background image

FGSW-2620VM User’s Manual 

4.3.1.2 802.1Q Ingress Filter 

This section provides 802.1Q Ingress Filter of each port from the Switch, the screen in 

Figure 4-3-5

 appears. 

 

Figure 4-3-5 

802.1Q Ingress filter interface 

OObject 

Description 

Ingress Filter 

Ingress filtering lets frames belonging to a specific VLAN to be forwarded if the port 

belongs to that VLAN.   

Enable:

 Forward only packets with VID matching this port's configured VID.   

Disable:

 Disable Ingress filter function. 

Acceptable Frame type 

ALL: 

Acceptable all Packet. 

Tag Only:

 Only packet with match VLAN ID can be permission to go through the 

port. 

PVID 

Set the port VLAN ID that will be assigned to untagged traffic on a given port. This 

feature is useful for accommodating devices that you want to participate in the 

VLAN but that don't support tagging. The switch each port allows user to set one 

VLAN ID, the range is 1~255, default VLAN ID is 1. The VLAN ID must as same as 

the VLAN ID that the port belong to VLAN group, or the untagged traffic will be 

dropped. 

Save button 

Press the button to save configurations. 

 

40 

Summary of Contents for FGSW-2620VM Series

Page 1: ...FGSW 2620VM User s Manual User s Manual FGSW 2620VM 24 Port 10 100Mbps with 2G TP SFP Combo Managed Ethernet Switch 1...

Page 2: ...you find information in this manual that is incorrect misleading or incomplete we would appreciate your comments and suggestions FCC Warning This equipment has been tested and found to comply with the...

Page 3: ...FGSW 2620VM User s Manual Revision PLANET Managed Ethernet Switch User s Manual FOR MODELS FGSW 2620VM REVISION 1 0 APRIL 2007 Part No 2080 A92350 000 3...

Page 4: ...Install the Switch 11 2 2 1 Desktop Installation 11 2 2 2 Rack Mounting 11 2 2 3 Installing the SFP transceiver 12 3 SWITCH MANAGEMENT 15 3 1 About Web based Management 15 3 2 Preparing for Web Manag...

Page 5: ...3 4 5 Security 54 4 5 1 802 1x Radius 54 4 5 2 Access Control List 64 4 5 3 Static MAC Address 65 4 5 4 MAC Filter 66 4 5 5 IP Secuity 67 5 Switch Operation 69 5 1 Address Table 69 5 2 Learning 69 5 3...

Page 6: ...llows Chapter 2 Installation The chapter explains the functions of the Switch and how to physically install the Switch Chapter 3 SWITCH MANAGEMENT The chapter explains how to manage the switc Chapter...

Page 7: ...IEEE 802 1w IGMP snooping and IGMP Query mode for Multi media application Broadcast storm filter Port mirroring allows monitoring of the traffic across any port in real time Quality of Service Support...

Page 8: ...iguration Support 13 groups of 8 Port trunk support VLAN Configuration IEEE 802 1Q Tag Based VLAN and Port based VLAN supports maximum up to 26 VLAN groups Spanning Tree Protocol IEEE 802 1w Rapid Spa...

Page 9: ...tandard based firmware provides a rich set of features and ensures interoperability with equipment from other vendors Additionally the firmware includes advanced features such as IGMP snooping broadca...

Page 10: ...on LNK ACT 1000 Green Lit indicate that the port is operating at 1000Mbps Off indicate that the port is operating at 10Mbps or 100Mbps Blink indicate that the switch is actively sending or receiving d...

Page 11: ...ugh ventilation space between the switch and the surrounding objects Note When choosing a location please keep in mind the environmental restrictions discussed in Chapter 1 Section 4 in Specification...

Page 12: ...et to the opposite side Step5 After the brackets are attached to the Switch use suitable screws to securely attach the brackets to the rack as shown in Figure 2 6 Figure 2 6 Mounting the Switch in a R...

Page 13: ...upported the Switch will not recognize it Before connect the other switches workstation or Media Converter 1 Make sure both side of the SFP transceiver are with the same media type for example 1000Bas...

Page 14: ...of the SFP slot on the front of the Switch Ensure that the SFP transceiver is operating correctly 4 Check the Link mode of the SFP port if the link failed Co works with some fiber NICs or Media Conver...

Page 15: ...lt IE5 0 or later version does not allow Java Applets to open sockets The user has to explicitly modify the browser setting to enable Java Applets to use network ports 3 2 Preparing for Web Management...

Page 16: ...of the Web based management appears Figure 3 4 FGSW 2620VM Web Management Interface 3 5 View the Port Information You can direct click the port on the Switch figure on the top of web page Then you wil...

Page 17: ...ment TFTP Upgrade Factory Default System Reboot We will describe the configure detail in following 4 1 1 System Information In System information it has two parts of setting basic and advanced We will...

Page 18: ...ide Collision Retry Forever function Disable or Enable on Switch If this function is disabled when a packet meet a collision the Switch will retry 6 times before discard the packets Otherwise the Swit...

Page 19: ...ient function only works if you haven t assigned a static IP address that different than the switch default IP Once the default IP has been changed the DHCP will not effective and the switch will cont...

Page 20: ...ton Press the button for save current User name and Password Setting on the Switch 4 1 4 SNMP Management The SNMP is a Protocol that governs the transceiver of information between management and agent...

Page 21: ...set MIB objects Add button Press the button to add the management SNMP community strings on the Switch Remove button Press the button to remove the management SNMP community strings on the Switch 4 1...

Page 22: ...rade It provides the functions to allow a user to update the switch firmware Before updating make sure you have your TFTP server ready and the firmware image is on the TFTP server Figure 4 1 7 TFTP Up...

Page 23: ...system will load the default IP settings as following Default IP address 192 168 0 100 Subnet mask 255 255 255 0 Default Gateway 0 0 0 0 The other setting value is back to disable or none 4 1 7 System...

Page 24: ...Port Configuration objects of the Switch Figure 4 2 1 Port Control screenshot OObject Description Port Select the port by scroll the list in Port column State User can disable or enable this port con...

Page 25: ...FGSW 2620VM User s Manual When you select the port you can see port current configure shows in below Figure 4 2 2 Select the Port Control screenshot 25...

Page 26: ...g Mode Set mirror mode Disable RX TX Both Analysis Port Its mean mirror port can be used to see all monitor port traffic You can connect mirror port to LAN analyzer or netxray Monitor Port The ports y...

Page 27: ...escription InRate Input the value of packet rate sent from the connected port to this port must enable the flow control feature of this port for the function to work normally The available value range...

Page 28: ...eenshot OObject Description Port Indicate port 1 to port 26 Type Display the Speed duplex mode of each port on the Switch Link The state of the link indicating a valid link partner device Up means a d...

Page 29: ...nformation refers to IEEE 802 3ad 4 2 5 1 Aggregator setting This section provides Port Trunk Aggregator Setting of each port from the Switch the screen in Figure 4 2 6 appears Figure 4 2 6 Aggregator...

Page 30: ...ort Remove button Press the button to remove unwanted ports Apply button Press the button to save the configuerations Delete button Press the button to delete Trunk Group and the Group ID 4 2 5 2 Aggr...

Page 31: ...opposite device Apply button Press the button to change the port state activity Opposite is Passive Note 1 A link having either two active LACP ports or one active port can perform dynamic LACP trunk...

Page 32: ...ssigned to the highest The highest priority tag 7 is generally only used for data associated with video or audio applications which are sensitive to even slight delays or for data from specified end u...

Page 33: ...s take place using normal Ethernet protocols Even though this is always the case when the destination for a packet lies on another switch port VLAN considerations come into play to decide if the packe...

Page 34: ...the packet header making the entire packet longer by 4 octets All of the information originally contained in the packet is retained 802 1Q Tag User Priority CFI VLAN ID VID 3 bits 1 bits 12 bits TPID...

Page 35: ...the transmitting port is connected to a tag unaware device the packet should be untagged If the transmitting port is connected to a tag aware device the packet should be tagged Default VLANs The Switc...

Page 36: ...h as the protocol 1 Click the hyperlink VLAN Configuration to enter the VLAN configuration interface 2 Select PortBased at the VLAN Operation Mode to enable the port based VLAN function Figure 4 3 1 V...

Page 37: ...ique to insert a tag into the Ethernet frames Tag contains a VLAN Identifier VID that indicates the VLAN numbers You can create and delete Tag based VLAN There are 26 VLAN groups to provide configure...

Page 38: ...om an 802 1Q compliant network device to a non compliant network device Frame Income Frame Leave Income Frame is tagged Income Frame is untagged Leave port is tagged Frame remains tagged Tag is insert...

Page 39: ...nterface as a tagged member of a VLAN All packets forwarded by the interface are tagged The packets contain VLAN information 6 After setup completed please press Save button to take effect 7 Please pr...

Page 40: ...le Disable Ingress filter function Acceptable Frame type ALL Acceptable all Packet Tag Only Only packet with match VLAN ID can be permission to go through the port PVID Set the port VLAN ID that will...

Page 41: ...ing elements Creates multiple spanning trees from any combination of ports contained within a single switch in user specified groups Automatically reconfigures the spanning tree to compensate for the...

Page 42: ...ait for new network topology information to propagate throughout the network before starting to forward packets They must also wait for the packet lifetime to expire for BPDU packets that were forward...

Page 43: ...The switch level forms a spanning tree consisting of links between one or more switches The port level constructs a spanning tree consisting of groups of one or more ports The STP operates in much th...

Page 44: ...and selects the path with the minimum cost as the active path 19 100Mbps Fast Ethernet ports 4 1000Mbps Gigabit Ethernet ports Default Spanning Tree Configuration Feature Default Value Enable state ST...

Page 45: ...simple illustration of three switches connected in a loop is depicted in Figure 5 7 In this example you can anticipate some major network problems if the STP assistance is not applied If switch A bro...

Page 46: ...C Port 1 Port 2 Port 3 B LAN 1 LAN 2 LAN 3 Designated Port Root Port Root Port Designated Port Blocked After Applying the STA Rules The switch with the lowest Bridge ID switch C was elected the root b...

Page 47: ...e STP on all switches ensures a single active path on the network 4 3 2 1 System Configuration This section provides RSTP System Configuration from the Switch the screen in Figure 4 3 6 appears Figure...

Page 48: ...are dependent upon whether the Port concerned can only be connected to exactly one other Bridge ie it is served by a point to point LAN segment or can be connected to two or more Bridges i e it is se...

Page 49: ...ast groups allow members to join or leave at any time IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group IGMP version 1 is defined in R...

Page 50: ...nd report IGMP State Transitions IGMP Snooping Configuration The default status of the IGMP Snooping function is disabled To turn on the IGMP Snooping select Enable of the IGMP Snooping Status field a...

Page 51: ...he querier to indicate that the host has quit to be a member of a specific multicast group When you enable the IGMP Snooping you will see the relate information show as following figure Figure 4 3 8 I...

Page 52: ...ackup traffic QoS reduces bandwidth limitations delay loss and jitter It also provides increased reliability for delivery of your data and allows you to prioritize certain applications across your net...

Page 53: ...ery of data traffic that might be affected by latency problems The IEEE 802 1p Priority specification uses 8 priority levels to classify data packets In 802 1p compliant devices a tag inserted into th...

Page 54: ...ecurity In Security page it has five parts of setting 802 1x Radius Access control list Static MAC address MAC filter IP security We will describe the configure detail in following 4 5 1 802 1x Radius...

Page 55: ...re Access Control Server version 3 0 RADIUS operates in a client server model in which secure authentication information is exchanged between the RADIUS server and one or more RADIUS clients z Switch...

Page 56: ...start frame which prompts the switch to request the client s identity Notice If 802 1X is not enabled or supported on the network access device any EAPOL frames from the client are dropped If the clie...

Page 57: ...rt frame When no response is received the client sends the request for a fixed number of times Because no response is received the client begins sending frames as if the port is in the authorized stat...

Page 58: ...Server Port Set the UDP destination port for accounting requests to the specified Radius Server Accounting Port Set an encryption key for use during authentication sessions with the specified radius s...

Page 59: ...e ports attribute of 802 1X see the next section Per Port Status Configuration 4 5 1 2 Per port Configuration You can see the every port Authorization information list in table Figure 4 5 2 802 1x Con...

Page 60: ...entication server Disable The specified port is required to be held in the Authorized state Apply Button Press this button to save the value on the Switch Notice Set the Ports Authenticate Status to A...

Page 61: ...ient utility is needed The following procedures show how to configure 802 1X Authentication in Windows XP Please note that if you want to change the 802 1x authentication type of a wireless client i e...

Page 62: ...rk access control using IEEE 802 1X to enable 802 1x authentication 6 Select MD 5 Challenge from the drop down list box for EAP type 7 Click OK 8 When client has associated with the switch a user auth...

Page 63: ...FGSW 2620VM User s Manual 9 Enter the user name password and the logon domain that your account belongs 10 Click OK to complete the validation process 63...

Page 64: ...authentication that must time out before authentication fails and the authentication session ends Max Requests Set the period of time after which clients connected must be re authenticated Reauth Peri...

Page 65: ...s Control List group on the Switch Add button Del button Press this button for delete Access Control List group on theSwitch 4 5 3 Static MAC Address When you add a static MAC address it remains in th...

Page 66: ...ch static addresses are associated with individual VLANs Type the VID tag based VLANs to associate with the MAC address VLAN ID Press this button for add Static MAC Address on the Switch Add Delete Pr...

Page 67: ...ress that wants to filter MAC Address If tag based 802 1Q VLAN are set up on the switch in the VLAN ID box type the VID to associate with the MAC address VLAN ID Press this button for add MAC filterin...

Page 68: ...nable mode the Enable HTTP Server and Enable Telnet Server check boxes will then be available IP Security Mode Assign up to 5 specific IP address Only these 5 IP address can access and manage the swit...

Page 69: ...ss is located according to the information from address table But if the destination address is located at the same port with this packet comes in then this packet will be filtered Thereby increasing...

Page 70: ...No packet loss will occur 5 5 Auto Negotiation The STP ports on the Switch have built in Auto negotiation This technology automatically sets the best possible bandwidth when a connection is establishe...

Page 71: ...you have a valid network topology Common topology faults include excessive cable length and too many repeaters hubs between end nodes In addition you should make sure that your network topology contai...

Page 72: ...6 Rx Note and signs represent the polarity of the wires that make up each wire pair All ports on this switch support automatic MDI MDI X operation you can use straight through cables for all network c...

Page 73: ...standard UTP STP cable and each wire is color coded The following shows the pin allocation and color of straight cable and crossover cable connection Figure 7 1 Straight Through and Crossover Cable Pl...

Reviews: