manualshive.com logo in svg

EverFocus ESM316T002R, Руководство пользователя

Поделиться
Скачать
EverFocus ESM316T002R Скачать руководство пользователя страница 45

45   

   

CHAPTER 4 Security

 

MAC Address Information 

To display the MAC address forwarding table. 

 

Web Smart switch interface 

1. 

Click Configuration. 

2. 

Then click Security, MAC Address, MAC Forwarding Table. 

Figure 33: MAC Address Information

 

 

Hint§ 

The following parameters are shown on the MAC Address Information page. 

■

No. -

 The number of the address entry in the forwarding table.

 

 

■

MAC Address -

 Physical address associated with this interface.

 

■

VLAN ID -

 The ID of a configured VLAN (1-4094). 

■

Type -

 Indicate if the MAC address has been dynamically learned or configured as a static entry.

 

■

Port -

 Indicate the port.

 

■

Clear Dynamic Entries 

— Remove all dynamically learned addresses from the forwarding table.

 

Содержание ESM316T002R

Страница 1: ...GIGABIT MANAGED ETHERNET SWITCH 16 PoE PORTS PLUS TWO SFP PORTS USER MANUAL Part ESM316T002R ESM316T002R ...

Страница 2: ...2 Trunk Distribution Algorithm Setting 13 LACP Setting 15 Static VLAN Table Setting 16 VLAN Port Setting 17 VLAN Stacking Table Setting 18 Vlan Stacking Setting 19 IGMP Multicast Group Information 21 IGMP Snooping 22 IGMP Global Setting 23 IGMP VLAN Setting 24 Spanning Tree 25 Spanning Tree Port Setting 27 Quality of Service QoS 29 Port based Priority Setting 29 DSCP based Priority Setting 30 Prio...

Страница 3: ...o Frame Setting 42 Management Access Filter 43 CHAPTER 4 Security 45 MAC Address Information 45 Static MAC Setting 46 MAC Filtering Setting 47 802 1x Setting 48 802 1x Port Setting 49 IP Filter Configurations 50 Storm Control settings 52 Port Isolation 53 Defence Engine 54 CHAPTER 5 Monitoring 55 Port Statistics Information 55 CHAPTER 6 Tools 56 Http Upgrade 56 Reset Factory Defaults 57 Reboot 58 ...

Страница 4: ...al time status link speed duplex of each port Supports port setting for enable or disable operation the 1st port can t be disabled Supports port setting for N Way or force mode operation Supports Broadcast Storm Protection Supports Port bases VLAN Supports priority queues for QoS Revision History Several documents prepared beforehand are consulted this manual is released as the first edition Date ...

Страница 5: ...e switch intuitively by interacting with the built in Web server The home page is displayed as shown below It displays the Main Menu on the left side of the screen and an image of the front panel on the right side The Main Menu is used to navigate to other menus and display configuration parameters and statistics Figure 1 Home Page ...

Страница 6: ...that start 192 168 1 x The subnet mask is 255 255 255 0 Step 3 Open the browser like Microsoft Internet Explorer and go to http 192 168 1 1 which is the switch address for example If your PC is properly configured you will see the login page like below Figure 2 Login Popping Up Window NOTE If you do not see the login page check step 1 2 Step 4 Please key in both the default user name admin and the...

Страница 7: ...7 Figure 3 Web Based Management Interface ...

Страница 8: ... Information Web Smart switch interface Figure 4 System Information IP Address Setting To set up static IP address of the switch Web Smart switch interface 1 Click System then IP Setting 2 Set the Mode to Static IP 3 Specify the IP address subnet mask and gateway address 4 Click Apply Figure 5 IP Setting ...

Страница 9: ...ctionality on the interface IPv6 Address Manually sets up a global unicast address by specifying the full address and network prefix length in the Prefix field Default null Prefix Length Define the prefix length as a decimal value indicating how many contiguous bits starting at the left of the address comprise the prefix that is the network portion of the address Default 0 Router Set up the IPv6 a...

Страница 10: ...ssword again to confirm your input 5 Click Save Figure 7 User Account Setting Port Setting To specify options for enabling auto negotiation or manually setting the speed and duplex mode or enabling flow control To set up port configuration in the Web browser 1 Click System Port Setting 2 Select one or more ports to configure 3 Make any required changes to the connection settings 4 Click Apply ...

Страница 11: ...t Auto negotiation enabled Auto Enable auto negotiation When using auto negotiation the optimal settings will be negotiated between the link partners based on their advertised capabilities Auto must be enabled for all 1 Gbps connections 100M Full Support 100 Mbps full duplex operation 100M Half Support 100 Mbps half duplex operation 10M Full Support 10 Mbps full duplex operation 10M Half Support 1...

Страница 12: ...p Web Smart switch interface 1 Click Configuration Link Aggregation Trunk Group Setting 2 Select the trunk group ID to be created or modified 3 Select the trunk type Static or LACP 4 Assign up to four port members to the trunk 5 Click Add Modify Figure 9 Trunk Group Setting ...

Страница 13: ... switch traffic load is distributed evenly across all links in a trunk the hash methods used in the load balance calculation can be selected to provide the best result for trunk connections The following options are supported Source Port All traffic with the same source and destination TCP UDP port number is output on the same link in a trunk Avoid using his mode as a lone option It may overload a...

Страница 14: ...tput on the same link in a trunk This mode works best for switch to router trunk links where traffic through the switch is destined for many different hosts Do not use this mode for switch to server trunk links where the destination IP address is the same for all traffic Destination IP All traffic with the same source and destination IP address is output on the same link in a trunk This mode works...

Страница 15: ...n the switch 3 Specify the LACP System Priority to identify LAGs link aggregation group on the switch 4 Click Apply Figure 11 LACP Setting Hint The following parameters are shown on the LACP Setting LACP Status Specify whether LACP is enabled on this switch LACP will aggregate two or more ports if they belong to the same group LACP can form up to 8 trunks per switch System Priority LACP system pri...

Страница 16: ...each other directly In this way broadcast packets are confined within a VLAN Web Smart switch interface To manage VLAN groups 1 Click Configuration VLAN Static VLAN 2 Select a VLAN ID number 3 Define a name to identify the VLAN 4 Mark the ports to be assigned to the new VLAN as tagged or untagged members 5 Click Add Modify Figure 12 Static VLAN Table Setting Hint The following parameters are shown...

Страница 17: ...rts or trunks to configure 3 Configure the required PVID setting 4 Click Apply Figure 13 VLAN Port Setting Hint The following parameters are shown on the Static VLAN Table Setting Port Select one or more ports to configure Hold down the CTRL key and click port numbers to select multiple ports Hold down the SHIFT key to select a range of ports PVID The VLAN ID assigned to untagged frames received o...

Страница 18: ...Web Smart switch interface To manage stacking VLAN port members 1 Click Configuration VLAN Stacking S VLAN Table 2 Specify the S VLAN ID number 3 Mark the ports to be included as stacking VLAN port members for specified S VLAN 4 Click Add Figure 14 VLAN Stacking Table Setting Hint The following parameters are shown on the VLAN Stacking Table Setting S VLAN ID The VLAN identifier of a stacking VLAN...

Страница 19: ...e Tag Protocol Identifier TPID value must be set for the doubled tagged ports to identify 802 1Q tagged frames Web Smart switch interface To manage stacking VLAN port settings 1 Click Configuration VLAN Stacking S VLAN Setting 2 Specify the Tag Protocol ID number 3 Set the stacking PVID for service provider ports and configure them as Enabled 4 Click Apply Figure 15 VLAN Stacking Setting ...

Страница 20: ...Port VLAN Identifier The PVID determines the stacking VLAN tag for single tagged packets forwarded to an enabled S VLAN port Provider Network Port Set the S VLAN membership mode for the selected interface This mode is used to segregate and preserve customer VLAN IDs for traffic crossing the service provider network Default Disable Enable Indicate a port linked to a service provider an 802 1Q Tunne...

Страница 21: ...ast router Figure 16 Multicast Entry Table Hint The following parameters are shown on the Multicast Entry Table page VID A VLAN on the switch that is forwarding multicast traffic to downstream ports for the specified multicast group address VLAN Name The name of the VLAN on the switch that is forwarding multicast traffic Source IP The IP address of one of the multicast servers transmitting traffic...

Страница 22: ...2 IGMP Snooping IGMP Snooping Internet Group Management Protocol Snooping is a multicast constraining mechanism that runs on Layer 2 switch to manage and control multicast groups Figure 17 IGMP Snooping ...

Страница 23: ...ticast traffic not found in the table is either dropped or flooded throughout the VLAN Default Drop Query Interval Sets the frequency at which the switch sends IGMP host query messages Range 60 600 seconds Default 125 Response Time Set the time between receiving an IGMP Report for an IP multicast address on a port before the switch sends an IGMP Query out of that port and removes the entry from it...

Страница 24: ... IGMP Querier on the VLAN if you want this switch to be elected as querier 5 Click Apply Hint The following parameters are shown on the IGMP Snooping VLAN settings page VLAN ID Specify the ID of a configured VLAN on the switch Range 1 4094 VLAN Name Display the name of the VLAN Snooping State Enable IGMP snooping on the VLAN Default Disabled Querier State Enable IGMP querier on the VLAN Default Di...

Страница 25: ...tings Hint The following parameters are shown on the Spanning Tree settings page Spanning Tree Status Enable Spanning Tree on the switch Default Disabled Force Version Select the type of spanning tree used on this switch Options RSTP or STP Default RSTP Priority Bridge priority is used in selecting the root switch root port and designated port The switch with the highest priority becomes the STP r...

Страница 26: ...cepted as the root switch Root Path Cost The path cost from the root port on this switch to the root switch Root Port The number of the port on this switch that is closest to the root This switch communicates with the root switch through this port If there is no root port then this switch has been accepted as the root switch of the Spanning Tree network Root Maximum Age The maximum time in seconds...

Страница 27: ...ngs Hint The following parameters are shown on the Spanning Tree Port settings page Path Cost This parameter is used by the STP to determine the best path between devices Therefore lower values should be assigned to ports attached to faster media and higher values assigned to ports with slower media Path cost takes precedence over port priority Priority Specify the priority used for this port in t...

Страница 28: ...alse State Displays current state of this port within the Spanning Tree Disabled There is no connection on the port Discarding Port receives STP configuration messages but does not forward packets Learning Port has transmitted configuration messages for an interval set by the Forward Delay parameter without receiving contradictory information Port address table is cleared and the port begins learn...

Страница 29: ...efault port priority for each port on the switch Web Smart switch interface To configure global settings for Spanning Tree 1 Click Configuration QoS Port based Priority 2 For one or a group of ports set the default priority value 3 Click Apply Figure 20 Port based Priority Setting Hint The following parameters are shown on the Port based Priority Setting page Priority The default priority used whe...

Страница 30: ...r different kinds of forwarding Note that all the DSCP values that are not specified are mapped to priority value 0 Web Smart switch interface To configure port level DSCP remarking 1 Click Configuration QoS DSCP based Priority 2 Map one or more DSCP values to a priority value 3 Click Apply Figure 21 DSCP based Priority Setting Hint The following parameters are shown on the DSCP based Priority Set...

Страница 31: ...eues in any way that benefits application traffic for our own network Web Smart switch interface To configure port level DSCP remarking 1 Click Configuration QoS Priority to Queue Mapping 2 Map one or more priority values to a queue ID 3 Click Apply Figure 22 Priority to Queue Mapping Setting Hint The following parameters are shown on the DSCP based Priority Setting page Priority CoS value Range 0...

Страница 32: ...ies This weight sets the frequency at which each queue will be polled for service and subsequently affects the response time for software applications assigned a specific priority value Web Smart switch interface To configure port level DSCP remarking 1 Click Configuration QoS Packet Scheduling 2 Select the scheduling algorithm WFQ or WRR 3 Map scheduling weights to a queue ID or select Strict 4 C...

Страница 33: ... for queues to allocate service time based on WFQ or WRR Queue weights must be configured in ascendant manner assigning more weight to each higher numbered queue Strict priority requires all traffic in the queue to be processed before lower priority queues are serviced LLDP Configurations LLDP is a Layer 2 protocol that uses periodic broadcasts to advertise information about the sending device Web...

Страница 34: ...Time 65536 Therefore the default TTL is 30 3 90 seconds Port Port identifier Range 1 18 State Enable LLDP message transmit and receive modes for LLDP Protocol Data Units Options Disabled Tx Rx Rx only Tx only Default Disabled LLDP Neighbors To display information about devices connected directly to the switch s ports which are advertising information through LLDP Web Smart switch interface To disp...

Страница 35: ...c management of products from different manufacturers Web Smart switch interface To specify SNMP system settings 1 Click Configuration SNMP Setting 2 Enable SNMP for the switch 3 Configure the Name Location and Contact information 4 Define at least one new community string with read write access 5 Delete the default private string for security reasons 6 Click Apply Figure 26 SNMP Setting Community...

Страница 36: ...o both retrieve and modify MIB objects Trap Receivers Setting Traps indicating status changes are issued by the switch to specified trap managers You must specify trap managers so that key events are reported by this switch to your management station using network management software Web Smart switch interface To configure SNMP system settings 1 Click Configuration SNMP Setting 2 Specify the IP ad...

Страница 37: ...t 5 Select the one or more mirrored source ports 6 Click Apply Figure 27 Port mirroring Hint The following parameters are shown on the LLDP Neighbors page Mirror Set Index Display a list of current mirror sessions Mirror Direction Allow you to select which traffic to mirror to the target port Rx receive or Tx transmit Default Rx Mirrored Port List One or more source ports whose traffic will be mon...

Страница 38: ...rized to access the network through that port If a device with an unauthorized MAC address attempts to use the switch port the intrusion will be detected and the switch can automatically take a specified action Web Smart switch interface To configure port security 1 Click Configuration Port Security 2 Select the ports to configure 3 Set Security to Enable 4 Configure the maximum number of MAC addr...

Страница 39: ... a port Range 0 16447 where 0 means disabled Action Indicate the action to be taken when a port security violation is detected Trap to CPU Send an SNMP trap message This is the default Drop Drop other traffic from the port Forward No action is taken Traffic is forwarded as normal ...

Страница 40: ...s feature the traffic rate will be monitored by the hardware to verify conformity Non conforming traffic is dropped conforming traffic is forwarded without any changes Input and output rate limits can be enabled or disabled for individual interfaces Web Smart switch interface To configure bandwidth control 1 Click Configuration Bandwidth Control 2 Select the ports to configure 3 Set Type to Ingres...

Страница 41: ...41 Type Specify ingress or egress traffic Default Ingress State Enable or disable the rate limit Default Disabled Rate Kbit sec Set the rate limit level Range 0 1048544 Kbps in steps of 16 ...

Страница 42: ...ytes Web Smart switch interface To configure Jumbo Frames 1 Click Configuration Jumbo Frame 2 Select the frame size to configure 3 Click Apply Figure 30 Jumbo Frame Setting Hint The following parameters are shown on the LLDP Neighbors page Jumbo Frame Bytes Configure support for jumbo frames Options 9216 1522 1536 1552 Bytes Default 9216 bytes ...

Страница 43: ...ecify a netmask to define a single IP address or an address range 4 Select the table entry to activate the filter 5 Click Apply Figure 31 Management Access Filter Hint The following parameters are shown on the LLDP Neighbors page IP Address An IP address specifies a range that is allowed management access to the switch IP Netmask A mask that specifies a single IP address or a range of IP addresses...

Страница 44: ...y Figure 32 Power over Ethernet Hint The following parameters are shown on the Power over Ethernet page PD Enable the powered devices The consumption power in watt will be shown in the table below Class Indicate the PD classification Consumption Power W Indicate the PD power consumption Once the PSE has detected the PD s power class the PSE can manage the power allocation by subtracting the PD s c...

Страница 45: ...e following parameters are shown on the MAC Address Information page No The number of the address entry in the forwarding table MAC Address Physical address associated with this interface VLAN ID The ID of a configured VLAN 1 4094 Type Indicate if the MAC address has been dynamically learned or configured as a static entry Port Indicate the port Clear Dynamic Entries Remove all dynamically learned...

Страница 46: ...ress Static MAC 2 Specify the MAC address to be statically assigned 3 Specify the VLAN ID 4 Select the port or trunk interface for the static assignment 5 Click Add Figure 34 Static MAC Setting Hint The following parameters are shown on the Static MAC Setting page MAC Address Physical address of a device mapped to an interface VLAN ID The ID of a configured VLAN 1 4094 Port Port or trunk associate...

Страница 47: ...the source destination or both 5 Set a name to describe the filter 6 Click Add Figure 35 MAC Filtering Setting Hint The following parameters are shown on the LLDP Neighbors page MAC Address Physical address of a device VLAN ID The ID of a configured VLAN 1 4094 Filter Filter traffic matching the MAC address in packets Options Source MAC Destination MAC Both Default Source MAC Destination MAC Filte...

Страница 48: ...er IP Address of the authentication server Server Port Network UDP port of RADIUS server used for authentication messages Range 1024 65535 Default 1812 Shared Key Encryption key used for RADIUS server messages Do not use blank spaces in the string Maximum length 30 characters Retype Shared Key Re type the string entered in the previous field to ensure no errors were made The switch will not change...

Страница 49: ...e 37 802 1x Port Setting Hint The following parameters are shown on the 802 1X Port Setting page Mode Sets the authentication mode to one of the following options Force Authorized Force the port to grant access to all clients either dot1x aware or otherwise Force Unauthorized Force the port to deny access to all clients either dot1x aware or otherwise Authentication Require a dot1x aware client to...

Страница 50: ...Click Security IP Filter Setting 2 Select one or more ports to configure 3 Select the mode Static and set an IP address or select DHCP 4 Select ports on which to allow traffic to DHCP servers 5 Click Apply Figure 38 IP Filter Configurations Hint The following parameters are shown on the IP Filter Configurations page Mode Configure the switch to filter traffic based on IP addresses Default IP Filte...

Страница 51: ...e that is allowed access through the switch IP Netmask A mask that specifies a single IP address or defines a range of IP addresses Default 255 255 255 0 DHCP Server Allowed Permit traffic from a DHCP server through the specified ports Default All ports allowed ...

Страница 52: ...ng the specified threshold will then be dropped Web Smart switch interface To configure Storm Control settings 1 Click Security Storm Control 2 Select the Storm Control type 3 Select one or more ports to configure 4 Set the State to On and set the threshold rate 5 Click Apply Figure 39 Storm Control settings Hint The following parameters are shown on the LLDP Neighbors page Storm Type Select the s...

Страница 53: ...gs 1 Click Security Port Isolation 2 Select one or more ports to configure 3 Select one or more ports to which traffic can be forwarded and received 4 Click Apply Figure 40 Port Isolation Hint The following parameters are shown on the Port Isolation page Port Select port and trunk interfaces Port Range 1 18 Port Isolation List Select port and trunk interfaces to which traffic can be forwarded and ...

Страница 54: ...t packets This function can be used to prevent malicious viruses or worm attacks Web Smart switch interface To configure Defence Engine settings 1 Click Security Defence Engine 2 Set Defence Engine status to Enabled 3 Click Apply Figure 41 Defence Engine Hint The following parameters are shown on the LLDP Neighbors page Defence Engine Enable or disable the feature Default Enabled ...

Страница 55: ...tics Information Hint The following parameters are shown on the Port Statistics Information page Port The port number State Display the link state of port interfaces Enabled or Disabled Link Status Display the link state of the port interface Link Up or Link Down TxGoodPkt The total number of packets transmitted out of the interface TxBadPkt The total number of outbound packets that could not be t...

Страница 56: ...h s firmware After the software file is uploaded the switch prompts for a reboot Figure 43 Http Upgrade Hint The following parameters are shown on the Http Upgrade page HTTP Configuration Backup Click the Backup button to save the current configuration settings to a file on the local web management station HTTP Configuration Restore Restore previously saved configuration settings to the switch fro...

Страница 57: ... Factory Defaults To restore factory defaults Web Smart switch interface To click Tools Reset then click the Reset button The reset will be complete when the Web browser displays the login page Figure 44 Reset ...

Страница 58: ...l IEEE 802 3ad Link Aggregation IEEE 802 3 10Base T Ethernet IEEE 802 3ab Twisted Pair Gigabit Ethernet IEEE 802 3ad Link Aggregation Control Protocol LACP IEEE 802 3af Power over Ethernet 802 3at Type 1 IEEE 802 3at Power over Ethernet 802 3at Type 2 IEEE 802 3u 100Base TX Fast Ethernet IEEE 802 3x flow control for full duplex mode General Media support 10Base T Cat3 4 5 UTP STP RJ45 100Base TX C...

Страница 59: ... unicast rate IGMP Snooping Quality of Service QoS port based or DSCP Integrated ICMP Ping client sends ping requests to other network nodes SNMPv1 v2c Simple Network Management Protocol LAN settings IP address Gateway etc Certifications FCC Class A CE LEDs PoE Power Link activity Power Input 90 260 V AC 50 60 Hz Power consumption 180 Watts maximum Environmental Metal housing Dimensions 440 W x 22...

Страница 60: ...60 ...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды