Niveo NGSM48T2 Скачать руководство пользователя страница 220

Страница: 220 / 355

Chapter 4: Feature Configuration - CLI

Featuring Configuration

– CLI

NGSM48T2 User Manual | 220

Security/Network>ip source guard entry 5 add 2
192.168.2.101 001122334455

Result:

IP Source Guard Entry Table:

Type Port VLAN IP Address MAC Address

------- ---- ---- --------------- -----------------

Static 1 1 192.168.2.10 11-22-33-44-55-66

Static 5 2 192.168.2.101 00-0b-16-21-2c-37

ARP Inspection

ARP Inspection

Syntax:

Security Network ARP Inspection Configuration

Security Network ARP Inspection Mode [enable|disable]

Security Network ARP Inspection Port Mode [<port_list>]
[enable|disable]

Security Network ARP Inspection Entry [<port_list>]
add|delete <vid> <allowed_mac> <allowed_ip>

Security Network ARP Inspection Status [<port_list>]

Security Network ARP Inspection Translation

Example:

Security/Network>arp inspection mode en

Security/Network>arp inspection port mode 1-10 en

Security/Network>arp inspection entry 1 add 10
112233445566 192.168.2.10

Security/Network>arp inspection status

ARP Inspection Entry Table:

Type Port VLAN MAC Address IP Address

Содержание NGSM48T2

Страница 1: ...Version 1 0 NGSM48T2 48 Port 10 100 1000Base T 2 10 Gigabit SFP Ports Layer 2 Full Management Switch User Manual...

Страница 2: ...interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on...

Страница 3: ...Featuring Configuration Web UI 26 System Configuration 27 System Information 27 IP Configuration 28 IPv6 Configuration 30 NTP Configuration 32 Time Configuration 33 System Log Configuration 35 Power...

Страница 4: ...STI Priorities 119 Spanning Tree CIST Ports 120 Spanning Tree MSTI Ports 123 MVR Multicast VLAN Registration 124 IPMC IP Multicast 126 IGMP Snooping Configuration 126 Basic Configuration 126 IGMP Snoo...

Страница 5: ...CP based QoS Ingress Classification 177 QoS DSCP Translation 178 QoS DSCP Classification 180 QoS Control List Configuration 181 QoS Storm Control Configuration 184 Mirroring Configuration 185 UPnP Con...

Страница 6: ...tion 262 System Detailed Log 263 Monitor Port State 264 Port State 264 Traffic Overview 265 QoS Statistics 266 QCL Status 267 Detailed Port Statistics 269 Monitor Security 271 Security Access Manageme...

Страница 7: ...tics 333 Dynamic MAC Table 335 VLAN Membership Status 337 VCL MAC Based VLAN Status 341 sFlow 342 Diagnostic 343 Ping 343 Ping6 344 VeriPHY Cable Diagnostic 345 Maintenance 347 Restart Device 347 Fact...

Страница 8: ...NGSM48T2 User Manual 8 Before Starting In Before Starting This section contains introductory information which includes Intended Readers Icons for Note Caution and Warning Product Package Contents...

Страница 9: ...management and terminologies Icons for Note Caution and Warning To install configure use and maintain this product properly please pay attention when you see these icons in this manual A Note icon ind...

Страница 10: ...check and verify the contents of the product package which should include the following items One Network Switch One Power Cord One User Manual CD One pair Rack mount kit 8 Screws Note If any item lis...

Страница 11: ...verview In Product Overview This section will give you an overview of this product including its feature functions and hardware software specifications Product Brief Description Product Specification...

Страница 12: ...with better performance and efficiency 2 10 Gigabit SFP Open Slots The switch equips with 2 10G SFP open slots as the uplink ports the 10G uplink design provides an excellent solution for expanding yo...

Страница 13: ...ured The port binding allows to bind specific MAC address to the port only the MAC has the privilege to access the network The 802 1X port based Access Control every user should be authorized first wh...

Страница 14: ...Rapid Spanning Tree IEEE 802 1s Multiple Spanning Tree IEEE 802 3ad Link Aggregation Control Protocol LACP IEEE802 1v Protocol VLAN IEEE 802 1AB LLDP Link Layer Discovery Protocol IEEE 802 1X Access C...

Страница 15: ...ggregation IEEE 802 3ad with LACP 26 trunks up to 8 port per trunk Static Trunk 26 trunks up to 8 port per trunk Max Group 26 Max Ports Group 8 IGMP Snooping IGMP Snooping v1 v2 v3 IPv6 MLD Snooping v...

Страница 16: ...t Command Line Interface CLI Web Based Management Telnet Access Management Filtering SNMP WEB SSH TELNET SNMP v1 v2c v3 RMON RMON 1 2 3 9 groups DHCP Client Relay Option82 Snooping Event Error Log Loc...

Страница 17: ...ic operation status Each of the switch s RJ45 port has two LEDs the green LED indicates RJ45 connection status data link Also port 49 and port 50 SFP Ports has their own LEDs that indicate data link s...

Страница 18: ...elow 10 Base T 2 pair UTP STP Cat 3 4 5 cable EIA TIA 568 100 ohm Max 100m 100 Base TX 2 pair UTP STP Cat 5 cable EIA TIA 568 100 ohm Max 100m 1000 Base T 4 pair UTP STP Cat 5 cable EIA TIA 568 100 oh...

Страница 19: ...re the switch via RS232 console cable if you don t attach your admin PC to your network or if you lose network connection to your switch It wouldn t be affected by network performance This is so calle...

Страница 20: ...ose the COM name 4 Select correct serial settings The serial settings of the switch are as below Baud Rate 115200 Parity None Data Bit 8 Stop Bit 1 5 After connected you can see Switch login request 6...

Страница 21: ...Chapter 2 Preparing for Management Preparing for Management NGSM48T2 User Manual 21 Figure 3 2 Putty Configuration Figure 3 3 Putty Login Screen...

Страница 22: ...your Switch is properly installed on your network and that every PC on this network can access the switch via the web browser 1 Verify that your network interface card NIC is operational and that you...

Страница 23: ...will appear next 9 Key in the password Default user name and password are both admin If you can t login the switch the following steps can help you to identify the problem 1 Switch to DOS command mode...

Страница 24: ...SSH console can be treated as secured Telnet connection need to enable the SSH feature in Security Switch SSH Tradition way for Telnet Connection 1 Go to Start Run cmd And then press Enter 2 Type the...

Страница 25: ...on in the popup screen Press Yes to accept the Security Alert If you choose Telnet connection there is no such cipher information and window It goes to next step directly 3 After few seconds the Telne...

Страница 26: ...Configuration Web UI The switch provides abundant software features after login the switch you can start configuring the settings or monitoring the status This is one question market on the right top...

Страница 27: ...s fully qualified domain name A domain name is a text string drawn from the alphabet A Za z digits 0 9 minus sign No space characters are permitted as part of a name The first character must be an al...

Страница 28: ...s will be used The DHCP client will announce the configured System Name as hostname to provide DNS lookup IP Address Provide the IP address of this switch in dotted decimal notation IP Mask Provide th...

Страница 29: ...turing Configuration Web UI NGSM48T2 User Manual 29 Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved values Renew Click to renew DHCP This...

Страница 30: ...e fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be used as a shorthand way of representing multiple 16 bit groups of contiguous zeros but it can only appear once It can also represen...

Страница 31: ...Chapter 3 Featuring Configuration Web UI Featuring Configuration Web UI NGSM48T2 User Manual 31 AUTOCONF is enabled...

Страница 32: ...NTP messages between the clients and the server when they are not on the same subnet domain Disable NTP mode operation Server Provide the NTP IPv4 or IPv6 address of this switch IPv6 address is in 12...

Страница 33: ...ht saving time Time Zone Here you can use the scroll down menu to set the time zone where your switch is located Acronym Here you can input the Time Zone Abbreviations You can input up to 16 character...

Страница 34: ...4 Offset Settings Offset is the difference in hours and minutes from Coordinated Universal Time UTC for a particular place and date Here you can set the offset time in minutes Buttons Save Click to sa...

Страница 35: ...the cause of the issues The switch Web UI allows you to Enable the Syslog Server assign the IP address and assign the syslog level Server Mode Indicates the server mode operation When the mode operati...

Страница 36: ...slog Level Indicates what kind of message will send to syslog server Possible modes are Info Send information warnings and errors Warning Send warnings and errors Error Send errors Buttons Save Click...

Страница 37: ...smitted all circuits are powered up The time it takes to power up the circuits is named wakeup time The default wakeup time is 17 us for 1Gbit links and 30 us for other link speeds EEE devices must ag...

Страница 38: ...QOS and then mark the queue as an urgent queue When an urgent queue gets data to be transmitted the circuits will be powered up at once and the latency will be reduced to the wakeup time Port The swit...

Страница 39: ...link state is displayed graphically Green indicates the link is up and red that it is down Current Link Speed Provides the current link speed of the port Ex 1Gfdx 1G indicates the Gigabit Speed fdx in...

Страница 40: ...mum Frame Size Enter the maximum frame size allowed for the switch port including FCS The switch supports up to 9K Jumbo Frame Excessive Collision Mode Configure port transmit collision behavior Disca...

Страница 41: ...tly the only way to login as another user on the web server is to close and reopen the browser This page configures a user This is also a link to Add User Edit User Add New User Edit User Click Add Ne...

Страница 42: ...same or greater than the group privilege level to have the access of that group By default setting most groups privilege level 5 has the read only access and privilege level 10 has the read write acc...

Страница 43: ...most cases a privilege level group consists of a single module e g LACP RSTP or QoS but a few of them contains more than one The table down below lists the functions that can be set here in the privil...

Страница 44: ...or clearing of statistics User Privilege should be same or greater than the authorization Privilege level to have the access to that group Insufficient Privilege Level If you login with lower level pr...

Страница 45: ...set to one of the following values none authentication is disabled and login is not possible local use the local user database on the switch for authentication RADIUS use a remote RADIUS server for au...

Страница 46: ...switch by SSH you should install SSH client on you computer such as PuTTy console tool In the switch side the switch acts as SSH server for user login and you can Enable or Disable SSH on this page Pl...

Страница 47: ...his page allows you to configure HTTPS mode Mode Indicates the HTTPS mode operation Possible modes are Enable Enable HTTPS mode operation Disabled Disable HTTPS mode operation Automatic Redirect Indic...

Страница 48: ...access to the switch Example of the below figure only the IP Addresses range from 192 168 2 101 to 192 168 2 200 can access the switch s management interface The available services are HTTP HTTPS SNMP...

Страница 49: ...P address matches the IP address range provided in the entry TELNET SSH Indicates that the host can access the switch from TELNET SSH interface if the host IP address matches the IP address range prov...

Страница 50: ...versions are SNMPv1 Set SNMP supported version 1 SNMPv2c Set SNMP supported version 2c SNMPv3 Set SNMP supported version 3 Read Community Indicates the community read access string to permit access to...

Страница 51: ...able It provides more flexibility to configure security name than a SNMPv1 or SNMPv2c community string In addition to community string a particular range of source addresses can be used to restrict so...

Страница 52: ...y Indicates the community access string when sending SNMP trap packet The allowed string length is 0 to 255 and the allowed content is ASCII characters from 33 to 126 Trap Destination Address Indicate...

Страница 53: ...rm retry times The allowed range is 0 to 255 Trap Probe Security Engine ID Indicates the SNMP trap probe security engine ID mode of operation Possible values are Enable Enable SNMP trap probe security...

Страница 54: ...access to SNMPv3 agent The allowed string length is 1 to 32 and the allowed content is ASCII characters from 33 to 126 The community string will be treated as security name and map a SNMPv1 or SNMPv2...

Страница 55: ...ne ID and usm User Name are the entry s keys In a simple agent usm User Engine ID is always that agent s own snmp Engine ID value The value can also take the value of the snmp Engine ID of a remote SN...

Страница 56: ...ing identifying the authentication password phrase For MD5 authentication protocol the allowed string length is 8 to 32 For SHA authentication protocol the allowed string length is 8 to 40 The allowed...

Страница 57: ...1 Reserved for SNMPv1 v2c Reserved for SNMPv2c usm User based Security Model USM Security Name A string identifying the security name that this entry should belong to The allowed string length is 1 to...

Страница 58: ...uld belong to Possible view types are Included An optional flag to indicate that this view sub tree should be included excluded An optional flag to indicate that this view sub tree should be excluded...

Страница 59: ...hould belong to The allowed string length is 1 to 32 and the allowed content is ASCII characters from 33 to 126 Security Model Indicates the security model that this entry should belong to Possible se...

Страница 60: ...to 32 and the allowed content is ASCII characters from 33 to 126 Write View Name The name of the MIB view defining the MIB objects for which this request may potentially set new values The allowed str...

Страница 61: ...Packets dropped packets sent bytes sent octets broadcast packets multicast packets CRC errors undersize packets oversize packets fragments jabbers collisions and counters for packets ranging from 64...

Страница 62: ...deleted during the next save ID Indicates the index of the entry The range is from 1 to 65535 Data Source Indicates the port ID which wants to be monitored If in stacking switch the value must add 100...

Страница 63: ...the value must add 1000 switch ID 1 for example if the port is switch 3 port 5 the value is 2005 Interval Indicates the interval in seconds for sampling the history statistics data The range is from...

Страница 64: ...InNUcastPkts The number of broad cast and multi cast packets delivered to a higher layer protocol InDiscards The number of inbound packets that are discarded even the packets are normal InErrors The n...

Страница 65: ...the thresholds possible sample types are Rising Trigger alarm when the first value is larger than the rising threshold Falling Trigger alarm when the first value is less than the falling threshold Ri...

Страница 66: ...mber of octets received on the interface including framing characters Log The number of uni cast packets delivered to a higher layer protocol Snmptrap The number of broad cast and multi cast packets d...

Страница 67: ...users on a given port A user is identified by a MAC address and VLAN ID If Limit Control is enabled on a port the limit specifies the maximum number of users on the port If this number is exceeded an...

Страница 68: ...period of all modules that use the functionality The Aging Period can be set to a number between 10 and 10 000 000 seconds To understand why aging may be desired consider the following scenario Suppos...

Страница 69: ...may happen that a configured maximum cannot be granted if the remaining ports have already used all available MAC addresses Action If Limit is reached the switch can take one of the following actions...

Страница 70: ...n is set to None or Trap Shutdown Indicates that the port is shut down by the Limit Control module This state can only be shown if Action is set to Shutdown or Trap Shutdown Re open Button If a port i...

Страница 71: ...allowed access to the network These backend RADIUS servers are configured on the Configuration Security AAA page The IEEE802 1X standard defines port based operation but non standard variants overcom...

Страница 72: ...ed This is only active if the Reauthentication Enabled checkbox is checked Valid values are in the range 1 to 3600 seconds EAPOL Timeout Determines the time for retransmission of Request Identity EAPO...

Страница 73: ...a number between 10 and 1000000 seconds RADIUS Assigned QoS Enabled RADIUS assigned QoS provides a means to centrally control the traffic class to which traffic coming from a successfully authenticate...

Страница 74: ...led on all ports Guest VLAN ID This is the value that a port s Port VLAN ID is set to if a port is moved into the Guest VLAN It is only changeable if the Guest VLAN option is globally enabled Valid va...

Страница 75: ...ased 802 1X In the 802 1X world the user is called the supplicant the switch is the authenticator and the RADIUS server is the authentication server The authenticator acts as the man in the middle for...

Страница 76: ...t should be smaller than the supplicant s EAPOL Start frame retransmission rate Single 802 1X In port based 802 1X authentication once a supplicant is successfully authenticated on a port the whole po...

Страница 77: ...802 1X MAC based authentication is not a standard but merely a best practices method adopted by the industry In MAC based authentication users are called clients and the switch acts as the supplicant...

Страница 78: ...o the given QoS Class If re authentication fails or the RADIUS Access Accept packet no longer carries a QoS Class or it s invalid or the supplicant is otherwise no longer present on the port the port...

Страница 79: ...t affecting the RADIUS assigned This option is only available for single client modes i e Port based 802 1X Single 802 1X For trouble shooting VLAN assignments use the Monitor VLANs VLAN Membership an...

Страница 80: ...Request Identity frames is configured with EAPOL Timeout If Allow guest VLAN if EAPOL Seen is enabled the port will now be placed in the Guest VLAN If disabled the switch will first check its history...

Страница 81: ...e buttons are only enabled when authentication is globally enabled and the port s Admin State is in an EAPOL based or MAC based mode Clicking these buttons will not cause settings changed on the page...

Страница 82: ...to this port The allowed values are 0 through 255 The default value is 0 Action Select whether forwarding is permitted Permit or denied Deny The default value is Permit Rate Limiter ID Select which r...

Страница 83: ...m Log memory size and logging rate is limited Shutdown Specify the port shut down operation of this port The allowed values are Enabled If a frame is received on the port the port will be disabled Dis...

Страница 84: ...witch Rate Limiter ID The rate limiter ID for the settings contained in the same row Rate The allowed values are 0 3276700 in pps Or 0 100 200 300 1000000 in kbps Unit Specify the rate unit The allowe...

Страница 85: ...tmask of the ACE Frame Type Indicates the frame type of the ACE Possible values are Any The ACE will match any frame type EType The ACE will match Ethernet Type frames Note that an Ethernet Type based...

Страница 86: ...Frames received on the port are not mirrored The default value is Disabled Counter The counter indicates the number of times the ACE was hit by a frame Modification Buttons You can modify each ACE Acc...

Страница 87: ...plies to all port Port n The ACE applies to this port number where n is the number of the switch port You can select one port or select multiple ports for the entry Policy Filter Specify the policy nu...

Страница 88: ...0600 hexadecimal ARP Only ARP frames can match this ACE Notice the ARP frames won t match the ACE with ethernet type IPv4 Only IPv4 frames can match this ACE Notice the IPv4 frames won t match the AC...

Страница 89: ...Port shut down is disabled for the ACE Counter The counter indicates the number of times the ACE was hit by a frame MAC Parameters SMAC Filter Only displayed when the frame type is Ethernet Type or AR...

Страница 90: ...his value A field for entering a VLAN ID number appears VLAN ID When Specific is selected for the VLAN ID filter you can enter a specific VLAN ID number The allowed range is 1 to 4095 A frame that hit...

Страница 91: ...an enter a specific sender IP mask in dotted decimal notation Target IP Filter Specify the target IP filter for this specific ACE Any No target IP filter is specified Target IP filter is don t care Ho...

Страница 92: ...ames where the HLN is not equal to Ethernet 0x06 or the PLN is not equal to IPv4 0x04 1 ARP RARP frames where the HLN is equal to Ethernet 0x06 and the PLN is equal to IPv4 0x04 Any Any value is allow...

Страница 93: ...efining TCP parameters will appear These fields are explained later in this help file IP Protocol Value When Specific is selected for the IP protocol value you can enter a specific value The allowed r...

Страница 94: ...Address When Host or Network is selected for the source IP filter you can enter a specific SIP address in dotted decimal notation SIP Mask When Network is selected for the source IP filter you can ent...

Страница 95: ...e value A field for entering an ICMP code value appears ICMP Code Value When Specific is selected for the ICMP code filter you can enter a specific ICMP code value The allowed range is 0 to 255 A fram...

Страница 96: ...er you can enter a specific TCP UDP destination value The allowed range is 0 to 65535 A frame that hits this ACE matches this TCP UDP destination value TCP UDP Destination Range When Range is selected...

Страница 97: ...care TCP ACK Specify the TCP Acknowledgment field significant ACK value for this ACE 0 TCP frames where the ACK field is set must not be able to match this entry 1 TCP frames where the ACK field is s...

Страница 98: ...HCP snooping mode operation is enabled the DHCP request messages will be forwarded to trusted ports and only allow reply packets from trusted ports Disabled Disable DHCP snooping mode operation Port M...

Страница 99: ...subnet domain Relay Information Mode Indicates the DHCP relay information mode option operation The option 82 circuit ID format as vlan_id module_id port_no The first four characters represent the VL...

Страница 100: ...the policy And it only works under DHCP if relay information operation mode is enabled Possible policies are Replace Replace the original relay information when a DHCP message that already contains it...

Страница 101: ...hich ports Only when both Global Mode and Port Mode on a given port are enabled IP Source Guard is enabled on this given port Max Dynamic Clients Specify the maximum number of dynamic clients that can...

Страница 102: ...l port for the settings VLAN ID The vlan id for the settings IP Address Allowed Source IP address usedMAC address Allowed Source MAC address Adding new entry Click to add a new entry to the Static IP...

Страница 103: ...P Inspection or disable the Global ARP Inspection Port Mode Configuration Specify ARP Inspection is enabled on which ports Only when both Global Mode and Port Mode on a given port are enabled ARP Insp...

Страница 104: ...VLAND ID The vlan id for the settings MAC Address Allowed Source MAC address in ARP request packets IP Address Allowed Source IP address in ARP request packets Adding new entry Click to add a new ent...

Страница 105: ...d 3600 seconds is the maximum time to wait for a reply from a server If the server does not reply within this timeframe we will consider it to be dead and continue with the next enabled server if any...

Страница 106: ...conds is the period during which the switch will not send new requests to a server that has failed to respond to a previous request This will stop the switch from continually trying to contact a serve...

Страница 107: ...ault port 1812 is used on the RADIUS Authentication Server Secret The secret up to 29 characters long shared between the RADIUS Authentication Server and the switch RADIUS Accounting Server Configurat...

Страница 108: ...tication Server by checking this box IP Address Hostname The IP address or hostname of the TACACS Authentication Server IP address is expressed in dotted decimal notation Port The TCP port to use on t...

Страница 109: ...group The aggregation hash mode settings are global whereas the aggregation group relate to the currently selected stack unit as reflected by the page header Hash Code Contributors Source MAC Address...

Страница 110: ...for the settings contained in the same row Group ID Normal indicates there is no aggregation Only one group ID is valid per port Port Members Each switch port is listed for each group ID Select a rad...

Страница 111: ...lows the user to inspect the current LACP port configurations and possibly change them as well Port The switch port number LACP Enabled Controls whether LACP is enabled on this switch port LACP will f...

Страница 112: ...Specific setting a user defined value can be entered Ports with the same Key value can participate in the same aggregation group while ports with different keys cannot Role The Role shows the LACP act...

Страница 113: ...en the switch do detect the network loop After the port is shutdown it may hard to manually reconnect it so that there is a shutdown time timeout design can help re enable the port link automatically...

Страница 114: ...ed when a loop is detected on a port The valid values are Shutdown Port Shutdown the port until the Shutdown Time timeout Shutdown Port and Log Shutdown the port and log the status Log Only Only log t...

Страница 115: ...vide an independent spanning tree for different VLANs With the Spanning Tree and VLAN mapping each VLAN has its own root and blocking path the STP region size becomes lower the convergence time of top...

Страница 116: ...ch forms a Bridge Identifier For MSTP operation this is the priority of the CIST Otherwise this is the priority of the STP RSTP bridge Forward Delay The delay used by STP Bridges to transit Root and D...

Страница 117: ...whether a port explicitly configured as Edge will disable itself upon reception of a BPDU The port will enter the error disabled state and will be removed from the active topology Port Error Recovery...

Страница 118: ...re spanning trees for MSTI s Intra region The name is at most 32 characters Configuration Revision The revision of the MSTI configuration named above This must be an integer between 0 and 65535 MSTI M...

Страница 119: ...bly change them as well MSTI The bridge instance The CIST is the default instance which is always active Priority Controls the bridge priority Lower numeric values have better priority The bridge prio...

Страница 120: ...the page header Port The switch port number of the logical STP port STP Enabled Controls whether STP is enabled on this switch port Path Cost Controls the path cost incurred by the port The Auto sett...

Страница 121: ...es the port not to be selected as Root Port for the CIST or any MSTI even if it has the best spanning tree priority vector Such a port will be selected as an Alternate Port after the Root Port has bee...

Страница 122: ...ng error disabled state due to this setting is subject to the bridge Port Error Recovery setting as well Point2Point Controls whether the port connects to a point to point LAN rather than to a shared...

Страница 123: ...tings also relate to the currently selected stack unit as reflected by the page header Port The switch port number of the corresponding STP CIST and MSTI port Path Cost Controls the path cost incurred...

Страница 124: ...r after MVR enabled the client subscriber VLANs are registered to the same source VLAN then there is only one source stream will be delivered to the registered VLANs This page provides MVR related con...

Страница 125: ...Enable Disable the Global MVR VLAN ID Specify the Multicast VLAN ID Mode Enable MVR on the port Type Specify the MVR port type on the port Immediate Leave Enable the fast leave on the port Buttons Sav...

Страница 126: ...2 devices to manage and control multicast groups By listening to and analyzing IGMP messages a Layer 2 device running IGMP Snooping establishes mappings between ports and multicast MAC addresses and f...

Страница 127: ...wards the Layer 3 multicast device or MLD querier Normally the router port is the uplink port to the upper L3 Router or IGMP Querier For example in below figure the green port of the 2 switches are Ro...

Страница 128: ...nfiguration Web UI NGSM48T2 User Manual 128 Throttling Enable to limit the number of multicast groups to which a switch port can belong Buttons Save Click to save changes Reset Click to undo any chang...

Страница 129: ...e will use the last entry of the currently displayed entry as a basis for the next lookup When the end is reached the text No more entries is shown in the displayed table Use the button to start over...

Страница 130: ...nted by the Last Member Query Interval multiplied by the Last Member Query Count The allowed range is 0 to 31744 in tenths of seconds default last member query interval is 10 in tenths of seconds 1 se...

Страница 131: ...he logical port for the settings Filtering Groups The IP Multicast Group that will be filtered Adding New Filtering Group Click to add a new entry to the Group Filtering table Specify the Port and Fil...

Страница 132: ...able unregistered IPMCv6 traffic flooding Please note that disabling unregistered IPMCv6 traffic flooding may lead to failure of Neighbor Discovery SSM Range SSM Source Specific Multicast Range allows...

Страница 133: ...48T2 User Manual 133 Fast Leave Enable the fast leave on the port Throttling Enable to limit the number of multicast groups to which a switch port can belong Buttons Save Click to save changes Reset C...

Страница 134: ...lookup When the end is reached the text No more entries is shown in the displayed table Use the button to start over MLD Snooping VLAN Table Columns VLAN ID The VLAN ID of the entry MLD Snooping Enab...

Страница 135: ...Done messages It is also the Maximum Response Delay used to calculate the Maximum Response Code inserted into Multicast Address and Source Specific Query messages The allowed range is 0 to 31744 in te...

Страница 136: ...entry It will be deleted during the next save Port The logical port for the settings Filtering Groups The IP Multicast Group that will be filtered Adding New Filtering Group Click to add a new entry t...

Страница 137: ...rrent LLDP port settings LLDP Configuration Tx Interval The switch periodically transmits LLDP frames to its neighbors for having the network discovery information up to date The interval between each...

Страница 138: ...tion received from neighbors but will send out LLDP information Disabled The switch will not send out LLDP information and will drop LLDP information received from neighbors Enabled The switch will se...

Страница 139: ...erminated by the switch Note When CDP awareness on a port is disabled the CDP information isn t removed immediately but gets removed when the hold time is exceeded Port Descr Optional TLV When checked...

Страница 140: ...em integrity issues that can come with inappropriate knowledge of the network policy With this in mind LLDP MED defines an LLDP MED Fast Start interaction between the protocol and the application laye...

Страница 141: ...he equator or south of the equator Longitude Longitude Should be normalized to within 0 180 degrees with a maximum of 4 digits It is possible to specify the direction the either East of the prime meri...

Страница 142: ...on Information Civic Address LCI Country code The two letter ISO 3166 Country code in capital ASCII letters Example DK DE or US State National subdivisions state canton region province prefecture Coun...

Страница 143: ...mple 450F Place type Place type Example Office Postal community name Postal community name Example Leonia P O Box Post office box P O Box Example 12345 Additional code Additional code Example 13203000...

Страница 144: ...ntended for use with applications that have specific real time network policy requirements such as interactive voice and or video services The network policy attributes advertised are 1 Layer 2 VLAN I...

Страница 145: ...nerated and shall be used when selecting the polices that shall be mapped to the specific ports Application Type Intended use of the application types 1 Voice for use by dedicated IP Telephony handset...

Страница 146: ...th buffering would not be an intended use of this application type 8 Video Signalling conditional for use in network topologies that require a separate policy for the video signalling than for the vid...

Страница 147: ...A value of 0 represents use of the default DSCP value as defined in RFC 2475 Adding a new policy Click to add a new policy Specify the Application type Tag VLAN ID L2 Priority and DSCP for the new po...

Страница 148: ...ure aging time by entering a value here in seconds for example Age time seconds The allowed range is 10 to 1000000 seconds Disable the automatic aging of dynamic entries by checking Disable automatic...

Страница 149: ...o secure learning mode otherwise the management link is lost and can only be restored by using another non secure port or by connecting to the switch via the serial interface Static MAC Table Configur...

Страница 150: ...ndicate which ports are members of the entry Check or uncheck as needed to modify the entry Adding a New Static Entry Click to add a new entry to the static MAC table Specify the VLAN ID MAC address a...

Страница 151: ...w you configuring the switch settings VLAN Membership Configuration The VLAN membership configuration for theswitch can be monitored and modified here Up to 4096 VLANs are supported This page allows f...

Страница 152: ...Members A row of check boxes for each port is displayed for each VLAN ID To include a port in a VLAN check the box as To include a port in a forbidden port list check the box as shown To remove or ex...

Страница 153: ...k to save changes Reset Click to undo any changes made locally and revert to previously saved values Refreshes Refreshes the displayed the table starting from the VLAND ID input fields Updates the tab...

Страница 154: ...S ports Port This is the logical port number of this row Port Type Port can be one of the following types Unaware Customer port C port Service port S port Custom Service port S custom port If Port Typ...

Страница 155: ...ecific the default value is selected a Port VLAN ID can be configured see below Untagged frames received on the port are classified to the Port VLAN ID If VLAN awareness is disabled all frames receive...

Страница 156: ...s in the same Community The switch ports assigned to an Isolated VLAN can send traffic to the primary VLAN but CANNOT see traffic from other devices in the same Isolated VLAN In this section the switc...

Страница 157: ...t no ports are members and all boxes are unchecked Adding a New Private VLAN Click to add a new private VLAN ID An empty row is added to the table and the private VLAN can be configured as needed The...

Страница 158: ...d Private VLAN The port settings relate to the currently selected stack unit as reflected by the page header This feature works across the stack Configuration Port Members A check box is provided for...

Страница 159: ...yed for each MAC based VLAN entry To include a port in a MAC based VLAN check the box To remove or exclude the port from the MAC based VLAN make sure the box is unchecked By default no ports are membe...

Страница 160: ...k to undo any changes made locally and revert to previously saved values Refreshes Refreshes the displayed the table starting from the VLAND ID input fields Updates the table starting from the first e...

Страница 161: ...e Frame Type can have one of the following values 1 Ethernet 2 LLC 3 SNAP Note On changing the Frame type field valid value of the following text field will vary depending on the new frame type you se...

Страница 162: ...nning on top of SNAP In other words if value of OUI field is 00 00 00 then value of PID will be etype 0x0600 0xffff and if value of OUI is other than 00 00 00 then valid value of PID will be any value...

Страница 163: ...nd must not be preused by any other existing mapping entry on this page VLAD ID Indicates the ID to which Group Name will be mapped A valid VLAN ID ranges from 1 4095 Port Members A row of check boxes...

Страница 164: ...s the IP address Mask Length Indicates the network mask length VLAN ID Indicates the VLAN ID VLAN ID can be changed for the existing entries Port Members A row of check boxes for each port is displaye...

Страница 165: ...T2 User Manual 165 Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previously saved values Auto refresh Check this box to refresh the page automatically A...

Страница 166: ...he switch the IP phone should configure the voice VLAND ID correctly It should be configured through its own GUI Mode Indicates the Voice VLAN mode operation We must disable MSTP feature before we ena...

Страница 167: ...ures the Voice VLAN members automatically Forced Force join to Voice VLAN Port Security The Voice VLAN port security mode When the function is enabled all non telephonic MAC addresses in the Voice VLA...

Страница 168: ...ed to a vendor by IEEE It must be 6 characters long and the input format is xx xx xx x is a hexadecimal digit Description The description of OUI address Normally it describes which vendor telephony de...

Страница 169: ...der The displayed settings are Port The port number for which the configuration below applies QoS class Controls the default QoS class i e the QoS class for frames not classified in any other way Ther...

Страница 170: ...abled Use default QoS class and DP level for tagged frames Enabled Use mapped versions of PCP and DEI for tagged frames Click on the mode in order to configure the mode and or mapping DSCP Based Click...

Страница 171: ...number for which the configuration below applies Enabled Controls whether the policer is enabled on this switch port Rate Controls the rate for the policer The default value is 500 This value is restr...

Страница 172: ...rt Schedulers for all switch ports The ports belong to the currently selected stack unit as reflected by the page header The displayed settings are Port The logical port for the settings contained in...

Страница 173: ...for all switch ports The ports belong to the currently selected stack unit as reflected by the page header The displayed settings are Port The logical port for the settings contained in the same row...

Страница 174: ...orts belong to the currently selected stack unit as reflected by the page header The displayed settings are Port The logical port for the settings contained in the same row Click on the port number in...

Страница 175: ...dscp ingress and egress settings Ingress In Ingress settings you can change ingress translation and classification settings for individual ports There are two configuration parameters available in In...

Страница 176: ...DSCP value The remapped DSCP value is always taken from the DSCP Translation Egress Remap DP0 table Remap DP Aware DSCP from analyzer is remapped and frame is remarked with remapped DSCP value Depend...

Страница 177: ...ngs are DSCP Maximum number of supported DSCP values are 64 Trust Controls whether a specific DSCP value is trusted Only frames with trusted DSCP values are mapped to a specific QOs class and Drop Pre...

Страница 178: ...ress The displayed settings are DSCP Maximum number of supported DSCP values are 64 and valid DSCP value ranges from 0 to 63 Ingress Ingress side DSCP can be first translated to new DSCP before using...

Страница 179: ...with DP level 0 2 Remap DP1 Controls the remapping for frames with DP level 1 1 Remap DP0 Select the DSCP value from select menu to which you want to remap DSCP value ranges form 0 to 63 2 Remap DP1 S...

Страница 180: ...s and Drop Precedence Level to DSCP value The settings relate to the currently selected stack unit as reflected by the page header The displayed settings are QoS Class Actual QoS class DPL Actual Drop...

Страница 181: ...Any The QCE will match all frame type Ethernet Only Ethernet frames with Ether Type 0x600 0xFFFF are allowed LLC Only LLC frames are allowed SNAP Only SNAP frames are allowed IPv4 The QCE will match o...

Страница 182: ...t may happen that resources required to add a QCE may not available in that case it shows conflict status as Yes otherwise it is always No Please note that conflict can be resolved by releasing the re...

Страница 183: ...in the table using the following buttons Inserts a new QCE before the current row Edits the QCE Moves the QCE up the list Moves the QCE down the list Deletes the QCE The lowest plus sign adds a new en...

Страница 184: ...witch Note Frames which are sent to the CPU of the switch are always limited to approximately 4 kpps For example broadcasts in the management VLAN are limited to this rate The management VLAN is confi...

Страница 185: ...rt also known as egress or destination mirroring Port to mirror on Port to mirror also known as the mirror port Frames from ports that have either source rx or destination tx mirroring enabled are mir...

Страница 186: ...rrored on the mirror port Note For a given port a frame is only transmitted once It is therefore not possible to mirror Tx frames on the mirror port Because of this mode for the selected mirror port i...

Страница 187: ...on The duration carried in SSDP packets is used to inform a control point or control points how often it or they should receive an SSDP advertisement message from this switch If a control point does n...

Страница 188: ...pecified sFlow collector the IP Address you assigned in the switch UI The sFlow collector analyzes the sFlow packets and displays the result sFlow has the following two sampling mechanisms Flow sampli...

Страница 189: ...type sampling rate maximum header size Sampler Type Configured sampler type on the port and could be any of the types None RX TX ALL Default value is none Sampling Rate Configured sampling rate on th...

Страница 190: ...n Feature Configuration CLI The Command Line Interface CLI is the user interface to the switch s embedded software system You can view the system information show the status configure the switch and r...

Страница 191: ...r to go to root level Type logout in root level to leave the command line interface Click Enter key after finish the command Click Up key to repeat the previous commands Commands may be abbreviated e...

Страница 192: ...n system Type up to move up one level or to go to root level System System Contact Syntax System Name name Parameters name System name string 1 255 Example Contact Name Orwell System contact Orwell Sy...

Страница 193: ...eters offset Time zone offset in minutes 720 to 720 relative to UTC Example Time Zone 100 switch System time 100 IP Configuration IP Group Enter the IP Configuration Group switch ip Type up to move up...

Страница 194: ...below command Syntax IP NTP Server Add server_index ip_addr_string IP NTP Server Ipv6 Add server_index server_ipv6 IP NTP Server Delete server_index Example switch IP ntp ser add 1 192 168 100 1 swit...

Страница 195: ...x IP IPv6 AUTOCONFIG enable disable IP IPv6 Setup ipv6_addr ipv6_prefix ipv6_router IP IPv6 State ipv6_addr enable disable IP IPv6 Ping6 ipv6_addr Length ping_length Count ping_count Interval ping_int...

Страница 196: ...erver Address Setting Syntax Type the NTP Server address settings by below command IP NTP Server Add server_index ip_addr_string IP NTP Server Ipv6 Add server_index server_ipv6 IP NTP Server Delete se...

Страница 197: ...g server mode en Server Address Syntax System Log Server Address ip_addr_string Example switch System log server add 192 168 2 100 Syslog Level Syntax System Log Level info warning error Information s...

Страница 198: ...ion CLI Featuring Configuration CLI NGSM48T2 User Manual 198 System Log Configuration switch System log conf System Log Configuration System Log Server Mode Enabled System Log Server Address 192 168 2...

Страница 199: ...imer 2 30 Maintenance Syntax led_power maintenance maintenance_time on_at_errors leave_at_errors Parameters maintenance_time Time in seconds 0 65535 that the LEDs shall be turned on when any port chan...

Страница 200: ...All ports enable Enable EEE disable Disable EEE Example Enable Port 1 5 EEE mode 1 5 en Urgent Queue of Port Syntax EEE Urgent_queues port_list queue_list Parameters port_list Port list or all defaul...

Страница 201: ...e After port 1 disabled the port can t access the switch Port state 1 en Port state 1 dis Link Speed and Duplex Syntax Port Mode port_list auto 10hdx 10fdx 100hdx 100fdx 1000fdx sfp_auto_ams 100 0x_am...

Страница 202: ...rt maxf 1 24 9600 Port Status Port Status Port conf 1 2 Port Configuration Port State Mode Flow Control MaxFrame Power Excessive Link 1 Enabled Auto Disabled 9600 Disabled Discard Down 2 Enabled Auto...

Страница 203: ...Discard 1Gfdx 3 Enabled Auto Disabled 9600 Disabled Discard Down Status of Link UP ports switch Port conf all up Port Configuration Port State Mode Flow Control MaxFrame Power Excessive Link 2 Enable...

Страница 204: ...SH Secure Shell Security Switch HTTPS Hypertext Transfer Protocol over Secure Socket Layer Security Switch Access Access management Security Switch SNMP Simple Network Management Protocol Security Swi...

Страница 205: ...ers del Orwell User Name Database Security Switch users conf Users Configuration User Name Privilege Level admin 15 Orwell 15 Privilege Level Syntax Security Switch Privilege Level Group group_name cr...

Страница 206: ...ug 15 15 15 15 Diagnostics 5 10 5 10 Authentication Method Syntax Security Switch Auth Method console telnet ssh web none local radius tacacs enable disable Example Configure Telnet Authentication met...

Страница 207: ...disable Security Switch https mode en Security Switch https mode dis Security Switch HTTPS Redirect enable disable Security Switch https mode en Must enabled HTTPS Security Switch https redi en Resul...

Страница 208: ...1 2c 3 Security Switch SNMP Read Community community Security Switch SNMP Write Community community Example Security Switch snmp mode en Security Switch snmp ver 2c Security Switch SNMP read com abc...

Страница 209: ...ap Mode enable disable Security Switch SNMP Trap Version 1 2c 3 Security Switch SNMP Trap Community community Security Switch SNMP Trap Destination ip_addr_string Security Switch SNMP Trap IPv6 Destin...

Страница 210: ...en Security Switch SNMP trap info mode en Security Switch SNMP trap info time 5 Security Switch SNMP trap info ret times 5 Result Trap Authentication Failure Enabled Trap Link up and Link down Enable...

Страница 211: ...tics Add stats_id data_source Security Switch RMON Statistics Delete stats_id Security Switch RMON Statistics Lookup stats_id Histroy Security Switch RMON History Add history_id data_source interval b...

Страница 212: ...twork Limit Mode enable disable Security Network Limit Aging enable disable Security Network Limit Agetime age_time Example Security Network limit mode enable Security Network limit agin enable Securi...

Страница 213: ...n enable disable Time Settings Security Network NAS ReauthPeriod reauth_period Security Network NAS EapolTimeout eapol_timeout Security Network NAS Agetime age_time Security Network NAS Holdtime hold_...

Страница 214: ...MAC_Based Authentication Example Security Network nas state 2 auto ACL Access Control List ACL Port Configuration Syntax Security Network ACL Action port_list permit deny rate_limiter port_redirect m...

Страница 215: ...led Enabled Enabled 0 Rate Limiter Syntax Security Network ACL Rate rate_limiter_list rate_unit rate Parameters rate_limiter_list Rate limiter list 1 16 default All rate limiters rate_unit IP flags pp...

Страница 216: ..._limiter port_redirect mirror logging shutdown Parameters ace_id ACE ID 1 256 default Next available ID ace_id_next Next ACE ID 1 256 default Add ACE last port Port ACE keyword port_list Port list or...

Страница 217: ...s IP flags ttl options fragment 0 1 any icmp ICMP keyword icmp_type ICMP type number 0 255 or any icmp_code ICMP code number 0 255 or any udp UDP keyword sport Source UDP TCP port range 0 65535 or any...

Страница 218: ...Snooping Syntax Security Network DHCP Snooping Mode enable disable Security Network DHCP Snooping Port Mode port_list trusted untrusted Security Network DHCP Snooping Statistics port_list clear Exampl...

Страница 219: ...enable disable Security Network IP Source Guard Port Mode port_list enable disable Security Network IP Source Guard limit port_list dynamic_entry_limit unlimited Security Network IP Source Guard Entr...

Страница 220: ...n Configuration Security Network ARP Inspection Mode enable disable Security Network ARP Inspection Port Mode port_list enable disable Security Network ARP Inspection Entry port_list add delete vid al...

Страница 221: ...x enable disable ip_addr_string secret server_port Example Security aaa radi 1 en 192 168 2 200 password 1812 RADIUS Accounting Server Syntax Security AAA ACCT_RADIUS server_index enable disable ip_ad...

Страница 222: ...ss Secret Port 1 Enabled 192 168 2 200 1812 2 Disabled 1812 3 Disabled 1812 4 Disabled 1812 5 Disabled 1812 RADIUS Accounting Server Configuration Server Mode IP Address Secret Port 1 Enabled 192 168...

Страница 223: ...Chapter 4 Feature Configuration CLI Featuring Configuration CLI NGSM48T2 User Manual 223 4 Disabled 49 5 Disabled 49 Security...

Страница 224: ...Group 1 aggr add 5 8 1 aggr del 1 Delete the group 1 Hash Code Contributors Syntax Aggr Mode smac dmac ip port enable disable smac Source MAC Address dmac Destination MAC Address ip IP Address port T...

Страница 225: ...NGSM48T2 User Manual 225 LACP Key port_list key LACP Role port_list active passive LACP Status port_list LACP Statistics port_list clear Example Configure port 5 8 to a LACP group lacp mode 5 8 en Mod...

Страница 226: ...me Example loop protect mode en Transmission Time loop protect trans 10 10 seconds Shutdown Time loop protect shut 200 200 seconds Port Configuration Loop Protection Port Configuration Syntax Loop Pro...

Страница 227: ...n mstp rstp stp Example STP ver rstp Bridge Priority Syntax STP Msti Priority msti priority Example STP msti pri MSTI Bridge Priority CIST 32768 STP msti pri 4096 The available priority parameter incl...

Страница 228: ...holdcount Valid values are in the range 1 to 10 BPDU s per second Advanced Setting Syntax STP bpduFilter enable disable STP bpduGuard enable disable STP recovery timeout After recovery timeout time is...

Страница 229: ...uard port_list enable disable STP Port Statistics port_list clear Example STP port mode 1 24 dis Disable STP on port 1 24 STP port edge 1 24 en Enable Edge port on port 1 24 STP port autoedge 1 24 en...

Страница 230: ...Parameters msti STP bridge instance no 0 7 CIST 0 MSTI1 1 port_list Port list or all Port zero means aggregations priority STP port priority 0 16 32 48 224 240 Example Configure CIST 0 Port Priority...

Страница 231: ...etup 2 add Name Source2 MVR Port Role Syntax MVR VLAN Port vid mvr_name port_list source receiver inactive Example Port 2 Source Port Port 6 7 Receiver Port MVR vlan port 2 2 source MVR vlan port 2 6...

Страница 232: ...of Source2 VID 2 Source Port 2 Receiver Port 6 7 Inactive Port 1 3 5 8 26 Channel Setting of Source2 VID 2 Empty Channel Table MVR Immediate Leave Setting Port Immediate Leave 1 Enabled 2 Enabled 3 E...

Страница 233: ...d Syntax IPMC Flooding mld igmp enable disable Example IPMC flood igmp en IGMP SSM Range Source Specific Multicast Syntax IPMC SSM mld igmp Range prefix mask_len Example IPMC ssm igmp range 239 0 0 0...

Страница 234: ...iguration Syntax IPMC State mld igmp vid enable disable IPMC Querier mld igmp vid enable disable IPMC Compatibility mld igmp vid auto v1 v2 v3 IPMC Parameter RV mld igmp vid ipmc_param_rv IPMC Paramet...

Страница 235: ...Chapter 4 Feature Configuration CLI Featuring Configuration CLI NGSM48T2 User Manual 235 mld igmp in the syntax The IP Address should be IPv6 format for sure...

Страница 236: ...delay 2 LLDP reini 2 LLDP Mode Syntax LLDP Mode port_list enable disable rx tx rx RX Only tx TX Only Example Enable LLDP on Ports LLDP mode 1 10 en Port 1 10 are enabled LLDP mode 1 26 en Port 1 26 ar...

Страница 237: ...ature Configuration CLI Featuring Configuration CLI NGSM48T2 User Manual 237 LLDP option 1 3 port en LLDP option 1 3 sys_name en LLDP option 1 3 sys_desc en LLDP option 1 3 sys_capa en LLDP option 1 3...

Страница 238: ...C age 100 change aging time to 100 seconds the aging time range is 10 1000000 MAC age 0 0 Disable Aging time MAC Learning Configuration Syntax MAC Learning port_list auto disable secure Example MAC le...

Страница 239: ...Chapter 4 Feature Configuration CLI Featuring Configuration CLI NGSM48T2 User Manual 239 VID MAC Address Ports 1 00 10 15 02 25 2a 1 5 1 0b 16 21 2c 37 42 1 10...

Страница 240: ...e vid Example VLAN add 3 5 8 Add port 5 8 to VLAN 3 VLAN name add vlan3 3 vlan3 is the name of VLAN 3 Port Configuration Syntax VLAN FrameType port_list all tagged untagged VLAN IngressFilter port_lis...

Страница 241: ...iguration PVLAN Configuration Syntax PVLAN Configuration port_list PVLAN Add pvlan_id port_list PVLAN Delete pvlan_id PVLAN Lookup pvlan_id PVLAN Isolate port_list enable disable Example PVLAN add 10...

Страница 242: ...2334455 10 1 4 Result VCL Macvlan conf MAC Address VID Ports 00 0b 16 21 2c 37 10 1 4 Protocol based VLAN Configuration Protocol to Group Syntax VCL ProtoVlan Protocol Add Eth2 ether_type arp ip ipx a...

Страница 243: ...8 E1 10 5 8 IP Subnet based VLAN Configuration IP Subnet based VLAN Configuration Syntax VCL IPVlan Add vce_id ip_addr_mask vid port_list Parameters vce_id Unique VCE ID for each VCL entry ip_addr_ma...

Страница 244: ...mode en Voice vlan id 100 Voice vlan age 86400 Voice vlan traff class 7 Result Voice VLAN Configuration Voice VLAN Mode Enabled Voice VLAN VLAN ID 100 Voice VLAN Age Time seconds 86400 Voice VLAN Traf...

Страница 245: ...VLAN OUI Add oui_addr description Voice VLAN OUI Delete oui_addr Voice VLAN OUI Clear Voice VLAN OUI Lookup oui_addr Example Voice VLAN oui add 00 12 08 hello Result Voice VLAN oui lookup Voice VLAN...

Страница 246: ...p_list dei_list class dpl QoS Port Classification DSCP port_list enable disable Range of the Value class QoS class 0 7 dpl Drop Precedence Level 0 1 pcp Priority Code Point 0 7 dei Drop Eligible Indic...

Страница 247: ...QoS Port Policer mode 1 2 en QoS Port Policer rate 1 2 300 QoS Port Policer unit 1 2 kbps QoS Port Policer flow 1 2 en Port Scheduler Syntax Syntax QoS Port Scheduler Mode port_list strict weighted Ex...

Страница 248: ...Port QueueShaper Mode port_list queue_list enable disable QoS Port QueueShaper Rate port_list queue_list bit_rate QoS Port QueueShaper Excess port_list queue_list enable disable Parameters port_list...

Страница 249: ...ced QoS setting please follow the DSCP table of upper access core switch to configure the table The table of the whole network must be unified Storm Configuration Strom Control Syntax QoS Storm Unicas...

Страница 250: ...re Command Line Mirroring Configuration Mirror Configuration Syntax Mirror Port port disable Mirror Mode port_cpu_list enable disable rx tx Example Mirror port 5 Mirror mode 6 8 en Result Mirror Confi...

Страница 251: ...eature Command Line UPnP Configuration UPnp Configuration Syntax UPnP Configuration UPnP Mode enable disable UPnP TTL ttl UPnP AdvertisingDuration duration Example UPnP mode en UPnP ttl 5 Default 4 UP...

Страница 252: ...6343 1400 Result Receiver Configuration Owner none Receiver 192 168 2 100 UDP Port 6343 Max Datagram 1400 bytes Time left 0 seconds Receiver Release sFlow receiver Port Configuration Syntax sFlow Rec...

Страница 253: ...figuration CLI NGSM48T2 User Manual 253 rate 10 max size 128 sFlow coun 1 2 5 Enable CounterPoller of port 1 2 and set interval to 5 sFlow statistic sample 1 2 Per Port Statistics Port Rx Flow Samples...

Страница 254: ...ount keyword ping_count Transmit ECHO_REQUEST packet count 1 60 Default is 5 interval PING Interval keyword ping_interval Ping interval 0 30 Default is 0 Example Ping IP 192 168 2 100 IP ping 192 168...

Страница 255: ...ion CLI NGSM48T2 User Manual 255 switch IP ipv6 ping6 2001 DB8 250 8bff fee8 f800 VeriPHY Syntax Port VeriPHY port_list Example Port veriphy 24 Starting VeriPHY please wait Port Pair A Length Pair B L...

Страница 256: ...xample Software Firmware Firmware Version Firmware Swapping Firmware Update Syntax Firmware Information Firmware Swap Firmware Load ip_addr_string file_name Parameters of Firmware Load ip_addr_string...

Страница 257: ...te 1 The switch process the firmware upgrading through TFTP protocol When running firmware upgrading please open the TFTP tool as TFTP server for the switch For example TFTPd32 is a freeware TFTP serv...

Страница 258: ...Web Configuration Monitor Diagnostic Maintenance In Web Configuration Monitor Diagnostic Maintenance The following chapter will guide you to this switch s configuration webpage regarding to Monitor D...

Страница 259: ...in Configuration System Information System Name Location The system location configured in Configuration System Information System Location MAC Address The MAC Address of this switch Chip ID The Chip...

Страница 260: ...nance Monitor Diagnostic Maintenance NGSM48T2 User Manual 260 Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Refresh Click to refresh the page any...

Страница 261: ...s The last 120 samples are graphed and the last numbers are displayed as text as well In order to display the SVG graph your browser must support the SVG format Consult the SVG Wiki for more informati...

Страница 262: ...ll All levels Time The time of the system log entry Message The message of the system log entry Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Refr...

Страница 263: ...this box to enable an automatic refresh of the page at regular intervals Refresh Updates the system log entries starting from the current entry ID Clear Flushes all system log entries Updates the sys...

Страница 264: ...e provides an overview of the current switch port states The port states are illustrated as follows RJ45 ports SFP ports State Disabled Down Link Buttons Auto refresh Check this box to refresh the pag...

Страница 265: ...transmitted packets per port Bytes The number of received and transmitted bytes per port Errors The number of frames received in error and the number of incomplete transmissions per port Drops The num...

Страница 266: ...yed counters are Port The logical port for the settings contained in the same row Qn There are 8 QoS queues per port Q0 is the lowest priority queue Rx Tx The number of received and transmitted packet...

Страница 267: ...et Only Ethernet frames with Ether Type 0x600 0xFFFF are allowed LLC Only LLC frames are allowed SNAP Only SNAP frames are allowed IPv4 The QCE will match only IPV4 frames IPv6 The QCE will match only...

Страница 268: ...herwise it is always No Please note that conflict can be resolved by releaseing the H W resources required to add QCL entry on pressing Resolve Conflict button Buttons Select the QCL status from this...

Страница 269: ...eive Total and Transmit Total Rx and Tx Packets The number of received and transmitted good and bad packets Rx and Tx Octets The number of received and transmitted good and bad bytes Includes FCS but...

Страница 270: ...frames received with valid CRC Rx Fragments The number of short 1 frames received with invalid CRC Rx Jabber The number of long 2 frames received with invalid CRC Rx Filtered The number of received fr...

Страница 271: ...ch Received Packets Number of received packets from the interface when access management mode is enabled Allowed Packets Number of allowed packets from the interface when access management mode is ena...

Страница 272: ...sks all user modules whether to allow this new MAC address to forward or block it For a MAC address to be set in the forwarding state all enabled user modules must unanimously agree on allowing the MA...

Страница 273: ...nknown MAC addresses to arrive Limit Reached The Port Security service is enabled by at least the Limit Control user module and that module has indicated that the limit is reached and no more MAC addr...

Страница 274: ...port If no MAC addresses are learned a single row stating No MAC addresses attached is displayed State Indicates whether the corresponding MAC address is blocked or forwarding In the blocked state it...

Страница 275: ...al 275 Security Network NAS This page provides an overview of the current NAS port states Port The switch port number Click to navigate to detailed NAS statistics for this port Admin State The port s...

Страница 276: ...ed to the port by the RADIUS server if enabled Port VLAN ID The VLAN ID that NAS has put the port in The field is blank if the Port VLAN ID is not overridden by NAS If the VLAN ID is assigned by the R...

Страница 277: ...1X Multi 802 1X EAPOL Counters Direction Name IEEE Name Description Rx Total dot1xAuthEapolFramesRx The number of valid EAPOL frames of any type that have been received by the switch Rx Response ID do...

Страница 278: ...mesTx The number of valid EAPOL Request frames other than Request Identity frames that have been transmitted by the switch Backend Server Counters These backend RADIUS frame counters are available for...

Страница 279: ...at the supplicant client has successfully authenticated to the backend server Rx Auth Failures dot1xAuthBackendAuthFails 802 1X and MAC based Counts the number of times that the switch receives a fail...

Страница 280: ...02 1X MAC based Auth Last Supplicant Client Info Name IEEE Name Description MAC Address dot1xAuthLastEapolFrameSource The MAC address of the last supplicant client VLAN ID The VLAN ID on which the las...

Страница 281: ...hed it shows No supplicants attached This column is not available for MAC based Auth MAC Address For Multi 802 1X this column holds the MAC address of the attached supplicant For MAC based Auth this c...

Страница 282: ...page at regular intervals Click to refresh the page immediately This button is available in the following modes Force Authorized Force Unauthorized Port based 802 1X Single 802 1X Click to clear the c...

Страница 283: ...atch all ingress port Port The ACE will match a specific ingress port Frame Type Indicates the frame type of the ACE Possible values are Any The ACE will match any frame type EType The ACE will match...

Страница 284: ...is displayed the port copy operation is disabled Mirror Specify the mirror operation of this port The allowed values are Enabled Frames received on the port are mirrored Disabled Frames received on th...

Страница 285: ...received and transmitted Rx and Tx Decline The number of decline option 53 with value 4 packets received and transmitted Rx and Tx ACK The number of ACK option 53 with value 5 packets received and tr...

Страница 286: ...and Tx Lease Active The number of lease active option 53 with value 13 packets received and transmitted Buttons Auto refresh Click this box to enable an automatic refresh of the page at regular inter...

Страница 287: ...nt Option The number of packets received without agent information options Receive Missing Circuit ID The number of packets received with the Circuit ID option missing Receive Missing Remote ID The nu...

Страница 288: ...ains up to 1024 entries and is sorted first by port then by VLAN ID then by MAC address and then by IP address Navigating the ARP Inspection Table Each page shows up to 99 entries from the Dynamic ARP...

Страница 289: ...tted MAC Address User MAC address of the entry IP Address User IP address of the entry Buttons Auto refresh Click this box to enable an automatic refresh of the page at regular intervals Refresh Click...

Страница 290: ...he Start from port address VLAN and IP address input fields allow the user to select the starting point in the Dynamic IP Source Guard Table Clicking the button will update the displayed table startin...

Страница 291: ...to refresh Click this box to enable an automatic refresh of the page at regular intervals Refresh Click to refresh the page immediately Clear Flushes all dynamic entries Updates the table starting fro...

Страница 292: ...led Not Ready The server is enabled but IP communication is not yet up and running Ready The server is enabled IP communication is up and running and the RADIUS module is ready to accept access attemp...

Страница 293: ...and the RADIUS module is ready to accept accounting attempts Dead X seconds left Accounting attempts were made to this server but it did not reply within the configured timeout The server has temporar...

Страница 294: ...t counter There are seven receive and four transmit counters Direction Name RFC4668 Name Description Rx Access Accepts radiusAuthClientExtAccess Accepts The number of RADIUS Access Accept packets vali...

Страница 295: ...packets that were received from the server on the authentication port and dropped for some other reason Tx Access Requests Radius AuthClientExtAccess Requests The number of RADIUS Access Request pack...

Страница 296: ...nabled IP communication is up and running and the RADIUS module is ready to accept access attempts Dead X seconds left Access attempts were made to this server but it did not reply within the configur...

Страница 297: ...nses radiusAccClientExtRespons es The number of RADIUS packets valid or invalid received from the server Rx Malformed Responses radiusAccClientExtMalform edResponses The number of malformed RADIUS pac...

Страница 298: ...r the server that have not yet timed out or received a response This variable is incremented when a Request is sent and decremented due to receipt of a Response timeout or retransmission Tx Timeouts r...

Страница 299: ...s only reachable when more than one server is enabled Round Trip Time radiusAccClientExtRoun dTripTime The time interval measured in milliseconds between the most recent Response and the Request that...

Страница 300: ...n bad packets received on the network Pkts The total number of packets including bad packets broadcast packets and multicast packets received Broad cast The total number of good packets received that...

Страница 301: ...including bad packets received that were between 65 to 127 octets in length 128 255 The total number of packets including bad packets received that were between 128 to 255 octets in length 256 511 The...

Страница 302: ...sources Drops The total number of events in which packets were dropped by the probe due to lack of resources Octets The total number of octets of data including those in bad packets received on the ne...

Страница 303: ...64 octets received with invalid CRC Jabb The number of frames which size is larger than 64 octets received with invalid CRC Coll The best estimate of the total number of collisions on this Ethernet se...

Страница 304: ...g and falling threshold Variable Indicates the particular variable to be sampled Sample Type The method of sampling the selected variable and calculating the value to be compared against the threshold...

Страница 305: ...t entries The displayed fields are Event Index Indicates the index of the event entry Log Index Indicates the index of the log entry Log TIme Indicates Event log time Log Description Indicates the Eve...

Страница 306: ...id is shown as isid aggr id and for GLAGs as aggr id Partner System ID The system ID MAC address of the aggregation partner Partner Key The Key that the partner has assigned to this aggregation ID Las...

Страница 307: ...means that the port could not join the aggregation group but will join if other port leaves Meanwhile it s LACP status is disabled Key The key assigned to this port Only ports with the same key can ag...

Страница 308: ...eived Shows how many LACP frames have been received at each port LACP Transmitted Shows how many LACP frames have been sent from each port Discarded Shows how many unknown or illegal LACP frames have...

Страница 309: ...port Action The currently configured port action Transmit The currently configured port transmit mode Loops The number of loops detected on this port Status The current loop protection status of the p...

Страница 310: ...dge ID of this Bridge instance Root ID The Bridge ID of the currently elected root bridge Root Port The switch port currently assigned the root port role Root Cost Root Path Cost For the Root Bridge i...

Страница 311: ...t STP port role of the CIST port The port role can be one of the following values AlternatePort BackupPort RootPort DesignatedPort Disabled CIST State The current STP port state of the CIST port The p...

Страница 312: ...er of RSTP Configuration BPDU s received transmitted on the port STP The number of legacy STP Configuration BPDU s received transmitted on the port TCN The number of legacy Topology Change Notificatio...

Страница 313: ...1 Reports Received The number of Received V1 Reports V2 Reports Received The number of Received V2 Reports V3 Reports Received The number of Received V3 Reports V2 Leaves Received The number of Receiv...

Страница 314: ...om that or the closest next MVR Group Table match In addition the two input fields will upon a Refresh button click assume the value of the first displayed entry allowing for continuous refresh with t...

Страница 315: ...uerier Version currently Host Version Working Host Version currently Querier Status Shows the Querier status is ACTIVE or IDLE DISABLE denotes the specific interface is administratively disabled Queri...

Страница 316: ...t leads towards the Layer 3 multicast device or IGMP querier Static denotes the specific port is configured to be a router port Dynamic denotes the specific port is learnt to be a router port Both den...

Страница 317: ...N and group input fields allow the user to select the starting point in the IGMP Group Table Clicking the Refresh button will update the displayed table starting from that or the closest next IGMP Gro...

Страница 318: ...refresh Check this box to enable an automatic refresh of the page at regular intervals Refresh Refreshes the displayed table starting from the input fields Updates the table starting with the first en...

Страница 319: ...IGMP SFM Information Table The Start from VLAN and group input fields allow the user to select the starting point in the IGMP SFM Information Table Clicking the Refresh button will update the displaye...

Страница 320: ...to be 128 Type Indicates the Type It can be either Allow or Deny Buttons Auto refresh Check this box to enable an automatic refresh of the page at regular intervals Refresh Refreshes the displayed ta...

Страница 321: ...1 Reports Received The number of Received V1 Reports V2 Reports Received The number of Received V2 Reports V1 Leaves Received The number of Received V1 Leaves Router Port Display which ports act as ro...

Страница 322: ...king the Refresh button will update the displayed table starting from that or the next closest MLD Group Table match In addition the two input fields will upon a Refresh button click assume the value...

Страница 323: ...t visited the web page will show the first 20 entries from the beginning of the MLD SFM Information Table The Start from VLAN and group input fields allow the user to select the starting point in the...

Страница 324: ...ly system limits the total number of IP source addresses for filtering to be 128 Type Indicates the Type It can be either Allow or Deny Buttons Auto refresh Check this box to enable an automatic refre...

Страница 325: ...on of the neighbor s LLDP frames Remote Port ID The Remote Port ID is the identification of the neighbor port System Name System Name is the name advertised by the neighbor unit Port Description Port...

Страница 326: ...Address is the neighbor unit s address that is used for higher layer entities to assist discovery by the network management This could for instance hold the neighbor s IP address Buttons Refresh Clic...

Страница 327: ...he following technologies 1 LAN Switch Router 2 IEEE 802 1 Bridge 3 IEEE 802 3 Repeater included for historical reasons 4 IEEE 802 11 Wireless Access Point 5 Any device that supports the IEEE 802 1AB...

Страница 328: ...bilities include all of the capabilities defined for the previous Generic Endpoint Class Class I and are extended to include aspects related to media streaming Example product categories expected to a...

Страница 329: ...voice services These devices are typically deployed on a separate VLAN for ease of deployment and enhanced security by isolation from data applications 2 Voice Signalling for use in network topologies...

Страница 330: ...d or an untagged VLAN Can be Tagged or Untagged Untagged The device is using an untagged frame format and as such does not include a tag header as defined by IEEE 802 1Q 2003 Tagged The device is usin...

Страница 331: ...ayed table contains a row for each port The columns hold the following information Local Port The port on which LLDP frames are received or transmitted Tx Tw The link parther s maximum time that trans...

Страница 332: ...nk partners request was based on stale information Echo Rx Tw The link partner s Echo Rx Tw value Resolved Tx Tw The resolved Tx Tw for this link Note NOT the link parther The resolved value that is t...

Страница 333: ...last change was detected Total Neighbors Entries Added Shows the number of new entries added since switch reboot Total Neighbors Entries Deleted Shows the number of new entries deleted since switch re...

Страница 334: ...hen the entry ages out TLVs Discarded Each LLDP frame can contain multiple pieces of information known as TLVs TLV is short for Type Length Value If a TLV is malformed it is counted and discarded TLVs...

Страница 335: ...and VLAN input fields allow the user to select the starting point in the MAC Table Clicking the button will update the displayed table starting from that or the closest next MAC Table match In additio...

Страница 336: ...the page at regular intervals Refresh Refreshes the displayed table starting from the Start from MAC address and VLAN input fields Clear Flushes all dynamic entries Updates the table starting from the...

Страница 337: ...ports on a VLAN bridged network Voice VLAN Voice VLAN is a VLAN configured specially for voice traffic typically originating from IP phones MVR MVR is used to eliminate the need to duplicate multicas...

Страница 338: ...from that or the closest next VLAN Table match The will use the last entry of the currently displayed VLAN entry as a basis for the next lookup When the end is reached the text No more entries is sho...

Страница 339: ...rotocol MVRP allows dynamic registration and deregistration of VLANs on ports on a VLAN bridged network Voice VLAN Voice VLAN is a VLAN configured specially for voice traffic typically originating fro...

Страница 340: ...ccepts all frames or only tagged frames This parameter affects VLAN ingress processing If the port only accepts tagged frames untagged frames received on that port are discarded Tx Tag Shows egress fi...

Страница 341: ...ers Currently we support following VLAN User types CLI Web SNMP These are referred to as static NAS NAS provides port based authentication which involves communications between a Supplicant Authentica...

Страница 342: ...he sampled datagram for analysis The attributes associated with the flow sampling are sampler type sampling rate maximum header size Counter Sampling Counter sampling performs periodic time based samp...

Страница 343: ...ption of a reply The page refreshes automatically until responses to all packets are received or until a timeout occurs ICMP Ping Output Result PING server 192 168 2 100 56 bytes of data 64 bytes from...

Страница 344: ...all packets are received or until a timeout occurs ICMPv6 Ping Output PING6 server 10 10 132 20 64 bytes from 10 10 132 20 icmp_seq 0 time 0ms 64 bytes from 10 10 132 20 icmp_seq 1 time 0ms 64 bytes f...

Страница 345: ...ccurate for cables of length 7 140 meters 10 and 100 Mbps ports will be linked down while running VeriPHY Therefore running VeriPHY on a 10 or 100 Mbps management port will cause the switch to stop re...

Страница 346: ...agnostic Maintenance Monitor Diagnostic Maintenance NGSM48T2 User Manual 346 Cross C Abnormal cross pair coupling with pair C Cross D Abnormal cross pair coupling with pair D Length The length in mete...

Страница 347: ...tory Defaults You can reset the configuration of the switch on this page Only the IP configuration is retained The new configuration is available immediately which means that no restart is necessary Y...

Страница 348: ...he Browse command Click Upload to start the process After the software image is uploaded a page announces that the firmware update is initiated After about a minute the firmware is updated and the swi...

Страница 349: ...d 2 If the alternate image is active due to a corruption of the primary image or by manual intervention uploading a new firmware image to the device will automatically use the primary image slot and a...

Страница 350: ...odule controlling specific parts of the configuration Group tags port table vlan table etc These tags identify a group of parameters typically a table Parameter tags mode entry etc These tags identify...

Страница 351: ...ce Monitor Diagnostic Maintenance NGSM48T2 User Manual 351 mac global switch sid 1 mac entry port 1 24 learn mode auto entry mac switch configuration Save Click to save the configuration file Upload C...

Страница 352: ...changes even within the product s operating temperature range may cause malfunctions DO NOT install this product in a location near any sources of water or liquid DO NOT stack this product with other...

Страница 353: ...tion will guide you to set the IP address properly in a Microsoft Windows 8 environment Setting IP address in other Microsoft operating system such as Windows Vista or Windows 7 is quite the same and...

Страница 354: ...SM48T2 User Manual 354 3 An Ethernet Status window will pop up Please click on the Properties button as shown in the figure down below 4 An Ethernet Properties window will pop up Please double click o...

Страница 355: ...own in the figure down below By default your product s IP address should be 192 168 2 1 You can set any IP address as long as it s not the same with your product s IP address and is in the same networ...

Результаты поиска

Содержание NGSM48T2

Отзывы:

Похожие инструкции для NGSM48T2

Бренды по названию

Популярные бренды

Niveo NGSM48T2, Руководство пользователя

Результаты поиска

Содержание NGSM48T2

Отзывы:

Похожие инструкции для NGSM48T2

Бренды по названию

Популярные бренды