Planet SGSW-24040R Bedienungsanleitung

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 1 User ’ s Manual WGSW -24040 / WGSW -24040R 24-Port 10/100/1000Mbps Layer 2 Managed Switch SGSW -24040 / SGSW -24040R 24-Port 10/100/1000Mbps Layer 2 Managed S tackable Switch[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 2 T rademarks Copyright © PLANET T echnology Corp. 2008. Contents subject to which revision without prior notice. PLANET is a registered trademark of PLANET T echnology Co rp. All other trademarks belong to their respectiv e owners. Disclaimer PLANET T echnolo gy does not wa[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 3 T ABLE OF CONETNTS 1. INTR ODUTION ................................................................................................................. ... 12 1.1 Packet Content s .................................................................................................[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 4 4. WEB CONF IGURA TION ...................................................................................................... 42 4.1 Main WEB P A GE .............................................................................................................. ..............[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 5 4.6 VL AN ....................................................................................................................... ..................................... 93 4.6.1 VLAN Overview ...................................................................................[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 6 4.10.5 802.1X and MAC-Based Authentication S tatistics .......................................................................... ................. 150 4.10.6 Windows Platform RADIUS Server Conf iguration .....................................................................[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 7 4.16.4 S tack Port S tate Ovewview ............................................................................................... ............................... 204 4.16.5 S tack Example .....................................................................................[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 8 Mirror Mode .................................................................................................................... ..................................... 228 6.3 Link Aggreg ation Command .........................................................................[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 9 RSTP S tat istics ................................................................................................................ .................................... 250 RSTP mC heck..........................................................................................[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 10 Dot1x S tat istics ............................................................................................................... ..................................... 269 Dot1x Cli ents .....................................................................................[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 S tack SID Swap................................................................................................................. .................................. 288 S tack SID Delect .......................................................................................[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 12 1. INTRODUTION The PLANET Layer 2 Managed Gigabit S witch series - WGSW-24040 / WGSW-24040R / SGSW-24040 / SGSW -24040R are al l multiple ports Gigabit Ethernet Switched wi th SFP fiber optical connective abilit y and robust layer 2 features; the description of these model[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 13 QoS and Network Security features make it to meets the needs of effective data traffic control for both Campus and Enterprise, such V oIP , video streaming and multicast ap plication. High Performance The Managed Switch provide s 24 10/100/1000M bps Gigabit Ethernet ports [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 14 Reliability S tacking Management The SGSW Series Managed S witch provides a switch stacki ng function to manage up to 16 switches using a singl e IP address. That helps network managers to easily configure swit ches vi a one single IP address instead of connecting and sett[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 15 1.4 Product Features ¾ Physical Port WGSW-24040 / WGSW-24040R  24-Port 10/100/1000Base-T Gigabit Ethernet RJ-45  4 mini-GBIC/SFP slot s , shared with Port-21 to Port-24  RS-232 DB9 console interfac e for Switch basic management and setup SGSW-24040 / SGSW-24040R [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 16 ¾ Quality of Service  4 priority queues on all s witch ports.  Supports for strict priority and weighted round robin (WRR) CoS po licies  Ingress Shaper and Egress Rate Limit per port band wid th control  T raffic-policing policies on the switch port ¾ Multic[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 17 1.5 Product S pecification Product WGSW-24040 WGSW-24040R SGSW-24040 SGSW-24040R Hardware Specification Copper Ports 24 10/ 100/1000Base-T RJ -45 Auto-MDI/MDI-X ports SFP/mini-GBIC Slot s 4 SFP interfaces, shared with Port-21 to Port-24 St ackin g Port s --- 2 5GbE / Cross[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 18 Port trunking IEEE 802.3ad LACP / S tatic T runk Support 8 groups of 8-Port trunk support QoS T raffic classification based, S trict priority and WRR 4-level priority for switching - Port Number - 802.1p priority - DS/TOS field in IP Pack et IGMP Snoopi ng IGMP (v1/v2) Sno[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 19 2. INSTALLATION This section describes the hard ware features and installation of the Managed Switch on the desktop or rack mount. For easier management and control of the Managed S w itch, familiarize yourself with its di splay indicators, and ports. Front panel illustrat[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 20 ■ Reset button At the left of front p anel, the reset button is designed for reboot the Managed S witch without turn off and on the power . The following is the summary ta ble of Reset butto n functions : Reset Button Pressed and Relea sed Function About 1~3 secon d Rebo[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 21 2.1.2 LED Indications The front panel LEDs indicates instant stat us of port links, data activity , system oper ation, S tack status and system power , he lps monitor and troubleshoot when needed. WGSW-2 4040 / WGSW -24040R LED indication Figure 2-3 WGSW-24040 / WGSW -2404[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 22 ■ 1000Base-SX/LX SFP interfaces (Shared Po rt-21~Port-24) LED Color Function Lights: T o indicate the link through that SF P port is successfully established with speed 1000Mbps 1000 LNK Green Off: T o indicate that the SFP port is link down SGSW-24040 / SGSW -24040R LED[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 23 Lights: T o indicate the link through that port is successfull y established with speed 10Mbps or 100Mbps Blink : T o indicate that the switch is actively sending or receiving data over that port. 10/100 LNK/ACT Orange Off: If 1000 LNK/ACT LED light-> indicate t hat the[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 24 SGSW-24040 Rear Panel Figure 2-7 Rear pa nel of SGSW-24040 SGSW-24040R Rear Panel Figure 2-8 Rear pa nel of SGSW-24040R ■ AC Power Receptacle For compatibility with electric service in most areas of t he world, the Managed S witch’ s power supply automatical ly adjusts[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 25 Figure 2-9 SGSW -24040 / SGSW-24040R S tack Ports ■ DC Power Connector The rear panel of the WGSW-24040R and SGSW-24040R cont ains a power switch and a DC po wer connector , which accepts DC power input voltage from -30V to -60V DC. Co nnect the power cable to the Manage[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 26 2.2 Inst all the Switch This section describes ho w to inst all your Managed S witch and make connections to the Managed Switch. Please read the following topics and perform th e procedures in the order bei ng pres ented. T o install your Mana ged Switch on a desktop or sh[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 27 Step5: Supply power to the Managed S witch. Connect one end of the power cable to the Managed Switch. Connect the power plug of the po wer cable to a standard wall outlet. When the Managed Switch receives po wer , the Po wer LED should remain solid Green. 2.2.2 Rack Mounti[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 28 Figure 2-12 Mounting SGSW-2840 in a Rack Step6: Proceeds with the steps 4 and steps 5 of session 2.2.1 Desktop Installation to connect the network cabling and suppl y power to the Managed Switch. 2.2.3 Inst alling the SFP transceiver The sections describe how to insert an [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 29  Approved PLANET SFP T ransceivers PLANET Managed Switch supports both Single mode and Multi-mode SFP transceiver . The following list of approved PLANET SFP transceivers is correct at the time of publication: ■ MGB-SX SFP (1000BASE-SX SFP trans ceiver / Multi-mode / [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 30 Figure 2-14 Pull out the SFP transceiver Never pull out the module without pull the handle or the push bolts on the module. Direct pull out the module with violent could damage th e module and SFP module slot of the Managed Swit ch.[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 31 2.2. 4 Connecting DC Power Suppl y – WGSW-24040R / SGSW -24040R The WGSW-24040R and SGSW-24040R support -48VDC power inpu t, connect the po wer cable to the switch at the input terminal block. 1. T he size of the two screws in the terminal block is M3.5. 2. T he terminal[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 32 2.3 St ack Inst allation SGSW-24040 / SGSW -24040R The SGSW-24040 series Managed Switch provides a s witch stacking function to manage up to 16 switches using a single IP address. And up to 384 Gigabi t Ethernet ports can be managed by a stacking group and you can add port[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 33 2.3.1 Connecting St acking cable Before attempting to connect sta cking ports, verify that you have the required stack cables. The following cables are used to connect stacked switches: • CB-STX50 : 50cm, Short stack cable –used to connect adjacent SGSW switches. • C[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 34 STEP-5 : Once the stack start operation, the St a ck master be automaticall y elected without any configure. The S tack master is indicated by a lit green “ Master ” LED on the front panel. As the Figur e 2-19 appears. Figure 2-19 St ack Master with “Master” LED li[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 35 1. The stack switch with least priority ID or MAC Address number will become Master . Only Master switch’s management interface (console, telnet, web and SNMP) is accessible. 2. It’s allow to build a st ack of up to 16 PLANET SGSW Switches. If there is the sp ace limit[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 36 3. SWITCH MANAGEMENT This chapter explains the methods that yo u can use to configure management access to the Manag ed Switch. It describes the types of management applications and the c ommunication and management protocols that deliver d ata between your management devi[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 37 3.2 Management Access Overview The Managed Switch gives you the flexibility to access and manage it using an y or all of the following methods:  An administration console  Web bro wser interface  An external SNMP-based network management application The administra[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 38 Figure 3-1 Console management Direct Access Direct access to the administration conso le is achieved by directly connecting a terminal or a PC equ ipped with a terminal-emulation program (such as HyperT erminal ) to the Managed S witch console (serial) port. When using thi[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 39 3.4 Web Management The Managed Switch offers management features that allow us ers to manage the Man aged Switch from anywhere on the network through a standard bro wser such as Microsoft Internet Ex plorer . Af ter you set up your IP address for the switch, you ca n acces[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 40 3. 5 SNMP-Based Network Management Y ou can use an external SNMP-based appl ication to configure and manage the Manage d Switch, such as SNMPc Network Manager , HP Openview Network Node Management (NN M) or What ’s Up Gold. This manageme nt method requires the SNMP agent[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 41 2. St art the T elnet program on a PC and connect to the Managed Switch. The management interface is exactl y the same with RS-232 console management. 3. 6. 2 SNMP Protocol Simple Network Management Protocol (SNMP) is the standard management protocol for multi-vendor IP ne[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 42 4. WEB CONFIGURATION This section introduces the configur ation and functions of the Web-Based management. About We b-based Management The Managed Switch offers management features that allow us ers to manage the Man aged Switch from anywhere on the network through a stand[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 43  Logging on the s w itch 1. Use Internet Explor er 6.0 or above Web browser . Enter the factory-default IP address to access the W e b interface. The factory-default IP A ddress as follow ing: http://192.168.0.100 2. When the foll owing login screen appe ars, please ent[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 44 Figure 4-1-3 Default main page Now , you can use the Web manageme nt inte rface to continue the switch manageme n t or manage the Managed Switch by Web interface. The Switch Menu on the left of the web p a ge let you access all the commands and statistics the Managed Switc[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 45 4.1 Main WEB P AGE The WGSW / SGSW Managed Switch provides a Web-based bro wser interface for configuring and managing it. This interface allows you to access the Manage d Switch using the Web browse r of your choice. This chapter describes ho w to use the Managed Switch?[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 46 Main Menu Using the onboard web agent, you can d efine system paramete rs, manage and control the Managed Switch, and all its ports, or monitor network conditions. Via the Web-Management, the administr ator can setup the Managed S wit ch by select the functions those liste[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 47 4.2 System Use the System menu items to display and config ure basic administrative details of the Manage d Switch. Under System the following topics are provided to configure an d view the system information: This sect ion has the follo wing items: ■ System Information [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 48 4.2.1 System Information The System Info page provides information for the current device information. System Info page help s a switch administrator to identify the hardware MAC address, software version and system uptime. The screen in Figure 4-2-1 appears. Figure 4-2-1 [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 49 : Click to refresh the page; any changes made locally will be undone. For the SGSW series stackable switch, the System Information p age add additional colum n to identify the current switch ID of stack member switches in a stack group. The screen as below appears:[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 50 4.2.2 IP Configuration The IP Configuration includes the IP Addr ess, Subnet Mask and Gateway . T he Configured column is used to vie w or change the IP configuration.Fill up the IP Address, Subnet Mask and Gate way for the device. The screen in Figure 4-2-2 appears. Figur[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 51 : Click to save changes. : Click to undo any changes made locall y and revert to previously saved values. 4.2.3 User Authentication This page allows you to configure the system password requir ed to access the web pages or log in from CLI. After setup completed, please pre[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 52 4.2.4 SNTP Configuration In the System sub-function menu, you can s ee the SNTP Configuration (see Figure 4-4 ), by which you can configure the time settings for the Managed Switch. Y ou can specify SNTP Serv ers and set GMT Timezone. The SNTP Configuration screen in Figur[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 53 It is recommended that you research an y time serv er selection to ensure that it can meet your specific time server requirements. Any NTP ti me server selection should be evaluated to determine if the server in question meets yo ur specific time server requirements. For m[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 54 4.2.6 TFTP Firmware Upgrade The Firmware Upgrade page provides the functions to allow a user to update the Managed S witch firmware from the T FTP server in the network. Before updating, make sure you hav e your TFTP server re ady and the firmware image is on the TFTP serv[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 55 Figure 4-2-8 TFTP Firmware upgrade pop-up message Figure 4-2-9 Firm ware Upgrade pop-up message 4. Click “ OK ”, the Switch will start the TFTP upgrade procedure. 5. Please check your TFTP server application to conf irm the TFTP file is well transmit to the Switch. 6. [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 56 4.2. 7 Configuration Save This function allows backup and rel oad the current configuration of t he Managed S witch to the local management station. The screen in Figure 4-2-10 appea rs. Figure 4-2-10 Configurati on Save page screenshot  Configuration Download: Do wnloa[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 57 Figure 4-2-12 File save screen 4.2. 8 Configuration Upload This function allows backup and rel oad the current configuration of t he Managed S witch to the local management station. The screen in Figure 4-2-13 ap pears. Figure 4-2-13 Configurati on Upload page screenshot ?[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 58 Figure 4-2-14 Windo ws file selection menu popup 2. Select on the configur ation file then click “ Upload ”, the bottom of the bro wser shows the upload status. 3. After down, the main screen appears “ T ransfer Comp leted ”.[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 59 4.2. 9 Factory Default The Factory Reset button can reset the VD SL2 Switch back to the factory default mode. Be aware that the entire configuration will be reset; include the IP address of the VDSL2 Switch . Once the Factory Reset item is pressed, the screen i n Figure 4-[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 60 4.2.1 0 System Reboot The Reboot page enables the device to be rebooted from a remote loca tion. Once the Reboot button is presse d, user have to re-login the WEB interface about 60 secon ds later , the screen in Figure 4- 2-16 appear s. Figure 4-2-16 System Reboot page sc[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 61  Example 1: Save Current Configuration setting T o save all app lied changes and set the current configurati on as startup configuration. The st artup-configuration file will be load automatically across a system reboot. 1. Click System, File Management, Copy Operation [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 62  Example 2: Do w nloading Sy stem Software from a Server When downloadin g runtime code, you can spec ify the destination file name to replac e the current image, or first download the file using a different name from the current runtime code file, and then set the new [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 63 • If you do wnload to a new destinati on file, go to the System / File / Set Start-Up menu, mark the operat ion code file used at startup, and click Apply . • T o start the new firmware, reboot the system via the System / Reset menu. • T o delete a file, select Syste[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 64 configuration file. T o use the new setti ngs, reboot the system via the System / Reset menu.  Example 4: Saving or Restoring Configuration Settings Y ou can upload/do wnload configuration settings to/from a TFTP server . The configuration files can b e later downloaded[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 65 4.3 Simple Network Management Protocol 4.3.1 SNMP Overview The Simple Network Management Protocol (S NMP) is an applic ation layer protocol that fa cilitates the exchange of management information between network devices. It is part of the T ransmissi on Control Protocol/I[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 66 The SNMP System Configuration screen in Figure 4- 3-1 appears. Figure 4-3-1 SNMP System Configuration page screenshot Object Description • Mode Indicates the SNMP mode operation. Possible modes are: • Enabled : Enable SNMP mode operation. • Disabled : Disable SNMP mo[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 67 4.3.3 SNMP System Information Configuration The switch system information is provided h ere. The System Information Configuration screen in F igure 4-3-2 appears. Figure 4-3-2 System Information C onfiguration page screenshot The page includes the following fields: Object [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 68 Figure 4-3-3 SNMP T rap Configuration page screenshot The page includes the following fields: Object Description • T rap Mode Indicates the SNMP trap mode operation. Possible modes are: • Enabled : Enable SNMP trap mode operation. • Disabled : Disable SNMP trap mode [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 69 • T rap Probe Security Engine ID Indicates the SNMP trap probe security engine ID mode of operation. Pos sible values are: • Enabled : Enable SNMP trap probe security engine ID mode of operation. • Disabled : Disable SNMP trap probe security engine ID mode of operati[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 70 to 126. • Security Model Indicates the security mode l that this entry should belong to. Possible sec urity models are: • any : Accepted an y security model (v1|v2c|usm). • v1 : Reserved for SNMPv1. • v2c : Reserved for SNMPv2c. • usm : User-based Security Model [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 71 • Community Indicates the community access string to permit access to SNMPv3 agent. The allowed string length is 1 to 32, and the allowed content is the ASCII characters from 33 to 126. • Source IP Indicates the SNMP access source address. • Source Mask Indicates the[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 72 characters from 33 to 126. 4.3.5.4 SNMPv3 Users Configuration Configure SNMPv3 users table on this page. The entry index key are Engine ID and User Name. The SNMPv3 Users Configur ation screen in Figure 4-3-7 appe ars. Figure 4-3-7 SNMPv3 Users Confi guration page screensh[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 73 protocol. • SHA : An optional flag to indicate that this user using SHA authentication protocol. The value of security level cannot be mo dified if entry already exist. That means must first ensure that the value is set correctly . • Authentication Password A string id[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 74 • View T yp e Indicates the view type that this entry should bel ong to. Possible view type are: • included : An optional flag to indicate that this view subtree should be included. • excluded : An optional flag to indic ate that this view subtree should be excluded.[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 75 Figure 4-3-9 SNMPv3 Users-NEW page screens hot Once the new SNMPv3 user be successed add a nd be assign to a snmp group, this entry will sho ws in the users table. Figure 4-3-10 SNMPv3 Users page screenshot  EXAMPLE: Add a new SNMPv3 Group In the New Group p age , defin[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 76 Figure 4-3-1 1 SNMPv3 Grou ps-NEW p age screenshot[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 77 4.4 Port Management Use the Port Menu to display or configure the Manage d Switch's ports. This section has the following items:  Port Configuration Configures port connection settings  Port St atistics Lists Ethernet and RMON port statistics  Mirror Port Con[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 78 The page includes the following fields: Object Description • Port This is the logical port number for this ro w . • Link The current link state is displayed graphicall y . Green indicates the link is up and red that it is down. • Current Link S peed Provides the curr[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 79 • Enabled : Link up and link down power savings en abled. • T o t al Power Usage T otal power usage in board, measur ed in percent. When set each port to run at 100M Full, 100M Half, 10M Full, and 10M Half-speed modes. The Auto-MDIX function will disable. 4.4.2 Port St[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 80 The displayed counters are: Object Description • Port The logical port for the settings contained in the same row . • Packets The number of received and transmitted packets per port. • Bytes The number of received and transmitted bytes per port. • Errors The number[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 81 The page includes the following fields: Receive T otal and T ransmit T otal Object Description • Rx and Tx Packets The number of received and transmitted (good and bad) packets • Rx and Tx Octet s The number of receiv ed and transmitted (g ood and bad) b ytes. Includes[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 82 T ransmit Error Counters Object Description • Tx Drops T he number of frames dropped due to output buffer congestion. • Tx Late/Exc. Coll. The number of frames dropped due to excessive or late co llisions. 4.4.4 Port Mirrori ng Configuration Configure port Mirroring on[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 83 Mirror Port Configuration The Port Mirror Configuration screen i n Figure 4-4-5 and Figure 4-4-6 ap pears.  WGSW Standalone Switch Figure 4-4-5 Port Mirror Configuration page screens hot The page includes the following fields: Object Description • Port to mirror to Fr[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 84  SGSW St acka ble Switch The SGSW St ackable s witch supports port mirror function over stack switch. Figure 4-4-6 Port Mirror Configuration page screens hot Object Description • Switch to mirror to Frames from ports that have either so urce or destination mirroring e[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 85 4.5 Link Aggregation Port Aggregation optimizes port usage by linking a group of ports together to fo rm a sing le Link Aggregated Groups (LAGs). Port Aggregation multiplies the bandwidth bet ween the devices, increas es port flexibility , and provides li nk redundancy . E[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 86 The Link Aggregatio n Control Protocol (LACP) provides a standardized means for e xchanging information bet ween Partner Systems that require high speed redu ndant links. Link aggregation lets you group up to eight consecutiv e ports into a single dedicated connection. Thi[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 87 4.5.1 St atic Aggreg ation Configuration This page is used to configure the Aggregation hash mode and the aggregation group. T he aggregation hash mode setti ngs are global, whereas the aggregati on group relate to the current ly selected stack unit, as reflected by the pa[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 88 Figure 4-5-3 Aggre gation Group Config uration page screenshot The page includes the following fields: . Object Description • Locality Indicates the aggregation group type. This field is only valid for stackable swit ches. • Global : T he group members may reside on di[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 89 4.5.2 LACP Configuration Link Aggregati on Control Protocol (LACP) - LACP LAG negoti ate Aggregated Port links with other LACP ports located on a different device. LACP allows switches connected to each other to discover automatically whether any ports are member of the sa[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 90 each second, while Passive will wait for a LACP packet from a p artner (speak if spoken to). 4.5.3 LACP System S tatus This page provides a status overview for all LACP instances. The LACP S tatus page display the current LACP aggregation Groups and LACP Port st atus . The[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 91 Figure 4-5-6 LACP Port S tatus page screenshot The page includes the following fields: Object Description • Port The switch port number . • LA CP 'Y es' means that LACP is enabled and the po rt link is up. 'No' means that LACP is not enabled or that[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 92 4.5.5 LACP st atistics This page provides an overview for LACP statistics for all ports. The LACP statistics screen in Figure 4-5-7 appears. Figure 4-5-7 LACP Port statistics p age screenshot The page includes the following fields: Object Description • Port The switch po[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 93 4.6 VLAN 4.6.1 VLAN Overview A Virtual Local Area Net work (VL AN) is a network topology configured according to a logical schem e rather than the physical layout. VLAN can be used to combi ne any collection of LAN s egme nts into an autonomous user group that appears as a[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 94 4.6.2 IEEE 802.1Q VLAN In large networks, routers are used to is olate broadcast traffic for each subnet into separate domains. This Managed Switch provides a similar service at L ayer 2 by using VLANs to organi ze any grou p of network nodes into separate broadcast do mai[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 95 ports and work normally . Any port can be configured as either tagging or untagging. T he untagging feature of IEEE 802.1Q VLAN allow VLAN to work with legacy switches that don’t recogn ize VLAN tags in packet headers. T he tagging feature allows VLAN to span multiple 80[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 96 Adding an IEEE802.1Q Tag Dest. Addr . Src. Addr . Length/E. t ype Data Old CRC Dest. Addr . Src. Addr . E. type Ta g Length/E. type Data New CRC Priority CFI VLAN ID ■ Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 97 VLANs, and any intermediat e network devices or the host at the other end of the connecti on supports VLANs. Then assign ports on the other VLAN-aware network devices along the path that will carry this traf fic to the same VLAN(s), either manually or dynamically using GVR[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 98 4.6.3 VLAN Basic Information The VLAN Basic Information page displays basic informatio n on the VLAN type supported by the Managed Switch. The VLAN Basic Information screen in Figure 4-6-1 appears. Figure 4-6-1 VLAN Basic Information page screens hot The page includes the [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 99 4.6.4 VLAN Port Configuration This page is used for configuring the Managed Switch port VLAN. The VLAN per Port Configuration page contains fields for managing ports that are part of a VLAN. The port default VLAN ID (PVID) is configur ed on the VLAN Port Configuration page[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 100 The Managed Switch supports multiple VLA N tags and can ther efore be used in MAN applications as a provider bridg e, aggregating traffic from numerous inde pendent customer LANs into the M AN (Metro Access Network) space. One of the purposes of the provider bridge is to [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 101 untagged traffic will be dropped. • Ingress Filtering Enable ingress filtering for a p ort by checking the box. T his pa rameter affects VLAN ingress processing. If ingress filter in g is enabled and the ingress port is not a member of the classified VLAN of the frame, [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 102 4.6.5 VLAN Membership Configuration  Adding St atic Members to VL A Ns (VLAN Index) Use the VLAN S tatic T able to configure por t members for the selecte d VLAN index. Assign ports as tagged if they are connected to 802.1Q VLAN compliant devices, or untagged they are [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 103 4.6.6 Private VLAN Configuration Overv iew When a VLAN is configured to be a private VLAN, commun ication between ports within that VLAN can be prevented. Two application examples ar e provided in this section: • Customers co nnected to an ISP can be members of the same[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 104 The page includes the following fields: Object Description • Port The switch interface. Displays private VLAN port types. Isolated A single stand-alone VLAN that contains one promiscuous port and one or more isolated (or host) ports. This VLAN conveys traffic between th[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 105 4.7 Rapid Sp anni ng T ree Protocol The S panning T ree protocol can be us ed to detect and disable ne t work loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices in your ne twork to ensure[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 106 uses the information in the frame to calculate a BPDU, a n d, if the topology changes, initiates a BPDU transmission. The communication bet ween switches via BPDUs results in the following:  One switch is elected as the root switch  The shortest distance to the root[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 107 Switch Blocking Listening Learning Forwarding Disable Figure 4-7-1 STP Port S tate T ransitions Y ou can modify each port state by using management software . When you enable STP , every port on eve ry switch in the network goes through the blocking state a n d then trans[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 108 Priority A relative priorit y for each switch – lower numbers give a higher priorit y and a greater chance of a given s witch being elected as the root bridge 32768 Hello Time The length of time between broadc asts of the hello message by the s witch 2 seconds Maximum A[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 109 the Root Bridge, the set Hello T ime will be used if and when your S witch becomes the Root Bridge. The Hello T ime cannot be longer than the Max. Age. Otherwise, a configuration err or will occur . Max. Age – The Max Age can be from 6 to 40 seconds. At the end of the M[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 0 Bridge ID = 15 Port 3 Port 1 Port 2 A Bridge ID = 20 Port 1 Port 2 Port 3 C Bridge ID = 30 Port 1 Port 2 Port 3 B LAN 1 LAN 2 LAN 3 Portcast = 19 Portcast = 19 Portcast = 19 Portcast = 4 Portcast = 4 Portcast = 19 Portcast = 4 Portcast = 4 Figure 4-7-5 Before Applying th[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 111 4.7. 1 RSTP System Configuration This page allows you to configure RSTP system settings. The settings are used by all RSTP Bridge instances in the Switch or switch S tack. The Managed Switch suppor t the following Sp anning T ree pr otocols: ‧ Compatiable -- S panning T[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 2 Compatible – Classis STP ( 802.1d) : Provides a single path between end stations, avoiding and eliminating loops. The Gigabit Ethernet Switch implement the Rapid Sp a nning Protocol as the default spanning tree protocol. While select “Compatibles ” mode, the system[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 3 4.7. 3 RSTP Port Configuration This page allows the user to inspect the current RSTP port configurations, and possi bly change them as well. This page contain settings for aggregations and phys ical ports. The aggregation settings are stack global. The RSTP port settings[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 4 path cost ports are chosen as forwarding ports in favor of higher p ath cost ports. V alid valu es are in the range 1 to 20000000 0. • Priority Controls the port priority . This can be used to control priority of ports having identical port cost. (See above). Default: [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 5 Port T ype Link T ype IEEE 802.1w-2001 Ethernet Half Duple x Full Duplex Trunk 2,000,000 1,000,000 500,000 Fast Ethernet Half Duplex Full Duplex Trunk 200,000 100,000 50,000 Gigabit Ethernet Full Duplex Trunk 10,000 5,000 T ab le 4-7-3 Default STP Path Costs[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 6 4.7. 4 RSTP Port S tatus This page displays the RSTP port st atus for port ph ysical ports in the currently selected switch. The RSTP Port S tatus screen in Figure 4-7-10 appears. Figure 4-7-10 RSTP Port S tatus page screenshot The page includes the following fields: Obj[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 7 • Stat e The current RSTP port state. The port st ate can be one of the following values: • Disabled • Blocking • Learning • Forwarding • Non-STP . • Bridge The RSTP Bridge instance (VLAN ID). This is also a link to the RSTP Det ailed Bridge S tatus, if the[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 8 4.8 Quality of Service 4.8.1 Underst and QOS Quality of Service (QoS) is an advanced traffic prioritization feature that allows you to establish control over network traffi c. QoS enables you to assign vario us grades of network service to diff erent t ypes of traffic, s[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 9 3. Create a QoS profile which associates a service level and a classifi er . 4. Appl y a QoS profile to a port(s). 4.8.2 QoS Control Li st Configuration This page lists the QCEs for a given QCL.  Frames can be classified by 4 different QoS classes: Low , Normal , Medi[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 120 • T ype V alue Indicates the value accord ing to its QCE type. • Ethernet T ype : The field shows the Ethernet T ype value. • VLAN ID : T he field shows the VLAN ID. • TCP/UDP Port : T he field shows the TCP/UDP port range. • DSCP : The field shows the IPv4/IPv6[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 121 The page includes the following fields: Object Description • QCE T ype Select the availabl e type for the specific QCE. • Ethernet T ype : Matches the received frame's EtherTy pe against the QCE Key . • VLAN ID : Matches the frame's VID against the QCE Key[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 122 Figure 4-8-3 Port QoS Configuration page screens hot The page includes the following fields: Object Description • Number of Classes Configure the number of traffic classes as "1", "2", or "4". The default value is "4". • Port Th[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 123 4.8.4 QCL Configuration W izard This handy wizard helps you set up a QCL quickly . The QCL Configuration Wizard screen i n Figure 4-8-5 appears. Figure 4-8-5 Welcome to the QCL Co nfiguration Wizard page screenshot The page includes the following fields: Object Descriptio[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 124 Figure 4-8-6 Set up Policy R ules page screenshot The page includes the folling fileds: Object Description • QCL ID Frames that hit this QCE are set to match this specific QCL. • Port Members A row of radio buttons for each port is displa yed for each QCL ID. T o incl[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 125 4.8.4.2 Set up T ypical Network Application Rules Set up the specific QCL for different t ypi cal network application quality cont rol.  STEP-1 Set up the specific QCL for different t ypical network applicati on quality control b y selecting the network application t y[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 126 • User Definition Indicates the user definition that applies to the specific QCE. The user definitions are: • Ethernet T ype: S pecif y the Ethernet T ype filter for this QCE. The allowed range is 0x600 to 0xFFFF . • VLAN ID: VLAN ID filter for this QCE. The allowed[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 127 4.8.4.3 Set up T oS Precedence Mapping Set up the traffic class mapping to the precedence part of T oS (3 bits) when receiving IPv4/IPv6 packets. The screen in Figure 4-8-10 appears. Figure 4-8-10 Set up T oS Precedence Ma pping page screenshot The page includes the folli[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 128 4.8.4.4 Set up VLAN T ag Priority Mapping Set up the traffic class mapping to the User Priority value (3 bits) when receiving VLAN tagged packets. The screen in Figure 4-8-1 1 appears. Figure 4-8-1 1 Set up VLAN T ag Priority Mapping page screenshot The page includes the [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 129 4.8.5 QoS St atistics This page provides statistics for the different queues for all sw itch ports. The ports belong to the currentl y selected stack u nit, as reflected by the page header . The QoS S tatistics screen in Figure 4-8-12 app ears. Figure 4-8-12 QoS St atisti[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 130 4.8.6 Bandwid th Control Configure the switch port rate limit for Pol icers and Shapers on this page. The settings relate to the c urrently selected stack unit, as reflected by the page header . The screen Bandwidth Control in Figur e 4-8-13 appears. Figure 4-8-13 XXXXXXX[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 131 4.8.7 Storm Control Configuration S torm control for the s witch is configured on this page. T here three types of storm rate control:  Unicast storm rate control  Multicast storm rate control  Broadcast storm rate control. The rate is 2^n, where n is equal to or[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 132 4.9 Multicast 4.9.1 IGMP Snooping The I nternet Group Management Protoc ol (IGMP) lets host and routers share information about multicast groups memberships. IGMP snooping is a switch feature that monitors the exchange of IGM P messages and copies them to the CPU for feat[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 133 Figure 4-9-2 Multicast flooding Figure 4-9-3 IGMP Snooping multicast stream control[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 134 IGMP V ersions 1 and 2 Multicast groups allow members to join or leave at any time. IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group. IGMP version 1 is defined in RFC 1 1 12. It has a fixed packet size and[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 135 message, and query messag es that ar e specific to a given group. The states a computer will go through to join or to leave a multicast group a re shown below: Non-Member Delaying Member Idle Member Leave Grou p Leave Group (Stop Tim er) Join Group (Send Report, Start T i[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 136 4.9.2 IGMP Snooping Configuration This page provides IGMP Sno oping related configuration. Most of the settings are global, whereas t he Router Port configuration is r elated to the currently selected stack unit, as refl ected by the page header . The IGMP Snooping Config[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 137 4.9.3 IGMP Port Related Configuration This page provides IGMP Sno oping related configuration. Most of the settings are global, whereas t he Router Port configuration is r elated to the currently selected stack unit, as refl ected by the page header . The IGMP Port Relate[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 138 4.9.4 IGMP Snooping S tatus This page provides IGMP Snooping status. The status relate to the currently selected stack unit, as reflected by the page header . The IGMP Snooping status screen in Figure 4-9-7 appear s. Figure 4-9-7 IGMP Snooping status page screenshot The p[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 139 4.9.5 Multicast Address T able The Multicast Address T able screen i n Figure 4-9-8 appears. Figure 4-9-8 Multicast Addres s T able page screenshot The page includes the following fields: Object Description • Delete Check to delete the entry . It will be deleted during [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 140 4.10 IEEE 802.1X Network Access Control Overview of 802.1X (Port-Based) Authentication In the 802.1X-world, the user is called the supp licant, the switch is the authenticator , and the RADIUS server is the authentication server . The switch acts as the man-in-the-middle,[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 141 4.10.1 Underst anding IEEE 802.1X Port-Based Authentication The IEEE 802.1X standard defines a client-server-b ased access cont rol and authenticatio n protocol that restricts unauthorized clients from connecting to a LAN through publicly accessibl e ports. T he authentic[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 142 z Switch (802.1X device) —controls the physical access to the net work based on the authentication status of the client. The switch acts as an intermediary (proxy) bet ween the cli ent and the authentication se rver , requesting identit y information from the client, ve[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 143 Figure 4-10-2 EAP message ex change  Ports in Authorized and Unauthorized States The switch port state determines whether or not the client is granted acc ess to the network. The port starts in the unauthorized state. While in this state, the port disa llows all ingres[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 144 4.10.2 802.1X System Configuration This page allows you to configure the IEEE 802.1X a nd MAC-based authenticatio n system and port settings. The IEEE 802.1X standard defines a port-based access control pr ocedure that prevents unauthor ized access to a network b y requir[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 145 • Reauthentication Enabled If checked, clients are reauthenticated after the interval specified by the Reauthentication Period. Rea uthentication for 802.1X-enabled ports can be use d to detect if a new device is plugged into a switch port. For MAC-based ports, reauthen[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 146 4.10.3 802.1X and MAC-Based Auth entication Port Configuration When 802.1X is enabled, you need to configure the parameters for the authentication process t hat runs bet ween the client and the switch (i.e., authenticator), as well as the client identit y lookup process t[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 147 • Port The port number for which the configuration below applies. • Admin St ate Sets the authentication mode to one of the following options (only used when 802.1X or MAC-based authe ntication is globally enabled ): • Aut o: Requires an 802.1X- aware client (suppli[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 148 The stackswitch is "born" with a pool of state-machines, from which all ports draw whenever a new client is seen on the port. When a g iven port's maximum is reached (both authorized and unauthorized c lients count), further new clients are disallowed acces[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 149 4.10.4 802.1X Port St atus This page provides an overview of the cu rrent IEEE 802.1X port states for the select ed switch. The 802.1X Port S tatus screen in Figure 4-10-5 appears. Figure 4-10-5 802.1X S tatus page screenshot The page includes the following fields: Object[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 150 EAPOL frame for port-bas ed authenticatio n, and the source MAC addr ess from the most recently received frame from a new client for MAC-based authentication. 4.10.5 802.1X and MAC-Based Authentication St atistics This page provides detailed IEEE 802.1X statistics for a s[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 151 The selected port belongs to the currently select ed stack unit as reflected by the table header .  EAPOL Counters These counters are not availa ble for MAC-based ports. Supplicant frame counter statistics. There are seven re ceive frame counters and three tra nsmit fr[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 152  RADIUS Counters RADIUS Server frame counter statistics. For MAC-based ports there are two tables containing RADIUS counters. The left-most shows a summary of all RADIUS counters on this port. The right-most shows RADIUS counters for the currently selected clien t, or [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 153 MAC-based: Counts all the RADIUS packets sent from the switch towards the RADIUS server for a given por t (left-most table) or client (right-most table). Possible retransmissions are not c ounted.  Last Supplicant/Client Info For MAC-based ports, this section is embe d[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 154 4.10.6 Windows Plat form RADIUS Server Configuration 1. Setup the RADIUS server and assign the clie nt IP address to the Manage d switch. In this case, field in the default IP Address of the Managed Switch with 192. 168.0.100. And also make sure the shar ed secret key is [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 155 Figure 4-10-9 Windows Server RADIUS Ser ver setting path 5. Enter ” Active Directory Users and Computers ”, create legal user data, the next, ri ght-click a user what you created to enter properties, and what to be noticed: Figure 4-10-10 T sInternetUser Properties sc[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 156 Set the Ports Authenticate S tatus to “ Force Authorized ” if the port is connected to the RADIUS server or the port is a uplink port that is connec ted to another switch. Or once the 802.1X stat to work, the switch might not be able to access the RADIUS server . 4.10[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 157 Figure 4-10-12 7. Click “ OK ”. 8. When client has associated with the Managed Switch, a user authentication notice appear s in system tray. Click on the notice to continue. Figure 4-10-13[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 158 9. Enter the user name, password and the lo go n domain that your account belongs. 10. Click “ OK ” to complete the validation process. Figure 4-10-14[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 159 4.1 1 Access Control Lists ACL is an acronym for Access Control Lis t. It is the list table of ACEs, containing access control entries that specify individ ual users or groups permitted or denied to specific tr affic objects, such as a process or a program. Each accessibl[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 160 • Policy : The ACE will match ingress ports with a specific policy . • Port: The ACE will match a specific ingress port. • Frame T ype Indicates the frame type of t he ACE. Possible valu es are: • Any : The ACE will match any frame type. • ET ype: The ACE will m[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 161 4.1 1.2 ACE Configuration Configure an ACE (Access Control Entr y) on this page. An ACE consists of several parameters. T hese p arameters vary according to the frame t ype that you select. First select the ingress port for the ACE, and then select the frame type. Differe[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 162  MAC Para meters Object Description • SMAC Filter (Only displayed when the frame type is Ethernet T ype or ARP .) S pecify the source MAC filter for this ACE. Any: No SMAC filter is specified. (S MAC filter status is "don't-care".) S pecific: If you wa[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 163  ARP Param eters The ARP parameters can be configured when Frame T ype "ARP" is selected. Object Description • ARP / RARP Specify the available ARP/RARP opcode (OP) flag for this ACE. • Any : No ARP/RARP OP flag is specified. (OP is "don't-care&[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 164 address field (THA) settings. 0 : RARP frames where T HA is not equal to the SMAC address. 1 : RARP frames where T HA is equal to the SMAC address. Any : Any value is allo wed ("don't-care"). • IP/Ethernet Length S pecif y whether frames can hit the actio[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 165 TCP parameters w ill appear . These fields are explained later in this help file. • IP Protocol V alue When "S pecific " is selected for the IP pr otocol value, you ca n enter a specific value.. The allowed range is 0 to 255 . A frame that hits this ACE matche[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 166 address and destination IP mask in the DIP Address a nd DIP Mask fields that appear . • DIP A ddress When "Host" or "Network" is selected for the destination IP filter , you can en ter a specific DIP address in dotted decimal notation. • DIP Mask W[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 167 hits this ACE matches this TCP/UDP source value. • TCP/UDP Source Range When "Range" is selected for the TCP/UDP s ource filter , you c an enter a specific TCP/UDP source range value. The allowed range is 0 to 65535 . A frame that hits this ACE matches this TC[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 168  Ethernet T ype Parameters The Ethernet T ype parameters can be configured when Frame Ty pe "Etherne t T ype" i s selected. Object Description • EtherT ype Filter S pecify the Ethernet type filter for this ACE. Any : No EtherT ype filter is specified (Ether[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 169 The page includes the following fields: Object Description • Set up Policy Rules Set up the default policy rules for Client ports, Server ports, Network ports and Guest ports. • Set up Port Policies Group ports into several types according to different ACL policies. ?[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 170 4.1 1.3.2 Set up Port Policies Group ports into several types according to different ACL policies. The settings relate to the currently selected stack unit, as reflected by the page header . The screen in Figure 4-1 1-4 appears. Figure 4-1 1-4 Set up Port Policies page sc[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 171 4.1 1.3.3 Set up T ypical Network Application Rules Set up the specific ACL for different typical network application access con trol. The screen in Figure 4-1 1-5 appe ars.  STEP-1: Selecting the Net w ork Applica tion T ype: Figure 4-1 1-5 Set up T ypical net work Ap[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 172 range is 0 to 65535 . • Others Indicates the other application that appl ies to the spec ific ACE. The other applications are: HTTPS , ICMP , Multicast IP Stream , NetBIOS , PING Request , Ping Reply , SNMP , SNMP T raps .  STEP-2: Define and A pp ly the T ypeical Ne[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 173 through 8. • Sw itc h Select the switch to which this ACE applies. • Any : The ACE applies to any port. • Switch n: The ACE applies to this switch number , where n is the number o f the switch. • Act io n S pecif y the action to take with a frame that hits this AC[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 174 4.1 1.3.4 Set up Source MAC and Source IP Binding S trictly control the net work traf fic by only allowing incoming fr ames that match the source IP and sourc e MAC on specific port. The settings relate to the currently selected stack unit, as reflected by the page header[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 175 Figure 4-1 1-9 4.1 1.3.5 Set up DoS Att ack Detection Rules Set up the specific ACL for dif ferent typi cal network application acc ess control. The screen in Figure 4-1 1-10 appears. Figure 4-1 1-10 Set up DoS Attack Detection Rules page screenshot The page includes the [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 176 packet of destination unreachable to the spoofed source address. Eventu ally leading it to be unreachable by other clie nts and the system will go down. • ICMP DoS - Ping of Death A malicious attacker sending a malformed ICMP request packet larger than the 65,536 bytes [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 177 Object Description • Ingress Port Select the ingress port to which this ACE applies. • Any : The ACE applies to any port. • Port n : The ACE applies to thi s port number , where n is the number of the switch port. • Policy n : T he ACE applies to this policy n umb[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 178 4.1 1.4 ACL Rate Limiter Configuration Configure the rate limiter fo r the ACL of the sw itch. The ACL Rate Limiter Configuration screen in Figure 4-1 1-13 appears. Figure 4-1 1-13 ACL Rate L imiter Configuration page screenshot The page includes the following fields: Obj[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 179 4.1 1.5 ACL Ports Configuration Configure the ACL pa rameters (ACE) of each switch port. These parameters will af fect frames receiv ed on a port unless the frame matches a specific ACE. T he settings relate to the cu rrently selected stack unit, as reflected by the page [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 180 • Policy ID Select the policy to apply to this port. The allowed values are 1 through 8 . The default value is 1. • Act io n Select whether forwarding is p ermitted (" Permit") or denied ("Deny"). The default value is "Permit". • Rate L[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 181 4.12 Address T able Switching of frames is based upo n the DMAC address contained in the fram e. The Managed Switch builds up a table that m aps MAC addresses to switch ports for knowing which ports the fr ames should go to ( based upon the DMAC address in the frame ). Th[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 182 4.12.2 St atic MAC T able Configuration The static entries in the MAC table are shown in this table. The static MAC table can contain 64 entries. The maximum of 64 entries is for the whole stack, and not per switch. The MAC table is sorted first by VLAN ID and then by MAC[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 183 4.12.3 MAC Address T able St atus Dynamic MAC T able Entries in the MAC T able are shown on this page. The MAC T able contains up to 8192 entries, and is sorted first b y VLAN ID, then by MAC address. Figure 4-12-3 MAC Address T able S tatus Navigating the MAC T able Each[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 184 Buttons Auto-refresh □ : Check this box to enable an automatic r efresh of the page at regular intervals. Refreshe : Refreshes the displayed table starting from the "S tart from MAC address" and "VLAN" input fiel ds. Clear : Flushes all dynamic entri[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 185 4.13 Port Security (T o be Continued) Port security is a feature that allows yo u to c onfigure a switch port with one or more device MAC addre sses that are authorized to access the network through that port. When port security is enabled on a port, the Managed S witch s[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 186 Make sure that the link used for managing the switch is added to the S tatic Mac T able befo re changing to secure learning mode, otherwise the management link is lost and can onl y be restored by using another non-secure p ort or by connecting to the switch via the seria[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 187 4.14 LLDP 4.14.1 Link Layer Di scovery Protocol Link Layer Discovery Protocol (LLDP) is used to discover basic information about neig hboring devices on the local bro adcast domain. LLDP is a Layer 2 protocol that us es periodic broadcasts to advertise informati on about [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 188 4.14.2 LLDP Configuration This page allows the user to inspect and configure the current LLDP port settings. The LLDP Configuration screen in Figure 4-14-1 appears. Figure 4-14-1 LLDP Configuration page screenshot  LLDP Param eters Object Description • Tx Interval Th[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 189 This attribute must comply with the following rule: (T ransmission Interval * Hold T ime Multiplier) ≤ 65536, and T ransmissi on Interval >= (4 * Delay Interval) • Tx Hold Each LLDP frame contains information about how long the information in the LLDP frame shall b[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 190 • Port Descr Optional TL V: When checked the "port description" is included in LLDP information transmitted. • Sys Name Optional TL V: When checked the "system name" is included in LLDP information transmitted. • Sys Descr Optional TL V : When ch[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 191 4.14.3 LLDP Neighbor This page provides a status overview for all LLDP neighbors. The displayed table contains a row for each port on which an LLDP neighbor is detected. The LLDP Neighbor screen in Figure 4-14-3 appears. Figure 4-14-3 LLDP Neighbor Information page screen[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 192 4.14. 4 LLDP S tatistics This page provides an overview of all LLDP traffic. Two types of counters are shown. Global coun ters are counters that refer to the whole stack, switch, while local counters refers to count ers for the currently selected switch. The LLDP S tatist[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 193 • T otal Neighbors Entries Dropped Shows the number of LLDP frames dropped due to that the entry table was full. • T otal Neighbors Entries Aged Out Shows the number of entries deleted due to T ime-T o-Live expiri ng.  Local Counters The displayed table contains a [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 194 4.15 Network Diagnastics 4.15.1 Cable Diagnostics This page is used for running the Cable Diag nostics. Press to run the diagnostics. This will ta ke approximately 5 seconds. If all ports are selected, this can take approximately 15 seconds. When completed, the page refre[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 195 4.15.2 Ping This page allows you to issue ICMP PING p ackets to troubleshoot IP connectivity issues. After you press , 5 ICMP p ackets are transmitted, and the sequenc e number and roundtrip time are dis played upon receptio n of a reply . The page refreshes automatically[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 196 4.16 St acking – SGSW-24040 / SGSW -24040R Using S tacking, it is possible to conn ect a number of switches together in a stack, which behaves as a single s witch as seen from outside the stack. T wo types of stack topologies are supporte d:  Ring topology  Chain [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 197  Chain St ack: A chain of s witches, that is , no redundant forwarding paths. Figure 4-16-1 Chain St ack topology  Ring St ack: A ring of s witches, thereby providing redundant forwarding paths. Figure 4-16-2 Ring S tack topology  Back-to-Back Stack : Tw o switch[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 198 4.16.1 St ack This section provides information for understand stacking ar chitecture, include the belo w items:  Switch IDs • Assigning an d Swapping Switc h IDs • Removing a Sw itch From the St ac k • Replacing a Switch • General Switch ID A ssignment Rules ?[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 199 "Save". 5. The ne w hardware has now taken over t he configuration of the failing har dware.  General Switch ID Assignment Rules When assigning Switch IDs to the devices in the stack, you must not e the following: 1. Switches with assigned IDs can be changed [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 200 Figure 4-16-4 Remove or Replace a switch from the st ack 4.16.1.4 Shortest Path Forwarding The SGSW Swtich supports shortest path forwarding technology to optimal data flow across the stack. The advantage of shortest path forwarding as below:  Automatic Loop Prev entio[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 201 4.16.2 St ack Configuration This page is used for configure the stack, include assign Swit ch ID, master priorit y and display the current stack member information. The screen in Figure 4-16-6 ap pears. Figure 4-16-6 St ack Config uration page screenshot The page includes[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 202 4.16.3 St ack Information This page provides an overview of the stack topology , as d etected by SPROUT .  St ack T opology The S tack T opolog y screen in Figure 4-16-7 appears. Figure 4-16-7 St ack Information page screenshot - St ack T opology The page includes the [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 203 Figure 4-16-8 St ack Information page screenshot - St ack List The page includes the following fields: Object Description • Delete Deletes this switch from the stack configuration. • St ack Memb er The MAC address of the switch. • Switch ID The Switch ID (1-16) assi[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 204 Figure 4-16-9 St ack Information page screenshot - Master For warding T a ble 4.16.4 St ack Port St ate Ovewview This page provides an overview of the current switch port states. Clicking on the image of a port opens the Port St atistics page.The port states are illustrat[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 205 4.16.5 St ack Example S tacking function is convenie nt for administrator to manage multiple s witches by single IP . Basically , you got to have min. 2 u nits. The SGSW Switch supports auto stack confi guration. Once the stack cable is connec t to the stack port of each [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 206 Figure 4-16-12 St ack Configuration Step 5: We wish to make the SGSW switch with MAC “00- 30-4f-24- 04-76” / S witch ID=2 to become the S tack Master and swap the Switch ID to 1.  Select the switch with ID=1 and assign a new ID for this uni t, for example: ID=4 Fig[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 207  Reflash the web browser , the switch with MAC address “00- 30-4f-24-04-76” become the stack master now . Figure 4-16-14 The result after master election Step 6: After the S tack Master and Members have been con figured , any switch in the stack can be managed from[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 208 5. COMMAND LINE INTERFACE 5.1 Accessing the CLI When accessing the management interface for the switch over a direct connection to the server ’s console port, or via a T elnet connection, the switch can be managed b y entering command keyw ords and parameters at the pro[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 209 1. For securit y reason, please change and memorize the new password after this first setup. 2. Only accept command i n lowercas e letter under console interface. Configure IP address The WGSW / SGSW Managed Switch is shipped with default IP address as following. IP Addre[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 210 Switch/> ip setup 192.168.1. 100 255.255.255.0 192.168.1.1 The previous command would apply the follow settings for the Switch. IP: 192.168.1.100 Subnet Mask: 255.255.255.0 Gateway: 192.168.1.1 Figure 5-3 Set IP address screen 4. Repeat Step 1 to check if the IP addr e[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 21 1 5.2 T elnet login The Managed Switch also supports telnet for remote manageme n t. T he switch asks for user name and password for remote login when using teln et, please use “admin” for password.[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 212 6. Command Line Mode The CLI groups all the commands in appro priate modes according to the nature of the command. A sample of the CLI command modes are described belo w . Each of the com mand modes supports specific software commands. Command Group s: System Syste m sett[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 213 all : Show all switch configuration, default: Sho w system configuration <port_list> : Port list or 'all', default: All ports Example: T o display system information: Switch/>system configuration System Name : SGSW-24040 System Password: admin CLI Promp[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 214 Parameters: keep_ip : Keep IP configuration, def ault: Restore full configuration Example: T o restore default value but no t reset IP address: Switch/>system restore default keep_ip System Name Description: Set or show the system name. Synt ax: System Name [<name&g[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 215 Parameters: <prompt> : CLI prompt string Default Setting: SWITCH Example: T o change CLI title: Switch/>system prompt SGSW-24040 SGSW-24040/> System Pass word Description: Set or show the system p assword. Synt ax: System Password [<password>] Parameters[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 216 Parameters: <ip_addr> : IP addr ess (a.b.c.d), default: Show IP address Default Setting: 0.0.0.0 Example: Set SNTP server: SWITCH/>system sntp 220.130.158.52 System T imezone Description: Set or show the system timezone offset. Synt ax: System T imez one [<off[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 217 <ip_server> : TFTP server IP address (a.b.c.d) <file_name> : Firmware file name[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 218 IP Configuration Description: Show IP configuration. Synt ax: IP Configuration Example: Show IP configuration: Switch/>ip configuration DHCP Client: Disabled IP Address : 192.168.1 00.105 IP Mask : 255.255.255.0 IP Router : 192.168.100.1 VLAN ID : 1 SNTP Server: 0.0.0.[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 219 IP Setup Description: Set or show the IP setup. Synt ax: IP Setup [<ip_addr>] [<ip_mask>] [<ip_router>] [<vid>] Parameters: <ip_addr> : IP address (a.b.c.d), default: Show IP address <ip_mask> : IP subnet mask (a.b.c.d), default: Show I[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 220 SWITCH/>ip ping 192.16 8.0.51 PING server 192.168.0.51 60 bytes from 192.168.0.51: icmp_seq=0, time=0ms 60 bytes from 192.168.0.51: icmp_seq=1, time=0ms 60 bytes from 192.168.0.51: icmp_seq=2, time=10ms 60 bytes from 192.168.0.51: icmp_seq=3, time=0ms 60 bytes from 192[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 221 6.2 Port Management Command Port Conf iguration Description: Show port configuration. Synt ax: Port Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports Example: Display port1~4 status SWITCH/>port configura[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 222 Default Setting: Enable Example: Disable port1 SWITCH/>port state 1 disable Port Mode Description: Set or show the port speed and duplex mode. Synt ax: Port Mode [<port_list>] [10hdx|10fd x|100hdx|1 00fdx|1000fdx|a uto] Parameters: <port_list> : Port list o[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 223 Synt ax: Port Flow Control [<port_list>] [enable|disable] Parameters: <port_list> : Port list or 'all', default: All ports enable : Enable flow control disable : Disable flow control (default: Show flow control mode) Default Setting: Disable Example:[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 224 Port Power Description: Set or show the port PHY pow er mode. Synt ax: Port Power [<port_list>] [enable|disable|actip hy|dynamic] Parameters: <port_list> : Port list or 'all', default: All ports enable : Enable all power control disable : Disable all[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 225 Example: SWITCH/>port excessive 1 restart Port St atistics Description: Show port statistics. Synt ax: Port S tatistics [<port_list>] [<command>] Parameters: <port_list> : Port list or 'all', default: All ports <command> : The command [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 226 Port Numbers Description: Show port numbering. Synt ax: Port Numbers[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 227 Mirror Configuration Description: Show mirror configuration. Synt ax: Mirror Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports Mirror Port Description: Set or show the mirror port. Synt ax: Mirror Port [<[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 228 Default Setting: 1 Example: Set mirror SID 2 for switch SWITCH/>mirror sid 2 Mirror Mode Description: Set or show the mirror mode. Synt ax: Mirror Mode [<port_list>] [enable|disable |rx|tx] Parameters: <port_list> : Port list or 'all', default: Al[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 229 6.3 Link Aggregation Command Aggregation Configurati on Description: Show link aggregation configu ration. Synt ax: Aggr Configuration Example: SWITCH/>aggr configuratio n A ggregation Mode: SMAC : Enabled DMAC : Disabled I P : E n a b l e d Port : Enabled Aggregation [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 230 Aggregat ion Delete Description: Delete link aggregation. Synt ax: Aggr Delete <aggr_id> Parameters: <aggr_id>: Aggr egation ID, global: 1-2, local: 3-14 Example: Delete Group2 SWITCH/>aggr delete 2 Aggregation Lookup Description: Lookup link aggregation. S[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 231 Aggregation Mode Description: Set or show the link aggregation traffic distribution mode. Synt ax: Aggr Mode [smac|dmac|ip|port] [enable|dis able] Parameters: smac : Source MAC address dmac : Destination MAC address ip : Source and destination IP address port : Source and[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 232 LACP Con figuration Description: Show LACP configuration. Synt ax: LACP Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports Example: Show LACP configuration SWITCH/>lacp configuratio n Port Mode Key Role --[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 233 21 Disabled Auto Active 22 Disabled Auto Active 23 Disabled Auto Active 24 Disabled Auto Active LACP Mo de Description: Set or show LACP mode. Synt ax: LACP Mode [<port_list>] [enable|disable] Parameters: <port_list> : Port list or 'all', default: Al[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 234 Default Setting: Auto Example: Set key1 for port1~4 SWITCH/>lacp key 1-4 1 LACP Role Description: Set or show the LACP role. Synt ax: LACP Role [<port_lis t>] [active|p assive] Parameters: <port_list>: Port list or 'all', default: All ports active[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 235 Parameters: <port_list> : Port list or 'all', default: All ports Example: Show LACP status of port1~4 SWITCH/>lacp status 1-4 Port Mode Key Aggr ID Partner System ID Partner Port ------ ------------ ----- ------- ------------------------ ------------ 1 [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 236[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 237 6.4 VLAN Configuration Command VLAN Configuration Description: Show VLAN configuration. Synt ax: VLAN Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports Example: Show VLAN status of port1 SWITCH/>vlan conf[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 238 Dot1q Example: Set VLAN mode in port base SWITCH/>vlan mode portbas ed VLA V PVID Description: Set or show the port VLAN ID. Synt ax: VLAN PVID [<port_list>] [<vid>|none] Parameters: <port_list> : Port list or 'all', default: All ports <v[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 239 (default: Show accepted frame types) Default Setting: All Example: Set port20 that allow tagged frames only SWITCH/>vlan framet ype 20 tagged VLAN Ingress Filter Description: Set or show the port VLAN ingress filter . Synt ax: VLAN IngressFilter [<port_list>] [en[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 240 Parameters: <port_list> : Port list or 'all', default: All ports unta gged : VLAN Link Ty p e T agged ta gged : VLAN Link Type Untagged Default Setting: Un-tagged Example: Enable tagged frame for port2 SWITCH/>vlan linkt ype 2 tagged VLAN Q-in-Q Mode De[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 241 dot1q : Set out layer VLAN tag ether type : 802.1Q Default Setting: N/A Example: SWITCH/>vlan etht ype 10 man VLAN Add Description: Add or modify VLAN entry . Synt ax: VLAN Add <vid> [< port_list>] Parameters: <vi d> : V L A N I D ( 1 - 4 0 9 5 ) <[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 242 <vi d> : VLAN ID (1-4095) Example: Delete port17 to port24 in VLAN10 SWITCH/>vlan delete 10 17- 24 VLAN Lookup Description: Lookup VLAN entry . Synt ax: VLAN Lookup [<vid>] Parameters: <vi d> : VLAN ID (1-4095), default: Show all VLANs Example: Show V[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 243 PVLAN Configuration Description: Show Private VLAN configuration. Synt ax: PVLAN Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports PVLAN Isolate Description: Set or show the port isolation mode. Synt ax: PVL[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 244 6.5 Sp anning T ree Protocol Command RSTP Config uration Description: Show RSTP configuration. Synt ax: RSTP Configuration [<port_list>] Parameters: <port_list> : Port list or 'all'. Port zero means aggregations. Default Setting: Disable Example: Sho[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 245 Default Setting: 32768 Example: Set RSTP system priority value in 4096 SWITCH/>rstp s ysprio 4096 RSTP Ag e Description: Set or show the RSTP maximum age. Synt ax: RSTP Age [<max_age>] Parameters: <max_age>: RSTP maximum age time (6-200) Default Setting: 20[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 246 15 Example: Set RSTP forward delay value in 25 SWITCH/>rstp del ay 25 RSTP V ersion Description: Set or show the RSTP protocol version. Synt ax: RSTP V ersion [compatible|normal] Parameters: compatible : C ompatible with STP normal : R S T P Default Setting: Normal Exa[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 247 Default Setting: Disable Example: Enable rstp mode for port1 SWITCH/>rstp mode 1 ena ble RSTP Cost Description: Set or show the RSTP p ath cost. Synt ax: RSTP Cost [<port_list>] [<pa th_cost>] Parameters: <port_list> : Port list or 'all'. Po[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 248 <priority> : R STP priority (0/16/32/48/.../224/240) Default Setting: 128 Example: Set RSTP priority value in 16 for port1 SWITCH/>rstp priorit y 1 16 RSTP Edge Description: Set or show the RSTP edge parameter . Synt ax: RSTP Edge [<port_list>] [enable|disa[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 249 Parameters: <port_list> : Port list or 'all', default: All ports enable : Enable RSTP point2point disable : Disable RSTP point2point auto : Automatic RSTP point2point detection Default Setting: Auto Example: Enable RSTP P2P mode for port1 SWITCH/>rstp p[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 250 RSTP S tatistics Description: Show RSTP st atistics. Synt ax: RSTP S tatistics [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports RSTP mCheck Description: Set the RSTP mCheck (Migration Check) variable for ports. Synt ax: R[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 251 6.6 Multicast Configuration Command IGMP Configuration Description: Show IGMP snooping configuration. Synt ax: IGMP Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Default Setting: IGMP Mode: Disabled Flood[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 252 Enable IGMP mode SWITCH/>igmp mode ena ble IGMP S tate Description: Set or show the IGMP snooping state for VLAN. Synt ax: IGMP S tate [<vid>] [enable|disable] Parameters: <vid>: VLAN ID (1-4095 ) , default: Show all VLANs enable : Enable IGMP snooping disa[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 253 disable : Disable IGMP snooping (default: Show IGMP snooping mode) Default Setting: Enable Example: Disable VID 1 SWITCH/>igmp state 1 disable IGMP Querier Description: Set or show the IGMP snooping querier mode for VLAN. Synt ax: IGMP Querier [<vid>] [enable|dis[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 254 IGMP Fastleave [<port_list>] [enable|disable] Parameters: <port_list> : Port list or 'all', default: All ports enable : Enable IGMP fast leave disable : Disable IGMP fast leave (default: Show IGMP fast leave mode) Default Setting: Disable Example: SW[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 255 IGMP Flooding Description: Set or show the IGMP snooping unregistered flood operati on. Synt ax: IGMP Flooding [enable|disable] Parameters: enable : Enable IGMP flooding disable : Disable IGMP flooding (default: Show IGMP flood mode) Default Setting: Disable Example: Enab[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 256 Parameters: <vi d>: VLAN ID (1-4095) Default Setting: Disable Example: Enable IGMP flooding function SWITCH/>igmp status 1 Swit ch 1: --------- Q u e r i e r R x T x R x R x R x R x VID S tatus Queries Queries V1 Reports V2 Reports V3 Reports V2 Leave ---- ------[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 257 6.7 Quality of Service Command QoS Config uration Description: Show QoS Configuration. Synt ax: QoS Configuration [<port_list> ] Parameters: <port_list> : Port list or 'all', default: All ports QoS Classes Description: Set or show the number of traff[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 258 Parameters: <port_list> : Port list or 'all', default: All ports <class> : T raffic class low/normal/medium /high or 1/2/3/4 Default Setting: Low Example: Set high priority for port5 SWITCH/>qos default 5 high QoS T ag Priority Description: Set or[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 259 QoS QCL Port [<port_list>] [<qcl_id>] Parameters: <port_list> : Port list or 'all', default: All ports <qcl_id> : QCL ID Default Setting: 1 Example: Set QCL ID5 for port10 SWITCH/>qos qcl port 10 5 QoS QCL Add Description: Add or modif[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 260 <etype> : Ethernet Type vid : V L A N I D k e y w o r d <vi d> : V L A N I D ( 1 - 4 0 9 5 ) port : U D P / T C P p o r t k e y w o r d <udp_tcp_port> : Source or destination UDP/TCP port (0-65535) dscp : I P D S C P k e y w o r d <dscp> : I P D S [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 261 QoS Mode Description: Set or show the port egress scheduler mode. Synt ax: QoS Mode [<port_list>] [strict|weighted] Parameters: <port_list> : Port list or 'all', default: All ports strict : S trict mode weighted : Weighted mode (default: Show QoS mod[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 262 Synt ax: QoS Rate Limiter [<port_list>] [enable|disable ] [<bit_rate>] Parameters: <port_list> : Port list or 'all', default: All ports enable : Enable rate limiter disable : Disable rate limiter (default: Show rate limiter mode) <bit_rate&g[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 263 SWITCH/>qos shaper 9-16 en able 1000 QoS Unicast Description: Set or show the unicast storm rate limiter . Synt ax: QoS S torm Unicast [enable |disable] [<packet_rate>] Parameters: enable : Enable unicast storm control disable : Disable unicast storm control <[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 264 Example: Enable multicast storm rate limiter in 1kpps SWITCH/>qos storm multicast enable 1k QoS Broadcast Description: Set or show the multicast storm rate limiter . Synt ax: QoS S torm Broadcast [enabl e|disable] [<packet_rate>] Parameters: enable : Enable broad[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 265 6.8 802.1x Port Access Control Command Dot1x Configuration Description: Show 802.1X configuration. Synt ax: Dot1x Configuration [<port_list> ] Parameters: <port_list> : Port list or 'all', default: All ports Example: Show IEEE802.1x status of port1 S[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 266 disable : Disable 802.1X (default: Show 802.1X mode) Default Setting: Disable Example: Enable IEEE802.1x founction for port1 SWITCH/>dot1x mode enab le Dot1x St atus Description: Set or show the 802.1X port state. Synt ax: Dot1x S tate [<port_list>] [macbas e d|a[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 267 Synt ax: Dot1x Server [<ip_addr>] Parameters: ip_addr : RADIUS server IP address (a.b .c.d) (default: Show IP address) Default Setting: 0.0.0.0 Example: Set RADIUS server IP address for switch. RA DIUS server IP addr ess is 192.168.0.254. SWITCH/>dot1x serv er 19[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 268 Refresh (restart) 802.1X authentication process. Synt ax: Dot1x Authenticate [<port_list>] [now] Parameters: <port_list> : Port list or 'all', default: All ports now : Force reauthentication immedia tely Dot1x Re- authenticat ion Description: Set or [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 269 <reauth_period> : Period betwee n reauthentications (1-3600 seconds) (default: Show reauthentication peri od) Default Setting: 3600 Example: Set period re-authentication time in 3000 sec onds SWITCH/>dot1x period 30 00 Dot1x Timeo ut Description: Set or show the [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 270 Parameters: <port_list> : Port list or 'all', default: All ports clear : C l e a r s t a t i s t i c s eapol : Show EAPO L statistics radius : Show RADIUS statistics (default: Show all statistics) Dot1x Client s Description: Set or show the maximum number [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 271 300 Example: Set age time in 100 seconds SWITCH/>dot1x agetime 100 Dot1x Hold time Description: T ime in seconds before a MAC-address that failed authentication gets a new authentication chance. Synt ax: Dot1x Holdtime [<hold_time>] Parameters: <hold_time> [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 272 6.9 Access Control List Command ACL Configu ration Description: Show ACL Configuration. Synt ax: ACL Config uration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Default Setting: 300 Example: Set age time in 100 second[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 273 Rate Limiter: Disable Port Copy: Disable Loading: Disable Shut down: Disable Example: ???? SWITCH/>acl action 17-24 deny 1 24 l og shut ACL Policy Description: Set or show the ACL port policy . Synt ax: ACL Policy [<port_ list>] [<policy>] Parameters: <p[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 274 <rate_limiter_list> : Rate limiter list (1-15), default: All rate limiters <packet_rate> : Rate in pps (1, 2, 4, ..., 512, 1k, 2k, 4k, ..., 1024k) Default Setting: 1 Example: ??? SWITCH/>acl rate 15 1024k ACL Add Description: Add or modify Access Control En[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 275 <smac> : Source MAC address (xx- xx-xx-xx-xx- xx) or 'any' <dmac> : Destination MAC address (xx-xx-xx-xx-xx-xx) or 'an y' arp : A R P k e y w o r d <sip> : S o u r c e I P address (a.b.c.d/n) or 'any' <dip> : Destinati[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 276 ACL Lookup Description: Show ACE, default: All ACEs. Synt ax: ACL L ookup [<ace_id>] Parameters: <ace_id> : ACE ID (1-1024) ACL Lookup Description: Clear all ACL counters. Synt ax: ACL C lear[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 277 6.10 MAC Address T able Command MAC Configuration Description: Show MAC address table configuration. Synt ax: MAC Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports Example: Show port1 Mac state SWITCH/>ma[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 278 Example: Add Mac address 00-30-4F-01-01-0 2 in port1 and vid1 SWITCH/>mac add 00- 30-4f-01-01-02 1 1 MAC Delete Description: Delete MAC address entry . Synt ax: MAC Delete <mac_addr> [<vid> ] Parameters: <mac_addr> : MAC addr ess (xx-xx-xx-xx-x x-xx) [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 279 MAC Age Tim e Description: Set or show the MAC address age timer . Synt ax: MAC Agetime [<age_time>] Parameters: <age_time> : MAC address age time (10-1 000000), default: Show age time Default Setting: 300 Example: Set agetime value in 30 SWITCH/>mac agetim[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 280 SWITCH/>mac learning 1 s ecure MAC Dump Description: Show sorted list of MAC address entries. Synt ax: MAC Dump [<mac_max>] [<mac_addr>] [<vid>] Parameters: <mac_max> : Maximum number of MAC addresses 1- 8192, default: Show all addresses <mac[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 281 MAC Flash Description: Flush all learned entries. Synt ax: MAC Flush[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 282 6.1 1 LLDP Command LLDP Co nfiguration Description: Show LLDP configuration. Synt ax: LLDP Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports LLDP Mode Description: Set or show LLDP mode. Synt ax: LLDP Mode [[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 283 LLDP Option al TL V Description: Show / Set LLDP Optional TL Vs. Synt ax: LLDP Optional_TL V [<port_list>] [port_descr|sys_nam e|s ys_descr|sys_capa|mgmt_addr] [enable|disable] Parameters: <port_list> : Port list or 'all', default: All ports port_des[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 284 Parameters: <interval> : LLDP transmissio n interval (5-32768) Default Setting: 30 Example: Set transmission interval in 10 SWITCH/>lldp interval 10 LLDP Hold Description: Set or show LLDP T x hold value. Synt ax: LLDP Hold [<hold>] Parameters: <hold>[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 285 <delay> : LLDP transmission delay (1-8192) Default Setting: 2 Example: Set LLDP delay value in 1 SWITCH/>lldp delay 1 LLDP Reinit Description: Set or show LLDP reinit delay . Synt ax: LLDP Reinit [<reinit>] Parameters: <reinit> : LLDP reinit delay (1-[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 286 LLDP S tatistics Description: Show LLDP S tatistics. Synt ax: LLDP S tatistics [<port_list>] [clear] Parameters: <port_list> : Port list or 'all', default: All ports clear : C l e a r L L D P s t a t i s t i c s[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 287 6.12 S t ack Management Comma nd St ack List Description: Show the list of switches in stack. Synt ax: S tack List [detailed|productinfo] Parameters: deta iled : Show detailed information St ack List Description: Set the master election priority . Synt ax: S tack Master P[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 288 St ack Select Description: Set or show the selected switch ID. Synt ax: S tack Select [<sid>|all] Parameters: <sid> : Switch ID (1-16), default: Show SID Example: Select switch2 to management s witch2 SWITCH/>stack select 2 St ack SID Swap Description: Swap[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 289 S tack SID Delete <sid> Parameters: <sid> : Switch ID (1-16) St ack SID Asign Description: Assign SID and associated configuration to s witch. SID must be unassigned, switch must be present and switch must not alr eady be assigned to a SID. Synt ax: S tack SID[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 290 7. SWITCH OPERATION 7.1 Address T able The Switch is implemented with an addr ess table. This address table composed of many en tries. Each entry is used to store the address information of some nod e in network, including MAC addre ss, por t no, etc. This in-formation co[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 291 7.5 Auto-Negotiation The STP ports on the Switch have built-in "A uto-ne gotiation". This tec hnol ogy automatically sets the best possible ba ndwidth when a connection is established with another net work device (usu ally at Power On or Reset). This is done b y[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 292[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 293 8 . TROUBLE SHOOTING This chapter contains information to help you solve pro blems. If the Ethernet Switch is not functioning properly , make sure the Ethernet Switch was set up according to instructions in this manual. ■ The Link LED is not lit Solution: Check the cabl[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 294 ■ St acking not functioning Solution: 1. Check that modul es are installed correctly 2. PLANET CB-STX50 or CB-ST X200 cables not installed corre ctly (LEDs on front panel STX1 or STX2 do not light) 3. Check that the cabl es are inserted correctly 4. T he stack cable is [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 295 APPENDEX A A.1 Switch's RJ-45 Pin Assignment s 1000Mbps, 1000Base T Conta ct MDI MDI-X 1 BI_DA+ BI_DB+ 2 BI_DA- BI_DB- 3 BI_DB+ BI_D A+ 4 BI_DC+ BI_DD+ 5 BI_DC- BI_DD- 6 BI_DB- BI_DA- 7 BI_DD+ BI_DC+ 8 BI_DD- BI_DC- Implicit implementation of the crossover f unction [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 296 The standard cable, RJ-45 pin assignment The st andard RJ-45 recept acle/connector There are 8 wires on a standard UTP/ST P cable and each wire is color-coded. The following shows the pin allocation and color of straight cable and crossover cable connection: Straight Cabl[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 297 APPENDEX B : GLOSSARY A ACE ACE is an acronym for A cce ss C ontrol E ntry . It describes access permissi on associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, an d IPv4) and t wo ACE actions (permit and deny). The ACE also contains [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 298 D DES DES is an acronym for D ata E ncryption S tandard. It provides a complete description of a mathematical algorit hm for encrypting (enciphering) an d decrypting (deciphering) binar y coded information. Encrypting data converts it to an uninte lligible form calle d ci[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 299 DSCP DSCP is an acronym for D if fer entiated S ervices C ode P oint. It is a field in the head er of IP p ackets for packet classification purposes. E Ethernet T ype Ethernet T ype, or EtherT ype, is a fiel d in the Ethernet MAC header, defined by the Ethernet networking[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 300 connection. HTTPS provide authenticati on and encrypted communica ti on and is widely used on th e World Wide Web for security-sensitive communication suc h as payment transactions and corporate logons. HTTPS is really just the use of Netscape's Secure Sock et Layer [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 301 The current version of the Internet Message Access Protocol is IMAP4. It is similar to Post Office Protocol version 3 (POP3), but offers additional and more complex features . F or example, the IMAP4 protocol leaves your email messages on the server rather than downloadin[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 302 The frames also contain a MAC addr ess ( SMAC address ), which shows the MAC address of the equipment send ing the frame. The SMAC address is used by the s witch to aut omatically update the MAC t able with these dynamic MAC addresses. Dynamic entries are removed from the[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 303 optional TL Vs. If an optional TL Vs is disabled the correspondin g informati on is not included in the LLDP frame. P PING ping is a program that sends a series of packets over a net work or the Internet to a specific computer in order to generate a response from that com[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 304 There are six QCE frame types: Ethernet T ype, VLAN, UDP/ TCP Port, DSCP, TOS, and Tag Priority. Frames can be classified by one of 4 different QoS classes: "Low", "Normal", "Medium", and "Hi gh" for individual application. QCL QCL [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 305 which is the underlying protoc ol used in Microsoft Windows networking. Samba can be installed on a v ariety of operating system platforms, including Lin ux, most common Unix platforms, OpenVMS, and IBM OS/2. Samba can also register itself with the ma ster browser on the [...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 306 T Ta g P r i o r i t y T ag Priorit y is a 3-bit field storing the priority level for the 802.1Q frame. TCP TCP is an acronym for T ransmission C ontrol P rotocol. It is a commun ications protocol that uses the Internet Protocol (IP) to exchange the messages between compu[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 307 A LLDP frame can contain multiple pieces of information. Each of these pieces of informati on is known as TL V (TL V is short for "T ype Length V alue"). U UDP UDP is an acronym for U ser D atagram P rotocol. It is a communications protocol t hat uses the Intern[...]

User ’s Manu al of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 308 forwarded to the provider port with a single VLAN tag. Tagged frames received on a subscriber p ort are forwarded to the provider port with a double VLAN tag. VLAN ID VLAN ID is a 12-bit field specifying the VLAN to which the frame belongs.[...]