manualshive.com logo in svg

Planet WGS-4215-8T2S, Руководство пользователя, Страница: 263 / 359

Поделиться
Скачать
Planet WGS-4215-8T2S Скачать руководство пользователя страница 263

User’s Manual of WGS Managed Series 

 

 

263 

4.9.8 Dynamic ARP Inspection 

Dynamic ARP Inspection (DAI)

 is a secure feature. Several types of attacks can be launched against a host or devices 

connected to Layer 2 networks by "poisoning" the ARP caches. This feature is used to block such attacks. Only valid ARP 
requests and responses can go through DUT. This page provides ARP Inspection related configuration.   
 

 

A Dynamic ARP prevents the untrusted ARP packets based on the DHCP Snooping Database. 

 
 

4.9.8.1 Global Setting 

DAI Setting and Information screens in 

Figure 4-9-49 

&

 Figure 4-9-50

 appear. 

 

Figure 4-9-49

 DAI Setting Page Screenshot 

 
The page includes the following fields: 

Object 

Description 

•

 

DAI 

Enable the Global Dynamic ARP Inspection or disable the Global ARP Inspection 

 

Buttons 

: Click to apply changes. 

 

 

Figure 4-9-50

 DAI Information Page Screenshot 

 
The page includes the following fields: 

Object 

Description 

•

 

DAI 

Display the current DAI status 

Содержание WGS-4215-8T2S

Страница 1: ...User s Manual of WGS Managed Series 1...

Страница 2: ...imits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequenc...

Страница 3: ...ail Mount Installation 45 2 2 3 Installing the SFP transceiver 47 3 SWITCH MANAGEMENT 51 3 1 Requirements 51 3 2 Management Access Overview 52 3 3 Web Management 53 3 4 SNMP based Network Management 5...

Страница 4: ...onfiguration 93 4 3 2 Port Counters 95 4 3 3 Bandwidth Utilization 100 4 3 4 Port Mirroring 101 4 3 5 Jumbo Frame 103 4 3 6 Port Error Disabled Configuration 104 4 3 7 Port Error Disabled 106 4 3 8 Pr...

Страница 5: ...Setting 166 4 6 6 MST Instance Configuration 168 4 6 7 MST Port Setting 170 4 6 8 STP Statistics 172 4 7 Multicast 173 4 7 1 Properties 173 4 7 2 IGMP Snooping 174 4 7 2 1 IGMP Setting 178 4 7 2 2 IGM...

Страница 6: ...214 4 8 4 2 Egress Bandwidth Control 215 4 8 4 3 Egress Queue 216 4 8 5 Voice VLAN 217 4 8 5 1 Introduction to Voice VLAN 217 4 8 5 2 Properties 218 4 8 5 3 Telephony OUI MAC Setting 219 4 8 5 4 Telep...

Страница 7: ...etting 263 4 9 8 2 VLAN Setting 264 4 9 8 3 Port Setting 265 4 9 8 4 Statistics 267 4 9 8 5 Rate Limit 268 4 9 9 IP Source Guard 269 4 9 9 1 Port Settings 270 4 9 9 2 Binding Table 272 4 9 10 Port Sec...

Страница 8: ...st 328 4 13 5 Trace Router 329 4 14 RMON 330 4 14 1 RMON Statistics 330 4 14 2 RMON Event 332 4 14 3 RMON Event Log 333 4 14 4 RMON Alarm 334 4 14 5 RMON History 337 4 14 6 RMON History Log 338 4 15 P...

Страница 9: ...naged Series 9 5 3 Forwarding Filtering 354 5 4 Store and Forward 354 5 5 Auto Negotiation 355 6 TROUBLESHOOTING 356 APPENDIX A Switch s RJ45 Pin Assignments 358 A 1 1000Mbps 1000BASE T 358 A 2 10 100...

Страница 10: ...C WGS 4215 8P2S Industrial 8 Port 10 100 1000T 802 3at PoE 2 Port 100 1000X SFP Wall mount Managed Switch 40 75 degrees C WGS 4215 16P2S Industrial 16 Port 10 100 1000T 802 3at PoE 2 Port 100 1000X S...

Страница 11: ...P2S in a compact but rugged IP30 IP40 WGS 4215 16P2S metal housing the WGS managed series is an ideal solution to meeting the demand for the following network applications Building Home automation net...

Страница 12: ...In the example below when the 3 pin terminal block fails to work the hardware failover function will be activated automatically to keep powering the WGS managed series via the DC plug power alternativ...

Страница 13: ...k access by denying packets based on source and destination IP address TCP UDP ports or defined typical network applications Its protection mechanism also comprises 802 1X port based user and device a...

Страница 14: ...Management As a managed PoE Switch for surveillance wireless and VoIP networks the WGS PoE managed series features special PoE Management functions PD alive check Scheduled power recycling PoE schedul...

Страница 15: ...ses save power and money It also increases security by powering off PDs that should not be in use during non business hours PoE Usage Monitoring Via the power usage chart in the web management interfa...

Страница 16: ...d as follows Section 2 INSTALLATION The section explains the functions of the Switch and how to physically install the Managed Switch Section 3 SWITCH MANAGEMENT The section contains the information a...

Страница 17: ...power limitation PD classification detection PD alive check PoE schedule Layer 2 Features Prevents packet loss with back pressure half duplex and IEEE 802 3x pause frame flow control full duplex High...

Страница 18: ...thentication Built in RADIUS client to co operate with the RADIUS servers RADIUS TACACS login user access authentication Access Control List IPv4 IPv6 IP based ACL MAC based ACL MAC Security Static MA...

Страница 19: ...Images Hardware reset button for system reboot or reset to factory default SNTP Network Time Protocol Cable Diagnostics Link Layer Discovery Protocol LLDP Protocol and LLDP MED SNMP trap for interface...

Страница 20: ...Address Table 8K entries Shared Data Buffer 4 1 megabits Flow Control IEEE 802 3x pause frame for full duplex Back pressure for half duplex Jumbo Frame 10 Kbytes Reset Button 5 sec System reboot 5 sec...

Страница 21: ...er input 200 watts depending on power input 240 watts depending on power input Max Number of Class 2 PDs 4 8 16 Max Number of Class 3 PDs 4 8 16 Max Number of Class 4 PDs 4 7 9 Layer 2 Functions Port...

Страница 22: ...ection IP source guard Storm control support Broadcast Unknown unicast Unknown multicast Management Functions Basic Management Interfaces Web browser Telnet SNMP v1 v2c v3 Firmware upgrade by HTTP TFT...

Страница 23: ...802 1Q VLAN Tagging IEEE 802 1x Port Authentication Network Control IEEE 802 1ab LLDP RFC 768 UDP RFC 793 TFTP RFC 791 IP RFC 792 ICMP RFC 2068 HTTP RFC 1112 IGMP v1 RFC 2236 IGMP v2 RFC 3376 IGMP v3...

Страница 24: ...Button 5 sec System reboot 5 sec Factory default LED Power LED Power Green Power Green RJ45 LED 1000 LNK ACT Green 10 100 LNK ACT Amber 1000 LNK ACT Green 10 100 LNK ACT Amber SFP LED N A 1000 LNK AC...

Страница 25: ...nd DHCP Option82 STP BPDU guard BPDU filtering and BPDU forwarding DoS attack prevention ARP inspection IP source guard Management Functions Basic Management Interfaces Web browser Telnet SNMP v1 v2c...

Страница 26: ...Authentication Network Control IEEE 802 1ab LLDP IEEE 802 3af Power over Ethernet IEEE 802 3at High Power over Ethernet RFC 768 UDP RFC 793 TFTP RFC 791 IP RFC 792 ICMP RFC 2068 HTTP RFC 1112 IGMP v1...

Страница 27: ...play indicators and ports Front panel illustrations in this chapter display the unit LED indicators Before connecting any network device to the Managed Switch please read this chapter completely 2 1 H...

Страница 28: ...User s Manual of WGS Managed Series 28 WGS 4215 8T Front Panel Figure 2 1 1b WGS 4215 8T Front Panel WGS 4215 8T2S Front Panel Figure 2 1 1c WGS 4215 8T2S Front Panel...

Страница 29: ...User s Manual of WGS Managed Series 29 WGS 4215 8P2S Front Panel Figure 2 1 1d WGS 4215 8P2S Front Panel WGS 4215 16P2S Front Panel Figure 2 1 1e WGS 4215 16P2S Front Panel...

Страница 30: ...ime Power Input Range Model 3 pin Terminal Block DC Jack WGS 804HPT 48 56V DC 48 56V DC WGS 4215 8T 12 48V DC 24V AC 12 48V DC 24V AC WGS 4215 8T2S 12 48V DC 24V AC 12 48V DC WGS 4215 8P2S 48 56V DC 4...

Страница 31: ...he Managed Switch 5 sec Factory Default Reset the Managed Switch to Factory Default configuration The Managed Switch will then reboot and load the default settings shown below Default username admin D...

Страница 32: ...Figure 2 1 2a WGS 804HPT LED Panel System LED Color Function PWR Green Lights to indicate that the Switch has power PoE 10 100 1000BASE T Interfaces Port 1 to Port 4 LED Color Function LNK ACT Green L...

Страница 33: ...indicate that the port is operating at 1000Mbps Off If LNK ACT LED is Off it indicates that the port is link down or operating at 10 100Mbps PoE Power Usage Unit Watt LED Color Function 30 Green Ligh...

Страница 34: ...Color Function 10 100 LNK ACT Amber Lights To indicate the link through that port is successfully established and operating at 10 100Mbps Blinks To indicate that the switch is actively sending or rece...

Страница 35: ...ACT Green Lights To indicate the link through that port is successfully established and operating at 1000Mbps Blinks To indicate that the switch is actively sending or receiving data over that port 10...

Страница 36: ...actively sending or receiving data over that port PoE Amber Lights To indicate the port is providing DC in line power Off To indicate the connected device is not a PoE Powered Device PD Per 100 1000X...

Страница 37: ...hts to indicate the system is working Per 10 100 1000BASE T Port LED Color Function LNK ACT Green Lights To indicate the link through that port is successfully established Blinks To indicate that the...

Страница 38: ...ction 60W Amber Blinks To indicate the system consumes between 30 watts and 60 watts of PoE power Lights To indicate the system consumes between 60 watts and 90 watts of PoE power 120W Amber Blinks To...

Страница 39: ...User s Manual of WGS Managed Series 39 2 1 3 Physical Dimensions WGS 804HPT Dimensions W x D x H 148 x 25 x 134mm...

Страница 40: ...User s Manual of WGS Managed Series 40 WGS 4215 8T Dimensions W x D x H 148 x 25 x 134mm...

Страница 41: ...User s Manual of WGS Managed Series 41 WGS 4215 8T2S Dimensions W x D x H 178 x 25 x 134mm...

Страница 42: ...User s Manual of WGS Managed Series 42 WGS 4215 8P2S Dimensions W x D x H 178 x 25 x 134mm...

Страница 43: ...User s Manual of WGS Managed Series 43 WGS 804HPT Dimensions W x D x H 245 x 140 x 24 4 mm...

Страница 44: ...net Installation A To install the Managed Switch on desktop or shelf please follow these steps Step 1 There are 4 holes with 8mm diameter on the wall WGS 804HPT WGS 4215 8T the distance between the 2...

Страница 45: ...The DIN rail kit is included in the package When the wall mount application for the Wall mount Managed Switch needs to be replaced with DIN rail application please refer to the following figures to s...

Страница 46: ...User s Manual of WGS Managed Series 46 Step 2 Lightly insert the button of DIN rail into the track Step 3 Check whether the DIN rail is tightly on the track...

Страница 47: ...both single mode and multi mode SFP transceivers The following list of approved PLANET SFP transceivers is correct at the time of publication Fast Ethernet Transceiver 100BASE X SFP Model Speed Mbps...

Страница 48: ...1000 LC Multi Mode 2km 1310nm 0 60 MGB LX V2 YES 1000 LC Single Mode 20km 1310nm 0 60 MGB L40 YES 1000 LC Single Mode 40km 1310nm 0 60 MGB L80 YES 1000 LC Single Mode 80km 1550nm 0 60 MGB L120 V2 YES...

Страница 49: ...GB TLA40 MGB TLB40 YES 1000 WDM LC Single Mode 40km 1310nm 1550nm 40 75 1000 WDM LC Single Mode 40km 1550nm 1310nm 40 75 MGB TLA80 MGB TLB80 YES 1000 WDM LC Single Mode 80km 1490nm 1550nm 40 75 1000 W...

Страница 50: ...iver 2 Connect the other end of the cable to a device with SFP transceiver installed 3 Check the LNK ACT LED of the SFP slot on the front of the Managed Switch Ensure that the SFP transceiver is opera...

Страница 51: ...covers the following topics Requirements Management Access Overview Web Management Access SNMP Access Standards Protocols and Related Reading 3 1 Requirements Workstations running Windows 2000 XP 200...

Страница 52: ...ree management methods Method Advantages Disadvantages Web Browser Ideal for configuring the switch remotely Compatible with all popular browsers Can be accessed from any location Most visually appeal...

Страница 53: ...r the switch you can access the Managed Switch s Web interface applications directly in your Web browser by entering the IP address of the Managed Switch Figure 3 1 1 Web Management You can then use y...

Страница 54: ...nagement Station only knows the set community string it can read and write to the MIBs However if it only knows the get community string it can only read MIBs The default gets and sets community strin...

Страница 55: ...cription to the devices 2 After setup is completed press the Update Device Update Multi or Update All button to take effect The meaning of the 3 buttons above are shown below Update Device use current...

Страница 56: ...va Applets to use network ports The Managed Switch can be configured through an Ethernet connection making sure the manager PC must be set on the same IP subnet address as the Managed Switch For examp...

Страница 57: ...username admin with password admin to login the main screen of Managed Switch The login screen in Figure 4 1 2 appears Figure 4 1 2 Login screen Default User Name admin Default Password admin After e...

Страница 58: ...the commands and statistics the Managed Switch provides It is recommended to use Internet Explore 8 0 or above to access Managed Switch The changed IP address takes effect immediately after clicking o...

Страница 59: ...an be set to display different information for the ports including Link up or Link down Clicking on the image of a port opens the Port Statistics page The port states are illustrated as follows State...

Страница 60: ...r reset to default Click to logout the Managed Switch Click to reboot the Managed Switch Click to refresh the page 4 1 1 Save Button This save button allows you to save the running startup backup conf...

Страница 61: ...configuration file stores in the RAM In the current version the running configuration sequence running config can be saved from the RAM to FLASH by saving Source File Running Configuration to Destina...

Страница 62: ...ng config can be saved from the RAM to FLASH by Save Configurations to FLASH function so that the running configuration sequence becomes the startup configuration file which is called configuration sa...

Страница 63: ...s page IPv6 Configuration Configure the switch managed IPv6 information on this page User Configuration Configure new user name and password on this page Time Settings Configure SNTP on this page Log...

Страница 64: ...r Date The loader date of this Managed Switch Firmware Version The firmware version of this Managed Switch Firmware Date The firmware date of this Managed Switch System Object ID The system object ID...

Страница 65: ...ls and the configured IP address is zero DHCP will retry If DHCP fails and the configured IP address is non zero DHCP will stop and the configured IP settings will be used The DHCP client will announc...

Страница 66: ...2 4 Figure 4 2 5 appear Figure 4 2 4 IPv6 Address Setting Page Screenshot The page includes the following fields Object Description Auto Configuration Enable IPv6 auto configuration by checking this b...

Страница 67: ...figuration Protocol version 6 DHCPv6 server By default the Managed Switch does not perform DHCPv6 client actions DHCPv6 clients request the delegation of long lived prefixes that they can push to indi...

Страница 68: ...e 4 2 6 Figure 4 2 7 appear Figure 4 2 6 Local User Information Page Screenshot The page includes the following fields Object Description Username The name identifying the user Maximum length 32 chara...

Страница 69: ...is an acronym for Simple Network Time Protocol a network protocol for synchronizing the clocks of computer systems You can specify SNTP Servers and set GMT Time zone The SNTP Configuration screens in...

Страница 70: ...re the Daylight Saving Time duration for single time configuration Default Disabled Daylight Saving Time Offset Enter the number of minutes to add during Daylight Saving Time Range 1 to 1440 Recurring...

Страница 71: ...Current Data Time Display the current data time SNTP Display the current SNTP state Time Zone Display the current time zone Daylight Saving Time Display the current daylight saving time state Dayligh...

Страница 72: ...following fields Object Description SNTP Server Address Type the IP address or domain name of the SNTP server Server Port Type the port number of the SNTP Buttons Click to apply changes Figure 4 2 11...

Страница 73: ...mal but significant condition such as cold start 4 Warning Warning conditions e g return false unexpected return 3 Error Error conditions e g invalid input default used 2 Critical Critical conditions...

Страница 74: ...wing target types are supported Buffered Target the buffer of the local log File Target the file of the local log Severity The severity of the local log entry The following severity types are supporte...

Страница 75: ...e 4 2 15 Local Log Setting Status Page Screenshot The page includes the following fields Object Description Status Display the current local log state Target Display the current local log target Sever...

Страница 76: ...r Figure 4 2 16 Remote Log Target Page Screenshot The page includes the following fields Object Description Server Address Provide the remote syslog IP address of this switch Server Port Provide the p...

Страница 77: ...17 Remote Log Setting Status Page Screenshot The page includes the following fields Object Description Status Display the current remote syslog state Server Info Display the current remote syslog serv...

Страница 78: ...Warning level of the warning conditions for log view notice Notice level of the normal but significant conditions for log view info Informational level of the informational messages for log view debu...

Страница 79: ...ot The page includes the following fields Object Description No This is the number for logs Timestamp Display the time of log Category Display the category type Severity Display the severity type Mess...

Страница 80: ...element Management information base MIB A MIB is a collection of managed objects residing in a virtual information store Collections of related managed objects are defined in specific MIB modules Net...

Страница 81: ...s Object Description Status Indicates the SNMP mode operation Possible modes are Enabled Enable SNMP mode operation Disabled Disable SNMP mode operation Buttons Click to apply changes Figure 4 2 22 SN...

Страница 82: ...view The allowed string content is digital number or asterisk Subtree OID Mask The bitmask identifies which positions in the specified object identifier are to be regarded as wildcards for the purpos...

Страница 83: ...25 SNMPv3 Access Group Setting Page Screenshot The page includes the following fields Object Description Group Name A string identifying the group name that this entry should belong to The allowed st...

Страница 84: ...me of the view in which you specify a notify inform or trap Buttons Click to add a new access entry Check to delete the entry Figure 4 2 26 SNMP View Table Status Page Screenshot The page includes the...

Страница 85: ...y supported mode Possible versions are Basic Set SNMP community mode supported version 1 and 2c Advanced Set SNMP community mode supported version 3 Group Name A string identifying the group name that...

Страница 86: ...ure 4 2 30 appear Figure 4 2 29 SNMPv3 Users Configuration Page Screenshot The page includes the following fields Object Description User Name A string identifying the user name that this entry should...

Страница 87: ...ocol that this entry should belong to Possible privacy protocol are None None privacy protocol DES An optional flag to indicate that this user using DES authentication protocol Encryption Key A string...

Страница 88: ...4 address For example 192 1 2 34 SNMP Version Indicates the SNMP trap supported version Possible versions are SNMP v1 Set SNMP trap supported version 1 SNMP v2c Set SNMP trap supported version 2c Noti...

Страница 89: ...ients screens in Figure 4 2 33 Figure 4 2 34 appear Figure 4 2 33 SNMPv3 Notification Recipients Page Screenshot The page includes the following fields Object Description Server Address Indicates the...

Страница 90: ...name UDP Port Display the current UDP port Time Out Display the current time out Retries Display the current retry times Action Delete the SNMPv3 host entry 4 2 7 9 SNMP Engine ID Configure SNMPv3 En...

Страница 91: ...and all F s are not allowed Buttons Click to apply changes Figure 4 2 36 SNMPv3 Engine ID Status Page Screenshot The page includes the following fields Object Description User Default Display the curr...

Страница 92: ...decimal notation x y z w Engine ID An octet string identifying the engine ID that this entry should belong to Buttons Click to apply changes Figure 4 2 38 SNMPv3 Remote Engine ID Status Page Screensho...

Страница 93: ...d Status Disables port error status Protected Ports Configures protected ports settings EEE Configures EEE settings SFP Module Information Displays SFP module information 4 3 1 Port Configuration This...

Страница 94: ...Auto Setup Auto negotiation Full Force sets Full Duplex mode Half Force sets Half Duplex mode Flow Control When Auto Speed is selected for a port this section indicates the flow control capability tha...

Страница 95: ...port Flow Control Configuration Display the current flow control configuration of the port Flow Control Status Display the current flow control status of the port 4 3 2 Port Counters This page provide...

Страница 96: ...fer space Transmit Octets The total number of octets transmitted out of the interface including framing characters Transmit Unicast Packets The total number of packets that higher level protocols requ...

Страница 97: ...ata packets FCS Errors A count of frames received on a particular interface that are an integral number of octets in length but do not pass the FCS check This count does not include frames received wi...

Страница 98: ...pause frames Out Pause Frames The number of transmitted pause frames Figure 4 3 6 RMON Counters Page Screenshot Object Description Drop Events The total number of events in which packets were dropped...

Страница 99: ...han 64 octets in length excluding framing bits but including FCS octets and had either an FCS or alignment error Jabbers The total number of frames received that were longer than 1518 octets excluding...

Страница 100: ...ne graph The Bandwidth Utilization screen in Figure 4 3 7 appears To view the port utilization click on the Port Management folder and then the Bandwidth Utilization link Figure 4 3 7 Port Bandwidth U...

Страница 101: ...analyzer can be attached to analyze the frame flow The Managed Switch can unobtrusively mirror traffic from any port to a monitor port You can then attach a protocol analyzer or RMON probe to this por...

Страница 102: ...o this port Sniffer TX Ports Frames transmitted from these ports are mirrored to the mirroring port Frames received are not mirrored Sniffer RX Ports Frames received at these ports are mirrored to the...

Страница 103: ...umbo Frame Setting Page Screenshot The page includes the following fields Object Description Jumbo Frame Bytes Enter the maximum frame size allowed for the switch port including FCS The allowed range...

Страница 104: ...able or disable the port error disabled function to check status by self loop Broadcast Flood Enable or disable the port error disabled function to check status by broadcast flood Unknown Multicast Fl...

Страница 105: ...PDU guard status Self Loop Display the current self loop status Broadcast Flood Display the current broadcast flood status Unknown Multicast Flood Display the current unknown multicast flood status Un...

Страница 106: ...or disabled reason of the port Time Left Seconds Display the time left 4 3 8 Protected Ports Overview When a switch port is configured to be a member of protected group also called Private VLAN commun...

Страница 107: ...s in the private VLAN Ports which can receive traffic from only promiscuous ports in the private VLAN The configuration of promiscuous and isolated ports applies to all private VLANs When traffic come...

Страница 108: ...miscuous port and one or more isolated or host ports This VLAN conveys traffic between the isolated ports and a lone promiscuous port Unprotected A promiscuous port can communicate with all the interf...

Страница 109: ...in auto negotiation mode where the port is negotiated to either 1G or 100 Mbit full duplex mode For ports that are not EEE capable the corresponding EEE checkboxes are grayed out and thus impossible...

Страница 110: ...ed the SFP module with digital diagnostics monitoring DDM function this feature is also known as digital optical monitoring DOM You can check the physical or operational status of an SFP module via th...

Страница 111: ...odule Status screens in Figure 4 3 20 Figure 4 3 21 appear Figure 4 3 20 Port Selected Page Screenshot with Sample Switch The page includes the following fields Object Description Port Select port num...

Страница 112: ...t with Sample Switch The page includes the following fields Object Description Port The logical port for the settings contained in the same row Temperature Display the current SFP temperature Voltage...

Страница 113: ...s can be assigned manually Port Trunk or automatically by enabling Link Aggregation Control Protocol LACP on the relevant links Aggregated Links are treated by the system as a single logical port Spec...

Страница 114: ...aggregation ports None of the ports in a link aggregation can be configured as a mirror source port or a mirror target port All of the ports in a link aggregation have to be treated as a whole when mo...

Страница 115: ...following fields Object Description Load Balance Algorithm Select load balance algorithm mode MAC Address The MAC address can be used to calculate the port for the frame IP MAC Address The IP and MAC...

Страница 116: ...elect LAG number from this drop down list Name Indicates each LAG name Type Indicates the trunk type Static Force aggregated selected ports to be a trunk group LACP LACP LAG negotiate Aggregated Port...

Страница 117: ...roup 4 4 3 LAG Port Setting This page allows setting configuration for each LAG The LAG Port setting screens in Figure 4 4 6 Figure 4 4 7 appear Figure 4 4 6 LAG Port Setting Information Page Screensh...

Страница 118: ...icates whether pause frames on the port are obeyed The current Tx column indicates whether pause frames on the port are transmitted The Rx and Tx settings are determined by the result of the last Auto...

Страница 119: ...in Figure 4 4 8 Figure 4 4 9 appear Figure 4 4 8 LACP Setting Page Screenshot The page includes the following fields Object Description System Priority A value which is used to identify the active LAC...

Страница 120: ...LACP port setting Priority The Priority controls the priority of the port If the LACP partner wants to form a larger group than is supported by this device then this parameter will control which ports...

Страница 121: ...e displays LAG status The LAG Status screens in Figure 4 4 12 Figure 4 4 13 appear Figure 4 4 12 LAG Status Page Screenshot The page includes the following fields Object Description LAG Display the cu...

Страница 122: ...ve state machine status of the port INIT means the port is in initialize state PORTds means port disabled state EXPR means expired state LACPds means LACP disabled state DFLT means defaulted state CRR...

Страница 123: ...nual of WGS Managed Series 123 Expired The contents could be true or false If the contents are false the web will show _ if the contents are true the Web shows A T G S C D F and E for each content res...

Страница 124: ...nodes that frequently communicate with each other are assigned to the same VLAN regardless of where they are physically on the network Logically a VLAN can be equated to a broadcast domain because br...

Страница 125: ...nate broadcast storms in large networks This also provides a more secure and cleaner network environment An IEEE 802 1Q VLAN is a group of ports that can be located anywhere in the network but communi...

Страница 126: ...act of putting 802 1Q VLAN information into the header of a packet Untagging The act of stripping 802 1Q VLAN information out of the packet header 802 1Q VLAN Tags The figure below shows the 802 1Q VL...

Страница 127: ...ID contained within the tag Tagged packets are also assigned a PVID but the PVID is not used to make packet forwarding decisions the VID is Tag aware switches must keep a table to relate PVID within t...

Страница 128: ...the VLAN tags should be stripped off before passing it on to any end node host that does not support VLAN tagging VLAN Classification When the switch receives a frame it classifies the frame in one of...

Страница 129: ...Figure 4 5 1 Management VLAN Setting Page Screenshot The page includes the following fields Object Description Management VLAN Provide the managed VLAN ID Buttons Click to apply changes Figure 4 5 2...

Страница 130: ...tes the ID of this particular VLAN VLAN Action This column allows users to add or delete VLAN s VLAN Name Prefix Indicates the name of this particular VLAN Buttons Click to apply changes Figure 4 5 4...

Страница 131: ...ember that the PVID is only used internally within the Switch Untagging is used to send packets from an 802 1Q compliant network device to a non compliant network device Frame Income Frame Leave Incom...

Страница 132: ...nd the original VLAN tag with the customer related VID is again available This provides a tunneling mechanism to connect remote costumer VLANs through a common MAN space without interfering with the V...

Страница 133: ...he VLAN ID that the port belongs to VLAN group or the untagged traffic will be dropped The range for the PVID is 1 4094 Accepted Type Determines whether the port accepts all frames or only tagged fram...

Страница 134: ...ing fields Object Description Port The switch port number of the logical port Interface VLAN Mode Display the current interface VLAN mode PVID Display the current PVID Accepted Frame Type Display the...

Страница 135: ...port number of the logical port Interface VLAN Mode Display the current interface VLAN mode Membership Select VLAN membership for each interface by marking the appropriate radio button for a port or...

Страница 136: ...N Membership This page provides an overview of membership status for VLAN users The VLAN Membership Status screen in Figure 4 5 8 appears Figure 4 5 8 Port VLAN Membership Table Page Screenshot The pa...

Страница 137: ...hough not mandatory we suggest configuring a separate VLAN for each major protocol running on your network Do not add port members at this time 2 Create a protocol group for each of the protocols you...

Страница 138: ...ck to apply changes Figure 4 5 10 Protocol VLAN Group State Page Screenshot The page includes the following fields Object Description Group ID Display the current group ID Frame Type Display the curre...

Страница 139: ...ing fields Object Description Port Select port from this drop down list to assign protocol VLAN port Group Select group ID from this drop down list to protocol VLAN group VLAN VLAN ID assigned to the...

Страница 140: ...ports across the network VLANs are dynamically configured based on join messages issued by host devices and propagated throughout the network GVRP must be enabled to permit automatic VLAN registration...

Страница 141: ...fter a Leave or LeaveAll message has been issued the applicants can rejoin before the port actually leaves the group Range 45 32760 centiseconds Default 60 centiseconds LeaveAll Timeout The interval b...

Страница 142: ...tocol VLAN port GVRP Enabled Controls whether GVRP is enabled or disabled on port Registration Mode By default GVRP ports are in normal registration mode These ports use GVRP join messages from neighb...

Страница 143: ...tus Display the current GVRP port state Registration Mode Display the current registration mode VLAN Creation Status Display the current VLAN creation status 4 5 12 GVRP VLAN The GVRP VLAN Database sc...

Страница 144: ...cs Page Screenshot The page includes the following fields Object Description Port The switch port number of the logical port Join Empty Rx Tx Display the current join empty TX RX packets Empty Rx Tx D...

Страница 145: ...Invalid Protocol ID Display the current invalid protocol ID Invalid Attribute Type Display the current invalid attribute type Invalid Attribute Value Display the current invalid attribute value Invali...

Страница 146: ...igure 4 5 20 appears and Table 4 5 2 describes the port configuration of the Managed Switches Figure 4 5 20 Two Separate VLAN Diagrams VLAN Group VID Untagged Members Tagged Members VLAN Group 1 1 Por...

Страница 147: ...and Port 2 it will be stripped away its tag becoming an untagged packet Untagged packet entering VLAN 3 1 While PC 4 transmits an untagged packet enters Port 4 the switch will tag it with a VLAN Tag 3...

Страница 148: ...to each port Port 1 Port 2 and Port 3 VLAN Mode Hybrid PVID 2 Port 4 Port 5 and Port 6 VLAN Mode Hybrid PVID 3 3 Assign Tagged Untagged to each port VLAN ID 2 Port 1 2 Untagged Port 3 Tagged Port 4 6...

Страница 149: ...ware switches In most cases they are used for Uplink to other switches VLANs are separated at different switches but they need to access other switches within the same VLAN group The screen in Figure...

Страница 150: ...ort Port 1 Port 2 and Port 3 VLAN Mode Hybrid PVID 2 Port 4 Port 5 and Port 6 VLAN Mode Hybrid PVID 3 Port 7 VLAN Mode Hybrid PVID 1 3 Assign Tagged Untagged to each port VLAN ID 1 Port 1 6 Untagged P...

Страница 151: ...User s Manual of WGS Managed Series 151 VLAN ID 3 Port 4 5 Untagged Port 6 7 Tagged Port 1 3 Excluded...

Страница 152: ...ailure is also accomplished automatically without operator intervention This automatic network reconfiguration provides maximum uptime to network users However the concepts of the Spanning Tree Algori...

Страница 153: ...hat has a higher number than the current root port can cause a root port change STP Port States The BPDUs take some time to pass through a network This propagation delay can result in topology changes...

Страница 154: ...wo levels of operation the switch level and the port level The switch level forms a spanning tree consisting of links between one or more switches The port level constructs a spanning tree consisting...

Страница 155: ...port or port group level Variable Description Default Value Port Priority A relative priority for each port lower numbers give a higher priority and a greater chance of a given port being elected as t...

Страница 156: ...the probability the port will be chosen as the Root Port Port Cost A Port Cost can be set from 0 to 200000000 The lower the number the greater the probability the port will be chosen to forward packe...

Страница 157: ...User s Manual of WGS Managed Series 157 Figure 4 6 2 Before Applying the STA Rules In this example only the default STP values are used Figure 4 6 3 After Applying the STA Rules...

Страница 158: ...Mbps Fast Ethernet link default port cost 200 000 Gigabit ports could be used but the port cost should be increased from the default to ensure that the link between switch B and switch C is the blocke...

Страница 159: ...develop the usefulness of virtual LANs VLANs This Per VLAN Multiple Spanning Tree Protocol configures a separate Spanning Tree for each VLAN group and blocks all but one of the possible alternate pat...

Страница 160: ...tween 0 and 65535 The default value is 0 Buttons Click to apply changes Figure 4 6 5 STP Information Page Screenshot The page includes the following fields Object Description STP Display the current S...

Страница 161: ...ols whether the operEdge flag should start as being set or cleared The initial operEdge state when a port is initialized BPDU Filter Control whether a port explicitly configured as Edge will transmit...

Страница 162: ...pe IEEE 802 1D 1998 IEEE 802 1w 2001 Ethernet 50 600 200 000 20 000 000 Fast Ethernet 10 60 20 000 2 000 000 Gigabit Ethernet 3 10 2 000 200 000 Table 4 6 1 Recommended STP Path Cost Range Port Type L...

Страница 163: ...e switch port number of the logical STP port Admin Enable Display the current STP port mode status External Cost Display the current external cost Edge Port Display the current edge port status BPDU F...

Страница 164: ...Otherwise this is the priority of the STP RSTP bridge Max Hops This defines the initial value of remaining Hops for MSTI information generated at the boundary of an MSTI region It defines how many bri...

Страница 165: ...ut the BPDU packet to check STP current status Enter a value between 1 through 10 Buttons Click to apply changes Figure 4 6 9 CIST Instance Information Page Screenshot The page includes the following...

Страница 166: ...is can be used to control priority of ports having identical port cost See above Default 128 Range 0 240 in steps of 16 Internal Path Cost 0 Auto Controls the path cost incurred by the port The Auto s...

Страница 167: ...rent internal path cost oper Designated Root Bridge Display the current designated root bridge External Root Cost Display the current external root cost Regional Root Bridge Display the current region...

Страница 168: ...STI ID The range for the MSTI ID is 1 15 VLAN List 1 4096 Allow to assign VLAN list to special MSTI ID The range for the VLAN list is 1 4094 Priority Controls the bridge priority Lower numerical value...

Страница 169: ...ect Description MSTI ID Display the MSTI ID Regional Root Bridge Display the current designated root bridge Internal Root Cost Display the current internal root cost Designated Bridge Display the curr...

Страница 170: ...r Figure 4 6 15 MST Port Configuration Page Screenshot The page includes the following fields Object Description MST ID Enter the special MST ID to configure path cost priority Port Select Select port...

Страница 171: ...Priority Port ID Display the current identifier priority port ID Internal Path Cost Conf Oper Display the current internal path cost configuration operation Regional Root Bridge Display the current re...

Страница 172: ...Port The switch port number of the logical STP port Configuration BPDUs Received Display the current configuration BPDUs received TCN BPDUs Received Display the current TCN BPDUs received MSTP BPDUs R...

Страница 173: ...lticast throttling setting Multicast Filter Configures multicast filter 4 7 1 Properties This page provides multicast properties related configuration The multicast Properties and Information screen i...

Страница 174: ...he multicast group About the Internet Group Management Protocol IGMP Snooping Computers and network devices that want to receive multicast transmissions need to inform nearby routers that they will be...

Страница 175: ...User s Manual of WGS Managed Series 175 Figure 4 7 3 Multicast Service Figure 4 7 4 Multicast Flooding...

Страница 176: ...e when joining or leaving a multicast group IGMP version 1 is defined in RFC 1112 It has a fixed packet size and no optional data The format of an IGMP packet is shown below IGMP Message Format Octets...

Страница 177: ...nts to leave a group for version 2 Multicast routers send IGMP queries to the all hosts group address 224 0 0 1 periodically to see whether any group members exist on their sub networks If there is no...

Страница 178: ...provides IGMP Snooping related configuration Most of the settings are global whereas the Router Port configuration is related to the current unit as reflected by the page header The IGMP Snooping Set...

Страница 179: ...GMP snooping v2 report suppression Figure 4 7 9 IGMP Snooping Information Page Screenshot The page includes the following fields Object Description Entry No Display the current entry number VLAN ID Di...

Страница 180: ...Querier Setting The IGMP Querier Setting screens in Figure 4 7 10 Figure 4 7 11 appear Figure 4 7 10 IGMP VLAN Setting Page Screenshot The page includes the following fields Object Description VLAN I...

Страница 181: ...statically configure a multicast service on the Managed Switch First add all the ports attached to participating hosts to a common VLAN and then assign the multicast service to that VLAN group Static...

Страница 182: ...Modify Click to edit parameter 4 7 2 4 IGMP Group Table This page provides Multicast Database The IGMP Group Table screen in Figure 4 7 14 appears Figure 4 7 14 IGMP Group Table Page Screenshot The p...

Страница 183: ...erfaces within the Managed Switch The IGMP Router Setting and Status screens in Figure 4 7 15 Figure 4 7 16 appear Figure 4 7 15 Add Router Port Page Screenshot The page includes the following fields...

Страница 184: ...Router Table The Dynamic Static and Forbidden Router Table screens in Figure 4 7 17 Figure 4 7 18 Figure 4 7 19 appear Figure 4 7 17 Dynamic Router Table Page Screenshot The page includes the followi...

Страница 185: ...The page includes the following fields Object Description VLAN ID Display the current VLAN ID Port Mask Display the current port mask 4 7 2 7 IGMP Forward All This page provides IGMP Forward All The F...

Страница 186: ...each interface Forbidden Interface is forbidden from automatically joining the IGMP via MVR None Interface is not a member of the VLAN Packets associated with this VLAN will not be transmitted by the...

Страница 187: ...isplay current general query RX Special Group Query RX Display current special group query RX Special Group Source Query RX Display current special group source query RX Leave TX Display current leave...

Страница 188: ...page includes the following fields Object Description MLD Snooping Status Enable or disable the MLD snooping The default value is Disabled MLD Snooping Version Sets the MLD Snooping operation version...

Страница 189: ...the current entry number VLAN ID Display the current VLAN ID MLD Snooping Operation Status Display the current MLD snooping operation status Router Ports Auto Learn Display the current router ports au...

Страница 190: ...N ID from this drop down list Group IP Address The IP address for a specific multicast service Member Ports Select port number from this drop down list Buttons Click to add IGMP router port entry Figu...

Страница 191: ...lected options Life Sec Display the current life 4 7 4 4 MLD Router Setting Depending on your network connections MLD snooping may not always be able to locate the MLD querier Therefore if the MLD que...

Страница 192: ...er ports A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or MLD querier Forbid Port Select Specify which ports un act as router ports Buttons Click to ad...

Страница 193: ...age Screenshot The page includes the following fields Object Description VLAN ID Display the current VLAN ID Port Display the current dynamic router ports Expiry Time Sec Display the current expiry ti...

Страница 194: ...g Page Screenshot The page includes the following fields Object Description VLAN ID Select VLAN ID from this drop down list to assign MLD membership Port The switch port number of the logical port Mem...

Страница 195: ...following fields Object Description Total RX Display current total RX Valid RX Display current valid RX Invalid RX Display current invalid RX Other RX Display current other RX Leave RX Display curren...

Страница 196: ...nt report TX General Query TX Display current general query TX Special Group Query TX Display current special group query TX Special Group Source Query TX Display current special group source query TX...

Страница 197: ...n set the multicast throttling number to limit the number of multicast groups an interface can join at the same time The MAX Group and Information screens in Figure 4 7 35 Figure 4 7 36 appear Figure...

Страница 198: ...icast groups that are permitted or denied on the port A multicast filter profile can contain one or more or a range of multicast addresses but only one profile can be assigned to a port When enabled m...

Страница 199: ...to include in the profile Specify a multicast group range by entering a start IP address Group to Specifies multicast groups to include in the profile Specify a multicast group range by entering an en...

Страница 200: ...to Action Display the current action Modify Click to edit parameter Click to delete the MLD IGMP profile entry 4 7 7 2 IGMP Filter Setting The Filter Setting and Status screens in Figure 4 7 39 Figur...

Страница 201: ...t filter profile ID Action Click to display detail profile parameter Click to delete the IGMP filter profile entry 4 7 7 3 MLD Filter Setting The Filter Setting and Status screens in Figure 4 7 41 Fig...

Страница 202: ...7 42 Port Filter Status Page Screenshot The page includes the following fields Object Description Port Display the current port Filter Profile ID Display the current filter profile ID Action Click to...

Страница 203: ...nce for specific types of traffic and preserve performance as the amount of traffic grows Reduce the need to constantly add bandwidth to the network Manage network congestion To implement QoS on your...

Страница 204: ...e 4 8 2 appear Figure 4 8 1 QoS Global Setting Page Screenshot The page includes the following fields Object Description QoS Mode Enable or disable QoS mode Buttons Click to apply changes QoS Informat...

Страница 205: ...ge includes the following fields Object Description Port Select Select port number from this drop down list CoS Value Select CoS value from this drop down list Remark CoS Disable or enable remark CoS...

Страница 206: ...Table and Information screens in Figure 4 8 5 Figure 4 8 6 appear Figure 4 8 5 Queue Table Page Screenshot The page includes the following fields Object Description Queue Display the current queue ID...

Страница 207: ...ethod information Information Value Display the current queue value information 4 8 2 4 CoS Mapping The CoS to Queue and Queue to CoS Mapping screens in Figure 4 8 7 Figure 4 8 8 appear Figure 4 8 7 C...

Страница 208: ...ing Figure 4 8 8 CoS Mapping Page Screenshot The page includes the following fields Object Description CoS Display the current CoS value Mapping to Queue Display the current mapping to queue Queue Dis...

Страница 209: ...g screens in Figure 4 8 9 Figure 4 8 10 appear Figure 4 8 9 DSCP to Queue and Queue to DSCP Mapping Page Screenshot The page includes the following fields Object Description Queue Select Queue value f...

Страница 210: ...ue Mapping to Queue Display the current mapping to queue Queue Display the current queue value Mapping to DSCP Display the current mapping to DSCP 4 8 2 6 IP Precedence Mapping The IP Precedence to Qu...

Страница 211: ...ce value from this drop down list Buttons Click to apply changes Figure 4 8 12 IP Precedence Mapping Page Screenshot The page includes the following fields Object Description IP Precedence Display the...

Страница 212: ...13 Figure 4 8 14 appear Figure 4 8 13 Basic Mode Global Settings Page Screenshot The page includes the following fields Object Description Trust Mode Set the QoS mode Buttons Click to apply changes Qo...

Страница 213: ...creenshot The page includes the following fields Object Description Port Select port number from this drop down list Trust Mode Enable or disable the trust mode Buttons Click to apply changes Figure 4...

Страница 214: ...17 Figure 4 8 18 appear Figure 4 8 17 Ingress Bandwidth Control Settings Page Screenshot The page includes the following fields Object Description Port Select port number from this drop down list Sta...

Страница 215: ...le The Egress Bandwidth Control Setting and Status screens in Figure 4 8 19 Figure 4 8 20 appear Figure 4 8 19 Egress Bandwidth Control Settings Page Screenshot The page includes the following fields...

Страница 216: ...screens in Figure 4 8 21 Figure 4 8 22 appear Figure 4 8 21 Egress Queue Bandwidth Settings Page Screenshot The page includes the following fields Object Description Port Select port number from this...

Страница 217: ...dered the voice data traffic and transmitted to the Voice VLAN The configuration is based on MAC address acquiring a mechanism in which every voice equipment transmitting information through the netwo...

Страница 218: ...includes the following fields Object Description Voice VLAN State Indicates the Voice VLAN mode operation We must disable MSTP feature before we enable Voice VLAN It can avoid the conflict of ingress...

Страница 219: ...e Voice VLAN ID Display the current voice VLAN ID Remark CoS 802 1p Display the current remark CoS 802 1p 1p remark Display the current 1p remark Aging Display the current aging time 4 8 5 3 Telephony...

Страница 220: ...at is xx xx xx x is a hexadecimal digit Description User defined text that identifies the VoIP devices Buttons Click to add voice VLAN OUI setting Figure 4 8 26 Voice VLAN OUI Group Page Screenshot Th...

Страница 221: ...IP phone should configure the voice VLAN ID correctly It should be configured through its own GUI The Telephony OUI MAC Setting screens in Figure 4 8 27 Figure 4 8 28 appear Figure 4 8 27 Voice VLAN P...

Страница 222: ...anual of WGS Managed Series 222 The page includes the following fields Object Description Port The switch port number of the logical port State Display the current state CoS Mode Display the current C...

Страница 223: ...late EAP PDUs together with other attributes like the switch s IP address name and the supplicant s port number on the switch EAP is very flexible in that it allows for different authentication method...

Страница 224: ...on server authenticates each client connected to a switch port before making available any services offered by the switch or the LAN Until the client is authenticated 802 1X access control allows only...

Страница 225: ...the Ethernet header is stripped and the remaining EAP frame is re encapsulated in the RADIUS format The EAP frames are not modified or examined during encapsulation and the authentication server must...

Страница 226: ...to the network In contrast when an 802 1X enabled client connects to a port that is not running the 802 1X protocol the client initiates the authentication process by sending the EAPOL start frame Wh...

Страница 227: ...Security 802 1X Access Control 802 1X Setting page The IEEE802 1X standard defines port based operation but non standard variants overcome security limitations as shall be explored below The 802 1X Se...

Страница 228: ...re available No Authentication Authentication Force Authorized In this mode the switch will send one EAPOL Success frame when the port link comes up and any client on the port will be allowed network...

Страница 229: ...upplicant to re transmit EAP request identify frame Maximum Request Retries The number of times that the switch transmits an EAPOL Request Identity frame without response before considering entering t...

Страница 230: ...ck its history to see if an EAPOL frame has previously been received on the port this history is cleared if the port link goes down or the port s Admin State is changed and if not the port will be pla...

Страница 231: ...set of rules for entering and leaving the Guest VLAN as listed below The Guest VLAN Enabled checkbox provides a quick way to globally enable disable Guest VLAN functionality When checked the individu...

Страница 232: ...AN 4 9 1 5 Authenticated Host The Authenticated Host Table screen in Figure 4 9 9 appears Figure 4 9 9 Authenticated Host Table Page Screenshot The page includes the following fields Object Descriptio...

Страница 233: ...30 a RADIUS request is retransmitted to a server that is not responding If the server has not responded after the last retransmit it is considered to be dead Dead Time The Dead Time which can be set t...

Страница 234: ...DIUS Authentication Server and the switch Timeout for Reply The Timeout which can be set to a number between 1 and 30 seconds is the maximum time to wait for a reply from a server If the server does n...

Страница 235: ...as been configured Usage Type Set the usage type The following modes are available Login 802 1X All Buttons Click to add Radius server setting Figure 4 9 12 Login Authentication List Page Screenshot T...

Страница 236: ...The page includes the following fields Object Description Key String The secret key up to 63 characters long shared between the TACACS server and the switch Timeout for Reply Retransmit is the number...

Страница 237: ...of seconds the switch waits for a reply from the server before it resends the request Server Priority Set the server priority Buttons Click to add Radius server setting Figure 4 9 15 Login Authenticat...

Страница 238: ...Switch supports the following AAA features Accounting for IEEE 802 1X authenticated users that access the network through the Managed Switch Accounting for users that access management interfaces on t...

Страница 239: ...ist Name Defines a name for the authentication list Method 1 4 Set the login authentication method Empty None Local TACACS RADIUS Enable Buttons Click to add authentication list Figure 4 9 17 Login Au...

Страница 240: ...n List Name Defines a name for the authentication list Method 1 3 Set the login authentication method Empty None Enable TACACS RADIUS Buttons Click to add authentication list Figure 4 9 19 Login Authe...

Страница 241: ...ppear Figure 4 9 20 Telnet Settings Page Screenshot The page includes the following fields Object Description Telnet Service Disable or enable telnet service Login Authentication List Select login aut...

Страница 242: ...lnet Service Display the current Telnet service Login Authentication List Display the current login authentication list Enable Authentication List Display the current enable authentication list Sessio...

Страница 243: ...all enabled user modules must unanimously agree on allowing the MAC address to forward If only one chooses to block it it will be blocked until that user module decides otherwise The SSH Settings and...

Страница 244: ...tication list Enable Authentication List Display the current enable authentication list Session Timeout Display the current session timeout Password Retry Count Display the current password retry coun...

Страница 245: ...timeout value Buttons Click to apply changes Figure 4 9 25 HTTP Information Page Screenshot The page includes the following fields Object Description HTTP Service Display the current HTTP service Logi...

Страница 246: ...apply changes Figure 4 9 27 HTTPs Information Page Screenshot The page includes the following fields Object Description HTTPs Service Display the current HTTPs service Login Authentication List Displ...

Страница 247: ...Default Permit rules Sets the access mode of the profile either permit or deny Port Select port from this drop down list IP Source Indicates the IP address for the access management entry Buttons Cli...

Страница 248: ...ess profile screens in Figure 4 9 30 Figure 4 9 31 appear Figure 4 9 30 Access Profile Page Screenshot The page includes the following fields Object Description Access Profile Select access profile fr...

Страница 249: ...HCP snooping is used to filter DHCP messages received on a non secure interface from outside the network or firewall When DHCP snooping is enabled globally and enabled on a VLAN interface DHCP message...

Страница 250: ...Ethernet header If the DHCP packet is not a recognizable type it is dropped If a DHCP packet from a client passes the filtering criteria above it will only be forwarded to trusted ports in the same V...

Страница 251: ...Page Screenshot The page includes the following fields Object Description DHCP Snooping Display the current DHCP snooping status 4 9 7 3 DHCP Snooping VLAN Setting Command Usage When DHCP snooping is...

Страница 252: ...ing mode operation Possible modes are Enabled Enable DHCP snooping mode operation When enable DHCP snooping mode operation the request DHCP messages will be forwarded to trusted ports and only allowed...

Страница 253: ...gs associated with this port are removed Set all ports connected to DHCP servers within the local network or firewall to trusted state Set all other ports outside the local network or firewall to untr...

Страница 254: ...o apply changes Figure 4 9 37 DHCP Snooping Port Setting Page Screenshot The page includes the following fields Object Description Port The switch port number of the logical port Type Display the curr...

Страница 255: ...lds Object Description Port The switch port number of the logical port Forwarded Display the current forwarded Chaddr Check Dropped Display the chaddr check dropped Untrusted Port Dropped Display untr...

Страница 256: ...its connectivity If the agent is disabled and only DHCP snooping is enabled the switch does not lose its connectivity but DHCP snooping might not prevent DCHP spoofing attacks The database agent stor...

Страница 257: ...transfer process after the binding database changes The range is from 0 to 86400 Use 0 for an infinite duration The default is 300 seconds 5 minutes Buttons Click to apply changes Figure 4 9 40 DHCP S...

Страница 258: ...hot The page includes the following fields Object Description Port Select port from this drop down list State Set default or user define Rate Limit pps Configure the rate limit for the port policer Th...

Страница 259: ...options Circuit ID option 1 Remote ID option2 The Circuit ID sub option is supposed to include information specific to which circuit the request came in on The Remote ID sub option was designed to car...

Страница 260: ...equest message which contains option82 The drop mode means that if the message has option82 then the system will drop it without processing The keep mode means that the system will keep the original o...

Страница 261: ...port Allow Untrusted Select modes from this drop down list The following modes are available Drop Keep Replace Buttons Click to apply changes Figure 4 9 46 Option82 Global Setting Page Screenshot The...

Страница 262: ...ge Screenshot The page includes the following fields Object Description Port Select port from this drop down list VLAN Indicates the ID of this particular VLAN Circuit ID Set the option1 Circuit ID co...

Страница 263: ...nspection related configuration A Dynamic ARP prevents the untrusted ARP packets based on the DHCP Snooping Database 4 9 8 1 Global Setting DAI Setting and Information screens in Figure 4 9 49 Figure...

Страница 264: ...des the following fields Object Description VLAN ID Indicates the ID of this particular VLAN Status Enables Dynamic ARP Inspection on the specified VLAN Options Enable Disable Buttons Click to apply c...

Страница 265: ...s the source MAC address in the Ethernet header against the sender MAC address in the ARP body This check is performed on both ARP requests and responses When enabled packets with different MAC addres...

Страница 266: ...ncludes the following fields Object Description Port The switch port number of the logical port Type Display the current port type Src Mac Chk Display the current Src Mac Chk status Dst Mac Chk Displa...

Страница 267: ...ort The switch port number of the logical port Forwarded Display the current forwarded Source MAC Failures Display the current source MAC failures Dest MAC Failures Display the current source MAC fail...

Страница 268: ...fields Object Description Port Select port from this drop down list State Set default or user define Rate Limit pps Configure the rate limit for the port policer The default value is unlimited Buttons...

Страница 269: ...when a host tries to spoof and use the IP address of another host After receiving a packet the port looks up the key attributes including IP address MAC address and VLAN tag of the packet in the bind...

Страница 270: ...rce Guard Port Setting Page Screenshot The page includes the following fields Object Description Port Select port from this drop down list Status Enable or disable the IP source guard Verify Source Co...

Страница 271: ...The page includes the following fields Object Description Port The switch port number of the logical port Status Display the current status Verify Source Display the current verify source Max Binding...

Страница 272: ...is particular VLAN MAC Address Sourcing MAC address is allowed IP Address Sourcing IP address is allowed Buttons Click to add authentication list Figure 4 9 61 IP Source Guard Binding Table Status Pag...

Страница 273: ...2 Port Security Setting Page Screenshot The page includes the following fields Object Description Port Select port from this drop down list Security Enable or disable the port security Mac L2 Entry Th...

Страница 274: ...ard If Limit 1 MAC addresses is seen on the port it will trigger the action that do not learn the new MAC and drop the package Buttons Click to apply changes Figure 4 9 63 Port Security Status Page Sc...

Страница 275: ...of the server Security feature refers to applications such as protocol check which is for protecting the server from attacks such as DoS The protocol check allows the user to drop matched packets base...

Страница 276: ...v4 ping max size IPv6 Ping Max Size Enable or disable DoS check mode by IPv6 ping max size Ping Max Size Setting Set the max size for ping Smurf Attack Enable or disable DoS check mode by smurf attack...

Страница 277: ...the current ICMP fragment status IPv4 Ping Max Size Display the current IPv4 ping max size status IPv6 Ping Max Size Display the current IPv6 ping max size status Smurf Attack Display the current smu...

Страница 278: ...tting Page Screenshot The page includes the following fields Object Description Port Select Select port from this drop down list DoS Protection Enable or disable per port DoS protection Buttons Click...

Страница 279: ...ss table 4 9 12 1 Global Setting The Storm Control Global Setting and Information screens in Figure 4 9 68 Figure 4 9 69 appear Figure 4 9 68 Storm Control Global Setting Page Screenshot The page incl...

Страница 280: ...tch The Storm Control Configuration screens in Figure 4 9 70 Figure 4 9 71 appear Figure 4 9 70 Storm Control Setting Page Screenshot The page includes the following fields Object Description Port Sel...

Страница 281: ...ct Description Port The switch port number of the logical port Port State Display the current port state Broadcast Kbps pps Display the current broadcast storm control rate Unknown Multicast Kbps pps...

Страница 282: ...generally be configured to control inbound traffic and in this context they are similar to firewalls ACE is an acronym for Access Control Entry It describes access permission associated with a particu...

Страница 283: ...pplied to the hardware due to hardware limitations MAC based ACL screens in Figure 4 10 1 Figure 4 10 2 appear Figure 4 10 1 MAC based ACL Page Screenshot The page includes the following fields Object...

Страница 284: ...10 3 MAC based ACE Page Screenshot The page includes the following fields Object Description ACL Name Select ACL name from this drop down list Sequence Set the ACL sequence Action Indicates the forwar...

Страница 285: ...this ACE choose this value A field for entering a SA MAC value appears SA MAC Value When User Defined is selected for the SA MAC filter you can enter a specific source MAC address The legal format is...

Страница 286: ...n MAC address Destination MAC Address Mask Display the current destination MAC address mask Source MAC Address Display the current source MAC address Source MAC Address Mask Display the current source...

Страница 287: ...hardware due to hardware limitations IPv4 based ACL screens in Figure 4 10 5 Figure 4 10 6 appear Figure 4 10 5 IPv4 based ACL Page Screenshot The page includes the following fields Object Description...

Страница 288: ...Pv4 based ACE An ACE consists of several parameters Different parameter options are displayed depending on the frame type that you selected The IPv4 based ACE screens in Figure 4 10 7 Figure 4 10 8 ap...

Страница 289: ...specific source IP address The legal format is xxx xxx xxx xxx A frame that hits this ACE matches this source IP address value Source IP Wildcard Mask When User Defined is selected for the source IP f...

Страница 290: ...field for entering a destination port value appears TCP Flags UGR Specify the TCP Urgent Pointer field significant URG value for this ACE Set TCP frames where the URG field is set must be able to matc...

Страница 291: ...hits this ACE matches this DSCP value IP Precedence If you want to filter a specific IP precedence with this ACE you can enter a specific IP precedence value A field for entering an IP precedence val...

Страница 292: ...Display the current source IP address wildcard mask Destination IP Address Display the current destination IP address Destination IP Address Wildcard Mask Display the current destination IP address w...

Страница 293: ...ardware due to hardware limitations IPv6 based ACL screens in Figure 4 10 9 Figure 4 10 10 appear Figure 4 10 9 IPv6 based ACL Page Screenshot The page includes the following fields Object Description...

Страница 294: ...v6 based ACE An ACE consists of several parameters Different parameter options are displayed depending on the frame type that you selected The IPv6 based ACE screens in Figure 4 10 11 Figure 4 10 12 a...

Страница 295: ...that hits this ACE matches this source IP address value Source IP Prefix Length When User Defined is selected for the source IP filter you can enter a specific SIP prefix length in dotted decimal not...

Страница 296: ...field for entering a destination port value appears TCP Flags UGR Specify the TCP Urgent Pointer field significant URG value for this ACE Set TCP frames where the URG field is set must be able to matc...

Страница 297: ...hits this ACE matches this DSCP value IP Precedence If you want to filter a specific IP precedence with this ACE you can enter a specific IP precedence value A field for entering an IP precedence val...

Страница 298: ...k Display the current source IP address wildcard mask Destination IP Address Display the current destination IP address Destination IP Address Wildcard Mask Display the current destination IP address...

Страница 299: ...iption Binding Port Select port from this drop down list ACL Select Select ACL list from this drop down list Buttons Click to apply changes Figure 4 10 14 ACL Binding Table Page Screenshot The page in...

Страница 300: ...nd dynamic entries The static entries are configured by the network administrator if the administrator wants to do a fixed mapping between the DMAC address and switch ports The frames also contain a M...

Страница 301: ...udes the following fields Object Description MAC Address Physical address associated with this interface VLAN Select VLAN from this drop down list Port Select port from this drop down list Buttons Cli...

Страница 302: ...enshot The page includes the following fields Object Description MAC Address Physical address associated with this interface VLAN 1 4096 Indicates the ID of this particular VLAN Buttons Click to add n...

Страница 303: ...11 6 appear Figure 4 11 5 Dynamic Addresses Setting Page Screenshot The page includes the following fields Object Description Aging Time The time after which a learned entry is discarded Range 10 630...

Страница 304: ...4 11 8 appear Figure 4 11 7 Dynamic Learned Page Screenshot The page includes the following fields Object Description Port Select port from this drop down list VLAN Select VLAN from this drop down li...

Страница 305: ...cription MAC Address The MAC address of the entry VLAN The VLAN ID of the entry Type Indicates whether the entry is a static or dynamic entry Port The ports that are members of the entry Buttons Click...

Страница 306: ...clude details such as device identification capabilities and configuration settings LLDP also defines how to store and maintain information gathered about the neighboring network nodes it discovers Li...

Страница 307: ...ooding transmit LLDP PDU for all port Transmission Interval The switch is periodically transmitting LLDP frames to its neighbors for having the network discovery information up to date The interval be...

Страница 308: ...me between the LLDP frames will always be at least the value of Transmit Delay seconds Transmit Delay cannot be larger than 1 4 of the Transmission Interval value Valid values are restricted to 1 8192...

Страница 309: ...LLDP MED Fast Start Repeat Count Display the current LLDP MED Fast Start Repeat Count 4 12 3 LLDP Port Setting Use the LLDP Port Setting to specify the message attributes for individual interfaces in...

Страница 310: ...on transmitted System Capability When checked the System Capability is included in LLDP information transmitted 802 3 MAC PHY When checked the 802 3 MAC PHY is included in LLDP information transmitted...

Страница 311: ...elected optional TLVs The VLAN Name TLV VLAN Selection and LLDP Port VLAN TLV Status screens in Figure 4 12 5 Figure 4 12 6 appear Figure 4 12 5 VLAN Name TLV Selection Page Screenshot The page includ...

Страница 312: ...n The Local Device Summary and Port Status screens in Figure 4 12 7 Figure 4 12 8 appear Figure 4 12 7 Local Device Summary Page Screenshot The page includes the following fields Object Description Ch...

Страница 313: ...re 4 12 8 Port Status Page Screenshot The page includes the following fields Object Description Interface The switch port number of the logical port LLDP Status Display the current LLDP status LLDP ME...

Страница 314: ...the following fields Object Description Local Port Display the current local port Chassis ID Subtype Display the current chassis ID subtype Chassis ID The Chassis ID is the identification of the neig...

Страница 315: ...sets of application types supported on a given port The application types specifically addressed are 1 Voice 2 Guest Voice 3 Softphone Voice 4 Video Conferencing 5 Streaming Video 6 Control Signaling...

Страница 316: ...nd enhanced security by isolation from data applications Voice Signaling for use in network topologies that require a different policy for the voice signaling than for the voice media This application...

Страница 317: ...advertised in the Video Conferencing application policy VLAN ID VLAN identifier VID for the port as defined in IEEE 802 1Q 2003 Tag Tag indicating whether the specified application type is using a ta...

Страница 318: ...g fields Object Description Network Policy Number Display the current network policy number Application Display the current application VLAN ID Display the current VLAN ID VLAN Tag Display the current...

Страница 319: ...MED TLV field of advertised messages Network Policy This option advertises network policy configuration information aiding in the discovery and diagnosis of VLAN configuration mismatches on a port Im...

Страница 320: ...ogical port LLDP MED Status Display the current LLDP MED status Active Display the current active status Application Display the current application Location Display the current location Inventory Dis...

Страница 321: ...g the Location Civic Address that this entry should belong to Location ESC ELIN A string identifying the Location ESC ELIN that this entry should belong to Buttons Click to apply changes Figure 4 12 1...

Страница 322: ...f available bytes that can also send LLDP information in a packet Status Gives the status of the TLVs Mandatory TLVs Displays if the mandatory group of TLVs were transmitted or overloaded MED Capabili...

Страница 323: ...LDP protocol messages transmitted or received on all local interfaces The LLDP Global and Port Statistics screens in Figure 4 12 17 Figure 4 12 18 appear Figure 4 12 17 LLDP Global Statistics Page Scr...

Страница 324: ...known as Too Many Neighbors in the LLDP standard LLDP frames require a new entry in the table when the Chassis ID or Remote Port ID is not already contained within the table Entries are removed from...

Страница 325: ...cs The Cable Diagnostics performs tests on copper cables These functions have the ability to identify the cable length and operating conditions and to isolate a variety of common faults that can occur...

Страница 326: ...fields Object Description Port Select port from this drop down list Buttons Click to run the diagnostics Figure 4 13 2 Test Results Page Screenshot The page includes the following fields Object Descr...

Страница 327: ...are transmitted and the sequence number and roundtrip time are displayed upon reception of a reply The page refreshes automatically until responses to all packets are received or until a timeout occu...

Страница 328: ...trip time are displayed upon reception of a reply The page refreshes automatically until responses to all packets are received or until a timeout occurs The ICMPv6 Ping screen in Figure 4 13 4 appears...

Страница 329: ...packet with TTL at 2 will be sent Also the send hop may be a TTL timeout return but the procedure will carries on till the data packet is sent to its destination These procedures is for recording eve...

Страница 330: ...tored by the Agent History Record periodical statistic samples available from Statistics Alarm Allow management console users to set any count or integer for sample intervals and alert thresholds for...

Страница 331: ...e total number of packets received that were longer than 1518 octets Fragments The number of frames which size is less than 64 octets received with invalid CRC Jabbers The number of frames which size...

Страница 332: ...are none The total number of octets received on the interface including framing characters log The number of uni cast packets delivered to a higher layer protocol SNMP Trap The number of broad cast a...

Страница 333: ...t Sent Time Display the current last sent time Owner Display the current event owner Action Click to delete RMON event entry 4 14 3 RMON Event Log This page provides an overview of RMON Event Log The...

Страница 334: ...ort from this drop down list Sample Variable Indicates the particular variable to be sampled the possible variables are DropEvents The total number of events in which packets were dropped due to lack...

Страница 335: ...FCS octets Pkts64to172Octets The total number of frames including bad packets received and transmitted where the number of octets falls within the specified range excluding framing bits but including...

Страница 336: ...6 RMON Alarm Status Page Screenshot The page includes the following fields Object Description Index Indicates the index of Alarm control entry Sample Port Display the current sample port Sample Varia...

Страница 337: ...ew index or modify the index Index Indicates the index of the history entry Sample Port Select port from this drop down list Bucket Requested Indicates the maximum data entries associated this History...

Страница 338: ...sted Interval Display the current interval Owner Display the current owner Action Click to delete RMON history entry 4 14 6 RMON History Log This page provides a detail of RMON history entries screen...

Страница 339: ...s or build a wireless roaming environment in the office Without the power socket limitation the WGS PoE Managed Switch Series makes the installation of cameras or WLAN APs easier and more efficient Po...

Страница 340: ...deployment from restrictions due to power outlet locations which eliminate the costs for additional AC wiring and reduces the installation time 3 25 watts High Power PoE Splitter High PoE Splitter sp...

Страница 341: ...um allowable power per port Reserved Power There are five modes for configuring how the ports PDs may reserve power and when to shut down ports Classification mode In this mode each port automatic det...

Страница 342: ...are six modes for configuring how the ports PDs may reserve power and when to shut down ports Classification mode The system reserves PoE power to PD according to PoE class level Consumption mode The...

Страница 343: ...s Figure 4 15 4 Power over Ethernet Configuration Screenshot The page includes the following fields Object Description PoE Mode There are three modes for PoE mode Enable enable PoE function Disable di...

Страница 344: ...maximum power draw as specified by Table 4 15 1 Current Used mA The Power Used shows how much current the PD currently is using Power Used W The Power Used shows how much power the PD currently is us...

Страница 345: ...ironmental protection on the Earth the Managed PoE switch can effectively control the power supply besides its capability of giving high watts power The PoE schedule function helps you to enable or di...

Страница 346: ...per port PoE Mode option to enable you to indicate which schedule profile could be applied to the PoE port The page includes the following fields Object Description Profile Set the schedule profile m...

Страница 347: ...his function offers administrator to reboot PoE device at an indicated time if administrator has this kind of requirement Reboot Only Allows user to reboot PoE function by PoE reboot schedule Please n...

Страница 348: ...reduces administrator management burden This page provides you with how to configure PD Alive Check The screen in Figure 4 15 7 appears Figure 4 15 7 PD Alive Check Configuration Screenshot The page i...

Страница 349: ...t the PoE port that is connected to the PD PD Reboot Alarm It means system will reset the PoE port and issue an alarm message via Syslog Alarm It means system will issue an alarm message via Syslog Re...

Страница 350: ...tory Default You can reset the configuration of the switch on this page Only the IP configuration is retained The new configuration is available immediately which means that no restart is necessary Th...

Страница 351: ...Page Screenshot 4 16 3 Backup Manager This function allows backup of the current image or configuration of the Managed Switch to the local management station The Backup Manager screen in Figure 4 16...

Страница 352: ...en in Figure 4 16 4 appears Figure 4 16 4 Upgrade Manager Page Screenshot The page includes the following fields Object Description Upgrade Method Select upgrade method from this drop down list Server...

Страница 353: ...n screens in Figure 4 16 5 Figure 4 16 6 appear Figure 4 15 5 Dual Image Configuration Page Screenshot The page includes the following fields Object Description Active Image Select the active or backu...

Страница 354: ...then this packet will be filtered thereby increasing the network throughput and availability 5 4 Store and Forward Store and Forward is one type of packet forwarding techniques A Store and Forward Eth...

Страница 355: ...at Power On or Reset This is done by detecting the modes and speeds when both devices are connected Both 10BASE T and 100BASE TX devices can connect with the port in either half or full duplex mode I...

Страница 356: ...the port Why the Switch doesn t connect to the network Solution 1 Check the LNK ACT LED on the Managed Switch 2 Try another port on the Managed Switch 3 Make sure the cable is installed properly 4 Ma...

Страница 357: ...e power After a while turn on power again When I connect my PoE device to PoE Ethernet Switch it cannot be powered on Solution 1 Please check the cable type of the connection from the PoE Ethernet Swi...

Страница 358: ...TX When connecting your 10 100Mbps Ethernet Switch to another switch a bridge or a hub a straight or crossover cable is necessary Each port of the Switch supports auto MDI MDI X detection That means...

Страница 359: ...reen 7 White Brown 8 Brown 1 White Amber 2 Amber 3 White Green 4 Blue 5 White Blue 6 Green 7 White Brown 8 Brown SIDE 2 Crossover Cable SIDE 1 SIDE 2 SIDE 1 1 White Amber 2 Amber 3 White Green 4 Blue...

Отзывы:

Нет отзывов