ZIV SW3 Скачать руководство пользователя страница 53

Страница: 53 / 122

SW3

GIGABIT/FAST ETHERNET SWITCH TYPE SW3 (DIN)

53/122

USER GUIDE - M0SW3D1905Iv04 - V04 May 2019

FIGURE 28

QoS

menu configuration page

5.8

PORTS MONITORING CONFIGURATION

This menu performs

Port mirroring

functions in the ports in order to monitor their

behaviour.

The

incoming and/or outgoing

traffic from a specific port (Monitored port) is replicated in

a target port to be monitored through a protocol analyzer, for example.

The menu parameters are divided into two quite different blocks, which are:

Incoming traffic monitoring (

Ingress Monitoring

Outgoing traffic monitoring (

Egress Monitoring)

Содержание SW3

Страница 1: ...de les Ci ncies 149 151 08908 L Hospitalet de Llobregat Barcelona Spain Tel 34 933 490 700 Fax 34 933 492 258 Mail to ziv zivautomation com www zivautomation com GIGABIT FAST ETHERNET SWITCH TYPE SW3...

Страница 2: ...BOLS WARNING OR CAUTION This symbol denotes a hazard Not following the indicated procedure operation or alike could mean total or partial breakdown of the equipment or even injury to the personnel han...

Страница 3: ...ories 11 1 4 4 Equipment management 13 1 4 5 Additional services 13 1 4 6 Certifications 13 1 4 7 Mechanical characteristics 13 1 4 8 Operating conditions 13 1 5 WARNINGS 15 1 5 1 Warnings before inst...

Страница 4: ...l 35 5 1 3 Others 36 5 1 4 Syslog 36 5 2 ADMINISTRATION 37 5 3 LAN CONFIGURATION 38 5 4 ETHERNET PORTS CONFIGURATION 39 5 5 VLAN CONFIGURATION 43 5 6 BANDWIDTH LIMIT CONFIGURATION 48 5 7 QOS CONFIGURA...

Страница 5: ...ION FILE 79 5 19 1 Upload from the PC to the equipment 79 5 19 2 Download from the equipment to the PC 80 5 20 EVENT FILES 80 6 STATISTICS 81 APPENDIX A BIBLIOGRAPHY AND ABBREVIATIONS 85 A 1 BIBLIOGRA...

Страница 6: ...NTP TACACS and RADIUS 1 2 MAIN CHARACTERISTICS Some of the SW3 most important features are described below Grouping of services and architectures Services may be grouped and discriminated some not bei...

Страница 7: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 7 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 1 Traffic separation FIGURE 2 Star topology...

Страница 8: ...RSTP protocol the connection entity is the LAG group identifier In this way the different links that are part of the LAG are not handled individually and are not considered a loop and thus it provides...

Страница 9: ...ues of the VLAN or for transiting data over third party networks FIGURE 4 Q in Q operation Advanced RSTP implementation The SW3 not only complies with the STP and RSTP protocols for resolving loops in...

Страница 10: ...the selective transmission of the multicast traffic desired by each of them IGMP The SW3 manages multicast traffic based on the IGMP messages exchanged by the client devices and the multicast routers...

Страница 11: ...ion static according to IEEE 802 1ad Port mirroring Links in VLAN Native mode Interoperability with IEDs Intelligent Electronic Device that complies with the IEC 61850 requirements 1 4 2 Equipment int...

Страница 12: ...type of connector LC type of fiber singlemode wavelength 1310 nm typical maximum distance 40 km SFP 100BaseFx 4CZ07980006 type of connector LC type of fiber singlemode wavelength 1310 nm typical maxi...

Страница 13: ...or industrial applications Designed for Electrical Substations 1 4 7 Mechanical characteristics Mechanical enclosure suitable for DIN rail mounting EN 50022 BS 5584 DIN 46277 3 Dimensions Height 167 m...

Страница 14: ...ance with EN 61000 4 4 standard Surge immunity test in accordance with EN 61000 4 5 standard Immunity to conducted disturbances induced by radio frequency fields in accordance with EN 61000 4 6 standa...

