Milan Technology MIL-S3580 manuel d'utilisation

1 M M I I L L - - S S 3 3 5 5 8 8 0 0 24 Port Managed Switch with 2 Optional Gigabit/Fiber port s[...]

2[...]

3 Regulatory Approval - FCC Class A - UL 195 0 - CSA C22.2 Number 950 - EN60950 - CE EN55022 Cla ss A EN55024 Canadian EM I Notice This Clas s A di gital apparatus meets all t he requir ements of the Ca nadian I nterf erence-Ca using Equipment R egulat ions. Cet app areil numerique de la classe A respecte toutes les exigences du R eglement sur le m[...]

4 1. Introduction The MIL-S3580 Managed Switch is designed to provide your network with Ethernet, Fast Ethernet, Gigabit Ethernet connec tivity over twisted pair and fiber optic cabling. T wo expansion slots on the front further add to t he flexibility of the syst ems . Figure 1-1. The MIL-S3580 Switch Features  Conforms to IEEE802.3, IEEE802[...]

5 Management Features  Console and T elnet Configuration  W eb-based management  SNMP network management  IEEE 802.1Q T agging VLAN and Port-Based VLAN support  IEEE802.3x Flow Control Mechanism for Full-duplex mode and Backpressure for Half-duplex  IEEE 802.1D Blocking, Learning, and Forwarding stat es support f[...]

6 Package Content s MIL-S3580 Rubber Feet Rack-mounted Kit RS-232 cable User Guide Power Cord Figure 1-2. Pa ckage Contents Compare the content s of your MIL-S3580 package with the standard c hecklist above. If any item is missing or damaged, please cont act your local dealer for servi ce. Management Methods The MIL-S3580 supports the following man[...]

7 Console and T elnet Management Console Management is done through the RS-232 Console Port. Managing the MIL-S3580 in this method requires a direct connection between a PC and the MIL-S3580. T elnet management is done over the network. Once the MIL-S3580 has an IP and i s on the network, you can use T elnet to log in and change or view the configu[...]

8 2. Hardware Description The Front Panel The front panel of the MIL-S3580 consists of 2 4 auto-sensing 10/100Mbps Ethernet RJ-45 Port s, two optional exp ansion slots, and a cons ole port. The LED Indicators are located on the front lef t panel of the Switch. Figure 2-1. Front Panel of the MIL -S3580 24 10/100BASE-TX RJ-45 Port s (Auto MDI/MDIX): [...]

9 LED Indicators: Figure 2-2. LED Indicators All LED indicators are located on the front lef t panel of the MIL-S3580. They provide a real-time indication of system and operational status. The following t able gives descriptions of the LED st atus and their meanings. LED Statu s Description Green Power is on. PWR Off Power is off. Green The port is[...]

10 Rear Panel The 3-pronged power plug and ON/OFF switch are located on the rear panel of the MIL-S3580. The swi tch works in the range 100-240V AC, 50-60Hz. Figure 2-3. Rear Panel of the MIL-S3580 Power On After all network cables are connected, plug the power cord into the power socket on the back panel and the other end into a power outlet. T ur[...]

11 3. Connecting to the Network This section provides the i nstallation procedure and instruc tions for assigning an IP address. Pre-Inst allation Requirement s Before you start hardware inst allation, make sure you have the items listed below . z PCs with 10/100Mbps E thernet NICs or 100Mbps Fiber NICs: Y our PC must have a standard Ethernet inter[...]

12 Desktop Mounting 1. Set the switch on a suffic iently large flat space with a power outlet nearby . 2. Make sure surface is clean, and dust free. 3. Remove adhesive backing from the rubber feet. 4. Apply the rubber feet to each corner on the bottom of the switc h. Figure 3-1. Attaching rubber feet on the bo ttom of the switch C C C A A A U U U T[...]

13 B. After both mounting brackets are att ached, position the swi tch in the rack by lining up the holes in the brackets with the appropriate holes on the rack. Secure the switch to the rack with a screwdriver and the rack-mounting screws. Figure 3-3. Mount the MIL-S3580 in an EIA St andard 19-inch Rack N N N O O O T T T E E E : : : For proper ven[...]

14 Figure 3-4. Connecting the MIL-S3580 to a T erminal via RS-232 Cable Login in the Console Interface When the physical connection between the switch and the PC is est ablished, turn on the PC and run a terminal emulation program or Hyper T erminal and configure its commun ication p arameters to match the following default characteristics of the c[...]

15 T elnet Y ou can access the console using a T elnet connection once an IP address is assigned. The switch offers p assword protection for this interface. When the telnet session opens, select T erminal>Properties . In the T erminal Preference s dialog, verify the following settings. Under T erminal Options select VT100 Arrow s and set buf fer[...]

16 First Screen Figure 3-6. First Screen Display in Console Interface Once you have configured your system terminal and started the s witch, you can login to the console interface. The default username is admin. There is no p assword required. Y ou can change both the user name and password in the User Authentication Menu option, which appears on t[...]

17 A fter login, you will see the Main Menu screen as illustrated in the picture. The Main Menu displays all the submenus and pages that are available in the console interface. 1. System Infor mation Figure 3-8. System Information Menu The system information screen displays information such as hardware, software versions, and system up time. You ca[...]

18 The management setup menu contains 6 submenus and is discussed in the following sections. 2.1. Network Configuration Figur e 3-9. Netwo rk Con figu rati on Me nu This menu allows the setting of your IP address of the switch according to your network's unique configuration. The factory defaults for all three addresses are 0.0.0.0 . After cha[...]

19 Y ou can change the serial port setting through this screen to suit you environment, however , it is recommended to keep the default setting. 2.3. SNMP Community Setup Figure 3-1 1. SNMP Community Menu Use the SNMP communities to restrict access to the switch by SNMP management stations by adding editing or disabling SNMP communities. You can co[...]

20 2.4. T rap Receiver Figure 3-12. T rap Receiver Menu A trap receiver is a management station designated by the switch to receiv e SNMP traps sent from the s witch. Use Trap Receiver s creen to designate certain community to receive trap(s) generated by the system. In the default configuration, no trap receivers are configured and the authenticat[...]

21 This menu allows you to enable/disable Web-Based manage ment capability. If disabled, there is no access to management function through the use of a Web browser such as Microsoft Internet Explorer or Netscape. 2.6. Trap Filter Setup Fig ure 3-14. T rap Filter Setup Menu The system will generate a set of SNMP traps upon the occurrence of an event[...]

22 Device Control Menu contains 15 submenus where you can add and modify functions and features of the switch. 3.1. Switch Device Configuration Figure 3-16. Switch Device Configuration Menu Use < Sp ace Bar > to toggle the Enable/Disable field and type in the appropriate value in the T ime and Priority fields. x Sp anning T ree Enable St a[...]

23 x Ingress Filtering examines the t agged header of each t agged frame that enters a port and determines whether the t agged frame and the port that received the frame are members of the same VLAN. If they bel ong to the same VLAN, the port accepts the frame. If they belong to dif ferent VLANs, the port discards the frame. If Ingress filtering[...]

24 6. T urn on GVRP in Switch Configuration Menu. 7. Update Configuration Setting. 8. Cold S tart in System S tart Menu. x IGMP S nooping relates to the protocol IGMP . IGMP enables routers to create lists of devices that are members of multicast groups. A multicast group might consist of all us ers that want to see the comp any yearly meeting o[...]

25 3.2. Individual Port Configuration Figure 3-18. Switch Port Con figuration Menu In Switch Port Configuration Menu, you can configure basic characteristics such as speed, flow control , and VLAN ID as well as the fol lowing features supported by the switch: x Port Description - Sixteen characters can be entered to identify the port. x Admin[...]

26 the provisioned speed or none for full wire speed. Configuration t akes effect immediately after s aving, with no resetting of the switch necessary . The various levels are listed below . 10Mb 312Kb 625KB 938Kb 1.25Mb 2Mb 4Mb 6Mb 8Mb 100Mb 3.12Mb 6.25Mb 9.3 8Mb 12.5Mb 20Mb 40Mb 60Mb 80Mb 1000Mb 31.2Mb 62.5Mb 93.8Mb 125M b 200Mb 400M b 600Mb 800 [...]

27 3.3.1. S t atic Unicast Address Configuration Y ou can create, modify , or delete S tatic Unicast Address by selecting entries from the following screen. Figure 3-20. S tatic Unicast Address Configuration Menu This screen shows all the S tatic Unicast addresses configured and their st atus. There is a separate index for 128 different S tatic Uni[...]

28 Enter the MAC address you wish to set as the st atic unicast address and the associated port. Use < Sp ace Bar > to toggle the status field between Disable, Forwarding, Filter-In, and Filter-Out. x Disable – Thi s Unicast Address ent ry has no effect to the switch system. x Forwarding – All p ackets designated to this MAC address[...]

29 3.4. Port S t atistics Figure 3-22. Port Sta tistics Menu Y ou can view the port specific st atistical information displayed in this screen by entering the port number in the Port ID fi eld. The stati stics are automatically refreshed, but you can force the screen to refresh or reset the counters to 0 by selecting the appropriate option. 3.5. S [...]

30 By default, S panning T ree is disabled on the MIL-S3580. The switch uses the IEEE802.1D S panning T r ee Protocol (STP), when enabled, to ensure that only one path at a time is activ e between any two nodes on the network. In networks where there is more than one p hysical path between any two nodes , STP ensures a si ngle active p ath between [...]

31 3.6. S p anning T ree Protocol Port Configuration Figure 3-2 4. Spanning T ree Protocol Port Configuration Menu In this menu, you can assign sp anning priority and path cost to any port. A port with higher priority and lower p ath cost is less likely to be blocked if S panning T ree Protocol is detecting network loop. x STP Port Priority - Ra[...]

32 Figure 3-25. Port B ased VLAN Conf igurat ion Menu Port Based VLAN needs to be set in the Switch Device Control Menu before any configuration in this menu takes effect. By default, the VLAN mode configuration for the switch is IEEE 802.1Q. O nce set to Port Based VLANs, all port s are on the same VLAN by default. There can be up to 128 dif feren[...]

33 Figure 3-25. Port Based VLAN Configuration Menu 3.8. 802.1Q VLAN Configuration When configuring the IEEE802.1Q VLAN, there are slightly dif ferent options available when the port is configured on the cons ole screen or the web browser . A port on a VLAN can be in one of three different st ates. x Normal where the port is not mapped to a speci[...]

34 Once configured there are 3 possible states of the ports that show in the management menus. S : shows a static registration of the port and GVRP is not running D : the port has been registered to the specific VLAN by GVRP C : the port has been registered to the specific VLAN by GVRP and it was also set to that VLAN by a network administrator N N[...]

35 Figure 3-27. St atic VLAN Port Configuration Menu ( ) – Port is not set as static (fixed) member of the VLAN but it can become a member through Dynamic VLAN Registration. Dynamic VL ANs occur when GVRP sets them. Unless GVRP is running, no registration of dynamic VLANs can take place. (F) – Port is set as static (fixed) member of the VLAN an[...]

36 3.8.1. Dynamic VLAN T a ble Figure 3-28. Dynamic VLAN T able This screen displays the VLAN mapping for port(s) that join VLAN(s) through Dynamic VLAN Registration. GVRP enables the switch to dynamically create 802.1Q compliant VLANs on links with other devices running GVRP. This enables the switch to automatically c reate VLAN links between othe[...]

37 All ports are set by default as untagged. To change port(s) to be tagged , use the < Space Bar > to unc heck - ( ) the port(s) . In the above configuration, port 2 will send out tagged packets. If VLANs need to co mmunicate with other VLANs on the network, VLAN tagging needs to be set for those ports. Also, in order for GVRP to work, VLAN [...]

38 3.9. GARP Configuration Figure 3-31. GARP Configuration Menu GARP (Generic Attribute Registration Protocol) defines the architecture, rules of operation, state machines and variables for the registration and de-registration of attribute values. It allows dynamic filter entries for VLAN membership to be distributed among the Forwarding Databases [...]

39 3.10. IGMP Snooping T able Figure 3-3 2. IGMP Sno oping T able This table shows the multicast groups found by IGMP Snooping. By supporting IGMP (Internet Group Management Protocol) Snooping, the s witch can forward multicast traffic intelligently. Packets are forwarded to the ports that bel ong to the multicast group instead of being broadcasted[...]

40 Multiple links between switches can be grouped (trunk) to work as one virtual, aggregate link. You can create 4 trunks at a time; each trunk can hold up to 8 ports. Only ports of the same speed can belong to a single trunk . Link aggregation is supported and trunking can be configured to another switch supporting the standards. x Trunk Group [...]

41 By enabling port mirroring, traffic to and from the source port will be forwarded to the target port. You can select any of the 26 ports as either the Source port or the Target port by using <Space Bar> to select the desired port number . 4. User Authentication Figure 3-35. User Authentication Menu Y ou can change the pass word setting in [...]

42 Figu re 3-36. User Authentication Detailed Menu After selecting an entry to add or modify, type in user name and password, toggle the user privilege with < Space Bar > and then update the changes. 5. System Utility 5.1 System Rest art Fig ure 3-37. System Restart Menu You need to perform ei ther a Cold Start or Warm Start to have the chang[...]

43 configuration changes and completely restart the switch’s hardware including the power, just as i f you had powered the sw itch off and on. A w arm boot is a software restart; no hardware is affected. Both types of restarts, save the configuration changes to the switch. 5.2 Factory Reset Figure 3-38. Facto ry Reset Menu This menu lets you to r[...]

44 5.3 Login T imeout Interval Figure 3-39. Login Timeout Interval Y ou can set up the time you need for the automatic log-out to take ef fect. The default is that the local console connection and T elnet session will stay connected and not time-out. 5.4 System Download Fig ure 3-40. System Downloa d Menu TFTP downloads the code for the s witch to [...]

45 After flash upgrading the switch's system software, in Windows Internet Explorer , go to T ools, Internet Options, click on Delete Files button in General tab to clear all temporary internet files, and click OK. Then refresh window to view the new updated version of the MIL-S3580. 5.5 Quick St art Figure 3-41. System Quick S tart M enu When[...]

46 4. W eb-Based Management This section introduces the configuration and functions of the Web-Based management. About W eb-based Management An embedded HTML web server resides in flash memory inside the switch. It allows users to manage the switch from anywhere on the network through a standard browser suc h as Microsoft Internet Explorer or Netsc[...]

47 4. T ype user name and password. The default is “admin” and no p assword . 5. Press “Enter” or click ”OK”, then the Home Screen of the Web-bas ed management appears. System Information Y ou can manage the switch using third pa rty’s SNMP (Simple Network Management Protocol) agent. Access rights to the SNMP agent are controlled by c[...]

48 Management Setup Network Configuration Figu re 4-3. Network Configuration Menu The IP address, subnet mask and default gateway of the managed node can be changed or modified on this menu. Enter a new IP address, subnet mask and default gateway in the corresponding edit box. The default IP address, subnet mask and gatew ay are all 0.0.0.0 . The I[...]

49 Y ou can change the serial port baud rate setting through this sc reen to suit your environment, however , using the default setting is recommended. SNMP Community Setup Figure 4-5. SNMP Community Set up Menu Public Community (Read-only access right) means that member of community can view the information but cannot make changes to the configura[...]

50 Trap Receiver Figure 4-6. Trap Receiver Menu A trap receiver is a management station de signated by the switch to receive SNMP traps sent from the switch. Use Trap Receiver screen to designate certain community to receive trap(s) gene rated by the system. In the default configuration, no trap receivers are configured and the au thentication trap[...]

51 This is where you can enable/disable Web-Based management capability which in turn allow or disallow the access to management function through the use of a Web browser. If Web Based management is disabled, the only way to manage the switch is connecting locally through the console port or via the network by Telnet. T rap Filter Setup Figu re 4-8[...]

52 Device Control Switch Configuration Figure 4-9. Switch Configuration Menu x Sp anning T ree Enable St ate - By d efault, S panning T ree is disabled on the MIL-S3580. The switc h uses the IEEE802.1D S panni ng T re e Protocol (STP), when enabled, to ensure that only one p ath at a time is active between any two nodes on the network. x Dyna[...]

53 discards the frame. If Ingress Filtering is disabled, any t agged frame is accepted on any port on the switch. It does not matter whether the frame and port belong to the same or different VLANs. x Per-Port Priority allows port based priorities. Y o u can designate the priority for the receiving port so that any frame received will be tra nsm[...]

54 VLANs are assi gned. x IGMP Snooping relates to the protocol IGMP . IGMP enabl es routers to create lists of devices that are members of multicast group s. A multicast group might consist of all users that want to see the comp any yearly meeting on video. Vi deo is a multicast application. IGMP snooping enables the s witch to monitor the flow[...]

55 Figure 4-12. Switch Port Configuration Menu x Port Description - Sixteen characters can be entered to identify the port. x Administration St ate - When set to Disable, the port is inoperable and no devices can access the switch through the port. The administrator must then enable the port in order for a li nk to be established. x Speed [...]

56 x Bandwidth Management - Eight levels of speed control facilitate the management of bandwidth. Configuration of receiv e and transmit control of each port is independent. Y ou can set the port to transmit and/or receive at the provisioned speed or none for full wire speed. Configuration t akes effect immediately after s aving, with no resetti[...]

57 x Trunk Group 1: o 2 Ports: 1, 2 o 4 Ports: 1, 2, 3, 4 o 8 Ports: 1, 2, 3, 4, 5, 6, 7, 8 x Trunk Group 2: o 2 Ports: 9, 10 o 4 Ports: 9, 10, 11, 12 o 8 Ports: 9, 10, 11, 12, 13, 14, 15, 16 x Trunk Group 3: o 2 Ports: 17, 18 o 4 Ports: 17, 18, 19, 20 o 6 Ports: 17, 18, 19, 20, 21, 22, 23, 2 4 x Trunk Group 4: o 2 Ports: 25, 26 Port Mi[...]

58 x Change the Disable S tatus to Enable . x Choose " Submit " button. Permanent Address Configuration Y ou can Add, Modify , or Delete S tatic Unicast Address by selecting entries from the following screen. Figure 4-15. S tatic Unicast Address in Permanent Address Configuration Menu Enter the MAC address of a system you wish to se[...]

59 Figur e 4-16. Static Multic ast Addre ss Conf igur ati on in P erman ent Address Configuration Menu In the S tatic Multicast Configuration Menu screen, you can add member(s) to the group by checking the port(s). S p anning T ree Protocol Configuration Spanning Tree is a link management protocol that provides path redundancy while preventing unde[...]

60 Figu re 4-17. Spanning T ree Protocol Configuration Menu If you enable the S panning T ree Protocol, you must complete the Priority and T ime fields with appropriate values or use defaults . In t his screen, you can assign spanning priority and p ath cost to any port. A port with h igher priority and lower path cost is less likely to be blocked [...]

61 In this screen you can assign sp anning Priority and Path Cost to any port. A port with higher priority and lower path cos t is less likely to be blocked if S panning T ree Protocol is detecting network loop. x STP Port Priority - Range is 0 to 255. This p arameter is used by STP to determine the port(s) to use for forwarding. The port with t[...]

62 VLAN Configuration Figure 4-20. Port Based VLAN Configuration Menu ( S ) – Port(s) is set as static (fixed) member of the VLAN. ( D ) – Port(s) is set as static (fixed) member of the VLAN and can be regist ered as a dynamic VLAN member as well. ( C ) – Port(s) is being both a static member and a dynamic member of the VLAN. Port Based VLAN [...]

63 x Normal where the port is not mapped to a specific VLAN but can be come a member through Dynamic VLAN registration. Dynamic VLANs are set when GVRP set s them. Unless GVRP is running, there i s no registration of dynamic VLANs. x Fixed registration maps a port to a speci fic or fixed VLAN. The network administrator can "fix" a V[...]

64 Figure 4-21. S tatic VLAN Configuration Menu Dynami c VLAN T a ble Me nu Figure 4-22. Dynamic VLAN T able This screen displays the VLAN mapping for port(s) that join the VLAN(s) through Dynamic VLAN Registration.[...]

65 Figu re 4-23. Untagged Con figuration Menu All ports are set by default a s Untagged in this switch, to change port(s) to T agged just pick the port number you desire and select “ No ” from the Port Map. Fig ure 4-24. MTU/MDU Per Port VLAN T able in The VLAN Con figuration Menu This screen as above only reflects the setting you made in Switc[...]

66 Figu re 4-25. Port Based VLAN Configu ration in the VLAN Configuration Menu Select the VLAN entry to create, modify, or delete the VLAN group. Then mark a s ( Y )es to belong to certain VLAN group(s) or ( N )o to not belong to that VLAN.. GARP Configuration Figu re 4-26. GARP Configu ration Menu[...]

67 GARP (Generic Attribute Registration Protocol) defines the architecture, rules of operation, state machines and variables for the registration and de-registration of attribute values. It allows dynamic filter entries for VLAN membership to be distributed among the Forwarding Databas es of VLAN-aware switches. By joining GVRP (GARP VLAN Registrat[...]

68 disrupting network performance. This lookup table reflects the multicast group(s) (up to 32) configuration of your system and provides an overview of the port(s) map to each multicast group. User Authentication Figure 4-28. User Authentication Men u Y ou can change the password setting in the User Authentication Menu. Y ou can also create user a[...]

69 System Utility System Rest art Figure 4-29. System Restart Menu Either a Cold Start or Warm Start needs to be executed to have the changes s aved and keep in effect until you make another change. Factory Reset Figure 4-30. Factory Rese t Menu This menu lets you to reset a certain portion of the current configuration back to factory default or al[...]

70 all parameters of the all VLAN configuration is reset and only the one default VLAN is in effect as it was configured from the factory. No other switch configuration is changed. In order to do a complete system reset, every one of the 6 items in the menu need to be reset. Login Timeout Interval Figure 4-31. Login Timeout Interva l Menu Y ou can [...]

71 Figure 4-31. System Download Menu TFTP downloads the c ode for the switch to perform a software upgrade. The switch supports two different upgrade modul es: BOOT ROM and System Sof tware. These two upgrades can be done concurrently or one after the other . After flash upgrading the switch's system software, in Windows Internet Explorer , go[...]

72 5. Network Configuration This section provides you a few samples of network topology in which the MIL-S3580 is used. The Switch provides versatile configuration options for the network. It is ideally suited as a workgroup or segment Switch in a network; it has the flexibili ty to provide switched 10Mbps to the desktop or shared hubs, aggregate t[...]

73 Figur e 5-1. Collapse d Backbone Application Dep artment al Bridge For enterprise networks where large data broadcas ts are constantly processed, this switch is an ideal solution for department users to connect to the corporate backbone. The MIL-S3580 used as a segment switch can alleviate user contention for bandwidth and eli minate server and [...]

74 Figure 5-2: Departmental Bridge Application N N N O O O T T T E E E : : : Full-duplex operation only applies to point-to-point access (fo r example, when attac hing the switch to a workstation, server , or another switch). When connecting to hubs, use a st andard cascaded connection set for half-duplex operation. High Performance Switched Workgr[...]

75 The switch can provide the same bandwidth of FDDI and A TM at much lower costs. In addition, all current adapters and network devices can still be used. The switching cross-domain connection is better than bridge and router because users can ret ain LAN structure in whi ch any node can freely communicate with any other node. Figure 5-3: High Per[...]

76 Hence, group members can coordinate their data commu nication requirements regardless of the actual working locations; and the logical network can extend to any point you want it to. Moreover , VLAN groups can be modified at any time to add, move or change users without any re-cabling. Figure 5-4: VLAN Workgroup Application Shared Server The MIL[...]

77 In this example, st ations on different VLANs share resources. As a result, VL AN 1 and VLAN 2 can access VLAN 3 for printing. The broadcasts from port s configured in VLAN3 can be seen by all VLAN port members of VLAN3.[...]

78 6. Product S pecifications This section provides the specifications of MIL-S3580 switch, and the following tabl e lists them. St andards Compliance IEEE802.3 10BASE-T IEEE802.3u 100BASE-TX and 100BASE-FX IEEE802.3ab 1000BASE-T IEEE802.3z 1000BASE-SX IEEE802.3x Flow Control IEEE802.1p Priority Support IEEE802.3ac Frame Extension for VLAN Tagging [...]

79[...]

80 P/N 900003 97_A (062102)[...]