Page 1
INSTALLATION AND OPERATION MANUAL
CNGE8MS
8-PORT MANAGED GIGABIT SWITCH
v2.0 Sept 2012
The ComNet™ CNGE8MS is an 8-port Managed Ethernet Switch designed to
reliably operate in harsh, environmentally challenging applications. It features
four (4) 1000BASE-TX and four (4) gigabit combo ports. The four combo ports are
10/100/1000Mbps configurable for either Cat5-e copper, or multimode or singlemode optical fiber by the use of optional ComNet SFPs for connector type and
distance. Exclusive to ComNet is C-Ring, a feature that protects the network from
interruptions or temporary malfunctions with fast recovery technology. Legacy ring
allows the switch to be used in an existing ring of ComNet X-Ring enabled switches.
Redundant DC inputs are included for uninterrupted operation in the event of a power
supply failure. The electrical ports support the 10/100/1000Mbps Ethernet IEEE802.3
protocol, and auto-negotiating and auto-MDi/MDiX features are provided. These
network-managed layer 2 switches are optically and electrically compatible with any
IEEE802.3 compliant Ethernet device. The CNGE8MS is DIN-rail or wall-mountable.
Rev. 2.21.13
Page 2
INSTALLATION AND OPERATION MANUAL CNGE8MS
Contents
Regulatory Compliance Statement 4
Warranty 4
Disclaimer 4
Safety Information 4
Overview 5
Introduction 5
Software Features 5
Hardware Features 6
Hardware Installation 7
Installing the Switch on DIN-Rail 7
Wall Mounting Installation 9
Hardware Overview 10
Front Panel 10
Front Panel LEDs 12
Top View Panel 13
Rear Panel 14
Cables 15
Ethernet Cables 15
SFP 18
Console Cable 18
WEB Management 20
Command Line Interface Management 71
About CLI Management 71
Commands Set List—System Commands Set 76
Commands Set List—Port Commands Set 78
Tech SupporT: 1.888.678.9427
Commands Set List—Trunk command set 80
Commands Set List—VLAN command set 81
Commands Set List—Spanning Tree Command Set 82
Commands Set List—QoS command set 83
INS_CNGE8MS_REV–
09/17/12 PAGE 2
Page 3
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List—IGMP command set 84
Commands Set List—MAC/Filter Table command set 85
Commands Set List—SNMP command set 86
Commands Set List—Port Mirroring command set 87
Commands Set List—802.1x command set 87
Commands Set List—TFTP command set 88
Commands Set List—SYSLOG, SMTP, EVENT command set 89
Commands Set List—SNTP command set 91
Commands Set List— Ring command set 92
Technical Specifications 93
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 3
Page 4
INSTALLATION AND OPERATION MANUAL CNGE8MS
Regulatory Compliance Statement
Product(s) associated with this publication complies/comply with all applicable regulations. Please
refer to the Technical Specifications section for more details.
Warranty
ComNet warrants that all ComNet products are free from defects in material and workmanship
for a specified warranty period from the invoice date for the life of the installation. ComNet will
repair or replace products found by ComNet to be defective within this warranty period, with
shipment expenses apportioned by ComNet and the distributor. This warranty does not cover
product modifications or repairs done by persons other than ComNet-approved personnel, and
this warranty does not apply to ComNet products that are misused, abused, improperly installed,
or damaged by accidents.
Please refer to the Technical Specifications section for the actual warranty period(s) of the
product(s) associated with this publication.
Disclaimer
Information in this publication is intended to be accurate. ComNet shall not be responsible for its
use or infringements on third-parties as a result of its use. There may occasionally be unintentional
errors on this publication. ComNet reserves the right to revise the contents of this publication
without notice.
Safety Information
» Only ComNet service personnel can service the equipment. Please contact ComNet Technical
Support.
» The equipment should be installed in locations with controlled access, or other means of
security, and controlled by persons of authority.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 4
Page 5
INSTALLATION AND OPERATION MANUAL CNGE8MS
Overview
Introduction
The CNGE8MS is a powerful managed industrial Ethernet switch containing many unique features.
These switches can work under a wide temperature range, dirty environmental and humidity
conditions.
WEB-based, TELNET, Console port or other third-party SNMP software can manage the
CNGE8MS as well. The switch can be managed by a useful utility called eConsole, a powerful
network management software. With its user-friendly and powerful interface, multiple switches
can be easily configured at the same time, and switches’ statuses monitored.
Software Features
» Redundant Ethernet Ring: C-Ring (Recovery time <30ms over 250 units connection)
» Supports Ring Coupling, Dual Homing over C-Ring technology
» Supports SNMPv1/v2c/v3 & RMON & Port base/802.1Q VLAN Network Management
» Event notification by Email, SNMP trap and Relay Output
» Web-based, Telnet, Console, CLI configuration
» Enable/disable ports, MAC based port security
» Port based network access control (802.1x)
» VLAN (802.1q) to segregate and secure network traffic
» Radius centralized password management
» SNMPv3 encrypted authentication and access security
» RS TP (8 02.1w)
» Quality of Service (802.1p) for real-time traffic
» VLAN (802.1q) with double tagging and GVRP supported
» IGMP Snooping for multicast filtering
» Port configuration, status, statistics, mirroring, security
» Remote Monitoring (RMON)
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 5
Page 6
INSTALLATION AND OPERATION MANUAL CNGE8MS
Hardware Features
» Two Redundant DC power inputs
» Operating Temperature: -40˚ C to +75˚ C (-40˚ to +167˚ F) Functional to +85˚ C (185º F)
» Storage Temp: -40˚ C to +85˚ C (-40˚ to 185°F)
» Storage Temperature: -40º to 85ºC
» Operating Humidity: 5% to 95%, non-condensing
» Casing: Aluminum
» 4 × 10/100/1000BASE-T(X) Gigabit Ethernet port
» 4 × 100/1000BASE-X SFP & 10/100/1000BASE-T(X) Combo port
» Console Port
» Dimensions (W × D ×H): 2.93 × 4.3 × 6.05 in (7.43 × 10.92 × 15.36 cm)
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 6
Page 7
INSTALLATION AND OPERATION MANUAL CNGE8MS
Hardware Installation
Installing the Switch on DIN-Rail
Metal Spring
Each switch has a DIN-Rail kit on the rear panel. The DIN-Rail kit affixes the switch to the DIN-Rail.
It is easy to install the switch on the Din-Rail:
INS_CNGE8MS_REV–
Tech SupporT: 1.888.678.9427
09/17/12 PAGE 7
Page 8
INSTALLATION AND OPERATION MANUAL CNGE8MS
Mount Series on DIN-Rail
Step 1: Tilt the switch and mount the metal spring to DIN-Rail.
Step 2: Push the switch toward the DIN-Rail until you hear the spring snap into place
.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 8
Page 9
INSTALLATION AND OPERATION MANUAL CNGE8MS
Wall Mounting Installation
Each switch has another installation method for users to fix the switch. A wall mount panel can be
found in the package. The following steps show how to mount the switch on the wall:
Mounting the CNGE8MS on a Wall
Step 1: Remove Din-Rail kit.
Step 2: Use the included screws to attach the wall mount panel as shown in the diagram below.
The screw specifications are shown in the following two pictures. In order to prevent switches from
being damaged, the screws should not be larger than the size that used in CNGE8MS switch.
INS_CNGE8MS_REV–
Tech SupporT: 1.888.678.9427
09/17/12 PAGE 9
Page 10
INSTALLATION AND OPERATION MANUAL CNGE8MS
Hardware Overview
Front Panel
The following table describes the labels that are attached to the CNGE8MS.
Port Description
10/100/10 0 0
BASE-T(X) RJ-45
fast Ethernet
ports
Gigabit Combo
Ports
Console Use supplied RS-232 to RJ-45 cable to connect to the switch.
4 × 10/100/1000BASE-T(X) RJ-45 fast Ethernet ports supporting autonegotiation.
Default Settings:
Speed: auto
Duplex: auto
Flow control: disable
10/100/1000BASE-T(X) RJ-45 + 100/1000BASE-X SFP Ports
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 10
Page 11
INSTALLATION AND OPERATION MANUAL CNGE8MS
1
2
3
4
5
6
8
9
CNGE8MS
7
1. LED for PWR. When powered up, the green LED will be light on
2. LED for PWR1. When the power is connected correctly, the green LED will be light on.
3. LED for PWR2. When the power is connected correctly, the green LED will be light on.
4. LED for R.M. (Ring Master). When the LED light is on, it means that the switch is the ring master of C-Ring.
5. LED for Ring. When the LED light is on, it means the C-Ring is activated.
6. LED for Fault. When the light is on, it means power failure or Port is down/fail.
7. Console port (RJ-45)
8. CNGE8MS has combo ports with 10/100/1000BASE-T(X) Gigabit Ethernet port and 100/1000BASE-X
SFP ports
9. 10/100/1000BASE-T(X) Ethernet ports
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 11
Page 12
INSTALLATION AND OPERATION MANUAL CNGE8MS
Front Panel LEDs
LED Color Status Description
PWR Green On DC power module up
PW1 Green On DC power module 1 activated.
PW2 Green On DC Power module 2 activated.
R.M Green On Ring Master.
Ring Green On C-Ring enabled.
Slowly blinking C-Ring has only one link. (lack of
one link to build the ring.)
Fast blinking C-Ring working normally.
Fault Amber On Fault relay. Power failure or Port
down/fail.
10/100/1000BASE-T(X) Fast Ethernet ports
LNK /ACT Green On Port link up.
Blinking Data transmitted.
Speed Amber On Port works under 100Mbps.
Gigabit SFP ports
LNK /ACT Green On Port link up.
Blinking Data transmitted.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 12
Page 13
INSTALLATION AND OPERATION MANUAL CNGE8MS
Top View Panel
The bottom panel component of CNGE8MS is shown as below:
1. Terminal block includes: PWR1, PWR2 (12-48V DC)
2. Ground wire
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 13
Page 14
INSTALLATION AND OPERATION MANUAL CNGE8MS
Rear Panel
The rear panel components of CNGE8MS are shown below:
1. Screw holes for wall mount kit.
2. DIN-Rail kit
1
2
1
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 14
Page 15
INSTALLATION AND OPERATION MANUAL CNGE8MS
Cables
Ethernet Cables
The CNGE8MS switches have standard Ethernet ports. According to the link type, the switches use
CAT3, 4, 5, 5-e UTP cables to connect to any other network device (PCs, servers, switches, routers,
or hubs). Please refer to the following table for cable specifications.
Cable Type Max. Length Connector
10BASE-T CAT3/4/5 100Ω UTP 100m (328ft) RJ-45
100BASE-TX CAT5 100Ω UTP UTP 100m (328ft) RJ-45
1000BASE-TX CAT5/5-e 100Ω UTP UTP 100m (328ft) RJ-45
Cable Types and Specifications
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 15
Page 16
INSTALLATION AND OPERATION MANUAL CNGE8MS
10/100BASE-T(X) Pin Assignments
With 10/100BASE-T(X) cable, pins 1 and 2 are used for transmitting data, and pins 3 and 6 are
used for receiving data.
Pin Number Assignment
1 TD+
2 TD-
3 RD+
4 Not used
5 Not used
6 RD-
7 Not used
8 Not used
10/100BASE-TX RJ-45 Pin Assignments
Pin Number Assignment
1 BI_DA+
2 BI_DA-
3 BI_DB+
4 BI _DC+
5 BI_DC-
6 BI_DB-
7 BI_DD+
8 BI_DD-
1000BASE-TX RJ-45 Pin Assignments
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 16
Page 17
INSTALLATION AND OPERATION MANUAL CNGE8MS
The CNGE8MS switches support auto MDI/MDI-X operation. You can use a straight-through cable
to connect PC to switch. The following table below shows the 10BASE-T/ 100BASE-TX MDI and
MDI-X port pin outs.
Pin Number MDI port MDI-X port
1 TD+(transmit) RD+(receive)
2 TD-(transmit) RD -(receive)
3 RD+(receive) TD+(transmit)
4 Not used Not used
5 Not used Not used
6 RD -(receive) TD-(transmit)
7 Not used Not used
8 Not used Not used
10/100BASE-TX MDI/MDI-X pins assignment
Pin Number MDI port MDI-X port
1 BI_DA+ BI_DB+
2 BI_DA- BI_DB-
3 BI_DB+ BI_DA+
4 BI _DC+ BI_DD+
5 BI_DC- BI_DD-
6 BI_DB- BI_DA-
7 BI_DD+ BI _ DC+
8 BI_DD- BI_DC-
1000BASE-TX MDI/MDI-X pins assignment
Note: “+” and “-” signs represent the polarity of the wires that make up each wire pair.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 17
Page 18
INSTALLATION AND OPERATION MANUAL CNGE8MS
SFP
The switch has fiber optic ports with SFP connectors. The fiber optical ports are available with
multi-mode and single-mode fiber and with various distance and connector types. Please
remember that the TX port of Switch A should be connected to the RX port of Switch B.
Switch A Switch B
Console Cable
CNGE8MS switches switch can be managed by connection to the console port. The DB-9 to RJ-45
cable can be found in the package. You can connect them to a PC using a RS-232 cable with DB-9
female connector and the other end (RJ-45 connector) connects to console port of switch.
switch can be managed by the console port. The DB-9 to RJ-45 cable can be found in the
package. You can connect them to the PC via a RS-232 cable with DB-9 female connector and the
other end (RJ-45 connector) connects to console port of switch.
PC pin
out (male)
assignment
Pin #2 RD Pin #2 TD Pin #2
Pin #3 TD Pin #3 RD Pin #3
Pin #5 GD Pin #5 GD Pin #5
RS-232 with
DB9 female
connector
DB9 to RJ 45
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 18
Page 19
INSTALLATION AND OPERATION MANUAL CNGE8MS
5
9
DB9 Male
1
1
6
5
6
DB9 Female
9
Pin Male Connector Female Connector
1 Received Line Signal Detect (Received by DTE
Device)
Received Line Signal Detect (Transmitted
from DCE Device)
2 Received Data (Received by DTE Device) Transmitted Data (Transmitted from DCE
Device)
3 Transmitted Data (Transmitted from DTE Device) Received Data (Received by DCE Device)
4 DTE Ready (Transmitted from DTE Device) DTE Ready (Received by DCE Device)
5 Signal Ground Signal Ground
6 DCE Ready (Received by DTE Device) DCE Ready (Transmitted from DCE Device)
7 Request to Send (Transmitted from DTE Device) Clear to Send (Received by DCE Device)
8 Clear to Send (Received by DTE Device) Request to Send (Transmitted from DCE
Device)
9 Ring Indicator (Received by DTE Device) Ring Indicator (Transmitted from DCE Device)
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 19
Page 20
INSTALLATION AND OPERATION MANUAL CNGE8MS
WEB Management
Attention: While installing and upgrading firmware, please remove physical loop connection
first. DO NOT power off equipment while the firmware is upgrading!
Configuration by Web Browser
This section details configuration through the Web browser.
About Web-based Management
An embedded HTML web site resides in the flash memory on the CPU board. It contains
advanced management features and allows you to manage the switch from anywhere on the
network through a standard web browser such as Microsoft Internet Explorer.
The Web-Based Management function supports Internet Explorer 5.0 or later. It is based on Java
Applets with an aim to reduce network bandwidth consumption, enhance access speed and
present an easy viewing screen.
Note: By default, IE5.0 or later version does not allow Java Applets to open sockets. You need to
explicitly modify the browser setting in order to enable Java Applets to use network ports.
Preparing for Web Management
The default value is as below:
IP Address: 192.168.10.1
Subnet Mask: 255.255.255.0
Default Gateway: 192 .168 .10. 254
User Name: admin
Password: admin
System Login
1. Launch Internet Explorer.
2. Type ht tp://19 2.16 8.10.1. Press Enter.
3. The login screen appears.
4. Key in the username and password. The default username and password is admin.
5. Select Enter or OK button, then the main interface of the Web-based management appears.
INS_CNGE8MS_REV–
Tech SupporT: 1.888.678.9427
09/17/12 PAGE 20
Page 21
INSTALLATION AND OPERATION MANUAL CNGE8MS
Login screen
Main Interface
Tech SupporT: 1.888.678.9427
Main interface
INS_CNGE8MS_REV–
09/17/12 PAGE 21
Page 22
INSTALLATION AND OPERATION MANUAL CNGE8MS
Basic Settings
Switch settings
Switch setting interface
The following table describes the labels in this screen.
Label Description
System Name Assign the name of switch. The maximum length is 64 bytes
System
Display the description of switch.
Description
System Location Assign the switch physical location. The maximum length is 64 bytes
System Contact Enter the name of contact person or organization
Firmware Version Display the switch’s firmware version
Kernel Version Display the kernel software version
MAC Address Display the unique hardware address assigned by manufacturer
(default)
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 22
Page 23
INSTALLATION AND OPERATION MANUAL CNGE8MS
Admin Password
Change web management login username and password to control access to the switch and
network.
Admin Password interface
The following table describes the labels in this screen.
Label Description
User name Key in the new username(The default is admin)
New Password Key in the new password(The default is admin)
Confirm
Re-type the new password.
password
Apply Select Apply to set the configurations.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 23
Page 24
INSTALLATION AND OPERATION MANUAL CNGE8MS
IP Setting
You can configure the IP Settings and DHCP client function through IP Setting.
IP Setting interface
The following table describes the labels in this screen.
Label Description
DHCP Client To enable or disable the DHCP client function. When DHCP client
function is enabled, the switch will be assigned the IP address from
the network DHCP server. The default IP address will be replaced by
the IP address that the DHCP server has assigned. After selecting the
“Apply” button, a popup dialog box will appear to inform you when
the DHCP client is enabled. The current IP address will be lost and you
should find a new IP on the DHCP server.
IP Address Assign the IP address that the network is using. If DHCP client function
is enabled, you do not need to assign the IP address. The network
DHCP server will assign the IP address for the switch and it will be
displayed in this column. The default IP address is 192.168.10.1
Subnet Mask Assign the subnet mask of the IP address. If DHCP client function is
enabled, you do not need to assign the subnet mask
Gateway Assign the network gateway for the switch. The default gateway is
192 .168.10.25 4
DNS1 Assign the primary DNS IP address
DNS2 Assign the secondary DNS IP address
Apply Select Apply to set the configurations.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 24
Page 25
INSTALLATION AND OPERATION MANUAL CNGE8MS
Time Setting
SNTP
The SNTP (Simple Network Time Protocol) settings allow you to synchronize switch clocks in the
Internet.
SNTP Configuration interface
The following table describes the labels in this screen.
Label Description
SNTP Client Enable or disable SNTP function to get the time from the SNTP server.
Daylight Saving
Time
UTC Time zone Set the switch location time zone.
Enable or disable daylight saving time function. When daylight saving
time is enabled, you need to configure the daylight saving time
period.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 25
Page 26
INSTALLATION AND OPERATION MANUAL CNGE8MS
The following table lists the different location time zone for your reference.
Local Time Zone
Conversion
from UTC
Time at
12: 0 0 U TC
November Time Zone - 1 hour 11 a m
Oscar Time Zone -2 hours 10 am
ADT — Atlantic Daylight -3 hours 9 am
AST — Atlantic Standard
-4 hours 8 am
EDT — Eastern Daylight
EST — Eastern Standard
-5 hours 7 am
CDT — Central Daylight
CST — Central Standard
-6 hours 6 am
MDT — Mountain Daylight
MST — Mountain Standard
-7 hours 5 am
PDT — Pacific Daylight
PST — Pacific Standard
-8 hours 4 am
ADT — Alaskan Daylight
ALA — Alaskan Standard -9 hours 3 am
HAW — Hawaiian Standard -10 hours 2 am
Nome, Alaska -11 hours 1 am
CET — Central European
+1 hour 1 pm
FWT — French Winter
MET — Middle European
MEWT — Middle European Winter
SWT — Swedish Winter
EET — Eastern European, USSR Zone 1 +2 hours 2 pm
BT — Baghdad, USSR Zone 2 +3 hours 3 pm
ZP4 — USSR Zone 3 +4 hours 4 pm
ZP5 — USSR Zone 4 +5 hours 5 pm
ZP6 — USSR Zone 5 +6 hours 6 pm
WAST — West Australian Standard +7 hours 7 pm
CCT — China Coast, USSR Zone 7 +8 hours 8 pm
JST — Japan Standard, USSR Zone 8 +9 hours 9 pm
EAST — East Australian Standard GST
Guam Standard, USSR Zone 9
IDLE — International Date Line
NZST — New Zealand Standard
NZT — New Zealand
Tech SupporT: 1.888.678.9427
+10 hours 10 pm
+12 hours Midnight
INS_CNGE8MS_REV–
09/17/12 PAGE 26
Page 27
INSTALLATION AND OPERATION MANUAL CNGE8MS
Label Description
SNTP Sever IP
Set the SNTP server IP address.
Address
Daylight Saving
Period
Daylight Saving
Set up the Daylight Saving beginning time and Daylight Saving ending
time. Both will be different each year.
Set up the offset time.
Offset
Switch Timer Display the switch current time.
Apply Select Apply to set the configurations.
LLDP
LLDP (Link Layer Discovery Protocol) function allows the switch to advertise its information to other
nodes on the network and store the information it discovers.
LLDP configuration interface
The following table describes the labels in this screen.
Label Description
LLDP Protocol “Enable” or “Disable” LLDP function.
LLDP Interval The interval of resend LLDP (by default at 30 seconds)
Apply Select Apply to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 27
Page 28
INSTALLATION AND OPERATION MANUAL CNGE8MS
Backup & Restore
You can save current EEPROM value from the switch to TFTP server, then go to the TFTP restore
configuration page to restore the EEPROM value.
Backup & Restore interface
The following table describes the labels in this screen.
Label Description
TFTP Server IP
Address
Restore File
Name
Restore Select Restore to restore the configurations.
Restore File
Name
Restore Select Restore to restore the configurations.
Backup Select Backup to backup the configurations.
Fill in the TFTP server IP
Fill the file name.
Fill the file name.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 28
Page 29
INSTALLATION AND OPERATION MANUAL CNGE8MS
Upgrade Firmware
Upgrade Firmware allows you to update the switch firmware. Before updating, make sure you have
your TFTP server ready and the firmware image is on the TFTP server.
Update Firmware interface
Auto Provision
Auto Provision allows you to update the switch firmware automatically. You can put firmware
or configuration file on TFTP server. When you reboot the switch, it will upgrade automatically.
Before updating, make sure you have your TFTP server ready and the firmware image and
configuration file is on the TFTP server.
Auto Provision interface
Factory Default
Factory Default interface
Reset the switch to default configuration. Select to reset all configurations to the default value. You
can select Keep current IP address setting and Keep current username & password to prevent IP
and username and password from reverting to the default settings.
INS_CNGE8MS_REV–
Tech SupporT: 1.888.678.9427
09/17/12 PAGE 29
Page 30
INSTALLATION AND OPERATION MANUAL CNGE8MS
System Reboot
System Reboot interface
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 30
Page 31
INSTALLATION AND OPERATION MANUAL CNGE8MS
DHCP Server
DHCP Server — Setting
The system provides a DHCP server function. Enable the DHCP server function, the switch system
will be a DHCP server.
DHCP Server Configuration interface
The following table describes the labels in this screen.
Label Description
DHCP Server Enable or Disable the DHCP Server function. Enable — the switch will
be the DHCP server on your local network
Start IP Address The dynamic IP assign range. Low IP address is the beginning of the
dynamic IP assigns range. For example: dynamic IP assign range is
from 192.168.1.100 to 192.168.1.200. 192.168.1.100 will be the Start IP
address.
End IP Address The dynamic IP assign range. High IP address is the end of the
dynamic IP assigns range. For example: dynamic IP assign range is
from 192.168.1.100 to 192.168.1.200. 192.168.1.200 will be the End IP
address
Subnet Mask The dynamic IP assign range subnet mask
Gateway The gateway in your network.
DNS Domain Name Server IP Address in your network.
Lease Time (Hour)It is the period that system will reset the assigned dynamic IP to
ensure the IP address is in used.
Apply Select Apply to set the configurations.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 31
Page 32
INSTALLATION AND OPERATION MANUAL CNGE8MS
DHCP Server — Client Entries
When the DHCP server function is activated, the system will collect the DHCP client information
and display in here.
DHCP Server Client Entries interface
DHCP Server — Port and IP bindings
You can assign the specific IP address which is in the assigned dynamic IP range to the specific
port. When the device is connecting to the port and asks for dynamic IP assigning, the system will
assign the IP address that has been assigned before in the connected device.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 32
Page 33
INSTALLATION AND OPERATION MANUAL CNGE8MS
Port Configuration
Port Control
By this function, you can set the state, speed/duplex, flow control, and security of the port.
Port Control interface
The following table describes the labels in this screen.
Label Description
Port NO. Port number for setting.
Speed/Duplex You can set Auto-negotiation; 100 full,100 half,10 full,10 half mode.
Flow Control Support symmetric and asymmetric mode to avoid packet loss when
congestion occurred.
Security Support port security function. When enabled, the port will STOP
learning MAC address dynamically.
Apply Select Apply to set the configurations.
Port Status
The following information provides the current port status information
Tech SupporT: 1.888.678.9427
Port Status interface
INS_CNGE8MS_REV–
09/17/12 PAGE 33
Page 34
INSTALLATION AND OPERATION MANUAL CNGE8MS
Rate Limit
This function limits traffic on all ports, including broadcast, multicast and flooded unicast. You can
also set Ingress or Egress to limit traffic received or transmitted bandwidth.
Rate Limit interface
The following table describes the labels in this screen.
Label Description
Ingress Limit
Fr am e Ty pe
Ingress The switch port received traffic.
Egress The switch port transmitted traffic.
Apply Select Apply to set the configurations.
You can set “all”, “Broadcast only”, ”Broadcast/Multicast” or
”Broadcast/Multicast/Flooded Unicast” mode.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 34
Page 35
INSTALLATION AND OPERATION MANUAL CNGE8MS
Port Trunk
Port Trunk — Setting
You can select static trunk or 802.3ad LACP to combine several physical links with a logical link to
increase the bandwidth.
Port Trunk — Setting interface
The following table describes the labels in this screen.
Label Description
Group ID Select port to join a trunk group.
Type Support static trunk and 802.3ad LACP
Apply Select Apply to set the configurations.
Port Trunk — Status
Port Trunk — Status interface
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 35
Page 36
INSTALLATION AND OPERATION MANUAL CNGE8MS
Redundancy
C-Ring
C-Ring is the most powerful redundant Ring in the world. The recovery time of the Ring is less
than 30ms. It can reduce unexpected damage caused by a network topology change. C-Ring
supports 3 Ring topologies: C-Ring, Coupling Ring and Dual Homing.
Ring interface
Label Description
C-Ring Mark to enable C-Ring.
Ring Master There should be only one Ring Master in a C-Ring. However if there are two or more
switches which set Ring Master to enable, the switch with the lowest MAC address will
be the actual Ring Master and others will be Backup Masters.
1st Ring Port The primary port, when this switch is Ring Master.
2nd Ring Port The backup port, when this switch is Ring Master.
Coupling Ring Mark to enable Coupling Ring. Coupling Ring can be used to divide a big ring into two
smaller rings to avoid affecting all switches when a network topology changes. It is a
good application for connecting two Rings.
Coupling Port Link to Coupling Port of the switch in another ring. Coupling Ring need four switch to
build an active and a backup link.
Set a port as coupling port. The coupled four ports of four switches will be run at active/
backup mode.
Dual Homing Mark to enable Dual Homing. By selecting Dual Homing mode, ring will be connected
to normal switches through two RSTP links (ex: backbone Switch). The two links work as
active/backup mode, and connect each ring to the normal switches in RSTP mode.
Apply Select Apply to set the configurations.
Note: We do not suggest you to set one switch as a Ring Master and a Coupling Ring at the same
time due to heavy load.
INS_CNGE8MS_REV–
Tech SupporT: 1.888.678.9427
09/17/12 PAGE 36
Page 37
INSTALLATION AND OPERATION MANUAL CNGE8MS
Legacy Ring
Legacy ring provides support for the switch to be used in an existing ring of ComNet X-Ring
enabled switches.
X-Ring provides a faster redundant recovery than Spanning Tree topology. The action is similar
to STP or RSTP, but the algorithms between them are not the same. In the X-Ring topology, every
switch should be enabled with X-Ring or Legacy Ring function and two ports should be assigned
as the member ports in the ring. Only one switch in the X-Ring group would be set as the master
switch that one of its two member ports would be blocked, called backup port, and another port
is called working port. Other switches in the X-Ring group are called working switches and their
two member ports are called working ports. When the failure of network connection occurs,
the backup port of the master switch (Ring Master) will automatically become a working port to
recover from the failure.
The switch supports the function and interface for setting the switch as the ring master or not. The
ring master can negotiate and place command to other switches in the X-Ring group. If there are
2 or more switches in master mode, the software will select the switch with lowest MAC address
number as the ring master. The X-Ring master ring mode can be enabled by setting the Legacy
Ring configuration interface. Also, the user can identify whether the switch is the ring master by
checking the R.M. LED indicator on the front panel of the switch.
Label Description
Legacy Ring To enable the Legacy Ring (X-Ring) function, tick the checkbox beside
the Legacy Ring label. If this checkbox is not ticked, all the ring
functions are unavailable.
Ring Master Select Enable for this switch to be the ring master or Disable for this
switch to be a working switch.
1st Ring Port The primary port, when this switch is Ring Master. Select a port to
assign from the pull down selection menu.
2nd Ring Port The backup port, used when this switch is Ring Master and the
primary port fails. Select a port to assign from the pull down selection
menu.
Save Select to save changes.
Refresh Select to refresh the page immediately.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 37
Page 38
INSTALLATION AND OPERATION MANUAL CNGE8MS
C-RSTP
ComNet C-RSTP is proprietary redundant ring technology. Different from standard STP/RSTP, the
recovery time of C-RSTP is less than 30ms and support more nodes connected in a ring topology.
C-RSTP interface
The application of C-RSTP is shown as below.
PLC
IPC
CNGE8MS CNGE8MS
CNGE8MS
CNGE8MS
C-RSTP connection
CNGE8MS ServerCNGE8MSCNGE8MS
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 38
Page 39
INSTALLATION AND OPERATION MANUAL CNGE8MS
RSTP
The Rapid Spanning Tree Protocol (RSTP) is an evolution of the Spanning Tree Protocol. It provides
faster spanning tree convergence after a topology change. The system also supports STP and the
system will auto detect the connected device that is running STP or RSTP protocol.
RSTP setting
You can enable/disable RSTP function, and set parameters for each port.
RSTP Setting interface
The following table describes the labels in this screen.
Label Description
RSTP mode You must enable or disable RSTP function before configuring the
related parameters.
Priority (0-61440) A value used to identify the root bridge. The bridge with the lowest
value has the highest priority and is selected as the root. If the value
changes, You must reboot the switch. The value must be multiple of
4096 according to the protocol standard rule.
Max Age (6-40) The number of seconds a bridge waits without receiving Spanning-
Tree Protocol configuration messages before attempting a
reconfiguration. Enter a value between 6 through 40.
Hello Time (1-10) The time that controls switch sends out the BPDU packet to check
RSTP current status. Enter a value between 1 through 10.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 39
Page 40
INSTALLATION AND OPERATION MANUAL CNGE8MS
Forwarding Delay
Time (4-30)
The number of seconds a port waits before changing from its Rapid
Spanning-Tree Protocol learning and listening states to the forwarding
state. Enter a value between 4 through 30.
Path Cost
(1-200000000)
The cost of the path to the other bridge from this transmitting bridge
at the specified port. Enter a number 1 through 200000000.
Priority (0-240) Decide which port should be blocked by priority in LAN. Enter a
number 0 through 240. The value of priority must be the multiple of
16
Admin P2P Some of the rapid state transactions that are possible within RSTP are
dependent upon whether the port concerned can only be connected
to exactly one other bridge (i.e. It is served by a point-to-point LAN
segment), or it can be connected to two or more bridges (i.e. It is
served by a shared medium LAN segment). This function allows the
P2P status of the link to be manipulated administratively. True means
P2P enabling. False means P2P disabling.
Admin Edge The port directly connected to end stations, and it cannot create
bridging loop in the network. To configure the port as an edge port,
set the port to “True”.
Admin Non STP The port includes the STP mathematical calculation. True is not
including STP mathematical calculation. False is including the STP
mathematical calculation.
Apply Select Apply to set the configurations.
NOTE: Follow the rule to configure the MAX Age, Hello Time, and Forward Delay Time.
2 × (Forward Delay Time value — 1) > = Max Age value >= 2 × (Hello Time value + 1)
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 40
Page 41
INSTALLATION AND OPERATION MANUAL CNGE8MS
RSTP Information
Show RSTP algorithm result at this table.
RSTP Information interface
MSTP
Multiple Spanning Tree Protocol (MSTP) is a standard protocol base on IEEE 802.1s. The function
is that several VLANs can be mapped to a reduced number of spanning tree instances because
most networks do not need more than a few logical topologies. It supports load balancing
schemes and the CPU is sparer than PVST (Cisco proprietary technology).
MSTP Setting interface
The following table describes the labels in this screen.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 41
Page 42
INSTALLATION AND OPERATION MANUAL CNGE8MS
Label Description
MSTP Enable You must enable or disable MSTP function before configuring the
related parameters.
Force Version The Force Version parameter can be used to force a VLAN Bridge that
supports RSTP to operate in an STP-compatible manner.
Configuration
The same MST Region must have the same MST configuration name.
Name
Revision Level
The same MST Region must have the same revision level.
(0-65535)
Priority (0-61440) A value used to identify the root bridge. The bridge with the lowest
value has the highest priority and is selected as the root. If the value
changes, You must reboot the switch. The value must be multiple of
4096 according to the protocol standard rule.
Max Age Time(6-
40)
The number of seconds a bridge waits without receiving Spanningtree Protocol configuration messages before attempting a
reconfiguration. Enter a value between 6 through 40.
Hello Time (1-10) The setting follow the rule below to configure the MAX Age, Hello
Time, and Forward Delay Time at controlled switch sends out the
BPDU packet to check RSTP current status. Enter a value between 1
through 10.
2 x (Forward Delay Time value –1) ≥ Max Age value ≥ 2 x (Hello Time
value +1)
Forwarding Delay
Time (4-30)
The number of seconds a port waits before changing from its Rapid
Spanning-Tree Protocol learning and listening states to the forwarding
state. Enter a value between 4 through 30.
Max Hops (1-40) This parameter is additional to those specified for RSTP. A single value
applies to all Spanning Trees within an MST Region (the CIST and all
MSTIs) for which the Bridge is the Regional Root.
Apply Select Apply to set the configurations.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 42
Page 43
INSTALLATION AND OPERATION MANUAL CNGE8MS
MSTP Port interface
Label Description
Port No. Selecting the port that you want to configure.
Priority (0-240) Decide which port should be blocked by priority in LAN. Enter a
number 0 through 240. The value of priority must be the multiple of
16
Path Cost
(1-200000000)
The cost of the path to the other bridge from this transmitting bridge
at the specified port. Enter a number 1 through 200000000.
Admin P2P Some of the rapid state transactions that are possible within RSTP are
dependent upon whether the port concerned can only be connected
to exactly one other bridge (i.e. It is served by a point-to-point LAN
segment), or it can be connected to two or more bridges (i.e. It is
served by a shared medium LAN segment). This function allows the
P2P status of the link to be manipulated administratively. True means
P2P enabling. False means P2P disabling.
Admin Edge The port directly connected to end stations, and it cannot create
bridging loop in the network. To configure the port as an edge port,
set the port to True.
Admin Non STP The port includes the STP mathematical calculation. True is not
including STP mathematical calculation. False is including the STP
mathematical calculation.
Apply Select Apply to set the configurations.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 43
Page 44
INSTALLATION AND OPERATION MANUAL CNGE8MS
MSTP Instance interface
Label Description
Instance Set the instance from 1 to 15
State Enable or disable the instance
VLANs Set which VLAN will belong which instance
Proprietary
(0- 614 40)
A value used to identify the root bridge. The bridge with the lowest
value has the highest priority and is selected as the root. If the value
changes, You must reboot the switch. The value must be multiple of
4096 according to the protocol standard rule.
Apply Select Apply to set the configurations.
MSTP Instance Port interface
Label Description
Instance Set the instance’s information except CIST
Port Select the port that you want to configure.
Priority (0-240) Decide which port should be blocked by priority in LAN. Enter a
Path Cost
(1-200000000)
Apply Select Apply to set the configurations.
Tech SupporT: 1.888.678.9427
number 0 through 240. The value of priority must be a multiple of 16
The cost of the path to the other bridge from this transmitting bridge
at the specified port. Enter a number 1 through 200000000.
INS_CNGE8MS_REV–
09/17/12 PAGE 44
Page 45
INSTALLATION AND OPERATION MANUAL CNGE8MS
VLAN
A Virtual LAN (VLAN) is a logical network grouping that limits the broadcast domain, allows
the isolation of network traffic. Only the members of the VLAN will receive traffic from the
same members of VLAN. Basically, creating a VLAN from a switch is the logical equivalent of
reconnecting a group of network devices to another Layer 2 switch. However, all the network
devices are still physically plugged into the same switch.
The switch supports 802.1Q (tagged-based) VLAN. The default configuration of VLAN operation
mode is at 802 .1Q .
VLAN Configuration — 802.1Q
Tagged-based VLAN is an IEEE 802.1Q specification standard, and t is possible to create a VLAN
across devices from different switch vendors. IEEE 802.1Q VLAN uses a technique to insert a
“tag” into the Ethernet frames. The Tag contains a VLAN Identifier (VID) that indicates the VLAN
numbers.
You can create Tag-based VLAN, and enable or disable GVRP protocol. There are 256 VLAN
groups to provide configure. Enable 802.1Q VLAN, the all ports on the switch belong to default
VLAN, VID is 1. The default VLAN cannot be deleted.
GVRP allows automatic VLAN configuration between the switch and nodes. If the switch is
connected to a device with GVRP enabled, you can send a GVRP request by using the VID of a
VLAN defined on the switch; the switch will automatically add that device to the existing VLAN.
Tech SupporT: 1.888.678.9427
VLAN Configuration — 802.1Q interface
INS_CNGE8MS_REV–
09/17/12 PAGE 45
Page 46
INSTALLATION AND OPERATION MANUAL CNGE8MS
The following table describes the labels in this screen.
Label Description
VLAN Operation
Configure VLAN Operation Mode: disable, 802.1Q
Mode
GVRP Mode Enable/Disable GVRP function.
Management
VLAN ID
Management VLAN can provide network administrator a secure VLAN
to management Switch. Only the devices in the management VLAN
can access the switch.
Link type There are 3 types of link type:
Access Link: single switch only, allows you to group ports by setting
the same VID.
Trunk Link: extended application of Access Link, allows you to group
ports by setting the same VID with 2 or more switches.
Hybrid Link: Both Access Link and Trunk Link are available.
Untagged VID Set the port default VLAN ID for untagged devices that connect to the
port. The range is 1 to 4094.
Tagged VIDs Set the tagged VIDs to carry different VLAN frames to other switch.
Apply Select Apply to set the configurations.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 46
Page 47
INSTALLATION AND OPERATION MANUAL CNGE8MS
Traffic Prioritization
Traffic Prioritization includes 3 modes: port base, 802.1p/COS, and TOS/DSCP. By traffic
prioritization function, you can classify the traffic into four classes for differential network
application. The CNGE8MS supports 4 priority queues.
QoS policy
Traffic Prioritization interface
The following table describes the labels in this screen.
Label Description
QOS policy • Using the 8,4,2,1 weight fair queue scheme: the output queues
will follow 8:4:2:1 ratio to transmit packets from the highest to
lowest queue. For example: 8 high queue packets, 4 middle queue
packets, 2 low queue packets, and the one lowest queue packets
are transmitted in one turn.
• Use the strict priority scheme: always the packets in higher queue
will be transmitted first until higher queue is empty.
Priority Mode • Port-base: the output priority is determined by ingress port.
• COS only: the output priority is determined by COS only.
• TOS only: the output priority is determined by TOS only.
• COS first: the output priority is determined by COS and TOS, but
COS first.
• TOS first: the output priority is determined by COS and TOS, but
TOS first.
Apply Select Apply to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 47
Page 48
INSTALLATION AND OPERATION MANUAL CNGE8MS
Port-base priority
Port-based Priority interface
The following table describes the labels in this screen
Label Description
Port base Priority Assign Port with a priority queue. 4 priority queues can be assigned:
High, Middle, Low, and Lowest.
Apply Select Apply to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 48
Page 49
INSTALLATION AND OPERATION MANUAL CNGE8MS
COS/8 02.1p
COS/802.1p interface
The following table describes the labels in this screen
Label Description
COS/802.1p COS (Class Of Service) is well known as 802.1p. It describes that the
output priority of a packet is determined by user priority field in
802.1Q VLAN tag. The priority value is supported 0to7.COS value map
to 4 priority queues: High, Middle, Low, and Lowest.
COS Port Default When an ingress packet has not VLAN tag, a default priority value is
considered and determined by ingress port.
Apply Select Apply to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 49
Page 50
INSTALLATION AND OPERATION MANUAL CNGE8MS
TOS/DSCP
TOS/DSCP interface
The following table describes the labels in this screen
Label Description
TOS/DSCP TOS (Type of Service) is a field in IP header of a packet. This TOS field
is also used by Differentiated Services and is called the Differentiated
Services Code Point (DSCP). The output priority of a packet can be
determined by this field and the priority value is supported 0to63.
DSCP value map to 4 priority queues: High, Middle, Low, and Lowest.
Apply Select Apply to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 50
Page 51
INSTALLATION AND OPERATION MANUAL CNGE8MS
IGMP Snooping
Internet Group Management Protocol (IGMP) is used by IP hosts to register their dynamic multicast
group membership. IGMP has 3 versions, IGMP v1, v2 and v3. Please refer to RFC 1112, 2236
and 3376. IGMP Snooping improves the performance of networks that carry multicast traffic. It
provides the ability to prune multicast traffic so that it travels only to those end destinations that
require that traffic and reduces the amount of traffic on the Ethernet LAN.
IGMP Snooping interface
The following table describes the labels in this screen.
Label Description
IGMP Snooping Enable/Disable IGMP snooping.
IGMP Query
Mode
IGMP Snooping
Table
Apply Select Apply to set the configurations.
Help Show help file.
Switch will be IGMP querier or not. There should exist one and only
one IGMP querier in an IGMP application. The “Auto” mode means
that the querier is the one with lower IP address.
Show current IP multicast list
SNMP Configuration
Simple Network Management Protocol (SNMP) is the protocol developed to manage nodes
(servers, workstations, routers, switches and hubs etc.) on an IP network. SNMP enables network
administrators to manage network performance, find and solve network problems, and plan for
network growth. Network management systems learn of problems by receiving traps or change
notices from network devices implementing SNMP.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 51
Page 52
INSTALLATION AND OPERATION MANUAL CNGE8MS
SNMP — Agent Setting
You can set SNMP agent related information by Agent Setting Function.
SNMP Agent Setting interface
The following table describes the labels in this screen.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 52
Page 53
INSTALLATION AND OPERATION MANUAL CNGE8MS
Label Description
SNMP agent
Version
Three SNMP versions are supported such as SNMP V1/SNMP V2c, and
SNMP V3. SNMP V1/SNMP V2c agent uses a community string match
for authentication, that means SNMP servers access objects with
read-only or read/write permissions with the community default string
public/private. SNMP V3 requires an authentication level of MD5 or
DES to encrypt data to enhance data security.
SNMP V1/V2c
Community
SNMP Community should be set for SNMP V1/V2c. Four sets of
“Community String/Privilege” are supported. Each Community String
is maximum 32 characters. Keep empty to remove this Community
string.
SNMPv3User If SNMP V3 agent is selected, the SNMPv3 you profiled should be set
for authentication. The Username is necessary. The Auth Password is
encrypted by MD5 and the Privacy Password which is encrypted by
DES. There are maximum 8 sets of SNMPv3 User and maximum 16
characters in username, and password.
When SNMP V3 agent is selected, you can:
1. Input SNMPv3 username only.
2. Input SNMPv3 username and Auth Password.
3. Input SNMPv3 username, Auth Password and Privacy Password,
which can be different with Auth Password.
To remove a current user profile:
1. Input SNMPv3 user name you want to remove.
2. Select Remove button
Current SNMPv3
Show all SNMPv3 user profiles.
User Profile
Apply Select Apply to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 53
Page 54
INSTALLATION AND OPERATION MANUAL CNGE8MS
SNMP — Trap Setting
A trap manager is a management station that receives traps, the system alerts generated by the
switch. If no trap manager is defined, no traps will issue. Create a trap manager by entering the IP
address of the station and a community string. To define management stations as trap manager
and enter SNMP community strings and selects the SNMP version.
SNMP Trap Setting interface
The following table describes the labels in this screen.
Label Description
Server IP The server IP address to receive Trap
Community Community for authentication
Trap Version Trap Version supports V1 and V2c.
Add Add trap server profile.
Remove Remove trap server profile.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 54
Page 55
INSTALLATION AND OPERATION MANUAL CNGE8MS
Security
Five useful functions can enhance security of switch: IP Security, Port Security, MAC Blacklist, and
MAC address Aging and 802.1x protocol.
IP Security
Only IP Address in the Secure IP List can manage the switch through your defined management
mode. (WEB, Telnet, SNMP)
IP Security interface
The following table describes the labels in this screen.
Label Description
IP security MODE Enable/Disable the IP security function.
Enable WEB
Management
Enable Telnet
Management
Enable SNMP
Management
Apply Select Apply to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
Mark the blank to enable WEB Management.
Mark the blank to enable Telnet Management.
Mark the blank to enable MPSN Management.
INS_CNGE8MS_REV–
09/17/12 PAGE 55
Page 56
INSTALLATION AND OPERATION MANUAL CNGE8MS
Port Security
Port security is to add static MAC addresses to the hardware forwarding database. If port
security is enabled at a Port Control page, only the frames with MAC addresses in this list will be
forwarded, otherwise they will be discarded.
Port Security interface
The following table describes the labels in this screen.
Label Description
MAC Address Input MAC Address to a specific port.
Port NO. Select port of switch.
Add Add an entry of MAC and port information.
Delete Delete the entry.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 56
Page 57
INSTALLATION AND OPERATION MANUAL CNGE8MS
MAC Blacklist
MAC Blacklist can eliminate the traffic forwarding to specific MAC addresses in list. Any frames
forwarding to MAC addresses in this list will be discarded. Thus the target device will never
receive any frame.
MAC Blacklist interface
The following table describes the labels in this screen.
Label Description
MAC Address Input MAC Address to add to MAC Blacklist.
Port NO. Select port of switch.
Add Add an entry to Blacklist table.
Delete Delete the entry.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 57
Page 58
INSTALLATION AND OPERATION MANUAL CNGE8MS
802 .1x
802.1x — Radius Server
802.1x makes the use of the physical access characteristics of IEEE802 LAN infrastructures in order
to provide a authenticated and authorized devices attached to a LAN port. Please refer to IEEE
802.1X — Port Based Network Access Control.
802.1x Radius Server interface
The following table describes the labels in this screen.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 58
Page 59
INSTALLATION AND OPERATION MANUAL CNGE8MS
Label Description
Radius Server Setting
Radius Server IP The IP address of the authentication server.
Server port Set the UDP port number used by the authentication server to
authenticate.
Account port Set the UDP destination port for accounting requests to the specified
Radius Server.
Shared Key A key shared between this switch and authentication server.
NAS, Identifier A string used to identify this switch.
Advanced Setting
Quiet Period Set the time interval between authentication failure and the start of a
new authentication attempt.
Tx Period Set the time that the switch can wait for response to an EAP request/
identity frame from the client before resending the request.
Supplicant
Timeout
Set the period of time the switch waits for a supplicant response to an
EAP request.
Server Timeout Set the period of time the switch waits for a Radius server response to
an authentication request.
Max Requests Set the maximum number of times to retry sending packets to the
supplicant.
Re-Auth Period Set the period of time after which clients connected must be
re-authenticated.
Apply Select Apply to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 59
Page 60
INSTALLATION AND OPERATION MANUAL CNGE8MS
802.1x-Port Authorized Mode
Set the 802.1x authorized mode of each port.
802.1x Port Authorize interface
The following table describes the labels in this screen.
Label Description
Port Authorized
Mode
Reject: force this port to be unauthorized.
Accept: force this port to be authorized.
Authorize: the state of this port was determined by the outcome of
the 802.1x authentication.
Disable: this port will not participate in 802.1x.
Apply Select Apply to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 60
Page 61
INSTALLATION AND OPERATION MANUAL CNGE8MS
802.1x-Port Authorized State
802.1x Port Authorize State interface
Warning
The Warning function is very important for switch management. You can manage the switch by
SYSLOG, E-MAIL, and Fault Relay. It helps monitor the switch status on a remote site. When events
occur, the warning message will be sent to your appointed server, E-MAIL, or relay fault to the
switch panel.
Fault Alarm
When any selected fault event has occurred, the fault LED in the switch panel will illuminate and
the electric relay will signal at the same time.
Fault Alarm interface
The following table describes the labels in this screen.
Label Description
Power Failure Mark the blank of PWR 1 or PWR 2 to monitor.
Port Link Down/
Broken
Apply Select “Apply” to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
Mark the blank of port 1 to port 8 to monitor.
INS_CNGE8MS_REV–
09/17/12 PAGE 61
Page 62
INSTALLATION AND OPERATION MANUAL CNGE8MS
TACACS+
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 62
Page 63
INSTALLATION AND OPERATION MANUAL CNGE8MS
System Alarm
System alarm supports two warning modes: 1. SYSLOG. 2. E-MAIL. You can monitor the switch
through selected system events.
System Warning — SYSLOG Setting
The SYSLOG is a protocol to transmit event notification messages across networks. Please refer to
RFC 3164 — The BSD SYSLOG Protocol
System Warning — SYSLOG Setting interface
The following table describes the labels in this screen.
Label Description
SYSLOG Mode Disable: disable SYSLOG.
Client Only: log to local system.
Server Only: log to a remote SYSLOG server.
Both: log to both of local and remote server.
SYSLOG Server IP
The remote SYSLOG Server IP address.
Address
Apply Select Apply to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 63
Page 64
INSTALLATION AND OPERATION MANUAL CNGE8MS
System Warning — SMTP Setting.
The SMTP is short for Simple Mail Transfer Protocol. It is a protocol for e-mail transmission across
the Internet. Please refer to RFC 821 — Simple Mail Transfer Protocol.
System Warning — SMTP Setting interface
The following table describes the labels in this screen.
Label Description
E-mail Alarm Enable/Disable transmission system warning events by e-mail.
Sender E-mail
Address
Mail Subject The Subject of the mail
Authentication Username: the authentication username.
Recipient E-mail
Address
Apply Select Apply to set the configurations.
Help Show help file.
The SMTP server IP address
Password: the authentication password.
Confirm Password: re-enter password.
The recipient’s E-mail address. It supports 6 recipients for an E-mail.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 64
Page 65
INSTALLATION AND OPERATION MANUAL CNGE8MS
System Warning — Event Selection
SYSLOG and SMTP are the two warning methods that supported by the system. Check the
corresponding box to enable the system event warning method you wish to choose. Please note
that the checkbox can not be checked when SYSLOG or SMTP is disabled.
System Warning — Event Selection interface
The following table describes the labels in this screen.
Label Description
System Event
System Cold Start Alert when system restart
Power Status Alert when a power up or down
SNMP
Authentication
Failure
Ring Topology
Change
Port Event • Disable
Apply Select Apply to set the configurations.
Help Show help file.
Alert when SNMP authentication failure.
Alert when Ring topology changes.
• Link Up
• Link Down
• Link Up & Link Down
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 65
Page 66
INSTALLATION AND OPERATION MANUAL CNGE8MS
Monitor
MAC Address Table
Refer to IEEE 802.1 D Sections 7.9. The MAC Address Table, that is the Filtering Database, supports
queries by the Forwarding Process, as to whether a frame received by a given port with a given
destination MAC address is to be forwarded through a given potential transmission port.
MAC Address Table interface
The following table describes the labels in this screen.
Label Description
Port NO.: Show all MAC addresses mapped to a selected port in table.
Clear MAC TableClear all MAC addresses in table
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
INS_CNGE8MS_REV–
09/17/12 PAGE 66
09/17/12 PAGE 66
Page 67
INSTALLATION AND OPERATION MANUAL CNGE8MS
MAC Address Aging
You can set MAC Address aging timer, as time expired, the unused MAC will be cleared from MAC
table. The CNGE8MS also support Auto Flush MAC Address Table when ports Link down.
MAC Address Aging interface
The following table describes the labels in this screen.
Label Description
MAC Address
Set the timer.
Table Aging Time:
(0to3825)
Auto Flush MAC
Mark the blank to enable the function,
Address Table
When ports Link
Down.
Apply Select “Apply” to set the configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 67
Page 68
INSTALLATION AND OPERATION MANUAL CNGE8MS
Port Statistics
Port statistics show several statistics counters for all ports
Port Statistics interface
The following table describes the labels in this screen.
Label Description
Type Show port speed and media type.
Link Show port link status.
State Show ports enable or disable.
TX GOOD Packet The number of good packets sent by this port.
TX Bad Packet The number of bad packets sent by this port.
RX GOOD Packet The number of good packets received by this port.
RX Bad Packet The number of bad packets received by this port.
TX Abort Packet The number of packets aborted by this port.
Packet Collision The number of times a collision detected by this port.
Clear Clear all counters.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 68
Page 69
INSTALLATION AND OPERATION MANUAL CNGE8MS
Port Monitoring
Port monitoring supports TX (egress) only, RX (ingress) only, and TX/RX monitoring. TX monitoring
sends any data that egress out checked TX source ports to a selected TX destination port as
well. RX monitoring sends any data that ingress in checked RX source ports out to a selected RX
destination port as well as sending the frame where it normally would have gone. Note that keep
all source ports unchecked in order to disable port monitoring.
Port monitoring interface
The following table describes the labels in this screen.
Label Description
Destination Port The port will receive a copied frame from source port for monitoring
purpose.
Source Port The port will be monitored. Mark the blank of TX or RX to be
monitored.
TX The frames come into switch port.
RX The frames receive by switch port.
Apply Select “Apply” to set the configurations.
Clear Clear all marked blank.(disable the function)
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 69
Page 70
INSTALLATION AND OPERATION MANUAL CNGE8MS
System Event Log
If system log client is enabled, the system event logs will show in this table.
System event log interface
The following table describes the labels in this screen.
Label Description
Page Select LOG page.
Reload To get the newest event logs and refresh this page.
Clear Clear log.
Help Show help file.
Save Configuration
If any configuration is changed, “Save Configuration” should be selected to save the current
configuration data to the permanent flash memory. Otherwise, the current configuration will be
lost when the switch is powered off or the system reset.
The following table describes the labels in this screen.
Label Description
Save Save all configurations.
Help Show help file.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 70
Page 71
INSTALLATION AND OPERATION MANUAL CNGE8MS
Command Line Interface Management
Configuration by Command Line Interface (CLI).
About CLI Management
Besides WEB-base management, the CNGE8MS also supports CLI management. You can use
console or telnet to manage the switch by CLI.
CLI Management by RS-232 Serial Console (9600, 8, none, 1, none)
Before configuring by RS-232 serial console, use an RJ45 to DB9-F cable to connect the switches’
RS-232 Console port to your PC’s COM port.
Follow the steps below to access the console via RS-232 serial cable.
Step 1. From the Windows desktop, select on Start -> Programs -> Accessories ->
Communications -> Hyper Terminal
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 71
Page 72
INSTALLATION AND OPERATION MANUAL CNGE8MS
Step 2. Input a name for new connection
Step 3. Select the COM port number
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 72
Page 73
INSTALLATION AND OPERATION MANUAL CNGE8MS
Step 4. The COM port properties setting, 115200 for Bits per second, 8 for Data bits, None for
Parity, 1 for Stop bits and none for Flow control.
Step 5. The Console login screen will appear. Use the keyboard to enter the Username and
Password (The same with the password for Web Browser), then press Enter.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 73
Page 74
INSTALLATION AND OPERATION MANUAL CNGE8MS
CLI Management by Telnet.
Users can use telnet to configure the switches.
The default value is as below:
IP Address: 192.168.10.1
Subnet Mask: 255.255.255.0
Default Gateway: 192 .168 .10. 254
User Name: admin
Password: admin
Follow the steps below to access the console via Telnet.
Step 1. Telnet to the IP address of the switch from the Windows Run command (or from the
MS-DOS prompt).
Step 2. The Login screen will appear. Use the keyboard to enter the Username and Password (The
same with the password for Web Browser), and then press Enter.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 74
Page 75
INSTALLATION AND OPERATION MANUAL CNGE8MS
Command Level
Modes Access Method Prompt Exit Method About This Model
User EXEC Begin a session
with your switch.
Privileged EXEC Enter the enable
command while in
user EXEC mode.
Global
configuration
Enter the
configure
command while in
privileged EXEC
mode.
VLAN database Enter the vlan
database
command while in
privileged EXEC
mode.
switch> Enter logout or
quit.
switch# Enter disable to
exit.
switch(config)# To exit to
privileged EXEC
mode, enter exit
or end
switch(vlan)# To exit to user
EXEC mode,
enter exit.
The user command available at
the level of user is the subset of
those available at the privileged
level.
Use this mode to
•Entermenumode.
•Displaysysteminformation.
The privileged command is
advance mode
Privileged this mode to
•Displayadvancefunctionstatus
•saveconfigures
Use this mode to configure
parameters that apply to your
Switch as a whole.
Use this mode to configure
VLAN-specific parameters.
Interface
configuration
Enter the
interface
command (with a
specific interface)
while in global
configuration
mode
Symbol of Command Level.
switch(config-if)# To exit to global
configuration
mode, enter exit.
To exit privileged
EXEC mode or
end.
Mode
Symbol of
Command Level
User EXEC E
Privileged EXEC P
Global
G
configuration
VLAN database V
Interface
I
configuration
Use this mode to configure
parameters for the switch and
Ethernet ports.
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 75
Page 76
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List—System Commands Set
CNGE8MS
Commands
Level Description Example
show config E Show switch configuration switch>show config
show terminal P Show console information switch#show terminal
menu E Enter MENU mode switch>menu
write memory P Save your configuration into permanent
switch#write memory
memory (flash rom)
system name [System
Name]
system location
[System Location]
system description
[System Description]
system contact
[System Contact]
G Configure system name switch(config)#system name
xxx
G Set switch system location string switch(config)#system
location xxx
G Set switch system description string switch(config)#system
description xxx
G Set switch system contact window string switch(config)#system
contact xxx
show system-info E Show system information switch>show system-info
ip address
[Ip-address] [Subnetmask] [Gateway]
G Configure the IP address of switch switch(config)#ip address
192.168.1.1 255. 255. 25 5.0
192.168.1.25 4
ip dhcp G Enable DHCP client function of switch switch(config)#ip dhcp
show ip P Show IP information of switch switch#show ip
no ip dhcp G Disable DHCP client function of switch switch(config)#no ip dhcp
reload G Halt and perform a cold restart switch(config)#reload
default G Restore to default Switch(config)#default
admin username
[Username]
admin password
[Password]
G Changes a login username. (maximum 10
words)
switch(config)#admin
username xxxxxx
G Specifies a password (maximum 10 words) switch(config)#admin
password xxxxxx
show admin P Show administrator information switch#show admin
dhcpserver enable G Enable DHCP Server switch(config)#dhcpserver
enable
dhcpserver lowip
[Low IP]
dhcpserver highip
[High IP]
dhcpserver
subnetmask [Subnet
G Configure low IP address for IP pool switch(config)# dhcpserver
low ip 192 .168.1.1
G Configure high IP address for IP pool switch(config)# dhcpserver
highip 192.168.1.50
G Configure subnet mask for DHCP clients switch(config)#dhcpserver
subnetmask 255.255.255.0
mask]
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 76
Page 77
INSTALLATION AND OPERATION MANUAL CNGE8MS
dhcpserver gateway
[Gateway]
dhcpserver dnsip
[DNS IP]
dhcpserver leasetime
[Hours]
dhcpserver ipbinding
[IP address]
G Configure gateway for DHCP clients switch(config)#dhcpserver
gateway 192.168.1.254
G Configure DNS IP for DHCP clients switch(config)# dhcpserver
dns ip 192 .168.1.1
G Configure lease time (in hour) switch(config)#dhcpserver
leasetime 1
I Set static IP for DHCP clients by port switch(config)#interface
fastEthernet 2
switch(config-if)#dhcpserver
ipb i ndin g 192.168.1.1
show dhcpserver
configuration
show dhcpserver
clients
show dhcpserver
ip-binding
P Show configuration of DHCP server switch#show dhcpserver
configuration
P Show client entries of DHCP server switch#show dhcpserver
clients
P Show IP-Binding information of DHCP server switch#show dhcpserver
ip-binding
no dhcpserver G Disable DHCP server function switch(config)#no dhcpserver
security enable G Enable IP security function switch(config)#security
enable
security http G Enable IP security of HTTP server switch(config)#security http
security telnet G Enable IP security of telnet server switch(config)#security telnet
security ip
[Index(1..10)] [IP
G Set the IP security list switch(config)#security ip 1
192.168.1.55
Address]
show security P Show the information of IP security switch#show security
no security G Disable IP security function switch(config)#no security
no security http G Disable IP security of HTTP server switch(config)#no security
http
no security telnet G Disable IP security of telnet server switch(config)#no security
telnet
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 77
Page 78
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List—Port Commands Set
CNGE8MS
Commands
interface fastEthernet
[Portid]
duplex [full | half] I Use the duplex configuration command to
speed
[10|100|1000|auto]
Level Description Example
G Choose the port for modification. switch(config)#interface
fastEthernet 2
switch(config)#interface
specify the duplex mode of operation for Fast
Ethernet.
I Use the speed configuration command to
specify the speed mode of operation for Fast
Ethernet, the speed can’t be set to 1000 if the
fastEthernet 2
switch(config-if)#duplex full
switch(config)#interface
fastEthernet 2
switch(config-if)#speed 100
port isn’t a giga port.
flowcontrol mode
[Symmetric|
Asymmetric]
I Use the flowcontrol configuration command
on Ethernet ports to control traffic rates
during congestion.
switch(config)#interface
fastEthernet 2
switch(config-if)#flowcontrol
mode Asymmetric
no flowcontrol I Disable flow control of interface switch(config-if)#no
flowcontrol
security enable I Enable security of interface switch(config)#interface
fastEthernet 2
switch(config-if)#security
enable
no security I Disable security of interface switch(config)#interface
fastEthernet 2
switch(config-if)#no security
bandwidth type all I Set interface ingress limit frame type to
“accept all frame”
switch(config)#interface
fastEthernet 2
switch(config-if)#bandwidth
type all
bandwidth type
broadcast-multicastflooded-unicast
I Set interface ingress limit frame type to
“accept broadcast, multicast, and flooded
unicast frame”
switch(config)#interface
fastEthernet 2
switch(config-if)#bandwidth
type broadcast-multicast-
flooded-unicast
bandwidth type
broadcast-multicast
I Set interface ingress limit frame type to
“accept broadcast and multicast frame”
switch(config)#interface
fastEthernet 2
switch(config-if)#bandwidth
type broadcast-multicast
bandwidth type
broadcast-only
I Set interface ingress limit frame type to “only
accept broadcast frame”
switch(config)#interface
fastEthernet 2
switch(config-if)#bandwidth
type broadcast-only
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 78
Page 79
INSTALLATION AND OPERATION MANUAL CNGE8MS
bandwidth in [Value] I Set interface input bandwidth. Rate Range is
from 100 kbps to 102400 kbps or to 256000
kbps for giga ports, and zero means no limit.
switch(config)#interface
fastEthernet 2
switch(config-if)#bandwidth
in 100
bandwidth out [Value] Set interface output bandwidth. Rate Range is
from 100 kbps to 102400 kbps or to 256000
kbps for giga ports, and zero means no limit.
switch(config)#interface
fastEthernet 2
switch(config-if)#bandwidth
out 100
show bandwidth I Show interfaces bandwidth control switch(config)#interface
fastEthernet 2
switch(config-if)#show
bandwidth
state
[Enable | Disable]
show interface
configuration
I Use the state interface configuration
command to specify the state mode of
operation for Ethernet ports. Use the disable
form of this command to disable the port.
switch(config)#interface
fastEthernet 2
switch(config-if)#state
Disable
I show interface configuration status switch(config)#interface
fastEthernet 2
switch(config-if)#show
interface configuration
show interface status I show interface actual status switch(config)#interface
fastEthernet 2
switch(config-if)#show
interface status
show interface
accounting
I show interface statistic counter switch(config)#interface
fastEthernet 2
switch(config-if)#show
interface accounting
no accounting I Clear interface accounting information switch(config)#interface
fastEthernet 2
switch(config-if)#no
accounting
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 79
Page 80
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List—Trunk command set
CNGE8MS
Commands
aggregator priority
[1to 65535]
aggregator
activityport
[Port Numbers]
aggregator group
[GroupID] [Port-list]
lacp
workp
[Workport]
aggregator group
[GroupID] [Port-list]
nolacp
Level Description Example
G Set port group system priority switch(config)#aggregator
priority 22
G Set activity port switch(config)#aggregator
activityport 2
G Assign a trunk group with LACP active. [GroupID]:1to3
[Port-list]:Member port
list, This parameter could
be a port range(ex.1-4) or
a port list separate by a
comma(ex.2, 3, 6)
[Workport]: The amount of
work ports, this value could
not be less than zero or be
large than the amount of
member ports.
G Assign a static trunk group.
[GroupID]:1to3
[Port-list]:Member port list, This parameter
could be a port range(ex.1-4) or a port list
separate by a comma(ex.2, 3, 6)
switch(config)#aggregator
group 1 2-4 nolacp
or
switch(config)#aggregator
group 1 3,1,2 nolacp
show aggregator P Show the information of trunk group switch#show aggregator
no aggregator lacp
[GroupID]
no aggregator group
[GroupID]
G Disable the LACP function of trunk group switch(config)#no aggregator
lacp 1
G Remove a trunk group switch(config)#no aggregator
group 2
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 80
Page 81
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List—VLAN command set
CNGE8MS
Commands
Level Description Example
vlan database P Enter VLAN configure mode switch#vlan database
vlan
[8021q | gvrp]
V To set switch VLAN mode. switch(vlan)# vlanmode
8021q
or
switch(vlan)# vlanmode gvrp
no vlan
V Disable vlan group (by VID) switch(vlan)#no vlan 2
[VID]
no gvrp V Disable GVRP switch(vlan)#no gvrp
IEEE 802.1Q VLAN
vlan 8021q port
[PortNumber]
access-link untag
V Assign an access link for VLAN by port, if the
port belongs to a trunk group, this command
cannot be applied.
switch(vlan)#vlan 8021q port
3 access-link untag 33
[UntaggedVID]
vlan 8021q port
[PortNumber]
trunk-link tag
[TaggedVID List]
V Assign a trunk link for VLAN by port, if the
port belongs to a trunk group, this command
cannot be applied.
switch(vlan)#vlan 8021q port
3 trunk-link tag 2,3,6,99
or
switch(vlan)#vlan 8021q port
3 trunk-link tag 3-20
vlan 8021q port
[PortNumber]
hybrid-link untag
[UntaggedVID]
tag
[TaggedVID List]
vlan 8021q
aggregator
[TrunkID]
access-link untag
[UntaggedVID]
vlan 8021q
aggregator
[TrunkID]
trunk-link tag
[TaggedVID List]
V Assign a hybrid link for VLAN by port, if the
port belong to a trunk group, this command
cannot be applied.
switch(vlan)# vlan 8021q port
3 hybrid-link untag 4 tag
3,6,8
or
switch(vlan)# vlan 8021q port
3 hybrid-link untag 5 tag 6-8
V Assign an access link for VLAN by trunk group switch(vlan)#vlan 8021q
aggregator 3 access-link
untag 33
V Assign a trunk link for VLAN by trunk group switch(vlan)#vlan 8021q
aggregator 3 trunk-link tag
2,3,6,99
or
switch(vlan)#vlan 8021q
aggregator 3 trunk-link tag
3-20
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 81
Page 82
INSTALLATION AND OPERATION MANUAL CNGE8MS
vlan 8021q
aggregator
[PortNumber]
hybrid-link untag
[UntaggedVID]
tag
[TaggedVID List]
show vlan [VID]
V Assign a hybrid link for VLAN by trunk group switch(vlan)# vlan 8021q
aggregator 3 hybrid-link
untag 4 tag 3,6,8
or
switch(vlan)# vlan 8021q
aggregator 3 hybrid-link
untag 5 tag 6-8
V Show VLAN information switch(vlan)#show vlan 23
or
show vlan
Commands Set List—Spanning Tree Command Set
CNGE8MS
Commands
spanning-tree enable G Enable spanning tree switch(config)#spanning-tree
spanning-tree priority
[0to61440]
spanning-tree maxage [seconds]
Level Description Example
enable
G Configure spanning tree priority parameter switch(config)#spanning-tree
priority 32767
G Use the spanning-tree max-age global
configuration command to change the
switch(config)# spanning-tree
max-age 15
interval between messages the spanning
tree receives from the root switch. If a switch
does not receive a bridge protocol data unit
(BPDU) message from the root switch within
this interval, it recomputed the Spanning Tree
Protocol (STP) topology.
spanning-tree hellotime [seconds]
spanning-tree
forward-time
[seconds]
stp-path-cost
[1to200000000]
Tech SupporT: 1.888.678.9427
G Use the spanning-tree hello-time global
configuration command to specify the interval
between hello bridge protocol data units
(BPDUs).
G Use the spanning-tree forward-time global
configuration command to set the forwardingtime for the specified spanning-tree instances.
The forwarding time determines how long
each of the listening and learning states last
before the port begins forwarding.
I Use the spanning-tree cost interface
configuration command to set the path cost
for Spanning Tree Protocol (STP) calculations.
In the event of a loop, spanning tree considers
the path cost when selecting an interface to
place into the forwarding state.
switch(config)#spanning-tree
hello-time 3
switch(config)# spanning-tree
forward-time 20
switch(config)#interface
fastEthernet 2
switch(config-if)#stp-path-
cost 20
INS_CNGE8MS_REV–
09/17/12 PAGE 82
Page 83
INSTALLATION AND OPERATION MANUAL CNGE8MS
stp-path-priority
[Port Priority]
stp-admin-p2p
[Auto|True|False]
I Use the spanning-tree port-priority interface
configuration command to configure a port
priority that is used when two switches tie for
position as the root switch.
switch(config)#interface
fastEthernet 2
switch(config-if)# stp-path-
priority 127
I Admin P2P of STP priority on this interface. switch(config)#interface
fastEthernet 2
switch(config-if)# stp-admin-
p2p Auto
stp-admin-edge
[True|False]
I Admin Edge of STP priority on this interface. switch(config)#interface
fastEthernet 2
switch(config-if)# stp-admin-
edge True
stp-admin-non-stp
[True|False]
I Admin NonSTP of STP priority on
this interface.
switch(config)#interface
fastEthernet 2
switch(config-if)# stp-admin-
non-stp False
Show spanning-tree E Display a summary of the spanning-tree states. switch>show spanning-tree
no spanning-tree G Disable spanning-tree. switch(config)#no spanning-
tree
Commands Set List—QoS command set
CNGE8MS
Commands
qos policy
[weighted-fair|strict]
qos prioritytype
[port-based|cos-only|
tos-only|cos-first|tosfirst]
qos priority
portbased
[Port] [lowest|low|
middle|high]
qos priority cos
[Priority][lowest|low|
middle|high]
qos priority tos
[Priority][lowest|low|
middle|high]
Level Description Example
G Select QOS policy scheduling switch(config)#qos policy
G Setting of QOS priority type switch(config)#qos
G Configure Port-based Priority switch(config)#qos priority
G Configure COS Priority switch(config)#qos priority
G Configure TOS Priority switch(config)#qos priority
weighted-fair
prioritytype
portbased 1 low
cos 22 middle
tos 3 high
show qos P Display the information of QoS configuration switch>show qos
no qos G Disable QoS function switch(config)#no qos
INS_CNGE8MS_REV–
Tech SupporT: 1.888.678.9427
09/17/12 PAGE 83
Page 84
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List—IGMP command set
CNGE8MS
Commands
Level Description Example
igmp enable G Enable IGMP snooping function switch(config)#igmp enable
Igmp-query auto G Set IGMP query to auto mode switch(config)#Igmp-query
auto
Igmp-query force G Set IGMP query to force mode switch(config)#Igmp-query
force
show igmp
configuration
show igmp multi P Displays the details of an IGMP snooping
P Displays the details of an IGMP configuration. switch#show igmp
configuration
switch#show igmp multi
entries.
no igmp G Disable IGMP snooping function switch(config)#no igmp
no igmp-query G Disable IGMP query switch#no igmp-query
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 84
Page 85
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List—MAC/Filter Table command set
CNGE8MS
Commands
mac-address-table
static hwaddr
[MAC]
mac-address-table
filter hwaddr
[MAC]
show mac-addresstable
show mac-addresstable static
show mac-addresstable filter
no mac-address-table
static hwaddr
[MAC]
Level Description Example
I Configure MAC address table of interface
(static).
switch(config)#interface
fastEthernet 2
switch(config-if)#mac-
address-table static hwaddr
000012345678
G Configure MAC address table(filter) switch(config)#mac-
address-table filter hwaddr
000012348678
P Show all MAC address table switch#show mac-address-
table
P Show static MAC address table switch#show mac-address-
table static
P Show filter MAC address table. switch#show mac-address-
table filter
I Remove an entry of MAC address table of
interface (static)
switch(config)#interface
fastEthernet 2
switch(config-if)#no mac-
address-table static hwaddr
000012345678
no mac-address-table
filter hwaddr
[MAC]
G Remove an entry of MAC address table (filter) switch(config)#no mac-
address-table filter hwaddr
000012348678
no mac-address-table G Remove dynamic entry of MAC address table switch(config)#no mac-
address-table
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 85
Page 86
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List—SNMP command set
CNGE8MS
Commands
snmp agent-mode
[v1v2c | v3]
snmp-server host
[IP address]
community
[Community-string]
trap-version
[v1|v2c]
snmp communitystrings
[Community-string]
right
[RO|RW]
snmp snmpv3-user
[User Name]
password
[Authentication
Password] [Privacy
Password]
Level Description Example
G Select the agent mode of SNMP switch(config)#snmp agent-
mode v1v2c
G Configure SNMP server host information and
community string
switch(config)#snmp-
server host 192.168.10.50
community public trap-
version v1
(remove)
Switch(config)#
no snmp-server host
192.168.10.50
G Configure the community string right switch(config)#snmp
community-strings public
right RO
or switch(config)#snmp
community-strings public
right RW
G Configure the user profile for SNMPV3 agent.
Privacy password could be empty.
switch(config)#snmp snmpv3-
user test01 password
AuthPW PrivPW
show snmp P Show SNMP configuration switch#show snmp
show snmp-server P Show specified trap server information switch#show snmp-server
no snmp communitystrings [Community]
no snmp snmpv3-user
[User Name]
password
G Remove the specified community. switch(config)#no snmp
community-strings public
G Remove specified user of SNMPv3 agent.
Privacy password could be empty.
switch(config)# no snmp
snmpv3-user test01 password
AuthPW PrivPW
[Authentication
Password] [Privacy
Password]
no snmp-server host
[Host-address]
G Remove the SNMP server host. switch(config)#no snmp-
server 192.168.10.50
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 86
Page 87
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List—Port Mirroring command set
CNGE8MS
Commands
Level Description Example
monitor rx G Set RX destination port of monitor function switch(config)#monitor rx
monitor tx G Set TX destination port of monitor function switch(config)#monitor tx
show monitor P Show port monitor information switch#show monitor
monitor
[RX|TX|Both]
I Configure source port of monitor function switch(config)#interface
fastEthernet 2
switch(config-if)#monitor RX
show monitor I Show port monitor information switch(config)#interface
fastEthernet 2
switch(config-if)#show
monitor
no monitor I Disable source port of monitor function switch(config)#interface
fastEthernet 2
switch(config-if)#no monitor
Commands Set List—802.1x command set
CNGE8MS
Commands
Level Description Example
8021x enable G Use the 802.1x global configuration command
to enable 802.1x protocols.
8021x system
radiousip
[IP address]
8021x system
serverport
[port ID]
8021x system
accountport
[port ID]
8021x system
sharekey
[ID]
8021x system nasid
[words]
8021x misc
quietperiod
[sec.]
8021x misc txperiod
[sec.]
G Use the 802.1x system radious IP global
configuration command to change the radius
server IP.
G Use the 802.1x system server port global
configuration command to change the radious
server port
G Use the 802.1x system account port global
configuration command to change the
accounting port
G Use the 802.1x system share key global
configuration command to change the shared
key value.
G Use the 802.1x system NAS ID global
configuration command to change the NAS ID
G Use the 802.1x misc quiet period global
configuration command to specify the quiet
period value of the switch.
G Use the 802.1x misc TX period global
configuration command to set the TX period.
switch(config)# 8021x enable
switch(config)# 8021x system
rad ious ip 19 2.168.1.1
switch(config)# 8021x system
serverport 1815
switch(config)# 8021x system
accountport 1816
switch(config)# 8021x system
sharekey 123456
switch(config)# 8021x system
nasid test1
switch(config)# 8021x misc
quietperiod 10
switch(config)# 8021x misc
txperiod 5
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 87
Page 88
INSTALLATION AND OPERATION MANUAL CNGE8MS
8021x misc
supportimeout [sec.]
G Use the 802.1x misc supp timeout global
configuration command to set the supplicant
switch(config)# 8021x misc
supportimeout 20
timeout.
8021x misc
servertimeout [sec.]
G Use the 802.1x misc server timeout global
configuration command to set the server
switch(config)#8021x misc
servertimeout 20
timeout.
8021x misc
maxrequest
[number]
8021x misc
reauthperiod [sec.]
G Use the 802.1x misc max request global
configuration command to set the MAX
requests.
G Use the 802.1x misc reauth period global
configuration command to set the reauth
switch(config)# 8021x misc
maxrequest 3
switch(config)# 8021x misc
reauthperiod 3000
period.
8021x portstate
[disable | reject |
accept | authorize]
I Use the 802.1x port state interface
configuration command to set the state
of the selected port.
switch(config)#interface
fastethernet 3
switch(config-if)#8021x
portstate accept
show 8021x E Display a summary of the 802.1x properties
switch>show 8021x
and also the port states.
no 8021x G Disable 802.1x function switch(config)#no 8021x
Commands Set List—TFTP command set
CNGE8MS
Commands
backup flash:backup_
cfg
restore flash:restore_
cfg
upgrade
flash:upgrade_fw
Level Description Defaults Example
G Save configuration to TFTP and need to
specify the IP of TFTP server and the file
name of image.
G Get configuration from TFTP server and need
to specify the IP of TFTP server and the file
name of image.
G Upgrade firmware by TFTP and need to
specify the IP of TFTP server and the file
name of image.
switch(config)#backup
flash:backup_cfg
switch(config)#restore
flash:restore_cfg
switch(config)#upgrade
lash:upgrade_fw
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 88
Page 89
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List—SYSLOG, SMTP, EVENT command set
CNGE8MS
Commands
systemlog ip
[IP address]
systemlog mode
[client|server|both]
Level Description Example
G Set System log server IP address. switch(config)# systemlog ip
192.168.1.10 0
G Specified the log mode switch(config)# systemlog
mode both
show systemlog E Display system log. Switch>show systemlog
show systemlog P Show system log client & server information switch#show systemlog
no systemlog G Disable systemlog functon switch(config)#no systemlog
smtp enable G Enable SMTP function switch(config)#smtp enable
smtp serverip
[IP address]
G Configure SMTP server IP switch(config)#smtp serverip
192.168.1.5
smtp authentication G Enable SMTP authentication switch(config)#smtp
authentication
smtp account
[account]
smtp password
[password]
smtp rcptemail
[Index] [Email
G Configure authentication account switch(config)#smtp account
User
G Configure authentication password switch(config)#smtp
password
G Configure Rcpt e-mail Address switch(config)#smtp
rcptemail 1 Alert@test.com
address]
show smtp P Show the information of SMTP switch#show smtp
no smtp G Disable SMTP function switch(config)#no smtp
event device-coldstart
G Set cold start event type switch(config)#event device-
cold-start both
[Systemlog|
SMTP|Both]
event authenticationfailure
G Set Authentication failure event type switch(config)#event
authentication-failure both
[Systemlog|
SMTP|Both]
event Ring-topologychange
G Set s ring topology changed event type switch(config)#event ring-
topology-change both
[Systemlog|
SMTP|Both]
event systemlog
[Link-UP|LinkDown|Both]
I Set port event for system log switch(config)#interface
fastethernet 3
switch(config-if)#event
systemlog both
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 89
Page 90
INSTALLATION AND OPERATION MANUAL CNGE8MS
event smtp
[Link-UP|LinkDown|Both]
I Set port event for SMTP switch(config)#interface
fastethernet 3
switch(config-if)#event smtp
both
show event P Show event selection switch#show event
no event devicecold-start
no event
authentication-failure
no event ringtopology-change
G Disable cold start event type switch(config)#no event
device-cold-start
G Disable Authentication failure event type switch(config)#no event
authentication-failure
G Disable ring topology changed event type switch(config)#no event ring-
topology-change
no event systemlog I Disable port event for system log switch(config)#interface
fastethernet 3
switch(config-if)#no event
systemlog
no event smpt I Disable port event for SMTP switch(config)#interface
fastethernet 3
switch(config-if)#no event
smtp
show systemlog P Show system log client & server information switch#show systemlog
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 90
Page 91
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List—SNTP command set
CNGE8MS
Commands
Level Description Example
sntp enable G Enable SNTP function switch(config)#sntp enable
sntp daylight G Enable daylight saving time, if SNTP function is
switch(config)#sntp daylight
inactive, this command can’t be applied.
sntp daylight-period
[Start time] [End time]
G Set period of daylight saving time, if SNTP
function is inactive, this command can’t be
applied.
switch(config)# sntp daylight-
period 20060101-01:01
20060202-01-01
Parameter format: [yyyymmdd-hh:mm]
sntp daylight-offset
[Minute]
G Set offset of daylight saving time, if SNTP
function is inactive, this command can’t be
switch(config)#sntp daylight-
offset 3
applied.
sntp ip
[IP]
sntp timezone
[Timezone]
G Set SNTP server IP, if SNTP function is inactive,
this command can’t be applied.
G Set timezone index, use “show sntp timzezone”
command to get more information of index
switch(config)#sntp ip
192.169.1.1
switch(config)#sntp timezone
22
number
show sntp P Show SNTP information switch#show sntp
show sntp timezone P Show index number of time zone list switch#show sntp timezone
no sntp G Disable SNTP function switch(config)#no sntp
no sntp daylight G Disable daylight saving time switch(config)#no sntp
daylight
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 91
Page 92
INSTALLATION AND OPERATION MANUAL CNGE8MS
Commands Set List— Ring command set
CNGE8MS
Commands
Level Description Example
Ring enable G Enable Ring switch(config)# Ring enable
Ring master G Enable ring master switch(config)# Ring master
Ring couplering G Enable couple ring switch(config)# Ring
couplering
Ring dualhoming G Enable dual homing switch(config)# Ring
dualhoming
Ring ringport
[1st Ring Port] [2nd
G Configure 1st/2nd Ring Port switch(config)# Ring ringport
7 8
Ring Port]
Ring couplingport
[Coupling Port]
Ring controlport
[Control Port]
Ring homingport
[Dual Homing Port]
G Configure Coupling Port switch(config)# Ring
couplingport 1
G Configure Control Port switch(config)# Ring
controlport 2
G Configure Dual Homing Port switch(config)# Ring
homingport 3
show Ring P Show the information of Ring switch#show Ring
no Ring G Disable Ring switch(config)#no Ring
no Ring master G Disable ring master switch(config)# no Ring
master
no Ring couplering G Disable couple ring switch(config)# no Ring
couplering
no Ring dualhoming G Disable dual homing switch(config)# no Ring
dualhoming
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 92
Page 93
INSTALLATION AND OPERATION MANUAL CNGE8MS
Technical Specifications
Technology
Ethernet Standards
IEEE 802.3 for 10BASE-T,
IEEE 802.3u for 100BASE-T(X) and 100BASE-FX
IEEE 802.3z for 1000BASE-X
IEEE 802.3ab for 1000BASE-T(X),
IEEE 802.3x for Flow control
IEEE 802.3ad for LACP (Link Aggregation Control Protocol)
IEEE 802.1D for STP (Spanning Tree Protocol)
IEEE 802.1p for COS (Class of Service)
IEEE 802.1Q for VLAN Tagging
IEEE 802.1w for RSTP (Rapid Spanning Tree Protocol) IEEE 802.1s for
MSTP (Multiple Spanning Tree Protocol)
IEEE 802.1x for Authentication
IEEE 802.1AB for LLDP (Link Layer Discovery Protocol)
MAC addresses 8192
Priority Queues 4
Flow Control IEEE 802.3x Flow Control and Back-pressure
Processing Store-and-Forward
Interface
Gigabit Combo Ports 4 x 10/100/1000BASE-T(X), Auto MDI/MDIX
SFP ports 4 x 100/1000BASE-X
Gigabit RJ45 Ports 4 x 10/100/1000BASE-T(X), Auto MDI/MDIX
LED Indicators Per Unit: Power × 3 (Green)
RJ45 Ports:
Gigabit Ethernet Port:
Link/Activity (Green/Blinking Green), 100Mbps indicator (Amber)
Gigabit SFP Ports:
Per Port: Link / Activity (Green)
Power Requirements
Power Input Voltage PWR1/2: 12 — 48VDC in 6-pin Terminal Block
Reverse Polarity Protection Present
Power Consumption 25 Watts
Environmental
Operating Temperature -40º to 75ºC
Storage Temperature -40º to 85ºC
Operating Humidity 5% to 95%, non-condensing
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 93
Page 94
INSTALLATION AND OPERATION MANUAL CNGE8MS
Mechanical
Dimensions(W x D x H) 2.93 × 4.3 × 6.05 in (7.43 × 10.92 × 15.36 cm)
Casing Aluminum
Regulatory Approvals
EMI FCC Part 15,CISPR(EN55022) class A
EMS EN61000-4-2 (ESD),
EN61000-4-3 (RS),
EN61000-4-4 (EFT),
EN61000-4-5 (Surge),
EN61000-4-6 (CS),
EN61000-4-8,
EN61000-4-11
Shock IEC60068-2-27
Free Fall IEC60068-2-32
Vibration IEC60068-2-6
Safety EN60950
Warranty Lifetime
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 94
Page 95
INSTALLATION AND OPERATION MANUAL CNGE8MS
Tech SupporT: 1.888.678.9427
INS_CNGE8MS_REV–
09/17/12 PAGE 95
Page 96
MEChANICAL INSTALLATION INSTRUCTIONS
ComNet Customer Service
Customer Care is ComNet Technology’s global service center, where our
professional staff is ready to answer your questions at any time.
Email ComNet Global Service Center: customercare@comnet.net
3 CORPORATE DRIvE | DANbURy, CT 06810 | USA
T: 203.796.5300 | F: 203.796.5303 | TECh SUPPORT: 1.888.678.9427 | INFO@COMNET.NET
8 TURNbERRy PARk ROAD | GILDERSOME | MORLEy | LEEDS, Uk LS27 7LE
T: +44 (0)113 307 6400 | F: +44 (0)113 253 7462 | INFO-EUROPE@COMNET.NET
© 2013 Communications Ne tworks Cor poration. All Rights Reserved. “ComNet” and the “ComNet Logo” are registered trademarks of Communic ation Networ ks, LLC.
Loading...