ZIV SW3 User Manual Download Page 2

Page: 2 / 122

SW3

GIGABIT/FAST ETHERNET SWITCH TYPE SW3 (DIN)

2/122

USER GUIDE - M0SW3D1905Iv04 - V04 May 2019



SAFETY SYMBOLS



WARNING OR CAUTION:

This symbol denotes a hazard. Not following the indicated procedure,

operation or alike could mean total or partial breakdown of the

equipment or even injury to the personnel handling it.

NOTE:

Information or important aspects to take into account in a procedure,

operation or alike.

Summary of Contents for SW3

Page 1: ...de les Ci ncies 149 151 08908 L Hospitalet de Llobregat Barcelona Spain Tel 34 933 490 700 Fax 34 933 492 258 Mail to ziv zivautomation com www zivautomation com GIGABIT FAST ETHERNET SWITCH TYPE SW3...

Page 2: ...BOLS WARNING OR CAUTION This symbol denotes a hazard Not following the indicated procedure operation or alike could mean total or partial breakdown of the equipment or even injury to the personnel han...

Page 3: ...ories 11 1 4 4 Equipment management 13 1 4 5 Additional services 13 1 4 6 Certifications 13 1 4 7 Mechanical characteristics 13 1 4 8 Operating conditions 13 1 5 WARNINGS 15 1 5 1 Warnings before inst...

Page 4: ...l 35 5 1 3 Others 36 5 1 4 Syslog 36 5 2 ADMINISTRATION 37 5 3 LAN CONFIGURATION 38 5 4 ETHERNET PORTS CONFIGURATION 39 5 5 VLAN CONFIGURATION 43 5 6 BANDWIDTH LIMIT CONFIGURATION 48 5 7 QOS CONFIGURA...

Page 5: ...ION FILE 79 5 19 1 Upload from the PC to the equipment 79 5 19 2 Download from the equipment to the PC 80 5 20 EVENT FILES 80 6 STATISTICS 81 APPENDIX A BIBLIOGRAPHY AND ABBREVIATIONS 85 A 1 BIBLIOGRA...

Page 6: ...NTP TACACS and RADIUS 1 2 MAIN CHARACTERISTICS Some of the SW3 most important features are described below Grouping of services and architectures Services may be grouped and discriminated some not bei...

Page 7: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 7 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 1 Traffic separation FIGURE 2 Star topology...

Page 8: ...RSTP protocol the connection entity is the LAG group identifier In this way the different links that are part of the LAG are not handled individually and are not considered a loop and thus it provides...

Page 9: ...ues of the VLAN or for transiting data over third party networks FIGURE 4 Q in Q operation Advanced RSTP implementation The SW3 not only complies with the STP and RSTP protocols for resolving loops in...

Page 10: ...the selective transmission of the multicast traffic desired by each of them IGMP The SW3 manages multicast traffic based on the IGMP messages exchanged by the client devices and the multicast routers...

Page 11: ...ion static according to IEEE 802 1ad Port mirroring Links in VLAN Native mode Interoperability with IEDs Intelligent Electronic Device that complies with the IEC 61850 requirements 1 4 2 Equipment int...

Page 12: ...type of connector LC type of fiber singlemode wavelength 1310 nm typical maximum distance 40 km SFP 100BaseFx 4CZ07980006 type of connector LC type of fiber singlemode wavelength 1310 nm typical maxi...

Page 13: ...or industrial applications Designed for Electrical Substations 1 4 7 Mechanical characteristics Mechanical enclosure suitable for DIN rail mounting EN 50022 BS 5584 DIN 46277 3 Dimensions Height 167 m...

Page 14: ...ance with EN 61000 4 4 standard Surge immunity test in accordance with EN 61000 4 5 standard Immunity to conducted disturbances induced by radio frequency fields in accordance with EN 61000 4 6 standa...

Page 15: ...any that will use these devices and the Safety standards EN 50110 2 In order to install and handle the SW3 the following points must be complied with Only qualified personnel appointed by the electric...

Page 16: ...r any injury to persons or third parties caused by the non fulfilment of point 1 1 The terminal contains components sensitive to static electricity the following must be observed when handling it Pers...

Page 17: ...22 USER GUIDE M0SW3D1905Iv04 V04 May 2019 2 MECHANICAL AND ELECTRICAL CHARACTERISTICS The diverse elements comprising the SW3 are supplied in a box suitable for DIN rail mounting see FIGURE 5 and FIGU...

Page 18: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 18 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 6 Detail of the DIN rail fastening element Inserting Removing...

Page 19: ...ctor shown in FIGURE 7 The female connector supplied with the equipment is suitable for rigid or flexible conductors of up to 2 5 mm2 An earth connection is available see FIGURE 7 When using the multi...

Page 20: ...ST connectors It also has two Gigabit Ethernet SFP bays FIGURE 8 Front view of the SW3 a 8 RJ 45 connectors b 4 RJ 45 connectors and 4 MT RJ connectors Sections 2 1 to 2 6 give the electrical charact...

Page 21: ...unshielded twisted 4 pair category five cable UTP 5 with 8 pin RJ 45 connectors The cable length should not be more than 100 m The UTP 5 cable is made up of eight copper wires that form the four twis...

Page 22: ...22 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 10 Unshielded twisted pair category five cable UTP 5 with RJ 45 connector according to ANSI TIA EIA 568 A standard FIGURE 11 Signals of the RJ 45...

Page 23: ...on should be a fiber optic cable made up of two multimode optical fibers one to transmit data and the other to receive it Each of the fibers should be 125 m in diameter The core and the cladding of th...

Page 24: ...multimode optical fibers one to transmit data and the other to receive it Each of the fibers should be 125 m in diameter The core and the cladding of the fiber are included in this diameter as can be...

Page 25: ...the LC type connectors have a protective cap 2 5 SFP PORTS The bays available in the front plate of the equipment admit the installation of SFP Small Form Factor Pluggable modules which provide optic...

Page 26: ...module is the following 1 Disconnect the optical fiber from the connector of the SFP module 2 Pull down the transceiver security lever 3 Whilst the security lever down remove the port from the module...

Page 27: ...s of the maintenance connector and its use are indicated below The connector has a protective cap FIGURE 16 Location of the SRV maintenance connector Pin RS 232 2 RD Out 3 TD In 5 GND SRV CONNECTOR DC...

Page 28: ...he Fast Ethernet ports and SFP modules FIGURE 17 shows a front view of the SW3 showing the detail of the different LEDs They are described below FIGURE 17 LEDs in the SW3 Basic LEDs SRV LED Amber It f...

Page 29: ...with 100Base Fx multimode MT RJ or upon request LC or ST ports Speed Link Ac LED Green There is one LED per port It stays on when the link is established correctly and flashes in the case of emission...

Page 30: ...able commands that is obtained by running the help command The data are grouped virtually into directories and subdirectories To browse through the directories the cd change directory command is used...

Page 31: ...not being able to obtain access Access can also be obtained to the console remotely through SSH connection and Telnet 4 2 HTTP SERVER The HTTP server included provides access to the HTML pages giving...

Page 32: ...bled data are explicitly shown as buttons labelled Add and Delete located on each of the objects that use them The factory IP address of the equipment is 192 168 0 1 meaning it is possible to access t...

Page 33: ...execute the Apply command which entails the immediate use of the changes made the second is to execute the Save command which means that the changes will be operative once the equipment is rebooted If...

Page 34: ...alidates the user identity In addition to the configuration parameters which will be described in the following sections as shown in the figure the system provides information about the equipment soft...

Page 35: ...e SNMP data 5 1 2 Access control Access control allows the user logins and associated passwords to be determined for the two pre set profiles guest and admin The guest profile can only access query op...

Page 36: ...ight be the loss of the primary ISP connection Critical Level 3 May be used to indicate a failure in the system s primary application Error Level 4 An application has exceeded it file storage limit an...

Page 37: ...ormation is sent The system can order the selective activation deactivation of log information associated to some operating blocks see command log Through CLI it is possible to consult the local log f...

Page 38: ...Administration menu configuration page The procedure for the installation of the certificates is described in section B 4 of APPENDIX B Data structure in CLI 5 3 LAN CONFIGURATION The LAN menu has th...

Page 39: ...hows the own Ethernet MAC address of the switch FIGURE 21 LAN menu configuration page 5 4 ETHERNET PORTS CONFIGURATION The Ports menu permits the configuration of the operating parameters of the Gigab...

Page 40: ...ate always untagged without tag Trunk All the frames will in all cases be transmitted with a tag It is the specific mode for connection with other switching devices so as preserve the VLAN information...

Page 41: ...de other than Auto is configured both ends of the link must be identically configured For 100Base Fx ports only values 100 Mbit s Full duplex 100fdx and 100 Mbit s Half duplex 100hdx have sense so any...

Page 42: ...ng in QinQ Core mode the VLAN identifiers that are included in this parameter determine which QinQ Access interfaces are to be served through each interface those whose VID parameter is part of the AC...

Page 43: ...q The tag allows several VLANs to share resources including switching devices such as the SW3 or links between switching units with the guarantee that the traffic from each VLAN will reach the correct...

Page 44: ...mode is IVL Independent VLAN Learning by default The equipment operates in SVL mode Shared VLAN Learning with the option selected The SVL Overlapping Enabled mode is necessary when using topologies wi...

Page 45: ...escriptive field available to users VID It sets the VLAN identifier Valid values are 1 to 4095 PRI Override This sets whether the priority of the frames received in the ports assigned to the VLAN VID...

Page 46: ...ates that the VLAN VID will be sent with double tagging Name A mnemonic descriptive field available to users The VID identifiers that are configured for the Q in Q function will be used in the S Tag a...

Page 47: ...ommunity Isolated Community Trunk Input port Isolated NO YES NO NO YES Promiscuous YES YES YES YES YES Community NO YES YES for ports sharing community NO YES Isolated Community NO YES NO YES for port...

Page 48: ...and can not do so with each other Devices connected to the VLAN 300 can communicate with devices located in the WAN and with the rest of devices connected in the same VLAN analogously for devices with...

Page 49: ...tion transmission mode where an emitting node sends information to all the receivers simultaneously Multicast refers to the multi diffusion messages which are directed towards to the members of a mult...

Page 50: ...cation and service policy and selects the conditions in which it will be treated by the equipment The equipment provides QoS at level 2 switching Level 2 QoS is performed on switched traffic adjusted...

Page 51: ...in accordance with the rules of the VLANs submenu in such a way that the priority may be overridden If on the contrary they only include the priority they are processed in accordance with the section...

Page 52: ...es received do not include an 802 1p tag The assigning of internal priorities is done based on the values selected in the section entitled Priority Use IEEE 802 1p The enabled option indicates that th...

Page 53: ...roring functions in the ports in order to monitor their behaviour The incoming and or outgoing traffic from a specific port Monitored port is replicated in a target port to be monitored through a prot...

Page 54: ...or ports to be monitored The incoming traffic in each one of the selected ports will be replicated in the target port Target port It sets the port where the replicated packets will be sent to be monit...

Page 55: ...TION LLDP is a standard protocol of the link layer used to announce identity and capabilities to neighbouring devices in local area networks Both the information transmitted and the information receiv...

Page 56: ...ed in the LLDP messages sent by the agent 4 is the default value and recommended Valid values are 1 to 100 Reinit It sets the period of time between the setting of Admin Status as disabled and the rei...

Page 57: ...sent The value of the parameter is obtained automatically from the running firmware so it is not subject to changes by the user SysCap Indicates to the LLDP agent whether or not to include the optiona...

Page 58: ...one read only rights ro or reading writing rights rw The profiles are called communities User Parameter associated with SNMPv3 Tabulate information that allows the users including the privileges and...

Page 59: ...n with which it will be coded the IP address of the addressee and the UDP port to which the messages will be sent The default value set in the standard is port 162 It can be changed to adapt to the op...

Page 60: ...kups in case of potential topological changes The final result is that the active interfaces of each device end up forming a tree structure with no loops from the root device If the device is to be in...

Page 61: ...econds and valid values are 6 to 40 seconds Hello Time This parameter sets the time between sending BPDU messages the STP protocol messages The default and maximum value is 2 seconds Forward Delay Thi...

Page 62: ...l 2 switching devices connected to the interface This is useful in cases in which the type of devices to be connected is not known The last and fourth mode redundant is specifically designed for pairs...

Page 63: ...the interfaces operating in edge mode This parameter is only effective when the operating state of the interface is edge and this situation is only possible when the Edge parameter is configured as on...

Page 64: ...GURE 35 NTP SNTP menu configuration page The general usage parameters are Enable Enables disables the execution of the NTP client The client is operative when the option is selected Protocol This sets...

Page 65: ...roadcast Enables the acceptance of NTP messages that are received with broadcast address The SNTP client only supports the configuration of a server and the necessary parameters are IP IP address of t...

Page 66: ...tes by explicit register of the client devices in the network switches GARP is a base protocol on which GMRP operates GARP requires the configuration of timers see FIGURE 36 FIGURE 36 GARP Timers menu...

Page 67: ...DIN 67 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 37 Example of using the GARP GMRP or IGMP Snooping a Network that does NOT use Multicast configuration protocols b Network that uses GARP GMRP...

Page 68: ...ses In networks with multiple switches the configuration must be done in each of them FIGURE 38 Static configuration page of Multicast menu The parameters for creating the list of multicast MACs are t...

Page 69: ...an operate properly This option is performed by configuring the registers of the Static zone Unlike purely manual operation the execution of the protocol involves the automatic propagation of applicat...

Page 70: ...sumes that requests won t be accepted by the client devices for the group address and that only the multicast traffic registered in the interface will be treated FIGURE 39 GMRP configuration page of M...

Page 71: ...s where there are devices actively participating in multicast groups the objective is to limit selective data transmission based on the obtained information Enable A simple CheckBox to set if the IGMP...

Page 72: ...a HTTP server web and telnet Local users predefined in the system are always present but an external resource can be used to validate users for different types of access for which reason the user data...

Page 73: ...configured in the TACACS server queried Admin Privilege Level This sets the privilege level 0 to 15 in the request to the TACACS server to gain access as administrator user admin The privilege level m...

Page 74: ...for which reason it is not configurable 5 15 SECURITY CONFIGURATION This menu allows traffic restrictions to be imposed depending on the MAC addresses of the clients The equipment admits two modes for...

Page 75: ...cation through access to a RADIUS server The general configuration parameters are the following Enable A simple CheckBox parameter to set if the RADIUS client as well as the 802 1x authentication is a...

Page 76: ...exceeded Valid values in seconds are 1 to 65535 IP address It sets the RADIUS server IP address UDP port It sets the UDP port to which the RADIUS client will send requests to the server The default va...

Page 77: ...ted VID fields in the VLANs menu A group of discreet vlans is configured with the identifier of each one separated by a comma without spaces If a range is to be included the initial and final vlan ide...

Page 78: ...ess this is expressly indicated Nevertheless once terminated it entails a momentary loss of service due to the automatic rebooting of the unit A binary image is necessary which can be selected by pres...

Page 79: ...variables are valid and that the values assigned to them comply with the existing syntactic requirements If errors are detected in the received file irrespective of whether the Only verify option is s...

Page 80: ...n the user can download different log files in txt format FIGURE 48 Event Files configuration page The total event log General Log log txt the most relevant event log General Events events txt the aut...

Page 81: ...s Ports the MAC addresses identified by the switch Macs STP protocol STP execution data and information obtained through the LLDP protocol LLDP and the synchronization client NTP each of which can be...

