Xerox NS-2260 manual

10/100 Managed Fast Ethernet Switch with 100FX and Gigabit Connectivity NS - 2260 Optional 100FX Modules Optional Gigabit Modules Operation Manual[...]

The infor mation contained in this document is subject to change without prior notice. Copyright (C) . All Rights Reserved. TRADEMARKS Ethernet is a registered trademark of Xerox Corp. WARNING: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are desi[...]

Table of Contents 1. Introduction ................................................................ .. 8 1.1 Introduction ................................................................ ............................... 8 1.2 Features ................................................................................................ .... 9 1.3 Hardware [...]

3.3.7.2 802.1p Priority ................................................................ .................. 67 3.3.8 MAC Address Configuration ................................ ............................. 68 3.3.8.1 Static MAC Address ................................................................ ........ 68 3.3.8.2 Filtering MAC Address .......[...]

5.5.9 Port Sniffer ................................................................ ......................... 135 5. 5.10 SNMP ................................................................ ............................... 136 5.5.11 Security Manager ................................................................ ........... 139 5.5.12 802.1X Con[...]

1. Introduction 1.1 Introduction Driven by recent advances in desktop computing technology, today_s network applications have increased in speed, power and the ability to process information. To meet the demands of these more bandwidth - intensive applications, this swit ch device provides significant increase in performance for your Ethernet and F[...]

1.2 Features _ 19 - inch rack mountable 24 - Port 10/100 managed Fast Ethernet switch with two Giga expansion port slots _ Provides two alternative 10 0Base - FX port slots for fiber connections _ Non - blocking and store - and - forward switch engine performs forwarding and filtering at full wire speed. _ Supports diversified optional Giga port mo[...]

1.3 Hardware Specifications 10/100 Switched Ports Port 1 ~ 24, Total : 24 ports 802.3 10Base - T, 802.3u 100Base - TX compliant Shielded RJ - 45 with auto MDI - X function Port 23, 24 Alternatives 100Base - FX co nnectivity 2 expansion module slots - Slot F23, F24 Giga Switched Ports 2 expansion Slots - Slot G1, G2 802.3z and 802.3ab compliant Supp[...]

Speed status Duplex / Collision status Giga Port LED Display Link / Activity status Duplex / Collision status Console Port RS - 232, DTE, DB9 Baud : 9600, N, 8, 1, 0, No flow control Dimension 443mm (W) x 245mm (D) x 43mm (H) Power Input Rati ng 100 ~ 240VAC, 50/60Hz, 50W Input voltage range 90 ~ 264VAC Input frequency 47 ~ 440Hz Power Consumption [...]

1.4 Software Specifications Management interface In - band SNMP over TCP/IP network In - band Web browser over TCP/IP network In - band Telnet over TCP/IP network Out - of - band via Console port SNMP Traps over TCP/IP network RFC & Protocols IPv4 IP version4 RFC791 TCP Transmission Control Protocol RFC793 UDP User Datagram Protocol RFC768 ARP [...]

1.4.1 Management Objects List of management objects supported by console and Telnet interfaces : Management Objects Console Telnet Web SNMP Boot diagnostics Yes - - - Login check Yes Yes Yes - Port configuration Yes Yes Yes - Trunk configuration (& LACP) Yes Yes Yes - VLAN configuration Yes Yes Yes - QoS Priority configuration Yes Yes Yes - MAC[...]

Management Objects Console Telnet Web SNMP Port state - enable/disable Yes Yes Yes Ye s Port status - link, speed Yes Yes Yes Yes Port static counters Yes Yes Yes Yes Device Mac address information Yes Yes Yes Yes System firmware version information Yes Yes Yes - System hardware ver sion information Yes Yes Yes - System default configuration versio[...]

1. 5 Function Descriptions 1.5.1 LACP Trunking Function The switch provides a trunking function, which is compliant with 802.3ad standard. 802.3ad is a specification from IEEE that allows us t o bundle several physical port links together to form one logical port , called a trunk between two devices. It supports Link Aggregation Control Protocol (L[...]

1.5.2 IP Multicast Function Internet Protocol (IP) multicast is a bandwidth - conserving technology that reduces traffic by simultaneously delivering a single stream of information to thousands of corporate recipients and homes. Applications that take advantage of multicast include vid eo conference, corporate communications, distance learning, and[...]

IGMP Internet Group Management Protocol (IGMP) is used to dynamically register individual hosts in a multicast group on a particular LAN. Hosts identify group memberships by sending IGMP messages to their local mu lticast router. Under IGMP, routers listen to IGMP messages and periodically send out queries to discover which groups are active or ina[...]

IGMP Snooping IGMP snooping requires the LAN switch to examine, or snoop, some Layer 3 information in the IGMP packets sent between the hosts and the router. When the switch hears the IGMP host report from a host for a particular multicast group, the switch adds the host's port number to the associated multic ast table entry. When the switch h[...]

1.5.4 Static MAC Address The switch provides Static MAC Address setup function. The static MAC addresses are the MAC addresses which are setup by LAN administrators and are not learned by the switch automatically. The static addresses are stored and referred in switch MAC address table permanently regardless of whether the MAC addresses are physica[...]

1.5.6 VLAN Function Virtual LANs (VLANs) can be viewed as a group of devices on different physical LAN segments which can communicate with each ot her as if they were all on the same physical LAN segment. It can create a network that is independent of physical location and group users into logical workgroups. The benefits are: _ Confine broadcast t[...]

1.5.6.2 IEEE 802.1Q VLAN (Tag - based VLAN) Tag - based VLAN is an IEEE 802.1Q specification standard. Therefore, it is possible to create a VLAN across devices from different venders. IEEE 802.1Q VLAN uses a technique to insert a tag into the Ethernet frames. Tag conta ins a VLAN Identifier (VID) that indicates the VLAN numbers. The switch can cla[...]

To provide path redundancy, Spanning - Tree Protoco l defines a tree that spans all switches in an extended network. Spanning - Tree Protocol forces certain redundant data paths into a standby (blocked) state. If one network segment in the Spanning - Tree Protocol becomes unreachable, or if Spanning - Tree Protoc ol costs change, the spanning - tre[...]

Options - Disable, Rx=incoming, Tx=outgoing, Both=Rx&Tx Sniffer Port : Specify the port where performs monitoring Monitored Port : Select the ports whos e traffic will be duplicated to the monitoring port. Press Space key for selection from the port member list.[...]

1.5.9 QoS Priority Function This switch supports two priority levels, high and low, and provides two priority functions: 1. Port - based Priority (Static priority) 2. 802.1p Priority (VLAN tagged priority) Priority Classification Methods Static priority is called port - based priority. The priority level of a receiving packet is determined by the c[...]

1.5.10 802.1X Port - Based Network Access Control For some IEEE 802 LAN environments, it is desirable t o restrict access to the services offered by the LAN to those users and devices that are permitted to make use of those services. IEEE 802.1X Port - based network access control function provide a means of authenticating and authorizing devices a[...]

Enable 802. 1X protocol Radius client configuration - Radius server IP : IP address of the Radius server Shared key : en encryption key for use during authentication sessions with the specified Radius server. It must match the key used on the Radius server. NAS ident ifier : identifier for this Radius client Server port : the UDP destination port f[...]

2. Installation and Management 2.1 Panel Description 2.2 AC Power Supply One AC power cord which meets the specification of your country of origin was supplied with the switch unit. Before installing AC power cord to the switch, make sure the AC power switch is in OFF position and the AC power to the power cord is turned off. T he switch supports w[...]

2.3 Network Switched Ports The switch provides three types of switched ports as follows: Port Number Label Specifications Port Type Modules Port 1 - 22 1 - 22 Fixed RJ - 45 10/100TX No Port 23 - 24 23 - 24 Fixed RJ - 45 10/100TX No F23 - F24 Module slot 100FX Optional Port 25 - 26 G1 - G2 Module slot Gigabit Optional 2.3.1 10/100TX Ports The 10/100[...]

2.3.2 100FX Modules Por t 23 and Port 24 also provide optional fiber connectivity. The following installation rules should be applied: 100FX Module Installation Working Connectors F23 Slot F24 Slot Port 23 Port 24 None None P23 RJ - 45 P24 RJ - 45 Installed None F23 module P24 RJ - 45 can not be used None Installed P23 RJ - 45 F24 module Installed [...]

The following 100FX modules are supported by F23 and F24 slots: Part Number Connector Cable Distance 2260 - FMT Duplex ST MMF* 2 km 2260 - FMC Duplex SC MMF 2 km 2260 - FJM MT - RJ MMF 2 km 2260 - FVM VF - 45 MMF 2 km 2260 - FSA2 Duplex SC SMF* 20 km Note: * MMF - Multimode Fiber cable 50/125, 62.5/125 µ m * SMF - Single Mode Fiber cable 8.7/125, [...]

2.3.3 Gigabit Ports and Modules Port 25 and Port 26, labeled G1 and G2 respectively, support the following Gigabit modules: Part Number Connector Cable Distance 2260 - GT RJ - 45 Cat.5e 100m 2260 - SXC Duplex SC MMF 62.5/125mm 220m MMF 50/125mm 500m 2260 - SXL Duplex LC MMF 62.5/125mm 220m MMF 50/125mm 500m 2260 - LXC Duplex SC MMF 62.5/125mm 550m [...]

Specifications Part Number Compliance Speed Duplex 2260 - GT IEEE 802.3ab 1000BASE - T 1000Mbps Half / Full IEEE 802.3u 100BASE - TX 100Mbps Half / Full IEEE 802.3 10BA SE - T 10Mbps Half / Full Auto - negotiation function MDI - X RJ45 2260 - SXC IEEE 802.3z 1000BASE - SX 1000Mbps Full 2260 - SXL IEEE 802.3z 1000BASE - SX 1000Mbps Full 2260 - LXC I[...]

Giga Port Module Installation steps: 1. Turn the power to the switch off. 2. Insert the Gigabit modules and screw the modules securely. 3. Turn the p ower to the switch on. 2.4 Rack Mounting Two 19 - inch rack mounting brackets are supplied with the switch for 19 - inch rack mounting. The steps to mount the switch onto a 19 - inch rack are: 1. Turn[...]

2.5 LED Indicators LED Name State Interpretation System LEDs P(Power) On Power is supplied to the unit. Off No power is supplied to the unit. C(Console) On Tx activities Off No Tx or Rx D(Diag) Blink Diagnostic and initialization in process On Diagnostic and initialization completed Port 1 ~ Port 24 LEDs 100/10 On Port speed is 100Mbps. Off Port sp[...]

2.6 Cooling Fans The switch is equipped with two cooling fans. Both fans a re featured with failure detection function. When the fan operation speed is below the specification, it is detected as a failure. The fan status can be monitored via management functions. One fan failure trap is also issued when fan failure event occurs. Important : Do not [...]

2.7 Management Setup The managed switch is featured with management functions and can be managed by using the following methods: _ Direct c onsole connection over an RS - 232 cable _ Telnet software over TCP/IP network _ SNMP manager software over TCP/IP network _ Web browser software from Internet or Intranet over TCP/IP network _ SNMP trap hosts [...]

2.7.1 Setup for Out - of - band (Console) Management Before doing any in - band management, it is necessary to perform console operation for configuring IP and SNMP related settings for the first time the switch is received for installation. Any PC running Windows 95/98/ or NT can be used as a console via COM port. Windows Hyper Terminal program is[...]

2.7.2 Setup for In - band Management To perform an in - band management, it is necessary to connect the system to your TCP/IP network. The steps are: 1. Configure IP and SNMP related settings to the device using direct console management when you receive it first time for the installation. 2. Find a proper straight - through Category 5 UTP cable (m[...]

3. Consol e and Telnet Operation This chapter describes the detailed console operation. It can be applied to either out - of - band console management or in - band Telnet management. Refer to Chapter 2 for installation details. Cold Start When the power to the switch is turned on, the device start initialization and self - test process. The self - [...]

Direct Console Management When you can see the self - test messages shown on screen properly, you can press <Enter> key to start console login operation. Go to Login Prompt section in next page directly. Telnet Management Use Telnet software to perform the management operation. The most convenient solution is using the built - in Telnet funct[...]

3.1 Main Menu When login successfully, the main menu is shown as follows: --------------------------------------------- Main Menu Switch Static Configuration Protocol Related Configuration Status and Counters Reboot Switch TFTP Update Firmware Logout Configure the switch. Arrow/TAB/BKSPC = Move Item Enter= Select Item ----------------------------- [...]

The following operation convention is commonly used for later configuration pages: Action menu: <Quit> Exit configuration <Edit> Edit each configuration value <Save> Save all configured values <Previous Page> Browse previous configuration page <Next Page> Browse next configuration page Control keys for action menu: [Ta[...]

3.2 Switch Static Configuration [Switch Static Configuration] menu is shown as follows: ---------------------------------------------------- Managed 2 4+2G Switch : Switch Configuration Port Configuration Trunk Configuration VLAN Configuration Misc Configuration Administration Configuration Port Sniffer Configuration Priority Configuration MAC Addr[...]

3.2.1 Port Configuration The following page illustrates Port 1 ~ Port 8 configuration example: ------------------------------------------------------------------------- Managed 24+2G Switch : Port Configuration InRate OutRate FlowControl Port Type (100K) (100K) Enable Auto Spd/Dpx Full Half ----------------------------------------------------------[...]

Port : Port number Display names - PORT1 - PORT24, G1 - G2 Type : Port type Display names - 100Tx, 100FX, 1000T, 1000FX InRate : Input (Ingress) rate control setting, 100Kbytes per unit. Options - 0 = disable rate control, 1 ~ 1000 valid rate value OutRate : Output (Egress) rate control setting, 100Kbytes per unit Options - 0 = disable rate co ntro[...]

3.3.2 Trunk Configuration Trunk configuration example page ------------------------------------------------------------------------- Managed 24+2G Switch : Trunk Configuration 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 G1 G2 1 V V V V - - - - - - - - - - - - - - - - - - - - - - 2 - - - - V V V V - - - - - - - - - - - - [...]

3.3.3 VLAN Config uration ---------------------------------------------------- Managed 24+2G Switch : VLAN Configuration VLAN Configure Create a VLAN Group Edit/Delete a VLAN Group Group Sorted Mode Previous Menu Configure the VLAN pvid and ingress.egress rules Tab=Next Item BackSpace=Previous Item Quit=Previous Menu Enter= Select Item ------------[...]

If 802.1Q mode is selected, some additional settings are required as follows: ----------------------------------------------- ----- Managed 24+2G Switch : VLAN Support Configuration VLAN Mode : 802.1Q IngressFilter1 IngressFilter2 Port PVID NonMember Drop Untagged Drop ------------------------------------------------------------------ PORT1 1 FORWA[...]

3.3.3.2 Create a VLAN Group Create a Port - based VLAN group ---------------------------------------------------- Add a VLAN Group VLAN Name: [ Vlan2 ] Grp ID:[ 2 ](1~4094) Port Member ----------------------- PORT1 Member PORT2 Member PORT3 No PORT4 No PORT5 No PORT6 No PORT7 No PORT8 No action - > <Quit> <Edit> <Save> <Prev[...]

Create an 802.1Q VLAN ---------------------------------------------------- Add a VLAN Group VLAN Name: [ Vlan2 ] VLAN ID:[ 2 ](1~4094) Protocol VLAN : None Port Member ----------------------- PORT1 UnTagged PORT2 Tagged PORT3 UnTagged PORT4 No PORT5 No PORT6 No PORT7 No PORT8 No action - > <Quit> <Edit> <Save> <Previous Page[...]

Member : Give a member setting, Options - UnTagged : the specified p ort is a member port and outgoing frames are not tagged. Tagged : the specified port is a member port and outgoing frames are tagged. No : the specified port is not a member port Note: If more than two VLAN groups are configured with same protocol val ue, make sure the member port[...]

Example to edit Vlan2 group: ---------------------------------------------------- Edit a VLAN Group VLAN Name: [ Vlan2 ] VLAN ID:[ 2 ](1~4094) Protocol VLAN : A ppleTalk/NetBIOS Port Member ----------------------- PORT1 UnTagged PORT2 Tagged PORT3 UnTagged PORT4 No PORT5 No PORT6 No PORT7 No PORT8 No action - > <Quit> <Edit> <Save[...]

3.3.4 Misc Configuration ---------------------------------------------------- Managed 24+2G Switch : Misc Configuration MAC Age Int erval Broadcast Storm Filtering Max bridge transmit delay bound Port Security Collision Retry Forever Hash Algorithm Previous Menu Configure the MAC aging time Tab=Next Item BackSpace=Previous Item Quit=Previous Menu E[...]

3.3.4.2 Broadcast Storm Filtering ---------------------------------------------------- Managed 24+2G Switch : Broadcast Storm Filter Mode Broadcast Storm Filter Mode : NO action - > <Edit> <Save> <Quit> ------------------------------- ----------------------------------- Tab=Next Item BackSpace=Previous Item Quit=Previous Menu E[...]

3.3.4.3 Max Bridge Transmit Delay Bound ---------------------------------------------------- Managed 24+2G Switch : Max Bridge Transmit Delay Bound Max bridge transmit delay bound : OFF Low Queue Delay Bound : ENABLE Low Queue Max Delay Time : 255 (2ms/unit) action - > <Edit> <Save> <Quit> --------------------------------------[...]

3.3.4.4 Port Security ---------------------------------------------------- Managed 24+2G Switch : Port Security Port Enable Security (disable MAC learning) ------------------------------------------------------------------ PORT1 Enabled PORT2 Enabled PORT3 Enabled PORT4 Disabled PORT5 Disabled PORT6 Disabled PORT7 Disabled PORT8 Disabled action - &[...]

3.3.4.5 Collision Retry Forever ---------------------- ------------------------------ Managed 24+2G Switch : Collision Retry Forever Collision Retry Forever : Enabled action - > <Edit> <Save> <Quit> ---------------------------------------------------- Collision Retry control setting for half duplex mode : Options - Enabled = co[...]

3.3.5 Administration Configuration ---------------------------------------------------- Managed 24+2G Swit ch : Device Configuration Change Username Change Password Device Information IP Configuration Previous Menu ---------------------------------------------------- 3.3.5.1 Change Username ---------------------------------------------------- Manag[...]

3.3.5.2 Change Password ---------------------------------------------------- Managed 24+2G Switch : Password Configuration Old Password : xxxx New Password : xxxx enter agai n : xxxx action - > <Edit> <Save> <Quit> ---------------------------------------------------- The password is used together with UserName for login operati[...]

3.3.5.4 IP Configuration ---------------------------------------------------- Managed 24+ 2G Switch : Device Configuration DHCP : Disabled IP Address : 192.168.0.2 Subnet Mask : 255.255.255.0 Gateway : 192.168.0.1 action - > <Edit> <Save> <Quit> ---------------------------------------------------- IP related parameters assigned[...]

3.3.6 Port Sniffer Confi guration ---------------------------------------------------- Managed 24+2G Switch : Port Sniffer Sniffer Mode : Rx Sniffer Port : PORT1 Monitored Port: Port Member ---------------------- PORT1 - PORT2 - PORT3 V PORT4 - PORT5 V PORT6 - PORT7 - PORT8 - action - > <Quit> <Edit> <Save> <Previous Page>[...]

3.3.7 Priority Configuration ---------------------------------------------------- Managed 24+2G Switch : The Priority Configuration Port Static Priority 802.1p Priority Previous Menu ---------------------------------------------------- Two priority methods are provided: _ Port Static Priority (Port - based Priority) _ 802.1p Priority Note: The swit[...]

3.3.7.1 Static Priority ---------------------------------------------------- Managed 24+2G Switch : Port Priority Port Priority ---------------------- PORT1 Low PORT2 Low PORT3 High PORT4 High PORT5 Disable PORT 6 Disable PORT7 Disable PORT8 Disable action -> <Quit> <Edit> <Save> <Previous Page> <Next Page> --------[...]

3.3.7.2 802.1p Priority ---------------------- ------------------------------ Managed 24+2G Switch : 802.1p Priority Configuration Priority 0 LOW Priority 1 LOW Priority 2 LOW Priority 3 LOW Priority 4 HIGH Priority 5 HIGH Priority 6 HIGH Priority 7 HIGH QoSMode : First Come First Service action - > <Quit> <Edit> <Save> -------[...]

3.3.8 MAC A ddress Configuration ---------------------------------------------------- Managed 24+2G Switch : MAC Address Configuration Static MAC Address Filtering MAC Address Previous Menu ---------------------- ------------------------------ 3.3.8.1 Static MAC Address ---------------------------------------------------- Managed 24+2G Switch : Sta[...]

Add static MAC address ---------------------------------------------------- Managed 24+2G Switch : Add Static MAC Address MAC Address : 0040F6FE0005 Port Num : PORT3 Vlan ID : 2 action - > <Ed it> <Save> <Quit> ---------------------------------------------------- MAC Address : the Ethernet MAC address Port Num : press <Space[...]

3.3.8.2 Filtering MAC Address Refer to Chapter 1 for description of MAC address fi ltering function. The operations to Add/Edit/Delete a filter MAC address are similar to the operations for static MAC address table. The following page shows an example of filter MAC address table: ---------------------------------------------------- MAC Address Vlan[...]

3.4 Protocol Related Configuration -------------- -------------------------------------- Managed 24+2G Switch : The Protocol Related Configuration STP SNMP GVRP IGMP LACP 802.1x Previous Menu ---------------------------------------------------- 3.4.1 STP ---------------------------------------------------- Managed 24+2G Switch : Spanning Tree Proto[...]

STP Enable ---------------------------------------------------- Managed 24+2G Switch : STP Enabled/Disabled Configuration STP : Enabl ed action - > <Edit> <Save> <Quit> ---------------------------------------------------- Spanning Tree function can be enabled or disabled. Press Space key to select enable or disable. System Conf[...]

Perport Configuration ---------------------------------------------------- Managed 24+2G Swit ch : STP Port Configuration Port PortSate PathCost Priority --------------------------------------------- PORT1 Forwarding 10 128 PORT2 Forwarding 10 128 PORT3 Forwarding 10 128 PORT4 Forwarding 10 128 PORT5 Forwarding 10 128 PORT6 Forwarding 10 128 PORT7 [...]

3.4.2 SNMP ---------------------------------------------------- Managed 24+2G Switch : SNMP Protoco l System Options Community Strings Trap Managers Previous Menu ---------------------------------------------------- Use this page to setup SNMP related parameters and SNMP trap hosts related parameters. 3.4.2.1 System Options ------------------------[...]

3.4.2.2 Community Strings ---------------------------------------------------- Managed 24+2G Switch : SNMP Community Configuration Community Name Write Access ------------------- -------------------------- public Restricted private Unrestricted action - > <Add> <Edit> <Delete> <Save> <Quit> -------------------------[...]

3.4.2.3 Trap Managers A trap manager is a management station that allows to receive SNMP traps. An SNMP trap is issued by the switch when the associated trap event occurs in the sw itch. A trap manager is defined by its IP address and a community string. Up to three trap managers can be configured. --------------------------------------------------[...]

3.4.3 GVRP This page you can enable or disable the GVRP (GARP VLAN Registration Protocol) support. ---------------------------------------------------- Managed 24+2G Switch : GVRP Configuration GVRP : Enabled action - > <Edit> <Save> <Quit> -------------- -------------------------------------- Options - Enabled, Disabled 3.4.4 [...]

3.4.5 LACP This menu list is used to configure LACP trunk groups. ----------------------------------------- ----------- Managed 24+2G Switch : LACP Configuration Working Ports Setting State Activity LACP Status Previous Menu ---------------------------------------------------- 3.4.5.1 Working Port Setting -------------------------------------------[...]

3.4.5.2 State Activity ------------------------------------------------------------------------- Managed 24+2G Switch : LACP Por t Active State Configuration Port State Activity Port State Activity ---------------------------- ----------------------------- 1 Active 14 Passive 2 Active 15 Passive 3 Active 16 Passive 4 Active 17 Passive 5 Passive 18 [...]

3.4.5.3 LACP Status ---------------------------------------------------- Managed 24+2G Switch : LACP Group Status Group Key : 1 Port_No : 1 2 3 4 action - > <Quit> <Previous Page> <Next Page> ---------------------------------------------------- This page shows LACP status of each trunk group. 3.4.6 802.1X ----------------------[...]

3.4.6.1 Enable 802.1X Protocol ----- ----------------------------------------------- Managed 24+2G Switch : 802.1x Enabled/Disabled Configuration 802.1x : Enabled action - > <Edit> <Save> <Quit> ---------------------------------------------------- This menu is used to enable 802.1 X function of the switch. 3.4.6.2 802.1X System[...]

3.4.6.3 802.1X Per Port Configuration ---------------------------------------------------- Managed 24+2G Switch : 802.1x Port Status (Force Unauth= Fu, Force Au=Fa, Auto=Au, None=No) Port Status ------------------- PORT1 No PORT2 No PORT3 No PORT4 No PORT5 No PORT6 No PORT7 No PORT8 No action - > <Quit> <Edit> <Save> <Previo[...]

3.4.6.4 802.1X Misc. Configuration ---------------------------------------------------- Managed 24+2G Switch : 802.1x Misc Configuration Quiet - period <0..65535, default=60> : 60 Tx- period <0..65535, default=30> : 30 Supplicant - timeout <0..300, default=30> : 30 Server - timeout <0..300, default=30> : 30 ReAuthMax <1..[...]

3.5 Status and Counters ---------------------------------------------------- Managed 24+2G Switch : Status and Counters Port Status Port Counters System Informatio n Previous Menu ---------------------------------------------------- Menu functions: Port Status : display the status of all switched ports and trunk groups. Port Counters : display the [...]

3.5.1 Port Status ------------------------------------------------------------------------- Managed 24+2G Switch : Port Configuration Link InRate OutRate Flow Port Status (100K) (100K) Enable Auto Spd/Dpx Control ------------------------------------------------------------------ PORT1 Down 0 0 No AUTO 100 Full On PORT2 Do wn 0 0 No AUTO 100 Full On[...]

3.5.2 Port Counters ------------------------------------------------------------------------- Managed 24+2G Switch : Port Counters Port TxGoodPkt TxBadPkt RxGoodPkt RxBadPkt TxAbort Collision DropPkt ------------------------------------------------------------------- -------- PORT1 0 0 0 0 0 0 0 PORT2 0 0 0 0 0 0 0 PORT3 0 0 0 0 0 0 0 PORT4 0 0 0 0[...]

3.5.3 System Information ---------------------------------------------------- Managed 24+2G Switch : System Information MAC Address : 0040F6FE0005 Firmware version : x.x ASIC version : x.xx PCBA version : x.xx G1 Module Type : N/A [N/A ] G2 Module Type : N/A [N/A ] F23 Module Type : N/A [N/A] F24 Module Type : N/A [N/A] FAN- 1 Status : Normal FAN- [...]

3.6 Reboot Switch ---------------------------------------------------- Man aged 24+2G Switch : Restart Configuration Restart Default Previous Menu ---------------------------------------------------- 3.6.1 Restart This command will reboot the switch with current configuration setting value s. Confirmation prompt is: --------------------------------[...]

3.7 TFTP Update Firmware ---------------------------------------------------- Managed 24+2G Switch : TFTP Update Firmware Configuration TFTP Update Firmware TFTP Restore Configuration TFTP Backup Configuration Previous Menu ---------------------------------------------------- This menu supports : TFTP Update Firmware : Update the switch firmware vi[...]

3.7.1 TFTP Update Firmware ---------------------------------------------------- Managed 24+2G Switch : TFTP Update Firmware TFTP Server : 192.168.0.15 Remote File Name : image.bin action - > <Edit> <Save> <Quit> ------------------------- --------------------------- The steps to use TFTP to update switch firmware are: 1. Start y[...]

3.7.2 TFTP Restore Configuration ---------------------------------------------------- Managed 24+2G Switch :Restore Configuration File TFTP Server : 192.168.0.15 Remote File Name : data.dat action - > <Edit> <Save> <Quit> --------------------------------------------------- - The steps to use TFTP to restore switch configuration[...]

3.7.3 TFTP Backup Configuration ---------------------------------------- ------------ Managed 24+2G Switch :Upload Configuration File TFTP Server : 192.168.0.15 Remote File Name : newdata.dat action - > <Edit> <Save> <Quit> ---------------------------------------------------- To use TFTP to upload current switc h configuration [...]

4. SNMP Manageme nt SNMP management are performed at a network management station running SNMP network management application manager software. The following figure illustrates an example model: The switch unit serves as an SNMP agent and provides the capabilities that allows network administrators via SNMP protocol to set parameters and view switc[...]

4.1 Configuring SNMP Settings via Console Operation Before performing SNMP op eration, proper SNMP settings must be configured. The SNMP related settings are: Name : Logic name to identify the switch unit Location : Location where the switch unit is installed Contact : Contact person regarding the switch unit Community string : SNM P communities to[...]

The following are device - related private MIB objects: Private MIB Objects Set/Get Value Options DeviceName.0 Get KS2260 PortNumber.0 Get 26 F23_Module.0 Get N/A(0) FX_Module(1) F23_Module.0 Get N/A(0) FX_Module(1) G1_Module.0 Get N/A(0) TP_10/100/1000T(1) FX_1000SX_SC(2) FX_1000SX_LC(3) FX_1000LX_SC(4) FX_1000LX_SC(5) FX_1000LX_SC(6) FX_1000LX_LC[...]

4.3 SNMP Traps The switch supports the following SNM P traps. When the trap event occurs, the SNMP agent will generate a trap notification to SNMP trap manager stations. Up to three trap managers can be supported. Each trap manager must be configured with : IP address and Community string which the trap mana ger belongs. The provided traps and asso[...]

5. Web Ma nagement The managed switch features an http server which can serve the management requests coming from any web browser software over internet or intranet network. Web Browser Microsoft Internet Explorer 5.0 or later Important: Th e switch does not support any version of Netscape browser software. Best Display Resolution 1024 x 768 pixels[...]

5.1 Start Browser Softwar e and Making Connection Start your browser software and enter the IP address of the device unit to which you want to connect. The IP address is used as URL for the browser software to search the device . URL : http://xxx.xxx.xxx.xxx/ Factory default IP address : 192.168.0.2 Login the Username and Password to enter web mana[...]

5.2 Web Management Home Overview This page provides the following menu list. Each menu is described individually in the following sections. _ Menu _ Port Status _ Port Statistics _ Administrator _ Stacking _ TFTP Update Firmware _ Configuration Backup _ Reset System _ Reboot[...]

5.3 Port status This page shows all port status in a scroll bar list. The status are dependent on user settings and the negotiation results as follows: State : Display port function status including - Config : function setting - On = enable, Off = disable Atual : status - On = enabled, Off = disabled Link Status : Down = No Link, UP = active link i[...]

Config/Half : On = enable for half duplex, Off = disable Atual : current flow control status Rate Control : Display the port rate control settings (unit=100K bytes) Atual/Ingr : Display the port effective ingress rate setting Atual/Egr : Display the port effective egress rate setting Off = the rate control is disabled. Priority : Display the port p[...]

5.4 Port Statistics This page displays the function, link status, and statistic counters of all ports by a scroll list. The status and counters are: State : On = port is enabled, Off = port is disabled Link : port link status, Down = l ink down, Up = link up TxGoodPkt : Good transmitted packet count TxBadPkt : Bad transmitted packet count RxGoodPkt[...]

5.5 Administrat or Administrator menu provides the following management functions: _ IP address _ Switch settings _ Console port information _ Port controls _ Trunking _ Filter database _ VLAN configuration _ Spanning tree _ Port Sniffer _ SNMP _ S ecurity Manager _ Stack Settings[...]

5.5.1 IP Address Available settings: DHCP : DHCP function setting Enable : enable DHCP client function to get dynamic IP address Disable : disable DHCP client function and use static IP address IP Address : Static IP address assigned to the managed switch unit Subnet_Mask : subnet mask setting Gateway : Default gateway IP address Click Buttons: [Ap[...]

5.5.2 Switch Setting This menu provides the followin g functions: Basic : the basic information of the managed switch unit Module Info : the information of the Gigabit modules installed Advanced : some switch related settings 5.5.2.1 Basic Information Description : The name of switch type MAC Address : The unique MAC address assigned to the switch [...]

5.5.2.2 Module Info Module information of Port 23 F23 slot, Port 24 F24 slot, G1 port, and G2 port : TYPE : The type of the module installed in port slot DESCRIPTION : The des cription about the installed module[...]

5.5.2.3 Advanced Miscellaneous settings : MAC Address Age - out Time : Type the number of seconds that an inactive MAC addr ess remains in the switch address table. The valid range is 300~765 seconds (must be multiple of 3). Default is 300 seconds. Max bridge transmit delay bound control : Limit the packets queuing time in switch. If enabled and qu[...]

Priority Queue Service settings (select one of the following three modes): First Come First Service : The sending sequence is based on the order that pac kets arrived. All High before Low : The high priority packets sent before low priority packets. WRR : Weighted Round Robin. Select the ratio preference for high priority packets vs. low priority p[...]

5.5.3 Console Port Information Console port configuration: Baudrate(bits/sec) : Fixed baud rate - 9600 Data bits : 8 Parity Check : none Stop Bits : 1 Flow control : none[...]

5.5.4 Port Controls This page allows to change per port configuration settings as follows: Port : Select the ports to perform setup. More than one port can be selected at the same time for setup. See next page for control settings. Note: All default values displayed for setup are not current setting values, but the factory default va lues instead. [...]

Half = Half duplex Flows control/Full : Enable or disable flow control function in full duplex Fl ows control/Half : Enable or disable flow control function in half duplex Rate Control/Ingress : Control ingress data rate (incoming bandwidth) Rate Control/Egress : Control egress data rate (outgoing bandwidth) The valid range is 0 ~ 1000. (Unit = 100[...]

5.5.5 Trunking This page shows settings and status of trunking function. Refer to Chapter 1 fo r the description of LACP trunking function.[...]

5.5.5.1 Aggregator settings System Priority : A value used to identify the priority between two active LACP link partners. The switch with the lowes t value has the highest priority and is selected as the active LACP. Group ID : There are seven trunk groups are supported to be configured. Choose the [Group ID] and click [Get] to get current setting[...]

5.5.5.2 Aggregator Information The follow ing pages illustrate three examples: No active group configured.[...]

Two Static Trunking groups are configured.[...]

One LACP trunk group is formed. Trunking information between Actor and Partner are shown.[...]

5.5.5.3 State Activity Per port LACP mode: Active (select ) : The port can start LACP negotiation with its link partner by sending LACP protocol packet automatically. Passive (not select ) : The port does not send LACP protocol packets automatically and responds only if it receives LACP packets from its link partner. Click Button: [ Apply ] : Apply[...]

5.5.6 Forwarding and Filtering Database 5.5.6.1 IGMP Snooping Control setting: IGMP Protocol : enable IGMP function to collect IP multicast data base and perform IP multic ast operation Multicast Group Information: This page displays the IGMP snooping information. IP multicast addresses range from 224.0.0.0 through 239.255.255.255. IP address : IP [...]

5.5.6.2 Static MAC Address This page is used to maintain Static MAC address data base. Refer to Chapter 1 for t he description of Static MAC address function. Static MAC address related settings: Mac Address : Static Ethernet MAC address (12 digits) Port num : The port number where the MAC address is located Vlan ID : The associated Vlan ID to the [...]

5.5.6.3 MAC Address Filtering This page is used to maintain filter MAC address table. MAC address filtering allows the switch to drop unwanted traffic. Traffic is filtered based on the destination addresses (DAs). Refer to chapter 1 for the function description. Filter MAC address settings: Mac Address : The destination MAC address to be filtered V[...]

5.5.7 VLAN configuration The switch supports port - based, 802.1Q (tag - based) and protocol - base VLAN in this page. In the default configuration, VLAN support is disable. Refer to Chapter 1 for more description about VLAN function. VLAN mode selection: No VLAN - VLAN is disabled Port Based VLAN 802.1Q - 802.1Q VLAN with Protocol classification o[...]

5.5.7.1 Port - based VLAN Click : [ Add ] : to create a new VLAN group [ Edit ] : t o edit an existing VLAN group [ Delete ] : to delete a VLAN group [ PrPage ] : to browse previous group page [ NextPage ] : to browse next group page[...]

A Port - based VLAN group contains the following settings: VLAN name : Name of the VLAN group Group ID : Unique ID for the group Member ports : list of ports belonging to the group ID Click [Apply] to confirm the changes. Note: If the trunk groups exist, you can see it (ex:TRK 1,TRK2_..) in select menu of ports, and you can configure it as the memb[...]

5.5.7.2 802.1Q VLAN This page is used to display current configured Tag - based VLAN, create a new VLAN, and enable or disable GVRP protocol. Up to 256 VLANs can be configured. When enabling 802.1Q VLAN, all ports on the switch belong to default Vlan ID 1. The default VLAN can not be deleted. GVRP (GARP VLAN Regi stration Protocol) support can be e[...]

Add a new VLAN Basic page settings: VLAN Name : name for the new VLAN VID : VLAN ID of the new VLAN (value: 2 - 4094, default: 1) Protocol Vlan : setting for protocol support as follows: None IP, ARP, AppleTalk/NetBIOS Novell_IPX, Banyan_Vines_C4 / Novell IPX(raw Ethernet) Banyan_Vines_C5 / Spanning_Tree_Protocol_BPDU Banyan_Vines_AD / Null_SAP, DE[...]

Edit member ports : select member ports from available port box [ Add ] - add one member port [ Remove ] - remove a member port Click [ Next ] : to set tag/untag mode for the member ports Note: If more than two VLAN groups are co nfigured with same protocol value, make sure the member ports of those groups are not overlapping. Tag : outgoing frames[...]

Port VID Settings Click [ Port VID ] to set per port VID and Ingress filtering rules. Multiple port selection at the same time for same settings is allowed. Port VID Settings: Port VID (PVID) : the port VLAN ID that will be assigned to untagged traffic on a given port. The range is 1~255, default PVID is 1. Ingress Filtering Rule 1 : Drop or forwar[...]

5.5.8 Spanning Tree This page shows an example of STP Root Br idge information of the switch.[...]

This page shows an example of STP port status Refer to Cha pter 1 for the description of Spanning Tree Protocol.[...]

STP parameters settings: STP State : Enable or disable STP function Priority : A value used to identify the root bridge. The b ridge with the lowest value has the highest priority and is selected as the root. Valid values : 1 through 65535. Max Age : The number of seconds a bridge waits without receiving Spanning - Tree Protocol configuration messa[...]

STP port parameters settings: Port Priority : Priority value for becoming the root port. The rage is 0 - 255, default setting is 128, the lowest number has the highest priority. Path Cost : Specifies the path cost of th e port that switch uses to determine which port are the forwarding ports the lowest number is forwarding ports, the rage is 1 - 65[...]

5.5.9 Port Sniffer Sniffer Mode : Select one of sniffer modes, options - DISABLE : Disable sniffer function RX : All Rx traffic on monitored ports are copied to Analysis port TX : All Tx traffic on monitored ports are copied to Analysis port BOTH : Both Rx and Tx traffic are copied to Analysis port Sniffer Port : The port can be used to see all mon[...]

5.5.10 SNMP SNMP Parameters This page is used to configure SNMP related parameters as follows: Name : Name to be used for the switch. Location : The location of the switch. Contact : A name of a person or organization Click [Apply] to apply the settings.[...]

SNMP Managers Community S tring and access control settings: Community String : The community string serves as a password which allows remote SNMP manager stations to access the switch management objects via SNMP protocol. Max. Up to 4 community strings are supported. RO : Access right for Read Only is associated to the community string RW : Access[...]

SNMP Trap Managers A trap manager is a management station which can receive SNMP trap messages sent by the switch when predefined trap events occur. SNMP Trap Manager settings: IP address : IP address of the trap manager station Community : Community string belonging to the trap manager Click Buttons: [ Add ] to add a new trap manager [ Remove ] to[...]

5.5.11 Security Manager This page is used to configure the user who is allowed to access the switch via direct console, telnet and web management interfaces. User name : Type the new user name Assign/Change password : Type the new password Reconfirm password : Retype the new password Click [ Apply ] to apply the changes.[...]

5.5.12 802.1X Configuration This menu includes three 802.1X function related settings: System Configuration : Parameters for connection to a Radius server PerPort Configuration : Per port 802.1X mode settings Misc Configuration : 802.1X protocol related timers and parameters[...]

System Configuration Radius Server IP : IP address of the Radius server Server Port : the UDP destination port for authentication requests to the specified Radius server Accounting Port : the UDP destination port for accounting requests to the specified Radius server Shared Key : an encryption key for use during authentication sessions wi th the sp[...]

5.5.12.1 802.1X PerPort Configuration This page is used to set per port 802.1x authorization state mode. The options are: Au (Auto) - The port is set to the Authorized or Unauthorized state in accordance with the outcome of an authentication exchange between the Supplicant and the Authentication Server. Fa (Forced Authorized) - The port is forced t[...]

5.5.12.2 802.1X Misc Configuration This page is used to setup 802.1x protocol timers and parameters: Quiet period - the period during which the port does not try to acquire a supplicant (unit: second) Tx period - the period the port waits to retr ansmit the NEXT EAPOL PDU during an authentication session (unit: second) Supplicant timeout - the peri[...]

5.5.13 Stack Settings The switch supports stack management feature. More than one of the switches can be grouped together as a switch stack. As the stack is configured, all switches in stack can be managed from the master unit easily without memorizing many IP addresses and ted ious login procedures. Up to 16 switch units can be configured as a swi[...]

This page is used to configure a stack information in this master unit. The configuration includes: Stack Name - Give a name to this stack Master Name - Give a name to the master unit of the stack. The name is used for identifying each unit in a stack easily. Configure other members in the stack: Member Unit No. - the sequence number of each member[...]

5.6 Stacking Click [ Stacking ] in main menu to enter into switch st ack management for up to 16 units. No more than one IP address, login procedures are required for multiple switch management. The following figure illustrates a stack composed of three units. This page shows the following information: - Stack name displayed on top of the stack - S[...]

Besides showing information, two buttons are provided next each switch image. They are used for further management operations as follows. [ Configuration ] : enter full web management home page of the unit [ Port Status List ] : show detailed port configuration and status of the unit by a table list. Refer to section 5.3 for status explanation. The[...]

5.7 TFTP Update Firmware The steps to update the firmware of the switch are: 1. Start your TFTP server. 2. Copy t he firmware image file of new version into the TFTP server. 3. In this web page, specify the IP address of the TFTP server, in where the new firmware image file is stored. 4. In this page, specify Firmware File Name of the new image fil[...]

6. Click [ Update Firmware ] in following download complete message to confirm the update. 7. Reboot the system[...]

5.8 Configurat ion Backup 5.8.1 TFTP Restore Configuration The function i s used to download a new default configuration file from a TFTP server into the switch. The steps are: 1. Start your TFTP server. 2. Copy the new default configuration file into the TFTP server. 3. In this web page, specify the IP address of the TFTP serve r, in where the new[...]

5.8.2 TFTP Backup Config uration This function is used to backup (upload) current configuration settings of the switch unit onto a TFTP server. The steps are: 1. Start your TFTP server. 2. In this web page, specify the IP address of the TFTP server, to where the current configuration data is saved. 3. Specify Backup File Name of the configuration f[...]

5.9 Reset System This function is used to reset the switch with default configuration data. Click [ Reset ] to start the o peration.[...]

5.10 Reboot This function is used to reboot the switch with current configuration settings. Click [ Reboot ] to start operation.[...]

6. Update Firmware from C onsole The switch also supports firmware update from console port. The operation is performed over 1K Xmodem protocol. Cases to update firmware from console: 1. Power on the switch and press any key from console withi n 5 seconds. The switch enters 1K Xmodem receiver mode. 2. The switch enters 1K Xmodem receiver mode autom[...]

Appendix A: Factory Default Settings IP Address Related Settings DHCP Disabled Static IP Address 192.168.0.2 Subnet Mask 255.255.255.0 Default Gateway 192.168.0.1 P er Port Settings Port Function Enabled Auto - negotiation Auto Speed 100Mbps (Port 1 - Port 24) 1000Mbps (Port G1, G2) Duplex Full (All ports) Flow Control / Full Enabled Flow Control /[...]

Forward Delay Time 15 STP Port Priority 128 (All ports) STP Port Path Cost 10 (All ports) SNMP Related Settings System Name Null System Location Null System Contact Null Community String 1 String = public, Access right = RO Community String 2 String = private, Access right = RW Community String 3 &,4 Not available SNMP Trap Manager Settings Tra[...]

802.1X Function Settings 802.1X Protocol Disabled Radius Server IP 192.168.0.59 Shared Key 12345678 NAS Identifier NAS_L2_SWITCH Server Port 1812 Accounting Port 1813 Port 802.1x mode None (no control) for all ports Quiet Period 60 seconds Tx Period 30 seconds Supplicant Timeo ut 30 seconds Server Timeout 30 seconds Max Requests 2 times ReAuth Peri[...]