8 Port 10/100BASE-TX
Plus One
100BASE-FX
or
1000BASE-FX Port
Advanced Managed Switch
MIL-SME801P
MIL-SME801GSX
MIL-SME801GLX
USER GUIDE
Download from Www.Somanuals.com. All Manuals Search And Download.
Table of Contents
1. Introduction
Features
Intelligent Management Features
Package Contents
Management Methods
Console and Telnet Management
Web-based Management
2. Hardware Description
Front Panel
LED Indicators
Rear Panel
Desktop Installation
Power On
3. Network Application
Small Workgroup
Extended Workgroup
4. Console Management
Connecting a Terminal or PC to the Console Port
Console - Menu
4-1. Main Menu
4-2. Status and Counters
4-2-1. Port Status
4-2-2. Port Counters
4-2-3. System Information
4-3. Switch Static Configuration
4-3-1. Administration Configuration
4-3-1-1. Device Information
4-3-1-2. IP Configuration
4-3-1-3. Username Configuration
4-3-1-4. Password Configuration
4-3-2. Port Configuration
4-3-3. Trunk Configuration
4-3-4. Port Mirroring Configuration
4-3-5. VLAN Configuration
4-3-5-1. VLAN Configure
4-3-5-2. Create VLAN Group
4-3-5-3. Edit / Delete VLAN Group
4-3-5-4. Groups Sorted Mode
4-3-6. Priority Configuration
4-3-7. MAC Address Configuration
4-3-7-1. Static MAC Address
4-3-7-2. Filtering MAC Address
4-3-8. Miscellaneous Configuration
4-3-8-1. MAC Address Ageing Time
iii
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-8-2. Broadcast Storm Filtering
4-3-8-3. Max Bridge Transmit Delay Bound
4-3-8-4. Collision Retry Forever
4-3-8-5. Hash Algorithm
4-3-8-6. IFG Compensation
4-4. Protocol Related Configuration
4-4-1. STP
4-4-1-1. STP Setup
4-4-1-2. System Configuration
4-4-1-3. STP Per Port Setting
4-4-2. SNMP
4-4-2-1. SNMP System Options
4-4-2-2. Community Strings
4-4-2-3. Trap Managers
4-4-3. LACP
4-4-3-1. Working Ports Setting
4-4-3-2. LACP State Activity
4-4-3-3. Group Status
4-4-4. IGMP/GVRP Configuration
4-4-5. 802.1X Configuration
4-4-5-1. 802.1x Setup
4-4-5-2. 802.1x System Configuration
4-4-5-3. 802.1x Per Port Configuration
4-4-5-4. 802.1x Miscellaneous Configuration
4-5. System Reset Configuration
4-5-1. Factory Default
4-5-2. System Reboot
4-5-3. TFTP Configuration
4-5-3-1. Update Firmware
4-5-3-2. TFTP Restore Configuration
4-5-3-3. TFTP Backup Configuration
4-6. Xmodem Upgrade
5. Web-Based Management
Preparing for Web Management
5-1. System Login
5-2. Port Status
5-3. Port Statistics
5-4. Administrator
5-4-1. IP Address
5-4-2. Switch Setting
5-4-2-1. Basic
5-4-2-2. Advanced Setting
5-4-2-3. Miscellaneous Setting
5-4-3. Console Port Information
5-4-4. Port Controls
5-4-5. Trunking
5-4-5-1. Aggregator Setting
5-4-5-2. Aggregator Information
iv
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-5-3. State Activity
5-4-6. Forwarding and Filtering
5-4-6-1. IGMP Snooping
5-4-6-2. Static MAC Address
5-4-6-3. MAC Filtering
5-4-7. VLAN Configuration
5-4-7-1. Port-based VLAN
5-4-7-2. 802.1Q VLAN
5-4-8. Spanning Tree
5-4-8-1. System Configuration
5-4-8-2. Per Port Configuration
5-4-9. Port Mirroring
5-4-10. SNMP
5-4-11. Security Manager
5-4-12. 802.1x
5-4-12-1. System Configuration
5-4-12-2. Per Port Configuration
5-4-12-3. 802.1x Miscellaneous Configuration
5-4-13. TFTP Update Firmware
5-4-14. Configuration Backup
5-4-14-1. TFTP Restore Configuration
5-4-14-2. TFTP Backup Configuration
5-4-15. Factory Default
5-4-16. Reboot
6. Troubleshooting
Incorrect connections
Diagnostic LED Indicators
7. Technical Specifications
v
Download from Www.Somanuals.com. All Manuals Search And Download.
Download from Www.Somanuals.com. All Manuals Search And Download.
1.
Introduction
The MIL-SME801P and MIL-SME801G advanced managed switch families are
multi-port switches that can be used to build high-performance workgroup
networks and as Customer Provider Edge (CPE) devices in Fiber-to-the-Home
(FTTH) networks.
Figure 1-1. The MIL-SME801P switch
The MIL-SME801P switch has eight auto-sensing 10/100BASE-TX RJ-45 ports
plus one 100BASE-FX fiber port that enables long-distance connections. The
MIL-SME801G switch has eight auto-sensing 10/100BASE-TX RJ-45 ports plus one
1000BASE-X fiber port in either SX or LX optic types
. The switch features a
“store-and-forward “ switching scheme. This allows the switch to auto-learn
and store source address in a 6K-entry MAC address table.
An
(Medium Dependent Interface) Port is also called an “uplink” port.
MDI
This means that the wiring is configured to connect to a hub, switch or router.
An MDI-X Port swaps the transmit and receive pins so that it is able to
communicate with an MDI device. An auto MDI/MDI-X port senses how the
device it is connected to is configured and automatically configures it to work
with that device. So, if it receives data on pins 1 and 2, it knows it needs to
transmit on pins 3 and 4. This eliminates the need of having multiple patch
cable types.
In order to improve readability, for the remainder of this document the phrase
MIL-SME801P will be used to refer to both the Fast Ethernet and Gigabit Ethernet
fiber port versions of the product. Where the document refers to 100FX and you are
installing the MIL-SME801G, read this as 1000FX.
1
Download from Www.Somanuals.com. All Manuals Search And Download.
Features
„ Console and Telnet management
„ Conforms to IEEE803.u 10BASE-T, 802.3u 100BASE-TX/FX
„ 8 auto-sensing 10/100Mbps Ethernet RJ-45 ports
„ One 100 FX fiber port
„ Switch fabric bandwidth up to 8.8 Gbps throughput
„ Full Layer 2 management function
„ Port mirroring
„ IGMP support for Multi media applications
„ Back-Pressure-Base flow control on Half-duplex link mode
„ Pause-Frame-Base flow control on Full-duplex link mode
„ Port Based VLAN /IEEE802 .1Q VLAN
„ Class of Service / Port trunking
„ Type of service for Quality of Service
„ Port Security
„ IEEE802.1d Spanning Tree Protocol
„ Per port bandwidth control
„ Full wire speed forwarding rate
6K-entry MAC address table
3Mbits for shared packet buffer
„
„
2
Download from Www.Somanuals.com. All Manuals Search And Download.
Intelligent Management Features
Management
Telnet management, Web management, In-Band
Local Console (RS-232)
RFC Standard
RFC 1157 SNMP, RFC 1213 MIB II, Bridge MIB,
RFC 1643 ETHERNET LIKE, RFC 1493 BRIDGE
MIB, RFC 1757 RMON 1, RFC 1215 Trap
Software
Upgrade
TFTP and console firmware upgrade
Port Trunk
Supports IEEE802.3ad and IEEE802.1ad with
LACP function and provides 2 Trunk groups of 4
member ports within 10 ports.
Spanning Tree
VLAN
IEEE802.1d spanning Tree
Port based VLAN
IEEE802.1Q Tag VLAN and GVRP supported
IEEE802.1v Protocol VLAN (IP, IPX)
VLAN groups up to 256, VLAN ID up to 4095
QOS Policy
Supports 8 priority levels ID for two priority queues
Class of Service
Supports IEEE802.1p Priority. Supports First Come
First service, All High before Low, WRR for High or
Low weight.
Port Based
Priority
Supports 3 settings: Disable, Low and High priority.
When set to Disables, the incoming packet will
follow QoS policy. Otherwise, the packet will follow
port priority setting to High/Low queue.
3
Download from Www.Somanuals.com. All Manuals Search And Download.
IGMP
IGMP Snooping for Multi-Media applications, IGMP
group supports 256 groups
Port Security
Port Mirror
MAC address filtering for ingress packets
Static MAC address lock for source address.
Global system supports 3 mirroring types: RX, TX
and Both. The maximum mirror entries is 8.
Bandwidth
Control
Per port bandwidth control support. Per level 100K.
802.1x
Supports IEEE802.1x user authentication and can
report to Radius Server.
DHCP
Supports DHCP Client
4
Download from Www.Somanuals.com. All Manuals Search And Download.
Package Contents
Unpack the contents of the package and verify them against the checklist
below.
„
„
„
„
„
„
MIL-SME801P Switch
Power Cord
Four Rubber Feet
RS-232 cable
Rack-mounted kit
CD ROM containing Users Guide
If any item is missing or damaged, please contact your local dealer for
service.
5
Download from Www.Somanuals.com. All Manuals Search And Download.
Management Methods
The MIL-SME801P switch supports the following management methods:
„
„
Console and Telnet Management
Web-based Management
Console and Telnet Management
Console Management is done through the RS-232 Console Port. Managing
the switch in this method requires a direct connection between a PC and the
Telnet management requires a network connection. The default IP address
switch.
is 192.168.1.77 with a subnet mask of 255.255.255.0. This default address can be
used to login and change the configuration using Telnet.
Web-based Management
The switch provides an embedded HTML web site residing in flash memory. It
offers advanced management features and allows users to manage the
switch from anywhere on the network through a standard browser such as
Microsoft Internet Explorer or Netscape.
6
Download from Www.Somanuals.com. All Manuals Search And Download.
2.
Hardware Description
Front Panel
The Front Panel of the MIL-SME801P switch consists of eight
10/100BASE-TX RJ-45 ports and one 100BASE-FX fiber port, one
LED-Indicator for Power, one LED-Indicator for the Fiber port, and 3
LED-Indicators for each of the RJ-45 ports on the switch.
Figure 2-1. Front panel for MIL-SME801P
The MIL-SME801P comes with eight
RJ-45 Ports (Auto MDI/MDIX):
10/100Mbps N-way auto-sensing for 10BASE-T or 100BASE-TX UTP
connections.
The MIL-SME801P comes with one fixed SC
100BASE-FX Fiber Ports:
connector.
Console management can be done through the Console Port.
Console Port:
It requires a direct connection between the switch and an end station (PC) via
a RS-232 cable.
7
Download from Www.Somanuals.com. All Manuals Search And Download.
LED Indicators
The LED Indicators give real-time information of systematic operation status.
The following table provides descriptions of LED statuses and their meaning.
LED
Status
On
Color
Description
Power
Green
Power On
On
Off
Green
The port is operating at 100Mbps.
100M
The port is operating at 10Mbps mode or
no device is attached.
The port is successfully connecting with
the device.
On
Green
Green
The port is receiving or transmitting
data.
LNK /ACT
Blinks
Off
On
No device attached.
The port is operating in Full-duplex
mode.
Orange
Orange
Collision of Packets is occurring on the
port.
FDX /COL
Blinks
Off
The port is operating in Half-duplex
mode or no device is attached.
The port is successfully connecting with
the device.
On
Green
Fiber
Off
Orange
No device attached.
Table 2-1. The Description of LED Indicators
8
Download from Www.Somanuals.com. All Manuals Search And Download.
9
Download from Www.Somanuals.com. All Manuals Search And Download.
Rear Panel
The 3-pronged power plug and ventilation fan are located at the rear panel of
the MIL-SME801P switch as shown in Figure 2-2. The switch will work with
AC in the range 100-240V AC, 50-60Hz.
Figure 2-2. The Rear Panel of MIL-SME801P Switch
10
Download from Www.Somanuals.com. All Manuals Search And Download.
Desktop Installation
Set the Switch on a sufficiently large flat space with a power outlet nearby.
The surface where you put your Switch should be clean, smooth, level, and
sturdy.
Provide enough clearance around the switch to allow attachment of cables,
power cord and air circulation.
Attaching Rubber Feet
A. Make sure mounting surface on the bottom of the Switch is grease and
dust free.
B. Remove adhesive backing from the Rubber Feet.
C. Apply the Rubber Feet to each corner on the bottom of the Switch.
These footpads can prevent the Switch from shock/vibration.
Figure 2-3. Attaching Rubber Feet to each corner on the bottom of the Switch
11
Download from Www.Somanuals.com. All Manuals Search And Download.
Power On
Connect the power cord to the power socket on the rear panel of the switch.
Connect the other end of the cord to an appropriate power outlet. The internal
power supply in the switch works with AC in the voltage range 100-240VAC,
frequency 50~60Hz.
Check the power indicator on the front panel to see if power is properly
supplied.
12
Download from Www.Somanuals.com. All Manuals Search And Download.
3.
Network Application
Small Workgroup
The MIL-SME801P switch can be used as a standalone switch to direct
connect computers, servers and printer servers to form a small workgroup.
Figure 3-1. Small Workgroup Application
13
Download from Www.Somanuals.com. All Manuals Search And Download.
Extended Workgroup
The MIL-SME801P switch can be also used o interconnect two small
workgroups. By using the fiber ports to connect the switches, the distance
between the two switches via fiber cable can be up to 2Km or 30Km (SC
single-mode fiber connector).
Figure 3-2. Fiber port on MIL-SME801P switch extends the distance between
workgroups
14
Download from Www.Somanuals.com. All Manuals Search And Download.
4.
Console Management
Connecting a Terminal or PC to the Console Port
Console management involves the administration of the switch via a direct
connection to the RS-232 console port. This port is a male DB-9 connector
wired for connecting to a standard PC serial port. From the main menu of the
console program, the user has access to manage the functions of the switch.
Figure 4-1. Connecting the switch to a terminal via RS-232 cable
Use the supplied RS-232 cable to connect a terminal or PC to the console
port. The terminal or PC to be connected must support the terminal emulation
program.
15
Download from Www.Somanuals.com. All Manuals Search And Download.
After the connection between Switch and PC is finished, turn on the PC and
run a or to match the following
terminal emulation program Hyper Terminal
default characteristics of the console port:
Baud Rate: 9600 bps
Data Bits: 8
Parity: none
Stop Bit: 1
Flow Control: None
Figure 4-2. The settings of communication parameters
After you have entered the parameter settings, press the
Main Menu of console management appears.
Key and the
Enter
16
Download from Www.Somanuals.com. All Manuals Search And Download.
Console – Menu
1.The switch also provides a serial interface to manage and monitor the
switch. The user can follow the Console Port Information provided by the
web to use the Windows HyperTerminal program to link the switch.
2.Type the user name and password to login. The default user name is
;
root
the default password is
.
root
3.The timeout on the console port is 60 seconds. If no action is taken on the
console screen for one minute, the program reverts back to the logon
screen and a new login is necessary in order to continue.
4.The switch is shipped with a default IP address of 192.168.1.77. The
default subnet mask is 255.255.255.0.
17
Download from Www.Somanuals.com. All Manuals Search And Download.
4-1. Main Menu
There are five items for selection as follows:
Shows the status of the switch.
Status and Counters:
Switch Configuration:
Menus to configure the switch.
Configures the protocol features.
Protocol Related Configuration:
Restarts the system or resets switch to the
System Reset Configuration:
default configuration.
Exits the menu line program.
Logout:
<Control Key>
The control keys listed below are provided in all menus:
Move the cursor to next item.
Tab:
Backspace:
Move the cursor to previous item.
Selects item.
Enter:
Toggle selected item to next configuration.
Space:
18
Download from Www.Somanuals.com. All Manuals Search And Download.
4-2. Status and Counters
Press the
or
Tab Backspace
key to choose an action item, and then press
key to select the item.
Enter
19
Download from Www.Somanuals.com. All Manuals Search And Download.
4-2-1. Port Status
Displays the port type of 10T, 100TX or 100FX.
Type:
Link:
Displays the port's link. “Down” the port has no link, and “Up” the port
has a link with the remote device.
A port that is enabled will be displayed as “Enable”. A port that is
State:
disabled will be displayed as “Disable”.
Displays the state of Auto-negotiation as either "Auto" or
Negotiation:
"Fixed".
Displays the port speed and duplex mode.
Speed / Duplex:
Displays the flow control for the port as being either on or off.
FC:
BP:
Indicates if Back Pressure capability is enabled or disabled, only valid for
HDX mode of operation.
Indicates the Ingress bandwidth rate limiting speed in
Bandwidth In:
increments of 100 kbps, 0 indicates port is at full bandwidth in.
Indicates the Egress bandwidth rate limiting speed in
Bandwidth Out:
20
Download from Www.Somanuals.com. All Manuals Search And Download.
increments of 10 kbps, 0 indicates port is at full bandwidth out.
Indicates whether traffic received on this port is put into the high
Priority:
priority or low priority queue or do not care.
Indicates whether or not source MAC address based traffic filtering
Security:
is enabled on the port.
Actions->
Press the
or key to choose action menu, and then press the
Tab Backspace
key to select the item.
Enter
Exits the port status page, and returns to previous menu.
<Quit>:
21
Download from Www.Somanuals.com. All Manuals Search And Download.
4-2-2. Port Counters
The following information provides a view of the current status of the unit.
Select
to 0.
to view updated statistics or select
to reset all counters
Clear
Refresh
Actions->
Press the
or key to choose action menu, and then press the
Tab Backspace
key to select item.
Enter
<Refresh>:
Sets all counters to 0.
Updates statistics on all counters.
<Clear>:
Exits the port counters page, and returns to previous menu.
<Quit>:
22
Download from Www.Somanuals.com. All Manuals Search And Download.
4-2-3. System Information
Displays the name of device.
System Name:
Displays where the device is located.
System Location:
Displays the device description.
Displays the switch’s firmware version.
System Description:
Firmware Version:
Displays the system kernel software version.
Kernel Version:
Displays the switch’s hardware version.
Hardware Version:
The unique hardware address assigned by manufacturer.
MAC Address:
Displays the 100BASE-FX fiber port information.
Uplink port information:
Actions->
Exits the system information page, and returns to previous menu.
<Quit>:
23
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3. Switch Static Configuration
Press the
or
Tab Backspace
key to choose action menu, and then press the
key to select item.
Enter
24
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-1. Administration Configuration
25
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-1-1. Device Information
Name: 10 characters can be used to give the switch a unique name in order to
distinguish it on the network. After configuration this name will show at the
top of each menu screen.
Description: 32 characters can be used to describe the switch.
Location: 32 characters can be used to give a location of the switch.
Content: 32 characters can be used to describe devices attached.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured value.
<Save>:
<Quit>:
Exits the device information page and returns to previous menu.
26
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-1-2. IP Configuration
This menu enables the user to change the default settings of the IP address,
subnet mask and gateway. Rebooting the switch is necessary to have the
configuration change take affect.
User can disable or enable the DHCP function.
DHCP:
User can assign a new IP address for the switch.
IP Address:
Subnet Mask:
User can assign a new subnet mask IP address for the switch.
User can assign a new gateway IP address for the switch.
Gateway:
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits the IP configuration page and returns to previous menu.
Rebooting the switch is necessary to have the configuration change
Note:
take effect.
27
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-1-3. Username Configuration
Use this screen to change the User Name. The default user name is
.
root
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
menu.
Exits the user name configuration page and returns to previous
28
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-1-4. Password Configuration
Use this screen to change the console and web management password.
The default password is
.
root
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits the password configuration page and returns to previous menu.
29
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-2. Port Configuration
This page can change every port status.
Press the
key to select each item and press the
key to change
SPACE
TAB
the configuration of each item.
Displays current port status. The port can be set to disable or enable
State:
mode. If the port setting is set to disable, the port will not receive or transmit
any packets.
Displays current auto negotiation setting status of each port.
Negotiation:
Each port can be set for link speed and duplex mode.
Speed/Duplex:
User can set flow control function to enable or disable. FC (Flow
FC / BP:
control for full duplex link mode), BP (Backpressure for half duplex mode).
User can determine packet transmission rate control for
Bandwidth In/ Out:
each port. Per level is 100Kbps. Individual control method of TX and RX is
supported.
User cab set each port to high or low priority.
User can enable or disable port security function.
Priority:
Security:
30
Download from Www.Somanuals.com. All Manuals Search And Download.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits the port configuration page and returns to previous menu.
31
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-3. Trunk Configuration
This page can configure trunk groups.
Press the
key to select each item and press the
key to change
SPACE
TAB
the configuration of each item.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits the trunk configuration page and returns to previous menu.
32
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-4. Port Mirroring Configuration
Port mirroring is a method for monitoring traffic in switched networks. Traffic
through ports can be monitored by one specific port. The traffic being
received or transmitted by the monitored ports will be duplicated into the
monitoring port. Press the
key to change the configuration of an item.
Space
User can enable or disable Port Mirroring mode. The
Mirroring state:
default is disabled, enabled options are TX packet only, RX packet only or
Both.
The port to which all traffic to be mirrored will be sent.
Analysis port:
Press the
key to mark each of the ports that should be mirrored.
SPACE
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>: Exits the port mirroring configuration page and returns to previous menu.
33
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-5. VLAN Configuration
This page can set VLAN mode to port-based VLAN, 802.1Q VLAN or disable
VLAN function.
All ports are automatically placed in VLAN 1, the default VLAN. To create
new VLANs, use the Create a VLAN Group menu and add a VLAN. Make
sure when you enter a VLAN name you do not leave spaces. For example
VLAN2 is correct; VLAN 2 will give an error. The VLAN name can be any 15
alphanumeric characters. Special characters are not allowed.
When changes are made to the VLAN mode, it is recommended that
NOTE:
the device be rebooted to ensure system integrity.
34
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-5-1. VLAN Configure
Choose a VLAN
In the VLAN Configure menu select the type of VLAN you want to configure:
VLAN Disabled (default), Port Based VLAN, or IRRR802.1Q Tag based
VLAN. Save the configuration. There are 3 different options for VLANs to
choose from using the space bar: Disabled, Port Based and 802.1Q.
To configure a new VLAN, select
and then use the tab key to select
Edit
items you want to configure. The space bar allows you to select the different
options.
After adding a VLAN group, the configuration option
will
Edit a VLAN Group
allow you to change the membership by adding or deleting ports.
Port Based VLANs
These VLANs only apply to this switch. The VLANs can be overlapping,
meaning that any port can belong to more than one VLAN. One
configuration that is common for port based VLANs is to have all the ports on
the switch on separate VLANs except for the port that has the server
connected. The port connected to the server belongs to all the VLANs.
This enables security between ports but allows all ports access to the server.
Up to 256 different port based VLANs may be configured.
35
Download from Www.Somanuals.com. All Manuals Search And Download.
IEEE802.1Q VLANs
If IEEE802.1Q VLANs is selected, all the ports will belong to the default VLAN
If more than one VLAN is necessary, the additional VLANs may be created.
Security VLANs
Security VLAN’s allow for limiting telnet, SNMP and web access to the switch
to a specific VLAN. The VID of the Security VLAN may be changed from
255 to another value after creating the VLAN. The new VID must not
already exist on the box.
36
Download from Www.Somanuals.com. All Manuals Search And Download.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
Displays previous page.
<Previous Page>:
Displays next page.
<Next page>:
Exits this page and returns to previous menu.
<Quit>:
37
Download from Www.Somanuals.com. All Manuals Search And Download.
Set the port VLAN ID that will be assigned to untagged
PVID (Port VID):
traffic on a given port. This feature is useful for accommodating devices that
you want to participate in the VLAN, but don’t support tagging. Only one
untagged VLAN is allowed per port. Other VLANs need to be tagged.
If this is set, the port will only forward packets with VID
Ingress Filter 1:
(VLAN ID) matching this port’s configured VID. Press the
key to
Space
choose forward or drop the frame with the VID not matching this port’s
configured VID.
Drop untagged frame. Press the
key to choose drop
Space
Ingress Filter 2:
or forward the untagged frame.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
38
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-5-2. Create VLAN Group
Create Port-Based VLAN
Select
to create a port-based VLAN and add member or nonmember
<Edit>
ports to it.
1.
Type a name for the new VLAN using 15 alphanumeric
VLAN Name:
characters and no spaces.
2.
3.
Type the VLAN group ID. The group ID range is 1to 4094.
Group ID:
Member:
Press the
key to choose VLAN member type. There are
Space
two selections:
Member: The port is member port.
NO: The port is NOT member port.
4.Press
5.Select
to go back to the action menu line.
“ESC”
to save all configured values.
<Save>
If the trunk groups exist, it will be displayed (ex: Trunk1, Trunk2…)
NOTE:
after port 9. The user can select if it is the member of the VLAN or not.
39
Download from Www.Somanuals.com. All Manuals Search And Download.
Create 802.1Q VLAN
Select
to create an 802.1Q VLAN and add tagged or untagged
<Edit>
member ports to it.
1.
2.
Type a name for the new VLAN using 15 alphanumeric
VLAN Name:
characters and no spaces.
Type a VID (between 1~4096). The default is 1. There are 256
VLAN ID:
VLAN groups provided to configure.
3.
4.
Press the
key to choose the protocol type.
Protocol VLAN:
Member:
Space
Press the
key to choose the VLAN member. There are
Space
three selections:
UnTagged: This port is the member port of this VLAN group and
outgoing frames are NO VLAN-Tagged frames.
Tagged: This port is the member port of this VLAN group and outgoing
frames are VLAN-Tagged frames.
NO: The port is NOT member of this VLAN group.
5.Press
to go back to the action menu line.
“ESC”
40
Download from Www.Somanuals.com. All Manuals Search And Download.
6.Select
to save all configured values.
<Save>
If the trunk groups exist, it will be displayed (ex: Trunk1, Trunk2…)
NOTE:
after port 9. The user can configure select if it is the member of the VLAN or
not.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
41
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-5-3. Edit / Delete VLAN Group
Use this menu to edit or delete a VLAN group.
When editing the chosen VLAN, the user can change the protocol VLAN or a
member port. A new protocol can be configured and the ports can be
changed to tagged or untagged or deleted as member ports from this VLAN.
In edit mode the VLAN Name and VLAN ID are read-only and cannot be
modified. VLAN1, the default VLAN, can never be deleted.
1.Press
or
item.
<Edit> <Delete>
2.Choose the VLAN group to edit or delete by using the
key, and then
TAB
press
.
Enter
3.User can change the protocol VLAN or a member port.
4.After editing or deleting a VLAN, press the
configured values.
key to save all
<Save>
42
Download from Www.Somanuals.com. All Manuals Search And Download.
NOTE:
The VLAN Name and VLAN ID are read-only and cannot be modified.
In 802.1Q VLAN mode, the default VLAN cannot be deleted.
In Port Based VLAN mode, there is no default VLAN.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Deletes selected VLAN Groups.
<Delete>:
Displays previous page.
<Previous Page>:
Displays next page.
<Next page>:
Exits this page and returns to previous menu.
<Quit>:
43
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-5-4. Groups Sorted Mode
Use this menu to select the VLAN groups sorted mode. There are two
selections:
Sorted by name
Name:
Sorted by VID
VLAN ID:
The results can be viewed on the Edit/Delete a VLAN Group screen.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
44
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-6. Priority Configuration
There are eight (0 to 7) priority levels that can be mapped as high
Level (0-7):
or low priority queues.
User can select the ratio of high priority packets and low priority
QoS Mode:
packets by pressing the
key.
Space
1:1, 2:1, 3:1, 4:1, 5:1, 6:1, 7:1, FIFO, HÎL
High Low Queue service ratio:
The sequence of packets sent depends on arrival
First In First Out (FIFO):
order.
Î
The high priority packets are sent before the low priority
High to Low (H L):
packets.
(1:1, 2:1, 3:1, 4:1, 5:1, 6:1, 7:1): Select the preference given to packets
Ratio
in the switch's high-priority queue. These options represent the number of
high priority packets sent before one low priority packet is sent.
45
Download from Www.Somanuals.com. All Manuals Search And Download.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
46
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-7. MAC Address Configuration
47
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-7-1. Static MAC Address
When a static MAC address is added, it remains in the switch's address table,
regardless of whether the device is physically connected to the switch. This
saves the switch from having to re-learn a device's MAC address when the
device is disconnected or powered-off and then becomes active again.
The menu shows the current configured static MAC addresses. The user
can add, modify or delete a static MAC address. Once added, the MAC
address will be listed on this page.
Add static MAC address
1. Press the
key. Then press the
key on this menu to add a
<Edit>
<Add>
static MAC address.
2. Enter the MAC address to and from which the port should permanently
forward traffic, regardless of the devices network activity.
3. In the Port num field, enter the port number for the device.
48
Download from Www.Somanuals.com. All Manuals Search And Download.
4. If tag-based (802.1Q) VLANs are configured, the static addresses are
associated with individual VLANs. Enter the VID to associate with the MAC
address.
5. Press
to go back action menu line, and then select
to save
<Save>
ESC
all configured values.
Edit static MAC address
1. Press
key to modify a static MAC address.
<Edit>
2. Choose the MAC address that you want to modify and then press enter.
3. Press the key to modify all the items.
<Edit>
to go back action menu line, and then select
4. Press
to save
<Save>
ESC
all configured values.
Delete static MAC address
1. Press the
key to delete a static MAC address.
<Delete>
2. Choose the MAC address that you want to delete and then press enter.
3. After delete static MAC address, you must press
deletion.
to complete the
<Save>
Actions->
Adds a static MAC address.
<Add>:
<Edit>:
Configures all items. When finished, pressing
returns to the
ESC
action menu line.
Deletes selected static MAC addresses.
<Delete>:
Exits this page and returns to previous menu.
<Quit>:
49
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-7-2. Filtering MAC Address
Add Filtering MAC address
1. Press the
key. Then press the
key on this menu to add
<Edit>
<Add>
a filtering MAC address.
2. Press
to go back action menu line, and then select
to save
<Save>
ESC
50
Download from Www.Somanuals.com. All Manuals Search And Download.
all configured values.
Edit Filtering MAC address
1. Press the
key to modify a Filtering MAC address.
<Edit>
2. Choose the MAC address that you want to modify and then press enter.
3. Press the key to modify all the items.
<Edit>
to go back action menu line, and then select
4. Press
to save
<Save>
ESC
all configured values.
Delete Filtering MAC address
1. Press the
key to delete a Filtering MAC address.
<Delete>
2. Choose the MAC address that you want to delete and then press enter.
3. After delete Filtering MAC address, you must press
the deletion.
to complete
<Save>
Actions->
Adds a static filtering address.
<Add>:
<Edit>:
Configures all items. When finished, pressing
returns to the
ESC
action menu line.
51
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-8. Miscellaneous Configuration
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
4-3-8-1. MAC Address Ageing Time
To configure a different MAC Address Ageing Time, type the number of
seconds that an inactive MAC address remains in the switch’s address table
before it is deleted. Once the address is removed from the table, a device will
have to send out broadcast packets to be relearned by the switch and have its
address put in the table. The valid range is 300 to765 seconds. Default is
300 seconds.
52
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-8-2. Broadcast Storm Filtering
Broadcast storm filtering is used to limit the amount of broadcast traffic on the
network. An excessive amount of broadcast traffic can inhibit data packets
from timely delivery.
The valid threshold values are 5%, 10%, 15%, 20%, 25% and NO. If the
broadcast traffic is greater than the configured value, broadcast packets will
be dropped. The default is NO. The default is set so that no broadcast
packets are ever dropped no matter how many broadcast packets there are
on the network.
53
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-8-3. Max Bridge Transmit Delay Bound
Limits the packets queuing
Max bridge transmit delay bound (0,1-4 sec):
time in the switch. If enabled, the packets exceeding the queuing time will be
dropped. Press the
key to set the time. Valid values are 1sec, 2sec,
Space
4sec and Off. The default is 1 second when this feature is enabled. This
setting does not depend on what values are set in the “Priority Configuration”
menu.
If this parameter is enabled, the “Max bridge transmit
Enable Delay Bound:
delay bound” must also be configured. This item allows you to limit queuing
time of the low priority packets in the switch. When the low priority packets
exceed the “Max Delay Time” they will be transmitted. Press the
key to
Space
enable or disable this function. By default the Enable Delay Bound is set to
OFF.
Set the time that low priority packets are queued in the
Max Delay Time:
switch. The valid range is 0 to 255 ms. Since the default is OFF, the Max
Delay Time is 0. This item must be set if “Enable Delay Bound” is
configured.
“Max bridge transmit delay bound control” must be enabled before
NOTE:
Max Delay Bound is enabled.
54
Download from Www.Somanuals.com. All Manuals Search And Download.
4-3-8-4. Collision Retry Forever
Collisions Retry Forever: User can choose to disable collision retry forever and,
if a collision occurs in half-duplex mode, the switch will attempt to send the packet
48 times and then drop the frame. When enabled, a collision that occurs in
half-duplex mode will result in repeated attempts by the switch forever.
4-3-8-5. Hash Algorithm
This Hash Algorithm is for hardware maintenance on the MAC table calculation.
This field should only be changed if an excessive amount of MAC address
table collisions are seen. It changes the hashing algorithm for storing new
MAC addresses in local memory.
4-3-8-6. IFG Compensation
Disable or Enable
IFG compensation:
Provides the ability to compensate for shorter inter-frame gaps during rate
limiting. It is recommended that this selection remain disabled.
55
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4. Protocol Related Configuration
4-4-1. STP
56
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-1-1. STP Setup
This page enables or disables the Spanning Tree function. Press the
key to select Enabled or Disabled.
Space
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
57
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-1-2. System Configuration
All devices in the spanning tree instance will utilize the same values as the
root bridge to ensure consistency throughout the network. If this device
becomes the root bridge, then the other switches in the STP instance will
utilize its values.
Spanning tree information for the Root Bridge on the left is for display only.
Configure new values for the STP parameter on the right.
You must enable STP function before selecting the configuration menu.
The value used to identify the root bridge. The bridge with the lowest
Priority:
value has the highest priority and is selected as the root. Enter a number 1
through 65535.
58
Download from Www.Somanuals.com. All Manuals Search And Download.
The number of seconds a bridge waits without receiving
Max Age:
Spanning-Tree Protocol configuration messages before attempting a
reconfiguration. Enter a number 6 through 40.
The number of seconds between the transmission of
Hello Time:
Spanning-Tree Protocol configuration messages. Enter a number 1 through
10.
The number of seconds a port waits before changing
Forward Delay Time:
from its Spanning-Tree Protocol learning and listening states to the
forwarding state. Enter a number 4 through 30.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
59
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-1-3. STP Per Port Setting
Spanning tree status for each port is either forwarding or blocking.
State:
Specifies the path cost of the port that the switch uses to
PathCost:
determine which ports are the forwarding ports. If you change the value, you
.
need to restart the switch for valid value change to take effect
Priority: Specifies the path cost of the port that the switch uses to determine
which ports are the forwarding ports. The lowest number is picked as the
forwarding port. The range is 1-65535 and the default value is based on
IEEE802.1D standard. The values should be in the range: 10Mb/s =
50-600
100Mb/s = 10-60.
If you change the value, you must reboot the switch to save the value change.
60
Download from Www.Somanuals.com. All Manuals Search And Download.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
61
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-2. SNMP
Any Network Management station running the Simple Network Management
Protocol (SNMP) can manage the switch provided that the Management
Information Base (MIB) is installed. SNMP is a protocol that governs the
transfer of information between management and agent. The switch supports
SNMP V1.
Use this menu to define management stations as trap managers and to enter
SNMP community strings. Users can also define a name, location, and
contact person for the switch.
62
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-2-1. SNMP System Options
Press
press
to enter all items,
to return to the action menu, and then
<Edit>
ESC
to save the configured values.
<Save>
Enter a name to identify the switch.
System Name:
Enter the name of the contact person or organization.
System Contact:
System Location:
Enter the location of the switch.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
63
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-2-2. Community Strings
Community strings serve as passwords and can be entered as one of the
following
:
: Enables requests accompanied by this string to display
Read only
MIB-object information.
: Enables requests accompanied by this string to display
Read Write
MIB-object information and to set MIB objects.
Enter the name of current community strings. The default
Community Name:
is “public”.
Enables the permissions for Read Only or Read/Write.
Write Access:
64
Download from Www.Somanuals.com. All Manuals Search And Download.
Add Community Strings
1.Press the key. Then press the
key on this menu to add a
<Edit>
<Add>
SNMP Trap Manager.
2.Enter the Community Name and select the Write Access setting for the
Community String.
3.Press
to go back action menu line, and then select
to save all
<Save>
ESC
configured values.
65
Download from Www.Somanuals.com. All Manuals Search And Download.
Edit Community Strings
1.Press key to modify a Community String.
<Edit>
2.Choose the Community Name that you want to modify and then press
enter.
3.Enter the correct Community Name and Write Access setting.
4.Press
to go back action menu line, and then select
to save all
<Save>
ESC
configured values.
Delete Community Strings
1.Press the
key to delete a Community String.
<Delete>
2.Choose the Community Name that you want to delete and then press enter.
3.After deleting the Community String, you must press
the deletion.
to complete
<Save>
66
Download from Www.Somanuals.com. All Manuals Search And Download.
Actions->
Creates a trap manager.
<Add>:
<Edit>:
Configures all items. When finished, pressing
returns to the
ESC
action menu line.
Deletes a community string. After deleting, press
to
<Save>
<Delete>:
complete the deletion.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
67
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-2-3. Trap Managers
A trap manager is a management station that receives traps. The switch
generates system alerts. If no trap manager is defined, no traps are issued.
Create a trap manager by entering the IP address of the station and a
community string.
68
Download from Www.Somanuals.com. All Manuals Search And Download.
Add SNMP Trap Managers
1. Press the key. Then press the
key on this menu to add a
<Edit>
<Add>
SNMP Trap Manager.
2. Enter the IP address and Community Name for the SNMP Trap Manager.
3. Press to go back action menu line, and then select to save all
ESC
configured values.
<Save>
69
Download from Www.Somanuals.com. All Manuals Search And Download.
Edit SNMP Trap Managers
1. Press key to modify a SNMP Trap Manager.
<Edit>
2. Choose the IP address and Community Name that you want to modify and
then press enter.
3. Enter the correct IP Address and Community Name.
4. Press
to go back action menu line, and then select
to save all
<Save>
ESC
configured values.
70
Download from Www.Somanuals.com. All Manuals Search And Download.
Delete SNMP Trap Managers
1. Press the key to delete a SNMP Trap Manager.
<Delete>
2. Choose the IP Address and Community Name that you want to delete and
then press enter.
3. After deleting the SNMP Trap Manager, you must press
complete the deletion.
to
<Save>
Actions->
Creates a trap manager.
<Add>:
<Edit>:
Configures all items. When finished, pressing
returns to the
ESC
action menu line.
Deletes a trap manager. After deleting, press
to
<Save>
<Delete>:
complete the deletion.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
71
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-3. LACP
The Link Aggregation Control Protocol (LACP) provides a standardized
means for exchanging information between Partner Systems on a link to
allow their Link Aggregation Control instances to reach agreement on the
identity of the Link Aggregation Group to which the link belongs, move the link
to that Link Aggregation Group, and enable its transmission and reception
functions in an orderly manner. Link aggregation lets you group up to eight
consecutive ports into a single dedicated connection. This feature can expand
bandwidth to a device on the network. LACP operates in full-duplex mode
only. For more details on the protocol, refer to IEEE 802.3ad standard.
72
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-3-1. Working Ports Setting
Displays the trunk group ID.
Group:
LACP:
Press the
key to enable or disable LACP (Link Aggregation
Space
Control Protocol) support. If enabled, the group is an LACP static trunking
group. If disabled, the group is a local static trunking group.
The maximum number of ports that can be
LACP Work Port Num:
aggregated at the same time. If the group is an LACP static trunking group,
the exceed ports is standby and able to aggregate if the work ports fail. If the
group is a local static trunking group, the number must be the same as group
ports.
Before setting LACP support, you must first set the trunk group using
NOTE:
the Port / Trunk Configuration screen.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
73
Download from Www.Somanuals.com. All Manuals Search And Download.
Exits this page and returns to previous menu.
<Quit>:
4-4-3-2. LACP State Activity
The port automatically sends LACP protocol packets.
Active:
The port does not automatically send LACP protocol packets, and
Passive:
responds only if it receives LACP protocol packets from the opposite device.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
74
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-3-3. Group Status
When setting a trunking group, the relationship status information may be
seen on the LACP Group Status screen.
Actions->
<Quit>:
Exits this page and returns to previous menu.
75
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-4. IGMP/GVRP Configuration
Use the GVRP Configuration screen to enable or disable GVRP (GARP
VLAN Registration Protocol) support.
Press the
key to choose Enabled or Disabled.
Space
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
76
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-5. 802.1x Configuration
77
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-5-1. 802.1x Setup
Use this screen to enable or disable 802.1x. Press the
Enabled or Disabled mode.
key to choose
Space
Actions->
<Edit>: Configures all items. When finished, pressing
returns to the
ESC
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
78
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-5-2. 802.1x System Configuration
Use the 802.1x System Configuration screen to configure the IEEE 802.1x
parameters.
Enter the Radius Server IP address.
Radius Server IP:
Enter an encryption key for use during authentication sessions
Shared Key:
with the specified radius server. This key must match the encryption key used
on the Radius Server.
Enter the identifier for the radius client.
NAS, Identifier:
Enter the UDP destination port for authentication requests to the
Server Port:
specified Radius Server.
Enter the UDP destination port for accounting requests to
Accounting Port:
the specified Radius Server.
Actions->
Configures all items. When finished, pressing
returns to the
ESC
<Edit>:
action menu line.
Saves all configured values.
<Save>:
Exits this page and returns to previous menu.
<Quit>:
79
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-5-3. 802.1x Per Port Configuration
Press the
key to select Disable, Accept, Reject or Authorize for the
Space
State of each port.
Actions->
<Edit>: Configures all items. When finished, pressing
returns to the
ESC
action menu line.
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
80
Download from Www.Somanuals.com. All Manuals Search And Download.
4-4-5-4. 802.1x Miscellaneous Configuration
Enter the period during which the port doesn’t try to acquire a
Quiet period:
supplicant.
Enter the period the port waits to retransmit next EAPOL PDU
TX period:
during an authentication session.
Enter the period of time the switch waits for a supplicant
Supplicant timeout:
response to an EAP request.
Enter the period of time the switch waits for a server
Server timeout:
response to an authentication request.
Enter the number of authentication that must
Reauthorize Maximum:
time-out before authentication fails and the authentication session ends.
Enter the period of time after which clients connected
Reauthorize period:
must be re-authenticated.
Actions->
<Edit>: Configures all items. When finished, pressing
action menu line.
returns to the
ESC
Saves all configured values.
<Save>:
<Quit>:
Exits this page and returns to previous menu.
81
Download from Www.Somanuals.com. All Manuals Search And Download.
4-5. System Reset Configuration
82
Download from Www.Somanuals.com. All Manuals Search And Download.
4-5-1. Factory Default
Use this menu to restore all factory default settings. Pressing will reset the
y
switch configuration settings to their factory defaults. Rebooting the switch is
necessary for the new configurations to take effect.
Resets the switch to the factory default configuration. The software version
y:
that the switch will be reset to can be found on the “System Information” menu
under the main menu “Status and Counters”.
Returns to the previous menu.
N:
The unit must be allowed to complete restart process to restore
Warning:
the defaults without an interruption. Manually powering off the system
before the process has been completed may result in corrupted memory and
may cause the unit to not start or come up in an unknown state.
4-5-2. System Reboot
Reboots the switch to enable items that have been configured.
83
Download from Www.Somanuals.com. All Manuals Search And Download.
4-5-3. TFTP Configuration
Use this screen to update firmware, restore EEPROM values or upload
current EEPROM value.
84
Download from Www.Somanuals.com. All Manuals Search And Download.
4-5-3-1. Update Firmware
Use this screen to update firmware from the TFTP server.
Start the TFTP server, and copy the firmware update version image file to
TFTP server.
Enter the IP address of the TFTP server.
TFTP Server IP:
Enter the image file name.
Firmware File Name:
Actions->
<Edit>: Configures all items. When finished, pressing
returns to the
ESC
action menu line.
Starts download of image file from the TFTP server. When the
<Save>:
save is successful, the image is downloaded. Rebooting the switch is
necessary to have the new firmware version take effect.
Exits this page and returns to previous menu.
<Quit>:
85
Download from Www.Somanuals.com. All Manuals Search And Download.
4-5-3-2. TFTP Restore Configuration
Use this screen to restore an EEPROM value or save a previous version of
the image file from the TFTP server.
Start the TFTP server, and copy the firmware update version image file to
TFTP server.
Enter the IP address of the TFTP server.
TFTP Server IP:
Enter the image file name.
Restore File Name:
Actions->
<Edit>: Configures all items. When finished, pressing
returns to the
ESC
action menu line.
Starts the download of the configuration file from the selected
<Save>:
source file on the TFTP server. Reboot is necessary for the new
configuration to take effect.
Exits this page and returns to previous menu.
<Quit>:
86
Download from Www.Somanuals.com. All Manuals Search And Download.
4-5-3-3. TFTP Backup Configuration
Use this screen to save the current EEPROM value to an image file. Then go
to the update configuration page to restore the EEPROM value.
Start the TFTP server, and copy the firmware update version image file to
TFTP server.
Enter the IP address of the TFTP server.
TFTP Server IP:
Enter the image file name.
Restore File Name:
Actions->
<Edit>: Configures all items. When finished, pressing
returns to the
ESC
action menu line.
Starts the upload of the current configuration to the selected
destination file on the TFTP server.
<Save>:
Exits this page and returns to previous menu.
<Quit>:
87
Download from Www.Somanuals.com. All Manuals Search And Download.
4-6. Xmodem Upgrade
1. While booting the switch, press the key to start the Xmodem routine on
X
the device.
2. Pressing X will cause the switch Xmodem application to begin and cause
the baud rate to change to 57600 bps. You will need to disconnect the
cable connected to the serial port, and change the baud rate of your
hyper-terminal application on your laptop to 57600 bps, then connect the
cable and reconnect to the switch.
88
Download from Www.Somanuals.com. All Manuals Search And Download.
3. Select “send file" under the "transfer" menu from menu bar.
4. Press the "browse" button to select the path.
5. Select "1K Xmodem" of protocol and press the "Send" button.
6. After successfully upgrading to the new firmware, change the baud rate
back to the default 9600bps.
89
Download from Www.Somanuals.com. All Manuals Search And Download.
5.
Web-Based Management
This section introduces the configuration and functions of the web-based
management of MIL-SME801P switch series. The managed switch series
provides an embedded HTML website residing in flash memory. It offers
advanced management features and allow users to manage the device from
anywhere on the network through a standard browser such as Internet
Explorer or Netscape.
Web-Based Management supports Internet Explorer 5.0. It is based on Java
Applets with an aim to reduce network bandwidth consumption, enhance
access speed and present an easy viewing screen.
By default, Internet Explorer 5.0 or later versions do not allow Java
Note:
Applets to open sockets. The user must explicitly modify the browser setting
to enable Java Applets to use network ports.
90
Download from Www.Somanuals.com. All Manuals Search And Download.
Preparing for Web Management
You must either reconfigure the IP address information for the switch using
the serial console port following the instructions in the “Console Management”
section, or setup your network to support the default address of the switch.
The default values are as follow:
IP Address:
192.168.1.77
Subnet Mask:
255.255.255.0
Default Gateway:
192.168.1.6
User Name:
root
Password:
root
If you change the IP address of the box from the one above, please
replace references of 192.168.1.77 in the remainder of the manual with
the new IP address of the device.
91
Download from Www.Somanuals.com. All Manuals Search And Download.
5-1. System Login
1. Launch Internet Explorer or Netscape.
2. Type http:// and the IP address of the switch in the Location or Address field.
The default IP Address is 192.168.1.77.
3. Press
.
Enter
Figure 5-1: The Password Window
4. In the login screen, type the user name and password. The default is
for both.
root
5. Press
or Click
and the Home Page screen for web-based
Enter
management will appear.
OK
92
Download from Www.Somanuals.com. All Manuals Search And Download.
5-2. Port Status
Displays port status off or on depending on user setting. “Unlink”
State:
means the port is offline or “off ”.
Down is “No Link”, UP is “Link”.
Link Status:
Displays the auto negotiation mode. There are three
Auto Negotiation:
selections: Auto, Force and Nway-force.
Displays link speeds of 100Mbps or 10Mbps.
Speed status:
Duplex status:
Flow Control:
Displays full-duplex or half-duplex mode.
Displays the flow control status as enabled or disabled in
full-duplex mode.
Displays the backpressure status as enabled or disabled in
Backpressure:
half-duplex mode.
Displays the rate control setting.
Rate Control:
Ingr: Displays the port effective ingress rate of user settings in
increments of 100 Kbps.
Egr: Display the port effective egress rate of user settings in
increments of 100 Kbps.
Displays the port static priority status as High or Low or Disabled.
Priority:
Displays the port security as enabled or disabled.
Port Security:
Displays the setting configured by the user.
Config:
Actual:
Displays the negotiation result.
93
Download from Www.Somanuals.com. All Manuals Search And Download.
5-3. Port Statistics
The following information provides a view of the current status of the unit.
Pressing the
button will return all counts to zero.
Reset
Left click mouse on the desired port on the graphical image of the switch to
get specific information for that port.
94
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4. Administrator
The management functions include IP address, switch settings, console port
information, port controls, trunking, filter database, VLAN configuration,
spanning tree, port mirroring, SNMP, security manager, TFTP update
firmware, configuration backup, system reset, and reboot.
95
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-1. IP Address
The IP Settings can be changed by entering new values and clicking the
button. The switch must be reset for the new IP address to take effect.
Apply
Default IP: 192.168.1.77
Subnet Mask: 255.255.255.0
Gateway: 192.168.1.6
96
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-2. Switch Setting
5-4-2-1. Basic
Displays the name of the device.
System Name:
Displays the location of the device.
System Location:
Displays the name of the device type.
Displays the switch’s downloaded firmware version.
System Description:
Firmware Version:
Displays write to default EEPROM value version.
Kernel version:
Displays the switch’s hardware version.
Hardware Version:
Displays unique hardware address assigned by
MAC Address:
manufacturer.
97
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-2-2. Advanced Setting
Enter the number of seconds that an
MAC Address Entry Age-out Time:
inactive MAC address remains in the switch's address table. The valid range
is 300 to 765 seconds. Default is 300 seconds.
Limits the packets queuing time
Max bridge transmit delay bound control:
in the switch. If enabled, the packets that exceed the time limit in the queue
will be dropped. This valid values are 1sec, 2 sec, 4 sec and off. Default is 1
second.
Limits the low priority packets queuing
Enable Low Queue Delay Bound:
time in switch. If a low priority packet in the switch exceeds the Max Delay
Time, it will be sent. The valid range is 1 to 255 ms.
Make sure the “Max bridge transit delay bound control” is enabled
NOTE:
before enabling Delay Bound. The Enable Delay Bound only works under
“Max bridge transit delay bound control is enabled” situation.
The threshold is the percentage of the port's total
Broadcast Storm Filter:
bandwidth used by broadcast traffic. To configure broadcast storm control,
first enable it and then set the upper threshold for each individual port. When
broadcast traffic for a port rises above the threshold set, broadcast storm
control becomes active. The valid threshold values are 5%, 10%, 15%, 20%,
25% and OFF.
98
Download from Www.Somanuals.com. All Manuals Search And Download.
Priority Queue Service settings:
First Come First Service: The sequence of packets sent is dependent on the
order of arrival. The first packets in the queue are transmitted before any
other packets.
All High before Low: The high priority packets are sent before the low priority
packets.
This option enables the user to choose a ratio of
Weighted Round Robin:
the number of high priority packets sent before one low priority packet is sent.
For example, 2:1 (2 High : 1 Low) will have the switch send 2 high priority
packets before sending 1 low priority packet.
99
Download from Www.Somanuals.com. All Manuals Search And Download.
0 to 7 priority level can map to a high or
Qos Policy: High Priority Levels:
low queue. When the VLAN Tag number of a frame is mapping as a high
priority level, this frame always has high priority. In this example, the QoS
policy applies to the switch, not for a single port.
100
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-2-3. Miscellaneous Setting
Collisions Retry Forever:
Disabled – In half duplex, if a collision occurs, the switch will retry 48 times
and then drop frame.
Enabled – In half duplex, if a collision occurs, the switch will retry forever.
Select enable or disable for 802.1x protocol.
802.1x Protocol:
Hash Algorithm:
algorithm.
CRC Hash or Direct Map for MAC address learning
Select enable or disable for Internal Packet Gap time
IFG Compensation:
compensation configuration.
Recognizes different queries from clients or servers to
IGMP Query Mode:
decide which Query will be the first priority. The modes are:
: Chooses the switch that has the smallest IP address to be
Auto Mode
set for the IGMP Query mode.
Enables the switch to be the IGMP Querier.
Enable Mode:
Disables all other switches from being the IGMP Querier.
Disable Mode:
101
Download from Www.Somanuals.com. All Manuals Search And Download.
IGMP Theory of Operation
The following three topologies detail how IGMP Query works and to be
configured within a network:
1. Auto mode needs to be enabled when the router’s IP address is smaller
than other switches in the subnet.
102
Download from Www.Somanuals.com. All Manuals Search And Download.
2. IGMP needs to be enabled when the router’s IP address is not smaller than
other switches in the subnet. This Router supports IGMP protocol, but IGMP
has to be enabled, and the Router has to be the Querier.
103
Download from Www.Somanuals.com. All Manuals Search And Download.
3. The following topology must be set when the IP address of the switch is not
the smallest in the subnet. The network will cause a multi-cast storm from the
IGMP client report if it is in Auto mode. All switches must be in disable mode
when the VOD server is configured for IGMP Querier.
Note: It is suggested that the VOD server switch have the smallest IP
address.
104
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-3. Console Port Information
Console is a standard UART interface to communicate with a serial port.
The Windows HyperTerminal program can be used to link the switch with the
console port. In order to change any of these parameters, you must be
connected to the console port.
Baud rate (bits/sec): 9600
Data Bits: 8
Parity Check: none
Stop Bits: 1
Flow Control: none
105
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-4. Port Controls
The menu allows changing of port configurations.
User can disable or enable each port.
State:
User can set auto negotiation mode for each port to Auto,
Negotiation:
Nway (specify the speed/duplex on this port and enable auto-negotiation) or
Force.
User can set 100Mbps or 10Mbps speed on Ports 1 to 8. Port 9 is
Speed:
fixed at 100 Mbps.
User can set full-duplex or half-duplex mode for each port.
Duplex:
User can set flow control function to enabled (ON) or disabled
Flows control:
(OFF) in Full Duplex mode.
User can set backpressure to enabled (ON) or disabled
Back Pressure:
(OFF) in Half Duplex mode.
Ports 1 to 9 support by-port ingress and egress rate control. For
Band Width:
example, if port 1 is set to 10Mbps, you can set it’s effective egress rate to
1Mbps and ingress rate to 500Kbps. The switch will perform flow control or
backpressure to confine the ingress rate to meet the specified rate.
Enter the port effective ingress rate. The valid range is 0 to 1000. The unit
In:
is 100K.
0: disable rate control.
1 to 1000: valid rate value
Enter the port effective egress rate. The valid range is 0 to 1000. The
Out:
unit is 100K.
0: disable rate control.
106
Download from Www.Somanuals.com. All Manuals Search And Download.
1 to 1000: valid rate value.
This static priority is based on each port setting. If the port priority
Priority:
is set high, incoming frames from this port will always be high priority frames.
A port in security mode will be “locked” unless address learning is
Security:
enabled. Only the incoming packets with SMAC already existing in the
address table can be forwarded normally. User can disable the port from
learning any new MAC addresses, and then use the static MAC addresses
screen to define a list of MAC addresses that can use the secure port.
Enter the settings, then click
button to save the changes on this page.
Apply
107
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-5. Trunking
The Link Aggregation Control Protocol (LACP) provides a standardized
means for exchanging information between Partner Systems on a link to
allow their Link Aggregation Control instances. To reach agreement on the
identity of the Link Aggregation Group to which the link belongs, move the link
to that Link Aggregation Group, and enable its transmission and reception
functions in an orderly manner. Link aggregation allows grouping of up to
eight consecutive ports into a single dedicated connection. This feature can
expand bandwidth to a device on the network.
LACP operation requires
For more detailed information refer to IEEE 802.3ad.
full-duplex mode.
If there are two trunk groups A and B, and B group is enabled LACP, then it
will act as a redundant link (Backup group for Trunk group A). If trunk group A
fails, Group B will be its backup.
108
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-5-1. Aggregator Setting
A value used to identify the active LACP. The switch with
System Priority:
the lowest value has the highest priority and is selected as the active LACP.
To create a trunk across two or more ports:
1.
2.
Choose the "Group ID" and click "Get".
Group ID:
If enabled, the group supports LACP. If disabled, the group is a
LACP:
local static trunking group between two switches. All ports support LACP
dynamic trunking group. If connecting to another device that also supports
LACP, the LACP dynamic trunking group will be created automatically.
3.
Enter the maximum number of ports that can be aggregated
Work ports:
at the same time. If the group is an LACP static trunking group, the exceed
ports is standby and able to aggregate if work ports fail. If the group is a
local static trunking group, the number must be the same as group ports.
4. Select the ports to join the trunking group. If LACP is enabled, you can
109
Download from Www.Somanuals.com. All Manuals Search And Download.
configure LACP Active/Passive status for each port.
5. Click the button to save the new configuration.
Apply
6. To remove ports from a trunk group, highlight the ports in the table you
want to remove and then click the button. To delete a trunk
Remove
group, highlight the selection in the table you want to delete and then click
the button.
Delete
110
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-5-2. Aggregator Information
The LACP Aggregator relation information is displayed as shown.
111
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-5-3. State Activity
(selected) The active port automatically sends LACP protocol
Active
:
packets.
(not selected) The passive port does not automatically send LACP
Passive
:
protocol packets, but responds only if it receives LACP protocol packets from
the other device.
A link having either two active LACP ports or one active port can perform
dynamic LACP trunking. A link that has two passive LACP ports will not
perform dynamic LACP trunking because both ports are waiting for an LACP
protocol packet from the opposite device.
If the port has active LACP’s, and you select the trunking port, the active
112
Download from Www.Somanuals.com. All Manuals Search And Download.
status will be created automatically.
113
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-6. Forwarding and Filtering
5-4-6-1. IGMP Snooping
The switch supports IP multicasting. You can enable IGMP via the web
management’s configuration screen. In addition, you can view different
multicast groups, VIDs and member ports, and IP multicast addresses that
range from 224.0.0.0 through 239.255.255.255.
The Internet Group Management Protocol (IGMP) is an internal protocol of
the Internet Protocol (IP) suite. IP manages multicast traffic by using
switches, routers, and hosts that support IGMP. Enabling IGMP allows the
ports to detect IGMP queries and report packets and manage IP multicast
traffic through the switch.
114
Download from Www.Somanuals.com. All Manuals Search And Download.
IGMP has three fundamental types of messages:
Message
Query
Description
A message sent from the querier (IGMP router or switch)
asking for a response from each host belonging to the
multicast group.
A message sent by a host to the querier to indicate that the
host wants to be or is a member of a given group indicated in
the report message.
Report
A message sent by a host to the querier to indicate that the
host has quit to be a member of a specific multicast group.
Leave Group
115
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-6-2. Static MAC Address
When a static MAC address is added, it remains in the switch's address table,
regardless of whether or not the device is physically connected to the switch.
This saves the switch from having to re-learn a device's MAC address when
the device is disconnected or powered-off.
To add a static MAC address:
1. Click on
2. Click on
on the main menu.
.
Administrator
Filter Database
3. Click
. In the MAC address box, enter the MAC
Static MAC Addresses
address to and from which the port should permanently forward traffic,
regardless of the devices network activity.
4. In the
box, select a port number.
Port Number
5. If tag-based (IEEE 802.1Q) VLANs are set up on the switch, static
116
Download from Www.Somanuals.com. All Manuals Search And Download.
addresses are associated with individual VLANs. Type the VID (tag-based
VLANs) to associate with the MAC address.
6. Click the
button.
Add
7. To delete a static MAC address, highlight the selection in the table you
want to delete and then click the
button.
Delete
117
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-6-3. MAC Filtering
MAC address filtering allows the switch to drop unwanted traffic. Traffic is
filtered based on the destination addresses.
Steps to specify a MAC address to filter:
1. In the MAC Address box, enter the MAC address to filter.
1. If tag-based (802.1Q) VLAN are set up on the switch, in the VLAN ID box,
type the VID to associate with the MAC address.
2. Click the
button.
Add
3. To delete a MAC address, highlight the selection in the table you want to
delete and then click the button.
Delete
Changing the VLAN type in the Advanced Switch Setting menu will
NOTE:
.
cause the contents of this table to clear
118
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-7. VLAN Configuration
A Virtual LAN (VLAN) is a logical network grouping that limits the broadcast
domain. It allows you to isolate network traffic so only members of the VLAN
receive traffic from the same VLAN members. Basically, creating a VLAN
from a switch is logically equivalent of reconnecting a group of network
devices to another Layer 2 switch. However, all the network devices are still
plugged into the same switch physically.
The MIL-SME801P switch supports port-based, 802.1Q (tag-based) and
protocol-based VLANs. VLAN support is Disabled and all ports belong to a
single broadcast domain by default.
Rebooting the switch is necessary for changes to take effect.
NOTE:
119
Download from Www.Somanuals.com. All Manuals Search And Download.
Support Port-based VLANs
Ethernet frames received on a port are sent only to ports belonging to the
same VLAN group of ports. All ports default belonging to the same VLAN
group. The VLAN information included in Ethernet frames tagged with
VLAN IDs is ignored by the switch in Port Based VLAN mode.
Support Tag-based VLAN (IEEE 802.1Q VLAN)
The IEEE 802.1Q specification is the standard for Port-based Tagging.
Therefore, it is possible to create a VLAN across devices from different switch
suppliers. IEEE 802.1Q VLAN uses a technique to insert a “tag” into the
Ethernet frames. The tag contains a VLAN Identifier (VID) that indicates the
VLAN numbers.
120
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-7-1. Port-based VLAN
In order for an end station to send packets to different VLANs, it has to be
either capable of tagging the packets it sends with VLAN tags OR be attached
to a VLAN-aware bridge. The VLAN-aware bridge must be capable of
classifying and tagging the packet with different VLAN ID. The classification
and tagging of the packets is based on default PVID and other information
about the packet, such as the protocol.
The MIL-SME801P switch will support protocol-based VLAN classification by
means of both built-in knowledge of layer 2 packet formats used by selected
popular protocols, such as Novell IPX and AppleTalk’s EtherTalk, and some
degree of programmable protocol matching capability.
121
Download from Www.Somanuals.com. All Manuals Search And Download.
Create a VLAN and add tagged member ports to it.
1.Click the button to create a new VLAN group.
Add
2.Enter the VLAN name, group ID and select the members for the new VLAN.
3.Click the button.
Apply
4.If the number of groups exceeds the limit for a single page, click the
button to view other VLAN groups.
NextPage
5.To delete a VLAN group, highlight the selection in the table you want to
delete and then click the button.
Delete
6.To edit a VLAN group, highlight the selection in the table you wan tot edit
and then click the button.
Edit
7. To remove members from a VLAN group, highlight the members in the
table you want to remove and then click the button.
Remove
If the trunk groups exist, it will be displayed (ex: Trunk1, Trunk2…)
NOTE:
after port 9. The user can select if it is a member of the VLAN or not.
122
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-7-2. 802.1Q VLAN
On this page, the user can create Tag-based VLANs, and enable or disable
GVRP protocol. There are 256 VLAN groups provided to configure. If 802.1Q
VLAN is enabled, then all ports on the switch belong to the default VLAN1.
The default VLAN1 can’t be deleted.
GVRP (GARP VLAN Registration Protocol)
GVRP allows automatic VLAN configuration between the switch and nodes. A
GVRP request can be sent using the VID of a VLAN defined on the switch
when the switch is connected to a device with GVRP enabled. The switch will
automatically add that device to the existing VLAN.
123
Download from Www.Somanuals.com. All Manuals Search And Download.
Security VLANs
Security VLAN’s allow for limiting telnet, SNMP and web access to the switch
to a specific VLAN. The VID of the Security VLAN may be changed from
255 to another value after creating the VLAN. The new VID must not
already exist on the box.
Note: Before enabling the security VLAN feature, you must set the management port you are managing
from to PVID 255. This is due to the fact that the CPU can only accept management requests from VLAN
255, this is intentional and part of the feature of Security VLAN.
124
Download from Www.Somanuals.com. All Manuals Search And Download.
Basic
To create a VLAN and add tagged member ports to it:
1.Select the
button to create a new VLAN.
Add
2.Enter a name for the new VLAN.
3.Enter a VLAN ID (2 to 4094). The default is 1.
4.Choose the protocol type. Default is NONE.
5.From the Available ports box, select ports to add to the switch and click
If the trunk groups exist, you can see it here (ex:Trunk1,Trunk2…)
Add.
and configure it as a member of the VLAN or not.
6.Click the button.
Next
Use this page to set the outgoing frames are VLAN-Tagged frames or not,
and then click the button.
Apply
125
Download from Www.Somanuals.com. All Manuals Search And Download.
Tag: Outgoing frames with VLAN-Tagged.
Untag: Outgoing frames without VLAN-Tagged.
126
Download from Www.Somanuals.com. All Manuals Search And Download.
VLAN Port ID
To configure port VID settings:
From the main
VLAN page, click
Settings.
Port VLAN ID
802.1Q
VLAN ID
Set the port VLAN ID that will be assigned to untagged traffic on a given port.
This feature is useful for accommodating devices that you want to participate
in the VLAN but that don’t support tagging. Only one untagged VLAN is
allowed per port. Other VLANs need to be tagged. The VLAN ID must be
the same as the VLAN ID of the port that belongs to the VLAN group, or the
untagged traffic will be dropped. The VLAN ID must be in the range between
1 and 255, with the default value being 1.
Ingress Filtering
Ingress filtering lets frames belonging to a specific VLAN to be forwarded if
127
Download from Www.Somanuals.com. All Manuals Search And Download.
the port belongs to that VLAN.
: Forward only packets with VID matching this port's configured VID.
Enable
: Disable Ingress filter function.
Disable
Acceptable Frame Type
All packets are acceptable.
ALL:
Only packets that match the VLAN ID will have permission to go
Tag Only:
through the port.
128
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-8. Spanning Tree
The Spanning-Tree Protocol (STP) is a standardized method (IEEE 802.1d)
for avoiding loops in switched networks. When STP is enabled it ensures that
only one path at a time is active between any two nodes on the network.
Spanning-Tree Protocol can be enabled using web management’s switch
setting advanced item, and selecting enable Spanning-Tree protocol. By
default, spanning tree is disabled on the switch.
It is recommended that STP be enabled on all switches to ensure a single
active path on the network.
129
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-8-1. System Configuration
To enable STP mode select the box next to STP State and click so that a
check mark appears. This indicates that STP is enabled on the device.
√
After enabling STP, configure the system level functions for the device.
The second table displays the current active Root Bridge. The switch will
take on the attributes of the active Root Bridge regardless what has been
configured above.
5-4-8-2. Per Port Configuration
You can configure path cost and priority of each port. This information is
utilized in determining which port is the primary in the root bridge path.
1. Select the port in Port column.
2. Assign the Path Cost. The value range is from 1 to 65535.
3. Assign the port priority value. The value range is from 0 to 255. The lowest
value has higher priority.
4. Click the
button.
Apply
Information about the current spanning tree status is displayed in this table.
130
Download from Www.Somanuals.com. All Manuals Search And Download.
The priority and path cost can be configured for each port. Click the
button to modify the configuration.
Apply
Parameter
Description
A change to the Port Priority affects which port will be
the root port. The lowest number has the highest
priority. The range is 0-255 and the default setting for
all ports is 128. If you change the value, you must
reboot the switch.
Port Priority
Path Cost specifies the path cost of the port that the
switch uses to determine which ports are the
forwarding ports. The lowest number becomes the
forwarding port. The range is 1-65535 and the
default value is based on IEEE802.1D
Path Cost
10Mb/s = 50-600
100Mb/s = 10-60
If you change the value, you must reboot the switch.
131
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-9. Port Mirroring
The Port Mirroring feature is disabled by default. Selecting enable from the
pull down menu will cause the selected traffic from the selected monitor ports
to be mirrored to the selected analysis port. Press the
the changes.
button to submit
Apply
Enables or Disables the port mirroring function.
Port Mirroring State:
Enabled states include RX, TX or Both.
All mirrored traffic is sent out this port.
Analysis Port:
Monitor Port:
The ports you want to mirror. All source port traffic will be
copied to a mirror port. You can select a maximum of 8 source ports in the
switch. If you want to disable the function, you must select monitor port to
none.
132
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-10. SNMP Management
A SNMP is a protocol that governs the transfer of information between
management and agent. The switch supports SNMP V1. Any Network
Management station running the Simple Network Management Protocol
(SNMP) can manage the switch provided that the Management Information
Base (MIB) is installed.
Use this menu to define management stations as trap managers and to enter
SNMP community strings. Users can also define community strings for a
name, location, and contact person for the switch.
133
Download from Www.Somanuals.com. All Manuals Search And Download.
The length of each can be 26 characters.
1. System Options –
: Enter a name to be used for the switch.
Name
: Enter the location of the switch.
Location
: Enter the name of a person or organization.
Contact
2. Community strings serve as passwords and can be entered as one of
the following:
Enables requests accompanied by this string to display
RO (Read only):
MIB-object information.
Enables requests accompanied by this string to display
RW (Read write):
MIB-object information and to set MIB objects.
134
Download from Www.Somanuals.com. All Manuals Search And Download.
3. Trap Manager
A trap manager is a management station that receives traps. Traps are the
system alerts generated by the switch. If no trap manager is defined, no traps
are issued. Create a trap manager by entering the IP address of the station
and a community string.
135
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-11. Security Manager
The user can change the user name and password to keep the switch secure.
After entering a new user name and password, click the
button to
Apply
submit the changes. The default user name and password are below.
User Name:
root
Password:
root
136
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-12. 802.1x
You must enable the 802.1x protocol on the miscellaneous section of the
Switch Settings menu for changes in this section to take effect. This section
deals with the system level and per port configurations to support the IEEE
802.1x authentication and authorization protocol.
5-4-12-1. System Configuration
Set the Radius Server IP address.
Radius Server IP:
Set the UDP destination port for authentication requests to the
Server Port:
specified Radius Server.
Set the UDP destination port for accounting requests to
Accounting Port:
the specified Radius Server.
Set an encryption key for use during authentication sessions
Shared Key:
with the specified radius server. This key must match the encryption key used
on the Radius Server.
Set the identifier for the radius client.
NAS, Identifier:
137
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-12-2. Per Port Configuration
Each port can be configured to one of the following four states:
The specified port is required to be held in the Unauthorized state.
The specified port is required to be held in the Authorized state.
Reject:
Accept:
The specified port is set to the Authorized or Unauthorized state
Authorized:
in accordance with the outcome of an authentication exchange between the
Supplicant and the authentication server.
The specified port is required to be held in the Authorized state.
Disable:
138
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-12-3. 802.1x Miscellaneous Configuration
Set the period during which the port doesn’t try to acquire a
Quiet period:
supplicant.
Set the period the port waits to retransmit next EAPOL PDU
TX period:
during an authentication session.
Set the period of time the switch waits for a supplicant
Supplicant timeout:
response to an EAP request.
Set the period of time the switch waits for a server response
Server timeout:
to an authentication request.
Set the number of authentication that must time-out before
Max requests:
authentication fails and the authentication session ends.
Set the period of time after which clients connected must be
Reauth period:
re-authenticated.
139
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-13. TFTP Update Firmware
The following menu options provide some system control functions to allow a
user to update firmware and remotely reboot the switch system. Before
updating, make sure you have your TFTP server ready and the firmware
image copied to the TFTP server.
Enter the TFTP server IP address.
TFTP Server IP Address:
Enter the firmware image file name.
Firmware File Name:
5-4-14. Configuration Backup
5-4-14-1. TFTP Restore Configuration
The configuration image can be downloaded into the switch from a TFTP
server. When restoring the image, care must be taken to download an
image made from the same revision level of software as is in use on the
switch.
Enter the TFTP server IP address.
TFTP Server IP Address:
Enter the correct file name to be restored.
Restore File Name:
140
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-14-2. TFTP Backup Configuration
The current configuration image can be uploaded from the switch to a TFTP
server using this page. Use the TFTP Restore Configuration page to
download a configuration image to the switch.
Enter the TFTP server IP address.
TFTP Server IP Address:
Enter the file name to back up.
Backup File Name:
141
Download from Www.Somanuals.com. All Manuals Search And Download.
5-4-15. Factory Default
Resets the Switch to default configuration.
Default IP address: 192.168.16.1
Default Gateway: 192.168.16.254
Subnet mask: 255.255.255.0
All other settings default to either Disabled or no value.
5-4-16. Reboot
Select Reboot to restart the system with the current saved configuration.
142
Download from Www.Somanuals.com. All Manuals Search And Download.
6.
Troubleshooting
This section is intended to help you solve some common problems
encountered while using the MIL-SME801P switch series.
Incorrect connections
The RJ-45 port will auto-detect the signal configuration of the cable. For
10/100 Mbps, only two pairs of wires are required for communications. For
1000Base-TX, all four pairs of wire are required. Some cabling plants may
not have all four pairs, causing a fault in the link.
The fiber port is either a multi-mode or single-mode fiber type. Ensure that
the fiber in the cable matches that of the fiber port.
„
Faulty or loose cables
Look for loose or obviously faulty connections. If they appear to be OK, make
sure the connections are snug. If that does not correct the problem, try
different cables.
„
Non-standard cables
Non-standard and miss-wired cables may cause numerous network collisions
and other network problem. This can seriously impair network performance. A
category 5 cable tester is a recommended tool for every network installation.
143
Download from Www.Somanuals.com. All Manuals Search And Download.
„
Improper Network Topologies
It is important to make sure that you have a valid network topology. Common
topology faults include excessive cable length and too many repeaters or hubs
between end nodes. In addition, you should make sure that your network
topology contains no data path loops. Between any two ends nodes, there
should be only one active cabling path at any time. Data path loops will cause
broadcast storms that will severely impact your network performance.
Diagnostic LED Indicators
The Switch can be easily monitored through panel indicators to assist in
identifying problems.
If the power indicator does not turn on when the power cord is plugged in, you
may have a problem with power outlet, or power cord. However, if the switch
powers off after running for a while check for loose power connections, power
losses or surges at power outlet. If you still cannot resolve the problem,
contact your local dealer for assistance.
„
Cabling
Use unshielded twisted-pair (UTP) or shield twisted-pair (STP)
RJ-45 ports:
Ω
cable for RJ-45 connections: 100
Category 3, 4 or 5 cable for 10Mbps
Ω
connections or 100 Category 5 cable for 100Mbps connections. Be sure
that the length of any twisted-pair connection does not exceed 100 meters
(328 feet).
144
Download from Www.Somanuals.com. All Manuals Search And Download.
Multi-mode fiber connector types must use 50/125
100BASE-FX Fiber port:
or 62.5/125 m multi-mode fiber cable. Two devices may be connected over a
µ
2-kilometer distance. Single-mode fiber connector types must use 9/125 m
µ
single mode fiber cable. Two devices may be connected over a15 to
60-kilometer distance in full duplex operation in single mode.
145
Download from Www.Somanuals.com. All Manuals Search And Download.
7.
Technical Specifications
This section provides the specifications of the MIL-SME801P switch
product.
IEEE802.3 10BASE-T
IEEE802.3u 100BASE-TX/100BASE-FX
IEEE802.3x Flow Control and Back pressure
Standard
IEEE802.3ad Port Trunk with LACP
IEEE802.1d Spanning tree protocol
IEEE802.1p Class of service
IEEE802.1Q VLAN Tagging
System power
10/100BASE-TX RJ-45 Port: 100M, Link/Active,
Full-duplex/Collision
LED Indicators
100BASE-FX module: Link/Activity, Full
duplex/Collision
10/100TX: RJ-45
Connector
100BASE-FX(Multi /Single Mode) module: SC
(2KM/30 KM)
146
Download from Www.Somanuals.com. All Manuals Search And Download.
1000BASE-SX MMF SC 220m
1000BASE-LX SMF SC 10km
Gigabit SX Transceiver: SC. Support
Multi-mode fiber up to 500Meters
Gigabit LX Transceiver: SC. Supports Single
Mode fiber up to 10KM
Switch
Store and Forward, 8.8Gbps Back-plane
architecture
MAC address
Memory
6K Mac with Auto Learning
3Mbits for packet buffer
Dimensions
Power Supply
EMI & Safety
250mm x 133mm x 37mm (L x W x H)
100-240V AC, 50-60Hz
FCC Class A, CE & UL,cUL
147
Download from Www.Somanuals.com. All Manuals Search And Download.
Download from Www.Somanuals.com. All Manuals Search And Download.
90000415 Rev A
Download from Www.Somanuals.com. All Manuals Search And Download.
|