1.1 General Description ·················································································· 6
1.2 Key Features ····························································································· 6
1.3 The Front Panel ························································································· 7
LEDs Definition ······························································································· 7
The Reset Button ···························································································· 7
Console Port ···································································································· 7
1.4 The Rear Panel ·························································································· 8
Power Receptacle ··························································································· 8
4.1 IP Address ································································································ 19
4.2 System Time ···························································································· 20
Chapter 5 Port ··························································································· 23
5.1 Port Setting ····························································································· 23
5.2 Link Aggregation ···················································································· 24
5.2.1 Trunk Group Setting ············································································ 25
5.2.2 Port Setting ·························································································· 26
The Gigabit Smart Managed Switch is equipped with 24/16 gigabit RJ45 ports and 4 SFP slots.
The switch supports high performance, enterprise-level security control & QoS Layer 2
management features. It is a cost-effective product solution for the small and medium
business.
The switch supports the WebGUI to control each port status and bandwidth control by port
rate limiting. The Storm Control feature protects against Broadcast, Multicast and Unicast
Storm. The rich Quality of Service (QoS) & VLAN provides enhanced traffic management
capabilities to move your data smoother and faster. The device supports a complete lineup of
layer 2 features, including 802.1Q tag VLAN, Port Isolation, Port Mirroring, STP/RSTP, Link
Aggregation Group and 802.3x Flow Control function. It also supports SNMP management
functions.
The switch complies with IEEE802.3az Energy Efficient Ethernet to save power consumption,
Support IGMP Snooping function to improve traffic performance. Moreover, the rich
diagnostic LEDs on the front-panel provide the operating status of individual port and whole
system.
1.2 Key Features
24/16 * RJ-45 ports for 10/100/1000Mbps connectivity
4* SFP ports for 100/1000Mbps Fiber connectivity
Supports MDI/MDI-X auto crossover
Supports NWay protocol and auto-detection
Complies with IEEE802.3, 802.3u, 802.3ab Ethernet standards
Supports IEEE802.3x Flow Control and Back-Pressure control
Supports STP & RSTP
Supports LLDP Discovery
Supports VLAN : Static, Port Based, Tag Based, Voice OUI mode
Supports QoS : CoS, DSCP, CoS-DSCP, IP Precedence
Supports Security : Management Service (Telnet, HTTP, HTTPS, SNMP), Protected Port,
Storm Control, DoS attack prevention
Supports Storm Filter (Broadcast, Unknown Multicast, Unknown Unicast)
Supports port based Ingress/Egress rate limit
Supports 8 queues is handled SP and WRR
Supports Jumbo Frame : 1518~10K Bytes
Supports 8 Link Aggregation Groups with Static & LACP types
Support port mirroring, Ping Testing, Copper Testing
Supports SNMP access control & trap event
Supports IGMP Snooping v2/v3
Supports IEEE802.3az EEE enable and disable
Supports Firmware upgrade and backup
Supports Configuration upgrade and backup
Full Range of Internal universal switching power supply
Supports Reset to factory default button
1.3 The Front Panel
The following figure shows the front panel of the switch.
LEDs Definition
This device provides extensive LEDs to show the activities on power, system and ports.
See the following description for your reference:
LED Status Operation
Steady Green The switch is powered on.
POWER
Off The switch is powered off.
Steady Green The switch is on and functioning properly
SYSTEM
Link/ACT
Blinking Green
Off The power is off or the system is not ready/malfunctioning.
Steady Green Valid port connection;.
Blinking Green
Off Port disconnected.
The switch is rebooting and performing self-diagnostic
tests.
Valid port connection and there is data
transmitting/receiving
The Reset Button
Reset the switch to its factory default configuration via the RESET button. Press the RESET
button for five seconds more and release. The switch automatically reboots and reloads its
factory configuration file. Press the RESET button for two seconds and release, the switch will
warm boot for hardware reset. The RESET button is on the front panel of the switch.
Console Port
This port is reserved for command-line interface (CLI) and RS232 firmware upgrade to use.
The following figure shows the rear panel of the switch:
Power Receptacle
To be compatible with the electric service standards around the world, the switch is designed
to afford the power supply in the range from 100 to 240 VAC, 50/60 Hz. Please make sure that
your outlet standard to be within this range.
To power on the switch, please plug the female end of the power cord firmly into the
receptacle of the switch, the other end into an electric service outlet. After the switch
powered on, please check if the power LED is lit for a normal power status.
1.5 Installation
Unpacking Information
The product package should include the following:
One 24G/16G+4SFP Gigabit Ethernet Smart Managed Switch
One power cord
Rubber foot and screws
Rack-mount brackets
One CD-ROM for user manual
Rack-mount Installation
Rack Mounting the Switch in the 19-inch rack:
Disconnect all cables from the switch before continuing.
Place the unit the right way up on a hard, flat surface with the front facing toward you.
Locate a mounting bracket over the mounting holes on one side of the unit.
Insert the screws and fully tighten with a suitable screwdriver.
Repeat the two previous steps for the other side of the unit.
Insert the unit into the 19" rack and secure with suitable screws (not provided).
Reconnect all cables.
Installing Network Cables
To make a valid connection and obtain the optimal performance, an appropriate cable that
After the password authorization, the information page shows up. You may click on each
folder on the left column of each page to get access to each configuration page. The Graphic
User Interface is as follows:
In the navigation panel, click a main link to reveal a list of submenu links shown as the
following:
The following table describes the links in the navigation panel.
LINKS Submenu
System Information.
Logging Message
Status
Port – Statistics, Bandwidth Utilization
Link Aggregation
MAC Address Table
Network
IP Address
System Time
Port Setting
Port
Link Aggregation – Group, Port Setting, LACP
EEE
Jumbo Frame
VLAN - Create VLAN, VLAN Configuration, Membership,
VLAN
Port Setting
Voice VLAN - Property, Voice OUI
MAC Address Table
Dynamic Address
Static Address
Property
Spanning Tree
Port Setting
Statistics
Property
Port Setting
Discovery (LLDP)
Packet View
Local Information
Neighbor
Statistics
Multicast
Security
QoS
Diagnostics
Management
General – Property, Group Address, Router Port
IGMP Snooping – Property, Querier, Statistics
Management Access – Management VLAN, Management
Service
Protected Port
Storm Control
DoS – Property, Port Setting
General – Property, Queue Scheduling, CoS Mapping, DSCP
Mapping, IP Precedence Mapping
Rate Limit – Ingress/Egress Port, Egress Queue
Logging – Property, Remove Server
Mirroring
Ping
Copper Test
User Account
Firmware – Upgrade/Backup
Active Image
Configuration – Upgrade/Backup, Save Configuration,
Notification
Use the Status pages to view system information and status.
3.1 System Information
Click Status > System Information
This page shows switch panel, CPU utilization, Memory utilization and other system current
information. It also allows user to edit some system information.
Field Description
Model
System Name
System Location
System Contact
MAC Address
IPv4 Address
IPv6 Address
System OID
System Uptime
Model name of the switch
System name of the switch. This name will also use as CLI prefix of
each line
Location information of the switch
Contact information of the switch
Base MAC address of the switch
Current system IPv4 address
Current system IPv6 address
SNMP system object ID
Total elapsed time from booting
The severity for the logging message.
The description of logging message.
3.3 Port
The port configuration page displays port summary and status information.
3.3.1 Statistics
Click Status > Port > Statistics
On this page user can get standard counters on network traffic from the interfaces,
Ethernet-like and RMON MIB. Interfaces and Ethernet-like counters display errors on the
traffic passing through each port. RMON counters provide a total count of different frame
types and sizes passing through each port.
The “Clear” button will clear MIB counter of current selected port.
Field Description
Port
Select one port to show counter statistics.
Select the MIB counter to show different count type
All: All counters.
MIB Counter
Interface: Interface related MIB counters
Etherlike: Ethernet-like related MIB counters
RMON : RMON related MIB counters
Refresh Rate
Refresh the web page every period of seconds to get new counter
of specified port.
3.3.2 Bandwidth Utilization
Click Status > Port > Bandwidth Utilization
This page allow user to browse ports’ bandwidth utilization in real time. This page will refresh
automatically in every refresh period.
The type of the LAG
Static: The group of ports assigned to a static LAG are always
active members.
LACP: The group of ports assigned to dynamic LAG are candidate
ports. LACP determines which candidate ports are active member
ports.
LAG port link status
Active Member
Inactive Member
Active member ports of the LAG
Inactive member ports of the LAG
3.5 MAC Address Table
Click Status > MAC Address Table
The MAC address table page displays all MAC address entries on the switch including static
MAC address created by administrator or auto learned from hardware.
The “Clear” button will clear all dynamic entries and “Refresh” button will retrieve latest
MAC address entries and show them on page.
Field Description
VLAN
MAC Address
VLAN ID of the MAC address.
MAC address
The type of MAC address
Type
Management: DUT’s base MAC address for management purpose.
Static: Manually configured by administrator.
Dynamic: Auto learned by hardware.
The type of port
Port
CPU : DUT’s CPU port for management purpose
Other : Normal switch port
Use the Network pages to configure settings for the switch network interface and how the
switch connects to a remote server to get services.
4.1 IP Address
Click Network > IP Address
Use the IP Setting screen to configure the switch IP address and the default gateway device.
The gateway field specifies the IP address of the gateway (next hop) for outgoing traffic.
The switch needs an IP address for it to be managed over the network. The factory default IP
address is 192.168.1.1. The subnet mask specifies the network number portion of an IP address.
The factory default subnet mask is 255.255.255.0.
Field Description
IPv4 Address Field
Address Type
IP Address
Subnet Mask
Select the address type of IP configuration
Static: Static IP configured by users will be used.
Dynamic: Enable DHCP to obtain IP information from a DHCP server
on the network.
Enter the IP address of your switch in dotted decimal notation for
example 192.168.1.1. If static mode is enabled, enter IP address in this
field.
Enter the IP subnet mask of your switch in dotted decimal notation for
example 255.255.255.0. If static mode is enabled, enter subnet mask in
this field.
DNS Server 1
DNS Server 2
Operational Status
IPv4 Address
IPv4
Gateway
IPv6 Address
IPv6
Gateway
Link Local
Address
Specify the default gateway on the static configuration. The default
gateway must be in the same subnet with switch IP address configuration
If static mode is enabled, enter primary DNS server address in this field.
If static mode is enabled, enter secondary DNS server address in this field.
Select Enable or Disable the IPv6 auto configuration..
Specify the IPv6 address, when the IPv6 auto configuration and DHCPv6
client are disabled.
