manualshive.com logo in svg

Planet ISW-1022M, User Manual, Page: 111 / 141

Share
Download
Planet ISW-1022M User Manual Download Page 111

User’s Manual of ISW-1022M 

111

 

5.7.1.3 Port Configuration 

You can configure the 802.1x authentication state for each port. The state provides 

Disable

, 

Accept

, 

Reject

, and 

Authorize

. 

 

 

Figure 5-68 

802.1x Per Port Setting interface 

 

The page includes the following fields: 

Object 

Description 

Reject:

 

The specified port is required to be held in the unauthorized state. 

Accept:

 

The specified port is required to be held in the authorized state. 

Authorize:

 

The specified port is set to the Authorized or Unauthorized state in accordance 

with the outcome of an authentication exchange between the Supplicant and the 

authentication server. 

Disable:

 

When disabled, the specified port works without complying with 802.1x protocol.

 

 

Summary of Contents for ISW-1022M

Page 1: ...User s Manual of ISW 1022M User s Manual ISW 1022M 8 Port 10 100Mbps 2 Gigabit TP SFP Managed Industrial Switch ...

Page 2: ...te we would appreciate your comments and suggestions FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio fre...

Page 3: ...18 2 2 4 Wiring the Power Inputs 19 2 2 5 Wiring the Fault Alarm Contact 20 2 2 6 Installing the SFP transceiver 21 3 NETWORK APPLICATION 24 3 1 X RING APPLICATION 25 3 2 COUPLING RING APPLICATION 26 3 3 DUAL HOMING APPLICATION 26 3 4 DUAL RING APPLICATION 27 4 CONSOLE MANAGEMENT 28 4 1 CONNECTING TO THE CONSOLE PORT 28 4 2 PIN ASSIGNMENT 28 4 3 LOGIN IN THE CONSOLE INTERFACE 28 4 4 CLI MANAGEMENT...

Page 4: ...5 1 Port Statistics 54 5 5 2 Port Control 55 5 5 3 Port Trunk 56 5 5 3 1 Aggregator setting 57 5 5 3 2 Aggregator Information 58 5 5 3 3 State Activity 62 5 5 4 Port Mirroring 63 5 5 5 Rate Limiting 64 5 6 PROTOCOL 65 5 6 1 VLAN configuration 65 5 6 1 1 VLAN Overview 65 5 6 1 2 VLAN Configuration 68 5 6 1 3 Port based VLAN 69 5 6 1 4 802 1Q VLAN 71 5 6 2 Rapid Spanning Tree 77 5 6 2 1 Theory 77 5 ...

Page 5: ...ion 110 5 7 1 3 Port Configuration 111 5 7 1 4 Misc Configuration 112 5 7 2 MAC Address Table 113 5 7 2 1 Static MAC Address 113 5 7 2 2 MAC Filtering 114 5 7 2 3 All MAC Addresses 115 5 7 2 4 Multicast Filtering 116 5 8 FACTORY DEFAULT 117 5 9 SAVE CONFIGURATION 117 5 10 SYSTEM REBOOT 118 6 COMMAND SETS 119 6 1 SYSTEM COMMANDS SET 119 6 2 PORT COMMANDS SET 121 6 3 TRUNK COMMANDS SET 123 6 4 VLAN ...

Page 6: ...ERATION 136 7 1 ADDRESS TABLE 136 7 2 LEARNING 136 7 3 FORWARDING FILTERING 136 7 4 STORE AND FORWARD 136 7 5 AUTO NEGOTIATION 136 APPENDIX A RJ 45 PIN ASSIGNMENT 138 A 1 SWITCH S RJ 45 PIN ASSIGNMENTS 138 A 2 10 100MBPS 10 100BASE TX 138 APPENDIX B TROUBLES SHOOTING 140 ...

Page 7: ...ion network to enhance system reliability and uptime in the factory harsh environments It protects customer s industrial network connectivity with switching recovery capability The ISW 1022M provides IP 30 aluminum case and 8 10 100Mbps Fast Ethernet ports and 2 Gigabit TP SFP combo interfaces The Gigabit fiber optical uplink capability can guarantee the throughput to all nodes hooked into the net...

Page 8: ...ates erroneous packets to optimize the network bandwidth Back plane Switching Fabric 5 6Gbps 8K MAC Address Table Support VLANs IEEE 802 1Q Tag Based VLAN Up to 255 VLANs groups out of 4096 VLAN IDs Port Based VLAN GVRP GARP VLAN Registration Protocol up to 256 groups Support up to 4 Trunk groups each trunk for up to maximum 4 port with 800Mbps bandwidth Duplex Mode Support Spanning Tree Protocol ...

Page 9: ...nstallation IP 30 Aluminum case protection DIN Rail and Wall Mount Design Redundant Power Design 1 4 Product Specification Product ISW 1022M 8 Port 10 100Mbps 2 Port Gigabit TP SFP Managed Industrial Switch Hardware Specification Copper Ports 8 10 100Base TX RJ 45 Auto MDI MDI X ports 2 10 100 1000Base T RJ 45 port SFP mini GBIC Slots 2 SFP interfaces shared with Port 9 and Port 10 Switch Architec...

Page 10: ...ation 10 100Mbps full and half duplex mode selection Flow Control disable enable Bandwidth control on each port Port Status Display each port s speed duplex mode link status Flow control status Auto negotiation status VLAN Port Based VLAN up to 9 VLAN groups IEEE 802 1q Tagged Based VLAN 4K VLAN ID up to 256 VLAN groups Spanning Tree IEEE 802 1d Spanning Tree IEEE 802 1w Rapid Spanning Tree Link A...

Page 11: ... CE EN61000 4 8 CE EN61000 4 11 CE EN61000 4 12 CE EN61000 6 2 CE EN61000 6 4 Standards Compliance IEEE 802 3 10BASE T IEEE 802 3u 100BASE TX 100BASE FX IEEE 802 3z Gigabit SX LX IEEE 802 3ab Gigabit 1000T IEEE 802 3x Flow Control and Back pressure IEEE 802 1d Spanning tree protocol IEEE 802 1w Rapid spanning tree protocol IEEE 802 1p Class of service IEEE 802 1Q VLAN Tagging IEEE 802 1x Port Auth...

Page 12: ...he Industrial switch s hardware spec port cabling information and wiring installation 2 1 Hardware Description 2 1 1 Physical Dimension ISW 1022M Managed Industrial Switch dimension W x D x H 72mm x 105mm x 152mm 152 00 72 00 106 20 152mm 105mm 72mm Figure 2 1 ISW 1022M panel layout ...

Page 13: ...t and Rear Panel of ISW 1022M 1 Model Name 9 10 100 1000Base T port 2 System Power LED 10 1000Base SX LX SFP slot 3 Ring Master LED indicator 11 LED indicators for 1000Base SX LX ort 4 LED for power 1 input 12 6 Pin Terminal Block 5 LED for power 2 input 13 Ground Screw 6 FAULT LED indicator 14 Screw holes for Wall Mounting kit 7 RJ 45 type RS 232 Console 15 DIN Rail Kit 8 8 x 10 100Base TX port ...

Page 14: ...ocated on the front panel of the ISW 1022M The following table provides the description of the LED status and their meanings for the Managed Industrial Switch System LED Color Status Meaning On The switch unit is power on PWR Green Off No power On The industrial switch is the master of X Ring group R M Green Off The industrial switch is not a ring master in X Ring group On Power 1 is active PWR1 G...

Page 15: ...1 Port 8 Amber Off The port is in half duplex mode or no device is attached Port 9 Port 10 10 100 1000Base T SFP combo interface LED Color Status Meaning On A network device is detected Blinking The port is transmitting or receiving packets from the TX device Green Upper LED Off No device attached On 1000M Port 9 Port 10 RJ 45 Green Lower LED Off 10 100M On The SFP port is linking Blinking The por...

Page 16: ... mount plate installation 3 To hang the Industrial switch on the DIN Rail track or wall 4 Power on the Industrial switch Please refer to the Wiring the Power Inputs section for knowing the information about how to wire the power The power LED on the Industrial switch will light up Please refer to the LED Indicators section for indication of LED lights 5 Prepare the twisted pair straight through Ca...

Page 17: ...IN Rail is not screwed on the Industrial Switch please see the following pictures to screw the DIN Rail on the switch Follow the steps below to hang the Industrial Switch Figure 2 4 Rear Panel DIN Rail Kit 1 First insert the top of DIN Rail into the track Figure 2 5 DIN Rail Mounting 2 Then lightly push the DIN Rail into the track ...

Page 18: ...ndustrial Switch with wall mount plate 1 Remove the DIN Rail from the Industrial Switch loose the screws to remove the DIN Rail 2 Place the wall mount plate on the rear panel of the Industrial Switch 3 Use the screws to screw the wall mount plate on the Industrial Switch 4 Use the hook holes at the corners of the wall mount plate to hang the Industrial Switch on the wall 5 To remove the wall mount...

Page 19: ... to insert the power wire 1 Insert positive negative DC power wires into the contacts 1 and 2 for POWER 2 or 5 and 6 for POWER 1 Figure 2 8 Wiring the redundant power inputs 2 Tighten the wire clamp screws for preventing the wires from loosing 1 2 3 4 5 6 Power 2 Power 1 Figure 2 9 6 Pin Terminal Block power wiring input The wire gauge for the terminal block should be in the range between 12 24 AW...

Page 20: ... the wires the Industrial Switch will detect the fault status of the power failure or port link failure available for managed model and then forms an open circuit The following illustration shows an application example for wiring the fault alarm contacts The wire gauge for the terminal block should be in the range between 12 24 AWG Insert the wires into the fault alarm contacts ...

Page 21: ...iver Single mode 1310nm 30km MGB L50 SFP 1000BASE LX SFP transceiver Single mode 1310nm 50km MGB LA10 SFP 1000BASE LX SFP transceiver WDM Single mode TX 1310nm RX 1550nm 10km MGB LB10 SFP 1000BASE LX SFP transceiver WDM Single mode TX 1550nm RX 1310nm 10km It recommends using PLANET SFPs on the Managed Industrial Switch If you insert a SFP transceiver that is not supported the Managed Industrial S...

Page 22: ...ure that the SFP transceiver is operating correctly 4 Check the Link mode of the SFP port if the link failed Co works with some fiber NICs or Media Converters set the Link mode to 1000 Force is needed Figure 2 11 LC connector to the transceiver Remove the transceiver module 1 Make sure there is no network activity by consult or check with the network administrator Or through the management interfa...

Page 23: ...ull out the module gently through the handle Figure 2 13 Pull out from the transceiver Never pull out the module without pull the handle or the push bolts on the module Direct pull out the module with violent could damage the module and SFP module slot of the Managed Industrial Switch ...

Page 24: ...er provides some sample applications to help user to have more actual idea of Industrial Switch function application A sample application of the industrial switch is as below Factory Redundant Ring Application Transportation Networking and Public Wireless Service ...

Page 25: ... that can help the network system to recovery from network connection failure within 20ms or less and make the network system more reliable The X Ring algorithm is similar to spanning tree protocol STP algorithm but its recovery time is faster than STP The following figure is a sample X Ring application ...

Page 26: ...etween two ring groups not to fail The following figure is a sample of coupling ring application 3 3 Dual Homing Application Dual Homing function is to prevent the connection lose from between X Ring group and upper level core switch Assign two ports to be the Dual Homing port that is backup port in the X Ring group The Dual Homing function only works when the X Ring function is active Each X Ring...

Page 27: ...ng Application Dual ring is the advanced function that supports backup connection for transmission redundant purpose While the connection fails the system will recover from failure within 20 milliseconds Apart from that Dual Ring only needs one unit and only the one located in the middle to be configured as the Ring Master switch to deploy the dual ring ...

Page 28: ... emulation program 4 2 Pin Assignment DB9 Pin Define for RJ 45 Connector DB9 PIN RJ 45 Connector 1 1 Orange White 2 2 Orange 3 3 Green White 4 4 Blue 5 5 Blue White 6 6 Green 7 7 Brown White 8 8 Brown 9 4 3 Login in the Console Interface To configure the system connect a serial cable to a COM port on a PC or notebook computer and to RJ 45 type serial console port of the Managed Industrial Switch T...

