manualshive.com logo in svg

Planex SWP-0224FP, User Manual, Page: 9 / 124

Share
Download
Planex SWP-0224FP User Manual Download Page 9

SWP-0224FP 24PORT L2 INTELLIGENT  PoE SWITCH User’s Manual 

9 

1 

Introduction 

Congratulations on becoming the owner of the SWP-0224FP L2 managed 
switch! You may now manage your LAN (local area network) through a 
friendly and powerful user interface. 

This user guide tells you how to set up the SWP-0224FP L2 managed 
switch, and how to customize its configuration to get the most out of this 
product. 

1.1 

L2 managed features 

• 

24 10/100/1000BASE-TX auto-sensing Fast Ethernet ports 

• 

Two 10/100/1000BASE-T auto-sensing Gigabit Ethernet switching port 

• 

Two small form factor (SFP) Gigabit interface converter (GBIC) slots 

• 

802.1D/802.1w transparent bridge/spanning tree protocol/rapid spanning 
tree protocol 

• 

8K MAC address cache with hardware-assisted aging 

• 

802.3x flow control 

• 

802.1Q-based tagged VLAN, up to 256 VLANs 

• 

802.1p class of service, 4 queues per port 

• 

IGMP snooping support ( See 4.5.5 IGMP snooping ) 

• 

802.3ad link aggregation (manual and LACP), up to 15 trunk groups 

• 

Port Mirroring 

• 

802.1X port-based network access control 

• 

RADIUS remote authentication dial-in user service 

• 

RMON: support 4 groups (1, 2, 3, 9) 

• 

SNMP v1, v2, v3 

• 

MIB-II 

• 

Enterprise MIB for PSU, fan, and system temperature, voltage 

• 

Telnet or SSH remote login 

• 

FTP for firmware update and configuration backup 

• 

Syslog. 

Summary of Contents for SWP-0224FP

Page 1: ...24PORT L2 INTELLIGENT PoE SWITCH ...

Page 2: ...nstallation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment to an outlet on a circ...

Page 3: ... 3 1 2 Mounting the switch on a rack 15 3 2 Part 2 Setting up the switch 16 3 2 1 Connect the console port 16 3 2 2 Connect to the computers or a LAN 16 3 2 3 Attach the power adapter 16 3 3 Part 3 Basic switch setting for management 18 3 3 1 Setting up through the console port 18 3 3 2 Setting up through the Web interface 21 4 1 Log into Web user interface 24 4 2 Functional layout 26 4 2 1 Menu n...

Page 4: ...es 47 4 5 9 Tagged VLAN 48 4 5 10 Default Port VLAN and CoS 51 4 5 11 CoS Queue Mapping 52 4 6 SNMP 54 4 6 1 Community Table 54 4 6 2 Host Table 55 4 6 3 Trap Setting 56 4 6 4 VACM Group 56 4 6 5 VACM View 58 4 6 6 USM User 59 4 7 Security 62 4 7 1 Port Access Control 62 4 7 2 Dial In User 64 4 7 3 RADIUS 65 4 8 Power over Ethernet PoE 67 4 9 Cable Diagnosis 69 4 9 Statistics Chart 70 4 9 1 Traffi...

Page 5: ...ical Interface Commands 84 5 3 3 Bridge Commands 84 5 3 4 SNMP 92 5 3 5 Security Commands 99 5 3 6 PoE 103 5 3 7 Cable Diagnosis 104 5 4 Miscellaneous Commands 104 6 1 Configuration backup 105 6 2 Configuration restore 106 7 1 IP Addresses 107 7 1 1 Structure of an IP address 107 7 1 2 Network classes 109 7 2 Subnet masks 110 8 1 Diagnosing problems using IP utilities 112 8 1 1 ping 112 8 1 2 nslo...

Page 6: ...8 Configuration manager login screen 24 Figure 9 Home page 26 Figure 10 Top frame 26 Figure 11 Expanded Menu List 27 Figure 12 Management 30 Figure 13 IP Setup 31 Figure 14 Administration 32 Figure 15 Reboot 33 Figure 16 Firmware Upgrade 34 Figure 17 Physical Interface 36 Figure 18 Spanning Tree 38 Figure 19 Link aggregation 40 Figure 20 Mirroring page 42 Figure 21 Static Multicast 43 Figure 22 IG...

Page 7: ... 33 VACM View 59 Figure 34 USM User 61 Figure 35 Port Access Control 63 Figure 36 Dial In user 64 Figure 37 RADIUS 66 Figure 38 Power over Ethernet 68 Figure 39 Cable Diagnosis 69 Figure 40 Traffic comparison 71 Figure 41 Error group 72 Figure 42 Historical Status 73 Figure 43 Save Configuration 74 Figure 44 CLI interface 76 Figure 45 Boot ROM Command Mode 77 Figure 46 SYS commands 82 Figure 47 Us...

Page 8: ...Tables Table 1 Front panel labels and LEDs 13 Table 2 Rear panel labels 14 Table 3 Technical specifications 14 Table 4 LED Indicators 18 Table 5 Commonly used buttons and icons 28 Table 6 Boot ROM commands 79 Table 7 IP address structure 108 Table 8 Troubleshooting 116 ...

Page 9: ...switching port Two small form factor SFP Gigabit interface converter GBIC slots 802 1D 802 1w transparent bridge spanning tree protocol rapid spanning tree protocol 8K MAC address cache with hardware assisted aging 802 3x flow control 802 1Q based tagged VLAN up to 256 VLANs 802 1p class of service 4 queues per port IGMP snooping support See 4 5 5 IGMP snooping 802 3ad link aggregation manual and ...

Page 10: ...puters at one site 1 2 2 Typography Italics are used to present the parameters for the command line interpreter Boldface type text is used for items you select from menus and drop down lists and text strings you type when prompted by the program 1 2 3 Symbols This document uses the following icons to call your attention to specific instructions or explanations Note Provides clarification or additi...

Page 11: ...e SWP 0224FP switch package comes with the following items SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH AC Power cord Null modem cable for console interface DB9 Rack installation kit two brackets with six 6 32 screws CD ROM User s Manual Private MIB file Warranty card Safety notice Figure 1 SWP 0224FP package contents ...

Page 12: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 12 2 2 Front Panel The front panel includes LED indicators that show the system fan PoE and port status Figure 2 Front panel ...

Page 13: ... Ethernet link On Link is present but port is disabled either manually or by spanning tree 10 100 port status Amber Flashing Port is in one of the STP blocking listening and learning state On PD is connected and ready to provide power Green Flashing PD is off due to a fault on the port PoE port status Off PD is not connected or not a valid power device On Link RJ 45 or SFP is present port is enabl...

Page 14: ...l labels No Label Description 1 Power Connector Connects to the supplied power cord 2 FAN1 FAN2 FAN3 System fans 2 4 Technical specifications Table 3 Technical specifications Physical Dimensions 442mm W X 44 mm H X 320mm D Input Consumption Power 100 240V AC 2 5A 50 60Hz 225 watts Operating Storage Temperature 0 to 40 20 to 60 Environmental Ranges Humidity 35 to 85 10 to 95 ...

Page 15: ...switch Default gateway for the network Network mask for this network 3 1 Part 1 Installing the hardware Connect the device to the power outlet and your computer or network Figure 4 illustrates the hardware connections 3 1 1 Installing the switch on a flat surface The switch should be installed on a level surface that can support the weight of the switches and their accessories Attach four rubber p...

Page 16: ...irectly to the switch ports You can also connect hubs switches to the switch ports by Ethernet cables You can use either the crossover or straight through Ethernet cable to connect computers hubs or switches Use a twisted pair Category 5 Ethernet cable to connect the 1000BASE T port Otherwise the link speed can not reach 1Gbps 3 2 3 Attach the power adapter 1 Connect the AC power cord to the POWER...

Page 17: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 17 Figure 4 Overview of Hardware Connections ...

Page 18: ... or flashing when PD is off due to a fault on the port 3 3 Part 3 Basic switch setting for management After completing the hardware connections configure the basic settings for your switch You can manage the switch using the following methods Web interface the switch has a set of pages to allow to you manage it using Java enabled IE5 5 or higher version Command Line Interface use console port to m...

Page 19: ...ord by pressing Enter You can change the password at any time through CLI see section 5 3 1 To protect your switch from unauthorized access you must change the default password as soon as possible 5 Follow these steps to assign an IP address to the switch f Type net interface ip sw0 your ip address your network mask For example if your switch IP is 192 168 10 1 and the network mask is 255 255 255 ...

Page 20: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 20 Figure 5 Login and IP setup Screen ...

Page 21: ...terface at the first time to use Web interface because the default configuration for Web access authentication is disabled To secure the system configuration please enable the authentication function at the Administration page under System category Skip step 2 if the authentication is disabled 2 At any PC connected to the network that the switch can access open your Web browser Internet Explorer a...

Page 22: ... mask and default gateway then click 4 If your new address is different from the default the browser can not update the switch status window or retrieve any page This is normal You have to retype the new IP address in the address location box and press Enter The WEB link returns 5 To enable authentication for Web access click Administration on the menu list then select Enabled to start the protect...

Page 23: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 23 Figure 7 IP Setup ...

Page 24: ...versions NOTE Netscape is not supported 4 1 Log into Web user interface 1 From a PC open your web browser type the following in the web address or location box and press Enter http 192 168 1 1 This is the factory default IP address for the switch A login screen displays as shown in Figure 8 Figure 8 Configuration manager login screen Login is not required if you do not enable Web authentication ac...

Page 25: ...ENT PoE SWITCH User s Manual 25 Use the following defaults the first time you log into the program You can change the password at any time through CLI interface see section 5 3 1 Default User Name admin Default Password no password ...

Page 26: ... web page consists of three separate frames The top frame has a switch logo and front panel as shown in Figure 10 Figure 10 Top frame The left frame a menu frame as shown in Figure 11 contains all the features available for switch configuration These features are grouped into categories e g System Bridge etc You can click on any of these to display a specific configuration page ...

Page 27: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 27 Figure 11 Expanded Menu List The right frame displays configuration pages or graphics for the statistics See section 4 3 for details ...

Page 28: ...ion page click on the desired menu item 4 2 2 Commonly used buttons and icons The following table describes the function for each button and icon used in the application Table 5 Commonly used buttons and icons Button Icon Function Stores any changes you have made on the current page Adds the existing configuration to the system e g a static MAC address or a firewall ACL rule and etc Modifies an ex...

Page 29: ...te function 4 3 1 Management The Management page contains the following information Model Name product name MAC Address switch MAC address System Name user assigned name to identify the system editable System Contact editable System Location editable To save any changes and make it effective immediately click Use to refresh the setting as shown in Figure 12 ...

Page 30: ...age contains the following editable information VLAN ID Specify a VLAN ID to system management interface It is necessary to be within the same VLAN for management usages DHCP Client Enable DHCP to get a dynamic IP address or disable DHCP to specify a static IP address The DHCP server must be reachable within the management VLAN IP Address assign a static IP address to the switch management interfa...

Page 31: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 31 To save any changes and make it effective immediately click Use to refresh the setting as shown in Figure 13 Figure 13 IP Setup ...

Page 32: ...by password protection The default setting for web access does not require any authentication To save any changes and make it effective immediately click Use to refresh the setting as shown in Figure 14 When you enable the password protection you have to login again immediately You can change the password at any time through the CLI interface Figure 14 Administration ...

Page 33: ... the button reboots the system Rebooting the system stops the network traffic and terminates the Web interface connection Figure 15 Reboot 4 3 5 Firmware Upgrade The Firmware page contains the following information Hardware Version shows the hardware revision number Boot ROM Version shows the version of the boot code ...

Page 34: ... the firmware location into the firmware space directly or click to choose the file name of the firmware from prompt window Click to update the switch firmware See Figure 16 for reference Clicking the upload button loads the assigned firmware to the switch then reboot system after a successful firmware update You have to re login to Web interface again Figure 16 Firmware Upgrade ...

Page 35: ... the following information for each port a Link status the link speed and duplex for an existing link otherwise link is down b State the STP state c Admin the setting value to disable or enable the port d Mode the setting value for link speed and duplex mode e Flow Control the setting value to enable or disable 802 3x flow control mechanism Select the corresponding port number and configure the po...

Page 36: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 36 Figure 17 Physical Interface ...

Page 37: ...n BPDU Max Age a timeout value to be used by all Bridges in the LAN Forward Delay a timeout value to be used by all bridges in the LAN Bridge Priority the switch priority in the LAN The third part is the port setting It contains a display window to show the current configuration for each port You click to change the port setting for STP RSTP The following fields are available Port select the corre...

Page 38: ... Point to point Auto Yes No A full duplex link is considered as a point to point link Otherwise it is a shared link Point to point link may have less convergence time Auto is recommended in most cases Click to make the settings effective Click to refresh the settings to current value Figure 18 Spanning Tree 4 5 2 Link Aggregation The page configures the link aggregation group port trunking The swi...

Page 39: ...k the link mode in the runtime status window for the trunk ports If all the trunk members are in the same speed and full duplex mode then the trunk group is set up successfully If one of the members is not in the same speed or full duplex mode the trunk is not set correctly Check the link partner and change the settings to have the same speed and full duplex mode for all the members of your trunk ...

Page 40: ...so changes with port 1 Figure 19 Link aggregation 4 5 3 Mirroring Mirroring together with a network traffic analyzer helps you monitor network traffics You can monitor the selected ports for egress or ingress packets Mirror Mode Enables or disables the mirror function for the selected group ...

Page 41: ...tor port can not belong to any link aggregation group The monitor port can not operate as a normal switch port It does not switch packets or do address learning Only supports 8 egress ports to be mirrored and the monitored egress packets will be untag Click to make the setting send to the switch HTTP server Click to refresh the settings to current value ...

Page 42: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 42 Figure 20 Mirroring page ...

Page 43: ...ntries All the ports in the group will forward the specified multicast packets to other ports in the group Show Group selects Add a new Group to enter a new entry Or select an existing group address to display MAC Address selects the multicast address VLAN selects the vlan group Click to make the setting effective Click to refresh the settings to current value Figure 21 Static Multicast ...

Page 44: ...off When turned on the switch snoops the IGMP packets and puts the new group into the multicast table However if the static entries occupy all 127 spaces the IGMP snoop does not work normally The switch only allows 127 layer 2 multicast group NOTICE IGMP snooping function isn t supported in F W version 2 1 7 2 IGMP snooping function will be supported in the next release F W version Figure 22 IGMP ...

Page 45: ...dcast packets multicast packets The limit number is a threshold to limit the total number of the checked type packets For example if broadcast multicast is enabled the traffic amount of each type will not exceed the limit value Click to save the new configuration To make the configuration effective go to Save Configuration page then click Figure 23 Traffic Control ...

Page 46: ... from the address table if the address is not learned again during the age time User can set the age time by entering a valid number from 15 to 3825 in seconds Then click on to save the new age value To make the configuration effective please go to Save Configuration page then click on You can look up MAC addresses by checking the port VLAN ID or and MAC address then click on The address window wi...

Page 47: ...the new added entry shows in the address window In one page 15 entries can be displayed in the address window When you create more than 15 entries the new added entries will display in the next page You can click on First Previous Next or Last to go through the pages of static MAC address or input the page number and then click on Go You can remove the existed address by selecting the entry with t...

Page 48: ...at all This feature prevents the switch from malfunctions You can remove any existed VLAN except the default VLAN You can assign the port to be a tagged port or an untagged port by toggling the port button There are three types of button displays U type untagged port that will remove VLAN tags from the transmitted packets T type All packets transmitted from this port will be tagged Blank type This...

Page 49: ...Default Port VLAN CoS page If you want to assign an untagged port from one VLAN to another you have to remove it from the original VLAN or change it to be tagged in the original VLAN first Show VLAN select the existed VLAN to display or select Add a new VLAN to create a new VLAN group Name the VLAN name VLAN ID this field requires user to enter the VLAN ID when a new VLAN is created Remove VLAN Re...

Page 50: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 50 Figure 26 Tagged VLAN ...

Page 51: ...rt based VLAN ID Every untagged packet received from this port will be tagged with this VLAN group ID CoS Class of Service value every untagged packet received from this port will be assigned to this CoS in the VLAN tagged Click on to change the content in the port list window Click on to save the configuration To make the configuration effective go to Save Configuration page then click Figure 27 ...

Page 52: ... importance weight of the queue relative to other CoS queues WRR scheduling prevents the low priority queues from being completely neglected during periods of high priority traffic The WRR scheduling transmits some packets from each queue in turn The number of packets it sends corresponds to the relative importance of the queue For example if Queue1 has a weight of 1 and Queue2 has a weight of 2 o...

Page 53: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 53 Figure 28 Cos Queue Mapping ...

Page 54: ...e and Trap Setting To provide more secure management and access control SNMPv3 is supported 4 6 1 Community Table You can type different community names and specify whether the community has the privilege to make a setting write access by checking the box Click to save the configuration permanently or to refresh the page Figure 29 Community Table ...

Page 55: ...2 Host Table This page links host IP address to the community name that is entered in Community Table page Type an IP address and select the community name from the drop down list Click to save the configuration permanently or to refresh the page Figure 30 Host Table ...

Page 56: ...mes you can enable SNMP trap function to send trap packets in different versions v1 or v2c Click to save the configuration permanently or to refresh the page Figure 31 Trap Setting 4 6 4 VACM Group VACM View based Access Control Model Group is used to configure the information of SNMPV3 VACM Group Group Name enter the security group name ...

Page 57: ...that the Group belongs Any is suitable for v1 v2 v3 USM is SNMPv3 related Security level enter the Security level Name that the Group belongs Only NoAuth AuthNopriv AuthPriv can be chosen Click on the when you create a new VACM group entry by the above information Then you will see the new added entry shows in the group window You can remove the existed group by selecting the entry with the mouse ...

Page 58: ... that the View belongs Included or Excluded when View Subtree matches the Oid in the SNMPv3 message View Subtree enter the View Subtree that the View belongs The Subtree is the Oid to match the Oid in the SNMPv3 message The match is good when the subtree is shorter than the Oid in the SNMPv3 message View Mask enter the View Mask that the View belongs Each bit in the mask represents the digit betwe...

Page 59: ...move the existed views by selecting the entry with the mouse then clicking on The button updates the existed VACM View entries Click to save effectively Click to refresh the settings to current value To make the configuration effective please go to Save Configuration page then click on Figure 33 VACM View 4 6 6 USM User USM User based Security Model User is used to configure the information of SNM...

Page 60: ...riv Protocol enter the Priv Protocol that Engine ID and Name belong Only NoPriv DES can be chosen If the NoPriv is chosen there is no need to enter password Priv Password enter the password that the Priv Protocol belongs The password needs at least 8 characters or digits Click on the when you create a new USM User entry by the above information Then you will see the new added entry shows in the Us...

Page 61: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 61 Figure 34 USM User ...

Page 62: ...entication Once enabled the switch will try to authenticate the port user again when the re authentication time is up Reauthentication Time If Reauthentication is enabled this is the interval for the switch to re send authentication request to the port user see above Authentication Method RADIUS or Local database can be used to authenticate the port user Quiet Period If authentication failed eithe...

Page 63: ...selected the selected port is forced to be authorized Thus traffic from all hosts is allowed to pass Otherwise if force unauthorized is selected the selected port is blocked and no traffic can go through If Auto is selected the behavior of the selected port is controlled by 802 1x protocol All ports should be set to Auto under normal conditions Guest VLAN Specify a guest VLAN to clients that are n...

Page 64: ...ssword for the new user Confirm Password Enter the password again Dynamic VLAN Specify the VLAN ID assigned to the 802 1x authenticated clients Please click to add the new user Click when you have finished the modifications Click when you want to remove the selected user Click to make the settings effective permanently Click to refresh the settings to current value Figure 36 Dial In user ...

Page 65: ...ion Server Port The port number for the RADIUS server is listening to Authentication Server Key The key is used for communications between SWP 0224FP and the RADIUS server Confirm Authentication Key Re type the key entered above The VLAN of the RADIUS server connected to the switch must be the same as the VLAN of the system management interface Please click to make the settings permanent Click to ...

Page 66: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 66 Figure 37 RADIUS ...

Page 67: ...tage maximum voltage level threshold allowed Power Budget Maximum power available for all ports Power Consumption the actual power consumed from activated ports Power Left Momentary power budget left for used The power supply unit PSU supports maximum power up to 225W The PSE has been allocated 180W 168W 12W and the rest power is used for main board The second part is the port power settings You c...

Page 68: ...date the content of the display window However the new settings do not take effect until the Save Configuration is executed Click to make the settings effective permanently Click to refresh the settings to current value To make the configuration effective please go to Save Configuration page and then click on You can look up the detailed port power information by selecting the port then click The ...

Page 69: ...Moreover Cable Diagnosis can also detect PHY type 100M 1000M or 10000M as well as estimated cable length of normal cable Cable length estimation only supports Giga speed mode Just select a port number and click Test result shall be displayed accordingly Note When you enable the Cable Diagnosis on a port the connection of this port will be disconnected during the diagnosis Figure 39 Cable Diagnosis...

Page 70: ...layed in these charts Click Refresh Rate to set the period for retrieving new data from the switch You can differentiate the statistics or ports by selecting Color Finally click on Draw to let the browser to draw the graphic chart Each new Draw will reset the statistics display 4 9 1 Traffic Comparison This page shows the one statistics item for all the ports in one graphic chart Specify the stati...

Page 71: ...TCH User s Manual 71 Figure 40 Traffic comparison 4 9 2 Error Group Select the Port and display Color then click the Draw the statistics window shows you all the discards or error counts for the specified port The data is updated periodically ...

Page 72: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 72 Figure 41 Error group ...

Page 73: ...nual 73 4 9 3 Historical Status You can display information for different ports and statistics items in this chart Since this shows the history of the statistics information the chart can keep the old data even it is refreshed Figure 42 Historical Status ...

Page 74: ...takes effective after a successful save Sometimes you may want to reset the switch configuration you can click on to reset the configuration file to factory default Of course a system reboot will follow this restoration process You will lose all the configurations when you choose to restore the factory default configurations Figure 43 Save Configuration ...

Page 75: ...ommand help messages This is very useful when you are not familiar with the CLI commands The CLI mode times out when idle for 10 minutes You have to login again to enter CLI mode after the timeout All the CLI commands are case sensitive In order to make them easier to use you can enter into different category by typing the full command then this category becomes your working category Thereafter yo...

Page 76: ... is executing during the system booting time It tests system memory LED and hardware chips on the switchboard It displays system information as the result of system test and initialization You can ignore the information until the prompt PLANEX appears see Figure 44 Figure 44 CLI interface ...

Page 77: ...NTER key as shown in Figure 45 Figure 45 shows dual images in the switch One firmware is in Slot 1 and the other firmware is in Slot 2 Enter the key to show the help messages for all available commands Although the commands are helpful in some situation we STRONGLY suggest users not to use them if you don t know the command function Figure 45 Boot ROM Command Mode ...

Page 78: ...SWP 0224FP 24PORT L2 INTELLIGENT PoE SWITCH User s Manual 78 5 1 2 Boot ROM Commands Type in the boot mode to display the valid commands list ...

Page 79: ...e c IP address and mask None Configure display TFTP client IP address g NONE Load and execute firmware h NONE Display online help p NONE Display current configuration r NONE System reboot s IP address Configure display TFTP server IP address t NONE Toggle safe mode When a configuration file is corrupt or you forget your password use safe mode to enter CLI mode Your configuration file is lost in th...

Page 80: ...t user has to do login again with authorized user name and password 5 3 CLI Commands The switch provides CLI commands for all managed functions The command uses are listed in the categories as the WEB management interface This way you can follow the instructions and set up the switch correctly as easily as using WEB interface to configure the switch save command is used to save the configuration t...

Page 81: ...on on the managed node CLI command sys info contact system contact description If you put the contact description in the contact description field the switch contact information will be changed to the new one System Location Displays the physical location of the switch This is an RFC 1213 defined MIB object in System Group and provides the location information on the managed node CLI command sys i...

Page 82: ...tatic IP address If you enable DHCP you can renew or release the IP address for the switch and use show command to display the dynamic IP address CLI command net interface dhcp sw0 enable disable renew release show IP Address Displays the static IP address for the switch This IP address is used for manageable purpose i e network applications such as http server SNMP server ftp server telnet server...

Page 83: ...ection is enabled the web interface will request a user name and password authentication while user accesses the switch through the browser CLI command sys web set enable disable New Password Verify Password The default user name is admin By default a password is not required You may set a password by configuring these fields CLI command sys users modify user name admin by default user name old us...

Page 84: ... l2 port autoneg port number enable disable CLI command l2 port speed port number 10 100 1000 CLI command l2 port duplex port number full half Flow Control Enable Disable Displays the IEEE802 3x flow control setting of a port Note that this flow control is operating only in full duplex mode CLI command l2 port flow port number enable disable Reload Restores the previous port settings from the conf...

Page 85: ...th Cost Edge Port Point to point Displays the current STP RSTP ports parameters setting CLI command l2 stp port set Port Settings all all select a port number or just type all to iteratively config Port port number Priority 0 240 old port Priority new port Priority Port port number Path Cost 1 200000000 old port Path Cost new port Path Cost Port port number EdgePort yes no old port EdgePort new po...

Page 86: ... and port numbers CLI command l2 trunk create trunk id trunk name lacp enable disable port list Add Remove Trunk Trunk group port members can be added to or removed from an existing trunk group CLI command l2 trunk add trunk id port list CLI command l2 trunk remove trunk id port list LACP Action User can enable or disable LACP on a specific trunk group CLI command l2 trunk lacp action trunk id ena...

Page 87: ...or egress port list CLI command l2 mirror remove ingress egress port list Reload Restores the previous saved settings from configuration file CLI command l2 mirror retrieve Show Multicast Group Displays the static multicast groups that are presented in the multicast group table CLI command l2 mcast show Set Multicast Group Allows user to add or modify a static multicast group by specifying the MAC...

Page 88: ...d vlan id Reload Restores the previous saved settings from configuration file CLI command l2 mcast retrieve IGMP is Enabled Disabled Layer 2 IGMP snooping can be started or terminated by user if necessary CLI command l2 igmp start stop Reload Restores the previous saved settings from configuration file CLI command l2 igmp retrieve Action Enable Disable Mode Broadcast or Broadcast Multicast or Broa...

Page 89: ...ime by setting the aging time value CLI command l2 arl age aging time value Query by Port ARL entries existed in ARL table can be queried according to port number CLI command l2 arl port port number Query by VLAN ID ARL entries existed in ARL table can be queried according to VLAN ID CLI command l2 arl vlan vlan id Query by MAC Address ARL entries existed in ARL table can be queried according to M...

Page 90: ...Name VLAN ID Allows user to config the VLAN settings User may create a new VLAN by giving a unique VLAN ID a VLAN description name and its port member list note that the port member here is indicated as tagged port member To specify a VLAN port member as untagged port CLI command utportadd can achieve this purpose User may use CLI command add or remove to further add some port members to a VLAN or...

Page 91: ...ID and its associated port member list CLI command l2 port vlan vlan id 4095 to disable the port based vlan port list CoS Value Sets the Class of Service for a port by assigning it a priority with range of 0 7 criteria value for untagged packets CLI command l2 port priority CoS port list Reload Restores the previous saved settings from configuration file CLI command l2 port retrieve CoS Map Allows...

Page 92: ...pecify whether to give it the Set Privilege while create a new entry CLI command snmp community add New community string new community string Get privileges y always turn on by default Set privileges y n n set privilege y for yes n for no User can modify a community entry in the table by reassigning its community string and privileges CLI command snmp community set Community entry table index entr...

Page 93: ...nmp community retrieve Host IP Address Community A host entry contains a host IP address network mask and its dedicated community string CLI command snmp host add Host IP Subnet IP address Netmask netmask Community community string User can modify a host entry in the table by reassigning its allowed IP address network mask and community string CLI command snmp host set Host table entry table index...

Page 94: ...ress and the remote community string CLI command snmp trap add SNMP version 1 2c 1 by default snmp version Destination IP IP address Community community string User can modify a trap entry in the table by reassigning its SNMP version destination IP address and community string CLI command snmp trap set Trap table entry table index entry id to config SNMP version 1 2c old snmp version new snmp vers...

Page 95: ...iew name security model security level and context match CLI command snmp snmpv3 access add Gruop Name group name string Security Model 0 1 2 3 any v1 v2c usm security model Security Level 1 2 3 noauth authnopriv authpriv security level Context Match 0 1 inexact exact context match Read View Name read view name string Write View Name write view name string Notify View Name notify view name string ...

Page 96: ...ew name string Write View Name old write view name string new write view name string Notify View Name old notify view name string new notify view name string Allows user to delete a VACM entry from VACM group CLI command snmp snmpv3 access delete Access entry entry id to delete Reload Restores the previous saved settings from configuration file CLI command snmp snmpv3 access retrieve View Name Vie...

Page 97: ...ew name view type view subtree and view mask CLI command snmp snmpv3 view set View Name old view name string new view name string View Subtree oid old view subtree new view subtree View Mask old view mask new view mask View Type 1 2 included excluded old view type new view type Allows user to delete a VACM View entry CLI command snmp snmpv3 view delete View entry entry id to delete Reload Restores...

Page 98: ...dd EngineId engine id string Name user name string AuthProtocol oid auth protocol oid string AuthPassword auth password string Priv Protocol oid priv protocol oid string Priv Password priv password string User can modify a USM User entry in the table by reassigning its allowed engine Id name auth protocol auth password priv protocol and priv password CLI command snmp snmpv3 usmuser set EngineId ol...

Page 99: ...ious saved settings from configuration file CLI command snmp snmpv3 usmuser retrieve 5 3 5 Security Commands Reauthentication Allows user to open or close periodic reauthentication CLI command security dot1x bridge reauth enable disable Reauthentication Time Allows user to set up the reauthentication time CLI command security dot1x bridge reauthtime reauthentication time 1 4294967295 sec Authentic...

Page 100: ...hentication attemps 1 10 Multi host Allows user to enable or disable Multi host on some specific ports CLI command security dot1x port multihost enable disable port list Authentication Control Allows user to set up the authentication control of some specific ports CLI command security dot1x port authctrl type 1 force_authorized 2 force_unauthorized 3 auto port list Guest VLAN Allows user to set up...

Page 101: ...rd string Dynamic VLAN dynamic VLAN CLI command security dialinuser remove user name Allows user to delete a user entry from the local database CLI command security dialinuser modify user name Allows user to modify a user entry from the local database It contains a user name password and dynamic VLAN User Name new user name string Password new password string Confirm Password new confirm password ...

Page 102: ...tings from configuration file CLI command security radius retrieve Generate SSH key Allows user to generate SSH keys SSH Secure SHell is a protocol for remotely logging into a machine via a shell It is very similar in functionality to telnet however unlike telnet all data between the client and server is encrypted The encryption provides protection against various network security risks Currently ...

Page 103: ...show 5 3 6 PoE Admin Set port power to enable or disable CLI command poe admin enable disable port list Prio Set port priority CLI command poe admin priority 0 47 port list heat Show temperature of the devices CLI command poe heat pse Show PSE system Information CLI command poe pse diag Show diagnostic result for port power CLI command poe diag display Display real time port power information CLI ...

Page 104: ...command poe retrieve 5 3 7 Cable Diagnosis Port Enable cable diagnosis on a port CLI command cablediag port port no 5 4 Miscellaneous Commands sys time uptime shows the time since the system boot up sys time date shows the current date and time sys time settime sets the current time sys files config backup backup configuration files sys files config default restore factory default configuration fi...

Page 105: ...8 1 1 PC s for ftp client IP address is 192 168 1 10 PC is connected with SWP 0224FP and execute ftp according to the following procedures C ftp 192 168 1 1 Connect to SWP 0224FP by ftp Connected to 192 168 1 1 220 PLANEX SWP 0224FP FTP version 1 0 ready User 192 168 1 1 none admin Enter the User ID of SWP 0224FP 331 Enter PASS command Password Enter null if SWP 0224FP s setting is default 230 Log...

Page 106: ...ures C ftp 192 168 1 1 Connect to SWP 0224FP by ftp Connected to 192 168 1 1 220 PLANEX SWP 0224FP FTP version 1 0 ready User 192 168 1 1 none admin Enter the User ID of SWP 0224FP 331 Enter PASS command Password Enter null if SWP 0224FP s setting is default 230 Logged in ftp put backup Restore configuration of SWP 0224FP by ftp 200 Port command okay 150 Opening data connection for RETR backup 226...

Page 107: ...esses as decimal numbers separated by dots is called dotted decimal notation The IP address 20 56 0 211 is read twenty dot fifty six dot zero dot two eleven 7 1 1 Structure of an IP address IP addresses have a hierarchical design similar to that of telephone numbers For example a 7 digit telephone number starts with a 3 digit prefix that identifies a group of thousands of telephone lines and ends ...

Page 108: ...ield1 Field2 Field3 Field4 Class A Network ID Host ID Class B Network ID Host ID Class C Network ID Host ID Following are examples of valid IP addresses Class A 10 30 6 125 network 10 host 30 6 125 Class B 129 88 16 49 network 129 88 host 16 49 Class C 192 60 201 11 network 192 60 201 host 11 ...

Page 109: ...works are smaller but still quite large each being able to hold over 65 000 hosts There can be up to 16 384 class B networks in existence A class B network might be appropriate for a large organization such as a business or government agency Class C networks are the smallest only able to hold 254 hosts at most but the total possible number of class C networks exceeds 2 million 2 097 152 to be exac...

Page 110: ...fies these host ID bits For example consider a class C network 192 168 1 To split this into two subnets you would use the subnet mask 255 255 255 128 It s easier to see what s happening if we write this in binary 11111111 11111111 11111111 10000000 As with any class C address all of the bits in field1 through field 3 are part of the network ID but note how the mask specifies that the first bit in ...

Page 111: ...ix bits in field4 for its host IDs ranging from 0 to 63 Sometimes a subnet mask does not specify any additional network ID bits and thus no subnets Such a mask is called a default subnet mask These masks are Class A 255 0 0 0 Class B 255 255 0 0 Class C 255 255 255 0 These are called default because they are used when a network is initially configured at which time it has no subnets ...

Page 112: ...ether your PC can recognize other computers on your network and the Internet A ping command sends a message to the computer you specify If the computer receives the message it sends messages in reply To use it you must know the IP address of the computer with which you are trying to communicate On Windows based computers you can execute a ping command from the Start menu Click the Start button and...

Page 113: ...d default LAN IP address 192 168 1 1 or another address you assigned You can also test whether access to the Internet is working by typing an external address such as that for www yahoo com 216 115 108 243 If you do not know the IP address of a particular Internet location you can use the nslookup command as explained in the following section From most other IP enabled operating systems you can ex...

Page 114: ...en returns the associated IP address On Windows based computers you can execute the nslookup command from the Start menu Click the Start button then click Run In the Open text box type the following nslookup Clicks A Command Prompt window displays with a bracket prompt At the prompt type the name of the Internet address you are interested in such as www absnews com The window displays the associat...

Page 115: ...ual 115 To exit from the nslookup utility type exit and press Enter at the command prompt Simple fixes The following table lists some common problems that you may encounter when installing or using the switch and the suggested actions to solve the problems ...

Page 116: ...ng is good and the LED is green 2 If the port LED is amber check if this port is disabled You may experience a disconnected network in a short period around 1 minute if you just turned on the STP PCs cannot display web configuration pages 1 The switch is powered up and the connecting port is enabled The factory default IP for the switch is 192 168 1 1 2 Verify your network setup in your PC for thi...

Page 117: ...ng the switch IP address to see if the link is stable If some ping packets fail check your network setup to make sure a valid setting Changes to Configuration are not being retained Be sure to click on button in the Save Configuration page to save any changes Console Interface Cannot show the texts on the terminal emulator 1 The factory default baud rate is 9600 no flow control 8 bit data no parit...

Page 118: ...e type of wiring used by Ethernet networks with a data rate of 1000 Mbps binary The base two system of numbers that uses only two digits 0 and 1 to represent all numbers In binary the number 1 is written as 1 2 as 10 3 as 11 4 as 100 etc Although expressed as decimal numbers for convenience IP addresses in actual use are binary numbers e g the IP address 209 191 4 240 is 11010001 10111111 00000100...

Page 119: ...nected to a network ICMP Internet Control Message Protocol An Internet protocol used to report errors and other network related information The ping command makes use of ICMP IGMP Internet Group Management Protocol An Internet protocol that enables a computer to share information about its membership in multicast groups with adjacent routers A multicast group of computers is one whose members have...

Page 120: ...ing the host ID Bits set to 1 mean select this bit while bits set to 0 mean ignore this bit For example if the network mask 255 255 255 0 is applied to the IP address 100 10 50 1 the network ID is 100 10 50 and the host ID is 1 See also binary IP address subnet IP Addresses Explained section NIC Network Interface Card An adapter card that plugs into your computer and provides the physical interfac...

Page 121: ...ion to work both ends of the connection have to follow the rules of the protocol remote In a physically separate location For example an employee away on travel who logs in to the company s intranet is a remote user RJ 45 Registered Jack Standard 45 The 8 pin plug used in transmitting data over phone lines Ethernet cabling usually uses this type of connector RMON Remote Monitoring Extensions to SN...

Page 122: ...mputers remain physically connected to the rest of the parent network but they are treated as though they were on a separate network See also network mask subnet mask A mask that defines a subnet See also network mask TCP See TCP IP TCP IP Transmission Control Protocol Internet Protocol The basic protocols used on the Internet TCP is responsible for dividing data up into packets for delivery and r...

Page 123: ...n TTL Time To Live A field in an IP packet that limits the life span of that packet Originally meant as a time duration the TTL is usually represented instead as a maximum hop count each router that receives a packet decrements this field by one When the TTL reaches zero the packet is discarded twisted pair The ordinary copper telephone wiring long used by telephone companies It contains one or mo...

Page 124: ...s audio or video to the user Web browsers use Hyper Text Transfer Protocol HTTP Popular web browsers include Netscape Navigator and Microsoft Internet Explorer See also HTTP web site WWW Web page A web site file typically containing text graphics and hyperlinks cross references to the other pages on that web site as well as to pages on other web sites When a user accesses a web site the first page...

Reviews:

No comments