Milan Technology MIL-SME801GSX manual

8 Port 10/100BASE-TX Plus One 100BASE-FX or 1000BASE-FX Port Advanced Managed Switch MIL-SME801P MIL-SME801GSX MIL-SME801GLX USER GUIDE[...]

Regulatory Approval - FCC Class A - UL 1950 - CSA C22.2 No. 950 - EN60950 - CE - EN55022 Class A - EN55024 Canadian EMI Notice This Class A digital apparatus meets all the requirements of the Canadian Interfe rence-Causing Equipment Regulations. Cet appareil numerique de la classe A respecte toutes les exig ences du Reglement sur le mat eriel broui[...]

iii Table of Contents 1. Introduction Features Intelligent Management Features Package Conten ts Management Methods Console and Telnet Management Web-based Man agement 2. Hardware Description Front Panel LED Indica tors Rear Panel Desktop Insta llation Power On 3. Network Application Small Workgroup Extended Workgroup 4. Console Management Connecti[...]

iv 4-3-8-2. Broadcast Storm Filtering 4-3-8-3. Max Bridge Tran smit Delay Bo und 4-3-8-4. Collision Retry Forever 4-3-8-5. Hash Algori thm 4-3-8-6. IFG Compensation 4-4. Protocol Related Co nfiguration 4-4-1. STP 4-4-1-1. STP Setup 4-4-1-2. System Configuration 4-4-1-3. STP Per Port Setting 4-4-2. SNMP 4-4-2-1. SNMP System Options 4-4-2-2. Communit[...]

v 5-4-5-3. State Activity 5-4-6. Forwarding and Filtering 5-4-6-1. IGMP Snooping 5-4-6-2. Static MAC Address 5-4-6-3. MAC Filtering 5-4-7. VLAN Configuration 5-4-7-1. Port-based VLAN 5-4-7-2. 802.1Q VLAN 5-4-8. Spanning Tree 5-4-8-1. System Configuration 5-4-8-2. Per Port Configuration 5-4-9. Port Mirroring 5-4-10. SNMP 5-4-11. Security Manager 5-4[...]

[...]

1 1. Introduction The MIL-SME801P and MI L-SME801G advanced managed switch families are multi-port switches that can be us ed to build high-performance workgroup networks and as Customer Provider Edge (CPE ) devices in Fiber-to-the-Home (FTTH) networks. Figur e 1-1. The MIL-SME801P switch The MIL-SME801P switch has eight auto-sensing 10/100BASE-TX [...]

2 Features  Console and Telnet management  Conforms to IEEE803.u 10BASE-T, 802 . 3u 100BASE-TX/FX  8 auto-sensing 10/100Mbp s Ethernet RJ-45 ports  One 100 FX fiber port  Switc h fabr ic bandwi dt h up to 8.8 Gbps thro ughput  Full Layer 2 management function  Port mirroring  IGMP support for Multi media applications  Bac[...]

3 Intelligent Management Features Manage ment Telnet management, Web management, In-Band Local Console (RS-232) RFC St an d a rd RFC 1157 SNMP, RFC 1213 MIB II, Bridge MIB, RFC 1643 ETHERNET LI KE, RFC 149 3 BRIDGE MIB, RFC 1757 RMON 1, RFC 1215 Trap Software Upgr ade TFTP and console firmware upgr ade Port Trunk Supports IEEE802.3ad and IEEE802.1a[...]

4 IGMP IGMP Snooping for Multi- Media applications, IGMP group supports 256 groups Port Security MAC address filtering for ingress packets Static MAC address lock for source address. Port Mirror Global system supports 3 mirroring types: RX, TX and Both. The maximum mirror en t ries is 8 . Bandwidth Cont rol Per port bandwidth control support. Per l[...]

5 Package Contents Unpack the conten ts of the package and verify them against the checklist below.  MIL-SME801P Switch  Power Cord  Four Rubber F e et  RS-232 cable  Rack-mounted kit  CD ROM cont aini ng Users Guide If any item is missing or damaged, pleas e contact your local dealer for service.[...]

6 Management Methods The MIL-SME801P switch supports the following management methods:  Console and Telnet Management  Web-based Management Console and Telnet Management Console Management is done through the RS-232 Console Port. Managing the switch in this method requires a direct connection between a PC and the switch. Telnet management req[...]

7 2. Hardware Description Front Panel The Front Panel of the MIL-SME 801P switch cons ists of eight 10/100BASE-TX R J-45 ports and one 100BASE-FX fiber port, one LED-Indicator for Power, one LED-I ndicator for the Fiber port, and 3 LED-Indi c ators f or each of t he RJ -45 ports on t he switch . Figur e 2-1. Fr ont pa nel for MIL-SME801P RJ-45 Port[...]

8 LED Indicators The LED Indicators give re al-time information of syst ematic operation status. The following table provides descript ions of LED status es and their meaning. LED Status Color Desc ription Power On Green Power On On Green The port is operating at 100Mbps. 100M Off The port is operating at 10Mbps mode or no device is attached. On Gr[...]

9[...]

10 Rear Panel The 3-pronged power plug and ventilation fan are locat e d at the rear panel of the MIL-SME801P switch as shown in Fi gure 2-2. The switch will wo rk with AC in the range 100- 240V AC, 50-60Hz. Figur e 2-2. The Rear Pane l of MIL-SME801P Switch[...]

11 Desktop Installation Set the Switch on a sufficiently large flat space with a power outlet nearby. The surface where you put your Switch should be clean, smooth, level, and sturdy. Provide enough clearance around the swit ch to allow attach ment of cables, power cord and air circulation. Attaching Rubber Feet A. Make sure mounting surf ace on th[...]

12 Power On Connect the powe r cord to the po wer so cket on the rear pan el of the switch. Connect the other end of the cord to an appropriat e power outlet. The internal power supply in the swit ch works with AC in the voltage range 100-240VAC, frequency 50~60Hz. Check the power indicator on the front panel to see if power is properly supplied.[...]

13 3. Network Application Small Workgroup The MIL-SME801P switch ca n be used as a standalo ne sw itch to dir ect connect computers, servers and printe r servers to form a small workg r oup. Figur e 3-1. Small W or kgr oup Applic ation[...]

14 Extended Workgroup The MIL-SME801P switch can be al so used o intercon nect two small workgroups. By using the fiber ports to connect th e switches, the distance between the two switches via fiber cable can be up to 2Km or 30Km (SC single-mode fiber connector). Figure 3-2. Fiber port on MIL-SME801 P switch extends the distance b etween workgroup[...]

15 4. Console Management Connecting a Terminal or PC to the Console Port Console management involves the admini strat ion of the sw itch via a direct connection to the RS-232 console port. This port is a ma le DB-9 con nector wired for connecting to a st andard PC serial p ort . Fr om the mai n menu of the console program, the user has access to ma[...]

16 After the connection between Switch and PC is finish ed, turn on the PC and run a terminal emulati on program or Hyper Terminal to match the following default characteristics of the console port: Baud Rate: 9600 bps Data Bits: 8 Parity: none Stop Bit: 1 Flow Control: None Figure 4-2. The settings of communication parameters After you have entere[...]

17 Console – Menu 1. The switch also provides a seri al interface to manage and monitor the switch. Th e user can fol l ow the Console Port Info rmat ion provided by the web to use the Windows HyperTermin al program to link the switch. 2. Type the user name and password to login. The default user name is root ; the default password is root . 3. T[...]

18 4-1. Main Menu There are five items for selection as follows: Status a nd Counters: Shows the status of the switch . Switch Config uration: Menus to configure the switch. Protocol Related Conf iguration: Configures the pr otocol features. System Reset Configuration : Res tarts t he system or resets switch to the default configurat ion. Logout: E[...]

19 4-2. Status and Counters Press the Tab or Backspace key to choose an ac t i on item, and then pr ess Enter key to select th e item.[...]

20 4-2-1. Port Status Type: Displays the port type of 10T, 100TX or 100FX. Link: Displays the po rt's link. “Down” the port has no link, and “Up” the port has a link with the remote device. State: A port that is enabled will be disp layed as “Enable”. A port that is disabled will be displayed as “Disable”. Negotiation: Displ ay[...]

21 increments of 10 kbps, 0 indicates port is at full bandwi dt h out. Priority: Indicates wh ether traffic rece ived o n this port is put into the hig h priority or low priority queue or do not care. Security: Indicates whether or not source M AC address bas ed traffic filtering is enabled on the port. Actions-> Press the Tab or Backspace key t[...]

22 4-2-2. Port Counters The following information provides a view of the current st atus of the uni t . Select Refresh to view updated st atistics or select Clear to rese t all coun ters to 0. Actions-> Press the Tab or Backspace key to ch oose a ction m enu, and then press the Enter key to select i tem. <Refresh>: Updates statistics on al[...]

23 4-2-3. System Information System Name: Displays the na me of device. System Location: Displays where the device is located. System Description: Displays the device description. Firmware Version: Displays the switch ’s firmware ver s ion. Kernel Version: Displays the system kernel software versio n. Hardware Version: Displays th e switch’s ha[...]

24 4-3. Switch Static Configuration Press the Tab or Backspace key to ch oose a ction m enu, and then press the Enter key to select i tem.[...]

25 4-3-1. Administration Configuration[...]

26 4-3-1-1. Device Information Name: 10 characters c an be used t o give the swit ch a unique name in order to distinguish it on the network . After configuration this name will show at the top of each menu screen. Description: 32 characters can be used to des cribe the swit ch. Location: 32 characters can be used to give a location of the switch. [...]

27 4-3-1-2. IP Configuration This menu enables t he user to change the default settings of the IP addr ess, subnet mask and ga teway. Rebooting the switch is necessary t o have the configuration chan ge take affect. DHCP: User can disable or enable the DHCP function. IP Address: User can assi gn a new I P addr ess f or t he s wi t ch. Subnet Mask: [...]

28 4-3-1-3. Username Configuration Use this scree n to chan ge the User Name. The default user name is root . Actions-> <Edit>: Configures all item s. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Quit>: Exits the user name configurat ion page and returns to previous menu.[...]

29 4-3-1-4. Password Configuration Use this screen to ch ange the console and we b management password. The default password is root . Actions-> <Edit>: Configures all item s. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Quit>: Exits the password configuration pag e and retu[...]

30 4-3-2. Port Configuration This page can change every port status. Press the TAB key to select e ach item and press the SPACE key to change the configuration of each item. State: Displays current port st atus. T he port can be set to disable or enable mode. If the port setting is set to disabl e, t he port will not receive or transmit any packets[...]

31 Actions-> <Edit>: Configures all item s. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Quit>: Exits the port configuration page and returns to previous menu.[...]

32 4-3-3. Trunk Configuration This page can configure trunk groups. Press the TAB key to select e ach item and press the SPACE key to change the configuration of each item. Actions-> <Edit>: Configures all item s. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Quit>: Exits the[...]

33 4-3-4. Port Mirroring Configuration Port mirroring is a method for monitoring traffic in switched networks. Traffic throug h p orts can be m onitored by o ne specific port. The traffic being received or transmitted by the monitored ports will be duplicated into the monitoring port. Press the Spa ce key to change the config uration of an it em. M[...]

34 4-3-5. VLAN Configuration This page can set VLAN m ode to port-based VLAN, 802.1Q VL AN or disa bl e VLAN function. All ports ar e aut om at ically pl aced i n V L AN 1, the default VLAN. To create new VLANs, use the Create a VLAN Group menu and add a VLAN. Make sure when you enter a VL AN name you do not leave spaces. For example VLAN2 is corre[...]

35 4-3-5-1. VLAN Configure Choose a VLAN In the VLAN Configure menu select the type of VLAN you wa nt to configure: VLAN Disabled (default), Port Base d VLAN, or IRRR802.1Q Tag based VLAN. Save the confi guratio n. There are 3 different options for VLANs to choose f r om usi ng t he space bar : Disabled, Port Based and 802.1Q. To configure a new VL[...]

36 IEEE802.1Q VLAN s If IEEE802.1Q VLANs is se lected, all the ports will bel ong to the default VLAN If more than one VLAN is necessary, the additi onal VLANs may be created. Security VLANs Security VLAN ’s allow for limitin g teln et, SNMP and web acce ss to the switch to a specific VLAN. The VID of th e Security VL AN m a y be c hanged from 25[...]

37 Actions-> <Edit>: Configures all item s. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Previous Page>: Displays previous page. <Next page>: Displays n e xt page. <Quit>: Exits this page and returns to previous menu.[...]

38 PVID (Port VID): Set the port VL AN ID that will b e assig ned to untagged traffic on a gi v e n port . T hi s feature is useful for ac c omm odat ing devices that you want to participate in the VLAN , but don’t support tagging. Only one untagged VLAN is allowe d per port. Other VLANs need to be tagged. Ingress Filter 1: If this is se t, the p[...]

39 4-3-5-2. Create VLAN Group Create Port-Based VLAN Select <Edit> to create a port-based VLAN and add member or nonmember ports to it. 1. VLAN Name: Type a name f or the new VLAN using 15 alphanumeric characters and no spaces. 2. Group ID: Type the VLAN group ID. Th e group ID range is 1to 4094. 3. Member: Press the Space key to choose VLAN [...]

40 Create 802.1Q VLAN Select <Edit> to create an 802.1Q VL AN and add tagged or untagged member ports to it. 1. VLAN Name: Type a name f or the new VLAN using 15 alphanumeric characters and no spaces. 2. VLAN ID: Type a VID (between 1~ 4096). The default is 1. There are 256 VLAN groups provided to configure. 3. Protocol VLAN: Press th e Space[...]

41 6. Select <Sav e> to save all c onfigured values. NOTE: If the trunk groups exist, it will be displayed (ex: Trunk1, Trun k2…) after port 9. The user can configure select if it is the memb er of the VLAN or not. Actions-> <Edit>: Configures all item s. When finished, pressing ESC returns to the action menu line. <Save>: Sa[...]

42 4-3-5-3. Edit / Delete VLAN Group Use this menu t o edit or delet e a VLAN group. When editing the chosen VL AN, the user can change the protocol VLAN or a member port. A new pr otocol can be configured and the ports can be changed to tagged or untagged or delet e d as member port s from this VLAN . In edit mode the VLAN Na me and VLAN ID are r [...]

43 NOTE: The VLAN N ame and VLAN ID are re ad-only and cannot be modified. In 802.1Q VLAN mode, the def ault VLAN canno t be del eted. In Port Based VLAN mode, there is no default VLAN. Actions-> <Edit>: Configures all item s. When finished, pressing ESC returns to the action menu line. <Delete>: Deletes selected VLAN Groups. <Pre[...]

44 4-3-5-4. Groups Sorted Mode Use th is m enu to se lect th e VLAN groups sorted mode. There are two selections: Name: Sorted by name VLAN ID: Sorted by VID The results can be viewed on the Ed it/Delete a VLAN Group screen. Actions-> <Edit>: Configur es all it em s. Wh en finished, pressing ESC returns to the action menu line. <Save>[...]

45 4-3-6. Priority Configuration Level (0-7): There are eight (0 to 7) priority levels t hat can be mapped as high or low priority queues. QoS Mode: User can select the ratio of high priority packets and low pr iority packets by pressing the Space key. High Low Queue service ratio: 1: 1, 2:1, 3:1, 4:1, 5:1, 6:1, 7:1, FIF O, H Î L First In First Ou[...]

46 Actions-> <Edit>: Configures all items. When f inished, pressing ESC re turns to the action menu line. <Save>: Saves all configured values. <Quit>: Exits this page and returns to previous menu.[...]

47 4-3-7. MAC Address Configuration[...]

48 4-3-7-1. Static MAC Address When a static MAC address is added, it remains in the switch's address table, regardless of whether the device is ph ysically connect ed to the sw itch. This saves the switch from ha ving to re-l earn a device's MAC address when the device is disconnect ed or powered-of f and then becomes active again. The m[...]

49 4. If tag-based (802.1Q) VLANs are configured, the static addresses are associated with individual VLANs. Enter the VID to associate w ith the MAC address. 5. Press ESC to go back action menu line, and then select <Save> to save all configured values. Edit static M AC address 1. Press <Edit> key to modify a static MAC address. 2. Cho[...]

50 4-3-7-2. Filtering MAC Addr ess Add Filtering M AC address 1. Pres s the <Add> key. Then press the <Edit> key on this menu to add a filtering MAC address. 2. Pres s ESC to go back action menu line, and then select <Save> to save[...]

51 all configured values. Edit Filtering MAC address 1. Press the <Edi t> key to mo dify a Filt ering MAC address. 2. Choose the MAC address that you wa nt to modif y and then press enter. 3. Press the <Edit> key to modify all the items. 4. Press ESC to go back action menu line, and then select <Save> to save all configured values[...]

52 4-3-8. Miscellane ous Configuration Actions-> <Edit>: Configur es all it em s. Wh en finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Quit>: Exits this page and returns to previous menu. 4-3-8-1. MAC Address Ageing Time To configure a different MAC Address Agei ng Ti me, type the [...]

53 4-3-8-2. Broadcast Storm Filtering Broadcast storm filtering is used to limit the amount of broadcast traffic on the network. An excessive amount of broad cast traffic can in hibit data packets from timely delivery. The valid threshold values are 5%, 10%, 15%, 20%, 25% and NO. If the broadcast traffic is greater than t he configured valu e, broa[...]

54 4-3-8-3. Max Bridge Transmit Delay Bound Max bridge transmit delay bound (0,1-4 se c): Limit s the packets queuing time in the swi t ch. If enabled, the pack ets e xce edi ng the qu eui ng tim e will be dropped. Press the Space key to se t the ti me. Vali d values are 1sec, 2sec, 4sec and Off. The def ault is 1 second when this feature is enabl [...]

55 4-3-8-4. Collision Ret ry Forever Collisions Retry Forever: User can choose t o disabl e collision retry forever and, if a collision occurs in half-duplex mode, t he switch will attempt to send the packet 48 times and then drop the f rame. When enabled, a collision that occurs in half-duplex mode will result in r epeated attempts by the switch f[...]

56 4-4. Protocol Related Configuration 4-4-1. STP[...]

57 4-4-1-1. STP Setup This page enables or disables the Spanning Tree function. Press t he Space key to select Enab led or Di sabled. Actions-> <Edit>: Configur es all it em s. Wh en finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Quit>: Exits this page and returns to previous menu.[...]

58 4-4-1-2. System Configuration All devices in the spanning tree instance will utilize the sa me values as the root bridge to ensure consistency thro ughout the network. If this device becomes the root bridge, then the other switches i n the STP insta nce will utilize its values. Spanning tree information for the R oot Br idge on the left is for d[...]

59 Max Age: The number of se conds a bridge wait s wi t h out r ece i v i ng Spanning-Tree Protocol configurat ion messages bef o re attempting a reconfiguration. Enter a number 6 through 40. Hello Ti me: The number of seconds bet ween the transmission of Spanning-Tree Protocol configuratio n messages. Enter a number 1 through 10. Forward Delay Tim[...]

60 4-4-1-3. STP Per Port Setting State: Spanning tree status for each port is either forwarding or blocking. PathCost: Specifies the path cost of the port that the switch uses to determine which ports are the forwarding ports. If yo u change the value, you need to restar t the swi t ch for va lid value change to take e f fect . Priority: Specifies [...]

61 Actions-> <Edit>: Configur es all it em s. Wh en finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. <Quit>: Exits this page and returns to previous menu.[...]

62 4-4-2. SNMP Any Network Management st ation running t he S imple Network Management Protocol (SNMP) can m anage the switch provided that the Management Information Ba se (MIB) is installed . SNMP is a protocol that governs the transfer of information bet ween management and agent . The switch supports SNMP V1. Use this menu t o def i ne m ana ge[...]

63 4-4-2-1. SNMP System Options Press <Edit> to enter all items, ESC to return to the ac tion menu, and then press <Save> to save the configured values. System Name: Enter a name to identify the switch. System Con tact: Enter the name of the cont act person or organization. System Location: Enter the location of the switch. Actions->[...]

64 4-4-2-2. Community Strings Community strings serve as passwords and can be entered as one of the following : Read only : Enables requests accompanied by this string to d isplay MIB-object information. Read Write : Enables requests ac companie d by this string to display MIB-object information an d to set MIB obje cts. Community Na me: Enter the [...]

65 Add Community Strings 1. Press the <Add> key. Then press the <Edit> ke y on this m enu to add a SNMP Trap Manager. 2. Ent er t he Communit y Name and s el e ct the Write Access setting for th e Community String. 3. Press ESC to go back action menu line, and then select <Save> to sa ve all configured values.[...]

66 Edit Community Strings 1. Press <Edit> key to modify a Community String. 2. Choose the Community Name that you want to modif y and then press enter. 3. Enter the correct Community Na me and Write Access settin g. 4. Press ESC to go back action menu line, and then select <Save> to sav e all configured values. Delete Community Strings [...]

67 Actions-> <Add>: Creates a t rap manager. <Edit>: Configures all item s. When finished, pressing ESC returns to the action menu line. <Delete>: Deletes a community string. After deleting, p ress <Save> to complete the deletion. <Save>: Saves all configured values. <Quit>: Exits this page and returns to prev[...]

68 4-4-2-3. Trap Managers A trap manager is a managem ent station that receives t raps. The switch generates system alerts. If no t rap m anager is defined, no traps are issued. Create a trap manager by entering the IP addres s of the station and a community string.[...]

69 Add SNMP Tr ap Managers 1. P ress the <Add > key. Then press the <Edit> key on this m enu to add a SNMP Trap Manager. 2. Ent er the IP address and Community Name for the SNMP Trap Manager. 3. P ress ESC to go back action menu line, and t hen select <Save> to sa ve al l configured values.[...]

70 Edit SNMP Trap Managers 1. P ress <Ed it> key to modif y a SN MP Trap Mana ger. 2. Choose t he IP address and Community Name t hat you w ant to modify and then press enter. 3. E nt er the corr e c t IP Address and Communit y Name. 4. P ress ESC to go back action menu line, and t hen select <Save> to sa ve al l configured values.[...]

71 Delete SNMP Trap Managers 1. Pr ess th e <Delete> key to delete a SNMP Trap Manage r. 2. Choose t he IP Address and Community Name that you want to delete an d then press enter. 3. Af t e r delet i n g t he SNMP T r ap Manager, you must press <Save> to complete the del e ti on. Actions-> <Add>: Creates a t rap manager. <E[...]

72 4-4-3. LACP The Link Aggregation Co ntrol Protocol (LACP) provides a standardized means f or excha ngi ng inform ation be tween Partner Systems on a link to allow their Link Aggregat ion Control instances to reach agreement on the identity of the Link Aggregation G roup to which t he link belongs, move the link to that Link Aggregation Group, a [...]

73 4-4-3-1. Working Ports Setting Group: Displays th e trunk group ID. LACP: Press the Space key to enable or di s able LACP (Link Aggregation Control Protocol) support. If e nabled, the group is an LACP static trunking group. If disabled, the group is a local static trunking group. LACP Work Port Num: The max imum number of ports that can be aggre[...]

74 <Quit>: Exits this page and retu rns to previous menu. 4-4-3-2. LACP State Activity Active: The por t au toma t ic a ll y s ends LACP protocol packets. Passive: The port does not auto matically send LACP protocol packets, and responds only if it receives LACP prot ocol packe ts from the opp osite device. Actions-> <Edit>: Configur[...]

75 4-4-3-3. Group Status When setting a trunking group, t he relationship st atus information may be seen on the LACP Gr oup Status screen. Actions-> <Quit>: Exits this pa ge and returns to previous menu.[...]

76 4-4-4. IGMP/GVRP Configuration Use the GVRP Configurat ion screen to enab l e or di sable GV RP ( GA RP VLAN Registration Protocol) support. Press the Space key to choose En abled or Disabled. Actions-> <Edit>: Configures all item s. When finished, pressing ESC returns to the action menu line. <Save>: Saves all configured values. [...]

77 4-4-5. 802.1x Configuration[...]

78 4-4-5-1. 802.1x Setup Use this screen to enable or disable 802.1x. Press the Space key to choose Enabled or Disabled mode. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to th e action menu line. <Save>: Saves all configured values. <Quit>: Exits this page and returns to previous menu.[...]

79 4-4-5-2. 802.1x System Configuration Use the 802. 1 x Syst em Conf i g urat i o n screen to configu r e the IEEE 802.1x parameters. Radius Server IP : Enter the Radius Server IP address. Shared Key: Enter an encryption key for us e during authenti c ation sessions with the spec ified ra dius server. This key must ma tch the encryption key used o[...]

80 4-4-5-3. 802.1x Per Port Configuration Press the Space key to select Disable , Accept , Reject or Authorize for the State of each port. Actions-> <Edit>: Configures all items. When finished, pressing ESC returns to th e action menu line. <Save>: Saves all configured values. <Quit>: Exits this page and returns to previous men[...]

81 4-4-5-4. 802.1x Miscellaneous Configu r ation Quiet period: Enter the period during which the port doesn’t t ry to acquire a supplicant. TX period: Enter the period the port wait s to retransmit nex t EAPOL PD U during an authent i cation session. Suppl ica nt t ime ou t: Enter the period of time the switch waits for a supp licant response to [...]

82 4-5. System Reset Configuration[...]

83 4-5-1. Factory Default Use this menu to restor e all fa ctory default settings. Pressing y will reset the switch configuration settings to t heir factory defaults. Rebooting t he switch is necessary for the new confi gurations to take effect. y: Resets the switch to th e f actory default configuration . The software version that the switch will [...]

84 4-5-3. TFTP Configuration Use this screen to u pdat e firmwa re, restore EEPROM values or upload current EEPROM value.[...]

85 4-5-3-1. Update Firmware Use this scree n to update fi rm ware from the TFTP server. Start the TFTP server, and copy the fi rmware update versio n image file to TFTP server. TFTP Server IP: Enter the IP address of the TFTP server. Firmware File Na me: Enter t he image file name. Actions-> <Edit>: Configures all items. When finished, pre[...]

86 4-5-3-2. TFTP Restore Configuration Use this scree n to restore an EEPRO M va lue or save a previo us version o f the image file from the TF TP se rver. Start the TFTP server, and copy the fi rmware update versio n image file to TFTP server. TFTP Server IP: Enter the IP address of the TFTP server. Restore File Name: Enter the image file name. Ac[...]

87 4-5-3-3. TFTP Backup Configuration Use this scree n to save th e current EEPROM value to an image file. Then go to the update configur ation page to restore the EEPROM value. Start the TFTP server, and copy the fi rmware update versio n image file to TFTP server. TFTP Server IP: Enter the IP address of the TFTP server. Restore File Name: Enter t[...]

88 4-6. Xmodem Upgrade 1. While booting the switch, press the X key to start the Xmodem routine on the device. 2. Pressing X will cause the switch Xmodem app lication to begin and cause the baud rate to change to 5 7 600 bps. You will need to disconnect th e cable connected to the serial port , and change the baud rate of your hyper-terminal applic[...]

89 3. Select “send file " under the "transfer" menu from menu bar. 4. Press the "browse" butt on to select the path. 5. Select "1K Xmodem" of protoc ol and press the "Send" button. 6. After successfully upgr ading to the new f irmwa re, change the baud rate back to the default 9600bps.[...]

90 5. Web-Based Management This section introduces the configuration and func tions of t he web-based managem ent of MIL-SM E 801P switch series. T he manage d swi tch ser ies provides an embedded HTML website residing in flash memory. It offers advanced management features and allow users to manage the device from anywhere on the network through a[...]

91 Preparing for Web Management You must either reconfigur e the IP address inf ormat ion for the sw itch using the serial console port following the in structions in the “Console Management” section, or setup yo ur network to support the de fault address of the switch. The default values are as follow: IP Address: 192.168.1.77 Subnet Mask: 255[...]

92 5-1. System Login 1. Launch I nternet E x plorer or Netscape. 2. Type http:// and the IP ad dress of the switch in the L o cation or A ddress field . The defau lt IP Addre s s is 192.168.1.77. 3. Pr ess Enter . Figure 5-1: The Passw or d Window 4. In the logi n screen, type the user name and pa ssword. The default is root for bo th. 5. Pr ess En[...]

93 5-2. Port Statu s State: Displays p ort status off or on depe nding on user se tting. “Unlink” means t he port is off line or “ of f ”. Link Status: Down is “No Link”, UP is “Link”. Auto Negotiation: Displays the auto negotiation mode. There are three selections: Auto, Force and Nway-force. Speed status: Displays link sp eeds of [...]

94 5-3. Port Statistics The following information provides a view of the current st atus of the uni t . Pressing the Reset button will return all counts to zero. Left click mouse on the desired port on the graphical image of the switch to get sp ec if ic inf orm at ion for that port.[...]

95 5-4. Admini strator The management functions in clude IP address, switch se ttings, console port information, port controls, trunking, fi lter database, VLAN configuration, spanning tree, port mirro ring, SNMP, security manager, T FTP update firmware, configurat ion backu p, system reset, and reboot.[...]

96 5-4-1. IP Address The IP Settings can be c hanged by ent eri ng ne w values and clicking the Apply button. The switch must be res et for the new IP a ddress to take eff ect. Default IP: 192.168.1.77 Subnet Mask: 255.255.255.0 Gateway: 192.168.1.6[...]

97 5-4-2. Switch Setting 5-4-2-1. Basic System Name: Displays th e name of the device. System Location: Displays the locat ion of th e dev ice. System Desc ripti on: Displays the n ame of the de vice type . Firmware Version: Displays the switch’ s down loaded firmwa re version. Kernel version: Displays write to defaul t EEPROM value version. Hard[...]

98 5-4-2-2. Advanced Setting MAC Address Entry Age-out Time: Enter the number of seconds that an inactive MAC address rema ins in the switch's addr ess table. The valid range is 300 to 765 seconds. Default is 300 seconds. Max bridge transmit delay bound control: Limi t s the packe ts queuing time in the sw itch. If enabled, th e packe ts th at[...]

99 Priority Queue Service settings: First Come First Ser vice: The s equence of packets s ent is dependent on the order of arrival. The fi rst packets in the queue ar e transmitted before any other packets. All High before Lo w: The high prior i ty packets are sent before the low priority packets. Weighted Round Robin: This option enables the us er[...]

100 Qos Pol i cy: High P ri o ri t y L evels: 0 to 7 priorit y level can map to a high or low queue. When the VLAN Tag number of a frame is mapping as a high priority level, this frame always has high priority. In this example, the QoS policy applie s to the switch, not for a single port.[...]

101 5-4-2-3. Miscellaneous Setting Collisions Retry Forever: Disabled – In half duplex, if a collision occurs, the switch will retry 48 times and then drop frame. Enabled – In half duplex, if a collision occurs, the switch will retry foreve r. 802.1x Protocol: Select enable or disabl e for 802.1 x protocol. Hash Algorithm: CRC Hash or Direct Ma[...]

102 IGMP Theory of Operation The following three topologies detai l how IGMP Query works and to be configured within a network: 1. Auto mode needs to be enabled when the router’s IP address is smaller than other switches in t h e s u bn et.[...]

103 2. IGMP needs to be enabled when the router’s IP address is not smaller than other switches in the sub net. This Router supports IGMP protocol, but IGMP has to be enabl ed, and the Router has to be the Querier.[...]

104 3. The following topology must be set when the IP address of the s witch is not the smallest in the subnet. T he network will cause a mu lti-ca st st orm from the IGMP client report if it is in Auto mo de. All switches must be in disable mode when the VOD server is configured for IGMP Querier. Note: It is suggested that the VOD serve r switch h[...]

105 5-4-3. Console Port Informatio n Console is a standa rd UAR T inte rface to commu ni cate with a serial port. The Windows HyperTerminal program can be used to li nk the switch with the console port. In order to change any of these parameters, you must be connected to the console port. Baud rate (bits/sec): 9600 Data Bits: 8 Parity Check: none S[...]

106 5-4-4. Port Controls The menu allows changing of port configurat ions. State: User can disable or enable each port. Negotiation: User can set auto negotiation mode for each port to Auto, Nway (specify the speed/dupl ex on this port and en able aut o- negot iation) or Force. Speed: User can set 100Mbps or 10Mbps s peed on Ports 1 to 8. Port 9 is[...]

107 1 to 1000: valid rate value. Priority: This st at i c prior i t y is bas ed on eac h port sett ing. If the port priori ty is set high, incoming frames from this port will always be high priority frames. Security: A port in securit y mode will be “l ocked” unless addre ss learning is enabled. Only the incomi ng packets wi th SMAC already ex [...]

108 5-4-5. Trunking The Link Aggregation Co ntrol Protocol (LACP) provides a standardized means f or exchan gi ng inform at i o n bet w een Part ner Syst ems on a link to allow their Link Aggregati on Control instances. To reach agr e em ent on the identi ty of the Link Aggr egation Gr oup to which the link belongs, move the link to that Link Aggre[...]

109 5-4-5-1. Aggregator Setting System Prior i ty: A value used to id entify the active LACP . The switch with the lowest value has the hi ghest pri o r it y and is s elected as the ac t ive LACP. To create a trunk across two or more ports: 1. Group ID: Choose the "G roup ID " and click "Get". 2. LACP: If enabled, the group supp[...]

110 configure LACP Acti ve/Passive status for each port. 5. Click the Apply button to save the new configuration. 6. To re m ove ports f rom a trunk gr o up, highlight the port s in the table you want to remove and then click the Remove butto n. To delete a trunk group, highlight the select ion in the table you want to delete and then click the Del[...]

111 5-4-5-2. Aggregator Inf orm atio n The LACP Aggregator relation inform ation is displayed as shown.[...]

112 5-4-5-3. State Activity Active ( select ed) : The active p ort automatica lly sends LACP protocol packets. Passive (not selected) : The passive port does not automatically send LACP protocol packets, but respon ds only if it receives LA CP protocol packets from the other device. A link having either two ac tive LACP port s or one act iv e port [...]

113 status will be created automatically.[...]

114 5-4-6. Forwarding and Filterin g 5-4-6-1. IGMP Snooping The switch supports IP multicasting. You can enable IGMP via the web management’s configuratio n screen. I n addition, you can view different multicast groups, VIDs and member port s, and IP multicas t addresses that range from 224.0.0.0 th rough 239.255.255.255. The Internet Group Manag[...]

115 IGMP has three fundamen tal types of messages: Message Description Query A message sent from the querier (IGMP router or switch) asking for a response from each host belonging to the multicast group. Report A message sent by a host to the querier to indicate that the host wants to be or is a member of a given group indicated in the report messa[...]

116 5-4-6-2. Static MAC Address When a static MAC address is added, it remains in the switch's address table, regardless of whether or no t the device is physically connected to the switch. This saves the switch from having to re-learn a de vi ce's MAC address when the device is disconne cted or power ed- of f. To add a static MAC address[...]

117 addresses are associated wi th indiv id ual VLA N s . Type the V I D ( t ag-based VLANs) to associate wi th the MAC address. 6. Click the Add button. 7. To delete a stat ic MAC address, hi ghlight the selectio n in the table you want to delete and then click the Delete button.[...]

118 5-4-6-3. MAC Fil tering MAC address filtering allows the switch to drop unwanted traffic. T raffic is filtered based on the destination addresses. Steps to specify a M AC address to filter : 1. In the MAC Address box, ent er the MAC address to filter. 1. If tag-based (802.1Q) VLAN are set up on the switch, in the VLAN ID box, type the VID to as[...]

119 5-4-7. VLAN Configuration A Virtual LAN (VLAN) is a logical netw ork grouping that limits the broadcast domain. It allows you to is olate network traffic so only members of the VLAN receive traffic from th e same VLAN members. Basically, creati ng a VLAN from a switch is logically equivalent of reconnecting a group of network devices to anot he[...]

120 Support Port-based VLANs Ethernet frames received on a port are sent only to ports belonging to the same VLAN group of port s. All ports default bel ongi ng t o the same VLAN group. The VLAN information includ ed in Ethernet frames tagged wit h VLAN I D s is ignor ed by t he swit ch in Port Based VLAN mod e. Support Tag-based VLAN (IE EE 80 2.1[...]

121 5-4-7-1. Port-based VLAN In order for an end stat ion to send pa ckets to differen t VLAN s, it has to be either capable of tagging the packets it sends with VLAN t ags OR be att ached to a VLAN-aware bridge. The VLAN-a ware bridge must be capable of classifying and tagging the pa cket with d ifferent VL AN ID. The classification and tagging of[...]

122 Create a VLAN and add tagged me mber ports to it. 1. Click the Add button to cr eat e a new V LA N grou p. 2. Ent er the VLAN name, group ID and select the me mbers for t he new VLAN. 3. Click the Appl y bu tton . 4. If the number of grou ps exceeds the limit for a single pag e, clic k t he NextPag e button to view ot her VLAN groups. 5. To del[...]

123 5-4-7-2. 802.1Q VLAN On this page, the user can create Ta g-based VLANs, and enable or di sable GVRP protocol. There are 256 VLAN groups provid ed t o conf igur e. If 802.1Q VLAN is enabled, then all ports on the switch belong to the def ault VLAN1. The default VLAN1 can’t be deleted. GVRP (GARP VLAN Regi strat ion Protocol) GVRP allows autom[...]

124 Security VLANs Security VLAN ’s allow for limitin g teln et, SNMP and web acce ss to the switch to a specific VLAN. The VID of th e Security VL AN m a y be c hanged from 255 to another value after creating the VLAN . The new VID must not already exist on the box. Note: Before enabling the security VL AN feature, you must set the management po[...]

125 Basic T o create a VLAN and add t agged memb er port s to it: 1. Select the Add button to creat e a new VLAN. 2. Enter a nam e for t he new V L AN. 3. En ter a VLAN ID (2 to 4094). The default is 1. 4. Choose the protocol type. Default i s NONE. 5. From the Available ports box, select ports to a dd to the switch and click Add. If the trunk grou[...]

126 Tag: Outgoing fram es wit h VLAN-Tagged. Untag: Outgoing fram es without VLAN-Tagged.[...]

127 VLAN Port ID To configure port VID settings: From the main 802.1Q VLAN page , click Port VLAN ID Se ttings. VLAN ID Set the port VLAN ID that will be assigned to untagged traffic on a given port. This feature is useful for accommodat ing devices that you wa nt to particip ate in the VLAN but that do n’t support tagging. On ly one untagged VLA[...]

128 the port belongs to that VLAN. Enable : Forward only packets wi th VID ma tching this por t's configured VID. Disable : Disable Ingress filter function. Acceptable Frame Type ALL: All packets are acceptabl e. Ta g O n l y : Only packet s t hat match the VLAN ID will hav e perm ission t o go through the port.[...]

129 5-4-8. Spanning Tree The Spanning-Tree Protocol (STP) is a standardiz e d method (IEEE 802.1d) for avoiding loops in switched networks. When ST P is enabled it ensures that only one path at a time is active between any tw o nodes on the network. Spanning-Tree Protocol can be enab led using web manag ement’s sw itch setting advanced item, a nd[...]

130 5-4-8-1. System Configuration To enable STP mode select the box next to STP State and click so that a check mar k √ appears. This indicates that ST P is enabled on the device. After enabling STP, configure the syst em level functions for the device. The second table displays the current ac tive Root Bridge. The switch will take on the attribu[...]

131 The priority and path co st can be configured for each port. Click the Apply button to modify the configuration. Paramete r Descript ion Port Priority A change to the Port Priority affects which port will be the root por t . T h e lowes t number has the highest priority. The range is 0-255 and the default setting for all ports is 128. If you ch[...]

132 5-4-9. Port Mirr oring The Port Mirroring feature is disabled by default. Selecting enable from the pull down menu will cause the selecte d traffic fr om th e selected monitor ports to be mirrored to the select ed analysis port. Press the Apply button to submit the changes. Port Mirroring State: Enables or Disables the port mirroring func tion.[...]

133 5-4-10. SNMP Management A SNMP is a protocol th at governs t he transfer of inform at i o n bet ween management and agent. The switch suppo rts SNMP V1. Any Network Management station r unning the Simple Netw ork Management Protocol (SNMP) can manage the switch provided that the Management Information Base (MIB) is installed. Use this menu t o [...]

134 1. System Optio ns – The length of eac h can be 26 charact ers. Name : Ente r a nam e to be us ed for the switch. Location : Enter the location of the switch. Contact : Enter the name of a person or organization. 2. Community strings serve as password s and can be entered as one of the following: RO (Read only): Enables requests a ccompanied [...]

135 3. Trap Manager A trap manager is a managemen t station that receives traps. T raps are t he system alerts generated by the switch. If no trap manager is defined, no traps are issued. Create a trap manager by entering the IP address of the station and a community string.[...]

136 5-4-11. Security Manager The user can change the user name and password to keep the switch secure. After ent e ri ng a new us er nam e and pas sword, c lick the Ap ply button to submit the changes. T he default user name a nd password are below. User Name: root Password: root[...]

137 5-4-12. 802.1x You must enable the 802.1x protocol on the miscellaneou s section of the Switch Settings menu for chan ges in this section to ta ke effect. This section deals with the system leve l and per port configurati ons to suppor t the IEEE 802.1x authentication and authorization protocol. 5-4-12-1. System Configuration Radius Server IP :[...]

138 5-4-12-2. Per Port Configuration Each port can be c onf i gure d to one of the following four states: Reject: The specified port is re quired to be held in the Unauthorized state. Accept: The specified port is re quired to be held in the Authorized state. Authorized: The specified port is set to t he Authorized or Unauthorized state in accordan[...]

139 5-4-12-3. 802.1x Miscell aneous Configuration Quiet period: Set the perio d duri ng which t he port doesn’ t try to acquire a supplicant. TX period: Set the period the port waits to retransmit next E APOL PDU during an authent i cation session. Suppl icant t imeou t: Set the period of time the sw itch waits for a supplicant response to an EAP[...]

140 5-4-13. TFTP Update Firm ware The following menu options provide som e system con t rol functions to allow a user to update firmware and remotely reboot the switch system. Before updating, make sure you have your TFT P serv er ready and the firmware image copied to the TFTP server. TFTP Server IP Address: Enter the TFTP server IP address. Firmw[...]

141 5-4-14-2. TFTP Backup Configuration The current configur ation image can be uploaded from the switch to a TFTP server using this page. Use the TFTP Restore Conf i gurati o n page to download a configuration image t o the switch. TFTP Server IP Address: Enter the TFTP serve r IP address. Backup Fil e Name: Enter the file n ame to back up.[...]

142 5-4-15. Factory Def ault Resets the Switch to de fault configuration. Default IP addre ss: 192.168.16.1 Default Gateway: 192.168.16.254 Subnet mask: 255.255.255.0 All ot her set tings defaul t to eith er Di sable d or no v al ue. 5-4-16. Reboot Select Reboot to re start the system wi th the current save d configuration.[...]

143 6. Troubleshooting This section is intended to help you solve some co mmon problems encountered while using the MIL-SME801P sw itch series. Incorrect connections The RJ-45 port will a uto- detect t he signal configurat ion of the cable. For 10/100 Mbps, only two pairs of wires are required for co mmunications. For 1000Base-TX, all four pairs of[...]

144  Improper Network Topologies It i s imp ort ant to make su re th at yo u have a valid network t opology. Common topology faults include ex cessive cable length and too many repeaters or hubs between end nodes. In additi on, you should make sure that your network topology contains no data path loops. Between any two ends nodes, there should b[...]

145 100BASE-FX Fiber port: Multi-mode fiber connect or types must use 50/125 or 62.5/125 µ m multi-mode fiber ca ble. Two devices may be connected over a 2-kilometer distance. Single- mode fiber connector types must use 9/125 µ m single mode f iber cable. T wo devi ces may be connec ted over a15 t o 60-kilometer distance in full dup lex operation[...]

146 7. Technical Specifications This se ction pr ovid es t he sp ecif ic ations of the MI L-SME801P sw itch product. Standard IEEE802.3 10BASE-T IEEE802.3u 100BASE-TX/100BASE- FX IEEE802.3x Flow Contro l and Back pressure IEEE802.3ad Port Tr unk with LACP IEEE802.1d Spanning tree protocol IEEE802.1p Class of service IEEE802.1Q VLAN Tagging LED Indi[...]

147 1000BASE-SX MMF SC 220 m 1000BASE-LX SMF SC 10km Gigabit SX Transce iver: SC. Support Multi-mode fiber up to 500Meters Gigabit LX Transceiver: SC. Supports Single Mode fiber up to 10KM Swi tch architecture Store and Forward, 8.8Gbps Back-plane MAC address 6K Mac with Auto Learning Memory 3Mbits for packet buffer Dimensions 250mm x 133 mm x 37mm[...]

[...]

90000415 Rev A[...]