Page 29: ...al program may be a good choice The Hyper Terminal can be accessed from the Start menu 1 Click START then Programs Accessories and then Hyper Terminal 2 When the following screen appears make sure that the COM port should be configured as Baud Rate 9600 bps Data Bits 8 Parity none Stop Bit 1 Flow control None The settings of communication parameters ...

Page 30: ...testing procedures Then the following message asks the login password The factory default password as following and the login screen in below figure appears User name admin Password admin Console login interface 1 For security reason please change and memorize the new password after this first setup 2 Only accept command in lowercase letter under console interface ...

Page 31: ...ands and description 4 5 Commands Level Modes Access Method Prompt Exit Method About This Mode1 User EXEC Begin a session with your switch switch Enter logout or quit The user commands available at the user level are a subset of those available at the privileged level Use this mode to Perform basic tests Display system information Privileged EXEC Enter the enable command while in User EXEC mode sw...

Page 32: ...our switch VLAN database Enter the vlan database command while in privileged EXEC mode switch vlan To exit to user EXEC mode enter exit Use this mode to configure VLAN specific parameters Interface configuration Enter the interface of fast Ethernet command with a specific interface while in global configuration mode switch config if To exit to global configuration mode enter exit To exit to privil...

Page 33: ... allow Java Applets to open sockets The user has to explicitly modify the browser setting to enable Java Applets to use network ports The Managed Industrial Switch can be configured through an Ethernet connection make sure the manager PC must be set on same the IP subnet address with the Managed Industrial Switch For example the default IP address of the Managed Industrial Switch is 192 168 0 100 ...

Page 34: ...vironment Plug in It is recommended to use Internet Explore 6 0 or above to access ISW 1022M Managed Industrial Switch 5 3 Logging on the switch 1 Use Internet Explorer 6 0 or above Web browser Enter the factory default IP address to access the Web interface The factory default IP Address as following http 192 168 0 100 2 When the following login screen appears please enter the default username ad...

Page 35: ...ent or manage the Managed Industrial Switch by Web interface The Switch Menu on the left of the web page let you access all the commands and statistics the Managed Industrial Switch provides 1 It is recommended to use Internet Explore 6 0 or above to access Managed Industrial Switch 2 The changed IP address take effect immediately after click on the Save button you need to use the new IP address t...

Page 36: ...s on a network TFTP Upgrade the firmware via TFTP server Save view the switch configuration to remote host Upload the switch configuration from remote host Fault Relay Alarm Provides relay output for port breakdown power fail SNTP Configuration Simple Network Time Protocol Configures SNTP client settings including broadcast mode or a specified list of servers IP Security Supports 10 IP addresses t...

Page 37: ... the following fields Object Description System Name Assign the system name of the switch The maximum length is 64 bytes System Description Describes the switch System Location Assign the switch physical location The maximum length is 64 bytes System Contact Enter the name of contact person or organization Firmware Version Displays the switch s firmware version Kernel Version Displays the kernel s...

Page 38: ...og shows up to inform the user that when the DHCP client is enabled the current IP will lose and user should find the new IP on the DHCP server IP Address Assign the IP address that the network is using If DHCP client function is enabled this switch is configured as a DHCP client The network DHCP server will assign the IP address to the switch and display it in this column The default IP is 192 16...

Page 39: ...f IP addresses rather than requiring an administrator to manage the task This means that a new computer can be added to a network without the hassle of manually assigning it a unique IP address The system provides the DHCP server function Having enabled the DHCP server function the switch system will be configured as a DHCP server 5 4 3 1 System configuration The Dynamic Host Configuration Protoco...

Page 40: ...NS Type in the Domain Name Server IP Address in your network Lease Time sec It is the time period that system will reset the dynamic IP assignment to ensure the dynamic IP will not been occupied for a long time or the server doesn t know that the dynamic IP is idle 5 4 3 2 Client Entries When the DHCP server function is enabled the system will collect the DHCP client information including the assi...

Page 41: ...s bound with the port to the connected client The user is allowed to fill each port column with one particular IP address When the device is connecting to the port and asks for IP assigning the system will assign the IP address bound with the port Figure 5 7 Port and IP Bindings interface ...

Page 42: ...he Managed Industrial Switch Figure 5 8 Update Firmware interface The page includes the following fields Object Description TFTP Server IP Address Type in your TFTP server IP Firmware File Name Type in the name of the firmware image file to be updated 5 4 4 2 Restore Configuration You can restore a previous backup configuration from the TFTP server to recover the settings Before doing that you mus...

Page 43: ...uration You can back up the current configuration from flash ROM to the TFTP server for the purpose of recovering the configuration later It helps you to avoid wasting time on configuring the settings by backing up the configuration Figure 5 10 Backup Configuration interface The page includes the following fields Object Description TFTP Server IP Address Type in the TFTP server IP Backup File Name...

Page 44: ... client server depends on the selection on the Event Configuration tab There are five types of event available to be issued as the event log Device Cold Start Device Warm Start Authentication Failure X Ring Topology Change Port Event 5 4 5 1 Syslog Configuration The System Logs enable viewing device events in real time and recording the events for later usage System Logs record and manage events a...

Page 45: ...erver IP address to which the log will be sent 5 4 5 2 System Event Log SMTP Configuration Simple Mail Transfer Protocol SMTP is the standard for email transmissions across the network You can configure the SMTP server IP mail subject sender mail account password and the recipient email addresses which the e mail alert will send to There are also five types of event Device Cold Start Device Warm S...

Page 46: ...ess format e g to identify where the e mail alert comes from Authentication Having ticked this checkbox the mail account password and confirm password column fields will then show up Configure the email account and password for authentication when this switch logs in to the SMTP server Mail Account Set up the email account e g jack to receive the email alert It must be an existing email account on...

Page 47: ... Figure 5 13 Event Configuration interface The page includes the following fields Object Description System event selection There are 4 event types Device Cold Start Device Warm Start Authentication Failure and X ring Topology Change The checkboxes are not available for ticking unless the Syslog Client Mode on the Syslog Configuration tab and the E mail Alert on the SMTP Configuration tab are enab...

Page 48: ...ink Down Disable means no event will be sent to the system log SMTP server Link UP The system will only issue a log message when the link up event of the port occurs Link Down The system will only issue a log message when the link down event of port occurs Link UP Link Down The system will issue a log message at the time when port connection is link up and link down 5 4 6 Fault Relay Alarm The Fau...

Page 49: ...fferent node stations will be different With the communicating programs running on those devices it would cause time to jump forward and back a non desirable effect Therefore the switch provides comprehensive mechanisms to access national time and frequency dissemination services organize the time synchronization subnet and the local clock in each participating subnet peer Daylight saving time DST...

Page 50: ...up the Daylight Saving beginning date time and Daylight Saving ending date time Please key in the value in the format of YYYYMMDD and HH MM leave a space between YYYYMMDD and HH MM YYYYMMDD an eight digit year month day specification HH MM a five digit including a colon mark hour minute specification For example key in 20070701 02 00 and 20071104 02 04 in the two column fields respectively to repr...

Page 51: ...tern European USSR Zone 1 2 hours 2 pm BT Baghdad USSR Zone 2 3 hours 3 pm ZP4 USSR Zone 3 4 hours 4 pm ZP5 USSR Zone 4 5 hours 5 pm ZP6 USSR Zone 5 6 hours 6 pm WAST West Australian Standard 7 hours 7 pm CCT China Coast USSR Zone 7 8 hours 8 pm JST Japan Standard USSR Zone 8 9 hours 9 pm EAST East Australian Standard GST Guam Standard USSR Zone 9 10 hours 10 pm IDLE International Date Line NZST N...

Page 52: ...erver checkboxes and the ten security IP column fields will then be available If not those items will appear in grey Enable HTTP Server Having ticked this checkbox the devices whose IP addresses match any one of the ten IP addresses in the Security IP1 IP10 table will be given the permission to access this switch via HTTP service Enable Telnet Server Having ticked this checkbox the devices whose I...

Page 53: ...uthentication Change web management login user name and password for the management security issue Figure 5 17 User Authentication interface The page includes the following fields Object Description User name Type in the new user name The default user name is admin Password Type in the new password The default is admin Confirm password Re type the new password ...

Page 54: ...e status of linking Up or Down State It s set by Port Control When the state is disabled the port will not transmit or receive any packet Tx Good Packet The counts of transmitting good packets via this port Tx Bad Packet The counts of transmitting bad packets including undersize less than 64 octets oversize CRC Align errors fragments and jabbers packets via this port Rx Good Packet The counts of r...

Page 55: ...9 Port Control interface The page includes the following fields Object Description Port Use the scroll bar and click on the port number to choose the port to be configured State Current port state The port can be set to disable or enable mode If the port state is set as Disable it will not receive or transmit any packet Negotiation Auto and Force Being set as Auto the speed and duplex mode are neg...

Page 56: ...ing device will drop the packet if too much to process Security When the Security selection is set as On any access from the device which connects to this port will be blocked unless the MAC address of the device is included in the static MAC address table See the segment of MAC Address Table Static MAC Addresses 5 5 3 Port Trunk Port trunking is the combination of several ports or network cables ...

Page 57: ...selected as the active LACP peer of the trunk group Group ID There are 13 trunk groups to be selected Assign the Group ID to the trunk group LACP When enabled the trunk group is using LACP A port which joins an LACP trunk group has to make an agreement with its member ports first Please notice that a trunk group including member ports split between two switches has to enable the LACP function of t...

Page 58: ... ports and can be aggregated if working ports fail If it is a static trunk group non LACP the number of work ports must equal the total number of group member ports 5 5 3 2 Aggregator Information When you had setup the LACP aggregator you will see relation information in here LACP disabled Having set up the aggregator setting with LACP disabled you will see the local static trunk group information...

Page 59: ... static trunk group LACP enabled Having set up the aggregator setting with LACP enabled you will see the trunking group information between two switches on the tab of Aggregator Information Switch 1 configuration 1 Set System Priority of the trunk group The default is 1 2 Select a trunk group ID by pull down the drop down menu bar 3 Enable LACP 4 Include the member ports by clicking the Add button...

Page 60: ...s the illustration shown above after the two switches configured Switch 2 configuration 6 Set System Priority of the trunk group For example 32768 7 Select a trunk group ID by pull down the drop down menu bar 8 Enable LACP 9 Include the member ports by clicking the Add button after selecting the port number and the column field of Work Ports changes automatically ...

Page 61: ...re 5 24 Switch 2 configuration interface 10 Click on the tab of Aggregator Information to check the trunked group information as the illustration shown above after the two switches configured Figure 5 25 Switch 1 Aggregator Information ...

Page 62: ... activity will change to Passive Figure 5 26 State Activity of Switch 1 The page includes the following fields Object Description Active The port automatically sends LACP protocol packets Passive The port does not automatically send LACP protocol packets and responds only if it receives LACP protocol packets from the opposite device Figure 5 27 State Activity of Switch 2 A link having two passive ...

Page 63: ...des the following fields Object Description Destination Port There is only one port can be selected to be destination mirror port for monitoring both RX and TX traffic which come from source port Or use one of two ports for monitoring RX traffic only and the other one for TX traffic only User can connect mirror port to LAN analyzer or Netxray Source Port The ports that user wants to monitor All mo...

Page 64: ... and Bbroadcast only types are only for ingress frames The egress rate only supports All type Figure 5 29 Rate Limiting interface All the ports support port ingress and egress rate control For example assume port 1 is 10Mbps users can set it s effective egress rate is 1Mbps ingress rate is 500Kbps The switch performs the ingress rate by packet counter to meet the specified rate Ingress Enter the p...

Page 65: ...t headers NIC send and receive normal Ethernet packets If the packet s destination lies on the same segment communications take place using normal Ethernet protocols Even though this is always the case when the destination for a packet lies on another switch port VLAN considerations come into play to decide if the packet is dropped by the Switch or delivered IEEE 802 1Q VLANs IEEE 802 1Q tagged VL...

Page 66: ...EEE 802 1Q 802 1p tag The tag is contained in the following two octets and consists of 3 bits of user priority 1 bit of Canonical Format Identifier CFI used for encapsulating Token Ring packets so they can be carried across Ethernet backbones and 12 bits of VLAN ID VID The 3 bits of user priority are used by 802 1p The VID is the VLAN identifier and is used by the 802 1Q standard Because the VID i...

Page 67: ...the VID is Tag aware switches must keep a table to relate PVID within the switch to VID on the network The switch will compare the VID of a packet to be transmitted to the VID of the port that is to transmit the packet If the two VID are different the switch will drop the packet Because of the existence of the PVID for untagged packets and the VID for tagged packets tag aware and tag unaware netwo...

Page 68: ...02 1 tag from packet headers to maintain compatibility with devices that are tag unaware 5 6 1 2 VLAN Configuration A Virtual LAN VLAN is a logical network grouping that limits the broadcast domain It allows you to isolate network traffic so only members of the VLAN receive traffic from the same VLAN members Basically creating a VLAN from a switch is logically equivalent of reconnecting a group of...

Page 69: ...he VLAN tagging is ignored The port based VLAN function allows the user to create separate VLANs to limit the unnecessary packet flooding however for the purpose of sharing resource a single port called a common port can belongs to different VLANs which all the member devices ports in different VLANs have the permission to access the common port while they still cannot communicate with each other ...

Page 70: ... ID Add the selected port number into the right field to group these members to be a VLAN group or remove any of them listed in the right field from the VLAN And then click Apply to have the configuration take effect You will see the VLAN list displays Figure 5 33 VLAN Port Based Edit Delete interface ...

Page 71: ...ed frames A single port is supposed to belong to one VLAN group except it is on a Trunk Hybrid Link The technique of 802 1Q tagging inserts a 4 byte tag including VLAN ID of the destination port PVID in the frame With the combination of Access Trunk Hybrid Links the communication across switches also can make the packet sent through tagged and untagged ports 802 1Q VLAN Port Configuration This pag...

Page 72: ...l packets received by and forwarded by an untagging port will have no 802 1Q VLAN information Untagging is used to send packets from an 802 1Q compliant network device to a non compliant network device Ports with Access mode belong to a single untagged VLAN Trunk Ports with tagging enabled will put the VID number priority and other VLAN information into the header of all packets that out of those ...

Page 73: ...other devices For example having enabled GVRP on two switches they are able to automatically exchange the information of their VLAN database Therefore the user doesn t need to manually configure whether the link is trunk or hybrid the packets belonging to the same VLAN can communicate across switches Tick this checkbox to enable GVRP protocol This checkbox is available while the VLAN Operation Mod...

Page 74: ...he Tagged VID column field Please insert a comma between two VIDs Hybrid Link A segment which consists of Access and Trunk links The hybrid port has both the features of access and trunk ports A hybrid port has a PVID belonging to a particular VLAN and it also forwards the specified tagged frames for the purpose of VLAN communication across switches Untagged VID This column field is available when...

Page 75: ...tch Both the tagged VID of the two ports have to be the same Pull down the selection item and focus on 802 1Q then press Apply to set the VLAN Operation Mode in 802 1Q mode You can see the link type untagged VID and tagged VID information of each port in the table below on the screen Figure 5 35 802 1Q VLAN interface Group Configuration Edit the existing VLAN Group Select the VLAN group in the tab...

Page 76: ...User s Manual of ISW 1022M 76 Figure 5 36 Group Configuration interface You can modify the VLAN group name and VLAN ID Figure 5 37 Group Configuration interface Click Apply ...

Page 77: ...d and enabled primary links are established and duplicated links are blocked automatically The reactivation of the blocked links at the time of a primary link failure is also accomplished automatically without operator intervention This automatic network reconfiguration provides maximum uptime to network users However the concepts of the Spanning Tree Algorithm and protocol are a complicated and c...

Page 78: ... is enabled using the default parameters the path between source and destination stations in a switched network might not be ideal For instance connecting higher speed links to a port that has a higher number than the current root port can cause a root port change STP Port States The BPDUs take some time to pass through a network This propagation delay can result in topology changes where a port t...

Page 79: ...es of listening and learning at power up If properly configured each port stabilizes to the forwarding or blocking state No packets except BPDUs are forwarded from or received by STP enabled ports until the forwarding state is enabled for that port 5 6 2 2 STP Parameters STP Operation Levels The Switch allows for two levels of operation the switch level and the port level The switch level forms a ...

Page 80: ...for a port and ensures that the BPDU is discarded when its age exceeds the value of the maximum age timer 20 seconds Forward Delay Timer The amount time spent by a port in the learning and listening states waiting for a BPDU that may return the port to the blocking state 15 seconds The following are the user configurable STP parameters for the port or port group level Variable Description Default ...

Page 81: ...e Forward Delay Timer The Forward Delay can be from 4 to 30 seconds This is the time any port on the Switch spends in the listening state while moving from the blocking state to the forwarding state Observe the following formulas when setting the above parameters Max Age _ 2 x Forward Delay 1 second Max Age _ 2 x Hello Time 1 second Port Priority A Port Priority can be from 0 to 240 The lower the ...

Page 82: ...Port Priority and Port Cost settings is however relatively straight forward Bridge ID 15 Port 3 Port 1 Port 2 A Bridge ID 20 Port 1 Port 2 Port 3 C Bridge ID 30 Port 1 Port 2 Port 3 B LAN 1 LAN 2 LAN 3 Portcast 19 Portcast 19 Portcast 19 Portcast 4 Portcast 4 Portcast 19 Portcast 4 Portcast 4 Figure 5 40 Before Applying the STA Rules In this example only the default STP values are used Root Bridge...

Page 83: ...t cost 19 Gigabit ports could be used but the port cost should be increased from the default to ensure that the link between switch B and switch C is the blocked link 5 6 2 4 RSTP System Configuration This section provides RSTP System Configuration from the Switch the screen in Figure 5 42 appears The user can view spanning tree information of Root Bridge The user can modify RSTP state After modif...

Page 84: ...essages before attempting a reconfiguration Enter a value between 6 through 40 Hello Time 1 10 The time that controls the switch to send out the BPDU packet to check RSTP current status Enter a value between 1 through 10 Forward Delay Time 4 30 The number of seconds a port waits before changing from its Rapid Spanning Tree Protocol learning and listening states to the forwarding state Enter a valu...

Page 85: ... other ports to make certain that there is no loop in the LAN Figure 5 43 RSTP Port Configuration interface The page includes the following fields Object Description Path Cost The cost of the path to the other bridge from this transmitting bridge at the specified port Enter a number 1 through 200 000 000 Priority Decide which port should be blocked by setting its priority as the lowest Enter a num...

Page 86: ...des the STP mathematic calculation True is not including STP mathematic calculation False is including the STP mathematic calculation Path cost 0 is used to indicate auto configuration mode When the short path cost method is selected and the default path cost recommended by the IEEE 8021w standard exceeds 65 535 the default is set to 65 535 By default the system automatically detects the speed and...

Page 87: ...m network devices implementing SNMP 5 6 3 1 System Configuration Figure 5 44 SNMP System Configuration interface The page includes the following fields Object Description Community Strings Here you can define the new community string set and remove the unwanted community string String Fill the name string RO Read only Enables requests accompanied by this community string to display MIB object info...

Page 88: ...ration A trap manager is a management station that receives the trap messages generated by the switch If no trap manager is defined no traps will be issued To define a management station as a trap manager assign an IP address enter the SNMP community strings and select the SNMP trap version Figure 5 45 Trap Managers interface The page includes the following fields Object Description IP Address Ent...

Page 89: ... Assign the context name of context table Click Add to add context name Click Remove to remove unwanted context name User Table Configure SNMP v3 user table The page includes the following fields Object Description User ID set up the user name Authentication Password set up the authentication password Privacy Password set up the private password Group Table Configure SNMP v3 group table ...

Page 90: ...up name Access Table Configure SNMP v3 access table Figure 5 48 SNMP V3 configuration interface Access Table The page includes the following fields Object Description Context Prefix Set up the context name Group Name Set up the group Security Level Select the access level Context Match Rule Select the context match rule Read View Name Set up the read view Write View Name Set up the write view Noti...

Page 91: ...nfigure MIB view table Figure 5 49 SNMP V3 configuration interface MIBView Table The page includes the following fields Object Description ViewName Set up the name Sub Oid Tree Fill the Sub OID Type Select the type exclude or included ...

Page 92: ... for example to set higher priorities to time critical or business critical applications Applying security policy through traffic filtering Provide predictable throughput for multimedia applications such as video conferencing or voice over IP by minimizing delay and jitter Improve performance for specific types of traffic and preserve performance as the amount of traffic grows Reduce the need to c...

Page 93: ...cessing 1 frame of the lowest queue 2 frames of the low queue 4 frames of the middle queue and 8 frames of the high queue will be processed at the same time in accordance with the 8 4 2 1 policy rule Use a strict priority scheme Always the higher queue will be processed first except the higher queue is empty Priority Type There are 5 priority type selections available Port based TOS only COS only ...

Page 94: ... User Priority value 802 1Q Tag and 802 1p priority User Priority CFI VLAN ID VID 3 bits 1 bits 12 bits TPID Tag Protocol Identifier TCI Tag Control Information 2 bytes 2 bytes Preamble Destination Address Source Address VLAN TAG Ethernet Type Data FCS 6 bytes 6 bytes 4 bytes 2 bytes 46 1517 bytes 4 bytes Figure 5 52 802 1p Tag Priority Set up the COS priority level With the drop down selection it...

Page 95: ...s a network The Quality of Service page provides fields for defining output queue to specific DSCP fields When TCP IP s TOS DSCP mode is applied the Switch recognizes TCP IP Differentiated Service Codepoint DSCP priority information from the DS field defined in RFC2474 Select the QoS mode to TOS the TOS to priority mapping page appears as the Figure 5 53 shows Set up the TOS priority With the drop...

Page 96: ...is Lowest priority for each level When the IP packet is received the system will check the TOS level value in the IP packet that has received For example the user sets the TOS level 25 as high the system will check the TOS value of the received IP packet If the TOS value of received IP packet is 25 priority high and then the packet priority will have highest priority ...

Page 97: ...ers that they will become members of a multicast group The Internet Group Management Protocol IGMP is used to communicate this information IGMP is also used to periodically check the multicast group for members that are no longer active In the case where there is more than one multicast router on a sub network one router is elected as the queried This router then keeps track of the membership of t...

Page 98: ...User s Manual of ISW 1022M 98 Figure 5 55 Multicast flooding Figure 5 56 IGMP Snooping multicast stream control IGMP Versions 1 and 2 ...

Page 99: ...heir respective sub networks The following outlines what is communicated between a multicast router and a multicast group member using IGMP A host sends an IGMP report to join a group A host will never send a report when it wants to leave a group for version 1 A host will send a leave report when it wants to leave a group for version 2 Multicast routers send IGMP queries to the all hosts group add...

Page 100: ... their hosts if they want to receive multicast traffic If there is more than one router switch on the LAN performing IP multicasting one of these devices is elected querier and assumes the role of querying the LAN for group members It then propagates the service requests on to any upstream multicast switch router to ensure that it will continue to receive the multicast service Multicast routers us...

Page 101: ...en the IGMP snooping information displays IP multicast addresses range are from 224 0 0 0 through 239 255 255 255 Figure 5 58 IGMP Configuration interface The page includes the following fields Object Description IGMP Protocol Enable or disable the IGMP protocol IGMP Query Enable or disable the IGMP query function The IGMP query information will be displayed in IGMP status section ...

Page 102: ...ed working port Other switches in the X Ring group are called working switches and their two member ports are called working ports When the failure of network connection occurs the backup port of the master switch Ring Master will automatically become a working port to recover from the failure 5 6 6 1 X Ring Application The Industrial Switch supports the X Ring protocol that can help the network s...

Page 103: ...following figure is a sample of coupling ring application Figure 5 60 Coupling Ring Application 5 6 6 3 Dual Homing Application Dual Homing function is to prevent the connection lose from between X Ring group and upper level core switch Assign two ports to be the Dual Homing port that is backup port in the X Ring group The Dual Homing function only works when the X Ring function is active Each X R...

Page 104: ... Dual ring is the advanced function that supports backup connection for transmission redundant purpose While the connection fails the system will recover from failure within 20 milliseconds Apart from that Dual Ring only needs one unit and only the one located in the middle to be configured as the Ring Master switch to deploy the dual ring Figure 5 62 Dual Ring Application ...

Page 105: ...lso supports the Couple Ring that can connect 2 or more X Ring group for the redundant backup function Dual Homing function that can prevent connection lose between X Ring group and upper level core switch Apart from the advantages Dual Ring can handle 2 rings in the system and has the ability to recover from failure within 20 milliseconds Figure 5 63 X Ring Interface The page includes the followi...

Page 106: ... of the ports on the switch to be the Dual Homing port For a switch there is only one Dual Homing port Dual Homing function works only when the X Ring function enabled Enable Dual Ring When this check box is ticked the Enable Ring Master check box will then also be enabled by the system which means this equipment is assigned as the Ring Master The Dual Ring differs from the Couple Ring in that it ...

Page 107: ...d authentication protocol that restricts unauthorized clients from connecting to a LAN through publicly accessible ports The authentication server authenticates each client connected to a switch port before making available any services offered by the switch or the LAN Until the client is authenticated 802 1X access control allows only Extensible Authentication Protocol over LAN EAPOL traffic thro...

Page 108: ... receives EAPOL frames and relays them to the authentication server the Ethernet header is stripped and the remaining EAP frame is re encapsulated in the RADIUS format The EAP frames are not modified or examined during encapsulation and the authentication server must support EAP within the native frame format When the switch receives frames from the authentication server the server s frame header ...

Page 109: ...authorized state allowing all traffic for the client to flow normally If a client that does not support 802 1X is connected to an unauthorized 802 1X port the switch requests the client s identity In this situation the client does not respond to the request the port remains in the unauthorized state and the client is not granted access to the network In contrast when an 802 1X enabled client conne...

Page 110: ...zed state 5 7 1 2 System Configuration After enabling the IEEE 802 1X function you can configure the parameters of this function Figure 5 67 802 1x System Configuration interface The page includes the following fields Object Description IEEE 802 1x Protocol Enable or disable 802 1x protocol Radius Server IP Assign the RADIUS Server IP address Server Port Set the UDP destination port for authentica...

Page 111: ...ing fields Object Description Reject The specified port is required to be held in the unauthorized state Accept The specified port is required to be held in the authorized state Authorize The specified port is set to the Authorized or Unauthorized state in accordance with the outcome of an authentication exchange between the Supplicant and the authentication server Disable When disabled the specif...

Page 112: ...or retransmit next EAPOL PDU during an authentication session Supplicant Timeout Set the period of time the switch waits for a supplicant response to an EAP request Server Timeout Set the period of time the switch waits for a server response to an authentication request Max Requests Set the number of authentication that must time out before authentication fails and the authentication session ends ...

Page 113: ...ce s MAC address when the disconnected or powered off device is active on the network again Via this interface you can add modify delete a static MAC address Add the Static MAC Address You can add static MAC address in the switch MAC table here Figure 5 51 Static MAC Addresses interface The page includes the following fields Object Description MAC Address Enter the MAC address of the port that sho...

Page 114: ...he switch can easily filter the pre configured MAC address and reduce the un safety You can add and delete filtering MAC address Figure 5 52 MAC Filtering interface The page includes the following fields Object Description MAC Address Enter the MAC address that you want to filter ...

Page 115: ...esses learned by the selected port Select the port number The selected port of static dynamic MAC address information will be displayed in here Click Clear MAC Table to clear the dynamic MAC addresses information of the current port shown on the screen Figure 5 53 All MAC Address interface ...

Page 116: ... specific multicast groups With multicast filtering network devices only forward multicast traffic to the ports that are connected to the registered end stations Figure 5 54 Multicast Filtering interface The page includes the following fields Object Description IP Address Assign a multicast group IP address in the range of 224 0 0 0 239 255 255 255 Member Ports Tick the check box beside the port n...

Page 117: ... all configurations to the default value Figure 5 55 Factory Default interface 5 9 Save Configuration Save all configurations that you have made in the system To ensure the all configuration will be saved Click Save Flash to save the all configuration to the flash memory Figure 5 56 Save Configuration interface ...

Page 118: ...User s Manual of ISW 1022M 118 5 10 System Reboot Reboot the switch in software reset Click Reboot to reboot the system Figure 5 57 System Reboot interface ...

Page 119: ...system description string switch config system description xxx system contact System Contact G Set switch system contact window string switch config system contact xxx show system info E Show system information switch show system info ip address Ip address Subnet mask Gateway G Configure the IP address of switch switch config ip address 192 168 1 1 255 255 255 0 192 168 1 254 ip dhcp G Enable DHCP...

Page 120: ...easetime 1 dhcpserver ipbinding IP address I Set static IP for DHCP clients by port switch config interface fastEthernet 2 switch config dhcpserver ipbinding 192 168 1 1 show dhcpserver configuration P Show configuration of DHCP server switch show dhcpserver configuration show dhcpserver clients P Show client entries of DHCP server switch show dhcpserver clients show dhcpserver ip binding P Show I...

Page 121: ...le I Enable security of interface switch config interface fastEthernet 2 switch config if security enable no security I Disable security of interface switch config interface fastEthernet 2 switch config if no security bandwidth type all I Set interface ingress limit frame type to accept all frame switch config interface fastEthernet 2 switch config if bandwidth type all bandwidth type broadcast mu...

Page 122: ...state Enable Disable I Use the state interface configuration command to specify the state mode of operation for Ethernet ports Use the disable form of this command to disable the port switch config interface fastEthernet 2 switch config if state Disable show interface configuration I show interface configuration status switch config interface fastEthernet 2 switch config if show interface configur...

Page 123: ... less than zero or be large than the amount of member ports switch config aggregator group 1 1 4 lacp workp 2 or switch config aggregator group 2 1 4 3 lacp workp 3 aggregator group GroupID Port list nolacp G Assign a static trunk group GroupID 1 3 Port list Member port list This parameter could be a port range ex 1 4 or a port list separate by a comma ex 2 3 6 switch config aggregator group 1 2 4...

Page 124: ... group 2 IEEE 802 1Q VLAN vlan 8021q name GroupName vid VID V Change the name of VLAN group if the group didn t exist this command can t be applied switch vlan vlan 8021q name test vid 22 vlan 8021q port PortNumber access link untag UntaggedVID V Assign a access link for VLAN by port if the port belong to a trunk group this command can t be applied switch vlan vlan 8021q port 3 access link untag 3...

Page 125: ...ntag 4 tag 3 6 8 or switch vlan vlan 8021q trunk 3 hybrid link untag 5 tag 6 8 show vlan GroupID or show vlan V Show VLAN information switch vlan show vlan 23 no vlan group GroupID V Delete port base group ID switch vlan no vlan group 2 6 5 Spanning Tree Commands Set Netstar Commands Level Description Example spanning tree enable G Enable spanning tree switch config spanning tree enable spanning t...

Page 126: ...tion command to set the path cost for Spanning Tree Protocol STP calculations In the event of a loop spanning tree considers the path cost when selecting an interface to place into the forwarding state switch config interface fastEthernet 2 switch config if stp path cost 20 stp path priority Port Priority I Use the spanning tree port priority interface configuration command to configure a port pri...

Page 127: ...rtbased 1 low qos priority cos Priority lowest low middle high G Configure COS Priority switch config qos priority cos 0 middle qos priority tos Priority lowest low middle high G Configure TOS Priority switch config qos priority tos 3 high show qos P Displays the information of QoS configuration Switch show qos no qos G Disable QoS function switch config no qos 6 7 IGMP Commands Set Netstar Comman...

Page 128: ... static hwaddr 000012345678 no mac address table filter hwaddr MAC G Remove an entry of MAC address table filter switch config no mac address table filter hwaddr 000012348678 no mac address table G Remove dynamic entry of MAC address table switch config no mac address table 6 9 SNMP Commands Set Netstar Commands Level Description Example snmp system name System Name G Set SNMP agent system name sw...

Page 129: ...V3 agent switch config snmpv3 access context name Test group G1 security level AuthPriv match rule Exact views V1 V1 V1 snmpv3 mibview view View Name type Excluded Included sub oid OID G Configure the mibview table of SNMPV3 agent switch config snmpv3 mibview view V1 type Excluded sub oid 1 3 6 1 show snmp P Show SNMP configuration switch show snmp no snmp community strings Community G Remove the ...

Page 130: ...s Level Description Example monitor RX TX Both I Configure source port of monitor function switch config interface fastEthernet 2 switch config if monitor RX monitor rx Port ID G Set RX destination port of monitor function switch config monitor rx 2 monitor tx Port ID G Set TX destination port of monitor function switch config monitor tx 3 show monitor P Show port monitor information switch show m...

Page 131: ... system sharedkey ID G Use the 802 1x system share key global configuration command to change the shared key value switch config 8021x system sharedkey 123456 8021x system nasid words G Use the 802 1x system nasid global configuration command to change the NAS ID switch config 8021x system nasid test1 8021x misc quietperiod sec G Use the 802 1x misc quiet period global configuration command to spe...

Page 132: ...ig if 8021x portstate accept show 8021x E Displays a summary of the 802 1x properties and also the port sates switch show 8021x no 8021x G Disable 802 1x function switch config no 8021x 6 12 TFTP Commands Set Netstar Commands Level Description Defaults Example backup flash backup_cfg G Save configuration to TFTP and need to specify the IP of TFTP server and the file name of image switch config bac...

Page 133: ...smtp P Show the information of SMTP switch show smtp no smtp G Disable SMTP function switch config no smtp event device cold start Systemlog SMTP Both G Set cold start event type switch config event device cold start both event authentication failure Systemlog SMTP Both G Set Authentication failure event type switch config event authentication failure both event ring topology change Systemlog SMTP...

Page 134: ...ve this command can t be applied Parameter format yyyymmdd hh mm switch config sntp daylight period 20060101 01 01 20060202 01 01 sntp daylight offset Minute G Set offset of daylight saving time if SNTP function is inactive this command can t be applied switch config sntp daylight offset 3 sntp ip IP G Set SNTP server IP if SNTP function is inactive this command can t be applied switch config sntp...

Page 135: ...tch config ring ringport 7 8 ring couplingport Coupling Port G Configure Coupling Port switch config ring couplingport 1 ring controlport Control Port G Configure Control Port switch config ring controlport 2 ring homingport Dual Homing Port G Configure Dual Homing Port switch config ring homingport 3 show ring P Show the information of X Ring switch show ring no ring G Disable X ring switch confi...

Page 136: ...the incoming frame in an internal buffer do the complete error checking before transmission Therefore no error packets occurrence it is the best choice when a network needs efficiency and stability The Ethernet Switch scans the destination address from the packet header searches the routing table pro vided for the incoming port and forwards the packet only if required The fast forwarding makes the...

Page 137: ...ached device is 100Base TX port will set to 10Mbps no auto negotiation 10Mbps 10Mbps with auto negotiation 10 20Mbps 10Base T Full Duplex 100Mbps no auto negotiation 100Mbps 100Mbps with auto negotiation 100 200Mbps 100Base TX Full Duplex ...

Page 138: ...00Base TX When connecting your 10 100Mbps Ethernet Switch to another switch a bridge or a hub a straight or crossover cable is necessary Each port of the Switch supports auto MDI MDI X detection That means you can directly connect the Switch to any Ethernet devices without making a crossover cable The following table and diagram show the standard RJ 45 receptacle connector and their pin assignment...

Page 139: ...ite Green 4 Blue 5 White Blue 6 Green 7 White Brown 8 Brown 1 White Orange 2 Orange 3 White Green 4 Blue 5 White Blue 6 Green 7 White Brown 8 Brown Straight Cable SIDE 1 SIDE2 SIDE 1 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 SIDE 2 1 White Orange 2 Orange 3 White Green 4 Blue 5 White Blue 6 Green 7 White Brown 8 Brown 1 White Orange 2 Green 3 White Orange 4 Blue 5 White Blue 6 Orange 7 White Brown 8 Brown F...

Page 140: ... Also be sure that the length of any twisted pair connection does not exceed 100 meters 328 feet Diagnosing LED Indicators To assist in identifying problems the switch can be easily monitored through panel indicators which describe common problems the user may encounter and where the user can find possible solutions If the power indicator does not light on when the power cord is plugged in you may...

Page 141: ...00 3 2 2000 Class A EN 61000 3 3 1995 A1 2001 EN 61000 6 2 2001 IEC 61000 4 2 2001 IEC 61000 4 3 2002 IEC 61000 4 4 2004 IEC 61000 4 5 2001 IEC 61000 4 6 2003 A1 2004 IEC 61000 4 8 2001 IEC 61000 4 11 2001 IEC 61000 4 12 1995 A1 2000 Responsible for marking this declaration if the Manufacturer Authorized representative established within the EU Authorized representative established within the EU i...

Reviews:

No comments