Transition Networks MIL-SM8TXAF2GPA Bedienungsanleitung

8 10/100TX + 1 10/100/1000T/10 /100 SFP C ombo w ith 4 PoE Injectors Ma naged Sw itch MIL-SM802GAF 8 10/100TX + 2 Gigabit Cop per/SFP Combo w ith 8 PoE Injectors Managed S w itch MIL-SM8TXAF2GPA User Manual Rev.1.00 2007-07-13[...]

Regulatory Appro val - FCC Class A - UL 1950 - CSA C22.2 No. 950 - EN60950 - CE - EN55022 Class A - EN55024 Canadian EMI Notice This Class A digital appar atus meets all the requirement s of the Canadian Interference-C ausing Equipment Regulations. Cet appareil numerique de la classe A respecte toutes les exigences du Reglement sur le mat eriel bro[...]

FCC Warni ng This Equipment has b een tested and fou nd to comply wit h the limits f or a Class-A digital device, pursuant to Part 15 of the FCC rules. These limits a re desi gned to provide reasonable protectio n against harmf ul interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, i[...]

i Contents FC C Warning ........................................................................... ........... i CE M ark Warning..................................................................... .......... ii Introductio n ....................... ........................... .......................... 1 Featu res................................[...]

ii Trunk Commands Set ............... .......... ............ .......... ......... ......... .......... .......... 2 7 VLAN Commands Set ... ......... ......... .......... ......... ............. ......... .......... ......... .... 29 Spanning Tree Commands Set ........... ......... .......... ......... ......... .......... ............ . 31 QOS Co[...]

iii SN TP Configu rati on ............... ......................................................... 58 IP S ecurity .............................. ........................................................ 61 User A uthe nticat ion ......................................................................... 62 Port Stati stic s .........................[...]

iv 802.1X/Radius Configuration .... ............. ......... .......... ......... ......... ............. ....... 9 3 System Configuration ............ ............. ......... .......... ......... ......... ............. ....... 9 3 802.1x Per Port Configur ation ............ ......... .......... ......... ......... ............. ....... 9 4 Misc Co[...]

1 Introduction Pow er-over -Eth ernet (PoE) eliminates the need t o run power t o other devices on a wired LAN. Using P ower-over-Ethernet systems installers needs to run onl y a single Category 5 Ethernet cab le that c arries both power an d data to each device. This allows for gre ater fl exibility in the location o f network devices an d signifi[...]

2 Features  S ystem Interface/Performance  RJ-45 ports support A uto MDI/MDI-X Functio n  Embedded 4-port or 8- port PoE injector function  Store-and-Forward S witching Architecture  Back-plane (Switching Fab ric): 5.6Gbps (8 10/10 0TX + 2 Giga Copper/Mini-GB IC Combo model)  Back-plane (Switching Fab ric): 3.6Gbps (8 10/10 0TX + [...]

3  Spa nning Tree  Support IEE E802.1d Spanning Tree  Support IEE E802.1w Rapid Spanning Tr ee  X-rin g  X-ring, Dual Hom ing, and Couple Ri ng Topology  Provide redu ndant backup feature and the re covery time below 30 0ms  Sup port 802.1ab LLDP * *  Ban dwidth Control  Ingress Packet Filter and Egress Rate Lim it  Br[...]

4 Softw are Feat ure Managem ent SNMP v1 SNMP v2 c SNMP v3 W eb/Telnet/Con sole (CLI )/Menu Driven ** VLAN Port ba sed VLAN IEEE80 2.1Q Tag VLAN (256 en tries) / VLAN ID(Up to 4K, VLAN ID can be a ssigned fro m 1 to 4094 ) GVRP (2 56 Groups ) Double Ta g VLAN (Q in Q)* Port Trunk with LACP LACP Port Trun k: 4 trunk groups of ma ximum 4 trunk mem be[...]

5 Port Se curity Suppor ts100 en tries of MAC address fo r static MAC and anothe r 100 fo r MAC filter Port Mirro r Suppor ts 3 mirroring types: “R X, TX an d Both packet” IGMP Suppor ts IGMP sno oping v1 and v2 256 mu lticast g roups IGMP qu ery mode IP Secur ity Suppor ts 10 IP add resse s that have pe rmission to acces s the switch ma nageme[...]

6 System log Suppor ts System log reco rd and remo te system log serv er SMT P Suppor ts SMTP Serve r and 6 email a ccounts fo r receiving even t alert SNMP Trap Up to 3 Trap sta tions Cold sta rt, Port lin k down, Port l ink up , authori zation fai lure, PoE stat us, X-ring topo logy change DHCP DHCP C lient DHCP S erver DNS Provide s DNS clien t [...]

7 Package C ontent s Unpac k the co ntents of the 8 10/100TX + 2 G igabit copper/Mini-GB IC Combo with 8 PoE Injectors Manage d Switch or 8 10/100TX + 1 10/100/1000T/ 100/1000 SFP Combo with 4 PoE Injectors Man aged Switch then verify them again st the che cklist be low:  (1) 8 10/100TX + 2 Gigabit copp er/Mini-GBIC Comb o with 8 PoE Injectors M[...]

8 Ha rd w are Descr iption This sectio n mainly d escribes the hardware of the PoE Injector Managed Switc h and gives a physical and f unctional overview on the certai n switch. Ph y sical Dimen sion (MIL-SM802GAF) 8 1 0/100TX + 1 10/100/10 00T/100/1000 SFP Combo with 4 P oE Injectors Managed Swi tc h’s physical dimensions is 217mm(W) x 140mm(D) [...]

9  RJ-45 Ports: 8 x 1 0/100 N-way auto-sensing f or 10Base-T or 100Base-TX connections. Ports 1 ~ 4 are general 10/100Base-TX Ethernet ports; Ports 5 ~ 8 are for Data in/out and Po wer out. In general, MDI means connecting to anoth er Hub or Switch while MDIX m eans connecting t o a wor kst ation or PC. Therefore, Auto M DI/MDIX would allow the [...]

10 LED Indica tors The LED Indicator s display real-time inf ormation of systematic operation status. The following table provide s descriptions of LED status and their meanin g. The LED ind icators d escription of 8 10/10 0TX + 2 G igabit Coppe r/Mini-G BIC Combo mo del (MIL-SM8 TXAF2GPA) LED Status Description Green Power On Power OFF No power in[...]

11 Green Connected to net work Blinking Networking is active LK/ACT (MINI GBIC 9, 10) OFF Not connected to network The LED ind icators d escription of 8 10/10 0TX + 1 10/ 100/1000 T/100/1000 SFP Combo mo del (MIL-SM802G AF) LED Status Description Green Power On Power OFF No power inputs Green The port is operating at speed of 100 0M COPPER 1000M OF[...]

12 OFF No powered device attached or power supplying failed Green The port is operating at speed of 100 M 100M OFF The port is disconnected or not ope rating at speed of 100M Orange Full duplex Blinking Collision of packets occurs FDX/COL (port 1~8) OFF Half duplex or not connect ed to network Rear Panel The 3-pronged power plug is l ocated on the [...]

13 Frequency of 50-60Hz, or work with DC 48V which is the redundant power supply for the switch. The Rear Panel of the 8 10/100 TX + 2 Gigabit copper/ MINI GBIC Combo with 8 PoE Inje ctor Managed Switch (MIL-SM8 TXAF2GPA) Desktop I nstalla tion Set the s witch on a su fficiently l arge flat space with a p ower outlet nearby. Th e surface where you [...]

14 Netw ork Application This secti on provides a few samples of network topology i n which the switch is used. In general, t he PoE Injector Managed Switch is designed as a segment switch which has large address table (8k MAC addr esses) and hi gh perform ance to deal with interconnecting networ king segments. PC, workstations, and serv ers can com[...]

15 Power over Ethe rnet Swit ch network application Small Work group The PoE Injector M anaged Switch can be used as a standalone switch to which personal computers, server, prin ter server, are directl y connected to form a sm all workgroup.[...]

16 Small W orkgro up application Segment Bridge For e nterprise networ ks where l arge data broadcasts are constantl y processed, this switch is an ideal solution f or department users to connect to the corporat e backbone. In the il lustration below, two Ethernet switches wi th PCs, print server, and local server attached, are bo t h conne ct ed t[...]

17 Segment Br idge appl ication[...]

18 Conso le Management Login in the Console I nterf ace W hen the connecti on between switch and PC is ready, turn on the PC and ru n a te rmin al emulation program or Hyper Te rminal and configure its communication parameters to match the following def ault characteristics of the console port: Baud Rate: 9600 bps Data Bits: 8 Parity: none Stop Bit[...]

19 Console log in screen CLI Mana gement The system supports console m anagement – CLI command. After you login to the system, you will s ee a comm and prompt. To enter CLI management interface, enter “ enable ” command. Th e following table lists the C LI commands and descr iption.[...]

20 CLI com mand interf ace Commands Level Modes Access Method Prompt Exit Method About This Mode1 User EXEC Begin a session with your switch. switch> Enter logout or quit. The user commands available at the user level are a subset of those available at the privileged level. Use this mode to • Perform basic tests. • Display system information[...]

21 EXEC mode. to • Display advanced function status • Save configuration Global Configura tion Enter the configure command while in privileged EXEC mode. switch (config)# To exit to privileged EXEC mode, enter exit or end Use this mode to configure parameters that apply to your switch as a whole. VLAN database Enter the vlan database command wh[...]

22 Commands Set List User EXEC E Privileged EXEC P Global configuration G VLAN database V Interface configuration I System Commands Set Commands Level Description Example show config E Show switch configuration switch> show config show terminal P Show console information switch# show terminal w rite memory P Save user configuration into permanen[...]

23 [Gatew ay] ip dhcp G Enable DHCP client function of switch switch(config)# ip dhcp show ip P Show IP information of switch switch# show ip no ip dhcp G Disable DHCP client function of switch switch(config)# no ip dh cp reload G Halt and perf orm a cold restart switch(config)# reload default G Restore to def ault swi tc h(config)# default admin u[...]

24 [IP address] clients by port fastEthernet 2 switch(config)# dhcpser ver ipbinding 192.168.1.1 show dhcpserver configuration P Show configuratio n of DHCP server switch# show dhcpserver configuration show dhcpserver clien ts P Show client entries of DHCP server switch# show dhcpserver clients show dhcpserver ip-binding P Show IP-Binding informati[...]

25 Port Commands Set Commands Level Description Example interface fastEtherne t [Portid] G Choose the port f or modification. switch(config)# interfa ce fastEthernet 2 duplex [full | half] I Use th e duplex configuration command to specif y the duplex mode of operation for Fast Ethernet. switch(config)# interfa ce fastEthernet 2 switch(config-if)# [...]

26 bandwidth t ype broadcast-multicast-fl oo ded-unicast I Set interface ingress limit frame t ype to ‘accept broadcast, multicast, and fl ooded unicast frame’ switch(config)# interfa ce fastEthernet 2 switch(config-if)# band width type broadcast-multicast-flo oded-uni cast bandwidth t ype broadcast-multicast I Set interface ingress limit frame[...]

27 state [Enable | Disabl e] I Use th e state interf ace configuration command to specif y the state mode of operation for Ethernet ports. Use the disable form o f this command to disable the port. switch(config)# interfa ce fastEthernet 2 switch(config -if)# state Disable show interface configuration I show interf ace configuration status switch(c[...]

28 [GroupID] [Port-list] lacp w orkp [Workport] with LACP active. [GroupID] :1~4 [Port-list]:Member port list, This parameter could be a port range(ex.1- 4) or a port list separate by a comma(ex.2, 3, 6) [W orkport]: The amount of work ports, this value could not be less than zero or be large than the amount of member ports. 1 1-4 lacp w orkp 2 or [...]

29 VLAN Commands Set Commands Level Description Example vlan database P Enter VLAN conf igure mode switch# vlan database Vlanmode [portbase| 802.1q | gvrp] V To set switch VLAN mode. switch(vlan)# vlanmode p ortbase or switch(vlan)# vlanmode 8 02.1q or switch(vlan)# vlanmode g vrp no vlan V No VLAN S witch(vlan)# no vlan Ported based VL AN configur[...]

30 port belong to a trunk group, this comman d can’t be applie d. vlan 8021q port [PortNumber] trunk-link tag [TaggedVID List] V Assign a trunk link f or VLAN by port, if the port belong to a trunk group, this comman d can’t be applie d. switch(vlan)# vlan 8021q port 3 trunk-link tag 2,3,6,99 or switch(vlan)# vlan 8021q port 3 trunk-link tag 3-[...]

31 Spanning Tree Commands Set Commands Level Description Example spanning-tree enable G Enable spanning tree switc h(config)# spanning-tree enable spanning-tree priorit y [0~61440] G Configure spanning tree priority parameter switch(config)# spanning-tre e priority 32767 spanning-tree m ax-age [seconds] G Use the spanning-tre e max-age global confi[...]

32 forw ard-time [seconds] forward-time global configuration command to set the forwarding- time f or the specified spanning-tree instances. The forwarding time determines how long each of the listening and learning states last before the port begins forwarding. forwar d-time 20 stp-path-cost [1~200000000] I Use th e spanning-tree cost interface co[...]

33 a port priority that is used when t wo switches tie for position as the root switch. stp-admin-p2p [Auto|True|False] I Adm in P2P of STP priority on this interface. switch(config)# interfa ce fastEthernet 2 switch(config-if)# stp-a dmin-p2p Auto stp-admin-edge [True|False] I Adm in Edge of STP priority on this interface. switch(config)# interfa [...]

34 qos priority cos [Priority][low est|low|mid dle|high] G Configur e COS Priority switch(config)# qos priorit y cos 0 middle qos priority tos [Priority][low est|low|mid dle|high] G Configur e TOS Priority switch(config)# qos priorit y tos 3 high show qos P Displays the information of Q oS configuration Switch# show qos no qos G Disabl e QoS functi[...]

35 hwaddr [MAC] address table of interface (static). fastEthernet 2 switch(config-if)# mac- address-tab le static hw addr 000012345678 mac-address-tabl e filter hwaddr [MAC] G Configur e MAC address table(f ilter) switch(config)# mac-addr ess- table filter hw addr 000012348678 show mac-address-ta ble P Show all MAC addr ess table switch# show mac-a[...]

36 snmp agent-mode [v1v2c|v3|v1v2cv 3] G Select the agent mod e of S NM P switch(config)# snmp agent-mod e v1v2cv3 snmp community-strings [Community] right [RO/RW] G Add SNMP comm unity string. switch(config)# snmp community-strings p ublic right rw snmp-server host [IP address] community [Community-string] trap-version [v1|v2c] G Configur e SNMP s[...]

37 match-rule [Exact|Prifix] views [Read View Name] [Write View Name] [Notify View Name] snmpv3 mibview view [View N ame] type [Excluded|Included] sub-oid [OID] G Configur e the mibview table of SNMPV3 agent switch(config)# snmpv3 mi bview view V1 type Exclud ed sub-oid 1.3.6.1 show snmp P Sho w SNMP configuration switch# show snmp no snmp communit[...]

38 [Read View Name] [Write View Name] [Notify View Name] no snmpv3 mibview view [View N ame] type [Excluded|Included] sub-oid [OID] G Remove spec ified mibview table of SNMPV3 agent. switch(config)# no snm pv3 mibview view V1 type Excluded sub-oid 1.3.6.1 Port Mirroring Commands Set Commands Level Description Example monitor rx G Set RX destination[...]

39 8021x enable G Use the 802.1x global configuration command to ena ble 802.1x protocols. switch(config)# 8021x enable 8021x system radiusip [IP address] G Use the 802.1x system radius IP global configuration command to chan ge the radius server IP. switch(config)# 8021x system radiusip 192.168.1.1 8021x system server port [port ID] G Use the 802.[...]

40 8021x misc quietperio d [sec.] G Use the 802.1x misc quiet period global configuration command to specif y the quiet period val ue of the switch. switch(config)# 8021x misc quietperiod 10 8021x misc txperiod [sec.] G Use the 802.1x misc TX period global configuration command to set the TX period. switch(config)# 8021x misc txperiod 5 8021x misc [...]

41 [disable | reject | accept | authorize] state interface configuration command to set the state of the selected port. fastethernet 3 switch(config-if)# 8021 x portstate accept show 8021x E D isplays a summ ary of the 802.1x properties and also the port sates. switch> show 8021x no 8021x G Disable 802.1x function switch(config)# no 802 1x TFTP [...]

42 SystemLog, SMTP and Event Command s Set Commands Level Description Example systemlog ip [IP address] G Set S ystem log server IP address. switch(config)# syste mlog ip 192.168.1.100 systemlog mode [client|server|both] G Specif ied the log mode switch(config)# syste mlog mode both show systemlog E Displa ys system log. Switc h> show systemlog [...]

43 event X-ring-topology-chan ge [Systemlog|SMTP |Both] G Set X-ring topology changed event t ype switch(config)# event X-ring-topology-change both event systemlog [Link-UP|Link-Dow n|Bot h] I Set port event for system log switch(config)# interfa ce fastethernet 3 switch(config-if)# event systemlog both event smtp [Link-UP|Link-Dow n|Bot h] I Set p[...]

44 sntp daylight G Enable daylight savin g time, if SN TP function is inactive, this command can’t be applied. switch(config)# sntp da ylight sntp daylight-period [Start time] [End time ] G Set period of daylight saving time, if SNTP function is inactive, this command can’ t be applied. Parameter form at: [yyyymmdd-hh:mm ] switch(config)# sntp [...]

45 no sntp daylight G Disable da ylight sa vin g time switch(config)# no sntp daylight X-ring Commands Set Commands Level Description Example Xring enable G Enable X-ring switch(config)# Xring e nable Xring master G Ena ble ring master switch(conf ig)# Xring master Xring couplering G Ena ble couple ring switch(config)# Xring c ouplering Xring dualh[...]

46 Web-Bas ed Mana gement This section introduces the configuration and functions of the Web-Based manag ement. A b out We b-base d Manag ement On the CP U board of the s witch th ere is a n embedded HTML web site res iding in f lash memory, which offers advanced manageme nt features and a llow users to manage the switch from anywhere on the networ[...]

47  K ey in “http://” + “IP Address” of the Switch, and then press “ Enter ”  Logi n screen will appe ar right after  K ey in the user name and p assword. The default user n ame and password is “ root ”  C lick “ Enter ” or” O K ”, then t he h ome scr een of the W eb-based m anagement appears right after Note: Th[...]

48  System Location: A ssign th e switch physical location (The m aximum length is 64 bytes)  System Description: Displays t he description of switch(Read only cannot be modified)  Firmware V ersion: Displays the switch’s firm ware version  Kernel Version: Displays the k ernel software version  MAC Address: D isplays the u nique ha[...]

49 are e asy t o be r emembered. Because t he Internet is ba sed on IP address ; every time you use a do ma in name , ther efore, a DNS service m ust transla t e t he n ame into t he correspo nding I P ad dress. For ex ample, the do main na me www .net.com might translate to 192. 168.1.1  DNS2: T he backup for DNS1. W hen DNS1 can not f unction,[...]

50 DHCP Server Configuration The system provides the DHCP server function. Enab le the DHCP server f unction, the switch system will be a DHCP server.  DHCP Se rver: Ena ble or Disabl e the DHCP Server f unction. Enable—t he switch wil l be the DHCP server on your local network  Low IP A ddr ess: T he dynamic IP range. Low IP address is the[...]

51 DHCP Client Entries W hen the DHCP server function is active, the system will collect the DHCP client information and display it h ere. DHCP Client E ntries interf ace Port and IP Bindings Assign the dynamic IP addr ess to the port. When the d evice is connecting to the port and asks for I P assigning, the s ystem will ass ign the IP address tha[...]

52 Port and IP Bi ndings interf ace TFTP - Upda te Fi rmware It pro vides the functi ons that allow user to update the s witch firm ware. Bef ore u pd ating, make sure the TFTP server is rea dy and the firmw are image is on the TFTP server.  TFTP Server IP A ddr ess: Key in the TFTP serv er IP  Firmware Fil e Name: The name of firmware im age[...]

53 TFTP - Rest ore Conf igurat ion Restore EEPROM valu e from TFTP server  TFTP Server IP A ddr ess: Key in the TFTP serv er IP  Restore File Name: Ke y in the restore file image name  A nd then, click A pp ly Restore C onfiguration interface TFTP - Bac kup Configur ation Save current EE PROM value f rom the swit ch to TFTP serv er, then g[...]

54 S y s tem Event Lo g Config uration Configure the system event mode, which you want to collect, and s ystem log server IP.  System Log Cli ent Mode: S elect the system log mode – client o nly, server onl y, or both S/C  System Log Server IP Address: Assign the system log server IP  C lick Re l oad to refresh the events l og  C lick[...]

55 S y s tem Event L og - SM TP Configurat ion You can set up the mail server IP, mail account, account password, and forwarded email account for receiving the event alert.  Email Alert: enable or disable the email alert function.  SMTP Server IP: set up the mail server IP address (when Email Alert enabled, this function will then be avail ab[...]

56 SMTP Co nfiguration in terface S y s tem Event L og - Event Configura tion Select the system log and SMTP ev ents. W hen selected events occur , the system will result the log informati on. Also, per port log a nd SMTP eve nts can be selected.  System ev ent s elect ion: 4 selections – Device cold start, Device warm start, SNMP Authentic at[...]

57 produce a log event  X-Ring topology change: W hen the X-ring topology has chan ged, the s ystem will produce a log ev ent  And then, click A pp ly Event Config uration interface  Port event selection: Select th e per port events and per p ort SMTP events. It h as 3 selections – Link U P, Link D own, a nd Link UP & Link Do wn. Dis[...]

58  Link U P & Link Down: The sy stem w ill result a log message when port connection is up and d own SNTP Co nfigurat ion You can configure the SNTP (Simple Network Time Protocol) settings. The SNTP allows you to synchronize swi tch clocks in the Internet. 1. SNTP Client: en able or disabl e SNTP f unction t o get the time f rom the SNTP se[...]

59 PDT - Pacific Da ylight PST - Pacif ic Standard ADT - Alaskan Dayligh t -8 hours 4 am ALA - Alaskan Standard -9 hours 3 am HAW - Hawai ian Standard -10 hours 2 am Nome, Alaska -11 hours 1 am CET - Central Europ ean FW T - French W inter MET - Middle European ME W T - Middle European W inter SWT - Swedish Wi nter +1 hour 1 pm EET - Eastern Europe[...]

60 Standard GST Guam Standard, USSR Zone 9 IDLE - International Date Line NZST - New Zealand Standard NZT - New Zealand +12 hours Midnight 4. SNTP Sever URL: set the SNTP server IP address. 5. Daylight Saving P eriod: set up th e Day light Saving beginning ti me and Daylight Saving ending time. B oth will be different in ever y year. 6. Daylight Sa[...]

61 IP Securit y IP security function allows user to assign 1 0 specific IP add ress es that have permis sion to access the switch th rough the web browser f or the securing switch m anagement.  IP S ecurity Mode: when this o ption is in En able mode, the Enable HTTP Server and Enable Telnet Ser ver check boxes will then b e available.  Enable[...]

62 IP Securit y interface User A ut hentica tion You can change login user name and passwor d for the management securit y issue 1. User name: Key in t he new user name (The default is ‘ root’) 2. Password: Ke y in the new password (The de fault is ‘root’) 3. Confirm passw ord: Re-type the new password 4. And then, click A pp ly User Authen[...]

63 Port Stat istics The following inf ormation provides the current port statistic information.  Port: The port num ber.  Type: Displays the cur rent speed of connection to the port.  Link: The status of linking—‘ Up ’ or ‘ Dow n ’.  State: I t’s set by Port Control. W hen the state is disabled, the po rt will not transmit o[...]

64 Port Cont rol In Port co ntrol, you can vie w every port status that depends on user setting and the negotiation result. 1. Port: select the port that you want to configure. 2. State: Current port status. The port can be set to disable or enable mode. If the port setting is disable then will not receive or tra nsmit any packet. 3. Negotiation: s[...]

65 Port Trunk The Link A ggregation Control Protocol ( LACP) provid es a st andardized mea ns for exchanging information between Partner S y stems on a link t o allo w th eir Link Aggregation Control instances t o reach agreement o n the identit y of the Link Aggregation Group to which t he l ink belong s, move the link t o th at Link Aggr egation [...]

66 8. Use D elete button to del ete Trunk Group. Select the Group ID and click D elete button. Port Trunk —Aggregator S etting in terface Port Trunk - Aggregator Information W hen you have set up the aggre gator setti ng with LACP disabled, you will see the loc al static trunk group inf ormation here.[...]

67 Port Trunk – Aggregator In format ion interfa ce Port Trunk - State A ctivity W hen you had setup th e LAC P aggregator, you c an configure port state activity. You can mark or un-m ark the port. W hen you mark the p ort and click Apply button the p ort state activity will cha nge to Active . Opposite is P assive .  Active: The port auto ma[...]

68 Port Trunk – St ate Activ ity interface Port Mirror ing The Port mirroring is a method for monito r traffic in switched networks. Tr affic through ports can be mo nitored via one sp ecific port. That me ans traffic goes in or out monitored (source) ports will be d uplicated into mirror (destinatio n) port.  Destination Por t: You can s elec[...]

69 Port Trunk – Port M irroring interf ace Rate Limiti ng Y ou can set up every port’ s bandwidth rate an d frame limitation type.  Ingress Limit Frame type: Se lect the frame ty pe you want to filter . The f rame typ es have 4 options for selecting: All, Broadcast/Multicast/Floo ded Unicast, Broadcast/Multicast an d Broadcast only . Broadca[...]

70 Rate Limit ing interfa ce  A ll the ports support port ingress and egress rate control. For example, assume port 1 is 10Mbps, users can s et it’s eff ective egress rate as 1Mbps, ingress rate as 500Kbps. The switch performs the ingress ra te by packet counter to meet the specified rate  Ingress: Enter the port eff ective ingress rate (Th[...]

71 However, all the netw ork devices are still plug ged into the same switch p hysically. The switc h su pports port-based and 802.1Q (tagged-based) VLAN. The default configuration of VLA N operation mode is ‘ Dis able ’. VLAN Confi guration inter face VLAN configuration - Port-based VLAN Packets ca n go among only members of the same V LAN gro[...]

72 VLAN – Port Ba sed interfa ce  C lick Add t o add a new VLAN gr oup (T he maxi mum VLAN group is up to 256 VLAN groups)  E ntering the VLAN name, gro up ID and grouping the m embers of VLAN group  A nd then, click Apply[...]

73 VLAN—Por t Based Add interfac e  Yo u will see the VLAN displays.  U se D elete button to delete unwanted VLAN.  U se Edit button to modif y existing VLAN group. Note Remember to execute the ‘Save Conf iguration’ action, otherwise the ne w configuration will los e when switch power off .[...]

74 802.1Q VLAN Tagged-based VLAN is an IEEE 802.1Q sp ecif ication stand ard. Therefore, it is possible to create a VLAN across devices from different switch venders. IEEE 802.1Q VLAN uses a technique to insert a “tag” into the Ethernet f rames. Tag contains a V LAN Identifier (VID) that indicates t he VLAN numbers. You can cre ate Tag-b ased V[...]

75 802.1q VLAN interface 802.1 Q Configura tion 1. Enable GVRP Pr otocol: Mark the check box t o enable GVRP protocol. 2. Select the port that you want to configure. 3. Link Type :  Access Link : Single switch only , allows user to group ports by setting the s ame VID to those ports.  Trunk Link: The extended a pplication of Access Link. W hi[...]

76 4. Untagged VID: Assign t he untagged fram e VID. 5. Tagged VID: Assign the tagged f rame VID. 6. Click Apply Group C onfigur ation Edit the existing VLAN Group. 1. Select the VLAN group in the table list. 2. Click Apply Group Co nfiguration i nterface 3. You can Change the VLAN group name an d VLAN ID. 4. Click Apply .[...]

77 Group Co nfiguration i nterface Rapid Span ning Tree The Ra pid Spanning Tree Protocol (RSTP) is a n evolution of the Spannin g Tree Protocol and provides for f aster spanning tree convergenc e after a topology c hange. The system also supports STP an d the system will automaticall y detect the connected d evice that is running STP or RSTP pr ot[...]

78  Max Age (6-40): The number o f seconds a bridge waits without r eceiving Spanning-tree Protocol configuration messages before attempting a reconfiguration. Enter a value between 6 throug h 40  Hello Time (1-10): T he time that controls s witch sends out the BPDU p acket to check RSTP current status. Enter a va lue between 1 thr ough 10 ?[...]

79 RSTP - Port Configuration You can configure the path cost and priority of every port. 1. Select the port in Port column. 2. Path Cost: The cost o f the p ath to the other bridge f rom this t ransmitting bridge at the specified port. Enter a number 1 through 2000000 00. 3. Priority: Dec ide which p ort shoul d be blocked by priority in LAN . Ente[...]

80 RSTP Port Configurati on interfac e SNMP Conf igura tion Simple Net work Ma nagement P rotocol (SN MP) is t he protocol d eveloped to manage nodes (servers, workstations, routers, switches and hubs etc.) on a n IP network. SN MP enables network admi nistrators to manage net work performance, f in d and solve n etwork problems, a nd plan f or net[...]

81 1. String: Fill the name o f string. 2. RO: Read only. En ables requests accompa nied by t his stri ng to display MIB-object information. 3. RW: Read & write. Enables req uests accom panied by this string to display MIB-object information an d to set MIB objects. 1. Click Add . 2. To remove the com munity string, select the community st ring[...]

82 Trap Configuration A trap manager is a management station that r eceives traps an d the system alerts generated by t he s witch. If no trap m anager is defined, no traps will issue. C reate a t rap manager by entering the IP address of the station and a comm unity string. To def ine management stations as trap manager, enter S NMP community s tr[...]

83 Configure the SNMP V3 f unction. Context Table Configure SNMP v3 context table. Assign the context name of context table. Click A dd to add context name. Cl ick R emov e t o remove unwanted context n ame. User Profile Configure SNMP v3 user ta ble.  User ID: Set up the us er name.  Authentication Passw ord: Set up the authentication pass w[...]

84 SNMP V3 configurat ion interface[...]

85 Group Table Configure SNMP v3 group tabl e.  Security Name (User ID): Assign the user nam e that you have set up in use r table.  Group Name: Set up t he group name.  Click A dd to add context name.  Click R emov e to remove unwanted context n ame. Access Table Configure SNMP v3 access tab le.  Context Prefix: Set u p the context [...]

86  Click A dd to add context name.  Click R emov e to remove unwanted context n ame. QoS Config uration You can configure Q oS policy and priority setting, per port priority setting, COS and TOS setting. QoS Policy and Priority Type  Qos Policy: select the QoS policy rule.  Using the 8 , 4,2,1 w ei ght fair queue scheme: The switch wil[...]

87 rule.  Click A pp ly . QoS Config uration i nterface[...]

88 Port Base Priority Configure per port prio rity level.  Port: Each port has 4 priority levels – High, Middle, Low, and L owest.  C lick A pp ly . COS Configuration Set up the COS priority level.  COS priority: Set up the COS pr iority level 0~7 –High, Middle, Low, Lowest.  Click A pp ly . T OS Configuration Set up the T OS priori[...]

89 that su pport IGMP. Ena bling IGMP allows th e ports to detect IG MP queries a nd report packets and mana ge IP multicast traff ic t hrough t he switch. IGMP have three fundamental types of m essage as follows: Message Description Query A message se nt from the querier (IG MP router or switch) asking f or a response f rom ea ch h ost b elonging [...]

90 IGMP Configura tion interf ace[...]

91 X-Ring X-Ring provides a faster redundant rec overy than Sp anning Tree topolo gy. The action is similar to STP or RSTP , but the algorithms not t he same. In the X-Ring topology, ev ery s witch sh ould enable X-Rin g f unction and assign two member po rts in the ring. O nly o ne switch in the X-R ing gr oup would be set as a master switch that [...]

92 Once its forwarding port f ails, the system will automaticall y u pgrade its blocking port to be the forwarding po rt of the Ring Master s witch.  Enable Coupling Ring : Enable the coupling rin g function. Mark the ch eck box to enable the coupling ring f unction.  Coupling port: Assign the member port which is conn ected to the other ring[...]

93  Securit y In this section, you can conf igure 802.1x and MAC address table. 802.1X/Radius Configuration 802.1x is a n IEEE authentication specification prevents the client from connecting to a wireless access point or wi red switch until i t provides authorit y, like t he user nam e and password that are verifi ed by an authentication serv e[...]

94 802.1x S ystem Configur ation interfa ce 802.1x Per Por t Configura tion You can configure 802.1x authentic ation state for each port. The State provid es Disable, Accept, Reject and Authori ze. Hit “ Space ” key to cha nge the state value.  Reject: The specif ied port is required to be held in th e unauthorized state.  Accept: The spe[...]

95 802.1x Per Port Setting i nterface M isc Configur ation 1. Quiet Period: Set the period which the port doesn’t tr y to acquire a supplicant. 2. TX Per iod: Set the period the port waits f or retransmit next EAPOL P DU during an authentication session. 3. Supplicant Timeout: Set the period of time the switch waits for a supplicant response to a[...]

96 7. Click A pp ly . 802.1x Mis c Configurat ion interface MAC Address Table Use the MAC address table to ensure the por t security. Static MAC Addr ess You can add a static MAC address; it remains in the switch's address tab le, regardless of whether t he dev ice is physically connect ed to the s witch. This sa ves t he switch from having to[...]

97 3. Click A dd . 4. If you want to delete the MAC address f rom filtering table, select the MAC address and click De l ete . Static MAC Add resses in terface M AC Filtering By filtering MAC address, the switch can ea sily f ilter pre-configure d MAC address and reduce the un-safet y. You can add and delete fi ltering MAC address.[...]

98 MAC Filterin g interface 1. MAC A ddress: Ent er the MAC address that you want to fi lter. 2. Click A dd . 3. If you want to delete the MAC address from f iltering table, select the MAC address and click De l ete . All MAC Addre sses You can view the port inf ormation of the connected d evice’s MAC address a nd related devices’ MAC address. [...]

99 All MAC Addr ess interf ace[...]

100 Pow er over Eth ernet This segment shows th e Power over Ethernet f unction. PoE Statu s  Maximum Pow er Available: Displays the maximum power supply in W att.  Actual Pow er Consumption: This column shows the real-time tot al power consumption.  Pow er Source: This column shows the power source which is supplying.  Pow er Source 1 [...]

101 certain period (for deta ils, see the IEEE 802.3af specification).  Capacitive Detection: If the port and capacitive detecti on are enabled, the capacitances state rea ds in the voltage result from the constant current. This is t he subtracted from the pre-capacitance voltage t o get a charge rate. If this charge rate is w ithin the window o[...]

102 Factor y Default interfa ce Save Co nfigurati on Save all co nfigurations that y ou h ave made i n the system. To ensure the all configur ation will be saved. Click Sav e to save the all configuration to the f lash memory. Save Conf iguration inter face S y s tem Reboot Reboot the switch in soft ware reset. Click R eb oo t t o reboot the system[...]

103 Troublesho oting This section is intended to help solve the most common problems on the PoE Injector Managed Switch. Incorrect connec tions The switch port can automatically detect straight or crossover cable when you link switch with other Ethernet device. For the RJ- 45 connector s hould use correct U TP or STP cable, 10/100Mbps port use 2- p[...]

104  Improper Network Topo logies It is important to m ake sure that you have a valid network topology. Comm on topology faults include excessive cable leng t h a nd too many repeaters (hubs) between end nodes. In addition, you should m ake sure that your network topology contains no data path loops. Between any two ends nodes, there should be o[...]

105 Techn ical Specificat ion This secti on provides the s pecifications of 8 10/100TX + 2 Gigab it copper/ Mini-GBIC Combo wit h 8 PoE Injector s M anaged Sw itch a nd the 8 10/100T X + 1 10/100/1000T/100/100 0 SFP Combo with 4 P oE Injectors Managed Switch. Standard IEEE802.3 10BASE-T Et hernet IEEE802.3u 100BASE-TX IEEE802.3ab 1000Base-T IEEE802[...]

106 Full-duplex/Collision ([ Orange], 8 10/100TX + 1 10/100/1000T/100/1000 SF P Combo with 4 PoE Injectors Managed Switch) Connector 100Base-T: RJ-45 with auto MDI/MDI-X P ort 1~4 (4 PoE Injectors model)/ Port 1~8 (8 PoE Injectors model) support POE injecting functi on 1000Base-T:RJ-45 with auto MDI/MDI-X Gigabit fiber: Mini-GBI C socket 100M fiber[...]

107 135 W atts (8 PoE Injectors m odel) Ventilation 1 f an Operating Temperature 0 ~45 , 5%~95%RH Storage environment -40 ~70 , 95% RH Dimensions 8 PoE Injectors model : 270mm( W ) x 210mm(D) x 44mm(H) 4 PoE Injectors model: 217mm(W ) x 140mm(D) x 43mm(H) EMI FCC Class A CE Safety UL, cUL, CE/EN60950 -1 ** optional[...]

108 Appen dix Console Port Pi n A ssi gnments The DB-9 se rial po rt on the switch is used to connect to t he switch f or out-of-band console configuration. The c onsole—command line interf ace can be accessed from a terminal or a PC running a terminal emulation program. The pin assignments used to connect to the serial port are prov ided in the [...]

109  Console Port to 9-Pin D TE Port on PC Switch’s 9-Pin Serial Port CCITT Signal PC’s 9-Pin DTE Port 2 RXD ---------RXD ------------ 3 TxD 3 TXD -----------TXD --------- 2 RxD 5 SGND --- --------SGND - --------- 5 SGND 100B A SE- TX/10B A S E- T Pin A s si gnments W ith 100BASE-TX/10BASE-T cable, pins 1 and 2 are us ed for transmitting dat[...]

110  Pin out of POE Midspan Hub/Switch Pin Signal / Name 1 RX+ 2 RX- 3 TX+ 4 VC C+ 5 VC C+ 6 TX- 7 VCC- 8 VCC-  Pin out of POE Endspan Hub/Switch Pin Signal / Name 1 TX+/VCC+ 2 TX-/VCC+ 3 TX+/VCC- 4 5 6 TX-/VCC- 7 8 Note ‘+ ’ and ‘-‘ signs represent the polarity of the wires that make up each wire pair. Before you powered PD , please [...]

111 are con nected s traight through t o pins 1, 2, 3 and 6 at the oth er end of the cable. The table below shows the 10BA SE-T/ 100BASE -TX MDI and MDI-X port pin outs. Pin MDI-X Signal Name M DI Sign al Name 1 Receive Data plus (RD+ ) Transmit Data plus (TD+) 2 Re ceive Data min us (RD-) Transmit Data minus (TD -) 3 Transmit Data plus (TD+) R ece[...]