INSTALLATION AND OPERATION MANUAL
CNGE2FE24MSPOE
ENVIRONMENTALLY HARDENED MANAGED
ETHERNET SWITCH WITH (24) 10/100TX
+ (2) 10/100/1000FX RJ45 or 1000FX SFP PORTS
V1.02 – October 2009
The ComNet™ CNGE2FE24MSPoE Managed Ethernet Switch provides transmission of (24) 10/100 BASE-
TX and (2) 10/100/1000TX or 1000FX combo ports. Unlike most Ethernet switches, these environmentally
hardened units are designed for deployment in difficult operating environments, and are available for use
with either conventional CAT-5e copper or optical transmission media. The 24 electrical ports support the
10/100 Mbps Ethernet IEEE 802.3 protocol, and auto-negotiating and auto-MDI/MDIX features are
provided for simplicity and ease of installation. All 24 ports support IEEE.802.3af based POE. 2 ports are
10/100/1000 configurable for copper or fiber media for use with multimode or single mode optical fiber,
selected by optional SFP modules. These network managed layer 2 switches are optically (1000 BASE-
FX) and electrically compatible with any IEEE 802.3 compliant Ethernet devices. Plug-and-play design
ensures ease of installation, and no electrical or optical adjustments are ever required. The
CNGE2FE24MSPoE incorporates LED indicators for monitoring the operating status of the managed
switch and network. These units are rack mountable.
i
The contents of this manual are based on the table below listing
firmware version, software kernel version, and hardware version. If the
switch functions are different from the description of contents of manual,
please contact your local representative for more information.
ii
FCC Warning
This Equipment has been tested and found to comply with the limits for a Class-A
digital device, pursuant to Part 15 of the FCC rules. These limits are designed to
provide reasonable protection against harmful interference in a residential
installation. This equipment generates, uses, and can radiate radio frequency
energy. It may cause harmful interference to radio communications if this
equipment is not installed and used in accordance with the instructions. However,
there is no guarantee that interference will not occur in a particular installation. If
this equipment does cause harmful interference to radio or television reception,
which can be determined by turning the equipment off and on, the user is
encouraged to try to correct the interference by one or more of the following
measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which
the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
CE Mark Warning
This is a Class-A product. In a domestic environment this product may cause radio
interference in which case the user may be required to take adequate measures.
iii
Content
FCC Warning ............................................................. iii!
CE Mark Warning ...................................................... iii!
Content ...................................................................... iv!
1! Introduction ....................................................... 9!
1.1! Hardware Features......................................... 9!
1.2! Software Feature .......................................... 12!
1.3! Package Contents ........................................15!
2! Hardware Description ..................................... 16!
2.1! Physical Dimension ...................................... 16!
2.2! Front Panel................................................... 16!
2.3! Rear Panel ................................................... 16!
2.4! LED Indicators .............................................. 18!
2.5! Cabling .........................................................19!
2.6! Desktop Installation ...................................... 22!
2.6.1! Attaching Rubber Feet......................................... 22!
2.7! Rack-mounted Installation ............................ 22!
3! Network Application........................................ 24!
3.1! X-Ring Application ........................................ 25!
3.2! Couple Ring Application ............................... 26!
3.3! Central Ring Application ............................... 27!
3.4! Dual Homing Application .............................. 28!
4! Console Management ..................................... 29!
4.1! Connecting to the Console Port ................... 29!
4.2! Login in the Console Interface...................... 29!
iv
4.3! CLI Management .......................................... 31!
5! Web-Based Management ................................ 33!
5.1! About Web-based Management................... 33!
5.2! Preparing for Web Management .................. 33!
5.3! System Login................................................ 34!
6! System.............................................................. 35!
6.1! System Information ...................................... 35!
6.2! IP Configuration............................................ 36!
6.3! DHCP Server – System configuration .......... 37!
6.4! DHCP Server – Client Entries ...................... 38!
6.5! DHCP Server - Port and IP Binding ............. 39!
6.6! TFTP - Update Firmware.............................. 40!
6.7! TFTP – Restore Configuration ..................... 40!
6.8! TFTP - Backup Configuration ....................... 41!
6.9! System Event Log – Syslog Configuration ... 41!
6.10! System Event Log - SMTP Configuration..... 43!
6.11! System Event Log - Event Configuration ..... 44!
6.12! Fault Relay Alarm ......................................... 47!
6.13! SNTP Configuration ..................................... 47!
6.14! IP Security .................................................... 50!
6.15! User Authentication ...................................... 51!
6.16! Advanced Configuration—Broadcast Storm Filter
52
6.17! Advanced Configuration—Aging Time .........53!
v
!
6.18! Advanced Configuration—Jumbo Frame .....54!
6.19! 1000TX Cable Length .................................. 55!
7! Port ................................................................... 56!
7.1! Port Statistics ............................................... 56!
7.2! Port Counters ............................................... 57!
7.3! Port Control .................................................. 59!
7.4! Port Trunk..................................................... 61!
7.4.1! Aggregator setting ............................................... 62!
7.4.2! Aggregator Information ........................................ 63!
7.4.3! State Activity ........................................................ 64!
7.5! Port Mirroring................................................ 65!
7.6! Rate Limiting ................................................ 66!
7.7! VLAN configuration ...................................... 68!
7.7.1! VLAN configuration - Port-based VLAN............... 68!
7.7.2! 802.1Q VLAN....................................................... 72!
7.8! Rapid Spanning Tree ................................... 77!
7.8.1! RSTP - System Configuration.............................. 77!
7.8.2! RSTP—Port Configuration................................... 79!
7.9! SNMP Configuration..................................... 81!
7.9.1! System Configuration ..........................................82!
7.9.2! Trap Configuration ............................................... 83!
7.9.3! SNMPV3 Configuration........................................ 84!
vi
7.10! QoS Configuration ........................................ 88!
7.10.1! QoS Policy and Priority Type............................. 88!
7.11! IGMP Configuration...................................... 90!
7.12! LLDP Configuration ...................................... 91!
7.13! X-Ring .......................................................... 92!
7.14! Security ........................................................ 95!
7.14.1! 802.1X/Radius Configuration............................. 95!
7.14.2! MAC Address Table........................................... 98!
7.15! Access Control List..................................... 103!
7.16! Power over Ethernet................................... 104!
7.17! Factory Default ........................................... 107!
7.18! Save Configuration ..................................... 107!
7.19! System Reboot ........................................... 107!
8! Troubleshooting ............................................109!
8.1! Incorrect connections ................................. 109!
8.2! Diagnosing LED Indicators ......................... 110!
9! Appendix A—RJ45 Pin Assignment ............ 111!
9.1.1! 10 /100BASE-TX Pin outs .................................111!
9.1.2! 10/100Base-TX Cable Schematic...................... 112!
9.1.3! 10/100/1000Base-TX Pin outs........................... 112!
9.1.4! 10/100/1000Base-TX Cable Schematic ............ 113!
10! Appendix B—Command Sets..................... 115!
10.1.1! Commands Set List ......................................... 115!
vii
10.1.2! System Commands Set ................................... 115!
10.1.3! Port Commands Set ........................................118!
10.1.4! Trunk Commands Set...................................... 120!
10.1.5! VLAN Commands Set...................................... 121!
10.1.6! Spanning Tree Commands Set ....................... 123!
10.1.7! QOS Commands Set ....................................... 124!
10.1.8! IGMP Commands Set...................................... 125!
10.1.9! Mac / Filter Table Commands Set ................... 126!
10.1.10! SNMP Commands Set................................... 127!
10.1.11! Port Mirroring Commands Set ....................... 129!
10.1.12! 802.1x Commands Set .................................. 130!
10.1.13! TFTP Commands Set .................................... 131!
10.1.14! SystemLog, SMTP and Event Commands Set132!
10.1.15! SNTP Commands Set ...................................134!
10.1.16! X-Ring Commands Set .................................. 135!
10.1.17! LLDP Command Set...................................... 136!
10.1.18! Access Control List Command Set ................ 136!
10.1.19! Power over Ethernet Set................................ 137!
viii
IEEE 802.3 10Base-T Ethernet
IEEE 802.3u 100Base-TX / 100Base-FX
IEEE802.3z Gigabit fiber
IEEE802.3ab 1000Base-T
IEEE802.3x Flow Control and Back Pressure
IEEE802.3ad Port trunk with LACP
IEEE802.1d Spanning Tree/ IEEE802.1w Rapid
Spanning Tree
IEEE802.1p Class of Service
IEEE802.1Q VLAN Tag
IEEE 802.1x User Authentication (Radius)
IEEE802.3af Power over Ethernet
IEEE802.1ab LLDP
Back-plane (Switching Fabric): 8.8Gbps
Packet throughput ability (Full-Duplex):
13.1Mpps@64bytes
1 Introduction
The CNGE2FE24MSPOE Managed Industrial PoE Switch is a cost-effective solution and
meets the high reliability requirements demanded by industrial applications. Using the fiber
ports can extend the connection distance that increases the network elasticity and
performance. The industrial switch provides the PoE function for Powered Devices to
receive power as well as data over the RJ45 cable.
1.1 Hardware Features
9
14,880 pps for 10Base-T Ethernet port
148,800 pps for 100Base-TX/FX Fast Ethernet port
1,488,000 pps for Gigabit Fiber Ethernet port
9022bytes (for Gigabit Ports)
(Front) RS-232 : Female DB-9 (for Console)
(Rear) RS-232: Male DB-9 (for UPWM)
10/100TX: 24 x RJ45
10/100/1000T/ Mini-GBIC Combo: 2 x RJ45 + 2 x
SFP sockets
System Power (Green)
Gigabit Fiber: Link/Activity (Green)
Gigabit Copper: Link/Activity (Green), Full
duplex/collision (Yellow), Mini-GBIC [(Link/Activity)
Green]
10Base-T: 2-pair UTP/STP Cat. 3, 4, 5, 5e cable
EIA/TIA-568 100-ohm (100m)
100Base-TX: 2-pair UTP/STP Cat. 5/5e cable
EIA/TIA-568 100-ohm (100m)
1000Base-T: 2-pair UTP/STP Cat. 5e cable
EIA/TIA-568 100-ohm (100m)
10
DC 48V
A readily accessible disconnect device as part of the
building installation shall be incorporated into the
fixed wiring. Moreover, The disconnect device
(appropriate circuit breaker) must be included in the
ungrounded supply conductor.
5% to 95% (Non-condensing)
440mm (W) x 280mm (D) x 44mm (H)
FCC Class A
CE EN61000-4-2/3/4/6/8,
CE EN61000-6-2, CE EN61000-6-4
11
IEC60068-2-32 (Free fall)
IEC60068-2-27 (Shock)
IEC60068-2-6 (Vibration)
SNMP v1
SNMP v2c
SNMP v3
Web/Telnet/Console (CLI)
RFC 2418 SNMP MIB, RFC 1213 MIBII, RFC 2011
SNMP V2 MIB, RFC 1493 Bridge MIB,
RFC 2674 VLAN MIB, RFC 1215 Trap MIB, RFC 1643
Ethernet Like, RFC 1757 RMON1, RSTP MIB, PoE
MIB, UPS MIB, LLDP MIB, Private MIB
Port based VLAN, up to 24 groups
IEEE802.1Q Tag VLAN
Static VLAN groups up to 256, Dynamic VLAN group
up to 2048, VLAN ID from 1 to 4094.
GVRP up to 256 groups.
LACP Port Trunk: 13 Trunk groups/Maximum 4 trunk
members
1.2 Software Feature
12
Supports LLDP to allow switch to advertise its
identification and capability on the LAN
Supports IEEE802.1d Spanning Tree and IEEE802.1w
Rapid Spanning Tree
Supports X-Ring, Dual Homing, Couple Ring and
Central Ring topology
Provides redundant backup feature and the recovery
time below 20ms
The quality of service determined by port, Tag and
IPv4 Type of service, IPv4 Different Service
Supports IEEE802.1p class of service, per port
provides 4 priority queues
Supports 50 entries of MAC address for static MAC
and another 50 for MAC filter
Supports 3 mirroring types: “RX, TX and Both packet”
Supports IGMP snooping v1, v2
256 multicast groups and IGMP query
Supports 10 IP addresses that have permission to
access the switch management and to prevent
unauthorized intruder
Supports IEEE802.1X Authentication/RADIUS
Access Control
List (ACL)
Supports up to 255 Policy
13
Support ingress packet filter and egress packet limit
The egress rate control supports all of packet type and
the limit rates are 0~100Mbps
Ingress filter packet type combination rules are
Broadcast/Multicast/Unknown Unicast packet,
Broadcast/Multicast packet, Broadcast packet only and
all of packet. The packet filter rate can be set from 0 to
100Mbps
Supports Flow Control for Full-duplex and Back
Pressure for Half-duplex
Supports System log record and remote system log
server
Supports 1 SMTP Server and 6 e-mail accounts for
receiving event alert
Provides one relay output for port breakdown and
power failure.
Alarm Relay current carry ability: 1A @ DC 24V
1. Device cold start,
2. Authorization failure,
3. X-Ring topology changed.
4. Port link up/ link down.
5. DC disconnect trap-PoE port Event
Trap station up to 3
Provides DHCP Client/DHCP Server/IP Relay
functions
Provides DNS client feature
Supports Primary and Secondary DNS server
14
Supports SNTP to synchronize system clock in
Internet
Supports TFTP & Console firmware update
Configuration
Upload and
Download
Supports binary format configuration file for system
quick installation (TFTP backup and restore)
Each port allows importing 128bit of alphabetic string
of word on SNMP and CLI interface.
1.3 Package Contents
Please refer to the package contents list below to verify them against the checklist.
CNGE2FE24MSPOE Managed Industrial PoE Switch x 1
User manual x 1
Pluggable Terminal Block x 1
Mounting plate x 2
DB-9P/F TO DB-9P/M 150cm RoHS cable x 1
Rubber feet x 4
Compare the contents with the standard checklist above. If any item is damaged or missing,
please contact your local representative for service.
15
2 Hardware Description
In this paragraph, the Industrial switch’s hardware spec, port, cabling information, and
wiring installation will be described.
2.1 Physical Dimension
CNGE2FE24MSPOE Managed Industrial PoE Switch dimensions (W x D x H) are 440mm
x 280mm x 44mm
2.2 Front Panel
The Front Panel of the CNGE2FE24MSPOE Managed Industrial PoE Switch is shown
below:
2.3 Rear Panel
The rear panel of the CNGE2FE24MSPOE Managed Industrial PoE Switch has one
terminal block connector. The ten-pin screw clamp terminal strip is for power supply
connections and connections to the fault relay. Redundant power sources may be used.
The fault relay can be configured to change from its normally open state in response to any
Front Panel of the CNGE2FE24MSPOE Industrial Switch
or all of the following conditions using the GUI check boxes shown in the image below:
• failure of power supply 1
• failure of power supply 2
16
• failure or a port
• failure of a link to the port
Pin-outs follow:
PWR1
Pin 1 or Pin 2 = +48 VDC
Pin 3 or Pin 4 = -48 VDC
PWR2
Pin 7 or Pin 8 = +48 VDC
Pin 9 or Pin 10 = -48 VDC
Fault
Pin 5 and Pin 6 = normally open relay secondary, contacts rated at 24 VDC 1A max, resistive
loads only
Rear panel of the CNGE2FE24MSPOE Industrial Switch
17
DC power input 1 or 2 is inactive or port link down
DC power 1/DC Power 2/port linking are all active,
or no power inputs
DC power input 1 is active
DC power input 1 is inactive
DC power input 2 is active
DC power input 2 is active
A powered device is connected utilizing Power
over Ethernet on the port
No device is connected or power forwarding fails
The port is connecting with the device.
The port is receiving or transmitting data.
The port is operating in Full-duplex mode.
The port is connecting with the device.
2.4 LED Indicators
The diagnostic LEDs located on the front panel of the industrial switch provide real-time
information of the system and optional status. The following table provides the description
of the LED status and their meanings for the switch.
18
The port is receiving or transmitting data.
The port is operating in Full-duplex mode
Collision of Packets occurs in the port
FDX/COL (Gigabit
port)
25/26 port
2.5 Cabling
Use four twisted-pair, Category 5e or above cabling for RJ45 port connection. The
cable between the switch and the link partner (switch, hub, workstation, etc.) must be
less than 100 meters (328 ft.) long.
Use fiber optic cabling and connectors which are suitable for the selected SFP fiber
module installed. The maximum transmission distance will be determined by the
selected SFP module.
To connect the SFP transceiver using LC connectors, please follow the steps shown below:
First, insert the transceiver into the SFP module. Notice that the triangle mark is the bottom
of the module.
19
Transceiver to the SFP module
Transceiver Inserted
Second, insert the fiber cables LC connector into the transceiver.
LC connector to the transceiver
20
To remove the LC connector from the transceiver, please follow the steps shown below:
First, press the upper side of the LC connector to release from the transceiver and pull it out.
Remove LC connector
Second, push down the metal loop and pull the transceiver out by the plastic handle.
Pull out from the transceiver
21
2.6 Desktop Installation
Set the switch on a sufficiently large flat space with a power outlet nearby. The surface
where you put your switch should be clean, smooth, level and sturdy.
Make sure there is enough clearance around the switch to allow attachment of cables,
power cord and allow air circulation.
2.6.1 Attaching Rubber Feet
A. Make sure mounting surface on the bottom of the switch is grease and dust free.
B. Remove adhesive backing from your Rubber Feet.
C. Apply the Rubber Feet to each corner on the bottom of the switch. These footpads can
help prevent shock/vibration.
Attaching Rubber Feet to each corner on the bottom of the Switch
2.7 Rack-mounted Installation
The Switch comes with a rack-mounted kit and can be mounted in an EIA standard size,
19-inch Rack. It can be placed in a wiring closet with other equipment.
22
Perform the following steps to rack-mount the switch:
A. Position one plate to align with the holes on one side of the hub and secure it with the
smaller plate screws. Then, attach the remaining plate to the other side of the switch.
Attach mounting plates with screws
B. After attaching both mounting plates, position the switch in the rack by lining up the
holes in the plates with the appropriate holes on the rack. Secure the switch to the rack
with a screwdriver and suitable rack-mounting screws.
Mount the Switch in an EIA standard 19-inch Rack
Note: For proper ventilation, allow at least 4 inches (10 cm) of clearance on the front and
3.4 inches (8 cm) on the back of the switch. This is especially important for enclosed rack
installation.
23
3 Network Application
This segment provides samples to help the user understand industrial switch applications.
For sample applications of the industrial switch, see the figures below.
24
3.1 X-Ring Application
The industrial switch supports the X-Ring protocol that can help the network system to
recover from network connection failure within 20ms or less, and make the network system
more reliable. The X-Ring algorithm is similar to Spanning Tree Protocol (STP) and Rapid
STP (RSTP) algorithm but its recovery time is less than STP/RSTP. The figure below is a
sample of an X-Ring application.
25
3.2 Couple Ring Application
In the network, it may have more than one X-Ring group. Using the coupling ring function
can connect each X-Ring for redundant backup. It can ensure the transmissions between
two ring groups do not fail. The following figure is a sample of coupling ring application.
26
3.3 Central Ring Application
Central Ring is an advanced function which supports backup connection for redundant
transmission. When the connection fails, the system will recover from failure within 20
milliseconds. Central Ring can also handle up to 4 rings by configuring a single switch only
as the ring master switch.
27
3.4 Dual Homing Application
Dual Homing function is to prevent a connection loss between X-Ring group(s) and upper
level/core switches. Assign one port to be the Dual Homing port that is the backup port in
the X-Ring group. The Dual Homing function only works when the X-Ring function is active.
Each X-Ring group only has one Dual Homing port.
[NOTE] In Dual Homing application architecture, the upper level switches need to enable
the Rapid Spanning Tree protocol.
28
4 Console Management
4.1 Connecting to the Console Port
Use the supplied RS-232 cable to connect between a terminal/PC and the console port.
The terminal or PC being connected to must support the terminal emulation program.
Connecting the switch to a terminal via RS-232 cable
4.2 Login in the Console Interface
When the connection between Switch and PC is ready, turn on the PC and run a terminal
emulation program or Hyper Terminal and configure its communication parameters to
match the following default characteristics of the console port:
Baud Rate: 9600 bps
Data Bits: 8
Parity: none
Stop Bit: 1
29
Flow control: None
The settings of communication parameters
After finishing the parameter settings, select ‘OK’. When the blank screen shows up, press
Enter key to bring out the login prompt. Key in ‘admin’ (default value) for both User name
and Password (use Enter key to switch), then press Enter key and the Main Menu of
console management appears.
Console login interface
30