manualshive.com logo in svg

VOLKTEK NSH-580, Руководство пользователя

Поделиться
Скачать
VOLKTEK NSH-580 Скачать руководство пользователя страница 71

VOLKTEK NSH-580 MANAGED 24-PORT 10/100 + 4 G COMBO L3 SWITCH 

 

 
Content Aware 

7.10 Security 

 

The switch supports the 802.1x port-based security feature. Only authorized hosts are 
allowed to access the switch port. Traffic from unauthenticated hosts will be blocked. 
Authentication can be provided via a RADIUS server or the local database in the switch. 

The switch also supports dynamic VLAN assignment through 802.1x authentication 
process. The VLAN information for the users/ports should be configured in the 
authentication server properly before enabling this feature. 

7.10.1  Port Access Control 

Port Access Control is used to configure various 802.1x parameters. 802.1x uses either 
RADIUS server or local database to authenticate port users. 

The first part is the Bridge (Global) settings: 

Sys-Auth-Control: 

checks it to enable the authentication 

Authentication Method: 

RADIUS or Local database can be used to authenticate the 

port user. 

The second part is the port settings: 

Port: 

Specify which port to configure from port list window.  

Multi-host: 

If enabled, ALL hosts connected to the selected port are allowed to use 

the port if ONE of the hosts passed the authentication. If disabled, only ONE host is 
allowed to use the port.  

 

  

70

Содержание NSH-580

Страница 1: ...Managed 24 port 10 100Base TX plus 4 slot Gigabit Combo RJ45 SFP Layer 3 Access Switch NSH 580 V 1 0 5 User Manual February 2008...

Страница 2: ...installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communicati...

Страница 3: ...1 3 2 Mounting on a rack 11 3 3 Getting Connected 11 3 4 Powering On the Unit 12 3 5 Installing the SFP modules and Fiber Cable 12 3 6 Connecting Copper Cable 14 3 7 Connecting the Console Port Cable...

Страница 4: ...ing 51 7 7 5 Static Multicast 52 7 7 6 IGMP Snooping 53 7 7 7 Traffic Control 55 7 7 8 Dynamic Addresses 55 7 7 9 Static Addresses 56 7 7 10 VLAN Configuration 57 7 7 11 GVRP 58 7 7 12 QoS CoS 60 7 8...

Страница 5: ...6 RIP 86 8 3 7 OSPF 86 8 3 8 VRRP 87 8 3 9 Spanning Tree 87 8 3 10 Link Aggregation 88 8 3 11 LACP 88 8 3 12 Mirroring 89 8 3 13 Static Multicast 90 8 3 14 IGMP Snooping 91 8 3 15 Traffic Control 91 8...

Страница 6: ...re of the ports are malfunctioning It also supports both port based VLAN and tag based VLAN thereby simplifying network traffic segmentation broadcast domain extension and other associated benefits of...

Страница 7: ...roups 1 2 3 9 z FCC Class A CE approved 1 5 Specifications Performance Throughput 14 880 packets per second pps to 10 Mbps ports 148 800 pps to 100Mbps ports 1 488 000 pps to 1000Mbps ports Address Ta...

Страница 8: ...lgorithm IEEE 802 1D 802 1w and 802 1s provide redundant link support Port based or 802 1Q VLANs Up to 4096 VLANs with GVRP for dynamic VLAN registration Link Aggregation 2 8 ports can be combined int...

Страница 9: ...lable Environmental Characteristics Operating Temperature 0 C to 50 C Relative Humidity 10 to 80 non condensing Storage Temperature 20 C to 80 C Humidity 5 to 90 non condensing Dimensions 184 x 440 x...

Страница 10: ...hat are each interchangeable with 4 additional Gigabit Ethernet ports The package provides 10 100Base TX copper and Gigabit fiber conversion Thus the Gigabit fiber and copper ports provide flexible hi...

Страница 11: ...s for RJ 45 connectors that have the same features as the above mentioned 10 100 ports The only difference is that the Gigabit copper ports support network speeds of 10 100 1000Mbps These four ports a...

Страница 12: ...erside of the Switch 3 Apply AC power to the Switch The green PWR LED on the front panel should light up 4 Connect cables from the network partner devices to the ports on the front panel The green LNK...

Страница 13: ...d at the back of the device 2 Plug the power adapter into an available socket Note For international use you may need to change the AC power adapter cord You must use a power cord set that has been ap...

Страница 14: ...ny rubber plugs that may be present in the SFP module s mouth 5 Align the fiber cable s connector with the SFP module s mouth and insert the connector 6 Slide the connector in until a click is heard 7...

Страница 15: ...he corresponding port LED on the Switch to ensure that the connection is valid Refer to LED chart 3 7 Connecting the Console Port Cable The console port DB 9 provides the out of band management facili...

Страница 16: ...On Green Port operating at 100Mbps 10 100 Copper Ports Off Port operating at below 100Mbps On Green Illuminated when connectors are attached Flashing Green Data traffic passing through port LNK ACT O...

Страница 17: ...oard configuration program from anywhere within the attached network or via internet The onboard configuration program can be accessed by using Telnet from any computer attached to the network It can...

Страница 18: ...defaults given on the previous page 3 The prompt screen will appear after selecting OK The default log in name is admin with no preset password just press ENTER 4 The prompt Switch will appear For a...

Страница 19: ...o use Hyper Terminal along with the instructions given in next sections Otherwise log out by typing exit and pressing the ENTER key Then the user can choose to configure the Switch via HTTP Web Browse...

Страница 20: ...ening the program a command prompt screen will appear At the Switch login line type the pre set password the factory default is admin Type for a list of main commands On the screenshot below the write...

Страница 21: ...which provides a standard presentation of the information controlled by the on board SNMP agent SNMP defines both the format of the MIB specifications and the protocol used to access this information...

Страница 22: ...lready have the correct Java Runtime Environment JRE on your computer this guide will help you to install it To test if you already have the correct software open your network browser you must be conn...

Страница 23: ...default Google Toolbar for Internet Explorer is checked Click the Next button This will start installing selected program features including the JRE on your system Note You can choose to install or ig...

Страница 24: ...ick OK to enter the management interface of the NSH 580 TROUBLESHOOTING If you still have problems accessing the hyperlink check the following 1 Check the firewall in your PC or the firewall that your...

Страница 25: ...ddress or location box http 192 168 0 254 and then press Enter This is the factory default IP address for the switch A login screen is displayed as shown in the figure on the right Configuration manag...

Страница 26: ...nu and click Save Submit only configures the Switch hardware and saves the settings to RAM memory and such changes will be lost if the Switch is powered off Clicking Submit only saves the information...

Страница 27: ...itch is not a valid System Name Warning 7 2 2 IP Setup The IP Setup page contains the following information IP Address IP address for the switch Network Mask Network mask for this network Default Gate...

Страница 28: ...eboot Page 7 2 4 Firmware Upgrade Enter the TFTP server IP address and the firmware file name Click Upgrade to update the Switch s firmware from TFTP server See figure below for reference For example...

Страница 29: ...ooping function Snooping assign the selected port to be a trusted or not trusted port Select the corresponding port number and configure the port setting then click on the Modify button The field you...

Страница 30: ...can also configure the interface in the following fields Interface Select the interface to be configured vlan1 is used by the system IP Interface IP address Mask Interface Subnet mask MAC Mac address...

Страница 31: ...lat LANs you ll probably have to upgrade to a more sophisticated package IP Interface SPECIAL NOTE It is strongly recommended that each interface should have its own VLAN That means one VLAN should no...

Страница 32: ...This function is used to add a routing entry into the switch routing table The routing entry added this way will never be deleted by the system so it is called a static route Following parameters mus...

Страница 33: ...ion v1 v2 both When RIP is turned on the switch will exchange routing information with neighbor switches which also running RIP 7 6 2 1 RIP Basic The RIP function can be enabled disabled for all Layer...

Страница 34: ...ing updates through it The particular subnet will continue to advise other interfaces of routing updates Routing updates from other routers on that interface will continue to be received and processed...

Страница 35: ...h can support RIPv1 RIPv2 or both Incoming Packets Used to specify RIP version for the interpretation of incoming RIP packets Outgoing Packet Used to specify the RIP version for sending RIP packets to...

Страница 36: ...ome protocol parameters for a specific OSPF interface Network Type Support broadcast only Cost Specify the cost for sending packet of this interface Priority Set priority to help determine the OSPF DR...

Страница 37: ...ea sending packet to outside world Stub a stub area at the edge of an AS is not a transit area since there is only one connection to the stub area Use this attribute to specify characteristics of this...

Страница 38: ...This command is used to configure the IP multicast route mode and IGMP parameters IP Multicast Route Mode Configure a multicast route protocol to run or disable IGMP Version Select which version of I...

Страница 39: ...ific network Select the corresponding Network Address to configure parameters then click on the Modify button The field you changed will update the content in the display window To save any changes an...

Страница 40: ...the corresponding interface to configure parameters then click on the Modify button The field you changed will update the content in the display window To save any changes and make it effective immed...

Страница 41: ...ID Virtual router ID range 1 to 255 One virtual router ID can be used as the default gateway for one or several VLANs Virtual IP Virtual IP address It can be any one IP address which belongs to the V...

Страница 42: ...ble or enable STP There are three modes of STP RSTP and MSTP can be enabled If MSTP is enabled the following four attributes are enabled at the same time Region Name An alphanumeric configuration name...

Страница 43: ...STP Status 7 7 1 2 Current Roots This shows the information of the current root bridge which includes MAC Address of root bridge Priority of root bridge Maximum age of root bridge Hello timer of root...

Страница 44: ...llo Time the interval between the generation of configuration BPDU Max Age a timeout value to be used by all Bridges in the LAN Forward Delay a timeout value to be used by all bridges in the LAN Bridg...

Страница 45: ...kely to be blocked by STP if a network loop is detected The valid value is from 0 to 255 Path Cost the valid value is from 1 to 65535 Higher cost paths are more likely to be blocked by STP if a networ...

Страница 46: ...VOLKTEK NSH 580 MANAGED 24 PORT 10 100 4 G COMBO L3 SWITCH Spanning tree Port Parameters 45...

Страница 47: ...ually store all settings permanent in Flash memory go to Save Configuration page bottom of management menu and click Save The user must check the runtime link speed and duplex mode to make sure the tr...

Страница 48: ...lection Criterion the algorithm to distribute packets among the ports of the link aggregation group according to source MAC address destination MAC address source and destination MAC address source IP...

Страница 49: ...VOLKTEK NSH 580 MANAGED 24 PORT 10 100 4 G COMBO L3 SWITCH LACP Mode This page displays the LACP group information LACP Channel Group 48...

Страница 50: ...VOLKTEK NSH 580 MANAGED 24 PORT 10 100 4 G COMBO L3 SWITCH This page displays the statistics of LACP PDUs counted LACP Counters This page shows LACP internal information LACP Internal 49...

Страница 51: ...VOLKTEK NSH 580 MANAGED 24 PORT 10 100 4 G COMBO L3 SWITCH This page shows LACP neighbor information LACP Neighbor This page shows LACP system identification 50...

Страница 52: ...or disables the mirror function for the selected group Stack ID For a standalone switch only ID 1 is available Monitor Port Receives the copies of all the packets in the selected mirrored ports The mo...

Страница 53: ...e group Port selects the port from selection panel Or select an existing group address from list panel to display VLAN selects the VLAN group it is a VLAN based feature MAC Address assigns the multica...

Страница 54: ...terval Without Immediate Leave when the switch receives an IGMP leave message from a subscriber on a receiver port it sends out an IGMP query on that port and waits for IGMP group membership reports I...

Страница 55: ...VOLKTEK NSH 580 MANAGED 24 PORT 10 100 4 G COMBO L3 SWITCH The Switch only allows 256 Layer 2 multicast groups IGMP Snooping Setting IGMP Snooping Multicast Group 54...

Страница 56: ...tings Click Refresh to display current settings of the Switch To eventually make all changes permanent in Flash memory go to Save Configuration page bottom of management menu and click Save 7 7 8 Dyna...

Страница 57: ...lone switch only ID 1 is available Port Selection select the port which the MAC belongs to Click Add to create a new static MAC address with the above information temporary until Submit is clicked Cli...

Страница 58: ...untagging port belongs to two or more VLAN groups at the same time it will confuse the switch and cause flooding traffic To prevent this the switch only allows one untagging port to belong to one VLA...

Страница 59: ...s not need to be passed between trunking switches There are some parameters to configure GVRP GVRP Enable By default GVRP is not enabled for the switch You must first enable GVRP on the switch before...

Страница 60: ...VOLKTEK NSH 580 MANAGED 24 PORT 10 100 4 G COMBO L3 SWITCH GVRP GVRP Mode GVRP GVRP Timer 59...

Страница 61: ...e for mission critical and time sensitive traffic There are three options First Come First Service the first come frame has the highest priority High First Packet s priority depends on its CoS value W...

Страница 62: ...ority QoS CoS CoS Queue Mapping 7 7 12 3 QoS Bandwidth Some VLAN tag related field settings for each port are included in this page It includes Port Select a port from list window to configure Ingress...

Страница 63: ...d to add new entry to list of entries temporary until Submit is clicked Click Modify to temporarily save changes to an existing entry temporary until Submit is clicked Click Remove to remove selected...

Страница 64: ...d community names you can enable SNMP trap function to send trap packets in different versions v1 or v2c Click Submit to save changes to RAM memory Click Refresh to view effect of changes To eventuall...

Страница 65: ...emove to remove selected entry temporary until Submit is clicked Click Submit to save changes to RAM memory Click Refresh to view effect of changes To eventually make all changes permanent in Flash me...

Страница 66: ...elongs to The related SNMP messages are Trap Report Security Model enter the Security Model Name that the Group belongs to Any is suitable for v1 v2 v3 USM is SNMPv3 related Security level enter the S...

Страница 67: ...The switch can set Access Control List rules to filter certain traffic types according to packet header information from Layer 2 to Layer 4 Each filter set includes a couple of rules The user should a...

Страница 68: ...g to the same type Four types of rules can apply to ports at the same time If there are more than four types the system automatically disables the rules Set ACL The Filter Rule page provides attribute...

Страница 69: ...to attach a filter set to ingress ports Click Submit to save changes to RAM memory Click Refresh to view effect of changes To make all changes permanent in Flash memory go to Save Configuration page b...

Страница 70: ...Aware A set of Content Aware rules can be set to process specified types of service packets rather than taking efforts to identify layer 4 TCP or UDP connection types and their port numbers The networ...

Страница 71: ...ntication server properly before enabling this feature 7 10 1 Port Access Control Port Access Control is used to configure various 802 1x parameters 802 1x uses either RADIUS server or local database...

Страница 72: ...e time period the switch uses to re send authentication request to the port user see above Quiet Period If authentication fails the switch waits for this time period before sending another authenticat...

Страница 73: ...user Click Modify when the modifications have been entered Click Remove when you want to remove the selected user Click Submit to make the settings permanent Click Refresh to refresh the settings to c...

Страница 74: ...ct of changes To eventually make all the changes permanent in Flash memory go to the Save Configuration page bottom of management menu and click Save Radius 7 10 4 IP DHCP Snooping In order to filter...

Страница 75: ...ant to configure and select Enable at DHCP Snooping item then click summit to apply the configuration setting The final step is setting which physical interface that your DHCP server connected By defa...

Страница 76: ...ayed in these charts Auto Refresh sets the time interval at which new data is retrieved from the switch Color lets the user assign a different color to each variable After the variables have been set...

Страница 77: ...L3 SWITCH Traffic Comparison Chart 7 11 2 Group Chart Select the Port Refresh Period and display Color then click Draw The statistics window shows all the discards or error counts for the specified p...

Страница 78: ...story Chart 7 12 Save Configuration Click Save to make the settings permanent by saving to the Flash memory Submit only saves changes to the RAM memory and such changes will be lost if the Switch is s...

Страница 79: ...1 1 Boot ROM command mode During the POST process you can enter a Boot ROM Command mode by pressing the ENTER key Type the key to show the help messages for all available commands Note Although the co...

Страница 80: ...s please change the user name and password after login If you forget the user name and password you may contact the support team or restore the default user account in the Boot ROM Command mode pwd If...

Страница 81: ...le Quagga conf of the switch from TFTP server CLI Syntax copy tftp URL startup config Example Switch copy tftp 192 168 1 2 startup config 8 3 3 System Management Configuration 8 3 3 1 Firmware Upgrade...

Страница 82: ...he previous mode CLI Syntax exit Example Switch exit 8 3 3 7 Help This command lists all the commands of the operational mode CLI Syntax list Example Switch list Example Switch 8 3 3 8 Host name Displ...

Страница 83: ...n on the managed node CLI Syntax snmp server location WORD Example Switch config snmp server location Central Building Type in the new location description in the location description field 8 3 3 12 I...

Страница 84: ...onfig add user tony tony123456 8 3 3 18 Delete a new user account Delete a user account e g for a user named tony CLI Syntax delete user WORD Example Switch config delete user tony 8 3 4 Physical inte...

Страница 85: ...low control both on 8 3 4 4 Show L2 interface Use the show l2_interface command on the switch to show l2 interface status CLI Syntax show l2_interfaces IFNAME Example Switch show l2_interface fastethe...

Страница 86: ...terface name Please remember which interface you are configuring 8 3 5 5 IP helper address This command enables DHCP relay for a specific interface CLI Syntax ip helper address A B C D Example Switch...

Страница 87: ...8 3 6 3 Version RIP can be configured to process either Version 1 or Version 2 packets The default mode is Version 2 CLI Syntax version 1 2 Example Switch config router version 1 8 3 6 4 Network Set t...

Страница 88: ...Spanning Tree 8 3 9 1 clear spanning tree counters Use the clear spanning tree counters configuration command on the switch to clear spanning tree statistics CLI Syntax clear spanning tree counters Ex...

Страница 89: ...LIST Example Switch aggregation link trunk 1 group 1 25 26 8 3 10 2 trunk load balancing Use the aggregation link trunk group configuration command on the switch to configure trunk load balancing by u...

Страница 90: ...for the trunk group ports on the switch CLI Syntax lacp aggregation link trunk STACKID disable port number Example Switch lacp aggregation link trunk 1 disable 26 8 3 11 4 lacp port priority This comm...

Страница 91: ...or SRCIFLIST rx tx both Example Switch config no mirror fastethernet1 0 2 rx 8 3 13 Static Multicast 8 3 13 1 mac address table multicast Use the mac address table multicast configuration command on t...

Страница 92: ...snooping function to enabled globally CLI Syntax ip igmp snooping Example Switch config ip igmp snooping vlan 1 8 3 14 3 interval time This command sets the interval time for the IGMP queries sent by...

Страница 93: ...AC_ADDR Example Switch config clear mac address table dynamic address 0000 1111 2222 8 3 16 2 aging time Use the mac address table aging time configuration command on the switch stack or on a standalo...

Страница 94: ...Syntax show mac address table Example Switch show mac address table 8 3 18 VLAN 8 3 18 1 show vlan name string Use the show vlan user EXEC command to display the parameters for all configured VLANs or...

Страница 95: ...19 GVRP 8 3 19 1 clear gvrp statistics Use the clear gvrp statistics configuration command on the switch to clear all the GVRP statistics information on one or all interfaces CLI Syntax clear gvrp st...

Страница 96: ...3 20 2 show queue cos map This command shows the information of CoS and priority mapping CLI Syntax show queue cos map Example Switch show queue cos map 8 3 20 3 qos mode This command sets qos mode t...

Страница 97: ...le Switch config snmp server host 192 168 8 31 8 3 22 Filter 8 3 22 1 deny any host Use this deny MAC access list configuration command on the switch to prevent non IP traffic from being forwarded if...

Страница 98: ...ch config ext macl permit any any 1 8 3 22 4 filter attach This command is used to assign filter rule for a specific port CLI Syntax mac access group WORD in Example Switch config if mac access group...

Страница 99: ...ession on the interface CLI Syntax dot1x initialize interface IFNAME Example Switch dot1x initialize interface fastethernet1 0 1 8 3 23 5 dot1x max req Use the dot1x max req interface configuration co...

Страница 100: ...d sets the radius server ip radius key and radius port for 802 1X configuration CLI Syntax dot1x radius server ip A B C D key RADIUS_KEY PORTID Example Switch config dot1x radius server ip 192 168 1 3...

Страница 101: ...4 PORT 10 100 4 G COMBO L3 SWITCH 100 9 Contact Information VOLKTEK CORPORATION 4F No 192 Lian Cheng Road Chung Ho Taipei 235 Taiwan ROC TEL 886 2 8242 1000 FAX 886 2 8242 3333 Tech Support 886 800 28...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды