Managed 24-port 10/100Base-TX Layer 2 Switch. Management Guide

Managed 24-port 10/100Base-TX Layer 2 Switch Management Guide

COPYRIGHT All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, whether electronic, mechanical, photo copying, recording or otherwise, without the prior written permission of the publisher. FCC WARNING This equipment has been tested and found to comply with the limits for class A device, pursuant to part 15 of FCC rules. These limits are designed to provide reasonable protection against harmful interference in a commercial installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communication. Operation of this equipment in a residential area is likely to cause harmful interference, in which case, the user will be required to correct the interference at the user s own expense. CE This is a Class A product. In a domestic environment, this product may cause radio interference in which case the user may be required to take adequate measures. Take special note to read and understand all content given in the warning boxes Warning

Table of Contents 1. Introduction...1 Features...1 Specifications...2 2. Web Management Function...5 2-1. Web Management Home Overview...6 2-2. Port status...7 2-3. Port Statistic...8 2-4. Administrator...9 2-4-1. IP Address...10 2-4-2. Advanced...10 2-4-3. Console Port Information...12 2-4-4. Port Controls...13 2-4-5. Trunking...14 2-4-5-1. Aggregator Setting...15 2-4-5-2. Aggregator Information...16 2-4-5-3. State Activity...17 2-4-6. Filter Database...18 2-4-6-1. IGMP Snooping...18 2-4-6-2. Static MAC Address...19 2-4-6-3. MAC Filtering...20 2-4-7. VLAN Configuration...21 2-4-7-1. Port Based VLAN...23 2-4-7-2. IEEE 802.1q Tag-based VLAN...24 2-4-8. Spanning Tree...28 2-4-9. Port Mirroring...32 2-4-10. SNMP...33 2-4-11. Security Manager...34 2-4-12. TFTP Update Firmware...35 2-4-13. Configuration Backup...37 2-4-13-1. TFTP Restore Configuration...37 2-4-13-2. TFTP Backup Configuration...37 2-4-13-3. TFTP Import Text Configuration File...38 2-4-13-4. TFTP Export Text Configuration File...39 2-4-14. Reboot...39 2-4-15. Network Tree...40 3. Console 1K Xmodem Update Firmware...41 4. Console Menu Line...44 4-1. Main Menu...45 4-2. Switch Static Configurations...46 4-2-1. Port Configuration...47

4-2-2. Trunk Configurations...48 4-2-3. VLAN Configuration...49 4-2-3-1. VLAN Configurations...50 4-2-3-2. Create a VLAN Group...51 4-2-3-3. Edit / Delete A VLAN Group...54 4-2-3-4. Groups Sort Mode...55 4-2-4.Misc Configuration...57 4-2-4-1. MAC Age Interval...57 4-2-4-2. Broadcast Storm Filtering...58 4-2-4-3. Max. Bridge Transmit Delay Bound...58 4-2-4-4. Port Security...60 4-2-4-5. Collisions Retry Forever...61 4-2-4-6. Hash Algorithm...62 4-2-4-7. Broadcast Filtering...62 4-2-5. Administration Configuration...63 4-2-5-1. Change Username...63 4-2-5-2. Change Password...64 4-2-5-3. Device Information...64 4-2-5-4. IP Configuration...65 4-2-5-5. Single IP Configuration...65 4-2-5-6. Network Configuration...76 4-2-5-7. Network Device Configure...76 4-2-5-8. Denial-of-Service Protection Configure...77 4-2-6. Port Mirroring Configuration...78 4-2-7. Priority Configuration...79 4-2-7-1. Port Static Priority...79 4-2-7-2. 802.1p Priority Configuration...80 4-2-8. MAC Address Configuration...81 4-2-8-1. Static MAC Address...81 4-2-8-2. Filtering MAC Address...85 4-3. Protocol Related Configuration...88 4-3-1. Spanning Tree Protocol (STP)...88 4-3-1-1.STP Enable...89 4-3-1-2. System Configuration...89 4-3-1-3. Per Port Configurations...90 4-3-2. SNMP...91 4.3.2.1. System Options...91 4.3.2.2. Community Strings...92 4.3.2.3. Trap Managers...93 4-3-3.GVRP...94 4-3-4. IGMP...95 4-3-5. LACP...95

4-3-5-1. Working Port Setting...96 4-3-5-2. State Activity...97 4-3-5-3. LACP Status...98 4-3-6. 802.1x Protocol...98 4-3-6-1. 802.1x Enable...99 4-3-6-2. 802.1x System Configuration...99 4-3-6-3. 802.1x PerPort Configuration...100 4-3-6-4. 802.1x Miscellaneous Configuration...101 4-4. Status and Counters...102 4-4-1. Port Status...102 4-4-2. Port Counters...103 4-4-3. System Information...104 4-4-4. Network Information...105 4-5. Reboot Switch...106 4-5-1. Default...106 4-5-2. Restart...106 4-6. TFTP Update Firmware...107 4-6-1. TFTP Update Firmware...107 4-6-2. Restore Configure File...109 4-6-3. Backup Configure File...109 4-6-4. TFTP Import Text Configuration File...110 4-6-5. TFTP Export Text Configuration File... 111 5. Menu-Driven Interface via Telnet...113 5-1. Single IP Management...114 6. Troubleshooting...118 Appendix A...119 Application Examples...119 Building to Building (Small Campus)...119 Enterprise Server Aggregation...119 Appendix B...121 802.1q Tag-VLAN Application Example...121 Network topology...122 Appendix C...129 Protocol VLAN Application Example...129 Appendix D...136 Text Configuration File Example...136

1. Introduction Emanating from our expertise in developing network communication solutions, the Managed 24-port 10/100 Layer 2 Switch incorporates leading switching technology and high-port density within a slim 1-rack unit chassis. The Switch has SNMP management and remote control capabilities such as Web Cluster. The Gigabit module, which can be either copper or fiber media, allows users to increase their network response time at a gigabit speeds and with great flexibility, thus making the Switch ideal for mission critical installation. Features Management features Console, Telnet and Web Browser User Interfaces Management via SNMP Console and Telnet settings using Menu-Driven Interface Support up to 7 trunk groups Supports 802.3x flow control for full duplex mode and collisionbased backpressure for half-duplex mode Supports Head of Line (HOL) blocking prevention Supports broadcast storm filtering Supports 14k MAC address entries Supports port-based VLAN, protocol-based and 802.1Q tagbased VLAN GVRP IGMP Snooping 1

Specifications Performance Throughput: Max. Distance: UTP: 14,880 pps for 10Mbps Ethernet 148,800 pps for 100Mbps Ethernet 1,488,000 pps for 1000Mbps Ethernet 100 meters (Category 5e or better) Fiber: 220 meters (62.5/125 micron fiber cabling) 10,000 meters (9/125 micron fiber cabling) Connectors and Cabling Ports: 24x10/100 Ethernet ports; 1x Optional slot (1-port gigabit module or 2-port gigabit module) Module Types: Gigabit module, 1 RJ-45, 1 GBIC (hot-plug, multi-mode, 220m) port Gigabit module, 1 RJ-45, 1 GBIC (hot-plug, single mode,10km) port Gigabit module, 2 mini-gbic (hot-plug, multi-mode, 220m) ports Gigabit module, 2 mini-gbic (hot-plug, single mode, 10km) ports Gigabit module, 2 SC (multi-mode, 220m) ports Gigabit module, 2 SC (single mode, 10km) ports Control: Out-of-band control: RS-232 In-band control: RJ-45, Fiber Power Characteristics AC Input Voltage: Output: 90 to 240V AC (auto-ranging) 50 to 60 Hz 3.3V DC, 20A & 5V, 1A (71W) 2

Environmental Characteristics 24-Port 10/100Base-TX Layer 2 Switch Operating: Temperature: 0 o C to 45 o C (32 o F to 110 o F) Relative Humidity: 5% to 90%, non-condensing Non-Operating / Storage: Temperature: -10 o C to 70 o C (-13 o F to 158 o F) Relative Humidity: 5% to 90%, non-condensing Physical Characteristics Height: Width: Depth: Weight: Mounting: 1.73" (4.4 cm) 17.32" (44 cm) 11.22" (28.5 cm) 9.48lbs (4.3kg) fully loaded Standard 19" Rack-mount case Network Management System Configuration: Spanning Tree Algorithm: Console port, Telnet IEEE 802.1d provides redundant link support Port-based, Protocol-based or 802.1q VLAN's: Up to 256 VLANs, with GVRP for dynamic VLAN registration Link Aggregation: up to 4 ports can be combined into a fat pipe, 7 trunks LEDs: Modular Ports: 10/100Mbps: Green, illuminates when data transmission rate 100Mbp LNK ACT: Green, flashing or illuminated when link pulses from a compliant device is established, and when transmitting or receiving data packets FDX: Amber, illuminated when in full duplex mode 3

Gigabit Ports: LNK ACT: Green, flashing or illuminated when link pulses from a compliant dev ice Standards and Compliance IEEE 802.3 IEEE 802.3u IEEE 802.3x IEEE 802.3z IEEE 802.1d IEEE 802.1p IEEE 802.1q RFC 1350 10BASE-T specification 100BASE-TX specification Full Duplex on 10BASE-T and 100BASE-TX ports 1000BASE-SX specification Spanning-Tree Protocol Priority Queues VLAN Tagging TFTP Electromagnetic Compatibility FCC Part 15 of Class A CE approved 4

2. Web Management Function 1. The Switch management agent can be access via a web browser If you need to change the IP or other default address for the first time, it is recommended that you go to section three and use console mode to secure a direct connection and to modify them. Default Address: MAC Address: (Factory set and unique for each device) IP Address: 192.168.0.254 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.0.1 User Name: admin Password: (no default password) The IP address of the Switch used for writing this manual has been set via console mode to 192.168.0.197. 2. To access the Switch, open a web browser and key in the Switch s IP address. Enter username and password (default is no password) and click on the <OK> button. 5

2-1. Web Management Home Overview 1. This is the Home Page. Basics Description: MAC Address: Firmware Version: Display the name of device type. The unique hardware address assigned by manufacturer (default) Display the Switch s firmware version. 6

2-2. Port status 24-Port 10/100Base-TX Layer 2 Switch This page can see every port status that depended on user setting and the negotiation result. 1. State: Display port statuses disable or enable. unlink will be treated as off. 2. Link Status: Down is No Link, UP is Link. 3. Auto-Negotiation: Display the auto-negotiation mode: auto/force/nway. 4. Speed status: Display 1000Mbps or 100Mbps or 10Mbps speed, port 1-24 are 10/100Mbps, Port 25-26 are 10/100/1000Mbps (depending on the modular card used). 5. Duplex status: Display full duplex or half-duplex mode. 6. Flow Control a. Full: Display the flow control status is enabled or disabled in full mode. b. Half: Display the backpressure is enabled or disabled in half mode. 7. Rate Control: Display the rate control setting. 7

a. Ingr: Display the port effective ingress rate of user setting. b. Egr: Display the port effective egress rate of user setting. 8. Priority: Display the port static priority status is High or Low or disabled. 9. Port Security: Display the port security is enabled or disabled. 10. Config: Display the state of user setting. 11. Atual: Display the negotiated result. 12. Broadcast Filtering: Display the broadcast filtering setting 2-3. Port Statistic Port statistic provides a summary of the current switch s status, including on/off state, link status, good or bad packets of transmitting and receiving, packets of transmitting abort, packets of collision and drop packets. 8

2-4. Administrator 24-Port 10/100Base-TX Layer 2 Switch There are many management functions that could be accessed via the web browser. The main menu system lists all the functions. Simply click in each item to go to the appropriate page. 9

2-4-1. IP Address 24-Port 10/100Base-TX Layer 2 Switch 1. The user can configure the IP Settings. Simply click on the IP address field and enter the address, then click the apply button to change the address. 2. The user must reset/restart the Switch in order to use the new IP address setting. 2-4-2. Advanced Miscellaneous Setting: MAC Address Age-out Time: Type the number of seconds that an inactive MAC address remains in the Switch's address table. The valid range is 300~765 seconds. The default is 300 seconds. Max bridge transmit delay bound control: Limit the packets queuing time in the Switch. If enable, the packets queued exceed this time will be dropped. This valid value are 1 sec, 2 sec, 4 sec and off. Enable Low Queue Delay Bound: Limit the low priority packets queuing time in the Switch. If the low priority packets stay in the Switch exceed the Max Delay Time, it will be sent. The valid range is 1~255 ms. NOTE: Make sure that Max bridge transit delay bound control is enabled before activating the Delay Bound, because the Delay Bound must work under an enabled Max bridge transit delay bound control situation. Broadcast Storm Filter: To configure broadcast storm control, enable it and set the upper threshold for individual ports. The threshold is the percentage of the port's total bandwidth used by broadcast traffic. When 10

broadcast traffic for a port rises above this threshold, broadcast storm control will becomes. The valid threshold values are 5%, 10%, 15%, 20%, 25% and off. Priority Queue Service settings: FCFS (First Come First Service): The sequence of packets sent depends on the order they arrive. AHBL (All High before Low): The high priority packets are sent before low priority packets. WRR (Weighted Round Robin): Select the preferred ratio of high and low priority packets sent by the Switch in its priority queue. These options represent the number of high priority packets sent before one low priority packet is sent. For example, 5 High: 2 Low, means that the Switch sends 5 high priority packets before sending 2 low priority packets. QoS Policy - Priority Levels: 0~7 QoS levels can be assigned to designated high or low priority. Collisions Retry Forever: Disable In half-duplex, if collision occurs, the Switch will retry send 48 times and before dropping the frame. Enable In half-duplex, if collision occurs, the Switch will retry to send frames indefinitely. 11

2-4-3. Console Port Information 1. Console is a standard UART interface to communicate with the Serial Port. The user can launch windows HyperTerminal program to link with the Switch. See section three for details Bits per seconds: 38400 Data bits: 8 Parity: none Stop Bits: 1 Flow control: none 12

2-4-4. Port Controls 24-Port 10/100Base-TX Layer 2 Switch Use this page to change the status of each port. 1. State: User can disable or enable this port control. 2. Auto-Negotiation: User can set auto-negotiation modes: Force - specify the speed/duplex on this port with auto-negotiation enable. Auto NWay for the Switch to automatically determine the highest speed and duplex mode possible 3. Speed: User can set 100Mbps or 10Mbps speed on Port1~Port24. User can set 1000Mbps speed on Port25~Port26. 4. Duplex: User can set full duplex or half-duplex mode for each port. 5. Flows control: Full: User can set full - flow control function (pause). Half: User can set half flow control (backpressure). 13

6. Rate Control: port1 ~ port 24, supports by-port ingress and egress rate control. For example, assume port 1 is 10Mbps, users can set its effective egress rate to 1Mbps, ingress rate is 500Kbps. The Switch will perform flow control or backpressure to confine the ingress rate to meet the specified rate. Ingress: Type the port effective ingress rate. The valid range is 0 ~ 1000. The unit is 100K 0: disable rate control. 1 ~ 1000: valid rate value Egress: Type the port effective egress rate. The valid range is 0~1000. The unit is 100K. 0: disable rate control. 1 ~ 1000: valid rate value. 7. Priority: This static priority based on port, if you set the port to high priority, the priority of incoming frames to this port will always be high 8. Port Security: A port in security mode will be locked without permission of address learning. Only the incoming packets with SMAC already existing in the address table can be forwarded. User can disable the port from learning any new MAC addresses, and then use the static MAC addresses screen to define a list of MAC addresses that can use the secure port. Enter the settings, and then click Apply to set the Switch. 9. Broadcast Filtering: In a regular wired LAN network, there is a lot of broadcasting traffic. In order to filter the broadcast traffic, user can disable or enable this function for each port. 2-4-5. Trunking The Link Aggregation Control Protocol (LACP) which is defined in IEEE 802.3ad that allow ports with similar characteristics to form a channel through dynamic negotiation with adjoining switches. It provides a means for exchanging information on a link thereby allowing their Link Aggregation Control instances to reach agreement on the identity of the Link Aggregation Group to which the link belongs. LACP allows you to 14

move the link to an Aggregation Group and enable its transmission and reception functions in an orderly manner. Link Aggregation lets you group up to four ports into a single dedicated connection. This feature can expand bandwidth to a device on the network. LACP operation requires full duplex mode, more detailed information about LACP can be found in IEEE 802.3ad. 2-4-5-1. Aggregator Setting System Priority: A value used to identify the active LACP. The Switch with the lowest value has the highest priority and is selected as the active LACP. 1. Group ID: There are up to seven trunk groups which can be configured. Choose the "Group ID" and click "Get". 2. LACP: If enabled, the group is a LACP static trunking group. If disabled, the group is a local static trunking group. All ports support LACP dynamic trunking groups. If connecting to the device that also supports LACP, the LACP dynamic trunking group will be created automatically. 3. Work ports: Allows a maximum four ports which can be aggregated at the same time. If a LACP static trunking group, the excess ports are in standby and are able to aggregate if work ports fail. If a local static trunking group, the number must be the same as the group member ports. 15

4. Select the ports to join the trunking group. Allow a max. of four ports which can be aggregated at the same time. 5. If LACP is enabled, you can configure LACP Active/Passive status in each port on State Activity page. 6. Click Apply. 2-4-5-2. Aggregator Information When setting LACP aggregator, you can view related information as follows. 1. This page provides LACP current status. In this case, NO GROUP ACTIVE, since LACP is not enabled. 2. This page displays Static Trunking groups. 16

2-4-5-3. State Activity 24-Port 10/100Base-TX Layer 2 Switch Active (select): The port automatically sends LACP packets. Passive (no select): The port does not automatically send LACP packets, and respond only if it receives LACP packets from another networking device. 1. A link having either two active LACP ports or one active port can perform dynamic LACP trunking. A link has two passive LACP ports will not perform dynamic LACP trunking because both ports are waiting for LACP packet from another networking device. 2. If you are active LACP s actor, when you select trunking port, the active status will be created automatically. 17

