CTS FOS-3126-PLUS SERIES Скачать руководство пользователя страница 179

Страница: 179 / 205

179

APPENDIX A: Free RADIUS readme

The advanced RADIUS Server Set up for

RADIUS Authentication

is described as below.

When free RADIUS client is enabled on the device,

On the server side, it needs to put this file "

dictionary.sample

" under the directory

/raddb

and modify these three files - "

users

", "

clients.conf

" and "

dictionary

", which are on the

disc shipped with this product.

* Please use any text editing software (e.g. Notepad) to carry out the following file editing works.

In the file "

users

Set up user name, password, and other attributes.

In the file "

clients.conf

Set the valid range of RADIUS client IP address.

In the file "

dictionary

Add this following line -

$INCLUDE dictionary.sample

Содержание FOS-3126-PLUS SERIES

Страница 1: ...FOS 3126 PLUS SERIES 24 PORTS COMBO SFP 10 100 1000BASE T 100BASE FX 1000BASE X AND UPLINK 2 PORTS COMBO SFP 1000BASE T 1000BASE X SLOTS MANAGEMENT SWITCH Network Management User s Manual Version 1 4...

Страница 2: ...s cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of th...

Страница 3: ...Password 17 2 4 User Mode 18 2 4 1 Ping Command 18 2 5 Privileged Mode 18 2 5 1 Copy cfg Command 19 2 5 2 Firmware Command 20 2 5 3 Ping Command 20 2 5 4 Reload Command 20 2 5 5 Write Command 20 2 5 6...

Страница 4: ...onfig Command 82 3 SNMP NETWORK MANAGEMENT 83 4 WEB MANAGEMENT 84 4 1 System Information 86 4 2 User Authentication 87 4 2 1 RADIUS Configuration 88 4 3 Network Management 89 4 3 1 Network Configurati...

Страница 5: ...ept 114 4 4 7 3 Introduction to Q in Q 117 4 4 7 4 802 1Q VLAN 118 4 4 7 4 1 Configure VLAN 118 4 4 7 4 2 VLAN Interface 119 4 4 7 4 3 Management VLAN 120 4 4 8 QoS Configuration 120 4 4 8 1 QoS Port...

Страница 6: ...ort Packet Analysis Statistics 160 4 5 5 LACP Monitor 161 4 5 5 1 LACP Port Status 161 4 5 5 2 LACP Statistics 162 4 5 6 RSTP Monitor 162 4 5 6 1 RSTP VLAN Bridge Overview 163 4 5 6 2 RSTP Port Status...

Страница 7: ...Factory Settings Except Network Configuration 176 4 6 5 Backup Configuration 177 4 7 Save Configuration 178 4 8 Reset System 178 APPENDIX A Free RADIUS readme 179 APPENDIX B Set Up DHCP Auto Provision...

Страница 8: ...the best of this user s manual and maximize the Managed Switch s performance for your personalized networking environment 1 1 Interface There are 4 models in this series Descriptions and interface fi...

Страница 9: ...tolen for remote management You can use PuTTY a free and open source terminal emulator application which can act as a client for the SSH to gain access to the Managed Switch SNMP Management SNMP is al...

Страница 10: ...based network management system is used to manage the Managed Switch through the network remotely When you use a SNMP based network management system the Managed Switch becomes one of the managed dev...

Страница 11: ...ded twisted pair networking cable SFP slot for 3 3V mini GBIC module supports hot swappable SFP fiber transceiver Before connecting the other switches workstation or Media Converter make sure both sid...

Страница 12: ...esses were obtained Remember that an address can be assigned to only one device on a network If you connect to the outside network you must change all the arbitrary IP addresses to comply with those y...

Страница 13: ...tch cannot be reached by any other means You also need the Local Console Management to setup the Switch network configuration for the first time You can setup the IP address and change the default con...

Страница 14: ...thorized username and password and then you will be directed to User mode In CLI management the User mode only provides users with basic functions to operate the Managed Switch If you would like to co...

Страница 15: ...perform several functions The following table summarizes the most frequently used quick keys in CLI Keys Purpose tab Enter an unfinished command and press Tab key to complete the command Press key in...

Страница 16: ...Brackets represent that this is a required field s size r repeat t timeout These three parameters are used in ping command and are optional which means that you can ignore these three parameters if th...

Страница 17: ...ssword you can delete the default username admin to prevent unauthorized accesses Enable Mode Password Enable mode is password protected When you try to enter Enable mode a password prompt will appear...

Страница 18: ...nter the packet size that would be sent The allowable packet size is from 8 to 4000 bytes optional r repeat 1 99 times Enter the number of times that ping packets are sent The allowable repeat number...

Страница 19: ...600_file conf misadmin1 abcxyz Switch copy cfg from tftp 192 168 1 198 HS_0600_file conf 2 Backup a configuration file to FTP or TFTP server Command Parameter Description Switch copy cfg to ftp A B C...

Страница 20: ...192 168 1 198 HS_0600_file bin 2 5 3 Ping Command Command Parameter Description Switch ping A B C D s size r repeat t timeout A B C D Enter the IP address that you would like to ping s size Enter the...

Страница 21: ...nt authenticates via the Switch exit Exit the configuration mode help Display a list of available commands in Configuration mode history Show commands that have been used lldp Set up LLDP Link Layer D...

Страница 22: ...itch config interface 1 3 5 Switch config if 1 3 5 Enter a single interface number together with a range of interface numbers Use both comma and hypen to signify the combination of different interface...

Страница 23: ...ay the product s model name Firmware Version Display the firmware version used in this device M B Version Display the main board version Fiber Type Display information about the slide in or fixed fibe...

Страница 24: ...f PORT PORT description description description Specify a descriptive name for the selected interfaces Switch config if PORT PORT media type sfp sfp Set the selected interfaces type to fiber Switch co...

Страница 25: ...s to full duplex mode Switch config if 1 3 flowcontrol Enable the selected interfaces flow control function Switch config if 1 3 speed 1000 Set the selected ports speed to 1000Mbps Switch config if 1...

Страница 26: ...eck ip Ethernet source_mac Define source MAC address any Specify any to apply ACL rule to any source MAC addresses xx xx xx xx xx xx Specify the specific source MAC address mac_mask Specify MAC mask a...

Страница 27: ...function any Specify any to filter frames to any destination IP addresses x x x x Specify either a host IP address or a network address ip_mask Define destination IP mask any Specify any to mean any I...

Страница 28: ...to IP 0x800 1 Specify 1 to indicate that Protocol Address Space is equal to IP 0x800 Ethernet any Specify any to indicate a match and not a match 0 Specify 0 to indicate that Hardware Address Space fi...

Страница 29: ...ly ACL rule to any Ether types 0xXXXX Enter the specific Ether Type Switch config acl RULE frame type icmp dest_mac icmp_type icmp_code source_ip ip_mask dest_ip ip_mask ip_ttl ip_fragment ip_option d...

Страница 30: ...is destination IP filtering function any Specify any to filter frames to any target IP addresses x x x x Specify a host IP address ip_mask Define destination IP mask any Specify any to mean any IP ma...

Страница 31: ...ly ACL rule to broadcast traffic protocol_id This parameter is to show the protocol number defined in the protocol field of the IPv4 packet Specify any to denote any protocols specify 1 255 to denote...

Страница 32: ...header is bigger than 5 bytes Switch config acl RULE frame type tcp dest_mac source_port dest_port source_ip ip_mask dest_ip ip_mask ip_ttl ip_fragment ip_option tcp_fin tcp_syn tcp_rst tcp_psh tcp_ac...

Страница 33: ...ender IP addresses Or specify a host IP address x x x x ip_mask Define source IP mask any Specify any to mean any IP mask 255 255 0 0 Specify a specific IP mask dest_ip This is destination IP filterin...

Страница 34: ...that the SYN value in TCP header is zero 1 to indicate the SYN value in TCP header is one Specify any to indicate that the value either 1 or 0 tcp_rst Specify 0 to indicate that the RST value in TCP...

Страница 35: ...s For example 1000 2000 means that port numbers from 1000 to 200 are specified The starting source port number is100 whereas the ending source port number is 2000 dest_port any Specify any to filter f...

Страница 36: ...Specify 0 to indicate that the TTL filed in IPv4 header is 0 1 If the value in TTL field is not 0 use 1 to indicate that ip_fragment Specify IP fragment bit any Specify any to denote the value which...

Страница 37: ...94 Specify an existing VLAN ID Switch config acl rate limiter 1 14 rate_pps 1 14 Specify the rate limiter ID that you would like to assign a rate value to it rate_pps Assign the rate to this specified...

Страница 38: ...e limiter 1 14 1 14 Show the specified rate limiter s setting Switch show acl interface port_list Switch config show acl interface port_list Show the specified interfaces access control list rule Use...

Страница 39: ...acl interface port_list Show the specified interfaces access control list rule 2 6 6 Archive Command Backup a copy of configuration file to FTP or TFTP server automatically Archive command Parameter D...

Страница 40: ...aggregation group LAG Command Parameter Description Switch config channel group trunking group_name group_name Specify a name for this link aggregation group Switch config interface port_list Switch...

Страница 41: ...255 Specify a key to the selected interfaces Switch config if PORT PORT channel group lacp type active active Specify the selected interfaces to active LACP type No command Switch config if PORT PORT...

Страница 42: ...time interval fromo 1440 minutes Switch config loop detection vlan id 1 4094 1 4094 Set up Loop Dtection VLAN ID No command Switch config no loop detection Disable Loop Detection function Switch confi...

Страница 43: ...on server In other words the Managed Switch requests identifying information from the client verifies that information with the authentication server and relays the response to the client Switch confi...

Страница 44: ...rt_list port_list Show or verify the selected interfaces 802 1x settings including port status and authentication status Switch config show dot1x statistics Show or verify 802 1x statistics Switch con...

Страница 45: ...RT PORT dot1x reauthenticate Re authenticate the selected interfaces No command Switch config interface port_list port_list Enter several discontinuous port numbers separated by commas or a range of p...

Страница 46: ...s IP address Switch config no ip address dhcp Disable DHCP mode Show command Switch config show ip address Show the current IP configurations or verify the configured IP settings IP command example Sw...

Страница 47: ...ated 10 Specify the time value that packets might be received to 10 seconds Switch config ip dhcp snooping leased 240 Specify packets expired time to 240 seconds Switch config ip dhcp snooping option...

Страница 48: ...network When a switch hears an IGMP report from a host for a given multicast group the switch adds the host s port number to the multicast list for that group And when the switch hears an IGMP Leave...

Страница 49: ...onfig no ip igmp snooping vlan 1 4094 1 4094 Disable IGMP Snooping on the specified VLAN Switch config no ip igmp snooping vlan 1 4094 query 1 4094 Disable a querier on the specified VLAN Show command...

Страница 50: ...ame Silver Specify a name Silver for this segment 50 Switch config segment 50 range 224 10 0 2 229 10 0 1 Specify a multicast IP range 224 10 0 2 to 229 10 0 1 Switch config ip igmp profile Silverprof...

Страница 51: ...PORT no ip igmp filter profile profile_name profile_name Remove the selected ports from the specified profile Switch config if PORT PORT no ip igmp max groups Set the maximum number of multicast stre...

Страница 52: ...to 400 Switch config if 1 3 ip igmp static multicast ip 224 10 0 5 vlan 50 Create a static multicast IP to VLAN entry 2 6 11 LLDP Command LLDP stands for Link Layer Discovery Protocol and runs over da...

Страница 53: ...ault setting Switch config no lldp tlv select capability Disable Capability attribute to be sent Switch config no lldp tlv select management address Disable Management Address attribute to be sent Swi...

Страница 54: ...associated ports will be deleted if they are not accessed within aging time MAC Command Parameter Description Switch config mac address table aging time 0 4080 0 4080 Enter the aging time for MAC addr...

Страница 55: ...RT PORT no mac learning Disable MAC learning function Show command Switch config show mac address table Show MAC addresses learned by the Managed Switch Switch config show mac address table clear Clea...

Страница 56: ...timeout 600 The console management will timeout logout automatically when it is inactive for 600 seconds Switch config management telnet Enable Telnet management Switch config management telnet port 2...

Страница 57: ...nfig show mvr group Show or verify MVR group settings MVR command example Switch config mvr Enable MVR function Switch config mvr vlan 50 Create a MVR VLAN 50 Switch config mvr group 50 224 10 0 10 23...

Страница 58: ...erver Switch config no ntp daylight saving Disable the daylight saving function Switch config no ntp offset Set the offset value back to the default setting Switch config no ntp server1 Delete the pri...

Страница 59: ...classify data packets Switch config qcl LIST vlan id 1 4094 low normal medium high vlan id 1 4094 Specify the VID to this QoS rule low normal medium high Specify one priority level to classify data pa...

Страница 60: ...Switch config qos remarking dscp 0 7 queue_list 0 63 0 7 queue_list Specify a queue value 0 63 Specify a DSCP value Switch config qos remarking 802 1p 0 7 queue_list 0 7 0 7 queue_list Specify a queu...

Страница 61: ...d interfaces Switch config if PORT PORT qos remarking user priority 0 7 0 7 Specify the default priority bit to the selected interfaces Switch config if PORT PORT qos queue weighted 1 2 4 8 1 2 4 8 Sp...

Страница 62: ...ate to each other Switch config security upnp filter Enable UPnP filter function No command Switch config no security anti broadcast polling interval Set the anti broadcast polling interval back to th...

Страница 63: ...icast packets exceeding the specified threshold will then be dropped The packet rates that can be specified are listed below 1 2 4 8 16 32 64 128 256 512 1k 2k 4k 8k 16k 32k 64k 128k 256k 512k 1024k N...

Страница 64: ...threshold will then be dropped 2 Use Interface command to configure a group of ports security settings Security Interface command Parameter Description Switch config interface port_list port_list Ent...

Страница 65: ...e each designated bridge proposes to its neighbors to determine if it can make a rapid transition This is one of the major elements which allow RSTP to achieve faster convergence times than STP Spanni...

Страница 66: ...ed_true Switch config no spanning tree delay time Reset the Forward Delay time back to the factory default Switch config no spanning tree hello time Reset the Hello Time back to the factory default Sw...

Страница 67: ...gregated ports priority to 0 Switch config spanning tree aggregated port edge Set the aggregated ports to edge ports Switch config spanning tree aggregated port p2p forced_true Set the aggregated port...

Страница 68: ...on aggregated ports Switch config show spanning tree interface Show each interface s STP information including port state path cost priority edge port state and p2p port state Switch config show span...

Страница 69: ...e range is between 0 and 70 degrees Celsius Switch config switch sfp tx bias 400 400 Set up slide in SFP modules TX bias value Switch config switch sfp tx power low_rx_power high_rx_power low_rx_power...

Страница 70: ...afety temperature rang to 0 70 degrees Celsius Switch config switch sfp tx bias 400 Set the slide in SFP safety TX Bias to 400 Switch config switch sfp voltage 3 3 6 Set the slide in SFP safety voltag...

Страница 71: ...ion Remove the SNMP community descriptions for mycomm Switch config community NAME no level Remove the configured access privilege This will set this community s level to access denied Show command Sw...

Страница 72: ...nfig trap ACCOUNT no description Delete the configured trap destination description Show command Switch config show snmp server trap destination Show SNMP trap destination account information Switch c...

Страница 73: ...r is down anti bcast A trap will be sent when broadcast packets exceed the specified threshold value auth fail A trap will be sent when any unauthorized user attempts to login case fan A trap will be...

Страница 74: ...ters for this Managed Switch Switch config switch info system contact sys_contact sys_contact Enter contact information for this Managed switch up to 55 alphanumeric characters Switch config switch in...

Страница 75: ...system location 13thfloor Set the system location field to 13thfloor Switch config switch info system name backbone1 Set the system name field to backbone1 Switch config switch info host name edgeswit...

Страница 76: ...user NAME no ip security Disable IP security function Switch config user NAME no level Reset access level privilege back to the factory default access denied Show command Switch config show user name...

Страница 77: ...er radius radius port Set the radius port setting back to the factory default Switch config no user radius retry time Set the retry time setting back to the factory default Switch config no user radiu...

Страница 78: ...show log Show event logs currently stored in the Managed Switch These event logs will be saved to the system log server that you specify Syslog command example Switch config syslog Enable System log f...

Страница 79: ...ip Switch config show vlan port based Show port based VLAN table Switch config show vlan interface port_list port_list Show the selected ports VLAN assignment and VLAN mode Exit command Switch config...

Страница 80: ...no vlan dot1q vlan mode Remove VLAN dot1q mode Switch config if PORT PORT no vlan dot1q vlan mode trunk native Disable native VLAN for untagged traffic Switch config if PORT PORT no vlan dot1q vlan t...

Страница 81: ...lay error packets statistics events for the selected ports Switch config show interface statistics error rate Display error packets statistics rates for each port Switch config show interface statisti...

Страница 82: ...ations assigned to the Manged Switch by the factory Switch config show running config Show configurations currently used in the Manged Switch Please note that you must save running configurations into...

Страница 83: ...ory resources required for the complete network management SNMP Manager is often composed by desktop computer work station and software program such like HP OpenView Totally 4 types of operations are...

Страница 84: ...e the RS 232 DB 9 console port or one of the 10 100 1000Base TX RJ 45 ports as the temporary RJ 45 Management console port to set up the assigned IP parameters of the Managed Switch including IP addre...

Страница 85: ...view the IP address and related information of the Managed Switch required for network management applications 4 Switch Management Set up switch port configuration VLAN configuration and other functio...

Страница 86: ...of the Managed Switch location Like the name the location is for reference only for example 13th Floor Model Name View only field that shows the product s model name Firmware Version View only field t...

Страница 87: ...er and then the following screen page appears Click Edit to view and edit a registered user setting Click Delete to remove a current registered user setting Click RADIUS Configuration for authenticati...

Страница 88: ...Four operation privileges are available in the Managed Switch Administrator Full access right including maintaining user account system information loading factory settings etc Read Write Partial acc...

Страница 89: ...k Configuration Set up the required IP configuration of the Managed Switch 2 System Service Management Enable or disable the specified network services 3 RS232 Telnet Console Configuration View the RS...

Страница 90: ...ut how to set up a DHCP server please refer to APPENDIX B IP Address Enter the unique IP address of this Managed Switch You can use the default IP address or specify a new one when the situation of ad...

Страница 91: ...sabled SNMP Service To enable or Disable the SNMP Management service Web Service To enable or Disable the Web Management service 4 3 3 RS232 Telnet Console Configuration Click the option RS232 Telnet...

Страница 92: ...ress 2nd Time Server Address When the default time server is down the Managed Switch will automatically connect to the 2nd time server Synchronization Interval The time interval to synchronize from NT...

Страница 93: ...urrent Total Max Agents View only field Current This shows the number of currently registered communities Total This shows the number of total registered community users Max Agents This shows the numb...

Страница 94: ...privilege for the SNMP operation NOTE When the community browses the Managed Switch without proper access right the Managed Switch will not respond For example if a community only has Read Write priv...

Страница 95: ...ged Switch to send port link up link down trap Broadcast Storm Trap Enable or disable broadcast storm trap sending from the Managed Switch when broadcast packets reach the upper limit Upper Limit Maxi...

Страница 96: ...efault Log server IP address Log Server IP 2 Specify the second Log server IP address When the default Log Server is down the Managed Switch will automatically contact the second or third Log server L...

Страница 97: ...SCP Remarking 802 1p remarking and queue remarking 10 Port Mirroring Set up target port mirrors source port to enable traffic monitoring 11 IGMP Snooping Enable or disable IGMP and set up IGMP VLAN ID...

Страница 98: ...ias Enter the specific Bias for the Managed Switch to detect the SFP DMI safety range Default 400mA SFP Normal TX Porwer range Enter the TX power value The allowable range is between 9999 and 99999 SF...

Страница 99: ...address ranging from 0180C2000020 to 0180C200002F will be dropped Multicast addresses from 0180C2000020 to 0180C2000022 are for GMRP GVRP and GARP respectively 0180C2000010 Select either Not Filter or...

Страница 100: ...the cost of the cable and running extra cable reduces future labor costs if networking needs changes Link aggregation can allow the use of these extra cables to increase backbone speeds with little o...

Страница 101: ...t Trunk Configuration from the Link Aggregation menu and then the following screen page appears The Managed Switch allows users to create 13 trunking groups Each group consists of 2 to 16 links ports...

Страница 102: ...3ad Static trunks have to be manually configured at both ends of the link In other words LACP configured ports can automatically negotiate a trunked link with LACP configured ports on other devices Yo...

Страница 103: ...ve LACP ports are capable of processing and sending LACP control frames This allows LACP compliant devices to negotiate the aggregated link so that the group may be changed dynamically as required In...

Страница 104: ...tic backup paths if an active link fails without the danger of bridge loops or the need for manually enabling disabling these backup links To provide faster spanning tree convergence after a topology...

Страница 105: ...st priority will be selected as the root bridge The root bridge is the central bridge in the spanning tree Hello Time Periodically a hello packet is sent out by the Root Bridge and the Designated Brid...

Страница 106: ...ed to an end device that doesn t support RSTP then set it as an edge port to ensure maximum performance This will tell the switch to immediately start forwarding traffic on the port and not bother try...

Страница 107: ...the following screen page appears Configure Port State Select State from the pull down menu of Select Setting This allows ports to be enabled or disabled When it is On RSTP is enabled Configure Port...

Страница 108: ...pull down menu of Select Setting You can choose Port Priority value between 0 and 240 The default value is 0 Configure Port Edge Select Edge from the pull down menu of Select Setting Set the port to e...

Страница 109: ...Initially ports are in the authorized state which means that ingress and egress traffic are not allowed to pass through except 802 1X protocol traffic When the authentication is successful with the a...

Страница 110: ...ber assigned to each RADIUS authentication server with which the client shares a secret Reauthentication Enabled Enable or disable Reauthentication Reauthentication Period Specify a period of authenti...

Страница 111: ...enticate from the 802 1X Configuration menu and then the following screen page appears This allows users to enable or disable port Reauthenticate When enabled the authentication message will be sent i...

Страница 112: ...on Static MAC Table Configuration from the MAC Address Table menu and then the following screen page appears NOTE The Managed Switch only supports switch based MAC security and does not support port b...

Страница 113: ...prove security by limiting traffic to specific domains A VLAN is a collection of end nodes grouped by logics instead of physical locations End nodes that frequently communicate with each other are ass...

Страница 114: ...ers If you select V from the pull down menu it denotes that the port selected belongs to the specified VLAN 4 4 7 2 802 1Q VLAN Concept Port Based VLAN is simple to implement and use but it cannot be...

Страница 115: ...hat will assign the VID to untagged traffic from that port The VLAN ID VID specifies the set of VLAN that a given port is allowed to receive and send labeled packets Both variables can be assigned to...

Страница 116: ...me will be forwarded Tagging Every port on an 802 1Q compliant switch can be configured as tagging or un tagging Ports with a tagging will put the VID number priority and other VLAN information into t...

Страница 117: ...G TCI P C VID Type LEN PAYLOAD FCS 802 1q Frame Preamble SFD D A S A Outer Tag or SP Tag Inner Tag or C Tag TCI P C VID Type LEN PAYLOAD FCS Double tagged Frame Double Tagged Frame As shown below in Q...

Страница 118: ...he selected port 3 Management VLAN To set up management VLAN and management ports 4 4 7 4 1 Configure VLAN The following screen page appears if you choose Configure VLAN Click New to add a new VLAN en...

Страница 119: ...the selected port Dot1q Tunnel Enable Q in Q function on the selected port Mode Port Behavior Access Receive untagged packets only Drop tagged packets Send untagged packets only Trunk Receive tagged...

Страница 120: ...is ensures that network traffic is prioritized according to specified criteria and receives preferential treatments QoS enables you to assign various grades of network service to different types of tr...

Страница 121: ...following screen page appears Configure Default Class Click the pull down menu to choose the class level Low Normal Medium or High The default class level of each port is Low Configure QCL A QCL numb...

Страница 122: ...e Priority Level normal low low normal medium Medium High high 802 1p Value 0 1 2 3 4 5 6 7 Configure Queuing Mode There are two different queuing modes Strict This indicates that services to the egre...

Страница 123: ...n select QoS Control List QCL Select a QCL number 1 26 QCE Type View only filed that shows QCL s current QCE type Type Value View only field that shows QCL s current type value Traffic Class View only...

Страница 124: ...cify VLAND ID value from 1 to 4094 TCP UDP Port When you choose UDP TCP Port as your preferred QCE Type you can further specify TCP UDP Port by selecting Specific or Range from the pull down menu Spec...

Страница 125: ...en page appears Configure Policer Rate This allows users to specify each port s inbound bandwidth The excess traffic will be dropped Specifying 0 is to disable this function Configure Shaper Rate This...

Страница 126: ...l down menu of Select Setting This allows you to enable or disable DSCP remarking for each port The default setting is disabled Configure 802 1p Remark Select 802 1p Remark from the pull down menu of...

Страница 127: ...Port Mirroring from the Switch Management menu and then the following screen page appears Source Port Choose Y enable or N disable from the pull down menu to enable or disable Target Port s mirroring...

Страница 128: ...e host s port from the table entry IGMP snooping can reduce multicast traffic from streaming and make other bandwidth intensive IP applications run more effectively A switch using IGMP snooping will o...

Страница 129: ...ult value 125 One Unit 1 second Query Response Interval This determines the maximum amount of time allowed before sending an IGMP response report Default value 100 One Unit 0 1 second Immediate Leave...

Страница 130: ...from the IGMP Snooping menu and then the following screen page with the ability information of IPMC Segment ID Name and IP Range appears ID View only field that shows the current registered ID number...

Страница 131: ...ent The IP range is from 224 0 1 0 238 255 255 255 4 4 11 4 IPMC Profile Select the option IPMC Profile from the IGMP Snooping menu and then the following screen page with the ability information of I...

Страница 132: ...4 11 5 IGMP Filtering Select the option IGMP Filtering from the IGMP Snooping menu and then the following screen page appears IGMP Filter This option may enable or disable the IGMP filter The default...

Страница 133: ...s IP Address View only field that shows the current source IP address of multicast stream VLAN View only field that shows the specified VLAN ID for current multicast stream Forwarding port View only f...

Страница 134: ...server MVR Configuration Guidelines and Limitations Guidelines Enable IGMP global setting Enable MVR global setting Create MVR VLAN and indicate the Source port and Receive port Create MVR Groups who...

Страница 135: ...m would belong to MVR VLAN 4 4 13 1 MVR Settings Select the option MVR Settings from the MVR Configuration menu and then the following screen page appears MVR To enable or disable MVR global settings...

Страница 136: ...m the MVR Configuration menu and then the following screen page appears VLAN View only field that shows the current MVR VLAN ID Group Range View only field that shows the MVR Group Range Click New to...

Страница 137: ...appropriate security configurations This section provides several security mechanisms to protect your network from unauthorized access to a network or redirect traffic for malicious purposes such as S...

Страница 138: ...ings from the Security Configuration menu and then the following screen page appears Relay Agent To enable or disable DHCP Option 82 Relay Agent Global setting When enabled Relay Agent Information opt...

Страница 139: ...en the Managed Switch will forward it B If a DHCP request is without Opt82 Agent information and then the Managed Switch will add Opt82 Agent information and forward it A DHCP request is from Port 2 t...

Страница 140: ...ion for further information 4 4 14 3 Filter Configuration Select the option Filter Configuration from the Security Configuration menu and then the following screen page appears DHCP Snooping Enable or...

Страница 141: ...iew only field that shows the current Mask address VLAN ID View only field that shows the VLAN ID Port View only field that shows the connection port number Click New to register a new Static IP addre...

Страница 142: ...our clients to the Managed Switch After you complete Step 1 2 connect your clients to the Managed Switch Your clients will send a DHCP Request out to DHCP Server soon after they receive a DHCP offer W...

Страница 143: ...h port Any broadcast packet exceeding the specified threshold will then be dropped see Anti broadcast Configuration Three options of frame traffic are provided to allow users to enable or disable the...

Страница 144: ...next polling interval 4 4 15 Access Control List Management ACLM Creating an access control list allows users to define who has the authority to access information or perform tasks on the network In t...

Страница 145: ...to MAC and VLAN parameters OK Click OK to save the port configurations Reflash Click Reflash to show the number of packets that conform to the default ACL rule Clear Click Clear to delete the number...

Страница 146: ...is shows the maximum number available for registering ACL rule The maximum default number is 110 Ingress Port Select a Policy ID or a port number as the ingress port Frame Type Select Any Ethernet Typ...

Страница 147: ...from the pull down menu for destination MAC filtering Select Any to filter any kind of traffic Select UC to filter unicast traffic Select MC to filter multicast traffic Select BC to filter broadcast...

Страница 148: ...traffic Select UC to filter unicast traffic Select MC to filter multicast traffic Select BC to filter broadcast traffic DMAC Value Specify a destination MAC address VLAN Parameters VLAN ID Filter Sele...

Страница 149: ...to filter any kind of traffic Select UC to filter unicast traffic Select MC to filter multicast traffic Select BC to filter broadcast traffic VLAN Parameters VLAN ID Filter Select Any or Specific for...

Страница 150: ...dicate that the THA Target Hardware Address field in the ARP RARP frame is not equal to source MAC address Select 1 to indicate that THA field in the ARP RARP frame is equal to source MAC address Sele...

Страница 151: ...or Other protocol from the pull down menu for IP Protocol filtering IP TTL Select 0 to indicate that the TTL filed in IPv4 header is 0 If the value in TTL field is not 0 use 1 to indicate that You ca...

Страница 152: ...any code If Specific is selected you need to further specify an ICMP code value ICMP Code Value Specify an ICMP code value UDP Parameters Source Port Filter Select Any to filter frames from any sourc...

Страница 153: ...CP header is one Select any to indicate either 1 or 0 TCP SYN Select 0 to indicate that the SYN value in TCP header is zero 1 to indicate the SYN value in TCP header is one Select any to indicate eith...

Страница 154: ...ation from the Switch Management menu and then the following screen page appears Port Tick the checkbox to enable LLDP Receiver Hold Time TTL Enter the amount of time for receiver hold time in seconds...

Страница 155: ...le or disable Loop Detection function Detection Interval Specify the time interval of performing Loop Detection The maximum time interval is 180 seconds Looped port unlock interval Specify the time in...

Страница 156: ...View each port s traffic condition of error packets e g RX TX frames of Multicast and Broadcast etc 5 LACP Monitor View the LACP port status and statistics 6 RSTP Monitor View RSTP VLAN Bridge Port St...

Страница 157: ...earning A port in this state prepares to participate in frame relay Frame relay is temporarily disabled in order to prevent temporary loops which may occur in a Bridged LAN during the lifetime of this...

Страница 158: ...received from each port Received Utilization The ratio of each port receiving traffic and current port s total bandwidth Bytes Sent The total bytes sent from current port Frames Sent The total frames...

Страница 159: ...ng screen page appears Select Choose the Packet Error Statistics from the pull down menu RX CRC Align Error CRC Align Error frames received RX Undersize Frames Undersize frames received RX Fragments F...

Страница 160: ...mes 64 Bytes 64 bytes frames received Frames 65 127 Bytes 65 127 bytes frames received Frames 128 255 Bytes 128 255 bytes frames received Frames 256 511 Bytes 256 511 bytes frames received Frames 512...

Страница 161: ...t sends LACPDUs to notify the remote system of its system LACP priority system MAC address port LACP priority port number and operational key Upon receipt of an LACPDU the remote system compares the r...

Страница 162: ...ets LACPDU transmitted or received from current port LACP Transmitted Packets transmitted from current port LACP Received Packets received form current port Illegal Received Illegal packets received f...

Страница 163: ...RSTP VLAN bridge Update Update the current status VLAN ID VID of the specific VLAN Bridge ID RSTP Bridge ID of the Managed Switch in a specific VLAN Max Age Max Age setting of the Managed Switch in a...

Страница 164: ...Number The number of the port VLAN ID The VID of the VLAN to which this port belongs Path Cost The Path Cost of the port Edge Port Yes is displayed if the port is the Edge port connecting to an end st...

Страница 165: ...ed The total transmitted STP packets from current port TCN Transmitted The total transmitted TCN Topology Change Notification packets from current port RSTP Received The total received RSTP packets fr...

Страница 166: ...mation Select 802 1X port status from the 802 1x Monitor menu and then the following screen page appears In this page you can find the following information about 802 1X ports Port The number of the p...

Страница 167: ...status of the Managed Switch select 802 1x Statistics from the 802 1x Monitor menu and then the following screen page shows up Select the port number from the pull down menu to view statistics 4 5 8 I...

Страница 168: ...queries to all hosts and routers 224 0 0 1 on the local subnet to find out whether active multicast group members exist on the subnet Upon receiving an IGMP general query the Managed Switch forwards...

Страница 169: ...ble VLAN ID VID of the specific VLAN Group The multicast IP address of IGMP querier Port The port s grouped in the specific multicast group 4 5 9 MAC Address Table MAC Address Table displays MAC addre...

Страница 170: ...SN and detection Temperature Voltage TX Bias etc Select SFP Port Info from the SFP Information menu and then the following screen page appears Port The number of the port Speed Data rate of the slide...

Страница 171: ...r The number of the SFP module slide in port Temperature C The Slide in SFP module operation temperature Voltage V The Slide in SFP module operation voltage TX Bias mA The Slide in SFP module operatio...

Страница 172: ...binding port is VID View only field that shows the VLAN ID of the client port CliIP Addr View only field that shows client IP address Cli MAC Addr View only field that shows client MAC address TimeLe...

Страница 173: ...the port description of the remote port System Capabilities View only field that shows the capability of the neighboring device Management Address View only field that shows the IP address of the neig...

Страница 174: ...lose when the system is shut down or rebooted 2 Update This allows users to update the latest firmware save current configuration or restore previous configuration to the Managed Switch 3 Load Factor...

Страница 175: ...configuration and update their Firmware on line Select Update from the System Utility menu and then the following screen page appears Protocol Select the preferred protocol either FTP or TFTP File Typ...

Страница 176: ...will set all the configurations of the Managed Switch back to the factory default settings including the IP and Gateway address Load Factory Setting is useful when network administrators would like to...

Страница 177: ...ed Backup Time Set up the time 24 hr clock to automatically backup once a day If the remote server fails or does not exist this function allows the system to retry around once per minute until the sys...

Страница 178: ...Switch Select Save Configuration from the Console main menu and then the following screen page appears Click OK to save the configuration 4 8 Reset System After any configuration change Reset System...

Страница 179: ...he directory raddb and modify these three files users clients conf and dictionary which are on the disc shipped with this product Please use any text editing software e g Notepad to carry out the foll...

Страница 180: ...visioning process are described below for your reference A Setup Procedures Follow the steps below to set up Auto Provisioning server modify dhcpd conf file and generate a copy of configuration file S...

Страница 181: ...n Server Update DHCP Client Linux Fedora 12 supports yum function by default First of all update DHCP client function by issuing yum install dhclient command Install DHCP Server Issue yum install dhcp...

Страница 182: ...ease note that each vendor has their own way to define auto provisioning Make sure to use the file provided by the vendor Enable and run DHCP service 1 Choose dhcpd 2 Enable DHCP service 3 Start runni...

Страница 183: ...183 Step 3 Modify dhcpd conf file Open dhcpd conf file in etc dhcp directory Double click dhcpd conf placed in etc dhcp directory to open it...

Страница 184: ...oes not request a specific IP lease time the server will assign a default lease time value Maximum lease time This is the maximum length of time that the server will lease for 2 Define subnet subnet m...

Страница 185: ...MD5 for firmware image 13 Specify the configuration filename 14 Specify the MD5 for configuration file NOTE 1 The text beginning with a pound sign will be ignored by the DHCP server For example in th...

Страница 186: ...186 Restart DHCP service...

Страница 187: ...be equal to DHCP when provisioning and it results in MD5 never matching and causing the device to reboot endless In order for your Managed Switch to retrieve the correct configuration image in TFTP FT...

Страница 188: ...ration 2 The device will compare the firmware and configuration MD5 code form of DHCP option every time when it communicates with DHCP server 3 If MD5 code is different the device will then upgrade th...

Страница 189: ...y The Managed Switch supports Port based VLAN implementation and IEEE 802 1Q standard tagging mechanism that enables the switch to differentiate frames based on a 12 bit VLAN ID VID field Besides the...

Страница 190: ...PCs or other workstations Switch 1 also connects to Port 1 in Managed Switch Client PCs in the Marketing Department can access the Server 1 and Public Server Switch 2 is used in the RD Department to...

Страница 191: ...port based RD OK 7 Return to Global Configuration mode and show currently configured port based VLAN membership SWH config if 2 22 23 26 exit SWH config show vlan port based Port Based VLAN Index VLAN...

Страница 192: ...VLAN Configure VLAN Click OK to apply the settings 4 Click New to add a new Port Based VLAN Switch Management VLAN Configuration Port Based VLAN Configure VLAN 5 Add Port 2 22 23 and 26 in a group and...

Страница 193: ...to member port 21 23 and 26 2 A untagged packet arrives at Port 2 Untagged packets received on the Managed Switch will be forwarded out untagged Therefore in this example the Managed Switch will look...

Страница 194: ...packets to the Managed Switch to be routed in Carrier Ethernet For this example IEEE 802 1Q tagging mechanism can be used to forward data from the Managed Switch to the destination PC Data VLAN Netwo...

Страница 195: ...n dot1q vlan access vlan 11 OK SWH config if 1 exit 8 Show currently configured VLAN tag settings SWH config show vlan interface IEEE 802 1q Tag VLAN Interface Port Mode PVID VLAN Member 1 access 11 1...

Страница 196: ...By default all ports are member ports of the Default_VLAN Before removing the Deafult_VLAN from the VLAN table make sure you have correct management VLAN and PVID configurations otherwise incorrect co...

Страница 197: ...t arrives at Port 1 port 1 s Port VLAN ID 11 will be added to the original port Because port 26 is set as a trunk port it will forward the packet with tag 11 out to the Carrier Ethernet 2 A tagged pac...

Страница 198: ...WH config vlan 10 3 Name VLAN 10 to Management SWH config vlan 10 name Management OK SWH config vlan 10 exit 4 Assign Port 26 to VLAN 10 SWH config interface 26 SWH config if 26 vlan dot1q vlan trunk...

Страница 199: ...gement VLAN 10 that includes only Port 26 as a member port Switch Management VLAN Configuration IEEE 802 1q Tag VLAN Configure VLAN 3 Check Management VLAN 10 settings Switch Management VLAN Configura...

Страница 200: ...ag VLAN Management VLAN Click OK to apply the settings 5 Check Management VLAN 10 settings again Switch Management VLAN Configuration IEEE 802 1q Tag VLAN Configure VLAN Now Port 26 and CPU are member...

Страница 201: ...nfiguration mode SWH enable Password SWH config SWH config 2 Create a VLAN 15 SWH config vlan dot1q vlan 15 OK 3 Name VLAN 15 to S VLAN SWH config vlan 15 name S VLAN OK SWH config vlan 15 exit 4 Assi...

Страница 202: ...EEE 802 1q Tag VLAN Interface Port Mode PVID VLAN Member 1 dot1q tunnel 15 1 15 2 access 1 1 3 access 1 1 4 access 1 1 5 access 1 1 6 access 1 1 7 access 1 1 8 access 1 1 9 access 1 1 10 access 1 1 11...

Страница 203: ...By default all ports are member ports of the Default_VLAN Before removing the Deafult_VLAN from the VLAN table make sure you have correct management VLAN and PVID configurations otherwise incorrect c...

Страница 204: ...original tag will be kept intact and then added an outer tag 15 by Port 1 which is set as a tunnel port When this packet is forwarded to Port 26 two tags will be forwarded out because Port 26 is set a...

Страница 205: ...0 Add and revise WEB management section Revise VLAN section on WEB GUI Draft new CISCO LIKE CLI section 1 07 B0 1 07 A2 1 07 92 2011 05 2011 04 2011 01 0 95 Modify LOGO image and product description...

Результаты поиска

Содержание FOS-3126-PLUS SERIES

Отзывы:

Похожие инструкции для FOS-3126-PLUS SERIES

Бренды по названию

Популярные бренды

CTS FOS-3126-PLUS SERIES, Руководство пользователя

Результаты поиска

Содержание FOS-3126-PLUS SERIES

Отзывы:

Похожие инструкции для FOS-3126-PLUS SERIES

Бренды по названию

Популярные бренды