Black Box LPB4008A, LPB4024A User Manual

LPB4008A LPB4024A
8- and 24-Port Gigabit L2 Managed PoE Switches
Meets 802.3/u/x/z Gigabit Ethernet specifications.
Includes (6) or (20) 10/100 TP ports and (2) or (4) Gigabit dual-media TP/SFP ports.
Manage the switch using:
• Ethernet port via CLI
• Ethernet port via Web-based SNMP
Customer
Support
Information
Order toll-free in the U.S.: Call 877-877-BBOX (outside U.S. call 724-746-5500) • FREE technical support 24 hours a day, 7 days a week: Call 724-746-5500 or fax 724-746-0746 • Mailing address: Black Box Corporation, 1000 Park Drive, Lawrence, PA 15055-1018 • Web site: www.blackbox.com
• E-mail: info@blackbox.com
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
CAUTION: Circuit devices are sen sitive to static electricity, which can damage th eir delicate electronics. Dry weather conditions or walking
across a carpeted floor may cause you to acquire a static electrical charge.
To protect your device, always:
• Touch the metal chassis of your computer to ground the static electrical charge before you pic k up the circuit device.
• Pick up the device by holding it on the left and right edges only.
• If you need to connect an outdoor device with cable, then you need to add an lightning arrestor on the cable bet ween the outdoor device and this device.
Add a lightning arrestor between an outdoor device and this switch.
2
724-746-5500 | blackbox.com
FCC and IC RFI Statements
Federal Communications Commission and Industry Canada Radio Frequency Interference Statements
This equipment gen erates, uses, and can radiate radio-frequency energy, and if not installed and used prop erly, that is, in strict accordance with the manufacturer’s instructions, may cause interference to radio communication. It has be en tested and found to comply with the limits for a Class A computing device in accordance with the specifications in Subpart J of Part 15 of FCC rules, which are designed to provide reasonable protection against such interference when the equipment is operated in a commercial environment. Operation of this equipment in a residential area is likely to cause interference, in which case the user at his own expense will be required to take whatever measures may be necessary to correct the interference. Changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate th e equipment.
This digital apparatus does not exceed the Class A limits for radio noise emission from digital apparatus set out in the Radio Interference Regulation of Industry Canada.
Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables aux appareils numériques de la classe A prescrites dans le Règlement sur le brouillage radioélectrique publié par Industrie Canada.
724-746-5500 | blackbox.com
3
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Normas Oficiales Mexicanas (NOM) Electrical Safety Statement INSTRUCCIONES DE SEGURIDAD
1. Todas las instrucciones de seguridad y operación deberán ser leídas antes de que el aparato eléctrico sea operado.
2. Las instrucciones de seguridad y operación deberán ser guardadas para referencia futura.
3. Todas las advertencias en el aparato eléctrico y en sus instrucciones de operación deben ser respetadas.
4. Todas las instrucciones de operación y uso deben ser seguidas.
5. El aparato eléctrico no deberá ser usado cerca del agua—por ejemplo, cerca de la tina de baño, lavabo, sótano mojado o cerca de una alberca, etc..
6. El aparato eléctrico debe ser usado únicamente con carritos o pedestales qu e sean recomendados por el fabricante.
7. El aparato eléctrico debe ser montado a la pared o al techo sólo como sea recomendado por el fabricante.
8. Servicio—El usuario no debe intentar dar servicio al equipo eléctrico más allá a lo descrito en las instrucciones de operación. Todo otro servicio deberá ser referido a personal de servicio calificado.
9. El aparato eléctrico debe ser situado de tal manera que su posición no interfiera su uso. La colocación del aparato eléctrico sobre una cama, sofá, alfombra o superficie similar puede bloquea la ventilación, no se debe colocar en libreros o gabinetes que impidan el flujo de aire por los orificios de ventilación.
10. El equipo eléctrico deber ser situado fuera del alcance de fuentes de calor como radiadores, registros de calor, estufas u otros aparatos (incluyendo amplificadores) que producen calor.
11. El aparato eléctrico deberá ser connectado a una fuente de poder sólo del tipo descrito en el instructivo de operación, o como se indique en el aparato.
12. Precaución debe ser tomada de tal manera que la tierra fisica y la polarización del equipo no sea eliminada.
13. Los cables de la fuente de poder deben ser guiados de tal manera que no sean pisados ni pellizcados por objetos colocados sobre o contra ellos, poniendo particular atención a los contactos y receptáculos donde salen del aparato.
14. El equipo eléctrico debe ser limpiado únicamente de acuerdo a las recomendaciones del fabricante.
15. En caso de existir, una antena externa deberá ser localizada lejos de las lineas de energia.
16. El cable de corriente deberá ser desconectado del cuando el equipo no sea us ado por un largo periodo de tiempo.
17. Cuidado debe ser tomado de tal manera que objectos liquidos no sean derramados sobre la cubierta u orificios de ventilación.
18. Servicio por personal calificado d eberá ser provisto cuando: A: El cable de poder o el contacto ha sido dañado; u B: Objectos han caído o líquido ha sido derramado dentro del aparato; o C: El aparato ha sido expuesto a la lluvia; o D: El aparato parece no operar normalmente o muestra un cambio en su desempeño; o E: El aparato ha sido tirado o su cubierta ha sido dañada.
European Community (CE) Electromagnetic Compatibility Directive
This equipment has been tested and found to comply with the protection requirements of European Emission Standard EN55022/EN61000-3 and the Generic European Immunity Standard EN55024. EMC: EN55022 (2003)/CISPR-2 (2002): clas s A IEC61000-4-2 (2001): 4KV CD, 8KV AD IEC61000-4-3 (2002): 3V/m IEC61000-4-4 (2001):1KV (power line), 0.5KV (signal line)
4
724-746-5500 | blackbox.com
Table of Contents
Table of Contents
1. Specification s .................................................................................................................... .............................. 8
1.1 Hardware Specifications .................................................................................................................... .............................. 8
1.2 Management Software Specifications ................................................................................................................... .............................. 9
2. Overview …………………………………………………………………………………………………………………………............... 10
2.1 Introduction …………………………………………………………………………………………………………………... ..........10
2.2 Features ………………………………………………………………………………………………………………………............ 10
2.3 What’ s Included ……………………………………………………………………………………………………………... ........... 11
2.4 Front and Rear Panel ………………………………………………………………………………………………………….. ....... 11
2.5 LED Indicators ……………………………………………………………………………………….………………………............. 12
2.6 Optional Fiber Transceiver Module …...……………………………………………………………………………………............12
3. Installation ………………………………………………………………………………….…………………………………….. ........... 14
3.1 Hardware and Cable Installation ..…………………………………………………………………………………………............ 14
3.1.1 Installing Optional Fiber Transceiver Module ………………………………………………………………………....... 14
3.1.2 TP Port and Cable Installation ..……………………………………………………………………………………….... 14
3.1.3 Power On …….…………………………………………………………………………………………………………....15
3.1.4 Firmware Loading …..…………………………………………………………………………………………………..... 15
3.2 Attacihing the Switch to a 19-inch Wiring Closet Rail …………………………………………………………………………… 15
3.3 Cabling Requirements ……………………………………………………………………………………………………….. .......... 16
3.3.1 Twisted-Pair Ports …………………………………………………………………………………………………….. .... 16
3.3.2 Fiber Transceiver Ports ……………………………………………………………………………………………….......16
3.3.3 Switch Cascading in Topology ………………………………………………………………………………………. .... .17
3.3.4 Typical Network Topology in Deployment …………………………………………………………………………....... 17
3.4 Configuring the Management Agent …………………………………………………………………………………….... ..........20
3.4.1 Connect To Console Port ..…………………………………………………………………………………………….... 20
3.4.2 Set IP Address, Subnet Ma s k , and Default Gatew ay IP Address ………………………………………………… ....20
3.4.3 Managing LPB4008A through the Ethernet Port …..………………………………………………………………….21
3.5 IP Address Assignment ..…………………………………………………………………………………………………… ............ 22
3.5.1 IP Address ……………………………………………………………………………………………………………....... 22
3.5.2 Subnet Mask …………………………………………………………………………………………………………... ...23
3.5.3 Default Gateway ..……………………………………………………………………………………………………... .. 24
3.5.4 DNS …………………………………………………………………………………………………………………….. .... 24
3.6 Typical Application ….………………………………………………………………………………………………………............. 24
4. Operation of Web-based Management ……………………………………………………………….………………………. ............. 27
4.1 Web Management Home Overview ……………………………………………………………………………………….. ........... 28
4.1.1 The Information of Page Layout ……………………………………………………………………………………. ..... .29
4.1.2 Structure Of Menu …………………………………………………………………………………………………….. ...31
4.2 System ……………………………………………………………………………………………………………………….............. 32
4.2.1 System Information ………..………………………………………………………………………………………… ......32
4.2.2 Account Configuration ……………………………………………………………………………………………….......33
4.2.3 Time Configuration …………………………………………………………………………………………………….... .34
4.2.4 IP Configuration ………………………………………………………………………………………………………. .....36
4.2.5 Loop Detection ………………………………………………………………………………………………………….... 37
4.2.6 Management Policy …………………………………………………………………………………………………….... 38
4.2.7 System Log …………………………………………………………………………………………………………… ......40
4.2.8 Virtual Stack ……………………………………………………………………………………………………………....41
4.3 Port …………………………………………………………………………………………………………………………… ........... 42
4.3.1 Port Configuration ……………………………………………………………………………………………………...... 42
4.3.2 Port Status …………………………………………………………………………………………………………….. ....43
4.3.3 Simple Counter ………………………………………………………………………………………………………. ..... .45
4.3.4 Detail Counter ………………………………………………………………………………………………………….....46
4.3.5 Power Saving ………………………………………………………………………………………………………….. .... 48
4.4 VLAN ………………………………………………………………………………………………………………… .............……….48
4.4.1 VLAN Mode …………………………………………………………………………………………………………....….48
4.4.2 Tag-based Group ……………………………………………………………………………………………………….... 49
4.4.3 Port-based Group …………………………………………………………………………………………………….. .....51
4.4.4 Ports …………………………………………………………………………………………………………………….....53
4.4.5 Management VLAN …………………………………………………………………………………………………….... 54
4.5 MAC …………………………………………………………………………………………………………………………. .. ........... 54
4.5.1 MAC Address Table …………………………………………………………………………………………………...…54
4.5.2 Static Filter ………………………………………………………………………………………………………...……...55
724-746-5500 | blackbox.com
5
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Table of Contents (Continued)
4.5.3 Static Forward ……………………………………………………………………………………………………… .... ….56
4.5.4 MAC Alias …………………………………………………………………………………………………………….... …57
4.5.5 MAC Table …………………………………………………………………………………………………………….. ...58
4.6 PoE ……………………………………………………………………………………………………………………………............ 59
4.7 GVRP …………………………………………………………………………………………………………………………. ........... 60
4.7.1 Config …………………………………………………………………………………………………………………......60
4.7.2 Counter ………………………………………………………………………………………………………………….... 61
4.7.3 Group …………………………………………………………………………………………………………………....... 62
4.8 QoS (Quality of Service) Configuration ………………………………………………………………………………… ............. …62
4.8.1 Ports ……………………………………………………………………………………………………………… ....…….62
4.8.2 QoS Control List ………………………………………………………………………………………………… ..... …….63
4.8.3 Rate Limiters ……………………………………………………………………………………………………… .... ….. .67
4.8.4 Storm Control ………………………………………………………………………………………………………....…..68
4.8.5 Wizard ………………………………………………………………………………………………………………....…..69
4.9 SNMP Configuration ……………………………………………………………………………………………………… ........... …75
4.10 ACL …………………………………………………………………………………………………………………………...............77
4.10.1 Ports …………………………………………………………………………………………………………… ......... ….. .77
4.10.2 Rate Limiters ……………………………………………………………………………………………………...........….78
4.10.3 Access Control List ………………………………………………………………………………………………......... ..111
4.10.4 Wizard ………………………………………………………………………………………………………… ........ ……111
4.11 IP MAC Binding ………………………………………………………………………………………………………….............…112
4.12 802 .1X Configuration ………………………………………………………………………………………………… ........... …..115
4.12.1 Server ………………………………………………………………………………………………………… .........……116
4.12.2 Port Configur ation …………………………………………………………………………………………….........……117
4.12.3 Status ……………………………………………………………………………………………………………… .........117
4.12.4 Statistics …………………………………………………………………………………………………………….........118
4.13 Trunking Configuration …………………………………………………………………………………………. ..........……… ...119
4.13.1 Port ………………………………………………………………………………………………………… ....... ……….120
4.13.2 Aggregator View …………………………………………………………………………………………….......…… ...121
4.13.3 Aggregation Mode Configuration ………………………………………………………………………… ....... …….. .122
4.13.4 LACP System Priority ………………………………………………………………………………………….......... …..122
4.14 STP Configuration ……………………………………………………………………………………………………… ............ ...122
4.14.1 Status ………………………………………………………………………………………………………… ........…….123
4.14.2 Configuration ………………………………………………………………………………………………......... ………124
4.14.3 STP Port Configuration ……………………………………………………………………………………......... ……. ..126
4.15 MSTP …………………………………………………………………………………………………………………..............……126
4.15.1 Status ……………………………………………………………………………………………………… ....... ……… .126
4.15.2 Region Config ………………………………………………………………………………………………........……...127
4.15.3 Instance View ………………………………………………………………………………………………........ ……...132
4.16 Mirror …………………………………………………………………………………………………………………............…….133
4.17 Multicast ……………………………………………………………………………………………………………… ............ ……133
4.17.1 IGMP Mode …………………………………………………………………………………………………........……...133
4.17.2 IGMP Proxy ………………………………………………………………………………………………….......... ……..133
4.17.3 IGMP Snooping ………………………………………………………………………………………………..........……135
4.17.4 IGMP Group M emb ership ………………………………………………………………………………… .......... ……..136
4.17.5 MVR …………………………………………………………………………………………………………........……...136
4.17.6 MVID ………………………………………………………………………………………………………… ....... ……..137
4.17.7 Group Allow ……………………………………………………………………………………………………........ …..138
4.17.8 MVR Group Membership ……………………………………………………………………………………… ......... …139
4.18 Alarm Configuration …………………………………………………………………………………………………….............…139
4.18.1 Events ………………………………………………………………………………………………………….........……139
4.18.2 Email ………………………………………………………………………………………………………………............... 140
4.19 DHCP Snooping …………………………………………………………………………………………………………............. ..141
4.19.1 DHCP Snooping State ………………………………………………………………………………………….........….141
4.19.2 DHCP Snooping Entry …………………………………………………………………………………………..........….141
4.19.3 DHCP Snooping Client ………………………………………………………………………………………… .........…142
4.20 LLDP ……………………………………………………………………………………………………………………… ...............143
4.20.1 LLDP State ……………………………………………………………………………………………………… ......... …143
4.20.2 LLDP Entry ……………………………………………………………………………………………………….......... …145
4.20.3 LLDP Statistics ………………………………………………………………………………………………… ..........….145
4.21 Save/Restore …………………………………………………………………………………………………………….. ..............146
4.21.1 Factory Defaults ……………………………………………………………………………………………… ........…...147
4.21.2 Save Start ……………………………………………………………………………………………………… ....... …..147
6
724-746-5500 | blackbox.com
Table of Contents
Table of Contents (Continued)
4.21.3 Save User ………………………………………………………………………………………………………..........….147
4.21.4 Restore User …………………………………………………………………………………………………….........….148
4.22 Export/ Import ………………………………………………………………………………………………………… ............ …..148
4.23 Diagnostics ……………………………………………………………………………………………………………............. …..149
4.23.1 Diag ………………………………………………………………………………………………………… ........………149
4.23.2 Ping …………………………………………………………………………………………………………........………150
4.24 Maintenance ………………………………………………………………………………………………………… ............. ……150
4.24.1 Warm Restart ……………………………………………………………………………………………….........………150
4.24.2 Software Upload ……………………………………………………………………………………………........ ……..151
4.25 Logout …………………………………………………………………………………………………………………............ ….. .151
5. Operation of CLI Management ……………………………………………………………………………….………………..................153
5.1 CLI Management ………………………………………………………………………………………………………… ............ ...153
5.2 Login ……………………………………………………………………………………………………………………….............…153
5.3 Commands of CLI ………………………………………………………………………………………………………… ...............153
5.3.1 Global Commands of CLI ………………………………………………………………………………………......……154
5.3.2 Local Commands of CLI ………………………………………………………………………………………................ 158
6. Troubleshooting ……………………………………………………………………………………………………………… ....................226
7. Null Modem Cable Specifications …………………………………………………………………………………………… ...................227
724-746-5500 | blackbox.com
7
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
1. Specifications
1.1 Hardware Specifications
Standard Compliance: IEEE 802.3/802.3ab/802.3z/802.3/802.3x
Network Interface:
Configuration Mode Connector Port (LPB4008A) Port (LPB4024A)
10/100/1000Mbps Gigabit TP NWay 1000BASE-SX Gigabit Fiber 1000 FDX *SFP 7–8 (Option) 21–24 (Option)
1000BASE-LX Gigabit Fiber 1000 FDX *SFP 7–8 (Option) 21–24 (Option) 1000BASE-LX Single Fiber WDM (BiDi)
*Port 7, 8 on the LPB4008A and Ports 21-24 on the LPB4024A are TP/SFP fiber dual media ports with auto-detect function
*Optional SFP module supports LC or BiDi LC transceiver.
Transmission Mode: 10/100 Mbps supports full or half duplex; 1000 Mbps supports full duplex only
Transmission Speed: 10/100/1000 Mbps for T P; 1000 Mbps for Fiber
Full Forwarding/Filtering Packet Rate: PPS (packets per second)
Forw arding Rate Speed 1,488,000 PPS 1000 Mbps 148,800 PPS 100 Mbps 14,880 PPS 10 Mbps
MAC Address and Self-learning: 8K MAC address, 4K VLAN table entries.
Buffer Memory: Embedded 1392 KB frame buffer
Flow Control: IEEE 802.3x compliant for full duplex; Backpressu re flow control for half duplex
Cable and Maximum Length:
TP CAT5 UTP cable, up to 328 feet (100 m) 1000BASE-SX Up to 220/275/500 /550 m, which depends on Multi-Mode Fiber type 1000BASE-LX Single-Mode Fiber, up to 10/30/50 km 1000BASE-LX WDM (BiDi) Single-Mode Single Fiber, up to 20 km
Connectors: LPB4008A: (6) RJ-45 twisted–pair copper, (2) dual-media TP/SFP (twisted-pair/SFP); LPB4024A: (20) RJ-45 twisted-pair copper, (4) dual-media TP/SFP (twisted-pair/SFP)
1000 FDX
Indicators: LPB4008A: (20) LEDs: Global: (1) Power, (1) CPU, Ports 1–8: (8) Link/Speed, (8) PoE , Ports 7–8: (2) SFP (Link/Sp eed) LPB4024A: (54) LEDs: Global: (1) Power, (1) CPU, Ports 1–24: (24) Link/Speed , (24) PoE, Ports 21–24: (4) SFP (Link/Speed)
Power Requirements:
LPB4008A: AC Line: Voltage: 100–240 V; Frequency: 50–60 Hz; Consumption: 65 W LPB4024A: AC Line: Voltage: 100–240 V; Frequency: 50–60 Hz; Consumption: 185 W
Ambient Temperature: 32 to 104° F (0° to 40°C)
Humidity: 5% to 90%
Size: LPB4008A: 1.7”H x 11”W x 6.5”D (4.4 × 28 × 16.6 cm);
LPB4024A: 1.7”H x 17.4” W x 9.8”D (4.4 x 44.2 x 24.8 cm)
Weight: LPB4008A: 4.2 lb. (1.9 kg); LPB4024A: 8.4 lb. (3.8 kg)
8
724-746-5500 | blackbox.com
TP (RJ-45) 1–6
*SFP 7–8 (Option) 21–24 (Option)
1–20
FCC and IC RFI Statements
1.2 Management Software Specifications
System Configuration: Supports auto-negotiation on 10/100 /1000 BASE-TX ports; Web browser or console interface can set transmission
speed (10-/100-/1000-Mbps) and operation mode (full-/half-duplex) on each port; enable/disable any port; set VLAN group, set trunk connection.
Management Agent: SNMP support; MIB II, Bridge MIB, RMON MIB, Spanning Tree Algorithm, IEEE 802.1D, VLAN Function, Port-Based /802.1Q-Tagged, allows up to 256 active VLANs in one switch, Trun k Function; Allows Ports trunk connections; allows IGMP, IP Multicast Filtering by passively snooping on the IGMP Query
Bandwidth Control: Supports by-port Egress/Ingress rate control
Quality of Service (QoS): Referred as Class of Service (CoS) by the IEEE 802.1P standard, Classification of packet priority can be based on
either a VLAN tag on packet or a us er-defined per port QoS. Two queues per port IP TOS Classification TCP/UDP Port Classification IP DiffServe Classification
Port Security: Limited number of MAC addresses learned per port static MAC addresses stay in the filtering table
Internetworking Protocol:
Bridging: 802.1D Spanning Tree; IP Multicast: IGMP Snooping; IP Multicast Packet Filtering; Maximum of 256 active VLANs and IP multicast sessions
Network Management: One RS-232 port as a local control console; Telnet remote control console; SNMP agent: MIB-2 (RFC 1213); Bridge MIB (RFC 1493); RMON MIB (RFC 1757) statistics; Ethernet-like MIB (RFC 1643); Web browser support based on HTTP Server and CGI parser TFTP software-upgrade capability
724-746-5500 | blackbox.com
9
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
2. Overview
2.1 Introduction
The 8-Port and 24-Port Gigabit L2 Managed Power-over- Ethernet Switches (LPB4008Aand LPB4024A) are standard switches that meet all IEEE
802.3/u/x/z Gigabit Ethernet specifications. The LPB4008A switch includes six 10-/100-/1000-Mbps TP ports and two Gigabit TP/SFP ports. The LBP4024A switch includes twenty 10-/100-/1000-Mbps TP ports and four Gigabit TP/SFP ports. You can manage the switches through the RS-232 serial port via a direct connection, or through the Ethernet port using a CLI or Web-based management unit that’s associated with an SNMP agent. Using the SNMP agent, the network administrator can log on to the switch to monitor, configure, and control each port’s activity. Via its intelligent softwar e, the switch also featur es ACL, IP-MAC Binding, DHCP Snooping, QoS (Quality of Service), Spanning Tree, VLAN, Port Trunking, Bandwidth Control, Port Security, SNMP/RMON, and IGMP Snooping. Use it for both metro-LAN and office applications.
These PSE switches also comply with the IEEE 802.3af standard. An advanced auto-sensing algorithm enables power devices (PD) discovery, classification, current limit, and other necessary functions. It also protects against short circuits and auto-detects power-out to the PD.
This switch’s Port 7 and Port 8 (LPB4008A) or Ports 21–24 (LPB4024A) include two types of media—TP and SFP Fiber (LC, BiDi LC…). These ports support 10-/100-/1000-Mbps TP or 1000-Mbps SFP Fiber with auto-detect function. Use a 1000-Mbps SFP Fiber transceiver to expand a high-s peed connection.
• 1000-Mbps LC, Multimode, 50 m, SFP Fiber transceiver (LGB200C-MLC)
• 1000-Mbps LC, Single-Mode, 10 km, SFP Fiber transceiver (LGB200C- SLC10)
• 1000-Mbps LC, Single-Mode, 30 km, SFP Fiber transceiver (LGB200C- SLC30)
• 1000-Mbps Bi Di LC, Single-Mode, 20 km, 1550 nm SFP Fiber WDM transceiver (LGB204C)
• 1000-Mbps Bi Di LC, Single-Mode, 20 km, 1310 nm SFP Fiber WDM transceiver (LGB205C)
The 10-/100-/1000- Mbps TP standard Ethernet ports meet all IEEE 802.3/u/x/z Gi gabit and Fast Ethernet specifications. The 1000Mbps SFP Fiber transceiver has a Gigabit Ethernet port that fully complies with all IEEE 802.3z and 1000BASE-SX/LX standards.
The 1000-Mbps Single Fiber WDM (BiDi) transceiver is designed with an optic Wavelength Division Multiplexing (WDM) technology that transports a bi-directional full-duplex signal over a single fiber simultaneously.
"Active PHY Power Management" and "Perfect Reach Power Management " help reduce power consumption.
The switch also supports the IEEE Standard 802.1ab Link Layer Discovery Protocol to provide a debugging tool and enhance the networking management availability. It can auto-discover a device and its topology.
2.2 Features
QoS: Supports Quality of Service using the IEEE 802.1P standard. There are two priority queue and packet transmission schedules.
Spanning Tree: Supports IEEE 802.1D, IEEE 802.1w ( RSTP: Rapid Spanning Tree Prot ocol) standards.
VLAN: Supports Port-based VLAN and IEEE802.1Q Tag VLAN;
Also supports 256 active VLANs and VLAN ID 1–4094.
Port Trunking: Supports static port trunking and port trunking with IEEE 802.3ad LACP.
Bandwidth Control: Supports ingress and egress per port bandwidth control.
Port Security: Allows or denies forwarding and port security according to MAC address.
SNMP/RMON
- SNMP agent and RMON MIB. The switch’s SNMP agent is client software that operates using SNMP protocol to receive commands from the SNMP manager (server site) and echo the corr esponding data (the MIB object). The SNMP agent actively issues TRAP information when it occurs.
- Remote Network Monitoring (RMON) is a branc h of the SNMP MIB
- The switch supports MIB-2 (RFC 1213), Bridge MIB (RFC 1493), RMON MIB (RFC 1757)-statistics Group 1,2,3,9, Ethernet-like MIB (RFC 1643), and Ethernet MIB (RFC 1643).
IGMP Snooping: Supports IGMP version 2 (RFC 2236): Use IGMP snooping to establish multicast groups that will forward multicast packets to member ports, and won’t waste bandwidth while IP multicast packets are running ov er the network.
IGMP Proxy: multicast processing. The switch supports IGMP version 1 and IGMP version 2, to efficiently use network bandwidth, and provide fast response time for channel changing. IGMP version 1 (IGMPv1) is described in RFC1112, and IGMP version 2 (IGMPv2) is described in RFC 2236. Hosts interact with the system through the exchang e of IGMP messages. Similarly, when you configure IGMP proxy, the system exhanges IGMP messages with the router upstream. However, when acting as the proxy, the system performs the host portion of the IGMP ta sk on the upstream interface as follows:
- When queried, it sends group membership reports to the group.
10
724-746-5500 | blackbox.com
Chapter 2: Overview
- When one of its hosts joins a multicast address group to which none of its other hosts belong, it sends unsolicited group membership reports to that group.
- When the last host in a particular multicast group leaves the group, it sends an unsolicited leave group membership report to the all-routers group (244.0.0.2).
PoE: 8 PoE ports allow power to be supplied to end devices , such as Wireles s Access Points or VoIP Phones, directly through the existing LAN cables, eliminating costs for additional AC wiring and reducing installation costs.
Power Saving
- "Active PHY Power Management" detects when the client is idle. "Perfect Reach Power Management" detects the cable length automatically, then provides the different (lower) power level needed. This saves switch power and reduces power consumption.
LLDP (IEEE 802.1AB Link Layer Discovery Protocol)
- The switch supports LLDP automated device discovery protocol for easy mapping of network management applications.
2.3 What’s Included
Your package should include the following items. If anything is missing or damaged, pleas e contact Black Box Technical Support at 724-746­5500 or info@blackbox.com
(1) 8-Port (LPB4008A) or 24-Port (LPB4024A) Gigabit L2 Managed Power-Over-Ethern et Switch
(1) set of 19” rackmounting brack ets (LPB4024A only)
(1) AC Power Cord
(1) RS-232 Cable
This user manual on CD-ROM
2.4 Front and Back Panel
There are six or twenty TP Gigabit Ethernet ports plus two or four SFP fiber ports for optional removable modules on the front panel of the switch. The LED display area on the left side of the panel contains a Power LED that indicates the switch’s power status. 16 port status LEDs show port status on the LPB4008A, and 48 port status LEDs show port status on th e LPB4024A. One RS-232 DB9 interface can be u sed for configuration or management.
Front Panel
.
724-746-5500 | blackbox.com
Figure 2-1. Front panel: LPB4008A.
Figure 2-2. Front panel: LPB4024A.
11
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Rear Panel
2.5 LED Indicators
Figure 2-3. Rear pan el: LPB4008A.
Figure 2-4. Rear pan el: LPB4024A.
Figure 2-5. LED indicators on the LPB4008A’s front panel.
Figure 2-6. LED indicators on the LPB4024A’s front panel.
12
724-746-5500 | blackbox.com
Chapter 2: Overview
Table 2-1. LED Indicators
Number LED Color Function System LED 1 POWER Green Lights when power is on.
2 CPU
6 RESET Reset button restores the management system. 10/100/1000 Ethernet TP Port 1 to 6 LED (LPB4008A) or Port 1 to 20 LED (LPB4024A)
3 LINK/ACT/SPEED
4 PoE Green Lights when PoE Power is active 1000SX/LX Gigabit Fiber Port 7, 8 LED (LPB4008A) or Port 21–24 (LPB4024A)
5 SFP(LINK/ACT)
2.6 Optional SFP Fiber Transceiver Modules
Ports 7 and 8 on th e LPB4008A include two types of media: twisted-pair (TP) and optional small form factor pluggable (SFP) fiber (LC, BiDi LC, etc.) modules. The twisted-pair ports are the switch’s two rightmost RJ-45 twisted-pair connectors. For the fiber option, 1000-Mbps fiber transceiver modules slide into the switch’s two fiber module slots (located to the right of the twisted-pair conn ectors on th e switch’s front panel). The fiber transceiver modules are used for high-speed connection expansion. The two fib er ports can automatically detect 10/100/1000-Mbps TP or 1000-Mbps SFP fiber.
Five 1000-Mbps transceiver modules are available. Thes e modules are d escribed below and shown in Figures 2-7 and 2-8.
• Small Form Factor Pluggable (SFP) Optical Transceiver, Multimode, 850-nm, 550 m (LGB200C-MLC)
• Small Form Factor Pluggable (SFP) Optical Transceiver, Single-Mode, 1310-nm, 10 km (LGB200C-SLC10)
• Small Form Factor Pluggable (SFP) Optical Transceiver, Single-Mode, 1550-nm, 30 km (LGB200C-SLC30)
• Small Form Factor Pluggable (SFP) Optical Transceiver, Single-Strand, Single-Mode Fib er WDM1550TX/1310 RX, 20 km (LGB204C)
• Small Form Factor Pluggable (SFP) Optical Transceiver, Single-Strand, Single-Mode Fib er WDM1310TX/1550 RX, 20 km (LGB205C)
Green Lights when CPU is on.
Blinks when system is in self-test mode.
Green Lights when connection with remote device is good .
Green/ Amber
Green Lights when connection to the remote device is good.
Blinks when traffic is present. Off when cable connection is not good. Lights green when 1000-Mbps speed is active. Lights amber when 100-Mbps speed is active Off when 10Mbps speed is active
Blinks when any traffic is present. Off when module connection is not good.
Figure 2-7. LGB200C- MLC, LGB200C-SLC10, or LGB200C-SLC30 module.
NOTE: Th e LGB204C and LGB205C fiber transceivers must be used together.
724-746-5500 | blackbox.com
Figure 2-8. LGB204C or LGB205C module.
13
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
3. Installation
3.1 Hardware and Cable Installation
CAUTION: Wear a grounding device to avoid damage from electrostatic discharge. Be sure that the power switch is OFF before you connect the power cord to the power source.
3.1.1 Installing an Optional SFP Transceiver Module
NOTE: If you do not plan to install SFP fiber transceivers in the switch’s ports 7–8, skip this section.
Slide the fiber transceiver module into one of the two open module slots in the switch as shown in Figure 3-1.
8-Port Gigabit L 2 Managed PoE Switch
SFP Transceiver Module
Figure 3-1. Installing the optional SFP fiber tran sceiver module.
Connecting the SFP Module to the Chassis
The optional SFP modules are hot-swappable, so you can plug or unplug them before or after powering on th e switch.
1. Verify that the SFP module is the right model and conforms to the chassis.
2. Slide the module into the slot. Make sure that the module is properly seated against the slot socket/connector.
3. Connect the fiber optic network cable to the connector(s) on the module.
If you want to install a s econd module in the LPB4008A switch or second, third, and fourth module in the LPB4024A switch, repeat steps 1–3.
3.1.2
TP Port and Cable Installation
1. The switch’s TP port supports MDI/MDI-X auto-crossover, so you can use both types of cable, straight-through (Cable pin-outs for
RJ-45 jack 1, 2, 3, 6 to 1, 2, 3, 6 in 10/100M TP; 1, 2, 3, 4, 5, 6, 7, 8 to 1, 2, 3, 4, 5, 6, 7, 8 in Gigabit TP) and cross-over (Cable pin-outs for RJ-45 jack 1, 2, 3, 6 to 3, 6, 1, 2).
2. Use CAT5 RJ-45 TP cable to connect to one of the switch’s TP port and a network-aware device such as a workstation or a server.
3. Repeat the above steps, as needed, for e ach RJ-45 port you want to connect to a Gigabit 10/100/1000 T P device.
4. The switch is now ready to operate.
14
724-746-5500 | blackbox.com
Chapter 3: Installation
3.1.3 Power On
The switch supports a 100-240-VAC, 50-60-Hz power supply. The power supply will automatically convert the local AC power source to DC power. You can connect a device or module to the switch when it’s powered on or off. When the power is on, all port LED indicators will light up immediately and then go off. (The power LED remains on.) To reset the switch, simply power it off, then on again.
3.1.4 Firmware Loading
After resetting, the bootloader will load the firmware into the memory. (It will take about 30 seconds.) Then all LEDs on the switch will flash once and automatically perform a self-test. The switch is now in the ready state.
3.2 Installing the Switch in a 19-Inch Wiring Rack or Cabinet
CAUTION: Allow enough space for the cooling fan at both sides of the switch to provide ventilation. Wear a grounding device for electrostatic discharge.
1. Using two screws (included), attach the rackmount ears to the switch’s left and right sides. See Figure 3-2.
2. Line up the mounting holes on the switch as sembly (the switch with rackmount ears installed ) with the mounting holes on a 19"
wiring closet rack. Install two screws (included) to hold the switch in place in the rack.
724-746-5500 | blackbox.com
15
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
24-Port Gigabit L2 Managed Power-over-Ethernet Switch
Figure 3-2. Installing the switch chassis in a 19" rack.
3.3 Cabling Requirements
For successful installation and optimum network performance, use CAT5 or CAT5e cable.
3.3.1 Twisted-Pair Ports
For a Fast Ethernet TP network conn ection, use CAT5 or CAT5e cable that’s up to 100 meters long.
For a Gigabit Ethernet TP network connection, use CA T5 or CAT5e cable that’s up to 100 meters long. We recommend using CAT5e cable for Gigabit connections.
3.3.2 Fiber Transceiver Ports
There are two categories of fiber: multimode (MM) and single-mode (SM). Multimode fiber is categorized into several classes by the distance it supports. Th e classes are SX, LX, LHX, XD, and ZX . The fiber modules that work with the switch have LC and BIDI LC connectors.
16
724-746-5500 | blackbox.com
Chapter 3: Installation
62.5/125-μm multimode Gigabit fiber with multimode LC SFP module (LGB200C-MLC).
9/125-μm single-mode Gigabit fiber with single-mode LC SFP module (LGB200C-SLC10 orLGB200C-SLC30).
9/125-μm single-strand single-mode Gigabit fiber with BiDi LC1310-nm SFP module (LGB204C).
9/125-μm single-strand single-mode Gigabit fiber with BiDi LC1550-nm SFP module (LGB205C).
The following table lists the types of fiber that the switch supports and those not listed here are available upon request.
Multimode Fiber Cable and Modal Bandwidth
IEEE 802.3z Gigabit Ethernet 1000BASE-SX 850nm
1000BASE-LX/LHX/XD/ZX
Multi-mode 62.5/125 m Multimode 50/125 m
Modal Bandwidth Distance Modal Bandwidth
160MHz-Km 220m 400MHz-Km
200MHz-Km 275m 500MHz-Km
Single-mode fiber 9/125 m
Single-mode transceiver 1310nm 10Km
Single-mode transceiver 1550nm 30, 50Km
Distance
500m 550m
TX (Transmit) 1310nm
RX (Receive) 1550nm
1000BASE-LX
Single-mode
*20Km
Single Fiber (BIDI L C )
Single-mode
*20Km
TX (Transmit) 1550nm
RX (Receive) 1310nm
3.3.3 Switch Cascading in Topology
Theoretically, the switch partitions the collision domain for each port in switch cascading so that you may uplink an unlimited number of switches. In practice, the network extension (cascading levels and overall diameter) must comply with the IEEE 802.3/802.3u/802.3z and other 802.1 series protocol specifications, which limit the timing requirement from physical signals defined by the Media Access Control (MAC) and PHY802.3 series specification, and timing from some OSI layer 2 protocols such as 802.1d, 802.1q, and LACP.
The fiber, TP cables, and devices’ bit-time (round-trip) delay are described in Table 3-1.
Table 3-1. Cable’s bit-time (round-trip) delay.
1000BASE-X TP, Fiber 100BASE-TX TP 100BASE -F X Fiber
Round trip Delay: 4096 Round trip Delay: 512
Cat. 5 TP Wire: 11.12/m Cat. 5 T P Wire: 1.12/m Fiber Cable: 1.0/m
Fiber Cable: 10.10/m TP to fiber Converter: 56
Bit Time unit: 1ns (1sec./1000 Mega bit)
The sum of all elements’ bit-time delay and the overall bit-time delay of wires/devices must be within Round Trip Delay (bit times) in a half­duplex network segment (collision domain). For full-duplex operation, this will not apply. You may use the T P-Fiber module to extend the TP node distance over fiber optic cable and provide the long haul connection.
Bit Time unit: 0.01 s (1sec./100 Mega bit)
3.3.4 Typical Network Topology in Deployment
A hierarchical network with minimum levels of switches may reduce the timing delay between server and client station. This approach will minimize the number of switches in any one path, will lower the possibility of network loop, and will improve network efficiency. If more than two switches are connected in the same network, select one switch as a Level 1 switch and connect all other switches to it at Level 2. We recommend connecting the Server/Host to the Level 1 switch, if no VLAN or other special requirements are applied.
724-746-5500 | blackbox.com
17
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Case1: All switch ports are in the same local area network. Every port can access each other (See Figure 3-3).
Figure 3-3. No VLAN Configuration Diagram.
If VLAN is enabled and configured, each nod e in the network that can communicate with each other directly is bounded in the same VLAN area. Here VLAN area is defined by what VLAN you are using. The switch supports both port-bas ed VLAN and tag-based VLAN. The following diagram shows how port-based VLANs and tag-based VLANs work.
Case2a: Port-based VLAN (See Figure 3-4).
Figure 3-4 One switch connected to four VLANs in a port-based VLAN
1. The same VLAN members can not be connected to different switches.
2. All VLAN members can not access each others’ VLAN members.
3. The switch manager has to assign different names for each VLAN group at one switch.
18
724-746-5500 | blackbox.com
Case 2b: Port-based VLAN (See Figure 3-5).
Chapter 3: Installation
Figure 3-5. Port-based VLAN diagram.
1. VLAN1 members can not access VLAN2, VLAN3, and VLAN4 members.
2. VLAN2 members can not access VLAN1 and VLAN3 members, but they can acce ss VLAN4 members.
3. VLAN3 members can not acces s VLAN1, VLAN2 and VLAN4.
4. VLAN4 members cam not acces s VLAN1 and VLAN3 members, but they can access VLAN2 members
Case3: The same VLAN members can be at different switches with the same VID (See Figure 3-6).
VLAN 1
724-746-5500 | blackbox.com
VLAN 2
VLAN 3
Figure 3-6. Attribute-based VLAN diagram.
19
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
3.4 Configuring the Management Agent
3.4.1 Connect To Console Port
To configure the switch via the RS-232 console port, connect the switch’s serial port directly to a DTE device, for example, a PC, through an RS-232 cable with a DB9 connector. Next, run a terminal emulator with the default setting of the switch’s serial port. The RS-232 interface in the switch only supports 115200 bps baud rate with 8 data bits, 1 stop bit, no parity check, and no flow control.
RS-232 cable with female DB9 connector at both ends Default IP Setting: IP address = 192.168.1.1 Subnet mask = 255.255.255.0 Default Gateway = 192.168.1.254
Figure 3-7. Conn ect th e switch’s R S-232 DB9 port to a serial console.
To configure the switch, follow these steps:
1. Use an RS-232 DB9 cable with a female DB9 connector that has pins 2, 3, and 7.
2. Attach the DB9 female cable connector to the male serial RS-232 DB9 connector on the switch.
3. Attach the other end of the s erial RS-232 DB9 cable to the PC’s serial port, running a terminal emulator supporting a VT100/ANSI terminal with the switch’s serial port default s ettings. For example, Windows98/2000/XP HyperTerminal utility.
NOTE: The switch’s serial port default settings are:
Baud rate: 115200 Stop bits: 1 Data bits: 8 Parity: N Flow control: none
4. After you connect the cables, press the <Enter> key. The login prompt will be shown on the screen. The default username and password are:
Username = admin Password = admin
3.4.2 Set IP Address, Subnet Mask, and Default Gateway IP Address
Refer to Figure 3-7, CLI Management, for details about default IP address settings. First, either configure your PC IP address or change the switch’s IP address, then change the default IP address for the gateway and subnet mask.
For example, your network address is 10.1.1.0, and subnet mask is 255.255.255.0. You can change the switch’s default IP address
192.168.1.1 to 10.1.1.1 and set the subnet mask to be 255.255.255.0. Then, choose your default gateway, for example, 10.1.1.254.
20
724-746-5500 | blackbox.com
Chapter 3: Installation
Default Value LPB4008A Your N etwork Se t ting IP Address Subnet
Default Gateway
After you complete the settings for the switch, it will reboot and the configuration will take effect. You can then manage the switch via the network (either from a web browser or a Network Management System [NMS]).
NOTE: There are no default DNS settings. DNS addresses are assigned by the network administrator.
Managed Switch LPB4008A
Login: admin Password: *****
LPB4008A
192.168.1.1 10.1.1.1
255.255.255 .0 255.255.255.0
192.168.1 .254 10.1.1.254
Figure 3-8. The Login Screen for CLI.
3.4.3 Managing LPB4008A through Ethernet Port
There are three ways to configure and monitor the switch through the switch’s Ethernet port. They are CLI, Web browser, and SNMP manager. The user interface for the last one is NMS dependent and is not explained in this manual. CLI and Web browser management interface are described on the next page.
Default IP Setting: IP address = 192.168.1.1 Subnet Mask = 255.255.255.0 Default Gateway = 198.168.1.254 Assign a reasonable IP address, for example: IP 192.168.1.100 Subnet Mask = 255.255.255.0 Default Gatewtay = 192.168.1.254
Figure 3-9. Connecting the Ethernet LAN PC to th e switch for network management through an Ethernet port.
Before you communicate with the switch, finish the configuration of the IP address or make sure you know the IP address of the switch. Then, follow the procedures listed below.
1.
Set up a physical path between the configured switch and a PC with a qualified UTP CAT5 cable with RJ-45 connector.
724-746-5500 | blackbox.com
21
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
NOTE: If the PC connects directly to the switch, you have to setup the same subnet mask between them. The subnet mask may be different for the PC at the remote site.
2. Run CLI or web browser and follow the menu. Refer to Chapters 4 and 5.
Figure 3-10. Login Scre en for Web.
3.5 IP Address Assignment
For IP address configuration, there are three parameters you need to fill in. They are IP address, Subn et Mas k, Default Gateway and DNS.
3.5.1 IP address
The addres s of the network device is used for internetworking communication. Its address structure is shown in Figure 3-11. It is split into predefined address classes or categories.
Each class has its own network range between the network identifier and host identifier in the 32-bit address. Each IP address consists of two parts: network identifier ( address) and host identifier (address). The former indicates the network where the addressed host resides, and the latter indicates the individual host in the network that the address of ho st refers to. The host identifier must be unique in the same LAN. The IP address we used is version 4, known as IPv4.
Classifying addresses divides the IP address into three classes: class A, class B, and class C. The rest of the IP addresses are for multicast and broadcast. The bit length of the network prefix is the same as that of the subnet mask and is denoted as IP address/Xl for example,
192.168.1.0/24. Each class has its address range described below.
Class A: Address is les s than 126.255.255.255. There are a total of 126 networks can be defined because the address 0.0.0.0 is reserved for default route and 127.0.0.0/8 is reserved for loopback function.
Class B: The IP address ranges between 128.0.0.0 and 191.255.255.255. Each class B network has a 16-bit network prefix followed by a 16-bit host address. There are 16,384 (214)/16 networks that can be defined with a maximum of 65534 (216-2) hosts per network.
22
724-746-5500 | blackbox.com
Figure 3-11. IP address structure.
Chapter 3: Installation
Class C: The IP address ranges between 192.0.0.0 and 223.255.255.255. Each class C network has a 24-bit network prefix followed by an 8-bit host address. A total of 2,097,152 (221)/24 networks can be defined with a maximum of 254(28-2) hosts per network.
Class D and E: Class D is a class with the first 4 MSBs (Most Significant Bits) set to 1-1-1-0 and is used for IP Multicast. See also RFC 1112. Class E is a class with the first 4 MSBs set to 1-1-1-1 and is used for IP broadcast. According to IANA (Internet A ssigned Numbers Authority), three specific IP address blocks (called a private IP address) are reserved for extending an internal network. They are listed below.
Class A 10.0.0.0---10.255.255.255
Class B 172.16.0.0---172.31.255.255
Class C 192.168.0.0---192.168.255.255
Refer to RFC 1597 and RFC 1466 for more information. These documents are available at
3.5.2 Subnet Mask
Subnet mask is the sub-division of a class-based network or a CIDR block. The subnet is used to determine how to split an IP address into the network prefix and the host address. It’s designed to use an IP address more efficiently to manage an IP network.
For a class B network, 128.1.2.3, the default subnet mask may be 255.255.0.0. The first two bytes are all 1s. This means more than 60 thousands of nodes in flat IP addresses will be on the same network. It’s too large to manage practically. If we divide it into smaller networks by extending the network prefix from 16 bits to, say 24 bits, the network uses its third byte to subnet this class B network. The subnet mask is 255.255.255.0; each bit of the first three bytes is 1. The first two bytes are used to identify the class B network, the third byte is used to identify the subnet within this class B network, and the last byte is the host number.
Not all IP addresses are available in the subnetted network. Two special addresses are reserved . They are the addresses with all zeros and all ones for the host number.
As shown in the table below, the subnet mas k with a 25-bit long, 255.255.255.128 address contains 126 members in the subnetted network. The network prefix length equ als the bit number with 1s in that subn et mask. Use this table to count the number of IP addresses matched.
Table 3-2. Subnet mask values.
Prefix Length Number of IPs Matched Number of Addressable IPs
www.faqs.org.
/32 1 -
/31 2 -
/30 4 2
/29 8 6
/28 16 14
/27 32 30
/26 64 62
/25 128 126
/24 256 254
/23 512 510
/22 1024 1022
/21 2048 2046
/20 4096 4094
/19 8192 8190
/18 16384 16382
/17 32768 32766
/16 65536 65534
724-746-5500 | blackbox.com
23
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
According to the scheme above, a subnet mask 255.255.255.0 will partition a network with the class C. A maximum of 254 effective nodes exist in this sub-netted n etwork. It is considered a physical network in an autonomous network, so it owns a n etwork IP address, for example, 168.1.2.0.
With the subnet mask, a bigger network can be divided into smaller networks. If you want to have more than two independent networks in a worknet, you can partition the network. In this case, subnet mask must be applied.
For different network applications, the subnet mask might be 255.255.255.240. This small network accommodates a maximum of 15 nodes.
3.5.3 Default Gateway
For the routed packet, if the destination is not in the routing table, all the traffic is sent to the device with the designated IP address, known as the default router. The gateway setting is used for Trap Events Host only in the switch.
Before assigning an IP address to the switch, check to see what IP address of the network will be connected with the switch. Use the same network address and append your host address to it.
First, type in the IP Address : as shown in Fig. 2-12, enter default IP address “192.168.1.1,” for instance. An IP address such as 192.168.1.x must be set on your PC.
Second, type in the Subnet Mask: as shown in Fig. 2-12, enter “255.255.255.0.” Any subnet mask such a s 255.255.255.x is allowed in this case.
3.5.4 DNS
The Domain Name Server translates human-readable machine names to IP addresses. Every machine on the Internet has a unique IP address. A server has a static IP address. To connect to a server, the client needs to know the IP of the server. However, users generally use the name to connect to the server. Thus, the switch DNS client program (such as a browser) will ask the DNS to resolve the IP address of the named server.
3.6 Typical Application
LPB4008A implements 8 Gigabit Ethernet TP ports with Auto MDI-X and two slots for the removable module supporting fiber connections, including LC and BiDi-LC SFP modules. LPB4024A has 20 Gigaibit Ethernet TP ports with Auto-MDIX and four slots for fiber modules. The switch is suitable for the following applications.
• Edge Site/Remote site application is used in PoE environment (See Figure 3-13).
• Peer-to-peer application is used in two remote offices (See Figure 3-14).
• Office network (See Figure 3-15).
Figure 3-12
24
724-746-5500 | blackbox.com
Chapter 3: Installation
L3 Managed Switch
Server
L3 Managed Switch
Server
8-Port Gigabit L 2 Managed Power-over-Ethernet Switch
8-Port Gigabit L 2 Managed Power-over-Ethernet Switch
Wireless AP PC IP Cam PC PC PC PC Server
Figure 3-13. Network Connection between Remote Site and Central Site.
724-746-5500 | blackbox.com
25
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
L2 Managed Switch
8-Port Gigabit L 2 Managed Power-over-Ethernet Switch
8-Port Gigabit L 2 Managed Power-over-Ethernet Switch
Wireless PC IP Cam PC
Figure 3-14. Peer-to-peer Network Connection.
L2 Managed Switch
Wireless PC IP Cam PC
Figure 3-15. Office Network Connection.
Collision Domain 1
Collision Domain 2
26
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
4. Operation of Web-based Management
This chapter instructs you how to configure and manage the LPB4008A or LPB4024A through the web user interface it supports. Through any one port, you can access and monitor the switch status, including MIBs status, port activity, Spanning tree status, port aggregation status, multicast traffic, VLAN and priority status, even illegal access record and so on.
The managed switch’s default values are listed in the table below:
IP Address: 192.168.1.1 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.1.254 Username: admin Password: admin
After you finish configuring the managed switch in the CLI via the switch’s serial interface, you can browse through the switch. For instance, type
http://192.168.1.1 in the address row in a browser, and the screen shown in Figure 3-1 will appear and ask you to input your
username and password to login and access authentication. The default username and password are both “admin.” The first time you use the serial interface, enter the default username and password, then click the <Login> button. You are now logged in.
If your forgot the manager’s password, click on the “Forgot P assword” option in Web user interface (see Figure 4-1) or input “Ctrl+Z” in the CLI’s login screen (See Figures 4-1–4-2). The system will display the user’s serial number. Write down this serial number and contact Black Box Technical Support at 724-746-5500 for a temporary password. Use this new password as ID and P assword to login to the system temporarily with manager authority. The user can only login to the system one time using the temporary password, so modify your password immediately after you login to the system successfully.
In this login menu, you have to input the complete username and password respectively; the switch will not give you a shortcut to username automatically. This looks inconvenient, but is safer.
The switch supports a simple user management function allowing only one administrator to configure the system at one time. If there are two or more users using administrator’s identity, the switch will allow the only one who logs in first to configure the system. The rest of the users, even with administrator’s identity, can only monitor the s ystem. Users who have no administrator’s identity can only monitor the system. A maximum of three users can login simultaneously to the switch.
To optimize the display effect, we recommend that you use Microsoft IE 6.0 above, Netscape V7.1 above or FireFox V1.00 above with 1024 x 768 resolution. The switch supports a neutral web browser interface.
In Figure 4-2, for example, the left section is the entire function tree with web user.
724-746-5500 | blackbox.com
27
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-1. Login Screen.
4.1 Web Management Overview
After you login, the system information screen (Figure 4-2) appears. This page is the default and describes basic system information, including “Model Name,” “System Description,” “Location,” “Contact,” “Device Name,” “System Up Time,” “Current Time,” “BIOS
Version,” “Firmware Version,” “Hardware-Mechanical Version,” “Serial Number,” “Host IP Address,” “Host Mac Address,” “Device Port,” “RAM Size,” “Flash Size,” and “CPU Load.”. The screen tells you the software version used, MAC address, serial number, how
many ports are good and so on. This is h elpful for troubleshooting if the switch malfunctions.
28
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-2. The web management interface’s Home screen.
4.1.1 Screen Layout Information
The top of the screen shows the front panel of the switch. The linked ports display green; ports not linked will be dark. For the optional modules, the slot will show only a cover plate if no module is installed and will show a module if a module is present. The module image depends on the one you inserted. If disconnected, the port will be dark, if linked, green. (See Figure 4-3.)
724-746-5500 | blackbox.com
29
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-3. Port detail information.
Figure 4-3 shows the selected port’s status, traffic status, and bandwidth rating for egress and ingress respectively. On the left-top corner is a pull-down list for Auto Logout. The auto-logout function prevents illegal users from accessing your switch as you are exiting the software. If you do not choose any selection in the Auto Logout list, th e Auto Logout function turns on and the system will log out automatically after three minutes of no activity on th e device. If you choo se OFF, the scre en will stay the same. The default value is ON.
On the left side, the page lists the main menu tree for the web. The menu is arranged hierarchically. When you open the function folder, a sub-menu will be shown. The functions of each folder are described in their corresponding sections. When you click on a function, the function is performed. The following list is the full function tree for a web user interface.
30
724-746-5500 | blackbox.com
4.1.2 Structure of the Menu
Chapter 4: Operation of Web-based Management
724-746-5500 | blackbox.com
31
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
4.2 System
4.2.1 System Information
Function name: System Information
Function description: Show the basic system information.
Parameter description:
Model name: The model name of this device.
System description: Identifies the device. Here, the device is “8-Port GbE L2 Plus Managed Switch with 2 SFP Dual Media.”
Location: Where the switch is located. User-defined.
Contact: To easily manage and maintain this device, write down the contact person and phone here for getting help. You can configure this parameter through the device’s user interface or SNMP.
Device name: The name of the switch. User-defined. Default is LPB4008A or LPB4024A.
System up time: The time accumulated since this switch was powered on, formatted as day, hour, minute, second.
Current time: Shows the system time of the switch, formatted in day of week, month, day, hours:minutes:s econds, year. For instance, Mon Nov 30 00:00:00 1999.
32
724-746-5500 | blackbox.com
Figure 4-4. System Information.
Chapter 4: Operation of Web-based Management
BIOS version: The switch’s BIOS version.
Firmware version: The switch’s firmware version.
Hardware-Mechanical version: The switch’s hardware and mechanical versions. The figure before the hyphen is the electronic hardware version; the one after the hyphen is the mechanical version.
Serial number: The serial number assigned by Black Box.
Host IP address:The switch’s IP address.
Host MAC address: The switch’s management agent’s Ethernet MAC.
Device Port: Shows all of the switch’s port types and numbers.
RAM size: The size of the DRAM in this switch.
Flash size: The size of the flash memory in this switch.
CPU Loading: The lo ading of the CPU on this switch.
4.2.2 Account Configuration
Only the administrator can create, modify, or delete the username and password. The administrator can modify other users passwords. U sers logged in as Guest can only modity their own p assword. You must authorize the administrator/guest identites before configuring the username and password. Only one administrator is allowed to e xist and can’t be deleted. Up to 4 guest accounts can be created.
The default s etting for user account is:
Username: admin Password: admin
Add Account:
Click the “Create New” button. Select the account type, “Guest” or “Operator,” from the scroll-down menu. Only the Operator can change the settings. Then specify the user name and password you want.
724-746-5500 | blackbox.com
Figure 4-5. Account configuration screen.
33
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-6. Account configuration screen.
Edit Account:
Select the account you want to edit, then click on the “Edit” button. Specify the user name and password you want.
Figure 4-7. Account edit screen.
Delete Account: Select the account you want to delete, then click on the “Delete” button.
4.2.3 Time Configuration
The switch provides manual and automatic ways to set the system time via NTP. Manual setting is simple: just input “Year,” “Month,” “Day,” “Hour,” “Minute,” and “Second” within the valid value range indicated for e ach item. If you input an invalid value, for example, 61 minutes, the switch will record the figure as 59.
NTP is a well-known protocol used to synchronize switch system time over a network. NTP, an Internet draft standard formalized in
RFC
1305, uses version 3 protocol. The switch provides four built-in NTP server IP addresses that reside in the Internet and a user-defined NTP
server IP address. The time zone is Greenwich-centered (GMT+/- xx hours).
Function name: Time Function description: Set the system time manually or set it by syncing from time s ervers. Daylight savings time is also supported .
34
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-8. System time setting screen.
Parameter description:
Current Time: Shows the system’s current time.
Manual: Click on the Manual button, type in the year, month, day, hour, minute, and second, then press the <Apply> button to adjust the time manually. Valid figures for Y ear, Month, Day, Hour, Minute, and Second are >=2000, 1-12, 1-31, 0-23, 0-59, and 0-59, respectively. If you input an invalid figure and press the <Apply> button, the device will reject the time adjustment request. There is no time zone setting in Manual mode.
Default: Ye ar = 2000, Month = 1, Day = 1, Hour = 0, Minute = 0, Second = 0
NTP: Network Time Protocol (NTP) is used to sync the network time based on Greenwich Mean Time (GMT). If you use the NTP mode and select a built-in NTP time server or manually specify a user-defined NTP server and Time Zone, the switch will sync the time after you press the <Apply> button. Although it synchronizes the time automatically, NTP does not update the time periodically without user input.
The default Time Zone setting is GMT. To select a different time zone, select the time zone first and then perform time sync via NTP. The switch will combine this time zone offset and updated NTP time to calculate the local time. The switch supports configurable time zon e s from –12 to +13 step 1 hour.
Default Time zone: +8 Hrs.
Daylight Saving: Daylight savings time adjusts the time lag or advance in hours, according to the starting date and the ending date. For example, if you set the daylight savings time to be 1 hour, the system time will increase one hour after one minute. And when the time passes over the ending time, the system time will be decrease one hour after one minute.
The switch supports valid configurable daylight savings time from –5 to +5 one hour steps. It does not have to adjust current time to enact daylight s avings time, and you don’t have to set the starting/ending date. If you set daylight savings time to be non-zero, you have to set the starting/ending date as well; otherwise, the daylight savings function will not be activated.
Default for Daylight Saving: 0.
The following parameters are configurable for the Daylight Savings function and described in detail.
Daylight Savings Start: Set when to start daylight savings time.
724-746-5500 | blackbox.com
35
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Mth: Range is 1–12. Default: 1
Day: Range is 1–31. Default: 1
Hour: Range is 0–23. Default: 0
Day Light Saving End: Set when to stop daylight saving time.
Mth: Range is 1–12. Default: 1
Day: Range is 1–31. Default: 1
Hour: Range is 0–23. Default: 0
4.2.4 IP Configuration
IP configuration is one of the most important switch configurations. Without the proper s etting, the network manager will not be able to manage or view the device. The switch supports both manual IP address setting and automatic IP address setting via a DHCP server. When the IP address is changed, you must reboot the switch so the setting will take effect. Use the new IP to browse for web management and CLI management.
Function name: IP Configuration
Function description: Set IP address, subnet mask, default gateway, and DNS for the switch.
Parameter description:
DHCP Setting: DHCP is the abbreviation for Dynamic Host Configuration Protocol. Here DHCP means a switch to turn ON or OFF the function. The switch supports a DHCP client that’s used to get an IP address automatically if you set this function to “Enable.” When enabled, the switch will issue the request to the DHCP server residing in the network to get an IP address. If the DHCP server is down or does not exist, the switch will issue the request and show the IP address requested, until the DHCP server is on. Before getting an IP address from DHC P server, the device will not continue booting. If you set this field to “Disable,” you’ll have to input IP address manually
Default: Disable
IP address: Users can configure the IP settings and fill in new values when the DHCP function is set to “Disable.” Click on the <Apply> button to update.
When DHCP is disabled, Default: 192.168.1.1.
If DHCP is enabled, this field is filled by DHCP server and will not allow u sers to set it manually.
36
724-746-5500 | blackbox.com
Figure 4-9. IP configuration screen.
Chapter 4: Operation of Web-based Management
Subnet mask: Any IP device in a network must own its IP address, which is composed of a Network address and a Host address; otherwise it can’t communicate with other devices. Subnet mask enables more network addresses. Network classes A, B, and C are too large to fit for almost all networks, so, subnet mask is introduced to solve this problem. Subn et mask us es some bits from a host address and creates an IP address consisting of Network address, Subnet mask number, and host address. This reduces the total IP number of a network able to support, by th e amount of 2 power of the bit number of subn et number (2^[bit number of subnet number]).
Network ID Host ID
Network ID Host ID
Subnet number
Subnet mask is used to set the subnet mask value, which should be the same value as that of the other devices attached to the same network Default: 255.255.255.0
Default gateway: Set an IP address for a gateway to handle those packets that do not meet the routing rules predefined in the device. If a packet does not meet the criteria for another pre-defined path, it must be forwarded to a default router on a default path. This means that any packet with an undefined IP addres s in the routing table will be sent to this device unconditionally.
Default: 192.168.1.254
DNS: Domain Name Server translates between IP address and name address.
The switch supports the DNS client function to re-route the mnemonic name address to the DNS server to get its associated IP address for accessing the Internet. Users can specify a DNS IP address for the switch. With this, the switch can translate a mnemonic name address into an IP address .
There are two ways to specify the IP address of DNS. One is fixed mode, which manually specifies its IP address, the other is dyn amic mode, which is assigned by DHCP server while DHCP is enabled. DNS can help you easily remember the mnemonic address name with meaningful words in it. The default is no assignment of DNS address.
Default: 0.0.0.0
4.2.5 Loop Detection
The loop detection is used to detect the presence of traffic. When the switch receives a pack et’ s (looping detection frame) MAC address that is the same as the one from the port, show Loop is detected. The port will be locked when it receives the looping detection frames. If you want to resume using the locked port, find the looping path, remove it, then select th e locked port and click on “Resume” to enable it.
Function name: Loop Detection
Function description: Displays whether the switch is set up for Loop detection and whether a port has been locked due to loop detection. Also provides the ability to resume normal operation after leaving a loopback path.
32 bits
724-746-5500 | blackbox.com
37
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-10. Loop detection screen.
Parameter description:
Port No: Display the port number. Valid numbers are 1–8 for LPB4008A or 1–24 for LPB4024A.
Detection Port— Enable: Choose the port number and enable the port’s Loop detection. If loops are detected, the port is locked. If Loops are not detected, the port remains unlocked.
Locked Port— Resume: Choose Resume to open and unlock the port. If you do not choose Resume, the port remains locked.
4.2.6 Management Policy
Through the management security configuration, the manager can setup the switch and limit user access to this switch. The following rules are offered for the manager to manage the switch:
Rule 1: When no lists exist, then it will accept all connections.
Accept
-----------------------------------------------------------------------
Rule 2: When only “accept lists” exist, th en it will deny all connections, excluding the connection within the acceptable range.
Accept
Deny Accept Deny Accept
-----------------------------------------------------------------------
Rule 3: When only “deny lists” exist, then it will accept all connections, excluding the connection within the denying range.
Deny Accept Deny
Accept
Deny
-----------------------------------------------------------------------
Rule 4: When both “accept and deny” lists exist, then it will deny all connections, excluding the connection within the acceptable range.
Accept Deny Deny Deny Accept
38
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
-----------------------------------------------------------------------
Rule 5: When both “accept and deny” lists exist, then it will deny all connections, excluding the connection within the acceptable range and NOT within the denying range at the same time.
Deny| Acc | Deny | Acc | Deny
----------------------------------------------------------------------
Function name: Management Security Configuration
Function description: The switch offers Management Security Configuration. With this function, the manager can easily control the mode in which the user connects to the switch. According to the mode, users can be classified into two types: Those who are able to connect to the switch (Accept) and those who are unable to connect to the switch (Deny). You can place some restrictions on the user conn ect mode. For example, you can decide which VLAN VID will be accepted or denied by the switch. You can also set the switch to accept or deny the users’ IP range, id entify user ports that will connect to the switch, or control and connect to the switch via Http, Telnet or SNMP.
Accept
Accept
Deny
Figure 4-11. Management policy list screen .
Figure 4-12. Create management policy screen.
Parameter description:
Add: Press the <Add> button to create a new Management Security Configuration after you set up the parameters mentioned above. You can also modify the existing entry by pressing this button.
Delete: Remove the existing Management Security Configuration entry from the management security table.
Name: A name can contain any letter (A–Z, a–z) and digit (0–9) with a maximum of 8 characters.
724-746-5500 | blackbox.com
39
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
VID: The switch supports two kind s of options for managed valid VLAN VID, including “Any” and “Custom.” The default is “Any.” When
you choose “Custom,” you can fill in the VID number. The valid VID range is 1–4094.
IP Range: The switch supports two kinds of options for managed valid IP Range, including “Any” and “Custom.” The default is “Any.” If you
choose “Custom,” you can as sign an effective IP range. The valid range is 0.0.0.0–255.255.255.255.
Incoming Port: The switch supports two kinds of options for managing a valid Port Range, including “Any” and “Custom.” The default is
“Any”. You can select the ports that you want to restrict in the management security configuration.
Access Type: The switch supports two kinds of options for manag ed valid Access Type, including “Any” and “Custom”. Default is “Any.” If you choose ”Custom,” you can access and manage the switch in three ways: via Http, Telnet, and SNMP.
Action: Th e switch supports two kinds of options for managed valid Action Type, including “Deny” and “Accept.” The default is “Deny”. When you choose “Deny,” you will be restricted from managing the switch based on the “Access Type” you choose. If you select “Accept,” you will have the authority to manage the switch.
4.2.7 System Log
The System Log provides information about system logs, including information about when the device was booted, how the ports are operating, when users logged in, when sessions timed out, as well as other system information.
Function name: System Log
Function description: The Trap Log Data displays the log items including all SNMP Private Trap events, SNMP Public traps, and user logs that occurred in the system. In the report table, No., Time, and Events are three fields contained in each trap record.
Parameter description:
No: Display the order number for the trap that occurred.
Time: Display the time that the trap happened.
Desc: Displays a description event recorded in the System Log.
40
724-746-5500 | blackbox.com
Figure 4-13. System log screen.
Chapter 4: Operation of Web-based Management
Clear: Clear log data.
4.2.8 Virtual Stack
Function name: Virtual Stack
Function description: Virtual Stack Management (VSM) is the group management function. It allows you to automatically group switches that are in the same LAN. One switch will be the master device, and the others in this group will become the slave devices.
VSM offers a simple centralized manag ement function. You don’t n eed to remember the address of all devices, since the manager can manage the network using the address of the Master device. Instead of SNMP or Telnet UI, VSM is only available in Web UI (not SNMP or Telnet UI). When one switch becomes the Master, two rows of buttons for group devices will appear on the top of its Web UI. When you press these buttons, users can connect the Web UI of the d evices of the group in the same window without logging in these devices.
The top left button is only for the Master device. The background color of the button you press changes to repres ent that the device is under your management.
NOTE: Logging into the switch via the console will remove the grouping temporarily. Each d evice in the group will be shown as a station
address (the last number of IP Address) + device name on the button (for example, 196_LPB4008A). Otherwise, it will show ” ---- “ if no corresponding device exists.
Once the devices join the group successfully, then they are can be managed via Master device, and user will not be able to manage them via telnet/console/web individually.
Up to 16 devices can be grouped for VSM; however, only one Master is allowed to exist in each group. For Master redundancy, users may configure more than two devices as Master, but the Master device with the smaller MAC value will be the Master one. All 16 devices can become Master devices and back up each other.
Figure 4-14. Virtual stack configuration screen.
Figure 4-15.
Parameter description:
State: Activates or de-activates VSM. The default is Enable.
Role: The switch’s role in the virtual stack. There are two types of roles (master and slave). The default is Master.
Group ID: The group identifier (GID) identifies the VSM. V alid letters are A–Z , a–z, 0–9, “ - “ and “_” characters. The maximum length is 15 characters.
724-746-5500 | blackbox.com
41
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
4.3 Port
Four functions, including Port Status, Port Configuration, Simple Counter, and Detail Counter are us ed to monitor and manage ports. E ach is described in d etail in the following sections.
Port Configuration
Configuration
Status
Simple Counter
Detail Counter Power Saving
4.3.1 Port Configuration
Port Configuration changes the setting of each port. You can set/reset the several functions. They are described in detail below.
Function name: Port Configuration
Function description: Sets each port’s operation mode. The switch supports three parameters for each port: state, mode, and flow
control.
42
724-746-5500 | blackbox.com
Figure 4-16. Port configuration screen.
Chapter 4: Operation of Web-based Management
Parameter description:
Speed: S et the speed and duplex of the port. For 1 Gbps fiber, the speed is always 1000 Mbps and full duplex. For twisted pair, the speed/duplex is the combination of speed mode (10/100/1000Mbps), and duplex mode (full duplex and half duplex).
Media type NWay Speed Duplex
1000M TP ON/OFF 10/100/1000M Full for all, Half for 10/100 1000M Fiber ON/OFF 1000M Full
In Auto-negotiation mode, there is no default value. In Forced mode, the default value depends on your setting.
Flow Control: Choose from two flow control modes: Enable and Disable. If flow control is set to Enable, both users can send a PAUSE frame to the transmitting device(s) if the receiving port is too busy to handle more traffic. When flow control is set Disable, the packet is dropped if the traffic is too much to handle.
Maximum Frame: The maximum packet size is 1518–9600 (Bytes) long.
Excessive Collision Mode: If excessive collisions occur when the connection is half-duplex, choose Discard or Restart.
Discard: The “Discard” mode determines whether the MAC drop frames after an excessive collision has occurred. If set to Discard, a frame is dropped after excessive collisions. This conforms to IEEE Std 802.3 half-duplex flow control operation.
Restart: The “Restart” mode determines whether the MAC retransmits frames after an excessive collision has occurred. If set, a frame is not dropped after excessive collisions, but the backoff sequence is restarted. This is a violation of IEEE Std 802.3, but is useful in non-dropping half-duplex flow control operation.
Description: Description of device ports cannot include # % & ‘ + \.
4.3.2 Port Status
The Port Status function gathers each port’s current status information and reports its port number, media, link status, port state, auto­negotiation status, speed/duplex, Rx Pause, and Tx Pause . Media type information for the module ports 7 and 8 is also offered (see Figure 4-14).
Function name:
Port Status
Function Description:
Report the latest updated status of all ports in this switch. When the status of any one of the switch’s ports changes, the new value(s) are displayed. The current port status refreshes about every 5 seconds.
724-746-5500 | blackbox.com
43
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-17. Port status screen.
Parameter Description:
Port: Display the port number, from 1–8. Ports 7 and 8 are optional modules.
Link: Show if the link on the port is active or not. If the link is connected to a device that’s working, the Link appear as “Up”; otherwise, it will be “Down.” This is determined by the hardware on both devices of the connection.
Speed/Duplex Mode: Display the speed and duplex of all port. 10 Mbps, 100 Mbps and 1000 Mbps speeds are supported for TP media, with half duplex and full duplex. If the media is 1Gbps fiber, 1000 Mbps speed is supported only. The status of speed/duplex mode is determined by 1) the negotiation of both local port and link partner in “Auto Speed” mode or 2) user setting in “Force” mode. The local port must preset its capability.
Flow Control: Show each port’s flow control status.
There are two types of flow control in Ethernet, Backpressure for half-duplex operation and Pause flow control (IEE E802.3x) for full-duplex operation. The switch supports both of them.
Description: This is provided by users to describe device ports.
44
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-18. Port 7 detail information screen.
Parameter description of Port 7–Port 8:
Connector Type: Displays the connector type, for instance, UTP, SC, ST, LC and so on.
Fiber Type: Displays the fiber mode, for instance, Multi-Mode, Single-Mode.
Tx Central Wavelength: Displays the fiber optical transmitting central wavelength, for instance, 850-nm, 1310-nm, 1550-nm and so on.
Baud Rate: Displays the maximum baud rate of the fiber module supported, for instance, 10M, 100M, 1G and so on.
Vendor OUI: Displays the Manufacturer's OUI code which is assigned by IEEE.
Vendor Name: Displays the company name of the module manufacturer.
Vendor P/N: Displays the product name by module manufacturer.
Vendor Rev (Revision): Displays the module revision.
Vendor SN (Serial Number): Show the serial number assigned by the manufacturer.
Date Code: Show the date this SFP module was made.
Temperature: Show the current temperature of SFP module.
Vcc: Show the working DC voltage of SFP module.
Mon1(Bias) mA: Show the Bias current of SFP module.
Mon2(TX PWR): Show the transmit power of the SFP module.
724-746-5500 | blackbox.com
45
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Mon3(RX PWR): Show the receiver power of the SFP module.
4.3.3 Simple Counter
The function of Simple Counter collects any information and provides the counting about the traffic of the port, no matter the packet is good or bad.
In Figure 4-15, the window can show all ports’ counter information at the same time. Each data field has 20-digit long. If the counting is overflow, the counter will be reset and restart counting. The data is updated every time interval defined by the user. The Refresh Interval is used to set the update frequency
Function name: Simple Counter Function description: Display the summary counting of each port’s traffic, including Tx Byte, Rx Byte, Tx Packet, Rx Packet, Tx Collision, and
Rx Error Packet.
Figure 4-19. Port statistics overview screen.
Parameters description:
Packets:
Transmit: The number of packets transmitted.
Receive: The number of packets received.
Bytes:
Transmit: Total transmitted bytes.
Receive: Total received bytes.
Errors:
Transmit: Number of bad packets transmitted.
Receive: Number of bad packets received.
Drops
Transmit: Number of packets transmitted drop.
Receive: Number of packets received drop.
Auto-refresh: The simple counts will be refreshed automatically on the UI scre en.
46
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Refresh : The simple counts will be refreshed manually when a user clicks on the “Refresh” button.
Clear: The simple counts will be reset to zero when a user clicks on the “Clear” button.
4.3.4 Detail Counter
The Detail Counter function counts the port traffic, wh ether or not the packet is good or bad. In Figure 4-19, the window can show only one port counter information at the same time. To see another port’s counter, you have to pull down the list Select list, then the screen for the port you chose will appear.
Each data field list is 20-digit long. If the counting overflows, the counter will be re set and restart counting. The data is updated at every time interval defined by the user. The valid range is 3 to 10 seconds. The Refresh Interval is used to set the update frequency. Default update time is 3 seconds.
Function name: Detail Counter
Function description: Display the detailed number of each port’s traffic. In Figure 4-20, the window can show all port’s information at one
time.
Parameter description:
Rx Packets: The number of packets received.
RX Octets: Total received bytes.
Rx High Priority Pack ets: Number of Rx packets cla ssified as high priority.
Rx Low Priority Packets: Number of Rx packets classified as low priority.
Rx Broadcast: Show the number of broadcast packets received.
Rx Multicast: Show the number of multicast packets received.
Tx Packets: The number of packets tran smitted.
TX Octets: Total transmitted bytes.
724-746-5500 | blackbox.com
Figure 4-20. Detailed port statistics port 1 screen.
47
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Tx High Priority Packets: Number of Tx packets classified as high priority.
Tx Low Priority Packets: Number of Tx packets classified as low priority.
Tx Broadcast: Show the number of broadcast packets transmitted.
Tx Multicast: Show the number of transmitted multicast packets transmitted.
Rx 64 Bytes: Number of 64-byte frames in good and bad packets received.
Rx 65-127 Bytes: Number of 65 ~ 126-byte frames in good and bad packets received.
Rx 128-255 Bytes: Number of 127 ~ 255-byte frames in good and bad packets received.
Rx 256-511 Bytes: Number of 256 ~ 511-byte frames in good and bad packets received.
Rx 512-1023 Bytes: Number of 512 ~ 1023-byte frames in good and bad packets received.
Rx 1024-Bytes: Number of 1024-max_length-byte frames in good and bad packets received.
Tx 64 Bytes: Number of 64-byte frames in good and bad packets transmitted.
Tx 65-127 Bytes: Number of 65–126-byte frames in good and bad p ack ets transmitted.
Tx 128-255 Bytes: Number of 127–255-byte frames in good and bad p ack ets transmitted.
Tx 256-511 Bytes: Number of 256–511-byte frames in good and bad p ack ets transmitted.
Tx 512-1023 Bytes: Number of 512–1023-byte frames in good and bad packets transmitted.
Tx 1024-Bytes: Number of 1024-max_length-byte frames in good and bad packets transmitted.
Rx CRC/Alignment: Number of Alignment errors and CRC error packets received .
Rx Undersize: Number of short frames (<64 Bytes) with valid CRC.
Rx Oversize: Number of long frames (according to max_length register) with valid CRC.
Rx Fragments: Number of short frames (< 64 bytes) with invalid CRC.
Rx Jabber: Number of long frames (according tomax_length register) with invalid CRC.
Rx Drops: Frames dropped due to the lack of receiving buffer.
Rx Errors: Number of error packets received.
Tx Collisions: Number of collision frames transmitted.
Tx Drops: Number of frames dropped due to excessive collision, late collision, or frame aging.
Tx FIFO Drops: Number of frames dropped due to the lack of transmitting buffer.
Auto-refresh: The detail counts will be refreshed automatically on the UI screen.
Refresh: The detail counts will be refreshed manually when users click on the “Refresh” button.
Clear: The detail counts will be reset to zero when users sclick on the “Clear” button.
4.3.5 Power Saving
The Power Saving function reduces the power consumption with "ActiPHY Power Management" and "Perfect Reach Power Management." It efficiently saves the switch Power when the client is idle and detects the cable length to provide different power.
Function name: Power Saving
48
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Function description: The function uses "ActiPHY Power Management" and "Perfect Reach Power Management" to save the switch’s power consumption.
Figure 4-21. Power saving screen.
Parameter description:
Power Saving:
The parameter will consider the length of any Ethernet cable connected and adjust power usage accordingly. Shorter lengths re quire less power. link-down mode removes power for each port that do es not have a device attached.
Default: Disable.
4.4 VLAN
The switch supports Tag-based VLAN (802.1Q) and Port-based VLAN. Support 4094 active VLANs and VLAN ID 1~4094. VLAN configuration is us ed to partition your LAN into small ones as needed. Configure it properly to improve security security and increase performance but reduce VLAN management.
4.4.1 VLAN Mode
Function name:
VLAN Mode Setting
Function description:
The VLAN Mode Selection function includes five modes: Port-based, Tag- based, Metro Mode, Double-tag, and Disable. Choose one from the drop down list. Then click on the <Apply> button, and the settings will take effect immediately.
724-746-5500 | blackbox.com
49
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-22. VLAN mode.
Parameter description:
VLAN Mode:
Port-based: Port-based VLAN is defined by port. Any packet coming in or going out from any one port of a port-based VLAN will be accepted. No filtering criterion applies in port-bas ed VLAN. The only criterion is the physical port you connect to. For example, a port-based VLAN named PVLAN-1 contains port members Port 1 & 2 & 3 & 4. If you are on port 1, you can communicate with port 2&3&4. If you are on port 5, then you cannot talk to them. Each port-based VLAN must be assigned a group name. This switch can support up to maximal 24 port-based VLAN groups.
Tag-based: Tag-based VLAN identifies its member by VID. This is quite different from port-based VLAN. If there are any more rules in ingress filtering list or egress filtering list, the packet will be screened to determine if it can be forwarded. The switch supports 802.1q. For more details, see Chapter 3.
Each tag-based VLAN must be assigned a VLAN name and a VLAN ID. V alid VLAN IDs are 1–4094. User can create total up to 4094 Tag VLAN groups.
4.4.2 Tag-based Group
Function name: Tag-based Group Configuration
Function description: Tag-based VLAN Groups, You can also easily create, edit and delete a Tag-based VLAN group by pressing the <Add>, <Edit>, and <Delete> function buttons. Or, add a new VLAN group by inputting a new VLAN name and VLAN ID.
Figure 4-23. Tag-based VLAN memberships configuration screen.
50
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Parameter description:
VLAN Name: The name defined by administrator is associated with a VLAN group. Valid letters are A-Z, a-z, 0-9, “-“ and “_” characters. The maximum length is 15 characters.
VLAN ID: VLAN identifi er. Each tag-based VLAN group has a unique VID. It appears only in tag- based and Double-tag mode. IGMP-A: IGMP Aware enabl es the switch to issue IGMP host messages on behalf of hosts that the system discovered through
standard IGMP interfaces. The system acts for it s hosts. This switch’s IGMP Aware functi on “Enable” or “Disable” can be set by the VLAN group. If the VLAN group IGMP Aware is disabl ed, t he switch will stop the exchange of IGMP messages between the VLAN group members. If the VLAN group IGMP Aware is enabled, the switch will support the exchange of IGMP messages in the VLAN group members and foll ow with IGMP router port configuration, whi ch connects to a router closer to the root of the tree. This interface is the upstream int erf ace. The router on the upstream interf ace should be r unning IGMP. You enable IGMP on the interfaces that connect the system to it s hosts that are farther away from the root of the tr ee. Refer to Section 3.15.1 for a detailed IGMP Aware function description.
Member Port: This is used to enable or disable if a port is a member of the new added VLAN. “Enable” means it is a member of the VLAN. Click on the check box () beside the port x to enable it.
Add new VLAN: Click on <Add new VLAN> to create a new Tag-based VLAN. Input the VLAN name and the VID. Configure t he SYM­VLAN function and choose t he mem ber by clicking on the check box beside the port No.. Then, press the <Apply> button and the setting will take effect.
Delete Group: Just press the <Delete> button to remove the selected group entry from the Tag-based
724-746-5500 | blackbox.com
Figure 4-24. Create VLAN group.
group table.
51
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-25. Port-based VLAN memberships configuration.
If you need use the PVLA (Private VLAN) function on the switch, follow the process described below:
NOTE:
1. Create a VLAN as a primary VLAN, assign the VLAN ID as 2, then instruct the Private VLAN to enable Private VLAN service.
2. Assign port members to the VLAN2.
Figure 4-26. Create VLAN group.
3. Assign isolated ports.
Figure 4-27. Port isolation configuration.
Press th e “Save” button to complete the PVLAN configuration process.
4.4.3 Port-based Group
Function name: Port-based Group Configuration
Function description: Shows the information for the existing port-bas ed VLAN groups. To create, edit, and delete a Port-based VLAN group, press the <Add>, <Edit>, and <Delete> function buttons. To add a n ew VLAN group, input a new VLAN n ame.
52
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-28. Port-based VLAN memberships configuration.
Parameter description:
VLAN Name: The name defined by the administrator is associated with a VLAN group. Valid letters are A–Z, a–z, 0–9, “ - “ and “_” characters. The maximum length is 15 characters.
Member Port: Enable or disable port members in the new added VLAN. “Enable” means it is a member of the VLAN. Just click on the check box () beside the port x to enable it.
Add new VLAN: Create a new Port-based VLAN. Input the VLAN name and choose the member by clicking on the check box beside the port No., th en , pres s the <Apply> button and the s etting will tak e effect.
Delete Group:
Press th e <Delete> button to remove the selected group entry from the Port-based group table.
Figure 4-29. Create VLAN group.
Figure 4-30. Port-based VLAN memberships configuration.
724-746-5500 | blackbox.com
53
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
4.4.4 Ports
Function name: VLAN Port Configuration
Function description: In VLAN Tag Rule S etting, users can input the VID number for each port. The VID numbers range from 1 to
4094. Users also can assign ingres s filtering rules to each port. There are two ingress filtering rules that apply to the switch. The Ingress Filtering Rule 1 is “forward only packets with VID matching this port’s configured VID.” The Ingress Filtering Rule 2 is “drop untagged frame.” You can also select each port’s role: Access, Trunk, or Hybrid.
Figure 4-31. VLAN port configuration screen.
Parameter description: Port 1-8: Port number.
VLAN Aware: Forward packets based on IEEE 802.1Q VLAN tag.
Ingress Filtering: Discard other VLAN group packets, only forward packets belonging to this VLAN group.
Frame Type: All: Forward all tagged and untagged packets.
Tagged: Forward tagged packets only and discard untagged packets.
PVID: This PVID rang e is 1–4094. Before you set a number x as PVID, you must create a Tag-based VLAN with VID x. For example, if port x receives an untagged packet, the switch will apply the port x’s PVID (assume it is VID y) to tag this packet, and the packet then will be forwarded as a tagged packet with VID y.
Role: This is a port egress rule. Choose Access, Trunk, or Hybrid. Access means the outgoing packets carry no VLAN tag header. Trunk means the outgoing packets must carry a VLAN tag header. If packets have double VLAN tags, one will be dropped and the other will not be dropped. Hybrid is similar to Trunk, and both will tag-out. When the port is set to Hybrid, its packets will be untagged if the outgoing packets’ tagged VID is the same as the one in this port’s Untagged VID.
Untag VID: Valid range is 1–4094. It works only when Role is s et to Hybrid.
Double Tag: Double-tag mode belongs to the tag-based mode; however, it would treat all frames as untagged, which means that tags with PVID will be added into all packets. Then, these packets will be forwarded as a Tag-based VLAN. The incoming packets with tag will become the double-tag ones. Scroll to en able the function. The default is Disable.
54
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
4.4.5 Management VLAN
Function name: Management VLAN
Function description: Used to assign a specific VLAN for management purpose.
Figure 4-32. Management VLAN screen.
Parameter description: VID: Specific Management VLAN ID.
4.5 MAC
MAC Table Configuration gathers many functions, including MAC Table Information, MAC Table Maintenance, Static Forward, Static Filter and MAC Alias, which cannot be categorized to a function type. They are described below.
4.5.1 Mac Address Table
Function name: MAC Address Table Information
Function Description: This function can allow the user to set up the MAC Table processing mechanis. An idle MAC address exceeding MAC Address Age-out Time will be removed from the MAC Table. The range of Age-out Time is 10-1000000 seconds, and the setup of this time will have no effect on static MAC addresses.
In addition, th e number of MACs that each port can learn are limited.
724-746-5500 | blackbox.com
55
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-33. MAC address table configuration screen.
Parameter description:
Aging Time: Delete a MAC address idling for a period of time from the MAC Table, which will not affect static MAC address. Range of MAC Address Aging Time is 10-1000000 seconds. The default Aging Time is 300 seconds.
Disable automatic aging: Stop the MAC table aging timer. The learned MAC address will not age out automatically.
Auto: Enable this port’s MAC address dynamic learning mechanism.
Disable: Disable this port’s MAC address dynamic learning mechanism, only support static MAC address s ettings.
Secure: Disable this port’s MAC address dynamic learning mechanism and copy the dynamic learning packets to a CPU.
Save: Save MAC Address Table configuration.
Reset: Reset MAC Address T able configuration.
4.5.2 Static Filter
Function name: Static Filter
Function Description: Static Filter is a function that denies the packet forwarding if the pack et’ s MAC Address is listed in the filtering Static Filter table. U s er maintain th e table by filling in MAC Address , VID (VLAN ID), and Alias fi eld s individually. Or delete the existing entry by clicking on the <Delete> button.
56
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-34. Static filter screen .
Parameter description: MAC is a six-byte long Ethernet hardware address that’s usually expressed by hex and separated by hyphens. For example, 00 – 40 - C7 - D6 – 00 – 02.
VID: VLAN identifier. This will be filled only when tagged VLAN is applied. Valid range is 1–4094.
Alias: MAC alias name you assign.
4.5.3 Static Forward
Function Name: Static Forward
Function Description: Static Forward is a function that allows the user in the static forward table to access a specified port of the switch. The Static Forward table associated with a specified port of a switch is set up by manually inputting a MAC address and its alias name.
When a MAC addres s is assign ed to a specific port, all of the switch’s traffic s ent to this MAC addres s will be forw ard ed to this port.
To add a MAC address entry in the allowed table, you need to fill in four parameters: MAC address, associated port, VID and Alias. To remove a MAC address, select the existing MAC address entry you want and click on the <Delete> button.
724-746-5500 | blackbox.com
57
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-35. Static forward screen.
Parameter description: MAC is a six-byte long Ethernet hardware address that’s usually expressed by hex and separated by hyphens. For example, 00 – 40 - C7 - D6 – 00 – 01.
Port No: The port number of the switch is 1–8.
VID: VLAN identifier. This will be filled only when tagged VLAN is applied. V alid range is 1– 4094.
Alias: MAC alias name you assign.
4.5.4 MAC Alias
Function name: MAC Alias
Function description: MAC Alias function is used to let you assign MAC address a plain English name. This will help you tell which MAC address belongs to which user in the illegal access report. At the initial time, it shows all pairs of the existing alias name and MAC address.
There are three MAC alias functions in this function folder, including MAC Alias Add, MAC Alias Edit, and MAC Alias Delete. Click on the <Create/Edit> button to add/modify a new or an existing alias name for a specified MAC address , or mark an existed entry to delete it. The alias name must be composed of A-Z, a-z and 0-9 only and can be a maximum 15 characters long.
58
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-36. MAC alias screen.
Parameter description: MAC Address is a six-byte long Ethernet hardware address and usually expressed by hex and separated by hyphens. For example, 00 – 40 - C7 - D6 – 00 – 01.
Alias: MAC alias name you assign.
NOTE: If there are too many MAC addresse s alre ady in the table, type in the MAC address and alias name directly.
4.5.5 MAC Table
Function name: MAC Table
Function Description: Display the static or dynamic learning MAC entry and the state for the selected port.
724-746-5500 | blackbox.com
Figure 4-37. MAC table information screen.
59
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Parameter description:
Alias: MAC alias name you assign.
MAC address: Display the MAC address of one entry you selected from the MAC entries table.
Port: The port for the searched MAC Entry.
VID: VLAN identifier. This will be filled only when tagged VLAN is applied. V alid range is 1– 4094.
Status: Dynamic or Static MAC address information.
Refresh: The Refresh function can help you see the current MAC Table status.
Clear: Clears the selected entry.
Previous Page: Move to the previous page.
Next Page: Move to the next page.
4.6 PoE
Function name: PoE Configuration
Function description: In the PoE Port Management function, user can configure the PoE s ettings.
The switch complies with IEEE 802.3af protocol and is capable of detecting automatically whether the device linked to the port on the switch is a PD (Powered Device) or not. The switch also manages the power supplement based on the Class of the PD, and it will stop supplying the power once the power required by the PD exceeds the Class, or a Short Circuit or over temperature occurs.
Parameter description:
Power Res ervation: The Power Reservation means the switch is ready to link and supply the power to the PD. The latter means the all ports are supplying a percentage of the power reservation
Port: The port that supplies the power to the PD. The latter means the port is supplying the power.
PoE Enabled: Enables which port supply the power to the PD.
60
724-746-5500 | blackbox.com
Figure 4-38. PoE configuration.
Chapter 4: Operation of Web-based Management
Delivering Power [W]: Displays which port supplies the PD Power and shows the power consumed by the port. Current (mA): The current supplied to the PD by the port.
PD Class: The Class of the PD linked to the switch’s port.
Priority: Choose from three options: Normal, Low, and High. Default is Normal. The switch will stop supplying the power to the port based on the order of the priority LowNormalHigh in case total power required by all PDs linked to the switch exceeds the power limit. IFf the ports have the same priority, then the switch will stop supplementing power from the port with the highest port id (81).
Allocation (W): Th e power consumed by the port.
4.7 GVRP
GVRP is an application bas ed on Generic Attribute Registration Protocol (GARP), mainly used to automatically and dynamically maintain the group membership information of the VLANs. The GVRP provides the VLAN registration service through a GARP application. It uses GARP Information Declaration (GID) to maintain the ports associated with their attribute database and GARP Information Propagation (GIP) to communicate among switches and end stations. With GID information and GIP, GVRP state machines maintain the contents of Dynamic VLAN Registration Entries for each VLAN and propagate this information to other GVRP-aware devices to setup and update their knowledge database, the s et of VLANs associated with currently active members, and through which ports these members can be reached.
In GVRP Configuration function folder, there are three functions supported: GVRP Config, GVR P Counter, and GVRP.
4.7.1 Config
Function name: GVRP Configuration
Function description: GVRP Config is used to configure each port’s GVRP operation mode. S even parameters need to be configured as described below.
Parameter description:
GVRP State: This function lets you enable or disable the GVRP function. From the drop-down list, click on the the <Downward> arrow key to choose “Enable” or “Disable.” Then, click on the <Apply> button and the system will take effect immediately.
Join Time: U sed to declare the Join Time in unit of centisecond. Valid time range: 20–100 centisecond, Default: 20 centisecond.
Leave Time: Used to d eclare the Leave Time in unit of centisecond. Valid time range: 60–300 centisecond, Default: 60 ce ntisecond.
724-746-5500 | blackbox.com
Figure 4-39. GVRP configuration screen.
61
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Leave All Time: A time period to announce that all registered devices are going to be de-registered. If someone still issues a new join, then a registration will be kept in the switch. Valid range: 1000–5000 unit time, Default: 1000 unit time.
Default Applicant Mode: The participent type. S elect from two modes: normal participant and non-participant.
Normal: Normal Participant. In this mode, the switch participates normally in GARP protocol exchanges. The default setting is Normal.
Non-Participant: In this mode, the switch does not send or reply any GARP messages. It just listens to messages and reacts to the received GVRP BPDU.
Default Registrar Mode: The Registrar type. Choose from three administrative control value modes: normal registrar, fixed registrar, and forbidden registrar.
Normal: Normal Registration. The R egistrar responds normally to incoming GARP messages. The default setting is Normal.
Fixed: Registration Fixed. The Registrar ignores all GARP messages, and all members remain in the registered (IN) state.
Forbidden: Registration Forbidden. The Registrar ignores all GARP messages, and all members remain in the unregistered ( EMPTY) state.
Restricted Mode: This function restricts a dynamic VLAN from being created when this port receives a GVRP PDU. Choose Enable or Disable.
Disabled: In this mode, a dynamic VLAN will be created when this port received GVRP PDU. The default setting is Normal.
Enabled: In this mode, the switch does not create a dynamic VLAN when this port receives GVRP PDU. Unless a dynamic VLAN GVRP PDU message exists as a static VLAN in the switch, this port will be added into the static VLAN members dynamically.
4.7.2 Counter
Function name:
Function description:
monitor the GVRP actions. Actually, they are GARP packets.
GVRP Counter
All GVRP counters are mainly divided into Received and Transmitted. These two categories enable you to
Parameter description:
Total GVRP Packets: Total GVRP BPDU received by the GVRP application.
Invalid GVRP Packets: Number of invalid GARP BPDU received by the GARP application.
62
724-746-5500 | blackbox.com
Figure 4-40. GVRP counter screen.
Chapter 4: Operation of Web-based Management
LeaveAll Message Packets: Number of GARP BPDU with Leave All message received by the GARP application.
JoinEmpty Message Packets: Number of GARP BPDU with Join Empty message received by the GARP application.
JoinIn Message P ackets: Number of GARP BPDU with Join In message received by the GARP application.
LeaveEmpty Mes sage Packets: Number of GARP BPDU with Leave Empty message received by the GARP application.
Empty Message Packets: Number of GARP BPDU with Empty message received by the GARP application.
4.7.3 Group
Function name: GVRP Group VLAN Information
Function description: Show the group members and their information.
Figure 4-41. GVRP VLAN group information.
Parameter description:
VID: VLAN identifier. When GVRP group is created, each dynamic VLAN group owns its VID. Valid range is 1–4094.
Member Port: Members belonging to the same dynamic VLAN group.
Edit Administrative Control: When you create GVRP group, you can use the Administrative Control function to change the Applicant Mode and the Registrar Mode of a GVRP group member.
4.8 QoS (Quality of Service) Configuration
The switch supports four QoS queues per port with strict or weighted fair queuing scheduling. There are 8 QoS Control Lists (QCL) for advanced programmable QoS classification, based on IEEE 802.1p, Ethertype, VID, IPv4/IPv6 DSCP, and UDP/TCP ports and ranges.
High flexibility in the classification of incoming frames to a QoS class. The QoS classification looks for information up to Layer 4, including IPv4 and IPv6 DSCP, IPv4 TCP/UDP port numbers, and user priority of tagged frames. This QoS classification mechanism is implemented in a QoS control list (QCL). The QoS class assigned to a frame is used throughout the device for providing queuing, scheduling, and congestion control guarantees to the frame according to what was configured for that specific QoS class.
The switch supports advanced memory control mechanisms that provide excellent performance of all QoS classes under any traffic scenario, including jumbo frame. A super priority queue has dedicated memory and strict highest priority in the arbitration. The ingress super priority queue allows traffic recognized as CPU traffic to be received and queued for transmission to the CPU even when all the QoS class queues are congested.
4.8.1 Ports
Function name: Port QoS Configuration
Function description: Configure each port’s QoS behavior. There are four QoS queues per port with strict or weighted fair queuing scheduling. There are 24 QoS Control Lists (QCL) for advance programmable QoS classification, based on IEEE
802.1p, Ethertype, VID, IPv4/IPv6 DSCP, and UDP/TCP ports and ranges.
724-746-5500 | blackbox.com
63
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-42. Port QoS configuration.
Parameter description:
Number of Classes: 1/2/4
Port: Users can choose ports (1–8) respectively with Priority Class for Per Port Priority function.
Default Class: Users can set up High Priority or Low Priority for each port respectively.
Low/Normal/Medium/High
QCL: The number of QCL rules 1–24. Each port has to apply one of the QCL rules for QoS behavior.
User priority: The user priority value 0~7 (3 bits) is used as an index to the eight QoS class values for VLAN tagged or priority tagged frames.
Queuing Mode: There are two Scheduling Methods, Strict Priority and Weighted Fair. The default is Strict Priority. After you choose a Scheduling Method, click on the Apply button.
Queue Weighted: Th ere are four queues per port and four classes weighted number (1/2/4/8) for each queues. Select the weighted number when the scheduling method is s et to “Weighted Fair” mode.
4.8.2 Qos Control List
Function name: QoS Control List Configuration
Function description: The switch supports four QoS queues per port with strict or weighted fair queuing scheduling. Th ere are 24 QoS Control Lists (QCL) for advance programmable QoS classification, b ased on IEEE 802.1p, Eth er Type, VID, IPv4/IPv6 DSCP, and UDP/TCP ports and ranges.
64
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
y
Figure 4-43. QoS control list configuration screen.
Insert an entry
Move up this entr
Edit this entry
Figure 4-44. Entry priority.
QCE Configuration: The QCL se arches of 12 QoS Control Entries (QCEs) from the top of the list to the bottom of the list for a match. The first matching QCE determines the frame’s QoS classification. The QCE ordering is important for the resulting QoS classification algorithm. If no matching QCE is found, the default QoS class is used in the port QoS configuration.
De l e te this entry
724-746-5500 | blackbox.com
Figure 4-45. QCE configuration screen, QCE type.
65
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-46. QCE configuration screen, port range.
Figure 4-47. QCE configuration screen, DSCP type.
Figure 4-48. QCE configuration screen, ToS priority class.
66
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-49. QCE configuration screen, tag priority class.
Parameter description:
QCL#:
QCL number: 1–24
QCE Type: Ethernet Type/VLAN ID/UDP/TCP Port/DSCP/ToS/Tag Priority
Ethernet Type Value: The configurable range is 0x600–0xFFFF. Well known protocols already assigned EtherType values. The commonly used values in the EtherType field and corresponding protocols are listed below:
Ethertype (Hexadecimal)
Protocol
0x0800 IP, Internet Protocol 0x0801 X.75 Internet
0x0802 NBS Internet 0x0803 ECMA Internet 0x0804 Chaosnet 0x0805 X.25 Level 3 0x0806 ARP, Address Resolution Protocol. 0x0808 Frame Relay ARP [RFC1701] 0x6559 Raw Frame Relay [RFC1701] 0x8035 DRARP, Dynamic RARP. RARP, Reverse Address Resolution Protocol. 0x8037 Novell Netware IPX
724-746-5500 | blackbox.com
67
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
0x809B EtherTalk (AppleTalk over Ethernet) 0x80D5 IBM SNA Services over Ethernet 0x 80F3 AARP, AppleTalk Address Resolution Protocol. 0x8100 IEEE Std 802.1Q - Cust ome r VLA N Tag Type. 0x8137 IPX, Internet Packet Exchange. 0x 814C SNMP, Simple Network Management Protocol. 0x86DD IPv6, Internet Protocol version 6. 0x880B PPP, Point-to-Point Protocol. 0x 880C GSMP, General Switch Management Protocol. 0x8847 MPLS, Multi-Protocol Label Switching (unicast). 0x8848 MPLS, Multi-Protocol Label Switching (multicast). 0x8863 PPPoE, PPP Over Ethernet (Discovery Stage). 0x8864 PPPoE, PPP Over Ethernet (PPP Session Stage). 0x88BB LWAPP, Light Weight Access Point Protocol. 0x88CC LLDP, Link Layer Discovery Protocol. 0x8E88 EAPOL, EAP over LAN. 0x9000 Loopback (Configuration Test Protocol) 0xFFFF reserved.
VLAN ID: The configurable VID rang e: 1–4094
UDP/TCP Port: To select the UDP/TCP port classification method by Range or Specific.
UDP/TCP Port Range: The configurable ports range: 0–65535. You can refer to following UDP/TCP port-numbers information.
http://www.iana.org/assignments/port-numbers
UDP/TCP Port No.: The configurable specific port value: 0–65535
DSCP Value: The configurable DSCP value: 0–63
Traffic Class: Low/Normal/Medium/High
4.8.3 Rate Limiters
Function name: Rate Limit Configuration
Function description: Each port includes an ingress policy, and an egress shaper, which can limit the bandwidth of received and transmitted frames. Ingress policer or egress shaper operation is controlled per port in the Rate Limit Configuration.
68
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-50. Rate limit configuration.
Parameter description:
Port #: Port number.
Ingress Enabled: Ingress en abled to limit ingress bandwidth by policy rate.
Ingress Rate: Th e configurable ingress rate range: 500 Kbps–1000000 kbps; 1 Mbps–1000 Mbps
Ingress Unit: There are two units for ingress rate limit: kbps/Mbps
Engress Enabled: Engress enabled to limit egress bandwidth by shaper rate.
Engress Rate: The configurable engress rate rang e: 500 kbps–1000000 kbps; 1 Mbps–1000 Mbps
Engress Unit: There are two units for egress shaper rate limit: kbps/Mbps.
4.8.4 Storm Control
Function name: Storm Control Configuration
Function description: The switch supports storm ingress policy control function to limit the Flooded, Multicast, and Broadcast and prevent storms.
724-746-5500 | blackbox.com
Figure 4-51. Storm control configuration.
69
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Parameter description:
Frame Type: There three storm frame types: Flooded unicast/Multicast/Broadcast
Status: Check on square to enable.
Rate (pps): Refer to the following rate configurable value list (the units are Packets Per Second [pps]): 1/2/4/8/16/32/64/128/256/512/1K/2K/4K/8K /16K /32K /64K /128K/256K /512K/1024K
4.8.5 Wizard
Function name: Wizard
Function description: The QCL configuration Wizard configures the target users’ QCL rules for QoS configuration. The wizard provides typical network application rules.
Parameter description:
Please s elect an Action: User need to select an action from the following items, then click on <Next> to finish QCL configuration:
• Set up Port Policies
• Set up Typical N etwork Application Rules
• Set up TOS Precedence Mapping
• Set up VLAN Tag Priority Mapping
Next: Go to next step.
Cancel: Abort current configuration back to previous step.
Back: Back to previous screen.
70
724-746-5500 | blackbox.com
Figure 4-52. QCL configuration screen.
Chapter 4: Operation of Web-based Management
Parameter description:
QCL ID: QoS Control List (QCL): 1–24
Port Member: Port Member: 1–24
724-746-5500 | blackbox.com
Figure 4-53. Set up Port Policies screen.
71
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-54. Set up Port Policies Finish screen.
Parameter description: Wizard Again: Click on the <Wizard Again> button to go back to the QCL Configuration Wizard.
Finish: When you click on <Finish>, the parameters will be set according to the wizard configuration and shown on the screen. Click on <Apply> to confirm the changed parameters.
72
724-746-5500 | blackbox.com
Figure 4-55. Set up Port Policies.
Chapter 4: Operation of Web-based Management
Figure 4-56. Set up Typical Network Application Rules.
Parameter description:
Audio and Video: QuickTime 4 Server/MSN Messenger Phone/Yahoo Messenger Phone/Napster/ Real Audio
Games: Blizzard Battlenet (Diablo2 and StarCraft)/Fighter Ace II/Quake2/Quake3 /MSN Game Zone
User Definition: Ethernet Type/VLAN ID /UDP/TCP Port/DSCP
Ethernet Type Value: Type Range: 0x600–0xFFFF
VLAN ID: VLAN ID R ange: 1 –4094
UDP/TCP Port: Two Mode: Range/Specific
UDP/TCP Port Range: Port Range: 0–65535
UDP/TCP Port No.: Port Range: 0–65535
DSCP Value: DSCP Value Range: 0–63
724-746-5500 | blackbox.com
73
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-57. Set up Typical Network Application Rules.
Parameter description:
QCL ID: QCL ID Range: 1–24
Traffic Class: There are four classes: Low/Normal/Medium/High
Figure 4-58. Set up Typical Network Application Rules Finish.
74
724-746-5500 | blackbox.com
Parameter description: QCL #: QoS Control List (QCL): 1–24
Chapter 4: Operation of Web-based Management
Figure 4-59. Set up TOS Precedence Mapping.
Parameter description:
QCL ID: QoS Control List (QCL): 1–24
TOS Precedence 0–7 Class: Low/Normal/Medium/High
724-746-5500 | blackbox.com
75
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-60. S et up VLAN T ag Priority Mapping.
Parameter description:
QCL ID: QoS Control List (QCL): 1–24
Tag Priority 0–7 Class: Low/Normal/Medium/High
4.9 SNMP Configuration
Any Network Management System (NMS) running Simple Network Management Protocol (SNMP) can manage the Managed devices equipped with SNMP agent, provided that the Management Information Base (MIB) is installed correctly on the managed devices. The SNMP is a protocol that is used to govern the transfer of information between SNMP manager and agent,. It traverses the Object Identity (OID) of the management Information Base (MIB), described in the form of SMI syntax. The SNMP agent running on the switch responds to the request issued by the SNMP manager.
The NMS issues the trap information. The switch supports a switch to turn on or off the SNMP agent. If you set the field SNMP to “Enable,” the SNMP agent will start. You can access all supported MIB OIDs, including RMON MIB, via SNMP manager. If the field SNMP is set to “Disable,” the SNMP agent will be de-activated, and the related Community Name, Trap Host IP Address , Trap, and all MIB counters will be ignored.
Function name: SNMP Configuration
Function description: This function is used to configure SNMP settings, community name, trap host, and public traps. An SNMP manager must pass the authentication by identifying both community names, then it can access the MIB of the target device. Both parties must have the same community name. Once you complete the setting, click on the <Apply> button, and the s etting takes effect.
76
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-61 Community and trap host setting.
Parameters description:
SNMP: Used to activate or deactivate SNMP. The default is Enable.
Get/Set/Trap Community: Community name is used as password for authenticating if the requesting network management unit belongs to the same community group. If they both don’t have the same community name, they don’t belong to the s ame group. In this case, th e requesting network management unit cannot access the device with a different community name via SNMP protocol; If they both have the same community name, they can talk each other.
Community name is u ser-definable with a maximum length of 15 characters and is case-sensitive. No blank sp aces are permitted in the community name string. Any printable character is permitted.
The community name for each function works independently. E ach function has its own community name. The community name for GET only works for the GET function and can’t be applied to other functions such as SET and Trap.
Default SNMP function: Enable
Default community name for GET: public
Default community name for S ET: private
Default community name for Trap: public
Default Set function : Enable
Default trap host IP address: 0.0.0.0
Default port number :162
Trap: 6 trap hosts supported in the switch. Each has its own community name and IP address and is user-definable. To set up a trap host means to create a trap manager by assigning an IP address to host the trap message. The trap host is a network management unit with SNMP manager receiving the trap message from the managed switch with SNMP agent issuing the trap message. 6 trap hosts can prevent losing an important trap mess age.
For each public trap, the switch supports the trap event Cold Start, Warm Start, Link Down, Link Up, and Authentication Failure Trap. They can be enabled or disabled individually. When enabled, the corresponding trap will actively s end a trap message to the trap host
724-746-5500 | blackbox.com
77
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
when a trap occurs. If all public trap s are disabled, no public trap message will be sent. The Enterprise (no. 6 ) trap is classified as a private trap, and is listed in the Trap Alarm Configuration function folder. Default for all public traps: Enable.
4.10 ACL
The LPB4008A switch access control list (ACL) is probably the most commonly used object in the IOS. It is used for packet filtering but also for selecting types of traffic to be analyzed, forwarded, or influenced in some way.
The ACLs are divided into EtherTypes. IPv4, ARP protocol, MAC, and VLAN parameters, etc. Here we will just go over the standard and extended access lists for TCP/IP . As you create ACEs for ingress classification, you can assign a policy for each port. The policy number is 1–8 ; however, each policy can be applied to any port. This makes it very easy to determine what type of ACL policy you will be working with.
4.10.1 Ports
Function name: ACL Port Configuration
Function description: The switch ACL function supports up to 128 Access Control Entries (ACEs), using 128 shared ACEs for ingress classification. You can create an ACE and assign this ACE for each port with <Any>, assign this ACE for a policy, or assign this ACE for a port. Th ere are 8 policies, each port can s elect one of policy, then decides which of the following actions would take according to the packet’s IPv4, EtherType, ARP Protocol, MAC Parameters, and VLAN parameters:
Packet Deny or Permit
Rate Limiter (Unit: pps)
Port Copy (1–8)
Parameter description:
Port #: Port number: 1–8
Policy ID: Policy ID range: 1–8
Action: Permit or Deny forwarding the met ACL packets
Rate Limiter ID: Disabled: Disable Rate Limitation
Rate Limiter ID Range: 1~16. To select one of rate limiter ID for this port, it will limit met ACL packets by rate limiter ID configuration.
78
724-746-5500 | blackbox.com
Figure 4-62. ACL ports configuration.
Chapter 4: Operation of Web-based Management
Port Copy: Disabled: Disable to copy the met ACL packets to a specific port.
Port number: 1–8. Copy the met ACL packets to the selected port.
Counter: The counter will increase from its initial value 0, when this port receives one of the met ACL packets, the counter value will increase +1.
4.10.2 Rate Limiters
Function name:
ACL Rate Limiter Configuration
Function description:
There are 16 rate limiter IDs. You can assign one limiter ID for each port. The rate limit configuration unit is Packet Per Second (pps).
Parameter description:
Rate Limiter ID: ID Range: 1–16
Rate(pps): 1/2/4/8/16/32/64/128/256/512/1K/2K/4K/8K/16K/ 32K/64K/128K/256K/512K/1024K
724-746-5500 | blackbox.com
Figure 4-63. ACL rate limiter configuration.
79
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
y
4.10.3 Access Control List
Function name: ACL Rate Limiter Configuration
Function description: The switch ACL function supports up to 128 Access Control Entries (ACEs), using the sh ared 128 ACEs for ingress classification. You can create an ACE and assign this ACE for each port with <Any>, assign this ACE for a policy, or assign this ACE for a port. There are 8 policies. Each port can select one policy, then decide which Permit/Deny, Rate Limitation, and Port Copy actions to take according to the ACL configuration packet’s IPv4, EtherType, ARP Protocol, MAC Parameters, and VLAN parameters.
Figure 4-64. Ingress Port.
Insert an entry
Edit this entry
Figure 4-65. Entry screen.
Parameter description:
Ingress Port:
Configurable Range: Any/Policy 1–8 /Port 1–8
Any: Apply this ACE rule for e ach port ingress classification
Policy 1-8: Apply this ACE rule for specific policy
Port 1-8: Apply this ACE rule for sp ecific port ingress classification
Move up this entr
Del e te this e n try
80
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-67. Access control list configuration.
Parameter description:
Frame Type: Any/Ethernet Type/ARP/IPv4
Any: Includes all frame types.
Ethernet Type: Includes all Eth ernet frame types.
ARP: Includes all ARP protocol frame types.
IPv4: Includes all IPv4 protocol frame types.
Figure 4-66. Ingress Port.
724-746-5500 | blackbox.com
81
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-68. Frame Type.
Figure 4-69. SMAC filter value.
Figure 4-70. Ethernet type parameters screen.
82
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-71. ARP parameters.
Figure 4-72. ARP request/reply.
724-746-5500 | blackbox.com
Figure 4-73. ARP sender IP filter.
83
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-74. ARP target IP filter.
Figure 4-75. ARP sender IP address.
84
724-746-5500 | blackbox.com
Figure 4-76 ARP sender IP filter.
Figure 4-77. ARP target IP filter.
Chapter 4: Operation of Web-based Management
Figure 4-78 AR P RARP DMAC match.
Figure 4-79. ARP IP/ Ethernet length.
Figure 4-80. ARP IP.
724-746-5500 | blackbox.com
Figure 4-81. ARP Ethernet.
85
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-82. ARP Ethernet.
86
724-746-5500 | blackbox.com
Figure 4-83. IPv4.
Chapter 4: Operation of Web-based Management
Figure 4-84. IPv4 protocol filter.
Figure 4-85. IPv4 ICMP parameters.
Figure 4-86. IPv4 ICMP type filter.
724-746-5500 | blackbox.com
Figure 4-87 IPv4. ICMP type value.
Figure 4-88. IPv4 ICMP code filter.
87
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-89. IPv4 ICMP code valu e.
Figure 4-90. IPv4 UDP parameters.
Figure 4-91. IPv4 UDP dest. Port filter.
88
724-746-5500 | blackbox.com
Figure 4-92. IPv4 UDP source port filter.
Figure 4-93. IPv4 UDP source port range.
Chapter 4: Operation of Web-based Management
Figure 4-94. IPv4 UDP dest. Port filter.
Figure 4-95. IPv4 UDP dest. port number.
Figure 4-96. IPv4 UDP dest. port range.
724-746-5500 | blackbox.com
Figure 4-97. IPv4 TCP parameters.
89
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-98. IPv4 TCP dest. port filter.
Figure 4-99. IPv4 TCP FIN.
90
724-746-5500 | blackbox.com
Figure 4-100. TCP parameters.
Chapter 4: Operation of Web-based Management
Figure 4-101. IPv4 dest. port range.
Figure 4-102. IPv4 TCP FIN.
724-746-5500 | blackbox.com
Figure 4-103. IP parameters.
91
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-104. IPv4 IP TTL.
Figure 4-105. IPv4 IP Fragment.
92
724-746-5500 | blackbox.com
Figure 4-106. IPv4 SIP Filter.
Chapter 4: Operation of Web-based Management
Figure 4-107. IPv4 SIP Filter, Any.
Figure 4-108. IPv4 SIP Filter, Host
724-746-5500 | blackbox.com
Figure 4-109. IPv4 SIP Filter, Network.
93
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-110. IPv4 DIP Filter.
Figure 4-111. IPv4 DIP address.
94
724-746-5500 | blackbox.com
Figure 4-112. IPv4 DIP address.
Chapter 4: Operation of Web-based Management
Figure 4-113. Action.
Figure 4-114. Rate Limiter.
724-746-5500 | blackbox.com
95
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Figure 4-115. Port Copy.
Figure 4-116. DMAC Filter.
96
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
Figure 4-117. VLAN ID Filter.
Figure 4-118. VLAN ID Filter.
724-746-5500 | blackbox.com
Figure 4-119. Tag Priority.
97
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Function name: ACE Configuration
Function description: The switch ACL function supports up to 128 Access Control Entries (ACEs), using the sh ared 128 ACEs for ingress classification. You can create an ACE and assign this ACE for each port with <Any>, assign this ACE for a policy, or assign this ACE for a port. There are 8 policies. Each port can select one policy, then decide to Permit/Deny, Rate Limit, and Port Copy according to the ACL configuration packet’s IPv4, EtherType, ARP Protocol, MAC Parameters and VLAN parameters.
Parameter description:
Ingress Port: Any/Policy 1-8/Port 1-8
Any: Apply this ACE rule for e ach port ingress classification
Policy 1–8: Apply this ACE rule for a specific policy
Port 1-24: Apply this ACE rule for a specific port ingress classification
IP Protocol Filter: Any/Ethernet Type/ARP/IPv4
Any: Includes all frame types
Ethernet Type: Includes all Ethernet frame types ARP: Includes all ARP protocol frame types IPv4: Includes all IPv4 protocol frame types
MAC Parameters: (When Frame Type = Any)
DMAC Filter: Any/MC/BC/UC
Any: Includes all destination MAC addresses
MC: Includes all Multicast MAC addresses
BC: Includes all Broadcast MAC addresses
UC: Includes all Unicast MAC addresses
MAC Parameters: (When Frame Typ e = Ethernet Type)
SMAC Filter: Any/Specific
Any: Includes all source MAC addresses
Specific: The source MAC address specific to the SMAC value.
DMAC Filter: Any/MC/BC/UC/Specific
Any: Includes all destination MAC addresses MC: Includes all Multicast MAC addresses BC: Includes all Broadcast MAC addresses UC: Includes all Unicast MAC addresses Specific: The destination MAC addresses specific to the DMAC value.
MAC Parameters: (When Frame Type = ARP)
SMAC Filter: Any/Specific
Any: Includes all source MAC addresses
Specific: The source MAC addresses specific to the SMAC value.
DMAC Filter: Any/MC/BC/UC
Any: Includes all destination MAC addresses
98
724-746-5500 | blackbox.com
Chapter 4: Operation of Web-based Management
MC: Includes all Multicast MAC addresses BC: Includes all Broadcast MAC addresses
UC: Includes all Unicast MAC addresses
MAC Parameters: (When Frame Type = IPv4)
DMAC Filter: Any/MC/BC/UC
Any: Includes all destination MAC addresses
MC: Includes all Multicast MAC addresses
BC: Includes all Broadcast MAC addresses UC: Includes all Unicast MAC addresses
Ether Type Parameters: (When Frame Type = Ethernet Type)
EtherType Filter: Any/Specific
Any: Includes all Ethernet frame types
Specific: Depends on the Ethernet Type Value.
Ethernet Type Value: 0x600–0xFFFF
ARP Parameters: (When Frame Type = ARP)
ARP/RAR P: Any/ARP/RARP/Other
Any: Includes all ARP/RARP protocol frame types
ARP: Includes all ARP protocol frame types
RARP: Includes all RARP frame types
Other: Includes other frame types except ARP/RARP protocol
Request/Reply: Any/Request/Reply
Any: Includes all ARP/RARP Requests and Replies
Request: Includes all ARP/RARP request frames
Reply: Includes all ARP/RARP reply frames
Sender IP Filter: Any/Host/Network
Any: Includes all sender IP addresses
Host: Only one specific sender host IP address
Network: A specific IP subnet segment under the sender IP mask
Sender IP Address: Default: 192.168.1.1
Sender IP Mask: Default: 255.255.255.0
Target IP Filter: Any/Host/Network
Any: Includes all target IP addresses
Host: Only one specific target host IP address
724-746-5500 | blackbox.com
99
8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches
Network: A specific IP subnet segment under the target IP mask
Target IP Address: Default: 192.168.1.254
Target IP Mask: Default: 255.255.255.0
ARP SMAC Match: Any/0/1
Any: Both 0 and 1
0: The ingress ARP frames where the source MAC address does not equal SMAC under the MAC parameter settings. 1: The ingress ARP frames where the source MAC address equasl SMAC address under the MAC parameter settings.
RARP DMAC Match: Any/0/1
Any: Both 0 and 1
0: The ingress RARP frames where the Destination MAC address does not equal DMAC address under the MAC parameter settings.
1: The ingress RARP frames where the Destination MAC address equals DMAC address under the MAC parameter settings.
IP/Ethernet Length: Any/0/1
Any: Both 0 and 1
0: The ingress ARP/PARP frames where the Hardware size does not equal "0x6" or the Protocol size does not equal "0x4."
1: The ingress ARP/PARP frames where the Hardware size equals "0x6" and the Protocol size is "0x4."
IP: Any/0/1
Any: Both 0 and 1
0: The ingress ARP/PARP frames where the Protocol type does not equal "0x800"
1: The ingress ARP/PARP frames where Protocol type equals "0x800"
Ethernet: Any/0/1
Any: Both 0 and 1
0: The ingress ARP/PARP frames where Hardware type does not equal "0x100"
1: The ingress ARP/PARP frames where Hardware type equals "0x100"
IP Parameters: (Frame Type = IPv4 and IP Protocol Filter = Any)
IPTTL: (Time To Live) Any/Non-zero/Zero
The quantity of routers a datagram can pass through. Each router decrements this value by 1 until it reaches 0 when the datagram is discarded. This keeps misrouted datagrams from remaining on the Internet forever.
Any: Includes all conditions for IPTTL
Non-Zero: IPTTL is Non-Zero
Zero: IIPTTL is zero
IP Fragment: (IP Fragmentation Flag) Any/Y es/No
Controls datagram fr agmentation tog ether with th e identification field. Th e flags indicate whether the datagr am may be fragmented, whether the datagram is fragmented, and whether the current fragment is the final one.
Any: Includes all IP fragment cases
100
724-746-5500 | blackbox.com
Loading...