2-4-6. Filter Database 2-4-6-1. IGMP Snooping 24-Port 10/100Base-TX Layer 2 Switch The Switch supports IP multicast, you can enable IGMP on web management s switch setting advanced page, then display the IGMP snooping information in this page. You can view different multicast group, VID and member ports here. IP multicast addresses range from 224.0.0.0 to 239.255.255.255. The Internet Group Management Protocol (IGMP) is an internal protocol of the Internet Protocol (IP) suite. IP manages multicast traffic by using switches, routers, and hosts that support IGMP. Enabling IGMP allows the ports to detect IGMP queries and report packets and manage IP multicast traffic through the Switch. IGMP has three fundamental types of messages. See table below: Query Report Leave Group Message Description A message sent from the querier (IGMP router or switch) asking for a response from each host belonging to the multicast group. A message sent by a host to the querier to indicate that the host wants to be or is a member of a given group indicated in the report message. A message sent by a host to the querier to indicate that the host has quit to be a member of a specific multicast group. 18

2-4-6-2. Static MAC Address 24-Port 10/100Base-TX Layer 2 Switch When you add a static MAC address, it is stored in the Switch's address table regardless of whether the device is physically connected to the Switch. This saves the Switch from having to re-learn a device's MAC address when the device is disconnected or powered-off, and is then activated on the network again. 1. From the main menu, click Administrator Filter Database Static MAC Address. 2. In the MAC address box, enter the MAC address to and from which the port should permanently forward traffic, regardless of the device s network activity. 3. In the Port Number box, enter a port number. 4. If tag-based (IEEE 802.1q) VLANs are set up on the Switch, static addresses are associated with individual VLANs. Type the VID (tagbased VLANs) associated with the MAC address. 5. Click on the Add button. 19

2-4-6-3. MAC Filtering 24-Port 10/100Base-TX Layer 2 Switch MAC address filtering allows a method to restrict unauthorized access by checking MAC address before allowing it to connect to the network. This provides an additional layer of control layer in that only stations with registered MAC addresses can connect. This approach requires that the list of MAC addresses be configured. Traffic is filtered based on the destination addresses. 1. In the MAC Address box, enter the MAC addresses that are to be filtered. 2. If tag-based (802.1q) VLAN is set up on the Switch, in the VLAN ID box type the VID associated with the MAC address. 3. Click on the Add button. 4. Choose the MAC address that you want to filter and then click on the Delete button. 20

2-4-7. VLAN Configuration 24-Port 10/100Base-TX Layer 2 Switch A Virtual LAN (VLAN) is a logical network grouping that limits the broadcast domain. It allows you to isolate network traffic so only members of the VLAN receive traffic from the same VLAN members. Basically, creating a VLAN in a switch is logically equivalent to reconnecting a group of network devices to another Layer 2 switch. However, all the network devices are still physically plugged into the same switch. The Switch supports port-based, 802.1q (tagged-based) and protocol-based VLAN in web management page. In the default configuration, VLAN support is disabled. There are a few configuration examples in the Appendix for your reference. NOTE: Each time you change the VLAN mode, you ll need to reboot the Switch for the changes to take effect. Support Port-based VLAN Packets can go among only members of the same VLAN group. Note all unselected ports are treated as belonging to another single VLAN. If the port-based VLAN is enabled, the VLAN-tagging is ignored. GROUP 1 21 GROUP 2

Support Tag-based VLAN (IEEE 802.1q VLAN) Tagged-based VLAN is an IEEE 802.1q specification standard. Therefore, it is possible to create a VLAN across devices from different switch vendors. IEEE 802.1q VLAN requires a standard methodology to insert and process the tag in the Ethernet frames. Tags contain a VLAN Identifier (VID) that indicates the VLAN numbers. Support Protocol-based VLAN In order for an end station to send packets to different VLANs, it has to either: a. Be capable of tagging packets it sends with VLAN tags, OR b. Be attached to a VLAN-aware bridge that is capable of classifying and tagging the packet with different VLAN ID based on not only default PVID but also other information about the packet, such as the protocol. The feature can be applied for accommodating devices that you want to participate in the VLAN, but don t support tagging. Therefore, the system can add VAN tags to untagged frames which are based on PVID or on different protocols. The Switch will support protocol-based VLAN classification by means of both built-in knowledge of layer 2 packet formats used by selected popular protocols, such as Novell IPX and AppleTalk s EtherTalk, and some degree of programmable protocol matching capability. A port can join more than one different protocol VLANs, but a port can t apply a same protocol twice for the VLAN configuration purpose. Otherwise you will see the error message: Save fail for ethertype conflict when trying to configure VLANs. VID=2 SALES 22 VID=3 R&D

2-4-7-1. Port Based VLAN 1. Click Add to create a new VLAN group. 2. Enter the VLAN name, Group ID and select the members for the new VLAN. 3. Click Apply. 4. If there are many groups which may cause the page to wrap over the limit of one page, you can click the NextPage to view the other VLAN groups. NOTE: If Trunk Groups exist, they are displayed as: TRK1, TRK2 TRKn. Trunk Groups can also be a member of a VLAN through use of the VLAN Configuration menu. 23

2-4-7-2. IEEE 802.1q Tag-based VLAN 24-Port 10/100Base-TX Layer 2 Switch Use this page to create tag-based VLANs, and enable or disable GVRP protocol. There are 256 VLAN groups provided in the Switch. Enable 802.1q VLAN, all ports on the Switch belong to a default VLAN. Its VID is 1. The Default 1 VLAN cannot be deleted. GVRP (GARP [Generic Attribute Registration Protocol] VLAN Registration Protocol) GVRP allows automatic VLAN configuration between the Switch and nodes. If the Switch is connected to a device with GVRP enabled, you can send a GVRP request using the VID of a VLAN defined on the Switch. The Switch will automatically add that device to the existing VLAN. 24

Basic 24-Port 10/100Base-TX Layer 2 Switch Create a VLAN and add tagged member ports to it. The above screen is the Main Tag-based VLAN page 1. From the Main Menu, click Administrator VLAN Configuration, click Add, and you will see the page shown above. 2. VLAN Name: Type a name for the new VLAN. 3. VID: Type a VID number (between 2-4094). The default is 1 (In total, there are 255 VLANs that can be configured). 4. Protocol VLAN: Choose the protocol type. If you are not applying protocol VLAN, you must set the value to NONE. Note: You can t set a port to join more than one VLANs/VIDs with a same protocol. 5. From the Available ports box, for each port you wish to add to the VLAN, click and press Add>>. If the trunk groups exist, you can see displayed as: TRK1, TRK2,, You have the option later of configuring it to be a member of the VLAN. 6. Click Next. Then you will view the page as below. 25

7. After adding ports to the VLAN, you use the above page to set the outgoing frames as VLAN-tagged frames or not. The default is Untag. Using the dropdown box, select Tag or Untag and click Apply. Note: Unless you are sure the network has no tag-unaware devices, you should leave the default setting of the outgoing frames to Untag. Tag: Untag: Outgoing frames with VLAN-tagging. Outgoing frames without VLAN-tagging. Configure port VID settings From the Main Tag-based VLAN page, click [Port VID] (shown on the insert to the right) to enter the Port VID Settings menu. 26

Port VID (PVID) Set the port VLAN ID that will be assigned to untagged traffic on a given port. This feature is useful for accommodating devices that you want to participate in the VLAN but that don t support tagging. Each port allows user to set one PVID, the range is 1~4095, default PVID is 1. Ports may share a same PVID, but all the PVIDs of the ports on the switch must belong to the same 256 number group segment. (For example: 1~255, 256~511, 3840~4095). This is in order to allow for faster Ingress processing of frames. The PVID will be used for VLAN ID tagging to untagged frames. Note also that the PVID must be the same as the member VLAN group IDs that the port belongs to, else the untagged traffic will be dropped. This is because the port can t transmit a frame with a VLAN Group ID it doesn t belong to. If a port also joins a protocol VLAN, the Switch will apply the protocol VLAN ID to untagged frames first. If the frame doesn t meet one of the protocols the port has defined, then the PVID will be applied for this frame. 27

Ingress Filtering Ingress filtering lets frames belonging to a specific VLAN to be forwarded. The Switch has two ingress filtering rule as follows: Rule 1: Forward only packets with VID matching this port's configured VID. The default is Enable. By default, only the packets with VID matching this port s configured VID can pass the port. Rule 2: Drop Untagged Frame. The default is Disable. By default, untagged packets can pass the port. 2-4-8. Spanning Tree The Spanning Tree Protocol (STP) is a standardized method (IEEE 802.1d) for avoiding loops in switched networks. When STP is enabled, it ensures that only one path at a time is active between any two nodes in the network. You can enable Spanning Tree Protocol on web management s switch setting advanced item, select enable Spanning Tree protocol. We recommend that you enable STP on all switches to ensure that only a single active path in the network exists. 1. From the Spanning Tree Configuration Menu (shown below), you can create a new value for the STP parameter, and then click the Apply button to set it. You can view spanning tree information the Root Bridge from the same screen. 28

29 24-Port 10/100Base-TX Layer 2 Switch

2. You can view spanning tree status about the Switch from the STP Port Status screen (below). Parameter Priority Max. Age Description You can change priority value, A value used to identify the root bridge. The bridge with the lowest value has the highest priority and is selected as the root. Enter a value from 1 to 65535. You can change Max. Age value, the number of seconds a bridge waits without receiving Spanning Tree Protocol configuration messages before attempting a reconfiguration. Enter a time in seconds from 6 to 40. 30

Hello Time You can change the Hello time value, the number of seconds between the transmissions of Spanning Tree Protocol configuration messages. Enter a time in seconds from 1 to 10. Forward Delay time You can change forward delay time, The number of seconds a port waits before changing from its Spanning Tree Protocol learning and listening states to the forwarding status. Enter a time in seconds from 4 to 30. 3. From the Spanning Tree Configuration Menu, click PerPort Configuration to configure STP parameters on each port, click on the Apply button to set it. Parameter Port Priority Description You can make the port more or less likely in becoming the root port. The range is between 0-255. Its default setting is 128. The lower the number, the higher the priority. 31

Path Cost Specifies the path cost of the port. The Switch uses this to determine which port are the forwarding ports. The lowest numbers assigned are the forwarding ports. The range is between 1 and 65535 and the default value base on IEEE802.1d are: 10Mb/s = 50-600 100Mb/s = 10-60 1000Mb/s = 3-10 2-4-9. Port Mirroring Port Mirroring is a method to monitor traffic in switched networks. Traffic through ports can be monitored by one specific port. That is, traffic going in or out monitored ports will be duplicated to a mirror port. Roving Analysis State: Roving analysis is the mirroring of Fast Ethernet port traffic to another port of the same media type within a system that has an RMON probe or analyzer attached. This port allows external RMON probes (network analyzers) to monitor traffic on any switched segment. You can monitor a designated roving analysis port to: Analyze traffic loads on each segment so that you can continually optimize your network loads by moving network segments, or troubleshoot switched network problems (for example, to find out why a particular segment has so much traffic) 32

Analysis Port: You can have as many as 16 network analyzers connected to a system. For more accurate analysis, attach the analyzer to a dedicated port instead of through a repeater. When the analyzer port is set, it cannot receive or transmit any other data. Instead, it receives only the data from the ports to be monitored. Monitor Port: The ports you want to monitor. All monitor port traffic will be copied to mirror port. You can select max. 25 monitor ports in the Switch. User can choose which port that they want to monitor in only one mirror mode. For each port 1-24 you wish to monitor, click the check box next that port. When finished, click Apply. 2-4-10. SNMP Any Network Management platform running the Simple Network Management Protocol (SNMP) can manage the Switch, provided the Management Information Base (MIB) is installed correctly on the management station. The SNMP is a protocol that governs the transfer of information between management station and agent. 1. System Options: Use this page to define management stations as trap managers and to enter SNMP community strings. User can also define a name, location, and contact person for the Switch. Fill in the system options data, and then click Apply to update the changes on this page. Name: Enter a name to be used for the Switch. Location: Enter the location of the Switch. Contact: Enter the name of a person or organization. 33

2. Community strings: serve as passwords and can be entered as one of the following: RO: Read only. Enables requests accompanied by this string to display MIB-object information. RW: Read write. Enables requests accompanied by this string to display MIB-object information and to set MIB objects. 3. Trap Manager: The trap manager is a management station that receives traps, the system alerts generated by the Switch. If no trap manager is defined, no traps are issued. Create a trap manager by entering the IP address of the station and a community string the press <<Add<<. 2-4-11. Security Manager Using this page, user can change web management user name and password. 1. User name: Type the new user name. 2. Password: Type the new password. 3. Reconfirm password: Retype the new password. 4. Click Apply. 34

Using this page, user can configure and add the Access Control List of IP addresses which is granted to access management functions of the Switch, like SNMP, Telnet, Web, Ping, etc. The whole Denial of Service (DoS) attack protection function can be disabled also. 2-4-12. TFTP Update Firmware The following menu options provide some system control functions to allow a user to update firmware and remote boot switch system: 1. Install TFTP Turbo98 and execution. 35

2. Copy firmware update version bin to TFTP Turbo98 directory. 3. In web management select administrator TFTP update firmware. 4. Download new bin file then in web management press <update firmware>. 5. After update finished, press <reboot> to restart switch. Note: the address and file name in the above screen shot are examples. 36

2-4-13. Configuration Backup 24-Port 10/100Base-TX Layer 2 Switch 2-4-13-1. TFTP Restore Configuration Use this page to set TFTP server address. You can restore EEPROM values from here, but you must put back image in TFTP server, Switch will download back flash image. Note: the address and file name in the above screen shot are examples 2-4-13-2. TFTP Backup Configuration Use this page to set TFTP server IP address. You can save current EEPROM value from here, then go to the TFTP restore configuration page to restore the EEPROM value. Note: the address and file name in the above screen shot are examples 37

2-4-13-3. TFTP Import Text Configuration File In the previous section, TFTP Restore Configuration and TFTP Backup Configuration, you learned how to restore and backup configuration images saved from the EEPROM and to a TFTP server. But the data in that configuration file was in binary format, as such cannot be read directly. However, there is a method to restore and read the configuration file in plain text format. In sections 4-6-4 and 4-6 5 below, we describe the step by step procedure to both save and restore a flat text configuration file. But first, let s mention a few important points before we begin the procedure. Saving and Importing text configuration files is similar to saving EEPROM images, you will also need to first set a TFTP server address and backup file name as shown in the example screens above. And like before, you will also need to place the configuration file in the TFTP server. The Switch will then be able to download the configuration data into the EEPROM as an executing batch command. You can easily duplicate switch configurations from switch to switch by simply downloading the same configuration data for each switch you like. If there are any changes you wish to make for any particular switch, you could modify the downloaded configuration file by any popularly used text editor, and then restore it to the switch. Note: It is strongly suggested that you use a flat text editor such as Notepad for editing the configuration file. Reason being, that some word processors tend to add unnecessary control or format codes to the text file, possibly corrupting the integrity of the file causing a file import failure. For every file import/export event, a status report is automatically created. The report is located in the file named Report.txt located in your TFTP server. Should there be any errors during the configuration file import, you will see details in the Report.txt file. The information in the report will give you some clues about the process and if any errors occurred. An example of a typical configuration file, and the information it contains, is showed in Appendix D at the end of this section. 38

Note: the address and file name in the above screen shot are examples 2-4-13-4. TFTP Export Text Configuration File Use this page to set TFTP server IP address. You can save current EEPROM values here, then go to the TFTP Import Text Configuration File page to restore the EEPROM value. In the following example, the backup text file is config.txt. It is in plain text format and can be edited by any text editor. Note: the address and file name in the above screen shot are just example 2-4-14. Reboot Reboot the Switch with a software reset. 39

2-4-15. Network Tree The web cluster feature will search switch nodes connected to the local network, and allows users to add/delete any network node(s) to/from the network tree. So that users not only have a network view, but also access or control switches or nodes from the local switch s web interface. See the following diagram. 40

3. Console 1K Xmodem Update Firmware The Switch provides a 1K Xmodem to update firmware via console. The application only works in 38400bps mode. There are two cases where by the 1K Xmodem is used: A. User enters "1K Xmodem receiver mode" through pressing any key within 3 seconds after system is powered on. B. The system automatically enters "1K Xmodem receiver mode" if it detects the firmware checksum fails while booting. 1. Start Xmodem receiver mode. Follow the screen cues by clicking any key. 41

2. By clicking on the connected button, you will see CCCC displayed on console. Select Transfer -> Send File. 3. Select 1K Xmodem in the Protocol item, and specify the path where the image file is to be sent. Then click on the Send button. 42

4. Start download image file. 24-Port 10/100Base-TX Layer 2 Switch 5. Finish download image - the Switch system will update firmware automatically. Update firmware OK - the Switch will reboot. 43

4. Console Menu Line 1. The Switch features a serial interface to manage and to monitor the system. User can follow the Console Port Information provided by web to use windows HyperTerminal program to link the Switch. 2. You must enter your user name and password to login. The default user name is admin, with a null password. 44

4-1. Main Menu 24-Port 10/100Base-TX Layer 2 Switch There are six items you may select from the Console s Main Menu page. They are as follows: 1) Switch Static Configuration: Configure the Switch 2) Protocol Related Configuration: Configure the protocol function. 3) Status and Counters: Show the status of the Switch. 4) Reboot Switch: Restart the system or reset Switch to default configuration. 5) TFTP Update Firmware: Use TF-TP to download image. 6) Logout: Exit the menu line program. Control Keys The control keys used to navigate and select items provided in all menus are as follow: Key Tab: Backspace: Enter: Space: Use Move the cursor to next the item. Move the cursor to previous item. Select the highlighted item. Toggle the selected item. 45

4-2. Switch Static Configurations 24-Port 10/100Base-TX Layer 2 Switch The following actions are provided at the bottom of each of the Switch Configuration pages. Actions <Quit>: Exit the current page and return to previous menu. <Edit>: Configure items. When finished with configurations, press Ctrl+A to return to the action menu line. <Save>: Save all configured values. <Previous Page>: Return to previous page. <Next page>: Go to next page. 46

4-2-1. Port Configuration 24-Port 10/100Base-TX Layer 2 Switch This page allows the configuration of each port. Press <Space> key to change the status of each item. InRate (100K/unit): User can set input rate control. Each unit is 100K. The valid range is 0~1000. 0: disable rate control. 1~1000: valid rate value. OutRate (100K/unit): User can set output rate control. Each unit is 100K. The valid range is 0~1000. 0: disable rate control. 1~1000: valid rate value. Enabled: User can disable or enable each port. Yes means that the port is enabled. No means the port is disabled. Auto: User can set the auto negotiation mode. (Auto, NWay Force, or Force) Spd/Dpx: User can set 100Mbps or 10Mbps speed on port 1~port 24, set 1000Mbps, 100Mbps or 10Mbps speed on port25~port26 (depending 47

on the performance of the uplink module card), and set full duplex or half-duplex modes. Flow Control: Full: User can enable or disable full flow control function (pause) Half: User can enable or disable half flow control function (backpressure). NOTE: 1. Selecting <Save> will only save the new configuration on the current page. 2. If the static trunk groups exist, you can see them after port 26 (e.g. TRK1, TRK2 ), and they can be configured similarly to the items above. 4-2-2. Trunk Configurations Use this page to create a maximum of up to seven trunk groups. The user can arbitrarily select up to four ports from port 1~port 26 to build a trunking group. 1. Select <Edit> on actions menu 2. The numbers running down the left hand side of the page represent the trunk groups. Press the <space> key to configure the member ports of each trunk group. 48

Below that are the Static or LACP settings the corresponding trunk groups (TRK1~TRK7). Static - the normal trunk. LACP - trunking with Link Aggregation Control Protocol. Disable, - the trunk group is deleted. 3. Press Ctrl+A to go back to the action menu line. Select <Save> to save all configured values. NOTE: All ports in the same static trunk group will be treated as single port. So when you setting VLAN members and Port configuration they will be toggled on or off simultaneously. NOTE: If a VLAN Group exists, all of the members of static trunk group must be in same VLAN Group. 4-2-3. VLAN Configuration Use this page to set port-based VLAN or Tagged (802.1q) VLAN or to deactivate the VLAN function. There are a few configuration examples in Appendix for your reference. NOTE: Each time the VLANs are modified, the Switch must be restarted for the new configurations to take affect. 49

4-2-3-1. VLAN Configurations There are three types to select: a. Disable b. Port Based c. 802.1q The VLAN Mode is by default disabled. If 802.1q VLAN are set, you can set PVID, ingress filtering 1 and ingress filtering 2 rules on this page. 1. PVID (Port VID : 1~4095): Type the PVID. Each port allows user to set one PVID, the range is 1~4095, default PVID is 1. Some ports can share a same PVID, but all the PVIDs of the ports of the Switch 50

must belong to a same 256 number segment. (For example 1~255, 256~511, 3840~4095). 2. NonMember Pkt: It matches the Ingress Filtering Rule 1 on web. Either forward only packets with VID matching this port s configured VID, or to drop the frame when VID does not match this port s configured VID. Press <Space> key to choose drop or forward. The default is drop. It is the same as the filtering rule 1 is enabled on web. 3. UnTagged Pkt: It matches the Ingress Filtering Rule 2 on web. Either drop or forward untagged frame. Press <Space> key to choose drop or forward. The default is forward. It is the same as the filtering rule 2 is enabled on web. 4-2-3-2. Create a VLAN Group Create Port-Based VLAN To create a port-based VLAN and to add member/nonmember ports to it, follow the following procedure. 1. Select <Edit>. 2. VLAN Name: Type a name for the new VLAN. 51

3. Grp ID: Type the VLAN group ID. The group ID range is 1~4094. 4. Member: Press <Space> key to choose VLAN member. There are two types to selected: d. Member: the port is a member of the current VLAN. e. NO: the port is NOT a member of the current VLAN. 5. Press Ctrl+A to return to the action menu line. 6. Select <Save> to save all configure values. NOTE: If the trunk groups exist, you can see it after port26 (e.g. TRK1, TRK2 ), and if desired, can chose to assign it is a member of the VLAN. Create 802.1q VLAN To create a 802.1q VLAN and add tagged /untagged member ports to it, follow the below procedure. 1. Select <Edit>. 2. VLAN Name: Type a name for the new VLAN. 52

3. VLAN ID: Type a VID (between 2~4094). The default is 1. There are 256 VLAN groups provided for configuration. Each port can join more than one, (up to 256) tagged VLAN groups. 4. Protocol VLAN: Press <Space> key to choose protocols type. If you are not applying protocol VLAN, you must set the value to None. You can t set a port to join more than one VLANs/VIDs with a same protocol. 5. Member: Press <Space> key to choose VLAN member. There are three types to select from: 1. UnTagged: this port is a member port of this VLAN group and outgoing frames are NOT VLAN-Tagged frames. 2. Tagged: this port is a member port of this VLAN group and outgoing frames are VLAN-Tagged frames. 3. NO: the port is NOT a member port of this VLAN group. 6. Press Ctrl+A to go back to the action menu line. 7. Select <Save> to save all configure values. NOTE: If the trunk groups exist, you can see it after port26 (e.g. TRK1, TRK2 ), and if desired, can chose to assign it is a member of the VLAN. 53

4-2-3-3. Edit / Delete A VLAN Group 24-Port 10/100Base-TX Layer 2 Switch Use this page to edit or delete a VLAN group. 1. Select <Edit> or <Delete> item. 2. Choose the VLAN group that you want to edit or delete and then press Enter. 3. User can modify the protocol VLAN item and whether the member port is tagged or un-tagged, and remove some member ports from an existing VLAN group. 4. After editing the VLAN, press the <Save> key to save all configure values. NOTE: 1.When pressing <Enter> once will complete deletion on delete mode. 2.The VLAN Name and VLAN ID cannot be modified. 3.The DEFAULT VLAN cannot be deleted. 54

4-2-3-4. Groups Sort Mode In this page, user can select VLAN group sort mode. The options are: (1) Sorted By Name (2) Sorted By VID In the Edit/Delete a VLAN group page, the following screen will be displayed. 55

In the Edit/Delete a VLAN Group page, the result of the sort will be displayed. In the Edit/Delete a VLAN Group page, the result of sorting by VID is displayed. 56

4-2-4.Misc Configuration 24-Port 10/100Base-TX Layer 2 Switch 4-2-4-1. MAC Age Interval Type the number of seconds that an inactive MAC address remains in the Switch s address table. The valid range is 300~765 seconds. The default is 300 seconds. 57

4-2-4-2. Broadcast Storm Filtering 24-Port 10/100Base-TX Layer 2 Switch Use this page to configure broadcast storm control. 1. Select <Edit> to configure the broadcast storm filter mode. 2. Press <Space> key to choose the threshold value. The valid threshold values are 5%, 10%,15%,20%,25% and NO. 4-2-4-3. Max. Bridge Transmit Delay Bound 1. Max. bridge transmit delay bound: Limit the packets queuing time in the Switch. If enable, the packets queued that have exceed this time frame will be dropped. Press <Space> key to set the time. The valid values are 1sec, 2secs, 4secs and off. The default is off. 2. Low Queue Delay Bound: Limits the low priority packets queuing time in the Switch. When enabled, the low priority packets in the Switch that have exceeded the Low Queue Max Delay Time it will be sent. Press <Space> key to enable or disable this function. 58

3. Low Queue Max Delay Time: To set the time that low priority packets are queued in the Switch. Default Max Delay Time is 255ms. The valid range is 1~255 ms. NOTE: Make sure that the Max bridge transit delay bound control is enabled before the Low Queue Delay Bound is enabled because the former must be activated before the latter will work. 59

4-2-4-4. Port Security A port in security mode will be locked and does not permit address learning. Only incoming packets with Static Media Access Control (SMAC) already existing in the address table can be forwarded normally. The user can disable the port from learning any new MAC addresses. Then use the static MAC address screen to define a list of MAC addresses that can use the secured port. 1. Select <Edit>. 2. Press Space key to choose enable / disable item. 3. Press Ctrl+A to go back action menu line. 4. Select <Save> to save all configure value. 5. You can press <Next Page> to configure port9 ~ port26, press <Previous Page> return to last page. 60

4-2-4-5. Collisions Retry Forever Collisions Retry Forever: Disabled In half-duplex, if collision happens the Switch will retry to send the frame 48 times before the frame is dropped. Enabled In half-duplex, if collision happens the Switch will retry to send the frame indefinitely. 61

4-2-4-6. Hash Algorithm CRC-hash/Direct-map Hash Algorithm. 24-Port 10/100Base-TX Layer 2 Switch 4-2-4-7. Broadcast Filtering In a regular wired LAN network, there is a lot of broadcasted traffic. In order to filter the broadcast traffic, the user may disable or enable Broadcast Filtering for each port. 62

4-2-5. Administration Configuration 24-Port 10/100Base-TX Layer 2 Switch 4-2-5-1. Change Username Use this page to change web management user name. Type the new user name, then select <Save> to change the username. 63

4-2-5-2. Change Password Use this page to change web management login password. 4-2-5-3. Device Information Use this page to configure the device information. 64

4-2-5-4. IP Configuration 24-Port 10/100Base-TX Layer 2 Switch Use this page to configure the IP setting and fill in the new value. 4-2-5-5. Single IP Configuration The requirement of IPs is increasing with the rapid growth of Ethernet, and the limited availability of IPs is the bottleneck. To solve this issue to some extend, a new feature is introduced that will use a single IP to manage multiple devices. The feature is known as Single IP Management. It works in Master-Slave relation. VOLKTEK added this feature to its 24-port 10/100 switch, which allows users to manage 8 24- port 10/100 devices by using only one IP. Now, you can assign one IP to 8 devices and set one device as Master while rest 7 are set as Slave. The following steps will help you to apply the Master and Slave configuration to your 24-port 10/100 devices to use Single IP management. Note: The maximum limit is 8 devices (1Master 7Slaves), but you may use less Slave devices as per the requirements. Prepare the switch devices by following steps for Single IP configuration. A) Assign the same IP address to all the NSH-550+ devices you wish 65

to use Single IP Management by web-based UI or via using console port. We used 192.168.0.197 to write this menu. B) Check system information and note down the MAC addresses of the each device separately. It is recommended to write the MAC address in piece of paper to avoid confusion later on. C) Once assigned the IP address and noted down the MAC addresses, restart the switch to take effect the new settings. A- Configuration for Master Device Enabling Single IP Configuration Users must use console port management to configure the Master device. Once log-in successfully using the default username and password via console port select as follows. Switch Static Configuration Administration Configuration Single IP Configuration Select <Edit> option, which will lead the curser to Single IP Mode selection. Use spacebar to select the required Master / Slave 1~7 item to enable the switch for using Single IP Management. 66

Select Master and press Ctrl+A to move to the action menu. Then select <Add> to add the Slave devices. Without adding the slave devices, Master will not recognize the slave devices for management. Adding Slave devices to Master Device Once press <Add> after Master is select, the following screen will appear that allows users to add Slave devices.. 67

Use spacebar to select slave from Slave 1 ~ Slave 7 item. Once selected the Slave, press Enter to move into MAC address field to enter the MAC address of the device. After assigning the MAC address, press Ctrl+A to move into actions key menu. Select <Save> to save the input. Repeat the above to add more Slave devices. Please, make sure that don t duplicate the MAC address for multiple slaves. Once all slave entries are done, Master device configuration is completed. Editing in Master Device If you made a mistake or change the Master device later on, perform the following steps to change the Master Device status. After the log in to device go the following menu. Switch Static Configuration Administration Configuration Single IP Configuration Select <Edit> 68

User spacebar to change/select the Single IP Mode from Disable / Master / Slave 1 ~ Slave 7 item. User can edit the Mode later on by same method if needs to change the switch status from Master to Slave. If you don t want to make any changes, select it Master again. Using this edit function in Master device, users can also edit the MAC address of Slave in case entered the wrong MAC address. Once enter into the editing menu as mentioned above, move the cursor by Tab or Down Arrow key to desired MAC address. Then enter the correct MAC Address 69

Press Ctrl+A to move in to action keys and select <Quit>. The newly entered MAC address will replace the older one. Deleting Slave Devices in Master Device Users can delete the Slave devices selected for Master devices. Log in to the Master device and go to the following menu. Switch Static Configuration Administration Configuration Single IP Configuration Select <Delete> 70

Use TAB or Down Arrow key to select the Slave device with MAC address you wish to delete. Press Enter key and the selected Slave devices will be deleted from the Master device. B- Configuration for Slave Devices Enabling Slave Device Follow the steps described here for configuration of Slave devices. Connect the slave devices one by one for configuration of each slave 71

device. Log in through console port as mentioned in the section 3 above. Assign the same IP address of Master device to all Slave devices. Restart the device(s) to take effect the IP changes. Log in and go the following menu. Login Switch Static Configuration Administration Configuration Single IP Configuration The single IP Configuration window will appear as follows. 72

Select <Edit> from actions key menu that will take you to Single IP Mode selection. Use spacebar key to assign the Slave 1 to Slave 7 item as per the requirements. Once you assigned the desired slave, press Ctrl+A to move back to actions key menu and select <Quit> to move back to the previous menu. Repeat the step 3 for assigning all the slave devices one by one. Editing Slave Device Use this option to Edit the Slave Device number in case you wish to disable the Slave device, change the Slave device number or want to change the Slave Device to Master Device. Log in to device and go to the following menu Login Switch Static Configuration Administration Configuration Single IP Configuration Select <Edit> The cursor will move to Single IP Mode. Use spacebar key to select the desired option you wish to change from Disable / Master or Change Slave number After the change, press Ctrl+A to return to actions menu and select <Quit>. Please note that <Add> and <Delete> features are only useful while configuring the Device as Master. 73

C- Integration Diagrams While using Single IP Management function in your network, Master and Slave switches can be cascaded, interleaved by other networking devices/switches, and they also can be configured like a tree. Following are the few of combination examples in which we can use Single IP Management. The only limitation is that all the Slave switches and Master should be located on same LAN. Change in physical location of any switch (Master or Slave) doesn t change the status of Switch configured as Master or Slave. To change the switch status from master to slave, slave to master, or interchange the slave number, please see topic Single IP Configuration. (Master and Slaves - Cascade and/or Tree structure) 74

(Interleaved Network Devices/Switches) (Master Switch can be at any location within LAN) 75

4-2-5-6. Network Configuration 24-Port 10/100Base-TX Layer 2 Switch Use this page to Enable/Disable Network Device Auto-Discovery feature 4-2-5-7. Network Device Configure Configure and add static network devices 76

4-2-5-8. Denial-of-Service Protection Configure Configure and add the Access Control List of IP addresses which is granted to access management functions of the Switch, like SNMP, Telnet, Web, Ping, etc. The whole DoS attack protection function can be disabled also. 77

4-2-6. Port Mirroring Configuration 24-Port 10/100Base-TX Layer 2 Switch The port mirroring is a method for monitoring traffic in switched networks. Traffic passing through ports can be monitored by one specific port. That is, the traffic going in or out of the monitored ports will be duplicated into a separate monitoring port. Press the <Space> key to change the configuration of each item. 1. Select <Edit> 2. Sniffer Mode: Press <Space> key to select the sniffer mode. The options are: Disable / Rx / Tx / Both. 3. Monitoring Port - sniffer port can be used to monitor all ports traffic. Press <Space> key to select it. 4. Monitored Port - the ports you want to monitor. All monitored port traffic will be copied to the sniffer port. You can select a maximum of 25 monitored ports in the Switch. The user can choose the ports to be monitored in one sniffer mode. Press Space key to select the member port, V is a member, isn t a member. 5. Press Ctrl+A go back to the action menu line 6. Select <Save> to save all configured values. 7. On the action menu line you can press <Next Page> to configure port9 ~ port26, select <Previous Page> return to last page. NOTE: Only one sniffer mode can be activated at a time. 78

4-2-7. Priority Configuration 4-2-7-1. Port Static Priority The static priority is port-based. When a port is assigned with a high priority, incoming frames from this port always have a high priority. 79

4-2-7-2. 802.1p Priority Configuration There are 0~7 priority queue levels that can be assigned. 1. Select <Edit> 2. Press <Space> key to select the priority level mapping from low to high queue. 3. High/Low Queue Service Ratio H:L - User can select the ratio of high priority packets and low priority packets. 4. Press Ctrl+A go back action menu line. 5. Select <Save> to save all configure value. 80

4-2-8. MAC Address Configuration 24-Port 10/100Base-TX Layer 2 Switch 4-2-8-1. Static MAC Address When you add a static MAC address, it remains in the Switch's address table regardless of whether the device is physically connected to the Switch. This saves the Switch from having to re-learn a device's MAC address when the Switch is disconnected or powered-off and becomes active on the network again. 81

In this page the user can add / modify / delete a static MAC address. Add static MAC address 1. Select <Add> and then <Edit> to add static MAC address. 2. MAC Address - Enter the MAC address to the port that should permanently forward traffic regardless of the Switch s network activity. 3. Port num - press <Space> key to select the port number. 4. VLAN ID - If they are tag-based (802.1q), VLANs are set up on the Switch. Static addresses are associated with individual VLANs. Type the VID to associated with the MAC address. 5. Press Ctrl+A to go back to the action menu line, and then select <Save> to save all configured values. 82

Edit static MAC address 1. Press <Edit> key. 2. Choose the MAC address that you want to modify and then press Enter. 83

3. Press <Edit> key to modify all the items. 24-Port 10/100Base-TX Layer 2 Switch 4. Press Ctrl+A to go back to the action menu line, and then select <Save> to save all configured values. Delete static MAC address 1. Press <Delete> key. 2. Choose the MAC address that you want to delete and then press enter. 3. By pressing <Enter> once will complete the deletion. 84

4-2-8-2. Filtering MAC Address MAC address filtering allows the Switch to drop unwanted traffic. Traffic is filtered based on the destination addresses. In this page, the user can add / modify / delete filter MAC address. Add filter MAC address 1. Select <Add> and then <Edit> to add a filter MAC address. 2. MAC Address: Type the MAC address to be filtered. 3. Vlan ID: If they are tag-based (802.1q), VLANs are set up on the Switch. Type the VID to associate with the MAC address. 4. Press Ctrl+A to go back to the action menu line, and then select <Save> to save all configured values. 85

Edit filter MAC address 1. Press <Edit> key. 2. Choose the MAC address that you want to modify and then press Enter. 3. Select <Edit> to modify all the items. 86

4. Press Ctrl+A to go back to the action menu line, and then select <Save> to save all configured values. Delete filter MAC address 1. Select <Delete> to delete a filter MAC address. 2. Choose the MAC address that you want to delete and then press Enter. 3. By pressing <Enter> once, the deletion will be completed. 87

4-3. Protocol Related Configuration 24-Port 10/100Base-TX Layer 2 Switch 4-3-1. Spanning Tree Protocol (STP) 88

4-3-1-1.STP Enable Use this page to enable or disable the Spanning Tree Protocol (STP) function. Press <Space> key to select enable or disable. 4-3-1-2. System Configuration 1. You can view spanning tree information about the Root Bridge on the left. 2. On the right, user can set new value for STP parameter. 89

4-3-1-3. Per Port Configurations 24-Port 10/100Base-TX Layer 2 Switch 1. PortState: Display spanning tree status about each port whether it is forwarding or blocking. 2. Select <Edit> 3. PathCost: Specifies the path cost of the port that the Switch uses to determine which port are the forwarding ports 4. Priority: This means port priority, you can make it higher or lower or making it more likely to become the root port 5. Press Ctrl+A go back to the action menu line 6. Select <Save> to save all configured values 7. On the action menu line you can press <Next Page> to configure port9 ~ port26, press <Previous Page> return to last page. 90

4-3-2. SNMP 24-Port 10/100Base-TX Layer 2 Switch Any network management running the Simple Network Management Protocol (SNMP) can manage the Switch. Use this page to define management stations as trap managers and to enter SNMP community strings. User can also define a name, location, and contact person for the Switch. 4.3.2.1. System Options 91

1. Press <Edit>. 2. System Name: Type a name to be used for the Switch. 3. System Contact: Type the name of contact person or organization. 4. System Location: Type the location of the Switch. 5. Press Ctrl+A Return to the action menu line. 6. Press <Save> Save the configure value. 4.3.2.2. Community Strings Use this page to Add/ Edit/ Delete SNMP community strings. 1. Community Name: The name of current strings. 2. Write Access: Enable the rights is read only or read-write. Restricted: Read only, enables requests accompanied by this string to display MIB-object information. Unrestricted: Read write, enables requests accompanied by this string to display MIB-object information and to set MIB objects. 92

4.3.2.3. Trap Managers A trap manager is a management station that receives traps, a system alerts generated by the Switch. If no trap manager is defined, no traps can be issued. Create a trap manager by entering the IP address of the station and a community string. 93

4-3-3.GVRP Use this page to enable / disable the GVRP (GARP VLAN Registration Protocol) support. 1. Select <Edit>. 2. Press Space key to choose Enabled / Disabled. 3. Press Ctrl+A go to the action menu line. 4. Select <Save> to save configured values. 94

4-3-4. IGMP Use this page to enable / disable the IGMP support. 1. Select <Edit>. 2. Press Space key to choose Enabled / Disabled. 3. Press Ctrl+A go to the action menu line. Select <Save> to save configured values. 24-Port 10/100Base-TX Layer 2 Switch 4-3-5. LACP Use this page to configure and view all LACP status. 95

4-3-5-1. Working Port Setting 24-Port 10/100Base-TX Layer 2 Switch Use this page to set the actual work ports in a trunk group. 1. Select <Edit>. 2. Group: Display the trunk group ID. 3. LACP: Display the trunk group s LACP status. 4. LACP Work Port Num: The maximum number of ports that can be aggregated at the same time. If it is a LACP static trunking group, the exceed ports are standby and able to aggregate if work ports fail. If it is a local static trunking group, the number must be the same as group ports. NOTE: Before setting this page, you have to set the trunk groups on the Trunk Configurations page first. 96

4-3-5-2. State Activity 24-Port 10/100Base-TX Layer 2 Switch 1. Select <Edit> 2. Press the <Space> key to choose the item. Active: The port automatically sends LACP protocol packets. Passive: The port does not automatically send LACP protocol packets, and responds only if it receives LACP protocol packets from another device 3. Press Ctrl+A to go to the action menu line 4. Select <Save> to save configured values. If the user set LACP mode in the trunk group, all of the member ports of this trunk group will be set to an "Active" status automatically. 97

4-3-5-3. LACP Status 24-Port 10/100Base-TX Layer 2 Switch When you have set the trunking groups, go to the following page to see the related Static trunk group information. <Quit>: Exit this page and return to previous menu <Previous Page>: Return to previous page <Next page>: Go to next page 4-3-6. 802.1x Protocol This page can configure and view all the 802.1x status. 98

4-3-6-1. 802.1x Enable 24-Port 10/100Base-TX Layer 2 Switch 1. Select <Edit>. 2. Press Space key to choose Enabled / Disabled. 3. Press Ctrl+A go back action menu line. 4. Select <Save> to save configure value. 4-3-6-2. 802.1x System Configuration 1. Press <Edit>. 99

2. Radius Server IP Address: the IP address of the authentication server. 3. Shared Key: A key shared between the Switch and authentication server. 4. NAS, Identifier: A string used to identify the Switch. 5. Server Port: The UDP port number used by the authentication server to authenticate. 6. Accounting Port: The UDP port number used by the authentication server to retrieve accounting information. 7. Press Ctrl+A to return to the action menu line. 8. Press <Save> to save configured value. 4-3-6-3. 802.1x PerPort Configuration In this page, set the authorization status to activate 802.1x function by port setting. 1. Select <Edit>. 2. Status: Press <Space> key to choose Fu / Fa / Au / No authorization status. 3. Press Ctrl+A go back action menu line. 4. Select <Save> to save all configure value. Fu: Force the specific port to be unauthorized. Fa: Force the specific port to be authorized. 100

Au: The state of the specific port that was determined by the outcome of the authentication. No: The specified port does not support IEEE 802.1x function. 4-3-6-4. 802.1x Miscellaneous Configuration 1. Press <Edit>. 2. Quiet Period: Used to define period of time during which it will not attempt to acquire a supplicant (Default time is 60 seconds). 3. Tx Period: Used to determine when an EAPOL PDU is to be transmitted (Default value is 30 seconds). 4. Supplicant Timeout: Used to determine timeout conditions in the exchange between the supplicant and authentication server (Default value is 30 seconds). 5. Server Timeout: Used to determine timeout conditions in the exchange between the authenticator and authentication server (Default value is 30 seconds). 6. ReAuthMax: Used to determine the number of re-authentication attempts that are permitted before the specific port becomes unauthorized (Default value is 2 times). 7. Reauth Period: Used to determine a nonzero number of seconds between periodic re-authentication of the supplications (Default value is 3600 seconds). 8. Press Ctrl+A go back action menu line. 9. Press <Save> to save configures value. 101

4-4. Status and Counters 24-Port 10/100Base-TX Layer 2 Switch You can press the key of Tab or Backspace to choose item, and press Enter key to select item. 4-4-1. Port Status This page displays the status of each port. Link Status: InRate: OutRate: Enabled: Auto: Spd/Dpx: FlowCtrl: Displays whether the port is linked or not linked. Displays the input rate control (100K/unit) setting value. Displays the output rate control (100K/unit) setting value. Displays whether the port is enabled or disable. Depending on the user s setting a Yes or No status will be displayed respectively. If the port is not linked its status be treated as No. Displays the port NWay link mode: Auto, NWay_Force, Force. Displays the port speed and duplex. In auto / NWay force mode, the display for the flow control status is enable or disable after auto-negotiation. 102

In force mode, the display for flow control status is enable or disable depending on the user s setting. <Quit>: Exit the port status page, and return to the previous menu. <Previous Page>: Display previous page. <Next page>: Display next page. 4-4-2. Port Counters The following information provides a view of the current status of the unit. <Quit>: Exit the port status page and return to previous menu. <Reset All>: Set all counts to 0. <Previous Page>: Display previous page. <Next page>: Display next page. 103

4-4-3. System Information MAC Address: Media Access Control - The unique hardware address assigned by the manufacturer. Firmware Version: Display the Switch s firmware version. 104

4-4-4. Network Information 24-Port 10/100Base-TX Layer 2 Switch Display network devices 105

4-5. Reboot Switch 24-Port 10/100Base-TX Layer 2 Switch 4-5-1. Default Reset Switch to default configurations. Press Y, the Switch will load default setting. After load of default settings is completed, the Switch will reboot automatically. 4-5-2. Restart Reboots the Switch with software reset. 106

4-6. TFTP Update Firmware 24-Port 10/100Base-TX Layer 2 Switch Use this page to update firmware or restore EEPROM value or upload current EEPROM value. 4-6-1. TFTP Update Firmware Use this page to update firmware via TFTP 1. Select TFTP Update Firmware menu item and press <Enter>. 2. On the following page, select <Edit>. 3. TFTP Server: Type the IP of TFTP server. 4. Remote File Name: Type the image file name. 5. Press Ctrl+A to go to the action line. 6. Select <Save>, the Switch will start to download the image file. 7. When the update is successful, the image file will be downloaded. 8. Restart the Switch to launch the new version of firmware. 107

108 24-Port 10/100Base-TX Layer 2 Switch

4-6-2. Restore Configure File Use this page to restore EEPROM value from a saved image file in a TFTP server. 1. Start the TFTP server. 2. Select <Edit> on this page. 3. TFTP Server: Type the IP of TFTP server. 4. Remote File Name: Type the image file name. 5. Press Ctrl+A to go to the action line. 6. Select <Save>. The Switch will start to download the image file. 8. When the restore function is successful, the image is downloaded. 9. Restart the Switch to resume normal operations. 4-6-3. Backup Configure File Use this page to save the current EEPROM value to image file. Then when necessary, go to the update configure page to retrieve the EEPROM value. 1. Start the TFTP server. 2. Select <Edit> on this page. 3. TFTP Server: Type the IP of TFTP server. 4. Remote File Name: Type the image file name. 109

5. Press Ctrl+A to go to the action line. 6. Select <Save>. The Switch will start to save the image file. 6. When backup function successfully, the image file is saved to the designated TFTP server. 7. Follow the instructions given in the Restore Configure File page to restore lost settings 4-6-4. TFTP Import Text Configuration File Use this page to restore EEPROM value from a saved text file in a TFTP server. 1. Start the TFTP server. 2. Select <Edit> on this page. 3. TFTP Server: Type the IP of TFTP server. 4. Remote File Name: Type the text file name. 5. Press Ctrl+A to go to the action line. 6. Select <Save>. The Switch will start to download the text file. 7. When the restore function is successful, the image is downloaded. If there is any error, you can view the error information in the Report.txt file located in your TFTP server. It s a good idea to always view the Report.txt to double check that your restore was good even if you don t suspect an error. In some cases a non-fatal error might cause only partial setting of the configurations. 8. Please restart the Switch to resume normal operations. 110

4-6-5. TFTP Export Text Configuration File Use this page to save the current EEPROM value to a text file. 1. Start the TFTP server. 2. Select <Edit> on this page. 3. TFTP Server: Type the IP of TFTP server. 4. Remote File Name: Type the image file name. 5. Press Ctrl+A to go to the action line. 6. Select <Save>. The Switch will start to save the image file. 7. When Export function is successful, the image file is saved to the designated TFTP server. 8. Follow the instructions given in the TFTP Import Configuration File page to restore settings 111

112 24-Port 10/100Base-TX Layer 2 Switch

5. Menu-Driven Interface via Telnet This section provides some basic instructions to using Menu-driven Interface to configure the Switch. Follow the instructions below: 1. Open a Command Prompt window and type telnet xxx.xxx.xxx.xxx where the xxx represent the IP address. As an example, we ll continue to use the IP address configured in part A of this manual: 192.168.0.197 2. Then Press <ENTER> key to start 3. The default Login name is admin with no a null password. The system provides a menu-driven user interfaces via console or telnet. After you log into the system, you will see a window similar to that as the console interface shown in Section four. To use the management facilities of the Switch via telnet, please refer to Section four. 113

5-1. Single IP Management If you are using Single IP Management configuration, you can use the Telnet command to manage any device using the same Single IP irrespective of the status of Master or Slave. For single IP Configuration, please see page 64 of this user manual. Note: Single IP Management is only available via Telnet. Single IP Management is not supported by Console port or Web based interfaces. 1. Open a Command Prompt window and type telnet xxx.xxx.xxx.xxx where the xxx represent the IP address. As an example, we used the IP address configured in part A of this manual: 192.168.0.197 2. Then Press <ENTER> to start 3. Enter the default Login name admin with a null password. (In case you change the default username and password, use the valid username and password) Note: In case you cannot able to Telnet, please try following at the Command Prompt arp a It will display the arp table arp d It will delete all the host addresses 114

4. The above window will appear. Use Tab key to move the cursor and press Enter to go into management mode of the selected switch. (Here we select Master) On the top left corner, the Switch ID will display (0 means Master; 1 ~ 7 means Slave device). Now you can manage the Master Device from this menu. Users can select Single IP Main Menu to go back to Main Menu for selecting the other Device for management. This Single IP Main Menu option is only available when selected the Master Device. 115

In case of selecting the Slave devices, user must log out from the Slave Device to move into Single IP Main menu to select other devices. Selecting the Slave Device Use the Telnet command as described above and select any Slave Device, you wish to manage. The following log in screen will appear. Enter the default username admin with null password. (In case you change the default username and password, enter the valid username and password) In case you select the device which has not configured properly, the keyboard will be locked for about 10 seconds. Once keyboard function is resumed, you can perform the device configuration as discussed under Single IP configuration topic. 116

Once you performed the required management functions, select Logout and it will take you to single IP main menu to select other device for management. Once you complete the management functions on the device(s), select Logout from Single IP Main Menu and close the telnet session. To use the management facilities of the Switch via telnet, please refer to Section four as both (Console port menu driven and Telnet menu driven) provide the same interface. 117

6. Troubleshooting The network administrator can observe and monitor most areas of the Switch status using the LED indicators on the front panel to quickly identify problems. This section contains a few of the more common problems that may arise and possible solutions. Symptom: Power indicator does not light up after power on. Cause: Defective power outlet, power cord or internal power supply. Solution: Verify if the power outlet is functioning normally by plugging in another properly operating device. Connect the power cord to another device to test. If these two tests fail to resolve the problem, replace the power supply unit. Symptom: Link indicator does not light up after making a connection. Cause: Network cable or fiber switch port is defective. Solution: Ensuring the attached device and switch are powered on. Verifying the fiber cable has been properly connected to both devices. Review that the cabling distance does not exceed specified limits. Inspect cable for defects and replace if necessary. Symptom: Unit powers off during operation after a period of time. Cause: Loose power connections, power surges/loss or inadequate ventilation. Solution: Ensure that all power connections are secure and that the unit fans have proper ventilation. If unable to correct the problem by above measures, it may be necessary to replace internal power supply unit. Symptom: If one-port 100FX Fiber module is equipped, the Switch hangs after running for a while. Cause: some older version one-port 100FX Fiber module hardware will make the system misrecognizing the 26 th port. Solution: Disable the 26 th port from Web or Console or Telnet. 118

Application Examples Appendix A Building to Building (Small Campus) In the figure below, the Switch is functioning as a backbone for a small campus network configuration. It is providing a max. of 200 Mbps full duplex link to a remote stack of 10/100 switches. BUILDING C BUILDING A BUILDING B Enterprise Server Aggregation In the figure below, the Switch is functioning as a server aggregation for an enterprise or LAN configuration. It is providing a 200 Mbps full duplex link to a workgroups of 10/100 switches located on separate floors within a single building. GROUND FLOOR FLOOR 10 FLOOR 5 119

LAN Switch In the figure below, the Switch is functioning as a high-speed bridge between segments creating increased capacity for each user (node) on the local area network. It is providing a 200 Mbps full duplex link to a variety of Ethernet / Fast Ethernet network devices within a LAN. UP TO 24 NETWORK NODES CONNECTED -10/100Mbps over copper segments -100Mbps over fiber segments 120

24-Port 10/100Base-TX Layer 2 Switch Appendix B 802.1q Tag-VLAN Application Example An IEEE 802.1q VLAN is a group of ports that can be located anywhere in the network, but communicate as though they belong to the same physical segment. VLANs help to simplify network management by allowing you to move devices to a new VLAN without having to change any physical connections. VLANs can be easily organized to reflect departmental groups (such as Marketing or R&D), usage groups (such as e-mail), or multicast groups (used for multimedia applications such as videoconferencing). VLANs provide greater network efficiency by reducing broadcast traffic, and allow you to make network changes without having to update IP addresses or IP subnets. VLANs inherently provide a high level of network security since traffic must pass through a configured Layer 3 link to reach a different VLAN. Figure 1 demonstrates a VLAN example with two switches and four VLAN groups. Below are details and configuration steps. Figure 1. 802.1q Tag-VLAN example 121

Network topology In Fig 1, we will have a fiber (1000SX) carrying tagged VLANs with trivial VIDs (254,176,102,2) only. This will be connected to the uplink port (26) on a switch-sw1. The internal management interface of this SW1 will have an IP address on VLAN VID 254 (e.g. 137.92.254.10). A 1000SX port (25) on this SW1 will then be connected to the uplink port (26) on SW2 and it will carry tagged packets VIDS (254.176.102.2). Again the management port of the SW2 will be on VLANs VID 254 (e.g. 137.92.254.11). We will have a few ports on the Switch to egress untagged packets on VLANs 254.76.102.2. And we can telnet/snmp the management interfaces of both the SW1 and the SW2. A laptop on either VLANs 254.176.102.3 can see the rest of the network(s). Figure 2. Communications between PC101 & PC201 with tagged-vlan. 122

Switch Configuration SW1 Configuration Steps 24-Port 10/100Base-TX Layer 2 Switch Step 1. Configure PVID [Switch Static Configuration] [VLAN Configuration] [VLAN Configure] Select VLAN mode (802.1q) PVID configuration: Please refer to PVID Configuration Table below PVID Configuration Table PVID Port # 176 1~6 102 7~10 2 13~18 254 25, 26 1 (default) 11,12,19~24 Step 2. Create VLAN Group : v176, 102, v2, v254 [Switch Static Configuration] [VLAN Configuration] [Create a VLAN Group] VLAN configuration: Please refer to VLAN Configuration Table 123

VLAN Configuration Table VLAN Config Port Member (port #) Name VID untagged tagged no Default 1 11, 12, 21~24 25, 26 else v176 176 1~6 25, 26 else v102 102 5~10 25, 26 else v2 2 13~18 25, 26 else v254 254 25, 26 else 124