manualshive.com logo in svg

Planet WGS-4215-8T2S, User Manual, Page: 294 / 359

Share
Download
Planet WGS-4215-8T2S User Manual Download Page 294

User’s Manual of WGS Managed Series 

 

 

294 

4.10.6 IPv6-based ACE 

An ACE consists of several parameters. Different parameter options are displayed depending on the frame type that you 
selected. The IPv6-based ACE screens in 

Figure 4-10-11 

&

 Figure 4-10-12

 appear. 

 

Figure 4-10-11

 IP-based ACE Page Screenshot 

Summary of Contents for WGS-4215-8T2S

Page 1: ...User s Manual of WGS Managed Series 1...

Page 2: ...imits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequenc...

Page 3: ...ail Mount Installation 45 2 2 3 Installing the SFP transceiver 47 3 SWITCH MANAGEMENT 51 3 1 Requirements 51 3 2 Management Access Overview 52 3 3 Web Management 53 3 4 SNMP based Network Management 5...

Page 4: ...onfiguration 93 4 3 2 Port Counters 95 4 3 3 Bandwidth Utilization 100 4 3 4 Port Mirroring 101 4 3 5 Jumbo Frame 103 4 3 6 Port Error Disabled Configuration 104 4 3 7 Port Error Disabled 106 4 3 8 Pr...

Page 5: ...Setting 166 4 6 6 MST Instance Configuration 168 4 6 7 MST Port Setting 170 4 6 8 STP Statistics 172 4 7 Multicast 173 4 7 1 Properties 173 4 7 2 IGMP Snooping 174 4 7 2 1 IGMP Setting 178 4 7 2 2 IGM...

Page 6: ...214 4 8 4 2 Egress Bandwidth Control 215 4 8 4 3 Egress Queue 216 4 8 5 Voice VLAN 217 4 8 5 1 Introduction to Voice VLAN 217 4 8 5 2 Properties 218 4 8 5 3 Telephony OUI MAC Setting 219 4 8 5 4 Telep...

Page 7: ...etting 263 4 9 8 2 VLAN Setting 264 4 9 8 3 Port Setting 265 4 9 8 4 Statistics 267 4 9 8 5 Rate Limit 268 4 9 9 IP Source Guard 269 4 9 9 1 Port Settings 270 4 9 9 2 Binding Table 272 4 9 10 Port Sec...

Page 8: ...st 328 4 13 5 Trace Router 329 4 14 RMON 330 4 14 1 RMON Statistics 330 4 14 2 RMON Event 332 4 14 3 RMON Event Log 333 4 14 4 RMON Alarm 334 4 14 5 RMON History 337 4 14 6 RMON History Log 338 4 15 P...

Page 9: ...naged Series 9 5 3 Forwarding Filtering 354 5 4 Store and Forward 354 5 5 Auto Negotiation 355 6 TROUBLESHOOTING 356 APPENDIX A Switch s RJ45 Pin Assignments 358 A 1 1000Mbps 1000BASE T 358 A 2 10 100...

Page 10: ...C WGS 4215 8P2S Industrial 8 Port 10 100 1000T 802 3at PoE 2 Port 100 1000X SFP Wall mount Managed Switch 40 75 degrees C WGS 4215 16P2S Industrial 16 Port 10 100 1000T 802 3at PoE 2 Port 100 1000X S...

Page 11: ...P2S in a compact but rugged IP30 IP40 WGS 4215 16P2S metal housing the WGS managed series is an ideal solution to meeting the demand for the following network applications Building Home automation net...

Page 12: ...In the example below when the 3 pin terminal block fails to work the hardware failover function will be activated automatically to keep powering the WGS managed series via the DC plug power alternativ...

Page 13: ...k access by denying packets based on source and destination IP address TCP UDP ports or defined typical network applications Its protection mechanism also comprises 802 1X port based user and device a...

Page 14: ...Management As a managed PoE Switch for surveillance wireless and VoIP networks the WGS PoE managed series features special PoE Management functions PD alive check Scheduled power recycling PoE schedul...

Page 15: ...ses save power and money It also increases security by powering off PDs that should not be in use during non business hours PoE Usage Monitoring Via the power usage chart in the web management interfa...

Page 16: ...d as follows Section 2 INSTALLATION The section explains the functions of the Switch and how to physically install the Managed Switch Section 3 SWITCH MANAGEMENT The section contains the information a...

Page 17: ...power limitation PD classification detection PD alive check PoE schedule Layer 2 Features Prevents packet loss with back pressure half duplex and IEEE 802 3x pause frame flow control full duplex High...

Page 18: ...thentication Built in RADIUS client to co operate with the RADIUS servers RADIUS TACACS login user access authentication Access Control List IPv4 IPv6 IP based ACL MAC based ACL MAC Security Static MA...

Page 19: ...Images Hardware reset button for system reboot or reset to factory default SNTP Network Time Protocol Cable Diagnostics Link Layer Discovery Protocol LLDP Protocol and LLDP MED SNMP trap for interface...

Page 20: ...Address Table 8K entries Shared Data Buffer 4 1 megabits Flow Control IEEE 802 3x pause frame for full duplex Back pressure for half duplex Jumbo Frame 10 Kbytes Reset Button 5 sec System reboot 5 sec...

Page 21: ...er input 200 watts depending on power input 240 watts depending on power input Max Number of Class 2 PDs 4 8 16 Max Number of Class 3 PDs 4 8 16 Max Number of Class 4 PDs 4 7 9 Layer 2 Functions Port...

Page 22: ...ection IP source guard Storm control support Broadcast Unknown unicast Unknown multicast Management Functions Basic Management Interfaces Web browser Telnet SNMP v1 v2c v3 Firmware upgrade by HTTP TFT...

Page 23: ...802 1Q VLAN Tagging IEEE 802 1x Port Authentication Network Control IEEE 802 1ab LLDP RFC 768 UDP RFC 793 TFTP RFC 791 IP RFC 792 ICMP RFC 2068 HTTP RFC 1112 IGMP v1 RFC 2236 IGMP v2 RFC 3376 IGMP v3...

Page 24: ...Button 5 sec System reboot 5 sec Factory default LED Power LED Power Green Power Green RJ45 LED 1000 LNK ACT Green 10 100 LNK ACT Amber 1000 LNK ACT Green 10 100 LNK ACT Amber SFP LED N A 1000 LNK AC...

Page 25: ...nd DHCP Option82 STP BPDU guard BPDU filtering and BPDU forwarding DoS attack prevention ARP inspection IP source guard Management Functions Basic Management Interfaces Web browser Telnet SNMP v1 v2c...

Page 26: ...Authentication Network Control IEEE 802 1ab LLDP IEEE 802 3af Power over Ethernet IEEE 802 3at High Power over Ethernet RFC 768 UDP RFC 793 TFTP RFC 791 IP RFC 792 ICMP RFC 2068 HTTP RFC 1112 IGMP v1...

Page 27: ...play indicators and ports Front panel illustrations in this chapter display the unit LED indicators Before connecting any network device to the Managed Switch please read this chapter completely 2 1 H...

Page 28: ...User s Manual of WGS Managed Series 28 WGS 4215 8T Front Panel Figure 2 1 1b WGS 4215 8T Front Panel WGS 4215 8T2S Front Panel Figure 2 1 1c WGS 4215 8T2S Front Panel...

Page 29: ...User s Manual of WGS Managed Series 29 WGS 4215 8P2S Front Panel Figure 2 1 1d WGS 4215 8P2S Front Panel WGS 4215 16P2S Front Panel Figure 2 1 1e WGS 4215 16P2S Front Panel...

Page 30: ...ime Power Input Range Model 3 pin Terminal Block DC Jack WGS 804HPT 48 56V DC 48 56V DC WGS 4215 8T 12 48V DC 24V AC 12 48V DC 24V AC WGS 4215 8T2S 12 48V DC 24V AC 12 48V DC WGS 4215 8P2S 48 56V DC 4...

Page 31: ...he Managed Switch 5 sec Factory Default Reset the Managed Switch to Factory Default configuration The Managed Switch will then reboot and load the default settings shown below Default username admin D...

Page 32: ...Figure 2 1 2a WGS 804HPT LED Panel System LED Color Function PWR Green Lights to indicate that the Switch has power PoE 10 100 1000BASE T Interfaces Port 1 to Port 4 LED Color Function LNK ACT Green L...

Page 33: ...indicate that the port is operating at 1000Mbps Off If LNK ACT LED is Off it indicates that the port is link down or operating at 10 100Mbps PoE Power Usage Unit Watt LED Color Function 30 Green Ligh...

Page 34: ...Color Function 10 100 LNK ACT Amber Lights To indicate the link through that port is successfully established and operating at 10 100Mbps Blinks To indicate that the switch is actively sending or rece...

Page 35: ...ACT Green Lights To indicate the link through that port is successfully established and operating at 1000Mbps Blinks To indicate that the switch is actively sending or receiving data over that port 10...

Page 36: ...actively sending or receiving data over that port PoE Amber Lights To indicate the port is providing DC in line power Off To indicate the connected device is not a PoE Powered Device PD Per 100 1000X...

Page 37: ...hts to indicate the system is working Per 10 100 1000BASE T Port LED Color Function LNK ACT Green Lights To indicate the link through that port is successfully established Blinks To indicate that the...

Page 38: ...ction 60W Amber Blinks To indicate the system consumes between 30 watts and 60 watts of PoE power Lights To indicate the system consumes between 60 watts and 90 watts of PoE power 120W Amber Blinks To...

Page 39: ...User s Manual of WGS Managed Series 39 2 1 3 Physical Dimensions WGS 804HPT Dimensions W x D x H 148 x 25 x 134mm...

Page 40: ...User s Manual of WGS Managed Series 40 WGS 4215 8T Dimensions W x D x H 148 x 25 x 134mm...

Page 41: ...User s Manual of WGS Managed Series 41 WGS 4215 8T2S Dimensions W x D x H 178 x 25 x 134mm...

Page 42: ...User s Manual of WGS Managed Series 42 WGS 4215 8P2S Dimensions W x D x H 178 x 25 x 134mm...

Page 43: ...User s Manual of WGS Managed Series 43 WGS 804HPT Dimensions W x D x H 245 x 140 x 24 4 mm...

Page 44: ...net Installation A To install the Managed Switch on desktop or shelf please follow these steps Step 1 There are 4 holes with 8mm diameter on the wall WGS 804HPT WGS 4215 8T the distance between the 2...

Page 45: ...The DIN rail kit is included in the package When the wall mount application for the Wall mount Managed Switch needs to be replaced with DIN rail application please refer to the following figures to s...

Page 46: ...User s Manual of WGS Managed Series 46 Step 2 Lightly insert the button of DIN rail into the track Step 3 Check whether the DIN rail is tightly on the track...

Page 47: ...both single mode and multi mode SFP transceivers The following list of approved PLANET SFP transceivers is correct at the time of publication Fast Ethernet Transceiver 100BASE X SFP Model Speed Mbps...

Page 48: ...1000 LC Multi Mode 2km 1310nm 0 60 MGB LX V2 YES 1000 LC Single Mode 20km 1310nm 0 60 MGB L40 YES 1000 LC Single Mode 40km 1310nm 0 60 MGB L80 YES 1000 LC Single Mode 80km 1550nm 0 60 MGB L120 V2 YES...

Page 49: ...GB TLA40 MGB TLB40 YES 1000 WDM LC Single Mode 40km 1310nm 1550nm 40 75 1000 WDM LC Single Mode 40km 1550nm 1310nm 40 75 MGB TLA80 MGB TLB80 YES 1000 WDM LC Single Mode 80km 1490nm 1550nm 40 75 1000 W...

Page 50: ...iver 2 Connect the other end of the cable to a device with SFP transceiver installed 3 Check the LNK ACT LED of the SFP slot on the front of the Managed Switch Ensure that the SFP transceiver is opera...

Page 51: ...covers the following topics Requirements Management Access Overview Web Management Access SNMP Access Standards Protocols and Related Reading 3 1 Requirements Workstations running Windows 2000 XP 200...

Page 52: ...ree management methods Method Advantages Disadvantages Web Browser Ideal for configuring the switch remotely Compatible with all popular browsers Can be accessed from any location Most visually appeal...

Page 53: ...r the switch you can access the Managed Switch s Web interface applications directly in your Web browser by entering the IP address of the Managed Switch Figure 3 1 1 Web Management You can then use y...

Page 54: ...nagement Station only knows the set community string it can read and write to the MIBs However if it only knows the get community string it can only read MIBs The default gets and sets community strin...

Page 55: ...cription to the devices 2 After setup is completed press the Update Device Update Multi or Update All button to take effect The meaning of the 3 buttons above are shown below Update Device use current...

Page 56: ...va Applets to use network ports The Managed Switch can be configured through an Ethernet connection making sure the manager PC must be set on the same IP subnet address as the Managed Switch For examp...

Page 57: ...username admin with password admin to login the main screen of Managed Switch The login screen in Figure 4 1 2 appears Figure 4 1 2 Login screen Default User Name admin Default Password admin After e...

Page 58: ...the commands and statistics the Managed Switch provides It is recommended to use Internet Explore 8 0 or above to access Managed Switch The changed IP address takes effect immediately after clicking o...

Page 59: ...an be set to display different information for the ports including Link up or Link down Clicking on the image of a port opens the Port Statistics page The port states are illustrated as follows State...

Page 60: ...r reset to default Click to logout the Managed Switch Click to reboot the Managed Switch Click to refresh the page 4 1 1 Save Button This save button allows you to save the running startup backup conf...

Page 61: ...configuration file stores in the RAM In the current version the running configuration sequence running config can be saved from the RAM to FLASH by saving Source File Running Configuration to Destina...

Page 62: ...ng config can be saved from the RAM to FLASH by Save Configurations to FLASH function so that the running configuration sequence becomes the startup configuration file which is called configuration sa...

Page 63: ...s page IPv6 Configuration Configure the switch managed IPv6 information on this page User Configuration Configure new user name and password on this page Time Settings Configure SNTP on this page Log...

Page 64: ...r Date The loader date of this Managed Switch Firmware Version The firmware version of this Managed Switch Firmware Date The firmware date of this Managed Switch System Object ID The system object ID...

Page 65: ...ls and the configured IP address is zero DHCP will retry If DHCP fails and the configured IP address is non zero DHCP will stop and the configured IP settings will be used The DHCP client will announc...

Page 66: ...2 4 Figure 4 2 5 appear Figure 4 2 4 IPv6 Address Setting Page Screenshot The page includes the following fields Object Description Auto Configuration Enable IPv6 auto configuration by checking this b...

Page 67: ...figuration Protocol version 6 DHCPv6 server By default the Managed Switch does not perform DHCPv6 client actions DHCPv6 clients request the delegation of long lived prefixes that they can push to indi...

Page 68: ...e 4 2 6 Figure 4 2 7 appear Figure 4 2 6 Local User Information Page Screenshot The page includes the following fields Object Description Username The name identifying the user Maximum length 32 chara...

Page 69: ...is an acronym for Simple Network Time Protocol a network protocol for synchronizing the clocks of computer systems You can specify SNTP Servers and set GMT Time zone The SNTP Configuration screens in...

Page 70: ...re the Daylight Saving Time duration for single time configuration Default Disabled Daylight Saving Time Offset Enter the number of minutes to add during Daylight Saving Time Range 1 to 1440 Recurring...

Page 71: ...Current Data Time Display the current data time SNTP Display the current SNTP state Time Zone Display the current time zone Daylight Saving Time Display the current daylight saving time state Dayligh...

Page 72: ...following fields Object Description SNTP Server Address Type the IP address or domain name of the SNTP server Server Port Type the port number of the SNTP Buttons Click to apply changes Figure 4 2 11...

Page 73: ...mal but significant condition such as cold start 4 Warning Warning conditions e g return false unexpected return 3 Error Error conditions e g invalid input default used 2 Critical Critical conditions...

Page 74: ...wing target types are supported Buffered Target the buffer of the local log File Target the file of the local log Severity The severity of the local log entry The following severity types are supporte...

Page 75: ...e 4 2 15 Local Log Setting Status Page Screenshot The page includes the following fields Object Description Status Display the current local log state Target Display the current local log target Sever...

Page 76: ...r Figure 4 2 16 Remote Log Target Page Screenshot The page includes the following fields Object Description Server Address Provide the remote syslog IP address of this switch Server Port Provide the p...

Page 77: ...17 Remote Log Setting Status Page Screenshot The page includes the following fields Object Description Status Display the current remote syslog state Server Info Display the current remote syslog serv...

Page 78: ...Warning level of the warning conditions for log view notice Notice level of the normal but significant conditions for log view info Informational level of the informational messages for log view debu...

Page 79: ...ot The page includes the following fields Object Description No This is the number for logs Timestamp Display the time of log Category Display the category type Severity Display the severity type Mess...

Page 80: ...element Management information base MIB A MIB is a collection of managed objects residing in a virtual information store Collections of related managed objects are defined in specific MIB modules Net...

Page 81: ...s Object Description Status Indicates the SNMP mode operation Possible modes are Enabled Enable SNMP mode operation Disabled Disable SNMP mode operation Buttons Click to apply changes Figure 4 2 22 SN...

Page 82: ...view The allowed string content is digital number or asterisk Subtree OID Mask The bitmask identifies which positions in the specified object identifier are to be regarded as wildcards for the purpos...

Page 83: ...25 SNMPv3 Access Group Setting Page Screenshot The page includes the following fields Object Description Group Name A string identifying the group name that this entry should belong to The allowed st...

Page 84: ...me of the view in which you specify a notify inform or trap Buttons Click to add a new access entry Check to delete the entry Figure 4 2 26 SNMP View Table Status Page Screenshot The page includes the...

Page 85: ...y supported mode Possible versions are Basic Set SNMP community mode supported version 1 and 2c Advanced Set SNMP community mode supported version 3 Group Name A string identifying the group name that...

Page 86: ...ure 4 2 30 appear Figure 4 2 29 SNMPv3 Users Configuration Page Screenshot The page includes the following fields Object Description User Name A string identifying the user name that this entry should...

Page 87: ...ocol that this entry should belong to Possible privacy protocol are None None privacy protocol DES An optional flag to indicate that this user using DES authentication protocol Encryption Key A string...

Page 88: ...4 address For example 192 1 2 34 SNMP Version Indicates the SNMP trap supported version Possible versions are SNMP v1 Set SNMP trap supported version 1 SNMP v2c Set SNMP trap supported version 2c Noti...

Page 89: ...ients screens in Figure 4 2 33 Figure 4 2 34 appear Figure 4 2 33 SNMPv3 Notification Recipients Page Screenshot The page includes the following fields Object Description Server Address Indicates the...

Page 90: ...name UDP Port Display the current UDP port Time Out Display the current time out Retries Display the current retry times Action Delete the SNMPv3 host entry 4 2 7 9 SNMP Engine ID Configure SNMPv3 En...

Page 91: ...and all F s are not allowed Buttons Click to apply changes Figure 4 2 36 SNMPv3 Engine ID Status Page Screenshot The page includes the following fields Object Description User Default Display the curr...

Page 92: ...decimal notation x y z w Engine ID An octet string identifying the engine ID that this entry should belong to Buttons Click to apply changes Figure 4 2 38 SNMPv3 Remote Engine ID Status Page Screensho...

Page 93: ...d Status Disables port error status Protected Ports Configures protected ports settings EEE Configures EEE settings SFP Module Information Displays SFP module information 4 3 1 Port Configuration This...

Page 94: ...Auto Setup Auto negotiation Full Force sets Full Duplex mode Half Force sets Half Duplex mode Flow Control When Auto Speed is selected for a port this section indicates the flow control capability tha...

Page 95: ...port Flow Control Configuration Display the current flow control configuration of the port Flow Control Status Display the current flow control status of the port 4 3 2 Port Counters This page provide...

Page 96: ...fer space Transmit Octets The total number of octets transmitted out of the interface including framing characters Transmit Unicast Packets The total number of packets that higher level protocols requ...

Page 97: ...ata packets FCS Errors A count of frames received on a particular interface that are an integral number of octets in length but do not pass the FCS check This count does not include frames received wi...

Page 98: ...pause frames Out Pause Frames The number of transmitted pause frames Figure 4 3 6 RMON Counters Page Screenshot Object Description Drop Events The total number of events in which packets were dropped...

Page 99: ...han 64 octets in length excluding framing bits but including FCS octets and had either an FCS or alignment error Jabbers The total number of frames received that were longer than 1518 octets excluding...

Page 100: ...ne graph The Bandwidth Utilization screen in Figure 4 3 7 appears To view the port utilization click on the Port Management folder and then the Bandwidth Utilization link Figure 4 3 7 Port Bandwidth U...

Page 101: ...analyzer can be attached to analyze the frame flow The Managed Switch can unobtrusively mirror traffic from any port to a monitor port You can then attach a protocol analyzer or RMON probe to this por...

Page 102: ...o this port Sniffer TX Ports Frames transmitted from these ports are mirrored to the mirroring port Frames received are not mirrored Sniffer RX Ports Frames received at these ports are mirrored to the...

Page 103: ...umbo Frame Setting Page Screenshot The page includes the following fields Object Description Jumbo Frame Bytes Enter the maximum frame size allowed for the switch port including FCS The allowed range...

Page 104: ...able or disable the port error disabled function to check status by self loop Broadcast Flood Enable or disable the port error disabled function to check status by broadcast flood Unknown Multicast Fl...

Page 105: ...PDU guard status Self Loop Display the current self loop status Broadcast Flood Display the current broadcast flood status Unknown Multicast Flood Display the current unknown multicast flood status Un...

Page 106: ...or disabled reason of the port Time Left Seconds Display the time left 4 3 8 Protected Ports Overview When a switch port is configured to be a member of protected group also called Private VLAN commun...

Page 107: ...s in the private VLAN Ports which can receive traffic from only promiscuous ports in the private VLAN The configuration of promiscuous and isolated ports applies to all private VLANs When traffic come...

Page 108: ...miscuous port and one or more isolated or host ports This VLAN conveys traffic between the isolated ports and a lone promiscuous port Unprotected A promiscuous port can communicate with all the interf...

Page 109: ...in auto negotiation mode where the port is negotiated to either 1G or 100 Mbit full duplex mode For ports that are not EEE capable the corresponding EEE checkboxes are grayed out and thus impossible...

Page 110: ...ed the SFP module with digital diagnostics monitoring DDM function this feature is also known as digital optical monitoring DOM You can check the physical or operational status of an SFP module via th...

Page 111: ...odule Status screens in Figure 4 3 20 Figure 4 3 21 appear Figure 4 3 20 Port Selected Page Screenshot with Sample Switch The page includes the following fields Object Description Port Select port num...

Page 112: ...t with Sample Switch The page includes the following fields Object Description Port The logical port for the settings contained in the same row Temperature Display the current SFP temperature Voltage...

Page 113: ...s can be assigned manually Port Trunk or automatically by enabling Link Aggregation Control Protocol LACP on the relevant links Aggregated Links are treated by the system as a single logical port Spec...

Page 114: ...aggregation ports None of the ports in a link aggregation can be configured as a mirror source port or a mirror target port All of the ports in a link aggregation have to be treated as a whole when mo...

Page 115: ...following fields Object Description Load Balance Algorithm Select load balance algorithm mode MAC Address The MAC address can be used to calculate the port for the frame IP MAC Address The IP and MAC...

Page 116: ...elect LAG number from this drop down list Name Indicates each LAG name Type Indicates the trunk type Static Force aggregated selected ports to be a trunk group LACP LACP LAG negotiate Aggregated Port...

Page 117: ...roup 4 4 3 LAG Port Setting This page allows setting configuration for each LAG The LAG Port setting screens in Figure 4 4 6 Figure 4 4 7 appear Figure 4 4 6 LAG Port Setting Information Page Screensh...

Page 118: ...icates whether pause frames on the port are obeyed The current Tx column indicates whether pause frames on the port are transmitted The Rx and Tx settings are determined by the result of the last Auto...

Page 119: ...in Figure 4 4 8 Figure 4 4 9 appear Figure 4 4 8 LACP Setting Page Screenshot The page includes the following fields Object Description System Priority A value which is used to identify the active LAC...

Page 120: ...LACP port setting Priority The Priority controls the priority of the port If the LACP partner wants to form a larger group than is supported by this device then this parameter will control which ports...

Page 121: ...e displays LAG status The LAG Status screens in Figure 4 4 12 Figure 4 4 13 appear Figure 4 4 12 LAG Status Page Screenshot The page includes the following fields Object Description LAG Display the cu...

Page 122: ...ve state machine status of the port INIT means the port is in initialize state PORTds means port disabled state EXPR means expired state LACPds means LACP disabled state DFLT means defaulted state CRR...

Page 123: ...nual of WGS Managed Series 123 Expired The contents could be true or false If the contents are false the web will show _ if the contents are true the Web shows A T G S C D F and E for each content res...

Page 124: ...nodes that frequently communicate with each other are assigned to the same VLAN regardless of where they are physically on the network Logically a VLAN can be equated to a broadcast domain because br...

Page 125: ...nate broadcast storms in large networks This also provides a more secure and cleaner network environment An IEEE 802 1Q VLAN is a group of ports that can be located anywhere in the network but communi...

Page 126: ...act of putting 802 1Q VLAN information into the header of a packet Untagging The act of stripping 802 1Q VLAN information out of the packet header 802 1Q VLAN Tags The figure below shows the 802 1Q VL...

Page 127: ...ID contained within the tag Tagged packets are also assigned a PVID but the PVID is not used to make packet forwarding decisions the VID is Tag aware switches must keep a table to relate PVID within t...

Page 128: ...the VLAN tags should be stripped off before passing it on to any end node host that does not support VLAN tagging VLAN Classification When the switch receives a frame it classifies the frame in one of...

Page 129: ...Figure 4 5 1 Management VLAN Setting Page Screenshot The page includes the following fields Object Description Management VLAN Provide the managed VLAN ID Buttons Click to apply changes Figure 4 5 2...

Page 130: ...tes the ID of this particular VLAN VLAN Action This column allows users to add or delete VLAN s VLAN Name Prefix Indicates the name of this particular VLAN Buttons Click to apply changes Figure 4 5 4...

Page 131: ...ember that the PVID is only used internally within the Switch Untagging is used to send packets from an 802 1Q compliant network device to a non compliant network device Frame Income Frame Leave Incom...

Page 132: ...nd the original VLAN tag with the customer related VID is again available This provides a tunneling mechanism to connect remote costumer VLANs through a common MAN space without interfering with the V...

Page 133: ...he VLAN ID that the port belongs to VLAN group or the untagged traffic will be dropped The range for the PVID is 1 4094 Accepted Type Determines whether the port accepts all frames or only tagged fram...

Page 134: ...ing fields Object Description Port The switch port number of the logical port Interface VLAN Mode Display the current interface VLAN mode PVID Display the current PVID Accepted Frame Type Display the...

Page 135: ...port number of the logical port Interface VLAN Mode Display the current interface VLAN mode Membership Select VLAN membership for each interface by marking the appropriate radio button for a port or...

Page 136: ...N Membership This page provides an overview of membership status for VLAN users The VLAN Membership Status screen in Figure 4 5 8 appears Figure 4 5 8 Port VLAN Membership Table Page Screenshot The pa...

Page 137: ...hough not mandatory we suggest configuring a separate VLAN for each major protocol running on your network Do not add port members at this time 2 Create a protocol group for each of the protocols you...

Page 138: ...ck to apply changes Figure 4 5 10 Protocol VLAN Group State Page Screenshot The page includes the following fields Object Description Group ID Display the current group ID Frame Type Display the curre...

Page 139: ...ing fields Object Description Port Select port from this drop down list to assign protocol VLAN port Group Select group ID from this drop down list to protocol VLAN group VLAN VLAN ID assigned to the...

Page 140: ...ports across the network VLANs are dynamically configured based on join messages issued by host devices and propagated throughout the network GVRP must be enabled to permit automatic VLAN registration...

Page 141: ...fter a Leave or LeaveAll message has been issued the applicants can rejoin before the port actually leaves the group Range 45 32760 centiseconds Default 60 centiseconds LeaveAll Timeout The interval b...

Page 142: ...tocol VLAN port GVRP Enabled Controls whether GVRP is enabled or disabled on port Registration Mode By default GVRP ports are in normal registration mode These ports use GVRP join messages from neighb...

Page 143: ...tus Display the current GVRP port state Registration Mode Display the current registration mode VLAN Creation Status Display the current VLAN creation status 4 5 12 GVRP VLAN The GVRP VLAN Database sc...

Page 144: ...cs Page Screenshot The page includes the following fields Object Description Port The switch port number of the logical port Join Empty Rx Tx Display the current join empty TX RX packets Empty Rx Tx D...

Page 145: ...Invalid Protocol ID Display the current invalid protocol ID Invalid Attribute Type Display the current invalid attribute type Invalid Attribute Value Display the current invalid attribute value Invali...

Page 146: ...igure 4 5 20 appears and Table 4 5 2 describes the port configuration of the Managed Switches Figure 4 5 20 Two Separate VLAN Diagrams VLAN Group VID Untagged Members Tagged Members VLAN Group 1 1 Por...

Page 147: ...and Port 2 it will be stripped away its tag becoming an untagged packet Untagged packet entering VLAN 3 1 While PC 4 transmits an untagged packet enters Port 4 the switch will tag it with a VLAN Tag 3...

Page 148: ...to each port Port 1 Port 2 and Port 3 VLAN Mode Hybrid PVID 2 Port 4 Port 5 and Port 6 VLAN Mode Hybrid PVID 3 3 Assign Tagged Untagged to each port VLAN ID 2 Port 1 2 Untagged Port 3 Tagged Port 4 6...

Page 149: ...ware switches In most cases they are used for Uplink to other switches VLANs are separated at different switches but they need to access other switches within the same VLAN group The screen in Figure...

Page 150: ...ort Port 1 Port 2 and Port 3 VLAN Mode Hybrid PVID 2 Port 4 Port 5 and Port 6 VLAN Mode Hybrid PVID 3 Port 7 VLAN Mode Hybrid PVID 1 3 Assign Tagged Untagged to each port VLAN ID 1 Port 1 6 Untagged P...

Page 151: ...User s Manual of WGS Managed Series 151 VLAN ID 3 Port 4 5 Untagged Port 6 7 Tagged Port 1 3 Excluded...

Page 152: ...ailure is also accomplished automatically without operator intervention This automatic network reconfiguration provides maximum uptime to network users However the concepts of the Spanning Tree Algori...

Page 153: ...hat has a higher number than the current root port can cause a root port change STP Port States The BPDUs take some time to pass through a network This propagation delay can result in topology changes...

Page 154: ...wo levels of operation the switch level and the port level The switch level forms a spanning tree consisting of links between one or more switches The port level constructs a spanning tree consisting...

Page 155: ...port or port group level Variable Description Default Value Port Priority A relative priority for each port lower numbers give a higher priority and a greater chance of a given port being elected as t...

Page 156: ...the probability the port will be chosen as the Root Port Port Cost A Port Cost can be set from 0 to 200000000 The lower the number the greater the probability the port will be chosen to forward packe...

Page 157: ...User s Manual of WGS Managed Series 157 Figure 4 6 2 Before Applying the STA Rules In this example only the default STP values are used Figure 4 6 3 After Applying the STA Rules...

Page 158: ...Mbps Fast Ethernet link default port cost 200 000 Gigabit ports could be used but the port cost should be increased from the default to ensure that the link between switch B and switch C is the blocke...

Page 159: ...develop the usefulness of virtual LANs VLANs This Per VLAN Multiple Spanning Tree Protocol configures a separate Spanning Tree for each VLAN group and blocks all but one of the possible alternate pat...

Page 160: ...tween 0 and 65535 The default value is 0 Buttons Click to apply changes Figure 4 6 5 STP Information Page Screenshot The page includes the following fields Object Description STP Display the current S...

Page 161: ...ols whether the operEdge flag should start as being set or cleared The initial operEdge state when a port is initialized BPDU Filter Control whether a port explicitly configured as Edge will transmit...

Page 162: ...pe IEEE 802 1D 1998 IEEE 802 1w 2001 Ethernet 50 600 200 000 20 000 000 Fast Ethernet 10 60 20 000 2 000 000 Gigabit Ethernet 3 10 2 000 200 000 Table 4 6 1 Recommended STP Path Cost Range Port Type L...

Page 163: ...e switch port number of the logical STP port Admin Enable Display the current STP port mode status External Cost Display the current external cost Edge Port Display the current edge port status BPDU F...

Page 164: ...Otherwise this is the priority of the STP RSTP bridge Max Hops This defines the initial value of remaining Hops for MSTI information generated at the boundary of an MSTI region It defines how many bri...

Page 165: ...ut the BPDU packet to check STP current status Enter a value between 1 through 10 Buttons Click to apply changes Figure 4 6 9 CIST Instance Information Page Screenshot The page includes the following...

Page 166: ...is can be used to control priority of ports having identical port cost See above Default 128 Range 0 240 in steps of 16 Internal Path Cost 0 Auto Controls the path cost incurred by the port The Auto s...

Page 167: ...rent internal path cost oper Designated Root Bridge Display the current designated root bridge External Root Cost Display the current external root cost Regional Root Bridge Display the current region...

Page 168: ...STI ID The range for the MSTI ID is 1 15 VLAN List 1 4096 Allow to assign VLAN list to special MSTI ID The range for the VLAN list is 1 4094 Priority Controls the bridge priority Lower numerical value...

Page 169: ...ect Description MSTI ID Display the MSTI ID Regional Root Bridge Display the current designated root bridge Internal Root Cost Display the current internal root cost Designated Bridge Display the curr...

Page 170: ...r Figure 4 6 15 MST Port Configuration Page Screenshot The page includes the following fields Object Description MST ID Enter the special MST ID to configure path cost priority Port Select Select port...

Page 171: ...Priority Port ID Display the current identifier priority port ID Internal Path Cost Conf Oper Display the current internal path cost configuration operation Regional Root Bridge Display the current re...

Page 172: ...Port The switch port number of the logical STP port Configuration BPDUs Received Display the current configuration BPDUs received TCN BPDUs Received Display the current TCN BPDUs received MSTP BPDUs R...

Page 173: ...lticast throttling setting Multicast Filter Configures multicast filter 4 7 1 Properties This page provides multicast properties related configuration The multicast Properties and Information screen i...

Page 174: ...he multicast group About the Internet Group Management Protocol IGMP Snooping Computers and network devices that want to receive multicast transmissions need to inform nearby routers that they will be...

Page 175: ...User s Manual of WGS Managed Series 175 Figure 4 7 3 Multicast Service Figure 4 7 4 Multicast Flooding...

Page 176: ...e when joining or leaving a multicast group IGMP version 1 is defined in RFC 1112 It has a fixed packet size and no optional data The format of an IGMP packet is shown below IGMP Message Format Octets...

Page 177: ...nts to leave a group for version 2 Multicast routers send IGMP queries to the all hosts group address 224 0 0 1 periodically to see whether any group members exist on their sub networks If there is no...

Page 178: ...provides IGMP Snooping related configuration Most of the settings are global whereas the Router Port configuration is related to the current unit as reflected by the page header The IGMP Snooping Set...

Page 179: ...GMP snooping v2 report suppression Figure 4 7 9 IGMP Snooping Information Page Screenshot The page includes the following fields Object Description Entry No Display the current entry number VLAN ID Di...

Page 180: ...Querier Setting The IGMP Querier Setting screens in Figure 4 7 10 Figure 4 7 11 appear Figure 4 7 10 IGMP VLAN Setting Page Screenshot The page includes the following fields Object Description VLAN I...

Page 181: ...statically configure a multicast service on the Managed Switch First add all the ports attached to participating hosts to a common VLAN and then assign the multicast service to that VLAN group Static...

Page 182: ...Modify Click to edit parameter 4 7 2 4 IGMP Group Table This page provides Multicast Database The IGMP Group Table screen in Figure 4 7 14 appears Figure 4 7 14 IGMP Group Table Page Screenshot The p...

Page 183: ...erfaces within the Managed Switch The IGMP Router Setting and Status screens in Figure 4 7 15 Figure 4 7 16 appear Figure 4 7 15 Add Router Port Page Screenshot The page includes the following fields...

Page 184: ...Router Table The Dynamic Static and Forbidden Router Table screens in Figure 4 7 17 Figure 4 7 18 Figure 4 7 19 appear Figure 4 7 17 Dynamic Router Table Page Screenshot The page includes the followi...

Page 185: ...The page includes the following fields Object Description VLAN ID Display the current VLAN ID Port Mask Display the current port mask 4 7 2 7 IGMP Forward All This page provides IGMP Forward All The F...

Page 186: ...each interface Forbidden Interface is forbidden from automatically joining the IGMP via MVR None Interface is not a member of the VLAN Packets associated with this VLAN will not be transmitted by the...

Page 187: ...isplay current general query RX Special Group Query RX Display current special group query RX Special Group Source Query RX Display current special group source query RX Leave TX Display current leave...

Page 188: ...page includes the following fields Object Description MLD Snooping Status Enable or disable the MLD snooping The default value is Disabled MLD Snooping Version Sets the MLD Snooping operation version...

Page 189: ...the current entry number VLAN ID Display the current VLAN ID MLD Snooping Operation Status Display the current MLD snooping operation status Router Ports Auto Learn Display the current router ports au...

Page 190: ...N ID from this drop down list Group IP Address The IP address for a specific multicast service Member Ports Select port number from this drop down list Buttons Click to add IGMP router port entry Figu...

Page 191: ...lected options Life Sec Display the current life 4 7 4 4 MLD Router Setting Depending on your network connections MLD snooping may not always be able to locate the MLD querier Therefore if the MLD que...

Page 192: ...er ports A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or MLD querier Forbid Port Select Specify which ports un act as router ports Buttons Click to ad...

Page 193: ...age Screenshot The page includes the following fields Object Description VLAN ID Display the current VLAN ID Port Display the current dynamic router ports Expiry Time Sec Display the current expiry ti...

Page 194: ...g Page Screenshot The page includes the following fields Object Description VLAN ID Select VLAN ID from this drop down list to assign MLD membership Port The switch port number of the logical port Mem...

Page 195: ...following fields Object Description Total RX Display current total RX Valid RX Display current valid RX Invalid RX Display current invalid RX Other RX Display current other RX Leave RX Display curren...

Page 196: ...nt report TX General Query TX Display current general query TX Special Group Query TX Display current special group query TX Special Group Source Query TX Display current special group source query TX...

Page 197: ...n set the multicast throttling number to limit the number of multicast groups an interface can join at the same time The MAX Group and Information screens in Figure 4 7 35 Figure 4 7 36 appear Figure...

Page 198: ...icast groups that are permitted or denied on the port A multicast filter profile can contain one or more or a range of multicast addresses but only one profile can be assigned to a port When enabled m...

Page 199: ...to include in the profile Specify a multicast group range by entering a start IP address Group to Specifies multicast groups to include in the profile Specify a multicast group range by entering an en...

Page 200: ...to Action Display the current action Modify Click to edit parameter Click to delete the MLD IGMP profile entry 4 7 7 2 IGMP Filter Setting The Filter Setting and Status screens in Figure 4 7 39 Figur...

Page 201: ...t filter profile ID Action Click to display detail profile parameter Click to delete the IGMP filter profile entry 4 7 7 3 MLD Filter Setting The Filter Setting and Status screens in Figure 4 7 41 Fig...

Page 202: ...7 42 Port Filter Status Page Screenshot The page includes the following fields Object Description Port Display the current port Filter Profile ID Display the current filter profile ID Action Click to...

Page 203: ...nce for specific types of traffic and preserve performance as the amount of traffic grows Reduce the need to constantly add bandwidth to the network Manage network congestion To implement QoS on your...

Page 204: ...e 4 8 2 appear Figure 4 8 1 QoS Global Setting Page Screenshot The page includes the following fields Object Description QoS Mode Enable or disable QoS mode Buttons Click to apply changes QoS Informat...

Page 205: ...ge includes the following fields Object Description Port Select Select port number from this drop down list CoS Value Select CoS value from this drop down list Remark CoS Disable or enable remark CoS...

Page 206: ...Table and Information screens in Figure 4 8 5 Figure 4 8 6 appear Figure 4 8 5 Queue Table Page Screenshot The page includes the following fields Object Description Queue Display the current queue ID...

Page 207: ...ethod information Information Value Display the current queue value information 4 8 2 4 CoS Mapping The CoS to Queue and Queue to CoS Mapping screens in Figure 4 8 7 Figure 4 8 8 appear Figure 4 8 7 C...

Page 208: ...ing Figure 4 8 8 CoS Mapping Page Screenshot The page includes the following fields Object Description CoS Display the current CoS value Mapping to Queue Display the current mapping to queue Queue Dis...

Page 209: ...g screens in Figure 4 8 9 Figure 4 8 10 appear Figure 4 8 9 DSCP to Queue and Queue to DSCP Mapping Page Screenshot The page includes the following fields Object Description Queue Select Queue value f...

Page 210: ...ue Mapping to Queue Display the current mapping to queue Queue Display the current queue value Mapping to DSCP Display the current mapping to DSCP 4 8 2 6 IP Precedence Mapping The IP Precedence to Qu...

Page 211: ...ce value from this drop down list Buttons Click to apply changes Figure 4 8 12 IP Precedence Mapping Page Screenshot The page includes the following fields Object Description IP Precedence Display the...

Page 212: ...13 Figure 4 8 14 appear Figure 4 8 13 Basic Mode Global Settings Page Screenshot The page includes the following fields Object Description Trust Mode Set the QoS mode Buttons Click to apply changes Qo...

Page 213: ...creenshot The page includes the following fields Object Description Port Select port number from this drop down list Trust Mode Enable or disable the trust mode Buttons Click to apply changes Figure 4...

Page 214: ...17 Figure 4 8 18 appear Figure 4 8 17 Ingress Bandwidth Control Settings Page Screenshot The page includes the following fields Object Description Port Select port number from this drop down list Sta...

Page 215: ...le The Egress Bandwidth Control Setting and Status screens in Figure 4 8 19 Figure 4 8 20 appear Figure 4 8 19 Egress Bandwidth Control Settings Page Screenshot The page includes the following fields...

Page 216: ...screens in Figure 4 8 21 Figure 4 8 22 appear Figure 4 8 21 Egress Queue Bandwidth Settings Page Screenshot The page includes the following fields Object Description Port Select port number from this...

Page 217: ...dered the voice data traffic and transmitted to the Voice VLAN The configuration is based on MAC address acquiring a mechanism in which every voice equipment transmitting information through the netwo...

Page 218: ...includes the following fields Object Description Voice VLAN State Indicates the Voice VLAN mode operation We must disable MSTP feature before we enable Voice VLAN It can avoid the conflict of ingress...

Page 219: ...e Voice VLAN ID Display the current voice VLAN ID Remark CoS 802 1p Display the current remark CoS 802 1p 1p remark Display the current 1p remark Aging Display the current aging time 4 8 5 3 Telephony...

Page 220: ...at is xx xx xx x is a hexadecimal digit Description User defined text that identifies the VoIP devices Buttons Click to add voice VLAN OUI setting Figure 4 8 26 Voice VLAN OUI Group Page Screenshot Th...

Page 221: ...IP phone should configure the voice VLAN ID correctly It should be configured through its own GUI The Telephony OUI MAC Setting screens in Figure 4 8 27 Figure 4 8 28 appear Figure 4 8 27 Voice VLAN P...

Page 222: ...anual of WGS Managed Series 222 The page includes the following fields Object Description Port The switch port number of the logical port State Display the current state CoS Mode Display the current C...

Page 223: ...late EAP PDUs together with other attributes like the switch s IP address name and the supplicant s port number on the switch EAP is very flexible in that it allows for different authentication method...

Page 224: ...on server authenticates each client connected to a switch port before making available any services offered by the switch or the LAN Until the client is authenticated 802 1X access control allows only...

Page 225: ...the Ethernet header is stripped and the remaining EAP frame is re encapsulated in the RADIUS format The EAP frames are not modified or examined during encapsulation and the authentication server must...

Page 226: ...to the network In contrast when an 802 1X enabled client connects to a port that is not running the 802 1X protocol the client initiates the authentication process by sending the EAPOL start frame Wh...

Page 227: ...Security 802 1X Access Control 802 1X Setting page The IEEE802 1X standard defines port based operation but non standard variants overcome security limitations as shall be explored below The 802 1X Se...

Page 228: ...re available No Authentication Authentication Force Authorized In this mode the switch will send one EAPOL Success frame when the port link comes up and any client on the port will be allowed network...

Page 229: ...upplicant to re transmit EAP request identify frame Maximum Request Retries The number of times that the switch transmits an EAPOL Request Identity frame without response before considering entering t...

Page 230: ...ck its history to see if an EAPOL frame has previously been received on the port this history is cleared if the port link goes down or the port s Admin State is changed and if not the port will be pla...

Page 231: ...set of rules for entering and leaving the Guest VLAN as listed below The Guest VLAN Enabled checkbox provides a quick way to globally enable disable Guest VLAN functionality When checked the individu...

Page 232: ...AN 4 9 1 5 Authenticated Host The Authenticated Host Table screen in Figure 4 9 9 appears Figure 4 9 9 Authenticated Host Table Page Screenshot The page includes the following fields Object Descriptio...

Page 233: ...30 a RADIUS request is retransmitted to a server that is not responding If the server has not responded after the last retransmit it is considered to be dead Dead Time The Dead Time which can be set t...

Page 234: ...DIUS Authentication Server and the switch Timeout for Reply The Timeout which can be set to a number between 1 and 30 seconds is the maximum time to wait for a reply from a server If the server does n...

Page 235: ...as been configured Usage Type Set the usage type The following modes are available Login 802 1X All Buttons Click to add Radius server setting Figure 4 9 12 Login Authentication List Page Screenshot T...

Page 236: ...The page includes the following fields Object Description Key String The secret key up to 63 characters long shared between the TACACS server and the switch Timeout for Reply Retransmit is the number...

Page 237: ...of seconds the switch waits for a reply from the server before it resends the request Server Priority Set the server priority Buttons Click to add Radius server setting Figure 4 9 15 Login Authenticat...

Page 238: ...Switch supports the following AAA features Accounting for IEEE 802 1X authenticated users that access the network through the Managed Switch Accounting for users that access management interfaces on t...

Page 239: ...ist Name Defines a name for the authentication list Method 1 4 Set the login authentication method Empty None Local TACACS RADIUS Enable Buttons Click to add authentication list Figure 4 9 17 Login Au...

Page 240: ...n List Name Defines a name for the authentication list Method 1 3 Set the login authentication method Empty None Enable TACACS RADIUS Buttons Click to add authentication list Figure 4 9 19 Login Authe...

Page 241: ...ppear Figure 4 9 20 Telnet Settings Page Screenshot The page includes the following fields Object Description Telnet Service Disable or enable telnet service Login Authentication List Select login aut...

Page 242: ...lnet Service Display the current Telnet service Login Authentication List Display the current login authentication list Enable Authentication List Display the current enable authentication list Sessio...

Page 243: ...all enabled user modules must unanimously agree on allowing the MAC address to forward If only one chooses to block it it will be blocked until that user module decides otherwise The SSH Settings and...

Page 244: ...tication list Enable Authentication List Display the current enable authentication list Session Timeout Display the current session timeout Password Retry Count Display the current password retry coun...

Page 245: ...timeout value Buttons Click to apply changes Figure 4 9 25 HTTP Information Page Screenshot The page includes the following fields Object Description HTTP Service Display the current HTTP service Logi...

Page 246: ...apply changes Figure 4 9 27 HTTPs Information Page Screenshot The page includes the following fields Object Description HTTPs Service Display the current HTTPs service Login Authentication List Displ...

Page 247: ...Default Permit rules Sets the access mode of the profile either permit or deny Port Select port from this drop down list IP Source Indicates the IP address for the access management entry Buttons Cli...

Page 248: ...ess profile screens in Figure 4 9 30 Figure 4 9 31 appear Figure 4 9 30 Access Profile Page Screenshot The page includes the following fields Object Description Access Profile Select access profile fr...

Page 249: ...HCP snooping is used to filter DHCP messages received on a non secure interface from outside the network or firewall When DHCP snooping is enabled globally and enabled on a VLAN interface DHCP message...

Page 250: ...Ethernet header If the DHCP packet is not a recognizable type it is dropped If a DHCP packet from a client passes the filtering criteria above it will only be forwarded to trusted ports in the same V...

Page 251: ...Page Screenshot The page includes the following fields Object Description DHCP Snooping Display the current DHCP snooping status 4 9 7 3 DHCP Snooping VLAN Setting Command Usage When DHCP snooping is...

Page 252: ...ing mode operation Possible modes are Enabled Enable DHCP snooping mode operation When enable DHCP snooping mode operation the request DHCP messages will be forwarded to trusted ports and only allowed...

Page 253: ...gs associated with this port are removed Set all ports connected to DHCP servers within the local network or firewall to trusted state Set all other ports outside the local network or firewall to untr...

Page 254: ...o apply changes Figure 4 9 37 DHCP Snooping Port Setting Page Screenshot The page includes the following fields Object Description Port The switch port number of the logical port Type Display the curr...

Page 255: ...lds Object Description Port The switch port number of the logical port Forwarded Display the current forwarded Chaddr Check Dropped Display the chaddr check dropped Untrusted Port Dropped Display untr...

Page 256: ...its connectivity If the agent is disabled and only DHCP snooping is enabled the switch does not lose its connectivity but DHCP snooping might not prevent DCHP spoofing attacks The database agent stor...

Page 257: ...transfer process after the binding database changes The range is from 0 to 86400 Use 0 for an infinite duration The default is 300 seconds 5 minutes Buttons Click to apply changes Figure 4 9 40 DHCP S...

Page 258: ...hot The page includes the following fields Object Description Port Select port from this drop down list State Set default or user define Rate Limit pps Configure the rate limit for the port policer Th...

Page 259: ...options Circuit ID option 1 Remote ID option2 The Circuit ID sub option is supposed to include information specific to which circuit the request came in on The Remote ID sub option was designed to car...

Page 260: ...equest message which contains option82 The drop mode means that if the message has option82 then the system will drop it without processing The keep mode means that the system will keep the original o...

Page 261: ...port Allow Untrusted Select modes from this drop down list The following modes are available Drop Keep Replace Buttons Click to apply changes Figure 4 9 46 Option82 Global Setting Page Screenshot The...

Page 262: ...ge Screenshot The page includes the following fields Object Description Port Select port from this drop down list VLAN Indicates the ID of this particular VLAN Circuit ID Set the option1 Circuit ID co...

Page 263: ...nspection related configuration A Dynamic ARP prevents the untrusted ARP packets based on the DHCP Snooping Database 4 9 8 1 Global Setting DAI Setting and Information screens in Figure 4 9 49 Figure...

Page 264: ...des the following fields Object Description VLAN ID Indicates the ID of this particular VLAN Status Enables Dynamic ARP Inspection on the specified VLAN Options Enable Disable Buttons Click to apply c...

Page 265: ...s the source MAC address in the Ethernet header against the sender MAC address in the ARP body This check is performed on both ARP requests and responses When enabled packets with different MAC addres...

Page 266: ...ncludes the following fields Object Description Port The switch port number of the logical port Type Display the current port type Src Mac Chk Display the current Src Mac Chk status Dst Mac Chk Displa...

Page 267: ...ort The switch port number of the logical port Forwarded Display the current forwarded Source MAC Failures Display the current source MAC failures Dest MAC Failures Display the current source MAC fail...

Page 268: ...fields Object Description Port Select port from this drop down list State Set default or user define Rate Limit pps Configure the rate limit for the port policer The default value is unlimited Buttons...

Page 269: ...when a host tries to spoof and use the IP address of another host After receiving a packet the port looks up the key attributes including IP address MAC address and VLAN tag of the packet in the bind...

Page 270: ...rce Guard Port Setting Page Screenshot The page includes the following fields Object Description Port Select port from this drop down list Status Enable or disable the IP source guard Verify Source Co...

Page 271: ...The page includes the following fields Object Description Port The switch port number of the logical port Status Display the current status Verify Source Display the current verify source Max Binding...

Page 272: ...is particular VLAN MAC Address Sourcing MAC address is allowed IP Address Sourcing IP address is allowed Buttons Click to add authentication list Figure 4 9 61 IP Source Guard Binding Table Status Pag...

Page 273: ...2 Port Security Setting Page Screenshot The page includes the following fields Object Description Port Select port from this drop down list Security Enable or disable the port security Mac L2 Entry Th...

Page 274: ...ard If Limit 1 MAC addresses is seen on the port it will trigger the action that do not learn the new MAC and drop the package Buttons Click to apply changes Figure 4 9 63 Port Security Status Page Sc...

Page 275: ...of the server Security feature refers to applications such as protocol check which is for protecting the server from attacks such as DoS The protocol check allows the user to drop matched packets base...

Page 276: ...v4 ping max size IPv6 Ping Max Size Enable or disable DoS check mode by IPv6 ping max size Ping Max Size Setting Set the max size for ping Smurf Attack Enable or disable DoS check mode by smurf attack...

Page 277: ...the current ICMP fragment status IPv4 Ping Max Size Display the current IPv4 ping max size status IPv6 Ping Max Size Display the current IPv6 ping max size status Smurf Attack Display the current smu...

Page 278: ...tting Page Screenshot The page includes the following fields Object Description Port Select Select port from this drop down list DoS Protection Enable or disable per port DoS protection Buttons Click...

Page 279: ...ss table 4 9 12 1 Global Setting The Storm Control Global Setting and Information screens in Figure 4 9 68 Figure 4 9 69 appear Figure 4 9 68 Storm Control Global Setting Page Screenshot The page incl...

Page 280: ...tch The Storm Control Configuration screens in Figure 4 9 70 Figure 4 9 71 appear Figure 4 9 70 Storm Control Setting Page Screenshot The page includes the following fields Object Description Port Sel...

Page 281: ...ct Description Port The switch port number of the logical port Port State Display the current port state Broadcast Kbps pps Display the current broadcast storm control rate Unknown Multicast Kbps pps...

Page 282: ...generally be configured to control inbound traffic and in this context they are similar to firewalls ACE is an acronym for Access Control Entry It describes access permission associated with a particu...

Page 283: ...pplied to the hardware due to hardware limitations MAC based ACL screens in Figure 4 10 1 Figure 4 10 2 appear Figure 4 10 1 MAC based ACL Page Screenshot The page includes the following fields Object...

Page 284: ...10 3 MAC based ACE Page Screenshot The page includes the following fields Object Description ACL Name Select ACL name from this drop down list Sequence Set the ACL sequence Action Indicates the forwar...

Page 285: ...this ACE choose this value A field for entering a SA MAC value appears SA MAC Value When User Defined is selected for the SA MAC filter you can enter a specific source MAC address The legal format is...

Page 286: ...n MAC address Destination MAC Address Mask Display the current destination MAC address mask Source MAC Address Display the current source MAC address Source MAC Address Mask Display the current source...

Page 287: ...hardware due to hardware limitations IPv4 based ACL screens in Figure 4 10 5 Figure 4 10 6 appear Figure 4 10 5 IPv4 based ACL Page Screenshot The page includes the following fields Object Description...

Page 288: ...Pv4 based ACE An ACE consists of several parameters Different parameter options are displayed depending on the frame type that you selected The IPv4 based ACE screens in Figure 4 10 7 Figure 4 10 8 ap...

Page 289: ...specific source IP address The legal format is xxx xxx xxx xxx A frame that hits this ACE matches this source IP address value Source IP Wildcard Mask When User Defined is selected for the source IP f...

Page 290: ...field for entering a destination port value appears TCP Flags UGR Specify the TCP Urgent Pointer field significant URG value for this ACE Set TCP frames where the URG field is set must be able to matc...

Page 291: ...hits this ACE matches this DSCP value IP Precedence If you want to filter a specific IP precedence with this ACE you can enter a specific IP precedence value A field for entering an IP precedence val...

Page 292: ...Display the current source IP address wildcard mask Destination IP Address Display the current destination IP address Destination IP Address Wildcard Mask Display the current destination IP address w...

Page 293: ...ardware due to hardware limitations IPv6 based ACL screens in Figure 4 10 9 Figure 4 10 10 appear Figure 4 10 9 IPv6 based ACL Page Screenshot The page includes the following fields Object Description...

Page 294: ...v6 based ACE An ACE consists of several parameters Different parameter options are displayed depending on the frame type that you selected The IPv6 based ACE screens in Figure 4 10 11 Figure 4 10 12 a...

Page 295: ...that hits this ACE matches this source IP address value Source IP Prefix Length When User Defined is selected for the source IP filter you can enter a specific SIP prefix length in dotted decimal not...

Page 296: ...field for entering a destination port value appears TCP Flags UGR Specify the TCP Urgent Pointer field significant URG value for this ACE Set TCP frames where the URG field is set must be able to matc...

Page 297: ...hits this ACE matches this DSCP value IP Precedence If you want to filter a specific IP precedence with this ACE you can enter a specific IP precedence value A field for entering an IP precedence val...

Page 298: ...k Display the current source IP address wildcard mask Destination IP Address Display the current destination IP address Destination IP Address Wildcard Mask Display the current destination IP address...

Page 299: ...iption Binding Port Select port from this drop down list ACL Select Select ACL list from this drop down list Buttons Click to apply changes Figure 4 10 14 ACL Binding Table Page Screenshot The page in...

Page 300: ...nd dynamic entries The static entries are configured by the network administrator if the administrator wants to do a fixed mapping between the DMAC address and switch ports The frames also contain a M...

Page 301: ...udes the following fields Object Description MAC Address Physical address associated with this interface VLAN Select VLAN from this drop down list Port Select port from this drop down list Buttons Cli...

Page 302: ...enshot The page includes the following fields Object Description MAC Address Physical address associated with this interface VLAN 1 4096 Indicates the ID of this particular VLAN Buttons Click to add n...

Page 303: ...11 6 appear Figure 4 11 5 Dynamic Addresses Setting Page Screenshot The page includes the following fields Object Description Aging Time The time after which a learned entry is discarded Range 10 630...

Page 304: ...4 11 8 appear Figure 4 11 7 Dynamic Learned Page Screenshot The page includes the following fields Object Description Port Select port from this drop down list VLAN Select VLAN from this drop down li...

Page 305: ...cription MAC Address The MAC address of the entry VLAN The VLAN ID of the entry Type Indicates whether the entry is a static or dynamic entry Port The ports that are members of the entry Buttons Click...

Page 306: ...clude details such as device identification capabilities and configuration settings LLDP also defines how to store and maintain information gathered about the neighboring network nodes it discovers Li...

Page 307: ...ooding transmit LLDP PDU for all port Transmission Interval The switch is periodically transmitting LLDP frames to its neighbors for having the network discovery information up to date The interval be...

Page 308: ...me between the LLDP frames will always be at least the value of Transmit Delay seconds Transmit Delay cannot be larger than 1 4 of the Transmission Interval value Valid values are restricted to 1 8192...

Page 309: ...LLDP MED Fast Start Repeat Count Display the current LLDP MED Fast Start Repeat Count 4 12 3 LLDP Port Setting Use the LLDP Port Setting to specify the message attributes for individual interfaces in...

Page 310: ...on transmitted System Capability When checked the System Capability is included in LLDP information transmitted 802 3 MAC PHY When checked the 802 3 MAC PHY is included in LLDP information transmitted...

Page 311: ...elected optional TLVs The VLAN Name TLV VLAN Selection and LLDP Port VLAN TLV Status screens in Figure 4 12 5 Figure 4 12 6 appear Figure 4 12 5 VLAN Name TLV Selection Page Screenshot The page includ...

