocol that used to transfer or convey information on the World Wide Web WWW HTTP defines how messages are...

Page 377: ...G command uses ICMP to test an Internet connection IEEE 802 1X IEEE 802 1X is an IEEE standard for port based Network Access Control It provides authentication to devices attached to a LAN port establishing a point to point connection or preventing access from that port if authentication fails With 802 1X access to all switch ports can be centrally controlled from a server which means that authori...

Page 378: ...device uniquely among all other devices connected to the extended network The current version of the Internet protocol is IPv4 which has 32 bits Internet Protocol addresses allowing for in excess of four billion unique addresses This number is reduced drastically by the practice of webmasters taking addresses in large blocks the bulk of which remain unused There is a rather substantial movement to...

Page 379: ...ol such as the Simple Network Management Protocol SNMP LLDP MED LLDP MED is an extension of IEEE 802 1ab and is defined by the telecommunication industry association TIA 1057 LLQI LLQI Last Listener Query Interval is the maximun response time used to calculate the Maximun Respse Code inserted into Specific Queries It is used to detect the departure of the last listener for a multicast address or s...

Page 380: ...MPv6 instead of using a separate protocol MSTP In 2002 the IEEE introduced an evolution of RSTP the Multiple Spanning Tree Protocol The MSTP protocol provides for multiple spanning tree instances while ensuring RSTP and STP compatibility The standard was originally defined by IEEE 802 1s but was later incorporated in IEEE 802 1D 2005 MVR Multicast VLAN Registration MVR is a protocol for Layer 2 IP...

Page 381: ...uous access to them which means NFS supports sharing of files printers and other resources as persistent storage over a computer network NTP NTP is an acronym for Network Time Protocol a network protocol for synchronizing the clocks of computer systems NTP uses UDP datagrams as transport layer O Optional TLVs A LLDP frame contains multiple TLVs For some TLVs it is configurable if the switch shall ...

Page 382: ... in front of the ingress queue POP3 POP3 is an acronym for Post Office Protocol version 3 It is a protocol for email clients to retrieve email messages from a mail server POP3 is designed to delete mail on the server as soon as the user has downloaded it However some implementations allow users or an administrator to specify that mail be saved for some period of time POP can be thought of as a sto...

Page 383: ...r individual application QCL QCL is an acronym for QoS Control List It is the list table of QCEs containing QoS control entries that classify to a specific QoS class on specific traffic objects Each accessible traffic object contains an identifier to its QCL The privileges determine specific traffic object to specific QoS class QL QL In SyncE this is the Quality Level of a given clock source This ...

Page 384: ... 1w introduced an evolution of STP the Rapid Spanning Tree Protocol which provides for faster spanning tree convergence after a topology change Standard IEEE 802 1D 2004 now incorporates RSTP and obsoletes STP while at the same time being backwards compatible with STP S SAMBA Samba is a program running under UNIX like operating systems that provides seamless integration between UNIX and Microsoft ...

Page 385: ...arn network problems by receiving traps or change notices from network devices implementing SNMP SNTP SNTP is an acronym for Simple Network Time Protocol a network protocol for synchronizing the clocks of computer systems SNTP uses UDP datagrams as transport layer SPROUT Stack Protocol using ROUting Technology An advanced protocol for almost instantaneous discovery of topology changes within a sta...

Page 386: ...ontrol Protocol It is a communications protocol that uses the Internet Protocol IP to exchange the messages between computers The TCP protocol guarantees reliable and in order delivery of data from sender to receiver and distinguishes data for multiple connections by concurrent applications for example Web server and e mail server running on the same host The applications on networked hosts can us...

Page 387: ...TKIP is an acronym for Temporal Key Integrity Protocol It used in WPA to replace WEP with a new encryption algorithm TKIP comprises the same encryption engine and RC4 algorithm defined for WEP The key used for encryption in TKIP is 128 bits and changes the key used for each packet U UDP UDP is an acronym for User Datagram Protocol It is a communications protocol that uses the Internet Protocol IP ...

Page 388: ...p with this Port VLAN ID and transmit untagged frames Provider switching This is also known as Q in Q switching Ports connected to subscribers are VLAN unaware members of one VLAN and set up with this unique Port VLAN ID Ports connected to the service provider are VLAN aware members of multiple VLANs and set up to tag all frames Untagged frames received on a subscriber port are forwarded to the pr...

Page 389: ... the strength and secrecy of the passphrase The design of WPA is based on a Draft 3 of the IEEE 802 11i standard Wikipedia WPA Radius WPA Radius is an acronym for Wi Fi Protected Access Radius 802 1X authentication server WPA was designed to enhance the security of wireless networks There are two flavors of WPA enterprise and personal Enterprise is meant for use with an IEEE 802 1X authentication ...

Page 390: ...1000 3 2 2006 A1 2009 A2 2009 EN 61000 3 3 2008 EN 55024 2010 EN 61000 4 2 2008 EN 61000 4 3 2006 A1 2008 A2 2010 EN 61000 4 4 2004 A1 2010 EN 61000 4 5 2006 EN 61000 4 6 2009 EN 61000 4 8 2010 EN 61000 4 11 2004 Responsible for marking this declaration if the Manufacturer Authorized representative established within the EU Authorized representative established within the EU if applicable Company ...

Page 391: ...2006 A1 2009 A2 2009 EN 61000 3 3 2008 EN 55024 2010 EN 61000 4 2 2009 EN 61000 4 3 2006 A2 2010 EN 61000 4 4 2004 A1 2010 2012 EN 61000 4 5 2006 EN 61000 4 6 2009 EN 61000 4 8 2010 EN 61000 4 11 2004 Responsible for marking this declaration if the Manufacturer Authorized representative established within the EU Authorized representative established within the EU if applicable Company Name Planet ...

Page 392: ...EN 61000 3 2 2006 A1 2009 A2 2009 EN 61000 3 3 2008 EN 55024 2010 EN 61000 4 2 2009 EN 61000 4 3 2006 A2 2010 EN 61000 4 4 2012 EN 61000 4 5 2006 EN 61000 4 6 2009 EN 61000 4 8 2010 EN 61000 4 11 2004 Responsible for marking this declaration if the Manufacturer Authorized representative established within the EU Authorized representative established within the EU if applicable Company Name Planet ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands