DATALIGHT Switch 12+4-Port 1000

Instruction Manual DATALIGHT Switch 12+4-Port 1000 Electrical Systems www.fraenkische.com

2 DATALIGHT Switch 12+4-Port 1000 Contents 0 Get Started 3 0.1 Configuration methods 3 0.1.1 Configuration with the Webinterface 3 0.1.2 Configure via console 4 0.1.3 Configure via configuration files 5 0.2 Login 5 0.3 System Status 5 0.4 Change Login Information 6 0.5 Save configuration 7 1 IP Configuration 8 1.1 IP Configuration without VLAN configurations 8 1.2 IP Configuration with VLAN configurations 9 2 File Management 10 2.1 Download configuration from an TFTP Server 10 2.2 Backup configuration to a TFTP Server 11 2.3 Save configuration 11 2.4 Reset configuration 12 4 Multicast Configuration 19 4.1 Multicast Filtering 19 4.2 IGMP Snooping 20 4.2.1 Register Multicast 21 4.3 Multicast Router Port Settings 22 4.4 Unregistered Multicast Settings 22 5 Simple Network Management Protocol 24 5.1 Simple Network Management Protocol (SNMP) 24 5.2 Notification Recipient Configuration 25 6 Configure Port Security 26 7 Quality of Service Bandwidth Configuration 28 8 Spanning Tree 29 8.1 Spanning Tree Protocol without VLAN configuration 29 8.2 Multiple Spanning Tree Protocol with VLAN Configuration 30 2.5 Firmware update 12 3 Virtual LAN Management 14 3.1 Create VLAN 14 9 Port Mirroring 33 9.1 Destination Interface and Session number 33 9.2 SPAN Session Sources Interface 34 3.2 Access Port / Trunk Configuration 15 3.3 Defining VLAN Membership 17 All information in this publication generally reflects the state of the art at the time of printing. Furthermore, considerable care was taken when preparing this publication. Nevertheless, type - setting and translation errors cannot be entirely excluded. We also reserve the right to make changes to our products, specifications and other data. Changes may also become necessary as a result of legal, material-related or other technological requirements, which cannot or can no longer be considered in this publication. For this reason, we cannot assume any liability which is based solely on the data provided in this publication. The decisive role with regard to the data on products and services is always played by the order placed, the product actually purchased and the documentation in connection with it, or the information provided by our specialist staff in each specific individual case.

DATALIGHT Switch 12+4-Port 1000 3 0 Get Started The OMS1124 is a smart switch, which means that this switch has different configuration possibilities which allows to setup access limitations, manage network traffic and allows the analysis of traffic to improve data streams in a network. As default the switch is configured to get an IP address via the DHCP server of the network. The IP address of the switch can be found in the DHCP Client List of the Router. The switch can be found in the DHCP Client List of the Router with the name switch and the last 6 digits of the MAC-Address. ID Client Name MAC Address Assigned IP Lease Time 8 switch021500 00:AF:06:02:15:00 192.168.0.13 23:59:28 Figure 1: DHCP Client entry on test router 0.1 Configuration methods To configure the switch, there are three possibilities: 1) Using the webinterface 2) Using the console 3) Using configuration files Note The configuration via console requires a console cable and a terminal program. To configure via Telnet, it is necessary to activate this configuration method first. 0.1.1 Configuration with the Webinterface To configure the switch via the web interface the IP address of the switch must be entered in the web browser. Figure 2: Authentication Page

4 DATALIGHT Switch 12+4-Port 1000 0 Get Started 0.1.2 Configure via console Connect your PC/Laptop via the console cable to the console port of the switch. Start the terminal, connect to the proper COM port with the following configuration: Speed (baud): 115200 Data bits: 8 Stop bits: 1 Parity: None Flow control: XON/XOFF After establishing the connection and the boot process of the switch is completed, press enter two times so that the switch can detect the baud rate. After login with default login information the console is ready to be used. Figure 3: Serial configuration with terminal program PuTTY Note The configuration via the console will be described in another document.

DATALIGHT Switch 12+4-Port 1000 5 0 Get Started 0.1.3 Configure via configuration files Figure 4: Example configuration File 0.2 Login The default login information is: Username: admin Password: admin Note Default login should be changed for security reason. 0.3 System Status After login the switch shows important information. Figure 5: Start page with System Information In the System Status menu all important information about the current status of the switch can be seen. It contains statistics about the network traffic on the different ports, current temperature of the device and a log with information about RAM and Flash.

6 DATALIGHT Switch 12+4-Port 1000 0 Get Started 0.4 Change Login Information Go to the menu Administration > User Accounts. With Edit the password of an existing user can be changed. With a click on Add another user can be created. Figure 6: User Accounts Page Check the admin account, click on Edit and set a new password for the admin user. Figure 7: User Configuration Popup With a click on Apply the new password will be set for the user. Note Don t forget to save the configuration permanent on the switch. The save process is described in the section file management.

DATALIGHT Switch 12+4-Port 1000 7 0 Get Started 0.5 Save configuration All configurations will be written into the running configuration file in the flash memory. To keep the configuration permanent, it is necessary to save the running configuration to the startup configuration file. The save process is described in the section file management. Note If the switch will reboot, the startup configuration will be load, and all configurations written in the running configuration file will be deleted.

8 DATALIGHT Switch 12+4-Port 1000 1 IP Configuration The IP configuration is necessary to get access to the webinterface of the switch. If there are no additional VLAN configurations, only the VLAN1 interface must be configured. If there are VLAN configurations, may its necessary to configure additional IP addresses for the other VLANs. 1.1 IP IP Configuration without VLAN configurations To setup a static IP address for the switch, it is necessary to click on IP configuration. This leads to the menu IP configuration > IP Interfaces > IPv4 Interfaces. Note Figure 8: Interface IP configuration page VLAN1 is the default interface. If there are no specific VLAN configurations, use this interface. In this menu the configuration of the interfaces can be seen. For the first configuration a new entry must be added. Therefore, click on Add and enter the configuration information. Figure 9: IP configuration Popup With a click on Apply the configuration will be setup in the running configuration. Now use the web browser with the new configured IP address for further configuration. If the configuration works properly, the configuration must be saved in the startup configuration. The save process is described in the section file management.

DATALIGHT Switch 12+4-Port 1000 9 1 IP Configuration 1.2 IP Configuration with VLAN configurations If there were VLANs configured, it is possible to give the switch additional IP addresses so that the switch can be configured with devices from another VLAN. Therefore, in the menu IP Configuration > IP Interfaces > IPv4 Interface click Add to add an additional IP address. Figure 11: Interface IP configuration page In the Popup choose the VLAN, the IP address and the Network Mask. Figure 12: IP configuration Popup With a click on Apply the entry can be seen in the IPv4 Interface Table. Figure 13: Interface IP configuration page with different VLAN

10 DATALIGHT Switch 12+4-Port 1000 2 File Management With the device it is possible to save / load the configuration on / from a TFTP Server. 2.1 Download configuration from an TFTP Server In the menu Administration > File Management > Save Configuration it is possible to get the configuration from a TFTP Server to the switch. Fill in the TFTP Server Address, the name of the file which should be downloaded from the TFTP Server and the file, which should be replaced. This could be the running configuration or the startup configuration. Figure 14: Download / Backup page Click Apply to start the copy process. After a few seconds the switch will confirm the successful download. Figure 15: File Download confirmation

DATALIGHT Switch 12+4-Port 1000 11 2 File Management 2.2 Backup configuration to a TFTP Server In the menu Administration > File Management > Save Configuration it is possible to backup the configurations form the switch to a TFTP Server. Choose Backup, enter the address of the TFTP Server. Choose the File, which should be copied to the TFTP Server and define a name for the file on the TFTP Server. Figure 16: Download / Backup page With Apply the copy process starts. After a few seconds the switch will confirm the successful copy process. Figure 17: Upload confirmation 2.3 Save configuration To save configuration navigate to Administration > File Management > Copy/Save Configuration. The Running configuration should be set as source file and the startup configuration should be set as destination file. Figure 18: Copy / Save Configuration page

12 DATALIGHT Switch 12+4-Port 1000 2 File Management 2.4 Reset configuration All configurations in the startup configuration can be deleted by Rebooting the Switch to Factory Defaults. This can be done in the menu Administration > Reboot menu. Figure 19: Reboot menu With a Click on Reboot to Factory Defaults the Startup configuration file will be deleted. The switch will reboot and start without individual configurations. 2.5 Firmware update To update the switch via webinterface, it is necessary to use a TFTP Server, which provides the Firmware image. Navigate to the menu Administration > File Management > Upgrade / Backup Firmware. Figure 20: Upgrade / Backup Firmware menu Fill in the IP address of the TFTP Server and the filename of the provided firmware. With a click on apply the switch will connect to the TFTP Server and download the firmware. If the download is complete, it will be shown in the web interface. The new firmware will be used after the next reboot. Note In the menu Administration > File Management > Active Image it is possible to see, if the new firmware will be applied after reboot.

DATALIGHT Switch 12+4-Port 1000 13 2 File Management Figure 21: Active Image menu If there is the newer firmware version under Active Image Version Number After Reboot, then the update was successful and after reboot the new firmware version will be started. In the Menu Administration > Reboot it is possible to reboot the device by just clicking the reboot button. Figure 22: Reboot menu After clicking reboot a small window will popup and it will inform you, that the system will be unreachable for the next few seconds until the system fully rebooted. Figure 23: Confirm reboot popup Note The running-config will be deleted. Be sure, that all done configuration are saved.

14 DATALIGHT Switch 12+4-Port 1000 3 Virtual LAN Management To use of Virtual LANs (VLANs) the following steps must be done: 1) Create VLANs 2) Configure Interfaces as Trunk / Access Ports 3) Define VLAN Memberships 3.1 Create VLAN Navigate to Ports & VLAN > VLAN Settings > Create VLAN to see the existing VLANs. Figure 24: Create VLAN page With a click on Add it is possible to add new VLANs. In the Popup it is possible to define the VLAN ID and a name for the VLAN. It is also possible, to activate more VLANs at the same time by using the Range option. Figure 25: Create VLAN Popup

DATALIGHT Switch 12+4-Port 1000 15 3 Virtual LAN Management With a click on Apply the VLAN will be added in the VLAN table. The Popup will open again for the case, another VLAN should be added. Figure 26: Create VLAN page with additional VLAN 3.2 Access Port / Trunk Configuration In the menu Port & VLAN > VLAN Settings > Interface Settings it is possible to define, if the different interfaces should be Access Ports or Trunk Ports. Figure 27: VLAN Interface Settings page An interface can be selected and with a click on Edit the configuration Popup give the opportunity to choose the needed configuration.

16 DATALIGHT Switch 12+4-Port 1000 3 Virtual LAN Management Figure 28: VLAN interface settings Popup With a click on Apply the configuration can be seen in the interface setting table. Figure 29: VLAN interface settings page with example configuration on entry NR. 15

DATALIGHT Switch 12+4-Port 1000 17 3 Virtual LAN Management 3.3 Defining VLAN Membership In the menu Port & VLAN > VLAN Settings > Port VLAN Membership it is possible to define a specific VLAN for the Access Ports. For Trunks it is possible to specify allowed VLANs. Figure 30: VLAN Membership page An interface can be selected and the VLAN Membership can be configured. The configuration regarding the chosen port mode can be seen on the top of the popup over the horizontal bar. Figure 31: VLAN membership Popup for access port

18 DATALIGHT Switch 12+4-Port 1000 3 Virtual LAN Management Figure 32: VLAN membership Popup for trunk port With a click on Apply the configuration can be seen in the Port VLAN Membership Table. Figure 33: VLAN membership page with example configuration Interface 5, 15 Note If all VLAN configurations were done, don t forget to save all done configuration permanent on the switch. The save process is described in the section file management.

