Interlogix GE-DS-242-PoE Скачать руководство пользователя страница 191

Страница: 191 / 218

Chapter 6: Command Line Interface

GE-DS-242-PoE Managed Ethernet Switch User Manual

187

acl (add|edit) <1-220> (permit|deny) <0-4094> ipv4 <0-255>

Description:

Add or edit ACL group for Ipv4.

Syntax:

acl (add|edit) <1-220> (permit|deny) <0-4094> ipv4 <0-255> A.B.C.D A.B.C.D
A.B.C.D A.B.C.D (check|unCheck) <0-65535> <0-26>

Parameters:

(add|edit)

specifies the operation.

<1-220>

specifies the group id.

(permit|deny)

specifies the action. permit: permit packet cross switch; deny:

drop packet.

<0-4094>

specifies the VLAN id. 0 means don't care.

<0-255>

specifies the IP protocol. 0 means don't care.

A.B.C.D

specifies the Source IP address. 0.0.0.0 means don't care.

A.B.C.D

specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means

compare all.

A.B.C.D

specifies the Destination IP Address. 0.0.0.0 means don't care.

A.B.C.D

specifies the Mask. 0.0.0.0 means don't care, 255.255.255.255 means

compare all.

(check|unCheck)

specifies the IP Fragment. check: Check IP fragment field;

unCheck: Not check IP fragment field.

<0-65535>

specifies the Destination port number if TCP or UDP. 0 means don't

care.

<0-26>

specifies the Port id. 0 means don't care.

e.g.

Switch(config)# acl add 1 deny 1 ipv4 0 192.168.1.1 255.255.255.255 0.0.0.0 0.0.0.0
unCheck 0 0

This ACL rule will drop all packet from IP is 192.168.1.1 with VLAN id=1 and
IPv4.

Содержание GE-DS-242-PoE

Страница 1: ...P N 1069174 REV B ISS 13NOV14 GE DS 242 PoE Managed Ethernet Switch User Manual...

Страница 2: ...Security B V Kelvinstraat 7 6003 DH Weert Netherlands Certification N4131 FCC compliance This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to pa...

Страница 3: ...ess Overview 22 Web Management 23 SNMP Based Network Management 25 Administration Console 25 Protocols 27 Management Architecture 28 Chapter 4 Web Based Management 29 About Web based Management 29 Sys...

Страница 4: ...tion 157 MAC limit 162 Port Mirroring Configuration 163 Quality of Service 164 MAC Address Configuration 167 STP RSTP Commands 170 SNMP 175 IGMP 179 802 1x Protocol 181 Access Control List 185 Binding...

Страница 5: ...Form Factor Pluggable interface The GE DS 242 PoE has a high performance switch architecture that is capable of providing non blocking switch fabric and wire speed throughput as high as 8 8Gbps Its tw...

Страница 6: ...peed Switching The Interlogix GE DS 242 PoE Managed Switch offers 24 Ethernet ports with 2 Gigabit TP SFP combo ports Port 25 26 The type 24 Fast Ethernet ports of GE DS 242 PoE are 10 100Base TX copp...

Страница 7: ...oping 802 1X Authentication RADIUS Access Control List SNMP and 4 RMON groups How to Use this Manual This User Manual is structured as follows Section Section Content INTRODUCTION Product description...

Страница 8: ...EEE 802 3ab IEEE 802 3z Gigabit Ethernet standard o High performance Store and Forward architecture broadcast storm control runt CRC filtering eliminates erroneous packets to optimize the network band...

Страница 9: ...groups Security o Layer 2 3 4 Access Control List ACL o IEEE 802 1x Port Based Authentication o MAC address Filtering and MAC address Binding o IP address security management to prevent unauthorized i...

Страница 10: ...ces powered o Support PoE Power up to 15 4 watts for each PoE ports o Auto detect powered device PD o Circuit protection prevent power interference between ports o Remote power feeding up to 100m o Po...

Страница 11: ...ytes Address Table 8K entries Share Data Buffer 512Kbytes Flash 4Mbytes DRAM 16Mbytes Maximum Frame Size 9K Bytes Flow Control Back pressure for Half Duplex IEEE 802 3x Pause Frame for Full Duplex LED...

Страница 12: ...d Spanning Tree Link Aggregation Static Port Trunk IEEE 802 3ad LACP Link Aggregation Control Protocol Supports 13 groups of 8 Port trunk support Quality of Service Traffic classification based on Por...

Страница 13: ...IEEE 802 3z Gigabit SX LX IEEE 802 3ab Gigabit 1000Base T IEEE 802 3x Flow Control and Back pressure IEEE 802 1d Spanning tree protocol IEEE 802 1w Rapid spanning tree protocol IEEE 802 1p Class of s...

Страница 14: ...Chapter 1 Introduction 10 GE DS 242 PoE Managed Ethernet Switch User Manual...

Страница 15: ...ion of the Managed Switch on the desktop or rack mount For easier management and control of the Managed Switch familiarize yourself with its display indicators and ports Front panel illustrations in t...

Страница 16: ...25 Port 26 1000Base SX LX mini GBIC slot SFP Small Form Factor Pluggable transceiver module from 550 meters Multi mode fiber up to 10 30 50 70 120 kilometers Single mode fiber Console Port The consol...

Страница 17: ...ed Switch Until the PWR LED goes out Resets the Managed Switch to Factory Default configuration The Managed Switch will then reboot and load the default settings as below Default Password admin Defaul...

Страница 18: ...rfaces LED Color Function LNK ACT 1000 Green Lit indicates the port is operating at 1000Mbps Off indicates the port is operating at 10Mbps or 100Mbps Blink indicates the Switch is actively sending or...

Страница 19: ...ent data loss or downtime 2 In some areas installing a surge suppression device may also help protect your Managed Switch from being damaged by unregulated power surges or current to either the Switch...

Страница 20: ...onnect one end of a standard network cable to the 10 100 1000 RJ 45 ports on the front of the Managed Switch B Connect the other end of the cable to the network devices printer servers workstations ro...

Страница 21: ...ach side of the Managed Switch Use the supplied screws attached to the package Figure 2 5 shows how to attach brackets to one side of the Managed Switch Figure 2 5 Attaching rack mount brackets to the...

Страница 22: ...ot swappable You can insert and remove a transceiver to and from any SFP port without powering down the Managed Switch as shown in Figure 2 7 Figure 2 7 Plugging in the SFP transceiver Approved Interl...

Страница 23: ...iber cable one side must be male duplex LC connector type Connect the fiber cable 1 Attach the duplex LC connector on the network cable into the SFP transceiver 2 Connect the other end of the cable to...

Страница 24: ...er Manual Figure 2 8 Pulling out the SFP transceiver CAUTION Never pull out the module without pulling the handle or the push bolts on the module Pulling out the module with too much force could damag...

Страница 25: ...anagement applications and the communication and management protocols that deliver data between your management device work station or personal computer and the system It also contains information abo...

Страница 26: ...in Serial Port connection Above PC with COM Port DB 9 RS 232 or USB to RS 232 converter NOTE We recommended Internet Explore 6 0 or above to access the Managed Switch Management Access Overview The Ma...

Страница 27: ...t based Telnet functionality and HyperTerminal built into Windows 95 98 NT 2000 ME XP operating systems Secure Must be near switch or use dial up connection Not convenient for remote users Modem conne...

Страница 28: ...Chapter 3 Switch Management 24 GE DS 242 PoE Managed Ethernet Switch User Manual Figure 3 1 Web management setup Figure 3 2 Web main screen of Managed Switch...

Страница 29: ...it can read and write to the MIBs However if it only knows the get community string it can only read MIBs The default gets and sets community strings for the Managed Switch are public Figure 3 3 SNMP...

Страница 30: ...erminal or a PC equipped with a terminal emulation program such as HyperTerminal to the Managed Switch console serial port When using this management method a straight DB9 RS 232 cable is required to...

Страница 31: ...al Terminal Protocols Telnet A virtual terminal protocol is a software program such as Telnet that allows you to establish a management session from a Macintosh a PC or a UNIX workstation Because Teln...

Страница 32: ...ffering a connectionless mode service Management Architecture All of the management application modules use the same Messaging Application Programming Interface MAPI By unifying management methods wit...

Страница 33: ...E6 0 or later version does not allow Java Applets to open sockets The user has to explicitly modify the browser setting to enable Java Applets to use network ports The Managed Switch can be configured...

Страница 34: ...Browser and JAVA runtime environment Plug in It is recommended to use Internet Explorer 6 0 or above to access the GE DS 242 PoE Managed Switch Figure 4 1 Web management setup Logging on to the Switch...

Страница 35: ...ult User name admin Default Password admin Figure 4 2 Login screen 1 After entering the username and password the main screen appears as Figure 4 3 Figure 4 3 Web main page 2 The Switch Menu on the le...

Страница 36: ...A changed IP address take effect immediately after click on the Save button you need to use the new IP address to access the Web interface For security reason please change and memorize the new passwo...

Страница 37: ...the image of a port opens the Port Statistics page The port states are illustrated as follows State Disabled Down Link RJ 45 Ports SFP Ports PoE Ports Main Menu Using the onboard web agent you can def...

Страница 38: ...his section has the following items System Information Provides basic system description including contact information IP Configuration Sets the IP address for management access SNMP Configuration Con...

Страница 39: ...nd MAC address The screen in Figure 4 6 appears Figure 4 6 Basic System Information screenshot This page includes the following fields OBJECT DESCRIPTION MODEL NAME Displays the system name of the Man...

Страница 40: ...in the switch s address table The value is a multiple of 6 Default is 300 seconds Broadcast Storm Filter Mode To configure broadcast storm control enable it and set the upper threshold for individual...

Страница 41: ...Direct Map Default mode is CRC Hash 802 1x protocol Enable disable 802 1x protocol Apply button Press the button to complete the configuration IP Configuration The Managed Switch is a network device w...

Страница 42: ...includes the IP Address Subnet Mask and Gateway The Configured column is used to view or change the IP configuration Fill up the IP Address Subnet Mask and Gateway for the device The screen in Figure...

Страница 43: ...f DHCP client function is disabled the user has to assign the subnet mask in this column field Gateway Assign the network gateway for the switch If DHCP client function is disabled the user has to ass...

Страница 44: ...nd abundant disk space At least one NMS must be present in each managed environment SNMP Agents Agents are software modules that reside in network elements They collect and store management informatio...

Страница 45: ...group that devices and management stations running SNMP belong to It helps define where information is sent The community name is used to identify the group A SNMP device or agent may belong to more t...

Страница 46: ...cal location of this node e g telephone closet 3rd floor The allowed string length is 0 to 255 and the allowed content is the ASCII characters from 32 to 126 System Contact The textual identification...

Страница 47: ...ty strings that you defined before on the Managed Switch Trap Managers A trap manager is a management station that receives the trap messages generated by the switch If no trap manager is defined no t...

Страница 48: ...o the Managed Switch Figure 4 13 Firmware Upgrade interface This page includes the following fields OBJECT DESCRIPTION TFTP Server IP Address Type in your TFTP server IP Firmware File Name Type in the...

Страница 49: ...le The Firmware upgrade process takes several minutes Please wait a while and then manually refresh the webpage Configuration Backup TFTP Restore Configuration You can restore a previous backup config...

Страница 50: ...toring TFTP Backup Configuration You can back up the current configuration from flash ROM to the TFTP server for the purpose of recovering the configuration later It helps you to avoid wasting time on...

Страница 51: ...ment GE DS 242 PoE Managed Ethernet Switch User Manual 47 Factory Default Reset Switch to default configuration Click the reset button to restore all configurations to the default value Figure 4 17 Fa...

Страница 52: ...Web Based Management 48 GE DS 242 PoE Managed Ethernet Switch User Manual System Reboot Reboot the Switch with a software reset Click the reboot button to reboot the system Figure 4 18 System Reboot...

Страница 53: ...to the speed and duplex mode are negotiated automatically When you set it as Force you have to set the speed and duplex mode manually Speed It is available for selecting when the Negotiation column is...

Страница 54: ...range is 0 8000 The unit is 128K 0 disable rate control 1 8000 valid rate value Security A port in security mode will be locked without permission of address learning Only the incoming packets with S...

Страница 55: ...isplays current port configurations and operating status it is a ports configurations summary table Via the summary table you can learn the status of each port at a glance like Port Link Up Link Down...

Страница 56: ...TION Port The port number Link The status of linking Up or Down State Set by Port Control When the state is disabled the port will not transmit or receive any packet Tx Good Packet The counts of trans...

Страница 57: ...et The counts of multicast packet Port Sniffer The Port Sniffer mirroring is a method for monitor traffic in switched networks Traffic through a port can be monitored by one specific port That is traf...

Страница 58: ...t Analysis port to LAN analyzer or netxray Monitored Port The port you want to monitor The monitor port traffic will be copied to Analysis port You can select one monitor ports in the switch User can...

Страница 59: ...gically a VLAN can be equated to a broadcast domain because broadcast packets are forwarded to only members of the VLAN on which the broadcast was initiated NOTE 1 No matter what basis is used to uniq...

Страница 60: ...s in packet headers The tagging feature allows VLAN to span multiple 802 1Q compliant switches through a single physical connection and allows Spanning Tree to be enabled on all ports and work normall...

Страница 61: ...e Cyclic Redundancy Check CRC must be recalculated Adding an IEEE802 1Q Tag Dest Addr Src Addr Length E type Data Old CRC Dest Addr Src Addr E type Tag Length E type Data New CRC Priority CFI VLAN ID...

Страница 62: ...nected to a tag aware device the packet should be tagged Default VLANs The Switch initially configures one VLAN VID 1 called default The factory default setting assigns all ports on the Switch to the...

Страница 63: ...nsole Management GE DS 242 PoE Managed Ethernet Switch User Manual 59 The Managed Switch supports Port based and 802 1Q Tagged based VLAN in web management page In the default configuration VLAN suppo...

Страница 64: ...tag from packet headers to maintain compatibility with devices that are tag unaware Port Based VLAN Packets can go among only members of the same VLAN group Note all unselected ports are treated as b...

Страница 65: ...oup See Figure 4 26 appears 4 Type a name and Group ID for the new VLAN the available range is 2 4094 5 From the Available ports box select ports to add to the Managed Switch and click Add 6 Click App...

Страница 66: ...N group ID and available range is 2 4094 Port Indicate port 1 to port 26 Add Defines the interface as a Port Based member of a VLAN Member Remove Forbidden ports are not included in the VLAN NOTE All...

Страница 67: ...eeping the VLAN information intact The VLAN information in the tag can then be used by other 802 1Q compliant devices on the network to make packet forwarding decisions Untagged Ports with untagging e...

Страница 68: ...e 1 Click the hyperlink VLAN Static VLAN to enter the VLAN configuration interface 2 Select 802 1Q in the VLAN Operation Mode to enable the 802 1Q VLAN function 3 Click Add to create a new VLAN group...

Страница 69: ...ernet Switch User Manual 65 Figure 4 28 VLAN Group Configuration interface 5 Select specific port as member port The screen in Figure 4 29 appears Figure 4 29 802 1Q VLAN Setting Web Page screen This...

Страница 70: ...t 7 Please press Back for return to VLAN configuration screen to add other VLAN group the screen in Figure 4 28 appears 8 If there are many groups that over the limit of one page you can click Next to...

Страница 71: ...Chapter 4 Console Management GE DS 242 PoE Managed Ethernet Switch User Manual 67 Figure 4 30 802 1Q Ingress filter interface...

Страница 72: ...set one VLAN ID the range is 1 255 default VLAN ID is 1 The VLAN ID must as same as the VLAN ID that the port belong to VLAN group or the untagged traffic will be dropped Ingress Filtering 1 Ingress f...

Страница 73: ...ight easily overlap and traffic passing through the infrastructure might be mixed Assigning a unique range of VLAN IDs to each customer would restrict customer configurations require intensive process...

Страница 74: ...is way the MAC table requirements are reduced Q in Q Port Setting The QinQ VLAN QinQ Port Setting screen in Figure 4 31 appears Figure 4 31 Q in Q Port Setting interface This page includes the followi...

Страница 75: ...ame service provider network might overlap and traffic of customers through the infrastructure might be mixed Assigning a unique range of VLAN IDs to each customer would restrict customer configuratio...

Страница 76: ...ons STP Spanning Tree Protocol IEEE 802 1D RSTP Rapid Spanning Tree Protocol IEEE 802 1w The IEEE 802 1D Spanning Tree Protocol and IEEE 802 1W Rapid Spanning Tree Protocol allow for the blocking of l...

Страница 77: ...the following information The unique identifier of the switch that the transmitting switch currently believes is the root switch The path cost to the root from the transmitting port The port identifie...

Страница 78: ...s Ports must wait for new network topology information to propagate throughout the network before starting to forward packets They must also wait for the packet lifetime to expire for BPDU packets tha...

Страница 79: ...Console Management GE DS 242 PoE Managed Ethernet Switch User Manual 75 From listening to learning or to disabled From learning to forwarding or to disabled From forwarding to disabled From disabled t...

Страница 80: ...p If properly configured each port stabilizes to the forwarding or blocking state No packets except BPDUs are forwarded from or received by STP enabled ports until the forwarding state is enabled for...

Страница 81: ...g elected as the root bridge 32768 Hello Time The length of time between broadcasts of the hello message by the switch 2 seconds Maximum Age Timer Measures the age of a received BPDU for a port and en...

Страница 82: ...t to switch C and switch C will broadcast it to back to switch A and so on The broadcast packet will be passed indefinitely in a loop potentially causing a network failure In this example STP breaks t...

Страница 83: ...Console Management GE DS 242 PoE Managed Ethernet Switch User Manual 79 Figure 4 34 Before Applying the STA Rules In this example only the default STP values are used Figure 4 35 After Applying the S...

Страница 84: ...undant link between switch B and C is deliberately chosen as a 100 Mbps Fast Ethernet link default port cost 19 Gigabit ports could be used but the port cost should be increased from the default to en...

Страница 85: ...ts without receiving Spanning tree Protocol configuration messages before attempting a reconfiguration Enter a value between 6 through 40 Hello Time 1 10 The time that controls the switch to send out...

Страница 86: ...e identifier of the root bridge It is made up from the bridge priority and the base MAC address of the bridge Root Path Cost For the Root Bridge this is zero For all other Bridges it is the sum of the...

Страница 87: ...e of priority must be the multiple of 16 Admin P2P The rapid state transitions possible within RSTP are dependent upon whether the port concerned can only be connected to exactly another bridge i e it...

Страница 88: ...et to 65 535 By default the system automatically detects the speed and duplex mode used on each port and configures the path cost according to the values shown below Table 4 1 Recommended STP Path Cos...

Страница 89: ...ns for exchanging information between Partner Systems on a link to allow their Link Aggregation Control instances to reach agreement on the identity of the Link Aggregation Group to which the link bel...

Страница 90: ...k group LACP Enabled the trunk group is using LACP A port which joins an LACP trunk group has to make an agreement with its member ports first Disabled the trunk group is a static trunk group The adva...

Страница 91: ...he two switches Aggregator Information When you setup the LACP aggregator you will see relational information here LACP disabled Having set up the aggregator setting with LACP disabled you will see th...

Страница 92: ...l see the trunking group information between two switches on the tab of Aggregator Information Switch 1 configuration 1 Set System Priority of the trunk group The default is 1 2 Select a trunk group I...

Страница 93: ...ull down the drop down menu bar 8 Enable LACP 9 Include the member ports by clicking the Add button after selecting the port number and the column field of Work Ports changes automatically Figure 4 44...

Страница 94: ...Chapter 4 Web Based Management 90 GE DS 242 PoE Managed Ethernet Switch User Manual Figure 4 45 Switch 1 Aggregator Information...

Страница 95: ...ncel the checkbox beside the state label When you remove the tick mark of the port and click the Apply button the port state activity will change to Passive Figure 4 46 State Activity of Switch 1 This...

Страница 96: ...2 PoE Managed Ethernet Switch User Manual Figure 4 47 State Activity of Switch 2 NOTE A link having two passive LACP nodes will not perform dynamic LACP trunk because both ports are waiting for an LAC...

Страница 97: ...with the corresponding SMAC address have been seen after a configurable age time Dynamic MAC Table Entries in the MAC Table are shown on this page The Dynamic MAC Table contains up to 8192 entries and...

Страница 98: ...learn a device s MAC address when the disconnected or powered off device is active on the network again Via this interface you can add modify delete a static MAC address Add the Static MAC Address You...

Страница 99: ...s the switch can easily filter the pre configured MAC address and increase the security You can add and delete filtering MAC address Figure 4 50 MAC Filtering interface This page includes the followin...

Страница 100: ...issions need to inform nearby routers that they will become members of a multicast group The Internet Group Management Protocol IGMP is used to communicate this information IGMP is also used to period...

Страница 101: ...Chapter 4 Console Management GE DS 242 PoE Managed Ethernet Switch User Manual 97 Figure 4 51 Multicast Service Figure 4 52 Multicast flooding...

Страница 102: ...rs to join or leave at any time IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group IGMP version 1 is defined in RFC 1112 It has a fixed...

Страница 103: ...p A host will never send a report when it wants to leave a group for version 1 A host will send a leave report when it wants to leave a group for version 2 Multicast routers send IGMP queries to the a...

Страница 104: ...of querying the LAN for group members It then propagates the service requests on to any upstream multicast switch router to ensure that it will continue to receive the multicast service NOTE Multicas...

Страница 105: ...P Querier Enable or disable the IGMP query function The IGMP query information will be displayed in IGMP status section NOTE Fast Leave The Managed Switch can be configured to immediately delete a mem...

Страница 106: ...Assigning priorities to traffic for example to set higher priorities to time critical or business critical applications Applying security policy through traffic filtering Provide predictable throughpu...

Страница 107: ...e Address VLAN TAG Ethernet Type Data FCS 6 bytes 6 bytes 4 bytes 2 bytes 46 1517 bytes 4 bytes Set up the COS priority level With the drop down selection item of Priority Type above being selected as...

Страница 108: ...example 8 Highest 4 SecHigh 2 SecLow 1 Lowest means that the switch sends 8 highest priority packets before sending 4 second high priority packet before sending 2 second low priority packet before se...

Страница 109: ...ice Code Point DSCP to 3 bit priority mapping The Type of Service TOS octet in the IPv4 header is divided into three parts Precedence 3 bits TOS 4 bits and MBZ 1 bit The Precedence bits indicate the i...

Страница 110: ...N TAG Optional Ethernet Type 0800 Data FCS 6 bytes 6 bytes 4 bytes 2 bytes 2 bytes 46 1517 bytes 4 bytes The DSCP is six bits wide allowing coding for up to 64 different forwarding behaviors The DSCP...

Страница 111: ...alues of the IP DSCP header field within the incoming packet 0 63 Priority Specify which 802 1p priority to map the corresponding IP DSCP The value is 0 7 TOS DSCP Port Configuration Set up IP TOS DSC...

Страница 112: ...te access rights to a given object depending on certain aspects of the process that is making the request principally the process s user identifier Access Control List ACL is a mechanism that implemen...

Страница 113: ...following fields IPv4 ACL OBJECT DESCRIPTION DEFAULT VALUE Group ID 1 247 max 247 ACL group Action Permit Deny Permit Permit packet cross switch Deny Drop packet Permit VLAN Any VID Any Any VLAN id VI...

Страница 114: ...ange from 0 to 255 Any IP Fragment Set this field if Packet Type is IPv4 else ignore Uncheck Check Uncheck Not check IP fragment field Check Check IP fragment field Uncheck L4 Protocol Set this field...

Страница 115: ...CT DESCRIPTION DEFAULT VALUE Group ID 1 247 max 247 ACL group Action Permit Deny Permit Permit packet cross switch Deny Drop packet Permit VLAN Any VID Any Any VLAN ID VID 1 4094 A certain VLAN ID Any...

Страница 116: ...lect Binding OBJECT DESCRIPTION DEFAULT VALUE Group ID 1 247 max 247 ACL group Action Permit Deny Permit Permit packet cross switch Deny Drop packet Permit VLAN Any VID Any Any Vlan id VID 1 4094 A ce...

Страница 117: ...ress table should be blocked MAC Limit Configuration The Layer 2 MAC Limit function can be per port configured for security management purposes When the port is in MAC Limit mode the port will be lock...

Страница 118: ...imit Port Status This table displays current MAC Limit status of each port Figure 4 62 MAC Limit MAC Limit Port Status This page includes the following fields OBJECT DESCRIPTION Port Number Indicate p...

Страница 119: ...onnecting to a LAN through publicly accessible ports The authentication server authenticates each client connected to a switch port before making available any services offered by the switch or the LA...

Страница 120: ...the client and the authentication server requesting identity information from the client verifying that information with the authentication server and relaying a response to the client The switch inc...

Страница 121: ...that the client has been successfully authenticated When the client supplies its identity the switch begins its role as the intermediary passing EAP frames between the client and the authentication s...

Страница 122: ...the port state changes to authorized and all frames from the authenticated client are allowed through the port If the authentication fails the port remains in the unauthorized state but authentication...

Страница 123: ...s function Figure 4 66 802 1x System Configuration interface This page includes the following fields OBJECT DESCRIPTION IEEE 802 1x Protocol Enable or disable 802 1x protocol Radius Server IP Assign t...

Страница 124: ...E 802 1x Protocol Enable or disable 802 1x protocol 4 12 3 802 1x Port Configuration In this page you can select the specific port and configure the authorization state The state provides No Authoriza...

Страница 125: ...121 OBJECT DESCRIPTION Authorize The specified port is set to the Authorized or Unauthorized state in accordance with the outcome of an authentication exchange between the Supplicant and the authentic...

Страница 126: ...the port waits for retransmit next EAPOL PDU during an authentication session Default value is 30 seconds Supplicant Timeout Set the period of time the switch waits for a supplicant response to an EA...

Страница 127: ...N Access Points Museum Sightseeing Airport Hotel Campus Factory Warehouse can install the Access Point any where with no hesitation 10 12 watts IP Surveillance Enterprise Museum Campus Hospital Bank c...

Страница 128: ...user defined priorities The power budget is managed according to the following user definable parameters maximum available power ports priority maximum allowable power per port The Over Temperature Pr...

Страница 129: ...e of PoE Switch PoE Function Can enable or disable the PoE function Priority Set port priority for the POE power management It can choose the port priority value is Critical High Low High priority is...

Страница 130: ...t the PSE the PD may opt to provide a signature for Class 1 to 3 The PD is classified based on power The classification of the PD is the maximum power that the PD will draw across all input voltages a...

Страница 131: ...Chapter 4 Console Management GE DS 242 PoE Managed Ethernet Switch User Manual 127...

Страница 132: ......

Страница 133: ...ou can connect the console port directly through PC without the need of Null Modem To get more information about how to connect to the console interface of GE DS 242 PoE with HyperTerminal please refe...

Страница 134: ...al Figure 5 1 GE DS 242 PoE Console Login screen NOTE For security reasons please change and memorize the new username and password after this first setup Username Max 6 Min 1 characters Password Max...

Страница 135: ...r the Switch please use the procedures as follows Show the current IP address 1 On Switch prompt enter configure 2 On Switch config prompt enter show ip 3 The screen displays the current IP address Su...

Страница 136: ...itch through the new IP address NOTE If you are not familiar with console command or the related parameter enter help anytime in console to get the help description You can change these settings if de...

Страница 137: ...of those available at the privileged level Use this mode to Perform basic tests Display system information Privileged EXEC Enter the enable command while in User EXEC mode switch Enter disable to exit...

Страница 138: ...Chapter 5 Console Management 134 GE DS 242 PoE Managed Ethernet Switch User Manual...

Страница 139: ...Ethernet Switch User Manual 135 Chapter 6 Command Line Interface Operation Notice To enter the configuration mode you need to be in the privileged mode and then types in the command configure Switch c...

Страница 140: ...rsor forward one word Backspace Delete the character before the cursor Del Delete the character at the cursor The following generic function keys provide functions in all of the menus Command Help You...

Страница 141: ...ist specifies the ports to be turn on or off If not entered all ports are turn on or off port nego Description Set port negotiation Syntax port nego force auto nway force port list Parameters port lis...

Страница 142: ...les flow control in half duplex mode port list specifies the ports to be set If not entered all ports are set port rate Description Set port effective ingress or egress rate Syntax port rate ingress e...

Страница 143: ...port list specifies the ports to be set If not entered all ports are set show port status Description Show port status including port State Link Trunking VLAN Negotiation Speed Duplex Flow control Ra...

Страница 144: ...ow port statistics including TxGoodPkt TxBadPkt RxGoodPkt RxBadPkt TxAbort Collision and DropPkt Parameters port id specifies the port to be shown Switch config show port statistics Port 1 Information...

Страница 145: ...formation More show port protection Description Show protected port information Switch config show port protection Port Protected Group 1 off 1 2 off 1 3 off 1 4 off 1 5 off 1 6 off 1 7 off 1 8 off 1...

Страница 146: ...Chapter 6 Command Line Interface 142 GE DS 242 PoE Managed Ethernet Switch User Manual 21 off 1 22 off 1 25 off 1 26 off 1 Trk1 off 1...

Страница 147: ...the switch can balance the traffic among the remaining links NOTE The 10 100 Mbps port cannot be trunked with gigabit port port 25 26 All ports in the same trunk group will be treated as a single port...

Страница 148: ...ort list specifies the ports to be set active port list specifies the ports to be set to LACP active no trunk Description Delete an existing trunk group Syntax no trunk trunk id Parameters trunk id sp...

Страница 149: ...n Show LACP information Switch config show lacp status LACP is enabled LACP system priority 32768 show lacp agg Description Show LACP aggregator information Syntax show lacp agg trunk id Parameters tr...

Страница 150: ...d its associated port You must define the outgoing ports allowed for each port when you use port based VLANs In port based VLANs the packets received from one port can only be sent to the ports which...

Страница 151: ...perate a logical VLAN group among switches The GE DS 242 PoE supports both Port based VLAN and Tag based 802 1Q VLAN modes The default configuration is tag based 802 1Q VLAN In the 802 1Q VLAN initial...

Страница 152: ...le below configures the switch to drop the packets not belonging to the same VLAN group and forward the packets not containing VLAN tags show vlan mode Description Display the current VLAN mode vlan m...

Страница 153: ...not entered all members set to untagged e g switch config vlan add 1 vlan1 cpu port 1 4 This VLAN entry has four members from port1 to port4 and all members are untagged no vlan Description Delete VLA...

Страница 154: ...tagged Port2 Untagged Port3 Untagged Port4 Untagged Port5 Untagged Port6 Untagged Port7 Untagged Port8 Untagged Port9 Untagged Port10 Untagged Port11 Untagged Port12 Untagged Port13 Untagged Port14 Un...

Страница 155: ...witch User Manual 151 show vlan static Description Show static VLAN entry information show vlan pvid Description Show port default VLAN id Syntax show vlan pvid LIST Parameters LIST specifies the port...

Страница 156: ...ch User Manual Switch config show vlan pvid Port PVID Port1 1 Port2 1 Port3 1 Port4 1 Port5 1 Port6 1 Port7 1 Port8 1 Port9 1 Port10 1 Port11 1 Port12 1 Port13 1 Port14 1 Port15 1 Port16 1 Port17 1 Po...

Страница 157: ...cifies the non members packet will be forwarded or not If set enable forward only packets with VID matching this port s configured VID enable disable specifies the untagged frame will be dropped or no...

Страница 158: ...Forward Port5 Drop Forward Port6 Drop Forward Port7 Drop Forward Port8 Drop Forward Port9 Drop Forward Port10 Drop Forward Port11 Drop Forward Port12 Drop Forward Port13 Drop Forward Port14 Drop Forwa...

Страница 159: ...e MAC address age out mac age time 6 1572858 Parameters 6 1572858 specifies the MAC address age out time Must be divisible by 6 Type the number of seconds that an inactive MAC address remains in the s...

Страница 160: ...P multicast IP multicast packets filter Broadcast Packets Broadcast Packets filter Syntax broadcast select unicast multicast control packet ip multicast broadcast Collision Retry Description Collision...

Страница 161: ...me name str Parameters name str specifies the switch name If you would like to have spaces within the name use quotes around the name no hostname Reset the switch name to factory default setting no pa...

Страница 162: ...Description Set the default gateway IP address Syntax ip default gateway ip addr show ip Description Show IP address subnet mask and the default gateway show info Description Shows basic information...

Страница 163: ...dhcp client it can get ip from dhcp server NOTE If you set this command the switch will reboot show dhcp Description Show dhcp enable disable Reboot switch boot Description Reboot warm start the switc...

Страница 164: ...o be downloaded from the TFTP server Restore Configure File copy tftp running config flash Description Retrieve configuration from the TFTP server If the remote file is the text file of CLI commands u...

Страница 165: ...iption Send configuration to the TFTP server If you want to save the configuration in a text file of CLI commands use the keywordrunning config If you want to save the configuration flash image instea...

Страница 166: ...ntil it is aged out When an opening is available the switch stored the first new MAC address it sees in that opening All packets from MAC addresses not in the MAC address table should be blocked User...

Страница 167: ...y the direction of the traffic that you want to monitor After properly configured packets with the specified direction from the monitored ports are forwarded to the monitoring port NOTE The default Po...

Страница 168: ...ording to the settings of 802 1p Priority and Static Port Ingress Priority When the received packet is an 802 1p tagged packet the switch will put the packet into a queue according to the 802 1p Prior...

Страница 169: ...QoS level 0 7 priority level can map to highest second high second low lowest queue qos priority Description Set 802 1p priority Syntax qos priority first come first service all high before low weigh...

Страница 170: ...rations QoS mode weighted round robin Highest weight 8 Second High weight 4 Second Low weight 2 Lowest weight 1 802 1p priority 0 7 Lowest Lowest SecLow SecLow SecHigh SecHigh Highest Highest Per Port...

Страница 171: ...supplied the last parameter must be port list Otherwise it must be port id Syntax mac address table static mac addr vlan id port id port list no mac address table static mac addr Description Delete st...

Страница 172: ...ing with 01 00 5E is supplied the last parameter must be port list Otherwise it must be port id Syntax smac address table static mac addr vlan id port id port list show smac address table Description...

Страница 173: ...Chapter 6 Command Line Interface GE DS 242 PoE Managed Ethernet Switch User Manual 169 show filter Description Display filter MAC address table...

Страница 174: ...delay 4 30 Parameters 4 30 specifies the forward delay in seconds Default value is 15 NOTE The parameters must enforce the following relationships 2 hello time 1 maximum age 2 forward delay 1 spanning...

Страница 175: ...ce the following relationships 2 hello time 1 maximum age 2 forward delay 1 spanning tree priority Description Set spanning tree bridge priority Syntax spanning tree priority 0 61440 Parameters 0 6144...

Страница 176: ...specifies the ports to be set Null means all ports show spanning tree Description Show spanning tree information show spanning tree port Description Show spanning tree per port information Syntax sho...

Страница 177: ...tocol RSTP 802 1w no spanning tree port mcheck Description Force the port to transmit RST BPDUs No format means not force the port to transmit RST BPDUs Syntax no spanning tree port mcheck port list P...

Страница 178: ...point to point connection Syntax spanning tree port point to point mac auto true false port list Parameters auto specifies point to point link auto connection true specifies point to point link true f...

Страница 179: ...Protocol SNMP can be management with the switch System Options Snmp no snmp Description Enable or disable SNMP Show snmp status Description Show the enable or disable status of SNMP Snmp system name D...

Страница 180: ...tem location location str Parameters location str specifies the location string e g snmp system location office Snmp system contact Description Set agent system contact string Syntax snmp system conta...

Страница 181: ...fo only read all only read write all community str Parameters community str specifies the community string e g snmp community read all only public no snmp community Description Delete SNMP community s...

Страница 182: ...s ip addr specifies the IP address community str specifies the community string 1 65535 specifies the trap receiver port number e g snmp trap 192 168 200 1 public no snmp trap Description Remove trap...

Страница 183: ...cription Enable disable IGMP snooping Syntax no igmp igmp fastleave Description Enable disable IGMP snooping fast leave If enable switch will fast delete member who send leave report else wait one sec...

Страница 184: ...iption Show IGMP snooping information Syntax show igmp status router groups table Parameters status specifies IGMP snooping status and statistics information router specifies IGMP snooping router s IP...

Страница 185: ...us server IP port number and accounting port number Syntax radius server host ip addr 1024 65535 1024 65535 Parameters ip addr specifies server s IP address The first 1024 65535 specifies the server p...

Страница 186: ...adius server information including radius server IP port number accounting port number shared key NAS identifier dot1x timeout quiet period Description Set 802 1x quiet period default 60 seconds Synta...

Страница 187: ...iption Set radius server timeout default 30 seconds Syntax dot1x timeout radius server 1 300 Parameters 1 300 specifies the radius server timeout in seconds dot1x max req Description Set 802 1x maximu...

Страница 188: ...er timeout maximum requests and re auth period dot1x port Description Set 802 1x per port information Syntax dot1x port fu fa au no port list Parameters fu specifies forced unauthorized fa specifies f...

Страница 189: ...itch can be used to block packets by maintaining a table of packet fragments indexed by source and destination IP address protocol and so on Ipv4 ACL commands no acl Description Delete ACL group Synta...

Страница 190: ...on Syntax show acl 1 220 Parameters 1 220 specifies the group id null means all valid groups e g Switch config show acl 1 Group Id 1 Switch config show acl 1 Group Id 1 Action Permit Rules Vlan ID Any...

Страница 191: ...eans don t care A B C D specifies the Source IP address 0 0 0 0 means don t care A B C D specifies the Mask 0 0 0 0 means don t care 255 255 255 255 means compare all A B C D specifies the Destination...

Страница 192: ...osvoip specifies the action do qos voip packet adjustment 0 4094 specifies the VLAN id 0 means don t care 0 1F specifies the port ID value 0 1F specifies the port ID mask 0 FF specifies the protocol v...

Страница 193: ...1 220 permit deny 0 4094 nonipv4 0 65535 Parameters add edit specifies the operation 1 220 specifies the group id permit deny specifies the action permit permit packet cross switch deny drop packet 0...

Страница 194: ...network We can set specific IP address MAC address VLAN id and port id to bind and device can cross switch if all conditions match SIP SMAC binding commands bind Description Enable binding function no...

Страница 195: ...220 A B C D E F 0 4094 A B C D 1 26 Parameters 1 220 specifies the group id A B C D specifies the MAC address 0 4094 specifies the VLAN id 0 means don t care A B C D specifies the Source IP address 0...

Страница 196: ...ystem PoE power limit mode information poe enable Enabling or disabling the port POE injects function poe priority Set port priority for the power supply management poe maximum power Enabling or disab...

Страница 197: ...ority Power Limit W Current Consumption W Current mA Device Class Port1 Enable on Low 15 4 13 4 279 0 Example 2 Switch config show poe status Port Admin Oper Priority Power Limit W Current Consumption...

Страница 198: ...change automatically by detected PoE unit temperature Disable Disable PoE power budget change automatically NOTE PoE temperature protection working in Priority mode or Total Limit mode only Configure...

Страница 199: ...g show poe Maximum Available Power System Operation Status PoE Power Consumption Usage Threshold PoE Power limit mode 190Watts on 55 watts 21 Port Priority Switch config no poe limit mode Switch confi...

Страница 200: ...ort list Parameters port list specifies the ports to be set If not entered all ports are set Example Switch config poe enable 1 Switch config show poe status 1 Port Admin Oper Priority Power Limit W C...

Страница 201: ...Low port list Parameters Critical High Low Critical Indicates that operating the powered device is high High Indicates that operating the powered device has medium priority Low Indicates that operatin...

Страница 202: ...de is set to Total Limit Command Level Global Configuration Syntax poe maximum power 1 15 4 port list no poe mximum power port list Parameters 1 15 4 port list specifies the ports to be set If not ent...

Страница 203: ...g When one packet comes from some port of the Ethernet Switching it will also check the destination address besides the source address learning The Ethernet Switching will lookup the address table for...

Страница 204: ...earning function of the Ethernet switching the source address and corresponding port number of each incoming and outgoing packet are stored in a routing table This information is subsequently used to...

Страница 205: ...uctivity It minimizes wires that must be used to install the network for offering lower cost and less power failures IEEE802 3af also called Data Terminal equipment DTE power via Media dependent inter...

Страница 206: ...e pairs of standard CAT 5 cabling How Power is Transferred Through the Cable A standard CAT5 Ethernet cable has four twisted pairs but only two of these are used for 10BASE T and 100BASE T The specifi...

Страница 207: ...os You re planning to install the latest VoIP Phone system to minimize cabling building costs when your company moves into new offices next month The company staff has been clamoring for a wireless ac...

Страница 208: ...y choose to perform classification to estimate the amount of power to be consumed by this PD After a time controlled start up the PSE begins supplying the 48 VDC level to the PD till it is physically...

Страница 209: ...full 15 4 watts should be provided 1 3 indicate various required power levels and 4 is reserved for future use PDs that do not support classification are assigned to class 0 Special care must be emplo...

Страница 210: ...disconnected there is a danger that it will be replaced by a non PoE ready device while power is still on Imagine disconnecting a powered IP phone utilizing 48 VDC then inadvertently plugging the powe...

Страница 211: ...signal in addition to the 48 VDC operating voltage The returned AC signal amplitude is monitored by the PSE at the port terminals During normal operation the PD s relatively low impedance lowers the...

Страница 212: ...Chapter 8 Power Over Ethernet Overview 208 GE DS 242 PoE Managed Ethernet Switch User Manual...

Страница 213: ...hernet Switch Some stations cannot talk to other stations located on the other port Solution Check the VLAN settings trunk settings or port enabled disabled status Performance is bad Solution Check th...

Страница 214: ...C power cord not inserted or faulty 2 Check that the AC power cord is inserted correctly 3 Replace the power cord If the cord is inserted correctly check that the AC power source is working by connect...

Страница 215: ...1000Mbps 1000Base T Contact MDI MDI X 1 BI_DA BI_DB 2 BI_DA BI_DB 3 BI_DB BI_DA 4 BI_DC BI_DD 5 BI_DC BI_DD 6 BI_DB BI_DA 7 BI_DD BI_DC 8 BI_DD BI_DC Implicit implementation of the crossover function...

Страница 216: ...ing table and diagram show the standard RJ 45 receptacle connector and their pin assignments RJ 45 Connector pin assignment Contact MDI Media Dependant Interface MDI X Media Dependant Interface Cross...

Страница 217: ...8 Brown 1 White Orange 2 Orange 3 White Green 4 Blue 5 White Blue 6 Green 7 White Brown 8 Brown Crossover Cable SIDE 1 SIDE2 SIDE 1 1 1 2 2 3 3 4 4 5 5 6 6 7 7 8 8 SIDE 2 1 White Orange 2 Orange 3 Whi...

Страница 218: ......

Результаты поиска

Содержание GE-DS-242-PoE

Отзывы:

Похожие инструкции для GE-DS-242-PoE

Бренды по названию

Популярные бренды

Interlogix GE-DS-242-PoE, Руководство пользователя

Результаты поиска

Содержание GE-DS-242-PoE

Отзывы:

Похожие инструкции для GE-DS-242-PoE

Бренды по названию

Популярные бренды