Page 312: ...n The Local Device Summary and Port Status screens in Figure 4 12 7 Figure 4 12 8 appear Figure 4 12 7 Local Device Summary Page Screenshot The page includes the following fields Object Description Ch...

Page 313: ...re 4 12 8 Port Status Page Screenshot The page includes the following fields Object Description Interface The switch port number of the logical port LLDP Status Display the current LLDP status LLDP ME...

Page 314: ...the following fields Object Description Local Port Display the current local port Chassis ID Subtype Display the current chassis ID subtype Chassis ID The Chassis ID is the identification of the neig...

Page 315: ...sets of application types supported on a given port The application types specifically addressed are 1 Voice 2 Guest Voice 3 Softphone Voice 4 Video Conferencing 5 Streaming Video 6 Control Signaling...

Page 316: ...nd enhanced security by isolation from data applications Voice Signaling for use in network topologies that require a different policy for the voice signaling than for the voice media This application...

Page 317: ...advertised in the Video Conferencing application policy VLAN ID VLAN identifier VID for the port as defined in IEEE 802 1Q 2003 Tag Tag indicating whether the specified application type is using a ta...

Page 318: ...g fields Object Description Network Policy Number Display the current network policy number Application Display the current application VLAN ID Display the current VLAN ID VLAN Tag Display the current...

Page 319: ...MED TLV field of advertised messages Network Policy This option advertises network policy configuration information aiding in the discovery and diagnosis of VLAN configuration mismatches on a port Im...

Page 320: ...ogical port LLDP MED Status Display the current LLDP MED status Active Display the current active status Application Display the current application Location Display the current location Inventory Dis...

Page 321: ...g the Location Civic Address that this entry should belong to Location ESC ELIN A string identifying the Location ESC ELIN that this entry should belong to Buttons Click to apply changes Figure 4 12 1...

Page 322: ...f available bytes that can also send LLDP information in a packet Status Gives the status of the TLVs Mandatory TLVs Displays if the mandatory group of TLVs were transmitted or overloaded MED Capabili...

Page 323: ...LDP protocol messages transmitted or received on all local interfaces The LLDP Global and Port Statistics screens in Figure 4 12 17 Figure 4 12 18 appear Figure 4 12 17 LLDP Global Statistics Page Scr...

Page 324: ...known as Too Many Neighbors in the LLDP standard LLDP frames require a new entry in the table when the Chassis ID or Remote Port ID is not already contained within the table Entries are removed from...

Page 325: ...cs The Cable Diagnostics performs tests on copper cables These functions have the ability to identify the cable length and operating conditions and to isolate a variety of common faults that can occur...

Page 326: ...fields Object Description Port Select port from this drop down list Buttons Click to run the diagnostics Figure 4 13 2 Test Results Page Screenshot The page includes the following fields Object Descr...

Page 327: ...are transmitted and the sequence number and roundtrip time are displayed upon reception of a reply The page refreshes automatically until responses to all packets are received or until a timeout occu...

Page 328: ...trip time are displayed upon reception of a reply The page refreshes automatically until responses to all packets are received or until a timeout occurs The ICMPv6 Ping screen in Figure 4 13 4 appears...

Page 329: ...packet with TTL at 2 will be sent Also the send hop may be a TTL timeout return but the procedure will carries on till the data packet is sent to its destination These procedures is for recording eve...

Page 330: ...tored by the Agent History Record periodical statistic samples available from Statistics Alarm Allow management console users to set any count or integer for sample intervals and alert thresholds for...

Page 331: ...e total number of packets received that were longer than 1518 octets Fragments The number of frames which size is less than 64 octets received with invalid CRC Jabbers The number of frames which size...

Page 332: ...are none The total number of octets received on the interface including framing characters log The number of uni cast packets delivered to a higher layer protocol SNMP Trap The number of broad cast a...

Page 333: ...t Sent Time Display the current last sent time Owner Display the current event owner Action Click to delete RMON event entry 4 14 3 RMON Event Log This page provides an overview of RMON Event Log The...

Page 334: ...ort from this drop down list Sample Variable Indicates the particular variable to be sampled the possible variables are DropEvents The total number of events in which packets were dropped due to lack...

Page 335: ...FCS octets Pkts64to172Octets The total number of frames including bad packets received and transmitted where the number of octets falls within the specified range excluding framing bits but including...

Page 336: ...6 RMON Alarm Status Page Screenshot The page includes the following fields Object Description Index Indicates the index of Alarm control entry Sample Port Display the current sample port Sample Varia...

Page 337: ...ew index or modify the index Index Indicates the index of the history entry Sample Port Select port from this drop down list Bucket Requested Indicates the maximum data entries associated this History...

Page 338: ...sted Interval Display the current interval Owner Display the current owner Action Click to delete RMON history entry 4 14 6 RMON History Log This page provides a detail of RMON history entries screen...

Page 339: ...s or build a wireless roaming environment in the office Without the power socket limitation the WGS PoE Managed Switch Series makes the installation of cameras or WLAN APs easier and more efficient Po...

Page 340: ...deployment from restrictions due to power outlet locations which eliminate the costs for additional AC wiring and reduces the installation time 3 25 watts High Power PoE Splitter High PoE Splitter sp...

Page 341: ...um allowable power per port Reserved Power There are five modes for configuring how the ports PDs may reserve power and when to shut down ports Classification mode In this mode each port automatic det...

Page 342: ...are six modes for configuring how the ports PDs may reserve power and when to shut down ports Classification mode The system reserves PoE power to PD according to PoE class level Consumption mode The...

Page 343: ...s Figure 4 15 4 Power over Ethernet Configuration Screenshot The page includes the following fields Object Description PoE Mode There are three modes for PoE mode Enable enable PoE function Disable di...

Page 344: ...maximum power draw as specified by Table 4 15 1 Current Used mA The Power Used shows how much current the PD currently is using Power Used W The Power Used shows how much power the PD currently is us...

Page 345: ...ironmental protection on the Earth the Managed PoE switch can effectively control the power supply besides its capability of giving high watts power The PoE schedule function helps you to enable or di...

Page 346: ...per port PoE Mode option to enable you to indicate which schedule profile could be applied to the PoE port The page includes the following fields Object Description Profile Set the schedule profile m...

Page 347: ...his function offers administrator to reboot PoE device at an indicated time if administrator has this kind of requirement Reboot Only Allows user to reboot PoE function by PoE reboot schedule Please n...

Page 348: ...reduces administrator management burden This page provides you with how to configure PD Alive Check The screen in Figure 4 15 7 appears Figure 4 15 7 PD Alive Check Configuration Screenshot The page i...

Page 349: ...t the PoE port that is connected to the PD PD Reboot Alarm It means system will reset the PoE port and issue an alarm message via Syslog Alarm It means system will issue an alarm message via Syslog Re...

Page 350: ...tory Default You can reset the configuration of the switch on this page Only the IP configuration is retained The new configuration is available immediately which means that no restart is necessary Th...

Page 351: ...Page Screenshot 4 16 3 Backup Manager This function allows backup of the current image or configuration of the Managed Switch to the local management station The Backup Manager screen in Figure 4 16...

Page 352: ...en in Figure 4 16 4 appears Figure 4 16 4 Upgrade Manager Page Screenshot The page includes the following fields Object Description Upgrade Method Select upgrade method from this drop down list Server...

Page 353: ...n screens in Figure 4 16 5 Figure 4 16 6 appear Figure 4 15 5 Dual Image Configuration Page Screenshot The page includes the following fields Object Description Active Image Select the active or backu...

Page 354: ...then this packet will be filtered thereby increasing the network throughput and availability 5 4 Store and Forward Store and Forward is one type of packet forwarding techniques A Store and Forward Eth...

Page 355: ...at Power On or Reset This is done by detecting the modes and speeds when both devices are connected Both 10BASE T and 100BASE TX devices can connect with the port in either half or full duplex mode I...

Page 356: ...the port Why the Switch doesn t connect to the network Solution 1 Check the LNK ACT LED on the Managed Switch 2 Try another port on the Managed Switch 3 Make sure the cable is installed properly 4 Ma...

Page 357: ...e power After a while turn on power again When I connect my PoE device to PoE Ethernet Switch it cannot be powered on Solution 1 Please check the cable type of the connection from the PoE Ethernet Swi...

Page 358: ...TX When connecting your 10 100Mbps Ethernet Switch to another switch a bridge or a hub a straight or crossover cable is necessary Each port of the Switch supports auto MDI MDI X detection That means...

Page 359: ...reen 7 White Brown 8 Brown 1 White Amber 2 Amber 3 White Green 4 Blue 5 White Blue 6 Green 7 White Brown 8 Brown SIDE 2 Crossover Cable SIDE 1 SIDE 2 SIDE 1 1 White Amber 2 Amber 3 White Green 4 Blue...

Reviews:

No comments