ORiNG RES-P3242GCL SERIES Скачать руководство пользователя страница 56

Страница: 56 / 101

RES-P3242GCL SERIES User’s Manual

4.1.11

Security

Five useful functions can enhance security of switch: IP Security, Port Security, MAC Blacklist,

and MAC address Aging and 802.1x protocol.

4.1.11.1 Access Control List

Access Control List Interface

The following table describes the labels in this screen.

Label

Description

Group Id

Type in the Group ID from 1 to 229. (Maximum 255,26 rules

for DHCP filter)

Action

Permit and Deny

Port

Select specific port to apply the ACL

VLAN

Select any or a particular VID

Packet type

Select packet type – IPv4 or Non-IPv4

Src IP Address

Select any or assign an IP address with Subnet Mask for

source IP address

Dst IP Address

Select any or assign an IP address with Subnet Mask for

Содержание RES-P3242GCL SERIES

Страница 1: ...ustrial IEC 61850 3 Management Ethernet Switch RES P3242GCL SERIES User s Manual Version 2 0 JUN 2012 ORing Industrial Networking Corp Website www oring networking com E mail support oring networking...

Страница 2: ...10BASE T Pin Assignments 3 3 2 SFP 5 3 3 Console Cable 5 WEB Management 6 4 1 Configuration by Web Browser 6 4 1 1 About Web based Management 6 4 1 2 System Information 8 4 1 3 Basic setting 9 4 1 3 2...

Страница 3: ...CP Server 42 4 1 9 1 DHCP Server Setting 42 4 1 9 2 DHCP Server Client List 43 4 1 9 3 DHCP Server Port and IP bindings 43 4 1 10 SNMP 44 4 1 10 1 SNMP System Setting 44 4 1 10 2 SNMP Trap Setting 45...

Страница 4: ...t 79 5 6 Commands Set List Spanning Tree command set 80 5 7 Commands Set List QoS command set 82 5 8 Commands Set List IGMP command set 83 5 9 Commands Set List MAC Filter Table command set 84 5 10 Co...

Страница 5: ...2 Software Features World s fastest Redundant Ethernet Ring Recovery time 10ms over 250 units connection Supports Ring Coupling Dual Homing RSTP over O Ring Supports SNMPv1 v2 v3 RMON Port base 802 1...

Страница 6: ...RES P3242GCL SERIES User s Manual 5 2 x 10 100 1000Base T X and 1000Base X SFP ports on combo port 1 x Console Port Dimensions W x D x H 443 7 mm W x 262 7 mm D x 44 mm H 19 inches rack mountable...

Страница 7: ...Setting Speed auto Duplex auto Flow control disable Gigabit port 2 x 10 100 1000Base T X Gigabit ports combo Fiber port 2 x 1000Base X on SFP ports combo Console Use RS 232 cable to manage switch 1 Po...

Страница 8: ...ombo Copper ports Link ACT status 11 LED Status P1 LED for PWR1 When the PWR1 links the green led will be light on P2 LED for PWR2 When the PWR2 links the green led will be light on Status LED for Sys...

Страница 9: ...P3242GCL SERIES User s Manual 2 2 3 Rack mount kit assembly You can find the rack mount kit and the screws in the packing box Please assembly the rack mount kit on the switch with screws as below pict...

Страница 10: ...ifications Cable Types and Specifications Cable Type Max Length Connector 10BASE T Cat 3 4 5 100 ohm UTP 100 m 328 ft RJ 45 100BASE TX Cat 5 100 ohm UTP UTP 100 m 328 ft RJ 45 1000BASE T Cat 5 Cat 5e...

Страница 11: ...MDI and MDI X port pin outs 10 100 Base T MDI MDI X pins assignment Pin Number MDI port MDI X port 1 TD transmit RD receive 2 TD transmit RD receive 3 RD receive TD transmit 4 Not used Not used 5 Not...

Страница 12: ...be connected to the RX port of Switch B Switch A Switch B 3 3 Console Cable RES P3242GCL SERIES switches can be management by console port The DB 9 to RJ 45 cable can be found in the package You can c...

Страница 13: ...t supports Internet Explorer 5 0 It is based on Java Applets with an aim to reduce network bandwidth consumption enhance access speed and present an easy viewing screen Note By default IE5 0 or later...

Страница 14: ...3 The login screen appears 4 Key in the username and password The default username and password is admin 5 Click Enter or OK button then the main interface of the Web based management appears Login s...

Страница 15: ...screen Label Description System Name Display the system name of switch System Description Display the description of switch System Location Display the location of switch System Contact Display the n...

Страница 16: ...iption of switch System Location Assign the switch physical location The maximum length is 64 bytes System Contact Enter the name of contact person or organization 4 1 3 2 Admin Password Change web ma...

Страница 17: ...ss will be replaced by the IP address which the DHCP server has assigned After clicking Apply button a popup dialog shows up to inform when the DHCP client is enabling The current IP will lose and you...

Страница 18: ...ble describes the labels in this screen Label Description SNTP Client Enable or disable SNTP function to get the time from the SNTP server Daylight Saving Time Enable or disable daylight saving time f...

Страница 19: ...tandard ADT Alaskan Daylight 8 hours 4 am ALA Alaskan Standard 9 hours 3 am HAW Hawaiian Standard 10 hours 2 am Nome Alaska 11 hours 1 am CET Central European FWT French Winter MET Middle European MEW...

Страница 20: ...New Zealand Standard NZT New Zealand 12 hours Midnight Label Description SNTP Sever IP Address Set the SNTP server IP address Daylight Saving Period Set up the Daylight Saving beginning time and Dayli...

Страница 21: ...es the labels in this screen Label Description LLDP Protocol Enable or Disable LLDP function LLDP Interval The interval of resend LLDP by default at 30 seconds Apply Click Apply to set the configurati...

Страница 22: ...server IP Restore File Name Fill the file name Restore Click restore to restore the configurations Form Local PC User can select file restore not need TFTP server Restore File Name Fill the file name...

Страница 23: ...mware interface 4 1 3 8 Broadcast storm filter Set the broadcast storm rate to prevent network crash 1 Flooded Unicast Multicast Packets Enable disable to limit the frame type 2 Control Packets Enable...

Страница 24: ...nction 4 1 3 10 Jumbo Frame Enable disable all ports Jumbo frame function 4 1 4 Redundancy 4 1 4 1 O Ring O Ring is the most powerful Ring in the world The recovery time of O Ring is less than 10 ms I...

Страница 25: ...t of the switch in another ring Coupling Ring need four switch to build an active and a backup link Set a port as coupling port The coupled four ports of four switches will be run at active backup mod...

Страница 26: ...Vender Choosing the venders that you want to join to their ring 1st Ring Port Choosing the port which connect to the ring 2nd Ring Port Choosing the port which connect to the ring 4 1 4 3 O RSTP O RST...

Страница 27: ...Protocol RSTP is an evolution of the Spanning Tree Protocol It provides faster spanning tree convergence after a topology change The system also supports STP and the system will auto detect the connec...

Страница 28: ...ge waits without receiving Spanning tree Protocol configuration messages before attempting a reconfiguration Enter a value between 6 through 40 Hello Time 1 10 The time that controls switch sends out...

Страница 29: ...state transactions that are possible within RSTP are dependent upon whether the port concerned can only be connected to exactly one other bridge i e It is served by a point to point LAN segment or it...

Страница 30: ...Apply Click Apply to set the configurations 4 1 4 5 MSTP Multiple Spanning Tree Protocol MSTP is a standard protocol base on IEEE 802 1s The function is that several VLANs can be mapping to a reduced...

Страница 31: ...iguration name Revision Level 0 65535 The same MST Region must have the same revision level Priority 0 61440 A value used to identify the root bridge The bridge with the lowest value has the highest p...

Страница 32: ...for RSTP A single value applies to all Spanning Trees within an MST Region the CIST and all MSTIs for which the Bridge is the Regional Root Apply Click Apply to activate the configurations MSTP Port i...

Страница 33: ...ge Label Admin Non STP Label Apply Click Apply to activate the configurations MSTP Instance interface Label Description Instance Set the instance from 1 to 15 State Enable or disable the instance VLAN...

Страница 34: ...you want to configure Priority 0 240 Decide which port should be blocked by priority in LAN Enter a number 0 through 240 The value of priority must be the multiple of 16 Path Cost 1 200000000 The cos...

Страница 35: ...st traffic so that it travels only to those end destinations that require that traffic and reduces the amount of traffic on the Ethernet LAN IGMP Snooping interface The following table describes the l...

Страница 36: ...ng MVR VLAN TYPE Setting Port Type to inactive Receiver Source Immediate Leave Enable or disable Immediate leave 4 1 5 3 Multicast Filter Multicast filtering is the system by which end stations only r...

Страница 37: ...el Description IP Address Assign a multicast group IP address in the range of 224 0 0 0 239 255 255 255 Member Ports Tick the check box beside the port number to include them as the member ports in th...

Страница 38: ...e port setting is disabled then it will not receive or transmit any packet Negotiation set auto negotiation status of port Speed Duplex You can set Autonigotiation 100 full 100 half 10 full 10 half mo...

Страница 39: ...an limit traffic of all ports including broadcast multicast and flooded unicast You can also set Ingress or Egress to limit traffic received or transmitted bandwidth Rate Limit interface The following...

Страница 40: ...itch with the lowest value has the highest priority and is selected as the active LACP Group ID There are three trunk groups to provide configure Choose the Group ID and click Select LACP If enable th...

Страница 41: ...ve Select the ports to join the trunk group Allow maximum four ports to be aggregated at the same time Click Add button to add the port To remove unwanted ports select the port and click Remove button...

Страница 42: ...tivity Label Description Port Port number LACP State Activity LACP Mode work status 4 1 6 6 Loop Guard This feature prevents the loop attack when the port receives loop packet This port will auto disa...

Страница 43: ...of VLAN operation mode is at 802 1Q 4 1 7 1 VLAN Setting Tagged based VLAN is an IEEE 802 1Q specification standard and t is possible to create a VLAN across devices from different switch venders IEE...

Страница 44: ...the management VLAN can access the switch Port Select the port to configure Link type There are 3 types of link type Access Link single switch only allows you to group ports by setting the same VID Tr...

Страница 45: ...n go among only members of the same VLAN group Note all unselected ports are treated as belonging to another single VLAN If the port based VLAN enabled the VLAN tagging is ignored VLAN Configuration P...

Страница 46: ...rface 2 The following table describes the labels in this screen Label Description Group Name VLAN name VLAN ID Specify the VLAN ID Add Select port to join the VLAN group Remove Remove port of the VLAN...

Страница 47: ...e 8 high queue packets 4 middle queue packets 2 low queue packets and the one lowest queue packets are transmitted in one turn Highest SecHigh SecLow Lowest 15 7 3 1 The same as 8 4 2 1 only the ratio...

Страница 48: ...s Manual 41 Port Base Priority Port base Priority Assign each port a value form 0 to 7 the value will according to the 802 1p 4 priority queues Help Show help file Apply Click Apply to set the configu...

Страница 49: ...des with DHCP server function Enable the DHCP server function the switch system will be a DHCP server DHCP Server Configuration interface The following table describes the labels in this screen Label...

Страница 50: ...Click Apply to set the configurations 4 1 9 2 DHCP Server Client List When the DHCP server function is activated the system will collect the DHCP client information and display in here DHCP Server Cli...

Страница 51: ...y System Setting Function SNMP Agent Setting interface The following table describes the labels in this screen Label Description Agent Mode Three SNMP versions are supported such as SNMP V1 SNMP V2c a...

Страница 52: ...e Auth Password and Privacy Password which can be different with Auth Password To remove a current user profile 1 Input SNMPv3 user name you want to remove 2 Click Remove button Current SNMPv3 User Pr...

Страница 53: ...bes the labels in this screen Label Description IP Address The server IP address to receive Trap Community Community for authentication Trap Version Trap Version supports V1 and V2c Add Add trap serve...

Страница 54: ...labels in this screen Label Description Context Table Configure SNMP v3 context table Assign the context name of context table Click Apply to change context name User Table 1 Configure SNMP v3 user ta...

Страница 55: ...1 Configure SNMP v3 access table 2 Context Prefix set up the context name 3 Group Name set up the group 4 Security Level select the access level 5 Context Match Rule select the context match rule 6 Re...

Страница 56: ...wing table describes the labels in this screen Label Description Group Id Type in the Group ID from 1 to 229 Maximum 255 26 rules for DHCP filter Action Permit and Deny Port Select specific port to ap...

Страница 57: ...4 Protocol Assign the L4 protocol from among ICMP 1 IGMP 2 TCP or UDP Current List Display the current list information 4 1 11 2 IP Security IP security can enable disable remote management from WEB o...

Страница 58: ...Http or Telnet Apply Click Apply to set the configurations Help Show help file 4 1 11 3 Static MAC Forwarding Static MAC Forwarding is to add static MAC addresses to hardware forwarding database If po...

Страница 59: ...in this list will be discarded Thus the target device will never receive any frame MAC Blacklist interface The following table describes the labels in this screen Label Description MAC Address Input M...

Страница 60: ...between this switch and authentication server NAS Identifier A string used to identify this switch Advanced Setting Quiet Period Set the time interval between authentication failure and the start of...

Страница 61: ...in this screen Label Description Port Authorized Mode Reject force this port to be unauthorized Accept force this port to be authorized Authorize the state of this port was determined by the outcome...

Страница 62: ...P request Server Timeout Set the period of time the switch waits for a Radius server response to an authentication request Max Requests Set the maximum number of times to retry sending packets to the...

Страница 63: ...tem events System Warning Fault Relay Alarm for RES 3242GC E When any selected fault event is happened the Fault LED in switch panel will light up and the electric relay will signal at the same time S...

Страница 64: ...ystem Server Only log to a remote SYSLOG server Both log to both of local and remote server SYSLOG Server IP Address The remote SYSLOG Server IP address Apply Click Apply to set the configurations Hel...

Страница 65: ...P Server IP Address Setting up the mail server IP address Mail Subject The Subject of the mail Sender Set up the email account to send the alert Authentication Username the authentication username Pas...

Страница 66: ...ystem Warning Event Selection interface The following table describes the labels in this screen Label Description Device cold start When the device executes cold start the system will issue a log even...

Страница 67: ...ntLog If system log client is enabled the system event logs will show in this table System event log interface The following table describes the labels in this screen Label Description Page Select LOG...

Страница 68: ...a frame received by a given port with a given destination MAC address is to be forwarded through a given potential transmission port MAC Address Table interface The following table describes the label...

Страница 69: ...umber of good packets sent by this port TX Bad Packet The number of bad packets sent by this port RX GOOD Packet The number of good packets received by this port RX Bad Packet The number of bad packet...

Страница 70: ...d Ethernet frames received that is frames that are not bad frames InBadOctets The sum of lengths of all bad Ethernet frames received OutFCSErr The number of frames transmitted with a invalid FCS Whene...

Страница 71: ...ved and or transmitted with a length of between 1024 and MaxSize octes in clusive including those with error OutOctetsLo The lower 32 bit of the 64 bit OutOctets counter The sum of lengths of all Ethe...

Страница 72: ...he number of collision events seen by MAC not including those conted in Single Multiple Excessive or Late This counter is applicable in half duplex only Late The number of times a collision is detecte...

Страница 73: ...ed port traffic will be copied to Analysis port Apply Click Apply to set the configurations Help Show help file 4 1 14 Save Configuration If any configuration changed Save Configuration should be clic...

Страница 74: ...lt configuration Click Reset to reset all configurations to the default value You can select Keep current IP address setting and Keep current username password to prevent IP and username and password...

Страница 75: ...r telnet to management switch by CLI CLI Management by RS 232 Serial Console 9600 8 none 1 none Before Configuring by RS 232 serial console use an RJ45 to DB9 F cable to connect the Switches RS 232 Co...

Страница 76: ...RES P3242GCL SERIES User s Manual 69 2 Input a name for new connection 3 Select to use COM port number...

Страница 77: ...etting 9600 for Bits per second 8 for Data bits None for Parity 1 for Stop bits and none for Flow control 5 The Console login screen will appear Use the keyboard enter the Console Username and Passwor...

Страница 78: ...55 255 0 Default Gateway 192 168 10 254 User Name admin Password admin Follow the steps below to access the console via Telnet 1 Telnet to the IP address of the switch from the Windows Run command or...

Страница 79: ...function status save configures Global configuration Enter the configure command while in privileged EXEC mode switch conf ig To exit to privileged EXEC mode enter exit or end Use this mode to config...

Страница 80: ...system name xxx system location System Location G Set switch system location string switch config system location xxx system description System Description G Set switch system description string swit...

Страница 81: ...168 1 50 dhcpserver subnetmask Subnet mask G Configure subnet mask for DHCP clients switch config dhcpserver subnetmask 255 255 255 0 dhcpserver gateway Gateway G Configure gateway for DHCP clients s...

Страница 82: ...net server switch config no security telnet 5 3 Commands Set List Port Commands Set Commands Le vel Description Example interface fastEthernet Portid G Choose the port for modification switch config i...

Страница 83: ...nicas t bandwidth type broadcast mul ticast I Set interface ingress limit frame type to accept broadcast and multicast frame switch config interface fastEthernet 2 switch config if bandwidth type broa...

Страница 84: ...face accounting I show interface statistic counter switch config interface fastEthernet 2 switch config if show interface accounting no accounting I Clear interface accounting information switch confi...

Страница 85: ...group GroupID 1to3 Port list Member port list This parameter could be a port range ex 1 4 or a port list separate by a comma ex 2 3 6 switch config aggregator group 1 2 4 nolacp or switch config aggre...

Страница 86: ...to a trunk group this command can t be applied switch vlan vlan 8021q port 3 trunk link tag 2 3 6 99 or switch vlan vlan 8021q port 3 trunk link tag 3 20 vlan 8021q port PortNumber hybrid link untag U...

Страница 87: ...ing tree enable G Enable spanning tree switch config spanning tree enable spanning tree priority 0to61440 G Configure spanning tree priority parameter switch config spanning tree priority 32767 spanni...

Страница 88: ...ing time for the specified spanning tree instances The forwarding time determines how long each of the listening and learning states last before the port begins forwarding switch config spanning tree...

Страница 89: ...this interface switch config interface fastEthernet 2 switch config if stp admin edge True stp admin non stp True False I Admin NonSTP of STP priority on this interface switch config interface fastEth...

Страница 90: ...no qos G Disable QoS function switch config no qos 5 8 Commands Set List IGMP command set Commands Level Description Example igmp enable G Enable IGMP snooping function switch config igmp enable Igmp...

Страница 91: ...switch show mac address table filter no mac address table static hwaddr MAC I Remove an entry of MAC address table of interface static switch config interface fastEthernet 2 switch config if no mac a...

Страница 92: ...mp server P Show specified trap server information switch show snmp server no snmp community strings Community G Remove the specified community switch config no snmp community strings public no snmp s...

Страница 93: ...ample 8021x enable G Use the 802 1x global configuration command to enable 802 1x protocols switch config 8021x enable 8021x system radiousip IP address G Use the 802 1x system radious IP global confi...

Страница 94: ...21x misc txperiod sec G Use the 802 1x misc TX period global configuration command to set the TX period switch config 8021x misc txperiod 5 8021x misc supportimeout sec G Use the 802 1x misc supp time...

Страница 95: ...802 1x properties and also the port sates switch show 8021x no 8021x G Disable 802 1x function switch config no 8021x 5 13 Commands Set List TFTP command set Commands Level Description Defaults Examp...

Страница 96: ...temlog G Disable systemlog functon switch config no systemlog smtp enable G Enable SMTP function switch config smtp enable smtp serverip IP address G Configure SMTP server IP switch config smtp server...

Страница 97: ...port event for SMTP switch config interface fastethernet 3 switch config if event smtp both show event P Show event selection switch show event no event device cold start G Disable cold start event t...

Страница 98: ...itch config sntp daylight period 20060101 01 01 20060202 01 01 sntp daylight offset Minute G Set offset of daylight saving time if SNTP function is inactive this command can t be applied switch config...

Страница 99: ...rt 2nd Ring Port G Configure 1st 2nd Ring Port switch config ring ringport 7 8 Ring couplingport Coupling Port G Configure Coupling Port switch config ring couplingport 1 Ring controlport Control Port...

Страница 100: ...es Switching bandwidth 8 8Gbps Max Number of Available VLANs 4096 IGMP multicast groups 1024 Port rate limiting User Define Security Features Enable disable ports MAC based port security ACL supported...

Страница 101: ...port indicator with combo port Green at up for port Link Act Fault Contact Relay Relay output to carry capacity of 1A at 24VDC Power Redundant Input power Dual 12 36VDC power inputs Dual 36 72VDC pow...

Результаты поиска

Содержание RES-P3242GCL SERIES

Отзывы:

Похожие инструкции для RES-P3242GCL SERIES

Бренды по названию

Популярные бренды

ORiNG RES-P3242GCL SERIES, Руководство пользователя

Результаты поиска

Содержание RES-P3242GCL SERIES

Отзывы:

Похожие инструкции для RES-P3242GCL SERIES

Бренды по названию

Популярные бренды