CTS SWH-3109 Service Manual

Download

SWH-3109 SERIES

9 PORTS 10/100/1000BASE-T ETHERNET MANAGED SWITCH

8 PORTS 10/100/1000BASE-T AND 1 PORT 1000BASE-X OR

100/1000BASE-X UPLINK ETHERNET MANAGED SWITCH

8 PORTS 10/100/1000BASE-T AND 1 PORT 1000BASE-X OR

100/1000BASE-X UPLINK ETHERNET MANAGED SWITCH

WITH BATTERY CHARGING MODULE

Network Management

User’s Manual

Version 0.92

Trademarks

CTS is a registered trademark of Connection Technology Systems Inc.. Contents are subject to revision without prior notice. All other trademarks remain the properties of their owners.

Copyright  2013 Connection Technology Systems Inc.. This publication may not be reproduced as a whole or in part, in any way whatsoever unless prior consent has been obtained from Connection Technology Systems Inc..

FCC Warning

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limitations are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

 Reorient or relocate the receiving antenna.  Increase the separation between the equipment and receiver.  Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.  Consult your local distributors or an experienced radio/TV technician for help.  Shielded interface cables must be used in order to comply with emission limits.

Changes or modifications to the equipment, which are not approved by the party responsible for compliance, could affect the user’s authority to operate the equipment.

Company has an on-going policy of upgrading its products and it may be possible that information in this document is not up-to-date. Please check with your local distributors for the latest information. No part of this document can be copied or reproduced in any form without written consent from the company.

Trademarks: All trade names and trademarks are the properties of their respective companies.

Revision History

Version

F/W

Date

Description

0.90

1.06.05

20150316

Fisrt release

0.91

1.07.00

20150811

Add DHCP Option 60 (Section 2.5.17 &

3.4.6.1.3)

0.92

2.00.00

20160701

Add IPv6 Network Configuration (Section 3.3.1 & 2.5.6) Add Switch Port VLAN ID Status (Section 3.5.2) Remove IP Source Binding (Section

3.3.1) Add LLDP Configuration (Section

3.4.9 & 2.5.7)

Table of Content

1. INTRODUCTION ............................................................................................................... 7

1.1 Interfaces...................................................................................................................... 7

1.2 Management Preparations ........................................................................................... 9

1.2.1 Connecting the Managed Switch ........................................................................... 9

1.2.2 Assigning IP Addresses ....................................................................................... 10

1.3 LED Definitions ........................................................................................................... 11

1.4 Button Definitions ................................ ................................ ....................................... 11

2. Command Line Interface (CLI) ...................................................................................... 12

2.1 Remote Console Management-Telnet ........................................................................ 12

2.2 Navigating CLI ................................................................ ............................................ 13

2.2.1 General Commands ............................................................................................. 13

2.2.2 Quick Keys ........................................................................................................... 14

2.2.3 Command Format ................................................................................................ 14

2.2.4 Login Username & Password .............................................................................. 16

2.3 User Mode .................................................................................................................. 16

2.4 Privileged Mode .......................................................................................................... 17

2.4.1 Copy-cfg Command ............................................................................................. 17

2.4.2 Firmware Command ............................................................................................ 19

2.4.3 Reload Command ................................................................................................ 20

2.4.4 Write Command ................................................................................................... 20

2.4.5 Configure Command ............................................................................................ 20

2.5 Configuration Mode .................................................................................................... 20

2.5.1 Entering Interface Numbers ................................................................................. 21

2.5.2 No Command ....................................................................................................... 21

2.5.3 Show Command .................................................................................................. 21

2.5.4 Interface Command ............................................................................................. 22

2.5.5 IP Command ........................................................................................................ 23

2.5.6 IPv6 Command .................................................................................................... 25

2.5.7 LLDP Command .................................................................................................. 27

2.5.8 Loop Detection Command ................................................................................... 29

2.5.9 MAC Command ................................................................................................... 29

2.5.10 Management Command .................................................................................... 31

2.5.11 Mirror Command ................................................................................................ 31

2.5.12 NTP Command .................................................................................................. 31

2.5.13 QoS Command .................................................................................................. 33

2.5.14 Security Command ............................................................................................ 37

2.5.15 SNMP-Server Command ................................................................................... 39

2.5.16 Switch Command ............................................................................................... 42

2.5.17 Switch-info Command ........................................................................................ 42

2.5.18 User Command .................................................................................................. 43

2.5.19 VLAN Command ................................................................................................ 46

2.5.20 Show interface statistics Command ................................................................... 49

2.5.21 Show sfp Command ........................................................................................... 50

2.5.22 Show log Command........................................................................................... 50

2.5.23 Show default-config, running-config & start-up-config Command ...................... 50

3. WEB MANAGEMENT ..................................................................................................... 51

3.1 System Information .................................................................................................... 53

3.2 User Authentication .................................................................................................... 55

3.3 Network Management ................................................................................................ 57

3.3.1 Network Configuration ......................................................................................... 58

3.3.2 System Service Configuration .............................................................................. 60

3.3.3 Time Server Configuration ................................................................................... 60

3.3.4 Device Community ............................................................................................... 61

3.3.5 Trap Destination ................................................................................................... 62

3.3.6 Trap Configuration ............................................................................................... 63

3.4 Switch Management ................................................................................................... 64

3.4.1 Switch Configuration ............................................................................................ 65

3.4.2 Storm Control ....................................................................................................... 65

3.4.3 Port Configuration ................................................................................................ 66

3.4.4 Rate Limit Configuration ...................................................................................... 68

3.4.5 QoS Priority Configuration ................................................................................... 69

3.4.6 VLAN Configuration ............................................................................................. 71

3.4.6.1 IEEE 802.1q Tag VLAN ................................................................................. 72

3.4.6.1.1 Configure VLAN ...................................................................................... 72

3.4.6.1.2 Configure Default Port VLAN ID ............................................................. 73

3.4.6.1.3 DHCP-Option60-Based VLAN ................................................................ 74

3.4.6.2 Q-in-Q VLAN Configuration ........................................................................... 76

3.4.7 Port Mirroring ....................................................................................................... 77

3.4.8 IGMP Snooping.................................................................................................... 77

3.4.9 LLDP Configuration ............................................................................................. 78

3.4.10 Loop Detection ................................................................................................... 79

3.4.11 Filter Configuration............................................................................................. 80

3.5 Switch Monitor ................................ ................................ ................................ ............ 81

3.5.1 Switch Port Status ................................................................................................ 82

3.5.2 Switch Port VLAN ID Status ................................................................................. 82

3.5.3 Port Counters Rates ............................................................................................ 83

3.5.3.1 Port Traffic Statistics (Rates) ......................................................................... 84

3.5.3.2 Port Packet Error Statistics (Rates) ............................................................... 84

3.5.3.3 Port Packet Analysis Statistics (Rates) ......................................................... 85

3.5.4 Port Counters Events ........................................................................................... 87

3.5.4.1 Port Traffic Statistics (Events) ....................................................................... 87

3.5.4.2 Port Packet Error Statistics (Events) ............................................................. 88

3.5.4.3 Port Packet Analysis Statistics (Events) ........................................................ 89

3.5.5 SFP Information ................................................................................................... 91

3.5.5.1 SFP Port Info ................................................................................................. 91

3.5.5.2 SFP Port State .............................................................................................. 92

3.5.6 IGMP Snooping.................................................................................................... 92

3.5.7 LLDP Status ......................................................................................................... 93

3.5.8 Loop Detection ..................................................................................................... 93

3.5.9 MAC Address Table ............................................................................................. 94

3.6 System Utility .............................................................................................................. 95

3.6.1 Event Log ............................................................................................................. 96

3.6.2 Update ................................................................................................................. 96

3.6.3 Load Factory Settings .......................................................................................... 97

3.6.4 Load Factory Settings Except Network Configuration .......................................... 98

3.7 Save Configuration ..................................................................................................... 98

3.8 Reset System ............................................................................................................. 99

3.9 Logout ........................................................................................................................ 99

APPENDIX A: DHCP Auto-Provisioning Setup .............................................................. 100

1. INTRODUCTION

Smart Lighting Control

10/100/1000Mbps RJ-45 ports

Smart Lighting Control

Grounding Wire

Thank you for using this Managed Switch. It employs store and forward switching mechanism, and provides low latency and faster data transmission. Moreover, it also supports advanced functions such as QoS, Q-in-Q VLAN Tunneling, Rate Limiting, IGMP Snooping, and etc.. The built-in management module allows users to configure this Switch and monitor the operation status locally or remotely through network. For detailed descriptions on how to configure the Switch, please refer to Section 2.

Internet Protocol Version 6 (IPv6)

The Managed Switch supports IPv6. With IPv6, Internet Protocol version 6, can increase the supply of packets from the IPv4 Internet Protocol version 4. Nowadays, with the development of Technology, there are more computer users (Laptops, PC, Tablet Personal Computers) and others such as smart phones, and any other devices with the need of Internet, requires large amount of packet transmission, therefore leading to more demand for packets. In order to fulfill this necessity, IPv6 provide the answer, by increase packet numbers enlarging networking system for worldwide users in good form.

1.1 Interfaces

Depending on the main device and optional accessories that you purchased, the front panel and rear panel of your Switch may look differently from model to model. Figure 1 and 2 show the front and rear panel for 9-Port 10/100/1000Base-T Ethernet Managed Switch; Figure 3 and 4 show the front and rear panel for 8-Port 10/100/1000Base-T and 1-Port 1000Base-X or 100/1000Base-X Uplink Ethernet Managed Switch with optional battery charging module.

Figure 1. Front Panel for 9-Port 10/100/1000Base-T Managed Switch

Figure 2. Rear Panel for 9-Port 10/100/1000Base-T Managed Switch

Figure 3. Front Panel for 8-Port 10/100/1000Base-T and 1-Port 1000Base-X or 100/1000Base-X Uplink

100/1000Mbps or 1000Mbps F/O port

Battery Charging Module (Optional)

DC Power Jack LED Indicators

Ethernet Managed Switch

Figure 4. Rear Panel for 8-Port 10/100/1000Base-T and 1-Port 1000Base-X or 100/1000Base-X Uplink

Ethernet Managed Switch with Battery Charging Module

All models have the same top, left and right panel.

Figure 5. Top Panel with LEDs

Figure 6. Left Panel

Figure 7. Right Panel

Reset Button

1.2 Management Preparations

The Managed Switch can be accessed through both Telnet connection and a web browser, such as Internet Explorer or Netscape, etc.. Before you can access the Managed Switch to configure it, you need to connect cables properly.

1.2.1 Connecting the Managed Switch

It is extremely important that proper cables are used with correct pin arrangements when connecting Managed Switch to other devices such as switches, hubs, workstations, etc..

 1000Base-X Fiber Port or 100/1000 Base-X Fiber Port

The 1000Base-X fiber port is located at the rear panel of the Managed Switch. This port is primarily used for uplink connection and can operate at 1000M/Full or Half Duplex mode. Duplex SC or WDM Simplex SC types of connectors are available. Use proper multimode or single-mode optical fiber cable to connect this port with the other Ethernet Fiber port.

Before connecting to other switches, workstations or media converters, make sure both sides of the fiber transfer are with the same media type, for example 1000Base-X Single-mode to 1000Base-X Single-mode, 1000Base-X Multimode to 1000Base-X Multimode. Check that the fiber-optic cable type matches the fiber transfer model. To connect to 1000Base-SX transfer, use the multimode fiber cable (one side must be male duplex SC connector type). To connect to 1000Base-LX transfer, use the singlemode fiber cable (one side must be male duplex LC connector type).

 10/100/1000Base-T RJ-45 Ports

The RJ-45 ports are located on the front panel of the Managed Switch. These RJ-45 ports allow users to connect their traditional copper-based Ethernet devices to the

network. All these ports support auto-negotiation and MDI/MDIX auto-crossover, i.e. the crossover or straight through CAT-5 cable may be used.

1.2.2 Assigning IP Addresses

IP addresses have the format n.n.n.n, for example 168.168.8.100. IP addresses are made up of two parts:

 The first part (168.168.XXX.XXX in the example) indicates network address identifying

the network where the device resides. Network addresses are assigned by three allocation organizations. Depending on your location, each allocation organization assigns a globally unique network number to each network that wishes to connect to the Internet.

 The second part (XXX.XXX.8.100 in the example) identifies the device within the

network. Assigning unique device numbers is your responsibility. If you are unsure of the IP addresses allocated to you, consult the allocation organization from which your IP addresses were obtained.

Remember that an address can be assigned to only one device on a network. If you connect to the outside, you must change all the arbitrary IP addresses to comply with those you have been allocated by the allocation organization. If you do not do this, your outside communications will not be connected.

A subnet mask is a filtering system for IP addresses. It allows you to further subdivide your network. You must use the proper subnet mask for a proper operation of a network with subnets defined.

1.3 LED Definitions

LED

Definition

Color

Operation

Power

Off

The device is powered off.

Green

The device is powered on.

System Status

Orange

The system is booting up.

Green

The system is working normally.

Orange

Blinking

The Status LED indicator will blink for 3 times when the system is set back to default factory setting

The Status LED indicator will blink for once when the system is restarted.

Battery

Charging

(For -BAT models only)

Green

The battery is fully charged.

Green Blinking

The battery is charging.

Battery

Discharging

(For -BAT models only)

Orange

The battery is installed or connected incorrectly.

Orange

Blinking

The battery is in use.

Port Link Status

Off

The port link is down.

Green

The link is up and works at 10 or 100Mbps.

Orange

The link is up and works at 1000Mbps.

Green/Orange

Blinking

The traffic is present.

Button

Operation

Smart Lighting Control Button

System Status LED and Port Link LEDs will be turned off by pressing the button. Only Power and Battery Discharging LED indicators stay on.

Reset Button

Insert a pin or paper clip to press the Reset button for 5 seconds to restart the device or for 10 seconds to reset the device to factory defaults.

1.4 Button Definitions

2. Command Line Interface (CLI)

This chapter guides you to use Command Line Interface (CLI) via Telnet connection, specifically in:

 Configuring the system  Resetting the system  Upgrading newly released firmware

2.1 Remote Console Management-Telnet

You can use Command Line Interface to manage the Managed Switch via Telnet session. For first-time users, you must first assign a unique IP address to the Managed Switch before you can manage it remotely. Use any one of the RJ-45 ports on the front panel as the temporary management console port to login to the device with the default username & password and then assign the IP address using IP command in Global Configuration mode.

Follow steps described below to access the Managed Switch through Telnet session:

Step 1. Use any one of the RJ-45 ports on the front panel as a temporary management

console port to login to the Managed Switch.

Step 2. Run Telnet client and connect to 192.168.0.1. For first-time users, make sure

the IP address of your PC or workstation is assigned to an IP address between

192.168.0.2 and 192.168.0.254 with subnet mask 255.255.255.0.

Step 3. When asked for a username, enter “admin”. When asked for a password, leave

the password field blank and press Enter (by default, no password is required.)

Step 4. If you enter CLI successfully, the prompt display Switch> (the model name of

your device together with a greater than sign) will appear on the screen.

Step 5. Once you enter CLI successfully, you can set up the Switch’s IP address,

subnet mask and the default gateway using “IP” command in Global Configuration mode. The telnet session will be terminated immediately once the IP address of the Switch has been changed.

Step 6. Use new IP address to login to the Managed Switch via Telnet session again.

Limitation: Only one active Telnet session can access the Managed Switch at a time.

2.2 Navigating CLI

Command Mode

Access Method

Prompt Displayed

Exit Method

User Mode

Switch>

logout

Privileged Mode

From user mode, enter the enable command

Switch#

disable, exit, logout

Configuration Mode

From the enable mode, enter the config or configure command

Switch(config)#

exit

NOTE: By default, the model name will be used for the prompt display. You can change the prompt display to the one that is ideal for your network environment using the “hostname” command. However, for convenience, the prompt display “Switch” will be used throughout this user’s manual.

Entering the command…

To do this…

Available Modes

help

Obtain a list of available commands in the current mode.

User Mode Privileged Mode Configuration Mode

exit

Return to the previous mode or login screen.

User Mode Privileged Mode Configuration Mode

history

List all commands that have been used.

User Mode Privileged Mode Configuration Mode

logout

Logout from the CLI or terminate Telnet session.

User Mode Privileged Mode

After you successfully access to the Managed Switch, you will be asked for a login username. Enter your authorized username and password, and then you will be directed to the User Mode. In CLI management, the User Mode only provides users with basic functions to operate the Managed Switch. If you would like to configure advanced features of the Managed Switch, such as, VLAN, QoS, and Rate limit control, you must enter the Configuration Mode. The following table provides an overview of modes available in this Managed Switch.

2.2.1 General Commands

This section introduces you some general commands that you can use in all modes, including “help”, “exit”, “history” and “logout”.

2.2.2 Quick Keys

Keys

Purpose

tab

Enter an unfinished command and press “Tab” key to complete the command.

Press “?” key in each mode to get available commands.

Unfinished command followed by ?

Enter an unfinished command or keyword and press “?” key to complete the command and get command syntax help.

Examples:

Switch#h? help Show available commands

history Show history commands

Switch#he? <cr>

Switch#help

Up arrow

Use Up arrow key to scroll through the previous entered commands, beginning with the most recent key-in commands.

Down arrow

Use Down arrow key to scroll through the previous entered commands, beginning with the commands that are entered first.

This means that you are in Global Configuration mode

This allows you to assign IP address.

Enter the IP address, subnet mask, and default gateway address.

Hostname

In CLI, there are several quick keys that you can use to perform several functions. The following table summarizes the most frequently used quick keys in CLI.

2.2.3 Command Format

While in CLI, you will see several symbols very often. As mentioned above, you might already know what “>”, “#” and (config)# represent. However, to perform what you intend the device to do, you have to enter a string of complete command correctly. For example, if you want to assign IP address for the Managed Switch, you need to enter the following command with the required parameter and IP, subnet mask and default gateway:

IP command syntax: Switch(config)#ip address [A.B.C.D] [255.X.X.X] [A.B.C.D]

Switch(config)#ip address 192.168.1.198 255.255.255.255 192.168.1.254

The following table lists common symbols and syntax that you will see very frequently in this

Symbols

Brief Description

Currently, the device is in User Mode.

Currently, the device is in Privileged Mode.

(config)#

Currently, the device is in Global Configuration Mode.

Syntax

Brief Description

[ ]

Brackets mean that this field is required information.

[A.B.C.D ]

Brackets represent that this is a required field. Enter an IP address or gateway address.

[255.X.X.X]

Brackets represent that this is a required field. Enter the subnet mask.

[port-based | 802.1p | dscp | vid]

There are four options that you can choose. Specify one of them.

[1-8191]

Specify a value between 1 and 8191.

[0-7] 802.1p_list [0-63] dscp_list

Specify one or more values or a range of values.

For example: specifying one value

Switch(config)#qos 802.1p-map 1 0

Switch(config)#qos dscp-map 10 3

For example: specifying three values (separated by commas)

Switch(config)#qos 802.1p-map 1,3 0

Switch(config)#qos dscp-map 10,13,15 3

For example: specifying a range of values (separating by a hyphen)

Switch(config)#qos 802.1p-map 1-3 0

Switch(config)#qos dscp-map 10-15 3

User’s Manual for your reference:

2.2.4 Login Username & Password

Command

Description

exit

Quit the User mode or close the terminal connection.

help

Display a list of available commands in User mode.

history

Display the command history.

logout

Logout from the Managed Switch.

enable

Enter the Privileged mode.

Default Login

After you enter Telnet session, a login prompt will appear to request a valid and authorized username and password combination. For first-time users, enter the default login username

“admin” and “press Enter key” in password field (no password is required for default setting). When system prompt shows “Switch>”, it means that the user has successfully entered the

User Mode. For security reasons, it is strongly recommended that you add a new login username and

password using User command in Configuration Mode. When you create your own login username and password, you can delete the default username (admin) to prevent unauthorized accesses.

Forgot Your Login Username & Password?

If you forgot your login username and password, you can use the “reset button” to set all configurations back to factory defaults. Once you have performed system reset to defaults, you can login with default username and password. Please note that if you use this method to gain access to the Managed Switch, all configurations saved in Flash will be lost. It is strongly recommended that a copy of configurations is backed up in your local hard-drive or file server from time to time so that previously-configured settings can be restored to the Managed Switch for use after you gain access again to the device.

2.3 User Mode

In User mode, only a limited set of commands are provided. Please note that in Use Mode, you have no authority to configure advanced settings. You need to enter Privileged mode and Configuration mode to set up advanced functions of a switch feature. For a list of commands available in User Mode, enter the question mark (?) or “help” command after the system prompt displays “Switch>”.

2.4 Privileged Mode

Command

Description

copy-cfg

Restore or backup configuration file via FTP or TFTP server.

configure

Enter Global Configuration mode.

disable

Exit Enable Mode and return to User Mode.

exit

Exit Enable Mode and return to User Mode.

firmware

Upgrade Firmware via FTP or TFTP server.

help

Display a list of available commands in Enable Mode.

history

Show commands that have been used.

logout

Logout from the Managed Switch.

reload

Restart the Managed Switch.

write

Save your configurations to Flash.

show

Show a list of commands or show the current setting of each listed command.

Command

Parameter

Description

Switch# copy-cfg from ftp [A.B.C.D | A:B:C:D:E:F:G:H] [file name] [user_name] [password]

[A.B.C.D |

A:B:C:D:E:F:G:H]

Enter the IP address of your FTP server.

[file_name]

Enter the configuration file name that you want to restore.

[user_name]

Enter the username for FTP server login.

[password]

Enter the password for FTP server login.

Switch# copy-cfg from tftp [A.B.C.D | A:B:C:D:E:F:G:H] [file_name]

[A.B.C.D |

A:B:C:D:E:F:G:H]

Enter the IP address of your TFTP server.

[file_name]

Enter the configuration file name that you want to restore.

Example

Switch# copy-cfg from ftp 192.168.1.198 HS_0600_file.conf misadmin1 abcxyz

Switch# copy-cfg from tftp 192.168.1.198 HS_0600_file.conf

Command / Example

Switch# copy-cfg from default

The only place where you can enter the Privileged (Enable) Mode is in User Mode. When you successfully enter Enable mode, the prompt will be changed to Switch# (the model name of your device together with a pound sign). Enter the question mark (?) or help command to view a list of commands available for use.

2.4.1 Copy-cfg Command

Use “copy-cfg” command to backup a configuration file via FTP or TFTP server or restore the Managed Switch back to the defaults or to the defaults without changing IP configurations.

1. Restore a configuration file via FTP or TFTP server.

2. Restore the Managed Switch back to default settings.

NOTE: There are two ways to set the Managed Switch back to the factory default settings. Users can use the “copy-cfg from default” command in CLI or simply press the “Reset Button”

located on the front panel to restore the device back to the initial state.

3. Restore the Managed Switch back to default settings but keep IP configurations.

Command / Example

Switch# copy-cfg from default keep-ip

Command

Parameter

Description

Switch# copy-cfg to ftp [A.B.C.D | A:B:C:D:E:F:G:H] [file_name] [user_name] [password]

[A.B.C.D |

A:B:C:D:E:F

:G:H]

Enter the IP address of your FTP server.

[file_name]

Enter the configuration file name that you want to backup.

[user_name]

Enter the username for FTP server login.

[password]

Enter the password for FTP server login.

Switch# copy-cfg to tftp [A.B.C.D | A:B:C:D:E:F:G:H] [file_name]

[A.B.C.D |

A:B:C:D:E:F

:G:H]

Enter the IP address of your TFTP server.

[file_name]

Enter the configuration file name that you want to backup.

Example

Switch# copy-cfg to ftp 192.168.1.198 HS_0600_file.conf misadmin1 abcxyz

Switch# copy-cfg to tftp 192.168.1.198 HS_0600_file.conf

Command

Parameter

Description

Switch# firmware upgrade ftp [A.B.C.D | A:B:C:D:E:F:G:H] [file_name] [user_name] [password]

[A.B.C.D |

A:B:C:D:E:F:G:H]

Enter the IP address of your FTP server.

[file_name]

Enter the firmware file name that you want to upgrade.

[user_name]

Enter the username for FTP server login.

[password]

Enter the password for FTP server login.

Switch# firmware upgrade tftp [A.B.C.D | A:B:C:D:E:F:G:H] [file_name]

[A.B.C.D |

A:B:C:D:E:F:G:H]

Enter the IP address of your TFTP server.

[file_name]

Enter the firmware file name that you want to upgrade.

Example

Switch# firmware upgrade ftp 192.168.1.198 HS_0600_file.bin edgeswitch10 abcxyz

Switch# firmware upgrade tftp 192.168.1.198 HS_0600_file.bin

4. Backup a configuration file to TFTP server.

2.4.2 Firmware Command

To upgrade Firmware via FTP or TFTP server.

2.4.3 Reload Command

Command / Example

Switch# reload

Command / Example

Switch# write

Command / Example

Switch# config Switch(config)#

Switch# configure Switch(config)#

Command

Description

exit

Exit the Configuration Mode.

help

Display a list of available commands in Configuration Mode.

history

Show commands that have been used.

Set up the IP address and enable DHCP mode & IGMP snooping.

ipv6

Set up global IPv6 configuration commands.

loop-detection

Enable or disable Loop Detection function

mac

Set up each port’s MAC learning function.

management

Set up the system service type.

mirror

Set up port mirroring function.

ntp

Set up required configurations for Network Time Protocol.

qos

Set up the priority of packets within the Managed Switch.

snmp-server

Create a new SNMP community and trap destination and specify the trap types.

To restart the Managed Switch, enter the reload command.

2.4.4 Write Command

To save running configurations to startup configurations, enter the write command. All unsaved configurations will be lost when you restart the Managed Switch.

2.4.5 Configure Command

The only place where you can enter Global Configuration Mode is in Privileged Mode. You can type in “configure” or “config” for short to enter Global Configuration Mode. The display prompt will change from “Switch#” to “Switch(config)#” once you successfully enter Global Configuration Mode.

2.5 Configuration Mode

When you enter “configure” and press “Enter” in Privileged Mode, you will be directed to Global Configuration Mode where you can set up advanced switching functions, such as QoS, VLAN, and storm control security globally. Any command entered will be applied to runningconfiguration and the device’s operation. From this level, you can also enter different subconfiguration modes to set up specific configurations for VLAN, QoS, security or interfaces.

switch

Enable or disable SFP and counter polling function.

switch-info

Specify company name, host name, system location, etc..

user

Create a new user account.

vlan

Set up VLAN mode and VLAN configuration.

Disable a command or set it back to its default setting.

interface

Set up the selected interfaces’ advanced features.

show

Show a list of commands or show the current setting of each listed command.

2.5.1 Entering Interface Numbers

Commands

Description

Switch(config)# interface 1 Switch(config-if-1)#

Enter a single interface. Only interface 1 will apply to commands entered.

Switch(config)# interface 1,3,5 Switch(config-if-1,3,5)#

Enter three discontinuous interfaces, separating by a comma. Interface 1, 3, 5 will apply to commands entered.

Switch(config)# interface 1-3 Switch(config-if-1-3)#

Enter three continuous interfaces. Use a hyphen to signify a range of interface numbers. In this example, interface 1, 2, and 3 will apply to commands entered.

Switch(config)# interface 1,3-5 Switch(config-if-1,3-5)#

Enter a single interface number together with a range of interface numbers. Use both commas and hyphens o signify the combination of different interface numbers. In this example, interface 1, 3, 4, 5 will apply to commands entered.

In the Global Configuration Mode, you can configure a command that is only applied to interfaces specified. For example, you can set up each interface’s VLAN assignment, speed, or duplex mode. To configure, you must first enter the interface number. There are four ways to enter your interface numbers to signify the combination of different interfaces that apply to a command or commands.

The “interface” command can be used together with other commands such as “QoS” and “VLAN”. Please refer to the following sections for more detailed usages.

2.5.2 No Command

Most commands that you enter in Configuration mode can be negated using “no” command followed by the same or original command. The purpose of “no” command is to disable a function, remove a command, or set the setting back to the default value. In each sub-section below, the use of no command to fulfill different purposes will be introduced.

2.5.3 Show Command

The command “show” is very important for network administrators to get information about the device, receive outputs to verify a command’s configurations or troubleshoot a network configuration error. “Show” command can be used in Privileged or Configuration mode.

2.5.4 Interface Command

Command

Parameter

Description

Switch(config)# interface [port_list]

[port_list]

Enter several port numbers separated by commas or a range of port numbers. For example: 1,3 or 2-4

Switch(config-if-PORT-PORT)# auto-negotiation

Set the selected interfaces’ to autonegotiation. When auto-negotiation is enabled, speed configuration will be ignored.

Switch(config-if-PORT-PORT)# description [description]

[description]

Specify a descriptive name for the selected interfaces.

Switch(config-if-PORT-PORT)# duplex full

Set the selected interfaces’ to full duplex mode.

Switch(config-if-PORT-PORT)# flowcontrol

Enable the selected interfaces’ flow control function.

Switch(config-if-PORT-PORT)# shutdown

Administratively disable the selected ports’ status.

Switch(config-if-PORT-PORT)# speed [1000 |100 | 10]

[1000 |100 |

10]

Set up the selected interfaces’ speed. Speed configuration only works when “no auto-negotiation” command is issued.

Switch(config-if-PORT-PORT)# vlan option60

Enable the ports to receive Option60 packet.

No command

Switch(config-if-PORT-PORT)# no autonegotiation

Set auto-negotiation setting to the default setting.

Switch(config-if-PORT-PORT)# no duplex

Set the selected ports’ duplex mode to the default setting.

Switch(config-if-PORT-PORT)# no speed

Set the selected ports’ speed to the default setting.

Switch(config-if-PORT-PORT)# no flowcontrol

Set the selected ports’ flow control function to the default setting.

Switch(config-if-PORT-PORT)# no description

Remove the entered description name for the selected ports.

Switch(config-if-PORT-PORT)# no shutdown

Administratively enable the selected ports’ status.

Show command

Switch(config)# show interface status

Show each interface’s port status including media type, forwarding state, speed, duplex mode, flow control and link up/down status.

Interface command example

Switch(config)# interface 1-3

Enter port 1 to port 3’s interface mode.

Switch(config-if-1-3)# auto-negotiation

Set the selected interfaces’ to autonegotiation.

Use this command to set up various port configurations of discontinuous or a range of ports.

Switch(config-if-1-3)# duplex full

Set the selected interfaces’ to full duplex mode.

Switch(config-if-1-3)# speed 100

Set the selected ports’ speed to 100Mbps.

Switch(config-if-1-3)# shutdown

Administratively disable the selected ports’ status.

IP command

Parameter

Description

Switch(config)# ip address [A.B.C.D] [255.X.X.X] [A.B.C.D]

[A.B.C.D]

Enter the desired IP address for the Managed Switch.

[255.X.X.X]

Enter subnet mask of your IP address.

[A.B.C.D]

Enter the default gateway address.

Switch(config)# ip dhcp snooping

Enable DHCP Snooping function

Switch(config)# ip dhcp snooping dhcp-server [port_list]

[port_list]

Specify DHCP server trust ports.

No command

Switch(config)# no ip address

Remove the Switch’s IP address.

Show command

Switch(config)# show ip address

Show the current IP configurations or verify the configured IP settings.

IP command example

Switch(config)# ip address 192.168.1.198

255.255.255.0 192.168.1.254

Set up the Switch’s IP to 192.168.1.198, subnet mask to 255.255.255.0, and default gateway to 192.168.1.254.

Command / Example

Description

Switch(config)# ip address dhcp

Enable DHCP mode.

No command

Switch(config)# no ip address dhcp

Disable DHCP mode.

Show command

Switch(config)# show ip address

Show the current IP configurations or verify the configured IP settings.

Command / Example

Parameter

Description

Switch(config)# ip dhcp snooping

Enable DHCP snooping function.

Switch(config)# ip dhcp snooping dhcp-server [port_list]

[port_list]

Specify DHCP server trust ports.

No command

Switch(config)# no ip dhcp snooping

Disable IGMP snooping function.

Switch(config)# no ip dhcp snooping dhcp-

Remove all the DHCP server trust ports

2.5.5 IP Command

Configure IP address and related settings such as DHCP snooping and IGMP snooping.

1. Set up or remove the IP address of the Managed Switch.

2. Enable the Managed Switch to automatically get IP address from the DHCP server.

3. Enable or disable DHCP snooping globally.

server

Show command

Switch(config)# show ip dhcp snooping

Show current DHCP snooping status including DHCP server trust ports.

Command / Example

Parameter

Description

Switch(config)# ip igmp snooping

Enable IGMP snooping function.

Switch(config)# ip igmp snooping aging-time

[1-6000] /10

sec.

Specify the IGMP querier aging time. If the switch does not receive join packets from the end device within the specified time, the entry associated with this end device will be removed from the IGMP table.

No command

Switch(config)# no ip igmp snooping

Disable IGMP snooping function.

Switch(config)# no ip igmp snooping aging time

Remove IGMP querier aging time setting.

Show command

Switch(config)# show ip igmp snooping

Show current IGMP snooping status including immediate leave function.

Switch(config)# show ip igmp snooping groups

Show IGMP group table. When IGMP Snooping is enabled, the Switch is able to read multicast group IP and the corresponding MAC address from IGMP packets that enter the device.

4. Enable or disable IGMP snooping globally.

IGMP, Internet Group Management Protocol, is a communications protocol used to manage the membership of Internet Protocol multicast groups. IGMP is used by IP hosts and adjacent multicast routers to establish multicast group memberships. It can be used for online streaming video and gaming, and allows more efficient use of resources when supporting these uses.

IGMP Snooping is the process of listening to IGMP traffic. IGMP snooping, as implied by the name, is a feature that allows the switch to “listen in” on the IGMP conversation between hosts and routers by processing the layer 3 packets IGMP packets sent in a multicast network.

When IGMP snooping is enabled in a switch, it analyses all the IGMP packets between hosts connected to the switch and multicast routers in the network. When a switch hears an IGMP report from a host for a given multicast group, the switch adds the host’s port number to the multicast list for that group. And, when the switch hears an IGMP Leave, it removes the host’s port from the table entry.

IGMP snooping can effectively reduce multicast traffic from streaming and other bandwidth intensive IP applications. A switch using IGMP snooping will only forward multicast traffic to the hosts interested in that traffic. This reduction of multicast traffic reduces the packet processing at the switch (at the cost of needing additional memory to handle the multicast tables), and also the workload at the end hosts since their network cards (or operating system) will not have to receive and filter all the multicast traffic generated in the network.

Command / Example

Description

Switch(config)# ip igmp snooping immediateleave

Enable IGMP immediate leave function.

No command

Switch(config)# no ip igmp snooping immediate-leave

Disable IGMP immediate leave function.

Show command

Switch(config)# show ip igmp snooping

Show current IGMP snooping status including immediate leave function.

Switch(config)# show ip igmp snooping groups

Show IGMP group table.

5. Enable or disable IGMP snooping immediate-leave function.

This works only when IGMP Snooping is enabled. When Immediate Leave is enabled, the Switch immediately removes the port when it detects IGMPv1 & IGMPv2 leave message on that port.

2.5.6 IPv6 Command

Brief Introduction to IPv6 Addressing

IPv6 addresses are 128 bits long and number about 3.4×1038. IPv6 addresses are written in eight groups of four hexadecimal digits separated by colons, such as

2001:0db8:85a3:0000:0000:8a2e:0370:7334 IPv6 unicast addresses other than those that start with binary 000 are logically divided into

two parts: a 64-bit network prefix and a 64-bit interface identifier.

Stateless Autoconfiguration

IPv6 lets any host generate its own IP address and check if it's unique in the scope where it will be used. IPv6 addresses consist of two parts. The leftmost 64 bits are the subnet prefix to which the host is connected, and the rightmost 64 bits are the identifier of the host's interface on the subnet. This means that the identifier need only be unique on the subnet to which the host is connected, which makes it much easier for the host to check for uniqueness on its own.

Link local address

The first step a host takes on startup or initialization is to form a link-local address from its MAC address and the link-local prefix FE80::/10. This is done by putting the prefix into the leftmost bits and the MAC address (in EUI-64 format) into the rightmost bits, and if there are any bits left in between, those are set to zero.

IPv6 command

Parameter

Description

Switch(config)# ipv6 address autoconfig

Configuration of IPv6 addresses using stateless autoconfiguration.

Switch(config)# ipv6 address dhcp auto

Configure DHCPv6 function in auto mode.

Switch(config)# ipv6 address dhcp force

Configure DHCPv6 function in force mode.

Switch(config)# ipv6 address dhcp rapidcommit

Allows the two-way message exchange instead of 4-way for address assignment.

“ipv6 address dhcp” commands are functional only when autoconfiguration is

enabled.

Switch(config)# ipv6 address global [A:B:C:D:E:F:G:H/10~128] [A:B:C:D:E:F:G:H]

[A:B:C:D:E:F:G:H/10~128]

Specify switch IPv6 global address and prefix-length.

[A:B:C:D:E:F:G:H]

Specify switch IPv6 default gateway.

Switch(config)# ipv6 address link-local [A:B:C:D:E:F:G:H/10~128]

[A:B:C:D:E:F:G:H/10~128]

Specify switch IPv6 link-local address and prefix-length.

Switch(config)# ipv6 enable

Enable IPv6 processing.

No command

Switch(config)# no ipv6 address autoconfig

Disable IPv6 stateless autoconfig.

Switch(config)# no ipv6 address dhcp

Disable DHCPv6 function.

Switch(config)# no ipv6 address dhcp rapid-

Disable rapid-commit feature.

Global address

This is done in the same fashion as the link-local address, but instead of the link-local prefix FE80:: it will use the prefix supplied by the router and put it together with its identifier (which by default is the MAC address in EUI-64 format).

Some IPv6 addresses are reserved for special purposes, such as loopback, 6to4 tunneling, and Teredo tunneling, as outlined in RFC 5156. Also, some address ranges are considered special, such as link-local addresses for use on the local link only, Unique Local addresses (ULA), as described in RFC 4193, and solicited-node multicast addresses used in the Neighbor Discovery Protocol.

DHCPv6

IPv6 hosts may automatically generate IP addresses internally using stateless address autoconfiguration, or they may be assigned configuration data with DHCPv6.

Set up the IPv6 address of the Managed Switch or configure the Managed Switch to get an IP address automatically from DHCPv6 server.

commit

Switch(config)# no ipv6 address global

Clear IPv6 global address entry

Switch(config)# no ipv6 address link-local

Clear IPv6 link-local address entry

Switch(config)# no ipv6 enable

Disable IPv6 processing.

Show command

Switch(config)# show ipv6 address

Display IPv6 information of the Managed Switch.

IPv6 command example

Switch(config)# ipv6 address autoconfig

Enable Ipv6 autoconfiguration.

Switch(config)# ipv6 address dhcp auto

Enable DHCPv6 auto mode.

LLDP command

Parameter

Description

Switch(config)# lldp hold-time [1-3600]

[1-3600]

Specify the amount of time in seconds. A receiving device will keep the information sent by your device for a period of time you specify here before discarding it. The allowable hold-time value is between 1 and 3600 seconds.

Switch(config)# lldp interval [1-180]

[1-180]

Specify the time interval for updated LLDP packets to be sent. The allowable interval value is between 1 and 180 seconds.

Switch(config)# lldp packets [1-16]

[1-16]

Specify the amount of packets that are sent in each discovery. The allowable packet value is between 1 and 16 seconds.

Switch(config)# lldp tlvselect capability

Enable Capability attribute to be sent.

Switch(config)# lldp tlvselect managementaddress

Enable Management Address attribute to be sent. Switch(config)# lldp tlv-

select port-description

Enable Port Description attribute to be sent.

Switch(config)# lldp tlvselect systemdescription

Enable System Description attribute to be sent.

2.5.7 LLDP Command

LLDP stands for Link Layer Discovery Protocol and runs over data link layer. It is used for network devices to send information about themselves to other directly connected devices on the network. By using LLDP, two devices running different network layer protocols can learn information about each other. A set of attributes are used to discover neighbor devices. These attributes contains type, length, and value descriptions and are referred to TLVs. Details such as port description, system name, system description, system capabilities, and management

address can be sent and received on this Managed Switch. Use Spacebar to select “ON” if

you want to receive and send the TLV.

Switch(config)# lldp tlvselect system-name

Enable System Name attribute to be sent.

No command

Switch(config)# no lldp hold-time

Reset the hold-time value back to the default setting.

Switch(config)# no lldp initiated-delay

Reset the initiated-delay value back to the default setting.

Switch(config)# no lldp interval

Reset the interval value back to the default setting.

Switch(config)# no lldp packets

Reset the packets-to-be-sent value back to the default setting.

Switch(config)# no lldp tlv-select capability

Disable Capability attribute to be sent.

Switch(config)# no lldp tlv-select management-address

Disable Management Address attribute to be sent.

Switch(config)# no lldp tlv-select portdescription

Disable Port Description attribute to be sent.

Switch(config)# no lldp tlv-select system-description

Disable System Description attribute to be sent.

Switch(config)# no lldp tlv-select system-name

Disable System Name attribute to be sent.

Show command

Switch(config)# show lldp

Show or verify LLDP settings.

Switch(config)# show lldp interface

Show or verify each interface’s LLDP port state.

Switch(config)# show lldp interface [port_list]

Show or verify the selected interfaces’ LLDP port state.

Switch(config)# show lldp status

Show current LLDP status.

LLDP command example

Description

Switch(config)# lldp hold-time 60

Set the hold-time value to 60 seconds.

Switch(config)# lldp initiated-delay 60

Set the initiated-delay value to 60 seconds

Switch(config)# lldp interval 10

Set the updated LLDP packets to be sent in very 10 seconds.

Switch(config)# lldp packets 2

Set the number of packets to be sent in each discovery to 2.

Switch(config)# lldp tlv-select capability

Enable Capability attribute to be sent.

Switch(config)# lldp tlv-select management-address

Enable Management Address attribute to be sent.

Switch(config)# lldp tlv-select portdescription

Enable Port Description attribute to be sent.

Switch(config)# lldp tlv-select systemdescription

Enable System Description to be sent.

Switch(config)# lldp tlv-select systemname

Enable System Name to be sent.

LLDP & Interface command

Parameter

Description

Switch(config)# interface [port_list]

[port_list]

Enter several discontinuous port numbers separated by commas or a

Use “Interface” command to configure a group of ports’ LLDP settings.

range of ports with a hyphen. For example:1,3 or 2-4

Switch(config-if-PORTPORT)# lldp

Enable LLDP on the selected interfaces.

No command

Switch(config-if-PORTPORT)# no lldp

Disable LLDP on the selected interfaces.

Show command

Switch(config)# show lldp

Show or verify LLDP configurations.

Loop Detection command

Description

Switch(config)# loop-detection

Globally enable Loop Detection function. By default, this function is disabled.

Switch(config)# loop-detection unlock interval

Set up the time interval for the locked ports to be unlocked

Switch(config-if-PORT-PORT)# loop-detection

Enable Loop Detection function on the selected ports.

No command

Switch(config)# no loop-detection

Globally disable Loop Detection function.

Switch(config-if-PORT-PORT)# no loopdetection

Disable Loop Detection function on the selected physical ports.

Show command

Switch(config)# show loop-detection

Show current Loop Detection configuration.

Switch(config)# show loop-detection status

Show information concerning locked ports and locked cause.

Note: Please note that Loop Detection function is only available on LAN 1~8 port.

MAC Command

Parameter

Description

Switch(config)# mac addresstable aging-time [1-800]

[1-800]

Enter aging time for MAC address table. Numbers available are from 1 to 800.

No command

2.5.8 Loop Detection Command

Enable or disable Loop Detection function. Loop Detection allows users to configure the Managed Switch to lock a port when it detects

packets that sent out on that port loop back to the switch. When loops occur, it will cause broadcast storm and affect the performance of layer two Access switch. To avoid this, Loop Detection can be enabled on LAN port of the Managed Switch. When it detects the loop, it will lock the port which receives the loop packet immediately and send out SNMP trap to inform the network administrator.

2.5.9 MAC Command

Set up MAC address table aging time. Entries in the MAC address table containing source MAC addresses and their associated ports will be deleted if they are not accessed within the specified aging time.

Switch(config)# no mac address-table agingtime

Set MAC address table aging time to the default value (300 seconds).

Show command

Switch(config)# show mac agingtime

Show current MAC address table aging time or verify currently configured aging time.

Switch(config)# show mac address-table

Show MAC addresses learned by the Managed Switch. Only 20 entries will be displayed at a time. If there are more than 20 entries, please issue this command again to show the following entries.

Switch(config)# show mac address-table interface [port_list]

[port_list]

Show MAC addresses learned by the selected port. Only 20 entries will be displayed at a time. If there are more than 20 entries, please issue this command again to show the following entries.

Switch(config)# show mac address-table top

Show the entries starting from the very first entry.

MAC command example

Switch(config)# mac address-table aging-time 600

Set MAC address table aging time to 600 seconds.

2.5.10 Management Command

Management command

Parameter

Description

Switch(config)# management [ssh | telnet]

[ssh |

telnet]

Enable the desired system service type, SSH or telnet.

No command

Switch(config)# no management [ssh | telnet]

[ssh |

telnet]

Disable the selected system service type.

Show command

Switch(config)# show management

Show the current system service type.

Management command example

Switch(config)# management ssh

Enable SSH system service type.

Mirror Command

Parameter

Description

Switch(config)# mirror destination [port_list]

[1-9]

Enable port mirroring function and specify the destination port to which the mirrored traffic will be forwarded.

Switch(config)# mirror source [port_list]

[1-9]

Specify the port to be mirrored.

No command

Switch(config)# no mirror destination

Disable port mirroring function.

Switch(config)# no mirror source

Set the source port to port 1.

Show command

Switch(config)# show mirror

Show current port mirroring destination port and source port settings

Mirror command example

Switch(config)# mirror destination 5

Enable port mirroring function and select port 5 as the destination port.

Command

Parameter

Description

Switch(config)# ntp

Enable the Managed Switch to synchronize the clock with a time server.

Switch(config)# ntp server1 [A.B.C.D | A:B:C:D:E:F:G:H]

[A.B.C.D |

A:B:C:D:E:F:G:H]

Specify the primary time server IP address.

Select the desired management interface.

2.5.11 Mirror Command

Set up port mirroring function.

2.5.12 NTP Command

Set up required configurations for Network Time Protocol.

Switch(config)# ntp server2 [A.B.C.D | A:B:C:D:E:F:G:H]

[A.B.C.D |

A:B:C:D:E:F:G:H]

Specify the secondary time server IP address.

Switch(config)# ntp syn-interval [1-8]

[1-8]

Specify the interval time to synchronize with the NTP time server.

1: 1 hour ; 2: 2 hours; 3: 3 hours; 4: 4 hours 5: 6 hours; 6: 8 hours; 7: 12 hours; 8: 24 hours

Switch(config)# ntp time-zone [0-135]

[0-135]

Specify the time zone to that the Managed Switch belongs. Use any key to view the complete code list of 136 time zones. For example, “Switch(config)# ntp time-zone ?”

No command

Switch(config)# no ntp

Disable the Managed Switch to synchronize the clock with a time server.

Switch(config)# no ntp server1

Delete the primary time server IP address.

Switch(config)# no ntp server2

Delete the secondary time server IP address.

Switch(config)# no ntp syn-interval

Set the synchronization interval back to the default setting.

Switch(config)# no ntp time-zone

Set the time-zone setting back to the default setting.

Show command

Switch(config)# show ntp

Show or verify current time server settings.

NTP command example

Switch(config)# ntp

Enable the Managed Switch to synchronize the clock with a time server.

Switch(config)# ntp server1 192.180.0.12

Set the primary time server IP address to 192.180.0.12.

Switch(config)# ntp server2 192.180.0.13

Set the secondary time server IP address to 192.180.0.13.

Switch(config)# ntp syn-interval 5

Set the synchronization interval to 6 hours.

Switch(config)# ntp time-zone 3

Set the time zone to GMT-8:00 Vancouver.

2.5.13 QoS Command

QoS command

Parameter

Description

Switch(config)# qos [port-based |

802.1p | dscp | vid]

[port-based

| 802.1p |

dscp | vid]

Specify one QoS mode.

port-based: Use “interface” and “qos default-class” command to assign a

queue to the selected interfaces.

802.1p: Use “qos 802.1p-map” command

to assign priority bits to a queue. dscp: Use “qos dscp-map” to assign the

DSCP value to a queue. vid: Use “qos vid-map” command to

assign the VID to a queue.

No command

Switch(config)# no qos

Disable QoS function.

Show command

Switch(config)# show qos

Show or verify QoS configurations.

QoS command example

Switch(config)# qos 802.1p

Enable QoS function and use 802.1p mode.

Switch(config)# qos dscp

Enable QoS function and use DSCP mode.

Switch(config)# qos port-based

Enable QoS function and use port-based mode.

Switch(config)# qos vid

Enable QoS function and use VID mode.

DSCP-map command

Parameter

Description

Switch(config)# qos dscp-map [063] dscp_list [0-3]

[0-63]

dscp_list

Specify the corresponding DSCP value you want to map to a priority queue.

[0-3]

Specify a queue to which the DSCP value is assigned.

No command

Switch(config)# no qos dscp-map [0-63] dscp_list

[0-63]

dscp_list

Set the specific DSCP value’s queue mapping back to the default setting.

DSCP-map example

Switch(config)# qos dscp-map 50 3

Mapping DSCP value 50 to priority queue

1. Specify the desired QoS mode.

2. Set up the DSCP and queue mapping.

3. Set up management traffic priority and port user priority.

Management-priority command

Parameter

Description

Switch(config)# qos management-priority [0-7]

[0-7]

Specify 802.1p priority bit for the management traffic.

Port user priority command

Switch(config-if-PORT-PORT)# qos user-priority [0-7]

[0-7]

Specify the user priority between 0 and 7 for the ports.

No command

Switch(config)# no qos management-priority

Set the priority bit setting of the management traffic back to the default.

Switch(config-if-PORT-PORT)# no qos userpriority

Set the selected ports’ user priority setting back to the default.

Management-priority example

Switch(config)# qos management-priority 4

Set the priority bit of the management traffic to 4.

Port user priority example

Switch(config)# interface 1-3

Enter several discontinuous port numbers separated by commas or a range of ports with a hyphen.

Switch(config-if-1-3)# qos user-priority 3

Set the user priority to 3 for the selected ports.

NOTE: To check the setting of management traffic priority and port user priority, please

refer to 2.5.17 VLAN Command.

Queuing-mode command

Parameter

Description

Switch(config)# qos queuingmode [weight]

[weight]

By default, “strict” queuing mode is used. If you want to use “weight” queuing mode, you need to disable “strict” mode.

Strict mode: Traffic assigned to queue 3 will be transmitted first, and the traffic assigned to queue 2 will not be transmitted until queue 3’s traffic is all transmitted, and so forth.

Weight mode: All queues have fair opportunity of dispatching. Each queue has the specific amount of bandwidth according to its assigned weight.

No command

Switch(config)# no qos queuing-mode

Set the queuing mode to Strict mode.

Show command

Switch(config)# show qos

Show or verify QoS configurations.

Queuing-mode example

Switch(config)# qos queuing-mode weight

Change the queuing mode to Weight.

4. Set up QoS queuing mode.

5. Set up 802.1p and DSCP remarking

Remarking command

Parameter

Description

Switch(config)# qos remarking [dscp | 802.1p]

[dscp |

802.1p]

Enable the specific remarking mode dscp: Configure the queue and DSCP

mapping

queue.

<0-63>: Assign the DSCP value to the

specific queue.

Example: Switch(config)# qos remarking dscp Q1 48

802.1p: configure the queue and 802.1p priority bit mapping

<Q0 | Q1 | Q2 | Q3>: Specify the queue. <0-7>: Assign the 802.1p priority bit to

the specific queue.

Example: Switch(config)# qos remarking 802.1p Q3 5

No command

Switch(config)# no qos remarking [dscp | 802.1p]

[dscp |

802.1p]

Disable DSCP or 802.1p bit remarking.

Switch(config)# no qos remarking [dscp | 802.1p] [Q0 | Q1 | Q2 | Q3]

[dscp |

802.1p]

Set the DSCP or 802.1p bit value in the specific queue back to the default setting.

[Q0 | Q1 |

Q2 | Q3]

Show command

Switch(config)# show qos remarking

Show current DSCP and 802.1p priority bit remarking configuration.

Remarking example

Switch(config)# qos remarking 802.1p Q3 5

Assign 802.1p bit 5 to priority queue3.

Switch(config)# no qos remarking dscp Q1

Set the DSCP value in priority queue 1 back to the default setting.

Vid-map command

Parameter

Description

Switch(config)# qos vid-map [1-8]

[1-8]

Select the mapping entry.

Switch(config-vid-map-ID)# active

Enable the mapping entry.

Switch(config-vid-map-ID)# vlanid [1-4094]

[1-4094]

Specify the VLAN ID.

Switch(config-vid-map-ID)# queue [0-3]

[0-3]

Specify the queue to which the specified VLAN ID is assigned.

Switch(config-vid-map-ID)# exit

Exit the specific entry.

6. Set up VLAN ID and queue mapping

No command

Switch(config)# no qos vid-map [1-8]

[1-8]

Set the specific entry back to the default setting.

Switch(config-vid-map-ID)# no [ active | vlan-id | queue]

[ active |

vlan-id |

queue]

Disable the mapping entry, or set VLAN ID or queue back to the default setting.

Show command

Switch(config-vid-map-ID)# show

Display the mapping configuration of the specific entry.

Vid-map example

Switch(config)# qos vid-map 1

Configure vid-map entry 1.

Switch(config-vid-map-1)# active

Enable vid-map entry 1.

Switch(config-vid-map-1)# vlan-id 100

Assign VID 100 to vid-map entry 1.

Switch(config-vid-map-1)# queue 2

Assign vid-map entry 1 to queue 2.

Switch(config-vid-map-1)# exit

Exit vid-map entry 1.

802.1p-map command

Parameter

Description

Switch(config)#qos 802.1p-map [0-7] 802.1p_list [0-3]

[0-7]

802.1p_list

Assign a 802.1p priority bit or several

802.1p priority bits for mapping.

Priority Level

Low

Normal

Medium

High

802.1p Value

0 1 2 3 4 5 6

[0-3]

Assign a queue value for mapping.

No command

Switch(config)#no qos 802.1pmap [0-7] 802.1p_list

[0-7]

802.1p_list

Assign a 802.1p priority bit or several

802.1p priority bits that you want to delete or remove.

Show command

Switch(config)# show qos

Show or verify QoS configurations.

802.1p-map example

Switch(config)# qos 802.1p-map 6-7 3

Map priority bit 6 and 7 to queue 4.

Switch(config)# no qos 802.1p-map 6-7

Delete or remove 802.1p priority bit 6 and 7’s mapping.

QoS & Interface command

Parameter

Description

Switch(config)# interface [port_list]

[port_list]

Enter several port numbers separated by commas or a range of port numbers. For example: 1,3 or 2-4

Switch(config-if-PORT-PORT)# qos default-class [0-3]

[0-3]

Specify the default class for the selected interfaces.

Switch(config-if-PORT-PORT)# qos rate-limit ingress [8-1048568] kbps

[8-1048568]

kbps

Specify the ingress rate between 8 and

1048568.

7. Assign a tag priority to the specific queue.

8. Use interface command to set up default class and ingress and egress rate limit.

Switch(config-if-PORT-PORT)# qos rate-limit egress [8-1048568] kbps

[8-1048568]

kbps

Specify the egress rate between 8 and

1048568.

No command

Switch(config-if-PORT-PORT)# no qos defaultclass

Set QoS default class setting to the default.

Switch(config-if-PORT-PORT)# no qos rate-limit ingress

Set QoS ingress rate limit setting to the default.

Switch(config-if-PORT-PORT)# no qos rate-limit egress

Set QoS ingress rate limit setting to the default.

Show command

Switch(config)# show qos interface [port_list]

[port_list]

Show or verify the selected interfaces’ ingress and egress rate configurations.

Switch(config)# show qos interface

Show or verify each interface’s ingress and egress rate configurations.

Switch(config)# show qos

Show or verify QoS configurations.

QoS & Interface example

Switch(config)# interface 1-3

Enter several discontinuous port numbers separated by commas or a range of ports with a hyphen. For example:1,3 or 2-4

Switch(config-if-1-3)# qos rate-limit ingress 1550

Configure the selected interfaces’ ingress rate-limit to 1550.

Switch(config-if-1-3)# qos rate-limit egress 3 1550

Set the selected interfaces’ queue 3 to egress rate 1550.

Security command

Parameter

Description

Switch(config)# interface [port_list]

[port_list]

Enter several port numbers separating by a comma or a range of port numbers. For example: 1,3 or 2-4

Switch(config-if-PORT-PORT)# security stormprotection

Enable the selected interfaces’ storm protection function.

Switch(config-if-PORT-PORT)# security stormprotection broadcast

Enable the selected interfaces’ broadcast storm protection function.

Switch(config-if-PORT-PORT)# security stormprotection multicast

Enable the selected interfaces’ multicast storm protection function.

2.5.14 Security Command

When a device on the network is malfunctioning or application programs are not well designed or properly configured, broadcast storms may occur, which may degrade network performance or in the worst situation cause a complete halt. The Managed Switch allows users to set a threshold rate for broadcast traffic on a per switch basis so as to protect network from broadcast/ multicast/ unknown unicast storms. Any broadcast / multicast / unknown unicast packet exceeding the specified value will then be dropped.

1. Enable or disable broadcast/multicast/unknown unicast storm control.

Switch(config-if-PORT-PORT)# security stormprotection unknown-multicast

Enable the selected interfaces’ unknown multicast storm protection function.

Switch(config-if-PORT-PORT)# security stormprotection unknown-unicast

Enable the selected interfaces’ unknown unicast storm protection function.

No command

Switch(config-if-PORT-PORT)# no security storm-protection

Disable storm protection globally.

Switch(config-if-PORT-PORT)# no security storm-protection broadcast

Disable broadcast storm protection.

Switch(config-if-PORT-PORT)# no security storm-protection multicast

Disable multicast storm protection.

Switch(config-if-PORT-PORT)# no security storm-protection unknown-multicast

Disable unknown multicast storm protection.

Switch(config-if-PORT-PORT)# no security storm-protection unknown-unicast

Disable unknown unicast storm protection.

Show command

Switch(config)# show security storm-protection interface [port_list]

[port_list]

Show the selected interfaces’ security settings and storm control rates.

Switch(config)# show security storm-protection interface

Show each interface’s security settings including storm control rates.

Security command

Parameter

Description

Switch(config-if-PORT-PORT)# security storm-protection rates [81048568]

[8-1048568]

Enter the maximum rate per second. Any broadcast, multicast, unknown

multicast and unknown unicast packet exceeding the specified value will be dropped.

No command

Switch(config-if-PORT-PORT)# no security storm-protection rates

Remove the rate setting. The storm protection rate will be set to the default (256kbps).

Show command

Switch(config)# show security storm-protection interface [port_list]

[port_list]

Show the selected interfaces’ security settings and storm control rates.

Switch(config)# show security storm-protection interface

Show each interface’s security settings including storm control rates.

Security command example

Switch(config-if-PORT-PORT)# security stormprotection rates 5000

Set broadcast, multicast, unknown multicast, and unknown unicast storm protection rates to 5000kbps.

2. Specify the broadcast, multicast, unknown multicast and unknown unicast storm protection rates per second.

2.5.15 SNMP-Server Command

Snmp-server command

Parameter

Description

Switch(config)# snmp-server community [community]

[community]

Specify a SNMP community name up to 20 alphanumeric characters.

Switch(config-communityNAME)# active

Enable this SNMP community account.

Switch(config-communityNAME)# description [Description]

[Description]

Enter the description up to 35 alphanumerical characters for this SNMP community.

Switch(config-communityNAME)# level [admin | rw | ro]

[admin | rw |

ro]

Specify the access privilege for this SNMP account. By default, when you create a community, the access privilege for this account is set to “read only”.

Admin: Full access right, including maintaining user account, system information, loading factory settings, etc..

rw: Read & Write access privilege. Partial access right, unable to modify system information, user account, load factory settings and upgrade firmware.

Ro: Read Only access privilege.

No command

Switch(config)# no snmp-server community [community]

[community]

Delete the specified community.

Switch(config-community-NAME)# no active

Disable this SNMP community account.

Switch(config-community-NAME)# no description

Remove the entered SNMP community descriptions.

Switch(config-community-NAME)# no level

Remove the configured level. This will set this community’s level to read only.

Show command

Switch(config)# show snmpserver community [community]

[community]

Show the specified SNMP server account’s settings.

Switch(config)# show snmp-server community

Show SNMP community account’s information in Global Configuration Mode.

Switch(config-community-NAME)# show

View or verify the configured SNMP community account’s information.

Exit command

Switch(config-community-NAME)# exit

Return to Global Configuration Mode.

Snmp-server example

Switch(config)# snmp-server community mycomm

Create a new community “mycomm” and edit the details of this community account.

Switch(config-community-mycomm)# active

Activate “mycomm” SNMP community.

1. Create a SNMP community and set up detailed configurations for this community.

Switch(config-community-mycomm)# description rddeptcomm

Add a description for “mycomm” community.

Switch(config-community-mycomm)# level admin

Set “mycomm” community level to admin.

Trap-dest command

Parameter

Description

Switch(config)# snmp-server trap-destination [1-3]

[1-3]

Create a trap destination account.

Switch(config-trap-ACCOUNT)# active

Enable this SNMP trap destination account.

Switch(config-trap-ACCOUNT)# community [community]

[community]

Enter the community name of network management system.

Switch(config-trap-ACCOUNT)# destination [A.B.C.D | A:B:C:D:E:F:G:H]

[A.B.C.D |

A:B:C:D:E:F:G:H]

Enter the SNMP server IP address.

No command

Switch(config)# no snmp-server trap-destination [1-3]

[1-3]

Delete the specified trap destination account.

Switch(config-trap-ACCOUNT)# no active

Disable this SNMP trap destination account.

Switch(config-trap-ACCOUNT)# no community

Delete the configured community name.

Switch(config-trap-ACCOUNT)# no description

Delete the configured trap destination description.

Show command

Switch(config)# show snmpserver trap-destination [1-3]

[1-3]

Show the specified trap destination information.

Switch(config)# show snmp-server trap-destination

Show SNMP trap destination information in Global Configuration mode.

Switch(config-trap-ACCOUNT)# show

View this trap destination account’s information.

Exit command

Switch(config- trap-ACCOUNT)# exit

Return to Global Configuration Mode.

Trap-destination example

Switch(config)# snmp-server trap-destination 1

Create a trap destination account.

Switch(config-trap-1)# active

Activate the trap destination account.

Switch(config-trap-1)# community mycomm

Refer this trap destination account to the community “mycomm”.

Switch(config-trap-1)# description redepttrapdest

Add a description for this trap destination account.

Switch(config-trap-1)# destination 172.168.1.254

Set trap destination IP address to

192.168.1.254.

2. Set up a SNMP trap destination.

3. Set up SNMP trap types that will be sent.

Trap-type command

Parameter

Description

[all | authfail | batterymode | cold-

start | port-

link | power-

down |

warm-start]

Specify the trap type that will be sent when a certain situation occurs.

all: Each type of trap will be sent when

the corresponding situation occurs. Please see below for more details.

auth-fail: A trap will be sent when any

unauthorized user attempts to login.

battery-mode: Traps for different battery behaviors will be sent when the battery is installed

cold-start: A trap will be sent when the

device boots up.

port-link: A trap will be sent when the link is up or down.

power-down: A trap will be sent when the device’s power is down.

warm-start: A trap will be sent when the

device restarts.

No command

Switch(config)# no snmp-server trap-type authfail

Authentication failure trap will not be sent.

Show command

Switch(config)# show snmp-server trap-type

Show the current enable/disable status of each type of trap.

Trap-type example

Switch(config)# snmp-server trap-type all

All types of SNMP traps will be sent.

2.5.16 Switch Command

Switch command

Description

Switch(config)# switch sfp polling

Enable the Switch to refresh SFP DMI information and current state in a fixed interval.

Switch(config)# switch statistics polling

Enable the Switch to refresh counter information and current state in a fixed interval.

No command

Switch(config)# no switch sfp polling

Disable the Switch to refresh SFP DMI information and current state in a fixed interval.

Switch(config)# no switch statistics polling

Disable the Switch to refresh counter information and current state in a fixed interval.

Switch-info Command

Parameter

Description

Switch(config)# switch-info company-name [company_name]

[company_name]

Enter a company name for this Switch, up to 55 alphanumeric characters.

Switch(config)# switch-info dhcp-vendor-id [dhcp_vendor_id]

[dhcp_vendor_id]

Enter the user-defined DHCP vendor ID up to 55 alphanumeric characters. Please make sure you have an exact DHCP Vendor ID with the value specified in “vendor-classes” in your dhcp.conf file. For detailed information, see Appendix A.

Switch(config)# switch-info system-contact [system_contact]

[system_contact]

Enter contact information up to 55 alphanumeric characters for this Managed switch.

Switch(config)# switch-info system-location [system_location]

[system_location]

Enter a brief description of the Managed Switch location up to 55 alphanumeric characters. Like the name, the location is for reference only, for example, “13

Floor”.

Switch(config)# switch-info system-name [system_name]

[system_name]

Enter a unique name up to 55 alphanumeric characters for this Managed Switch. Use a descriptive name to identify the Managed Switch in relation to your network, for example,

“Backbone 1”. This name is mainly

used for reference only.

2.5.17 Switch-info Command

Set up the Managed Switch’s basic information including company name, hostname, system name, etc..

Switch(config)# switch-info host-name [host_name]

[host_name]

Enter a new hostname up to 15 alphanumeric characters for this Managed Switch. By default, the hostname prompt shows the model name of this Managed Switch. You can change it to the one that is easy for you to identify during network configuration and maintenance.

No command

Switch(config)# no switch-info company-name

Delete the entered company name information.

Switch(config)# no switch-info system-contact

Delete the entered system contact information.

Switch(config)# no switch-info system-location

Delete the entered system location information.

Switch(config)# no switch-info system-name

Delete the entered system name information.

Switch(config)# no switch-info host-name

Set the hostname to the factory default.

Show command

Switch(config)# show switch-info

Show Switch information including company name, system contact, system location, system name, model name, firmware version and fiber type.

Switch-info example

Switch(config)# switch-info company-name telecomxyz

Set the company name to “telecomxyz”.

Switch(config)# switch-info system-contact info@company.com

Set the system contact field to “info@compnay.com”.

Switch(config)# switch-info system-location 13thfloor

Set the system location field to “13thfloor”.

Switch(config)# switch-info system-name backbone1

Set the system name field to “backbone1”.

User command

Parameter

Description

Switch(config)# user name [user_name]

[user_name]

Enter the new account’s username. The authorized user login name is up to 20 alphanumeric characters. Only 3 login accounts can be registered in this device.

Switch(config-userUSERNAME)# active

Activate this user account.

2.5.18 User Command

Create a new login account and set up RADIUS function.

1. Configure user login account.

Switch(config-userUSERNAME)# description [description]

[description]

Enter the brief description for this user account.

Switch(config-userUSERNAME)# level [admin | rw | ro]

[admin | rw | ro]

Specify user account level. By default, when you create a community, the access privilege for this account is set to “read only”.

Admin: Full access right, including maintaining user account, system information, loading factory settings, etc..

rw: Read & Write access privilege. Partial access right, unable to modify system information, user account, load factory settings and upgrade firmware.

Ro: Read Only access privilege.

Switch(config-userUSERNAME)# password [password]

[password]

Enter the password for this user account up to 20 alphanumeric characters.

No command

Switch(config)# no user name [user_name]

[user_name]

Delete the specified user account.

Switch(config-user-USERNAME)# no description

Remove the configured description.

Switch(config-user-USERNAME)# no level

Remove the configured level value. The account level will return to the default setting.

Switch(config-user-USERNAME)# no password

Remove the configured password value.

Show command

Switch(config)# show user name [user_name]

[user_name]

Show the specified account’s information.

Switch(config)# show user name

List all user accounts.

Switch(config-user-USERNAME)# show

Show or verify the newly-created user account’s information.

User command example

Switch(config)# user name miseric

Create a new login account “miseric”.

Switch(config-user-USERNAME)# description misengineer

Add a description to this new account “miseric”.

Switch(config-user-USERNAME)# level rw

Set this new account’s access privilege to “read & write”.

Switch(config-user-USERNAME)# password mis2256i

Set up a password for this new account “miseric”

2. Set up RADIUS authentication function.

User command

Parameter

Description

Switch(config)# user radius

Enable RADIUS authentication function.

Switch(config)# user radius radius-port [1025-65535]

[1025-

65535]

Specify the RADIUS port number.

Switch(config)# user radius retrytime [0-2]

[0-2]

Specify the number of retry times when the Switch gets no response from the RADIUS server.

Switch(config)# user radius secret [secret]

[secret]

Specify the secret key which is same as the one of the RADIUS server.

Switch(config)# user radius server1 [A.B.C.D]

[A.B.C.D]

Specify the IP address of the 1st RADIUS server.

Switch(config)# user radius server2 [A.B.C.D]

[A.B.C.D]

Specify the IP address of the 2nd RADIUS server.

No command

Switch(config)# no user radius

Disable RADIUS authentication function.

Switch(config)# no user radius radius-port

Set the RADIUS port number back to the default.

Switch(config)# no user radius retry-time

Set the number of retry times back to the default.

Switch(config)# no user radius secret

Set the secret key back to the default.

Switch(config)# no user radius server1

Set the IP address of the 1st RADIUS server back to the default.

Switch(config)# no user radius server2

Set the IP address of the 2nd RADIUS server back to the default.

Show command

Switch(config)# show user radius

Display the current RADIUS authentication setting.

User command example

Switch(config)# user radius radius-port 1812

Set the RADIUS port number to 1812.

Switch(config)# user radius retry-time 2

Set the number of retry times to 2.

Switch(config)# user radius secret 1a2b3c

Set the secret key to 1a2b3c.

Switch(config)# user radius server1 172.1.1.2

Set the IP address of the 1st RADIUS server to 172.1.1.2.

2.5.19 VLAN Command

VLAN dot1q command

Parameter

Description

Switch(config)# vlan dot1q-vlan [1-4094]

[1-4094]

Enter a VID number to create a 802.1q VLAN.

Switch(config)# vlan dot1q-vlan isolation

Enable VLAN isolation mode. When enabled, each LAN port is separated and can not communicate with each other except for forwarding packets to port 9 (WAN port).

In other words, the device will be forced to follow the rule shown below.

Port 1 2 3 4 5 6 7 8

1 V V 2 V

3 V V 4 V V 5 V

6 V V 7 V

8 V V 9 V V V V V V V V V

Switch(config-vlan-VID)# name

[vlan_name]

Specify a descriptive name up to 15 characters for this VLAN.

Switch(config)# vlan management-vlan [1-4094] management-port [port_list]

[1-4094]

Enter the management VLAN ID.

[port_list]

Specify the management port number.

Switch(config)# vlan qinq-vlan

Enable Q-in-Q (double tag) VLAN.

Switch(config)# vlan qinq-vlan bypass-ctag

Ignore C-tag checking.

Switch(config)# vlan qinq-vlan pass-through-mode

Enable VLAN pass-through mode. This enables the device to be managed remotely via the single tagged traffic under Q-in-Q mode.

Switch(config)# vlan qinq-vlan pass-through-vlan [1-4094]

[1-4094]

Specify VLAN ID for the pass-through VLAN.

Switch(config)# vlan qinq-vlan isp-port [port_list]

[port_list]

Specify ISP ports.

Switch(config)# vlan qinq-vlan stag-ethertype [0xWXYZ]

[0xWXYZ]

Specify the ether type for the service tag.

Switch(config)# vlan qinq-vlan stag-priority [0-7]

[0-7]

Specify a priority bit for the service tag.

Switch(config)# vlan qinq-vlan stag-vid [1-4094]

[1-4094]

Specify a VID for the service tag.

Switch(config)# vlan option60 vlan-map [1-9] vlan-id [1-4094] vendor-id [vendor-id]

[1-9]

Specify the ports able to verify VendorID and send the corresponding VID value.

Create a 802.1q VLAN and management VLAN rule.

[1-4094]

VID: The value this option is set to gives the DHCP server a hint about any required extra information that this client needs in a DHCP response.

[vendor-id]

Vendor-ID: The information is a variable-length string of characters which has a meaning specified by the vendor of the DHCP client.

Switch(config)# vlan option60

An option exists to identify the vendor and functionality of a DHCP client. One method that a DHCP client can utilize to communicate to the server that it is using a certain type of hardware or firmware is to set a value in its DHCP requests called the Vendor Class Identifier (VCI) (Option 60).

This method allows a DHCP server to differentiate between the two kinds of client machines and process the requests from the two types of modems appropriately.

This command enables DHCP option60. To do so, finish settings of vlan-map, vlan-id and vendor-id above and DHCP Option60 of a port in VLAN & Interface

command below first.

VLAN & Interface command

Switch(config)# interface [port_list]

[port_list]

Enter several discontinuous port numbers separated by commas or a range of ports with a hyphen. For example:1,3 or 2-4

Switch(config-if-PORT-PORT)# vlan dot1q-vlan access-vlan [14094]

[1-4094]

Set up the selected ports’ PVID.

Switch(config-if-PORT-PORT)# vlan dot1q-vlan trunk-vlan [1-4094]

[1-4094]

Assign the selected ports to a specified VLAN.

Switch(config-if-PORT-PORT)# vlan dot1q-vlan mode access

Set the selected ports to access mode (untagged).

Switch(config-if-PORT-PORT)# vlan dot1q-vlan mode trunk

Set the selected ports to trunk mode (tagged).

Switch(config-if-PORT-PORT)# vlan dot1q-vlan mode trunk native

Enable native VLAN for untagged traffic.

Switch(config-if-PORT-PORT)# vlan option60

Enable the ports to receive Option60 packet.

No command

Switch(config)# no vlan dot1q-vlan [1-4094]

[1-4094]

Delete the specified VID.

Switch(config)# no vlan dot1q-vlan isolation

Disable VLAN Isolation mode.

Switch(config)# no vlan qinq-vlan

Disable Q-in-Q VLAN.

Switch(config)# no vlan qinq-vlan bypass-ctag

Activate C-tag checking.

Switch(config)# no vlan qinq-vlan pass-through-mode

Disable pass-through mode.

Switch(config)# no vlan qinq-vlan pass-through-vlan

Set the pass-through VLAN ID to the default setting.

Switch(config)# no vlan qinq-vlan isp-port

Remove ISP port settings.

Switch(config)# no vlan qinq-vlan stag-ethertype

Remove the ether type for the service tag settings.

Switch(config)# no vlan qinq-vlan stag-priority

Remove the priority bit for the service tag settings.

Switch(config)# no vlan qinq-vlan stag-vid

Remove the VID for the service tag settings.

Switch(config-if-PORT-PORT)# no vlan dot1q-vlan access-vlan

Set the selected ports’ PVID to the default setting.

Switch(config-if-PORT-PORT)# no vlan dot1q-vlan mode

Remove port mode.

Switch(config-if-PORT-PORT)# no vlan dot1q-vlan mode trunk native

Disable native VLAN for untagged traffic.

Switch(config-if-PORT-PORT)# no vlan dot1q-vlan trunk [1-4094]

[1-4094]

Remove the selected ports’ VLAN membership. The selected ports are no longer member ports in the specified VLAN.

Switch(config)# no vlan option60

Disable DHCP Option60 of a switch.

Switch(config)# no vlan option60 vlan-map [1-9]

Disable the ports able to verify VendorID and send the corresponding VID value.

Switch(config)# no vlan option60 vlan-map [1-9] vlan-id

Remove information and VID of a port.

Note: Disable DHCP Option60 of the switch first if there is one set of vendor ID mapping left only.

Switch(config-if-PORT-PORT)# no vlan option60

Disable the ports receiving Option60 packet.

Note: Disable DHCP Option60 of the switch first if there is one enabled port left only.

Show command

Switch(config)# show vlan dot1q-vlan

Show 802.1q VLAN configuration.

Switch(config)#show vlan interface

Show each interface’s VLAN ID, user priority and VLAN mode information.

Switch(config)#show vlan interface [port_list]

[port_list]

Show the selected ports’ VLAN ID user priority and VLAN mode information.

Switch(config)# show vlan qinqvlan

Show Q-in-Q VLAN configuration.

VLAN dot1q & interface example

Switch(config)# vlan dot1q-vlan 100

Create a new VLAN 100.

Switch(config)# vlan management-vlan 1 management-port 1-3

Set port 1~3 to management ports.

Switch(config)# interface 1-3

Enter port 1 to port 3’s interface mode.

Switch(config-if-1-3)# vlan dot1q-vlan trunk-vlan 100

Assign the selected ports to VLAN 100.

Switch(config-if-1-3)# vlan dot1q-vlan mode access

Set the selected ports to access mode (untagged).

Switch(config-if-1-3)# vlan dot1q-vlan accessvlan 100

Set the selected ports’ PVID to 100.

Switch(config)# vlan option60 vlan-map 1 vlan-id 20 vendor-id 123

Set up DHCP Option60 configuration

Command

Parameter

Description

Switch(config)# show interface statistics analysis

Display packets analysis (events) for each port.

Switch(config)# show interface statistics analysis [port_list]

[port_list]

Display packets analysis for the selected ports.

Switch(config)# show interface statistics analysis rate

Display packets analysis (rates) for each port.

Switch(config)# show interface statistics error

Display error packets statistics (events) for each port.

Switch(config)# show interface statistics error [port_list]

[port_list]

Display error packets statistics (events) for the selected ports.

Switch(config)# show interface statistics error rate

Display error packets statistics (rates) for each port.

Switch(config)# show interface statistics traffic

Display traffic statistics (events) for each port.

Switch(config)# show interface statistics traffic [port_list]

[port_list]

Display traffic statistics (events) for the selected ports.

2.5.20 Show interface statistics Command

The command “show interface statistics” that can display port traffic statistics, port packet error statistics and port analysis history can be used either in Privileged mode # and Global Configuration mode (config)#. “show interface statistics” is useful for network administrators to diagnose and analyze port traffic real-time conditions.

Switch(config)# show interface statistics traffic rate

Display traffic statistics (rates) for each port.

Switch(config)# show interface statistics clear

Clear all statistics.

Command

Description

Switch(config)# show default-config

Show the original configurations assigned to the Managed Switch by the factory.

Switch(config)# show running-config

Show configurations currently used in the Managed Switch. Please note that you must save running configurations into your switch flash before rebooting or restarting the device.

Switch(config)# show start-up-config

Display system configurations that are stored in flash.

Command

Description

Switch(config)# show sfp information

Display the slide-in SFP information including speed, distance, vendor name, vendor PN and vendor serial number.

Switch(config)# show sfp state

Display the slide-in SFP information including temperature, voltage, TX bias, TX power, and RX power.

Command

Description

Switch(config)# show log

Show event logs currently stored in the Managed Switch. The total number of event logs that can be displayed is 500.

2.5.21 Show sfp Command

When you slide in SFP transceiver, detailed information about this module can be viewed by issuing this command.

2.5.22 Show log Command

2.5.23 Show default-config, running-config & start-up-config Command

3. WEB MANAGEMENT

The Managed Switch can be managed via a Web browser. The default IP of the Managed Switch can be reached at “http://192.168.0.1”. You can change the Switch’s IP address to the intended one later in its Network Management menu.

Follow these steps to manage the Managed Switch through a Web browser:

1. Use one of the 10/100/1000Base-TX RJ-45 ports (as the temporary RJ-45 Management console port) to set up the assigned IP parameters of the Managed Switch including the following:

 IP address  Subnet Mask  Default Switch IP address, if required

2. Run a Web browser and specify the Managed Switch’s IP address to reach it. (The default IP address for the Managed Switch can be reached at “http://192.168.0.1” before any change.)

3. Login to the Managed Switch.

Once you gain the access, you are requested to login.

Enter the administrator name and password for the initial login and then click “Login”. The default administrator name is admin and without password (leave the password field blank).

After a successful login, the screen appears as below.

1. System Information: Name the Managed Switch, specify the location and check the current version of information.

2. User Authentication: Create and view the registered user list.

3. Network Management: Set up or view the IP address and related information about the

Managed Switch required for network management applications.

4. Switch Management: Set up switch or port configuration, VLAN configuration, QoS and other functions.

5. Switch Monitor: View the operation status and traffic statistics of the ports.

6. System Utility: Upgrade firmware and load factory settings.

7. Save Configuration: Save all changes to the system.

8. Reset System: Reset the Managed Switch.

9. Logout: Exit the management interface.

3.1 System Information

Select System Information from the left column and then the following screen shows up.

Company Name: Enter a company name up to 55 alphanumeric characters for this Managed

Switch.

System Object ID: View-only field that shows the predefined System OID. System Contact: Enter contact information up to 55 alphanumeric characters for this

Managed Switch. System Name: Enter a unique name up to 55 alphanumeric characters for this Managed

Switch. Use a descriptive name to identify the Managed Switch in relation to your network, for example, “Backbone 1”. This name is mainly used for reference.

System Location: Enter a brief description of the Managed Switch location up to 55 alphanumeric characters. The location is for reference only.

DHCP Vendor ID: Enter the user-defined vendor ID up to 55 alphanumeric characters. Please make sure you have an exact DHCP Vendor ID with the value specified in “vendorclasses” in your dhcp.conf file. For detailed information, see Appendix A.

Model Name: View-only field that shows the product’s model name. Host Name: View-only field that shows the product’s host name.

Firmware Version: View-only field that shows the product’s firmware version. 1000M Port Number: The number of ports transmitting at the speed of 1000Mbps 100M Port Number: The number of ports transmitting at the speed of 100Mbps M/B Version: View-only field that shows the main board version. Fiber 1 Type: View-only field that shows information about the slide-in or fixed fiber type. Fiber 1 Vendor: View-only field that shows the vendor of the slide-in or fixed fiber. Fiber 1 PN: View-only field that shows the PN of the slide-in or fixed fiber. Serial Number: View-only field that shows the serial number of this switch. Date Code: View-only field that shows the date when the MAC address is burnt in. Up time: View-only field that shows how long the device has been powered on. Local Time: View-only field that shows the time of the location where the switch is. Battery Module-Battery State (for -BAT models only): View-only field that shows the status

of the battery installed. Click the “OK” button to apply the modifications.

3.2 User Authentication

To prevent any un-authorized operation, only registered users are allowed to operate the Managed Switch. Users who want to operate the Managed Switch need to register into the user’s list first.

To view or change current registered users, select User Authentication from the left column and then the following screen page shows up.

 Click New to add a new user account, then the following screen page appears.

Current/Total/Max Users: View-only field.

Current: This shows the number of current registered user. Total: This shows the total number of the registered users.

Max: This shows the maximum number available for registration. The maximum is 3. Account State: Enable or disable the selected account. User Name: Specify the authorized user login name, up to 20 alphanumeric characters. Password: Enter the desired user password, up to 20 alphanumeric characters. Retype Password: Enter the password again to confirm. Description: Enter a unique description up to 35 alphanumeric characters for this user.

This is mainly for reference only.

Console Level: Select the preferred access level for this newly created account.

NOTE: If you forget the login password, the only way to gain access to the Web Management is to set the Managed Switch back to the factory default setting by pressing the Reset button for 10 seconds (The Reset button is located on the Right Panel of the Managed Switch.). When the Managed Switch returns back to the default setting, you can login with the default login username and password (By default, no password is required. Leave the field empty and then press Login.)

Administrator: Full access right, including maintaining user account, system

information, loading factory settings, etc..

Read & Write: Partial access right, unable to modify system information, user account,

load factory settings and upgrade firmware.

Read Only: Read only access right.

Click the “OK” button to apply the settings.

 Click Edit to view and edit a registered user setting.  Click Delete to remove a registered user setting.  Click RADIUS Configuration to set up RADIUS authentication, and then the following

screen page appears.

RADIUS Authentication: Enable or disable RADIUS authentication function. Secret Key: Specify the secret key which is same as the one of the RADIUS server. RADIUS Port: Specify the RADIUS port number. Retry Times: Specify the number of retry times when the Switch gets no response from

the RADIUS server.

RADIUS Server Address: Specify the IP address of the 1st RADIUS server. 2nd RADIUS Server Address: Specify the IP address of the 2nd RADIUS server. When

the Switch gets no response from the 1st RADIUS server, it will try to reach the 2nd RADIUS server.

3.3 Network Management

In order to enable network management of the Managed Switch, proper network configuration is required. To do this, click the folder Network Management from the left column and then the following screen page appears.

1. Network Configuration: Set up the required IP configuration of the Managed Switch.

2. System Service Configuration: Set up the system service type.

3. Time Server Configuration: Set up the time server’s configuration.

4. Device Community: View the registered SNMP community name list. Add a new community name or remove an existing community name.

5. Trap Destination: View the registered SNMP trap destination list.

6. Trap Configuration: Set up which type of trap is sent when a certain situation occurs.

3.3.1 Network Configuration

NOTE: This Managed Switch supports auto-provisioning function that enables DHCP clients to automatically download the latest firmware and configuration image from the server. For information about how to set up a DHCP server, please refer to APPENDIX A.

Click the option Network Configuration from the Network Management menu and then the following screen page appears.

MAC Address: This view-only field shows the unique and permanent MAC address preassigned to the Managed Switch. You cannot change the Managed Switch’s MAC address.

Configuration Type: There are two configuration types that users can select from the pulldown menu; these are “DHCP” and “Manual”. When “DHCP” is selected and a DHCP server is also available on the network, the Managed Switch will automatically get the IP address from the DHCP server. If “Manual” is selected, users need to specify the IP address, Subnet Mask and Gateway.

IP Address: Enter the unique IP address for this Managed Switch. You can use the default IP address or specify a new one when the situation of address duplication occurs or the address does not match up with your network. (The default factory setting is 192.168.0.1.)

Subnet Mask: Specify the subnet mask. The default subnet mask values for the three Internet address classes are as follows:

 Class A: 255.0.0.0  Class B: 255.255.0.0  Class C: 255.255.255.0

Gateway: Specify the IP address of a gateway or a router, which is responsible for the delivery of the IP packets sent by the Managed Switch. This address is required when the Managed Switch and the network management station are on different networks or subnets. The default value of this parameter is 0.0.0.0, which means no gateway exists and the network management station and Managed Switch are on the same network.

Click the “OK” button to apply the settings.

Click enable IPv6 to enable its functions Enable Auto-configuration to automatically ask for IP Address via Router or DHCPv6

Server, Disable Auto-configuration to set IP Address manually IPv6 Link-local Address/Prefix length Modify the 10-bits IP Address only within local

network without sending packets outside layer two Managed Switch IPv6 Global Address/Prefix length Modify the IP Address to transmit IP towards the internet,

allowing packet to be sent forward to outside network

IPv6 Gateway Set the Gateway’s IP value to allow the Managed Switch to reach the network DHCPv6

1. Enable force mode to receive IP address from DHCPv6 Server

2. Enable auto mode to receive IP address from the Router

Rapid Commit Select Rapid Commit to allow only the discover and acknowledge of the

DHCP behavior DHCPv6 unique identifier (DUID) is the user’s ID to ask an IP Address from the DHCPv6

Server

3.3.2 System Service Configuration

Click the option System Service Configuration from the Network Management menu and then the following screen page appears.

Service Type: Select disabled, Telnet or SSH for the system service type. Click the “OK” button to apply the settings.

3.3.3 Time Server Configuration

Click the option Time Server Configuration from the Network Management menu and then the following screen page appears.

Time Synchronization: Enable or disable time synchronization. Time Server IP/IPv6 Address: Specify the primary NTP time server address. 2nd Time Server IP/IPv6 Address: When the default time server is down, the Managed

Switch will automatically connect to the 2nd time server. Synchronization Interval: Select the appropriate time interval to synchronize with the NTP

time server.

Time Zone: Select the appropriate time zone from the pull-down menu. Click the “OK” button to apply the settings.

3.3.4 Device Community

Click the option Device Community from the Network Management menu and then the following screen page appears.

Click New to add a new SNMP community name list and then the following screen page appears.

Click Edit to view the current community settings. Click Delete to remove a registered community.

Current/Total/Max Agents: View-only field.

Current: This shows the number of currently registered communities. Total: This shows the number of total registered community users. Max Agents: This shows the number of maximum number available for registration.

The default maximum number is 3.

Account State: Enable or disable this Community Account.

Community: Specify the authorized SNMP community name, up to 20 alphanumeric characters.

Description: Enter a unique description up to 35 alphanumeric characters for this community name,. This is mainly for reference only.

SNMP Level: Select the preferred SNMP level for this newly created community.

Administrator: Full access right, including maintaining user account, system

information, loading factory settings, etc.. Read & Write: Partial access right, unable to modify system information, user account,

load factory settings and upgrade firmware. Read Only: Read only access right.

Click the “OK” button to apply the settings.

3.3.5 Trap Destination

Click the option Trap Destination from the Network Management menu and then the following screen page appears.

State: Enable or disable the function of sending traps to the specified destination. Destination: Enter the specific IP address of the network management system that will

receive traps. Community: Enter the community name of the network management system.

Click the “OK” button to apply the settings.

3.3.6 Trap Configuration

Click the option Trap Configuration from the Network Management menu and then the following screen page appears.

Cold Start Trap: Enable or disable the Managed Switch to send a trap when the Managed Switch cold starts.

Warm Start Trap: Enable or disable the Managed Switch to send a trap when the Managed Switch warm starts.

Authentication Failure Trap: Enable or disable the Managed Switch to send authentication failure trap after any unauthorized users attempt to login.

Port Link Up/Down Trap: Enable or disable the Managed Switch to send the port link up/link down trap when the selected port(s) is link up or down.

System Power Down Trap: Enable or disable the Managed Switch to send a trap while the Managed Switch is power down.

Battery Mode Trap (for -BAT models only): Enable or disable the Managed Switch to send traps for different battery behaviors when the battery is installed.

Click the “OK” button to apply the settings.

3.4 Switch Management

To manage the Managed Switch and set up required switching functions, click the folder Switch Management from the left column and then several options and folders will be displayed for your selection.

1. Switch Configuration: Set up address learning aging time and enable or disable IGMP Snooping and Fast Leave.

2. Storm Control: Prevent the Managed Switch from unicast, broadcast, and multicast storms.

3. Port Configuration: Enable or disable port speed, flow control, etc..

4. Rate Limit Configuration: Enable or disable Port Priority and set up Port Rate Limit, etc..

5. QoS Priority Configuration: Set up QoS Priority based on Port-based, IEEE 802.1p,

ToS/DSCP and VID Qos mode.

6. VLAN Configuration: Set up IEEE 802.1q Tag VLAN and Q in Q VLAN configuration.

7. Port Mirroring: Enable or disable port mirroring function and set up destination and

source port.

8. IGMP Snooping: Set up IGMP Snooping function.

9. LLDP Configuration: Set up LLDP function.

10. Loop Detection: Enable or disable Loop Detection function.

11. Filter Configuration: Set up DHCP snooping and DHCP server trust ports.

3.4.1 Switch Configuration

Click the option Switch Configuration from the Switch Management menu and then the following screen page appears.

MAC Address Aging Time: Set up MAC Address aging time manually. Entries in the MAC address table containing source MAC addresses and their associated ports will be deleted if they are not accessed within the aging time.

SFP Polling: Enable or disable SFP Polling. Statistics Polling: Enable or disable Statistics Polling. Click the “OK” button to apply the settings.

3.4.2 Storm Control

Click the option Storm Control from the Switch Management menu and then the following screen page appears.

Storm Protection: Enable or disable Storm Protection function. Storm Rate: Set up storm rate value. Packets exceeding the value will be dropped. Broadcast: Select Enabled to receive, or Disabled to reject broadcasts. Multicast: Select Enabled to receive, or Disabled to reject multicasts.

Unknown Multicast: Select Enabled to receive, or Disabled to reject unknown multicasts. Unknown Unicast: Select Enabled to receive, or Disabled to reject unknown unicasts. Click the “OK” button to apply the settings.

3.4.3 Port Configuration

Click the option Port Configuration from the Switch Management menu and then the following screen page appears.

Port Number: Click the pull-down menu to select the port number for configuration. Port State: Enable or disable the current port state.

Preferred Media Type: This shows the media type (either Fiber or Copper) of the selected port. This field is open to select only when ports of the device have two media type.

Port Type: Select Auto-Negotiation or Manual mode as the port type. Port Speed: When you select Manual port type, you can further specify the transmission

speed (10Mbps/100Mbps/1000Mbps) of the port(s). Duplex: When you select Manual port type, you can further specify the current operation

Duplex mode (full or half duplex) of the port(s). Flow Control: Enable or disable Flow Control function.

Click the “OK” button to apply the settings.

3.4.4 Rate Limit Configuration

Click the folder Rate Limit Configuration from the left column and then the following screen page appears.

Ingress Rate: Click the pull-down menu to set up Port Ingress Rate, on or off. Ingress Limiter (Kbps): Enter ingress bandwidth for each port (the allowable bandwidth is

between 8 and 1048568).

Egress Rate: Click the pull-down menu to set up Port Egress Rate, on or off. Egress Limiter (Kbps): Enter egress bandwidth for each port (the allowable bandwidth is

between 8 and 1048568). Click the “OK” button to apply the settings.

3.4.5 QoS Priority Configuration

Network traffic is always unpredictable and the only basic assurance that can be offered is the best effort traffic delivery. To overcome this challenge, Quality of Service (QoS) is applied throughout the network. This ensures that network traffic is prioritized according to specified criterion and receives preferential treatments.

QoS enables users to assign various grades of network service to different types of traffic, such as multi-media, video, protocol-specific, time critical, and file-backup traffic. Click the option QoS Priority Configuration from the Switch Management menu and then the following screen page appears.

QoS Priority Priority Mode: Five options are available; these are Disabled, Port Based, IEEE 802.1p,

DSCP, and VID. Queue Mode: Click the pull-down menu to select the Queue Mode, Strict or Weight.

Strict mode: The egress traffic is prioritized based on the priority of the queues. When

congestion happens, traffic assigned to queue 3 will be transmitted first. The traffic assigned to queue 2 will not be transmitted until queue 3’s traffic is done transmitting, and so forth.

Weight mode: This mode enables users to assign different weights to the queues, which

have fair opportunity of dispatching. Each queue has the specific amount of bandwidth

Priority Level

Low

Normal

Medium

High

802.1p Value

0 1 2 3 4 5 6

according to its assigned weight.

Queue Weight (Q0:Q1:Q2:Q3): Specify the weight of each queue. Port Priority: Click the pull-down menu to assign the queue for each port.

802.1p Priority Map: Assign a tag priority to the specific queue.

There are eight priority levels that you can choose to classify data packets. Choose one of the listed options from the pull-down menu for CoS (Class of Service) priority tag values. The default value is “0”.

The default 802.1p settings are shown in the following table:

DSCP Priority Map: Assign a DSCP value to the specific queue. The options include DSCP (0) to DSCP (63).

VID Map: Set up the priority by assigning the specific VID to the specific queue.

Index: The entry number; 8 entries in total. State: Disable or enable the entry. VID: Enter the specific VLAN ID to be assigned to the queue. Queue: Select the queue (Q0~Q3) to which the VLAN ID is assigned.

Remarking

802.1p Remarking: Enable or disable 802.1p Remarking.

802.1p Remarking Map: Assign the priority bits to the specific queue.

DSCP Remarking: Enable or disable 802.1p Remarking. DSCP Remarking Map: Assign the DSCP value to the specific queue.

Click the “OK” button to apply the settings.

3.4.6 VLAN Configuration

Preamble

SFD

Type/LEN

PAYLOAD

FCS

Original frame

Preamble

SFD

TAG TCI/P/C/VID

Type/LEN

PAYLOAD

FCS

802.1q frame

PRE Preamble

62 bits

Used to synchronize traffic

SFD Start Frame Delimiter

2 bits

Marks the beginning of the header

DA Destination Address

6 bytes

The MAC address of the destination

SA Source Address

6 bytes

The MAC address of the source

TCI Tag Control Info

2 bytes set to 8100 for 802.1p and Q tags

P Priority

3 bits

Indicates 802.1p priority level 0-7

C Canonical Indicator

1 bit

Indicates if the MAC addresses are in Canonical format – Ethernet set to “0”

VID VLAN Identifier

12 bits

Indicates the VLAN (0-4095)

T/L Type/Length Field

2 bytes

Ethernet II “type” or 802.3 “length”

Payload < or = 1500 bytes User data

FCS Frame Check Sequence

4 bytes

Cyclical Redundancy Check

A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. VLAN can be used to combine any collections of LAN segments into a group that appears as a single LAN. VLAN also logically segments the network into different broadcast domains. All broadcast, multicast, and unknown packets entering the Switch on a particular VLAN will only be forwarded to the stations or ports that are members of that VLAN.

VLAN can enhance performance by conserving bandwidth and improve security by limiting traffic to specific domains. A VLAN is a collection of end nodes grouped by logics instead of physical locations. End nodes that frequently communicate with each other are assigned to the same VLAN, no matter where they are physically located on the network. Another benefit of VLAN is that you can change the network topology without physically moving stations or

changing cable connections. Stations can be ‘moved’ to another VLAN and thus

communicate with its members and share its resources, simply by changing the port VLAN settings from one VLAN to another. This allows VLAN to accommodate network moves, changes and additions with the greatest flexibility.

The Managed Switch supports two types of VLAN, these are: IEEE 802.1q Tag VLAN and Q

in Q VLAN.

IEEE 802.1Q VLAN Concepts

Introduction to 802.1Q frame format:

Click the folder VLAN Configuration from the Switch Management folder and then the following screen page appears.

1. IEEE 802.1Q Tag VLAN: Configure IEEE 802.1Q Tag VLAN.

2. QinQ VLAN Configuration: Configure Q-in-Q VLAN.

3.4.6.1 IEEE 802.1q Tag VLAN

Click the folder IEEE 802.1Q Tag VLAN from the VLAN Configuration menu and then the following screen page appears.

1. Configure VLAN: To create, edit, delete, or apply 802.1Q Tag VLAN settings.

2. Configure Default Port VLAN ID: To set up 802.1q Port VLAN ID.

3. DHCP-Option60-Based VLAN: To set up Vendor ID and VID…etc. for Vendor Class Identifier

3.4.6.1.1 Configure VLAN

Click the option Configure VLAN from the IEEE 802.1q Tag VLAN menu and then the following screen page appears.

Click New to add a new VLAN entity and then the following screen page appears. Click Edit to view and edit current IEEE 802.1Q Tag VLAN setting. Click Delete to remove a VLAN entity. Click Apply to make the current VLAN settings effective. Click Refresh to get the latest status of VLAN membership table.

Current/Total/Max VLANs: View-only field.

Current: This shows the number of currently registered VLAN. Total: This shows the number of total registered VLANs. Max: This shows the maximum number of available VLANs to be registered.

VLAN ID: Specify the ID for the currently registered VLAN. VLAN Name: Specify the name for the currently registered VLAN. VLAN Member: Assign ports to be the members of the currently registered VLAN.

3.4.6.1.2 Configure Default Port VLAN ID

Click the option Configure Default Port VLAN ID from the IEEE 802.1q Tag VLAN menu and then the following screen page appears.

Mode

Port Behavior

Access

Receive untagged packets only. Drop tagged packets.

Send untagged packets only.

Trunk

Receive tagged packets only. Drop untagged packets.

Send tagged packets only.

Trunk Native

Receive both untagged and tagged packets

Untagged packets: PVID is added

Tagged packets: Stay intact

When sending packets, PVID and VID will be compared. If PVID and VID are the same, PVID will be removed. If PVID and VID are different, the packets with the original tag (VID) will be sent.

802.1q Tag VLAN Mode: Select IEEE802.1q VLAN mode, Port Isolation mode or Bypass C-

Tag mode.

Port VLAN ID: Specify the default port VLAN ID for each port. Port User Priority: Specify the user priority for each port. Port VLAN Mode: Set up egress traffic as untagged or tagged.

Click the “OK” button to apply the settings.

3.4.6.1.3 DHCP-Option60-Based VLAN

This is an option existing to identify the vendor and functionality of a DHCP client. One method that a DHCP client can utilize to communicate to the server that it is using a certain type of hardware or firmware is to set a value in its DHCP requests called the Vendor Class Identifier (VCI) (Option 60).

This method allows a DHCP server to differentiate between the two kinds of client machines and process the requests from the two types of modems appropriately.

To enable DHCP option60, following steps are required:

1. Create a new VLAN entity. (Refer to section 3.4.6.1.1)

2. Set the ports sending tagged packets as trunk mode. (Refer to section 3.4.6.1.2)

Click the option Configure Default Port VLAN ID from the IEEE 802.1q Tag VLAN menu and then the following screen page appears.

System-wide Configuration: Enable or disable Option60 of the switch. Port Configuration: The ports receiving Option60 packet. Check the box to enable Option60

of the port and vice versa.

DHCP-Option60 Vendor ID mapping Index: The ports able to verify Vendor-ID and send the corresponding VID value. Check the

box to enable it or vice versa.

Enable: Check enable box to activate mapping function. Vendor-ID: The information is a variable-length string of characters which has a meaning

specified by the vendor of the DHCP client. VID: The value this option is set to gives the DHCP server a hint about any required extra

information that this client needs in a DHCP response. Click “Clean” to delete information of a port.

3.4.6.2 Q-in-Q VLAN Configuration

Q-in-Q Management VLAN Limitation:

1. Port 9 is the only port that can be set as the ISP port to bind a single-tagged

Management VLAN.

2. If a single-tagged VLAN is used for management traffic via ISP port, the VLAN ID cannot be used for other data transmissions.

Click the Option Q-in-Q VLAN Configuration from the VLAN Configuration folder and then the following screen page appears.

QinQ Mode: Enable or disable Q-in-Q VLAN. Ether Type: Specify the ether type for the service tag. Priority: Specify a priority bit for the service tag. VLAN ID: Specify a VID for the service tag. ISP Port: Select ISP ports. Pass Through Mode: Enable or disable Pass Through mode. This enables the device to be

managed remotely via the specified VLAN. Pass Through VLAN ID: Specify the Pass Through VLAN ID. Click the “OK” button to apply the settings.

3.4.7 Port Mirroring

Click the option Port Mirroring from the Switch Management menu, and then the following screen page appears.

Destination Port: Enable or disable port mirroring function, and select the destination port to which the mirrored traffic will be forwarded.

Source Port: Select the port to be mirrored.

3.4.8 IGMP Snooping

When IGMP snooping is enabled in a switch it analyses all the IGMP packets between hosts connected to the switch and multicast routers in the network. When a switch hears an IGMP report from a host for a given multicast group, the switch adds the host’s port number to the multicast list for that group. And, when the switch hears an IGMP Leave, it removes the host’s port from the table entry.

IGMP snooping can very effectively reduce multicast traffic from streaming and other bandwidth intensive IP applications. A switch using IGMP snooping will only forward multicast traffic to the hosts interested in that traffic. This reduction of multicast traffic reduces the packet processing at the switch (at the cost of needing additional memory to handle the multicast tables) and also reduces the workload at the end hosts since their network cards (or operating system) will not have to receive and filter all the multicast traffic generated in the network.

Click the option IGMP Snooping from the Switch Management menu and then the following screen page appears.

IGMP Snooping: Enable or disable IGMP Snooping. Aging Time: Specify the IGMP querier aging time. If the switch does not receive join packets

from the end device within the specified time, the entry associated with this end device will be removed from the IGMP table.

Immediate Leave: Enable or disable Immediate Leave function. This works only when IGMP Snooping is enabled. When Fast Leave is enabled, the Managed Switch immediately removes the port when it detects IGMPv1 & IGMPv2 leave message on that port.

Click the “OK” button to apply the settings.

3.4.9 LLDP Configuration

LLDP stands for Link Layer Discovery Protocol and runs over data link layer which is used for network devices to send information about themselves to other directly connected devices on the network. By using LLDP, two devices running different network layer protocols can learn information about each other. A set of attributes are used to discover neighbor devices. These attributes contains type, length, and value descriptions and are referred to TLVs. Details such as port description, system name, system description, system capabilities, management

address can be sent and received on this Managed Switch. Use Spacebar to select “ON” if

you want to receive and send the TLV. Select the option LLDP Configuration from the Switch Management menu and then the

following screen page appears.

Port Enable: Check the checkbox to enable LLDP. Receiver Hold-Time (TTL): Enter the amount of time for receiver hold-time in seconds. The

Managed Switch will keep the information sent by the remote device for a period of time you specify here before discarding it.

Sending LLDP Packet Interval: Enter the time interval for updated LLDP packets to be sent. Sending Packets Per Discover: Enter the amount of packets sent in each discover. Selection of LLDP TLVs to send: LLDP uses a set of attributes to discover neighbor devices.

These attributes contains type, length, and value descriptions and are referred to TLVs. Details such as port description, system name, system description, system capabilities, management address can be sent from this Managed Switch.

3.4.10 Loop Detection

Packet loops will cause broadcast storm and affect the performance of layer two Access switch. To avoid this, Loop Detection can be enabled on LAN port of the Managed Switch. When Loop Detection is enabled, the system will immediately lock the ports where the packet loops occur, and send out a SNMP trap to inform the network administrator.

Click the option Loop Detection from the Switch Management menu and then the following

screen page appears.

Note: Please note that Loop Detection function is only available on LAN port 1~8.

Loop Detection: Enable or disable Loop Detection Function. Unlock Interval: Specify the unlock interval for locked ports to be unlocked.

Port Members: Enabled or disabled Loop Detection function on the ports. Click the “OK” button to apply the settings.

3.4.11 Filter Configuration

Click the option Filter Configuration from the Switch Management menu and then the following screen page appears.

DHCP Snooping: Enable or disable DHCP Snooping function. DHCP Server Trust Port: Assign the specific port(s) to be the DHCP Server Trust Port(s).

Click the “OK” button to apply the settings.

3.5 Switch Monitor

Switch Monitor allows users to monitor the real-time operation status of the Managed Switch.

Users may monitor the port link-up status or traffic counters for maintenance or diagnostic purposes. Select the folder Switch Monitor from the Main Menu and then the following screen page appears.

1. Switch Port Status: View the current port media type, port state, etc..

2. Switch Port VLAN ID Status: View the current status of VLAN ID for each port.

3. Port Counters Rates: This folder includes port traffic statistics (rates), port packet error

statistics (rates), and port packet analysis statistics (rates).

4. Port Counters Events: This folder includes port traffic statistics (events), port packet error statistics (events), and port packet analysis statistics (events).

5. SFP Information: View the current port’s SFP information, e.g. speed, distance, vendor name, vendor PN, Vendor SN, temperature, voltage, TX Bias, TX power, etc..

6. IGMP Snooping: View a list of IGMP queries’ information in VLAN(s) such as VLAN ID, Querier and reports.

7. LLDP Status: View the current LLDP status.

8. Loop Detection Status: View the current Loop Detection status of each port.

9. MAC Address Table: List current MAC addresses learned by the Managed Switch.

3.5.1 Switch Port Status

The following screen page appears if you choose Switch Monitor menu and then select Switch Port Status.

Port: The number of the port. Media Type: The media type of the port, either Copper (TX) or Fiber (FX). Port Sate: This shows each port’s state which can be D (Disabled) or F (Forwarding).

Disabled: A port in this state can not receive and forward packets.

Forwarding: Packets can be forwarded. Link State: The current link status of the port, either up or down. Speed (Mbps): The current operation speed of each port. Duplex: The current operation Duplex mode of each port, either Full or Half. Flow Control: This shows the status of Flow Control function, either on or off. Description: This shows the description of this port described in “Port Configuration”.

3.5.2 Switch Port VLAN ID Status

This shows the current status of each port the VLAN ID belongs to respectively. The following screen page appears if you choose Switch Monitor menu and then select Switch Port VLAN ID State.

Port-ID: The number of each port. Port VLAN-ID: The configured VLAN ID for each corresponding port.

Note: Generally, The VLAN ID information is based on Configure Default Port VLAN ID (Section 3.4.6.1.2). However, it shows the configured DHCP Option60 VLAN ID as priority if DHCP Option60 is enabled and triggered.

3.5.3 Port Counters Rates

The rate mode of port counters will be re-calculated when that counter is reset or cleared. Click Port counters Rates folder and then three options appear.

1. Port Traffic Statistics (Rates): View the number of bytes received, frames received,

bytes sent, frames sent, and total bytes and clear each row’s statistics.

2. Port Packet Error Statistics (Rates): View the number of CRC errors, undersize frames,

oversize frames, etc and clear each row’s statistics.

3. Port Packet analysis Statistics (Rates): View each port’s analysis history and clear

each row’s statistics.

3.5.3.1 Port Traffic Statistics (Rates)

The following screen page appears if you choose Port Counters Rates and then select Port Traffic Statistics (Rates).

Bytes Received: Total bytes received from each port. Frames Received: Total frames received from each port. Received Utilization: The ratio of each port’s receiving traffic to current port’s total bandwidth. Bytes Sent: The total bytes sent from current port. Frames Sent: The total frames sent from current port. Sent Utilization: The ratio of each port’s sending traffic to current port’s total bandwidth. Total Bytes: Total bytes received and sent from current port. Total Utilization: The ratio of each port’s receiving and sending traffic to current port’s total

bandwidth.

3.5.3.2 Port Packet Error Statistics (Rates)

The following screen page appears if you choose Port Counters Rates and then select Port Packet Error Statistics (Rates).

Drops: The number of packets received that are dropped. CRC Error: The number of packets received with a bad FCS with an integral number of bytes. Undersize: Undersize frames received. Oversize: Oversize frames received. Fragments: Fragment frames received. Jabbers: Jabber frames received. Collisions: Total frames collision detected. Total Errors: The number of total errors occurred.

3.5.3.3 Port Packet Analysis Statistics (Rates)

The following screen page appears if you choose Port Counters Rates and then select Port Packet Analysis Statistics (Rates).

Frames 64 Bytes: 64 bytes frames received. Frames 65-127 Bytes: 65-127 bytes frames received. Frames 128-255 Bytes: 128-255 bytes frames received. Frames 256-511 Bytes: 256-511 bytes frames received. Frames 512-1023 Bytes: 512-1023 bytes frames received. Frames 1024-MAX Bytes: Over 1024 bytes frames received. RX Unicast Frames: Good unicast frames received. RX Multicast Frames: Good multicast frames received. RX Broadcast Frames: Good broadcast frames received. TX Unicast Frames: Good unicast packets sent. TX Multicast Frames: Good multicast packets sent. TX Broadcast Frames: Good broadcast packets sent.

3.5.4 Port Counters Events

The event mode of port counters will be re-calculated when that counter is reset or cleared. Click Port counters Events folder and then three options appear.

1. Port Traffic Statistics (Events): View the number of bytes received, frames received,

bytes sent, frames sent, and total bytes and clear each row’s statistics.

2. Port Packet Error Statistics (Events): View the number of CRC errors, undersize frames,

oversize frames, etc and clear each row’s statistics.

3. Port Packet Analysis Statistics (Events): View each port’s analysis history and clear

each row’s statistics.

3.5.4.1 Port Traffic Statistics (Events)

The following screen page appears if you choose Port Counters Events and then select Port Traffic Statistics (Events).

Bytes Received: Total bytes received from each port. Frames Received: Total frames received from each port.

Bytes Sent: The total bytes sent from current port. Frames Sent: The total frames sent from current port. Total Bytes: Total bytes received and sent from current port. Clear All: Click “Clear All” button to clear all ports’ statistics.

3.5.4.2 Port Packet Error Statistics (Events)

The following screen page appears if you choose Port Counters Events and then select Port Packet Error Statistics (Events).

Drops: The number of packets received that are dropped. CRC/Alignment: The number of packets received that have a bad FCS with an integral

number of bytes.

Undersize: Undersize frames received. Oversize: Oversize frames received. Fragments: Fragment frames received. Jabbers: Jabber frames received. Collisions: Total frame collisions detected. Total Errors: The number of total errors occurred. Clear All: Click “Clear All” button to clear all ports’ statistics.

3.5.4.3 Port Packet Analysis Statistics (Events)

The following screen page appears if you choose Port Counters Events and then select Port Packet Analysis Statistics (Events).

Frames 64 Bytes: 64 bytes frames received. Frames 65-127 Bytes: 65-127 bytes frames received. Frames 128-255 Bytes: 128-255 bytes frames received. Frames 256-511 Bytes: 256-511 bytes frames received. Frames 512-1023 Bytes: 512-1023 bytes frames received. Frames 1024-MAX Bytes: Over 1024 bytes frames received. RXUnicast Frames: Good unicast frames received. RX Multicast Frames: Good multicast frames received. RX Broadcast Frames: Good broadcast frames received.

TX Unicast Frames: Good unicast packets sent. TX Multicast Frames: Good multicast packets sent. TX Broadcast Frames: Good broadcast packets sent. Clear All: Click “Clear All” button to clear all ports’ statistics.

3.5.5 SFP Information

Click SFP Information folder from the left column and then two options appear.

1. SFP Port Info: This shows the information of Speed, Distance, Vendor Name, Vendor PN,

and Vendor SN of the SFP Port.

2. SFP Port State: This shows the state of Temperature, Voltage, TX Bias, TX Power, and

RX Power of the SFP Port.

3.5.5.1 SFP Port Info

The following screen page appears if you choose SFP Information and then select SFP Port Info.

Port: The port number of the slide-in SFP module. Speed: The transmitting speed of the slide-in SFP module. Distance: The transmitting distance of the slide-in SFP module.

Vendor Name: The vendor name of the slide-in SFP module. Vendor PN: The vendor part number of the slide-in SFP module. Vendor SN: The vendor serial number of the slide-in SFP module.

3.5.5.2 SFP Port State

The following screen page appears if you choose SFP Information and then select SFP Port State.

Port: The port number of the slide-in SFP module.

Temperature (C): The Slide-in SFP module operation temperature.

Voltage (V): The slide-in SFP module operation voltage.

TX Bias (mA): The slide-in SFP module operation current.

TX Power (dbm): The slide-in SFP module optical Transmission power.

RX Power (dbm): The slide-in SFP module optical Receiver power.

3.5.6 IGMP Snooping

The following screen page appears if you choose Switch Monitor and then select IGMP Snooping.

Multicast Group: This shows the multicast IP address of IGMP querier. VLAN: This shows which VLAN ID belongs to corresponding Multicast Group. Port 1~9: The port(s) grouped in the specific multicast group.

3.5.7 LLDP Status

Select LLDP Status from the Switch Monitor menu and then the following screen page appears.

Click “Update” to refresh LLDP Status table.

Local Port: View-only field that shows the port number on which LLDP frames are received. Chassis ID: View-only field that shows the MAC address of the LLDP frames received (the

MAC address of the neighboring device).

Remote Port: View-only field that shows the port number of the neighboring device. System Name: View-only field that shows the system name advertised by the neighboring

device. Port Description: View-only field that shows the port description of the remote port. System Capabilities: View-only field that shows the capability of the neighboring device. Management Address : View-only field that shows the IP address of the neighboring device.

3.5.8 Loop Detection

The following screen page appears if you choose Switch Monitor and then select Loop Detection Status.

Status: This shows the status of the port, Lock or Un-lock. Lock Cause: This shows the factor that causes the port to be locked.

3.5.9 MAC Address Table

MAC Address Table displays MAC addresses learned after the system reset.

The table above shows the MAC addresses learned from each port of the Managed Switch. To view the entries learned from all ports or a specific port, please select All or the port

number from the pull-down menu. Click Top to update the MAC Address Table, and click Next to go to the next page.

3.6 System Utility

Select the folder System Utility from the left column and then the following screen page appears.

1. Event Log: Event log can keep a record of system’s log events such as system warm

start, cold start, link up/down, user login/logout, etc..

2. Update: This allows users to update the latest firmware.

3. Load Factory Settings: Load Factory Setting will set the configuration of the Managed

Switch back to the factory default settings. The IP and Gateway addresses will be set to the factory default as well.

4. Load Factory Settings Except Network Configuration: Selecting this function will also

restore the configuration of the Managed Switch to its original factory default settings. However, this will not reset the IP and Gateway addresses to the factory default.

3.6.1 Event Log

Event log keeps a record of user login and logout timestamp information. Select Event Log

from the System Utility menu and then the following screen page appears.

The Event Log table stores the latest 500 logs in the Managed Switch. Click Clear All to clear all Event Log records.

3.6.2 Update

Click the option Update from the System Utility menu and then the following screen page appears.

Protocol: Select the preferred protocol, either FTP or TFTP. File Type: Select the file type to process, either Configuration or Firmware. Server IP/IPv6 Address: Enter the specific IP address of the File Server. User Name: Enter the specific username to access the File Server. Password: Enter the specific password to access the File Server. File Location: Enter the specific path and filename within the File Server. Put: Click Put to start the upload process and transmit files to the server. Update: Click Update to instruct the Managed Switch to update existing firmware or

configuration to the latest one received. After a successful update, a message will pop up. The Managed Switch will need a reset to make changes effective.

Transmitting State: This field displays the uploading or updating progress.

3.6.3 Load Factory Settings

Load Factory Settings will set all configurations of the Managed Switch back to the factory

default settings, including the IP and Gateway address. This function is useful when network administrators would like to re-configure the system. A system reset is required to make all changes effective after Load Factory Setting.

Select Load Factory Settings from the System Utility menu and then the following screen page appears.

Click the “OK” button to restore the Managed Switch back to the defaults.

3.6.4 Load Factory Settings Except Network Configuration

Load Factory Settings Except Network Configuration will set all configurations of the

Managed Switch back to the factory default settings. However, IP and Gateway addresses will not restore to the factory default. Load Factory Settings Except Network Configuration is very useful when network administrators need to re-configure the system

“REMOTELY” because conventional Factory Reset will bring network settings back to default

and lose all remote network connections. Select Load Factory Setting Except Network Configuration from the System Utility menu,

then the following screen page shows up.

Click the “OK” button to restore the Managed Switch back to the defaults excluding network configurations.

3.7 Save Configuration

In order to save configuration settings permanently, users need to save configuration first before resetting the Managed Switch. Select Save Configuration from the Main Menu and then the following screen page appears.

Click the “OK” button to save changes or running configurations to Flash.

3.8 Reset System

After any configuration changes, Reset System can make changes effective. Select Reset System from the Main menu and then the following screen page appears.

Click the “OK” button to restart the Managed Switch.

3.9 Logout

Select Logout from the Main menu and then the following screen page appears.

Click the “OK” button to logout the Managed Switch.

APPENDIX A: DHCP Auto-Provisioning Setup

ISC DHCP Server

TFTP Server

Switch

Networking devices, such as switches or gateways, with DHCP Auto-provisioning function allow you to automatically upgrade firmware and configuration at startup process. Before setting up DHCP Server for auto-upgrade of firmware and configuration, please make sure the Managed Switch that you purchased supports DHCP Auto-provisioning. Setup procedures and auto-provisioning process are described below for your reference.

A. Setup Procedures

Follow the steps below to set up Auto Provisioning server, modify dhcpd.conf file and generate a copy of configuration file.

Step 1. Set Up Environment

DHCP Auto-provisioning-enabled products that you purchased support the DHCP option 60 to work as a DHCP client. To make auto-provisioning function work properly, you need to prepare ISC DHCP server, File server (TFTP or FTP) and the switching device. See below for a possible network topology example.

Topology Example

100

CTS SWH-3109 Service Manual

Specifications and Main Features

Frequently Asked Questions

User Manual