Dahua PFS4218-16GT-190 Скачать руководство пользователя

Страница: 2 / 86

Cybersecurity Recommendations I

Cybersecurity Recommendations

Mandatory actions to be taken towards cybersecurity

1. Change Passwords and Use Strong Passwords:

The number one reason systems get “hacked” is due to having weak or default passwords. It is

recommended to change default passwords immediately and choose a strong password whenever

possible. A strong password should be made up of at least 8 characters and a combination of special

characters, numbers, and upper and lower case letters.

2. Update Firmware

As is standard procedure in the tech-industry, we recommend keeping NVR, DVR, and IP camera

firmware up-to-date to ensure the system is current with the latest security patches and fixes.

“Nice to have” recommendations to improve your network security

1. Enable HTTPS/SSL:

Set up an SSL Certificate to enable HTTPS. This will encrypt all communication between your devices

and recorder.

2. Forward Only Ports You Need:

● Only forward the HTTP and TCP ports that you need to use. Do not forward a huge range of numbers

to the device. Do not DMZ the device's IP address.
● You do not need to forward any ports for individual cameras if they are all connected to a recorder on

site; just the NVR is needed.

3. Limit Features of Guest Accounts:

If your system is set up for multiple users, ensure that each user only has rights to features and functions

they need to use to perform their job.

4. SNMP:

Disable SNMP if you are not using it. If you are using SNMP, you should do so only temporarily, for

tracing and testing purposes only.

5. Multicast:

Multicast is used to share video streams between two recorders. Currently there are no known issues

involving Multicast, but if you are not using this feature, deactivation can enhance your network security.

6. Check the Log:

If you suspect that someone has gained unauthorized access to your system, you can check the system

log. The system log will show you which IP addresses were used to login to your system and what was

accessed.

7. Physically Lock Down the Device:

Ideally, you want to prevent any unauthorized physical access to your system. The best way to achieve

this is to install the recorder in a lockbox, locking server rack, or in a room that is behind a lock and key.

Содержание PFS4218-16GT-190

Страница 1: ...16 24 Port PoE Gigabit Managed Switch Web Config Manual V1 0 0...

Страница 2: ...nge of numbers to the device Do not DMZ the device s IP address You do not need to forward any ports for individual cameras if they are all connected to a recorder on site just the NVR is needed 3 Lim...

Страница 3: ...if not avoided will result in death or serious injury Indicates a medium or low potential hazard which if not avoided could result in slight or moderate injury Indicates a potential risk which if not...

Страница 4: ...ailed information see the paper User s Manual CD ROM QR code or our official website If there is inconsistency between paper User s Manual and the electronic version the electronic version shall preva...

Страница 5: ...nstall the device in the well ventilated environment Do not block the air vent of the device Use the device at rated input and output voltage Do not dissemble the device without professional instructi...

Страница 6: ...1 System 9 4 1 2 Port 13 4 1 3 DHCP 14 4 1 4 Security 19 4 1 5 Aggregation 41 4 1 6 Spanning Tree 43 4 1 7 IGMP Snooping 49 4 1 8 LLDP 51 4 1 9 PoE 54 4 1 10 MAC Table 55 4 1 11 VLANs 56 4 1 12 Mirro...

Страница 7: ...Table of Contents VI 4 4 1 Restart Device 76 4 4 2 Factory Defaults 77 4 4 3 Software 77 4 4 4 Configuration 78...

Страница 8: ...Overview 1 1 Overview The 16 24 Port PoE Gigabit Managed Switch supports web access You can visit the switch on web browser and configure and manage the switch...

Страница 9: ...ddress is 192 168 1 110 by default and press Enter key on the keyboard See Figure 2 1 for login interface Web login interface Figure 2 1 Input user name and password The user name and the password are...

Страница 10: ...ort information Parameter Description Port Display all the ports This switch contains 16 24 ports Port quantity might vary depending on the model you purchased and the actual product shall govern Port...

Страница 11: ...General Settings 4 Local Figure 3 2 VLAN 3 3 Add the port to the VLAN and configure the VLAN By default the port belongs to VLAN1 Select General Vlan Step 1 VLAN interface is displayed See Figure 3 3...

Страница 12: ...ion parameter Parameter Description Port Display all the ports Mode Three modes Access Hybrid and Trunk Port VLAN Add the port to a VLAN By default the port belongs to VLAN 1 It ranges from 1 through...

Страница 13: ...See Figure 3 4 Aggregation Figure 3 4 Add the port member to the static group For example add port 1 and port 2 to Static Step 1 Group 1 See Figure 3 5 Up to 13 static groups can be set at the same ti...

Страница 14: ...6 VLAN interface Figure 3 6 Add the VLAN interface Step 2 1 Click Add Interface A new record is added See Figure 3 7 VLAN interface Figure 3 7 2 Set the parameters See Table 3 3 Table 3 3 VLAN interf...

Страница 15: ...tination address of the IP packet Mask Length Mask length with destination address is to identify the IP address of the destination host or the route After logical AND between destination address and...

Страница 16: ...or forwarding The switch supports layer 3 forwarding through VLAN interface VLAN interface is the virtual interface of layer 3 mode for layer 3 communication between the VLANs It is not the physical e...

Страница 17: ...t the parameters See Table 4 2 Table 4 2 IP routes Parameter Description Network It is the destination address of the IP packet Mask Length Mask length with destination address is to identify the IP a...

Страница 18: ...2 Disabled Set the IP address of the NTP server See Figure 4 6 Step 3 NTP configuration 2 Figure 4 6 Click Save Step 4 The switch can synchronize with the time of server 1 4 1 1 4 Time You can set the...

Страница 19: ...Address and System Log Level Select Advanced Configuration System Log Step 1 The System Log Configuration interface is displayed See Figure 4 8 System log configuration Figure 4 8 Set the parameters S...

Страница 20: ...erface is displayed See Figure 4 9 Port configuration Figure 4 9 Set the parameters See Table 4 4 Step 2 Table 4 4 Port parameter Parameter Description Port Display all the ports Link If the port link...

Страница 21: ...e manually before Generally in the following scenes DHCP Server is adopted to allocate IP address The network scale is large The workload is too heavy if manually configured and centralized management...

Страница 22: ...15 Add a new pool Figure 4 11 2 Input the pool name For example vlan2_test2 3 Click Save 4 Click the pool name link See Figure 4 12 DHCP Pool Configuration interface is displayed See Figure 4 13 Name...

Страница 23: ...P pool configuration Figure 4 13 5 Set the parameters in DHCP Pool Configuration interface See Figure 4 13 And see Table 4 5 for details about the parameters Table 4 5 DHCP pool configuration paramete...

Страница 24: ...gateway of the address pool DNS Server Configure the server IP address of the domain name system NTP Server Configure the NTP server IP address 6 Click Save Configure the mode Step 3 1 Click Mode tab...

Страница 25: ...server built up privately in the network the DCHP client might acquire wrong IP address and network configuration parameter and communication will fail To make sure that the DHCP client acquires the...

Страница 26: ...ooping configuration Figure 4 18 Select the Snooping Mode as Enabled to enable DHCP Snooping Step 2 Set the port as Trusted or Untrusted Step 3 Click Save Step 4 4 1 4 Security 4 1 4 1 Users You can a...

Страница 27: ...and input the password again to confirm it The Step 2 password can be set from 8 characters through 32 characters and contains at least two types from number letter and special characters excluding an...

Страница 28: ...And SSL TLS are needed for encryption HTTPS is the URI scheme and the syntax is similar to HTTP It is used for security HTTP data transmission Built in the web Netscape Navigator it provides authenti...

Страница 29: ...e managed device independent to manage the devices from different manufacturers SNMP network provides two element NMS and Agent NMS Network Management System is the manager in SNMP network and it prov...

Страница 30: ...ion Configurations Step 2 The SNMP Trap Configuration interface is displayed See Figure 4 27 SNMP Trap configuration Figure 4 27 Set the parameters See Table 4 6 Step 3 Table 4 6 NMP Trap configuratio...

Страница 31: ...name Only version SNMP v3 supports the function Click Save Step 4 Communities Add the community and set the authority for NMS accessing Agent using the community Select Advanced Configuration Security...

Страница 32: ...Password Private Protocol and the Private Password If you select NoAuth NoPriv you do not need to set the protocol and password If you select Auth NoPriv you need to set the Authentication Protocol a...

Страница 33: ...e group name Click Save Step 4 Views After SNMP views configured you can specify the SNMP views for the SNMP group to limit the MIB target that the SNMP group can visit Select Advanced Configuration S...

Страница 34: ...old for example the port rate reached the specific value or the ratio of broadcasting packet reaches the specific value it can automatically record the log and send Trap packet to the management devic...

Страница 35: ...38 History Figure 4 38 Click Add New Entry and set the ID and the data source Step 2 Click Save Step 3 Alarm RMON alarm management can monitor the specific alarm variable for example the packet quanti...

Страница 36: ...e number and the processing mode The events defined in event group are applied in the alarm configuration When the monitored target reaches the alarm condition alarm event is triggered There are sever...

Страница 37: ...a series of matching conditions to classify the packets The conditions can be the source address destination address and the port number of the packet When the device port receives the packet it can...

Страница 38: ...Advanced Settings 31 Ports Figure 4 42 Set the parameters including Policy ID Action Rate Limiter ID and so on Step 2 Click Save Step 3 Rate Limiters...

Страница 39: ...limiters Figure 4 43 Set the parameters including Rate and Unit Step 2 Click Save Step 3 Access Control List Select Advanced Configuration Security ACL Access Control List Step 1 The Access Control Li...

Страница 40: ...ction the packet forwarded in the port can be filtered and controlled and the illegal packet cannot pass through the port The illicit use of network resource is limited and security performance of the...

Страница 41: ...See Table 4 11 Step 3 Table 4 11 IP source guard parameter Parameter Description Translate dynamic to static Click the button to switch dynamic static The premise is that the IGMP Snooping is enabled...

Страница 42: ...he IP address into Ethernet MAC address the physical address In LAN when the host or other network device needs to forward data to another host or other network device the IP address of the target hos...

Страница 43: ...n Set the parameters See Table 4 12 Step 3 Table 4 12 ARP inspection parameter Parameter Description Translate dynamic to static Click the button to switch dynamic static Port Mode Configuration Mode...

Страница 44: ...static table is manually configured and maintained It will not ageing and it will not be covered by dynamic ARP table Static table can enhance the security performance of communicaiton Static table ca...

Страница 45: ...maintained by ARP through ARP packet It can be aging and it can be covered by new ARP packet or static ARP table When reaching ageing and the port is down the corresponding dynamic table will be delet...

Страница 46: ...authentication Enabled Reauthentication Period Step 3 EAPOL Timeout Aging Period and so on in System Configuration Set the parameters including Admin State Port State and so on in Port Configuration S...

Страница 47: ...ew Server in Server Configuration Step 3 A new record is added See Figure 4 57 Server configuration Figure 4 57 Set the parameters including Hostname Timeout Retransmit and so on Step 4 Click Save Ste...

Страница 48: ...Mode Step 3 Click Save Step 4 4 1 5 Aggregation Aggregation is to form the multiple physical ports of the switch into the logical port The multiple links in the same group can be regarded as a logical...

Страница 49: ...n MAC address Destination MAC Address the aggregation load balancing algorithm based on destination MAC address IP Address the aggregation load balancing algorithm based on source IPv4 address and des...

Страница 50: ...the features of STP RSTP and MSTP and the relationship between them progressively in this section 4 1 6 1 Bridge Settings There must be the root in tree model network and the concept of Root Bridge is...

Страница 51: ...priority The smaller the value is the higher the priority level is And the value of bridge priority should be the multiple of 4096 Hello Time Set the period for sending packet Forward Delay Set the d...

Страница 52: ...e independent Every spanning tree can be regarded as an MSTI Multiple Spanning Tree Instance VLAN mapping table is one of the MST domain properties for describing the mapping relationship between VLAN...

Страница 53: ...multiple spanning tree instances 7 instances totally VLANs Mapped Input the VLAN number For example VLAN 1 Click Save Step 3 4 1 6 3 MSTI Priorities Set the MSTI priorities By default it is 32768 Sel...

Страница 54: ...able If you select Spedific you can set the path cost value manually Priority Set the priority By default it is 128 Ad min Edge Select from the drop down list Non Edge and Edge are selectable Auto Edg...

Страница 55: ...MSTI Ports Step 1 The MST1 MSTI Port Configuration interface is displayed See Figure 4 65 MST1 MSTI port configuration 1 Figure 4 65 Select MSTI from the drop down list 7 types are selectable For exa...

Страница 56: ...t and the Priority in MSTI Normal Ports Configuration Step 5 Click Save Step 6 4 1 7 IGMP Snooping IGMP Snooping Internet Group Management Protocol Snooping is the multicast constraint mechanism runni...

Страница 57: ...Configuration Select Advanced Configuration IGMP Snooping Basic Configuration Step 1 The IGMP Snooping Configuration is displayed See Figure 4 67 IGMP snooping configuration Figure 4 67 Set the globa...

Страница 58: ...en the switch receives the IGMP specific group query packet for the multicast the switch will not forward it to that port You can enable the port fast leave to reduce bandwidth and resource cost Throt...

Страница 59: ...twork management system to quiry and judge the link communication status LLDP Select Advanced Configuration LLDP Step 1 The LLDP Configuration interface is displayed See Figure 4 70 LLDP configuration...

Страница 60: ...t Step 2 Set the Transmit TLVs and the Device Type in LLDP MED Interface Configuration Step 3 Set the location information in Coordinates Location Step 4 Set the parameters including Country code Stat...

Страница 61: ...lize power supply and facilitate backup The network terminal does not need the external power source anymore and one network cable is enough It conforms to the standards of IEEE 802 3af and IEEE 802 3...

Страница 62: ...ded through the port in the table directly And if the destination MAC address of the packet is not contained in the MAC address table the device adopts broadcasting to forward the packet to all the po...

Страница 63: ...2 Set the parameters including VLAN ID MAC address and port members Click Save Step 5 4 1 11 VLANs Select Advanced Configuration VLANs The Port VLAN Configuration interface is displayed See Figure 4...

Страница 64: ...copied to a specific port mirroring destination port The mirroring destination port connects to a PC that data package analyzing software is installed and it can analyze the received data package for...

Страница 65: ...Serial Config interface is displayed See Figure 4 78 Serial Config Figure 4 78 Monitor 4 2 4 2 1 System 4 2 1 1 Information You can view the system information of the device including system hardware...

Страница 66: ...status including IP interfaces IP routes and neighbour cache Select Advanced Monitor System IP Status The IP Status interface is displayed See Figure 4 81 IP Status Figure 4 81 4 2 1 4 Log You can vie...

Страница 67: ...re 4 83 Detailed system log information Figure 4 83 4 2 2 Ports 4 2 2 1 State You can view the port information including link speed duplex media type and VLAN If the port link is displayed as green i...

Страница 68: ...r Fiber Copper is the RJ 45 port and Fiber is the fiber port VLAN Display the port VLAN By default it is VLAN 1 4 2 2 2 Traffic Overview You can view the packers bytes errors drops and filerd informat...

Страница 69: ...onitor Ports QCL Status The QoS Control List Status interface is displayed See Figure 4 87 QoS control list status Figure 4 87 4 2 2 5 Detailed Statistics You can view the detailed statistics of the p...

Страница 70: ...tatistics You can view the DHCP server statistics including database counters binding counters DHCP packet received counters and DHCP packet sent counters Select Advanced Monitor DHCP Server The DHCP...

Страница 71: ...face is displayed See Figure 4 91 Declined IP Figure 4 91 4 2 3 2 Snooping Table You can view the dynamic DHCP snooping table Select Advanced Monitor DHCP Snooping Table The Dynamic DHCP Snooping Tabl...

Страница 72: ...You can view the port security switch status Select Advanced Monitor Security Port Security The Port Security Switch Status interface is displayed See Figure 4 94 Port security switch status Figure 4...

Страница 73: ...er switch status Select Advanced Monitor Security NAS The Network Access Server Switch Status interface is displayed See Figure 4 96 Network access server switch status Figure 4 96 Port You can view t...

Страница 74: ...s displayed See Figure 4 99 Dynamic ARP inspection table Figure 4 99 4 2 4 5 IP Source Guard You can view the dynamic IP source guard table Select Advanced Monitor Security IP Source Guard The Dynamic...

Страница 75: ...ect Advanced Monitor Security RMON The RMON Statistics Status Overview interface is displayed See Figure 4 102 RMON statistics status overview Figure 4 102 History You can view the RMON history Select...

Страница 76: ...4 Event You can view the RMON event information Select Advanced Monitor Security RMON Event The RMON Event Overview interface is displayed See Figure 4 105 RMON event overview Figure 4 105 4 2 4 8 Loo...

Страница 77: ...ee 4 2 6 1 Bridge Status You can view the STP bridge status including MSTI bridge ID root topology flag and topology change last Select Advanced Monitor Spanning Tree Bridge Status The STP Bridge inte...

Страница 78: ...2 7 IGMP Snooping 4 2 7 1 Status You can view the IGMP Snooping status Select Advanced Monitor IGMP Snooping Status The IGMP Snooping Status interface is displayed See Figure 4 111 IGMP Snooping statu...

Страница 79: ...2 8 1 Neighbors You can view the LLDP neighbor information Select Advanced Monitor LLDP Neighbors The LLDP Neighbor Information interface is displayed See Figure 4 114 LLDP neighbor information Figure...

Страница 80: ...iew the LLDP neighbors EEE information Select Advanced Monitor LLDP EEE The LLDP Neighbors EEE Information interface is displayed See Figure 4 117 LLDP neighbors EEE information Figure 4 117 4 2 8 5 P...

Страница 81: ...r PoE The Power Over Ethernet Status interface is displayed See Figure 4 119 PoE status Figure 4 119 4 2 10 MAC Table You can view the MAC table of the switch Select Advanced Monitor MAC Table The MAC...

Страница 82: ...s Figure 4 121 4 2 11 2 Ports You can view the VLAN port status including port type ingress filtering frame type and so on Select Advanced Monitor VLANs Ports The VLAN Port Status interface is display...

Страница 83: ...elect Advanced Diagnostics Ping6 Step 1 The ICMPv6 Ping interface is displayed See Figure 4 124 ICMPv6 Ping Figure 4 124 Input the IPv6 address and click Start Step 2 Maintenance 4 4 4 4 1 Restart Dev...

Страница 84: ...load You can upgrade the software of the switch Select Advanced Maintenance Software Upload Step 1 The Software Upload interface is displayed See Figure 4 127 Software upload Figure 4 127 Click Browse...

Страница 85: ...2 4 4 4 2 Download You can download the configuration file Select Advanced Maintenance Configuration Download Step 1 The Download Configuration interface is displayed See Figure 4 130 Download configu...

Страница 86: ...Activate Step 1 The Activate Configuration interface is displayed See Figure 4 132 Activate configuration Figure 4 132 Select the File Name default config and startup config are selectable Step 2 Cli...

Результаты поиска

Содержание PFS4218-16GT-190

Отзывы:

Похожие инструкции для PFS4218-16GT-190

Бренды по названию

Популярные бренды

Dahua PFS4218-16GT-190, Руководство по настройке веб

Результаты поиска

Содержание PFS4218-16GT-190

Отзывы:

Похожие инструкции для PFS4218-16GT-190

Бренды по названию

Популярные бренды