TRENDnet User s Guide. Cover Page

Transcription

1 Cver Page

2 Table f Cntents Cntents Prduct Overview... 1 Package Cntents... 1 Features... 1 Prduct Hardware Features... 2 Applicatins... 3 Switch Installatin... 4 Desktp Hardware Installatin... 4 Rack Munt Hardware Installatin... 4 Basic Installatin... 5 Cnnect additinal devices t yur switch... 6 Cnfigure yur switch (Web-based UI)... 7 Access yur switch management page... 7 System Inf... 7 View yur switch status infrmatin... 7 System... 9 Set yur system infrmatin... 9 Set yur IPv4 settings Set yur IPv6 settings Add IPv6 neighbrs Set yur DNS server settings Restrict access t switch management page Change administratr passwrd and add accunts Enable r disable SNMP and mdify idle timeut settings Set the switch date and time Enable HTTPS/SSL (Secure Scket Layer) management access Enable SSH (Secure Shell) cmmand line management access Enable Telnet cmmand line management access Enable DHCP Aut Cnfiguratin View and setup yur switch lgging Physical Interface Cnfigure yur switch prts and view prt status Spanning Tree (STP, RSTP, MSTP) Cnfigure Spanning Tree Prtcl settings Cnfigure Spanning Tree Prtcl prt settings Cnfigure Spanning Tree Prtcl MST settings (MSTP) View yur Spanning Tree Prtcl Instance Infrmatin (MSTP) Cnfigure Spanning Tree Prtcl MST Prt Settings (MSTP) Trunk Cnfig (Link Aggregatin) Cnfigure prt trunk settings View yur trunk grup status infrmatin Cnfigure yur prt pririty Mirrring Cnfigure prt mirrr settings Lpback Detectin Enable lpback detectin Static Unicast Add static unicast entries t the switch Static Multicast Add static multicast entries t the switch IGMP Snping Cnfigure IGMP Snping Settings Cnfigure IGMP Snping Ruter Prts MLD Snping Cnfigure MLD Snping Settings View MLD Hsts Bandwidth Cntrl Cnfigure Strm Cntrl Set Ingress Rate Limiting Set Egress Rate Limiting VLAN i

3 Table f Cntents Add, mdify, and remve VLANs Cnfigure VLAN Prt Settings Cnfigure the VLAN Frwarding Table Mde View the switch VLAN dynamic frwarding table Create a private VLAN View the current VLAN database GVRP (GARP VLAN Registratin Prtcl) Enable GVRP Set GVRP prt settings Set GVRP time settings QS (Quality f Service) Set CS pririty settings Set Prt Pririty Set DSCP (Differentiated Services Cde Pint) Class Mapping settings Set the Scheduling Algrithm Cnfigure the IPv6 Traffic Class Pririty Settings SNMP Set the SNMP Engine ID Cnfigure the SNMP View Table Cnfigure the SNMP Grup Access Table Cnfigure the SNMP User/Grup Table Cnfigure the SNMP Cmmunity Table Cnfigure the SNMP Trap Management Access Cntrl Cnfig Cnfigure Plicy Settings Cnfigure Rate Cntrl View yur plicy database RMON Enable RMON Cnfigure parameters fr RMON Ethernet statistics Cnfigure parameters fr RMON histry cntrl settings Cnfigure parameters fr RMON alarms Cnfigure parameters fr RMON events Vice VLAN Create a Vice VLAN Cnfigure Vice VLAN OUI settings Security Cnfigure Prt Access Cntrl Create Dial-In Users (Lcal Authenticatin Methd) Add RADIUS Servers (RADIUS Authenticatin Methd) Add TACACS+ Servers (TACACS+ Authenticatin Methd) Destinatin MAC Filter Denial f Service (DS) PE Cnfiguratin Cnfigure PE settings DHCP Snping Enable DHCP Snping Enable DHCP Snping Set Trusted Interfaces Cnfigure Binding Database LLDP (Link-Layer Discvery Prtcl) Enable and cnfigure LLDP View LLDP Neighbr Infrmatin Statistic View Traffic Infrmatin Statistics View Errr Infrmatin Statistics Switch Maintenance Upgrade yur switch firmware Firmware Upgrade via HTTP Settings Firmware Upgrade via TFTP Settings Backup and restre yur switch cnfiguratin settings Backup/Restre via HTTP Settings Backup/Restre via TFTP Settings Cable Diagnstics Test Enable IEEE 802.3az Pwer Saving Mde ii

4 Table f Cntents Rebt/Reset t factry defaults Netwrk Cnnectivity Test (Ping Tl) Using the Web Smart Switch Management Utility System Requirements Installatin Using the Utility Launching the Utility Discvery List Mnitr List Device Setting Main Menu Optins Cmmand Line Interface Reference Access yur switch cmmand line interface CLI Cmmands Technical Specificatins Trubleshting Appendix iii

5 Prduct Overview Features TRENDnet s 48-Prt Gigabit PE+ Managed Layer 2 Switch with 4 shared SFP slts, mdel, has 24 x Gigabit PE+ prts, 24 x Gigabit prts, and 4 x shared SFP slts, a cnsle prt, a PE Pwer budget f 370 Watts, and an advanced Layer 2 management feature set. This IPv6 ready switch ffers traffic management, trubleshting, access cntrl, and mnitring features. Hardware Design Prvides 24 x Gigabit PE+ prts, 24 x Gigabit prts, 4 x shared SFP slts, a cnsle prt, and includes rackmunt brackets. Package Cntents In additin t yur switch, the package includes: Quick Installatin Guide CD-ROM (Utility & User s Guide) Pwer crd (1.8 m / 6 ft.) RJ-45 t RS-232 cnsle cable (100 mm / 3.94 in.) Rack munt kit If any package cntents are missing r damaged, please cntact the retail stre, nline retailer, r reseller/distributr frm which the prduct was purchased. Smart Fan Smart fan saves energy by varying fan speed and use based n cling needs. IPv6 Ready This switch supprts IPv6 cnfiguratin and IPv6 neighbr discvery. Traffic Management A brad range f netwrk cnfiguratins are supprted by: 802.3ad link aggregatin, Asymmetric VLAN, 802.1Q VLAN, Vice VLAN, Private VLAN, Bandwidth Cntrls, GVRP, IGMP v1-v3, 802.1p Class f Service (CS), Spanning Tree (STP, RSTP, and MSTP), and QS queue scheduling. Trubleshting Real time traffic cmparisn charts, errr grup charts, and a cnvenient cable diagnstic test aid in rapid trubleshting. Access Cntrls Features such as ACL, SSL, MAC/prt filtering, Denial f Service cntrls, 802.1X, TACACS+, and RADIUS are cmpatible with layered netwrk access cntrls. Mnitring RMON, SNMP, SNMP Trap, and Prt Mirrring supprt administratr mnitring slutins. 1

6 Prduct Hardware Features Diagnstic LED Indicatrs AC Pwer Cnnectr Cnnect the AC pwer crd t the cnnectr and the ther side int a pwer utlet. (Input: 100~240VAC, 50/60Hz) Reset Buttn Press and hld this buttn fr 10 secnds and release t reset the switch t factry defaults. PE+ prts (1-24) Prts 1-24 can supply pwer and Gigabit cnnectivity t bth PE (802.3af) r PE+ (802.3at) PDs. Gigabit Prts (25-48) Cnnect PE and nn-pe netwrk devices. Prts are shared with SFP slts 45F-48F. SFP slts (45F-48F) Supprts ptinal 1000BASE-SX/LX mini-gbic mdules. When these are activated, prts will be disabled. Cnsle prt Use the included RJ-45 t RS-232 serial cnsle cable t access the ut-f-band cmmand line interface management. Pwer LED On : When the Pwer LED lights n, the device is receiving pwer. Blinking Device is perfrming a system self-test. Off : When the Pwer turns ff r the pwer crd is nt cnnected PWR MAX (Pwer ver Ethernet Max.) On (Red) : When reaching the max PE pwer budget prvided 370W r abve, the LED will turn n and the system will nt prvide pwer additinal PD (PE client devices) after max PE budget is reached.. Off : When the PE pwer prvided is belw the 370W PE pwer budget. Gigabit Prt LINK/ACT LEDs (1-48) Link/Activity (per prt) On : When the Link/ACT LED lights n, the respective prt is successfully cnnected t an Ethernet netwrk. Blinking : When the Link/ACT LED is blinking, the prt is transmitting r receiving data n the Ethernet netwrk. Off Green n Amber n : N link. Speed (per prt) : When the Green LED lights n, the respective prt is cnnected t a 1000Mbps Gigabit Ethernet netwrk. : When the Amber LED lights n, the respective prt is cnnected t a 10Mbps r 100Mbps Ethernet netwrk. Gigabit Prt PE LEDs (1-24) On (Green) : When the PE pwered device (PD) is cnnected and the prt supplies pwer nrmally. On : PE prt has may have ne f the fllwing issues: (Amber) PE pwer circuit shrtage. Pwer ver current: ver the pwer current f PD s classificatin. 2

7 Off Out f PE vltage f 44 ~ 57 VDC utput. Cause fail. N PE pwered device (PD) cnnected r unplugged the PE utput prt. N pwer is supplied. Shared SFP Slts 45F-48F On (Green) : When the Green LED lights n, the link is established at 1000Mbps. On (Amber) : When the Amber LED lights n, the link is established at 100Mbps. Blinking : When the LED is blinking, the prt is transmitting r receiving data. Off The link is discnnected r nt established. Applicatins 3

8 Switch Installatin Desktp Hardware Installatin The site where yu install the hub stack may greatly affect its perfrmance. When installing, cnsider the fllwing pinters: Install the Switch in a fairly cl and dry place. Install the Switch in a site free frm strng electrmagnetic field generatrs (such as mtrs), vibratin, dust, and direct expsure t sunlight. Leave at least 10cm f space at the frnt and rear f the hub fr ventilatin. Install the Switch n a sturdy, level surface that can supprt its weight, r in an EIA standard-size equipment rack. Fr infrmatin n rack installatin, see the next sectin, Rack Munting. When installing the Switch n a level surface, attach the rubber feet t the bttm f each device. The rubber feet cushin the hub and prtect the hub case frm scratching. Rack Munt Hardware Installatin The switch can be munted in an EIA standard-size, 19-inch rack, which can be placed in a wiring clset with ther equipment. Attach the munting brackets at the switch s frnt panel (ne n each side), and secure them with the prvided screws. Then, use screws prvided with the equipment rack t munt each switch in the rack. 4

9 Basic Installatin 6. Click System and then click IPv4 Setup. 7. Cnfigure the switch IP address settings t be within yur netwrk subnet, then click Apply. Nte: Yu may need t mdify the static IP address settings f yur cmputer s netwrk adapter t IP address settings within yur subnet in rder t regain access t the switch. 3. Assign a static IP address t yur cmputer s netwrk adapter in the subnet f x (e.g ) and a subnet mask f Open yur web brwser, and type the IP address f the switch in the address bar, and then press Enter. The default IP address is Enter the User Name and Passwrd, and then click Lgin. By default: User Name: admin Passwrd: admin Nte: User name and passwrd are case sensitive. 8. Click Save Settings t Flash (menu). 9.Click Save Settings t Flash (buttn), then click OK. Nte: Once the settings are saved, yu can cnnect the switch t yur netwrk. 5

10 Cnnect additinal devices t yur switch Yu can cnnect additinal cmputers r ther netwrk devices PE (Pwer ver Ethernet) (1-24) r nn-pe devices t yur switch using Ethernet cables t cnnect them t ne f the available Gigabit Prts (1-48). Check the status f the LED indicatrs n the frnt panel f yur switch t ensure the physical cable cnnectin frm yur cmputer r device. Yu can use either the Gigabit Ethernet prts r Gigabit SFP cnnectins as netwrk uplinks. (SFP mdules sld separately) Nte: If yu encunter issues cnnecting t yur netwrk, there may be a prblem with yur cmputer r device netwrk settings. Please ensure that yur cmputer r device netwrk settings (als called TCP/IP settings) are cnfigured prperly within the netwrk subnet yur switch is cnnected. 6

11 Cnfigure yur switch (Web-based UI) Access yur switch management page Nte: Yur switch default management IP address is accessed thrugh the use f yur Internet web brwser (e.g. Internet Explrer, Firefx, Chrme, Safari, and Opera ) and will be referenced frequently in this User s Guide. 1. Open yur web brwser and g t the IP address Yur switch will prmpt yu fr a user name and passwrd. System Inf View yur switch status infrmatin System Inf Yu may want t check the general system infrmatin f yur switch such as firmware versin, bt lader infrmatin and system uptime. Other infrmatin includes H/W versin, RAM/Flash size, administratin infrmatin, IPv4 and IPv6 infrmatin. 2. Click n System Inf. 2. Enter the user name and passwrd. By default: User Name: admin Passwrd: admin Nte: User Name and Passwrd are case sensitive. System Infrmatin System Up Fr The duratin yur switch has been running cntinuusly withut a restart/pwer cycle (hard r sft rebt) r reset. Runtime Image: The current sftware r firmware versin yur switch is running. Bt Lader The current bt lader versin yur switch is running. Hardware Infrmatin Versin: Displays yur switch hardware versin. DRAM Size: Displays yur switch RAM memry size. Flash Size: Displays yur switch Flash memry size. 7

12 Administratin Infrmatin System Name Displays the identifying system name f yur switch. This infrmatin can be mdified under the System sectin. System Lcatin - Displays the identifying system lcatin f yur switch. This infrmatin can be mdified under the System sectin. System Cntact Displays the identifying system cntact r system administratr f yur switch. This infrmatin can be mdified under the System sectin. IPv6 Infrmatin IPv6 Unicast Address / Prefix Length: Displays the current IPv6 address and prefix assigned t yur switch. IPv6 Default Gateway: Displays the current IPv6 default gateway address assigned t yur switch. Link Lcal Address / Prefix Length: Displays the current Link Lcal address and prefix length assigned t yur switch System MAC Address, IPv4 Infrmatin MAC Address: Displays the switch system MAC address. IP Address Displays the current IPv4 address assigned t yur switch. Subnet Mask Displays the current IPv4 subnet mask assigned t yur switch. Default Gateway Displays the current gateway address assigned t yur switch. Autmatic Netwrk Features IPv4 DHCP Client Mde: Displays if yur switch IPv4 address setting is set t DHCP client. IPv6 DHCP Client Mde: Displays if yur switch IPv6 address setting is set t DHCP client. 8

13 System Set yur system infrmatin System > System Management This sectin explains hw t assign a name, lcatin, and cntact infrmatin fr the switch. This infrmatin helps in identifying each specific switch amng ther switches in the same lcal area netwrk. Entering this infrmatin is ptinal. 4. Click Apply. 2. Click n System, and click n Settings. 3. Review the settings. When yu have cmpleted making changes, click Apply t save the settings. 5. Click Save Settings t Flash (menu). System Descriptin - Specifies the Switch mdel. Yu cannt change this parameter. System Object ID - Indicates the unique SNMP MIB bject identifier that identifies the switch mdel. Yu cannt change this parameter. System Name - Specifies a name fr the switch, the name is ptinal and may cntain up t 15 characters. System Lcatin - Specifies the lcatin f the switch. The lcatin is ptinal and may cntain up t 30 characters. System Cntact - Specifies the name f the netwrk administratr respnsible fr managing the switch. This cntact name is ptinal and may cntain up t 30 characters. 6. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that the changes are permanent. If yu d nt cmplete this step, rebting r pwer cycling the switch will lse all f yur current cnfiguratin changes. 9

14 Set yur IPv4 settings System > IPv4 Setup This sectin allws yu t change yur switch IPv4 address settings. Typically, the IP address settings shuld be changed t match yur existing netwrk subnet in rder t access the switch management page n yur netwrk. Default Switch IPv4 Address: Default Switch IPv4 Subnet Mask: Click Apply. 5. Click Save Settings t Flash (menu). 2. Click n System, and click n IPv4 Setup. 6. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 3. Review the settings. When yu have cmpleted making changes, click Apply t save the settings. System MAC Address: Displays the switch MAC address infrmatin. System IP Address: Enter the new switch IP address. (e.g ) System Subnet Mask: Enter the new switch subnet mask. (e.g ) System Default Gateway: Enter the default gateway IP address. (e.g r typically yur ruter/gateway t the Internet). System IP Mde: Click the drp-dwn list and select Static t manually specify yur IP address settings r DHCP t allw yur switch t btain IP address settings autmatically frm a DHCP server n yur netwrk. 10

15 Set yur IPv6 settings System > IPv6 System Settings Internet Prtcl versin 6 (IPv6) is a new IP prtcl designed t replace IP versin 4 (IPv4). The IPv6 address prtcl meets the current requirements f new applicatins and the never ending grwth f the Internet. The IPv6 address space makes mre addresses available but it must be apprached with careful planning. Successful deplyment f IPv6 can be achieved with existing IPv4 infrastructures. With prper planning and design, the transitin between IP versin 4 and 6 is pssible tday as well. Use the IPv6 System Settings page t cnfigure the IPv6 netwrk interface, which is the lgical interface used fr in-band cnnectivity with the switch via all f the switch's frnt-panel prts. The cnfiguratin parameters assciated with the switch's netwrk interface d nt affect the cnfiguratin f the frnt-panel prts thrugh which traffic is switched r ruted. 2. Click n System, and click n IPv6 System Settings. NS Retransmit Time Settings: A cnstant that defines a nnzer number f secnds between peridic reauthenticatin f the client. The field is 1~3600 secnds. The default setting is 1 secnd. 3. Review the settings. When yu have cmpleted making changes, click Apply t save the settings. IPv6 State: The IPv6 address fr the IPv6 netwrk interface is set in aut cnfiguratin mde if this ptin is enabled. The default value is Disable. Aut cnfiguratin can be enabled nly when DHCPv6 is nt enabled n any f the management interfaces. DHCPv6 Client: This ptin nly displays when DHCPv6 is enabled. IPv6 Unicast Address / Prefix Length: The IPv6 Unicast Address is an identifier fr a single interface, n a single nde. A packet that is sent t a unicast address is delivered t the interface identified by that address. Add the IPv6 prefix and prefix length t the IPv6 System Settings interface. IPv6 Static Gateway: Specifies the crrespnding Gateway f the IP address entered int the field. IPv6 Dynamic Gateway: T cnfigure the switch t autmatically btain its IP cnfiguratin frm a DHCP server n yur netwrk. Link Lcal Address Settings: A link-lcal address is an IPv6 unicast address that can be autmatically cnfigured n any interface using the link-lcal prefix FE80::/10 ( ) and the interface identifier in the mdified EUI-64 frmat. Link-lcal addresses are used in the neighbr discvery prtcl and the stateless autcnfiguratin prcess. Ndes n a lcal link can use link-lcal addresses t cmmunicate; the ndes d nt need glbally unique addresses t cmmunicate. IPv6 devices must nt frward packets that have link-lcal surce r destinatin addresses t ther links. Autmatic Link Lcal Address: A link lcal address has a prefix f FE80, is nt rutable, and can be used fr cmmunicatin nly n the lcal netwrk. Only ne link lcal address is supprted. If a link lcal address exists n the interface, this entry replaces the address in the cnfiguratin. Link Lcal Address/Prefix length: Enter the Link Lcal Address/Prefix Length. 11

16 Link Layer MAC Address: Specifies the link layer MAC address. Click Add t save the entry t the list. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Yu can type in the specific address and click Find t find the entry t mdify r click Delete r delete the address. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. Add IPv6 neighbrs System > IPv6 Neighbr Settings This page allws yu t manually define IPv6 supprted neighbring devices n yur netwrk. 4. Click Save Settings t Flash (menu). 2. Click n System, and click n IPv6 Neighbr Settings. 3. Review the settings. When yu have cmpleted making changes, click Apply t save the settings. Neighbr IPv6 Address: Specifies the neighbr IPv6 address. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 12

17 Set yur DNS server settings System > DNS Settings This setting allws yu t cnfigure yur IPv4/IPv6 DNS server settings fr the purpse r reslving hstnames. Fr example, when specifying yur SNTP server time settings via dmain name, the switch will nt be able t reslve the SNTP dmain name specified until yu cnfigure the switch DNS server setting. 2. Click n System, and click n IP Access List. 3. Review the settings. First, enter the IPv4 r IPv6 address t allw access and click Add fr each entry. 2. Click n System, and click n DNS Settings. 3. Enter yur DNS IPv4 Server address and/r DNS IPv6 Server address in the prvided fields. Fr each entry, the access list will ppulate. Yu can click Delete next t the entry t delete the entry r Delete All t delete all entries in the table. 4. Click Apply t save the settings. When yu have cmpleted entering the IPv4 and IPv6 address entries, click the IP Restrictin Status drp-dwn list at the tp and select Enabled, then click Apply. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 4. Click Save Settings t Flash (menu). Restrict access t switch management page System > IP Access List This sectin allws yu t define r restrict access t the switch management page t a list f specific IP addresses. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 13

18 Change administratr passwrd and add accunts System > Administratin This sectin explains hw t change the administratr passwrd create additinal administrative user accunts fr access t the switch management page. T create additinal administrative user accunts: User Name: Enter the user name f the new accunt. Passwrd: Enter the passwrd fr the new accunt and enter the passwrd again the Cnfirm Passwrd field t verify. Then, click Add t add t the table. Fr additinal user accunts, yu will be prvided the ptin t Mdify r Delete t remve the accunt. Nte: The passwrd cnsists f up t 12 alphanumeric characters. 2. Click n System, and click n Administratin. 3. Review the settings. T change the administratr passwrd, in the admin entry in the table, click n Mdify. Nte: This default administratr accunt cannt be deleted.. 4. Click Save Settings t Flash (menu). In the Passwrd field, enter the new passwrd and enter the new passwrd again the Cnfirm Passwrd field t verify. Then, click Apply. Nte: The passwrd cnsists f up t 12 alphanumeric characters. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 14

19 Enable r disable SNMP and mdify idle timeut settings System > User Interface This sectin explains hw t enable SNMP n the switch and mdify the switch management page idle timeut settings. Nte: If yu disable the SNMP n the switch, the switch will nt be manageable via SNMP using MIBs. Web Idle Timeut - Enter the idle perid in minutes, when the switch will autmatically lg ut a user frm the switch management page. 2. Click n System, and click n User Interface. 4. Click Save Settings t Flash (menu). 3. Review the settings. Click Apply t save changes. SNMP Agent: Click the drp-dwn list t ne f the fllwing ptins. Enabled - When yu enable this parameter, the SNMP agent is active. Yu can manage the switch with SNMP netwrk management sftware and the switch s private MIB. Disabled - When yu enable this parameter, the SNMP agent is inactive. Web Server Status Displays the current SNMP status. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 15

20 Set the switch date and time System > System Time 2. Click n System, and click n System Time. 3. Review the settings. Click Apply t save changes. Clck Mde - Displays if system time and date is set manually Lcal Time r btained autmatically frm a netwrk time server SNTP. Current Time Displays the current system time and date. Time Zne Displays the current system time zne. SNTP Allws yu t cnfigure yur switch t pull time and date settings autmatically frm a netwrk time server. If selecting this ptin, under Simple Netwrk Time Prtcl (SNTP) Settings, enter yur time server settings. Nte: Please nte that in rder fr the switch t cmmunicate t Internet SNTP time servers, the switch must have valid IPv4/IPv6 address settings including a default gateway address fr Internet access. Additinally, if using a dmain name, the switch must be cnfigured with valid DNS server settings in rder t reslve hst/dmain names. SNTP Primary Server Enter the primary netwrk time server IPv4 address, IPv6 address, r Dmain Name. SNTP Secndary Server Enter the secndary netwrk time server IPv4 address, IPv6 address, r Dmain Name.. SNTP Pll Interval Enter the interval time when yur switch will update the time and date settings with the time server. Time Zne Click the drp-dwn list t select yur time zne. Additinally, yu can set yur Daylight Savings Time. Clck Mde: Select Lcal Time t manually cnfigure yur date and time settings r select SNTP t cnfigure yur switch t autmatically btain settings frm an netwrk time server. Lcal Time Allws yu t manually set the time settings. If selecting this ptin, under Lcal Time Settings, manually enter yur date and time settings. Date Settings Enter yur date settings (YYYY/MM/DD). Time Settings Enter yur time settings (HH:MM:SS) 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 16

21 Enable HTTPS/SSL (Secure Scket Layer) management access System > SSL Settings By default, yur switch management page can be accessed using standard web HTTP prtcl which is unsecure. Enabling HTTPS/SSL management access allws access t the switch management page using secure encrypted cmmunicatin which prevents unauthrized users frm intercepting user name and passwrd credentials. It is recmmended t nly enable this feature, if allwing switch management access frm ther netwrks r ver the Internet. Nte: Once HTTPS/SSL management access is enabled, HTTP management access will be disabled frcing all access t the switch management page using secure encryptin cmmunicatin nly. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 2. Click n System, and click n SSL Settings. 3. Review the settings. Click Apply t save changes. SSL Status: Enabled Enables HTTPS/SSL management access and disables HTTP unsecured mde. Disabled Disables HTTPS/SSL management access and enables HTTP unsecured mde. (Default setting). Enable SSH (Secure Shell) cmmand line management access System > SSH Settings By default, yur switch cmmand line interface can be accessed using standard telnet prtcl which is unsecure. Enabling SSH management access allws access t the switch cmmand line interface using secure encrypted cmmunicatin which prevents unauthrized users frm intercepting user name and passwrd credentials. It is recmmended t enable this feature ver the standard unsecured telnet prtcl. Nte: Once SSH management access is enabled, telnet management access will be disabled frcing all access t the switch cmmand line interface management using secure encryptin cmmunicatin nly. If enabling SSL management access, yu will need t access the switch management page using HTTPS instead f HTTP. (e.g. Click Cntinue, Prceed t this website, and accept the certificate if prmpted. 2. Click n System, and click n SSH Settings. 3. Review the settings. Click Apply t save changes. SSH Status: Enabled Enables SSH cmmand line interface management access and disables Telnet unsecured mde. 17

22 Disabled Disables SSH cmmand line interface management access and enables Telnet unsecured mde. (Default setting). Prt ( ): By default, the standard SSH prt is TCP prt 22. Changing the default standard TCP prt will add anther layer f security hwever, yu will need t specify the different prt in yur terminal client prgram. 4. Click Save Settings t Flash (menu). 2. Click n System, and click n Telnet Settings. 3. Review the settings. Click Apply t save changes. Telnet Status: Enabled Enables Telnet cmmand line interface management access. (Default setting). Disabled Disables Telnet cmmand line interface management access. Prt ( ): By default, the standard Telnet prt is TCP prt 23. Changing the default standard TCP prt will add anther layer f security hwever, yu will need t specify the different prt in yur terminal client prgram. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 4. Click Save Settings t Flash (menu). Enable Telnet cmmand line management access System > Telnet Settings By default, yur switch cmmand line interface can be accessed using standard telnet prtcl which is unsecure. Disabling Telnet cmmand line interface management access will restrict access t the switch cmmand line interface via IP. The nly CLI access will be ut-f-band cnsle access (cnsle prt) r enabling SSH management access allws access t the switch CLI via IP using secure encrypted cmmunicatin which prevents unauthrized users frm intercepting user name and passwrd credentials. It is recmmended t enable this feature ver the standard unsecured telnet prtcl. Nte: Once Telnet management access is enabled, if SSH is enabled, SSH management access will be disabled frcing all access t the switch cmmand line interface management using the default Telnet prtcl nly. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 18

23 Enable DHCP Aut Cnfiguratin System > DHCP Aut Cnfiguratin If yu need t autmatically update the switch cnfiguratin files via a remte server, the DHCP Aut Cnfiguratin feature is available fr this purpse via the DHCP server. Yur IP address settings must enable the DHCP client s that this feature can perate with yur DHCP server. View and setup yur switch lgging System > System Lg Settings The system lg is designed t mnitr the peratin the switch by recrding the event messages it generates during nrmal peratin. These events may prvide vital infrmatin abut system activity that can help in the identificatin and slutins f system prblems. 2. Click n System, and click n DHCP Aut Cnfiguratin. 2. Click n System, and click n System Lg Settings. 3. Click the Aut Cnfiguratin State drp-dwn list and select Enabled. Click Apply t save changes. 3. Review the settings. Click Apply t save changes. Time Stamp Enable - Each event message recrded in the lg will have a time stamp. Disable - N time stamp will be included with the event messages. 4. Click Save Settings t Flash (menu). Message Buffered Size - Enter the message buffer size. (Range: 1-200) 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Syslg - Allws yu t send device lgging t an external lg (Syslg) server fr trubleshting r mnitring. Syslg Status Enable Enable syslg and in the Syslg Server IP sectin, enter the IPv4 r IPv6 address f the external syslg server t send lgging. Disable Disable syslg functinality. Facility - Click the drp-dwn list and which facility t stre the lgging. (Optins: lcal0 lcal7) Nte: Yu can define the facility t stre lgging n yur external syslg server. This helps t ensure yu have separate lgging sectins fr different devices. 19

24 Lgging Level Click the drp-dwn list t select what level f event messages that will be lgged. 0 Emergency - The system is unusable. 1 Alert - Actin must be taken immediately. 2 Critical - Critical cnditins are displayed. 3 Errr - Errr cnditins are displayed. 4 Warning - Warning cnditins are displayed. 5 Ntice - Nrmal but significant cnditins are displayed. 6 Infrmatinal - Infrmatinal messages are displayed 7 Debug - Debug-level messages are displayed. Physical Interface Cnfigure yur switch prts and view prt status Physical Interface This sectin allws yu t cnfigure the physical prt parameters such as speed, duplex, flw cntrl, and jumb frames. This sectin als reprts the current link status f each prt and negtiated speed/duplex. Additinally yu will be able t set yur BPDU prts fr Spanning Tree Cnfiguratin and EAP prts fr 802.1x prt-based authenticatin cnfiguratin. 2. Click n Physical Interface. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 3. Review the settings. Click Apply t save changes. Jumb Frame Settings This parameter indicates whether r n jumb frames can be accepted by the switch. Yu may want t activate jumb frames when cnnecting devices that are capable f sending Ethernet frames larger than the standard size in rder t imprve quality fr applicatins such as audi/vide. Enabled -This parameter indicates the prt is permitted t accept jumb frames. Disabled -This parameter iindicates the prt is nt permitted t accept jumb frames. Nte: When the Jumb Frame setting is enabled, the QS functin cannt be enabled and vice versa. One functin will need t be disabled t use the ther. Prt - Specifies the prt number. The All value indicates prts 1 thrugh 16 n the Switch. Yu cannt change this parameter. Yu can use the All rw value in the Prt clumn t apply Admin Status, Mde, Jumb, Flw Cntrl, EAP, BPDU settings t all prts at the same time. Trunk - This parameter indicates the trunk grup number. A number in this clumn indicates that the prt has been added t a trunk using static r dynamic 802.3ad LACP link aggregatin. 20

25 Type - This parameter indicates the prt type. On the Switch, the prt type is 1000TX fr 10/100/1000Base-T twisted-pair prts (1 thrugh 14, 15R and 16R) and 100FX r 1000TX fr the SFP prts (15 and 16) fr cpper r fiber SFP type. Link Status - This parameter indicates the status f the link between the prt and the end nde cnnected t the prt. The pssible values are: Up -This parameter indicates a valid link exists between the prt and the end nde. Dwn -This parameter indicates the prt and the end nde have nt established a valid link. Admin. Status: This parameter indicates the perating status f the prt. Yu can use this parameter t enable r disable a prt. Yu may want t disable a prt and prevent packets frm being frwarded if a prblem ccurs with the nde r cable cnnected t the prt. Yu can enable the prt t resume nrmal peratin after the prblem has been fixed. Yu can als disable an unused prt t secure it frm unauthrized cnnectins. The pssible values are: Ignre -This parameter applies t the All rw nly and indicates that the Admin. Status field must be set individually fr each prt. Enabled - This parameter indicates the prt is able t send and receive Ethernet frames. Disabled - This parameter indicates the prt is nt able t send and receive Ethernet frames. Mde: This parameter indicates the speed and duplex mde settings fr the prt. Yu can use this parameter t set the speed and duplex mde f a prt. The pssible settings are: Ignre -This parameter indicates that the All setting des nt apply t the Mde field. In ther wrds, each prt is set individually. Aut -This parameter indicates the prt is using Aut-Negtiatin t set the perating speed and duplex mde. The actual perating speed and duplex mde f the prt are displayed in parentheses (fr example, 1000/F fr 1000 Mbps full duplex mde) after a prt establishes a link with an end nde. Aut (1000F) -This parameter indicates the prt is cnfigured fr 1000Mbps peratin in Aut-Negtiatin mde. 1000/Full -This parameter indicates the prt is cnfigured fr 1000Mbps peratin in full-duplex mde. 100/Full -This parameter indicates the prt is cnfigured fr 100Mbps peratin in full-duplex mde. 10/Full -This parameter indicates the prt is cnfigured fr 10Mbps peratin in full-duplex mde. 1000/Half -This parameter indicates the prt is cnfigured fr 1000Mbps peratin in half-duplex mde. 100/Half -This parameter indicates the prt is cnfigured fr 100Mbps peratin in half-duplex mde. 10/Half -This parameter indicates the prt is cnfigured fr 10Mbps peratin in half-duplex mde. Nte: When selecting a Mde setting, the fllwing pints apply: When a twisted-pair prt is set t Aut-Negtiatin, the end nde shuld als be set t Aut-Negtiatin t prevent a duplex mde mismatch. A switch prt using Aut-Negtiatin defaults t half-duplex if it detects that the end nde is nt using Aut-Negtiatin. This can result in a mismatch if the end nde is perating at a fixed duplex mde f full-duplex. T avid this prblem when cnnecting an end nde with a fixed duplex mde f full-duplex t a switch prt, disable Aut-Negtiatin n the prt and set the prt s speed and duplex mde manually. The nly valid setting fr the SFP prts is Aut-Negtiatin. Flw Ctrl: Flw Cntrl, This parameter reflects the current flw cntrl setting n the prt. The switch uses a special pause packet t ntify the end nde t stp transmitting fr a specified perid f time. The pssible values are: Ignre - This parameter indicates that the All setting des nt apply t the Flw Cntrl field. In ther wrds, each prt is set individually. Enabled - This parameter indicates that the prt is permitted t use flw cntrl. Disabled - This parameter indicates that the prt is nt permitted t use flw cntrl. 21

26 EAP: This parameter reflects the current Extensible Authenticatin Prtcl (EAP) setting n the prt. The pssible values are: Ignre - This parameter indicates that the All setting des nt apply t the EAP field. In ther wrds, each prt is set individually. Enabled - This parameter indicates that the prt is able t send and receive EAP packets. Disabled - This parameter indicates that the prt is disabled and is nt able t send r receive EAP packets. BPDU: This parameter reflects the current BPDU pass thrugh setting n the prt. The pssible values are: Ignre - This parameter indicates that the All setting des nt apply t the BPDU field. In ther wrds, each prt is set individually. Enabled - This parameter indicates that the switch will pass BPDU frames thrugh the switch and bradcast them thrugh all ther prts. Disabled - This parameter indicates that the switch will nt pass BPDU frames thrugh the switch, With RSTP r STP enabled, the switch will receive BPDU frames and prcess them accrding t the spanning tree prtcl. Nte: When the BPDU pass thrugh setting is enabled, the Spanning Tree functin cannt be enabled and vice versa. One functin will need t be disabled t use the ther. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Spanning Tree (STP, RSTP, MSTP) Cnfigure Spanning Tree Prtcl settings Bridge > Spanning Tree > Prtcl Settings Spanning Tree Prtcl (STP) prvides netwrk tplgy fr any arrangement f bridges/switches. STP als prvides a single path between end statins n a netwrk, eliminating lps. Lps ccur when alternate rutes exist between hsts. Lps in an extended netwrk can cause bridges t frward traffic indefinitely, resulting in increased traffic and reducing netwrk efficiency. Nte: Yu will need t disable the BPDU pass thrugh feature in rder t use Spanning Tree. BPDU pass thrugh can be fund under Physical Interface > BPDU clumn. 2. Click n Bridge. 3. Review the settings. Click Apply t save changes. Glbal STP Status: Select the STP state n the device. The pssible field values are: Disable Disables STP n the device. This is the default value. Enable Enables STP n the device. Prtcl Versin: Specifies the Spanning Tree Prtcl (STP) mde t enable n the switch. The pssible field values are: STP Enables STP 802.1d n the device. RSTP Enables Rapid STP 802.1w n the device. This is the default value. MSTP Enables Multiple STP 802.1s n the device. Bridge Pririty: The Bridge Pririty has a range 0 t in increments f T make this easier fr yu, the Web Management Utility divides the range int increments. Yu specify the increment that represents the desired bridge pririty value. Maximum Age: The Maximum Age defines the amunt f time a prt will wait fr STP/RSTP infrmatin. MSTP uses this parameter when interacting with STP/RSTP dmains n the bundary prts. Its range is 6-40 secnds Hell Time: The Hell Time is frequency with which the rt bridge sends ut a BPDU. 22

27 Frward Delay: The Frward Delay defines the time that the bridge spends in the listening and learning states. Its range is 4-30 secnds. Transmit Hld Cunt: The Transmit Hld Cunt specifies the maximum number f BPDUs that the bridge can send per secnd. Its range is Max Hp Cunt: The Max Hp Cunt is a parameter set in a BPDU packet when it riginates. It is decremented by 1each time it is retransmitted by the next bridge. When the Hp Cunt value reaches zer, the bridge drps the BPDU packet. Its range is 6-40 hps. Cnfigure Spanning Tree Prtcl prt settings Bridge > Spanning Tree > Prt Settings 2. Click n Bridge, click n Spanning Tree, and click n Prt Settings. 3. Review the settings. Fr each entry, click Apply t save changes. STP Status: Indicates if spanning tree prtcl is active r nt n the prt. Select ne f the fllwing chices frm the pull-dwn menu: Enable - The spanning tree prtcl is enabled n the prt. Disabled - The spanning tree prtcl is disabled n the prt. Enable Disable Nte: BPDU pass thrugh must be disabled fr all prts under Physical interface fr STP can be enabled. Pririty: Indicates the prt pririty. If tw paths have the same prt cst, the bridges must select a preferred path. In sme instances this can invlve the use f the prt pririty parameter which is used as a tie breaker when tw paths have the same cst. The range fr prt pririty is 0 t 240. As with bridge pririty, this range is brken int increments, in this case multiples f 16. T select a prt pririty fr a prt, yu enter the desired value. Table 1 lists the values that are valid. Valid Prt Pririty Values In additin, this sectin als displays the spanning tree rt infrmatin. Step Prt Pririty Admin Cst (0 = Aut): The administratively assigned value fr the cntributin f this prt t the path cst f paths twards the spanning tree rt. Writing a value f '0' assigns the autmatically calculated default Path Cst value t the prt. If the default Path Cst is being used, this bject returns '0' when read. External Cst: This defines a metric that indicates the relative cst f frwarding packets t the specified prt list. Prt cst can be set autmatically r as a metric value. Define a value between 1 and t determine the external cst. The lwer the number, the greater the prbability the prt 23

28 will be chsen t frward packets. The default prt cst: 100Mbps prt = Gigabit prt = State Displays the current prt spanning tree state. Blcking - A blcking state des nt allw netwrk traffic t be sent r received n a the prt except fr BPDU data. A prt with a higher path cst t the rt bridge than anther n the switch causes a switching lp and is placed in the blcking state by the Spanning Tree algrithm. The prt s state may change t the frwarding state if the ther links in use fail and the Spanning Tree algrithm determines the prt may transitin t the frwarding state. Listening - This state ccurs n a prt during the cnvergence prcess. The prt in the listening state prcesses BPDUs and awaits new infrmatin that wuld cause the prt t return t the blcking state. Learning - While the prt des nt yet frward frames (packets), in this state the prt des learn surce addresses frm frames received and adds them t the filtering (switching) database. Frwarding - A prt that bth receives and sends data. This indicates nrmal peratin. STP cntinues t mnitr the prt fr incming BPDUs that indicate the prt shuld return t the blcking state t prevent a lp. Disabled - This state is nt strictly part f STP. Hwever, a netwrk administratr can manually disable a prt. Edge: Indicates if a prt is cnnected t an edge device in the netwrk tplgy r nt. Selecting the Frcetrue parameter designates the prt as an edge prt. Edge prts cannt create lps, hwever an edge prt can lse edge prt status if a tplgy change creates a ptential fr a lp. An edge prt nrmally shuld nt receive BPDU packets. If a BPDU packet is received, it autmatically lses edge prt status. Selecting the Frcefalse parameter indicates that the prt des nt have edge prt status. Selecting the Aut parameter indicates that the prt have edge prt status r nt have edge prt status autmatically. The default setting fr this parameter is Aut. P2P: Chsing the Frcetrue parameter indicates a pint-t-pint (P2P) shared link. P2P prts are similar t edge prts hwever they are restricted in that a P2P prt must perate in full-duplex. Like edge prts, P2P prts transitin t a frwarding state rapidly thus benefiting frm RSTP. A P2P value f Frcefalse indicates that the prt cannt have P2P status. Aut allws the prt t have P2P status whenever pssible and perate as if the P2P status were true. If the prt cannt maintain this status, (fr example if the prt is frced t half-duplex peratin) the P2P status changes t perate as if the P2P value were Frcefalse. The default setting fr this parameter is Aut. Restricted Rle: Tggle between True and False t set the restricted rle state f the packet. If set t True, the prt will never be selected t be the Rt prt. The default value is False. Restricted TCN: Tggle between True and False t set the restricted TCN f the packet. Tplgy Change Ntificatin (TCN) is a BPDU that a bridge sends ut t its rt prt t signal a tplgy change. If set t True, it stps the prt frm prpagating received TCN and t ther prts. The default value is False. Migrate: Indicates if the prt is cnfigured t accept RSTP and STP BPDUs. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 24

29 Cnfigure Spanning Tree Prtcl MST settings (MSTP) Bridge > Spanning Tree > MST Settings 2. Click n Bridge, click n Spanning Tree, and click n MST Settings. 3. Review the settings. Fr each sectin, click Apply t save changes. MST Cnfiguratin Identificatin Settings Cnfiguratin Name: A cnfigured name set n the switch t uniquely identify the MSTI (Multiple Spanning Tree Instance). If a cnfiguratin name is nt set, this field shws the MAC address f the device running MSTP. Revisin Level ( ): This value, tgether with the cnfiguratin name, and identical vlans mapped fr STP instance IDs identifies the MST regin cnfigured n the switch. MST Table: Make changes t the table entry, and click Apply mdify r click Delete t remve the ID entry. 4. Click Save Settings t Flash (menu). MST Instance Settings MSTI ID (1-31): Displays the MSTI ID assciated with the VID List. The pssible field range is VID List (1-4094): Displays the VID List. Click Add t add int MST Table belw. Pririty: Enter the new pririty in the Pririty field. The user may set a pririty value between Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 25

30 View yur Spanning Tree Prtcl Instance Infrmatin (MSTP) Bridge > Spanning Tree > MST Settings Cnfigure Spanning Tree Prtcl MST Prt Settings (MSTP) Bridge > Spanning Tree > MST Settings 2. Click n Bridge, click n Spanning Tree, and click n Instance Infrmatin. 2. Click n Bridge, click n Spanning Tree, and click n MST Prt Settings. 3. View yur MSTP instance infrmatin. MSTI ID Specifies the instance t which the VLAN is assigned. Internal Rt Cst Rt Prt Indicates the selected instance s rt prt. Reginal Rt Bridge Designated Bridge Displays the ID f the bridge that cnnects the link r shared LAN t the rt. Instance Pririty Specifies the selected spanning tree instance device pririty. The field range is The field default is Review the settings. Fr each entry, click Apply t save changes. Select MST Prt Click the drp-dwn t select which MST prt t cnfigure. MST Prt Inf - The MST Prt Infrmatin page prvides user t cnfigure the MSTP Interface settings. Admin Path Cst (0 = Aut) - This is the prt cst used by MSTP when calculating path cst t the rt bridge. Pririty - This is the prt pririty used by MSTP in calculating path csts when tw prts n the switch have the same prt cst. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 26

31 Trunk Cnfig (Link Aggregatin) Cnfigure prt trunk settings Bridge > Trunk Cnfig > Trunking The trunking functin enables the cascading f tw r mre prts fr a cmbined larger ttal bandwidth. Up t 4 trunk grups may be created, each supprting up t 8 prts. Add a trunking Name and select the prts t be trunked tgether, and click Apply t activate the selected trunking grups. Imprtant Nte: D nt cnnect the cables f a prt trunk t the prts n the switch until yu have cnfigured the prts n bth the switch and the end ndes. Cnnecting the cables prir t cnfiguring the prts can create lps in yur netwrk tplgy. Lps can result in bradcast strms which can severely limited the effective bandwidth f yur netwrk. Click the drp-dwn list and select ne f the fllwing ptins. Active - The specific aggregatr will bradcast and respnd t LACPDU (LACP Data Unit) packets. This setting enables the dynamic LACP feature fr the trunk. Passive - The specific aggregatr will nt bradcast LACPDU packets, but it will respnd t them. This setting disables the LACP feature fr the trunk Manual - Enables static prt trunking and disables the LACP feature fr the trunk. (Static link aggregatin). Disable - Disables the static prt trunk and disables the LACP feature. 2. Click n Bridge, click n Trunk Cnfig, and click n Trunking. 4. Click Save Settings t Flash (menu). 3. Review the settings. Fr each trunk grup, click Apply t save changes. Fr each Trunk ID/Grup, check the prt numbers t add fr each trunk grup. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 27

32 View yur trunk grup status infrmatin Bridge > Trunk Cnfig > LACP Grup Status 2. Click n Bridge, click n Trunk Cnfig, and click n LACP Grup Status. Cnfigure yur prt pririty Bridge > Trunk Cnfig > Prt Pririty 2. Click n Bridge, click n Trunk Cnfig, and click n Prt Pririty. 3. View yur trunk grup status infrmatin. System Pririty - Preassigned setting that cannt be mdified. This value applies t the switch. System ID - MAC address value assigned t the individual switch. This value cannt be mdified. Grup: # The ID number f the trunk (link aggregatin grup). 3. Review the settings. Click Apply t save changes. T assign a prt higher pririty within a trunk grup, find the prt number and in the pririty clumn, enter a pririty value (65535 being the highest pririty). 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 28

33 Mirrring Cnfigure prt mirrr settings Bridge > Mirrring Prt mirrring allws yu t mnitr the ingress and egress traffic n a prt by having the traffic cpied t anther prt where a cmputer r device can be set up t capture the data fr mnitring and trubleshting purpses. T cpy data transmitted n specific prt, check the prt number under the Egress Prt sectin r yu culd click All t cpy data transmitted n all prts. 2. Click n Bridge, click n Trunk Cnfig, and click n Prt Pririty. 3. Review the settings. Click Apply t save changes. Status Click the drp-dwn and list and select ne f the fllwing ptins: Enable - This parameter activates the Prt Mirrring feature and the rest f the cnfiguratin parameters becme active n the page. Disable - This parameter de-activates the Prt Mirrring feature and the rest f the cnfiguratin parameters becme inactive n the page. Mirrr Target Prt Click the drp-dwn and list and select the prt t send the cpied ingress/egress packets/data. (e.g. Cmputer r device with packet capture r data analysis prgram.) 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Check the prt t mnitr r cpy inrmatin frm. (Surce) T cpy data received n a specific prt, check the prt number(s) under the Ingress Prt sectin r yu culd click All t cpy data received n all prts. 29

34 Lpback Detectin Enable lpback detectin Bridge > Lpback Detectin The lpback detectin feature allws the switch t detect and prevent disruptin frm lps that ccur n uplink r dwnlink switches directly cnnected t yur switch. 2. Click n Bridge and click n Lpback Detectin. 3. Review the settings. In the Lpback Detectin table, select ne f the Lpback Detectin State chices frm the pull dwn menu: Ignre: This parameter indicates that the setting in the All rw d nt apply t the Lpback Detectin State field. In ther wrds, each prt is set individually. Enabled: This selectin enables the Lpback Detectin feature fr each prt. This state must be enabled alng with the State field at the tp f the page befre this feature can be active n the selected prt. Disabled: This selectin disables the Lpback Detectin feature n the selected prt. Nte: In the All rw when yu select Enable r Disable instead f Ignre, the selectin applies t all f the Switch prts. Next t each entry mdified, under the Actin clumn, click Apply t save the changes. State Select Enabled t enable the lpback detectin feature. Select Disabled t disabled the lpback detectin feature. Interval Defines the interval yur switch will check fr lps. Recver Time Defines the time perid when cnnectivity will be restred t a prt where a lp was previusly detected and blcked. Click Apply t save changes. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 30

35 Static Unicast Add static unicast entries t the switch Bridge > Static Unicast In this sectin, yu can add static unicast entries t the switch cnfiguratin. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. Yu can als click Delete All t delete all the entries in the list. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 2. Click n Bridge and click n Static Unicast. 3. Review the settings Q VLAN Enter the VLAN ID where the MAC address will reside. Nte: By default, all switch prts are part f the default VLAN, VLAN ID 1. MAC Address Enter the MAC address f the device t add. Prt Member Select the prt where the MAC address will reside. Click Apply t add the Static Unicast entry t the list. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 31

36 Static Multicast Add static multicast entries t the switch Bridge > Static Multicast In this sectin, yu can add static multicast entries t the switch cnfiguratin. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 2. Click n Bridge and click n Static Multicast. 3. Review the settings. 4. Click Save Settings t Flash (menu) Q VLAN Enter the VLAN ID where the multicast grup MAC address will reside. Nte: By default, all switch prts are part f the default VLAN, VLAN ID 1. MAC Address Enter the multicast grup MAC address. Grup Member Check the prt(s) where the MAC address will reside. Nte: Yu can click All t select all prts. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Click Apply t add the Static Multicast Grup entry t the list. 32

37 IGMP Snping Cnfigure IGMP Snping Settings Bridge > IGMP Snping > IGMP Snping Settings The table belw displays the static multicast address grups defined in yur switch fr reference and can be mdified n under Bridge > Static Multicast r dynamically updated with the active multicast address grups. 2. Click n Bridge, click n IGMP Snping, and click n IGMP Snping. 3. Review the settings. Click Apply t save the settings. Status Click the drp-dwn list and select Enabled t enable the IGMP snping feature r Disabled t disable the feature. Age-Out Timer Enter the amunt f time in secnds that yu want yur switch t wait befre it purges an inactive dynamic MAC address. Querier Status Click the drp-dwn list and select Enabled t enable the Querier Status r Disabled t disable this feature. Querier Interval Enter the amunt f time yu want yur switch t send IGMP queries. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Cnfigure IGMP Snping Ruter Prts Bridge > IGMP Snping > IGMP Snping Ruter Prt 2. Click n Bridge and click n IGMP Snping. 3. Review the settings. Click Apply t save the settings. In the VLAN ID ruter prt list, yu can cnfigure yur Static and Dynamic Ruter prts. IGMP Snping Ruter Prt cnfigured manually is a Static Ruter Prt, and a Dynamic Ruter Prt is dynamically cnfigured by the Switch when a query cntrl message is received. 33

38 T mdify an entry, click Mdify t add statically add ruter prts. MLD Snping Cnfigure MLD Snping Settings Bridge > MLD Snping > MLD Snping Settings Check the static ruter prts t add and click Apply t save the settings. Nte: Yu can click n All t add all prts. Clicking Restre will restre the static ruter prt settings t default. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 2. Click n Bridge, click n MLD Snping, and click n MLD Snping Settings. 3. Review the settings. Click Apply t save the settings. State Click the drp-dwn list and select Enabled t enable the MLD snping feature r Disabled t disable the feature n the specific VLAN. Querier Status Click the drp-dwn list and select Enabled t enable the Querier Status r Disabled t disable this feature. Querier Versin Click the drp-dwn list and select the MLD Querier versin (MLDv1 r MLDv2). Fast Leave - Click the drp-dwn list and select Enabled t enable the Fast Leave r Disabled t disable this feature. MLD fast-leave allws a grup entry t be remved immediately frm the receiver as sn as a dne message is received, as lng as the receiver is the nly ne n the segment that is subscribed t a grup. This minimizes the leave latency f grup memberships n an interface, as the device des nt send grup-specific queries. As a result, the grup entry is remved frm the multicast frwarding table as sn as a grup dne (leave) message is received. Querier Timers Click Edit t mdify the default querier timer setttings. Ruter Prts Settings Click Edit t specify the static ruter prts multicast server will be cnnected t n the switch. Multicast Entry Table Click View t view the current multicast MLD entries. Actin Click Apply t save the changes. 34

39 Bandwidth Cntrl Cnfigure Strm Cntrl Bridge > Bandwidth Cntrl > Strm Cntrl This sectin allws yu t cnfigure the DLF (Destinatin Lkup Failure), bradcast, and multicast strm settings fr each switch prt. 4. Click Save Settings t Flash (menu). 2. Click n Bridge, click n Bandwidth Cntrl, and click n Strm Cntrl. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. View MLD Hsts Bridge > MLD Snping > MLD Hst Table This page allws yu t view the current multicast MLD hsts and grup membership. 3. Review the settings fr each prt. Click Apply t save the settings. DLF (Destinatin Lkup Failure) Click the drp-dwn list and select Enabled t enable DLF strm cntrl. Bradcast Click the drp-dwn list and select Enabled t enable bradcast strm cntrl. Multicast Click the drp-dwn list and select Enabled t enable multicast strm cntrl. Threshld Enter the pps (packets per secnd) threshld. Nte: Mdifying settings in the rw marked All, will apply the settings t all prts. 2. Click n Bridge, click n IGMP Snping, and click n MLD Hst Table. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 35

40 Set Ingress Rate Limiting Bridge > Bandwidth Cntrl > Ingress Rate Limiting This sectin allws yu t set the ingress (receive) rate fr each switch prt. Set Egress Rate Limiting Bridge > Bandwidth Cntrl > Egress Rate Limiting This sectin allws yu t set the egress (transmit) rate fr each switch prt. 2. Click n Bridge, click n Bandwidth Cntrl, and click n Ingress Rate Limiting. 2. Click n Bridge, click n Bandwidth Cntrl, and click n Egress Rate Limiting. 3. Review the settings fr each prt. Click Apply t save the settings. Bandwidth Enter the ingress rate limit value. Status Click the drp-dwn list and select Enabled t enable ingress rate limiting r select Disabled t disable ingress rate limiting. Nte: Mdifying settings in the rw marked All, will apply the settings t all prts. 3. Review the settings fr each prt. Click Apply t save the settings. Bandwidth Enter the egress rate limit value. Status Click the drp-dwn list and select Enabled t enable egress rate limiting r select Disabled t disable egress rate limiting. Nte: Mdifying settings in the rw marked All, will apply the settings t all prts. 4. Click Save Settings t Flash (menu). 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 36

41 VLAN Add, mdify, and remve VLANs Bridge > VLAN > Tagged VLAN A VLAN is a grup f prts that can be anywhere in the netwrk, but cmmunicate as thugh they were in the same area. VLANs can be easily rganized t reflect department grups (such as R&D, Marketing), usage grups (such as ), r multicast grups (multimedia applicatins such as vide cnferencing), and therefre help t simplify netwrk management by allwing users t mve devices t a new VLAN withut having t change any physical cnnectins. Tagged/Untagged/Nt Member VLAN Prts On a prt, the tag infrmatin within a frame is examined when it is received t determine if the frame is qualified as a member f a specific tagged VLAN. If it is, it is eligible t be switched t ther member prts f the same VLAN. If it is determined that the frame s tag des nt cnfrm t the tagged VLAN, the frame is discarded. Since these VLAN prts are VLAN aware and able t read VLAN VID tagged infrmatin n a frame and frward t the apprpriate VLAN, typically tagged VLAN prts are used fr uplink and dwnlink t ther switches t carry and frward traffic fr multiple VLANs acrss multiple switches. Tagged VLAN prts can be included as members fr multiple VLANs. Cmputers and ther edge devices are nt typically cnnected t tagged VLAN prts unless the netwrk interface n these device can be enabled t be VLAN aware. Select the tagged VLAN prts t add t the new VLAN. 2. Click n Bridge, click n VLAN, and click n Tagged VLAN. 3. Review the settings. VLAN ID Enter the VLAN ID fr the new VLAN. VLAN Name Enter the VLAN name. Management VLAN Click the drp-dwn list and select Enabled t allw access t the switch management page thrugh the new VLAN. If yu want t restrict management access thrugh this VLAN, select Disabled. Nte: By default, the default VLAN VID 1 is set as the Management VLAN. Untagged VLAN prts are used t cnnect edge devices (VLAN unaware) such as cmputers, laptps, and printers t a specified VLAN. It is required t mdify the Prt VID settings accrdingly fr untagged VLAN prts under Bridge > VLAN > Prt Settings. (e.g. If the VID fr the VLAN is 2, the PVID shuld als be set t 2) Select the untagged VLAN prts t add t the new VLAN. Select the nt member prts t restrict frm the new VLAN. In the sectins Static Tagged, Static Untagged, and Nt Member, yu can add the type f VLAN prts t add t the new VLAN (Tagged r Untagged) and assign prts that are nt members (Frbidden) f the new VLAN. 37

42 Click Apply t save the new VLAN t the table. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. Nte: The default VLAN VID1 cannt be remved. Cnfigure VLAN Prt Settings Bridge > VLAN > Prt Settings In this sectin, yu can mdify the prt VID settings, acceptable frame types, and ingress filtering. 2. Click n Bridge, click n VLAN, and click n Prt Settings. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 3. Review the settings fr each prt. Click Apply t save settings. PVID Enter the prt VLAN ID. Nte: Required fr untagged VLAN prts. Acceptable Frame Type Click the drp-dwn list and select which type f frames can be accepted. All The prt can accept all frame types. Tagged The prt can accept tagged frames nly. Untagged frames are discarded. Untagged & Pririty Tagged The prt can accept untagged frames and frames with tagged pririty infrmatin nly such as 802.1p. Ingress Filtering Click the drp-dwn list and select Enabled t enable ingress filtering r Disabled t disable ingress filtering. Nte: Mdifying settings in the rw marked All, will apply the settings t all prts. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. 38

43 Cnfigure the VLAN Frwarding Table Mde Bridge > VLAN > Frwarding Table Mde This sectin allws yu t cnfigure yur switch t standard 802.1Q VLAN mde (IVL) r Asymmetric VLAN mde (SVL). Asymmetric VLAN allws the cnfiguratin f verlapping untagged VLAN prts in rder t create VLAN grups. It is recmmended t use the standard 802.1Q VLAN mde when pssible. IVL Independent VLAN Learning SVL Shared VLAN Learning Please nte the fllwing when switching between frwarding table mdes: FDB (Frwarding Database) will be cleared. Static Unicast Address entries will be cleared. Static Multicast Address entries will be cleared X authenticated recrds will be cleared. IGMP Snping multicast grup addresses will be cleared When using SVL mde, Vice VLAN will nt be supprted. When using SVL mde, the VID field n 802.1Q-VLAN mde will be displayed as "N/A". View the switch VLAN dynamic frwarding table Bridge > VLAN > Dynamic Frwarding Table This sectin allws yu t view the VLAN frwarding table with dynamically generated frwarding table entries as devices mre devices are cnnected t yur switch. 2. Click n Bridge, click n VLAN, and click n Dynamic Frwarding Table. 3. By default, frwarding entries fr all prts are listed. Yu can click the Prt drpdwn list t select a specific prt t view nly the frwarding entries fr the selected prt. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 2. Click n Bridge, click n VLAN, and click n Frwarding Table Mde. 3. Click the learning mde drp-dwn list t select the frwarding table mde and click Apply t save settings. Nte: The default mde is IVL. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. 39

44 Create a private VLAN Bridge > VLAN > Private VLAN The private VLAN feature allws yu t create a mre secure VLAN that is cmpletely islated t it s members and cannt cmmunicate with ther VLANs. A private VLAN partitins the Layer 2 bradcast dmain f a VLAN int subdmains, allwing yu t islate the prts n the switch frm each ther. A subdmain cnsists f a primary VLAN and ne r mre secndary VLANs. All VLANs in a private VLAN dmain share the same primary VLAN. The secndary VLAN ID differentiates ne subdmain frm anther. The secndary VLANs may either be islated VLANs r cmmunity VLANs. A hst n an islated VLAN can nly cmmunicate with the assciated prmiscuus prt in its primary VLAN. Hsts n cmmunity VLANs can cmmunicate amng themselves and with their assciated prmiscuus prt but nt with prts in ther cmmunity VLANs. The fllwing guidelines apply when cnfiguring private VLANs: The default VLAN 1 cannt be a private VLAN. The management VLAN 4095 cannt be a private VLAN. The management prt cannt be a member f a private VLAN.IGMP Snping must be disabled n islated VLANs. Each secndary prt's (islated prt and cmmunity prts) PVID must match its crrespnding secndary VLAN ID. Prts within a secndary VLAN cannt be members f ther VLANs. All VLANs that make up the private VLAN must belng t the same Spanning Tree Grup. Click n the Frwarding Prts rati buttn that applies t yur cnfiguratin. Click Apply. 2. Click n Bridge, click n VLAN, and click n Private VLAN. 3. T cnfigure Private VLAN Settings, perfrm the fllwing prcedure: Select Private VLAN status frm the Status radi buttn chices that yu want t change. Enable: Enable Private VLAN settings. Disable: Disable Private VLAN settings. Press Apply fr changes t take effect. Set the Surce Prt t ne f the fllwing chices frm the pull-dwn menu: All, Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 40

45 View the current VLAN database Bridge > VLAN > VLAN Database 2. Click n Bridge, click n VLAN, and click n Private VLAN. GVRP (GARP VLAN Registratin Prtcl) The GARP VLAN Registratin Prtcl (GVRP) allws netwrk devices t share VLAN infrmatin and t use the infrmatin t mdify existing VLANs r create new VLANs, autmatically. This makes it easier t manage VLANs that span mre than ne switch. Withut GVRP, yu have t manually cnfigure yur switches t ensure that the varius parts f the VLANs can cmmunicate with each ther acrss the different switches. With GVRP, which is an applicatin f the Generic Attribute Registratin Prtcl (GARP), this is dne fr yu autmatically. 3. View the current VLAN database in the table. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. Enable GVRP Bridge > GVRP > GVRP Glbal Settings 2. Click n Bridge, click n GVRP and click n GVRP Glbal Settings. 3. Click the GVRP Status drp-dwn list and select Enabled t activate GVRP r disabled t deactivate GVRP. Click Apply t save the settings. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 41

46 Set GVRP prt settings Bridge > GVRP > Prt Settings This sectin will allw yu t select which prts will have GVRP enabled r will be restricted frm using GVRP. 2. Click n Bridge, click n GVRP and click n Prt Settings. 3. Review the settings fr each prt. Click Apply t save the settings. Prt - This parameter displays the prts n the switch. Dynamic Vlan Status - This parameter defines the GVRP status f the prt. Frm the Dynamic Vlan Status field, select ne f the fllwing chices frm the pull-dwn menu: Ignre - This parameter indicates that the setting in the All rw des nt apply t the Dynamic Vlan Status field. In ther wrds, each prt is set individually. Enable - The Dynamic Vlan is activated fr the prt rw selected. Disable - The Dynamic Vlan is de-active fr the prt rw selected. Restricted VLAN Registratin - This parameter cntrls if the VLAN registratin n the prt is restricted r nt. Ignre - This parameter indicates that the setting in the All rw des nt apply t the Restricted VLAN Registratin field. In ther wrds, each prt is set individually. Enable - The Restricted VLAN Registratin is active fr the prt rw selected. Disable - The Restricted VLAN Registratin is de-active fr the prt rw selected. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 42

47 Set GVRP time settings Bridge > GVRP > Time Settings This sectin will allw yu t define the GARP Jin, Leave, and Leave All Time fr each prt. Nte: The GARPLeaveTimer must be greater than (GARPJinTimer x2 + 10) and the GARPLeaveAllTimer must be greater than (GARPLeaveTimer + 10). The acceptable input values are multiples f 10. If yu try t enter a value that is nt a multiple f 10, the value is runded dwn 4. Click Save Settings t Flash (menu). 2. Click n Bridge, click n GVRP and click n Time Settings. 3. Review the settings fr each prt. Click Apply t save the settings. Prt - This parameter displays the prts n the switch. JinTime - This parameter is the GARP Jin Timer. Its range is milli-secnds. LeaveTime - This parameter is the GARP Leave Timer. Its range is milli-secnds. This timer must be set in relatin t the GVRP Jin Timer accrding t the fllwing equatin: GARPLeaveTimer >= (GARPJinTimer X 2) + 10 GarpLeaveAllTime - This parameter is the GARP Leave Timer. Its range is milli-secnds. This timer must be set in relatin t the GVRP Leave Timer accrding t the fllwing equatin: GARPLeaveAllTimer > (GARPLeaveTimer + 10) 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Nte: T ensure cmpatibility between netwrk devices, yu need t cnfigure the same values fr the GARP Jin Timer, GARP Leave Timer, and GARP Leave All Timer n all participating GVRP devices in yur netwrk. 43

48 QS (Quality f Service) When a prt n an Ethernet switch becmes versubscribed, its egress queues cntain mre packets than the prt can handle in a timely manner. In this situatin, the prt may be frced t delay the transmissin f sme packets, resulting in the delay f packets reaching their destinatins. A prt may be frced t delay transmissin f packets while it handles ther traffic, and, in sme situatins, sme packets destined t be frwarded t an versubscribed prt frm ther switch prts may be discarded. Minr delays are ften f n cnsequence t a netwrk r its perfrmance. But there are applicatins, referred t as delay r time sensitive applicatins, which can be impacted by packet delays. Vice transmissin and vide cnferences are tw examples. If packets carrying data in either f these cases are delayed frm reaching their destinatin, the audi r vide quality may suffer. This is where Cst f Service (CS) is f value. It allws yu t manage the flw f traffic thrugh a switch by having the switch prts give higher pririty t sme packets, such as delay sensitive traffic, ver ther packets. This is referred t as priritizing traffic. Nte: Yu will need t disable the Jumb Frame feature in rder t use QS. Jumb Frame setting can be fund under Physical Interface > Jumb Frame Settings. Fr each Traffic Class whse queue yu want t change, click n the CS Table (Lw, Medium, High, r Highest) radi buttn that applies t yur cnfiguratin. After yu have cmpleted this mapping prcess, select Enabled in the QS Status field. Set CS pririty settings Bridge > QS > CS Nte: Befre mapping the CS pririties and the egress queues, yu must disable the Jumb frame parameter n each prt. When Jumb frames are enabled, COS cannt be enabled. 4. Click Save Settings t Flash (menu). 2. Click n Bridge, click n QS and click n CS. 3. Review the settings. Click Apply t save the settings. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 44

49 Set Prt Pririty Bridge > QS > Prt Pririty The Prt Pririty values are assigned t an untagged frame at ingress fr internal prcessing in the switch. This prcedure explains hw t change the default mappings f prt pririties t the User Pririty. This is set at the switch level. Yu cannt set this at the per-prt level. T change the prt pririty mappings, perfrm the fllwing prcedure. Set DSCP (Differentiated Services Cde Pint) Class Mapping settings Bridge > QS > DSCP If yu chse t use the DSCP tags in yur Access Cntrl plicy cnfiguratin, each DSCP value (0-63) that is relevant t yur cnfiguratin needs t be mapped t ne f the fur egress queues(lw, Medium, High, r Highest). The default queue fr all DSCP values is 0.T assign the queue mappings t the DSCP values, perfrm the fllwing prcedure. 2. Click n Bridge, click n QS and click n Prt Pririty. 2. Click n Bridge, click n QS and click n DSCP. 3. Fr each prt whse pririty yu want t change, select a pririty (0-7) in the User Pririty clumn. Click Apply t save the settings. 3. Fr each DSCP In value that is relevant t yur cnfiguratin, select a queue (Lw, Medium, High, r Highest) in the Queue clumn. Select Enabled in the DSCP Mapping drp-dwn list. Click Apply t save the settings. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 45

50 Set the Scheduling Algrithm Bridge > QS > Scheduling Algrithm 2. Click n Bridge, click n QS and click n Scheduling Algrithm. 3. Review the settings. Click Apply t save the settings. Strict Pririty - The prt transmits all packets ut f higher pririty queues befre transmitting any frm the lwer pririty queues. WRR (Weighted RundRbin) - The prt transmits a set number f packets frm each queue, in a rund rbin fashin, s that each has a chance t transmit traffic. 4. Click Save Settings t Flash (menu). 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 46

51 Cnfigure the IPv6 Traffic Class Pririty Settings Bridge > QS > IPv6 Traffic Class Pririty Settings In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. Yu can als click Delete All t delete all f the entries in the table. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 2. Click n Bridge, click n QS and click n IPv6 Traffic Class Pririty Settings. 3. Review the settings. IPv6 Traffic Class Glbal Settings: Select Enable r Disable. Click Apply t save the settings. IPv6 Traffic Class (0-255): Specify the value f IPv6 class. Class ID: Defines the pririty assigned t the prt. The pririties are Highest, High, Medium and Lw. Click Add t add the traffic class setting entry t the table. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 47

52 SNMP Yu can manage a switch by viewing and cnfiguring the management infrmatin base (MIB) bjects n the device with the Simple Netwrk Management Prgram (SNMP). This chapter describes hw t cnfigure SNMP. A Grup Name, IP address f the switch and at least ne cmmunity string is the minimum required t manage the switch using SNMP. Set the SNMP Engine ID SNMP > Engine ID The SNMP Engine ID screen allws netwrk managers t define the SNMP Engine ID r t assign the default Engine ID t SNMP. 2. Click n SNMP and click n Engine ID. 3. Review the settings. Click Apply t save the settings. Engine ID (10-64 Hex Characters) Enter the lcal device Engine ID. The field value is a hexadecimal string. Each byte in hexadecimal character strings is tw hexadecimal digits. The Engine ID must be defined befre SNMP is enabled. Reset t Default Use the device-generated Engine ID (Reset t Default will verride any entry in the Engine ID field). Cnfigure the SNMP View Table SNMP > View Table The SNMP View table specifies the MIB bject access criteria fr each View Name. If the View Name is nt specified n this page, then it has access t all MIB bjects. Yu can specify specific areas f the MIB that can be accessed r denied based n the entries in this table. Yu can create and delete entries in the View table. 2. Click n SNMP and click n View Table. 3. Review the settings. Creating SNMP View Table Entries This prcedure explains hw t create entries in the SNMP View Table. Enter the View Name. This entry must be pre-defined n the SNMP User/Grup page. Enter the Subtree OID. Enter 1 fr the OID Mask. Enter the View Type. Chse frm the fllwing ptins, and then click Add. Included: This selectin allws the specified MIB bject t be included in the view. Excluded: This selectin blcks the view f the specified MIB bject. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 48

53 Mdifying SNMP View Table Entries If yu need t mdify an entry in the View Table page, yu must first delete the entry and then re-enter it. Deleting SNMP View Table Entries In the Actin clumn f the table, click Delete fr the View table entry that yu want t remve. Cnfigure the SNMP Grup Access Table SNMP > Grup Access Table The SNMP View Names are defined in the SNMP Grup Access table and are based n the User and Grup Names 2. Click n SNMP and click n Grup Access Table. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 3. Review the settings. Creating SNMP View Names Befre yu can create an SNMP View name, yu must define a Grup Name using the SNMP User/Grup page. Enter the Grup Name. This entry must be pre-defined n the SNMP User/Grup page. Enter the Read View Name. This name is an ptinal field. It can be up t 31 characters in length. Enter the Write View Name. This name is an ptinal field. It can be up t 31 characters in length. Enter the Ntify View Name. This name is an ptinal field. It can be up t 31 characters in length. Frm the Security Mdel pull-dwn menu, select v3. Enter the Security Level frm the pull-dwn menu. The selectin ptins are: NAuthNPriv: This selectin is the apprpriate selectin when n Auth-Prtcl r Priv-Prtcl (n encryptin) are selected n the SNMP User/Grup page. AuthNPriv: Chse this selectin when encryptin has been enabled but nly the Auth-Prtcl has a passwrd assigned and the Priv- Prtcl has been selected as nne n the SNMP User/Grup page. AuthPriv: When the Auth-Prtcl r Priv-Prtcl have been enabled, chse this selectin. Click the Add buttn. 49

54 Cnfigure the SNMP User/Grup Table SNMP > SNMP User/Grup An SNMP User Name and Grup Name definitin is the basis fr all the ther SNMP tables. Yu can create and delete View Names by fllwing the prcedures in the fllwing sectins: 2. Click n SNMP and click n SNMP User/Grup. Mdifying SNMP View Names If yu need t mdify an entry in the SNMP Grup Access page, yu must first delete the entry and then re-enter it. Deleting SNMP View Names In the Actin clumn f the table, click Delete fr the View Name that yu want t remve. Nte: The views crrespnding t the ReadOnly and ReadWrite Grup Names are default values and cannt be remved. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 3. Review the settings. Creating SNMP User and Grup Names Nte: There are n default User Names r Grup Names defined fr SNMP. Type a new User Name. Enter a name up t 31 characters in length. Type a new Grup Name. Enter a name up t 31 characters in length. Frm the SNMP Versin pull dwn menu, select v3. The encryptin check-bx becmes active. Check the encryptin check-bx. The Auth-Prtcl, Priv-Prtcl, and assciated passwrd fields becme active. Select ne f the fllwing chices fr the Auth-Prtcl field: MD5 - The MD5 authenticatin prtcl. SNMP Users are authenticated with the MD5 authenticatin prtcl after a message is received. SHA - The SHA authenticatin prtcl. Users are authenticated with the SHA authenticatin prtcl after a message is received. Enter the passwrd fr the Auth-Prtcl. Select ne f the fllwing chices fr the Priv-Prtcl field: DES - Specifies DES encryptin scrambles the SNMP data s that utside bservers are prevented frm seeing the data cntent. nne - Specifies n encryptin is applied t SNMP data. 50

55 Click Add. The new User Name and Grup Name are displayed n the SNMP User/Grup page. Cnfigure the SNMP Cmmunity Table SNMP > Cmmunity Table A cmmunity string has attributes fr cntrlling wh can use the string and what the string will allw a netwrk management statin t d n the switch. The Web Management Utility des nt prvide any default cmmunity strings. Yu must first define an SNMP User and Grup Name n the SNMP User/Grup page and then define a Cmmunity Name n the SNMP Cmmunity Table page. 2. Click n SNMP and click n SNMP User/Grup. Mdifying SNMP User and Grup Names If yu need t mdify an entry in the SNMP User/Grup page, yu must first delete the entry and then re-enter it. Deleting SNMP User and Grup Names In the Actin clumn f the table, click Delete fr the User Name and Grup Name that yu want t remve. 3. Review the settings. Create SNMP Cmmunity Settings Enter a new Cmmunity Name. A name can be up t 31 characters in length. Enter a User Name(View Plicy) that has been previusly defined. This name must match ne f the User Names displayed n the Nte: SNMP User/Grup page. If yu enter a user name that has nt been predefined n the SNMP User/Grup page, the Cmmunity entry is displayed, but the agent/manager cmmunicatin fails. Click Add. The values f the new Cmmunity Name and User Name are displayed. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 51

56 Mdify SNMP Cmmunity Settings If yu need t mdify a Cmmunity Table entry, yu must first delete the entry by using the prcedure belw and then re-enter it with the mdificatin by creating a new Cmmunity table entry. Delete SNMP Cmmunity Settings T delete a Cmmunity Name, click Delete next t the entry in the table that yu want t remve. The deleted Cmmunity Name is n lnger displayed in the Cmmunity table. N cnfirmatin message is displayed. Cnfigure the SNMP Trap Management SNMP > Trap Management A Hst IP address is used t specify a management device that needs t receive SNMP traps sent by the switch. This IP address is assciated with the SNMP Versin and a valid Cmmunity Name in the Hst table f the switch. 2. Click n SNMP and click n Trap Management. 3. Review the settings. Create Trap Hst Table Entry Use the fllwing prcedure t create a trap Hst table entry: 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Enable trap management by selecting the radi buttn next t Enabled at the tp f the page. By default, trap management is enabled. Enter the Hst IP Address fr the management device that is treceive the SNMP traps. Enter the SNMP Versin, either v1 r v2c, that is cnfigured fr the hst management device. Enter a Cmmunity Name that yu have defined previusly in the SNMP Cmmunity table. The Cmmunity Name must crrelate with ne f the cmmunities displayed n the SNMP Cmmunity Table page. If yu enter a Cmmunity Name that has nt been pre-defined, the Trap Hst entry is displayed, but agent/manager cmmunicatin fails. Click Add. The new hst is added t the table. 52

57 Access Cntrl Cnfig Access Cntrl cnfiguratin allws yu t cntrl different aspects f the Ethernet traffic as it enters the switch prts and is prcess thrugh the Switch. Yu can specify what traffic is permitted r denied t flw thrugh the switch by setting up specific filter criteria at an ingress prt. Yu can als manage the switching pririty f Ethernet packets. All f this is dne by specifying plicies that define the filtering and pririty behavir. Cnfigure Plicy Settings Access Cntrl Cnfig > Plicy Settings The Plicy Settings page allws yu t specify the filtering criteria fr ne plicy. Yu can create, mdify r delete a Plicy by fllwing the prcedures in the fllwing sectins: Mdify a Trap Hst Table Entry If yu need t mdify an SNMP Trap entry, yu must first delete the entry by using the prcedure belw and then re-enter it with the mdificatin by creating a new SNMP trap. Delete a Trap Hst Table Entry T delete an entry in the hst table, click Delete next t the entry in the table that yu want t remve. The Hst table entry is remved frm the table. N cnfirmatin message is displayed. 2. Click n Access Cntrl Cnfig and click n Plicy Settings. 3. Review the settings. Chse the type f plicy t create: Add L2+IPv4 Add IPv6 Nte: Please nte that when adding plices, it is imprtant t nte that the rule/plicy rder f pririty in which the rules/plicies are evaluated by the switch, 1 being the highest pririty. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 53

58 Add L2+IPv4 T add an L2+IPv4 plicy, use the fllwing prcedure: Click Add L2+ IPv4, The Plicy Settings page. Enter a number in the Plicy Index field. The Plicy Index is a unique number within the range f which identifies the plicy. This field is mandatry. Chse the parameters t add fr the plicy, and enter data ne r mre f the parameters required fr yur plicy. They are listed here: Surce MAC Address - Specifies the surce MAC address. The frmat is xx.xx.xx.xx.xx.xx. Surce MAC Mask Length - Indicates the length f the Surce MAC Mask ranging frm Destinatin MAC Address - Specifies the destinatin MAC address. The frmat is xx.xx.xx.xx.xx.xx. Destinatin MAC Mask Length - Indicates the length f the Destinatin MAC Mask ranging frm VLAN ID - A unique number identifying a VLAN ranging frm 1 t p Pririty p pririty level f the frame ranging frm 0 t 7. Ether Type - Indicates the prtcl f the ethernet frame prtcl ranging frm 0000 t FFFF. Prtcl - Indicates the packet prtcl ranging frm 0 t 255. Surce IP Address - Specifies the surce IP address. Surce IP Mask Length - Specifies the mask length f the surce IP address ranging frm Destinatin IP Address - Specifies the destinatin IP address. Destinatin IP MAC Mask Length - Specifies the mask length f the destinatin IP address ranging frm DSCP - The DSCP (Differentiated Services Cde Pint) value in the IP header ranging frm Surce Layer 4 Prt - Indicates the surce layer 4 prt ranging frm Destinatin Layer 4 Prt - Indicates the destinatin layer 4 prt ranging frm Plicy Sequence: Enter a number in the Plicy Sequence field. The Plicy Sequence must be a unique number within the range f This field is mandatry. Plicy Actin: In the Permit/Deny field, use the pull dwn menu t select ne f the fllwing parameters: Deny - This selectin drps ingress packets that cnfrm t the specified Replaced-CS r Replaced-DSCP. Permit - This selectin allws ingress packets that cnfrm t the specified Replaced-CS r Replaced-DSCP t be prcessed by the switch. Nte: Yu must enter a selectin fr Deny/Permit field even if the Prfile Actin ID that yu have entered ignres bth the Replaced- DSCP and Replaced-CS fields. Replaced-CS: Enter a number in the Replaced-CS field ranging frm 0 t 7. This field indicates the CS level f interest. This field is nt mandatry and yu may elect t leave it blank Replaced-DSCP: Enter a number in the Replaced-DSCP field within the range f 0 t 63. This field indicates the DSCP level f interest. This field is nt mandatry and yu may elect t leave it blank. Rate Cntrl Index: The Rate Cntrl Index is a unique number within the range f This field is mandatry and must match a Prt List Index that has been previusly entered n the Plicy Index. Prt List: Select the interface fr which yu want t display data. Click Add t add the plicy t the Plicy Table. 54

59 Add IPv6 T add an IPv6 plicy, use the fllwing prcedure: Click Add IPv6, The Plicy Settings page. Enter a number in the Plicy Index field. The Plicy Index is a unique number within the range f which identifies the plicy. This field is mandatry. Chse the parameters t add fr the plicy, and enter data ne r mre f the parameters required fr yur plicy. They are listed here: VLAN ID - A unique number identifying a VLAN ranging frm 1 t p Pririty p pririty level f the frame ranging frm 0 t 7. Prtcl - Indicates the packet prtcl ranging frm 0 t 255. IPv6 Surce IP Address - Specifies the IPv6 Surce IP address. Prefix Length - Indicates the length f the Surce IP ranging frm IPv6 Destinatin IP Address - Specifies the IPv6 Destinatin IP address. Prefix Length - Indicates the length f the Destinatin IP ranging frm Surce Layer 4 Prt - Indicates the surce layer 4 prt ranging frm Destinatin Layer 4 Prt - Indicates the destinatin layer 4 prt ranging frm Plicy Sequence: Enter a number in the Plicy Sequence field. The Plicy Sequence must be a unique number within the range f This field is mandatry. Plicy Actin: In the Permit/Deny field, use the pull dwn menu t select ne f the fllwing parameters: Deny - This selectin drps ingress packets that cnfrm t the specified Replaced-CS r Replaced-DSCP. Permit - This selectin allws ingress packets that cnfrm t the specified Replaced-CS r Replaced-DSCP t be prcessed by the switch. Nte: Yu must enter a selectin fr Deny/Permit field even if the Prfile Actin ID that yu have entered ignres bth the Replaced- DSCP and Replaced-CS fields. 55

60 Replaced-CS: Enter a number in the Replaced-CS field ranging frm 0 t 7. This field indicates the CS level f interest. This field is nt mandatry and yu may elect t leave it blank Replaced-DSCP: Enter a number in the Replaced-DSCP field within the range f 0 t 63. This field indicates the DSCP level f interest. This field is nt mandatry and yu may elect t leave it blank. Rate Cntrl Index: The Rate Cntrl Index is a unique number within the range f This field is mandatry and must match the Rate Cntrl Settings page. Prt List: Select the interface fr which yu want t display data. Click Add t add the plicy t the Plicy Table. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. Yu can als click Delete All t delete all f the entries in the table. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 56

61 Cnfigure Rate Cntrl Access Cntrl Cnfig > Rate Cntrl The Plicy Settings page allws yu t specify the filtering criteria fr ne plicy. Yu can create, mdify r delete a Plicy by fllwing the prcedures in the fllwing sectins: 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 2. Click n Access Cntrl Cnfig and click n Rate Cntrl. 3. Review the settings. Enter a number in the Index field. The Index is a unique number within the range f which identifies the plicy. This field is mandatry. Enter a number in the Cmmitted Rate clumn ranging frm 1 t Click Add t add the rate cntrl settings t the Rate Cntrl Table. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. Yu can als click Delete All t delete all f the entries in the table. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 57

62 View yur plicy database Access Cntrl Cnfig > Plicy Database Allws yu t view current plicies assigned t each prt by Index r Sequence. 2. Click n Access Cntrl Cnfig and click n Plicy Database. 3. Click the Select Prt drp-dwn list t select the prt yu wuld like t view assciated with the selected prt. Then select the rder t srt Index r Sequence. Nte: The Any ptin will display plicies fr all prts. 4.View the active picies assciated with the specified prt. RMON The RMON (Remte MONitring) MIB is used with SNMP applicatins t mnitr the peratins f netwrk devices. The Switch supprts the fur RMON MIB grups listed here: Statistic grup This grup is used t view prt statistics remtely with SNMP prgrams. Histry grup This grup is used t cllect histries f prt statistics t identify traffic trends r patterns. Event grup This grup is used with alarms t define the actins f the switch when packet statistic threshlds are crssed. Alarm grup This grup is used t create alarms that trigger event lg messages r SNMP traps when statistics threshlds are exceeded. Yu can use yur SNMP Netwrk Management System (NMS) sftware and the RMON sectin f the MIB tree t view the RMON statistics, histry and alarms assciated with specific prts. Since RMON uses the SNMP agent fr cmmunicating with yur NMS sftware, the SNMP Agent must be enabled and the SNMP feature must be cnfigured n yur switch. Since RMON wrks in cnjunctin with the SNMP agent, the SNMP agent must be enabled fr the RMON feature t be active. 5. Click Save Settings t Flash (menu). Enable RMON RMON > Glbal Settings This sectin allws yu t enable r disable RMON functinality. 6. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 2. Click n RMON and click n Glbal Settings. 58

63 3. Click the RMON Status drp-dwn list and select Enabled t enable RMON. Click Apply t save settings. Cnfigure parameters fr RMON Ethernet statistics RMON > Statistics Yu can remtely view individual prt statistics with RMON by using yur SNMP NMS sftware and the RMON prtin f the MIB tree. 4. Click Save Settings t Flash (menu). 2. Click n RMON and click n Statistics. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 3. Review the settings. Index: This parameter specifies the ID number f the new grup. The range is 1 t Prt: This parameter specifies the prt where yu want t mnitr the statistical infrmatin f the Ethernet traffic. Owner: This parameter is used t identify the persn wh created an entry. It is primarily intended fr switches that are managed by mre than ne persn, and is an ptinal field. Click Add t add the entry t the table. 59

64 In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. Cnfigure parameters fr RMON histry cntrl settings RMON > Histry RMON histries are snapshts f prt statistics. They are taken by the switch at predefined intervals and can be used t identify trends r patterns in the numbers r types f ingress packets n the prts n the switch. The snapshts can be viewed with yur SNMP NMS sftware with the histry grup f the RMON prtin f the MIB tree. A histry grup is divided int buckets. Each bucket stres ne snapsht f statistics f a prt. A grup can have frm 1 t 50 buckets. The mre buckets in a grup, the mre snapshts it can stre. 4. Click Save Settings t Flash (menu). 2. Click n RMON and click n Histry. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 3. Review the settings. Index: This parameter specifies the ID number f the new grup. The range is 1 t Prt: This parameter specifies the prt where yu want t mnitr the statistical infrmatin f the Ethernet traffic. Buckets Requested: This parameter defines the number f snapshts f the statistics fr the prt. Each bucket can stre ne snapsht f RMON statistics. Different prts can have different numbers f buckets. The range is 1 t 50 buckets. Interval: This parameter specifies hw frequently the switch takes snapshts f the prt s statistics. The range is 1 t 3600 secnds (1 hur). Fr example, if yu want the switch t take ne snapsht every minute n a prt, yu specify an interval f sixty secnds. Owner: This parameter is used t identify the persn wh created an entry. It is primarily intended fr switches that are managed by mre than ne persn, and is an ptinal field. 60

65 Click Add t add the entry t the table. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. Yu can als click Delete All t delete all f the entries in the table. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Cnfigure parameters fr RMON alarms RMON > Alarm RMON alarms are used t generate alert messages when packet activity n designated prts rises abve r falls belw specified threshld values. The alert messages can take the frm f messages that are entered in the event lg n the switch r traps that are sent t yur SNMP NMS sftware r bth. RMON alarms cnsist f tw threshlds. There is a rising threshld and a falling threshld. The alarm is triggered if the value f the mnitred RMON statistic f the designated prt exceeds the rising threshld. The respnse f the switch is t enter a message in the event lg, send an SNMP trap, r bth. The alarm is reset if the value f the mnitred statistic drps belw the falling threshld. The frequency with which the switch samples the threshlds f an alarm against the actual RMON statistic is cntrlled by a time interval parameter. Yu can adjust this interval fr each alarm. Here are the three cmpnents that cmprise RMON alarms: RMON statistics grup: A prt must have an RMON statistics grup cnfigured if it is t have an alarm. When yu create an alarm, yu specify the prt t which it is t be assigned nt by the prt number, but rather by the ID number f the prt s statistics grup. RMON event: An event specifies the actin f the Switch when the ingress packet activity n a prt crsses a statistical threshld defined in an alarm. The chices are t lg a message in the event lg f the Switch, send an SNMP trap t an SNMP wrkstatin, r bth. Since there are nly three pssible actins and since events can be used with mre than ne alarm, yu prbably will nt create mre than three events. Alarm: The last cmpnent is the alarm itself. It defines the prt statistic t be mnitred and the rising and falling threshlds that trigger the switch t perfrm an event. The threshlds f an alarm can have the same event r different events. The switch supprts up t eight alarms. 61

66 Click Add t add the entry t the table. 2. Click n RMON and click n Alarm. 3. Review the settings. Index: This parameter specifies the ID number f the new grup. The range is 1 t Interval: This parameter specifies the time (in secnds) ver which the data is sampled. Its range is 1 t secnds. Variable: This parameter specifies the RMON MIB bject that the event is mnitring. Sample type: This parameter defines the type f change that has t ccur t trigger the alarm n the mnitred statistic. There are tw chices frm the pull-dwn menu - Delta value and Abslute value. Delta value- setting cmpares a threshld against the difference between the current and previus values f the statistic. Abslute value- setting cmpares a threshld against the current value f the statistic. Rising Threshld: This parameter specifies a specific value r threshld level f the mnitred statistic. When the value f the mnitred statistic becmes greater than this threshld level, an alarm event is triggered. The parameter s range is 1 t Falling Threshld: This parameter specifies a specific value r threshld level f the mnitred statistic. When the value f the mnitred statistic becmes less than this threshld level, an alarm event is triggered. The parameter s range is 1 t Rising Event Index: This parameter specifies the event index fr the rising threshld. Its range is 1 t This field is mandatry and must match an Event Index that yu previusly entered in Events. Falling Event Index: This parameter specifies the event index fr the falling threshld. Its range is 1 t This field is mandatry and must match an Event Index that yu previusly entered in Events. Owner: This parameter is used t identify the persn wh created an entry. It is primarily intended fr switches that are managed by mrethan ne persn, and is an ptinal field. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. Yu can als click Delete All t delete all f the entries in the table. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 62

67 Cnfigure parameters fr RMON events RMON > Event An event specifies the actin f the switch when the ingress packet activity n a prt crsses a statistical threshld defined in an alarm. The chices are t lg a message in the event lg f the switch, send an SNMP trap t an SNMP wrkstatin, r bth. Since there are nly three pssible actins and since events can be used with mre than ne alarm, yu prbably will nt create mre than three events - ne fr each f the three actins. Click Add t add the entry t the table. 2. Click n RMON and click n Event. 3. Review the settings. Index: This parameter specifies the ID number f the new grup. The range is 1 t Descriptin: This parameter specifies a text descriptin f the event that yu are cnfiguring. Type: This parameter specifies where t lg the event when it ccurs. The chices are t lg a message in the event lg f the Switch, send an SNMP trap t the SNMP NMS sftware, r bth. Cmmunity: This parameter specifies the cmmunity where yu want t send the SNMP trap. Owner: This parameter is used t identify the persn wh created an entry. It is primarily intended fr switches that are managed by mre than ne persn, and is an ptinal field. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. Yu can als click Delete All t delete all f the entries in the table. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 63

68 Vice VLAN This chapter cntains a descriptin f the Switch s Vice VLAN feature and the prcedures t create, mdify, and delete a vice VLAN cnfiguratin. The Vice VLAN feature is specifically designed t maintain high quality, uninterrupted vice traffic thrugh the switch. When talking n a vice ver IP phne, a user expects t have n interruptins in the cnversatin and excellent vice quality. The Vice VLAN feature can be cnfigured t meet these requirements. CS with Vice VLAN The Vice VLAN CS parameter maintains the vice quality between the ingress and egress prts f the switch. CS must be enabled fr the Vice VLAN CS pririty t take effect. The CS pririty level that yu cnfig is applied t vice traffic n all prts f the vice VLAN. Nrmally, mst (nn-vice) Ethernet traffic transverses the switch thrugh lwer rder egress queues. T avid delays and interruptins in the vice data flw, the CS pririty level assigned t the vice VLAN shuld be mapped t a higher rder queue and the scheduling algrithm shuld be set t Strict Pririty. These settings ensure that the vice data packets are prcessed befre ther types f data s that the vice quality is maintained as the vice data passes thrugh the switch. Organizatin Unique Identifier (OUI) Each IP phne manufacturer can be identified by ne r mre Organizatin Unique Identifiers (OUIs). An OUI is three bytes lng and is usually expressed in hexadecimal frmat. It is imbedded int the first part f each MAC address f an Ethernet netwrk device. Yu can find the OUI f an IP phne in the first three cmplete bytes f its MAC address. Typically, yu will find that all f the IP phnes yu are installing have the same OUI in cmmn. The switch identifies a vice data packet by cmparing the OUI infrmatin in the packet s surce MAC address with an OUI table that yu cnfigure when yu initially set up the vice VLAN. This is imprtant when the Aut-Detectin feature fr a prt and is a dynamic vice VLAN prt. When yu are cnfiguring the vice VLAN parameters, yu must enter the cmplete MAC address f at least ne f yur IP phnes. An OUI Mask is autmatically generated and applied by the Web Management Utility sftware t yield the manufacturer s OUI. If the OUI f the remaining phnes frm that manufacturer is the same, then n ther IP phne MAC addresses need t be entered int the cnfiguratin. Hwever, it is pssible that yu can find mre than ne OUI frm the same manufacturer amng the IP phnes yu are installing. It is als pssible that yur IP phnes are frm tw r mre different manufacturers in which case yu will find different OUIs fr each manufacturer. If yu identify mre than ne OUI amng the IP phnes being installed, then ne MAC address representing each individual OUI must be cnfigured in the vice VLAN. Yu can enter a ttal f 10 OUIs. Dynamic Aut-Detectin vs Static Prts Prir t cnfiguring the vice VLAN, yu must cnfigure a tagged VLAN which is the basis fr the vice VLAN cnfiguratin. The VLAN must be cnfigured with ne r mre tagged r untagged prts that will serve as the vice VLAN uplink/dwnlink. By default, a tagged r untagged prt is a static member f a tagged VLAN. The prts that yu chse t cnfigure as dynamic Aut-Detectin prts must be cnnected directly t an IP phne. When yu initially define the prts f a tagged VLAN fr yur vice VLAN cnfiguratin, they must be cnfigured as a Nt Member prts. The Nt Member prts are eligible t dynamically jin the vice VLAN when vice data is detected with a predefined OUI in the surce MAC address. The prt will leave the vice VLAN after a specified timeut perid. This prt behavir is cnfigured with the vice VLAN Aut-Detectin feature. Fr the Aut-Detectin feature t functin, yur IP phne(s) must be capable f generating 802.1Q packets with imbedded VLAN ID tags. Yu must manually cnfigure yur IP phne(s) fr the same VLAN ID as the switch s vice VLAN ID. When vice data is detected n ne f the Nt Member prts, the packets frm the IP phne will cntain the vice VLAN ID s they are switched within the switch s vice VLAN. One r mre prts in yur vice VLAN must be cnfigured as Static tagged r untagged members. Static VLAN members are permanent member prts f the vice VLAN and there is n dependency n the cnfiguratin f the devices cnnected t the prts. These prts might be cnnected t ther vice VLAN netwrk ndes such as ther Ethernet switches, a telephne switch, r a DHCP server. The vice VLAN Aut- Detectin feature cannt be enabled n Static tagged r tagged prts. Nte: Any Static tagged members f the vice VLAN are required t have the prt VLAN ID (PVID) cnfigured t be the same as the vice VLAN ID. This insures that all untagged packets entering the prt are switched within the vice VLAN as the vice data passes thrugh the switch. If the IP phne(s) that yu are installing cannt be cnfigured with a VLAN ID, then the switch prts shuld be cnfigured as Static tagged prts within the vice VLAN. 64

69 Nte: Link Layer Discvery Prtcl fr Media Endpint Devices (LLDP- MED) is nt supprted n the switch. Each IP phne that is VLAN aware shuld be manually cnfigured fr the VLAN ID that matches yur vice VLAN ID. Each f the vice VLAN prts cnnected t an IP phne shuld be cnfigured as Nt Member prts f the tagged VLAN. Create a Vice VLAN Vice VLAN > Vice VLAN Settings Nte: Prir t cnfiguring yur vice VLAN, yu must first cnfigure a tagged VLAN. This VLAN will be used as a basis fr yur vice VLAN. Click Apply t save the settings. prt will be remved frm the vice VLAN. The range is 1 t 120 hurs. CS - This parameter is CS pririty level assigned t the vice data packets received n each vice VLAN prt. Fr the COS pririty t be effective, QS must be Enabled. 2. Click n Vice VLAN and click n Vice VLAN Settings. 3. Review the settings. Use the fllwing prcedure t cnfigure vice VLAN: Frm the Vice VLAN field at the tp f the page, select ne f the fllwing radi buttn chices: Enable - The vice VLAN feature is active. The ther parameter fields in the vice VLAN Glbal Settings sectin becme active and are eligible fr data t be entered. Disable - The vice VLAN feature is inactive. The ther parameter fields in the vice VLAN Glbal Settings sectin becme inactive and are greyed ut s that data cannt be entered. In the Vice VLAN Glbal Settings sectin, enter the cnfiguratin infrmatin fr the fllwing parameters: VLAN ID - This parameter is the tagged VLAN ID that has been cnfigured in Tagged VLAN Cnfiguratin. It is a pull-dwn menu shwing the tagged VLAN IDs that have been defined. Aging Time - This parameter indicates the amunt f time, in hurs, after the last IP phne's OUI was received n a prt, after which this In the table at the bttm f the page, The vice VLAN Aut- Detectin status is defined. Frm the Aut-Detectin clumn, select ne f the prt rws and then ne f the fllwing chices frm the pull-dwn menu: Ignre - This parameter indicates that the setting in the All rw des nt apply t the Dynamic Vlan Status field. In ther wrds, each prt is set individually. Enable - The vice VLAN Aut-Detectin feature is activated fr the prt rw selected. Disable - The vice VLAN Aut-Detectin feature is active fr the prt rw selected. Nte: The vice VLAN Aut-Detectin feature can nly be enabled n Nt Member prts f the vice VLAN. Member prts cannt have the vice VLAN Aut-Detectin feature enabled. The Status clumn displays Static fr the member prts 65

70 Enter the MAC address in the User Defined OUI - Telephny OUI field f ne f the IP phnes with the manufacturer's OUI. Click Add. The new OUI entry is displayed in the table at the bttm f the page. Nte: If yu find mre than ne OUI amng the IP phnes yu are installing, enter ne MAC address that represents each individual OUI. Yu can enter a ttal f 10 OUIs. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Mdify OUI Setting T mdify r delete an OUI, it must be first be deleted and then re-created. Cnfigure Vice VLAN OUI settings Vice VLAN > Vice VLAN OUI Settings Delete OUI Setting T delete a specific OUI that had already been entered in the table at the bttm f the page, click n Delete in the Actin clumn f the table. The specific OUI will be deleted frm the table. 2. Click n Vice VLAN and click n Vice VLAN OUI Settings. 3. Review the settings. Use the fllwing prcedure t cnfigure vice VLAN OUIs: Enter a text descriptin that helps yu identify the manufacturer s OUI in the User Defined OUI - Descriptin field. This parameter can be up t 20 characters in length. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 66

71 Security This chapter cntains infrmatin abut the Prt-based security features and the prcedures fr setting this feature. Cnfigure Prt Access Cntrl Security > Prt Access Cntrl This sectin cntains infrmatin and cnfiguratin prcedures fr the Prt-based Access Cntrl. Prt-based Netwrk Access Cntrl (IEEE 802.1x) is used t cntrl wh can send traffic thrugh and receive traffic frm a switch prt. With this feature, the switch des nt allw an end nde t send r receive traffic thrugh a prt until the user f the nde lgs n by entering a user name and passwrd. This feature can prevent an unauthrized individual frm cnnecting a cmputer t a prt r using an unattended wrkstatin t access yur netwrk resurces. Only thse users t whm yu have assigned a user name and passwrd are able t use the switch t access the netwrk. This feature can be used with ne f tw authenticatin methds: The RADIUS authenticatin prtcl requires that a remte RADIUS server is present n yur netwrk. The RADIUS server perfrms the authenticatin f the user name and passwrd cmbinatins. The Dial-in User (lcal) authenticatin methd allws yu t set up the authenticatin parameters internally in the switch withut an external server. In this case, the user name and passwrd cmbinatins are entered in the assciated with an ptinal VLAN when they are defined. Based n these entries, the authenticatin prcess is dne lcally by the Web Management Utility using a standard EAPOL transactin. Nte: RADIUS with Extensible Authenticatin Prtcl (EAP) extensins is the nly supprted authenticatin server fr this feature. 3. Review the settings. Click Apply t save the settings. Cnfigure the fllwing parameters as required: NAS ID - This parameter assigns an 802.1x identifier t the switch that applies t all prts. The NAS ID can be up t sixteen characters. Valid characters are 0 t 9, a t z, and A t Z. Spaces are allwed. Specifying an NAS ID is ptinal. Prt Access Cntrl - This parameter enables r disables Prt Access Cntrl. Select ne f the fllwing chices frm the pulldwn menu: Enable: The Prt Access Cntrl feature is activated. Disable: The Prt Access Cntrl feature is de-activated. Authenticatin Methd - This parameter indicates the authenticatin methd used by the switch. Select ne f the fllwing chices: RADIUS: This parameter cnfigures prt security fr remte authenticatin. After cmpleting steps, yu must cnfigure the RADIUS Client sectin. Lcal: This parameter cnfigures prt security fr lcal authenticatin. After cmpleting steps, yu must cnfigure the parameters fr Dial-in User Lcal Authenticatin sectin. TACACS+: This parameter cnfigures prt security fr terminal authenticatin. After cmpleting steps, yu must cnfigure the TACACS+ Settings sectin. 2. Click n Security and click n Prt Access Cntrl. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 67

72 Create Dial-In Users (Lcal Authenticatin Methd) Security > Dial-in User Dial-in User feature prvides the lcal authenticatin server fr prt security when a remte (RADIUS) server is nt available. The Dial-in User (lcal) authenticatin methd allws yu t set up 802.1x authenticatin parameters internally in the Switch. In this case, the user name and passwrd cmbinatins are entered with an ptinal VLAN when they are defined. Based n these entries, the authenticatin prcess f a supplicant is dne lcally by the Switch Management Utility using a standard EAPOL (EAP ver LAN) transactin. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. Yu can als click Delete All t delete all f the entries in the table. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 2. Click n Security and click n Dial-In User. 3. Review the settings. T create a dial-in user fr lcal authenticatin, use the fllwing prcedure: In the User Name field, type a name fr the user. In the Passwrd field, type a passwrd fr the user. In the Dynamic VLAN field, enter the VID f the VLAN which yu will allw the user t access. If yu enter 0, this field will be ignred. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Click Add t add the entry t the table. 68

73 Add RADIUS Servers (RADIUS Authenticatin Methd) Security > RADIUS In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. 2. Click n Security and click n RADIUS. 3. Review the settings. Server Pririty Enter the RADIUS Server pririty (Highest: 1, Lwest: 5). Server IP Address Select IPv4 r IPv6 and set the RADIUS server IP address and enter the IP address f the RADIUS server yu wuld like t add. Server Prt ( ) Set the RADIUS authentic server(s) UDP prt. The default prt is Accunting Prt ( ) Set the RADIUS accunt server(s) UDP prt. The default prt is Shared Secret Enter the default authenticatin and encryptin key fr RADIUS cmmunicatin between the device and the RADIUS server. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Click Add t add the entry t the table. 69

74 Add TACACS+ Servers (TACACS+ Authenticatin Methd) Security > TACACS+ Terminal Access Cntrller Access Cntrl System (TACACS+) prvides centralized security user access validatin. The system supprts up-t 5 TACACS+ servers. TACACS+ prvides a centralized user management system, while still retaining cnsistency with RADIUS and ther authenticatin prcesses. The TACACS+ prtcl ensures netwrk integrity thrugh encrypted prtcl exchanges between the client and TACACS+ server. The user-assigned TACACS+ parameters are applied t newly defined TACACS+ servers. If values are nt defined, the system defaults are applied t the new TACACS+ servers. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. 2. Click n Security and click n TACACS+. 3. Review the settings. Server Pririty Enter the TACACS+ Server pririty (Highest: 1, Lwest: 5). Server IP Address Enter the TACACS+ Server IP address. Server Prt Enter the prt number via which the TACACS+ sessin ccurs. The default prt is prt 49. Timeut Enter the amunt f time (in secnds) the device waits fr an answer frm the TACACS+ server befre retrying the query, r switching t the next server. Pssible field values are The default value is 5. Shared Secret Enter the default authenticatin and encryptin key fr TACACS+ cmmunicatin between the device and the TACACS+ server. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. Click Add t add the entry t the table. 70

75 Destinatin MAC Filter Security > Destinatin MAC Filter This sectin cntains an explanatin f the Destinatin MAC Filter feature as well a prcedure fr cnfiguring it. This sectin includes the fllwing infrmatin: The Destinatin MAC Filter feature prevents the switch frm frwarding packets t a specified device. On the Destinatin MAC Filter Page f the Web Management Utility sftware, enter the MAC address f the device that yu want t filter. After the switch receives a packet, it examines the destinatin MAC address f the packet. If the destinatin MAC address matches a MAC address set in the filter, the sftware prevents the switch frm frwarding it and drps the packet. Yu may want t blck access t a device within yur rganizatin. Fr instance, yu may nt want users n the Sales grup switch t have access t a server n the Accunting grup switch. Yu can enter the MAC address f the Accunting server as a destinatin MAC address filter n the Sales grup switch. When a packet destined fr the Accunting server is received by the Sales grup switch, the switch drps the packet. The Destinatin MAC Filter is a subset f the static MAC address. 4. The MAC address will be added t the table. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. Yu can als click Delete All t delete all f the entries in the table. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 5. Click Save Settings t Flash (menu). 2. Click n Security and click n Destinatin MAC Filter. 6. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 3. Enter the MAC Address t add t the destinatin filter table. Click Add. 71

76 Denial f Service (DS) Security > Denial f Service The switch has built-in DS preventin features t restrict specific type f traffic assciated denial f service attacks n yur netwrk. By default, all f the DS settings are set t Allw, which allw any type f traffic t pass thrugh the switch. Setting ne f the items t Deny will set the switch t check fr traffic matching the selected item and deny any traffic matching the rule. On the ther hand, setting ne f rules t Deny may deny a specific type f traffic that may prevent traffic essential t running yur netwrk such as devices in lad balancing cnfiguratin using virtual IP addresses (Ex. If ARP MAC SA Mismatch is set t Deny, it may cause devices in lad balance cnfiguratin using shared virtual IP addresses cmmunicatin issues essential fr netwrk server lad balancing.) Fr additinal security, yu can set these rules t Deny as necessary. 3. Next t the DS item/rule yu wuld like t activate, click the drp-dwn menu n the right hand side and select Deny. 4. Click Apply t save the settings. Nte: Yu can click Reset t Default t restre all DS settings t Allw. 5. Click Save Settings t Flash (menu). 2. Click n Security and click n Denial f Service. 6. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 72

77 PE Cnfiguratin The main advantage f PE is that it can make installing a netwrk easier. The selectin f a lcatin fr a netwrk device is ften limited by whether there is a pwer surce nearby. This cnstraint limits equipment placement r requires the added time and cst f having additinal electrical surces installed. Hwever, with PE, yu can install PEcmpatible devices wherever they are needed withut having t wrry abut whether there is pwer surce nearby. Pwer Surcing Equipment (PSE) A device that prvides PE t ther netwrk devices is referred t as pwer surcing equipment (PSE). The Gigabit Web Smart PE+ Switch is a PSE device which prvides DC pwer t the netwrk cable and functins as a central pwer surce fr ther netwrk devices. Pwered Device (PD) A device that receives pwer frm a PSE device is called a pwered device (PD). Examples include wireless access pints, IP phnes, webcams, and even ther Ethernet switches. PD Classes PDs are gruped int five classes. The classes are based n the amunt f pwer that PDs require. The Gigabit Web Smart PE+ Switch supprts all five classes. Class Maximum Pwer Output Pwer Ranges f the PDs frm a Switch Prt W 0.44W t 12.95W 1 4.0W 0.44W t 3.84W 2 7.0W 3.84W t 6.49W W 6.49W t 12.95W W 25.5W t 38.9W Pwer Budget Pwer budget is the maximum amunt f pwer that the PE switch can prvide at ne time t the cnnected PDs. Prt Priritizatin As lng as the ttal pwer requirements f the PDs is less than the ttal available pwer f the switch, it can supply pwer t all f the PDs. Hwever, when the PD pwer requirements exceed the ttal available pwer, the switch denies pwer t sme prts based n a prcess called prt priritizatin. The prts n the PE switch are assigned t ne f three pririty levels. These levels and descriptins are listed in Table 3. Withut enugh pwer t supprt all the prts set t the same pririty level at ne time, the switch prvides pwer t the prts based n the prt number, in ascending rder. Fr example, when all f the prts in the switch are set t the lw pririty level and the pwer requirements are exceeded n the switch, prt 1 has the highest pririty level, prt 2 has the next highest pririty level and s frth. Pririty Level Descriptin High Lw Descriptin This is the highest pririty level. Prts set t the Critical level are guaranteed t receive pwer befre any f the prts assigned t the ther pririty levels. Prts set t the High level receive pwer nly when all the prts assigned t the Critical level are already receiving pwer. This is the lwest pririty level. Prts set t the Lw level receive pwer nly when all the prts assigned t the Critical and High levels are already receiving pwer. This level is the default setting. 73

78 Cnfigure PE settings PE Cnfiguratin 2. Click n PE Cnfiguratin. 3. Review the settings fr each prt. Next t each prt entry, click Apply t save the settings. Pwer Budget Displays the maximum PE pwer budget in watts. Pwer Cnsumptin Displays the current PE pwer prvided t PE devices r PDs (Pwered devices) in watts. Prt - Indicates the prt with a specific PE status and that yu are cnfiguring. Nte: Yu can select the rw labled ALL t apply settings t all prts. Admin - T activate r deactivate PE n a specific prt, select Enable r Disable. By default the PE feature is disabled n all switch prts. Status - The PE prt status is given as fllws: Pwer ON - The prt is supplying PE pwer. Pwer OFF - The prt is nt supplying PE pwer. Class - The PE class is indicated the class f the PD. N/A is displayed when the prt is nt supplying pwer. Pririty - Indicates the prt pririty: Lw, High, r Critical. Pwer(mW) - Indicates the Pwer in milliwatts that the prt is supplying pwer t the PD. Vltage(V) - Indicates the Vltage in vlts as measured at the prt when the prt is supplying pwer t the PD. Current(mA) - Indicates the Current in milliamps that the prt is supplyng t the PD. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 74

79 DHCP Snping Here is a summary f the rules t bserve when yu cnfigure DHCP Snping: A trusted prt is cnnected t ne f the fllwing: Directly t the legitimate trusted DHCP Server. A netwrk device relaying DHCP messages t and frm a trusted server. Anther trusted surce such as a switch with DHCP Snping enabled. Untrusted prts are cnnected t DHCP clients and t traffic that riginates utside f the lcal area netwrk. The VLANs t which the DHCP Snping feature applies must be specified in the DHCP Snping VLAN Setting cnfiguratin. Any static IP addresses n the netwrk must be manually added t the Binding Database. Enable DHCP Snping DHCP Snping > General Settings 2. Click n DHCP Snping and click n General Settings. Enable - The MAC address f each ingress ARP packet is validated when cmpared against the Binding Table entries. Invalid ARP packets are discarded. Disable - The MAC address f each ingress ARP packet is nt validated against the Binding Table. All ARP packets are frwarded thrugh the switch withut regard t the IP and MAC Address infrmatin in the packet header. Backup Database - select ne f the fllwing chices frm the pull-dwn menu: Enable - The Web Management Utility Sftware saves a backup cpy f the Binding Table t flash at a specified interval (Database Update Interval) f time. Disable - The Web Management Utility Sftware des nt save a backup cpy f the Binding Table t flash. Database Update Interval - Enter the database update interval. The range f this interval is 600 t secnds. DHCP Optin 82 Insertin - select ne f the fllwing chices frm the pulldwn menu: Enable: The Web Management Utility sftware inserts the DHCP Optin 82 infrmatin int the DHCP packets. Disable: The Web Management Utility sftware des nt insert the DHCP Optin 82 infrmatin int the DHCP packets. 3. Review the settings. Click Apply t save the settings. DHCP Snping - Select ne f the fllwing radi buttn chices: Enabled - This parameter activates the DHCP Snping feature. Disabled - This parameter de-activates the DHCP Snping Pass Thrugh Optin 82 - Select ne f the fllwing chices frm the pulldwn menu: Enable - Allws an Optin 82 packet t be passed thrugh the switch withut being altered. Disable - Blcks an Optin 82 packet frm passing thrugh the switch. Verify MAC Address - Select ne f the fllwing chices frm the pull-dwn menu: 75

80 Enable DHCP Snping DHCP Snping > VLAN Settings In this sectin, yu can define an existing VLAN t apply DHCP snping. 2. Click n DHCP Snping and click n VLAN Settings. 3. In the field, enter the existing VLAN ID t apply DHCP Snping. Then click Add t add the VLAN entry t the table. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. Yu can als click Delete All t delete all f the entries in the table. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 76

81 Set Trusted Interfaces DHCP Snping > Trusted Interfaces This sectin allws yu t set trusted prt interfaces where DHCP servers can be cnnected allws r denies DHCP server infrmatin t be received n thse prts. 2. Click n DHCP Snping and click n Trusted Interfaces. 3. Next t each prt, click the Trust drp-dwn list and select ne f the fllwing ptins. Disable: This parameter defines the prt as untrusted fr the DHCP Snping feature. Enable: This parameter defines the prt as trusted fr the DHCP Snping feature. Nte: Yu can select the rw labeled ALL t apply settings t all prts. Cnfigure Binding Database DHCP Snping > Binding Database The Binding Database displays learned and statically assigned MAC Address and IP Address infrmatin fr each hst n the lcal area netwrk. Dynamically assigned IP addresses frm the DHCP server will autmatically ppulate the table n the Binding Database page as they are assigned by the server. Statically assigned IP addresses are entered manually by entering the hst s address infrmatin and clicking n the Add buttn. 2. Click n DHCP Snping and click n Binding Database. 3. Review the settings. Click Add t add the database entry t the table. MAC Address - Enter the hst s MAC Address. IP Address - Enter the static IP Address assigned t the hst. VLAN - Enter the hst s VLAN ID. Prt - Enter the prt number where the hst is cnnected. Type - Because the IP Address being entered is static, yu must select Static. Lease Time - Enter the time that IP address assignment is valid. The range is 10 t secnds. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 77

82 Click Add t add the database entry t the table. 4. Click Save Settings t Flash (menu). In the list, yu can click Mdify t mdify an entry r click Delete r delete the entry. Yu can als click Delete All t delete all f the entries in the table. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. MAC Address: This parameter shws the hst s MAC Address. VLAN ID: This parameter shws the hst s VLAN ID f which the DHCP client is a member. IP Address: This parameter is the IP Address assigned by the DHCP server t the DHCP client. Prt: This parameter is the prt number where the DHCP client is cnnected. Type: This parameter indicates the fllwing: Learned-The hst IP Address is dynamically assigned by the DHCP server. Static- The hst IP Address is statically assigned. See Static IP Addresses n page 300 fr mre infrmatin. Lease Time: This parameter is the time that IP address assignment by the DHCP server is valid. 78

83 LLDP (Link-Layer Discvery Prtcl) Link Layer Discvery Prtcl (LLDP) allws Ethernet netwrk devices, such as switches and ruters, t receive and transmit device-related infrmatin t directly cnnected devices n the netwrk and t stre data that is learned abut ther devices. Enable and cnfigure LLDP LLDP > LLDP Glbal Settings LLDP Reinit Delay: Sets the reinitializatin delay, which is the number f secnds that must elapse after LLDP is disabled n a prt befre it can be reinitialized. The range is frm 1 t 10 secnds. LLDP TX Delay: Sets the value f the transmissin delay timer, which is the minimum time interval between transmissins f LLDP advertisements due t a change in LLDP lcal infrmatin. The range is frm 1 t 8192 secnds. Click Apply t save the settings. 2. Click n LLDP and click n LLDP Glbal Settings. 3. Review the settings. Enabling r Disabling LLDP Frm the LLDP parameter, select ne f the fllwing radi buttn chices and click Apply t save the settings. Enable: The LLDP feature is active. Disable: The LLDP feature is inactive. Cnfigure the LLDP Settings Message TX Hld Multiplier: Sets the hld multiplier value. The hld time multiplier is multiplied by the transmit interval t give the Time T Live (TTL) that the switch advertises t the neighbrs. The range is frm 2 t 10. Message TX Interval: Sets the transmit interval, which is the interval between regular transmissins f LLDP advertisements. The range is frm 1 t 10 secnds. 79

84 View LLDP System Infrmatin Chassis ID Subtype: This parameter describes the Chassis ID subtype which is macaddress. Yu cannt change this parameter. Chassis ID: This parameter lists the MAC Address f the switch. Yu cannt change this parameter. System Name: This parameter lists the System Name f the switch. Yu can assign the system name. System Descriptin: This parameter lists the prduct name f the switch. Yu cannt change this parameter Set LLDP Prt State Fr each prt, click the State drp-dwn list and chse frm the fllwing ptins. Disabled: Indicates LLDP is disabled n the prt. The prt cannt receive r transmit LLDP data packets. Enabled: Indicates LLDP is enabled n the prt. The prt can receive and transmit LLDP data packets. RxOnly: Indicates LLDP is enabled n the prt. The prt can receive LLDP data packets. TxOnly: Indicates LLDP is enabled n the prt. The prt can transmit LLDP data packets. Nte: Yu can select the rw labeled ALL t apply settings t all prts. Click Apply t save the settings. 4. Click Save Settings t Flash (menu). 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 80

85 View LLDP Neighbr Infrmatin LLDP > LLDP Neighbr Infrmatin Statistic Statistics prvide imprtant infrmatin fr trubleshting switch prblems at the prt level. The Web Management Utility prvides a tw statistics charts, including Traffic Infrmatin and Errr Infrmatin. 2. Click n LLDP and click n LLDP Neighbr Infrmatin. 3. View the LLDP neighbr infrmatin. Entity: This parameter is a number assigned t the reprting neighbrs in the rder that the LLDP infrmatin is received frm them. Prt: This parameter specifies the switch prt number where the LLDP infrmatin was received. Chassis ID Subtype: This parameter describes the Chassis ID subtype f the neighbring netwrk device which is reprting the LLDP infrmatin. Chassis ID: This parameter is the neighbring device s chassis ID. Prt ID Subtype: This parameter describes the Prt ID subtype f the neighbring netwrk device s prt that is cnnected directly t the switch prt. Prt ID: This parameter specifies the neighbring netwrk device s prt number frm which the LLDP infrmatin was transmitted. Prt Descriptin: This parameter describes the neighbring netwrk device s prt. Shw Nrmal: If yu click n this buttn, a detailed reprt f the neighbring netwrk device will be displayed. If the entries span multiple pages, yu can navigate page number in the Page field and click G r yu can click First, Previus, Next, and Last Page t navigate the pages. View Traffic Infrmatin Statistics Statistic > Traffic Infrmatin 2. Click n Statistic and click n Traffic Infrmatin. 3. View the Traffic Infrmatin Statistics. InOctets: Inbund Octets (Bytes/s), number f inbund ctet bits in bytes per secnd. InUcastPkts: Inbund Unicast Packets (Pkts), number f inbund unicast packets in packets per secnd. InNUcastPkts: Inbund Nn-unicast Packets (Pkts), number f inbund nnunicast packets (such as bradcast and multicast packets) in packets per secnd. InDiscards: Inbund Discards (Pkts), number f inbund discarded packets in packets per secnd. OutOctets: Outbund Octets (Bytes/s), rate f utbund ctet bits in bytes per secnd. OutUcastPkts: Outbund Unicast Packets (Pkts), number f utbund unicast packets in packets per secnd. OutNUcastPkts: Outbund Nn-unicast Packets (Pkts), number f utbund nn-unicast (such as bradcast and multicast packets) packets. OutDiscards: Outbund Discards (Pkts), number f utbund discarded packets. 81

86 View Errr Infrmatin Statistics Statistic > Errr Infrmatin 2. Click n Statistic and click n Traffic Infrmatin. 3. View the Errr Infrmatin Statistics. InErrrs: Inbund Errrs (Pkts), number f inbund errrs in packets per secnd. OutErrrs: Outbund Errrs (Pkts), number f utbund errr packets. DrpEvents: Drp Events, number f packets drpped. CRCAlignErrrs: CRC and Align Errrs, number f CRC and Align errrs that have ccurred. UndersizePkts: Undersize Packets (Pkts), number f undersized packets (less than 64 ctets) received. OversizePkts: Oversize Packets (Pkts), number f versized packets (ver 2000 ctets) received. Fragments: Number f fragments (packets with less than 64 ctets, excluding framing bits, but including FCS ctets) received. Cllisins: Number f cllisins received. If Jumb Frames are enabled, the threshld f Jabber Frames is raised t the maximum size f Jumb Frames. 82

87 Switch Maintenance Upgrade yur switch firmware Tls > Firmware Upgrade TRENDnet may peridically release firmware upgrades that may add features r fix prblems assciated with yur TRENDnet switch mdel and versin. T check if there is a firmware upgrade available fr yur device, please check yur TRENDnet mdel and versin using the link. In additin, it is als imprtant t verify if the latest firmware versin is newer than the ne yur switch is currently running. T identify the firmware that is currently laded n yur switch, lg in t the switch, click n the System Inf sectin r click n Tls and click n Firmware Upgrade. The firmware used by the switch is listed as Runtime Image r Image Versin. If there is a newer versin available, als review the release ntes t check if there were any new features yu may want r if any prblems were fixed that yu may have been experiencing. Firmware Upgrade via HTTP Settings 2. Click n Tls, click n Firmware Upgrade, and click via HTTP. 3. Depending n yur web brwser, in the Uplad Firmware sectin, click Brwse r Chse File. 1. If a firmware upgrade is available, dwnlad the firmware t yur cmputer. 2. Unzip the file t a flder n yur cmputer. Please nte the fllwing: D nt interrupt the firmware upgrade prcess. D nt turn ff the device r press the Reset buttn during the upgrade. If yu are upgrade the firmware using a laptp cmputer, ensure that the laptp is cnnected t a pwer surce r ensure that the battery is fully charged. Disable sleep mde n yur cmputer as this may interrupt the firmware upgrade prcess. D nt upgrade the firmware using a wireless cnnectin, nly using a wired netwrk cnnectin. Any interruptins during the firmware upgrade prcess may permanently damage yur switch. 4. Navigate t the flder n yur cmputer where the unzipped firmware file (.hex) is lcated and select it. 5. Click Apply. If prmpted, click Yes r OK. 83

88 Firmware Upgrade via TFTP Settings Nte: Befre using this methd, yu will require a TFTP server. There are third party TFTP server applicatins available fr this functin. If yu are nt familiar with the TFTP prtcl, it is recmmended t use the HTTP methd. 2. Click n Tls, click n Firmware Upgrade, and click via TFTP. 3. Make sure yur TFTP server is running and nte the IP address f yur server and firmware file name. The TFTP server shuld be in the same IP subnet as the switch. Nte: It is recmmended t that the firmware file (.hex) is placed in yur TFTP server rt directry. 4. Review the settings. Click Apply t start the firmware upgrade. TFTP Server IP: Enter the IP address f yur TFTP server. Image File Name: Enter the firmware filename with extensin. (.hex) Retry Cunt: Defined the number f time t attempt t pull the firmware file frm the TFTP server. 5. Click Apply t start the firmware upgrade. Backup and restre yur switch cnfiguratin settings Tls > Cnfig File Backup/Restre Yu may have added many custmized settings t yur switch and in the case that yu need t reset yur switch t default, all yur custmized settings wuld be lst and wuld require yu t manually recnfigure all f yur switch settings instead f simply restring frm a backed up switch cnfiguratin file. Backup/Restre via HTTP Settings T backup yur switch cnfiguratin: 2. Click n Tls, click n Cnfiguratin File Backup/Restre, and click n via HTTP. 3. Click Backup t save the cnfiguratin file (cnfig.bin) t yur lcal hard drive. Nte: If prmpted, chse the lcatin n yur lcal hard drive. If yu are nt prmpted, the cnfiguratin file (cnfig.bin) will be saved t yur default dwnlads flder. T restre yur switch cnfiguratin: 2. Click n Tls, click n Cnfiguratin File Backup/Restre, and click n via HTTP. 3. Next t Select File, depending n yur web brwser, click n Brwse r Chse File. 4. A separate file navigatin windw shuld pen. 5. Select the switch cnfiguratin file t restre and click Restre. (Default Filename: cnfig.bin). If prmpted, click Yes r OK. 6. Wait fr the switch t restre settings. 84

89 Backup/Restre via TFTP Settings Nte: Befre using this methd, yu will require a TFTP server. There are third party TFTP server applicatins available fr this functin. If yu are nt familiar with the TFTP prtcl, it is recmmended t use the HTTP methd. T backup yur switch cnfiguratin: 2. Click n Tls, click n Cnfiguratin File Backup/Restre, and click n via TFTP. 3. Make sure yur TFTP server is running and nte the IP address f yur server and firmware file name. The TFTP server shuld be in the same IP subnet as the switch. 4. Review the settings. Click Backup t save the cnfiguratin file (cnfig.bin) t yur lcal hard drive n yur TFTP server rt directry. TFTP Server IP: Enter the IP address f yur TFTP server. Cnfig File Name: Enter the cnfiguratin file name fr the backup. (Default: cnfig.bin) T restre yur switch cnfiguratin: 2. Click n Tls, click n Cnfiguratin File Backup/Restre, and click n via HTTP. 3. Make sure yur TFTP server is running and nte the IP address f yur server and cnfiguratin file name. The TFTP server shuld be in the same IP subnet as the switch. Nte: It is recmmended t put the cnfiguratin file (cnfig.bin) is placed in yur TFTP server rt directry. 4. Review the settings. Click Restre t restre the switch cnfiguratin file (cnfig.bin) frm yur lcal hard drive frm yur TFTP server rt directry. TFTP Server IP: Enter the IP address f yur TFTP server. Cnfig File Name: Enter the cnfiguratin file name t restre. (Default: cnfig.bin) 5. Wait fr the switch t restre settings. 85

90 Cable Diagnstics Test Tls > Cable Diagnstics The switch prvides a basic cable diagnstic tl in the GUI fr verifying the pairs in cpper cabling and estimated distance fr trubleshting purpses. The results will be displayed in the Cable Diagnstic Table belw. Nte: 1. If the cable length displays N/A, it means that the cable length is Nt Available. The may be due t the prt being unable t determine the estimated cable length. If length is displayed as N/A it means the cable length is Nt Available. This is due t the prt being unable t btain cable length/either because its link speed is 10M r 100M, r the cables used are brken and/r f bad in quality. 2. The deviatin f Cable Fault Distance is +/- 2 meters. N cable may be displayed in the table when the cable is less than 2 meters in length. 3. The test als measures the cable fault and identifies the fault in length accrding t the distance frm the switch. 2. Click n Tls and click n Cable Diagnstic. Test Results: Displays the diagnstic results fr each pair in the cable. One f the fllwing cable status parameters is displayed: OK: There is n prblem detected with the cable. Open in Cable: There is an pen wire within the cable. Shrt in Cable: Tw wires are shrted tgether within the cable. Crss talk in Cable: There is crsstalk detected between ne pair f wires and anther pair within the cable. Cable Fault Distance: This parameter specifies the distance frm the switch prt t the cable fault. Cable Length: This parameter specifies the length f the cable cnnected t the switch prt. 3. Click n the Prt drp-dwn list t select which prt t run the cable diagnstic and click Test Nw t run the test. 86

91 Enable IEEE 802.3az Pwer Saving Mde Tls > IEEE 802.3az EEE The IEEE EEE standard defines mechanisms and prtcls intended t reduce the energy cnsumptin f netwrk links during perids f lw utilizatin, by transitining interfaces int a lw-pwer state withut interrupting the netwrk cnnectin. The transmitted and received sides shuld be IEEE802.3az EEE cmpliance. By default, the switch disabled the IEEE 802.3az EEE functin. Users can enable this feature via the IEEE802.3az EEE setting page. 2. Click n Tls and click n IEEE 802.3az EEE. 3. Click the IEEE 802.3az EEE Status drp-dwn list and select Enabled t enable the pwer saving feature and click Apply t save the settings. Rebt/Reset t factry defaults Tls > Rebt This sectin prvides the prcedures fr rebting r resetting the switch t factry default settings. T rebt yur switch: Yu may want t rebt yur switch if yu are encuntering difficulties with yur switch and have attempted all ther trubleshting. Nte: Yu may want t save the settings t flash befre rebt the switch under Save Settings t Flash (menu) > Save Settings t Flash (buttn). If yu have nt saved yur current cnfiguratin settings t flash first, the cnfiguratin changes will be lst after a rebt. There are tw methds that can be used t rebt yur switch. Hardware Methd: Using a paper clip, n the frnt panel f the switch, push and hld the Reset buttn between 5-9 secnds and release. Sftware Methd (Switch Management Page): 4. Click Save Settings t Flash (menu). 2. Click n Tls and click n Rebt. 5. Click Save Settings t Flash (buttn), then click OK. Nte: This step saves all cnfiguratin changes t the NV-RAM t ensure that if the switch is rebted r pwer cycled, the cnfiguratin changes will still be applied. 3. Click the Rebt Type drp-dwn list and select Nrmal and click Apply t initiate a rebt. Wait fr the switch cmplete the rebting prcess. 87

92 T reset yur switch t factry defaults: Yu may want t reset yur switch t factry defaults if yu are encuntering difficulties with yur switch and have attempted all ther trubleshting. Befre yu reset yur switch t defaults, if pssible, yu shuld backup yur switch cnfiguratin first, see Backup and restre yur switch cnfiguratin settings n page 44. There are tw methds that can be used t reset yur switch t factry defaults. Hardware Methd: Using a paper clip, n the frnt panel f the switch, push and hld the Reset buttn mre than 10 secnds and release. Lcated n the frnt panel f yur switch, see Prduct Hardware Features n page 6. Use this methd if yu are encuntering difficulties with accessing yur switch management page. Sftware Methd (Switch Management Page): 2. Click n Tls and click n Rebt. 3. Click the Rebt Type drp-dwn list and select frm ne f the fllwing ptins Factry Default: Resets all switch cnfiguratin settings t factry defaults including the IP address. Factry Default Except IP: Resets all switch cnfiguratin settings t factry defaults and leaves the current IP address cnfiguratin. Netwrk Cnnectivity Test (Ping Tl) Tls > IEEE 802.3az EEE This chapter prvides the prcedure t ping a nde n yur netwrk frm the switch. This prcedure is useful in determining whether an active link exists between the switch and anther netwrk device. The device yu are pinging must be a member f the Default VLAN and within the same lcal area netwrk as yur switch. In ther wrds, the prt n the switch thrugh which the nde is cmmunicating with the switch must be an untagged r tagged member f the Default VLAN. 2. Click n Tls and click n Ping. 3. Review the settings. Click Start t start the netwrk cnnectivity ping test. After the ping test is activate, yu can click Shw Ping Results t check the ping test result. Destinatin IP Address - The IP address f the nde yu want t ping in the IPv4 r IPv6 frmat. Timeut Value - Specifies the length f time, in secnds, the switch waits fr a respnse befre assuming that a ping has failed. Number f Ping Requests - Specifies the number f ping requests yu want the switch t perfrm. The switch factry default settings are belw. Administratr User Name Administratr Passwrd admin admin Switch IP Address Switch Subnet Mask

93 Using the Web Smart Switch Management Utility 4. At the Utility installatin windw, click Next. The Web Smart Switch Management Utility allws yu t d the fllwing: Yu can easily discver all TRENDnet web smart switches n yur netwrk using the discver feature. Yu can mdify the IP address settings, change the admin passwrd, and upgrade firmware fr multiple switches. System Requirements Operating System: Windws 10 (32/64-bit), 8.1 (32/64-bit), 8 (32/64-bit), Windws 7 (32/64-bit), Vista (32/64-bit), r XP (32/64-bit) Installatin 1. Insert the included CD-ROM int yur cmputer s CD-ROM drive. 5. At the Install Lcatin installatin windw, click Next. 2. At the CD Autrun Prmpt windw, click Run Autrun.exe. Nte: If the Autrun prmpt des nt appear autmatically, pen the CD cntents and duble-click Autrun.exe. 3. At the CD-ROM main menu, click Install Utility. 89

94 6. At the Installatin, click Install. Using the Utility Launching the Utility Upn cmpleting the sftware installatin, a desktp shrtcut is autmatically created. Duble-click the icn t start the utility r pen the utility if it is already running. Clsing the utility will exit the applicatin. Yu can als click Exit at the bttm f the utility user interface t exit the applicatin. 7. In the Cmpletin windw, click Finish. Yu can als launch the utility frm the Start Menu prgrams. Start > Prgrams (r All Prgrams) > TRENDnet Management Utility > TRENDnet Management Utility.exe 90

95 Discvery List This is the list where yu can discver all the Web management devices in yur netwrk. By pressing the Discvery buttn, yu can list all the Web Smart Management switches in the discvery list. Duble click r press the Add t mnitr list buttn t select a device frm the Discvery List t the Mnitr List. System wrd definitins in the Discvery List: MAC Address: Shws the device MAC Address. IP Address: Shws the current IP address f the device. Prtcl versin: Shws the versin f the Utility prtcl. Prduct Name: Shws the device prduct name. System Name: Shws the appinted device system name. IP Mde: Shws the DHCP status f the device. Lcatin: Shws where the device is lcated. Subnet Mask: Shws the Subnet Mask set f the device. Gateway: Shws the Gateway set f the device. Grup Interval: Mnitr List All the Web Smart switches in the Mnitr List can be mnitred; yu can als receive the trap and shw the status f the device. System wrd definitins in the Mnitr List: S: Shws the system symbl f the Web-Smart device, represent fr device system is nt alive. IP Address: Shws the current IP address f the device. MAC Address: Shws the device MAC Address. Prtcl versin: Shws the versin f the Utility prtcl. Prduct Name: Shws the device prduct name. System Name: Shws the appinted device system name. IP Mde: Shws the DHCP status f the device. Lcatin: Shws where the device is lcated. Subnet Mask: Shws the Subnet Mask set f the device. Gateway: Shws the Gateway set f the device. Grup Interval: Add Item: T add a device t the Mnitr List manually, enter the IP Address f the device that yu want t mnitr. Delete Item: T delete the device in the Mnitr List. 91

96 Device Setting Firmware Upgrade: When the device has a new functin, there will be a new firmware t update the device, use this functin t update. Yu can set the device by using the functin key in the Device Setting Dialg bx. Cnfiguratin Setting: In this Cnfiguratin Setting, yu can set the IP Address, Subnet Mask, Gateway, Grup Interval, System name, Lcatin and IP Mde. Select the device in the Discvery list r Mnitr List and press this buttn, then the Cnfiguratin Setting windw will appear, after entering the data that yu want t change, yu must enter the passwrd and press the Set t prcess the data change immediately. The default passwrd f TRENDnet Web Smart Switches is admin. Access Web: Duble click the device in the Mnitr List r select a device in the Mnitr List and press this Web Access buttn t access the device in Web brwser. Passwrd Change: Yu can use this Passwrd Change when yu need t change the passwrd, fill in the passwrd needed in the dialg bx and press Set buttn t prceed the passwrd change immediately. DHCP Refresh: Press this DHCP Refresh buttn t refresh IP address f selected device frm DHCP server. (Only applies if Web Smart switch IP address settings are set t DHCP). 92

97 Main Menu Optins In the File TAB, there are Mnitr Save, Mnitr Save As, Mnitr Lad and Exit. Mnitr Save: T recrd the setting f the Mnitr List t the default, when yu pen the Web Management Utility next time, it will aut lad the default recrded setting. Mnitr Save As: T recrd the setting f the Mnitr List in appinted filename and file path. Mnitr Lad: T manually lad the setting file f the Mnitr List. Exit: T exit the Web Management Utility. In the View TAB, there are view lg and clear lg functin, this functin will help yu t shw trap setting. View Lg: T shw the event f the Web Management Utility and the device. Clear Lg: t clear the lg. In the Optin TAB, there are Refresh Time and Grup Interval Refresh Time: This functin helps yu t refresh the time f mnitring the device. Chse 15 secs, 30 secs, 1 min, 2 min and 5 min t select the time f mnitring. Grup Interval: 120~1225 In the Help TAB, there is Abut functin, it will shw ut the versin f the Web Management Utility. 93

98 Cmmand Line Interface Reference Access yur switch cmmand line interface Nte: The system may be managed ut-f-band thrugh the cnsle prt. The cnsle prt is a female RJ-45 prt and the included RJ-45 male t RS-232 serial DB-9 female cnsle cable. 1. Using the included RJ-45 t RS-232 serial DB-9 cable, cnnect the RJ-45 end t the switch cnsle prt and cnnect the RS-232 end t yur cmputer RS-232 DB-9 male prt. 5. After yu have setup all f the parameters apprpriately, the terminal emulatin windw shuld display a prmpt fr user name and passwrd. Enter the user name and passwrd. By default: User Name: admin Passwrd: admin Nte: User Name and Passwrd are case sensitive. Yu can als use Telnet r SSH prtcls t access the switch cmmand line interface using IP address. 2. On yur cmputer, run the terminal emulatin prgram (ex. HyperTerminal, TeraTerm, putty etc.). 3. Select the apprpriate COM prt used fr cnnecting t the switch cnsle. 4. Use the fllwing settings fr the cnnectin. Data Rate: bps Data Bit: 8 bits Parity: Nne Stp Bits: 1 Flw Cntrl: Nne Emulatin mde: VT100 94

99 CLI Cmmands LEVEL- VIEW MODE PROMPT COMMAND 1 User EXEC TL2-XXXX> disable 2 Privileged EXEC TL2-XXXX# enable exit end 3 Glbal cnfigure terminal TL2-XXXX(cnfig)# Cnfigure exit interface Cnfigure TL2-XXXX(cnfig-if)# interface interface Rang TL2-XXXX(cnfig-if-range)# interface range Cnfigure 4 Vlan Cnfigure TL2-XXXX(cnfig-vlan)# vlan Spanning-tree MST Cnfiguratin TL2-XXXX(cnfig-mst)# spanning-tree mst cnfiguratin BASE COMM AVAILABLE IN DESCRIPTION AND enable User and Privileged EXEC Enter Privileged EXEC mde mde disable ALL Mdes Enter User EXEC mde exit User and Privileged EXEC Exit frm user EXEC mde mde lgut ALL Mdes Exit frm user EXEC mde end ALL Mdes Exit frm all mde back t Pirvileged EXEC mde help ALL Mdes Displays help fr a particular cmmand clear screen ALL Mdes Clears the screen histry ALL Mdes Shw histry cmmands 95

100 ? ALL Mdes Shw ptinal input parameters [TAB] ALL Mdes Aut input next parameter r shw ptinal cmmands SYMB OL DESCRIPTION {...} Select ne item in {} [...] Optinal item (...) Select ne r mre intem in "()" <...> Frmat f input string <string (..)> need using "" t surrund string yu enter FUNC SUB ITEM COMMANDS MODE DESCRIPTION Switch Inf shw system infrmatin User EXEC Display system infrmatin. System s Management IPv4 Setup system name <string(15)> n system name system lcatin <string(30)> n system lcatin system cntact <string(30)> n system cntact shw ipv4 interface Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Privileged EXEC Set system netwrk name Delete system netwrk name Set the system lcatin Delete the system lcatin Set the system cntact infrmatin Delete the system cntact infrmatin Display the usability status f interfaces cnfigured fr IP. 96

101 IPv6 System Settings ipv4 address <ip-address> <subnet-mask> [<ip_gateway>] Glbal Cnfiguratin Cnfigure IPv4 address. n ipv4 address Glbal Cnfiguratin Reset IPv4 address. ipv4 address dhcp Glbal Cnfiguratin Cnfigure system IPv4 cnfiguratin mde. shw ipv6 interface User EXEC Displays IPv6 Glbal Cnfiguratin. ipv6 Glbal Cnfiguratin Enable IPv6 prcessing n the interface that has nt been cnfigured with an explicit IPv6 address n ipv6 ipv6 address dhcp n ipv6 address dhcp ipv6 address <ipv6-address> <integer(1-128)> n ipv6 address ipv6 gateway <ipv6-address> n ipv6 gateway ipv6 nd ns-interval <integer(1-3600)> n ipv6 nd ns-interval ipv6 address <ipv6-address> link-lcal n ipv6 address link-lcal ipv6 address link-lcal autmatic Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Disable IPv6 prcessing n the interface that has nt been cnfigured with an explicit IPv6 address Enable IPv6 DHCP client Disable IPv6 DHCP client Cnfigure IPv6 address Deletes the IPv6 address cnfigured Cnfigure IPv6 gateway address Deletes IPv6 gateway address Set advertised retransmissin time Reset advertised retransmissin time t default value. Cnfigure IPv6 link-lcal address n the interface Deletes IPv6 link-lcal address Enable IPv6 address link-lcal autmatic. 97

102 n ipv6 address link-lcal autmatic Glbal Cnfiguratin Disable IPv6 address link-lcal autmatic. IPv6 Neighbr Settings shw ipv6 neighbrs [<ipv6-address>] [ethernet <mac-address>] User EXEC Displays IPv6 Neighbur Cache Entries IP Access List ipv6 neighbr <ipv6-address> <mac-address> n ipv6 neighbr {<ipv6-address> <mac-address>} shw ipv4 access-lists shw ipv6 access-lists Glbal Cnfiguratin Glbal Cnfiguratin User EXEC User EXEC Cnfigure a static entry in IPv6 neighbr cache table Remve static entry frm IPv6 neighbr cache table Display the cntents f all current IPv4 access lists. Display the cntents f all current IPv6 access lists. ip access-list Glbal cnfiguratin Enable ip access-list functin. n ip access-list Glbal cnfiguratin Disable ip access-list functin. ipv4 access-list <surce-ipv4-address> Glbal cnfiguratin Define an IPv4 access list using IPv4 address. n ipv4 access-list <surce-ipv4-address> Glbal cnfiguratin Remve the specified access IPv4 address. ipv6 access-list <surce-ipv6-address> Glbal cnfiguratin Define an IPv6 access list using IPv6 address. n ipv6 access-list <surce-ipv6-address> Glbal cnfiguratin Remve the specified access IPv6 address. Administratin User Interface shw users User EXEC Display the user authenticatin infrmatin username <name> passwrd <passwrd> Glbal Cnfiguratin Establish User Name Authenticatin n username <name> Glbal Cnfiguratin Remve User Name Authenticatin shw ip http server status Privileged EXEC Display the status f the HTTP server t determine shw grup interval-time User EXEC Shw discver interval time shw line cnsle User EXEC Display the cnfiguratin f cnsle line ip http server n ip http server Glbal Cnfiguratin Glbal Cnfiguratin Enable HTTP server Disable HTTP server 98

103 web-timeut <time(3-60)min> n web-timeut grup interval-time <time(0/ sec)> n grup interval-time exec-timeut <time(3-60min)> n exec-timeut ip telnet server n ip telnet server ip telnet server prt <integer( )> n ip telnet server prt Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Set web idle timeut Set web idle timeut t default Set discver interval time Set discver interval time t default Set cli idle timeut Set cli idle timeut t default Enable TELNET server Disable TELNET server Cnfigure TELNET server prt number Reset TELNET server prt t 23 shw ip telnet server status Privileged EXEC Display the status f the TELNET server ip ssh server Glbal Cnfiguratin Enable SSH server n ip ssh server Glbal Cnfiguratin Disable SSH server ip ssh server prt <integer( )> Glbal Cnfiguratin Cnfigure SSH server prt number n ip ssh server prt Glbal Cnfiguratin Reset SSH server prt t 23 shw ip ssh server status Privileged EXEC Display the status f the SSH server System Time shw clck User EXEC Display system clck shw sntp status Privileged EXEC Display NTP cnfiguratin shw clck summer-time Privileged EXEC Display summer-time sntp Glbal Cnfiguratin Enable SNTP authenticate. n sntp Glbal Cnfiguratin Disable SNTP authenticate. 99

104 clck set {<systime> <shrt(1-31)> <shrt(1-12)> <integer( )>} Glbal Cnfiguratin Set system clck sntp server {<ipv4_addr> <ipv6_addr> <dmain_name>} {primary secndary} n sntp server {primary secndary} sntp update-calendar <time(1-60min)> n ntp update-calendar Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Speicfy SNTP server address. Delete SNTP server address. Set NTP update calendar time Set NTP update calendar time t default 100

105 sntp timezne {Eniwetk,Kwajalein Midway Island,Sama Hawaii Alaska Pacific Time (US & Canada),Tijuana Arizna Muntain Time (US & Canada) Central Time (US & Canada) Mexic City,Tegucigalpa Saskatchewan Bgta,Lima,Ouit Eastern Time (US & Canada) Indiana (East) Atlantic Time(Canada) Caracas,La Paz Sasntiag Newfundland Brasilia Buens Aires,Gergetwn Mid- Atlantic Azres,Cape Verde Is. Casablance, Mnrvia Greenwich Mean Time:Dublin,Edinburgh,Lisbn,Lndn Amsterdam,Berlin,Bern,Rme,Stckhlm,Vienna Belgrade,Bratislava,Budapest,Ljubljana,Prague Brussels,Cpenhagen,Madrid,Paris,Vilnius Sarajev,Skpje,Sfija,Warsaw,Zagreb Athens,Istanbul,Minsk Bucharest Cair Harare,Pretria Helsinki,riga,Tallinn Jerusalem Baghdad,kuwait,Riyadh Mscw,St.Petersburg,Vlggrad Nairbi Tehran Abu Dhabi,Muscat Baku,Tbilisi Kabul Ekaterinburg Islamabad,Karachi,Tashkent Bmbay,Calcutta,Madras,New Delhi Astana,Almaty,Dhaka Clmb Bangkk,Hani,Jakarta Beijing,Chngqing, Hng Kng,Urumqi Perth Singapre Taipei Osaka,Sappr,Tky Seul Yakutsk Adelaide Darwin Brisbane Canberra,Melburne,Sydney Guarn,Prt Mresby Hbart Vladivstk Magadan,Slmn Is.,New Calcdnia Nrflk Island Auckland,Wellingtn Fiji,Kamchatka,Marshall Is. Kiribati (Phenix Islands), Tnga, Tkelau Kiribati (Line Islands)} Glbal Cnfiguratin Cnfigure SNTP time zne in system. n sntp timezne Glbal Cnfiguratin Reset SNTP time zne t default. 101

106 clck summer-time [frm <hur> <minute> <day> <mnth> t <hur> <minute> <day> <mnth> ffset {30 60}] Glbal Cnfiguratin Cnfigure summer-time in system. SSL Settings DHCP Aut Cnfiguratin System Lg Settings n clck summer-time Glbal Cnfiguratin Disable r reset summer-time t default. shw ip http server status Privileged EXEC Display the status f the HTTP server t determine ip http secure-server n ip http secure-server Glbal cnfiguratin Glbal cnfiguratin Enable the HTTPS server Disable the HTTPS server shw dhcp aut-cnfig status Privileged EXEC Display the status f the DHCP aut cnfiguratin dhcp aut-cnfig Glbal Cnfigure Enable dhcp aut cnfiguratin n dhcp aut-cnfig Glbal Cnfigure Disable dhcp aut cnfiguratin shw lgging User EXEC Displays Lgging status and cnfiguratin infrmatin shw lgging message User EXEC Displays Lgging lg message service timestamps lg datetime msec Glbal Cnfiguratin Enable timestamps with lg message n service timestamps lg datetime msec Glbal Cnfiguratin Disable timestamps with lg message lgging buffered <integer(1-200)> Glbal Cnfiguratin Cnfigure lg buffered size n lgging buffered Glbal Cnfiguratin Reset lg buffered size lgging hst Glbal Cnfiguratin Enable Syslg server n lgging hst Glbal Cnfiguratin Disable Syslg server lgging hst <ip-address> Glbal Cnfiguratin Cnfigure Syslg Server Ip Address n lgging hst <ip-address> Glbal Cnfiguratin Reset Syslg Server Ip Address lgging hst facility <integer(0-7)> Glbal Cnfiguratin Cnfigure Server lg facility 102

107 DNS Settings n lgging hst facility lgging hst severity {alerts critical infrmatinal warnings } n lgging hst severity clear lgs Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Reset Server lg facility Cnfigure Server lg severity Reset Server lg severity Clears the system syslg buffers shw ip dns name-server Privileged EXEC Displays dns name-server infrmatin dmain name-server {ipv4 <ucast_addr> ipv6 <ip6_addr>} Glbal Cnfiguratin create dns name-server IP address n dmain name-server {ipv4 ipv6} Glbal Cnfiguratin delete dns name-server IP address Physical Interface N/A shw interfaces [gigabitethernet <interface-id>] [{capabilities stats status etherchannel}] Privileged EXEC Display the cnfiguratin and status f interfaces interface gigabitethernet <interface-id> Glbal Cnfiguratin Interface cnfiguratin(ethernet) interface range gigabitethernet <interface-list> Glbal Cnfiguratin Interface range cnfiguratin(ethernet) exit shutdwn n shutdwn speed { aut} n speed duplex {aut full half} Glbal Cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Exit frm interface mde Disable the physical interface Restart the disabled physical interface Cnfigure physical interface speed peratin Set physical interface speed t default Cnfigures the full/half duplex peratin. 103

108 n duplex jumb n jumb flwcntrl {ff n} frwarding {eap bpdu} n frwarding {eap bpdu} Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Cnfigures the full/half duplex peratin t default Enable interfaces jumb feature Disable interfaces jumb feature Cnfigure interfaces flwcntrl feature Enable interfaces frwarding feature Disable interfaces frwarding feature Bridge Spanning Tree shw spanning-tree active Privileged EXEC Displays spanning tree infrmatin f active prts shw spanning-tree detail Privileged EXEC Displays spanning tree details f prt states shw spanning-tree mst cnfiguratin Privileged EXEC Displays multiple spanning tree instance cnfiguratin shw spanning-tree mst interface gigabitethernet <interfaceid> spanning-tree mst cnfiguratin spanning-tree n spanning-tree spanning-tree mde {stp rst mst} n spanning-tree mde spanning-tree pririty <value(0-15)> n spanning-tree pririty spanning-tree max-age <secnds(6-40)> Privileged EXEC Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Displays multiple spanning tree prt specific cnfiguratin Enter MST cnfiguratin mde. Enables spanning tree prtcl in the switch Diables spanning tree prtcl in the switch Sets spanning tree perating mde T return t the default spanning tree perating mde Sets the Bridge Pririty fr the spanning tree nly in steps f 4096 Sets the Bridge Pririty fr the Spanning tree t its default value Sets the maximum age fr the Spanning tree 104

109 n spanning-tree max-age spanning-tree hell-time <secnds(1-10)> n spanning-tree hell-time spanning-tree frward-time <secnds(4-30)> n spanning-tree frward-time spanning-tree transmit hld-cunt <value (1-10)> n spanning-tree transmit hld-cunt spanning-tree mst max-hps <value(6-40)> n spanning-tree mst max-hps spanning-tree mst <instance-id> pririty <value(0-15)> n spanning-tree [mst <instance-id(1-31)>] pririty spanning-tree n spanning-tree spanning-tree prt-pririty <pririty(0-240)> n spanning-tree prt-pririty spanning-tree cst <value( )> n spanning-tree cst Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Sets the maximum age fr the Spanning tree t its default value Set hell time interval between the transmissin f cnfiguratin BPDUs Set Spanning tree return t the default hell-time Set frward delay time fr the Spanning tree Set Spanning tree return t the default frward delay Sets the transmit hld-cunt value Sets the transmit hld-cunt t default value Sets the maximum number f hps permitted in the MST Sets the maximum number f hps permitted in the MST t the default value Sets the Bridge Pririty fr the spanning tree instance nly in steps f 4096 Sets the Bridge Pririty fr the Spanning tree instance t its default value Set spanning tree cnfiguratins t enable n the prt Set spanning tree cnfiguratins t disable n the prt Cnfigure the prt pririty fr an interface nly in steps f 16 Set the prt pririty t default value Set pathcst value fr the prt Set the prt path cst t the default value 105

110 spanning-tree prtfast {aut frce-true frce-false Interface cnfiguratin Set the prt fast functinality aut - Autmatic detectin f bridge attached n an interface bpduguard default - Puts an interface in the errr-disabled state when it receives a bridge prtcl data unit default - The interface changes directly frm a blcking state t a frwarding state withut making the intermediate spanning-tree state changes. n spanning-tree prtfast spanning-tree link-type {aut pint-t-pint shared } n spanning-tree link-type spanning-tree restricted-rle n spanning-tree restricted-rle spanning-tree restricted-tcn n spanning-tree restricted-tcn spanning-tree mst <instance-id(1-31)> cst <value( )> n spanning-tree mst <instance-id(1-31)> cst spanning-tree mst <instance-id(1-31)> prt-pririty <value(0-240)> n spanning-tree mst <instance-id(1-31)> prt-pririty Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Interface cnfiguratin Set the prt fast functinality t default value Set the spanning tree link type f an interface Set the spanning tree link type f an interface t the default value Enables the rt-guard/ Restricted rle feature n the prt Disables the rt-guard/ Restricted rle feature n the prt Enables the Tplgy change guard/ Restricted tcn feature n the prt Disables the Tplgy change guard/ Restricted tcn feature n the prt Sets the spanning tree prt path cst f an interface fr MSTP instance Sets the spanning tree prt path cst f an interface fr MSTP instance t default value Sets the spanning tree prt pririty f an interface fr MSTP instance Sets the spanning tree prperties f an interface t default value 106

111 Trunk Cnfig name <string(31)> cnfig-mst Sets Cnfiguratin name n name cnfig-mst Deletes the cnfiguratin name revisin <value( )> cnfig-mst Sets the Cnfiguratin revisin number n revisin cnfig-mst Deletes the Cnfiguratin revisin number. instance <instance-id(1-31)> vlan <vlan-range> n instance <instance-id (1-31)> [vlan <vlan-range>] cnfig-mst cnfig-mst Map VLANs t an MST instance, maximum instance depends n target. Deletes the instance /Unmaps specific VLANS frm the MST instance shw etherchannel [<channel-grup-number>] User EXEC Displays etherchannel infrmatin channel-grup <channel-grup-number> mde {active manual passive} n channel-grup <channel-grup-number> lacp prt-pririty <pririty> n lacp prt-pririty interface prt-channel <prt-channel-number> mde {active manual passive} Interface cnfiguratin(prt ) Interface cnfiguratin(prt ) Interface cnfiguratin(prt ) Interface cnfiguratin(prt ) Glbal Cnfiguratin Add prt t specified trunk grup. Remve prt frm specified trunk grup. Cnfigures the LACP prt pririty Reset the LACP prt pririty Specify the channel mde f trunk grup. n interface prt-channel <prt-channel-number> Glbal Cnfiguratin Disable specify la trunk grup. Mirrring shw mnitr User EXEC Display mnitring infrmatin. n mnitr Glbal cnfiguratin Disable the mnitr cnfiguratin. mnitr destinatin interface gigabitethernet <interface-id> Glbal cnfiguratin Add r mdify a mnitr destinatin prt. 107

112 mnitr sessin 0 surce interface gigabitethernet <interface-list> [{bth rx tx}] Glbal cnfiguratin Add specified mnitr surce prts. n mnitr sessin 0 surce interface gigabitethernet <interface-list> [{bth rx tx}] Glbal cnfiguratin Remve specified mnitr surce prts. Lpback Detectin Static Unicast shw lbd [interface <gigabitethernet> <ifnum>] User EXEC Display the cnfiguratin f lpback detectin. lbd [{interval <integer( )> recver {"0" <integer( )>}}] n lbd [{interval recver}] lbd n lbd shw mac address-table static [address <mac-address>] [interface gigabitethernet <interface-id>] [vlan {<vlan-id> prt-base}] Glbal Cnfiguratin Mde Glbal Cnfiguratin Mde interface cnfiguratin mde interface cnfiguratin mde User EXEC Cnfigure lpback detectin infrmatin. Disable lpback detectin r set its defaults. Cnfigure lpback detectin infrmatin. Disable lpback detectin functin. Displays static MAC address table entries nly mac address-table static <mac-addr> vlan {<vlan-id> } interface gigabitethernet <interface-id> Glbal Cnfiguratin Add a static MAC address table entries n mac address-table static <mac-addr> vlan {<vlan-id>} [interface gigabitethernet <interface-id>] Glbal Cnfiguratin Delete a static MAC address table entries Static Multicast shw ip igmp snping grups static Privileged EXEC Displays IGMP static grup infrmatin. 108

113 ip igmp snping vlan {<vlan-id> prt-base} static <mcastmac> interface gigabitethernet <interface-list> Glbal cnfiguratin Add prts as member f a multicast grup with the specified grup IP address n ip igmp snping vlan {<vlan-id> prt-base} static <mcast-mac> interface gigabitethernet <interface-list> Glbal cnfiguratin Remve prt frm member f a multicast grup with the specified grup IP address. IGMP Snping ip igmp snping [frward_mcruter_nly] Glbal Cnfiguratin Enables IGMP snping in the switch. n ip igmp snping [frward_mcruter_nly] Glbal Cnfiguratin Disables IGMP snping in the switch. ip igmp snping vlan {name <vlan-name(32)> id <vidlist >} {[hst_timeut <( )secnds>] [ruter_timeut <( )secnds>] [leave_timer <(1-25)secnds>]} Glbal Cnfiguratin Sets the hst_timeut/ruter_timeut/leave_timer in a specific vlan. ip igmp snping vlan {name <vlan-name(32)> id <vidlist >} Glbal Cnfiguratin Enable the status in a specific vlan. n igmp_snping vlan {name <vlan-name(32)> id <vidlist >} Glbal Cnfiguratin Disable the status in a specific vlan. ip igmp snping vlan {name <name(32)> id <vidlist >} fast_leave Glbal Cnfiguratin Enable the fast_leave in a specific vlan. n ip igmp snping vlan {name <vlan-name(32)> id <vidlist >} fast_leave Glbal Cnfiguratin Disable the fast_leave in a specific vlan. ip igmp snping vlan {name <vlan-name(32)> id <vidlist >} querier Glbal Cnfiguratin Enable the status f querier in a specific vlan. 109

114 n ip igmp snping vlan {name <vlan-name(32)> id <vidlist >} querier Glbal Cnfiguratin Disable the status f querier in a specific vlan. ip igmp snping vlan {name <vlan-name(32)> id <vidlist >} querier {[querier_versin (1,2,3)] [query_interval <(60-600)secnds>] [max_respnse_time <(10-25)secnds>] [rbustness_variable <(2-255)value>] [last_member_query_interval <(1-25)secnds>]} Glbal Cnfiguratin Cnfig IGS querier versin/query_interval/max_respnse_time/rbustness_vari able/last_member_query_interval fr a specific vlan. ip igmp snping vlan {name <vlan-name(32)> id <vidlist >} ruter_prts {gigabitethernet <interface-list>} Glbal Cnfiguratin Add static ruter prts fr a specific vlan n ip igmp snping vlan {name <vlan-name(32)> id <vidlist >} ruter_prts gigabitethernet <interfacelist> Glbal Cnfiguratin Delete static ruter prts fr a specific vlan ip igmp snping vlan {name <vlan-name(32)> id <vidlist >} ruter_prts frbidden {gigabitethernet <interfacelist>} Glbal Cnfiguratin Add frbidden ruter prts fr a specific vlan n ip igmp snping vlan {name <vlan-name(32)> id <vidlist >} ruter_prts frbidden gigabitethernet <interface-list> Glbal Cnfiguratin Delete frbidden ruter prts fr a specific vlan 110

115 shw ip igmp snping ruter_prts [{vlan [name <vlanname(32)>] [id <vidlist >]}] [{static dynamic frbidden}] Privileged EXEC Display Vlan Name, static/dynamic/frbidden ruter prts, ttal entry. shw ip igmp snping vlan {name <vlan-name(32)> id <vidlist >} Privileged EXEC Display hst-timeut/leaver timer/ruter-timeut/querier state/querier ruter behavir/querier versin/state fr a specific vlan shw ip igmp snping grup {[{vlan [name <vlanname(32)>] [id <vidlist (1-4094)>]}] [{gigabitethernet <interface-list>}]} [<ip-address>] Privileged EXEC Display Vlan Name/multicast grup/mac address/surece address/prt member include/prtmember exclude/ fr a specific vlan. shw ip igmp snping frwarding vlan {name <vlanname(32)> id <vidlist (1-4094)>} Privileged EXEC Display Vlan Name/multicast grup/mac address/prt member/fr a specific vlan. shw ip igmp snping hst [vlan [name <vlan-name(32)>] [vlanid <vidlist > ]] [{gigabitethernet <interface-list>}] [{ grup <ip-address>}] ipv6 mld snping n ipv6 mld snping Privileged EXEC Glbal Cnfiguratin Glbal Cnfiguratin Display Vlan Name, static/dynamic ruter prts, ttal entry. Enable MLD Snping Disable MLD Snping ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} {[hst_timeut <( )secnds>] [ruter_timeut <( )secnds>] [leave_timer <(1-25)secnds>]} Glbal Cnfiguratin Sets the hst_timeut/ruter_timeut/leave_timer in a specific vlan. ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} Glbal Cnfiguratin Enable the status in a specific vlan. 111

116 n ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} fast_leave n ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} fast_leave ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} querier n ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} querier Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Disable the status in a specific vlan. Enable the fast_leave in a specific vlan. Disable the fast_leave in a specific vlan. Enable MLD snping querier state fr a specific vlan. Disable MLD snping querier state fr a specific vlan. ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} querier {[max_respnse_time <(10-25)secnds>] [rbustness_variable <(2-255)value>] [last_listener_query_interval <(1-25)secnds>] [versin <(1-2)value>] [query_interval <(60-600)secnds>]} Glbal Cnfiguratin Sets MLD snping querier max_respnse_time/rbustness_variable/last_listener_quer y_interval/versin/query_interval fr a specific vlan. ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} querier {[hst_timeut <( )secnds>] [ruter_timeut <( )secnds>]} Glbal Cnfiguratin Sets MLD snping querier hst_timeut/ruter_timeut fr a specific vlan. ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} mruter_prts gigabitethernet <interface-list> Glbal Cnfiguratin Add static ruter prts fr a specific vlan 112

117 n ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} mruter_prts gigabitethernet <interfacelist> Glbal Cnfiguratin Delete static ruter prts fr a specific vlan ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} mruter_prts frbidden gigabitethernet <interface-list> Glbal Cnfiguratin Add frbidden ruter prts fr a specific vlan n ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} mruter_prts frbidden gigabitethernet <interface-list> Glbal Cnfiguratin Delete frbidden ruter prts fr a specific vlan ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} ruter_prts gigabitethernet <interface-list> Glbal Cnfiguratin Add static ruter prts fr a specific vlan n ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} ruter_prts gigabitethernet <interfacelist> Glbal Cnfiguratin Delect static ruter prts fr a specific vlan shw ipv6 mld snping vlan {name <vlan-name(32)> id <vidlist >} Glbal Cnfiguratin Display hst-timeut/leaver timer/ruter-timeut/querier state/querier ruter behavir/querier versin/state fr a specific vlan. shw ipv6 mld snping grup [{vlan {name <vlanname(32)> id <vidlist >} prts {gigabitethernet <interface-list>}}] <ipv6_address>] Glbal Cnfiguratin Display Vlan Name/multicast grup/reprts/prt member/filter Mde fr a specific vlan. 113

118 shw ipv6 mld snping mruter_prts vlan {name <vlanname(32)> id <vidlist >} {[static dynamic frbidden]} Privileged EXEC Display Vlan Name, static/dynamic/frbidden ruter prts, ttal entry. shw ipv6 mld snping frwarding vlan {name <vlanname(32)> id <vidlist >} Privileged EXEC Display Vlan Name/multicast grup/mac address/prt member/fr a specific vlan. shw ipv6 mld snping hst [{vlan {name <vlan-name(32)> id <vidlist >} prts {gigabitethernet <interfacelist>}}] [grup <ipv6_address>] Privileged EXEC shw ipv6 mld snping hst vlan {name <vlan-name(32)> id <vidlist >} prts {gigabitethernet <interface-list>} grup <ipv6_address> Bandwidth Cntrl shw strm-cntrl [gigabitethernet <ifnum>] [DLF] [bradcast] [multicast] User EXEC Display bradcast, multicast, r DLF strm cntrl settings n the switch r n the specified interface. shw rate-limit [gigabitethernet <ifnum>] [{input utput}] User EXEC Display the egress r ingress packet rate limit f interfaces. strm-cntrl {DLF bradcast multicast Threshld <integer( )>} interface cnfigure mde Enable DLF/bradcast/multicast strm cntrl and set threshld rate limit n interfaces. n strm-cntrl {DLF bradcast multicast Threshld} interface cnfigure mde Disabled DLF/bradcast/multicast strm cntrl and set threshld rate limit t default n interfaces. VLAN rate-limit {input utput} <integer( )> n rate-limit {input utput} shw vlan {[{id <vlan-id>] [name <vlan-name>]} interface cnfigure mde interface cnfigure mde User EXEC Cnfig the ingress/egress packet rate limit n interfaces. Disabled ingress/egress rate limit n interfaces. Display the parameters fr all cnfigured VLANs r ne VLAN n the switch. shw mac address-table dynamic [interface gigabitethernet <interface-id>] User EXEC Display dynamic MAC address table entries. shw private-vlan prt-frwarding User EXEC Display prtlists that can be frwarded frm prts. shw vlan prt cnfig User EXEC Display prt pvid infrmatin 114

119 vlan <vlan-id> n vlan <vlan-id> vlan learning-mde {ivl svl} private-vlan prt-frwarding n private-vlan prt-frwarding name <vlan-name(32)> prts [add] [untagged] {gigabitethernet <interface-list> all} n prts [untagged] {gigabitethernet <interface-list> all} Glbal cnfiguratin Glbal cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin VLAN cnfiguratin VLAN cnfiguratin VLAN cnfiguratin add a VLAN and t enter the VLAN cnfiguratin mde delete a VLAN Cnfigures the frwarding database mdes f peratin t be implemented by the switch Enable defines the prtlist that can be frwarded frm the specified prt. Resets defines the prtlist that can be frwarded frm the specified prt. Cnfigures the ascii name fr the VLAN. Cnfigures the tagged and untagged member prts that are used fr egress tagging f a VLAN at a prt. Deletes the specified prts details fr the VLAN. switchprt pvid <vlan-id> Interface Cnfiguratin The PVID cnfiguratin dne is used based n the acceptable frame type f the prt. The packets are prcessed against PVID, if the packets accepted at ingress is nt having a tag. n switchprt pvid Interface Cnfiguratin resets the PVID t the default value n the prt 115

120 switchprt acceptable-frame-type {all tagged untaggedandpriritytagged } Interface Cnfiguratin Cnfigures the acceptable frame type fr the prt(s). all - All tagged, untagged and pririty tagged frames received n the prt are accepted and subjected t ingress filtering. tagged - Only the tagged frames received n the prt are accepted and subjected t ingress filtering. The untagged and pririty tagged frames received n the prt are rejected. untaggedandpriritytagged - Only the untagged r pririty tagged frames received n the prt are accepted and subjected t ingress filtering. The tagged frames received n the prt are rejected. n switchprt acceptable-frame-type Interface Cnfiguratin resets the acceptable frame type fr the prt(s) t its default value. switchprt ingress-filtering Interface Cnfiguratin Enables ingress filtering feature n the prt(s). Only the incming frames f the VLANs that have this prt in its member list are accepted. n switchprt ingress-filtering Interface Cnfiguratin Disables ingress filtering feature n the prt(s). All incming frames received n the prt are accepted. switchprt private-vlan frwarding {gigabitethernet <interface-list> all} Interface Cnfiguratin Cnfigures the prtlist that can be frwarded frm the specified prts. GVRP n switchprt private-vlan frwarding management-vlan n management-vlan shw gvrp [{prt-set timer} [interface gigabitethernet <interface-id>] Interface Cnfiguratin VLAN cnfiguratin VLAN cnfiguratin Privileged EXEC Reset the prtlist that can be frwarded frm the specified prts. Cnfigures VLAN t management VLAN. Remve VLAN frm management VLAN. Display the GVRP cnfiguratin f all interfaces available in the switch. 116

121 gvrp n gvrp gvrp timer {jin <integer( )> leave <integer( )> leaveall <integer( )>} Glbal cnfigure Glbal cnfigure interface cnfigure mde Enable GVRP feature in the switch n all prts. Disable GVRP feature in the switch n all prts. Sets the gvrp timer fr jin, leave and leaveall. QS gvrp prt {Dynamic-Vlan Restricted-VLAN-Registratin} n gvrp prt {Dynamic-Vlan Restricted-VLAN-Registratin} shw qs trust interface cnfigure mde interface cnfigure mde Privileged EXEC Sets the gvrp prt Dynamic Vlan r Restricted VLAN Registratin. Disabled the gvrp prt status. Display the cnfiguratin f QS trust shw qs def-user-pririty [interface gigabitethernet <interface-id>] Privileged EXEC Display the interfaces cnfiguratin f QS shw queue-map {cs dscp IPv6-Traffic-Class} Privileged EXEC Display the queue mapping f QS shw qs scheduling plicy Privileged EXEC Display the scheduling f QS qs interface gigabitethernet <interface-id> def-user-pririty Cnfigure QS pririty n interfaces <pririty(0-7)> Glbal Cnfigure user pririty value n qs interface gigabitethernet <interface-id> qs trust {cs dscp IPv6-Traffic-Class} n qs trust {cs dscp IPv6-Traffic-Class} queue-map {cs <integer(0-7)> dscp <integer(0-63)> IPv6-Traffic-Class <integer(0-255)>} queue-id Glbal Cnfigure Glbal Cnfigure Glbal Cnfigure Glbal Cnfigure <pririty(0-7)>:qs Cnfigure QS pririty t default value n interfaces. Cnfigure QS trust Cnfigure QS untrust Cnfigure QS queue mapping n queue-map {cs dscp IPv6-Traffic-Class} Glbal Cnfigure Cnfigure QS queue mapping t default 117

122 qs scheduling plicy {strict wrr} n qs scheduling plicy Glbal Cnfigure Glbal Cnfigure Cnfigure QS scheduling strict:strict Pririty wrr:weighted Rund Rbin Cnfigure QS scheduling t default value. SNMP N/A shw snmp [{engineid viewtree grup user cmmunity traps-management}] EXEC mde Displays SNMP server related cnfiguratin. snmp-server Glbal cnfigure Enable the SNMP agent peratin. n snmp-server Glbal cnfigure Disable the SNMP agent peratin. snmp-server traps Enable the switch t send SNMP ntificatins fr varius Glbal cnfigure traps. n snmp-server traps Disalbe the switch t send SNMP ntificatins fr varius Glbal cnfigure traps. snmp-server engineid <string(64)> Cnfigures the engine ID that is utilized as a unique identifier Glbal cnfigure f a SNMP engine. n snmp-server engineid snmp-server viewtree <ViewName(32)> SubtreeOID <OIDString> [OIDmask <OIDstring>] {included excluded} Glbal cnfigure Glbal cnfigure Resets the engine ID t the default value. Add the SNMP view tree. n snmp-server viewtree <ViewName(32)> SubtreeOID <OIDString> Glbal cnfigure Delete the SNMP view tree. snmp-server hst {<ipv4_addr> <ipv6_addr>} versin {v1 v2c v3 {auth nauth priv}} <CmmunityName/UserName> n snmp-server hst {<ipv4_addr> <ipv6_addr>} Glbal cnfigure Glbal cnfigure Specify the recipient(hst) f a SNMP ntificatin peratin. Remve the specified hst f a SNMP ntificatin peratin. 118

123 snmp-server user <username> <grupname> {v1 v2c v3 [encrypted auth {md5 sha} <auth-passwrd> [priv des <priv-passwrd>]]} Glbal cnfigure Add a new user accunt fr an SNMP grup. n snmp-server user <username> {v1 v2c v3} snmp-server grup <grupname> {v1 v2c v3 {auth nauth priv}} [read <ReadViewName>] [write <WriteViewName>] [ntify <NtifyViewName>] Glbal cnfigure Glbal cnfigure Delete specified SNMP user accunt. Cnfigure a new SNMP grup n device. n snmp-server grup <grupname> {v1 v2c v3 {auth nauth priv}} Glbal cnfigure Delete a SNMP grup n device. snmp-server cmmunity <CmmunityName> user <UserName> Glbal cnfigure Cnfigure SNMP cmmunity string. n snmp-server cmmunity <CmmunityName> Glbal cnfigure Delete specify SNMP cmmunity string. Access Cntrl Cnfig N/A shw access-cntrl-list {{<access-list-number( )> plicy-sequence <plicy-sequence( )>} [srt {index sequence}]} Privileged EXEC Display ipv4 access cntrl lists (ACLs) cnfigured n the switch. shw ipv6 access-cntrl-list {{<access-list-number( )> plicy-sequence <plicy-sequence( )>} [srt {index sequence}]} Privileged EXEC Display ipv6 access cntrl lists (ACLs) cnfigured n the switch. shw acl rate-limit Privileged EXEC Display acl rate limit. 119

124 access-cntrl-list <access-list-number( )> {high lw} {deny permit} [hst-smac <surce-mac> <mask(1-48)>] [hst-dmac <destinatin-mac> <mask(1-48)>] [vlanid <vlan-id>] [dt1p-pririty <802.1p-pririty(0-7)>] [ethertype <ethertype>] [prtcl <prtcl(1-255)>] [hst-sip <surceip> <surce-wildcard(1-32)>] [hst-dip <destinatin-ip> <destinatin-wildcard(1-32)>] [dscp <dscp(0-63)>] [sprt <surce-prt( )>] [dprt <destinatin-prt( )>] plicy-sequence <plicy-sequence( )> [{replaced-cs <replaced-cs(0-7)> replaced-dscp <replaced-dscp(0-63)>}] [rate-cntrl-index <rate-cntrlindex( )>] interface gigabitethernet <interface-list> [status {enable disable}] Glbal cnfiguratin Add specified L2/IPv4 access list entry. n access-cntrl-list {<access-list-number( )> plicy-sequence <plicy-sequence( )>} access-cntrl-list status {<access-list-number( )> plicy-sequence <plicy-sequence( )>} enable Glbal cnfiguratin Glbal cnfiguratin Delete the specified L2/IPv4 access list. Enable specify L2/IPv4 ACL entry. n access-cntrl-list status {<access-list-number( )> plicy-sequence <plicy-sequence( )>} enable Glbal cnfiguratin Disable specify L2/IPv4 ACL entry. 120

125 n access-list { <access-list-number( )> plicysequence <plicy-sequence( )> } ipv6 access-cntrl-list <access-list-number( )> {deny permit} [vlanid <vlan-id>] [dt1p-pririty <802.1ppririty(0-7)>] [prtcl <prtcl(1-255)>] [hst-sip <surce-ip> <surce-wildcard>] [hst-dip <destinatin-ip> <destinatin-wildcard>] [traffic-class <traffic-class(0-255)>] [sprt <surce-prt( )>] [dprt <destinatin-prt( )>] plicy-sequence <plicy-sequence( )> [replaced-cs <replaced-cs(0-7)>] [rate-cntrl-index <ratecntrl-index( )>] interface gigabitethernet <interface-list> [status {enable disable}] Glbal cnfiguratin Glbal cnfiguratin Remve the specified ipv4 access entry. Add specified ipv6 access list entry. n ipv6 access-cntrl-list {<access-list-number( )> plicy-sequence <plicy-sequence( )>} ipv6 access-cntrl-list status {<access-list-number( )> plicy-sequence <plicy-sequence( )>} enable n ipv6 access-cntrl-list status {<access-list-number( )> plicy-sequence <plicy-sequence( )>} enable Glbal cnfiguratin Glbal cnfiguratin Glbal cnfiguratin Delete the specified ipv6 access cntrl list. Enable specify IPv6 ACL entry. Disable specify IPv6 ACL entry. 121

126 acl rate-limit <index( )> rate <value( )> n acl rate-limit <index( )> Glbal cnfiguratin Glbal cnfiguratin Create a rate limit entry fr ACL. Delete the specified rate limit entry. RMON N/A shw rmn EXEC mde Displays general RMON status. shw rmn alarms EXEC mde Displays the RMON alarm tables. shw rmn events EXEC mde Displays the RMON event tables. shw rmn histry EXEC mde Displays the RMON histry tables. shw rmn statistics EXEC mde Displays the RMON statistics tables. rmn Glbal cnfigure Enable the RMON feature in the system. n rmn rmn alarm <index> <variable> <interval> {abslute delta} rising-threshld <value> [<event-index>] falling-threshld <value> [<event-index>] [wner <string>] Glbal cnfigure Glbal cnfigure Disable the RMON feature in the system. Set an alarm n a MIB bject. n rmn alarm <index( )> rmn event <index> descriptin <string(32)> [lg] [trap <cmmunity>] [wner <wnername>] n rmn event <index( )> rmn cllectin histry <index( )>[buckets <bucketnumber(1-50)>] [interval <secnds(1-3600)>][wner <wnername>] Glbal cnfigure Glbal cnfigure Glbal cnfigure interface cnfigure mde Disables RMON alarm in system. Add an event in the RMON event table that is assciated with an RMON event number. Disables RMON event in system. Enable histry cllectin fr the specified number f buckets an time perid. n rmn cllectin histry <index( )> rmn cllectin stats <index( )> [wner <wnername>] Glbal cnfigure interface cnfigure mde Disables RMON histry cllectin n the interface. Cllect grup Ethernet rmn statistics n an interface. 122

127 n rmn cllectin stats <index( )> Glbal cnfigure Disables RMON statistic cllectin n the interface. Vice VLAN N/A shw vice-vlan shw vice-vlan ui vice-vlan <vlan-id> <cs(0-7)> <aging-time(1-20)> n vice-vlan vice-vlan ui <mac-ui> <descriptin(20)> n vice-vlan ui <mac-ui> vice-vlan aut-detectin n vice-vlan aut-detectin vice-vlan User EXEC User EXEC Glbal cnfiguratin Glbal cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Glbal cnfiguratin Display the parameters and infrmatin fr vice VLAN n the switch. Display cnfigured ui fr vice VLAN n the switch. Enable and cnfigures the parameters fr vice VLAN. Disable the vice VLAN functin. Add an OUI t Vice VLAN OUI List. Delete an OUI frm Vice VLAN OUI List. Enable vice VLAN aut detectin n the prt(s). Disable vice VLAN aut detectin n the prt(s). Enable the vice VLAN functin. Security Prt Access Cntrl shw dt1x [{all [summary] interface gigabitethernet <interface-id>}] Privileged EXEC Display dt1x per system infrmatin r per prt infrmatin. aaa n aaa set nas-id <identifier(16)> aaa authenticatin dt1x default { grup {radius tacacs+} lcal} Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Enables the AAA access cntrl mdel Disables the AAA access cntrl mdel. sets the dt1x netwrk access server id. Cnfig Authenticatin Methd n aaa authenticatin dt1x default Glbal Cnfiguratin Reset authenticatin methd. 123

128 dt1x initialize [interface gigabitethernet <interface-id>] dt1x auth-mde {802.1x mac-based} dt1x prt-cntrl {aut frce-authrized frceunauthrized} n dt1x prt-cntrl dt1x reauthenticatin n dt1x reauthenticatin dt1x hst-mde {multi-hst single-hst} dt1x piggyback n dt1x piggyback dt1x vlan-assignment n dt1x vlan-assignment dt1x secure-vlan n dt1x secure-vlan dt1x guest-vlan <vlan-id> n dt1x guest-vlan Glbal Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Interface Cnfiguratin Initialize the IEEE 802.1x state machines and t set up a fresh envirnment fr authenticatin. Cnfigure the authenticatin Mde f a prt as either 802.1x r mac-based Cnfigure the authenticatr prt cntrl parameter Sets the authenticatr prt cntrl state t frce authrized. Enable peridic re-authenticatin f the client. Disable peridic re-authenticatin f the client. This cmmand cnfigures the prt authenticatin Mde f a prt as either multi-hst r single-hst Enable dt1x piggyback Disable dt1x piggyback Enable dt1x vlan-assignment Enable dt1x vlan-assignment Enable dt1x secure-vlan Disable dt1x secure-vlan Specify an active VLAN as an IEEE 802.1x guest VLAN. Return t the default setting. 124

129 dt1x timeut {quiet-perid <secnds( )> reauthperid <secnds( )> server-timeut <secnds( )> supp-timeut <secnds( )> tx-perid <secnds( )>} Interface cnfiguratin Sets the number f secnds fr quiet-perid,reauthperid,server-timeut,supp-timeut,tx-perid. n dt1x timeut {quiet-perid reauth-perid servertimeut supp-timeut tx-perid} Interface cnfiguratin Return t the default setting fr quiet-perid,reauthperid,server-timeut,supp-timeut,tx-perid. dt1x max-req <cunt(1-10)> Interface cnfiguratin set the maximum number f times that the switch sends an Extensible Authenticatin Prtcl (EAP) frame frm the authenticatin server (assuming that n respnse is received) t the client befre restarting the authenticatin prcess. Dial-in User n dt1x max-req shw dt1x lcal-database [<username(23)>] Interface cnfiguratin Privileged EXEC Return t the default setting. Display the related infrmatin f all lcal-database. dt1x lcal-database <username(23)> passwrd <passwrd(23)> dynamic-vlan <vlan-id> Glbal cnfiguratin Cnfigure the username, passwrd and dynamic vlan fr lcal server. RADIUS n dt1x lcal-database <username(23)> shw radius server [{<ipv4-address> <ipv6-address>}] Glbal cnfiguratin Privileged EXEC Deletes specified lcal server. Display the related infrmatin f all radius servers r the specified address f the radius server hst. 125

130 radius-server hst {<ipv4-address> <ipv6-address>} pririty <pririty(1-5)> auth-prt <udp-prt(( )> acct-prt <udp-prt( )> key <secret-key(32)> Glbal cnfiguratin Cnfigure the IP address f the remte radius server and pririty, the UDP destinatin prt fr authenticatin requests, the UDP destinatin prt fr accunting requests, and the authenticatin and encryptin key used between the switch and the RADIUS ser TACACS+ n radius-server hst {<ipv4-address> <ipv6-address>} shw tacacs-server [{<ipv4-address> <ipv6-address>}] Glbal cnfiguratin Privileged EXEC Deletes specified radius server cnfiguratin. Display the related infrmatin f all tacacs servers r the specified address f the tacacs server hst. tacacs-server hst {<ipv4-address> <ipv6-address>} pririty <pririty(1-5)> prt <tcp-prt ( )> timeut <secnds(1-255)>] key <secret-key(32)> Glbal Cnfiguratin Cnfigure the IP address f the remte tacacs server and pririty, the TCP prt fr authenticatin requests,the time perid (in secnds) till which a client waits fr a respnse frm the server befre clsing the TCP cnnectin, and the authenticatin and encryptin key used between the switch and the RADIUS server. Destinatin MAC Filter n tacacs-server hst {<ipv4-address> <ipv6-address>} Glbal Cnfiguratin Remve the specified tacacs server cnfiguratin shw mac-filter Privileged EXEC Display mac filter infrmaitn. mac-filter deny hst <dst-mac-addr > Glbal Cnfiguratin Destinatin mac matched will be drpped. n mac-filter deny hst <dst-mac-addr > Glbal Cnfiguratin Remve the specified mac filter entry. Denial f Service shw ds-preventin [{tcp-syn-pkt-in-data tcp-null-scan tcp-ver-mac-mc-bc tcp-fin-urg-psh tcp-syn-rst tcp-udpprt-zer fragmented-icmp arp-sa-mismatch}] Privileged EXEC Display Denial f Service status 126

131 ds-preventin {all tcp-syn-pkt-in-data tcp-null-scan tcp-ver-mac-mc-bc tcp-fin-urg-psh tcp-syn-rst tcp-udpprt-zer fragmented-icmp arp-sa-mismatch} Glbal Cnfiguratin enable Denial f Service n ds-preventin {all tcp-syn-pkt-in-data tcp-null-scan tcp-ver-mac-mc-bc tcp-fin-urg-psh tcp-syn-rst tcp-udpprt-zer fragmented-icmp arp-sa-mismatch} Glbal Cnfiguratin disable Denial f Service Pwer ver Ethernet DHCP Snping N/A shw pwer inline [{gigabitethernet <interface-id>}] Privileged EXEC pwer inline prt pririty {critical high lw} n pwer inline prt pririty pwer inline prt n pwer inline prt pwer inline prt pwer-limit {class0 class1 class2 class3 userdefined <pwer-limit(1-15.4)>} pwer inline management methd {aut manual} interface cnfigure mde interface cnfigure mde interface cnfigure mde interface cnfigure mde interface cnfigure mde Glbal Cnfiguratin General Settings shw ip dhcp snping User EXEC ip dhcp snping n ip dhcp snping Glbal Cnfiguratin Glbal Cnfiguratin Displays the pwer status fr all r the specified Pwer Over Ethernet interface. Set the pwer pririty f the prt t critical r high r lw. Reset pwer pririty t default. Enable PE fr interface. Disable PE fr interface.rt Cnfigure the pwer limit type. Cnfigure pwer management methd per system. aut:supprt AF and AT mde manual:nly supprt AF mde and user can cnfigure limit pwer value Displays the DHCP snping cnfiguratin Enable DHCP snping glbally Disable DHCP snping glbally 127

132 ip dhcp snping infrmatin ptin allw-untrusted n ip dhcp snping infrmatin ptin allw-untrusted Glbal Cnfiguratin Glbal Cnfiguratin Cnfigure it t accept DHCP packets with ptin-82 infrmatin Reset it t accept DHCP packets with ptin-82 infrmatin ip dhcp snping verify mac-address Glbal Cnfiguratin n ip dhcp snping verify mac-address Glbal Cnfiguratin ip dhcp snping database write Glbal Cnfiguratin n ip dhcp snping database write Glbal Cnfiguratin ip dhcp snping database write-delay <secnds> Glbal Cnfiguratin n ip dhcp snping database write-delay Glbal Cnfiguratin ip dhcp snping infrmatin ptin Glbal Cnfiguratin n ip dhcp snping infrmatin ptin Glbal Cnfiguratin VLAN Settings shw ip dhcp snping vlan User EXEC Trusted Interface ip dhcp snping vlan <vlan-range> n ip dhcp snping vlan <vlan-range> shw ip dhcp snping trust interface [gigabitethernet <interface-id>] Glbal Cnfiguratin Glbal Cnfiguratin User EXEC Cnfigure the switch t verify the surce MAC address in a DHCP packet Reset the switch t verify the surce MAC address in a DHCP packet Enable the DHCP snping binding database save t lcal Disable the DHCP snping binding database save t lcal Cnfigure the DHCP snping binding database save t lcal interval Reset the DHCP snping binding database save t lcal interval Enable DHCP ptin-82 data insertin Disable DHCP ptin-82 data insertin Displays the DHCP snping vlan cnfiguratin Enables DHCP snping n a VLAN Disable DHCP snping n a VLAN Displays the DHCP snping interface trust cnfiguratin ip dhcp snping trust n ip dhcp snping trust Interface cnfiguratin Interface cnfiguratin Cnfigure a prt as trusted fr DHCP snping purpses Reset a prt as trusted fr DHCP snping purpses 128

133 Binding Database shw ip dhcp snping binding [<ipv4-address> <ipv6- address>] [<mac-address>] [interface gigabitethernet <interface-id>] [vlan <vlan-id>] User EXEC Display the DHCP snping binding database ip dhcp snping binding <mac-address> vlan <vlan-id> <ipaddress> interface gigabitethernet <interface-id> [expiry <secnds>] Glbal Cnfiguratin Cnfigures the DHCP snping binding database n ip dhcp snping binding <mac-address> vlan <vlan-id> {<ipv4_addr> <ipv6_addr>} Glbal Cnfiguratin Reset the DHCP snping binding database LLDP N/A shw lldp User EXEC shw lldp interface [gigabitethernet <interface-id>] User EXEC Displays the DHCP snping cnfiguratin Display infrmatin abut interfaces with LLDP enabled shw lldp neighbrs [gigabitethernet <interface-id>] [detail] lldp n lldp lldp hldtime-multiplier <value(2-10)> n lldp hldtime-multiplier lldp timer <rate> n lldp timer lldp reinit <time(1-10)> User EXEC Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Display infrmatin abut neighbrs Enable LLDP glbally n the switch Disable LLDP glbally n the switch Sets the multiplier value Sets the multiplier t the default value(4) Set the sending frequency f LLDP updates in secnds Reset the sending frequency f LLDP updates in secnds Sets the re-initializatin delay 129

134 n lldp reinit lldp tx-delay <time(1-8192)> n lldp tx-delay lldp prt {RxOnly TxOnly RxTx Disable} Glbal Cnfiguratin Glbal Cnfiguratin Glbal Cnfiguratin Interface cnfiguratin(prt ) Sets the re-initializatin delay t the default value(2 secnds) Sets the transmit delay Sets the transmit delay t the default value(2 secnds) Enable the interface t send LLDP packets TOOLS Firmware Upgrade archive dwnlad-sw directry <tftp://ip-address/filename> retry <times> Privileged EXEC Dwnlad a new image frm a TFTP server t the switch and t verwrite r keep the existing image Cnfig File Backup/Restre Cable Diagnstics cpy nvram-startup-cnfig <tftp://ip-address/filename> privileged EXEC Cpy start up cnfiguratin file t remte TFTP server fr backup. cpy nvram-startup-cnfig <tftp://ip-address/filename> privileged EXEC Cpy start up cnfiguratin file t remte TFTP server fr backup. cpy <tftp://ip-address/filename> nvram-startup-cnfig shw cable-diagnstics tdr interface gigabitethernet <interface-id> privileged EXEC User EXEC Cpy start up cnfiguratin file frm remte TFTP server fr restre. Display the cable diagnstics infrmatin. IEEE 802.3az EEE shw eee User EXEC eee n eee glbal cnfigure glbal cnfigure Rebt relad [factry-default factry-default-except-ip] Privileged EXEC Ping ping {<ipv4_addr> <ipv6_addr>} [timeut <time_ut(1-5)>] [repeat <times(1-10)>] User EXEC Display Energy Efficient Ethernet status infrmatin. Enable Energy Efficient Ethernet status. Disable Energy Efficient Ethernet status. Rebt. ping Ping destinatin address r hstname. Save Settings t Flash cpy running-cnfig startup-cnfig privileged EXEC Save cnfiguratins t flash. 130

135 Technical Specificatins Standards IEEE 802.1d IEEE 802.1p IEEE 802.1Q IEEE 802.1s IEEE 802.1w IEEE 802.1X IEEE 802.1ab IEEE IEEE 802.3u IEEE 802.3x IEEE 802.3z IEEE 802.3ab IEEE 802.3ad IEEE 802.3af (15.4 Watts/prt) IEEE 802.3at (30 Watts/prt) IEEE 802.3az Device Interface 24 x Gigabit PE+ prts 24 x Gigabit prts 4 x shared Gigabit SFP slts 1 x RJ-45 cnsle prt LED indicatrs Reset buttn Data Transfer Rate Ethernet: 10 Mbps (half duplex), 20 Mbps (full duplex) Fast Ethernet: 100 Mbps (half duplex), 200 Mbps (full duplex) Gigabit Ethernet: 2000 Mbps (full duplex) Perfrmance Switch fabric: 96 Gbps RAM buffer: 1 MB MAC Address Table: 16K entries Jumb Frames: 10 KB HOL Blcking Preventin Frwarding rate: 71.4 Mpps (64-byte packet size) Management CLI (Cnsle/Telnet/SSHv2) HTTP/HTTPS (SSL v2/3 TLS) Web based GUI SNMP v1, v2c, v3 RMON v1 Static Unicast MAC Address Enable/disable 802.3az Pwer Saving LLDP Virtual Cable Test IPv6: IPv6 Neighbr Discvery, IPv6 Static IP, DHCPv6, Aut cnfiguratin MIB MIB II RFC 1213 Bridge MIB RFC 1493 Bridge MIB Extensin RFC 2674 SNMPv2 MIB RFC 1907 Ethernet Interface MIB RFC 1643 Ethernet like MIB RFC 2863 Interface Grup MIB RFC 2233 MIB Traps Cnventin RFC 1215 RMON MIB RFC 1757, RFC p MIB RFC 2674 RADIUS Client Authenticatin MIB RFC 2618 LLDP-MIB IEEE 802.1ab Ping MIB RFC 2925, RFC

136 Spanning Tree IEEE 802.1D STP (Spanning Tree prtcl) IEEE 802.1w RSTP (Rapid Spanning Tree prtcl) IEEE 802.1s MSTP (Multiple Spanning Tree prtcl) Link Aggregatin Static Link Aggregatin 802.3ad Dynamic LACP Quality f Service (QS) 802.1p Class f Service (CS) DSCP (Differentiated Services Cde Pint) Bandwidth Cntrl per prt Queue Scheduling: Strict Pririty, Weighted Rund Rbin (WRR) VLAN Multiple management VLAN assignment Asymmetric VLAN 802.1Q Tagged VLAN Dynamic GVRP Up t 256 VLAN grups, ID Range Private VLAN (Prtected Prts) Vice VLAN (10 user defined OUIs) Multicast IGMP Snping v1, v2, v3 Static Multicast Address Up t 256 multicast entries MLD Snping v1, v2 Prt Mirrr RX, TX, r Bth One t ne Many t ne Access Cntrl 802.1X Prt-Based Netwrk Access Cntrl, RADIUS, TACACS+ Lcal Dial In User Authenticatin DHCP Snping Lpback Detectin Duplicated Address Detectin Trusted Hst Denial f Service (DS) ACL IPv4 L2-L4 & IPv6 MAC Address VLAN ID Ether Type (IPv4 nly) IP Prtcl TCP/UDP Prt p DSCP (IPv4 nly) IPv6 Address (IPv6 nly) Management Utility Windws 10, 8.1, 8, 7, Vista, XP, Windws 2003/2008 Server Special Features PE+ prts Pwer Input: V AC, 50/60 Hz, internal pwer supply Cnsumptin: W (max.) PE PE budget: 370 W 802.3at: Up t 30 W per prt (prts 1-24) Mde A: Pins 1,2 fr pwer(+) and pins 3,6 fr pwer(-) PD aut classificatin 132

137 Over current/shrt circuit prtectin Smart Fan / Acustics Quantity: 4 Nise Level: 56 db(a) (max.) MTBF 318,350 hurs Operating Temperature 0 45 C ( F) Operating Humidity Max. 90% nn-cndensing Dimensins 440 x 430 x mm (17.3 x x 1.75 in.) Rack muntable 1U height Weight 6.61 kg (14.57 lbs.) Certificatins CE FCC UL 133

138 Trubleshting Q: I typed in my Internet Brwser Address Bar, but an errr message says The page cannt be displayed. Hw can I access the switch management page? Answer: 1. Check yur hardware settings again. See Switch Installatin n page Make sure the Pwer and prt Link/Activity and WLAN lights are lit. 3. Make sure yur netwrk adapter TCP/IP settings are set t Use the fllwing IP address r Static IP(see the steps belw). 4. Make sure yur cmputer is cnnected t ne f the Ethernet switch prts. 5. Since the switch default IP address is , make sure there are n ther netwrk devices assigned an IP address f Q: If my switch IP address is different than my netwrk s subnet, what shuld I d? Answer: Yu shuld still cnfigure the switch first. After all the settings are applied, g t the switch cnfiguratin page, click n System, click IPv4 Setup and change the IP address f the switch t be within yur netwrk s IP subnet. Click Apply, then click OK. Then click Save Settings t Flash (menu) and click Save Settings t Flash t save the IP settings t the NV-RAM. Q: I changed the IP address f the switch, but I frgt it. Hw d I reset my switch? Answer: Using a paper clip, push and hld the reset buttn n the frnt f the switch and release after 15 secnds. The default IP address f the switch is The default user name and passwrd is admin. Windws 7/8/8.1/10 a. G int the Cntrl Panel, click Netwrk and Sharing Center. b. Click Change Adapter Settings, right-click the Lcal Area Cnnectin icn. c. Then click Prperties and click Internet Prtcl Versin 4 (TCP/IPv4). d. Then click Use the fllwing IP address, and make sure t assign yur netwrk adapter an IP address in the subnet f x. Click OK Windws Vista a. G int the Cntrl Panel, click Netwrk and Internet. b. Click Manage Netwrk Cnnectins, right-click the Lcal Area Cnnectin icn and click Prperties. c. Click Internet Prtcl Versin (TCP/IPv4) and then click Prperties. d. Then click Use the fllwing IP address, and make sure t assign yur netwrk adapter an IP address in the subnet f x. Click OK Windws XP/2000 a. G int the Cntrl Panel, duble-click the Netwrk Cnnectins icn b. Right-click the Lcal Area Cnnectin icn and the click Prperties. c. Click Internet Prtcl (TCP/IP) and click Prperties. d. Then click Use the fllwing IP address, and make sure t assign yur netwrk adapter an IP address in the subnet f x. Click OK Nte: If yu are experiencing difficulties, please cntact yur cmputer r perating system manufacturer fr assistance. 134

139 Appendix Hw t find yur IP address? Nte: Please nte that althugh the fllwing prcedures prvided t fllw fr yur perating system n cnfiguring yur netwrk settings can be used as general guidelines, hwever, it is strngly recmmended that yu cnsult yur cmputer r perating system manufacturer directly fr assistance n the prper prcedure fr cnfiguring netwrk settings. Cmmand Prmpt Methd Windws 2000/XP/Vista/7/8/8.1/10 1. On yur keybard, press Windws Lg+R keys simultaneusly t bring up the Run dialg bx. 2. In the dialg bx, type cmd t bring up the cmmand prmpt. 3. In the cmmand prmpt, type ipcnfig /all t display yur IP address settings. MAC OS X 1. Navigate t yur Applicatins flder and pen Utilities. 2. Duble-click n Terminal t launch the cmmand prmpt. 3. In the cmmand prmpt, type ipcnfig getifaddr <en0 r en1> t display the wired r wireless IP address settings. Nte: en0 is typically the wired Ethernet and en1 is typically the wireless Airprt interface. Graphical Methd MAC OS 10.6/ Frm the Apple menu, select System Preferences. 2. In System Preferences, frm the View menu, select Netwrk. 3. In the Netwrk preference windw, click a netwrk prt (e.g., Ethernet, AirPrt, mdem). If yu are cnnected, yu'll see yur IP address settings under "Status:" MAC OS Frm the Apple menu, select Lcatin, and then Netwrk Preferences. 2. In the Netwrk Preference windw, next t "Shw:", select Netwrk Status. Yu'll see yur netwrk status and yur IP address settings displayed. Nte: If yu are experiencing difficulties, please cntact yur cmputer r perating system manufacturer fr assistance. Hw t cnfigure yur netwrk settings t use a static IP address? Nte: Please nte that althugh the fllwing prcedures prvided t fllw fr yur perating system n cnfiguring yur netwrk settings can be used as general guidelines, hwever, it is strngly recmmended that yu cnsult yur cmputer r perating system manufacturer directly fr assistance n the prper prcedure fr cnfiguring netwrk settings. Windws 7/8/8.1/10 Windws Vista a. G int the Cntrl Panel, click Netwrk and Sharing Center. b. Click Change Adapter Settings, right-click the Lcal Area Cnnectin icn. c. Then click Prperties and click Internet Prtcl Versin 4 (TCP/IPv4). d. Then click Use the fllwing IP address, and assign yur netwrk adapter a static IP address. Click OK a. G int the Cntrl Panel, click Netwrk and Internet. b. Click Manage Netwrk Cnnectins, right-click the Lcal Area Cnnectin icn and click Prperties. c. Click Internet Prtcl Versin (TCP/IPv4) and then click Prperties. d. Then click Use the fllwing IP address, and assign yur netwrk adapter a static IP address. Click OK Windws XP/2000 a. G int the Cntrl Panel, duble-click the Netwrk Cnnectins icn b. Right-click the Lcal Area Cnnectin icn and the click Prperties. c. Click Internet Prtcl (TCP/IP) and click Prperties. d. Then click Use the fllwing IP address, and assign yur netwrk adapter a static IP address. Click OK MAC OS 10.4/10.5/10.6 a. Frm the Apple, drp-dwn list, select System Preferences. b. Click the Netwrk icn. c. Frm the Lcatin drp-dwn list, select Autmatic. d. Select and view yur Ethernet cnnectin. 135

140 In MAC OS 10.4, frm the Shw drp-dwn list, select Built-in Ethernet and select the TCP/IP tab. In MAC OS 10.5/10.6, in the left clumn, select Ethernet. e. Cnfigure TCP/IP t use a static IP. In MAC 10.4, frm the Cnfigure IPv4, drp-dwn list, select Manually and assign yur netwrk adapter a static IP address. Then click the Apply Nw buttn. In MAC 10.5/10.6, frm the Cnfigure drp-dwn list, select Manually and assign yur netwrk adapter a static IP address. Then click the Apply buttn. f. Restart yur cmputer. Nte: If yu are experiencing difficulties, please cntact yur cmputer r perating system manufacturer fr assistance. Hw t find yur MAC address? In Windws 2000/XP/Vista/7/8.1/.10, Yur cmputer MAC addresses are als displayed in this windw, hwever, yu can type getmac v t display the MAC addresses nly. In MAC OS 10.4, 1. Apple Menu > System Preferences > Netwrk 2. Frm the Shw menu, select Built-in Ethernet. 3. On the Ethernet tab, the Ethernet ID is yur MAC Address. In MAC OS 10.5/10.6, 1. Apple Menu > System Preferences > Netwrk 2. Select Ethernet frm the list n the left. 3. Click the Advanced buttn. 3. On the Ethernet tab, the Ethernet ID is yur MAC Address. 136

141 Federal Cmmunicatin Cmmissin Interference Statement This equipment has been tested and fund t cmply with the limits fr a Class B digital device, pursuant t Part 15 f the FCC Rules. These limits are designed t prvide reasnable prtectin against harmful interference in a residential installatin. This equipment generates, uses and can radiate radi frequency energy and, if nt installed and used in accrdance with the instructins, may cause harmful interference t radi cmmunicatins. Hwever, there is n guarantee that interference will nt ccur in a particular installatin. If this equipment des cause harmful interference t radi r televisin receptin, which can be determined by turning the equipment ff and n, the user is encuraged t try t crrect the interference by ne f the fllwing measures: Rerient r relcate the receiving antenna. Increase the separatin between the equipment and receiver. Cnnect the equipment int an utlet n a circuit different frm that t which the receiver is cnnected. Cnsult the dealer r an experienced radi/tv technician fr help. FCC Cautin: Any changes r mdificatins nt expressly apprved by the party respnsible fr cmpliance culd vid the user's authrity t perate this equipment. This device cmplies with Part 15 f the FCC Rules. Operatin is subject t the fllwing tw cnditins: (1) This device may nt cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired peratin. RHS This prduct is RHS cmpliant. Eurpe EU Declaratin f Cnfrmity TRENDnet hereby declare that the prduct is in cmpliance with the essential requirements and ther relevant prvisins under ur sle respnsibility. EN : A11 : A1: A12: A2: 2013 EN 55032: 2012 EN 55024: 2010 EN : 2014 EN : 2013 IMPORTANT NOTE: Radiatin Expsure Statement: This equipment cmplies with FCC radiatin expsure limits set frth fr an uncntrlled envirnment. This equipment shuld be installed and perated with minimum distance 20cm between the radiatr & yur bdy. This transmitter must nt be c-lcated r perating in cnjunctin with any ther antenna r transmitter. Cuntry Cde selectin feature t be disabled fr prducts marketed t the US/CANADA Directives: CE Mark Warning Lw Vltage Directive 2006/95/EC and 2014/35/EU EMC Directive 2004/108/EC and EN 2014/30/EU RHS Directive 2011/65/EU REACH Regulatin (EC) N. 1907/2006 This is a Class A prduct. In a dmestic envirnment, this prduct may cause radi interference, in which case the user may be required t take adequate measures. 137

142 Česky [Czech] TRENDnet tímt prhlašuje, že tent je ve shdě se základními pžadavky a dalšími příslušnými ustanveními směrnice 2014/35/EU, 2014/30/EU, 2004/108/ES a 2006/95/ES. Lietuvių [Lithuanian] Šiu TRENDnet deklaruja, kad šis atitinka esminius reikalavimus ir kitas 2014/35/EU, 2014/30/EU, 2004/108/EB ir 2006/95/EB Direktyvs nustatas. Dansk [Danish] Deutsch [German] Eesti [Estnian] English Españl [Spanish] Ελληνική [Greek] Undertegnede TRENDnet erklærer herved, at følgende udstyr TL2- PG484 verhlder de væsentlige krav g øvrige relevante krav i direktiv 2014/35/EU, 2014/30/EU, 2004/108/EF g 2006/95/EF. Hiermit erklärt TRENDnet, dass sich das Gerät in Übereinstimmung mit den grundlegenden Anfrderungen und den übrigen einschlägigen Bestimmungen der Richtlinie 2014/35/EU, 2014/30/EU, 2004/108/EG, und 2006/95/EG befindet. Käeslevaga kinnitab TRENDnet seadme vastavust direktiivi 2014/35/EU, 2014/30/EU, 2004/108/EÜ ja 2006/95/EÜ põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjakhastele sätetele. Hereby, TRENDnet, declares that this is in cmpliance with the essential requirements and ther relevant prvisins f Directive 2014/35/EU, 2014/30/EU, 2004/108/EC and 2006/95/EC. Pr medi de la presente TRENDnet declara que el cumple cn ls requisits esenciales y cualesquiera tras dispsicines aplicables exigibles de la Directiva 2014/35/EU, 2014/30/EU, 2004/108/CE, 2006/95/CE y. ΜΕ ΤΗΝ ΠΑΡΟΥΣΑTRENDnet ΔΗΛΩΝΕΙ ΟΤΙTL2- PG484ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩΔΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ΔΙΑΤΑΞΕΙΣ ΤΗΣ ΟΔΗΓΙΑΣ 2014/35/EU, 2014/30/EU, 2004/108/ΕΚ, 2006/95/ΕΚ και. Nederlands [Dutch] Malti [Maltese] Magyar [Hungarian] Plski [Plish] Prtuguês [Prtuguese] Slvensk [Slvenian] Hierbij verklaart TRENDnet dat het testel in vereenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 2014/35/EU, 2014/30/EU, 2004/108/EG en 2006/95/EG. Hawnhekk, TRENDnet, jiddikjara li dan jikknfrma mal-ħtiġijiet essenzjali u ma prvvedimenti ħrajn relevanti li hemm fid-dirrettiva 2014/35/EU, 2014/30/EU, 2004/108/KE u 2006/95/KE. Alulírtt, TRENDnet nyilatkzm, hgy a megfelel a vnatkzó alapvetõ követelményeknek és az 2014/35/EU, 2014/30/EU, 2004/108/EK irányelv és a 2006/95/EK irányelv egyéb elõírásainak. Niniejszym TRENDnet świadcza, że jest zgdny z zasadniczymi wymgami raz pzstałymi stswnymi pstanwieniami Dyrektywy 2014/35/EU, 2014/30/EU, 2004/108/WE i 2006/95/WE. TRENDnet declara que este está cnfrme cm s requisits essenciais e utras dispsições da Directiva 2014/35/EU, 2014/30/EU, 2004/108/CE e 2006/95/CE. TRENDnet izjavlja, da je ta v skladu z bistvenimi zahtevami in stalimi relevantnimi dlčili direktive 2014/35/EU, 2014/30/EU, 2004/108/ES, in 2006/95/ES. Français [French] Italian[Italian] Latviski [Latvian] Par la présente TRENDnet déclare que l'appareil est cnfrme aux exigences essentielles et aux autres dispsitins pertinentes de la directive 2014/35/UE, 2014/30/UE, 2004/108/CE, 2006/95/CE et. Cn la presente TRENDnet dichiara che quest è cnfrme ai requisiti essenziali ed alle altre dispsizini pertinenti stabilite dalla direttiva 2014/35/EU, 2014/30/EU, 2004/108/CE e 2006/95/CE. AršTRENDnetdeklarē, ka atbilstdirektīvas 2014/35/EU, 2014/30/EU, 2004/108/EK un 2006/95/EK būtiskajāmprasībām un citiemar t saistītajiemnteikumiem. Slvensky [Slvak] Sumi [Finnish] Svenska [Swedish] TRENDnettýmtvyhlasuje, že spĺňazákladnépžiadavky a všetkypríslušnéustanveniasmernice 2014/35/EU, 2014/30/EU, 2004/108/ES a 2006/95/ES. TRENDnet vakuuttaa täten että tyyppinen laite n direktiivin 2014/35/EU, 2014/30/EU, 2004/108/EY ja 2006/95/EY leellisten vaatimusten ja sitä kskevien direktiivin muiden ehtjen mukainen. Härmed intygar TRENDnet att denna står I överensstämmelse med de väsentliga egenskapskrav ch övriga relevanta bestämmelser sm framgår av direktiv 2014/35/EU, 2014/30/EU, 2004/108/EG ch 2006/95/EG. 138

143 Limited Warranty Limited Warranty TRENDnet warrants nly t the riginal purchaser f this prduct frm a TRENDnet authrized reseller r distributr that this prduct will be free frm defects in material and wrkmanship under nrmal use and service. This limited warranty is nntransferable and des nt apply t any purchaser wh bught the prduct frm a reseller r distributr nt authrized by TRENDnet, including but nt limited t purchases frm Internet auctin sites. Limited Warranty TRENDnet warrants its prducts against defects in material and wrkmanship, under nrmal use and service. Specific warranty perids are listed n each f the respective prduct pages n the TRENDnet website. AC/DC Pwer Adapter, Cling Fan, and Pwer Supply carry a ne-year warranty. Limited Lifetime Warranty TRENDnet ffers a limited lifetime warranty fr all f its metal-enclsed netwrk switches that have been purchased in the United States/Canada n r after 1/1/2015. Cling fan and internal pwer supply carry a ne-year warranty T btain an RMA, the ORIGINAL PURCHASER must shw Prf f Purchase and return the unit t the address prvided. The custmer is respnsible fr any shipping-related csts that may ccur. Replacement gds will be shipped back t the custmer at TRENDnet s expense. Upn receiving the RMA unit, TRENDnet may repair the unit using refurbished parts. In the event that the RMA unit needs t be replaced, TRENDnet may replace it with a refurbished prduct f the same r cmparable mdel. In the event that, after evaluatin, TRENDnet cannt replace the defective prduct r there is n cmparable mdel available, we will refund the depreciated value f the prduct. If a prduct des nt perate as warranted during the applicable warranty perid, TRENDnet shall reserve the right, at its expense, t repair r replace the defective prduct r part and deliver an equivalent prduct r part t the custmer. The repair/replacement unit's warranty cntinues frm the riginal date f purchase. All prducts that are replaced becme the prperty f TRENDnet. Replacement prducts may be new r recnditined. TRENDnet des nt issue refunds r credit. Please cntact the pint-f-purchase fr their return plicies. TRENDnet shall nt be respnsible fr any sftware, firmware, infrmatin, r memry data f custmer cntained in, stred n, r integrated with any prducts returned t TRENDnet pursuant t any warranty. There are n user serviceable parts inside the prduct. D nt remve r attempt t service the prduct by any unauthrized service center. This warranty is vided if (i) the prduct has been mdified r repaired by any unauthrized service center, (ii) the prduct was subject t accident, abuse, r imprper use, r (iii) the prduct was subject t cnditins mre severe than thse specified in the manual. Warranty service may be btained by cntacting TRENDnet within the applicable warranty perid and prviding a cpy f the dated prf f the purchase. Upn prper submissin f required dcumentatin, a Return Material Authrizatin (RMA) number will be issued. An RMA number is required in rder t initiate warranty service supprt fr all TRENDnet prducts. Prducts that are sent t TRENDnet fr RMA service must have the RMA number marked n the utside f return packages and sent t TRENDnet prepaid, insured and packaged apprpriately fr safe shipment. Internatinal custmers 139

144 Limited Warranty shipping frm utside f the USA and Canada are respnsible fr any return shipping and/r custms charges, including but nt limited t, duty, tax, and ther fees. Refurbished prduct: Refurbished prducts carry a 90-day warranty after date f purchase. Please retain the dated sales receipt with purchase price clearly visible as evidence f the riginal purchaser's date f purchase. Replacement prducts may be refurbished r cntain refurbished materials. If TRENDnet, by its sle determinatin, is unable t replace the defective prduct, we will ffer a refund fr the depreciated value f the prduct. CONTRACT OR TORT (INCLUDING NEGLIGENCE), FOR INCIDENTAL, CONSEQUENTIAL, INDIRECT, SPECIAL, OR PUNITIVE DAMAGES OF ANY KIND, OR FOR LOSS OF REVENUE OR PROFITS, LOSS OF BUSINESS, LOSS OF INFORMATION OR DATE, OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE, USE, PERFORMANCE, FAILURE, OR INTERRUPTION OF THE POSSIBILITY OF SUCH DAMAGES, AND LIMITS ITS LIABILITY TO REPAIR, REPLACEMENT, OR REFUND OF THE PURCHASE PRICE PAID, AT TRENDNET'S OPTION. THIS DISCLAIMER OF LIABILITY FOR DAMAGES WILL NOT BE AFFECTED IF ANY REMEDY PROVIDED HEREIN SHALL FAIL OF ITS ESSENTIAL PURPOSE. WARRANTIES EXCLUSIVE: IF THE TRENDNET PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE, THE CUSTOMER'S SOLE REMEDY SHALL BE, AT TRENDNET'S OPTION, REPAIR OR REPLACE. THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES, EXPRESSED OR IMPLIED, EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. TRENDNET NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE, OR USE OF TRENDNET'S PRODUCTS. TRENDNET SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THAT THE ALLEGED DEFECT IN THE PRODUCT DOES NOT EXIST OR WAS CAUSED BY CUSTOMER'S OR ANY THIRD PERSON'S MISUSE, NEGLECT, IMPROPER INSTALLATION OR TESTING, UNAUTHORIZED ATTEMPTS TO REPAIR OR MODIFY, OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, FIRE, LIGHTNING, OR OTHER HAZARD. LIMITATION OF LIABILITY: TO THE FULL EXTENT ALLOWED BY LAW, TRENDNET ALSO EXCLUDES FOR ITSELF AND ITS SUPPLIERS ANY LIABILITY, WHETHER BASED IN Gverning Law: This Limited Warranty shall be gverned by the laws f the state f Califrnia. Sme TRENDnet prducts include sftware cde written by third party develpers. These cdes are subject t the GNU General Public License ("GPL") r GNU Lesser General Public License ("LGPL"). Visit r the supprt sectin n and search fr the desired TRENDnet prduct t access t the GPL Cde r LGPL Cde. These cdes are distributed WITHOUT WARRANTY and are subject t the cpyrights f the develpers. TRENDnet des nt prvide technical supprt fr these cdes. Please visit r fr specific terms f each license. PWP v3 2016/05/25 140

145