Planet Technology SGSW-24040R manuale d’uso

User ’s M anual of WGSW -2404 0 / WGSW -24040 R SGSW -24040 / SGSW -24040R 1 User ’ s Manual WGSW -24040 / WGSW -24040R 24-Port 10/100/1000Mbps Layer 2 Managed Switch SGSW -24040 / SGSW -24040R 24-Port 10/100/1000Mbps Layer 2 Managed S tackable Switch[...]

User ’s M anual of WGSW -2404 0 / WGSW -24040 R SGSW -24040 / SGSW -24040R 2 T rademarks Copyright © PLANET T echnology Corp. 2008. Contents subject to which revision without prior notice. PLANET is a registered trademark of PLANET T echnology Co rp. All other trademarks belong to the ir respective owners. Disclaimer PLANET T echnolog y does not[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 3 T ABLE OF CONETNTS 1. INTR ODUTION ................................................................................................................. ... 12 1.1 Packet Content s .................................................................................................[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 4 4. WEB CONF IGURA TION ...................................................................................................... 42 4.1 Main WEB P A GE .............................................................................................................. ..............[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 5 4.6 VL AN ....................................................................................................................... ..................................... 93 4.6.1 VLAN Overview ...................................................................................[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 6 4.10.5 802.1X and MAC-Based Authentication S tatistics .......................................................................... ................. 150 4.10.6 Windows Platform RADIUS Server Conf iguration .....................................................................[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 7 4.16.4 S tack Port S tate Ovewview ............................................................................................... ............................... 204 4.16.5 S tack Example .....................................................................................[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 8 Mirror Mode .................................................................................................................... ..................................... 228 6.3 Link Aggreg ation Command .........................................................................[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 9 RSTP S tat istics ................................................................................................................ .................................... 250 RSTP mC heck .........................................................................................[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 10 Dot1x S tat istics ............................................................................................................... ..................................... 269 Dot1x Cli ents .....................................................................................[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 S tack SID Swap................................................................................................................. .................................. 288 S tack SID Delect .......................................................................................[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 12 1. INTRODUTION The PLANET Layer 2 Managed Gigabit S witch series - WGSW-24040 / WGSW-24040R / SGSW-24040 / SGSW -24040R are all multiple ports Gigabit Ethernet Switched wi th SFP fiber optical connective abilit y and robust layer 2 features; the descriptio n of these model[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 13 QoS and Network Security features make it to meets the needs of effective data traffic control for both Campus and Enterprise, such V oIP , video streaming and multicast ap plication. High Performance The Managed Switch prov ides 24 10/100/1000M bps Gigabit Ethernet ports [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 14 Reliability S t acking Management The SGSW Series Managed S witch provides a switch stacki ng function to manage up to 16 switches using a singl e IP address. That helps network managers to easily configure swit c hes via one single IP address instead of connecting and set[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 15 1.4 Product Features ¾ Physical Port WGSW-24040 / WGSW-24040R  24-Port 10/100/1000Base-T Gigabit Ethernet RJ-45  4 mini-GBIC/SFP slot s , shared with Port-21 to Port-24  RS-232 DB9 console interfac e for Switch basic management and setup SGSW-24040 / SGSW-24040R [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 16 ¾ Quality of Service  4 priority queues on all s witch ports.  Supports for strict priority and weighted round robin (W RR) CoS policies  Ingress Shaper and Egress Rate Limit per port band wid th control  T raffic-policing policies on the switch port ¾ Multic[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 17 1.5 Product S pecification Product WGSW-24040 WGSW-24040R SGSW-24040 SGSW -24040R Hardware Specification Copper Port s 24 10/ 100/1000Base-T RJ -45 Auto-MDI/MDI-X ports SFP/mini-GBIC Slot s 4 SFP interfaces, shared with Port-21 to Port-24 St acking Port s --- 2 5GbE / Cros[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 18 Port trunking IEEE 802.3ad LACP / S tatic T runk Support 8 groups of 8-Port trunk support QoS T raffic classification based, S trict priority and WRR 4-level priority for switching - Port Number - 802.1p priority - DS/TOS field in IP Pack et IGMP Sno oping IGMP (v1/v2) Sno[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 19 2. INSTALLATION This section describes the hard ware features and installation of the Managed Switch on the desktop or rack mount. For easier management and control of the Manage d Sw itch, familiarize yourself with its di splay indicators, and ports. Front panel illustrat[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 20 ■ Reset button At the left of front p ane l, the reset button is designed for reboot the Managed Switch without turn of f and on the power . The following is the summary t a ble of Reset button functions : Reset Button Pressed and Relea sed Function About 1~3 seco nd Reb[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 21 2.1.2 LED Indications The front panel LEDs indicates instant stat us of port links, data activity , system oper ation, S tack status and system power , he lps monitor and troubleshoot when needed. WGSW -24040 / WGSW -24040R LED indication Figure 2-3 WGSW -24040 / WGSW-2404[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 22 ■ 1000Base-SX/LX SF P interfaces (Shared Port-21~Port-24 ) LED Color Function Lights: T o indicate the link through th at SFP port is successfully established with speed 1000Mb p s 1000 LNK Green Off: T o indicate that the SFP port is link dow n SGSW-2404 0 / SGSW-24 040[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 23 Lights: T o indicate the link through that port is successfull y established with speed 10Mbps or 100Mbps Blink : T o indicate that the switch is actively sending or receiving data over that port. 10/100 LNK/ACT Orange Off: If 1000 LNK/ACT LED light-> indicate t hat the[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 24 SGSW-24040 Rear Panel Figure 2-7 Rear p anel of SGSW-24040 SGSW-24040R Rear Panel Figure 2-8 Rear p anel of SGSW-24040R ■ AC Power Receptacle For compatibility with electric service in most areas of t he world, the Managed S witch’ s power supply automaticall y adjusts[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 25 Figure 2-9 SGSW -24040 / SGSW-24040R S tack Ports ■ DC Power Connector The rear panel of the WGSW-24040R and SGSW-24040R cont ains a power switch and a DC po wer connector , which accepts DC power input voltage from -30V to -60V DC. Co nnect the power cable to the Manage[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 26 2.2 Inst all the Switch This section describes ho w to inst all your Managed Switch and make connections to the Mana ged Switch. Please read the following topics and perform th e procedures in the order be ing pres ented. T o install your Mana ged Switch on a desktop or sh[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 27 Step5: Supply power to the Managed S witch. Connect one end of the power cable to the Managed Switch. Connect the power plug of the po wer cable to a standard wall outlet. When the Managed S witch receives power , the Po wer LED should remain solid Green. 2.2.2 Rack Mounti[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 28 Figure 2-12 Mounting SGSW-2840 in a Rack Step6: Proceeds with the steps 4 and steps 5 of session 2.2.1 Desktop Installation to connect the network cabling and suppl y power to the Managed Switch. 2.2.3 Inst alling the SFP transceiver The sections describe how to insert an [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 29  Approved PLANET SFP T ransceivers PLANET Managed Switch supports both Single mode and Multi-mode SFP transceiver . The following list of approved PLANET SFP transceivers is correct at the time of publication: ■ MGB-SX SFP (1000BASE-SX SFP trans ceiver / Multi-mode / [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 30 Figure 2-14 Pull out the SFP transceiver Never pull out the modul e without pull the handle or the push bolts on the module. Direct pull out the module with violent could damage th e module and SFP module slot of the Managed Swi tch.[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 31 2.2. 4 Connecting DC Power Suppl y – WGSW-24040R / SGSW -24040R The WGSW-24040R and SGSW-24040R support -48VDC power inpu t, connect the po wer cable to the switch at the input terminal block. 1. T he size of the two screws in the terminal block is M3.5. 2. T he terminal[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 32 2.3 S t ack Installation SGSW-24040 / SGSW -24040R The SGSW-24040 series Managed Switch provides a s witch stacking function to manage up to 16 switches using a single IP address. And up to 384 Gigabi t Ethernet ports can be managed by a stacking group and you can add port[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 33 2.3.1 Connecting St acking cable Before attempting to connect sta cking ports, verify that you have the required stack cables. The following cables are used to connect stacked switches: • CB-STX50 : 50cm, Short stack cable –used to connect adjacent SGSW switches. • C[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 34 STEP-5 : Once the stack start operation, the S ta ck master be automatically elected without any configure. The S tack master is indicated by a lit green “ Master ” LED on the fr ont pa nel. As the Figure 2-1 9 appears. Figure 2-19 S tack Master wi th “Master” LED [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 35 1. The stack switch with least priority ID or MAC Address number will become Master . Only Master switch’s management interface (console, telnet, web and SNMP) is accessible. 2. It’s allow to build a stack of up to 16 PLANET SGSW Sw itches. If there is the space limita[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 36 3. SWITCH MANAGEMENT This chapter explains the met hods that you can use to configure management access to the Man aged Switch. It describes the types of management applications and the c ommunication and management protocols that deliver d ata between your management devi[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 37 3.2 Management Access Overview The Managed Switch gives you the flexibility to access and manage it using an y or all of the following methods:  An administration console  Web bro w ser interface  An external SNMP-based network management application The administr[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 38 Figure 3-1 Console management Direct Access Direct access to the administration conso le is achieved by directly connecting a terminal or a PC equipped with a terminal-emulation program (such as HyperT erminal ) to the Managed S witch console (serial) port. When using this[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 39 3.4 Web Management The Managed Switch offers management features that allow us ers to manage the Man aged Switch from anywhere on the network through a standard bro wser such as Microsoft Internet Ex plorer . Af ter you set up your IP address for the switch, you ca n acces[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 40 3. 5 SNMP-Based Network Management Y ou can use an external SNMP-based appl ication to configure and manage the Managed S witch, such as SNMPc Network Manager , HP Openview Network Node Management (NN M) or What ’ s Up Gold. This management method requires the SNMP agent[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 41 2. St art the T elnet program on a PC and connect to the Managed Switch. The management interface is exactl y the same with RS-232 console managem ent. 3. 6. 2 SNMP Protocol Simple Network Management Protocol (SNMP) is the standard management protocol for multi-vendor IP n[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 42 4. WEB CONFIGURATION This section introduces the configur ation and functions of the Web-Based management. About We b-based Management The Managed Switch offers management features that allow us ers to manage the Man aged Switch from anywhere on the network through a stand[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 43  Logging on the s w itch 1. Use Internet E xplorer 6.0 or above Web browser . Enter the factory-default IP address to access the W eb interface. The factory-default IP A ddress as following: http://192.168.0.100 2. When the foll owing login screen appe ars, please enter[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 44 Figure 4-1-3 Default main page Now , you can use the Web manageme nt inte rface to continue the switch managemen t or manag e the Managed Switch by Web interface. The Switch Menu on the left of the web p a ge let you access all the commands and statistics the Managed Switc[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 45 4.1 Main WEB P AGE The WGSW / SGSW Managed Switch provides a Web-based bro wser interface for configuring and managing it. This interface allows you to access the Manage d Switch using the Web browse r of your choice. This chapter describes ho w to use the Managed Switch?[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 46 Main Menu Using the onboard web agent, you can define system pa ramete rs, manage and contro l the Managed Switch, and all its ports, or monitor network conditions. Via the Web-Management, the administr ator can setup the Managed S wit ch by select the functions those list[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 47 4.2 System Use the System menu items to display and config ure basic administrative details of the Mana ged Switch. Under System the following topics are provided to configure a nd view the system information: This sect ion has the follo wing items: ■ System Information [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 48 4.2.1 System Information The System Info page provides information for the current device information. System Info page help s a switch administrator to identify the hard ware MAC address, software version and system uptime. The screen in Figure 4-2-1 appears. Figure 4-2-1[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 49 : Click to refresh the page; any changes made locally will be undone. For the SGSW series stackable switch, the System Information p age add additional colum n to identify the current switch ID of stack member switches in a stack group. The screen as below appears:[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 50 4.2.2 IP Configuration The IP Configuration includes the IP Addr ess, Subnet Mask and Gateway . T he Configured column is used to view or change the IP configuration.Fill up the IP Address, Subnet Mask and Gate way for the device. The screen in Figure 4-2-2 appears. Figure[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 51 : Click to save changes. : Click to undo any changes made local ly and revert to previously saved values. 4.2.3 User Authentication This page allows you to configure the system pa ssword requir ed to access the web pages or log in from CLI. After setup completed, please pr[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 52 4.2.4 SNTP Configuration In the System sub-function menu, you c an see the SNTP Configuration (see Figure 4-4 ), by which you can configure the time settings for the Managed Switch. Y ou can specify SNTP Serv ers and set GMT Timezone. T he SNTP Configuration screen in Figu[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 53 It is recommended that you research an y time serv er selection to ensure that it can meet your specific time server requirements. Any NTP ti me server selection should be evaluated to determine if the server in question meets yo ur specific time server requirem ents. For [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 54 4.2.6 TFTP Firmware Upgrade The Firmware Upgrade page provides the functions to allow a user to update the Managed S witch firmware from the T FTP server in the network. Before updating, make sure you hav e your TFTP server re ady and the firmware image is on the TFTP serv[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 55 Figure 4-2-8 TFTP Firmware upgrade pop-up message Figure 4-2-9 Firm ware Upgrade pop-up message 4. Click “ OK ”, the Switch will start the T FTP upgrade procedure. 5. Please check your TFTP server application to conf irm the TFTP file is well transmit to the Switch. 6.[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 56 4.2. 7 Configuration Save This function allo ws backup and reload the current configuration of t he Managed S witch to the local management station. The screen in Figure 4-2-10 appea rs. Figure 4-2-10 Configurati on Save page screenshot  Configuration Download: Do wnloa[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 57 Figure 4-2-12 File save screen 4.2. 8 Configuration Upload This function allo ws backup and reload the current configuration of t he Managed S witch to the local management station. The screen in Figure 4-2-13 ap pears. Figure 4-2-13 Configurati on Upload page screenshot ?[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 58 Figure 4-2-14 Windo ws file selection menu popup 2. Select on the configur ation file then click “ Upload ”, the bottom of the browser shows the upload status. 3. After down, the main screen appears “ T ransfer Completed ”.[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 59 4.2. 9 Factory Default The Factory Reset button can reset the VD SL2 Switch back to the factory default mode. Be aware that the entire configuration will be reset; include the IP address of the VDSL2 Switch . Once the Factory Reset item is pressed, the screen i n Figure 4-[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 60 4.2.1 0 System Reboot The Reboot page enables the device to be rebooted from a remote loca tion. Once the Reboot butto n is pressed, user have to re-login the WEB interface about 60 s econds later , the screen in Figure 4-2-16 appea rs. Figure 4-2-16 System Reboo t page sc[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 61  Example 1: Save Current Configuration setting T o save all ap plied changes and set the current configurati on as startup configuration. The st artup-configuration file will be l oad automatically across a system reboot. 1. Click System, File Management, Copy Operation[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 62  Example 2: Do wnloading System Sof tw are from a Serv er When downloadin g runtime code, you can spec ify the destination file nam e to replac e the current image, or first download the file using a different name from the current runtime code file, and then set the ne[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 63 • If you download to a new destinati on file, go to the System / File / Set S tart-Up menu, mark the operat ion code file used at startup, and click Apply . • T o start the new firmware, reboot the system via the System / Reset menu. • T o delete a file, select Syste[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 64 configuration file. T o use the new setti ngs, reboot the system via the S ystem / Reset menu.  Example 4: Saving or Restoring Configuration Settings Y ou can upload/do wnload configuration settings to/from a TFTP server . The configuration files can be later do wnloade[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 65 4.3 Simple Network Management Protocol 4.3.1 SNMP Overview The Simple Network Management Protocol (S NMP) is an applic ation layer protocol that fa cilitates the exchange of management information between net wo rk devices. It is part of the T ransmissi on Control Protocol[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 66 The SNMP System Configuration screen in Figure 4- 3-1 appears. Figure 4-3-1 SNMP System Configuration page screenshot Object Description • Mode Indicates the SNMP mode operation. Possible modes are: • Enabled : Enable SNMP mode operation. • Disabled : Disable SNMP mo[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 67 4.3.3 SNMP System Information Configuration The switch system information is provided here. The System Information Configuration screen in F igure 4-3-2 appears. Figure 4-3-2 System Information C onfiguration page screenshot The page includes the following fields: Object D[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 68 Figure 4-3-3 SNMP T rap Configuration page screenshot The page includes the following fields: Object Description • T rap Mode Indicates the SNMP trap mode operation. Possible modes are: • Enabled : Enable SNMP trap mode operation. • Disabled : Disable SNMP trap mode [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 69 • T rap Probe Security Engine ID Indicates the SNMP trap probe security engine ID mode of operation. Pos sible values are: • Enabled : Enable SNMP trap probe security engine ID mode of operation. • Disabled : Disable SNMP trap probe security engine ID mode of operati[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 70 to 126. • Security Model Indicates the security mode l that this entry should belong to. Possible sec urity models are: • any : Accepted an y security model (v1|v2c|usm). • v1 : Reserved for SNMPv1. • v2c : Reserved for SNMPv2c. • usm : User-based Security Model [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 71 • Community Indicates the community access string to permit access to SNMPv3 agent. The allowed string length is 1 to 32, and the allowed content is the ASCII characters from 33 to 126. • Source IP Indicates the SNMP access source address. • Source Mask Indicates the[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 72 characters from 33 to 126. 4.3.5.4 SNMPv3 Users Configura tion Configure SNMPv3 users table on this page. The entry index key are Engine ID and Us er Name. The SNMPv3 Users Configur ation screen in Figure 4-3-7 appe ars. Figure 4-3-7 SNMPv3 Users Confi guration page screen[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 73 protocol. • SHA : An optional flag to indicate that this user using SHA authentication protocol. The value of security level cannot be mo dified if entry already exist. That means must first ensure that the value is set correctly . • Authentication Password A string id[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 74 • View T ype Indicates the view type that this entry should belong to. Pos sible view type are: • included : An optional flag to indicate that this view subtree should be included. • excluded : An optional flag to indic ate that this view subtree should be excluded. [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 75 Figure 4-3-9 SNMPv3 Users-NEW page screenshot Once the new SNMPv3 user be successed add a nd be assign to a snmp group, this entry will shows in the users table. Figure 4-3-10 SNMPv3 Users page screenshot  EXAMPLE: Add a new SNMPv3 Group In the New Group p age , define [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 76 Figure 4-3-1 1 SNMPv3 Grou ps-NEW p age screenshot[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 77 4.4 Port Management Use the Port Menu to display or configure the Manage d Switch's ports. This section has the following items:  Port Configuration Configures port connection settings  Port St atistics Lists Ethernet and RMON port statistics  Mirror Port Con[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 78 The page includes the following fields: Object Description • Port This is the logical port numbe r for this row . • Link The current link state is displayed graphical ly . Green indicates the link is up and red that it is down. • Current Link S p eed Provides the cur[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 79 • Enabled : Link up and link down po wer savings enabled. • T o t al Power Usage T otal power usage in board, measur ed in percent. When set each port to run at 100M Full, 100M Half, 10M Full, and 10M Half-speed modes. The Auto-MDIX function will disabl e. 4.4.2 Port S[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 80 The displayed counters are: Object Description • Port The logical port for the settings contained in the same row . • Packets The number of received and transmitted packets per port. • Bytes The number of received and transmitted bytes per port. • Errors The number[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 81 The page includes the following fields: Receive T otal and T ransmit T otal Object Description • Rx and Tx Packets The number of received and transmitted (good and bad) packets • Rx and Tx Octet s The number of receiv ed and transmitted (g ood and bad) b ytes. Includes[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 82 T ransmit Error Counters Object Description • Tx Drop s The number of frames dropped due to output buffer congestion. • Tx Late/Exc. Coll. The number of frames dropped due to exces sive or late collisions. 4.4.4 Port Mirrori ng Configuration Configure port Mirroring on[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 83 Mirror Port Configuration The Port Mirror Configuration screen in Figure 4-4-5 and Figure 4-4- 6 appears.  WGSW Standalone Switch Figure 4-4-5 Port Mirror Configurati on page screenshot The page includes the following fields: Object Description • Port to mirror to Fra[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 84  SGSW St ackab le Switch The SGSW St ackable s witch supports port mirror function over stack sw itch. Figure 4-4-6 Port Mirror Configurati on page screenshot Object Description • Switch to mirror to Frames from ports that have either so urce or destination mirroring [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 85 4.5 Link Aggregation Port Aggregation optimizes port usage by linking a grou p of ports together to fo rm a single Link Aggregated Groups (LAGs). Port Aggregation multiplies the bandwidth bet ween the devices, increas es port flexibility , and provides li nk redundancy . E[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 86 The Link Aggregatio n Control Protocol (LACP) provides a standardized means for e xchanging information bet ween Partner Systems that require high speed redu ndant links. Link aggregation lets you group up to eight consecutiv e ports into a single dedicated connection. Thi[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 87 4.5.1 St atic Aggreg ation Configuration This page is used to configure the Aggregation hash mode and the aggregation gr oup. The aggregation hash mode setti ngs are global, whereas the aggregati on group relate to the current ly selected stack unit, as reflected by the pa[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 88 Figure 4-5-3 Aggre gation Group Config uration page screenshot The page includes the following fields: . Object Description • Locality Indicates the aggregation group type. This field is only valid for stackable swit ches. • Global : T he group members may reside on di[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 89 4.5.2 LACP Configuration Link Aggregation Co ntrol Protocol (LACP) - LACP LAG negoti ate Aggregated Port links with other LACP ports located on a different device. LACP allows switches connected to each other to discover automatically whether any ports are member of the sa[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 90 each second, while Passive will wait for a LACP packet from a p artner (speak if spoken to). 4.5.3 LACP System St atus This page provides a status overview for all LACP instances. The LACP S tatus page display the current LACP aggregation Groups and LACP Port st atus . The[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 91 Figure 4-5-6 LACP Port S tatus page screenshot The page includes the following fields: Object Description • Port The switch port number . • LA CP 'Y es' means that LACP is enabled and the po rt link is u p. 'No' means that LACP is not enabled or tha[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 92 4.5.5 LACP st atistics This page provides an overview for LACP statistics for all ports. The LACP statistics screen in Figure 4-5-7 appears. Figure 4-5-7 LACP Port statistics p age screenshot The page includes the following fields: Object Description • Port The switch po[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 93 4.6 VLAN 4.6.1 VLAN Overview A Virtual Local A rea Network (VL A N) is a network topology configure d according to a logical scheme rather than the physic al layout. VLAN can be used to combine any collection of LAN s egme nts into an autonomous user group that appears as [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 94 4.6.2 IEEE 802.1Q VLAN In large networks, routers are used to is olate broa dcast traf fic for each subnet into separate domains. This Managed Switch provides a similar servic e at Layer 2 by using VLANs to orga ni ze any grou p of network nodes into separate broadcast do [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 95 ports and work normally . Any port can be configured as either tagging or untagging. T he untagging feature of IEEE 802.1Q VLAN allow VLAN to work with legacy switches that don’t recogn ize VLAN tags in pa cket headers. The tagging feature allows VLAN to span multiple 80[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 96 Adding an IEEE802.1Q Tag Dest. Addr . Src. Addr . Length/E. t ype Data Old CRC Dest. Addr . Src. Addr . E. type Ta g Length/E. type Data New CRC Priority CFI VLAN ID ■ Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 97 VLANs, and any intermediat e network devices or the host at the other end of the connecti on supports VLANs. Then assign ports on the other VLAN-aware network devices along the path that will carry this traffic to the same VLAN(s), either manually or dynamically using GVRP[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 98 4.6.3 VLAN Basic Information The VLAN Basic Information page displays basic inform atio n on the VLAN type supported by the Managed S witch. The VLAN Basic Information screen in F igure 4-6-1 appears. Figure 4-6-1 VLAN Basic Information page screens hot The page includes t[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 99 4.6.4 VLAN Port Configuration This page is used for configuring the Managed S witch port VLAN. T he VLAN per Port Configuration page contains fields for managing ports that are part of a VLAN. The port default VLAN ID (PVID) is configur ed on the VLAN Port Configuration pa[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 100 The Managed Switch supports multipl e VLAN tags and can ther efore be used in MAN applications as a provider bri dge, aggregating traffic from numerous inde pendent customer LA Ns into the MAN (Metro Access Network) space. One of the purposes of the provider bridge is to [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 101 untagged traffic will be dropped. • Ingress Filtering Enable ingress filtering for a port by checking the box. This parameter affects VLAN ingress processing. If ingress fi lter ing is enabled and the ingress port is not a member of the classified VLAN of the frame, the[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 102 4.6.5 VLAN Membership Configuration  Adding St atic Members to VLANs (VL A N Index) Use the VLAN S tatic T able to configure por t members for the selected VLA N index. Assign ports as tagged if they are connected to 802.1Q VLAN compliant devices, or untagged they are [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 103 4.6.6 Private VLAN Configuration Overv iew When a VLAN is configured to be a private V LAN, communication between ports within that VLAN can be prevented. Two application examples ar e provided in this section: • Customers connected to an ISP can be members of the same [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 104 The page includes the following fields: Object Description • Port The switch interface. Displays private VLAN port types. Isolated A single stand-alone VLAN that contains one promiscuous port and one or more isolated (or host) ports. This VLAN conveys traffic between th[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 105 4.7 Rapid S p anning T ree Protocol The S panning Tree protocol can be used to detect and disable ne t work loops, and to provide backup links between switches, bridges or routers. This allows the switch to interact with other bridging devices in your ne twork to ensure t[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 106 uses the information in the frame to calculate a BPDU, a n d, if the topology changes, initiates a BPDU transmission. The communication bet ween switches via BPDUs results in the following:  One switch is elected as the root switch  The shortest distance to the root[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 107 Switch Blocking Listening Learning Forwarding Disable Figure 4-7-1 ST P Port S tate T ransitions Y ou can modify each port state by using management software . When you enable STP , every port on ever y switch in the network goes through the blocking state a n d then tran[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 108 Priority A relative priority for each s witch – lower numbers give a higher priorit y and a greater chance of a given s witch being elected as the root bridge 32768 Hello Time The length of time bet ween broadcasts of the hello message by the s witch 2 seconds Maximum A[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 109 the Root Bridge, the set Hello T ime will be used if and when your S witch becomes the Root Bridge. The Hello T ime cannot b e longer than the Max. Age. Otherwise, a configuration error will occur . Max. Age – The Max Age can be from 6 to 40 secon ds. At the end of the [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 0 Bridge ID = 15 Port 3 Port 1 Port 2 A Bridge ID = 20 Port 1 Port 2 Port 3 C Bridge ID = 30 Port 1 Port 2 Port 3 B LAN 1 LAN 2 LAN 3 Portcast = 19 Portcast = 19 Portcast = 19 Portcast = 4 Portcast = 4 Portcast = 19 Portcast = 4 Portcast = 4 Figure 4-7-5 Before Appl ying t[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 111 4.7. 1 RSTP System Configuration This page allows you to configure RSTP system settings. The settings are used by all RSTP Bridge instances in the Switch or switch S tack. The Managed Switch suppor t the following Sp ann ing T ree protocols: ‧ Compatiable -- S panning T[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 2 Compatible – Classis STP ( 802.1d) : Provides a single path between end stations, avoiding and eliminating loops. The Gigabit Ethernet Switch implement the Rapid Sp a nning Protocol as the default spanning tree protocol. While select “Compatibles ” mode, the system[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 3 4.7. 3 RSTP Port Configuration This page allows the user to inspect the current RSTP port configurations, and possi bly change them as well. This page contain settings for aggregations and phys ical ports. The aggregation settings are stack global. The RSTP port settings[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 4 path cost port s are chosen as forwarding ports in favor of higher path cost ports. V alid valu es are in the range 1 to 200000000. • Priority Controls the port priority . This can be used to control priority of ports having identical port cost. (See above). Default: 1[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 5 Port T ype Link T ype IEEE 802.1w-2001 Ethernet Half Duple x Full Duplex T runk 2,000,000 1,000,000 500,000 Fast Ethernet Half Duplex Full Duplex T runk 200,000 100,000 50,000 Gigabit Ethernet Full Duple x T runk 10,000 5,000 T abl e 4-7-3 Default STP Path Costs[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 6 4.7. 4 RSTP Port St atus This page displays the RSTP port st atus for port ph ysical ports in the currently selected switch. The RSTP Port S tatus screen in Figure 4-7-10 appears. Figure 4-7-10 RST P Port S tatus page screenshot The page includes the following fields: Ob[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 7 • Stat e The current RST P port state. T he port st ate can be one of the following values: • Disabled • Blocking • Learning • Forwarding • Non-STP . • Bridge The RSTP Bridge instance (VLAN ID). This is also a link to the RSTP Det ailed Bridge S tatus, if t[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 8 4.8 Quality of Service 4.8.1 Underst and QOS Quality of Service (QoS) is an advanced traffic prioritization feature that allows you to establish control over network traffi c. QoS enables you to assig n various grades of network service to diff erent t ypes of traffic, s[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 11 9 3. Create a QoS profile which associates a service level an d a classifier . 4. Appl y a QoS profile to a port(s). 4.8.2 QoS Control Li st Configuration This page lists the QCEs for a given QCL.  Frames can be classified by 4 different QoS classes: Low , Normal , Medi[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 120 • T ype V alue Indicates the value accord ing to its QCE type. • Ethernet T ype : The field shows the Ethernet T ype value. • VLAN ID : T he field shows the VLAN ID. • TCP/UDP Port : The field sho ws the TCP/UDP port range. • DSCP : The field shows the IPv4/IPv6[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 121 The page includes the following fields: Object Description • QCE T ype Select the available t ype for the specific QCE. • Ethernet T ype : Matches the received frame's EtherTy pe a gainst the QCE Key . • VLAN ID : Matches the frame's VID against the QCE Ke[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 122 Figure 4-8-3 Port QoS Configuration page screens hot The page includes the following fields: Object Description • Number of Classes Configure the number of traffic classes as "1", "2", or "4". The default value is "4". • Port Th[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 123 4.8.4 QCL Configuration Wizard This handy wizard helps you set up a QCL quickly . The QCL Configuration Wizard screen in Figure 4-8-5 appears. Figure 4-8-5 Welcome to the QCL Co nfiguration Wizard page screenshot The page includes the following fields: Object Description [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 124 Figure 4-8-6 Set up Policy R ules page screenshot The page includes the folling fileds: Object Description • QCL ID Frames that hit this QCE are set to match this specific QCL. • Port Members A row of radio buttons for each port is displa yed for each QCL ID. T o incl[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 125 4.8.4.2 Set up T ypical Network Application Rules Set up the specific QCL for different t ypi cal network application q uality control.  STEP-1 Set up the specific QCL for different t ypical network applicati on quality control b y selecting the network application t y[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 126 • User Definition Indicates the user definition that applies to the specific QCE. The user definitions are: • Ethernet T ype: S pecify the Ethernet T ype filter for this QCE. The allowed range is 0x60 0 to 0xFFFF . • VLAN ID: VLAN ID filter for this QCE. The allowed[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 127 4.8.4.3 Set up T oS Precedence Mapping Set up the traffic class mapping to the precedence part of T oS (3 bits) when receiving IPv4/IPv6 packet s. The screen in Figure 4-8-10 appears. Figure 4-8-10 Set up T oS Precedence Ma pping page screenshot The page includes the foll[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 128 4.8.4.4 Set up VLAN T ag Priority Mapping Set up the traffic class mapping to the User Priority value (3 bits) when receiving VLAN tagged packets. The screen in Figure 4-8-1 1 appears. Figure 4-8-1 1 Set up VLAN T ag Priority Mapping page screenshot The page includes the [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 129 4.8.5 QoS St atistics This page provides statistics for the different queues for all sw itch p orts. T he ports belong to the currently selected stack u nit, as reflected by the page header . The QoS S tatistics screen in Figure 4-8-12 app ears. Figure 4-8-12 QoS S tatist[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 130 4.8.6 Bandwid th Control Configure the switch port rate l imit for Policers and Shapers on this page. The settings relate to the c urrently selected stack unit, as reflected by the page header . The screen Bandwidth Control in Figur e 4-8-13 appears. Figure 4-8-13 XXXXXXX[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 131 4.8.7 Storm Control Configuration S torm control for the s witch is configured on this page. T here three types of storm rate control:  Unicast storm rate control  Multicast storm rate control  Broadcast storm rate control. The rate is 2^n, where n is equal to or[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 132 4.9 Multicast 4.9.1 IGMP Snooping The I nternet Group Manageme nt Protocol (IGMP) lets ho st and routers share information about multicast groups memberships. IGMP snooping is a switch feature that monitors the exchange of IGM P messages and copies them to the CPU for fea[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 133 Figure 4-9-2 Multicast floodin g Figure 4-9-3 IGMP Snooping multicast stream control[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 134 IGMP V ersions 1 and 2 Multicast groups allow members to join or leave at any time. IGMP provides the method for members and multicast routers to communicate when joining or leaving a multicast group. IGMP version 1 is defined in RFC 1 1 12. It has a fixed packet size and[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 135 message, and query messag es that ar e specific to a given group. The states a computer will go through to join or to leave a multicast gro up are shown below: Non-Member Delaying Member Idle Member Leave Grou p Leave Grou p (Stop Tim er) Join Group (Send Report, Start T [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 136 4.9.2 IGMP Snooping Configuration This page provides IGMP Sno oping related configuration. Most of the settings are global, whereas t he Router Port configuration is r elated to the currently selected stack unit, as refl ected by the page header . The IGMP Snooping Config[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 137 4.9.3 IGMP Port Related Configuration This page provides IGMP Sno oping related configuration. Most of the settings are global, whereas t he Router Port configuration is r elated to the currently selected stack unit, as refl ected by the page header . The IGMP Port Relate[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 138 4.9.4 IGMP Snooping St atus This page provides IGMP Snooping status. The status relate to the currently selected stack unit, as reflected by the page header . The IGMP Snooping status screen in Figure 4-9-7 appear s. Figure 4-9-7 IGMP Snooping status page screenshot The p[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 139 4.9.5 Multicast Address T able The Multicast Address T able screen i n Figure 4-9-8 appears. Figure 4-9-8 Multicast Addres s T able page screenshot The page includes the following fields: Object Description • Delete Check to delete the entry . It will be deleted during [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 140 4.10 IEEE 802.1X Network Access Control Overview of 802.1X (Port-Based) Authentication In the 802.1X-world, the user is called the supp licant, the switch is the authenticator , and the RADIUS server is the authentication server . The switch acts as the man-in-the-mid dle[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 141 4.10.1 Underst anding IEEE 802.1X Port-Based Authentication The IEEE 802.1X standard defines a client-server-b ased access cont rol and authenticatio n protocol that restricts unauthorized clients from connecting to a LAN through publicly accessi bl e ports. T he authenti[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 142 z Switch (802.1X de v ice) —controls the ph ysical access to the network based o n the authentication status of the client. The switch acts as an intermediary (proxy) bet ween the cli ent and the authentication se rver , requesting identit y information from the client,[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 143 Figure 4-10-2 EAP message ex change  Ports in Authorized and Unauthorized States The switch port state determines whether or not the client is granted acc ess to the network. The port starts in the unauthorized state. While in this state, the port disa llows all ingres[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 144 4.10.2 802.1X System Configuration This page allows you to configure the IEEE 802.1X a nd MAC-based authenticatio n system and port settings. The IEEE 802.1X standard defines a port-based access co ntrol pr ocedure that prevents unauthor ized a ccess to a network by requi[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 145 • Reauthentication Enabled If checked, clients are reauthenticated after the interval specified by the Reauthentication Period. Rea uthentication for 802.1X-enabled p orts can be used to detect if a new device is plugged into a switch port. For MAC-based ports, reauthen[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 146 4.10.3 802.1X and MAC-Based Auth entication Port Configuration When 802.1X is enabled, you need to configure the parameters for the authentication process t hat runs bet ween the client and the switch (i.e., authenticator), as well as the client identit y lookup process t[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 147 • Port The port number for which the configuration below applies. • Admin St ate Sets the authentication mode to one of the following options (onl y used when 802.1X or MAC-based authe ntication is globally enabled ): • Aut o: Requires an 802.1X- aware client (suppl[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 148 The stackswitch is "born" with a pool of state-machines, from which all ports dra w whenever a new client is seen on the port. When a g iven port's maximum is reached (both authorized and unauthorized c lients count), further new clients are disallowed acce[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 149 4.10.4 802.1X Port St atus This page provides an overview of the c u rrent IEEE 802.1X port states for the select ed switch. The 802.1X Port S tatus screen in Figure 4-10-5 appears. Figure 4-10-5 802.1X S tatus page screenshot The page includes the following fields: Objec[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 150 EAPOL frame for port-based a uthenticatio n, and the source MAC addr ess from the most recently received frame from a new client for MAC-based authentication. 4.10.5 802.1X and MAC-Based Authentication St atistics This page provides detailed IEEE 802.1X statistics for a s[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 151 The selected port belongs to the currentl y select ed st ack unit as reflected by the table header .  EAPOL Counters These counters are not availa ble for MAC-based ports. Supplicant frame counter statistics. There are seven re ceive frame counters and three tra nsmit [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 152  RADIUS Counters RADIUS Server frame counter statistics. For MAC-based ports there are two tables containing RADIUS counters. The left-most shows a summary of all RADIUS counters on this port. The right-most shows RADIUS counters for the currently selected clien t, or [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 153 MAC-based: Counts all the RADIUS packets sent from the switch towards the RADIUS server for a given por t (left-most table) or client (right-most table). Possible retransmissions are not c ounted.  Last Supplicant/Client Info For MAC-based ports, this section is embe d[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 154 4.10.6 Windows Plat form RADIUS Server Configuration 1. Setup the RADIUS server and assign the clie nt IP address to the Managed switch. In this case, field in the default IP Address of the Managed Switch with 192. 168.0.100. And also make sure the shar ed secret key is a[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 155 Figure 4-10-9 Windo ws Server RADIUS Server setting path 5. Enter ” Active Directory Users and Computers ”, create legal us er data, the next, ri ght-click a user what you created to enter properties, and what to be noticed: Figure 4-10-10 T sInternetUser Properties s[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 156 Set the Ports Authenticate S tatus to “ Force Authorized ” if th e port is connected to the RADIUS server or the port is a uplink port that is connec ted to another switch. Or once the 802.1X stat to work, the switch might not be able to access the RADIUS server . 4.1[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 157 Figure 4-10-12 7. Click “ OK ”. 8. When client has associated with the Managed Switch, a user authentication notice appea rs in system tray. Click on the notice to continue. Figure 4-10-13[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 158 9. Enter the user name, password and the lo g on domain that your account belongs. 10. Click “ OK ” to complete the validation process . Figure 4-10-14[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 159 4.1 1 Access Control Lists ACL is an acronym for Access Control Lis t. It is the list table of ACEs, containing access control entries that specify individ ual users or groups permitted or denied to specific tr affic objects, such as a process or a program. Each accessibl[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 160 • Policy : The ACE will match ingress ports with a specific polic y . • Port: The ACE will match a specific ingress port. • Frame T ype Indicates the frame type of t he ACE. Possible values are: • Any : The ACE will match any frame type. • ET ype: The ACE will m[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 161 4.1 1.2 ACE Configuration Configure an ACE (Access Control Entr y) on this page. An ACE consists of several parameters. T hese p aram eters vary according to the frame type that you select. First select the ingress port for the ACE, and then select the frame type. Differe[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 162  MAC Para meters Object Description • SMAC Filter (Only displayed when the frame type is Ethernet T ype or ARP .) S pecify the source MAC filter for this ACE. Any: No SMAC filter is specified. (S MAC filter status is "don't-care".) S pecific: If you wa[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 163  ARP Param eters The ARP parameters can be configured when Frame T ype "ARP" is selected. Object Description • ARP / RARP Specify the available ARP/RARP opcode (OP) flag for this ACE. • Any : No ARP/RARP OP flag is specified. (OP is "don't-care&[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 164 address field (THA) settings. 0 : RARP frames where T HA is not equal to the SMAC address. 1 : RARP frames where T HA is equal to the SMAC address. Any : Any value is allo wed ("don't-care"). • IP/Ethernet Length S pecif y whether frames can hit the actio[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 165 TCP parameters w ill appear . These fields are explain ed later in this help file. • IP Protocol V alue When "S pecific" is selecte d for the IP pr otocol value, you ca n enter a specific value.. The allowed range is 0 to 255 . A frame that hits this ACE match[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 166 address and destination IP mask in the DIP Address and D IP Mask fields that appear . • DIP A ddress When "Host" or "Net wo rk" is selected for the destination IP filter , you can enter a specific DIP address in dotted decimal notation. • DIP Mask [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 167 hits this ACE matches this TCP/UDP source value. • TCP/UDP Source Range When "Range" is selected for the TCP/UDP s ource filter , you c an enter a specific TCP/UDP source range value. The allowed range is 0 to 65535 . A frame that hits this ACE matches this TC[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 168  Ethernet T ype Parameters The Ethernet T ype parameters can be config ured when Frame T ype " Ethernet T ype" i s selected. Object Description • EtherT ype Filter Specify the Ethernet type filter for this ACE. Any : No EtherT ype filter is specified (Ether[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 169 The page includes the following fields: Object Description • Set up Policy Rules Set up the default policy rules for Client ports, Server ports, Network ports and Guest ports. • Set up Port Policies Group ports into several types according to different ACL p olicies. [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 170 4.1 1.3.2 Set up Port Policies Group ports into several types according to different ACL policies. The settings relate to the currently selected stack unit, as reflected by the page header . The screen in Figure 4-1 1-4 appears. Figure 4-1 1-4 Set up Port Policies page sc[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 171 4.1 1.3.3 Set up T ypical Network Application Rules Set up the specific ACL for different typical network application access con trol. The screen in Figure 4-1 1-5 appe ars.  STEP-1: Selecting the Ne twork Applic ation T ype: Figure 4-1 1-5 Set up T ypical net work App[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 172 range is 0 to 65535 . • Others Indicates the other application that appl ies to the spec ific ACE. The other applications are: HTTPS , ICMP , Multicast IP Stream , NetBIOS , PING Request , Ping Reply , SNMP , SNMP T raps .  STEP-2: Define and A pp ly the T ypeical Ne[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 173 through 8. • Sw itc h Select the switch to which this ACE appli es. • Any : The ACE applies to any port. • Switch n: The ACE applies to this switch number, w h ere n is the number of the switch. • Act io n S pecif y the action to take with a frame that hits this A[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 174 4.1 1.3.4 Set up Source MAC and Source IP Binding S trictly control the net work traf fic b y only allowing incoming fr ames that match the source IP and source MAC on specific port. The settings relate to the currently selected stack unit, as reflected by the page header[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 175 Figure 4-1 1-9 4.1 1.3.5 Set up DoS Attack Detec tion Rules Set up the specific ACL for dif ferent t ypi cal network application access control. The screen in Figure 4-1 1-10 appears. Figure 4-1 1-10 Set up DoS Attack Detection Rules page screenshot The page includes the [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 176 packet of destination unreachable to the spoofed source address. Eventu ally leading it to be unreachable by other clie nts and the system will go down. • ICMP DoS - Ping of Death A malicious attacker sending a malformed ICMP request packet larger than the 65,536 bytes [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 177 Object Description • Ingress Port Select the ingress port to which this ACE applies. • Any : The ACE app lies to any port. • Port n : The ACE applies to this port number , where n is the number of the swit ch port. • Policy n : T he ACE applies to this policy nu m[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 178 4.1 1.4 ACL Rate Limiter Configuration Configure the rate limiter fo r the ACL of the switch. The ACL Rate Limiter Configuration screen in Figure 4-1 1-13 appears. Figure 4-1 1-13 ACL Rate Limi ter Configuration page screenshot The page includes the following fields: Obje[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 179 4.1 1.5 ACL Port s Configuration Configure the ACL p arameters (ACE) of each switch port. These p arameters will affect frames received on a port unless the frame matches a specific ACE. The settings relate to the cu rrently selected stack unit, as reflected by the page h[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 180 • Policy ID Select the policy to apply to this port. The allowed values are 1 through 8 . The default value is 1. • Act io n Select whether for warding is permitted (" Permit") or denied ("Deny"). The default value is "Permit". • Rate L[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 181 4.12 Address T able Switching of frames is based upon the DMAC address contained in the fra me. The Managed Switch builds up a table that m aps MAC addresses to switch ports for knowing which ports the fr ames should go to ( based upon the DMAC address in the frame ). Thi[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 182 4.12.2 St atic MAC T able Configuration The static entries in the MAC table are shown in this table. The static MAC table can contain 64 entries. The maximum of 64 entries is for the whole stack, and not per sw itch. The MAC table is sorted first by VLAN ID and then by MA[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 183 4.12.3 MAC Address T able St atus Dynamic MAC T able Entries in the MAC T able are sho wn on this p age. The MAC T able contains up to 8192 entries, and is sorted first by VLAN ID, then by MAC address. Figure 4-12-3 MAC Address T able S tatus Navigating the MAC T able Eac[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 184 Buttons Auto-refresh □ : Check this box to enable an automatic refresh of the page at regular intervals. Refreshe : Refreshes the displa yed table st arting from the "S tart from MAC address" and "VLAN" input fields. Clear : Flushes all dynamic entri[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 185 4.13 Port Security (T o be Continued) Port security is a feature that allows yo u to c onfigure a switch port with one or more device MAC addre sses that are authorized to access the network through that port. When port security is enabled on a port, the Mana ged Switch s[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 186 Make sure that the link used for managin g the switch is added to the S tatic Mac T able befor e changing to secure learning mode, otherwise the management link is lost and can o nly be restored by using another non-secure p ort or by connecting to the switch via the seri[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 187 4.14 LLDP 4.14.1 Link Layer Di scovery Protocol Link Layer Discov ery Protocol (LLDP) is used to discover basic information about neighboring devices on the local broadcast domain. LLDP is a Layer 2 protocol that us es periodic broadcasts to advertise informati on about t[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 188 4.14.2 LLDP Configuration This page allows the user to inspect and configure the current LLDP port settings. The LLDP Configuration screen in Figure 4-14-1 appears. Figure 4-14-1 LLDP Configuration page screenshot  LLDP Param eters Object Description • Tx Interval Th[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 189 This attribute must comply with the following rule: (T ransmission Interval * Hold T ime Multiplier) ≤ 65536, an d T ransmission Interval >= (4 * Delay Interval) • Tx Hold Each LLDP frame contains information about how long the information in the LLDP frame shall b[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 190 • Port Descr Optional TL V: When checked the "port description" is included in LLDP information transmitted. • Sys Name Optional TL V: When checked the "system name" is included in LLDP information transmitted. • Sys Descr Optional TL V: When che[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 191 4.14.3 LLDP Neighbor This page provides a status overview for all LLDP neighbors. The displayed table contains a row for each port on which an LLDP neighbor is detected. The LLDP Neighbor screen in Figure 4-14-3 appears. Figure 4-14-3 LLDP Neighbor Information page screen[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 192 4.14. 4 LLDP St atistics This page provides an overview of all LLDP traffic. Tw o types of counters are shown. Global coun ters are counters that refer to the whole stack, switch, while local counters refers to count ers for the currently selected s witch. T he LLDP S tat[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 193 • T otal Neighbors Entries Dropped Shows the number of LLDP frames dropped due to that the entry table was full. • T otal Neighbors Entries Aged Out Shows the number of entries deleted due to T ime-T o-Live expiring.  Local Counters The displayed table contains a r[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 194 4.15 Network Diagnastics 4.15.1 Cable Diagnostics This page is used for running the Cable Dia gnostics. Press to run the diagnostics. This will ta ke approximately 5 seconds. If all ports are selected, this can take approximately 15 seconds. When completed, the page refre[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 195 4.15.2 Ping This page allows you to issue ICMP PING p ackets to troubleshoot IP connectivity issues. After you press , 5 ICMP p ack ets are transmitted, and the sequenc e num ber and roundtrip time are displa yed upon reception of a reply . The page refreshes automaticall[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 196 4.16 S t acking – SGSW-24040 / SGSW -24040R Using S tacking, it is possible to conn ect a number of switches together in a stack, which behaves as a single s witch as seen from outside the stack. T wo types of stack topologies are supported:  Ring topology  Chain [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 197  Chain St ack: A chain of switches, that is , no redundant forwardi ng paths. Figure 4-16-1 Chain St ack topology  Ring St ack: A ring of switches, thereby providing red undant forwarding paths. Figure 4-16-2 Ring S tack topology  Back-to-Back Stack : Tw o s witc[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 198 4.16.1 St ack This section provides information for un derstand stacking architecture, include the belo w items:  Switch IDs • Assigning an d Swapping S witch IDs • Removing a Sw itch From the St ac k • Replacing a Switch • General Switch ID A ssignment Rules ?[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 199 "Save". 5. The ne w hardware has now taken over t he configuration of the failing har dware.  General Switch ID Assignment Rules When assigning Switch IDs to the devices in the stac k, you must note the following: 1. Switches with assigned IDs can be changed [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 200 Figure 4-16-4 Remove or Replace a switch from the st ack 4.16.1.4 Shortest Path Forwarding The SGSW Swtich supports shortest path forwarding technology to optimal data flow across the stack. The advantage of shortest path forwarding as below:  Automatic Loop Prev entio[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 201 4.16.2 St ack Configuration This page is used for configure the stack, include assign S wit ch ID, master priority and display the current stack member information. The screen in Figure 4-16-6 appears. Figure 4-16-6 S tack Configuration page screenshot The page includes t[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 202 4.16.3 St ack Information This page provides an overview of the stack topology , as detected b y SPROUT .  St ack T opology The S tack T opology screen i n Figure 4-16-7 appears. Figure 4-16-7 S tack Information page screenshot - S tack T opology The page includes the [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 203 Figure 4-16-8 S tack Information page screenshot - S tack List The page includes the following fields: Object Description • Delete Deletes this switch from the stack configuration. • St ack Memb er The MAC address of the switch. • Switch ID The Switch ID (1-16) assi[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 204 Figure 4-16-9 S tack Information page screenshot - Master Forwarding T able 4.16.4 St ack Port St ate Ovewview This page provides an overview of the current s witch p ort states. Clicking on the image of a port opens the Port S tatistics page.The port states are illustrat[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 205 4.16.5 St ack Example S tacking function is convenient for admin istrator to manage multiple s witches by single IP . Basically , you got to have m in. 2 u nits. The SGSW Switch supports auto stack confi guration. Once the stack cable is connec t to the stack port of each[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 206 Figure 4-16-12 St ack Configuration Step 5: We wish to make the SGSW switch with MAC “00- 30-4f-24- 04-76 ” / Switch ID=2 to become the S tack Master and s wap the Switch ID to 1.  Select the switch with ID=1 and assign a new ID for this uni t, for ex ample: ID=4 F[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 207  Reflash the web browser , the switch with MAC address “00- 30-4f-24-04-76” become the stack master now . Figure 4-16-14 T he result after master election Step 6: After the S tack Master and Members have been conf igured , any switch in the stack can be managed fro[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 208 5. COMMAND LINE INTERFACE 5.1 Accessing the CLI When accessing the management interface for the switch over a direct connection to the server ’s console port, or via a T elnet connection, the switch can be managed b y entering command keyw ords and parameters at the pro[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 209 1. For securit y reason, please change and memorize the ne w p ass word after this first setup. 2. Only accept command i n lowercas e letter under console interface. Configure IP address The WGSW / SGSW Managed Switch is shipped with default IP address as following. IP Ad[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 210 Switch/> ip setup 192.168.1. 100 255.255.255.0 192.168.1.1 The previous command would apply the follow settings for the Switch. IP: 192.168.1.100 Subnet Mask: 255.255.255.0 Gateway: 192.168.1.1 Figure 5-3 Set IP address scr een 4. Repeat Step 1 to check if the IP addr [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 21 1 5.2 T elnet login The Managed Switch also supports telnet for remote manageme n t. T he switch asks for user name and password for remote login when using teln et, please use “admin” for password.[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 212 6. Command Line Mode The CLI groups all the commands in a ppropriate modes according to the nature of the command. A sample of the CLI command modes are described belo w . Each of the com mand modes supports specific software commands. Command Group s: System Syste m sett[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 213 all : Show all switch configuration, default: Sho w system configuration <port_list> : Port list or 'all', default: All ports Example: T o display system information: Switch/>system configuration System Name : SGSW-24040 System Password: admin CLI Promp[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 214 Parameters: keep_ip : Keep IP configuration, def ault: Restore full configuration Example: T o restore default valu e but not reset IP address: Switch/>system restore default keep_ip System Name Description: Set or show the system name. Synt ax: System Name [<name&g[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 215 Parameters: <prompt> : CLI prompt string Default Setting: SWITCH Example: T o change CLI title: Switch/>system prompt SGSW-24040 SGSW-24040/> System Pass word Description: Set or show the system p assword. Synt ax: System Password [<password>] Parameters[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 216 Parameters: <ip_addr> : IP address (a.b.c.d), default: Show IP address Default Setting: 0.0.0.0 Example: Set SNTP server: SWITCH/>system sntp 220.130.15 8.52 System T imezone Description: Set or show the system timezone offset. Synt ax: System T imez one [<off[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 217 <ip_ser ver> : TFTP server IP address (a.b.c.d) <file_name> : Firmware file name[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 218 IP Configura tion Description: Show IP configuration. Synt ax: IP Configuration Example: Show IP configuration: Switch/>ip configuration DHCP Client: Disabled IP Address : 192.168.1 00.105 IP Mask : 255.255.255.0 IP Router : 192.168.100.1 VLAN ID : 1 SNTP Server: 0.0.0[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 219 IP Setup Description: Set or show the IP setup. Synt ax: IP Setup [<ip_addr>] [<ip_mask>] [<ip_router>] [<vid>] Parameters: <ip_addr> : IP address (a.b.c.d), default: Show IP address <ip_mask> : IP subnet mask (a.b.c.d), default: Show I[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 220 SWITCH/>ip ping 192.16 8.0.51 PING server 192.168.0.51 60 bytes from 192.168.0.51: icmp_seq=0, time=0ms 60 bytes from 192.168.0.51: icmp_seq=1, time=0ms 60 bytes from 192.168.0.51: icmp_seq=2, time=10ms 60 bytes from 192.168.0.51: icmp_seq=3, time=0ms 60 bytes from 192[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 221 6.2 Port Management Command Port Conf iguration Description: Show port configuration. Synt ax: Port Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports Example: Display port1~4 status SWITCH/>port configura[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 222 Default Setting: Enable Example: Disable port1 SWITCH/>port state 1 disable Port Mode Description: Set or show the port speed and duplex mode. Synt ax: Port Mode [<port_list>] [10hdx|10fd x|100hdx |100fdx|1000fdx|a uto] Parameters: <port_list> : Port list o[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 223 Synt ax: Port Flow Control [<port_list>] [enable|disable] Parameters: <port_list> : Port list or 'all', default: All ports enable : Enable flow control disable : Disable flow control (default: Show flow control mode) Default Setting: Disable Example:[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 224 Port Power Description: Set or show the port PHY pow e r mode. Synt ax: Port Power [<port_list>] [enable|disable|actip hy|dynamic] Parameters: <port_list> : Port list or 'all', default: All ports enable : Enable all po wer control disable : Disable a[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 225 Example: SWITCH/>port excessive 1 re start Port St atistics Description: Show port statistics. Synt ax: Port S tatistics [<port_list>] [<command>] Parameters: <port_list> : Port list or 'all', default: All ports <command> : The command[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 226 Port Numbers Description: Show port numbering. Synt ax: Port Numbers[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 227 Mirror Configuration Description: Show mirror configuration. Synt ax: Mirror Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports Mirror Port Description: Set or show the mirror port. Synt ax: Mirror Port [<[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 228 Default Setting: 1 Example: Set mirror SID 2 for sw itch SWITCH/>mirror sid 2 Mirror Mode Description: Set or show the mirror mode. Synt ax: Mirror Mode [<port_list>] [enable|disable |rx|tx] Parameters: <port_list> : Port list or 'all', default: A[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 229 6.3 Link Aggregation Command Aggregation Configurati on Description: Show link aggregation configu ration. Synt ax: Aggr Configuration Example: SWITCH/>aggr configuratio n A ggregation Mode: SMAC : Enabled DMAC : Disabled I P : E n a b l e d Port : Enabled Aggregation [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 230 Aggregat ion Delete Description: Delete link aggregation. Synt ax: Aggr Delete <aggr_id> Parameters: <aggr_id>: Aggregati on ID, global: 1-2, local: 3-14 Example: Delete Group2 SWITCH/>aggr delete 2 Aggregation Lookup Description: Lookup link aggregation. S[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 231 Aggregation Mode Description: Set or show the link aggregation traffic distribution mode. Synt ax: Aggr Mode [smac|dmac|ip|port] [enable |disable] Parameters: smac : Source MAC address dmac : Destination MAC addr ess ip : Source and destination IP address port : Source an[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 232 LACP Con figuration Description: Show LACP configuration. Synt ax: LACP Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports Example: Show LACP co nfiguration SWITCH/>lacp configuratio n Port Mode Key Role -[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 233 21 Disabled Auto Active 22 Disabled Auto Active 23 Disabled Auto Active 24 Disabled Auto Active LACP Mo de Description: Set or show LACP mode. Synt ax: LACP Mode [<port_list>] [enable|disable] Parameters: <port_list> : Port list or 'all', default: Al[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 234 Default Setting: Auto Example: Set key1 for port1~4 SWITCH/>lacp key 1-4 1 LACP Role Description: Set or show the LACP role. Synt ax: LACP Role [<port_lis t>] [active|p assive] Parameters: <port_list>: Port list or 'all', default: All ports active[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 235 Parameters: <port_list> : Port list or 'all', default: All ports Example: Show LACP status of port1~4 SWITCH/>lacp status 1-4 Port Mode Key Aggr ID Partner System ID Partner Port ------ ------------ ----- ------- ------------------------ ------------ 1 [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 236[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 237 6.4 VLAN Configuration Command VLAN Configuration Description: Show VLAN configuration. Synt ax: VLAN Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports Example: Show VLAN status of port1 SWITCH/>vlan conf[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 238 Dot1q Example: Set VLAN mode in port base SWITCH/>vlan mode portb ased VLA V PVID Description: Set or show the port VLAN ID. Synt ax: VLAN PVID [<port_list>] [<vid>|none] Parameters: <port_list> : Port list or 'all', default: All ports <v[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 239 (default: Show accepted frame types) Default Setting: All Example: Set port20 that allow tagged frames only SWITCH/>vlan framet ype 20 tagged VLAN Ingress Filter Description: Set or show the port VLAN ingress filter . Synt ax: VLAN IngressFilter [<port_list>] [en[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 240 Parameters: <port_list> : Port list or 'all', default: All ports unt agged : VLAN Link T ype T agged t agged : VLAN Link Ty p e Untagged Default Setting: Un-tagged Example: Enable t agged frame for port2 SWITCH/>vlan linkt ype 2 tagged VLAN Q-in-Q Mode [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 241 dot1q : Set out layer VLAN tag ether type : 802.1Q Default Setting: N/A Example: SWITCH/>vlan etht ype 10 man VLAN Add Description: Add or modify VLAN entry . Synt ax: VLAN Add <vid> [<port_list> ] Parameters: <vi d> : V L A N I D ( 1 - 4 0 9 5 ) <[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 242 <vi d> : VLAN ID (1-4095) Example: Delete port17 to port24 in VLAN10 SWITCH/>vlan delete 1 0 17-24 VLAN Lookup Description: Lookup VLAN entry . Synt ax: VLAN Lookup [<vid>] Parameters: <vi d> : VLAN ID (1-4095), default: Show all VLANs Example: Show V[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 243 PVLAN Configuration Description: Show Private VLAN configuration. Synt ax: PVLAN Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports PVLAN Isolate Description: Set or show the port isolation mode. Synt ax: PVL[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 244 6.5 S p anning T ree Protoc ol Command RSTP Con figuration Description: Show RSTP configuration. Synt ax: RSTP Configuration [<port_list>] Parameters: <port_list> : Port list or 'all'. Port zero means aggregations. Default Setting: Disable Example: S[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 245 Default Setting: 32768 Example: Set RSTP system priority valu e in 4096 SWITCH/>rstp s ysprio 4096 RSTP Ag e Description: Set or show the RSTP maximum age. Synt ax: RSTP Age [<max_age>] Parameters: <max_age>: RST P maximum age time (6-200) Default Setting: [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 246 15 Example: Set RSTP forward delay value in 25 SWITCH/>rstp del ay 25 RSTP V ersion Description: Set or show the RSTP protocol version. Synt ax: RSTP V ersion [compatible|normal] Parameters: compatible : C ompatible with STP normal : R S T P Default Setting: Normal Exa[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 247 Default Setting: Disable Example: Enable rstp mode for port1 SWITCH/>rstp mode 1 e nable RSTP Cos t Description: Set or show the RSTP p ath cost. Synt ax: RSTP Cost [<port_list>] [<p ath_cost>] Parameters: <port_list> : Port list or 'all'. P[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 248 <priority> : R STP priority (0/16/32/48/.../224/240) Default Setting: 128 Example: Set RSTP priorit y value in 16 for port1 SWITCH/>rstp priorit y 1 16 RSTP Edge Description: Set or show the RSTP edge parameter . Synt ax: RSTP Edge [<port_list>] [enable|dis[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 249 Parameters: <port_list> : Port list or 'all', default: All ports enable : Enable RSTP point2point disable : Disable RSTP point2point auto : Automatic RSTP point2point detection Default Setting: Auto Example: Enable RSTP P2P mode for port1 SWITCH/>rstp p[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 250 RSTP S tatistics Description: Show RSTP st atistics. Synt ax: RSTP S tatistics [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports RSTP mChe ck Description: Set the RSTP mCheck (Migration Check) variable for ports. Synt ax: [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 251 6.6 Multicast Configuration Command IGMP Config uration Description: Show IGMP snooping configuration. Synt ax: IGMP Configuration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Default Setting: IGMP Mode: Disabled Floo[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 252 Enable IGMP mode SWITCH/>igmp mode ena ble IGMP S tate Description: Set or show the IGMP snooping state for VLAN. Synt ax: IGMP S tate [<vid>] [enable|disable] Parameters: <vid>: VLAN ID (1-409 5) , default: Show all VLANs enable : Enable IGMP snooping disa[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 253 disable : Disable IGMP snooping (default: Show IGMP snooping mode) Default Setting: Enable Example: Disable VID 1 SWITCH/>igmp state 1 disable IGMP Querier Description: Set or show the IGMP snooping querier mode for VLAN. Synt ax: IGMP Querier [<vid>] [enable|dis[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 254 IGMP Fastleave [<port_list>] [enable|disable] Parameters: <port_list> : Port list or 'all', default: All ports enable : Enable IGMP fast leave disable : Disable IGMP fast leave (default: Show IGMP fast leave mode) Default Setting: Disable Example: SW[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 255 IGMP Flooding Description: Set or show the IGMP snooping unregistered flood operati on. Synt ax: IGMP Flooding [enable|disable] Parameters: enable : Enable IGMP flooding disable : Disable IGMP flooding (default: Show IGMP flood mode) Default Setting: Disable Example: Enab[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 256 Parameters: <vi d>: VLAN ID (1-4095) Default Setting: Disable Example: Enable IGMP flooding fu nction SWITCH/>igmp status 1 Swi tch 1: --------- Q u e r i e r R x T x R x R x R x R x VID S tatus Queries Queries V1 Reports V2 Reports V3 Reports V2 Leave ---- -----[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 257 6.7 Quality of Service Command QoS Conf iguration Description: Show QoS Configuration. Synt ax: QoS Configuration [<port_list> ] Parameters: <port_list> : Port list or 'all', default: All ports QoS Classes Description: Set or show the number of traff[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 258 Parameters: <port_list> : Port list or 'all', default: All ports <class> : T raffic class low/normal/medium/high or 1/2/ 3/4 Default Setting: Low Example: Set high priority for port5 SWITCH/>qos default 5 high QoS T ag Priority Description: Set or[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 259 QoS QCL Port [<port_list>] [<qcl_id>] Parameters: <port_list> : Port list or 'all', default: All ports <qcl_id> : QCL ID Default Setting: 1 Example: Set QCL ID5 for port10 SWITCH/>qos qcl port 10 5 QoS QCL Add Description: Add or modif[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 260 <etype> : Ethernet Ty pe vid : V L A N I D k e y w o r d <vi d> : V L A N I D ( 1 - 4 0 9 5 ) port : U D P / T C P p o r t k e y w o r d <udp_tcp_port> : Source or destination UDP/TCP port (0-65535) dscp : I P D S C P k e y w o r d <dscp> : I P D S[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 261 QoS Mode Description: Set or show the port egress scheduler mode. Synt ax: QoS Mode [<port_list>] [strict|weighted] Parameters: <port_list> : Port list or 'all', default: All ports strict : S trict mode weighted : Weighted mode (default: Show QoS mod[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 262 Synt ax: QoS Rate Limiter [<port_list>] [enable|disable ] [<bit_rate>] Parameters: <port_list> : Port list or 'all', default: All ports enable : Enable rate limiter disable : Disable rate limiter (default: Show rate limiter mode) <bit_rate&g[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 263 SWITCH/>qos shaper 9-16 en able 1000 QoS Unicast Description: Set or show the unicast storm rate limiter . Synt ax: QoS S torm Unicast [enable|di sable] [<packet_rate>] Parameters: enable : Enable unicast storm control disable : Disable unicast storm control <[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 264 Example: Enable multicast storm rate limiter in 1kpps SWITCH/>qos storm multicast enable 1k QoS Broadcast Description: Set or show the multicast storm rate limiter . Synt ax: QoS S torm Broadcast [enable |disable] [<packet_rate>] Parameters: enable : Enable broad[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 265 6.8 802.1x Port Access Control Command Dot1x Configuration Description: Show 802.1X configuration. Synt ax: Dot1x Configuration [<port_l ist>] Parameters: <port_list> : Port list or 'all', default: All ports Example: Show IEEE802.1x status of port1 S[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 266 disable : Disable 802.1X (default: Show 802.1X mode) Default Setting: Disable Example: Enable IEEE802.1x founction for port1 SWITCH/>dot1x mode en able Dot1x St atus Description: Set or show the 802.1X port state. Synt ax: Dot1x S tate [<port_list>] [macbas e d|a[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 267 Synt ax: Dot1x Server [<ip_addr> ] Parameters: ip_addr : RADIUS server IP address (a.b .c.d) (default: Show IP address) Default Setting: 0.0.0.0 Example: Set RADIUS server IP address for switch. RA DIUS server IP addr ess is 192.168.0.254. SWITCH/>dot1x serv er 1[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 268 Refresh (restart) 802.1X authentication process. Synt ax: Dot1x Authenticate [<port_list>] [now] Parameters: <port_list> : Port list or 'all', default: All ports now : Force reauthentication immedia tely Dot1x Re -authenticat ion Description: Set or [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 269 <reauth_period> : Period between reauthentications (1-3600 seconds) (default: Show reauthenticatio n period) Default Setting: 3600 Example: Set period re-authenticatio n time in 3000 seconds SWITCH/>dot1x perio d 3000 Dot1x Timeo ut Description: Set or show the t[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 270 Parameters: <port_list> : Port list or 'all', default: All ports clear : C l e a r s t a t i s t i c s eapol : Show EAPOL statistics radius : Show RADIUS statistics (default: Show all statistics) Dot1x Client s Description: Set or show the maximum number o[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 271 300 Example: Set age time in 100 seconds SWITCH/>dot1x agetime 1 00 Dot1x Hold time Description: T ime in seconds before a MAC-address that failed authentication gets a new authentication chance. Synt ax: Dot1x Holdtime [<hold_time>] Parameters: <hold_time>[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 272 6.9 Access Control List Command ACL Con figuration Description: Show ACL Configuration. Synt ax: ACL Config uration [<port_list>] Parameters: <port_list>: Port list or 'all', default: All ports Default Setting: 300 Example: Set age time in 100 second[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 273 Rate Limiter: Disable Port Copy: Disable Loading: Disable Shut down: Disable Example: ???? SWITCH/>acl action 17-24 den y 1 24 log shut ACL Policy Description: Set or show the ACL port policy . Synt ax: ACL Policy [<port_ list>] [<policy>] Parameters: <p[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 274 <rate_limiter_list> : Rate limiter list (1-15), default: All rate limiters <packet_rate> : Rate in pps (1, 2, 4, ..., 512, 1k, 2k, 4k, ..., 1024k) Default Setting: 1 Example: ??? SWITCH/>acl rate 15 1024k ACL Add Description: Add or modify Access Control En[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 275 <smac> : Source MAC address (xx- xx-xx-xx-xx- xx) or 'any' <dmac> : Destination MAC address (xx-xx-xx-xx-xx-xx) or ' any' arp : A R P k e y w o r d <sip> : S o u r c e I P address (a.b.c.d/n) or 'any' <dip> : Destinati[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 276 ACL L ookup Description: Show ACE, default: All ACEs. Synt ax: ACL Look up [<ace_id>] Parameters: <ace_id> : ACE ID (1-1024) ACL L ookup Description: Clear all ACL counters. Synt ax: ACL Clear[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 277 6.10 MAC Address T able Command MAC Configuration Description: Show MAC address table configuration. Synt ax: MAC Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports Example: Show port1 Mac state SWITCH/>ma[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 278 Example: Add Mac address 00-30-4F -01-01-02 in port1 and vid1 SWITCH/>mac add 00- 30-4f-01-01-02 1 1 MAC Delete Description: Delete MAC address entry . Synt ax: MAC Delete <mac_addr> [<vid> ] Parameters: <mac_addr> : MAC address (xx-xx-xx-xx- xx-xx) &[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 279 MAC Age Tim e Description: Set or show the MAC address age timer . Synt ax: MAC Agetime [<age_time> ] Parameters: <age_time> : MAC address age time (10-1 000000), default: Show age time Default Setting: 300 Example: Set agetime value in 30 SWITCH/>mac ageti[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 280 SWITCH/>mac learn ing 1 secure MAC Dump Description: Show sorted list of MAC address entries. Synt ax: MAC Dump [<mac_max>] [<mac_addr>] [<vid>] Parameters: <mac_max> : Maximum number of MAC addresses 1- 8192, default: Show all addresses <mac[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 281 MAC Flash Description: Flush all learned entries. Synt ax: MAC Flush[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 282 6.1 1 LLDP Command LLDP Co nfiguration Description: Show LLDP configuration. Synt ax: LLDP Configuration [<port_list>] Parameters: <port_list> : Port list or 'all', default: All ports LLDP Mode Description: Set or show LLDP mode. Synt ax: LLDP Mode [[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 283 LLDP Op tional TL V Description: Show / Set LLDP Optional TL Vs. Synt ax: LLDP Optional_TL V [< port_list>] [port_descr|sys_nam e|sys_descr |sys_capa|mgmt_addr] [enabl e|disable] Parameters: <port_list> : Port list or 'all', default: All ports port_d[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 284 Parameters: <interval> : LLDP transmissio n interval (5-32768) Default Setting: 30 Example: Set transmission interval in 1 0 SWITCH/>lldp interval 10 LLDP Hold Description: Set or show LLDP T x hold value. Synt ax: LLDP Hold [<hold>] Parameters: <hold>[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 285 <delay> : LLDP transmission delay (1-8192) Default Setting: 2 Example: Set LLDP delay value in 1 SWITCH/>lldp delay 1 LLDP Reinit Description: Set or show LLDP reinit delay . Synt ax: LLDP Reinit [<reinit>] Parameters: <reinit> : LLDP reinit delay (1-[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 286 LLDP S tatistics Description: Show LLDP S tatistics. Synt ax: LLDP S tatistics [<port_list>] [clear] Parameters: <port_list> : Port list or 'all', default: All ports clear : C l e a r L L D P s t a t i s t i c s[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 287 6.12 S t ack Management Comma nd St ack List Description: Show the list of switches in stack. Synt ax: S tack List [detailed|productinfo] Parameters: deta iled : Show detailed information St ack List Description: Set the master election priority . Synt ax: S tack Master P[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 288 St ack Select Description: Set or show the selected switch ID. Synt ax: S tack Select [<sid>|all] Parameters: <sid> : Switch ID (1-16), default: Show SID Example: Select switch2 to management switch2 SWITCH/>stack select 2 St ack SID Swap Description: Swap [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 289 S tack SID Delete <sid> Parameters: <sid> : Switch ID (1-16) St ack SID Asign Description: Assign SID and associated configuratio n to switch. SID must be unassigned, switch must be present and s witch must not already be assigned to a SID. Synt ax: S tack SID[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 290 7. SWITCH OPERATION 7.1 Address T able The Switch is implemented with an addr ess table. This address table composed of many en tries. Each entry is used to store the address information of some nod e in network, including MAC addr e ss, port no, etc. T his in-formation c[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 291 7.5 Auto-Negotiation The STP ports on the Switch have built-in "A uto-negotiation". This tec hnology automatically sets the best possible ba ndwidth when a connection is established with another net work device (usu ally at Power On or Reset). This is do ne by d[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 292[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 293 8 . TROUBLE SHOOTING This chapter contains information to help you solve pro blems. If the Ethernet Switch is not functioning properly , make sure the Ethernet Switch was set up according to instructions in this manual. ■ The Link LED is not lit Solution: Check the cabl[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 294 ■ St acking not functioning Solution: 1. Check that modul es are installed correctly 2. PLANET CB-STX50 or CB-ST X200 cables not installed corre ctly (LEDs on front panel STX1 or STX2 do not light) 3. Check that the cables are inserted correctly 4. T he stack cable is P[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 295 APPENDEX A A.1 Switch's RJ-45 Pin Assignment s 1000Mbps, 1000Base T Cont act MDI MDI-X 1 BI_DA+ BI_DB+ 2 BI_DA- BI_DB- 3 BI_DB+ BI_DA+ 4 BI_DC+ BI_DD+ 5 BI_DC- BI_DD- 6 BI_DB- BI_DA- 7 BI_DD+ BI_DC+ 8 BI_DD- BI_DC- Implicit implementation of the crossover f unction w[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 296 The standard cable, RJ-45 pin assignment The st andard RJ-45 recept acle/connector There are 8 wires on a standard UT P/STP cable and each wire is color-coded. The following shows the pin allocation and color of straight cable and crossover cable connection: Straight Cabl[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 297 APPENDEX B : GLOSSARY A ACE ACE is an acronym for A cce ss C ontrol E ntry . It describes access permissio n associated with a particular ACE ID. There are three ACE frame types (Ethernet Type, ARP, an d IPv4) and t wo ACE actions (permit and deny). The ACE also contains [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 298 D DES DES is an acronym for D ata E ncryption S tandard. It provides a complete description of a mathematical algorit hm for encrypting (enciphering) an d decrypting (deciphering) binar y coded information. Encrypting data converts it to an uninte lligible form calle d ci[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 299 DSCP DSCP is an acronym for D if fer entiated S ervices C ode P oint. It is a field in the head er of IP packet s for packet classification purposes. E Ethernet T ype Ethernet T ype, or EtherT ype, is a fiel d in the Ethernet MAC header , defin ed by the Ethernet networki[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 300 connection. HTTPS provide authe ntication and encrypted communica tion and is widely used on th e World Wide Web for security-sensitive communication suc h as payment transactions and corporate logons. HTTPS is really just the use o f Netscape's Secure Sock et Layer [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 301 The current version of the Internet Message Access Protocol is IMAP4. It is similar to Post Office Protocol version 3 (POP3), but offers additional and more complex fe atures . For example, the IMAP4 protocol leaves your email messages on the server rather than downloadin[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 302 The frames also contain a MAC addr ess ( SMAC address ), which shows the MAC address of the equipm ent sending the frame. The SMAC address is used by the s witch to aut omatically update the MAC t able with these dynamic MAC addresses. Dynamic entries are remove d from th[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 303 optional TL Vs. If an optional TL Vs is disa bled the correspondin g information is not include d in the LLDP frame. P PING ping is a program that sends a series of packets over a net work or the Internet to a specific computer in order to generate a response from that co[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 304 There are six QCE frame types: Ethernet T ype, VLAN, UDP/ TCP Port, DSCP, TOS, and Tag Priority. Frames can be classified by one of 4 different QoS classes: "Low", "Normal", "Medium", and "Hi gh" for individual application. QCL QCL [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 305 which is the underlying protoc ol used in Microsoft Windows networking. Samba can be installed on a v ariety of operating system platforms, includin g Linux, most common Unix platforms, OpenVMS, and IBM OS/2. Samba can also register itself with the ma ster browser on the [...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 306 T Ta g P r i o r i t y T ag Priorit y is a 3-bit field storing the priority level for the 802.1Q frame. TCP TCP is an acronym for T ransmission C ontrol P rotocol. It is a communicati ons protocol that uses the Internet Protocol (IP) to exchange the messages bet we en com[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 307 A LLDP frame can contain multiple pieces of information. Each of these pieces of informati on is known as TL V (TL V is short for "T ype Length V alue"). U UDP UDP is an acronym for U ser D at agram P rotocol. It is a communications prot ocol t hat uses the Inte[...]

User ’s M anual of WGSW -24040 / WGSW -24040R SGSW -24040 / SGSW-24040R 308 forwarded to the provider port with a single VLAN tag. Tagged frames received on a subs criber port are forwarded to the provider port with a double VLAN tag. VLAN ID VLAN ID is a 12-bit field specifying the VLAN to which the frame belongs.[...]