Interlogix GE-DSSG-244-POE-R User Manual

IFS NS3601-24P/4S GE-DSSG-244

GE-DSSG-244-POE User Manual

P/N 1072570 • REV 00.08 • ISS 31JAN13

Copyright

Trademarks and patents

Intended use

Manufacturer

Certification

© 2013 UTC Fire & Security Americas Corporation, Inc.

Interlogix is part of UTC Climate Controls & Security, a unit of United Technologies Corporation. All rights reserved.

The IFS NS3601-24P/4S GE-DSSG-244 GE-DSSG-244-POE and logo are trademarks of United Technologies.

Other trade names used in this document may be trademarks or registered trademarks of the manufacturers or vendors of the respective products.

Use this product only for the purpose it was designed for; refer to the data sheet and user documentation for details. For the latest product information, contact your local supplier or visit us online at www.interlogix.com.

UTC Fire & Security Americas Corporation, Inc. 2955 Red Hill Avenue

Costa Mesa, CA 92626-5923, USA

EU authorized manufacturing representative: UTC Fire & Security B.V., Kelvinstraat 7, 6003 DH Weert, The Netherlands

N4131

FCC compliance							This equipment has been tested and found to comply with the limits for a
							Class A digital device, pursuant to part 15 of the FCC Rules. These limits
							are designed to provide reasonable protection against harmful
							interference when the equipment is operated in a commercial
							environment. This equipment generates, uses, and can radiate radio
							frequency energy and, if not installed and used in accordance with the
							instruction manual, may cause harmful interference to radio
							communications.
							You are cautioned that any changes or modifications not expressly
							approved by the party responsible for compliance could void the user's
							authority to operate the equipment.
ACMA compliance							Notice! This is a Class A product. In a domestic environment this
							product may cause radio interference in which case the user may be
							required to take adequate measures.
Canada							This Class A digital apparatus complies with Canadian ICES-003.
							Cet appareil numérique de la classe A est conforme á la norme
							NMB-003du Canada.
European Union directives							2004/108/EC (EMC Directive): Hereby, UTC Fire & Security Americas
							Corporation, Inc. declares that this device is in compliance with the
							essential requirements and other relevant provisions of Directive
							2004/108/EC.
							2002/96/EC (WEEE directive): Products marked with this symbol
							cannot be disposed of as unsorted municipal waste in the European
							Union. For proper recycling, return this product to your local supplier
							upon the purchase of equivalent new equipment, or dispose of it at
							designated collection points. For more information see:
							www.recyclethis.info.
Contact information							For contact information see our Web site: www.interlogix.com.
Contact support							www.interlogix.com/customer support

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

TABLE OF CONTENTS

IFS NS3601-24P/4S GE-DSSG-244 GE-DSSG-244-POE USER MANUAL	................. 1
TABLE OF CONTENTS...................................................................................................	1
INTRODUCTION ..............................................................................................................	7
Packet Contents ........................................................................................................................................	7
Product Description ..................................................................................................................................	9
How to Use This Manual .........................................................................................................................	11
Product Features.....................................................................................................................................	12
Product Specification .............................................................................................................................	14
INSTALLATION .............................................................................................................	18
Hardware Description .............................................................................................................................	18
Switch Front Panel..............................................................................................................................	18
LED Indications...................................................................................................................................	20
Switch Rear Panel ..............................................................................................................................	22
Install the Switch .....................................................................................................................................	23
Desktop Installation.............................................................................................................................	23
Rack Mounting....................................................................................................................................	25
Installing the SFP transceiver .............................................................................................................	26
Stack Installation.....................................................................................................................................	28
Connecting Stacking cable .................................................................................................................	29
Management Stacking ........................................................................................................................	30
SWITCH MANAGEMENT ..............................................................................................	32
Requirements...........................................................................................................................................	32
Management Access Overview..............................................................................................................	33
Administration Console..........................................................................................................................	33
SNMP-Based Network Management......................................................................................................	35
WEB CONFIGURATION ................................................................................................	37
Main Web Page ........................................................................................................................................	40
System......................................................................................................................................................	42
System Information.............................................................................................................................	43
IP Configuration ..................................................................................................................................	44
IPv6 Configuration ..............................................................................................................................	45
Users Configuration ............................................................................................................................	46
1

	IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual
Users Privilege Levels ........................................................................................................................	49
NTP Configuration ..............................................................................................................................	51
UPnP Configuration ............................................................................................................................	51
DHCP Relay........................................................................................................................................	53
DHCP Relay Statistics ........................................................................................................................	55
CPU Load ...........................................................................................................................................	56
System Log.........................................................................................................................................	57
Detailed Log........................................................................................................................................	58
Remote Syslog....................................................................................................................................	58
SMTP Configure .................................................................................................................................	60
Web Firmware Upgrade......................................................................................................................	61
TFTP Firmware Upgrade ....................................................................................................................	62
Configuration Backup..........................................................................................................................	62
Configuration Upload ..........................................................................................................................	64
Factory Default....................................................................................................................................	66
System Reboot ...................................................................................................................................	67
Simple Network Management Protocol.................................................................................................	67
SNMP Overview..................................................................................................................................	67
SNMP System Configuration ..............................................................................................................	68
SNMP System Information Configuration...........................................................................................	69
SNMP Trap Configuration...................................................................................................................	69
SNMPv3 Configuration .......................................................................................................................	71
Port Management ....................................................................................................................................	75
Port Configuration...............................................................................................................................	75
Port Statistics Overview......................................................................................................................	77
Port Statistics Detail............................................................................................................................	79
SFP Module Information .....................................................................................................................	80
Port Mirroring Configuration................................................................................................................	82
Link Aggregation.....................................................................................................................................	84
Static Aggregation Configuration........................................................................................................	86
LACP Configuration ............................................................................................................................	87
LACP System Status ..........................................................................................................................	89
LACP Port Status................................................................................................................................	89
LACP Port Statistics............................................................................................................................	91
VLAN.........................................................................................................................................................	92
VLAN Overview...................................................................................................................................	92
IEEE 802.1Q VLAN.............................................................................................................................	92
VLAN Basic Information......................................................................................................................	94
VLAN Port Configuration ....................................................................................................................	95
	2

	IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual
VLAN Membership Configuration .......................................................................................................	99
VLAN Membership Status for User Static.........................................................................................	100
VLAN Port Status for User Static......................................................................................................	101
Port Isolation Configuration ..............................................................................................................	102
Private VLAN Membership Configuration.........................................................................................	105
VLAN setting example: .....................................................................................................................	106
Spanning Tree Protocol........................................................................................................................	113
Theory...............................................................................................................................................	113
STP Bridge Configuration .................................................................................................................	118
Bridge Status ....................................................................................................................................	119
CIST Port Configuration....................................................................................................................	120
MSTI Priorities ..................................................................................................................................	123
MSTI Configuration...........................................................................................................................	124
MSTI Ports Configuration .................................................................................................................	125
Port Status ........................................................................................................................................	127
Port Statistics....................................................................................................................................	128
Multicast .................................................................................................................................................	129
IGMP Snooping.................................................................................................................................	129
IGMP Snooping Configuration..........................................................................................................	133
IGMP Port Related Configuration .....................................................................................................	133
VLAN Configuration ..........................................................................................................................	135
Port Group Filtering...........................................................................................................................	136
IGMP Snooping Status .....................................................................................................................	137
MVR Configuration............................................................................................................................	139
MVR Status.......................................................................................................................................	141
Quality of Service ..................................................................................................................................	142
Understand QOS ..............................................................................................................................	142
QCL Configuration Wizard................................................................................................................	142
QoS Control List Configuration.........................................................................................................	149
Port QoS Configuration.....................................................................................................................	151
Bandwidth Control.............................................................................................................................	153
Storm Control Configuration .............................................................................................................	155
QoS Statistics ...................................................................................................................................	155
DSCP Remarking..............................................................................................................................	157
Voice VLAN Configuration ................................................................................................................	158
Voice VLAN OUI Table .....................................................................................................................	161
Access Control Lists.............................................................................................................................	161
Access Control List Status................................................................................................................	162
Access Control List Configuration.....................................................................................................	163
	3

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

ACE Configuration ............................................................................................................................	164
ACL Ports Configuration ...................................................................................................................	169
ACL Rate Limiter Configuration........................................................................................................	171
Understanding IEEE 802.1X Port-Based Authentication..................................................................	173
Authentication Configuration.............................................................................................................	175
Network Access Server Configuration..............................................................................................	176
Network Access Overview ................................................................................................................	184
Network Access Statistics.................................................................................................................	185
Authentication Server Configuration.................................................................................................	190
RADIUS Overview ............................................................................................................................	192
RADIUS Details ................................................................................................................................	194
Windows Platform RADIUS Server Configuration............................................................................	198
4.11.10 802.1X Client Configuration.................................................................................................	203
Security ..................................................................................................................................................	205
Port Limit Control ..............................................................................................................................	205
Access Management ........................................................................................................................	208
Access Management Statistics.........................................................................................................	209
HTTPs...............................................................................................................................................	210
SSH 210
Port Security Status ..........................................................................................................................	211
Port Security Detail ...........................................................................................................................	213
DHCP Snooping................................................................................................................................	213
DHCP Snooping Statistics ................................................................................................................	215
IP Source Guard Configuration.........................................................................................................	217
IP Source Guard Static Table ...........................................................................................................	218
ARP Inspection .................................................................................................................................	219
ARP Inspection Static Table .............................................................................................................	220
Address Table........................................................................................................................................	221
MAC Address Table Configuration ...................................................................................................	221
Static MAC Table Configuration .......................................................................................................	221
MAC Address Table Status ..............................................................................................................	223
MAC Table Learning.........................................................................................................................	224
Dynamic ARP Inspection Table........................................................................................................	225
Dynamic IP Source Guard Table......................................................................................................	226
LLDP .......................................................................................................................................................	227
Link Layer Discovery Protocol ..........................................................................................................	227
LLDP Configuration...........................................................................................................................	227
LLDPMED Configuration ..................................................................................................................	229
LLDP-MED Neighbor ........................................................................................................................	234
4

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual
Neighbor ...........................................................................................................................................	236
Port Statistics....................................................................................................................................	237
Network Diagnostics.............................................................................................................................	239
Ping 239
IPv6 Ping...........................................................................................................................................	240
Remote IP Ping Test.........................................................................................................................	241
Cable Diagnostics.............................................................................................................................	242
Power over Ethernet (GE-DSSG-244-POE / NS3601-24P/4S) ............................................................	243
Power over Ethernet Powered Device..............................................................................................	244
Power Configuration .........................................................................................................................	244
Port Configuration.............................................................................................................................	246
PoE Status ........................................................................................................................................	248
PoE Schedule ...................................................................................................................................	250
LLDP Neighbor Power Over Ethernet...............................................................................................	251
Stack .................................................................................................................................................	253
Stack Configuration...........................................................................................................................	255
Stack Information..............................................................................................................................	257
Stack Port State Overview................................................................................................................	258
Stack Example..................................................................................................................................	259
COMMAND LINE INTERFACE....................................................................................	262
Accessing the CLI .................................................................................................................................	262
Telnet Login ...........................................................................................................................................	264
COMMAND LINE MODE..............................................................................................	265
System Command .................................................................................................................................	266
Stack .......................................................................................................................................................	269
IP Command...........................................................................................................................................	271
Port Management Command................................................................................................................	276
MAC Address Table Command............................................................................................................	280
VLAN Configuration Command ...........................................................................................................	284
Private VLAN Configuration Command ..............................................................................................	289
Security Command................................................................................................................................	291
Spanning Tree Protocol Command .....................................................................................................	335
Multicast Configuration Command......................................................................................................	344
Link Aggregation Command ................................................................................................................	348
Link Aggregation Control Protocol Command...................................................................................	349
LLDP Command.....................................................................................................................................	352
LLDPMED Command ............................................................................................................................	355
Power over Ethernet Command...........................................................................................................	359
5

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual
Quality of Service Command ...............................................................................................................	362
Mirror Command....................................................................................................................................	368
Configuration Command ......................................................................................................................	369
Firmware Command..............................................................................................................................	370
UPnP Command ....................................................................................................................................	370
MVR Command......................................................................................................................................	371
Voice VLAN Command .........................................................................................................................	374
SMTP Command....................................................................................................................................	378
Show Command ....................................................................................................................................	381
SWITCH OPERATION .................................................................................................	384
Address Table........................................................................................................................................	384
Learning .................................................................................................................................................	384
Forwarding & Filtering ..........................................................................................................................	384
Store-and-Forward ................................................................................................................................	384
Auto-Negotiation ...................................................................................................................................	384
POWER OVER ETHERNET OVERVIEW ....................................................................	386
What is PoE?..........................................................................................................................................	386
The PoE Provision Process..................................................................................................................	387
Stages of powering up a PoE link.....................................................................................................	388
Line Detection...................................................................................................................................	388
Classification.....................................................................................................................................	388
Start-up .............................................................................................................................................	388
Operation ..........................................................................................................................................	388
Power Disconnection Scenarios.......................................................................................................	388
TROUBLE SHOOTING ................................................................................................	390
APPENDEX A ..............................................................................................................	391
Switch's RJ-45 Pin Assignments.........................................................................................................	391
10/100Mbps, 10/100Base-TX.................................................................................................................	391
APPENDEX B : GLOSSARY .......................................................................................	393
APPENDIX C: LOCAL USER PRIVILEGE LEVEL TABLE.........................................	406

6

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

INTRODUCTION

The IFS Layer 2 Managed Gigabit Switch series NS3601-24P/4S, GE-DSSG-244, and GE-DSSG-244-POE are 24-port Gigabit Ethernet Switches with SFP fiber ports and robust layer 2 features. The description of these models is shown below:

			24-Port 100/1000Base-X with 8 Shared TP Managed Stackable Fiber Switch
GE-DSSG-244
			24-Port 10/100/1000Base-T PoE Managed Stackable Switch / 380W / IEEE 802.3af
NS3601-24P/4S
			24-Port 100/1000Base- T PoE Managed Stackable Switch / 220W / IEEE 802.3af
GE-DSSG-244-POE

Terms of “Managed Switch” refers to the switches listed above.

Packet Contents

Open the box of the Managed Switch and carefully unpack it. The box should contain the following items: Check the contents of your package for following parts:

 The Managed Switch	x1
 User’s manual CD	x1
 Quick installation guide	x1
 19” Rack mount accessory kit	x1
 Power cord	x1
 Rubber feet	X4
 RS-232 DB9 male Console cable	x1
 CB-STX50 – 50cm stack cable	x1

If any of these are missing or damaged, please contact your distributor or IFS sales rep immediately, if possible, retain the original carton and packaging material in case you need to return the product for repair/replacement.

7

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

Product Description

Cost-effective IPv6 Managed Gigabit Switch solution for SMB

Nowadays, lots of electronic products or mobile devices can browse the Internet, which means the need of IP Address increases. However, the current IPv4 network infrastructure is not capable enough to provide IP Address to each single users/Clients. The situation forces the ISP to build up the IPv6 (Internet Protocol version 6) network infrastructure speedily. To fulfill the demand, IFS releases the IPv6 management Gigabit Ethernet Switch, IFSseries Managed Switch. It supports both IPv4 and IPv6 management functions. It can work with original network structure (IPv4) and also support the new network structure (IPv6) in the future. With easy and friendly management interfaces and plenty of management functions included, the IFSseries Managed Switch is the best choice for ISP to build the IPv6 FTTx edge service and for SMB to connect with IPv6 network.

High-Performance / Cost-effective / Telecom class Gigabit solution for Enterprise backbone and Data Center Networking

The IFS Managed Switch is a L2/L4 Managed Gigabit Switch. Since Gigabit network interface had become the basic equipment and requirement of Enterprise and Network Servers, with 48Gbps switching fabric, the Managed Switch can handle extremely large amounts of data in a secure topology linking to a backbone or high capacity servers. The powerful QoS and Network Security features make it to meets the needs of effective data traffic control for both Campus and Enterprise, such VoIP, video streaming and multicast application.

High Performance

The Managed Switch provides 24 10/100/1000Mbps (or 100/1000Mbps for GE-DSSG-244 fiber switch) Gigabit Ethernet ports with 4 shared Gigabit SFP slots. It has a high performance switch architecture that is capable of providing non-blocking switch fabric and wire-speed throughput as high as 48Gbps, which greatly simplifies the tasks of upgrading the LAN for catering to increase bandwidth demands.

Robust Layer 2 Features

The Managed Switch can be programmed for basic switch management functions such as port speed configuration, Port aggregation, VLAN, Spanning Tree protocol, QoS, bandwidth control and IGMP Snooping. The Managed Switch provides 802.1Q Tagged VLAN, Q-in-Q VLAN trunning and private VLAN, the VLAN groups allowed on the Managed Switch will be maximally up to 255. Via supporting port aggregation, the Managed Switch allows the operation of a high-speed trunk combining multiple ports, up to eight groups of maximum to 8-ports for trunking, and it supports fail-over as well.

Excellent Traffic Control

The Managed Switch is equipped with powerful traffic management and QoS features to enhance services offered by telecoms. The functionality includes QoS features such as wire-speed Layer 4 traffic classifiers and bandwidth limiting that are particular useful for multi-tenant unit, multi business unit, Telco, or Network Service Provide applications. It also empowers the enterprises to take full advantages of the limited network resources and guarantees the best performance at VoIP and Video conferencing transmission.

9

Efficient Management

For efficient management, the series of Managed Switch is equipped with console, WEB and SNMP management interfaces. With its built-in Web-based management, it offers an easy-to-use, platform-independent management and configuration facility. The Managed Switch supports standard Simple Network Management Protocol (SNMP) and can be managed via any standard-based management software. For text-based management, it can also be accessed via Telnet and the console port.

Powerful Security

The Managed Switch offers comprehensive Access Control List (ACL) for enforcing security to the edge. Its protection mechanisms also comprise of port-based 802.1x and MAC-based user and device authentication. The port-security is effective in limit the numbers of clients pass through, so that network administrators can now construct highly secured corporate networks with time and effort considerably less than before.

Flexibility and Extension solution

The 4 mini-GBIC slots are compatible with 1000Base-SX/LX and WDM SFP (Small Factor Pluggable) fiber-optic modules. The distance can be extended from 550 meters (Multi-Mode fiber) up to above 10/20/30/40/50/70 kilometers (Single-Mode fiber or WDM fiber). They are well suited for using within the enterprise data centers and distributions.

Reliable Stacking Management

The IFS Series Managed Switch provides a switch stacking function to manage up to 16 switches using a single IP address. That helps network managers to easily configure switches via one single IP address instead of connecting and setting each unit one by one. Through its high bandwidth tunnel and stacking technology, it gives enterprise, service provider and telcom flexible control over port density, uplinks and switch stack performance. Up to 384 Gigabit Ethernet ports can be managed by a stacking group and you can add ports and functionality as needed. The stacking technology also enables the advantages of chassis-based switches to be integrated into IFS Series Managed Switch, but without the expensive up-front cost.

Advanced Features and Centralized Power Management for Enterprise and Campus PoE Networking (PoE Model)

The IFS GE-DSSG-244-POE and NS3601-24P/4S series PoE switches provides 24 10/100/1000Mbps Power-over-Ethernet (PoE, IEEE 802.3af compliant) ports which optimize the installation and power management of network devices such as wireless access points (AP), Voice over IP (VoIP) phones, and security video cameras. The PoE capabilities also help to reduce deployment costs for network devices like the wireless AP as a result of freeing from restrictions of power outlet locations. Power and data switching are integrated into one unit and delivered over a single cable. It thus eliminates cost for additional AC wiring and reduces installation time.

The below table lists the major hardware difference between the series model:

Model			GE-DSSG-244	GE-DSSG-244-POE		NS3601-24P/4S
(IFS)
	Copper		8	24
Interface
		Fiber	24, 100FX	4, 100FX compatible
			compatible
Redundant Power				-
PoE Mode			-	af		af
PoE Budget			-	220W		380W
Stack Capability			Hardware stacking, up to 16 units

10

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

How to Use This Manual

This User Manual is structured as follows: Section 2, INSTALLATION

The section explains the functions of the Switch and how to physically install the Managed Switch.

Section 3, SWITCH MANAGEMENT

The section contains the information about the software function of the Managed Switch.

Section 4, WEB CONFIGURATION

The section explains how to manage the Managed Switch by Web interface.

Section 5, COMMAND LINE INTERFACE

The section describes how to use the Command Line interface (CLI).

Section 6, CLI CONFIGURATION

The section explains how to manage the Managed Switch by Command Line interface.

Section 7, SWITCH OPERATION

The chapter explains how to does the switch operation of the Managed Switch.

Section 8, POWER OVER ETHERNET OVERVIEW

The chapter introduce the IEEE 802.3af PoE standard and PoE provision of the Managed Switch.

Section 9, TROUBSHOOTING

The chapter explains how to trouble shooting of the Managed Switch.

Appendix A

The section contains cable information of the Managed Switch.

11

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

Product Features

Physical Port

NS3601-24P/4S / GE-DSSG-244-POE

24-Port 10/100/1000Base-T Gigabit Ethernet RJ-45 with IEEE 802.3af PoE Injector

4 100/1000Base-X SFP slots, shared with Port-21 to Port-24

RS-232 DB9 console interface for Switch basic management and setup

2 High-performance 5GbE Stacking interface

GE-DSSG-244

24 100/1000Base-X mini-GBIC/SFP slots

8-Port 10/100/1000Base-T Gigabit Ethernet RJ-45, shared with Port-1 to Port-8

RS-232 DB9 console interface for Switch basic management and setup

2 High-performance 5GbE Stacking interface

Layer 2 Features

■Prevents packet loss with back pressure (Half-Duplex) and IEEE 802.3x PAUSE frame flow control (Full-Duplex)

■High performance of Store-and-Forward architecture, broadcast storm control and runt/CRC filtering eliminates erroneous packets to optimize the network bandwidth

■Storm Control support:

Broadcast / Multicast / Unknown-Unicast

■Support VLAN

IEEE 802.1Q Tagged VLAN

Up to 255 VLANs groups, out of 4094 VLAN IDs

Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)

Private VLAN Edge (PVE)

Voice VLAN

■Support Spanning Tree Protocol

STP, IEEE 802.1D Spanning Tree Protocol

RSTP, IEEE 802.1w Rapid Spanning Tree Protocol

MSTP, IEEE 802.1s Multiple Spanning Tree Protocol, spanning tree by VLAN

BPDU Guard

■Support Link Aggregation

802.3ad Link Aggregation Control Protocol (LACP)

Cisco ether-channel (Static Trunk)

Maximum 12 trunk groups, up to 16 ports per trunk group

Up to 16Gbps bandwidth(Duplex Mode)

■Provide Port Mirror (many-to-1)

■Port Mirroring to monitor the incoming or outgoing traffic on a particular port

Quality of Service

■Ingress Shaper and Egress Rate Limit per port bandwidth control

■4 priority queues on all switch ports

■Traffic classification:

-IEEE 802.1p CoS

-TOS / DSCP / IP Precedence of IPv4/IPv6 packets

-IP TCP/UDP port number

-Typical network application

■Strict priority and Weighted Round Robin (WRR) CoS policies

■Supports QoS and In/Out bandwidth control on each port

■Traffic-policing policies on the switch port

■QoS Control List Wizard makes QoS creation and configuration easier and more quickly

12

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

■DSCP remarking

Multicast

■Supports IGMP Snooping v1, v2 and v3

■Querier mode support

■IGMP Snooping port filtering

■Multicast VLAN Registration (MVR) support

Security

■IEEE 802.1x Port-Based / MAC-Based network access authentication

■Built-in RADIUS client to co-operate with the RADIUS servers

■TACACS+ login users access authentication

■RADIUS / TACACS+ users access authentication

■IP-Based Access Control List (ACL)

■MAC-Based Access Control List

■Source MAC / IP address binding

■DHCP Snooping to filter un-trusted DHCP messages

■Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding

■IP Source Guard prevents IP spoofing attacks

■Auto DoS rule to defend DoS attack

■IP address access management to prevent unauthorized intruder

Management

■Switch Management Interfaces

-Console / Telnet Command Line Interface

-Web switch management

-SNMP v1, v2c, and v3 switch management

-SSH / SSL secure access

■Four RMON groups (history, statistics, alarms, and events)

■IPv6 IP Address / NTP / DNS management

■Built-in Trivial File Transfer Protocol (TFTP) client

■BOOTP and DHCP for IP address assignment

■Firmware upload/download via HTTP / TFTP

■DHCP Relay

■User Privilege levels control

■NTP (Network Time Protocol)

■Link Layer Discovery Protocol (LLDP) Protocol

■Cable Diagnostic technology provides the mechanism to detect and report potential cabling issues

■Reset button for system reboot or reset to factory default

■IFS Smart Discovery Utility for deploy management

■ICMPv6

Stacking

■Hardware stack up to 16 units and 384 ports

■Stacking architecture supports Chain and Ring mode

■Mirror across stack

■Link Aggregation groups spanning multiple switches in a stack

■Hardware learning with MAC table synchronization across stack

Power over Ethernet (NS3601-24P/4S / GE-DSSG-244-POE)

■Complies with IEEE 802.3af Power over Ethernet End-Span PSE

■Up to 24 ports for IEEE 802.3af devices powered

■Support PoE Power up to 15.4 watts for each PoE ports

■Auto detect powered device (PD)

■Circuit protection prevent power interference between ports

■Remote power feeding up to 100m

■PoE Management

■Total PoE power budget control

■Pert port PoE function enable/disable

■PoE Port Power feeding priority

■Per PoE port power limit

■PD classification detection

13

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

Product Specification

IFS Stackable Fiber Switch

	Product	GE-DSSG-244
	Hardware Specification
	Copper Ports	8 10/ 100/1000Base-T RJ-45 Auto-MDI/MDI-X ports, shared with Port-1~Port-8
	SFP/mini-GBIC Slots	24 100/1000Base-X Dual Speed SFP interfaces
	Console Port	1 x RS-232 DB9 serial port (115200, 8, N, 1)
	Stacking Ports	2 5GbE / Cross-HDMI interface
	Switch Fabric	68Gbps / non-blocking
	Address Table	8K entries, automatic source address learning and ageing
	Share data Buffer	1392 kilobytes
	Switch Processing Scheme	Store-and-Forward
	Flow Control	IEEE 802.3x Pause Frame for Full-Duplex
		Back pressure for Half-Duplex
	Jumbo Frame	10Kbytes
	Reset Button	< 5 seconds: System reboot
		> 10 seconds: Factory Default
	Dimension (W x D x H)	440 x 200 x 44.5 mm, 1U high
	Weight	3.0kg
	LED	Power, Link/Act and speed per Gigabit port
	Power Consumption	Max. 30.2 watts / 102.98 BTU
	Power Requirement – AC	AC 100~240V, 50/60Hz
	Power Requirement – DC	---
	Stacking Numbers	16
	Stacking Bandwidth	10Gbps Full-Duplex
	Stack ID Display	7-Segment LED Display (1~9, A~F,0)
	ESD Protection	6KV DC
	Layer 2 Function
	Basic Management Interfaces	Console, Telnet, Web Browser, SNMPv1, v2c and v3
	Secure Management Interface	SSH, SSL, SNMP v3
		Port disable/enable.
	Port configuration	Auto-negotiation 10/100/1000Mbps full and half duplex mode selection.
		Flow Control disable / enable.
		Bandwidth control on each port.
		Power saving mode control
	Port Status	Display each port’s speed duplex mode, link status, Flow control status.
		Auto negotiation status, trunk status.
		802.1Q Tagged Based VLAN ,up to 255 VLAN groups
	VLAN	Q-in-Q
		Private VLAN
		Voice VLAN
	Port trunking	IEEE 802.3ad LACP / Static Trunk
		Support 12 groups of 16-Port trunk support
		Traffic classification based, Strict priority and WRR
		4-level priority for switching
	QoS	- Port Number
		- 802.1p priority
		- DS/TOS field in IP Packet
	IGMP Snooping	IGMP (v1/v2) Snooping, up to 255 multicast Groups
		IGMP Querier mode support
	Access Control List	IP-Based ACL / MAC-Based ACL
		14

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

		Up to 256 entries
		RFC-1213 MIB-II
		IF-MIB
		RFC-1493 Bridge MIB
		RFC-1643 Ethernet MIB
		RFC-2863 Interface MIB
		RFC-2665 Ether-Like MIB
SNMP MIBs		RFC-2737 Entity MIB
		RFC-2618 RADIUS Client MIB
		RFC-2933 IGMP-STD-MIB
		RFC3411 SNMP-Frameworks-MIB
		IEEE 802.1X PAE
		LLDP
		MAU-MIB
Standards Conformance
Regulation Compliance		FCC Part 15 Class A, CE
		IEEE 802.3 10Base-T
		IEEE 802.3u 100Base-TX/100Base-FX
		IEEE 802.3z Gigabit SX/LX
		IEEE 802.3ab Gigabit 1000T
		IEEE 802.3x Flow Control and Back pressure
Standards Compliance		IEEE 802.3ad Port trunk with LACP
		IEEE 802.1D Spanning Tree protocol
		IEEE 802.1w Rapid Spanning Tree protocol
		IEEE 802.1s Multiple Spanning Tree
		IEEE 802.1p Class of service
		IEEE 802.1Q VLAN Tagging
		IEEE 802.1x Port Authentication Network Control
		IEEE 802.1ab Link Layer Discovery Protocol (LLDP)
 IFS Stackable PoE models
Product		GE-DSSG-244-POE		NS3601-24P/4S
Hardware Specification
Copper Ports		24 10/ 100/1000Base-T RJ-45 Auto-MDI/MDI-X ports
SFP/mini-GBIC Slots		4 SFP interfaces, shared with Port-21 to Port-24
Console Port		1 x RS-232 DB9 serial port (115200, 8, N, 1)
Stacking Ports		2 5GbE / Cross-HDMI interface
Switch Fabric		68Gbps / non-blocking
Address Table		8K entries, automatic source address learning and ageing
Share data Buffer		1392 kilobytes
Switch Processing Scheme		Store-and-Forward
Flow Control		IEEE 802.3x Pause Frame for Full-Duplex
		Back pressure for Half-Duplex
Jumbo Frame		10Kbytes
Reset Button		< 5 seconds: System reboot
		> 10 seconds: Factory Default
Dimension (W x D x H)		440 x 300 x 44.5 mm, 1U high
Weight		4.5kg
LED		Power, Link/Act and speed per Gigabit port
Power Consumption		Max. 290 watts /		Max. 430.2 watts /
		989 BTU		1467 BTU
Power Requirement – AC		AC 100~240V, 50/60Hz		AC 100~240V, 50/60Hz
Stacking Numbers		16
Stacking Bandwidth		10Gbps Full-Duplex
Stack ID Display		7-Segment LED Display (1~9, A~F,0)
ESD Protection		6KV DC

15

		IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual
Power over Ethernet
PoE Standard		IEEE 802.3af PoE / PSE
PoE Power Supply Type		End-Span
PoE Power Output		Per Port 48V DC.
		Max. 15.4 watts
Power Pin Assignment		1/2(+), 3/6(-)
PoE Power Budget		220 Watts	380 Watts
	Number of PD @	24	24
	7Watts
PoE Ability	Number of PD @	14	24
	15.4Watts
	Number of PD @	-	-
	30.8Watts
Layer 2 Function
Basic Management Interfaces		Console, Telnet, Web Browser, SNMPv1, v2c and v3
Secure Management Interface		SSH, SSL, SNMP v3
		Port disable/enable.
Port configuration		Auto-negotiation 10/100/1000Mbps full and half duplex mode selection.
		Flow Control disable / enable.
		Bandwidth control on each port.
		Power saving mode control
Port Status		Display each port’s speed duplex mode, link status, Flow control status.
		Auto negotiation status, trunk status.
		802.1Q Tagged Based VLAN ,up to 255 VLAN groups
VLAN		Q-in-Q
		Private VLAN
		Voice VLAN
Port trunking		IEEE 802.3ad LACP / Static Trunk
		Support 12 groups of 16-Port trunk support
		Traffic classification based, Strict priority and WRR
		4-level priority for switching
QoS		- Port Number
		- 802.1p priority
		- DS/TOS field in IP Packet
IGMP Snooping		IGMP (v1/v2) Snooping, up to 255 multicast Groups
		IGMP Querier mode support
Access Control List		IP-Based ACL / MAC-Based ACL
		Up to 256 entries
		RFC-1213 MIB-II
		IF-MIB
		RFC-1493 Bridge MIB
		RFC-1643 Ethernet MIB
		RFC-2863 Interface MIB
		RFC-2665 Ether-Like MIB
SNMP MIBs		RFC-2737 Entity MIB
		RFC-2618 RADIUS Client MIB
		RFC-2933 IGMP-STD-MIB
		RFC3411 SNMP-Frameworks-MIB
		IEEE 802.1X PAE
		LLDP
		MAU-MIB
Standards Conformance
Regulation Compliance		FCC Part 15 Class A, CE
		IEEE 802.3 10Base-T
		IEEE 802.3u 100Base-TX/100Base-FX
Standards Compliance		IEEE 802.3z Gigabit SX/LX
		IEEE 802.3ab Gigabit 1000T
		IEEE 802.3x Flow Control and Back pressure
		IEEE 802.3ad Port trunk with LACP
		16

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

IEEE 802.1d Spanning tree protocol

IEEE 802.1w Rapid spanning tree protocol IEEE 802.1s Multiple spanning tree protocol IEEE 802.1p Class of service

IEEE 802.1Q VLAN Tagging

IEEE 802.1x Port Authentication Network Control IEEE 802.1ab LLDP

RFC 768 UDP

RFC 793 TFTP RFC 791 IP RFC 792 ICMP RFC 2068 HTTP

RFC 1112 IGMP version 1 RFC 2236 IGMP version 2

IEEE 802.3af Power over Ethernet

IEEE 802.3at Power over Ethernet (Pre-Standard)

Note: The PoE networks of this equipment is to be connected without routing to the outside plant.

17

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

INSTALLATION

This section describes the hardware features and installation of the Managed Switch on the desktop or rack mount. For easier management and control of the Managed Switch, familiarize yourself with its display indicators, and ports. Front panel illustrations in this chapter display the unit LED indicators. Before connecting any network device to the Managed Switch, please read this chapter completely.

Hardware Description

Switch Front Panel

The unit front panel provides a simple interface monitoring the switch. Figure 2-1 to 2-2 shows the front panel of the Managed Switches.

GE-DSDG-244 Front Panel

Figure 2-1 GE-DSSG-244 front panel.

IFS NS3601-24P/4S / GE-DSSG-244-POE Front Panel

Figure 2-2 IFS NS3601-24P/4S / GE-DSSG-244-POE front panel.

■ Gigabit TP interface

10/100/1000Base-T Copper, RJ-45 Twist-Pair: Up to 100 meters.

■ Gigabit SFP slots

1000Base-SX/LX mini-GBIC slot, SFP (Small Factor Pluggable) transceiver module: From 550 meters (Multi-mode fiber), up to 10/30/50/70 kilometers (Single-mode fiber).

■ Console Port

The console port is a DB9, RS-232 male serial port connector. It is an interface for connecting a terminal directly. Through the console port, it provides rich diagnostic information includes IP Address setting, factory reset, port management, link status and system setting. Users can use the attached RS-232 cable in the package and connect to the console port on the device. After the connection, users can run any terminal emulation program (Hyper Terminal, ProComm Plus, Telix, Winterm, etc.) to enter the startup screen of the device.

18

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

■ Reset button

On the left hand side of the front panel, the reset button is designed for rebooting the Managed Switch without a power cycle. The following is the summary table of Reset button functions:

	Reset Button Pressed and Released	Function
	< 5 sec: System reboot	Reboot the Managed Switch
		Reset the Managed Switch to Factory Default configuration.
		The Managed Switch will then reboot and load the default
		settings as below:
	> 5 sec: Factory Default		Default Username: admin
			Default Password: admin
			Default IP address: 192.168.0.100
			Subnet mask: 255.255.255.0
			Default Gateway: 192.168.0.254

■ Stack ID

Each IFS Managed Stackable Switch on a stack must have a unique “Stack ID”. There are 16 degrees (0~9, A~F) in the rotary switch. The Stack ID is configured via Web or CLI management interface. Use the Stack ID to identify the location of the real device.

Stack ID is not equal to the Master Priority that is configured in the management interface.

■ Master LED

If master switch fails or is disconnected to the switch by stack port, the switch with lowest switch ID will become the master.

19

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

LED Indications

The front panel LEDs indicates instant status of port links, data activity and system power; helps monitor and troubleshoot when needed. Figure 2-3 & Figure 2-4 shows the LED indications of these Managed Switches.

NS3601-24P/4S /GE-DSSG-244-POE LED indication

			Figure 2-3 GE-DSSG-244-POE / NS3601-24P/4S LED panel
	System
	LED	Color		Function
	PWR	Green	Illuminates to indicate that the Switch has power.
	SYS	Green	Illuminates to indicate the system is on.
	Alert
	LED	Color		Function
	PWR Alert	Green	Illuminates to indicate that the PoE power supply has failed.
	FAN1	Green	Illuminates to indicate that the FAN1 has failed.
	FAN2	Green	Illuminates to indicate that the FAN2 has failed.
	FAN3	Green	Illuminates to indicate that the FAN3 has failed.
	Per 10/100Mbps port, PoE interfaces (Port-1 to Por-24)
	LED	Color		Function
	LNK/ACT	Green	Illuminates: To indicate the link through that port is successfully established.
			Blink:	To indicate that the Switch is actively sending or receiving data over that port.
			Illuminates: To indicate the port is providing 52V DC in-line power.
	PoE In-Use	Orange	Off:	To indicate the connected device is not a PoE Powered Device (PD).

20

							IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual
Per 10/100/1000Base-T port / SFP interfaces
	LED			Color			Function
						Illuminates: To indicate the link through that port is successfully established with speed
							1000Mbps.
1000				Green		Blink:	To indicate that the Switch is actively sending or receiving data over that port.
	LNK/ACT
						Off:	If 10/100 LNK/ACT LED is light, it indicates that the port is operating at
							10Mbps or 100Mbps. If LNK/ACT LED is Off, it indicates that the port is link
							down.
						Illuminates: To indicate the link through that port is successfully established with speed
						Blink:	10Mbps or 100Mbps.
10/100				Green			To indicate that the Switch is actively sending or receiving data over that port.
	LNK/ACT						If 1000 LNK/ACT LED is ON, it indicates that the port is operating at
						Off:
							1000Mbps.
							If 1000 LNK/ACT LED is Off, it indicates that the port is link down.

1.Press the RESET button for 5 seconds. The Managed Switch will reboot automatically.

2.Press the RESET button for 10 seconds. The Managed Switch will restore back to the factory default mode; the entire configuration will be erased.

3.The 2 Gigabit TP/SFP combo ports are shared with port 25/26 of Managed Switch. Either of them can operate at the same time.

GE-DSSG-244 LED indication

Figure 2-4 GE-DSSG-244 LED panel

■ System

LED

Color

Function

PWR

Green

Illuminates to indicate that the Switch is powered on.

Blink to indicate the System is running under booting procedure.

Master

Green

Illuminates to indicate that the Switch is the Master of the stack group

STX1

Green

Illuminates to indicate the stacking link through that port is successfully established.

STX2

Green

Illuminates to indicate the stacking link through that port is successfully established.

21

				IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual
■ 10/100/1000Base-T interfaces (Shared Port-1~Port-8)
	LED	Color		Function
			illuminates: To indicate the link through that port is successfully established with speed
				1000Mbps
	1000
		Green	Blink:	To indicate that the switch is actively sending or receiving data over that
	LNK/ACT			port.
			Off:	If L10/100 NK/ACT LED light-> indicate that the port is operating at 10Mbps
				or 100Mbps
				If LNK/ACT LED Off -> indicates that the port is link down
			Illuminates: To indicate the link through that port is successfully established with speed
				10Mbps or 100Mbps
	10/100		Blink:	To indicate that the switch is actively sending or receiving data over that
		Orange		port.
	LNK/ACT
			Off:	If 1000 LNK/ACT LED light-> indicates that the port is operating at
				1000Mbps
				If 1000 LNK/ACT LED Off -> indicates that the port is link down
■ 100 / 1000Base-X SFP interfaces
	LED	Color		Function
			Illuminates: To indicate the link through that SFP port is successfully established with
	1000			speed 1000Mbps
		Green
	LNK
			Off:	To indicate that the SFP port is link down
			Illuminates: To indicate the link through that port is successfully established with speed
				100Mbps
	100	Orange	Blink:	To indicate that the switch is actively sending or receiving data over that
				port.
	LNK/ACT
			Off:	If 1000 LNK/ACT LED light-> indicate that the port is operating at
				1000Mbps
				If 1000 LNK/ACT LED Off -> indicate that the port is link down

■ 7-Segment LED Display

Stack ID (1~9, A~F, 0): To indicate the Switch ID of each SGSW Managed Switch. Switch IDs are used to uniquely identify the Managed Switches within a stack. The Switch ID of each Managed Switch is shown on the display on the front of the Managed Switch and is used widely in the web pages as well as in the CLI commands of the Stack group.

Stack ID	1	2	3	4	5	6	7	8	9	A.	B.	C.	D.	E.	F.	0
Switch ID	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15	16

Switch Rear Panel

The rear panel of the Managed Switch indicates an AC inlet power socket, which works with the input power range from 100 to 240V AC, 50-60Hz. Figure 2-5 & Figure 2-6 shows the rear panel of these Managed Switches.

GE-DSSG-244 Rear Panel

Figure 2-5 Rear panel of GE-DSSG-244

22

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

NS3601-24P/4S / GE-DSSG-244-POE Rear Panel

Figure 2-6 Rear panel of NS3601-24P/4SP and GE-DSSG-244-POE

■ AC Power Receptacle

For compatibility with electric service in most areas of the world, the Managed Switch’s power supply automatically adjusts to line power in the range 100-240VAC and 50/60 Hz.

Plug the female end of the power cord firmly into the receptalbe on the rear panel of the Managed Switch. Plug the other end of the power cord into an electric service outlet.

1.The device requires a power connection to operate. If your networks should active all the time, please consider using UPS (Uninterrupted Power Supply) for your device. It will prevent you from

Power Notice:	network data loss or network downtime.

2.For additional protection against unregulated voltage or current surges, you may also want to consider surge suppression as part of your installation.

Install the Switch

This section describes how to install your Managed Switch and make connections to the Managed Switch. Please read the following topics and perform the procedures in the order being presented. To install your Managed Switch on a desktop or shelf, simply complete the following steps.

Desktop Installation

To install the Managed Switch on desktop or shelf, please follows these steps:

Step1: Attach the rubber feet to the recessed areas on the bottom of the Managed Switch.

Step2: Place the Managed Switch on the desktop or the shelf near an AC power source, as shown in Figure 2-7.

23

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

Figure 2-7 Place the Managed Switch on the desktop

Step3: Keep enough ventilation space between the Managed Switch and the surrounding objects.

When choosing a location, please keep in mind the environmental restrictions discussed in Chapter 1, Section 5 Product Specification.

Step4: Connect the Managed Switch to network devices.

Connect one end of a standard network cable to the 10/100/1000 RJ-45 ports on the front of the Managed Switch Connect the other end of the cable to the network devices such as printer servers, workstations or routers…etc.

Connection to the Managed Switch requires UTP Category 5 network cabling with RJ-45 tips. For more information, please see the Cabling Specification in Appendix A.

24

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

Step5: Supply power to the Managed Switch.

Connect one end of the power cable to the Managed Switch.

Connect the power plug of the power cable to a standard wall outlet.

When the Managed Switch receives power, the Power LED should remain solid Green.

Rack Mounting

To install the Managed Switch in a 19-inch standard rack, please follows the instructions described below. Step1: Place the Managed Switch on a hard flat surface, with the front panel positioned towards the front side.

Step2: Attach the rack-mount bracket to each side of the Managed Switch with supplied screws attached to the package. Figure 2-8 shows how to attach brackets to one side of the Managed Switch.

Figure 2-8 Attach brackets to the Managed Switch.

You must use the screws supplied with the mounting brackets. Damage caused to the parts by using incorrect screws would invalidate the warranty.

Step3: Secure the brackets tightly.

Step4: Follow the same steps to attach the second bracket to the opposite side.

Step5: After the brackets are attached to the Managed Switch, use suitable screws to securely attach the brackets to the rack, as shown in Figure 2-8.

25

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

Figure 2-8 Mounting IFS-24040 in a Rack

Step6: Proceeds with the steps 4 and steps 5 of session 2.2.1 Desktop Installation to connect the network cabling and supply power to the Managed Switch.

Installing the SFP transceiver

The sections describe how to plug-in an SFP transceiver into an SFP slot.

The SFP transceivers are hot-swappable. You can plug-in and out the transceiver to/from any SFP port without a need to power down the Managed Switch. As the Figure 2-9.

Figure 2-9 Plug-in the SFP transceiver

Approved IFS SFP Transceivers

IFS Managed switches supports both single mode and multi mode SFP transceivers. Please refer to below chart, as well as IFS website for latest compatible SFP modules.

26

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

1000Base-SX/LX SFP transceiver:

We recommend using IFS SFPs on the Managed Switch. If you insert a SFP transceiver that is not supported, the Managed Switch will not recognize it.

Before connecting the other switches, workstation or Media Converter:

1.Make sure both sides use the same SFP transceiver, for example: 1000Base-SX to 1000Base-SX, 1000Base-LX to 1000Base-LX.

2.Make sure the fiber-optic cable type match the SFP transceiver model.

To connect to 1000Base-SX SFP transceiver, use the Multi-mode fiber cablewith one side must be male duplex LC connector type.

To connect to 1000Base-LX SFP transceiver, use the Single-mode fiber cable-with one side must be male duplex LC connector type.

 Connect the fiber cable

1. Attach the duplex LC connector on the network cable into the SFP transceiver.

2. Connect the other end of the cable to a device – switches with SFP installed, fiber NIC on a workstation or a Media Converter.. 3. Check the LNK/ACT LED of the SFP slot on the front of the Managed Switch. Ensure that the SFP transceiver is operating

correctly.

4. Check the Link mode of the SFP port if the link failed.

 Remove the transceiver module

1.Make sure there is no network activity by consult or check with the network administrator. Or through the management interface of the switch/converter (if available) to disable the port in advance.

2.Remove the Fiber Optic Cable gently.

3.Turn the handle of the MGB module to horizontal position.

4.Pull out the module gently with the handle.

27

IFS NS3601-24P/4S GE-DSSG-244 and 244-POE User Manual

Figure 2-10 Pull out the SFP transceiver

Never pull out the module without pull the handle or the push bolts on the module. Direct pull out the module may damage the module and SFP module slot of the Managed Switch.

Stack Installation

IFS-NS3601-24P/4S and GE-DSSG Series

The IFS-NS3601-24P/4S and GE-DSSG series Managed Switch provides a switch stacking function to manage up to 16 switches using a single IP address. And up to 384 Gigabit Ethernet ports can be managed by a stacking group and you can add ports and functionality as needed. You can add IFS-NS3601-24P/4S and GE-DSSG series switches as needed to support more network clients, knowing that your switching fabric will scale to meet increasing traffic demands.

Two types of stack topologies are supported by the IFS-NS3601-24P/4S and GE-DSSG series:

Chain topology (same as a disconnected ring)

Ring topology

Please find the following picture for sample connection.

Figure 2-11 Chain Stack topology

28