Home

KGD-802-B User Manual 120606.PMD

1. 6 3 Redundant Ring Applications with RSTP The following figure illustrates the configuration for a ring connection using RSTP function to establish a backup path In case that any link fault occurs the backup path can link up immediately to recover the network operation root D P2 PI P2 Pl P2 I i l secure the connection reliable RSTP setting of other units P1 P2 gt RSTP Enabled P1 P2 gt Edge Disabled P1 Path Cost auto P2 Path Cost auto The rest ports gt RSTP Disabled RSTP setting of Ua amp Ub P1 P2 gt RSTP Enabled P1 P2 gt Edge Disabled The rest ports gt RSTP Disabled Ua P1 Path Cost auto P2 Path Cost gt 2000000 Ub P1 Path Cost gt 2000000 P2 Path Cost auto 82 Appendix Factory Default Settings System Configuration DHCP Enabled Not select disabled Fallback IP Address 192 168 0 2 Fallback IP Subnet mask 255 255 255 0 Fallback Gateway IP 192 168 0 1 Management VLAN VID 0 Management VLAN CFI 0 Management VLAN User priority 0 Name Null Password 123 SNMP enabled Not select disabled SNMP Trap destination 0 0 0 0 SNMP Read community public SNMP Write community private SNMP Trap community public Ports Configuration Enable Jumbo Frames Not select disabled Power Saving Mode Disable Mode Auto for all ports Flow Control v Enable for all ports Relay Alarm v Disable for all ports P
2. Apply Refresh Description Port number Enable LACP support for the port An integer value assigned to the port that determines which ports are aggregated into an LACP link aggregate Set same value to the ports in same LACP link aggregate Value 1 255 Auto key value is assigned by the system Click to apply the configuration change Click to refresh current configuration 1 This configuration is used to configure LACP aggregate groups The ports with same key value are in same LACP aggregate group 2 3 The ports with Auto key are in same LACP aggregate group 4 The ports configured in non LACP aggregation are not available in this configuration 55 4 8 RSTP Configuration System Priority Hello Time Max Age Forward Delay Force Version RSTP System Configuration Force Version Normal y RSTP Port Configuration ER d lt I 2 i j i ieia Ni aja PS ga ar i Apply Refresh Description The lower the bridge priority is the higher priority it has Usually the bridge with the highest bridge priority is the root Value 0 61440 Hello Time is used to determine the periodic time to send normal BPDU from designated ports among bridges It decides how long a bridge should send this message to other bridge to tell I am alive Value 1 10 When the switch is the root bridge the whole LAN will apply this setting
3. Group 2 member Port 2 Port 8 Group 3 member Port 3 Port 8 Group 4 member Port 4 Port 8 Group 5 member Port 5 Port 8 Group 6 member Port 6 Port 8 Group 7 member Port 7 Port 8 Mode Operation 1 The joint port is the shared member port for all groups Two member ports are configured in each group The member ports in same group can communicate with other only No packet tag is examined u A U N Areceived packet will not be modified i e tagging or untagging through VLAN operation till it is transmitted Note The seven groups are configured with associated VID 1 7 respectively by the system 43 4 6 3 Simplified Tag based VLAN Mode Simplified Tag based VLAN Mode VLAN Groups FP Fr a a a al Configuration Description VLAN Groups Click to configure VLAN groups first VLAN Per Port Click to configure per port simplified VLAN settings 4 6 3 1 VLAN Groups Configuration Group VID Member Ports Source Port Check Apply Refresh Back Description Group number VID of the VLAN to which this group is associated 1 4095 decimal 12 bit VID value Select the admitted egress ports for the packets belong to the VLAN Port 8 click to select Check whether the ingress port is the member port of the VLAN Enable set to enable this check the packet is dropped if ingress port is not member port of the VLAN Disable
4. KGD 802 B KGD 802 B P Industrial 8 Port Gigabit Ethernet Switches with 2 SFP Slots and 4 PoE PSE Ports User s Manual R DOC 120606 C 2012 KTI Networks Inc All rights reserved No part of this documentation may be reproduced in any form or by any means or used to make any directive work such as transla tion or transformation without permission from KTI Networks Inc KTI Networks Inc reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of KTI Networks Inc to provide notification of such revision or change For more information contact United States KTI Networks Inc P O BOX 631008 Houston Texas 77263 1008 Phone 713 2663891 Fax 713 2663893 E mail kti ktinet com URL http www ktinet com International Fax 886 2 26983873 E mail ktiQktinet com tw URL _shttp www ktinet com tw The information contained in this document is subjectto change without prior notice Copyright C All Rights Reserved TRADEMARKS Ethernet is a registered trademark of Xerox Corp WARNING This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not
5. Default IP address of the switch 192 168 0 2 255 255 255 0 The IP Address is an identification of the switch in a TCP IP network Each switch should be desig nated a new and unique IP address in the network Two methods to configure the IP address are 1 Use console port The console command sequence to set a fixed IP for the switch is gt IPJ IP gt Setup lt ipaddress gt lt ipmask gt lt ipgateway gt J The console command sequence to use DHCP mode for IP is gt IPJ IP gt Dhcp enable IP gt 2 Use Web management Refer to Web management interface for System Configuration The switch is shipped with factory default password 123 for software management The password is used for authentication in accessing to the switch via Http web based interface For security reason it is recommended to change the default settings for the switch before deploying it to your network Refer to Web management interface for System Configuration 23 3 Advanced Functions To help a better understanding about the software management interfaces this chapter describes some advanced functions provided by the switch 3 1 Abbreviation Ingress Port Ingress port is the input port on which a packet is received Egress Port Egress port is the output port from which a packet is sent out IEEE 802 10 Packets A packet which is embedded with a VLAN Tag field VLAN Tag In IEEE 802 10 packet format 4 byte tag field is inserted in th
6. RSTP Status IGMP Status Ping Maintenance Reboot System Restore Default Update Firmware Configuration File Transfer Logout Configuration IGMP Snooping Mirroring QoS Storm Control Monitoring Maintenance Reboot System e Defi Switch information system and IP related settings Port link status port operation mode configuration VLAN related configuration LACP confguration for port link aggregation RSTP Rapid spanning tree protocol related configuration 802 1X authentication related configuration IGMP snooping related configuration Port mirroring related configuration Quality of Service related configuration Packet Storm protection control configuration List simple statistics for all ports List detailed statistics for all ports LACP port status RSTP protocol status IGMP snooping status Ping command from the switch to other IP devices Command to reboot the switch Command to restore the switch with factory default settings Command to update the switch firmware Command to transfer upload download configuration file Command to logout from the switch management 33 4 4 System System Configuration Configuration MAC Address S W Version H W Version Active IP Address Active Subnet Mask Active Gateway DHCP Server Lease Time Left DHCP Enabled Fallback IP Address Fallback Subnet Mask Fallback Gateway Management VLAN Name Password SN
7. set to disable this check Click to apply the configuration change Click to refresh current configuration Click to go back to upper menu Note This VLAN groups configuration is also applied to Advanced VLAN configuration 45 4 6 3 2 Per Port Settings Configuration Port Drop Untag Egress Tagging Untagged VID PVID Apply Refresh Back VLAN Per Port leg E SE Disable e gt Smeg SW WT 5 foisabie funr I R Refresh Back Description Port number Drop all untagged packets and priority tagged packets ingress Enable drop untagged packets and priority tagged packets Disable admit untagged packets and priority tagged packets Tagging rule for egress operation Tag Tagging all egress packets Untag No tagging for all egress packets Specific Tag Tagging egress packets except those matched Untagged VID VID for Specific Tag in Egress Tagging setting 1 4095 decimal 12 bit VID value Port VID VID of Ingress Default Tag See section 4 6 4 1 1 4095 decimal 12 bit VID value Click to apply the configuration change Click to refresh current configuration Click to go back to upper menu 46 4 6 3 3 Simplified Tag based VLAN Operation Ingress filtering setting Drop Untag Enable Ingress Packets Rule Untagged packets Dropped Priority packets Dropped Tagged packets Admitted to get into forwarding operation Ingress filtering setting
8. 0 4 3 2 1 four queues are served in 4 3 2 1 ratio e Weighted ratio priority Class 3 2 1 0 5 3 1 1 four queues are served in 5 3 1 1 ratio e Weighted ratio priority Class 3 2 1 0 1 1 1 1 four queues are served equally Strict priority policy lets high priority class queue is served first until it is empty Lower priority queue may not get any service or egress bandwidth when higher priority traffic is heavy for long time Three weighted ratio policies are provided to resolve such problem Four class queues are served in weighted round robin basis Every priority class can get a guaranteed ratio for the egress bandwidth 26 3 3 VLAN Function The switch supports port based VLAN 802 1Q Tag VLAN and eight VLAN groups 3 3 1 VLAN Operation The following figure illustrates the basic VLAN operation flow beginning from a packet received on an ingress port until it is transmitted from an egress port Ingress Packet Tag Default Information Tag Ingress Ingress VLAN Packet Egress ies Classi forwarding Port fication Ingress Egress Port Port Settings Settings The following sections describe the VLAN processes and Advanced VLAN mode settings provided by the switch A global setting means the setting is applied to all ports of the switch A per port setting means each port can be configured for the setting respectively 3 3 2 Ingress Rules When a packet is received on an ingress port the ingress rules are applied for p
9. 2 zj fciass 2 z cias 3 gt Class 3 SS ES El En Class 0 cias 0 d ES 1 ciass 1 al JESS d E ER 1 Per port table per User Priority tag value 0 7 maps to one priority class 2 Used to classify priority tagged and VLAN tagged packets Configuration Port n tag m Priority class Apply Refresh Back Description Port number n 3 bit User priority tag value m range 0 7 Mapped priority class for tag m on Port n Class 3 Class 0 Click to apply the configuration change Click to refresh current configuration Click to go back to upper menu Every ingress port has its own 802 1p mapping table The table is referred in 802 1p priority classifica tion for the received packet 64 4 12 2 DSCP Mapping Configuration DSCP 0 63 Priority All others Apply Refresh Back QoS DSCP Mapping DSCP 0 63 Priority UM Ne UU ll Ea TD Tossa A AA All others Class 0 y Apply Refresh Back Remark 1 Table per DSCP value 0 63 maps to one priority class 2 Used to classify L3 IP packets 3 All ports share same table Description Seven user defined DSCP values which are configured with a priority class 0 63 6 bit DSCP value in decimal The priority class configured for the user defined DSCP value Class 3 Class 0 The other DSCP values not in the seven user defined values are assigned a default priority
10. 3 3 2 3 Drop Untag Per Port Setting ooooconncccnnnnccconccccnnanccccnncncnnnnrnnnnan cc naar cnn rca cnn 28 3 3 2 4 Drop Tag Per Port Setting eeeeee eee aaa aaa aaa aaa aaa nn 28 3 3 3 Ingress Default Tag Per Port Setting e eeeeea aaa aaa aaa aaa aaa nn 28 3 3 4 Packet Tag Informatlon raien eeek eee eaa EE EE EEEa a ld rain 28 3 3 5 VLANGroup Table Configuration ooonnccccnnninnnnccccnncccccononnnnnnarnnnnnnn cc naar nn carr 29 3 3 6 VLAN Classification ici tr ie ee 29 3 3 7 Packet Forwarding et ees eegene ee ee ro cea 29 3 3 6 Egress Tagging RUGS wasza oi zo a ordinal ER 30 3 3 98 INEGreSS SeTIINGS a a AL ed des ES bie 30 3 3 9 Summary of VLAN FUNCTION coocoonccccinnccccccnonnnnnnaccnnnnn cnn aaa aaa aaa aaa anne rra nr 30 3 4 802 1 X Authentication ca eiiiai ai iaa AAEE AAAA EEE E rn rra 30 4 Web Management cn ld skak 32 4 1 Start Browser Software and Making Connection ococonnccccnnncccnnnocccnnnnnncnnonon cnn nnnnnnnnnnncccnannnnnnina 32 4 2 Logi to the Switch Unit is aa s 32 4 3 Main Management Menu 000 000000nne err 3 SYSIEM a rte rede ceed ites 34 4 4 1 Management VLAN EE 36 NEE 37 belge 39 De RT RTR 40 A GN EANS td EE 41 4 6 1 Port based VLAN Mode o eaaeo enari enne EE ieas AVENTA NAANA EEA EEEE AEAN ARA 42 4 6 2 Port based VLAN ISP Mode coocoocccccionoccccononccnnnnccnnann cnc nono corn n nn rare 43 4 6 3 Simplified Tag based VLAN Mode cooooocccccoccccononcc
11. PoE PSE P1 P4 Copper ports P5 P6 Combo ports P7 Console port Front panel i k DC jack E Reset button Up panel 1 3 LED Indicators LED Function PWR Power status 1000 1000M link amp activities status Port 1 Port 8 100 10 100M or 10M link E activities status Port 1 Port 8 PoE PoE power status Port 1 Port 4 F7 Port 7 SFP fiber transceiver in use FS Port 8 SFP fiber transceiver in use Mgt Management status 1 4 Specifications 10 100 1000 Copper Ports w h PoE PSE Port 1 Port 4 Compliance Connectors Pin assignments Configuration Transmission rate Duplex support Network cable Power over Ethernet IEEE 802 3 10Base T IEEE 802 3u 100Base TX IEEE 802 3u 1000Base T Shielded RJ 45 jacks Auto MDI MDI X detection Auto negotiation or software control 10Mbps 100Mbps 1000Mbps Full Half duplex Cat 5 UTP IEEE 802 3af compliant PSE 10 100 1000 Copper Ports Port 5 Port 6 Compliance Connectors Pin assignments Configuration Transmission rate Duplex support Network cable IEEE 802 3 10Base T IEEE 802 3u 100Base TX IEEE 802 3u 1000Base T Shielded RJ 43 jacks Auto MDI MDI X detection Auto negotiation or software control 10Mbps 100Mbps 1000Mbps Full Half duplex Cat 5 UTP Combo Ports Port 7 amp Port 8 10 100 1000 Copper interface Compliance Connectors Pin assignments Configuration Transmission rate Duplex support Network cable IEEE 80
12. Typ 48V Three 2P terminal plugs are provided together with the switch Two of the three plugs are used for DC1 and DC2 interfaces respectively The plug is shown below Power wires 24 12AWG IEC 0 5 2 5mm Install the power source wires with the plug properly Then plug in DC1 contacts If cascading the power to next switch device is needed install the power wires and plug for another switch Then use DC2 contacts Note Only up to four device units can be cascaded to receive power from one main power input source Using DC Power Jack When an external power system is not available the switch provides a DC jack to receive power from typical AC DC power adapter alternatively Interfaces DC Jack D 6 3mm D 2 0mm Operating input voltage range for general applications 6 5 60VDC 10W max with no PoE support Operating input voltage range for PoE applications 44 54VDC 72W max with 4 PoE full output Note Before you begin the installation check the AC voltage of your area The AC power adapter which is used to supply the DC power for the unit should have the AC voltage matching the commercial power voltage in your area 16 2 6 Failure Relay Output The switch provides a relay output to report failure events to a remote alarm monitoring system The replay output is provided with two contacts in the terminal block next DC2 interface Failure Alarm relay Use the provided 2P terminal plug
13. amp Untagging Specific VID The setting options are Simplified Mode Advanced Mode Egress Tagging Insert Tag Untagging Specific VID Tag Enable Disable Untag Disable Disable Specific Tag Enable Enable 53 4 6 6 Important Notes for VLAN Configuration Some considerations should be checked in configuring VLAN settings 1 Switch VLAN Mode selection It is suggested to evaluate your VLAN application first and plan your VLAN configuration carefully before applying it Any incorrect setting might cause network problem Aggregation Trunking configuration Make sure the members of a link aggregation trunk group are configured with same VLAN configuration and are in same VLAN group Double Tagged in Advanced VLAN Mode For a received packet Ingress port Keep Tag setting and Egress port Insert Tag setting are enabled at the same time It will cause the packet double tagged when egress Although it is often applied in Q in Q provider bridging application However such condition should be avoided in normal VLAN configuration See table below Ingress port Egress port Keep Tag Insert Tag Received Packet Packet Transmitted Enable Enable Priority tagged Double tagged Enable Enable VLAN tagged Double tagged 54 4 7 LACP Configuration Port Protocol Enabled Key Value Apply Refresh Notes LACP Port Configuration PER A EES Port Protocol Enabled Key Value CH
14. as their maximum age time Value 6 40 This figure is set by Root Bridge only The forward delay time is defined as the time spent from Listening state moved to Learning state and also from Learning state moved to Forwarding state of a port in bridge Value 4 30 Two options are offered for choosing STP algorithm Compatible STP IEEE 802 1D Normal RSTP IEEE 802 1w 36 Aggregations Port Protocol Enabled Port Edge Port Path Cost Apply Refresh Enabled to support port trunking in STP It means a link aggregate is treated as a physical port in RSTP STP operation Port is enabled to support RSTP STP An Edge Port is a port connected to a device that knows nothing about STP or RSTP Usually the connected device is an end station Edge Ports will immediately transit to forwarding state and skip the listening and learning state because the edge ports cannot create bridging loops in the network Specifies the path cost of the port that switch uses to determine which port are the forwarding ports the lowest number is forwarding ports the rage is 1 200 000 000 and Auto Auto means a default cost is automatically calculated in RSTP operation based on the port link speed The default costs are Link Speed Auto Default Cost 10Mbps 2000000 100Mbps 200000 1000Mbps 20000 Click to apply the configuration change Click to refresh current configuration 37 4 9 802 1X Configuration 802 1X Configura
15. based VLAN Advanced VLAN Mode Egress Settings per port Tag Aware Keep Tag Drop Untag Drop Tag Ingress Default Tag per port PVID CFI User Priority VLAN Groups global 8 VLAN groups VLAN Group Settings per group VID Member Ports Source Port Check Egress Settings Insert Tag Untagging Specific VID Untagged VID VLAN range supported 1 4095 eight VLANs at the same time PVID VID Untagged VID value range 1 4095 3 4 802 1X Authentication For some IEEE 802 LAN environments it is desirable to restrict access to the services offered by the LAN to those users and devices that are permitted to make use of those services IEEE 802 1X Port based network access control function provide a means of authenticating and authorizing devices at tached to a LAN port that has point to point connection characteristics and of preventing access to that port in cases in which the authentication and authorization process fails The 802 1X standard relies on the client to provide credentials in order to gain access to the network The credentials are not based on a hardware address Instead they can be either a username password combination or a certificate The credentials are not verified by the switch but are sent to a Remote Authentication Dial In User Service RADIUS server which maintains a database of authentication information 802 1X consists of three components for authentication exchange w
16. for signal wiring and plug into the PF contacts The function is designed as Alarm Events e Input power failure e Specific port link down The specific ports can be configured by software Normal PF and PF shorted Alarm PF and PF open Note Be sure the voltage applied on PF contacts is within the specification of 30VDC IA max or 120VAC 0 5A max 2 Reset Button The reset button is used to perform a reset to the switch It is not used in normal cases and can be used for diagnostic purpose If any network hanging problem is suspected it is useful to push the button to reset the switch without turning off the power Check whether the network is recovered Reset button 1 etree The button can also be used to restore the software configuration settings to factory default values The operations are Operation Function Press the button more than 5 seconds when power up Restore factory default settings Press the button and release during switch operation Reboot the switch 2 8 Making UTP Connections The 10 100 1000 RJ 45 copper ports supports the following connection types and distances Network Cables 10BASE T 2 pair UTP Cat 3 4 5 ELA TIA 568B 100 ohm 100BASE TX 2 pair UTP Cat 5 EIA TIA 568B 100 ohm 1000BASE T 4 pair UTP Cat 5 or higher Cat 5e is recommended EIA TIA 568B 100 ohm Link distance Up to 100 meters Auto MDI MDI X Function This function allows the port to auto detect the twiste
17. with No POE A 79 6 2 Applications with POE ee toto Wil a a a 80 6 3 Redundant Ring Applications with RSTP eee eea aso e aaa aaa rare 82 Appendix Factory Default SettingS ss ss nnnneeaasaaaaaannzzzzenanane 83 1 Introduction The KGD 802 is an industrial managed Gigabit Ethernet switch which is featured with the following switched ports E Six 10 100 1000Mbps Gigabit copper ports E Two combo ports 10 100 1000Mbps copper amp 1000Base X SFP and the following advantages in a small footprint box Model Definition KGD 802 P The switch configured with PoE function on Port 1 to Port 4 KGD 802 The switch configured with no PoE function Plug and Play The switch is shipped with factory default configuration which behaves like an unmanaged Gigabit switch for workgroup It provides eight 10 100 1000Mbps copper ports for connections to Ethernet Fast Ethernet and Gigabit Ethernet devices With the featured auto negotiation function the switch can detect and configure the connection speed and duplex automatically The switch also provides auto MDI MDI X function which can detect the connected cable and switch the transmission wire pair and recelving pair automatically This auto crossover function can simplify the type of network cables used Fiber Connectivity Two mini GBIC SFP ports can be installed with an optional SFP optical fiber transceiver to support two 1000Base X fiber connections when needed Po
18. 2 11 dotldBridge OBJECT IDENTIFIER mib 2 17 ifMIB OBJECT IDENTIFIER mib 2 31 RFC 3418 Management Information Base MIB for the Simple Network Management Protocol SNMP RFC 1907 Management Information Base for Version 2 of the Simple Network Management Protocol SNMPv2 RFC 1213 Management Information Base for Network Manage ment of TCP IP based internets MIB II RFC 1158 Management Information Base for network manage ment of TCP IP based internets MIB II RFC 1493 Definitions of Managed Objects for Bridges RFC 2863 The Interfaces Group MIB RFC 1573 Evolution of the Interfaces Group of MIB II TRAP_COLDSTART the device boot up trap TRAP_LINKUP the port link recovery trap TRAP_LINKDOWN port link down trap 78 6 Applications 6 1 Applications with No PoE The following figure illustrates a basic switch connects eight computers via Cat 5 cables Cat 5 Application 1 Basic switch connecting eight computers as a workgroup switch DC Power Supply 6 5 60V The following figure illustrates the switch connects seven computers via Cat 5 and uplinks to a fiber backbone Cat 5 Application 2 Basic switch connecting seven computers as a workgroup switch and uplink to a backbone 1000M Fiber Uplink DC Power Supply 6 5 60V 79 The following figure illustrates the switch connects six computers via Cat 5 and two fib
19. 2 3 10Base T IEEE 802 3u 100Base TX IEEE 802 3u 1000Base T Shielded RJ 45 jacks Auto MDI MDI X detection Auto negotiation or software control 10Mbps 100Mbps 1000Mbps Full Half duplex Cat 5 UTP 1000Mbps SFP Fiber interface Compliance Connectors Configuration Transmission rate Network cables Eye safety Switch Functions MAC Addresses Table Forwarding r filtering Switching technology Maximum packet length Jumbo frame support IP Multicast groups Flow control VLAN function QoS function Port control Storm control Aggregation Port Mirroring Console Port Interface Connector 1000Base SX LX BX mini GBIC SFP for optional SFP type fiber transceivers Auto Forced 1000Mbps Full duplex 1000Mbps MME 50 125 60 125 SMF 9 125 TEC 825 compliant 8K entries Non blocking full wire speed Store and forward 1526 bytes Jumbo frame support disabled Up to 9 6K bytes 8192 supported IEEE 802 3x pause frame base for full duplex operation Back pressure for half duplex operation Port based VLAN and IEEE 802 1Q Tag based VLAN Port based 802 1p based IP DSCP based Port configuration control via software management Broadcast Multicast storm protection control via software management Link aggregation port trunking Mirror received frames to a sniffer port RS 232 DTE type Shielded RJ 45 10 Power over Ethernet Function PSE Pin 4 5 Positive of power voltage Typical 48 VDC PSE Pi
20. 96 A1 2000 IEC 61000 4 8 2001 IEC 61000 4 11 2004 Table of Contents TIN 6 A ha aaa aaa edik sa anga anda EE 7 1 2 Product EE 8 1 3 LED Indicators use Ao AO AE A A AA A O ZA la as 9 LE leede A ATAK AW IAA PATA 9 2 Installation is 12 221 E oe ea WE 12 E ee 12 2 3 ul e E 13 2 4 Panel MOUNTING ceci filete bic Sentier Zeen 14 20 APPLYING H ee 15 2 6 Failure Relay Output iii dica 17 27 Roset le EE 17 2 8 Making UTP Connections iisi iiinis aiaiai ai aaia ii iei ia aaa 18 2 9 Making Fiber Connection 19 2 10 Making PoE Connections coooooccnncccnnnnoccccnnnnnnnnnncnn nano narta 20 2711 LED IMGIGAtION NEE 21 2 12 Making Console Connection 00 cccecceeeeeceeeeeeeeeeeeeeaeeeeeeaaeeeecaeeeeseaeeeeeaaeeseceeeeseeeeeesaaeeee 21 2 12 1 Console Command Saeni i a aa 22 2 13 Configuring IP Address and Password for the Switch ooo aaa aaa aaa aaa aaaaaaca 23 3 Advanced Functions siss sann ass 24 TADO UN EE 24 3 200S FUNCUON ier e aw KASK EN D 25 3 2 1 Packet Priority Classification eee aaa aaa aaa aaa aaa rra 26 3 2 2 Priority Class QUEUES voii A AR s 26 3 2 3 Egress Service Policy hinini reia aaa nn rca 26 3 35 VEAN FUNGUON ca EA EEE oO EE RAE AA 27 39 1 VEAN Operation usa i ao tiles reir 27 Klee 27 3 3 2 1 802 1Q Tag Aware Per port setting ooononcccnncccnnnnncccconoccnncnnrnnnn ano co nono n cnn nan nn nnnnc ca nnnnnnnans 27 3 3 2 2 Keep Tag Per port setting eeeeee eos e aaa aaa aaa rre 27
21. AN group and have same all per port VLAN settings VLAN Configuration Description VLAN Disable Select to disable VLAN function All ports are allowed to communicate with each others freely with no VLAN limitation Port based VLAN Mode Simple configuration for 2 port based VLAN groups Port based VLAN ISP Mode Simple configuration for 7 port based VLAN groups also called metro mode sometimes Simplified Tag based VLAN Mode Simple configuration for Tag based VLAN Less optional settings Advance VLAN Mode Full VLAN configuration for port based and Tag based VLAN Apply Click to apply the configuration change Refresh Click to refresh current configuration 41 4 6 1 Port based VLAN Mode VLAN Configuration ort Dased VLF de gt Setting Port based VLAN ISP Mode gt Setting Advanced VLAN Mode gt Refresh Configuration Description VLAN Configuration pa based VLAN Mode js Member GR E E E a P ju rir ee Apply Refresh Back r Remark 1 Two port based VLAN groups are created 2 The member ports in group can communicate with each other 3 No packet modification from ingress to egress 4 Member port overlap is allowed Group 1 2 Port based VLAN group number Member ports Select member ports for the group Apply Click to apply the configuration change Refresh Click to refresh current configuration Back Click to go back
22. AN tagged packets Disable 802 1p classification is not applied to the port DSCP classification Enable set to enable DSCP classification to the port for IP packets Disable DSCP classification is not applied to the port Port default priority class it is used as a port based QoS mode when 802 1p and DSCP classifications are disabled It is also used as default priority class for the received packet when both 802 1p and DSCP classifi cation failed in classification Class 3 Class O priority class Click to configure 802 1p mapping tables Click to configure DSCP mapping table Click to configure per port egress service policy mode Click to apply the configuration change Click to refresh current configuration 802 1p classification is superior over DSCP classification if both are enabled That means if a received packet is classified successfully in 802 1p classification the classified priority class is used directly for the packet and the result of DSCP classification is ignored 63 4 12 1 802 1p Mapping QoS 802 1p Mapping Class 0 Ciass 0 zony Hh pny SEY tity EN class 0 cias o y Class 1 y Class 1 7 ciass 1 Class 2 gt class 2 class 3 2 Class 3 eiasso ciass 0 Z cias 1 e ass 1 e ass 2 class 2 2 class 3 Glass 3 gt class o gt Class 0 y Class 0 y class 1 gt lass 1 7 SIE ERZE EE E class 0 gt lass 0 bo x casso C Eg ass z E fctass 1 SIS Class
23. Default Tag for the ingress port It is used as the tag for insertion in egress tagging operation in one of the following conditions 1 Ingress port Tag Aware setting Tag ignore Egress port Insert Tag Enable 2 Ingress port Tag Aware setting Tag aware Egress port Insert Tag Enable and the received packet is untagged or priority tagged 40 4 6 4 2 Ingress Settings Ingress Settings Enable z oisable y Disable Enable y Disable y 3 4 5 l Disable Disable d SEN Disable y Disable zl _Apply Refresh Back Configuration Description Port Port number Tag Aware Check tag data for every received packet Tag aware set to activate Tag based mode Tag ignore set to use port based mode and ignore any tag in packet Keep Tag Tag is removed from the received packet if exists Enable set to activate tag removal for VLAN tagged packets Disable set to disable tag removal function Drop Untag Drop all untagged packets and priority tagged packets Enable drop untagged packets and priority tagged packets Disable admit untagged packets and priority tagged packets Drop Tag Drop all VLAN tagged packets Enable drop VLAN tagged packets Disable admit VLAN tagged packets Apply Click to apply the configuration change Refresh Click to refresh current configuration Note 1 Priority tagged packet VID 0 is treated as untagged packet in the switch 2 Tag Aware
24. Drop Untag Disable Ingress Packets Rule Untagged packets Admitted to get into forwarding operation Priority packets Admitted to get into forwarding operation Tagged packets Admitted to get into forwarding operation Ingress filtering setting Drop Untag Disable Egress rule setting Egress Tagging Tag Ingress Packets Egress rule Untagged packets Tagging with Ingress Default Tag Tagging Priority packets Tagging with Ingress Default Tag Tagging Tagged packets Egress with no packet modification Ingress Default Tag Ingress port PVID CFI 0 User priority 0 Ingress filtering setting Drop Untag Disable Egress rule setting Egress Tagging Untag Ingress Packets Egress rule Untagged packets Egress with no packet modification untagged Priority packets Egress with no packet modification untagged Tagged packets Tag is removed Untagging Ingress Default Tag Ingress port PVID CFI 0 User priority 0 Ingress filtering setting Drop Untag Disable Egress rule setting Egress Tagging Specific Tag Ingress Packets Egress rule Untagged packets Tagging with Ingress Default Tag Tagging Priority packets Tagging with Ingress Default Tag Tagging Tagged packets Egress with no packet modification except the packets with VID equal to Untagged VID setting Ingress Default Tag Ingress port PVID CFI 0 User priority 0 amp not equal to Untagged VID setting The packets
25. MP enabled SNMP Trap destination SNMP Read community SNMP Write community SNMP Trap community Apply Refresh Note Description The MAC address factory configured for the switch It can not be changed in any cases The firmware version currently running The hardware version currently operating Currently used IP address for the switch management Currently used subnet mask for IP address for the switch management Currently used gateway IP address for the switch management Current IP address of the DHCP server The time left for the lease IP address currently used Use DHCP to get dynamic IP address configuration for the switch IP address used when DHCP mode is not enabled Subnet mask for IP address used when DHCP mode is not enabled Default gateway IP address used when DHCP mode is not enabled Set management VLAN ID Set the system name for this switch unit Set new password Enable SNMP agent The IP address of the SNMP trap manager The community allowed for the SNMP get message The community allowed for the SNMP set message The community used for the SNMP trap messages sent by the switch Click to apply the configuration change Click to refresh current configuration 1 It is suggested to give each switch unit a system name as an alternative unique identifica tion beside IP address 2 Setting change of DHCP mode takes effective in next bootup 35 4 4 1 Management VLAN Management VLAN set
26. U A Screw the bracket onto _ the unit NE AF 2 Attach bracket to the lower edge of the DIN rail and push the unit upward a little bit until the bracket can clamp on the upper edge of the DIN rail 3 Clamp the unit to the DIN rail and make sure it is mounted securely Clamp to upper edge of the din rail Din Rail 2 4 Panel Mounting The switches are provided with an optional panel mounting bracket The bracket support mounting the switch on a plane surface securely The mounting steps are 1 Install the mounting bracket on the switch unit Panel mounting bracket 2 Screw the bracket on d the unit y 2 Screw the bracket on the switch unit 3 Screw the switch unit on a panel Three screw locations are shown below 94 7 17 8 77 5 151 0 IJ 2 5 Applying Power The switch provides two types of power interfaces terminal block and DC power jack for receiving DC power input from external power supply DC jack 2 pair terminal block Using Terminal Blocks Either DC1 interface or DC2 interface can be used to receive DC power from an external power system Or DC2 also can be used to deliver the power received on DC1 to next switch in cascading way DCI Vdc Positive terminal DCI Vdc Negative terminal DC2 Vdc Positive terminal DC2 Vdc Negative terminal Working Vdc for general application 6 5V 60VDC Working Vdc for PoE application 44V 54VDC
27. acket filtering and packet tag removal The related Ingress port settings are 3 3 2 1 802 1Q Tag Aware Per port setting Tag aware 802 1Q Tag Aware mode is used The switch examines the tag content of every received packets For a VLAN tagged packet the packet VLAN tag data is retrieved as packet tag information for VLAN classification and egress tagging operation For untagged packet and priority tagged packet port based mode is used Tag ignore Port based mode is used The switch ignores the tag content of every received packets Ingress Port Default Tag is always used as packet tag information for VLAN classification 3 3 2 2 Keep Tag Per port setting Enable The VLAN tag in the received VLAN tagged packet will be kept as it is and is not stripped in whole forwarding operation Disable The VLAN tag data in the received VLAN tagged packet is stripped removed WYE 3 3 2 3 Drop Untag Per Port Setting Enable All untagged packets and priority tagged packets are dropped A priority tagged packet is treated as an untagged packet in this switch Only VLAN tagged packets are admitted Disable Disable Untagged packet filtering 3 3 2 4 Drop Tag Per Port Setting Enable All VLAN tagged packets are dropped A priority tagged packet is treated as an untagged packet in this switch Only untagged packets are admitted Disable Disable VLAN tagged packet filtering 3 3 3 Ingress Default Tag Per Port Setting Each port
28. are switch software upgrade Enter the path and file name of new firmware image file for uploading Configuration Description Filename Path and filename warp format Browse Click to browse your computer file system for the firmware image file Upload Click to start upload 76 4 23 Configuration File Transfer Configuration Upload ee Upload Configuration Download Download This download command can be used to backup current switch configuration and download it to the connected management PC using default filename switch cfg Configuration Description Filename Path and filename of a backup configuration file to be uploaded Browse Click to browse your computer file system for the configuration file Upload Click to start upload operation from the connected PC to the switch Download Click to start download operation from the switch to the connected PC 4 24 Logout Logout Are you sure you want to logout No This menu is used to perform a logout from the switch management If current user does not perform any management operation over 3 minutes the switch will execute an auto logout and abort the current connection sff 5 SNMP Support SNMP version support Managed Objects RFC SNMP Trap Support Snmp v1 v2c management MIB II system OBJECT IDENTIFIER mib 2 1 interfaces OBJECT IDENTIFIER mib 2 2 ip OBJECT IDENTIFIER mib 2 4 snmp OBJECT IDENTIFIER mib
29. can be configured with one Ingress Default Tag This ingress port default tag is used when ingress port is in Tag ignore mode or for the received untagged packets in Tag aware mode The Ingress Default Tag includes PVID CFI and User Priority configuration When Ingress port default tag is used it is copied as packet associated Packet Tag Information for VLAN classification The PVID is used as index to one VLAN group in VLAN group table 3 3 4 Packet Tag Information Under VLAN process every packet is associated with one Packet Tag information in packet forward ing operation The tag information includes VID CFI and User Priority data and is used for two purposes e The VID in tag is used as index for VLAN classification e The tag is used for egress tag insertion if egress tagging is enabled The following table lists how the Packet Tag information is generated Tag Aware setting Received Packet Type Packet Tag information source Tag ignore Untagged packet Ingress Port Default Tag Tag ignore Priority tagged packet Ingress Port Default Tag Tag ignore VLAN tagged packet Ingress Port Default Tag Tag aware Untagged packet Ingress Port Default Tag Tag aware Priority tagged packet Ingress Port Default Tag Tag aware VLAN tagged packet Received packet VLAN Tag 28 3 3 5 VLAN Group Table Configuration The switch provides a table of eight VLAN groups to support up to eight VLANs at the same time Each VLAN group is associated to one uniq
30. class Class 3 Class 0 Click to apply the configuration change Click to refresh current configuration Click to go back to upper menu Only one DSCP mapping table is configured and applied to all ports The table is referred in DSCP priority classification 65 4 12 3 QoS Service Policy QoS Service Policy Port Policy Strict priority L 8 strict priority z Apply Refresh Back Remark 1 Strict priority high class is always served first till it is empty 2 Weighted ratio 4 classes are served in round robin weighted ratio 3 Four classes are served with weighted guaranteed bandwidth on an egress port Configuration Description Port Port number Policy Service policy for egress priority among four egress class queues Strict priority high class queue is served first always till it is empty Weighted ratio priority Class 3 2 1 0 4 3 2 1 weighted ratio 4 3 2 1 Weighted ratio priority Class 3 2 1 0 5 3 1 1 weighted ratio 5 3 1 1 Weighted ratio priority Class 3 2 1 0 1 1 1 1 weighted ratio 1 1 1 1 Apply Click to apply the configuration change Refresh Click to refresh current configuration Back Click to go back to upper menu Notes 1 Queue with higher class number has higher priority than queue with lower class number That means Class 3 gt Class 2 gt Class 1 gt Class O by default 2 In weighted ratio policies a weighted fairness round robin ser
31. cnononcccononnnnnnnnnnnnann cn nano nan nrn nn a nnnnn cn cnn nn nace 44 4 6 3 4 VEANGIOUDS tege Eege ORA A kd PAD estates bad Szyk 45 4 6 3 2 Per Port Settings aa dak ZER deg ra 46 4 6 3 3 Simplified Tag based VLAN Operation 47 4 6 4 Advanced VLANMode A 48 4 6 4 1 Ingress Default Taga Od A A EWA AA A AA AAA Ps 49 4 6 4 2 Ingress Settings uuu e ua renna 50 4 6 4 3 Egress Settings eee eee aaa aaa rana 51 BEA E Tee 52 4 6 5 Simplified Tag based VLAN vs Advanced VAN 53 4 6 6 Important Notes for VLAN Configuration oooocnnccccnnnccccnnocccnnnnonncnnnnnccnonnn cnn nano nn aaa nann nn 54 We A A EE S ARA at 55 e a aa iz 56 IA EE 58 4 9 1 802 1X Re authentication Parameters A 60 AAOIGMP SNGOPING hit delia 61 A SAO iR oct Asha R AES OE 62 4 12 Quality eg 63 A AQ A BOL TO MAPPING a 64 4 12 2DSGP Mapping cocinar rada A gain VER ARE ARA ness 65 4 123 QOS Serice Poly ied EA A ea lai a a a Aaa 66 ATI St fm Controls A WANE AE A A EE 67 4 14 Statistics OVErvie Wi se i iii iani a a eee 68 4 15 Detailed Statistics c aiaa a a a rene 69 4 16 LACP Stat Snai e AA a 70 417 eA ET 72 418 GMP Status ios 74 4 19 PI Ra a dl 75 4 20 REDOOESYStEM esz arga even teada A sta ntc dt 76 4 21 Restore Deal ici a id AEO A aaa 76 4 22 Update FW o a A 76 4 23 Configuration File Transfer oooocnnnccccinnccccnnoncnnnnnnccnn aaa 77 A OA SR sa ol V ET 77 5 SNMP SUPPON EE 78 6 Applications sasssa ann dawac 79 6 1 Applications
32. d pair signals and adapts itself to form a valid MDI to MDI X connection with the remote connected device automatically No matter a straight through cable or crossover cable is connected the ports can sense the receiving pair automatically and configure itself to match the rule for MDI to MDI X connection It simplifies the cable installation Auto negotiation Function The ports are featured with auto negotiation function and full capability to support connection to any Ethernet devices The port performs a negotiation process for the speed and duplex configuration with the connected device automatically when each time a link is being established If the connected device is also auto negotiation capable both devices will come out the best configuration after negotiation process If the connected device is incapable in auto negotiation the switch will sense the speed and use half duplex for the connection Port Configuration Management For making proper connection to an auto negotiation incapable device it is suggested to use port con trol function via software management to set forced mode and specify speed and duplex mode which match the configuration used by the connected device 18 2 9 Making Fiber Connection The SFP slots F7 and F8 must be installed with an SFP fiber transceiver for making fiber connection Your switch may come with some SFP transceivers pre installed when it is shipped Installing SFP Fiber Transceiver To
33. e a PoE connection the following check points should be noted 1 For safety reason the connected PoE PD Powered Device must be a IEEE 802 3af compliant device Incompliant devices are not supported by the PoE switch model 2 The Cat 5 cables used for the connections must be 4 pair cables The power is sent over the spare pairs 4 5 7 8 of the cable The maximum distance supported is 100 meters 3 The DC IN power voltage supplied to the switch must be within the following range to make PoE function working DC IN voltage range for PoE applications 44V 54V 4 The DC IN power supplied to the switch must meet the following calculation DC IN power Sum of all connected PD power required 10 watts The PSE ports are equipped with the following capabilities 1 Detection for an IEEE 802 3af compliant PD 2 No power is supplied to a device which is classified non IEEE 802 3af complaint PD 3 No power is supplied when no connection exists on the port 4 The power is cut off immediately from powering condition when a disconnection occurs 5 The power is cut off immediately from powering condition when overload occurs 6 The power is cut off immediately from powering condition when overcurrent occurs 7 The power is cut off immediately from powering condition when short circuit condition occurs The figure below illustrates a connection example 4 pair Cat 5 100m max LAN data DC Power pai gt IEEE802 3af Supp
34. e applied They all can be configured to be activated or not More than one classification methods can be enabled at the same time However 802 1p classification is superior than DSCP classification 802 1p mapping tables Each ingress port has its own mapping table for 802 1p classification DSCP mapping table All ingress ports share one DSCP mapping table for DSCP classification Default port priority A port default priority class is used when port based classification is applied All configuration settings are in per port basis except that DSCP mapping table is global to all ports A received packet is classified into one of four priority class before it is forwarded to an egress port 3 2 2 Priority Class Queues Each egress port in the switch is equipped with four priority class egress queues to store the packets for transmission A packet is stored into the class queue which is associated to the classified priority class For example a packet is stored into Class 3 egress queue if it is classified as priority Class 3 3 2 3 Egress Service Policy Each port can be configured with an egress service policy to determine the transmission priority among four class queues By default higher class number has higher priority than the lower class numbers Four policies are provided for selection as follows Strict priority Packets in high priority class queue are sent first until the queue is empty e Weighted ratio priority Class 3 2 1
35. e original Ethernet frame between the Source Address and Type Length fields The tag is composed of Hof bits 16 3 1 12 Frame field TPID User priority CFI VID TPID 16 bit field is set to 0x8100 to identify a frame as an IEEE 802 1Q tagged packet User Priority 3 bit field refer to the 802 1p priority CFI The Canonical Format Indicator for the MAC address is a 1 bit field VID VLAN identifier 12 bit field identifies the VLAN to which the frame belongs to Untagged packet A standard Ethernet frame with no VLAN Tag field Priority tagged packet An IEEE 802 10 packet which VID filed value is zero VID 0 VLAN Tagged packet An IEEE 802 10 packet which VID filed value is not zero VID lt gt 0 PVID Port VID PVID is the default VID of an ingress port It is often used in VLAN classification for untagged packets It is also often used for egress tagging operation DSCP Differentiated Service Code Point 6 bit value field in an IP packet VLAN Table lookup The process of searching VLAN table to find a VLAN which matches the given VID index MAC address table lookup The process of searching MAC address table to find a MAC entry which matches the given destination MAC address and the port where the MAC address is located Packet forwarding also known as packet switching in a network switch based on MAC address table and VLAN table information VLAN forwarding the operation that a packet is forwarded to an egress destination por
36. e the risk of bodily injury electrical shock fire and damage to the product observe the following precautions e Do not service any product except as explained in your system documentation e Opening or removing covers may expose you to electrical shock e Only a trained service technician should service components inside these compartments e If any of the following conditions occur unplug the product from the electrical outlet and replace the part or contact your trained service provider The power cable extension cable or plug is damaged An object has fallen into the product The product has been exposed to water The product has been dropped or damaged The product does not operate correctly when you follow the operating instructions e Do not push any objects into the openings of your system Doing so can cause fire or electric shock by shorting out interior components e Operate the product only from the type of external power source indicated on the electrical ratings label If you are not sure of the type of power source required consult your service provider or local power company SES 2 3 DIN Rail Mounting In the product package a DIN rail bracket is provided for mounting the switch in a industrial DIN rail enclosure The steps to mount the switch onto a DIN rail are 1 Install the mounting bracket onto the switch unit as shown below After mounting Din Rail mounting bracket Q
37. egress port range for forwarding e Source Port Check setting of the matched VLAN group check ingress port membership e The packet destination MAC address for MAC address table loop up e The switch MAC address table to find the associated port where a MAC address is learned If the MAC address table lookup is matched and the learned port is the VLAN member port the packet is forwarded to the port egress port If the lookup failed the switch will broadcast the packet to all member ports 39 3 3 8 Egress Tagging Rules Egress Tagging rules are used to make change to the packet before it is stored into egress queue of an egress port Three egress settings are provided for each port and are described as follows 3 3 8 1 Egress Settings Insert Tag per port setting Enable Insert the Tag data of the associated Packet Tag information into the packet Disable No tagging is performed Untagging Specific VID per port setting Enable No tag insertion if the VID data of the associated Packet Tag information matches the Untagged VID configured in next setting even Insert Tag is enabled Disable This rule is not applied 3 3 9 Summary of VLAN Function VLAN Modes Port based VLAN Mode Simple port based 2 VLAN groups mode Port based VLAN ISP Mode Simple port based 7 VLAN groups mode Simplified ed VLAN Mode Simple configuration for Tag based VLAN Advanced VLAN Mode Full VLAN configuration for port based and Tag
38. er segments Cat 5 Application 3 Basic switch connecting six computers as a workgroup switch and 2 fiber connections 1000M fiber 1000M Fiber segment emm give 000M fiber segment 6 2 Applications with PoE The following figure illustrates the switch connects four PoE IP cameras three computers via Cat 5 cables and uplinks to a fiber backbone DC Power Supply 6 5 60V 4 PoE IP cameras o Application 4 A PoE switch connecting four PoE IP cameras and uplink to a fiber backbone DC Power Supply 44V 54V 80 The following figure illustrates the switch connects four POE WLAN access points three computers via Cat 5 cables and one uplink 4 PoE WLAN AP Application 5 A PoE switch connecting four PoE IP cameras and uplink to a GbE backbone 44V 54V The following figure illustrates the switch connects four PoE IP phones three computers via Cat 5 cables and one uplink 4 PoE IP Phones Application 6 A PoE switch connecting four PoE IP cameras and uplink to a GbE backbone DC Power ply 54V Ley dey Sup 44V 81 The following figure illustrates the switch connects four media converters three computers via Cat 5 cables and one uplink Application 7 A PoE switch connecting four PoE media converters and uplink to a GbE backbone DC Power Supply 44V 54V
39. for Port 1 Port 4 on PoE model v set to enable PoE function Drop frame after excessive collision SFP DDM Port Type Apply Check to enable the function Click to display DDM information and status of the SFP transceivers Click to set port type RJ 45 or SFP for Port 7 and Port 8 Click to apply the configuration change 38 4 5 1 Port Type Port 7 and Port 8 supports two media types RJ 45 and SFP Use this button to select the port type Port Type Configuration Bac Information Function Port Port number Port 7 amp Port 8 Type RJ 45 Use RJ 45 SFP Use SFP Notes The available mode options for RJ 45 port type on Port 7 and Port 8 are Mode Auto negotiation Speed capability Duplex capability Auto Enable 10 100 1000M Full Half 10 Half Disable 10M Half 10 Full Disable 10M Full 100 Half Disable 100M Half 100 Full Disable 100M Full 1000 Full Enable 1000M Full The available mode options for SFP port type on Port 7 and Port 8 are Mode Auto negotiation Speed capability Duplex capability Auto 1000 Full Enable 1000M Full Force 1000 Full Disable 1000M Full 30 4 5 2 SFP DDM Status DDM Digital Diagnostic Monitoring information and status are provided in some SFP transceivers Part of the information are retrieved and listed as follows Information Port Identifier Connector SONET Compliance GbE Compliance Vendor Name Vendor OUI Temperature Voltage TX Power Refres
40. gure is set at Root Bridge only Topology Steady The STP topology is steady Changing The STP topology is changing Root Id The MAC address of current STP root If the switch is STP root a message of The switch is Root is displayed Refresh Click to refresh the status BER RSTP Port Status Port Group VLAN Id Path Cost Edge Port P2p Port Protocol Port State Description Port number The associated VLAN to which the RSTP port belongs PVID The path cost of the RSTP port Is the port an edge port Yes The port operates in full duplex The protocol version configured for the port RSTP or STP Forwarding A port receiving and sending data normal operation STP still monitors incoming BPDUs that would indicate it should return to the blocking state to prevent a loop Blocking A port that would cause a switching loop no user data is sent or received but it may go into forwarding mode if the other links in use were to fail and the spanning tree algorithm determines the port may transition to the forwarding state BPDU data is still received in blocking state Listening The switch processes BPDUs and awaits possible new information that would cause it to return to the blocking state Learning While the port does not yet forward frames packets it does learn source addresses from frames received and adds them to the filtering database switching database Non STP RSTP is disabled The above stat
41. h Back Note SFP DDM FP iia Identifier NAINA Connector N A N A Vendor Name N A N A Vendor OUI N A N A Temperature N A N A Voltage N A N A TX Power N A N A Refresh Back Remark 7 dBm N pW Function Port number which has SFP slot Port 4 Port 5 Port 6 come with SFP The identifier information of the transceiver The connector type used on the transceiver SONET compliance information of the transceiver Gigabit Ethernet compliance information of the transceiver The vendor name of the transceiver The vendor OUI of the transceiver The current temperature sensed inside the transceiver The working voltage sensed inside the transceiver The transmission optical power sensed Click to refresh current configuration Click to back to previous page 1 TX power data is displayed with unit of mW It can be converted to dBm as remark 2 N A the information is not available 40 4 6 VLANs VLAN Configuration VLAN Disable Port based VLAN Mode gt Setting Port based VLAN ISP Mode gt Setting Simplified Tag based VLAN Mode gt Advanced VLAN Mode gt Apply Refresh r Remark Click Apply will make your selection effect immediately Any improper configuration might cause network connection problem Refer to operation manual before making VLAN configuration Note All members of a trunk group if configured must be in same VL
42. hich are as follows 30 802 1X Authenticator PC Station Supplicant Authentication Server Radius server O An802 1X authenticator This is the port on the switch that has services to offer to an end device provided the device supplies the proper credentials O An 802 1X supplicant This is the end device for example a PC that connects to a switch that is requesting to use the services port of the device The 802 1X supplicant must be able to respond to communicate An 802 1X authentication server This is a RADIUS server that examines the credentials provided to the authenticator from the supplicant and provides the authentication service The authentication server is respon sible for letting the authenticator know if services should be granted The 802 1X authenticator operates as a go between with the supplicant and the authentication server to provide services to the network When a switch is configured as an authenticator the ports of the switch must then be configured for authorization In an authenticator initiated port authorization a client is powered up or plugs into the port and the authenticator port sends an Extensible Authentication Protocol EAP PDU to the supplicant requesting the identification of the supplicant At this point in the process the port on the switch is connected from a physical standpoint however the 802 1X process has not authorized the port and no frames are passed from the po
43. ick to refresh current configuration 61 4 11 Mirroring Mirroring Configuration Pat Mirror Source 1 E Oo 3 r og E a r E Apply Refresh Configuration Description Mirror Port The port is forwarded all packets received on the mirrored ports Mirror Source Select the ports which will be mirrored all received packets to the mirror port Apply Click to apply the configuration change Refresh Click to refresh current configuration 62 4 12 Quality of Service QoS Configuration Port 802 1p DSCP Port Priority 802 1p Mapping DSCP Mapping Service Policy Apply Refresh Note QoS Configuration class 3 gt class 3 ER class 3 ha class 3 6 Disable b Disable y class 3 E BEE Disable y Disable y Class 3 gt 802 1p Mapping DSCP Mapping Service Policy Apply Refresh Remark 1 802 1p mode uses L2 packet s User Priority tag for priority classification 2 DSCP mode uses L3 IP packet s DSCP value for priority classification 3 802 1p mode is superior over DSCP mode when both are enabled 4 Port Priority is used when 802 1p and DSCP failed in classification ls Priority level Class 3 gt Class 2 gt Class 1 gt Class 0 Description Port number 802 1p priority classification Enable set to enable this classification to the port for priority tagged and VL
44. install an SFP fiber transceiver into SFP slot the steps are 1 Turn off the power to the switch 2 Insert the SFP fiber transceiver into the SFP slot Normally a bail is provided for every SFP transceiver Hold the bail and make insertion 3 Until the SFP transceiver is seated securely in the slot place the bail in lock position Connecting Fiber Cables LC connectors are commonly equipped on most SFP transceiver modules Identify TX and RX connector before making cable connection The following figure illustrates a connection example between two fiber ports RX Fiber cable M Tx TX Fiber cable RX Make sure the Rx to Tx connection rule is followed on the both ends of the fiber cable Network Cables Multimode MMP 50 125 62 5 125 Single mode SMF 9 125 Fiber Port Configuration For 1000M fiber application on Port 7 8 just leave the default port configuration Auto for fiber connec tion Note Since the SFP slot shares the same switched port with RJ 45 connector make sure only one network cable type is used any time In the case of both cable types are used at the same time SFP has higher priority 2 10 Making PoE Connections This section describes how to make a connection between a PSE port and a POE PD device Port 1 Port 2 Port 3 and Port 4 are equipped with PoE PSE function The ports are enabled to deliver power together with network signal to a connected powered device via Cat 5 cable To mak
45. installed and used in accordance with the instruction manual may cause harmful interference in which case the user will be required to correct the interference at his own expense NOTICE 1 The changes or modifications not expressively approved by the party responsible for compliance could void the user s authority to operate the equipment 2 Shielded interface cables and AC power cord if any must be used in order to comply with the emission limits CISPR A COMPLIANCE This device complies with EMC directive of the European Community and meets or exceeds the following technical standard EN 55022 Limits and Methods of Measurement of Radio Interference Characteristics of Information Technology Equipment This device complies with CISPR Class A WARNING This is a Class A product In a domestic environment this product may cause radio interfer ence in which case the user may be required to take adequate measures CE NOTICE Marking by the symbol C indicates compliance of this equipment to the EMC directive ofthe Euro pean Community Such marking is indicative that this equipment meets or exceeds the following techni cal standards EMC Class A EN61000 6 4 2001 IEC 61000 6 4 1997 EN55011 1998 A1 1999 A2 2002 CISPR11 1997 A1 1999 A2 2002 IEC 61000 3 2 2000 IEC 61000 3 3 1994 A1 2001 EN61000 6 2 2005 IEC 61000 6 2 2005 IEC 61000 4 2 2001 IEC 61000 4 3 2002 A1 2002 IEC 61000 4 4 2004 IEC 61000 4 5 2001 IEC 61000 4 6 19
46. ion H W Version x xx Hardware version MAC address xx XX XX XXx XX XX MAC address of this switch unit System gt Restore default Restore factory default configuration System gt Restore default keepIPA Restore defaults but keep IP no changed System gt Name lt name gt Assign a system name to the switch unit System gt RebootJ Reboot the switch unit Console commands gt Console Console gt Info 1 console information Password password for entering into management interface Timeout timeout for console connection without user action Prompt current command prompt used Console gt Password lt password gt change password Console gt Timeout lt timeout gt change timeout value Console gt Prompt lt string gt change prompt string IP commands gt IPJ IP gt InfoJ IP information Address XXX XXX XXX XXX IP address Subnet Mask xxx xxx xxx xxx Subnet mask Gateway XXX XXX XXX XXX Gateway IP address Dhcp disabled Gateway IP address IP gt Setup lt ipaddress gt lt ipmask gt lt ipgateway gt J Setup new IP IP gt Status DHCP status when enabled Dynamic Address xxx xxx xxx xxx Subnet Mask xxx xxx xxx xxx Gateway xxx xxx xxx xxx dhcp Address xxx XXX XXXx XXX IP gt Dhcp enable disable Use DHCP mode or not 22 2 13 Configuring IP Address and Password for the Switch The switch is shipped with the following factory default settings for software management
47. isable 8 None Disable 1 for all ports 0 for all ports 0 for all ports Tag ignore for all ports Enable for all ports 84 Ingress Setting Drop Untag Ingress Setting Drop Tag Egress Setting Insert Tag Egress Setting Untagging VID Egress Setting Untagged VID Disable for all ports Disable for all ports Disable for all ports Disable for all ports 1 for all ports VLAN Group 1 VID 1 VLAN Group 1 Member Ports Port 1 2 3 4 5 6 7 8 VLAN Group 1 Source Port Check Disable VLAN Group 2 VID 2 VLAN Group 2 Member Ports None VLAN Group 2 Source Port Check Disable VLAN Group 3 VID 3 VLAN Group 3 Member Ports None VLAN Group 3 Source Port Check Disable VLAN Group 4 VID 4 VLAN Group 4 Member Ports None VLAN Group 4 Source Port Check Disable VLAN Group 5 VID 5 VLAN Group 5 Member Ports None VLAN Group 5 Source Port Check Disable VLAN Group 6 VID 6 VLAN Group 6 Member Ports None VLAN Group 6 Source Port Check Disable VLAN Group 7 VID 7 VLAN Group 7 Member Ports None VLAN Group 7 Source Port Check Disable VLAN Group 8 VID 8 VLAN Group 8 Member Ports None VLAN Group 8 Source Port Check Disable LACP Port Configuration Protocol Enabled Not select disabled for all ports Key Value auto for all ports RSTP System Configuration System Priority 32768 85 Hello Time 2 Max Age 20 Forward Delay 15 Force Version Normal RSTP Port Configuration Prot
48. k Mode FlowContol Relay Alarm ES KE EN P m i aie i i ES e m m ES auto Speed EM auto Speed I Configuration Enable Jumbo Frames Power Saving Mode Port Link m m m Function Select to enable jumbo frame support Full all the time Link up power saving only when link up Link down power saving only when link down Disable disable port power saving The port number Ex 7 Indicates Port 7 type RJ 45 7 SFP Indicates Port 7 type SFP 8 Indicates Port 8 type RJ 45 S SFP Indicates Port 8 type SFP Speed and duplex status with green background port is link on Down with red background port is link down Mode Flow Control Relay Alarm PoE Enable Select port operating mode Disabled disable the port operation Mode Auto negotiation Speed capability Auto Enable 10 100 1000M 10 Half Disable 10M 10 Full Disable 10M 100 Half Disable 100M 100 Full Disable 100M 1000 Full Enable 1000M Auto 1000 Full Enable 1000M Force 1000 Full Disable 1000M Set port flow control function Duplex capability Full Half Half Full Half Full Full Full Full v set to enable 802 3x pause flow control for ingress and egress Set port link down alarm v set to enable port link down monitoring for failure relay output Refer to section 2 6 for Failure Relay Output function Set port PoE function Only valid
49. k to configure Re authentication parameters Click to apply the configuration change Click to refresh current configuration 59 4 9 1 802 1X Re authentication Parameters 802 1X Parameters Reauthentication Enabled F Enabled a nod le 3600 leh eee e _ Configuration Description Reauthentication Enabled Check to enable periodical re authentication for all ports Reauthentication Period The period of time after which the connected radius clients must be re authenticated unit second Value 1 3600 EAP timeout The period of time the switch waits for a supplicant response to an EAP request unit second Value 1 255 Apply Click to apply the configuration change Refresh Click to refresh current configuration 60 4 10 IGMP Snooping IGMP Configuration IGMP Enabled kouer Pore HEER Unregistered IPMC Flooding enabled ra VLANID IGMP Snooping Enabled IGMP Querying Enabled 1 c c _Apply Refresh Configuration Description IGMP Enabled Check to enable global IGMP snooping Router Ports VLAN ID IGMP Snooping Enabled IGMP Querying Enabled Apply Refresh Specify which ports have multicast router connected and require being forwarding IPMC packets unconditionally List of current existing VLANs Check to enable IGMP snooping on the associated VLAN Check to enable IGMP querying on the associated VLAN Click to apply the configuration change Cl
50. ly compliant PD 43V 54V 20 2 11 LED Indication LED Function State Interpretation PWR Power status ON The power is supplied to the switch OFF The power is not supplied to the switch 1000 1000Mbps link status ON A 1000M link is established on the port No traffic BLINK Port 1000Mbps link is up and there is traffic OFF Port link is down 10 100 1000Mbps link status ON A 10M or 100M link is established on the port BLINK Port link is up and there is traffic OFF Port link is down PoE PoE power status ON PoE power is delivered on the port OFF PoE power is off F7 Port 7 SFP status ON Port 7 SFP fiber is in use OFF Port 7 RJ 45 is in use FS Port 8 SFP status ON Port 8 SFP fiber is in use OFF Port 8 RJ 45 is in use Met Management status ON System diagnostics amp initialization finished OFF System diagnostics amp initialization in process 2 12 Making Console Connection d The connector designed for the console port is RJ 45 and has the pin assignments as follows Pin RS 232 signals IN OUT 1 2 7 8 NC 3 RxD IN 6 TxD OUT 4 5 GND Baud Rate information Baud rate 115200 Data bits 8 Parity None Stop bit 1 Flow control None ZI 2 12 1 Console Commands Three command sets are provided as follows System commands gt System System gt lnfo display system information Name System name of this switch unit S W Version x xx Software vers
51. n 7 8 Negative of power voltage Typical 48 VDC Discovery PD resistance 15K 33K PD Classification Class 0 4 Power delivery 15 4W max per port Protection Under voltage Over voltage Over current detection Terminal Block Connector DC power input Screwed terminal block 2 pairs of contacts Operating Input Voltages 6 5 60VDC General applications 44 54VDC PoE applications Power consumption 10W max Full load with no PoE support 72W max Full load with 4 PoE max output Power dissipation KGD 802 4 2W 30V 4 5W 48V KGD 802 P 5 3W 48V Relay output alarm 2 terminal contacts PF PF 30VDC 1A max or 120VAC 0 5A max Alarm events power failure specific port link fault software configured DC Jack Interfaces DC Jack D 6 3mm D 2 0mm Operating Input Voltages 6 5 60VDC General applications 44 54VDC POE applications Mechanical Dimension base 140 x 106 x 40 mm WxDxH Housing Enclosed metal with no fan Mounting Din rail mounting Panel mounting optional Environmental Operating Temperature Typical 20 C 60 C Storage Temperature 20 C 85 C Relative Humidity 10 90 non condensing Electrical Approvals FCC Part 15 rule Class A CE EMC CISPR11 Class A Safety LVD IEC 60950 1 2 Installation 2 1 Unpacking The product package contains e The switch unit e One power adapter optional accessory e One product CD ROM 2 2 Safety Cautions To reduc
52. oE Enable v Disable for all ports Port Type Port 7 Port 8 RJ 45 VLAN Configuration Main Mode VLAN Disable Port based VLAN Mode setting Port 1 2 3 4 5 6 7 8 for Group 1 None for Group 2 Member Ports Port based VLAN ISP Mode setting Joint Port Port 8 83 Simplified Tag based VLAN Mode settings Drop Untag Egress Tagging Untagged VID PVID VLAN Group 1 VID VLAN Group 1 Member Ports VLAN Group 1 Source Port Check VLAN Group 2 VID VLAN Group 2 Member Ports VLAN Group 2 Source Port Check VLAN Group 3 VID VLAN Group 3 Member Ports VLAN Group 3 Source Port Check VLAN Group 4 VID VLAN Group 4 Member Ports VLAN Group 4 Source Port Check VLAN Group 3 VID VLAN Group 3 Member Ports VLAN Group 3 Source Port Check VLAN Group 6 VID VLAN Group 6 Member Ports VLAN Group 6 Source Port Check VLAN Group 7 VID VLAN Group 7 Member Ports VLAN Group 7 Source Port Check VLAN Group 8 VID VLAN Group 8 Member Ports VLAN Group 8 Source Port Check Advanced VLAN Mode Settings Ingress Default Tag PVID Ingress Default Tag CFI Ingress Default Tag User Priority Ingress Setting Tag Aware Ingress Setting Keep Tag Disable for all ports Untag for all ports 1 for all ports 1 for all ports 1 Port 1 2 3 4 5 6 7 8 Disable 2 None Disable 3 None Disable 4 None Disable 5 None Disable 6 None Disable 7 None D
53. ocol enabled Not select disabled for all ports Edge v Select for all ports Max Age 20 Forward Delay 15 Force Version Normal 802 1X Configuration Mode Disabled RADIUS IP 0 0 0 0 RADIUS UDP Port 1812 RADIUS Secret None Admin State Force Authorized for all ports Reauthentication Enabled No Reauthentication Period 3600 EAP Timeout 30 Port 1 Port 8 tag 1 Class 0 Port 1 Port 8 tag 2 Class 1 Port 1 Port 8 tag 3 Class 1 Port 1 Port 8 tag 4 Class 2 Port 1 Port 8 tag 5 Class 2 Port 1 Port 8 tag 6 Class 3 Port 1 Port 8 tag 7 Class 3 Mirroring Configuration Mirror source Not select for all ports Mirror Port 1 Port 1 Quality of Service Configuration 802 1p Classification Disable for all ports DSCP Classification Disable for all ports Port Priority Class 3 for all ports 86 QoS 802 1p Mapping Port 1 Port 8 tag 0 Port 1 Port 8 tag 1 Port 1 Port 8 tag 2 Port 1 Port 8 tag 3 Port 1 Port 8 tag 4 Port 1 Port 8 tag 5 Port 1 Port 8 tag 6 Port 1 Port 8 tag 7 QoS DSCP Mapping DSCP 1 Priority DSCP 2 Priority DSCP 3 Priority DSCP 4 Priority DSCP 5 Priority DSCP 6 Priority DSCP 7 Priority All others DSCP QoS Service Policy Port 1 Port 2 Port 3 Port 4 Port 5 Port 6 Port 7 Port 8 QoS DSCP Mapping DSCP 1 Priority DSCP 2 Priority DSCP 3 Priority DSCP 4 Priority DSCP 5 Priority DSCP 6 Priority Class 0 Class 0 Class 1 Class 1 Class 2 Cla
54. ress for the System Unit Before the switch can be managed from a web browser software make sure a unique IP address is configured for the switch 4 1 Start Browser Software and Making Connection Start your browser software and enter the IP address of the switch unit to which you want to connect The IP address is used as URL for the browser software to search the device URL http xxx XXX XXX XXX Factory default IP address 192 168 0 2 4 2 Login to the Switch Unit When browser software connects to the switch unit successfully a Login screen is provided for you to login to the device as the left isplay below KGS 802 B Gigabit Ethernet Switch Configuration Please enter password to login Password Ave Monitoring Duplicated Administrator This device is managed by 192 168 0 102 currently Maintenance The switch will accept only one successful management connection at the same time The other con nection attempts will be prompted with a warning message as the right isplay above A new connection will be accepted when the current user logout successfully or auto logout by the switch due to no access for time out of 3 minutes System Configuration is displayed after a successful login 3302 4 3 Main Management Menu Configuration System Ports VLAN LACP RSTP 802 1X IGMP Snooping Mirroring QoS Storm Control Monitoring Statistics Overview Detailed Statistics LACP Status
55. rt on the supplicant into the switching engine If the PC attached to the switch did not understand the EAP PDU that it was receiving from the switch it would not be able to send an ID and the port would remain unauthorized In this state the port would never pass any user traffic and would be as good as disabled If the client PC is running the 802 1X EAP it would respond to the request with its configured ID This could be a username password combination or a certificate After the switch the authenticator receives the ID from the PC the supplicant The switch then passes the ID information to an authentication server RADIUS server that can verify the identifica tion information The RADIUS server responds to the switch with either a success or failure message If the response is a success the port will be authorized and user traffic will be allowed to pass through the port like any switch port connected to an access device If the response is a failure the port will remain unauthorized and therefore unused If there is no response from the server the port will also remain unauthorized and will not pass any traffic 31 4 Web Management The switch features an http server which can serve the management requests coming from any web browser software over TCP IP network Web Browser Compatible web browser software with JAVA script support Microsoft Internet Explorer 4 0 or later Netscape Communicator 4 x or later Set IP Add
56. s Default Tag Priority tagged VID 0 Ingress Default Tag Ingress Default Tag VLAN tagged VID gt 0 Ingress Default Tag Packet own tag 31 4 6 4 4 VLAN Groups Configuration Group VID Member Ports Source Port Check Apply Refresh Back Description Group number VID of the VLAN to which this group is associated 1 4095 decimal 12 bit VID value Select the admitted egress ports for the packets belong to the VLAN Port 8 click to select Check whether the ingress port is the member port of the VLAN Enable set to enable this check the packet is dropped if ingress port is not member port of the VLAN Disable set to disable this check Click to apply the configuration change Click to refresh current configuration Click to go back to upper menu Note This VLAN groups configuration is also applied to Advanced VLAN configuration 50 4 6 5 Simplified Tag based VLAN vs Advanced VLAN Simplified Tag based mode comes from Advanced mode actually Some optional settings in Advanced mode are pre configured and hidden for no change under Simplified mode The following table lists the setting relations between Simplified mode and Advanced Hidden Advanced settings amp pre configured value in Simplified Mode Setting Value CFI 0 User Priority 0 Tag Aware enable Keep Tag disable Drop Tag disable Simplified Mode Egress Tagging is equal to combination of Advanced Mode Insert Tag
57. sed VLAN and tagged VLAN in per port basis 802 1x Authentication IEEE 802 1X port based network access control function provide a means of authenticating and autho rizing devices attached to the switched port that has point to point connection characteristics and of preventing access to that port in cases in which the authentication and authorization process fails 1 1 Features Provides 8 10 100 1000Mbps RJ 45 and two 1000M SFPs Provides four IEEE 802 3af compliant PoE PSE ports Provides in band web based and SNMP management interface All copper ports support auto negotiation and auto MDI MDI X detection Provides full wire speed forwarding Supports 802 3x flow control for full duplex and backpressure for half duplex Provides port status statistic monitoring and control function Supports DHCP IP configuration Supports port based and 802 1Q Tag based VLAN Provides QoS function Provides link aggregation port trunking function with LACP support Provides port mirroring function Provides 802 1 X authentication for port access Supports 802 1w RSTP 802 1D STP and 802 18 MSTP Provides IGMP snooping Supports SFP with Digital Diagnostic Monitoring DDM Provides packet storm control function In band embedded firmware upgrade function Power saving function 1 2 Product Panels The following figure illustrates the front panel and rear panel of the switch DC IN terminal block connector LED indicators Copper ports w h
58. setting affects the index used for VLAN classification VLAN table lookup The following table lists the index used Ingress Tag Aware setting Received packet type Tag ignore Tag aware Untagged PVID PVID Priority tagged VID 0 PVID PVID VLAN tagged VID gt 0 PVID Packet tag VID 3 Both Drop Untag and Drop Tag are set to Disable to admit all packets 50 4 6 4 3 Egress Settings Configuration Port Insert Tag Untagging Specific VID Untagged VID Apply Refresh Back Egress Settings Jee 3 Disable Disable y 4 Disable ON 5 Disable y Disable y REENEN EE 6 Disable al Disable zl i TE m EF Disable all Disable y i 8 Disable Apply Refresh Back Description Port number Activate tagging Insert a tag to the packet Enable set to activate tagging Disable set to disable tagging function No tag insertion 1f packet tag information matches Untagged VID Enable set to enable this function Disable set to disable this function VID for Untagging Specific VID setting 1 4095 decimal 12 bit VID value Click to apply the configuration change Click to refresh current configuration Click to go back to upper menu The inserted tag sources when Insert Tag Enable are listed as follows Received packet type Tag Aware Tag ignore Tag Aware Tag aware Untagged Ingress Default Tag Ingres
59. ss 2 Class 3 Class 3 Class 0 Class 0 Class 0 Class 0 Class 0 Class 0 Class 0 Class 0 SS Strict priority Strict priority Strict priority Strict priority Strict priority Strict priority Strict priority Strict priority S Class 0 Class 0 Class 0 Class 0 Class 0 Class 0 S Sess S 87 DSCP 7 Priority 0 Class 0 All others DSCP Class 0 QoS Service Policy Port 1 Strict priority Port 2 Strict priority Port 3 Strict priority Port 4 Strict priority Port 5 Strict priority Port 6 Strict priority Port 7 Strict priority Port 8 Strict priority Storm Control Configuration Broadcast Rate No limit Multicast Rate No limit Flooded Unicast Rate No limit
60. t based on VLAN table information VLAN group configuration information about a VLAN which can be recognized in the switch The information includes a VID associated to the VLAN member ports and some special settings 74 3 2 QoS Function The switch provides a powerful Quality of Service QoS function to guide the packet forwarding in four priority classes The versatile classification methods can meet most of the application needs The following figure illustrates the QoS operation flow when a packet received on the ingress port until it is transmitted out from the egress port Ingress port Packet Priority Classification 802 1p Classification 802 1p mapping tables DSCP Classification DSCP mapping table Port based Classification Default port priority Packet switching forwarding ananb sept ananb z sse 9 Je ananb SSE 9 ananb o SSE 9 Egress service policy Egress port 25 3 2 1 Packet Priority Classification Each received packet is examined and classified into one of four priority classes Class 3 Class 2 Class 1 and Class 0 upon reception The switch provides the following classification methods 802 1p classification use User Priority tag value in the received IEEE 802 1Q packet to map to one priority class DSCP classification use DSCP value in the received IP packet to map to one priority class Port based classification used when 802 1p and DSCP are disabled or fail to b
61. t members found of the group 7J 4 19 Ping Ping Parameters Target IP address ben U Ping Results Target IP address 0 0 0 0 Status frest complete Received replies p Request timeouts lo Average Response Time in ms lo Refresh Ping Description Target IP Address The target IP address to which the ping command issues Count The number of ping commands generated Time Out in secs The time out for a reply in seconds Apply Start the ping command Status The command status Received replies The number of replies received by the system Request time outs The number of requests time out Average Response Time The average response time of a ping request in mini seconds 75 4 20 Reboot System Reboot System Are you sure you want to reboot system No This menu s used to reboot the switch unit remotely with current configuration Starting this menu will make your current http connection lost You must rebuild the connection to perform any management operation to the unit 4 21 Restore Default Restore Default Are you sure you want to restore factory default No This menu s used to restore all settings of the switch unit with factory default values Note that this menu might change the current IP address of the switch and make your current http connection lost 4 22 Update Firmware Update Firmware al Upload This menu is used to perform in band firmw
62. tatistics Statistics for Port 1 Button Description Port 1 Click to display the detailed statistics of Port Clear Click to reset all statistic counters Refresh Click to refresh the displayed statistic counters 60 4 16 LACP Status LACP Aggregation Overview GrouplPor 1 2 3 4 5 6 7 8 ont DS 0 Leaming Port Leaming by RSTP M Forwarding Port link up and forwarding frames BR Forwarding Port link up and forwarding by RSTP Number is Partner port number if other switch has LACP enabled Status Port Normal Group Status Partner MAC address Local Port Aggregated Refresh Description The port number Display the ports not LACP enabled The LACP group The LACP port status presented with color and a number lt Down gt the port is link down lt Blocked amp gt the port is blocked by RSTP and the is the port number of LACP link partner lt Learning gt the port is learning by RSTP lt Forwarding gt the port is link up and forwarding frames lt Forwarding amp gt the port is link up and forwarding frames and the is the port number of LACP link partner The MAC address of the link partner at the other end of the LACP aggregate The ports at local end which are aggregated in same LACP group Click to refresh the status Note the figure shows an example that two LACP link aggregates are configured Status Port Protocol Active Par
63. tings allow administrator to access the switch and perform the switch manage ment over a dedicated VLAN The following rules are applied with the Management VLAN 1 If the VLAN function is disabled Management VLAN setting is ignored and no VLAN limitation 1s applied in accessing the switch web management interface If Management VLAN setting is zero no VLAN limitation is applied in accessing the switch web management interface If Management VLAN setting is not zero the switch web http server only replies to the management hosts located in the matched VLAN group That means the egress port will be limited in the member ports of the matched VLAN group The switch web http server can accept untagged or tagged management accessing packets but replies the management host with untagged packets only The system will cross check the VLAN group table and reject un existing VLAN setting during configuring Management VLAN value If VLAN groups configuration causes a result that no VLAN group matches the management VLAN setting the management VLAN setting will be reset to zero by the system automatically Notes 1 To apply management VLAN function be sure to configure a VLAN group that matches the management VLAN first No matter how management VLAN is configured login password authentication is still required 36 4 5 Ports Port Configuration Enable Jumbo Frames Po Port Lin
64. tion Mode Disable RADIUS IP 0 0 0 0 RADIUS UDP Port 1812 RADIUS Secret Configuration Mode RADIUS IP RADIUS UDP Port RADIUS Secret Port Admin State Port State Re authenticate Force Reinitialize Re authenticate All Force Reinitialize All Parameters Apply Refresh Description Disabled disable 802 1X function Enabled enable 802 1X function IP address of the Radius server The UDP port for authentication requests to the specified Radius server The encryption key for use during authentication sessions with the Radius server It must match the key used on the Radius server Port number Port 802 1X control Auto set to the Authorized or Unauthorized state in accordance with the outcome of an authentication exchange between the Supplicant and the Authentication Server Force Authorized the port is forced to be in authorized state Force Unauthorized the port is forced to be in unauthorized state Port 802 1X state amp 02 1X Disabled the port is in 802 1X disabled state Link Down the port is in link down state Authorized green color the port is in 802 1X authorized state Unauthorized red color the port is in 802 1X unauthorized state Click to perform a manual authentication for the port Click to perform an 802 1X initialization for the port Click to perform manual authentication for all ports Click to perform 802 1X initialization for all ports Clic
65. tner Port Number Operation Port Key Description The port number yes the port is link up and in LACP operation no the port is link down or not in LACP operation The port number of the remote link partner The operation key generated by the system Ss 4 17 RSTP Status The following example shows three RSTP topologies operate in three VLANs configured in a switch RSTP VLAN Bridge Overview VLAN Id Bridge Id Hello Time Max Age Fwd Delay Topology Root Id 1 32769 00 40 F6 EB 0B 65 2 20 15 Steady This switch is Root 2 32770 00 40 F6 EB 0B 65 2 20 15 Steady 32770 00 40 F6 EB 0B 5C via port 3 3 32771 00 40 F6 EB 0B 69 2 20 15 Steady This switch is Root Refresh RSTP Port Status Port Group Vian Id Path Cost Edge Port P2p Port Protocol Port State Poti Non STP Port2 Non STP Porte STA Pot7 3 20000 no lyes RSTP Forwarding Port8 Ej 20000 no yes RSTP Forwarding RSTP Status Description VLAN Id The VLAN which has STP enabled ports Bridge Id STP bridge ID Priority MAC address detected in the associated VLAN Hello Time Hello Time is used to determine the periodic time to send normal BPDU from designated ports among bridges It decides how long a bridge should send this message to other bridge to tell I am alive 1 10 seconds Max Age When the switch is root bridge the whole LAN uses this setting as the maximum age time 6 40 seconds Fwd Delay This fi
66. to upper menu Operation in this mode 1 The member ports of two groups are allowed to overlap The member ports in same group can communicate with other members only 2 3 No packet tag is examined 4 Areceived packet will not be modified i e tagging or untagging through VLAN operation till it is transmitted Note VLAN group I is configured with VID VLAN ID 1 and group 2 is configured with VID 2 by the system automatically 40 4 6 2 Port based VLAN ISP Mode VLAN Configuration Port based VLAN ISP Mode VLAN Configuration VLAN Disable Port based VLAN Mode gt Setting Port based VLAN ISP Mode gt Setting C Advanced VLAN Mode gt 1 7 port based VLAN groups are created Each includes 2 member ports 2 Joint port is the overlap among all 7 groups 3 The member ports in group can communicate with each other 4 No packet modification from ingress to egress Refresh P8 is joint port Groups P1 P8 P2 P8 P3 P8 P4 P8 P5 P8 P6 P8 P7 P8 are created Configuration Description Joint port Select a port as the joint port for all 7 port based VLAN groups Apply Click to apply the configuration change Refresh Click to refresh current configuration Back Click to go back to upper menu Example If Port 8 is selected as the joint port the 7 port based VLAN groups are configured as follows auto matically Group 1 member Port 1 Port 8
67. ue VLAN The table is referred for VLAN classification A VLAN group contains the following configuration settings VID 12 bit VLAN Identifier index to the VLAN to which the group is associated Member Ports the admitted egress ports for packets belonging to this VLAN Source Port Check the ingress port of the packet must also be the member port of this VLAN Otherwise the packet is discarded 3 3 6 VLAN Classification VLAN classification is a process to classify a VLAN group to which a received packet belongs The VID of the generated Packet Tag information associated to the received packet is used as an index for VLAN group table lookup The VID matched VLAN group will be used for packet forwarding If no matched VLAN group is found in table lookup the packet is dropped Refer to section 3 2 4 for details about how the Packet Tag information is generated The member ports specified in the matched VLAN group are the admitted egress port range for the packet The packet will never be forwarded to other ports which are not in the member ports The Source Port Check setting of the matched VLAN group is also referred If it is enabled the ingress port will be checked whether it is a member port of this group 3 3 7 Packet Forwarding The forwarding is a process to forward the received packet to one or more egress ports The process uses the following information as forwarding decision e Member ports of the matched VLAN group the
68. us example shows three STP operate in three different VLANs as follows VLAN I members Pl P2 P3 P4 P3 P6 P7 P8 VLAN 2 members P3 P4 VLAN 3 members P7 P8 P3 PVID VLAN 2 P4 PVID VLAN 2 P7 PVID VLAN 3 P8 PVID VLAN 3 P3 and P4 connect to same switch as an STP redundant link associated to VLAN 2 P7 and P8 connect to another switch as an STP redundant link associated to VLAN 3 The switch supports MSTP Multiple STP over multiple VLANs Each VLAN has individual STP mechanism operating independently J 4 18 IGMP Status IGMP Status VLAN ts Queries Queries vi v2 v3 v2 1D erier transmitted received Reports Reports Reports Leaves la de o 89 o am 4 0 Refresh Member Groups VLAN ID Groups Port Members 4 224 0 1 60 1 1 239 255 255 250 1 1 224 0 0 251 1 1 224 0 0 252 1 11 23401 23 1 Status Description VLAN ID The VLAN ID of the entry Querier Status Show the Querier status is Active or Idle Queries transmitted The number of Transmitted Queries Queries Received The number of Received Queries V1 Reports The number of Received V1 Reports V2 Reports The number of Received V2 Reports V3 Reports The number of Received V3 Reports V2 Leave The number of Received V2 Leave Refresh Click to refresh the page Group Member Status Description VLAN ID The VLAN where the groups found Groups IPMC group IP found on the VLAN Port Members Por
69. vice is guaranteed normally However when excess bandwidth exists higher class queue will take advantage on band width allocation 4 13 Storm Control Storm Control Configuration Multicast Rate JNoLimity Flooded Unicast Rate a No Limit zl Apply Refresh Configuration Description Broadcast Rate The rate limit of the broadcast packets transmitted on a port Broadcast Rate The rate limit of the Multicast packets transmitted on a port Flooded Unicast Rate The rate limit of the flooded unicast packets transmitted on a port The flooded unicast packets are those unicast packets whose destination address is not learned in the MAC address table Apply Click to apply the configuration change Refresh Click to refresh current configuration Notes 1 The unit of the rates is pps packets per second 2 No Limit no protection control 67 4 14 Statistics Overview Statistics Overview for all ports Statistics Description Port Port number Tx Bytes Total of bytes transmitted on the port Tx Frames Total of packet frames transmitted on the port Rx Bytes Total of bytes received on the port Rx Frames Total of packet frames received on the port Tx Errors Total of error packet frames transmitted on the port Rx Errors Total of error packet frames received on the port Clear Click to reset all statistic counters Refresh Click to refresh all statistic counters 68 4 15 Detailed S
70. wer over Ethernet For PoE applications four IEEE 802 3af compliant PoE PSE ports are provided in four copper ports Each PSE port can deliver 48VDC power to one PoE PD Powered Device via the connected Cat 5 cable Industrial Features For industrial environment the devices are designed with the following enhanced features exceeding that of commercial Ethernet switches High and wide operating Temperature e Power input interface Industrial screw terminal block and DC power jack for external commercial power adapter as option e Screw panel and DIN rail mounting support for industrial enclosure e Industrial rated Emission and Immunity performance Web Management The switch is embedded with an Http server which provides management functions for advanced network functions including Port Control Quality of Service and Virtual LAN functions The manage ment can be performed via Web browser based interface over TCP IP network Quality of Service For advanced application the switch is featured with powerful Quality of Service QoS function which can classify the priority for received network frames based on the ingress port and frame contents Furthermore many service priority policies can be configured for egress operation in per port basis Virtual LAN VLAN For increasing Tagged VLAN applications the switch is also featured with powerful VLAN function to fulfill the up to date VLAN requirements The switch supports both port ba
71. with VID equal to Untagged VID setting are removed the tag For more information about Ingress Default Tag refer to section 3 3 3 and 4 6 4 1 47 4 6 4 Advanced VLAN Mode Advanced VLAN Mode Ingress Default Tag Ingress Settings Egress Settings VLAN Groups Ingress Default Tag Port PVID CFI User Priority FP Mr o m at PPR 19 9 CI WE KW mp KS WE KW 8 Apply Refresh Back Configuration Description Ingress Default Tag Click to configure per port Ingress Default Tag settings Ingress Settings Click to configure per port ingress settings Egress Settings Click to configure per port egress settings VLAN Groups Click to configure VLAN group table 48 4 6 4 1 Ingress Default Tag Configuration Description Port Port number PVID Port VID VID for Ingress Default Tag 1 4095 decimal 12 bit VID value CFI CFI for Ingress Default Tag O I 1 bit CFI value User Priority User priority for Ingress Default Tag 0 7 decimal 3 bit value Apply Click to apply the configuration change Refresh Click to refresh current configuration Back Click to go back to upper menu PVID is used as index for VLAN classification VLAN group table lookup in one of the following conditions 1 Ingress port Tag Aware setting Tag ignore 2 Ingress port Tag Aware setting Tag aware and the received packet is untagged or priority tagged PVID CFI User Priority Ingress

KGD-802-B User Manual 120606.PMD

Contents

Download Pdf Manuals

Related Search

Related Contents