Page 82: ...ST ETHERNET SWITCH TYPE SW3 DIN 82 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 50 Example of basic statistics of Ethernet ports FIGURE 51 Example of statistics detail of a specific port selectio...

Page 83: ...FAST ETHERNET SWITCH TYPE SW3 DIN 83 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 52 Example of statistics of the MAC addresses identified by the switch FIGURE 53 Example of statistics of the ST...

Page 84: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 84 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 54 Example of statistics of the LLDP protocol FIGURE 55 Example of statistics of NTP client...

Page 85: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 85 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 APPENDIX A BIBLIOGRAPHY AND ABBREVIATIONS...

Page 86: ...tion Implementation and Analysis A 2 ABBREVIATIONS ADSL Asymmetric Digital Subscriber Line AES Advanced Encryption Standard API Application Programming Interface APN Access Point Name ASDU Application...

Page 87: ...cal Area Network NAT Network Address Translation NHRP Next Hop Resolution Protocol NTP Network Time Protocol PPP Point to Point Protocol PPTP Point to Point Tunneling Protocol PSTN Public Switched Tel...

Page 88: ...04 V04 May 2019 VLAN Virtual Local Area Network VPN Virtual Private Network VRID Virtual Router Identifier VRRP Virtual Router Redundancy Protocol WAN Wide Area Network WEP Wired Equivalent Privacy WI...

Page 89: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 89 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 APPENDIX B DATA STRUCTURE IN CLI...

Page 90: ...ucture as it contains several attributes E g nat A name with nothing after it is a parameter itself E g action B 1 ACCESS METHODS There are two ways of accessing the equipment through the CLI user con...

Page 91: ...905Iv04 V04 May 2019 FIGURE 56 Location of HyperTerminal in Windows XP On opening HyperTerminal a text box appears requesting the necessary information to establish the connection see FIGURE 57 FIGURE...

Page 92: ...appear in the HyperTerminal window when entering the password As operating systems like Microsoft Windows 7 no longer include the HyperTerminal program the Putty program free and executable is also c...

Page 93: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 93 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 59 Device administrator window FIGURE 60 Connection configuration through the serial port with Putty...

Page 94: ...eans of Telnet Access in local and remote mode is obtained with the Telnet command and equipment IP address To use this access mode the equipment must have its IP address configured and be connected t...

Page 95: ...to establish connection with the equipment the equipment login prompt will appear ready for the user to enter the login and code for starting the session the logins and their respective passwords are...

Page 96: ...pt will change to equipment waiting for the user to enter a command The commands are instructions sent to the equipment to request or change a value or to browse through the tree in which the equipmen...

Page 97: ...nt directory ping Sends a ping to the indicated host quit Interrupts the connection with the equipment reboot Reboots the equipment reload Loads a previously saved configuration remove Eliminates an i...

Page 98: ...in the log The events that are generated at the system level and sent to the log include an identification level The system supports 8 different levels separated into two blocks The first set correspo...

Page 99: ...and nat 2 already existed on running the command add nat the item nat 3 Examples swt add nat swt wan add tunnel tunnel swt admin add nat apply This applies the configuration changes in the equipment b...

Page 100: ...commands list may be different in each one Example swt downdoad get This show the current values of one or several equipment configuration parameters Syntax swt get name Arguments name optional name o...

Page 101: ...em will be removed If the number is not indicated the last one will be removed When removing an item that is not the last one the other remaining items will be automatically renumbered Examples swt re...

Page 102: ...argument must include the parameter name the item number and the attribute number Special attention should be paid when entering the arguments of this command as if no argument is indicated the syste...

Page 103: ...immediately above it two dots must be entered cd When the directory is changed the prompt shows the equipment identification letters and the name of the active directory Example swt main Examples swt...

Page 104: ...ful if it is required to reload the configuration saved in the equipment after the time it was saved Example swt reload telnet Open a telnet session keeping the connection established between the comp...

Page 105: ...ef description of their functions Syntax swt help Arguments Observations Example swt help log Shows the list of events stored in the log file in use current Syntax swt log Arguments Without arguments...

Page 106: ...ple swt log swt log crit swt log debug ls Shows a list from the active directory This command is useful for verifying whether the configuration parameter to be consulted changed is in the active direc...

Page 107: ...d as customer txt Example swt show messages swt show messages 0 swt show messages 1 swt show messages 2 swt show messages 3 swt show customer txt stats This shows the equipment status parameters These...

Page 108: ...seful for monitoring the equipment and detecting potential errors during operation It shows the list of events stored in the log file in use current and it remains to show events as they occur It clos...

Page 109: ...d that the equipment is connected to a network and with an IP address configured which in the case of this example will be 111 222 0 123 In addition the computer used to make the connection is also co...

Page 110: ...only want information it makes no difference which login is entered admin o guest Enter guest and then press enter Now the system is waiting for us to enter the respective password Enter passwd01 whic...

Page 111: ...information extends beyond the edges of the window the system will only show the information at the start and it will be necessary to press enter once or several times for all the information to be sh...

Page 112: ...text to be copied left click with the mouse and drag the cursor maintaining the button pressed until all the text has been selected After releasing the left button press the enter key That way you wil...

Page 113: ...ll know whether the system has finished showing all the information when the equipment prompt reappears As with the download command it is useful to save the information in a txt file using the method...

Page 114: ...oldest log files In this example it is assumed that the equipment is a DRA 2 Remember to save the information in a txt file as indicated above 7 Obtaining events taking place in the equipment in real...

Page 115: ...3ZWE2ZmM4YjY5Ngo ftp on ftps on cli syslog_level 4 syslog_level_remote 4 syslog off syslog_server 0 0 0 0 eth0 static off ip 192 168 0 1 mask 255 255 255 0 vlanid 1 dgw 0 0 0 0 mac 02 E0 AB 18 D9 3F q...

Page 116: ...off off mac age_time 300 stp enable on version rstp priority 32768 Press any key to continue or CTRL C to stop A J max_age 20 000000000 hello_time 2 000000000 forward_delay 15 000000000 tx_hold_count...

Page 117: ...xxxxx client broadcastenable off server server ip type minpoll maxpoll authenable authkey lowtraffic 1 10 212 1 205 unicast 5 10 off 1 off sntp client client ip poll units authenable authkey timeout 1...

Page 118: ...ess any key to continue or CTRL C to stop A J ssh method local local on ftp method local local on security port port type max_addresses max_action 1 none 10 replace 2 none 10 replace 3 none 10 replace...

Page 119: ...valid certificate with the command upload cert raw The procedure for loading the certificate is the following Copy in the clipboard the certificate Then execute the indicated upload command and when i...

Page 120: ...ting that the certificate has not been validated by a trusted authority Select Go to this web site not recommended Then the equipment access control requires the user login and password the equipment...

Page 121: ...xzEE5mM2hOhWKgaJn0ZEGDqcoIMLj4 E3f 3QIDAQAB nA oGAOvDzYhVKhjodHlUzm3lbsZzAklKAKNorgn8kxbpYE RM8mkV9f Lb3jWhiEu nxy f7m7BmNMcex8bSRwduzrUnK66DW8jP3b2tsxJHLYU9UpN1XKDNBHGvgJ7Gis S nApu oZFYmh34uBl6SJkUd...

Page 122: ...F1Bz0FPn3LRxC1Mb6PI kNatYteCq5FJNjGunF8hDIQVc1x7O2ju2vmGOiyVfSz1eqiy Tx0dMYsgpBeY3K 8fb J1jmLPNzPhgMlzPK6VGNA70 QhfCG9l5xK1oWQ END CERTIFICATE Example of a valid private key BEGIN RSA PRIVATE KEY MIIC...

Search results

Summary of Contents for SW3

Reviews:

ZIV SW3, User Manual, Page: 2 / 122

Search results

Summary of Contents for SW3

Reviews: