Milan Technology MIL-SM2401M-STK manuel d'utilisation

24-Port + One Dual -Module Expansion Slot Stackable Managed Switch MIL-SM2401M-STK USER GUIDE[...]

Regulatory Approval - FCC Class A - UL 1950 - CSA C22.2 No . 950 - EN60950 - CE - EN55022 Class A - EN55024 Canadian EMI Notice This Class A digital appar atus meets all the requirements of the Ca nadian Interference-C ausi ng Equipment Regulations. Cet appareil numeri que de la classe A respecte toutes l es exigences du Reglement sur le materi el [...]

Table of Contents 1. Introduction Features Software Fe atures Package Co nte nts Managem ent Methods Console and Telnet Manageme nt Web-based Ma na gem en t SNMP Network Management Ethernet S witching Techno l ogy 2. Hardw are Descripti on Front Panel LED Indicat ors Rear Panel Desktop Instal latio n Rack-mount ed Installat i on Power On 3. Netw or[...]

5-2-5. Sp anning Tree C ommands Set 5-2-6. QoS Comm an ds Set 5-2-7. IG MP Commands Set 5-2-8. Mac/ Filter Tabl e Commands Set 5-2-9. SNM P Comman ds S et 5-2-10. Por t Mirro r ing Co mm an d s Set 5-2-11. St a cking C omm ands Set 5-2-12. 80 2.1 x Comma nds Set 5-2-13. TFTP Comma nds Set 6. Console Men u Management 6-1. Main Me nu 6-2. Stat us and[...]

6-3-8-1. MA C A ddres s Ag ei ng T ime 6-3-8-2. Br oadcast Storm F iltering 6-3-8-3. Max Bridg e Transmit D elay B ou nd 6-3-8-4. C ollision Retr y Forever 6-3-8-5. Ha sh Algorithm 6-3-8-6. I FG Compen sat ion 6-3-8-7. IP St a cking Group ID ( 0…65535) 6-3-8-8. IP St acking Mode 6-4. Prot ocol Relat ed Confi g uration 6-4-1. ST P 6-4-1-1. ST P Se[...]

6-5-3-4. S ave Config uration 6-6. Xmod e m Upgrade 7. Web-Based Mana gement 7-1. System Login 7-2. Port Status 7-3. Port Statisti cs 7-4. Admin istrator 7-4-1. IP A ddress 7-4-2. S witch Setti ng 7-4-2-1. B asic S wi t ch Settings 7-4-2-2. A dvanced S ett i ngs 7-4-2-3. Mi sc ell an eou s Sett in gs 7-4-3. Co nsole Port I nformation 7-4-4. Port Co[...]

7-4-12- 1. Syst em Config uration 7-4-12-2. Per Port Config uration 7-4-12- 3. 802.1X Misc ellaneous C o nfigurati on 7-4-13. TFTP Upda te Firmware 7-4-14. C onfiguratio n Backup 7-4-14- 1. TFT P Restore Configurat ion 7-4-14- 2. TFTP Backu p Configur ation 7-4-15. F actory Def ault 7-4-16. S ystem Reboot 7-5. Pa nel List 7-6. IP St acking 7-6-1. S[...]

[...]

1 1. Introduction The MIL-SM2401M-STK managed switch is a multi-port switch that can be used to build high-performance switched workgroup networks. This switch is a store-and-forward device that offers lo w latency for high-speed networking. The switch is targeted at workgroup, department or backbone computing environments. The switch features a ?[...]

2 Features  Conforms to IEEE802.3 10BASE-T , 802.3u 100BASE-TX/FX, 802.3a b 1000BASE-T, 8 0 2.3z Gigabit fi ber  24 10/100 Ethernet ports plu s one expansion slot  IEEE802.3x F low control ¾ Flow control for full duplex ¾ Backpressure for half duplex  High back-plane bandwidth 8.8Gbps  IEEE802 .3ad Port tru nk with L ACP  Broadc[...]

3 Software Features Management Provides SNMP, Web browser, Telnet and local RS-232 console management. The telnet and console also supports command line interface. RFC Standard RFC 1157 SNMP, RFC 1213 MIB II, RFC 1643 Ethernet like, RFC 1493 Bridge MIB, RFC 1757 RMON 1, RFC 1215 Trap, RFC 2674 VLAN MIB, private MIB. SNMP Trap Cold start, link down,[...]

4 Port Based Priority Supports 3 settings: “Disable, Low or High priority”. When set to “Disable”, the incoming packet will follo w Q oS policy; Otherwise, the packet will f ollo w port priority setting t o “High/Low” queue. IGMP Supports IGMP snooping for Multi-Media application and supports 256 groups Port Security Supports ingress an[...]

5 Package Contents Unpack the contents of the package and verify them against the checklist be low.  MIL-SM2401M-STK Switch  Power Cord  Four Rubber Feet  Rack Mount Ears  RS-232 cable  User Guide (CD Manual)  Warranty Card If any item is missing or damaged, please contact your local dealer for service. Management Methods The M[...]

6 192.168.1.77 with a subnet mask of 255.255.255.0. This default address can be used to login and change the configuration using Teln et. Web-based Management The switch provides an embedded HTML web server residing in flash memory. It offers advanced management features and allo ws users to manage t he sw itch from anywhere on the network through [...]

7 Ethernet Switching Technology Ethernet Switching Technolo gy dramatical ly boosted the total bandwidth of a network, eliminated congestion problems inherent with CSMA/CD (Carrier Sense multiple access with Collision Detect ion) protocol, and greatly reduced unnecessary transmissions. This revolutionized networking. First, by allowing two-way, sim[...]

8 2. Hardware Description Front Panel The Front Panel of the MIL-SM2401M-STK switch series consists of 24 10/100Base-TX RJ-45 ports (Auto MDI/MDIX) and one expansion slot. The LED Indicators and console port are also located on the front panel of the switch. Console LED Fast Ethernet Ports Module Bay Port Indi cators Figur e 2-1. Fr ont panel for M[...]

9 LED Indicators The LED Indicators give real-time information of systematic operation st atus. The following table provides descriptions of LED statuses and their meaning. Figure 2-2. LED Indicators LED Status Description Green Power On Power Off Power is not connected Green The port is in 100Mbps speed. 100M Off The port is in 10Mbps speed. Green[...]

10 Rear Panel The 3-pronged power plug is located at t he rear panel of the MIL-SM2401M-STK as shown in Figure 2-3 . The Switch will wo rk with AC in the range 100-240V AC, 50-6 0Hz. Figure 2-3. The Rear Panel of the 24 10/100T X plus one Exp. Slot stackable switch[...]

11 Desktop Installation Set the switch on a sufficiently large fl at space with a power outlet nearby. The surface where you put your switch should be clean, smo oth, level and sturdy. Provide enough clearance around the switch to allow attachment of cables, power cord and allow air circulation. Attaching Rubber Feet A. Make sure the mounting surfa[...]

12 Rack-mounted Installation The MIL-SM2401M-STK switch come with a rack-mounted kid and can be mounted in an EIA standard size, 19-inch Rack. The switch can be p laced in a wiring closet with other equipment. Perform the following steps to rack mount the switch: A. Position one bracket to align with the holes on one side of the switch and secure i[...]

13 B. After att aching both mounting brackets, po sition the MIL-SM2401M-STK in the rack by lining up the holes in the bracket s with the appropriate holes on the rack. Secure the switch to the rack with a screwdriver and the rack-mounting screws. Figure 2-6. Mount the switch in an EIA standard 19-inch R ack Note: For proper v entilation, allow abo[...]

14 3. Network Application This section provides you a few samples of network topology in which the Switch is used. In general, the 24 10/100TX plus one Exp. Slot Single IP Stackable Switch is designed as a segment switch. That is, with its large address table (8000 MAC address) and high performance, it is ideal for interconnecting networking segmen[...]

15 Small Workgroup The MIL-SM2401M-STK switch can be used as a standalone switch to which personal computers, servers and printer servers are directly connected to form a small workgroup. Figure 3-1. Small Workgroup Application[...]

16 Segment Bridge For enterprise networks where large data broadcasts are constantly processed, this switch is an ideal solutio n f or de partment users to connect to the corporate backbone. In the illustration below, two Ethernet switches with PCs, print servers, and lo cal servers attached, are both connected to the sw itch. All the devices in th[...]

17 Stacking Workgroup Up to eight (8) individual MIL-SM2401M-STK swit ches can be con nected to form a single logical unit using embedde d stacking technology. The st ack behaves as a single switching unit that is manageable by a master switch elected from one of the member switches. The master switch serves as the control center for the stack and [...]

18 4. Console Management Connecting a Terminal or PC to the Console Port Console management involves the admin istr atio n of the switch via a direct connection to the RS-232 console port. This port is a female DB-9 connector. From the main menu of the console program, the user has access to manage the functions of the switch. Figure 4-1. Connectin[...]

19 Communication Parameters After the connection between Switch and PC is finished, turn on the PC and run a terminal emulation program or Hyper Terminal to match the following default characteristics of the console port: Baud Rate: 9600 bps Data Bits: 8 Parity: none Stop Bit: 1 Control flow: None Figure 4-2. The settings of communication parameter[...]

20 Console - Login After you have entered the pa rameter settings, click OK . When the blank screen appears, press the Enter Key to access the login screen. Type the user name and password to login. The default user name is root ; the default pa ssword is root . Figure 4-3. Console login screen 1. The switch also provides a serial int erface to man[...]

21 4. The switch is shipped with a default IP address of 192.168.1.77. The default subnet mask is 255.255.255.0.[...]

22 Console Management Options The system supports two types of console managem ent – CLI Command and Menu Selection. After you login to the system, you will see a command prompt. To enter the Menu Selection management interface, type “ menu ” at the command prompt and you will see the main menu interface. To enter CLI Command management inter[...]

23 5. CLI Management Interface To enter CLI Command management interface, type “ enable ” at the command prompt. The following tables list the CLI commands and descriptions. 5-1. Commands Level Modes Access Method Prompt Exit Method About This Mode1 User EXEC Begin a session with your switch. Switch> Enter logout or quit. The user commands a[...]

24 while in privileged EXEC mode. mode, enter exit or end switch as a whole. VLAN database Enter the vlan database command while in privileged EXEC mode. Switch (vlan)# To exit to user EXEC mode, enter exit. Use this mode to configure VLAN-specific parameters. Interface configuration Enter the interface command (with a specific interface) while in [...]

25 5-2. Commands Set List 5-2-1. System Commands S et Commands Command Level Description Defaults Example system name [systemname] Global configuration mode Set switch system name string Switch (config)# system name xxx system location [system location] Global configuration mode Set switch system location string Switch (config)# system location xxx[...]

26 reload Global configuration mode Halt and perform a cold restart Switch (config)# reload default Global configuration mode Restore to default Switch (config)# Default username [user-name] Global configuration mode Changes a login username. (maximum 10 words) Switch (config)# username xxxxxx password [password] Global configuration mode Specifies[...]

27 show accounting Privileged EXEC Show username & password Switch# show accounting Username: root Password: root show version User EXEC Use the show version user EXEC command to display version information for the hardware and firmware. Switch> show version Firmware version: 1.0 Hardware version: 3.0 Kernel version: 1.10 show terminal Privi[...]

28 5-2-2. Port Commands Set Commands Command Level Description Defaults Example Use the fast Ethernet interface configuration command Switch (config)# interface fastEthernet 0/1 interface [FastEthernet /module Ethernet] [slot id] [id] Interface configuration mode Use the module Ethernet interface configuration command Switch (config)# interface mod[...]

29 speed [10 | 100 | 1000 | auto] Interface configuration mode Use the speed configuration command to specify the speed mode of operation for Fast Ethernet. Auto Switch (config)# interface fastEthernet 0/1 Switch (config-if) # speed 10 speed [10| 100 | 1000 | auto] Interface configuration mode Use the speed configuration command to specify the spee[...]

30 security on or no security Interface configuration mode Use the security configuration command on Ethernet ports. Use the no form of this command to disable security on the port. Disable Switch (config)# interface fastEthernet 0/1 Switch (config-if) # security on priority on [hi | low] or no priority Interface configuration mode Use the priority[...]

31 State [Enable | Disable] Interface configuration mode Use the state interface configuration command to specify the state mode of operation for Ethernet ports. Use the disable form of this command to disable the port. Enable Switch (config)# interface fastEthernet 0/1 Switch (config-if) # state disable show interface configuration Interface confi[...]

32 show bandwidth Interface configuration mode Display the bandwidth of the values Switch (config)# interface fastEthernet 0/1 Switch (config-if) # Show bandwidth[...]

33 5-2-3. Trunk Commands Set Commands Co mmand Level Description Defaults Example port group [group-number] [port-list] lacp [on | off] workp [work ports] no port group [group-number] lacp [on | off] workp [work ports] Global configuration mode Add trunking group. Use the no form of this command to delete trunking group. Disable LACP: Switch (confi[...]

34 Update finished!![...]

35 5-2-4. VLAN Commands Set Commands Command Level Description D efaults Example Vlan datatbase Privileged EXEC mode To enter the VLAN configuration interface Switch# vlan database Switch(vlan)# vlanmode [disable| portbase| 802.1q | gvrp] VLAN database mode To set switch VLAN mode .Use the no form of this command to restore to default. Disable Swit[...]

36 [port Number] mode 802.1Q | 802.1Q with GVRP VLAN mode vlan [Group name] vlanid [Vlan ID] port [port Number] tag [port Number] VLAN database mode Add new 802.1Q VLAN [VLAN name]: VLAN name [VLAN ID]: 1 ~ 4094 [port ID]: port members 1~9 Switch(vlan)# vla n v2 vlanid 2 port 1-4 tag 2-4 no vlan [Group name] or [VLAN ID] VLAN database mode Delete 8[...]

37 cent_02, Decent_dpr-decent _dpr, Decent_LAT-decen t_lat, Decent_LAVC-dece nt_larc, IBM SNA-ibm, X.75 internet-x75, X.25 Layer3-x25 [VLAN ID]: 1 ~ 4094 [port Number]: port Number 1~24 vlanidrange [VLANidrange] VLAN database mode Set VLAN ID range [1~255] range 0 [256~511] range 1 [512~767] range 2 [768~1023] range 3 [1024~1279] range 4 [1280~1535[...]

38 10 [2816~3071] range 11 [3072~3327] range 12 [3328~3583] range 13 [3584~3839] range 14 [3840~4094] range 15 VLAN protocol [Groupname] add [portNumber] [tagged | untagged] VLAN database mode Set the port of some port gr o u p tagged or untagged Switch (vlan)# vlan protocol v2 add 5 tagged VLAN protocol [Groupname] delete [portNumber] VLAN databas[...]

39 port [port ID] pvid [port VID] ingressfilter 1 [on | off] ingressfilter 2 [on | off] VLAN database mode Set Port PVID and Ingress Filter Rules1 & Ingress Filter Rules2 Switch (vlan)# port 2 pvid 2 ingressfilter1 off ingressfilter2 on show port [port ID] VLAN database mode show Port PVID and Ingress Filter Rules1 & Ingress Filter Rules2 S[...]

40 5-2-5. Spanning Tr ee Commands Set Commands Co mmand Level Description Defaults Example show spanning-tree User EXEC mode Display a summary of the spanning-tree states. Switch> show spanning-tree System: Priority: 32768 Max Age: 20 Hello Time: 2 Forward Delay: 15 Priority: 32768 Mac Address: 004063800030 Root_Path_Cost: 0 Root Port: we are ro[...]

41 spanning-tree priority [number] Global configuration mode Use the spanning-tree max-age global configuration command to change the priority. Use the no form of this command to return to the default interval. 32768 Switch (config)# spanning-tree priority 32767 spanning-tree max-age [seconds] Global configuration mode Use the spanning-tree max-age[...]

42 Protocol (STP) topology. Use the no form of this command to return to the default interval. spanning-tree hello-time [seconds] Global configuration mode Use the spanning-tree hello-time global configuration command to specify the interval between hello bridge protocol data units (BPDUs). Use the no form of this command to return to the default i[...]

43 spanning-tree forward-time [seconds] Global configuration mode Use the spanning-tree forward-time global configuration command to set the forwarding-time for the specified spanning-tree instances. The forwarding time determines how long each of the listening and learning states last before the port begins forwarding. Use the no form of this comm[...]

44 considers the path cost when selecting an interface to place into the forwarding state. Use the no form of this command to return to the default value. stp-path-priority [Port Priorit y] Interface configuration mode Use the spanning-tree port-priority interface configuration command to configure a port priority that is used when two switches tie[...]

45 5-2-6. QOS Commands Set Commands Co mmand Level Description Defaults Example qos storm-control [5|10| 15|20|2 5| off (%)] or no storm-control Global configuration mode Enable/Disable broadcast storm control. Use the no form of this command to restore to default. OFF Switch (config)# qos storm-control 5 qos low-priority-dela y-bound [on|off] [sec[...]

46 qos level [priority] enable Global configuration mode [Priority] 0~7 0~3 LOW 4~7 HI Switch (config)# qos level 2,3 enable no qos level [priority] Global configuration mode [Priority] 0~7 0~3 LOW 4~7 HI Switch (config)# no qos level 0-7 qos bridge-delay-bo und [number] . no qos bridge-delay-bo und Global configuration mode Set qos bridge delay bo[...]

47 show qos bridge-delay-bo und Privileged EXEC mode Show bridge delay bound Switch (config)# show qos bridge-delay-bound bridge-delay-bound 5[...]

48 5-2-7. IGMP Commands Set Commands Command Level Description Defaults Example igmp [on | off] Global configuration mode Enable /Disable IGMP snooping function Off Switch (config)# igmp on Igmp-query [auto |enable | disable] Global configuration mode Modify IGMP query mode Disable Switch (config)# Igmp-query enable show ip igmp profile Privileged [...]

49 5-2-8. Mac / Filter Table Commands Set Commands Command Level Description Defaults Example mac-address-ta ble aging-time [on | off] mac-address-ta ble aging-time [sec.] or no mac-address-ta ble aging-time Global configuration mode Use the mac-address-table aging-time global configuration command to set the length of time that a dynamic entry rem[...]

50 MAC address table. no mac-address-ta ble [static | filter] hwaddr [MAC address] vlanid [VLAN-ID] Interface configuration mode Use the no mac-address-table privileged EXEC command to delete entries from the MAC address table. Switch (config)# interface fastEthernet 0/2 Switch (config-if)# no mac-address-table static hwaddr 004063112233 vlanid 10 [...]

51 5-2-9. SNMP Commands Set Commands Command Level Description Defaults Example snmp system-name [SystemName] Global configuration mode Set Snmp agent system name N/A Switch (config)# snmp system-name l2switch snmp system-location [SystemLocation] Global configuration mode Set Snmp agent system location N/A Switch (config)# snmp system-location lab[...]

52 5-2-10. Port Mirro ring Commands Set Commands Co mmand Level Description Defaults Example port monitor [RX|TX|Both |Disable] PortList Or no port monitor Interface configuration mode Use the port monitor interface configuration command to enable Switch Port Analyzer (SPAN) port monitoring on a port. Use the no form of this command to return the p[...]

53 Port 6 Rx: P o r t 7 R x : Port 7 Rx: Port 8 Rx: Analysis Port 8 Tx: Analysis P o r t 9 R x : Port 9 Rx:[...]

54 5-2-11. Stacking Commands Set Commands Command Level Description Defaults Example show stackinglist User EXEC Show IP stacking List Switch>show stackinglist MAC = 00:22:33:44:55:66 [Master] No Slave! Show stackinginfo [MAC address] User EXEC Show the stack information Switch>show stackinginfo 00.22.33.44.55.66 GroupID: 3000 Stacking Mode: [...]

55 set information [name] Stacking Mode Set the information of the Stack Switch(stacking-00.22.33. 44.55.66)# set information test Setting System Information: test[...]

56 5-2-12. 802.1x Commands Set Commands Command Level Description Defaults Example show 8021x User EXEC mode Display a summary of the 802.1x properties and also the port sates. Switch> show 8021x 8021x [on | off] Global configuration mode Use the 802.1x global configuration command to enable 802.1x protocols. Use the no form of the command to re[...]

57 8021x system sharekey [Sharekey] or no 8021x system sharekey Global configuration mode Use the 802.1x system sharekey global configuration command to change the shared key value. Use the no form of this command to return to the default interval. Switch (config)# 8021x system sharekey 123456 8021x misc quietperiod [quietperiod value] Or no 8021x [...]

58 Or no 8021x supptimeout an EAP request. 8021x misc servertimeout [SEC] Or no 8021x servertimeout Global configuration mode Set the period of time the switch wait for a server response to an authentication request. Switch(config)# 8021x misc servertimeout 50 8021x misc maxrequest [Number] Or no 8021x maxrequest Global configuration mode Set the n[...]

59 port is required to be held in the Authorized state.  Authorized: the specified port is set to the Authorized or Unauthorized state in accordance with the outcome of an authentication exchange between the Supplicant and the authentication server.  Disable: The specified port is required to be held in the Authorized state. 5-2-13. TFTP Comm[...]

60 tftp:config.text flash [TFTP IP address] [file name] Global configuration mode Restore configure file command Switch(config)# Tftp:config.text flash >192.168.1.1 >restore.dat tftp:firmware flash [TFTP IP address] [file name] Global configuration mode Update firmware command Switch (config)# Tftp:firmware flash >192.168.1.1 >image.bin[...]

61 6. Console Menu Management To enter the Menu Selection management interface, type “ menu ” at the command prompt. The following sections show the menu interface screens and descriptions. 6-1. Main Menu There are six items f or selection as follows: Status and Coun ters: Show the status of the switch. Switch Configuration: Me nus to conf igur[...]

62 <Control Key> The control keys listed below are provided in all m enus: Tab: Move the cursor to next item. Backspace: Move the cursor to previous it em . Enter: Selects item. Space: Toggle selected item to next configuration or changes the value. Esc: Exits the current action mode.[...]

63 6-2. Status and Counters In Status and Counters, you can view Port status, cou nters, and system information. Press the “ Tab ” or “ Backspace ” to choose an item , and press “ Enter ” key to select item.[...]

64 6-2-1. Port Status Type: Displays port connection speed. Link: Displays the port's link status. When the port is connecting with the device and working normally, the link status is “ UP ”. W hen the port has no link, the link status is “ Down ”. State: A port that is enabled will be displayed as “Enable”. A port that is disabled[...]

65 enabled on the port. Actions-> Press the Tab or Ba cksp ace key to choose action menu, and then press the Enter key to select the item. <Previous Page>: Displays previou s page. <Next p age>: Dis plays next page. <Quit>: Exits the port status page, and returns to previous menu.[...]

66 6-2-2. Port Counters The following information provides a view of the current status of the unit. Select Refresh to view updated statistics or select Clear to reset all counters to 0. Actions-> Press the Tab or Ba ckspac e key to choose action menu, and then press the Enter key to select item. <Refr esh >: Updates statistics on all coun[...]

67 6-2-3. System Informat ion System Name: Displays the name of the device. System Location: Displays where the device is located. System Description: Displays the device type. Firmware Version: Display s the switch’s firmware version. Kernel Version: Displays the system kernel software version. Hardware Version: Displays the switch’s Hardware [...]

68 6-3. Switch Configuration In Switch Configuration, there are 8 main functions – Administration, Port, Trunk, Port Mirroring, VLAN, Priority, MAC Address, and Misc. Configuration. Press the Tab or Ba ckspac e key to choose action menu, and then press the Enter key to select item.[...]

69 6-3-1. Administration Configuration In Administration Configuration, you can configure system parameters, IP, username and password.[...]

70 6-3-1-1. Device Information Name: 10 characters can be used to give the switch a uniqu e name in order to distinguish it on the network. After conf iguration this name will show at the top of each menu screen. Description: 32 characters can be used to describe the switch. Location: 32 characters can be used to give a location of the switch. Cont[...]

71[...]

72 6-3-1-2. IP Configuration This menu enables the user to change the default settings of the IP address, subnet mask and gateway. Rebooting the switch is necessary to have the configuration change take affect. DHCP: Disables or enables the DHCP client function. IP Address: Assign the switch IP address. The default IP is 192.168.1.77. Subnet Mask: [...]

73 6-3-1-3. User Name Configuration Use this screen to change the User Name. The default user name is root . Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the ac tion menu line. <Save >: Saves all configured values. <Quit>: Exits the user name configuration page and returns to previous menu.[...]

74 6-3-1-4. Password Configuration Use this screen to change the Password. The default password is root . Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the ac tion menu line. <Save >: Saves all configured values. <Quit>: Exits the password configuration page and returns to previous menu.[...]

75 6-3-2. Port Configuration This page can change every port status. Press the TAB key to select each item and press t he SPACE key to c hange the configuration of each item. State: Displays current port status. The port can be set to disable or enable mode. If the port setting is set to disable, the po rt will not receive or transmit any packets. [...]

76 Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line. <Save >: Saves all configured values. <Previous Page>: Displays previou s page. <Next p age>: Dis plays next page. <Quit>: Exits the port configuration page and returns to previous menu.[...]

77 6-3-3. Trunk Configuration This page can configure trunk groups. Press the TAB key to select each item and press t he SPACE key to c hange the configuration of each item. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the ac tion menu line. <Save >: Saves all configured values. <Quit>: Exits t[...]

78 6-3-4. Port Mirro ring Configuration Port mirroring is a method for monitoring traffic in switched networks. Traffic through ports can be monitored by one specific port. The traffic being received or transmitted by the monitored ports will be duplicated into the m onitoring port. Press the Space key to change the configuration of an item. Mirror[...]

79 <Save >: Saves all configured values.[...]

80 6-3-5. VLAN Configuration This page can set VLAN mode to port-based VLAN, 802.1Q VL AN or disable VLAN function. All ports are automatically placed in VLAN 1, the default VLAN. T o create new VLANs, use the Create a VLAN Grou p menu and add a VLAN. Make sure when you enter a VLAN name you do not leave spaces. For example VLAN2 is correct; VLAN 2[...]

81 6-3-5-1. VLAN Configure Choose a VLAN In the VLAN Configure menu select the type of VLAN you want to configure: VLAN Disabled (default), Port Based VLAN, or IRRR802.1Q Tag based VLAN. Save the configuration. There are 3 different options for VLANs to choose from using the space bar: Disabled, Port Based and 802.1Q. To configure a new VLAN, selec[...]

82 If more than one VLAN is necessary, the additional VLANs may be created. Security VLANs Security VLAN’s allow for limiting telnet, SNMP and web access to the switch to a specific VLAN. The VID of the Security VLAN may be changed from 255 to another value after creating the VLAN. The new VID must not already exist on the box. PVID (Port VID): S[...]

83 Ingress Filter 2: Drop untagged fram e. Press the Space key to choose drop or forward the untagged frame. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the ac tion menu line. <Save >: Saves all configured values. <Previous Page>: Displays previou s page. <Next p age>: Dis plays next pag[...]

84 6-3-5-2. Create a VLAN Group Create Port-Based VLAN Select <Edit> to create a port-based VLAN and add member/nonmember ports to it. 1. VLAN Name: Type a name for the new VLAN using 15 alphanumeric characters and no spaces. 2. Group ID: Type the VLAN group ID. The group ID range is 1~4096. 3. Member: Press the Space key to choose VLAN membe[...]

85 Create 802.1Q VLAN Select <Edit> to create a 802.1Q VLAN and add tagged /untagged member por ts to it. 1. VLAN Name: Type a name for the new VLAN using 15 alphanumeric characters and no spaces. 2. VLAN ID: Type a VID (between 1~4096). The default is 1. There are 256 VLAN groups provided to configure. 3. Protocol VLAN: Press the Space key t[...]

86 <Quit>: Exits this page and returns to previous menu.[...]

87 6-3-5-3. Edit / Delete VLAN Group Use this menu to edit or delete a VLAN group. When editing the chosen VLAN, the user can change the protocol VLAN or a member port. A new protocol can be configured and the ports can be changed to tagged or untagged or deleted as member ports from this VLAN. In edit mode the VLAN Name a nd VLAN ID are read-only [...]

88 Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the ac tion menu line. <Delete>: Deletes selected VLAN Groups. <Previous Page>: Displays previou s page. <Next p age>: Dis plays next page. <Quit>: Exits this page and returns to previous menu.[...]

89 6-3-5-4. Group Sorted Mode Use this menu to select the VLAN groups sorted mode. There are two selections: Name: Sorted by name VID: Sorted by VID The results can be viewed on the Edit/Delete a VLAN Group screen. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the acti on menu line. <Save >: Saves all[...]

90 <Quit>: Exits this page an d returns to previous menu.[...]

91 6-3-6. Priority Configur ation Level (0-7): There are eight (0 to 7) priority levels that can be mapped as high or low priority que ues. QoS Mode: User can select the ratio of high priority packets and low priority packets by pressing the Space key. High Low Queue servic e r atio: 1:1, 2:1, 3:1, 4:1, 5:1, 6:1, 7:1, FIFO, H Î L First In First Ou[...]

92 <Quit>: Exits this page and returns to previous menu. 6-3-7. MAC Address Configur ation[...]

93 6-3-7-1. Static MAC Address When a static MAC address is added, it remains in the switch's address tab le, regardless of whether the device is physically connected t o the switch. This saves the switch from having to re-learn a device's MAC address when the device is disconnected or powered-off and then becomes active again. The menu s[...]

94 address. 5. Press ESC to go back action menu line, and then select <Sav e> to save all configured values. Edit static MAC address 1. Press <Edit> key to modify a static MAC address. 2. Choose the MAC address that you want to modify and then press enter. 3. Press th e <Edit> key to modify all the items. 4. Press ESC to go back a[...]

95 6-3-7-2. Filtering MAC Address Add Filtering MAC ad dre ss 1. Press the <Add> key to add a static Filtering address. 2. Press th e <Edit> key to enter the MAC address you want to filter. 3. Enter the MAC address and then press enter. 4. Press th e <Sav e> key to modify all the items. 5. Press ESC to go back action menu line, an[...]

96 Edit Filtering MAC address 1. Press the <Edit> key to modify a static Filtering address. 2. Choose the MAC address that you want to modify and then press enter. 3. Press the <Edit> key to modify all the items. 4. Press ESC to go back action menu line, and then select <Sav e> to save all configured values. Delete Filtering MA C [...]

97 <Previous Page>: Displays previou s page. <Next p age>: Dis plays next page. <Quit>: Exits this page and returns to previous menu.[...]

98 6-3-8. Miscellane ous Configuration Switch parameters and stacking function s can be configured using the miscellaneous configuration screen s. The stacking function allows you to centralize control of the switch in the network. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line. <Save[...]

99 have to send out broadcast packets to be relearned by the switch and have its address put in the table. The valid range is 300 to765 seconds. Default is 300 seconds. 6-3-8-2. Broadcast Storm Filtering Broadcast storm filtering is used to limit the amount of broad cast traffic on the network. An excessive amount of broadcast traffic can inhibit d[...]

100 Low Queue Max Delay Time : Set the time that low priority packets are queued in the switch. The valid range is 0 to 255 ms. Since the default is OFF, the Max Delay Time is 0. This item must be set if “Low Queue Delay Bound” is enabled. NOTE: “Max bridge transmit delay bound control” must be enabled before Low Queue Max Delay Bound is en[...]

101 65535. The switches must be assigned the same stacking group ID to be stacked as a group. 6-3-8-8. IP Stacking Mode Select one of the 3 modes to enable or disable the stacking functio n. To configure the switch in the stacking group, use the Web GUI configuration inte rfac e. Disable: The stacking function is not enabled. Master: One switch mus[...]

102[...]

103 6-4. Protocol Related Configuration 6-4-1. STP Spanning tree is a link management protoc ol that provides path redun dancy while preventing undesirable loops in the network.[...]

104 6-4-1-1. STP Setup This page enables or disables the Spanning Tree function. The Spanning Tree function must be enabled before the STP function can be configur ed. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the acti on menu line. <Save >: Saves all configur ed values. <Quit>: Exits this p[...]

105 6-4-1-2. System Configuration All devices in the spanning tree instance will utilize the same values as the root bridge to ensure consistency throughout the network. If this device becomes the root bridge, then the other switches in the STP instance will utilize its values. Spanning tree information for the Root Bridge on the left is for displa[...]

106 Hello Time: The number of seconds between the transm ission of Spanning-Tree Protocol configuration m essage s. Enter a number 1 through 10. Forward Delay Time: The number of seconds a port waits before changing from its Spanning-Tree Protocol learning and listening states to the forwarding state. Enter a number 4 through 30. Actions-> <E[...]

107 6-4-1-3. STP Per Port Setting State: Spanning tree status for each port is either forwar ding or blocking. PathCost: Specifies the path cost of the port that the switch uses to determine which ports are the forwarding ports. If you change the value, you need to restart the switch for valid value change to take effect. Priority: Specifies the pa[...]

108 Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the action menu line. <Save >: Saves all configur ed values. <Previous Page>: Displays the previous page. <Next P age>: Displays the next page. <Quit>: Exits this page an d returns to previous menu.[...]

109 6-4-2. SNMP Any Network Management station runni ng the Sim ple Network Mana gement Protocol (SNMP) can manage the switch provided that the Management Information Base (MIB) is installe d. SNM P is a protocol that governs the transfer of information between management and agent. The switch supports SNMP V1. Use this menu to define management st[...]

110 6-4-2-1. SNMP System Options Press <Edit> to enter all items, ESC to return to the action menu, and then pres s <Save> to save the configured values. System Name: Enter a name to iden tify the swi tch. System Contact: Enter the name of the contact person or organization. System Location: Enter the location of the switch. Actions->[...]

111 6-4-2-2. Community Strings Community strings serve as passwords and can be entered as one of the following : Community Name: Enter the name of c urrent community strings. The default is “public”. Write Access: Enables the permiss ions for Read Only or Read/Write. Read only : Enables requests accompanied by this string to dis play MIB-object[...]

112 3. Press ESC to go back action menu line, and then select <Sav e> to save all configured values. Edit Community Strings 1. Press <Edit> key to modify a Community String. 2. Choose the Community Name that you want to modify and then press enter. 3. Enter the correct Community Name and Write Access setting. 4. Press ESC to go back act[...]

113 <Edit>: Configures all items. When finished, pressing ESC returns to the ac tion menu line. <Delete>: Deletes a community string. After deleting, press <Save> to complete th e deletion. <Save >: Saves all configured values. <Quit>: Exits this page an d returns to previous menu.[...]

114 6-4-2-3. Trap Managers A trap manager is a management st ation that rece ives traps. The switch generates system alerts. If no trap manager is defined, no trap s are issued. Create a trap manager by entering the IP address of the station and a comm unity stri ng.[...]

115 Add SNMP Trap Managers 1. Press the <Add> key. Then press the <Edit> key on this menu to add a SNMP Trap Manager. 2. Enter the IP address and Community Name for the SNM P Trap Manag er. 3. Press ESC to go back action menu line, and then select <Sav e> to save all configured values. Edit SNMP Trap Managers 1. Press <Edit>[...]

116 Delete SNMP Trap M anager s 1. Press the <Delete> key to delete a SNMP Trap Manager. 2. Choose the IP Address and Community Name that you want to delete and then press enter. 3. After deleting the SNMP Trap Manager, you must press <Save> to complete the deletion. Actions-> <Add >: Creates a trap manager. <Edit>: Confi[...]

117 6-4-3. LACP The Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Part ner Systems on a link to allow their Link Aggregation Control instances to reach agreement on the identity of the Link Aggregation Group to which the link belongs. Move the link to that Link Aggregation Group, and enabl[...]

118 6-4-3-1. LACP Working Ports Group: Displays the trunk group ID. LACP: Pres s t he Space key to enable or disable LACP (Link Aggregation Control Protocol) support. If enabled, the group is an LACP static trunking group. If disabled, the group is a local static trunking group. LACP Work Port Num: The maximum number of ports that can be aggregated[...]

119 6-4-3-2. LACP State Act ivity Active: The port automatically sends LACP protocol packets. Passive: The port does not automatically send LACP protocol packets, an d responds only if it receives LACP protocol packets from the opposite device. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the acti on menu [...]

120 6-4-3-3. Group Status When setting a trunking gr oup, the relat ionship status informa t ion may be seen on the LACP Group Status screen. Actions-> <Previous Page>: Displays previou s page. <Next p age>: Dis plays next page. <Quit>: Exits this page and returns to previous menu.[...]

121 6-4-4. IGMP/GVRP Configuration Use the IGMP/GVRP Configuration scre en to enable or disable IG MP, Query Mode and GVRP (GARP VLAN Registration Protocol) support. Press the Space key to choose Enabled or Disabled. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to the ac tion menu line. <Save >: Saves a[...]

122 6-4-5. 802.1x Configuration[...]

123 6-4-5-1. 802.1x Setup Use this screen to enable or disable 802.1x. Press the Space key to choose Enabled or Disabled mode. Actions-> <Edit>: Configures all items. When fin is hed, pre ss ing ESC returns to the action menu line. <Save >: Saves all configur ed values. <Quit>: Exits this page an d returns to previous menu.[...]

124 6-4-5-2. 802.1x Sy stem Configuration After enabling the IEEE 802.1x function, use the 802.1x System Configuration scree n to config ure the I EEE 802. 1x par a meters. Radius Server IP: Enter the Radius Server IP address. Shared Key: Enter an encryption key for use during authentication sessions with the specified radius server. This key must [...]

125 6-4-5-3. 802.1x Per Port Configuration 802.1x authentication state can be configured for each port as Disable, Accept, Reject or Authorize. Press the “ Space ” key to change the state value for each port. Reject: The specified port is required to be held in the unauthorized state. Accept: The specified port is required to be held in the Aut[...]

126 6-4-5-4. 802.1x Miscellaneous Configuration Quiet period: Enter the period during which the port doesn’t try to acquire a supplicant. TX period: Enter the period the port waits to retransmit next EAPOL PDU during an authentication session. Supplicant timeout: Ent e r the per iod of t ime the sw itch w a its for a s uppl ic ant response to an [...]

127 menu line. <Save >: Saves all configur ed values. <Quit>: Exits this page an d returns to previous menu.[...]

128 6-5. System Reset Configuration[...]

129 6-5-1. Factory Default Use this menu to restore all factory default settings. Pressing y will reset the switch configuration settings to their factory defaults . Rebooting the switch is necessary for the new configurations to take effect. y: Resets the switch to the factory default configuration . The software version that the switch w ill be r[...]

130 6-5-3. TFTP Configuration Use this screen to update firmware, restore EEPROM values or upload curre nt EEP ROM value.[...]

131 6-5-3-1. TFTP Update Firmware Use this screen to update firmware from the TFTP server. Start the TFTP server, and copy the firmwa re update version image file to TFTP serve r. TFTP Server IP: Enter the IP address of the TFTP server. Firmware File Name: Enter the image file name . Actions-> <Edit>: Configures all items. When finished, p[...]

132 6-5-3-2. TFTP Restore Configuration Use this screen to restore an EEPROM value or save a previous version of the image file from the TFTP server. Start the TFTP server, and copy the firmwa re update version image file to TFTP serve r. TFTP Server IP: Enter the IP address of the TFTP server. Restore File Name: Enter the image file name. Actions-[...]

133 6-5-3-3. TFTP Backup Configuration Use this screen to save the current EEPROM value to an im ag e file. Then go to the update configuration page to restore the EEPROM value. Start the TFTP server, and copy the firmwa re update version image file to TFTP serve r. TFTP Server IP: Enter the IP address of the TFTP server. Restore File Name: Enter t[...]

134 6-5-3-4. Save Configuration The configuration must be saved to the flas h memory when it has been changed. Manually powering off the sys tem before the process has been completed may result in corrupted memory and may cause the unit to not start or come up in an unknown state.[...]

135 6-6. X- mo d e m Up gr ade 1. While booting the switch, press the X key to start the Xmodem routine on the devic e. 2. Pressing X will cause the switch Xmodem applic ation to begin and cause the baud rate to change to 57600 bps. You will need to disconnect the cable connected to the serial port, and change the baud rate of your hyper-terminal a[...]

136 3. Select “send file" under the "transfer" menu from menu bar. 4. Press the "browse" button to select the path. 5. Select "1K Xmodem" of protocol and press the "Send" button. 6. After successfully upgrading to the new firmware, change the baud rate back to the default 9600bps.[...]

137 7. Web-Based Management This section introduces the configuration and functions of the web-based management of MIL-SM2401M-STK switch ser ies. The managed switch series provides an embedded HTML website residing in flash memory. It offers advanced management features and allow users to manage the device from anywhere on the network through a st[...]

138 Online Help Online help is availab le by pres sing the Help button for any configuration questions.[...]

139 7-1. Sy stem Log in 1. Launch Internet Explorer or Netscape. 2. Type http:// and the IP address of the switch in the Location or Address field. The default IP Address is 192.168.1.77. 3. Press Enter . Figure 5-1: The Password Window 4. In the login screen, type the user name and password. The default is root for both. 5. Press Enter or Clic k O[...]

140 7-2. Port Status Link: “Down” is “No Link”. “UP” is “Link”. State: Displays port status off or on depending on user setting. “Unlink” means the port is offline or “off ”. Auto Negotiati on: Displays the auto negotiation mode. There are three selections: Auto, Force and Nway-force. Speed Duplex: Displays link speeds of 10[...]

141 7-3. Port Statistics The following information provides a view of the current status of the unit. Pressing the Clear button will return all counts to zero.[...]

142 Left click the mouse on the desired port on the graphical image of the switch to get specific information for that port.[...]

143 7-4. Administr ator The management functions include IP address, switch settings, console port information, port controls, trunking, filter database, VL AN configuration, spanning tree, port mirroring, SNMP, secu rity manager, TFTP update firmware, configuration backup, system reset, and reboot. 7-4-1. IP Address Entering new values and clickin[...]

144 7-4-2. Switch Setting 7-4-2-1. Basic Switch Settings System Name: Displays the name o f switch . System Location: Displays the physical location of the switch. System Description: Displays the name of device type. Firmware Version: Displays the switch’s downloaded firmware version. Kernel version: Displays write to default EEPROM value versio[...]

145 7-4-2-2. Advanced Settings Enable MAC Address Aging Out: Select to enable the MAC address aging o ut function. Age-Out Time: Enter the number of secon ds that an inactive MAC address remains in the switch's address table. The valid range is 300 to 765 seconds. Default is 300 seconds. Max Bridge Transmit Delay Bound: Limits the packe ts que[...]

146 Priority Queue Service Settings: Select the priority queue service type: First Come First Service: The sequence of packets sent is dependent on the order of arrival. The first packets in the queue are transmitted before any other pac kets. All High be fore Low: The high priority packets are sent before the low priority packets. Weighted Round R[...]

147 Qos Policy: High Priority Levels: 0 to 7 priority level can map to a high or low queue. When the VLAN Tag number of a frame is mapping as a high priority level, this frame always has high priority. In this example, the QoS policy applies to the switch, not for a single port.[...]

148 7-4-2-3. Miscellaneous Setting Collisions Retry Forever: Disabled – In half duplex, if a collision occurs, the switch will retry 48 times and then drop frame. Enabled – In half duplex, if a collision occurs, the switch will retry forever. Hash Algorithm: CRC Hash or Direct Map for MAC address learning algorithm. IFG Compensation: Select ena[...]

149 IGMP Theory of Operation The following three topologies detail how IGMP Query works and to be configured within a network: 1. Auto mode needs to be enabled when the router’s IP a ddress is smaller than other switches in the subnet.[...]

150 2. IGMP needs to be enabled when the router’s IP address is not sm aller than other switches in the subnet. This Router supports IGMP protocol, but IGM P has to be enabled, and the Router has to be the Querier.[...]

151 3. The following topology must be set when the IP address of the swi tch is not the smallest in the subnet. The network will cause a multi-cast storm from the IGMP client report if it is in Auto mode. All switches must be in disable mode when the VOD server is configured for IGMP Querier. Note: It is suggested that the VOD server switch have th[...]

152 7-4-3. Console Port Information Console is a standard UART interface to communicate with a serial port. The Windows HyperTermina l p r ogram can be used to lin k the switch with the console port. In order to change any of these parameters, you must be connected to the console port. Baud rate (bits/sec): 9600 Data Bits: 8 Parity Check: none Stop[...]

153 7-4-4. Port Controls The Port Controls menu allows changing of port configurations. State: User can disable or enable each port. Negotiation: Us er can set auto negotiation mode for each port to Auto, Nway (specify the speed/duplex on this port and enable auto-negotiation) or Force. Speed: User can set 100Mbps or 10Mbps speed on Ports 1 to 24. [...]

154 Band Width: Ports 1 to 24 support by-port ingress and egress rate control. For example, if port 1 is set to 10Mbps, you can set it’s effective egress rate to 1Mbps and ingress rate to 500Kbps. The MIL-SM2401M-STK will perform flow control or backpressure to confine the ingress rate to meet the specified rate. In: Enter the port effective ingr[...]

155 7-4-5. Trunking The Link Aggregation Control Protocol (LACP) standardized means for exchanging information between Partner Systems on a link to allow their Link Aggregation Control instances. To reach agreem ent on the identity of the Link Aggregation Group to which the link belongs, move the link to that Link Aggregation Group, and enable its [...]

156 7-4-5-1. Aggregator Setting System Priority: A value used to identify the active LACP. The switch with the lowest valu e has t he high est pr io rity a nd is s e lecte d as th e a ctive L ACP. To create a trunk across two or more ports: 1. Group ID: Choose the "Group ID" and click the Select button. 2. LACP: If enabled, the group supp[...]

157 remove a port, select the port to be removed from the Work Ports column and click the Remove button. 5. Clic k the Apply button to save the new configuration. 6. Clic k the Delete button to remove a trunking Group ID.[...]

158 7-4-5-2. Aggregator Information The LACP Aggregator relation information is displayed as shown.[...]

159 7-4-5-3. State Activity Active (selected) : The active port automatica l ly sends LACP protoco l packets. Passive (not selected) : The passive port does not automatically send LACP protocol packets, but responds only if it receiv es LACP protocol packets from the other device. A link having either two active LACP ports or one active port can pe[...]

160 7-4-6. Forwarding and Filtering 7-4-6-1. IGMP Snooping The switch supports IP multicasting. You can enable IGMP via the web management’s configuration screen. In addition, you can view different multicast groups, VIDs and member po rts, and IP multicast addresses that range from 224.0.0.0 through 239.255.255.255. The Internet Group Management[...]

161 Message Description Query A message sent from the querier (IGMP router or switch) asking for a response from each host belonging to the multicast group. Report A message sent by a host to the querier to indicate that the host wants to be or is a member of a given group indicated in the report message. Leave Group A message sent by a host to the[...]

162 7-4-6-2. Static MAC Address When a static MAC address is added, it remains in the switch's address tab le, regardless of whether or not the device is physically connected to the switch. This saves the switch from having to re-learn a device's MAC address when the device is disconnected or powered-off. To add a static MAC address: 1. C[...]

163 are associated with individual VLANs. Type the VID (tag-based VLANs) to associate with the MAC a ddress. 6. Clic k t he Add button. 7. To delete a MAC address, highlight the selection in the table you want to delete and then click the Delete button.[...]

164 7-4-6-3. MAC Filtering MAC address filtering allows the switch to drop unwanted traffic. Traffic is filtered based on the destination addres ses. Steps to specify a MAC addr ess to filter: 1. In the MAC Address box, enter the MAC address to filter. 2. If tag -based (802.1Q) VLAN are set up on the switch, in the VLAN ID box, type the VID to asso[...]

165 7-4-7. VLAN Configuration A Virtual LAN (VLAN) is a logical network grouping that limits the bro adca st domain. It allows you to isolate network traffic so only members of the VLAN receive traffic from the same VLAN members. Basically, creating a VLAN from a switch is logically equivale nt of recon necting a group of network devices to another[...]

166 Tag-based VLAN (IEEE 802.1Q VLAN) The IEEE 802.1Q specification is the stand ard for Port-based Tagg ing. Therefore, it is possible to create a VLAN across devices from different s witch suppliers. IEEE 802.1Q VLAN us es a t echnique to insert a “ta g” into the Ethernet frames. The tag contains a VLAN Identifier (VID) that indicates the VLA[...]

167 Create a VLAN and add tagged member ports to it. 1. Clic k the Add button to create a new VLAN group. 2. Enter the VLAN name, group ID and select the members for the new VLAN. 3. Clic k the Apply button. 4. If the number of groups exceeds the limit for a single page, click the NextPage button to view other VLAN groups. NOTE: Use the Edit button[...]

168 7-4-7-1. VLAN Oper ation Mo de 802.1Q (8 02.1Q VLAN) On this page, the user can create Tag-based VLANs, and enable or disable GVRP protocol. There are 256 VLAN groups provided to configure. If 802.1Q VLAN is enabled, then all ports on the sw itch belong to the default VLAN1. The default VLAN1 can’t be deleted. GVRP (GARP VLAN Registration Pro[...]

169 Security VLANs Security VLAN’s allow for limiting telnet, SNMP and web access to the switch to a specific VLAN. The VID of the Security VLAN may be changed from 255 to another value after creating the VLAN. The new VID must not already exist on the box.[...]

170 Basic T o create a VLAN and add t agged member port s to it: 1. Select the Add button to create a new VLAN. 2. Enter a name for th e new VLAN. 3. Enter a VLAN ID (2 to 4094). The default is 1. 4. Choose the protocol type. Default is NONE. 5. From the Available ports box, select ports to add to the switch and click Ad d. If the trunk groups exis[...]

171 Use this page to set the outgoing frames are VLAN-Tagged frames or not, and then click the Apply button. Tag : Outgoing frames wi th VLAN-T agged. Untag: Outgoing frames without VLAN-Tagged.[...]

172 Port VID To configure port VID setting s: From the main 802.1Q VLAN page, select Port VLAN ID Settings. Port VLAN ID Set the port VLAN ID that will be assigned to untagged traffic on a given port. This feature is useful for accommodating devices that you want to participate in the VLAN but that don’t support tagging. Only one untagged VLAN is[...]

173 Ingress Filtering Ingress filtering lets frames belonging to a specific VLAN to be forwarded if the port belongs to that VLAN. Enable : Forward only packets with VID matching this port's configured VID. Disable : Disable Ingress filter function. Acceptable Fram e Type ALL: All packet s a re accept able. Tag Only: Only packets that match th[...]

174 7-4-8. Spanning Tree The Spanning-Tree Protocol (STP) is a standardized method (IEEE 802.1D) for avoiding loops in switched network s. Wh en STP is enabled it ensures that only one path at a time is active between any two nodes on the network. Spanning-Tree Protocol can be enabled using web management’s switch setting advanced item, and selec[...]

175 7-4-8-1. System Configuration Spanning Tree information for the Root Bridge at the bottom is for display only. Configure new values for the STP parameters at the top. STP State: Enable the Spanning Tree fu nct ion by marking the box. Priority: The value used to identify the root bridge. The bridge with the lowe st value has the highest priority[...]

176 Hello Time: The number of seconds between the transm ission of Spanning-Tree Protocol configuration m essage s. Enter a number 1 through 10. Forward Delay Time: The number of seconds a port waits before changing from its Spanning-Tree Protocol learning and listening states to the forwarding state. Enter a number 4 through 30. Click t h e Ap pl [...]

177 7-4-8-2. Per Port Configuration The path cost and priority can be configured for each port. 1. Select the port to be configured in the Port menu lis t by clicking on it. 2. Enter the Path Cost and Port Priority settings:[...]

178 PathCost: Path Cost specifies the path cost of the port that the switch uses to determine which ports are the forwarding ports. The lowest number becomes the forwarding port. The range is 1- 65535 and the default v alue is based on IEEE802.1D. 10Mb/s = 50-600 100Mb/s = 10-60 The switch must be rebooted if the values are changed. Port Priority: [...]

179 7-4-9. Port Mirroring The Port Mirroring feature is disabled by default. Selecting enable from the pull down menu will cause the selected traffic from the selected monitor ports to be mirrored to the selected analysis port. Press the Apply button to submit th e changes. Port Mirroring State: Enables or Disables the port mirroring function.[...]

180 Enabled states include RX, TX or Both. Analysis Port: All mirrore d traffic is sent o ut this port. Monitor Port: The ports you want to mirror. All source port traffic will be copied to a mirror port. You can select a maximum of 25 source ports in the switch. If you want to disable the function, you must select monitor port to none.[...]

181 7-4-10. SNMP Management A SNMP is a protocol that governs the transfer of information between management and agent. The switch supports SNMP V1. Any Netw ork Management station running the Simple Network Management Protocol (SNMP) can manage the switch provided that the Management Information Base (MIB) is installed. Use this menu to define man[...]

182 7-4-10-1. System Options Enter the Name location and contact information for the switch. Each field allows entry of 26 c haracters. Name : Enter a name to be used for the switch. Location : Enter the location of the switch. Contact : Enter the name of a person or organization. Click t h e Ap pl y button to save the System Option information. 7-[...]

183 issued. Create a trap manager by entering the IP address of the station and a comm u nity strin g. IP Address: Enter the IP Ad dress of the Trap Device. Community: Enter the Communi ty String for the Trap Device. Click t h e Add button to add the new trap manager. To re move a trap manager, select it from the list of current managers and click [...]

184 7-4-11. Security Manager The user can change the user name and password to keep the switch secure. After entering a new user name and password, click the Apply button to submit the changes. The default user name and password are below. User Name: roo t Password: root[...]

185 7-4-12. 802.1X When the IEEE 802.1x function is enabled, the parameters may be configured here. 7-4-12-1. System Configuration Radius Server IP: Set the Radius Server IP address. Server Port: Set the UDP destination port for authe ntication requests to the specified Radius Server. Accounting Port: Set the UDP destination port for accounting req[...]

186 7-4-12-2. Per Port Configuration Each port can be configured to one of the following four states: Reject: The specified port is required to be held in the Unauthorized state. Accept: The specified port is required to be held in the Authorized state. Authorized: The specified port is set to the Authorized or Unauthorized state in accordance with[...]

187 7-4-12-3. 802.1x Misce llaneous Configuration Quiet period: Set the period during which the port doesn’t try to acquire a supplicant. TX period: Set the period the port waits to retransmit next EAPOL PDU during an authentication session. Supplicant timeout: Set the period of time the switch waits for a supplicant response to an EAP request. S[...]

188 7-4-13. TFTP Update Firm ware The following menu opt ions provide some system co ntrol functions to allow a user to update firmware and rem otely boot the switch system: • Executing TFTP software • Copy firmware update version image.bin to TFTP software directory. • In web management select Administrator—TFTP update firmware. • Downlo[...]

189 7-4-14. Configuration Backup 7-4-14-1. TFTP Restore Configuration Use this screen to set TFTP server IP address. You can restore EEPROM value from here, but you must put the image back in the TFTP server. The switch will download back flash image. 7-4-14-2. TFTP Configuration Backup Use this screen to set the TFTP server IP address. You can sav[...]

190 7-4-15. Factory Def ault Resets the Switch to default configuration. Default IP Address: 192.168.1.77 Default Gateway: 192.168.16.254 Subnet mask: 255.255.255.0 All other settings default to either D isabled or no value. 7-4-16. Sy stem Reboo t Select Reboot to restart the system with the current saved configurat ion.[...]

191 7-5. Panel List The Panel list option will display the sw itch pane l in a GUI interface f ormat. When stacking has been enabled, the display will include the slave switches in the display. Clicking on each port will give the current port status information.[...]

192 7-6. IP Stacking The IP stacking function allows up to eight MIL-SM2401M-STK switches to be joined as a single unit group. The stackable swit ches can then be managed through a single IP address. When configuring the stacking function, pleas e review the following guidelines.  Any port on the switch can be used for stacking.  All switches[...]

193 7-6-1. Setting up an IP Stacking Group Select IP Stacking in the menu bar and enter the following information for the master switch in the stack. Click the Apply button to save the new configuration. Group ID (0...65535): Assign a group ID for stacking group. The switches in the same stacking group have same group ID. Stacking Mode: Select one [...]

194 Once the stacking function has been configured for the master switch, use Cat. 5 cable to connect each switch in the stacking group. Wait a few minutes for the master switch to communicate and collect the data from the slave switches. Connect to the master switch through the Web-based interface to access the following screen. 1. The web-based i[...]

195 8. Troubleshooting This section is intended to help you solve some common problems encountered while using the MIL-SM2401M switch serie s. Incorrect connections The switch auto-detects the polarity and direction of the UTP cable attach ed. If no link I seen, then check the following:  Faulty or loose cables Look for loose or obviously faulty[...]

196 Diagnostic LED Indicators The switch can be easily monitored through pan el indi cators to assist in identifying problems. If the power indicator does turn on when the power cord is plugged in, you may have a problem with power outlet or power cord. However, if the switch powers off after running for a while check for loose power connections, p[...]

197 9. Technical Specifications This section provides the specifications of MIL-SM2401M-STK switch product. Standard IEEE802.3 10BASE-T IEEE802.3u 100BASE-TX/100BASE-FX IEEE802.3z Gigabit SX/LX IEE802.3ab Gigabit 1000T IEEE802.3x Flow Control and Back pressure IEEE802.3ad Port trunk with LACP IEEE802.1d Spanning tree protocol IEEE802.1w Rapi d Span[...]

198 1000Mbps, 100Mbps 100FX module: Link/Activit y, Full duplex1000Mbps, 100Mbps 100FX module: Link/Act ivity, Full duplex Connector 10/100TX: RJ-45 100FX(Multi /Single Mode) module: SC Gigabit SX/LX module: SC Gigabit 1000T module: RJ-45 MAC address 8K MAC address table with Auto learning function Memory 3Mbits for packet buffer CPU ARM-7 Flash RO[...]

199 90000416 Rev A[...]