WELLTECH WPoE-2426 Скачать руководство пользователя страница 238

Страница: 238 / 280

Publication date: August, 2012

Revision 1.0

Welltech Technology Co., Ltd.

226

4-6 AAA

This section shows you to use an AAA (Authentication, Authorization, Accounting) server to

provide access control to your network. The AAA server can be a or RADIUS

server to create and manage objects that contain settings for using AAA servers.

4-6.1 Configuration

This section describes how to configure AAA setting of or RADIUS server.

Web Interface

To configure a Common Configuration of AAA in the web interface:

1. Set Timeout (Default is 15 seconds).

2. Set Dead Time (Default is 300 seconds).

To configure a Authorization and Accounting Configuration of AAA in the web

interface:

1. Select “Enabled” in the Authorization.

2. Select “Enabled” in the Failback to Local Authorization.

3. Select “Enabled” in the Account.

To configure a RADIUS Authentication Server Configuration of AAA in the web interface:

. Check “Enabled”.

2. Specify IP address or Hostname for Radius Server.

3. Specify Authentication Port for Radius Server (Default is 1812).

4. Specify the Secret with Radius Server.

To configure a RADIUS Accounting Server Configuration of AAA in the web interface:

1. Check “Enabled”.

2. Specify IP address or Hostname for Radius Server.

3. Specify Accounting Port for Radius Server (Default is 1813).

4. Specify the Secret with Radius Server.

To configure a Authentication Server Configuration of AAA in the web interface:

1. Check “Enabled”.

2. Specify IP address or Hostname for Server.

3. Specify Authentication Port for Server (Default is 49).

4. Specify the Secret with Server.

Figure 4-5.3.1: The Common Server Configuration

Figure 4-5.3.2: The Accounting Configuration

Содержание WPoE-2426

Страница 1: ... 26 Port L2 PoE Plus Managed Switch User s Manual Release 1 0 2012 Welltech Technology Co Ltd All rights reserved All brand and product names are trademarks or registered trademarks of their respective companies ...

Страница 2: ... the Customer Support Warranty booklet included with the product A copy of the specific warranty terms applicable to your Manufacture products and replacement parts can be obtained from your Manufacture Sales and Service Office authorized dealer Disclaimer Manufacture Technology does not warrant that the hardware will work properly in all environments and applications and marks no warranty and rep...

Страница 3: ...ect to the Following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation CE mark Warning This is a Class A device In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures NOTE Emphasizes important i...

Страница 4: ...E 9 2 2 1 Manual 9 2 2 2 NTP 11 2 3 ACCOUNT 12 2 3 1 Users 12 2 3 2 Privilege Level 14 2 4 IP 17 2 4 1 IPV4 17 2 4 2 IPV6 19 2 5 SYSLOG 20 2 5 1 Configuration 20 2 5 2 Log 21 2 5 3 Detailed Log 22 2 6 SNMP 23 2 6 1 System 23 2 6 2 Communities 24 2 6 3 Users 25 2 6 4 Groups 27 2 6 5 Views 28 2 6 6 Access 30 2 6 7 Trap 32 CHAPTER 3 CONFIGURATION 34 3 1 PORT 34 3 1 1 Configuration 34 3 1 2 Port Descr...

Страница 5: ... LLDP Neighbors 103 3 8 3 LLDP MED Configuration 105 3 8 4 LLDP MED Neighbours 111 3 8 5 EEE 114 3 8 6 Port Statistics 116 3 9 POE 118 3 9 1 Configuration 118 3 9 2 Status 120 3 10 FILTERING DATA BASE 121 3 10 1 Configuration 121 3 10 2 Dynamic MAC Table 123 3 11 VLAN 125 3 11 1 VLAN Membership 125 3 11 2 Ports 127 3 11 3 Switch Status 129 3 11 4 Port Status 130 3 11 5 Private VLANs 132 3 11 5 1 P...

Страница 6: ...22 TRAP EVENT SEVERITY 193 3 23 SMTP CONFIGURATION 194 3 24 UPNP 195 3 25 LOOP DETECTION 196 3 25 1 Configuration 196 CHAPTER 4 SECURITY 198 4 1 IP SOURCE GUARD 198 4 1 1 Configuration 198 4 1 2 Static Table 200 4 1 3 Dynamic Table 201 4 2 ARP INSPECTION 202 4 2 1 Configuration 202 4 2 2 Static Table 204 4 2 3 Dynamic Table 205 4 3 DHCP SNOOPING 206 4 3 1 Configuration 206 4 3 2 Statistics 208 4 4...

Страница 7: ...faults 249 5 3 2 Save Start 249 5 3 3 Save User 250 5 3 4 Restore User 250 5 4 EXPORT IMPORT 251 5 4 1 Export Config 251 5 4 2 Import Config 252 5 5 DIAGNOSTICS 253 5 5 1 Ping 253 5 5 2 Ping6 254 5 5 3 VeriPHY 255 A GLOSSARY OF WEB BASED MANAGEMENT 256 A 256 C 257 D 257 E 258 F 259 H 259 I 259 L 261 M 261 N 262 O 263 P 263 Q 264 R 265 S 265 T 266 U 267 V 267 ...

Страница 8: ......

Страница 9: ...ications protect your sensitive information and optimize your network bandwidth to deliver information and applications more effectively It provides the ideal combination of affordability and capabilities for entry level networking includes small business or enterprise application and helps you create a more efficient better connected workforce WPoE 2426 Web Managed Switches provide 26 ports in a ...

Страница 10: ...and then click the Login button The login process now is completed In this login menu you have to input the complete username and password respectively the WPoE 2426 will not give you a shortcut to username automatically This looks inconvenient but safer In the WPoE 2426 it supports a simple user management function allowing only one administrator to configure the system at the same time If there ...

Страница 11: ...h the Switch default IP is 192 168 1 1 Figure 1 The login page NOTE If you need to configuration the function or parameter then you can refer the detail in the User Guide Or you could access to the Switch and click the help under the web GUI and the switch will pop up the simple help content to teach you how to set the parameters ...

Страница 12: ...Publication date August 2012 Revision 1 0 Welltech Technology Co Ltd 2 WPoE 2426 web help function ...

Страница 13: ...nections CABLING GUIDELINES The RJ 45 ports on the switch support automatic MDI MDI X pin out configuration so you can use standard straight through twisted pair cables to connect to any other network device PCs servers switches routers or hubs and VoIP devices such as IP Phone ATA and FXS FXO Gateway See Appendix B for further information on cabling CAUTION Do not plug a phone jack connector RJ 1...

Страница 14: ......

Страница 15: ... the switch panel corresponding to each port will light green 1000 Mbps or amber 100 Mbps to indicate that the connection is valid NETWORK WIRING CONNECTIONS Today the punch down block is an integral part of many of the newer equipment racks It is actually part of the patch panel Instructions for making connections in the wiring closet with this type of equipment are as follows Step1 Attach one en...

Страница 16: ...ion Hardware Mechanical Version Serial Number Host IP Address Host Mac Address Device Port RAM Size and Flash Size With this information you will know the software version used MAC address serial number how many ports are available and so on This is helpful while malfunctioning 2 1 1 Information The switch system information is provided here Web interface To configure System Information in the web...

Страница 17: ... The time accumulated since this switch is powered up Its format is day hour minute second BIOS version The version of the BIOS in this switch Firmware version The firmware version in this switch Hardware Mechanical version The version of Hardware and Mechanical The figure before the hyphen is the version of electronic hardware the one after the hyphen is the version of mechanical Serial number Th...

Страница 18: ...Publication date August 2012 Revision 1 0 Welltech Technology Co Ltd 6 To display the device s maximum frame size information ...

Страница 19: ...ntact this person The allowed string length is 0 to 255 and the allowed content is the ASCII characters from 32 to 126 System Name An administrative assigned name for this managed node By convention this is the node s fully qualified domain name A domain name is a text string drawn from the alphabet A Z a z digits 0 9 minus sign No space characters are permitted as part of a name The first charact...

Страница 20: ...e SVG Wiki for more information on browser support Specifically at the time of writing Microsoft Internet Explorer will need to have a plugin installed to support SVG Web interface To configure System Information in the web interface 1 Click System System Information CPU Load 2 Display the CPU Load on the screen 3 Click Auto refresh Figure 2 1 3 CPU Load Parameter description Auto refresh To evoke...

Страница 21: ...Provide the time zone offset relative to UTC GMT The offset is given in minutes east of GMT The valid range is from 720 to 720 minutes Daylight Saving Daylight saving is adopted in some countries If set it will adjust the time lag or in advance in unit of hours according to the starting date and the ending date For example if you set the day light saving to be 1 hour When the time passed over the ...

Страница 22: ... GMT The valid range is from 1 to 1440 minutes The default is 60 minutes Daylight Savings Type Provide the Daylight savings type selection You can select By Dates or Recurring two types for Daylight saving type From To configure when Daylight saving start date and time the format is YYYY MM DD HH MM To To configure when Daylight saving end date and time the format is YYYY MM DD HH MM NOTE The unde...

Страница 23: ...the correct time The switch supports configurable time zone from 12 to 13 steps 1 hour Default Time zone 8 Hrs Web Interface To configure Time in the web interface 1 Click SYSTEM NTP 2 Specify the Time parameter in manual parameters 3 Click Save Figure 2 2 2 The NTP configuration Parameter description Server 1 to 5 Provide the NTP IPv4 or IPv6 address of this switch IPv6 address is in 128 bit reco...

Страница 24: ... unable to be deleted In addition up to 4 guest accounts can be created 2 3 1 Users This page provides an overview of the current users Currently the only way to login as another user on the web server is to close and reopen the browser Web Interface To configure Account in the web interface 1 Click SYSTEM Account Users 2 Click Add new user 3 Specify the User Name parameter 4 Click Save Figure2 3 ...

Страница 25: ...hould be same or greater than the group privilege level to have the access of that group By default setting most groups privilege level 5 has the read only access and privilege level 10 has the read write access And the system maintenance software upload factory defaults and etc need user privilege level 15 Generally the privilege level 15 can be used for an administrator account privilege level 1...

Страница 26: ...gation Diagnostics EEE GARP GVRP IP IPMC Snooping LACP LLDP LLDP MED MAC Table MRP MVR MVRP Maintenance Mirroring POE Ports Private VLANs QoS SMTP SNMP Security Spanning Tree System Trap Event VCL VLANs Voice VLAN Privilege Levels from 1 to 15 Web Interface To configure Privilege Level in the web interface 1 Click SYSTEM Account Privilege Level 2 Specify the Privilege parameter 3 Click Save ...

Страница 27: ... but a few of them contains more than one The following description defines these privilege level groups in details System Contact Name Location Time zone and Log Security Authentication System Access Management Port contains Dot1x port MAC based and the MAC Address Limit ACL HTTPS SSH ARP Inspection and IP source guard IP Everything except ping Port Everything except VeriPHY Diagnostics ping and ...

Страница 28: ...rs Privilege Levels and everything in Maintenance Privilege Levels Every group has an authorization Privilege level for the following sub groups configuration read only configuration execute read write status statistics read only status statistics read write e g for clearing of statistics User Privilege should be same or greater than the authorization Privilege level to have the access to that gro...

Страница 29: ... a new version of the Internet Protocol IPv6 which would have 128 bits Internet Protocol addresses This number can be represented roughly by a three with thirty nine zeroes after it However IPv4 is still the protocol of choice for most of the Internet 2 4 1 IPV4 The IPv4 address for the switch could be obtained via DHCP Server for VLAN 1 To manually configure an address you need to change the swit...

Страница 30: ...rovide the IP address of this switch in dotted decimal notation IP Mask Provide the IP mask of this switch dotted decimal notation IP Router Provide the IP address of the router in dotted decimal notation SNTP Server Provide the IP address of the SNTP Server in dotted decimal notation DNS Server Provide the IP address of the DNS Server in dotted decimal notation VLAN ID Provide the managed VLAN ID...

Страница 31: ... few seconds the total time needed to complete auto configuration can be significantly longer Address Provide the IPv6 address of this switch IPv6 address is in 128 bit records represented as eight fields of up to four hexadecimal digits with a colon separating each field For example fe80 215 c5ff fe03 4dc7 The symbol is a special syntax that can be used as a shorthand way of representing multiple...

Страница 32: ...Evoke the Syslog to enable it 4 Click Save Figure2 5 1 The System Log configuration Parameter description Server Mode Indicates the server mode operation When the mode operation is enabled the syslog message will send out to syslog server The syslog protocol is based on UDP communication and received on UDP port 514 and the syslog server will not send acknowledgments back sender since UDP is a con...

Страница 33: ...automatically Level Level of the system log entry The following level types are supported Information level of the system log Warning Warning level of the system log Error Error level of the system log All All levels ID ID 1 of the system log entry Time It will display the log recorded by device time The time of the system log entry Message It will display the log detail message The message of the...

Страница 34: ... detailed log configuration in the web interface 1 Click Syslog Detailed Log 2 Display the log information Figure2 5 3 The Detailed System Log Information Parameter description ID The ID 1 of the system log entry Message The detailed message of the system log entry Upper right icon Refresh clear You can click them for refresh the system log or clear them by manual others for next up page or entry ...

Страница 35: ...B counters will be ignored 2 6 1 System This section describes how to configure SNMP System on the switch This function is used to configure SNMP settings community name trap host and public traps as well as the throttle of SNMP A SNMP manager must pass the authentication by identifying both community names then it can access the MIB information of the target device So both parties must have the s...

Страница 36: ...igure2 6 2 The SNMPv1 v2 Communities Security Configuration Parameter description Delete Check to delete the entry It will be deleted during the next save Community Indicates the community access string to permit access to SNMPv3 agent The allowed string length is 1 to 32 and the allowed content is ASCII characters from 33 to 126 The community string will be treated as security name and map a SNMP...

Страница 37: ...ame that this entry should belong to The allowed string length is 1 to 32 and the allowed content is ASCII characters from 33 to 126 Security Level Indicates the security model that this entry should belong to Possible security models are NoAuth NoPriv No authentication and no privacy Auth NoPriv Authentication and no privacy Auth Priv Authentication and privacy The value of security level cannot ...

Страница 38: ...e For MD5 authentication protocol the allowed string length is 8 to 32 For SHA authentication protocol the allowed string length is 8 to 40 The allowed content is ASCII characters from 33 to 126 Privacy Protocol Indicates the privacy protocol that this entry should belong to Possible privacy protocols are None No privacy protocol DES An optional flag to indicate that this user uses DES authenticat...

Страница 39: ...on Parameter description Delete Check to delete the entry It will be deleted during the next save Security Model Indicates the security model that this entry should belong to Possible security models are v1 Reserved for SNMPv1 v2c Reserved for SNMPv2c usm User based Security Model USM Security Name A string identifying the security name that this entry should belong to The allowed string length is...

Страница 40: ...lick Reset Figure 2 6 5 The SNMP Views Configuration Parameter description Delete Check to delete the entry It will be deleted during the next save View Name A string identifying the view name that this entry should belong to The allowed string length is 1 to 32 and the allowed content is ASCII characters from 33 to 126 View Type Indicates the view type that this entry should belong to Possible vi...

Страница 41: ...e OID defining the root of the subtree to add to the named view The allowed OID length is 1 to 128 The allowed string content is digital number or asterisk Save To click the Save icon to save the configuration to ROM ...

Страница 42: ...fy the SNMP Access parameters 4 Click Save 5 If you want to modify or clear the setting then click Reset Figure 2 6 6 The SNMP Access Configuration Parameter description Delete Check to delete the entry It will be deleted during the next save Group Name A string identifying the group name that this entry should belong to The allowed string length is 1 to 32 and the allowed content is ASCII charact...

Страница 43: ...iew Name The name of the MIB view defining the MIB objects for which this request may request the current values The allowed string length is 1 to 32 and the allowed content is ASCII characters from 33 to 126 Write View Name The name of the MIB view defining the MIB objects for which this request may potentially set new values The allowed string length is 1 to 32 and the allowed content is ASCII c...

Страница 44: ...setting 1 Click SNMP Trap 2 Display the SNMP Trap Hosts information table 3 Choice an entry to display and modify the detail parameters or click delete button to delete the trap hosts entry Figure 2 6 7 The SNMP Trap Host Configuration Parameters description Delete Check Delete entry then check Save button the entry will be deleted Trap Version You may choose v1 v2c or v3 trap Server IP To assign ...

Страница 45: ...nds of choices NoAuth NoPriv No authentication and no privacy Auth NoPriv Authentication and no privacy Auth Priv Authentication and privacy Authentication Protocol You can choose MD5 or SHA for authentication Authentication Password The length of MD5 Authentication Password is restricted to 8 32 The length of SHA Authentication Password is restricted to 8 40 Privacy Protocol You can set DES encry...

Страница 46: ...the switch Monitor the ports content or status in the function 3 1 1 Configuration This chapter describes how to view the current port configuration and how to configure ports to non default settings including Linkup Linkdown Speed Current and configured Flow Control Current Rx Current Tx and Configured Maximum Frame Size Excessive Collision Mode Power Control Web Interface To configure an Current...

Страница 47: ...d Tx settings are determined by the result of the last Auto Negotiation Check the configured column to use flow control This setting is related to the setting for Configured Link Speed Maximum Frame Size Enter the maximum frame size allowed for the switch port including FCS Excessive Collision Mode Configure port transmit collision behavior Discard Discard frame after 16 collisions default Restart...

Страница 48: ...onfigure an Port Description in the web interface 1 Click Configuration Port then Port Description 2 Specify the detail Port alias or description an alphanumeric string describing the full name and version identification for the system s hardware type software version and networking application 3 Click Save Figure 3 1 2 The Port Configuration Parameter description Port This is the logical port num...

Страница 49: ...description Port The logical port for the settings contained in the same row Packets The number of received and transmitted packets per port Bytes The number of received and transmitted bytes per port Errors The number of frames received in error and the number of incomplete transmissions per port Drops The number of frames discarded due to ingress or egress congestion Filtered The number of recei...

Страница 50: ... want to show the detailed Port statistic overview 3 If you want to auto refresh the information then you need to evoke the Auto refresh 4 Click Refresh to refresh the port detailed statistics or clear all information when you click Clear Figure 3 1 4 The Port Detail Statistics Overview Parameter description Auto refresh To evoke the auto refresh to refresh the Port Statistics information automati...

Страница 51: ...e number of frames received with CRC or alignment errors Rx Undersize The number of short 1 frame received with valid CRC Rx Oversize The number of long 2 frames received with valid CRC Rx Fragments The number of short 1 frame received with invalid CRC Rx Jabber The number of long 2 frames received with invalid CRC Rx Filtered The number of received frames filtered by the forwarding process Short ...

Страница 52: ...ormation then you need to evoke the Auto refresh 3 Click Refresh to refresh the Queuing Counters or clear all information when you click Clear Figure 3 1 5 The Queuing Counters Overview Parameter description Port The logical port for the settings contained in the same row Qn Qn is the Queue number QoS queues per port Q0 is the lowest priority queue Rx Tx The number of received and transmitted pack...

Страница 53: ...ctor Type Display the connector type for instance UTP SC ST LC and so on Fiber Type Display the fiber mode for instance Multi Mode Single Mode Tx Central Wavelength Display the fiber optical transmitting central wavelength for instance 850nm 1310nm 1550nm and so on Baud Rate Display the maximum baud rate of the fiber module supported for instance 10M 100M 1G and so on Vendor OUI Display the Manufa...

Страница 54: ...anufacturer Date Code Show the date of this SFP module was made Temperature Show the current temperature of SFP module Vcc Show the working DC voltage of SFP module Mon1 Bias mA Show the Bias current of SFP module Mon2 TX PWR Show the transmit power of SFP module Mon3 RX PWR Show the receiver power of SFP module ...

Страница 55: ...r a port Instead it was queued until 3000 bytes of data are ready to be transmitted In order not to introduce a large delay in case that data less than 3000 bytes shall be transmitted data are always transmitted after 48 us giving a maximum latency of 48 us the wakeup time It is possible to minimize the latency for specific frames by mapping the frames to a specific queue done with QOS and then ma...

Страница 56: ...e switch port number of the logical EEE port EEE Enabled Controls whether EEE is enabled for this switch port EEE Urgent Queues Queues set will activate transmission of frames as soon as any data is available Otherwise the queue will postpone the transmission until 3000 bytes are ready to be transmitted Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to p...

Страница 57: ...L parameters ACE of the each switch port These parameters will affect frames received on a port unless the frame matches a specific ACE Web Interface To configure the ACL Ports Configuration in the web interface 1 Click Configuration ACL then Ports 2 To scroll the specific parameter value to select the correct value for port ACL setting 3 Click the save to save the setting 4 If you want to cancel ...

Страница 58: ...d The default value is Disabled Logging Specify the logging operation of this port The allowed values are Enabled Frames received on the port are stored in the System Log Disabled Frames received on the port are not logged The default value is Disabled Please note that the System Log memory size and logging rate is limited Shutdown Specify the port shut down operation of this port The allowed valu...

Страница 59: ...pps or kbps 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the reset button It will revert to previous saved values Figure 3 2 2 The ACL Rate Limiter Configuration Parameter description Rate Limiter ID The rate limiter ID for the settings contained in the same row Rate The allowed values are 0 3276700 in pps or 0 100 200 300 1000000 in kbps Unit Spe...

Страница 60: ...r of ACEs is 256 on each switch Click on the lowest plus sign to add a new ACE to the list The reserved ACEs used for internal protocol cannot be edited or deleted the order sequence cannot be changed an the priority is highest Web Interface To configure Access Control List in the web interface 1 Click Configuration ACL then Configuration 2 Click the button to add a new ACL or use the other ACL mo...

Страница 61: ...led Port Copy Indicates the port copy operation of the ACE Frames matching the ACE are copied to the port number The allowed values are Disabled or a specific port number When Disabled was displayed the port copy operation was disabled Mirror Specify the mirror operation of this port The allowed values are Enabled Frames received on the port are mirrored Disabled Frames received on the port are no...

Страница 62: ...adds a new entry at the bottom of the ACE listings Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values Auto refresh To evoke the auto refresh to refresh the information automatically Upper right icon Refresh clear Remove All You can click them for refresh the ACL configuration or clear them by manual Others remove all to clean up all ...

Страница 63: ... match ingress ports with a specific policy Port The ACE will match a specific ingress port Frame Type Indicates the frame type of the ACE Possible values are Any The ACE will match any frame type EType The ACE will match Ethernet Type frames Note that an Ethernet Type based ACE will not get matched by IP and ARP frames ARP The ACE will match ARP RARP frames IPv4 The ACE will match all IPv4 frames...

Страница 64: ...cket that matched the specific ACE to CPU CPU Once Forward first packet that matched the specific ACE to CPU Counter The counter indicates the number of times the ACE was hit by a frame Conflict Indicates the hardware status of the specific ACE The specific ACE is not applied to the hardware due to hardware limitations Auto refresh To evoke the auto refresh to refresh the information automatically...

Страница 65: ...tic Trunk Ports using Static Trunk as their trunk method can choose their unique Static GroupID to form a logic trunked port The benefit of using Static Trunk method is that a port can immediately become a member of a trunk group without any handshaking with its peer port This is also a disadvantage because the peer ports of your static trunk group may not know that they should be aggregate togeth...

Страница 66: ...rame Check to enable the use of the TCP UDP Port Number or uncheck to disable By default TCP UDP Port Number is enabled Aggregation Group Configuration Locality Indicates the aggregation group type This field is only valid for switches Global The group members may reside on different units The device supports two 8 port global aggregations Local The group members reside on the same unit Each local...

Страница 67: ...change them as well An LACP trunk group with more than one ready member ports is a real trunked group An LACP trunk group with only one or less than one ready member ports is not a real trunked group Web Interface To configure the Trunk Aggregation LACP parameters in the web interface 1 Click Configuration LACP Configuration 2 Evoke to enable or disable the LACP on the port of the switch Scroll th...

Страница 68: ...1 65535 The Auto setting will set the key as appropriate by the physical link speed 10Mb 1 100Mb 2 1Gb 3 Using the Specific setting a user defined value can be entered Ports with the same Key value can participate in the same aggregation group while ports with different keys cannot Role The Role shows the LACP activity status The Active will transmit LACP packets each second while Passive will wai...

Страница 69: ...us Parameter description Aggr ID The Aggregation ID associated with this aggregation instance For LLAG the id is shown as isid aggr id and for GLAGs as aggr id Partner System ID The system ID MAC address of the aggregation partner Partner Key The Key that the partner has assigned to this aggregation ID Last changed The time since this aggregation changed Local Ports Shows which ports are a part of...

Страница 70: ...Port Status Figure 3 3 2 3 The LACP Status Parameter description Port The switch port number LACP Yes means that LACP is enabled and the port link is up No means that LACP is not enabled or that the port link is down Backup means that the port could not join the aggregation group but will join if other port leaves Meanwhile it s LACP status is disabled Key The key assigned to this port Only ports ...

Страница 71: ... Auto refresh To evoke the auto refresh to refresh the information automatically Upper right icon Refresh You can click them for refresh the LACP port status information by manual ...

Страница 72: ...en you need to evoke the Auto refresh 3 Click Refresh to refresh the LACP Statistics Figure 3 3 2 4 The LACP Statistics Parameter description Port The switch port number LACP Received Shows how many LACP frames have been received at each port LACP Transmitted Shows how many LACP frames have been sent from each port Discarded Shows how many unknown or illegal LACP frames have been discarded at each...

Страница 73: ... disables all other ports Network packets are therefore only forwarded between root ports and designated ports eliminating any possible network loops Once a stable network topology has been established all bridges listen for Hello BPDUs Bridge Protocol Data Units transmitted from the Root Bridge If a bridge does not get a Hello BPDU after a predefined interval Maximum Age the bridge assumes that t...

Страница 74: ... Ports to Forwarding used in STP compatible mode Valid values are in the range 4 to 30 seconds Max Age The maximum age of the information transmitted by the Bridge when it is the Root Bridge Valid values are in the range 6 to 40 seconds and MaxAge must be FwdDelay 1 2 Maximum Hop Count This defines the initial value of remaining Hops for MSTI information generated at the boundary of an MSTI region...

Страница 75: ...bled state automatically will be enabled after a certain time If recovery is not enabled ports have to be disabled and re enabled for normal STP operation The condition is also cleared by a system reboot Port Error Recovery Timeout The time to pass before a port in the error disabled state can be enabled Valid values are between 30 and 86400 seconds 24 hours Buttons Save Click to save changes Rese...

Страница 76: ...well Web Interface To configure the Spanning Tree MSTI Mapping parameters in the web interface 1 Click Configuration Spanning Tree MSTI Mapping 2 Specify the configuration identification parameters in the field Specify the VLANs Mapped blank field 3 Click the save to save the setting 4 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values...

Страница 77: ... mapped VLANs Mapped The list of VLANs mapped to the MSTI The VLANs must be separated with comma and or space A VLAN can only be mapped to one MSTI An unused MSTI should just be left empty i e not having any VLANs Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values ...

Страница 78: ...To configure the Spanning Tree MSTI Priorities parameters in the web interface 1 Click Configuration Spanning Tree MSTI Priorities 2 Scroll the Priority maximum is 240 Default is 128 3 Click the save to save the setting 4 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 4 3 The MSTI Configuration Parameter description MSTI T...

Страница 79: ...uration 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 4 4 The STP CIST Port Configuration Parameter description Port The switch port number of the logical STP port STP Enabled Controls whether STP is enabled on this switch port Path Cost Controls the path cost incurred by the port Th...

Страница 80: ...ion of the network influence the spanning tree active topology possibly because those bridges are not under the full control of the administrator This feature is also known as Root Guard Restricted TCN If enabled it causes the port not to propagate received topology change notifications and topology changes to other ports If set it can cause temporary loss of connectivity after changes in a spanni...

Страница 81: ... physical and aggregated ports Web Interface To configure the Spanning Tree MSTI Port Configuration parameters in the web interface 1 Click Configuration Spanning Tree MSTI Ports 2 Scroll to select the MST1 or other MSTI Port 3 Click Get to set the detail parameters of the MSTI Ports 4 Scroll to set all parameters of the MSTI Port configuration 5 Click the save to save the setting 6 If you want to...

Страница 82: ...ser defined value can be entered The path cost is used when establishing the active topology of the network Lower path cost ports are chosen as forwarding ports in favor of higher path cost ports Valid values are in the range 1 to 200000000 Priority Controls the port priority This can be used to control priority of ports having identical port cost See above Buttons Save Click to save changes Reset...

Страница 83: ...Bridges status Parameter description MSTI The Bridge Instance This is also a link to the STP Detailed Bridge Status Bridge ID The Bridge ID of this Bridge instance Root ID The Bridge ID of the current elected root bridge Root Port The switch port current assigned the root port role Root Cost Root Path Cost For the Root Bridge it is zero For all other Bridges it is the sum of the Port Path Costs on...

Страница 84: ...the Auto refresh 3 Click Refresh to refresh the STP Bridges Figure 3 4 7 The STP Port status Parameter description Port The switch port number of the logical STP port CIST Role The current STP port role of the CIST port The port role can be one of the following values AlternatePort Backup Port RootPort DesignatedPort Disabled CIST State The current STP port state of the CIST port The port state ca...

Страница 85: ...witch port number of the logical STP port MSTP The number of MSTP Configuration BPDU s received transmitted on the port RSTP The number of RSTP Configuration BPDU s received transmitted on the port STP The number of legacy STP Configuration BPDU s received transmitted on the port TCN The number of legacy Topology Change Notification BPDU s received transmitted on the port Discarded Unknown The num...

Страница 86: ...multicast group before The packets will be discarded by the IGMP Snooping if the user transmits multicast packets to the multicast group that had not been built up in advance IGMP mode enables the switch to issue IGMP function that you enable IGMP proxy or snooping on the switch which connects to a router closer to the root of the tree This interface is the upstream interface The router on the ups...

Страница 87: ...sary join and leave messages to the router side Port It shows the physical Port index of switch Router Port Specify which ports act as router ports A router port is a port on the Ethernet switch that leads towards the Layer 3 multicast device or IGMP query If an aggregation member port is selected as a router port the whole aggregation will act as a router port Fast Leave Enable the fast leave on ...

Страница 88: ...eld 3 Click the refresh to update the data or click or to display previous entry or next entry 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 5 2 The IGMP Snooping VLAN Configuration Parameter description VLAN ID It displays the VLAN ID of the entry Snooping Enabled Enable the per VLA...

Страница 89: ...ths of seconds default last member query interval is 10 in tenths of seconds 1 second URI Unsolicited Report Interval The Unsolicited Report Interval is the time between repetitions of a host s initial report of membership in a group The allowed range is 0 to 31744 seconds default unsolicited report interval is 1 second Buttons Save Click to save changes Reset Click to undo any changes made locall...

Страница 90: ...ss to a multicast group is applied to a switch port the IGMP join report requesting the stream of IP multicast traffic is dropped and the port is not allowed to receive IP multicast traffic from that group If the filtering action permits access to the multicast group the IGMP report from the port is forwarded for normal processing IGMP filtering controls only IGMP membership join reports and has n...

Страница 91: ...le the IGMP Snooping Port Group Filtering function Filtering Groups The IP Multicast Group will be filtered Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values ...

Страница 92: ...eb interface 1 Click Configuration IGMP Snooping Status 2 If you want to auto refresh the information then you need to evoke the Auto refresh 3 Click Refresh to refresh the IGMP Snooping Status 4 Click Clear to clear the IGMP Snooping Status Figure 3 5 4 The IGMP Snooping Status Parameter description VLAN ID The VLAN ID of the entry Querier Version Working Querier Version currently Host Version Wo...

Страница 93: ... number of Received V2 Reports V3 Reports Received The number of Received V3 Reports V2 Leaves Received The number of Received V2 Leaves Auto refresh To evoke the auto refresh icon then the device will refresh the log automatically Upper right icon Refresh clear You can click them for refresh the Status or clear them by manual ...

Страница 94: ...e information then you need to evoke the Auto refresh 3 Click Refresh to refresh an entry of the IGMP Snooping Groups Information 4 Click or to move to previous or next entry Figure 3 5 5 The IGMP Snooping Groups Information Parameter description Navigating the IGMP Group Table The Start from VLAN and group input fields allow the user to select the starting point in the IGMP Group Table It uses th...

Страница 95: ...s also Web Interface To display the IGMPv3 IPv4 SSM Information in the web interface 1 Click Configuration IGMP Snooping IPv4 SSM Information 2 If you want to auto refresh the information then you need to evoke the Auto refresh 3 Click Refresh to refresh an entry of the IGMPv3 IPv4 SSM Information 4 Click or to move to previous or next entry Figure 3 6 6 The IGMPv3 IPv4 SSM Information Parameter d...

Страница 96: ...s basis It can be either Include or Exclude Source Address IP Address of the source Currently system limits the total number of IP source addresses for filtering to be 128 Type Indicates the Type It can be either Allow or Deny Auto refresh To evoke the auto refresh icon then the device will refresh the log automatically Upper right icon Refresh You can click them for refresh the IGMP Group Status ...

Страница 97: ...s a function of the application software not of MLD When MLD snooping is enabled on a VLAN the switch acts to minimize unnecessary multicast traffic If the switch receives multicast traffic destined for a given multicast address it forwards that traffic only to ports on the VLAN that have MLD hosts for that address It drops that traffic for ports on the VLAN that have no MLD hosts 3 6 1 Basic Conf...

Страница 98: ...unregistered IPMCv6 traffic flooding may lead to failure of Neighbor Discovery MLD SSM Range SSM Source Specific Multicast Range allows the SSM aware hosts and routers run the SSM service model for the groups in the address Using IPv6 Address range Proxy Enabled Enable MLD Proxy This feature can be used to avoid forwarding unnecessary join and leave messages to the router side Port The Port index ...

Страница 99: ...s towards the Layer 3 multicast device or MLD querier If an aggregation member port is selected as a router port the whole aggregation will act as a router port Throttling Enable to limit the number of multicast groups to which a switch port can belong Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values ...

Страница 100: ... or next entry Figure 3 7 2 The MLD Snooping VLAN Configuration Parameter description VLAN ID The VLAN ID of the entry Snooping Enabled Enable the per VLAN MLD Snooping Only up to 32 VLANs can be selected MLD Querier A router sends MLD Query messages onto a particular link This Router is called the Querier Enable the MLD Querier in the VLAN Compatibility Compatibility is maintained by hosts and ro...

Страница 101: ... Multicast Address and Source Specific Query messages The allowed range is 0 to 31744 in tenths of seconds default last listener query interval is 10 in tenths of seconds 1 second URI Unsolicited Report Interval The Unsolicited Report Interval is the time between repetitions of a node s initial report of interest in a multicast address The allowed range is 0 to 31744 seconds default unsolicited re...

Страница 102: ...ing Group 3 Specify the Filtering Groups with entries per page 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 7 3 The MLD Snooping Port Group Filtering Configuration Parameter description Delete Check to delete the entry It will be deleted during the next save Port The logical port fo...

Страница 103: ...ng Status 2 If you want to auto refresh the information then you need to evoke the Auto refresh 3 Click Refresh to refresh an entry of the MLD Snooping Status Information 4 Click Clear to clear the MLD Snooping Status Figure 3 6 4 The MLD Snooping Status Parameter description VLAN ID The VLAN ID of the entry Querier Version Working Querier Version currently Host Version Working Host Version curren...

Страница 104: ...ber of Received V1 Reports V2 Reports Received The number of Received V2 Reports V1 Leaves Received The number of Received V1 Leaves Auto refresh To evoke the auto refresh icon then the device will refresh the log automatically Upper right icon Refresh You can click them for refresh the IGMP Group Status by manual others for next up page or entry ...

Страница 105: ...ps Information Parameter description Navigating the MLD Group Table Each page shows up to 99 entries from the MLD Group table default being 20 selected through the entries per page input field When first visited the web page will show the first 20 entries from the beginning of the MLD Group Table The Start from VLAN and group input fields allow the user to select the starting point in the MLD Grou...

Страница 106: ...elltech Technology Co Ltd 94 Auto refresh To evoke the auto refresh icon then the device will refresh the log automatically Upper right icon Refresh You can click them for refresh the IGMP Group Status by manual others for next up page or entry ...

Страница 107: ...point in the MLDv2 Information Table Web Interface To display the MLDv2 IPv6 SSM Information in the web interface 1 Click Configuration MLD Snooping IPv6 SSM Information 2 If you want to auto refresh the information then you need to evoke the Auto refresh 3 Click Refresh to refresh a entry of the MLDv2 IPv6 SSM Information 4 Click or to move to previous or next entry Figure 3 6 6 The IPv6 SSM Info...

Страница 108: ...message to Switch A and join the appropriate multicast Uplink ports that send and receive multicast data to and from the multicast VLAN are called MVR source ports 3 7 1 Configuration The section describes user could set the MVR basic Configuration and some parameters in the switch Web Interface To configure the MLD Snooping Port Group Configuration in the web interface 1 Click Configuration MVR C...

Страница 109: ...D Specify the Multicast VLAN ID Mode Enable MVR on the port Type Specify the MVR port type on the port Immediate Leave Enable the fast leave on the port Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values ...

Страница 110: ...n 2 If you want to auto refresh the information then you need to evoke the Auto refresh 3 To Click the Refresh to refresh an entry of the MVR Groups Information 4 Click or to move to previous or next entry Figure 3 7 2 The MVR Groups Information Parameter description MVR Group Table Columns VLAN ID VLAN ID of the group Groups Group ID of the group displayed Port Members Ports under this group Auto...

Страница 111: ...try of the MVR Statistics Information 4 Click or to move to previous or next entry Figure 3 7 3 The MVR Statistics Information Parameter description VLAN ID The Multicast VLAN ID V1 Reports Received The number of Received V1 Reports V2 Reports Received The number of Received V2 Reports V3 Reports Received The number of Received V3 Reports V2 Leaves Received The number of Received V2 Leaves Auto re...

Страница 112: ...ghbors on an IEEE 802 local area network principally wired Ethernet The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in standards document IEEE 802 1AB 3 8 1 LLDP Configuration You can do the LLDP configuration per port and the detail parameters the settings will take effect immediately This page allows the user to inspect and co...

Страница 113: ...ds LLDP Port Configuration The LLDP port settings relate to the current selected as reflected by the page header Port The switch port number of the logical LLDP port Mode Select LLDP mode Rx only The switch will not send out LLDP information but LLDP information from neighbor units is analyzed Tx only The switch will drop LLDP information received from neighbors but will send out LLDP information ...

Страница 114: ...n CDP awareness on a port is disabled the CDP information isn t removed immediately but gets when the hold time is exceeded Port Descr Optional TLV When checked the port description is included in LLDP information transmitted Sys Name Optional TLV When checked the system name is included in LLDP information transmitted Sys Descr Optional TLV When checked the system description is included in LLDP ...

Страница 115: ... the table will show No LLDP neighbour information found Parameter description Local Port The port on which the LLDP frame was received Chassis ID The Chassis ID is the identification of the neighbour s LLDP frames Remote Port ID The Remote Port ID is the identification of the neighbour port System Name System Name is the name advertised by the neighbour unit Port Description Port Description is t...

Страница 116: ...escription advertised by the neighbour unit Management Address Management Address is the neighbour unit s address that is used for higher layer entities to assist discovery by the network management This could for instance hold the neighbour s IP address Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right icon Refresh You can click the...

Страница 117: ...net PoE end points Inventory management allowing network administrators to track their network devices and determine their characteristics manufacturer software and hardware versions serial or asset number This page allows you to configure the LLDP MED This function applies to VoIP devices which support LLDP MED Web Interface To configure LLDP MED 1 Click LLDP MED Configuration 2 Modify Fast start...

Страница 118: ...he recommended value is 4 times given that 4 LLDP frames with a 1 second interval will be transmitted when an LLDP frame with new information is received It should be noted that LLDP MED and the LLDP MED Fast Start mechanism is only intended to run on links between LLDP MED Network Connectivity Devices and Endpoint Devices and as such does not apply to links between LAN infrastructure elements inc...

Страница 119: ...pan Example Copenhagen City district City division borough city district ward chou Japan Block Neighbourhood Neighbourhood block Street Street Example Poppelvej Leading street direction Leading street direction Example N Trailing street suffix Trailing street suffix Example SW Street suffix Street suffix Example Ave Platz House no House number Example 21 House no suffix House number suffix Example...

Страница 120: ...nly intended for use with applications that have specific real time network policy requirements such as interactive voice and or video services The network policy attributes advertised are 1 Layer 2 VLAN ID IEEE 802 1Q 2003 2 Layer 2 priority value IEEE 802 1D 2004 3 Layer 3 Diffserv code point DSCP value IETF RFC 2474 This network policy is potentially advertised and associated with multiple sets...

Страница 121: ...low then the L2 priority field is ignored and only the DSCP value has relevance 6 Video Conferencing for use by dedicated Video Conferencing equipment and other similar appliances supporting real time interactive video audio services 7 Streaming Video for use by broadcast or multicast based video content distribution and other similar applications supporting streaming video services that require s...

Страница 122: ...pe Tag VLAN ID L2 Priority and DSCP for the new policy Click Save Port Policies Configuration Every port may advertise a unique set of network policies or different attributes for the same network policies based on the authenticated user identity or port configuration Port The port number to which the configuration applies Policy Id The set of policies that shall apply to a given port The set of p...

Страница 123: ... LLDP MED Network Connectivity Device is a LAN access device based on any of the following technologies 1 LAN Switch Router 2 IEEE 802 1 Bridge 3 IEEE 802 3 Repeater included for historical reasons 4 IEEE 802 11 Wireless Access Point 5 Any device that supports the IEEE 802 1AB and MED extensions defined by TIA 1057 and can relay IEEE 802 frames via any method LLDP MED Endpoint Device Definition LL...

Страница 124: ...ious Generic Endpoint Class I and Media Endpoint Class II classes and are extended to include aspects related to end user devices Example product categories expected to adhere to this class include but are not limited to end user communication appliances such as IP Phones PC based softphones or other communication appliances that directly support the end user Discovery services defined in this cla...

Страница 125: ...application type is currently unknown Defined The network policy is defined TAG TAG is indicative of whether the specified application type is using a tagged or an untagged VLAN Can be Tagged or Untagged Untagged The device is using an untagged frame format and as such does not include a tag header as defined by IEEE 802 1Q 2003 Tagged The device is using the IEEE 802 1Q tagged frame format VLAN I...

Страница 126: ...maximum time that transmit path can hold off sending data after reassertion of LPI Rx Tw The link partner s time that receiver would like the transmitter to holdoff to allow time for the receiver to wake from sleep Fallback Receive Tw The link partner s fallback receive Tw A receiving link partner may inform the transmitter of an alternate desired Tw_sys_tx Since a receiving link partner is likely...

Страница 127: ...ation exchanged via LLDP Resolved Rx Tw The resolved Rx Tw for this link Note NOT the link partner The resolved value that is the actual tx wakeup time used for this link based on EEE information exchanged via LLDP Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right icon Refresh You can click them for refresh the LLDP Neighbors informa...

Страница 128: ...r to clear all counters Figure 3 8 6 The LLDP Port Statistics information Parameter description Global Counters Neighbour entries were last changed at It also shows the time when the last entry was last deleted or added It also shows the time elapsed since the last change was detected Total Neighbours Entries Added Shows the number of new entries added since switch reboot Total Neighbours Entries ...

Страница 129: ...emoved from the table when a given port s link is down an LLDP shutdown frame is received or when the entry ages out TLVs Discarded Each LLDP frame can contain multiple pieces of information known as TLVs TLV is short for Type Length Value If a TLV is malformed it is counted and discarded TLVs Unrecognized The number of well formed TLVs but with an unknown type value Org Discarded The number of or...

Страница 130: ...AN access points and other equipment where it would be difficult or expensive to connect the equipment to main power supply 3 9 1 Configuration This page allows the user to inspect and configure the current PoE port settings and show all PoE Supply Watts Web Interface ToconfigurePowerOverEthernetinthewebinterface 1 Clickconfiguration 2 SpecifytheReservedPowerdeterminedand PowerManagement ode Speci...

Страница 131: ...sents the ports priority There are three levels of power priority named Low High and Critical The priority is used in the case where the remote devices require more power than the power supply can deliver In this case the port with the lowest priority will be turn off starting from the port with the highest port number Maximum Power The Maximum Power value contains a numerical value that indicates...

Страница 132: ... The classification current describes the amount of power the PD will require during normal operation Power Requested The Power Requested shows the requested amount of power the PD wants to be reserved Power Allocated The Power Allocated shows the amount of power the switch has allocated for the PD Power Used The Power Used shows how much power the PD currently is using Current Used The Power Used...

Страница 133: ...ipment sending the frame The SMAC address is used by the switch to automatically update the MAC table with these dynamic MAC addresses Dynamic entries are removed from the MAC table if no frame with the corresponding SMAC address has been seen after a configurable age time 3 10 1 Configuration The MAC Address Table is configured on this page Set timeouts for entries in the dynamic MAC Table and co...

Страница 134: ... learned all other frames are dropped NOTE Make sure that the link used for managing the switch is added to the Static Mac Table before changing to secure learning mode otherwise the management link is lost and can only be restored by using another non secure port or by connecting to the switch via the serial interface Static MAC Table Configuration The static entries in the MAC table are shown in...

Страница 135: ... or a dynamic entry VLAN The VLAN ID of the entry MAC address The MAC address of the entry Port Members The ports that are members of the entry Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right icon Refresh Clear You can click them for refresh the MAC address entries by manual or press clear to clean up the MAC table Others press or ...

Страница 136: ...12 Revision 1 0 Welltech Technology Co Ltd 124 33 33 FF 73 01 29 Destination MAC for IPv6 Neighbor Solicitation reference IPv6 DAD JPG 33 33 FF A8 01 01 your switch MAC address for IPv6 global IP FF FF FF FF FF FF for Broadcast ...

Страница 137: ...elected switch unit switch can be monitored and modified here Up to 4096 VLANs are supported This page allows for adding and deleting VLANs as well as adding and deleting port members of each VLAN Web Interface To configure VLAN membership configuration in the web interface 1 Click VLAN membership Configuration 2 Specify Management VLAN ID 0 4094 3 Click Save Figure 3 11 1 The VLAN Membership Conf...

Страница 138: ...he VLAN is enabled on the selected switch unit when you click on Save The VLAN is thereafter present on the other switch units but with no port members The check box is greyed out when VLAN is displayed on other switches but user can add member ports to it A VLAN without any port members on any unit will be deleted when you click Save The button can be used to undo the addition of new VLANs Button...

Страница 139: ...t the Role of each port as Access Trunk or Hybrid Web Interface To configure VLAN Port configuration in the web interface 1 Click VLAN Port Configuration 2 Specify the VLAN Port Configuration parameters 3 Click Save Figure 3 11 2 The VLAN Port Configuration Parameter description Ethertype for Custom S ports This field specifies the ether type used for Custom S ports This is a global setting for al...

Страница 140: ...rded By default the field is set to All Port VLAN Mode Configures the Port VLAN Mode The allowed values are None or Specific This parameter affects VLAN ingress and egress processing If None is selected a VLAN tag with the classified VLAN ID is inserted in frames transmitted on the port This mode is normally used for ports connected to VLAN aware switches If Specific the default value is selected ...

Страница 141: ...gistration Protocol GVRP allows dynamic registration and deregistration of VLANs on ports on a VLAN bridged network Voice VLAN Voice VLAN is a VLAN configured specially for voice traffic typically originating from IP phones MVR MVR is used to eliminate the need to duplicate multicast traffic for subscribers in each VLAN Multicast traffic for all channels is sent only on a single multicast VLAN MST...

Страница 142: ...d values are 1 through 4095 The default value is 1 Port Type Shows the Port Type Port type can be any of Unaware C port S port Custom S port If Port Type is Unaware all frames are classified to the Port VLAN ID and tags are not removed C port is Custom Port S port is Service port Custom S port is S port with Custom TPID Ingress Filtering Shows the ingress filtering on a port This parameter affects...

Страница 143: ... set VLAN membership or VLAN port configuration the following conflicts can occur Functional Conflicts between features Conflicts due to hardware limitation Direct conflict between user modules Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right icon Refresh You can click them for refresh the VLAN Port Status information by manual ...

Страница 144: ...e VLAN but it can be a member of multiple Private VLANs Web Interface To configure Private VLAN configuration in the web interface 1 Click add new Private VLAN configuration 2 Specify the Private VLAN ID and Port Members 3 Click Save Figure 3 11 5 1 The Private VLAN Membership Configuration Parameter description Delete To delete a private VLAN entry check this box The entry will be deleted during ...

Страница 145: ... based upon the destination address on the data packet The data packet is then sent to the plurality of ports pursuant to the forwarding map generated based upon whether the ingress port was configured as a protected or non protected port This page is used for enabling or disabling port isolation on ports in a Private VLAN A port member of a VLAN can be isolated to other isolated ports on the same...

Страница 146: ...e to use the resources in the old VLAN On the other hand if Port A and Port B belong to the same VLAN after terminal devices access the network through Port B they will have access to the same resources as those accessing the network through Port A do which brings security issues To provide user access and ensure data security in the mean time the MAC based VLAN technology is developed MAC based V...

Страница 147: ...cked Adding a New MAC based VLAN Click to add a new MAC based VLAN entry An empty row is added to the table and the MAC based VLAN entry can be configured as needed Any unicast MAC address can be configured for the MAC based VLAN entry No broadcast or multicast MAC addresses are allowed Legal values for a VLAN ID are 1 through 4095 The MAC based VLAN entry is enabled on the selected switch unit wh...

Страница 148: ... Display MAC based VLAN configured in the web interface 1 Click MAC based VLAN Status 2 Specify the Static NAS Combined 3 Display MAC based information Figure 3 11 6 2 The MAC based VLAN Membership Status for User Static Parameter description MAC Address Indicates the MAC address VLAN ID Indicates the VLAN ID Port Members Port members of the MAC based VLAN entry Auto refresh To evoke the auto refr...

Страница 149: ...nt SAP fields SNAP supports identifying protocols by Ethernet type field values it also supports vendor private protocol identifier spaces It is used with IEEE 802 3 IEEE 802 4 IEEE 802 5 IEEE 802 11 and other IEEE 802 physical network layers as well as with non IEEE 802 physical network layers such as FDDI that use 802 2 LLC 3 11 7 1 Protocol to Group This page allows you to add new protocols to ...

Страница 150: ...UI is hexadecimal 000000 the protocol ID is the Ethernet type EtherType field value for the protocol running on top of SNAP if the OUI is an OUI for a particular organization the protocol ID is a value assigned by that organization to the protocol running on top of SNAP In other words if value of OUI field is 00 00 00 then value of PID will be etype 0x0600 0xffff and if value of OUI is other than ...

Страница 151: ...llowed Whatever Group name you try to map to a VLAN must be presented in Protocol to Group mapping table and must not be presented by any other existing mapping entry on this page VLAN ID Indicates the ID to which Group Name will be mapped A valid VLAN ID ranges from 1 4095 Port Members A row of check boxes for each port is displayed for each Group Name to VLAN ID mapping To include a port in a ma...

Страница 152: ...lick to undo any changes made locally and revert to previous saved values Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right icon Refresh You can click them for refresh the Protocol Group Mapping information by manual ...

Страница 153: ... classify and schedule network traffic It is recommended that there are two VLANs on a port at least one for voice one for data Before connecting the IP device to the switch the IP phone should configure the voice VLAN ID correctly It should be configured through its own GUI Web Interface To configure Voice VLAN in the web interface 1 Select Enabled in the Voice VLAN Configuration 2 Specify VLAN I...

Страница 154: ... the port mode isn t equal disabled we must disable MSTP feature before we enable Voice VLAN It can avoid the conflict of ingress filtering Possible port modes are Disabled Disjoin from Voice VLAN Auto Enable auto detect mode It detects whether there is VoIP phone attached to the specific port and configures the Voice VLAN members automatically Forced Force join to Voice VLAN Port Security Indicat...

Страница 155: ...ned to a vendor by IEEE It must be 6 characters long and the input format is xx xx xx x is a hexadecimal digit Description The description of OUI address Normally it describes which vendor telephony device it belongs to The allowed string length is 0 to 32 Add New entry Click to add a new entry in Voice VLAN OUI table An empty row is added to the table the Telephony OUI Description Buttons Save Cl...

Страница 156: ... of a GARP application component and a GARP Information Declaration GID component associated with each port or the switch The propagation of information between GARP participants for the same application in a bridge is carried out by the GARP Information Propagation GIP component Protocol exchanges take place between GARP participants by means of LLC Type 1 services using the group MAC address and...

Страница 157: ... Leave Timer is 600ms Leave All Timer The default value for Leave All Timer is 10000ms Application Currently only supported application is GVRP Attribute Type Currently only supported Attribute Type is VLAN GARP Applicant This configuration is used to configure the Applicant state machine behavior for GARP on a particular port locally normal participant In this mode the Applicant state machine wil...

Страница 158: ...ay the GARP Counter information 3 Click Refresh to modify the GARP statistics information Figure 3 13 2 The GARP Port Statistics Parameter description Port The Port column shows the list of all ports for which per port GARP statistics are shown Peer MAC Peer MAC is MAC address of the neighbour Switch from with GARP frame is received Failed Count Explain Failed count here Auto refresh To evoke the ...

Страница 159: ...tries for each VLAN and propagate these information to other GVRP aware devices to setup and update their knowledge database the set of VLANs associated with current active members and through which ports these members can be reached 3 14 1 Configuration This page allows you to configure the basic GVRP Configuration settings for all switch ports The settings relate to the current selected unit as ...

Страница 160: ...to Enable GVRP mode on this port The default value of configuration is disable 2 GVRP rrole This configuration is used to configure restricted role on an interface Disable Select to Disable GVRP rrole on this port Enable Select to Enable GVRP rrole on this port The default configuration is disable Auto refresh To evoke the auto refresh icon then the device will refresh the information automaticall...

Страница 161: ... Counter information 3 Click Refresh to modify the GVRP statistics information Figure 3 14 2 The GVRP Port Statistics Parameter description Port The Port column shows the list of ports for which you can see port counters and statistics Join Tx Count explain Join tx Count here Leave Tx Count explain Leave Tx Count here Auto refresh To evoke the auto refresh icon then the device will refresh the inf...

Страница 162: ...ation Two Applications are defined to register VLANs MVRP and Group MAC addresses MMRP 3 15 1 Configuration This page allows you to configure the basic MRP Configuration settings for all switch ports The settings relate to the current selected unit as reflected by the page header Web Interface To configure MRP Port Configuration in the web interface 1 Click MRP configure 2 Specify MRP Configuratio...

Страница 163: ...licant state machine behaviour for MRP on a perticular port locally normal participant In this mode the Applicant state machine will operate normally in MRP protocol exchanges non participant In this mode the Applicant state machine will not participate in the protocol operation The default configuration is normal participant Periodic Tx This configuration is used to configure transmission mode an...

Страница 164: ...RP Counter information 3 Click Refresh to modify the MRP statistics information Figure 3 15 2 The MRP Port Statistics Parameter description Port The Port column shows the list of all ports for which per port MRP statistics are shown Peer MAC Peer MAC is MAC address of the neighbour Switch from with MRP frame is received Failed Count explain Failed count here Auto refresh To evoke the auto refresh ...

Страница 165: ...ration This page allows you to configure the basic MVRP Configuration settings for all switch ports The settings relate to the current selected unit as reflected by the page header Web Interface To configure MVRP Port Configuration in the web interface 1 Click MVRP configure 2 Specify MVRP Configuration Parameters 3 Click Save Figure 3 16 1 The MVRP Global Configuration Parameter description MVRP ...

Страница 166: ...ault value of configuration is disable 2 MVRP rrole This configuration is used to configure restricted role on an interface Disable Select to Disable MVRP rrole on this port Enable Select to Enable MVRP rrole on this port The default configuration is disable Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right icon Refresh You can click...

Страница 167: ...ion 3 Click Refresh to modify the MVRP statistics information Figure 3 16 2 The MVRP Port Statistics Parameter description Port The Port column shows the list of ports for which you can see port counters and statistics Join Tx Count explain Join tx Count here Leave Tx Count explain Leave Tx Count here Auto refresh To evoke the auto refresh icon then the device will refresh the information automati...

Страница 168: ...S class The switch support advanced memory control mechanisms providing excellent performance of all QoS classes under any traffic scenario including jumbo frame A super priority queue with dedicated memory and strict highest priority in the arbitration The ingress super priority queue allows traffic recognized as CPU traffic to be received and queued for transmission to the CPU even when all the ...

Страница 169: ...es made locally and revert to previous saved values NOTE DP level Every incoming frame is classified to a Drop Precedence Level DP level which is used throughout the device for providing congestion control guarantees to the frame according to what was configured for that specific DP level PCP PCP is an acronym for Priority Code Point It is a 3 bit field storing the priority level for the 802 1Q fr...

Страница 170: ...ideo usually maintains a steady rate of traffic Web Interface To display the QoS Port Schedulers in the web interface 1 Click Configuration QoS Port Policing 2 Evoke which port need to enable the QoS Ingress Port Policers and type the Rate limit condition 3 Scroll to select the Rate limit Unit with kbps Mbps fps and kfps 4 Click Save to save the configuration Figure 3 17 2 The QoS Ingress Port Pol...

Страница 171: ... value for this port the default is 500 Unit To scroll to select what unit of rate includes kbps Mbps fps and kfps The default is kbps Flow Control To evoke to enable or disable flow control on port Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values ...

Страница 172: ... for all switch ports and the ports belong to the current selected unit as reflected by the page header Web Interface To display the QoS Port Schedulers in the web interface 1 Click Configuration QoS Port Schedulers 2 Display the QoS Egress Port Schedulers Figure 3 17 3 The QoS Egress Port Schedules Click the Port index to set the QoS Egress Port Schedulers ...

Страница 173: ...Rate Controls the rate for the queue shaper The default value is This value is restricted to 1000000 when the Unit is kbps and it is restricted to 1 when the Unit is Mbps Queue Shaper Unit Controls the unit of measure for the queue shaper rate as kbps or Mbps The default value is kbps Queue Shaper Excess Controls whether the queue is allowed to use excess bandwidth Queue Scheduler Weight Controls ...

Страница 174: ...enabled for this switch port Port Shaper Rate Controls the rate for the port shaper The default value is This value is restricted to 1000000 when the Unit is kbps and it is restricted to 1 when the Unit is Mbps Port Shaper Unit Controls the unit of measure for the port shaper rate as kbps or Mbps The default value is kbps Buttons Save Click to save changes Reset Click to undo any changes made loca...

Страница 175: ...il information ot the ports belong to the current selected unit as reflected by the page header Web Interface To display the QoS Port Shapers in the web interface 1 Click Configuration QoS Port Shapers 2 Display the QoS Egress Port Shapers Figure 3 17 4 The QoS Egress Port Shapers Click the Port index to set the QoS Egress Port Shapers ...

Страница 176: ... or Weighted on this switch port Queue Shaper Enable Controls whether the queue shaper is enabled for this queue on this switch port Queue Shaper Rate Controls the rate for the queue shaper The default value is This value is restricted to 1000000 when the Unit is kbps and it is restricted to 1 when the Unit is Mbps Queue Shaper Unit Controls the unit of measure for the queue shaper rate as kbps or...

Страница 177: ...Port Shaper Enable Controls whether the port shaper is enabled for this switch port Port Shaper Rate Controls the rate for the port shaper The default value is This value is restricted to 1000000 when the Unit is kbps and it is restricted to 1 when the Unit is Mbps Port Shaper Unit Controls the unit of measure for the port shaper rate as kbps or Mbps The default value is kbps Buttons Save Click to...

Страница 178: ...rt Tag Remarking Figure 3 17 5 The Port Tag Remarking Parameter description Port The logical port for the settings contained in the same row Click on the port number in order to configure tag remarking Mode Shows the tag remarking mode for this port Classified Use classified PCP DEI values Default Use default PCP DEI values Mapped Use mapped versions of QoS class and DP level Tag Remarking Mode To...

Страница 179: ...apped Use mapped versions of QoS class and DP level Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values Cancel Click to cancel the changes ...

Страница 180: ...b interface 1 Click Configuration QoS Port DSCP 2 Evoke to enable or disable the Ingress Translate and Scroll the Classify Parameter configuration 3 Scroll to select Egress Rewrite parameters 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 17 6 The QoS Port DSCP Configuration Parameter...

Страница 181: ...ed DSCP is 0 Selected Classify only selected DSCP for which classification is enabled as specified in DSCP Translation window for the specific DSCP All Classify all DSCP Egress Port Egress Rewriting can be one of below parameters Disable No Egress rewrite Enable Rewrite enable without remapped Remap DSCP from analyzer is remapped and frame is remarked with remapped DSCP value Buttons Save Click to...

Страница 182: ...switches Web Interface To configure the DSCP Based QoS Ingress Classification parameters in the web interface 1 Click Configuration QoS DSCP Based QoS 2 Evoke to enable or disable the DSCP for Trust 3 Scroll to select QoS Class and DPL parameters 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values ...

Страница 183: ...DSCP values are 64 Trust Click to check if the DSCP value is trusted QoS Class QoS Class value can be any of 0 7 DPL Drop Precedence Level 0 3 Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values ...

Страница 184: ... Egress Web Interface To configure the DSCP Translation parameters in the web interface 1 Click Configuration QoS DSCP Translation 2 Scroll to set the Ingress Translate and Egress Remap DP0 and Remap DP1 Parameters 3 Evoke to enable or disable Classify 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved v...

Страница 185: ...Classification at Ingress side Egress There are following configurable parameters for Egress side 1 Remap DP0 Select the DSCP value from select menu to which you want to remap DSCP value ranges form 0 to 63 2 Remap DP1 Select the DSCP value from select menu to which you want to remap DSCP value ranges form 0 to 63 There is following configurable parameter for Egress side Remap Select the DSCP valu...

Страница 186: ...e DSCP Parameters 3 Click the save to save the setting 4 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 17 9 The DSCP Classification Configuration Parameter description QoS Class Available QoS Class value ranges from 0 to 7 The QoS Class 0 7 can be mapped to followed parameters DPL Drop Precedence Level 0 1 can be configur...

Страница 187: ...join the QCE rules 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 17 10 The QoS Control List Configuration Parameter description QCE Indicates the index of QCE Port Indicates the list of ports configured with the QCE Frame Type Indicates the type of frame to look for incoming frames P...

Страница 188: ...n action taken on ingress frame if parameters configured are matched with the frame s contents There are three action fields Class DPL and DSCP Class Classified QoS Class if a frame matches the QCE it will be put in the queue DPL Drop Precedence Level if a frame matches the QCE then DP level will set to value displayed under DPL column DSCP If a frame matches the QCE then DSCP will be classified w...

Страница 189: ... address in value mask format or Any IP and Mask are in the format x y z w where x y z and w are decimal numbers between 0 and 255 When Mask is converted to a 32 bit binary string and read from left to right all bits following the first zero must also be zero DSCP Diffserv Code Point value DSCP It can be specific value range of value or Any DSCP values are in the range 0 63 including BE CS1 CS7 EF...

Страница 190: ...Publication date August 2012 Revision 1 0 Welltech Technology Co Ltd 178 Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values ...

Страница 191: ... user QCE Indicates the index of QCE Frame Type Indicates the type of frame to look for incoming frames Possible frame types are Any The QCE will match all frame type Ethernet Only Ethernet frames with Ether Type 0x600 0xFFFF are allowed LLC Only LLC frames are allowed LLC Only SNAP frames are allowed IPv4 The QCE will match only IPV4 frames IPv6 The QCE will match only IPV6 frames Port Indicates ...

Страница 192: ...tus as Yes otherwise it is always No Please note that conflict can be resolved by releasing the resource required by the QCE and pressing Refresh button Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Resolve Conflict Click it to resolve the conflict issue Upper right icon Refresh You can click them for refresh the QCL information by manual ...

Страница 193: ...l 3 Scroll to set the Rate Parameters 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 17 12 The Storm Control Configuration Parameter description Frame Type The settings in a particular row apply to the frame type listed here Unicast Multicast or Broadcast Enable Enable or disable the ...

Страница 194: ...erature exceeds the configured thermal protection temperature ports will be turned off in order to decrease the power consumption It is possible to arrange the ports with different priorities Each priority can be given a temperature at which the corresponding ports shall be turned off Web Interface To configure the Thermal Protection in the web interface 1 Click Configuration Thermal Protection Co...

Страница 195: ...on to trigger the thermal protect NOTE The temperature means the MAC and PHY chipset s TA temperature not PSU device temperature or environment temperature Please don t set environment temperature limitation value Port priorities The priority the port belongs to It allows user to what priority criterion to trigger Port to be turned off via thermal protection Buttons Save Click to save changes Rese...

Страница 196: ...Figure 3 18 2 The Thermal Protection status Parameter description Port Indicates the list of physical Port Temperature Shows the current chip temperature in degrees Celsius NOTE The temperature means the MAC and PHY chipset s TA temperature not PSU device temperature or environment temperature Port Status To display the Port status includes link up or link down Auto refresh To evoke the auto refre...

Страница 197: ...evert to previous saved values Figure 3 19 1 The sFlow Collector Configuration Parameter description Receiver Id The Receiver ID input fields allow the user to select the receiver ID Indicates the ID of this particular sFlow Receiver Currently one ID is supported as one collector is supported IP Type A drop down list to select the type of IP of Collector is displayed By default IPv4 is the type of...

Страница 198: ...ops sending the samples It is through the management the value is set before it expires The value accepted is within the range of 0 2147483647 By default it is set to 0 Datagram Size It is the maximum UDP datagram size to send out the sFlow samples to the receiver The value accepted is within the range of 200 1500 bytes The default is 1400 bytes Buttons Save Click to save changes Reset Click to un...

Страница 199: ...able accuracy Web Interface To configure the sFlow Agent in the web interface 1 Click Configuration sFlow Agent sampler 2 click the to edit the sFlow sampler parameters 3 Scroll to Sample Type to choice with None Tx Rx or All 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 19 2 The sFl...

Страница 200: ...s Max Hdr Size Configured size of the header of the sampled frame Polling Interval Configured polling interval for the counter sampling Buttons Edits the Data source sampler configuration Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values Cancel Click to cancel to clear up what your setting Auto refresh To evoke the auto refresh icon then th...

Страница 201: ...nnect to 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 20 1 The Easy Port Configuration Parameter description Port Members To evoke which Port wants to enable the Easy Port function Role To scroll to select what kind device you want to connect and implement with the Easy Port setting...

Страница 202: ...as trap shutdown or trap shutdown Port Security limit To set the Port security limit the default is 1 Port Security limit To set the Port security limit It means you can set how many devices MAC address will allow to access the port the default is 1 Spanning Tree Admin Edge To scroll to enable or disable the Spanning Tree Admin Edge function on the Easy Port Spanning Tree BPDU Guard To scroll to e...

Страница 203: ...ace To configure the Mirror in the web interface 1 Click Configuration Mirroring 2 Scroll to select Port to mirror on which port 3 Scroll to disabled enable TX Only and RX Only to set the Port mirror mode 4 Click the save to save the setting 5 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 21 1 The Mirror Configuration Par...

Страница 204: ...the mirror port Frames received are not mirrored Disabled Neither frames transmitted nor frames received are mirrored Enabled Frames received and frames transmitted are mirrored on the mirror port NOTE For a given port a frame is only transmitted once It is therefore not possible to mirror Tx frames on the mirror port Because of this mode for the selected mirror port is limited to Disabled or Rx o...

Страница 205: ...ion 2 Scroll to select the Group name and Severity Level 3 Click the save to save the setting 4 If you want to cancel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 22 1 The Trap Event Severity Configuration Parameter description Group Name The field describes the Trap Event determination Severity Level To scroll to select the event type with E...

Страница 206: ...cel the setting then you need to click the Reset button It will revert to previous saved values Figure 3 23 1 The SMTP Configuration Parameter description These parameters are displayed on the SMTP Configuration page Mail Server Specify the IP Address of the server transferring your email Username Specify the username on the mail server Password Specify the password on the mail server Sender To se...

Страница 207: ...bled Disable UPnP mode operation When the mode is enabled two ACEs are added automatically to trap UPNP related packets to CPU The ACEs are automatically removed when the mode is disabled TTL The TTL value is used by UPnP to send SSDP advertisement messages Valid values are in the range 1 to 255 Advertising Duration The duration carried in SSDP packets is used to inform a control point or control ...

Страница 208: ...ooping path and take off the looping path then select the resume the locked port and click on Resume to turn on the locked ports 3 25 1 Configuration The section describes how to set Loop Detection Web Interface To configure the Loop detection parameters in the web interface 1 Click Configuration Loop detection Configuration 2 Evoke to select enable or disable the port loop detection 5 Click the s...

Страница 209: ...pen port will be locked If Loop did not happen port maintains Unlocked Locked Port Resume When Port No is chosen enable port s Loop detection and the port detects loop happen the port will be locked When choosing Resume port locked will be opened and turned into unlocked If not choosing Resume Port remains locked Buttons Save Click to save changes Reset Click to undo any changes made locally and r...

Страница 210: ...rd configure to enable or disable with the Port of the switch 4 1 1 Configuration This section describes how to configure IP Source Guard setting including Mode Enabled and Disabled Maximum Dynamic Clients 0 1 2 Unlimited Web Interface To configure an IP Source Guard Configuration in the web interface 1 Select Enabled in the Mode of IP Source Guard Configuration 2 Select Enabled of the specific po...

Страница 211: ...on a given port are enabled IP Source Guard is enabled on this given port Max Dynamic Clients Specify the maximum number of dynamic clients that can be learned on given port This value can be 0 1 2 or unlimited If the port mode is enabled and the value of max dynamic client is equal to 0 it means only allow the IP packets forwarding that are matched in static entries on the specific port Buttons S...

Страница 212: ...Click Save Figure 4 1 2 The Static IP Source Guard Table Parameter description Delete Check to delete the entry It will be deleted during the next save Port The logical port for the settings VLAN ID The vlan id for the settings IP Address Allowed Source IP address IP Mask It can be used for calculating the allowed network with IP address MAC address Allowed Source MAC address Adding new entry Clic...

Страница 213: ...IP Address and entries per page 2 Checked Auto reflash Figure 4 1 3 The Dynamic Table Parameter description Port Switch Port Number for which the entries are displayed VLAN ID VLAN ID in which the IP traffic is permitted IP Address User IP address of the entry MAC Address Source MAC address Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper...

Страница 214: ...RP table 4 2 1 Configuration This section describes how to configure ARP Inspection setting including Mode Enabled and Disabled Port Enabled and Disabled Web Interface To configure an ARP Inspection Configuration in the web interface 1 Select Enabled in the Mode of ARP Inspection Configuration 2 Select Enabled of the specific port in the Mode of Port Mode Configuration 3 Click Save Figure 4 2 1 Th...

Страница 215: ...RP Inspection Port Mode Configuration Specify ARP Inspection is enabled on which ports Only when both Global Mode and Port Mode on a given port are enabled ARP Inspection is enabled on this given port Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values ...

Страница 216: ...n the entry 3 Click Save Figure 4 2 2 The Static ARP Inspection Table Parameter description Delete Check to delete the entry It will be deleted during the next save Port The logical port for the settings VLAN ID The vlan id for the settings MAC Address Allowed Source MAC address in ARP request packets IP Address Allowed Source IP address in ARP request packets Adding new entry Click to add a new e...

Страница 217: ... port VLAN ID MAC Address IP Address and entries per page 2 Checked Auto reflash Figure 4 2 3 The Dynamic ARP Inspection Table Parameter description Port Switch Port Number for which the entries are displayed VLAN ID VLAN ID in which the ARP traffic is permitted MAC Address User MAC address of the entry IP Address User IP address of the entry Auto refresh To evoke the auto refresh icon then the de...

Страница 218: ...rt Mode Configuration Trusted Untrusted Web Interface To configure a DHCP Snooping in the web interface 1 Select Enabled in the Mode of DHCP Snooping Configuration 2 Select Trusted of the specific port in the Mode of Port Mode Configuration 3 Click Save Figure 4 3 1 The DHCP Snooping Configuration Parameter description Snooping Mode Indicates the DHCP snooping mode operation Possible modes are Ena...

Страница 219: ...ort mode Possible port modes are Trusted Configures the port as trusted source of the DHCP messages Untrusted Configures the port as untrusted source of the DHCP messages Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values ...

Страница 220: ... Tx Offer The number of offer option 53 with value 2 packets received and transmitted Rx and Tx Request The number of request option 53 with value 3 packets received and transmitted Rx and Tx Decline The number of decline option 53 with value 4 packets received and transmitted Rx and Tx ACK The number of ACK option 53 with value 5 packets received and transmitted Rx and Tx NAK The number of NAK op...

Страница 221: ... The number of lease active option 53 with value 13 packets received and transmitted Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right icon Refresh Clear You can click them for refresh the DHCP Snooping Port Statistics by manual others for clear to clean up the entries ...

Страница 222: ...Parameter description Relay Mode Indicates the DHCP relay mode operation Possible modes are Enabled Enable DHCP relay mode operation When DHCP relay mode operation is enabled the agent forwards and transfers DHCP messages between the clients and the server when they are not in the same subnet domain And the DHCP broadcast message won t be flooded for security considerations Disabled Disable DHCP r...

Страница 223: ...nly works under DHCP if relay information operation mode is enabled Possible policies are Replace Replace the original relay information when a DHCP message that already contains it is received Keep Keep the original relay information when a DHCP message that already contains it is received Drop Drop the package when a DHCP message that already contains relay information is received Buttons Save C...

Страница 224: ...sent to clients Receive from Server The number of packets received from server Receive Missing Agent Option The number of packets received without agent information options Receive Missing Circuit ID The number of packets received with the Circuit ID option missing Receive Missing Remote ID The number of packets received with the Remote ID option missing Receive Bad Circuit ID The number of packet...

Страница 225: ... number of packets whose relay agent information was retained Drop Agent Option The number of packets that were dropped which were received with relay agent information Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right icon Refresh Clear You can click them for refresh the DHCP Relay Statistics by manual others for clear to clean up t...

Страница 226: ...ration consists of two sections a system and a port wide Web Interface To configure a System Configuration of Network Access Server in the web interface 1 Select Enabled in the Mode of Network Access Server Configuration 2 Checked Re authentication Enabled 3 Set Re authentication Period Default is 3600 seconds 4 Set EAPOL Timeout Default is 30 seconds 5 Set Aging Period Default is 300 seconds 6 Se...

Страница 227: ...rt Security module to secure MAC addresses the Port Security module needs to check for activity on the MAC address in question at regular intervals and free resources if no activity is seen within a given period of time This parameter controls exactly this period and can be set to a number between 10 and 1000000 seconds If reauthentication is enabled and the port is in an 802 1X based mode this is...

Страница 228: ... access on which 802 1X unaware clients are placed after a network administrator defined timeout The switch follows a set of rules for entering and leaving the Guest VLAN as listed below The Guest VLAN Enabled checkbox provides a quick way to globally enable disable Guest VLAN functionality When checked the individual ports ditto setting determines whether the port can be moved into Guest VLAN Whe...

Страница 229: ...e switch uses it to open up or block traffic on the switch port connected to the supplicant NOTE Suppose two backend servers are enabled and the server timeout is configured to X seconds using the AAA configuration page and suppose that the first server in the list is current down but not considered dead Now if the supplicant retransmits EAPOL Start frames at a rate faster than X seconds then it w...

Страница 230: ...y a client is snooped by the switch which in turn uses the client s MAC address as both username and password in the subsequent EAP exchange with the RADIUS server The 6 byte MAC address is converted to a string on the following form xx xx xx xx xx xx that is a dash is used as separator between the lower cased hexadecimal digits The switch only supports the MD5 Challenge authentication method so t...

Страница 231: ...ediately reverted to the original VLAN ID which may be changed by the administrator in the meanwhile without affecting the RADIUS assigned This option is only available for single client modes i e Port based 802 1X Single 802 1X For trouble shooting VLAN assignments use the Monitor VLANs VLAN Membership and VLAN Port pages These pages show which modules have temporarily overridden the current Port...

Страница 232: ...ort mode If an EAPOL frame is received the port will never be able to go back into the Guest VLAN if the Allow Guest VLAN if EAPOL Seen is disabled Port State The current state of the port It can undertake one of the following values Globally Disabled NAS is globally disabled Link Down NAS is globally enabled but there is no link on the port Authorized The port is in Force Authorized or a single s...

Страница 233: ...e state Refer to NAS Admin State for a description of possible values Port State The current state of the port Refer to NAS Port State for a description of the individual states Last Source The source MAC address carried in the most recently received EAPOL frame for EAPOL based authentication and the most recently received frame from a new client for MAC based authentication Last ID The user name ...

Страница 234: ...assigned by the RADIUS server RADIUS assigned is appended to the VLAN ID Read more about RADIUS assigned VLANs here If the port is moved to the Guest VLAN Guest is appended to the VLAN ID Read more about Guest VLANs here Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right icon Refresh You can click them for refresh the NAS Switch Statu...

Страница 235: ...tate of the port Refer to NAS Port State for a description of the individual states QoS Class The QoS class assigned by the RADIUS server The field is blank if no QoS class is assigned Port VLAN ID The VLAN ID that NAS has put the port in The field is blank if the Port VLAN ID is not overridden by NAS If the VLAN ID is assigned by the RADIUS server RADIUS assigned is appended to the VLAN ID Read m...

Страница 236: ...dentity Shows the identity of the supplicant as received in the Response Identity EAPOL frame Clicking the link causes the supplicant s EAPOL and Backend Server counters to be shown in the Selected Counters table If no supplicants are attached it shows No supplicants attached This column is not available for MAC based Auth MAC Address For Multi 802 1X this column holds the MAC address of the attac...

Страница 237: ...authentication of the client successful as well as unsuccessful Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right icon Refresh Clear You can click them for refresh the NAS Statistics by manual Others you can click clear to clean up all entries ...

Страница 238: ... in the Failback to Local Authorization 3 Select Enabled in the Account To configure a RADIUS Authentication Server Configuration of AAA in the web interface Check Enabled 2 Specify IP address or Hostname for Radius Server 3 Specify Authentication Port for Radius Server Default is 1812 4 Specify the Secret with Radius Server To configure a RADIUS Accounting Server Configuration of AAA in the web i...

Страница 239: ...imeframe we will consider it to be dead and continue with the next enabled server if any RADIUS servers are using the UDP protocol which is unreliable by design In order to cope with lost frames the timeout interval is divided into 3 subintervals of equal length If a reply is not received within the subinterval the request is transmitted again This algorithm causes the RADIUS server to be queried ...

Страница 240: ...set to 0 zero the default port 1812 is used on the RADIUS Authentication Server Secret The secret up to 29 characters long shared between the RADIUS Authentication Server and the switch RADIUS Accounting Server Configuration The table has one row for each RADIUS Accounting Server and a number of columns which are The RADIUS Accounting Server number for which the configuration below applies Enabled...

Страница 241: ...o use on the TACACS Authentication Server If the port is set to 0 zero the default port 49 is used on the TACACS Authentication Server Secret The secret up to 29 characters long shared between the TACACS Authentication Server and the switch Buttons Save Click to save changes Reset Click to undo any changes made locally and revert to previous saved values ...

Страница 242: ...he server is disabled Not Ready The server is enabled but IP communication is not yet up and running Ready The server is enabled IP communication is up and running and the RADIUS module is ready to accept access attempts Dead X seconds left Access attempts were made to this server but it did not reply within the configured timeout The server has temporarily been disabled but will get re enabled wh...

Страница 243: ...but it did not reply within the configured timeout The server has temporarily been disabled but will get re enabled when the dead time expires The number of seconds left before this occurs is displayed in parentheses This state is only reachable when more than one server is enabled Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right ic...

Страница 244: ...B Web Interface To configure a RADIUS Details Configuration in the web interface 1 Specify Port which want to check 2 Checked Auto refresh Figure 4 6 3 The RADIUS Authentication Statistics Server Parameter description Auto refresh To evoke the auto refresh icon then the device will refresh the information automatically Upper right icon Refresh Clear You can click them for refresh the RADIUS Statis...

Страница 245: ...interface by limiting and identifying MAC addresses Web Interface To configure a System Configuration of Limit Control in the web interface 1 Select Enabled in the Mode of System Configuration 2 Checked Aging Enabled 3 Set Aging Period Default is 3600 seconds To configure a Port Configuration of Limit Control in the web interface 1 Select Enabled in the Mode of Port Configuration 2 Specify the max...

Страница 246: ...frames are not seen within the next Aging Period the end host is assumed to be disconnected and the corresponding resources are freed on the switch Port Configuration The table has one row for each port on the selected switch and a number of columns which are Port The port number to which the configuration below applies Mode Controls whether Limit Control is enabled on this port Both this and the ...

Страница 247: ...ll actions Limit Reached Indicates that the limit is reached on this port This state can only be shown if Action is set to None or Trap Shutdown Indicates that the port is shut down by the Limit Control module This state can only be shown if Action is set to Shutdown or Trap Shutdown Re open Button If a port is shutdown by this module you may reopen it by clicking this button which will only be en...

Страница 248: ...the forwarding state all enabled user modules must unanimously agree on allowing the MAC address to forward If only one chooses to block it it will be blocked until that user module decides otherwise The status page is divided into two sections one with a legend of user modules and one with the actual port status Web Interface To configure a Port Security Switch Status Configuration in the web int...

Страница 249: ...that the limit is reached and no more MAC addresses should be taken in Shutdown The Port Security service is enabled by at least the Limit Control user module and that module has indicated that the limit is exceeded No MAC addresses can be learned on the port until it is administratively re opened on the Limit Control configuration Web page MAC Count Current Limit The two columns indicate the numb...

Страница 250: ...AC Address VLAN ID The MAC address and VLAN ID that is seen on this port If no MAC addresses are learned a single row stating No MAC addresses attached is displayed State Indicates whether the corresponding MAC address is blocked or forwarding In the blocked state it will not be allowed to transmit or receive traffic Time of Addition Shows the date and time when this MAC address was first seen on ...

Страница 251: ...he web interface 1 Select Enabled in the Mode of Access Management Configuration 2 Click Add new entry 3 Specify the Start IP Address End IP Address 4 Checked Access Management method HTTP HTTPS SNMP and TELNET SSH in the entry 5 Click Save Figure 4 8 1 The Access Management Configuration Parameter description Mode Indicates the access management mode operation Possible modes are Enabled Enable ac...

Страница 252: ... entry SNMP Indicates that the host can access the switch from SNMP interface if the host IP address matches the IP address range provided in the entry TELNET SSH Indicates that the host can access the switch from TELNET SSH interface if the host IP address matches the IP address range provided in the entry Buttons Save Click to save changes Reset Click to undo any changes made locally and revert ...

Страница 253: ...eived Packets Number of received packets from the interface when access management mode is enabled Allowed Packets Number of allowed packets from the interface when access management mode is enabled Discarded Packets Number of discarded packets from the interface when access management mode is enabled Auto refresh To evoke the auto refresh icon then the device will refresh the information automati...

Страница 254: ... secure encrypted communication Web Interface To configure a SSH Configuration in the web interface 1 Select Enabled in the Mode of SSH Configuration 2 Click Save Figure 4 9 1 The SSH Configuration Parameter description Mode Indicates the SSH mode operation Possible modes are Enabled Enable SSH mode operation Disabled Disable SSH mode operation Buttons Save Click to save changes Reset Click to und...

Страница 255: ...TPS Configuration 2 Select Enabled in the Automatic Redirect of HTTPS Configuration 3 Click Save Figure 4 10 1 The HTTPS Configuration Parameter description Mode Indicates the HTTPS mode operation Possible modes are Enabled Enable HTTPS mode operation Disabled Disable HTTPS mode operation Automatic Redirect Indicates the HTTPS redirect mode operation Automatically redirect web browser to HTTPS whe...

Страница 256: ...client for which the configuration below applies Authentication Method Authentication Method can be set to one of the following values none authentication is disabled and login is not possible local use the local user database on the switch for authentication radius use a remote RADIUS server for authentication tacacs use a remote TACACS server for authentication Fallback Enable fallback to local ...

Страница 257: ...ch for any maintenance needs Any configuration files or scripts that you saved in the switch should still be available afterwards Web Interface To configure a Restart Device Configuration in the web interface 1 Chick Restart Device 2 Click Yes Figure 5 1 1 The Restart Device Parameter description Restart Device You can restart the switch on this page After restart the switch will boot normally But...

Страница 258: ...L and filename Upload Click the Upload button then the switch will start to upload the firmware from firmware stored location PC or Server NOTE This page facilitates an update of the firmware controlling the switch Uploading software will update all managed switches to the location of a software image and click After the software image is uploaded a page announces that the firmware update is initi...

Страница 259: ... Selection in the web interface 1 Chick Activate Alternate Image 2 Click yes to complete firmware selection Figure 5 2 2 The Firmware Selection Parameter description Activate Alternate Image Click to use the alternate image This button may be disabled depending on system state Cancel Cancel activating the backup image Navigates away from this page Image The flash index name of the firmware image T...

Страница 260: ...se the Activate Alternate Image button is also disabled 2 If the alternate image is active due to a corruption of the primary image or by manual intervention uploading a new firmware image to the device will automatically use the primary image slot and activate this 3 The firmware version and date information may be empty for older firmware releases This does not constitute an error ...

Страница 261: ...lts Configuration in the web interface 1 Chick Factory Defaults 2 Click Yes Figure 5 3 1 The Factory Defaults Parameter description Buttons Yes Click to Yes button to reset the configuration to Factory Defaults No Click to return to the Port State page without resetting the configuration 5 3 2 Save Start This section describes how to save the Switch Start configuration Any current configuration fi...

Страница 262: ...es Figure 5 3 3 The Save as Backup Configuration Parameter description Buttons Save Click the Save button to save current setting as Backup Configuration 5 3 4 Restore User This section describes how to restore users information back to the switch Any current configuration files will be restored via XML format Web Interface To configure a Restore User Configuration in the web interface 1 Chick Res...

Страница 263: ... export the Switch Configuration for maintenance needs Any current configuration files will be exported as XML format Web Interface To configure an Export Config Configuration in the web interface 1 Chick Save configuration 2 Save the file in your device Figure 5 4 1 The Restore the Backup Configuration Parameter description Save Click the Save button to store the Configuration to the PC or Server...

Страница 264: ...s XML format Web Interface To configure an Import Config Configuration in the web interface 1 Chick Browser to select the config file in you device 2 Click Upload Figure 5 4 2 The Import Config Parameter description Browse Click the Browse button to search the Configuration URL and filename Upload Click the Upload button then the switch will start to upload the configuration from configuration sto...

Страница 265: ...ss of device what you want to ping it Ping Size To set the ICMP Packet size to ping the other device Start Click the Start button then the switch will start to ping the device using ICMP packet size what set on the switch After you press 5 ICMP packets are transmitted and the sequence number and roundtrip time are displayed upon reception of a reply The page refreshes automatically until responses...

Страница 266: ...rt Click the Start button then the switch will start to ping the device using ICMPv6 packet size what set on the switch After you press 5 ICMPv6 packets are transmitted and the sequence number and roundtrip time are displayed upon reception of a reply The page refreshes automatically until responses to all packets are received or until a timeout occurs PING server 10 10 132 20 64 bytes from 10 10 ...

Страница 267: ... of length 7 140 meters 10 and 100 Mbps ports will be linked down while running VeriPHY Therefore running VeriPHY on a 10 or 100 Mbps management port will cause the switch to stop responding until VeriPHY is completed Web Interface To configure a VeriPHY Cable Diagnostics Configuration in the web interface 1 Specify Port which want to check 2 Click Start Figure 5 5 3 The VeriPHY Parameter descript...

Страница 268: ... Policy 1 ingress port or any ingress port the whole switch If an ACE Policy is created then that Policy can be associated with a group of ports under the Ports web page There are number of parameters that can be configured with an ACE Read the Web page help text to get further information for each of them The maximum number of ACEs is 64 ACL Ports The ACL Ports configuration is used to assign a P...

Страница 269: ...a OAM frame transmitted from a MEP to it s peer MEP and used to implement CC functionality CDP CDP is an acronym for Cisco Discovery Protocol D DEI DEI is an acronym for Drop Eligible Indicator It is a 1 bit field in the VLAN tag DES DES is an acronym for Data Encryption Standard It provides a complete description of a mathematical algorithm for encrypting enciphering and decrypting deciphering bi...

Страница 270: ...meter of module_id is the third byte for the module ID in standalone switch it always equal 0 The parameter of port_no is the fourth byte and it means the port number The Remote ID is 6 bytes in length and the value is equal the DHCP relay agents MAC address DHCP Snooping DHCP Snooping is used to block intruder on the untrusted ports of the switch device when it tries to intervene by injecting a b...

Страница 271: ...TP defines how messages are formatted and transmitted and what actions Web servers and browsers should take in response to various commands The other main standard that controls how the World Wide Web works is HTML which covers how Web pages are formatted and displayed Any Web server machine contains in addition to the Web page files it can serve an HTTP daemon a program that is designed to wait f...

Страница 272: ...IMAP clients use to communicate with the servers and SMTP is the protocol used to transport mail to an IMAP server The current version of the Internet Message Access Protocol is IMAP4 It is similar to Post Office Protocol version 3 POP3 but offers additional and more complex features For example the IMAP4 protocol leaves your email messages on the server rather than downloading them to your comput...

Страница 273: ...of the entity or entities that provide management of those capabilities and the identification of the stations point of attachment to the IEEE 802 LAN required by those management entity or entities The information distributed via this protocol is stored by its recipients in a standard Management Information Base MIB making it possible for the information to be accessed by a Network Management Sys...

Страница 274: ...VLANs The main reason for using MVR is to save bandwidth by preventing duplicate multicast streams being sent in the core network instead the stream s are received on the MVR VLAN and forwarded to the VLANs where hosts have requested it them Wikipedia N NAS NAS is an acronym for Network Access Server The NAS is meant to act as a gateway to guard access to a protected source A client connects to th...

Страница 275: ...r the 802 1Q frame It is also known as User Priority PD PD is an acronym for Powered Device In a PoE system the power is delivered from a PSE power sourcing equipment to a remote device The remote device is called a PD PHY PHY is an abbreviation for Physical Interface Transceiver and is the device that implement the Ethernet physical layer IEEE 802 3 PING ping is a program that sends a series of p...

Страница 276: ...Private VLAN In a private VLAN communication between ports in that private VLAN is not permitted A VLAN can be configured as a private VLAN PTP PTP is an acronym for Precision Time Protocol a network protocol for synchronizing the clocks of computer systems Q QCE QCE is an acronym for QoS Control Entry It describes QoS class associated with a particular QCE ID There are six QCE frame types Etherne...

Страница 277: ...he NIST as a U S Federal Information Processing Standard Hash algorithms compute a fixed length digital representation known as a message digest of an input data sequence the message of any length Shaper A shaper can limit the bandwidth of transmitted frames It is located after the ingress queues SMTP SMTP is an acronym for Simple Mail Transfer Protocol It is a text based protocol that uses the Tr...

Страница 278: ...twork clock frequency synchronized Not to be confused with real time clock synchronized IEEE 1588 T TACACS TACACS is an acronym for Terminal Access Controller Access Control System Plus It is a networking protocol which provides access control for routers network access servers and other networked computing devices via one or more centralized servers TACACS provides separate authentication authori...

Страница 279: ... port numbers to help distinguish different user requests and optionally a checksum capability to verify that the data arrived intact Common network applications that use UDP include the Domain Name System DNS streaming media applications such as IPTV Voice over IP VoIP and Trivial File Transfer Protocol TFTP User Priority User Priority is a 3 bit field storing the priority level for the 802 1Q fr...

Страница 280: ...ed to the provider port with a double VLAN tag VLAN ID VLAN ID is a 12 bit field specifying the VLAN to which the frame belongs Voice VLAN Voice VLAN is VLAN configured specially for voice traffic By adding the ports with voice devices attached to voice VLAN we can perform QoS related configuration for voice data ensuring the transmission priority of voice traffic and voice quality ...

Результаты поиска

Содержание WPoE-2426

Отзывы:

WELLTECH WPoE-2426, Руководство пользователя, Страница: 238 / 280

Результаты поиска

Содержание WPoE-2426

Отзывы: