Draytek VigorSwitch P2280 Скачать руководство пользователя страница 138

Страница: 138 / 209

VigorSwitch P2280 User’s Guide

130

Any – All packets will be filtered.
Or, enter the IP address to filter the packets coming from that

address.

Ethertype

Specify ethernet type for filtering.
Select Any.
Or, enter the value with the format of “0x600 ~ 0xFFF”.

VLAN

Specify VLAN profile for filtering.
Select Any.
Or, enter a VLAN number. The packets coming from the VLAN

specified here will be filtered by Vigor device.

802.1p

Specify the 802.1p priority value for filtering. Select Any, or a
number from 0 to 7.

Add

Click it to create a new ACE rule.

Modify

- click it to modify the settings for the selected entry.

- click it to remove the selected entry.

This page shows ACE based on IPv4 address. You may choose ACL, permit, and deny particular

packet or frame, even shutdown the port.

You may provide filtering/matching criteria for one or more of following packet characteristic

(such as Protocol over the IP layer, Source/Destination IPv4 address, Type of Service,
Source/Destination port number, TCP flags, ICMP Type, if chosen protocol contains ICMP), for

this ACE to identify the packet.

Available settings are explained as follows:

Item Description

Содержание VigorSwitch P2280

Страница 1: ......

Страница 2: ...2280 User s Guide ii VigorSwitch P2280 24 Ports 4 Combo UTP SFP Ports PoE L2 Managed Gigabit Switch User s Guide Version 1 0 Firmware Version V2 2 1 For future update please visit DrayTek web site Date March 6 2018 ...

Страница 3: ...lease keep your purchase receipt in a safe place as it serves as proof of date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or materials we will at our discretion repair or replace the defective products or components without charge for either parts or labor to whatever extent we deem necessary tore s...

Страница 4: ...ssing Web Page of VigorSwitch 14 I 4 Dashboard 15 I 5 Status 16 I 5 1 Port Bandwidth Utilization 16 I 5 2 LLDP Statistics 16 I 5 3 GVRP Statistics 17 I 5 4 MLD Snooping Statistics 17 Part II Switch LAN 19 II 1 General Setup 20 II 1 1 IP Address 20 II 1 2 IPv6 Address 21 II 1 3 Management VLAN 22 II 2 Port Setting 23 II 3 Mirror 25 II 4 Link Aggregation 26 II 4 1 LAG Setting 26 II 4 2 LAG Managemen...

Страница 5: ... IGMP Router Table 55 II 7 2 6 Forward All 56 II 7 2 7 Throttling 57 II 7 2 8 Filtering Profile 58 II 7 2 9 Filtering Binding 59 II 7 3 MVR 61 II 7 3 1 Property 61 II 7 3 2 Port Setting 62 II 7 3 3 Group Address 63 II 7 4 MLD Snooping 64 II 7 4 1 MLD Setting 64 II 7 4 2 MLD Static Group 66 II 7 4 3 MLD Group Table 68 II 7 4 4 MLD Router Table 69 II 7 4 5 Forward All 70 II 7 4 6 Throttling 71 II 7 ...

Страница 6: ...ngs 100 III 5 3 MAC Based Local Account 102 III 5 4 Authenticated Hosts 103 III 6 Port Security 104 III 7 Protected Ports 106 III 8 Storm Control 107 III 8 1 Properties 107 III 1 2 Port Setting 108 III 9 DoS 109 III 9 1 Properties 109 III 9 2 DoS Port Setting 111 III 10 Dynamic ARP Inspection 112 III 10 1 Properties 112 III 10 1 1 Global Property Settings 112 III 10 1 2 Per Port Property Settings ...

Страница 7: ...QoS General Setting 136 V 1 1 2 Trust Ports 137 V 1 2 Port Settings 138 V 1 3 Queue Settings 139 V 1 4 CoS Mapping 140 V 1 5 DSCP Mapping 141 V 1 6 IP Precedence Mapping 142 V 2 Bandwidth 143 V 2 1 Ingress Rate Limit 143 V 2 2 Egress Shaping Rate 144 V 2 3 Egress Shaping Per Queue 145 Part VI PoE Configuration 147 VI 1 Properties 148 VI 2 Status 149 VI 3 Device Check 150 VI 4 Schedule 151 VI 4 1 S...

Страница 8: ... Manager 172 VII 4 Time and Date 173 VII 4 1 System Time Zone 173 VII 4 2 Time 174 VII 5 Backup Manager 175 VII 6 Upgrade Manager 176 VII 7 Firmware Information 177 VII 8 Account Manager 178 VII 9 Factory Default 180 VII 10 Reboot Switch 181 Part VIII Diagnostics 183 VIII 1 Cable Diagnostics 184 VIII 2 Ping Test 185 VIII 3 SysLog 186 VIII 3 1 SysLog Explorer 186 VIII 3 2 SysLog Settings 187 VIII 3...

Страница 9: ...VigorSwitch P2280 User s Guide 1 P Pa ar rt t I I I In nt tr ro od du uc ct ti io on n ...

Страница 10: ... power with auto detect the client idle and cable length to provide different power 1000Mbps SFP Fiber port fully complies with all IEEE 802 3z and 1000Base SX LX standards I I 1 1 1 1 K Ke ey y F Fe ea at tu ur re es s Below shows key features of this device Q Qo oS S The switch offers powerful QoS function This function supports 802 1p VLAN tag priority and DSCP on Layer 3 of network framework V...

Страница 11: ...y Hardware reset button for resetting configuration to factory default by pressing over 5 seconds M Ma an na ag ge em me en nt t Supports per port traffic monitoring counters Supports a snapshot of the system Information when you login Supports port mirror function Supports the static trunk function Supports 802 1Q VLAN Supports user management and limits three users to login Maximal packet length...

Страница 12: ...on the front panel contains an ACT Power LED and ports working status of the switch L LE ED D E Ex xp pl la an na at ti io on n LED Color Explanation On Green Connected over the PoE maximum power budget PoE Max Off Connected within the PoE maximum power budget On Green The switch finishes system booting and the system is ready Blinking Green The switch is powered on and starts system booting SYS O...

Страница 13: ... connected with 10 100Mpps Blinking The system is sending or receiving data through the port SFP LNK ACT Off The port is disconnected or the link is failed C Co on nn ne ec ct to or r E Ex xp pl la an na at ti io on n Interface Description RJ 45 LNK ACT Port 1 24 PoE for Port 1 24 Port 1 to Port 24 can be used for Ethernet connection and PoE connection depending on the device connected SFP LNK ACT...

Страница 14: ... t th he e s sa am me e l lo oc ca al l a ar re ea a n ne et tw wo or rk k Every port can access each other The switch image is sample only If VLAN is enabled and configured each node in the network that can communicate each other directly is bounded in the same VLAN area Here VLAN area is defined by what VLAN you are using The switch supports both port based VLAN and tag based VLAN They are diffe...

Страница 15: ... 2 VLAN1 members could not access VLAN2 VLAN3 and VLAN4 members VLAN2 members could not access VLAN1 and VLAN3 members but they could access VLAN4 members VLAN3 members could not access VLAN1 VLAN2 and VLAN4 VLAN4 members could not access VLAN1 and VLAN3 members but they could access VLAN2 members C Ca as se e 4 4 T Th he e s sa am me e V VL LA AN N m me em mb be er rs s c ca an n b be e a at t d ...

Страница 16: ... you are going to install series of networking devices Procedures to Rack mount the switch 1 Disconnect all the cables from the switch before continuing 2 Place the unit the right way up on a hard flat surface with the front facing you 3 Locate a mounting bracket over the mounting holes on one side of the unit 4 Insert the screws and fully tighten with a suitable screwdriver 5 Repeat the two previ...

Страница 17: ...Guide 9 C Ca as se e 8 8 P Pe ee er r t to o p pe ee er r a ap pp pl li ic ca at ti io on n i is s u us se ed d i in n t tw wo o r re em mo ot te e o of ff fi ic ce es s C Ca as se e 9 9 O Of ff fi ic ce e n ne et tw wo or rk k ...

Страница 18: ... configure the switch through the following procedures Configuring the Management Agent of VigorSwitch P2280 through the Ethernet Port There are several ways to configure and monitor the switch through Ethernet port includes Web UI and SNMP I I 2 2 4 4 M Ma an na ag gi in ng g V Vi ig go or rS Sw wi it tc ch h P P2 22 28 80 0 t th hr ro ou ug gh h E Et th he er rn ne et t P Po or rt t Before start...

Страница 19: ...ddress we used is version 4 known as IPv4 Network identifier Host identifier 32 bits With the classful addressing it divides IP address into three classes class A class B and class C The rest of IP addresses are for multicast and broadcast The bit length of the network prefix is the same as that of the subnet mask and is denoted as IP address X for example 192 168 1 0 24 Each class has its address...

Страница 20: ...s more efficiently and ease to manage IP network For a class B network 128 1 2 3 it may have a subnet mask 255 255 0 0 in default in which the first two bytes is with all 1s This means more than 60 thousands of nodes in flat IP address will be at the same network It s too large to manage practically Now if we divide it into smaller network by extending network prefix from 16 bits to say 24 bits th...

Страница 21: ...So it owns a network IP address which may looks like 168 1 2 0 With the subnet mask a bigger network can be cut into small pieces of network If we want to have more than two independent networks in a worknet a partition to the network must be performed In this case subnet mask must be applied For different network applications the subnet mask may look like 255 255 255 240 This means it is a small ...

Страница 22: ... h 1 Open any browser e g Firefox and type 192 168 1 224 as URL 2 Please type admin admin as the Username Password and click Login 3 Now the Main Screen will appear Info The DHCP Setting is enabled in default Therefore if a DHCP server presented on network connected to VigorSwitch checking before accessing VigorSwitch is essential ...

Страница 23: ... User s Guide 15 I I 4 4 D Da as sh hb bo oa ar rd d Click Dashboard from the main menu on the left side of the main page A web page with default selections will be displayed on the screen Refer to the following figure ...

Страница 24: ... page offers the traffic statistics inlcuding data information and data of interframe gap for each port GE1 to GE28 In which data of interframe gap can be displayed or hidden by choose Enable Disable for IFG I I 5 5 2 2 L LL LD DP P S St ta at ti is st ti ic cs s This page offers the statistics of LLDP packets in out and error of each port GE1 to GE28 ...

Страница 25: ...gistration Protocol is used automatically for exchanging information for VLAN membership between switches This page counts the GVRP information received on each port I I 5 5 4 4 M ML LD D S Sn no oo op pi in ng g S St ta at ti is st ti ic cs s This page counts the MLD messages received or transmitted on the network ...

Страница 26: ...VigorSwitch P2280 User s Guide 18 This page is left blank ...

Страница 27: ...VigorSwitch P2280 User s Guide 19 P Pa ar rt t I II I S Sw wi it tc ch h L LA AN N ...

Страница 28: ...s The factory default subnet mask is 255 255 255 0 Info If VigorSwitch has connected to Vigor router it will use the IP address obtained from the DHCP server on Vigor router Thus the user must type the assigned IP as URL for accessing into the web user interface of VigorSwitch If not 192 168 1 224 shall be the default IP Available settings are explained as follows Item Description Mode Select the ...

Страница 29: ...s to the switch I II I 1 1 2 2 I IP Pv v6 6 A Ad dd dr re es ss s Use the IPv6 Address screen to configure the switch IPv6 address and the default gateway device The gateway field specifies the IPv6 address of the gateway next hop for outgoing traffic Available settings are explained as follows Item Description Auto Configuration Enable Check it to let switch automatically configure IPv6 address I...

Страница 30: ...Pv6 server on your network for assigning IPv6 Address instead of using Router Advertisement Apply Apply the settings to the switch I II I 1 1 3 3 M Ma an na ag ge em me en nt t V VL LA AN N This page allows the network administrator to change the VLAN ID of management access Management access protocols such as http https SNMP and etc are only accessible from the VLAN specified as management VLAN A...

Страница 31: ... 100M ability 10M Force speed with 10M ability 100M Force speed with 100M ability 1000M Force speed with 1000M ability Selecting Auto auto negotiation allows one port to negotiate with a peer port automatically to obtain the connection speed and duplex mode that both ends support When auto negotiation is turned on a port on the switch negotiates with the peer automatically to determine the connect...

Страница 32: ...e switch uses IEEE802 3x flow control in full duplex mode and backpressure flow control in half duplex mode IEEE802 3x flow control is used in full duplex mode to send a pause signal to the sending port causing it to temporarily stop sending signals when the receiving port memory buffers fill Back Pressure flow control is typically used in half duplex mode to send a collision signal to the sending...

Страница 33: ...n ID Select the session ID profile 1 to 4 of mirror operation you wish to configure Monitor Session State Enable Enable specified mirror session Disable Disable specified mirror session Destination Port Specify the port where you wish to observe the mirrored packets Allow Operation as Normal Port Enable The destination port is able to function as a port connecting to network communicating with oth...

Страница 34: ...s to configure Load Balance Algorithm for Link Aggregation Available settings are explained as follows Item Description Load Balance Algorithm Select your Load balance algorithm MAC address Aggregated group will balance the traffic based on different MAC addresses Therefore the packets from different MAC addresses will be sent to different links IP Mac Address Aggregated group will balance the tra...

Страница 35: ...ay the type of the LAG Link Status Display LAG port link status Active Member Display active member ports of the LAG Standby Member Display inactive or candidate member ports of the LAG Modify It is used to edit the name type and port number for each link aggregation profile Name Enter a string as LAG name Type Use the drop down menu to specify the type for LAG Static The static aggregated port se...

Страница 36: ...100M Auto speed with 10 100M ability 10M Force speed with 10M ability 100M Force speed with 100M ability 1000M Force speed with 1000M ability Selecting Auto auto negotiation allows one port to negotiate with a peer port automatically to obtain the connection speed and duplex mode that both ends support When auto negotiation is turned on a port on the switch negotiates with the peer automatically t...

Страница 37: ... signal to the sending port mimicking a state of packet collision causing the sending port to temporarily stop sending signals and resend later Enable Click it to enable such function Disable Click it to disable such function Apply Apply the settings to the switch Modify It is used to edit status speed and flow control for the LAG I II I 4 4 4 4 L LA AC CP P S Se et tt ti in ng g This page allows ...

Страница 38: ...e port Timeout The timeout option decides how local switch of LAG connection determines connection to be lost Switch would also notify the remote switch about this setting value so that remote switch can send LACP PDU in correct timing Long LACP PDU will be sent every 30 seconds If port member is not seen over 90 seconds it will cause port member timeout Short LACP PDU will be sent per second If p...

Страница 39: ...ad of physically relocating devices or connections I II I 5 5 1 1 C Cr re ea at te e V VL LA AN N This page allows a user to add edit or delete VLAN settings Available settings are explained as follows Item Description Action Select which action to perform add VLANs or delete VLANs Add Create a new VLAN profile Delete Delete an existed VLAN profile VLAN ID Enter the number as VLAN ID to be created...

Страница 40: ...II I 5 5 2 2 I In nt te er rf fa ac ce e S Se et tt ti in ng gs s This page allows a user to configure interface setting related to VLAN Available settings are explained as follows Item Description Port Select Select LAN ports to configure VLAN Settings Interface VLAN Mode Select the VLAN mode of the interface Hybrid Support all functions as defined in IEEE 802 1Q specification Access Accept only ...

Страница 41: ...Hybrid mode All Accept frames regardless it s tagged with 802 1q or not Tag Only Accept frames only with 802 1q tagged Untag Only Accept frames untagged Ingress Filtering Enable the ingress filtering to filter out any packets not belong to any VLAN members of this port It is enabled automatically while operating in Access and Trunk mode Enabled Click it to enable the function Disabled Click it to ...

Страница 42: ...bal and per interface setting of voice VLAN Available settings are explained as follows Item Description Voice VLAN State Enabled Click it to enable Voice VLAN Disabled Click it to disable Voice VLAN Voice VLAN Id Check the box of Enable first and then select Voice VLAN ID profile Remark CoS 802 1p Click Enabled Disabled to enable or disable 1p remarking If enabled qualified packets will be remark...

Страница 43: ...es Default has 8 pre defined OUI MAC Available settings are explained as follows Item Description OUI Address Type OUI address Description Enter a description of the specified MAC address to the voice VLAN OUI table Add Click it to create a new voice OUI based on the settings configured above Modify Modify OUI setting for voice VLAN Click it to remove the selected OUI entry ...

Страница 44: ...S 802 1p is enabled in Voice VLAN Properties settings in this page shall be applied Otherwise this option will not take effect All Once this port is identified as Voice VLAN by frame with matched OUI remark CoS 802 1p shall tag for all ingress frame regardless of remarked frame matched with pre configured OUI or not Src Source Once this port is identified as Voice VLAN by frame with matched OUI re...

Страница 45: ...he MAC address you wish to be classified in this group Mask The mask is the length of matching prefix you wish to have on MAC address For example configure mask in 10 It means a host with beginning of the 10 digit of MAC address will be checked and classified into this group if matched Add Click it to create a new MAC group profile based on the settings configured above Edit Click the icon under E...

Страница 46: ...group Group ID Choose the group ID you have created in earlier section which specified a group of host by MAC address and its mask VLAN Enter the VLAN ID that you wish to be bound with Add Click it to create a new MAC group binding profile based on the settings configured above Edit Click the icon under Edit for one entry to modify settings for selected port profile ...

Страница 47: ...lue Available settings are explained as follows Item Description Group ID It is a number for identification while bounding with VLAN Port Frame Type Use the drop down list to specify the frame type which you would like to filter Ethernet_II Packet will be mapped based on Ethernet version 2 IEEE802 3_LLC_Other Packet will be mapped based on 802 3 packet with LLC other header RFC_1042 Packet will be...

Страница 48: ... as follows Item Description Ports Use the drop down list to select one or more ports for applying protocol based VLAN Note that protocol based VLAN can only be applied to the ports of which Interface VLAN Mode at VLAN Management Interface Settings is set to Hybrid Group ID Select the protocol group defined in Protocol Group setup VLAN Use drop down list to choose a value as VLAN number Add Add th...

Страница 49: ...orSwitch P2280 User s Guide 41 Interface VLAN Mode for the GE ports first Otherwise the following error message will appear Edit Modify setting for the selected group Click it to remove the selected group ...

Страница 50: ...Available settings are explained as follows Item Description State Enabled Click it to enable the port settings for such VLAN Disabled Click it to disable the port settings for such VLAN VLAN ID Choose a VLAN profile created in Switch LAN VLAN Management Create Vlan as Surveillance VLAN CoS 802 1p Remarking Specify the CoS 802 1p number you wish ingress packets be tagged with so that QoS can prior...

Страница 51: ...tagged member manually QoS Policy Select port QoS Policy mode Video Packet QoS attributes are applied to packets with OUI in the source MAC address All QoS attributes are applied to packets that are classified to the Surveillance VLAN OK Apply the settings to the switch Cancel Abandon the changes and return to previous page I II I 5 5 6 6 1 1 S Su ur rv ve ei il ll la an nc ce e O OU UI I Filterin...

Страница 52: ...dress of monitored IP camera It can t be edited in edit dialog Description Enter a description of the specified MAC address to the surveillance VLAN OUI table Add Click it to create a new voice OUI based on the settings configured above Edit Modify OUI setting for surveillance VLAN Click it to remove the selected OUI entry ...

Страница 53: ... eliminate unnecessary network traffic and prevent any attempt to transmit information to unregistered users Available settings are explained as follows Item Description State Enabled Click it to enable the port settings for such VLAN Disabled Click it to disable the port settings for such VLAN Timeout Display the current time status for GVRP Apply Apply the settings to the switch Edit Click it to...

Страница 54: ... can pass through the selected GE port Fixed The selected GE port only sends static VLAN information to neighboring device and allows static VLAN packet to pass through Forbidden The selected GE port only allows default VLAN packet to pass through I II I 5 5 7 7 2 2 M Me em mb be er rs sh hi ip p This page display information about membership for GVRP ...

Страница 55: ...ient Ethernet function Available settings are explained as follows Item Description Port Select one or multiple ports to configure GE1 to GE28 Enable Enable Click it to enable the EEE function Disable Click it to disable the EEE function Apply Apply the settings to the switch Modify Click it to modify port setting status ...

Страница 56: ...twork administrator to choose actions for processing the unknown muliticast packets and for handling known packets with MAC address IP address and VLAN ID Available settings are explained as follows Item Description Unknown Multicast Action Select an action for switch to handle with unknown multicast packet Drop Drop the unknown multicast data Flood Flood the unknown multicast data Forward to Rout...

Страница 57: ...VigorSwitch P2280 User s Guide 49 Dst IP VID Forward using destination multicast IPv6 address and VLAN ID Apply Apply the settings to the switch ...

Страница 58: ...e switch maintains a map of which links need which IP multicast streams Multicasts may be filtered from the links which do not need them and thus controls which ports receive specific multicast traffic I II I 7 7 2 2 1 1 I IG GM MP P S Se et tt ti in ng g This page allows the network administrator to enable disable IGMP function select snooping version and enable disable snooping report suppressio...

Страница 59: ... used by IGMP Apply Apply the settings to the switch Modify Click it to modify IGMP settings for selected profile However if IGMP Snooping State is not set as Enable such option will be disabled IGMP Snooping State Choose Enable to enable IGMP snooping function Router Ports Auto Learn Set the enabling status of IGMP router port learning Choose Enable to learn router port by IGMP query Query Robust...

Страница 60: ...nction OK Apply the settings to the switch Cancel Close the page and return to previous page I II I 7 7 2 2 2 2 I IG GM MP P Q Qu ue er ri ie er r S Se et tt ti in ng g This page allows a user to configure querier settings on specific VLAN of IGMP Snooping Available settings are explained as follows Item Description VLAN ID Use the drop down list to specify a VLAN profile as IGMP Snooping querier ...

Страница 61: ...er Available settings are explained as follows Item Description VLAN ID Use the drop down list to specify a VLAN profile as IGMP Static Group Group IP Address It is an identifier for the group member Packets sent to such address will be transferred to all interfaces defined in Member Ports Specify the IPv4 multicast address you wish to assign for the static group defined in VLAN ID Member Ports Sp...

Страница 62: ...lable settings are explained as follows Item Description VLAN ID Display the VLAN of this multicast group belongs to Group IP Address Display the multicast address of this multicast group Member Ports Display the port s where subscribing member of this multicast group belongs to Type Display if it is dynamically learned or statically assigned Life sec Display the life time of this multicast member...

Страница 63: ...erier belongs to Type Static Specify LAN Port GE LAG to send out query to remote host Forbidden Use the drop down list to specify forbidden LAN Port GE LAG Member Ports Use the drop down list to choose the uplink ports where querier router exists Add Click it to display the result based on the settings configured above Port Display the static port member specified in Member Ports Expire Time sec D...

Страница 64: ...VLAN profile created in Switch LAN VLAN Management Create Vlan that multicast packets will be forwarded to Static Ports Use the drop down list to specify LAN Port GE LAG Later the multicast packets will be delivered to the network device connected by these ports Forbidden Ports Use the drop down list to specify forbidden LAN Port GE LAG Later the multicast packets will not be delivered to the netw...

Страница 65: ...interface with received IGMP join report Available settings are explained as follows Item Description Ports Use the drop down list to specify LAN Port GE LAG Max Group Define the maximum number of IGMP group profile that a user on the switch can join If 0 is selected then such interface port can join all of the IGMP group profiles defined in Filtering Profile Exceed Action VigorSwitch will perform...

Страница 66: ...of network service respectively In addition such filtering profile is only effective for controlling the query for multicast It has nothing to do with the general IGMP query Available settings are explained as follows Item Description Profile ID Use the drop down list to select one filtering profile 1 128 for IGMP snooping Start Address Enter an IP address as the starting point for the IP range En...

Страница 67: ...tings are explained as follows Item Description Ports Use the drop down list to specify LAN Port GE LAG Profile ID Use the drop down list to choose the filtering profile for the select port interface Enable Check this box first to make profile ID selection be available for choosing Apply Apply the settings to the switch Edit Click it to modify port setting enabling disabling filter function and ch...

Страница 68: ...VigorSwitch P2280 User s Guide 60 ...

Страница 69: ...r MVR such as enabling function selecting VLAN ID as source VLAN and specify IP address es for receiver LAN users Available settings are explained as follows Item Description State Enabled Click it to enable the MVR function Disabled Click it to disable the MVR function VLAN ID Choose one VLAN profile from the drop down list as multicast source VLAN which will receive multicast data All source por...

Страница 70: ...cify destination port and source port GE LAG for Vigor system to perform MVR operation Available settings are explained as follows Item Description Ports Use the drop down list to select LAN Port GE LAG Later each port can be set as Recevier or Source port respectively If you do not satisfy with the port setting simply click the Edit button to make the modification Role None Noting will be happed ...

Страница 71: ... IP address and specify port member for VLAN selected in MVR Property page Available settings are explained as follows Item Description VLAN ID Display the ID number of the VLAN Group Address Define a range of IP address es with the format of xxx xxx xxx xxx xxx xxx xxx xxx Member Choose GE LAG port to be grouped under the selected VLAN Add Click it to display the result based on the settings conf...

Страница 72: ...o Multicast Listener Discovery network traffic It can examine IPv6 packets and forward these packets to designate location via VLAN port members I II I 7 7 4 4 1 1 M ML LD D S Se et tt ti in ng g This page allows the network administrator to enable disable MLD Snooping function select snooping version and enable disable snooping report suppression Available settings are explained as follows Item D...

Страница 73: ...he traffic to destination defined with multicast address es Report Suppression Enabled Click it to allow the switch to handle MLD reports between router and host suppressing bandwidth used by MLD Disabled Click it to disable the function Apply Click it to display the result based on the settings configured above Edit Click it to modify the settings for the selected VLAN ID GE LAG port MLD Snooping...

Страница 74: ...g each member query message with no responses from any subscribed member Immediate Leave Click Enable to enable the function of immediate leave When the GE LAG port receives the leave message it will be removed from multicast group to speed up leave latency OK Apply the settings to the switch Cancel Close the page and return to previous page I II I 7 7 4 4 2 2 M ML LD D S St ta at ti ic c G Gr ro ...

Страница 75: ...Member Ports Specify the IPv6 multicast address you wish to assign for the static group defined in VLAN ID Member Ports Use the drop down list to specify interaces GE LAG for receiving the packets from group IP address Add Click it to display the result based on the settings configured above ...

Страница 76: ...ion Available settings are explained as follows Item Description VLAN ID Display the name of VLAN configured in MLD Static Group Group IP Address Display the IP adderss defined in MLD Static Group Member Ports Display all of the interfaces defined in MLD Static Group Type Display if it is dynamically learned or statically assigned Life sec Display the life time of this multicast member left if no ...

Страница 77: ...nagement Create Vlan that the MLD querier belongs to Type Static Specify LAN Port GE LAG to send out query to remote host Forbidden Use the drop down list to specify forbidden LAN Port GE LAG Member Ports Use the drop down list to choose the uplink ports where querier router exists Add Click it to display the result based on the settings configured above Port Display the static port member specifi...

Страница 78: ...n MLD Setting first Use the drop down list to specify a VLAN profile created in Switch LAN VLAN Management Create Vlan that multicast packets will be forwarded to Static Ports Use the drop down list to specify LAN Port GE LAG Later the multicast packets will be delivered to the network device connected by these ports Forbidden Ports Use the drop down list to specify forbidden LAN Port GE LAG Later...

Страница 79: ...r set to replace randomly selected multicast interface with received MLD join report Available settings are explained as follows Item Description Ports Use the drop down list to specify LAN Port GE LAG for applying throttling feature Max Group Define the maximum number of MLD group profile that a user on the switch can join If 0 is selected then such interface port can join all of the MLD group pr...

Страница 80: ...of network service respectively In addition such filtering profile is only effective for controlling the query for multicast traffic It has nothing to do with the general MLD query Available settings are explained as follows Item Description Profile ID Use the drop down list to select one filtering profile 1 128 for MLD snooping Start Address Enter an IP address as the starting point for the IP ra...

Страница 81: ...tings are explained as follows Item Description Ports Use the drop down list to specify LAN Port GE LAG Profile ID Use the drop down list to choose the filtering profile for the select port interface Enable Check this box first to make profile ID selection be available for choosing Apply Apply the settings to the switch Edit Click it to modify port setting enabling disabling filter function and ch...

Страница 82: ...VigorSwitch P2280 User s Guide 74 ...

Страница 83: ...Fr ra am me e This page allows a user to configure switch port jumbo frame settings Available settings are explained as follows Item Description Jumbo Frame Bytes Enter Jumbo frame size The valid range is 1526 bytes 9216 bytes Apply Apply the settings to the switch ...

Страница 84: ...r bridges are listening If any loops multiple possible paths between switches are found in the network topology the switches will co operate to disable a port or ports to ensure that there are no loops that is from one device to any other device in the layer 2 network only one path can be taken I II I 9 9 1 1 P Pr ro op pe er rt ti ie es s This page allows a user to configure and display Spanning ...

Страница 85: ...d to assign this value according to the speed of the bridge The slower the media the higher the cost Entering 0 means the switch will automatically assign a value Priority Specify a priority value for the switch The smaller the priority value the higher the priority and greater chance of becoming the root Edge Port In the edge mode the interface would be put into the Forwarding state immediately u...

Страница 86: ...m this port Check it to enable such function Apply Apply the settings to the switch After clicking it the settings configured above will be shown on the table below Ports Use the drop down to specify the interface s for applying the function of Migrate Migrate Click it to force the port s specified above to send one RSTP BPDU Rapid Spanning Tree Protocol Bridge Protocol Data Unit Admin Enable YES ...

Страница 87: ...tch to be selected as the root bridge of the topology Forward Delay Specify the STP forward delay time which is the amount of time that a port remains in the Listening and Learning states before it enters the Forwarding state Its valid range is from 4 to 10 seconds Max Age Specify the time interval in seconds for a switch to wait the configuration messages without attempting to redefine its own co...

Страница 88: ...signated root bridge Root Path Cost Display the operational root path cost Designated Bridge Display the identifier of next bridge on this port Edge Port Conf Oper Display if this port is configured as Edge of STP network for speed up link up P2P MAC Conf Oper Display if this port is configured as point to point link to another switch or host Port Role Display current port role on the specified po...

Страница 89: ...gs are explained as follows Item Description Port Display the port number GE LAG Configure BPDUs Rx Display the counts of the received CONFIG BPDU TCN BPDUs Rx Display the counts of the received TCN BPDU Configure BPDUs Tx Display the counts of the transmitted CONFIG BPDU TCN BPDUs Rx Display the counts of the transmitted TCN BPDU ...

Страница 90: ...witch supports up to 16 independent MST instances 0 15 with which the VLAN can be associated Available settings are explained as follows Item Description MSTI Display the index number of MST Instance Each MSTI can have one or multiple VLANs Edit Click it to modify the priority setting for the selected GE port LAG port VLAN Enter the ID 1 4094 of the VLAN which should be ...

Страница 91: ...e Root Port Display the port toward the root Root Path Cost Display the path cost toward the root Remaining Hop Display the remaining hop count in BPDU OK Save the modifications I II I 9 9 7 7 M MS ST T P Po or rt t S Se et tt ti in ng g MST Port Settings is used to configure the GE port LAG group settings for each MST instance The table displays the MST parameters for each port Available settings...

Страница 92: ... lowest value will be used as the forwarding port by spanning tree Default value was set according to the bandwidth of the port Priority Among the ports with same path cost port with lower priority will have higher chance to be used as the forwarding port by spanning tree Use the drop down list to choose desired priority value ...

Страница 93: ...nually assign MAC address into MAC table The configuration result will be displayed on the table listed on the lower side of this web page Available settings are explained as follows Item Description MAC Address Enter the MAC address that will be forwarded VLAN This is the VLAN group to which the MAC address belongs Port Select the port where received frame of matched destination MAC address will ...

Страница 94: ...plained as follows Item Description Aging Time Enter the Dynamic MAC address aging out value 5 32767 seconds Apply Apply the settings to the switch I II I 1 10 0 3 3 D Dy yn na am mi ic c L Le ea ar rn ne ed d This page displays the MAC address and port number automatically learned by VigorSwitch Available settings are explained as follows Item Description MAC Address Display the MAC address that ...

Страница 95: ...ress belongs Type Display whether the MAC address is Dynamic learned by the Switch or Static Unicast manually entered in the Static MAC Forwarding screen Port Display the port to which this MAC address belongs Add to Static Click this button to add any port into the static MAC table ...

Страница 96: ...overy Interval Broadcast Flood Enable Recover the port being blocked by broadcast flood after the time set in Recovery Interval Unknown Multicast Flood Enable Recover the port being blocked by unknown multicast flood after the time set in Recovery Interval Unicast Flood Enable Recover the port being blocked by unicast flood after the time set in Recovery Interval ACL Enable Recover the port being ...

Страница 97: ...VigorSwitch P2280 User s Guide 89 P Pa ar rt t I II II I S Se ec cu ur ri it ty y ...

Страница 98: ...address by DNS to connect to server or directly connect using IPv4 address Sever Address Enter the server s address corresponding with address type given Server Port Enter the port number used by RADIUS server Priorty Specify the priority that switch uses this server The higher number the lower priority Switch will start with server with lowest priority Retry Set the time before this server being ...

Страница 99: ...VigorSwitch P2280 User s Guide 91 Add Click it to add a new RADIUS server and display in this page under Edit Click it to modify the priority setting for the selected GE port LAG port ...

Страница 100: ...o connect to server or directly connect using IPv4 address Sever Address Enter the server s address corresponding with address type given Server Port Enter the port number used by TACACS server Priorty Specify the priority that switch uses this server The higher number the lower priority Switch will start with server with lowest priority Timeout Set the time in seconds before this server being con...

Страница 101: ...g on management service Available settings are explained as follows Item Description Method Profile Name Enter a name for creating a method Optional Methods Available methods include Local RADIUS and TACACS Selected Methods The method listed in this field will be applied for such method profile Add Click it to add a method from Optional Method onto Selected Method under Edit Click it to modify the...

Страница 102: ...thod List to apply to any management service for management access control Available settings are explained as follows Item Description Application There are five methods to be configured with different profile respectively Console Telnet SSH HTTP HTTPS Selected Profile Specify one of customized method profiles to apply to any management service for management access control Apply Save the setting...

Страница 103: ...name ACL Profile Name Display the name of the ACL profile State Display if such ACL profile is active or inactive Rule Display the number of ACE used by this ACL profile Activate Deactivate Click it to activate deactivate such entry To configure detailed settings for the selected ACL profile do not click Activate for that profile Delete Click the icon under Delete to remove the selected entry I II...

Страница 104: ...ata which meets ACE rules will be blocked Permit Incoming outgoing data which meets ACE rule is allowed to pass through Ports Select the ports to which the ACL should be applied IP Versions Specify the IP address subnet to which the ACL should be applied All All the IP address should be applied IPv4 Specify the IPv4 address subnet IPv6 Specify the IPv6 address subnet IPv4 Enter the IPv4 address su...

Страница 105: ...VigorSwitch P2280 User s Guide 97 click it to remove the selected entry ...

Страница 106: ...e explained as follows Item Description Global Settings Authentication Types Use the drop down list to specify which type 802 1x MAC based will be used for authentication Choose to enable 802 1x or MAC based authenticate method for host connecting to Ethernet port You may configure which type to be used per port but enabling any per port without enabling here will not be effective Guest VLAN Check...

Страница 107: ...nected to this port can access freely as authenticated host Single Host Only one host can be authenticated and access the port Available Authentication Types Display available authentication types of AAA server or local you wish to have on this port Selected Authentication Types Specify the order of authentication type you wish to have on this port Available Methods Display available methods of AA...

Страница 108: ...rized or blocked Unauthorized or determined by VigorSwtich Auto Disabled Disable any authentication requirement for port access All clients are allowed to access the network Force Authorized Port will be considered authorized All clients are allowed to access the network Force Unauthorized Port will be considered un authorized All clients are NOT allowed to access the network Auto Port will be con...

Страница 109: ...ocked for a period of time configured in quiet period Later after the time period set in this field the host wll be allowed to perform authentication again Resend EAP Period 802 1X Parameter Set the period for host to re send EAP Ethernet Automatic Protection requests Default value is 30 seconds Supplicant Timeout 802 1X Parameter Set a period of time for the maximum number of EAP requests will be...

Страница 110: ...forcefully authenticate the host specified above Force Unauthorized The host specified above will not be authenticated by VigorSwitch VLAN User Defined Check it to specify which VLAN will be assigned by the host of this account Reauthentication Period User Defined Check it to specify the time this account required to be authenticated again after authentication taken place Inactive Timeout User Def...

Страница 111: ...VigorSwitch P2280 User s Guide 103 I II II I 5 5 4 4 A Au ut th he en nt ti ic ca at te ed d H Ho os st ts s This page displays information related to the host authenticated by VigorSwitch ...

Страница 112: ...d like to configure the port security settings Port State Enable or disable port security function on the ports selected above Enabled The selected port applies the port security settings Disabled The selected port does not apply the port security settings MAC Address Enter the maximum number of MAC addresses that the port is allowed to learn Action Select an action to perform when there is an unk...

Страница 113: ...VigorSwitch P2280 User s Guide 105 ...

Страница 114: ...n Port List and Enable is clicked as Protected then users behind GE1 and GE3 are separated and can not communicate with each other Available settings are explained as follows Item Description Protected Ports Settings Port List Use the drop down list to select the port s GE1 to GE28 for applying the settings configured in this page Protected Click Enable to activate the protected port function Appl...

Страница 115: ...orm Control Available settings are explained as follows Item Description Storm Control Mode Select the mode of storm control Packet sec Storm control rate will be calculated by packet based Kbits sec Storm control rate will be calculated by octet based Preamble Inter Frame Gap Select the rate calculation with without preamble IFG 20 bytes Excluded Exclude preamble IFG 20 bytes when count ingress s...

Страница 116: ...iting Rate Check the box es to enable strom control rate limited for Broadcast Unknown Multicast and or Unknow Unicast packet Broadcast Specify the storm control rate for Broadcast packet Value of storm control rate Unit Kbps Kbits per second The range is from 16 to 1000000 Unknown Multicast Specify the storm control rate for unknown multicast packet Value of storm control rate Unit Kbps Kbits per...

Страница 117: ...er to configure DoS setting to enable disable DoS function for global setting Available settings are explained as follows Item Description Dst MAC Src MAC Drop the packets if the destination MAC address is equal to the source MAC address Disabled Disable the item function Enabled Enable the item function LAND Drop the packets if the source IP address is equal to the destination IP address Disabled...

Страница 118: ...ge is from 0 to 65535 bytes and the default value is 512 bytes Smurf Attack Avoid smurf attack The length range of the netmask is from 0 to 323 bytes and default length is 0 byte Disabled Disable the item function Enabled Enable the item function TCP Min Hdr Size Check the minimum TCP header and drops the TCP packets with the header smaller than the minimum size The length range is from 0 to 31 by...

Страница 119: ...gure and display the state of DoS protection for interfaces The configuration result for each port will be displayed on the table listed on the lower side of this web page Available settings are explained as follows Item Description Port Use the drop down list to select the port profile GE1 to GE28 or profiles DoS Protection Disabled Disable the function of DoS Protection Enabled Enable the functi...

Страница 120: ...I II II I 1 10 0 1 1 P Pr ro op pe er rt ti ie es s I II II I 1 10 0 1 1 1 1 G Gl lo ob ba al l P Pr ro op pe er rt ty y S Se et tt ti in ng gs s This page allows a user to configure global property settings for the fuction of Dynamic ARP Inspection Available settings are explained as follows Item Description State Enable Check the box to enable global property settings VLANs Select VLAN profile s...

Страница 121: ...for the port s selected above Source MAC Address Enable Check it to enable the function of source MAC address validation mechanism for the selected port s Destination MAC Address Enable Check it to enable the function of destination MAC address validation mechanism for the selected port s IP Address Enable Check it to enable the function of IP address validation mechanism for the selected port s A...

Страница 122: ...VigorSwitch P2280 User s Guide 114 I II II I 1 10 0 2 2 S St ta at ti is st ti ic cs s This page displays all statistics recorded by Dynamic ARP Inspection function ...

Страница 123: ... ie es s I II II I 1 11 1 1 1 1 1 G Gl lo ob ba al l P Pr ro op pe er rt ty y S Se et tt ti in ng gs s This page allows a user to configure global property settings for the fuction of DHCP snooping Inspection In default DHCP snooping is inactive on all VLANs You can enable such feature on a single VLAN or a range of VLANs Available settings are explained as follows Item Description State Enable Ch...

Страница 124: ...te of its connecting port Available settings are explained as follows Item Description Ports Use the drop down list to select the port GE1 to GE28 LAG1 to LAG8 or ports for applying DHCP snooping function Trust Enable Check it to make the port s selected above as trusted interface Verify Chaddr Enable Check it to enable chaddr client hardware address validation of GE LAG port All DHCP packets will...

Страница 125: ...n82 Property also known as the DHCP relay agent to protect VigorSwitch against spoofing attacks I II II I 1 11 1 3 3 1 1 G Gl lo ob ba al l O Op pt ti io on n8 82 2 P Pr ro op pe er rt ty y S Se et tt ti in ng gs s This page allows a user to set string as remote ID for DHCP option82 For example use a switch configured hostname or specify an ASCII text string as remote ID Available settings are exp...

Страница 126: ... port GE LAG Available settings are explained as follows Item Description Ports Use the drop down list to select the port GE1 to GE28 LAG1 to LAG8 or ports for applying DHCP snooping Option82 Property function State Enable Check it to make the port s selected above apply the settings configured in this page Allow Untrust Untrusted packets detected by VigorSwitch will be performed by the action det...

Страница 127: ...s Use the drop down list to select the port GE1 to GE28 LAG1 to LAG8 or ports for applying DHCP snooping Option82 Property function VLAN Choose a number as VLAN ID which is easy to be identified for a packet containing with it It is optional setting Circuit ID Enter ASCII text string in the entry box Later any packet passes through the specified interface GE LAG port will be inserted with such inf...

Страница 128: ... LAG port interface separately Available settings are explained as follows Item Description Ports Use the drop down list to select the port GE1 to GE28 LAG1 to LAG8 or ports for applying IP source guard function State Enable Check it to make the port s selected above apply the settings configured in this page Verify Source Specify the type of source IP for the packet coming from IP Only the packet...

Страница 129: ...it It is optional setting Binding Select the binding type for such feature IP MAC Port VLAN Packets will be allowed to pass through the port interface if they meet the conditions specified by IP address MAC address Port setting and VLAN ID setting IP Port VLAN Packets will be allowed to pass through the port interface if they meet the conditions specified by IP address Port setting and VLAN ID set...

Страница 130: ...se Available settings are explained as follows Item Description Type None Do not save the database Flash Save the database to flash memory TFTP Save the database to a TFTP server Filename Enter a filename if TFTP is used Address Type Specify the address type if TFTP is used Hostname Use hostname as server address IPv4 Use IPv4 address Server Address Enter an IP address or hostname of TFTP sever if...

Страница 131: ... is changed the transfer work will be delayed for the value set The default value is 300 seconds Timeout Set a value from 0 to 86400 Stop the transfer process if it is not finished after waiting for the set value Set a value The default value is 300 seconds Apply Apply the settings to the switch ...

Страница 132: ...VigorSwitch P2280 User s Guide 124 This page is left blank ...

Страница 133: ...VigorSwitch P2280 User s Guide 125 P Pa ar rt t I IV V A AC CL L C Co on nf fi ig gu ur ra at ti io on n ...

Страница 134: ...C C The function is used to show the Access Control List ACL based on Layer 2 filtering the MAC layer The ACL is composed by many Access Control Element ACE rules You can create a new ACL here then add multiple ACEs Available settings are explained as follows Item Description ACL Profile Name Enter a name for creating a new ACL profile Add Add a new ACL entry using given ACL name Action click it t...

Страница 135: ...on click it to remove the selected entry I IV V 1 1 3 3 I IP Pv v6 6 The function is used to show the Access Control List ACL based on Layer 2 to Layer 4 filtering the IPv6 The ACL is composed by many Access Control Element ACE rules You may create a new ACL here then add multiple ACEs Available settings are explained as follows Item Description ACL Profile Name Enter a name for creating a new ACL...

Страница 136: ...VigorSwitch P2280 User s Guide 128 Add Add a new ACL entry using given ACL name Action click it to remove the selected entry ...

Страница 137: ...the packet Available settings are explained as follows Item Description ACL Profile Name Use the drop down list to selected one of the user defined ACL profiles Sequence Assign a sequence number to this ACE The sequence is used to identify which one of ACEs in an ACL is firstly used to match ingress packets The switch port bound with an ACL use the contained ACE rules start with the one with lower...

Страница 138: ...a number from 0 to 7 Add Click it to create a new ACE rule Modify click it to modify the settings for the selected entry click it to remove the selected entry I IV V 2 2 2 2 I IP Pv v4 4 This page shows ACE based on IPv4 address You may choose ACL permit and deny particular packet or frame even shutdown the port You may provide filtering matching criteria for one or more of following packet charac...

Страница 139: ...ll be filtered Or enter the IP address to filter the packets coming from that address Service Any All packets will be filtered DSCP All IP traffic is mapped to queues based on the DSCP field in the IP header If traffic is not IP traffic it is mapped to the lowest priority queue IP Precedence All IP traffic is mapped to queues based on the IP Precedence field in the IP header If traffic is not IP t...

Страница 140: ... Assign a sequence number to this ACE The sequence is used to identify which one of ACEs in an ACL is firstly used to match ingress packets The switch port bound with an ACL use the contained ACE rules start with the one with lower sequence number to match the packet first Action Select the action applied to the packet matched this ACE Permit or deny the packets into switch core or shutdown the po...

Страница 141: ...urce Port Destination Port Specify the source and destination port number for filtering the packets Any All packets will be filtered Single Only the packets passing through the number defined here will be filtered Range Only the packets passing through the port range defined here will be filtered ICMP Type Any All packets will be filtered Select Choose one of the type e g Destination Unreachable E...

Страница 142: ...tion A physical port can only be bound with one of the IPv4 and IPv6 ACL not both Available settings are explained as follows Item Description Ports Use the drop down list to select the port profiles GE1 to GE28 for binding ACL MAC ACL IPv4 ACL IPv6 ACL Select ACLs MAC IPv4 and or IPv6 to be bound on this interface port so Switch may filter packets by using it Apply Apply the settings to the switc...

Страница 143: ...VigorSwitch P2280 User s Guide 135 P Pa ar rt t V V Q Qo oS S C Co on nf fi ig gu ur ra at ti io on n ...

Страница 144: ...de Basic Enable the function of QoS mode Ingress Trust Mode Select the QoS operation mode CoS 802 1p Traffic is mapped to queues based on the CoS field in the VLAN tag or based on the per port default CoS value if there is no VLAN tag on the incoming packet DSCP All IP traffic is mapped to queues based on the DSCP field in the IP header If traffic is not IP traffic it is mapped to the lowest prior...

Страница 145: ...figuration result for each port will be displayed on the table listed on the lower side of this web page Available settings are explained as follows Item Description Ports Use the drop down list to select the port profile GE1 to GE28 or profiles Trust Click Enable to make traffic follow the trust mode in general setting Enable Traffic will follow trust mode in general setting Disable No QoS servic...

Страница 146: ...mes without given trust QoS tag 802 1q DSCP IP Precedence depending on configuration Engress Remarking Remark CoS Disable Disable CoS remarking function for outgoing packets Enable Egress traffic will be marked with CoS value according to the Queue to CoS mapping table Remark DSCP IP Precedence Disable Disable DSCP IP Precedence remarking function for outgoing packets DSCP Egress traffic will be m...

Страница 147: ...n WRR The number of packets sent from the queue is proportional to the weight of the queue Available settings are explained as follows Item Description Queue There are eight queue ID numbers allowed to be configured Schedule Strict Priority Click it to set queue to strict priority type WRR Click it to set queue to Weight round robin type Weight If the queue type is WRR set the queue weight for the...

Страница 148: ...er to configure mapping only Available settings are explained as follows Item Description CoS to Queue Mapping for Ingress Settings for incoming packets Class of Service Display the class of service value 0 to 7 Queue Define the queue ID level 1 to 8 for different class of service values Queue to CoS Mapping for Egress Remarking Settings for outgoing packets Queue Display the queue ID level 1 to 8...

Страница 149: ...page provides settings for user to configure mapping only Available settings are explained as follows Item Description DSCP to Queue Mapping for Ingress Settings for the incoming packets DSCP Display the DSCP value 0 to 7 Queue Define the queue ID level 1 to 8 for different DSCP values Queue to DSCP Mapping for Egress Remarking Settings for outgoing packets Queue Display the queue ID level 1 to 8 ...

Страница 150: ...settings for user to configure mapping only Available settings are explained as follows Item Description IP Precedence to Queue Mapping for Ingress Settings for the incoming packets IP Precedence Display the IP Precedence value 0 to 7 Queue Define the queue ID level 1 to 8 for different IP Precedence values Queue to IP Precedence Mapping for Egress Remarking Settings for outgoing packets Queue Dis...

Страница 151: ...eceived from the ingress interface Excess bandwidth above this limit is discarded The configuration result for each port will be displayed on the table listed on the lower side of this web page Available settings are explained as follows Item Description Ingress Rate Limit Ports Use the drop down list to select the port profile GE1 to GE28 or profiles State Disable Disable ingress bandwidth contro...

Страница 152: ...ace Excess bandwidth above this limit is discarded Available settings are explained as follows Item Description Egress Shapping Rate Ports Use the drop down list to select the port profile GE1 to GE28 or profiles State Disable Disable egress bandwidth control Enable Enable egress bandwidth control CIR Kbps Enter the rate value 16 1000000 unit 16 Kbps Apply Apply the settings to the switch Modify C...

Страница 153: ... on the table listed on the lower side of this web page Available settings are explained as follows Item Description Egress Shapping Per Queue Port Use the drop down list to select the port profile GE1 to GE28 or profiles Queue Use the drop down list to select queue number 1 to 8 for the selected GE port State Disable Disable egress bandwidth control Enable Enable egress bandwidth control CIR Kbps...

Страница 154: ...VigorSwitch P2280 User s Guide 146 This page is left blank ...

Страница 155: ...VigorSwitch P2280 User s Guide 147 P Pa ar rt t V VI I P Po oE E C Co on nf fi ig gu ur ra at ti io on n ...

Страница 156: ...on Auto Provides plug and play PoE function PoE schedule and Power Limit are disabled in this mode Manual Before using PoE Schedule set Manual as PoE mode Ports Use the drop down list to select the port GE1 to GE24 or ports for applying PoE configuration Enable Enable Make the selected ports be applied with PoE mode Disable Make the selected ports be not applied with PoE mode Priority Select Prior...

Страница 157: ...e Display the PoE Mode Manual Auto or Disable selected for the LAN port Power Budget W Display the maximum power this switch can supply over PoE Consuming Power W Display current power being consumed by all devices over PoE Remaining Power W Display remaining power that can be supplied to additional devices over PoE Power Cycle Apply If PoE device connects to VigorSwitch such button will be avaibl...

Страница 158: ...or device check Enable Disable No PoE function for the selected GE port Enable PoE function will be enabled for the selected GE port Ping IP Address Enter the IP address of the PoE device for check Interval Time sec The ping check will be performed every 10 30 60 or 120 seconds for the selected port PoE device Retry Time The system will perform the ping check the selected port PoE device for 1 3 o...

Страница 159: ...ef comment for such schedule Start Date Specify the starting date of the schedule by choosing from a drop down calendar Start Time Specify the starting time of the schedule by using the drop down list to specify the starting time hours and minutes Duration Time Define the time duration hours and minutes Action Specify which action should perform during the period of the schedule Power On PoE conne...

Страница 160: ...age allows the network administrator to specify the PoE port for applying the schedule The configuration result for each port will be displayed on the table listed on the lower side of this web page Available settings are explained as follows Item Description Ports Select the port or ports for applying the schedule Schedule Index Use the drop down list to choose the schedule profile from 1 to 15 A...

Страница 161: ...VigorSwitch P2280 User s Guide 153 P Pa ar rt t V VI II I S Sy ys st te em m M Ma ai in nt te en na an nc ce e ...

Страница 162: ...nable LLDP protocol on this switch Disable Disable LLDP protocol on this switch Transmission Interval Select the interval at which frames are transmitted The default is 30 seconds and the valid range is 5 32768seconds Holdtime Multiplier Select the multiplier on the transmit interval to assign to TTL range 2 10 default 4 Reinitialization Delay Select the delay before a re initialization range 1 10...

Страница 163: ...thin data communication protocols optional information may be encoded as a type length value or TLV element inside a protocol TLV is also known as tag length value The type and length are fixed in size typically 1 4 bytes and the value field is of variable size Select the LLDP optional TLVs to be carried multiple selection is allowed Available items include System Name Port Description System Desc...

Страница 164: ...s the MAC address of the switch is displayed System Name Display model name of switch System Description Display description of switch Capabilities Supported Display the primary functions of the device such as Bridge WLAN AP or Router Capabilities Enabled Primary enabled functions of the device Port ID Subtype Display the type of the port identifier that is shown Port Details Display detailed info...

Страница 165: ... it to enable such function Application There are several applications which can be used for MED network Selections include Voice Signaling Guest Voice Guest Voice Signaling Softphone Voice Video Conferencing Stream Video and Video Signaling VLAN Set a VLAN ID ranging from 1 to 4095 for such profile VLAN Tag Specify if the outgoing packets will be tagged or not Untag Packets will be sent out witho...

Страница 166: ...want and click the arrow to transfer the selection s to the field of Selected Optional TLV Selected Optional TLV Display the selected TLV items Selected Network Policies Select network policy profiles created in LLDP LLDP MED Network Policy for applying onto the selected port Location TLV Settings Define the location civic address and ECS ELIN for LLDP protocol Coordinate Enter the coordinate loca...

Страница 167: ...ected Chassis ID Subtype Display the type of chassis ID for example MAC address Chassis ID Display the identifier of the 802 LAN neighboring device s chassis Port ID Subtype Display the type of port identifier Port ID Display the number of port identifier System Name Display the name of the switch Time to Live Display the time interval in seconds after which the information for remote device will ...

Страница 168: ...y the name of the port Total Bytes Display the total number of bytes of LLDP information in each packet Left to Send Bytes Display the total number of available bytes left for additional LLDP information in each packet Status Display if LLDP TLVs has overloaded the PDU maximum size or not Mandatory TLVs Display how many bytes used by mandatory TLVs 802 3 TLVs Display how many bytes used by 802 3 T...

Страница 169: ...anaged devices Network management station NMS software which runs on the manager A managed device is a network node that implements an SNMP interface that allows unidirectional read only or bidirectional read and write access to node specific information Managed devices exchange node specific information with the NMSs Sometimes called network elements the managed devices can be any type of device ...

Страница 170: ...ormation base and then include or exclude OID Object Identifier in a view Available settings are explained as follows Item Description View Name Enter a name of the MIB view OID Subtree Enter an OID string to be included or excluded from the MIB view Type Determine to include or exclude the selected MIBs Apply Apply the settings to the switch ...

Страница 171: ...iew Enabled Users of this group have the right to read the selected MIB view Use the drop down list to select one of the views The default is all which means the group user can read all MIB views Write View Enabled Users of this group have the right to write the selected MIB view Use the drop down list to select one of the views The default is all which means the group user can write all MIB views...

Страница 172: ...d for such SNMP community profile Advanced Specify one of the SNMP groups for such SNMP community profile View Simply specify one of the view profiles created in SNMP View from the drop down list Access Right Read Only It allows unidirectional access to node specific information Read Write It allows bidirectional access to node specific information Group Specify the SNMP group configured by user S...

Страница 173: ...n without encryption will be performed for packets Authentication and Privacy Authentication with encryption will be performed for packets Authentication Method It is available when Authentication or Authentication and Privacy is selected as security level Method At present available methods include None MD5 and SHA Password Enter a password for the selected method Privacy It is available when Aut...

Страница 174: ...VigorSwitch P2280 User s Guide 166 ...

Страница 175: ...engine ID Available settings are explained as follows Item Description Engine ID The user defined engine ID is range 10 to 64 hexadecimal characters and the hexadecimal number must be divided by 2 User Defined If it is checked the local engine ID will be configured manually If not the default Engine ID which is made up of MAC and Enterprise ID will be used instead Apply Apply the settings to the s...

Страница 176: ...ype Specify the address type for entering hostname or IPv4 IPv6 address Server Address Enter the IP address or the host name of the SNMP server Engine ID Specify the engine ID for remote SNMP server The engine ID is range10 to 64 hexadecimal characters and the hexadecimal number must be divided by 2 Add Click it to create a new profile Edit click it to modify the settings for the selected server p...

Страница 177: ...ion Authentication Failure Enable VigorSwtich will reboot when encountering authentication failure including community not match or user password not match Link Up Down Enable VigorSwtich will reboot while encountering port link up or down trap Cold Start Enable VigorSwtich will reboot while encountering user trap Warm Start Enable VigorSwtich will reboot while encountering power down trap Apply A...

Страница 178: ...rms to the host If it is used Timeout and Retry also shall be defined Community user Use the drop down list to choose one of the community profiles Security Level Specify SNMP security level for SNMP notification packet It is available when SNMPv3 is selected No Security No authentication Authentication Authentication without encryption will be performed for packets Authentication and Privacy Auth...

Страница 179: ...t is available when Inform is selected as Type Use Default If it is checked the default number 3 will be used automaticallty Add Click it to create a new notification profile Edit Click it to modify the settings for the selected server profile Click it to remove the selected entry ...

Страница 180: ...TTP service HTTPS Service HTTPS is the acronym of Hypertext Transfer Protocol over Secure Socket Layer Enabled Click it to enable HTTPS service Telnet Service Telnet is the TCP IP standard protocol for remote terminal service TELNET allows a user at one site to interact with a remote timesharing system at another site as if the user s keyboard and display connected directly to the remote machine D...

Страница 181: ...f daylight saving time Non Recurring Using non recurring mode of daylight saving time USA Using daylight saving time in the United States that starts on the second Sunday of March and ends on the first Sunday of November European Using daylight saving time in the Europe that starts on the last Sunday Daylight Saving Time Offset It is available when Recurring is selected as Daylight Saving Time Spe...

Страница 182: ...m me e This page allows a user to specify time and activate SNTP server manually Available settings are explained as follows Item Description Manual Time Specify static time year month day hours miniutes and seconds manually Enable SNTP Enable Click it to enable SNTP time server Disable Click to disable the time server SNTP NTP Server Address Enter the web site of the time server or the IP address...

Страница 183: ...rough HTTP protocol Available settings are explained as follows Item Description Backup Method Select Backup method TFTP Using TFTP to backup firmware HTTP Using WEB browser to ubackup firmware Server IP It is available when TFTP is selected as Backup Method Enter the IPv4 IPv6 address for the TFTP server Backup Type Configuration Make a backup copy for the configurations for VigorSwitch Apply App...

Страница 184: ... to upgrade firmware Server IP It is available when TFTP is selected as Upgrade Method Enter the IPv4 IPv6 address for the TFTP server File Name It is available when TFTP is selected as Upgrade Method Enter the firmware image or configuration file name on the TFTP server File Path It is available when HTTP is selected as Upgrade Method Choose the firmware file located in your computer Upgrade Type...

Страница 185: ...Description Active Image There are two versions of firmware Simply choose the one you want as primary firmware Apply Apply the settings to the switch Firmware 1 Information Firmware 2 Information Mode Display the mode Active or Backup of the firmware Active Display the status in use or not of the firmware Version Display the switch version Build Time Display the built time of the firmware Size MB ...

Страница 186: ...me string in this field Then modify the password and choose privilege level After clicking Apply the existed user name will be modified with different values Password Enter a password for new account Retype Password Retype password to make sure the password is exactly you typed before in Password field Privilege Level Use the drop down list to select privilege level Admin User for new account Admi...

Страница 187: ...VigorSwitch P2280 User s Guide 179 ...

Страница 188: ... I 9 9 F Fa ac ct to or ry y D De ef fa au ul lt t Click Apply to return to factory default settings for VigorSwitch If Keep my current IPv4 address settings is checked after clicking Apply the original configuration for IP address will be kept ...

Страница 189: ...VigorSwitch P2280 User s Guide 181 V VI II I 1 10 0 R Re eb bo oo ot t S Sw wi it tc ch h Click Apply to reboot VigorSwitch with current settings ...

Страница 190: ...VigorSwitch P2280 User s Guide 182 This page is left blank ...

Страница 191: ...VigorSwitch P2280 User s Guide 183 P Pa ar rt t V VI II II I D Di ia ag gn no os st ti ic cs s ...

Страница 192: ... ic cs s After finished copper test the results will be shown on the lower side of this web page Available settings are explained as follows Item Description Port Use the drop down list to select the port GE1 to GE28 or ports for performing cable diagnostics Start Perform the copper test action ...

Страница 193: ...o specify IP address for sending ping to check if network path is ok Host Enter the IP address of SNMP server based on the protocol selected above Count It means how many times to send ping request packet Enter a number between 1 and 5 as the count and the default configuration is 4 Interval sec Define the interval to perform ping action For example 1 means the ping action will be performed per se...

Страница 194: ...y also known as Flash Severity Select severity emerg alert crit error warning notice info and debug of log messages which you wish to filter out for review Category Select the categories related features of logs you wish to review Category contains AAA ACL AUTHMGR CABLE_DIAG DAI DHCP_SNOOPING GVRP IGMP_SNOOPING IPSG L2 LLDP Mac based VLAN Mirror MLD_SNOOPING Platform PM Port PORT_SECURITY QoS Rate...

Страница 195: ...g g S Se er rv vi ic ce e This page allows user to enable system logging into local syslog and specific remote syslog server for storage Available settings are explained as follows Item Description SysLog Service Enable Click it to activate function of syslog Disable Click it to inactivate the function Apply Apply the settings to the switch ...

Страница 196: ...wer off Non Volatile Memory Select the non volatile memory for saving If you want to modify Volatile Memory Non Volatile Memory select Volatile Memory Non Volatile Memory in this field Then use the drop down list of severity to specify type of log message After clicking Apply the Volatile Memory Non Volatile Memory will be modified with new configured severity level Severity Select severity emerg ...

Страница 197: ...r Address Enter the IP address of Syslog server Server Port Specify the port that syslog should be sent to Severity Select severity emerg alert crit error warning notice info and debug of log messages which will be stored Facility One device supports multiple facilities represented with facility ID local0 to local7 of remote Syslog server For each facility ID contains different syslog server confi...

Страница 198: ...VigorSwitch P2280 User s Guide 190 This page is left blank ...

Страница 199: ...he same frame format CSMA CD software interface In 1998 Gigabit Ethernet was rolled out and provided 1000Mbps Now 10G s Ethernet is under approving Although these Ethernet have different speed they still use the same basic functions So they are compatible in software and can connect each other almost without limitation The transmission media may be the only problem In the above figure we can see t...

Страница 200: ...work layer which is nothing to do with the nature of the LAN So it can operate over other different LAN technology such as Token Ring FDDI and so on Likewise for the interface to the MAC layer LLC defines the services with the interface independent of the medium access technology and with some of the nature of the medium itself The table above is the format of LLC PDU It comprises four fields DSAP...

Страница 201: ...ess service LLC type 2 connection oriented service and LLC type 3 acknowledge connectionless service are three types of LLC frame for all classes of service In Fig 3 2 it shows the format of Service Access Point SAP Please refer to IEEE802 2 for more details ...

Страница 202: ... group 1 So the 48 bit address space is divided into two portions Unicast and Multicast The second bit is for global unique 0 or locally unique address The former is assigned by the device manufacturer and the later is usually assigned by the administrator In practice global unique addresses are always applied A unicast address is identified with a single network interface With this nature of MAC ...

Страница 203: ...nt protocols running over Ethernet being sent or received For example 0x0800 IP datagram 0x0806 ARP 0x0835 RARP 0x8137 IPX datagram 0x86DD IPv6 Data Less than or equal to 1500 bytes and greater or equal to 46 bytes If data is less than 46 bytes the MAC will automatically extend the padding bits and have the payload be equal to 46 bytes The length of data field must equal the value of the Length fi...

Страница 204: ...ode the MAC can either transmit or receive frame at a moment but cannot do both jobs at the same time As the transmission of a MAC frame with the half duplex operation exists only in the same collision domain the carrier signal needs to spend time to travel to reach the targeted device For two most distant devices in the same collision domain when one sends the frame first and the second sends the...

Страница 205: ...mitting and receiving frames are processed simultaneously This doubles the total bandwidth Full duplex is much easier than half duplex because it does not involve media contention collision retransmission schedule padding bits for short frame The rest functions follow the specification of IEEE802 3 For example it must meet the requirement of minimum inter frame gap between successive frames and fr...

Страница 206: ...ll as to have the jobs ready such as adjusting buffer counter updating counter and so on in the receiver site Once the inter frame gap time expires after the de assertion of carrier sense the MAC transmits data In IEEE802 3 specification this is 96 bit time or more C Co ol ll li is si io on n Collision happens only in half duplex operation When two or more network nodes transmit frames at approxim...

Страница 207: ...CS is invalid If there is any extra bits existed which must meet the specification of IEEE802 3 When both FCS and extra bits are valid the received frame will be accepted otherwise discards the received frame and reports frameCheckError if no extra bits appended or alignmentError if extra bits appended 5 If the length type is valid If not discards the packet and reports lengthError 6 If all five p...

Страница 208: ...ower speeds is inadequate to accommodate network topologies of the desired physical extent Carrier Extension provides a means by which the slotTime can be increased to a sufficient value for the desired topologies without increasing the minFrameSize parameter as this would have deleterious effects Nondata bits referred to as extension bits are appended to frames that are less than slotTime bits in...

Страница 209: ... Ｆ Factory Default 94 Ｇ General 61 General Setup 20 Ｉ Ingress Rate Limit 68 Installation for VigorAPM 6 Ｌ License Agreement 23 License Information 25 26 31 37 38 45 46 51 Limiting Rate 56 Ｐ PoE Configuration 72 Preamble 55 Properties 57 Ｑ QoS Configuration 60 Ｓ Security 54 SNMP 84 SNMP Community 86 Storm Control 56 Storm Control 55 Stric Priority Queue 64 System Configuration 19 System Maintenance...

Результаты поиска

Содержание VigorSwitch P2280

Отзывы:

Draytek VigorSwitch P2280, Руководство пользователя, Страница: 138 / 209

Результаты поиска

Содержание VigorSwitch P2280

Отзывы: