manualshive.com logo in svg

GeoVision GV-POE0812, Руководство пользователя

Поделиться
Скачать
GeoVision GV-POE0812 Скачать руководство пользователя страница 88

 

This option is only available for single-client modes, i.e. 

 Port-based 

802.1X 

 Single 

802.1X 

RADIUS attributes used in identifying a QoS Class: 

The User-Priority-Table attribute defined in RFC4675 forms the basis for identifying the QoS Class 
in an Access-Accept packet. 

Only the first occurrence of the attribute in the packet will be considered, and to be valid, it must 
follow this rule: 

 

All 8 octets in the attribute's value must be identical and consist of ASCII characters in the 

range '0' - '7', which translates into the desired QoS Class in the range [0; 7]. 

RADIUS-Assigned VLAN Enabled 

When RADIUS-Assigned VLAN is both globally enabled and enabled (checked) for a given port, the 
switch reacts to VLAN ID information carried in the RADIUS Access-Accept packet transmitted by 
the RADIUS server when a supplicant is successfully authenticated. If present and valid, the port's 
Port VLAN ID will be changed to this VLAN ID, the port will be set to be a member of that VLAN ID, 
and the port will be forced into VLAN unaware mode. Once assigned, all traffic arriving on the port 
will be classified and switched on the RADIUS-assigned VLAN ID. 

If (re-)authentication fails or the RADIUS Access-Accept packet no longer carries a VLAN ID or it's 
invalid, or the supplicant is otherwise no longer present on the port, the port's VLAN ID is 
immediately reverted to the original VLAN ID (which may be changed by the administrator in the 
meanwhile without affecting the RADIUS-assigned). 

This option is only available for single-client modes, i.e. 

 Port-based 

802.1X 

 Single 

802.1X 

For trouble-shooting VLAN assignments, use the "Monitor

→

VLANs

→

VLAN Membership and VLAN 

Port" pages. These pages show which modules have (temporarily) overridden the current Port 
VLAN configuration. 

 

RADIUS attributes used in identifying a VLAN ID: 

RFC2868 and RFC3580 form the basis for the attributes used in identifying a VLAN ID in an 
Access-Accept packet. The following criteria are used: 

 

The Tunnel-Medium-Type, Tunnel-Type, and Tunnel-Private-Group-ID attributes must all be 

present at least once in the Access-Accept packet. 

 

80 

Содержание GV-POE0812

Страница 1: ...GV POE0812 User s Manual GV PoE Switch POE0812 A Before attempting to connect or operate this product please read these instructions carefully and save this manual for future use...

Страница 2: ...errors or omissions No liability is assumed for incidental or consequential damages arising from the use of the information or products contained herein Features and specifications are subject to cha...

Страница 3: ...face 20 4 Web Management 22 4 1 Web Management Configure 23 4 1 1 Configuration System 25 4 1 1 1 System Information 25 4 1 1 2 System IP 26 4 1 1 3 System NTP 29 4 1 1 4 System Time 30 4 1 1 5 System...

Страница 4: ...S Network Access Server 73 4 1 5 11 Security Network ACL 83 4 1 5 11 1 Security Network ACL Ports 83 4 1 5 11 2 Security Network ACL Rate Limiter 85 4 1 5 11 3 Security Network ACL Access Control List...

Страница 5: ...ion 141 4 1 11 2 2 IPMC MLD Snooping VLAN Configuration 143 4 1 11 2 3 IPMC MLD Snooping Port Filtering Profile 146 4 1 12 Configuration LLDP 147 4 1 12 1 LLDP LLDP 147 4 1 12 2 LLDP LLDP MED 150 4 1...

Страница 6: ...Monitor System 214 4 2 1 1 System Information 214 4 2 1 2 System CPU Load 216 4 2 1 3 System IP Status 217 4 2 1 4 System Log 219 4 2 1 5 System Detailed Log 220 4 2 2 Monitor Green Ethernet 221 4 2...

Страница 7: ...Alarm 268 4 2 5 4 4 Security Switch RMON Events 270 4 2 6 Monitor LACP 271 4 2 6 1 LACP System Status 271 4 2 6 2 LACP Port Status 272 4 2 6 3 LACP Port Statistics 273 4 2 7 Monitor Loop Protection 27...

Страница 8: ...cs Ping 316 4 3 2 Diagnostics Ping6 317 4 3 3 Diagnostics VeriPHY 319 4 4 Web Management Maintenance 321 4 4 1 Maintenance Restart Device 321 4 4 2 Maintenance Factory Defaults 322 4 4 3 Maintenance S...

Страница 9: ...Starting 1 1 1 Before Starting In Before Starting This section contains introductory information which includes Safety Precautions Intended Readers Icons for Note Caution and Warning Product Package C...

Страница 10: ...e will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is...

Страница 11: ...and terminologies 1 3 Icons for Caution and Warning To install configure use and maintain this product properly please pay attention when you see these icons in this manual A Note icon indicates impo...

Страница 12: ...e which should include the following items 1 GV POE0812 x 1 2 Screw x 8 Rack Mount Kit x 1 3 AC Power Cord x 1 4 Console cable x 1 5 Software CD x 1 6 GV POE0812 Quick Start Guide x 1 Note If any item...

Страница 13: ...nformation GV LC and GV LC10 The SFP Transceiver is designed to plug into the SFP port of the GV POE Switch and is the interface between the switch and optical fiber cables This product complies with...

Страница 14: ...t Overview This section will give you an overview of this product including its feature functions and hardware software specifications Product Brief Description Product Specification Hardware Descript...

Страница 15: ...t af compliant network accessories It also features PoE awareness to verify whether the network device receive power is IEEE 802 3at af compliant or only the data will be sent through LAN cable By add...

Страница 16: ...lity on Powered Device Powered Device Alive Check Powered Device Classification Enable Disable PoE Per Port Priority Setting Per Port Power Level Setting Per Port Power Management per port Overloading...

Страница 17: ...ation HTTP SSL Secure Web SSH v2 0 Secured Telnet Session MAC IP Filter Management Command Line Interface CLI Web Based Management Telnet SNMP WEB SSH TELNET Access Management Filtering Firmware Upgra...

Страница 18: ...net PoE IEEE 802 3az Energy Efficient Ethernet EEE IEEE 802 3x Flow Control IEEE 802 1Q VLAN IEEE802 1v Protocol VLAN IEEE 802 1p Class of Service IEEE 802 1D Spanning Tree IEEE 802 1w Rapid Spanning...

Страница 19: ...Full Management PoE switch and gives a physical and functional overview on the certain switch Front Panel The front panel of the Full Management PoE switch consists of 8 10 100 1000 Base TX RJ 45 port...

Страница 20: ...f No Powered Device connected On Linked Up SFP Green Blinking 9TX 9FX 10TX 10FX Data activating Note If a new powered device is connected to the PoE switch and the PoE budget is depleted the PoE LED w...

Страница 21: ...Product Overview 2 Rear Panel The rear panel of the Full Management PoE switch contains a power switch and an IEC 60320 plug for power supply 13...

Страница 22: ...nd the transmission distance wavelength fiber cable can meet your request It is suggested to purchase the SFP transceiver with the switch provider to avoid any incompatible issue The way to connect th...

Страница 23: ...figure the switch via RS232 console cable without having the switch or your PC connecting to a network Out of band management provides a dedicated and secure way for switch management In Band Manageme...

Страница 24: ...CLI Command Line Interface your PC must have terminal emulator software such as HyperTerminal or PuTTY installed Some operating systems such as Microsoft Windows XP have HyperTerminal already installe...

Страница 25: ...t 17 3 4 Set the serial port settings as Baud Rate 115200 Data Bit 8 Parity None Stop Bit 1 Row Control None 5 The system will prompt you to login the out of band management CLI The default username p...

Страница 26: ...o configure your PC properly 1 Verify that the network interface card NIC of your PC is operational and properly installed and that your operating system supports TCP IP protocol 2 Connect your PC wit...

Страница 27: ...s of the switch in the web browser s URL field and press Enter 6 The web browser will prompt you to sign in The default username password for the configuration web page is admin admin For more informa...

Страница 28: ...twork environment according to the previous chapter 3 2 Preparation for Web Interface Telnet interface can be accessed via Microsoft CMD command However SSH interface can only be accessed via dedicate...

Страница 29: ...time a PuTTY Security Alert window will pop up Please press Yes to continue This window won t pop up if you re using telnet to connect to the in band management CLI 4 PuTTY will prompt you to login af...

Страница 30: ...in the management web page can be divided into the following 4 categories which will be discussed in detail in this chapter Web Management Configure Web Management Monitor Web Management Diagnostic W...

Страница 31: ...can enable loop protection function here to prevent network loop Spanning Tree Spanning Tree Protocol is a network designed to ensure a loop free network and provide redundant links that serve as aut...

Страница 32: ...d voice quality QoS QoS stands for Quality of Service which allows you to control the network priority which packet gets top priority to transmit and which gets low priority via IEEE 802 1p or DSCP Mi...

Страница 33: ...this is the switch s fully qualified domain name A domain name is a text string drawn from the alphabet A Z a z digits 0 9 minus sign No space characters are permitted as part of a name The first cha...

Страница 34: ...switch The following modes are supported From any DHCP interfaces The first DNS server offered from a DHCP lease to a DHCP enabled interface will be used No DNS server No DNS server will be used Confi...

Страница 35: ...e in dotted decimal notation If DHCP is enabled this field configures the fallback address The field may be left blank if IPv4 operation on the interface is not desired or no DHCP fallback address is...

Страница 36: ...it will match anything Gateway The IP address of the IP gateway Valid format is dotted decimal notationor a valid IPv6 notation Gateway and Network must be of the same type Next Hop VLAN Only for IPv6...

Страница 37: ...28 bit records represented as eight fields of up to four hexadecimal digits with a colon separating each field For example fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be used as a...

Страница 38: ...tem Time Setting You can either input the current time manually in the field or you can click the Time Sync button to synchronize your PC s current time to the switch Daylight Saving Time Configuratio...

Страница 39: ...inute End time settings Week Select the ending week number Day Select the ending day Month Select the ending month Hours Select the ending hour Minutes Select the ending minute Offset settings Offset...

Страница 40: ...et will always send out even if the system log server does not exist Possible modes are Enabled Enable server mode operation Disabled Disable server mode operation Server Address Indicates the IPv4 ho...

Страница 41: ...device has all circuits powered up when traffic is transmitted The devices can exchange wakeup time information using the LLDP protocol EEE works for ports in auto negotiation mode where the port is n...

Страница 42: ...ine if cable is inserted PerfectReach Cable length power savings enabled PerfectReach works by determining the cable length and lowering the power for ports with short cables EEE Enable or disable the...

Страница 43: ...e port Configured Link Speed Selects any available link speed for the given switch port Only speeds supported by the specific port is shown Possible speeds are Disabled Disables the switch port operat...

Страница 44: ...the result of the last Auto Negotiation Check the configured column to use flow control This setting is related to the setting for Configured Link Speed Maximum Frame Size Enter the maximum frame size...

Страница 45: ...disable DHCP server per VLAN VLAN Range Indicate the VLAN range in which DHCP server is enabled or disabled The first VLAN ID must be smaller than or equal to the second VLAN ID BUT if the VLAN range...

Страница 46: ...sible modes are Enabled Enable DHCP server per VLAN Disabled Disable DHCP server pre VLAN Buttons Add VLAN Range Click to add a new VLAN range Save Click to save changes Reset Click to undo any change...

Страница 47: ...efine the IP range to be excluded IP addresses The first excluded IP must be smaller than or equal to the second excluded IP BUT if the IP range contains only 1 excluded IP then you can just input it...

Страница 48: ...Configure the pool name that accepts all printable characters except white space If you want to configure the detail settings you can click the pool name to go into the configuration page Type Displa...

Страница 49: ...ent 41 4 Lease Time Display lease time of the pool Buttons Add New Pool Click to add a new DHCP pool Save Click to save changes Reset Click to undo any changes made locally and revert to previously sa...

Страница 50: ...arded to trusted ports and only allow reply packets from trusted ports Disabled Disable DHCP snooping mode operation Port Mode Configuration Indicates the DHCP snooping port mode Possible port modes a...

Страница 51: ...isabled Disable DHCP relay mode operation Relay Server Indicates the DHCP relay server IP address Relay Information Mode Indicates the DHCP relay information mode option operation The option 82 circui...

Страница 52: ...hen relay information mode is disabled Possible policies are Replace Replace the original relay information when a DHCP message that already contains it is received Keep Keep the original relay inform...

Страница 53: ...ink to configure user account Privilege Level The privilege level of the user The allowed range is 1 to 15 If the privilege level value is 15 it can access all groups i e that is granted the fully con...

Страница 54: ...should be same or greater than the group privilege level to have the access of that group By default setting most groups privilege level 5 has the read only access and privilege level 10 has the read...

Страница 55: ...Web Management 4 4 1 5 2 Security Switch Privilege Level This page provides an overview of the privilege levels 47...

Страница 56: ...ept VeriPHY Diagnostics ping and VeriPHY Maintenance CLI System Reboot System Restore Default System Password Configuration Save Configuration Load and Firmware Load Web Users Privilege Levels and eve...

Страница 57: ...ote servers are offline In this case the next method is tried Each method is tried from left to right and continues until a method either approves or rejects a user If a remote server is used for prim...

Страница 58: ...age Mode Indicates the SSH mode operation Possible modes are Enabled Enable SSH mode operation Disabled Disable SSH mode operation Buttons Save Click to save changes Reset Click to undo any changes ma...

Страница 59: ...ed Enable HTTPS mode operation Disabled Disable HTTPS mode operation Automatic Redirect Indicates the HTTPS redirect mode operation Automatically redirects web browser to an HTTPS connection when both...

Страница 60: ...ess management entry End IP address Indicates the end IP address for the access management entry HTTP HTTPS Indicates that the host can access the switch from HTTP HTTPS interface if the host IP addre...

Страница 61: ...xibility to configure security name than a SNMPv1 or SNMPv2c community string In addition to community string a particular range of source addresses can be used to restrict source subnet Write Communi...

Страница 62: ...trap supported version 3 Trap Community Indicates the community access string when sending SNMP trap packet The allowed string length is 0 to 255 and the allowed content is ASCII characters from 33 to...

Страница 63: ...le modes are Enabled Enable SNMP trap inform mode operation Disabled Disable SNMP trap inform mode operation Trap Inform Timeout seconds Indicates the SNMP trap inform timeout The allowed range is 0 t...

Страница 64: ...56 Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved values...

Страница 65: ...ion Configurations Name Indicates the trap Configuration s name Indicates the trap destination s name Enable Indicates the trap destination mode operation Possible modes are Enabled Enable SNMP trap m...

Страница 66: ...ecords represented as eight fields of up to four hexadecimal digits with a colon separating each field For example fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be used as a shorthan...

Страница 67: ...llowed content is ASCII characters from 33 to 126 The community string will be treated as security name and map a SNMPv1 or SNMPv2c community string Source IP Indicates the SNMP access source address...

Страница 68: ...keys In a simple agent usmUserEngineID is always that agent s own snmpEngineID value The value can also take th value of the snmpEngineID of a remote SNMP engine with which this user can communicate I...

Страница 69: ...phrase For MD5 authentication protocol the allowed string length is 8 to 32 For SHA authentication protocol the allowed string length is 8 to 40 The allowed content is ASCII characters from 33 to 126...

Страница 70: ...Mod Se rity Name cu g the security name that this entry should belong to The allowed string length is 1 A string identifyin to 32 and the allowed content is ASCII characters from 33 to 126 Group Name...

Страница 71: ...d In general if included An optional flag to indicate that this view subtree should be include excluded An optional flag to indicate that this view subtree should be excluded a view entry s view type...

Страница 72: ...y model that this entry should belong to Possible security models are NoAuth NoPriv No authentication and no privacy Auth NoPriv Authentication and no privacy Auth Priv Authentication and privacy Read...

Страница 73: ...t save ID Indicates the index of the entry The range is from 1 to 65535 Data Source switch the value must add D 1 for example if the port is switch 3 port 5 the value is 2005 Indicates the port ID whi...

Страница 74: ...mple if the port is switch 3 port 5 the value is 2005 Interval Indicates the interval in seconds for sampling the history statistics data The range is from 1 to 3600 default value is 1800 seconds Buck...

Страница 75: ...umber of uni cast packets delivered to a higher lay InNUcastPkts The number of broad cast and multi cast packets delivered to a higher layer protocol InDiscards The number of inbound packets that are...

Страница 76: ...value is larger than the rising threshold FallingTrigger alarm when the first RisingOrFallingTrigger alarm when the first value is larger than the rising th the falling threshold default Ri g Threshol...

Страница 77: ...ace including framing characters r layer protocol mal Log The number of uni cast packets delivered to a highe snmptrap The number of broad cast and multi cast packets delivered to a higher layer proto...

Страница 78: ...bled other s may still use the underlying functionality but limit checks and corresponding actions are Indicates if Limit Control module disabled Aging Enabled If checked secured MAC addresses are sub...

Страница 79: ...ceeded the corresponding action is taken ew w from the same pool it exceed The stack is born with a total number of MAC addresses from which all ports draw whenever a n MAC address is seen on a Port S...

Страница 80: ...state c Action is set to None or Trap Shutdown Indicates that the port is shut down by the Limit Control module This state can only be shown if Action is set to Shu Re open Button If a port is shutdow...

Страница 81: ...one user on the same port and doesn t require the user to have special 802 1X supplicant software installed on his sy switch uses the user s MAC address to authenticate against the backend server Int...

Страница 82: ...C Based Auth When the NAS module use module needs to check for activity on the MAC address in question at regular intervals and free resources if no activity is seen within a given period of time This...

Страница 83: ...DIUS assigned VLAN provides a means to centrally control the VLAN on which a successfully elow ed checkbox provides a quick way to globally enable disable authenticated supplicant is placed on the swi...

Страница 84: ...Valid values are in the range 1 255 Allow Guest VLAN if EAPOL Seen The switch remembers if an EAPOL frame has been received on the port for the life time of the port if an e e Guest VLAN option is gl...

Страница 85: ...s and responses between the supplicant and the authentication server Frames sent between the supplicant and the switch are special 802 1X frames known as EAPOL EAP Over LANs frames EAPOL frames encaps...

Страница 86: ...the Single 802 1X variant Single 802 1X is really not an IEEE standard but features many of the same characteristics as does port based 802 1X In Single 802 1X at most one supplicant can get authenti...

Страница 87: ...ation which in turn causes the switch to open up or block traffic for that particular client using the Port Security module Only then will frames from the client be forwarded on the switch There are n...

Страница 88: ...be a member of that VLAN ID and the port will be forced into VLAN unaware mode Once assigned all traffic arriving on the port will be classified and switched on the RADIUS assigned VLAN ID If re auth...

Страница 89: ...st VLAN enabled port s link comes up the switch starts transmitting EAPOL Request Identity frames If the number of transmissions of such frames exceeds Max Reauth Count and no EAPOL frames have been r...

Страница 90: ...are available for each row The buttons are only enabled when authentication is globally enabled and the port s Admin State is in an EAPOL based or MAC based mode Clicking these buttons will not cause...

Страница 91: ...e default value is Permit Rate Limiter ID Select which rate limiter to apply on this port The allowed values are Disabled or the values 1 through 16 The default value is Disabled Port Redirect Select...

Страница 92: ...t state of this port The allowed values are Enabled To reopen ports by changing the volatile port configuration of the ACL user module Disabled To close ports by changing the volatile port configurati...

Страница 93: ...ID The rate limiter ID for the settings contained in the same row Rate The allowed values are 0 131071 in pps Unit Specify the rate unit The allowed values are pps packets per second kbps Kbits per s...

Страница 94: ...the ACE Frame Type Indicates the frame type of the ACE Possible values are Any The ACE will match any frame type EType The ACE will match Ethernet Type frames Note that an Ethernet Type based ACE wil...

Страница 95: ...Buttons You can modify each ACE Access Control Entry in the table using the following buttons Inserts a new ACE before the current row Edits the ACE row Moves the ACE up the list Moves the ACE down th...

Страница 96: ...he number of the switch port Policy Filter Specify the policy number filter for this ACE Any No policy filter is specified policy filter status is don t care Specific If you want to filter a specific...

Страница 97: ...t hits this ACE is dropped Rate Limiter Specify the rate limiter in number of base units The allowed range is 1 to 16 Disabled indicates that the rate limiter operation is disabled Port Redirect Frame...

Страница 98: ...xxxxxxxxxxxx x is a hexadecimal digit A frame that hits this ACE matches this SMAC value DMAC Filter Specify the destination MAC filter for this ACE Any No DMAC filter is specified DMAC filter status...

Страница 99: ...pecify the tag priority for this ACE A frame that hits this ACE matches this tag priority The allowed number range is 0 to 7 The value Any means that no tag priority is specified tag priority is don t...

Страница 100: ...s specific ACE Any No target IP filter is specified Target IP filter is don t care Host Target IP filter is set to Host Specify the target IP address in the Target IP Address field that appears Networ...

Страница 101: ...P frames where the HLN is equal to Ethernet 0x06 and the PLN is equal to IPv4 0x04 Any Any value is allowed don t care IP Specify whether frames can hit the action according to their ARP RARP hardware...

Страница 102: ...4 TCP protocol frames Extra fields for defining TCP parameters will appear These fields are explained later in this help file IP Protocol Value When Specific is selected for the IP protocol value you...

Страница 103: ...SIP Address and SIP Mask fields that appear SIP Address When Host or Network is selected for the source IP filter you can enter a specific SIP address in dotted decimal notation SIP Mask When Network...

Страница 104: ...ue The allowed range is 0 to 255 A frame that hits this ACE matches this ICMP value ICMP Code Filter Specify the ICMP code filter for this ACE Any No ICMP code filter is specified ICMP code filter sta...

Страница 105: ...er you can enter a specific TCP UDP source value The allowed range is 0 to 65535 A frame that hits this ACE matches this TCP UDP source value TCP UDP Source Range When Range is selected for the TCP UD...

Страница 106: ...are TCP SYN Specify the TCP Synchronize sequence numbers SYN value for this ACE 0 TCP frames where the SYN field is set must not be able to match this entry 1 TCP frames where the SYN field is set mus...

Страница 107: ...s ACE Any No EtherType filter is specified EtherType filter status is don t care Specific If you want to filter a specific EtherType filter with this ACE you can enter a specific EtherType value A fie...

Страница 108: ...l Mode and Port Mode on a given port are enabled IP Source Guard is enabled on this given port Max Dynamic Clients Specify the maximum number of dynamic clients that can be learned on given port This...

Страница 109: ...ort The logical port for the settings VLAN ID The vlan id for the settings IP Address Allowed Source IP address MAC Address Allowed Source MAC address Buttons Add New Entry Click to add a new entry to...

Страница 110: ...is enabled on this given port Possible modes are Enabled Enable ARP Inspection operation Disabled Disable ARP Inspection operation If you want to inspect the VLAN configuration you have to enable the...

Страница 111: ...to the port setting There are four log types and possible types are None Log nothing Deny Log denied entries Permit Log permitted entries ALL Log all entries Buttons Save Click to save changes Reset C...

Страница 112: ...try of the currently displayed VLAN entry as a basis for the next lookup When the end is reached the warning message is shown in the displayed table Use the button to start over VLAN Mode Configuratio...

Страница 113: ...r the settings VLAN ID The vlan id for the settings MAC Address Allowed Source MAC address in ARP request packets IP Address Allowed Source IP address in ARP request packets Buttons Add New Entry Clic...

Страница 114: ...the Refresh button will update the displayed table starting from that or the closest next Dynamic ARP Inspection Table match In addition the two input fields will upon a Refresh button click assume t...

Страница 115: ...fields Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved values Updates the table starting from the first entry in the Dynamic ARP Inspection Table...

Страница 116: ...server has not responded after the last retransmit it is considered to be dead Deadtime Deadtime which can be set to a number between 0 to 1440 minutes is the period during which the switch will not...

Страница 117: ...not included in the packet Server Configuration The table has one row for each RADIUS server and a number of columns which are Delete To delete a RADIUS server entry check this box The entry will be...

Страница 118: ...added to the table and the RADIUS server can be configured as needed Up to 5 servers are supported The Delete button can be used to undo the addition of the new server Buttons Save Click to save chan...

Страница 119: ...espond to a previous request This will stop the switch from continually trying to contact a server that it has already determined as dead Setting the Deadtime to a value greater than 0 zero will enabl...

Страница 120: ...he global key Adding a New Server Click Add New Server button to add a new TACACS server An empty row is added to the table and the TACACS server can be configured as needed Up to 5 servers are suppor...

Страница 121: ...s The Destination MAC Address can be used to calculate the destination port for the frame Check to enable the use of the Destination MAC Address or uncheck to disable By default Destination MAC Addres...

Страница 122: ...for the settings contained in the same row Group ID Normal indicates there is no aggregation Only one group ID is valid per port Port Members Each switch port is listed for each group ID Select a rad...

Страница 123: ...1 100Mb 2 1Gb 3 Using the Specific setting a user defined value can be entered Ports with the same Key value can participate in the same aggregation group while ports with different keys cannot Role...

Страница 124: ...Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved values 116...

Страница 125: ...r loop protections is enabled as a whole Transmission Time The interval between each loop protection PDU sent on each port valid values are 1 to 10 seconds Shutdown Time The period in seconds for whic...

Страница 126: ...ormed when a loop is detected on a port Valid values are Shutdown Port Shutdown Port and Log or Log Only Tx Mode Controls whether the port is actively generating loop protection PDU s or whether it is...

Страница 127: ...te MAC address of the switch forms a Bridge Identifier For MSTP operation this is the priority of the CIST Otherwise this is the priority of the STP RSTP bridge Forward Delay The delay used by STP Bri...

Страница 128: ...l disable itself upon reception of a BPDU The port will enter the error disabled state and will be removed from the active topology Port Error Recovery Control whether a port in the error disabled sta...

Страница 129: ...MSTI mapping Bridges must share the name and revision see below as well as the VLAN to MSTI mapping configuration in order to share spanning trees for MSTI s Intra region The name is at most 32 chara...

Страница 130: ...range xx yy each of which must be separated with comma and or space A VLAN can only be mapped to one MSTI An unused MSTI should just be left empty I e not having any VLANs mapped to it Example 2 5 20...

Страница 131: ...e instance The CIST is the default instance which is always active Priority Controls the bridge priority Lower numeric values have better priority The bridge priority plus the MSTI instance number con...

Страница 132: ...rols whether STP is enabled on this switch port Path Cost Controls the path cost incurred by the port The Auto setting will set the path cost as appropriate by the physical link speed using the 802 1D...

Страница 133: ...to a core region of the network influence the spanning tree active topology possibly because those bridges are not under the full control of the administrator This feature is also known as Root Guard...

Страница 134: ...tion to the forwarding state is faster for point to point LANs than for shared media Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved valu...

Страница 135: ...ggregation settings are stack global Apart from the selected MSTI the STP MSTI port settings also relate to the currently selected stack unit as reflected by the page header Port The switch port numbe...

Страница 136: ...e used to control priority of ports having identical port cost See above Buttons Get Click to retrieve settings for a specific MSTI Save Click to save changes Reset Click to undo any changes made loca...

Страница 137: ...based on profile settings only when the global profile mode is enabled Delete Check to delete the entry The designated entry will be deleted during the next save Profile Name The name used for indexin...

Страница 138: ...he rules of the designated profile by using the following buttons Navigate List the rules associated with the designated profile Edit Adjust the rules associated with the designated profile Buttons Ad...

Страница 139: ...characters At least one alphabet must be present Start Address The starting IPv4 IPv6 Multicast Group Address that will be used as an address range End Address The ending IPv4 IPv6 Multicast Group Ad...

Страница 140: ...sends an IGMP MLD report message to Switch A to join the appropriate multicast group address Uplink ports that send and receive multicast data to and from the multicast VLAN are called MVR source port...

Страница 141: ...l frames will be sent as Untagged or Tagged with MVR VID The default is Tagged Priority Specify how the traversed IGMP MLD control frames will be sent in prioritized manner The default Priority is 0 L...

Страница 142: ...and should only receive multicast data It does not receive data unless it becomes a member of the multicast group by issuing IGMP MLD messages Note MVR source ports are not recommended to be overlapp...

Страница 143: ...l takes effect only when IGMP Snooping is enabled When IGMP Snooping is disabled unregistered IPMCv4 traffic flooding is always active in spite of this setting IGMP SSM Range SSM Source Specific Multi...

Страница 144: ...router port the whole aggregation will act as a router port Fast Leave Enable the fast leave on the port Throttling Enable to limit the number of multicast groups to which a switch port can belong But...

Страница 145: ...rrently displayed entry as a basis for the next lookup When the end is reached the text No more entries is shown in the displayed table Use the button to start over IGMP Snooping VLAN Table Columns De...

Страница 146: ...rity value is 0 RV Robustness Variable The Robustness Variable allows tuning for the expected packet loss on a network The allowed range is 1 to 255 default robustness variable value is 2 QI Query Int...

Страница 147: ...d Buttons Refresh Refreshes the displayed table starting from the VLAN input fields Updates the table starting from the first entry in the VLAN Table i e the entry with the lowest VLAN ID Updates the...

Страница 148: ...port Summary about the designated profile will be shown by clicking the view button Profile Management Button You can inspect the rules of the designated profile by using the following button Navigat...

Страница 149: ...affic flooding The flooding control takes effect only when MLD Snooping is enabled When MLD Snooping is disabled unregistered IPMCv6 traffic flooding is always active in spite of this setting MLD SSM...

Страница 150: ...an aggregation member port is selected as a router port the whole aggregation will act as a router port Fast Leave Enable the fast leave on the port Throttling Enable to limit the number of multicast...

Страница 151: ...sest VLAN Table match The button will use the last entry of the cu the next lookup When the end is reached the text No more entries is shown in the displayed table Use the button to start over MLD Sno...

Страница 152: ...imum Response Code seconds default query response The Maximum Response D inserted into the periodic General Queries The allowed range is 0 to 31744 in tenths of interval is 100 in tenths of seconds 10...

Страница 153: ...ntly AN Click to add new MLD VLAN Specify the VID and s ges made locally and revert to previously Updates the table starting from the first entry in the VLAN Table i e the entry with the lowest VLAN I...

Страница 154: ...ort Summary about the designated profile will be shown by clicking the view button Profile Management Button You can inspect the rules of the designated profile by using the following button List the...

Страница 155: ...s are restricted to 5 32768 seconds Tx Hold Each LLDP frame contains information about how long the information in the t to LLDP frame shall be considered valid The LLDP information valid period is se...

Страница 156: ...information Disabled The switch will not send out LLDP information and will drop LLDP information received from neighbors Enabled The switch will send out LLDP information and will analyze LLDP infor...

Страница 157: ...eness on a port is disabled the CDP information isn t removed immediately but gets removed when the hold time is exceeded Port Descr Optional TLV When checked the port description is included in LLDP...

Страница 158: ...this in mind LLDP MED defines an LLDP MED Fast Start interaction between the protocol and the application layers on top of the protocol in order to achieve these related properties Initially a Network...

Страница 159: ...or or South of the equator Longitude Longitude SHOULD be normalized to within 0 180 degrees with a maximum of 4 digits It is possible to specify the direction to either East of the prime meridian or W...

Страница 160: ...an Civic Address Location IETF Geopriv Civic Address based Location Configuration Information Civic Address LCI Country code The two letter ISO 3166 country code in capital ASCII letters Example DK DE...

Страница 161: ...Room number Example 450F Place type Place type Example Office Postal community name Postal community name Example Leonia P O Box Post office box P O BOX Example 12345 Additional code Additional code E...

Страница 162: ...sets of application types supported on a given port The application types specifically addressed are 1 Voice 2 Guest Voice 3 Softphone Voice 4 Video Conferencing 5 Streaming Video 6 Control Signaling...

Страница 163: ...ype should not be advertised if all the same network policies apply as those advertised in the Guest Voice application policy 5 Softphone Voice for use by softphone applications on typical data centri...

Страница 164: ...2 Priority is the Layer 2 priority to be used for the specified application type L2 Priority may specify one of eight priority levels 0 through 7 as defined by IEEE 802 1D 2004 A value of 0 represents...

Страница 165: ...at shall apply to a given port The set of policies is selected by check marking the checkboxes that corresponds to the policies Buttons Save Click to save changes Reset Click to undo any changes made...

Страница 166: ...e class the connected PD belongs to and reserves the power accordingly Four different port classes exist and one for 4 7 15 4 or 30 Watts In this mode the Maximum Power fields have no effect 3 LLDP ME...

Страница 167: ...ary and Backup Power Source Some switches support having two PoE power supplies One is used as primary power source and one as backup power source If the switch doesn t support backup power supply onl...

Страница 168: ...device The maximum allowed value is 30 W PD Alive IP Address Here you can input the network device s IP address connected to a specific port The system will try to ping using the IP address input her...

Страница 169: ...Web Management 4 It is recommended to set the Power Management Mode to Actual Consumption and set the ports that connect to crucial devices to High or Critical as shown in the figures down below 161...

Страница 170: ...seconds The allowed range is 10 to 1000000 seconds Disable the automatic aging of dynamic entries by checking the Disable automatic aging checkbox MAC Table Learning If the learning mode for a given p...

Страница 171: ...ntries The maximum of 64 entries is for the whole stack and not per switch The MAC table is sorted first by VLAN ID and then by MAC address Delete Check to delete the entry It will be deleted during t...

Страница 172: ...d with a dash separating the lower and upper bound The following example will create VLANs 1 10 11 12 13 200 and 300 1 10 13 200 300 Spaces are allowed in between the delimiters Ethertype for Custom S...

Страница 173: ...that a trunk port is member of may be limited by the use of Allowed VLANs Frames classified to a VLAN that the port is not a member of are discarded By default all frames but frames classified to the...

Страница 174: ...the VLAN ID embedded in the tag If a frame is untagged or priority tagged the frame gets classified to the Port VLAN If frames must be tagged on egress they will be tagged with a C tag S Port On ingre...

Страница 175: ...t VLAN are transmitted untagged Other frames are transmitted with the relevant tag Tag All All frames whether classified to the Port VLAN or not are transmitted with a tag Untag All All frames whether...

Страница 176: ...in question The syntax is identical to the syntax used in the Enabled VLANs field By default the field is left blank which means that the port may become a member of all possible VLANs Buttons Save Cl...

Страница 177: ...lete a private VLAN entry check this box The entry will be deleted during the next save Private VLAN ID Indicates the ID of this particular private VLAN Port Members A row of check boxes for each port...

Страница 178: ...Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Refresh Click to refresh the page immediately Save Click to save changes Reset Click to...

Страница 179: ...works across the stack Configuration Port Members A check box is provided for each port of a private VLAN When checked port isolation is enabled on that port When unchecked port isolation is disabled...

Страница 180: ...om the MAC based VLAN make sure the box is unchecked By default no ports are members and all boxes are unchecked Adding a New MAC based VLAN Click Adding New Entry to add a new MAC based VLAN entry An...

Страница 181: ...efresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Refresh Click to refresh the page immediately Updates the table starting from the first entry in the MA...

Страница 182: ...ll vary depending on the new frame type you selected Value Valid value that can be entered in this text field depends on the option selected from the the preceding Frame Type selection menu Below is t...

Страница 183: ...character long string for every entry which consists of a combination of alphabets a z or A Z and integers 0 9 Note special character and underscore _ are not allowed Adding a New Group to VLAN mappin...

Страница 184: ...mbers A row of check boxes for each port is displayed for each Group Name to VLAN ID mapping To include a port in a mapping check the box To remove or exclude the port from the mapping make sure the b...

Страница 185: ...tes the VLAN ID VLAN ID can be changed for the existing entries Port Members A row of check boxes for each port is displayed for each IP subnet based VLAN entry To include a port in a IP subnet based...

Страница 186: ...ges Reset Click to undo any changes made locally and revert to previously saved values Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Refresh Re...

Страница 187: ...Possible modes are Enabled Enable Voice VLAN mode operation Disabled Disable Voice VLAN mode operation VLAN ID Indicates the Voice VLAN ID It should be a unique VLAN ID in the system and cannot equal...

Страница 188: ...Enable Voice VLAN security mode operation Disabled Disable Voice VLAN security mode operation Port Discovery Protocol Indicates the Voice VLAN port discovery protocol It will only work when auto detec...

Страница 189: ...OUI address is a globally unique identifier assigned to a vendor by IEEE It must be 6 characters long and the input format is xx xx xx x is a hexadecimal digit Description The description of OUI addr...

Страница 190: ...s enabled then the frame is classified to a CoS that is mapped from the PCP and DEI value in the tag Otherwise the frame is classified to the default CoS The classified CoS can be overruled by a QCL e...

Страница 191: ...Class Shows the classification mode for tagged frames on this port Disabled Use default CoS and DPL for tagged frames Enabled Use mapped versions of PCP and DEI for tagged frames Click on the mode in...

Страница 192: ...Disabled Use default QoS class and Drop Precedence Level for tagged frames Enabled Use mapped versions of PCP and DEI for tagged frames PCP DEI to QoS class DP level Mapping Controls the mapping of th...

Страница 193: ...ntrols the rate for the policer The default value is 500 This value is restricted to 100 1000000 when the Unit is kbps or fps and it is restricted to 1 3300 when the Unit is Mbps or kfps Unit Controls...

Страница 194: ...der Port The logical port for the settings contained in the same row Click on the port number in order to configure the schedulers Mode Shows the scheduling mode for this port Qn Shows the weight for...

Страница 195: ...this queue The default value is 17 This value is to restricted to 1 100 This parameter is only shown if Scheduler Mode is set Weighted Queue Scheduler Percent Shows the weight in percent for this queu...

Страница 196: ...led for this queue on this switch port Queue Shaper Rate Controls the rate for the queue shaper The default value is 500 This value is restricted to 100 1000000 when the Unit is kbps and it is restric...

Страница 197: ...port Port Shaper Rate Controls the rate for the port shaper The default value is 500 This value is restricted to 100 1000000 when the Unit is kbps and it is restricted to 1 3300 when the Unit is Mbps...

Страница 198: ...al port for the settings contained in the same row mber in order to configure the shapers Click on the port nu Qn Shows disabled or actual queue shaper rate e g 800 Mbps Port Shows disabled or actual...

Страница 199: ...this queue The default value is 17 This value is Mode is set to Weighted restricted to 1 100 This parameter is only shown if Scheduler Queue Scheduler Percent Shows the weight in percent for this que...

Страница 200: ...a Controls whether th ble e queue shaper is enabled for this queue on this switch port Queue Shaper Rate Controls the rate for the queue shaper The default value is 500 This value is restricted to 100...

Страница 201: ...ether the port shaper is enabled for this switch port Port Shaper Rate Controls the rate for the port shaper The default value is 500 This value is restricted to 100 1000000 when the Unit is kbps and...

Страница 202: ...d by the page ports The ports belong to header Port The logical port for the settings contained in the same row mber in order to configure tag remarking Click on the port nu Mode Shows the tag remarki...

Страница 203: ...is page Mode Controls the tag remarking mode for this port Classified Use classified PCP DEI values Default Use default PCP DEI values Mapped Use mapped versions of QoS class and DP level PCP DEI Conf...

Страница 204: ...the QoS class DP level to PCP DEI mapping process ifie QoS class DP level to PCP DEI Mapping Controls the mapping of the classified QoS class DP level to PCP DEI values when the mode is set to Mapped...

Страница 205: ...s you can change ingress translation and classification settings r individual ports here are two configuration parameters available in Ingress Translate Classify In fo T 1 2 1 Translate o Enable the I...

Страница 206: ...ss rewrite Enable Rewrite enabled without remapping Remap DSCP from analyzer is remapped and frame is remarked with remapped DSCP value Buttons Save Click to save changes Reset Click to undo any chang...

Страница 207: ...t ontrols whether a specific DSCP value is trusted Only frames with trusted SCP values are mapped to a specific QoS class and Drop Precedence Level rames with untrusted DSCP values are treated as a no...

Страница 208: ...ed to new DSC for QoS There are two configuration parameters for DSCP Translation 1 Translate 2 Classify 1 Translate ed to any of 0 63 DSCP values DSCP at Ingress side can be translat 2 Classify t Ing...

Страница 209: ...DP1 Select the DSCP value from select menu to which you want to remap DSCP value ranges form 0 to 63 Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to prev...

Страница 210: ...DSCP value he settings relate to the currently selected stack unit as reflected by the page eader T h QoS Class ctual QoS class A DSCP elect the classified DSCP value 0 63 S Buttons Save Click to save...

Страница 211: ...ach swit Click on the lowest plus sign to add QCE cates the QCE Indi id Port dicates the list of ports configured with the QCE In DMAC es the destination MAC address Possible values are Any Match any...

Страница 212: ...frame Possible Any Match any frame type Ethernet Match EtherType frames LLC Match LLC frames SNAP Match SNAP frames Match IPv4 frames IP Action tes the classification action taken on ingress frame if...

Страница 213: ...the configuration below applies Enabled Controls whether the storm control is enabled on this switch port Rate Controls the rate for the storm control The default value is 500 This value is the Unit i...

Страница 214: ...received on a given port also known as ingress or so Al mirroring Port to mirror to Port to source rx or destination tx mirroring enabled are mirrored on this port Disabled disables mirroring Mirror...

Страница 215: ...once It is therefore not possible to mirror mirror port Tx frames Because of this mode for the selected mirror port is limited to Disabled or Rx only Buttons Save Click to save changes Reset Click to...

Страница 216: ...o inform a control point or control oints how often it or they should receive an SSDP advertisement message from is switch If a control point does not receive any message within the duration it ill th...

Страница 217: ...of centi seconds i e in f a second The default is 60 En ble GVRP globally Enable GVRP GVRP pro one hundredth of a second The default is 20 Leave time is a value in the range units of one hundredth o L...

Страница 218: ...4 1 22 2 GVRP Port Config This page allows you to enable a port for GVRP Button changes Save Click to save Reset Click to undo any changes made locally and revert to previously saved values 210...

Страница 219: ...of er port flow and counter samplers Flow configuration is not persisted to non volatile memory which means that a eboot or master change will disable sFlow sampling gent Configuration C p s r A IP A...

Страница 220: ...igured through SNMP the release must be confirmed a confirma n request will appear tio IP Address Hostname The IP address or hostname of the sFlow receiver Both IPv4 and IPv6 addresses are supported U...

Страница 221: ...th not take into account the maximum header the sFlow datagram Valid range is 14 to 200 bytes with default being 128 by e maximum datagram size does size samples may be dropped Counter Poller Enabled...

Страница 222: ...iguration System Information System Contact Name The system name configured in Configuration System Information System m Na e Location he system location configured in Configuration System Information...

Страница 223: ...ftware version of this switch Software Date The date when the switch software was produced Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 second...

Страница 224: ...s are displayed s text as well order to display the SVG graph your browser must support the SVG format onsult the SVG Wiki for more information on browser support Specifically at e time of writing Mic...

Страница 225: ...f the entry This may be LINK or IPv4 Address The current address of the interface of the given type Status e Th status flags of the interface and or address outes IP R Network he destination IP networ...

Страница 226: ...Refresh Click to refresh the page immediately Auto refresh Check this box to refresh the page automatically 218...

Страница 227: ...T Message he message of the system log entry T Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Refresh Updates the system log entries st...

Страница 228: ...sage of the system log entry Buttons Refresh Updates the system log entry to the current entry ID t available entry ID he previous available entry ID system log entry to the next available entry ID Up...

Страница 229: ...rt Power Savings configuration page LP S EEE hows if the link partner is EEE capable cap EEE In power save hows if the system is currently saving power due to EEE When EEE is enabled e system will pow...

Страница 230: ...current switch port states tes are illustrated as follows Status Disabl Dow Link The port sta ed n RJ45 ports SFP ports X2 ports Buttons esh Check this box to refresh the page automatically Automatic...

Страница 231: ...per port ved and trans Bytes er of received and transmitted bytes per port The numb Errors The number of frames received in error and missions per port the number of incomplete trans Drops he number o...

Страница 232: ...t The logical port for the settings contained in the same row Qn There are 8 QoS queues per port Q0 is the lowest priority queue Rx Tx The number of received and transmitted packets per queue Buttons...

Страница 233: ...therType frames SNAP Match SNAP frames IPv4 Match IPv4 frames IPv6 Match IPv6 frames Action Indicates the classification action taken on ingress frame if parameters onfigured are matched with the fram...

Страница 234: ...resh Check this box to refresh the page automa y Automatic fresh Click to refresh the page ticall refresh occurs every 3 seconds Resolve Conflict Click to release the resources required to add QCL ent...

Страница 235: ...Total and Transmit Total s T p T fo R R T x and Tx Packets he number of received and transmitted good and bad packets Rx and Tx Octets he number of received and transmitted good and bad bytes Include...

Страница 236: ...Rx CRC Alignment The number of frames received with CRC or alignment errors Rx Undersize The number of short 1 frames received with valid CRC Rx Oversize The number of long 2 frames received with val...

Страница 237: ...ames dropped due to excessive or late collisions Buttons sh the page immediately Clears the counters for the selected port omatic ccurs every 3 seconds by clicking Refresh Click to refre Clear Auto re...

Страница 238: ...Declined IP Address umber of seclined IP addresses inding Counters isplay counters of various databases N B D A N utomatic Binding umber of bindings with network type pools Manual Binding umber of bin...

Страница 239: ...ved DHCP Message Sent Counters Display counters of DHCP messages sent by DHCP server OFFER Number of DHCP OFFER messages sent ACK messages sent Number of DHCP ACK NAK er of DHCP NAK messages sent Numb...

Страница 240: ...binding Buttons Refresh Click to refresh the page immediately Auto refresh Check this box to refresh the page automatically Automatic g is it is changed to be Expired If the selected binding is Expir...

Страница 241: ...addresses Declined IP Addresses declined by DHCP clients Display IP addresses Declined IP List of IP addresses declined Buttons lly Automatic resh occurs every 3 seconds Auto refresh Check this box to...

Страница 242: ...e first displayed entry allowing for continuous efresh with the same start address he will use the last entry of the currently displayed table as a basis for the ext lookup When the end is reached the...

Страница 243: ...shes the displayed table starting from the input fields Clear Flushes all dynamic entries tly Updates the table starting from the first entry in the Dynamic DHCP snooping Table Updates the table start...

Страница 244: ...ceived with the Circuit ID option missing T Receive Missing Remote ID he number of packets received with the Remote ID option missing T R The n eceive Bad Circuit ID umber of packets whose Circuit ID...

Страница 245: ...packets whose relay agent information was retained Drop Agent Option The number of packets that were dropped which were received with relay agent information Buttons Auto refresh Check this box to re...

Страница 246: ...ith value 2 packets received and transmitted T Rx and Tx Request he number of request option 53 with value 3 packets received and transmitted T Rx and Tx Decline he number of decline option 53 with va...

Страница 247: ...mber of lease active option 53 with value 13 packets received and transmitted Rx Discarded checksum error The number of discard packet that IP UDP checksum is error Rx Discarded from Untrusted The num...

Страница 248: ...m the interface when access management mode is enabled Allowed Packets f allowed packets from the interface when access management mode is Number o enabled Discarded Packets Nu ber of discarded packet...

Страница 249: ...n Conf modules When a user module has enabled port security on a port the port is set up for addresses are passe modules whether to allow this new MAC address to forward or block it For a MAC address...

Страница 250: ...limit is reached rol and no more MAC addresses should be taken in Shutdown The Port Security service is enabled by at least the Limit Cont user module and that module has indicated that the limit is...

Страница 251: ...ddress ned a single row stating No MAC addresses attached is State Indicates whether the corresponding MAC address is blocked or forwarding the blocked state it will not be allowed to transmit or rece...

Страница 252: ...of the port Refer to NAS Port State for a description of the The cu individual states Last Source ddress carried in the most recently received EAPOL frame for w AC based authentication The source MAC...

Страница 253: ...NAS If the VLAN ID is assigned by the RADIUS server RADIUS assigned is appended to the VLAN ID Read more about RADIUS assigned VLANs here If the port is moved to the Guest VLAN Guest is appended to th...

Страница 254: ...administrative state Refer to NAS Admin State for a escription of possible values d Port State he current state of the port Refer to NAS Port State for a description of the dividual states T in QoS Cl...

Страница 255: ...gement 4 Port Counters EAPOL Counters These supplicant frame counters are available for the following administrative states Single 802 1X Force Authorized Force Unauthorized Port based 802 1X Multi 80...

Страница 256: ...Backend Server Counters These backend RADIUS frame counters are available for the following t based 802 1X administrative states Por Single 802 1X Multi 802 1X MAC based Auth 248...

Страница 257: ...lti 802 1X MAC based Auth The table is identical to and is placed next to the Port Counters table and will be empty if no MAC address is currently selected To populate the table select one of the atta...

Страница 258: ...is unauthenticated If an authentication fails for one or the other reason the client will remain in the unauthenticated state for Hold Time seconds Last Authentication Shows the date and time of the l...

Страница 259: ...ARP frames Pv4 frames with ICMP protocol protocol otocol atch IPv4 frames which are not ICMP UDP TCP v6 standard frames EType The ACE will match Ethernet Type frames Note that an Ethernet Type based A...

Страница 260: ...tes the hardware status of the specific ACE The specific ACE is not applied to the hardware due to hardware limitations Buttons The select box determines which ACL user is affected by clicking the but...

Страница 261: ...ry allowing for continuous refresh with the same start address he button will use the last entry of the currently displayed table as a basis r the next lookup When the end is reached the text No more...

Страница 262: ...s every 3 seconds Refresh Refreshes the displayed table starting from the input fields Clear Flushes all dynamic entries rrently Updates the table starting from the first entry in the Dynamic ARP Insp...

Страница 263: ...the closest ext Dynamic IP Source Guard Table match In addition the two input fields will pon a Refresh button click assume the value of the first displayed entry llowing for continuous refresh with t...

Страница 264: ...Updates the table starting from the first entry in the Dynamic IP Source Guard Table Updates the table starting with the entry after the last entry currently displayed 256...

Страница 265: ...y The server is enabled but IP communication is not yet up and running Ready The server is enabled IP communication is up and running and the RADIUS module is ready to accept access attempts Dead X se...

Страница 266: ...ng attempts Dead X seconds left Accounting attempts were made to this server but it did not reply within the configured timeout The server has temporarily been disabled but will get re enabled when th...

Страница 267: ...IUS Authentication Statistics D he statistics map closely to those specified in RFC4668 RADIUS uthentication Client MIB se the server select box to switch between the backend servers to show details r...

Страница 268: ...260...

Страница 269: ...p time RADIUS Accounting Statistics The statistics map closely to those specified in RFC4670 RADIUS Accounting Client MIB Use the server select box to switch between the backend servers to show detail...

Страница 270: ...x determines which server is affected by clicking the buttons Auto re fresh Check this box to refresh the page automatically Automatic Refresh Click to refresh the page immediately he counters for the...

Страница 271: ...r o more entries is shown in e Statistics t starting from that or the next closest Statistics table match The button will use the last entry o the next lookup When the end is reached the text N th dis...

Страница 272: ...arger than 64 octets received with invalid CRC Coll The best estimate of the total number of collisions on this Ethernet segment 64 The total number of packets including bad packets received that were...

Страница 273: ...lly Automatic refresh occurs every 3 seconds Refresh Click to refresh the page immediately Updates the table starting from the first entry in the Statistics table i e with the lowest ID currently d th...

Страница 274: ...the last entry of the currently displayed entry as a basis for the ext lookup When the end is reached the text No more entries is shown in the isplayed table Use the button to start over p fr lo T s...

Страница 275: ...ag The number of frames which size is less than 64 octets received with invalid CRC Jabb The number of frames which size is larger than 64 octets received with invalid CRC Coll The best estimate of th...

Страница 276: ...e Clicking the Refresh button will update the displayed table starting from that or the next closest Alarm table match The will use the last entry of the currently displayed entry as a basis for th ne...

Страница 277: ...the page automatically Automatic refresh occurs every 3 seconds Refresh Click to refresh the page immediately Updates the table starting from the first entry in the Alarm Table i e the entry with the...

Страница 278: ...layed table Use the button to start over up to 99 entries from the Event table default being 20 selected through the entries per page input field 20 entries from the beginning of the Event table The f...

Страница 279: ...Partner System ID The system ID MAC address of the aggregation partner Partner Key The Key that the partner has assigned to this aggregation ID Last changed The time since this aggregation changed Lo...

Страница 280: ...CP join the aggre status is disabled Key ssigned to this port Only ports with the same key can aggregate The key a together Ag r ID g he Aggregation ID assigned to this aggregation group IDs 1 and 2 a...

Страница 281: ...any LACP frames have been received at each port LACP Transmitted s how many LACP frames have been sent from each port Show Discarded Shows how many unknown or illegal LACP frames have been discarded a...

Страница 282: ...ransmit The currently configured port transmit mode Loops The number of loops detected on this port Status The current loop protection status of the port Loop Whether a loop is currently detected on t...

Страница 283: ...ce Root ID The Bridge ID of the currently elected root bridge Root Port The switch port currently assigned the root port role Root Cost r all other Bridges it is the sum ts on the least cost path to t...

Страница 284: ...of the AlternatePort BackupPort RootPort DesignatedPort Disabled following values CIST State P port state of the CIST port The port state can be one of the The current ST following values Discarding L...

Страница 285: ...umber of legacy STP Configuration BPDU s received transmitted on the port TCN The number of legacy Topology Change Notification BPDU s transmitted on the port received Discarded Unknown er of unknown...

Страница 286: ...MP and MLD respectively IGMPv1 Joins Received The number of Received IGMPv1 Join s IGMPv2 MLDv1 Report s Received GMPv2 Join s and MLDv1 Report s respectively The number of Received I IGMPv3 MLDv2 Rep...

Страница 287: ...elected through the entries per page input field When first visited Groups Information Table The Start from VLAN and Group Address input fields allow the use the starting point in the MV Refresh butto...

Страница 288: ...e beginning of the MVR SFM Information Table The Start from VLAN and Group Address input fields allow the user to select the starting point in the MVR SFM Information Table Clicking the Refresh butto...

Страница 289: ...ither Allow or Deny Hardware Filter Switch Indicates whether data plane destined to the specific group address from the source IPv4 IPv6 address could be handled by chip or not Buttons Auto refresh Au...

Страница 290: ...Hos W t Version orking Host Version currently Querier Status ws the Querier status is ACTIVE or IDLE DISABLE denotes the specific interface is administratively disabled Sho Queries Transmitted he numb...

Страница 291: ...enotes the specific port is learnt to be a router port Both denote the specific port is configured or learnt to be a router port switch that leads towards the Layer 3 multica Port Switch port number S...

Страница 292: ...tart address he will use the last entry of the currently displayed table as a basis for the ext lookup When the end is reached the text No more entries is shown in the isplayed table Use the button to...

Страница 293: ...tion table default being 20 selected through the entries per page input field When first visited the web page will show the first 20 entries from the beginning of the IGMP S Information Table The Star...

Страница 294: ...ether data plane destined to the specific group address from t source IPv4 address could be handled by chip or not he Buttons Auto refresh Automatic refresh occurs every 3 seconds rting from the input...

Страница 295: ...currently rier Versio W Hos W t Version orking Host Version currently Querier Status ws the Querier status is ACTIVE or IDLE DISABLE denotes the specific interface is administratively disabled Sho Qu...

Страница 296: ...nfigured to be a router port Dynamic denotes the specific port is learnt to be a router port Both denote the specific port is configured or learnt to be a router port Port Switch port number Status In...

Страница 297: ...okup When the end is reached the text No more entries is shown in the isplayed table Use the button to start over LD Group Table Columns sorted first by VLAN ID and then by group Navigating the MLD Ea...

Страница 298: ...SFM Information table defa being 20 selected through the entries per page input field When first visited the web page will show the first 20 entries from the beginning of the MLD SFM Information Tabl...

Страница 299: ...icates whether data plane destined to the specific group address f source IPv6 address could be handled by chip or not rom the Buttons Auto refresh Automatic refresh occurs every 3 seconds Refresh Ref...

Страница 300: ...Port ID is the identification of the neighbour port t ID T Port Description ort Description is the port description advertised by the neighbour unit P System Name ystem Name is the name advertised by...

Страница 301: ...hat is used for higher layer entities to assist discovery by the network management This could for instance hold the neighbour s IP address Buttons Auto refresh Check this box to refresh the page auto...

Страница 302: ...orical reasons IEEE 802 11 Wireless Access Point Any device that supports the IEEE 802 1AB and MED extensions defined by TIA 1057 and can relay IEEE 802 frames via any method LDP MED Endpoint Device D...

Страница 303: ...ass include LA LLDP MED Media Endpoint Class II The LLDP MED Media Endpoint Class II definiti products that have IP media capabilities however may o with a particular end user Capabilities include all...

Страница 304: ...ervice for guest ntric ve video audio services at require specific network policy treatment Video applications relying on TCP with buffering would not be an intended use of this application type 2 Voi...

Страница 305: ...1 through 4094 is used to define a valid VLAN ID A value of 0 Priority Tagged is used if the device is using priority tagged frames as defined by IEEE 802 1Q 2003 meaning that only the IEE 2003 E 802...

Страница 306: ...es negotiation Capabilities shows the link partners Auto MAC PHY capabilities Buttons Auto refresh Check this box to refresh the page automatically Automatic refresh occurs every 3 seconds Refresh Cli...

Страница 307: ...SE device it can either run on its Primary Power Source or its ackup Power Source If it is unknown whether the PSE device is using its rimary Power Source or its Backup Power Source it is indicated as...

Страница 308: ...r a PSE device is capable of sourcing over a maximum length cable based on its current configuration The maximum allowed value is 102 3 W If the device indicates value higher han t 102 3 W it is repre...

Страница 309: ...uld like the transmitter to hold off to allow me for the receiver to wake from sleep T ti F T allback Receive Tw he link partner s fallback receive Tw receiving link partner may inform the transmitter...

Страница 310: ...lved Tw Rx Tw for this link equipment linked to this port to support LLDP the number here indicates the value of Note It is NOT the link partner Instead of the value of the this particular port on the...

Страница 311: ...ntries added since switch reboot Total Neighbours Entries Deleted Shows the number of new entries deleted since switch reboot Total Neighbours Entries Dropped Shows the number of LLDP frames dropped d...

Страница 312: ...rmation known as TLVs TLV ed it is counted and is short for Type Length Value If a TLV is malform discarded TLVs Unrecognized The number of well formed TLVs but with an unknown type value Org Discarde...

Страница 313: ...Classes are defined 0 0 W Class 0 Max power 15 4 W Class 1 Max power 4 0 W Class 2 Max power 7 0 W Class 3 Max power 15 4 W Class 4 Max power 3 Pow T er Requested he Power Requested shows the request...

Страница 314: ...al requested or used power by the PDs exceeds the maximum power the Power Supply can deliver and port s with the lowest priority is are powered down No PD detected No PD detected for the port PoE turn...

Страница 315: ...l upon a Refresh button click assume the value of the rst displayed entry allowing for continuous refresh with the same start address he will use the last entry of the currently displayed VLAN MAC add...

Страница 316: ...shes the displayed table starting from the Start from MAC address and VLAN input fields Clear Flushes all dynamic entries Updates the table starting from the first entry in the MAC Table i e the entry...

Страница 317: ...layed for each VLAN ID If a port is included in a VLAN the following image will be displayed If a port is in the forbidden port list the following image will be displayed If a port is in the forbidden...

Страница 318: ...the selected user is shown in the table Use the button to start over basis for the next lookup When the end is Buttons Select VLAN Users from this drop down list Auto refresh Check this box to refresh...

Страница 319: ...e given software modules hasn t overridden any of the port settings the text data exists for the selected user is shown in the table V c The d me of th T s in If a No Port he logical port for the sett...

Страница 320: ...n the drop down list The higher in the ed user and the ing software module hardware Two users may have conflicting requirements to a port s configuration For instance one user may require all frames t...

Страница 321: ...gured through Web or CLI Owner contains Configured throug identifying the sFlow receiver IP Address Hostname The IP address or hostname of the sFlow receiver Timeout Th ning before sampling stops and...

Страница 322: ...ere Rx flow samples contains the number of packets that were sa ed upon reception umber of packets that were sampled upon transmission egress on the port mpl ingress on the port and Tx flow samples co...

Страница 323: ...Web Management 4 4 3 Web Management Diagnostics This section of the management web page provides you tools for diagnosing your network 315...

Страница 324: ...10 10 132 20 icmp_seq 0 time 0ms 4 bytes from 10 10 132 20 icmp_seq 1 time 0ms 4 bytes from 10 10 132 20 icmp_seq 2 time 0ms 4 bytes from 10 10 132 20 icmp_seq 3 time 0ms 4 bytes from 10 10 132 20 icm...

Страница 325: ...ver 10 10 132 20 56 bytes of data 64 bytes from 10 10 132 20 icmp_seq 0 time 0ms 64 bytes from 10 10 132 20 icmp_seq 1 time 0ms 64 bytes from 10 10 132 2 64 bytes from 10 10 132 20 icmp_seq 3 time 0 6...

Страница 326: ...ly when the corresponding IPv6 interface is valid When the egress interface is not given PING6 finds the best match interface for s interface for loopback address destination Do not specify egres Do s...

Страница 327: ...rt will cause the switch to top responding until VeriPHY is complete he ports belong to the currently selected stack unit as reflected by the page eader copper po Pr s the Start button to run the diag...

Страница 328: ...Cross D Abnormal cross pair coupling with pair D Length The length in meters of the cable pair The resolution is 3 meters 320...

Страница 329: ...download all system settings art Device Here you can make system maintenance such rebooting the PoE switch settings firmware 4 4 1 Maintenance Rest You can restart the stack on this page After restar...

Страница 330: ...licking Yes on the Web UI select Maintenance Configuration and Save Startup config Click Save Configuration The switch is restored to its default onfiguration is available immediately which means that...

Страница 331: ...u need to re 2 Turn off and then turn on the switch in the back of GV POE0812 3 When rt LED light one and two start blinking unplug the Ethernet cable from L 5 Select Maintenance Configuration and Sav...

Страница 332: ...pload Click this button to start upload the firmware The system will inform you when the new firmware is uploaded to the switch After updating the firmware the switch will reboot Warning The managemen...

Страница 333: ...firmware releases This does not constitute an error button is also disabled If the alternate image is active due to a corrup manual intervention uploading a new firmware image to the device will autom...

Страница 334: ...artup config The startup configuration for the switch which will be read This file 5 1 Configuration Save Startup config when the switch is booting Default config A read only file with vendor specific...

Страница 335: ...ownload File Name Here you can choose the configuration file you would like to save to your PC ding inclu Running config Startup config Default config Buttons Download Configuration Click this button...

Страница 336: ...config the file will be applied to the current switch onfiguration in two ways Replace mode The current configuration is fully replaced with the configuration in the uploaded file Merge mode The uplo...

Страница 337: ...e activated immediately Please note that although the configuration file you choose here will be activated and run as the current configuration setting it will not be saved as the startup config autom...

Страница 338: ...re you can delete the configuration files saved on the switch File Name Choose the configuration file that you would like to delete here Buttons Delete Configuration File Click this button to delete t...

Страница 339: ...water or liquid DO NOT stack this product with other network devices directly on top of one another Stacking network devices directly without applying a mounting rack will cause this product to overhe...

Страница 340: ...powering up this product please make sure that the electric power ers source meets this product s requirement DO NOT use other power adapt if this product comes with its own power adapter in the pack...

Страница 341: ...ess properly in a Microsoft indows 8 environment Setting IP address in other Microsoft operating system such as Windows Vista or Windows 7 is quite the same and can be related Open Network and Sharing...

Страница 342: ...he figure down below n 4 An Ethernet Properties window will pop up Please double click on the Internet Protocol Version 4 TCP IPv4 5 An Internet Protocol Version 4 TCP IPv4 Properties window will pop...

Страница 343: ...ess as long as it s not the same with IP a your product s IP address and is in the same network segment with your product s IP address Press OK to apply the TCP IPv4 settings you just made Now you can...

Страница 344: ...n In networking the ACL refers to a list of ervice ports or network services that are available on a host or server each with list of hosts or servers permitted or denied to use the service ACL can en...

Страница 345: ...parallel to increase the link speed beyond the limits of a Using port and to increase the redundancy for higher availability ARP ARP is an acronym for Address Resolution Protocol It is a protocol tha...

Страница 346: ...ers from a DHCP server The DHCP server ensures that all IP addresses are unique for example no IP address is assigned to a second client while the first client s assign the server and not by a human n...

Страница 347: ...s and associates many types of information with domain names Most importantly DNS translates human friendly domain names and computer hostnames into computer friendly IP addresses For example the doma...

Страница 348: ...ansfer Protocol It is a protocol that used to ansmitted and what actions r browser this actually sends an HTTP cting it to fetch and transmit the requested Web nd TP client sending s to server machine...

Страница 349: ...802 1X IEEE 802 1X is an IEEE standard for port based Network Access Control It s authentication to devices attached to a LAN port establishing a ed from a server which means that authorized users ca...

Страница 350: ...no packet of information sent over is assured to reach its destination in the same condition it was sent Each device connected to a Local Area Network LAN or Wide Area Network WAN is given an Internet...

Страница 351: ...he management address or addresses of the entity o entities that provide management of those capabilities and the identific r ation of the stations point of attachment to the IEEE 802 LAN required by...

Страница 352: ...ports to a mirror port In this context mirroring a frame is the same as copying the frame Both incoming source and outgoing destination frames can be mirrored to the mirror port em MLD MLD is an acro...

Страница 353: ...de Point It is a 3 bit field storing the priority level for the 802 1Q frame It is also known as User Priority PD PD is an acronym for Powered Device In a PoE system the power is delivered from a PSE...

Страница 354: ...r synchronizing the clocks of computer systems Q QCE QCE is an acronym for QoS Control Entry It describes QoS class associated with a particular QCE ID There are six QCE frame types Ethernet Type VLAN...

Страница 355: ...m for R RARP everse Address Resolution Protocol It is a protocol the complement of ARP that is used to obtain an IP address for a given hardware address such as an Ethernet address RARP is RADIUS RADI...

Страница 356: ...col 8 p identifier SNMP SNMP is an acronym for Simple Network Management Protocol It is part of the Transmission Control Protocol Internet Protocol TCP IP protocol for network management SNMP allow di...

Страница 357: ...frame TCP TCP is an acronym for Transmission Control Protocol It is a communications protocol that uses the Internet Protocol IP to exchange the messages betwe computers en The TCP protocol guarantee...

Страница 358: ...in The most significant 6 bits of the ToS field are fully decoded into 64 ponding bit in the IPv4 ToS priority control bit 0 63 the IP header possibilities and the singular code that results is compar...

Страница 359: ...witching This is the default configuration All ports are VLAN are with Port VLAN ID 1 and members of VLAN 1 This means that MAC N AN aware switching This is based on the IEEE 802 1Q standard All ports...

Страница 360: ...AN configured specially for voice traffic By adding the ports with voice devices attached to voice VLAN we can perform QoS related d configuration for voice data ensuring the transmission priority of...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды