1.1 LI G1014 A ................................................................................................................................................................................................... 5
1.3 LI G1082 A ...................................................................................................................................................................................................7
1.4 LIE1014 A ...................................................................................................................................................................................................8
1.7 System Statistics....................................................................................................................................................................................11
2. OVERVIE W .................................................................................................................................................................................... 12
2.2 Available Models .................................................................................................................................................................................... 12
2.3 Features .................................................................................................................................................................................................. 13
2.4 What’s Included ......................................................................................................................................................................................13
2.5.3 LIG1082 A ........................................................................................................................................................................................................... 17
2.5.6 LIE1082 A ............................................................................................................................................................................................................20
3.3 Alarm Relay and Ground ........................................................................................................................................................................22
3.4 Connecting the Ethernet Interface (RJ-45 Ethernet) ..........................................................................................................................23
3.5 Connecting the Ethernet Interface (Fiber, SFP) ................................................................................................................................... 24
3.6 Power Connection ..................................................................................................................................................................................24
3.7 Alarm Relay and Ground ........................................................................................................................................................................ 26
3.8 System Reset .......................................................................................................................................................................................... 26
3.13 Reset to Default and Save Configuration ...........................................................................................................................................30
3.14 LED Status Indicators ...........................................................................................................................................................................34
5.1 Case 1: ACL for MAC Address ...............................................................................................................................................................42
5.2 Case 2: ACL for IP Address ...................................................................................................................................................................55
5.3 Case 3: ACL for L4 Port .........................................................................................................................................................................55
5.4 Case 4: ACL for ToS................................................................................................................................................................................55
6. RING VERSION 2 APPLICATION ................................................................................................................................................57
6.1 Ring Version 2 Feature ........................................................................................................................................................................... 57
6.2 How to Configure Ringv2 .......................................................................................................................................................................60
7.2 Example 1: SPQ without Shaping (Default Profile) ..............................................................................................................................69
7.3 Example 2: SFQ with Shaping ................................................................................................................................................................72
8.1 Example 1 ................................................................................................................................................................................................ 76
8.2 Example 2 ...............................................................................................................................................................................................77
8.3 Example 3 ...............................................................................................................................................................................................78
8.4 How to Configure VLC ...........................................................................................................................................................................79
9.2 Radius Server Configuration .................................................................................................................................................................81
9.3 Example ...................................................................................................................................................................................................82
10. POWER OVER ETHERNET APPLICATION (FOR LIE1014A, LIE1080A AND LIE1082A MODELS ONLY) .............................. 85
10.1 Reserved Power Determination ...........................................................................................................................................................85
10.2 Power Management Mode ...................................................... ............................................................................................................85
10.3 Other Settings ....................................................... ................................................................................................................................86
10.4 PoE Power Scheduling and Reset .......................................................................................................................................................86
10.5 Example 1 .............................................................................................................................................................................................87
10.6 Example 2 .............................................................................................................................................................................................88
APPENDIX A. REGULATORY INFORMATION ................................................................................................................................ 90
A.2 NOM Statement ..................................................................................................................................................................................... 91
APPENDIX B. TRADEMARKS/DISCLAIMER .................................................................................................................................. 92
B.1 Trademarks Used in this Manual ..........................................................................................................................................................92
When a connector is removed during installation, testing, or servicing, or when an energized fiber is broken, a risk of ocular
exposure to optical energy that may be potentially hazardous occurs, depending on the laser output power.
The primary hazards of exposure to laser radiation from an optical-fiber communication system are:
Damage to the eye by accidental exposure to a beam emitted by a laser source.
Damage to the eye from viewing a connector attached to a broken fiber or an energized fiber.
If the equipment is used in a manner not specified by the manufacturer, the protection provided by the equipment may be impaired.
CONNECTORS(8) RJ-45, 10/100/100 0 Mbps speed auto-negotiation, MDI-MDI-X auto-crossover, (1) RJ-45 console por t
INDICATORS(1) P1 LED, (1) P2 LED, (1) ALM LED, (8) RJ-45 Ehernet Port Link LEDs, (8) RJ- 45 Ethernet Port Speed LEDs, (10) PoE Port LEDs
DIMENSIONS (WITHOUT DIN
RAIL CLIP)
WEIGHT3.1 lb. (1.4 kg)
INSTALLATION OPTIONSDIN-rail mounting;
POWER
POEYe s
INPUTRedundant input terminals, reverse power protection, 12 –58 VDC, 54–58 VDC for PoE+, 48–58 VDC for PoE
MAXIMUM POWERWithout PoE: 14 Watts,
ENVIRONMENTAL
OPERATING TEMPERATURE - 40 to +167° F (-40 to +75° C), cold star tup at - 40° C
STORAGE TEMPERATURE- 40 to +185° F (-40 to +85° C)
HUMIDITY5 to 95% RH (non-condensing)
Certification compliance: CE /FCC; EN 50121-4, NEMA TS-2
Electrical safety: CSA C22, UL60905, CE
EMC: FCC Part 15, CISPR 22 (EN55022) Class , IEC61000- 4-2, -3, -4, -5, -6
RoHS and WEEE: RoHS (Pb free) and WEEE compliant
MTBF: > 25 years
Client/Server/Snooping/Relay/Option82, QoS, IGMP Prox y/Snooping v1/v2, Filter Features, LLDP, STP, RSTP, MSTP, LACP, v3 to SNMP,
v3 to IGMP Proxy/Snooping
INDICATORS(1) P1 LED, (1) P2 LED, (1) ALM LED, (6) RJ- 45 Ehernet Port Link LEDs, (6) RJ- 45 Ethernet Port Speed LEDs, (2) SFP Port Link LEDs,
DIMENSIONS (WITHOUT DIN
RAIL CLIP)
WEIGHT3.1 lb. (1.4 kg)
INSTALLATION OPTIONSDIN-rail mounting;
POWER
POEYes
INPUTRedundant input terminals, reverse power protection, 12 –58 VDC, 54–58 VDC for PoE+, 48–58 VDC for PoE
MAXIMUM POWERWithout PoE: 14 Watts,
ENVIRONMENTAL
OPERATING TEMPERATURE -40 to +167° F (-40 to +75° C), cold startup at -40° C
STORAGE TEMPERATURE-40 to +185° F (-40 to +85° C)
HUMIDITY5 to 95% RH (non -condensing)
Certification compliance: CE /FCC; EN 50121-4, NEMA TS-2
Electrical safety: CSA C22, UL60905, CE
EMC: FCC Part 15, CISPR 22 (EN55022) Class A, IEC61000 -4 -2, -3, -4, -5, - 6
RoHS and WEEE: RoHS (Pb free) and WEEE compliant
MTBF: > 25 yrs
Client/Server/Snooping/Relay/Option82, QoS, IGMP Prox y/Snooping v1/v2, Filter Features, LLDP, STP, RSTP, MSTP, LACP, v3 to SNMP,
v3 to IGMP Proxy/Snooping
(1) RJ-45 console port
(2) SFP Por t Speed LEDs, (6) PoE Por t LEDs
6.1”H x 3.0”W x 5.0”D (15.4 x 7.7 x 12.8 cm)
Wallmounting
With PoE: 265 Watts
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
10
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 11
CHAPTER 1: SPECIFICATIONS
1.7 SYSTEM STATISTICS
SYSTEM STATISTICS
FUNCTION NAMESYSTEM MAXI-
VLAN ID4096
VLAN LIMITATION10 24
PRI VILEGE LE VEL OF USER15
RMON STATISTIC ENTRY65535
RMO N AL ARM ENTRY65
RMO N EVEN T ENTRY65535
IPMC PROFILE64
IPMC RULE/ADDRESS ENTRY128
ACE256
ICMP TYPE/CODE255
RADIUS SERVER5
MUM VALUE
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
TACACS+ SERVER5
MAC-BASED VLAN ENTRY256
IP SUBNET-BASED VLAN ENTRY128
PROTOCOL-BASED VLAN GROUP125
VOICE VL AN OUI16
QCE256
IP INTERFACE8
IP RO UTE32
SECURITY ACCESS MANAGEMENT16
MVR VLAN4
MAC LEARNING TABLE ADDRESS8K
IGMP GROUP256
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
11
Page 12
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 1:HEADLINE
CHAPTER 2: OVERVIEW
2.1 INTRODUCTION
The Industrial Managed and Unmanaged Gigabit Ethernet Switches include unmanaged switches that provide four
(4) copper RJ-45 or RJ-45 PoE ports and one (1) multi-rate SFP slot and managed switches that provide six (6), eight (8) or ten (10)
copper RJ-45 or RJ-45 PoE ports and two (2) or four (4) multi-rate SFP slots.
Power over Ethernet
The LIE401A, LIE1014A, LIE1080A and LIE1082A switches support Power over Ethernet compliant to the IEEE 802.3af and IEEE
802.3at standard on all copper ports. Thus these switches can be used to power standard PoE PD devices with up to 30 watts per
port along with the Ethernet data on standard Ethernet Cabling.
Multi-rate SFP slots
The benefit of having multi-rate SFP slots is to be able to use 100-Mbps and 1-Gbps SFP Modules for either multi- or single-mode
in a mix and match as needed. If requirements change, just replace the SFP module and protect your switch investment.
Power
The switches are powered from 12- to 58-VDC. The PoE models need 48 VDC for 802.3af and a minimum of 53 VDC for 802.3at.
Extended temperature range
All models are tested and released for operating temperatures from -40° up to +75° Celsius. They passed shock, vibration and
freefall test and comply with the IEC600068-2-6, -27 and -32 standards.
Management
The switches offer powerful features including Layer 3 routing and management with all advanced filter and multicast
algorithms needed today to easily prioritize, partition, and organize a reliable high-speed network.
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
2.2 AVAILABLE MODELS
Six models of the Industrial Gigabit Ethernet Switches are available:
1(1) RJ-45 connectorLinks to console for management
2(1) 6-pin terminal blockPower 1, Power 2 and Alarm connections
3(1) P1 LEDLights when power to Power Supply 1 is ON
4(1) P2 LEDLights when power to Power Supply 2 is ON
5(1) Alarm LEDLights to indicate an alarm
6(10) Link/Activity LEDsLights when there is activity on the respective port
7(10) Speed LEDsLights when port is operating at 100 Mbps
8(10) RJ-45 connectorsConnect to devices
9(4) SFP module cagesConnect to fiber optic uplinks
9
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
15
Page 16
CHAPTER 2: OVERVIEW
2.5.2 LIG1080A
1
2
3, 4, 5
6
7
8
FIGURE 2-3. LIG1080A TOP AND FRONT PANELS
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
TABLE 2-2. LIG1080A COMPONENTS
NUMBER IN FIGURE 2-3COMPONENTDESCRIPTION
1(1) 6-pin terminal blockPower 1, Power 2 and Alarm connections
2(1) RJ-45 connectorLinks to console for management
3(1) P1 LEDLights when power to Power Supply 1 is ON
4(1) P2 LEDLights when power to Power Supply 2 is ON
5(1) Alarm LEDLights to indicate an alarm
6(8) Link/Activity LEDsLights when there is activity on the respective port
7(8) Speed LEDsLights when port is operating at 100 Mbps
8(8) RJ-45 connectorsConnect to devices
16
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 17
CHAPTER 2: OVERVIEW
2.5.3 LIG1082A
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
3, 4, 5
6
7
8
9
FIGURE 2-4. LIG1082A FRONT PANEL
TABLE 2-3. LIG1082A COMPONENTS
NUMBER IN FIGURES 2-4COMPONENTDESCRIPTION
1 (not shown)(1) RJ-45 connectorLinks to console for management
2 (not shown)(1) 6-pin terminal blockPower 1, Power 2 and Alarm connections
3(1) P1 LEDLights when power to Power Supply 1 is ON
4(1) P2 LEDLights when power to Power Supply 2 is ON
5(1) Alarm LEDLights to indicate an alarm
6(6) Link/Activity LEDsLights when there is activity on the respective port
7(6) Speed LEDsLights when port is operating at 100 Mbps
8(6) RJ-45 connectorsConnect to devices
9(2) SFP module cagesConnect to fiber optic uplinks
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
17
Page 18
CHAPTER 2: OVERVIEW
2. 5 . 4 L I E 10 14A
1
FIGURE 2-5. LIE1014A TOP PANEL
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
2
2
3
4
FIGURE 2-6. LIE1014A FRONT PANEL
TABLE 2-4. LIE1014A COMPONENTS
NUMBER IN FIGURES 2-5 AND 2-6COMPONENTDESCRIPTION
1(1) RJ-45 connectorLinks to console for management
2(1) 6-pin terminal blockPower 1, Power 2 and Alarm connections
3(8) PoE LEDsLight when port is using Power over Ethernet (PoE)
4(1) RR LED, (1) RS LEDRing Role, Ring Status (see Table 3-2 in Section 3.14)
5(1) P1 LEDLights when power to Power Supply 1 is ON
6(1) P2 LEDLights when power to Power Supply 2 is ON
7(1) Alarm LEDLights to indicate an alarm
8(8) Link/Activity LEDsLights when there is activity on the respective port
9(8) Speed LEDsLights when port is operating at 100 Mbps
10(8) RJ-45 PoE connectors Connect to PoE devices
11(4) SFP module cagesConnect to fiber optic uplinks
5, 6, 7
8
9
10
11
18
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 19
CHAPTER 2: OVERVIEW
2.5.5 LIE1080A
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
5, 6, 7
8
3
4
9
10
FIGURE 2-7. LIE1080A FRONT PANEL
TABLE 2-5. LIE1080A COMPONENTS
NUMBER IN FIGURE 2-7COMPONENTDESCRIPTION
1 (not shown)(1) RJ-45 connectorLinks to console for management
2 (not shown)(1) 6-pin terminal blockPower 1, Power 2 and Alarm connections
3(8) PoE LEDsLight when port is using Power over Ethernet (PoE)
4(1) RR LED, (1) RS LEDRing Role, Ring Status (see Table 3-2 in Section 3.14)
5(1) P1 LEDLights when power to Power Supply 1 is ON
6(1) P2 LEDLights when power to Power Supply 2 is ON
7(1) Alarm LEDLights to indicate an alarm
8(8) Link/Activity LEDsLights when there is activity on the respective port
9(8) Speed LEDsLights when port is operating at 100 Mbps
10(8) RJ-45 PoE connectors Connect to PoE devices
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
19
Page 20
CHAPTER 2: OVERVIEW
2.5.6 LIE1082A
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
5, 6, 7
8
3
9
10
4
11
FIGURE 2-8. LIE1082A FRONT PANEL
TABLE 2-6. LIE1082A COMPONENTS
NUMBER IN FIGURE 2-7COMPONENTDESCRIPTION
1 (not shown)(1) RJ-45 connectorLinks to console for management
2 (not shown)(1) 6-pin terminal blockPower 1, Power 2 and Alarm connections
3(6) PoE LEDsLight when port is using Power over Ethernet (PoE)
4(1) RR LED, (1) RS LEDRing Role, Ring Status (see Table 3-2 in Section 3.14)
5(1) P1 LEDLights when power to Power Supply 1 is ON
6(1) P2 LEDLights when power to Power Supply 2 is ON
7(1) Alarm LEDLights to indicate an alarm
8(6) Link/Activity LEDsLights when there is activity on the respective port
9(6) Speed LEDsLights when port is operating at 100 Mbps
10(6) RJ-45 PoE connectors Connect to PoE devices
11(2) SFP module cagesLink to fiber optic SFP modules
20
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 21
CH AP TE R 3: INSTA LL ATION
3.1 DIN RAIL MOUNTING
Follow these steps to mount the switch on a DIN rail.
1. Screw the DIN-Rail bracket on with the bracket and screws in the accessory kit.
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 3-1. DIN RAIL MOUNTING STEP 1
2. Hook the unit over the DIN rail.
3. Push the bottom of the unit towards the DIN Rail until it snaps into place.
+
+
+
+
+
+
+
+
+
+
FIGURE 3-2. DIN RAIL MOUNTING STEPS 2 AND 3
+
+
+
+
+
+
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
21
Page 22
CH AP TE R 3: INSTA LL ATION
3.2 WALLMOUNTING
Follow these steps to mount the switch on a wall.
1. Screw the wall-mount brackets on with screws in the accessory kit.
POE
1
–
–
1
–
–
–
–
–
2
3
–
–
3
–
–
–
–
–
4
5
–
–
–
5
–
–
–
–
6
5
–
–
7
–
–
–
–
–
6
–
–
–
910
–
–
–
–
–
–
11
–
–
–
–
–
–
–
–
13
–
–
–
–
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
P2
P1
ALM
–
–
2
–
–
–
–
–
–
–
4
–
–
–
–
–
–
–
–
6
–
–
–
–
–
–
8
–
–
–
–
–
–
–
–
–
–
–
–
–
–
12
–
–
–
–
–
–
–
–
14
–
–
–
–
FIGURE 3-3. MOUNTING THE SWITCH ON A WALL
3.3 ALARM RELAY AND GROUND
The alarm relay output contacts are in the middle of the DC terminal block connector as shown in the next figure.
The alarm relay out is “Normal Open,“ and it will be closed when the switch detects any predefined failure such as power failures or
Ethernet link failures.
The relay output has a current carrying capacity of 0.5 A @ 24 VDC.
The switch must be properly grounded for optimum system performance.
22
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 23
CH AP TE R 3: INSTA LL ATION
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
EXTRA POWER SYSTEM
ALARM SYSTEM
+ –– +
PWR1
ALM PWR2
CONSOLE
FIGURE 3-4. ALARM RELAY AND GROUND
3.4 CONNECTING THE ETHERNET INTERFACE (RJ-45 ETHERNET)
The switch provides two types of Ethernet interfaces: electrical (RJ-45) and optical (SFP) interfaces.
Connecting the Ethernet interface via RJ45:
To connect the switch to a PC, use straight-through or cross-over Ethernet cables,
To connect the switch to an Ethernet device, use UTP (Unshielded Twisted Pair) or STP (Shielded Twisted Pair) Ethernet cables.
The pin assignment of RJ-45 connector is shown in the following figure and table.
RESET
+
GROUND CONNECTOR
LED A
PIN 8
LED B
PIN 1
TABLE 3-1. RJ-45 PINOUT
PINASSIGNMENT
1, 2T/Rx+, T/ R x-Positive VPort
3, 6T/R x+, T/ Rx-Negative VPort
4, 5T/R x+, T/ Rx-X
7, 8T/ R x+, T/Rx-X
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
POE ASSIGNMENT
(FOR POE MANAGED SERIES ONLY)
23
Page 24
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CH AP TE R 3: INSTA LL ATION
3.5 CONNECTING THE ETHERNET INTERFACE (FIBER, SFP)
For both 100/1000 Mbps fiber speed connections, the SFP slots are available. The SFP slot accepts the fiber transceivers that
typically have an LC connector.
The fiber transceivers have options of multimode, single mode, long-haul or special-application transceivers.
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 3-5. FIBER OPTICS CABLE
WITH LC DUPLEX CONNECTOR
DANGER:
Never attempt to view optical connectors that might be emitting laser energy.
Do not power up the laser product without connecting the laser to the optical fiber and putting
the cover in position, as laser outputs will emit infrared laser light at this point.
3.6 POWER CONNECTION
The switch can be powered from two power supplies (input range 12V – 58V). Insert the positive and negative wires into V+ and Vcontacts on the terminal block respectively and tighten the wire-clamp screws to prevent the wires from being loosened.
NOTE: The DC power should be connected to a well-fused power supply.
FIGURE 3-6. CONNECT THE OPTICAL FIBER
TO THE SFP SOCKET
24
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 25
CH AP TE R 3: INSTA LL ATION
MANAGED SERIES
FIRST POWER SUPPLY
+ –– +
PWR1
SECOND POWER SUPPLY
ALM PWR2
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
POE MANAGED SERIES
CONSOLE
RESET
FIGURE 3-7. MANAGED SERIES
SECOND POWER SUPPLY
+ –– +
PWR1
CONSOLE
RESET
+
FIRST POWER SUPPLY
ALM PWR2
+
FIGURE 3-8. POE MANAGED SERIES
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
25
Page 26
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CH AP TE R 3: INSTA LL ATION
3.7 ALARM RELAY AND GROUND
The alarm relay output contacts are in the middle of the DC terminal block connector as shown in the figure below.
The alarm relay out is “Normal Open,” and it will be closed when the switch detects any predefined failure such as power failures
or Ethernet link failures.
The relay output with current carrying capacity of 0.5A @ 24 VDC.
The switch must be properly grounded for optimum system performance.
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
EXTRA POWER SYSTEM
ALARM SYSTEM
+ –– +
PWR1
ALM PWR2
CONSOLE
FIGURE 3-9. ALARM RELAY AND GROUND
3.8 SYSTEM RESET
The Reset button is provided to reboot the system without the need to remove power. Under normal circumstances, you will not
have to use it. However, on rare occasions, theswitchmay not respond; then you may need to push the Reset button.
RESET
+
GROUND CONNECTOR
26
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 27
CH AP TE R 3: INSTA LL ATION
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
EXTRA POWER SYSTEM
ALARM SYSTEM
+ –– +
PWR1
ALM PWR2
+
CONSOLE
FIGURE 3-10. RESET BUTTON
3.9 CONSOLE CONNECTION
The Console port is for local management by using a terminal emulator or a computer with terminal emulation software. The DB9
connector connects to the computer’s COM port.
Baud rate = 115200 bps
8 data bits, 1 stop bit
Priority = None
Flow control = None
RESET
RES ET BUTTON
+ –– +
PWR1
ALM PWR2
+
CONSOLE
FIGURE 3-11. CONSOLE CONNECTOR
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
RESET
27
Page 28
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CH AP TE R 3: INSTA LL ATION
To connect the host PC to the Console port, an RJ-45 (male) connector-to-RS232 DB9 (female) connector cable is required.
The RJ-45 connector of the cable is connected to the Console port of the switch; the DB9 connector of the cable is connected
to the PC COM port. The pin assignment of the Console cable is shown below:
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
1
6
2
RD
7
3
TD
8
4
9
5
DGND
FIGURE 3-12. CONSOLE CABLE
3.10 WEB INTERFACE INITIALIZATION (OPTIONAL)
WEB BROWSER SUPPORT
IE 7 (or newer version) with the following default settings is recommended:
Language scriptLatin based
Web page fontTimes New Roman
Plain text fontCourier New
EncodingUnicode (UTF-8)
Text sizeMedium
1
2
3 (RD)
4 (TD)
5
6 (DGND)
7
8
Firefox with the following default settings is recommended:
Web page fontTimes New Roman
EncodingUnicode (UTF-8)
Text size16
Google Chrome with the following default settings is recommended:
Web page fontTimes New Roman
EncodingUnicode (UTF-8)
Text sizeMedium
28
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 29
CH AP TE R 3: INSTA LL ATION
CONNECT AND LOGIN
Connecting to the RJ-45 Ethernet port.
Factory default IP: 192.0.2.1
Login with default account and password.
Username: admin
Password: (none)
3.11 CLI INITIALIZATION AND CONFIGURATION (OPTIONAL)
1. Connect to the RJ-45 Ethernet port.
2. Type in the command under Telnet: telnet 192.0.2.1
3. Login with default account and password.
Username: admin
Password: (none)
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 3-13. LOGIN TO COMMAND LINE INTERFACE (CLI)
4. Change the IP with the commands listed below:
enable
configure terminal
interface vlan 1
ip address xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
exit
FIGURE 3-14. CLI COMMAND
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
29
Page 30
CH AP TE R 3: INSTA LL ATION
3.12 UPGRADE/DOWNGRADE SOFTWARE
1. In the Web UI, go to the Maintenance —> Software —> Upload page.
2. Select software file and click the Upload button.
FIGURE 3-15. SOFTWARE UPLOAD BUTTON
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
3. After starting to upload the software to the device, do not restart the device; wait until it auto reboots and the upgrade finishes.
FIGURE 3-16. UPGRADE IN PROCESS SCREEN
3.13 RESET TO DEFAULT AND SAVE CONFIGURATION
CONFIGURATION VIA CLI COMMAND
To see what the current interface and IP address is and if the manager wants to reset the configuration to default but keep the
management IP setting:
1. Execute this command: reload defaults keep-ip
2. Check the interface VLAN and IP address, confirm only if the management IP setting is kept.
3. Execute this command: copy running-config startup-config
30
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 31
CH AP TE R 3: INSTA LL ATION
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 3-17. RESET CONFIGURATION BUT KEEP MANAGEMENT IP SETTING
To reset all configurations to default:
1. Execute this command: reload defaults
2. Check the interface VLAN and IP address, confirm that they all changed to the default setting.
3. Execute this command: copy running-config startup-config
FIGURE 3-18. RESET ALL CONFIGURATIONS
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
31
Page 32
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CH AP TE R 3: INSTA LL ATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
CONFIGURATION VIA WEB UI
If the manager wants to reset the configuration to default but keep the management IP setting:
1. Go to Maintenance —> Factory Defaults page and click the Yes button.
FIGURE 3-19. RESET TO FACTORY DEFAULTS SCREEN
2. Go to Maintenance —> Configuration —> Save startup-config pagination, then click the Save Configuration button, then reset.
FIGURE 3-20. SAVE CONFIGURATION SCREEN
To reset all configurations to defaults:
1. Go to the Maintenance —> Configuration —> Activate page, select default-config, then click the Activate Configuration button.
FIGURE 3-21. ACTIVATE CONFIGURATION SCREEN
32
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 33
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CH AP TE R 3: INSTA LL ATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
2. Change the PC’s IP address to an address in the 192.0.2.X network.
3. Change the Web’s IP to 192.0.2.1 (default IP).
4. Go to the Maintenance —> Configuration —> Save startup-config page, then click the Save Configuration button to reset.
FIGURE 3-22. SAVE CONFIGURATION SCREEN
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
33
Page 34
CH AP TE R 3: INSTA LL ATION
3.14 LED STATUS IND I CATORS
TABLE 3-2. LED STATUS INDICATORS
LED NAMEINDICATOR /COLORCONDITION
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
P1
P2
Alarm
Copper port Link/Act
Copper port Speed
SFP port Link/Act
SFP port Speed
POE MANAGED SERIES ONLY
RR (Ring Role)
On GreenP1 power line has power
OffP1 power line is disconnected or does not have supply power
On GreenP2 power line has power
OffP2 power line is disconnected or does not have supply power
On RedAlarm event occurs
OffNo alarm
On GreenEthernet link up but no traffic is detected
Flashing GreenEthernet link up and there is traffic detected
OffEthernet link down
On YellowA 100 Mbps or a 1000 Mbps connection is detected
OffNo link or a 10 Mbps connection is detected
On GreenEthernet link up
OffEthernet link down
On YellowSFP port speed 1000 Mbps connection is detected.
OffNo link or a SFP port speed 100 Mbps connection is detected
On Green One of 3 Ring group is enabled and is Master role.
OffRing is slave role
34
RS (Ring Status)
On GreenRing fail is detected
OffNo ring fail detected
On YellowPoE is detected
PoE
OffNo link
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 35
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 4: VLAN APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
This chapter describes how to configure Virtual LANs (VLANs) in the switch. The switch supports up to 2048 VLANs. Ports are
grouped into broadcast domains by assigning them to the same VLAN. Frames received in on VLAN can only be forwarded within
that VLAN, and multicast frames and unknown unicast frames are flooded only to ports in the same VLAN.
4.1 EX AMPLE 1: DEFAULT VLAN SETTINGS
Each port in the switch has a configurable default VLAN number, known as its PVID. This places all ports on the same VLAN
initially, although each port PVID is configurable to any VLAN number between 1 and 4094.
The default configuration settings for switch have all ports set as untagged members of VLAN 1 with all ports configured as
PVID=1. In the default configuration example shown in the following figure, all incoming packets are assigned to VLAN 1 by the
default port VLAN identifier (PVID=1).
INCOMING UNTAGGED PACKETS
VLAN 1
9
10
BY DEF AULT:
ALL PO RTS ARE AS SIGNED PV ID = 1
ALL PO RTS ARE UN TAGGED MEMBERS OF V LAN 1
7
8
CRC
DATA
SA
DA
53
6
1
42
PO RTS 2–10
FIGURE 4-1. VLAN EXAMPLE 1
DA
PVID=1
PORT 1
OUTGOING UNTAGGED PACKETS
(UNCHANGED)
SA
DATA
CRC
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
35
Page 36
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 4: VLAN APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
4.2 EXAMPLE 2: PORT-BASED VLANS
When the switch receives an untagged VLAN packet, it will add a VLAN tag to the frame according to the PVID setting on a port.
As shown in the following figure, the untagged packet is marked (tagged) as it leaves switch through Port 2, which is configured
as a tagged member of VLAN100. The untagged packet remains unchanged as it leaves the switch through Port 7, which is
configured as an untagged member of VLAN100.
UNTAGGED MEMBER OF VLAN 100
PORT 1
53
7
8
6
PORT 1
1
42
PORT 2
UNTAGGED PACKET
DA
SA
BEFORE
TAGGED MEMBER OF VLAN 100
DATA
CRC
FIGURE 4-2. VLAN EXAMPLE 2
CONFIGURATION
STEP 1: Go to Configuration -> VLANs -> Port VLAN configuration and configure PVID 100 on Port 1, Port 2 and Port 7.
36
FIGURE 4-3. PORT-BASED VLAN CONFIGURATION
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 37
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 4: VLAN APPLICATION
STEP 2: Select Configuration -> VLAN -> Static VLAN. Create a VLAN with VLAN ID 100. Enter a VLAN name in the Name field.
STEP 3: Assign VLAN tag setting to or remove it from a port by toggling the check box under an individual port number. The tag
settings determine if packets that are transmitted from the port tagged or untagged with the VLAN ID. The possible tag settings are:
Tag A llSpecifies that the egress packet is tagged for the port.
Untag port vlanSpecifies that the egress packet is untagged for the port.
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
Specifies that all frames, whether classified to the Port VLAN or not, are
Untag All
Here we set tagged VLAN100 on Port 1 and Port 2, untagged VLAN100 on Port7.
transmitted without a tag.
FIGURE 4-4. SET TAGGED AND UNTAGGED VL ANS
STEP 4: Transmit untagged unicast packets from Port 1 to Port 2 and Port 7. The switch should tag it with VID 100. The packet has
access to Port2 and Port 7. The outgoing packet is stripped of its tag to leave Port 7 as an untagged packet. For Port 2, the outgoing
packet leaves as a tagged packet with VID 100.
STEP 5: Transmit untagged unicast packets from Port 2 to Port 1 and Port 7. The switch should tag it with VID 100. The packet has
access to Port1 and Port 7. The outgoing packet is stripped of its tag to leave Port 7 as an untagged packet. For Port 1, the outgoing
packet leaves as a tagged packet with VID 100.
STEP 6: Transmit untagged unicast packets from Port 7 to Port 1 and Port 2. The switch should tag it with VID 100. The packet has
access to Port1 and Port 2. For Port 1 and Port 2, the outgoing packet leaves as a tagged packet with VID 100.
STEP 7: Repeat step 4 using broadcast and multicast packets.
The switch is able to construct a layer-2 broadcast domain by identifying VLAN ID specified by IEEE 802.1Q. It forwards a frame
between bridge ports assigned to the same VLAN ID and can set multiple VLANs on each bridge port.
In the following figure, the tagged incoming packets are assigned directly to VLAN 100 and VLAN 200 because of the tag
assignment in the packet. Port 2 is configured as a tagged member of VLAN 100, and Port 7 is configured as an untagged
member of VLAN 200. Hosts in the same VLAN communicate with each other as if they in a LAN. Hosts in different VLANs cannot
communicate with each other directly.
GROU P A
PORT 1
1
42
PORT 2
UNTAGGED MEMBER
OF VL AN 200
GROU P A (VLAN 10 0): PORT 1 AND P ORT 2
GROU P B (VLAN 2 00): PORT 1 AN D PORT 7
GROU P B
PORT 7
9
10
53
7
8
6
FIGURE 4-5. IEEE 802.1Q TAGGING EXAMPLE
In this case:
1. The hosts from Group A can communicate with each other.
2. The hosts from Group B can communicate with each other.
3. The hosts of Group A and Group B can’t communicate with each other.
4. Both the Group A and Group B can go to Internet through the switch.
CRC
TAGGED MEMBER
OF VL AN 100
TAGGED PACKET:
VID = 100
VID = 20 0
DATA
TAG
BEFORE
SA
DA
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
39
Page 40
CHAPTER 4: VLAN APPLICATION
CONFIGURATION
STEP 1: Go to C configuration -> VLANs -> Port VLAN configuration page specify the VLAN membership as follows:
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 4-6. EXAMPLE 3 CONFIGURATION SCREEN
STEP 2: Transmit unicast packets with VLAN tag 100 from Port 1 to Port 2 and Port 7. The switch should tag it with VID 100.
The packet only has access to Port 2. For Port 2, the outgoing packet leaves as a tagged packet with VID 100.
STEP 3: Transmit unicast packets with VLAN tag 200 from Port 1 to Port 2 and Port 7. The switch should tag it with VID 200.
The packet only has access to Port 7. The outgoing packet on Port 7 is stripped of its tag as an untagged packet.
STEP 4: Transmit unicast packets with VLAN tag 100 from Port 2 to Port 1 and Port 7. The switch should tag it with VID 100.
The packet only has access to Port1. For Port 1, the outgoing packet leaves as a tagged packet with VID 100.
STEP 5: Transmit unicast packets with VLAN tag 200 from Port 7 to Port 1 and Port 2. The switch should tag it with VID 200.
The packet only has access to Port1. The outgoing packet on Port 1 will leave as a tagged packet with VID 200.
STEP 6: Repeat the above steps using broadcast and multicast packets.
40
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 41
CHAPTER 4: VLAN APPLICATION
CLI COMMAND
vlan 100
vlan 200
interface GigabitEthernet 1/1
switchport access vlan 100
switchport trunk allowed vlan 1,100,200
switchport trunk vlan tag native
switchport mode trunk
exit
interface GigabitEthernet 1/1
switchport access vlan 100
switchport trunk allowed vlan 1,100
switchport trunk vlan tag native
switchport mode trunk
exit
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
interface GigabitEthernet 1/7
switchport access vlan 100
switchport trunk allowed vlan 1,200
switchport trunk vlan tag native
switchport mode trunk
exit
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
41
Page 42
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 5: SECURITY APPLICATION
ACL function supports access control security for MAC address, IP address, Layer4 Port, and Type of Service. Each has five
actions: Deny, Permit, Queue Mapping, CoS Marking, and Copy Frame. The user can set the default ACL rule to Permit or Deny.
TABLE 5-1. ACL FUNCTIONS
ACTIONS
DEFAULT ACL RULE
DENYPERMITQUEUE MAPPINGCOS MARKINGCOPY FRAME
Permit(a)(b)(c)(d)(e)
Deny(f)(g)(h)(i)(j)
Brief descriptions of the table above:
(a): Permit all frames, but deny frames set in ACL entry.
(b): Permit all frames.
(c): Permit all frames, and do queue mapping of the transmitting frames.
(d): Permit all frames, and change CoS value of the transmitting frames.
(e): Permit all frames, and copy frame set in an ACL entry to a defined GE port.
(f): Deny all frames.
(g): Deny all frames, but permit frames set in an ACL entry.
(h): Deny all frames.
(i): Deny all frames.
(j): Deny all frames, but copy frame set in an ACL entry to a defined GE port.
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
5.1 CASE 1: ACL FOR MAC ADDRESS
For MAC address ACL, the switch can filter on source MAC address, destination MAC address, or both. When it filters on both MAC
address, packets coinciding with both rules will take effect. In other words, it does not filter if it only coincides with one rule.
To filter only one directional MAC address, set the other MAC address to all zeroes. Besides MAC address, the switch also supports
VLAN and Ether type for filter additionally. Certain VLAN or Ether type under these MAC address will take effect. If the user doesn’t
care if the switch uses VLAN or Ether type, he can just set to zero values. Following are examples:
CASE 1A
User can set default ACL Rule of the GE port as “Permit,” then bind a suitable profile with “deny” action for ACL. It means GE port
can pass through all packets but not the ACL entry of the profile binding.
One directional MAC address with one VLAN deny filtering.
STEP 1: Create a new ACL Profile. (Profile Name: DenySomeMac)
42
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 43
CHAPTER 5: SECURITY APPLICATION
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 5-1. CREATE A NEW ACL PROFILE SCREEN
STEP 2: Create a new ACL Entry rule under this ACL profile. (Deny MAC: 11 and VLAN: 4)
STEP 3: Bind this ACL profile to a GE port. (PORT-4)
FIGURE 5-2. BIND ACL PROFILE SCREEN
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
43
Page 44
CHAPTER 5: SECURITY APPLICATION
STEP 4: Send frames between PORT-3 and PORT-4, and see the test result.
This case acts as no ACL function. It means all frames will pass through.
CASE 1C
User can set the default ACL Rule of GE port as “Permit”, then bind a suitable profile with “Queue Mapping” action for some ACL
function. It means GE port can do queue mapping 0–7 of the frame received from this port.
46
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 47
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 5: SECURITY APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
CASE 1D
User can set default ACL Rule of GE port as “Permit”, then bind a suitable profile with “CoS Marking” action for some ACL function. It
means the GE port can remark CoS of the VLAN frame received from this port.
One directional MAC address with CoS Marking action. (one VLAN, and don’t care Ether Type)
STEP 1: Create a new ACL Profile. (Profile Name: CoSMarkingTest)
STEP 2: Create a new ACL Entry rule under this ACL profile. (Filter SrcMAC: 11 and VLAN ID: 4 frame to CoS: 2)
STEP 3: Bind this ACL profile to a GE port. (PORT-4)
FIGURE 5-7. CASE 1D SCREEN
STEP 4: Send frames between PORT-3 and PORT-4, and see the test result.
FIGURE 5-8. TEST RESULT
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
47
Page 48
CHAPTER 5: SECURITY APPLICATION
CLI COMMAND
access-list ace 1 next 2 ingress interface GigabitEthernet 1/4 policy 1 vid 4 frametype etype smac 00-00-0000-00-11 action deny
The User can set the default ACL Rule of a GE port as “Permit”, then bind a suitable profile with “Copy Frame” action for mirror
analyzer used. It means the system will copy frames from a binding GE Port to an analyzer port.
Two directional MAC address with Copy Frame action. (Don’t care VLAN ID, Ether Type)
STEP 1: Create a new ACL Profile. (Profile Name: CopyFrameTest)
STEP 2: Create a new ACL Entry rule under this ACL profile. (SrcMAC: 13 and DesMAC: 11)
STEP 3: Set analyzer port to enable and mirror analyzer port.
STEP 4: Bind this ACL profile to a GE port. (PORT-3)
48
FIGURE 5-9. CASE 1E SCREEN
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 49
CHAPTER 5: SECURITY APPLICATION
STEP 5: Send frames between PORT-3 and PORT-4, and see test result.
User can set default ACL Rule of GE port as “Deny”, then bind a suitable profile with “Permit” action for ACL. It means the GE port
cannot pass through all packets but the ACL entry of the profile binding.
One directional MAC address with one VLAN permit filtering.
STEP 1: Create a new ACL Profile. (Profile Name: AllowSomeMac)
STEP 2: Create a new ACL Entry rule under this ACL profile. (Allow MAC: 11 and VLAN: 4)
STEP 3: Bind this ACL profile to a GE port. (PORT-4)
STEP 4: Send frames between PORT-3 and PORT-4, and see test result.
Because the default ACL Rule of GE port is “Deny”, Queue Mapping action does not apply. We do not do this case.
CASE 1I
Because the default ACL Rule of GE port is “Deny”, CoS Marking action has no sense. We do not do this case.
52
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 53
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 5: SECURITY APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
CASE 1J
User can set default ACL Rule of GE port as “Deny”, then bind a suitable profile with “Copy Frame” action for mirror analyzer used. It
means the system will copy frames from the binding GE Port to the analyzer port. No frames are received from the denied GE port but
the mirror analyzer port.
One directional MAC address with Copy Frame action. (Don’t case VLAN, Ether Type)
STEP 1: Create a new ACL Profile. (Profile Name: CopyFrameTest)
STEP 2: Create a new ACL Entry rule under this ACL profile. (SrcMAC: 13 and DesMAC: 11)
STEP 3: Bind this ACL profile to a GE port. (PORT-3)
STEP 4: Set the analyzer port to enable and mirror analyzer port.
FIGURE 5-15.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
53
Page 54
CHAPTER 5: SECURITY APPLICATION
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 5-16.
STEP 5: Send frames between PORT-3 and PORT-4, see test result.
For IP address ACL, the switch can filter on source IP address, destination IP address, or both. It also supports setting the IP range
ACL. When it filters on both IP address, packets that coincide with both rules will take effect. In other words, it does not filter if it
only coincides with one rule.
To filter only one directional IP address, set the other IP address to all zero. This means don’t care. In addtion to IP address, the
switch also supports Protocol filtering. (TCP=6, UDP=17, etc.) Certain Protocols under these IP addresses will take effect. If the
user prefers doesn’t care Protocol, he can just set this valueto zero. The detailed testing, refer to MAC ACL.
5.3 CASE 3: ACL FOR L4 PORT
For Layer4 port ACL, the switch can filter on (1) source IP address, (2) source L4 port, (3) destination IP address, (4) destination L4
port, and (5) UDP or TCP Protocol. Users can select to filter on (1)~(4) for all or some specific values, but you should select exactly
one Protocol from UDP or TCP.
When the switch filters on both directional IP address and L4 port, packets that coincide with both rules will take effect. In other
words, the switch does not filter if it only coincides with one rule.
If user wants to filter only one directional IP address or L4 port, set the other IP address and L4 port to all zeroes. This means don’t
care. For detailed testing, refer to MAC ACL.
5.4 CASE 3: ACL FOR TOS
For Type of Service (ToS) ACL, the switch can filter on (1) source IP address with ToS type , or (2) destination IP address with ToS
type, or (3) both, or (4) both not (just filter ToS). When it filters on both IP address, packets that coincide with both rules will take
effect. In other words, it does not filter if it only coincides with one rule.
To filter only one directional IP address, set the other IP address to all zeroes. It means don’t care. For detailed testing, refer to
case 1 MAC ACL.
The value (7) is reserved and set to 0.
Ex: Pre (001) means 1
Pre (100) means 4
ToS (00010) means 1
ToS (10000) means 8
DSCP (000001) means 1
DSCP (100000) means 32
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
56
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 57
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 6: RING VERSION2 APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
For a reliable network industrial Ethernet applications, the switch provides a mini-second grade failover ring protection; this feature
offers a seamless working network even if encountering some issues with connections. This works with twisted-pair and fiber
cable.
1 2
3
4
5 6
8
7
91110
12
14
13
12
3
4
5 6
8
7
9 10
11
12
14
13
1 2
3
5 6
7
91110
13
PLC
4
8
12
14
Field bus
IP camera
HMI
SCADA
P1
P2ALM
1 2
3
4
5 6
8
7
91110
12
14
13
P1
P2ALM
1 2
3
4
5 6
8
7
91110
12
14
13
Ethernet
Twi st ed- Pai r
Fiber
Server
Plant Network
Protection Ring
Operator Panel
1 2
3
4
5 6
8
7
91110
12
14
13
1 2
3
4
5 6
8
7
91110
12
14
13
Extender CO
5 6
8
7
91110
12
1 2
3
4
5 6
8
7
91110
12
14
13
12
3
5 6
7
91110
13
5 6
7
91110
1 2
3
5 6
7
91110
13
1 2
3
5 6
7
91110
13
RTU
4
8
12
14
8
12
4
8
12
14
4
8
12
14
Plant Network
Protection Ring
Extender CPE
Field Network
Protection Ring
1 2
3
5 6
7
91110
13
4
8
12
14
12
1 2
3
5 6
7
91110
13
1 2
3
5 6
7
91110
13
RTU
4
8
12
14
4
8
12
14
6.1 RING VERSION2 FEATURE
Group 1 - This supports the option of ring-master and ring-slave.
Ring - This could be master or slave.
When the role is ring master, one ring port is forward port and another is block port. The block port is a redundant port. It is blocked
in normal state.
When the role is ring/slave, both ring ports are forward port.
FIGURE 6-1.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
57
Page 58
CHAPTER 6: RING VERSION2 APPLICATION
P1
P2ALM
1 2
3
4
Central management switch
5 6
8
7
IP add res s: 1 92.16 8. 0.1/2 4
91110
12
14
13
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
P1
P2ALM
1 2
3
4
5 6
8
7
91110
12
14
13
P1
1 2
3
5 6
7
91110
13
P1
P2ALM
4
8
12
14
Ring 1
1 2
3
5 6
7
91110
13
4
8
12
14
1 2
3
5 6
7
91110
13
P2ALM
4
8
12
14
FIGURE 6-2. RING MASTER AND RING SL AVE SUPPORTED
Group 2 - This supports configuration of the ring, coupling and dual-homing.
Ring - It could be master or slave.
Coupling - It could be primary and backup.
1 2
3
5 6
7
91110
13
P1
P2ALM
4
8
12
14
P1
P2ALM
1 2
3
4
5 6
Primary
8
7
91110
12
14
13
2
4
6
8
13
P2ALM
1 2
3
5 6
7
91110
P1
P2ALM
1 2
3
4
5 6
8
7
91110
12
14
13
P1
P2ALM
1 2
3
4
5 6
8
7
91110
12
14
13
P1
P1
P2ALM
4
8
11
12
14
Ring 2
1 2
3
5 6
7
91110
13
4
8
12
14
1 2
3
5 6
7
91110
13
P1
P2ALM
4
8
12
14
1 2
3
5 6
7
91110
13
P1
P2ALM
4
8
12
14
Ring 1
Master
Coupling
P1
P2ALM
1 2
3
4
5 6
Backup
8
7
91110
12
14
13
1 2
3
5 6
7
91110
13
Ring 2
P1
P2ALM
1
3
4
5
8
7
9
12
14
Master
FIGURE 6-3. RING CONFIGURATOI, COUPLING AND DUAL HOMING SUPPORTED
When role is coupling/primary, only one ring port named primary port is configured.
When role is coupling/backup, only one ring port named backup port is configured. This backup port is a redundant port. In a normal
state, it is blocked.
58
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 59
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 6: RING VERSION2 APPLICATION
Dual-Homing
When the role is dual-homing, one ring port is the primary port and another is the backup port. This backup port is a redundant port.
In normal state, it is blocked.
Head
1 2
3
5 6
7
91110
13
P1
P2ALM
4
8
12
14
P1
P2ALM
1 2
3
4
5 6
8
8
7
91110
12
14
13
1 2
3
5 6
7
91110
13
P1
P2ALM
4
8
12
14
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
Ring 1
P1
13
1 2
3
5 6
7
91110
P2ALM
4
8
12
14
P1
P2ALM
1 2
3
4
5 6
8
7
91110
Master
12
14
13
Primary
FIGURE 6-4. DUAL HOMING
Group 3 - This supports configuration of the chain and balancing-chain.
Chain- The switch can be head, tail or member.
1 2
3
5 6
7
91110
13
1 2
3
5 6
7
91110
13
P1
P2ALM
4
8
12
14
Chain 1
P1
P2ALM
4
8
12
14
Head
1 2
3
5 6
7
91110
13
1 2
3
5 6
7
91110
13
Tail
P1
P2ALM
4
8
12
14
P1
P2ALM
4
8
12
14
P2ALM
P1
P2ALM
P1
Ring 3
P1
P1
P2ALM
P2ALM
241 2
1
3
3
4
5
5 6
6
8
8
7
7
910
91110
12
14
13
4
8
10
12
14
1 2
3
5 6
9
7
11
13
Master
4
8
10
12
P2ALM
P1
14
1 2
3
5 6
9
7
11
13
Ring 1
4
8
10
12
14
1 2
3
5 6
9
7
11
13
P2ALM
P1
4
8
10
12
14
1 2
3
5 6
9
7
11
13
When the role is chain/head, one ring port is the head port and another is a member port. Both ring ports are forwarded in normal
state.
When the role is chain/tail, one ring port is the tail port and another is a member port. The tail port is a redundant port. It is blocked
in normal state.
When the role is chain/member, both ring ports are member ports. Both ring ports are forwarded in normal state.
FIGURE 6-5. CHAIN CONFIGURATION
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
59
Page 60
CHAPTER 6: RING VERSION2 APPLICATION
Balancing Chain - The switch can be central-block, terminal-1/2 or member.
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
Terminal 1
1 2
3
5 6
7
91110
13
L1
P1
P2ALM
4
8
12
14
L2
Blocking port
1 2
3
5 6
7
91110
13
P1
P2ALM
4
8
12
14
LAN network
L3
Central block
1 2
3
5 6
7
91110
13
P1
P2ALM
4
8
L4
12
14
L6
Terminal 2
P1
P2ALM
1 2
3
4
5 6
8
7
91110
12
14
P1
P2ALM
1 2
3
4
5 6
8
7
91110
12
14
13
13
L5
FIGURE 6-6. BALANCING CHAIN
When the role is balancing-chain/central-block, one ring port is a member port and another is a block port. The block port is a
redundant port. It is blocked in normal state.
When the role is balancing-chain/terminal-1/2, one ring port is a terminal port and another is a member port. Both ring ports are
forwarded in normal state.
When the role is balancing-chain/member, both ring ports are member ports. Both ring ports are forwarded in normal state.
NOTE 1: It must enable group1 before configure group2 as coupling.
NOTE 2: When group1 or group2 is enabled, the configuration of group3 is invisible.
NOTE 3: When group3 is enabled, the configuration of group1 and group3 is invisible.
6.2 HOW TO CONFIGURE RINGV2
CONFIGURATION (CONSOLE)
To configure the ring protection in the switch:
1. Log in as “admin” account in the console.
2. Go to Configure mode by ”configure terminal.”
3. Go to configure ring protection group by command “ringv2 protect group1.”
4. Before configuring, disable ring protection status using the “mode disable” command.
5. Set all necessary parameters:
Node 1 and Node 2, choose the ports to connect to the other switch.
For example, choose PORT-1 and PORT-2 to connect to the other switch.
Then choose one of the ring connection devices to be “Master” on which the “Node 2 port” can be a blocking port.
node1 interface GigabitEthernet 1/1
node2 interface GigabitEthernet 1/2
role ring-master
60
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 61
CHAPTER 6: RING VERSION2 APPLICATION
To finish the configuration, enable ring protection status using the “mode enable” command.
NOTE: Please pay attention to the status of “Previous Command Result” after every action.
configure terminal
ring protect group1
mode disable
node1 interface GigabitEthernet 1/1
node2 interface GigabitEthernet 1/2
role ring-master
mode enable
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
exit
CONFIGURATION (WEB UI)
In the switch’s current Ringv2 design, one device supports 3 ring indexes, including Ring & Chain (single ring, dual ring, coupling, dualhoming, chain, and balancing-chain.)
NOTE 1: You must enable group1 before configuring group2 as coupling.
NOTE 2: When group1 or group2 is enabled, the configuration of group3 is invisible.
NOTE 3: When group3 is enabled, the configuration of group1 and group3 is invisible.
FIGURE 6-7. RING CONFIGURATION SCREEN
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
61
Page 62
CHAPTER 6: RING VERSION2 APPLICATION
STEP 1: Disable RSTP on All Ring Ports
1. Go to “Configuration —> Spanning Tree —> CIST ports” Web page.
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 6-8. STP CIST PORT CONFIGURATION SCREEN
2. Do not enable STP global.
3. Click the “Save” button.
RING MASTER
1. Go to “Configuration —> RingV2” Web page.
2. Enable Index1, and Select Role as Ring(Master).
3. Select one port as a “Forward Port”, another as “Block Port.”
FIGURE 6-9. RING MASTER CONFIGURATION SCREEN
62
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 63
CHAPTER 6: RING VERSION2 APPLICATION
RING SLAVE
1. Go to “Configuration —> “RingV2” Web page.
2. Enable Index1, and Select Role as Ring(Slave)
3. Select two ports as “Forward Port.”
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 6-10. RING SLAVE CONFIGUR ATION SCREEN
COUPLING PRIMARY
1. Go to “Configuration —> “RingV2” Web page.
2. Enable Index1, and Select Role as Ring(Slave).
3. Select two ports as “Forward Port.”
4. Enable Index2, and Select Role as “Coupling(Primary).”
4. Enable Index2, and Select Role as “Coupling(Backup).”
5. Select one port as a “Backup Port.”
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 6-12. COUPLING BACKUP CONFIGURATION SCREEN
DUAL HOMING
1. Go to “Configuration —> “RingV2” Web page.
2. Enable Index1, and Select Role as Ring(Slave).
3. Select two ports as a “Forward Port.”
4. Enable Index2, and Select Role as “Dual Homing.”
5. Select one port as a “Primary Port,” and the other is “Backup Port.”
FIGURE 6-13. DUAL HOMING CONFIGURATION SCREEN
64
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 65
CHAPTER 6: RING VERSION2 APPLICATION
CHAIN CONFIGURATION
Chain (Member)
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
Chain (Tail)
P1
13
1 2
3
5 6
7
91110
P2ALM
4
8
12
14
1 2
3
5 6
7
91110
13
P1
P2ALM
4
8
12
14
Tail port
FIGURE 6-14. CHAIN CONFIGURATION
CHAIN - MEMBER
1. Go to “Configuration —> “RingV2” Web page.
2. Disable Index1 and Index2, then enable Index3.
3. Select Role to “Chain(Member).”
4. Select two member ports for this chain member switch.
P1
P2ALM
1 2
3
4
5 6
8
7
91110
12
14
13
Ring/Switch/
other topology
1 2
3
5 6
7
91110
13
P2ALM
4
8
12
14
1 2
3
5 6
7
91110
13
P1
P2ALM
4
8
12
14
Head port
P1
Chain (Head)
FIGURE 6-15. CHAIN MEMBER SCREEN
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
65
Page 66
CHAPTER 6: RING VERSION2 APPLICATION
CHAIN - HEAD
1. Go to “Configuration —> “RingV2” Web page.
2. Disable Index1 and Index2, then enable Index3.
3. Select Role to “Chain(Head).”
4. Select a member port and a head port for this chain head switch.
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 6-16. CHAIN HEAD SCREEN
CHAIN - TAIL
1. Go to “Configuration —> “RingV2” Web page.
2. Disable Index1 and Index2, then enable Index3.
3. Select Role to “Chain(Tail).”
4. Select a member port and a tail port for this chain tail switch.
FIGURE 6-17. CHAIN TAIL SCREEN
66
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 67
CHAPTER 6: RING VERSION2 APPLICATION
BALANCE CHAIN CONFIGURATION
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
Balancing Chain
(Memb er)
Balancing Chain
(Central Block)
12
3
56
7
91110
13
P1
Balance Chain
(Terminal 1)
P1
12
3
56
7
91110
13
P1
P2ALM
4
8
12
14
12
3
56
7
91110
13
P2ALM
4
8
12
Member
14
port
Terminal port
Ring/Switch/
other topology
FIGURE 6-18. BALANCE CHAIN CONFIGURATION
BALANCE CHAIN - CENTRAL BLOCK
1. Go to “Configuration —> “RingV2” Web page.
2. Disable Index1 and Index2, then enable Index3.
3. Select Role to “Balancing Chain(Central Block).”
4. Select a member port and a block port for this central block switch.
Balancing Chain
(Memb er)
P2ALM
4
8
12
Central
14
block
12
3
56
7
91110
13
P1
P2ALM
4
8
12
14
12
3
56
7
91110
13
P1
P2ALM
4
Balance Chain
8
(Terminal 2)
12
14
Terminal port
FIGURE 6-19. BALANCE CHAIN CENTRAL BLOCK SCREEN
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
67
Page 68
CHAPTER 6: RING VERSION2 APPLICATION
BALANCE CHAIN - TERMINAL 1 AND 2
1. Go to “Configuration —> “RingV2” Web page.
2. Disable Index1 and Index2, then enable Index3.
3. Select Role to “Balancing Chain(Terminal-1 or -2).”
4. Select a member port and a terminal port for this balancing chain terminal switch.
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 6-20. BALANCE CHAIN - TERMINAL 1 AND 2 SCREEN
68
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 69
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 7: QOS APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
Quality of Service (QoS) features allow you to allocate network resources to mission-critical applications at the expense
of applications that are less sensitive to such factors as time delays or network congestion. You can configure your network
to prioritize specific types of traffic, ensuring that each type receives the appropriate Quality of Service (QoS) level.
7.1 SP/SPWRR
The switch can be configured to have 8 output Class of Service (CoS) queues (Q0–Q7) per port, into which each packet is placed.
Q0 is the highest priority Queue. Each packet’s 802.1p priority determines its CoS queue. The user needs to bind VLAN priority/
queue mapping profile to each port, and for every VLAN priority the user needs to assign a traffic descriptor for it. The traffic
descriptor defines the shape parameter on every VLAN priority for the Ethernet interface. Currently the switch supports Strict
Priority and SP+WRR (Weighted Round Robin) scheduling methods on each port.
TABLE 7-1. DEFAULT PRIORITY AND QUEUE MAPPING VALUES
Following we provide several examples for various QoS combinations. You can configure QoS using the Web-based management
system, CLI (Command Line Interface) or SNMP.
7.2 EXAMPLE 1: SPQ WITHOUT SHAPING (DEFAULT PROFILE)
We send 2 Streams (Stream0, Stream1) from PORT-1 to PORT-2. Both Streams each have 100 Mbps. Stream0 includes VLAN
Priority0, Stream1 includes VLAN Priority7. Set PORT-2 link speed to 100 Mbps.
Expected Result:
We expect that PORT-2 only can receive 100 Mbps of Stream1, and Stream0 will be discarded. This explains how SPQ works on the
switch.
P0
P1
P2
P3
P4
P5
P6
P7
Q0 (lowest que ue)
Q1
Q2
Q3
Q4
Q5
Q6
Q7 (highest queue)
P1: 100 Mbps
P2: 100 M bps
FIGURE 7-1. GIGABIT PORT VLAN PRIORITY & QUEUE MAPPING.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
69
Page 70
CHAPTER 7: QOS APPLICATION
+
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
Stream0
P0, 100 M bps, 1518 bytes
Stream1
P7, 100 Mbps, 1518 bytes
Stream0:
Dst Mac: 00:00:00:00:20:01
Src Mac: 00:00:00:00:10:01
Vlan: 10 0
Vlan prio: 0
Send rate: 100 Mbps
Packet length: 1518 bytes
Stream1:
Dst Mac: 00:00:00:00:20:02
Src Mac: 00:00:00:00:10:02
Vlan: 10 0
Vlan prio: 7
Send rate: 100 Mbps
Packet length: 1518 bytes
GE1GE2
Stream0
P0, 100 M bps, 1518 bytes
FIGURE 7-2.
Stream1
P7, 100 Mbps, 1518 bytes
70
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 71
CHAPTER 7: QOS APPLICATION
WEB MANAGEMENT
STEP 1: Go to Configuration —> Ports —> set port 2 link speed to 100 Mbps full duplex.
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 7-3.
STEP 2: Select Configuration —> VLANs —> Create a VLAN with VLAN ID 100. Enter a VLAN name in the Name field. Here we set
tagged VLAN100 on PORT-1 and PORT-2.
FIGURE 7-4.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
71
Page 72
CHAPTER 7: QOS APPLICATION
CLI CONFIGURATION COMMAND
interface GigabitEthernet 1/1
switchport trunk native vlan 100
switchport trunk allowed vlan 1,100
switchport trunk vlan tag native
switchport mode trunk
!
interface GigabitEthernet 1/2
switchport trunk native vlan 100
switchport trunk allowed vlan 1,100
switchport trunk vlan tag native
switchport mode trunk
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
7.2 EXAMPLE 2: SPQ WITH SHAPING
We send 2 Streams (Stream0, Stream1) from PORT-1 to PORT-2. Both Streams each have 100 Mbps. Stream0 includes VLAN
Priority0, Stream1 includes VLAN Priority7. Stream 3 and Stream 4 are only for learning to prevent the traffic from flooding.
Expected Result:
We expect that PORT-2 only can receive 20 Mbps of Stream1 ad 80 Mps of Stream2. This explains how SPQ works on the switch.
P0
P1
P2
P3
P4
P5
P6
P7
FIGURE 7-5. VDSL PORT VLAN PRIORIT Y AND QUEUE MAPPING
Q0 (lowest que ue)
Q1
Q2
Q3
Q4
Q5
Q6
Q7 (highest queue)
P0: 80 M bps
P2: 20 M bps
Stream0
P0, 100 M bps, 1518 bytes
Stream1
P7, 100 Mbps, 1518 bytes
72
GE1
FIGURE 7-6.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Stream0
GE2
P0, 80 M bps, 1518 bytes
Stream1
P7, 20 Mbps, 1518 bytes
Stream3 for learning
Stream4 for learning
Page 73
CHAPTER 7: QOS APPLICATION
Stream0:
Dst Mac: 00:00:00:00:20:01
Src Mac: 00:00:00:00:10:01
Vlan: 10 0
Vlan prio: 0
Send rate: 100 Mbps
Packet length: 1518 bytes
Stream1:
Dst Mac: 00:00:00:00:20:02
Src Mac: 00:00:00:00:10:02
Vlan: 10 0
Vlan prio: 7
Send rate: 100 Mbps
Packet length: 1518 bytes
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
Stream3 (for learning):
Dst Mac: 00:00:00:00:10:01
Src Mac: 00:00:00:00:20:01
Vlan: 10 0
Vlan prio: 0
Send rate: 10 Mbps
Packet length: 1518 bytes
Stream4 (for learning):
Dst Mac: 00:00:00:00:10:02
Src Mac: 00:00:00:00:20:02
Vlan: 10 0
Vlan prio: 0
Send rate: 10 Mbps
Packet length: 1518 bytes
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
73
Page 74
CHAPTER 7: QOS APPLICATION
WEB MANAGEMENT
STEP 1: Go to Configuration —> Qos —> Port Shaping, to create a Qos profile on Port-2.
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 7-7.
STEP 2: Select schedule mode to be “”Strict Priority” and set shaping rate for queue 0 and queue 7 as below.
74
FIGURE 7-8.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 75
CHAPTER 7: QOS APPLICATION
CLI CONFIGURATION COMMAND
interface GigabitEthernet 1/2
switchport trunk native vlan 100
switchport trunk allowed vlan 1,100
switchport trunk vlan tag native
switchport mode trunk
qos queue-shaper queue 0 80000
qos queue-shaper queue 7 20000
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
75
Page 76
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 8: IGMP APPLICATION
IGMP is an acronym for Internet Group Management Protocol. It is a communications protocol used to manage the membership
of Internet Protocol multicast groups. IGMP is used by IP hosts and adjacent multicast routers to establish multicast group
memberships. It is an integral part of the IP multicast specification, like ICMP for unicast connections. IGMP can be used for online
video and gaming, and allows more efficient use of resources when supporting these uses.
Multicast Router
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
L2 switch
with IGMP snooping
LAN
Vide o Client
IGMP
Video Server
Route r 1
PIM
UDP/RTP multicast
traffic
Local M ulticast Ro uter
IGMP
FIGURE 8-1. IGMP INSTALLATION
8.1 E XA MP LE 1
To configure every client to get a multicast stream, go to “Configuration —> IPMC —> Basic Configuration” and select the “Snooping
Enable” check box.
76
FIGURE 8-2. SNOOPING ENABLED CHECKBOX
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 77
CHAPTER 8: IGMP APPLICATION
8.2 EXAMPLE 2
Multicast server
L3 switch querier
P14
Industrial Ethernet Switch
Clien t 1 Client 2 Clie nt 3
FIGURE 8-3. EXAMPLE 2
1. Go to “Configuration —> IPMC —> Basic Configuration” to select the “Snooping Enable” check box.
2. Un-select the ”Unregistered IPMCv4 Flooding Enabled” check box.
3. If Multicast stream is from an L3 switch, then the uplink port will have to be the “Router Port”.
NOTE: If an aggregation member port is selected as a router port, the whole aggregation will act as a router port.
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 8-4.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
77
Page 78
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 8: IGMP APPLICATION
4. Go to “Configuration —> IPMC —> VLAN Configuration” to select the “Snooping Enable” check box and set the VLAN ID of port14.
FIGURE 8-5.
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
8.3 EXAMPLE 3
Multicast server
L3 switch querier
P14
Industrial Ethernet Switch
Clien t 1 Client 2 Clie nt 3
FIGURE 8-6. EXAMPLE 3
In this scenario, these clients belong to multiple VLANs, so you have to create more one VLAN to be the agent for all client VLANs.
1. To create a VLAN: go to ”Configuration —> VLANs —> Allow Access VLANs”, then set port 14 to be a vlan200 member port.
78
FIGURE 8-7.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 79
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 8: IGMP APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
2. Go to “Configuration —> IPMC —> VLAN Configuration” to select the “Snooping Enable” check box and set the VLAN ID of port14.
FIGURE 8-8.
3. If there is no querier on the L3 switch, you have to select “Querier Election”, and set the “Querier Address.” The IP address is in the
same network as uplink interface.
4. Select the IGMP version as server.
FIGURE 8-9.
8.4 HOW TO CONFIGURE VLC
VLC CONFIGURATION ON AN IGMP SERVER
1. In the Media area of the top tool bar select “Stream.”
2. Select a video or audio file to play.
3. Confirm that the file is correct, then click “Next” twice.
4. Select the stream type as “UDP” and click the “Add” button.
5. Set the stream IP; the range is 224.0.0.1 to 239.255.255.254, and the protocol port is 1234.
6. Select ”Sort out all stream” and click then “Stream” button, then the stream will start sending to the switch.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
79
Page 80
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 8: IGMP APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
VLC CONFIGURATION ON AN IGMP CLIENT
1. In the Media area of the top tool bar, select open network stream.
2. Set the stream IP and protocol port to be the same as the previous setting on the server. The protocol type is “UDP.“
Then click the “PLAY” button.
Return to the managed switch. Go to “Monitor —> IPMC —> Groups Information”, and you will see the stream IP in the table.
FIGURE 8-10. VIEW STREAM IP IN TABLE
80
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 81
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 9: 802.1X AUTHENTICATION APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
IEEE 802.1x derives keys that can be used to provide per-packet authentication, integrity and confidentially. It is typically used along
with well-known key derivation algorithms (e.g. TLS, SRP, MD5-Challenge, etc.). The Industrial Ethernet Switch supports 802.1x
authentication function per port (port1–port10). Enable the 802.1x function and choose the ports and type you want to apply. If
you enable 802.1x authentication control for certain Ethernet port in the switch, this port should be authenticated before using any
services from the network.
9.1 802.X TIMER IN THE SWITCH
TABLE 9-1. 802.X TIMER FUNCTIONS
PARAMETERDESCRIPTION
ReAuth PeriodThe switch will restart authentication after each Reauth-Period when the ReAuth option is enabled
Quiet PeriodThe switch will wait QuietPeriod to restart the authentication process again when authentication failed.
Tx Period
Supplicant TimeoutThe switch will wait the SupplicantTmeout to receive a response from the Supplicant.
Server TimeoutThe switch will wait the ServerTimeout to receive a response from the RADIUS server.
The switch will send an EAP-request to Supplicant every TxPeriod when authentication is running and
Quiet Period is not running.
9.2 RADIUS SERVER CONFIGURATION
STEP 1: Prepare a Linux PC with a RADIUS server installed.
STEP 2: Edit the secret key for the RADIUS server.
Setting:
client 20.20.20.0/24 {
secret = a12b3c4d
}
STEP 3: Edit the user name and password for the supplicant to authenticate with the server.
Setting:
User name
STEP 4: Set a static IP address for this Radius Server.
Setting: 20.20.20.20
User pa ssword
STEP 5: Start Radius Server
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
81
Page 82
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 9: 802.1X AUTHENTICATION APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
9.3 EX AMPLE
Here we take an example of 802.1x Authentication via the Industrial Ethernet Switch to be authenticated by RADIUS server. In a
basic example, we take port 1 as a testing port which enables 802.1x in the switch.
With the default configuration, use the following Web UI setting .
STEP 1: Go to Configuration —> Security —> Networks —> NAS.
Select “Enable” mode to enable authentication, and set port-1, port-2 to be “Port Base 802.1x”.
FIGURE 9-1. NAS SCREEN
STEP 2: Go to Configuration —> Security —> AAA —> Radius.
Click “Add New Server,” input “20.20.20.20” for server, and “a1b2c3d4” for secret key. Then click the “Save” button.
STEP 1: Configure a static IP address 20.20.20.10 and net mask 255.255.255.0 for supplicant. (If there is a DHCP server to assign IP
address for supplicant, this step can be ignored.)
STEP 2: Select the IEEE802.1x Authentication Enable check box, then configure the EAP type to MD5-Challenge.
After setting this function in the NIC, the supplicant should enter a correct pair of account and password to use this Ethernet port
service from the switch.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
83
Page 84
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 9: 802.1X AUTHENTICATION APPLICATION
Authentication Behavior
The supplicant should pass the authentication process in order to use any service. After the supplicant enters a correct account and
password stored in RADIUS server, it can be authenticated successfully.
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
Supplicant (client)Industrial Ethernet
EAP OL — Start
EAP — R equest/I dentity
EAP — Response/Identity
EAP — R equest
EAP — R esponse
EAP — S uccess
Switch
Port Authorized
RADIUS server
RADIUS — Access/Request
RADIUS — Access/Challenge
RADIUS — Access/Request
RAD IUS — Access /Acce pt
84
FIGURE 9-4. AUTHENTICATION PROCESS
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 85
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 10: POWER OVER ETHERNET APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
NOTE: This chapter applies only to PoE managed models (LIE401A, LIE1014A, LIE1080A and LIE1082A).
These switches support the PoE function for connected powered devices. The operation mode contains 802.3af (15.4W), 802.3at
(30W), and 802.3at with 4 pair used (60W). 60 watts only can be applied for port 1 and 2. Each port has 5 classes for selection,
class 0–4. The total power budget of the system is up to 240 watts.
The PoE switches support power scheduler for each PoE port. Each time interval is 30 minutes from Sunday to Saturday. You can
select which interval to set PoE on or PoE off. The switch also supports a PoE reset function to power off, then power on the PoE
function on a port at certain time. A maximum of five times can be created in a week.
10.1 RESERVED POWER DETERMINATION
There are three modes for configuring how the ports/PDs may reserve power.
1. Class mode: In this mode each port automatically determines how much power to reserve according to the class the connected
PD belongs to, and reserves the power accordingly. Five different port classes exist and one for 4, 7, 15.4 or 30 Watts.
2. Allocated mode: In this mode, the user allocates the amount of power that each port may reserve. The allocated/reserved power
for each port/PD is specified in the Maximum Power fields.
3. LLDP-MED mode: This mode is similar to the Class mode except that each port determines the amount power it reserves by
exchanging PoE information using the LLDP protocol and reserves power accordingly. If no LLDP information is available for a port,
the port will reserve power using the class mode
NOTE: For all modes: If a port uses more power than the reserved power for the port, the port is shut down.
10.2 POWER MANAGEMENT MODE
There are 2 modes for configuring when to shut down the ports:
1. Actual Consumption: In this mode, the ports are shut down when the actual power consumption for all ports exceeds the
amount of power that the power supply can deliver or if the actual power consumption for a given port exceeds the reserved power
for that port. The ports are shut down according to the ports priority. If two ports have the same priority, the port with the highest
port number is shut down.
Port Priority: Critical > High > Low.
When priorities are the same, the lower number port has higher priority.
2. Reserved Power: In this mode, the ports are shut down when total reserved powered exceeds the amount of power that the
power supply can deliver. In this mode, the port power is not turned on if the PD requests more power than available from the power
supply.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
85
Page 86
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 10: POWER OVER ETHERNET APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
10.3 OTHER SETTINGS
1. PoE Power Supply: To determine the amount of power the PD may use, you must define what amount of power a power source
can deliver. Valid values are in the range 0 to 240 Watts.
2. PoE Mode: The PoE Mode represents the PoE operating mode for the port.
Disable: PoE disabled for the port.
Enable: Enables PoE for the port.
Schedule: Enables PoE for the port by scheduling.
3. Operation Mode: The Operation Mode represents the PoE power operating protocol for the port.
802.3af : Sets PoE protocol to IEEE 802.3af.
802.3at : Sets PoE protocol to IEEE 802.3at.
4. 4 Pair: The 4 Pairs represent the 60 W power supply for the port. The option is only available when following rules are applied.
High power switch model supports.
Only port1 or port2 supports.
Current operation mode is 802.3at.
Enable: Enable 4Pairs to support 60 W.
Disable: Disable 4Pairs to limit 30W of power.
5. PoE Priority: The Priority represents the ports priority. There are three levels of power priority named Low, High and Critical.
The priority is used in the case where the remote devices require more power than the power supply can deliver. In this case, the
port with the lowest priority will turn off starting from the port with the highest port number.
6. Maximum Power: The Maximum Power value contains a numerical value that indicates the maximum power in watts that can be
delivered to a remote device.
For ports that support 4Pairs mode, the maximum allowed value is 60 W; others are 30 W.
10.4 POE POWER SCHEDULING AND RESET
The power scheduling is used to control the power alive interval on PoE port. You can set the specific interval to schedule power
on/off in one week.
The current scheduling state is displayed graphically during the week. Green indicates the power is on and red that it is off. Directly
change checkmarks to indicate which day are members of the time interval. Check or uncheck as needed to modify the scheduling
table.
FIGURE 10-1. POE SCHEDULING AND RESET
86
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 87
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 10: POWER OVER ETHERNET APPLICATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
1. Day: Checkmarks indicate which day are members of the set. From Sunday to Saturday.
2. Interval: Start - Select the start hour and minute. End - Select the end hour and minute. There are 48 time intervals in one day.
Each interval has 30 minutes.
3. Action:
Power On - Select the radio button to apply power on during the interval.
Power Off - Select the radio button to apply power off during the interval.
4. PoE Power Reset: The entry is used to control the power reset time on PoE port. You can create at maximum 5 entries for each
PoE port.
FIGURE 10-2. POE POWER RESET CONTROL ON PORT 1
10.5 E XA MPLE 1
1. Parameter Setting:
Reserved Power determined: Class
Power Management Mode: Actual Consumption
Primary Power Supply: 6W
2. Test Port
Port 1: 802.3at with critical priority
Port 2: 802.3af with high priority
Port 3: 802.3af with low priority
3. PD Power Consumption
Port 1: 1.3 watt (PoE Splitter)
Port 2: 1.3 watt (PoE VoIP Phone)
Port 3: 3.8 watt (PoE WiFi AP)
4. Web Configuration
FIGURE 10-3. WEB CONFIGURATION
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
87
Page 88
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
CHAPTER 10: POWER OVER ETHERNET APPLICATION
5. Test Result: PoE port status can be monitored by Web: Monitor —> PoE
The following table shows that if the system budget is not enough for all PoE devices, the port with higher priority port will be fed
power first. The last priority port (port 3) will not be powered.
FIGURE 10-4. TEST RESULT
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
10.6 E XA MPLE 2
1. Parameter Setting:
Reserved Power determined: Allocation
Power Management Mode: Reserved Power
Primary Power Supply: 138 W (> all ports reserved power)
2. Port Maximum Power
Port 1: 30 W
Port 2– Port 8: 15.4 W
Total: 137.8 W
3. PD Power Consumption
Port 1: 1.3 watt (PoE Splitter)
Port 2: 1.3 watt (PoE VoIP Phone)
Port 3: 3.8 watt (PoE WiFi AP)
88
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 89
CHAPTER 10: POWER OVER ETHERNET APPLICATION
4. Web Configuration
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
FIGURE 10-5. WEB CONFIGURATION
5. Test Result: PoE port status can be monitored by Web: Monitor —> PoE
Since power is reserved for each port in advance, each powered device can use the power budget of its corresponding port without
exceeding its maximum power.
FIGURE 10-6. TEST RESULT
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
89
Page 90
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
APPENDIX A: REGULATORY INFORMATION
A.1 FCC STATEMENT
This equipment has been found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These
limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance
with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential
area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.
Changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate
the equipment.
Shielded cables must be used with this equipment to maintain compliance with radio frequency energy emission regulations and
ensure a suitably high level of immunity to electromagnetic disturbances.
All power supplies are certified to the relevant major international safety standards.
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
90
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
Page 91
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
APPENDIX A: REGULATORY INFORMATION
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
A.2 NOM STATEMENT
1. Todas las instrucciones de seguridad y operación deberán ser leídas antes de que el aparato eléctrico sea operado.
2. Las instrucciones de seguridad y operación deberán ser guardadas para referencia futura.
3. Todas las advertencias en el aparato eléctrico y en sus instrucciones de operación deben ser respetadas.
4. Todas las instrucciones de operación y uso deben ser seguidas.
5. El aparato eléctrico no deberá ser usado cerca del agua—por ejemplo, cerca de la tina de baño, lavabo, sótano mojado o cerca
de una alberca, etc.
6. El aparato eléctrico debe ser usado únicamente con carritos o pedestales que sean recomendados por el fabricante.
7. El aparato eléctrico debe ser montado a la pared o al techo sólo como sea recomendado por el fabricante.
8. Servicio—El usuario no debe intentar dar servicio al equipo eléctrico más allá a lo descrito en las instrucciones de operación.
Todo otro servicio deberá ser referido a personal de servicio calificado.
9. El aparato eléctrico debe ser situado de tal manera que su posición no interfiera su uso. La colocación del aparato eléctrico
sobre una cama, sofá, alfombra o superficie similar puede bloquea la ventilación, no se debe colocar en libreros o gabinetes que
impidan el flujo de aire por los orificios de ventilación.
10. El equipo eléctrico deber ser situado fuera del alcance de fuentes de calor como radiadores, registros de calor, estufas u otros
aparatos (incluyendo amplificadores) que producen calor.
11. El aparato eléctrico deberá ser connectado a una fuente de poder sólo del tipo descrito en el instructivo de operación, o como
se indique en el aparato.
12. Precaución debe ser tomada de tal manera que la tierra fisica y la polarización del equipo no sea eliminada.
13. Los cables de la fuente de poder deben ser guiados de tal manera que no sean pisados ni pellizcados por objetos colocados
sobre o contra ellos, poniendo particular atención a los contactos y receptáculos donde salen del aparato.
14. El equipo eléctrico debe ser limpiado únicamente de acuerdo a las recomendaciones del fabricante.
15. En caso de existir, una antena externa deberá ser localizada lejos de las lineas de energia.
16. El cable de corriente deberá ser desconectado del cuando el equipo no sea usado por un largo periodo de tiempo.
17. Cuidado debe ser tomado de tal manera que objectos liquidos no sean derramados sobre la cubierta u orificios de ventilación.
18. Servicio por personal calificado deberá ser provisto cuando:
A: El cable de poder o el contacto ha sido dañado; u
B: Objectos han caído o líquido ha sido derramado dentro del aparato;o
C: El aparato ha sido expuesto a la lluvia; o
D: El aparato parece no operar normalmente o muestra un cambio en su desempeño; o
E: El aparato ha sido tirado o su cubierta ha sido dañada.
1. 87 7.8 7 7. 2 26 9BLACKBOX.COM
91
Page 92
NEED HELP?
LEAV E TH E TEC H TO US
LIVE 24/7
APPENDIX B: DISCLAIMER/TRADEMARKS
TECHNICAL
SUPPORT
1. 8 7 7. 8 7 7. 2 2 69
B.1 DISCLAIMER
Black Box Corporation shall not be liable for damages of any kind, including, but not limited to, punitive, consequential or cost of cover
damages, resulting from any errors in the product information or specifications set forth in this document and Black Box Corporation
may revise this document at any time without notice.
B.2 TRADEMARKS USED IN THIS MANUAL
Black Box and the Black Box logo type and mark are registered trademarks of Black Box Corporation.
Any other trademarks mentioned in this manual are acknowledged to be the property of the trademark owners.