Specify the prefix for the IPv6 address, when the IPv6 auto configuration
and DHCPv6 client are disabled.
Specify the IPv6 default gateway, when the IPv6 auto configuration and
DHCPv6 client are disabled.
Specify the primary user-defined IPv6 DNS server configuration.
Specify the secondary user-defined IPv6 DNS server configuration.
The operational IPv4 address of the switch.
The operational IPv4 gateway of the switch.
The operational IPv6 address of the switch.
The operational IPv6 gateway of the switch.
The operational IPv6 link local address for the switch.
4.2 System Time
Click Network > System Time
This page allow user to set time source, static time, time zone and daylight saving settings.
Time zone and daylight saving takes effect both static time or time from SNTP server.
SNTP: Time sync from NTP server.
From Computer: Time set from browser host.
Manual Time: Time set by manually configure.
Time Zone
Select a time zone difference from listing district..
SNTP
Address Type
Select the address type of NTP server. This is enabled when time source is
SNTP.
Server
Address
Server Port
Input IPv4 address or hostname for NTP server. This is enabled when time
source is SNTP.
Input NTP port for NTP server. Default is 123. This is enabled when time
source is SNTP.
Manual Time
Date
Time
Input manual date. This is enabled when time source is manual.
Input manual time. This is enabled when time source is manual.
Daylight Saving Time
Type
Select the mode of daylight saving time.
Disable: Disable daylight saving time.
Recurring: Using recurring mode of daylight saving time.
Non-Recurring: Using non-recurring mode of daylight saving time.
USA : Using daylight saving time in the United States that starts on the
second Sunday of March and ends on the first Sunday of November
European: Using daylight saving time in the Europe that starts on the last
Sunday in March and ending on the last Sunday in October.
Offset
Recurring
From
Specify the adjust offset of daylight saving time.
Specify the starting time of recurring daylight saving time. This field
Use the Port pages to configure settings for the switch port related features.
5.1 Port Setting
Click Port > Port Setting
This page shows port current status, and allow user to edit port configurations. Select port
entry and click “Edit” button to edit port configurations.
Field Description
Port
Type
Description
State
Link Status
Speed
Duplex
Port Name.
Allows you to Enable/Disable the port. When Enable is selected, the
port can forward the packets normally.
Port description
Port admin state.
Enabled: Enable the port.
Disabled: Disable the port.
Current port link status
Up: Port is link up.
Down: Port is link down.
Current port speed configuration and link speed status.
Current port duplex configuration and link duplex status.
Current port flow control configuration and link flow control status.
Note:
1. The switch can’t be managed through the disable port.
2. The switch might lose connection temporarily for the specific port (which connect to
the management PC) setting. If it happens, refresh WEB GUI can recover the
connection.
Edit Port Setting
Field Description
Port
Description
Selected Port list.
Port description
State
Link Status
Speed
Duplex
Port admin state.
Enabled: Enable the port.
Disabled: Disable the port.
Current port link status
Up: Port is link up.
Down: Port is link down.
Select the Port speed/duplex capabilities for the ports you need:
Auto: Auto-negotiationspeed/ duplex with all capabilities.
Auto-10M: Auto speed with 10M ability only.
Auto-100M: Auto speed with 100M ability only.
Auto-1000M: Auto speed with 1000M ability only.
Auto-10M/100M: Auto speed with 10M/100M abilities.
10M: Force speed with 10M ability.
100M: Force speed with 100M ability.
1000M: Force speed with 1000M ability
Port duplex capabilities
Auto: Auto flow control ability.
Enabled: Enable flow control ability.
Disabled: Disable flow control ability.
5.2 Link Aggregation
Click Port > Link Aggregation
The Link Aggregation is used to combine a number of ports together to make a single
high-bandwidth data path, which can highly extend the bandwidth.
This page allow user to configure link aggregation group load balance algorithm and group
member.
Field Description
Load Balance
Algorithm
LAG load balance distribution algorithm.
Src-dst-mac: Based on MAC address
Src-dst-mac-ip: Based on MAC address and IP address
LAG
Name
Type
LAG (Link Aggregation Group) Name.
LAG port description
The type of the LAG.
Static: The group of ports assigned to a static LAG are always active
members.
LACP: The group of ports assigned to dynamic LAG are candidate
ports. LACP determines which candidate ports are active member
ports.
Link Status
Active Member
Inactive
LAG port link status.
Active member ports of the LAG.
Inactive member ports of the LAG.
Member
Flow Control
Current port flow control configuration and link flow control status.
Select Link Aggregation Table and click “Edit” button to edit LAG setting.
Edit LAG Group Setting
The type of the LAG.
Static: The group of ports assigned to a static LAG are always active
members.
LACP: The group of ports assigned to dynamic LAG are candidate
ports. LACP determines which candidate ports are active member
ports.
Member
Select available port to be LAG group member port.
5.2.2 Port Setting
Click Port >Link Aggregation>Port Setting
This page shows LAG port current status and allows user to edit LAG port configurations.
Field Description
LAG
Type
Description
State
LAG Port Name
LAG Port media type
LAG port description
LAG Port admin state.
Enable : Enable the port
Disable : Disable the port
Link Status
Current LAG port link status.
Up : Port is link up
Down : Port is link down
Speed
Duplex
Flow Control
Current LAG port speed configuration and link speed status.
Current LAG port duplex configuration and link duplex status.
Current LAG port flow control configuration and link flow control
status.
Select Port Setting Table and click “Edit” button to edit port setting.
Edit LAG Port Setting
Enable : Enable the port
Disable : Disable the port
Speed
Port speed capabilities.
Auto: Auto-negotiationspeed/ duplex with all capabilities.
Auto-10M: Auto speed with 10M ability only.
Auto-100M: Auto speed with 100M ability only.
Auto-1000M: Auto speed with 1000M ability only.
Auto-10M/100M: Auto speed with 10M/100M abilities.
10M: Force speed with 10M ability.
100M: Force speed with 100M ability.
1000M: Force speed with 1000M ability
Flow Control
Port flow control.
Auto: Auto flow control by negotiation.
Enabled: Enable flow control ability.
Disabled: Disable flow control ability.
5.2.3 LACP
Click Port >Link Aggregation>LACP
This page allow user to configure LACP global and port configurations.
Field Description
System Priority
Configure the system priority of LACP. This decides the system priority
field in LACP PDU.
Enable: EEE is operating
Disable: EEE is no operating
Select EEE and click “Edit” button to edit EEE configuration.
Edit EEE Setting
Field Description
Port
Selected port list.
State
Port EEE admin state.
Enable: Enable EEE
Disable: Disabled EEE.
5.3 Jumbo Frame
Click Port > Jumbo Frame
This page allows user to configure switch jumbo frame size.
Field Description
Jumbo Frame
Enable or Disable jumbo frame.
When jumbo frame is enabled, switch max frame size is allowed to
configure. (from 1518 to 10000)
When jumbo frame is disabled, default frame size 1522 will be used.
A virtual local area network (VLAN) is a group of hosts with a common set of requirements
that communicate as if they were attached to the same broadcast domain, regardless of their
physical location. A VLAN has the same attributes as a physical local area network (LAN), but it
allows for end stations to be grouped together even if they are not located on the same
network switch. VLAN membership can configured through software instead of physically
relocating devices or connections.
.
6.1 VLAN
Use the VLAN pages to configure settings of VLAN and all VLAN-related protocol.
6.1.1 Create VLAN
Click VLAN > VLAN > Create VLAN
This page allows user to add or delete VLAN ID entries and browser all VLAN entries that add
statically or dynamic learned by GVRP. Each VLAN entry has a unique name, user can edit
VLAN name in edit page.
Field Description
Available
VLAN
Created VLAN
Click “Edit” button to edit VLAN name
Field Description
Name
VLAN has not created yet.
Select available VLANs from left box then move to right box to add.
VLAN had been created.
Select created VLANs from right box then move to left box to delete.
This page allow user to configure the membership for each port of selected VLAN.
Field Description
VLAN
Port
Mode
Membership
Select specified VLAN ID to configure VLAN configuration.
Display the interface of port entry.
Display the interface VLAN mode of port.
Select the membership for this port of the specified VLAN ID.
Forbidden: Specify the port is forbidden in the VLAN.
Excluded: Specify the port is excluded in the VLAN.
Tagged: Specify the port is tagged member in the VLAN.
Untagged: Specify the port is untagged member in the VLAN.
This page allow user to view membership information for each port and edit membership for
specified interface.
Field Description
Port
Mode
Administrative
VLAN
Operational
VLAN
Display the interface of port entry.
Display the interface VLAN mode of port.
Display the administrative VLAN list of this port.
Display the operational VLAN list of this port. Operational VLAN
means the VLAN status that really runs in device. It may different to
administrative VLAN.
Click “Edit” button to edit VLAN membership
Field Description
Port
Mode
Membership
Display the interface of port entry.
Display the VLAN mode of interface.
Select VLANs of left box and select one of following membership then
move to right box to add membership. Select VLANs of right box then
move to left box to remove membership. Tagging membership may
Forbidden: Set VLAN as forbidden VLAN.
Excluded: Set option is always disabled.
Tagged: Set VLAN as tagged VLAN.
Untagged: Set VLAN as untagged VLAN.
PVID: Check this checkbox to select the VLAN ID to be the port-based
VLAN ID for this port. PVID may auto select or can’t select in differ
settings.
6.1.4 Port Setting
Click VLAN > VLAN > Port Setting
This page allow user to configure port VLAN settings such as VLAN port mode, PVID etc… The
attributes depend on different VLAN port mode.
Hybrid: Support all functions as defined in IEEE802.1Q specification.
Access: Accepts only untagged frames and join an untagged VLAN.
Trunk: An untagged member of one VLAN at most, and is a tagged
member of zero or more VLANs.
PVID
Specify the port-based VLAN ID (1~4094). It’s only available with
hybrid and Trunk mode.
Accept Frame
Type
Ingress
Filtering
Specify the acceptable-frame-type of the specified interfaces. It’s only
available with Hybrid mode.
Specify the status of ingress filtering. It’s only available with Hybrid
mode.
6.2 Voice VLAN
6.2.1 Property
Click VLAN > Voice VLAN > Property
This page allow user to configure global and per interface setting of voice VLAN.
Set checkbox to enable or disable voice VLAN function.
VLAN
Cos/802.1p
Select Voice VLAN ID. Voice VLAN ID cannot be default VLAN.
Select a value of VPT. Qualified packets will use this VPT value as inner
priority.
Remarking
Set checkbox to enable or disable 1p remarking. If enabled, qualified
packets will be remark by this value.
Aging Time
Input value of aging time. Default is 1440 minutes. A voice VLAN entry
will be age out after this time if without any packet pass through.
Field Description
Port
State
Mode
QoS Policy
Display port entry
Display enable/disable status of interface.
Display voice VLAN mode.
Display voice VLAN remark will effect which kind of packet
Click “Edit” button to edit Property Port.
Field Description
Port
Display selected port to be edited.
State
Mode
Set checkbox to enable/disable voice VLAN function of interface.
Select port voice VLAN mode.
Auto: Voice VLAN auto detect packets that match OUI table and add
received port into voice VLAN ID tagged member.
Manual: User need add interface to VLAN ID tagged member
manually.
QoS Policy
Select port QoS Policy mode
Voice Packet: QoS attributes are applied to packets with OUIs in the
source MAC address.
All: QoS attributes are applied to packets that are classified to the
Voice VLAN.
6.2.2 Voice OUI
Click VLAN > Voice VLAN > Voice OUI
This page allow user to add, edit or delete OUI MAC addresses. Default has 8 pre-defined OUI
MAC.
The Spanning Tree Protocol (STP) is a network protocol that ensures a loop-free topology for
any bridged Ethernet local area network.
8.1 Property
Click STP > Property
Configure and display STP property configuration.
Field Description
State
Operation
Mode
Path Cost
Enable/Disable the STP on the switch.
Specify the STP operation mode.
STP: Enable the Spanning Tree (STP) operation.
RSTP: Enable the Rapid Spanning Tree (RSTP) operation.
Specify the path cost method.
Long: Specifies that the default port path costs are within the range :
1~200,000,000.
Short: Specifies that the default port path costs are within the range :
1~65,535.
Specify the BPDU forward method when the STP is disabled.
Filtering: Filter the BPDU when STP is disabled.
Flooding: Flood the BPDU when STP is disabled.
Priority
Specify the bridge priority. The valid range is from 0 to 61440, and the
value should be the multiple of 4096. It ensures the probability that
the switch is selected as the root bridge, and the lower value has the
higher priority for the switch to be selected as the root bridge of the
topology.
Hello Time
Specify the STP hello time in second to broadcast its hello message to
other bridge by Designated Ports. Its valid range is from 1 to 10
seconds.
Max Age
Specify the time interval in seconds for a switch to wait the
configuration messages, without attempting to redefine its own
configuration.
Forward Delay
Specify the STP forward delay time, which is the amount of time that a
port remains in the Listening and Learning states before it enters the
Forwarding state. Its valid range is from 4 to 10 seconds.
TX Hold Count
Specify the tx-hold-count used to limit the maximum numbers of
packets transmission per second. The valid range is from 1 to 10.
Specify the interface ID or the list of interface IDs.
The operational state on the specified port.
STP path cost on the specified port.
STP priority on the specified port.
The operational edge port on the specified port.
The operational edge point-to-point status on the specified port.
The current port role on the specified port. The possible values are:
“Disabled”, “Master”, “Root”, “Designated”, “Alternative”, and
“Backup”
The current port state on the specified port. The possible values are:
“Disabled”, “Discarding”, “Learning”, and “Forwarding”.
The bridge ID of the designated bridge.
The path cost of the designated port on the switch.
Cost
STP port setting buttons
Field Description
Protocol
Migration
Check
Edit STP port setting
Field Description
State
Restart the Spanning Tree Protocol (STP) migration process
(re-negotiate with its neighborhood) on the specific interface.
Enable/Disable the STP on the specified port
Path Cost
Priority
Edge Port
Specify the STP path cost on the specified port.
Specify the STP priority on the specified port.
Specify the edge mode.
Enable : Force to true state (as link to a host)
Disable : Force to false state (as link to a bridge)
In the edge mode, the interface would be put into the Forwarding
state immediately upon link up. If the edge mode is enabled for the
interface and there are BPDUs received on the interface, the loop
might be occurred in the short time before the STP state change.
Point-to-Point
Specify the Point-to-Point port configuration:
Auto: The state is depended on the duplex setting of the port.
Enable: Force to true state.
Disable: Force to false state.
8.3 Statistics
Click STP > Statistics
To display STP statistics
Bridge Protocol Data Units (BPDUs) are frames that contain information about
the Spanning tree protocol (STP). Switches send BPDUs using a unique MAC address from
its origin port and a multicast address as destination MAC (01:80:C2:00:00:00, or
01:00:0C:CC:CC:CD for Per VLAN Spanning Tree). For STP algorithms to function, the switches
need to share information about themselves and their connections. What they share are
bridge protocol data units (BPDUs). BPDUs are sent out as multicast frames to which only
other layer 2 switches or bridges are listening. If any loops (multiple possible paths between
switches) are found in the network topology, the switches will co-operate to disable a port or
ports to ensure that there are no loops; that is, from one device to any other device in the
layer 2 network, only one path can be taken.
The Link Layer Discovery Protocol (LLDP) is a vendor-neutral link layer protocol in
the Internet Protocol Suite used by network devices for advertising their identity, capabilities,
and neighbors on an IEEE 802 local area network, principally wired Ethernet. The LLDP is a
one-way protocol; there are no request/response sequences. Information is advertised by
stations implementing the transmit function, and is received and processed by stations
implementing the receive function. The LLDP category contains LLDP and LLDP-MED pages.
9.1.1 Property
Click Discovery > LLDP > Property
To display LLDP Property Setting web page.
Field Description
State
LLDP Handling
Enable/Disable LLDP protocol on this switch
Select LLDP PDU handling action to be filtered, bridging or flooded
when LLDP is globally disabled.
Filtering: Deletes the packet.
Bridging: (VLAN-aware flooding) Forwards the packet to all VLAN
members.
Flooding: Forwards the packet to all ports.
Time interval in seconds after which the information for this neighbor
is deleted.
Click “detail” to view selected neighbor detail information.
9.1.6 Statistics
Click Discovery > LLDP > Statistics
To display LLDP Statistics status.
The Link Layer Discovery Protocol (LLDP) Statistics page displays summary and per-port
information for LLDP frames transmitted and received on the switch.
The number of times the complete set of information advertised by a
particular MAC Service Access Point (MSAP) has been inserted into
tables associated with the remote systems.
Deletions
The number of times the complete set of information advertised by
MSAP has been deleted from tables associated with the remote
systems.
Drops
The number of times the complete set of information advertised by
MSAP could not be entered into tables associated with the remote
systems because of insufficient resources.
Age Outs
The number of times the complete set of information advertised by
MSAP has been deleted from tables associated with the remote system
because the information timeliness interval has expired.
Port
Interface or port number.
Transmit
Frame Total
Receive Frame
Total
Receive Frame
Discard
Receive Frame
Error
Receive TLV
Discard
Receive TLV
Unrecognized
Neighbor
Timeout
Number of LLDP frames transmitted on the corresponding port/
Number of LLDP frames received by this LLDP agent on the
corresponding port, while the LLDP agent is enabled.
Number of LLDP frames discarded for any reason by the LLDP agent on
the corresponding port.
Number of invalid LLDP frames received by the LLDP agent on the
corresponding port, while the LLDP agent is enabled.
Number of TLVs of LLDP frames discarded for any reason by the LLDP
agent on the corresponding port.
Number of TLVs of LLDP frames that are unrecognized while the LLDP
agent is enabled.
Use the IGMP Snooping pages to configure setting of IGMP snooping function.
10.2.1 Property
Click Multicast > IGMP Snooping > Property
To display IGMP Snooping global setting and VLAN setting web page.
This page allow user to configure global settings of IGMP snooping and configure specific
VLAN settings of IGMP Snooping.
Set the enabling status of IGMP Snooping functionality
Enable: If Checked Enable IGMP Snooping, else is Disabled IGMP
Snooping.
Version
Set the IGMP Snooping version
IGMPv2: Only support process IGMP v2 packet.
IGMPv3: Support v3 basic and v2.
Report
Suppression
Set the enabling status of IGMP v2 report suppression.
Enable: If Checked Enable IGMP Snooping v2 report suppression, else
Disable the report suppression function.
VLAN
The IGMP entry VLAN ID.
Operation
The enable status of IGMP Snooping VLAN functionality.
Status
Router Port
The enabling status of IGMP Snooping router port auto learning
Auto Learn
Query
Robustness
Query Interval
Query Max
Response
The Query Robustness allows tuning for the expected packet lose on a
subnet.
The interval of query to send general query.
In Membership Query Messages, it specifies the maximum allowed
time before sending a responding report in units of 1/10 second.
Interval
Last Member
Query count
Last Member
Query Interval
Immediate
Leave
The count that Querier-switch sends Group-Specific Queries when it
receives a Leave Group message for a group.
The interval that Querier-switch sends Group-Specific Queries when it
receives a Leave Group message for a group.
The immediate leave status of the group will immediate leave when
receive IGMP Leave message.
Click “Edit” to edit VLAN Setting.
Field Description
VLAN
The selected VLAN List
State
Router Port
Auto Learn
Immediate
Leave
Query
Robustness
Query Interval
Query Max
Response
Interval
Last Member
Set the enabling status of IGMP Snooping VLAN functionality
Enable: If Checked Enable IGMP Snooping router VLAN, else is
Disabled IGMP Snooping VLAN.
Set the enabling status of IGMP Snooping router port learning.
Enable: If Checked Enable learning router port by query and PIM,
DVRMP, else Disable the learning router port.
Immediate Leave the group when receive IGMP Leave message.
Enable: If Checked Enable immediate leave, else Disable immediate
leave.
The Admin Query Robustness allows tuning for the expected packet
loss on a subnet.
The Admin interval of querier to send general query.
The Admin query max response interval, In Membership Query
Messages, it specifies the maximum allowed time before sending a
responding report in units of 1/10 second.
The Admin last member query count that Querier-switch sends
This page allow user to change Management VLAN connection.
Field Description
Management
VLAN
Select management VLAN in option list.
Management connection, such as http, https, SNMP etc.., has the same
VLAN of management VLAN are allow connecting to device. Others
will be dropped.
11.1.2 Management Service
Click Security > Management Access > Management Service
This page allow user to change management services related configurations.
Telnet: Connect CLI through Telnet.
HTTP: Connect Web UI through HTTP.
HTTPS: Connect Web UI through HTTPS.
SNMP: Manage switch through SNMP.
Session
Timeout
Set session timeout minutes for user access to user interface. O minute
means never timeout.
11.2 Protected Port
Click Security > Protected Port
This page allow user to configure protected port setting to prevent the selected ports from
communication with each other. Protected port is only allowed to communicate with
unprotected port. In other words, protected port is not allowed to communicate with another
protected port.
Enable: Enable the storm control function of unknown unicast
packet.
Value of storm control rate, Unit: pps (packet per-second, range
1~262143) or Kbps (Kbits per-second, range16~1000000) depends on
global mode setting.
Action
Select the state of setting.
Drop: Packets exceed storm control rate will be dropped.
Shutdown: Port will be shutdown when packets exceed storm control
rate.
11.4 DoS
A Denial of Service (DoS) attack is a hacker attempt to make a device unavailable to its users.
DoS attacks saturate the device with external communication requests, so that it cannot
respond to legitimate traffic. These attacks usually lead to a device CPU overload.
The DoS protection feature is a set of predefined rules that protect the network from
malicious attacks. The DoS Security Suite Setting enables activating the security suite.
11.4.1 Property
Click Security > DoS > Property
To display DoS Global Setting web page.
Drops the TCP fragment packets with offset equals to one.
(Offset=1)
Ping Max Size
Specify the maximum size of the ICMPv4/ICMPv6 ping packets. The
valid range is from 0 to 65535 bytes, and the default value is 512 bytes.
IPv4 Ping Max
Size
IPv6 Ping Max
Size
TCP Min Hdr
Size
Checks the maximum size of ICMP ping packets, and drops the packets
larger than the maximum packet size.
Checks the maximum size of ICMPv6 ping packets, and drops the
packets larger than the maximum packet size
Checks the minimum TCP header and drops the TCP packets with the
header smaller than the minimum size. The length range is from 0 to
31 bytes, and default length is 20 bytes.
IPv6 Min
Flagment
Checks the minimum size of IPv6 fragments, and drops the packets
smaller than the minimum size. The valid range is from 0 to 65535
bytes, and default value is 1240 bytes.
Smurf Attack
Avoid smurf attack. The length range of the netmask is from 0 to 323
bytes, and default length is 0 bytes.
11.4.2 Port Setting
Click Security > DoS > Port Setting
To configure and display the state of DoS protection for interfaces.
Enable/Disable the DoS protection on the interface.
Chapter 12 QoS
QoS (Quality of Service) functions to provide different quality of service for various network
applications and requirements and optimize the bandwidth resource distribution so as to
provide a network service experience of a better quality.
12.1 General
Use the QoS general pages to configure setting for general purpose.
12.1.1 Property
Click QoS > General > Property
To display QoS property web page.
Select QoS trust mode.
CoS: Traffic is mapped to queues based on the CoS field in the VLAN
tag, or based on the per-port default CoS value (if there is no VLAN
tag on the incoming packet), the actual mapping of the CoS to queue
can be configured on port setting dialog.
DSCP: All IP traffic is mapped to queues based on the DSCP field in the
IP header. The actual mapping of the DSCP to queue can be
configured on the DSCP mapping page. If traffic is not IP traffic, it is
mapped to the best effort queue.
CoS-DSCP: Uses the trust CoS mode for non-IP traffic and trust DSCP
mode for IP traffic.
IP Precedence: Traffic is mapped to queues based on the IP
precedence. The actual mapping of the IP precedence to queue can be
configured on the IP Precedence mapping page.
Field Description
Port
CoS
Trust
Port name
Port default CoS priority value for the selected ports.
Port trust state
Enable: Traffic will follow trust mode in global setting.
Disable: Traffic will always use best efforts.
Remarking
(CoS)
Port CoS remarking admin state.
Enable: CoS remarking is enabled
Disable: CoS remarking is disabled
Remarking
(DSCP)
Port DSCP remarking admin state.
Enable: DSCP remarking is enabled
Disable: DSCP remarking is disabled
Remarking
(IP Precedence)
Port IP Precedence remarking admin state.
Enable: IP Precedence remarking is enabled
Disable: IP Precedence remarking is disabled
Click “Edit” to edit the QoS port setting.
Field Description
Port
CoS
Trust
Remarking
(CoS)
Remarking
Select port list
Set default CoS priority value for the selected ports.
Set checkbox to enable/disable port trust state.
Set checkbox to enable/disable port CoS remarking.
Set checkbox to enable/disable port DSCP remarking.
(DSCP)
Remarking
Set checkbox to enable/disable port IP Precedence remarking.
Click QoS > General > Queue Scheduling
To display Queue Scheduling web page.
The switch supports eight queues for each interface. Queue number 8 is the highest priority
queue. Queue number 1 is the lowest priority queue. There are two ways of determining how
traffic in queues is handled, Strict Priority (SP) and Weighted Round Robin (WRR).
Strict Priority (SP) : Egress traffic from the highest priority queue is transmitted first. Traffic
from the lower queues is processed only after the highest queue has been transmitted, which
provide the highest level of priority of traffic to the highest numbered queue.
Weighted Round Robin (WRR) : In WRR mode the number of packets sent from the queue is
proportional to the weight of the queue (the higher the weight, the more frames are sent).
The queuing mode can be selected on the Queue page. When the queuing mode is by Strict
Priority, the priority sets the order in which queues are serviced, starting with queue_8 (the
highest priority queue) and going to the next lower queue when each queue is completed.
When the queuing mode is Weighted Round Robin, queues are serviced until their quota has
been used up and then another queue is serviced. It is also possible to assign some of the
lower queues to WRR, while keeping some of the higher queues in Strict Priority. In this case
traffic for the SP queues is always sent before traffic from the WRR queues. After the SP
queues has been emptied, traffic from the WRR queues is forwarded. (The relative portion
from each WRR queue depends on its weight).
If the queue type is WRR, set the queue weight for the queue.
WRR
Percentage of WRR queue bandwidth.
Bandwidth
12.1.3 CoS Mapping
Click QoS > General > CoS Mapping
To display CoS Mapping web page.
The CoS to Queue table determines the egress queues of the incoming packets based on the
802.1p priority in their VLAN tags. For incoming untagged packets, the 802.1p priority will be
the default CoS/802.1p priority assigned to the ingress ports.
Use the Queues to CoS table to remark the CoS/802.1p priority for egress traffic from each
queue.
The DSCP to Queue table determines the egress queues of the incoming IP packets based on
their DSCP values. The original VLAN Priority Tag (VPT) of the packet is unchanged.
Use the Queues to DSCP page to remark DSCP value for egress traffic from each queue.
Field Description
DSCP
Queue
DSCP value
Select Queue ID for DSCP value.
Field Description
Queue
DSCP
Queue ID
Select DSCP value for Queue ID.
12.1.5 IP Precedence Mapping
Click QoS > General > IP Precedence Mapping
To display IP Precedence Mapping web page.
This page allow user to configure IP Precedence to Queue Mapping and Queue to IP
Precedence Mapping.
Use the Rate Limit pages to define values that determine how much traffic the switch can
receive and send on specific port or queue.
12.2.1 Ingress/Egress Port
Click QoS > Rate Limit > Ingress/Egress
To display Ingress/Egress Port web page.
This page allow user to configure ingress port rate limit and egress port rate limit. The ingress
rate limit is the number of bits per second that can be received from the ingress interface.
Excess bandwidth above this limit is discarded.
Enable: Egress queue rate limit is enable.
Disable: Egress queue rate limit is disable.
Queue 7 egress committed information rate.
Port egress queue 8 rate limit state.
Enable: Egress queue rate limit is enable.
Disable: Egress queue rate limit is disable.
Queue 8 egress committed information rate.
Click “Edit” to edit Egress Queue
Field Description
Port
Queue 1
Queue 2
Queue 3
Queue 4
Queue 5
Queue 6
Queue 7
Queue 8
Select port list
Set checkbox to enable/disable egress queue 1 rate limit. If egress rate
limit is enabled, rate limit value need to be assigned.
Set checkbox to enable/disable egress queue 2 rate limit. If egress rate
limit is enabled, rate limit value need to be assigned.
Set checkbox to enable/disable egress queue 3 rate limit. If egress rate
limit is enabled, rate limit value need to be assigned.
Set checkbox to enable/disable egress queue 4 rate limit. If egress rate
limit is enabled, rate limit value need to be assigned.
Set checkbox to enable/disable egress queue 5 rate limit. If egress rate
limit is enabled, rate limit value need to be assigned.
Set checkbox to enable/disable egress queue 6 rate limit. If egress rate
limit is enabled, rate limit value need to be assigned.
Set checkbox to enable/disable egress queue 7 rate limit. If egress rate
limit is enabled, rate limit value need to be assigned.
Set checkbox to enable/disable egress queue 8 rate limit. If egress rate
limit is enabled, rate limit value need to be assigned.
Use the Diagnostic pages to configure settings for the switch diagnostics feature or operating
diagnostic utilities.
13.1 Logging
13.1.1 Property
Click Diagnostics > Logging > Property
To display the Logging Service web page.
Field Description
State
Enable/Disable the global logging services. When the logging service is
enabled, logging configuration of each destination rule can be
individually configured. If the logging service is disabled, no messages
will be sent to these destinations.
Click Diagnostics > Logging > Remote Server
To display the Remote Logging Server web page.
Field Description
Server Address
Server Ports
Facility
The IP address of the remote logging server.
The port number of the remote logging server.
The facility of the logging messages. It can be one of the following
values: local0, local1, local2, local3, local4, local5, local6, and local7.
Severity
The minimum severity
Emergence: System is not usable.
Alert: Immediate action is needed.
Critical: System is in the critical condition.
Error: System is in error condition.
Warning: System warning has occurred.
Notice: System is functioning properly, but a system notice has
occurred.
Informational: Device information.
Debug: Provides detailed information about an event.
OK: Correctly terminated pair.
Short Cable: Shorted pair.
Open Cable: Open pair, no link partner.
Impedance Mismatch: Terminating impedance is not in the
reference range.
Line Drive :
Distance in meter from the port to the location on the cable where the
fault was discovered.
IEEE802.3, IEEE802.3u, and IEEE802.3ab
IEEE 802.3x flow control
IEEE 802.1p class of service, priority protocols
IEEE 802.3az Energy Efficient Ethernet(EEE)
ALLNET GmbH Computersysteme declares that the device ALL-SG8420M is in
compliance with the essential requirements and other relevant provisions of Directive
2004/108/EC. The Declaration of conformity can be found under this link:
www.allnet.de/downloads.html
ALLNET GmbH Computersysteme declares that the device ALL-SG8428M is in
compliance with the essential requirements and other relevant provisions of Directive
2004/108/EC. The Declaration of conformity can be found under this link: