manualshive.com logo in svg

araknis 210 Series, Руководство по эксплуатации продукта

Поделиться
Скачать
araknis 210 Series Скачать руководство пользователя страница 67

© 2020 Araknis Networks

®

67

Araknis Networks AN-210/310-SW-F/R Manual

Product Manual

Table of Contents

10 - Security – Port Mirroring

Port mirroring is used to send a copy of packets received on one switch port to a network monitoring 
device/software on another switch port. This is commonly used for network appliances that require 
monitoring of network traffic. Network engineers or administrators use port mirroring to analyze and 
diagnose errors on a network.

Figure 28. 

Port Mirroring Page

• 

Session ID –

 Session identifier.

• 

Enable –

 Check to enable a port mirroring session.

• 

Destination Port –

 Port that packets will be mirrored to.

• 

Source TX Port –

 Port that sent the original packets.

• 

Source RX Port –

 Port originally receiving the packets.

• 

Ingress State –

 Enable or disable.

11 - Security – 802.1x

802.1x allows port-based client authentication with the use of a RADIUS server.

802.1x Global Setting

Configure global 802.1x settings.

Figure 29. 

802.1x Global Settings Menu

• 

State –

 Enable or disable the 802.1x feature.

• 

Guest VLAN –

 Enable or disable guest VLAN use for 802.1x. If enabled, all authorized clients will be 

connected to the VLAN.

• 

GUEST VLAN ID –

 Select a VLAN ID for use if Guest VLAN is Enabled.

Содержание 210 Series

Страница 1: ...TCH PRODUCT MANUAL Models AN 210 SW C F R 8 POE AN 210 SW F R 16 POE AN 210 SW F R 24 POE AN 210 SW F 48 POE AN 310 SW F R 8 AN 310 SW F R 16 AN 310 SW F R 24 AN 310 SW F 48 AN 310 SW F R 8 POE AN 310 SW F R 16 POE AN 310 SW F R 24 POE ...

Страница 2: ... been added for your convenience Note Notes emphasize information important to the installation setup or use of the product that is not essential to follow for safety of the equipment or user These items contain essential information that if missed would cause the installer or end user extra work to overcome Caution The caution symbol is used to indicate information vital to the safety of the equi...

Страница 3: ...rements 13 SFP Ports 13 Switch 13 PoE Budget Calculation Example 14 6 OvrC Setup 15 7 Interface Access 16 OvrC Web Connect Access 16 Direct Access Using LAN IP Address DHCP 17 Default IP Address Access 18 8 Interface Overview 21 Page Layout 21 Applying or Canceling Changes 21 9 Switch Status Pages 22 System Status Page 22 System Information 22 Port Status 22 Events Log 23 Port Status Page 24 10 Sy...

Страница 4: ...HTTP Telnet SSH 37 17 Maintenance Menus 38 Ping Test 38 Running a Ping Test 38 Understanding Ping Test Results 39 Troubleshooting Using Ping Test Results 39 Trace Route Test 40 Running a Trace Route Test 40 Understanding Trace Route Test Results 41 File Management Settings 42 Configuration File 42 Firmware 42 Dual Image 43 Firmware Update Instructions 43 Restart 44 Log Out 44 18 Advanced Menus 45 ...

Страница 5: ...t Settings 62 26 Advanced VLANs Overview 63 Advanced VLANs 802 1Q VLANs 63 VLAN Settings 63 PVID Settings 63 Advanced VLANs Private VLANs 64 Advanced VLANs Voice VLANs 65 General Settings 65 OUI Settings 66 Port Settings 66 27 Security Port Mirroring 67 28 Security 802 1x 67 802 1x Global Setting 67 Port Settings 68 Authenticated Host 69 29 Security Radius Server 70 30 Security DOS 71 Global Setti...

Страница 6: ...2 IPv4 ACL List 82 IPv4 ACE List 82 IPv4 ACE List Editor 83 ACL IPV6 ACL 84 IPv6 ACL List 84 IPv6 ACE List 84 IPv6 ACE List Editor 85 ACL ACL Binding 86 36 SNMP Overview 87 SNMP Global Settings 87 Settings 87 Trap Settings 88 Remote Engine ID List 88 SNMP Lists 89 Group Lists 89 View List 89 SNMP Community List 90 User List 90 37 Advanced LACP 91 Settings 91 LACP Timeout 91 38 Advanced Log 92 Sett...

Страница 7: ...F R Manual Product Manual Table of Contents 42 General Specifications All 210 310 Models 99 43 Appendix Safety and Regulatory Information 101 FCC Warning 101 CE Warning 101 UL Statement 101 44 Warranty 102 2 Year Limited Warranty 102 Contact Information 102 ...

Страница 8: ...AN 210 SW C 8 POE refer to its Quick Start Guide Figure 1 Package Contents Switch 1 Quick Start Guide Rubber Feet for Flat Surfaces 4 Rack Mount Kit Ears 2 Screws 8 AC Power Cord 3 Series Overview Model Ethernet Ports SFP Ports PoE Budget Watts AN 210 SW C F R 8 POE 8 2 65W AN 210 SW F R 16 POE 16 2 130W AN 210 SW F R 24 POE 24 2 190W AN 210 SW F 48 POE 48 4 375W AN 310 SW F R 8 8 2 AN 310 SW F R ...

Страница 9: ...0 SW F 8 POE AN 310 SW R 8 POE AN 310 SW F 8 POE 1 Power LED On system is up Off system is down 2 1Gbps LED On port connected at 1000Mbps speed Off port is connected at 10 100Mbps speed 3 Link Act LED On port is connected to another device Blinking packets are running through the port Off port is not connected to a device AN 210 SW C 8 POE Note The 1Gbps LED behavior may be configured to indicate ...

Страница 10: ... 10 SFP Link Act 1 Gbps Front Facing Models AN 310 SW F 8 POE Compact Switch 48 Port Models 1 Gbps PoE 1 Reboot Press and hold the RESET button on the back of the switch for 5 seconds then release The switch will power cycle and the front status lights will flash 2 Factory Reset Press and hold the RESET button for 10 15 seconds until the status LEDs flash once The switch will power cycle and be re...

Страница 11: ...k Mount Wall Mount Shelf Mount A B C Note The switch must be wall mounted with the Ethernet ports facing either the floor or the ceiling Do not mount the switch with the ports facing to the side Note Do not stack other equipment on top of the switch to avoid possible interference or damage Note Mounting is the same for models with both front and rear facing ports ...

Страница 12: ...ipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading Circuit Overloading Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the circuits might have on over current protection and supply wiring Appropriate consideration of equipment nameplate ratings should be used when ad...

Страница 13: ...Network Cable Requirements 568B termination is recommended Figure 4 EIA TIA 568B Termination Pattern Connect a Cat5e 6 straight through cable between the switch and other equipment Figure 4 EIA TIA 568B Termination Pattern Gold pins facing up Pin 1 White Orange Pin 5 White Blue Pin 2 Orange Pin 6 Green Pin 3 White Green Pin 7 White Brown Pin 4 Blue Pin 8 Brown Note Maximum cable length is 328 feet...

Страница 14: ... illustrated in the example below Model PoE Budget AN 210 SW C F R 8 POE 65W AN 210 SW F R 16 POE 130W AN 210 SW F R 24 POE 190W AN 210 SW F 48 POE 375W AN 310 SW F R 8 POE 130W AN 310 SW F R 16 POE 250W AN 310 SW F R 24 POE 375W PoE Budget Calculation Example Figure 5 PoE Calculation Example RESET 1 3 5 7 2 4 6 8 Link Act 1 Gbps 9 SFP 10 SFP Link Act 1 Gbps AN 210 SW R 8 POE Total PoE Device Cons...

Страница 15: ...o port forwarding or DDNS address required Figure 6 OvrC Operation Diagram ENABLED Web Browser Access Mobile Apps AN 110 SW R 8 1 2 3 4 5 6 7 8 1 Gbps Link Act To add this device to your OvrC account 1 Connect the switch to the network Internet access required 2 Log Into OvrC www ovrc com or load the OvrC app 3 Select or create a customer account 4 Add the device MAC address and Service Tag number...

Страница 16: ...menu click the appropriate button to access the web interface 3 OvrC will open a new tab in your web browser and load the login screen Enter your username and password then click Log In 4 If you were able to log in successfully go to the System Settings menu to begin completing the recommended setup for all users See section 5 Recommended Setup System Settings on page 28 5 If this access method do...

Страница 17: ...ure below for an example of an Araknis device being identified 2 Enter the IP address in your web browser to load the login screen Enter your username and password then click Log In 3 If you were able to log in successfully go to the System Settings menu to begin completing the recommended setup for all users See section 5 Recommended Setup System Settings on page 28 4 If this access method does n...

Страница 18: ...ress Access Access the interface using the default IP address 192 168 20 254 1 Connect your PC to the switch using a network patch cable Computer Switch 2 On your PC open the Control Panel and left click Network and Internet 3 Left click Network and Sharing Center 4 In the left bar left click Change adapter settings ...

Страница 19: ...ick the icon for the wired network connection and left click Properties 6 Left click to highlight Internet Protocol Version 4 TCP IPv4 then left click Properties 7 In the General tab left click Use the following IP address and enter the IP address and subnet mask IP Address 192 168 20 2 Subnet Mask 255 255 255 0 ...

Страница 20: ...e Network Connection Properties 9 Open a web browser and navigate to http 192 168 20 254 to load the login screen Enter your username and password then click Log In 10 If you were able to log in successfully go to the System Settings menu to begin completing the recommended setup for all users See section 5 Recommended Setup System Settings on page 28 Default Login Username araknis Password arakni...

Страница 21: ...lays the currently selected submenu C Top Bar The top bar displays the current connection status to the OvrC server the current internally set system time and the current system uptime in DAYS HOURS MINUTES D Search Search for menu functions by entering a term then selecting the appropriate item from the drop down results Do not press enter when searching Applying or Canceling Changes After change...

Страница 22: ...igned to the system Model Number Product SKU FW Version Current operating firmware version MAC Address Media Access Control MAC address of the switch IP Address Device management IP address Service Tag Internal tracking number used to track every product sold by Araknis Networks Gateway Default gateway of the management VLAN Port Status Port Port number Corresponds to the physical location of the ...

Страница 23: ...og Search Bar Enter terms to search for in the Message Field column Time Log entry recorded time Category Type of event Severity Level of entry severity Message Detailed entry information Example System reboot Navigation Use the left drop down to select a page of entries to navigate to Use the Previous and Next buttons on the right side to toggle between screens Export Click to export a txt file o...

Страница 24: ...ed device Full or Half Aggregation Group The aggregation group the port is member of No ports are members of any aggregation group by default Bytes Sent A live count of the number of bytes being transmitted on a specific port Errors Sent A live count of the number of outgoing errors sent on a specific port Use this number to determine whether there is a problem with the physical interface of the s...

Страница 25: ...sword Confirm New Admin Password Re enter the new value when changing the administrator password Must be the same as the above field Management VLAN ID Select the VLAN to be used when accessing the switch interface All ports are set to VLAN 1 by default Do not change this setting unless additional VLANs have been configured Once the setting is changed you will lose access to the interface unless y...

Страница 26: ...ually set an IP address IPv4 Address IP address issued to the switch Used for accessing the interface Default 192 168 20 254 Subnet Mask Identifies the subnet the IP address is part of Default 255 255 255 0 Default Gateway IP address of the Internet gateway device usually the router DNS Server 1 IP address of the DNS Server Usually the same as the Default Gateway DNS Server 2 Optional Enter a seco...

Страница 27: ...Date and Time Select to automatically get date and time from various web resources NTP Server Select an NTP Network Time Protocol server for setting date and time Default time nist gov Time Zone Select the appropriate time zone from the drop down Enable Daylight Saving Select to enable DST start end can change from year to year Be sure to update this information Start Select the month date day and...

Страница 28: ... log in after applying the changes 2 Configure System IP Address Set an IP address for accessing the interface We recommend a static IP so the address doesn t change Record the address so you can access the interface later 3 Configure System Time and Date We recommend using the Automatically Get Time and Date setting using the default server time nst gov This will ensure that scheduling features c...

Страница 29: ... Sets the maximum frame size for traffic going through the switch Received packets that exceed the maximum frame size are dropped Range 1518 9216 bytes Default 9216 Basic Port Settings Port The number of the physical switch port Name The assigned name of the port Speed The current speed of the port based on the connected device in use Auto 1Gbps 100Mbps 10Mbps or Disabled Default Auto Duplex The c...

Страница 30: ...h when the buffer is overloaded on a specific switch port When enabled back pressure is used for half duplex operation and IEEE 802 3 2005 formally IEEE 802 3x for full duplex operation Default Disabled EEE Status Energy Efficient Ethernet EEE is a standard defined by IEEE 802 3az to reduce LAN device power consumption during idle periods With EEE enabled compatible devices can go into LPI Low Pow...

Страница 31: ...supply can deliver In this case the ports with the lowest priority will be turned off starting from the port with the highest port number Low Medium or High Default Low Status Detecting The port is not providing PoE power and waiting for a connection that requires it If a device is connected and status is still Detecting then the device is not powered via PoE Delivering The port is connected to a ...

Страница 32: ... Output Voltage V Voltage being supplied to the port Output Current mA Current in milliamps being supplied to the port Output Power W Power in watts being supplied to the port Configuring PoE Ports Use these settings to customize PoE in situations where power is critical for certain equipment or if power must be disabled on a port Enable Check the box to enable PoE on the specified port Power Limi...

Страница 33: ... the specified VLAN ID See the figure below for information about changing settings Trunk Port Trunk port s assigned to the VLAN Trunk Ports send tagged packets to other devices Custom Port Displays ports assigned to the VLAN that have customized settings Customizations can be made in the Advanced VLAN configuration menus See section Advanced VLANs 802 1Q VLANs on page Delete Click the trash can i...

Страница 34: ...nu Access Port Ports and LAGs assigned to the VLAN The switch tags untagged packets from assigned Access Ports with the specified VLAN ID Trunk Port Trunk port s assigned to the VLAN Trunk Ports send tagged packets to other devices none These ports are not included in the VLAN 4 Click Confirm to close the window The selections will appear in the Access and Trunk Port fields 5 Click Apply to save t...

Страница 35: ...Link Aggregation Control Protocol LACP Static trunks must be manually configured at both ends of the link You can configure any number of ports on the switch to use LACP as long as they are not already configured as part of a static trunk Figure 17 Link Aggregation Settings Menu Group Number of the group configured in the rule Name Enter a custom name for the group being configured Mode Select whe...

Страница 36: ... evenly between the ports Dynamic Traffic is sent based on LACP protocol 3 Click the Member Ports field to open the assignment window then select the member ports to be used for LAG 4 Click Confirm to close the window The selections will appear in the Member Port field 5 Click Apply to save the new settings In this example for Group 1 both SFP ports are configured as Member ports using LACP Note L...

Страница 37: ...mited to viewing current settings in all menus Delete Click the trash can icon then click Apply to delete an entry must click Apply to save the setting The default admin account cannot be removed Add Click to create a new entry Remember to click Apply to save the new settings Note The user name of the primary account must be changed in the System Settings menu See section 4 System Settings on page...

Страница 38: ...nt Number of ping attempts 1 5 Default 4 Interval Number of seconds between pings 1 5 Default 1 Ping Packet Size Enter the packet size of each ping 8 5120 bytes Change to test MTU issues Default 56 Bytes Result Displays results of the test in real time Resize screen table using bottom right corner click drag Test Click to start the ping test Running a Ping Test 1 Enter the target IP address into t...

Страница 39: ...ansmitted the number of packets received from the target in response percent packet loss and if successful the minimum average and maximum round trip timing of the packets Troubleshooting Using Ping Test Results If no packets are received check the connections between the switch and the target device first The target device may not be connected If the connection is good reset or power cycle the ta...

Страница 40: ...because on the LAN there is rarely more than one router for the packet to pass through Figure 22 Trace Route Test Page IP Address Enter the IP address of a device or web page to ping for the test Max Hop Enter the maximum number of hops to be recorded in the Ping test 2 55 Default 30 Result Displays the results of the test in real time Resize screen table using bottom right corner click drag Test ...

Страница 41: ... parameters for the test followed by information about each hop or hop attempt Each line starting with a number indicates a hop in the path to the target IP address Only hops between routers are shown not between switches Each hop is tested three times In each hop entry the send and receive IP address are shown followed by the amount of time it took for the hop to occur on each of the three attemp...

Страница 42: ... previously saved configuration settings Click Choose File and select a configuration from the Open window Then click the From PC button to upload the configuration file Restore Factory Defaults Click the Yes button to restore all factory default settings Firmware Current Firmware Version Indicates the current firmware version on the selected partition Partition Select the partition to change firm...

Страница 43: ...rently loaded on the partition Image Size Bytes File size of the firmware on the partition Created Time Time and date the firmware file was uploaded to the partition Firmware Update Instructions 1 Download the new firmware from the product support tab Extract the firmware from the zip file to a know location on your computer 2 Navigate to the Maintenance File Management Firmware menu 3 Click the C...

Страница 44: ...Switch Click to restart the switch No settings will be lost but Ethernet will drop for connected devices until the restart is complete 60 seconds The login screen will reload once the restart is complete Log Out Figure 27 Log Out Page Log Out Click to log out from the current session The login screen will reload once the logout is complete ...

Страница 45: ...5 Araknis Networks AN 210 310 SW F R Manual Product Manual Table of Contents 1 Advanced Menus The remaining menus are meant only for advanced users Proper setup and use of these features requires advanced networking knowledge ...

Страница 46: ...d Octets The number of all bytes sent and received good and bad including Frame Check Sequence but excluding framing bits Unicast The number of unicast packets sent and received good and bad Multicast The number of multicast packets sent and received good and bad Broadcast The number of broadcast packets sent and received good and bad Pause A count of the MAC Control frames sent or received on a s...

Страница 47: ...ither an FCS or alignment error Rx Drops The number of ingress packets that were dropped not due to errors in those packets This might be a result of a congested link and switch port buffer overload Rx CRC Alignment The number of frames received with CRC or alignment errors Receive Size Counters The number of packets sent and received good and bad divided into categories based on packet frame size...

Страница 48: ...tch is not required to poll the port for connected static MACs Allowing virtual machines to be recognized on a port by MAC address Figure 2 Neighbors MAC Address Table Static and Dynamic MAC Address Index Identifier number for the MAC entry Port Physical port or trunk on the switch VID The VLAN ID associated with the entry MAC Address Physical address associated with this interface Port Members Th...

Страница 49: ...ties eg routing switching and configuration settings Information Table Araknis switch parameters shared using LLDP Figure 3 LLDP Information Chassis ID Subtype Method used for device identification Chassis ID MAC Address of the switch System Name System name of the switch configured in the System Settings menu System Description System make and model Capabilities Supported Displays the capabilitie...

Страница 50: ...ge 1 8192 seconds Default 2 Remote Device Table This table displays LLDP information shared by connected equipment with LLDP features Figure 5 LLDP Remote Device Menu Port Connected port for the device on the switch Chassis ID Subtype Type of information used for subtype Typically MAC address Chassis ID Port ID Subtype Identification value Typically MAC address Remote IDSystem Name Displays the co...

Страница 51: ...for IGMP Snooping Figure 6 IGMP Snooping Settings Status Enable or disable IGMP Snooping When enabled the switch monitors network traffic passing through it to determine which connected clients want to receive multicast traffic Default Disabled Version Select IGMPv2 or v3 Report Supression Enable to prevent the router from seeing the IGMP messaging that occurs at the client level This alleviates l...

Страница 52: ...ending querier messages A higher value means that packets will be resent more often useful for congested networks Default 2 Interval How often the switch sends IGMP host querier messages Default 125 seconds Oper Interval Current reported IGMP host querier message interval Max Response Interval Maximum response time advertised in IGMP queries This value must be lower than the query interval Default...

Страница 53: ...low auto learning of router port use Default Enabled Dynamic Port List Lists auto learned ports if Router Ports Auto Learned is enabled Static Port List Manually select ports that are connected to the multicast querier Forbidden Port List Manually select ports to be excluded from joining multicast groups on that VLAN URC Settings Use this menu to configure multicasting devices for URC brand contro...

Страница 54: ...Dv1 or v2 Report Repression Enable to prevent the router from seeing the IGMP messaging that occurs at the client level This alleviates load on the router because the switch acts as a proxy for client level messages like leave requests Default Enabled VLAN Settings Configure MLD Snooping settings for individual VLANs Figure 13 MLD Snooping VLAN Settings VLAN ID VLAN identifier IGMP Snooping Status...

Страница 55: ...Settings VLAN ID VLAN identifier Router Ports Auto Learned Enable to allow auto learning of router port use Default Enabled Dynamic Port List Lists auto learned ports if Router Ports Auto Learned is enabled Static Port List Manually select ports that are connected to the multicast querier Forbidden Port List Manually select ports to be excluded from joining multicast groups on that VLAN ...

Страница 56: ...rwarded between root ports and designated ports Once the network is stable all switches listen for Hello BPDUs Bridge Protocol Data Units sent by the Root Bridge If a switch does not get a Hello BPDU after a certain period Maximum Age the switch assumes that the link to the Root Bridge is down Then the switch initiates negotiations with other switches in the network to recalculate the Spanning Tre...

Страница 57: ...idge device Smaller values indicate higher priority larger values lower priority If all switches are left to default priority the bridge device with the lowest numbered MAC address will be elected Cost Displays shortest path to the root bridge device Port Switch port linking to the root bridge device Forward Delay Amount of seconds before the root bridge port builds its bridge table after the Max ...

Страница 58: ...icular switch to be guaranteed as the root bridge device set its Priority value lower than other switches Range 0 61440 multiples of 4096 Default 32768 Maximum Hop Maximum number of link hops a BPDU will travel from the root bridge as long as the maximum age of the BPDU has not passed Range 1 40 Default 20 Forward Delay Amount of seconds before the root bridge port rebuilds its bridge table after ...

Страница 59: ...he path cost The currently calculated Oper path cost is displayed below If the entered value is zero the Oper path cost is based on the port speed which in this case is 1 Gbps Designated Root Bridge Displays the designated root bridge device s priority forward delay and MAC address External Root Cost Displays the cost to reach the root bridge across links connecting the boundary ports outside the ...

Страница 60: ...een bridges in the spanning tree Port State Displays what state the port is currently in Options Disabled Port is not in use Blocking Port is not forwarding frames or reading MAC addresses because it would cause a loop but is listening for BPDUs This state is reached once a different port is designated Listening A designated or root port moves into this state if it stops blocking due to a change i...

Страница 61: ...of values for example 20 30 32 entered would associate VLANs 20 30 31 and 32 Priority Value used to prioritize what MST ID is elected as the path back to the root bridge device If all switches are left to default priority the root bridge with the lowest numbered MAC address will be elected Smaller values indicate higher priority larger values lower priority Range 0 61440 multiples of 4096 Default ...

Страница 62: ...rrent operational internal path cost Regional Root Bridge Displays the MAC address and priority for the regional root bridge Internal Root Cost Displays the cost to reach the regional root bridge inside the MSTP region When a BPDU is received on an internal port this cost is adjusted based on the receiving boundary port cost This information is not shared or counted outside the region Designated B...

Страница 63: ...agged Port Untagged ports and LAGs for the VLAN Click the field to configure Default All ports untagged Delete Click the trash can icon then click Apply to delete a VLAN entry Add Click to create a new entry Remember to click Apply to save the new settings PVID Settings Use Port VLAN ID to configure tagging on packets coming to a port Figure 23 802 1Q PVID Settings Menu Port Switch port identifier...

Страница 64: ... based security and isolation between ports within the assigned VLAN Traffic on ports assigned to a private VLAN can only be forwarded to and from uplink ports Note The Private VLANs feature is only found in 310 series switches Figure 24 Private VLANs Menu Port Switch port identifier Private Check the box to set a port to private status Default Not checked ...

Страница 65: ...der to configure a new voice VLAN you must first create a new VLAN The default VLAN cannot be used See Section 14 VLAN Settings Basic Port Based on page or Section Advanced VLANs 802 1Q VLANs on page 63 Figure 25 Voice VLANs Settings Voice VLAN State Click to enable or disable the Voice VLAN feature Default Disabled Voice VLAN ID Select an existing VLAN ID for use as a Voice VLAN 802 1p Remark Ena...

Страница 66: ...used to identify different brands of IP phones Description Phone system name Delete Click the trash can icon then click Apply to delete an entry Add Click to create a new entry Remember to click Apply to save the new settings Port Settings Configure port based Voice VLAN settings Figure 27 Voice VLANS Port Settings Port Switch port identifier State Enable or disable Voice VLAN tag examination on t...

Страница 67: ... Session ID Session identifier Enable Check to enable a port mirroring session Destination Port Port that packets will be mirrored to Source TX Port Port that sent the original packets Source RX Port Port originally receiving the packets Ingress State Enable or disable 11 Security 802 1x 802 1x allows port based client authentication with the use of a RADIUS server 802 1x Global Setting Configure ...

Страница 68: ...attempts to authenticate a client ForceAuthorized The port always behaves as if an authenticated client is connected Reauthentication Enable or disable reauthentication by the switch If enabled a client that failed to authenticate will not be allowed to try again until the next period based on the Period Setting Default Enabled Reauthentication period Set the reauthentication period Default 3600 s...

Страница 69: ... connected using 802 1x Figure 31 802 1x Authenticated Host Table User Name Name of the user configured in the RADIUS server Port Switch port the user is authenticated on Session Time Amount of time since the user was authenticated for the current session Authenticate Method Method used to authenticate the user MAC Address MAC address of the connected client port ...

Страница 70: ...zed Port Port for clients communicating with the server Key String Enter the authentication key used between the switch and the server Timeout Reply How many seconds to wait for a reply from the server before trying again Default 3 seconds Retry Number of times to attempt connection to the server Default 3 Server Priority Enter the RADIUS server the priority for the switch The server with the high...

Страница 71: ... or Disable filtering of this type of attack Default Enabled TCP Blat Enable or Disable filtering of this type of attack Default Enabled POD Enable or Disable filtering of this type of attack Default Enabled IPv6 Min Fragment Enable or Disable filtering of this type of attack Default Enabled Bytes Specify the minimum IPv6 fragment size to filter Range 0 65535 Bytes Default 1240 Bytes ICMP Fragment...

Страница 72: ...able filtering of this type of attack Default Enabled Null Scan Attack Enable or Disable filtering of this type of attack Default Enabled X Mas Scan Attack Enable or Disable filtering of this type of attack Default Enabled TCP SYN FIN Attack Enable or Disable filtering of this type of attack Default Enabled TCP SYN RST Attack Enable or Disable filtering of this type of attack Default Enabled TCP F...

Страница 73: ...ch port identifier State Enable or disable security for the port Max MAC Address Enter the total number of MAC addresses that may be identified on the port 15 Security MAC Address Filter Bind MAC addresses to VLANs regardless of which port they are connected on Figure 36 MAC Address Filter Table Index MAC Filter rule identifier VID Select the VLAN ID for the MAC address to be bound to MAC Address ...

Страница 74: ...y to the event log when the alarm goes off SNMP Trap Send a message to the remote log server when the alarm goes off Log and Trap Log and send a message above when the alarm goes off Community If using SNMP Trap or Log and Trap event type select whether the SNMP community is Public or Private Description Enter a description for the event type Last Time Sent Last occurrence of an event of the speci...

Страница 75: ...se this option if the monitored value can increase or decrease at any time Delta Detects change over time by subtracting the most recent sampled value from the current Use the option if the monitored value always increases over time Rising Threshold Upper threshold of the monitored value Use this in conjunction with Falling Threshold to be alerted when the monitored value leaves the desired operat...

Страница 76: ...e number of samples to save in each entry Interval Enter the interval for recording samples on the port Owner Enter the name of the requester Delete Click the trash can icon then click Apply to delete an entry RMON History Log Table View selected history logs Figure 41 History Log Table Select History Index Select a History Log type to monitor from the drop down In order to view logs you must firs...

Страница 77: ...n Strict Priority Traffic is scheduled specifically based on queue priority WRR Use the Weighted Round Robin algorithm to prioritize traffic queues Trust Mode Select the desired mode of operation from the drop down 802 1p Traffic is prioritized based on its 802 1p priority tag DSCP Traffic is prioritized based on its DSCP priority tag 802 1p DSCP Traffic is prioritized based on both 802 1p and DSC...

Страница 78: ...a certain CoS value Figure 45 QoS Port Settings Table Port Switch Port identifier CoS Value Select a CoS value from the drop down for all packets on the specified port Trust Enable or disable QoS Bandwidth Control Limit the total amount of traffic allowed to come into or out of switch ports Figure 46 Bandwidth Control Table Port Switch Port identifier Ingress Enable or disable incoming bandwidth c...

Страница 79: ...7 Storm Control Table Port Switch Port identifier Status Enable or Disable Storm Control for the specified port Broadcast kbps Check the box to enable Broadcast storm control then enter the maximum allowed traffic rate of that type in kbps Unknown Multicast kbps Check the box to enable Unknown Multicast storm control then enter the maximum allowed traffic rate of that type in kbps Unknown Unicast ...

Страница 80: ... address based rules for controlling incoming access to a device on any connected port Figure 48 MAC ACL List MAC ACL List Manage MAC ACLs Index List identifier Name Enter a name to describe the members or reason for the ACL list Delete Click the trash can icon then click Apply to delete an entry MAC ACE List Define Access Control Entries ACEs associated with each ACL list Click any entry field to...

Страница 81: ...ination MAC mask to monitor for Use this field to filter multiple addresses within a range Only visible when monitoring a User Defined address Source MAC Value Source MAC address to monitor for Options Any or User Defined Source MAC Mask Source MAC mask to monitor for Use this field to filter multiple addresses within a range Only visible when monitoring a User Defined address VLAN ID Enter the VL...

Страница 82: ...or reason for the ACL list Delete Click the trash can icon then click Apply to delete an entry Add Click to create a new entry Remember to click Apply to save the new settings IPv4 ACE List Define Access Control Entries ACEs associated with each ACL list Click any entry field to open the IPv4 ACE List Editor see next page Delete Click the trash can icon then click Apply to delete an entry Add Clic...

Страница 83: ...ned address Source Destination IP Address Value Enter the address to monitor Only visible when monitoring a User Defined address Source Destination IP Mask Subnet mask to monitor Use this field to filter multiple addresses within a range Only visible when monitoring a User Defined address Source Destination Port Port Range Enter a port or ports to monitor Type of Service Select Any or DSCP to matc...

Страница 84: ...or reason for the ACL list Delete Click the trash can icon then click Apply to delete an entry Add Click to create a new entry Remember to click Apply to save the new settings IPv6 ACE List Define Access Control Entries ACEs associated with each ACL list Click any entry field to open the IPv4 ACE List Editor see next page Delete Click the trash can icon then click Apply to delete an entry Add Clic...

Страница 85: ...Pv6 ICMP Protocol ID Enter the identifier for the protocol Source Destination IP Address Select whether to monitor Any or a User Defined address Source Destination IP Address Value Enter the address to monitor Only visible when monitoring a User Defined address Source Destination IP Prefix Length Prefix to monitor Use this field to filter multiple addresses within a range Only visible when monitor...

Страница 86: ...tents ACL ACL Binding Bind configured ACLs to switch ports to implement access control rules Figure 54 ACL Binding Menu Page Port Switch Port identifier MAC IPv4 IPv6 ACL Select an ACL entry to enable on the port You must configure a rule in the respective ACL menu before configuring this setting ...

Страница 87: ...ously monitors the status of the switch hardware and the traffic passing through its ports SNMP client software can access the switch SNMP agent through SNMP community strings These community strings are used for authentication SNMPv3 provides additional security features that cover message integrity authentication and encryption as well as controlling user access to specific objects in the MIB SN...

Страница 88: ...r UDP UDP port for logging into the server Timeout Number of seconds to wait before declaring a timeout of connection from the server Retry Number of retry attempts to make after a timeout Delete Click the trash can icon then click Apply to delete an entry Add Click to create a new entry Remember to click Apply to save the new settings Remote Engine ID List Configure the switch to recognize SNMPv3...

Страница 89: ...not be changed Write View Select None or All Notify View Select None or All Delete Click the trash can icon then click Apply to delete an entry Add Click to create a new entry Remember to click Apply to save the new settings View List Figure 59 SNMP View List View Name Enter a name to identify the View Subtree OID Enter the Subtree Object Identifier OID value must begin with a This value identifie...

Страница 90: ... Remember to click Apply to save the new settings User List Figure 61 SNMP User List User Name Enter a name for the user Group Name Select which group the user is a part of You must configure an SNMP group before configuring this setting Privilege Mode NoAuth No authentication or privacy for group members Auth SNMP messages are authenticated Priv SNMP messages are encrypted Authentication Protocol...

Страница 91: ...tween switches connected by aggregated links Figure 62 Advanced LACP Settings Settings System Priority Enter a priority value for the switch The device with the lowest value has priority Range 1 65535 Default 32768 LACP Timeout Port Switch Port identifier Timeout Set the timeout speed for disabled ports to be removed from a trunk Use the Low setting for busy trunked links ...

Страница 92: ...y the user Figure 64 Local Logging EMERG ALERT CRIT ERROR WARNING NOTICE INFO DEBUG Select Yes to enable local logging for the event severity level or No to disable logging for the event severity level Remote Logging Figure 65 Remote Logging IP Hostname Enter the IP address of the remote log server Server Port Enter the port configured for server communication EMERG ALERT CRIT ERROR WARNING NOTICE...

Страница 93: ...d Basic Port Settings 29 Figure 17 Advanced Port Settings 30 Figure 18 PoE Settings Menu 31 Figure 19 PoE Settings Menu 32 Figure 20 VLAN Settings 33 Figure 21 Access and Trunk Port Selection 33 Figure 22 Configuring Ports in a VLAN 34 Figure 23 Link Aggregation Settings Menu 35 Figure 24 Access Management Menu Page 37 Figure 25 Ping Test Page 38 Figure 26 Successful Ping Test Result 39 Figure 27 ...

Страница 94: ...AN Settings Menu 63 Figure 56 802 1Q PVID Settings Menu 63 Figure 57 Private VLANs Menu 64 Figure 58 Voice VLANs Settings 65 Figure 59 Voice VLANS OUI Settings 66 Figure 60 Voice VLANS Port Settings 66 Figure 61 Port Mirroring Page 67 Figure 62 802 1x Global Settings Menu 67 Figure 63 802 1x Port Settings Menu 68 Figure 64 802 1x Authenticated Host Table 69 Figure 65 Radius Server Menu 70 Figure 6...

Страница 95: ...u Page 84 Figure 86 IPv4 ACL ACE Editor 85 Figure 87 ACL Binding Menu Page 86 Figure 88 SNMP Global Settings 87 Figure 89 SNMP Trap Settings 88 Figure 90 SNMP Remote Engine ID List Settings 88 Figure 91 SNMP Group List 89 Figure 92 SNMP View List 89 Figure 93 SNMP Community List 90 Figure 94 SNMP User List 90 Figure 95 Advanced LACP Settings 91 Figure 96 Log Settings 92 Figure 97 Local Logging 92 ...

Страница 96: ...Max Power Output per Port 30W 30W 30W 30W 30W Total PoE Power Budget 65W 65W 130W 190W 375W Enable Disable per port Yes Priority Setting per port Yes Overloading Protection per port Yes Power level setting per port Yes Environmental Dimensions W x H x D inches 12 7 x 1 49 x 4 1 12 99x1 73x9 05 17 32x1 73x10 23 17 32x1 73x10 23 17 32x1 73x16 14 Power Supply 100 240V AC 50 60 Hz Device Power Consump...

Страница 97: ...nce Flash Memory 16MB 16MB 16MB 32MB SDRAM 128MB 128MB 128MB 256MB Packet Buffer 524KB 524KB 524KB 1 5MB MAC Address Table Size 8K 8K 8K 16K Switching Capacity 20Gbps 36Gbps 52Gbps 104Gbps Forwarding Rate 14 8Mpps 26 8Mpps 38 7Mpps 77 4Mpps Environmental Dimensions W x H x D inches 12 99x1 73x9 05 17 32x1 73x10 23 17 32x1 73x10 23 17 32x1 73x16 14 Power Supply 100 240V AC 50 60 Hz Max Power Consum...

Страница 98: ...Output per Port 30W 30W 30W Total PoE Power Budget 130W 250W 375W Enable Disable per port Yes Priority Setting per port Yes Overloading Protection per port Yes Power level setting per port Yes Environmental Dimensions W x H x D inches 12 99x1 73x9 05 17 32x1 73x10 23 17 32x1 73x16 14 Power Supply 100 240V AC 50 60 Hz Device Power Consumption 12 92W 22 30W 26 65W Max Power Consumption 157 06W 297 7...

Страница 99: ...es Port based VLANs Max groups 4094 Yes Yes Private VLANs No Yes QinQ No No Protocol based VLAN No No Voice VLAN Yes Yes Link Aggregation Static 802 3ad LACP Yes Yes Max ports per group 8 8 Max Group 8 8 Multicast Snooping IGMP Snooping v1 v2 v3 MLD Snooping v1 v2 Yes Yes IGMP Querier Yes Yes IGMP Immediate Leave Yes Yes Storm Control Broadcast Unknown Multicast Unknown Unicast Yes Yes Jumbo Frame...

Страница 100: ... Yes SSH v2 0 Yes Yes MAC Filter Yes Yes IP Filter No No Management Management CLI Web Telnet Yes Yes Dual FW Images Yes Yes FW Upgrade TFTP upgrade Yes Yes HTTP upgrade Yes Yes Management Access Filtering SNMP Web Telnet Yes Yes SNMP v1 v2c v3 Yes Yes SNTP Yes Yes RMON 1 2 3 and 9 groups Yes Yes DHCP Server No No Client Yes Yes Relay No No Option82 No No Snooping No No Event log Local flash remot...

Страница 101: ...terference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operations of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to ...

Страница 102: ...ive in material or workmanship under normal conditions of use This warranty shall not apply to products that have been abused modified or disassembled Products to be repaired under this warranty must be returned to a designated service center with prior notification and an assigned return authorization RA number Contact technical support for an RA number Contact Information Web www araknisnetworks...

Страница 103: ...200922 2000 ...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды