Hirschmann MS30, Power MICE, MACH 4000, OCTOPUS Скачать руководство пользователя страница 69

Страница: 69 / 196

Protection from unauthorized access

Layer 2 Enhanced with Layer 2 Professional

Release 1.0 10/05

6 Protection from unauthorized

access

Protect your network from unauthorized access. The Switch provides you
with the following functions for protecting against unauthorized access.

Password for SNMP access,

Setting the Telnet/Web-Based access,

Disabling the HiDiscovery function,

Port access control via IP- or MAC-address,

Authentication according to 802.1X,

Содержание MS30, Power MICE, MACH 4000, OCTOPUS

Страница 1: ...hanced with Layer 2 Professional Release 1 0 10 05 Technical Support HAC Support hirschmann de User Manual Basic Configuration Industrial ETHERNET Gigabit Switch RS20 RS30 MS20 MS30 Power MICE MACH 40...

Страница 2: ...r own use The performance features described here are binding only if they have been expressly guaranteed in the contract This publication has been created by Hirschmann Automation and Control GmbH ac...

Страница 3: ...ics IP parameter 27 2 1 1 IP address version 4 27 2 1 2 Network mask 28 2 1 3 Example of how the network mask is used 30 2 2 Entering the IP parameters via CLI 32 2 3 Entering the IP parameters via Hi...

Страница 4: ...e software available 60 4 1 2 Starting the software 62 4 1 3 Performing a cold start 62 4 2 Loading the Software from the tftp Server 63 4 3 Loading Software via HTTP 65 5 Configuring ports 67 6 Prote...

Страница 5: ...02 8 1 1 Store and forward 102 8 1 2 Multi address capability 102 8 1 3 Aging of learned addresses 103 8 1 4 Entering static address entries 104 8 2 Multicast application 106 8 2 1 Description multica...

Страница 6: ...of band signaling 137 9 2 1 Manual setting the signal contact 138 9 2 2 Monitoring correct operation via the signal contact 139 9 3 Port status indication 141 9 4 Event counter on port level 143 9 5...

Страница 7: ...mpetence 172 B 2 FAQ 173 B 3 Management Information BASE MIB 174 B 4 Used abbreviations 177 B 5 List of RFC s 178 B 6 Based IEEE standards 180 B 7 Technical Data 181 B 8 Copyright of integrated softwa...

Страница 8: ...Contents 8 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Страница 9: ...D Function diagnosis The Installation user manual contains a device description safety instructions a description of the display and all the other information that you need to install the device befor...

Страница 10: ...About this Manual 10 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Страница 11: ...Work step U Subheading Indicates a cross reference with a stored link Note A note emphasizes an important fact or draws your attention to a dependency Courier font ASCII representation in user interf...

Страница 12: ...Key 12 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Hub A random computer Configuration computer Server...

Страница 13: ...Introduction The Switch has been developed for practical application in a harsh industrial environment Accordingly the installation process has been kept simple Thanks to the selected default settings...

Страница 14: ...Introduction 14 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Страница 15: ...1 Access to the user interfaces The Switch has three user interfaces which you can access via different interfaces D System monitor via the V 24 interface out of band D Command Line Interface CLI via...

Страница 16: ...otcode information U Opening the system monitor V Using a terminal cable see accessories connect the V 24 RJ11 socket to either a terminal or a COM port of a PC with terminal emulation according to VT...

Страница 17: ...r 2 Professional Release 1 0 10 05 1 1 System monitor 17 Fig 1 Screenshot during the boot process V Press within one second the 1 key to start system monitor 1 PowerMICE MS4128 5 Boot Release 1 00 Bui...

Страница 18: ...lay V Select the desired menu by entering the number V To leave a sub menu and return to the main menu of system monitor 1 press ESC System Monitor Selected OS L3P 01 0 00 K16 2005 10 31 19 32 1 Selec...

Страница 19: ...Line Interface The Command Line Interface can be accessed via D the V 24 out of band port or D Telnet in band Note To facilitate making entries the CLI offers the option of abreviating keywords Type...

Страница 20: ...te on delivery value for the password is private Press the Enter key You can change the username and the password later in the Com mand Line Interface Note that these entries are case sensitive The st...

Страница 21: ...1 0 10 05 1 2 Command Line Interface 21 Fig 4 CLI screen after login NOTE Enter for Command Help Command help displays all options that are valid for the normal and no command forms For the syntax of...

Страница 22: ...e the Switch U Opening the Web based Interface To open the Web based interface you will need a Web browser a pro gram that can read hypertext for example Mozilla Firefox version 1 or higher or Microso...

Страница 23: ...ser V Establish the connection by entering the IP address of the Switch that you want to administer via the Web based network management in the address field of the Web browser Enter the address in th...

Страница 24: ...to access the Switch with write per mission then highlight the contents of the password field and overwri te it with the password private state on delivery Changing the password protects the Switch ag...

Страница 25: ...ers via HiDiscovery on page 35 D Using the AutoConfiguration Adapter ACA Choose this method if you are replacing the Switch with a Switch of the same type and have already saved the configuration on a...

Страница 26: ...using DHCP Option 82 You need a DHCP server with Option 82 for this The DHCP server assigns the configuration data to the Switch using its physical connection see System Configuration via DHCP Option...

Страница 27: ...eed an IP address block contact your Internet Service Provider Internet Service Providers should contact their local higher level organization D APNIC Asia Pacific Network Information Centre Asia Paci...

Страница 28: ...responsible for the uniqueness of the IP addresses he assigns 2 1 2 Network mask Routers and gateways subdivide large networks into subnetworks The net work mask assigns the IP addresses of the indivi...

Страница 29: ...ove sub net mask is applied 255 255 192 0 Decimal notation 11111111 11111111 11000000 00000000 Binary notation Subnetwork mask bits Class B 129 218 65 17 Decimal notation 10000001 11011010 01000001 00...

Страница 30: ...nows Juliet s IP address and also knows that the router Lorenzo knows the way to Juliet Romeo therefore puts his message in an envelope and writes Juliet s IP ad dress as the destination address For t...

Страница 31: ...nner envelope with Romeo s IP address Opening the inner envelope and reading its contents corresponds to transferring the message to the higher protocol layers of the ISO OSI layer model Juliet would...

Страница 32: ...art for entering IP addresses If there is no terminal or PC with terminal emulation available in the vicinity of the installation location the IP parameters can also be entered in your wor king enviro...

Страница 33: ...parms IP Adresse Netzmaske Gateway and press the Enter key D Locale IP address On delivery the local IP address of the Switch is 0 0 0 0 D Network mask If your network has been divided up into subnetw...

Страница 34: ...config nvram startup config and then press the Enter key Confirm that you want to save the configuration by pressing y After entering the IP parameters you can easily configure the Switch via the Web...

Страница 35: ...oftware is on the CD sup plied with the Switch V To install it you start the installation program on the CD Note The installation of HiDiscovery involves installing the WinPcap Version 3 0 software pa...

Страница 36: ...the symbol with the two green dots in the tool bar to set the LEDs for the selected device flashing To Switch off the flashing click on the symbol again By double clicking a line you open a window in...

Страница 37: ...itch failure the ACA enables a very simple configuration data transfer by means of a substitute Switch of the same type When you start the switch it checks for an ACA If it detects an ACA with a valid...

Страница 38: ...5 Fig 12 Flow chart loading configuration data from ACA ACA vorhanden Ja Konfiguration vom ACA laden ACA LEDs blinken synchron Nein Passwort im Switch und ACA identisch Ja Nein Voreingestelltes Passwo...

Страница 39: ...System configu ration via the Web based Interface on page 47 or see in the CLI V Make the following data for the Switch available to the BOOTP server etc bootptab for BOOTP daemon bootpd gw gateways...

Страница 40: ...r are comment lines The lines under global make the configuration of several devices easier With the template tc you allocate the global configuration data tc global The direct allocation of hardware...

Страница 41: ...or the BOOTP DHCP process part 1 see note on page 54 2 DHCP or BOOTP Send DHCP BOOTP Requests Reply from DHCP BOOTP server Yes Yes Save IP parameter and config file URL locally initialize IP stack wit...

Страница 42: ...Flow chart for the BOOTP DHCP process part 2 see note on page 54 Load transferred config file No Yes Load remote configuration from URL of DHCP No Yes Start tftp process with config file URL of DHCP...

Страница 43: ...the Command Line Interface On startup an Switch receives its configuration data according to the BOOTP DHCP process flow chart see Fig 13 The Switch sends its system name to the DHCP server The DHCP s...

Страница 44: ...om IP address whichever one happens to be availa ble is assigned On delivery DHCP is enabled As long as DHCP is activated the Switch attempts to obtain an IP address If it cannot find a DHCP server af...

Страница 45: ...r hugo option dhcp client identifier 00 68 75 67 6f fixed address 149 218 112 83 server name 149 218 112 11 filename agent config dat Lines that start with a character are comment lines The lines prec...

Страница 46: ...l on the device being configured see System configuration via DHCP on page 43 Option 82 is based on the network topology This procedure gives you the option of always assigning the same IP address to...

Страница 47: ...assign IP parameters and VLAN ID and configure the HiDiscovery access Fig 16 Dialog network parameter V Under Modus you enter where the Switch is to obtain its IP parameters D In the BOOTP mode the co...

Страница 48: ...a Netmask and a Gateway Address to the Switch V With the VLAN ID frame you can assign a VLAN to the Switch V The HiDiscovery protocol see Entering the IP parameters via HiDiscov ery on page 35 allows...

Страница 49: ...a Switch of the same type Faulty Device Replacement D First you can configure the new switch using an AutoConfiguration Adapter see Loading the system configuration from the ACA on page 37 or D Secon...

Страница 50: ...Entering the IP parameters 50 2 9 Faulty Device Replacement Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Страница 51: ...witch saves settings such as the IB parameters and the port configuration in the temporary memory These settings are lost when you switch off or reboot the device The Switch enables you to D save sett...

Страница 52: ...itch enables you to load settings from the following sources D the local non volatile memory D the AutoConfiguration Adapter If an ACA is connected to the Switch the Switch always loads its configurat...

Страница 53: ...he AutoConfiguration Adapter If an ACA is connected to the Switch the Switch always loads its configura tion from the ACA For information on how to save a configuration file onto an ACA refer to Sa vi...

Страница 54: ...Switch loads the configuration file The URL is in the form tftp IP address of the tftp server path name file name e g tftp 149 218 112 5 switch config dat Example of loading a file from the TFTPServe...

Страница 55: ...ding settings 55 Fig 17 Dialog Load Save V Enter the enable command to change to the Priviledged EXEC mode V Enter the command copy tftp 149 218 112 159 switch config dat nv ram startup config if you...

Страница 56: ...the state on delivery After restarting the IP address is also in the original delivery state Setting in the System Monitor V Select 5 Erase main configuration file This menu offers you the possibility...

Страница 57: ...the local permanent memory and the ACA V Select the Basics Load Save dialog V Click in the Save frame Local V Click Save configuration As a result the Switch saves the current configuration data into...

Страница 58: ...figuration The URL marks the path to the tftp server on which the Switch saves the configuration file The URL is written as follows tftp IP address of the tftp server path name file name e g tftp 149...

Страница 59: ...hmann Internet site than the release the you have on your Switch U Checking the software release installed U Loading the software The Switch gives you three options for loading the software D From the...

Страница 60: ...the system monitor on page 16 V Select 2 and press the ENTER key to copy the software from the ACA 21 USB into the local memory of the Switch On concluding the update the System Monitor prompts you t...

Страница 61: ...ersion Select 1 to load the other software with the next reboot U Copy image to backup Select 2 to save a copy of the active software U Test stored images in flash memory Select 3 to test if the store...

Страница 62: ...codes U Apply and store selection Select 5 to apply and store the selection of the software U Cancel selection Select Sie 6 to cancel selection and leave this dialogue without changes 4 1 2 Starting...

Страница 63: ...e to be loaded is stored see tftp server for software updates on page 165 V Select the Basics Software dialog The URL identifies the path to the software stored on the tftp server The URL is in the fo...

Страница 64: ...Layer 2 Professional Release 1 0 10 05 V After the loading procedure has been completed successfully activa te the new software as follows Select the Basics Restart dialog und and perform a cold start...

Страница 65: ...e http Update browser window V Click Browse or Search to select the software switch bin on your PC for the update V Click Update to transfer the software to the Switch The end of the update is indicat...

Страница 66: ...Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 V After the software procedure has been completed successfully go to Basics Restart and perform a cold start Restart Switch V Click Reload...

Страница 67: ...o connect U Selecting the Operation Mode In the state on delivery all ports are switched to the Automatic Configu ration mode V Select the Basics Port Configuration dialog V Select in the Port on colu...

Страница 68: ...on error via the signal contact and the LED display The Switch allows you to disable the displaying of connection error messages for instance to prevent a device that has been turned off from being in...

Страница 69: ...access Protect your network from unauthorized access The Switch provides you with the following functions for protecting against unauthorized access D Password for SNMP access D Setting the Telnet Web...

Страница 70: ...er and the password with the entries in the MIB of the Switch see Management Information BASE MIB on page 174 If the password has the appropriate access right and if the IP address of the sending com...

Страница 71: ...se note that passwords are case sensitive For security reasons the read password and the read write pass word must not be identical The Web based Interface and the User Interface communicate via SNMP...

Страница 72: ...write access restart the Web in terface in order to access the Switch Note For security reasons the passwords are not displayed Make a note of every change You cannot access the Switch without a valid...

Страница 73: ...select SNMPv1 or SNMPv2 in the table you can determine which IP addresses are allowed to access the Switch and which kind of pass words are to be used The table allows up to 8 entries For security rea...

Страница 74: ...1 Password for SNMP access Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Abb 22 Dialog SNMPv1 v2 access V To create a new line in the table click Create entry V To delete an entry selec...

Страница 75: ...Telnet server has been switched off the Switch can no longer be accessed via a Telnet connection Note The telnet server may be reactivated via the command line interface out of band or via the Securi...

Страница 76: ...dialog V Switch off the server to which you wish to disable access V Enter the command enable to switch to the privileged EXEC mode V Enter the command transport input telnet to switch on the telnet s...

Страница 77: ...overy function 6 3 1 Description HiDiscovery protocol The HiDiscovery protocol see Entering the IP parameters via HiDiscovery on page 35 allows you to assign an IP address to the Switch on the basis o...

Страница 78: ...y Protocol frame or limit access to read only V Enter the command enable to switch to the privileged EXEC mode V Enter the command network protocol hidiscovery off to switch off the HiDiscovery functi...

Страница 79: ...ine by his MAC address or his IP address D What should happen after an unauthorized access attempt The Switch can respond in three selectable ways to an unauthorized access attempt non no response tra...

Страница 80: ...ess column shows the MAC address of the device from which data was last received By pressing the left mouse button you can copy an entry from the Current MAC address column into the Allowed MAC addres...

Страница 81: ...urity dialog Note This entry in the port configuration table is part of the configuration Loading saving settings on page 51 and is saved together with the configuration Note An alarm trap can only be...

Страница 82: ...witch The authentication and authorization is carried out by the Authenticator in this case the Switch This authenticates or does not authenticate the supplicant the querying device e g a PC which mea...

Страница 83: ...cation server replies concerning the autherization D The Switch evaluates the reply and allows access to the supplicant at this port or leaves the port in the blocked state 6 5 3 Preparing the switch...

Страница 84: ...the Shared secret column you enter the character string which you get as a key from the administrator of your Radius server V With Primary server you name this server as the first server which the Swi...

Страница 85: ...in the order of milliseconds the Simple Net work Time Protocol SNTP offers a low cost solution Accuracy depends on signal running time Areas of application of this protocol are log entries time stampi...

Страница 86: ...ccount D The System time uses IEEE 1588 SNTPtime allowing for the lo cal time difference from IEEE 1588 SNTPtime System time IEEE 1588 SNTPtime Local offset D Time Source displays the origin of the fo...

Страница 87: ...ter the command enable to switch to the privileged EXEC mode V Enter the command configure to change to the configuration mo de V Enter the command sntp time YYYY MM DD HH MM SS to set the Switch syst...

Страница 88: ...Coordinated at disposal The UTC is the time which is refe renced to Universal Time Coordinated The display is the same worldwide Local time differences are not taken into account The SNTP Client obta...

Страница 89: ...tch on the SNTP function on all devices whose time you want to set using SNTP V If you do not have a reference clock at your disposal use a Switch as the reference clock and set its system time as acc...

Страница 90: ...packages U SNTP Status D The Status message displays conditions such as Server cannot be reached U Configuration SNTP Server V In Anycast destination address you enter the IP address to which the SNT...

Страница 91: ...nswer from the ex ternal server address 0 5 seconds after making a request Note If you are receiving the system time from an external redun dant server address you do not accept any SNTP broadcasts se...

Страница 92: ...218 112 2 149 218 112 3 Function on on on Anycast destination address 224 0 1 1 224 0 1 1 224 0 1 1 Server VLAN ID 1 1 1 Anycast send interval 120 120 120 Client External server address 149 218 112 0...

Страница 93: ...cks according to their accuracy An algorithm that measures the accuracy of the available clocks in the network determines the most accurate time for the grandmaster clock Stratum number Specification...

Страница 94: ...al clock into consideration in relationship to the reference clock Fig 27 Delay and jitter problems when synchronizing clocks To get around the delay and jitter in the protocol stack IEEE 1588 recom m...

Страница 95: ...t are integrated into the devices These clocks are synchronized on the one side of the signal path and on the other side of the signal path are used to synchronize the subsequent clocks ordinary clock...

Страница 96: ...fficient for most applications V Draw a network plan showing all devices involved in PTP to get an overview of the distribution of the clocks Note Connect all connections you need to distribute PTP in...

Страница 97: ...to the ports individually U PTP Global V Select the Time PTP dialog V Switch on the function ind the Operation IEEE 1588 PTP frame V If you have designated this Switch to be the PTP reference clock c...

Страница 98: ...nce clock PTP SubdomainName Name of the PTP subdomain which the local clock belongs to By selecting Reinitialize you accept the changes PTP PreferredMaster Defines the local clock as the Prefer red Ma...

Страница 99: ...ock see Table 6 on page 91 PTP ClockIdentifier Properties of the clock e g accuracy epoch etc Fig 30 PTP Global dialog U PTP port D PTP Port enalble Port sends receives PTP synchronization messages di...

Страница 100: ...d PTP function on this port is disabled passive Port is in the PTP passive mode listening Port has no information available and is awaiting synchronization messages D PTP port burst disable During a s...

Страница 101: ...ely from one source If you want the switch to receive the system time using PTP enter the external server address 0 0 0 0 and do not accept any SNTP broadcasts when performing the SNTP client configur...

Страница 102: ...nization PTP is active in all three switches ensuring that relative to each other the system times of the switches are synchronized precisely As the con nectable terminal devices in the example exclus...

Страница 103: ...Traffic control To optimize the data transmission the Switch provides you with the following functions for controlling the network load D Settings for directed frame forwarding MAC address filter D Mu...

Страница 104: ...address entries 8 1 1 Store and forward All data received by the Switch is stored and its validity is checked Invalid and defective data packets 1 522 Bytes or CRC errors as well as frag ments 64 Byt...

Страница 105: ...the learned addresses Address entries which exceed a certain age 30 seconds aging time are deleted by the Switch from its address table The Switch floods data packets with an unknown target address Th...

Страница 106: ...l filters are stored in the filter table Forwarding Database FDB The table has three parts a static part and two dynamic parts D The management administrator describes the static part of the filter ta...

Страница 107: ...he receiving port to all other ports In the Create static entry dialog you can set up new filters The following status settings are possible D learned the filter was created automatically by the Switc...

Страница 108: ...ll the data packets with a Multicast address to all the ports This leads to an increased bandwidth re quirement Protocols such as GMRP and processes such as IGMP Snooping enable the Switches to exchan...

Страница 109: ...IP transmission a camera sends its image data with a multicast address over the network To prevent the many images from slowing down the entire network the Switch uses the GMRP to distribute multicast...

Страница 110: ...rship by means of a Leave message from IGMP version 2 and they do not transmit any more Report messages In IGMP versions 1 and 2 the router removes the routing table entry if it does not receive any R...

Страница 111: ...id of the GMRP For a Switch registration involves entering the multicast address in the filter table When a multicast address is entered in the filter table the Switch sends this information in a GMRP...

Страница 112: ...entire Switch If the GMRP is switched off then D the Switch does not generate any GMRP packets D it does not evaluate any GMRP packets received discards them and D it sends streams received data pack...

Страница 113: ...P report messages to the ports at which it receives IGMP queries This column allows you to also send IGMP report messages to other selected ports U Learned Query Port A Switch sends IGMP report messag...

Страница 114: ...Traffic control 112 8 2 Multicast application Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 34 IGMP GMRP dialog...

Страница 115: ...a second If more than the maximum entered number of broadcasts are sent within a second the Switch rejects all subsequent broadcasts destined for this port A global setting activates deactivates the b...

Страница 116: ...queues traffic classes in compliance with IEEE 802 1D 1998 The assignment of received data packets to these clas ses depends on D the priority of the data packet contained in the VLAN tag priority ov...

Страница 117: ...her data packets waiting in the queue 8 4 3 Tagging The VLAN tag is integrated into the MAC data frame for the VLAN and prio ritization functions in accordance with the IEEE 802 1 Q standard The VLAN...

Страница 118: ...min 64 max 1522 Octets Pream ble Field Start Fram e Delim iter Field Destination Address Field Source Address Field Tag Field Data Field Length Type Field Data Field Pad Field Fram e Check Sequence Fi...

Страница 119: ...05 8 4 Prioritization 117 8 4 4 Setting Prioritization V Select the Basics Port Configuration dialog V In the Port Priority column you can specify the priority low normal high admin with which the Swi...

Страница 120: ...usly transmit a large amount of data to Workstation 4 The combined bandwidth of Workstations 1 2 and 3 is larger than the bandwidth of Workstation 4 to the Switch This leads to an overflow of the send...

Страница 121: ...f duplex link between Work station 2 and the Switch Before the send queue of Port 2 overflows the Switch sends data so that workstation 2 detects a collision and thus interrupts the transmis sion 8 5...

Страница 122: ...6 1 Description VLANs A virtual LAN VLAN consists of a group of network participants in one or more network segments who can communicate with each other as if they be longed to the same LAN Fig 38 Exa...

Страница 123: ...ture of the VLAN tag see Fig 36 to 4094 Key words often used in association with VLANs are U Ingress Rule The ingress rules stipulate how incoming data is to be handled by the Switch U Egress Rule The...

Страница 124: ...ctions complying with IEEE 802 1Q standard Note When configuring the VLAN ensure that the port to which your management station is connected can still send the data of the mana gement station after sa...

Страница 125: ...re that supports this function namely D Power MICE D MICE Rel 3 0 and higher D RS2 Rel 7 0 and higher D RS2 16M Rel 7 1 and higher D MACH 3000 Note In the HIPER Ring configuration select for the ring...

Страница 126: ...AN V Define the affiliation of the ports you require not a member of the VLAN M a member of the VLAN packet is transmitted with tag F not a member of the VLAN even not dynamically via GVRP U a member...

Страница 127: ...ctice The configuration is explained step by step V Select the Switching VLAN Current dialog The Current table displays all configured VLANs All refers to the local VLANs configured by GVRP V Select t...

Страница 128: ...l 126 8 6 VLANs Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 39 Example of a VLAN 149 218 112 208 149 218 112 76 h H h H h H h H VLAN Yellow VLAN Green VLAN Brown ID 1 Network Mana...

Страница 129: ...c control Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 8 6 VLANs 127 Fig 40 Creating a VLAN Fig 41 Entering a VLAN ID V Repeat the steps Creating a VLAN and Entering a VLAN ID for all...

Страница 130: ...Traffic control 128 8 6 VLANs Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 42 Assigning a VLAN any name and saving it...

Страница 131: ...to 1 3 are assigned to the terminal devices of the yellow VLAN and ports 2 1 to 2 4 to the terminal devices of the green VLAN As termi nal devices normally do not sent data packets with a tag the sett...

Страница 132: ...Traffic control 130 8 6 VLANs Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 44 Saving the VLAN configuration...

Страница 133: ...igned to the terminal devices of the yellow VLAN and therefore VLAN ID 2 and ports 2 1 to 2 4 are assigned to the termi nal devices of the green VLAN and hence VLAN ID 3 Port 1 4 serves as an uplink p...

Страница 134: ...Traffic control 132 8 6 VLANs Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 46 Saving the configuration to non volatile memory...

Страница 135: ...tch provides you with the following diagnostic tools for the function diagnosis D Sending traps D Out of band signaling via signal contact D Port status indication D Event counter on port level D SFP...

Страница 136: ...uerying the data stations at regular intervals Traps make it possible to react quickly to critical situations Examples of such events are D a hardware reset D changing the basic device configuration D...

Страница 137: ...ot of the spanning tree topologyChange is sent if the transmission mode of a port changes risingAlarm is sent if an RMON alarm input exceeds the upper threshold fallingAlarm is sent if an RMON alarm i...

Страница 138: ...Operation Diagnostics 134 9 1 Sending traps Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 9 1 2 SNMP traps when booting The ColdStart trap is sent during every boot procedure...

Страница 139: ...n alarm trap and to whom these alarms should be sent V In the IP Address column enter the IP address of a network management station to which the traps should be sent V In the Active column you mark t...

Страница 140: ...wer Supply The status of a supply voltage has changed see the System dialog Signaling Relay The status of the signal contact has changed To cosider this event enable generate Trap in the Diagno stics...

Страница 141: ...indica tion of link status can be masked by the management for each port see Verbindungsfehler melden auf Seite 68 Link status is not monitored in the delivery condition D HIPER Ring event the loss of...

Страница 142: ...ividually Application options D Simulation of an error during SPS error monitoring D Remote control of a device via SNMP such as switching on a camera V Select the Diagnostics Signal Contact 1 2 dialo...

Страница 143: ...he command line interface V Select the Diagnostics Signal Contact dialog V Select Monitoring correct operation in the frame Mode Signal con tact to use the contact for function monitoring V Select in...

Страница 144: ...Operation Diagnostics 140 9 2 Out of band signaling Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 49 Signal contact dialog...

Страница 145: ...ice view displays the Switch with the current configuration The symbols underneath the device view represent the status of the individu al ports Abb 50 Eaxample for a device view Meaning of the symbol...

Страница 146: ...Operation Diagnostics 142 9 3 Port status indication Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 The port is in autonegotiation mode...

Страница 147: ...ter Possible Problems Received Fragments The controller of the connected device is faulty Electromagnetic interference is injected into transfer medium CRC error The controller of the connected device...

Страница 148: ...Operation Diagnostics 144 9 4 Event counter on port level Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 51 Port statistic table...

Страница 149: ...g the SFP status displayed you can view the current connection to the SFP modules and their properties The properties include D module type D support provided in the media module D temperature in degr...

Страница 150: ...or then the Distance row contains the distance of the port from the cable error Prerequisites for a proper cable diagnosis D 1000BASE T port is connected via an 8 core cable with a 1000BASE T port or...

Страница 151: ...devices that have LLDP activated The connection information contains as its most significant element the precise and unique ID of a connection endpoint MSAP MAC Service Access Point This is composed...

Страница 152: ...y switches without LLDP support drop the LLDP packets Consequently a non LLDP capable device between two LLDP capable devices prevents the exchange of LLDP infor mation To avoid this Hirschmann Switch...

Страница 153: ...s dialogue offers you the possibility to switch on off the function for topology discovery LLDP The topology table shows you the selected information to neighbour devices The option View LLDP entries...

Страница 154: ...active topology discovery function are connected to a port the topology table hides the devices without ac tive topology discovery If D only devices without active topology discovery are connected to...

Страница 155: ...ch records all important device internal events D System Information The system information in an HTML file containing all system relevant data These reports are available for diagnosis purposes In se...

Страница 156: ...management tool connected to the destination port such as an RMON probe can thus observe the data traffic at the source port The destination port forwards data to be sent and blocks received data Fig...

Страница 157: ...rt traffic port mirroring 153 V Select enabled to enable the function The Delete button in the dialog allows you to restore all the default port mirroring settings state on delivery Note In active por...

Страница 158: ...Operation Diagnostics 154 9 9 Monitoring port traffic port mirroring Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Страница 159: ...Setting up DHCP Server and TFTP Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 153 Apendix A Setting up DHCP Server and TFTP...

Страница 160: ...nstallation and then decide whether you want to purchase a license V To install the DHCP server on your PC insert the CD ROM into the CD drive of your PC and under Additional Software select haneWIN D...

Страница 161: ...gram settings in the menu bar Options Preferences and select the DHCP tab page Enter the settings shown in the illustration and click on OK Fig 57 DHCP setting V To enter the configuration profiles se...

Страница 162: ...ase 1 0 10 05 V Enter the network mask and click on Accept Fig 59 Network mask in the configuration profile V Select the Boot tab page V Enter the IP address of your tftp server V Enter the path and t...

Страница 163: ...a profile for each device type If devices of the same type have different configurations then you add a profile for each configuration To complete the addition of the configuration profiles click on O...

Страница 164: ...d with Layer 2 Professional Release 1 0 10 05 V Click on New Fig 63 Adding static addresses V Enter the MAC address of the switch V Enter the IP address of the switch V Select the configuration profil...

Страница 165: ...r and TFTP Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 A 1 Setting up DHCP BOOTP Server 159 V Add an entry for each device that will get its parameters from the DHCP server Fig 65 DHC...

Страница 166: ...t installation and then decide whether you want to purchase a license V To install the DHCP server on your PC insert the CD ROM into the CD drive of your PC and under Additional Software select haneWI...

Страница 167: ...Setting up DHCP Server Option 82 161 V Select static Fig 67 Static address input V Open the window for the program settings in the menu bar Options Preferences and select the DHCP tab page V Select th...

Страница 168: ...rver Option 82 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 V To enter the static addresses click on Add Fig 69 Adding static addresses V Select Circuit Identifier and Remote Identifie...

Страница 169: ...g form ciclhhvvvvssmmpprirlxxxxxxxxxxxx D ci sub identifier for the type of the circuit ID D cl length of the circuit ID D hh Hirschmann identifier 01 if a Hirschmann switch is connected to the port o...

Страница 170: ...Option 82 Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 Fig 72 Application example of using Option 82 PLC Switch Option 82 IP 149 218 112 100 IP 149 218 112 100 MAC address 00 80 63 10...

Страница 171: ...ttp update saves you having to configure the tftp server The Switch requires the following information to be able to make a software update from the tftp server D its own IP address entered permanentl...

Страница 172: ...d HP V First check whether the tftp daemon background process is running i e whether the file etc inetd conf contains the following line siehe Abb 73 and whether the status of this process is IW SunOS...

Страница 173: ...tp daemon alt hough it is actually running Special steps for HP workstations V During installation on an HP workstation enter the user tftp in the etc passwd file For example tftp 510 20 tftp server u...

Страница 174: ...server Edit the file etc inetd conf No Delete the comment character from this line Yes Re initialize inetd conf by entering kill 1 PID Is tftp commented out tftp dgram udp wait root usr etc in tftpd...

Страница 175: ...tp server Once Switch software has been installed the tftp server should have the following directory structure with the stated access rights d directory r read w write x execute 1st position designat...

Страница 176: ...Setting up DHCP Server and TFTP 170 A 3 tftp server for software updates Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Страница 177: ...General Information Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05 171 Appendix B General Information...

Страница 178: ...ove the competition with its comprehensive spectrum of innovative services D Consulting incorporates comprehensive technical advice from system evaluation through network planning to project planning...

Страница 179: ...y asked questions can be found at the Hirschmann Website www hirschmann com Under Products Support inside Automation and Network Soluti ons is located on the pages Products the area FAQ For detailed i...

Страница 180: ...iption or the object ID OID identifies the object class The subidentifier SID is used for instantiation Example The generic object class hmPSState OID 1 3 6 1 4 1 248 14 1 2 1 3 is the description of...

Страница 181: ...ss 12 digit hexadecimal number in accordance with ISO IEC 8802 3 Object Identifier x x x x e g 1 3 6 1 1 4 1 248 Octet String ASCII character string PSID Power Supply Identification number of the powe...

Страница 182: ...scription of the MIB can be found on the CD ROM that is included with the device 1 internet 1 iso 3 org 6 dod 2 mgmt 1 enterprises 248 hirschmann 4 private 3 modules 10 Framework 6 snmp V2 1 mib 2 4 i...

Страница 183: ...Internet Group Management Protocol IP Internet Protocoll LED Light Emitting Diode LLDP Link Layer Discovery Protocoll LWL Lichtwellenleiter MAC Media Access Control NTP Network Time Protocol PC Person...

Страница 184: ...901 Community based SNMP v2 D RFC 1905 Protocol Operations for SNMP v2 D RFC 1906 Transport Mappings for SNMP v2 D RFC 1907 Management Information Base for SNMP v2 D RFC 1908 Coexistence between SNMP...

Страница 185: ...ual Conventions for SMI v2 D RFC 2580 Conformance statements for SMI v2 D RFC 2613 SMON D RFC 2618 RADIUS Authentication Client MIB D RFC 2620 RADIUS Accounting MIB D RFC 2674 Dot1p Q D RFC 2818 HTTP...

Страница 186: ...802 1 D 1998 Media access control MAC bridges includes IEEE 802 1p Priority and Dynamic Multi cast Filtering GARP GMRP D IEEE 802 1 Q 1998 Virtual Bridged Local Area Networks VLAN Tagging Port Based V...

Страница 187: ...Release 1 0 10 05 B 7 Technical Data 181 B 7 Technical Data Switch MAC address table up to 8000 entries Static address filter up to 100 entries VLAN VLAN ID 1 to 4042 MACH 4000 3966 Number of VLANs ma...

Страница 188: ...r sell copies of the Software and to permit persons to whom the Software is furnished to do so subject to the following conditions The above copyright notice and this permission notice shall be includ...

Страница 189: ...rtant information that will ensure trouble free operation Your comments and suggestions help us to further improve the quality of our documentation Your assessment of this manual excellent good satisf...

Страница 190: ...ent and additional information General comments Company Department Name Telephone number Street Zip code City Date Signature Dear User Please fill out and return this page by fax to the number 49 0 71...

Страница 191: ...ss field 102 Destination port 151 DHCP 25 33 DHCP client 43 DHCP Option 82 46 DHCP server 154 160 E Egress rule 119 Erlaubte IP Adresse 80 Event counters 143 F FAQ 173 Faulty Device Replacement 49 FDB...

Страница 192: ...queues 112 Priority tagged frames 113 Protocol stack 92 PTP 91 PTP Abs Max Offset 96 PTP Delay To Master 96 PTP Grandmaster UUID 96 PTP is Synchronized 96 PTP Offset To Master 96 PTP Parent UUID 96 P...

Страница 193: ...es 112 Transmission security 132 Trap 80 132 135 Trap destination table 132 Trivial File Transfer Protocol 165 Type field 113 U Unicast 106 Unique Universal Identifier 96 Universal Time Coordinated 86...

Страница 194: ...188 Index Layer 2 Enhanced with Layer 2 Professional Release 1 0 10 05...

Страница 195: ......

Страница 196: ......

Результаты поиска

Содержание MS30, Power MICE, MACH 4000, OCTOPUS

Отзывы:

Бренды по названию

Популярные бренды

Hirschmann MS30, Power MICE, MACH 4000, OCTOPUS, Руководство пользователя

Результаты поиска

Содержание MS30, Power MICE, MACH 4000, OCTOPUS

Отзывы:

Бренды по названию

Популярные бренды