Home

ConneXium TCSESM, TCSESM-E Managed

1. Figure 37 Multiple Spanning Tree dialog Port CIST tab E100000000482 02 2011 151 Redundancy Parameter Tab Guards Root Guard TCN Guard Meaning Protective settings for the ports The Root Guard setting is only relevant for ports with the STP role designated If such a port receives an STP BPDU with better path information on the root that what the device knows the device discards the BPDU and sets the port status to discarding instead of assigning the port the STP port role root Thus the device helps protect your network from attacks with STP BPDUs that try to change the topology and from incorrect configurations If there are no STP BPDUs with better path information on the root the device resets the transmission status of the port according to the port role Note The Root Guard and Loop Guard settings are mutually exclusive If you activate one setting when the other is already active the device switches off the other one If the TCN Guard setting is active TCN Topology Change Notification the port ignores the topology change flag in the STP BPDUs received that is reporting a topology change Thus the device helps protect your network from attacks with STP BPDUs that try to change the topology If the TCN Guard setting is inactive the device follows the protocol in reacting to the STP BPDUs received it deletes its address table and forwards the TCN inf
2. trustDot1p The device prioritizes received packets that contain VLAN tag information according to this information assigning them to a traffic class see 802 1D p mapping The device prioritizes received packets that do not contain any tag information assigning them to a traffic class see Entering the port priority according to the port priority of the receiving port trustlpDscp The device prioritizes received IP packets assigning them to a traffic class see IP DSCP mapping according to their DSCP value The device prioritizes received packets that are not IP packets assigning them to a traffic class see Entering the port priority according to the port priority of the receiving port El100000000482 02 2011 QoS Priority 5 2 Port Configuration For received IP packets The device also performs VLAN priority remarking In VLAN priority remarking the device modifies the VLAN priority of the IP packets if the packets are to be sent with a VLAN tag see on page 83 VLAN Static For received IP packets Based on the traffic class to which the IP packet was assigned see above the device assigns the new VLAN priority to the IP packet in accordance with table 32 Example A received IP packet with a DSCP value of 16 cs2 is assigned traffic class 1 default setting The packet is now assigned VLAN priority 2 in accordance with table 32 5 2 3 Displaying the untrusted tr
3. O Enter the desired value from 0 to 3 in the Traffic Class field for every DSCP value 0 63 DSCP Value Traffic Class a zi Set Reload Help Figure 28 IP DSCP mapping table The different DSCP values get the device to employ a different forwarding behavior namely Per Hop Behavior PHB PHB classes Class Selector CSO CS7 For reasons of compatibility to TOS IP Precedence Expedited Forwarding EF Premium service Reduced delay jitter packet loss RFC 2598 98 El100000000482 02 2011 QoS Priority 5 4 IP DSCP mapping Assured Forwarding AF Provides a differentiated schema for handling different data traffic RFC 2597 Default Forwarding Best Effort No particular prioritizing DSCP value 0 1 7 8 9 11 13 15 10 12 14 16 17 19 21 23 18 20 22 24 25 27 29 31 26 28 30 32 33 35 37 39 34 36 38 40 41 42 43 44 45 47 46 48 49 55 56 57 63 DSCP name Best Effort CSO CS1 AF11 AF12 AF13 CS2 AF21 AF22 AF23 CS3 AF31 AF32 AF33 CS4 AF41 AF42 AF43 CS5 EF CS6 CS7 Traffic class default setting 1 wI vlv MIMI MIM NM NM O O O O O oO Table 32 Mapping the DSCP values onto the traffic classes El100000000482 02 2011 99 QoS Priority 5 4 IP DSCP mapping E100000000482 02 2011 100 Redundancy 6 Redundancy Under Redundancy you will find the dialogs and views for configuring and monitoring t
4. Shows whether the media module supports the SFP module Shows the operating temperature of the SFP Shows the transmission power in mW Shows the receiver power in mW Shows the power level of the received signal good receiver power limited receiver power insufficient receiver power Table 66 SFP Modules dialog Temperature Tx Power Rx Power Rx Power in Celsius in mw Help Figure 43 SFP Modules dialog 166 EIO0000000482 02 2011 Diagnostics 7 4 Topology Discovery 7 4 Topology Discovery This dialog allows you to switch on off the topology discovery function LLDP The topology table shows you the collected information for neighboring devices This information enables the network management station to map the structure of your network The option Show LLDP entries exclusively allows you to reduce the number of table entries In this case the topology table hides entries from devices without active LLDP support Configuration Operation On Off e Pot Neighbour Identifier 00 Oc 07 ac 95 Neighbour IP Address Neighbour Port Description U learned by FDD Neighbour System Name 59 more detected Set Reload Show LLDP entries exclusively Help Figure 44 Topology discovery If several devices are connected to one port for example via a hub the table will contain one line for each connected device EIO0000000482 02 2
5. Temperature Temperature of the device Lower upper temperature threshold values If the temperature goes outside this range the device generates an alarm Table 1 System Data Device View The device view shows the device with the current configuration The status of the individual ports is indicated by one of the symbols listed below You will get a full description of the port s status by positioning the mouse pointer over the port s symbol El100000000482 02 2011 21 Basic Settings 1 1 System Figure 6 Device View Meaning of the symbols 208 The port 10 100 Mbit s 1 Gbit s is enabled and the connection is OK The port is disabled by the management and it has a connection u The port is disabled by the management and it has no connection The port is in autonegotiation mode The port is in HDX mode The port 100 Mbit s is in the discarding mode of a redundancy protocol like e g Spanning Tree or HIPER Ring Updating This area of the website at the bottom left displays the countdown time until the applet requests the current data of this dialog again Clicking the Reload button calls the current dialog information immediately The applet polls the current data of the device automatically every 100 seconds 29 EIO0000000482 02 2011 Basic Settings Reloading data in 70 Figure 7 Time until update El100000000482 02 2011 1 1 System 23 Basic Settings 1 2 Netwo
6. VLAN membership of the Currently not a member relevant port and handling of T Member of VLAN send data packets with the VLAN tag tag U Member of the VLAN send data packets without tag untagged F Membership forbidden so no entry possible via GVRP either Table 24 Current VLAN VLAN ID A Status othe vermanent T 4 1 Creation Time 11 12 13 14 21 22 A es2 Iday s 0 00 08 u lu U lu I lu lu U lu I j day amp 0 00 06 j T i Reload Help Figure 24 Current VLAN dialog 82 EIO0000000482 02 2011 Switching 4 5 3 VLAN Static With this dialog you can Create VLANs Assign names to VLANs 4 5 VLAN Assign ports to VLANs and configure them Delete VLANs Parameter Meaning VLAN ID Displays the ID of up to 255 VLANs that are simultaneously possible Name Enter the name of your choice for this VLAN Status Displays the VLAN status Ports x x Select the membership of the ports to the VLANs Table 25 VLAN Static dialog El100000000482 02 2011 Possible Values Default Setting 1 4 042 Maximum 32 characters VLAN 1 default active Entry is active activated not InService Entryis deactivated currently nota VLAN 1 U member new VLANs T Member of the VLAN send data packets with tag tagged U Member of the VLAN send data packets without tag untagged F Membership forbidden 83 Switching 4 5 VLAN Set Rel
7. 157 158 163 164 164 165 166 167 169 171 174 174 174 176 176 178 180 183 185 187 188 190 191 193 194 195 197 Contents A 4 Underlying IEC Norms A 5 Copyright of Integrated Software A 5 1 Bouncy Castle Crypto APIs Java A 5 2 Broadcom Corporation B Index 198 199 199 200 201 El100000000482 02 2011 Safety Information Safety Information Important Information Notice Read these instructions carefully and look at the equipment to become familiar with the device before trying to install operate or maintain it The following special messages may appear throughout this documentation or on the equipment to warn of potential hazards or to call attention to information that clarifies or simplifies a procedure indicates that an electrical hazard exists which will result in personal p The addition of this symbol to a Danger or Warning safety label injury if the instructions are not followed personal injury hazards Obey all safety messages that follow this symbol to avoid possible injury or death A DANGER DANGER indicates an imminently hazardous situation which if not avoided will result in death or serious injury f This is the safety alert symbol It is used to alert you to potential A WARNING WARNING indicates a potentially hazardous situation which if not avoided can result in death or serious injury A CAUTION CAUTION indicates a potentially hazard
8. Deleting a configuration Note The loading process started by DHCP BOOTP see Network on page 24 shows the selection of from URL amp save local in the Load frame If you get an error message when saving a configuration this could be due to an active loading process DHCP BOOTP only finishes a loading process when a valid configuration has been loaded If DHCP BOOTP does not find a valid configuration finish the loading process by loading the local configuration from the device in the Load frame If you change the current configuration for example by switching a port off the Web based interface changes the load save symbol in the navigation tree from a disk symbol to a yellow triangle After saving the configuration the Web based interface displays the load save symbol as a disk again After you have successfully saved the configuration on the device the device sends an alarm trap saConfigurationSavedTrap together with the information about the Memory Backup Adaptor EAM if one is connected When you change the configuration for the first time after saving it the device sends a trap saConfigurationChangedTrap El100000000482 02 2011 33 Basic Settings 1 5 Loading Saving the Configuration 1 5 3 URL The URL identifies the path to the tftp server on which the configuration file is to be stored The URL is in the format tftp IP address of the tftp server path name file name e g tf
9. IEEE 802 1w IEEE 802 1w Version Table 48 Global Spanning Tree settings basic function In the Protocol Configuration Information frame you can configure the following values and read information In the context of Dual RSTP for the device TCSESM E these are the settings for the Dual RSTP Primary Ring Parameter Meaning Possible Values Default Setting Column Information and configuration Bridge parameters of the local device Bridge ID The local Bridge ID made up of the local read only priority and its own MAC address The format is ppppp mm mm mm mm mm mm with ppppp priority decimal and mm the respective byte of the MAC address hexadecimal Table 49 Global Spanning Tree settings local bridge parameters E100000000482 02 2011 130 Redundancy Parameter Meaning Priority Sets the local bridge priority Hello Time Forward Delay Max Age The bridge priority and its own MAC address make up this separate Bridge ID The device with the best numerically lowest priority assumes the role of the root bridge Define the root device by assigning the device the best priority in the Bridge ID among all the devices in the network Enter the value as a multiple of 4 096 Sets the Hello Time The local Hello Time is the time in seconds between the sending of two configuration messages Hello packets If the local device has the root function the other devices in the entire network take
10. L Double click a cell in the Port priority column and enter the priority 0 7 According to the priority entered the device assigns the data packets that it receives at this port to a traffic class see table 30 Prerequisite setting in the Global Trust Mode dialog untrusted see on page 90 Global or setting in the Global Trust Mode dialog trustDot1p see on page 90 Global and the data packets do not contain a VLAN tag or setting in Global Trust Mode dialog trustIpDscp see on page 90 Global and the data packets are not IP packets El100000000482 02 2011 93 QoS Priority 5 2 Port Configuration Port priority Traffic class default setting IEEE 802 1D traffic type NIJA amp B Gd PM gt O Best effort default Background Standard Excellent effort business critical Controlled load streaming multimedia Video lt 100 ms of latency and jitter Voice lt 10 ms of latency and jitter Network control reserved traffic WI WIM INM gt O O Table 30 Assigning the port priority to the 4 traffic classes 5 2 2 Selecting the trust mode The device provides 3 options for selecting how it handles received data packets that contain priority information Click once on a cell in the Trust mode column to select one of the 3 options 94 untrusted The device ignores the priority information in the packet and always assigns the packets the port priority of the receiving port
11. RSTP achieves average reconfiguration times of less than a second When you use RSTP in a ring topology with 10 to 20 devices you can even achieve reconfiguration times in the order of milliseconds El100000000482 02 2011 126 Redundancy 6 4 Spanning Tree Note RSTP reduces a layer 2 network topology with redundant paths into a tree structure Spanning Tree that does not contain any more redundant paths One of the Switches takes over the role of the root bridge here The maximum number of devices permitted in an active branch from the root bridge to the tip of the branch is specified by the variable Max Age for the current root bridge The preset value for Max Age is 20 which can be increased up to 40 If the device working as the root is inoperable and another device takes over its function the Max Age setting of the new root bridge determines the maximum number of devices allowed in a branch Note You have the option of coupling RSTP network segments to an MRP Ring For this you activate the MRP compatibility This enables you to operate RSTP via an MRP Ring If the root bridge is within the MRP Ring the devices in the MRP Ring count as a single device when calculating the length of the branch A device that is connected to a random Ring bridge receives such RSTP information as if it were directly connected to the root bridge Note The RSTP standard dictates that all the devices within a network work with the Rapid Spann
12. Topology changes Time since last change Spanning Tree topology information If the local device is currently the root bridge Selected not the device displays this box as selected and selected otherwise as empty The port of the device from which the current Valid port ID or 0 path leads to the root bridge 0 the local bridge is the root Path costs from the root port of the device to 0 200 000 000 the current root bridge of the entire layer 2 network 0 the local bridge is the root Counts how often the device has put a port into the Forwarding status via Spanning Tree since it was started Time since the last topology change Table 56 Dual RSTP settings topology information Dual RSTP Ring Ports You define the Dual RSTP Ring ports in the Dual RSTP Primary Ring and Dual RSTP Secondary Ring frames El100000000482 02 2011 141 Redundancy Parameter Frame Dual RSTP Primary Ring Inner Port Outer Port Meaning Note On the ports of the Dual RSTP Primary Ring exclude a combination with the following redundancy procedures and settings Sub Ring Network Ring coupling For details of how you can configure this exclusion with maximum protocol inter operability see on page 147 Port Note Only use Dual RSTP together with one of the following redundancy procedures if both ports of the Dual RSTP Primary Ring are identical to the ring ports of the other redundancy pr
13. a Figure 32 Sub Ring basic configuration El100000000482 02 2011 Default Sett 0 00 00 00 00 00 ing 00 255 255 255 255 255 255 255 255 255 255 255 255 255 255 255 255 standardMR P 117 Redundancy 6 2 2 Sub Ring New Entry Parameter Meaning Sub Ring ID Module Por ID of the port that connects the device to t Name SRM Mode VLAN MRP Domain Unique name for this Sub Ring the Sub Ring Optional name for the Sub Ring Target state Define whether this SRM is to manage the redundant connection Redundant Manager mode or not If you have set the same value for the SRM Mode for both SRMs the SRM with the higher MAC address assumes the function of redundant manager SingleManager describes the special state when you connect a Sub Ring via 2 ports of a single device In this case the port with the higher port number manages the redundant connection VLAN to which this Sub Ring is assigned If no VLAN exists under the VLAN ID entered the device automatically creates it If you do not want to use a separate VLAN for this Sub Ring you leave the entry as 0 Assign the same MRP domain name to all the members of a Sub Ring If you are only using Schneider Electric devices you can use the default value for the MRP domain otherwise adjust it if necessary With multiple Sub Rings all the Sub Rings can use the same MRP domain name Ta
14. and calculates the IEEE 1588 SNTP time using the local time difference IEEE 1588 SNTP time System time Local offset The Local Offset is for displaying entering the time difference between the local time and the IEEE 1588 SNTP time L With Set offset from PC the device determines the time zone on your PC and uses it to calculate the local time difference Note When setting the time in zones with summer and winter times make an adjustment for the local offset if applicable The device can also get the SNTP server IP address and the local offset from a DHCP server El100000000482 02 2011 51 Time Interaction of PTP and SNTP According to PTP IEEE 1588 and SNTP both protocols can exist in parallel in the same network However since both protocols affect the system time of the device situations may occur in which the two protocols compete with each other The PTP reference clock gets its time either via SNTP or from its own clock All other clocks favor the PTP time as the source lov 14 2007 3 36 53 PM Time Source local 7 Local offset min 60 Set Offset from Pe Set Reload Help Figure 16 Time Dialog EIO0000000482 02 2011 52 Time 3 1 SNTP configuration 3 1 SNTP configuration The Simple Network Time Protocol SNTP enables you to synchronize the system time in your network The device supports the SNTP client and the SNTP server function The SNTP serv
15. over this value Otherwise the local device uses the value of the root bridge in the Root column on the right Sets the Forward Delay parameter In the previous STP protocol the Forward Delay parameter was used to delay the status change between the statuses disabled discarding learning forwarding Since the introduction of RSTP this parameter has a subordinate role because the RSTP bridges negotiate the status change without any specified delay If the local device is the root the other devices in the entire network take over this value Otherwise the local device uses the value of the root bridge in the Root column on the right Sets the Max Age parameter In the previous STP protocol the Max Age parameter was used to specify the validity of STP BPDUs in seconds For RSTP Max Age signifies the maximum permissible branch length number of devices to the root bridge If the local device is the root the other devices in the entire network take over this value Otherwise the local device uses the value of the root bridge in the Root column on the right 6 4 Spanning Tree Possible Values Default Setting 0 lt n 4096 lt 32 768 61440 1 2 2 4 30s 15s See the note following this table 6 40s 20s See the note following this table Table 49 Global Spanning Tree settings local bridge parameters El100000000482 02 2011 131 Redundancy 6 4 Spanning Tree Parameter Tx Hol
16. you can activate the automatic selection of the the operating mode Autonegotiation and the automatic assigning of the connections Auto cable crossing of a TP port by selecting the appropriate field After the autonegotiation has been switched on it takes a few seconds for the operating mode to be set In the Manual Configuration column you set the operating mode for this port The choice of operating modes depends on the media module The possible operating modes are 10 Mbit s half duplex HDX 10 Mbit s full duplex FDX 100 Mbit s half duplex HDX 100 Mbit s full duplex FDX 1000 Mbit s half duplex HDX 1000 Mbit s full duplex FDX The Link Current Operating Mode column displays the current operating mode and thereby also an existing connection In the Cable Crossing Auto Conf off column you assign the connections of a TP port if Automatic Configuration is deactivated for this port The possible settings are enable the device swaps the send and receive line pairs of the TP cable for this port MDIX disable the device does not swap the send and receive line pairs of the TP cable for this port MDI unsupported the port does not support this function optical port TP SFP port In the Flow Control column you checkmark this port to specify that flow control is active here You also activate the global Flow Control switch see on page 60 Switching Gl
17. 6 Canceling a configuration change 36 Function If the function is activated and the connection to the device is interrupted for longer than the time specified in the field Period to undo while connection is lost s the device then loads the last configuration saved LI Activate the function before you configure the device so that you will then be reconnected if an incorrect configuration interrupts your connection to the device O Enter the Period to undo while the connection is lost s in seconds Possible values 10 600 seconds Default setting 600 seconds Note Deactivate the function after you have successfully saved the configuration so that the device does not reload the configuration after you close the web interface Watchdog IP address Watchdog IP address shows you the IP address of the PC from which you have activated the watchdog function The device monitors the link to the PC with this IP address checking for interruptions El100000000482 02 2011 Basic Settings 1 6 Restart 1 6 Restart With this dialog you can initiate a cold start of the device The device reloads the software from the non volatile memory restarts and performs a self test In your browser click on Reload so that you can access the device again after it is booted initiate a warm start of the device In this case the device checks the software in the volatile memory and restarts If a warm start is not p
18. 635 559 64808 0 0 0 2365 3984 Reload Help lo Figure 41 Port statistics table El100000000482 02 2011 164 Diagnostics 7 3 Ports 7 3 2 Utilization This table displays the network load of the individual ports In the Upper Threshold column you enter the upper threshold value for network load If this threshold value is exceeded the device sets a check mark in the Alarm field In the Lower Threshold column you enter the lower threshold value for network load If the current load falls below this threshold value the device removes the check mark previously set Module Port Utilization Upper Threshold Lower Threshold 1 0 00 0 00 1 ooj F 1 o oo 0 00 ooo FT 1 3 0 00 0 00 oo TF 1 0 00 ooo T 0 00 oo F 0 00 ooo T 0 00 ooo F _ 0 00 oo A 0 00 oo EF 0 00 ooj F Set Reload Help Figure 42 Network load dialog EIO0000000482 02 2011 165 Diagnostics 7 3 Ports 7 3 3 SFP modules The SFP status display allows you to look at the current SFP module connections and their properties The properties include Parameter Module Port Module type Supported Temperature in Celsius Tx Power in mW Rx Power in mW Receiver power status Meaning Module of the device on which the port is located Port to which this entry applies Type of SFP module e g M SFP SX LC
19. Cout ho MRP Compatibility L BPDU Guard E Set Reload Help Figure 35 Dialog Spanning Tree Global EIO0000000482 02 2011 134 Redundancy 6 4 Spanning Tree 6 4 2 Dual RSTP TCSESM E With this dialog you can activate deactivate Dual RSTP display bridge related information on Dual RSTP configure bridge related parameters of Dual RSTP set bridge related additional functions display the parameters of the root bridge and display bridge related topology information configure the coupling ports for the primary and secondary Dual RSTP instances rings configure the Dual RSTP coupling and display coupling information Note Exclude the use of Dual RSTP in combination with the following redundancy procedures and settings RSTP in the MRP compatibility mode RSTP over MRP Note On the ports of the Dual RSTP Primary Ring exclude a combination with the following redundancy procedures and settings Sub Ring Network Ring coupling For details of how you can configure this exclusion with maximum protocol inter operability see on page 147 Port Note Only use Dual RSTP together with one of the following redundancy procedures if both ports of the Dual RSTP Primary Ring are identical to the ring ports of the other redundancy procedure HIPER Ring MRP Ring Fast HIPER Ring Note On the ports of the Dual RSTP Secondary Ring exclude a combination with other redundancy procedures and settings El100000000482 0
20. Interval lt Group Membership Interval If you enter values that contradict this relationship the device then replaces these values with a default value or with the last valid values EIO0000000482 02 2011 71 Switching Parameter Protocol Value range Version Max Response Time 1 2 1 25 seconds 3 1 3 598 seconds Send Interval 1 2 3 2 3 599 seconds Group Membership Interval 1 2 3 3 3 600 seconds Table 16 Value range for 72 Max Response Time Send Interval Group Membership Interval 4 4 Multicasts Default setting 10 seconds 125 seconds 260 seconds For Send Interval and Max Response Time select a large value if you want to reduce the load on your network and can accept the resulting longer switching times selecta small value if you require short switching times and can accept the resulting network load Multicasts In this frame you specify how the device transmits packets with unknown MAC IP Multicast address not learned with IGMP Snooping known MAC IP Multicast address learned with IGMP Snooping Prerequisite The IGMP Snooping function is activated globally El100000000482 02 2011 Switching Parameter Unknown Multicasts Known Multicasts Meaning Send to Query Ports The device sends the packets with an unknown MAC IP Multicast address to all query ports Send to All Ports The device sends the packets with an unknown MAC IP Multicast address to all
21. Prerequisite The IGMP Snooping function is activated globally 70 El100000000482 02 2011 Switching Parameter IGMP Querier IGMP Querier enabled Protocol Version 4 4 Multicasts Meaning Value range Default setting Switch query function on off on off off Select IGMP version 1 2 or 3 1 2 3 2 Enter the interval at which the switch 2 3599 s 125s Send Interval sends query packets All IGMP capable terminal devices respond to a query with a report message IGMP settings Display the IP address of the router Current querier IP address switch that contains the query function Enter the time within which the Protocol Version 10s Max Response Time Multicast group members respond toa 1 2 1 25 s query 3 1 3598 s The Multicast group members select random values within the response time for their response so that all the Multicast group members do not respond to the query at the same time Enter the period for which a dynamic 3 3600 s 260 s Group Membership Interval Multicast group remains entered in the device if it does not receive any report messages Table 15 IGMP Querier and IGMP settings a Note the connection between the parameters Max Response Time Send Interval and Group Membership Interval see table 16 The parameters Max Response Time Send Interval and Group Membership Interval have a relationship to each other Max Response Time lt Send
22. Querier IGMP Einstellungen aP Ei E Aktuelle Querier IP Adresse 0 0 0 0 C an Aus Protokoll Version C1 2 C3 Max Response Time s fi oO Sende Intervall s fi 25 Group Membership Intervall s 260 Multicasts T T Unbekannte Multicasts C An Query Ports senden An alle Ports senden C Verwerfen Bekannte Multicasts C An Query und registrierte Ports senden An registrierte Ports senden IGMP IGMP Statischer Gelernter Port IGMP an Forw Automatic Query Query All Query Port Port Port i M m E disable D 2 Vv mj E disable E 3 M C E disable D 4 M m L disable 1 M O E disable i 2 M O E disable E 3 M m fa disable E 4 v O0 E disable D 1 M m fa disable L 3 2 M O E disable Schreiben Laden Hite Figure 22 IGMP Snooping dialog Operation In this frame you can EIO0000000482 02 2011 69 Switching 4 4 Multicasts activate deactivate the IGMP Snooping protocol Parameter Meaning Value range Default setting Function Activate deactivate IGMP Snooping On Off off globally for the device If IGMP Snooping is switched off the device does not evaluate Query and Report packets received and it sends floods received data packets with a Multicast address as the destination address to all ports Table 14 IGMP Snooping global function IGMP Querier and IGMP Settings With these frames you can enter global settings for the IGMP settings and the IGMP Querier function
23. Rate Autonegotiation Port Setting Duplex Automatic Configuration Mode Optical all off on full TX 100 Mbit s off on full TX 1000 Mbit s on on Table 34 Port Settings for Ring Ports A WARNING RING LOOP HAZARD To avoid loops during the configuration phase configure all the devices of the HIPER Ring individually Before you connect the redundant line you must complete the configuration of all the devices of the HIPER Ring Failure to follow these instructions can result in death serious injury or equipment damage Note As an alternative to using software to configure the HIPER Ring with device TCSESM you can also use DIP switches to enter a number of settings on the devices You can also use a DIP switch to enter a setting for whether the configuration via DIP switch or the configuration via software has priority The state on delivery is Software Configuration You will find details on the DIP switches in the Installation user manual El100000000482 02 2011 104 Redundancy Parameter 6 1 Ring Redundancy Meaning Ring port X X operation Display in Operation field Redundancy Manager Mode Ring Manager Ring Recovery Information active This port is switched on and has a link inactive This port is switched off or it has no link If there is exactly one device you switch the Ring Manager function on at the ends of the line The settings in the Ring Recovery frame are only e
24. Select configuration Note These devices have a DIP switch with which you can choose between the software configuration and the DIP switch configuration You can find details on the DIP switches in the User Manual Installation Software switch In the Redundancy Ring Network Coupling dialog Table 43 Setting the STAND BY switch El100000000482 02 2011 121 Redundancy 6 3 Ring Network Coupling Select Configuration Lo Lo EI STANDBY C STAND BY Select Port 4 RHA Bd rages reg s fe 48 Module Port Coupling port A 7 4 Port mode fcii e Port state fect e Partner coupling port Port mode fitar d b Port state fnot connecte IP Address 0 0 0 0 Operation Information Redundancy Mode Coupling Mode C On I7 Redundancy existing C Redundant Ring Network Coupling Ring Coupling off I Configuration failure Extended Redundancy Network Coupling Help Figure 34 Software configuration of the STAND BY switch TCSESM E Depending on the STAND BY DIP switch position the dialog displays those configurations that are not possible as grayed out If you want to select one of these grayed out configurations change the STAND BY DIP switch on the device to the other position One Switch coupling On the device set the STAND BY dip switch to the ON position or use the software configuration to assign the redundancy function to it Two Switc
25. Sub Ring basic configuration 116 6 2 Sub Ring TCSESM E Possible Default Setting Values on off off All available ports that do not already belong to the ring redundancy of the base ring in the form X X module port Manager Manager RedundantMan ager SingleManager Manager Manager RedundantMan ager SingleManager forwarding disabled blocked not connected El100000000482 02 2011 Redundancy 6 2 Sub Ring TCSESM E Parameter Meaning Possible Values VLAN VLAN to which this Sub Ring is assigned If no Corresponds to VLAN exists under the VLAN ID entered the the entries in device automatically creates it If you do not the VLAN want to use a separate VLAN for this Sub dialog Ring you leave the entry as 0 Partner MAC Shows the MAC address of the Sub Ring Valid MAC Manager at the other end of the Sub Ring address MRP Domain Assign the same MRP domain name to all the All permitted members of a Sub Ring If you are only using MRP domain Schneider Electric devices you can use the names default value for the MRP domain otherwise adjust it if necessary With multiple Sub Rings all the Sub Rings can use the same MRP domain name Protocol standardMRP Table 40 Sub Ring basic configuration Max Table Entries fi Sub Ring Function configuration SRM Mode VLAN ID on off ai r aae oloo 00 00 00 Partner MAC manager Set Reload New Delete entry Help
26. Trap if the device is to create a trap as soon as the position of a signal contact changes when function monitoring is active EIO0000000482 02 2011 176 Diagnostics 7 7 Signal contact Figure 47 Signal contact dialog E100000000482 02 2011 177 Diagnostics 7 8 Alarms Traps 7 8 Alarms Traps This dialog allows you to determine which events trigger an alarm trap and where these alarms should be sent Select Create entry In the Address column enter the IP address of the management station to which the traps should be sent account when traps are sent In the column Password enter the community name that the device uses to identify itself as the trap s source O O L In the Enabled column you mark the entries which should be taken into O O In the Selection frame select the trap categories from which you want to send traps The events which can be selected are Name Authentication Link Up Down Spanning Tree Chassis Redundancy Port security Meaning The device has rejected an unauthorized access attempt see on page 43 SNMPv1 v2 Access Settings At one port of the device the link to another device has been established interrupted The topology of the Rapid Spanning Tree has changed Summarizes the following events The status of a supply voltage has changed see the System dialog The status of the signal contact has changed T
27. Trip Delay round trip delay in us for test packets measured by ring manager The display begins with 100 us in steps of 100 us Values of 1000 us and greater indicate that the ring may become unstable In this case check that the number of devices in the Switches frame is correct see below If you have configured VLANs you select VLAN ID 0 here if you do not want to assign the Fast HIPER Ring configuration to a VLAN Note the VLAN configuration of the ring ports Select for VLAN ID 1 and VLAN membership vu in the static VLAN table for the ring ports VLAN ID gt 0 if you want to assign the Fast HIPER Ring configuration to this VLAN Select the same VLAN ID in the Fast HIPER Ring configuration for all devices in this ring Note the VLAN configuration of the ring ports For all ring ports in this Fast HIPER Ring select this corresponding VLAN ID and the VLAN membership T in the static VLAN table Enter the number of devices integrated in this Fast HIPER Ring This entry is used to optimize the reconfiguration time and the stability of the ring If the device is a ring manager The displays in this frame mean Redundancy working When a component of the ring is down the redundant line takes over its function Configuration failure You have configured the function incorrectly or there is no ring port connection Table 39 Fast HIPER Ring configuration 112 El100000000482 02 2011 Redundancy 6 1 Ring Re
28. based interface you need a Web browser a program that can read hypertext for example Mozilla Firefox version 1 or later or Microsoft Internet Explorer version 6 or later Note The Web based interface uses Java software 6 Java Runtime Environment Version 1 6 x Install the software from the enclosed CD ROM To do this you go to the ConneXium directory on the CD ROM open the Java directory and start the installation program Schneider Electric ConneXium Resource CD T A ne Thank you for purchasing a Con i tion necessa the informatic 4 ConneXium Ls sA gt Install ConneXium Configuration Software Ree gt Documentation Chinese Deutsch English Espanol Francais Italiano Figure 1 Installing Java O Start your Web browser LI Make sure that you have activated JavaScript and Java in the security settings of your browser El100000000482 02 2011 15 Opening the Web based Interface C Establish the connection by entering the IP address of the device which you want to administer via the Web based management in the address field of the Web browser Enter the address in the following form http XXX XXX XXX XXX The login window appears on the screen Note Most properties of the TCSESM and TCSESM E devices are identical The supplement TCSESM E indicates a difference between the TCSESM E and the TCSESM Schneider IMn Aa ss eae E EEEE Electric TCSESM E
29. device debug notice logs of SNMP Get creates the event SNMP Get Request informational Requests received for the list of the syslog notice warning servers error critical alert emergency Table 63 Syslog and SNMP Logging settings Log SNMP Creates events for the syslog for SNMP active inactive Set Requests Set requests with the specified level to inactive report Level to Report for Specifies the level for which the device debug notice logs of SNMP Set creates the event SNMP Set Request informational Requests received for the list of the syslog notice warning servers error critical alert emergency El100000000482 02 2011 159 Diagnostics 7 1 Syslog Parameter Meaning Possible Values Default Setting Syslog server entries Index Sequential number of the syslog server 1 8 entry in the table When you delete an entry this leaves a gap in the numbering When you create a new entry the device fills the first gap IP address Address of a syslog server to which the Valid IPv4 address 0 0 0 0 device sends its log entries Port UDP port at which your syslog server 1 65 535 514 receives entries Minimum level to Minimum level to report for an event for debug critical report the device to sent alog entry for itto this informational syslog server notice warning error critical alert emergency Active Activate or deactivate the current active box active syslog server entry in
30. is entered If you have entered a router interface as the allowed IP address all the packets sent from this interface are considered allowed since they contain the same MAC source address If a connected device sends packets with the allowed IP address but a different MAC address it will not be allowed by the Switch If you exchange the device with the allowed IP address for a different one with the same IP address enter the IP address in the Switch again so that the Switch learns the new MAC address 50 El100000000482 02 2011 Time 3 Time With this dialog you can enter time related settings independently of the time synchronization protocol selected The IEEE SNTP time displays the time with reference to Universal Time Coordinated UTC The time displayed is the same worldwide Local time differences are not taken into account The System time uses the IEEE 1588 SNTP time allowing for the local time difference from IEEE 1588 SNTP time System time IEEE 1588 SNTP time Local offset Time source displays the source of the following time data The device automatically selects the source with the greatest accuracy Possible sources are local and sntp The source is initially Local If SNTP is activated and if the device receives a valid SNTP packet the device sets its time source to sntp L With Set time from PC the device takes the PC time as the system time
31. mac address table show mac filter table igmpsnooping Table 69 Files in switch dump archive Format Comments HTML HTML Text Binary Script Binary HTML Text a Prerequisite a Telnet connection is available b Prerequisite you are logged in as a user with write access El100000000482 02 2011 181 Diagnostics 7 9 Report 10 10 Report The following reports are available for the diagnostics P Log file The log file is an HTML file in which the device writes important device internal events gt System information The system information is an HTML file containing system relevant data Download Switch Dump Download JAR File Figure 49 Report dialog EIO0000000482 02 2011 182 Diagnostics 7 10 IP address conflict detection 7 10 IP address conflict detection This dialog allows you to detect address conflicts the device is having with its own IP address and rectify them Address Conflict Detection ACD O Select IP address conflict detection on off under Status or select the mode see table 70 Mode enable disable activeDetectionOnly passiveOnly Meaning Enables active and passive detection Disables the function Enables active detection only After connecting to a network or after an IP address has been configured the device immediately checks whether its IP address already exists within the network If the IP address already exists the device will return to the
32. multiple Sub Rings can use the same VLAN El100000000482 02 2011 114 Redundancy 6 2 Sub Ring TCSESM E or the devices of the primary ring including the Sub Ring Managers primary ring ports in a separate VLAN This reduces the configuration effort when coupling multiple Sub Rings to a primary ring Note In the Sub Ring you configure the devices with the Sub Ring Manager functions switched off as participants of an MRP Ring see on page 108 Configuring the MRP Ring This means Define different VLAN membership for the primary ring and the Sub Ring even if the primary ring uses the MRP protocol e g VLAN ID 1 for the primary ring and VLAN ID 2 for the Sub Ring Switch the MRP Ring function on for all devices Switch the Ring Manager function off for all devices Switch RSTP off for the MRP Ring ports used in the Sub Ring Assign the same MRP domain ID to all devices If you are only using Schneider Electric SA devices you do not have to change the default value for the MRP domain ID Note Use the Command Line Interface CLI to assign devices without the Sub Ring Manager function a different MRP domain name For further information see the Command Line Interface reference manual 6 2 1 Sub Ring configuration Parameter Meaning Possible Values Max Number of Sub Rings that can be managed by 4 Table Entries a Sub Ring Manager at the same time Sub Ring ID Unique name for this Sub Ring Table 40 Sub Ri
33. port is connected to a bridge After a link is set up the port then goes through the STP statuses first before taking on the forwarding status if applicable inactive box empty This setting applies to all MSTIs Table 61 Port related STP settings and displays CIST El100000000482 02 2011 149 Redundancy 6 4 Spanning Tree Parameter Meaning Possible Values Default Setting Auto Edge Port The device only considers the Auto active box selected active Edge Port setting when the Admin inactive box empty Edge Port parameter is deactivated If Auto Edge Port is active after a link is set up the device sets the port to the forwarding status after 1 5 Hello Time in the default setting 3 s If Auto Edge Port is deactivated the device waits for the Max Age instead in the default setting 20 s This setting applies to all MSTIs Oper Edge Port The device sets Oper Edge Port true false read only condition to t rue if no STP BPDUs have been received i e a terminal device is connected It sets the state to false if STP BPDUs have been received i e a bridge is connected This condition applies to all MSTIs Actual point to The device sets the Actual point to true false point read only point condition to t rue if this port s l has a full duplex condition to an STP The device determines this device Otherwise it sets the condition from the duplex condition to false e g if a hub is o conne
34. server LI With Option 82 a DHCP relay agent which receives a DHCP request adds an Option 82 field to the request as long as the request received does not already have such a field When the function is switched off the device will forward attached Option 82 fields but it will not add any on Under Type you specify the format in which the device recognition of this device is entered in the Option 82 field by the DHCP relay agent The options are IP address MAC Address state on delivery System name client ID Other freely definable ID which you can specify in the following rows Remote ID entry for DHCP server shows you the value which you enter when configuring your DHCP server Type display shows the device recognition in the selected form The Circuit ID column shows you the value which you enter when configuring your DHCP server The Circuit ID contains the port number and the ID of the VLAN from which the DHCP has been received Example of a configuration of your DHCP server Type mac DHCP server for Remote ID entry 00 06 00 80 63 00 06 1E Circuit ID B3 06 00 00 01 00 01 01 This results in the entry for the Hardware address in the DHCP server B306000001000101000600806300061E LI In the Option 82 on column you can switch this function on off for each port L In the Schneider Electric Device column you mark the ports to which a Schne
35. status is not monitored in the state on delivery Monitor ignore the ring redundancy for the HIPER Ring only in ring manager operation On delivery ring redundancy is not monitored Note If the device is a normal ring member and not a ring manager it doesn t report anything for the HIPER Ring for the Fast HIPER Ring and for MRP it only reports detected errors in the local configuration Monitor ignore the redundant coupling operation On delivery no monitoring of the redundant coupling is set For two Switch coupling with control line the slave additionally reports the following conditions Incorrect link status of the control line Partner device is also a slave in standby mode Note In two Switch coupling both Switches must have found their respective partners Table 67 Device Status a The configurations are non matching if only one file exists or the two files do not have the same content L Select Generate Trap in the Trap Configuration field to activate the sending of a trap if the device state changes 172 El100000000482 02 2011 Diagnostics 7 6 Device Status Note With a non redundant voltage supply the device reports the absence of a supply voltage If you do not want this message to be displayed feed the supply voltage over both inputs or switch off the monitoring See on page 174 Signal contact El100000000482 02 2011 173 Diagnostics 7 7 Signal contact 7
36. te 0 Login user v Passwort EE deutsch Figure 2 Login window CI Select the desired language LI In the drop down menu Login you select user to have read access or admin to have read and write access EIO0000000482 02 2011 16 Opening the Web based Interface to the device O The password public with which you have read access for the login user is preset in the password field If you wish to have write access to the device use the login admin select the contents of the password field and overwrite it with the password private default setting O Click on OK The website of the device appears on the screen Note The changes you make in the dialogs will be copied to the device when you click Set Click Reload to update the display To save any changes made so that they will be retained after a power cycle or reboot of the device use the save option on the Load Save dialog see page 31 Note If you enter an incorrect configuration you may block access to your device Activating the function Cancel configuration change in the Load Save dialog enables you to return automatically to the last configuration after a set time period has elapsed This gives you back your access to the device El100000000482 02 2011 17 Opening the Web based Interface Schneider hie dikes o eae Geer P Electric E Basic Settings System Sara i Syste
37. the device model the Ring Redundancy dialog allows you to Select one of the available Ring Redundancy versions or change it Display an overview of the current Ring Redundancy configuration Create new Ring Redundancies Configure existing Ring Redundancies Enable disable the Ring Manager function Receive Ring information Delete the Ring Redundancy El100000000482 02 2011 102 Redundancy 6 1 Ring Redundancy Note Enabled Ring Redundancy methods on a device are mutually exclusive at any one time When changing to another Ring Redundancy method deactivate the function for the time being Parameter Meaning Version Select the Ring Redundancy version you want to use H P ER Ri MRP FAST HIP Default setting is HIPER Ring Ring port No In a ring every device has 2 neighbors Define 2 ports as ring ports to which the neighboring devices are connected Module Module identifier of the ports used as ring ports Port Port identifier of the ports used as ring ports Operation Value depends on the Ring Redundancy version used Described in the following sections for the corresponding Ring Redundancy version Ng ER Ring TCSESM E Table 33 Ring Redundancy basic configuration El100000000482 02 2011 103 Redundancy 6 1 Ring Redundancy 6 1 1 Configuring the HIPER Ring For the ring ports select the following basic settings in the Basic Settings Port Configuration dialog Port Type Bit
38. the port role If the Loop Guard setting is inactive however the device sets the port to the forwarding status when STP BPDUs have not been received Note The Root Guard and Loop Guard settings are mutually exclusive If you activate one setting when the other is already active the device switches off the other one Loop Status Display the status of the Loop Status true false read only The device sets the loop status of the port to true if the Loop Guard setting is active at the port and the port is not receiving any more STP BPDUs Here the device leaves the port in the discarding transmission status to help prevent a potential loop When the port receives STP BPDUs again the device resets the loop status to false Transitions to Counts how often the device has set the port O 4 294 967 295 0 Loop Status to the loop status Loop Status column 232 1 read only true Table 62 Port related STP settings and displays guards EIO0000000482 02 2011 153 Redundancy 6 4 Spanning Tree Parameter Meaning Possible Values Default Setting Transitions Counts how often the device has set the port 0 4 294 967 295 0 from Loop out of the loop status Loop Status column 232 1 Status true BPDU Guard The BPDU Guard Effect status is only true false Effect read relevant for edge ports ports with the Admin only Edge Port status t rue and only if the BPDU Guard
39. you to additionally send to one or more syslog servers the events that the device writes to its event log You can switch the function on or off and you can manage a list of up to 8 syslog server entries You also have the option to specify that the device informs various syslog servers depending on the minimum level to report of the event Additionally you can also send the SNMP requests to the device as events to one or more syslog servers Here you have the option of treating GET and SET requests separately and of assigning a level to report to the requests to be logged Note You will find the actual events that the device has logged in the Event Log dialog see on page 163 Event Log and in the log file see on page 180 Report a HTML page with the title Event Log The device evaluates SNMP requests as events if you have activated Log SNMP Set Get Request see table 64 El100000000482 02 2011 158 Diagnostics 7 1 Syslog Parameter Meaning Possible Values Default Setting Frame Switches the syslog function for this On Off Function device On or Off Off Frame SNMP Settings for sending SNMP requests to Logging the device as events to the list of syslog servers Log SNMP Creates events for the syslog for SNMP active inactive Get Requests Get requests with the specified level to inactive report Level to Report for Specifies the level for which the
40. 00482 02 2011 125 Redundancy 6 4 Spanning Tree 6 4 Spanning Tree Under Spanning Tree you will find the dialogs and views for configuring and monitoring the Spanning Tree function in accordance with the IEEE 802 1w Rapid Spanning Tree RSTP standard and also the Dual RSTP function Note The Spanning Tree Protocol is a protocol for MAC bridges For this reason the following description uses the term bridge for Switch Introduction Local networks are getting bigger and bigger This applies to both the geographical expansion and the number of network participants Therefore it is advantageous to use multiple bridges for example to reduce the network load in sub areas to set up redundant connections and to overcome distance limitations However using multiple bridges with multiple redundant connections between the subnetworks can lead to loops and thus loss of communication across of the network In order to help avoid this you can use Spanning Tree Spanning Tree enables loop free switching through the systematic deactivation of redundant connections Redundancy enables the systematic reactivation of individual connections as needed Rapid Spanning Tree Protocol RSTP RSTP is a further development of the Spanning Tree Protocol STP and is compatible with it If a connection or a bridge becomes inoperable the STP required a maximum of 30 seconds to reconfigure This is no longer acceptable in time sensitive applications
41. 011 167 Diagnostics 7 4 Topology Discovery When devices both with and without an active topology discovery function are connected to a port the topology table hides the devices without active topology discovery If only devices without active topology discovery are connected to a port the table will contain one line for this port to represent all devices This line contains the number of connected devices MAC addresses of devices that the topology table hides for the sake of clarity are located in the address table FDB see page 64 Filters for MAC addresses E100000000482 02 2011 168 Diagnostics 7 5 Port Mirroring 7 5 Port Mirroring The port mirroring function enables you to review the data traffic at up to 8 ports of the device for diagnostic purposes The device additionally forwards mirrors the data for these ports to another port This process is also called port mirroring The ports to be reviewed are known as source ports The port to which the data to be reviewed is copied is called the destination port You can only use physical ports as source or destination ports In port mirroring the device copies valid incoming and outgoing data packets of the source port to the destination port The device does not affect the data traffic at the source ports during port mirroring A management tool connected at the destination port e g an RMON probe can thus monitor the data traffic of the source ports in the
42. 2 2011 135 Redundancy 6 4 Spanning Tree Note If you configure Dual RSTP in a network and the configuration is still incomplete it is possible that the devices will temporarily not provide any connection between the Secondary and Primary Rings In this case the management of the Dual RSTP bridges cannot be reached from the Secondary Ring During this configuration phase connect your administration PC to the Primary Ring Note Only those ports of a Dual RSTP Bridge that are configured as the secondary ring s outer or inner ring ports belong to the secondary RSTP instance All other ports belong to the Dual RSTP Bridge s primary instance A WARNING DUAL RSTP LOOP HAZARD Configure all the devices of the Dual RSTP configuration individually Before you connect the redundant lines you must complete the configuration of all the devices of the Dual RSTP configuration Configure the timeout in the Dual RSTP coupling configuration longer than the longest assumable interruption time for the faster instance of the redundancy protocol In a topology with 2 coupling bridges configure the coupling roles of the two devices only as Master Slave or Auto Couple the primary and the secondary instance only by means of 1 Dual RSTP Bridge for a topology with 1 Dual RSTP Bridge or by means of 2 Dual RSTP Bridges for a topology with 2 Dual RSTP Bridges Keep all ports of the primary instance separated from all ports of all secondary in
43. 5 Set 17 SFP Module source for alarms 178 SFP Modules 166 SFP status display 166 Shared VLAN 80 Signal contact 174 Signal contact source for alarm 178 SNMP logging 158 SNMPv1 v2 access settings 43 SNMPv3 access password 40 SNTP 53 SNTP Broadcast 54 SNTP client 53 SNTP server 53 Software update 26 Spanning Tree 126 Statistics table 164 STP 126 Sub Ring New Entry dialog 118 Sub Ring configuration 115 Supply voltage 178 Switching 59 Switching Global Dialog 60 Symbol 13 Syslog 158 System time 54 T Telnet Access 46 Temperature device 21 Temperature SFPs 166 Time 51 Time management 57 Timestamp unit 57 Topology 167 ToS 89 Trap 178 EIO0000000482 02 2011 Index Trust mode 90 94 TrustDot1p global trust mode 91 94 TrustlpDscp 91 95 TrustlpDscp global trust mode 91 94 Two switch coupling 122 Two Switch coupling with control line 122 TX Hold Count 132 140 Type of Service 89 U Untrusted global trust mode 90 94 Untrusted traffic class 95 V VLAN 78 VLAN HIPER Ring settings 106 VLAN and GOOSE Protocol 79 VLAN and redundancy rings 86 VLAN Global dialog 78 VLAN ID network parameter of the device 24 VLAN Mapping 89 VLAN mode 80 VLAN Port dialog 85 VLAN priority 89 VLAN priority 90 VLAN Static dialog 83 W Web Access 46 Web based interface 15 Web based management 16 Website 17 Write access 17 El100000000482 02 2011 203 Index El100000000482 02 2011 204
44. 7 Signal contact The signal contacts are used for controlling external devices by manually setting the signal contacts monitoring the functions of the device reporting the device state of the device 7 1 Manual setting Select the tab page Alarm 1 or Alarm 2 for devices with two signal contacts In the Signal contact mode field you select the Manual setting mode With this mode you can control this signal contact remotely Select Opened in the Manual setting frame to open the contact Select Closed in the Manual setting frame to close the contact Hoa N Application options Simulation of an error during SPS monitoring Remote control of a device via SNMP such as switching on a camera 7 7 2 Function monitoring L Select the tab Signal contact 1 or Signal contact 2 for devices with two signal contacts El100000000482 02 2011 174 Diagnostics 7 7 Signal contact L In the Mode Signal contact box you select the Monitoring correct operation mode In this mode the signal contacts monitor the functions of the device thus enabling remote diagnosis A break in contact is reported via the potential free signal contact relay contact closed circuit Loss of the supply voltage 1 2 either of the external voltage supply or of the internal voltage Select Monitor for the respective power supply if the signal contact shall report the lo
45. 9 N Network load 126 165 Network management station 167 NTP 53 201 Index O One Switch coupling 122 Option 82 189 P Password 17 42 Password for access with Web based interface 40 Password for CLI access 40 Password for SNMPv3 access 40 Per Hop Behavior PHB 98 Port configuration 29 93 Port configuration QoS priority 93 Port Mirroring 169 Port priority 93 93 Port security IP MAC based 48 Port security source for alarms 49 Port State Link 29 Port Statistics 164 Port VLAN ID 85 Ports 164 Precedence 98 Precision Time Protocol 57 Priority Queue 90 PTP 57 Q o QoS Priority 89 R RAM test 185 Rapid Spanning Tree 126 Rapid Spanning Tree Port Protocol 147 Rate Limiter 66 Rate Limiter Settings 66 Read access 17 Reboot 37 Receiver power status 166 Receiver power status source for alarms 178 Redundancy 11 101 Redundancy functions 101 Redundancy Manager 102 Redundant 102 Redundant connections 126 Redundant coupling 85 85 101 135 142 172 Report 180 Request interval SNTP 54 54 Restart 37 Restore default settings 31 Restore state on delivery 31 RFC 195 Ring 102 202 Ring Manager 102 Ring Redundancy 101 Ring Redundancy basic configuration 103 Ring structure 102 Ring Network Coupling 11 101 120 Ring Network coupling 85 101 172 Ring Network coupling source for alarms 178 Ringport 104 RM function 102 RMON probe 169 Root bridge 127 RSTP 126 S Security 39 Self test 18
46. 96 A Accept SNTP Broadcast 54 Acceptable Frame Types 85 Access with Web based interface password 40 ACD 183 Address Conflict Detection 183 Advanced 187 AF 99 Aging Time 60 Alarm 178 Assured Forwarding 99 B BPDU Guard 132 140 Broadcast Limiter Settings 66 C Cable crossing 29 Class Selector 98 CLI 191 CLI access password 40 Clock 57 Cold start after software update 27 Coldstart 37 Command Line Interface 191 Configuring Fast HIPER Ring 111 Configuring the MRP Ring 108 Current VLAN dialog 81 D Device status 171 DHCP Option 82 189 DHCP Relay Agent 188 Diagnose 157 DiffServ 89 DIP switch 104 DSCP 89 Dual RSTP 126 E EAM 31 178 EF 98 EtherNet IP 190 Event log 163 Expedited Forwarding 98 El100000000482 02 2011 F Fast HIPER Ring port VLAN ID 86 Fast HIPER Ring Configuration 111 Filters for MAC addresses 64 Firmware update 26 Forward Delay 131 133 139 141 G General 19 H Hello Time 131 133 138 141 HIPER Ring 11 85 101 135 142 HIPER Ring source for alarms 178 IGMP Querier 70 IGMP settings 70 IGMP Snooping 70 Independent VLAN 80 Ingress Filtering 85 IP DSCP mapping 89 98 IP DSCP value 90 Java Runtime Environment 15 JavaScript 15 L Link State Port 29 LLDP 167 Login 16 M Max Age 131 133 139 141 Message URL http myHostName base system event_log html 180 Message URL http myHostName base system systemInfo html 180 MRP 11 101 MRP Domain 117 118 Multicasts 6
47. EE802 1Q Note When using the Transparent Mode in this way note the following In Transparent mode the devices ignore the port VLAN ID set Set the VLAN membership of the ports of VLAN 1 to u Untagged or T Tagged see on page 83 VLAN Static El100000000482 02 2011 79 Switching Parameter Mode Status Meaning VLAN mode selection Independent VLAN subdivides the forwarding database see on page 64 Filters for MAC addresses virtually into one independent forwarding database per VLAN The device cannot assign data packets with a destination address in another VLAN and so floods it to all ports of the VLAN Application area Setting up identical networks that use the same MAC addresses Shared VLAN uses the same forwarding database for all VLANs see on page 64 Filters for MAC addresses The device cannot assign data packets with a destination address in another VLAN and so only forwards them to the destination port if the receiving port is also a member of the VLAN group of the destination port Application area In the case of overlapping groups the device can distribute directly across VLANs as long as the ports involved belong to a VLAN that can be reached Changes to the mode are only taken over after a warm start see on page 37 Restart is performed on the device and the changes are then displayed in the line below under Status Displays the curr
48. El00000000482 02 ConneXium TCSESM TCSESM E Managed Switch Web based Interface Reference Manual www schneider electric com Schneider E100000000482 02 2011 Contents Contents 1 1 1 2 1 3 1 4 1 5 1 6 2 1 2 2 2 3 2 4 Safety Information About this Manual Key Opening the Web based Interface Basic Settings System Network Software 1 3 1 View the software versions present on the device 1 3 2 TFTP Software Update 1 3 3 HTTP Software Update 1 3 4 Automatic software update by EAM Port Configuration Loading Saving the Configuration Loading the configuration Saving the Configuration URL Deleting a configuration Using the Memory Backup Adaptor EAM Canceling a configuration change Restart A d d d ee On On On On On n QORUN Security Password SNMPv3 access SNMPv1 v2 Access Settings Telnet Web Access 2 3 1 Description of Telnet Access 2 3 2 Description of Web Access Port Security Time EIO0000000482 02 2011 13 15 19 20 24 26 27 27 28 29 31 32 34 34 36 37 39 40 43 46 47 47 48 51 Contents 3 1 3 2 4 1 4 2 4 3 4 4 4 5 5 1 5 2 5 3 5 4 6 1 6 2 6 3 6 4 SNTP configuration PTP IEEE 1588 Switching Switching Global Filters for MAC addresses Rate Limiter 4 3 1 Rate Limiter settings Multicasts 4 4 1 IGMP Internet Group Management Protocol 4 4 2 GMRP GARP Multicast Registration Pro
49. Integrated Software A 5 1 Bouncy Castle Crypto APIs J ava The Legion Of The Bouncy Castle Copyright c 2000 2004 The Legion Of The Bouncy Castle http Awww bouncycastle org Permission is hereby granted free of charge to any person obtaining a copy of this software and associated documentation files the Software to deal in the Software without restriction including without limitation the rights to use copy modify merge publish distribute sublicense and or sell copies of the Software and to permit persons to whom the Software is furnished to do so subject to the following conditions The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software THE SOFTWARE IS PROVIDED AS IS WITHOUT WARRANTY OF ANY KIND EXPRESS OR IMPLIED INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM DAMAGES OR OTHER LIABILITY WHETHER IN AN ACTION OF CONTRACT TORT OR OTHERWISE ARISING FROM OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE E100000000482 02 2011 199 Appendix A 5 Copyright of Integrated Software A 5 2 Broadcom Corporation c Copyright 1999 2007 Broadcom Corporation All Rights Reserved E100000000482 02 2011 200 Index B Index 8 802 1D p mapping
50. OJ OJOJOO OJOJ O Oo O learned i IM OHl OlT Ol oOTOToOToOToOToOToToToTo learned 1 MID O O O O O oO oO oOo oO0 0 CID learne d MICl E ele le lyelelyeyeo yee Oo Oo learned TE TEE Tele le ley e yey ewe Pe pee re learne d OJITMICOJOSOJlOJlOJOJOJ O OJOJ COJO 4 learned 1 Miotfol ol olfololfolrolo m E C C JEA E gt Set Reload Create Help Ok Figure 20 Filter Table dialog 64 EIO0000000482 02 2011 Switching 4 2 Filters for MAC addresses Note For Unicast addresses the device allows you to include one or no ports in a filter entry Do not include any ports if you want to create a discard filter entry Note This filter table allows you to create up to 100 filter entries for Multicast addresses El100000000482 02 2011 65 Switching 4 3 Rate Limiter 4 3 Rate Limiter The device can limit the rate of message traffic during periods of heavy traffic flow Entering a limit rate for each port specifies the amount of traffic the device is permitted to transmit and receive If the data load transmitted at this port exceeds the maximum load entered the device will discard the excess data at this port A global setting enables disables the rate limiter function at all ports Note The limiter functions work exclusively on layer 2 and serve the purpose of limiting the effects of storms of those frame types typically broadcasts that the Switch floods The limiter function ignores any protocol information of high
51. Off On Anycast destination IP address to which the SNTP server of the Valid IPv4 0 0 0 0 address device sends the SNTP packets see address table 10 VLAN ID VLANs to which the device periodically 1 sends SNTP packets Anycast send interval Time interval at which the device sends 1 3 600 120 SNTP packets Disable Server at Enables disables the SNTP server function if On Off Off local time source the status of the time source is local see Time dialog Table 9 Configuration SNTP Server IP destination address Send SNTP packet to 0 0 0 0 Nobody Unicast address 0 0 0 1 223 255 255 254 Unicast address Multicast address 224 0 0 0 239 255 255 254 Multicast address especially 224 0 1 1 NTP address 255 255 255 255 Broadcast address Table 10 Destination address classes for SNTP and NTP packets El100000000482 02 2011 55 Time 3 1 SNTP configuration Figure 17 SNTP Dialog 56 E100000000482 02 2011 Time 3 2 PTP IEEE 1588 3 2 PTP IEEE 1588 Precise time management is required for running time critical applications via a LAN The IEEE 1588 standard with the Precision Time Protocol PTP describes a procedure that determines the best master clock in a LAN and thus enables the precise synchronization of all clocks in this LAN For devices without a real time RT module module without timestamp unit enable disable the PTP function in the PTP dialog select PTP mode in the PTP dial
52. SCP values have DSCP names such as be cs0O to cs7 class selector or af11 to af43 assured forwarding and ef expedited forwarding display the maximum number of queues possible per port The device supports 4 priority queues traffic classes in compliance with IEEE 802 1D select the trust mode globally You use this to specify how the device handles received data packets that contain priority information untrusted The device ignores the priority information in the packet and always assigns the packets the port priority of the receiving port 90 El100000000482 02 2011 QoS Priority 5 1 Global trustDot1 p The device prioritizes received packets that contain VLAN tag information according to this information assigning them to a traffic class see 802 1D p mapping The device prioritizes received packets that do not contain any tag information assigning them to a traffic class see Entering the port priority according to the port priority of the receiving port trustlpDscp The device prioritizes received IP packets assigning them to a traffic class see IP DSCP mapping according to their DSCP value The device prioritizes received packets that are not IP packets assigning them to a traffic class see Entering the port priority according to the port priority of the receiving port For received IP packets The device also performs VLAN priority remarking In VLAN pri
53. TP coupling configuration Default Setting 0 0 no port 0 0 no port You configure the coupling of the two rings in the Dual RSTP Coupler Configuration frame El100000000482 02 2011 143 Redundancy 6 4 Spanning Tree Parameter Meaning Possible Values Default Setting Role The configured Dual RSTP role of the master slave master local device for both Dual RSTP instances Note Only configure the single role if you are coupling the instances via 1 bridge as otherwise loops can result Note Only configure the auto role if you are coupling the instances via 2 bridges If both partner bridges are configured as auto the partner bridge that is currently coupling the instances takes the master role and the other bridge takes the slave role Note The configuration of the auto role has the following features Advantage If a partner bridge that had temporarily become inoperable and that was previously the master participates in the protocol again it always remains the slave The protocol thus avoids an unnecessary switching back into the static master role Disadvantage The role distribution is not foreseeable in normal operation but rather depends dynamically on the initialization of the protocol and any failures single auto Table 59 Dual RSTP settings Coupling Configuration 144 El100000000482 02 2011 Redundancy Parameter Meaning 6 4 Spanning Tree Current role r
54. activate the Spanning Tree protocol STP for the ports connected to the redundant ring because the Spanning Tree and the Ring Redundancy work with different reaction times Redundancy Spanning Tree Port Note If you have configured VLANs note the VLAN configuration of the ring ports In the configuration of the HIPER Ring you select for the ring ports VLAN ID 1 and VLAN membership Untagged in the static VLAN table E100000000482 02 2011 106 Redundancy 6 1 Ring Redundancy Note When activating the HIPER Ring function via software or DIP switches the device sets the corresponding settings for the pre defined ring ports in the configuration table transmission rate and mode If you switch off the HIPER Ring function the ports which are changed back into normal ports keep the ring port settings Independently of the DIP switch setting you can still change the port settings via the software El100000000482 02 2011 107 Redundancy 6 1 Ring Redundancy 6 1 2 Configuring the MRP Ring To configure an MRP Ring you set up the network to meet your demands For the ring ports select the following basic settings in the Basic Settings Port Configuration dialog Port Type Bit Rate Autonegotiation Port Setting Duplex Automatic Configuration Mode Optical all off on full TX 100 Mbit s off on full TX 1000 Mbit s on on Table 36 Port Settings for Ring Ports A WARNING RING LOOP HAZARD To avoid loops during
55. affic class Untrusted traffic class shows you the traffic class that is used in the untrusted trust mode When you change the port priority see on page 93 Entering the port priority the untrusted traffic class also changes see table 30 El100000000482 02 2011 95 QoS Priority 5 3 802 1D p mapping 5 3 802 1D p mapping The 802 1D p mapping dialog allows you to assign a traffic class to every VLAN priority VLAN Priority o ulola s w oln Set Reload Help Figure 27 802 1D p Mapping dialog O Enter the desired value from 0 to 3 in the Traffic Class field for every VLAN priority 96 El100000000482 02 2011 QoS Priority 5 3 802 1D p mapping Port priority Traffic class default setting IEEE 802 1D traffic type Best effort default Background Standard Excellent effort business critical Controlled load streaming multimedia Video lt 100 ms of latency and jitter Voice lt 10 ms of latency and jitter Network control reserved traffic NIJA GW hM oO WIWIMINM gt O O Table 31 Assigning the VLAN priority to the 4 traffic classes Note Network protocols and redundancy mechanisms use the highest traffic class 3 Therefore select other traffic classes for application data El100000000482 02 2011 97 QoS Priority 5 4 IP DSCP mapping 5 4 IP DSCP mapping The IP DSCP mapping table allows you to assign a traffic class to every DSCP value
56. and secondary instances Each instance prevents loops and provides redundancy if a network component becomes inoperable The instances work independently of each other You can configure the instances with different values for the bridge priority forward delay and max age 2 bridges perform the task of coupling the two instances What is known as the Dual RSTP Master transmits between the two instances in the normal state and the Dual RSTP Slave performs this task if the master or the connection lines becomes inoperable Each of these bridges knows the ports that are responsible for the primary and secondary instances The two bridges are coupled with each other for each instance via what are known as the inner ports The complimentary ports that close the ring for an instance are called outer ports Note Directly couple the inner ports of both bridges with each other Otherwise connections interruptions may occur that exceed the maximum time specified for Dual RSTP Note The following text uses the term Spanning Tree STP to describe settings or behavior that applies to STP RSTP or Dual RSTP for the device TCSESM E El100000000482 02 2011 128 Redundancy 6 4 Spanning Tree 6 4 1 Global With this dialog you can switch the Rapid Spanning Tree Protocol on off display bridge related information on the Spanning Tree Protocol configure bridge related parameters of the Spanning Tree Protocol set bridge related additi
57. any process visualization systems record the device status for a device in order to present its condition in graphic form Device status Error Co Trap Configuration Generate Trap r Monitoring Power Supply 1 Monitor C Ignore Power Supply 2 Monitor Ignore Temperature Monitor Ignore EAM removal Monitor Ignore EAM not in Syne Monitor Ignore Connection error C Monitor Ignore Ring redundancy Monitor Ignore RingMetwork Coupling Monitor Ignore Set Reload Help Figure 46 Device Status Dialog LI In the Monitoring field you select the events you want to monitor LO To monitor the temperature you set the temperature thresholds in the Basics System dialog at the end of the system data El100000000482 02 2011 171 Diagnostics 7 6 Device Status The events which can be selected are Name Power supply Temperature EAM removal EAM not in sync Connection error Ring Redundancy Ring Network coupling Meaning Monitor ignore supply voltage s Monitor ignore temperature thresholds set see on page 20 System for temperatures that are too high too low Monitor ignore the removal of the EAM Monitor ignore the non matching of the configuration in the device and on the EAM Monitor ignore the link status Ok or inoperable of at least one port The reporting of the link status can be masked for each port by the management see on page 29 Port Configuration Link
58. as events with the level to report critical or higher to the syslog servers Only set the minimum level to report for one or more syslog server entries to notice or lower Then it may happen that the device sends a large number of events to the syslog servers EIO0000000482 02 2011 161 Diagnostics 7 1 Syslog O shear su etea E Figure 39 Syslog dialog E100000000482 02 2011 162 Diagnostics 7 2 Event Log 7 2 Event Log The table lists the logged events with a time stamp The Reload button allows you to update the content of the event log and with the Delete button you delete the content of the event log Figure 40 Event log table You have the option to also send the logged events to one or more syslog servers see on page 158 Syslog E100000000482 02 2011 163 Diagnostics 7 3 Ports 7 3 Ports The port menu contains displays and tables for the individual ports Statistics table Utilization SFP Modules 7 3 1 Statistics table This table shows you the contents of various event counters In the Restart menu item you can reset all the event counters to zero using Warm start Cold start or Reset port counter The packet counters add up the events sent and the events received 1 4 1 2 1 1 ee Packets Packets Packets mare Collisi 64 bytes 65 to 127 bytes 128 to 255 byte 0 0 0 0 493 0 12 2217 49 03 59246 D l 13 2218
59. ble 41 Sub Ring New Entry 6 2 Sub Ring TCSESM E Possible Values Default Setting All available ports that do not already belong to the ring redundancy of the base ring in the form X X module port Manager RedundantManager SingleManager Manager Corresponds to the 0 entries in the VLAN dialog 255 255 255 255 255 255 255 255 255 255 255 255 255 255 255 255 All permitted MRP domain names Note For one Sub Ring in the singleManager mode create 2 entries with different Sub Ring IDs 118 EIO0000000482 02 2011 Redundancy 6 2 Sub Ring TCSESM E 1255 255 255 255 255 255 255 25 s ea Figure 33 Sub Ring New Entry dialog E100000000482 02 2011 119 Redundancy 6 3 Ring Network Coupling 6 3 Ring Network Coupling With this dialog you can display an overview of the existing Ring Network coupling configure a Ring Network coupling switch a Ring Network coupling on off create a new Ring Network coupling and Delete Ring Network couplings 6 3 1 Preparing a Ring Network Coupling A WARNING RING NETWORK COUPLING LOOP HAZARD To avoid loops during the configuration phase configure all the devices that participate actively in the Ring Network Coupling individually Before you connect the redundant line you must complete the configuration of all the devices that participate actively in the Ring Network Coupling Failure to follow these instructions can r
60. blem Duplex problem EMI detected Evaluation of non matching of the duplex mode EIO0000000482 02 2011 Switching 4 1 Switching Global _set_ re Figure 19 Dialog Switching Global E100000000482 02 2011 63 Switching 4 2 Filters for MAC addresses 4 2 Filters for MAC addresses The filter table for MAC addresses is used to display and edit filters Each row represents one filter Filters specify the way in which data packets are sent They are set automatically by the device learned status or manually Data packets whose destination address is entered in the table are sent from the receiving port to the ports marked in the table Data packets whose destination address is not in the table are sent from the receiving port to all other ports The following conditions are possible learned The filter was created automatically by the device invalid With this status you delete a manually created filter permanent The filter is stored permanently in the device or on the URL see on page 31 Loading Saving the Configuration igmp The filter was created by IGMP Snooping In the Create dialog see buttons below you can create new filters 414 12 1 3 1 4 15 1 6 ii 19 41 10 4 11 112 1 13 1 1 DIO l EI hwMIEITEITE TETEo Te To eo Oo Oo OHI OU O O O OJ OI MIO TO oO oO m m MIOS OJOJOJOJOJ OJOJ O O m m m ODJOJOJOJ OJ
61. cess the port and portDisable is selected under Action Table 5 Configuration of port security for a single port 48 El100000000482 02 2011 Security Name Allowed MAC Addresses Current MAC Address Allowed IP Addresses Action 2 4 Port Security Meaning MAC addresses of the devices with which you allow data exchange at this port The Web based interface allows you to enter up to 10 MAC addresses each separated by a space After each MAC address you can enter a slash followed by a number identifying an address area This number between 2 and 47 indicates the number of relevant bits Example 00 80 63 01 02 00 40 stands for 00 80 63 01 02 00 to 00 80 63 01 02 FF or 00 80 63 00 00 00 24 stands for 00 80 63 00 00 00 to 00 80 63 FF FF FF If there is no entry any number of devices can communicate via this port Shows the MAC address of the device from which the port last received data The Web based interface allows you to copy an entry from the Current MAC Address column into the Allowed MAC Addresses column by dragging and dropping with the mouse button IP addresses of the devices with which you allow data exchange at this port The Web based interface allows you to enter up to 10 IP addresses each separated by a space If there is no entry any number of devices can communicate via this port Action performed by the device after an unauthorized access none no action trapOn
62. cted true HDX false The point to point connection makes a direct connection between 2 RSTP devices The direct decentralized communication between the two bridges results ina short reconfiguration time This condition applies to all MSTIs Table 61 Port related STP settings and displays CIST These columns show you more detailed information than that available up to now For designated ports the device displays the information for the STP BPDU last received by the port This helps with the diagnosis of possible STP problems in the network For alternative back up and root ports is in the stationary condition static topology this information is identical to the designated information If a port has no link or if it has not received any STP BDPUs yet the device displays the values that the port would send as a designated port El100000000482 02 2011 150 Redundancy Pie Sw Be disabled 6 4 Spanning Tree alee disabled disabled disabled 128 32768 00 80 63 97 50 00 0000 128 32768 00 80 63 97 50 00 _ 00 00 disabled forwarding disabled 0 root 200000 128 _32768 00 80 63 97 50 00 0000 128 32768 00 80 63 51 74 00 _ 80 07 4 16 18 disabled d disabled disabled 128 32768 00 80 63 97 50 00 0000 128 32768 00 80 63 97 50 00 _ 00 00 esignated 200000 128 32768 00 80 63 b2 4218 80 08 disabled 128 32768 00 80 63 97 50 00 0000
63. d Count MRP compatibility BPDU Guard Meaning Possible Values Default Setting Sets the Hx Hold Count parameter 1 40 10 If the device sends a BPDU it increments based on RSTP a counter at this port When the counter standard 1 10 reaches the value of the Tx Hold Count the port stops sending any more BPDUs The counter is decremented by 1 every second The device sends a maximum of 1 new BPDU in the following second Switches the MRP compatibility on off On Off MRP compatibility enables RSTP tobe off used within an MRP Ring and when coupling RSTP segments to an MRP Ring The prerequisite is that all devices in the MRP Ring must support MRP compatibility Note If you combine RSTP with an MRP Ring you must give the devices in the MRP Ring a better i e numerically lower RSTP bridge priority than the devices in the connected RSTP network You thus help avoid a connection interruption for devices outside the Ring Switches the BPDU Guard function on off On Off If BPDU Guard is switched on the device Off automatically activates the function for edge ports with the setting Admin Edge Port t rue When such a port receives any STP BPDU the device sets the port status BPDU Guard Effect to true and the transmission status of the port to discarding see table 62 Thus the device helps protect your network at terminal device ports from incorrect configurations or attacks with STP BPDuUs tha
64. dge is the root Root path costs Path costs from the root port of the device to 0 200 000 000 the current root bridge of the entire layer 2 network 0 the local bridge is the root Topology changes Counts how often the device has put a port into the Forwarding status via Spanning Tree since it was started Time since last change Time since the last topology change Table 51 Global Spanning Tree settings topology information E100000000482 02 2011 133 Redundancy 6 4 Spanning Tree If you have activated the MRP Compatibility function the device displays the Information frame with additional information on MRP compatibility Parameter Meaning Possible Values Default Setting Information If you have activated the MRP Message with bridge compatibility RSTP over MRP and one of ID or empty the participating devices has detected a configuration problem the device displays Conflict with bridge pppp mm mm mm mm mm During normal operation this field is empty Table 52 Global Spanning Tree settings Information frame Operation Protocol version on Off RSTP Protocol Configuration Information Bridge Root Topology Bridge ID e2768 700 80 63 97 50 00 20480 700 80 63 Of 14 b0 Bridge is Root pa Priority 32768 v oso O Roro o HeloTme f2 o Eo O RootPath Cost hooo o Forward Delay s fs fo Topology Change Count se Max Age fo e Time Since Topology Change o day s 41733 Tx Hold
65. dundancy Figure 31 Selecting and configuring Fast HIPER Ring Note Deactivate the Spanning Tree protocol STP for the ports connected to the redundant ring because the Spanning Tree and the Ring Redundancy work with different reaction times Redundancy Spanning Tree Port E100000000482 02 2011 113 Redundancy 6 2 Sub Ring TCSESM E 6 2 Sub Ring TCSESM E With this dialog you can display an overview of all the connected Sub Rings create Sub Rings configure Sub Rings and Delete Sub Rings Note The following devices support the Sub Ring Manager function TCSESM E In a Sub Ring you can integrate as participants the devices that support MRP the Sub Ring Manager function is not required A WARNING RING LOOP HAZARD To avoid loops during the configuration phase configure all the devices of the Sub Ring individually Before you connect the redundant line close the Sub Ring you must complete the configuration of all the devices of the Sub Ring Failure to follow these instructions can result in death serious injury or equipment damage Note Sub Rings use MRP You can couple Sub Rings to existing primary rings with the HIPER Ring protocol the Fast HIPER Ring protocol and MRP If you couple a Sub Ring to a primary ring under MRP configure both rings in different VLANs You configure either the Sub Ring Managers Sub Ring ports and the devices of the Sub Ring in a separate VLAN Here
66. dundant paths If the value is 0 the Switch automatically calculates the path costs for the global MSTI IST depending on the transmission rate Port priority Here you enter the port priority the four highest bits of the port ID with regard to the global MSTI IST as a decimal number of the highest byte of the port ID Setting 0 200 000 000 0 automatic ally 16 lt n 16 lt 240 128 Displays the remote bridge ID from Received bridge ID read only which this port last received an STP BPDU Bridge identification s format ppppp mm mm mm mm mm mm Displays the port ID at the remote Received port ID read only bridge from which this port last received an STP BPDU Port ID format pn nn with p port priority 16 nnn port No both hexadecimal 0 200 000 000 costs read only remote bridge from its root port to Received path Displays the path costs of the the CIST root bridge active box selected inactive Admin Edge Port Activate this setting only if a terminal device is connected to the port Then the port immediately transitions to the forwarding status after a link is set up without first going through the STP statuses If the port still receives an STP BPDU the device blocks the port and clarifies the port s STP port role In the process the port can switch toa different status e g forwarding discarding learning Deactivate the setting when the
67. e configure and display the learning mode reset the VLAN settings of the device to the original defaults Parameter Meaning Max VLAN ID Displays the largest possible VLAN ID see on page 83 VLAN Static Max supported Displays the maximum number of VLANs the device supports see on VLANs page 83 VLAN Static Number of VLANs Displays the number of configured VLANs see on page 83 VLAN Static Table 21 VLAN display Note The device provides the VLAN with the ID 1 The VLAN with ID 1 is always present 78 EIO0000000482 02 2011 Switching 4 5 VLAN Parameter Meaning Value range Default setting VLAN 0 When the VLAN 0 Transparent Mode On Off Off Transparent Mode is activated the device accepts a VLAN ID of 0 in the packet when it receives it regardless of the setting for the port VLAN ID in the dialog see on page 85 VLAN Port Activate VLAN 0 Transparent Mode to transmit packets with a priority TAG without VLAN membership i e with a VLAN ID of 0 Table 22 VLAN settings Note If you are using the GOOSE protocol in accordance with IEC61850 8 1 you activate the VLAN 0 transparent mode Thus the prioritizing information remains in the data packet in accordance with IEEE802 1D p even when the device forwards the data packet This also applies to other protocols that use this prioritizing in accordance with IEEE802 1D p but that do not require any VLANs in accordance with IE
68. ead The actual current Dual RSTP role of master slave only Timeout ms Partner MAC read only the local device It can differ from the configured role If you have configured both partner bridges as auto the partner bridge that is currently coupling the instances takes the master role and the other bridge takes the slave role If both partner bridges are configured as master or both as s Lave the partner bridge with the smaller base MAC address takes the master role and the other bridge takes the slave role When the protocol is started if the partner bridge cannot be found for a bridge in the configured role master slave or auto it sets its own role to listening If the device detects a configuration problem e g if the inner Ring ports are connected crosswise the device sets its role to error If you have deactivated Dual RSTP for the device it sets its role to disabled Maximum time during which the slave bridge waits for test packets from the master bridge at the outer ports before it takes over the coupling This only applies in the state in which both inner ports of the slave bridge have lost the connection to the master bridge Note Configure this timeout longer than the longest assumable interruption time for the redundancy protocol of the faster instance Otherwise loops can occur The base MAC address of the Dual RSTP partner device Possible Values Default Setting single listeni
69. eb server El100000000482 02 2011 47 Security 2 4 Port 2 4 Port Security Security The device allows you to configure each port to help prevent unauthorized access Depending on your selection the device checks the MAC address or the IP address of the connected device In the Configuration frame you set whether the port security works with MAC or with IP addresses Name MAC Based Port Security IP Based Port Security Meaning Check source MAC address of the received data packet IP Based Port Security internally relies on MAC Based Port Security Principle of operation When you configure the function the device translates the entered source IP address into the respective MAC address In operation it checks the source MAC address of the received data packet against the internally stored MAC address Table 4 Configuration of port security globally for all ports Set the individual parameters for each port in the port table Name Module Port Port Status Meaning Module of the device on which the port is located Port to which this entry applies enabled Port is switched on and transmitting disabled Port is switched off and not transmitting The port is switched on if an authorized address accesses the port or an unauthorized address attempts to access the port and trapOnly or none is selected under Action The port is switched off if an unauthorized address attempts to ac
70. ection Meaning Activate deactivate the learning of MAC source addresses Set the maximum packet size frame size in bytes Enable disable whether the device detects whether it has repeatedly learned the same MAC source addresses at different ports This process very probably indicates a loop situation in the network If the device detects this process it creates an entry in the log file and sends an alarm trap Number of MAC addresses that are learned at different ports within a checking interval so that if this number is exceeded the device sees this as a relevant event The interval for this check is a few seconds Enable disable whether the device reports a duplex problem at a port for specific error events This means that the duplex mode of the port might not match that of the remote port If the device detects a potential non match it creates an entry in the event log and sends an alarm trap To detect potential non matches the device evaluates the error counters of the port after the connection is set up in the context of the port settings see table 13 Table 12 Switching Global dialog 4 1 Switching Global Possible Values On Off 1522 1632 On Off 1 1 024 On Off On 1522 Off On The following table lists the duplex operating modes for TX ports together with the possible error events The terms in the table mean Collisions In half duplex mode collisions mean normal operat
71. ed interface LI The VLAN frame enables you to assign a VLAN to the management CPU of the device If you enter 0 here as the VLAN ID not included in the VLAN standard version the management CPU will then be accessible from all VLANs L The Ethernet Switch Configurator protocol allows you to allocate an IP address to the device on the basis of its MAC address Activate the Ethernet Switch Configurator protocol if you want to allocate an IP address to the device from your PC with the enclosed Ethernet Switch Configurator protocol software setting on delivery operation on access read write Note When you change the network mode from Local to BOOTP or DHCP the server will assign a new IP address to the device If the server does not respond the IP address will be set to 0 0 0 0 and the BOOTP DHCP process will try to obtain an IP address again El100000000482 02 2011 25 Basic Settings 1 3 Software 1 3 Software The software dialog enables you to display the software versions in the device and to carry out a software update of the device via file selection tftp or Memory Backup Adaptor EAM Note The TCSESM and TCSESM E Managed Switches use the Memory Backup Adaptor TCSEAM0100 Version Stored Version L3P 06 0 00 K14 2010 06 26 19 38 Running Version L3P 06 0 00 K14 2010 06 26 19 38 Backup Version L3P 06 0 00 K12 2010 06 19 19 03 tftp Software Update URL Jtftp 192 168 1 1 00 produc
72. elay If the local device is the root the other devices in the entire network take over this value Otherwise the local device uses the value of the root bridge in the Root column on the right Sets the Max Age parameter 6 40s 20s In the previous STP protocol the Max Age See the note parameter was used to specify the validity following this table of STP BPDUs in seconds For RSTP Max Age signifies the maximum permissible branch length number of devices to the root bridge If the local device is the root the other devices in the entire network take over this value Otherwise the local device uses the value of the root bridge in the Root column on the right Table 54 Dual RSTP settings local bridge parameters El100000000482 02 2011 139 Redundancy 6 4 Spanning Tree Parameter Meaning Possible Values Default Setting Tx Hold Sets the Hx Hold Count parameter 1 40 10 Count If the device sends a BPDU it increments based on RSTP a counter at this port When the counter standard 1 10 reaches the value of the Tx Hold Count the port stops sending any more BPDUs The counter is decremented by 1 every second The device sends a maximum of 1 new BPDU in the following second BPDU Switches the BPDU Guard function on off On Off Guard If BPDU Guard is switched on the device Off automatically activates the function for edge ports with the setting Admin Edge Port t rue When such a po
73. ent status After a warm start 4 5 VLAN Value range Default setting Independent Independent VLAN VLAN Shared VLAN Independent see on page 37 Restart on the device the VLAN device take the setting for the Mode into the status line Shared VLAN Table 23 Settings and displays in the Learning frame 80 El100000000482 02 2011 Switching 4 5 VLAN Max VLAN ID 4042 Max supported YLANs 255 Number of VLANs 3 VLAN 0 Transparent Mode r Learning Mode Independent VLAN Shared VLAN Status Independent VLAN Shared VLAN Set Reload Delete Help Figure 23 VLAN Global dialog 4 5 2 Current VLAN With this dialog you can display VLAN parameters The Current VLAN table shows all manually configured VLANs VLANs configured via redundancy mechanisms The Current VLAN table is only used for information purposes You can make changes to the entries in the VLAN Static dialog El100000000482 02 2011 81 Switching Parameter VLAN ID Status Time created Ports x x 4 5 VLAN Meaning Value range Displays the ID of the VLAN Displays the VLAN status other This entry solely appears for VLAN 1 The system provides VLAN 1 VLAN 1 is always present permanent A static entry made by you This entry is kept when the device is restarted dynamic This VLAN was created dynamically via GVRP Operating time see System Data at which the VLAN was created
74. ents When devices are used for applications with technical safety requirements please follow the relevant instructions Failure to use Schneider Electric software or approved software with our hardware products may result in improper operating results Failure to observe this product related warning can result in injury or equipment damage User Comments We welcome your comments about this document You can reach us by e mail at techpub schneider electric com El100000000482 02 2011 About this Manual Related Documents Title Reference Number ConneXium TCSESM TCSESM E Managed Switch 31007126 Redundancy Configuration User Manual ConneXium TCSESM TCSESM E Managed Switch 31007122 Basic Configuration User Manual ConneXium TCSESM TCSESM E Managed Switch 31007130 Command Line Interface Reference Manual ConneXium TCSESM TCSESM E Managed Switch ElO00000000482 Web based Interface Reference Manual ConneXium TCSESM Managed Switch 31007118 Installation Manual ConneXium TCSESM E Extended Managed Switch ElO0000000529 Installation Manual Note The Glossary is located in the Reference Manual Command Line Interface The Web based Interface reference manual contains detailed information on using the Web interface to operate the individual functions of the device The Command Line Interface Reference Manual contains detailed information on using the Command Line Interface to operate the individual functions of
75. er layers like IP or TCP This may affect e g TCP traffic You can minimize this effects by applying the limiter function only to particular frame types e g to broadcasts multicasts and unicasts with an unlearned destination address and excluding unicasts with a learned destination address from the limitation using the egress limiter function instead of the ingress limiter function because the former cooperates slightly better with TCP s flow control reason frames buffered by the internal switching buffer increasing the aging time for learned unicast destination addresses 4 3 1 Rate Limiter settings Ingress Limiter kbit s allows you to enable or disable the input limiting function for all ports 66 El100000000482 02 2011 Switching 4 3 Rate Limiter Egress Limiter Pkt s allows you to enable or disable the broadcast output limiter function at all ports Egress Limiter kbit s allows you to enable or disable the output limiter function for all packet types at all ports Setting options per port Ingress Packet Types allows you to select the packet type for which the limit is to apply A11 limits the total inbound data volume at this port BC limits the broadcast packets received at this port BC MC limits broadcast packets and Multicast packets received at this port BC MC uuc limits broadcast packets Multicast packets and unknown Unicast packets received at this port Ingres
76. er makes the UTC Universal Time Coordinated available UTC is the time relating to the coordinated world time measurement The time displayed is the same worldwide Local time differences are not taken into account SNTP uses the same packet format as NTP In this way an SNTP client can receive the time from an SNTP server as well as from an NTP server Note For accurate system time distribution with cascaded SNTP servers and clients use only network components routers switches hubs in the signal path between the SNTP server and the SNTP client which forward SNTP packets with a minimized delay Parameter Meaning Possible Values Default Setting Function Switches the SNTP function on and On Off Off off globally Table 6 Switches SNTP on and off globally Parameter Meaning Possible Values Default Setting SNTP Status Displays conditions such as Server cannot be reached Table 7 SNTP Status El100000000482 02 2011 53 Time Parameter Client Status External server address Redundant server address Server request interval Accept SNTP Broadcasts Threshold for obtaining the UTC ms Disable client after successful synchronization 3 1 SNTP configuration Meaning Possible Values Default Setting Switches the SNTP client on and off On Off On IP address of the SNTP server from which the Valid IPv4 address 0 0 0 0 device periodically requests the system time IP address of the SNTP server from
77. esult in death serious injury or equipment damage STAND BY switch All devices have a STAND BY switch with which you can define the role of the device within a Ring Network coupling El100000000482 02 2011 120 Redundancy 6 3 Ring Network Coupling Depending on the device type this switch is a DIP switch on the devices or else it is exclusively a software setting Redundancy Ring Network Coupling dialog By setting this switch you define whether the device has the main coupling or the redundant coupling role within a Ring Network coupling You will find details on the DIP switches in the Installation user manual Note Depending on the model the devices have a DIP switch with which you can choose between the software configuration and the DIP switch configuration When you set the DIP switches so that the software configuration is selected the DIP switches are effectively deactivated Device type STAND BY switch type TCSESM Selectable DIP switch and software setting TCSESM E Software switch Table 42 Overview of the STAND BY switch types Depending on the device and model set the STAND BY switch in accordance with the following table Device with Choice of main coupling or redundant coupling DIP switch On STAND BY DIP switch DIP switch software switch According to the option selected option on STAND BY DIP switch or in the Redundancy Ring Network Coupling dialog by making selection in
78. ets the requirements for your network Otherwise select 500 ms Note Settings in the Ring Recovery frame are only effective for devices that are ring managers If you have configured VLANs you select VLAN ID 0 here if you do not want to assign the MRP Ring configuration to a VLAN Note the VLAN configuration of the ring ports Select for VLAN ID 1 and VLAN membership U in the static VLAN table for the ring ports VLAN ID gt 0 if you want to assign the MRP Ring configuration to this VLAN Select this VLAN ID in the MRP Ring configuration for all devices in this MRP Ring Note the VLAN configuration of the ring ports For all ring ports in this MRP Ring select this corresponding VLAN ID and the VLAN membership T in the static VLAN table If the device is a ring manager The displays in this frame mean Redundancy working When a component of the ring is down the redundant line takes over its function Configuration failure You have configured the function incorrectly or there is no ring port connection Table 37 MRP Ring configuration El100000000482 02 2011 109 Redundancy 6 1 Ring Redundancy Figure 30 Selecting MRP Ring version entering ring ports and enabling disabling ring manager TCSESM E E100000000482 02 2011 110 Redundancy 6 1 Ring Redundancy 6 1 3 Configuring the Fast HIPER Ring TCSESM E Within a Fast HIPER Ring you can use any combination of the following d
79. evices TCSESM E To configure a Fast HIPER Ring you set up the network to meet your demands for the ring ports select the following basic settings in the Basic Settings Port Configuration dialog Bit rate 100 Mbit s Autonegotiation off automatic configuration Port on Duplex Full Table 38 Port settings for ring ports A WARNING RING LOOP HAZARD To avoid loops during the configuration phase configure all the devices of the Fast HIPER Ring individually Before you connect the redundant line you must complete the configuration of all the devices of the Fast HIPER Ring Failure to follow these instructions can result in death serious injury or equipment damage El100000000482 02 2011 111 Redundancy Parameter Ring port X X operation Redundancy Manager Mode Ring Manager Operation Ring Information Round Trip Delay VLAN ID Switches Number Information 6 1 Ring Redundancy Meaning Display in Operation field forwarding This port is switched on and has a link blocked This port is blocked and has a link disabled This port is switched off not connected This port has no link If there is exactly one device you switch the Ring Manager function on at the ends of the line When you have configured all the parameters for the Fast HIPER Ring you switch the operation on here When you have configured all the devices in the Fast HIPER Ring you close redundant lines Round
80. f for this port If Spanning Tree is activated globally and switched off at one port this port does not send STP BPDUs and drops any STP BPDUs received Note If you want to use other layer 2 redundancy protocols such as HIPER Ring or Ring Network coupling in parallel with Spanning Tree make sure you switch off the ports participating in these protocols in this dialog for Spanning Tree Otherwise the redundancy may not operate as intended or loops can result Specifies that the port belongs tothe On selected Off Dual RSTP Secondary Ring thatis off not selected it is configured as an inner or outer port of the Secondary Ring in the Redundancy Spanning Tree Dual RSTP dialog Note You will find the ports that belong to the Dual RSTP Primary Ring in the dialog Redundancy Spanning Tree Dual RSTP in the Dual RSTP Primary Ring frame inner and outer port Displays the STP port status with discarding learning regard to the global MSTI IST forwarding disabled manualForwarding notParticipate Displays the STP port role with root alternate regard to the global MSTI IST designated backup disabled Table 61 Port related STP settings and displays CIST 148 El100000000482 02 2011 Redundancy Parameter 6 4 Spanning Tree Possible Values Default Meaning Enter the path costs with regard to Port path costs the global MSTI IST to indicate preference for re
81. f the delivery state is unchanged the device loads the data from the flash memory Note Before loading the configuration data from the EAM the device compares the password in the device with the password in the EAM configuration data The device loads the configuration data if the admin password matches or there is no password saved locally or the local password is the original default password or no configuration is saved locally Status Meaning notPresent No EAM present ok The configuration data from the EAM and the device match removed The EAM was removed after booting notinSync The configuration data of the EAM and the device do not match or only one file exists or no configuration file is present on the EAM or on the device outOfMemory _ The local configuration data is too extensive to be stored on the EAM wrongMachine The configuration data in the EAM originates from a different device type and cannot be read or converted checksumErr The configuration data is damaged Table 3 EAM status El100000000482 02 2011 35 Basic Settings 1 5 Loading Saving the Configuration a In these cases the EAM status is identical to the status EAM not in sync which sends Not OK to the signal contacts and the device status P In this case the EAM status notInSync deviates from the status EAM not in sync which sends OK to the signal contacts and the device status 1 5
82. fault setting no monitoring Note If the device is a normal ring member and not a ring manager it doesn t report anything for the HIPER Ring for the Fast HIPER Ring and for MRP it only reports detected errors in the local configuration 1 The configurations are non matching if only one file exists or the two files do not have the same content El100000000482 02 2011 175 Diagnostics 7 7 Signal contact The elimination of the reserve redundancy for the ring network coupling i e the redundancy function did actually switch on Select Monitor for the ring network coupling if the signal contact is to report the elimination of the reserve redundancy for the ring network coupling See on page 120 Preparing a Ring Network Coupling Default setting no monitoring Note In two Switch coupling both Switches must have found their respective partners 7 7 3 Device status L Select the tab page Alarm 1 or Alarm 2 for devices with two signal contacts LI In the Mode Signal Contact field you select the Device status mode In this mode the signal contact monitors the device status See on page 171 Device Status and thereby offers remote diagnosis The device status Error detected see on page 171 Device Status is reported by means of a break in the contact via the potential free signal contact relay contact closed circuit 7 7 4 Configuring traps E Select generate
83. ffective for devices that are ring managers In the ring manager select the desired value for the test packet timeout for which the ring manager waits after sending a test packet before it evaluates the test packet as lost Standard test packet timeout 480 ms Accelerated test packet timeout 280 ms Note The settings are especially meaningful if at least one line in the ring consists of a 1 000 MBit s twisted pair line The reconfiguration time after connection interruption existing due to the reaction characteristic of 1 000 MBit s twisted pair ports can thus be accelerated considerably If the device is a ring manager The displays in this frame mean Redundancy working When a component of the ring is down the redundant line takes over its function Configuration failure You have configured the function incorrectly or there is no ring port connection Table 35 HIPER Ring configuration El100000000482 02 2011 105 Redundancy 6 1 Ring Redundancy Version HIPER Ring MRP Fast HIPER Ring Ring Port 1 Ring Port 2 Module 1 Module 1 Port Port Operation Operation Redundancy Manager Mode C On C oft Operation Ring Information C On Round Trip Delay oft VLAN VLAN ID Switches Number Information Set Reload Delete ring configuration Help Figure 29 Selecting HIPER Ring version entering ring ports enabling disabling ring manager and selecting ring recovery TCSESM E Note De
84. for SNMP v3 View Based Access Control Model for SNMP Coexistence between SNMP v1 v2 amp v3 SMI v2 Textual Conventions for SMI v2 Conformance statements for SMI v2 SMON RADIUS Authentication Client MIB RADIUS Accounting MIB Dot1p Q HTTP over TLS Internet Addresses MIB RADIUS Client RADIUS Accounting RADIUS Attributes for Tunnel Protocol Support RADIUS Extensions RADIUS support for EAP IGMP MIB The BSD Syslog Protocol IGMPv3 nL LR LR Le TR J BD Sm a S J BS JT BY CY CX El100000000482 02 2011 Appendix A 3 Underlying IEEE Standards A 3 Underlying IEEE Standards IEEE 802 1AB IEEE 802 1af IEEE 802 1D IEEE 802 1D 1998 IEEE 802 1D 2004 IEEE 802 1w 2001 IEEE 802 1X IEEE 802 3 2002 IEEE 802 3ac IEEE 802 3x Topology Discovery LLDP Power over Ethernet Switching GARP GMRP Spanning Tree Supported via 802 1S implementation Media access control MAC bridges includes IEEE 802 1p Priority and Dynamic Multicast Filtering GARP GMRP Spanning Tree Rapid Reconfiguration RSTP Port Authentication Ethernet VLAN Tagging Flow Control El100000000482 02 2011 197 Appendix A 4 Underlying IEC Norms A 4 Underlying IEC Norms IEC 62439 High availability automation networks especially Chap 5 MRP Media Redundancy Protocol based on a ring topology E100000000482 02 2011 198 Appendix A 5 Copyright of Integrated Software A 5 Copyright of
85. g Parameter Meaning Information If the device is a ring manager The displays in this frame mean Redundancy working When a component of the ring is down the redundant line takes over its function Configuration failure You have configured the function incorrectly or there is no ring port connection Redundancy Mode With the Redundant Ring Network Coupling setting either the main line or the redundant line is active Both lines are never active simultaneously With the Extended Redundancy setting the main line and the redundant line are simultaneously active if a problem is detected in the connection line between the devices in the connected i e the remote network During the reconfiguration period package duplications may possibly occur Therefore only select this setting if your application detects package duplications Coupling Mode Here you define whether the constellation you are configuring is a coupling of redundancy rings HIPER Ring MRP Ring or Fast HIPER Ring or network segments Table 44 Ring Network Coupling dialog The following tables show the selection options and default settings for the ports used in the Ring Network coupling Device Partner coupling port Coupling port TCSESM All ports default setting port 1 3 All ports default setting port 1 4 TCSESM E All ports default setting port 1 3 All ports default setting port 1 4 Table 45 Port assignment for one Switch coupli
86. global function is active see table 49 When such a port receives any random STP BPDU the device sets the port s BPDU Guard Effect status to true and its transmission status to discarding Thus the device helps protect your network at terminal device ports from incorrect configurations or attacks with STP BPDUs that try to change the topology To return the port to a normal transmitting status from the locked status break and reconnect the link or switch the Admin Edge Port port setting off and on again Table 62 Port related STP settings and displays guards El100000000482 02 2011 154 Redundancy 6 4 Spanning Tree 1 2 false isate pe 1 4 false disabile 1 6 false disable DRE A O e R O B O E S e S S B 18 m m i Figure 38 Multiple Spanning Tree dialog Port Guards tab E100000000482 02 2011 155 Redundancy 6 4 Spanning Tree El100000000482 02 2011 156 Diagnostics 7 Diagnostics The diagnosis menu contains the following tables and dialogs Syslog Event Log Ports statistics utilization SFP modules Topology Discovery Port Mirroring Device Status Signal Contact Alarms Traps Report log file system information IP Address Conflict Detection Self Test In service situations they provide the technician with the necessary information for diagnosis El100000000482 02 2011 157 Diagnostics 7 1 Syslog 7 1 Syslog The Syslog dialog enables
87. h Dump This button allows you to download system information as files in a ZIP archive see table 69 LI Select the directory in which you want to save the switch dump L Click Save The device creates the file name of the switch dumps automatically in the format lt IP address gt _ lt system name gt zip e g for a device of the type TCSESM E 10 0 1 112_TCSESM063F2CU1 zip Download JAR file This button allows you to download the applet of the Web based interface as a JAR file Afterwards you have the option to start the applet outside a browser This enables you to administer the device even when you have deactivated its Web server for security reasons LI Select the directory in which you want to save the applet L Click Save E100000000482 02 2011 180 Diagnostics 7 9 Report The device creates the file name of the applet automatically in the format lt device type gt lt software version gt _ lt software revision of applet gt jar e g for a device of type TCSESM E tcsesm_e06000_00 jar File Name Log file event_log html System information systemInfo html Event log traplog txt Device configuration binary switch cfg Device configuration as switch cli script Internal memory extract for dump hmd the manufacturer to improve the product Exception log exception_log html Output of CLI commands clicommands txt show running config show port all show sysinfo show
88. h coupling Assign the device in the redundant line the DIP switch setting STAND BY or use the software configuration to assign the redundancy function to it Note For reasons of redundancy reliability do not use Rapid Spanning Tree and Ring Network Coupling in combination El100000000482 02 2011 122 Redundancy 6 3 Ring Network Coupling Ring Network Coupling dialog Parameter Selecting the configuration Coupling port Port mode Port state Partner coupling port IP address Control port Operation Meaning Depending on your local conditions select One Switch coupling Two Switch coupling Slave Two Switch coupling Master Two Switch coupling with control line Slave or Two Switch coupling with control line Master These options are presented as buttons from left to right Depending on the device type see table 42 you make this setting only using software using DIP switch and software You will find details on the DIP switches on the devices in the Installation user manual For devices without DIP switches you only use the software to make settings You can select the configuration using the buttons For devices that can be configured using DIP switches and software you can activate or deactivate the DIP switches If you have activated the DIP switches you cannot overwrite the DIP switch settings using the software settings that cannot be
89. h this entry applies GMRP Switch GMRP on off for each port On Off On When you disable GMRP at a port no registrations can be made for this port and GMRP packets cannot be forwarded at this port Prerequisite In the Switching Multicasts GMRP dialog GMRP is enabled GMRP Service Devices that do not support GMRP can Forward all Forward all Requirement be integrated into the Multicast groups unregistered addressing by means of Forward all groups a static filter address entry on unregistered the connecting port groups selecting Forward all groups The device enters ports with the selection Forward all groups in all Multicast filter entries learned via GMRP Prerequisite In the Switching Multicasts GMRP dialog GMRP is enabled Table 20 GMPP settings per port Note If the device is incorporated into a HIPER Ring you can use the following settings to quickly reconfigure the network for data packets with registered Multicast destination addresses after the ring is switched Activate GMRP on the ring ports and globally and activate Forward all groups on the ring ports El100000000482 02 2011 77 Switching 4 5 VLAN 4 5 VLAN VLAN contains dialogs and attributes for configuring and monitoring the VLAN function in accordance with the IEEE 802 1Q standard 4 5 1 VLAN Global With this dialog you can display VLAN parameters activate deactivate the VLAN 0 transparent mod
90. he redundancy functions Ring Redundancy Sub Ring Ring Network coupling Spanning Tree Note The Redundancy Configuration user manual contains extensive information you need to select a suitable redundancy procedure and configure that procedure El100000000482 02 2011 101 Redundancy 6 1 Ring Redundancy 6 1 Ring Redundancy The concept of the Ring Redundancy enables the construction of high availability ring shaped network structures If a section is down the ring structure of a HIPER HIGH PERFORMANCE REDUNDANCY Ring with up to 50 devices typically transforms back to a line structure within 80 ms possible settings standard accelerated MRP Media Redundancy Protocol Ring IEC 62439 of up to 50 devices typically transforms back to a line structure within 80 ms adjustable to max 200 ms 500 ms Fast HIPER Ring of up to 5 devices typically transforms back to a line structure within 5 ms maximum 10 ms With a larger number of devices the reconfiguration time increases With the help of the Ring Manager RM function of a device you can connect both ends of a backbone in a line structure to form a redundant ring Within a HIPER Ring you can use any combination of the following devices TCSESM TCSESM E Within an MRP Ring you can use devices that support the MRP protocol based on IEC62439 TCSESM TCSESM E Within a Fast HIPER Ring you can use the following device TCSESM E Depending on
91. ical passwords when you attempt to write this data the device reports a general error The Web based interface and the user interface CLI use the same passwords as SNMPv3 for the users admin and user Note Passwords are case sensitive Select Modify read only password user to enter the read password Enter the new read password in the New password line and repeat your entry in the Please retype line O L Select Modify read write password admin to enter the read write password Enter the read write password and repeat your entry CI L The Data encryption function controls the encryption of the Web based management data for the transfer between your PC and the device via SNMPVv3 When the data encryption is deactivated the transfer of the configuration data is unencrypted and is protected from corruption The Web based interface always transfers the passwords securely The Web based interface always transfers the user name in plain text The device allows you to set the function differently for the access with the read password and with the read write password 40 EIO0000000482 02 2011 Security 2 1 Password SNMPv3 access Note When you change the SNMPv3 password for the read write access the device automatically synchronizes the readWrite community for the SNMPv1 v2 access to the same value Similarly when the read access password is changed the device
92. ider Electric device is connected E100000000482 02 2011 189 Advanced 8 2 EtherNet IP 8 2 EtherNet IP The EtherNet IP menu allows you to activate and deactivate the EtherNet IP protocol and download the EDS file for this device to your PC to configure the PLC General settings L Inthe Switching Multicasts IGMP dialog check whether IGMP Snooping is activated see on page 69 IGMP Internet Group Management Protocol Global EtherNet IP settings O Activate the function in the EtherNet IP frame the default setting is off O Click on Download EDS File to load the EDS file onto your PC E100000000482 02 2011 190 Advanced 8 3 Command Line 8 3 Command Line This window enables you to access the Command Line Interface CLI using the Web interface You will find detailed information on CLI in the Command Line Interface reference manual El100000000482 02 2011 191 Advanced 8 3 Command Line El100000000482 02 2011 192 Appendix A Appendix E100000000482 02 2011 193 Appendix A 1 Technical Data A 1 Technical Data Switching Size of MAC address table 8 000 incl static filters Max number of statically configured MAC 100 address filters Max number of MAC address filters learnable 512 via GMRP IGMP Snooping Max length of over long packets from rel 1 632 bytes 03 0 00 VLAN VLAN ID 1 to 4 042 Number of VLANs max 255 simultaneously per device max 255 sim
93. ing Tree Algorithm If STP and RSTP are used at the same time the advantages of faster reconfiguration with RSTP are lost in the network segments that are operated in combination A device that only supports RSTP works together with MSTP devices by not assigning an MST region to itself but rather the CST Common Spanning Tree Note By changing the IEEE 802 1D 2004 standard for RSTP the Standards Commission reduced the maximum value for the Hello Time from 10 s to 2 s When you update the Switch software from a release before 5 0 to release 5 0 or higher the new software release automatically reduces the locally entered Hello Time values that are greater than 2 s to 2 s If the device is not the RSTP root Hello Time values greater than 2 s can remain valid depending on the software release of the root device El100000000482 02 2011 127 Redundancy 6 4 Spanning Tree Dual Rapid Spanning Tree Protocol Dual RSTP DRSTP TCSESM E Dual RSTP is an extension of the Rapid Spanning Tree Protocol used to achieve fast switching times for a defined subnetwork even in a worst case scenario in a network with a large diameter One application case for example is a small ring that is connected to a ring with many bridges Dual RSTP allows you to define 2 RSTP instances in such a network configure each RSTP instance with individual parameters and couple these RSTP instances redundantly These instances are called primary
94. ion Duplex problem Duplex modes do not match EMI Electromagnetic interference Network extension The network extension too great or too many hubs are cascaded EIO0000000482 02 2011 61 Switching 4 1 Switching Global Collisions late collisions In full duplex mode the port does not count collisions or late collisions CRC error The device only evaluates these errors as duplex mismatches in the manual full duplex mode No Autonegotiati on W NM OJOJOO 5 5 h h h h gt NI JAJ A o OoOjJojojojojojol o h h h h h h h h h h x a m 4 3 OJO AJOJN OJoJjJojJoljo h h Table 13 62 Current duplex mode Half duplex Half duplex Half duplex Half duplex Full duplex Full duplex Full duplex Full duplex Half duplex Half duplex Half duplex Half duplex Full duplex Full duplex Full duplex Full duplex Detected error events 2 10 None Collisions Late collisions CRC error None Collisions Late collisions CRC error None Collisions Late collisions CRC error None Collisions Late collisions CRC error Evaluation of duplex situation by device OK OK Possible causes Duplex problem Duplex problem EMI detected OK OK OK OK OK OK OK network extension EMI EMI EMI EMI Duplex problem Duplex problem EMI detected OK OK OK OK network extension EMI EMI EMI Duplex pro
95. ly send alarm portDisable disable the port with the corresponding entry in the port configuration table see on page 29 Port Configuration and send an alarm Table 5 Configuration of port security for a single port Note This entry in the port configuration table is part of the configuration see page 31 and is saved together with the configuration Note Prerequisites for the device to be able to send an alarm trap See on page 178 Alarms Traps You have entered at least one recipient You have selected at least one recipient in the Active column Inthe Selection frame you have selected Port Security El100000000482 02 2011 49 Security 2 4 Port Security Configuration MAC Based Port Security IP Based Port Security Allowed Allowed is MAC Addresses MAC Address IP Addresses none none Set Reload J gt wizard Help Figure 15 Port Security dialog Note The IP port security operates internally on layer 2 The device internally translates an allowed IP address into an allowed MAC address when you enter the IP address An ARP request is used for this Prerequisites for the IP based port security The device with the allowed IP address supports ARP The device can be accessed while configuring IP port security The MAC address to which the IP address is assigned is unique and remains unchanged after the IP address
96. m Network p Device Status s5 Software AR ort contortion eu Load Save x Restar Mam Reason Es 8 Security l O Time System data EEN Name ficsesmossrocut Location ON Contact fwwwschneiderelectriccom 00000 Basic module icsesmossF2cut HVE 30 Power supply 12 resertfiaied SS Temperature C L po fs T fo Switching QoSPriority 3 Redundancy Diagnostics UY Advanced Help Current settings Autonegotiation No Forwarding State disabled Figure 3 Website of the device with speech bubble help The menu section displays the menu items By placing the mouse pointer in the menu section and clicking the alternate mouse button you can use Back to return to a menu item you have already selected or Forward to jump to a menu item you have already selected Ww ESN Settings 8 Security Y Time Switching Expand All ogoan Collapse All Back gt gt le on Forward E100000000482 02 2011 18 Basic Settings 1 Basic Settings The Basic Settings menu contains the dialogs displays and tables for the basic configuration System Network Software Port configuration Load Save Restart El100000000482 02 2011 19 Basic Settings 1 1 System 1 1 System The System submenu in the basic set
97. m mm mm with ppppp priority decimal and mm the respective byte of the MAC address hexadecimal Priority Sets the local bridge priority 0 lt n 4096 lt 32 768 The bridge priority and its own MAC 61440 address make up this separate Bridge ID The device with the best numerically lowest priority assumes the role of the root bridge Define the root device by assigning the device the best priority in the Bridge ID among all the devices in the network Enter the value as a multiple of 4 096 Hello Time Sets the Hello Time 1 2 2 The local Hello Time is the time in seconds between the sending of two configuration messages Hello packets If the local device has the root function the other devices in the entire network take over this value Otherwise the local device uses the value of the root bridge in the Root column on the right Table 54 Dual RSTP settings local bridge parameters E100000000482 02 2011 138 Redundancy 6 4 Spanning Tree Parameter Meaning Possible Values Default Setting Forward Sets the Forward Delay parameter 4 30s 15s Delay In the previous STP protocol the Forward See the note Max Age Delay parameter was used to delay the following this table status change between the statuses disabled discarding learning forwarding Since the introduction of RSTP this parameter has a subordinate role because the RSTP bridges negotiate the status change without any specified d
98. ng 86 HIPER Ring Select the port VLAN ID 1 for the ring ports and deactivate Ingress Filtering MRP Ring Ifthe MRP Ring configuration See on page 108 Configuring the MRP Ring is not assigned to a VLAN select the port VLAN ID 1 Ifthe MRP Ring configuration See on page 108 Configuring the MRP Ring is assigned to a VLAN the device automatically performs the VLAN configuration for this port Fast HIPER Ring TCSESM E Ifthe Fast HIPER Ring configuration See on page 111 Configuring the Fast HIPER Ring TCSESM E is not assigned to a VLAN select the port VLAN ID 1 Ifthe Fast HIPER Ring configuration See on page 111 Configuring the Fast HIPER Ring TCSESM E is assigned to a VLAN the device automatically performs the VLAN configuration for this port Network Ring coupling Select the VLAN ID 1 for the coupling and partner coupling ports and deactivate Ingress Filtering El100000000482 02 2011 Switching 4 5 VLAN i nF Ae zz qaqa admitAlll admitAlll admitAlll admitAlll a3 2 qo admitAlll admitAll AE M BE E E 7 admitAlll a a acti E i q Figure 26 VLAN Port dialog E100000000482 02 2011 87 Switching 4 5 VLAN 88 EIO0000000482 02 2011 QoS Priority 5 QoS Priority The device enables you to set how it evaluates the QoS prioritizing information of incoming data packets VLAN prio
99. ng Device Coupling port TCSESM Adjustable for all ports default setting port 1 4 TCSESM E Adjustable for all ports default setting port 1 4 Table 46 Port assignment for the redundant coupling two Switch coupling Device Coupling port Control port TCSESM Adjustable for all ports Adjustable for all ports default setting port 1 4 default setting port 1 3 TCSESM E Adjustable for all ports Adjustable for all ports default setting port 1 4 default setting port 1 3 Table 47 Port assignment for the redundant coupling two Switch coupling with control line Note For the coupling ports select the following settings in the Basic Settings Port Configuration dialog El100000000482 02 2011 124 Redundancy 6 3 Ring Network Coupling Port on Automatic configuration autonegotiation on for twisted pair connections Manual configuration 100 Mbit s FDX or 1 Gbit s FDX for glass fiber connections depending on the port s capabilities Note If you have configured VLANS note the VLAN configuration of the coupling and partner coupling ports In the Ring Network Coupling configuration select for the coupling and partner coupling ports VLAN ID 1 and Ingress Filtering disabled in the port table and VLAN membership U in the static VLAN table Note If you are operating the Ring Manager and two Switch coupling functions at the same time there is the possibility of creating a loop El1000000
100. ng error disabled 5 60 000 ms 45 ms MAC address in single mode 00 00 00 00 00 00 Table 60 Dual RSTP settings Coupling Configuration El100000000482 02 2011 145 Redundancy Parameter Partner IP read only Coupling status read only Redundancy status read only Meaning The IP address of the Dual RSTP partner device Displays the coupling status of the local device Specifies whether a redundancy reserve is available with a correct 6 4 Spanning Tree Default Setting IPv4 address in single mode 0 0 0 0 0 forwarding E blocking Redundancy available Possible Values configuration and in normal operation redundancy not or not with configuration problems or available a failure For a master slave configuration both bridges display this information Table 60 Dual RSTP settings Coupling Configuration Operation Co Cot Protocol Configuration Information Bridge Root Topology Bridge ID e2766 1008063975000 s2768 008063975000 Bridge is Root Priority 32768 v bzs RotPot HeloTimeis Po E O RotPahcos Forward Delay s fs fs o Topology Change Count Max Age booo f Tx Hold Cout filo BPDU Guard E Dual RSTP Primary Ring Dual RSTP Coupler Configuration Inner Port 0 0 id Role master kd Outer Port 0 0 hd Current Role disabled Timeout ms fs ti i S SCS Dual RSTP Secondary Ring Partner MAC foo 00 00 00 00 00 Inner Port 0 0 fi Partne
101. ng basic configuration El100000000482 02 2011 Default Setting 4 115 Redundancy Parameter Meaning Function on Activate the Sub Ring only when the off configuration has been completed then close the Sub Ring Configuration A symbol displays the current state of the Sub State Ring Redundancy A symbol displays whether the redundancy exists exists Module Port ID of the port that connects the device to the Sub Ring Name Optional name for the Sub Ring SRM Target state Mode Define whether this SRM is to manage the redundant connection Redundant Manager mode or not If you have set the same value for the SRM Mode for both SRMs the SRM with the higher MAC address assumes the function of redundant manager SingleManager describes the special state when you connect a Sub Ring via 2 ports of a single device In this case the port with the higher port number manages the redundant connection SRM Actual state State Shows whether this SRM manages the redundant connection Redundant Manager mode or not If you have set the same value for the SRM Mode for both SRMs the SRM with the higher MAC address assumes the function of redundant manager SingleManager describes the special state when you connect a Sub Ring via 2 ports of a single device In this case the port with the higher port number manages the redundant connection Port Status Connection status of the Sub Ring port Table 40
102. o take this event into account you activate Create trap when status changes in the Diagnostics Signal Contact 1 2 dialog The receiver power status of a port with an SFP module has changed see dialog Diagnostics Ports SFP Modules The configuration has been successfully saved in the device and in the Memory Backup Adaptor EAM if present The configuration has been changed for the first time after being saved in the device The redundancy status of the ring redundancy redundant line active inactive or for devices that support redundant ring network coupling the redundant ring network coupling redundancy exists has changed On one port a data packet has been received from an unauthorized terminal device see the Port Security dialog Table 68 Trap categories 178 El100000000482 02 2011 Diagnostics 7 8 Alarms Traps A AAAI _s _ _Reoat _ cremeenry dette En 2r Figure 48 Alarms Dialog E100000000482 02 2011 179 Diagnostics 7 9 Report 7 9 Report The following reports are available for the diagnostics Log file The log file is an HTML file in which the device writes important device internal events System information The system information is an HTML file containing system relevant data Note You have the option to also send the logged events to one or more syslog servers see on page 158 Syslog The following buttons are available Download Switc
103. oad Creste entry Delete entry O Help Figure 25 VLAN Static Dialog Note When configuring the VLAN the management station must maintain access to the device after the VLAN configuration is saved You achieve this by connecting the management station to a port with the VLAN ID 1 The device transmits the data of the management station in VLAN 1 Note The device automatically creates VLANs for MRP rings The MRP ring function prevents the deletion of these VLANs 84 EIO0000000482 02 2011 Switching 4 5 VLAN Redundancy VLAN membership HIPER Ring VLAN 1 U MRP Ring any Ring Network coupling VLAN 1 U Table 26 Required VLAN settings for ports that are part of redundant Rings or Ring Network coupling 4 5 4 VLAN Port With this dialog you can assign ports to VLANs define the Acceptable Frame Type activate deactivate Ingress Filtering Parameter Meaning Possible Default Setting Values Module Module of the device on which the port is located Port Port to which this entry applies Port VLAN ID Specifies the VLAN to which the port All allowed 1 assigns a received untagged data VLAN IDs packet Acceptable Frame Specifies whether the port may also admitAll admitAll Types receive untagged data packets admitOnlyVla nTagged Ingress Filtering Specifies whether the port evaluates on off off the received tags Table 27 VLAN Port dialog El100000000482 02 2011 85 Switching 4 5 VLAN Note Note the followi
104. obal El00000000482 02 2011 29 Basic Settings 1 4 Port Configuration Note The active automatic configuration has priority over the manual configuration Note When you are using a redundancy function you deactivate the flow control on the participating ports Default setting flow control deactivated globally and activated on all ports If the flow control and the redundancy function are active at the same time the redundancy may not work as intended Note The following settings are required for the ring ports in a HIPER Ring Port Type Bit Rate Autonegotiation Port Setting Duplex Automatic Configuration Mode Optical all off on full TX 100 Mbit s off on full TX 1000 Mbit s on on Table 2 Port Settings for Ring Ports When you switch the DIP switch for the ring ports the device sets the required settings for the ring ports in the configuration table The port which has been switched from a ring port to a normal port is given the settings Autonegotiation automatic configuration on and Port on The settings remain changeable for all ports 30 El100000000482 02 2011 Basic Settings 1 5 Loading Saving the Configuration 1 5 Loading Saving the Configuration With this dialog you can load a configuration save a configuration enter a URL restore the delivery configuration use the Memory Backup Adaptor TCSEAM0100 for loading saving the configuration cancel a configuration change Load f
105. ocedure HIPER Ring MRP Ring Fast HIPER Ring Port for the Dual RSTP Primary instance that is directly connected with the Dual RSTP partner master or slave The complimentary port to the inner port for the Dual RSTP Primary Instance that closes the ring for the instance Note The functions of the inner and outer ports only differ if there are 2 coupling bridges in the instance For a device in the single mode the functions of the inner and outer ports are identical Table 57 Dual RSTP settings Primary Ring ports 142 6 4 Spanning Tree Possible Default Values Setting Valid port 0 0 no port Valid port 0 0 no port El100000000482 02 2011 Redundancy Parameter Frame Dual RSTP Secondary Ring Inner Port Outer Port 6 4 Spanning Tree Meaning Possible Values Note On the ports of the Dual RSTP Secondary Ring exclude a combination with other redundancy procedures and settings Port of the Dual RSTP Secondary Valid port instance that is directly connected with the Dual RSTP partner The complementary port to the inner Valid port port for the Dual RSTP Secondary Instance that closes the ring for the instance Note The functions of the inner and outer ports only differ if there are 2 coupling bridges in the instance For a device in the single mode the functions of the inner and outer ports are identical Table 58 Dual RSTP settings Secondary Ring ports Dual RS
106. odule and port numbers to which this entry applies IGMP Snooping on Switch IGMP on off for each port on off on Switching IGMP off at a port prevents registration for this port Prerequisite In the Switching Multicasts IGMP dialog IGMP is enabled IGMP Forward All Switch the IGMP Snooping function on off off Forward All on off With the IGMP Forward A11 setting the device sends to this port all data packets with a Multicast address in the destination address field Prerequisite In the Switching Multicasts IGMP dialog IGMP is enabled Note If a number of routers are connected to a subnetwork you must use IGMP version 1 so that all the routers receive all the IGMP reports Note If you use IGMP version 1 ina subnetwork then you must also use IGMP version 1 in the entire network IGMP Automatic Displays which ports the device has yes no Query Port learned as query ports if automaticis selected in Static Query Port Prerequisite The IGMP Snooping function is activated globally Static Query Port The device sends IGMP report enable disable messages to the ports at which it disable receives IGMP queries default automatic setting This column allows you to also send IGMP report messages to other selected ports enable or connected Schneider Electric devices automatic Prerequisite The IGMP Snooping function is activated globally Learned Query Shows at which ports the device has
107. og Select vl simple mode if the reference clock uses PTP Version 1 Select v2 simple mode if the reference clock uses PTP Version 2 IP DSCP Value for Management packets 0 be cs0 vi Number of Queues per Port Trust Mode trustDotip v Csa Creosa Hep Figure 18 Dialog PTP EIO0000000482 02 2011 57 Time 3 2 PTP IEEE 1588 58 El100000000482 02 2011 Switching 4 Switching The switching menu contains the dialogs displays and tables for configuring the switching settings Switching Global Filters for MAC Addresses Rate Limiter Multicasts VLAN El100000000482 02 2011 59 Switching 4 1 Switching Global 4 1 Switching Global Variable Meaning Possible Values MAC address Display the MAC address of the device read only Aging Time s Enter the Aging Time in seconds for 15 3 825 30 dynamic MAC address entries Flow control Activate deactivate the flow control On Off Off Table 11 Switching Global dialog Note When you are using a redundancy function you deactivate the flow control on the participating ports Default setting flow control deactivated globally and activated on all ports If the flow control and the redundancy function are active at the same time the redundancy may not work as intended 60 El100000000482 02 2011 Switching Variable Learning addresses Frame size Activate Address Relearn Detection Address Relearn Threshold Activate Duplex Mismatch Det
108. onal functions display the parameters of the root bridge and display bridge related topology information Note Rapid Spanning Tree is activated on the device by default and it automatically begins to resolve the existing topology into a tree structure If you have deactivated RSTP on individual devices you avoid loops during the configuration phase A WARNING RSTP LOOP HAZARD To avoid loops during the configuration phase configure all the devices of the RSTP configuration individually Before you connect the redundant lines you must complete the configuration of all devices in the RSTP configuration Failure to follow these instructions can result in death serious injury or equipment damage El100000000482 02 2011 129 Redundancy 6 4 Spanning Tree The following tables show the selection options and default settings and information on the global Spanning Tress settings for the bridge Parameter Meaning Possible Values Default Setting Frame Switches the Spanning Tree function for On On Function this device On or Off Off If you switch off the Spanning Tree for a device globally the device floods the Spanning Tree packets received like normal Multicast packets to the ports Thus the device behaves transparently with regard to Spanning Tree packets Frame The protocol version is always RSTP RSTP RSTP Protocol IEEE 802 1w ina shared instance
109. ority remarking the device modifies the VLAN priority of the IP packets if the packets are to be sent with a VLAN tag see on page 83 VLAN Static Based on the traffic class to which the IP packet was assigned see above the device assigns the new VLAN priority to the IP packet in accordance with table 28 Example A received IP packet with a DSCP value of 32 cs4 is assigned to traffic class 2 default setting The packet was received at a port with port priority 2 Based on table 28 the VLAN priority is set to 4 Note Changing the global setting for Trust Mode and clicking Set will set all ports settings at once You can then modifiy each port s settings individually Changing the global setting again will overwrite the individual port settings El100000000482 02 2011 94 QoS Priority 5 1 Global Traffic class New VLAN priority New VLAN priority when receiving port when receiving port has an even port priority has an odd port priority 0 0 1 1 2 3 Table 28 VLAN priority remarking 2 4 5 3 6 7 92 EIO0000000482 02 2011 QoS Priority 5 2 Port Configuration 5 2 Port Configuration This dialog allows you to configure the ports You can assign a port priority to a port Parameter Meaning Module Module of the device on which the port is located Port Port to which this entry applies Port priority Enter the port priority Table 29 Port configuration table 5 2 1 Entering the port priority
110. ormation Note If the received BPDU contains other information apart from the topology change flag that causes a topology change the device processes the BPDU even if the TCN guard is activated Example the device receives better path information for the root than that already known 6 4 Spanning Tree Possible Values Default Setting active box inactive selected inactive box empty active box inactive selected inactive box empty Table 62 Port related STP settings and displays guards 152 El100000000482 02 2011 Redundancy 6 4 Spanning Tree Parameter Meaning Possible Values Default Setting Loop Guard The Loop Guard setting is only meaningful active box inactive for ports with the STP role alternate selected backup or root If the Loop Guard settingis inactive box active and the port has not received any STP empty BPDUs for a while the device sets the port to the discarding condition port sends no more data The device also sets the port to what is known as the loop inconsistent status and displays this in the Loop Status column The device prevents a potential loop if no more STP BPDUs are received if for example you switch STP off on the remote device or the link only becomes inoperable in the receiving direction When the port receives BPDUs again the device resets the loop status of the port to false and the transmission status of the port according to
111. ossible the device automatically performs a cold start reset the entries with the status learned in the filter table MAC address table reset the ARP table The device maintains an ARP table internally If for example you assign a new IP address to a computer and subsequently cannot set up a connection to the device you then reset the ARP table reset the port counters delete the log file Note During the restart the device temporarily does not transfer any data and it cannot be accessed via the Web based interface or other management systems El100000000482 02 2011 37 Basic Settings 1 6 Restart Figure 11 Restart Dialog 38 E100000000482 02 2011 Security 2 Security The Security menu contains the dialogs displays and tables for configuring the security settings Password SNMPv3 access SNMPv1 v2 access Telnet Web access Restricted management access Port security E100000000482 02 2011 39 Security 2 1 Password SNMPv3 access 2 1 Password SNMPv3 access This dialog gives you the option of changing the read and read write passwords for access to the device via the Web based interface via the CLI and via SNMPv3 SNMP version 3 Set different passwords for the read password and the read write password so that a user that only has read access user name user does not know or cannot guess the password for read write access user name admin If you set ident
112. ous situation which if not avoided can result in minor or moderate injury EIO0000000482 02 2011 Safety Information PLEASE NOTE Electrical equipment should be installed operated serviced and maintained only by qualified personnel No responsibility is assumed by Schneider Electric for any consequences arising out of the use of this material 2011 Schneider Electric All Rights Reserved El100000000482 02 2011 About this Manual About this Manual Validity Note The data and illustrations found in this book are not binding We reserve the right to modify our products in line with our policy of continuous product development The information in this document is subject to change without notice and should not be construed as a commitment by Schneider Electric Product Related Information Schneider Electric assumes no responsibility for any errors that may appear in this document If you have any suggestions for improvements or amendments or have found errors in this publication please notify us No part of this document may be reproduced in any form or by any means electronic or mechanical including photocopying without express written permission of Schneider Electric All pertinent state regional and local safety regulations must be observed when installing and using this product For reasons of safety and to ensure compliance with documented system data only the manufacturer should perform repairs to compon
113. pdate completed successfully Update failed Reason incorrect file Update failed Reason error when saving File not found reason file name not found or does not exist Connection error reason path without file name L After the update is completed successfully you activate the new software Select the Basic settings Restart dialog and perform a cold start In a cold start the device reloads the software from the non volatile memory restarts and performs a self test L In your browser click on Reload so that you can access the device again after it is booted 1 3 4 Automatic software update by EAM The device also allows you to perform an automatic software update using the EAM You will find the relevant details in the document Basic Configuration User chapter Automatic Software Update by EAM 28 EIO0000000482 02 2011 Basic Settings 1 4 Port Configuration 1 4 Port Configuration This configuration table allows you to configure each port of the device and also display each port s current mode of operation link state bit rate speed and duplex mode In the Name column you can enter a name for every port In the Ports on column you can switch on the port by selecting it here In the Propagate connection error column you can specify that a link alarm will be forwarded to the device status and or the the signal contact is to be opened In the Automatic Configuration column
114. poos poon T wen private 0 0 0 0 0 0 0 0 readrite M Figure 13 SNMPv1 v2 Access Dialog E100000000482 02 2011 45 Security 2 3 Telnet Web Access 2 3 Telnet Web Access This dialog allows you to switch off the Telnet server and the Web server on the device Figure 14 Telnet Web Access dialog 46 E100000000482 02 2011 Security 2 3 Telnet Web Access 2 3 1 Description of Telnet Access The Telnet server of the device allows you to configure the device using the Command Line Interface in band You can deactivate the Telnet server to disable Telnet access to the device The server is activated in the state on delivery After the Telnet server has been deactivated you will no longer be able to access the device via a new Telnet connection If a Telnet connection already exists it is kept Note The Command Line Interface out of band and the Security Telnet Web access dialog in the Web based interface allow you to reactivate the Telnet server 2 3 2 Description of Web Access The Web server of the device allows you to configure the device by using the Web based interface Deactivate the Web server if you do not want the device to be accessed from the Web On delivery the server is activated After the Web server has been switched off it is no longer possible to log in via a Web browser The login in the open browser window remains active Note The Command Line Interface allows you to reactivate the W
115. ports Discard The device discards all packets with an unknown MAC IP Multicast address Send to query and registered ports The device sends the packets with a known MAC IP Multicast address to all query ports and to registered ports The advantage of this is that it works in many applications without any additional configuration Application Flood and Prune routing in PIM DM Send to registered ports The device sends the packets with a known MAC IP Multicast address to registered ports The advantage of this setting is that it uses the available bandwidth optimally through direct distribution It requires additional port settings Application Routing protocol PIM SM Table 17 Known and unknown Multicasts 4 4 Multicasts Value range Default setting Send to Query Send to All Ports Send to Ports All Ports Discard Send to query Send to and registered registered ports ports send to registered ports Note The way in which unlearned Multicast addresses are handled also applies to the reserved addresses from the Local Network Control Block 224 0 0 0 224 0 0 255 This can have an effect on higher level routing protocols El100000000482 02 2011 73 Switching 4 4 Multicasts Settings per Port Table With this configuration table you can enter port related IGMP settings 74 El100000000482 02 2011 Switching 4 4 Multicasts Parameter Meaning Value range Default setting Port M
116. previous configuration if possible and make another attempt after 15 seconds The device therefore avoids to participate in the network traffic with a duplicate IP address Enables passive detection only The device listens passively on the network to determine whether its IP address already exists If it detects a duplicate IP address it will initially defend its address by employing the ACD mechanism and sending out gratuitous ARPs If the remote device does not disconnect from the network the management interface of the local device will then disconnect from the network Every 15 seconds it will poll the network to determine if there is still an address conflict If there isn t it will connect back to the network Table 70 Possible address conflict operation modes In the table the device logs IP address conflicts with its IP address For each conflict the device logs the time the conflicting IP address the MAC address of the device with which the IP address conflicted For each IP address the device logs a line with the last conflict that occurred L You can delete this table by restarting the device El100000000482 02 2011 183 Diagnostics 7 10 IP address conflict detection Figure 50 IP Address Conflict Detection dialog E100000000482 02 2011 184 Diagnostics 7 11 Self Test 7 11 Self Test With this dialog you can gt activate deactivate the RAM test for a cold start of the device Deacti
117. pt shorter passwords Access at IP address level is restricted in a separate dialog see on page 43 SNMPv1 v2 Access Settings 42 El100000000482 02 2011 Security 2 2 SNMPv1 v2 Access Settings 2 2 SNMPvl v2 Access Settings With this dialog you can select access via SNMPv1 or SNMPv2 In the state on delivery both protocols are activated You can thus use the device to communicate with earlier versions of SNMP Note To be able to read and or change the data in this dialog log in to the Web based interface with the user name admin and the relevant password In the Index column the device displays the access restriction s sequential number In the Password column you enter the password with which a management station may access the device via SNMPv1 v2 from the specified address range Note Passwords are case sensitive In the IP Address column you enter the IP address which may access the device No entry in this field or the entry 0 0 0 0 allows access to this device from computers with any IP address In this case the only access protection is the password In the IP Mask column much the same as with netmasks you have the option of selecting a group of IP addresses Example 255 255 255 255 a single IP address 255 255 255 240 with IP address 172 168 23 20 the IP addresses 172 168 23 16 to 172 168 23 31 El100000000482 02 2011 43 Security 2 2 SNMPv1 v2 Acces
118. r IP foooo Outer Port 0 0 v Coupling State Redundancy State reciotAvailable Set Reload Figure 36 Dual RSTP dialog 146 o o Time Since Topology Change 0 day s 0 02 45 Help EIO0000000482 02 2011 Redundancy 6 4 Spanning Tree 6 4 3 Port Note Deactivate the Spanning Tree protocol for the ports connected to a HIPER Ring Fast HIPER Ring or Ring Network coupling because Spanning Tree and Ring Redundancy or Ring Network coupling affect each other Activate the MRP compatibility in an MRP Ring if you want to use RSTP and MRP in combination If you combine RSTP with an MRP Ring you must give the devices in the MRP Ring a better i e numerically lower RSTP bridge priority than the devices in the connected RSTP network You thus help avoid a connection interruption for devices outside the Ring If you are using the device in a Multiple Spanning Tree MSTP environment the device only participates in the Common Spanning Tree CST instance This chapter of the manual also uses the term Global MST instance to describe this general case El100000000482 02 2011 147 Redundancy Parameter Tab CIST STP active Dual RSTP active for TCSESM E Port status read only Port role read only 6 4 Spanning Tree Meaning Possible Values Default Setting Port configuration and information on the global MSTI IST and the CST Here you can switch Spanning Tree On Off On on or of
119. rity based on IEEE 802 1Q 802 1D Layer 2 Type of Service ToS or DiffServ DSCP for IP packets Layer 3 which QoS prioritizing information it writes to outgoing data packets e g priority for management packets port priority The QoS Priority menu contains the dialogs displays and tables for configuring the QoS priority settings Global Port configuration IEEE 802 1D p mapping IP DSCP mapping El100000000482 02 2011 89 QoS Priority 5 1 Global 5 1 Global With this dialog you can enter the VLAN priority for management packets in the range 0 to 7 default setting 0 In order for you to have full access to the management of the device even when there is a high network load the device enables you to prioritize management packets In prioritizing management packets SNMP Telnet etc the device sends the management packets with priority information Note the assignment of the VLAN priority to the traffic class see table 31 enter the IP DSCP value for management packets in the range 0 to 63 default setting 0 be cs0 In order for you to have full access to the management of the device even when there is a high network load the device enables you to prioritize management packets In prioritizing management packets SNMP Telnet etc the device sends the management packets with priority information Note the assignment of the IP DSCP value to the traffic class see table 32 Note Certain D
120. rk 1 2 Network With the Basic settings Network dialog you define the source from which the device gets its IP parameters after starting and you assign the IP parameters and VLAN ID and configure the Ethernet Switch Configuration Software access Mode BOOTP DHCP MAC Address 00 80 63 97 50 00 DHCP C BooTe Systemname TCSESMOB3F2CU1 C DHCP Local Local P Address f10 0 1 220 Netmask 255 255 255 0 Gateway address 10 0 1 1 VLAN Ethernet Switch Configurator Protocol Dh Operation On Off Access read write Set Reload Help Figure 8 Network parameters dialog L Under Mode you enter where the device gets its IP parameters In the BOOTP mode the configuration is via a BOOTP or DHCP server on the basis of the MAC address of the device see on page 31 Loading Saving the Configuration In the DHCP mode the configuration is via a DHCP server on the basis of the MAC address or the name of the device see on page 31 Loading Saving the Configuration In the local mode the net parameters in the device memory are used 24 EIO0000000482 02 2011 Basic Settings 1 2 Network Note When you change the mode of the IP address the device activates the new mode immediately after the Set button is pressed L Enter the parameters on the right according to the selected mode O You enter the name applicable to the DHCP protocol in the Name line in the system dialog of the Web bas
121. romDevice fromURL C from URL amp savetoDevice via PC Restore Save toDevice C to URL binary to URL script toPC binary to PC script Save URL ittp 1192 168 1100productiproductctg Delete Current Configuration Current Configuration and from Device Delete configuration EAM m Status Undo Modifications of Configuration Function Period to undo while Connection is lost s 600 Watchdog IP Address 0 0 0 0 Set Reload Help Figure 10 Load Save dialog EIO0000000482 02 2011 34 Basic Settings 1 5 Loading Saving the Configuration 1 5 1 Loading the configuration In the Load frame you have the option to load a configuration saved on the device load a configuration stored under the specified URL load a configuration stored on the specified URL and save it on the device load a configuration saved on the PC in binary format If you change the current configuration for example by switching a port off the Web based interface changes the load save symbol in the navigation tree from a disk symbol to a yellow triangle After saving the configuration the Web based interface displays the load save symbol as a disk again Note Loading a configuration deactivates the ports while the configuration is being set up Afterwards the Switch sets the port status according to the new configuration 1 5 2 Saving the Configuration In the Save frame you have the option to save
122. rt receives any STP BPDU the device sets the port status BPDU Guard Effect to true and the transmission status of the port to discarding see table 62 Thus the device helps protect your network at terminal device ports from incorrect configurations or attacks with STP BPDUs that try to change the topology Table 54 Dual RSTP settings local bridge parameters Note The parameters Forward Delay and Max Age have the following relationship Forward Delay 2 Max Age 2 1 If you enter values that contradict this relationship the device then replaces these values with the last valid values or the default value El100000000482 02 2011 140 Redundancy Parameter Meaning 6 4 Spanning Tree Possible Values Default Setting Column Information on the device that is currently Root the root bridge Bridge ID The Bridge ID ofthe current root bridge The format is ppppp mm mm mm mm mm mm with ppppp priority decimal and mm the respective byte of the MAC address hexadecimal Priority The Priority of the current root bridge 0 lt n 4096 lt 32768 61440 Hello Time The Hello Time of the current root bridge 1 2 2 Forward The Forward Delay ofthe current root bridge 4 30s 30s Delay OO Max Age The Max Age of the current root bridge 6 40s 20s Table 55 Dual RSTP settings root bridge information Parameter Meaning Value range Column Topology Bridge is root Root Port Root path costs
123. s Limiter Rate for the inbound packet type selected 0 no ingress limit at this port gt 0 maximum inbound traffic rate in kbit s that can be received at this port Egress Limiter Rate for broadcast packets 0 no rate limit for outbound broadcast packets at this port gt 0 maximum number of outbound broadcasts per second that can be sent at this port Egress Limiter Rate for the entire data stream 0 no rate limit for outbound data stream at this port gt 0 maximum outbound transmission rate in kbit s sent at this port El100000000482 02 2011 67 Switching 4 3 Rate Limiter Ingress Limiter kbit s Egress Limiter Pkt s Packet Type BC Egress Limiter kbit s Packet Type all Function Oon off Function On Off Function Oon off Egress Egress Limit Pits Limit kbit s Packet Type BC Packet Type all Ingress Ingress Lee Packet Types Limiter Rate kbit s IBC SIBC Mc SIBC MC uUC plololaolololalsjololololalolole plojojojojojojojojojojojojojols plojojojojojojojojojojojojojo Figure 21 Rate Limiter Dialog 68 E100000000482 02 2011 Switching 4 4 Multicasts 4 4 Multicasts 4 4 1 IGMP Internet Group Management Protocol With this dialog you can activate deactivate the IGMP Snooping protocol configure the IGMP Snooping protocol globally and per port Funktion IGMP
124. s Settings Binary notation of the mask 255 255 255 240 0000 __l ____ mask bits Binary notation of the IP address 172 168 23 20 1010 1100 1010 1000 0001 0111 0001 0100 The binary representation of the mask with the IP address yields an address range of 0000 bis 1111 i e 172 168 23 16 to 172 168 23 31 In the Access Mode column you specify whether this computer can access the device with the read password access mode readOnly or with the read write password access mode readWrite Note The password for the readOnly access mode is the same as the SNMP v3 password for read access The password for the readWrite access mode is the same as the SNMPv3 password for read write access When you change one of the passwords the device automatically synchronizes the corresponding password for SNMPv3 see on page 40 Password SNMPv3 access You can activate deactivate this table entry in the Active column Note If you have not activated any line the device does not apply any access restriction with regard to the IP addresses The Create entry button enables you to create a new row in the table With Delete entry you delete selected rows in the table Note The row with the password currently in use cannot be deleted or changed AA El100000000482 02 2011 Security 2 2 SNMPv1 v2 Access Settings Index Password IP Adaress IP mask Access mode Active ies
125. selected using the software are grayed out in the dialog To configure using the software select the relevant Ring Network coupling constellation by pressing the corresponding button This is the port to which you have connected a redundant connection Note Configure the coupling port and the ring ports if there are any ring ports on different ports Note To avoid continuous loops the device sets the port status of the coupling port to off if you switch off the function or change the configuration while the connections are operating at these ports active You have switched the port on stand by The port is in stand by mode active You have switched the port on stand by The port is in stand by mode not connected You have not connected the port This is the port at which the partner has made its connection It is only possible and necessary to enter a port if One Switch coupling is being set up Note Configure the partner coupling port and the ring ports if there are any ring ports on different ports If you have selected Two Switch coupling the device displays the IP address of the partner here once you have already started operating the partner in the network This is the port to which you connect the control line Here you switch the Ring Network coupling for this device on or off Table 44 Ring Network Coupling dialog El100000000482 02 2011 123 Redundancy 6 3 Ring Network Couplin
126. sending and receiving directions The destination port forwards both data to be sent and received data L Select the source ports whose data traffic you want to review from the list of physical ports by checkmarking the relevant boxes You can select a maximum of 8 source ports Ports that cannot be selected are displayed as inactive by the device e g the port currently being used as the destination port or if you have already selected 8 ports Default setting no source ports O Select the destination port to which you have connected your management tool from the list element in the Destination Port frame The device does not display ports that cannot be selected in the list e g the ports currently being used as source ports Default setting port 0 0 no destination port O Select On in the Function frame to switch on the function Default setting Off The Reset configuration button in the dialog allows you to reset all the port mirroring settings of the device to the state on delivery Note When port mirroring is active the specified destination port is used solely for reviewing and does not participate in the normal data traffic E100000000482 02 2011 169 Diagnostics 7 5 Port Mirroring Figure 45 Dialog Port Mirroring E100000000482 02 2011 170 Diagnostics 7 6 Device Status 7 6 Device Status The device status provides an overview of the overall condition of the device M
127. ss of the power supply voltage or of the internal voltage that is generated from the external power supply One of the temperature thresholds has been exceeded see on page 21 System Data Select Monitor for the temperature if the signal contact should report an impermissible temperature Removing a module Select Monitor for removing modules if the signal contact is to report the removal of a module for modular devices The removal of the EAM Select Monitor for EAM removal if the signal contact is to report the removal of an EAM for devices which support the EAM Non matching of the configuration in the device and on the EAM Select Monitor EAM not in sync if the signal contact is to report the non matching of the configuration for devices which support EAM The inoperable link status of at least one port The reporting of the link status can be masked via the management for each port in the device Link status is not monitored in the state on delivery Select Monitor for bad connections if the signal contact is to report an inoperative link status for at least one port If the device is part of a redundant ring the elimination of the reserve redundancy i e the redundancy function did actually switch on see on page 102 Ring Redundancy Select Monitor for the ring redundancy if the signal contact is to report the elimination of the reserve redundancy in the redundant ring De
128. stances Only activate the Admin Edge Port setting at a port when a terminal device is connected to the port Failure to follow these instructions can result in death serious injury or equipment damage E100000000482 02 2011 136 Redundancy 6 4 Spanning Tree The following tables show the selection options default settings and information for the Dual RSTP Secondary Ring Parameter Meaning Possible Values Default Setting Frame Switches the Dual RSTP function for this On off Off Operation device On or Off Table 53 Dual RSTP settings basic function Note If you have activated Dual RSTP the device displays the parameters of the Primary and Secondary Rings in the following dialogs Dual RSTP Primary Ring Display in the Redundancy Spanning Tree Global dialog in the Protocol Configuration Information frame Dual RSTP Secondary Ring Display in the Redundancy Spanning Tree Dual RSTP dialog in the Protocol Configuration Information frame El100000000482 02 2011 137 Redundancy 6 4 Spanning Tree In the Protocol Configuration Information frame you can configure the following values and read information Parameter Meaning Possible Values Default Setting Column Information and configuration Bridge parameters of the local device Bridge ID The local Bridge ID made up of the local read only priority and its own MAC address The format is ppppp mm mm mm m
129. synchronizes the readOnly community for SNMPv1 v2 see on page 43 SNMPv1 v2 Access Settings As the Web based interface displays the communities readably in the dialog for SNMPv1 v2 this dialog can only be accessed by a user who has logged in with the user name admin and the correct read write password Note When you change the SNMPv3 password for the user name with which you have logged in to the Web based interface log in again so that you can access the Web based interface of the device again Otherwise you will get a general error message when you attempt to access it Select password CLIWWEB SNMPy3 Modify read only Password user Modify read write Password admin New Password Please retype Set Help Figure 12 Dialog Password SNMP Access El100000000482 02 2011 41 Security 2 1 Password SNMPv3 access Note If you do not know a password with read write access you will not have write access to the device Note For security reasons the device does not display the passwords Make a note of every change You cannot access the device without a valid password Note For security reasons SNMPv3 encrypts the password With the SNMPv1 or SNMPv2 setting in the dialog Security SNMPv1 v2 access the device transfers the password unencrypted so that this can also be read Note Use between 5 and 32 characters for the password in SNMPv3 since many applications do not acce
130. t product bin Update HTTP Software Update File a Update Figure 9 Software dialog 26 EIO0000000482 02 2011 Basic Settings 1 3 Software 1 3 1 View the software versions present on the device You can view Stored Version The software version stored in the flash memory Running Version The currently loaded software version Backup Version The previous software version stored in the flash memory 1 3 2 TFTP Software Update For a tftp update you need a tftp server on which the software to be loaded is stored The URL identifies the path to the software stored on the tftp server The URL is in the format tftp IP address of the tftp server path name file name e g tftp 192 168 1 1 device device bin Click tftp Update to load the software from the tftp server to the device To start the new software after loading cold start the device see on page 37 Restart 1 3 3 HTTP Software Update For an HTTP software update via a file selection window the device software must be on a data carrier that you can access from your workstation El100000000482 02 2011 27 Basic Settings 1 3 Software O In the file selection frame click on LI In the file selection window select the device software name type bin e g device bin and click on Open LI Click on Update to transfer the software to the device The end of the update is indicated by one of the following messages U
131. t try to change the topology Table 49 Global Spanning Tree settings local bridge parameters Note The parameters Forward Delay and Max Age have the following relationship Forward 132 Delay 2 Max Age 2 1 El100000000482 02 2011 Redundancy 6 4 Spanning Tree If you enter values that contradict this relationship the device then replaces these values with the last valid values or the default value Parameter Meaning Possible Values Default Setting Column Information on the device that is currently Root the root bridge Bridge ID The Bridge ID ofthe current root bridge The format is ppppp mm mm mm mm mm mm with ppppp priority decimal and mm the respective byte of the MAC address hexadecimal Priority The Priority of the current root bridge 0 lt n 4096 lt 32768 61440 Hello Time The Hello Time of the current root bridge 1 2 2 Forward The Forward Delay ofthe current root bridge 4 30s 30s Delay Max Age The Max Age of the current root bridge 6 40s 20s Table 50 Global Spanning Tree settings root bridge information Parameter Meaning Value range Column Topology Spanning Tree topology information Bridge is root If the local device is currently the root bridge Selected not the device displays this box as selected and selected otherwise as empty Root Port The port of the device from which the current Valid port ID or 0 path leads to the root bridge 0 the local bri
132. the configuration phase configure all the devices of the MRP Ring individually Before you connect the redundant line you must complete the configuration of all the devices of the MRP Ring Failure to follow these instructions can result in death serious injury or equipment damage E100000000482 02 2011 108 Redundancy 6 1 Ring Redundancy Parameter Ring port X X operation Configuration Redundancy Manager Ring Manager Redundancy Manager Mode Ring Manager Operation Ring Recovery VLAN ID Information Meaning Display in Operation field forwarding This port is switched on and has a link blocked This port is blocked and has a link disabled This port is switched off not connected This port has no link Deactivate the advanced mode if a device in the ring does not support the advanced mode for fast switching times Otherwise you activate the advanced mode Note All TCSESM from vers 4 1 TCSESM E and TCSESB devices that support the MRP Ring also support the advanced mode If there is exactly one device you switch the Ring Manager function on at the ends of the line When you have configured all the parameters for the MRP Ring you switch the operation on with this setting When you have configured all the devices in the MRP Ring you close the redundant line For the device for which you have activated the ring manager select the value 200 ms if the stability of the ring me
133. the current configuration on the device save the current configuration in binary form in a file under the specified URL or as an editable and readable script save the current configuration in binary form or as an editable and readable script on the PC 39 El100000000482 02 2011 Basic Settings 1 5 Loading Saving the Configuration Note For script configuration files consider the following characteristics When you save the configuration to a binary file the device will save all its configuration settings to the binary file In contrast when you save the configuration to a script file it will only save those configuration settings to the configuration script file that are different from the default configuration When you restore a configuration from a script file first clear the configuration on the device so that the loaded script will properly overwrite the default configuration settings Otherwise loading a script file will result in a configuration that comprises the union of the non default configuration settings from the previous configuation and the script file s contents When you are using this feature remember that loading a script will only set configuration items to a non default state To clear the configuration on a device select the Current Configuration option from the Delete frame and click Delete configuration The device will delete its current configuration immediately see on page 34
134. the device The Installation user manual contains a device description safety instructions a description of the display and the other information that you need to install the device The Basic Configuration user manual contains the information you need to start operating the device It takes you step by step from the first startup operation through to the basic settings for operation in your environment El100000000482 02 2011 10 About this Manual The Redundancy Configuration user manual contains the information you need to select a suitable redundancy procedure and configure that procedure El100000000482 02 2011 11 About this Manual A EIO0000000482 02 2011 2 Key Key The designations used in this manual have the following meanings List O Work step Subheading Link Indicates a cross reference with a stored link Note A note emphasizes an important fact or draws your attention to a dependency Courier ASCII representation in user interface Symbols used WLAN access point p Router with firewall Switch with firewall Li Router Switch Bridge fl El100000000482 02 2011 13 D BD x 14 Hub A random computer Configuration Computer Server PLC Programmable logic controller I O Robot El100000000482 02 2011 Opening the Web based Interface Opening the Web based Interface To open the Web
135. the table selected inactive box empty Table 64 Syslog server entries Parameter Meaning Possible Values Default Setting Buttons Set button Click on Write to temporarily save the data Note If you have entered an IP address different to 0 0 0 0 for a newly created syslog server entry after the entry is written the device activates it automatically Click on Load for the device to update the display Create button Creates a new syslog server entry in the list Remove button Deletes the selected syslog server entry entries from the list Table 65 Syslog entries buttons E100000000482 02 2011 160 Diagnostics 7 1 Syslog Note When you activate the logging of SNMP requests the device sends these as events with the preset level to report notice to the list of syslog servers The preset minimum level to report for a syslog server entry is critical To send SNMP requests to a syslog server you have a number of options to change the default settings Select the ones that meet your requirements best Set the level to report for which the device creates SNMP requests as events to warning or error and change the minimum level to report for a syslog entry for one or more syslog servers to the same value You also have the option of creating a separate syslog server entry for this Only set the level to report for SNMP requests to critical or higher The device then sends SNMP requests
136. tings menu is structured as follows Device Status System data Device view Reloading data Device Status Alarm Start Time Alarm Reason System data TCSESMO63F2CU1 www schneider electric com S 430 Name Location Contact Basic module Power supply 1 2 present failed Temperature C L o 48 T z0 s 1 16 45 Uptime dar Set Reload Reloading data in 70 Figure 4 System Submenu Device Status Device view w ae ao ml Help This section of the website provides information on the device status and the alarm states the device has detected 20 El100000000482 02 2011 Basic Settings 1 1 System Devicestatus Alarmstarttime Alarmreason 1 2 3 Figure 5 Device status and display of detected alarms 1 Symbol indicates the Device Status 2 Cause of the oldest existing alarm detected 3 Time of the oldest existing alarm detected System Data This area of the website displays the system parameters of the device Here you can change the system name the location description the name of the contact person for this device the temperature threshold values Name Meaning Name System name of this device Location Location of this device Contact The contact for this device Basic module Hardware version of the device Power supply P1 P2 Status of power units P1 P2 Uptime Time that has elapsed since this device was last restarted
137. tocol VLAN 4 5 1 VLAN Global 4 5 2 Current VLAN 4 5 3 VLAN Static 4 5 4 VLAN Port QoS Priority Global Port Configuration 5 2 1 Entering the port priority 5 2 2 Selecting the trust mode 5 2 3 Displaying the untrusted traffic class 802 1D p mapping IP DSCP mapping Redundancy Ring Redundancy 6 1 1 Configuring the HIPER Ring 6 1 2 Configuring the MRP Ring 6 1 3 Configuring the Fast HIPER Ring TCSESM E Sub Ring TCSESM E 6 2 1 Sub Ring configuration 6 2 2 Sub Ring New Entry Ring Network Coupling 6 3 1 Preparing a Ring Network Coupling Spanning Tree 53 57 59 60 64 66 66 69 69 76 78 78 81 83 85 89 90 93 93 94 95 96 98 101 102 104 108 111 114 115 118 120 120 126 El100000000482 02 2011 Contents 7 1 7 2 7 3 7 4 7 5 7 6 71 7 8 7 9 7 10 7 11 8 1 8 2 8 3 A 1 A 2 A 3 6 4 1 Global 6 4 2 Dual RSTP TCSESM E 6 4 3 Port Diagnostics Syslog Event Log Ports 7 3 1 Statistics table 7 3 2 Utilization 7 3 3 SFP modules Topology Discovery Port Mirroring Device Status Signal contact 7 7 1 Manual setting 7 7 2 Function monitoring 7 7 3 Device status 7 7 4 Configuring traps Alarms Traps Report IP address conflict detection Self Test Advanced DHCP Relay Agent EtherNet IP Command Line Appendix Technical Data List of RFCs Underlying IEEE Standards El100000000482 02 2011 129 135 147
138. tp 192 168 1 100 device config dat The configuration file includes all configuration data including the passwords for accessing the device Therefore pay attention to the access rights on the tftp server 1 5 4 Deleting a configuration In the Delete frame you have the option to Reset the current configuration to the state on delivery The configuration saved on the device is retained Reset the device to the state on delivery After the next restart the IP address is also in the state on delivery 1 5 5 Using the Memory Backup Adaptor EAM The EAMs are devices for loading saving the configuration data of a device An EAM enables the configuration data to be transferred easily by means of a substitute device of the same type Note If you replace a device with DIP switches check that the DIP switch settings to be sure that they are the same 34 El100000000482 02 2011 Basic Settings 1 5 Loading Saving the Configuration Storing the current configuration data in the EAM You have the option of transferring the current device configuration including the SNMP password to the EAM and the flash memory by using the to device option in the Save frame Transferring the configuration data from the EAM When you restart with the EAM connected the device adopts the configuration data of the EAM and saves it permanently in the flash memory If the connected EAM does not contain any valid data for example i
139. ultaneously per port Number of VLANs in GMRP in VLAN 1 max 255 simultaneously per device max 255 simultaneously per port El100000000482 02 2011 194 Appendix A 2 List of RFCs A 2 List of RFCs RFC 768 RFC 783 RFC 791 RFC 792 RFC 793 RFC 826 RFC 854 RFC 855 RFC 951 RFC 1112 RFC 1157 RFC 1155 RFC 1212 RFC 1213 RFC 1493 RFC 1542 RFC 1643 RFC 1757 RFC 1769 RFC 1867 RFC 1901 RFC 1905 RFC 1906 RFC 1907 RFC 1908 RFC 1945 RFC 2068 RFC 2131 RFC 2132 RFC 2233 RFC 2236 RFC 2246 RFC 2271 RFC 2346 RFC 2365 RFC 2570 RFC 2571 RFC 2572 RFC 2573 Concise MIB Definitions MIB2 ot1d BOOTP Extensions w Protocol Operations for SNMP v2 Transport Mappings for SNMP v2 Management Information Base for SNMP v2 Coexistence between SNMP v1 and SNMP v2 DHCP Options The Interfaces Group MIB using SMI v2 IGMPv2 The TLS Protocol Version 1 0 SNMP Framework MIB AES Ciphersuites for Transport Layer Security Administratively Scoped Boundaries Introduction to SNMP v3 Architecture for Describing SNMP Management Frameworks Message Processing and Dispatching for SNMP SNMP v3 Applications EIO0000000482 02 2011 195 Appendix RFC 2574 RFC 2575 RFC 2576 RFC 2578 RFC 2579 RFC 2580 RFC 2613 RFC 2618 RFC 2620 RFC 2674 RFC 2818 RFC 2851 RFC 2865 RFC 2866 RFC 2868 RFC 2869 RFC 2869bis RFC 2933 RFC 3164 RFC 3376 196 A 2 List of RFCs User Based Security Model
140. vating the RAM test reduces the boot up time for a cold start of the device allow or disable a restart due to an undefined software or hardware state _set_ rea Figure 51 Self test dialog E100000000482 02 2011 185 Diagnostics 7 11 Self Test E100000000482 02 2011 186 Advanced 8 Advanced The menu contains the dialogs displays and tables for DHCP Relay Agent Ethernet IP Command Line El100000000482 02 2011 187 Advanced 8 1 DHCP Relay Agent 8 1 DHCP Relay Agent On the device s front panel you will find the following hazard message A WARNING UNINTENDED OPERATION Do not change cable positions if DHCP Option 82 is enabled Check the Basic Configuration user manual before servicing refer to DHCP OPTION 82 topic Failure to follow these instructions can result in death serious injury or equipment damage Server IP Address DHCP Option 82 Operation Con off 1foooo 2foooo Tre S 3 booo Manual Value Type other 4 booo DHCP server RemotelD entry 00 05 00 80 63 2 Type display 3 2F FB BS DHCP Relay disabled Figure 52 DHCP Relay Agent dialog This dialog allows you to configure the DHCP relay agent E100000000482 02 2011 188 Advanced 8 1 DHCP Relay Agent O Enter the DHCP server IP address If one DHCP server is not available you can enter up to 3 additional DHCP server IP addresses so that the device can change to another DHCP
141. which the Valid IPv4 address 0 0 0 0 device periodically requests the system time if it does not receive a response to a request from the External server address within 0 5 seconds Time interval at which the device requests 1s 3 600s 30s SNTP packets Specifies whether the device accepts the On Off On system time from SNTP Broadcast Multicast packets that it receives The device changes the time as soon as the 0 2 147 483 647 0 deviation from the server time is above this 231 1 threshold in milliseconds This reduces the frequency of time changes Enable disable further time synchronizations On Off Off once the client after its activation has synchronized its time with the server Table 8 Configuration SNTP Client Note If you have enabled PTP at the same time the SNTP client first collects 60 time stamps before it deactivates itself The device thus determines the drift compensation for its PTP clock With the preset server request interval this takes about half an hour Note If you are receiving the system time from an external redundant server address you do not accept any SNTP Broadcasts see below Otherwise you can never distinguish whether the device is displaying the time from the server entered or that of an SNTP Broadcast packet 54 EIO0000000482 02 2011 Time 3 1 SNTP configuration Parameter Meaning Possible Default Values Setting Server status Switches the SNTP server on and off On
142. yes no Port received IGMP queries if disable is selected in Static Query Port Prerequisite In the Switching Multicasts IGMP dialog IGMP is enabled Table 18 Settings per port El100000000482 02 2011 75 Switching 4 4 Multicasts Note If the device is incorporated into a HIPER Ring you can use the following settings to quickly reconfigure the network for data packets with registered Multicast destination addresses after the ring is switched Switch on the IGMP Snooping on the ring ports and globally and activate IGMP Forward All per port on the ring ports 4 4 2 GMRP GARP Multicast Registration Protocol With this dialog you can activate deactivate the GMRP function globally configure the GMRP for each Port Operation In this frame you can activate deactivate the GMRP function globally Parameter Meaning Default setting GMRP Activate GMRP globally for the entire device Off If GMRP is switched off the device does not generate any GMRP packets does not evaluate any GMRP packets received and sends floods received data packets to all ports The device is transparent for received GMRP packets regardless of the GMRP setting Table 19 Global setting Settings per Port Table With this configuration table you can enter port related settings for 76 EIO0000000482 02 2011 Switching 4 4 Multicasts Parameter Meaning Value range Default setting Port Module and port numbers to whic

ConneXium TCSESM, TCSESM-E Managed

Contents

Download Pdf Manuals

Related Search

Related Contents