manualshive.com logo in svg

Planet Networking & Communication WGSD-10020, User Manual, Page: 423 / 557

Share
Download
Planet Networking & Communication WGSD-10020 User Manual Download Page 423

User’s Manual of WGSD-10020 Series 

 

 

Example:

   

 

Enable the ARP inspection mode of port 1 

WGSD-10020HP:/>

security

 

network arp inspection port mode 1

 

 

 

Security Network ARP Inspection Entry 

Description: 

Add or delete ARP inspection static entry. 

 

Syntax: 

Security Network ARP Inspection Entry [<port_list>] add|delete <vid> <allowed_mac> <allowed_ip> 

 

Parameters: 

<port_list>  

: Port list or 'all', default: All ports

 

add    

: Add new port ARP inspection static entry

 

delete

 : Delete existing port ARP inspection static entry

 

<vid>               

: VLAN ID (1-4095)

 

<allowed_mac>

: MAC address (xx-xx-xx-xx-xx-xx), MAC address allowed for doing ARP request

 

<allowed_ip> 

: IP address (a.b.c.d), IP address allowed for doing ARP request

 

 

Example:

   

 

Add ARP inspection static entry. 

WGSD-10020HP:/>

security

 

network arp inspection entry 1 add 1 00-30-4f-00-00-11 

192.168.0.11

 

 
 

Security Network ARP Inspection Status 

Description: 

Show ARP inspection static and dynamic entries. 

 

Syntax: 

Security Network ARP Inspection Status [<port_list>] 

 

Parameters: 

<port_list>

: Port list or 'all', default: All ports

 

 

Example:

   

 

423 

 

Summary of Contents for WGSD-10020

Page 1: ......

Page 2: ...ion against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the Instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user...

Page 3: ...cations 30 2 1 3 Switch Rear Panel 32 2 2 Install the Switch 33 2 2 1 Desktop Installation 33 2 2 2 Rack Mounting 34 2 2 3 Installing the SFP transceiver 35 3 SWITCH MANAGEMENT 38 3 1 Requirements 38 3 2 Management Access Overview 39 3 3 Administration Console 39 3 4 Web Management 41 3 5 SNMP Based Network Management 42 4 WEB CONFIGURATION 43 4 1 Main Web Page 46 4 2 System 48 4 2 1 System Inform...

Page 4: ...4 2 21 Factory Default 75 4 2 21 System Reboot 76 4 3 Simple Network Management Protocol 78 4 3 1 SNMP Overview 78 4 3 2 SNMP System Configuration 79 4 3 3 SNMP System Information 81 4 3 4 SNMPv3 Configuration 82 4 3 4 1 SNMPv3 Communities 82 4 3 4 2 SNMPv3 Users 83 4 3 4 3 SNMPv3 Groups 85 4 3 4 4 SNMPv3 Views 86 4 3 4 5 SNMPv3 Access 87 4 4 Port Management 89 4 4 1 Port Configuration 89 4 4 2 Po...

Page 5: ...8 4 6 11 MAC based VLAN 130 4 6 12 MAC based VLAN Status 131 4 6 13 Protocol based VLAN 132 4 6 14 Protocol based VLAN Mambership 133 4 7 Spanning Tree Protocol 135 4 7 1 Theory 135 4 7 2 STP System Configuration 141 4 7 3 Bridge Status 143 4 7 4 CIST Port Configuration 144 4 7 5 MSTI Priorities 147 4 7 6 MSTI Configuration 147 4 7 7 MSTI Ports Configuration 149 4 7 8 Port Status 151 4 7 9 Port St...

Page 6: ...4 9 6 1 QoS Egress Port Tag Remarking 183 4 9 7 Port DSCP 183 4 9 8 DSCP Based QoS 185 4 9 9 DSCP Translation 187 4 9 10 DSCP Classification 190 4 9 11 QoS Control List 191 4 9 11 1 QoS Control Entry Configuration 192 4 9 12 QoS Status 195 4 9 13 Storm Control Configuration 196 4 9 14 QoS Statistics 197 4 9 15 Voice VLAN Configuration 198 4 9 16 Voice VLAN OUI Table 200 4 10 Access Control Lists 2...

Page 7: ...8 4 12 8 DHCP Snooping 269 4 12 9 DHCP Snooping Statistics 270 4 12 10 IP Source Guard Configuration 271 4 12 11 IP Source Guard Static Table 273 4 12 12 ARP Inspection 273 4 12 13 ARP Inspection Static Table 275 4 13 Address Table 276 4 13 1 MAC Address Table Configuration 276 4 13 2 MAC Address Table Status 278 4 13 3 Dynamic ARP Inspection Table 279 4 13 4 Dynamic IP Source Guard Table 280 4 14...

Page 8: ...7 5 1 Accessing the CLI 317 Logon to the Console 317 Configure IP address 318 5 2 Telnet Login 320 6 Command Line Mode 321 6 1 System Command 321 System Configuration 321 System Log Configuration 322 System Version 323 System Log Server Mode 323 System Name 324 System Contact 324 System Log Server Address 325 System Location 325 System Log Level 326 System Timezone 326 System Log Lookup 327 System...

Page 9: ...ol 340 Port State 341 Port Maximum Frame 341 Port Power 342 Port Excessive 342 Port Statistics 343 Port VeriPHY 343 Port SFP 344 6 4 MAC Address Table Command 345 MAC Configuration 345 MAC Add 345 MAC Delete 346 MAC Lookup 346 MAC Age Time 347 MAC Learning 347 MAC Dump 348 MAC Statistics 349 MAC Flush 349 6 5 VLAN Configuration Command 350 VLAN Configuration 350 VLAV PVID 350 VLAN Frame Type 351 V...

Page 10: ...urity Switch Privilege Level Configuration 364 Security Switch Privilege Level Group 365 Security Switch Privilege Level Current 366 Security Switch Auth Configuration 366 Security Switch Auth Method 367 Security Switch SSH Configuration 368 Security Switch SSH Mode 368 Security Switch HTTPs Configuration 369 Security Switch HTTPs Mode 369 Security Switch HTTPs Redirect 370 Security Switch Access ...

Page 11: ... Trap Probe Security Engine ID 383 Security Switch SNMP Trap Security Engine ID 383 Security Switch SNMP Trap Security Name 384 Security Switch SNMP Engine ID 384 Security Switch SNMP Community Add 385 Security Switch SNMP Community Delete 385 Security Switch SNMP Community Lookup 386 Security Switch SNMP User Add 386 Security Switch SNMP User Delete 387 Security Switch SNMP User Changekey 387 Sec...

Page 12: ...6 Security Network NAS Statistics 407 Security Network ACL Configuration 408 Security Network ACL Action 408 Security Network ACL Policy 409 Security Network ACL Rate 409 Security Network ACL Add 410 Security Network ACL Delete 411 Security Network ACL Lookup 412 Security Network ACL Clear 412 Security Network ACL Status 413 Security Network DHCP Relay Configuration 413 Security Network DHCP Relay...

Page 13: ...uration 424 Security AAA Timeout 425 Security AAA Deadtime 425 Security AAA RADIUS 426 Security AAA ACCT_RADIUS 427 Security AAA TACACS 427 Security AAA Statistics 428 6 8 Spanning Tree Protocol Command 429 STP Configuration 429 STP Version 429 STP Tx Hold 430 STP MaxHops 430 STP MaxAge 431 STP FwdDelay 431 STP CName 432 STP BPDU Filter 432 STP BPDU Guard 433 STP Recovery 433 STP Status 434 STP MS...

Page 14: ... Command 447 LACP Configuration 447 LACP Mode 447 LACP Key 448 LACP Role 448 LACP Status 449 LACP Statistics 450 6 11 LLDP Command 451 LLDP Configuration 451 LLDP Mode 451 LLDP Optional TLV 452 LLDP Interval 453 LLDP Hold 453 LLDP Delay 454 LLDP Reinit 454 LLDP Statistics 455 LLDP Info 456 6 12 LLDPMED Command 457 LLDPMED Configuration 457 LLDPMED Civic 457 LLDPMED ECS 458 LLDPMED Policy Delete 45...

Page 15: ...y 469 Thermal Status 470 Thermal Configuration 471 6 16 LED Power Command 471 LED Power Timers 471 LED Power Delete Timer 471 LED Power Maintenance 472 LED Power Configuration 472 6 17 Quality of Service Command 473 QoS Configuration 473 QoS Port Classification Class 473 QoS Port Classification DPL 474 QoS Port Classification PCP 474 QoS Port Classification DEI 475 QoS Port Classification Tag 475 ...

Page 16: ...emark 485 QoS DSCP Map 486 QoS DSCP Translation 486 QoS DSCP Trust 487 QoS DSCP Classification Mode 487 QoS DSCP EgressRemap 488 QoS Storm Unicast 488 QoS Storm Multicast 489 QoS QCL Add 489 QoS QCL Delete 490 QoS QCL Lookup 491 QoS QCL Status 491 QoS QCL Refresh 492 6 18 Mirror Command 493 Mirror Configuration 493 Mirror Port 493 Mirror Mode 494 6 19 Configuration Command 495 Configuration Save 4...

Page 17: ... 504 Voice VLAN Mode 505 Voice VLAN ID 506 Voice VLAN Agetime 506 Voice VLAN Traffic Class 507 Voice VLAN OUI Add 507 Voice VLAN OUI Delete 508 Voice VLAN OUI Clear 508 Voice VLAN OUI Lookup 508 Voice VLAN Port Mode 509 Voice VLAN Security 509 6 24 IPMC Command 511 IPMC Configuration 511 IPMC Mode 511 IPMC Flooding 512 IPMC Leave Proxy 512 IPMC Proxy 513 IPMC State 513 IPMC Querier 514 IPMC Fastle...

Page 18: ...rotocol based VLAN Add LLC 524 VCL Protocol based VLAN Delete Ethernet II 524 VCL Protocol based VLAN Delete SNAP 524 VCL Protocol based VLAN Delete LLC 525 VCL Protocol based VLAN Add 525 VCL Protocol based VLAN Delete 525 VCL Protocol based VLAN Configuration 526 7 SWITCH OPERATION 527 7 1 Address Table 527 7 2 Learning 527 7 3 Forwarding Filtering 527 7 4 Store and Forward 527 7 5 Auto Negotiat...

Page 19: ...er s Manual of WGSD 10020 Series Power Disconnection Scenarios 532 9 TROUBLE SHOOTING 534 APPENDEX A 536 A 1 Switch s RJ 45 Pin Assignments 536 A 2 10 100Mbps 10 100Base TX 536 APPENDEX B GLOSSARY 538 19 ...

Page 20: ...e missing or damaged please contact your dealer immediately if possible retain the carton including the original packing material and use them against to repack the product in case there is a need to return it to us for repair 1 2 Product Description Cost effective IPv6 Managed Gigabit Switch solution for SMB Nowadays lots of electronic products or mobile devices can browse the Internet which mean...

Page 21: ...ecoms The functionality includes QoS features such as wire speed Layer 4 traffic classifiers and bandwidth limiting that are particular useful for multi tenant unit multi business unit Telcom or Network Service Provide applications It also empowers the enterprises to take full advantages of the limited network resources and guarantees the best performance in VoIP and Video conferencing transmissio...

Page 22: ...d power management of network devices such as wireless access points AP Voice over IP VoIP phones and security video cameras The PoE capabilities also help to reduce deployment costs for network devices like the wireless AP as a result of freeing from restrictions of power outlet locations Power and data switching are integrated into one unit and delivered over a single cable It thus eliminates co...

Page 23: ...nates erroneous packets to optimize the network bandwidth Storm Control support Broadcast Multicast Unknown Unicast Support VLAN IEEE 802 1Q Tagged VLAN Up to 255 VLANs groups out of 4094 VLAN IDs Provider Bridging VLAN Q in Q support IEEE 802 1ad Private VLAN Edge PVE Protocol based VLAN MAC based VLAN Voice VLAN Support Spanning Tree Protocol STP IEEE 802 1D Spanning Tree Protocol RSTP IEEE 802 ...

Page 24: ... Snooping port filtering Multicast VLAN Registration MVR support Security IEEE 802 1x Port Based MAC Based network access authentication Built in RADIUS client to co operate with the RADIUS servers TACACS login users access authentication RADIUS TACACS users access authentication IP Based Access Control List ACL MAC Based Access Control List Source MAC IP address binding DHCP Snooping to filter un...

Page 25: ...button for system reboot or reset to factory default PLANET Smart Discovery Utility for deploy management ICMPv6 Power over Ethernet WGSD 10020HP Only Complies with IEEE 802 3af Power over Ethernet End Span PSE Complies with IEEE 802 3at high power Power over Ethernet End Span PSE Up to 8 ports for IEEE 802 3af at devices powered Support PoE Power up to 30 8 watts for each PoE ports Auto detect po...

Page 26: ...Back pressure for Half Duplex Jumbo Frame 9Kbytes Reset Button 5 seconds System reboot 5 seconds Factory Default Dimension W x D x H 330 x 155 x 43 5 mm 1U high Weight 1 4kg 1 8kg LED Power Link Act and speed per Gigabit port Power FAN Alert Link Act per Gigabit port PoE In Use for port 1 8 Power Consumption Max 12 8 watts 43 65 BTU Max 172 9 watts 589 6 BTU Power Requirement AC AC 100 240V 50 60H...

Page 27: ...MVR Multicast VLAN Registration Up to 256 VLAN groups out of 4096 VLAN IDs Link Aggregation IEEE 802 3ad LACP Static Trunk Support 5 groups of 10 Port trunk support QoS Traffic classification based Strict priority and WRR 8 level priority for switching Port Number 802 1p priority 802 1Q VLAN tag DSCP TOS field in IP Packet IGMP Snooping IGMP v1 v2 v3 Snooping up to 255 multicast Groups IGMP Querie...

Page 28: ...2 3x Flow Control and Back pressure IEEE 802 3ad Port trunk with LACP IEEE 802 1d Spanning tree protocol IEEE 802 1w Rapid spanning tree protocol IEEE 802 1s Multiple spanning tree protocol IEEE 802 1p Class of service IEEE 802 1Q VLAN Tagging IEEE 802 1x Port Authentication Network Control IEEE 802 1ab LLDP IEEE 802 3af Power over Ethernet IEEE 802 3at Power over Ethernet PLUS RFC 768 UDP RFC 793...

Page 29: ...e unit front panel provides a simple interface monitoring the switch Figure 2 1 Figure 2 2 show the front panel of the Managed Switches WGSD 10020 Front Panel Figure 2 1 WGSD 10020 front panel WGSD 10020HP Front Panel Figure 2 2 WGSD 10020HP front panel Gigabit TP interface 10 100 1000Base T Copper RJ 45 Twist Pair Up to 100 meters SFP slots 100 1000Base X mini GBIC slot SFP Small Factor Pluggable...

Page 30: ...ity and system power helps monitor and troubleshoot when needed Figure 2 3 Figure 2 4 shows the LED indications of these Managed Switches WGSD 10020 LED indication Figure 2 3 WGSD 10020 LED panel System LED Color Function PWR Green Lights to indicate that the Switch has power Per 10 100 1000Mbps port LED Color Function 1000 L Green shed NK ACT Lights to indicate the port is running in 1000Mbps spe...

Page 31: ... to indicate the port is providing 52VDC in line power Off indicate the connected device is not a PoE Powered Device PD 1000 LNK ACT Green Lights to indicate the port is running in 1000Mbps speed and successfully established Blink indicate that the switch is actively sending or receiving data over that port 10 100 LNK ACT Green Lights to indicate the port is running in 10 100Mbps speed and success...

Page 32: ... The device is a power required device it means it will not work till it is powered If your networks should active all the time please consider using UPS Uninterrupted Power Supply for your device It will prevent you from network data loss or network downtime In some area installing a surge suppression device may also help to protect your Managed Switch from being damaged by unregulated surge or c...

Page 33: ...sktop or the shelf near an AC power source as shown in Figure 2 7 Figure 2 7 Place the Managed Switch on the desktop Step3 Keep enough ventilation space between the Managed Switch and the surrounding objects When choosing a location please keep in mind the environmental restrictions discussed in Chapter 1 Section 4 and Specification Step4 Connect the Managed Switch to network devices Connect one e...

Page 34: ...l positioned towards the front side Step2 Attach the rack mount bracket to each side of the Managed Switch with supplied screws attached to the package Figure 2 8 shows how to attach brackets to one side of the Managed Switch Figure 2 8 Attach brackets to the Managed Switch You must use the screws supplied with the mounting brackets Damage caused to the parts by using incorrect screws would invali...

Page 35: ...ing and supply power to the Managed Switch 2 2 3 Installing the SFP transceiver The sections describe how to insert an SFP transceiver into an SFP slot The SFP transceivers are hot pluggable and hot swappable You can plug in and out the transceiver to from any SFP port without having to power down the Managed Switch As the Figure 2 10 appears Figure 2 10 Plug in the SFP transceiver 35 ...

Page 36: ...t 100Base FX Transceiver 20KM MFB F60 SFP Port 100Base FX Transceiver 60KM MFB FA20 SFP Port 100Base BX Transceiver WDM TX 1310nm 20KM MFB FB20 SFP Port 100Base BX Transceiver WDM TX 1550nm 20KM It recommends using PLANET SFPs on the Managed Switch If you insert a SFP transceiver that is not supported the Managed Switch will not recognize it Before connect the other Managed Switches workstation or...

Page 37: ...le 1 Make sure there is no network activity by consult or check with the network administrator Or through the management interface of the switch converter if available to disable the port in advance 2 Remove the Fiber Optic Cable gently 3 Turn the handle of the MGB module to horizontal 4 Pull out the module gently through the handle Figure 2 11 Pull out the SFP transceiver Never pull out the modul...

Page 38: ...Overview Administration Console Access Web Management Access SNMP Access Standards Protocols and Related Reading 3 1 Requirements Workstations of subscribers running Windows 2000 XP 2003 Vista 7 2008 MAC OS9 or later Linux UNIX or other platform compatible with TCP IP protocols Workstation installed with Ethernet NIC Network Interface Card Serial Port connect Terminal Above PC with COM Port DB9 RS...

Page 39: ...owsers Can be accessed from any location Most visually appealing Security can be compromised hackers need only know the IP address and subnet mask May encounter lag times on poor connections SNMP Agent Communicates with switch functions at the MIB level Based on open standards Requires SNMP manager software Least visually appealing of all three methods Some settings require calculations Security c...

Page 40: ...tion program to use the following parameters The default parameters are 115200 bps 8 data bits No parity 1 stop bit Figure 3 2 Terminal parameter settings You can change these settings if desired after you log on This management method is often preferred because you can remain connected and monitor the system during system reboots Also certain error messages are sent to the serial port regardless ...

Page 41: ... Managed Switch s Web interface applications directly in your Web browser by entering the IP address of the Managed Switch Figure 3 3 Web management You can then use your Web browser to list and manage the Managed Switch configuration parameters from one central location just as if you were directly connected to the Managed Switch s console port Web Management requires either Microsoft Internet Ex...

Page 42: ...ent on the switch and the SNMP Network Management Station to use the same community string This management method in fact uses two community strings the get community string and the set community string If the SNMP Net work management Station only knows the set community string it can read and write to the MIBs However if it only knows the get community string it can only read MIBs The default get...

Page 43: ...w Java Applets to open sockets The user has to explicitly modify the browser setting to enable Java Applets to use network ports The Managed Switch can be configured through an Ethernet connection make sure the manager PC must be set on same the IP subnet address with the Managed Switch For example the default IP address of the SGSW Managed Switch is 192 168 0 100 then the manager PC should be set...

Page 44: ... http 192 168 0 100 2 When the following login screen appears please enter the default username admin with password admin or the username password you have changed via console to login the main screen of Managed Switch The login screen in Figure 4 1 2 appears Figure 4 1 2 Login screen Default User name admin Default Password admin After entering the username and password the main screen appears as...

Page 45: ...access all the commands and statistics the Managed Switch provides 1 It is recommended to use Internet Explore 7 0 or above to access Managed Switch 2 The changed IP address take effect immediately after click on the Save button you need to use the new IP address to access the Web interface 3 For security reason please change and memorize the new password after this first setup 4 Only accept comma...

Page 46: ...een Panel Display The web agent displays an image of the Managed Switch s ports The Mode can be set to display different information for the ports including Link up or Link down Clicking on the image of a port opens the Port Statistics page The port states are illustrated as follows State Disabled Down Link RJ 45 Ports SFP Ports Main Menu Using the onboard web agent you can define system parameter...

Page 47: ...User s Manual of WGSD 10020 Series Figure 4 1 5 Managed Switch Main Functions Menu 47 ...

Page 48: ...age displays the CPU load using a SVG graph System Log The switch system log information is provided here Detailed Log The switch system detailed log information is provided here Remote Syslog Configure remote syslog on this page LED Power Reduction Configuration LED power reduction on this page EEE Power Reduction Configuration energy efficient ethernet power reduction on this page Thermal Protec...

Page 49: ...ct Name The system name configured in Configuration System Information System Name Location The system location configured in Configuration System Information System Location MAC Address The MAC Address of this switch System Date The current GMT system time and date The system time is obtained through the configured SNTP Server if any System Uptime The period of time the device has been operationa...

Page 50: ...d the configured IP address is non zero DHCP will stop and the configured IP settings will be used The DHCP client will announce the configured System Name as hostname to provide DNS lookup IP Address Provide the IP address of this switch in dotted decimal notation IP Mask Provide the IP mask of this switch dotted decimal notation IP Router Provide the IP address of the router in dotted decimal no...

Page 51: ...a few seconds the total time needed to complete auto configuration can be significantly longer Address Provide the IPv6 address of this switch IPv6 address is in 128 bit records represented as eight fields of up to four hexadecimal digits with a colon separates each field For example fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be used as a shorthand way of representing multiple...

Page 52: ...le 192 1 2 34 VLAN ID Provide the managed VLAN ID The allowed range is 1 through 4095 Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 4 2 4 Users Configuration This page provides an overview of the current users Currently the only way to login as another user on the web server is to close and reopen the browser After setup completed please...

Page 53: ...he password of the user Privilege Level The privilgeg level for the user Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values Click to undo any changes made locally and return to the Users Delete the current user This button is not available for new configurations Add new user Once the new user is added the new user entry shown in the Users Con...

Page 54: ...default password if you forget the password Please press the Reset button in the front panel of the Managed Switch over 10 seconds and then release the current setting includes VLAN will be lost and the Managed Switch will restore to the default mode 54 ...

Page 55: ...ge provides an overview of the privilege levels After setup completed please press Save button to take effect Please login web interface with new user name and password the screen in Figure 4 2 7 appears Figure 4 2 7 Privilege Levels Configuration page screenshot 55 ...

Page 56: ...imit ACL HTTPS SSH ARP Inspection and IP source guard IP Everything except ping Port Everything except VeriPHY Diagnostics ping and VeriPHY Maintenance CLI System Reboot System Restore Default System Password Configuration Save Configuration Load and Firmware Load Web Users Privilege Levels and everything in Maintenance Debug Only present in CLI Privilege Level Every privilege level group has an a...

Page 57: ...orward and to transfer NTP messages between the clients and the server when they are not on the same subnet domain Disabled Disable NTP mode operation Timezone Allow select the time zone according to current location of switch Server Provide the NTP IPv4 or IPv6 address of this switch IPv6 address is in 128 bit records represented as eight fields of up to four hexadecimal digits with a colon separ...

Page 58: ... ACEs are added automatically to trap UPNP related packets to CPU The ACEs are automatically removed when the mode is disabled TTL The TTL value is used by UPnP to send SSDP advertisement messages Valid values are in the range 1 to 255 Advertising Duration The duration carried in SSDP packets is used to inform a control point or control points how often it or they should receive a SSDP advertiseme...

Page 59: ...net domain The DHCP option 82 enables a DHCP relay agent to insert specific information into a DHCP request packets when forwarding client DHCP packets to a DHCP server and remove the specific information from a DHCP reply packets when forwarding server DHCP packets to a DHCP client The DHCP server can use this information to implement IP address or other assignment policies Specifically the optio...

Page 60: ...ble DHCP relay mode operation the agent forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain And the DHCP broadcast message won t flood for security considered Disabled Disable DHCP relay mode operation Relay Server Indicates the DHCP relay server IP address A DHCP relay agent is used to forward and to transfer DHCP messages between t...

Page 61: ...nges made locally and revert to previously saved values 4 2 9 DHCP Relay Statistics This page provides statistics for DHCP relay The DHCP Relay Statistics screen in Figure 4 2 12 appears Figure 4 2 12 DHCP Relay Statistics page screenshot The page includes the following fields Server Statistics Object Description Transmit to Server The packets number that relayed from client to server Transmit Err...

Page 62: ...at error sending packets to servers Receive form Client The packets number that received packets from server Receive Agent Option The packets number that received packets with relay agent information option Replace Agent Option The packets number that replaced received packets with relay agent information option Keep Agent Optin The packets number that keepped received packets with relay agent inf...

Page 63: ...owser must support the SVG format Consult the SVG Wiki for more information on browser support Specifically at the time of writing Microsoft Internet Explorer will need to have a plugin installed to support SVG The CPU Load screen in Figure 4 2 13 appears Figure 4 2 13 CPU Load page screenshot Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals If yo...

Page 64: ...he system log Error Error level of the system log All All levels Time The time of the system log entry Message The message of the system log entry Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to refresh the page any changes made locally will be undone Clear all statistics Updates the system log entries starting from the first available e...

Page 65: ...ption ID The ID 1 of the system log entry Message The message of the system log entry Buttons Click to refresh the page any changes made locally will be undone Updates the system log entries starting from the first available entry ID Updates the system log entries ending at the last entry currently displayed Updates the system log entries starting from the last entry currently displayed Updates th...

Page 66: ...s back sender since UDP is a connectionless protocol and it does not provide acknowledgments The syslog packet will always send out even if the syslog server does not exist Possible modes are Enabled Enable remote syslog mode operation Disabled Disable remote syslog mode operation Syslog Server IP Indicates the IPv4 host address of syslog server If the switch provide DNS feature it also can be a h...

Page 67: ... Description Time The time at which the LEDs intensity shall be set Intensity The LEDs intensity 100 Full power 0 LED off Maintenance Time When a network administrator does maintenance of the switch e g adding or moving users he might want to have full LED intensity during the maintenance period Therefore it is possible to specify that the LEDs shall use full intensity a specific period of time Ma...

Page 68: ...t once transmit data are ready for a port but is instead queued until 3000 bytes of data are ready to be transmitted For not introducing a large delay in case that data less then 3000 bytes shall be transmitted data are always transmitted after 48 us giving a maximum latency of 48 us the wakeup time If desired it is possible to minimize the latency for specific frames by mapping the frames to a sp...

Page 69: ...Thermal protection is used to protect the chip from getting overheated When the temperature exceeds the configured thermal protection temperature ports will be turned off in order to decrease the power consumption It is possible to arrange the ports with different priorities Each priority can be given a temperature at which the corresponding ports shall be turned off The Thermal Protection screen ...

Page 70: ...ade This page facilitates an update of the firmware controlling the switch The Web Firmware Upgrade screen in Figure 4 2 20 appears Figure 4 2 20 Web Firmware Upgrade page screenshot To open Firmware Upgrade screen perform the folling 1 Click System Web Firmware Upgrade 2 The Firmware Upgrade screen is displayed as in Figure 4 2 20 3 Click the button of the main page the system would pop up the fi...

Page 71: ... firmware upgrade processes again 4 2 18 TFTP Firmware Upgrade The Firmware Upgrade page provides the functions to allow a user to update the Managed Switch firmware from the TFTP server in the network Before updating make sure you have your TFTP server ready and the firmware image is on the TFTP server The TFTP Firmware Upgrade screen in Figure 4 2 22 appears Figure 4 2 22 TFTP Firmware Update pa...

Page 72: ...iguration Save page screenshot You can save view or load the switch configuration The configuration file is in XML format with a hierarchy of tags Header tags xml version 1 0 and configuration These tags are mandatory and must be present at the beginning of the file Section tags platform global and switch The platform section must be the first section tag and this section must include the correct ...

Page 73: ...file may then be modified using an editor and loaded to a switch The examples below shows a small configuration file only including configuration of the MAC address age time and the learning mode per port When loading this file only the included parameters will be changed This means that the age time will be set to 200 and the learn mode will be set to automatic Save Configuration 1 Press the Save...

Page 74: ...ction allows backup and reload the current configuration of the Managed Switch to the local management station The Configuration Upload screen in Figure 4 2 26 appears Figure 4 2 26 Configuration Upload page screenshot Configuration Upload 1 Click the button of the main page the system would pop up the file selection menu to choose saved configuration 74 ...

Page 75: ...atus 3 After down the main screen appears Transfer Completed 4 2 21 Factory Default You can reset the configuration of the stack switch on this page Only the IP configuration is retained The new configuration is available immediately which means that no restart is necessary The Factory Default screen in Figure 4 2 28 appears Figure 4 2 28 Factory Default page screenshot 75 ...

Page 76: ...ue is back to disable or none To reset the Managed Switch to the Factory default setting you can also press the hardware reset button at the front panel about 10 seconds After the device be rebooted You can login the management WEB interface within the same subnet of 192 168 0 xx Hardware Reset button 4 2 21 System Reboot The Reboot page enables the device to be rebooted from a remote location Onc...

Page 77: ...to the Port State page without reboot the system You can also check the SYS LED at the front panel to identify the System is load completely or not If the SYS LED is blinking then it is in the firmware load stage if the SYS LED light on you can use the WEB browser to login the Switch 77 ...

Page 78: ...anaged objects residing in a virtual information store Collections of related managed objects are defined in specific MIB modules network management protocol A management protocol is used to convey management information between agents and NMSs SNMP is the Internet community s de facto standard management protocol SNMP Operations SNMP itself is a simple request response protocol NMSs can send mult...

Page 79: ...ted version Possible versions are SNMP v1 Set SNMP supported version 1 SNMP v2c Set SNMP supported version 2c SNMP v3 Set SNMP supported version 3 Read Community Indicates the community read access string to permit access to SNMP agent The allowed string length is 0 to 255 and the allowed content is the ASCII characters from 33 to 126 The field only suits to SNMPv1 and SNMPv2c SNMPv3 is using USM ...

Page 80: ...ode operation Trap Version Indicates the SNMP trap supported version Possible versions are SNMP v1 Set SNMP trap supported version 1 SNMP v2c Set SNMP trap supported version 2c SNMP v3 Set SNMP trap supported version 3 Trap Community Indicates the community access string when send SNMP trap packet The allowed string length is 0 to 255 and the allowed content is the ASCII characters from 33 to 126 ...

Page 81: ...Disable SNMP trap link up and link down mode operation Trap Inform Mode Indicates the SNMP trap inform mode operation Possible modes are Enabled Enable SNMP trap inform mode operation Disabled Disable SNMP trap inform mode operation Trap Inform Timeout seconds Indicates the SNMP trap inform timeout The allowed range is 0 to 2147 Trap Inform Retry Times Indicates the SNMP trap inform retry times Th...

Page 82: ... must not be a minus sign The allowed string length is 0 to 255 System Location The physical location of this node e g telephone closet 3rd floor The allowed string length is 0 to 255 and the allowed content is the ASCII characters from 32 to 126 Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 4 3 4 SNMPv3 Configuration 4 3 4 1 SNMPv3 Comm...

Page 83: ... 5 appears Figure 4 3 5 SNMPv3 Users Configuration page screenshot The page includes the following fields Object Description Delete Check to delete the entry It will be deleted during the next save Engine ID An octet string identifying the engine ID that this entry should belong to The string must contain an even number between 10 and 64 hexadecimal digits but all zeros and all F s are not allowed...

Page 84: ...t means must first ensure that the value is set correctly Authentication Password A string identifying the authentication pass phrase For MD5 authentication protocol the allowed string length is 8 to 32 For SHA authentication protocol the allowed string length is 8 to 40 The allowed content is the ASCII characters from 33 to 126 Privacy Protocol Indicates the privacy protocol that this entry shoul...

Page 85: ...this entry should belong to Possible security models are v1 Reserved for SNMPv1 v2c Reserved for SNMPv2c usm User based Security Model USM Security Name A string identifying the security name that this entry should belong to The allowed string length is 1 to 32 and the allowed content is the ASCII characters from 33 to 126 Group Name A string identifying the group name that this entry should belon...

Page 86: ...rs from 33 to 126 View Type Indicates the view type that this entry should belong to Possible view type are included An optional flag to indicate that this view subtree should be included excluded An optional flag to indicate that this view subtree should be excluded General if a view entry s view type is excluded it should be exist another view entry which view type is included and it s OID subtr...

Page 87: ... should belong to Possible security models are any Accepted any security model v1 v2c usm v1 Reserved for SNMPv1 v2c Reserved for SNMPv2c usm User based Security Model USM Security Level Indicates the security model that this entry should belong to Possible security models are NoAuth NoPriv None authentication and none privacy Auth NoPriv Authentication and none privacy Auth Priv Authentication an...

Page 88: ...User s Manual of WGSD 10020 Series Buttons Click to add a new access entry Click to save changes Click to undo any changes made locally and revert to previously saved values 88 ...

Page 89: ...tistics SFP Module Information Display SFP information Port Mirror Sets the source and target ports for mirroring 4 4 1 Port Configuration This page displays current port configurations Ports can also be configured here The Port Configuration screen in Figure 4 4 1 appears Figure 4 4 1 Port Configuration page screenshot The page includes the following fields Object Description Port This is the log...

Page 90: ...y the result of the last Auto Negotiation Check the configured column to use flow control This setting is related to the setting for Configured Link Speed Maximum Frame Size Enter the maximum frame size allowed for the switch port including FCS The allowed range is 1518 bytes to 9600 bytes Excessive Collision Mode Configure port transmit collision behavior Discard Discard frame after 16 collisions...

Page 91: ... port for the settings contained in the same row Packets t The number of received and transmitted packets per por Bytes The number of received and transmitted bytes per port Errors ceived in error and the number of incomplete The number of frames re transmissions per port Drops The number of frames discarded due to ingress or egress congestion Filtered The number of received frames filtered by the...

Page 92: ...ogical port Buttons Click to refresh the page immediately Auto refresh Check this box to enable an automatic refresh of the page at regular intervals 4 4 4 Port Statistics Detail This page provides detailed traffic statistics for a specific switch port Use the port select box to select which switch port details to display The selected port belong to the currently selected stack unit as reflected b...

Page 93: ...Tx Unicast The number of received and transmitted good and bad unicast packets Rx and Tx Multicast The number of received and transmitted good and bad multicast packets Rx and Tx Broadcast The number of received and transmitted good and bad broadcast packets Rx and Tx Pause A count of the MAC Control frames received or transmitted on this port that have an opcode indicating a PAUSE operation Recei...

Page 94: ...th invalid CRC Rx Filtered The number of received frames filtered by the forwarding process Short frames are frames that are smaller than 64 bytes Long frames are frames that are longer than the configured maximum frame length for this port 1 Short frames are frames that are smaller than 64 bytes 2 Long frames are frames that are longer than the configured maximum frame length for this port Transm...

Page 95: ...ct Description Type Display the type of current SFP module the possible types are 1000Base SX 1000Base LX 100Base FX Speed Display the spedd of current SFP module the speed value or description is get from the SFP module Different vendors SFP modules might shows different speed information Wave Length nm Display the wavelength of current SFP module the wavelength value is get from the SFP module U...

Page 96: ...lected traffic can be copied or mirrored to a mirror port where a frame analyzer can be attached to analyze the frame flow The Managed Switch can unobtrusively mirror traffic from any port to a monitor port You can then attach a protocol analyzer or RMON probe to this port to perform traffic analysis and verify connection integrity Figure 4 4 6 Port Mirror application The traffic to be copied to t...

Page 97: ...ined in the same row Select mirror mode Rx only Frames received at this port are mirrored to the mirroring port Frames transmitted are not mirrored Tx only Frames transmitted from this port are mirrored to the mirroring port Frames received are not mirrored Disabled Neither frames transmitted or frames received are mirrored Mode Enabled Frames received and frames transmitted are mirrored to the mi...

Page 98: ...User s Manual of WGSD 10020 Series Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 98 ...

Page 99: ...an be assigned manually Port Trunk or automatically by enabling Link Aggregation Control Protocol LACP on the relevant links Aggregated Links are treated by the system as a single logical port Specifically the Aggregated Link has similar port attributes to a non aggregated port including auto negotiation speed Duplex setting etc The device supports the following Aggregation links Static LAGs Port ...

Page 100: ...dded or deleted from a VLAN The Spanning Tree Protocol will treat all the ports in a link aggregation as a whole Enable the link aggregation prior to connecting any cable between the switches to avoid creating a data loop Disconnect all link aggregation port cables or disable the link aggregation ports before removing a port link aggregation to avoid creating a data loop It allows a maximum of 10 ...

Page 101: ...rce MAC address or uncheck to disable By default Source MAC Address is enabled Destination MAC Address The Destination MAC Address can be used to calculate the destination port for the frame Check to enable the use of the Destination MAC Address or uncheck to disable By default Destination MAC Address is disabled IP Address The IP address can be used to calculate the destination port for the frame...

Page 102: ...Group ID Normal indicates there is no aggregation Only one group ID is valid per port Port Members Each switch port is listed for each group ID Select a radio button to include a port in an aggregation or clear the radio button to remove the port from the aggregation By default no ports belong to any aggregation group Buttons Click to save changes Click to undo any changes made locally and revert ...

Page 103: ...creen in Figure 4 5 4 appears Figure 4 5 4 LACP Port Configuration page screenshot The page includes the following fields Object Description Port The switch port number LACP Enabled Controls whether LACP is enabled on this switch port LACP will form an aggregation when 2 or more ports are connected to the same partner LACP can form max 12 LLAGs per switch and 2 GLAGs per stack Key The Key value in...

Page 104: ...in Figure 4 5 5 appears Figure 4 5 5 LACP System Status page screenshot The page includes the following fields Object Description Aggr ID The Aggregation ID associated with this aggregation instance For LLAG the id is shown as isid aggr id and for GLAGs as aggr id Partner System ID The system ID MAC address of the aggregation partner Partner Key The Key that the partner has assigned to this aggreg...

Page 105: ...he port link is down Backup means that the port could not join the aggregation group but will join if other port leaves Meanwhile it s LACP status is disabled Key The key assigned to this port Only ports with the same key can aggregate together Aggr ID The Aggregation ID assigned to this aggregation group IDs 1 and 2 are GLAGs while IDs 3 14 are LLAGs Partner System ID The partners System ID MAC a...

Page 106: ...elds Object Description Port The switch port number LACP Received Shows how many LACP frames have been sent from each port LACP Transmitted Shows how many LACP frames have been received at each port Discarded Shows how many unknown or illegal LACP frames have been discarded at each port Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to ref...

Page 107: ...asis is used to uniquely identify end nodes and assign these nodes VLAN membership packets cannot cross VLAN without a network device performing a routing function between the VLAN 2 The Managed Switch supports IEEE 802 1Q VLAN The port untagging function can be used to remove the 802 1 tag from packet headers to maintain compatibility with devices that are tag unaware 3 The Switch s default is to...

Page 108: ...each a different VLAN This Managed Switch supports the following VLAN features Up to 255 VLANs based on the IEEE 802 1Q standard Port overlapping allowing a port to participate in multiple VLANs End stations can belong to multiple VLANs Passing traffic between VLAN aware and VLAN unaware devices Priority tagging IEEE 802 1Q Standard IEEE 802 1Q tagged VLAN are implemented on the Switch 802 1Q VLAN...

Page 109: ...ed by the 802 1Q standard Because the VID is 12 bits long 4094 unique VLAN can be identified The tag is inserted into the packet header making the entire packet longer by 4 octets All of the information originally contained in the packet is retained 802 1Q Tag User Priority CFI VLAN ID VID 3 bits 1 bits 12 bits TPID Tag Protocol Identifier TCI Tag Control Information 2 bytes 2 bytes Preamble Desti...

Page 110: ... Because some devices on a network may be tag unaware a decision must be made at each port on a tag aware device before packets are transmitted should the packet to be transmitted have a tag or not If the transmitting port is connected to a tag unaware device the packet should be untagged If the transmitting port is connected to a tag aware device the packet should be tagged Default VLANs The Swit...

Page 111: ... typically used to reduce broadcast traffic and to increase security A group of network users assigned to a VLAN form a broadcast domain that is separate from other VLANs configured on the switch Packets are forwarded only between ports that are designated for the same VLAN Untagged VLANs can be used to manually isolate user groups or subnets 4 6 3 VLAN Basic Information The VLAN Basic Information...

Page 112: ...ose ports If a packet has previously been tagged the port will not alter the packet thus keeping the VLAN information intact The VLAN information in the tag can then be used by other 802 1Q compliant devices on the network to make packet forwarding decisions Untagged Ports with untagging enabled will strip the 802 1Q tag from all packets that flow into those ports If the packet doesn t have an 802...

Page 113: ...witch supports multiple VLAN tags and can therefore be used in MAN applications as a provider bridge aggregating traffic from numerous independent customer LANs into the MAN Metro Access Network space One of the purposes of the provider bridge is to recognize and use VLAN tags so that the VLANs in the MAN space can be used independent of the customers VLANs This is accomplished by adding a VLAN ta...

Page 114: ...ble ingress filtering for a port by checking the box This parameter affects VLAN ingress processing If ingress filtering is enabled and the ingress port is not a member of the classified VLAN of the frame the frame is discarded By default ingress filtering is disabled no checkmark Accept Frame Type Determines whether the port accepts all frames or only tagged frames This parameter affects VLAN ing...

Page 115: ...another device within the service provider network Customer Port Configures IEEE 802 1Q tunneling QinQ for a client access port to segregate and preserve customer VLAN IDs for traffic crossing the service provider network Set Out layer VLAN tag ether type The Tag Protocol Identifier TPID specifies the ethertype of incoming packets on a tunnel access port 802 1Q Tag 8100 vMAN Tag 88A8 Default 802 1...

Page 116: ...icular VLAN VLAN Name Indicates the name of the VLAN Maximum length of the VLAN Name String is 32 VLAN Name can only contain alphabets or numbers VLAN name should contain atleast one alphabet VLAN name can be edited for the existing VLAN entries or it can be added to the new entries Port Members A row of check boxes for each port is displayed for each VLAN ID To include a port in a VLAN check the ...

Page 117: ...bership Status This page provides an overview of membership status for VLAN users The VLAN Membership Status screen in Figure 4 6 4 appears Figure 4 6 4 VLAN Membership Status for Static User page screenshot The page includes the following fields Object Description VLAN ID Indicates the ID of this particular VLAN Port Members The VLAN Membership Status Page shall show the current VLAN port members...

Page 118: ...s used to eliminate the need to duplicate multicast traffic for subscribers in each VLAN Multicast traffic for all channels is sent only on a single multicast VLAN MSTP The 802 1s Multiple Spanning Tree protocol MSTP uses VLANs to create multiple spanning trees in a network which significantly improves network resource utilization while maintaining a loop free environment Buttons Select VLAN Users...

Page 119: ...AN ID in the tag If VLAN awareness is disabled all frames are classified to the Port VLAN ID and tags are not removed Ingress Filtering Show the ingress filtering for a port This parameter affects VLAN ingress processing If ingress filtering is enabled and the ingress port is not a member of the classified VLAN of the frame the frame is discarded Frame Type Shows whether the port accepts all frame...

Page 120: ...nt only on a single multicast VLAN MSTP The 802 1s Multiple Spanning Tree protocol MSTP uses VLANs to create multiple spanning trees in a network which significantly improves network resource utilization while maintaining a loop free environment Buttons Select VLAN Users from this drop down list Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to re...

Page 121: ... make sure the box is unchecked By default no ports are members and all boxes are unchecked Buttons Click to add new VLAN Click to save changes Click to undo any changes made locally and revert to previously saved values 4 6 9 Port Isolation Overview When a VLAN is configured to be a private VLAN communication between ports within that VLAN can be prevented Two application examples are provided in...

Page 122: ...LAN Ports which can receive traffic from only promiscuous ports in the private VLAN The configuration of promiscuous and isolated ports applies to all private VLANs When traffic comes in on a promiscuous port in a private VLAN the VLAN mask from the VLAN table is applied When traffic comes in on an isolated port the private VLAN mask is applied in addition to the VLAN mask from the VLAN table This...

Page 123: ...ts Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 4 6 10 VLAN setting example Separate VLAN 802 1Q VLAN Trunk Port Isolate 4 6 10 1 Two separate 802 1Q VLAN The diagram shows how the Managed Switch handle Tagged and Untagged traffic flow for two VLANs VLAN Group 2 and VLAN Group 3 are separated VLAN Each VLAN isolate network traffic so on...

Page 124: ...l tag it with a VLAN Tag 2 PC 2 and PC 3 will received the packet through Port 2 and Port 3 2 PC 4 PC 5 and PC 6 received no packet 3 While the packet leaves Port 2 it will be stripped away it tag becoming an untagged packet 4 While the packet leaves Port 3 it will keep as a tagged packet with VLAN Tag 2 Tagged packet entering VLAN 2 5 While PC 3 transmit a tagged packet with VLAN Tag 2 enters Por...

Page 125: ... with VID VLAN ID 1 Add two VLANs VLAN 2 and VLAN 3 VLAN Group 2 with VID 2 VLAN Group 3 with VID 3 2 Assign VLAN Member VLAN 2 Port 1 Port 2 and Port 3 VLAN 3 Port 4 Port 5 and Port 6 VLAN 1 All other ports Port 7 Port 24 3 Remove VLAN Member for VLAN 1 Remember to remove the Port 1 Port 6 from VLAN 1 membership since the Port 1 Port 6 had be assigned to VLAN 2 and VLAN 3 Figure 4 6 9 Add new VLA...

Page 126: ... 3 The Per Port VLAN configuration in Figure 4 6 10 appears Figure 4 6 10 Port 1 Port 6 VLAN Configuration 4 6 10 2 VLAN Trunking between two 802 1Q aware switch The most cases are used for Uplink to other switches VLANs are separated at different switches but they need to access with other switches within the same VLAN group The screen in Figure 4 6 11 appears 126 ...

Page 127: ...s connect to the hosts please refer to 4 6 10 1 examples The following steps will focus on the VLAN Trunk port configuration 1 Specify Port 8 to be the 802 1Q VLAN Trunk port 2 Assign Port 8 to both VLAN 2 and VLAN 3 at the VLAN Member configuration page 3 Define a VLAN 1 as a Public Area that overlapping with both VLAN 2 members and VLAN 3 members 4 Assign the VLAN Trunk Port to be the member of ...

Page 128: ...ith different PVID settings packets form VLAN 2 or VLAN 3 is not able to access to the other VLAN 6 Repeat Step 1 to 5 setup the VLAN Trunk port at the partner switch and add more VLANs to join the VLAN trunk repeat Step 1 to 3 to assign the Trunk port to the VLANs 4 6 10 3 Port Isolate The diagram shows how the Managed Switch handles isolate and promiscuous ports and the each PCs are not able to ...

Page 129: ...Set Port5 and Port 6 in Promiscuous port The screen in Figure 4 6 15 appears Figure 4 6 15 The configuration of Isolate and Promiscuous port 2 Assign VLAN Member VLAN 1 Port 1 Port 2 Port 5 and Port 3 VLAN 2 Port 3 Port 6 The screen in Figure 4 6 16 appears Figure 4 6 16 Private VLAN port setting 129 ...

Page 130: ...ription Delete To delete a MAC based VLAN entry check this box and press save The entry will be deleted in the stack MAC Address Indicates the MAC address VLAN ID Indicates the VLAN ID Port Members A row of check boxes for each port is displayed for each MAC based VLAN entry To include a port in a MAC based VLAN check the box To remove or exclude the port from the MAC based VLAN make sure the box ...

Page 131: ...igure 4 6 18 MAC based VLAN Membership Configuration for User Static page screenshot The page includes the following fields Object Description MAC Address Indicates the MAC address VLAN ID Indicates the VLAN ID Port Members Port members of the MAC based VLAN entry Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to refresh the page immediate...

Page 132: ...pe can have one of the following values 1 Ethernet 2 LLC 3 SNAP Note On changing the Frame type field valid value of the following text field will vary depending on the new frame type you selected Value Valid value that can be entered in this text field depends on the option selected from the the preceding Frame Type selection menu Below is the criteria for three different Frame Types 1 For Ethern...

Page 133: ...ll be etype 0x0600 0xffff and if value of OUI is other than 00 00 00 then valid value of PID will be any value from 0x0000 to 0xffff Group Name A valid Group Name is a unique 16 character long string for every entry which consists of a combination of alphabets a z or A Z and integers 0 9 Note special character and underscore _ are not allowed Buttons Click to add a new entry in mapping table Click...

Page 134: ...to a VLAN must be present in Protocol to Group mapping table and must not be preused by any other existing mapping entry on this page VLAN ID Indicates the ID to which Group Name will be mapped A valid VLAN ID ranges from 1 4095 Port Members A row of check boxes for each port is displayed for each Group Name to VLAN ID mapping To include a port in a mapping check the box To remove or exclude the p...

Page 135: ...ure is also accomplished automatically without operator intervention This automatic network reconfiguration provides maximum uptime to network users However the concepts of the Spanning Tree Algorithm and protocol are a complicated and complex subject and must be fully researched and understood It is possible to cause serious degradation of the performance of the network if the Spanning Tree is in...

Page 136: ...has a higher number than the current root port can cause a root port change STP Port States The BPDUs take some time to pass through a network This propagation delay can result in topology changes where a port that transitioned directly from a Blocking state to a Forwarding state could create temporary data loops Ports must wait for new network topology information to propagate throughout the netw...

Page 137: ...l the forwarding state is enabled for that port 2 STP Parameters STP Operation Levels The Switch allows for two levels of operation the switch level and the port level The switch level forms a spanning tree consisting of links between one or more switches The port level constructs a spanning tree consisting of groups of one or more ports The STP operates in much the same way for both levels On the...

Page 138: ...xceeds the value of the maximum age timer 20 seconds Forward Delay Timer The amount time spent by a port in the learning and listening states waiting for a BPDU that may return the port to the blocking state 15 seconds The following are the user configurable STP parameters for the port or port group level Variable Description Default Value Port Priority A relative priority for each port lower numb...

Page 139: ...ove parameters Max Age _ 2 x Forward Delay 1 second Max Age _ 2 x Hello Time 1 second Port Priority A Port Priority can be from 0 to 240 The lower the number the greater the probability the port will be chosen as the Root Port Port Cost A Port Cost can be set from 0 to 200000000 The lower the number the greater the probability the port will be chosen to forward packets 3 Illustration of STP A simp...

Page 140: ...User s Manual of WGSD 10020 Series Figure 4 7 5 Before Applying the STA Rules In this example only the default STP values are used Figure 4 7 6 After Applying the STA Rules 140 ...

Page 141: ...he settings are used by all STP Bridge instances in the Switch or switch Stack The Managed Switch support the following Spanning Tree protocols Compatiable Spanning Tree Protocol STP Provides a single path between end stations avoiding and eliminating loops Normal Rapid Spanning Tree Protocol RSTP Detects and uses of network topologies that provide faster spanning tree convergence without creating...

Page 142: ...1 Maximum The lower of 40 or 2 x Forward Delay 1 Maximum Hop Count This defines the initial value of remaining Hops for MSTI information generated at the boundary of an MSTI region It defines how many bridges a root bridge can distribute its BPDU information Valid values are in the range 6 to 40 hops Transmit Hold Count The number of BPDU s a bridge port can send per second When exceeded transmiss...

Page 143: ...The displayed table contains a row for each STP bridge instance where the column displays the following information The Bridge Status screen in Figure 4 7 8 appears Figure 4 7 8 STP Bridge Status page screenshot The page includes the following fields Object Description MSTI The Bridge Instance This is also a link to the STP Detailed Bridge Status Bridge ID The Bridge ID of this Bridge instance Roo...

Page 144: ...ontrols whether RSTP is enabled on this switch port Path Cost Controls the path cost incurred by the port The Auto setting will set the path cost as appropriate by the physical link speed using the 802 1D recommended values Using the Specific setting a user defined value can be entered The path cost is used when establishing the active topology of the network Lower path cost ports are chosen as fo...

Page 145: ...tive topology possibly because those bridges are not under the full control of the administrator This feature is also known as Root Guard Restricted TCN If enabled causes the port not to propagate received topology change notifications and topology changes to other ports If set it can cause temporary loss of connectivity after changes in a spanning tree s active topology as a result of persistentl...

Page 146: ...0 Fast Ethernet 10 60 20 000 2 000 000 Gigabit Ethernet 3 10 2 000 200 000 Table 4 7 1 Recommended STP Path Cost Range Port Type Link Type IEEE 802 1D 1998 IEEE 802 1w 2001 Ethernet Half Duplex Full Duplex Trunk 100 95 90 2 000 000 1 999 999 1 000 000 Fast Ethernet Half Duplex Full Duplex Trunk 19 18 15 200 000 100 000 50 000 Gigabit Ethernet Full Duplex Trunk 4 3 10 000 5 000 Table 4 7 2 Recommen...

Page 147: ...the default instance which is always active Priority Controls the bridge priority Lower numerical values have better priority The bridge priority plus the MSTI instance number concatenated with the 6 byte MAC address of the switch forms a Bridge Identifier Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 4 7 6 MSTI Configuration This page a...

Page 148: ... fields Configuration Identification Object Description Configuration Name The name identifiying the VLAN to MSTI mapping Bridges must share the name and revision see below as well as the VLAN to MSTI mapping configuration in order to share spanning trees for MSTI s Intra region The name is at most 32 characters 148 ...

Page 149: ...viously saved values 4 7 7 MSTI Ports Configuration This page allows the user to inspect the current STP MSTI port configurations and possibly change them as well A MSTI port is a virtual port which is instantiated separately for each active CIST physical port for each MSTI instance configured and applicable for the port The MSTI instance must be selected before displaying actual MSTI port configu...

Page 150: ...uto setting will set the path cost as appropriate by the physical link speed using the 802 1D recommended values Using the Specific setting a user defined value can be entered The path cost is used when establishing the active topology of the network Lower path cost ports are chosen as forwarding ports in favor of higher path cost ports Valid values are in the range 1 to 200000000 Priority Control...

Page 151: ...lected switch The STP Port Status screen in Figure 4 7 14 appears Figure 4 7 14 STP Port Status page screenshot The page includes the following fields Object Description Port The switch port number of the logical STP port CIST Role The current STP port role of the ICST port The port role can be one of the following values AlternatePort BackupPort RootPort DesignatedPort State The current STP port ...

Page 152: ...cs page screenshot The page includes the following fields Object Description Port The switch port number of the logical RSTP port MSTP The number of MSTP Configuration BPDU s received transmitted on the port RSTP The number of RSTP Configuration BPDU s received transmitted on the port STP The number of legacy STP Configuration BPDU s received transmitted on the port TCN The number of legacy Topolo...

Page 153: ...s Manual of WGSD 10020 Series Click to refresh the page immediately Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to clear the information immediately 153 ...

Page 154: ...ers that they will become members of a multicast group The Internet Group Management Protocol IGMP is used to communicate this information IGMP is also used to periodically check the multicast group for members that are no longer active In the case where there is more than one multicast router on a sub network one router is elected as the queried This router then keeps track of the membership of t...

Page 155: ...User s Manual of WGSD 10020 Series Figure 4 8 2 Multicast flooding Figure 4 8 3 IGMP Snooping multicast stream control 155 ...

Page 156: ...packets enable multicast routers to keep track of the membership of multicast groups on their respective sub networks The following outlines what is communicated between a multicast router and a multicast group member using IGMP A host sends an IGMP report to join a group A host will never send a report when it wants to leave a group for version 1 A host will send a leave report when it wants to l...

Page 157: ...hey want to receive multicast traffic If there is more than one router switch on the LAN performing IP multicasting one of these devices is elected querier and assumes the role of querying the LAN for group members It then propagates the service requests on to any upstream multicast switch router to ensure that it will continue to receive the multicast service Multicast routers use this informatio...

Page 158: ...led Enable unregistered IPMC traffic flooding Leave Proxy Enable Enable IGMP Leave Proxy This feature can be used to avoid forwarding unnecessary leave messages to the router side Proxy Enable Enable IGMP Proxy This feature can be used to avoid forwarding unnecessary join and leave messages to the router side Router Port Specify which ports act as router ports A router port is a port on the Ethern...

Page 159: ... be the one with the lowest VLAN ID found in the VLAN Table The VLAN input fields allow the user to select the starting point in the VLAN Table The IGMP Snooping VLAN Configuration screen in Figure 4 8 6 appears Figure 4 8 6 IGMP Snooping VLAN Configuration page screenshot The page includes the following fields Object Description VLAN ID The VLAN ID of the entry IGMP Snooping Enable Enable the per...

Page 160: ...saved values 4 8 4 IGMP Snooping Port Group Filtering In certain switch applications the administrator may want to control the multicast services that are available to end users For example an IP TV service based on a specific subscription plan The IGMP filtering feature fulfills this requirement by restricting access to specified multicast services on a switch port and IGMP throttling limits the ...

Page 161: ...deleted during the next save Port The logical port for the settings Filtering Group The IP Multicast Group that will be filtered Buttons Click to add a new entry to the Group Filtering table Click to save changes Click to undo any changes made locally and revert to previously saved values 4 8 5 IGMP Snooping Status This page provides IGMP Snooping status The IGMP Snooping Status screen in Figure 4...

Page 162: ...status is ACTIVE or IDLE Querier Transmit The number of Transmitted Querier Querier Receive The number of Received Querier V1 Reports Receive The number of Received V1 Reports V2 Reports Receive The number of Received V2 Reports V3 Reports Receive The number of Received V3 Reports V2 Leave Receive The number of Received V2 Leave Buttons Click to refresh the page immediately Clears all Statistics c...

Page 163: ... ID VLAN ID of the group Groups Group address of the group displayed Port Members Ports under this group Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to refresh the page immediately Updates the table starting with the first entry in the IGMP Group Table Updates the table starting with the entry after the last entry currently displayed 4 ...

Page 164: ...D port number Group Address basis It can be either Include or Exclude Source Address IP Address of the source Currently system limits the total number of IP source addresses for filtering to be 128 Type Indicates the Type It can be either Allow or Deny Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to refresh the page immediately Updates t...

Page 165: ...his feature can be used to avoid forwarding unnecessary leave messages to the router side Proxy Enable Enable MLD Proxy This feature can be used to avoid forwarding unnecessary join and leave messages to the router side Router Port Specify which ports act as router ports A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or MLD querier If an aggregation ...

Page 166: ...ping VLAN Configuration screen in Figure 4 8 12 appears Figure 4 8 12 IGMP Snooping VLAN Configuration page screenshot The page includes the following fields Object Description VLAN ID The VLAN ID of the entry MLD Snooping Enable Enable the per VLAN MLD Snooping Only up to 64 VLANs can be selected MLD Querier Enable the MLD Querier in the VLAN RV Robustness Variable The Robustness Variable allows ...

Page 167: ...hanges made locally and revert to previously saved values 4 8 10 MLD Snooping Port Group Filtering In certain switch applications the administrator may want to control the multicast services that are available to end users For example an IP TV service based on a specific subscription plan The MLD filtering feature fulfills this requirement by restricting access to specified multicast services on a...

Page 168: ...deleted during the next save Port The logical port for the settings Filtering Group The IP Multicast Group that will be filtered Buttons Click to add a new entry to the Group Filtering table Click to save changes Click to undo any changes made locally and revert to previously saved values 4 8 11 MLD Snooping Status This page provides MLD Snooping status The IGMP Snooping Status screen in Figure 4 ...

Page 169: ... Status Show the Querier status is ACTIVE or IDLE Querier Transmit The number of Transmitted Querier Querier Receive The number of Received Querier V1 Reports Received The number of Received V1 Reports V2 Reports Received The number of Received V2 Reports V1 Leave Received The number of Received V1 Leaves Buttons Click to refresh the page immediately Clears all Statistics counters Auto refresh Che...

Page 170: ... the group Groups Group address of the group displayed Port Members Ports under this group Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to refresh the page immediately Updates the table starting with the first entry in the IGMP Group Table Updates the table starting with the entry after the last entry currently displayed 4 8 13 MLDv2 Inf...

Page 171: ...of IP source addresses for filtering to be 128 Type Indicates the Type It can be either Allow or Deny Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to refresh the page immediately Updates the table starting with the first entry in the IGMP Group Table Updates the table starting with the entry after the last entry currently displayed 4 8 1...

Page 172: ...rmation on MVR MVR is typically used for IPTV like services and is therefore usually only available on enterprise level switches Many manufacturers provide support for MVR on their high end switches The main reason for using MVR is to save bandwidth by preventing duplicate multicast streams being sent in the core network instead the stream s are received on the MVR VLAN and forwarded to the VLANs ...

Page 173: ...8 appears Figure 4 8 18 MVR Status page screenshot The page includes the following fields Object Description Group The Multicast VLAN ID V1 Reports Received The number of Received V1 Reports V2 Reports Received The number of Received V2 Reports V3 Reports Received The number of Received V3 Reports V2 Leave Received The number of Received V2 Leaves Buttons Click to refresh the page immediately Clea...

Page 174: ...nput fields allow the user to select the starting point in the MVR Group Table The MVR Groups Information screen in Figure 4 8 19 appears Figure 4 8 19 MVR Groups Information page screenshot The page includes the following fields Object Description VLAN VLAN ID of the group Groups Group ID of the group displayed Port Members Ports under this group Buttons Auto refresh Check this box to enable an a...

Page 175: ...sifier classifies the traffic on the network Traffic classifications are determined by protocol application source destination and so on You can create and modify classifications The Switch then groups classified traffic in order to schedule them with the appropriate service level DiffServ Code Point DSCP is the traffic prioritization bits within an IP header that are encoded by certain applicatio...

Page 176: ... the configuration below applies Enable Controls whether the policer is enabled on this switch port Rate Controls the rate for the policer The default value is 500 This value is restricted to 100 1000000 when the Rate Unit is kbps or fps and it is restricted to 1 15000 when the Policer Unit is Mbps or kfps Unit Controls the unit of measure for the policer rate as kbps Mbps fps or kfps The default ...

Page 177: ... There is a one to one mapping between QoS class queue and priority A QoS class of 0 zero has the lowest priority DP Level Controls the default DP level i e the DP level for frames not classified in any other way PCP Controls the default PCP for untagged frames DEI Controls the default DEI for untagged frames Tag Class Shows the classification mode for tagged frames on this port Disabled Use defau...

Page 178: ...o previously saved values 4 9 3 1 QoS Ingress Port Tag Classification The clasification mode for tagged frames are configured on this page The QoS Ingress Port Tag Classification screen in Figure 4 9 3 appears Figure 4 9 3 QoS Ingress Port Tag Classification page screenshot The page includes the following fields 178 ...

Page 179: ...s when Tag Classification is set to Enabled Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values Return to the previous page 4 9 4 Port Scheduler This page provides an overview of QoS Egress Port Schedulers for all switch ports The Port Scheduler screen in Figure 4 9 4 appears Figure 4 9 4 QoS Egress Port Schedule page screenshot The page inclu...

Page 180: ...e screenshot The page includes the following fields Object Description Port The logical port for the settings contained in the same row Click on the port number in order to configure the shapers For more detail please refer to chapter 4 9 5 1 Q0 Q7 Shows disabled or actual queue shaper rate e g 800 Mbps Port Shows disabled or actual port shaper rate e g 800 Mbps 4 9 5 1 QoS Egress Port Schedule an...

Page 181: ... to 1 3300 when the Unit is Mbps Queue Shaper Unit Controls the unit of measure for the queue shaper rate as kbps or Mbps The default value is kbps Queue Shaper Excess Controls whether the queue is allowed to use excess bandwidth Queue Scheduler Weight Controls the weight for this queue The default value is 17 This value is restricted to 1 100 This parameter is only shown if Scheduler Mode is set ...

Page 182: ... 6 Port Tag Remarking This page provides an overview of QoS Egress Port Tag Remarking for all switch ports The Port Tag Remarking screen in Figure 4 9 7 appears Figure 4 9 7 QoS Egress Port Tag Remarking page screenshot The page includes the following fields Object Description Port The logical port for the settings contained in the same row Click on the port number in order to configure tag remark...

Page 183: ...P DEI values Mapped Use mapped versions of QoS class and DP level PCP DEI Configuration Controls the default PCP and DEI values used when the mode is set to Default QoS class DP level to PCP DEI Mapping Controls the mapping of the classified QoS class DP level to PCP DEI values when the mode is set to Mapped Buttons Click to save changes Click to undo any changes made locally and revert to previou...

Page 184: ...lable in Ingress Translate Classify Translate To Enable the Ingress Translation click the checkbox Classify Classification for a port have 4 different values Disable No Ingress DSCP Classification DSCP 0 Classify if incoming or translated if enabled DSCP is 0 Selected Classify only selected DSCP for which classification is enabled as specified in DSCP Translation window for the specific DSCP All C...

Page 185: ...saved values Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to refresh the page immediately 4 9 8 DSCP Based QoS This page allows you to configure the basic QoS DSCP based QoS Ingress Classification settings for all switches The DSCP Based QoS screen in Figure 4 9 10 appears 185 ...

Page 186: ...User s Manual of WGSD 10020 Series Figure 4 9 10 DSCP Based QoS Ingress Classification page screenshot 186 ...

Page 187: ...S Class QoS Class value can be any of 0 7 DPL Drop Precedence Level 0 1 Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 4 9 9 DSCP Translation This page allows you to configure the basic QoS DSCP Translation settings for all switches DSCP translation can be done in Ingress or Egress The DSCP Translation screen in Figure 4 9 11 appears 187 ...

Page 188: ...User s Manual of WGSD 10020 Series 188 ...

Page 189: ...lated to any of 0 63 DSCP values Classify Click to enable Classification at Ingress side Egress There are following configurable parameters for Egress side Remap DP0 Remap DP1 There is following configurable parameter for Egress side Remap Remap DP0 Select the DSCP value from select menu to which you want to remap DSCP value ranges form 0 to 63 Remap DP1 Select the DSCP value from select menu to w...

Page 190: ...age includes the following fields Object Description QoS Class Available QoS Class value ranges from 0 to 7 QoS Class 0 7 can be mapped to followed parameters DPL Drop Precedence Level 0 1 can be configured for all available QoS Classes DSCP Select DSCP value 0 63 from DSCP menu to map DSCP to corresponding QoS Class and DPL value Buttons Click to save changes Click to undo any changes made locall...

Page 191: ...ncomming frames Possible frame types are Any The QCE will match all frame type Ethernet Only Ethernet frames with Ether Type 0x600 0xFFFF are allowed LLC Only LLC frames are allowed SNAP Only SNAP frames are allowed IPv4 The QCE will match only IPV4 frames IPv6 The QCE will match only IPV6 frames SMAC Displays the OUI field of Source MAC address i e first three octet byte of MAC address DMAC Speci...

Page 192: ... matches the QCE it will be put in the queue DPL Drop Precedence Level if a frame matches the QCE then DP level will set to value displayed under DPL column DSCP If a frame matches the QCE then DSCP will be classified with the value displayed under DSCP column Modification Buttons You can modify each QCE in the table using the following buttons Inserts a new QCE before the current row Edits the QC...

Page 193: ...Any Untag or Tag VID Valid value of VLAN ID can be any value in the range 1 4095 or Any user can enter either a specific value or a range of VIDs PCP Priority Code Point Valid value PCP are specific 0 1 2 3 4 5 6 7 or range 0 1 2 3 4 5 6 7 0 3 4 7 or Any DEI Drop Eligible Indicator Valid value of DEI can be any of values between 0 1 or Any SMAC Source MAC address 24 MS bits OUI or Any DMAC Type De...

Page 194: ...w where x y z and w are decimal numbers between 0 and 255 When Mask is converted to a 32 bit binary string and read from left to right all bits following the first zero must also be zero DSCP Diffserv Code Point value DSCP It can be specific value range of value or Any DSCP values are in the range 0 63 including BE CS1 CS7 EF or AF11 AF43 IP Fragment IPv4 frame fragmented option yes no any Sport S...

Page 195: ...nt QCL users Each row describes the QCE that is defined It is a conflict if a specific QCE is not applied to the hardware due to hardware limitations The maximum number of QCEs is 256 on each switch The QoS Control List Status screen in Figure 4 9 15 appears Figure 4 9 15 QoS Control List Status page screenshot The page includes the following fields Object Description User Indicates the QCL user Q...

Page 196: ...tatus as Yes otherwise it is always No Please note that conflict can be resolved by releaseing the resource required by the QCE and pressing Refresh button Buttons Select the QCL status from this drop down list Auto refresh Check this box to refresh the page automatically Automatic refresh occurs at regular intervals Click to refresh the page any changes made locally will be undone 4 9 13 Storm Co...

Page 197: ...4K 2048K 4096K 8192K 16384K or 32768K Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 4 9 14 QoS Statistics This page provides statistics for the different queues for all switch ports The QoS Statistics screen in Figure 4 9 17 appears Figure 4 9 17 Queuing Counters page screenshot The page includes the following fields Object Description P...

Page 198: ...raffic forwarding on the Voice VLAN then the switch can classify and schedule network traffic It is recommended that there be two VLANs on a port one for voice one for data Before connecting the IP device to the switch the IP phone should configure the voice VLAN ID correctly It should be configured through its own GUI The Voice VLAN Configuration screen in Figure 4 9 18 appears Figure 4 9 18 Voic...

Page 199: ...isn t disabled we must disable MSTP feature before we enable Voice VLAN It can avoid the conflict of ingress filter Possible port modes are Disabled Disjoin from Voice VLAN Auto Enable auto detect mode It detects whether there is VoIP phone attached on the specific port and configure the Voice VLAN members automatically Forced Forced join to Voice VLAN Port Security Indicates the Voice VLAN port s...

Page 200: ...ct Description Delete Check to delete the entry It will be deleted during the next save Telephony OUI An telephony OUI address is a globally unique identifier assigned to a vendor by IEEE It must be 6 characters long and the input format is xx xx xx x is a hexadecimal digit Description The description of OUI address Normaly it descript which vendor telephony device The allowed string length is 0 t...

Page 201: ...ntrol Entry It describes access permission associated with a particular ACE ID There are three ACE frame types Ethernet Type ARP and IPv4 and two ACE actions permit and deny The ACE also contains many detailed different parameter options that are available for individual application 4 10 1 Access Control List Status This page shows the ACL status by different ACL users Each row describes the ACE t...

Page 202: ... are Disabled or a specific port number When Disabled is displayed the port copy operation is disabled CPU Forward packet that matched the specific ACE to CPU CPU Once Forward first packet that matched the specific ACE to CPU Counter The counter indicates the number of times the ACE was hit by a frame Conflict Indicates the hardware status of the specific ACE The specific ACE is not applied to the...

Page 203: ...ocol IPv4 Other The ACE will match IPv4 frames which are not ICMP UDP TCP IPv6 The ACE will match all IPv6 standard frames Action Indicates the forwarding action of the ACE Permit Frames matching the ACE may be forwarded and learned Deny Frames matching the ACE are dropped Rate Limiter Indicates the rate limiter number of the ACE The allowed range is 1 to 16 When Disabled is displayed the rate lim...

Page 204: ...efresh Check this box to refresh the page automatically Automatic refresh occurs at regular intervals Click to refresh the page any changes made locally will be undone Click to clear the counters Click to remove all ACEs 4 10 3 ACE Configuration Configure an ACE Access Control Entry on this page An ACE consists of several parameters These parameters vary according to the frame type that you select...

Page 205: ...elect the frame type for this ACE These frame types are mutually exclusive Any Any frame can match this ACE Ethernet Type Only Ethernet Type frames can match this ACE The IEEE 802 3 describes the value of Length Type Field specifications to be greater than or equal to 1536 decimal equal to 0600 hexadecimal ARP Only ARP frames can match this ACE Notice the ARP frames won t match the ACE with ethern...

Page 206: ...memory size and logging rate is limited Shutdown Specify the port shut down operation of the ACE The allowed values are Enabled If a frame matches the ACE the ingress port will be disabled Disabled Port shut down is disabled for the ACE Counter The counter indicates the number of times the ACE was hit by a frame MAC Parameters Object Description SMAC Filter Only displayed when the frame type is Et...

Page 207: ...he allowed range is 1 to 4095 A frame that hits this ACE matches this VLAN ID value Tag Priority Specify the tag priority for this ACE A frame that hits this ACE matches this tag priority The allowed number range is 0 to 7 The value Any means that no tag priority is specified tag priority is don t care ARP Parameters The ARP parameters can be configured when Frame Type ARP is selected Object Descr...

Page 208: ... dotted decimal notation Target IP Mask When Network is selected for the target IP filter you can enter a specific target IP mask in dotted decimal notation ARP SMAC Match Specify whether frames can hit the action according to their sender hardware address field SHA settings 0 ARP frames where SHA is not equal to the SMAC address 1 ARP frames where SHA is equal to the SMAC address Any Any value is...

Page 209: ...ned later in this help file TCP Select TCP to filter IPv4 TCP protocol frames Extra fields for defining TCP parameters will appear These fields are explained later in this help file IP Protocol Value When Specific is selected for the IP protocol value you can enter a specific value The allowed range is 0 to 255 A frame that hits this ACE matches this IP protocol value IP TTL Specify the Time to Li...

Page 210: ...ination IP address in the DIP Address field that appears Network Destination IP filter is set to Network Specify the destination IP address and destination IP mask in the DIP Address and DIP Mask fields that appear DIP Address When Host or Network is selected for the destination IP filter you can enter a specific DIP address in dotted decimal notation DIP Mask When Network is selected for the dest...

Page 211: ...e filter you can enter a specific TCP UDP source range value The allowed range is 0 to 65535 A frame that hits this ACE matches this TCP UDP source value TCP UDP Destination Filter Specify the TCP UDP destination filter for this ACE Any No TCP UDP destination filter is specified TCP UDP destination filter status is don t care Specific If you want to filter a specific TCP UDP destination filter wit...

Page 212: ...ment field significant ACK value for this ACE 0 TCP frames where the ACK field is set must not be able to match this entry 1 TCP frames where the ACK field is set must be able to match this entry Any Any value is allowed don t care TCP URG Specify the TCP Urgent Pointer field significant URG value for this ACE 0 TCP frames where the URG field is set must not be able to match this entry 1 TCP frame...

Page 213: ...for the settings contained in the same row Policy ID Select the policy to apply to this port The allowed values are 1 through 8 The default value is 1 Action Select whether forwarding is permitted Permit or denied Deny The default value is Permit Rate Limiter ID Select which rate limiter to apply to this port The allowed values are Disabled or the values 1 through 15 The default value is Disabled ...

Page 214: ...eration of this port The allowed values are Enabled If a frame is received on the port the port will be disabled Disabled Port shut down is disabled The default value is Disabled Counter Counts the number of frames that match this ACE Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values Click to refresh the page any changes made locally will be...

Page 215: ...e Limiter ID The rate limiter ID for the settings contained in the same row Rate The allowed values are 0 3276700 in pps or 0 100 200 300 1000000 in kbps Unit Specify the rate unit The allowed values are pps packets per second kbps Kbits per second Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 215 ...

Page 216: ...ication is complete the RADIUS server sends a special packet containing a success or failure indication Besides forwarding this decision to the supplicant the switch uses it to open up or block traffic on the switch port connected to the supplicant Overview of MAC Based Authentication Unlike 802 1X MAC based authentication is not a standard but merely a best practices method adopted by the industr...

Page 217: ...re or TACACS aware devices on the network An authentication server contains a database of multiple user name password pairs with associated privilege levels for each user that requires management access to the Managed Switch 4 11 1 Understanding IEEE 802 1X Port Based Authentication The IEEE 802 1X standard defines a client server based access control and authentication protocol that restricts una...

Page 218: ...upported authentication server it is available in Cisco Secure Access Control Server version 3 0 RADIUS operates in a client server model in which secure authentication information is exchanged between the RADIUS server and one or more RADIUS clients Switch 802 1X device controls the physical access to the network based on the authentication status of the client The switch acts as an intermediary ...

Page 219: ... bootup the client does not receive an EAP request identity frame from the switch the client can initiate authentication by sending an EAPOL start frame which prompts the switch to request the client s identity If 802 1X is not enabled or supported on the network access device any EAPOL frames from the client are dropped If the client does not receive an EAP request identity frame after three atte...

Page 220: ...cause no response is received the client begins sending frames as if the port is in the authorized state If the client is successfully authenticated receives an Accept frame from the authentication server the port state changes to authorized and all frames from the authenticated client are allowed through the port If the authentication fails the port remains in the unauthorized state but authentic...

Page 221: ... to configure the IEEE 802 1X and MAC based authentication system and port settings The IEEE 802 1X standard defines a port based access control procedure that prevents unauthorized access to a network by requiring users to first submit credentials for authentication One or more central servers the backend servers determine whether the user is allowed access to the network These backend RADIUS ser...

Page 222: ... globally disabled all ports are allowed forwarding of frames Reauthentication Enabled If checked successfully authenticated supplicants clients are reauthenticated after the interval specified by the Reauthentication Period Reauthentication for 802 1X enabled ports can be used to detect if a new device is plugged into a switch port or if a supplicant is no longer attached For MAC based ports reau...

Page 223: ...is seen within a given period of time This parameter controls exactly this period and can be set to a number between 10 and 1000000 seconds If reauthentication is enabled and the port is in a 802 1X based mode this is not so criticial since supplicants that are no longer attached to the port will get removed upon the next reauthentication which will fail But if reauthentication is not enabled the ...

Page 224: ... to transmit special RADIUS attributes to take advantage of this feature see RADIUS Assigned VLAN Enabled below for a detailed description The RADIUS Assigned VLAN Enabled checkbox provides a quick way to globally enable disable RADIUS server assigned VLAN functionality When checked the individual ports ditto setting determine whether RADIUS assigned VLAN is enabled for that port When unchecked RA...

Page 225: ...The port number for which the configuration below applies Admin State If NAS is globally enabled this selection controls the port s authentication mode The following modes are available Force Authorized In this mode the switch will send one EAPOL Success frame when the port link comes up and any client on the port will be allowed network access without authentication Force Unauthorized In this mod...

Page 226: ...d since the server hasn t yet failed because the X seconds haven t expired the same server will be contacted upon the next backend authentication server request from the switch This scenario will loop forever Therefore the server timeout should be smaller than the supplicant s EAPOL Start frame retransmission rate Single 802 1X In port based 802 1X authentication once a supplicant is successfully ...

Page 227: ...uses the supplicant s MAC address which is obtained from the first EAPOL Start or EAPOL Response Identity frame sent by the supplicant An exception to this is when no supplicants are attached In this case the switch sends EAPOL Request Identity frames using the BPDU multicast MAC address as destination to wake up any supplicants that might be on the port The maximum number of supplicants that can ...

Page 228: ... enabled checked for a given port the switch reacts to QoS Class information carried in the RADIUS Access Accept packet transmitted by the RADIUS server when a supplicant is successfully authenticated If present and valid traffic received on the supplicant s port will be classified to the given QoS Class If re authentication fails or the RADIUS Access Accept packet no longer carries a QoS Class or...

Page 229: ...uble shooting VLAN assignments use the Monitor VLANs VLAN Membership and VLAN Port pages These pages show which modules have temporarily overridden the current Port VLAN configuration RADIUS attributes used in identifying a VLAN ID RFC2868 and RFC3580 form the basis for the attributes used in identifying a VLAN ID in an Access Accept packet The following criteria are used The Tunnel Medium Type Tu...

Page 230: ...Otherwise it will not move to the Guest VLAN but continue transmitting EAPOL Request Identity frames at the rate given by EAPOL Timeout Once in the Guest VLAN the port is considered authenticated and all attached clients on the port are allowed access on this VLAN The switch will not transmit an EAPOL Success frame when entering the Guest VLAN While in the Guest VLAN the switch monitors the link f...

Page 231: ...s out EAPOL based authentication For MAC based authentication reauthentication will be attempted immediately The button only has effect for successfully authenticated clients on the port and will not cause the clients to get temporarily unauthorized Reinitialize Forces a reinitialization of the clients on the port and thereby a reauthentication immediately The clients will transfer to the unauthor...

Page 232: ...ce MAC address carried in the most recently received EAPOL frame for EAPOL based authentication and the most recently received frame from a new client for MAC based authentication Last ID The user name supplicant identity carried in the most recently received Response Identity EAPOL frame for EAPOL based authentication and the source MAC address from the most recently received frame from a new cli...

Page 233: ...s Statistics page screenshot The page includes the following fields Port State Object Description Admin State The port s current administrative state Refer to NAS Admin State for a description of possible values Port State The current state of the port Refer to NAS Port State for a description of the individual states QoS Class The QoS class assigned by the RADIUS server The field is blank if no Q...

Page 234: ... received by the switch Rx Responses dot1xAuthEapolRespFr amesRx The number of valid EAPOL response frames other than Response Identity frames that have been received by the switch Rx Start dot1xAuthEapolStartFra mesRx The number of EAPOL Start frames that have been received by the switch Rx Logoff dot1xAuthEapolLogoffFr amesRx The number of valid EAPOL Logoff frames that have been received by the...

Page 235: ... been transmitted by the switch These backend RADIUS frame counters are available for the following administrative states Port based 802 1X Single 802 1X Multi 802 1X MAC based Auth Direction Name IEEE Name Description Backend Server Counters Rx Access Challenges dot1xAuthBackendAcce ssChallenges 802 1X based Counts the number of times that the switch receives the first request from the backend se...

Page 236: ...ation Indicates that the supplicant client has successfully authenticated to the backend server Rx Auth Failures dot1xAuthBackendAuth Fails 802 1X and MAC based Counts the number of times that the switch receives a failure message This indicates that the supplicant client has not authenticated to the backend server Tx Responses dot1xAuthBackendResp onses 802 1X based Counts the number of times tha...

Page 237: ...polF rameSource The MAC address of the last supplicant client VLAN ID The VLAN ID on which the last frame from the last supplicant client was received Version dot1xAuthLastEapolF rameVersion 802 1X based The protocol version number carried in the most recently received EAPOL frame MAC based Not applicable Last Supplicant Client Info Identity 802 1X based The user name supplicant identity carried i...

Page 238: ... s Backend Server counters to be shown in the Selected Counters table If no clients are attached it shows No clients attached VLAN ID This column holds the VLAN ID that the corresponding client is currently secured through the Port Security module State The client can either be authenticated or unauthenticated In the authenticated state it is allowed to forward frames on the port and in the unauth...

Page 239: ...he following modes Multi 802 1X MAC based Auth X Click to clear both the port counters and all of the attached client s counters The Last Client will not be cleared however This button is available in the following modes Multi 802 1X MAC based Auth X Click to clear only the currently selected client s counters 239 ...

Page 240: ...rver Configuration This page allows you to configure the Authentication Servers The Authentication Server Configuration screen in Figure 4 11 7 appears Figure 4 11 7 Authentication Server Configuration page screenshot The page includes the following fields 240 ...

Page 241: ...which the switch will not send new requests to a server that has failed to respond to a previous request This will stop the switch from continually trying to contact a server that it has already determined as dead Setting the Dead Time to a value greater than 0 zero will enable this feature but only if more than one server has been configured RADIUS Authentication Server Configuration The table ha...

Page 242: ...een the RADIUS Accounting Server and the switch TACACS Authentication Server Configuration The table has one row for each TACACS Authentication Server and a number of columns which are Object Description The TACACS Authentication Server number for which the configuration below applies Enabled Enable the TACACS Authentication Server by checking this box IP Address Hostname The IP address or hostnam...

Page 243: ...DIUS server number Click to navigate to detailed statistics for this server IP Address The IP address and UDP port number in IP Address UDP Port notation of this server State The current state of the server This field takes one of the following values Disabled The server is disabled Not Ready The server is enabled but IP communication is not yet up and running Ready The server is enabled IP commun...

Page 244: ... not yet up and running Ready The server is enabled IP communication is up and running and the RADIUS module is ready to accept accounting attempts Dead X seconds left Accounting attempts were made to this server but it did not reply within the configured timeout The server has temporarily been disabled but will get re enabled when the dead time expires The number of seconds left before this occur...

Page 245: ... Client MIB Use the server select box to switch between the backend servers to show details for Object Description RADIUS authentication server packet counter There are seven receive and four transmit counters Direction Name RFC4668 Name Description Rx Access Accepts radiusAuthClientExtA ccessAccepts The number of RADIUS Access Accept packets valid or invalid received from the server Packet Counte...

Page 246: ...r attributes or unknown types are not included as malformed access responses Rx Bad Authenticators radiusAuthClientExtB adAuthenticators The number of RADIUS Access Response packets containing invalid authenticators or Message Authenticator attributes received from the server Rx Unknown Types radiusAuthClientExtU nknownTypes The number of RADIUS packets that were received from the server on the au...

Page 247: ... Reject Access Challenge timeout or retransmission Tx Timeouts radiusAuthClientExtT imeouts The number of authentication timeouts to the server After a timeout the client may retry to the same server send to a different server or give up A retry to the same server is counted as a retransmit as well as a timeout A send to a different server is counted as a Request as well as a timeout This section ...

Page 248: ...granularity of this measurement is 100 ms A value of 0 ms indicates that there hasn t been round trip communication with the server yet RADIUS Accounting Servers The statistics map closely to those specified in RFC4670 RADIUS Accounting Client MIB Use the server select box to switch between the backend servers to show details for Object Description RADIUS accounting server packet counter There are...

Page 249: ...r of RADIUS packets sent to the server This does not include retransmissions Tx Retransmissions radiusAccClientExt Retransmissions The number of RADIUS packets retransmitted to the RADIUS accounting server Tx Pending Requests radiusAccClientExt PendingRequests The number of RADIUS packets destined for the server that have not yet timed out or received a response This variable is incremented when a...

Page 250: ...igured timeout The server has temporarily been disabled but will get re enabled when the dead time expires The number of seconds left before this occurs is displayed in parentheses This state is only reachable when more than one server is enabled Other Info Round Trip Time radiusAccClientExtRo undTripTime The time interval measured in milliseconds between the most recent Response and the Request t...

Page 251: ... the default IP Address of the Managed Switch with 192 168 0 100 And also make sure the shared secret key is as same as the one you had set at the Managed Switch s 802 1x system configuration 12345678 at this case 1 Configure the IP Address of remote RADIUS server and secret key Figure 4 11 10 RADIUS Server Configuration screenshot 2 Add New RADIUS Cleint on the Windows 2003 server 251 ...

Page 252: ...ser s Manual of WGSD 10020 Series Figure 4 11 11 Windows Server add new RADIUS client setting 3 Assign the client IP address to the Managed switch Figure 4 11 12 Windows Server RADIUS Server setting 252 ...

Page 253: ...User s Manual of WGSD 10020 Series 4 The shared secret key should be as same as the key configured on the Managed Switch Figure 4 11 13 Windows Server RADIUS Server setting 253 ...

Page 254: ... 802 1X Port Configuration Figure 4 11 14 802 1x Port Configuration 6 Create user data The establishment of the user data needs to be created on the Radius Server PC For example the Radius Server founded on Win2003 Server and then Figure 4 11 15 Windows 2003 AD server setting path 254 ...

Page 255: ...nter Active Directory Users and Computers create legal user data the next right click a user what you created to enter properties and what to be noticed Figure 4 11 16 Add User Properties screen Figure 4 11 17 Add User Properties screen 255 ...

Page 256: ...ows 98SE ME 2000 an 802 1X client utility is needed The following procedures show how to configure 802 1X Authentication in Windows XP Please note that if you want to change the 802 1x authentication type of a wireless client i e switch to EAP TLS from EAP MD5 you must remove the current existing wireless network from your preferred connection first and add it in again Configure Sample EAP MD5 Aut...

Page 257: ...ss control using IEEE 802 1X to enable 802 1x authentication 6 Select MD 5 Challenge from the drop down list box for EAP type Figure 4 11 19 7 Click OK 8 When client has associated with the Managed Switch a user authentication notice appears in system tray Click on the notice to continue 257 ...

Page 258: ...WGSD 10020 Series Figure 4 11 20 Windows client popup login request message 9 Enter the user name password and the logon domain that your account belongs 10 Click OK to complete the validation process Figure 4 11 21 258 ...

Page 259: ...settings Limit Control allows for limiting the number of users on a given port A user is identified by a MAC address and VLAN ID If Limit Control is enabled on a port the limit specifies the maximum number of users on the port If this number is exceeded an action is taken The action can be one of the four different actions as described below The Limit Control module utilizes a lower layer module P...

Page 260: ...ks and corresponding actions are disabled Aging Enabled If checked secured MAC addresses are subject to aging as discussed under Aging Period Aging Period If Aging Enabled is checked then the aging period is controlled with this input If other modules are using the underlying port security for securing MAC addresses they may have other requirements to the aging period The underlying port security ...

Page 261: ...her Limit Control is enabled on this port Both this and the Global Mode must be set to Enabled for Limit Control to be in effect Notice that other modules may still use the underlying port security features without enabling Limit Control on a given port Limit The maximum number of MAC addresses that can be secured on this port This number cannot exceed 1024 If the limit is exceeded the correspondi...

Page 262: ... the limit is reached on this port This state can only be shown if Action is set to None or Trap Shutdown Indicates that the port is shut down by the Limit Control module This state can only be shown if Action is set to Shutdown or Trap Shutdown Reopen Button If a port is shutdown by this module you may reopen it by clicking this button which will only be enabled if this is the case For other meth...

Page 263: ...s the end IP address for the access management entry HTTP HTTPS Indicates the host can access the switch from HTTP HTTPS interface that the host IP address matched the entry SNMP Indicates the host can access the switch from SNMP interface that the host IP address matched the entry TELNET SSH Indicates the host can access the switch from TELNET SSH interface that the host IP address matched the en...

Page 264: ...enabled Allow Packets The allowed packets number from the interface under access management mode is enabled Discard Packets The discarded packets number from the interface under access management mode is enabled Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to refresh the page immediately Clear all statistics 4 12 4 HTTPs Configure HTTPS ...

Page 265: ...ules the user modules When a user module has enabled port security on a port the port is set up for software based learning In this mode frames from unknown MAC addresses are passed on to the port security module which in turn asks all user modules whether to allow this new MAC address to forward or block it For a MAC address to be set in the forwarding state all enabled user modules must unanimou...

Page 266: ...security module which in turn asks all user modules whether to allow this new MAC address to forward or block it For a MAC address to be set in the forwarding state all enabled user modules must unanimously agree on allowing the MAC address to forward If only one chooses to block it it will be blocked until that user module decides otherwise The status page is divided into two sections one with a ...

Page 267: ...Ready The Port Security service is in use by at least one user module and is awaiting frames from unknown MAC addresses to arrive Limit Reached The Port Security service is enabled by at least the Limit Control user module and that module has indicated that the limit is reached and no more MAC addresses should be taken in Shutdown The Port Security service is enabled by at least the Limit Control ...

Page 268: ...ress VLAN ID The MAC address and VLAN ID that is seen on this port If no MAC addresses are learned a single row stating No MAC addresses attached is displayed State Indicates whether the corresponding MAC address is blocked or forwarding In the blocked state it will not be allowed to transmit or receive traffic Time of Adding Shows the date and time when this MAC address was first seen on the port...

Page 269: ...e screenshot The page includes the following fields Object Description Snooping Mode Indicates the DHCP snooping mode operation Possible modes are Enabled Enable DHCP snooping mode operation When enable DHCP snooping mode operation the request DHCP messages will be forwarded to trusted ports and only allowed reply packets from trusted ports Disabled Disable DHCP snooping mode operation Port Mode I...

Page 270: ...ping Port Statistics screen page screenshot The page includes the following fields Object Description Rx and Tx Discover The number of discover option 53 with value 1 packets received and transmitted Rx and Tx Offer The number of offer option 53 with value 2 packets received and transmitted Rx and Tx Request The number of request option 53 with value 3 packets received and transmitted Rx and Tx De...

Page 271: ...ted Rx and Tx Lease Active The number of lease active option 53 with value 13 packets received and transmitted Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Click to refresh the page immediately Clears the counters for the selected port 4 12 10 IP Source Guard Configuration IP Source Guard is a secure feature used to restrict IP traffic on DHCP...

Page 272: ...e Guard is enabled on which ports Only when both Global Mode and Port Mode on a given port are enabled IP Source Guard is enabled on this given port Max Dynamic Clients Specify the maximum number of dynamic clients can be learned on given ports This value can be 0 1 2 and unlimited If the port mode is enabled and the value of max dynamic client is equal 0 it means only allow the IP packets forward...

Page 273: ...AN ID for the settings IP Address Allowed Source IP address MAC Address Allowed Source MAC address Buttons Click to add a new entry Click to save changes Click to undo any changes made locally and revert to previously saved values 4 12 12 ARP Inspection ARP Inspection is a secure feature Several types of attacks can be launched against a host or devices connected to Layer 2 networks by poisoning t...

Page 274: ...n Configuration Enable the Global ARP Inspection or disable the Global ARP Inspection Port Mode Configuration Specify ARP Inspection is enabled on which ports Only when both Global Mode and Port Mode on a given port are enabled ARP Inspection is enabled on this given port Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values 274 ...

Page 275: ...e includes the following fields Object Description Delete Check to delete the entry It will be deleted during the next save Port The logical port for the settings VLAN ID The VLAN ID for the settings MAC Address Allowed Source MAC address in ARP request packets IP Address Allowed Source IP address in ARP request packets Buttons Click to add a new entry Click to save changes Click to undo any chang...

Page 276: ...ames also contain a MAC address SMAC address which shows the MAC address of the equipment sending the frame The SMAC address is used by the switch to automatically update the MAC table with these dynamic MAC addresses Dynamic entries are removed from the MAC table if no frame with the corresponding SMAC address have been seen after a configurable age time 4 13 1 MAC Address Table Configuration The...

Page 277: ...is done automatically as soon as a frame with unknown SMAC is received Disable No learning is done Secure Only static MAC entries are learned all other frames are dropped Note Make sure that the link used for managing the switch is added to the Static Mac Table before changing to secure learning mode otherwise the management link is lost and can only be restored by using another non secure port or...

Page 278: ...l show the first 20 entries from the beginning of the MAC Table The first displayed will be the one with the lowest VLAN ID and the lowest MAC address found in the MAC Table The Start from MAC address and VLAN input fields allow the user to select the starting point in the MAC Table Clicking the Refresh button will update the displayed table starting from that or the closest next MAC Table match I...

Page 279: ... then by VLAN ID then by MAC address and then by IP address The Dynamic ARP Inspection Table screen in Figure 4 13 3 appears Figure 4 13 3 Dynamic ARP Inspection Table screenshot Navigating the ARP Inspection Table Each page shows up to 999 entries from the Dynamic ARP Inspection table default being 20 selected through the entries per page input field When first visited the web page will show the ...

Page 280: ...e table starting from the first entry in the MAC Table i e the entry with the lowest VLAN ID and MAC address Updates the table starting with the entry after the last entry currently displayed 4 13 4 Dynamic IP Source Guard Table Entries in the Dynamic IP Source Guard Table are shown on this page The Dynamic IP Source Guard Table is sorted first by port then by VLAN ID then by IP address and then b...

Page 281: ...ed the text No more entries is shown in the displayed table Use the button to start over The page includes the following fields Object Description Port The port number for which the status applies Click the port number to see the status for this particular port VLAN ID The VLAN ID of the entry MAC address The MAC address of the entry IP Address The IP address of the entry Buttons Auto refresh Chec...

Page 282: ...store and maintain information gathered about the neighboring network nodes it discovers Link Layer Discovery Protocol Media Endpoint Discovery LLDP MED is an extension of LLDP intended for managing endpoint devices such as Voice over IP phones and network switches The LLDP MED TLVs advertise information such as network policy power inventory and device location details LLDP and LLDP MED informati...

Page 283: ...ollowing rule Transmission Interval Holdtime Multiplier 65536 Therefore the default TTL is 4 30 120 seconds Tx Delay If some configuration is changed e g the IP address a new LLDP frame is transmitted but the time between the LLDP frames will always be at least the value of Tx Delay seconds Tx Delay cannot be larger than 1 4 of the Tx Interval value Valid values are restricted to 1 8192 seconds Th...

Page 284: ...rmation transmitted Sys Capa Optional TLV When checked the system capability is included in LLDP information transmitted The system capabilities identifies the primary function s of the system and whether or not these primary functions are enabled The information advertised by this TLV is described in IEEE 802 1AB Mgmt Addr Optional TLV When checked the management address is included in LLDP infor...

Page 285: ...e pieces of information which are specifically relevant to particular endpoint types for example only advertise the voice network policy to permitted voice capable devices both in order to conserve the limited LLDPU space and to reduce security and system integrity issues that can come with inappropriate knowledge of the network policy With this in mind LLDP MED defines an LLDP MED Fast Start inte...

Page 286: ... and as such does not apply to links between LAN infrastructure elements including between Network Connectivity Devices or to other types of links Coordinates Location Object Description Latitude Latitude SHOULD be normalized to within 0 90 degrees with a maximum of 4 digits It is possible to specify the direction to either North of the equator or South of the equator Longitude Longitude SHOULD be...

Page 287: ...mation Civic Address LCI Object Description Country code The two letter ISO 3166 country code in capital ASCII letters Example DK DE or US State National subdivisions state canton region province prefecture County County parish gun Japan district City City township shi Japan Example Copenhagen City district City division borough city district ward chou Japan Block Neighborhood Neighborhood block S...

Page 288: ...ergency calling Policies Network Policy Discovery enables the efficient discovery and diagnosis of mismatch issues with the VLAN configuration along with the associated Layer 2 and Layer 3 attributes which apply for a set of specific protocol applications on that port Improper network policy configurations are a very significant issue in VoIP environments that frequently result in voice quality de...

Page 289: ...ting interactive voice services These devices are typically deployed on a separate VLAN for ease of deployment and enhanced security by isolation from data applications Voice Signaling conditional for use in network topologies that require a different policy for the voice signaling than for the voice media This application type should not be advertised if all the same network policies apply as tho...

Page 290: ...nd the Layer 2 priority values are being used as well as the DSCP value The tagged format includes an additional field known as the tag header The tagged frame format also includes priority tagged frames as defined by IEEE 802 1Q 2003 VLAN ID VLAN identifier VID for the port as defined in IEEE 802 1Q 2003 L2 Priority L2 Priority is the Layer 2 priority to be used for the specified application type...

Page 291: ...r Information page screenshot The page includes the following fields Fast start repeat count Object Description Port The port on which the LLDP frame was received Device Type LLDP MED Devices are comprised of two primary Device Types Network Connectivity Devices and Endpoint Devices LLDP MED Network Connectivity Device Definition LLDP MED Network Connectivity Devices as defined in TIA 1057 provide...

Page 292: ...cation related servers or any device requiring basic services as defined in TIA 1057 Discovery services defined in this class include LAN configuration device location network policy power management and inventory management LLDP MED Media Endpoint Class II The LLDP MED Media Endpoint Class II definition is applicable to all endpoint products that have IP media capabilities however may or may not ...

Page 293: ...n network topologies that require a different policy for the voice signaling than for the voice media Guest Voice to support a separate limited feature set voice service for guest users and visitors with their own IP Telephony handsets and other similar appliances supporting interactive voice services Guest Voice Signaling for use in network topologies that require a different policy for the guest...

Page 294: ...port is used instead Priority Priority is the Layer 2 priority to be used for the specified application type One of eight priority levels 0 through 7 DSCP DSCP is the DSCP value to be used to provide Diffserv node behavior for the specified application type as defined in IETF RFC 2474 Contain one of 64 code point values 0 through 63 Buttons Click to refresh the page immediately Auto refresh Check ...

Page 295: ...ther 2 Repeater 3 Bridge 4 WLAN Access Point 5 Router 6 Telephone 7 DOCSIS cable device 8 Station only 9 Reserved When a capability is enabled the capability is followed by If the capability is disabled the capability is followed by Management Address Management Address is the neighbor unit s address that is used for higher layer entities to assist the discovery by the network management This coul...

Page 296: ... entries were last changed on It also shows the time when the last entry was last deleted or added It also shows the time elapsed since the last change was detected Total Neighbors Entries Added Shows the number of new entries added since switch reboot Total Neighbors Entries Deleted Shows the number of new entries deleted since switch reboot Total Neighbors Entries Dropped Shows the number of LLD...

Page 297: ...ue If a TLV is malformed it is counted and discarded TLVs Unrecognized The number of well formed TLVs but with an unknown type value Org Discarded The number of organizationally TLVs received Age Outs Each LLDP frame contains information about how long time the LLDP information is valid age out time If no new LLDP frame is received within the age out time the LLDP information is removed and the Ag...

Page 298: ...the transmitter with additional information that it may use for a more efficient allocation Systems that do not implement this option default the value to be the same as that of the Receive Tw_sys_tx Echo Tx Tw The link partner s Echo Tx Tw value The respective echo values shall be defined as the local link partners reflection echo of the remote link partners respective values When a local link pa...

Page 299: ... Note NOT the link parther The resolved value that is the actual tx wakeup time used for this link based on EEE information exchanged via LLDP Buttons Click to refresh the page immediately Auto refresh Check this box to enable an automatic refresh of the page at regular intervals 299 ...

Page 300: ...pper cables These functions have the ability to identify the cable length and operating conditions and to isolate a variety of common faults that can occur on the Cat5 twisted pair cabling There might be two statuses as follow If the link is established on the twisted pair interface in 1000Base T mode the Cable Diagnostics can run without disruption of the link or of any data transfer If the link ...

Page 301: ... the correct gateway IP address Buttons Click to transmit ICMP packets 4 15 2 IPv6 Ping This page allows you to issue ICMPv6 PING packets to troubleshoot IPv6 connectivity issues After you press Start 5 ICMPv6 packets are transmitted and the sequence number and roundtrip time are displayed upon reception of a reply The page refreshes automatically until responses to all packets are received or unt...

Page 302: ...kets to troubleshoot IP connectivity issues on special port After you press Test 5 ICMP packets are transmitted and the sequence number and roundtrip time are displayed upon reception of a reply The page refreshes automatically until responses to all packets are received or until a timeout occurs The ICMP Ping screen in Figure 4 15 3 appears Figure 4 15 3 Remote IP Ping Test page screenshot The pa...

Page 303: ...ew the cable diagnostics results in the cable status table Note that Cable Diagnostics is only accurate for cables of length 7 140 meters 10 and 100 Mbps ports will be linked down while running cable diagnostic Therefore running cable diagnastic on a 10 or 100 Mbps management port will cause the switch to stop responding until VeriPHY is complete The ports belong to the currently selected stack un...

Page 304: ...User s Manual of WGSD 10020 Series Cable Status Port Port number Pair The status of the cable pair Length The length in meters of the cable pair Buttons Click to run the diagnostics 304 ...

Page 305: ...stallation of cameras or WLAN AP more easily and efficiently Figure 4 16 1 Power over Ethernet Status 4 16 1 Power over Ethernet Powered Device 3 5 watts Voice over IP phones Enterprise can install POE VoIP Phone ATA and other Ethernet non Ethernet end devices to the central where UPS is installed for un interrupt power system and power control system 6 12 watts Wireless LAN Access Points Museum S...

Page 306: ...agement is implemented The PSU input power consumption is monitored by measuring voltage and current The input power consumption is equal to the system s aggregated power consumption The power management concept allows all ports to be active and activates additional ports as long as the aggregated power of the system is lower than the power level at which additional PDs cannot be connected When th...

Page 307: ...ual power consumption for all ports exceeds the amount of power that the power supply can deliver or if the actual power consumption for a given port exceeds the reserved power for that port The ports are shut down according to the ports priority If two ports have the same priority the port with the highest port number is shut down Priority mode In this mode the user assign the priority to the por...

Page 308: ...Value is 150 Temperature Threshold Allows setting over temperature protection threshold value It system temperature was over it then system lower total PoE power budget automatically PoE Usage Threshold Allows setting how much PoE power budget could be limited Buttons Click to save changes Click to undo any changes made locally and revert to previously saved values For WGSD 10020HP the total PoE p...

Page 309: ...Power over Ethernet Configuration screenshot The page includes the following fields Object Description PoE Mode There are three modes for PoE mode Enable enable PoE function Disable disable PoE function Schedule enable PoE function in schedule mode Schedule Indicates the schedule profile mode Possible porifles are Profile1 Profile2 Profile3 Profile4 AF AT Mode Allows user to select 802 3at or 802 ...

Page 310: ...mum power in watts that can be delived to a remote device Per port maximum value must less than 30 8 watts total ports values must less than the Power Reservation value Once power overload detected the port will auto shut down and keep on detection mode until PD s power consumption lower than the power limit value Power Allocation It can limit the port PoE supply watts Per port maximum value must ...

Page 311: ...isplay the current operating temperature of PoE chip unit Local Port This is the logical port number for this row PD Class Display the class of the PD attached to the port as established by the classification process Class 0 is the default for PDs The PD is powered based on PoE Class level if system working on Classification mode A PD shall return Class 0 to 4 in accordance with the maximum power ...

Page 312: ...h the page immediately 4 16 5 PoE Schedule This page allows the user to define PoE schedule The screen in Figure 4 16 5 appears Figure 4 16 5 PoE Schedule screenshot Please press Add New Rule button to start set PoE Schedule function You have to set PoE schedule to profile then go back to PoE Port Configuration and select Schedule mode from per port PoE Mode option then you can indicate which sche...

Page 313: ...t by PoE reboot schedule Please be noticed that if you want to PoE schedule and PoE reboot schedule work at the same time please use this function and don t use Reboot Only function This function offers administrator to reboot PoE device at indicate time if administrator has this kind of requirement Reboot Only Allows user to reboot PoE function by PoE reboot schedule Please be noticed that if adm...

Page 314: ...screen in Figure 4 16 6 appears Figure 4 16 6 LLDP PoE Neighbour screenshot Please be noticed that administrator has to enable LLDP port from LLDP configuration please refer to following example The screen in Figure 4 16 7 appears we enabled LLDP function from port1 ro port3 administrator has to plug a PD that supported PoE LLDP function and then administrator is going to see the PoE information o...

Page 315: ... IP address here for system making ping to the PoE device Please be noticed that the PD s IP address must be set to the same network segment with WGSD 10020HP Interval Time 10 300s This column allows user to set how long system should be issue a ping request to PD for detecting PD is alive or dead Interval time range is from 10 seconds to 300 seconds Retry Count 1 5 This column allows user to set ...

Page 316: ...standard so the PoE device on the market doesn t report reboots done information to WGSD 10020HP so user has to make sure how long the PD will be finished to boot and then set the time value to this column System is going to check the PD again according to the reboot time If ou can not make sure precisely booting time we suggest you to set it longer Buttons Click it to save changes Click it to res...

Page 317: ...This chapter describes how to use the Command Line Interface CLI Logon to the Console Once the terminal has connected to the device power on the Managed Switch the terminal will display that it is running testing procedures Then the following message asks the login username password The factory default password as following and the login screen in Figure 5 1 appears Username admin Password admin F...

Page 318: ... address 1 On WGSD 10020HP prompt enter ip configuration 2 The screen displays the current IP address Subnet Mask and Gateway As show in Figure 5 2 Figure 5 2 Show IP information screen Configure IP address 3 On WGSD 10020HP prompt enter the following command and press Enter As show in Figure 5 3 WGSD 10020HP ip setup 192 168 0 101 255 255 255 0 192 168 0 253 1 The previous command would apply the...

Page 319: ...lated parameter enter help anytime in console to get the help description You can change these settings if desired after you log on This management method is often preferred because you can remain connected and monitor the system during system reboots Also certain error messages are sent to the serial port regardless of the interface through which the associated action was initiated A Macintosh or...

Page 320: ... WGSD 10020 Series 5 2 Telnet Login The Managed Switch also supports telnet for remote management The switch asks for user name and password for remote login when using telnet please use admin for username password 320 ...

Page 321: ...ity Security management STP Spanning Tree Protocol Aggr Link Aggregation LACP Link Aggregation Control Protocol LLDP Link Layer Discovery Protocol LLDPMED Link Layer Discovery Protocol Media EEE Energy Efficient Ethernet PoE Power Over Ethernet Thermal Thermal Protection Led_power LED power reduction QoS Quality of Service Mirror Port mirroring Config Load Save of configuration via TFTP Firmware D...

Page 322: ...10020HP System configuration System Contact System Name WGSD 10020HP System Location Timezone Offset 0 MAC Address 00 30 4F 10 02 00 System Time 1970 01 01T00 10 55 00 00 System Uptime 00 10 55 Software Version Beta1109061425 Software Date 2011 09 06 14 27 40 0800 Previous Restart Cold WGSD 10020HP System Log Configuration Description Show system log configuration Syntax System Log Configuration E...

Page 323: ...ion Example To display system version WGSD 10020HP System version Version Beta1109061425 Build Date 2011 09 06 14 27 40 0800 WGSD 10020HP System Log Server Mode Description Show or set the system log server mode Syntax System Log Server Mode enable disable Parameters enable Enable system log server mode disable Disable system log server mode default Show system Log server mode Default Setting disa...

Page 324: ...its 0 9 minus sign In CLI no blank or space characters are permitted as part of a name The first character must be an alpha character and the first or last character must not be a minus sign clear Clear system name Example To set device title WGSD 10020HP System name WGSD 10020HP LAB System Contact Description Set or show the system contact Syntax System Contact contact clear Parameters contact Sy...

Page 325: ...s ip_addr_string Parameters ip_addr_string IP host address a b c d or a host name string Default Setting empty Example To set log server address WGSD 10020HP log server address 192 168 0 21 System Location Description Set or show the system location Syntax System Location location clear Parameters location System location string 1 255 Use clear or to clear the string In CLI no blank or space chara...

Page 326: ... log level It uses to determine what kind of message will send to syslog server Syntax System Log Level info warning error Parameters info Send informations warnings and errors warning Send warnings and errors error Send errors Default Setting info Example To set log level WGSD 10020HP log level warning System Timezone Description Set or show the system timezone offset Syntax System Timezone offse...

Page 327: ...escription Show or clear the system log Syntax System Log Lookup log_id all info warning error clear Parameters log_id System log ID or range default All entries all Show all levels default info Show informations warning Show warnings error Show errors clear Clear log Example To show system log WGSD 10020HP system log lookup Number of entries Info 2 Warning 0 Error 0 All 2 ID Level Time Message 32...

Page 328: ... any of the settings WGSD 10020HP system reboot System Restore Default Description Restore factory default configuration Syntax System Restore Default keep_ip Parameters keep_ip Keep IP configuration default Restore full configuration Example To restore default value but not reset IP address WGSD 10020HP system restore default keep_ip System Load Description Show current CPU load 100ms 1s and 10s ...

Page 329: ...User s Manual of WGSD 10020 Series Syntax System Load Example To show current CPU load WGSD 10020HP system load Load average 100ms 1s 10s 1 1 1 329 ...

Page 330: ...tion IP Configuration DHCP Client Disabled IP Address 192 168 0 101 IP Mask 255 255 255 0 IP Router 192 168 0 253 DNS Server 0 0 0 0 VLAN ID 1 DNS Proxy Disabled IPv6 AUTOCONFIG mode Disabled IPv6 Link Local Address fe80 6082 cdb9 19ab c0e2 IPv6 Address 192 168 0 100 IPv6 Prefix 96 IPv6 Router IP DHCP Description Set or show the DHCP client mode Syntax IP DHCP enable disable 330 ...

Page 331: ...ntax IP Setup ip_addr ip_mask ip_router vid Parameters ip_addr IP address a b c d default Show IP address ip_mask IP subnet mask a b c d default Show IP mask ip_router IP router a b c d default Show IP router vid VLAN ID 1 4095 default Show VLAN ID Default Setting IP Address 192 168 0 100 IP Mask 255 255 255 0 IP Router 192 168 0 1 DNS Server 0 0 0 0 VLAN ID 1 Example Set IP address WGSD 10020HP i...

Page 332: ...168 0 21 PING server 192 168 0 21 60 bytes from 192 168 0 21 icmp_seq 0 time 0ms 60 bytes from 192 168 0 21 icmp_seq 1 time 0ms 60 bytes from 192 168 0 21 icmp_seq 2 time 0ms 60 bytes from 192 168 0 21 icmp_seq 3 time 10ms 60 bytes from 192 168 0 21 icmp_seq 4 time 0ms Sent 5 packets received 5 OK 0 bad IP DNS Description Set or show the DNS server address Syntax IP DNS ip_addr Parameters ip_addr ...

Page 333: ...ers enable Enable DNS Proxy disable Disable DNS Proxy Default Setting disable Example Enable DNS proxy function WGSD 10020HP ip dns_proxy enable IPv6 AUTOCINFIG Description Set or show the IPv6 AUTOCONFIG mode Syntax IP IPv6 AUTOCONFIG enable disable Parameters enable Enable IPv6 AUTOCONFIG mode disable Disable IPv6 AUTOCONFIG mode Default Setting disable Example 333 ...

Page 334: ... only appear once It also used a following legally IPv4 address For example 192 1 2 34 ipv6_prefix IPv6 subnet mask default Show IPv6 prefix ipv6_router IPv6 router default Show IPv6 router IPv6 address is in 128 bit records represented as eight fields of up to four hexadecimal digits with a colon separates each field For example fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be u...

Page 335: ...thand way of representing multiple 16 bit groups of contiguous zeros but it can only appear once It also used a following legally IPv4 address For example 192 1 2 34 ping_length Ping data length 8 1400 excluding MAC IP and ICMP headers Example WGSD 10020HP ip ipv6 ping 2001 0002 PING6 server 2001 2 68 bytes from 2001 2 icmp_seq 0 time 0ms 68 bytes from 2001 2 icmp_seq 1 time 0ms 68 bytes from 2001...

Page 336: ...ool ntp org 5 oceania pool ntp org IP NTP Mode Description Set or show the NTP mode Syntax IP NTP Mode enable disable Parameters enable Enable NTP mode disable Disable NTP mode default Show NTP mode Default Setting disable Example Enable NTP mode WGSD 10020HP ip ntp mode enable IP NTP Server Add Description Add NTP server entry Syntax IP NTP Server Add server_index ip_addr_string 336 ...

Page 337: ...er address IPv6 address is in 128 bit records represented as eight fields of up to four hexadecimal digits with a colon separates each field For example fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be used as a shorthand way of representing multiple 16 bit groups of contiguous zeros but it can only appear once It also used a following legally IPv4 address For example 192 1 2 34 ...

Page 338: ...User s Manual of WGSD 10020 Series server_index The server index 1 5 Example To delete NTP server WGSD 10020HP ip ntp server delete 1 338 ...

Page 339: ...ll ports Example Display port1 4 status WGSD 10020HP port configuration 1 4 Port Configuration Port State Mode Flow Control MaxFrame Power Excessive Link 1 Enabled Auto Disabled 9600 Disabled Discard Down 2 Enabled Auto Disabled 9600 Disabled Discard Down 3 Enabled Auto Disabled 9600 Disabled Discard Down 4 Enabled Auto Disabled 9600 Disabled Discard Down Port Mode Description Set or show the port...

Page 340: ... and current mode Default Setting Auto Example Set 10Mbps half duplex speed for port1 WGSD 10020HP port mode 1 10hdx Port Flow Control Description Set or show the port flow control mode Syntax Port Flow Control port_list enable disable Parameters port_list Port list or all default All ports enable Enable flow control disable Disable flow control default Show flow control mode Default Setting Disab...

Page 341: ...t Show administrative mode Default Setting Enable Example Disable port1 WGSD 10020HP port state 1 disable Port Maximum Frame Description Set or show the port maximum frame size Syntax Port MaxFrame port_list max_frame Parameters port_list Port list or all default All ports max_frame Port maximum frame size 1518 9600 default Show maximum frame size Default Setting 9600 Example Set 2048 frame size f...

Page 342: ...ble ActiPHY power control dynamic Enable Dynamic power control Default Setting disable Example Disable port power function for port1 4 WGSD 10020HP port power 1 4 enable Port Excessive Description Set or show the port excessive collision mode Syntax Port Excessive port_list discard restart Parameters port_list Port list or all default All ports discard Discard frame after 16 collisions restart Res...

Page 343: ...ollowing values clear Clear port statistics packets Show packet statistics bytes Show byte statistics errors Show error statistics discards Show discard statistics filtered Show filtered statistics 0 7 Show priority statistics default Show all port statistics up Show ports which are up down Show ports which are down default Show all ports Port VeriPHY Description Run cable diagnostics Syntax Port ...

Page 344: ...formation Syntax Port SFP port_list Parameters port_list Port list or all default All ports Example Show SFP information for port21 24 WGSD 10020HP port sfp Port Type Speed Wave Length nm Distance m 9 1000Base LX 1000 Base 1310 10000 10 1000Base LX 1000 Base 1310 10000 344 ...

Page 345: ...ion Syntax MAC Configuration port_list Parameters port_list Port list or all default All ports Example Show Mac address state WGSD 10020HP mac configuration MAC Configuration MAC Address 00 30 4f 24 04 d1 MAC Age Time 300 Port Learning 1 Auto 2 Auto 3 Auto 4 Auto 5 Auto 6 Auto 7 Auto 8 Auto 9 Auto 10 Auto MAC Add Description 345 ...

Page 346: ...Mac address 00 30 4F 01 01 02 in port1 and vid1 WGSD 10020HP mac add 00 30 4f 01 01 02 1 1 MAC Delete Description Delete MAC address entry Syntax MAC Delete mac_addr vid Parameters mac_addr MAC address xx xx xx xx xx xx vid VLAN ID 1 4095 default 1 Example Delete Mac address 00 30 4F 01 01 02 in vid1 WGSD 10020HP mac delete 00 30 4f 01 01 02 1 MAC Lookup Description Lookup MAC address entry Syntax...

Page 347: ...e Time Description Set or show the MAC address age timer Syntax MAC Agetime age_time Parameters age_time MAC address age time 0 10 1000000 0 disable default Show age time Default Setting 300 Example Set agetime value in 30 WGSD 10020HP mac agetime 30 MAC Learning Description Set or show the port learn mode Syntax MAC Learning port_list auto disable secure Parameters port_list Port list or all defa...

Page 348: ...Dump mac_max mac_addr vid Parameters mac_max Maximum number of MAC addresses 1 8192 default Show all addresses mac_addr First MAC address xx xx xx xx xx xx default MAC address zero vid First VLAN ID 1 4095 default 1 Example Show all of MAC table WGSD 10020HP mac dump Type VID MAC Address Ports Static 1 00 30 00 33 22 55 1 Static 1 00 30 4f 24 04 d1 None CPU Static 1 33 33 ff 24 04 d1 None CPU Stat...

Page 349: ...ics port_list Parameters port_list Port list or all default All ports Example Set all of MAC statistics WGSD 10020HP mac statistics Port Dynamic Addresses 1 0 2 0 3 0 4 0 5 0 6 0 7 0 8 0 9 0 10 0 Total Dynamic Addresses 0 Total Static Addresses 4 MAC Flush Description Flush all learned entries Syntax MAC Flush 349 ...

Page 350: ...st Port list or all default All ports Example Show VLAN status of port1 WGSD 10020HP vlan configuration 1 VLAN Configuration Mode IEEE 802 1Q Port PVID IngrFilter FrameType LinkType Q in Q Mode Eth type 1 1 Disabled All UnTag Disable N A VID VLAN Name Ports 1 default 1 10 VID VLAN Name Ports VLAN forbidden table is empty VLAV PVID Description Set or show the port VLAN ID 350 ...

Page 351: ...PVID2 for port10 WGSD 10020HP vlan pvid 10 2 VLAN Frame Type Description Set or show the port VLAN frame type Syntax VLAN FrameType port_list all tagged Parameters port_list Port list or all default All ports all Allow tagged and untagged frames tagged Allow tagged frames only default Show accepted frame types Default Setting All Example Set port10 that allow tagged frames only WGSD 10020HP vlan f...

Page 352: ...ess filtering disable Disable VLAN ingress filtering default Show VLAN ingress filtering Default Setting Disable Example Enable VLAN ingress filtering for port10 WGSD 10020HP vlan ingressfilter 10 enable VLAN Mode Description Set or show the VLAN Mode Syntax VLAN Mode portbased dot1q Parameters portbased Port Based VLAN Mode dot1q 802 1Q VLAN Mode default Show VLAN Mode Default Setting IEEE 802 1Q...

Page 353: ...e Tagged tagged VLAN Link Type Untagged default Show VLAN link type Default Setting Un tagged Example Enable tagged frame for port2 WGSD 10020HP vlan linktype 2 tagged VLAN Q in Q Mode Description Set or show the port Q in Q mode Syntax VLAN QinQ port_list disable man customer Parameters port_list Port list or all default All ports disable Disable Q in Q VLAN Mode man Q in Q MAN Port Mode customer...

Page 354: ...l default All ports man Set out layer VLAN tag ether type MAN dot1q Set out layer VLAN tag ether type 802 1Q default Show VLAN out layer VLAN tag ether type Default Setting N A Example Set out layer VLAN tag Ethernet type for port 10 in man Ethernet type WGSD 10020HP vlan ethtype 10 man VLAN Add Description Add or modify VLAN entry Syntax VLAN Add vid name port_list Parameters vid name VLAN ID 1 4...

Page 355: ...Syntax VLAN Forbidden Add vid name port_list Parameters vid name VLAN ID 1 4095 or VLAN Name port_list Port list or all default All ports Example Frobidden add port1 to port4 in VLAN10 WGSD 10020HP vlan forbidden add 10 1 4 VLAN Delete Description Delete VLAN entry Syntax VLAN Delete vid name Parameters vid name VLAN ID 1 4095 or VLAN Name Example Delete VLAN10 WGSD 10020HP vlan delete 10 355 ...

Page 356: ...AN Forbidden Lookup Description Lookup VLAN Forbidden port entry Syntax VLAN Forbidden Lookup vid name name Parameters vid VLAN ID 1 4095 default Show all VLANs name VLAN name string name VLAN name Maximum of 32 characters VLAN Name can only contain alphabets or numbers VLAN name should contain atleast one alphabet VLAN Lookup Description Lookup VLAN entry Syntax VLAN Lookup vid name name combined...

Page 357: ...S mvr Shows the VLANs configured by MVR voice_vlan Shows the VLANs configured by Voice VLAN all Shows all VLANs configuration default combined VLAN Users configuration Example Show VLAN status WGSD 10020HP vlan lookup VID VLAN Name Ports 1 default 1 10 VLAN Name Add Description Add VLAN Name to a VLAN ID Mapping Syntax VLAN Name Add name vid Parameters name VLAN name Maximum of 32 characters VLAN ...

Page 358: ...umbers VLAN name should contain atleast one alphabet Example Delete VLAN name WGSD 10020HP vlan name delete test VLAN Name Lookup Description Show VLAN Name table Syntax VLAN Name Lookup name Parameters name VLAN name Maximum of 32 characters VLAN Name can only contain alphabets or numbers VLAN name should contain atleast one alphabet Example To show VLAN Name table WGSD 10020HP vlan name lookup V...

Page 359: ...ation nas NAS port configuration mvr MVR port configuration voice_vlan Voice VLAN port configuration mstp MSTP port configuration all All VLAN Users configuration default combined VLAN Users configuration Default Setting Promiscous Example Show VLAN configuration of port10 WGSD 10020HP status 1 Port VLAN User PortType PVID Frame Type Ing Filter Tx Tag UVID Conflicts 1 Static Unaware 1 All Disabled...

Page 360: ...ntax PVLAN Configuration port_list Parameters port_list Port list or all default All ports Example Show private VLAN configuration WGSD 10020HP pvlan configuration Private VLAN Configuration Port Isolation 1 Disabled 2 Disabled 3 Disabled 4 Disabled 5 Disabled 6 Disabled 7 Disabled 8 Disabled 9 Disabled 10 Disabled PVLAN ID Ports 1 1 10 360 ...

Page 361: ...mber range port_list Port list or all default All ports Example Add port1 to port4 in PVLAN10 WGSD 10020HP pvlan add 10 1 4 PVLAN Delete Description Delete Private VLAN entry Syntax PVLAN Delete pvlan_id Parameters pvlan_id Private VLAN ID The allowed range for a Private VLAN ID is the same as the switch port number range Example Delete PVLAN10 WGSD 10020HP pvlan delete 10 PVLAN Lookup Description...

Page 362: ...p PVLAN WGSD 10020HP pvlan lookup PVLAN ID Ports 1 1 10 PVLAN Isolate Description Set or show the port isolation mode Syntax PVLAN Isolate port_list enable disable Parameters port_list Port list or all default All ports enable Enable port isolation disable Disable port isolation default Show port isolation port list Default Setting disable Example Enable isolate for port10 WGSD 10020HP pvlan isola...

Page 363: ...tion User Name Privilege Level admin 15 Security Switch User Add Description Add or modify users entry Syntax Security Switch Users Add user_name password privilege_level Parameters user_name A string identifying the user name that this entry should belong to The allowed string length is 1 32 The valid user name is a combination of letters numbers and underscores password The password for this use...

Page 364: ... entry should belong to The allowed string length is 1 32 The valid user name is a combination of letters numbers and underscores Example Delete test account WGSD 10020HP security switch users delete user Security Switch Privilege Level Configuration Description Show privilege configuration Syntax Security Switch Privilege Level Configuration Example Show privilege level WGSD 10020HP security swit...

Page 365: ... 15 Mirroring 5 10 5 10 Multicast 5 10 5 10 PoE 5 10 5 10 Port_Security 5 10 5 10 Ports 5 10 1 10 Private_VLANs 5 10 5 10 Protocol_based_VLAN 5 10 5 10 QoS 5 10 5 10 SNMP 5 10 5 10 Security 5 10 5 10 Spanning_Tree 5 10 5 10 System 5 10 1 10 UPnP 5 10 5 10 VLANs 5 10 5 10 Voice_VLAN 5 10 5 10 Security Switch Privilege Level Group Description Configure a privilege level group Syntax Security Switch ...

Page 366: ...f MVR group WGSD 10020HP security switch privilege level group mvr 15 15 15 15 Security Switch Privilege Level Current Description Show the current privilege level Syntax Security Switch Privilege Level Current Default Setting 15 Security Switch Auth Configuration Description Show Auth configuration Syntax Security Switch Auth Configuration Example Show authentication configuration WGSD 10020HP se...

Page 367: ... ssh web Settings for web default Set or show the specific client authentication method none Authentication disabled local Use local authentication radius Use remote RADIUS authentication tacacs Use remote TACACS authentication default Show client authentication method enable Enable local authentication if remote authentication fails disable Disable local authentication if remote authentication fa...

Page 368: ...guration WGSD 10020HP security switch ssh configuration SSH Configuration SSH Mode Enable Security Switch SSH Mode Description Set or show the SSH mode Syntax Security Switch SSH Mode enable disable Parameters enable Enable SSH disable Disable SSH default Show SSH mode Default Setting enable Example Enable SSH function WGSD 10020HP security switch ssh mode enable 368 ...

Page 369: ...security switch https configuration HTTPS Configuration HTTPS Mode Enable HTTPS Redirect Mode Disabled Security Switch HTTPs Mode Description Set or show the HTTPS mode Syntax Security Switch HTTPS Mode enable disable Parameters enable Enable HTTPs disable Disable HTTPs default Show HTTPs mode Default Setting enable Example Enable HTTPs function WGSD 10020HP security switch https mode enable 369 ...

Page 370: ...direct disable Disable HTTPs redirect default Show HTTPs redirect mode Default Setting disable Example Enable HTTPs redirect function WGSD 10020HP security switch https redirect enable Security Switch Access Configuration Description Show access management configuration Syntax Security Switch Access Configuration Example Show access management configuration WGSD 10020HP security switch access conf...

Page 371: ...t disable Disable access management default Show access management mode Default Setting disable Example Enable access management function WGSD 10020HP security switch access mode enable Security Switch Access Configuration Description Show access management configuration Syntax Security Switch Access Configuration Example Show access management configuration WGSD 10020HP security switch access con...

Page 372: ...ss Mode enable disable Parameters enable Enable access management disable Disable access management default Show access management mode Default Setting disable Example Enable switch access mode WGSD 10020HP security switch access mode enable Security Switch Access Add Description Add access management entry default Add all supported protocols Syntax Security Switch Access Add access_id start_ip_ad...

Page 373: ...elds of up to four hexadecimal digits with a colon separates each field For example fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be used as a shorthand way of representing multiple 16 bit groups of contiguous zeros but it can only appear once It also used a following legally IPv4 address For example 192 1 2 34 end_ipv6_addr End IPv6 address IPv6 address is in 128 bit records rep...

Page 374: ...rs access_id entry index 1 16 Example Delete access management ID 1 WGSD 10020HP security switch access delete 1 Security Switch Access Lookup Description Lookup access management entry Syntax Security Switch Access Lookup access_id Parameters access_id entry index 1 16 Example Lookup access management entry WGSD 10020HP security switch access lookup 1 Security Switch Access Clear Description Clea...

Page 375: ... Statistics clear Parameters clear Clear access management statistics Example Show access management statistics WGSD 10020HP security switch access statistics Access Management Statistics HTTP Receive 0 Allow 0 Discard 0 HTTPS Receive 0 Allow 0 Discard 0 SNMP Receive 0 Allow 0 Discard 0 TELNET Receive 0 Allow 0 Discard 0 SSH Receive 0 Allow 0 Discard 0 Security Switch SNMP Configuration Descriptio...

Page 376: ...le SNMP default Show SNMP mode Default Setting enable Example Disable SNMP mode WGSD 10020HP security switch snmp mode disable Security Switch SNMP Version Description Set or show the SNMP protocol version Syntax Security Switch SNMP Version 1 2c 3 Parameters 1 SNMP version 1 2c SNMP version 2c 3 SNMP version 3 default Show SNMP version Default Setting 2c Example Set SNMP in version 3 376 ...

Page 377: ...se clear or to clear the string default Show SNMP read community Default Setting public Example Set SNMP read community private WGSD 10020HP security switch snmp read community private Security Switch SNMP Write Community Description Set or show the community string for SNMP write access Syntax Security Switch SNMP Write Community community Parameters community Community string Use clear or to cle...

Page 378: ...ode enable disable Parameters enable Enable SNMP traps disable Disable SNMP traps default Show SNMP trap mode Default Setting disable Example Enable SNMP trap mode WGSD 10020HP security switch snmp trap mode enable Security Switch SNMP Trap Version Description Set or show the SNMP trap protocol version Syntax Security Switch SNMP Trap Version 1 2c 3 Parameters 1 SNMP version 1 2c SNMP version 2c 3...

Page 379: ...unity community Parameters community Community string Use clear or to clear the string default Show SNMP trap community Default Setting public Example Set private value for SNMP trap community WGSD 10020HP security switch snmp trap community private Security Switch SNMP Trap Destination Description Set or Show the SNMP trap destination address Syntax Security Switch SNMP Trap Destination ip_addr_s...

Page 380: ... field For example fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be used as a shorthand way of representing multiple 16 bit groups of contiguous zeros but it can only appear once It also used a following legally IPv4 address For example 192 1 2 34 Example Set SNMP trap IPv6 destination address for 2001 0001 WGSD 10020HP security switch snmp trap ipv6 destination 2001 0001 Securit...

Page 381: ...tch SNMP Trap Link up enable disable Parameters enable Enable SNMP trap link up and link down disable Disable SNMP trap link up and link down default Show SNMP trap link up and link down mode Default Setting enable Example Disable SNMP trap link up WGSD 10020HP security switch snmp trap link up disable Security Switch SNMP Trap Inform Mode Description Set or show the SNMP trap inform mode Syntax S...

Page 382: ...show the SNMP trap inform timeout usecs Syntax Security Switch SNMP Trap Inform Timeout timeout Parameters timeout SNMP trap inform timeout 0 2147 seconds default Show SNMP trap inform timeout Default Setting 1 Example Set SNMP trap inform timeout in 20sec WGSD 10020HP security switch snmp trap inform timeout 20 Security Switch SNMP Trap Inform Retry Times Description Set or show the SNMP trap inf...

Page 383: ...Show SNMP trap security engine ID probe mode Syntax Security Switch SNMP Trap Probe Security Engine ID enable disable Parameters enable Enable SNMP trap security engine ID probe disable Disable SNMP trap security engine ID probe default Show SNMP trap security engine ID probe mode Default Setting enable Example Disable SNMP trap probe security engine ID WGSD 10020HP security switch snmp trap probe...

Page 384: ...me Syntax Security Switch SNMP Trap Security Name security_name Parameters security_name A string representing the security name for a principal default Show SNMP trap security name The allowed string length is 1 32 and the allowed content is ASCII characters from 33 to 126 Example Set the SNMP trap security name WGSD 10020HP security switch snmp trap security name 12345678 Security Switch SNMP En...

Page 385: ...mmunity Syntax Security Switch SNMP Community Add community ip_addr ip_mask Parameters community Community string ip_addr IP address a b c d default Show IP address ip_mask IP subnet mask a b c d default Show IP mask Example Add SNMPv3 community entry WGSD 10020HP security switch snmp community add public 192 168 0 20 255 255 255 0 Security Switch SNMP Community Delete Description Delete SNMPv3 co...

Page 386: ... 192 168 0 20 255 255 255 0 2 private 0 0 0 0 0 0 0 0 Number of entries 2 Security Switch SNMP User Add Description Add SNMPv3 user entry The entry index key are engineid and user_name and it doesn t allow modify Syntax Security Switch SNMP User Add engineid user_name MD5 SHA auth_password DES priv_password Parameters engineid Engine ID the format may not be all zeros or all ff H and is restricted...

Page 387: ...ring length is 8 32 and the allowed content is ASCII characters from 33 to 126 priv_password A string identifying the privacy pass phrase The allowed string length is 8 40 and the allowed content is ASCII characters from 33 to 126 Example Add SNMPv3 user entry WGSD 10020HP security switch snmp user add 800007e5017f000003 admin_snmpv3 md5 12345678 des abcdefgh Security Switch SNMP User Delete Descr...

Page 388: ... identifying the privacy pass phrase The allowed string length is 8 40 and the allowed content is ASCII characters from 33 to 126 Example Delete SNMPv3 user entry WGSD 10020HP security switch snmp user changekey 800007e5017f000003 admin_snmpv3 87654321 12345678 Security Switch SNMP User Lookup Description Lookup SNMPv3 user entry Syntax Security Switch SNMP User Lookup index Parameters index entry...

Page 389: ...1 32 and the allowed content is ASCII characters from 33 to 126 group_name A string identifying the group name that this entry should belong to The allowed string length is 1 32 and the allowed content is ASCII characters from 33 to 126 Example Add SNMPv3 group entry WGSD 10020HP security switch snmp group add usm admin_snmpv3 group_snmpv3 Security Switch SNMP Group Delete Description Delete SNMPv...

Page 390: ...ty Switch SNMP View Add Description Add or modify SNMPv3 view entry The entry index key are view_name and oid_subtree Syntax Security Switch SNMP View Add view_name included excluded oid_subtree Parameters view_name A string identifying the view name that this entry should belong to The allowed string length is 1 32 and the allowed content is ASCII characters from 33 to 126 included An optional fl...

Page 391: ...ntry index 1 64 Example Delete SNMPv3 view entry WGSD 10020HP security switch snmp view delete 3 Security Switch SNMP View Lookup Description Lookup SNMPv3 view entry Syntax Security Switch SNMP View Lookup index Parameters index entry index 1 64 Example Lookup SNMPv3 view entry WGSD 10020HP security switch snmp view lookup Idx View Name View Type OID Subtree 1 default_view included 1 2 snmpv3_viw...

Page 392: ...ty_level noAuthNoPriv None authentication and none privacy AuthNoPriv Authentication and none privacy AuthPriv Authentication and privacy read_view_name The name of the MIB view defining the MIB objects for which this request may request the current values The name of None is reserved The allowed string length is 1 32 and the allowed content is ASCII characters from 33 to 126 write_view_name The n...

Page 393: ...NMP Access Lookup Description Lookup SNMPv3 access entry Syntax Security Switch SNMP Access Lookup index Parameters index entry index 1 64 Example Lookup SNMPv3 access entry WGSD 10020HP security switch snmp access lookup Idx Group Name Model Level 1 default_ro_group any NoAuth NoPriv 2 default_rw_group any NoAuth NoPriv Number of entries 2 Security Network Psec Switch Description Show Port Securi...

Page 394: ...sers L Limit Control 8 802 1X D DHCP Snooping V Voice VLAN Port Users State MAC Cnt 1 No users 0 2 No users 0 3 No users 0 4 No users 0 5 No users 0 6 No users 0 7 No users 0 8 No users 0 9 No users 0 10 No users 0 Security Network Psec Port Description Show MAC Addresses learned by Port Security Syntax Security Network Psec Port port_list Parameters port_list Port list or all default All ports Ex...

Page 395: ...how Limit Control configuration Syntax Security Network Limit Configuration port_list Parameters port_list Port list or all default All ports Example Show Limit Control configuration WGSD 10020HP security network limit configuration Port Security Limit Control Configuration Mode Disabled Aging Disabled Age Period 3600 Port Mode Limit Action 1 Disabled 4 None 2 Disabled 4 None 3 Disabled 4 None 4 D...

Page 396: ...imit Mode enable disable Parameters enable Globally enable port security disable Globally disable port security default Show current global enabledness of port security limit control Default Setting disable Example Enable the limit mode WGSD 10020HP security network limit mode enable Security Network Limit Aging Description Set or show aging enabledness Syntax Security Network Limit Aging enable d...

Page 397: ...earned MAC addresses Syntax Security Network Limit Agetime age_time Parameters age_time Time in seconds between checks for activity on a MAC address 10 10000000 seconds default Show current age time Default Setting 3600 Example Set age time in 100sec WGSD 10020HP security network limit agetime 100 Security Network Limit Port Description Set or show per port enabledness Syntax Security Network Limi...

Page 398: ...Security Network Limit Limit Description Set or show the max number of MAC addresses that can be learned on this set of ports Syntax Security Network Limit Limit port_list limit Parameters port_list Port list or all default All ports limit Max number of MAC addresses on this port default Show current limit Default Setting 4 Example Set limit in 5 WGSD 10020HP security network limit limit 1 10 5 Se...

Page 399: ...rap shut Shutdown the port trap_shut Send an SNMP trap and shutdown the port default Show current action Default Setting none Example Set trap mode for limit action for port 1 WGSD 10020HP security network limit action 1 trap Security Network Limit Reopen Description Reopen one or more ports whose limit is exceeded and shut down Syntax Security Network Limit Reopen port_list Parameters port_list P...

Page 400: ...10020HP security network nas configuration 1 802 1X Configuration Mode Disabled Reauth Disabled Reauth Period 3600 EAPOL Timeout 30 Age Period 300 Hold Time 10 RADIUS QoS Disabled RADIUS VLAN Disabled Guest VLAN Disabled Guest VLAN ID 1 Max Reauth Count 2 Allow Guest VLAN if EAPOL Frame Seen Disabled Port Admin State Port State Last Source Last ID 1 Force Authorized Globally Disabled Security Netw...

Page 401: ...Description Set or show the port security state Syntax Security Network NAS State port_list auto authorized unauthorized single multi macbased Parameters port_list Port list or all default All ports auto Port based 802 1X Authentication authorized Port access is allowed unauthorized Port access is not allowed single Single Host 802 1X Authentication multi Multiple Host 802 1X Authentication macbas...

Page 402: ...n disable Disable reauthentication default Show current reauthentication mode Default Setting disable Example Enable reauthentication function WGSD 10020HP security network nas reauthentication enable Security Network NAS ReauthPeriod Description Set or show either global enabledness use the global keyword or per port enabledness of RADIUS assigned VLAN Syntax Security Network NAS RADIUS_VLAN glob...

Page 403: ...ity network nas radius_vlan enable Security Network NAS EapolTimeout Description Set or show the time between EAPOL retransmissions Syntax Security Network NAS EapolTimeout eapol_timeout Parameters eapol_timeout Time between EAPOL retransmissions 1 65535 seconds default Show current EAPOL retransmission timeout Default Setting 30 Example Set the time between EAPOL retransmissions for 100sec WGSD 1...

Page 404: ...Description Time in seconds before a MAC address that failed authentication gets a new authentication chance Syntax Security Network NAS Holdtime hold_time Parameters hold_time Hold time before MAC addresses that failed authentication expire default Show current hold time Default Setting 10 Example Set NAS hold time in 100sec WGSD 10020HP security network nas holdtime 100 Security Network NAS RADI...

Page 405: ...y network nas radius_qos enable Security Network NAS RADIUS_VLAN Description Set or show either global enabledness use the global keyword or per port enabledness of RADIUS assigned VLAN Syntax Security Network NAS RADIUS_VLAN global port_list enable disable Parameters global Select the global RADIUS assigned VLAN setting port_list Select the per port RADIUS assigned VLAN setting default Show curre...

Page 406: ... Guest VLAN ID used when entering the Guest VLAN Use the global keyword to change it default Show current Guest VLAN ID reauth_max The value can only be set if you use the global keyword in the beginning of the command The number of times a Request Identity EAPOL frame is sent without reasponse before considering entering the Guest VLAN default Show current Maximum Reauth Count value allow_if_eapo...

Page 407: ...Show or clear 802 1X statistics Syntax Security Network NAS Statistics port_list clear eapol radius Parameters port_list Port list or all default All ports clear Clear statistics eapol Show EAPOL statistics radius Show Backend Server statistics default Show all statistics Example Show 802 1X statistics in port 1 WGSD 10020HP security network nas statistics 1 Port 1 EAPOL Statistics Rx Total 0 Tx T...

Page 408: ...t or all default All ports Security Network ACL Action Description Set or show the ACL port default action Syntax Security Network ACL Action port_list permit deny rate_limiter port_copy logging shutdown Parameters port_list Port list or all default All ports permit Permit forwarding default deny Deny forwarding rate_limiter Rate limiter number 1 15 or disable port_copy Port number for copy of fra...

Page 409: ... or show the ACL port policy Syntax Security Network ACL Policy port_list policy Parameters port_list Port list or all default All ports policy Policy number 1 8 Default Setting 1 Example Set ACL policy 2 for port 1 WGSD 10020HP security network acl policy 1 2 Security Network ACL Rate Description Set or show the ACL rate limiter Syntax Security Network ACL Rate rate_limiter_list rate_unit rate Pa...

Page 410: ... in the list If the Switch keyword is used the rule applies to all ports If the Port keyword is used the rule applies to the specified port only If the Policy keyword is used the rule applies to all ports configured with the specified policy The default is that the rule applies to all ports Syntax Security Network ACL Add ace_id ace_id_next switch port port_list policy policy tagged vid tag_prio d...

Page 411: ...r arp_flags ARP flags request smac tmac len ip ether 0 1 any ip IP keyword protocol IP protocol number 0 255 or any ip_flags IP flags ttl options fragment 0 1 any icmp ICMP keyword icmp_type ICMP type number 0 255 or any icmp_code ICMP code number 0 255 or any udp UDP keyword sport Source UDP TCP port range 0 65535 or any dport Destination UDP TCP port range 0 65535 or any tcp TCP keyword tcp_flag...

Page 412: ...Security Network ACL Lookup Description Show ACE default All ACEs Syntax Security Network ACL Lookup ace_id Parameters ace_id ACE ID 1 256 Example Lookup ACE 1 WGSD 10020HP security network acl lookup 1 Security Network ACL Clear Description Clear all ACL counters Syntax Security Network ACL Clear Example Clear all ACL counters WGSD 10020HP security network acl clear 412 ...

Page 413: ...he status by UPnP arp_inspection Shows the status by ARP Inspection ip_source_guard Shows the status by IP Source Guard conflicts Shows all conflict status default Shows the combined status Example Show ACL status WGSD 10020HP security network acl status Security Network DHCP Relay Configuration Description Show DHCP relay configuration Syntax Security Network DHCP Relay Configuration Example Show...

Page 414: ...t forward and to transfer DHCP messages between the clients and the server when they are not on the same subnet domain And the DHCP broadcast message won t flood for security considered disable Disable DHCP relaly mode default Show flow DHCP relaly mode Default Setting disable Example Enable DHCP relay mode WGSD 10020HP security network dhcp relay mode enable Security Network DHCP Relay Server Des...

Page 415: ...t only works under DHCP relay operation mode enabled Syntax Security Network DHCP Relay Information Mode enable disable Parameters enable Enable DHCP relay agent information option mode disable Disable DHCP relay agent information option mode default Show DHCP relay agent information option mode Default Setting disable Example Enable DHCP relay agent information option mode WGSD 10020HP security n...

Page 416: ...n default Show DHCP relay information policy Default Setting replace Example Keep the original relay information when receive a DHCP message that already contains it WGSD 10020HP security network dhcp relay information policy keep Security Network DHCP Relay Statistics Description Show or clear DHCP relay statistics Syntax Security Network DHCP Relay Statistics clear Parameters clear Clear DHCP re...

Page 417: ...usted ports disable Disable DHCP snooping mode default Show flow DHCP snooping mode Default Setting disable Example Enable DHCP snooping mode WGSD 10020HP security network dhcp snooping mode enable Security Network DHCP Snooping Port Mode Description Set or show the DHCP snooping port mode Syntax Security Network DHCP Snooping Port Mode port_list trusted untrusted Parameters port_list Port list or...

Page 418: ...s port_list Port list or all default All ports clear Clear DHCP snooping statistics Example Show DHCP snooping statistics of port 1 WGSD 10020HP security network dhcp snooping statistics 1 Port 1 Statistics Rx Discover 0 Tx Discover 0 Rx Offer 0 Tx Offer 0 Rx Request 0 Tx Request 0 Rx Decline 0 Tx Decline 0 Rx ACK 0 Tx ACK 0 Rx NAK 0 Tx NAK 0 Rx Release 0 Tx Release 0 Rx Inform 0 Tx Inform 0 Rx Le...

Page 419: ...P Source Guard Mode enable disable Parameters enable Enable IP Source Guard disable Disable IP Source Guard Default Setting disable Example Enable IP source guard mode WGSD 10020HP security network ip source guard mode enable Security Network IP Source Guard Port Mode Description Set or show the IP Source Guard port mode Syntax Security Network IP Source Guard Port Mode port_list enable disable Pa...

Page 420: ...t limitation for dynamic entries Syntax Security Network IP Source Guard limit port_list dynamic_entry_limit unlimited Parameters port_list Port list or all default All ports dynamic_entry_limit unlimited dynamic entry limit 0 2 or unlimited Default Setting unlimited Example Set IP source guard limit WGSD 10020HP security network ip source guard 1 1 Security Network IP Source Guard Entry Descripti...

Page 421: ...ard static entry WGSD 10020HP security network ip source guard entry 1 add 1 192 168 0 20 Security Network IP Source Guard Status Description Show IP source guard static and dynamic entries Syntax Security Network IP Source Guard Status port_list Parameters port_list Port list or all default All ports Example Show IP source guard static and dynamic entries WGSD 10020HP security network ip source g...

Page 422: ...ARP Inspection Default Setting disable Example Enable ARP inspection mode WGSD 10020HP security network arp inspection mode enable Security Network ARP Inspection Port Mode Description Set or show the ARP Inspection port mode Syntax Security Network ARP Inspection Port Mode port_list enable disable Parameters port_list Port list or all default All ports enable Enable ARP Inspection port disable Di...

Page 423: ...inspection static entry delete Delete existing port ARP inspection static entry vid VLAN ID 1 4095 allowed_mac MAC address xx xx xx xx xx xx MAC address allowed for doing ARP request allowed_ip IP address a b c d IP address allowed for doing ARP request Example Add ARP inspection static entry WGSD 10020HP security network arp inspection entry 1 add 1 00 30 4f 00 00 11 192 168 0 11 Security Network...

Page 424: ...AAA Configuration Example Show Auth configuration WGSD 10020HP security aaa configuration AAA Configuration Server Timeout 15 seconds Server Dead Time 300 seconds RADIUS Authentication Server Configuration Server Mode IP Address Secret Port 1 Disabled 1812 2 Disabled 1812 3 Disabled 1812 4 Disabled 1812 5 Disabled 1812 RADIUS Accounting Server Configuration Server Mode IP Address Secret Port 1 Dis...

Page 425: ...d 49 2 Disabled 49 3 Disabled 49 4 Disabled 49 5 Disabled 49 Security AAA Timeout Description Set or show server timeout Syntax Security AAA Timeout timeout Parameters timeout Server response timeout 3 3600 seconds default Show server timeout configuration Default Setting 15 Example Set 30sec for server timeout WGSD 10020HP security aaa timeout 30 Security AAA Deadtime Description 425 ...

Page 426: ...y AAA RADIUS server_index enable disable ip_addr_string secret server_port Parameters The server index 1 5 default Show RADIUS authentication server configuration enable Enable RADIUS authentication server disable Disable RADIUS authentication server default Show RADIUS server mode ip_addr_string IP host address a b c d or a host name string secret Secret shared with external authentication server...

Page 427: ... Show RADIUS server mode ip_addr_string IP host address a b c d or a host name string secret Secret shared with external accounting server To set an empty secret use two quotes To use spaces in secret enquote the secret Quotes in the secret are not allowed server_port Server UDP port Use 0 to use the default RADIUS port 1813 Example Set RADIUS accounting server configuration WGSD 10020HP security ...

Page 428: ...pty secret use two quotes To use spaces in secret enquote the secret Quotes in the secret are not allowed server_port Server TCP port Use 0 to use the default TACACS port 49 Example Set TACACS authentication server configuration WGSD 10020HP security aaa tacacs 1 enable 192 168 0 20 12345678 49 Security AAA Statistics Description Show RADIUS statistics Syntax Security AAA Statistics server_index P...

Page 429: ...figuration WGSD 10020HP stp cofiguration STP Configuration Protocol Version MSTP Max Age 20 Forward Delay 15 Tx Hold Count 6 Max Hop Count 20 BPDU Filtering Disabled BPDU Guard Disabled Error Recovery Disabled STP Version Description Set or show the STP Bridge protocol version Syntax STP Version stp_version Parameters stp_version mstp rstp stp Default Setting MSTP 429 ...

Page 430: ...ridge Transmit Hold Count parameter Syntax STP Txhold holdcount Parameters holdcount STP Transmit Hold Count 1 10 Default Setting 6 Example Set STP Tx hold in 10 WGSD 10020HP stp txhold 10 STP MaxHops Description Set or show the MSTP Bridge Max Hop Count parameter Syntax STP MaxHops maxhops Parameters maxhops STP BPDU MaxHops 6 40 Default Setting 20 430 ...

Page 431: ...P MaxAge max_age Parameters max_age STP maximum age time 6 40 and max_age forward_delay 1 2 Default Setting 20 Example Set STP maximum age time in 10 WGSD 10020HP stp maxage 10 STP FwdDelay Description Set or show the CIST MSTI bridge forward delay Syntax STP FwdDelay delay Parameters delay MSTP forward delay 4 30 and max_age forward_delay 1 2 Default Setting 15 Example 431 ...

Page 432: ...A text string up to 32 characters long Use quotes to embed spaces in name integer Integer value Default Setting Configuration name MAC address Configuration rev 0 Example Set MSTP configuration name and revision WGSD 10020HP stp cname 9f_WGSD 10020 1 STP BPDU Filter Description Set or show edge port BPDU Filtering Syntax STP bpduFilter enable disable Parameters enable disable enable or disable BPD...

Page 433: ...ameters enable disable enable or disable BPDU Guard for Edge ports Default Setting Disable Example Set edge port BPDU guard WGSD 10020HP stp bpduguard enable STP Recovery Description Set or show edge port error recovery timeout Syntax STP recovery timeout Parameters timeout Time before error disabled ports are reenabled 30 86400 seconds 0 disables default Show recovery timeout Default Setting Disa...

Page 434: ...t_list Port list or all default All ports Default Setting Disable Example Show STP Bridge status WGSD 10020HP stp status CIST Bridge STP Status Bridge ID 80 00 00 30 4F 24 04 D1 Root ID 80 00 00 30 4F 24 04 D1 Root Port Root PathCost 0 Regional Root 80 00 00 30 4F 24 04 D1 Int PathCost 0 Max Hops 20 TC Flag Steady TC Count 0 TC Last Port Port Role State Pri PathCost Edge P2P Uptime 10 DesignatedPo...

Page 435: ...iority STP bridge priority 0 16 32 48 224 240 Default 128 Example Set MST1 priority value in 48 WGSD 10020HP stp msti priority 1 48 STP MSTI Map Description Show or clear MSTP MSTI VLAN mapping configuration Syntax STP Msti Map msti clear Parameters msti STP bridge instance no 0 7 CIST 0 MSTI1 1 Clear Clear VID to MSTI mapping Example Add MST1 priority value in 48 WGSD 10020HP stp msti priority 1 ...

Page 436: ... MST1 in vlan1 WGSD 10020HP stp msti add 1 1 STP Port Configuration Description Show STP Port configuration Syntax STP Port Configuration port_list Parameters port_list Port list or all Port zero means aggregations Example Show STP status of Port1 WGSD 10020HP stp port configuration 1 Port Mode AdminEdge AutoEdge restrRole restrTcn Point2point 1 Disabled Disabled Enabled Disabled Disabled Auto 436...

Page 437: ...ol Disable Disable MSTP protocol Default disable Example Enable STP function on port1 WGSD 10020HP stp port mode 1 enable STP Port Edge Description Set or show the STP adminEdge port parameter Syntax STP Port Edge port_list enable disable Parameters port_list Port list or all default All ports Enable Configure MSTP adminEdge to Edge Disable Configure MSTP adminEdge to Non edge Default disable Exam...

Page 438: ...rts Enable Enable MSTP autoEdge Disable Disable MSTP autoEdge Default enable Example Disable STP edge function on port1 WGSD 10020HP stp port autoedge 1 disable STP Port P2P Description Set or show the STP point2point port parameter Syntax STP Port P2P port_list enable disable auto Parameters port_list Port list or all default All ports enable Enable MSTP point2point disable Disable MSTP point2poi...

Page 439: ...st enable disable Parameters port_list Port list or all default All ports enable Enable MSTP restricted role disable Disable MSTP restricted role Default disable Example Eisable STP restricted role on port1 WGSD 10020HP stp port restrictedrole 1 enable STP Port RestrictedTcn Description Set or show the MSTP restrictedTcn port parameter Syntax STP Port RestrictedTcn port_list enable disable Paramet...

Page 440: ...uGuard Description Set or show the bpduGuard port parameter Syntax STP Port bpduGuard port_list enable disable Parameters port_list Port list or all default All ports enable Enable port BPDU Guard disable Disable port BPDU Guard Default disable Example Eisable BPDU guard on port1 WGSD 10020HP stp port bpduguard 1 enable STP Port Statistic Description Show STP port statistics Syntax STP Port Statis...

Page 441: ...eck Description Set the STP mCheck Migration Check variable for ports Syntax STP Port Mcheck port_list Parameters port_list Port list or all default All ports Example Set the STP mCheck Migration Check variable for port 1 WGSD 10020HP stp port mcheck 1 STP MSTI Port Configuration Description Show the STP port instance configuration Syntax STP Msti Port Configuration msti port_list Parameters msti ...

Page 442: ... list or all Port zero means aggregations path_cost STP port path cost 1 200000000 or auto Default auto Example Set MSTI7 in port1 WGSD 10020HP stp msti port cost 7 1 MSTI Port Path Cost MST7 1 Auto STP MSTI Port Priority Description Set or show the STP port instance priority Syntax STP Msti Port Priority msti port_list priority Parameters msti STP bridge instance no 0 7 CIST 0 MSTI1 1 port_list P...

Page 443: ...User s Manual of WGSD 10020 Series priority STP port priority 0 16 32 48 224 240 Default 128 443 ...

Page 444: ...regation Add Description Add or modify link aggregation Syntax Aggr Add port_list aggr_id Parameters port_list Port list or all default All ports aggr_id Aggregation ID Example Add port 1 4 in Group1 WGSD 10020HP aggr add 1 4 1 Aggregation Delete Description Delete link aggregation Syntax Aggr Delete aggr_id Parameters aggr_id Aggregation ID Example Delete Group2 444 ...

Page 445: ...e link aggregation traffic distribution mode Syntax Aggr Mode smac dmac ip port enable disable Parameters smac Source MAC address dmac Destination MAC address ip Source and destination IP address port Source and destination UDP TCP port enable Enable field in traffic distribution disable Disable field in traffic distribution Default Setting SMAC Enabled DMAC Disabled IP Enabled Port Enabled Exampl...

Page 446: ...User s Manual of WGSD 10020 Series WGSD 10020HP Aggr mode smac disable 446 ...

Page 447: ...l ports Example Show LACP configuration WGSD 10020HP lacp configuration Port Mode Key Role 1 Disabled Auto Active 2 Disabled Auto Active 3 Disabled Auto Active 4 Disabled Auto Active 5 Disabled Auto Active 6 Disabled Auto Active 7 Disabled Auto Active 8 Disabled Auto Active 9 Disabled Auto Active 10 Disabled Auto Active LACP Mode Description Set or show LACP mode Syntax LACP Mode port_list enable ...

Page 448: ...ing disable Example Enable LACP for port1 4 WGSD 10020HP lacp mode 1 4 enable LACP Key Description Set or show the LACP key Syntax LACP Key port_list key Parameters port_list Port list or all default All ports key LACP key 1 65535 or auto Default Setting auto Example Set key1 for port1 4 WGSD 10020HP lacp key 1 4 1 LACP Role Description Set or show the LACP role Syntax 448 ...

Page 449: ...ow LACP role Default Setting active Example Set passive for port1 4 WGSD 10020HP lacp role 1 4 passive LACP Status Description Show LACP Status Syntax LACP Status port_list Parameters port_list Port list or all default All ports Example Show LACP status of port1 4 WGSD 10020HP lacp status 1 4 Port Mode Key Aggr ID Partner System ID Partner Port 1 Disabled 1 2 Disabled 1 3 Disabled 1 4 Disabled 1 4...

Page 450: ...Syntax LACP Statistics port_list clear Parameters port_list Port list or all default All ports clear Clear LACP statistics Example Show LACP statistics of port1 4 WGSD 10020HP lacp statistics 1 4 Port Rx Frames Tx Frames Rx Unknown Rx Illegal 1 0 0 0 0 2 0 0 0 0 3 0 0 0 0 4 0 0 0 0 450 ...

Page 451: ...4 LLDP Configuration Interval 30 Hold 3 Tx Delay 2 Reinit Delay 2 Port Mode Port Descr System Name System Descr System Capa Mgmt Addr CDP awareness 1 Enabled Enabled Enabled Enabled Enabled Enabled Disabled 2 Enabled Enabled Enabled Enabled Enabled Enabled Disabled 3 Enabled Enabled Enabled Enabled Enabled Enabled Disabled 4 Enabled Enabled Enabled Enabled Enabled Enabled Disabled LLDP Mode Descri...

Page 452: ...n Show or Set LLDP Optional TLVs Syntax LLDP Optional_TLV port_list port_descr sys_name sys_descr sys_capa mgmt_addr enable disable Parameters port_list Port list or all default All ports port_descr Description of the port sysm_name System name sys_descr Description of the system sys_capa System capabilities mgmt_addr Master s IP address default Show optional TLV s configuration enable Enables TLV...

Page 453: ..._descr disable LLDP Interval Description Set or show LLDP Tx interval Syntax LLDP Interval interval Parameters interval LLDP transmission interval 5 32768 Default Setting 30 Example Set transmission interval in 10 WGSD 10020HP lldp interval 10 LLDP Hold Description Set or show LLDP Tx hold value Syntax LLDP Hold hold Parameters hold LLDP hold value 2 10 Default Setting 3 453 ...

Page 454: ... Set or show LLDP Tx delay Syntax LLDP Delay delay Parameters delay LLDP transmission delay 1 8192 Default Setting 2 Example Set LLDP delay value in 1 WGSD 10020HP lldp delay 1 LLDP Reinit Description Set or show LLDP reinit delay Syntax LLDP Reinit reinit Parameters reinit LLDP reinit delay 1 10 Default Setting 2 454 ...

Page 455: ...rts clear Clear LLDP statistics Example Show LLDP Statistics of port 1 WGSD 10020HP lldp statistics 1 LLDP global counters Neighbor entries was last changed at 18819 sec ago Total Neighbors Entries Added 0 Total Neighbors Entries Deleted 0 Total Neighbors Entries Dropped 0 Total Neighbors Entries Aged Out 0 LLDP local counters Rx Tx Rx Rx Rx TLV Rx TLV Rx TLV Port Frames Frames Errors Discards Err...

Page 456: ...User s Manual of WGSD 10020 Series LLDP Info Description Show LLDP neighbor device information Syntax LLDP Info port_list Parameters port_list Port list or all default All ports 456 ...

Page 457: ...default All ports Example Show LLDP MED configuration of port1 4 WGSD 10020HP lldpmed configuration 1 4 LLDP MED Configuration Fast Start Repeast Count 4 Location Coordinates Latitude 0 0000 North Longitude 0 0000 East Altitude 0 0000 meter s Map datum WGS84 Civic Address Location Port Policies 1 none 2 none 3 none 4 none LLDPMED Civic Description Set or show LLDP MED Civic Address Location 457 ...

Page 458: ...orhood block street Street leading_street_direction Leading street direction trailing_street_suffix Trailing street suffix str_suf Street Suffix house_no House Number house_no_suffix House number suffix landmark Landmark or vanity address additional_info Additional location information name Bame residence and office occupant zip_code Postal zip code building Building structure apartment Unit apart...

Page 459: ...uest_voice guest_voice_signaling softphone_voice video_conferencing streaming_video video_si gnaling tagged untagged vlan_id l2_priority dscp Parameters voice Voice for use by dedicated IP Telephony handsets and other similar appliances supporting interactive voice services These devices are typically deployed on a separate VLAN for ease of deployment and enhanced security by isolation from data a...

Page 460: ...her similar applications supporting streaming video services that require specific network policy treatment Video applications relying on TCP with buffering would not be an intended use of this application type video_signaling Video Signaling conditional for use in network topologies that require a separate policy for the video signaling than for the video media tagged The device is using tagged f...

Page 461: ...mbers are West of the prime meridian altitude Altitude Meters or floors with max 4 digits default Show coordinate location configuration north south west east meters floor North North Valid for latitude South South Valid for latitude West West Valid for longitude East East Valid for longitude Meters Meters Valid for altitude Floor Floor Valid for altitude lldpmed Coordinate value coordinate_value ...

Page 462: ...ED Fast count Parameters count The number of times the fast start LLDPDU are being sent during the activation of the fast start mechanism defined by LLDP MED 1 10 LLDPMED Info Description Show LLDP MED neighbor device information Syntax LLDPMED Info port_list Parameters port_list Port list or all default All ports 462 ...

Page 463: ...or all default All ports Example Show EEE configuration of port1 4 WGSD 10020HP eee configuration 1 4 EEE Configuration Port Mode Urgent queues 1 Disabled none 2 Disabled none 3 Disabled none 4 Disabled none EEE Mode Description Set or show the eee mode Syntax EEE Mode port_list enable disable Parameters port_list Port list or all default All ports enable Enable EEE 463 ...

Page 464: ...able EEE mode for port1 4 WGSD 10020HP eee mode enable 1 4 EEE Urgent Queues Description Set or show EEE Urgent queues Syntax EEE Urgent_queues port_list queue_list Parameters port_list Port list or all default All ports queue_list List of queues to configure as urgent queues 1 8 or none Default Setting none 464 ...

Page 465: ...abled 802 3at High 30 8 30 8 2 Enabled 802 3at High 30 8 30 8 3 Enabled 802 3at High 30 8 30 8 4 Enabled 802 3at High 30 8 30 8 5 Enabled 802 3at High 30 8 30 8 6 Enabled 802 3at High 30 8 30 8 7 Enabled 802 3at High 30 8 30 8 8 Enabled 802 3at High 30 8 30 8 9 Disabled 802 3at Low 0 0 0 0 10 Disabled 802 3at Low 0 0 0 0 Power management mode Power management mode consumption PoE Mode Description ...

Page 466: ...s user to set up 802 3af type1 or 802 3at type2 mode to per port Syntax PoE mode port_list af at Parameters port_list Port list or all default All ports af IEEE 802 3af mode at IEEE 802 3at mode PoE Priority Description Show Set PoE Priority Syntax PoE Priority port_list low high critical Parameters port_list Port list or all default All ports low Set priority to low high Set priority to high crit...

Page 467: ...m Power Description Set or show PoE maximum power per port 0 30 8 with one digit Syntax PoE Maximum_Power port_list port_power Parameters port_list Port list or all default All ports port_power PoE maiximum power for the port 0 30 8 Default Setting 30 8 Example Set maximum power in 10 watts for port1 4 WGSD 10020HP poe maximum_power 1 4 10 PoE Allocated Power Description Set or show PoE maximum po...

Page 468: ...Setting 30 8 Example Set PoE maximum power allocated in 10 watts for port1 4 WGSD 10020HP poe alloc_power 1 4 10 PoE Power Supply Description Set or show the value of the power supply Syntax PoE Power_Supply supply_power Parameters supply_power PoE power for a power supply Example Set 100 watts of power supply WGSD 10020HP poe power_supply 100 PoE Status Description Show PoE status Syntax PoE Stat...

Page 469: ...rio_temp prio_list shut_down_temp Parameters prio_list List of priorities 0 3 shut_down_temp Temperature at which ports shall be shut down 0 255 degree C Example Show thermal priority temperature WGSD 10020HP Thermal prio_temp Priority Temp 0 255 C 1 255 C 2 255 C 3 255 C Thermal Port Priority Description Set or show the ports priority Syntax Thermal port_prio port_list prio 469 ...

Page 470: ...ult Setting 0 Example Set thermal port priority in 2 WGSD 10020HP Thermal port_prio 2 Thermal Status Description Shows the chip temperature Syntax Thermal status Example Shows the chip temperature WGSD 10020HP Thermal status Port Chip Temp 1 47 C 2 47 C 3 47 C 4 47 C 5 47 C 6 47 C 7 47 C 8 47 C 9 47 C 10 47 C 470 ...

Page 471: ...ensity for the LEDs Syntax led_power timers hour intensity Parameters hour The hour 0 24 at which to change LEDs intensity intensity The LED intensity in 0 100 Example Show the time and intensity for the LEDs WGSD 10020HP led_power timer Time Intensity 00 00 20 LED Power Delete Timer Description Deletes a timer Syntax led_power delete_timer hour Parameters hour The hour 0 24 at which to change LED...

Page 472: ...maintenance_time Time in seconds 0 65535 that the LEDs shall be turned on when any port changes link state on_at_errors leave_at_errors on_at_error if LEDs shall be turned on if any errors has been detected leave_at_errors if no LED change shall happen when errors have been detected LED Power Configuration Description Show Led Power Reduction configuration Syntax led_power configuration 472 ...

Page 473: ...s port_list Port list or all default All ports QoS Port Classification Class Description Set or show the default QoS class Syntax QoS Port Classification Class port_list class Parameters port_list Port list or all default All ports class QoS class 0 7 Default Setting 0 Example Set default QoS class in 1 for port 1 WGSD 10020HP qos Port Classification Class 1 1 473 ...

Page 474: ...tting 0 Example Set the default Drop Precedence Level in 1 for port1 WGSD 10020HP qos Port Classification dpl 1 1 QoS Port Classification PCP Description Set or show the default PCP for an untagged frame Syntax QoS Port Classification PCP port_list pcp Parameters port_list Port list or all default All ports pcp Priority Code Point 0 7 Default Setting 0 Example Set the default PCP for an untagged f...

Page 475: ... DEI for an untagged frame in 1 for port1 WGSD 10020HP qos Port Classification dei 1 1 QoS Port Classification Tag Description Set or show if the classification is based on the PCP and DEI values in tagged frames Syntax QoS Port Classification Tag port_list enable disable Parameters port_list Port list or all default All ports enable Enable tag classification disable Disable tag classification def...

Page 476: ... pcp_list dei_list class dpl Parameters port_list Port list or all default All ports pcp_list PCP list or all default All PCPs 0 7 dei_list DEI list or all default All DEIs 0 1 class QoS class 0 7 dpl Drop Precedence Level 0 1 QoS Port Classification DSCP Description Set or show if the classification is based on DSCP value in IP frames Syntax QoS Port Classification DSCP port_list enable disable P...

Page 477: ... Parameters port_list Port list or all default All ports enable Enable port policer disable Disable port policer default Show port policer mode Default Setting disable Example Enable QoS port policer WGSD 10020HP qos Port Policer Mode 1 10 enable QoS Port Policer Rate Description Set or show the port policer rate Syntax QoS Port Policer Rate port_list rate Parameters port_list Port list or all def...

Page 478: ...licer Unit port_list kbps fps Parameters port_list Port list or all default All ports kbps Unit is kilo bits per second fps Unit is frames per second default Show port policer unit Default Setting kbps Example Set the port policer unit in fps WGSD 10020HP qos Port Policer unit 1 10 fps QoS Port Scheduler Mode Description Set or show the port scheduler mode Syntax QoS Port Scheduler Mode port_list ...

Page 479: ...r weight Syntax QoS Port Scheduler Weight port_list queue_list weight Parameters port_list Port list or all default All ports queue_list Weighted queue list or all default All weighted queues 0 5 weight Scheduler weight 1 100 QoS Port QueueShaper Mode Description Set or show the port queue shaper mode Syntax QoS Port QueueShaper Mode port_list queue_list enable disable Parameters port_list Port li...

Page 480: ...t QueueShaper Rate port_list queue_list bit_rate Parameters port_list Port list or all default All ports queue_list Queue list or all default All queues 0 7 bit_rate Rate in kilo bits per second 100 3300000 Default Setting 500kbps Example Set the port queue shaper rate in 1000 WGSD 10020HP qos Port QueueShaper rate 1 10 0 7 1000 QoS Port QueueShaper Excess Description Set or show the port queue ex...

Page 481: ...g disable Example Enable the port queue excess bandwidth mode WGSD 10020HP qos Port QueueShaper Excess 1 10 0 7 enable QoS Port Shaper Mode Description Set or show the port shaper mode Syntax QoS Port Shaper Mode port_list enable disable Parameters port_list Port list or all default All ports enable Enable port shaper disable Disable port shaper default Show port shaper mode Default Setting Enable...

Page 482: ...rate in 1000 WGSD 10020HP qos Port Shaper Rate 1 10 1000 QoS Port TagRemarking Mode Description Set or show the port tag remarking mode Syntax QoS Port TagRemarking Mode port_list classified default mapped Parameters port_list Port list or all default All ports classified Use classified PCP DEI values default Use default PCP DEI values mapped Use mapped versions of QoS class and DP level default S...

Page 483: ...eters port_list Port list or all default All ports pcp Priority Code Point 0 7 Default Setting 0 Example Set the default PCP in 1 WGSD 10020HP qos Port TagRemarking PCP 1 10 1 QoS Port TagRemarking DEI Description Set or show the default DEI This value is used when port tag remarking mode is set to default Syntax QoS Port TagRemarking DEI port_list dei Parameters port_list Port list or all default...

Page 484: ...ll ports class_list QoS class list or all default All QoS classes 0 7 dpl_list DP level list or all default All DP levels 0 1 pcp Priority Code Point 0 7 dei Drop Eligible Indicator 0 1 QoS Port DSCP Translation Description Set or show DSCP ingress translation mode If translation is enabled for a port incoming frame DSCP value is translated and translated value is used for QoS classification Synta...

Page 485: ...ist Port list or all default All ports none No DSCP ingress classification zero Classify DSCP if DSCP 0 selected Classify DSCP for which class mode is enable all Classify all DSCP default Show port DSCP ingress classification mode Default Setting none Example Set DSCP classification based on QoS class and DP level in zero WGSD 10020HP QoS Port DSCP Classification 1 10 zero QoS Port DSCP EgressRema...

Page 486: ...ion Set or show DSCP mapping table This table is used to map QoS class and DP level based on DSCP value DSCP value used to map QoS class and DPL is either translated DSCP value or incoming frame DSCP value Syntax QoS DSCP Map dscp_list class dpl Parameters dscp_list DSCP 0 63 BE CS1 CS7 EF or AF11 AF43 list or all default Show DSCP ingress map table i e DSCP class DPL class QoS class 0 7 dpl Drop ...

Page 487: ...enable disable Parameters dscp_list DSCP 0 63 BE CS1 CS7 EF or AF11 AF43 list or all enable Set DSCP as trusted DSCP disable Set DSCP as un trusted DSCP default Show DSCP Trust status Default Setting disable QoS DSCP Classification Mode Description Set or show DSCP ingress classification mode If port DSCP classification is selected DSCP will be classified based on QoS class and DP level only for D...

Page 488: ...SCP 0 63 BE CS1 CS7 EF or AF11 AF43 list or all dpl_list DP level list or all default All DP levels 0 1 dscp Egress remapped DSCP 0 63 BE CS1 CS7 EF or AF11 AF43 QoS Storm Unicast Description Set or show the unicast storm rate limiter Syntax QoS Storm Unicast enable disable packet_rate Parameters enable Enable unicast storm control disable Disable unicast storm control packet_rate Rate in fps 1 2 ...

Page 489: ... a new QCE will be added If the QCE ID is not specified the next available QCE ID will be used If the next QCE ID parameter qce_id_next is specified the QCE will be placed before this QCE in the list If the next QCE ID is not specified and if it is a new entry added the QCE will be placed last in the list Otherwise if the next QCE ID is not specified and if existing QCE is modified QCE will be in ...

Page 490: ... 0x00 0xFF or any ssap Source Service Access Point 0x00 0xFF or any control LLC control 0x00 0xFF or any snap SNAP keyword pid Protocol ID EtherType or any ipv4 IPv4 keyowrd protocol IP protocol number 0 255 TCP or UDP or any sip Source IP address a b c d n or any dscp DSCP 0 63 BE CS1 CS7 EF or AF11 AF43 or any specific range fragment IPv4 frame fragmented yes no any sport Source TCP UDP port 0 6...

Page 491: ...L Lookup qce_id Parameters qce_id QCE ID 1 256 default Next available ID Default Setting disable Example Enable multicast storm control in 2fps WGSD 10020HP QoS Storm multicast enable 2 QoS QCL Status Description Show QCL status This can be used to display if there is any conflict in QCE for differnet user types Syntax QoS QCL status combined static voice_vlan conflicts Parameters combined static ...

Page 492: ...vailable even before MAX QCE entry So user can release the resource in use by other applications and use this command to acquire the resource Syntax QoS QCL refresh Parameters combined static voice_vlan conflicts combined Shows the combined status static Shows the static user configured status voice_vlan Shows the status by Voice VLAN conflicts Shows all conflict status default Shows the combined ...

Page 493: ...ters port_list Port list or all default All ports Example Show mirror configuration WGSD 10020HP mirror configuration Mirror Port Description Set or show the mirror port Syntax Mirror Port port disable Parameters port disable Mirror port or disable default Show port Default Setting disable Example Set port 2 for the mirror port WGSD 10020HP mirror port 2 493 ...

Page 494: ... enable disable rx tx Parameters port_list Port list or all default All ports enable Enable Rx and Tx mirroring disable Disable Mirroring rx Enable Rx mirroring tx Enable Tx mirroring default Show mirror mode Default Setting disable Example Enable the mirror mode for port 1 4 WGSD 10020HP mirror mode 1 4 enable 494 ...

Page 495: ...le_name Parameters ip_server TFTP server IP address a b c d file_name Configuration file name Configuration Load Description Load configuration from TFTP server Syntax Config Load ip_server file_name check Parameters ip_server TFTP server IP address a b c d file_name Configuration file name check Check configuration file only default Check and apply file 495 ...

Page 496: ...a b c d or a host name string file_name Firmware file name Firmware IPv6 Load Description Load new firmware from IPv6 TFTP server Syntax Firmware IPv6 Load ipv6_server file_name Parameters ipv6_server TFTP server IPv6 address file_name Firmware file name Firmware Information Description Display information about active and alternate firmware images Syntax Firmware Information Firmware Swap Descrip...

Page 497: ...User s Manual of WGSD 10020 Series Activate the alternate firmware image Syntax Firmware Swap 497 ...

Page 498: ...how UPnP configuration WGSD 10020HP upnp configuration UPnP Configuration UPnP Mode Disabled UPnP TTL 4 UPnP Advertising Duration 100 UPnP Mode Description Set or show the UPnP mode Syntax UPnP Mode enable disable Parameters enable Enable UPnP disable Disable UPnP default Show UPnP mode Default Setting disable Example Enable the UPnP mode 498 ...

Page 499: ...t Setting 4 Example Set the value 10 for TTL value of the IP header in SSDP messages WGSD 10020HP upnp ttl 10 UPnP Advertising Duration Description Set or show UPnP Advertising Duration Syntax UPnP Advertising Duration duration Parameters duration duration range 100 86400 default Show UPnP duration range Default Setting 100 Example Set value 1000 for UPnP Advertising Duration WGSD 10020HP upnp adv...

Page 500: ...ion MVR Mode Disabled Muticast VLAN ID 100 Port Port Mode Port Type Immediate Leave 1 Disabled Receive Disabled 2 Disabled Receive Disabled 3 Disabled Receive Disabled 4 Disabled Receive Disabled 5 Disabled Receive Disabled 6 Disabled Receive Disabled 7 Disabled Receive Disabled 8 Disabled Receive Disabled 9 Disabled Receive Disabled 10 Disabled Receive Disabled MVR Group Description Show the MVR ...

Page 501: ...tion Set or show the MVR mode Syntax MVR Mode enable disable Parameters enable Enable MVR mode disable Disable MVR mode default Show MVR mode Default Setting disable Example Enable MVR mode WGSD 10020HP mvr mode enable MVR Port Mode Description Set or show the MVR port mode Syntax MVR Port Mode port_list enable disable 501 ...

Page 502: ...e the MVR port mode for port 1 4 WGSD 10020HP mvr port mode 1 4 enable MVR Multicast VLAN Description Set or show MVR multicast VLAN ID Syntax MVR Multicast VLAN vid Parameters vid VLAN ID 1 4095 default Show current MVR multicast VLAN ID Default Setting 100 Example Set VLAN 1000 for MVR multicast VLAN ID WGSD 10020HP mvr multicast vlan 1000 MVR Port Type Description Set or show MVR port type 502 ...

Page 503: ... type of port 1 WGSD 10020HP mvr port type 1 source MVR Immediate Leave Description Set or show MVR port state about immediate leave Syntax MVR Immediate Leave port_list enable disable Parameters port_list Port list or all default All ports enable Enable Immediate leave mode disable Disable Immediate leave mode default Show MVR Immediate leave mode Default Setting disable Example Enable MVR port s...

Page 504: ...nfiguration V oice VLAN Configuration Voice VLAN Mode Disabled Voice VLAN VLAN ID 1000 Voice VLAN Age Time seconds 86400 Voice VLAN Traffic Class 7 Voice VLAN OUI Table Telephony OUI Description 00 30 4F PLANET phones 00 03 6B Cisco phones 00 0F E2 H3C phones 00 60 B9 Philips and NEC AG phones 00 D0 1E Pingtel phones 00 E0 75 Polycom phones 00 E0 BB 3Com phones 00 01 E3 Siemens AG phones Voice VLA...

Page 505: ...ed OUI 9 Disabled Disabled OUI 10 Disabled Disabled OUI Voice VLAN Mode Description Set or show the Voice VLAN mode We must disable MSTP feature before we enable Voice VLAN It can avoid the conflict of ingress filter Syntax Voice VLAN Mode enable disable Parameters enable Enable Voice VLAN mode disable Disable Voice VLAN mode default Show flow Voice VLAN mode Default Setting disable Example Enable...

Page 506: ...tting 1000 Example Set ID 2 for Voice VLAN ID WGSD 10020HP voice vlan id 2 Voice VLAN Agetime Description Set or show Voice VLAN age time Syntax Voice VLAN Agetime age_time Parameters age_time MAC address age time 10 10000000 default Show age time Default Setting 86400sec Example Set Voice VLAN age time in 100sec WGSD 10020HP voice valn agetime 100 506 ...

Page 507: ...VLAN OUI Add Description Add Voice VLAN OUI entry Modify OUI table will restart auto detect OUI process The maximum entry number is 16 Syntax Voice VLAN OUI Add oui_addr description Parameters oui_addr OUI address xx xx xx The null OUI address isn t allowed description Entry description Use clear or to clear the string No blank or space characters are permitted as part of a contact only in CLI Exa...

Page 508: ... isn t allowed Example Delete Voice VLAN OUI entry WGSD 10020HP voice vlan oui delete 00 11 22 Voice VLAN OUI Clear Description Clear Voice VLAN OUI entry Modify OUI table will restart auto detect OUI process Syntax Voice VLAN OUI Clear Example Clear Voice VLAN OUI entry WGSD 10020HP voice vlan oui clear Voice VLAN OUI Lookup Description Clear Voice VLAN OUI entry Modify OUI table will restart aut...

Page 509: ...All ports disable Disjoin from Voice VLAN auto Enable auto detect mode It detects whether there is VoIP phone attached on the specific port and configure the Voice VLAN members automatically force Forced join to Voice VLAN default Show Voice VLAN port mode Default Setting disable Example Set auto mode for port 1 4 of Voice VLAN port mode WGSD 10020HP voice vlan port mode 1 4 auto Voice VLAN Securi...

Page 510: ...default All ports enable Enable Voice VLAN security mode disable Disable Voice VLAN security mode default Show flow Voice VLAN security mode Default Setting disable Example Enable the Voice VLAN port security mode for port 1 4 WGSD 10020HP voice vlan security 1 4 enable 510 ...

Page 511: ... IPv6 MLD igmp IPMC for IPv4 IGMP IPMC Mode Description Set or show the IPMC snooping mode Syntax IPMC Mode mld igmp enable disable Parameters mld igmp mld IPMC for IPv6 MLD igmp IPMC for IPv4 IGMP enable Enable IPMC snooping disable Disable IPMC snooping default Show global IPMC snooping mode Default Setting disable Example Enable IGMP snooping WGSD 10020HP ipmc mode igmp enable 511 ...

Page 512: ...oding disable Disable IPMC flooding default Show global IPMC flooding mode Default Setting enable Example Enable IGMP flooding WGSD 10020HP ipmc flooding igmp enable IPMC Leave Proxy Description Set or show the mode of IPMC Leave Proxy Syntax IPMC Leave Proxy mld igmp enable disable Parameters mld igmp mld IPMC for IPv6 MLD igmp IPMC for IPv4 IGMP enable Enable IPMC Leave Proxy disable Disable IPM...

Page 513: ...tax IPMC Proxy mld igmp enable disable Parameters mld igmp mld IPMC for IPv6 MLD igmp IPMC for IPv4 IGMP enable Enable IPMC Proxy disable Disable IPMC Proxy default Show global IPMC Proxy mode Default Setting disable Example Enable IGMP Proxy WGSD 10020HP ipmc proxy igmp enable IPMC State Description Set or show the IPMC snooping state for VLAN Syntax IPMC State mld igmp vid enable disable 513 ...

Page 514: ...ng state for VLAN 1 WGSD 10020HP ipmc state igmp 1 enable IPMC Querier Description Set or show the IPMC snooping querier mode for VLAN Syntax IPMC Querier mld igmp vid enable disable Parameters mld igmp mld IPMC for IPv6 MLD igmp IPMC for IPv4 IGMP vid VLAN ID 1 4095 or any default Show all VLANs enable Enable MLD querier disable Disable MLD querier Default Setting disable Example Enable IGMP quer...

Page 515: ...ble Enable MLD fast leave disable Disable MLD fast leave default Show IPMC fast leave mode Default Setting disable Example Enable IGMP fast leave for all port WGSD 10020HP ipmc fastleave igmp 1 10 enable IPMC Throttling Description Set or show the IPMC port throttling status Syntax IPMC Throttling mld igmp port_list limit_group_number Parameters mld igmp mld IPMC for IPv6 MLD igmp IPMC for IPv4 IG...

Page 516: ... igmp port_list add del group_addr Parameters mld igmp mld IPMC for IPv6 MLD igmp IPMC for IPv4 IGMP port_list Port list or all default All ports add Add new port group filtering entry del Del existing port group filtering entry default Show IPMC port group filtering list group_addr IPv4 IPv6 multicast group address accordingly IPMC Router Description Set or show the IPMC snooping router port mode...

Page 517: ... port WGSD 10020HP ipmc riuter igmp 1 enable IPMC Status Description Show IPMC operational status accordingly Syntax IPMC Status mld igmp vid Parameters mld igmp mld IPMC for IPv6 MLD igmp IPMC for IPv4 IGMP vid VLAN ID 1 4095 or any default Show all VLANs Example Show VLAN 1 IPMC operational status WGSD 10020HP ipmc status igmp 1 IPMC Group Description Show IPMC group addresses accordingly Syntax...

Page 518: ...0HP ipmc groups igmp 1 IPMC Version Description Show IPMC Versions Syntax IPMC Version mld igmp vid Parameters mld igmp mld IPMC for IPv6 MLD igmp IPMC for IPv4 IGMP vid VLAN ID 1 4095 or any default Show all VLANs Example Show VLAN 1 IPMC Versions WGSD 10020HP ipmc version igmp 1 IPMC SSM Description Show SSM related information for IPMC Syntax IPMC SSM mld igmp vid port_list Parameters mld igmp ...

Page 519: ... Description Set or show the IPMC Robustness Variable Syntax IPMC Parameter RV mld igmp vid ipmc_param_rv Parameters mld igmp mld IPMC for IPv6 MLD igmp IPMC for IPv4 IGMP vid VLAN ID 1 4095 or any default Show all VLANs ipmc_param_rv 1 Default Value 2 1 255 Robustness Variable default Show IPMC Interface Robustness Variable IPMC Parameter QI Description Set or show the IPMC Query Interval Syntax ...

Page 520: ...C Parameter QRI mld igmp vid ipmc_param_qri Parameters mld igmp mld IPMC for IPv6 MLD igmp IPMC for IPv4 IGMP vid VLAN ID 1 4095 or any default Show all VLANs ipmc_param_qri 1 Default Value 100 0 31744 Query Response Interval in tenths of seconds default Show IPMC Interface Query Response Interval IPMC Parameter LLQI Description Set or show the IPMC Last Listener Query Interval Syntax IPMC Paramet...

Page 521: ...Listener Query Interval IPMC Parameter URI Description Set or show the IPMC Unsolicited Report Interval Syntax IPMC Parameter URI mld igmp vid ipmc_param_uri Parameters mld igmp mld IPMC for IPv6 MLD igmp IPMC for IPv4 IGMP vid VLAN ID 1 4095 or any default Show all VLANs ipmc_param_uri 1 Default Value 1 0 31744 Unsolicited Report Interval in seconds default Show IPMC Interface Unsolicited Report ...

Page 522: ...ed VLAN entry Syntax VCL Macvlan Add mac_addr vid port_list Parameters mac_addr MAC address xx xx xx xx xx xx vid VLAN ID 1 4095 port_list Port list or all default All ports Example Add 00 11 22 33 44 55 66 in VLAN 20 for all port WGSD 10020HP vcl macvlan add 00 11 22 33 44 55 66 20 1 10 VCL MAC based VLAN Delete Description Delete VCL MAC based VLAN entry Syntax VCL Macvlan Del mac_addr Parameter...

Page 523: ...AN Add Ethernet II Description Add VCL protocol based VLAN Ethernet II protocol to group mapping Syntax VCL ProtoVlan Protocol Add Eth2 ether_type arp ip ipx at group_id Parameters ether_type arp ip ipx at Ether Type 0x0600 0xFFFF group_id Protocol group ID VCL Protocol based VLAN Add SNAP Description Add VCL protocol based VLAN SNAP protocol to group mapping Syntax VCL ProtoVlan Protocol Add Snap...

Page 524: ...alue 0x00 0xFF group_id Protocol group ID VCL Protocol based VLAN Delete Ethernet II Description Delete VCL protocol based VLAN Ethernet II protocol to group mapping Syntax VCL ProtoVlan Protocol Delete Eth2 ether_type arp ip ipx at Parameters ether_type arp ip ipx at Ether Type 0x0600 0xFFFF VCL Protocol based VLAN Delete SNAP Description Delete VCL protocol based VLAN SNAP protocol to group mapp...

Page 525: ...SAP value 0x00 0xFF ssap SSAP value 0x00 0xFF VCL Protocol based VLAN Add Description Add VCL protocol based VLAN group to VLAN mapping Syntax VCL ProtoVlan Vlan Add port_list group_id vid Parameters port_list Port list or all default All ports group_id Protocol group ID vid VLAN ID 1 4095 VCL Protocol based VLAN Delete Description Delete VCL protocol based VLAN group to VLAN mapping Syntax VCL Pr...

Page 526: ...User s Manual of WGSD 10020 Series group_id Protocol group ID VCL Protocol based VLAN Configuration Description Show VCL protocol based VLAN entries Syntax VCL ProtoVlan Conf 526 ...

Page 527: ...is packet will be filtered Thereby increasing the network throughput and availability 7 4 Store and Forward Store and Forward is one type of packet forwarding techniques A Store and Forward Ethernet Switching stores the incoming frame in an internal buffer do the complete error checking before transmission Therefore no error packets occurrence it is the best choice when a network needs efficiency ...

Page 528: ...n or Reset This is done by detect the modes and speeds at the second of both device is connected and capable of both 10Base T and 100Base TX devices can connect with the port in either Half or Full Duplex mode If attached device is 100Base TX port will set to 10Mbps no auto negotiation 10Mbps 10Mbps with auto negotiation 10 20Mbps 10Base T Full Duplex 100Mbps no auto negotiation 100Mbps 100Mbps wi...

Page 529: ...an device is placed between legacy switch and the powered device Mid Span is tap the unused wire pairs 4 5 and 7 8 to carry power the other four is for data transmit End Span End Span device is direct connecting with power device End Span could also tap the wire 1 2 and 3 6 PoE System Architecture The specification of PoE typically requires two devices the Powered Source Equipment PSE and the Powe...

Page 530: ...r Supplied over the Data Pins When to install PoE Consider the following scenarios You re planning to install the latest VoIP Phone system to minimize cabling building costs when your company moves into new offices next month The company staff has been clamoring for a wireless access point in the picnic area behind the building so they can work on their laptops through lunch but the cost of electr...

Page 531: ...y or electrically disconnected Upon disconnection voltage and power shut down Since the PSE is responsible for the PoE process timing it is the one generating the probing signals prior to operating the PD and monitoring the various scenarios that may occur during operation All probing is done using voltage induction and current measurement in return Stages of powering up a PoE link Stage Action Vo...

Page 532: ... at the PSE port due to the PD s input capacitance A PD must be designed to cease inrush current consumption of over 350 mA within 50 ms of power provision startup Operation During normal operation the PSE provides 44 57 VDC able to support a minimum of 15 4 watts power Power Overloads The IEEE 802 3af standard defines handling of overload conditions In the event of an overload a PD drawing a high...

Page 533: ...thod is based on the fact that when a valid PD is connected to a port the AC impedance measured on its terminals is significantly lower than in the case of an open port disconnected PD AC Disconnect detection involves the induction of low AC signal in addition to the 48 VDC operating voltage The returned AC signal amplitude is monitored by the PSE at the port terminals During normal operation the ...

Page 534: ...mance will be poor Please also check the in out rate of the port Why the Switch doesn t connect to the network Solution 1 Check the LNK ACT LED on the switch 2 Try another port on the Switch 3 Make sure the cable is installed properly 4 Make sure the cable is the right type 5 Turn off the power After a while turn on power again 100Base TX port link LED is lit but the traffic is irregular Solution ...

Page 535: ...P Address be changed or forgotten admin password To reset the IP address to the default IP Address 192 168 0 100 or reset the password to default value Press the hardware reset button at the front panel about 10 seconds After the device is rebooted you can login the management WEB interface within the same subnet of 192 168 0 xx Reset 535 ...

Page 536: ...When connecting your 10 100Mbps Ethernet Switch to another switch a bridge or a hub a straight or crossover cable is necessary Each port of the Switch supports auto MDI MDI X detection That means you can directly connect the Switch to any Ethernet devices without making a crossover cable The following table and diagram show the standard RJ 45 receptacle connector and their pin assignments RJ 45 Co...

Page 537: ...ite Green 4 Blue 5 White Blue 6 Green 7 White Brown 8 Brown 1 White Orange 2 Orange 3 White Green 4 Blue 5 White Blue 6 Green 7 White Brown 8 Brown Crossover Cable SIDE 1 SIDE2 SIDE 1 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 SIDE 2 1 White Orange 2 Orange 3 White Green 4 Blue 5 White Blue 6 Green 7 White Brown 8 Brown 1 White Green 2 Green 3 White Orange 4 Blue 5 White Blue 6 Orange 7 White Brown 8 Brown F...

Page 538: ...with the manual ACL configuration ACL Access Control List The web page shows the ACEs in a prioritized way highest top to lowest bottom Default the table is empty An ingress frame will only get a hit on one ACE even though there are more matching ACEs The first matching ACE will take action permit deny on that frame and a counter associated with that ACE is incremented An ACE can be associated wit...

Page 539: ...ion Link Aggregation ARP ARP is an acronym for Address Resolution Protocol It is a protocol that used to convert an IP address into a physical address such as an Ethernet address ARP allows a host to communicate with other hosts when only the Internet address of its neighbors is known Before using IP the host sends a broadcast ARP request containing the Internet address of the desired destination ...

Page 540: ...cronym for Dynamic Host Configuration Protocol It is a protocol used for assigning dynamic IP addresses to devices on a network DHCP used by networked computers clients to obtain IP addresses and other parameters such as the default gateway subnet mask and IP addresses of DNS servers from a DHCP server The DHCP server ensures that all IP addresses are unique for example no IP address is assigned t...

Page 541: ... DHCP Snooping DHCP Snooping is used to block intruder on the untrusted ports of the switch device when it tries to intervene by injecting a bogus DHCP reply packet to a legitimate conversation between the DHCP client and server DNS DNS is an acronym for Domain Name System It stores and associates many types of information with domain names Most importantly DNS translates human friendly domain nam...

Page 542: ...nsfer or convey information on the World Wide Web WWW HTTP defines how messages are formatted and transmitted and what actions Web servers and browsers should take in response to various commands For example when you enter a URL in your browser this actually sends an HTTP command to the Web server directing it to fetch and transmit the requested Web page The other main standard that controls how t...

Page 543: ...ithin the network IGMP IGMP is an acronym for Internet Group Management Protocol It is a communications protocol used to manage the membership of Internet Protocol multicast groups IGMP is used by IP hosts and adjacent multicast routers to establish multicast group memberships It is an integral part of the IP multicast specification like ICMP for unicast connections IGMP can be used for online vid...

Page 544: ... an acronym for IP MultiCast IP Source Guard IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the DHCP Snooping Table or manually configured IP Source Bindings It helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host L LACP LACP is an IEEE 802 3ad standard protocol The Link A...

Page 545: ...update the MAC table with these dynamic MAC addresses Dynamic entries are removed from the MAC table if no frame with the corresponding SMAC address have been seen after a configurable age time MEP MEP is an acronym for Maintenance Entity Endpoint and is an endpoint in a Maintenance Entity Group ITU T Y 1731 MD5 MD5 is an acronym for Message Digest algorithm 5 MD5 is a message digest algorithm use...

Page 546: ...etwork Basic Input Output System It is a program that allows applications on separate computers to communicate within a Local Area Network LAN and it is not supported on a Wide Area Network WAN The NetBIOS giving each computer in the network both a NetBIOS name and an IP address corresponding to a different host name provides the session and transport services described in the Open Systems Interco...

Page 547: ... bit field storing the priority level for the 802 1Q frame It is also known as User Priority PD PD is an acronym for Powered Device In a PoE system the power is delivered from a PSE power sourcing equipment to a remote device The remote device is called a PD PHY PHY is an abbreviation for Physical Interface Transceiver and is the device that implement the Ethernet physical layer IEEE 802 3 PING pi...

Page 548: ...for organizing it in folders on the server IMAP can be thought of as a remote file server POP and IMAP deal with the receiving of e mail and are not to be confused with the Simple Mail Transfer Protocol SMTP You send e mail with SMTP and a mail handler receives it on your recipient s behalf Then the mail is read using POP or IMAP IMAP4 and POP3 are the two most prevalent Internet standard protocol...

Page 549: ...rts a multitude of applications and data including high quality video and delay sensitive data such as real time voice Networks must provide secure predictable measurable and sometimes guaranteed services Achieving the required QoS becomes the secret to a successful end to end business solution Therefore QoS is the set of techniques to manage network resources R RARP RARP is an acronym for Reverse...

Page 550: ...y NSA and published by the NIST as a U S Federal Information Processing Standard Hash algorithms compute a fixed length digital representation known as a message digest of an input data sequence the message of any length Shaper A shaper can limit the bandwidth of transmitted frames It is located after the ingress queues SMTP SMTP is an acronym for Simple Mail Transfer Protocol It is a text based p...

Page 551: ...des confidentiality and integrity of data over an insecure network The goal of SSH was to replace the earlier rlogin TELNET and rsh protocols which did not provide strong authentication or guarantee confidentiality Wikipedia SSM SSM In SyncE this is an abbreviation for Synchronization Status Message and is containing a QL indication STP Spanning Tree Protocol is an OSI layer 2 protocol which ensur...

Page 552: ...TELNET TELNET is an acronym for TELetype NETwork It is a terminal emulation protocol that uses the Transmission Control Protocol TCP and provides a virtual connection between TELNET server and TELNET client TELNET enables the client to control the server and communicate with other servers on the network To start a Telnet session the client user must log in to a server by entering a valid username ...

Page 553: ...a units to exchange may prefer UDP to TCP UDP provides two services not provided by the IP layer It provides port numbers to help distinguish different user requests and optionally a checksum capability to verify that the data arrived intact Common network applications that use UDP include the Domain Name System DNS streaming media applications such as IPTV Voice over IP VoIP and Trivial File Tran...

Page 554: ...re IEEE 802 11 wireless networks Wireless networks broadcast messages using radio so are more susceptible to eavesdropping than wired networks When introduced in 1999 WEP was intended to provide confidentiality comparable to that of a traditional wired network Wikipedia WiFi WiFi is an acronym for Wireless Fidelity It is meant to be used generically when referring of any type of 802 11 network whe...

Page 555: ...cation server which distributes different keys to each user Personal WPA utilizes less scalable pre shared key PSK mode where every allowed computer is given the same passphrase In PSK mode security depends on the strength and secrecy of the passphrase The design of WPA is based on a Draft 3 of the IEEE 802 11i standard Wikipedia WPS WPS is an acronym for Wi Fi Protected Setup It is a standard for...

Page 556: ... A1 2009 A2 2009 EN 61000 3 3 2008 EN 55024 2010 IEC 61000 4 2 2008 IEC 61000 4 3 2006 A1 2007 A2 2010 IEC 61000 4 4 2004 A1 2010 IEC 61000 4 5 2005 IEC 61000 4 6 2008 IEC 61000 4 8 2009 IEC 61000 4 11 2004 Responsible for marking this declaration if the Manufacturer Authorized representative established within the EU Authorized representative established within the EU if applicable Company Name P...

Page 557: ...06 A1 2009 A2 2009 EN 61000 3 3 2008 EN 55024 2010 IEC 61000 4 2 2008 IEC 61000 4 3 2006 A1 2007 A2 2010 IEC 61000 4 4 2004 A1 2010 IEC 61000 4 5 2005 IEC 61000 4 6 2008 IEC 61000 4 8 2009 IEC 61000 4 11 2004 Responsible for marking this declaration if the Manufacturer Authorized representative established within the EU Authorized representative established within the EU if applicable Company Name...

Reviews:

No comments