Страница 15: ...any that will use these devices and the Safety standards EN 50110 2 In order to install and handle the SW3 the following points must be complied with Only qualified personnel appointed by the electric...

Страница 16: ...r any injury to persons or third parties caused by the non fulfilment of point 1 1 The terminal contains components sensitive to static electricity the following must be observed when handling it Pers...

Страница 17: ...22 USER GUIDE M0SW3D1905Iv04 V04 May 2019 2 MECHANICAL AND ELECTRICAL CHARACTERISTICS The diverse elements comprising the SW3 are supplied in a box suitable for DIN rail mounting see FIGURE 5 and FIGU...

Страница 18: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 18 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 6 Detail of the DIN rail fastening element Inserting Removing...

Страница 19: ...ctor shown in FIGURE 7 The female connector supplied with the equipment is suitable for rigid or flexible conductors of up to 2 5 mm2 An earth connection is available see FIGURE 7 When using the multi...

Страница 20: ...ST connectors It also has two Gigabit Ethernet SFP bays FIGURE 8 Front view of the SW3 a 8 RJ 45 connectors b 4 RJ 45 connectors and 4 MT RJ connectors Sections 2 1 to 2 6 give the electrical charact...

Страница 21: ...unshielded twisted 4 pair category five cable UTP 5 with 8 pin RJ 45 connectors The cable length should not be more than 100 m The UTP 5 cable is made up of eight copper wires that form the four twis...

Страница 22: ...22 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 10 Unshielded twisted pair category five cable UTP 5 with RJ 45 connector according to ANSI TIA EIA 568 A standard FIGURE 11 Signals of the RJ 45...

Страница 23: ...on should be a fiber optic cable made up of two multimode optical fibers one to transmit data and the other to receive it Each of the fibers should be 125 m in diameter The core and the cladding of th...

Страница 24: ...multimode optical fibers one to transmit data and the other to receive it Each of the fibers should be 125 m in diameter The core and the cladding of the fiber are included in this diameter as can be...

Страница 25: ...the LC type connectors have a protective cap 2 5 SFP PORTS The bays available in the front plate of the equipment admit the installation of SFP Small Form Factor Pluggable modules which provide optic...

Страница 26: ...module is the following 1 Disconnect the optical fiber from the connector of the SFP module 2 Pull down the transceiver security lever 3 Whilst the security lever down remove the port from the module...

Страница 27: ...s of the maintenance connector and its use are indicated below The connector has a protective cap FIGURE 16 Location of the SRV maintenance connector Pin RS 232 2 RD Out 3 TD In 5 GND SRV CONNECTOR DC...

Страница 28: ...he Fast Ethernet ports and SFP modules FIGURE 17 shows a front view of the SW3 showing the detail of the different LEDs They are described below FIGURE 17 LEDs in the SW3 Basic LEDs SRV LED Amber It f...

Страница 29: ...with 100Base Fx multimode MT RJ or upon request LC or ST ports Speed Link Ac LED Green There is one LED per port It stays on when the link is established correctly and flashes in the case of emission...

Страница 30: ...able commands that is obtained by running the help command The data are grouped virtually into directories and subdirectories To browse through the directories the cd change directory command is used...

Страница 31: ...not being able to obtain access Access can also be obtained to the console remotely through SSH connection and Telnet 4 2 HTTP SERVER The HTTP server included provides access to the HTML pages giving...

Страница 32: ...bled data are explicitly shown as buttons labelled Add and Delete located on each of the objects that use them The factory IP address of the equipment is 192 168 0 1 meaning it is possible to access t...

Страница 33: ...execute the Apply command which entails the immediate use of the changes made the second is to execute the Save command which means that the changes will be operative once the equipment is rebooted If...

Страница 34: ...alidates the user identity In addition to the configuration parameters which will be described in the following sections as shown in the figure the system provides information about the equipment soft...

Страница 35: ...e SNMP data 5 1 2 Access control Access control allows the user logins and associated passwords to be determined for the two pre set profiles guest and admin The guest profile can only access query op...

Страница 36: ...ight be the loss of the primary ISP connection Critical Level 3 May be used to indicate a failure in the system s primary application Error Level 4 An application has exceeded it file storage limit an...

Страница 37: ...ormation is sent The system can order the selective activation deactivation of log information associated to some operating blocks see command log Through CLI it is possible to consult the local log f...

Страница 38: ...Administration menu configuration page The procedure for the installation of the certificates is described in section B 4 of APPENDIX B Data structure in CLI 5 3 LAN CONFIGURATION The LAN menu has th...

Страница 39: ...hows the own Ethernet MAC address of the switch FIGURE 21 LAN menu configuration page 5 4 ETHERNET PORTS CONFIGURATION The Ports menu permits the configuration of the operating parameters of the Gigab...

Страница 40: ...ate always untagged without tag Trunk All the frames will in all cases be transmitted with a tag It is the specific mode for connection with other switching devices so as preserve the VLAN information...

Страница 41: ...de other than Auto is configured both ends of the link must be identically configured For 100Base Fx ports only values 100 Mbit s Full duplex 100fdx and 100 Mbit s Half duplex 100hdx have sense so any...

Страница 42: ...ng in QinQ Core mode the VLAN identifiers that are included in this parameter determine which QinQ Access interfaces are to be served through each interface those whose VID parameter is part of the AC...

Страница 43: ...q The tag allows several VLANs to share resources including switching devices such as the SW3 or links between switching units with the guarantee that the traffic from each VLAN will reach the correct...

Страница 44: ...mode is IVL Independent VLAN Learning by default The equipment operates in SVL mode Shared VLAN Learning with the option selected The SVL Overlapping Enabled mode is necessary when using topologies wi...

Страница 45: ...escriptive field available to users VID It sets the VLAN identifier Valid values are 1 to 4095 PRI Override This sets whether the priority of the frames received in the ports assigned to the VLAN VID...

Страница 46: ...ates that the VLAN VID will be sent with double tagging Name A mnemonic descriptive field available to users The VID identifiers that are configured for the Q in Q function will be used in the S Tag a...

Страница 47: ...ommunity Isolated Community Trunk Input port Isolated NO YES NO NO YES Promiscuous YES YES YES YES YES Community NO YES YES for ports sharing community NO YES Isolated Community NO YES NO YES for port...

Страница 48: ...and can not do so with each other Devices connected to the VLAN 300 can communicate with devices located in the WAN and with the rest of devices connected in the same VLAN analogously for devices with...

Страница 49: ...tion transmission mode where an emitting node sends information to all the receivers simultaneously Multicast refers to the multi diffusion messages which are directed towards to the members of a mult...

Страница 50: ...cation and service policy and selects the conditions in which it will be treated by the equipment The equipment provides QoS at level 2 switching Level 2 QoS is performed on switched traffic adjusted...

Страница 51: ...in accordance with the rules of the VLANs submenu in such a way that the priority may be overridden If on the contrary they only include the priority they are processed in accordance with the section...

Страница 52: ...es received do not include an 802 1p tag The assigning of internal priorities is done based on the values selected in the section entitled Priority Use IEEE 802 1p The enabled option indicates that th...

Страница 53: ...roring functions in the ports in order to monitor their behaviour The incoming and or outgoing traffic from a specific port Monitored port is replicated in a target port to be monitored through a prot...

Страница 54: ...or ports to be monitored The incoming traffic in each one of the selected ports will be replicated in the target port Target port It sets the port where the replicated packets will be sent to be monit...

Страница 55: ...TION LLDP is a standard protocol of the link layer used to announce identity and capabilities to neighbouring devices in local area networks Both the information transmitted and the information receiv...

Страница 56: ...ed in the LLDP messages sent by the agent 4 is the default value and recommended Valid values are 1 to 100 Reinit It sets the period of time between the setting of Admin Status as disabled and the rei...

Страница 57: ...sent The value of the parameter is obtained automatically from the running firmware so it is not subject to changes by the user SysCap Indicates to the LLDP agent whether or not to include the optiona...

Страница 58: ...one read only rights ro or reading writing rights rw The profiles are called communities User Parameter associated with SNMPv3 Tabulate information that allows the users including the privileges and...

Страница 59: ...n with which it will be coded the IP address of the addressee and the UDP port to which the messages will be sent The default value set in the standard is port 162 It can be changed to adapt to the op...

Страница 60: ...kups in case of potential topological changes The final result is that the active interfaces of each device end up forming a tree structure with no loops from the root device If the device is to be in...

Страница 61: ...econds and valid values are 6 to 40 seconds Hello Time This parameter sets the time between sending BPDU messages the STP protocol messages The default and maximum value is 2 seconds Forward Delay Thi...

Страница 62: ...l 2 switching devices connected to the interface This is useful in cases in which the type of devices to be connected is not known The last and fourth mode redundant is specifically designed for pairs...

Страница 63: ...the interfaces operating in edge mode This parameter is only effective when the operating state of the interface is edge and this situation is only possible when the Edge parameter is configured as on...

Страница 64: ...GURE 35 NTP SNTP menu configuration page The general usage parameters are Enable Enables disables the execution of the NTP client The client is operative when the option is selected Protocol This sets...

Страница 65: ...roadcast Enables the acceptance of NTP messages that are received with broadcast address The SNTP client only supports the configuration of a server and the necessary parameters are IP IP address of t...

Страница 66: ...tes by explicit register of the client devices in the network switches GARP is a base protocol on which GMRP operates GARP requires the configuration of timers see FIGURE 36 FIGURE 36 GARP Timers menu...

Страница 67: ...DIN 67 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 37 Example of using the GARP GMRP or IGMP Snooping a Network that does NOT use Multicast configuration protocols b Network that uses GARP GMRP...

Страница 68: ...ses In networks with multiple switches the configuration must be done in each of them FIGURE 38 Static configuration page of Multicast menu The parameters for creating the list of multicast MACs are t...

Страница 69: ...an operate properly This option is performed by configuring the registers of the Static zone Unlike purely manual operation the execution of the protocol involves the automatic propagation of applicat...

Страница 70: ...sumes that requests won t be accepted by the client devices for the group address and that only the multicast traffic registered in the interface will be treated FIGURE 39 GMRP configuration page of M...

Страница 71: ...s where there are devices actively participating in multicast groups the objective is to limit selective data transmission based on the obtained information Enable A simple CheckBox to set if the IGMP...

Страница 72: ...a HTTP server web and telnet Local users predefined in the system are always present but an external resource can be used to validate users for different types of access for which reason the user data...

Страница 73: ...configured in the TACACS server queried Admin Privilege Level This sets the privilege level 0 to 15 in the request to the TACACS server to gain access as administrator user admin The privilege level m...

Страница 74: ...for which reason it is not configurable 5 15 SECURITY CONFIGURATION This menu allows traffic restrictions to be imposed depending on the MAC addresses of the clients The equipment admits two modes for...

Страница 75: ...cation through access to a RADIUS server The general configuration parameters are the following Enable A simple CheckBox parameter to set if the RADIUS client as well as the 802 1x authentication is a...

Страница 76: ...exceeded Valid values in seconds are 1 to 65535 IP address It sets the RADIUS server IP address UDP port It sets the UDP port to which the RADIUS client will send requests to the server The default va...

Страница 77: ...ted VID fields in the VLANs menu A group of discreet vlans is configured with the identifier of each one separated by a comma without spaces If a range is to be included the initial and final vlan ide...

Страница 78: ...ess this is expressly indicated Nevertheless once terminated it entails a momentary loss of service due to the automatic rebooting of the unit A binary image is necessary which can be selected by pres...

Страница 79: ...variables are valid and that the values assigned to them comply with the existing syntactic requirements If errors are detected in the received file irrespective of whether the Only verify option is s...

Страница 80: ...n the user can download different log files in txt format FIGURE 48 Event Files configuration page The total event log General Log log txt the most relevant event log General Events events txt the aut...

Страница 81: ...s Ports the MAC addresses identified by the switch Macs STP protocol STP execution data and information obtained through the LLDP protocol LLDP and the synchronization client NTP each of which can be...

Страница 82: ...ST ETHERNET SWITCH TYPE SW3 DIN 82 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 50 Example of basic statistics of Ethernet ports FIGURE 51 Example of statistics detail of a specific port selectio...

Страница 83: ...FAST ETHERNET SWITCH TYPE SW3 DIN 83 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 52 Example of statistics of the MAC addresses identified by the switch FIGURE 53 Example of statistics of the ST...

Страница 84: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 84 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 54 Example of statistics of the LLDP protocol FIGURE 55 Example of statistics of NTP client...

Страница 85: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 85 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 APPENDIX A BIBLIOGRAPHY AND ABBREVIATIONS...

Страница 86: ...tion Implementation and Analysis A 2 ABBREVIATIONS ADSL Asymmetric Digital Subscriber Line AES Advanced Encryption Standard API Application Programming Interface APN Access Point Name ASDU Application...

Страница 87: ...cal Area Network NAT Network Address Translation NHRP Next Hop Resolution Protocol NTP Network Time Protocol PPP Point to Point Protocol PPTP Point to Point Tunneling Protocol PSTN Public Switched Tel...

Страница 88: ...04 V04 May 2019 VLAN Virtual Local Area Network VPN Virtual Private Network VRID Virtual Router Identifier VRRP Virtual Router Redundancy Protocol WAN Wide Area Network WEP Wired Equivalent Privacy WI...

Страница 89: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 89 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 APPENDIX B DATA STRUCTURE IN CLI...

Страница 90: ...ucture as it contains several attributes E g nat A name with nothing after it is a parameter itself E g action B 1 ACCESS METHODS There are two ways of accessing the equipment through the CLI user con...

Страница 91: ...905Iv04 V04 May 2019 FIGURE 56 Location of HyperTerminal in Windows XP On opening HyperTerminal a text box appears requesting the necessary information to establish the connection see FIGURE 57 FIGURE...

Страница 92: ...appear in the HyperTerminal window when entering the password As operating systems like Microsoft Windows 7 no longer include the HyperTerminal program the Putty program free and executable is also c...

Страница 93: ...SW3 GIGABIT FAST ETHERNET SWITCH TYPE SW3 DIN 93 122 USER GUIDE M0SW3D1905Iv04 V04 May 2019 FIGURE 59 Device administrator window FIGURE 60 Connection configuration through the serial port with Putty...

Страница 94: ...eans of Telnet Access in local and remote mode is obtained with the Telnet command and equipment IP address To use this access mode the equipment must have its IP address configured and be connected t...

Страница 95: ...to establish connection with the equipment the equipment login prompt will appear ready for the user to enter the login and code for starting the session the logins and their respective passwords are...

Страница 96: ...pt will change to equipment waiting for the user to enter a command The commands are instructions sent to the equipment to request or change a value or to browse through the tree in which the equipmen...

Страница 97: ...nt directory ping Sends a ping to the indicated host quit Interrupts the connection with the equipment reboot Reboots the equipment reload Loads a previously saved configuration remove Eliminates an i...

Страница 98: ...in the log The events that are generated at the system level and sent to the log include an identification level The system supports 8 different levels separated into two blocks The first set correspo...

Страница 99: ...and nat 2 already existed on running the command add nat the item nat 3 Examples swt add nat swt wan add tunnel tunnel swt admin add nat apply This applies the configuration changes in the equipment b...

Страница 100: ...commands list may be different in each one Example swt downdoad get This show the current values of one or several equipment configuration parameters Syntax swt get name Arguments name optional name o...

Страница 101: ...em will be removed If the number is not indicated the last one will be removed When removing an item that is not the last one the other remaining items will be automatically renumbered Examples swt re...

Страница 102: ...argument must include the parameter name the item number and the attribute number Special attention should be paid when entering the arguments of this command as if no argument is indicated the syste...

Страница 103: ...immediately above it two dots must be entered cd When the directory is changed the prompt shows the equipment identification letters and the name of the active directory Example swt main Examples swt...

Страница 104: ...ful if it is required to reload the configuration saved in the equipment after the time it was saved Example swt reload telnet Open a telnet session keeping the connection established between the comp...

Страница 105: ...ef description of their functions Syntax swt help Arguments Observations Example swt help log Shows the list of events stored in the log file in use current Syntax swt log Arguments Without arguments...

Страница 106: ...ple swt log swt log crit swt log debug ls Shows a list from the active directory This command is useful for verifying whether the configuration parameter to be consulted changed is in the active direc...

Страница 107: ...d as customer txt Example swt show messages swt show messages 0 swt show messages 1 swt show messages 2 swt show messages 3 swt show customer txt stats This shows the equipment status parameters These...

Страница 108: ...seful for monitoring the equipment and detecting potential errors during operation It shows the list of events stored in the log file in use current and it remains to show events as they occur It clos...

Страница 109: ...d that the equipment is connected to a network and with an IP address configured which in the case of this example will be 111 222 0 123 In addition the computer used to make the connection is also co...

Страница 110: ...only want information it makes no difference which login is entered admin o guest Enter guest and then press enter Now the system is waiting for us to enter the respective password Enter passwd01 whic...

Страница 111: ...information extends beyond the edges of the window the system will only show the information at the start and it will be necessary to press enter once or several times for all the information to be sh...

Страница 112: ...text to be copied left click with the mouse and drag the cursor maintaining the button pressed until all the text has been selected After releasing the left button press the enter key That way you wil...

Страница 113: ...ll know whether the system has finished showing all the information when the equipment prompt reappears As with the download command it is useful to save the information in a txt file using the method...

Страница 114: ...oldest log files In this example it is assumed that the equipment is a DRA 2 Remember to save the information in a txt file as indicated above 7 Obtaining events taking place in the equipment in real...

Страница 115: ...3ZWE2ZmM4YjY5Ngo ftp on ftps on cli syslog_level 4 syslog_level_remote 4 syslog off syslog_server 0 0 0 0 eth0 static off ip 192 168 0 1 mask 255 255 255 0 vlanid 1 dgw 0 0 0 0 mac 02 E0 AB 18 D9 3F q...

Страница 116: ...off off mac age_time 300 stp enable on version rstp priority 32768 Press any key to continue or CTRL C to stop A J max_age 20 000000000 hello_time 2 000000000 forward_delay 15 000000000 tx_hold_count...

Страница 117: ...xxxxx client broadcastenable off server server ip type minpoll maxpoll authenable authkey lowtraffic 1 10 212 1 205 unicast 5 10 off 1 off sntp client client ip poll units authenable authkey timeout 1...

Страница 118: ...ess any key to continue or CTRL C to stop A J ssh method local local on ftp method local local on security port port type max_addresses max_action 1 none 10 replace 2 none 10 replace 3 none 10 replace...

Страница 119: ...valid certificate with the command upload cert raw The procedure for loading the certificate is the following Copy in the clipboard the certificate Then execute the indicated upload command and when i...

Страница 120: ...ting that the certificate has not been validated by a trusted authority Select Go to this web site not recommended Then the equipment access control requires the user login and password the equipment...

Страница 121: ...xzEE5mM2hOhWKgaJn0ZEGDqcoIMLj4 E3f 3QIDAQAB nA oGAOvDzYhVKhjodHlUzm3lbsZzAklKAKNorgn8kxbpYE RM8mkV9f Lb3jWhiEu nxy f7m7BmNMcex8bSRwduzrUnK66DW8jP3b2tsxJHLYU9UpN1XKDNBHGvgJ7Gis S nApu oZFYmh34uBl6SJkUd...

Страница 122: ...F1Bz0FPn3LRxC1Mb6PI kNatYteCq5FJNjGunF8hDIQVc1x7O2ju2vmGOiyVfSz1eqiy Tx0dMYsgpBeY3K 8fb J1jmLPNzPhgMlzPK6VGNA70 QhfCG9l5xK1oWQ END CERTIFICATE Example of a valid private key BEGIN RSA PRIVATE KEY MIIC...

Результаты поиска

Содержание SW3

Отзывы:

ZIV SW3, Руководство пользователя, Страница: 53 / 122

Результаты поиска

Содержание SW3

Отзывы: