ICP DAS USA FSM-510G series Скачать руководство пользователя

Страница: 45 / 99

QoS Application Guide

Case 1: (f)

This case means all frames will not pass through.

Case 1: (g)

User can set default ACL Rule of GE port as “Deny”, then to bind a suitable profile with “Permit” action for
ACL. It means GE port can not pass through all packets but ACL entry of the profile binding.

One directional MAC address with one VLAN permit filtering.

◎

Step 1: Create a new ACL Profile. (Profile Name: AllowSomeMac)

Step 2: Create a new ACL Entry rule under this ACL profile. (Allow MAC: 11 and VLAN: 4)

Step 3: Bind this ACL profile to a GE port. (PORT-4)

Содержание FSM-510G series

Страница 1: ...1 FSM 510G series 10 Port Managed Industrial Ethernet Switch User Guide Version Number Issue 1 0 Dec 2014...

Страница 2: ...owngrade Software 22 Reset to Default and Save Configure 23 LED STATUS INDICATIONS 26 VLAN Application Guide 29 Example 1 Default VLAN Settings 29 Example 2 Port based VLANs 30 Example 3 IEEE 802 1Q T...

Страница 3: ...able 1 LED Status Indicators 26 LIST OF FIGURES Figure 1 FSM 510G DIN Rail Mounting 10 Figure 2 FSM 510G Wall Mounting 11 Figure 3 LED Indicators 26 Preface Scope Audience Safety Instructions Document...

Страница 4: ...primary hazards of exposure to laser radiation from an optical fiber communication system are Damage to the eye by accidental exposure to a beam emitted by a laser source Damage to the eye from viewin...

Страница 5: ...5 Overview Overview Faceplate Panel Introduction Technical Specifications...

Страница 6: ...re range extended power input range and advanced VLAN QoS features It s ideal for harsh environments and mission critical applications Faceplate 10 Port series Front Panel Introduction Front Panel Sys...

Страница 7: ...510G 2F FSM 510G 4F Total Gigabit Ethernet Ports 10 10 10 100 1000 BaseT X 8 6 100 1000 Base SFP 2 4 Top Panel Introduction Top Panel Power Input Dual 6P Terminal Block Console RS232 RJ45 Reset Push B...

Страница 8: ...TP IEEE 802 1s MSTP Port Trunk with LACP Static trunk or Dynamic via LACP Link Aggregation Control Protocol Bridge VLANs Protocols Flow control IEEE 802 3x Full Duplex and Back Pressure Half Duplex VL...

Страница 9: ...P Client Server Relay Snooping Option 82 NTP SNTP Yes Environmental Compliances Operating temperature range 40 to 75 C cold startup at 40 C Storage temperature range 40 to 85 C Humidity non condensing...

Страница 10: ...10 Quick Installation Equipment Mounting Cable Connecting Equipment Configuration...

Страница 11: ...ail Mounting step 1 Screw the DIN Rail bracket on with the bracket and screws in the accessory kit 2 Hook the unit over the DIN rail 3 Push the bottom of the unit towards the DIN Rail until it snaps i...

Страница 12: ...12 Mounting the FSM 510G Wall mount Mounting step 1 Screw on the wall mounting plate on with the plate and screws in the accessory kit Figure 2 FSM 510G Wall Mounting...

Страница 13: ...13 Ground Connections FSM 510G must be properly grounded for optimum system performance...

Страница 14: ...onnect to a PC use a straight through or a cross over Ethernet cable To connect the FSM 510G copper Port to an Ethernet device use UTP Unshielded Twisted Pair or STP Shielded Twisted Pair Ethernet cab...

Страница 15: ...connector Refer to Table 1 for the normal operational LED status Fiber optics cable with LC duplex connector Connect the optical fiber to the SFP socket DANGER Never attempt to view optical connectors...

Страница 16: ...input range 12V 58V The DC power connector is a 6 pin terminal block There is alarm contact on the middle terminal block Refer to Table 1 for the normal operational LED status Note 1 The DC power shou...

Страница 17: ...nsole port is for local management by using a terminal emulator or a computer with terminal emulation software DB9 connector connect to computer COM port Baud rate 115200bps 8 data bits 1 stop bit Non...

Страница 18: ...M 510G the DB9 connector of the cable is connected to the PC COM port The pin assignment of the Console cable is shown below SYSTEM RESET The Reset button is provided to reboot the system without the...

Страница 19: ...d Web page font Times New Roman Plain text font Courier New Encoding Unicode UTF 8 Text size Medium Firefox with the following default settings is recommended Web page font Times New Roman Encoding Un...

Страница 20: ...20 Connect Login to FSM 510G 1 Connecting to FSM 510G Ethernet port RJ45 Ethernet port 2 Factory default IP 192 0 2 1 3 Login with default account and password Username admin Password none...

Страница 21: ...J45 Ethernet port 2 Key in the command under Telnet telnet 192 0 2 1 3 Login with default account and password Username admin Password none 4 Change the IP with commands listed below CLI Command enabl...

Страница 22: ...tus By SFP Refer to Figure 3 for monitoring 4 Gigabit Ethernet with SFP connector Also refer to Table 1 for the normal operational LED status Up Downgrade Software 1 In Web UI go to Maintenance Softwa...

Страница 23: ...command reload defaults keep ip 2 check interface VLAN and IP address confirm only management IP setting kept 3 Execute this command copy running config startup config If manager want to reset the al...

Страница 24: ...utton 2 Go to Maintenance Configuration Save startup config pagination then click Save Configuration button then reset successfully If manager want to reset the all configuration to default completely...

Страница 25: ...25 3 Change WEB s IP be 192 0 2 1 default IP to login PC s Web UI 4 Go to Maintenance Configuration Save startup config pagination then click Save Configuration button then reset successfully...

Страница 26: ...nk down On Yellow A 100 Mbps or a 1000Mbps connection is detected Copper ports Speed Off No link or a 10 Mbps connection is detected O On n G Gr re ee en n E Et th he er rn ne et t l li in nk k u up p...

Страница 27: ...27 Figure 3 LED Indicators PWR LED Indicator ALM LED Indicator Copper Link Act LED Copper Speed LED SFP Speed LED SFP Link LED Indicator...

Страница 28: ...28 Application Guide VLAN Application Guide Security Application Guide Ring Protection Application Guide QoS Application Guide Link Fail Alarm Application Guide 802 1x Authentication Application Guide...

Страница 29: ...only to ports in the same VLAN Example 1 Default VLAN Settings Each port in the FSM 510G has a configurable default VLAN number known as its PVID This places all ports on the same VLAN initially alth...

Страница 30: ...ollowing figure the untagged packet is marked tagged as it leaves the FSM 510G through Port 2 which is configured as a tagged member of VLAN100 The untagged packet remains unchanged as it leaves the F...

Страница 31: ...ep4 Transmit untagged unicast packets from Port 1 to Port 2 and Port 7 The FSM 510G should tag it with VID 100 The packet has access to Port2 and Port 7 The outgoing packet is stripped of its tag to l...

Страница 32: ...k vlan tag native switchport mode trunk exit interface GigabitEthernet 1 2 switchport access vlan 100 switchport trunk native vlan 100 switchport trunk allowed vlan 1 100 switchport trunk vlan tag nat...

Страница 33: ...200 because of the tag assignment in the packet Port 2 is configured as a tagged member of VLAN 100 and Port 7 is configured as an untagged member of VLAN 200 Hosts in the same VLAN communicate with...

Страница 34: ...tag it with VID 200 The packet only has access to Port7 The outgoing packet on Port 7 is stripped of its tag as an untagged packet Step4 Transmit unicast packets with VLAN tag 100 from Port 2 to Port...

Страница 35: ...runk vlan tag native switchport mode trunk exit interface GigabitEthernet 1 1 switchport access vlan 100 switchport trunk allowed vlan 1 100 switchport trunk vlan tag native switchport mode trunk exit...

Страница 36: ...ut permit frames set in ACL entry h Deny all frames i Deny all frames j Deny all frames but to copy frame which set in ACL entry to a defined GE port Case 1 ACL for MAC address For MAC address ACL it...

Страница 37: ...ional MAC address with one VLAN deny filtering Step 1 Create a new ACL Profile Profile Name DenySomeMac Step 2 Create a new ACL Entry rule under this ACL profile Deny MAC 11 and VLAN 4 Step 3 Bind thi...

Страница 38: ...ess list ace 1 ingress interface GigabitEthernet 1 4 policy 1 vid 4 frametype etype smac 00 00 00 00 00 11 action deny exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 switchport t...

Страница 39: ...al MAC address with all VLAN deny filtering Step 1 Create a new ACL Profile Profile Name DenySomeMac Step 2 Create a new ACL Entry rule under this ACL profile Deny SrcMAC 13 and DesMAC 11 Step 3 Bind...

Страница 40: ...ace 2 ingress interface GigabitEthernet 1 3 policy 0 frametype etype smac 00 00 00 00 00 13 dmac 00 00 00 00 00 11 action deny exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 swi...

Страница 41: ...port Case 1 d User can set default ACL Rule of GE port as Permit then to bind a suitable profile with CoS Marking action for some ACL function It means GE port can remark CoS of the VLAN frame receiv...

Страница 42: ...ess list ace 1 next 2 ingress interface GigabitEthernet 1 4 policy 1 vid 4 frametype etype smac 00 00 00 00 00 11 action deny exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 switc...

Страница 43: ...ill copy frames from binding GE Port to analyzer port Two directional MAC address with Copy Frame action Don t care VLAN ID Ether Type Step 1 Create a new ACL Profile Profile Name CopyFrameTest Step 2...

Страница 44: ...terface GigabitEthernet 1 3 policy 0 frametype etype smac 00 00 00 00 00 13 dmac 00 00 00 00 00 11 action deny mirror redirect interface GigabitEthernet 1 5 exit interface GigabitEthernet 1 3 switchpo...

Страница 45: ...file with Permit action for ACL It means GE port can not pass through all packets but ACL entry of the profile binding One directional MAC address with one VLAN permit filtering Step 1 Create a new AC...

Страница 46: ...access list ace 4 ingress interface GigabitEthernet 1 4 policy 3 tag tagged vid 4 frametype etype smac 00 00 00 00 00 11 exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 switchpor...

Страница 47: ...MAC address with all VLAN permit filtering Step 1 Create a new ACL Profile Profile Name AllowSomeMac Step 2 Create a new ACL Entry rule under this ACL profile Allow SrcMAC 13 and DesMAC 11 Step 3 Bin...

Страница 48: ...ss list ace 5 ingress interface GigabitEthernet 1 3 policy 5 frametype etype smac 00 00 00 00 00 13 dmac 00 00 00 00 00 11 exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 switchpo...

Страница 49: ...file with Copy Frame action for mirror analyzer used It means the system will copy frames from binding GE Port to analyzer port There is no frame received from the denied GE port but the mirror analyz...

Страница 50: ...QoS Application Guide 50 Step 5 Send frames between PORT 3 and PORT 4 see test result FSM510G FSM510G FSM510G...

Страница 51: ...ac 00 00 00 00 00 13 dmac 00 00 00 00 00 11 Exit monitor destination interface GigabitEthernet 1 5 monitor source cpu both exit interface GigabitEthernet 1 3 switchport trunk allowed vlan 4 5 switchpo...

Страница 52: ...it should select exact one Protocol from UDP or TCP When it filters on both directional IP address and L4 port packets coincident with both rules will take effect In other words it does not do filter...

Страница 53: ...important to Ethernet applications especially in Industrial domain Tailyn s FSM 510G provides a mini second grade failover ring protection this feature offers a seamless working network even if encou...

Страница 54: ...te When role is ring slave both ring ports are forward port Group 2 It support configuration of the ring coupling and dual homing Ring it could be master or slave Coupling it could be primary and back...

Страница 55: ...n and balancing chain Chain it could be head tail or member When role is chain head one ring port is head port and another is member port Both ring ports are forwarded in normal state When role is cha...

Страница 56: ...cing chain terminal 1 2 one ring port is terminal port and another is member port Both ring ports are forwarded in normal state When role is balancing chain member both ring ports are member port Both...

Страница 57: ...T 2 that means PORT 1 is one of the ports connected with other switch so is PORT 2 Then choose one of ring connection devices be Master which you can accept the Node 2 port be blocking port id 1 node1...

Страница 58: ...re include ring coupling dual homing chain and balancing chain Note 1 It must enable group1 before configure group2 as coupling Note 2 When group1 or group2 is enabled the configuration of group3 is i...

Страница 59: ...QoS Application Guide 5 First Step Disable RSTP on All Ring Port 1 Go to Configuration Spanning Tree CIST ports Web page 2 Do not enable STP global 3 Click Save bottom...

Страница 60: ...nable Group1 and Select Role be Ring Master 3 Select one port link to neighbor devices be Forward Port another is Block Port Ring Slave 1 Go to Configuration Ringv2 Web page 2 Enable Group1 and Select...

Страница 61: ...nk to above ring be Primary Port Coupling Backup 1 Go to Configuration Ringv2 Web page 2 Enable Group1 and Select Role be Ring Slave 3 Select two port link to neighbor devices be Forward Port 4 Enable...

Страница 62: ...page 2 Enable Group3 and Select Role be Chain Head 3 Select one port link to other ring or networks be Head Port Chain Tail 1 Go to Configuration Ringv2 Web page 2 Enable Group3 and Select Role be Cha...

Страница 63: ...Select Role be Balance Chain Central Block 3 Select one port be Block Port which could distribute traffic loading Balance Chain Terminal 1 Go to Configuration Ringv2 Web page 2 Enable Group3 and Sele...

Страница 64: ...its CoS queue User needs to bind VLAN priority queue mapping profile to each port for every VLAN priority need assign a traffic descriptor for it The traffic descriptor defines the shapping parameter...

Страница 65: ...bps Expected Result We expect PORT 2 only can receive 100Mbps of Stream1 and Stream0 will be discarded This case will help user to know how SPQ works on the FSM 510G Gigabit port VLAN Priority Queue m...

Страница 66: ...rt 2 link speed to 100Mbps full duplex Step2 Select Configuration VLANs Create a VLAN with VLAN ID 100 Enter a VLAN name in the Name field Here we set tagged VLAN100 on PORT 1 and PORT 2 CLI configura...

Страница 67: ...traffic are not flooding Expected Result We expect PORT 2 only can receive 20Mbps of Stream1 and 80Mbps of Stream0 This case will help user to know how SPQ works on the FSM 510G VDSL port VLAN Priorit...

Страница 68: ...length 1518bytes Stream4 for Learning Dst Mac 00 00 00 00 10 02 Src Mac 00 00 00 00 20 02 Vlan 100 Vlan prio 0 Send rate 10Mbps Packet length 1518bytes Web management Step1 Go to Configuration Qos Por...

Страница 69: ...Application Guide 6 CLI configuration command vlan 100 v100 interface gigabit 1 vlan 100 tag exit interface gigabit 2 qos shaper 100000 qos queue shaper queue 0 80000 qos queue shaper queue 7 20000 e...

Страница 70: ...ic are not flooding WRR support weight assignment the range of weight value is from 1 to 255 Bye the way FSM 510G applies WRR scheduling and weight 1 for all the Gigabit Ethernet Port In the following...

Страница 71: ...0 08 Src Mac 00 00 00 00 10 08 Vlan 100 Vlan prio 7 Send rate 100Mbps Packet length 1518bytes Stream3 for Learning Dst Mac 00 00 00 00 10 01 Src Mac 00 00 00 00 20 01 Vlan 100 Vlan prio 0 Send rate 10...

Страница 72: ...n Guide 72 Web management Step1 Go to Configuration Qos Port shaping and click on PORT 2 to create a Qos profile Step2 Select schedule mode be Weighted and set weight value for queue 0 queue 3 and que...

Страница 73: ...hybrid allowed vlan 1 100 switchport trunk vlan tag native switchport mode trunk exit interface GigabitEthernet 1 2 switchport trunk allowed vlan 1 100 switchport trunk vlan tag native switchport mod...

Страница 74: ...way FSM 510G applies WRR scheduling and weight 1 for all the Gigabit Ethernet Port In the following case we will assign Weight 1 for Priority0 Weight 2 for Priority1 Weight3 for Priority2 and Weight4...

Страница 75: ...100Mbps Packet length 1518bytes Stream3 Dst Mac 00 00 00 00 20 04 Src Mac 00 00 00 00 10 04 Vlan 100 Vlan prio 7 Send rate 100Mbps Packet length 1518bytes Stream5 for Learning Dst Mac 00 00 00 00 10...

Страница 76: ...ps Packet length 1518bytes Web management Step1 Go to Configuration Qos Port shaping and click on PORT 2 to create a Qos profile Step2 Select schedule mode be Weighted and set weight value for queue 0...

Страница 77: ...hport trunk allowed vlan 1 100 switchport hybrid allowed vlan 100 4095 switchport trunk vlan tag native switchport mode trunk qos shaper 100000 qos queue shaper queue 0 500 qos queue shaper queue 1 50...

Страница 78: ...Queue mapping Stream0 Dst Mac 00 00 00 00 20 01 Src Mac 00 00 00 00 10 01 Vlan 100 Vlan prio 0 Send rate 100Mbps Packet length 1518bytes Stream1 Dst Mac 00 00 00 00 20 02 Src Mac 00 00 00 00 10 02 Vla...

Страница 79: ...ps Packet length 1518bytes Stream5 for Learning Dst Mac 00 00 00 00 10 01 Src Mac 00 00 00 00 20 01 Vlan 100 Vlan prio 0 Send rate 10Mbps Packet length 1518bytes Stream6 for Learning Dst Mac 00 00 00...

Страница 80: ...20 07 Vlan 100 Vlan prio 0 Send rate 10Mbps Packet length 1518bytes Web management Step1 Go to Configuration Qos Port shaping and click on PORT 2 to create a Qos profile Step2 Select schedule mode be...

Страница 81: ...configuration command interface GigabitEthernet 1 2 switchport trunk allowed vlan 1 100 switchport hybrid allowed vlan 100 4095 switchport trunk vlan tag native switchport mode trunk qos shaper 10000...

Страница 82: ...routers to establish multicast group memberships It is an integral part of the IP multicast specification like ICMP for unicast connections IGMP can be used for online video and gaming and allows mor...

Страница 83: ...8...

Страница 84: ...of Snooping Enable 2 Un select the check box of Unregistered IPMCv4 Flooding Enabled 3 If Multicast stream is from L3 switch then the uplink port have to be Router Port Notice If an aggregation member...

Страница 85: ...8 4 Go to Configuration IPMC VLAN Configuration to select the check box of Snooping Enable and set VLAN ID of port14...

Страница 86: ...86...

Страница 87: ...io these clients belong to multiple vlans you have to create more one vlan to be the agent for all client vlans 1 To create a vlan go to Configuration VLANs Allow Access VLANs then set port 14 be vlan...

Страница 88: ...the check box of Snooping Enable and set VLAN ID of port14 3 If there is no querier on the L3 switch you have to select Querier Election and set the Querier Address the IP address is in the same netwo...

Страница 89: ...8 How to Configuration VLC VLC Configure on IGMP Server 1 In Media area of top tool bar to select Stream 2 Select a video or voiced file to play...

Страница 90: ...90 3 Confirm the file is right then click Next twice...

Страница 91: ...9 4 Select stream type as UDP and click Add button 5 Set stream IP the range is 224 0 0 1 to 239 255 255 254 and protocol port is 1234 Here I set stream IP is 255 0 0 1...

Страница 92: ...92 6 Select Sort out all stream and click Stream button then the stream start to send to switch VLC Configure on IGMP Client 1 In Media area of top tool bar to select open network stream...

Страница 93: ...otocol port as previous setting on server the protocol type is UDP the format should as below circle then click PLAY button Back to management switch Go to Monitor IPMC Groups Information you will see...

Страница 94: ...he network Please see the following description 802 1x Timer in FSM 510G Item Parameter sec Description 1 ReAuth Period FSM 510G will restart authentication after each Reauth Period when authenticatio...

Страница 95: ...9 client 20 20 20 0 24 secret a1b2c3d4 The secret in the IVS500 should be the same with this one...

Страница 96: ...Authentication via FSM 510G to be authenticated by RADIUS server In a basic example we take port 1 as a testing port which enables 802 1x in FSM 510G With default configuration use the following Web U...

Страница 97: ...9 Step1 Go to Configuration Security AAA Radius Click Add New Server Input 20 20 20 20 for server and a1b2c3d4 for secret key Then click Save button CLI Command...

Страница 98: ...nable check box then to configure EAP type to MD5 Challenge After setting this function in NIC supplicant should enter a correct pair of account and password in order to use this Ethernet port service...

Страница 99: ...should pass authentication process in order to use any service After supplicant enters correct account and password which stored in RADIUS server it can be authenticated successfully The authenticati...

Результаты поиска

Содержание FSM-510G series

Отзывы:

Похожие инструкции для FSM-510G series

Бренды по названию

Популярные бренды

ICP DAS USA FSM-510G series, Руководство пользователя

Результаты поиска

Содержание FSM-510G series

Отзывы:

Похожие инструкции для FSM-510G series

Бренды по названию

Популярные бренды