background image

 

 

- 51 - 

 

Figure 4-61

 Access Control List (ACL) Web Page screen 

 

Figure 4-62

 Access Control List (ACL) Web Page screen 

 

For more detail information about Access Control List applications, please refer to Appendix B at 

page 71

 

 

 

 

Summary of Contents for FGSW-2402VS

Page 1: ...User s Manual FGSW 2402VS FGSW 2620VSF FGSW 2624SF 24 Port 10 100Mbps with 2 Gigabit Web Smart Ethernet Switch 1 ...

Page 2: ...our com ments and suggestions FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if no...

Page 3: ...N group 31 4 5 6 Configure Advanced 802 1Q VLAN Setting 34 4 5 7 Edit existence 802 1Q VLAN group 36 4 5 8 Delete existence 802 1Q VLAN group 37 4 6 PORT MONITORING 39 4 7 QOS CONFIGURATION 40 4 8 PORT COUNTERS 43 4 9 ACCESS CONTROL LIST 44 4 10 WEB SMART FUNCTION 52 4 11 MISC OPERATION 57 4 11 1 Switch Configuration 58 4 11 2 TFTP Firmware Upgrade 61 4 11 3 Password Setting 62 4 11 4 IP Configura...

Page 4: ... 4 Case 5 Deny Specify Protocol HTTP WWW 86 Case 6 Deny Specify Protocol SMTP 88 ...

Page 5: ...n be 1000Base T for 10 100 1000Mbps or 1000Base SX LX through SFP Small Factor Pluggable interface The distance can be extended from 100 meters TP 550 meters Multi mode fiber up to above 10 50 70 120 kilometers Single mode fiber Both Web Smart Switches are equipped with non blocking 8 8Gbps backplane greatly simplifies the tasks of upgrading your LAN to cater for increased bandwidth demands For ef...

Page 6: ... setup Support IEEE 802 1Q Tagged VLAN Support up to 26 port based VLAN groups Support up to 7 Trunk groups each trunk for up to maximum 8 port with 800Mbps bandwidth Port mirroring allows monitoring of the traffic across any port in real time Support QoS and bandwidth control on each port Supports Access Control List function 19 inch rack mount size Internal full range power supply suitable for w...

Page 7: ...ode selection Flow control disable enable and bandwidth control on each port Trunk Configuration Support 7 groups of 8 Port trunk support VLAN Configuration Maximum up to 26 VLAN groups for both Port based VLAN and 802 1Q VLAN Port Monitoring One Mirroring port to monitor one mirrored port The monitor modes are RX TX and RX TX QoS Configuration IEEE 802 1p QoS on each port Port counters Display de...

Page 8: ...two open slots can be installed by optionally two of 1000Base T port 100Base FX or 1000Base SX LX fiber optic interfaces The FGSW 2620VSF provides 2 Gigabit TP SFP combo ports either can be 1000Base T for 10 100 1000Mbps or 1000Base SX LX through SFP Small Factor Pluggable interface For the Fiber switch FGSW 2624SF it provides 24 100Base FX Fast Ethernet ports and 2 Gigabit TP SFP combo ports The ...

Page 9: ...e switch is actively sending or receiving data over that port Notice 1 Press the RESET button once The Web Smart Switch will reboot automatically 2 Press the RESET button for 5 seconds The Web Smart Switch will back to the factory default mode the entire configuration will be erased 3 The FGSW 2402VSv2 must work with MII V series module for 100Base FX fiber connection 4 The 2 Gigabit TP SFP combo ...

Page 10: ...front of the Web Smart Switch ork devices such as printer servers workstations or routers etc or Connect your Switch to network devices A B Connect the other end of the cable to the netw Notice more information please see the Cabling Specification in Appendix A Connection to the Web Smart Switch requires UTP Category 5 network cabling with RJ 45 tips F Step 5 Connect one end of the power cable to ...

Page 11: ...cribe how to insert an SFP transceiver into an SFP slot The SFP transceivers are hot plug e and hot swappable You can plug in and out the transceiver to from any SFP port e Figure 2 8 appears 2 3 3 Installing the SFP transceiver T without having to power down the Switch As th Figure 2 8 Plug in the SFP transceiver Approved PLANET SFP Transceivers PLANET Web Smart switches support both single mode ...

Page 12: ...C on a workstation or a Media P transceiver is operating 4 P port if the link failed Co works with some fiber NICs or Media Converters set the connect the other switches workstation or Media Converter 1 2 Check the fiber optic cable type match the SFP transfer model To connect to 1000Base SX SFP transfer use the multi mode fiber cable with one side must be male duplex LC connector type To connect ...

Page 13: ...on 3 2 1 Web Management You can manage the Web Smart Switch remotely by having a remote host with web browser such as Microsoft Internet Explorer or Netscape Navigator Using this management method The Web Smart Switch must have an Internet Protocol IP address accessible for the remote host 3 3 Logging on to the Web Smart Switch When you log on to the Web Smart Switch Web interface for the first ti...

Page 14: ...onsole screens of FGSW 2620VSF for FGSW 2402VS and FGSW 2624SF the display will be the same to FGSW 2620VSF 4 1 Login in to the Switch To access the Web browser interface you must first enter the user name and password the default user name and password is admin You will see the following screen comes out on the Web browser program Figure 4 1 Web login screen After the User name and Password is en...

Page 15: ...creen 4 2 Port Status This section provides current status of each port from Web Smart Switch the screen in Figure 4 3 appears and table 4 1 describes the port status object of Web Smart Switch Figure 4 3 Port Status Web Page screen ...

Page 16: ...ption Port Indicate port 1 to port 26 Enable Display the port Disable or Enable state of each port on Web Smart Switch Link Status The state of the link indicating a valid link partner device Up means a device is successful con nected to the port Down means no device is connected Spd Dpx Display the Speed duplex mode of each port on Web Smart Switch Flow Control Display the flow control On or Off ...

Page 17: ...available options are Auto 100F 100H 10F 10H Default mode is Auto Flow Control Per port Flow control Disable Off or enable On on Web Smart Switch Default mode is On InRate Input the value of packet rate sent from the connected port to this port must enable the flow control feature of this port for the function to work normally The available value ranges from 1 to 99 and rate unit 1Mbps OutRate Inp...

Page 18: ...k group provides 2 to 8 member ports Please check the member port from Normal to 7 trunk groups and the screen in Figure 4 6 4 7 appears Figure 4 6 Trunk Configuration Web Page screen Figure 4 7 Trunk Configuration Web Page screen After setup completed please press Apply button to take effect and the screen in Figure 4 8 appears ...

Page 19: ...configuration screen for further configuration If the member port from each trunk group is out of range or less than 2 ports than the following screen appears Figure 4 9 Trunk Configuration Web Page screen Please press Back for return to Trunk configuration screen for adds other trunk group ...

Page 20: ...N and Port Based VLAN The Port Based VLAN supports up to 26 VLAN groups In the default configuration with VLAN disable the screen in Figure 4 10 appears Figure 4 10 VLAN Setting Web Page screen 4 5 1 Enable port based VLAN function and add a port based VLAN group Select PortBased and press Apply button to enable the port based VLAN function then the Web Smart Switch will reboot for take affect The...

Page 21: ...creen Press Relogin to re login the Web Smart Switch and the screen in Figure 4 12 appears Figure 4 12 Port based VLAN Setting Web Page screen After login web interface of Web Smart Switch and choose VLAN configuration the screen in Figure 4 13 appears ...

Page 22: ... 1 Input a VLAN group ID and available range is 1 4094 2 Select specific port as member port and the screen in Figure 4 14 appears 3 After setup completed please press Apply button to take effect and the screen in Figure 4 15 appears 4 Please press Back for return to VLAN configuration screen to add other VLAN group the screen in Figure 4 16 appears ...

Page 23: ... 23 Figure 4 14 Port based VLAN Setting Web Page screen Figure 4 15 Port based VLAN Setting Web Page screen ...

Page 24: ... 24 Figure 4 16 Port based VLAN Setting Web Page screen ...

Page 25: ...fic port as member port and the screen in Figure 4 17 appears 2 After setup completed please press Apply button to take effect and the screen in Figure 4 18 appears 3 Please press Back for return to VLAN configuration screen to continue VLAN configuration Figure 4 17 Edit Port based VLAN Setting Web Page screen Figure 4 18 Edit Port based VLAN Setting Web Page screen ...

Page 26: ...elete button to delete existence port based VLAN group 3 Then the Delete all checked groups window appears please press OK to continue the delete VLAN group procedure and the screen in Figure 4 20 appears 4 Please press Back for return to VLAN configuration screen to continue VLAN configuration The screen in Figure 4 21 4 22 appears Figure 4 19 Delete Port based VLAN group Web Page screen ...

Page 27: ... 27 Figure 4 20 Delete Port based VLAN group Web Page screen Figure 4 21 Delete Port based VLAN group Web Page screen ...

Page 28: ...based VLAN function Select Disable and pop window appears press OK to disable the port based VLAN function then the Web Smart Switch will reboot for take affect The screen in Figure 4 23 4 24 4 25 4 26 4 27 appears Figure 4 23 Disable Port based VLAN function Web Page screen ...

Page 29: ... 29 Figure 4 24 Disable Port based VLAN function Web Page screen Figure 4 25 Disable Port based VLAN function Web Page screen ...

Page 30: ... 30 Figure 4 26 Disable Port based VLAN function Web Page screen Figure 4 27 Disable Port based VLAN function Web Page screen ...

Page 31: ...itch will reboot for take affect The screen in Figure 4 28 appears Figure 4 28 802 1Q VLAN Setting Web Page screen Press Relogin to re login the Web Smart Switch and the screen in Figure 4 29 appears Figure 4 29 802 1Q VLAN Setting Web Page screen After login web interface of Web Smart Switch and choose VLAN configuration the screen in Figure 4 30 appears ...

Page 32: ... available range is 1 4094 2 Select specific port as member port and the screen in Figure 4 31 appears 3 After setup completed please press Apply button to take effect and the screen in Figure 4 32 appears 4 Please press Back for return to VLAN configuration screen to add other VLAN group the screen in Figure 4 33 appears Figure 4 31 802 1Q VLAN Setting Web Page screen ...

Page 33: ...VLANs one at a time The VLAN group ID and available range is 2 4094 Port Indicate port 1 to port 26 Forbidden ports are not included in the VLAN Untagged Packets forwarded by the interface are untagged VLAN Type Tagged Defines the interface as a tagged member of a VLAN All packets forwarded by the interface are tagged The packets contain VLAN information ...

Page 34: ...N Setting Web Page screen 4 5 6 Configure Advanced 802 1Q VLAN Setting Click Advanced 802 1Q VLAN Setting to set the per port 802 1Q VLAN function The screen in Figure 4 34 appears Figure 4 34 802 1Q VLAN Setting Web Page screen ...

Page 35: ...ce with the 802 1Q VLAN bridge specification The factory default is disabled Untagged frames or priority tagged frames received on this port are accepted and assigned the value of the Port VLAN ID for this port All Acceptable Frame Types Tagged only Untagged frames or priority tagged frames received on this port are discarded PVID Allow assign PVID for selected port The range for the PVID is 1 409...

Page 36: ...fic port as member port and the screen in Figure 4 35 appears 2 After setup completed please press Apply button to take effect and the screen in Figure 4 36 appears 3 Please press Back for return to VLAN configuration screen to continue VLAN configuration Figure 4 34 Edit 802 1Q VLAN Setting Web Page screen Figure 4 36 Edit 802 1Q VLAN Setting Web Page screen ...

Page 37: ...nce port based VLAN group 3 Then the Delete all checked groups window appears please press OK to continue the delete VLAN group procedure and the screen in Figure 4 38 appears 4 Please press Back for return to VLAN configuration screen to continue VLAN configuration The screen in Figure 4 39 4 40 appears Figure 4 37 Delete 802 1Q VLAN group Web Page screen Figure 4 38 Delete 802 1Q VLAN group Web ...

Page 38: ... 38 Figure 4 39 Delete 802 1Q VLAN group Web Page screen Figure 4 40 802 1Q VLAN group Web Page screen ...

Page 39: ...Monitoring Web Page screen Table 4 3 Descriptions of the Port Monitoring screen Objects Object Description Port Monitoring Mode Provide Disable RX TX and RX TX different modes for port Monitoring function Default mode is Disable Monitoring Port The monitoring port can be used to see all monitor port traffic It can connect monitoring port to LAN analyzer or Netxray Monitored Port The monitored port...

Page 40: ...ghest secHigh SecLow Lowest 8 4 2 1 Highest secHigh SecLow Lowest 15 7 3 1 Highest secHigh SecLow Lowest 15 10 5 1 Default mode is Highest secHigh SecLow Lowest 8 4 2 1 the screen in Figure 4 43 ap pears Static Port Ingress Priority Allow to assign Ingress priority on each port of Web Smart Switch the available options are OFF and 0 7 Default mode is 0 and the screen in Figure 4 44 appears 802 1p ...

Page 41: ... 41 Figure 4 43 QoS Configuration Web Page screen Figure 4 44 QoS Configuration Web Page screen ...

Page 42: ... 42 Figure 4 45 QoS Configuration Web Page screen ...

Page 43: ...or administrator to monitor each port s usage condition Also it is helpful to troubleshooting network problems The screen in Figure 4 46 4 47 appears Figure 4 46 Port Counters Web Page screen Figure 4 47 Port Counters Web Page screen Press ClearAllCntr button to refresh current per port counters on Web Smart Switch ...

Page 44: ... screen Objects Object Description Group id Input a group ID and available range is 1 255 Action To assign Permit or Deny for Access Control List the screen in Figure 4 49 appears VLAN To choose VLAN type as Any or by VID 1 4094 the screen in Figure 4 50 appears Packet Type To choose Packet type as IPv4 or by Non IPv4 the screen in Figure 4 51 appears IP Fragment To decide to check or Uncheck the ...

Page 45: ... 45 Figure 4 49 Access Control List ACL Web Page screen Figure 4 50 Access Control List ACL Web Page screen ...

Page 46: ... 46 Figure 4 51 Access Control List ACL Web Page screen Figure 4 52 Access Control List ACL Web Page screen ...

Page 47: ... 47 Figure 4 53 Access Control List ACL Web Page screen Figure 4 54 Access Control List ACL Web Page screen ...

Page 48: ... 48 Figure 4 55 Access Control List ACL Web Page screen Figure 4 56 Access Control List ACL Web Page screen ...

Page 49: ... 49 Figure 4 57 Access Control List ACL Web Page screen Figure 4 58 Access Control List ACL Web Page screen ...

Page 50: ... 50 Figure 4 59 Access Control List ACL Web Page screen Figure 4 60 Access Control List ACL Web Page screen ...

Page 51: ...igure 4 61 Access Control List ACL Web Page screen Figure 4 62 Access Control List ACL Web Page screen For more detail information about Access Control List applications please refer to Appendix B at page 71 ...

Page 52: ...4 Router 5 AP 6 Server 7 Printer 8 Guest 9 Other The screen in Figure 4 64 appears and the setup procedure shown as below 1 Choose a device from options of Select a port function the screen in Figure 4 65appears 2 Check the port that need to marked the screen in Figure 4 66 appears 3 After setup completed press Save to save current configuration the screen in Figure 4 67 appears 4 Please press Bac...

Page 53: ... 53 Figure 4 64 Web Smart Funciton Web Page screen Figure 4 65 Web Smart Funciton Web Page screen ...

Page 54: ...device and check Apply for all ports from options of Select a port function the screen in Figure 4 67appears 2 Check any port then all port will be select the screen in Figure 4 68 appears 3 After setup completed press Save to save current configuration the screen in Figure 4 69 appears 4 Please press Back for return to Web Smart Function screen the screen in Figure 4 70 appears ...

Page 55: ... 55 Figure 4 67 Web Smart Function Web Page screen Figure 4 68 Web Smart Funciton Web Page screen ...

Page 56: ... 56 Figure 4 69 Web Smart Funciton Web Page screen Figure 4 70 Web Smart Funciton Web Page screen ...

Page 57: ...detail description TFTP Firmware Up date Provide firmware upgrade on Web Smart Switch please refer to section 4 11 2 for detail de scription Password Setting Provide password setting on Web Smart Switch please refer to section 4 11 3 for detail de scription IP Configuration Provide IP address configuration on Web Smart Switch please refer to section 4 11 4 for detail description Factory Default Pr...

Page 58: ...a packet meet a collision the Web Smart Switch will retry 6 times before discard the packets Otherwise the Web Smart Switch will retry until the packet is successfully sent Default mode is Enable and the screen in Figure 4 73 appears MAC Table Auto Aging Provide MAC address table aging time setting on Web Smart Switch available options are Dis able 150 sec 300 sec 600 sec Default mode is 300 sec a...

Page 59: ... 59 Figure 4 73 Switch Configuration Web Page screen Figure 4 74 Switch Configuration Web Page screen ...

Page 60: ... 60 Figure 4 75 Switch Configuration Web Page screen Figure 4 76 Switch Configuration Web Page screen ...

Page 61: ... 61 4 11 2 TFTP Firmware Upgrade This section provides Firmware upgrade through TFTP method on Web Smart Switch the screen in Figure 4 77 ap pears Figure 4 77 TFTP Firmware Update Web Page screen ...

Page 62: ...on Password Pro tection Provide Password protection function Disable or Enable on Web Smart Switch Default mode is Enable User Name Provide to modify password on Web Smart Switch and maximum up to six characters Default User Name is admin New Password Provide to modify and input a new password on Web Smart Switch maximum up to six characters Default password is admin Password Again Provide to inpu...

Page 63: ...t IP address is 192 168 0 100 Subnet Mask Provide to modify Subnet Mask on Web Smart Switch Default Subnet Mask is 255 255 255 0 Default Gateway Provide to modify Default Gateway on Web Smart Switch Default Gateway is 192 168 0 254 Apply button Press this button for save current IP Configuration on Web Smart Switch Once press the Apply button then the pop window with IP changed Please Click OK to ...

Page 64: ...reen appears in Figure 4 80 Please press OK button to take effect and the switch will reset to factory default mode and ask you to waiting rebooting around 10 sec press OK button to re login the Web Smart Switch The screen in Figure 4 81 4 82 4 83 appears Figure 4 80 Factory Default Web Page screen Figure 4 81 Factory Default Web Page screen ...

Page 65: ... 65 Figure 4 82 Factory Default Web Page screen Figure 4 83 Factory Default Web Page screen ...

Page 66: ...he following screen appears in Figure 4 84 Please press OK button to take effect and the switch will reboot and ask you to waiting rebooting around 10 sec press OK button to re login the Web Smart Switch The screen in Figure 4 85 4 86 4 87 appears Figure 4 84 Reboot Web Page screen Figure 4 85 Reboot Web Page screen ...

Page 67: ... 67 Figure 4 86 Reboot Web Page screen Figure 4 87 Reboot Web Page screen ...

Page 68: ... 11 7 System Information This section display system information on Web Smart Switch after choose this function and the following screen ap pears in Figure 4 88 Figure 4 88 System Information Web Page screen ...

Page 69: ...tch after choose this function and the following screen appears in Figure 4 89 Please press OK button to take effect and Logout pop window appears press OK button to re login the Web Smart Switch The screen in Figure 4 90 4 91 4 92 appears Figure 4 89 Logout Web Page screen ...

Page 70: ... 70 Figure 4 90 Logout Web Page screen Figure 4 91 Logout Web Page screen ...

Page 71: ... 71 Figure 4 92 Logout Web Page screen ...

Page 72: ...er do the complete error checking before transmission Therefore no error packets occurrence it is the best choice when a network needs efficiency and stability The Ethernet Switch scans the destination address from the packet header searches the routing table provided for the incoming port and forwards the packet only if required The fast forwarding makes the switch attractive for connecting serve...

Page 73: ...r is set to half duplex then the performance will be poor 100Base TX port link LED is lit but the traffic is irregular Solution Check that the attached device is not set to dedicate full duplex Some devices use a physical or software switch to change duplex modes Auto negotiation may not recognize this type of full duplex setting Why the Switch doesn t connect to the network Solution Check the LNK...

Page 74: ...DB BI_DA 7 BI_DD BI_DC 8 BI_DD BI_DC 10 100Mbps 10 100Base TX RJ 45 Connector pin assignment Contact MDI Media Dependant Interface MDI X Media Dependant Interface Cross 1 Tx transmit Rx receive 2 Tx transmit Rx receive 3 Rx receive Tx transmit 4 5 Not used 6 Rx receive Tx transmit 7 8 Not used A 2 RJ 45 cable pin assignment 21 3 6 1 2 3 6 21 3 6 The standard RJ 45 receptacle connector ...

Page 75: ... following shows the pin allocation and color of straight cable and crossover cable connection Figure A 1 Straight Through and Crossover Cable Please make sure your connected cables are with same pin assignment and color as above picture before deploying the cables into your network ...

Page 76: ...cified created using the ACL Rule Configuration menu ACL Concepts FGSW ACL Configure screen Object Description Group id Input a group ID and available range is 1 255 Action To assign Permit or Deny for Access Control List VLAN To choose VLAN type as Any or by VID 1 4094 Packet Type To choose Packet type as IPv4 or by Non IPv4 IP Fragment To decide to check or Uncheck the IP fragment L4 Protocol Pr...

Page 77: ...CL configure Due to the ACL will check the VLAN ID if necessary the VLAN mode must be set to Port Based or 802 1Q mode And once the VLAN mode is changed the system has to reboot to apply the new settings To set up the VLAN mode click the VLAN Configuration at the Function Menu tree The VLAN mode page appears as the following ...

Page 78: ...2 Once the deny policy be applied all IP packets from the target Host IP Address will be dropped 3 No matter IP packets form the target be transmitted to Internet or Intranet within the same IP segment they will be dropped Case Design Action DENY Match IP Source IP Address Host IP 192 168 1 1 255 255 255 255 Destination IP Address ANY Device Connection and Configuration Stream Target ID Source Add...

Page 79: ... 79 ACL Policy Entry ...

Page 80: ...ny policy be applied all IP packets from the targets IP Addresses will be dropped 3 No matter IP packets form the targets be transmitted to Internet or Intranet within the same IP segment they will be dropped Case Design Action DENY Match IP Source IP Address Class C 192 168 1 0 255 255 255 0 Destination IP Address ANY Device Connection and Configuration Stream Target ID Source Address Destination...

Page 81: ... 81 ACL Policy Entry ...

Page 82: ...h will be dropped if the Destination IP Addresses match specific Class C 2 Any packets pass through the switch will be forwarded if the Destination IP Addresses not match specific Class C Case Design Action DENY Match IP Source IP Address Any Destination IP Address Class C 172 16 0 0 255 255 255 0 Device Connection and Configuration Stream Target ID Source Address Destination Address Protocol Any ...

Page 83: ... 83 ACL Policy Configuration ACL Policy Entry ...

Page 84: ... ID no matter the rule defined as permit or deny 1 Packets with VLAN ID specific ACL VLAN ID will be dropped 2 Packets with VLAN ID not match the specific ACL VLAN ID will be forwarded Case Design Action DENY Match VLAN Source IP Address ANY Destination IP Address ANY Device Connection and Configuration ACL Policy Configuration ...

Page 85: ... 85 ...

Page 86: ...ocol match the specific ACL protocol will be dropped 2 Packets with Layer 4 protocol not match the specific ACL protocol will be forwarded Case Design Action DENY Match Protocol Service Type HTTP WWW Port 80 Source IP Address Host Destination IP Address ANY Device Connection and Configuration Stream Target ID Source Address Destination Address Protocol Host 5 192 168 1 1 255 255 255 255 ANY HTTP P...

Page 87: ... 87 ACL Policy Entry ...

Page 88: ...ic Host IP Address will be dropped 2 Other packets from specific Host IP Address will be forwarded Case Design Action DENY Match Protocol Service Type SMTP Port 25 Source IP Address Host Destination IP Address ANY Device Connection and Configuration ACL Policy Configuration ...

Page 89: ... 89 ACL Policy Entry 2080 A81030 001 ...

Reviews: