EtherWan EtherWAN Managed Switch – V1.94.5 Users Manual

EtherWAN Managed Switch – V1.94.5
FastFind Links
User’s Guide
Unpacking and Installation
Setting the initial IP address
EtherWAN Managed Switch Users Guide
1
All Rights Reserved
Dissemination or reproduction of this document, or its contents, is not authorized except where expressly permitted. Violators are liable for damages. All rights reserved, for the purposes of patent application or trademark registration.
Disclaimer of Liability
The information contained in this document is subject to change without notice. EtherWAN is not liable for any errors or omissions contained herein or for resulting damage in connection with the information provided in this manual.
Registered Trademarks
The following words and phrases are registered Trademarks of EtherWAN Systems Inc.
EtherOS™ Ethernet to the World™
All other Trademarks are property of their respective owners.
Warranty
For details on the EtherWAN warranty replacement policy, please visit our web site at:
https://kb.etherwan.com/index.php?CategoryID=13
Products Supported by this Manual:
EtherWAN switches running firmware version 1.94.5
Contact EtherWAN Systems
Corporate Headquarters EtherWAN Systems Inc. 2301 E Winston Rd Anaheim Anaheim, CA 92806 Tel: (714) 779 3800 Fax: (714) 779 3806 Email: support@etherwan.com
EtherWAN Managed Switch Users Guide
ii
Preface
Table of Contents
Preface ................................................................................................................... xiii
Changes in this Revision ........................................................................................ xiii
Document Conventions .......................................................................................... xiv
Safety and Warnings .............................................................................................. xiv
Typographic Conventions ....................................................................................... xiv
Unpacking and Installation ................................................................................... 15
Package Contents ................................................................ ................................... 15
Unpacking ............................................................................................................... 15
Required Equipment and Software .......................................................................... 16
Computer Setup ..................................................................................................... 17
Management Methods and Protocols ...................................................................... 17
Default IP ................................................................................................................. 18
Login Process and Default Credentials .................................................................... 18
Setting the initial IP address ................................................................................. 19
Simple IP Addressing .............................................................................................. 19
CLI Command Usage ............................................................................................. 20
Navigating the CLI Hierarchy ................................................................................... 20
CLI Keyboard Shortcuts ........................................................................................... 20
CLI Command modes .............................................................................................. 21
Global Configuration Mode ................................................................................ 21
MSTP Configuration Mode ................................................................................. 21
Interface Configuration Mode ................................................................ ............. 22
VLAN Database Configuration Mode ................................................................. 22
Saving a Configuration from the CLI .................................................................. 23
System Menu (web interface) ............................................................................... 23
System Information .................................................................................................. 23
System Name/Password.......................................................................................... 24
System Name/Password using the CLI .................................................................... 25
Show Switch Model using the CLI ............................................................................ 26
IP Address ............................................................................................................... 27
Static IP ............................................................................................................. 27
DHCP Client ...................................................................................................... 27
EtherWAN Managed Switch Users Guide
iii
Preface
Default Gateway ................................................................................................ 27
DNS Server ........................................................................................................ 27
IP Address - Configuration using the CLI ................................................................. 29
IP Address ......................................................................................................... 29
Default Gateway ................................................................................................ 30
Domain Name Server (DNS) .............................................................................. 30
Enable/Disable DHCP Client on a VLAN ............................................................ 31
Enable/Disable Static IP on a VLAN................................................................... 31
Management Interface ................................................................ ............................. 32
HTTPS ............................................................................................................... 33
Telnet. ................................................................................................................ 33
SSH (Secure Shell) ............................................................................................ 33
Management Interface Configuration using the CLI ................................................. 34
Enabling/Disabling Telnet .................................................................................. 34
Enabling/Disabling SSH ..................................................................................... 35
Enabling/Disabling HTTP and/or HTTPS ........................................................... 36
Save Configuration Page ......................................................................................... 37
Save Configuration ............................................................................................ 38
Load Configuration ............................................................................................. 38
Backup Configuration ......................................................................................... 38
Restore Default .................................................................................................. 38
Auto Save .......................................................................................................... 38
Save Configuration Page using the CLI ................................................................... 39
Saving a Configuration ....................................................................................... 39
Restore Default Settings .................................................................................... 40
Load Configuration from a TFTP Server ............................................................ 40
Save Configuration to a TFTP Server ................................................................ 40
Auto Save Configuration .................................................................................... 41
Firmware Upgrade ................................................................................................... 41
Firmware Update using the CLI ............................................................................... 42
Reboot ................................................................................................ ..................... 43
Reboot using the CLI ............................................................................................... 43
Logout ..................................................................................................................... 43
Logout from the CLI ................................................................................................. 44
User Account Page .................................................................................................. 44
Changing the User Mode ................................................................................... 44
Creating a New User .......................................................................................... 45
Changing an Existing User Account ................................................................... 46
User Privilege Configuration .................................................................................... 47
User Account Settings using the CLI........................................................................ 49
Multi-User Mode................................................................................................. 49
Single User Mode .............................................................................................. 49
Radius User Mode ............................................................................................. 50
EtherWAN Managed Switch Users Guide
iv
Preface
Tacacs User Mode ............................................................................................. 50
Creating a New User .......................................................................................... 51
Permissions ....................................................................................................... 51
Diagnostics ............................................................................................................ 52
Utilization ................................................................................................................. 52
System Log.............................................................................................................. 52
System log using CLI command .............................................................................. 53
Remote Logging ...................................................................................................... 53
Remote Logging using CLI commands ................................ .................................... 55
ARP Table ............................................................................................................... 56
ARP Table using CLI Commands ............................................................................ 57
Route Table ............................................................................................................. 57
Route Table Using CLI Commands ......................................................................... 58
Alarm Setting ........................................................................................................... 58
Alarm Setting Using CLI Commands ....................................................................... 59
Set Normal State for Alarm Relay ............................................................................ 60
Port ......................................................................................................................... 60
Configuration ........................................................................................................... 60
Port Status ............................................................................................................... 62
Rate Control ............................................................................................................ 63
RMON Statistics ...................................................................................................... 64
Per Port VLAN Activities .......................................................................................... 65
Port Security ............................................................................................................ 66
Port Configuration Examples Using CLI Commands ................................ ................ 67
Setting the Port Description ............................................................................... 67
Enable or Disable a Port .................................................................................... 68
Setting the Port Speed ....................................................................................... 68
Setting Port Duplex ............................................................................................ 69
Enable or Disable Port Flow Control .................................................................. 69
Display Port Status ............................................................................................ 69
Setting a Port’s Rate Control .............................................................................. 70
Display a Port’s RMON Statistics ....................................................................... 70
Display a Port’s VLAN Activities ......................................................................... 70
Setting MAC Port Security ................................................................................. 71
Switching ................................................................................................................ 72
Bridging ................................................................................................................... 72
Aging Time......................................................................................................... 73
Threshold Level ................................................................................................. 73
Storm Control Type ............................................................................................ 74
Port Isolation ...................................................................................................... 74
EtherWAN Managed Switch Users Guide
v
Preface
Block Multicast ................................................................................................... 74
Loopback Detect ...................................................................................................... 75
Loopback Detection (Global) .............................................................................. 76
Loopback Detect Action ..................................................................................... 76
Loopback Detect Recovery Time ....................................................................... 76
Polling Interval ................................................................................................... 76
Loopback Detection (Per Port) ........................................................................... 77
Storm Detect ............................................................................................................ 78
Enable/Disable Storm Detection ................................ ........................................ 78
Static MAC Entry ..................................................................................................... 79
Adding a Static MAC Address to a Port .............................................................. 80
Removing a Static MAC Address from a Port ..................................................... 80
Adding a MAC to the Static-MAC-Entry Discard Table ....................................... 81
Removing a MAC address from the Static-MAC-Entry Discard Table ................ 81
Port Mirroring ........................................................................................................... 82
Link State Tracking .................................................................................................. 84
Enable/Disable Link State Tracking ................................................................... 84
Port Settings ...................................................................................................... 84
PoE (Power over Ethernet) - System and Port Settings ........................................... 85
PoE System Setting ........................................................................................... 85
PoE Port Setting ................................................................................................ 86
PoE Scheduling ................................................................ ....................................... 88
Switch Configuration Examples Using CLI Commands ............................................ 90
Setting the Aging Time Value ............................................................................. 90
Enabling Port Isolation ................................................................ ....................... 90
Enabling Block Multicast .................................................................................... 91
Setting Storm Control ......................................................................................... 91
Enabling Loopback Detect (Global) .................................................................... 91
Setting the Loopback Detect Action ................................................................... 92
Setting the Loopback Detect Recovery Time ..................................................... 92
Setting the Loopback Detect Polling Interval ...................................................... 92
Enabling Loopback Detect (Port) ....................................................................... 93
Configuring Storm-Detect ................................................................................... 93
Adding a MAC Address for Static-MAC-Entry Forwarding .................................. 97
Adding a MAC Address for Static-MAC-Entry DiscardingError! Bookmark not defined.
Configuring Port Mirroring .................................................................................. 97
Enabling a Link State Tracking Group ................................................................ 98
Assigning a Port to a Link State Tracking Group ................................................ 98
Setting PoE Power Budget ................................................................................. 99
PoE Port Settings............................................................................................... 99
PoE Scheduling ............................................................................................... 102
EtherWAN Managed Switch Users Guide
vi
Preface
Trunking ............................................................................................................... 104
Overview ............................................................................................................... 104
Static Channel Trunking ................................................................................... 105
Link Aggregation Control Protocol .................................................................... 105
Port Trunking ......................................................................................................... 106
LACP Trunking ...................................................................................................... 108
Trunking Configuration Examples Using CLI Commands ....................................... 112
Adding an Interface to a Static Trunk ............................................................... 112
Adding an Interface to a LACP Trunk ............................................................... 112
Setting the LACP Port Priority .......................................................................... 113
Setting the LACP Timeout ................................................................................ 113
STP/Ring Page – Overview ................................................................................. 114
Choosing the Spanning Tree Protocols .................................................................. 114
Spanning Tree Protocol (STP) ......................................................................... 114
Rapid Spanning Tree protocol (RSTP) ............................................................. 114
Multiple Spanning Tree Protocol (MSTP) ......................................................... 114
STP/Ring Page - Configuring RSTP ................................................................... 115
Global Configuration Page ..................................................................................... 115
Enabling the RSTP Protocol ............................................................................ 115
Additional Global Configuration page settings .................................................. 115
The Root Bridge & Backup Root Bridge ........................................................... 117
Setting the MAX Age, Forward Delay and Hello Timer ..................................... 118
RSTP Port Setting Page ........................................................................................ 119
Spanning Tree Port Roles ................................................................................ 119
Path Cost & Port Priority .................................................................................. 120
Point to Point Link ............................................................................................ 122
Edge Port ......................................................................................................... 122
RSTP Configuration Examples Using CLI Commands ........................................... 122
Enabling the Spanning Tree Protocol ............................................................... 122
Bridge Priority, Max Age, Forward Delay, and Hello Time ................................ 123
Modifying the Port Priority and Path Cost ......................................................... 123
Manually Setting a Port to be a Shared or Point to Point Link .......................... 124
Enabling/Disabling a port to be an Edge Port ................................................... 124
STP/Ring Page - Configuring MSTP ................................ ................................... 125
Global Configuration Page ..................................................................................... 125
Enabling the MSTP Protocol ............................................................................ 125
The CIST Root Bridge & Backup CIST Root Bridge ......................................... 126
Setting Bridge Priority ...................................................................................... 127
Configuring the CST Network Diameter ........................................................... 128
MSTP Properties Page .......................................................................................... 129
EtherWAN Managed Switch Users Guide
vii
Preface
Configuring an MSTP Region........................................................................... 129
Configuring the IST Network Diameter ............................................................. 130
MSTP Instance Setting Page ................................................................................. 131
Setting an MSTP Instance ............................................................................... 131
Modifying MSTP parameters for load balancing ............................................... 132
MSTP Port Setting page ........................................................................................ 134
Adjusting the blocking port in a MSTP network ................................................ 134
MSTI Instance Port Membership ...................................................................... 135
MSTP Configuration Examples Using CLI Commands .......................................... 136
Enabling Spanning Tree for MSTP ................................................................... 136
Bridge Priority, Max Age, Forward Delay, and Hello Time ................................ 137
IST MAX Hops ................................ ................................................................ . 137
MSTP Regional Configuration Name and the Revision Level ........................... 138
Creating an MSTI Instance .............................................................................. 138
Setting MSTI Priority ........................................................................................ 139
Modifying CIST Port Priority and Port Path Cost .............................................. 139
Adding a Port to an MSTI Instance .................................................................. 140
STP/Ring Page - Alpha Ring ............................................................................... 141
Alpha Ring Setting Page ........................................................................................ 141
EtherWAN Alpha-Ring Technology .................................................................. 141
Implementing a Simple Alpha-Ring .................................................................. 141
Alpha-Ring V2 .................................................................................................. 142
Connecting two Alpha-Ring Networks together (Ring Coupling) ....................... 143
Connecting Additional Rings (Redundancy Pairs) ............................................ 144
Configuring Alpha Ring using CLI commands ........................................................ 147
Enable Alpha Ring and Alpha Ring V2 Protocols ............................................. 147
Set the Ring Ports ............................................................................................ 148
Show Ring, Port and All States ........................................................................ 148
Define a Ring’s Blocked Port ........................................................................... 149
Set Delay Time for Restoration of a Failed Port ............................................... 149
Enable Ring Coupling ...................................................................................... 149
Set Ring Coupling Ports ................................................................................... 149
Enable Redundancy Pairs ................................................................................ 150
Configure Redundancy Pairs ........................................................................... 150
Show Ring Coupling, Port Coupling, and Redundancy Pair States .................. 151
STP/Ring Page – Alpha Chain ............................................................................ 151
The Alpha Chain Protocol ...................................................................................... 151
General Overview .................................................................................................. 152
Alpha Chain Settings ............................................................................................. 152
Global Settings ................................................................................................ 152
Configuring the Alpha Chain Ports ................................................................... 153
viii
EtherWAN Managed Switch Users Guide
Preface
Alpha Chain Pass-Through Ports ........................................................................... 154
Configuring Alpha Chain using CLI commands ...................................................... 155
Storm Control ................................................................................................... 155
Configuring Chain Ports ................................................................................... 156
Configuring Chain Pass-Through Ports ............................................................ 156
STP/Ring Page - Advanced Setting .................................................................... 157
Advanced Bridge Configuration ............................................................................. 157
Advanced Per Port Configuration ........................................................................... 158
Configuring Spanning Tree Advanced Settings using CLI commands.................... 160
Enabling BPDU Guard Globally ....................................................................... 160
Enabling BPDU Guard on a Port ...................................................................... 160
Enabling BPDU Guard Error Disable-timeout ................................................... 161
VLAN ..................................................................................................................... 162
Port Based VLAN vs. Tagged Based VLAN ........................................................... 162
Configuring VLANs in Port Based VLAN Mode ...................................................... 162
Enabling Port Based VLAN .............................................................................. 162
Port Based VLAN Configuration Examples ...................................................... 163
Port Based VLAN Configuration Examples using CLI Commands ................... 164
VLAN Configuration in 802.1Q Tag Based VLAN Mode ......................................... 165
General Overview ............................................................................................ 165
Enabling 802.1Q Tagged Based VLAN ............................................................ 166
Configuring 802.1Q VLAN Database................................................................ 166
802.1Q Tag Based VLAN Configuration Examples Using CLI Commands ............ 167
Configuring a 802.1Q VLAN ............................................................................. 167
Configuring an IP Address for a Management VLAN ....................................... 168
Removing an IP Address from a Management VLAN ....................................... 168
Configuring an Access Port .............................................................................. 169
Configuring a Trunk Port .................................................................................. 169
Add an IP to the Management VLAN ..................................................................... 170
Configuring the Port Type and the PVID setting ..................................................... 171
Configuring the VLAN Egress (outgoing) Member Ports .................................. 172
QoS ....................................................................................................................... 174
Global Configuration Page ..................................................................................... 175
Web GUI Interface ........................................................................................... 175
QoS Global Configuration using the CLI Interface ................................................. 177
Enable/Disable QoS Trust ................................................................................ 177
Configuring the Egress Expedite Queue .......................................................... 178
802.1p Priority Page .............................................................................................. 179
Web GUI Interface ........................................................................................... 179
802.1p Priority Submenu – CLI Interface ................................ ............................... 180
EtherWAN Managed Switch Users Guide
ix
Preface
DSCP Page – HTTP Interface ............................................................................... 181
DSCP Submenu – CLI Interface ............................................................................ 182
QoS Interface Commands – CLI Interface ............................................................. 182
ACL (Access Control List) .................................................................................. 183
General Overview .................................................................................................. 183
Configuring ACL .................................................................................................... 184
ACL Policy Map ................................ ................................................................ ..... 185
IP Access List .................................................................................................. 186
IP Access List (Extended) ................................................................................ 187
Mac Access List ............................................................................................... 189
Layer 4 ............................................................................................................. 191
Bandwidth Limiting ........................................................................................... 192
Applying a Policy Map to a Port ....................................................................... 194
Modifying/Adding an Existing Policy Map ......................................................... 194
Adding a New ACL Class to an Existing Policy Map ........................................ 195
Adding an Existing ACL Class to an Existing Policy Map ................................. 196
Removing an ACL Class .................................................................................. 198
ACL Configuration Examples Using CLI Commands ............................................. 202
Enabling QoS ................................................................................................... 202
Creating a Standard IP Access List .................................................................. 202
Creating an Extended IP Access List ............................................................... 203
Creating a MAC Access List ............................................................................ 203
Creating an ACL Class Map with Layer 4 Access List ...................................... 204
Creating a ACL Class Map with an IP or MAC Access List .............................. 205
Creating an ACL Policy Map ............................................................................ 206
Appling an Existing ACL Policy to a Port .......................................................... 207
Deleting an ACL Class ..................................................................................... 207
Deleting an ACL Policy .................................................................................... 208
SNMP .................................................................................................................... 209
SNMP General Settings ......................................................................................... 209
Configuring SNMP v1 & v2 Community Groups ..................................................... 212
Configuring SNMP v3 Users .................................................................................. 213
Adding SNMP v3 Users to the switch ............................................................... 213
Deleting SNMP v3 Users from the switch ......................................................... 216
SNMP Configuration Examples Using CLI Commands .......................................... 217
Enabling SNMP and configuring general settings............................................. 217
Configuring SNMP Traps ................................................................................. 217
Configuring SNMP v1 & v2 Community Groups ............................................... 219
Adding SNMP v3 Users ................................................................................... 219
EtherWAN Managed Switch Users Guide
x
Preface
AAA/802.1x (Authentication, authorization, and accounting) .......................... 220
Configuring Radius from the GUI ........................................................................... 220
Enabling Radius ............................................................................................... 220
Adding a Radius Server ................................................................................... 221
Enabling 802.1X on a Port ............................................................................... 222
Configuring TACACS+ from the GUI ...................................................................... 223
Enabling TACACS+ ......................................................................................... 224
Adding a TACACS+ Server .............................................................................. 224
AAA/802.1x Configuration Using the CLI ............................................................... 225
View RADIUS Status ....................................................................................... 225
Enable RADIUS Globally ................................................................................. 225
Configure RADIUS on Ports ............................................................................. 226
TACACS+ Authentication and Authorization .................................................... 226
Configure TACACS+ Server ................................................................ ............ 226
LLDP ..................................................................................................................... 227
LLDP General Settings .......................................................................................... 227
Enable/Disable LLDP ................................ ....................................................... 228
Holdtime Multiplier ........................................................................................... 228
Global TLV Setting ........................................................................................... 228
LLDP Ports Settings .............................................................................................. 230
Enabling LLDP transmission for a specific Port ................................................ 230
Enabling LLDP Reception for a specific Port .................................................... 230
Enabling Notifications ...................................................................................... 230
LLDP Neighbors .................................................................................................... 232
LLDP Statistics ...................................................................................................... 233
LLDP Configuration Examples Using CLI Commands ........................................... 234
Enable/Disable LLDP ................................ ....................................................... 234
LLDP Holdtime Multiplier .................................................................................. 234
LLDP Transmit Interval .................................................................................... 235
Enable/Disable Global LLDP TLVs .................................................................. 235
Enabling LLDP Transmit on a Port ................................................................... 236
Enabling LLDP Receive on a Port .................................................................... 236
Enabling LLDP Notify ................................ ....................................................... 237
Enabling Transmission of the Management IP ................................................. 237
Enabling Specific TLV’s on a Port .................................................................... 238
Other Protocols.................................................................................................... 239
GVRP .................................................................................................................... 239
General Overview ............................................................................................ 239
Enabling the GVRP Protocol at the Global Level ............................................. 240
Enabling the GVRP Protocol at the Port Level ................................................. 241
GVRP Configuration Examples Using CLI Commands .................................... 242
EtherWAN Managed Switch Users Guide
xi
Preface
IGMP Snooping ..................................................................................................... 245
General Overview ............................................................................................ 245
Enabling the IGMP Snooping Modes ............................................................... 246
Configuring IGMP Snooping General properties .............................................. 246
Configuring IGMP Passive Mode Specific properties ....................................... 247
Configuring IGMP Querier Mode Specific properties ........................................ 248
Configuring IGMP Unknown Multicast Forwarding ........................................... 249
Monitoring Registered Multicast Groups .......................................................... 253
IGMP Configuration Examples Using CLI Commands ..................................... 254
Network Time Protocol (NTP) ................................................................................ 261
Enabling NTP ................................................................................................... 261
Setting the NTP Server IP Address .................................................................. 262
Setting the Time Zone ...................................................................................... 262
Setting the Polling Period ................................................................................. 262
Manually Syncing Time .................................................................................... 262
Daylight Savings Time - Weekday Mode .......................................................... 263
Daylight Savings Time – Date Mode ................................................................ 264
Network Time Protocol Configuration Examples Using CLI Commands ........... 265
GMRP .................................................................................................................... 268
General Overview ............................................................................................ 268
GMRP Normal mode ........................................................................................ 268
GMRP Fixed mode .......................................................................................... 268
GMRP Forbidden mode ................................................................................... 269
GMRP Forward All mode ................................................................................. 269
GMRP Disabled mode ..................................................................................... 269
Enabling the GMRP Feature Globally on the Switch ........................................ 269
Configuring the GMRP Feature Per Port .......................................................... 270
GMRP Configuration Examples Using CLI Commands .................................... 272
DHCP Server ......................................................................................................... 274
General Overview ............................................................................................ 274
Configuring the DHCP Server ................................ .......................................... 274
DHCP Configuration Examples Using CLI Commands .................................... 277
DHCP Relay .......................................................................................................... 278
General Overview ............................................................................................ 278
Configuring the DHCP Relay ........................................................................... 278
DHCP Relay Configuration Examples Using CLI Commands........................... 279
xii
EtherWAN Managed Switch Users Guide

Preface

Revision
Document Version
Date
Description
A
Version 1
5/05/2016
Initial release for Firmware version 1.94.5
PREFACE
Audience
This guide is designed for the person who installs, configures, deploys, and maintains the Ethernet network. This document assumes the reader has moderate hardware, computer, and Internet skills.
Document Revision Level
This section provides a history of the revision changes to this document.

Changes in this Revision

 Added support for TACACS+ command authorization  Added Redundant Pair Protocol  Added Predefined Path Protocol  Added a Relay command for configuring a relay’s normally open/closed circuit  Added the following syslog events and MIBs support for PoE series
a. PoE up / PoE down /PoE Over load /PoE System Error
xiii
EtherWAN Managed Switch Users Guide
Preface
Symbol
Meaning
Description
Note
Notes emphasize or supplement important points of the main text.
Tip
Tips provide helpful information, guidelines, or suggestions for performing tasks more effectively.
Warning
Warnings indicate that failure to take a specified action could result in damage to the device, or could result in serious bodily injury.
Electric Shock Hazard
This symbol warns users of electric shock hazard. Failure to take appropriate precautions such as not opening or touching hazardous areas of the equipment could result in injury or death.
Convention
Description
Bold
Indicates text on a window, other than the window title, including menus, menu options, buttons, fields, and labels.
Italic
Indicates a variable, which is a placeholder for actual text provided by the user or system. Angled brackets (< >) are also used to indicate variables.
screen/code
Indicates text that is displayed on screen or entered by the user.
< > angled brackets
Indicates a variable, which is a placeholder for actual text provided by the user or system. Italic font is also used to indicate variables.
[ ] square brackets
Indicates optional values. { } braces
Indicates required or expected values.
| vertical bar
Indicates that you have a choice between two or more options or arguments.

Document Conventions

This guide uses the following conventions to draw your attention to certain information.

Safety and Warnings

This guide uses the following symbols to draw your attention to certain information.

Typographic Conventions

This guide also uses the following typographic conventions.
EtherWAN Managed Switch Users Guide
xiv

UNPACKING AND INSTALLATION

This chapter describes how to unpack and install the EtherWAN Managed Switch The topics covered in this chapter are:
Package Contents (Page 15) Unpacking (Page 15) Required Equipment and Software (Page 16) Computer Setup (Page 17) Management Methods and Protocols (Page 17) Default IP (Page 18) Login Process and Default Credentials (Page 18) Setting the initial IP address (Page 19)

Package Contents

When you unpack the product package, you will find the items listed below. Please inspect the contents, and report any apparent damage or missing items immediately to your authorized reseller.
This Managed Switch Product CD Quick Installation Guide External power adapter/Cable (depending on model)

Unpacking

Follow these steps to unpack the EtherWAN Managed Switch and prepare it for operation:
1. Open the carton and carefully remove the contents.
2. Return all packing materials to the carton. If possible, save the carton and packing material in case you need to ship or store the switch in the future.
3. Confirm that all items listed in the "Package Contents" section are included in the shipment. Check each item for damage. If any item is damaged or missing, notify your authorized EtherWAN representative.
EtherWAN Managed Switch Users Guide
15

Required Equipment and Software

The following hardware and software are needed in order to manage the switch from the web interface:
Computer with an Ethernet Interface (RJ-45)
Managing the switch requires a personal computer (PC) or notebook computer equipped with a 10/100base-TX Ethernet interface and a physical RJ-45 connection. The preferred operating system for the computer is Microsoft Windows 7/8/8.1/10. It is possible to use Apple OSX or Linux systems as well, but, for the sake of brevity, all web configurations in this manual will be shown using Windows 7 as the underlying operating system.
Cat 5+ Ethernet Cables
An Ethernet cable of at least Category 5 rating is required to connect your computer to the switch. The cable can be configured as “straight-through” or crossover.
TFTP Server Software
Trivial file transfer protocol (TFTP) server software is needed to update the switch firmware and to upload/download configuration files to the switch. Users not performing these tasks do not need TFTP software installed. Several good TFTP servers are available for free online. The server that will be used in this manual is TFTPD32 by Philippe Jounin.
Web Browser Software
The end user can employ any of the following web browsers during switch configuration: Internet Explorer, Firefox, or Chrome. Internet Explorer is the preferred browser for EtherWAN switch configuration. If there is trouble with other browsers while attempting to program the switch, Internet Explorer should be used.
16
EtherWAN Managed Switch Users Guide

COMPUTER SETUP

The end user’s management computer may need to be reconfigured prior to connecting to
the switch in order to access the switch’s web interface through its default IP address (See
Default IP).

Management Methods and Protocols

There are several methods that can be used to manage the switch. This manual will show the details of configuring the switch using a web browser. Each section will be followed by the CLI (Command Line Interface) commands needed to achieve the same results as described in that section.
The methods available to manage the EtherWAN Managed Switch include:
SSH - Secure Shell CLI that is accessible over TCP/IP networks which and
is generally regarded as the most secure method of remotely accessing a device.
Telnet - is like SSH in that it allows a CLI to be established across a
TCP/IP network, but it does not encrypt the data stream. This type of connection requires a terminal, or a computer running a terminal emulation application (such as HyperTerminal or Putty).
HTTP (Hypertext Transfer Protocol) is the most popular switch
management protocol involving the use of a web browser.
RS-232 – The EtherWAN Managed Switch is equipped with a RS-232
serial port that can be used to access the switchs CLI. The Serial port is DCE DB9F. A straight through serial cable is used to connect to a typical computer serial port (Also requires terminal emulation application).
EtherWAN Managed Switch Users Guide
17

Default IP

The switch’s default IP address is 192.168.1.10. The management computer must be set up so that it is on the same network as the switch. For example, the IP address of the management computer can be set to 192.168.1.100 with a subnet mask of 255.255.255.0.

Login Process and Default Credentials

Once a compatible IP address has been assigned to the management computer, the user is ready to log in to the switch. To log in, type the URL http://192.168.1.10/ into the address field of the browser and hit return. The following will appear in the browser window (See Figure 1)
The Default Login is root (case sensitive) There is no password by default Enter the login name and click the Login button
Figure 1: Login screen
18
EtherWAN Managed Switch Users Guide

SETTING THE INITIAL IP ADDRESS

Once logged in the user can now configure the switch per the network requirements. The two major addressing options are:
Simple IP addressing Multiple VLAN addressing (See Add an IP to the Management VLAN on page 170).

Simple IP Addressing

A new IP address can now be assigned to the switch. From the System Information screen, go to the left hand navigation menu.
1. Click on the + next to System
2. Click on IP address
3. Enter the desired IP address and subnet mask in the IP Address/Subnet Mask fields associated with VLAN 1
4. Click the Apply & Save button (See Figure 2)
Figure 2: Assigning an IP address
EtherWAN Managed Switch Users Guide
19

CLI COMMAND USAGE

This chapter describes accessing the EtherWAN Managed Switch by using Telnet, SSH, or serial ports to configure the switch, navigating the Command Line Interface (CLI), typing keyboard shortcuts, and moving between the levels. This chapter assumes the user has a working understanding of Telnet, SSH and Terminal emulation applications.
Note: For a serial port connection use a standard DB9F to DB9M Modem Cable. The default Serial port parameters are Baud rate: 115,200bps, Data bits: 8, Parity: none, Stop bit: 1, Flow control: none.

Navigating the CLI Hierarchy

The CLI is organized into a hierarchy of command modes. The basic modes are User exec mode, Privileged exec mode, and Global configuration mode. There are also other modes, specific to certain configurations. Each mode has its own group of commands for a specific purpose. Below are the CLI commands needed to enter a specific mode:
switch_a> ← User exec mode switch_a>enable switch_a# ← Privileged exec mode switch_a#configure terminal switch_a(config) ← Global configuration mode switch_a(config) spanning-tree mst configuration switch_a(config-mst)# ← MSTP configuration mode
switch_a(config)#line console 0
switch_a(config-line) Line configuration mode
switch_a(config)# interface fe1 switch_a(config-if)# ← Interface configuration mode
switch_a(config)#vlan database
switch_a(config-vlan)# ← VLAN database configuration mode

CLI Keyboard Shortcuts

Ctrl + a: place cursor at the beginning of a line
EtherWAN Managed Switch Users Guide
20
Ctrl + b: backspace one character Ctrl + d: delete one character Ctrl + e: place cursor at the end of the line Ctrl + f: move cursor forward one character Ctrl + k: delete from the current position to the end of the line Ctrl + l: redraw the command line Ctrl + n: display the next line in the history Ctrl + p: display the previous line in the history Ctrl + u: delete entire line and place cursor at start of prompt Ctrl + w: delete one word back

CLI Command modes

Throughout this manual, each section that has CLI commands relevant to that section requires that the CLI be in a specific configuration mode. This section shows the main CLI commands to needed to enter a specific mode.

Global Configuration Mode

To set the EtherWAN Managed Switch to Global Configuration Mode, run the following commands from the CLI:
1. enable
2. configure terminal Example:
switch_a>enable
switch_a#configure terminal switch_a(config)#

MSTP Configuration Mode

To set the EtherWAN Managed Switch to General MSTP configuration mode, run the following commands from the CLI:
1. enable
2. configure terminal
3. spanning-tree mst configuration
EtherWAN Managed Switch Users Guide
21
Example:
switch_a>enable switch_a#configure terminal switch_a(config)#spanning-tree mst configuration switch_a(config-mst)#

Interface Configuration Mode

Interface mode on the EtherWAN Managed Switch is used to configure the Ethernet ports
and VLAN information. Valid interfaces are:
fe<port #> - 100mb ports use fe followed by the port number. Example: fe1 ge<port #> - Gigabit ports use ge followed by the port number. Example: ge1 vlan1.<vlan#> - VLAN’s use vlan. Followed by the VLAN ID. Example: vlan1.10
Example 1 configures 100mb port 1
switch_a>enable switch_a#configure terminal switch_a(config)#interface fe1 switch_a(config-if)
Example 2 configures VLAN ID 9
switch_a>enable switch_a#configure terminal switch_a(config)#interface vlan1.9 switch_a(config-if)

VLAN Database Configuration Mode

VLAN Database Configuration Mode on the EtherWAN Managed Switch is used to
configure the VLAN settings.
Example:
switch_a>enable switch_a#configure terminal switch_a(config)#vlan database switch_a(config-vlan)#
EtherWAN Managed Switch Users Guide
22

Saving a Configuration from the CLI

Example:
switch_a>enable switch_a#write memory
Building configuration.....
[OK] switch_a#>

SYSTEM MENU (WEB INTERFACE)

System Information

The System information link on the Left menu of the Web Configuration page takes you to a page that shows the following (see Figure 3):
System Name
o The System name is typically used by network administrators. If SNMP is
enabled on the switch, the system name can be found using MIB II (RFC1213) in the sysName property.
Firmware Version
o If SNMP is enabled on the switch, the Firmware version can be found using
MIB II in the sysDesc property
System Time
o System time can be changed using NTP
MAC Address
o The hardware (MAC) address of the Management interface
Default Gateway
o The IP address of your networks Gateway (Typically a Router on your
network)
DNS Server
o The Dynamic Name Server (DNS) for your network
VLAN ID
23
EtherWAN Managed Switch Users Guide
o One or more listings depending on the number of VLANs defined on the
switch
o Lists VLAN ID, IP address, and subnet mask of the VLAN Interface(s)
Current User Information
o Lists the current the currently logged in user and their user privileges
Figure 3: System Information

System Name/Password

The System name is typically used by network administrators to make it easier to document a networks infrastructure and locate equipment on large networks. If SNMP is enabled on the switch, the system name can be found using MIB II (RFC1213) in the sysName property. To change the system name:
1. Click on the + next to System.
2. Click on System Name/Password (see Figure 4).
3. Use your mouse to place the cursor in the System Name text box.
4. Replace the existing name with the name you want to assign to the switch.
5. Click on the Update Setting button.
EtherWAN Managed Switch Users Guide
24
By default there is no password assigned to the switch. To add or change a password:
1. Click on the + next to System.
2. Click on System Name/Password (see Figure 4).
3. Use your mouse to place the cursor in the Password text box.
4. Enter the new password.
5. Retype the password in the Retype Password text box.
6. Click on the Update Setting button below the Retype Password text box.
Note: The check box “Write to EB-232” is only for use with the EtherWAN EB-232
dongle.
Figure 4: System Name/Password

System Name/Password using the CLI

For more information on CLI command usage see CLI Command Usage.
System Name
To set the system name on a switch, use the following CLI commands (Hostname must not contain spaces. Use the dash and underscore characters):
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
hostname <name> no hostname
Usage Example 1: Setting a Hostname
switch_a>enable
EtherWAN Managed Switch Users Guide
25
switch_a#configure terminal switch_a(config)#hostname switch_a switch_a(config)#write memory
Usage Example 2: Removing a Hostname
switch_a>enable switch_a#configure terminal switch_a(config)#no hostname switch_a(config)#write memory
Password
To enable a password on a switch, use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
enable password <password>
Usage Example
switch_a>enable switch_a#configure terminal switch_a(config)#enable password mypassword switch_a(config)#write memory

Show Switch Model using the CLI

For more information on CLI command usage see CLI Command Usage.
System Name
To see the model number of a switch, use the following CLI command:
CLI Command Mode: User Exec Mode or Privileged Exec Mode CLI Command Syntax:
show integrate product series
Usage Example 1:
switch_a>enable
26
EtherWAN Managed Switch Users Guide
switch_a# show integrate product series
EX78000 series

IP Address

To navigate to the IP Address page:
1. Click on the + next to System
2. Click on IP Address (see Figure 5)
There are 4 settings on this page:
Static IP (see Simple IP Addressing) DHCP Client
Use this to enable or disable DHCP on a VLAN. To enable the DHCP Client:
1. Use the drop down box to enable the DHCP client on a particular VLAN
2. Click the Submit Button
Default Gateway
If DHCP is enabled, the gateway setting is controlled by the DHCP server. The setting will be grayed out and the gateway supplied by the DHCP server will be displayed. The default gateway setting can be used when using a Static IP address. To enable the default gateway:
1. Use the dropdown box to enable the default gateway.
2. Type in the default gateway in the Default Gateway text box.
3. Click on the Apply & Save button.
DNS Server
If DHCP is enabled, the DNS Server setting is controlled by the DHCP server. The setting will be grayed out and the DNS Server supplied by the DHCP server will be displayed. The DNS Server setting can be used when using a Static IP address. To enable the DNS Server:
1. Use the dropdown box to enable the DNS Server.
2. Type in the default gateway in the Default Gateway text box.
3. Click on the Submit button.
EtherWAN Managed Switch Users Guide
27
Note: After making changes to settings in the IP address section, the
configuration needs to be saved using the System/Save configuration page (See Save Configuration)
Figure 5: IP Address
28
EtherWAN Managed Switch Users Guide

IP Address - Configuration using the CLI

For more information on CLI command usage see CLI Command Usage.
IP Address
To set the IP address, use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
ip address <A.B.C.D/M> (IP Address/Mask e.g. 10.0.0.1/8) no ip address
Note: The Subnet Mask is defined as a Network Prefix instead of the common dotted
decimal (ex. 255.255.255.0).
The most commonly used Network Prefixes are:
/8 – Known as Class A. Also known in dotted decimal as 255.0.0.0  /16– Known as Class B. Also known in dotted decimal as 255.255.0.0  /24– Known as Class C. Also known in dotted decimal as 255.255.255.0
Usage Example 1: Assigning an IP address
switch_a>enable switch_a#configure terminal switch_a(config)#ip address 192.168.1.1/24 switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#
Usage Example 2: Removing an IP address
switch_a>enable switch_a#configure terminal switch_a(config)#no ip address switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#
EtherWAN Managed Switch Users Guide
29
Default Gateway
To set the Default Gateway, use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
ip default-gateway <A.B.C.D> no ip default gateway
Usage Example 1: Setting the Gateway
switch_a>enable switch_a#configure terminal switch_a(config)#ip default-gateway 192.168.1.254 switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#
Usage Example 2: Removing the Gateway
switch_a>enable switch_a#configure terminal switch_a(config)#no ip default-gateway switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#
Domain Name Server (DNS)
To set the DNS, use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
ip dns <A.B.C.D> no ip dns
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#ip dns 192.168.1.253 switch_a(config)#q switch_a#write memory
EtherWAN Managed Switch Users Guide
30
Building configuration.....
[OK] switch_a#q
switch_a#
Usage Example 2: Remove a DNS IP Address
switch_a>enable switch_a#configure terminal switch_a(config)#no ip dns switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#
Enable/Disable DHCP Client on a VLAN
To enable the DHCP client on a VLAN, use the following CLI commands:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax:
get ip dhcp enable no get ip dhcp enable
Usage Example – Enable DHCP Client on VLAN2:
switch_a>enable switch_a#configure terminal switch_a(config)#interface vlan1.2 switch_a(config-if)#get ip dhcp enable switch_a(config-if)#q switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#
Enable/Disable Static IP on a VLAN
To set the IP address, use the following CLI commands:
CLI Command Mode: Interface Configuration Mode
EtherWAN Managed Switch Users Guide
31
CLI Command Syntax:
ip address <A.B.C.D> no ip address <A.B.C.D>
Usage Example 1 – Enable Static IP on VLAN2:
switch_a>enable switch_a#configure terminal switch_a(config)#interface vlan1.2 switch_a(config-if)#ip address 192.168.1.11 switch_a(config-if)#q switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q switch_a#
Usage Example 2 – Disable Static IP on VLAN2:
switch_a>enable switch_a#configure terminal switch_a(config)#interface vlan1.2 switch_a(config-if)#no ip address 192.168.1.11 switch_a(config-if)#q switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#

Management Interface

To navigate to the Management Interface page:
1. Click on the + next to System
2. Click on Management Interface
The Management Interface configuration page has three settings that allow the user to configure the methods available to manage the EtherWAN Managed Switch.
EtherWAN Managed Switch Users Guide
32

HTTPS

HTTPS (Hypertext Transfer Protocol Secure) allows the user to determine what method, if any, is used to configure the EtherWAN Managed Switch. The default is unencrypted HTTP (see Figure 6).
To disable the Web interface:
1. Uncheck Http and Https.
2. Click on the Update setting button.
Warning! Once the Submit button is pressed, the Web console will no longer function. As a safety precaution, the configuration is not saved by default. Rebooting the EtherWAN Managed Switch will restore the Web Console. To save the configuration, connect using the new IP address.
To enable the Web Interface:
1. Check HTTP, HTTPS or both
2. Click on the Update Setting button.
3. Save the Configuration (see Save Configuration)

Telnet.

Telnet is a network protocol that allows a remote computer to log into the EtherWAN Managed Switch to access its CLI (Command Line Interface). The CLI can be access using Telnet, SSH and the serial port on the EtherWAN Managed Switch. The secure method of accessing the CLI over a network is SSH.
To enable or disable Telnet:
1. Click the Enable or Disable radio button in the Telnet section on the Management Interface page (see Figure 6 below)
2. Click on the Update Setting button
3. Save the Configuration (see Save Configuration)

SSH (Secure Shell)

Secure Shell or SSH is a network protocol that allows data to be exchanged using a secure channel between two networked devices such as a computer and the EtherWAN Managed Switch. SSH is disabled by default on the V1.94.3 EtherWAN Managed Switch.
To enable or disable SSH:
1. Click the Enable or Disable radio button in the SSH section on the Management Interface page (see Figure 6)
EtherWAN Managed Switch Users Guide
33
2. Click on the Update Setting button
3. Save the Configuration (see Save Configuration)
Figure 6: Management Interface

Management Interface Configuration using the CLI

For more information on CLI command usage see CLI Command Usage.

Enabling/Disabling Telnet

To enable or disable telnet, use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
ip telnet no ip telnet
Usage Example 1: Enabling Telnet:
switch_a>enable switch_a#configure terminal
EtherWAN Managed Switch Users Guide
34
switch_a(config)#ip telnet switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#
Usage Example 2: Disabling Telnet:
switch_a>enable switch_a#configure terminal switch_a(config)#no ip telnet switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
Note: If using Telnet to run the CLI Commands that disable telnet you will lose your
connection. To Disable Telnet using the CLI, use SSH or the RS232 Console port on the switch.

Enabling/Disabling SSH

To enable or disable SSH, use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
ip ssh no ip ssh
Usage Example 1: Enabling SSH:
switch_a>enable switch_a#configure terminal switch_a(config)#ip ssh switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#
EtherWAN Managed Switch Users Guide
35
Usage Example 2: Disabling SSH:
switch_a>enable switch_a#configure terminal switch_a(config)#no ip ssh switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
Note: If using SSH to run the CLI Commands that disable SSH you will lose your
connection. To Disable SSH using the CLI, use Telnet or the RS232 Console port on the switch.

Enabling/Disabling HTTP and/or HTTPS

To enable or disable telnet, use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
ip http server ip http secure-server no ip http server no ip http secure-server
Usage Example 1: Enabling HTTP:
switch_a>enable switch_a#configure terminal switch_a(config)#ip http server switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#
Usage Example 2: Disabling HTTP:
switch_a>enable switch_a#configure terminal
EtherWAN Managed Switch Users Guide
36
switch_a(config)#no ip http server switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
Usage Example 3: Enabling HTTPS:
switch_a>enable switch_a#configure terminal switch_a(config)#ip http secure-server switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#
Usage Example 4: Disabling HTTPS:
switch_a>enable switch_a#configure terminal switch_a(config)#no ip http secure-server switch_a(config)#q switch_a#write memory
Building configuration.....
[OK] switch_a#q

Save Configuration Page

To navigate to the Save Configuration page:
1. Click on the + next to System
2. Click on Save Configuration
The Save Configuration page contains the following configuration functions (see Figure 7):
EtherWAN Managed Switch Users Guide
37

Save Configuration

To save the currently running configuration to the flash memory on the EtherWAN Managed Switch:
1. Click the Save Configuration button
2. If the save is successful you will see the message: Building configuration….. [OK]

Load Configuration

This function is used to load a previously saved configuration. Backing up and loading a configuration is achieved using a TFTP server.
To load a configuration:
1. Enter the IP address of your TFTP server in the TFTP Server text box
2. Enter the name of the configuration file in the FILE text box
3. Click on the Backup button
4. If the file is successfully loaded the following message will be shown: Success! System reboot is required!

Backup Configuration

This function is used to back up the current configuration of the EtherWAN Managed Switch. Backing up the configuration is achieved using a TFTP server such as TFTPD32.
To back up a configuration:
1. Enter the IP address of your TFTP server in the TFTP Server text box
2. Enter the name of the configuration file in the FILE text box
3. Click on the Backup button
4. If the backup is successful the following message will be shown: tftp <filename> to ip <ip address> success!!

Restore Default

To restore the V1.94.3 EtherWAN Managed Switch to factory defaults:
1. Click on the Restore Default button.

Auto Save

The Auto Save function is used to set the switch to automatically save the configuration to flash. If the saved configuration is the same as the running
EtherWAN Managed Switch Users Guide
38
configuration then a save is not made. The Auto Save interval is used to determine how often the running configuration is checked for changes.
To set the Auto Save function:
1. Click the dropdown box next to Auto Save.
2. Set the Auto Save interval (5~65535 sec)
Note: If a Firewall is running on the PC that is running the TFTP server it may need to be temporarily disabled.
Figure 7: Save Configuration Page

Save Configuration Page using the CLI

For more information on CLI command usage see CLI Command Usage.

Saving a Configuration

To save a running configuration, use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
write memory
Usage Example 1: Saving a Configuration
switch_a>enable
EtherWAN Managed Switch Users Guide
39
switch_a#write memory
Building configuration.....
[OK] switch_a#q
switch_a#

Restore Default Settings

To restore the switch to its default settings, use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
restore default
Usage Example 1: Restoring Defaults
switch_a>enable switch_a#restore default switch_a#q
switch_a#

Load Configuration from a TFTP Server

To Load a Configuration from a TFTP server, use the following CLI commands:
CLI Command Mode: Privileged Exec Mode CLI Command Syntax:
install config-file <tftpserver_ipaddress> <filename>
Usage Example: Loading a Configuration
switch_a>enable switch_a#install config-file 192.168.1.100 file_name.txt switch_a#q
switch_a#

Save Configuration to a TFTP Server

To Save a Configuration to a TFTP server, use the following CLI commands:
CLI Command Mode: Privileged Exec Mode
EtherWAN Managed Switch Users Guide
40
CLI Command Syntax:
write config-file <tftpserver_ipaddress> <filename>
Usage Example: Saving a Configuration
switch_a>enable switch_a#write config-file 192.168.1.100 flash.tgz switch_a#q
switch_a>

Auto Save Configuration

To set the Auto Save Configuration, use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
service auto-config enable no service auto-config enable service auto-config interval <number>
Usage Example 1: Enabling Auto Save and setting the interval
switch_a>enable switch_a#service auto-config enable switch_a#service auto-config interval 10 switch_a#q
switch_a>
Usage Example 2: Disabling Auto Save
switch_a>enable switch_a#no service auto-config enable switch_a#q
switch_a>

Firmware Upgrade

To navigate to the Firmware Upgrade page:
1. Click on the + next to System
2. Click on Firmware Upgrade
To upgrade the firmware on the EtherWAN Managed Switch, a TFTP server is required. The firmware file for the V1.94.3 EtherWAN Managed Switch is in a .TGZ or .IMG format. This is
41
EtherWAN Managed Switch Users Guide
a compressed file; however, it should not be decompressed before updating the V1.94.3 EtherWAN Managed Switch.
To update the firmware on the EtherWAN Managed Switch (see Figure 8):
1. Copy the firmware file to the correct directory for your TFTP server. The correct directory depends on your TFTP server settings
2. Enter the filename of the firmware in the Filename text box.
3. Enter the IP Address of your TFTP server in the TFTP Server IP text box.
4. Click on the Upgrade button.
5. During the firmware upgrade you will see the following messages. Do not reboot or unplug the switch until the final message is received.
a. Downloading now, please wait... b. tftp <filename>.img from ip <ip address> success!!
Install now. This may take several minutes, please
wait...
c. Firmware upgrade success!
Note: If a Firewall is running on the PC that is running the TFTP server it may need to be temporarily disabled.
Figure 8: Firmware Upgrade Page

Firmware Update using the CLI

For more information on CLI command usage see CLI Command Usage.
CLI Command Mode: Privileged Exec Mode CLI Command Syntax:
install image <tftpserver_ipaddress> <filename>
Usage Example:
switch_a>enable
42
EtherWAN Managed Switch Users Guide
switch_a#install image 192.168.1.100 flash.tgz switch_a#q
switch_a#
Note: Depending on the firmware being loaded, the extension may not be .tgz. The
Switch does not use the extension to validate firmware.

Reboot

To navigate to the Reboot page:
1. Click on the + next to System
2. Click on Reboot
To reboot the EtherWAN Managed Switch:
1. Click on the Reboot button.
2. Click OK on the popup message.

Reboot using the CLI

For more information on CLI command usage see CLI Command Usage.
CLI Command Mode: Privileged Exec Mode CLI Command Syntax:
reload
Usage Example:
switch_a>enable switch_a#reload
Reboot now, please wait...

Logout

To logout of the Web Configuration Console:
1. Click on the + next to System
2. Click on Logout
EtherWAN Managed Switch Users Guide
43

Logout from the CLI

CLI Command Mode: User Exec mode or Privileged Exec Mode CLI Command Syntax:
logout

User Account Page

To navigate to the User Account page:
1. Click on the + next to System
2. Click on User Account
From the User Account page, multiple users can be setup with different access privileges to the switch. There are two modes that can be used, Single-User or Multi-User.

Changing the User Mode

To set the user mode (see Figure 9):
1. Select Single-User, Multi-User, Radius-User or Tacacs in the dropdown box in the Multi-User Mode section. For more information on setting up Radius Authentication. Information on Tacacs+ can be found on page 220.
2. Click on the Update Setting button.
3. Click OK on the Popup message that appears.
Note: Changing the user mode saves the configuration and reboots the switch.
EtherWAN Managed Switch Users Guide
44
Figure 9: User Mode

Creating a New User

To create a new user (see Figure 10):
1. Choose the Create option from the dropdown list next to the User Account row heading.
2. Enter a User Name (case sensitive) for the new user in the User Name text box.
3. Enter a Password for the new user in the Password text box.
4. Re-enter the Password in the Confirm Password text box.
5. Select a Privilege Level from the dropdown list next to the Privilege Level row heading. For more information on Privilege levels see the User Privilege
Configuration.
6. Click on the Update button.
7. Save the configuration (See the Save Configuration Page)
EtherWAN Managed Switch Users Guide
45
Figure 10: Creating Users

Changing an Existing User Account

To make modifications to an existing user account:
1. Choose an existing user from the dropdown list next to the User Account row heading (see Figure 11).
2. Change the password and/or access level following the steps in Creating a New
User.
3. To delete an existing user, select the user as in step 1 and then click on the Delete button (see Figure 12).
EtherWAN Managed Switch Users Guide
46
Figure 11: Selecting an Existing User Account
Figure 12: Deleting a User Account

User Privilege Configuration

To navigate to the User Privilege page:
1. Click on the + next to System.
2. Click on User Privilege.
There are 3 different Privilege levels on the EtherWAN Managed Switch.
Admin – Has access to all configuration and administration of the switch.  Technician – Configurable by Admin – By default no configuration ability is given.  Operator – Configurable by Admin – By default no configuration ability is given.
EtherWAN Managed Switch Users Guide
47
The User Privilege Configuration page allows specific configuration and/or administration levels to be assigned or removed from the Technician and Operator user roles.
Note: For each function, an operator’s privilege cannot be higher than a technician's
To configure the privileges for each user access level, follow the below steps:
1. For each of the configuration options listed under Web function \ User Privilege (see Figure 13), select the proper privilege from the drop-down list under the appropriate user access level (Technician or Operator). The valid options are:
a. Show, Hidden, Read-Only, Read-Write
2. Click on the Update button at the bottom of the page.
3. Save the configuration (see Save Configuration)
Figure 13: User Privilege Page
48
EtherWAN Managed Switch Users Guide

User Account Settings using the CLI

For more information on CLI command usage see CLI Command Usage.

Multi-User Mode

To enable the multi-user feature, use the following CLI commands:
CLI Command Mode: Line Configuration Mode CLI Command Syntax: login local
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#line console 0 switch_a(config-line)#login local
% Switching Single/Multi/Radius-User mode need to reboot the
switch to take effect! switch_a(config-line)#q switch_a(config)#q switch_a#

Single User Mode

To enable the single-user feature, use the following CLI commands:
CLI Command Mode: Line Configuration Mode CLI Command Syntax: login
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#line console 0 switch_a(config-line)#login
% Switching Single/Multi/Radius-User mode need to reboot the
switch to take effect! switch_a(config-line)#q switch_a(config)#q
switch_a#
EtherWAN Managed Switch Users Guide
49

Radius User Mode

To enable the radius-user feature, use the following CLI commands:
CLI Command Mode: Line Configuration Mode CLI Command Syntax: login radius
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#line console 0 switch_a(config-line)#login radius
% Switching Single/Multi/Radius-User mode need to reboot the
switch to take effect! switch_a(config-line)#q switch_a(config)#q
switch_a#

Tacacs User Mode

To enable the Tacacs-user feature, use the following CLI commands:
CLI Command Mode: Line Configuration Mode CLI Command Syntax: login tacplus
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#line console 0 switch_a(config-line)#login tacplus % Switching Single/Multi/Radius/Tacacs-User mode need to reboot the switch to take effect! switch_a(config-line)#q switch_a(config)#q
switch_a#
EtherWAN Managed Switch Users Guide
50

Creating a New User

To create a new user, use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
username <user name-4 to 16 characters> privilege
<admin|operator|technician> password < 8|blank> <password-1 to 35 characters>
Note: The optional <8> CLI command after the CLI command password is used to specify that the password should be displayed in encrypted form in the configuration file.
Usage Example:
switch_a>enable
switch_a#configure terminal
switch_a(config)#username user1 privilege operator password 1234
switch_a(config)#username user1 privilege operator password 8 1234
switch_a(config)#username user2 privilege technician password 4321
switch_a(config)#username user2 privilege technician password 8 4321
switch_a(config)#username user3 privilege admin password 5678
switch_a(config)#username user3 privilege admin password 8 5678
switch_a(config)#q
switch_a#

Permissions

Permissions must be set using the Web GUI. See User Privilege Configuration.
EtherWAN Managed Switch Users Guide
51

DIAGNOSTICS

Utilization

To navigate to the Utilization page:
1. Click on the + next to Diagnostics.
2. Click on Utilization.
The Utilization page shows (see Figure 14):
CPU Utilization – Current and Max Utilization  Memory Utilization – Total, Used and Free Memory
Figure 14: Utilization Page

System Log

To navigate to the System Log page:
1. Click on the + next to Diagnostics.
2. Click on System Log.
The System Log shows the date and time of port links going up or down (see Figure 15)
EtherWAN Managed Switch Users Guide
52
Figure 15: System Log

System log using CLI command

For more information on CLI command usage see CLI Command Usage.
CLI Command Mode: Exec Mode or Privileged Exec Mode CLI Command Syntax:
show system-log
Usage Example:
switch_a#show system-log switch_a#q
switch_a#

Remote Logging

To navigate to the Remote Logging page:
1. Click on the + next to Diagnostics.
2. Click on Remote Logging.
Remote Logging to a Syslog server allows administrators to log important system and debugging information. The Remote Logging configuration page allows reporting to a Syslog server to be enabled or disabled as well as management of a list of Syslog servers to report to (see Figure 16).
To configure the Remote Logging on the EtherWAN Managed Switch:
EtherWAN Managed Switch Users Guide
53
1. Click on the Enable or Disable radio button under Remote Logging.
2. Click on the Update Setting button.
To add a Syslog server:
1. Enter the IP Address of the Syslog Server in the Syslog Server IP text box.
2. Click on the Add Syslog Server button.
To delete a Syslog server from the list of servers currently on the switch:
1. Select the Syslog server from the Drop down box
2. Click on the Delete Syslog Server button
Figure 16: Remote Logging Page
54
EtherWAN Managed Switch Users Guide

Remote Logging using CLI commands

For more information on CLI command usage see CLI Command Usage.
Enable/Disable Remote Logging
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
remote-log enable no remote-log enable
Usage Example 1: Enable Remote Logging
switch_a>enable switch_a#remote-log enable switch_a#q
switch_a#
Usage Example 2: Disable Remote Logging
switch_a>enable switch_a#no remote-log enable switch_a#q
switch_a#
Add/Delete a Remote Logging Host
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
remote-log add <ip_address> remote-log del <ip_address> remote-log del all
Usage Example 1: Add a Remote Logging Host
switch_a>enable switch_a#remote-log add 192.168.1.100 switch_a#q
switch_a#
Usage Example 2: Delete a Remote Logging Host
switch_a>enable switch_a#remote-log del 192.168.1.100 switch_a#q
switch_a#
EtherWAN Managed Switch Users Guide
55

ARP Table

To navigate to the ARP Table page:
1. Click on the + next to Diagnostics.
2. Click on ARP Table.
The ARP Table page shows ARP (Address Resolution Protocol) entries that are stored in the Switches ARP Table. This is useful for System Administrators for troubleshooting purposes. The information shown is:
IP Address of the listed device  Hardware Type – For Ethernet devices this will always be 1.  Flags
o 2 = Device responded to ARP Request o 0 = No response to ARP Request
Hardware Address – MAC Address of the listed device  VLAN – The VLAN that the listed device is on
Figure 17: ARP Table
56
EtherWAN Managed Switch Users Guide

ARP Table using CLI Commands

For more information on CLI command usage see CLI Command Usage.
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
show arp-table
Usage Example:
switch_a>enable
switch_a#show arp-table
IP address HW type Flags HW address Mask VLAN
10.58.7.130 1 2 00:50:B6:65:2A:22 * 1
switch_a#q
switch_a#

Route Table

To navigate to the Route Table page:
1. Click on the + next to Diagnostics.
2. Click on Route Table.
The Route Table lists the routes to network destinations and metrics (distances) that are associated with those routes. The Route Table contains information about the topology of the network around it.
Figure 18: Route Table
EtherWAN Managed Switch Users Guide
57

Route Table Using CLI Commands

For more information on CLI command usage see CLI Command Usage.
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
show route-table
Usage Example:
switch_a>enable switch_a#show route-table Destination Gateway Genmask Flags Metric Ref Use VLAN
10.58.7.0 0.0.0.0 255.255.255.0 U 0 0 0 1 switch_a#q switch_a#

Alarm Setting

This setting applies only to Switch models that have a hardware relay. To navigate to the Alarm Setting page:
1. Click on the + next to Diagnostics.
2. Click on Alarm Setting.
The Alarm Setting page allows users to define Ethernet port Link-down and Power failure alarms for triggering an alarm using the relay on the switch. To configure an Ethernet port or Power input:
1. Select an Ethernet port or Power input from the dropdown box (see Figure 19).
Figure 19: Alarm Trigger
EtherWAN Managed Switch Users Guide
58
3. Select YES or NO from the dropdown box next to Trigger Enabled (see Figure 20).
4. Click Update Setting to save any changes made.
Figure 20: Trigger Enable
To configure the normal state for the alarm relay, check the corresponding radio button for either closed or open, and click Update Setting.
Figure 21: Relay Control

Alarm Setting Using CLI Commands

For more information on CLI command usage see CLI Command Usage.
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
alarm-trigger if <interface> | power <1 - 3> no alarm-trigger if <interface> | power <1 - 3>
Usage Example: Enable alarm on interface fe1
switch_a>enable switch_a#conf t switch_a(config)alarm-trigger if fe1 switch_a(config)#q switch_a#
EtherWAN Managed Switch Users Guide
59
Enable alarm on input power 2
switch_a>enable switch_a#conf t switch_a(config)alarm-trigger power 2 switch_a(config)#q switch_a#

Set Normal State for Alarm Relay

This command is only available in models with Power over Ethernet (PoE) functionality. For more information on CLI command usage see CLI Command Usage.
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
closed-on-alarm open-on-alarm
Usage Example: Set the alarm relay normal state to closed
switch_a>enable switch_a#conf t switch_a(config)relay closed-on-alarm switch_a(config)#q switch_a#
NOTE: The hardware relay on the PoE switch is normally open. This means that if all power
is lost on the switch the relay will revert to the open position, and not signal an alarm,
regardless of the relay closed-on-alarm setting. The relay closed-on-alarm command is only
used to set the switch to close the relay in an alarm condition other than all power lost. If
using a closed relay position to indicate an alarm, the alarm will not function if all power is
lost to the switch.

PORT

Configuration

To navigate to the Configuration page:
1. Click on the + next to Port.
2. Click on Configuration.
60
EtherWAN Managed Switch Users Guide
Port configuration contains such useful features as flow control, port speed, and duplex settings. Some users will find these settings very valuable such as when the switch is connect to a latency-critical device such as a VOIP phone or IP camera or video multiplexor. In these cases and others the ability to alter the port settings can make the difference between a poorly responding device and one that functions without loss of data or clarity.
.The Configuration page shows (see Figure 22):
Port Number – fe(n) for 100mb ports and ge(n) for Gigabit ports  Link StatusOperational State of the Port’s Link (Read-Only) Port Description – User-supplied Port Description  Admin Setting – Administratively Enable or Disable the Port.  Speed – Speed and Duplex Settings for Port.  Flow Control – State of Flow Control for the Port.
To provide a description to a port on the EtherWAN Managed Switch:
1. Click in the Description text box for the appropriate port.
2. Type in the description of the port.
3. Click on the Submit button.
To enable or disable a port on the EtherWAN Managed Switch:
1. Click on the drop-down box under Admin Setting and select either Link Up or Link Down.
2. Click on the Submit button.
To set the Port Speed and/or Port Duplex Settings on the EtherWAN Managed Switch:
1. Click on the drop-down box under Speed and select the desired port speed / duplex settings for that port. Please note, not all port types will have the same options. For example, 100Mb fiber ports will typically be limited to a single option of 100M/FD (100Mbps and Full Duplex) while running 1Gb UTP ports will have six options for speed/duplex.
2. Click on the Submit button.
To enable or disable a port’s Flow Control settings on the EtherWAN Managed Switch:
1. Click on the drop-down box under Flow Control and select either Enable or Disable.
EtherWAN Managed Switch Users Guide
61
2. Click on the Submit button.
Figure 22: Port Configuration

Port Status

To navigate to the Port Status page:
1. Click on the + next to Port.
2. Click on Port Status.
This page is a read-only page that lists the settings described in the previous section. It is useful if all the user intends to do is read the values of the port settings, not modify the port settings. .The Port Status page shows (see Figure 23):
Port Number – fe(n) for 100mb ports and ge(n) for Gigabit ports  Link StatusOperational State of the Port’s Link Medium type – Indicates whether the cable is copper or fiber  Port Description – User-supplied Port Description  Admin Setting – Administratively State of the Port  Speed – Speed and Duplex Settings for Port  Flow Control – State of Flow Control for the Port
EtherWAN Managed Switch Users Guide
62
Figure 23: Port Status

Rate Control

To navigate to the Rate Control page:
1. Click on the + next to Port.
2. Click on Rate Control.
The Rate Control page allows the user to set the maximum throughput on a port or ports on both packets entering the port (from the connected device) or packets leaving the port.
The Ingress text box controls the rate of data traveling into the port while the Egress text box controls the rate of data leaving the port.
Note: Entries will be rounded down to the nearest acceptable rate value. If the value
entered is below the lowest acceptable value then the lowest acceptable value will be
used. The Rate Control page is shown below (see Figure 24): To provide either an ingress or egress rate control for a port on the EtherWAN Managed
Switch:
1. Click in the Ingress or Egress Text Box for the appropriate port.
2. Type in the ingress/egress rate for the port according to the values listed above.
3. Click on the Update Setting button.
EtherWAN Managed Switch Users Guide
63
Figure 24: Rate Control

RMON Statistics

To navigate to the RMON Statistics page:
1. Click on the + next to Port.
2. Click on RMON Statistics.
RMON Statistics gives a detailed listing of the types and quantity of packets that a particular port has seen since the last reboot of the switch (see Figure 25).
To view the RMON statistics for a particular port on the EtherWAN Managed Switch:
1. Click on the link to the port at the top of the RMON Statistics page.
To clear the RMON statistics for a particular port on the EtherWAN Managed Switch:
1. Click on the link to the port at the top of the RMON Statistics page.
2. Click on the Clear button at the bottom of the page.
3. The statistics for the port will update every ten seconds.
Pay particular attention to the values for CRC/Alignment errors and collisions. Nonzero
values for these fields can indicate that a port speed or duplex mismatch exists on the port.
64
EtherWAN Managed Switch Users Guide
Figure 25: RMON Page

Per Port VLAN Activities

To navigate to the Per Port VLAN Activities page:
1. Click on the + next to Port.
2. Click on Per Port VLAN Activities.
This is a read-only page that will allow the user to see what devices are connected to a particular port and the vlan associated with that device and port.
To clear the MAC addresses for a particular port on the EtherWAN Managed Switch (see
Figure 26):
1. Click on the link to the port at the top of the Per Port VLAN Activities page.
2. Click on the Clear MAC button at the bottom of the page.
3. The statistics for the port will update every ten seconds.
65
EtherWAN Managed Switch Users Guide
Figure 26: Port VLAN Activities

Port Security

This feature is not available on all models. To navigate to the Port Security page:
1. Click on the + next to Port.
2. Click on Port Security.
The Port Security submenu allows the user to control access to the ports on the switch based on the source MAC addresses of the network devices.
To Add a MAC Address to a port:
1. Select the Enable or Disable from the Mode column for the port you want to configure.
2. Enter the MAC Address of the device you want to connect to the port
3. Click Update Setting.
To remove a MAC Address from a port
1. Select the MAC Address from the Dropdown list next to the port that you want to configure (see Figure 27)
2. Click on Update Setting.
EtherWAN Managed Switch Users Guide
66
Figure 27: Port Security

Port Configuration Examples Using CLI Commands

For more information on CLI command usage see CLI Command Usage.

Setting the Port Description

To provide a description of a port use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: description <description text>
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#int fe1 switch_a(config-if)#description A_Port_Description switch_a(config-if)#q
switch_a(config)#
67
EtherWAN Managed Switch Users Guide

Enable or Disable a Port

To administratively enable or disable a port use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax:
shutdown no shutdown
Usage Example 1: Disabling a port:
switch_a>enable switch_a#configure terminal switch_a(config)#int fe1 switch_a(config-if)#shutdown switch_a(config-if)#q
switch_a(config)#
Usage Example 2: Enabling a port:
switch_a>enable switch_a#configure terminal switch_a(config)#int fe1 switch_a(config-if)#no shutdown switch_a(config-if)#q
switch_a(config)#

Setting the Port Speed

To set the port speed for a port use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: bandwidth <1-10000000000 bits> (usable units : k, m, g)
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#int fe1 switch_a(config-if)#bandwidth 100m switch_a(config-if)#q switch_a(config)#q
switch_a#
68
EtherWAN Managed Switch Users Guide

Setting Port Duplex

To set the duplex for a port use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: duplex <full | half | auto>
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#int fe1 switch_a(config-if)#duplex full switch_a(config-if)#q
switch_a(config)#

Enable or Disable Port Flow Control

To enable or disable flow control for a port use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: flowcontrol on
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#int fe1 switch_a(config-if)#flowcontrol on switch_a(config-if)#q
switch_a(config)#

Display Port Status

To display the port status for a port use the CLI commands below:
CLI Command Mode: Privileged Exec Mode CLI Command Syntax: show interface <ifname>
Usage Example:
switch_a>enable switch_a#show interface fe1
69
EtherWAN Managed Switch Users Guide

Setting a Ports Rate Control

To set a ports rate control use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: rate-control <ingress | egress> value <value in kbps>
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#int fe1 switch_a(config-if)#rate-control ingress value 100000 switch_a(config-if)#q
switch_a(config)#

Display a Ports RMON Statistics

To display a ports RMON statistics use the CLI commands below:
CLI Command Mode: Privileged Exec Mode CLI Command Syntax: show interface statistics <interface name>
Usage Example:
switch_a>enable switch_a#show interface statistics fe1

Display a Ports VLAN Activities

To display a port’s VLAN activities use the CLI commands below:
CLI Command Mode: Privileged Exec Mode CLI Command Syntax: show bridge interface <interface name>
Usage Example:
switch_a>enable switch_a#show bridge interface fe1
70
EtherWAN Managed Switch Users Guide

Setting MAC Port Security

To enable MAC port security use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: port-security enable
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#int fe1 switch_a(config-if)# port-security enable switch_a(config-if)#q
switch_a(config)#
To disable MAC port security use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: no port-security enable
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#int fe1 switch_a(config-if)#no port-security enable switch_a(config-if)#q
switch_a(config)#
To set the allowed MAC addresses use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: port-security allowed-address <value>
(in hex format. Ex. 00aa.0062.c609)
Usage Example:
switch_a>enable
switch_a#configure terminal
switch_a(config)#int fe1
switch_a(config-if)# port-security allowed-address 00aa.0062.c609
switch_a(config-if)#q switch_a(config)#
To delete an allowed MAC address use the CLI commands below:
EtherWAN Managed Switch Users Guide
71
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: no port-security allowed-address <value>
(in hex format. Ex. 00aa.0062.c609)
Usage Example:
switch_a>enable
switch_a#configure terminal
switch_a(config)#int fe1
switch_a(config-if)# no port-security allowed-address 00aa.0062.c609
switch_a(config-if)#q switch_a(config)#

SWITCHING

Bridging

To learn MAC addresses, a switch reads all packets that it detects on the LAN or on the local VLAN, looking for MAC addresses of sending nodes. It places these addresses into its Ethernet Switching table, along with the interface on which the traffic was received and the time when the address was learned. When the switch receives traffic on an interface, it searches the Ethernet switching table for the MAC address of the destination. If the MAC address is not found, the traffic is flooded out all of the other interfaces associated with the VLAN. If traffic is received on an interface that is associated with VLAN 1 and there is no entry in the Ethernet switching table for VLAN 1, then the traffic is flooded to all access and trunk interfaces that are members of VLAN 1.
Flooding allows the switch to learn about destinations that are not yet in its Ethernet switching table. If a certain destination MAC address is not in the Ethernet switching table, the switch floods the traffic to all interfaces except the interface on which it was received. When the destination node receives the flooded traffic, it sends an acknowledgment packet back to the switch, allowing the switch to learn the MAC address of the node and to add the address to its Ethernet switching table.
The switch uses a process called aging to keep the Ethernet switching table current. For each MAC address in the Ethernet switching table, the switch records a timestamp of when the information about the network node was learned. Each time the switch detects traffic from a MAC address that is in its Ethernet switching table, it updates the timestamp of that MAC address. A timer on the switch periodically checks the timestamp, and if it is older than the value set for mac-table-aging-time, the switch removes the node's MAC address from the Ethernet switching table. This aging process ensures that the switch tracks only active MAC addresses on the network and that it is able to flush out from the Ethernet switching table MAC addresses that are no longer available.
EtherWAN Managed Switch Users Guide
72
The user can configure:
How long MAC addresses remain in the Ethernet switching table Add a MAC address permanently to the switching table Prevent a MAC address from ever being registered in the switching table.
To navigate to the Bridging page:
1. Click on the + next to Switching.
2. Click on Bridging.

Aging Time

The Aging Time value is a global value and represents the time that a networked device’s
MAC address will live in the switch’s memory before being removed. The default value is
300s (5 minutes) (see Figure 28). To update the Aging Time value on the EtherWAN Managed Switch:
1. Click in the Error Disable Recovery text box at the top of the Port Security Dynamic­MAC page.
2. Type in the desired value. Values can be from 0 to 65535 seconds. A value of 0 indicates that the port is not to return to normal operating condition until an administrator resets the port or the switch is restarted.
3. Click on the Update Setting button.

Threshold Level

The Threshold Level setting is a per port value. A traffic storm occurs when packets flood the LAN, creating excessive traffic and degrading network performance. The traffic storm
control feature prevents LAN ports from being disrupted by a broadcast or multicast traffic storm on physical interfaces. A Threshold is set to determine when the switch will react to
Broadcasts and/or Multicasts. To set the Threshold level per port:
1. Type in the desired value. Values can be from 0.1 to 100. This value is a percentage of allowable broadcast traffic for this port. Once this percentage of traffic is exceeded, all broadcast traffic beyond this percentage is dropped.
2. Click on the Update Setting button.
EtherWAN Managed Switch Users Guide
73

Storm Control Type

The Storm Control Enabled Type setting is a per port value. The Storm Control Enabled Type allows users to determine the type of storm control to be used by the switch.
To set the Storm Control Enabled Type:
1. Select the check box next to Broadcast and/or DFL-Multicast for the port that needs to be changed
2. Click on the Update Setting button.

Port Isolation

The Port Isolation setting is a per port value. Port Isolation can be used to isolate a port or ports so that only the isolated ports can communicate with one another (see Figure 28).
To update the Port Isolation value for a port on the EtherWAN Managed Switch:
1. Click on the Port Isolation drop-down box for the port to be isolated.
2. Select the value enable on the Port Isolation drop-down box.
3. Click on the Update Setting button.
4. Repeat as necessary for all ports that are to be isolated.

Block Multicast

The Block Multicast setting is a per port value. Block Multicast is a straight-forward description of a feature that is used to block multicast traffic from accessing a port (see
Figure 28).
To update the Block Multicast value for a port on the EtherWAN Managed Switch:
1. Click on the Block Multicast drop-down box for the port to be isolated.
2. Select the value enable on the Block Multicast drop-down box.
3. Click on the Update Setting button.
4. Repeat as necessary for all ports that are to have multicast traffic blocked.
EtherWAN Managed Switch Users Guide
74
Figure 28: Bridging

Loopback Detect

Loopback detection is quite simply the ability of the switch to detect when a port on the
switch has been connected directly (or “looped back”) to another port on the switch. This
configuration would likely lead to a broadcast storm on the switch which would cause network performance to suffer. Loopback detection offers the ability of the switch to detect this condition and shutdown the loop-backed port before any disruption of network traffic occurs.
To navigate to the Loopback Detect page:
1. Click on the + next to Switching.
2. Click on Loopback Detect.
75
EtherWAN Managed Switch Users Guide

Loopback Detection (Global)

To globally enable the Loopback Detect feature of the EtherWAN Managed Switch (see
Figure 29):
1. Click on the Loopback Detect drop-down box.
2. Select Enable from the drop down list.
3. Click on the Update Setting button.

Loopback Detect Action

To change the action that the switch takes when a loopback condition is detected (see
Figure 29):
1. Choose an action from the Loopback Detect Action dropdown list. The available options are None and Error Disable.
2. Click on the Update Setting button.

Loopback Detect Recovery Time

To change the length of time that the Loopback Detect Action will stay in effect (see Figure
29):
1. Enter a value in the text box next to Error Disable Recovery. Valid values range from 0 to 65535 seconds.
2. Click on the Update Setting button.

Polling Interval

To change the polling interval of the Loopback Detect function (see Figure 29):
1. Enter a value in the text box next to Interval. Valid values range from 1 to 65535 seconds.
2. Click on the Update Setting button.
EtherWAN Managed Switch Users Guide
76
Figure 29: Loopback Detection

Loopback Detection (Per Port)

To enable Loopback Detection for a particular port or ports on the EtherWAN Managed Switch (see Figure 30):
1. Select the value Enable from the Mode drop down list for a port on the Loopback Detect page.
2. Click on the Update Setting button.
Figure 30: Loopback Detection (port)
EtherWAN Managed Switch Users Guide
77

Storm Detect

The Storm Detect feature allows the switch to be configured to disable a port that is receiving a large number of Broadcast and/or Multicast packets. The switch can monitor for packets and take action based on percentage of bandwidth utilization or number of packets per second.
To navigate to the Storm Detect page:
1. Click on the + next to Switching.
2. Click on Storm Detect.

Enable/Disable Storm Detection

1. Enable or Disable Storm Detection by Clicking on the drop down box in the Storm­Detect Configuration box (see Figure 31).
2. Set the Storm Detect interval to a number between 2 and 65535 seconds. The Default value is 10 seconds.
3. Set the Storm-Detect errdisable-recovery time to value between 0 and 65535 seconds. The Default is 0 (disabled). This value determines if the switch should re­enable the port after the specified value or leave the port disabled.
Figure 31: Storm Detect – Global
4. Set the By Utilization(%) for each port in the Storm-Detect Per Port Configuration box (see Figure 32). The default is 0 (not limited). Setting this to a value between 1 and 100 will cause the port to be disabled when the defined percentage of bandwidth is reached.
5. Set the type of packet to be monitored in the Dropdown box under By Broadcast / Multicast+Broadcast Packets Per Second. Set the value to BC to monitor Broadcast packets and BC-MC to monitor both Broadcast and Multicast packets.
6. Set the number of packets per second to a value between 0 and 1000000 packets. The default is 0 (not limited).
EtherWAN Managed Switch Users Guide
78
Figure 32: Storm Detect – Per Port

Static MAC Entry

Occasionally, it may be useful to specify a MAC address on a particular port and VLAN rather than adjusting the ageing time for the entire switch. Alternatively, it is also possible and even desirable to prevent a MAC address from ever being registered with a switch. These features are offered under the Static MAC Entry menu.
To navigate to the Static MAC Entry menu:
1. Click on the + next to Switching.
2. Click on Static MAC Entry.
EtherWAN Managed Switch Users Guide
79

Adding a Static MAC Address to a Port

To add a static MAC entry for a particular port (see Figure 33):
1. Enter the MAC address for end the corresponding port’s text box. The format of the MAC address should be in the form aaaa:bbbb:cccc).
2. Select the VLAN that this MAC address is associated with from the VLAN ID drop down list for the port.
3. Click on the Submit button.
Figure 33: MAC Static Entry

Removing a Static MAC Address from a Port

To remove a static MAC entry for a particular port (see Figure 34):
1. For a particular port, select the MAC address to be deleted from the Delete MAC Address drop down box.
2. Click on the Submit button.
Figure 34: Removing a Static MAC Address
EtherWAN Managed Switch Users Guide
80

Adding a MAC to the Static-MAC-Entry Discard Table

To add a MAC address to the Static-MAC-Entry Discard table (see Figure 35):
1. Enter a MAC address in the form “0000.1234.abdc” in the Add MAC Address text box of the Static-MAC-Entry-Discard section.
2. Select the VLAN associated with the MAC address.
3. It should be noted that while static MAC address for forwarding are associated with the switch on a per-port basis. Static MAC discards are associated with the switch for all ports.
4. Click on the Submit button.
Figure 35: Adding a MAC – Static-MAC-Entry Table

Removing a MAC address from the Static-MAC-Entry Discard Table

To remove a MAC address from the Static-MAC-Entry Discard table (see Figure 36):
1. From the drop down box underneath Delete MAC Address, select the MAC address to be deleted.
2. Click on the Submit button.
Figure 36: Deleting a MAC – Static-MAC-Entry Table
81
EtherWAN Managed Switch Users Guide

Port Mirroring

Port mirroring allows network traffic from one port to be copied or mirrored to another port. This is a very useful troubleshooting feature in that all data from one port is sent to another port which is attached to a computer or other network device that is configured to capture packets. This enables a network administrator or technician to see the traffic that is entering or leaving a particular port without disrupting normal network operations on the port that is being mirrored.
To navigate to the Port Mirroring menu:
1. Click on the + next to Switching.
2. Click on Port Mirroring.
To configure port mirroring for a port or ports on the EtherWAN Managed Switch (see Figure
37):
1. Select the port or ports that traffic is to be mirrored from under the Mirror From column.
2. Select the destination port under the Mirror To drop down box.
3. Select the type of traffic that should be mirrored from the Mirror Mode drop down box. The available options are:
a. TX – transmit only b. RX – Receive Only c. TX/RX – Transmit and Receive.
4. Click on the Submit button.
EtherWAN Managed Switch Users Guide
82
Figure 37: Port Mirroring
To disable port mirroring for a port or ports on the EtherWAN Managed Switch (see Figure
38):
1. Under the Current Settings section, the current port mirroring configuration should be displayed.
2. Click on the Delete button.
.
Figure 38: Disabling Port Mirroring
EtherWAN Managed Switch Users Guide
83

Link State Tracking

Link-state tracking binds the link state of multiple interfaces. Link-state tracking provides redundancy in the network when used with server network interface card (NIC) adapter teaming or bonding. When the server network adapters are configured in a primary or secondary relationship known as teaming and the link is lost on the primary interface, connectivity transparently changes to the secondary interface.
To navigate to the Link State Tracking menu:
1. Click on the + next to Switching.
2. Click on Link State Tracking.

Enable/Disable Link State Tracking

To enable Link State Tracking for a particular group on the EtherWAN Managed Switch (see
Figure 39):
1. Under Group Setting, click the check box of the Link State groups that are to be enabled (or disabled).
2. Click on Update Setting.
Figure 39: Link State Tracking

Port Settings

To configure individual ports for a Link State group on the EtherWAN Managed Switch (see
Figure 40):
1. Under Port Setting, select the Link State Group that the port will belong to from the Group drop down box
EtherWAN Managed Switch Users Guide
84
2. Select if the port is upstream or downstream from the Up/Down Stream)drop down box.
3. Click on Update Setting.
Figure 40: Link State Tracking – Port Settings

PoE (Power over Ethernet) - System and Port Settings

This section only applies to Managed EtherWAN Switches with support for PoE. To navigate to the PoE page:
1. Click on the + next to Switching.
2. Click on PoE.

PoE System Setting

The PoE Page provides access to PoE System Setting information and configuration. The information provided is (See Figure 41):
1. Main Supply Voltage
2. System Temperature
3. Power Allocation – Actual wattage supplied to attached PoE device(s)
4. System Power Budget – Configurable. The default value depends on the model of
switch.
85
EtherWAN Managed Switch Users Guide

PoE Port Setting

Figure 41: PoE System Setting
The PoE Port Setting section provides the following configurable settings and information:
1. Enable Mode – Set the PoE Enable Mode by selecting one of the following settings in the drop-down box under PoE Mode (see Figure 42)
o Enable – Enable PoE on a specific port o Disable – Disable PoE on a specific port o Scheduling – Schedule time of day that PoE will be enabled per port
2. Power Limit by Classification – This setting tells the switch to negotiate with the attached PoE device to determine the Watts that will be provided by the switch. To change this setting, check (enable) or uncheck (disable) the check box located in the Power Limit by Classification column. The default is checked (Enabled). This is a per port setting (see Figure 42).
3. Fixed Power Limit – Provides a fixed Wattage to the attached PoE (PD) device. This setting is only enabled after the Power Limit by Classification is disabled on a port and the Submit button is clicked.
4. Power Priority – Use the Drop-Down box in the Power Priority column to set the priority to High, Medium or Low.
5. Power Down Alarm – This setting only applies to EtherWAN Switches that have a relay. If this box is checked, losing PoE power on a port triggers the relay on the switch.
6. Status – Informational only. Provides the status of the PoE port
EtherWAN Managed Switch Users Guide
86
7. PD Class - Informational only. Provides the PoE Classification of the PoE (PD) device attached to the PoE port
8. Current (mA) – Informational only. Shows the current draw from the attached PoE (PD) device.
9. Consumption (W) - Informational only. Shows the power consumption of the attached PoE (PD) device.
NOTE: For EX78000-T series switches, all eight ports (Ports 1 - 8) can now
support up to 30W PoE power. However, the total PoE power budget is still 181W.
Figure 42: PoE Port Setting
87
EtherWAN Managed Switch Users Guide

PoE Scheduling

PoE Scheduling allows PoE ports to have their power up time scheduled by hour of the day and day of the week. In order for a port to follow a schedule defined here, the port must be set to Scheduling on the PoE settings page (see PoE Port Setting)
To navigate to the PoE Scheduling page:
1. Click on the + next to Switching.
2. Click on PoE Scheduling.
Each PoE port on the switch can be schedule to power up and down automatically. To configure a port:
1. Select the port from the drop-down list (See Figure 43)
Figure 43: Selecting a Port
2. Select the hour(s) of day for each day of the week (see Figure 44).
3. Click on the Submit button.
EtherWAN Managed Switch Users Guide
88
Figure 44: PoE Power Scheduling
EtherWAN Managed Switch Users Guide
89

Switch Configuration Examples Using CLI Commands

For more information on CLI command usage see CLI Command Usage.

Setting the Aging Time Value

To update the Aging Time value on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 ageing-time (time in ms)
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#bridge 1 ageing time 300 switch_a(config)#q
switch_a#

Enabling Port Isolation

To enable Port Isolation for a port on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: port-isolation enable port-isolation disable
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#interface fe1 switch_a(config-if)#port-isolation enable switch_a(config-if)#q
switch_a(config)#
90
EtherWAN Managed Switch Users Guide

Enabling Block Multicast

To enable Block Multicast for a port on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: switchport block multicast
Usage Example:
switch_a>enable switch_a#configure terminal switch_a#interface fe1 switch_a(config-if)#switchport block multicast switch_a(config-if)#q
switch_a(config)#

Setting Storm Control

To set the value for the Broadcast and or DLF-Multicast Storm Control value of a port on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: stormcontrol <broadcast | dlf-multicast> <level>
Usage Example:
switch_a>enable switch_a#configure terminal switch_a#configure interface fe1 switch_a(config-if)#storm-control broadcast 20 switch_a(config-if)#q
switch_a(config)#

Enabling Loopback Detect (Global)

To enable Loopback Detect on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 loopback-detect <enable | disable>
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#bridge 1 loopback-detect enable
91
EtherWAN Managed Switch Users Guide
switch_a(config)#q
switch_a#

Setting the Loopback Detect Action

To set the action for Loopback Detect on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 loopback-detect action <err-disable | none>
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#bridge 1 loopback-detect action err-disable switch_a(config)#q
switch_a#

Setting the Loopback Detect Recovery Time

To set the recovery time for Loopback Detect on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 loopback-detect errdisable-recovery <0-65535>
Usage Example:
switch_a>enable
switch_a#configure terminal
switch_a(config)#bridge 1 loopback-detect errdisable-recovery 30
switch_a(config)#q
switch_a#

Setting the Loopback Detect Polling Interval

To set the polling interval for Loopback Detect on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 loopback-detect interval <1-65535>
92
EtherWAN Managed Switch Users Guide
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#bridge 1 loopback-detect interval 5 switch_a(config)#q
switch_a#

Enabling Loopback Detect (Port)

To enable Loopback Detection on a port on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: loopback-detect enable
Usage Example:
switch_a>enable switch_a#configure terminal switch_a#interface fe1 switch_a(config)# loopback-detect enable switch_a(config)#q
switch_a#

Configuring Storm-Detect

To Enable or Disable Storm-Detect use the CLI command Below:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
bridge 1 storm-detect errdisable no bridge 1 storm-detect errdisable
Default: Disabled
Usage Example – Enabling storm detect:
switch_a>enable
switch_a#configure terminal
switch_a(config)# bridge 1 storm-detect errdisable
switch_a(config)#q
switch_a#
EtherWAN Managed Switch Users Guide
93
Usage Example – Disabling storm detect:
switch_a>enable
switch_a#configure terminal
switch_a(config)# no bridge 1 storm-detect errdisable
switch_a(config)#q
switch_a#
To set the storm-detect interval use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 storm-detect interval <2-65535>
Default: 10
Usage Example:
switch_a>enable
switch_a#configure terminal
switch_a(config)# bridge 1 storm-detect interval 10
switch_a(config)#q
switch_a#
To set the storm-detect recovery time use the following CLI commands:
CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 storm-detect errdisable-recovery <0-65535>
Default: 0 No errdisable recovery.
Usage Example:
switch_a>enable
switch_a#configure terminal
switch_a(config)# bridge 1 storm-detect errdisable-recovery 60
switch_a(config)#q
switch_a#
94
EtherWAN Managed Switch Users Guide
Storm Detect Packet Type
Enable this port’s storm detect by detect number of broadcast or broadcast plus multicast
packets per second. Unit is packets per second. Set to 0 to disable this feature. To set the storm-detect packet type use the following CLI commands:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: storm-detect (bc | mc-bc) pps <0-100000>
bc = broadcast only mc-bc = count broadcast & multicast packets together.
Default: 0 (Disabled)
Usage Example 1 – Enabling Multicast + Broadcast:
switch_a>enable
switch_a#configure terminal
switch_a(config)# interface fe1
switch_a(config-if)#storm-detect mc-bc pps 50000
switch_a(config-if)#q
switch_a(config)#q
switch_a#
Usage Example 2 – Enabling Multicast + Broadcast:
switch_a>enable
switch_a#configure terminal
switch_a(config)# interface fe1
switch_a(config-if)#storm-detect bc pps 50000
switch_a(config-if)#q
switch_a(config)#q
switch_a#
To set the storm-detect utilization use the following CLI commands:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: storm-detect utilization <0-100> Default: 0 (Disabled)
95
EtherWAN Managed Switch Users Guide
Usage Example:
switch_a>enable
switch_a#configure terminal
switch_a(config)# interface fe1
switch_a(config-if)#storm-detect utilization 80
switch_a(config-if)#q
switch_a(config)#q
switch_a#
To disable storm-detect on a port use the following CLI commands:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: no storm-detect port enable
Usage Example:
switch_a>enable
switch_a#configure terminal
switch_a(config)# interface fe1
switch_a(config-if)#no storm-detect port enable
switch_a(config-if)#q
switch_a(config)#q
switch_a#
To disable storm-detect on a port use the following CLI commands:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: no storm-detect port enable
Usage Example:
switch_a>enable
switch_a#configure terminal
switch_a(config)# interface fe1
switch_a(config-if)#no storm-detect port enable
switch_a(config-if)#q
switch_a(config)#q
switch_a#
96
EtherWAN Managed Switch Users Guide

Adding a MAC Address for Static-MAC-Entry Forwarding

To add a MAC address for Static-MAC-Entry Forwarding for a port on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Global Configuration Mode CLI Command Syntax:
bridge 1 address <mac address> forward <interface> vlan <vlan id>
Usage Example:
switch_a>enable
switch_a#configure terminal
switch_a(config)# bridge 1 address 00e0.abcd.1245 forward fe1 vlan 1
switch_a(config)#q
switch_a#

Discard a Static MAC Entry

To discard a static MAC address, use the CLI commands below::
CLI Command Mode: Global Configuration Mode CLI Command Syntax: bridge 1 address <mac address> discard vlan <vlan id>
Usage Example:
switch_a>enable
switch_a#configure terminal
switch_a(config)# bridge 1 address 00e0.abcd.1245 discard vlan 1
switch_a(config)#q
switch_a#

Configuring Port Mirroring

To configure a port for Port Mirroring on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: mirror interface <interface> direction <both | tx | rx>
Usage Example:
97
EtherWAN Managed Switch Users Guide
switch_a>enable switch_a#configure terminal switch_a#interface ge1 switch_a(config-if)# mirror interface fe1 direction both switch_a(config-if)#q switch_a(config)#q
switch_a#

Enabling a Link State Tracking Group

To enable a Link State Tracking Group on the EtherWAN Managed Switch, use the CLI commands below:
CLI Command Mode: Global Configuration Mode CLI Command Syntax: link state track <group #>
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)# link state track 4 switch_a(config)#q
switch_a#

Assigning a Port to a Link State Tracking Group

To assign a port to a Link State Tracking group on the EtherWAN Managed Switch, use the following CLI commands:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: link state group <group #> <upstream | downstream>
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)#interface fe1 switch_a(config-if)# link state group 4 downstream switch_a(config-if)#q switch_a(config)#q
switch_a#
EtherWAN Managed Switch Users Guide
98
CLI Command (click link for syntax)
Function
Enable
Enables PoE on a port
fixed-power-limit
Sets a fixed wattage for a PoE port
Power-classification
Sets a port to negotiate power-classification
Power-down-alarm
Turns on alarm by relay on PoE power down
Power-priority
Sets priority of power distribution to ports
Scheduling
Enable Scheduling
Schedule-time
Sets schedule time to power PoE ports
Schedule-time-hour
Schedule time (hour)

Setting PoE Power Budget

To set the PoE Power Budget use the following CLI commands
CLI Command Mode: Global Configuration Mode CLI Command Syntax: poe system-power-budget <value>
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)# poe system-power-budget 144.14 switch_a(config)#q
switch_a#

PoE Port Settings

The following commands are used to set PoE functions related directly to individual PoE ports:
Enable
To enable or disable PoE on a port use the following CLI commands
CLI Command Mode: Interface Configuration Mode CLI Command Syntax:
poe enable no poe enable
99
EtherWAN Managed Switch Users Guide
Usage Example 1 – Enabling PoE on a port:
switch_a>enable switch_a#configure terminal switch_a(config)# interface fe1 switch_a(config-if)# poe enable switch_a(config-if)#q switch_a(config)#q
Usage Example 2 – Disabling PoE on a port:
switch_a>enable switch_a#configure terminal switch_a(config)# interface fe1 switch_a(config-if)# no poe enable switch_a(config-if)#q switch_a(config)#q
fixed-power-limit
The fixed-power-limit CLI command sets the maximum wattage that a switch port will provide to the attached PoE device. To set a fixed power limit on a port Power Limit by Classification must be disabled on the port first (see Power-classification). To set the fixed- power-limit, use the following CLI command:
CLI Command Mode: Interface Configuration Mode CLI Command Syntax: poe fixed-power-limit <level>
Level = 0-15.4 (802.3af) / 30 (802.3at) / 60 (W)
Usage Example:
switch_a>enable switch_a#configure terminal switch_a(config)# interface fe1 switch_a(config-if)# poe fixed-power-limit 7.5 switch_a(config-if)#q switch_a(config)#q
Power-classification
This setting tells the switch to negotiate with the attached PoE device to determine the Watts that will be provided by the switch. To change this setting, check (enable) or uncheck
EtherWAN Managed Switch Users Guide
100
Loading...