Allnet ALL-SG8452M operation manual

ALL-SG8452M

48-Port Gigabit + 4-SFP Slots

Web Smart Ethernet Switch

User Manual

ALL-SG8452M – User Manual

Default-IP:

192.168.2.1

Default Username + Password:

admin

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

Table of Contents

Chapter 1 Product Introduction ........................................................ 6

1.1 Product Overview ............................................................................... 6

1.2 Features .............................................................................................. 6

1.3 External Component Description ...................................................... 7

1.3.1 Front Panel .................................................................................................. 7

1.3.2 Rear Panel.................................................................................................... 8

1.4 Environment ....................................................................................... 8

1.5 Package Contents ............................................................................... 9

Chapter 2 Installing and Connecting the Switch ........................... 10

2.1 Installation ........................................................................................ 10

2.1.1 Desktop Installation .................................................................................. 10

2.1.2 Rack-mountable Installation in 19-inch Cabinet .................................... 11

2.1.3 Power on the Switch................................................................................. 11

2.2 Connect Computer (NIC) to the Switch ........................................... 12

Chapter 3 How to Login the Switch ................................................ 13

3.1 Switch to End Node .......................................................................... 13

3.2 How to Login the Switch ................................................................. 13

Chapter 4 Switch Configuration ..................................................... 15

4.1 Quickly setting .................................................................................. 15

4.2 PORT ............................................................................................... 18

4.2.1 Basic config ............................................................................................. 18

4.2.2 Port aggregation .................................................................................... 20

4.2.3 Port mirroring ......................................................................................... 21

4.2.4 Port rate-limit ...................................................................................... 22

4.2.5 Storm control .......................................................................................... 23

4.2.6 Port isolation .......................................................................................... 25

4.3 VLAN ............................................................................................... 26

4.3.1 VLAN config ............................................................................................ 26

4.3.2 Trunk-port setting ..................................................................................... 27

4.3.3 Hybrid-port setting ................................................................................... 29

4.4 Fault/Safety ....................................................................................... 30

4.4.1 Anti attack ................................................................................................. 30

4.4.1.1 Anti DHCP attack .............................................................................................. 30

4.4.1.2 Anti DOS ............................................................................................................ 33

4.4.1.3 IPsource guard .................................................................................................. 34

4.4.1.4 Anti three bind ................................................................................................. 35

4.4.2 Channel detection .................................................................................... 36

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

4.4.2.1 Ping testing ....................................................................................................... 36

4.4.2.2 Tracert testing ................................................................................................... 37

4.4.2.3 Cable testing ..................................................................................................... 38

4.4.3 ACL .......................................................................................................... 39

4.5 MSTP ............................................................................................... 41

4.5.1 MSTP region .............................................................................................. 41

4.5.2 MSTP bridge .............................................................................................. 42

4.6 DHCP relay ........................................................................................ 45

4.6.1 DHCP relay ................................................................................................. 46

4.6.2 0ption82 .................................................................................................... 47

4.7 DHCP Server ...................................................................................... 48

4.7.1 DHCP Config .............................................................................................. 48

4.8 QoS .................................................................................................... 50

4.8.1 Remark ....................................................................................................... 50

4.8.2 Queue config ............................................................................................ 52

4.8.3 Mapping the queue .................................................................................. 53

4.8.3.1 Service class queue mapping ................................................................ 53

4.8.3.2 Differential service class mapping ................................................................... 54

4.8.3.3 Port to service class mapping ........................................................................... 55

4.9 Address table ................................................................................. 56

4.9.1 Mac add and delete .................................................................................. 57

4.9.2 Mac study and laging ............................................................................... 58

4.9.3 Mac address filtering ................................................................................ 59

4.10 Snmp config ................................................................................. 60

4.10.1 Snmp config ............................................................................................ 60

4.10.1.1 Snmp config .................................................................................................... 60

4.10.1.2 Community config .......................................................................................... 61

4.10.1.3 View config ..................................................................................................... 62

4.10.1.4 Group config ................................................................................................... 63

4.10.1.5 User config ...................................................................................................... 64

4.10.1.6 Trap .................................................................................................................. 65

4.10.2 Rmon config ............................................................................................ 66

4.10.2.1 Statistics group................................................................................................ 66

4.10.2.2 History group .................................................................................................. 68

4.10.2.3 Event group .................................................................................................... 69

4.10.2.4 Alarm group .................................................................................................... 70

4.11 LACP ................................................................................................ 71

4.12 SYSTEM ........................................................................................... 74

4.12.1 System config .......................................................................................... 74

4.12.1.1 System settings................................................................................................ 74

4.10.1.2 System restart ................................................................................................. 76

4.10.1.3 Password change ............................................................................................ 77

4.10.1.4 SSH login ......................................................................................................... 78

4.10.1.5 Telnet login................................................................................................... 79

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

4.10.1.6 System log ....................................................................................................... 79

4.12.2 System upgrade ...................................................................................... 81

4.12.3 Config management .............................................................................. 82

4.12.3.1 Current configuration .................................................................................... 82

4.12.3.2 Configuration backup .................................................................................... 82

4.12.3.3 Restore factory configuration ........................................................................ 83

4.12.4 Config save .............................................................................................. 84

4.12.5 Administrator privileges ......................................................................... 85

4.12.6 Info collect ............................................................................................... 86

Appendix: Technical Specifications ................................................. 88

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

Chapter 1 Product Introduction

Congratulations for purchasing the Web Smart Ethernet Switch. Before you install and use this product, please read this manual carefully for full exploiting the functions of this product.

1.1 Product Overview

This is 48 10/100/1000Mbps RJ45 ports + 4 100/1000Mbps SFP ports Ethernet Switch. The Switch provides the seamless network connection. This device integrates 1000Mbps Gigabit Ethernet, 100Mbps Fast Ethernet and 10Mbps Ethernet network capabilities in a highly flexible package. With 48-10/100/1000Mbps Auto-Negotiation RJ45 ports, all UTP ports support Auto MDI/MDIX function. The Switch with a low-cost, easy-to-use, high performance upgrade your old network to a 1000Mbps Gigabit network. It is essential to helping solve network bottlenecks that frequently develop as more advanced computer users and newer applications continue to demand greater network resources. The Switch is easy to install and use. It is a great selection for office network.

1.2 Features

 Comply with IEEE802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3x, IEEE802.3z,

IEEE802.3ad standards

 Supports IEEE802.3x flow control for Full-duplex Mode and backpressure for

Half-duplex Mode

 Supports MAC address auto-learning and auto-aging  Store and forward mode operates  Support SNMP/RMON/TELENT  Supports IEEE802.1Q VLAN, 4K VLAN Table  Support IEEE802.1p Priority Queues  Support 2K+256-entry ingress and egress ACL  Support Storm Control  Support QoS, Port Mirroring, Link Aggregation Protocol  LED indicators for monitoring power, link/activity ,Speed  Web-based Management Support  Internal power adapter supply

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

1.3 External Component Description

1.3.1 Front Panel

The front panel of the Switch consists of 48 x 10/100/1000Mbps RJ-45 ports, 4 x 1000Mbps SFP ports, 1 x Console port, 1 x Reset button and a series of LED indicators as shown as below.

10/100/1000Mbps RJ-45 ports (1~48):

Designed to connect to the device with a bandwidth of 10Mbps, 100Mbps or 1000Mbps. Each has a corresponding 10/100/1000Mbps LED.

SFP ports (49~52):

Designed to install the SFP module and connect to the device with a bandwidth of 100Mbps or 1000Mbps. Each has a corresponding 100/1000Mbps LED.

Console port (Console):

Designed to connect with the serial port of a computer or terminal for monitoring and configuring the Switch.

Reset button (Reset):

Keep the device powered on and press down the button for about 6 seconds. The system restores the factory default settings.

LED indicators:

The LED Indicators will allow you to monitor, diagnose and troubleshoot any potential problem with the Switch, connection or attached devices.

The following chart shows the LED indicators of the Switch along with explanation of each indicator.

LED COLOR STATUS

STATUS DESCRIPTION

On Power On

Power Green

Off Power Off

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

On A device is connected to the port

Off A device is disconnected to the port

LINK/ACT

/Speed

(1~48)

Orange

（10/100Mbps）

Green

（1000Mbps） Flashing Sending or receiving data

On A device is connected to the port

SFP

(49~52)

Green

Off A device is disconnected to the port

Flashing Sending or receiving data

1.3.2 Rear Panel

The rear panel of the Switch contains AC power connector and one marker shown as below.

AC Power Connector:

Power is supplied through an external AC power adapter. It

supports AC

100-240V, 50/60Hz.

Grounding Terminal:

The Switch already comes with Lightning Protection Mechanism. You can also ground the Switch through the PE (Protecting Earth) cable of AC cord or with Ground Cable.

1.4 Environment

 Operating Temperature: 0℃~40℃  Storage Temperature: -40℃~70℃  Operating Humidity: 10%~90% non-condensing  Storage humidity: 5%~90% non-condensing

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

1.5 Package Contents

Before installing the Switch, make sure that the following the "packing list" listed OK. If any part is lost and damaged, please contact your local agent immediately. In addition, make sure that you have the tools install Switches and cables by your hands.

 One Web Smart Ethernet Switch

 Four rubber feet, two mounting ears and eights screws

 One AC power cord

 One User Manual

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

Chapter 2 Installing and Connecting the

Switch

This part describes how to install your Web Smart Ethernet Switch and make connections to it. Please read the following topics and perform the procedures in the order being presented.

2.1 Installation

Please follow the following instructions in avoid of incorrect installation causing device damage and security threat.

 Put the Switch on stable place or desktop in case of falling damage.  Make sure the Switch works in the proper AC input range and matches the

voltage labeled on the Switch.

 To keep the Switch free from lightning, do not open the Switch’s shell even

in power failure.

 Make sure that there is proper heat dissipation from and adequate

ventilation around the Switch.

 Make sure the cabinet to enough back up the weight of the Switch and its

accessories.

2.1.1 Desktop Installation

Sometimes users are not equipped with the 19-inch standard cabinet. So when installing the Switch on a desktop, please attach these cushioning rubber feet provided on the bottom at each corner of the Switch in case of the external vibration. Allow adequate space for ventilation between the device and the objects around it.

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

2.1.2 Rack-mountable Installation in 19-inch Cabinet

The Switch can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a wiring closet with other equipment. To install the Switch, please follow these steps:

a. Attach the mounting brackets on the Switch’s side panels (one on each side)

and secure them with the screws provided.

b. Use the screws provided with the equipment rack to mount the Switch on

the rack and tighten it.

2.1.3 Power on the Switch

The Switch is powered on by the AC 100-240V 50/60Hz internal high-performance power supply. Please follow the next tips to connect:

AC Electrical Outlet:

It is recommended to use single-phase three-wire receptacle with neutral outlet or multifunctional computer professional receptacle. Please make sure to connect the metal ground connector to the grounding source on the outlet.

AC Power Cord Connection: Connect the AC power connector in the back panel of the Switch to external receptacle with the included power cord, and check the power indicator is on or not. When it is on, it indicates the power connection is OK.

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

2.2 Connect Computer (NIC) to the Switch

Please insert the NIC into the computer, after installing network card driver, please connect one end of the twisted pair to RJ-45 jack of your computer, the other end will be connected to any RJ-45 port of the Switch, the distance between Switch and computer is around 100 meters. Once the connection is OK and the devices are power on normally, the LNK/ACT/Speed status indicator lights corresponding ports of the Switch.

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

Chapter 3 How to Login the Switch

3.1 Switch to End Node

Use standard Cat.5/5e Ethernet cable (UTP/STP) to connect the Switch to end nodes as described below. Switch ports will automatically adjust to the characteristics (MDI/MDI-X, speed, duplex) of the device to which is connected.

Please refer to the LED Indicator Specification. The LINK/ACT/Speed LEDs for each port lights on when the link is available.

3.2 How to Login the Switch

As the Switch provides Web-based management login, you can configure your computer’s IP address manually to log on to the Switch. The default settings of the Switch are shown below.

Parameter Default Value

Default IP address 192.168.2.1 Default username admin Default password admin

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

You can log on to the configuration window of the Switch through following steps:

1. Connect the Switch with the computer NIC interface.

2. Power on the Switch.

3. Check whether the IP address of the computer is within this network

segment: 192.168.2.xxx (“xxx” ranges 2~254), for example, 192.168.2.100.

4. Open the browser, and enter http://192.168.2.1 and then press “Enter”. The

Switch login window appears.

5. Switching language to English. Enter the Username and Password (The

factory default Username is admin and Password is admin), and then click “Login” to log in to the Switch configuration window as below.

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

Chapter 4 Switch Configuration

The Web Smart Ethernet Switch Managed switch software provides rich layer 2 functionality for switches in your networks. This chapter describes how to use Web-based management interface (Web UI) to this switch configure managed switch software features.

In the Web UI, the left column shows the configuration menu. Above you can see

the information for switch system, such as memory, software version. The middle

shows the switch’s current link status. Green squares indicate the port link is up, while black squares indicate the port link is down. Below the switch panel, you can find a common toolbar to provide useful functions for users. The rest of the screen area displays the configuration settings.

4.1 Quickly setting

In the navigation bar to select “Quick Setup”, can create a VLAN in this module, add the port in the VLAN, set the basic information and modify the switch login password. The following picture:

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

【parameter description】

Parameter Description VLAN ID VLAN number,48GE default VLAN 1 VLAN name VLAN mark Manage IP Manage the IP address of the VLAN device name Switch name Manage VLAN Switches management in use of the VLAN

【instructions】 Native VLAN: as a Trunk, the mouth will belong to a Native VLAN. The so-called Native VLAN, is refers to UNTAG send or receive a message on the interface, is considered belongs to the VLAN. Obviously, the interface of the default VLAN ID (PVID) in the IEEE 802.1 Q VLAN ID is the Native VLAN. At the same time, send belong to Native VLAN frame on the Trunk, must adopt UNTAG way. Allowed VLAN list: a Trunk can transport the equipment support by default all the VLAN traffic (1-4094). But, also can by setting the permission VLAN Trunk at the mouth of the list to limit the flow of some VLAN can't through the Trunk.

【Configuration example】 1） VLAN setting：such as create VLAN 2 ,Sets the port 8 to Trunk ,Native VLAN 2

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

2) Click “next step” button, into other settings, such as：manage IP address set as

192.168.2.11, device name set as switch-123 ,default gateway with the DNS server set as 172.16.1.241

Use 192.168.2.11 to log in, set a new password for 1234

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

4.2 PORT

In the navigation bar to select “PORT”. You may conduct basic config, port

aggregation, port mirroring , port limit and port isolation.

4.2.1 Basic config

In the navigation bar to select “PORT>basic config”. For panel port to port described, port speed, port status, working mode, flow control, cross line order configuration, the following picture:

Irrtum und Änderungen vorbehalten

【parameter description】

parameter description port Select the current configuration port number port status Choose whether to close link port flow control Whether open flow control

ALL-SG8452M – User Manual

Can choose the following kinds: Aggregation

port speed

10 M 100 M 1000 M

Can choose the following kinds: Self negotiated

working mode

10 M 100 M 1000 M

port described The port is described

Cross line sequence Whether open intersection line sequence

【instructions】

Open flow control should be negotiated will close, negotiated close is to set port speed rate and working mode; Set the port rate more than actual rate of port, the port will be up.

【Configuration example】

Such as：The port is set to 10 M, half duplex, open flow control and cross line sequence and port state

Irrtum und Änderungen vorbehalten

4.2.2 Port aggregation

ALL-SG8452M – User Manual

In the navigation bar to select “PORT>port aggregation”. In order to expand the port bandwidth or achieve the bandwidth of the redundancy backup, the following picture:

【parameter description】

parameter description

52GE switch can be set up eight link trunk group, group_1

Aggregation port

to group_8 For each of the members of the group and add your own

Member port

port, and with members of other groups

【instructions】

Open the port of the ARP check function, the port of the important device ARP, the port of the VLAN MAC function, and the monitor port in the port image can’t be

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

added!

【Configuration example】

Such as: set the port 9, 10, for aggregation port 1, lets this aggregation port 1 connected to other switch aggregation port 1 to build switch links .

4.2.3 Port mirroring

In the navigation bar to select “PORT>port mirroring”,Open port mirror feature,All packets on the source port are copied and forwarded to the destination port,Destination port is usually connected to a packet analyzer to analyze the source port,Multiple ports can be mirrored to a destination port,the following picture:

【parameter description】

parameter description Source port To monitor the port in and out of flow

Destination port

Set destination port,All packets on the source port are copied and forwarded to the destination port

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

Mirror group

Range :1-4

【instructions】 The port of the aggregate port can not be used as a destination port and the source port, destination port and source port can not be the same.

【Configuration example】 Such as: set a mirror group for port 10 regulatory port 4, 6, 8 on and out flow conditions

4.2.4 Port rate-limit

In the navigation bar to select “PORT>port rate-limit”. To port output, input speed limit, the following picture:

Irrtum und Änderungen vorbehalten

【parameter description】

ALL-SG8452M – User Manual

parameter

description

Set port input speed

Input speed limit

Set port output speed

Output speed limit

【instructions】

1 Mbit/s = 1000 Kbit/s = 1000 / 8 KB/s = 125 KB/s . That is, the theoretical rate of 1M bandwidth is125KB/s .

【Configuration example】

Such as: the port 9 input rate is set to 6400 KB/s, the output rate is set to 3200 KB/s

4.2.5 Storm control

In the navigation bar to select “PORT>Storm control”, To port storm control config, the following picture：

Irrtum und Änderungen vorbehalten

【parameter description】

ALL-SG8452M – User Manual

parameter

description

Storm suppression value of the broadcast Broadcast suppression value Multicast suppression value Unicast suppression value

packets

Storm suppression value of the multicast

packets

Storm suppression value of the unicast packets

【instructions】

1 Mbit/s = 1000 Kbit/s = 1000 / 8 KB/s = 125 KB/s. That is, the theoretical rate of 1M bandwidth is125KB/s.

【Configuration example】

Such as: should be forwarded to the port 1-8 of all kinds of packet forwarding rate is 5000 KB/s

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

4.2.6 Port isolation

In the navigation bar to select “PORT>port isolation”, ports are isolated. The following picture：

【parameter description】

parameter

description

Source port Choose a port, to configure the isolated port

Isolated port

Port will be isolated

【instructions】

Open port isolation function, All packets on the source port are not forwarded from the isolated port, the selected ports are isolated. Ports that have been added to the aggregate port aren't also capable of being a destination port and source port, destination port and source port cannot be the same

【Configuration example】

Such as: the port 3, 4, 5, and 6 ports are isolated

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

4.3 VLAN

In the navigation bar to select “VLAN”. You can manage the VLAN config, Trunk

Settings and Hybrid Settings. The following picture:

4.3.1 VLAN config

In the navigation bar to select “VLAN config”. VLANs can be created and set the port to the VLAN (port default state for the access mode) ,the following picture

【parameter description】

parameter description VLAN ID VLAN number,48GE default VLAN 1 VLAN name VLAN mark

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

VLAN IP address Manage switch ip address

【instructions】

Management VLAN, the default VLAN cannot be deleted. Add ports to access port, port access mode can only be a member of the VLAN.

【Configuration example】

Such as: connect switches pc1, pc2 couldn't ping each other, will be one of the PC connection port belongs to a VLAN 2

4.3.2 Trunk-port setting

In the navigation bar to select “VLAN config>trunk-port setting”, Can set port to Trunk port, the following picture：

【parameter description】

parameter description Native VLAN Only set one

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

Allowing VLAN Can set up multiple

【instructions】

Native VLAN: as a Trunk, the mouth will belong to a Native VLAN. The so-called Native VLAN, is refers to UNTAG send or receive a message on the interface, is considered belongs to the VLAN. Obviously, the interface of the default VLAN ID (PVID) in the IEEE 802.1 Q VLAN ID is the Native VLAN. At the same time, send belong to Native VLAN frame on the Trunk, must adopt UNTAG way. Allowed VLAN list: a Trunk can transport the equipment support by default all the VLAN traffic (1-4094). But, also can by setting the permission VLAN Trunk at the mouth of the list to limit the flow of some VLAN can't through the Trunk.

【Configuration example】

Such as：PVID=VLAN2 PC1：192.168.2.122, port 8, access VLAN2 PC2：192.168.2.123, port 9, Trunk allowed VLAN 1-2 PC3：192.168.2.124, port 10, access VLAN1（The default port belongs to VLAN1） Can let the PC2 PING PC1, cannot PING PC3

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

4.3.3 Hybrid-port setting

In the navigation bar to select “VLAN config>hybrid-port setting”, Can set the port to take the tag and without the tag ,the following picture：

【instructions】

Hybrid port to packet: Receives a packet, judge whether there is a VLAN information: if there is no play in port PVID, exchanged and forwarding, if have, whether the Hybrid port allows the VLAN data into: if can be forwarded, or discarded (untag on port configuration is not considered, untag configuration only work when to send it a message) Hybrid port to send packet: 1, determine the VLAN in this port attributes (disp interface can see the port to which VLAN untag, which VLAN tag) 2, if it is untag stripping VLAN information, send again, if the tag is sent directly

【Configuration example】

Such as: create vlans 10, 20, VLAN sets the Native VLAN port 1 to 10, to tag VLAN for 10, 20, sets the Native VLAN port 2 to 20, to tag VLAN for 10, 20

Irrtum und Änderungen vorbehalten

ALL-SG8452M – User Manual

This system e0/1 and the receive system e0/2 PC can be exchanged, but when each data taken from a VLAN is different. Data from the pc1, by inter0/1 pvid VLAN10 encapsulation VLAN10 labeled into switches, switch found system e0/2 allows 10 data through the VLAN, so the data is forwarded to the system e0/2, because the system e0/2 VLAN is untagged 10, then switches at this time to remove packet VLAN10 tag, in the form of ordinary package sent to pc2, pc1 - > p2 is VLAN10 walking at this time Again to analyze pc2 gave pc1 package process, data from the pc2, by inter0/2 pvid VLAN20 encapsulation VLAN20 labeled into switch, switch found system e0/1 allows VLAN by 20 data, so the data is forwarded to the system e0/1, because the system e0/1 on the VLAN is untagged 20, then switches remove packets on VLAN20 tag at this time, in the form of ordinary package sent to pc1, pc2 at this time - > pc1 is VLAN 20

4.4 Fault/Safety

In the navigation bar to select “fault/safety”. You can set anti attack、channel

detection and ACL access control configuration 。

4.4.1 Anti attack

4.4.1.1 Anti DHCP attack

In the navigation bar to select “fault/safety>anti attack>anti dhcp attack”. Open the DHCP anti-attack function, intercepting counterfeit DHCP server and address depletion attack packets ban kangaroo DHCP server, the following picture：

Irrtum und Änderungen vorbehalten

+ 75 hidden pages

Allnet ALL-SG8452M operation manual

Specifications and Main Features

Frequently Asked Questions

User Manual