Other trade names used in this document may be trademarks or registered
trademarks of the manufacturers or vendors of the respective products.
Manufacturer
Interlogix
3211 Prog
A
UTC Climate Controls & Security B.V.,
Kelvinstraat 7, 6003 DH Weert,
Intended use
Use this product only for the purpose it was de
sheet and user documentation for details. For the latest product information,
contact your local supplier or visit us online at www.interlogix.com.
Certification
FCC compliance
This equipment has been tested and
Class A digital device, pursuant to part 15 of the FCC Rules. These limits
are designed to provide reasonable protection against harmful interference
when the equipment is operated in a commercial environment. This
equ
not installed and used in accordance with the instruction manual, may
cause harmful interference to radio communications.
You are cautioned that any changes or modifications not express
approved by the party responsible for compliance could void the user's
authority to operate the equipment.
Notice!
may cause radio interference in which case the user ma
take adequate measures.
Canada
This Class A digital apparatus complies with Canadian ICES
Cet appareil numérique de la classe A est conforme á la norme NMB-003du
Canada.
European Union
directives
2004/108/EC (EMC Directive):
Corporation, Inc.
essential requirements and other relevant provisions of Directive
2004/108/EC.
Contact Information
For contact information, see
www.utcfssecurityproducts.eu
2013 United Technologies Corporation
All rights reserved.
IFS NS3502-8P-2S name and logo are trademarks of United
.
ress Drive, Lincolnton, NC 28092 USA
uthorized EU manufacturing representative:
Netherlands
signed for; refer to the data
N4131
ACMA compliance
found to comply with the limits for a
ipment generates, uses, and can radiate radio frequency energy and, if
ly
This is a Class A product. In a domestic environment this product
y be required to
-003.
Hereby, UTC Climate Controls & Security
declares that this device is in compliance with the
www.interlogix.comor
.
IFS NS3502-8P-2S User Manual
3
TABLE OF CONTENTS
IFS NS3502-8P-2S User Manual ..................................................................................................... 1
1.3 How to Use This Manual ............................................................................................................................... 22
1.4 Product Features ........................................................................................................................................... 23
3.4 Web Management ........................................................................................................................................ 42
4. WEB CONFIGURATION ............................................................................................................ 45
4.1 Main Web Page ............................................................................................................................................. 48
4.2 System .......................................................................................................................................................... 50
4.2.1 System Information ..................................................................................................... 51
4.2.2 IP Configuration ........................................................................................................... 52
4.4 Port Management ......................................................................................................................................... 94
4.4.1 Port Configuration ....................................................................................................... 94
4.4.2 Port Statistics Overview ............................................................................................... 96
4.4.3 Port Thermal Protection Status ................................................................................... 97
4.4.4 Port Statistics Detail ..................................................................................................... 97
4.4.5 SFP Information ......................................................................................................... 100
4.4.6 Port Mirror ................................................................................................................. 101
4.5 Link Aggregation ......................................................................................................................................... 104
4.8.15 MVR Status ............................................................................................................... 182
4.8.16 MVR Groups Information ......................................................................................... 183
4.9 Quality of Service ........................................................................................................................................ 184
6. Command Line Mode ............................................................................................................ 341
6.1 System Command ....................................................................................................................................... 341
System Configuration .................................................................................................. 341
System Log Configuration ........................................................................................... 342
System Version............................................................................................................ 343
System Log Server Mode ............................................................................................ 343
System Name .............................................................................................................. 344
System Contact ........................................................................................................... 344
System Log Server Address ......................................................................................... 345
System Location .......................................................................................................... 345
System Log Level ......................................................................................................... 346
System Timezone ........................................................................................................ 346
System Log Lookup ..................................................................................................... 347
System Reboot ............................................................................................................ 348
System Restore Default .............................................................................................. 348
System Load ................................................................................................................ 348
6.2 IP Command ................................................................................................................................................ 349
IP Configuration .......................................................................................................... 349
IP DHCP ....................................................................................................................... 349
IP Setup ....................................................................................................................... 350
IP Ping .......................................................................................................................... 351
IP DNS .......................................................................................................................... 351
IP DNS Proxy ................................................................................................................ 352
6.16 LED Power Command ................................................................................................................................ 487
LED Power Timers ....................................................................................................... 487
LED Power Delete Timer ............................................................................................. 487
LED Power Maintenance ............................................................................................. 487
LED Power Configuration ............................................................................................ 488
6.17 Quality of Service Command ..................................................................................................................... 488
IPMC Parameter URI ................................................................................................... 533
6.25 VLAN Control List Command ..................................................................................................................... 534
8. POWER OVER ETHERNET OVERVIEW ..................................................................................... 540
What is PoE? ..................................................................................................................................................... 540
The PoE Provision Process ................................................................................................................................. 542
Stages of powering up a PoE link ........................................................................................ 542
Line Detection ..................................................................................................................... 543
IEEE 802.3u 100Base-TX/100Base-FX
IEEE 802.3z Gigabit SX/LX
IEEE 802.3ab Gigabit 1000T
IEEE 802.3x Flow Control and Back pressure
IEEE 802.3ad Port trunk with LACP
IEEE 802.1d Spanning tree protocol
IEEE 802.1w Rapid spanning tree protocol
IEEE 802.1s Multiple spanning tree protocol
IEEE 802.1p Class of service
IEEE 802.1Q VLAN Tagging
IEEE 802.1x Port Authentication Network Control
IEEE 802.1ab LLDP
IEEE 802.3af Power over Ethernet
IEEE 802.3at Power over Ethernet PLUS
RFC 768 UDP
RFC 793 TFTP
RFC 791 IP
RFC 792 ICMP
RFC 2068 HTTP
RFC 1112 IGMP version 1
RFC 2236 IGMP version 2
RFC 3376 IGMP version 3
RFC 2710 MLD version 1
IFS NS3502-8P-2S User Manual
29
2. INSTALLATION
This section describes the hardware features and installation of the Managed Switch on the desktop
or rack mount. For easier management and control of the Managed Switch, familiarize yourself with
its display indicators, and ports. Front panel illustrations in this chapter display the unit LED
indicators. Before connecting any network device to the Managed Switch, please read this chapter
completely.
2.1 Hardware Description
2.1.1 Switch Front Panel
The unit front panel provides a simple interface monitoring the switch. Figure 2-1 shows the front
panel of the Managed Switch.
NS3502-8P-2S Front Panel
Figure 2-1: NS3502-8P-2S front panel.
■ Gigabit TP interface
10/100/1000Base-T Copper, RJ-45 Twist-Pair: Up to 100 meters.
S30-2SLC-10 SFP, LC Connector, Single Mode, Gigabit, 2 fiber,1310nm/1310nm, 10km
S30-2SLC-30 SFP, LC Connector, Single Mode, Gigabit, 2 fiber,1310nm/1310nm, 30km
S30-2SLC-70 SFP, LC Connector, Single Mode, Gigabit, 2 fiber,1550nm/1550nm, 70km
S30-RJ SFP, RJ-45, Gigabit, 100m
Fast Ethernet SFP Transceiver modules
SFP, LC Connector, Single Mode, 10/100 Fast Ethernet, 1 fiber, 1310nm/155
S20-1SLC/A-20
20km , A End
SFP, LC Connector, Single Mode, 10/100 Fast Ethernet, 1 fiber, 1310nm/1
S20-1SLC/B-20
20km , B End
S20-2MLC-2 SFP, LC Connector, Multi-Mode
S20-2SLC-20
20km
IFS NS3502-8P-2S User Manual
37
Switch. If you insert a SFP
Switch will not recognize
It recommends using IFS SFPs on the Managed
transceiver that is not supported, the Managed
it.
Before connect the other Managed Switches, workstation or Media Converter.
1. Make sure both side of the SFP transceiver are with the same media type, for example:
1000Base-SX to 1000Base-SX, 1000Bas-LX to 1000Base-LX.
2. Check the fiber-optic cable type match the SFP transceiver model.
To connect to 1000Base-SX SFP transceiver, use the Multi-mode fiber cable- with one side
must be male duplex LC connector type.
To connect to 1000Base-LX SFP transceiver, use the Single-mode fiber cable-with one side
must be male duplex LC connector type.
Connect the fiber cable
1. Attach the duplex LC connector on the network cable into the SFP transceiver.
2. Connect the other end of the cable to a device – switches with SFP installed, fiber NIC on a
workstation or a Media Converter...
3. Check the LNK/ACT LED of the SFP slot on the front of the Managed Switch. Ensure that the SFP
transceiver is operating correctly.
4. Check the Link mode of the SFP port if the link failed. Co works with some fiber-NICs or Media
Converters, set the Link mode to “1000 Force” or “100 Force” is needed.
Remove the transceiver module
1. Make sure there is no network activity by consult or check with the network administrator. Or
through the management interface of the switch/converter (if available) to disable the port in
advance.
2. Remove the Fiber Optic Cable gently.
3. Turn the handle of the SFP module to horizontal.
4. Pull out the module gently through the handle.
IFS NS3502-8P-2S User Manual
38
Figure 2-8: Pull out the SFP transceiver
Never pull out the module without pull the handle or the push bolts on
the module. Direct pull out the module with violent could damage the
module and SFP module slot of the Managed Switch.
IFS NS3502-8P-2S User Manual
39
It is recom
Managed
Switch.
3. SWITCH MANAGEMENT
This chapter explains the methods that you can use to configure management access to the
Managed Switch. It describes the types of management applications and the communication and
management protocols that deliver data between your management device (workstation or
personal computer) and the system. It also contains information about port connection options.
This chapter covers the following topics:
Requirements
Management Access Overview
Administration Console Access
Web Management Access
SNMP Access
Standards, Protocols, and Related Reading
3.1 Requirements
Workstations of subscribers running Windows 2000/XP, 2003, Vista/7, 2008, MAC OS9 or
later, Linux, UNIX or other platform compatible with TCP/IP protocols.
Workstation installed with Ethernet NIC (Network Interface Card)
Serial Port connect (Terminal)
• Above PC with COM Port (DB9 / RS-232) or USB-to-RS-232 converter
Ethernet Port connect
• Network cables - Use standard network (UTP) cables with RJ45 connectors.
Above Workstation installed with WEB Browser and JAVA runtime environment Plug-in
mended to use Internet Explorer 7.0 or above to access
IFS NS3502-8P-2S User Manual
40
Most visually appealing
3.2 Management Access Overview
The Managed Switch gives you the flexibility to access and manage it using any or all of the
following methods:
An administration console
Web browser interface
An external SNMP-based network management application
The administration console and Web browser interface support are embedded in the Managed
Switch software and are available for immediate use. Each of these management methods has their
own advantages. Table 3-1 compares the three management methods.
Method Advantages Disadvantages
Console
Web
Browser
SNMP
Agent
• No IP address or subnet needed
• Text-based
• Telnet functionality and
HyperTerminal built into
Windows
95/98/NT/2000/ME/XP
operating systems
• Secure
• Ideal for configuring the switch
remotely
• Compatible with all popular
browsers
• Can be accessed from any
location
•
• Communicates with switch
functions at the MIB level
• Must be near switch or use dial-up
connection
• Not convenient for remote users
• Modem connection may prove to be
unreliable or slow
• Security can be compromised
(hackers need only know the IP
address and subnet mask)
• May encounter lag times on poor
connections
• Requires SNMP manager software
• Least visually appealing of all three
• Based on open standards
Table 3-1: Management Methods Comparison
methods
• Some settings require calculations
• Security can be compromised
(hackers need only know the
community name)
IFS NS3502-8P-2S User Manual
41
3.3 Administration Console
The administration console is an internal, character-oriented, and command line user interface for
performing system administration such as displaying statistics or changing option settings. Using this
method, you can view the administration console from a terminal, personal computer, Apple
Macintosh, or workstation connected to the switch's console (serial) port.
There are two ways to use this management method: via direct access or modem port access. The
following sections describe these methods. For more information about using the console, refer to
Chapter 5 Command Line Interface Console Management.
Figure 3-1: Console management
Direct Access
Direct access to the administration console is achieved by directly connecting a terminal or a PC
equipped with a terminal-emulation program (such as HyperTerminal) to the Managed Switch
console (serial) port.
When using this management method, a straight DB9 RS-232 cable is required to connect the
switch to the PC. After making this connection, configure the terminal-emulation program to use
the following parameters:
The default parameters are:
115200 bps
8 data bits
No parity
1 stop bit
IFS NS3502-8P-2S User Manual
42
Figure 3-2: Terminal parameter settings
You can change these settings, if desired, after you log on. This management method is often
preferred because you can remain connected and monitor the system during system reboots. Also,
certain error messages are sent to the serial port, regardless of the interface through which the
associated action was initiated. A Macintosh or PC attachment can use any terminal-emulation
program for connecting to the terminal serial port. A workstation attachment under UNIX can use
an emulator such as TIP.
3.4 Web Management
The Managed Switch offers management features that allow users to manage the Managed Switch
from anywhere on the network through a standard browser such as Microsoft Internet Explorer.
After you set up your IP address for the switch, you can access the Managed Switch's Web interface
applications directly in your Web browser by entering the IP address of the Managed Switch.
Figure 3-3: Web management
IFS NS3502-8P-2S User Manual
43
You can then use your Web browser to list and manage the Managed Switch configuration
parameters from one central location, just as if you were directly connected to the Managed
Switch's console port. Web Management requires either Microsoft Internet Explorer 7.0 or later,
Safari or Mozilla Firefox 1.5 or later.
Figure 3-4: Web main screen of Managed Switch
3.5 SNMP-Based Network Management
You can use an external SNMP-based application to configure and manage the Managed Switch,
such as SNMP Network Manager, HP Openview Network Node Management (NNM) or What’s Up
Gold. This management method requires the SNMP agent on the switch and the SNMP Network
Management Station to use the same community string. This management method, in fact, uses
two community strings: the get community string and the set community string. If the SNMP
Net-work management Station only knows the set community string, it can read and write to the
MIBs. However, if it only knows the get community string, it can only read MIBs. The default gets
and sets community strings for the Managed Switch are public.
IFS NS3502-8P-2S User Manual
44
Figure 3-5: SNMP management
IFS NS3502-8P-2S User Manual
45
later version does not allow Java Applets to open sockets.
The user has to explicitly modify the browser setting to enable Java Applets to
4. WEB CONFIGURATION
This section introduces the configuration and functions of the Web-Based management.
About Web-based Management
The Managed Switch offers management features that allow users to manage the Managed Switch
from anywhere on the network through a standard browser such as Microsoft Internet Explorer.
The Web-Based Management supports Internet Explorer 7.0. It is based on Java Applets with an aim
to reduce network bandwidth consumption, enhance access speed and present an easy viewing
screen.
By default, IE7.0 or
use network ports.
The Managed Switch can be configured through an Ethernet connection, make sure the manager PC
must be set on same the IP subnet address with the Managed Switch.
For example, the default IP address of the IFS Managed Switch is 192.168.0.100, then the manager
PC should be set at 192.168.0.x (where x is a number between 1 and 254, except 100), and the
default subnet mask is 255.255.255.0.
If you have changed the default IP address of the Managed Switch to 192.168.1.1 with subnet mask
255.255.255.0 via console, then the manager PC should be set at 192.168.1.x (where x is a number
between 2 and 254) to do the relative configuration on manager PC.
Figure 4-1-1: Web Management
IFS NS3502-8P-2S User Manual
46
Logging on the switch
1. Use Internet Explorer 7.0 or above Web browser. Enter the factory-default IP address to access
the Web interface. The factory-default IP Address as following:
http://192.168.0.100
2. When the following login screen appears, please enter the default username "admin" with
password “admin” (or the username/password you have changed via console) to login the main
screen of Managed Switch. The login screen in Figure 4-1-2 appears.
Figure 4-1-2: Login screen
Default User name: admin
Default Password: admin
After entering the username and password, the main screen appears as Figure 4-1-3.
IFS NS3502-8P-2S User Manual
47
Figure 4-1-3: Default main page
Now, you can use the Web management interface to continue the switch management or manage the
Managed Switch by Web interface. The Switch Menu on the left of the web page let you access all the
commands and statistics the Managed Switch provides.
1. It is recommended to use Internet Explorer 7.0 or above to access
Managed Switch.
2. The changed IP address take effect immediately after click on the Save
button, you need to use the new IP address to access the Web interface.
3. For security reason, please change and memorize the new password after
this first setup.
4. Only accept command in lowercase letter under web interface.
IFS NS3502-8P-2S User Manual
48
4.1 Main Web Page
The IFS Managed Switch provides a Web-based browser interface for configuring and managing it. This
interface allows you to access the Managed Switch using the Web browser of your choice. This chapter
describes how to use the Managed Switch’s Web browser interface to configure and manage it.
Main Functions
SFP Port Link Status Copper Port Link
Figure 4-1-4: Main Page
Panel Display
The web agent displays an image of the Managed Switch’s ports. The Mode can be set to display
different information for the ports, including Link up or Link down. Clicking on the image of a port
opens the Port Statistics page.
The port states are illustrated as follows:
State DisabledDown Link
RJ-45 Ports
SFP Ports
Main Menu
Using the onboard web agent, you can define system parameters, manage and control the Managed
Switch, and all its ports, or monitor network conditions. Via the Web-Management, the administrator
IFS NS3502-8P-2S User Manual
49
can setup the Managed Switch by select the functions those listed in the Main Function. The screen in
Figure 4-1-5 appears.
Figure 4-1-5:Managed Switch Main Functions Menu
IFS NS3502-8P-2S User Manual
50
rview of the current users. Currently
Configuration energy efficient ethernet power reduction on
this page
Upgrade
rolling the
switch.
Upgrade
Configuration Upload
You can restart the stack switch on this page. After restart,
the stack switch will boot normally.
4.2 System
Use the System menu items to display and configure basic administrative details of the Managed
Switch. Under System the following topics are provided to configure and view the system information:
This section has the following items:
■ System Information The switch system information is provided here.
■ IP Configuration Configure the switch-managed IP information on this page.
■ IPv6 Configuration Configure the switch-managed IPv6 information on this page.
■ Users Configuration
This page provides an ove
the only way to login as another user on the web server is to
close and reopen the browser.
■ Privilege Levels
This page provides an overview of the privilege levels.
■ NTP Configuration Configure NTP on this page.
■ UPnP Configure UPnP on this page.
■ DHCP Relay Configure DHCP Relay on this page.
■ DHCP Relay Statistics This page provides statistics for DHCP relay.
■ CPU Load This page displays the CPU load, using a SVG graph.
■ System Log The switch system log information is provided here.
■ Detailed Log The switch system detailed log information is provided here.
■ Remote Syslog Configure remote syslog on this page.
■ LED Power Reduction Configuration LED power reduction on this page.
■ EEE Power Reduction
■ Thermal Protection Configure thermal protection on this page.
■ Web Firmware
This page facilitates an update of the firmware cont
■ TFTP Firmware
■ Configuration Backup
Upgrade the firmware via TFTP server
You can save the switch configuration. The configuration file
is in XML format with a hierarchy of tags.
■
You can load the switch configuration. The configuration file
is in XML format with a hierarchy of tags.
■ Image Select
■ Factory Default
Configuration active or alternate firmware on this page.
You can reset the configuration of the stack switch on this
page. Only the IP configuration is retained.
■ System Reboot
IFS NS3502-8P-2S User Manual
51
4.2.1 System Information
The System Info page provides information for the current device information. System Info page helps
a switch administrator to identify the hardware MAC address, software version and system uptime. The
screen in Figure 4-2-1 appears.
Figure 4-2-1:System Information page screenshot
The page includes
the following
fields: Object
• Contact
• Name
• Location
• MAC Address
• System Date
• System Uptime
Description
The system contact configured in Configuration | System | Information
| System Contact.
The system name configured in Configuration | System | Information |
System Name.
The system location configured in Configuration | System | Information
| System Location.
The MAC Address of this switch.
The current (GMT) system time and date. The system time is obtained
through the configured SNTP Server, if any.
The period of time the device has been operational.
• Software
The software version of the switch.
Version
• Software Date
The date when the switch software was produced.
IFS NS3502-8P-2S User Manual
52
4095
Buttons
Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals.
: Click to refresh the page; any changes made locally will be undone.
4.2.2 IP Configuration
The IP Configuration includes the IP Address, Subnet Mask and Gateway. The Configured column is
used to view or change the IP configuration. Fill up the IP Address, Subnet Mask and Gateway for the
device. The screen in Figure 4-2-2 appears.
Figure 4-2-2: IP Configuration page screenshot
The Current column is used to show the active IP configuration.
Object Description
• DHCP Client
Enable the DHCP client by checking this box. If DHCP fails and the
configured IP address is zero, DHCP will retry. If DHCP fails and the
configured IP address is non-zero, DHCP will stop and the configured IP
settings will be used. The DHCP client will announce the configured
System Name as hostname to provide DNS lookup.
• IP Address
• IP Mask
• IP Router
• VLAN ID
Provide the IP address of this switch in dotted decimal notation.
Provide the IP mask of this switch dotted decimal notation.
Provide the IP address of the router in dotted decimal notation.
Provide the managed VLAN ID. The allowed range is 1 through
.
IFS NS3502-8P-2S User Manual
53
• DNS Server
• DNS Proxy
Buttons
: Click to save changes.
: Click to undo any changes made locally and revert to previously saved values.
: Click to undo any changes made locally and revert to previously saved values.
4.2.3 IPv6 Configuration
Provide the IP address of the DNS Server in dotted decimal notation.
When DNS proxy is enabled, DUT will relay DNS requests to the current
configured DNS server on DUT, and reply as a DNS resolver to the client
device on the network.
Configure the switch-managed IPv6 information on this page.
The Configured column is used to view or change the IPv6 configuration. The Current column is used to
show the active IPv6 configuration. The screen in Figure 4-2-3appears.
Figure 4-2-3:IPv6 Configuration page screenshot
The page includes the following fields:
Object Description
• Auto
• Configuration
Enable IPv6 auto-configuration by checking this box. If it fails, the
configured IPv6 address will be zero.
The router may delay responding to a router solicitation for a few seconds,
the total time needed to complete auto-configuration can be significantly
longer.
IFS NS3502-8P-2S User Manual
54
• Address
• Prefix
• Router
Provide the IPv6 address of this switch. IPv6 address is in 128-bit records
represented as eight fields of up to four hexadecimal digits with a colon
separate each field (:). For example, ‘fae0::013:4fefe:dea4:34d4’
. The symbol '::' is a special syntax that can be used as a shorthand way of
representing multiple 16-bit groups of contiguous zeros; but it can only
appear once. It also used a following legally IPv4 address. For example, '::
192.1.2.34’.
Provide the IPv6 Prefix of this switch. The allowed range is 1 through 128.
Provide the IPv6 gateway address of this switch. IPv6 address is in 128-bit
records represented as eight fields of up to four hexadecimal digits with a
colon separate each field (:). For example, ‘fae0::013:4fefe:dea4:34d4’. The
symbol '::' is a special syntax that can be used as a shorthand way of
representing multiple 16-bit groups of contiguous zeros; but it can only
appear once. It also used a following legally IPv4 address. For example,
'::192.1.2.34'.
Provide the IPv6 SNTP Server address of this switch. IPv6 address is in
Buttons
128-bit records represented as eight fields of up to four hexadecimal digits
with a colon separate each field (:). For example,
'fae0::013:4fefe:dea4:34d4’. The symbol '::' is a special syntax that can be
used as a shorthand way of representing multiple 16-bit groups of
contiguous zeros; but it can only appear once. It also used a following
legally IPv4 address. For example, '::192.1.2.34'.
•VLAN ID
Provide the managed VLAN ID. The allowed range is 1 through 4095
: Click to save changes.
: Click to undo any changes made locally and revert to previously saved values.
4.2.4 Users Configuration
This page provides an overview of the current users. Currently the only way to login as another user on
the web server is to close and reopen the browser. After setup completed, please press “Save” button
to take effect. Please login web interface with new user name and password, the screen in Figure 4-2-4
appears.
55
Figure 4-2-4: Users Configuration page screenshot
The page includes the following fields:
Object Description
IFS NS3502-8P-2S User Manual
• Username
• Privilege Level
The name identifying the user. This is also a link to Add/Edit User.
The privilege level for the user.
Buttons
: Click to add a new user.
Add / Edit User
This page configures a user – add, edit or delete user.
Figure 4-2-5: Add / Edit User Configuration page screenshot
The page includes the following fields:
Object Description
• Username
• Password
• Privilege Level
The name identifying the user.
The password of the user.
The privilege level for the user.
Buttons
: Click to save changes.
IFS NS3502-8P-2S User Manual
56
ds
, the current setting includes VLAN, will be lost and the
: Click to undo any changes made locally and revert to previously saved values.
: Click to undo any changes made locally and return to the Users.
: Delete the current user. This button is not available for new configurations (Add new user)
Once the new user is added, the new user entry is shown in the Users Configuration page.
Figure 4-2-6: User Configuration page screenshot
After change the default password, if you forget the password. Please press
the “Reset” button in the front panel of the Managed Switch over 10 secon
and then release
Managed Switch will restore to the default mode.
IFS NS3502-8P-2S User Manual
57
4.2.5 Privilege Levels
This page provides an overview of the privilege levels. After setup completed, please press “Save”
button to take effect. Please login web interface with new user name and password, the screen in
The name identifying the privilege group. In most cases, a
privilege level group consists of a single module (e.g. LACP, RSTP
or QoS), but a few of them contains more than one. The following
description defines these privilege level groups in details:
System: Contact, Name, Location, Timezone, Log.
Security: Authentication, System Access Management, Port
(contains Dot1x port, MAC based and the MAC Address Limit),
ACL, HTTPS, SSH, ARP Inspection and IP source guard.
IP: Everything except 'ping'.
Port: Everything except 'VeriPHY'.
Diagnostics: 'ping' and 'VeriPHY'.
Maintenance: CLI- System Reboot, System Restore Default,
System Password, Configuration Save, Configuration Load and
Firmware Load. Web- Users, Privilege Levels and everything in
Maintenance.
Debug: Only present in CLI.
Every privilege level group has an authorization level for the
Buttons
following sub groups: configuration read-only,
configuration/execute read-write, status/statistics read-only, and
status/statistics read-write (e.g. for clearing of statistics).
: Click to save changes.
: Click to undo any changes made locally and revert to previously saved values.
IFS NS3502-8P-2S User Manual
59
4.2.6 NTP Configuration
Configure NTP on this page.
NTP is an acronym for Network Time Protocol, a network protocol for synchronizing the clocks of
computer systems. NTP uses UDP (data grams) as transport layer. You can specify NTP Servers and set
GMT Time zone. The NTP Configuration screen in Figure 4-2-8appears.
Figure 4-2-8: NTPConfiguration page screenshot
The page includes the following fields:
Object Description
• Mode
Indicates the NTP mode operation. Possible modes are:
Enabled: Enable NTP mode operation. When enable NTP mode
operation, the agent forward and to transfer NTP messages
between the clients and the server when they are not on the
same subnet domain.
Disabled: Disable NTP mode operation.
• Timezone
Allow select the time zone according to current location of
switch.
•Server #
Provide the NTP IPv4 or IPv6 address of this switch. IPv6 address
is in 128-bit records represented as eight fields of up to four
hexadecimal digits with a colon separate each field (:). For
example, ‘fae0::013:4fefe:dea4:34d4’. The symbol '::' is a special
syntax that can be used as a shorthand way of representing
multiple 16-bit groups of contiguous zeros; but it can only appear
once. It also used a following legally IPv4 address. For example,
'::192.1.2.34'.
IFS NS3502-8P-2S User Manual
60
Buttons
: Click to save changes.
: Click to undo any changes made locally and revert to previously saved values.
4.2.7 UPnP
Configure UPnP on this page.
UPnP is an acronym for Universal Plug and Play. The goals of UPnP are to allow devices to connect
seamlessly and to simplify the implementation of networks in the home (data sharing,
communications, and entertainment) and in corporate environments for simplified installation of
computer components. The UPnP Configuration screen in Figure 4-2-9appears.
Figure 4-2-9: UPnPConfiguration page screenshot
61
The page includes the following fields:
Object Description
IFS NS3502-8P-2S User Manual
• Mode
• TTL
• Advertising
Duration
Indicates the UPnP operation mode. Possible modes are:
Enabled: Enable UPnP mode operation.
Disabled: Disable UPnP mode operation.
When the mode is enabled, two ACEs are added automatically to
trap UPNP related packets to CPU. The ACEs are automatically
removed when the mode is disabled.
The TTL value is used by UPnP to send SSDP advertisement
messages. Valid values are in the range 1 to 255.
The duration, carried in SSDP packets, is used to inform a control
point or control points how often it or they should receive a SSDP
advertisement message from this switch. If a control point does
not receive any message within the duration, it will think that the
switch no longer exists. Due to the unreliable nature of UDP, in
the standard it is recommended that such refreshing of
advertisements to be done at less than one-half of the
advertising duration. In the implementation, the switch sends
SSDP messages periodically at the interval one-half of the
advertising duration minus 30 seconds. Valid values are in the
range 100 to 86400.
62
Buttons
IFS NS3502-8P-2S User Manual
: Click to save changes.
: Click to undo any changes made locally and revert to previously saved values.
Figure 4-2-10: UPnPdevices shows on Windows My Network Places
4.2.8 DHCP Relay
Configure DHCP Relay on this page. DHCP Relay is used to forward and to transfer DHCP messages
between the clients and the server when they are not on the same subnet domain.
The DHCP option 82 enables a DHCP relay agent to insert specific information into a DHCP request
packets when forwarding client DHCP packets to a DHCP server and remove the specific information
from a DHCP reply packets when forwarding server DHCP packets to a DHCP client. The DHCP server
can use this information to implement IP address or other assignment policies. Specifically the option
works by setting two sub-options:
Circuit ID (option 1)
Remote ID (option2).
IFS NS3502-8P-2S User Manual
63
The Circuit ID sub-option is supposed to include information specific to which circuit the request came
in on.
The Remote ID sub-option was designed to carry information relating to the remote host end of the
circuit.
The definition of Circuit ID in the switch is 4 bytes in length and the format is "vlan_id" "module_id"
"port_no". The parameter of "vlan_id" is the first two bytes represent the VLAN ID. The parameter of
"module_id" is the third byte for the module ID (in standalone switch it always equal 0, in stackable
switch it means switch ID). The parameter of "port_no" is the fourth byte and it means the port
number.
The Remote ID is 6 bytes in length, and the value is equal the DHCP relay agent’s MAC address. The
DHCP Relay Configuration screen in Figure 4-2-11 appears.
The packets number that relayed from client to server.
The packets number has errors sending packets to clients.
The packets number that received packets from server.
The packets number that received packets without agent
information options.
The packets number that received packets which the Circuit ID
option was missing.
The packets number that received packets which Remote ID
option was missing.
The packets number that the Circuit ID option did not match
known circuit ID.
The packets number that the Remote ID option did not match
known Remote ID.
Object Description
• Transmit to Client
• Transmit Error
• Receive form Client
• Receive Agent
Option
• Replace Agent
Option
• Keep Agent Option
The packets number that relayed packets from server to client.
The packets number that error sending packets to servers.
The packets number that received packets from server.
The packets number that received packets with relay agent
information option.
The packets number that replaced received packets with relay
agent information option.
The packets number that keep received packets with relay agent
information option.
• Drop Agent Option
The packets number that dropped received packets with relay
agent information option.
Buttons
Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals.
: Click to refresh the page; any changes made locally will be undone.
: Clear all statistics.
IFS NS3502-8P-2S User Manual
66
in this page, please download Adobe
4.2.10 CPU Load
This page displays the CPU load, using a SVG graph.
The load is measured as averaged over the last 100ms, 1sec and 10 seconds intervals. The last 120
samples are graphed, and the last numbers are displayed as text as well.
In order to display the SVG graph, your browser must support the SVG format. Consult the SVG Wiki for
more information on browser support. Specifically, at the time of writing, Microsoft Internet Explorer
will need to have a plugin installed to support SVG. The CPU Load screen in Figure 4-2-13appears.
Figure 4-2-13: CPU Load page screenshot
Buttons
Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals.
If your browser cannot display anything
SVG tool and install it in your computer.
IFS NS3502-8P-2S User Manual
67
4.2.11 System Log
The switch system log information is provided here. The System Log screen in Figure 4-2-14appears.
Figure 4-2-14: System Log page screenshot
The page includes the following fields:
Object Description
• ID
• Level
The ID (>= 1) of the system log entry.
The level of the system log entry. The following level types are
supported:
Info: Information level of the system log.
Warning: Warning level of the system log.
Error: Error level of the system log.
All: All levels.
• Time
• Message
The time of the system log entry.
The message of the system log entry.
Buttons
Auto-refresh : Check this box to enable an automatic refresh of the page at regular intervals.
: Click to refresh the page; any changes made locally will be undone.
: Clear all statistics.
: Updates the system log entries, starting from the first available entry ID.
IFS NS3502-8P-2S User Manual
68
: Updates the system log entries, ending at the last entry currently displayed.
: Updates the system log entries, starting from the last entry currently displayed.
: Updates the system log entries, ending at the last available entry ID.
4.2.12 Detailed Log
The switch system detailed log information is provided here. The Detailed Log screen in Figure 4-2-15
appears.
Figure 4-2-15: Detailed Log page screenshot
The page includes the following fields:
Object Description
• ID
• Message
The ID (>= 1) of the system log entry.
The message of the system log entry.
Buttons
: Click to refresh the page; any changes made locally will be undone.
: Updates the system log entries, starting from the first available entry ID.
: Updates the system log entries, ending at the last entry currently displayed.
: Updates the system log entries, starting from the last entry currently displayed.
: Updates the system log entries, ending at the last available entry ID.
IFS NS3502-8P-2S User Manual
69
4.2.13 Remote Syslog
Configure remote syslog on this page. The Remote Syslog screen in Figure 4-2-16 appears.
Figure 4-2-16: Remote Syslog page screenshot
The page includes the following fields:
Object Description
• Mode
• Syslog Server IP
• Syslog Level
Indicates the server mode operation. When the mode operation
is enabled, the syslog message will send out to syslog server. The
syslog protocol is based on UDP communication and received on
UDP port 514 and the syslog server will not send
acknowledgments back sender since UDP is a connectionless
protocol and it does not provide acknowledgments. The syslog
packet will always send out even if the syslog server does not
exist. Possible modes are:
Enabled: Enable remote syslog mode operation.
Disabled: Disable remote syslog mode operation.
Indicates the IPv4 host address of syslog server. If the switch
provide DNS feature, it also can be a host name.
Indicates what kind of message will send to syslog server.
Possible modes are:
Info: Send information, warnings and errors.
Warning: Send warnings and errors.
Error: Send errors.
Buttons
: Click to save changes.
: Click to undo any changes made locally and revert to previously saved values.
IFS NS3502-8P-2S User Manual
70
Object
Description
• SMTP Mode
Enabled
will refer it to send an E-mail for alarm noticing
• SMTP Server
• SMTP Port
• SMTP
Enabled
enable SMTP authentication.
• Authentication
User Name
• Authentication
Password
4.2.14 SMTP Configuration
Configure SMTP Configuration on this page. The SMTP Configuration screen in Figure 4-2-17 appears.
Figure 4-2-17: SMTP Configuration Page Screenshot
The page includes the following fields:
It is for you to enable SMTP mode function. This mode offers you
to configure SMTP server and SMTP account information, system
It is for you to set up a specify SMTP server DNS name or IP
address. If it is inputted a DNS name, please remember to input
DNS server IP address at IP configuration page.
It is for you to input the SMTP server port number. As default is
"25".
Authentication
As usual SMTP server is denied to relay a mail from a different
domain, so you have to enable this option and input your mail
account and password for SMTP sever authorizing to forward a
mail from different domain. For example, you want a SMTP
server which located on mail.123.com send a mail to
mail.456.net.com.
If you want to send the mail to a SMTP server which located on
the same domain or the same SMTP server, you don't have to
It is for you to input your mail account name.
It is for you to input your mail account password.
71
• E-mail From
• E-mail Subject
It is for you to input mail subject.
• E-mail 1 To
• E-mail 2 To
It is for you to input secondary recipient mail address.
Buttons
: Click to test SMTP server address.
: Click to save changes.
: Click to undo any changes made locally and revert to previously saved values.
IFS NS3502-8P-2S User Manual
It is for you to input who send this mail.
It is for you to input recipient mail address.
4.2.15 LED Power Reduction
The LEDs power consumption can be reduced by lowering the LEDs intensity. LEDs intensity could for
example be lowered during night time, or they could be turn completely off. It is possible to configure
24 different hours of the day, at where the LEDs intensity should be set. The LED Power Reduction
screen in Figure 4-2-18 appears.
Figure 4-2-18: LED Power Reduction page screenshot
72
The page includes the following fields:
Object Description
IFS NS3502-8P-2S User Manual
Buttons
• Time
• Intensity
• Maintenance Time
: Click to add time.
: Click to save changes.
The time at which the LEDs intensity shall be set.
The LEDs intensity (100% = Full power, 0% = LED off).
When a network administrator does maintenance of the switch
(e.g. adding or moving users) he might want to have full LED
intensity during the maintenance period. Therefore it is possible
to specify that the LEDs shall use full intensity a specific period of
time. Maintenance Time is the number of seconds that the LEDs
will have full intensity after either a port has changed link state,
or the LED pushbutton has been pushed.
: Click to undo any changes made locally and revert to previously saved values.
4.2.16 EEE Power Reduction
This page allows the user to inspect and configure the current EEE port settings.
EEE is a power saving option that reduces the power usage when there is very low traffic utilization (or
no traffic).
EEE works by powering down circuits when there is no traffic. When a port gets data to be transmitted
all circuits are powered up. The time it takes to power up the circuits is named wakeup time. The
default wakeup time is 17 us for 1Gbit links and 30 us for other link speeds. EEE devices must agree
upon the value of the wakeup time in order to make sure that both the receiving and transmitting
device has all circuits powered up when traffic is transmitted. The devices can exchange information
about the devices wakeup time using the LLDP protocol.
For maximizing the power saving, the circuit isn't started at once transmit data are ready for a port, but
is instead queued until 3000 bytes of data are ready to be transmitted. For not introducing a large
delay in case that data less than 3000 bytes shall be transmitted, data are always transmitted after 48
us, giving a maximum latency of 48 us + the wakeup time.
If desired it is possible to minimize the latency for specific frames, by mapping the frames to a specific
queue (done with QOS), and then mark the queue as an urgent queue. When an urgent queue gets
data to be transmitted, the circuits will be powered up at once and the latency will be reduced to the
wakeup time.
73
The EEE Power Reduction screen in Figure 4-2-19 appears.
IFS NS3502-8P-2S User Manual
Figure 4-2-19: EEE Configuration page screenshot
The page includes the following fields:
Object Description
• Port
• EEE Enable
• EEE Urgent Queues
The switch port number of the logical EEE port.
Controls whether EEE is enabled for this switch port.
Queues set will activate transmission of frames as soon as any
data is available. Otherwise the queue will postpone the
transmission until 3000 bytes are ready to be transmitted.
Buttons
: Click to save changes.
: Click to undo any changes made locally and revert to previously saved values.
4.2.17 Thermal Protection
This page allows the user to inspect and configure the current setting for controlling thermal
protection. Thermal protection is used to protect the chip from getting overheated.
When the temperature exceeds the configured thermal protection temperature, ports will be turned
off in order to decrease the power consumption. It is possible to arrange the ports with different
priorities. Each priority can be given a temperature at which the corresponding ports shall be turned
off. The Thermal Protection screen in Figure 4-2-20appears.
DO NOT Power OFF the Managed Switch until the update progress is
complete.
Do not quit the Firmware Upgrade page without press the “OK” button -
after the image is loaded. Or the system won’t apply the new firmware.
User has to repeat the firmware upgrade processes again.
4.2.20 Configuration Backup
This function allows backup and reload the current configuration of the Managed Switch to the local
management station. The Configuration Backup screen in Figure 4-2-24 appears.
IFS NS3502-8P-2S User Manual
77
<?xml version="1.0"?> and <configuration>. These tags are mandatory and must be present
tform>, <global> and <swit ch>. T he platfo rm secti on mu st be the fir st secti on tag and t hi s
Figure 4-2-24: Configuration Save page screenshot
You can save/view or load the switch configuration. The configuration file is in XML format with a
hierarchy of tags:
Header tags:
at the beginning of the file.
Section tags: <pla
section must include the correct platform ID and version. The global section is optional and
includes configuration which is not related to specific switch ports. The switch section is
optional and includes configuration which is related to specific switch ports.
Module tags: <ip>, <mac>, <port> etc. These tags identify a module controlling specific parts of the
configuration.
Group tags: <port_table>, <vlan_table> etc. These tags identify a group of parameters, typically a table.
Parameter tags: <mode>, <entry> etc. These tags identify parameters for the specific section, module and
group. The <entry> tag is used for table entries.
Configuration parameters are represented as attribute values. When saving the configuration from the
switch, the entire configuration including syntax descriptions is included in the file. The file may then
be modified using an editor and loaded to a switch.
The examples below shows a small configuration file only including configuration of the MAC address
age time and the learning mode per port. When loading this file, only the included parameters will be
changed. This means that the age time will be set to 200 and the learn mode will be set to automatic.
Save Configuration
1. Press the “Save Configuration” button to save the current configuration in manager workstation.
The following screens in Figure 4-2-25 & 4-2-26 appear
IFS NS3502-8P-2S User Manual
78
Figure 4-2-25: File Download screen
2. Chose the file save path in management workstation.
Figure 4-2-26: File save screen
IFS NS3502-8P-2S User Manual
79
4.2.21 Configuration Upload
This function allows backup and reload the current configuration of the Managed Switch to the local
management station. The Configuration Upload screen in Figure 4-2-27 appears.