DATALIGHT Switch 12+4-Port 1000 19 4 Multicast Configuration To enable IGMP Snooping it is necessary to activate multicast filtering and IGMP Snooping for the bridge. Then further configuration must be done depending on the needed services. 4.1 Multicast Filtering In the menu Multicast > Properties the Bridge Multicast Filtering Status can be enabled. As a forwarding method, MAC or IP group addresses can be used. Figure 34: Multicast properties page

20 DATALIGHT Switch 12+4-Port 1000 4 Multicast Configuration 4.2 IGMP Snooping To enable IGMP Snooping, navigate to Multicast > IGMP Snooping. Enable the IGMP Snooping Status. Then the IGMP snooping configuration can be done for the specific VLANs. Figure 35: Multicast IGMP Snooping page Check the VLAN, which should be configured and click on Edit. In the following Popup IGMP Snooping Status for the VLAN can be enabled. Also, the different parameters for IGMP Snooping can be adjusted. Figure 36: IGMP Snooping Popup With Apply the configuration can be seen in the IGMP Snooping table. Note The operational Query parameters are depending on the IGMP Querier.

DATALIGHT Switch 12+4-Port 1000 21 4 Multicast Configuration Figure 37: IGMP Snooping page with activated IGMP Snooping for VLAN1 Note If all IGMP Snooping configurations were done, don t forget to save all done configuration permanent on the switch. The save process is described in the section file management. 4.2.1 Register Multicast If a device add multicast to the network via the switch, the multicast can be registered so that the switch can handle the multicast via IGMP Snooping. The registration can be done in the menu Multicast > IP Multicast Group Addresses. Click on Add to add the multicast to the list. Figure 38: IP Multicast Group Address Overview It must be entered the VLAN ID and the IP Multicast Group Address. It is also possible to define, from which IP address the multicast comes from. This option gives the opportunity to increase the security by verifying the source of the multicast. Figure 39: Add IP Multicast Group Popup

22 DATALIGHT Switch 12+4-Port 1000 4 Multicast Configuration 4.3 Multicast Router Port Settings If IGMP Snooping for a VLAN is configured in that way, that the Multicast Router Port learn is enabled, then the correct Multicast Router Port should be already known. In case of a wrong detection, it may be necessary to declare this interface as static. Figure 40: Multicast Router Port page This configuration can be done in the menu Multicast > Multicast Router Port. This configuration can be done for each specific VLAN. 4.4 Unregistered Multicast Settings The network can be prevented from unregistered multicast. The standard configuration of the switch is, to forward unregistered multicast to each port. Figure 41: Unregistered Multicast page Check the port, which should be configured and click on Edit. In the Popup can be configured, if unregistered multicast should be forwarded or filtered. Figure 42: Unregistered Multicast Popup

DATALIGHT Switch 12+4-Port 1000 23 4 Multicast Configuration If no unregistered multicast should be allowed on the interface, change in this menu from Forwarding to Filtering and click Apply. The configuration can be seen in the Unregistered multicast table. Figure 43: Unregistered Multicast page with filter configuration on Interface 4 Note If all multicast configurations were done, don t forget to save all done configuration permanent on the switch. The save process is described in the section file management.

24 DATALIGHT Switch 12+4-Port 1000 5 Simple Network Management Protocol With this switch it is possible to configure the Simple Network Management protocol (SMNP) to send messages to an SNMP manager / trap receiver. 5.1 Simple Network Management Protocol (SNMP) The community configuration for the SNMP can be done in the SNMP > Communities menu. Figure 44: SNMP Communities page With a click on Add a new entry can be made. Enter the IP Address of the SNMP Management Station or allow all Management Stations of the chosen Community String. Choose the rights for the Community. Figure 45: SNMP Community Popup With a click on Apply the entry can be seen in the Community Table. Figure 46: SNMP Communities page with test community

DATALIGHT Switch 12+4-Port 1000 25 5 Simple Network Management Protocol 5.2 Notification Recipient Configuration An SNMP Trap Recipient can be configured in the SNMP > Notification Recipients SNMPv1,2 menu. Figure 47: SNMP Notification Recipients page With a click on Add a new entry can be done. Add the IP address of the trap receiver, the UDP Port on which the receiver recognizes the message, and a community string. Figure 48: SNMP Notification Recipient Popup With a click on Apply the entry can be seen in the Notification Recipient table. Figure 49: SNMP Notification Recipients page with test configuration Note If all multicast configurations were done, don t forget to save all done configuration permanent on the switch. The save process is described in the section file management.

26 DATALIGHT Switch 12+4-Port 1000 6 Configure Port Security If it isn t allowed everyone to use the ports of the switch, there is the possibility to restrict the access to defined MAC addresses. If another device tries to connect to the interface, the port will shut down and must be restarted by an administrator. Port security can be configured in the menu Security > Port Security. Figure 51: Port Security page Check the interface, which should be configured and click Edit. Figure 52: Port Security Popup If Lock is checked, the Port Security mode is activated. It must be configured, how the process should work. If Classic Lock is enabled, all learned MAC addresses on the port are locked. No more addresses can be learned. With Limited Dynamic Lock the device learns MAC addresses up to the limit. If the limit is reached, no more devices can be learned. Under Action on Violation discard / forward / shutdown can be set. Discard means, that the IP package is discarded. Forward means, that the package is still forwarded. Shutdown means, that the port will be shut down and must be restarted by an administrator. After click Apply the configuration can be seen in the Port Security table.

DATALIGHT Switch 12+4-Port 1000 27 6 Configure Port Security Figure 53: Port Security page with test configuration on port 4 Note If all Port security configurations were done, don t forget to save all done configuration permanent on the switch. The save process is described in the section file management.

28 DATALIGHT Switch 12+4-Port 1000 7 Quality of Service - Bandwidth Configuration Often it is necessary to set a limit for ingress or egress information rate. This configuration can be done in the menu Quality of Service > General > Bandwidth. Figure 54 QoS Bandwidth configuration page In this menu the interface, which should be configured, can be checked and then click on Edit. Figure 55: QoS Bandwidth Configuration Popup Here it is possible to define the max Ingress or Egress Rate and it is also possible to limit bursts. With a click to Apply the configuration can be seen in the Bandwidth table. Figure 56: QoS Bandwidth configuration page with test configuration on interface 4 Note If all bandwidth configurations were done, don t forget to save all done configuration permanent on the switch. The save process is described in the section file management.

DATALIGHT Switch 12+4-Port 1000 29 8 Spanning Tree 8.1 Spanning Tree Protocol without VLAN configuration In the menu Spanning Tree > STP Global Settings the configuration for the Spanning Tree can be seen and some global configuration can be made for the switch. Figure 57: Spanning Tree global settings page In the menu Spanning Tree > STP Interface Settings specific configuration for the interfaces can be done. Figure 58: Spanning Tree Interface settings page Check the interface, which should be configured and click on Edit. Figure 59: Spanning Tree Interface settings Popup

30 DATALIGHT Switch 12+4-Port 1000 8 Spanning Tree Here the different parameters for the Spanning Tree construction can be configured for the port. Configured values can be seen in the STP Interface Setting table. Figure 60: Spanning Tree Interface Settings page with test configuration on Interface 4 Note If all Spanning Tree configurations were done, don t forget to save all done configuration permanent on the switch. The save process is described in the section file management. 8.2 Multiple Spanning Tree Protocol with VLAN Configuration For the use with different VLANs the spanning tree may should have different behavior for different VLAN. Such behavior can be configured with the MSTP. This can be found in the menu Spanning Tree > MSTP Properties. Figure 61: MSTP Properties page The key feature of MSTP is, that for different VLAN different STP Instances can be configured. Therefore, in the menu Spanning Tree > VLAN to MSTP Instance these relations can be configured. Figure 62: VLAN to MSTP Instance page

DATALIGHT Switch 12+4-Port 1000 31 8 Spanning Tree Check an Instance and click on Edit to add different VLANs to the instance. Figure 63: MSTP Instance to VLAN Popup With a click on Apply the configuration can be seen in the VLAN to MSTP Instance table. Figure 64: VLAN to MSTP Instance page with test configuration Like the STP menu, also for the instances of the MSTP the Bridge Priority can be configured. This can be done in the menu Spanning Tree > MSTP Instance Settings. Choose the Instance, then change the bridge priority value. Abb. 65: MSTP Instanzen Einstellungen Also for the MSTP it is possible to define the interface costs for each instance. This can be done in the menu Spanning Tree > MSTP Interface Settings. Figure 66: MSTP Interface Settings page

32 DATALIGHT Switch 12+4-Port 1000 8 Spanning Tree Choose the instance, check an interface and click on Edit. Figure 67: MSTP Interface Settings Popup In the MSTP Interface Settings Popup the Interface Priority and the Path cost can be configured. The configuration can be seen in the MST Interface Setting table. Figure 68: MSTP Interface Settings page with test configuration Note If all MSTP configurations were done, don t forget to save all done configuration permanent on the switch. The save process is described in the section file management.

DATALIGHT Switch 12+4-Port 1000 33 9 Port Mirroring There is the possibility to look for the network traffic from one or more ports on another port. For Port Mirroring two steps must be done: 1) Define the destination port and a session number 2) Define the source port(s) If source port(s) and destination port have the same Session number, the traffic from the source ports gets mirrored to the destination port. 9.1 Destination Interface and Session number The configuration can be made in the menu Port & VAN > SPAN > SPAN Session Destination. Figure 69: Port Mirroring Destination page Click Add to add a new Session with a destination port. The regular Network traffic can be disabled, so that only the traffic of the source port can be seen on the destination port. Figure 70: Port Mirroring Destination Popup Choose Session ID and the Destination Port. After a click on Apply the configuration can be seen in the SPAN Destination Table. Figure 71: Port Mirroring Destination Page with test configuration After configureing an SPAN Destination the SPAN Source can be configured.

34 DATALIGHT Switch 12+4-Port 1000 9 Port Mirroring 9.2 SPAN Session Sources Interface The sources can be configured in the menu Port & VLAN > SPAN > SPAN Session Sources. Figure 72: Port Mirroring Source page Click on Add to add sources to an Session. Figure 73: Port Mirroring Source Popup Choose the Session ID and the source Port. It is also possible to choose the traffic type, which should be mirrored. After a click on Apply the configuration can be seen in the Span Source Table. If more than one source should be used for one session, repeat this process with the same Session ID. Figure 74: Port Mirroring Source page with test configuration Note If all SPAN configurations were done, don t forget to save all done configuration permanent on the switch. The save process is described in the section file management.

DATALIGHT Switch 12+4-Port 1000 35 Your connection to us Division Director Head of Export Sales Thomas Hofmann Phone + 49 9525 88-2562 thomas.hofmann@fraenkische.de Matthias Rühr Phone + 49 9525 88-8530 matthias.ruehr@fraenkische.de Export Sales Please visit our website Tamara Schneider Phone + 49 9525 88-2416 tamara.schneider@fraenkische.de www.fraenkische.com www.datalight-system.com Helene Gerhardt Phone + 49 9525 88-2417 helene.gerhardt@fraenkische.de

www.adobestock.de FRÄNKISCHE Rohrwerke Gebr. Kirchner GmbH & Co. KG Hellinger Str. 1 97486 Königsberg / Germany Phone +49 9525 88-8123 Fax +49 9525 88-2151 marketing@fraenkische.de www.fraenkische.com Subject to change without notice 02/2019